@sakupa/mcp 1.4.1 → 1.5.0

package/dist/bin.js

@@ -403,7 +403,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.1";
+var SAKUPA_MCP_VERSION = "1.5.0";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2208,15 +2208,15 @@ function strFromU8(dat, latin1) {
 var slzh = function(d, b) {
   return b + 30 + b2(d, b + 26) + b2(d, b + 28);
 };
-var zh = function(d, b, z7) {
+var zh = function(d, b, z8) {
   var fnl = b2(d, b + 28), efl = b2(d, b + 30), fn = strFromU8(d.subarray(b + 46, b + 46 + fnl), !(b2(d, b + 8) & 2048)), es = b + 46 + fnl;
-  var _a2 = z64hs(d, es, efl, z7, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
+  var _a2 = z64hs(d, es, efl, z8, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
   return [b2(d, b + 10), sc, su, fn, es + efl + b2(d, b + 32), off];
 };
-var z64hs = function(d, b, l, z7, sc, su, off) {
+var z64hs = function(d, b, l, z8, sc, su, off) {
   var nsc = sc == 4294967295, nsu = su == 4294967295, noff = off == 4294967295, e = b + l;
   var nf = nsc + nsu + noff;
-  if (z7 && nf) {
+  if (z8 && nf) {
     for (; b + 4 < e; b += 4 + b2(d, b + 2)) {
       if (b2(d, b) == 1) {
         return [
@@ -2227,7 +2227,7 @@ var z64hs = function(d, b, l, z7, sc, su, off) {
         ];
       }
     }
-    if (z7 < 2)
+    if (z8 < 2)
       err(13);
   }
   return [sc, su, off, 0];
@@ -2244,18 +2244,18 @@ function unzipSync(data, opts) {
   if (!c)
     return {};
   var o = b4(data, e + 16);
-  var z7 = b4(data, e - 20) == 117853008;
-  if (z7) {
+  var z8 = b4(data, e - 20) == 117853008;
+  if (z8) {
     var ze = b4(data, e - 12);
-    z7 = b4(data, ze) == 101075792;
-    if (z7) {
+    z8 = b4(data, ze) == 101075792;
+    if (z8) {
       c = b4(data, ze + 32);
       o = b4(data, ze + 48);
     }
   }
   var fltr = opts && opts.filter;
   for (var i = 0; i < c; ++i) {
-    var _a2 = zh(data, o, z7), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
+    var _a2 = zh(data, o, z8), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
     o = no;
     if (!fltr || fltr({
       name: fn,
@@ -3436,7 +3436,8 @@ var TARGET_MCP_TOOL_NAMES = [
   "change",
   "support",
   "report",
-  "apps"
+  "apps",
+  "delete"
 ];
 var STRUCTURED_TOOL_OUTPUT_SCHEMA = z.object({
   schemaVersion: z.literal(1),
@@ -6170,6 +6171,7 @@ var TOOL_TOPICS = [
   "support",
   "report",
   "apps",
+  "delete",
   "help"
 ];
 var HELP_TOPICS = ["diagnose", "overview", "terminology", ...TOOL_TOPICS];
@@ -6280,6 +6282,18 @@ var TOOL_MANUALS = {
     nextStep: "Use the preview resumeWith arguments only after the user confirms.",
     terminology: ["credentialRotation"]
   },
+  delete: {
+    purpose: "Delete the bound FREE site after an explicit preview and confirmation.",
+    sideEffects: "Preview is read-only. Confirmed deletion removes content, the public URL, installed apps, stored submissions and the local .sakupa/site.json.",
+    preconditions: "A valid local site credential and a free site. A subscribed site is refused until the subscription ends (change \u2192 period-end cancellation) and the site reverts to free.",
+    parameterNames: ["confirmed", "operationId", "confirmation"],
+    parameters: "No arguments for the preview; confirmed=true with the exact operationId and confirmation copied from the preview decision.",
+    warnings: [
+      "Irreversible; the next deploy creates a brand-new site with a new URL.",
+      "Never propose delete to free up the free-site allowance; use the deploy handoff decision instead."
