@sakupa/mcp 0.7.50 → 0.7.52

package/dist/bin.js

@@ -266,6 +266,8 @@ var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
 var MAX_FILE_COUNT = 5e3;
 var MAX_SINGLE_FILE_BYTES = 25 * 1024 * 1024;
 var FREE_REQUESTS_PER_MINUTE = 240;
+var FREE_TRANSFER_BYTES_PER_DAY = 1024 * 1024 * 1024;
+var USAGE_ROLLUP_MAX_DELAY_SECONDS = 5 * 60;
 var LOAD_BUDGET_ADVISORY = {
   maxFiles: 50,
   maxTotalBytes: 5 * 1024 * 1024,
@@ -400,7 +402,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.50";
+var SAKUPA_MCP_VERSION = "0.7.52";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -3329,6 +3331,7 @@ function structuredToolResult(envelope) {
       "nextActions",
       "operationId",
       "embedded URLs, paths, IDs, code tokens, tool names, arguments, DNS values, field names, amounts and exact timestamps",
+      "complete relative paths including every directory segment; never reduce a path to its basename",
       ...envelope.presentation?.preserveExactFields ?? []
     ],
     mustTellUser: [
@@ -3347,13 +3350,15 @@ function structuredToolResult(envelope) {
       "Answer the current user question instead of mechanically dumping every returned field. Explain relevant technical terms in plain language while retaining the exact term when it helps accuracy.",
       "Do not ask the user to copy or run tool arguments that this AI can execute. Use exact nextActions internally after any required user choice.",
       "Translate human-readable explanations into the language the user is using and present dates and sizes in locally understandable form alongside exact values when precision matters.",
+      "Preserve every returned path verbatim, including all directory segments. For example, .sakupa/site.json must never be shortened to site.json.",
+      "A subscription-backed site stays online only while its subscription remains active. Never describe that duration as permanent or long-term, and never say a subscription is bound to the site.",
       `Every ISO timestamp ending in Z is UTC, never the user local time. Never present it without an explicit UTC label. If the user time zone is known, convert it and show the local date, local clock time, and zone name or UTC offset, while also preserving the exact UTC timestamp. The MCP client runtime reports ${clientTimeZone}; use that only when it represents the user's timezone. If the user time zone is unknown, label the exact value as UTC and do not guess.`,
       "Do not proactively mention a normal Production environment. Always disclose Test or unknown/non-production environments prominently.",
       ...envelope.presentation?.agentInstructions ?? []
     ]
   };
   const structuredEnvelope = { ...envelope, presentation };
-  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
+  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. Preserve every path verbatim with all directory segments: never shorten .sakupa/site.json to site.json. A subscription-backed site stays online only while its subscription remains active; never call that permanent or long-term, and never say a subscription is bound to the site. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
   return {
     content: [{ type: "text", text: `${envelope.summary}
 
@@ -4547,7 +4552,7 @@ Next action: ${analysis.suggestedNextAction}`,
 Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expiry deadline: ${timestampForAgent(finalized2.expiresAt)}
 ` : "") + `
-This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
+This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site. The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.
 ` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
@@ -4562,6 +4567,13 @@ ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
               totalBytes: finalized2.totalBytes,
               warnings: finalized2.warnings,
               credentialStoredLocally: true,
+              credentialPath: ".sakupa/site.json",
+              subscriptionServingRule: {
+                siteStaysOnlineOnlyWhileSubscriptionActive: true,
+                freeSiteExpirySuppressedWhileSubscriptionActive: true,
+                permanentOrLongTermDescriptionAllowed: false,
+                subscriptionBindingDescriptionAllowed: false
+              },
               projectDir: ctx.projectDir,
               environment: environmentFor(ctx.apiBaseUrl)
             }
@@ -4653,6 +4665,13 @@ Optional security recommendation: this management credential was created at ${ti
