@exposify/supabase 0.1.0 → 0.3.1

package/dist/index.cjs

@@ -21,11 +21,11 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 var index_exports = {};
 __export(index_exports, {
   MANIFEST_VERSION: () => MANIFEST_VERSION,
-  MissingAgentifyMetaError: () => MissingAgentifyMetaError,
+  MissingExposifyMetaError: () => MissingExposifyMetaError,
   aiReady: () => aiReady,
   buildManifest: () => buildManifest,
   columnsFromOpenApi: () => columnsFromOpenApi,
-  fetchAgentifyMeta: () => fetchAgentifyMeta,
+  fetchExposifyMeta: () => fetchExposifyMeta,
   fetchOpenApi: () => fetchOpenApi,
   introspectTables: () => introspectTables,
   loadManifest: () => loadManifest,
@@ -103,7 +103,7 @@ function warnOnce(message) {
   if (warned.has(message)) return;
   warned.add(message);
   try {
-    console.warn(`[agentify-supabase] ${message}`);
+    console.warn(`[exposify-supabase] ${message}`);
   } catch {
   }
 }
@@ -129,6 +129,7 @@ function buildPostgrestHeaders(incoming, anonKey) {
     if (value) headers.set(name, value);
   }
   if (!headers.has("apikey")) headers.set("apikey", anonKey);
+  if (!headers.has("authorization")) headers.set("authorization", `Bearer ${anonKey}`);
   return headers;
 }
 function createPostgrestClient(postgrestUrl, headers, fetchImpl) {
@@ -161,42 +162,49 @@ function createPostgrestClient(postgrestUrl, headers, fetchImpl) {
 }
 
 // src/fetch-openapi.ts
+var WRONG_KEY_TIER_RE = /service_role|secret api key/i;
 async function fetchOpenApi(postgrestUrl, headers, fetchImpl) {
   const res = await fetchImpl(postgrestUrl, {
     headers: { ...Object.fromEntries(headers), accept: "application/openapi+json" }
   });
   if (!res.ok) {
-    throw new Error(`PostgREST OpenAPI fetch failed: HTTP ${res.status}`);
+    const body = await res.text().catch(() => "");
+    if (res.status === 401 && WRONG_KEY_TIER_RE.test(body)) {
+      throw new Error(
+        `PostgREST OpenAPI fetch failed: HTTP 401 -- Supabase rejected this request because it wasn't made with the service role key (response: "${body.trim()}"). Schema introspection always needs SUPABASE_SERVICE_ROLE_KEY, never the anon key -- see this package's README, "Why introspection needs the service role key". In a deployed function this is auto-injected automatically; for local dev/testing pass { serviceRoleKey } explicitly (or --key for the CLI).`
+      );
+    }
+    throw new Error(`PostgREST OpenAPI fetch failed: HTTP ${res.status}${body ? `: ${body}` : ""}`);
   }
   return await res.json();
 }
 
