@sakupa/mcp 1.4.0 → 1.4.1

package/dist/bin.js

@@ -259,7 +259,8 @@ var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
 var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var CREDENTIAL_ROTATION_RECOMMEND_AFTER_SECONDS = 7 * 24 * 60 * 60;
-var FREE_SITE_TTL_HOURS = 24;
+var FREE_SITE_TTL_DAYS = 30;
+var FREE_SITE_TTL_HOURS = FREE_SITE_TTL_DAYS * 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var FREE_ACTIVE_SITES_PER_IP = 3;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -402,7 +403,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.0";
+var SAKUPA_MCP_VERSION = "1.4.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -4419,7 +4420,7 @@ function registerTools(server, baseCtx) {
     "deploy",
     {
       title: "Deploy site",
-      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_HOURS}h, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
+      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_DAYS} days, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
       inputSchema: z2.object({
@@ -4436,7 +4437,7 @@ function registerTools(server, baseCtx) {
           "Override automatic SPA-fallback detection (single index.html + JS auto-enables rewriting unknown paths to index.html; multiple HTML pages auto-disable it). Pass only to force the behavior against the detected structure."
         ),
         publicConfirmed: z2.boolean().optional().describe(
-          "Required only for the first deployment: user explicitly confirmed creation of a public 24-hour URL."
+          "Required only for the first deployment: user explicitly confirmed creation of a public URL valid for the free-site window."
         ),
         reuseSiteUrl: z2.string().url().optional().describe(
           "Exact existing free-site URL selected by the user when the three-site free-site allowance is full. Never invent this value; copy it from deploy nextActions."
@@ -4708,9 +4709,10 @@ function registerTools(server, baseCtx) {
           const confirmArguments = { ...args, ...confirmation };
           return presentDecision(baseCtx.decisions, call, "deploy", {
             resultCode: "public_deployment_confirmation_required",
-            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_HOURS} hours. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
+            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_DAYS} days. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
             data: {
               publicUrlLifetimeHours: FREE_SITE_TTL_HOURS,
+              publicUrlLifetimeDays: FREE_SITE_TTL_DAYS,
               confirmationField: "publicConfirmed",
               confirmation,
               confirmArguments
@@ -4720,7 +4722,7 @@ function registerTools(server, baseCtx) {
               callToolDecisionOption({
                 id: "create_public_preview",
                 label: "Create the public preview",
-                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_HOURS} hours.`,
+                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_DAYS} days.`,
                 consequences: ["Anyone with the generated URL can open the site."],
                 tool: "deploy",
                 arguments: confirmArguments,
@@ -4932,7 +4934,7 @@ function registerTools(server, baseCtx) {
                 ["Credential path", ".sakupa/site.json"]
               ],
               notes: [
-                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
+                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_DAYS} days. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
                 "The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.",
                 ...[credentialGitReminder(ctx.projectDir)].filter((line) => line.trim().length > 0)
               ],
@@ -5052,7 +5054,7 @@ ${JSON.stringify(finalized2.warnings, null, 2)}
               ...credentialRotationResumed ? [
                 "A previously confirmed credential rotation was resumed safely before this deploy; every older credential is revoked."
               ] : [],
-              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_HOURS} hours after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
+              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_DAYS} days after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
               ...credentialSecurity?.rotationRecommended ? [
                 `Optional security recommendation: this management credential was created at ${timestampForAgent(credentialSecurity.credentialCreatedAt)} and is older than 7 days. The deploy SUCCEEDED and rotation is not required. Ask the user whether they want to rotate; call rotate without confirmed:true to show the exact revocation preview. Never rotate automatically.`
               ] : []
@@ -5154,7 +5156,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
             ],
             notes: [
               "NO content was uploaded or changed by this call \u2014 to publish new or edited files, run deploy.",
-              `Free sites stay live for ${FREE_SITE_TTL_HOURS} hours after each deploy or refresh.`
+              `Free sites stay live for ${FREE_SITE_TTL_DAYS} days after each deploy or refresh.`
             ],
             next: ["`status`", "`deploy` to publish changed files"]
           }),
@@ -5206,7 +5208,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
     "subscribe",
     {
       title: "Subscribe (Stripe Checkout)",
-      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 24-hour expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
+      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 30-day expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
       inputSchema: z2.object({
@@ -7416,7 +7418,7 @@ Workflow:
    (Vite/Vue/React/Svelte/Astro/Next static export/Nuxt generate), run the build LOCALLY first,
    then re-run analyze.