+    ],
+    nextStep: "Present every decision option; after confirmation copy the option arguments verbatim."
+  },
   plans: {
     purpose: "Read the authoritative hosting plan catalog and rules.",
     sideEffects: "Read-only public API request.",
@@ -7258,6 +7272,196 @@ function registerAppsTools(server, baseCtx) {
   );
 }
 
+// src/tools/delete.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { z as z7 } from "zod";
+var confirmationSchema = z7.object({
+  siteId: z7.string(),
+  expectedSiteUpdatedAt: z7.string(),
+  expectedStatus: z7.string(),
+  expectedMode: z7.enum(["free", "paid"]),
+  expectedServingMode: z7.string(),
+  expectedShortId: z7.string().optional(),
+  expectedSubscriptionStatus: z7.string().optional(),
+  expectedPlan: z7.string().optional(),
+  expectedCancelAtPeriodEnd: z7.boolean().optional(),
+  expectedCurrentPeriodEnd: z7.string().optional(),
+  expectedLastDeploymentId: z7.string().optional(),
+  expectedBoundHostnames: z7.array(z7.string()),
+  acknowledge: z7.literal("delete_and_cancel_renewal")
+});
+function registerDeleteTools(server, baseCtx) {
+  server.registerTool(
+    "delete",
+    {
+      title: "Delete site",
+      description: "Delete the site bound to this project. Without arguments it only previews (zero writes) and returns a decision; after the user confirms, call again with the exact preview arguments (confirmed: true, operationId, confirmation). A FREE site is deleted immediately: content, public URL, installed apps and stored submissions are gone and the local .sakupa/site.json is removed, so the next deploy creates a brand-new site. A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end cancellation on Stripe); when it ends the site reverts to a free site and delete becomes available. Owner-only.",
+      inputSchema: z7.object({
+        confirmed: z7.boolean().optional().describe("true only from the exact decision arguments returned by the preview."),
+        operationId: z7.string().optional().describe("Copied verbatim from the preview."),
+        confirmation: confirmationSchema.optional().describe("Copied verbatim from the preview; the cloud rejects any drift.")
+      }),
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    withDecisionReentry("delete", async (args, call) => {
+      try {
+        const ctx = await withProjectDir(baseCtx, call);
+        const site = requireSiteFile(ctx);
+        if (args.confirmed === true) {
+          if (!args.operationId || !args.confirmation) {
+            return structuredToolResult({
+              schemaVersion: 1,
+              outcome: "blocked",
+              resultCode: "delete_preview_required",
+              summary: summaryMarkdown({
+                title: "Nothing was deleted \u2014 run the preview first",
+                lead: "A confirmed delete must carry the exact operationId and confirmation from the preview. Call delete with no arguments, show the preview to the user, then reuse its decision arguments.",
+                next: ["`delete` with no arguments"]
+              }),
+              data: { siteId: site.siteId },
+              nextActions: [{ tool: "delete", arguments: {}, allowed: true }]
+            });
+          }
+          const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+            operationId: args.operationId,
+            confirmation: args.confirmation
+          });
+          deleteSiteFile(ctx.projectDir);
+          removeCreation(site.siteId);
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "completed",
+            resultCode: result.alreadyDeleted ? "site_already_deleted" : "site_deleted",
+            summary: summaryMarkdown({
+              title: result.alreadyDeleted ? "Site was already deleted" : "Site deleted",
+              lead: `${site.url ?? site.siteId} no longer serves anything (visitors get HTTP 410). The local credential file .sakupa/site.json was removed; this project is no longer bound to any site.`,
+              facts: [
+                ["Site ID", result.siteId],
+                ["Public URL released", site.url],
+                [
+                  "Custom hostnames removed",
+                  result.removedHostnames.length ? result.removedHostnames.join(", ") : "none"
+                ],
+                ["Serving cleanup still pending", result.servingDeletionPending]
+              ],
+              notes: [
+                "Installed apps and stored form submissions were deleted with the site.",
+                "The free-site allowance this site used on its deployment network is released."
