@sakupa/mcp 0.7.17 → 0.7.19

package/dist/bin.js

@@ -129,7 +129,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.17";
+var SAKUPA_MCP_VERSION = "0.7.19";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -603,20 +603,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -2097,40 +2083,37 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
-
-STEP 1 of 2 \u2014 add ALL THREE records NOW:
+          switchNotice + `Domain binding started for ${apex} (will serve: ${res.includedHostnames.join(", ")}).
 
-  1) TXT    host: ${txtShort}   value: ${res.verificationRecord.value}
-  2) CNAME  host: www   value: ${res.servingTarget}
-  3) APEX   host: @   -> ${res.servingTarget}. Try a plain CNAME at host @ first (most panels accept it); if rejected use ALIAS / ANAME / CNAME-flattening; if the panel has neither, skip it \u2014 www alone works, and a URL redirect from @ to www covers bare-domain visitors.
+This is a STEP-BY-STEP setup \u2014 give the user ONE record at a time so they do not get overwhelmed and give up.
 
-Host fields above are the SHORT form: most DNS panels append the domain automatically. After saving, the record list must NOT show ${apex} twice in one name \u2014 that means the full name was pasted into an auto-appending field.
+STEP 1 of 2 \u2014 prove ownership. Add ONE record:
 
-Ownership comes ONLY from DNS control; paying never grants it. The first verified request wins and this challenge expires after 72 hours.
+  TXT   host: ${txtShort}   value: ${res.verificationRecord.value}
 
-STEP 2 (after ownership verifies): Sakupa issues certificate-validation TXT records \u2014 the verification result and bind "status" list them the moment they exist; relay each to the user and add them too (copy names and values EXACTLY as given). Everything then completes automatically.
+Host is the SHORT form: most panels append the domain automatically (the saved record must NOT show ${apex} twice in one name). Ownership comes ONLY from DNS control; paying never grants it. The first verified request wins and this challenge expires after 72 hours.
 
-Drive the whole flow with bind "status": it live-checks every record and names the exact fix for anything wrong. Re-check every 5 minutes (up to 10 times). Any later session can resume with action "status" alone; the verificationId is optional.`,
+When the user says the TXT is set, run bind "status". It verifies ownership and then hands back STEP 2 \u2014 a SINGLE www CNAME (there are NO certificate TXT records; HTTPS validates automatically over that CNAME). Each "status" checks the previous step and, unless something is misconfigured, advances to the next \u2014 so run it whenever the user reports a step done, NOT on a timer. Any later session can resume with action "status" alone; the verificationId is optional.`,
           {
             verificationId: res.verificationId,
             apexDomain: apex,
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
                 shortHost: txtShort,
                 name: res.verificationRecord.name,
                 value: res.verificationRecord.value
-              },
-              { type: "CNAME", shortHost: "www", name: `www.${apex}`, value: res.servingTarget },
-              { type: "ALIAS", shortHost: "@", name: apex, value: res.servingTarget }
+              }
             ],
-            servingInstructions: res.servingInstructions,
             retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
             maxAttempts: DNS_MAX_ATTEMPTS
           },
@@ -2536,15 +2519,6 @@ var deleteConfirmation = z5.object({
   expectedBoundHostnames: z5.array(z5.string()),
   acknowledge: z5.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z5.object({
-  siteId: z5.string().min(1),
-  bindingId: z5.string().min(1),
-  expectedBindingUpdatedAt: z5.string().datetime(),
-  expectedBindingStatus: z5.enum(["provisioning", "active"]),
-  apexDomain: z5.string().min(1),
-  expectedBoundHostnames: z5.array(z5.string()),
-  acknowledge: z5.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2606,66 +2580,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z5.enum(["preview", "confirm"]),
-        operationId: z5.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        const operationId = args.operationId ?? randomUUID2();
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId,
-            summary: `Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged. To proceed, call unbind again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) {
-          throw new LocalGuidanceError(
-            "invalid_request",
-            'To CONFIRM unbind, first call unbind with action:"preview" to get the exact confirmation object bound to the current binding, then call again with action:"confirm", the same operationId, and that confirmation object.'
-          );
-        }
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/transport.ts
@@ -2764,8 +2678,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2779,7 +2694,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/dist/index.js