 2. deploy \u2014 uploads ONLY the built static output. The first deploy creates a free temporary
-   site (public URL ${hostPattern}, valid 24 hours, free banner shown) and stores the
+   site (public URL ${hostPattern}, valid 30 days, free banner shown) and stores the
    management credential in .sakupa/site.json. Deploying again updates the site and refreshes
    its validity; refresh extends validity without uploading; status shows the
    current deployment and serving state at any time. Every update checks the credential's
@@ -7425,7 +7427,7 @@ Workflow:
 3. To keep the site live beyond the free period, subscribe it to a monthly hosting plan (plans
    shows the catalog; subscribe -> Stripe-hosted checkout;
    water/personal/share/business). While the subscription remains active, the
-   ${hostPattern} URL stays live without the free 24-hour expiry. Usage over the chosen plan
+   ${hostPattern} URL stays live without the free 30-day expiry. Usage over the chosen plan
    shows an over-limit notice by default. An external AI may periodically query usage and
    recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind): an included extra
@@ -7436,7 +7438,7 @@ Workflow:
    until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
-   24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
+   30-day site and removes paid data after Stripe sends the signed final-cancellation webhook.
    Recovery writes the new local credential before downloading content. If a session stops after
    .sakupa/site.json exists, NEVER repeat DNS recovery: resume with recover action "download".
 5. If any Sakupa operation is difficult or fails, call help FIRST. support handles billing,

package/dist/index.js

@@ -4,7 +4,8 @@ var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
 var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var CREDENTIAL_ROTATION_RECOMMEND_AFTER_SECONDS = 7 * 24 * 60 * 60;
-var FREE_SITE_TTL_HOURS = 24;
+var FREE_SITE_TTL_DAYS = 30;
+var FREE_SITE_TTL_HOURS = FREE_SITE_TTL_DAYS * 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var FREE_ACTIVE_SITES_PER_IP = 3;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -147,7 +148,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.0";
+var SAKUPA_MCP_VERSION = "1.4.1";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -4529,7 +4530,7 @@ function registerTools(server, baseCtx) {
     "deploy",
     {
       title: "Deploy site",
-      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_HOURS}h, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
+      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_DAYS} days, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
       inputSchema: z2.object({
@@ -4546,7 +4547,7 @@ function registerTools(server, baseCtx) {
           "Override automatic SPA-fallback detection (single index.html + JS auto-enables rewriting unknown paths to index.html; multiple HTML pages auto-disable it). Pass only to force the behavior against the detected structure."
         ),
         publicConfirmed: z2.boolean().optional().describe(
-          "Required only for the first deployment: user explicitly confirmed creation of a public 24-hour URL."
+          "Required only for the first deployment: user explicitly confirmed creation of a public URL valid for the free-site window."
         ),
         reuseSiteUrl: z2.string().url().optional().describe(
           "Exact existing free-site URL selected by the user when the three-site free-site allowance is full. Never invent this value; copy it from deploy nextActions."