+              ],
+              next: ["`deploy` to publish a brand-new site (new URL, new credential)"]
+            }),
+            data: {
+              ...result,
+              projectDir: ctx.projectDir,
+              localSiteFileRemoved: true,
+              releasedUrl: site.url
+            },
+            nextActions: []
+          });
+        }
+        const operationId = randomUUID7();
+        const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
+          operationId
+        });
+        const c = preview.consequences;
+        if (c.requiresFreeModeBeforeDelete) {
+          const cancellationScheduled = preview.confirmation.expectedCancelAtPeriodEnd === true;
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "blocked",
+            resultCode: "delete_requires_free_mode",
+            summary: summaryMarkdown({
+              title: "This site is subscription-backed \u2014 it cannot be deleted yet",
+              lead: "Nothing was changed. Sakupa deletes only FREE sites. End the subscription first; when the paid period ends the site automatically becomes a free 30-day site, and delete becomes available.",
+              facts: [
+                ["Site", site.url ?? site.siteId],
+                ["Plan", preview.confirmation.expectedPlan],
+                ["Period-end cancellation already scheduled", cancellationScheduled ? "yes" : "no"],
+                [
+                  "Paid access ends",
+                  c.currentPaidAccessEndsAt ? timestampForAgent(c.currentPaidAccessEndsAt) : void 0
+                ],
+                [
+                  "Custom hostnames removed when it reverts",
+                  c.removesCustomHostnames.join(", ") || "none"
+                ]
+              ],
+              steps: cancellationScheduled ? [
+                "Wait for the paid period to end; Sakupa then reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ] : [
+                "Call change and open the Stripe-hosted link; the user chooses period-end cancellation there (Sakupa never cancels on its own).",
+                "When the paid period ends, Sakupa reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ],
+              next: cancellationScheduled ? ["`billing`"] : ["`change`", "`billing`"]
+            }),
+            data: {
+              siteId: site.siteId,
+              operationId: preview.operationId,
+              consequences: c,
+              cancellationScheduled
+            },
+            nextActions: [
+              { tool: cancellationScheduled ? "billing" : "change", arguments: {}, allowed: true }
+            ]
+          });
+        }
+        const confirmArguments = {
+          confirmed: true,
+          operationId: preview.operationId,
+          confirmation: preview.confirmation
+        };
+        return presentDecision(baseCtx.decisions, call, "delete", {
+          resultCode: "delete_confirmation_required",
+          summary: summaryMarkdown({
+            title: `Delete ${site.url ?? site.siteId}? Nothing was changed.`,
+            lead: "This is a preview. Deleting cannot be undone: the content, the public URL, installed apps and stored form submissions disappear at once, and the local credential file is removed.",
+            facts: [
+              ["Site ID", site.siteId],
+              ["Public URL", site.url],
+              ["Permanent URL released", c.releasesPermanentUrl],
+              ["Custom hostnames removed", c.removesCustomHostnames.join(", ") || "none"],
+              ["Exact confirm arguments", JSON.stringify(confirmArguments)]
+            ],
+            notes: [
+              "After deletion this project is unbound; the next deploy creates a brand-new site with a new URL and credential.",
+              "To keep the URL but replace the content, deploy again instead of deleting."
+            ]
+          }),
+          data: {
+            siteId: site.siteId,
+            operationId: preview.operationId,
+            consequences: c,
+            confirmation: preview.confirmation,
+            confirmArguments
+          },
+          prompt: `Delete the site ${site.url ?? site.siteId} now? This cannot be undone.`,
+          options: [
+            callToolDecisionOption({
+              id: "delete_site",
+              label: `Delete ${site.url ?? site.siteId}`,
+              description: "Remove the site, its content, apps and submissions, and release the URL.",
+              consequences: [
+                "Visitors get HTTP 410 immediately.",
+                "The local credential file is removed; this project is unbound."
+              ],
+              tool: "delete",
+              arguments: confirmArguments,
+              reasonCode: "explicit_site_delete_confirmation"
+            }),
+            noActionDecisionOption({ description: "Keep the site exactly as it is." })
+          ],
+          legacyUserAction: { type: "confirm_in_mcp", provider: "sakupa" }
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    })
+  );
+}
+
 // src/transport.ts
 var DEFAULT_REQUEST_TIMEOUT_MS = 15e3;
 var DEFAULT_UPLOAD_TIMEOUT_MS = 3e4;
@@ -7445,6 +7649,13 @@ Workflow:
    payment, refund and other customer-service requests. report is the LAST resort only when
    help explicitly recommends a product bug report, and submission still requires user review.
