@sakupa/mcp 0.7.16 → 0.7.18

package/dist/bin.js

@@ -129,7 +129,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.16";
+var SAKUPA_MCP_VERSION = "0.7.18";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -603,20 +603,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -1497,8 +1483,10 @@ function requireSiteFile(ctx) {
 }
 var UNAUTHORIZED_SUMMARY = "The server rejected the site credential: the one in .sakupa/site.json no longer matches the server-side verifier. The site itself is intact on the server \u2014 only the local binding file is the problem. Repair the file (restore a backup or undo the local edit). Do NOT delete the .sakupa directory to work around this: the credential is unrecoverable by design, so abandoning it permanently orphans the existing site.";
 function toolError(e) {
-  const errorCode = isSakupaError(e) ? e.code : "internal";
-  const retryable = errorCode === "rate_limited" || errorCode === "internal";
+  const isSakupa = isSakupaError(e);
+  const errorCode = isSakupa ? e.code : "internal";
+  const retryable = errorCode === "rate_limited" || isSakupa && errorCode === "internal";
+  const opaqueUnclassified = errorCode === "internal" && !retryable;
   const safeDetailKeys = /* @__PURE__ */ new Set([
     "retryAfterSeconds",
     "reasonCode",
@@ -1515,7 +1503,7 @@ function toolError(e) {
   ) : void 0;
   const minimumVersion = rawDetails && typeof rawDetails["minimumVersion"] === "string" ? rawDetails["minimumVersion"] : void 0;
   const serverGuidance = isSakupaError(e) && errorCode !== "internal" && errorCode !== "unauthorized" && errorCode !== "upgrade_required" && e.message.trim().length > 0 ? e.message : void 0;
-  const safeSummary = e instanceof LocalGuidanceError ? e.message : errorCode === "upgrade_required" ? `This Sakupa MCP client is v${MCP_VERSION}, older than the server's minimum supported version${minimumVersion !== void 0 ? ` (v${minimumVersion})` : ""}, so the server refused the call. To fix it: ask the user to fully restart their MCP client session \u2014 "npx -y @sakupa/mcp@latest" setups fetch the current version on restart (run "npx clear-npx-cache" first if the old version persists); global installs need "npm install -g @sakupa/mcp@latest". After the restart, retry this exact tool call.` : errorCode === "unauthorized" ? UNAUTHORIZED_SUMMARY : serverGuidance ?? (retryable ? "An upstream service is temporarily unavailable or busy; retry shortly." : "The operation failed; no server-internal details are exposed.");
+  const safeSummary = e instanceof LocalGuidanceError ? e.message : errorCode === "upgrade_required" ? `This Sakupa MCP client is v${MCP_VERSION}, older than the server's minimum supported version${minimumVersion !== void 0 ? ` (v${minimumVersion})` : ""}, so the server refused the call. To fix it: ask the user to fully restart their MCP client session \u2014 "npx -y @sakupa/mcp@latest" setups fetch the current version on restart (run "npx clear-npx-cache" first if the old version persists); global installs need "npm install -g @sakupa/mcp@latest". After the restart, retry this exact tool call.` : errorCode === "unauthorized" ? UNAUTHORIZED_SUMMARY : serverGuidance ?? (retryable ? "An upstream service is temporarily unavailable or busy; retry shortly." : opaqueUnclassified ? "This failed with an error Sakupa could not classify, and retrying will not help. Tell the user briefly, then offer to file it: run the report tool to send Sakupa a diagnostic report of what was being attempted so we can investigate." : "The operation failed; no server-internal details are exposed.");
   const result = structuredToolResult({
     schemaVersion: 1,
     outcome: "failed",
@@ -2095,9 +2083,12 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
+          switchNotice + `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 STEP 1 of 2 \u2014 add ALL THREE records NOW:
 
@@ -2118,6 +2109,7 @@ Drive the whole flow with bind "status": it live-checks every record and names t
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
@@ -2517,6 +2509,7 @@ function registerBillingTools(server, baseCtx) {
 }
 
