sbuilder-mcp 0.83.0 → 0.83.2

package/CHANGELOG.md

@@ -6,6 +6,26 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.83.2] - 2026-10-11
+
+### Added
+- `sb_api_find` and `sb_api_call` reach 833 platform operations.
+
+### Fixed
+- The server logs the device session out when the process exits (stdin closes, SIGTERM, SIGINT) and before `sb_connect` signs in again, so leftover MCP sessions no longer count against the platform's 10-device limit and push the merchant out of the editor.
+- Closing Chrome after a screenshot no longer kills the process before the logout runs.
+
+## [0.83.1] - 2026-10-11
+
+### Added
+- `sb_bind` accepts `brand.*` and `blogCategory.*` binding sources, raising the known binding sources from 82 to 94.
+
+### Changed
+- `sb_page_create` with the `brand` or `course` page type, or with `seed: false`, returns a `next` hint explaining how to build the page, since publishing an empty one makes every entity URL answer 500.
+
+### Fixed
+- `sb_review` no longer reports `dead_binding_source` for valid `blogCategory.*` bindings.
+
 ## [0.83.0] - 2026-10-11
 
 ### Added

package/CHANGELOG.vi.md

@@ -6,6 +6,26 @@ Mọi thay đổi đáng chú ý của dự án được ghi lại trong file n
 Định dạng dựa trên [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 và dự án tuân theo [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.83.2] - 2026-10-11
+
+### Added
+- `sb_api_find` và `sb_api_call` truy cập được 833 operation của platform.
+
+### Fixed
+- Server đăng xuất phiên thiết bị khi tiến trình thoát (stdin đóng, SIGTERM, SIGINT) và trước khi `sb_connect` đăng nhập lại, nên phiên MCP bỏ lại không còn chiếm giới hạn 10 thiết bị của platform và đẩy merchant ra khỏi editor.
+- Việc đóng Chrome sau khi chụp ảnh không còn giết tiến trình trước khi kịp đăng xuất.
+
+## [0.83.1] - 2026-10-11
+
+### Added
+- `sb_bind` nhận nguồn binding `brand.*` và `blogCategory.*`, nâng số nguồn binding được biết từ 82 lên 94.
+
+### Changed
+- `sb_page_create` với loại trang `brand` hoặc `course`, hoặc với `seed: false`, trả gợi ý `next` nêu cách dựng trang, vì publish trang rỗng khiến mọi URL thực thể trả 500.
+
+### Fixed
+- `sb_review` không còn báo `dead_binding_source` cho binding `blogCategory.*` hợp lệ.
+
 ## [0.83.0] - 2026-10-11
 
 ### Added

package/README.md

@@ -118,8 +118,8 @@ in this client: one would put the very key the platform exists to hold back into
 | `sb_store` | Run a store flow that must happen in a fixed order — `checkout` (the four writes that make a working one), `checkout_sync` (the store's current payment and delivery methods into every existing order form, checkout page republished), `form` (any of the platform's 17 templates with its own field document), `chrome` (one shared header or footer on a real site menu — desktop menu, mobile drawer, cart and account icons), `menu` (a menu node bound to the site's menu, its links resolved), `overlay_attach` (a pop-up or quick view on the open page), `cart` (the site's cart drawer, when it has none; `relocalize` puts an existing one in the site's language) and `app` (a built-in app plus the pages it needs), `global_attach` / `global_detach` (put an EXISTING shared section on the open page, or take it off), `global_promote` (make a section on the page a NEW shared section) and `template_save` (save a section as a reusable template) |
 | `sb_undo` | Undo / redo this session's writes — page and form edits and `sb_api_call` PUTs; a page is refused if someone else saved it since. The platform's versions and history (`sb_page_version`) outlive this process |
 
-Twenty-eight tools, **830 API operations** (302 of the 381 writes carrying a body shape read
-off the handler), 123 elements, 82 binding sources. `sb_api_find`
+Twenty-eight tools, **833 API operations** (304 of the 384 writes carrying a body shape read
+off the handler), 123 elements, 94 binding sources. `sb_api_find`
 is an index rather than a tool per endpoint, so the tool list stays short while everything
 the platform can do stays reachable — and operations added to the platform arrive with the
 next `npm run codegen`.

