@sakupa/mcp 1.4.0 → 1.5.0

package/dist/bin.js

@@ -259,7 +259,8 @@ var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
 var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var CREDENTIAL_ROTATION_RECOMMEND_AFTER_SECONDS = 7 * 24 * 60 * 60;
-var FREE_SITE_TTL_HOURS = 24;
+var FREE_SITE_TTL_DAYS = 30;
+var FREE_SITE_TTL_HOURS = FREE_SITE_TTL_DAYS * 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var FREE_ACTIVE_SITES_PER_IP = 3;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -402,7 +403,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.0";
+var SAKUPA_MCP_VERSION = "1.5.0";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2207,15 +2208,15 @@ function strFromU8(dat, latin1) {
 var slzh = function(d, b) {
   return b + 30 + b2(d, b + 26) + b2(d, b + 28);
 };
-var zh = function(d, b, z7) {
+var zh = function(d, b, z8) {
   var fnl = b2(d, b + 28), efl = b2(d, b + 30), fn = strFromU8(d.subarray(b + 46, b + 46 + fnl), !(b2(d, b + 8) & 2048)), es = b + 46 + fnl;
-  var _a2 = z64hs(d, es, efl, z7, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
+  var _a2 = z64hs(d, es, efl, z8, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
   return [b2(d, b + 10), sc, su, fn, es + efl + b2(d, b + 32), off];
 };
-var z64hs = function(d, b, l, z7, sc, su, off) {
+var z64hs = function(d, b, l, z8, sc, su, off) {
   var nsc = sc == 4294967295, nsu = su == 4294967295, noff = off == 4294967295, e = b + l;
   var nf = nsc + nsu + noff;
-  if (z7 && nf) {
+  if (z8 && nf) {
     for (; b + 4 < e; b += 4 + b2(d, b + 2)) {
       if (b2(d, b) == 1) {
         return [
@@ -2226,7 +2227,7 @@ var z64hs = function(d, b, l, z7, sc, su, off) {
         ];
       }
     }
-    if (z7 < 2)
+    if (z8 < 2)
       err(13);
   }
   return [sc, su, off, 0];
@@ -2243,18 +2244,18 @@ function unzipSync(data, opts) {
   if (!c)
     return {};
   var o = b4(data, e + 16);
-  var z7 = b4(data, e - 20) == 117853008;
-  if (z7) {
+  var z8 = b4(data, e - 20) == 117853008;
+  if (z8) {
     var ze = b4(data, e - 12);
-    z7 = b4(data, ze) == 101075792;
-    if (z7) {
+    z8 = b4(data, ze) == 101075792;
+    if (z8) {
       c = b4(data, ze + 32);
       o = b4(data, ze + 48);
     }
   }
   var fltr = opts && opts.filter;
   for (var i = 0; i < c; ++i) {
-    var _a2 = zh(data, o, z7), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
+    var _a2 = zh(data, o, z8), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
     o = no;
     if (!fltr || fltr({
       name: fn,
@@ -3435,7 +3436,8 @@ var TARGET_MCP_TOOL_NAMES = [
   "change",
   "support",
   "report",
-  "apps"
+  "apps",
+  "delete"
 ];
 var STRUCTURED_TOOL_OUTPUT_SCHEMA = z.object({
   schemaVersion: z.literal(1),
@@ -4419,7 +4421,7 @@ function registerTools(server, baseCtx) {
     "deploy",
     {
       title: "Deploy site",
-      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_HOURS}h, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
+      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_DAYS} days, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
       inputSchema: z2.object({
@@ -4436,7 +4438,7 @@ function registerTools(server, baseCtx) {
           "Override automatic SPA-fallback detection (single index.html + JS auto-enables rewriting unknown paths to index.html; multiple HTML pages auto-disable it). Pass only to force the behavior against the detected structure."
         ),
         publicConfirmed: z2.boolean().optional().describe(
-          "Required only for the first deployment: user explicitly confirmed creation of a public 24-hour URL."
+          "Required only for the first deployment: user explicitly confirmed creation of a public URL valid for the free-site window."
         ),
         reuseSiteUrl: z2.string().url().optional().describe(
           "Exact existing free-site URL selected by the user when the three-site free-site allowance is full. Never invent this value; copy it from deploy nextActions."
@@ -4708,9 +4710,10 @@ function registerTools(server, baseCtx) {
           const confirmArguments = { ...args, ...confirmation };
           return presentDecision(baseCtx.decisions, call, "deploy", {
             resultCode: "public_deployment_confirmation_required",
-            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_HOURS} hours. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
+            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_DAYS} days. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
             data: {
               publicUrlLifetimeHours: FREE_SITE_TTL_HOURS,
+              publicUrlLifetimeDays: FREE_SITE_TTL_DAYS,
               confirmationField: "publicConfirmed",
               confirmation,
               confirmArguments
@@ -4720,7 +4723,7 @@ function registerTools(server, baseCtx) {
               callToolDecisionOption({
                 id: "create_public_preview",
                 label: "Create the public preview",
-                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_HOURS} hours.`,
+                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_DAYS} days.`,
                 consequences: ["Anyone with the generated URL can open the site."],
                 tool: "deploy",
                 arguments: confirmArguments,
@@ -4932,7 +4935,7 @@ function registerTools(server, baseCtx) {
                 ["Credential path", ".sakupa/site.json"]
               ],
               notes: [
-                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
+                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_DAYS} days. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
                 "The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.",
                 ...[credentialGitReminder(ctx.projectDir)].filter((line) => line.trim().length > 0)
               ],
@@ -5052,7 +5055,7 @@ ${JSON.stringify(finalized2.warnings, null, 2)}
               ...credentialRotationResumed ? [
                 "A previously confirmed credential rotation was resumed safely before this deploy; every older credential is revoked."
