@exposify/express 0.3.12 → 0.3.14

package/README.md

@@ -35,10 +35,10 @@ and exception filters apply exactly as for any HTTP client, so a guarded
 route refuses an agent without credentials and a `ValidationPipe` error
 reaches the agent as an actionable 400. `npx @exposify/express setup` and
 `inspect` find `src/main.ts` from `nest-cli.json` and load it with your
-`ts-node`/`swc-node`. The Fastify platform isn't supported yet. See
-`examples/nest-demo`.
+`ts-node`/`swc-node`. The Fastify platform isn't supported yet. See the
+[`nest-demo` example](https://github.com/ayadagain/agentready/tree/main/examples/nest-demo).
 
-With `@nestjs/swagger`, [`@exposify/nestjs`](../nestjs) does this in one line
+With `@nestjs/swagger`, [`@exposify/nestjs`](https://github.com/ayadagain/agentready/tree/main/packages/nestjs) does this in one line
 (`mountAiReady(app)`) and adds `@McpExposed()` / `@McpHidden()` /
 `@McpDescribe()` decorators. Or pass the document yourself, and tools get its
 DTO schemas and `@ApiOperation` summaries:
@@ -137,9 +137,9 @@ flagged for you to check. In CI, `describe --check` exits 1 if a tool has no
 description or one is out of date, and `describe --ci` writes AI
 descriptions for read routes only, listing the writes for a person.
 
-`npx @exposify/express inspect` prints every route with its tool name,
-whether agents get it, and why (`--json` for scripts): the answer to "why
-isn't my route showing up?".
+`npx @exposify/express inspect` prints every route with its tool name and
+whether agents get it; add `--why` for the reason on each (`--json` for
+scripts): the answer to "why isn't my route showing up?".
 
 **Catch tool changes in CI:** `npx @exposify/express inspect --snapshot` writes
 `exposify.tools.json` (each route agents can call, and its tool name).
@@ -188,7 +188,7 @@ same way. `loginVerify: { path, fields, body? }` names the second step;
 **No login found, and no sign-in method in the dashboard?** Then agents use
 your app signed out: `/mcp` doesn't ask them to sign in, and your own checks
 decide what they can do. The startup log says which it is
-(`[agentready] How agents sign in: ...`), and so does the dashboard's "How
+(`[exposify] How agents sign in: ...`), and so does the dashboard's "How
 agents sign in" page. Adding a sign-in method there takes effect within a
 minute.
 
@@ -273,17 +273,17 @@ On boot (`npm run dev`, or in production), right after your routes
 register, `aiReady()` prints one line saying whether MCP is up:
 
 ```
-[agentready] MCP ready at /mcp: 6 tools (4 read, 1 write, search_docs), 1 write route hidden (opt in with exposed()), 2 docs indexed, auth: passthrough
+[exposify] MCP ready at /mcp: 6 tools (4 read, 1 write, search_docs), 1 write route hidden (opt in with exposed()), 2 docs indexed, auth: passthrough
 ```
 
 When something's wrong, the line names the problem and a fix instead:
 
 ```
-[agentready] MCP failed to start: <reason>
+[exposify] MCP failed to start: <reason>
   fix: <what to do>
-[agentready] warning: MCP is up at /mcp but exposes no route tools
+[exposify] warning: MCP is up at /mcp but exposes no route tools
   fix: register app.use(aiReady()) before your routers, ...
-[agentready] warning: can't verify access tokens from oauth.issuer https://...: <reason>
+[exposify] warning: can't verify access tokens from oauth.issuer https://...: <reason>
   fix: make oauth.issuer match the tokens' `iss` exactly ...
 ```
 
@@ -385,6 +385,7 @@ default above.
   `req.ip`, `req.hostname`, `req.protocol` and `trust proxy` see the agent
   exactly as they would for a direct request, never as localhost.
 
