@exposify/express 0.3.14 → 0.3.15

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2026 Exposify
+Copyright (c) 2026 agemno
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/README.md

@@ -52,7 +52,7 @@ Agents then get validated inputs (a `minimum: 1` rejects `qty: 0` before any
 request is made) and your summaries as tool descriptions. `openapi` also
 takes a path to a JSON file, for any Express app with an OpenAPI document.
 Description precedence: `describe()` in code, then
-`exposify.descriptions.json`, then OpenAPI, then the derived text.
+`agemno.descriptions.json`, then OpenAPI, then the derived text.
 
 ## Guided setup: `npx @exposify/express setup`
 
@@ -102,17 +102,17 @@ give your tools real descriptions (below).
   the `CI` environment variable is set.
 - **How your users sign in** (step 4): `setup` reads your `package.json`.
   With Auth0, Clerk, WorkOS or Kinde it points you at the `oauth` option
-  (your provider already signs agents in). Otherwise it offers Exposify's
-  hosted broker and a browser sign-in that writes `EXPOSIFY_KEY` to `.env`
+  (your provider already signs agents in). Otherwise it offers agemno's
+  hosted broker and a browser sign-in that writes `AGEMNO_KEY` to `.env`
   (a new project named after your app, or an existing one). `--no-sign-in`
-  skips the step; `EXPOSIFY_NO_BROWSER=1` prints the link instead of
+  skips the step; `AGEMNO_NO_BROWSER=1` prints the link instead of
   opening it.
 
 **Tool descriptions.** Agents pick tools by their descriptions, and by default
 they get one derived from the route ("Create an order (POST /orders)").
 `setup`'s step 5, or `npx @exposify/express describe` any time, replaces those:
 
-- `a` sends each route's handler source to Exposify's description service,
+- `a` sends each route's handler source to agemno's description service,
   which writes a proposal with an LLM (`--no-source` sends only method, path
   and middleware names). Strings that look like secrets are masked on your
   machine first, and the CLI says exactly what it's about to send and where. The
@@ -124,12 +124,12 @@ they get one derived from the route ("Create an order (POST /orders)").
   a write does is the worst thing an agent can be told. You don't need an
   LLM key: without an account you get a small free allowance (2 routes a
   day by default); when it runs out, the CLI links to a free sign-up and takes your project's secret key
-  (and offers to save it in `~/.config/exposify/credentials.json`, readable
-  only by you). `--license-key` / `EXPOSIFY_KEY` pass one directly;
-  `--api-url` / `EXPOSIFY_API_URL` point at another service.
+  (and offers to save it in `~/.config/agemno/credentials.json`, readable
+  only by you). `--license-key` / `AGEMNO_KEY` pass one directly;
+  `--api-url` / `AGEMNO_API_URL` point at another service.
 - `w` lets you write them yourself (`e` opens `$EDITOR`).
 
-They're saved to `exposify.descriptions.json`, which `aiReady()` loads at
+They're saved to `agemno.descriptions.json`, which `aiReady()` loads at
 startup (`descriptions: "path"` or `false` to change that); `describe()` text
 in your code still wins. Text you wrote or edited is never overwritten. When
 a route's handler changes, its AI description is offered again; yours is
@@ -142,7 +142,7 @@ whether agents get it; add `--why` for the reason on each (`--json` for
 scripts): the answer to "why isn't my route showing up?".
 
 **Catch tool changes in CI:** `npx @exposify/express inspect --snapshot` writes
-`exposify.tools.json` (each route agents can call, and its tool name).
+`agemno.tools.json` (each route agents can call, and its tool name).
 `setup` offers to save the same file as its last question (default no;
 `--snapshot` to save without asking). Commit it, and run
 `npx @exposify/express inspect --check` in CI: it exits 1,
@@ -152,7 +152,7 @@ intended, so it shows up in the PR diff for review.
 
 ## AI assistants sign in with your own login
 
-With `EXPOSIFY_KEY` set (the hosted broker), an AI assistant that connects
+With `AGEMNO_KEY` set (the hosted broker), an AI assistant that connects
 signs in with your app's own login, with no code:
 