               ] : [],
-              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_HOURS} hours after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
+              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_DAYS} days after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
               ...credentialSecurity?.rotationRecommended ? [
                 `Optional security recommendation: this management credential was created at ${timestampForAgent(credentialSecurity.credentialCreatedAt)} and is older than 7 days. The deploy SUCCEEDED and rotation is not required. Ask the user whether they want to rotate; call rotate without confirmed:true to show the exact revocation preview. Never rotate automatically.`
               ] : []
@@ -5154,7 +5157,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
             ],
             notes: [
               "NO content was uploaded or changed by this call \u2014 to publish new or edited files, run deploy.",
-              `Free sites stay live for ${FREE_SITE_TTL_HOURS} hours after each deploy or refresh.`
+              `Free sites stay live for ${FREE_SITE_TTL_DAYS} days after each deploy or refresh.`
             ],
             next: ["`status`", "`deploy` to publish changed files"]
           }),
@@ -5206,7 +5209,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
     "subscribe",
     {
       title: "Subscribe (Stripe Checkout)",
-      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 24-hour expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
+      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 30-day expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
       inputSchema: z2.object({
@@ -6168,6 +6171,7 @@ var TOOL_TOPICS = [
   "support",
   "report",
   "apps",
+  "delete",
   "help"
 ];
 var HELP_TOPICS = ["diagnose", "overview", "terminology", ...TOOL_TOPICS];
@@ -6278,6 +6282,18 @@ var TOOL_MANUALS = {
     nextStep: "Use the preview resumeWith arguments only after the user confirms.",
     terminology: ["credentialRotation"]
   },
+  delete: {
+    purpose: "Delete the bound FREE site after an explicit preview and confirmation.",
+    sideEffects: "Preview is read-only. Confirmed deletion removes content, the public URL, installed apps, stored submissions and the local .sakupa/site.json.",
+    preconditions: "A valid local site credential and a free site. A subscribed site is refused until the subscription ends (change \u2192 period-end cancellation) and the site reverts to free.",
+    parameterNames: ["confirmed", "operationId", "confirmation"],
+    parameters: "No arguments for the preview; confirmed=true with the exact operationId and confirmation copied from the preview decision.",
+    warnings: [
+      "Irreversible; the next deploy creates a brand-new site with a new URL.",
+      "Never propose delete to free up the free-site allowance; use the deploy handoff decision instead."
+    ],
+    nextStep: "Present every decision option; after confirmation copy the option arguments verbatim."
+  },
   plans: {
     purpose: "Read the authoritative hosting plan catalog and rules.",
     sideEffects: "Read-only public API request.",
@@ -7256,6 +7272,196 @@ function registerAppsTools(server, baseCtx) {
   );
 }
 
+// src/tools/delete.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { z as z7 } from "zod";
+var confirmationSchema = z7.object({
+  siteId: z7.string(),
+  expectedSiteUpdatedAt: z7.string(),
+  expectedStatus: z7.string(),
+  expectedMode: z7.enum(["free", "paid"]),
+  expectedServingMode: z7.string(),
+  expectedShortId: z7.string().optional(),
+  expectedSubscriptionStatus: z7.string().optional(),
+  expectedPlan: z7.string().optional(),
+  expectedCancelAtPeriodEnd: z7.boolean().optional(),
+  expectedCurrentPeriodEnd: z7.string().optional(),
+  expectedLastDeploymentId: z7.string().optional(),
+  expectedBoundHostnames: z7.array(z7.string()),
+  acknowledge: z7.literal("delete_and_cancel_renewal")
+});
+function registerDeleteTools(server, baseCtx) {
+  server.registerTool(
+    "delete",
+    {
+      title: "Delete site",
+      description: "Delete the site bound to this project. Without arguments it only previews (zero writes) and returns a decision; after the user confirms, call again with the exact preview arguments (confirmed: true, operationId, confirmation). A FREE site is deleted immediately: content, public URL, installed apps and stored submissions are gone and the local .sakupa/site.json is removed, so the next deploy creates a brand-new site. A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end cancellation on Stripe); when it ends the site reverts to a free site and delete becomes available. Owner-only.",
+      inputSchema: z7.object({
+        confirmed: z7.boolean().optional().describe("true only from the exact decision arguments returned by the preview."),
+        operationId: z7.string().optional().describe("Copied verbatim from the preview."),
+        confirmation: confirmationSchema.optional().describe("Copied verbatim from the preview; the cloud rejects any drift.")
