@sakupa/mcp 0.7.52 → 0.7.54

package/dist/bin.js

@@ -402,7 +402,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.52";
+var SAKUPA_MCP_VERSION = "0.7.54";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2758,8 +2758,6 @@ async function diagnoseBinding(input) {
   const layers = `Pipeline: [1] public DNS (checked LIVE above) -> [2] Sakupa ownership verification: ${input.verificationStatus} -> [3] HTTPS certificate & serving: ` + (input.provisioning ? "provisioning (Sakupa's certificate service validates and issues within minutes once the required www record above is OK; run bind status again in about 5 minutes to re-check the provider and advance activation)." : "starts after verification.");
   return { checks, apexResolves, allOk, checklist, layers };
 }
-var DNS_RETRY_AFTER_SECONDS = 300;
-var DNS_MAX_ATTEMPTS = 10;
 function toDnsChecklist(checks) {
   return checks.map((c) => ({
     name: c.record.name,
@@ -2770,13 +2768,12 @@ function toDnsChecklist(checks) {
   }));
 }
 function renderChecklistBlock(diag, fixTail) {
-  const cadence = `Re-check every ${DNS_RETRY_AFTER_SECONDS / 60} minutes, up to ${DNS_MAX_ATTEMPTS} times.`;
   return `Live DNS checklist (host values are the SHORT panel form):
 ${diag.checklist}
 
 ${diag.layers}
 
-` + (diag.allOk ? "All required records are live; certificate issuance completes automatically \u2014 re-check in a few minutes until the binding is active." : `${fixTail} ${cadence}`);
+` + (diag.allOk ? "All required records are live. Cloudflare continues certificate issuance; wait about one minute, then run bind status once when the user asks. Do not poll automatically." : `${fixTail} After the user reports the DNS change is complete, run bind status once. Do not poll automatically.`);
 }
 
 // src/version.ts
@@ -4853,12 +4850,14 @@ Once Stripe confirms payment and Sakupa synchronizes the subscription, the curre
             provisioning: res2.bindingStatus === "provisioning"
           });
           const { apexResolves, allOk } = diag;
+          const manualProviderRecheckRequired = res2.bindingStatus === "provisioning" && res2.provisioningPhase !== "waiting_dns";
+          const customerRecheckInstruction = `The customer cannot know whether the certificate is ready. Never use conditional readiness wording or ask the customer to decide the provider state. Tell the customer: "You do not need to judge readiness. After about one minute, reply: check domain status. I will check it once." The AI, not the customer, calls bind status exactly once. During this zero-downtime transition, the previously active domain may still serve. Once this binding becomes active, Sakupa retains only the last bound domain unit: ${apex2} and www.${apex2}.`;
           return text(
-            res2.bindingStatus === "active" ? "domain_binding_active" : res2.status === "verified" ? "domain_verification_succeeded" : "domain_verification_pending",
+            res2.bindingStatus === "active" ? "domain_binding_active" : res2.bindingStatus === "provisioning" ? "domain_binding_provisioning" : "domain_verification_pending",
             `Domain binding status for ${apex2}: ${res2.status}
-${res2.message}
+${res2.message}` + (manualProviderRecheckRequired ? `
 
