@sakupa/mcp 0.6.0 → 0.7.1

package/dist/bin.js

@@ -7,6 +7,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 var SERVICE_DOMAIN = "sakupa.com";
 var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
+var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var FREE_SITE_TTL_HOURS = 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -127,7 +128,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.6.0";
+var SAKUPA_MCP_VERSION = "0.7.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -452,18 +453,6 @@ async function sha256Hex(bytes) {
   return hex;
 }
 
-// ../core/dist/domain/billing-operation.js
-var BILLING_MUTATION_LIMITS = {
-  globalPerTenMinutes: 20,
-  sitePerTenMinutes: 1,
-  perBillingPeriod: 3,
-  maxConcurrency: 2,
-  leaseSeconds: 30,
-  maxConsecutiveFailures: 5,
-  circuitBreakSeconds: 15 * 60,
-  providerTimeoutMs: 1e4
-};
-
 // ../core/dist/dto.js
 var CREDENTIAL_HEADER = "x-sakupa-credential";
 var IDEMPOTENCY_HEADER = "x-sakupa-idempotency-key";
@@ -473,12 +462,31 @@ var MCP_VERSION_HEADER = "x-sakupa-mcp-version";
 var utf8Decoder = new TextDecoder("utf-8", { fatal: false });
 var utf8Encoder = new TextEncoder();
 
-// ../core/dist/services/authorization.js
-var AUTHORIZATION_TTL_MS = 15 * 60 * 1e3;
-
 // ../core/dist/services/subscriptions.js
 var WEBHOOK_PROCESSING_LEASE_MS = 5 * 60 * 1e3;
 