 // src/meta.ts
-var MissingAgentifyMetaError = class extends Error {
+var MissingExposifyMetaError = class extends Error {
   constructor(cause) {
     super(cause);
-    this.name = "MissingAgentifyMetaError";
+    this.name = "MissingExposifyMetaError";
   }
 };
-async function fetchAgentifyMeta(postgrestUrl, headers, fetchImpl) {
-  const res = await fetchImpl(`${postgrestUrl}/rpc/agentify_meta`, {
+async function fetchExposifyMeta(postgrestUrl, headers, fetchImpl) {
+  const res = await fetchImpl(`${postgrestUrl}/rpc/exposify_meta`, {
     method: "POST",
     headers: { ...Object.fromEntries(headers), "content-type": "application/json" },
     body: "{}"
   });
   if (res.status === 404) {
-    throw new MissingAgentifyMetaError(
-      "agentify_meta() is not reachable at /rpc/agentify_meta (404). Run `npx agentify-supabase init` (or apply sql/agentify_meta.sql directly) and `supabase db push`, then redeploy the function."
+    throw new MissingExposifyMetaError(
+      "exposify_meta() is not reachable at /rpc/exposify_meta (404). Run `npx exposify-supabase init` (or apply sql/exposify_meta.sql directly) and `supabase db push`, then redeploy the function."
     );
   }
   if (!res.ok) {
     const body = await res.text().catch(() => "");
     if (/PGRST202|function .* does not exist/i.test(body)) {
-      throw new MissingAgentifyMetaError(
-        "agentify_meta() is missing from the database (PostgREST error PGRST202). Apply the migration in sql/agentify_meta.sql via `supabase db push`, then redeploy the function."
+      throw new MissingExposifyMetaError(
+        "exposify_meta() is missing from the database (PostgREST error PGRST202). Apply the migration in sql/exposify_meta.sql via `supabase db push`, then redeploy the function."
       );
     }
-    throw new Error(`agentify_meta() call failed: HTTP ${res.status} ${body}`.trim());
+    throw new Error(`exposify_meta() call failed: HTTP ${res.status} ${body}`.trim());
   }
   return await res.json();
 }
@@ -227,7 +235,7 @@ function columnsFromOpenApi(doc, table) {
     // ON COLUMN` into `description`, then appends its own "Note:\nThis is a
     // Primary/Foreign Key...<pk/|fk/>" boilerplate) -- strip that boilerplate
     // so a column with no real comment ends up `undefined`, not the
-    // boilerplate text. agentify_meta()'s copy wins when both exist anyway
+    // boilerplate text. exposify_meta()'s copy wins when both exist anyway
     // -- see introspect.ts's merge.
     description: prop.description?.replace(/\n*Note:[\s\S]*$/, "").trim() || void 0
   }));
@@ -262,7 +270,7 @@ function introspectTables(openapi, metaRows) {
       if (!fromOpenApi) continue;
       columns.push({
         ...fromOpenApi,
-        // agentify_meta()'s comment wins over OpenAPI's mirrored copy (spec:
+        // exposify_meta()'s comment wins over OpenAPI's mirrored copy (spec:
         // "Column comments → param descriptions" sourced from the migration).
         description: row.column_comment ?? fromOpenApi.description
       });
@@ -305,7 +313,7 @@ async function resolveTableSchemas(deps) {
   try {
     const [openapi, metaRows] = await Promise.all([
       fetchOpenApi(deps.postgrestUrl, deps.headers, deps.fetchImpl),
-      fetchAgentifyMeta(deps.postgrestUrl, deps.headers, deps.fetchImpl)
+      fetchExposifyMeta(deps.postgrestUrl, deps.headers, deps.fetchImpl)
     ]);
     return { tables: introspectTables(openapi, metaRows), mode: "runtime", warnings, openapi };
   } catch (err) {
@@ -315,7 +323,7 @@ async function resolveTableSchemas(deps) {
   if (manifest) {
     warnings.push({
       rung: "manifest",
-      reason: "runtime introspection failed; serving tools from the bundled agentify.manifest.json instead"
+      reason: "runtime introspection failed; serving tools from the bundled exposify.manifest.json instead"
     });
     return { tables: manifest.tables, mode: "manifest", warnings };
   }
@@ -602,9 +610,9 @@ ${h.chunk.text}`).join("\n\n---\n\n") : "No matching documentation found.";
 function registerDiagnosticsResource(server, warnings) {
   if (warnings.length === 0) return;
   server.registerResource(
-    "agentify-diagnostics",
-    "agentify://diagnostics",
-    { title: "agentify-supabase diagnostics", mimeType: "application/json" },
+    "exposify-diagnostics",
+    "exposify://diagnostics",
+    { title: "exposify-supabase diagnostics", mimeType: "application/json" },
     async (uri) => ({ contents: [{ uri: uri.href, text: JSON.stringify(warnings, null, 2) }] })
   );
 }
@@ -637,6 +645,7 @@ function aiReady(options = {}) {
   const env = denoEnv();
   const supabaseUrl = options.supabaseUrl ?? env?.get("SUPABASE_URL");
   const anonKey = options.anonKey ?? env?.get("SUPABASE_ANON_KEY") ?? "";
+  const serviceRoleKey = options.serviceRoleKey ?? env?.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
   let kbPromise = null;
   const getKb = () => {
     kbPromise ??= (async () => {
@@ -654,12 +663,12 @@ function aiReady(options = {}) {
   const getLadder = (postgrestUrl) => {
     ladderPromise ??= resolveTableSchemas({
       postgrestUrl,
-      headers: buildPostgrestHeaders(new Headers(), anonKey),
+      headers: buildPostgrestHeaders(new Headers(), serviceRoleKey),
       fetchImpl,
       manifest: options.manifest
     }).then((ladder) => {
       for (const w of ladder.warnings) {
-        console.error(`[agentify-supabase] degradation ladder: ${w.rung}: ${w.reason}`);
+        console.error(`[exposify-supabase] degradation ladder: ${w.rung}: ${w.reason}`);
       }
       return ladder;
     });
@@ -687,7 +696,7 @@ function aiReady(options = {}) {
           return { status: res.status, bodyText: await res.text() };
         };
         return buildSupabaseMcpServer({
-          appName: "agentify-supabase",
+          appName: "exposify-supabase",
           appVersion: "0.0.0",
           tables: ladder.tables,
           cfg,
@@ -706,11 +715,11 @@ function aiReady(options = {}) {
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   MANIFEST_VERSION,
-  MissingAgentifyMetaError,
+  MissingExposifyMetaError,
   aiReady,
   buildManifest,
   columnsFromOpenApi,
-  fetchAgentifyMeta,
+  fetchExposifyMeta,
   fetchOpenApi,
   introspectTables,
   loadManifest,