package/README.vi.md

@@ -115,8 +115,8 @@ nhét ngược lại vào mọi bản cài.
 | `sb_store` | Chạy một luồng cửa hàng bắt buộc đúng thứ tự — `checkout` (bốn lệnh ghi tạo nên trang thanh toán), `checkout_sync` (đưa phương thức thanh toán và giao hàng hiện tại vào mọi form đặt hàng đã có, publish lại trang thanh toán), `form` (một trong 17 template của nền tảng kèm field document của nó), `chrome` (một header hoặc footer dùng chung trên menu thật của site — menu desktop, drawer mobile, icon giỏ hàng và tài khoản), `menu` (một node menu bind vào menu của site, link đã phân giải), `overlay_attach` (một pop-up hay quick view trên trang đang mở), `cart` (ngăn giỏ hàng của site, khi chưa có; `relocalize` đưa ngăn giỏ đã có về ngôn ngữ của site), `app` (một app dựng sẵn kèm những trang nó cần), và `global_attach` / `global_detach` (đặt một section dùng chung ĐÃ CÓ lên trang đang mở, hoặc gỡ ra), `global_promote` (biến một section trên trang thành section dùng chung MỚI) và `template_save` (lưu một section làm mẫu dùng lại) |
 | `sb_undo` | Hoàn tác / làm lại các thao tác ghi trong phiên — chỉnh sửa trang, form và PUT qua `sb_api_call`; trang bị từ chối nếu người khác đã lưu sau đó. Version và history của nền tảng (`sb_page_version`) sống lâu hơn process này |
 
-Hai mươi tám tool, **830 operation API** (302 trong 381 lệnh ghi có hình dạng body đọc thẳng
-từ handler), 123 element, 82 nguồn binding. `sb_api_find` là
+Hai mươi tám tool, **833 operation API** (304 trong 384 lệnh ghi có hình dạng body đọc thẳng
+từ handler), 123 element, 94 nguồn binding. `sb_api_find` là
 một chỉ mục chứ không phải mỗi endpoint một tool, nên danh sách tool vẫn ngắn trong khi mọi
 thứ nền tảng làm được vẫn với tới — và operation mới thêm bên nền tảng sẽ tự có sau lần
 `npm run codegen` kế tiếp.