+// src/config.ts
+var TEST_API_BASE_URL = "https://api-test.sakupa.com";
+function loadMcpRuntimeConfig(env = process.env, cwd = process.cwd()) {
+  const apiBaseUrl = (env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL).replace(/\/+$/, "");
+  const projectDir = env["SAKUPA_PROJECT_DIR"] ?? cwd;
+  const testAccessToken = env["SAKUPA_TEST_ACCESS_TOKEN"]?.trim() ?? "";
+  if (apiBaseUrl === TEST_API_BASE_URL) {
+    if (testAccessToken.length === 0) {
+      throw new Error(
+        "The Sakupa Test API requires SAKUPA_TEST_ACCESS_TOKEN. Anonymous Test access is disabled."
+      );
+    }
+    return { apiBaseUrl, projectDir, testAccessToken };
+  }
+  if (testAccessToken.length > 0) {
+    throw new Error(
+      `SAKUPA_TEST_ACCESS_TOKEN may only be used with ${TEST_API_BASE_URL}. Remove it before connecting to any other API.`
+    );
+  }
+  return { apiBaseUrl, projectDir };
+}
+
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
@@ -574,8 +582,18 @@ var HttpApiClient = class {
       credential
     });
   }
-  async deleteSite(siteId, credential) {
-    await this.call("DELETE", `/v1/sites/${encodeURIComponent(siteId)}`, { credential });
+  async deleteSite(siteId, credential, req) {
+    return this.call("POST", `/v1/sites/${encodeURIComponent(siteId)}/delete`, {
+      credential,
+      body: req
+    });
+  }
+  async previewDeleteSite(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/delete/preview`,
+      { credential, body: req }
+    );
   }
   async bindDomain(credential, req) {
     return this.call("POST", "/v1/domains/bind", { credential, body: req });
@@ -587,6 +605,20 @@ var HttpApiClient = class {
       { credential }
     );
   }
+  async unbindDomain(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
+      { credential, body: req }
+    );
+  }
+  async previewUnbindDomain(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
+      { credential, body: req }
+    );
+  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -629,10 +661,10 @@ var HttpApiClient = class {
   async getBillingPlanCatalog() {
     return this.call("GET", "/v1/billing/plans");
   }
-  async manageSubscription(siteId, credential, req) {
+  async changeSubscriptionPlan(credential, req) {
     return this.call(
       "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/billing/manage`,
+      `/v1/sites/${encodeURIComponent(req.siteId)}/billing/plan-change`,
       { credential, body: req }
     );
   }
@@ -1130,6 +1162,12 @@ function writeSiteFile(projectDir, file) {
   } catch {
   }
 }
+function deleteSiteFile(projectDir) {
+  const path = siteFilePath(projectDir);
+  if (existsSync(path)) {
+    rmSync(path, { force: true });
+  }
+}
 function isInsideGitRepo(projectDir) {
   let dir = projectDir;
   for (; ; ) {
@@ -1202,14 +1240,32 @@ function requireSiteFile(ctx) {
 }
 function toolError(e) {
   const errorCode = isSakupaError(e) ? e.code : "internal";
-  const retryable = false;
-  const safeSummary = errorCode === "not_found" ? "\u6240\u9700\u7684\u672C\u5730\u9879\u76EE\u7ED1\u5B9A\u6216\u8D44\u6E90\u4E0D\u53EF\u7528\uFF1B\u5982\u679C\u672C\u5730\u6CA1\u6709 .sakupa/site.json\uFF0C\u8BF7\u5148\u8FD0\u884C deploy_site first\u3002" : errorCode === "unauthorized" ? "\u5F53\u524D\u64CD\u4F5C\u672A\u901A\u8FC7\u7AD9\u70B9\u6743\u9650\u6821\u9A8C\u3002" : errorCode === "invalid_request" || errorCode === "validation_failed" ? "\u8BF7\u6C42\u53C2\u6570\u6216\u672C\u5730\u9879\u76EE\u68C0\u67E5\u672A\u901A\u8FC7\u3002" : errorCode === "state_conflict" ? "\u8D44\u6E90\u72B6\u6001\u5DF2\u7ECF\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u72B6\u6001\u540E\u518D\u51B3\u5B9A\u4E0B\u4E00\u6B65\u3002" : retryable ? "\u5916\u90E8\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\u6216\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" : "\u64CD\u4F5C\u5931\u8D25\uFF1B\u672A\u8FD4\u56DE\u670D\u52A1\u7AEF\u5185\u90E8\u8BE6\u60C5\u3002";
+  const retryable = errorCode === "rate_limited" || errorCode === "internal";
+  const safeDetailKeys = /* @__PURE__ */ new Set([
+    "retryAfterSeconds",
+    "reasonCode",
+    "currentStatus",
+    "expectedStatus",
+    "minimumVersion",
+    "currentVersion"
+  ]);
+  const rawDetails = isSakupaError(e) && e.details && typeof e.details === "object" ? e.details : void 0;
+  const safeDetails = rawDetails ? Object.fromEntries(
+    Object.entries(rawDetails).filter(
+      ([key, value]) => safeDetailKeys.has(key) && (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+    )
+  ) : void 0;
+  const safeSummary = errorCode === "not_found" ? "\u6240\u9700\u7684\u672C\u5730\u9879\u76EE\u7ED1\u5B9A\u6216\u8D44\u6E90\u4E0D\u53EF\u7528\uFF1B\u5982\u679C\u672C\u5730\u6CA1\u6709 .sakupa/site.json\uFF0C\u8BF7\u5148\u8FD0\u884C deploy_site first\u3002" : errorCode === "unauthorized" ? "\u5F53\u524D\u64CD\u4F5C\u672A\u901A\u8FC7\u7AD9\u70B9\u6743\u9650\u6821\u9A8C\u3002" : errorCode === "invalid_request" || errorCode === "validation_failed" ? "\u8BF7\u6C42\u53C2\u6570\u6216\u672C\u5730\u9879\u76EE\u68C0\u67E5\u672A\u901A\u8FC7\u3002" : errorCode === "state_conflict" ? "\u8D44\u6E90\u72B6\u6001\u5DF2\u7ECF\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u72B6\u6001\u540E\u518D\u51B3\u5B9A\u4E0B\u4E00\u6B65\u3002" : errorCode === "confirmation_required" ? "\u8D44\u6E90\u6216\u8D26\u5355\u72B6\u6001\u5DF2\u53D8\u5316\uFF0C\u65E7\u786E\u8BA4\u5DF2\u5931\u6548\uFF1B\u8BF7\u91CD\u65B0\u9884\u89C8\u540E\u518D\u786E\u8BA4\u3002" : errorCode === "payment_required" ? "\u8BE5\u64CD\u4F5C\u9700\u8981\u6709\u6548\u8BA2\u9605\uFF1B\u8BF7\u5148\u67E5\u8BE2\u8D26\u5355\u72B6\u6001\u3002" : errorCode === "rate_limited" ? "\u8BF7\u6C42\u9891\u7387\u5DF2\u8FBE\u5230\u670D\u52A1\u7AEF\u4E0A\u9650\uFF0C\u8BF7\u6309\u8FD4\u56DE\u7684\u7B49\u5F85\u65F6\u95F4\u540E\u91CD\u8BD5\u3002" : retryable ? "\u5916\u90E8\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\u6216\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" : "\u64CD\u4F5C\u5931\u8D25\uFF1B\u672A\u8FD4\u56DE\u670D\u52A1\u7AEF\u5185\u90E8\u8BE6\u60C5\u3002";
   const result = structuredToolResult({
     schemaVersion: 1,
     outcome: "failed",
     resultCode: `error_${errorCode}`,
     summary: safeSummary,
-    data: { errorCode, retryable },
+    data: {
+      errorCode,
+      retryable,
+      ...safeDetails && Object.keys(safeDetails).length > 0 ? { details: safeDetails } : {}
+    },
     nextActions: []
   });
   return { ...result, isError: true };
@@ -1957,7 +2013,6 @@ Summary: ${res.sanitizedSummary}`,
 // src/tools/billing.ts
 import { z as z3 } from "zod";
 var plan = z3.enum(["water", "personal", "share", "business"]);
-var trigger = z3.enum(["actual_overage", "credential_automation"]);
 function registerBillingTools(server, ctx) {
   server.registerTool(
     "list_billing_plans",
@@ -1984,22 +2039,81 @@ function registerBillingTools(server, ctx) {
     }
   );
   server.registerTool(
-    "manage_subscription",
+    "change_subscription_plan",
+    {
+      description: "Create a Stripe-hosted confirmation link for a manually selected subscription plan. Creating the link does not change billing; only the user can confirm on Stripe.",
+      inputSchema: {
+        targetPlan: plan,
+        operationId: z3.string().min(1)
+      },
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
+    },
+    async (args) => {
+      try {
+        const site = requireSiteFile(ctx);
+        const result = await ctx.client.changeSubscriptionPlan(site.credential, {
+          siteId: site.siteId,
+          targetPlan: args.targetPlan,
+          operationId: args.operationId
+        });
+        return structuredToolResult({
+          schemaVersion: 1,
+          outcome: "waiting_user",
+          resultCode: "stripe_plan_change_confirmation_required",
+          operationId: args.operationId,
+          summary: `\u5DF2\u751F\u6210\u4ECE ${result.currentPlan} \u5230 ${result.targetPlan} \u7684 Stripe \u786E\u8BA4\u94FE\u63A5\uFF1B\u8BA2\u9605\u5C1A\u672A\u53D8\u66F4\u3002`,
+          data: { result },
+          userAction: {
+            type: "open_url",
+            provider: "stripe",
+            url: result.portalUrl,
+            expectedOutcome: "\u7528\u6237\u5728 Stripe \u6258\u7BA1\u9875\u9762\u786E\u8BA4\u540E\uFF0C\u7531 webhook \u66F4\u65B0 Sakupa \u8BA2\u9605\u72B6\u6001"
+          },
+          nextActions: [{ tool: "billing_status", allowed: true }]
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    }
+  );
+}
+
+// src/tools/lifecycle.ts
+import { z as z4 } from "zod";
+var deleteConfirmation = z4.object({
+  siteId: z4.string().min(1),
+  expectedSiteUpdatedAt: z4.string().datetime(),
+  expectedStatus: z4.enum(["active", "expired", "deleted"]),
+  expectedMode: z4.enum(["free", "paid"]),
+  expectedServingMode: z4.enum(["normal", "over_limit_notice", "risk_notice", "stopped"]),
+  expectedShortId: z4.string().optional(),
+  expectedSubscriptionStatus: z4.enum(["incomplete", "active", "past_due", "canceled"]).optional(),
+  expectedPlan: z4.enum(["water", "personal", "share", "business"]).optional(),
+  expectedCancelAtPeriodEnd: z4.boolean().optional(),
+  expectedCurrentPeriodEnd: z4.string().datetime().optional(),
+  expectedLastDeploymentId: z4.string().optional(),
+  expectedBoundHostnames: z4.array(z4.string()),
+  acknowledge: z4.literal("delete_site_and_cancel_renewal")
+});
+var unbindConfirmation = z4.object({
+  siteId: z4.string().min(1),
+  bindingId: z4.string().min(1),
+  expectedBindingUpdatedAt: z4.string().datetime(),
+  expectedBindingStatus: z4.enum(["provisioning", "active"]),
+  apexDomain: z4.string().min(1),
+  expectedBoundHostnames: z4.array(z4.string()),
+  acknowledge: z4.literal("unbind_domain_and_remove_custom_hostnames")
+});
+function registerLifecycleTools(server, ctx) {
+  server.registerTool(
+    "delete_site",
     {
-      description: "Manage this site subscription through explicit actions. open_plan_change returns a Stripe-hosted confirmation URL. create_automation_authorization returns a short-lived Sakupa authorization URL binding the exact cap and triggers. disable_automation is immediate and owner-authorized. request_authorized_upgrade executes only under an existing exact grant, fresh usage snapshot, catalog version and server-side safety gates.",
+      description: "Preview or execute deletion of this Sakupa site. Execution requires an exact server-validated confirmation bound to the current site state.",
       inputSchema: {
-        action: z3.enum([
-          "open_plan_change",