package/dist/index.d.cts

@@ -7,18 +7,18 @@ interface ColumnSchema {
     /** OpenAPI `format`, e.g. "uuid", "timestamp with time zone", "bigint". */
     format?: string;
     required: boolean;
-    /** From `agentify_meta()`'s `column_comment` (a `COMMENT ON COLUMN`), not OpenAPI. */
+    /** From `exposify_meta()`'s `column_comment` (a `COMMENT ON COLUMN`), not OpenAPI. */
     description?: string;
     isPrimaryKey?: boolean;
 }
 interface TableSchema {
     name: string;
     rlsEnabled: boolean;
-    /** From `agentify_meta()`'s `table_comment` (a `COMMENT ON TABLE`). */
+    /** From `exposify_meta()`'s `table_comment` (a `COMMENT ON TABLE`). */
     description?: string;
     columns: ColumnSchema[];
 }
-/** One row of `agentify_meta()` -- the migration returns one row per column. */
+/** One row of `exposify_meta()` -- the migration returns one row per column. */
 interface MetaRow {
     table_name: string;
     rls_enabled: boolean;
@@ -60,9 +60,21 @@ interface AgentifySupabaseOptions {
     /** Overrides for local/CI use -- production reads these from the Deno env automatically. */
     supabaseUrl?: string;
     anonKey?: string;
+    /**
+     * Used ONLY for schema introspection (fetching PostgREST's OpenAPI document
+     * + calling `exposify_meta()`) -- never for per-request data access, which
+     * always uses the caller's forwarded JWT (or the anon key as its fallback).
+     * Required because Supabase's gateway rejects the OpenAPI-discovery route
+     * for anon/publishable-tier keys outright (`Invalid API key` / `Only the
+     * service_role API key can be used for this endpoint`), regardless of key
+     * format -- discovered via a real deployment, not documented anywhere at
+     * design time. Auto-injected as `SUPABASE_SERVICE_ROLE_KEY` in every
+     * deployed edge function; this option exists for local dev/testing only.
+     */
+    serviceRoleKey?: string;
     /** Injectable for tests; defaults to global `fetch`. */
     fetchImpl?: typeof fetch;
-    /** Bundled fallback manifest (from `agentify-supabase generate`), used when runtime introspection fails. */
+    /** Bundled fallback manifest (from `exposify-supabase generate`), used when runtime introspection fails. */
     manifest?: unknown;
     rateLimit?: number;
     rateWindowMs?: number;
@@ -98,7 +110,7 @@ interface PostgrestColumnProperty {
 /**
  * Extracts column schemas for one table from a PostgREST OpenAPI document.
  * Returns `[]` for a table PostgREST never exposed (not in `definitions` --
- * e.g. it exists at the catalog level per `agentify_meta()` but PostgREST's
+ * e.g. it exists at the catalog level per `exposify_meta()` but PostgREST's
  * role lacks USAGE/SELECT grants on it), which the caller treats the same as
  * "RLS-less": never shown to the agent.
  */
@@ -113,27 +125,27 @@ declare function columnsFromOpenApi(doc: PostgrestOpenApiDoc, table: string): Co
 declare function rpcArgSchema(doc: PostgrestOpenApiDoc, fn: string): JsonSchemaObject | null;
 