package/dist/catalog/api.generated.js

@@ -1,8 +1,8 @@
 export const SWAGGER_SOURCE = {
-    "operations": 830,
-    "definitions": 277,
-    "bodyCarrying": 362,
-    "bodyUndescribed": 92,
+    "operations": 833,
+    "definitions": 278,
+    "bodyCarrying": 364,
+    "bodyUndescribed": 93,
     "generatedFrom": "server/docs/swagger.json"
 };
 export const API_OPERATIONS = [
@@ -1508,6 +1508,27 @@ export const API_OPERATIONS = [
         "bodyRef": null,
         "credential": "siteScoped"
     },
+    {
+        "id": "post:/api/admin/accounts/{id}/sign-out",
+        "method": "POST",
+        "path": "/api/admin/accounts/{id}/sign-out",
+        "tags": [
+            "admin"
+        ],
+        "summary": "Sign an account out of every device",
+        "params": [
+            {
+                "name": "id",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Account (user) id"
+            }
+        ],
+        "bodyDescribed": false,
+        "bodyRef": null,
+        "credential": "siteScoped"
+    },
     {
         "id": "get:/api/admin/address-units",
         "method": "GET",
@@ -1932,6 +1953,27 @@ export const API_OPERATIONS = [
         "bodyRef": null,
         "credential": "none"
     },
+    {
+        "id": "post:/api/auth/logout",
+        "method": "POST",
+        "path": "/api/auth/logout",
+        "tags": [
+            "auth"
+        ],
+        "summary": "Sign out this device (revoke its refresh session)",
+        "params": [
+            {
+                "name": "body",
+                "in": "body",
+                "required": true,
+                "type": "object",
+                "description": "refreshToken"
+            }
+        ],
+        "bodyDescribed": false,
+        "bodyRef": null,
+        "credential": "none"
+    },
     {
         "id": "get:/api/auth/me",
         "method": "GET",
@@ -8272,6 +8314,34 @@ export const API_OPERATIONS = [
         "bodyRef": null,
         "credential": "siteScoped"
     },
+    {
+        "id": "post:/api/sites/{siteId}/einvoice/connection/check",
+        "method": "POST",
+        "path": "/api/sites/{siteId}/einvoice/connection/check",
+        "tags": [
+            "pos"
+        ],
+        "summary": "Test an e-invoice provider connection",
+        "params": [
+            {
+                "name": "siteId",
+                "in": "path",
+                "required": true,
+                "type": "string",
+                "description": "Site ID"
+            },
+            {
+                "name": "body",
+                "in": "body",
+                "required": false,
+                "type": "object",
+                "description": "{provider?, sandbox?, credentials?}"
+            }
+        ],
+        "bodyDescribed": true,
+        "bodyRef": "github_com_webbuilder_server_internal_einvoice.CheckInput",
+        "credential": "siteScoped"
+    },
     {
         "id": "get:/api/sites/{siteId}/einvoice/jobs",
         "method": "GET",
@@ -8423,7 +8493,7 @@ export const API_OPERATIONS = [
             }
         ],
         "bodyDescribed": true,
-        "bodyRef": "github_com_webbuilder_server_internal_einvoice.Settings",
+        "bodyRef": "internal_einvoice_rest.settingsInput",
         "credential": "siteScoped"
     },
     {
@@ -8451,7 +8521,7 @@ export const API_OPERATIONS = [
             }
         ],
         "bodyDescribed": true,
-        "bodyRef": "github_com_webbuilder_server_internal_einvoice.Settings",
+        "bodyRef": "internal_einvoice_rest.settingsInput",
         "credential": "siteScoped"
     },
     {
@@ -14687,6 +14757,13 @@ export const API_OPERATIONS = [
                 "type": "string",
                 "description": "Location filter (GET)"
             },
+            {
+                "name": "archived",
+                "in": "query",
+                "required": false,
+                "type": "boolean",
+                "description": "true = list archived areas (GET)"
+            },
             {
                 "name": "area",
                 "in": "body",
@@ -14722,6 +14799,13 @@ export const API_OPERATIONS = [
                 "type": "string",
                 "description": "Location filter (GET)"
             },
+            {
+                "name": "archived",
+                "in": "query",
+                "required": false,
+                "type": "boolean",
+                "description": "true = list archived areas (GET)"
+            },
             {
                 "name": "area",
                 "in": "body",
@@ -14741,7 +14825,7 @@ export const API_OPERATIONS = [
         "tags": [
             "pos"
         ],
-        "summary": "Rename, reorder or delete a floor area",
+        "summary": "Rename, reorder, restore, archive or delete a floor area",
         "params": [
             {
                 "name": "siteId",
@@ -14776,7 +14860,7 @@ export const API_OPERATIONS = [
         "tags": [
             "pos"
         ],
-        "summary": "Rename, reorder or delete a floor area",
+        "summary": "Rename, reorder, restore, archive or delete a floor area",
         "params": [
             {
                 "name": "siteId",
@@ -26701,41 +26785,20 @@ export const API_DEFINITIONS = {
             }
         }
     },
-    "github_com_webbuilder_server_internal_einvoice.Settings": {
+    "github_com_webbuilder_server_internal_einvoice.CheckInput": {
         "type": "object",
         "properties": {
-            "enabled": {
-                "type": "boolean"
-            },
-            "invoiceSeries": {
-                "type": "string"
-            },
-            "issueMode": {
-                "type": "string"
+            "credentials": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                }
             },
             "provider": {
                 "type": "string"
             },
-            "sellerAddress": {
-                "type": "string"
-            },
-            "sellerEmail": {
-                "type": "string"
-            },
-            "sellerName": {
-                "type": "string"
-            },
-            "sellerPhone": {
-                "type": "string"
-            },
-            "sellerTaxCode": {
-                "type": "string"
-            },
-            "templateCode": {
-                "type": "string"
-            },
-            "updatedAt": {
-                "type": "string"
+            "sandbox": {
+                "type": "boolean"
             }
         }
     },
@@ -27801,6 +27864,10 @@ export const API_DEFINITIONS = {
     "github_com_webbuilder_server_internal_pos.AreaInput": {
         "type": "object",
         "properties": {
+            "archived": {
+                "description": "Archived (PATCH only): false restores an archived area; true is refused —\narchiving has one door, DELETE, which checks the open tabs.",
+                "type": "boolean"
+            },
             "locationId": {
                 "description": "POST only; an area never moves",
                 "type": "string"
@@ -32141,6 +32208,54 @@ export const API_DEFINITIONS = {
             }
         }
     },
+    "internal_einvoice_rest.settingsInput": {
+        "type": "object",
+        "properties": {
+            "credentials": {
+                "type": "object",
+                "additionalProperties": {
+                    "type": "string"
+                }
+            },
+            "enabled": {
+                "type": "boolean"
+            },
+            "invoiceSeries": {
+                "type": "string"
+            },
+            "issueMode": {
+                "type": "string"
+            },
+            "provider": {
+                "type": "string"
+            },
+            "sandbox": {
+                "description": "Sandbox points the provider adapter at its test environment.",
+                "type": "boolean"
+            },
+            "sellerAddress": {
+                "type": "string"
+            },
+            "sellerEmail": {
+                "type": "string"
+            },
+            "sellerName": {
+                "type": "string"
+            },
+            "sellerPhone": {
+                "type": "string"
+            },
+            "sellerTaxCode": {
+                "type": "string"
+            },
+            "templateCode": {
+                "type": "string"
+            },
+            "updatedAt": {
+                "type": "string"
+            }
+        }
+    },
     "internal_giftcards_rest.adjustRequest": {
         "type": "object",
         "properties": {