-          "create_automation_authorization",
-          "disable_automation",
-          "request_authorized_upgrade"
-        ]),
-        operationId: z3.string().min(1).describe("Stable idempotency key chosen by the caller."),
-        targetPlan: plan.optional(),
-        maxPlan: plan.optional(),
-        allowedTriggers: z3.array(trigger).min(1).optional(),
-        observedSnapshotId: z3.string().optional(),
-        observedCatalogVersion: z3.string().optional()
+        action: z4.enum(["preview", "confirm"]),
+        operationId: z4.string().min(1).optional(),
+        confirmation: deleteConfirmation.optional()
       },
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
@@ -2007,71 +2121,92 @@ function registerBillingTools(server, ctx) {
     async (args) => {
       try {
         const site = requireSiteFile(ctx);
-        let request;
-        if (args.action === "open_plan_change") {
-          if (!args.targetPlan) {
-            throw new SakupaError("invalid_request", "targetPlan is required for open_plan_change");
-          }
-          request = {
-            action: args.action,
-            targetPlan: args.targetPlan,
+        if (!args.operationId) {
+          throw new Error("operationId is required for delete_site");
+        }
+        if (args.action === "preview") {
+          const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
             operationId: args.operationId
-          };
-        } else if (args.action === "create_automation_authorization") {
-          if (!args.maxPlan || !args.allowedTriggers) {
-            throw new SakupaError(
-              "invalid_request",
-              "maxPlan and allowedTriggers are required for authorization"
-            );
-          }
-          request = {
-            action: args.action,
-            maxPlan: args.maxPlan,
-            allowedTriggers: args.allowedTriggers,
+          });
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "waiting_user",
+            resultCode: "delete_site_confirmation_required",
+            operationId: args.operationId,
+            summary: "\u5DF2\u8FD4\u56DE\u4E0E\u5F53\u524D\u7AD9\u70B9\u53CA\u8D26\u5355\u72B6\u6001\u7ED1\u5B9A\u7684\u5220\u9664\u540E\u679C\uFF1B\u786E\u8BA4\u540E\u5185\u5BB9\u548C\u6C38\u4E45\u5730\u5740\u4E0D\u53EF\u6062\u590D\u3002",
+            data: { preview },
+            nextActions: [
+              { tool: "delete_site", allowed: true, reasonCode: "exact_confirmation_required" }
+            ]
+          });
+        }
+        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+          operationId: args.operationId,
+          confirmation: args.confirmation
+        });
+        deleteSiteFile(ctx.projectDir);
+        return structuredToolResult({
+          schemaVersion: 1,
+          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
+          resultCode: "site_deleted",
+          operationId: args.operationId,
+          summary: "\u7AD9\u70B9\u5DF2\u5220\u9664\uFF0C\u672C\u5730\u7BA1\u7406\u51ED\u8BC1\u6587\u4EF6\u5DF2\u79FB\u9664\u3002",
+          data: { result },
+          nextActions: []
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    }
+  );
+  server.registerTool(
+    "unbind_domain",
+    {
+      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
+      inputSchema: {
+        action: z4.enum(["preview", "confirm"]),
+        operationId: z4.string().min(1).optional(),
+        confirmation: unbindConfirmation.optional()
+      },
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async (args) => {
+      try {
+        const site = requireSiteFile(ctx);
+        if (!args.operationId) throw new Error("operationId is required for unbind_domain");
+        if (args.action === "preview") {
+          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
             operationId: args.operationId
-          };
-        } else if (args.action === "disable_automation") {
-          request = { action: args.action, operationId: args.operationId };
-        } else {
-          if (!args.targetPlan) {
-            throw new SakupaError(
-              "invalid_request",
-              "targetPlan is required for request_authorized_upgrade"
-            );
-          }
-          request = {
-            action: args.action,
+          });
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "waiting_user",
+            resultCode: "unbind_domain_confirmation_required",
             operationId: args.operationId,
-            targetPlan: args.targetPlan,
-            trigger: "credential_automation",
-            ...args.observedSnapshotId ? { observedSnapshotId: args.observedSnapshotId } : {},
-            ...args.observedCatalogVersion ? { observedCatalogVersion: args.observedCatalogVersion } : {}
-          };
+            summary: "\u5DF2\u8FD4\u56DE\u7CBE\u786E\u7ED1\u5B9A\u5FEB\u7167\uFF1B\u89E3\u7ED1\u53EA\u79FB\u9664\u81EA\u5B9A\u4E49\u57DF\u540D\uFF0C\u8BA2\u9605\u3001\u5185\u5BB9\u548C\u6C38\u4E45\u5730\u5740\u4FDD\u6301\u4E0D\u53D8\u3002",
+            data: { preview },
+            nextActions: [
+              { tool: "unbind_domain", allowed: true, reasonCode: "exact_confirmation_required" }
+            ]
+          });
         }
-        const result = await ctx.client.manageSubscription(site.siteId, site.credential, request);
-        const portalUrl = "portalUrl" in result ? result.portalUrl : void 0;
-        const authorizationUrl = "authorizationUrl" in result ? result.authorizationUrl : void 0;
-        const executionOutcome = "outcome" in result ? result.outcome : void 0;
-        const outcome = portalUrl || authorizationUrl ? "waiting_user" : executionOutcome === "pending_provider" ? "pending_provider" : executionOutcome === "blocked" ? "blocked" : "completed";
-        const resultCode = "resultCode" in result ? result.resultCode : portalUrl ? "stripe_plan_change_confirmation_required" : authorizationUrl ? "automation_authorization_required" : args.action === "disable_automation" ? "automation_disabled" : "subscription_action_completed";
-        const url = portalUrl ?? authorizationUrl;
+        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
+          operationId: args.operationId,
+          confirmation: args.confirmation
+        });
+        const { boundDomain: _removed, ...remaining } = site;
+        writeSiteFile(ctx.projectDir, remaining);
         return structuredToolResult({
           schemaVersion: 1,
-          outcome,
-          resultCode,
+          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
+          resultCode: "domain_unbound",
           operationId: args.operationId,
-          summary: url ? "\u5DF2\u521B\u5EFA\u77ED\u65F6\u6548\u6258\u7BA1\u786E\u8BA4\u94FE\u63A5\uFF1B\u5F53\u524D\u8BA2\u9605\u5C1A\u672A\u56E0\u521B\u5EFA\u94FE\u63A5\u800C\u6539\u53D8\u3002" : `\u8BA2\u9605\u52A8\u4F5C\u7ED3\u679C\uFF1A${resultCode}`,
-          data: { action: args.action, result },
-          ...url ? {
-            userAction: {
-              type: "open_url",
-              provider: portalUrl ? "stripe" : "sakupa",
-              url,
-              ..."expiresAt" in result && typeof result.expiresAt === "string" ? { expiresAt: result.expiresAt } : {},
-              expectedOutcome: portalUrl ? "\u7528\u6237\u5728 Stripe \u6258\u7BA1\u9875\u9762\u786E\u8BA4\u540E\uFF0C\u7531 webhook \u66F4\u65B0 Sakupa \u72B6\u6001" : "\u7528\u6237\u5728 Sakupa \u77ED\u65F6\u6548\u9875\u9762\u786E\u8BA4\u7CBE\u786E\u81EA\u52A8\u5347\u7EA7\u6388\u6743"
-            }
-          } : {},
-          nextActions: [{ tool: "billing_status", allowed: true }]
+          summary: "\u81EA\u5B9A\u4E49\u57DF\u540D\u5DF2\u89E3\u7ED1\uFF1B\u8BA2\u9605\u3001\u5DF2\u90E8\u7F72\u5185\u5BB9\u548C\u6C38\u4E45 Sakupa \u5730\u5740\u672A\u53D8\u3002",
+          data: { result },
+          nextActions: [{ tool: "site_status", allowed: true }]
         });
       } catch (error) {
         return toolError(error);
@@ -2083,8 +2218,23 @@ function registerBillingTools(server, ctx) {
 // src/transport.ts
 var FetchTransport = class {
   baseUrl;
-  constructor(baseUrl) {
+  testAccessToken;
+  constructor(baseUrl, options = {}) {
     this.baseUrl = baseUrl.replace(/\/+$/, "");
+    if (options.testAccessToken && this.baseUrl !== TEST_API_BASE_URL) {
+      throw new Error(`Test access credentials may only be sent to ${TEST_API_BASE_URL}.`);
+    }
+    this.testAccessToken = options.testAccessToken;
+  }
+  testAccessHeadersFor(_url) {
+    if (!this.testAccessToken) return {};
+    let target;
+    try {
+      target = new URL(_url);
+    } catch {
+      return {};
+    }
+    return target.origin === TEST_API_BASE_URL ? { [TEST_ACCESS_HEADER]: this.testAccessToken } : {};
   }
   async request(req) {
     let url = `${this.baseUrl}${req.path}`;
@@ -2095,7 +2245,8 @@ var FetchTransport = class {
       accept: "application/json",
       [MCP_VERSION_HEADER]: MCP_VERSION,
       ...req.body !== void 0 ? { "content-type": "application/json" } : {},
-      ...req.headers
+      ...req.headers,
+      ...this.testAccessHeadersFor(url)
     };
     const res = await fetch(url, {
       method: req.method,
@@ -2121,7 +2272,10 @@ var FetchTransport = class {
     }
     const res = await fetch(target.url, {
       method: target.method,
-      headers: target.headers,
+      headers: {
+        ...target.headers,
+        ...this.testAccessHeadersFor(target.url)
+      },
       body
     });
     if (!res.ok) {
@@ -2147,13 +2301,13 @@ Workflow:
 3. To make the site PERMANENT, subscribe it to a monthly hosting plan (subscribe_site ->
    Stripe-hosted checkout; water/personal/share/business). Paying makes the
    {shortId}.sakupa.com URL permanent \u2014 that is what payment buys. Usage over the chosen plan
-   shows an over-limit notice by default. Automatic upgrades require a separate, bounded,
-   one-time Sakupa authorization and can never exceed the user-approved plan cap.
+   shows an over-limit notice by default. An external AI may periodically query usage and
+   recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind_domain): an included extra
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing_status,
-   manage_subscription, manage_billing and recover_domain_site manage the paid lifecycle. Manual plan
-   changes are confirmed only on Stripe Customer Portal and synchronized by Stripe webhook.
+   billing_status, change_subscription_plan, manage_billing and recover_domain_site manage the paid
+   lifecycle. Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
 