@@ -124,7 +124,7 @@ var FORBIDDEN_PATH_SEGMENTS = [
 var ALLOWED_HIDDEN_PATHS = [".well-known/"];
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.17";
+var SAKUPA_MCP_VERSION = "0.7.19";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -673,20 +673,6 @@ var HttpApiClient = class {
       }
     );
   }
-  async unbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind`,
-      { credential, body: req }
-    );
-  }
-  async previewUnbindDomain(siteId, credential, req) {
-    return this.call(
-      "POST",
-      `/v1/sites/${encodeURIComponent(siteId)}/domain/unbind/preview`,
-      { credential, body: req }
-    );
-  }
   async recoverDomain(req) {
     return this.call("POST", "/v1/domains/recover", { body: req });
   }
@@ -2163,40 +2149,37 @@ ${res2.message}
         const res = await ctx.client.bindDomain(site.credential, req);
         const apex = res.apexDomain;
         const txtShort = shortHostFor(res.verificationRecord.name, apex);
+        const switchNotice = res.supersedes ? `NOTE FOR THE USER: this site already serves ${res.supersedes}. ${res.supersedes} keeps working the whole time; once www.${apex} is confirmed live, it automatically REPLACES ${res.supersedes} (zero downtime). Tell the user this before they start.
+
+` : "";
         return text(
           "domain_verification_started",
-          `Domain binding started for ${apex} (includes: ${res.includedHostnames.join(", ")} \u2014 both will serve this site).
-
-STEP 1 of 2 \u2014 add ALL THREE records NOW:
+          switchNotice + `Domain binding started for ${apex} (will serve: ${res.includedHostnames.join(", ")}).
 
-  1) TXT    host: ${txtShort}   value: ${res.verificationRecord.value}
-  2) CNAME  host: www   value: ${res.servingTarget}
-  3) APEX   host: @   -> ${res.servingTarget}. Try a plain CNAME at host @ first (most panels accept it); if rejected use ALIAS / ANAME / CNAME-flattening; if the panel has neither, skip it \u2014 www alone works, and a URL redirect from @ to www covers bare-domain visitors.
+This is a STEP-BY-STEP setup \u2014 give the user ONE record at a time so they do not get overwhelmed and give up.
 
-Host fields above are the SHORT form: most DNS panels append the domain automatically. After saving, the record list must NOT show ${apex} twice in one name \u2014 that means the full name was pasted into an auto-appending field.
+STEP 1 of 2 \u2014 prove ownership. Add ONE record:
 
-Ownership comes ONLY from DNS control; paying never grants it. The first verified request wins and this challenge expires after 72 hours.
+  TXT   host: ${txtShort}   value: ${res.verificationRecord.value}
 
-STEP 2 (after ownership verifies): Sakupa issues certificate-validation TXT records \u2014 the verification result and bind "status" list them the moment they exist; relay each to the user and add them too (copy names and values EXACTLY as given). Everything then completes automatically.
+Host is the SHORT form: most panels append the domain automatically (the saved record must NOT show ${apex} twice in one name). Ownership comes ONLY from DNS control; paying never grants it. The first verified request wins and this challenge expires after 72 hours.
 