package/dist/catalog/deadkeys.generated.js

@@ -1,6 +1,6 @@
 export const DEAD_KEY_SOURCE = {
-    "files": 5639,
-    "identifiers": 103197,
+    "files": 5665,
+    "identifiers": 103619,
     "seededKeys": 445,
     "dead": 0
 };

package/dist/catalog/elements.generated.js

@@ -41952,6 +41952,17 @@ export const BINDING_SOURCES = [
     "article.tags",
     "article.title",
     "article.url",
+    "blogCategory.description",
+    "blogCategory.image",
+    "blogCategory.title",
+    "blogCategory.url",
+    "brand.description",
+    "brand.image",
+    "brand.title",
+    "brand.url",
+    "cartLine.lineTotalCents",
+    "cartLine.quantity",
+    "cartLine.variant",
     "category.description",
     "category.image",
     "category.title",
@@ -42008,6 +42019,7 @@ export const BINDING_SOURCES = [
     "review.stars",
     "review.title",
     "review.verified",
+    "searchRow.url",
     "site.addressLine",
     "site.country",
     "site.description",

package/dist/catalog/shapes.generated.js

@@ -1,10 +1,10 @@
 export const SHAPE_SOURCE = {
-    "writeOperations": 381,
-    "shaped": 302,
-    "fromHandlers": 292,
+    "writeOperations": 384,
+    "shaped": 304,
+    "fromHandlers": 294,
     "fromSwaggerOnly": 10,
     "withReadOnly": 30,
-    "structsRead": 3176
+    "structsRead": 3194
 };
 export const REQUEST_SHAPES = {
     "post:/api/sites/{id}/ai-credits/purchase": {
@@ -756,6 +756,16 @@ export const REQUEST_SHAPES = {
         "source": "go",
         "goType": "(inline)"
     },
+    "post:/api/auth/logout": {
+        "fields": [
+            {
+                "name": "refreshToken",
+                "type": "string"
+            }
+        ],
+        "source": "go",
+        "goType": "(inline)"
+    },
     "post:/api/auth/change-password": {
         "fields": [
             {
@@ -3533,13 +3543,40 @@ export const REQUEST_SHAPES = {
                 "name": "invoiceSeries",
                 "type": "string"
             },
+            {
+                "name": "sandbox",
+                "type": "boolean",
+                "note": "Sandbox points the provider adapter at its test environment."
+            },
             {
                 "name": "updatedAt",
                 "type": "string (RFC3339)"
+            },
+            {
+                "name": "credentials",
+                "type": "{ [string]: string }"
             }
         ],
         "source": "go",
-        "goType": "einvoice.Settings"
+        "goType": "settingsInput"
+    },
+    "post:/api/sites/{siteId}/einvoice/connection/check": {
+        "fields": [
+            {
+                "name": "provider",
+                "type": "string"
+            },
+            {
+                "name": "sandbox",
+                "type": "boolean | null"
+            },
+            {
+                "name": "credentials",
+                "type": "{ [string]: string }"
+            }
+        ],
+        "source": "go",
+        "goType": "einvoice.CheckInput"
     },
     "post:/api/sites/{siteId}/einvoice/jobs/{id}/cancel": {
         "fields": [
@@ -6064,6 +6101,11 @@ export const REQUEST_SHAPES = {
             {
                 "name": "position",
                 "type": "number | null"
+            },
+            {
+                "name": "archived",
+                "type": "boolean | null",
+                "note": "Archived (PATCH only): false restores an archived area; true is refused — archiving has one door, DELETE, which checks the open tabs."
             }
         ],
         "source": "go",
@@ -6083,6 +6125,11 @@ export const REQUEST_SHAPES = {
             {
                 "name": "position",
                 "type": "number | null"
+            },
+            {
+                "name": "archived",
+                "type": "boolean | null",
+                "note": "Archived (PATCH only): false restores an archived area; true is refused — archiving has one door, DELETE, which checks the open tabs."
             }
         ],
         "source": "go",