+      }),
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    withDecisionReentry("delete", async (args, call) => {
+      try {
+        const ctx = await withProjectDir(baseCtx, call);
+        const site = requireSiteFile(ctx);
+        if (args.confirmed === true) {
+          if (!args.operationId || !args.confirmation) {
+            return structuredToolResult({
+              schemaVersion: 1,
+              outcome: "blocked",
+              resultCode: "delete_preview_required",
+              summary: summaryMarkdown({
+                title: "Nothing was deleted \u2014 run the preview first",
+                lead: "A confirmed delete must carry the exact operationId and confirmation from the preview. Call delete with no arguments, show the preview to the user, then reuse its decision arguments.",
+                next: ["`delete` with no arguments"]
+              }),
+              data: { siteId: site.siteId },
+              nextActions: [{ tool: "delete", arguments: {}, allowed: true }]
+            });
+          }
+          const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+            operationId: args.operationId,
+            confirmation: args.confirmation
+          });
+          deleteSiteFile(ctx.projectDir);
+          removeCreation(site.siteId);
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "completed",
+            resultCode: result.alreadyDeleted ? "site_already_deleted" : "site_deleted",
+            summary: summaryMarkdown({
+              title: result.alreadyDeleted ? "Site was already deleted" : "Site deleted",
+              lead: `${site.url ?? site.siteId} no longer serves anything (visitors get HTTP 410). The local credential file .sakupa/site.json was removed; this project is no longer bound to any site.`,
+              facts: [
+                ["Site ID", result.siteId],
+                ["Public URL released", site.url],
+                [
+                  "Custom hostnames removed",
+                  result.removedHostnames.length ? result.removedHostnames.join(", ") : "none"
+                ],
+                ["Serving cleanup still pending", result.servingDeletionPending]
+              ],
+              notes: [
+                "Installed apps and stored form submissions were deleted with the site.",
+                "The free-site allowance this site used on its deployment network is released."
+              ],
+              next: ["`deploy` to publish a brand-new site (new URL, new credential)"]
+            }),
+            data: {
+              ...result,
+              projectDir: ctx.projectDir,
+              localSiteFileRemoved: true,
+              releasedUrl: site.url
+            },
+            nextActions: []
+          });
+        }
+        const operationId = randomUUID7();
+        const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
+          operationId
+        });
+        const c = preview.consequences;
+        if (c.requiresFreeModeBeforeDelete) {
+          const cancellationScheduled = preview.confirmation.expectedCancelAtPeriodEnd === true;
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "blocked",
+            resultCode: "delete_requires_free_mode",
+            summary: summaryMarkdown({
+              title: "This site is subscription-backed \u2014 it cannot be deleted yet",
+              lead: "Nothing was changed. Sakupa deletes only FREE sites. End the subscription first; when the paid period ends the site automatically becomes a free 30-day site, and delete becomes available.",
+              facts: [
+                ["Site", site.url ?? site.siteId],
+                ["Plan", preview.confirmation.expectedPlan],
+                ["Period-end cancellation already scheduled", cancellationScheduled ? "yes" : "no"],
+                [
+                  "Paid access ends",
+                  c.currentPaidAccessEndsAt ? timestampForAgent(c.currentPaidAccessEndsAt) : void 0
+                ],
+                [
+                  "Custom hostnames removed when it reverts",
+                  c.removesCustomHostnames.join(", ") || "none"
+                ]
+              ],
+              steps: cancellationScheduled ? [
+                "Wait for the paid period to end; Sakupa then reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ] : [
+                "Call change and open the Stripe-hosted link; the user chooses period-end cancellation there (Sakupa never cancels on its own).",
+                "When the paid period ends, Sakupa reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ],
+              next: cancellationScheduled ? ["`billing`"] : ["`change`", "`billing`"]
+            }),
+            data: {
+              siteId: site.siteId,
+              operationId: preview.operationId,
+              consequences: c,
+              cancellationScheduled
+            },
+            nextActions: [
+              { tool: cancellationScheduled ? "billing" : "change", arguments: {}, allowed: true }
+            ]
+          });
+        }
+        const confirmArguments = {
+          confirmed: true,
+          operationId: preview.operationId,
+          confirmation: preview.confirmation
+        };
+        return presentDecision(baseCtx.decisions, call, "delete", {
+          resultCode: "delete_confirmation_required",
+          summary: summaryMarkdown({
+            title: `Delete ${site.url ?? site.siteId}? Nothing was changed.`,
+            lead: "This is a preview. Deleting cannot be undone: the content, the public URL, installed apps and stored form submissions disappear at once, and the local credential file is removed.",
+            facts: [
+              ["Site ID", site.siteId],
+              ["Public URL", site.url],
+              ["Permanent URL released", c.releasesPermanentUrl],
+              ["Custom hostnames removed", c.removesCustomHostnames.join(", ") || "none"],
+              ["Exact confirm arguments", JSON.stringify(confirmArguments)]
+            ],
+            notes: [
+              "After deletion this project is unbound; the next deploy creates a brand-new site with a new URL and credential.",
+              "To keep the URL but replace the content, deploy again instead of deleting."
