@sakupa/mcp 0.7.17 → 0.7.18

package/dist/bin.js

@@ -129,7 +129,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.17";
+var SAKUPA_MCP_VERSION = "0.7.18";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -603,20 +603,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -2097,9 +2083,12 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
+          switchNotice + `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 STEP 1 of 2 \u2014 add ALL THREE records NOW:
 
@@ -2120,6 +2109,7 @@ Drive the whole flow with bind "status": it live-checks every record and names t
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
@@ -2536,15 +2526,6 @@ var deleteConfirmation = z5.object({
   expectedBoundHostnames: z5.array(z5.string()),
   acknowledge: z5.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z5.object({
-  siteId: z5.string().min(1),
-  bindingId: z5.string().min(1),
-  expectedBindingUpdatedAt: z5.string().datetime(),
-  expectedBindingStatus: z5.enum(["provisioning", "active"]),
-  apexDomain: z5.string().min(1),
-  expectedBoundHostnames: z5.array(z5.string()),
-  acknowledge: z5.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2606,66 +2587,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z5.enum(["preview", "confirm"]),
-        operationId: z5.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        const operationId = args.operationId ?? randomUUID2();
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId,
-            summary: `Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged. To proceed, call unbind again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) {
-          throw new LocalGuidanceError(
-            "invalid_request",
-            'To CONFIRM unbind, first call unbind with action:"preview" to get the exact confirmation object bound to the current binding, then call again with action:"confirm", the same operationId, and that confirmation object.'
-          );
-        }
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/transport.ts
@@ -2764,8 +2685,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2779,7 +2701,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/dist/index.js

@@ -124,7 +124,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.17";
+var SAKUPA_MCP_VERSION = "0.7.18";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -673,20 +673,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -2163,9 +2149,12 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
+          switchNotice + `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
 
 STEP 1 of 2 \u2014 add ALL THREE records NOW:
 
@@ -2186,6 +2175,7 @@ Drive the whole flow with bind "status": it live-checks every record and names t
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
@@ -2530,15 +2520,6 @@ var deleteConfirmation = z4.object({
   expectedBoundHostnames: z4.array(z4.string()),
   acknowledge: z4.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z4.object({
-  siteId: z4.string().min(1),
-  bindingId: z4.string().min(1),
-  expectedBindingUpdatedAt: z4.string().datetime(),
-  expectedBindingStatus: z4.enum(["provisioning", "active"]),
-  apexDomain: z4.string().min(1),
-  expectedBoundHostnames: z4.array(z4.string()),
-  acknowledge: z4.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2600,66 +2581,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z4.enum(["preview", "confirm"]),
-        operationId: z4.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        const operationId = args.operationId ?? randomUUID2();
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId,
-            summary: `Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged. To proceed, call unbind again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) {
-          throw new LocalGuidanceError(
-            "invalid_request",
-            'To CONFIRM unbind, first call unbind with action:"preview" to get the exact confirmation object bound to the current binding, then call again with action:"confirm", the same operationId, and that confirmation object.'
-          );
-        }
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/server.ts
@@ -2759,8 +2680,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2774,7 +2696,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.17",
+  "version": "0.7.18",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",