brewpage-mcp 1.22.0 → 1.23.0

package/README.md

@@ -38,7 +38,7 @@ Claude Code: `claude mcp add --transport http brewpage --scope user https://brew
 For clients that only start local servers; the same tools as the server URL.
 
 ```bash
-npx -y brewpage-mcp@1.22.0
+npx -y brewpage-mcp@1.23.0
 ```
 
 Requires Node.js 20 or newer. This starts the stdio server for an MCP client.
@@ -63,7 +63,7 @@ Local fallback (stdio, needs Node.js; the same tools): add to `~/Library/Applica
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.22.0"]
+      "args": ["-y", "brewpage-mcp@1.23.0"]
     }
   }
 }
@@ -86,7 +86,7 @@ Custom servers follow your ChatGPT plan and workspace settings.
 The remote command above is the default. Local fallback: register a project-scoped stdio server:
 
 ```bash
-claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.22.0
+claude mcp add --transport stdio --scope project brewpage -- npx -y brewpage-mcp@1.23.0
 ```
 
 This writes `.mcp.json` in the project root. Use `--scope user` for user-scoped registration. See the [official Claude Code MCP guide](https://code.claude.com/docs/en/mcp).
@@ -110,7 +110,7 @@ Local fallback (stdio, needs Node.js; the same tools): open **Settings > MCP** a
   "mcpServers": {
     "brewpage": {
       "command": "npx",
-      "args": ["-y", "brewpage-mcp@1.22.0"]
+      "args": ["-y", "brewpage-mcp@1.23.0"]
     }
   }
 }
@@ -124,7 +124,7 @@ Open the Cline MCP settings panel and add:
 {
   "brewpage": {
     "command": "npx",
-    "args": ["-y", "brewpage-mcp@1.22.0"]
+    "args": ["-y", "brewpage-mcp@1.23.0"]
   }
 }
 ```
@@ -170,7 +170,7 @@ Thirty-two tools are available. Creation returns an owner token; keep it to modi
 
 All five publish tools accept optional `deliveryMode: "path" | "subdomain"`, sent only as `X-Delivery-Mode`; authored JSON and multipart bodies keep their existing format. Visibility and password protection are separate choices. Omitted namespace is private (a generated `priv-<random>` namespace): unlisted and not indexed; anyone with the link can still open it. `public` lists HTML, sites and files in the gallery and sitemap, so Google, Bing and AI search can find and index them; public pages are served on the brewpage.app domain for the strongest reach (a site always gets its own subdomain). Never put secrets in a public publication. Password-protected publications, JSON and KV are never listed.
 
-The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs take days or a string such as `2w`/`36h` (default 15); the server rounds to whole days and clamps to 1–30 (owner-specific caps and eligible automatic extensions can differ). Use returned `expiresAt`. Every tolerated-input adjustment (TTL clamp, format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`; `secret-detected` prints as `WARNING (code): message`: relay it to the user. A live BrewPage token or manage link in public content (`credential-published`) prints first as `SECURITY ALERT (credential-published): …`: tell the user to remove and reset it; that result is hidden from the gallery, so it prints no `VISIBILITY` line. A minted `manageUrl` prints as `MANAGE LINK (private): …`: give it to the user privately, never publish it. A listed public result prints `VISIBILITY: public, listed. Hide: set_visibility listed=false`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
+The MCP server wraps a subset of the backend-generated public [REST contract](../openapi/openapi.json). TTL inputs are days: up to 30 days without an account, up to 90 with a free profile (an owner token held in the profile); a default applies when omitted; whole days such as `15`, `15d` or `15 days`. Use returned `expiresAt`. Every tolerated-input adjustment (format alias, skipped site member, normalised namespace) comes back in the response `notices` array and is printed as `Notice (code): message`; `secret-detected` prints as `WARNING (code): message`: relay it to the user. A live BrewPage token or manage link in public content (`credential-published`) prints first as `SECURITY ALERT (credential-published): …`: tell the user to remove and reset it; that result is hidden from the gallery, so it prints no `VISIBILITY` line. A minted `manageUrl` prints as `MANAGE LINK (private): …`: give it to the user privately, never publish it. A listed public result prints `VISIBILITY: public, listed. Hide: set_visibility listed=false`. `get_page` reads stored rendered HTML or format-specific code/text from the API; it does not call the owner-only original-source endpoint or a browser viewer. `publish_file` uploads from a source URL and does not expose password or TTL inputs.