@@ -2167,7 +2321,9 @@ Safety boundaries:
   Stripe's public no-code portal login, where the customer verifies the checkout email with a
   Stripe one-time passcode; it never restores site authority.`;
 function createSakupaMcpServer(opts) {
-  const client = opts.client ?? new HttpApiClient(new FetchTransport(opts.apiBaseUrl));
+  const client = opts.client ?? new HttpApiClient(
+    new FetchTransport(opts.apiBaseUrl, { testAccessToken: opts.testAccessToken })
+  );
   const server = new McpServer(
     { name: "sakupa", version: MCP_VERSION },
     { instructions: INSTRUCTIONS }
@@ -2182,18 +2338,22 @@ function createSakupaMcpServer(opts) {
     projectDir: opts.projectDir,
     apiBaseUrl: opts.apiBaseUrl
   });
+  registerLifecycleTools(server, {
+    client,
+    projectDir: opts.projectDir,
+    apiBaseUrl: opts.apiBaseUrl
+  });
   return server;
 }
 
 // src/bin.ts
 async function main() {
-  const apiBaseUrl = process.env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL;
-  const projectDir = process.env["SAKUPA_PROJECT_DIR"] ?? process.cwd();
-  const server = createSakupaMcpServer({ apiBaseUrl, projectDir });
+  const config = loadMcpRuntimeConfig();
+  const server = createSakupaMcpServer(config);
   const transport = new StdioServerTransport();
   await server.connect(transport);
   console.error(
-    `[sakupa-mcp] v${MCP_VERSION} connected (api: ${apiBaseUrl}, project: ${projectDir})`
+    `[sakupa-mcp] v${MCP_VERSION} connected (api: ${config.apiBaseUrl}, project: ${config.projectDir})`
   );
 }
 main().catch((err) => {

package/dist/index.js

@@ -1,6 +1,8 @@
 // ../core/dist/domain/constants.js
 var SERVICE_DOMAIN = "sakupa.com";
+var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
+var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var FREE_SITE_TTL_HOURS = 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -121,7 +123,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.6.0";
+var SAKUPA_MCP_VERSION = "0.7.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -446,18 +448,6 @@ async function sha256Hex(bytes) {
   return hex;
 }
 