 - On the first request, `aiReady()` finds your login among your routes: a
@@ -160,14 +160,14 @@ signs in with your app's own login, with no code:
   `req.body`, and sets a cookie, a session (`req.session`, passport's
   `req.login`) or signs a token. Sign-up, sign-out and reset routes are never
   picked.
-- When Claude connects, the person clicks Allow on Exposify's page and lands
+- When Claude connects, the person clicks Allow on agemno's page and lands
   on a sign-in form served at `/mcp/login`, on your domain. On submit,
   `aiReady()` sends your login route the fields through your own app (no
   browser cookies, the person's address forwarded), and the session it
   creates goes to the broker for this connection. Every tool call then runs
   as that person; cookies you set later are kept; a 401 or a redirect to the
   login ends the connection, so the assistant asks to connect again.
-- `aiReady()` tells Exposify about the login and its MCP address before
+- `aiReady()` tells agemno about the login and its MCP address before
   answering `/mcp`, so there's nothing to add in the dashboard. The address
   comes from the request's `Host` (and `X-Forwarded-Host` only when you've
   set Express's `trust proxy`, as you should behind a proxy). The first
@@ -188,7 +188,7 @@ same way. `loginVerify: { path, fields, body? }` names the second step;
 **No login found, and no sign-in method in the dashboard?** Then agents use
 your app signed out: `/mcp` doesn't ask them to sign in, and your own checks
 decide what they can do. The startup log says which it is
-(`[exposify] How agents sign in: ...`), and so does the dashboard's "How
+(`[agemno] How agents sign in: ...`), and so does the dashboard's "How
 agents sign in" page. Adding a sign-in method there takes effect within a
 minute.
 
@@ -273,17 +273,17 @@ On boot (`npm run dev`, or in production), right after your routes
 register, `aiReady()` prints one line saying whether MCP is up:
 
 ```
-[exposify] MCP ready at /mcp: 6 tools (4 read, 1 write, search_docs), 1 write route hidden (opt in with exposed()), 2 docs indexed, auth: passthrough
+[agemno] MCP ready at /mcp: 6 tools (4 read, 1 write, search_docs), 1 write route hidden (opt in with exposed()), 2 docs indexed, auth: passthrough
 ```
 
 When something's wrong, the line names the problem and a fix instead:
 
 ```
-[exposify] MCP failed to start: <reason>
+[agemno] MCP failed to start: <reason>
   fix: <what to do>
-[exposify] warning: MCP is up at /mcp but exposes no route tools
+[agemno] warning: MCP is up at /mcp but exposes no route tools
   fix: register app.use(aiReady()) before your routers, ...
-[exposify] warning: can't verify access tokens from oauth.issuer https://...: <reason>
+[agemno] warning: can't verify access tokens from oauth.issuer https://...: <reason>
   fix: make oauth.issuer match the tokens' `iss` exactly ...
 ```
 
@@ -356,7 +356,7 @@ aiReady({
   telemetry?: { enabled: boolean; sink?(event): void; capturePayloads?: boolean },
   cwd?: string,                          // default process.cwd()
   mounts?: Record<string, unknown>,      // explicit router/sub-app overrides
-  descriptions?: string | false,         // default "exposify.descriptions.json" if present
+  descriptions?: string | false,         // default "agemno.descriptions.json" if present
   openapi?: string | object,             // your OpenAPI document: tool schemas + descriptions
   login?: false | { path, fields, body? }, // your own login, for the hosted broker (found by itself)
 });

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 
-// bin/exposify-express.ts
+// bin/agemno-express.ts
 import { runCli } from "@exposify/cli";
 
 // bin/adapter.ts
@@ -168,11 +168,11 @@ import { fileURLToPath, pathToFileURL } from "url";
 
 // bin/scan/env.ts
 var SCAN_ENV = {
-  entry: "EXPOSIFY_SCAN_ENTRY",
+  entry: "AGEMNO_SCAN_ENTRY",
   /** Set to "1" in the child so an app can skip heavy boot work if it wants. */
-  flag: "EXPOSIFY_SCAN",
+  flag: "AGEMNO_SCAN",
   /** How long to wait for listen() after the last route registration (ms). */
-  quietMs: "EXPOSIFY_SCAN_QUIET_MS"
+  quietMs: "AGEMNO_SCAN_QUIET_MS"
 };
 
 // bin/scan/run.ts
@@ -285,7 +285,7 @@ function applyStep(result, config, viaNest, root, code) {
   }
 }
 
-// bin/exposify-express.ts
+// bin/agemno-express.ts
 runCli(process.argv.slice(2), expressAdapter).then(
   (code) => process.exit(code),
   (err) => {

package/dist/index.cjs

@@ -76,7 +76,7 @@ function installMountRecorder(routerCtor) {
   } catch {
   }
 }
-var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("exposify.express.recordMountOwner");
+var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("agemno.express.recordMountOwner");
 var taggedOwners = /* @__PURE__ */ new WeakMap();
 function recordTaggedOwner(parent, args) {
   const stack = [...args];
@@ -184,7 +184,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[agemno] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -341,10 +341,10 @@ async function loadOpenApi(cwd, option, warn) {
 