package/dist/catalog/source.generated.js

@@ -1,7 +1,7 @@
 // GENERATED by scripts/gen-catalog.ts — do not edit by hand.
 // The platform commit every other generated file here describes.
 export const PLATFORM_SOURCE = {
-    "commit": "f70fe86d1ceaba55e8793041fdb61ff0663851e1",
-    "committedAt": "2026-10-11T14:05:32+07:00",
+    "commit": "9db1b2a9eede5be5f1081975bd7f687f0becfd4a",
+    "committedAt": "2026-10-11T21:21:05+07:00",
     "dirty": false
 };

package/dist/domains/site/readiness.js

@@ -18,6 +18,7 @@
  */
 import { cartGalleryThumbs, cartRelocalize, cartSeedLocale } from './cartlang.js';
 import { PRODUCT_ACTION_BINDING_ID } from './navhref.js';
+import { hasSeed } from './storepage.js';
 /** Element types that only make sense in a store. */
 const COMMERCE_TYPES = [
     'cart-order',
@@ -435,14 +436,21 @@ export function readinessGaps(input) {
         if (!pages || (count ?? 0) === 0 || published(pages, type))
             continue;
         const draft = drafted(pages, type);
+        // A type the platform ships no seed for opens EMPTY, and an empty entity
+        // template answers 500 at every one of its URLs (storefront/entityroute.go:
+        // empty body → "entity render failed") — so "publish it" alone trades the
+        // 404s for 500s and clears this gap. Measured on a brand page.
+        const withContent = hasSeed(type)
+            ? ''
+            : ` WITH content on it — an empty one answers 500 at every ${prefix}; sb_page_create's \`next\` says what to add`;
         gaps.push({
             id,
             draft,
             problem: `This site has ${count} ${what}${count === 1 ? '' : count && count > 1 ? 's' : ''} and no ` +
                 `published page of the "${type}" type. ${prefix} needs one, so every ${what} link 404s.`,
             fix: draft
-                ? `Publish the ${what} template page that already exists.`
-                : `Create a page of type "${type}" and publish it.`,
+                ? `Publish the ${what} template page that already exists${withContent}.`
+                : `Create a page of type "${type}" and publish it${withContent}.`,
         });
     }
     // A CART DRAWER IN ANOTHER LANGUAGE. Asked before the store gate: a drawer