             filesUploaded: uploaded,
             totalBytes: finalized.totalBytes,
             warnings: finalized.warnings,
+            credentialPath: ".sakupa/site.json",
+            subscriptionServingRule: {
+              siteStaysOnlineOnlyWhileSubscriptionActive: true,
+              freeSiteExpirySuppressedWhileSubscriptionActive: true,
+              permanentOrLongTermDescriptionAllowed: false,
+              subscriptionBindingDescriptionAllowed: false
+            },
             credentialSecurity: credentialSecurity ? {
               credentialCreatedAt: credentialSecurity.credentialCreatedAt,
               ageSeconds: credentialSecurity.ageSeconds,
@@ -4919,7 +4938,7 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
   server.registerTool(
     "billing",
     {
-      description: "Return the sole authoritative source for this site's hosting subscription: current plan, next renewal plan or cancellation, effective time, payment state, current paid entitlement, reconciled usage, estimated usage tier, bound custom domains and risks. Owner-only (uses the credential in .sakupa/site.json).",
+      description: "Return the sole authoritative source for this site's hosting subscription: current plan, next renewal plan or cancellation, effective time, payment state, current paid entitlement, reconciled paid usage or current free-site fair-use telemetry, estimated usage tier, bound custom domains and risks. Owner-only (uses the credential in .sakupa/site.json).",
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
       inputSchema: {}
@@ -4938,7 +4957,10 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
           res.cancelAtPeriodEnd === true ? `Renewal: CANCELED \u2014 the site reverts to free at ${res.cancellationEffectiveAt ? timestampForAgent(res.cancellationEffectiveAt) : res.currentPeriodEnd ? timestampForAgent(res.currentPeriodEnd) : "the end of the already-paid month"}` : res.renewalPlan ? `Next renewal plan: ${res.renewalPlan} (JPY ${res.renewalMonthlyPriceJpy ?? tierPriceJpy(res.renewalPlan)}/month)` + (res.renewalEffectiveAt ? `, effective ${timestampForAgent(res.renewalEffectiveAt)}` : " (unchanged)") : res.cancelAtPeriodEnd === false ? "Renewal cancellation: no" : void 0,
           res.periodEntitlementPlan ? `Current paid entitlement: ${res.periodEntitlementPlan}` : void 0,
           res.currentPeriodStart ? `Current paid period: ${timestampForAgent(res.currentPeriodStart)} -> ${res.currentPeriodEnd ? timestampForAgent(res.currentPeriodEnd) : "?"}` : void 0,
-          `Usage state: ${res.usageState}`,
+          res.mode === "free" ? `Usage state: ${res.usageState} \u2014 this describes free-site telemetry availability, not unlimited or unmeasured traffic. Free previews are measured and fair-use limited.` : `Usage state: ${res.usageState}`,
+          res.freeUsage ? `Current free-site recorded usage for UTC day ${timestampForAgent(res.freeUsage.windowStart)} -> ${timestampForAgent(res.freeUsage.windowEnd)}: storage ${res.freeUsage.recordedUsage.storageBytes} bytes; transfer ${res.freeUsage.recordedUsage.transferBytes} bytes; requests ${res.freeUsage.recordedUsage.requests}.` : void 0,
+          res.freeUsage ? `Free-site fair-use limits: transfer ${res.freeUsage.limits.transferBytesPerDay} bytes per UTC day; requests ${res.freeUsage.limits.requestsPerMinute} per minute per site.` : void 0,
+          res.freeUsage ? `Free-site measurement delay: up to ${res.freeUsage.measurementDelaySecondsMax} seconds; ` + (res.freeUsage.recordedThrough ? `latest flushed counter ${timestampForAgent(res.freeUsage.recordedThrough)}.` : "no flushed request counter yet.") : void 0,
           res.currentPeriodUsage ? `Current usage: storage ${res.currentPeriodUsage.storageBytes} bytes; transfer ${res.currentPeriodUsage.transferBytes} bytes; requests ${res.currentPeriodUsage.requests}` : void 0,
           res.currentPeriodCountedTransferBytes !== void 0 ? `Transfer counted against current plan: ${res.currentPeriodCountedTransferBytes} bytes` : void 0,
           res.currentPlanLimits ? `Current plan limits: storage ${res.currentPlanLimits.storageBytes} bytes; transfer ${res.currentPlanLimits.transferBytes} bytes; requests ${res.currentPlanLimits.requests}` : void 0,

package/dist/index.js

@@ -11,6 +11,8 @@ var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
 var MAX_FILE_COUNT = 5e3;
 var MAX_SINGLE_FILE_BYTES = 25 * 1024 * 1024;
 var FREE_REQUESTS_PER_MINUTE = 240;
+var FREE_TRANSFER_BYTES_PER_DAY = 1024 * 1024 * 1024;