 // src/surface.ts
 var import_core4 = require("@exposify/core");
-var warnOnce = (m) => console.warn(`[exposify] warning: ${m}`);
+var warnOnce = (m) => console.warn(`[agemno] warning: ${m}`);
 var NULL_BODY_STATUSES = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
 var IDENTITY_HEADERS = ["host", "forwarded", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "x-forwarded-port"];
-var DISPATCH_HEADER = "x-exposify-dispatch";
+var DISPATCH_HEADER = "x-agemno-dispatch";
 var callerStore = new import_node_async_hooks.AsyncLocalStorage();
 function callerOf(req) {
   const headers = {};
@@ -368,7 +368,7 @@ async function buildExpressSurface(app, cfg, cwd, opts) {
   const info = await readPackageInfo(cwd);
   return {
     info,
-    // Text precedence: describe() in code > exposify.descriptions.json (reviewed) > OpenAPI > derived.
+    // Text precedence: describe() in code > agemno.descriptions.json (reviewed) > OpenAPI > derived.
     routes: (0, import_core3.applyDescriptions)(
       (0, import_core4.applyOpenApi)(routesFromExpress(app, opts), await loadOpenApi(cwd, opts?.openapi, warnOnce)),
       await loadDescriptions(cwd, opts?.descriptions, warnOnce)
@@ -550,10 +550,10 @@ function findExpressLogin(app, mounts) {
 
 // src/index.ts
 var import_core7 = require("@exposify/core");
-var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
+var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("agemno.express.aiReadyOptions");
 var MCP_PATH = "/mcp";
 var PRM_ROOT = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[exposify]";
+var LOG_PREFIX = "[agemno]";
 function toolsSummary(routes, docs, cfg) {
   const counts = (0, import_core6.countTools)(routes, cfg);
   const details = counts.hiddenWrites > 0 ? [`${counts.hiddenWrites} write route${counts.hiddenWrites === 1 ? "" : "s"} hidden (opt in with exposed())`] : [];
@@ -681,7 +681,7 @@ function aiReady(options = {}) {
       const login = loginOf(req.app);
       if (!login) return next();
       void serveLoginPage(req, res, login).catch((err) => {
-        console.warn("[exposify] sign-in form failed:", err);
+        console.warn("[agemno] sign-in form failed:", err);
         if (!res.headersSent) res.writeHead(503).end("sign-in is unavailable");
       });
       return;
@@ -699,7 +699,7 @@ function aiReady(options = {}) {
     }
     if (path !== MCP_PATH && !path.startsWith(`${MCP_PATH}/`)) return next();
     if (disabled) {
-      res.writeHead(503).end("exposify is disabled due to an internal error");
+      res.writeHead(503).end("agemno is disabled due to an internal error");
       return;
     }
     const authorized = gate ? gate.check(headersOf(req)).then(async (result) => {
@@ -707,7 +707,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }, (err) => {
-      console.warn("[exposify] oauth gate failed:", err);
+      console.warn("[agemno] oauth gate failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : brokerGate ? report(req, resourceOf(req, path, MCP_PATH)).then(async (verdict) => {
@@ -717,7 +717,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }).catch((err) => {
-      console.warn("[exposify] broker check failed:", err);
+      console.warn("[agemno] broker check failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : Promise.resolve({});
@@ -752,7 +752,7 @@ function aiReady(options = {}) {
           err
         );
       }
-      if (!res.headersSent) res.writeHead(503).end("exposify failed to initialize");
+      if (!res.headersSent) res.writeHead(503).end("agemno failed to initialize");
     });
   };
   async function serveLoginPage(req, res, login) {
@@ -845,7 +845,7 @@ async function initialize(app, cfg, cwd, mounts, extras, onReady) {
   };
   const getKb = async () => {
     const s = await getSurface();
-    kbPromise ??= (0, import_node2.loadOrBuildKb)(s.docs, (0, import_node_path3.join)(cwd, ".exposify"));
+    kbPromise ??= (0, import_node2.loadOrBuildKb)(s.docs, (0, import_node_path3.join)(cwd, ".agemno"));
     return kbPromise;
   };
   const built = await getSurface();

package/dist/index.d.cts

@@ -1,4 +1,4 @@
-import { RouteInfo, AgentReadyOptions } from '@exposify/core';
+import { RouteInfo, AgemnoOptions } from '@exposify/core';
 export { HostedAuthResolverConfig, completeMcpLogin, createHostedAuthResolver, describe, exposed, hidden, hostedBroker } from '@exposify/core';
 
 interface RoutesFromExpressOptions {
@@ -18,7 +18,7 @@ declare function routesFromExpress(app: unknown, opts?: RoutesFromExpressOptions
 /** Symbol under which `aiReady()`'s middleware carries the options it was given. */
 declare const AIREADY_OPTIONS_TAG: unique symbol;
 
