@exposify/next 0.0.9 → 0.0.10

package/README.md

@@ -1,14 +1,25 @@
 # @exposify/next
 
-Next.js integration for [Exposify](../../README.md): your route handlers,
-pages and Server Actions become MCP tools that AI agents can call, at `/mcp` on
-your own app.
+Next.js integration for
+[Exposify](https://github.com/ayadagain/agentready#readme): your route
+handlers, pages and Server Actions become MCP tools that AI agents can call,
+at `/mcp` on your own app. Tool calls go over HTTP to your own app, so your
+`proxy.ts`/middleware auth applies — there's no separate service and no
+privilege escalation.
 
 ```sh
 npm install @exposify/next
 npx @exposify/next setup   # pick the endpoints, get the route file to create
 ```
 
+> **Which package?** Use **`@exposify/next`** for a Next.js app, including one
+> whose users sign in with Supabase Auth (`@supabase/ssr`) — tool calls run
+> through your Next server, so your own auth and checks apply. Use
+> [**`@exposify/supabase`**](https://github.com/ayadagain/agentready/tree/main/packages/supabase)
+> instead when you want an MCP endpoint served straight from a Supabase **edge
+> function** over PostgREST, with RLS as the authorization layer and no Next
+> app in front of it.
+
 Or by hand, in two files:
 
 ```ts
@@ -197,7 +208,7 @@ alone keep their session in the browser, where the server never sees it.
 **No login found, and no sign-in method in the dashboard?** Then agents use
 your app signed out: `/mcp` doesn't ask them to sign in, and your own checks
 decide what they can do. The startup log says which it is
-(`[agentready] How agents sign in: ...`), and so does the dashboard's "How
+(`[exposify] How agents sign in: ...`), and so does the dashboard's "How
 agents sign in" page. Adding a sign-in method there takes effect within a
 minute.
 

package/dist/index.cjs

@@ -129,7 +129,7 @@ async function runAction(fn, action, args) {
     const flow = nextControlFlow(err);
     if (flow && "redirect" in flow) return json(JSON.stringify({ ok: true, redirectedTo: flow.redirect }));
     if (flow) return json(JSON.stringify({ error: ERRORS[flow.status] ?? `HTTP ${flow.status}` }), flow.status);
-    console.error(`[agentready] server action ${action.export} threw:`, err);
+    console.error(`[exposify] server action ${action.export} threw:`, err);
     return json(JSON.stringify({ error: "the action threw an error" }), 500);
   }
 }
@@ -304,7 +304,7 @@ async function readActionResponse(res, exportName) {
     const flow = nextControlFlow({ digest: err.digest });
     if (flow && "redirect" in flow) return json(JSON.stringify({ ok: true, redirectedTo: flow.redirect }));
     if (flow) return json(JSON.stringify({ error: ERRORS[flow.status] ?? `HTTP ${flow.status}` }), flow.status);
-    console.error(`[agentready] server action ${exportName} threw: ${err.message}`);
+    console.error(`[exposify] server action ${exportName} threw: ${err.message}`);
     return json(JSON.stringify({ error: "the action threw an error" }), 500);
   }
 }
@@ -735,7 +735,7 @@ async function agentIp(request, options = {}) {
 var import_core2 = require("@exposify/core");
 var DISPATCH_HEADER = "x-exposify-dispatch";
 var PRM_SUFFIX = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[agentready]";
+var LOG_PREFIX = "[exposify]";
 var ACTION_NOTE = "It returns the action's result, or { ok: true, redirectedTo } when the action redirects; a redirect to a sign-in page means the call wasn't authorised.";
 var LEFT_BLANK = "A field you leave out is as if left blank on the form.";
 var PAGE_NOTE = "Returns the page's main content as text, with links, and the data it was rendered with when the page passes any to its components. An error naming a sign-in page means signing in first.";

package/dist/index.js

@@ -141,7 +141,7 @@ async function runAction(fn, action, args) {
     const flow = nextControlFlow(err);
     if (flow && "redirect" in flow) return json(JSON.stringify({ ok: true, redirectedTo: flow.redirect }));
     if (flow) return json(JSON.stringify({ error: ERRORS[flow.status] ?? `HTTP ${flow.status}` }), flow.status);
-    console.error(`[agentready] server action ${action.export} threw:`, err);
+    console.error(`[exposify] server action ${action.export} threw:`, err);
     return json(JSON.stringify({ error: "the action threw an error" }), 500);
   }
 }
@@ -316,7 +316,7 @@ async function readActionResponse(res, exportName) {
     const flow = nextControlFlow({ digest: err.digest });
     if (flow && "redirect" in flow) return json(JSON.stringify({ ok: true, redirectedTo: flow.redirect }));
     if (flow) return json(JSON.stringify({ error: ERRORS[flow.status] ?? `HTTP ${flow.status}` }), flow.status);
-    console.error(`[agentready] server action ${exportName} threw: ${err.message}`);
+    console.error(`[exposify] server action ${exportName} threw: ${err.message}`);
     return json(JSON.stringify({ error: "the action threw an error" }), 500);
   }
 }
@@ -751,7 +751,7 @@ import {
 } from "@exposify/core";
 var DISPATCH_HEADER = "x-exposify-dispatch";
 var PRM_SUFFIX = "/.well-known/oauth-protected-resource";
-var LOG_PREFIX = "[agentready]";
+var LOG_PREFIX = "[exposify]";
 var ACTION_NOTE = "It returns the action's result, or { ok: true, redirectedTo } when the action redirects; a redirect to a sign-in page means the call wasn't authorised.";
 var LEFT_BLANK = "A field you leave out is as if left blank on the form.";
 var PAGE_NOTE = "Returns the page's main content as text, with links, and the data it was rendered with when the page passes any to its components. An error naming a sign-in page means signing in first.";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exposify/next",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "license": "MIT",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -32,8 +32,8 @@
   },
   "dependencies": {
     "@babel/parser": "^8.0.0",
-    "@exposify/cli": "0.0.8",
-    "@exposify/core": "0.3.18",
+    "@exposify/cli": "0.0.9",
+    "@exposify/core": "0.3.19",
     "tinyglobby": "^0.2.10",
     "zod": "^3.24.0"
   },