 
 For a fresh publication, sites and HTML pages of format `HTML` outside `public` (including the generated unlisted namespace) always use Dedicated subdomain (`subdomain`); omit `deliveryMode` there. An explicit `path` there is not rejected: the publication is created on its subdomain and the result reports `deliveryModeMatched: false`, `deliveryModeReason: "policy:subdomain-required"` and a `Delivery notice:` line. Everything else in any namespace (Markdown, code/text, files, JSON, KV, public HTML) defaults to Promotion (`path`) and may choose Dedicated subdomain, including password-protected content. Promotion uses a BrewPage path with stricter active-document restrictions. Each NEW site gets one publication-specific host for its complete bundle, preserving relative/root-relative paths; missing assets return 404, with no SPA fallback. Third-party widgets may still need provider configuration.
 
@@ -198,7 +198,7 @@ update_hosting(type="html", namespace="public", id="aBcDeFgHiJ", ownerToken="tok
 
 Publish HTML, Markdown, code or JSON content to BrewPage; with `format` omitted the server detects it. Returns a public URL and owner token. Markdown raw HTML is rendered through an allowlist: scripts, styles, event handlers, forms, frames/embeds and `meta`/`base`/`link` are removed; links allow `http`, `https`, `mailto`, `tel` and relative URLs, images also `data:`; a lone unknown tag such as `<author>` shows as text.
 
-Parameters: `content` (string), `format` (optional; omit to let the server detect HTML, Markdown, code or JSON; `html` keeps code/JSON as HTML; also `markdown`/`md` or a code language), `namespace` (optional -- **omit for private, unlisted content**; `public` lists the page in the gallery and sitemap for Google, Bing and AI search, served on the brewpage.app domain; never put secrets there), `password` (optional), `ttlDays` (days or a string such as `2w`; default 15; the server clamps to 1--30, up to 90 with an owner token in a profile), `filename` (optional, used as title fallback), `showTopBar` (optional boolean -- adds a toolbar with filename, Download button, and theme toggle), `deliveryMode` (optional), `domain` (optional; a domain you own to connect to an HTML-format page, see Custom domains), `state` (optional; lets an HTML page save what its visitors enter, see Page data).
+Parameters: `content` (string), `format` (optional; omit to let the server detect HTML, Markdown, code or JSON; `html` keeps code/JSON as HTML; also `markdown`/`md` or a code language), `namespace` (optional -- **omit for private, unlisted content**; `public` lists the page in the gallery and sitemap for Google, Bing and AI search, served on the brewpage.app domain; never put secrets there), `password` (optional), `ttlDays` (days: up to 30 without an account, up to 90 with a free profile; a default applies when omitted), `filename` (optional, used as title fallback), `showTopBar` (optional boolean -- adds a toolbar with filename, Download button, and theme toggle), `deliveryMode` (optional), `domain` (optional; a domain you own to connect to an HTML-format page, see Custom domains), `state` (optional; lets an HTML page save what its visitors enter, see Page data).
 
 The result includes `deliveryModeReason` and a `Delivery notice:` line when the server returns them (see above).
 
@@ -276,7 +276,7 @@ Publish a single-page or multi-file HTML site. Pass `entryContent` for a single
 
 Limits (current values from `get_limits`): a request is at most 25 MiB; a site at most 200 files, 5 MiB per file and 20 MiB in total; each path at most 380 characters. System files such as `.DS_Store` and `__MACOSX/` are skipped and never count; files with an unsupported extension or a too-long path are skipped and reported in notices. Entry: `entry`, else root `index.html`, else the shallowest HTML file. A site limit hit answers 400 with a message naming the limit, as does a PDF/Office file that is unreadable or password-protected; 413 means the request is over 25 MiB, has too many files and form fields, or a file name/path is too long; 422 means no servable file is left; 503 means busy: retry after `Retry-After` seconds (failed publish tools print it).