package/dist/domains/site/review.js

@@ -131,17 +131,19 @@ function drawsItsOwnContent(type) {
     return (BOUND_SPECIALS[type] ?? []).some((k) => !LINK_SPECIALS.has(k));
 }
 /** Binding-source prefixes that name a RECORD (not `site.*`, which every page has). */
-const RECORD_ENTITIES = new Set(['product', 'category', 'course', 'article', 'blogCategory']);
+const RECORD_ENTITIES = new Set(['product', 'category', 'course', 'article', 'blogCategory', 'brand']);
 /**
  * Which records a page TYPE supplies outside any repeater — read off the
  * platform's own seeds (STORE_PAGE_SEEDS bind exactly these at top level).
  */
-const PAGE_ENTITIES = {
+export const PAGE_ENTITIES = {
     product: ['product'],
     category: ['category'],
     course: ['course'],
     post: ['article'],
     blog: ['blogCategory', 'category'],
+    // /brands/{slug} — the page supplies brandContext (web_builder f70fe86d1).
+    brand: ['brand'],
 };
 /** Does this node or an ancestor PIN a record (`bindings[0].target.id`)? */
 function pinnedAbove(d, id) {

package/dist/domains/site/storepage.js

@@ -1,5 +1,7 @@
-import { COMPLETION_HEADLINE, COMPLETION_HEADLINE_SENTINEL, PAGE_LAYOUT_SEEDS, STORE_PAGE_SEEDS } from '../../catalog/storepages.generated.js';
+import { COMPLETION_HEADLINE, COMPLETION_HEADLINE_SENTINEL, PAGE_LAYOUT_SEEDS, PAGE_TYPES, STORE_PAGE_SEEDS } from '../../catalog/storepages.generated.js';
+import { BINDING_SOURCES } from '../../catalog/elements.generated.js';
 import { withFreshIds } from './ids.js';
+import { PAGE_ENTITIES } from './review.js';
 /**
  * WHAT A NEW STORE PAGE OPENS WITH — for an agent, as for a merchant.
  *
@@ -55,6 +57,37 @@ export function seedDocument(type, opts = {}) {
     const escaped = JSON.stringify(headline).slice(1, -1);
     return withFreshIds(JSON.parse(raw.split(COMPLETION_HEADLINE_SENTINEL).join(escaped)));
 }
+/**
+ * What to put on an ENTITY TEMPLATE that opens empty, or null.
+ *
+ * An entity template (a type whose route carries `{slug}`) with an empty
+ * document answers 500 "entity render failed" at EVERY one of its URLs once
+ * published — `storefront/entityroute.go` refuses an empty body rather than
+ * serve a blank 200. Measured on a brand page: empty → 500 at /brands/acme,
+ * one heading → 200. The editor seeds some of these types and not others
+ * (brand and course today), and `seed:false` or a refused seed write leaves any
+ * of them empty, so the rule is "entity template + nothing seeded", not a name.
+ *
+ * A NOTE, NOT AN INVENTED SEED: the platform ships none for brand, and a seed
+ * authored here would be a document nothing upstream keeps current.
+ */
+export function emptyEntityTemplateNote(type) {
+    const route = PAGE_TYPES.find((t) => t.type === type)?.routePattern;
+    const entity = type ? PAGE_ENTITIES[type]?.[0] : undefined;
+    if (!route?.includes('{slug}') || !entity)
+        return null;
+    const has = (k) => BINDING_SOURCES.includes(`${entity}.${k}`);
+    const parts = [
+        ...(has('title') ? [`a heading bound to ${entity}.title`] : []),
+        ...(has('description') ? [`a text bound to ${entity}.description`] : []),
+        ...(type === 'brand'
+            ? ['a product grid narrowed to the brand the URL names: sb_template_use template_id "sb_product_shelf", then sb_set its list-dataset config.collectionType "page_brand" (a bare list-dataset has no card and renders empty)']
+            : []),
+    ];
+    return (`This "${type}" page is EMPTY. Published like that, every ${route} answers 500 ` +
+        '"entity render failed". ' +
+        `Before publishing, sb_add ${parts.join(', ')} — bind the heading and text with sb_bind, field "specials.text".`);
+}
 /** A one-line summary of what a seed puts on the page, for the tool result. */
 export function seedSummary(type) {
     const seed = STORE_PAGE_SEEDS[type];