 declare const MANIFEST_VERSION = 1;
-interface AgentifyManifest {
+interface ExposifyManifest {
     version: typeof MANIFEST_VERSION;
     generatedAt: string;
     tables: TableSchema[];
 }
-/** Built by `npx agentify-supabase generate` against a local/linked project. */
-declare function buildManifest(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[], generatedAt: string): AgentifyManifest;
+/** Built by `npx exposify-supabase generate` against a local/linked project. */
+declare function buildManifest(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[], generatedAt: string): ExposifyManifest;
 /**
  * Defensive load: a manifest is bundled JSON shipped alongside the function
  * and can go stale relative to the deployed schema, or simply be malformed
  * (hand-edited, wrong version). Returns `null` -- never throws -- so the
  * degradation ladder can fall through to the next rung instead of crashing.
  */
-declare function loadManifest(raw: unknown): AgentifyManifest | null;
+declare function loadManifest(raw: unknown): ExposifyManifest | null;
 
 /**
- * Merges PostgREST's OpenAPI document (column types) with `agentify_meta()`
+ * Merges PostgREST's OpenAPI document (column types) with `exposify_meta()`
  * rows (RLS status + comments) into the DB tool surface.
  *
  * DB exposure policy (spec, locked): RLS-gated, reads auto. A table only
- * appears here if `agentify_meta()` reports `rls_enabled: true` for it AND
+ * appears here if `exposify_meta()` reports `rls_enabled: true` for it AND
  * PostgREST actually exposes it in its OpenAPI `definitions` (the role
  * calling this has grants on it) -- a table failing either check never
  * appears, silently, exactly like a table PostgREST doesn't know about at
@@ -142,25 +154,34 @@ declare function loadManifest(raw: unknown): AgentifyManifest | null;
  */
 declare function introspectTables(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[]): TableSchema[];
 
-declare class MissingAgentifyMetaError extends Error {
+declare class MissingExposifyMetaError extends Error {
     constructor(cause: string);
 }
 /**
- * Calls the `agentify_meta()` Postgres function via PostgREST's RPC
- * endpoint. Requires the migration from `sql/agentify_meta.sql` to have been
+ * Calls the `exposify_meta()` Postgres function via PostgREST's RPC
+ * endpoint. Requires the migration from `sql/exposify_meta.sql` to have been
  * applied; a 404 (unknown route) or PostgREST's `PGRST202` (function not
  * found in schema cache) both mean "migration missing" and are translated
  * into a self-diagnosing error (spec: "a missing `agentify_meta()` migration
- * produces a self-diagnosing message naming the exact fix").
+ * produces a self-diagnosing message naming the exact fix" -- function
+ * renamed to `exposify_meta()` post-spec, see the decisions journal).
  */
-declare function fetchAgentifyMeta(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<MetaRow[]>;
+declare function fetchExposifyMeta(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<MetaRow[]>;
 
-/** PostgREST serves its OpenAPI document at the API root when asked for it explicitly. */
+/**
+ * PostgREST serves its OpenAPI document at the API root when asked for it
+ * explicitly. This is the one call in the whole SDK most likely to fail for
+ * a specific, fixable reason (the wrong key tier -- see decisions journal
+ * §9), so unlike a generic fetch wrapper this one reads the body on failure
+ * and turns that one known failure mode into a self-diagnosing message
+ * naming the exact fix, the same pattern `meta.ts` already uses for a
+ * missing `exposify_meta()` migration.
+ */
 declare function fetchOpenApi(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<PostgrestOpenApiDoc>;
 
 /**
  * Builds the `Deno.serve`-compatible MCP handler. Everything expensive
- * (OpenAPI fetch, `agentify_meta()` call, doc loading/chunking) happens
+ * (OpenAPI fetch, `exposify_meta()` call, doc loading/chunking) happens
  * lazily on first request and is cached in-memory for the life of the edge
  * instance -- "cold start" in the spec's sense, not literally module load,
  * since env vars and the incoming JWT aren't available before the first
@@ -168,4 +189,4 @@ declare function fetchOpenApi(postgrestUrl: string, headers: Headers, fetchImpl:
  */
 declare function aiReady(options?: AgentifySupabaseOptions): WebMcpHandler;
 
