@sakupa/mcp 0.7.50 → 0.7.51

package/dist/bin.js

@@ -400,7 +400,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.50";
+var SAKUPA_MCP_VERSION = "0.7.51";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -3329,6 +3329,7 @@ function structuredToolResult(envelope) {
       "nextActions",
       "operationId",
       "embedded URLs, paths, IDs, code tokens, tool names, arguments, DNS values, field names, amounts and exact timestamps",
+      "complete relative paths including every directory segment; never reduce a path to its basename",
       ...envelope.presentation?.preserveExactFields ?? []
     ],
     mustTellUser: [
@@ -3347,13 +3348,15 @@ function structuredToolResult(envelope) {
       "Answer the current user question instead of mechanically dumping every returned field. Explain relevant technical terms in plain language while retaining the exact term when it helps accuracy.",
       "Do not ask the user to copy or run tool arguments that this AI can execute. Use exact nextActions internally after any required user choice.",
       "Translate human-readable explanations into the language the user is using and present dates and sizes in locally understandable form alongside exact values when precision matters.",
+      "Preserve every returned path verbatim, including all directory segments. For example, .sakupa/site.json must never be shortened to site.json.",
+      "A subscription-backed site stays online only while its subscription remains active. Never describe that duration as permanent or long-term, and never say a subscription is bound to the site.",
       `Every ISO timestamp ending in Z is UTC, never the user local time. Never present it without an explicit UTC label. If the user time zone is known, convert it and show the local date, local clock time, and zone name or UTC offset, while also preserving the exact UTC timestamp. The MCP client runtime reports ${clientTimeZone}; use that only when it represents the user's timezone. If the user time zone is unknown, label the exact value as UTC and do not guess.`,
       "Do not proactively mention a normal Production environment. Always disclose Test or unknown/non-production environments prominently.",
       ...envelope.presentation?.agentInstructions ?? []
     ]
   };
   const structuredEnvelope = { ...envelope, presentation };
-  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
+  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. Preserve every path verbatim with all directory segments: never shorten .sakupa/site.json to site.json. A subscription-backed site stays online only while its subscription remains active; never call that permanent or long-term, and never say a subscription is bound to the site. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
   return {
     content: [{ type: "text", text: `${envelope.summary}
 
@@ -4547,7 +4550,7 @@ Next action: ${analysis.suggestedNextAction}`,
 Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expiry deadline: ${timestampForAgent(finalized2.expiresAt)}
 ` : "") + `
-This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
+This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site. The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.
 ` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
@@ -4562,6 +4565,13 @@ ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
               totalBytes: finalized2.totalBytes,
               warnings: finalized2.warnings,
               credentialStoredLocally: true,
+              credentialPath: ".sakupa/site.json",
+              subscriptionServingRule: {
+                siteStaysOnlineOnlyWhileSubscriptionActive: true,
+                freeSiteExpirySuppressedWhileSubscriptionActive: true,
+                permanentOrLongTermDescriptionAllowed: false,
+                subscriptionBindingDescriptionAllowed: false
+              },
               projectDir: ctx.projectDir,
               environment: environmentFor(ctx.apiBaseUrl)
             }
@@ -4653,6 +4663,13 @@ Optional security recommendation: this management credential was created at ${ti
             filesUploaded: uploaded,
             totalBytes: finalized.totalBytes,
             warnings: finalized.warnings,
+            credentialPath: ".sakupa/site.json",
+            subscriptionServingRule: {
+              siteStaysOnlineOnlyWhileSubscriptionActive: true,
+              freeSiteExpirySuppressedWhileSubscriptionActive: true,
+              permanentOrLongTermDescriptionAllowed: false,
+              subscriptionBindingDescriptionAllowed: false
+            },
             credentialSecurity: credentialSecurity ? {
               credentialCreatedAt: credentialSecurity.credentialCreatedAt,
               ageSeconds: credentialSecurity.ageSeconds,