 // src/tools/lifecycle.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { z as z5 } from "zod";
 var deleteConfirmation = z5.object({
   siteId: z5.string().min(1),
@@ -2533,15 +2526,6 @@ var deleteConfirmation = z5.object({
   expectedBoundHostnames: z5.array(z5.string()),
   acknowledge: z5.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z5.object({
-  siteId: z5.string().min(1),
-  bindingId: z5.string().min(1),
-  expectedBindingUpdatedAt: z5.string().datetime(),
-  expectedBindingStatus: z5.enum(["provisioning", "active"]),
-  apexDomain: z5.string().min(1),
-  expectedBoundHostnames: z5.array(z5.string()),
-  acknowledge: z5.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2560,28 +2544,31 @@ function registerLifecycleTools(server, baseCtx) {
       try {
         const ctx = withProjectDir(baseCtx, args.projectDir);
         const site = requireSiteFile(ctx);
-        if (!args.operationId) {
-          throw new Error("operationId is required for delete");
-        }
+        const operationId = args.operationId ?? randomUUID2();
         if (args.action === "preview") {
           const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
-            operationId: args.operationId
+            operationId
           });
           return structuredToolResult({
             schemaVersion: 1,
             outcome: "waiting_user",
             resultCode: "delete_confirmation_required",
-            operationId: args.operationId,
-            summary: "Deletion consequences returned, bound to the current site and billing state; after confirmation the content and the permanent URL are unrecoverable.",
+            operationId,
+            summary: `Deletion consequences returned, bound to the current site and billing state; after confirmation the content and the permanent URL are unrecoverable. To proceed, call delete again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
             data: { preview },
             nextActions: [
               { tool: "delete", allowed: true, reasonCode: "exact_confirmation_required" }
             ]
           });
         }
-        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        if (!args.confirmation) {
+          throw new LocalGuidanceError(
+            "invalid_request",
+            'To CONFIRM deletion, first call delete with action:"preview" to get the exact confirmation object bound to the current site state, then call again with action:"confirm", the same operationId, and that confirmation object.'
+          );
+        }
         const result = await ctx.client.deleteSite(site.siteId, site.credential, {
-          operationId: args.operationId,
+          operationId,
           confirmation: args.confirmation
         });
         deleteSiteFile(ctx.projectDir);
@@ -2590,7 +2577,7 @@ function registerLifecycleTools(server, baseCtx) {
           schemaVersion: 1,
           outcome: result.servingDeletionPending ? "pending_provider" : "completed",
           resultCode: "site_deleted",
-          operationId: args.operationId,
+          operationId,
           summary: `Site deleted; the local management credential file was removed from ${ctx.projectDir}.`,
           data: { result, projectDir: ctx.projectDir },
           nextActions: []
@@ -2600,61 +2587,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z5.enum(["preview", "confirm"]),
-        operationId: z5.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        if (!args.operationId) throw new Error("operationId is required for unbind");
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId: args.operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId: args.operationId,
-            summary: "Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged.",
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) throw new Error("confirmation is required for confirm");
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId: args.operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId: args.operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/transport.ts
@@ -2722,8 +2654,10 @@ var FetchTransport = class {
     });
     if (!res.ok) {
       const text2 = await res.text().catch(() => "");
-      throw new Error(
-        `Upload of "${target.path}" failed with HTTP ${res.status}${text2 ? `: ${text2.slice(0, 200)}` : ""}`
+      const detail = `Upload of "${target.path}" failed with HTTP ${res.status}${text2 ? `: ${text2.slice(0, 200)}` : ""}`;
+      throw new SakupaError(
+        res.status === 429 || res.status >= 500 ? "internal" : "validation_failed",
+        detail
       );
     }
   }
@@ -2751,8 +2685,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2766,7 +2701,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/dist/index.js