-export { type AgentifyManifest, type AgentifySupabaseOptions, MANIFEST_VERSION, MissingAgentifyMetaError, type PostgrestOpenApiDoc, aiReady, buildManifest, columnsFromOpenApi, fetchAgentifyMeta, fetchOpenApi, introspectTables, loadManifest, rpcArgSchema };
+export { type AgentifySupabaseOptions, type ExposifyManifest, MANIFEST_VERSION, MissingExposifyMetaError, type PostgrestOpenApiDoc, aiReady, buildManifest, columnsFromOpenApi, fetchExposifyMeta, fetchOpenApi, introspectTables, loadManifest, rpcArgSchema };

package/dist/index.d.ts

@@ -7,18 +7,18 @@ interface ColumnSchema {
     /** OpenAPI `format`, e.g. "uuid", "timestamp with time zone", "bigint". */
     format?: string;
     required: boolean;
-    /** From `agentify_meta()`'s `column_comment` (a `COMMENT ON COLUMN`), not OpenAPI. */
+    /** From `exposify_meta()`'s `column_comment` (a `COMMENT ON COLUMN`), not OpenAPI. */
     description?: string;
     isPrimaryKey?: boolean;
 }
 interface TableSchema {
     name: string;
     rlsEnabled: boolean;
-    /** From `agentify_meta()`'s `table_comment` (a `COMMENT ON TABLE`). */
+    /** From `exposify_meta()`'s `table_comment` (a `COMMENT ON TABLE`). */
     description?: string;
     columns: ColumnSchema[];
 }
-/** One row of `agentify_meta()` -- the migration returns one row per column. */
+/** One row of `exposify_meta()` -- the migration returns one row per column. */
 interface MetaRow {
     table_name: string;
     rls_enabled: boolean;
@@ -60,9 +60,21 @@ interface AgentifySupabaseOptions {
     /** Overrides for local/CI use -- production reads these from the Deno env automatically. */
     supabaseUrl?: string;
     anonKey?: string;
+    /**
+     * Used ONLY for schema introspection (fetching PostgREST's OpenAPI document
+     * + calling `exposify_meta()`) -- never for per-request data access, which
+     * always uses the caller's forwarded JWT (or the anon key as its fallback).
+     * Required because Supabase's gateway rejects the OpenAPI-discovery route
+     * for anon/publishable-tier keys outright (`Invalid API key` / `Only the
+     * service_role API key can be used for this endpoint`), regardless of key
+     * format -- discovered via a real deployment, not documented anywhere at
+     * design time. Auto-injected as `SUPABASE_SERVICE_ROLE_KEY` in every
+     * deployed edge function; this option exists for local dev/testing only.
+     */
+    serviceRoleKey?: string;
     /** Injectable for tests; defaults to global `fetch`. */
     fetchImpl?: typeof fetch;
-    /** Bundled fallback manifest (from `agentify-supabase generate`), used when runtime introspection fails. */
+    /** Bundled fallback manifest (from `exposify-supabase generate`), used when runtime introspection fails. */
     manifest?: unknown;
     rateLimit?: number;
     rateWindowMs?: number;
@@ -98,7 +110,7 @@ interface PostgrestColumnProperty {
 /**
  * Extracts column schemas for one table from a PostgREST OpenAPI document.
  * Returns `[]` for a table PostgREST never exposed (not in `definitions` --
- * e.g. it exists at the catalog level per `agentify_meta()` but PostgREST's
+ * e.g. it exists at the catalog level per `exposify_meta()` but PostgREST's
  * role lacks USAGE/SELECT grants on it), which the caller treats the same as
  * "RLS-less": never shown to the agent.
  */
@@ -113,27 +125,27 @@ declare function columnsFromOpenApi(doc: PostgrestOpenApiDoc, table: string): Co
 declare function rpcArgSchema(doc: PostgrestOpenApiDoc, fn: string): JsonSchemaObject | null;
 