-` + renderChecklistBlock(
+${customerRecheckInstruction}` : "") + "\n\n" + renderChecklistBlock(
               diag,
               "Fix any [MISSING]/[FIX] lines above, then re-run bind status; if still failing after the attempts below, show the user this checklist."
             ),
@@ -4866,6 +4865,7 @@ ${res2.message}
               verificationId: res2.verificationId,
               status: res2.status,
               bindingStatus: res2.bindingStatus,
+              provisioningPhase: res2.provisioningPhase,
               apexDomain: apex2,
               provisioningJobId: res2.provisioningJobId,
               servingTarget: res2.servingTarget,
@@ -4874,11 +4874,29 @@ ${res2.message}
               apexRequired: false,
               requiredServingHostname: `www.${apex2}`,
               optionalApexHostname: apex2,
-              retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
-              maxAttempts: DNS_MAX_ATTEMPTS,
+              automaticRetries: 0,
+              manualRecheckOnly: true,
+              backgroundRetry: false,
+              manualStatusCheckRequired: manualProviderRecheckRequired,
+              suggestedRecheckAfterSeconds: manualProviderRecheckRequired ? 60 : void 0,
+              customerReadinessJudgmentRequired: false,
+              customerReplyIntent: manualProviderRecheckRequired ? "check_domain_status" : void 0,
+              customerInstruction: manualProviderRecheckRequired ? customerRecheckInstruction : void 0,
+              transitionMayServePreviousDomain: manualProviderRecheckRequired,
+              finalActiveBindingExclusive: true,
+              postActivationRetainedHostnames: [apex2, `www.${apex2}`],
+              customerLiveConfirmed: res2.bindingStatus === "active",
               message: res2.message
             },
-            res2.bindingStatus === "active" ? "completed" : res2.status === "verified" ? "pending_provider" : "waiting_user"
+            res2.bindingStatus === "active" ? "completed" : res2.provisioningPhase === "waiting_dns" || res2.status !== "verified" ? "waiting_user" : res2.bindingStatus === "provisioning" ? "pending_provider" : "waiting_user",
+            res2.bindingStatus === "provisioning" ? [
+              {
+                tool: "bind",
+                arguments: { action: "status" },
+                allowed: true,
+                reasonCode: res2.provisioningPhase === "waiting_dns" ? "after_user_fixes_dns" : "manual_recheck_after_provider_wait"
+              }
+            ] : []
           );
         }
         if (!args.hostname) {
@@ -4925,8 +4943,8 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
                 value: res.verificationRecord.value
               }
             ],
-            retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
-            maxAttempts: DNS_MAX_ATTEMPTS
+            automaticRetries: 0,
+            manualRecheckOnly: true
           },
           "waiting_user"
         );

package/dist/index.js

@@ -147,7 +147,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "0.7.52";
+var SAKUPA_MCP_VERSION = "0.7.54";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -3508,8 +3508,6 @@ async function diagnoseBinding(input) {
   const layers = `Pipeline: [1] public DNS (checked LIVE above) -> [2] Sakupa ownership verification: ${input.verificationStatus} -> [3] HTTPS certificate & serving: ` + (input.provisioning ? "provisioning (Sakupa's certificate service validates and issues within minutes once the required www record above is OK; run bind status again in about 5 minutes to re-check the provider and advance activation)." : "starts after verification.");
   return { checks, apexResolves, allOk, checklist, layers };
 }
-var DNS_RETRY_AFTER_SECONDS = 300;
-var DNS_MAX_ATTEMPTS = 10;
 function toDnsChecklist(checks) {
   return checks.map((c) => ({
     name: c.record.name,
@@ -3520,13 +3518,12 @@ function toDnsChecklist(checks) {
   }));
 }
 function renderChecklistBlock(diag, fixTail) {
-  const cadence = `Re-check every ${DNS_RETRY_AFTER_SECONDS / 60} minutes, up to ${DNS_MAX_ATTEMPTS} times.`;
   return `Live DNS checklist (host values are the SHORT panel form):
 ${diag.checklist}
 
 ${diag.layers}
 
-` + (diag.allOk ? "All required records are live; certificate issuance completes automatically \u2014 re-check in a few minutes until the binding is active." : `${fixTail} ${cadence}`);
+` + (diag.allOk ? "All required records are live. Cloudflare continues certificate issuance; wait about one minute, then run bind status once when the user asks. Do not poll automatically." : `${fixTail} After the user reports the DNS change is complete, run bind status once. Do not poll automatically.`);
 }
 