package/dist/index.js

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { createServer } from './server.js';
+import { buildContext, createServer } from './server.js';
 import { runInstallCli } from './install/index.js';
+import { closeBrowser } from './vision/shoot.js';
 async function main() {
     // `sbuilder-mcp install` writes this server into the agent clients on this
     // machine and exits. Checked BEFORE the transport opens: an installer that
@@ -9,16 +10,30 @@ async function main() {
     if (process.argv[2] === 'install') {
         process.exit(runInstallCli(process.argv.slice(3)));
     }
-    const server = createServer();
+    const ctx = buildContext();
+    const server = createServer(ctx);
     await server.connect(new StdioServerTransport());
     // THE CLIENT CLOSED STDIN, SO THIS PROCESS IS DONE. The SDK does not exit on
     // its own, and the live-room socket (plus its reconnect timer) keeps the event
     // loop alive — an orphaned process that answers the server's pings, so the
     // agent's avatar stays in the room indefinitely. Exiting closes the socket and
     // the server publishes the leave.
-    const done = () => process.exit(0);
-    process.stdin.once('end', done);
-    process.stdin.once('close', done);
+    // Sign the device session out (see Session.logout) and close a pooled Chrome
+    // first, bounded so a dead platform cannot keep the process alive. A signal is
+    // re-raised once that is done, so the exit status is the one it would have had.
+    let exiting = false;
+    const done = (signal) => () => {
+        if (exiting)
+            return;
+        exiting = true;
+        const leave = () => (signal ? process.kill(process.pid, signal) : process.exit(0));
+        setTimeout(leave, 3000).unref();
+        void Promise.allSettled([ctx.session.logout(), closeBrowser()]).then(leave);
+    };
+    process.stdin.once('end', done());
+    process.stdin.once('close', done());
+    process.once('SIGTERM', done('SIGTERM'));
+    process.once('SIGINT', done('SIGINT'));
     // stdout is the MCP channel. Every log line in this repo is console.error.
     console.error('[sbuilder-mcp] ready on stdio');
 }

package/dist/tools/page.js

@@ -12,7 +12,7 @@ import { addSubtree, setMany, baseOnlyKeys, moveNode, removeNode, duplicateNode,
 import { baseOnlyNote } from '../domains/site/baseonly.js';
 import { detachNote, presetIdOf, presetLayer } from '../domains/site/theme.js';
 import { inertHintsFor } from '../domains/site/inert.js';
-import { hasSeed, layoutDocument, seedDocument, seedSummary, seededTypes, } from '../domains/site/storepage.js';
+import { emptyEntityTemplateNote, hasSeed, layoutDocument, seedDocument, seedSummary, seededTypes, } from '../domains/site/storepage.js';
 import { PAGE_TYPES } from '../catalog/storepages.generated.js';
 import { skinLevelNote } from '../domains/site/fieldskin.js';
 import { siteTheme } from '../domains/site/theme-fetch.js';
@@ -2358,6 +2358,7 @@ export function registerPageTools(server, ctx) {
                 body: redact(body),
                 ...(summary ? { would_seed: { type, ...summary } } : {}),
                 ...(layout ? { would_open_as: layout } : {}),
+                ...(!summary && !layout && emptyEntityTemplateNote(type) ? { next: emptyEntityTemplateNote(type) } : {}),
                 ...(wear.header || wear.footer
                     ? { would_wear: { ...(wear.header ? { header: wear.header } : {}), ...(wear.footer ? { footer: wear.footer } : {}) } }
                     : {}),
@@ -2415,9 +2416,14 @@ export function registerPageTools(server, ctx) {
             }
         }
         const wearing = typeof newId === 'string' && newId ? await wearChrome(session, site_id, newId, wear) : undefined;
+        // An entity template that ended up with nothing on it 500s at every
+        // entity URL once published — say what to add, whatever the reason
+        // (no platform seed, seed:false, a refused seed write).
+        const blankNote = !seeded || 'failed' in seeded ? emptyEntityTemplateNote(type) : null;
         return text({
             ...res,
             ...(seeded ? { seeded } : {}),
+            ...(blankNote ? { next: blankNote } : {}),
             ...(wearing ? { chrome: wearing } : {}),
             ...(renamed
                 ? {