 
+Deleting a site: delete with no arguments only previews and returns a decision; after the user
+confirms, call delete again with the exact preview arguments. A FREE site is deleted immediately
+(content, URL, apps and submissions gone; .sakupa/site.json removed; the next deploy creates a new
+site). A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end
+cancellation on Stripe); when it ends the site reverts to a free 30-day site and delete becomes
+available. Never suggest delete as a way to free up the free-site allowance during deploy.
+
 Decision-options contract: when a result contains decision, present EVERY numbered option from the
 tool to the user and wait for their selection. No option is selected by default. Never choose from
 context, paraphrase a selection into different arguments, or invent another option. After the user
@@ -7601,6 +7812,7 @@ function createSakupaMcpServer(opts) {
   registerBillingTools(server, ctx);
   registerCredentialTools(server, ctx);
   registerAppsTools(server, ctx);
+  registerDeleteTools(server, ctx);
   registerHelpTools(server, ctx);
   return server;
 }

package/dist/index.js

@@ -148,7 +148,7 @@ function isFreeSiteAllowanceNetworkReference(value) {
 }
 
 // ../core/dist/domain/version.js
-var SAKUPA_MCP_VERSION = "1.4.1";
+var SAKUPA_MCP_VERSION = "1.5.0";
 
 // ../core/dist/domain/errors.js
 var HTTP_STATUS = {
@@ -2243,7 +2243,8 @@ var TARGET_MCP_TOOL_NAMES = [
   "change",
   "support",
   "report",
-  "apps"
+  "apps",
+  "delete"
 ];
 var STRUCTURED_TOOL_OUTPUT_SCHEMA = z.object({
   schemaVersion: z.literal(1),
@@ -3084,15 +3085,15 @@ function strFromU8(dat, latin1) {
 var slzh = function(d, b) {
   return b + 30 + b2(d, b + 26) + b2(d, b + 28);
 };
-var zh = function(d, b, z7) {
+var zh = function(d, b, z8) {
   var fnl = b2(d, b + 28), efl = b2(d, b + 30), fn = strFromU8(d.subarray(b + 46, b + 46 + fnl), !(b2(d, b + 8) & 2048)), es = b + 46 + fnl;
-  var _a2 = z64hs(d, es, efl, z7, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
+  var _a2 = z64hs(d, es, efl, z8, b4(d, b + 20), b4(d, b + 24), b4(d, b + 42)), sc = _a2[0], su = _a2[1], off = _a2[2];
   return [b2(d, b + 10), sc, su, fn, es + efl + b2(d, b + 32), off];
 };
-var z64hs = function(d, b, l, z7, sc, su, off) {
+var z64hs = function(d, b, l, z8, sc, su, off) {
   var nsc = sc == 4294967295, nsu = su == 4294967295, noff = off == 4294967295, e = b + l;
   var nf = nsc + nsu + noff;
-  if (z7 && nf) {
+  if (z8 && nf) {
     for (; b + 4 < e; b += 4 + b2(d, b + 2)) {
       if (b2(d, b) == 1) {
         return [
@@ -3103,7 +3104,7 @@ var z64hs = function(d, b, l, z7, sc, su, off) {
         ];
       }
     }
-    if (z7 < 2)
+    if (z8 < 2)
       err(13);
   }
   return [sc, su, off, 0];
@@ -3120,18 +3121,18 @@ function unzipSync(data, opts) {
   if (!c)
     return {};
   var o = b4(data, e + 16);
-  var z7 = b4(data, e - 20) == 117853008;
-  if (z7) {
+  var z8 = b4(data, e - 20) == 117853008;
+  if (z8) {
     var ze = b4(data, e - 12);
-    z7 = b4(data, ze) == 101075792;
-    if (z7) {
+    z8 = b4(data, ze) == 101075792;
+    if (z8) {
       c = b4(data, ze + 32);
       o = b4(data, ze + 48);
     }
   }
   var fltr = opts && opts.filter;
   for (var i = 0; i < c; ++i) {
-    var _a2 = zh(data, o, z7), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
+    var _a2 = zh(data, o, z8), c_2 = _a2[0], sc = _a2[1], su = _a2[2], fn = _a2[3], no = _a2[4], off = _a2[5], b = slzh(data, off);