 
-Parameters: exactly one of `entryContent` (string) or non-empty `files` (array of `{path, content}`), `entry` (optional entry file path, default `index.html`), `namespace` (optional -- omit for private, unlisted content; `public` lists the site in the gallery and sitemap for Google, Bing and AI search; a site always gets its own subdomain), `password` (optional), `ttlDays` (days or a string such as `2w`; default 15; the server clamps to 1--30, up to 90 with an owner token in a profile), `ownerToken` (optional, groups site under an existing owner), `deliveryMode` (optional; fresh sites require `subdomain`), `domain` (optional; a domain you own to connect to the site, see Custom domains), `state` (optional; lets the site save what its visitors enter, see Page data).
+Parameters: exactly one of `entryContent` (string) or non-empty `files` (array of `{path, content}`), `entry` (optional entry file path, default `index.html`), `namespace` (optional -- omit for private, unlisted content; `public` lists the site in the gallery and sitemap for Google, Bing and AI search; a site always gets its own subdomain), `password` (optional), `ttlDays` (days: up to 30 without an account, up to 90 with a free profile; a default applies when omitted), `ownerToken` (optional, groups site under an existing owner), `deliveryMode` (optional; fresh sites require `subdomain`), `domain` (optional; a domain you own to connect to the site, see Custom domains), `state` (optional; lets the site save what its visitors enter, see Page data).
 
 Example prompt:
 
@@ -306,7 +306,7 @@ republish_site(namespace="public", id="aBcDeFgHiJ", ownerToken="tok_...", files=
 
 Publish a JSON document to BrewPage. Returns a public URL and owner token. The body may be passed as a JSON string or as a structured object.
 
-Parameters: `json` (string, object, or array), `namespace` (optional -- omit for private content; `public` is the shared public namespace; JSON is never listed or indexed, anyone with the link can open it), `password` (optional), `ttlDays` (days or a string such as `2w`; default 15; the server clamps to 1--30, up to 90 with an owner token in a profile), `tags` (optional `string[]`), `ownerToken` (optional existing owner), `deliveryMode` (optional).
+Parameters: `json` (string, object, or array), `namespace` (optional -- omit for private content; `public` is the shared public namespace; JSON is never listed or indexed, anyone with the link can open it), `password` (optional), `ttlDays` (days: up to 30 without an account, up to 90 with a free profile; a default applies when omitted), `tags` (optional `string[]`), `ownerToken` (optional existing owner), `deliveryMode` (optional).
 
 Example prompt:
 
@@ -356,7 +356,7 @@ update_json(namespace="public", id="aBcDeFgHiJ", json={"mode": "dark", "version"
 
 Create a new KV (key/value) entry. Returns a public URL and owner token. The KV entry is addressed by `(namespace, id, key)`; this tool creates the entry and emits the generated `id` along with the owner token.
 
-Parameters: `key` (string), `value` (string), `namespace` (optional -- omit for private content; `public` is the shared public namespace; KV is never listed or indexed, anyone with the link can open it), `password` (optional), `ttlDays` (days or a string such as `2w`; default 15; the server clamps to 1--30, up to 90 with an owner token in a profile), `tags` (optional `string[]`), `ownerToken` (optional existing owner), `deliveryMode` (optional).
+Parameters: `key` (string), `value` (string), `namespace` (optional -- omit for private content; `public` is the shared public namespace; KV is never listed or indexed, anyone with the link can open it), `password` (optional), `ttlDays` (days: up to 30 without an account, up to 90 with a free profile; a default applies when omitted), `tags` (optional `string[]`), `ownerToken` (optional existing owner), `deliveryMode` (optional).
 
 Example prompt:
 
@@ -595,7 +595,7 @@ The four page-data tools below take `namespace` + `id` + `ownerToken`, or `manag
 
 ### `get_guide`
 
-Read a short reference text. Topic `page-data`: how a page saves what visitors enter, with the script calls and the `state` settings. Meant to be read before writing such a page. Topic `custom-domain`: the steps that put a page or site on a domain you own, with the statuses and the fix for each problem. No API call.
+Read a short reference text. Topic `page-data`: how a page saves what visitors enter, with the script calls, the `state` settings, the owner view and how to try the page locally before publishing. Meant to be read before writing such a page. Topic `custom-domain`: the steps that put a page or site on a domain you own, with the statuses and the fix for each problem. No API call.
 
 Parameters: `topic` (`page-data` | `custom-domain`).