+            ]
+          }),
+          data: {
+            siteId: site.siteId,
+            operationId: preview.operationId,
+            consequences: c,
+            confirmation: preview.confirmation,
+            confirmArguments
+          },
+          prompt: `Delete the site ${site.url ?? site.siteId} now? This cannot be undone.`,
+          options: [
+            callToolDecisionOption({
+              id: "delete_site",
+              label: `Delete ${site.url ?? site.siteId}`,
+              description: "Remove the site, its content, apps and submissions, and release the URL.",
+              consequences: [
+                "Visitors get HTTP 410 immediately.",
+                "The local credential file is removed; this project is unbound."
+              ],
+              tool: "delete",
+              arguments: confirmArguments,
+              reasonCode: "explicit_site_delete_confirmation"
+            }),
+            noActionDecisionOption({ description: "Keep the site exactly as it is." })
+          ],
+          legacyUserAction: { type: "confirm_in_mcp", provider: "sakupa" }
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    })
+  );
+}
+
 // src/transport.ts
 var DEFAULT_REQUEST_TIMEOUT_MS = 15e3;
 var DEFAULT_UPLOAD_TIMEOUT_MS = 3e4;
@@ -7416,7 +7622,7 @@ Workflow:
    (Vite/Vue/React/Svelte/Astro/Next static export/Nuxt generate), run the build LOCALLY first,
    then re-run analyze.
 2. deploy \u2014 uploads ONLY the built static output. The first deploy creates a free temporary
-   site (public URL ${hostPattern}, valid 24 hours, free banner shown) and stores the
+   site (public URL ${hostPattern}, valid 30 days, free banner shown) and stores the
    management credential in .sakupa/site.json. Deploying again updates the site and refreshes
    its validity; refresh extends validity without uploading; status shows the
    current deployment and serving state at any time. Every update checks the credential's
@@ -7425,7 +7631,7 @@ Workflow:
 3. To keep the site live beyond the free period, subscribe it to a monthly hosting plan (plans
    shows the catalog; subscribe -> Stripe-hosted checkout;
    water/personal/share/business). While the subscription remains active, the
-   ${hostPattern} URL stays live without the free 24-hour expiry. Usage over the chosen plan
+   ${hostPattern} URL stays live without the free 30-day expiry. Usage over the chosen plan
    shows an over-limit notice by default. An external AI may periodically query usage and
    recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind): an included extra
@@ -7436,13 +7642,20 @@ Workflow:
    until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
-   24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
+   30-day site and removes paid data after Stripe sends the signed final-cancellation webhook.
    Recovery writes the new local credential before downloading content. If a session stops after
    .sakupa/site.json exists, NEVER repeat DNS recovery: resume with recover action "download".
 5. If any Sakupa operation is difficult or fails, call help FIRST. support handles billing,
    payment, refund and other customer-service requests. report is the LAST resort only when
    help explicitly recommends a product bug report, and submission still requires user review.
 
+Deleting a site: delete with no arguments only previews and returns a decision; after the user
+confirms, call delete again with the exact preview arguments. A FREE site is deleted immediately
+(content, URL, apps and submissions gone; .sakupa/site.json removed; the next deploy creates a new
+site). A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end
+cancellation on Stripe); when it ends the site reverts to a free 30-day site and delete becomes
+available. Never suggest delete as a way to free up the free-site allowance during deploy.
+
 Decision-options contract: when a result contains decision, present EVERY numbered option from the
 tool to the user and wait for their selection. No option is selected by default. Never choose from
 context, paraphrase a selection into different arguments, or invent another option. After the user
@@ -7599,6 +7812,7 @@ function createSakupaMcpServer(opts) {
   registerBillingTools(server, ctx);
   registerCredentialTools(server, ctx);
   registerAppsTools(server, ctx);
+  registerDeleteTools(server, ctx);
   registerHelpTools(server, ctx);
   return server;
 }

package/dist/index.js

@@ -4,7 +4,8 @@ var DEFAULT_API_BASE_URL = "https://api.sakupa.com";
 var FREE_SITE_URL_SUFFIX = `.${SERVICE_DOMAIN}`;
 var TEST_ACCESS_HEADER = "x-sakupa-test-token";
 var CREDENTIAL_ROTATION_RECOMMEND_AFTER_SECONDS = 7 * 24 * 60 * 60;
-var FREE_SITE_TTL_HOURS = 24;
+var FREE_SITE_TTL_DAYS = 30;
+var FREE_SITE_TTL_HOURS = FREE_SITE_TTL_DAYS * 24;
 var FREE_SITE_MAX_TOTAL_BYTES = 10 * 1024 * 1024;
 var FREE_ACTIVE_SITES_PER_IP = 3;
 var PAID_SITE_MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
@@ -147,7 +148,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.0";
+var SAKUPA_MCP_VERSION = "1.5.0";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2242,7 +2243,8 @@ var TARGET_MCP_TOOL_NAMES = [
   "change",
   "support",
   "report",
-  "apps"
+  "apps",
+  "delete"
 ];
 var STRUCTURED_TOOL_OUTPUT_SCHEMA = z.object({
   schemaVersion: z.literal(1),
@@ -3083,15 +3085,15 @@ function strFromU8(dat, latin1) {
 var slzh = function(d, b) {
   return b + 30 + b2(d, b + 26) + b2(d, b + 28);
 };
-var zh = function(d, b, z7) {
+var zh = function(d, b, z8) {
   var fnl = b2(d, b + 28), efl = b2(d, b + 30), fn = strFromU8(d.subarray(b + 46, b + 46 + fnl), !(b2(d, b + 8) & 2048)), es = b + 46 + fnl;
-  var _a2 = z64hs(d, es, efl, z7, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
+  var _a2 = z64hs(d, es, efl, z8, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
   return [b2(d, b + 10), sc, su, fn, es + efl + b2(d, b + 32), off];
 };
-var z64hs = function(d, b, l, z7, sc, su, off) {