 // src/credential-rotation.ts
@@ -4969,12 +4966,14 @@ Once Stripe confirms payment and Sakupa synchronizes the subscription, the curre
             provisioning: res2.bindingStatus === "provisioning"
           });
           const { apexResolves, allOk } = diag;
+          const manualProviderRecheckRequired = res2.bindingStatus === "provisioning" && res2.provisioningPhase !== "waiting_dns";
+          const customerRecheckInstruction = `The customer cannot know whether the certificate is ready. Never use conditional readiness wording or ask the customer to decide the provider state. Tell the customer: "You do not need to judge readiness. After about one minute, reply: check domain status. I will check it once." The AI, not the customer, calls bind status exactly once. During this zero-downtime transition, the previously active domain may still serve. Once this binding becomes active, Sakupa retains only the last bound domain unit: ${apex2} and www.${apex2}.`;
           return text(
-            res2.bindingStatus === "active" ? "domain_binding_active" : res2.status === "verified" ? "domain_verification_succeeded" : "domain_verification_pending",
+            res2.bindingStatus === "active" ? "domain_binding_active" : res2.bindingStatus === "provisioning" ? "domain_binding_provisioning" : "domain_verification_pending",
             `Domain binding status for ${apex2}: ${res2.status}
-${res2.message}
+${res2.message}` + (manualProviderRecheckRequired ? `
 
-` + renderChecklistBlock(
+${customerRecheckInstruction}` : "") + "\n\n" + renderChecklistBlock(
               diag,
               "Fix any [MISSING]/[FIX] lines above, then re-run bind status; if still failing after the attempts below, show the user this checklist."
             ),
@@ -4982,6 +4981,7 @@ ${res2.message}
               verificationId: res2.verificationId,
               status: res2.status,
               bindingStatus: res2.bindingStatus,
+              provisioningPhase: res2.provisioningPhase,
               apexDomain: apex2,
               provisioningJobId: res2.provisioningJobId,
               servingTarget: res2.servingTarget,
@@ -4990,11 +4990,29 @@ ${res2.message}
               apexRequired: false,
               requiredServingHostname: `www.${apex2}`,
               optionalApexHostname: apex2,
-              retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
-              maxAttempts: DNS_MAX_ATTEMPTS,
+              automaticRetries: 0,
+              manualRecheckOnly: true,
+              backgroundRetry: false,
+              manualStatusCheckRequired: manualProviderRecheckRequired,
+              suggestedRecheckAfterSeconds: manualProviderRecheckRequired ? 60 : void 0,
+              customerReadinessJudgmentRequired: false,
+              customerReplyIntent: manualProviderRecheckRequired ? "check_domain_status" : void 0,
+              customerInstruction: manualProviderRecheckRequired ? customerRecheckInstruction : void 0,
+              transitionMayServePreviousDomain: manualProviderRecheckRequired,
+              finalActiveBindingExclusive: true,
+              postActivationRetainedHostnames: [apex2, `www.${apex2}`],
+              customerLiveConfirmed: res2.bindingStatus === "active",
               message: res2.message
             },
-            res2.bindingStatus === "active" ? "completed" : res2.status === "verified" ? "pending_provider" : "waiting_user"
+            res2.bindingStatus === "active" ? "completed" : res2.provisioningPhase === "waiting_dns" || res2.status !== "verified" ? "waiting_user" : res2.bindingStatus === "provisioning" ? "pending_provider" : "waiting_user",
+            res2.bindingStatus === "provisioning" ? [
+              {
+                tool: "bind",
+                arguments: { action: "status" },
+                allowed: true,
+                reasonCode: res2.provisioningPhase === "waiting_dns" ? "after_user_fixes_dns" : "manual_recheck_after_provider_wait"
+              }
+            ] : []
           );
         }
         if (!args.hostname) {
@@ -5041,8 +5059,8 @@ When the user says the TXT is set, run bind "status". It verifies ownership and
                 value: res.verificationRecord.value
               }
             ],
-            retryAfterSeconds: DNS_RETRY_AFTER_SECONDS,
-            maxAttempts: DNS_MAX_ATTEMPTS
+            automaticRetries: 0,
+            manualRecheckOnly: true
           },
           "waiting_user"
         );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "0.7.52",
+  "version": "0.7.54",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "type": "module",
   "main": "dist/index.js",