-interface ExpressAiReadyOptions extends AgentReadyOptions {
+interface ExpressAiReadyOptions extends AgemnoOptions {
     /**
      * The app's own login, for Connect with the hosted broker: AI assistants
      * sign in on a form served at /mcp/login, which makes this login request
@@ -43,7 +43,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
         fields: string[];
         body?: "json" | "form";
     };
-    /** Where docs globs and the .exposify cache resolve. Default: process.cwd() */
+    /** Where docs globs and the .agemno cache resolve. Default: process.cwd() */
     cwd?: string;
     /**
      * Explicit mount paths for routers (or sub-apps) introspection can't
@@ -58,7 +58,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
     mounts?: Record<string, unknown>;
     /**
      * Tool descriptions file written by `@exposify/express setup`/`describe`.
-     * Default: exposify.descriptions.json in `cwd`, if present. `false` ignores it.
+     * Default: agemno.descriptions.json in `cwd`, if present. `false` ignores it.
      * describe() text in code still wins over it.
      */
     descriptions?: string | false;
@@ -66,7 +66,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
      * The app's OpenAPI document: an object (e.g. `SwaggerModule.createDocument(app, …)`
      * in NestJS) or a path to a JSON file. Matching operations give tools real
      * input schemas, and their summary/description becomes the tool description
-     * (below describe() and exposify.descriptions.json).
+     * (below describe() and agemno.descriptions.json).
      */
     openapi?: string | object;
 }

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { RouteInfo, AgentReadyOptions } from '@exposify/core';
+import { RouteInfo, AgemnoOptions } from '@exposify/core';
 export { HostedAuthResolverConfig, completeMcpLogin, createHostedAuthResolver, describe, exposed, hidden, hostedBroker } from '@exposify/core';
 
 interface RoutesFromExpressOptions {
@@ -18,7 +18,7 @@ declare function routesFromExpress(app: unknown, opts?: RoutesFromExpressOptions
 /** Symbol under which `aiReady()`'s middleware carries the options it was given. */
 declare const AIREADY_OPTIONS_TAG: unique symbol;
 
-interface ExpressAiReadyOptions extends AgentReadyOptions {
+interface ExpressAiReadyOptions extends AgemnoOptions {
     /**
      * The app's own login, for Connect with the hosted broker: AI assistants
      * sign in on a form served at /mcp/login, which makes this login request
@@ -43,7 +43,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
         fields: string[];
         body?: "json" | "form";
     };
-    /** Where docs globs and the .exposify cache resolve. Default: process.cwd() */
+    /** Where docs globs and the .agemno cache resolve. Default: process.cwd() */
     cwd?: string;
     /**
      * Explicit mount paths for routers (or sub-apps) introspection can't
@@ -58,7 +58,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
     mounts?: Record<string, unknown>;
     /**
      * Tool descriptions file written by `@exposify/express setup`/`describe`.
-     * Default: exposify.descriptions.json in `cwd`, if present. `false` ignores it.
+     * Default: agemno.descriptions.json in `cwd`, if present. `false` ignores it.
      * describe() text in code still wins over it.
      */
     descriptions?: string | false;
@@ -66,7 +66,7 @@ interface ExpressAiReadyOptions extends AgentReadyOptions {
      * The app's OpenAPI document: an object (e.g. `SwaggerModule.createDocument(app, …)`
      * in NestJS) or a path to a JSON file. Matching operations give tools real
      * input schemas, and their summary/description becomes the tool description
-     * (below describe() and exposify.descriptions.json).
+     * (below describe() and agemno.descriptions.json).
      */
     openapi?: string | object;
 }

package/dist/index.js

@@ -77,7 +77,7 @@ function installMountRecorder(routerCtor) {
   } catch {
   }
 }
-var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("exposify.express.recordMountOwner");
+var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("agemno.express.recordMountOwner");
 var taggedOwners = /* @__PURE__ */ new WeakMap();
 function recordTaggedOwner(parent, args) {
   const stack = [...args];
@@ -185,7 +185,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[agemno] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -342,10 +342,10 @@ async function loadOpenApi(cwd, option, warn) {
 