-// ../core/dist/domain/billing-operation.js
-var BILLING_MUTATION_LIMITS = {
-  globalPerTenMinutes: 20,
-  sitePerTenMinutes: 1,
-  perBillingPeriod: 3,
-  maxConcurrency: 2,
-  leaseSeconds: 30,
-  maxConsecutiveFailures: 5,
-  circuitBreakSeconds: 15 * 60,
-  providerTimeoutMs: 1e4
-};
-
 // ../core/dist/dto.js
 var CREDENTIAL_HEADER = "x-sakupa-credential";
 var IDEMPOTENCY_HEADER = "x-sakupa-idempotency-key";
@@ -467,9 +457,6 @@ var MCP_VERSION_HEADER = "x-sakupa-mcp-version";
 var utf8Decoder = new TextDecoder("utf-8", { fatal: false });
 var utf8Encoder = new TextEncoder();
 
-// ../core/dist/services/authorization.js
-var AUTHORIZATION_TTL_MS = 15 * 60 * 1e3;
-
 // ../core/dist/services/subscriptions.js
 var WEBHOOK_PROCESSING_LEASE_MS = 5 * 60 * 1e3;
 
@@ -477,11 +464,48 @@ var WEBHOOK_PROCESSING_LEASE_MS = 5 * 60 * 1e3;
 var MCP_VERSION = SAKUPA_MCP_VERSION;
 var CLIENT_TYPE = "sakupa-mcp";
 