-Drive the whole flow with bind "status": it live-checks every record and names the exact fix for anything wrong. Re-check every 5 minutes (up to 10 times). Any later session can resume with action "status" alone; the verificationId is optional.`,
+When the user says the TXT is set, run bind "status". It verifies ownership and then hands back STEP 2 \u2014 a SINGLE www CNAME (there are NO certificate TXT records; HTTPS validates automatically over that CNAME). Each "status" checks the previous step and, unless something is misconfigured, advances to the next \u2014 so run it whenever the user reports a step done, NOT on a timer. Any later session can resume with action "status" alone; the verificationId is optional.`,
           {
             verificationId: res.verificationId,
             apexDomain: apex,
             includedHostnames: res.includedHostnames,
             verificationRecord: res.verificationRecord,
             servingTarget: res.servingTarget,
+            ...res.supersedes ? { supersedes: res.supersedes } : {},
             requiredRecords: [
               {
                 type: "TXT",
                 shortHost: txtShort,
                 name: res.verificationRecord.name,
                 value: res.verificationRecord.value
-              },
-              { type: "CNAME", shortHost: "www", name: `www.${apex}`, value: res.servingTarget },
-              { type: "ALIAS", shortHost: "@", name: apex, value: res.servingTarget }
+              }
             ],
-            servingInstructions: res.servingInstructions,
             retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
             maxAttempts: DNS_MAX_ATTEMPTS
           },
@@ -2530,15 +2513,6 @@ var deleteConfirmation = z4.object({
   expectedBoundHostnames: z4.array(z4.string()),
   acknowledge: z4.literal("delete_and_cancel_renewal")
 });
-var unbindConfirmation = z4.object({
-  siteId: z4.string().min(1),
-  bindingId: z4.string().min(1),
-  expectedBindingUpdatedAt: z4.string().datetime(),
-  expectedBindingStatus: z4.enum(["provisioning", "active"]),
-  apexDomain: z4.string().min(1),
-  expectedBoundHostnames: z4.array(z4.string()),
-  acknowledge: z4.literal("unbind_and_remove_custom_hostnames")
-});
 function registerLifecycleTools(server, baseCtx) {
   server.registerTool(
     "delete",
@@ -2600,66 +2574,6 @@ function registerLifecycleTools(server, baseCtx) {
       }
     }
   );
-  server.registerTool(
-    "unbind",
-    {
-      description: "Preview or execute removal of the custom apex/www serving surface while preserving the subscription and permanent Sakupa URL.",
-      inputSchema: {
-        projectDir: projectDirInput,
-        action: z4.enum(["preview", "confirm"]),
-        operationId: z4.string().min(1).optional(),
-        confirmation: unbindConfirmation.optional()
-      },
-      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
-      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
-    },
-    async (args) => {
-      try {
-        const ctx = withProjectDir(baseCtx, args.projectDir);
-        const site = requireSiteFile(ctx);
-        const operationId = args.operationId ?? randomUUID2();
-        if (args.action === "preview") {
-          const preview = await ctx.client.previewUnbindDomain(site.siteId, site.credential, {
-            operationId
-          });
-          return structuredToolResult({
-            schemaVersion: 1,
-            outcome: "waiting_user",
-            resultCode: "unbind_confirmation_required",
-            operationId,
-            summary: `Exact binding snapshot returned; unbinding removes ONLY the custom domain \u2014 the subscription, content, and permanent URL stay unchanged. To proceed, call unbind again with action:"confirm", operationId:"${operationId}", and the confirmation object from data.preview.confirmation.`,
-            data: { preview },
-            nextActions: [
-              { tool: "unbind", allowed: true, reasonCode: "exact_confirmation_required" }
-            ]
-          });
-        }
-        if (!args.confirmation) {
-          throw new LocalGuidanceError(
-            "invalid_request",
-            'To CONFIRM unbind, first call unbind with action:"preview" to get the exact confirmation object bound to the current binding, then call again with action:"confirm", the same operationId, and that confirmation object.'
-          );
-        }
-        const result = await ctx.client.unbindDomain(site.siteId, site.credential, {
-          operationId,
-          confirmation: args.confirmation
-        });
-        const { boundDomain: _removed, ...remaining } = site;
-        writeSiteFile(ctx.projectDir, remaining);
-        return structuredToolResult({
-          schemaVersion: 1,
-          outcome: result.servingDeletionPending ? "pending_provider" : "completed",
-          resultCode: "domain_unbound",
-          operationId,
-          summary: `Custom domain unbound; the subscription, deployed content, and permanent Sakupa URL are unchanged. (project: ${ctx.projectDir})`,
-          data: { result },
-          nextActions: [{ tool: "status", allowed: true }]
-        });
-      } catch (error) {
-        return toolError(error);
-      }
-    }
-  );
 }
 
 // src/server.ts
@@ -2759,8 +2673,9 @@ Workflow:
    serving surface alongside the permanent URL. Ownership is proven only by DNS control; the
    first verified request wins; unverified requests expire after 72 hours. billing,
    upgrade, portal and recover manage the paid
-   lifecycle; unbind removes the custom domain (the permanent URL keeps serving) and
-   delete tears the whole site down after explicit confirmation.
+   lifecycle; delete tears the whole site down after explicit confirmation. Binding a
+   NEW domain while one is live is a zero-downtime SWITCH: the old domain keeps serving
+   until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
    24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
@@ -2774,7 +2689,7 @@ the user opened (for framework projects, where package.json lives \u2014 never t
 build folder; output is auto-detected). The server NEVER guesses a directory and refuses
 calls without one: only you can see which directory the user is actually in. After every deploy, TELL the user which environment it went to (deploy results carry an
 Explicit Environment line: TEST vs PRODUCTION). analyze, deploy, status,
-refresh, delete and unbind echo
+refresh and delete echo
 the directory they acted on \u2014 verify it matches the user's active project.
 
 When the same operation fails twice in a row, or the user is clearly stuck or

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.17",
+  "version": "0.7.19",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",