+var z64hs = function(d, b, l, z8, sc, su, off) {
   var nsc = sc == 4294967295, nsu = su == 4294967295, noff = off == 4294967295, e = b + l;
   var nf = nsc + nsu + noff;
-  if (z7 && nf) {
+  if (z8 && nf) {
     for (; b + 4 < e; b += 4 + b2(d, b + 2)) {
       if (b2(d, b) == 1) {
         return [
@@ -3102,7 +3104,7 @@ var z64hs = function(d, b, l, z7, sc, su, off) {
         ];
       }
     }
-    if (z7 < 2)
+    if (z8 < 2)
       err(13);
   }
   return [sc, su, off, 0];
@@ -3119,18 +3121,18 @@ function unzipSync(data, opts) {
   if (!c)
     return {};
   var o = b4(data, e + 16);
-  var z7 = b4(data, e - 20) == 117853008;
-  if (z7) {
+  var z8 = b4(data, e - 20) == 117853008;
+  if (z8) {
     var ze = b4(data, e - 12);
-    z7 = b4(data, ze) == 101075792;
-    if (z7) {
+    z8 = b4(data, ze) == 101075792;
+    if (z8) {
       c = b4(data, ze + 32);
       o = b4(data, ze + 48);
     }
   }
   var fltr = opts && opts.filter;
   for (var i = 0; i < c; ++i) {
-    var _a2 = zh(data, o, z7), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
+    var _a2 = zh(data, o, z8), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
     o = no;
     if (!fltr || fltr({
       name: fn,
@@ -4529,7 +4531,7 @@ function registerTools(server, baseCtx) {
     "deploy",
     {
       title: "Deploy site",
-      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_HOURS}h, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
+      description: `Deploy the local static output to Sakupa. First deploy creates a free temporary site (valid ${FREE_SITE_TTL_DAYS} days, public URL like https://${previewHostPattern}) and stores the management credential in .sakupa/site.json. Later runs update the existing site (free sites also refresh their validity; subscription-backed sites have no free-site expiry while the subscription remains active). Runs analyze first and refuses to upload source projects, secrets, .env files, archives, media or server code. The MCP process is locked to the current directory initialized by the no-argument init MCP tool; no tool argument can change that root. outputDir is a separate REQUIRED relative path supplied from the current project inspection. Never uploads anything when analysis says the project is not deployable.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true },
       inputSchema: z2.object({
@@ -4546,7 +4548,7 @@ function registerTools(server, baseCtx) {
           "Override automatic SPA-fallback detection (single index.html + JS auto-enables rewriting unknown paths to index.html; multiple HTML pages auto-disable it). Pass only to force the behavior against the detected structure."
         ),
         publicConfirmed: z2.boolean().optional().describe(
-          "Required only for the first deployment: user explicitly confirmed creation of a public 24-hour URL."
+          "Required only for the first deployment: user explicitly confirmed creation of a public URL valid for the free-site window."
         ),
         reuseSiteUrl: z2.string().url().optional().describe(
           "Exact existing free-site URL selected by the user when the three-site free-site allowance is full. Never invent this value; copy it from deploy nextActions."
@@ -4818,9 +4820,10 @@ function registerTools(server, baseCtx) {
           const confirmArguments = { ...args, ...confirmation };
           return presentDecision(baseCtx.decisions, call, "deploy", {
             resultCode: "public_deployment_confirmation_required",
-            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_HOURS} hours. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
+            summary: `First deployment creates a public URL that anyone with the link can open. The free preview stays live for ${FREE_SITE_TTL_DAYS} days. Nothing has been uploaded or made public yet. The exact confirmation field is publicConfirmed: true.`,
             data: {
               publicUrlLifetimeHours: FREE_SITE_TTL_HOURS,
+              publicUrlLifetimeDays: FREE_SITE_TTL_DAYS,
               confirmationField: "publicConfirmed",
               confirmation,
               confirmArguments
@@ -4830,7 +4833,7 @@ function registerTools(server, baseCtx) {
               callToolDecisionOption({
                 id: "create_public_preview",
                 label: "Create the public preview",
-                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_HOURS} hours.`,
+                description: `Publish the selected files at a public URL for ${FREE_SITE_TTL_DAYS} days.`,
                 consequences: ["Anyone with the generated URL can open the site."],
                 tool: "deploy",
                 arguments: confirmArguments,
@@ -5042,7 +5045,7 @@ function registerTools(server, baseCtx) {
                 ["Credential path", ".sakupa/site.json"]
               ],
               notes: [
-                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_HOURS} hours. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
+                `This is a FREE temporary preview: it stays live for ${FREE_SITE_TTL_DAYS} days. Deploying again or calling refresh extends the validity; while a subscription remains active, this URL stays live without the free-site expiry. This is conditional on the subscription remaining active: do NOT describe the site as permanent or long-term, and do NOT say the subscription is bound to the site.`,
                 "The management credential was saved to the exact relative path .sakupa/site.json \u2014 preserve this complete path verbatim and never shorten it to site.json. Keep that file: it is the only way to manage this site.",
                 ...[credentialGitReminder(ctx.projectDir)].filter((line) => line.trim().length > 0)
               ],
@@ -5162,7 +5165,7 @@ ${JSON.stringify(finalized2.warnings, null, 2)}
               ...credentialRotationResumed ? [
                 "A previously confirmed credential rotation was resumed safely before this deploy; every older credential is revoked."