 
@@ -769,6 +769,10 @@ Every publish response includes an **owner token** -- the only credential that a
 
 ## Changelog
 
+## 1.23.0 -- 2026-11-14
+
+- Page data guide (`get_guide` topic `page-data`) regenerated from BrewPage's new Browser SDK text: build, try locally, publish. It adds the local preview (a page opened from disk or localhost keeps entries in that browser and sends nothing: `s.local`, `?bp-local=owner`, `?bp-local=off`; the same file works unchanged once published with `state`) and the owner view (`s.role`, `s.onRole`, `list({all: true})`, `removeById`, error `not_owner`). Custom domains: 400 `DOMAIN_NOT_REGISTERED` and the notice `domain-not-registered` name the next step (buy the domain from a registrar first, or check its spelling); the `NOT_ELIGIBLE` reasons `EXPIRED` and `MODE` name the server's next step; the `DOMAIN_TAKEN` and `CHECK_PAUSED` problem texts follow the site. `ttlDays` states the contract. Thirty-two tools. Contract 2.36.0. `User-Agent: brewpage-mcp/1.23.0`.
+
 ## 1.22.0 -- 2026-11-12
 
 - Custom domains: the texts now lead to a connected domain. A refusal names its next step (an owner token in no profile: sign in at https://account.brewpage.app/tokens, press Add existing token, paste it, repeat); results give the DNS records step (mail records stay, a same-name A, AAAA or CNAME is replaced, Cloudflare Proxy status DNS only), one `check_domain`, then status reads until `active`; the `Problem:` line names the fix; status `lost` is described. `list_domains` takes an optional `type` + `namespace` + `id` or `hostname` and reads that one custom domain without a DNS check; without them it lists the profile as before. `get_guide` adds the topic `custom-domain`. Thirty-two tools. Contract 2.28.0. `User-Agent: brewpage-mcp/1.22.0`.

package/dist/guides/custom-domain.js

@@ -15,12 +15,12 @@ export const DOMAIN_PROBLEMS = {
     "ROUTING_WRONG": "the name points elsewhere: replace its A or CNAME record (Cloudflare: DNS only)",
     "FOREIGN_AAAA": "delete the AAAA record listed in `records[]`",
     "CAA_BLOCKS": "add the CAA record listed in `records[]`",
-    "DOMAIN_TAKEN": "this domain is already connected: use another hostname or write to info@brewpage.app",
+    "DOMAIN_TAKEN": "this hostname is not available: use another hostname or write to info@brewpage.app",
     "QUEUE_FULL": "DNS records are right, verification waits its turn: nothing to do",
     "CERT_PENDING": "HTTPS certificate on its way: nothing to do",
     "CERT_FAILED": "the certificate could not be issued: check the DNS records, then check again",
     "DNS_LOST": "DNS records stayed broken past `graceEndsAt`, so the domain was disconnected: restore them, then check again",
-    "CHECK_PAUSED": "automatic checks paused after a long failure: fix DNS, then check again (resumes them)",
+    "CHECK_PAUSED": "automatic checks paused, records not right a week after adding: fix DNS, then check again (resumes them)",
     "RESOLVER_UNAVAILABLE": "DNS did not answer: retried automatically",
     "PUBLICATION_GONE": "the publication is gone: connect the custom domain to another one",
 };

package/dist/guides/page-data.d.ts

@@ -1,4 +1,4 @@
 /** Page data cheat-sheet: the text block under "## Page data" -> "### Browser SDK" of llms-full.txt. */
 export declare const PAGE_DATA_GUIDE: string;
-/** Page script call shapes: the "bp.state() -> s|null" line of llms.txt. */
+/** Page script call shapes: the "bp.state() -> s|null" line of llms-full.txt. */
 export declare const PAGE_DATA_CALLS = "bp.state() -> s|null (guard it); c=s.col(\"name\"); c.set(key,value) c.get(key) c.remove(key) c.add(value) c.list({order,limit}) c.stats({countBy})";

package/dist/guides/page-data.js

@@ -1,53 +1,48 @@
-// Generated by scripts/sync-guide.mjs from brewpage-app frontend/src (llms-full.txt, llms.txt); do not hand-edit.
+// Generated by scripts/sync-guide.mjs from brewpage-app frontend/src (llms-full.txt); do not hand-edit.