 // src/surface.ts
 import { applyOpenApi } from "@exposify/core";
-var warnOnce = (m) => console.warn(`[exposify] warning: ${m}`);
+var warnOnce = (m) => console.warn(`[agemno] warning: ${m}`);
 var NULL_BODY_STATUSES = /* @__PURE__ */ new Set([101, 103, 204, 205, 304]);
 var IDENTITY_HEADERS = ["host", "forwarded", "x-forwarded-for", "x-forwarded-proto", "x-forwarded-host", "x-forwarded-port"];
-var DISPATCH_HEADER = "x-exposify-dispatch";
+var DISPATCH_HEADER = "x-agemno-dispatch";
 var callerStore = new AsyncLocalStorage();
 function callerOf(req) {
   const headers = {};
@@ -369,7 +369,7 @@ async function buildExpressSurface(app, cfg, cwd, opts) {
   const info = await readPackageInfo(cwd);
   return {
     info,
-    // Text precedence: describe() in code > exposify.descriptions.json (reviewed) > OpenAPI > derived.
+    // Text precedence: describe() in code > agemno.descriptions.json (reviewed) > OpenAPI > derived.
     routes: applyDescriptions(
       applyOpenApi(routesFromExpress(app, opts), await loadOpenApi(cwd, opts?.openapi, warnOnce)),
       await loadDescriptions(cwd, opts?.descriptions, warnOnce)
@@ -558,10 +558,10 @@ import {
   createHostedAuthResolver,
   hostedBroker
 } from "@exposify/core";
-var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
+var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("agemno.express.aiReadyOptions");
 var MCP_PATH = "/mcp";
 var PRM_ROOT = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[exposify]";
+var LOG_PREFIX = "[agemno]";
 function toolsSummary(routes, docs, cfg) {
   const counts = countTools(routes, cfg);
   const details = counts.hiddenWrites > 0 ? [`${counts.hiddenWrites} write route${counts.hiddenWrites === 1 ? "" : "s"} hidden (opt in with exposed())`] : [];
@@ -689,7 +689,7 @@ function aiReady(options = {}) {
       const login = loginOf(req.app);
       if (!login) return next();
       void serveLoginPage(req, res, login).catch((err) => {
-        console.warn("[exposify] sign-in form failed:", err);
+        console.warn("[agemno] sign-in form failed:", err);
         if (!res.headersSent) res.writeHead(503).end("sign-in is unavailable");
       });
       return;
@@ -707,7 +707,7 @@ function aiReady(options = {}) {
     }
     if (path !== MCP_PATH && !path.startsWith(`${MCP_PATH}/`)) return next();
     if (disabled) {
-      res.writeHead(503).end("exposify is disabled due to an internal error");
+      res.writeHead(503).end("agemno is disabled due to an internal error");
       return;
     }
     const authorized = gate ? gate.check(headersOf(req)).then(async (result) => {
@@ -715,7 +715,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }, (err) => {
-      console.warn("[exposify] oauth gate failed:", err);
+      console.warn("[agemno] oauth gate failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : brokerGate ? report(req, resourceOf(req, path, MCP_PATH)).then(async (verdict) => {
@@ -725,7 +725,7 @@ function aiReady(options = {}) {
       await sendWebResponse(res, result.response);
       return null;
     }).catch((err) => {
-      console.warn("[exposify] broker check failed:", err);
+      console.warn("[agemno] broker check failed:", err);
       if (!res.headersSent) res.writeHead(503).end("authorization check failed");
       return null;
     }) : Promise.resolve({});
@@ -760,7 +760,7 @@ function aiReady(options = {}) {
           err
         );
       }
-      if (!res.headersSent) res.writeHead(503).end("exposify failed to initialize");
+      if (!res.headersSent) res.writeHead(503).end("agemno failed to initialize");
     });
   };
   async function serveLoginPage(req, res, login) {
@@ -853,7 +853,7 @@ async function initialize(app, cfg, cwd, mounts, extras, onReady) {
   };
   const getKb = async () => {
     const s = await getSurface();
-    kbPromise ??= loadOrBuildKb(s.docs, join3(cwd, ".exposify"));
+    kbPromise ??= loadOrBuildKb(s.docs, join3(cwd, ".agemno"));
     return kbPromise;
   };
   const built = await getSurface();

package/dist/scan-preload.cjs

@@ -1828,10 +1828,10 @@ init_cjs_shims();
 
 // ../core/src/markers.ts
 init_cjs_shims();
-var AGENTREADY_MARKER = /* @__PURE__ */ Symbol.for("agentready.marker");
+var AGEMNO_MARKER = /* @__PURE__ */ Symbol.for("agemno.marker");
 function getMarker(fn) {
   if (typeof fn !== "function") return void 0;
-  return fn[AGENTREADY_MARKER];
+  return fn[AGEMNO_MARKER];
 }
 
 // ../core/src/policy.ts
@@ -2022,16 +2022,16 @@ function resolveOAuthOptions(opts) {
   };
 }
 