+var USAGE_ROLLUP_MAX_DELAY_SECONDS = 5 * 60;
 var LOAD_BUDGET_ADVISORY = {
   maxFiles: 50,
   maxTotalBytes: 5 * 1024 * 1024,
@@ -145,7 +147,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.50";
+var SAKUPA_MCP_VERSION = "0.7.52";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2139,6 +2141,7 @@ function structuredToolResult(envelope) {
       "nextActions",
       "operationId",
       "embedded URLs, paths, IDs, code tokens, tool names, arguments, DNS values, field names, amounts and exact timestamps",
+      "complete relative paths including every directory segment; never reduce a path to its basename",
       ...envelope.presentation?.preserveExactFields ?? []
     ],
     mustTellUser: [
@@ -2157,13 +2160,15 @@ function structuredToolResult(envelope) {
       "Answer the current user question instead of mechanically dumping every returned field. Explain relevant technical terms in plain language while retaining the exact term when it helps accuracy.",
       "Do not ask the user to copy or run tool arguments that this AI can execute. Use exact nextActions internally after any required user choice.",
       "Translate human-readable explanations into the language the user is using and present dates and sizes in locally understandable form alongside exact values when precision matters.",
+      "Preserve every returned path verbatim, including all directory segments. For example, .sakupa/site.json must never be shortened to site.json.",
+      "A subscription-backed site stays online only while its subscription remains active. Never describe that duration as permanent or long-term, and never say a subscription is bound to the site.",
       `Every ISO timestamp ending in Z is UTC, never the user local time. Never present it without an explicit UTC label. If the user time zone is known, convert it and show the local date, local clock time, and zone name or UTC offset, while also preserving the exact UTC timestamp. The MCP client runtime reports ${clientTimeZone}; use that only when it represents the user's timezone. If the user time zone is unknown, label the exact value as UTC and do not guess.`,
       "Do not proactively mention a normal Production environment. Always disclose Test or unknown/non-production environments prominently.",
       ...envelope.presentation?.agentInstructions ?? []
     ]
   };
   const structuredEnvelope = { ...envelope, presentation };
-  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
+  const presentationFallback = `AGENT PRESENTATION CONTRACT: Retain every technical fact below for reasoning and exact follow-up. Tell the user the requested result, required next step, and every material charge, deadline, security or irreversible consequence. Answer only the current question instead of dumping all fields; explain relevant technical terms in plain language while keeping exact terms available. Translate human-readable explanations into the user's language, but preserve URLs, paths, IDs, tool names, arguments, DNS values, field names, amounts and exact timestamps. Preserve every path verbatim with all directory segments: never shorten .sakupa/site.json to site.json. A subscription-backed site stays online only while its subscription remains active; never call that permanent or long-term, and never say a subscription is bound to the site. A timestamp ending in Z is UTC, never local time: label UTC explicitly and, when the user time zone is known, also show the converted local date/time with its zone name or UTC offset. Never show an unlabeled timestamp or guess an unknown time zone. The MCP client runtime timezone is ${clientTimeZone}; use it only when it represents the user timezone. Do not proactively show a normal Production environment; always disclose Test or unknown environments. Never ask the user to run exact tool arguments that this AI can execute.`;
   return {
     content: [{ type: "text", text: `${envelope.summary}
 
@@ -4663,7 +4668,7 @@ Next action: ${analysis.suggestedNextAction}`,
 Files uploaded: ${uploaded2} (${finalized2.totalBytes} bytes)
 ` + (finalized2.expiresAt ? `Expiry deadline: ${timestampForAgent(finalized2.expiresAt)}
 ` : "") + `
-This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. The management credential was saved to .sakupa/site.json \u2014 keep that file: it is the only way to manage this site.
+This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site. The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.