 declare const MANIFEST_VERSION = 1;
-interface AgentifyManifest {
+interface ExposifyManifest {
     version: typeof MANIFEST_VERSION;
     generatedAt: string;
     tables: TableSchema[];
 }
-/** Built by `npx agentify-supabase generate` against a local/linked project. */
-declare function buildManifest(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[], generatedAt: string): AgentifyManifest;
+/** Built by `npx exposify-supabase generate` against a local/linked project. */
+declare function buildManifest(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[], generatedAt: string): ExposifyManifest;
 /**
  * Defensive load: a manifest is bundled JSON shipped alongside the function
  * and can go stale relative to the deployed schema, or simply be malformed
  * (hand-edited, wrong version). Returns `null` -- never throws -- so the
  * degradation ladder can fall through to the next rung instead of crashing.
  */
-declare function loadManifest(raw: unknown): AgentifyManifest | null;
+declare function loadManifest(raw: unknown): ExposifyManifest | null;
 
 /**
- * Merges PostgREST's OpenAPI document (column types) with `agentify_meta()`
+ * Merges PostgREST's OpenAPI document (column types) with `exposify_meta()`
  * rows (RLS status + comments) into the DB tool surface.
  *
  * DB exposure policy (spec, locked): RLS-gated, reads auto. A table only
- * appears here if `agentify_meta()` reports `rls_enabled: true` for it AND
+ * appears here if `exposify_meta()` reports `rls_enabled: true` for it AND
  * PostgREST actually exposes it in its OpenAPI `definitions` (the role
  * calling this has grants on it) -- a table failing either check never
  * appears, silently, exactly like a table PostgREST doesn't know about at
@@ -142,25 +154,34 @@ declare function loadManifest(raw: unknown): AgentifyManifest | null;
  */
 declare function introspectTables(openapi: PostgrestOpenApiDoc, metaRows: MetaRow[]): TableSchema[];
 
-declare class MissingAgentifyMetaError extends Error {
+declare class MissingExposifyMetaError extends Error {
     constructor(cause: string);
 }
 /**
- * Calls the `agentify_meta()` Postgres function via PostgREST's RPC
- * endpoint. Requires the migration from `sql/agentify_meta.sql` to have been
+ * Calls the `exposify_meta()` Postgres function via PostgREST's RPC
+ * endpoint. Requires the migration from `sql/exposify_meta.sql` to have been
  * applied; a 404 (unknown route) or PostgREST's `PGRST202` (function not
  * found in schema cache) both mean "migration missing" and are translated
  * into a self-diagnosing error (spec: "a missing `agentify_meta()` migration
- * produces a self-diagnosing message naming the exact fix").
+ * produces a self-diagnosing message naming the exact fix" -- function
+ * renamed to `exposify_meta()` post-spec, see the decisions journal).
  */
-declare function fetchAgentifyMeta(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<MetaRow[]>;
+declare function fetchExposifyMeta(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<MetaRow[]>;
 
-/** PostgREST serves its OpenAPI document at the API root when asked for it explicitly. */
+/**
+ * PostgREST serves its OpenAPI document at the API root when asked for it
+ * explicitly. This is the one call in the whole SDK most likely to fail for
+ * a specific, fixable reason (the wrong key tier -- see decisions journal
+ * §9), so unlike a generic fetch wrapper this one reads the body on failure
+ * and turns that one known failure mode into a self-diagnosing message
+ * naming the exact fix, the same pattern `meta.ts` already uses for a
+ * missing `exposify_meta()` migration.
+ */
 declare function fetchOpenApi(postgrestUrl: string, headers: Headers, fetchImpl: typeof fetch): Promise<PostgrestOpenApiDoc>;
 
 /**
  * Builds the `Deno.serve`-compatible MCP handler. Everything expensive
- * (OpenAPI fetch, `agentify_meta()` call, doc loading/chunking) happens
+ * (OpenAPI fetch, `exposify_meta()` call, doc loading/chunking) happens
  * lazily on first request and is cached in-memory for the life of the edge
  * instance -- "cold start" in the spec's sense, not literally module load,
  * since env vars and the incoming JWT aren't available before the first
@@ -168,4 +189,4 @@ declare function fetchOpenApi(postgrestUrl: string, headers: Headers, fetchImpl:
  */
 declare function aiReady(options?: AgentifySupabaseOptions): WebMcpHandler;
 