-// ../core/src/exposify-key.ts
+// ../core/src/agemno-key.ts
 init_cjs_shims();
 var DEFAULT_BROKER_URL = "https://broker.agemno.com";
-var EXPOSIFY_KEY_ENV = "EXPOSIFY_KEY";
-var BROKER_URL_ENV = "EXPOSIFY_BROKER_URL";
+var AGEMNO_KEY_ENV = "AGEMNO_KEY";
+var BROKER_URL_ENV = "AGEMNO_BROKER_URL";
 var DEFAULT_API_URL = "https://infra.agemno.com";
-var API_URL_ENV = "EXPOSIFY_API_URL";
-var HOSTED_RESOLVER = /* @__PURE__ */ Symbol.for("exposify.hostedResolver");
+var API_URL_ENV = "AGEMNO_API_URL";
+var HOSTED_RESOLVER = /* @__PURE__ */ Symbol.for("agemno.hostedResolver");
 var KEY_RE = /^exk_([0-9a-f]{32})_[A-Za-z0-9_-]{20,}$/;
-function parseExposifyKey(key) {
+function parseAgemnoKey(key) {
   const m = KEY_RE.exec(key.trim());
   if (!m) return null;
   const h = m[1];
@@ -2155,8 +2155,8 @@ function signInMethodsOf(body) {
 }
 function createHostedAuthResolver(config) {
   const givenKey = config.key ?? config.licenseKey;
-  const projectId = config.projectId ?? (config.key ? parseExposifyKey(config.key)?.projectId : void 0);
-  if (!givenKey) throw new Error("createHostedAuthResolver: pass your secret key as `key` (the EXPOSIFY_KEY value)");
+  const projectId = config.projectId ?? (config.key ? parseAgemnoKey(config.key)?.projectId : void 0);
+  if (!givenKey) throw new Error("createHostedAuthResolver: pass your secret key as `key` (the AGEMNO_KEY value)");
   const licenseKey = givenKey;
   if (!projectId) {
     throw new Error("createHostedAuthResolver: that key doesn't carry a project id (expected exk_...); rotate it in the dashboard, or pass projectId");
@@ -2248,7 +2248,7 @@ function createHostedAuthResolver(config) {
   const reported = /* @__PURE__ */ new Map();
   let passwordDirect;
   const apiUrl = requireHttpsBaseUrl("apiUrl", config.apiUrl ?? readEnv(API_URL_ENV) ?? DEFAULT_API_URL);
-  const stepSealer = createSealer(licenseKey, "exposify login-step v1");
+  const stepSealer = createSealer(licenseKey, "agemno login-step v1");
   let connectInfo;
   let connectInflight;
   const fetchConnectInfo = async () => {
@@ -2321,6 +2321,9 @@ function createHostedAuthResolver(config) {
     countConnectOpen() {
       void brokerPost("connect-open", {});
     },
+    countConnectComponentLoad() {
+      void brokerPost("connect-component-load", {});
+    },
     reportLogin(report) {
       const key = JSON.stringify(report);
       const send2 = async () => {
@@ -2359,11 +2362,11 @@ function createHostedAuthResolver(config) {
   return resolver;
 }
 function hostedResolverFromEnv() {
-  const key = readEnv(EXPOSIFY_KEY_ENV);
+  const key = readEnv(AGEMNO_KEY_ENV);
   if (!key) return void 0;
-  if (!parseExposifyKey(key)) {
+  if (!parseAgemnoKey(key)) {
     try {
-      console.warn(`[exposify] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
+      console.warn(`[agemno] warning: ${AGEMNO_KEY_ENV} isn't a secret key from the agemno dashboard (exk_...); ignoring it`);
     } catch {
     }
     return void 0;
@@ -6474,7 +6477,7 @@ var coerce = {
 var NEVER = INVALID;
 
 // ../core/src/openapi.ts
-var EXPOSIFY_EXTENSION = "x-exposify";
+var AGEMNO_EXTENSION = "x-agemno";
 var METHODS = ["get", "put", "post", "delete", "patch", "head", "options"];
 var MAX_DEPTH = 8;
 function openApiPathToRoute(path) {
@@ -6519,7 +6522,7 @@ function toMatch(op, shared, schemas, doc) {
     input.body = body?.required ? field : field.optional();
   }
   const text = [op.summary, op.description].find((t) => typeof t === "string" && t.trim().length > 0);
-  const marker = markerFrom(op[EXPOSIFY_EXTENSION]);
+  const marker = markerFrom(op[AGEMNO_EXTENSION]);
   return { ...text ? { description: text.trim() } : {}, ...marker ? { marker } : {}, input };
 }
 function markerFrom(ext) {
@@ -6677,7 +6680,7 @@ function installMountRecorder(routerCtor) {
   } catch {
   }
 }
-var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("exposify.express.recordMountOwner");
+var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("agemno.express.recordMountOwner");
 var taggedOwners = /* @__PURE__ */ new WeakMap();
 function recordTaggedOwner(parent, args) {
   const stack = [...args];
@@ -6782,7 +6785,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[agemno] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -6976,15 +6979,15 @@ function findExpressLogin(app, mounts) {
 // bin/scan/env.ts
 init_cjs_shims();
 var SCAN_ENV = {
-  entry: "EXPOSIFY_SCAN_ENTRY",
+  entry: "AGEMNO_SCAN_ENTRY",
   /** Set to "1" in the child so an app can skip heavy boot work if it wants. */
-  flag: "EXPOSIFY_SCAN",
+  flag: "AGEMNO_SCAN",
   /** How long to wait for listen() after the last route registration (ms). */
-  quietMs: "EXPOSIFY_SCAN_QUIET_MS"
+  quietMs: "AGEMNO_SCAN_QUIET_MS"
 };
 
