@sakupa/mcp 0.7.0 → 0.7.1

package/dist/bin.js

@@ -7,6 +7,7 @@ import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js"
 var SERVICE_DOMAIN = "sakupa.com";
 var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
+var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var FREE_SITE_TTL_HOURS = 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -127,7 +128,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.0";
+var SAKUPA_MCP_VERSION = "0.7.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -464,6 +465,28 @@ var utf8Encoder = new TextEncoder();
 // ../core/dist/services/subscriptions.js
 var WEBHOOK_PROCESSING_LEASE_MS = 5 * 60 * 1e3;
 
+// src/config.ts
+var TEST_API_BASE_URL = "https://api-test.sakupa.com";
+function loadMcpRuntimeConfig(env = process.env, cwd = process.cwd()) {
+  const apiBaseUrl = (env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL).replace(/\/+$/, "");
+  const projectDir = env["SAKUPA_PROJECT_DIR"] ?? cwd;
+  const testAccessToken = env["SAKUPA_TEST_ACCESS_TOKEN"]?.trim() ?? "";
+  if (apiBaseUrl === TEST_API_BASE_URL) {
+    if (testAccessToken.length === 0) {
+      throw new Error(
+        "The Sakupa Test API requires SAKUPA_TEST_ACCESS_TOKEN. Anonymous Test access is disabled."
+      );
+    }
+    return { apiBaseUrl, projectDir, testAccessToken };
+  }
+  if (testAccessToken.length > 0) {
+    throw new Error(
+      `SAKUPA_TEST_ACCESS_TOKEN may only be used with ${TEST_API_BASE_URL}. Remove it before connecting to any other API.`
+    );
+  }
+  return { apiBaseUrl, projectDir };
+}
+
 // src/server.ts
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
@@ -2195,8 +2218,23 @@ function registerLifecycleTools(server, ctx) {
 // src/transport.ts
 var FetchTransport = class {
   baseUrl;
-  constructor(baseUrl) {
+  testAccessToken;
+  constructor(baseUrl, options = {}) {
     this.baseUrl = baseUrl.replace(/\/+$/, "");
+    if (options.testAccessToken && this.baseUrl !== TEST_API_BASE_URL) {
+      throw new Error(`Test access credentials may only be sent to ${TEST_API_BASE_URL}.`);
+    }
+    this.testAccessToken = options.testAccessToken;
+  }
+  testAccessHeadersFor(_url) {
+    if (!this.testAccessToken) return {};
+    let target;
+    try {
+      target = new URL(_url);
+    } catch {
+      return {};
+    }
+    return target.origin === TEST_API_BASE_URL ? { [TEST_ACCESS_HEADER]: this.testAccessToken } : {};
   }
   async request(req) {
     let url = `${this.baseUrl}${req.path}`;
@@ -2207,7 +2245,8 @@ var FetchTransport = class {
       accept: "application/json",
       [MCP_VERSION_HEADER]: MCP_VERSION,
       ...req.body !== void 0 ? { "content-type": "application/json" } : {},
-      ...req.headers
+      ...req.headers,
+      ...this.testAccessHeadersFor(url)
     };
     const res = await fetch(url, {
       method: req.method,
@@ -2233,7 +2272,10 @@ var FetchTransport = class {
     }
     const res = await fetch(target.url, {
       method: target.method,
-      headers: target.headers,
+      headers: {
+        ...target.headers,
+        ...this.testAccessHeadersFor(target.url)
+      },
       body
     });
     if (!res.ok) {
@@ -2279,7 +2321,9 @@ Safety boundaries:
   Stripe's public no-code portal login, where the customer verifies the checkout email with a
   Stripe one-time passcode; it never restores site authority.`;
 function createSakupaMcpServer(opts) {
-  const client = opts.client ?? new HttpApiClient(new FetchTransport(opts.apiBaseUrl));
+  const client = opts.client ?? new HttpApiClient(
+    new FetchTransport(opts.apiBaseUrl, { testAccessToken: opts.testAccessToken })
+  );
   const server = new McpServer(
     { name: "sakupa", version: MCP_VERSION },
     { instructions: INSTRUCTIONS }
@@ -2304,13 +2348,12 @@ function createSakupaMcpServer(opts) {
 