-export { type AgentifyManifest, type AgentifySupabaseOptions, MANIFEST_VERSION, MissingAgentifyMetaError, type PostgrestOpenApiDoc, aiReady, buildManifest, columnsFromOpenApi, fetchAgentifyMeta, fetchOpenApi, introspectTables, loadManifest, rpcArgSchema };
+export { type AgentifySupabaseOptions, type ExposifyManifest, MANIFEST_VERSION, MissingExposifyMetaError, type PostgrestOpenApiDoc, aiReady, buildManifest, columnsFromOpenApi, fetchExposifyMeta, fetchOpenApi, introspectTables, loadManifest, rpcArgSchema };

package/dist/index.js

@@ -70,7 +70,7 @@ function warnOnce(message) {
   if (warned.has(message)) return;
   warned.add(message);
   try {
-    console.warn(`[agentify-supabase] ${message}`);
+    console.warn(`[exposify-supabase] ${message}`);
   } catch {
   }
 }
@@ -96,6 +96,7 @@ function buildPostgrestHeaders(incoming, anonKey) {
     if (value) headers.set(name, value);
   }
   if (!headers.has("apikey")) headers.set("apikey", anonKey);
+  if (!headers.has("authorization")) headers.set("authorization", `Bearer ${anonKey}`);
   return headers;
 }
 function createPostgrestClient(postgrestUrl, headers, fetchImpl) {
@@ -128,42 +129,49 @@ function createPostgrestClient(postgrestUrl, headers, fetchImpl) {
 }
 
 // src/fetch-openapi.ts
+var WRONG_KEY_TIER_RE = /service_role|secret api key/i;
 async function fetchOpenApi(postgrestUrl, headers, fetchImpl) {
   const res = await fetchImpl(postgrestUrl, {
     headers: { ...Object.fromEntries(headers), accept: "application/openapi+json" }
   });
   if (!res.ok) {
-    throw new Error(`PostgREST OpenAPI fetch failed: HTTP ${res.status}`);
+    const body = await res.text().catch(() => "");
+    if (res.status === 401 && WRONG_KEY_TIER_RE.test(body)) {
+      throw new Error(
+        `PostgREST OpenAPI fetch failed: HTTP 401 -- Supabase rejected this request because it wasn't made with the service role key (response: "${body.trim()}"). Schema introspection always needs SUPABASE_SERVICE_ROLE_KEY, never the anon key -- see this package's README, "Why introspection needs the service role key". In a deployed function this is auto-injected automatically; for local dev/testing pass { serviceRoleKey } explicitly (or --key for the CLI).`
+      );
+    }
+    throw new Error(`PostgREST OpenAPI fetch failed: HTTP ${res.status}${body ? `: ${body}` : ""}`);
   }
   return await res.json();
 }
 