package/dist/transport/auth.js

@@ -32,7 +32,17 @@ export class Session {
     loggedIn() {
         return this.access !== null;
     }
-    async login(email, password) {
+    pending = Promise.resolve();
+    /** Serialised: two concurrent sb_connect calls would each sign in and strand one device. */
+    login(email, password) {
+        const run = this.pending.then(() => this.signIn(email, password));
+        this.pending = run.catch(() => { });
+        return run;
+    }
+    async signIn(email, password) {
+        // A second sb_connect in one process would otherwise strand the first
+        // device session — see logout().
+        await this.logout();
         const out = (await request({
             base: this.base,
             method: 'POST',
@@ -58,4 +68,34 @@ export class Session {
         this.access = out.tokens.accessToken;
         this.refreshToken = out.tokens.refreshToken;
     }
+    /**
+     * Sign this device out. Best effort, never throws.
+     *
+     * EVERY password sign-in is its own DEVICE SESSION since web_builder 9db1b2a9e,
+     * capped at 10 per account; past the cap the one that has gone longest
+     * without a REFRESH is deleted. This client never refreshes (the access token
+     * lives 30 days), so a process that exits without signing out leaves a slot
+     * held, and about ten agent runs later the evicted session is the merchant's
+     * own editor — signed out mid-edit, by nothing they can see. A SIGKILLed
+     * process still leaks its slot; nothing on this side can prevent that.
+     */
+    async logout() {
+        const refreshToken = this.refreshToken;
+        this.access = null;
+        this.refreshToken = null;
+        if (!refreshToken)
+            return;
+        try {
+            await request({
+                base: this.base,
+                method: 'POST',
+                path: '/api/auth/logout',
+                body: { refreshToken },
+                fetchImpl: this.fetchImpl,
+            });
+        }
+        catch (err) {
+            console.error('[sbuilder-mcp] sign-out failed:', err.message);
+        }
+    }
 }

package/dist/vision/capture.js

@@ -1378,7 +1378,13 @@ function capturePage(limits) {
 async function withBrowser(fn) {
     let browser;
     try {
-        browser = await chromium.launch({ channel: 'chrome' });
+        // No Playwright signal handlers: `src/index.ts` owns them (see shoot.ts).
+        browser = await chromium.launch({
+            channel: 'chrome',
+            handleSIGINT: false,
+            handleSIGTERM: false,
+            handleSIGHUP: false,
+        });
     }
     catch (e) {
         throw new Error('sbuilder: could not start Chrome to read that page. This server uses the SYSTEM ' +

package/dist/vision/shoot.js

@@ -32,7 +32,7 @@ async function launch() {
 // its SIGTERM handler closes browsers without exiting. Its handlers live until
 // the browser process closes, so a signal re-raised by this module could land
 // while Playwright is still listening and the server would survive a signal it
-// should die on. This module owns the handlers; Playwright gets none.
+// should die on. `src/index.ts` owns the handlers; Playwright gets none.
 const realLauncher = () => chromium.launch({
     channel: 'chrome',
     headless: true,
@@ -91,9 +91,10 @@ export async function closeBrowser() {
 }
 /**
  * A kept browser is a child process, and a child process outlives a parent that
- * forgets it. SIGINT/SIGTERM close Chrome and then re-raise, so the exit code is
- * the one the signal would have produced. That is the path the MCP server
- * actually takes, because a stdio server is stopped by its client.
+ * forgets it. The MCP server closes it on every way out (stdin close, SIGINT,
+ * SIGTERM) in `src/index.ts`, which owns the signal handlers: a second handler
+ * here re-raised the signal the moment Chrome was closed — at once when none was
+ * open — and killed the process before the server signed its device session out.
  *
  * THERE USED TO BE A `beforeExit` HANDLER HERE TOO, and it could never fire.
  * `beforeExit` runs when the event loop DRAINS, and an open browser connection
@@ -110,11 +111,6 @@ export async function closeBrowser() {
  * pooling is deliberate (a vision loop shoots constantly and must not pay a
  * launch each time); the cost of it is this one line at every other call site.
  */
-for (const signal of ['SIGINT', 'SIGTERM']) {
-    process.once(signal, () => {
-        void closeBrowser().finally(() => process.kill(process.pid, signal));
-    });
-}
 /**
  * Photograph a rendered page at several widths, and measure every node.
  *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sbuilder-mcp",
-  "version": "0.83.0",
+  "version": "0.83.2",
   "description": "MCP server that designs and operates a Store Builder site — pages, data, theme and publish — through the platform's own API and live-edit protocol.",
   "mcpName": "io.github.vuluu2k/sbuilder-mcp",
   "type": "module",