     o = no;
     if (!fltr || fltr({
       name: fn,
@@ -6289,6 +6290,7 @@ var TOOL_TOPICS = [
   "support",
   "report",
   "apps",
+  "delete",
   "help"
 ];
 var HELP_TOPICS = ["diagnose", "overview", "terminology", ...TOOL_TOPICS];
@@ -6399,6 +6401,18 @@ var TOOL_MANUALS = {
     nextStep: "Use the preview resumeWith arguments only after the user confirms.",
     terminology: ["credentialRotation"]
   },
+  delete: {
+    purpose: "Delete the bound FREE site after an explicit preview and confirmation.",
+    sideEffects: "Preview is read-only. Confirmed deletion removes content, the public URL, installed apps, stored submissions and the local .sakupa/site.json.",
+    preconditions: "A valid local site credential and a free site. A subscribed site is refused until the subscription ends (change \u2192 period-end cancellation) and the site reverts to free.",
+    parameterNames: ["confirmed", "operationId", "confirmation"],
+    parameters: "No arguments for the preview; confirmed=true with the exact operationId and confirmation copied from the preview decision.",
+    warnings: [
+      "Irreversible; the next deploy creates a brand-new site with a new URL.",
+      "Never propose delete to free up the free-site allowance; use the deploy handoff decision instead."
+    ],
+    nextStep: "Present every decision option; after confirmation copy the option arguments verbatim."
+  },
   plans: {
     purpose: "Read the authoritative hosting plan catalog and rules.",
     sideEffects: "Read-only public API request.",
@@ -7377,6 +7391,196 @@ function registerAppsTools(server, baseCtx) {
   );
 }
 
+// src/tools/delete.ts
+import { randomUUID as randomUUID7 } from "node:crypto";
+import { z as z7 } from "zod";
+var confirmationSchema = z7.object({
+  siteId: z7.string(),
+  expectedSiteUpdatedAt: z7.string(),
+  expectedStatus: z7.string(),
+  expectedMode: z7.enum(["free", "paid"]),
+  expectedServingMode: z7.string(),
+  expectedShortId: z7.string().optional(),
+  expectedSubscriptionStatus: z7.string().optional(),
+  expectedPlan: z7.string().optional(),
+  expectedCancelAtPeriodEnd: z7.boolean().optional(),
+  expectedCurrentPeriodEnd: z7.string().optional(),
+  expectedLastDeploymentId: z7.string().optional(),
+  expectedBoundHostnames: z7.array(z7.string()),
+  acknowledge: z7.literal("delete_and_cancel_renewal")
+});
+function registerDeleteTools(server, baseCtx) {
+  server.registerTool(
+    "delete",
+    {
+      title: "Delete site",
+      description: "Delete the site bound to this project. Without arguments it only previews (zero writes) and returns a decision; after the user confirms, call again with the exact preview arguments (confirmed: true, operationId, confirmation). A FREE site is deleted immediately: content, public URL, installed apps and stored submissions are gone and the local .sakupa/site.json is removed, so the next deploy creates a brand-new site. A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end cancellation on Stripe); when it ends the site reverts to a free site and delete becomes available. Owner-only.",
+      inputSchema: z7.object({
+        confirmed: z7.boolean().optional().describe("true only from the exact decision arguments returned by the preview."),
+        operationId: z7.string().optional().describe("Copied verbatim from the preview."),
+        confirmation: confirmationSchema.optional().describe("Copied verbatim from the preview; the cloud rejects any drift.")