@@ -124,7 +124,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.16";
+var SAKUPA_MCP_VERSION = "0.7.18";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -546,8 +546,10 @@ var FetchTransport = class {
     });
     if (!res.ok) {
       const text2 = await res.text().catch(() => "");
-      throw new Error(
-        `Upload of "${target.path}" failed with HTTP ${res.status}${text2 ? `: ${text2.slice(0, 200)}` : ""}`
+      const detail = `Upload of "${target.path}" failed with HTTP ${res.status}${text2 ? `: ${text2.slice(0, 200)}` : ""}`;
+      throw new SakupaError(
+        res.status === 429 || res.status >= 500 ? "internal" : "validation_failed",
+        detail
       );
     }
   }
@@ -671,20 +673,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -1378,8 +1366,10 @@ function requireSiteFile(ctx) {
 }
 var UNAUTHORIZED_SUMMARY = "The server rejected the site credential: the one in .sakupa/site.json no longer matches the server-side verifier. The site itself is intact on the server \u2014 only the local binding file is the problem. Repair the file (restore a backup or undo the local edit). Do NOT delete the .sakupa directory to work around this: the credential is unrecoverable by design, so abandoning it permanently orphans the existing site.";
 function toolError(e) {
-  const errorCode = isSakupaError(e) ? e.code : "internal";
-  const retryable = errorCode === "rate_limited" || errorCode === "internal";
+  const isSakupa = isSakupaError(e);
+  const errorCode = isSakupa ? e.code : "internal";
+  const retryable = errorCode === "rate_limited" || isSakupa && errorCode === "internal";
+  const opaqueUnclassified = errorCode === "internal" && !retryable;
   const safeDetailKeys = /* @__PURE__ */ new Set([
     "retryAfterSeconds",
     "reasonCode",
@@ -1396,7 +1386,7 @@ function toolError(e) {
   ) : void 0;
   const minimumVersion = rawDetails && typeof rawDetails["minimumVersion"] === "string" ? rawDetails["minimumVersion"] : void 0;
   const serverGuidance = isSakupaError(e) && errorCode !== "internal" && errorCode !== "unauthorized" && errorCode !== "upgrade_required" && e.message.trim().length > 0 ? e.message : void 0;
-  const safeSummary = e instanceof LocalGuidanceError ? e.message : errorCode === "upgrade_required" ? `This Sakupa MCP client is v${MCP_VERSION}, older than the server's minimum supported version${minimumVersion !== void 0 ? ` (v${minimumVersion})` : ""}, so the server refused the call. To fix it: ask the user to fully restart their MCP client session \u2014 "npx -y @sakupa/mcp@latest" setups fetch the current version on restart (run "npx clear-npx-cache" first if the old version persists); global installs need "npm install -g @sakupa/mcp@latest". After the restart, retry this exact tool call.` : errorCode === "unauthorized" ? UNAUTHORIZED_SUMMARY : serverGuidance ?? (retryable ? "An upstream service is temporarily unavailable or busy; retry shortly." : "The operation failed; no server-internal details are exposed.");
+  const safeSummary = e instanceof LocalGuidanceError ? e.message : errorCode === "upgrade_required" ? `This Sakupa MCP client is v${MCP_VERSION}, older than the server's minimum supported version${minimumVersion !== void 0 ? ` (v${minimumVersion})` : ""}, so the server refused the call. To fix it: ask the user to fully restart their MCP client session \u2014 "npx -y @sakupa/mcp@latest" setups fetch the current version on restart (run "npx clear-npx-cache" first if the old version persists); global installs need "npm install -g @sakupa/mcp@latest". After the restart, retry this exact tool call.` : errorCode === "unauthorized" ? UNAUTHORIZED_SUMMARY : serverGuidance ?? (retryable ? "An upstream service is temporarily unavailable or busy; retry shortly." : opaqueUnclassified ? "This failed with an error Sakupa could not classify, and retrying will not help. Tell the user briefly, then offer to file it: run the report tool to send Sakupa a diagnostic report of what was being attempted so we can investigate." : "The operation failed; no server-internal details are exposed.");
   const result = structuredToolResult({
     schemaVersion: 1,
     outcome: "failed",
@@ -2159,9 +2149,12 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
+          switchNotice + `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 STEP 1 of 2 \u2014 add ALL THREE records NOW:
 