package/dist/index.js

@@ -145,7 +145,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.50";
+var SAKUPA_MCP_VERSION = "0.7.51";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2139,6 +2139,7 @@ function structuredToolResult(envelope) {
       "nextActions",
       "operationId",
       "embedded URLs, paths, IDs, code tokens, tool names, arguments, DNS values, field names, amounts and exact timestamps",
+      "complete relative paths including every directory segment; never reduce a path to its basename",
       ...envelope.presentation?.preserveExactFields ?? []
     ],
     mustTellUser: [
@@ -2157,13 +2158,15 @@ function structuredToolResult(envelope) {
       "Answer the current user question instead of mechanically dumping every returned field. Explain relevant technical terms in plain language while retaining the exact term when it helps accuracy.",
       "Do not ask the user to copy or run tool arguments that this AI can execute. Use exact nextActions internally after any required user choice.",
       "Translate human-readable explanations into the language the user is using and present dates and sizes in locally understandable form alongside exact values when precision matters.",
+      "Preserve every returned path verbatim, including all directory segments. For example, .sakupa/site.json must never be shortened to site.json.",
+      "A subscription-backed site stays online only while its subscription remains active. Never describe that duration as permanent or long-term, and never say a subscription is bound to the site.",
       `Every ISO timestamp ending in Z is UTC, never the user local time. Never present it without an explicit UTC label. If the user time zone is known, convert it and show the local date, local clock time, and zone name or UTC offset, while also preserving the exact UTC timestamp. The MCP client runtime reports ${clientTimeZone}; use that only when it represents the user's timezone. If the user time zone is unknown, label the exact value as UTC and do not guess.`,
       "Do not proactively mention a normal Production environment. Always disclose Test or unknown/non-production environments prominently.",
       ...envelope.presentation?.agentInstructions ?? []
     ]
   };
   const structuredEnvelope = { ...envelope, presentation };
-  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
+  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. Preserve every path verbatim with all directory segments: never shorten .sakupa/site.json to site.json. A subscription-backed site stays online only while its subscription remains active; never call that permanent or long-term, and never say a subscription is bound to the site. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
   return {
     content: [{ type: "text", text: `${envelope.summary}
 
@@ -4663,7 +4666,7 @@ Next action: ${analysis.suggestedNextAction}`,
 Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expiry deadline: ${timestampForAgent(finalized2.expiresAt)}
 ` : "") + `
-This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
+This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site. The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.
 ` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
@@ -4678,6 +4681,13 @@ ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
               totalBytes: finalized2.totalBytes,
               warnings: finalized2.warnings,
               credentialStoredLocally: true,
+              credentialPath: ".sakupa/site.json",
+              subscriptionServingRule: {
+                siteStaysOnlineOnlyWhileSubscriptionActive: true,
+                freeSiteExpirySuppressedWhileSubscriptionActive: true,
+                permanentOrLongTermDescriptionAllowed: false,
+                subscriptionBindingDescriptionAllowed: false
+              },
               projectDir: ctx.projectDir,
               environment: environmentFor(ctx.apiBaseUrl)
             }
@@ -4769,6 +4779,13 @@ Optional security recommendation: this management credential was created at ${ti
             filesUploaded: uploaded,
             totalBytes: finalized.totalBytes,
             warnings: finalized.warnings,
+            credentialPath: ".sakupa/site.json",
+            subscriptionServingRule: {
+              siteStaysOnlineOnlyWhileSubscriptionActive: true,
+              freeSiteExpirySuppressedWhileSubscriptionActive: true,
+              permanentOrLongTermDescriptionAllowed: false,
+              subscriptionBindingDescriptionAllowed: false
+            },
             credentialSecurity: credentialSecurity ? {
               credentialCreatedAt: credentialSecurity.credentialCreatedAt,
               ageSeconds: credentialSecurity.ageSeconds,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.50",
+  "version": "0.7.51",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",