+// src/config.ts
+var TEST_API_BASE_URL = "https://api-test.sakupa.com";
+function loadMcpRuntimeConfig(env = process.env, cwd = process.cwd()) {
+  const apiBaseUrl = (env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL).replace(/\/+$/, "");
+  const projectDir = env["SAKUPA_PROJECT_DIR"] ?? cwd;
+  const testAccessToken = env["SAKUPA_TEST_ACCESS_TOKEN"]?.trim() ?? "";
+  if (apiBaseUrl === TEST_API_BASE_URL) {
+    if (testAccessToken.length === 0) {
+      throw new Error(
+        "The Sakupa Test API requires SAKUPA_TEST_ACCESS_TOKEN. Anonymous Test access is disabled."
+      );
+    }
+    return { apiBaseUrl, projectDir, testAccessToken };
+  }
+  if (testAccessToken.length > 0) {
+    throw new Error(
+      `SAKUPA_TEST_ACCESS_TOKEN may only be used with ${TEST_API_BASE_URL}. Remove it before connecting to any other API.`
+    );
+  }
+  return { apiBaseUrl, projectDir };
+}
+
 // src/transport.ts
 var FetchTransport = class {
   baseUrl;
-  constructor(baseUrl) {
+  testAccessToken;
+  constructor(baseUrl, options = {}) {
     this.baseUrl = baseUrl.replace(/\/+$/, "");
+    if (options.testAccessToken && this.baseUrl !== TEST_API_BASE_URL) {
+      throw new Error(`Test access credentials may only be sent to ${TEST_API_BASE_URL}.`);
+    }
+    this.testAccessToken = options.testAccessToken;
+  }
+  testAccessHeadersFor(_url) {
+    if (!this.testAccessToken) return {};
+    let target;
+    try {
+      target = new URL(_url);
+    } catch {
+      return {};
+    }
+    return target.origin === TEST_API_BASE_URL ? { [TEST_ACCESS_HEADER]: this.testAccessToken } : {};
   }
   async request(req) {
     let url = `${this.baseUrl}${req.path}`;
@@ -492,7 +516,8 @@ var FetchTransport = class {
       accept: "application/json",
       [MCP_VERSION_HEADER]: MCP_VERSION,
       ...req.body !== void 0 ? { "content-type": "application/json" } : {},
-      ...req.headers
+      ...req.headers,
+      ...this.testAccessHeadersFor(url)
     };
     const res = await fetch(url, {
       method: req.method,
@@ -518,7 +543,10 @@ var FetchTransport = class {
     }
     const res = await fetch(target.url, {
       method: target.method,
-      headers: target.headers,
+      headers: {
+        ...target.headers,
+        ...this.testAccessHeadersFor(target.url)
+      },
       body
     });
     if (!res.ok) {
@@ -622,8 +650,18 @@ var HttpApiClient = class {
       credential
     });
   }
-  async deleteSite(siteId, credential) {
-    await this.call("DELETE", `/v1/sites/${encodeURIComponent(siteId)}`, { credential });
+  async deleteSite(siteId, credential, req) {
+    return this.call("POST", `/v1/sites/${encodeURIComponent(siteId)}/delete`, {
+      credential,
+      body: req
+    });
+  }
+  async previewDeleteSite(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/delete/preview`,
+      { credential, body: req }
+    );
   }
   async bindDomain(credential, req) {
     return this.call("POST", "/v1/domains/bind", { credential, body: req });
@@ -635,6 +673,20 @@ var HttpApiClient = class {
       { credential }
     );
   }
+  async unbindDomain(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
+      { credential, body: req }
+    );
+  }
+  async previewUnbindDomain(siteId, credential, req) {
+    return this.call(
+      "POST",
+      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
+      { credential, body: req }
+    );
+  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -677,10 +729,10 @@ var HttpApiClient = class {
   async getBillingPlanCatalog() {
     return this.call("GET", "/v1/billing/plans");
   }
-  async manageSubscription(siteId, credential, req) {
+  async changeSubscriptionPlan(credential, req) {
     return this.call(
       "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/billing/manage`,
+      `/v1/sites/${encodeURIComponent(req.siteId)}/billing/plan-change`,
       { credential, body: req }
     );
   }
@@ -1246,14 +1298,32 @@ function requireSiteFile(ctx) {
 }
 function toolError(e) {
   const errorCode = isSakupaError(e) ? e.code : "internal";
-  const retryable = false;
-  const safeSummary = errorCode === "not_found" ? "\u6240\u9700\u7684\u672C\u5730\u9879\u76EE\u7ED1\u5B9A\u6216\u8D44\u6E90\u4E0D\u53EF\u7528\uFF1B\u5982\u679C\u672C\u5730\u6CA1\u6709 .sakupa/site.json\uFF0C\u8BF7\u5148\u8FD0\u884C deploy_site first\u3002" : errorCode === "unauthorized" ? "\u5F53\u524D\u64CD\u4F5C\u672A\u901A\u8FC7\u7AD9\u70B9\u6743\u9650\u6821\u9A8C\u3002" : errorCode === "invalid_request" || errorCode === "validation_failed" ? "\u8BF7\u6C42\u53C2\u6570\u6216\u672C\u5730\u9879\u76EE\u68C0\u67E5\u672A\u901A\u8FC7\u3002" : errorCode === "state_conflict" ? "\u8D44\u6E90\u72B6\u6001\u5DF2\u7ECF\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u72B6\u6001\u540E\u518D\u51B3\u5B9A\u4E0B\u4E00\u6B65\u3002" : retryable ? "\u5916\u90E8\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\u6216\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" : "\u64CD\u4F5C\u5931\u8D25\uFF1B\u672A\u8FD4\u56DE\u670D\u52A1\u7AEF\u5185\u90E8\u8BE6\u60C5\u3002";
+  const retryable = errorCode === "rate_limited" || errorCode === "internal";
+  const safeDetailKeys = /* @__PURE__ */ new Set([
+    "retryAfterSeconds",
+    "reasonCode",
+    "currentStatus",
+    "expectedStatus",
+    "minimumVersion",
+    "currentVersion"
+  ]);
+  const rawDetails = isSakupaError(e) && e.details && typeof e.details === "object" ? e.details : void 0;
+  const safeDetails = rawDetails ? Object.fromEntries(
+    Object.entries(rawDetails).filter(
+      ([key, value]) => safeDetailKeys.has(key) && (typeof value === "string" || typeof value === "number" || typeof value === "boolean")
+    )
+  ) : void 0;
+  const safeSummary = errorCode === "not_found" ? "\u6240\u9700\u7684\u672C\u5730\u9879\u76EE\u7ED1\u5B9A\u6216\u8D44\u6E90\u4E0D\u53EF\u7528\uFF1B\u5982\u679C\u672C\u5730\u6CA1\u6709 .sakupa/site.json\uFF0C\u8BF7\u5148\u8FD0\u884C deploy_site first\u3002" : errorCode === "unauthorized" ? "\u5F53\u524D\u64CD\u4F5C\u672A\u901A\u8FC7\u7AD9\u70B9\u6743\u9650\u6821\u9A8C\u3002" : errorCode === "invalid_request" || errorCode === "validation_failed" ? "\u8BF7\u6C42\u53C2\u6570\u6216\u672C\u5730\u9879\u76EE\u68C0\u67E5\u672A\u901A\u8FC7\u3002" : errorCode === "state_conflict" ? "\u8D44\u6E90\u72B6\u6001\u5DF2\u7ECF\u53D8\u5316\uFF0C\u8BF7\u91CD\u65B0\u67E5\u8BE2\u72B6\u6001\u540E\u518D\u51B3\u5B9A\u4E0B\u4E00\u6B65\u3002" : errorCode === "confirmation_required" ? "\u8D44\u6E90\u6216\u8D26\u5355\u72B6\u6001\u5DF2\u53D8\u5316\uFF0C\u65E7\u786E\u8BA4\u5DF2\u5931\u6548\uFF1B\u8BF7\u91CD\u65B0\u9884\u89C8\u540E\u518D\u786E\u8BA4\u3002" : errorCode === "payment_required" ? "\u8BE5\u64CD\u4F5C\u9700\u8981\u6709\u6548\u8BA2\u9605\uFF1B\u8BF7\u5148\u67E5\u8BE2\u8D26\u5355\u72B6\u6001\u3002" : errorCode === "rate_limited" ? "\u8BF7\u6C42\u9891\u7387\u5DF2\u8FBE\u5230\u670D\u52A1\u7AEF\u4E0A\u9650\uFF0C\u8BF7\u6309\u8FD4\u56DE\u7684\u7B49\u5F85\u65F6\u95F4\u540E\u91CD\u8BD5\u3002" : retryable ? "\u5916\u90E8\u670D\u52A1\u6682\u65F6\u4E0D\u53EF\u7528\u6216\u8BF7\u6C42\u8FC7\u4E8E\u9891\u7E41\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5\u3002" : "\u64CD\u4F5C\u5931\u8D25\uFF1B\u672A\u8FD4\u56DE\u670D\u52A1\u7AEF\u5185\u90E8\u8BE6\u60C5\u3002";
   const result = structuredToolResult({
     schemaVersion: 1,
     outcome: "failed",
     resultCode: `error_${errorCode}`,
     summary: safeSummary,
-    data: { errorCode, retryable },
+    data: {
+      errorCode,
+      retryable,
+      ...safeDetails && Object.keys(safeDetails).length > 0 ? { details: safeDetails } : {}
+    },
     nextActions: []
   });
   return { ...result, isError: true };
@@ -2002,13 +2072,148 @@ Summary: ${res.sanitizedSummary}`,
   );
 }
 