+      }),
+      outputSchema: STRUCTURED_TOOL_OUTPUT_SCHEMA,
+      annotations: { readOnlyHint: false, destructiveHint: true, openWorldHint: true }
+    },
+    withDecisionReentry("delete", async (args, call) => {
+      try {
+        const ctx = await withProjectDir(baseCtx, call);
+        const site = requireSiteFile(ctx);
+        if (args.confirmed === true) {
+          if (!args.operationId || !args.confirmation) {
+            return structuredToolResult({
+              schemaVersion: 1,
+              outcome: "blocked",
+              resultCode: "delete_preview_required",
+              summary: summaryMarkdown({
+                title: "Nothing was deleted \u2014 run the preview first",
+                lead: "A confirmed delete must carry the exact operationId and confirmation from the preview. Call delete with no arguments, show the preview to the user, then reuse its decision arguments.",
+                next: ["`delete` with no arguments"]
+              }),
+              data: { siteId: site.siteId },
+              nextActions: [{ tool: "delete", arguments: {}, allowed: true }]
+            });
+          }
+          const result = await ctx.client.deleteSite(site.siteId, site.credential, {
+            operationId: args.operationId,
+            confirmation: args.confirmation
+          });
+          deleteSiteFile(ctx.projectDir);
+          removeCreation(site.siteId);
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "completed",
+            resultCode: result.alreadyDeleted ? "site_already_deleted" : "site_deleted",
+            summary: summaryMarkdown({
+              title: result.alreadyDeleted ? "Site was already deleted" : "Site deleted",
+              lead: `${site.url ?? site.siteId} no longer serves anything (visitors get HTTP 410). The local credential file .sakupa/site.json was removed; this project is no longer bound to any site.`,
+              facts: [
+                ["Site ID", result.siteId],
+                ["Public URL released", site.url],
+                [
+                  "Custom hostnames removed",
+                  result.removedHostnames.length ? result.removedHostnames.join(", ") : "none"
+                ],
+                ["Serving cleanup still pending", result.servingDeletionPending]
+              ],
+              notes: [
+                "Installed apps and stored form submissions were deleted with the site.",
+                "The free-site allowance this site used on its deployment network is released."
+              ],
+              next: ["`deploy` to publish a brand-new site (new URL, new credential)"]
+            }),
+            data: {
+              ...result,
+              projectDir: ctx.projectDir,
+              localSiteFileRemoved: true,
+              releasedUrl: site.url
+            },
+            nextActions: []
+          });
+        }
+        const operationId = randomUUID7();
+        const preview = await ctx.client.previewDeleteSite(site.siteId, site.credential, {
+          operationId
+        });
+        const c = preview.consequences;
+        if (c.requiresFreeModeBeforeDelete) {
+          const cancellationScheduled = preview.confirmation.expectedCancelAtPeriodEnd === true;
+          return structuredToolResult({
+            schemaVersion: 1,
+            outcome: "blocked",
+            resultCode: "delete_requires_free_mode",
+            summary: summaryMarkdown({
+              title: "This site is subscription-backed \u2014 it cannot be deleted yet",
+              lead: "Nothing was changed. Sakupa deletes only FREE sites. End the subscription first; when the paid period ends the site automatically becomes a free 30-day site, and delete becomes available.",
+              facts: [
+                ["Site", site.url ?? site.siteId],
+                ["Plan", preview.confirmation.expectedPlan],
+                ["Period-end cancellation already scheduled", cancellationScheduled ? "yes" : "no"],
+                [
+                  "Paid access ends",
+                  c.currentPaidAccessEndsAt ? timestampForAgent(c.currentPaidAccessEndsAt) : void 0
+                ],
+                [
+                  "Custom hostnames removed when it reverts",
+                  c.removesCustomHostnames.join(", ") || "none"
+                ]
+              ],
+              steps: cancellationScheduled ? [
+                "Wait for the paid period to end; Sakupa then reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ] : [
+                "Call change and open the Stripe-hosted link; the user chooses period-end cancellation there (Sakupa never cancels on its own).",
+                "When the paid period ends, Sakupa reverts the site to a free 30-day site (content kept, custom domains removed).",
+                "Call delete again at that point \u2014 or simply let the free site expire."