               ] : [],
-              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_HOURS} hours after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
+              finalized.mode === "free" ? `Reminder: free sites stay live for ${FREE_SITE_TTL_DAYS} days after the last deploy or refresh call. While a subscription remains active, the site stays live without this free-site expiry.` : "This site is subscription-backed and has no free-site expiry while the subscription remains active.",
               ...credentialSecurity?.rotationRecommended ? [
                 `Optional security recommendation: this management credential was created at ${timestampForAgent(credentialSecurity.credentialCreatedAt)} and is older than 7 days. The deploy SUCCEEDED and rotation is not required. Ask the user whether they want to rotate; call rotate without confirmed:true to show the exact revocation preview. Never rotate automatically.`
               ] : []
@@ -5264,7 +5267,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
             ],
             notes: [
               "NO content was uploaded or changed by this call \u2014 to publish new or edited files, run deploy.",
-              `Free sites stay live for ${FREE_SITE_TTL_HOURS} hours after each deploy or refresh.`
+              `Free sites stay live for ${FREE_SITE_TTL_DAYS} days after each deploy or refresh.`
             ],
             next: ["`status`", "`deploy` to publish changed files"]
           }),
@@ -5316,7 +5319,7 @@ ${JSON.stringify(finalized.warnings, null, 2)}
     "subscribe",
     {
       title: "Subscribe (Stripe Checkout)",
-      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 24-hour expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
+      description: `Create a Stripe Checkout link that subscribes THIS site to a Sakupa Hosting monthly plan (${planCatalog()}). While the subscription remains active, its ${previewHostPattern} URL stays live without the free 30-day expiry. Binding a custom domain afterwards (bind) is an optional included extra and requires DNS control of that domain. Owner-only: requires this project's site credential (.sakupa/site.json) \u2014 deploy first. If the site outgrows its plan, Sakupa shows an over-limit notice and never changes billing automatically. The owner can explicitly choose another plan through Stripe Customer Portal. Card details are entered only on the Stripe-hosted page \u2014 never through the AI tool. Opening and completing Stripe Checkout is the final subscription confirmation.`,
       outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
       annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: true },
       inputSchema: z2.object({
@@ -6287,6 +6290,7 @@ var TOOL_TOPICS = [
   "support",
   "report",
   "apps",
+  "delete",
   "help"
 ];
 var HELP_TOPICS = ["diagnose", "overview", "terminology", ...TOOL_TOPICS];
@@ -6397,6 +6401,18 @@ var TOOL_MANUALS = {
     nextStep: "Use the preview resumeWith arguments only after the user confirms.",
     terminology: ["credentialRotation"]
   },
+  delete: {
+    purpose: "Delete the bound FREE site after an explicit preview and confirmation.",
+    sideEffects: "Preview is read-only. Confirmed deletion removes content, the public URL, installed apps, stored submissions and the local .sakupa/site.json.",
+    preconditions: "A valid local site credential and a free site. A subscribed site is refused until the subscription ends (change \u2192 period-end cancellation) and the site reverts to free.",
+    parameterNames: ["confirmed", "operationId", "confirmation"],
+    parameters: "No arguments for the preview; confirmed=true with the exact operationId and confirmation copied from the preview decision.",
+    warnings: [
+      "Irreversible; the next deploy creates a brand-new site with a new URL.",
+      "Never propose delete to free up the free-site allowance; use the deploy handoff decision instead."
+    ],
+    nextStep: "Present every decision option; after confirmation copy the option arguments verbatim."
+  },
   plans: {
     purpose: "Read the authoritative hosting plan catalog and rules.",
     sideEffects: "Read-only public API request.",
@@ -7375,6 +7391,196 @@ function registerAppsTools(server, baseCtx) {
   );
 }
 
+// src/tools/delete.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { z as z7 } from "zod";
+var confirmationSchema = z7.object({
+  siteId: z7.string(),
+  expectedSiteUpdatedAt: z7.string(),
+  expectedStatus: z7.string(),
+  expectedMode: z7.enum(["free", "paid"]),
+  expectedServingMode: z7.string(),
+  expectedShortId: z7.string().optional(),
+  expectedSubscriptionStatus: z7.string().optional(),
+  expectedPlan: z7.string().optional(),
+  expectedCancelAtPeriodEnd: z7.boolean().optional(),
+  expectedCurrentPeriodEnd: z7.string().optional(),
+  expectedLastDeploymentId: z7.string().optional(),
+  expectedBoundHostnames: z7.array(z7.string()),
+  acknowledge: z7.literal("delete_and_cancel_renewal")
+});
+function registerDeleteTools(server, baseCtx) {
+  server.registerTool(
+    "delete",
+    {
+      title: "Delete site",
+      description: "Delete the site bound to this project. Without arguments it only previews (zero writes) and returns a decision; after the user confirms, call again with the exact preview arguments (confirmed: true, operationId, confirmation). A FREE site is deleted immediately: content, public URL, installed apps and stored submissions are gone and the local .sakupa/site.json is removed, so the next deploy creates a brand-new site. A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end cancellation on Stripe); when it ends the site reverts to a free site and delete becomes available. Owner-only.",
+      inputSchema: z7.object({
+        confirmed: z7.boolean().optional().describe("true only from the exact decision arguments returned by the preview."),
+        operationId: z7.string().optional().describe("Copied verbatim from the preview."),
+        confirmation: confirmationSchema.optional().describe("Copied verbatim from the preview; the cloud rejects any drift.")