@@ -2182,6 +2175,7 @@ Drive the whole flow with bind "status": it live-checks every record and names t
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
@@ -2509,6 +2503,7 @@ Summary: ${res.sanitizedSummary}`,
 }
 
 // src/tools/lifecycle.ts
+import { randomUUID as randomUUID2 } from "node:crypto";
 import { z as z4 } from "zod";
 var deleteConfirmation = z4.object({
   siteId: z4.string().min(1),
@@ -2525,15 +2520,6 @@ var deleteConfirmation = z4.object({
   expectedBoundHostnames: z4.array(z4.string()),
   acknowledge: z4.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z4.object({
-  siteId: z4.string().min(1),
-  bindingId: z4.string().min(1),
-  expectedBindingUpdatedAt: z4.string().datetime(),
-  expectedBindingStatus: z4.enum(["provisioning", "active"]),
-  apexDomain: z4.string().min(1),
-  expectedBoundHostnames: z4.array(z4.string()),
-  acknowledge: z4.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2552,28 +2538,31 @@ function registerLifecycleTools(server, baseCtx) {
       try {
         const ctx = withProjectDir(baseCtx, args.projectDir);
         const site = requireSiteFile(ctx);
-        if (!args.operationId) {
-          throw new Error("operationId is required for delete");
-        }
+        const operationId = args.operationId ?? randomUUID2();
         if (args.action === "preview") {
           const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
-            operationId: args.operationId
+            operationId
           });
           return structuredToolResult({
             schemaVersion: 1,
             outcome: "waiting_user",
             resultCode: "delete_confirmation_required",
-            operationId: args.operationId,
-            summary: "Deletion consequences returned, bound to the current site and billing state; after confirmation the content and the permanent URL are unrecoverable.",
+            operationId,
+            summary: `Deletion consequences returned, bound to the current site and billing state; after confirmation the content and the permanent URL are unrecoverable. To proceed, call delete again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
             data: { preview },
             nextActions: [
               { tool: "delete", allowed: true, reasonCode: "exact_confirmation_required" }
             ]
           });
         }
-        if (!args.confirmation) throw new Error("confirmation is required for confirm");
+        if (!args.confirmation) {
+          throw new LocalGuidanceError(
+            "invalid_request",
+            'To CONFIRM deletion, first call delete with action:"preview" to get the exact confirmation object bound to the current site state, then call again with action:"confirm", the same operationId, and that confirmation object.'
+          );
+        }
         const result = await ctx.client.deleteSite(site.siteId, site.credential, {
-          operationId: args.operationId,
+          operationId,
           confirmation: args.confirmation
         });
         deleteSiteFile(ctx.projectDir);
@@ -2582,7 +2571,7 @@ function registerLifecycleTools(server, baseCtx) {
           schemaVersion: 1,
           outcome: result.servingDeletionPending ? "pending_provider" : "completed",
           resultCode: "site_deleted",
-          operationId: args.operationId,
+          operationId,
           summary: `Site deleted; the local management credential file was removed from ${ctx.projectDir}.`,
           data: { result, projectDir: ctx.projectDir },
           nextActions: []
@@ -2592,61 +2581,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z4.enum(["preview", "confirm"]),
-        operationId: z4.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        if (!args.operationId) throw new Error("operationId is required for unbind");
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId: args.operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId: args.operationId,
-            summary: "Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged.",
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) throw new Error("confirmation is required for confirm");
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId: args.operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId: args.operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/server.ts
@@ -2746,8 +2680,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2761,7 +2696,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.16",
+  "version": "0.7.18",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",