@@ -4818,9 +4819,10 @@ function registerTools(server, baseCtx) {
           const confirmArguments = { ...args, ...confirmation };
           return presentDecision(baseCtx.decisions, call, "deploy", {
             resultCode: "public_deployment_confirmation_required",
-            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_HOURS} hours. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
+            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_DAYS} days. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
             data: {
               publicUrlLifetimeHours: FREE_SITE_TTL_HOURS,
+              publicUrlLifetimeDays: FREE_SITE_TTL_DAYS,
               confirmationField: "publicConfirmed",
               confirmation,
               confirmArguments
@@ -4830,7 +4832,7 @@ function registerTools(server, baseCtx) {
               callToolDecisionOption({
                 id: "create_public_preview",
                 label: "Create the public preview",
-                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_HOURS} hours.`,
+                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_DAYS} days.`,
                 consequences: ["Anyone with the generated URL can open the site."],
                 tool: "deploy",
                 arguments: confirmArguments,
@@ -5042,7 +5044,7 @@ function registerTools(server, baseCtx) {
                 ["Credential path", ".sakupa/site.json"]
               ],
               notes: [
-                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
+                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_DAYS} days. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
                 "The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.",
                 ...[credentialGitReminder(ctx.projectDir)].filter((line) => line.trim().length > 0)
               ],
@@ -5162,7 +5164,7 @@ ${JSON.stringify(finalized2.warnings, null, 2)}
               ...credentialRotationResumed ? [
                 "A previously confirmed credential rotation was resumed safely before this deploy; every older credential is revoked."
               ] : [],
-              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_HOURS} hours after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
+              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_DAYS} days after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
               ...credentialSecurity?.rotationRecommended ? [
                 `Optional security recommendation: this management credential was created at ${timestampForAgent(credentialSecurity.credentialCreatedAt)} and is older than 7 days. The deploy SUCCEEDED and rotation is not required. Ask the user whether they want to rotate; call rotate without confirmed:true to show the exact revocation preview. Never rotate automatically.`
               ] : []
@@ -5264,7 +5266,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
             ],
             notes: [
               "NO content was uploaded or changed by this call \u2014 to publish new or edited files, run deploy.",
-              `Free sites stay live for ${FREE_SITE_TTL_HOURS} hours after each deploy or refresh.`
+              `Free sites stay live for ${FREE_SITE_TTL_DAYS} days after each deploy or refresh.`
             ],
             next: ["`status`", "`deploy` to publish changed files"]
           }),
@@ -5316,7 +5318,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
     "subscribe",
     {
       title: "Subscribe (Stripe Checkout)",
-      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 24-hour expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
+      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 30-day expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
       inputSchema: z2.object({
@@ -7384,7 +7386,7 @@ Workflow:
    (Vite/Vue/React/Svelte/Astro/Next static export/Nuxt generate), run the build LOCALLY first,
    then re-run analyze.
 2. deploy \u2014 uploads ONLY the built static output. The first deploy creates a free temporary
-   site (public URL ${hostPattern}, valid 24 hours, free banner shown) and stores the
+   site (public URL ${hostPattern}, valid 30 days, free banner shown) and stores the
    management credential in .sakupa/site.json. Deploying again updates the site and refreshes
    its validity; refresh extends validity without uploading; status shows the
    current deployment and serving state at any time. Every update checks the credential's
@@ -7393,7 +7395,7 @@ Workflow:
 3. To keep the site live beyond the free period, subscribe it to a monthly hosting plan (plans
    shows the catalog; subscribe -> Stripe-hosted checkout;
    water/personal/share/business). While the subscription remains active, the
-   ${hostPattern} URL stays live without the free 24-hour expiry. Usage over the chosen plan
+   ${hostPattern} URL stays live without the free 30-day expiry. Usage over the chosen plan
    shows an over-limit notice by default. An external AI may periodically query usage and
    recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind): an included extra
@@ -7404,7 +7406,7 @@ Workflow:
    until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
-   24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
+   30-day site and removes paid data after Stripe sends the signed final-cancellation webhook.
    Recovery writes the new local credential before downloading content. If a session stops after
    .sakupa/site.json exists, NEVER repeat DNS recovery: resume with recover action "download".
 5. If any Sakupa operation is difficult or fails, call help FIRST. support handles billing,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "mcpName": "io.github.myerwang/sakupa",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "homepage": "https://sakupa.com/manual/",