+      }),
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    withDecisionReentry("delete", async (args, call) => {
+      try {
+        const ctx = await withProjectDir(baseCtx, call);
+        const site = requireSiteFile(ctx);
+        if (args.confirmed === true) {
+          if (!args.operationId || !args.confirmation) {
+            return structuredToolResult({
+              schemaVersion: 1,
+              outcome: "blocked",
+              resultCode: "delete_preview_required",
+              summary: summaryMarkdown({
+                title: "Nothing was deleted \u2014 run the preview first",
+                lead: "A confirmed delete must carry the exact operationId and confirmation from the preview. Call delete with no arguments, show the preview to the user, then reuse its decision arguments.",
+                next: ["`delete` with no arguments"]
+              }),
+              data: { siteId: site.siteId },
+              nextActions: [{ tool: "delete", arguments: {}, allowed: true }]
+            });
+          }
+          const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+            operationId: args.operationId,
+            confirmation: args.confirmation
+          });
+          deleteSiteFile(ctx.projectDir);
+          removeCreation(site.siteId);
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "completed",
+            resultCode: result.alreadyDeleted ? "site_already_deleted" : "site_deleted",
+            summary: summaryMarkdown({
+              title: result.alreadyDeleted ? "Site was already deleted" : "Site deleted",
+              lead: `${site.url ?? site.siteId} no longer serves anything (visitors get HTTP 410). The local credential file .sakupa/site.json was removed; this project is no longer bound to any site.`,
+              facts: [
+                ["Site ID", result.siteId],
+                ["Public URL released", site.url],
+                [
+                  "Custom hostnames removed",
+                  result.removedHostnames.length ? result.removedHostnames.join(", ") : "none"
+                ],
+                ["Serving cleanup still pending", result.servingDeletionPending]
+              ],
+              notes: [
+                "Installed apps and stored form submissions were deleted with the site.",
+                "The free-site allowance this site used on its deployment network is released."
+              ],
+              next: ["`deploy` to publish a brand-new site (new URL, new credential)"]
+            }),
+            data: {
+              ...result,
+              projectDir: ctx.projectDir,
+              localSiteFileRemoved: true,
+              releasedUrl: site.url
+            },
+            nextActions: []
+          });
+        }
+        const operationId = randomUUID7();
+        const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
+          operationId
+        });
+        const c = preview.consequences;
+        if (c.requiresFreeModeBeforeDelete) {
+          const cancellationScheduled = preview.confirmation.expectedCancelAtPeriodEnd === true;
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "blocked",
+            resultCode: "delete_requires_free_mode",
+            summary: summaryMarkdown({
+              title: "This site is subscription-backed \u2014 it cannot be deleted yet",
+              lead: "Nothing was changed. Sakupa deletes only FREE sites. End the subscription first; when the paid period ends the site automatically becomes a free 30-day site, and delete becomes available.",
+              facts: [
+                ["Site", site.url ?? site.siteId],
+                ["Plan", preview.confirmation.expectedPlan],
+                ["Period-end cancellation already scheduled", cancellationScheduled ? "yes" : "no"],
+                [
+                  "Paid access ends",
+                  c.currentPaidAccessEndsAt ? timestampForAgent(c.currentPaidAccessEndsAt) : void 0
+                ],
+                [
+                  "Custom hostnames removed when it reverts",
+                  c.removesCustomHostnames.join(", ") || "none"
+                ]
+              ],
+              steps: cancellationScheduled ? [
+                "Wait for the paid period to end; Sakupa then reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ] : [
+                "Call change and open the Stripe-hosted link; the user chooses period-end cancellation there (Sakupa never cancels on its own).",
+                "When the paid period ends, Sakupa reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ],
+              next: cancellationScheduled ? ["`billing`"] : ["`change`", "`billing`"]
+            }),
+            data: {
+              siteId: site.siteId,
+              operationId: preview.operationId,
+              consequences: c,
+              cancellationScheduled
+            },
+            nextActions: [
+              { tool: cancellationScheduled ? "billing" : "change", arguments: {}, allowed: true }
+            ]
+          });
+        }
+        const confirmArguments = {
+          confirmed: true,
+          operationId: preview.operationId,
+          confirmation: preview.confirmation
+        };
+        return presentDecision(baseCtx.decisions, call, "delete", {
+          resultCode: "delete_confirmation_required",
+          summary: summaryMarkdown({
+            title: `Delete ${site.url ?? site.siteId}? Nothing was changed.`,
+            lead: "This is a preview. Deleting cannot be undone: the content, the public URL, installed apps and stored form submissions disappear at once, and the local credential file is removed.",
+            facts: [
+              ["Site ID", site.siteId],
+              ["Public URL", site.url],
+              ["Permanent URL released", c.releasesPermanentUrl],
+              ["Custom hostnames removed", c.removesCustomHostnames.join(", ") || "none"],
+              ["Exact confirm arguments", JSON.stringify(confirmArguments)]
+            ],
+            notes: [
+              "After deletion this project is unbound; the next deploy creates a brand-new site with a new URL and credential.",
+              "To keep the URL but replace the content, deploy again instead of deleting."