+// src/tools/lifecycle.ts
+import { z as z3 } from "zod";
+var deleteConfirmation = z3.object({
+  siteId: z3.string().min(1),
+  expectedSiteUpdatedAt: z3.string().datetime(),
+  expectedStatus: z3.enum(["active", "expired", "deleted"]),
+  expectedMode: z3.enum(["free", "paid"]),
+  expectedServingMode: z3.enum(["normal", "over_limit_notice", "risk_notice", "stopped"]),
+  expectedShortId: z3.string().optional(),
+  expectedSubscriptionStatus: z3.enum(["incomplete", "active", "past_due", "canceled"]).optional(),
+  expectedPlan: z3.enum(["water", "personal", "share", "business"]).optional(),
+  expectedCancelAtPeriodEnd: z3.boolean().optional(),
+  expectedCurrentPeriodEnd: z3.string().datetime().optional(),
+  expectedLastDeploymentId: z3.string().optional(),
+  expectedBoundHostnames: z3.array(z3.string()),
+  acknowledge: z3.literal("delete_site_and_cancel_renewal")
+});
+var unbindConfirmation = z3.object({
+  siteId: z3.string().min(1),
+  bindingId: z3.string().min(1),
+  expectedBindingUpdatedAt: z3.string().datetime(),
+  expectedBindingStatus: z3.enum(["provisioning", "active"]),
+  apexDomain: z3.string().min(1),
+  expectedBoundHostnames: z3.array(z3.string()),
+  acknowledge: z3.literal("unbind_domain_and_remove_custom_hostnames")
+});
+function registerLifecycleTools(server, ctx) {
+  server.registerTool(
+    "delete_site",
+    {
+      description: "Preview or execute deletion of this Sakupa site. Execution requires an exact server-validated confirmation bound to the current site state.",
+      inputSchema: {
+        action: z3.enum(["preview", "confirm"]),
+        operationId: z3.string().min(1).optional(),
+        confirmation: deleteConfirmation.optional()
+      },
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async (args) => {
+      try {
+        const site = requireSiteFile(ctx);
+        if (!args.operationId) {
+          throw new Error("operationId is required for delete_site");
+        }
+        if (args.action === "preview") {
+          const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
+            operationId: args.operationId
+          });
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "waiting_user",
+            resultCode: "delete_site_confirmation_required",
+            operationId: args.operationId,
+            summary: "\u5DF2\u8FD4\u56DE\u4E0E\u5F53\u524D\u7AD9\u70B9\u53CA\u8D26\u5355\u72B6\u6001\u7ED1\u5B9A\u7684\u5220\u9664\u540E\u679C\uFF1B\u786E\u8BA4\u540E\u5185\u5BB9\u548C\u6C38\u4E45\u5730\u5740\u4E0D\u53EF\u6062\u590D\u3002",
+            data: { preview },
+            nextActions: [
+              { tool: "delete_site", allowed: true, reasonCode: "exact_confirmation_required" }
+            ]
+          });
+        }
+        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+          operationId: args.operationId,
+          confirmation: args.confirmation
+        });
+        deleteSiteFile(ctx.projectDir);
+        return structuredToolResult({
+          schemaVersion: 1,
+          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
+          resultCode: "site_deleted",
+          operationId: args.operationId,
+          summary: "\u7AD9\u70B9\u5DF2\u5220\u9664\uFF0C\u672C\u5730\u7BA1\u7406\u51ED\u8BC1\u6587\u4EF6\u5DF2\u79FB\u9664\u3002",
+          data: { result },
+          nextActions: []
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    }
+  );
+  server.registerTool(
+    "unbind_domain",
+    {
+      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
+      inputSchema: {
+        action: z3.enum(["preview", "confirm"]),
+        operationId: z3.string().min(1).optional(),
+        confirmation: unbindConfirmation.optional()
+      },
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    async (args) => {
+      try {
+        const site = requireSiteFile(ctx);
+        if (!args.operationId) throw new Error("operationId is required for unbind_domain");
+        if (args.action === "preview") {
+          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
+            operationId: args.operationId
+          });
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "waiting_user",
+            resultCode: "unbind_domain_confirmation_required",
+            operationId: args.operationId,
+            summary: "\u5DF2\u8FD4\u56DE\u7CBE\u786E\u7ED1\u5B9A\u5FEB\u7167\uFF1B\u89E3\u7ED1\u53EA\u79FB\u9664\u81EA\u5B9A\u4E49\u57DF\u540D\uFF0C\u8BA2\u9605\u3001\u5185\u5BB9\u548C\u6C38\u4E45\u5730\u5740\u4FDD\u6301\u4E0D\u53D8\u3002",
+            data: { preview },
+            nextActions: [
+              { tool: "unbind_domain", allowed: true, reasonCode: "exact_confirmation_required" }
+            ]
+          });
+        }
+        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
+          operationId: args.operationId,
+          confirmation: args.confirmation
+        });
+        const { boundDomain: _removed, ...remaining } = site;
+        writeSiteFile(ctx.projectDir, remaining);
+        return structuredToolResult({
+          schemaVersion: 1,
+          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
+          resultCode: "domain_unbound",
+          operationId: args.operationId,
+          summary: "\u81EA\u5B9A\u4E49\u57DF\u540D\u5DF2\u89E3\u7ED1\uFF1B\u8BA2\u9605\u3001\u5DF2\u90E8\u7F72\u5185\u5BB9\u548C\u6C38\u4E45 Sakupa \u5730\u5740\u672A\u53D8\u3002",
+          data: { result },
+          nextActions: [{ tool: "site_status", allowed: true }]
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    }
+  );
+}
+
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/tools/billing.ts
-import { z as z3 } from "zod";
-var plan = z3.enum(["water", "personal", "share", "business"]);
-var trigger = z3.enum(["actual_overage", "credential_automation"]);
+import { z as z4 } from "zod";
+var plan = z4.enum(["water", "personal", "share", "business"]);
 function registerBillingTools(server, ctx) {
   server.registerTool(
     "list_billing_plans",
@@ -2035,93 +2240,37 @@ function registerBillingTools(server, ctx) {
     }
   );
   server.registerTool(
-    "manage_subscription",
+    "change_subscription_plan",
     {
-      description: "Manage this site subscription through explicit actions. open_plan_change returns a Stripe-hosted confirmation URL. create_automation_authorization returns a short-lived Sakupa authorization URL binding the exact cap and triggers. disable_automation is immediate and owner-authorized. request_authorized_upgrade executes only under an existing exact grant, fresh usage snapshot, catalog version and server-side safety gates.",
+      description: "Create a Stripe-hosted confirmation link for a manually selected subscription plan. Creating the link does not change billing; only the user can confirm on Stripe.",
       inputSchema: {
-        action: z3.enum([
-          "open_plan_change",
-          "create_automation_authorization",
-          "disable_automation",
-          "request_authorized_upgrade"
-        ]),
-        operationId: z3.string().min(1).describe("Stable idempotency key chosen by the caller."),
-        targetPlan: plan.optional(),
-        maxPlan: plan.optional(),
-        allowedTriggers: z3.array(trigger).min(1).optional(),
-        observedSnapshotId: z3.string().optional(),
-        observedCatalogVersion: z3.string().optional()
+        targetPlan: plan,
+        operationId: z4.string().min(1)
       },
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+      annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true }
     },
     async (args) => {
       try {
         const site = requireSiteFile(ctx);
-        let request;
-        if (args.action === "open_plan_change") {
-          if (!args.targetPlan) {
-            throw new SakupaError("invalid_request", "targetPlan is required for open_plan_change");
-          }
-          request = {
-            action: args.action,
-            targetPlan: args.targetPlan,
-            operationId: args.operationId
-          };
-        } else if (args.action === "create_automation_authorization") {
-          if (!args.maxPlan || !args.allowedTriggers) {
-            throw new SakupaError(
-              "invalid_request",
-              "maxPlan and allowedTriggers are required for authorization"
-            );
-          }
-          request = {
-            action: args.action,
-            maxPlan: args.maxPlan,
-            allowedTriggers: args.allowedTriggers,
-            operationId: args.operationId
-          };
-        } else if (args.action === "disable_automation") {
-          request = { action: args.action, operationId: args.operationId };
-        } else {
-          if (!args.targetPlan) {
-            throw new SakupaError(
-              "invalid_request",
-              "targetPlan is required for request_authorized_upgrade"
-            );
-          }
-          request = {
-            action: args.action,
-            operationId: args.operationId,
-            targetPlan: args.targetPlan,
-            trigger: "credential_automation",
-            ...args.observedSnapshotId ? { observedSnapshotId: args.observedSnapshotId } : {},
-            ...args.observedCatalogVersion ? { observedCatalogVersion: args.observedCatalogVersion } : {}
-          };
-        }
-        const result = await ctx.client.manageSubscription(site.siteId, site.credential, request);
-        const portalUrl = "portalUrl" in result ? result.portalUrl : void 0;
-        const authorizationUrl = "authorizationUrl" in result ? result.authorizationUrl : void 0;
-        const executionOutcome = "outcome" in result ? result.outcome : void 0;
-        const outcome = portalUrl || authorizationUrl ? "waiting_user" : executionOutcome === "pending_provider" ? "pending_provider" : executionOutcome === "blocked" ? "blocked" : "completed";
-        const resultCode = "resultCode" in result ? result.resultCode : portalUrl ? "stripe_plan_change_confirmation_required" : authorizationUrl ? "automation_authorization_required" : args.action === "disable_automation" ? "automation_disabled" : "subscription_action_completed";
-        const url = portalUrl ?? authorizationUrl;
+        const result = await ctx.client.changeSubscriptionPlan(site.credential, {
+          siteId: site.siteId,
+          targetPlan: args.targetPlan,
+          operationId: args.operationId
+        });
         return structuredToolResult({
           schemaVersion: 1,
-          outcome,
-          resultCode,
+          outcome: "waiting_user",
+          resultCode: "stripe_plan_change_confirmation_required",
           operationId: args.operationId,
-          summary: url ? "\u5DF2\u521B\u5EFA\u77ED\u65F6\u6548\u6258\u7BA1\u786E\u8BA4\u94FE\u63A5\uFF1B\u5F53\u524D\u8BA2\u9605\u5C1A\u672A\u56E0\u521B\u5EFA\u94FE\u63A5\u800C\u6539\u53D8\u3002" : `\u8BA2\u9605\u52A8\u4F5C\u7ED3\u679C\uFF1A${resultCode}`,
-          data: { action: args.action, result },
-          ...url ? {
-            userAction: {
-              type: "open_url",
-              provider: portalUrl ? "stripe" : "sakupa",
-              url,
-              ..."expiresAt" in result && typeof result.expiresAt === "string" ? { expiresAt: result.expiresAt } : {},
-              expectedOutcome: portalUrl ? "\u7528\u6237\u5728 Stripe \u6258\u7BA1\u9875\u9762\u786E\u8BA4\u540E\uFF0C\u7531 webhook \u66F4\u65B0 Sakupa \u72B6\u6001" : "\u7528\u6237\u5728 Sakupa \u77ED\u65F6\u6548\u9875\u9762\u786E\u8BA4\u7CBE\u786E\u81EA\u52A8\u5347\u7EA7\u6388\u6743"
-            }
-          } : {},
+          summary: `\u5DF2\u751F\u6210\u4ECE ${result.currentPlan} \u5230 ${result.targetPlan} \u7684 Stripe \u786E\u8BA4\u94FE\u63A5\uFF1B\u8BA2\u9605\u5C1A\u672A\u53D8\u66F4\u3002`,
+          data: { result },
+          userAction: {
+            type: "open_url",
+            provider: "stripe",
+            url: result.portalUrl,
+            expectedOutcome: "\u7528\u6237\u5728 Stripe \u6258\u7BA1\u9875\u9762\u786E\u8BA4\u540E\uFF0C\u7531 webhook \u66F4\u65B0 Sakupa \u8BA2\u9605\u72B6\u6001"
+          },
           nextActions: [{ tool: "billing_status", allowed: true }]
         });
       } catch (error) {
@@ -2145,13 +2294,13 @@ Workflow:
 3. To make the site PERMANENT, subscribe it to a monthly hosting plan (subscribe_site ->
    Stripe-hosted checkout; water/personal/share/business). Paying makes the
    {shortId}.sakupa.com URL permanent \u2014 that is what payment buys. Usage over the chosen plan
-   shows an over-limit notice by default. Automatic upgrades require a separate, bounded,
-   one-time Sakupa authorization and can never exceed the user-approved plan cap.
+   shows an over-limit notice by default. An external AI may periodically query usage and
+   recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind_domain): an included extra
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing_status,
-   manage_subscription, manage_billing and recover_domain_site manage the paid lifecycle. Manual plan
-   changes are confirmed only on Stripe Customer Portal and synchronized by Stripe webhook.
+   billing_status, change_subscription_plan, manage_billing and recover_domain_site manage the paid
+   lifecycle. Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
 
