@agentic-survey/mcp-server 0.1.1 → 0.1.2

package/README.md

@@ -47,6 +47,10 @@ The agent chains the tools for you: `create_survey` → `add_question` → `publ
 
 > Tip: `npm i -g @agentic-survey/mcp-server` gives you the shorter `agentic-survey init` command.
 
+### Do I need to enable RLS / anything in the Supabase dashboard?
+
+No. The `init --print-sql` migration enables Row Level Security and the access policies for you, on all four tables. **Don't disable RLS:** it's what fences the publishable key (which travels in the share link) so it can *only* read **published** surveys and **insert** responses. It cannot read anyone's responses or your drafts. Your secret key, stored locally on your machine, bypasses RLS for authoring and analysis.
+
 ## How it works
 
 ```

package/dist/cli.js

@@ -72,13 +72,30 @@ async function runInit(flags) {
         existing.secretKey ||
         '';
     const publishableKey = flags['publishable-key'] ||
-        (await ask(`Supabase publishable key (sb_publishable_…, optional${existing.publishableKey ? ', set' : ''}): `)) ||
+        (await ask(`Supabase publishable key (sb_publishable_…, needed for share links${existing.publishableKey ? ', already set' : ''}): `)) ||
         existing.publishableKey ||
         '';
-    const pageEndpoint = flags['page-endpoint'] ||
-        (await ask(`Page-service endpoint [${existing.pageEndpoint ?? DEFAULT_PAGE_ENDPOINT}]: `)) ||
-        existing.pageEndpoint ||
-        DEFAULT_PAGE_ENDPOINT;
+    // Page-service: the domain published survey links point at. Default to the
+    // hosted instance; let people opt into their own self-hosted/custom domain.
+    let pageEndpoint = flags['page-endpoint'] || '';
+    if (!pageEndpoint) {
+        const current = existing.pageEndpoint ?? DEFAULT_PAGE_ENDPOINT;
+        console.log('\nWhich domain do you want your surveys to appear on?');
+        console.log(`  1. ${DEFAULT_PAGE_ENDPOINT}/s/your-survey   (default, quick start)`);
+        console.log('  2. A custom domain (your own self-hosted page-service)');
+        const choice = (await ask(`Choose 1 or 2 [keep ${current}]: `)).trim();
+        if (choice === '1') {
+            pageEndpoint = DEFAULT_PAGE_ENDPOINT;
+        }
+        else if (choice === '2') {
+            pageEndpoint =
+                (await ask('Your page-service base URL (e.g. https://surveys.example.com): ')).trim() ||
+                    current;
+        }
+        else {
+            pageEndpoint = current; // Enter keeps the shown default
+        }
+    }
     if (!supabaseUrl || !secretKey) {
         console.error('\nA project URL and secret key are required. Aborting.');
         process.exitCode = 1;
@@ -107,6 +124,9 @@ async function runInit(flags) {
     else {
         console.log(`\n✓ Connected. Schema present (${probe.data.length} survey(s)).`);
     }
+    if (!publishableKey) {
+        console.log("\n⚠  No publishable key set. Share links and response collection won't work until you add one (re-run init).");
+    }
     printAgentSnippet();
 }
 async function main() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentic-survey/mcp-server",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "MCP server (stdio) exposing survey tools over core, plus the agentic-survey CLI.",
   "license": "MIT",
   "author": "Monty Daley <monty@daley.org.nz>",