 // bin/scan/preload.ts
-var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
+var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("agemno.express.aiReadyOptions");
 var QUIET_MS = Number(process.env[SCAN_ENV.quietMs] ?? 3e3);
 var NOTHING_CREATED_MS = 2e4;
 var HARD_LIMIT_MS = 6e4;

package/dist/scan-preload.js

@@ -1832,10 +1832,10 @@ init_esm_shims();
 
 // ../core/src/markers.ts
 init_esm_shims();
-var AGENTREADY_MARKER = /* @__PURE__ */ Symbol.for("agentready.marker");
+var AGEMNO_MARKER = /* @__PURE__ */ Symbol.for("agemno.marker");
 function getMarker(fn) {
   if (typeof fn !== "function") return void 0;
-  return fn[AGENTREADY_MARKER];
+  return fn[AGEMNO_MARKER];
 }
 
 // ../core/src/policy.ts
@@ -2026,16 +2026,16 @@ function resolveOAuthOptions(opts) {
   };
 }
 
-// ../core/src/exposify-key.ts
+// ../core/src/agemno-key.ts
 init_esm_shims();
 var DEFAULT_BROKER_URL = "https://broker.agemno.com";
-var EXPOSIFY_KEY_ENV = "EXPOSIFY_KEY";
-var BROKER_URL_ENV = "EXPOSIFY_BROKER_URL";
+var AGEMNO_KEY_ENV = "AGEMNO_KEY";
+var BROKER_URL_ENV = "AGEMNO_BROKER_URL";
 var DEFAULT_API_URL = "https://infra.agemno.com";
-var API_URL_ENV = "EXPOSIFY_API_URL";
-var HOSTED_RESOLVER = /* @__PURE__ */ Symbol.for("exposify.hostedResolver");
+var API_URL_ENV = "AGEMNO_API_URL";
+var HOSTED_RESOLVER = /* @__PURE__ */ Symbol.for("agemno.hostedResolver");
 var KEY_RE = /^exk_([0-9a-f]{32})_[A-Za-z0-9_-]{20,}$/;
-function parseExposifyKey(key) {
+function parseAgemnoKey(key) {
   const m = KEY_RE.exec(key.trim());
   if (!m) return null;
   const h = m[1];
@@ -2159,8 +2159,8 @@ function signInMethodsOf(body) {
 }
 function createHostedAuthResolver(config) {
   const givenKey = config.key ?? config.licenseKey;
-  const projectId = config.projectId ?? (config.key ? parseExposifyKey(config.key)?.projectId : void 0);
-  if (!givenKey) throw new Error("createHostedAuthResolver: pass your secret key as `key` (the EXPOSIFY_KEY value)");
+  const projectId = config.projectId ?? (config.key ? parseAgemnoKey(config.key)?.projectId : void 0);
+  if (!givenKey) throw new Error("createHostedAuthResolver: pass your secret key as `key` (the AGEMNO_KEY value)");
   const licenseKey = givenKey;
   if (!projectId) {
     throw new Error("createHostedAuthResolver: that key doesn't carry a project id (expected exk_...); rotate it in the dashboard, or pass projectId");
@@ -2252,7 +2252,7 @@ function createHostedAuthResolver(config) {
   const reported = /* @__PURE__ */ new Map();
   let passwordDirect;
   const apiUrl = requireHttpsBaseUrl("apiUrl", config.apiUrl ?? readEnv(API_URL_ENV) ?? DEFAULT_API_URL);
-  const stepSealer = createSealer(licenseKey, "exposify login-step v1");
+  const stepSealer = createSealer(licenseKey, "agemno login-step v1");
   let connectInfo;
   let connectInflight;
   const fetchConnectInfo = async () => {
@@ -2325,6 +2325,9 @@ function createHostedAuthResolver(config) {
     countConnectOpen() {
       void brokerPost("connect-open", {});
     },
+    countConnectComponentLoad() {
+      void brokerPost("connect-component-load", {});
+    },
     reportLogin(report) {
       const key = JSON.stringify(report);
       const send2 = async () => {
@@ -2363,11 +2366,11 @@ function createHostedAuthResolver(config) {
   return resolver;
 }
 function hostedResolverFromEnv() {
-  const key = readEnv(EXPOSIFY_KEY_ENV);
+  const key = readEnv(AGEMNO_KEY_ENV);
   if (!key) return void 0;
-  if (!parseExposifyKey(key)) {
+  if (!parseAgemnoKey(key)) {
     try {
-      console.warn(`[exposify] warning: ${EXPOSIFY_KEY_ENV} isn't a secret key from the Exposify dashboard (exk_...); ignoring it`);
+      console.warn(`[agemno] warning: ${AGEMNO_KEY_ENV} isn't a secret key from the agemno dashboard (exk_...); ignoring it`);
     } catch {
     }
     return void 0;
@@ -6478,7 +6481,7 @@ var coerce = {
 var NEVER = INVALID;
 