 /** Page data cheat-sheet: the text block under "## Page data" -> "### Browser SDK" of llms-full.txt. */
 export const PAGE_DATA_GUIDE = [
-    "BrewPage page data (the `state` API): a published page saves data on BrewPage. No keys, no backend.",
-    "1) Publish with a \"state\" field (POST /api/html JSON body; multipart field \"state\" on /api/sites):",
-    "   {\"content\":\"<!doctype html>...\",\"state\":{\"collections\":{",
-    "     \"saves\":{\"mode\":\"private\"},",
-    "     \"votes\":{\"mode\":\"private\",\"choices\":{\"choice\":[\"a\",\"b\",\"c\"]}},",
-    "     \"guestbook\":{\"mode\":\"shared\",\"maxDocsPerVisitor\":5},",
-    "     \"scores\":{\"mode\":\"shared\",\"index\":\"score\",\"maxDocsPerVisitor\":1},",
-    "     \"menu\":{\"mode\":\"shared\",\"write\":\"author\"}}}}",
-    "   The page gets its own address https://<label>.brewpage.app. Saving needs a declared \"state\" and that address (or its custom domain).",
-    "   Raw-HTML publishes cannot carry state: use the JSON body, or PATCH /api/{ns}/{id}/state afterwards.",
-    "2) Include before your code (absolute URL, classic script, no async, no import):",
-    "   <script src=\"https://brewpage.app/js/state.js\"></script>",
-    "3) Use, inside an async function (top-level return/await break a classic script):",
-    "   async function start() {",
-    "     const s = await bp.state();             // null if unavailable; reason in bp.state.reason + console",
-    "     if (!s) return showNote(\"Saving is not available on this page right now.\"); // always guard; the page keeps working",
-    "     const saves = s.col(\"saves\");",
-    "     await saves.set(\"slot1\", {level: 3});   // own doc; key A-Za-z0-9_.- (not starting with _), <=128",
-    "     const game = await saves.get(\"slot1\");  // value or null",
-    "     await saves.remove(\"slot1\");            // true if it existed",
-    "     await s.col(\"guestbook\").add({text: input.value}); // random key",
-    "     const docs = await s.col(\"guestbook\").list({order: \"-createdAt\", limit: 20}); // array; docs.next = cursor or null",
-    "     for (const d of docs) { const li = document.createElement(\"li\"); li.append(bp.text(d.value.text)); ul.append(li); }",
-    "     await s.col(\"scores\").list({order: \"-index\", limit: 10});",
-    "     await s.col(\"votes\").stats({countBy: \"choice\"}); // {count, by: {a, b, c, other}}",
-    "     await s.col(\"menu\").get(\"today\");       // write:\"author\" docs: visitors read",
-    "   }",
-    "   start();",
-    "   bp.storage.ready.then(() => bp.storage.setItem(\"k\", \"v\")); // localStorage-like, synced, one doc; works where s is null",
-    "Modes: private (own docs only; default) | shared (all read, own write) | shared + write:\"author\" (author writes via API/MCP).",
-    "Collection names: a-z, 0-9, _ and -, start with a letter, <=32 chars, <=32 collections.",
-    "One thing per visitor (vote, RSVP, best score): use a fixed key such as \"me\".",
-    "Writes run in call order; save on change or submit, not on every keystroke.",
-    "Errors reject with e.code (e.message explains): rate_limited (e.retryAfter), quota, too_large, value_refused, mode_forbidden,",
-    "  challenge_cancelled, challenge_failed, challenge_unavailable, not_found, invalid_argument, network, unavailable, error.",
-    "BrewPage may ask a visitor for a quick human check before saving; the SDK shows it and retries.",
-    "  If your page sets a Content-Security-Policy, allow https://challenges.cloudflare.com (script-src, frame-src).",
-    "Limits: 16 KiB per doc (maxDocBytes up to 64 KiB); per visitor 20 docs, 32 KiB, 30 writes/min; list <= 100; data lives as long as the page.",
-    "Identity: one cookie per visitor per page; another browser or cleared cookies = new visitor.",
-    "bp.state() is null: without \"state\", on brewpage.app/... path addresses (needs_subdomain; unavailable in the brewpage.app viewer),",
-    "  in frames on other sites (embedded), with cookies off and outside BrewPage (file://, localhost, chat previews).",
-    "  Test the published link.",
