@agentix-security/nextjs 0.1.12 → 0.1.13

package/dist/index.cjs

@@ -473,15 +473,16 @@ function buildTools(sdk, baseUrl) {
     })
   );
 }
-function agentInstructions(ttlSec) {
-  return [
-    "1. Pick the tool below that matches what you need to do.",
-    `2. Fetch the tool's token_url with a GET request (no body, no auth required). You will receive JSON containing an access_token. Tokens are valid for ${ttlSec} seconds.`,
-    '3. Include the token in the Authorization header on every API request: "Authorization: Bearer <access_token>"',
-    "4. If you receive HTTP 401 (missing_token or invalid_token), your token is missing or expired \u2014 fetch a new one from the same token_url.",
-    "5. If you receive HTTP 403 (out_of_scope), your token's intent does not cover this route. Get a new token from the token_url of the correct tool.",
-    "6. Each token is scoped to exactly one intent. Use a different token for each capability."
-  ];
+function buildAuthScheme(ttlSec) {
+  return {
+    type: "intent_bearer",
+    summary: "Routes on this service are protected by intent-scoped Bearer tokens. A caller selects the relevant tool from the tools map, obtains a short-lived token from its token_url, and presents it in the Authorization header.",
+    token_issuance: `GET <tool.token_url> \u2014 no credentials or request body required. Returns JSON: { access_token, token_type: "Bearer", intent, expires_in }. Tokens are valid for ${ttlSec} seconds.`,
+    token_usage: "Authorization: Bearer <access_token> (header on every request to the tool's routes).",
+    on_401_missing_or_invalid: "Token is absent or expired. A fresh token is available at the same token_url.",
+    on_403_out_of_scope: "Token's intent does not cover the requested route. The response body includes required_intent and a token_url for the correct scope.",
+    scope_model: "Each token is scoped to exactly one intent. A separate token is required for each distinct tool."
+  };
 }
 function agentixMiddleware(sdk) {
   return async (req) => {
@@ -507,8 +508,7 @@ function agentixMiddleware(sdk) {
         version: "0.2.0",
         tenant_id: sdk.getResolvedTenantId(),
         deployment_id: sdk.getDeploymentId(),
-        instructions: agentInstructions(ttlSec),
-        token_ttl_seconds: ttlSec,
+        auth_scheme: buildAuthScheme(ttlSec),
         discovery: {
           well_known: `${baseUrl}/.well-known/ai-agent.json`,
           token_endpoint: `${baseUrl}/agent/v1/declare_intent`,
@@ -594,9 +594,8 @@ function agentixMiddleware(sdk) {
       return server_js.NextResponse.json({
         service: "agentix-intent-sdk",
         version: "0.2.0",
-        message: "You are an AI agent accessing a human-facing page. This site exposes a structured agent API \u2014 use it instead of scraping HTML.",
-        instructions: agentInstructions(ttlSec),
-        token_ttl_seconds: ttlSec,
+        notice: "This response is served to automated clients. A structured agent API is available at the endpoints below.",
+        auth_scheme: buildAuthScheme(ttlSec),
         discovery: {
           well_known: `${baseUrl}/.well-known/ai-agent.json`,
           token_endpoint: `${baseUrl}/agent/v1/declare_intent`,

package/dist/index.js

@@ -471,15 +471,16 @@ function buildTools(sdk, baseUrl) {
     })
   );
 }
-function agentInstructions(ttlSec) {
-  return [
-    "1. Pick the tool below that matches what you need to do.",
-    `2. Fetch the tool's token_url with a GET request (no body, no auth required). You will receive JSON containing an access_token. Tokens are valid for ${ttlSec} seconds.`,
-    '3. Include the token in the Authorization header on every API request: "Authorization: Bearer <access_token>"',
-    "4. If you receive HTTP 401 (missing_token or invalid_token), your token is missing or expired \u2014 fetch a new one from the same token_url.",
-    "5. If you receive HTTP 403 (out_of_scope), your token's intent does not cover this route. Get a new token from the token_url of the correct tool.",
-    "6. Each token is scoped to exactly one intent. Use a different token for each capability."
-  ];
+function buildAuthScheme(ttlSec) {
+  return {
+    type: "intent_bearer",
+    summary: "Routes on this service are protected by intent-scoped Bearer tokens. A caller selects the relevant tool from the tools map, obtains a short-lived token from its token_url, and presents it in the Authorization header.",
+    token_issuance: `GET <tool.token_url> \u2014 no credentials or request body required. Returns JSON: { access_token, token_type: "Bearer", intent, expires_in }. Tokens are valid for ${ttlSec} seconds.`,
+    token_usage: "Authorization: Bearer <access_token> (header on every request to the tool's routes).",
+    on_401_missing_or_invalid: "Token is absent or expired. A fresh token is available at the same token_url.",
+    on_403_out_of_scope: "Token's intent does not cover the requested route. The response body includes required_intent and a token_url for the correct scope.",
+    scope_model: "Each token is scoped to exactly one intent. A separate token is required for each distinct tool."
+  };
 }
 function agentixMiddleware(sdk) {
   return async (req) => {
@@ -505,8 +506,7 @@ function agentixMiddleware(sdk) {
         version: "0.2.0",
         tenant_id: sdk.getResolvedTenantId(),
         deployment_id: sdk.getDeploymentId(),
-        instructions: agentInstructions(ttlSec),
-        token_ttl_seconds: ttlSec,
+        auth_scheme: buildAuthScheme(ttlSec),
         discovery: {
           well_known: `${baseUrl}/.well-known/ai-agent.json`,
           token_endpoint: `${baseUrl}/agent/v1/declare_intent`,
@@ -592,9 +592,8 @@ function agentixMiddleware(sdk) {
       return NextResponse.json({
         service: "agentix-intent-sdk",
         version: "0.2.0",
-        message: "You are an AI agent accessing a human-facing page. This site exposes a structured agent API \u2014 use it instead of scraping HTML.",
-        instructions: agentInstructions(ttlSec),
-        token_ttl_seconds: ttlSec,
+        notice: "This response is served to automated clients. A structured agent API is available at the endpoints below.",
+        auth_scheme: buildAuthScheme(ttlSec),
         discovery: {
           well_known: `${baseUrl}/.well-known/ai-agent.json`,
           token_endpoint: `${baseUrl}/agent/v1/declare_intent`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentix-security/nextjs",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "description": "Agentix Next.js adapter — AI agent intent-based authorization for Next.js apps",
   "type": "module",
   "main": "./dist/index.cjs",