 // src/bin.ts
 async function main() {
-  const apiBaseUrl = process.env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL;
-  const projectDir = process.env["SAKUPA_PROJECT_DIR"] ?? process.cwd();
-  const server = createSakupaMcpServer({ apiBaseUrl, projectDir });
+  const config = loadMcpRuntimeConfig();
+  const server = createSakupaMcpServer(config);
   const transport = new StdioServerTransport();
   await server.connect(transport);
   console.error(
-    `[sakupa-mcp] v${MCP_VERSION} connected (api: ${apiBaseUrl}, project: ${projectDir})`
+    `[sakupa-mcp] v${MCP_VERSION} connected (api: ${config.apiBaseUrl}, project: ${config.projectDir})`
   );
 }
 main().catch((err) => {

package/dist/index.js

@@ -1,6 +1,8 @@
 // ../core/dist/domain/constants.js
 var SERVICE_DOMAIN = "sakupa.com";
+var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
+var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var FREE_SITE_TTL_HOURS = 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -121,7 +123,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.0";
+var SAKUPA_MCP_VERSION = "0.7.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -462,11 +464,48 @@ var WEBHOOK_PROCESSING_LEASE_MS = 5 * 60 * 1e3;
 var MCP_VERSION = SAKUPA_MCP_VERSION;
 var CLIENT_TYPE = "sakupa-mcp";
 
+// src/config.ts
+var TEST_API_BASE_URL = "https://api-test.sakupa.com";
+function loadMcpRuntimeConfig(env = process.env, cwd = process.cwd()) {
+  const apiBaseUrl = (env["SAKUPA_API_URL"] ?? DEFAULT_API_BASE_URL).replace(/\/+$/, "");
+  const projectDir = env["SAKUPA_PROJECT_DIR"] ?? cwd;
+  const testAccessToken = env["SAKUPA_TEST_ACCESS_TOKEN"]?.trim() ?? "";
+  if (apiBaseUrl === TEST_API_BASE_URL) {
+    if (testAccessToken.length === 0) {
+      throw new Error(
+        "The Sakupa Test API requires SAKUPA_TEST_ACCESS_TOKEN. Anonymous Test access is disabled."
+      );
+    }
+    return { apiBaseUrl, projectDir, testAccessToken };
+  }
+  if (testAccessToken.length > 0) {
+    throw new Error(
+      `SAKUPA_TEST_ACCESS_TOKEN may only be used with ${TEST_API_BASE_URL}. Remove it before connecting to any other API.`
+    );
+  }
+  return { apiBaseUrl, projectDir };
+}
+
 // src/transport.ts
 var FetchTransport = class {
   baseUrl;
-  constructor(baseUrl) {
+  testAccessToken;
+  constructor(baseUrl, options = {}) {
     this.baseUrl = baseUrl.replace(/\/+$/, "");
+    if (options.testAccessToken && this.baseUrl !== TEST_API_BASE_URL) {
+      throw new Error(`Test access credentials may only be sent to ${TEST_API_BASE_URL}.`);
+    }
+    this.testAccessToken = options.testAccessToken;
+  }
+  testAccessHeadersFor(_url) {
+    if (!this.testAccessToken) return {};
+    let target;
+    try {
+      target = new URL(_url);
+    } catch {
+      return {};
+    }
+    return target.origin === TEST_API_BASE_URL ? { [TEST_ACCESS_HEADER]: this.testAccessToken } : {};
   }
   async request(req) {
     let url = `${this.baseUrl}${req.path}`;
@@ -477,7 +516,8 @@ var FetchTransport = class {
       accept: "application/json",
       [MCP_VERSION_HEADER]: MCP_VERSION,
       ...req.body !== void 0 ? { "content-type": "application/json" } : {},
-      ...req.headers
+      ...req.headers,
+      ...this.testAccessHeadersFor(url)
     };
     const res = await fetch(url, {
       method: req.method,
@@ -503,7 +543,10 @@ var FetchTransport = class {
     }
     const res = await fetch(target.url, {
       method: target.method,
-      headers: target.headers,
+      headers: {
+        ...target.headers,
+        ...this.testAccessHeadersFor(target.url)
+      },
       body
     });
     if (!res.ok) {
@@ -2271,7 +2314,9 @@ Safety boundaries:
   Stripe's public no-code portal login, where the customer verifies the checkout email with a
   Stripe one-time passcode; it never restores site authority.`;
 function createSakupaMcpServer(opts) {
-  const client = opts.client ?? new HttpApiClient(new FetchTransport(opts.apiBaseUrl));
+  const client = opts.client ?? new HttpApiClient(
+    new FetchTransport(opts.apiBaseUrl, { testAccessToken: opts.testAccessToken })
+  );
   const server = new McpServer(
     { name: "sakupa", version: MCP_VERSION },
     { instructions: INSTRUCTIONS }
@@ -2298,9 +2343,11 @@ export {
   FetchTransport,
   HttpApiClient,
   MCP_VERSION,
+  TEST_API_BASE_URL,
   analyzeProject,
   createSakupaMcpServer,
   deleteSiteFile,
+  loadMcpRuntimeConfig,
   readSiteFile,
   registerLifecycleTools,
   registerTools,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",