-    "Privacy: the author reads all visitors' data (Data tab, API). Tell visitors: \"What you enter is saved on BrewPage and can be read by this page's author.\"",
+    "BrewPage Page data (API word `state`): a published page saves what visitors enter. No backend, no key in page code; not KV/JSON (your own data).",
+    "1) Build. Before your code (absolute URL, classic script, no async/import): <script src=\"https://brewpage.app/js/state.js\"></script>",
+    "bp.state() -> s|null (guard it); c=s.col(\"name\"); c.set(key,value) c.get(key) c.remove(key) c.add(value) c.list({order,limit}) c.stats({countBy})",
+    "  async function start() { // no top-level await/return",
+    "    const s = await bp.state(); // null -> reason in bp.state.reason, console",
+    "    if (!s) return showNote(\"Saving is not available on this page right now.\"); // always guard",
+    "    const book = s.col(\"guestbook\");",
+    "    await book.add({text: input.value}); // random key",
+    "    const docs = await book.list({order: \"-createdAt\", limit: 20}); // [{key, id, value, mine, createdAt}], .next|null -> list({cursor})",
+    "    for (const d of docs) ul.append(bp.text(d.value.text));",
+    "    const v = s.col(\"votes\");",
+    "    await v.set(\"me\", {choice: \"a\"}); // key A-Za-z0-9_.-, no leading _, <=128; \"me\" = one per visitor",
+    "    await v.get(\"me\"); // value or null; remove(key) -> true if it existed",
+    "    await v.stats({countBy: \"choice\"}); // {count, by: {a, b, other}}",
+    "  }",
+    "  start();",
+    "  bp.storage.ready.then(() => bp.storage.setItem(\"k\", \"v\")); // localStorage-like, synced; works where s is null",
+    "2) state (in the publish body, not the page): {} = all lists private (visitor sees own entries). Name a list to change its rule:",
+    "  {\"collections\":{\"guestbook\":{\"mode\":\"shared\",\"maxDocsPerVisitor\":5}}} = all read, each writes own",
+    "  \"scores\":{\"mode\":\"shared\",\"index\":\"score\",\"maxDocsPerVisitor\":1} -> list({order: \"-index\"})",
+    "  \"votes\":{\"choices\":{\"choice\":[\"a\",\"b\"]}} -> stats, other values count as other",
+    "  \"menu\":{\"mode\":\"shared\",\"write\":\"author\"} = visitors read, author writes (Owner API, MCP)",
+    "  List names a-z0-9_- (letter first, <=32 chars), <=32 lists. A private list never turns shared: new name.",
+    "3) Owner view: s.role is \"owner\" where the page shows its owner gear, else \"visitor\"; s.onRole(fn(role)) runs now and on change.",
+    "  Owner: c.list({all: true}) = all entries + d.visitor label (paged like list); c.removeById(entry.id). No secrets in page.",
+    "4) Test locally: open from disk or http(s)://localhost, 127.0.0.1, [::1], *.localhost: bp.state() = local preview, s.local === true,",
+    "  console \"[BrewPage] Local preview\". Kept in this browser, nothing sent; clear: localStorage.removeItem(\"__bp_state_local\").",
+    "  One visitor; checks and limits as published, e.status 0. Not applied: state rules, rate limits, human check, cookies.",
+    "  ?bp-local=owner = owner view, ?bp-local=off = off. Same file works unchanged once published with state.",
+    "5) Publish: POST https://brewpage.app/api/html, Content-Type: application/json, body {\"content\":\"<html>...\",\"state\":{...}}; sites: multipart field \"state\".",
+    "  Raw HTML body cannot carry state (or PATCH /api/{ns}/{id}/state later). Own address https://<label>.brewpage.app (or custom domain).",
+    "  Give the user the page link (`link`) and the management link (`manageUrl`, private; Data tab shows entries).",
+    "  On the published link: one save works and shows in the Data tab; each list behaves as declared.",
+    "6) Errors: e.code: rate_limited (e.retryAfter), quota, too_large, value_refused, mode_forbidden, not_owner, challenge_cancelled,",
+    "  challenge_failed, challenge_unavailable, not_found, invalid_argument, network, unavailable, error.",
+    "  Own CSP: allow https://challenges.cloudflare.com (script-src, frame-src).",
+    "7) Limits: 16 KiB per entry; per visitor 20 entries, 32 KiB, 30 writes/min; list <= 100.",