-See the repo README for
-the full picture across all `@exposify/*` packages, including
-`@exposify/supabase`.
+See the
+[repo README](https://github.com/ayadagain/agentready#readme) for the full
+picture across all `@exposify/*` packages, including
+[`@exposify/supabase`](https://github.com/ayadagain/agentready/tree/main/packages/supabase).

package/dist/index.cjs

@@ -184,7 +184,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[agentready] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -341,7 +341,7 @@ async function loadOpenApi(cwd, option, warn) {
 
 // src/surface.ts
 var import_core4 = require("@exposify/core");
-var warnOnce = (m) => console.warn(`[agentready] warning: ${m}`);
+var warnOnce = (m) => console.warn(`[exposify] warning: ${m}`);
 var NULL_BODY_STATUSES = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
 var IDENTITY_HEADERS = ["host", "forwarded", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "x-forwarded-port"];
 var DISPATCH_HEADER = "x-exposify-dispatch";
@@ -553,7 +553,7 @@ var import_core7 = require("@exposify/core");
 var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
 var MCP_PATH = "/mcp";
 var PRM_ROOT = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[agentready]";
+var LOG_PREFIX = "[exposify]";
 function toolsSummary(routes, docs, cfg) {
   const counts = (0, import_core6.countTools)(routes, cfg);
   const details = counts.hiddenWrites > 0 ? [`${counts.hiddenWrites} write route${counts.hiddenWrites === 1 ? "" : "s"} hidden (opt in with exposed())`] : [];
@@ -681,7 +681,7 @@ function aiReady(options = {}) {
       const login = loginOf(req.app);
       if (!login) return next();
       void serveLoginPage(req, res, login).catch((err) => {
-        console.warn("[agentready] sign-in form failed:", err);
+        console.warn("[exposify] sign-in form failed:", err);
         if (!res.headersSent) res.writeHead(503).end("sign-in is unavailable");
       });
       return;
@@ -699,7 +699,7 @@ function aiReady(options = {}) {
     }
     if (path !== MCP_PATH && !path.startsWith(`${MCP_PATH}/`)) return next();
     if (disabled) {
-      res.writeHead(503).end("agentready is disabled due to an internal error");
+      res.writeHead(503).end("exposify is disabled due to an internal error");
       return;
     }
     const authorized = gate ? gate.check(headersOf(req)).then(async (result) => {
@@ -707,7 +707,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }, (err) => {
-      console.warn("[agentready] oauth gate failed:", err);
+      console.warn("[exposify] oauth gate failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : brokerGate ? report(req, resourceOf(req, path, MCP_PATH)).then(async (verdict) => {
@@ -717,7 +717,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }).catch((err) => {
-      console.warn("[agentready] broker check failed:", err);
+      console.warn("[exposify] broker check failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : Promise.resolve({});
@@ -752,7 +752,7 @@ function aiReady(options = {}) {
           err
         );
       }
-      if (!res.headersSent) res.writeHead(503).end("agentready failed to initialize");
+      if (!res.headersSent) res.writeHead(503).end("exposify failed to initialize");
     });
   };
   async function serveLoginPage(req, res, login) {

package/dist/index.js

@@ -185,7 +185,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[agentready] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -342,7 +342,7 @@ async function loadOpenApi(cwd, option, warn) {
 