 ` + credentialGitReminder(ctx.projectDir) + (finalized2.warnings.length > 0 ? `
 Warnings:
 ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
@@ -4678,6 +4683,13 @@ ${JSON.stringify(finalized2.warnings, null, 2)}` : ""),
               totalBytes: finalized2.totalBytes,
               warnings: finalized2.warnings,
               credentialStoredLocally: true,
+              credentialPath: ".sakupa/site.json",
+              subscriptionServingRule: {
+                siteStaysOnlineOnlyWhileSubscriptionActive: true,
+                freeSiteExpirySuppressedWhileSubscriptionActive: true,
+                permanentOrLongTermDescriptionAllowed: false,
+                subscriptionBindingDescriptionAllowed: false
+              },
               projectDir: ctx.projectDir,
               environment: environmentFor(ctx.apiBaseUrl)
             }
@@ -4769,6 +4781,13 @@ Optional security recommendation: this management credential was created at ${ti
             filesUploaded: uploaded,
             totalBytes: finalized.totalBytes,
             warnings: finalized.warnings,
+            credentialPath: ".sakupa/site.json",
+            subscriptionServingRule: {
+              siteStaysOnlineOnlyWhileSubscriptionActive: true,
+              freeSiteExpirySuppressedWhileSubscriptionActive: true,
+              permanentOrLongTermDescriptionAllowed: false,
+              subscriptionBindingDescriptionAllowed: false
+            },
             credentialSecurity: credentialSecurity ? {
               credentialCreatedAt: credentialSecurity.credentialCreatedAt,
               ageSeconds: credentialSecurity.ageSeconds,
@@ -5035,7 +5054,7 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
   server.registerTool(
     "billing",
     {
-      description: "Return the sole authoritative source for this site's hosting subscription: current plan, next renewal plan or cancellation, effective time, payment state, current paid entitlement, reconciled usage, estimated usage tier, bound custom domains and risks. Owner-only (uses the credential in .sakupa/site.json).",
+      description: "Return the sole authoritative source for this site's hosting subscription: current plan, next renewal plan or cancellation, effective time, payment state, current paid entitlement, reconciled paid usage or current free-site fair-use telemetry, estimated usage tier, bound custom domains and risks. Owner-only (uses the credential in .sakupa/site.json).",
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: true, destructiveHint: false, openWorldHint: true },
       inputSchema: {}
@@ -5054,7 +5073,10 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
           res.cancelAtPeriodEnd === true ? `Renewal: CANCELED \u2014 the site reverts to free at ${res.cancellationEffectiveAt ? timestampForAgent(res.cancellationEffectiveAt) : res.currentPeriodEnd ? timestampForAgent(res.currentPeriodEnd) : "the end of the already-paid month"}` : res.renewalPlan ? `Next renewal plan: ${res.renewalPlan} (JPY ${res.renewalMonthlyPriceJpy ?? tierPriceJpy(res.renewalPlan)}/month)` + (res.renewalEffectiveAt ? `, effective ${timestampForAgent(res.renewalEffectiveAt)}` : " (unchanged)") : res.cancelAtPeriodEnd === false ? "Renewal cancellation: no" : void 0,
           res.periodEntitlementPlan ? `Current paid entitlement: ${res.periodEntitlementPlan}` : void 0,
           res.currentPeriodStart ? `Current paid period: ${timestampForAgent(res.currentPeriodStart)} -> ${res.currentPeriodEnd ? timestampForAgent(res.currentPeriodEnd) : "?"}` : void 0,
-          `Usage state: ${res.usageState}`,
+          res.mode === "free" ? `Usage state: ${res.usageState} \u2014 this describes free-site telemetry availability, not unlimited or unmeasured traffic. Free previews are measured and fair-use limited.` : `Usage state: ${res.usageState}`,
+          res.freeUsage ? `Current free-site recorded usage for UTC day ${timestampForAgent(res.freeUsage.windowStart)} -> ${timestampForAgent(res.freeUsage.windowEnd)}: storage ${res.freeUsage.recordedUsage.storageBytes} bytes; transfer ${res.freeUsage.recordedUsage.transferBytes} bytes; requests ${res.freeUsage.recordedUsage.requests}.` : void 0,
+          res.freeUsage ? `Free-site fair-use limits: transfer ${res.freeUsage.limits.transferBytesPerDay} bytes per UTC day; requests ${res.freeUsage.limits.requestsPerMinute} per minute per site.` : void 0,
+          res.freeUsage ? `Free-site measurement delay: up to ${res.freeUsage.measurementDelaySecondsMax} seconds; ` + (res.freeUsage.recordedThrough ? `latest flushed counter ${timestampForAgent(res.freeUsage.recordedThrough)}.` : "no flushed request counter yet.") : void 0,
           res.currentPeriodUsage ? `Current usage: storage ${res.currentPeriodUsage.storageBytes} bytes; transfer ${res.currentPeriodUsage.transferBytes} bytes; requests ${res.currentPeriodUsage.requests}` : void 0,
           res.currentPeriodCountedTransferBytes !== void 0 ? `Transfer counted against current plan: ${res.currentPeriodCountedTransferBytes} bytes` : void 0,
           res.currentPlanLimits ? `Current plan limits: storage ${res.currentPlanLimits.storageBytes} bytes; transfer ${res.currentPlanLimits.transferBytes} bytes; requests ${res.currentPlanLimits.requests}` : void 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.50",
+  "version": "0.7.52",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",