+            ]
+          }),
+          data: {
+            siteId: site.siteId,
+            operationId: preview.operationId,
+            consequences: c,
+            confirmation: preview.confirmation,
+            confirmArguments
+          },
+          prompt: `Delete the site ${site.url ?? site.siteId} now? This cannot be undone.`,
+          options: [
+            callToolDecisionOption({
+              id: "delete_site",
+              label: `Delete ${site.url ?? site.siteId}`,
+              description: "Remove the site, its content, apps and submissions, and release the URL.",
+              consequences: [
+                "Visitors get HTTP 410 immediately.",
+                "The local credential file is removed; this project is unbound."
+              ],
+              tool: "delete",
+              arguments: confirmArguments,
+              reasonCode: "explicit_site_delete_confirmation"
+            }),
+            noActionDecisionOption({ description: "Keep the site exactly as it is." })
+          ],
+          legacyUserAction: { type: "confirm_in_mcp", provider: "sakupa" }
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    })
+  );
+}
+
 // src/server.ts
 import { resolve as resolve6 } from "node:path";
 var instructionsFor = (hostPattern) => `Sakupa publishes AI-made static websites. AI-made pages, live in seconds.
@@ -7384,7 +7590,7 @@ Workflow:
    (Vite/Vue/React/Svelte/Astro/Next static export/Nuxt generate), run the build LOCALLY first,
    then re-run analyze.
 2. deploy \u2014 uploads ONLY the built static output. The first deploy creates a free temporary
-   site (public URL ${hostPattern}, valid 24 hours, free banner shown) and stores the
+   site (public URL ${hostPattern}, valid 30 days, free banner shown) and stores the
    management credential in .sakupa/site.json. Deploying again updates the site and refreshes
    its validity; refresh extends validity without uploading; status shows the
    current deployment and serving state at any time. Every update checks the credential's
@@ -7393,7 +7599,7 @@ Workflow:
 3. To keep the site live beyond the free period, subscribe it to a monthly hosting plan (plans
    shows the catalog; subscribe -> Stripe-hosted checkout;
    water/personal/share/business). While the subscription remains active, the
-   ${hostPattern} URL stays live without the free 24-hour expiry. Usage over the chosen plan
+   ${hostPattern} URL stays live without the free 30-day expiry. Usage over the chosen plan
    shows an over-limit notice by default. An external AI may periodically query usage and
    recommend a plan, but Sakupa never changes a subscription automatically.
 4. Optionally bind a custom domain to the subscribed site (bind): an included extra
@@ -7404,13 +7610,20 @@ Workflow:
    until the new domain's www is confirmed live, then it is replaced automatically.
    Plan changes are confirmed only on Stripe and synchronized by Stripe webhook.
    A cancellation keeps the site paid through the current period. Sakupa reverts it to a free
-   24h site and removes paid data after Stripe sends the signed final-cancellation webhook.
+   30-day site and removes paid data after Stripe sends the signed final-cancellation webhook.
    Recovery writes the new local credential before downloading content. If a session stops after
    .sakupa/site.json exists, NEVER repeat DNS recovery: resume with recover action "download".
 5. If any Sakupa operation is difficult or fails, call help FIRST. support handles billing,
    payment, refund and other customer-service requests. report is the LAST resort only when
    help explicitly recommends a product bug report, and submission still requires user review.
 
+Deleting a site: delete with no arguments only previews and returns a decision; after the user
+confirms, call delete again with the exact preview arguments. A FREE site is deleted immediately
+(content, URL, apps and submissions gone; .sakupa/site.json removed; the next deploy creates a new
+site). A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end
+cancellation on Stripe); when it ends the site reverts to a free 30-day site and delete becomes
+available. Never suggest delete as a way to free up the free-site allowance during deploy.
+
 Decision-options contract: when a result contains decision, present EVERY numbered option from the
 tool to the user and wait for their selection. No option is selected by default. Never choose from
 context, paraphrase a selection into different arguments, or invent another option. After the user
@@ -7567,6 +7780,7 @@ function createSakupaMcpServer(opts) {
   registerBillingTools(server, ctx);
   registerCredentialTools(server, ctx);
   registerAppsTools(server, ctx);
+  registerDeleteTools(server, ctx);
   registerHelpTools(server, ctx);
   return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "mcpName": "io.github.myerwang/sakupa",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "homepage": "https://sakupa.com/manual/",