+              ],
+              next: cancellationScheduled ? ["`billing`"] : ["`change`", "`billing`"]
+            }),
+            data: {
+              siteId: site.siteId,
+              operationId: preview.operationId,
+              consequences: c,
+              cancellationScheduled
+            },
+            nextActions: [
+              { tool: cancellationScheduled ? "billing" : "change", arguments: {}, allowed: true }
+            ]
+          });
+        }
+        const confirmArguments = {
+          confirmed: true,
+          operationId: preview.operationId,
+          confirmation: preview.confirmation
+        };
+        return presentDecision(baseCtx.decisions, call, "delete", {
+          resultCode: "delete_confirmation_required",
+          summary: summaryMarkdown({
+            title: `Delete ${site.url ?? site.siteId}? Nothing was changed.`,
+            lead: "This is a preview. Deleting cannot be undone: the content, the public URL, installed apps and stored form submissions disappear at once, and the local credential file is removed.",
+            facts: [
+              ["Site ID", site.siteId],
+              ["Public URL", site.url],
+              ["Permanent URL released", c.releasesPermanentUrl],
+              ["Custom hostnames removed", c.removesCustomHostnames.join(", ") || "none"],
+              ["Exact confirm arguments", JSON.stringify(confirmArguments)]
+            ],
+            notes: [
+              "After deletion this project is unbound; the next deploy creates a brand-new site with a new URL and credential.",
+              "To keep the URL but replace the content, deploy again instead of deleting."
+            ]
+          }),
+          data: {
+            siteId: site.siteId,
+            operationId: preview.operationId,
+            consequences: c,
+            confirmation: preview.confirmation,
+            confirmArguments
+          },
+          prompt: `Delete the site ${site.url ?? site.siteId} now? This cannot be undone.`,
+          options: [
+            callToolDecisionOption({
+              id: "delete_site",
+              label: `Delete ${site.url ?? site.siteId}`,
+              description: "Remove the site, its content, apps and submissions, and release the URL.",
+              consequences: [
+                "Visitors get HTTP 410 immediately.",
+                "The local credential file is removed; this project is unbound."
+              ],
+              tool: "delete",
+              arguments: confirmArguments,
+              reasonCode: "explicit_site_delete_confirmation"
+            }),
+            noActionDecisionOption({ description: "Keep the site exactly as it is." })
+          ],
+          legacyUserAction: { type: "confirm_in_mcp", provider: "sakupa" }
+        });
+      } catch (error) {
+        return toolError(error);
+      }
+    })
+  );
+}
+
 // src/server.ts
 import { resolve as resolve6 } from "node:path";
 var instructionsFor = (hostPattern) => `Sakupa publishes AI-made static websites. AI-made pages, live in seconds.
@@ -7413,6 +7617,13 @@ Workflow:
    payment, refund and other customer-service requests. report is the LAST resort only when
    help explicitly recommends a product bug report, and submission still requires user review.
 
+Deleting a site: delete with no arguments only previews and returns a decision; after the user
+confirms, call delete again with the exact preview arguments. A FREE site is deleted immediately
+(content, URL, apps and submissions gone; .sakupa/site.json removed; the next deploy creates a new
+site). A subscribed site cannot be deleted: end the subscription first (change \u2192 period-end
+cancellation on Stripe); when it ends the site reverts to a free 30-day site and delete becomes
+available. Never suggest delete as a way to free up the free-site allowance during deploy.
+
 Decision-options contract: when a result contains decision, present EVERY numbered option from the
 tool to the user and wait for their selection. No option is selected by default. Never choose from
 context, paraphrase a selection into different arguments, or invent another option. After the user
@@ -7569,6 +7780,7 @@ function createSakupaMcpServer(opts) {
   registerBillingTools(server, ctx);
   registerCredentialTools(server, ctx);
   registerAppsTools(server, ctx);
+  registerDeleteTools(server, ctx);
   registerHelpTools(server, ctx);
   return server;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sakupa/mcp",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "mcpName": "io.github.myerwang/sakupa",
   "description": "Sakupa MCP server: publish AI-made static sites from your AI tool. AI-made pages, live in seconds.",
   "homepage": "https://sakupa.com/manual/",