+    "  Visitor = one cookie per browser per page. Save on change or submit.",
+    "  null: no \"state\", brewpage.app/... paths (needs_subdomain), frames on other sites (embedded), cookies off, chat previews.",
+    "8) Tell visitors: \"What you enter is saved on BrewPage and can be read by this page's author.\"",
     "  Shared lists: \"Your message is public: everyone who opens this page can read it.\"",
-    "Never collect passwords, card numbers or other credentials. Entries are text and numbers.",
-    "Author API (owner token or management key): GET/PATCH /api/{ns}/{id}/state, GET /api/{ns}/{id}/state/{col}?format=csv.",
-    "After publishing, give the user the page link and the management link (private); its Data tab shows the entries.",
+    "  Never collect passwords, card numbers or other credentials. Render entries as text (bp.text), never innerHTML.",
 ].join("\n") + "\n";
-/** Page script call shapes: the "bp.state() -> s|null" line of llms.txt. */
+/** Page script call shapes: the "bp.state() -> s|null" line of llms-full.txt. */
 export const PAGE_DATA_CALLS = "bp.state() -> s|null (guard it); c=s.col(\"name\"); c.set(key,value) c.get(key) c.remove(key) c.add(value) c.list({order,limit}) c.stats({countBy})";

package/dist/tools.d.ts

@@ -1,6 +1,6 @@
 import { McpServer } from "@modelcontextprotocol/server";
 export declare const DEFAULT_BASE_URL = "https://brewpage.app";
-export declare const USER_AGENT = "brewpage-mcp/1.22.0";
+export declare const USER_AGENT = "brewpage-mcp/1.23.0";
 export declare const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 /** Server instructions of the handshake: one paragraph per line; the first stands alone within 512 chars. */
 export declare const SERVER_INSTRUCTIONS: string;

package/dist/tools.js

@@ -3,7 +3,7 @@ import { z } from "zod";
 import { DOMAIN_PROBLEMS, DOMAIN_STATUSES } from "./guides/custom-domain.js";
 import { PAGE_DATA_CALLS, PAGE_DATA_GUIDE } from "./guides/page-data.js";
 export const DEFAULT_BASE_URL = "https://brewpage.app";
-export const USER_AGENT = "brewpage-mcp/1.22.0";
+export const USER_AGENT = "brewpage-mcp/1.23.0";
 export const OWNER_TOKEN_ENV = "BREWPAGE_OWNER_TOKEN";
 /** Server instructions of the handshake: one paragraph per line; the first stands alone within 512 chars. */
 export const SERVER_INSTRUCTIONS = [
@@ -223,8 +223,8 @@ const DOMAIN_REASONS = {
     TYPE: "only HTML pages and sites can",
     FORMAT: "the page is not format html: publish it as format html",
     PASSWORD: "remove the password (management link, or POST /api/{html|sites}/{ns}/{id}/password {\"password\":null})",
-    EXPIRED: "it has expired: connect the custom domain to another publication",
-    MODE: "it left its own subdomain: change its hosting back to subdomain (update_hosting deliveryMode=subdomain)",
+    EXPIRED: "it has expired: extend it, or connect the custom domain to another publication",
+    MODE: "it is not on its own subdomain: set the domain on it again (set_domain with the same hostname), which moves it to its own subdomain",
 };
 const DOMAIN_READ_STATUS = "read the status with list_domains (same type, namespace and id, or hostname)";
 const DOMAIN_NEXT_CREATE = "Next: give the user exactly these DNS records to create at their DNS provider (`host` is the name DNS panels ask for). " +
@@ -316,6 +316,8 @@ function domainNeedsProfile(fromEnv, then) {
         `and ask them to sign in at ${DOMAIN_TOKENS_PAGE} (free), press "Add existing token" and paste it; then ${then}. With an admin profile token bind_token adds it instead.`;
 }
 const DOMAIN_LIMIT_NEXT = "remove_domain frees one; a hostname already in the profile moves here with set_domain.";
+/** 400 `DOMAIN_NOT_REGISTERED` and its create notice; the caller appends the call to make next. */
+const DOMAIN_NOT_REGISTERED_NEXT = "The domain is not registered yet: ask the user to buy it from a domain registrar first (BrewPage does not sell domains), or check its spelling;";
 /** 409 `DOMAIN_PROFILE_AMBIGUOUS` and its create notice; `then` = the call to make with the profile token. */
 function domainAmbiguous(then) {