 // src/surface.ts
 import { applyOpenApi } from "@exposify/core";
-var warnOnce = (m) => console.warn(`[agentready] warning: ${m}`);
+var warnOnce = (m) => console.warn(`[exposify] warning: ${m}`);
 var NULL_BODY_STATUSES = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
 var IDENTITY_HEADERS = ["host", "forwarded", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "x-forwarded-port"];
 var DISPATCH_HEADER = "x-exposify-dispatch";
@@ -561,7 +561,7 @@ import {
 var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
 var MCP_PATH = "/mcp";
 var PRM_ROOT = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[agentready]";
+var LOG_PREFIX = "[exposify]";
 function toolsSummary(routes, docs, cfg) {
   const counts = countTools(routes, cfg);
   const details = counts.hiddenWrites > 0 ? [`${counts.hiddenWrites} write route${counts.hiddenWrites === 1 ? "" : "s"} hidden (opt in with exposed())`] : [];
@@ -689,7 +689,7 @@ function aiReady(options = {}) {
       const login = loginOf(req.app);
       if (!login) return next();
       void serveLoginPage(req, res, login).catch((err) => {
-        console.warn("[agentready] sign-in form failed:", err);
+        console.warn("[exposify] sign-in form failed:", err);
         if (!res.headersSent) res.writeHead(503).end("sign-in is unavailable");
       });
       return;
@@ -707,7 +707,7 @@ function aiReady(options = {}) {
     }
     if (path !== MCP_PATH && !path.startsWith(`${MCP_PATH}/`)) return next();
     if (disabled) {
-      res.writeHead(503).end("agentready is disabled due to an internal error");
+      res.writeHead(503).end("exposify is disabled due to an internal error");
       return;
     }
     const authorized = gate ? gate.check(headersOf(req)).then(async (result) => {
@@ -715,7 +715,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }, (err) => {
-      console.warn("[agentready] oauth gate failed:", err);
+      console.warn("[exposify] oauth gate failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : brokerGate ? report(req, resourceOf(req, path, MCP_PATH)).then(async (verdict) => {
@@ -725,7 +725,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }).catch((err) => {
-      console.warn("[agentready] broker check failed:", err);
+      console.warn("[exposify] broker check failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : Promise.resolve({});
@@ -760,7 +760,7 @@ function aiReady(options = {}) {
           err
         );
       }
-      if (!res.headersSent) res.writeHead(503).end("agentready failed to initialize");
+      if (!res.headersSent) res.writeHead(503).end("exposify failed to initialize");
     });
   };
   async function serveLoginPage(req, res, login) {

package/dist/scan-preload.cjs

@@ -2137,6 +2137,8 @@ function parseLoginTheme(raw) {
 var DEFAULT_TIMEOUT_MS = 5e3;
 var REPORT_TIMEOUT_MS = 3e3;
 var REPORT_REFRESH_MS = 6e4;
+var CONNECT_INFO_TTL_MS = 6e4;
+var CONNECT_INFO_RETRY_MS = 5e3;
 var DEFAULT_MAX_CACHE_MS = 3e4;
 var EXPIRY_SKEW_MS = 6e4;
 var MAX_CACHE_ENTRIES = 500;
@@ -2247,6 +2249,21 @@ function createHostedAuthResolver(config) {
   let passwordDirect;
   const apiUrl = requireHttpsBaseUrl("apiUrl", config.apiUrl ?? readEnv(API_URL_ENV) ?? DEFAULT_API_URL);
   const stepSealer = createSealer(licenseKey, "exposify login-step v1");
+  let connectInfo;
+  let connectInflight;
+  const fetchConnectInfo = async () => {
+    try {
+      const res = await fetchImpl(`${issuer}/connect-info`, { signal: AbortSignal.timeout(REPORT_TIMEOUT_MS) });
+      if (res.status === 404) {
+        connectInfo = { body: null, at: Date.now() - CONNECT_INFO_TTL_MS + CONNECT_INFO_RETRY_MS };
+      } else if (res.ok) {
+        const body = await res.json();
+        connectInfo = { body: body && typeof body === "object" ? body : null, at: Date.now() };
+      }
+    } catch {
+    }
+    return connectInfo?.body ?? null;
+  };
   const info = {
     issuer,
     sealLoginStep: (text) => stepSealer.seal(text),
@@ -2297,6 +2314,13 @@ function createHostedAuthResolver(config) {
       await brokerPost("session-ended", {}, authorization);
     },
     supabasePasswordDirect: () => passwordDirect,
+    connectInfo() {
+      if (connectInfo && Date.now() - connectInfo.at < CONNECT_INFO_TTL_MS) return Promise.resolve(connectInfo.body);
+      return connectInflight ??= fetchConnectInfo().finally(() => connectInflight = void 0);
+    },
+    countConnectOpen() {
+      void brokerPost("connect-open", {});
+    },
     reportLogin(report) {
       const key = JSON.stringify(report);
       const send2 = async () => {
@@ -2339,7 +2363,7 @@ function hostedResolverFromEnv() {
   if (!key) return void 0;
   if (!parseExposifyKey(key)) {
     try {
-      console.warn(`[agentready] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
+      console.warn(`[exposify] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
     } catch {
     }
     return void 0;
@@ -6758,7 +6782,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[agentready] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }

package/dist/scan-preload.js

@@ -2141,6 +2141,8 @@ function parseLoginTheme(raw) {
 var DEFAULT_TIMEOUT_MS = 5e3;
 var REPORT_TIMEOUT_MS = 3e3;
 var REPORT_REFRESH_MS = 6e4;
+var CONNECT_INFO_TTL_MS = 6e4;
+var CONNECT_INFO_RETRY_MS = 5e3;
 var DEFAULT_MAX_CACHE_MS = 3e4;
 var EXPIRY_SKEW_MS = 6e4;
 var MAX_CACHE_ENTRIES = 500;
@@ -2251,6 +2253,21 @@ function createHostedAuthResolver(config) {
   let passwordDirect;
   const apiUrl = requireHttpsBaseUrl("apiUrl", config.apiUrl ?? readEnv(API_URL_ENV) ?? DEFAULT_API_URL);
   const stepSealer = createSealer(licenseKey, "exposify login-step v1");
+  let connectInfo;
+  let connectInflight;
+  const fetchConnectInfo = async () => {
+    try {
+      const res = await fetchImpl(`${issuer}/connect-info`, { signal: AbortSignal.timeout(REPORT_TIMEOUT_MS) });
+      if (res.status === 404) {
+        connectInfo = { body: null, at: Date.now() - CONNECT_INFO_TTL_MS + CONNECT_INFO_RETRY_MS };
+      } else if (res.ok) {
+        const body = await res.json();
+        connectInfo = { body: body && typeof body === "object" ? body : null, at: Date.now() };
+      }
+    } catch {
+    }
+    return connectInfo?.body ?? null;
+  };
   const info = {
     issuer,
     sealLoginStep: (text) => stepSealer.seal(text),
@@ -2301,6 +2318,13 @@ function createHostedAuthResolver(config) {
       await brokerPost("session-ended", {}, authorization);
     },
     supabasePasswordDirect: () => passwordDirect,
+    connectInfo() {
+      if (connectInfo && Date.now() - connectInfo.at < CONNECT_INFO_TTL_MS) return Promise.resolve(connectInfo.body);
+      return connectInflight ??= fetchConnectInfo().finally(() => connectInflight = void 0);
+    },
+    countConnectOpen() {
+      void brokerPost("connect-open", {});
+    },
     reportLogin(report) {
       const key = JSON.stringify(report);
       const send2 = async () => {
@@ -2343,7 +2367,7 @@ function hostedResolverFromEnv() {
   if (!key) return void 0;
   if (!parseExposifyKey(key)) {
     try {
-      console.warn(`[agentready] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
+      console.warn(`[exposify] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
     } catch {
     }
     return void 0;
@@ -6762,7 +6786,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[agentready] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exposify/express",
-  "version": "0.3.12",
+  "version": "0.3.14",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -26,8 +26,8 @@
     "prepack": "yarn build"
   },
   "dependencies": {
-    "@exposify/cli": "0.0.7",
-    "@exposify/core": "0.3.17"
+    "@exposify/cli": "0.0.9",
+    "@exposify/core": "0.3.19"
   },
   "peerDependencies": {
     "express": ">=4 <6"