 // ../core/src/openapi.ts
-var EXPOSIFY_EXTENSION = "x-exposify";
+var AGEMNO_EXTENSION = "x-agemno";
 var METHODS = ["get", "put", "post", "delete", "patch", "head", "options"];
 var MAX_DEPTH = 8;
 function openApiPathToRoute(path2) {
@@ -6523,7 +6526,7 @@ function toMatch(op, shared, schemas, doc) {
     input.body = body?.required ? field : field.optional();
   }
   const text = [op.summary, op.description].find((t) => typeof t === "string" && t.trim().length > 0);
-  const marker = markerFrom(op[EXPOSIFY_EXTENSION]);
+  const marker = markerFrom(op[AGEMNO_EXTENSION]);
   return { ...text ? { description: text.trim() } : {}, ...marker ? { marker } : {}, input };
 }
 function markerFrom(ext) {
@@ -6681,7 +6684,7 @@ function installMountRecorder(routerCtor) {
   } catch {
   }
 }
-var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("exposify.express.recordMountOwner");
+var MOUNT_OWNER_TAG = /* @__PURE__ */ Symbol.for("agemno.express.recordMountOwner");
 var taggedOwners = /* @__PURE__ */ new WeakMap();
 function recordTaggedOwner(parent, args) {
   const stack = [...args];
@@ -6786,7 +6789,7 @@ function warnMountSkipped() {
   warnedAboutSkippedMount = true;
   try {
     console.warn(
-      `[exposify] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
+      `[agemno] skipped one or more mounted routers: their mount path could not be determined automatically, so routes under them will not be exposed as tools. If aiReady() is registered before they're mounted, this is usually automatic (Express 5's mount recorder); otherwise pass them explicitly via aiReady({ mounts: { "/path": router } }).`
     );
   } catch {
   }
@@ -6980,15 +6983,15 @@ function findExpressLogin(app, mounts) {
 // bin/scan/env.ts
 init_esm_shims();
 var SCAN_ENV = {
-  entry: "EXPOSIFY_SCAN_ENTRY",
+  entry: "AGEMNO_SCAN_ENTRY",
   /** Set to "1" in the child so an app can skip heavy boot work if it wants. */
-  flag: "EXPOSIFY_SCAN",
+  flag: "AGEMNO_SCAN",
   /** How long to wait for listen() after the last route registration (ms). */
-  quietMs: "EXPOSIFY_SCAN_QUIET_MS"
+  quietMs: "AGEMNO_SCAN_QUIET_MS"
 };
 
 // bin/scan/preload.ts
-var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("exposify.express.aiReadyOptions");
+var AIREADY_OPTIONS_TAG = /* @__PURE__ */ Symbol.for("agemno.express.aiReadyOptions");
 var QUIET_MS = Number(process.env[SCAN_ENV.quietMs] ?? 3e3);
 var NOTHING_CREATED_MS = 2e4;
 var HARD_LIMIT_MS = 6e4;

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@exposify/express",
-  "version": "0.3.14",
+  "version": "0.3.15",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "bin": {
-    "exposify-express": "./dist/cli.js"
+    "agemno-express": "./dist/cli.js"
   },
   "exports": {
     ".": {
@@ -20,14 +20,14 @@
     "dist"
   ],
   "scripts": {
-    "build": "tsup src/index.ts --format esm,cjs --dts --clean && tsup --entry.cli bin/exposify-express.ts --format esm --outDir dist --no-clean && tsup --config tsup.preload.config.ts",
+    "build": "tsup src/index.ts --format esm,cjs --dts --clean && tsup --entry.cli bin/agemno-express.ts --format esm --outDir dist --no-clean && tsup --config tsup.preload.config.ts",
     "test": "vitest run",
     "typecheck": "tsc --noEmit",
     "prepack": "yarn build"
   },
   "dependencies": {
-    "@exposify/cli": "0.0.9",
-    "@exposify/core": "0.3.19"
+    "@exposify/cli": "0.0.10",
+    "@exposify/core": "0.3.21"
   },
   "peerDependencies": {
     "express": ">=4 <6"
@@ -48,7 +48,7 @@
     "access": "public"
   },
   "description": "Turn an Express app into an MCP server in one line: routes become AI agent tools automatically, writes are opt-in, and the caller's own credentials pass straight through.",
-  "author": "Exposify",
+  "author": "agemno",
   "keywords": [
     "mcp",
     "model-context-protocol",