     return `The token is in several profiles: ${then} with a profile token of the profile that should hold the custom domain (minted at ${DOMAIN_TOKENS_PAGE}).`;
@@ -330,6 +332,8 @@ function publishDomainNext(code, fromEnv) {
         return ` ${domainAmbiguous("call set_domain")}`;
     if (code === "domain-not-eligible" || code === "domain-invalid")
         return " The domain notice above says what to fix; then set_domain connects it.";
+    if (code === "domain-not-registered")
+        return ` ${DOMAIN_NOT_REGISTERED_NEXT} then set_domain connects it.`;
     if (code === "domain-account-restricted")
         return " The domain notice above says why.";
     return " The domain notice above says why. set_domain connects it later.";
@@ -358,6 +362,7 @@ function domainHints(data, address, fromEnv = false) {
         case "DOMAIN_NOT_FOUND": return ["No custom domain there: list_domains shows the profile's custom domains; set_domain connects one."];
         case "INVALID_HOSTNAME": return ["Pass one bare hostname such as www.example.com or example.com (no scheme, path or port); the message says what to fix."];
         case "DOMAIN_NOT_ALLOWED": return ["brewpage.app addresses and some domains cannot be used: ask the user for a domain they own."];
+        case "DOMAIN_NOT_REGISTERED": return [`${DOMAIN_NOT_REGISTERED_NEXT} then repeat this call.`];
         case "NOT_ELIGIBLE": return typeof reason === "string" && DOMAIN_REASONS[reason] ? [`This publication cannot take a custom domain: ${DOMAIN_REASONS[reason]}.`] : [];
         case "DOMAIN_PROFILE_AMBIGUOUS": return [domainAmbiguous("repeat")];
         case "OWNER_TOKEN_REVOKED":
@@ -491,8 +496,8 @@ const SITE_NAMESPACE_DESCRIPTION = PUBLIC_NAMESPACE_LEAD + "A site always gets i
 /** `namespace` for publish_json and publish_kv: data is never listed. */
 const DATA_NAMESPACE_DESCRIPTION = "Omit (default): private. namespace=public: the shared public namespace. JSON and KV are never listed in the gallery " +
     "or indexed, in any namespace; anyone who has the link can open it. " + NAMESPACE_FORMAT;
-const TTL_SCHEMA = z.union([z.number().positive(), z.string().min(1).max(32)]).optional().describe("Requested TTL: days as a number, or a string such as '2w', '36h' or '1 month' (default 15 days). " +
-    "The server rounds to whole days and clamps to the allowed range (1-30; up to 90 with an owner token in a profile), reporting each adjustment in notices; the returned expiresAt is the actual expiry.");
+const TTL_SCHEMA = z.union([z.number().positive(), z.string().min(1).max(32)]).optional().describe("TTL in days: up to 30 days without an account, up to 90 with a free profile (pass an ownerToken held in the profile); " +
+    "a default applies when omitted. Accepts whole days: 15, '15d', '15 days'. The returned expiresAt is the actual expiry.");
 const DELIVERY_MODE_SCHEMA = z.enum(["path", "subdomain"]).optional().describe("Optional delivery choice for a fresh publication, independent of password/namespace. " +
     "Fresh sites and HTML-format pages outside public (including the default unlisted namespace) always use subdomain; an explicit path there still publishes, on subdomain, with a delivery notice. " +
     "Everything else in any namespace (Markdown, code/text, files, JSON, KV, public HTML) defaults to path (Promotion); public HTML may automatically choose subdomain for browser features. " +
@@ -594,7 +599,7 @@ export function createServer(options = {}) {
     const apiFetch = options.fetch ?? fetch;
     const server = new McpServer({
         name: "brewpage-mcp",
-        version: "1.22.0",
+        version: "1.23.0",
     }, { instructions: SERVER_INSTRUCTIONS });
     /** Caller argument first, then the configured default; `fromEnv` marks the configured one. */
     function ownerTokenFor(argument) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brewpage-mcp",
-  "version": "1.22.0",
+  "version": "1.23.0",
   "mcpName": "io.github.kochetkov-ma/brewpage-mcp",
   "description": "MCP server for BrewPage — publish and manage HTML, sites, KV, JSON and files from AI assistants",
   "type": "module",