@@ -2165,7 +2314,9 @@ Safety boundaries:
   Stripe's public no-code portal login, where the customer verifies the checkout email with a
   Stripe one-time passcode; it never restores site authority.`;
 function createSakupaMcpServer(opts) {
-  const client = opts.client ?? new HttpApiClient(new FetchTransport(opts.apiBaseUrl));
+  const client = opts.client ?? new HttpApiClient(
+    new FetchTransport(opts.apiBaseUrl, { testAccessToken: opts.testAccessToken })
+  );
   const server = new McpServer(
     { name: "sakupa", version: MCP_VERSION },
     { instructions: INSTRUCTIONS }
@@ -2180,6 +2331,11 @@ function createSakupaMcpServer(opts) {
     projectDir: opts.projectDir,
     apiBaseUrl: opts.apiBaseUrl
   });
+  registerLifecycleTools(server, {
+    client,
+    projectDir: opts.projectDir,
+    apiBaseUrl: opts.apiBaseUrl
+  });
   return server;
 }
 export {
@@ -2187,10 +2343,13 @@ export {
   FetchTransport,
   HttpApiClient,
   MCP_VERSION,
+  TEST_API_BASE_URL,
   analyzeProject,
   createSakupaMcpServer,
   deleteSiteFile,
+  loadMcpRuntimeConfig,
   readSiteFile,
+  registerLifecycleTools,
   registerTools,
   requireSiteFile,
   siteFilePath,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.6.0",
+  "version": "0.7.1",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",