 // src/meta.ts
-var MissingAgentifyMetaError = class extends Error {
+var MissingExposifyMetaError = class extends Error {
   constructor(cause) {
     super(cause);
-    this.name = "MissingAgentifyMetaError";
+    this.name = "MissingExposifyMetaError";
   }
 };
-async function fetchAgentifyMeta(postgrestUrl, headers, fetchImpl) {
-  const res = await fetchImpl(`${postgrestUrl}/rpc/agentify_meta`, {
+async function fetchExposifyMeta(postgrestUrl, headers, fetchImpl) {
+  const res = await fetchImpl(`${postgrestUrl}/rpc/exposify_meta`, {
     method: "POST",
     headers: { ...Object.fromEntries(headers), "content-type": "application/json" },
     body: "{}"
   });
   if (res.status === 404) {
-    throw new MissingAgentifyMetaError(
-      "agentify_meta() is not reachable at /rpc/agentify_meta (404). Run `npx agentify-supabase init` (or apply sql/agentify_meta.sql directly) and `supabase db push`, then redeploy the function."
+    throw new MissingExposifyMetaError(
+      "exposify_meta() is not reachable at /rpc/exposify_meta (404). Run `npx exposify-supabase init` (or apply sql/exposify_meta.sql directly) and `supabase db push`, then redeploy the function."
     );
   }
   if (!res.ok) {
     const body = await res.text().catch(() => "");
     if (/PGRST202|function .* does not exist/i.test(body)) {
-      throw new MissingAgentifyMetaError(
-        "agentify_meta() is missing from the database (PostgREST error PGRST202). Apply the migration in sql/agentify_meta.sql via `supabase db push`, then redeploy the function."
+      throw new MissingExposifyMetaError(
+        "exposify_meta() is missing from the database (PostgREST error PGRST202). Apply the migration in sql/exposify_meta.sql via `supabase db push`, then redeploy the function."
       );
     }
-    throw new Error(`agentify_meta() call failed: HTTP ${res.status} ${body}`.trim());
+    throw new Error(`exposify_meta() call failed: HTTP ${res.status} ${body}`.trim());
   }
   return await res.json();
 }
@@ -194,7 +202,7 @@ function columnsFromOpenApi(doc, table) {
     // ON COLUMN` into `description`, then appends its own "Note:\nThis is a
     // Primary/Foreign Key...<pk/|fk/>" boilerplate) -- strip that boilerplate
     // so a column with no real comment ends up `undefined`, not the
-    // boilerplate text. agentify_meta()'s copy wins when both exist anyway
+    // boilerplate text. exposify_meta()'s copy wins when both exist anyway
     // -- see introspect.ts's merge.
     description: prop.description?.replace(/\n*Note:[\s\S]*$/, "").trim() || void 0
   }));
@@ -229,7 +237,7 @@ function introspectTables(openapi, metaRows) {
       if (!fromOpenApi) continue;
       columns.push({
         ...fromOpenApi,
-        // agentify_meta()'s comment wins over OpenAPI's mirrored copy (spec:
+        // exposify_meta()'s comment wins over OpenAPI's mirrored copy (spec:
         // "Column comments → param descriptions" sourced from the migration).
         description: row.column_comment ?? fromOpenApi.description
       });
@@ -272,7 +280,7 @@ async function resolveTableSchemas(deps) {
   try {
     const [openapi, metaRows] = await Promise.all([
       fetchOpenApi(deps.postgrestUrl, deps.headers, deps.fetchImpl),
-      fetchAgentifyMeta(deps.postgrestUrl, deps.headers, deps.fetchImpl)
+      fetchExposifyMeta(deps.postgrestUrl, deps.headers, deps.fetchImpl)
     ]);
     return { tables: introspectTables(openapi, metaRows), mode: "runtime", warnings, openapi };
   } catch (err) {
@@ -282,7 +290,7 @@ async function resolveTableSchemas(deps) {
   if (manifest) {
     warnings.push({
       rung: "manifest",
-      reason: "runtime introspection failed; serving tools from the bundled agentify.manifest.json instead"
+      reason: "runtime introspection failed; serving tools from the bundled exposify.manifest.json instead"
     });
     return { tables: manifest.tables, mode: "manifest", warnings };
   }
@@ -572,9 +580,9 @@ ${h.chunk.text}`).join("\n\n---\n\n") : "No matching documentation found.";
 function registerDiagnosticsResource(server, warnings) {
   if (warnings.length === 0) return;
   server.registerResource(
-    "agentify-diagnostics",
-    "agentify://diagnostics",
-    { title: "agentify-supabase diagnostics", mimeType: "application/json" },
+    "exposify-diagnostics",
+    "exposify://diagnostics",
+    { title: "exposify-supabase diagnostics", mimeType: "application/json" },
     async (uri) => ({ contents: [{ uri: uri.href, text: JSON.stringify(warnings, null, 2) }] })
   );
 }
@@ -607,6 +615,7 @@ function aiReady(options = {}) {
   const env = denoEnv();
   const supabaseUrl = options.supabaseUrl ?? env?.get("SUPABASE_URL");
   const anonKey = options.anonKey ?? env?.get("SUPABASE_ANON_KEY") ?? "";
+  const serviceRoleKey = options.serviceRoleKey ?? env?.get("SUPABASE_SERVICE_ROLE_KEY") ?? "";
   let kbPromise = null;
   const getKb = () => {
     kbPromise ??= (async () => {
@@ -624,12 +633,12 @@ function aiReady(options = {}) {
   const getLadder = (postgrestUrl) => {
     ladderPromise ??= resolveTableSchemas({
       postgrestUrl,
-      headers: buildPostgrestHeaders(new Headers(), anonKey),
+      headers: buildPostgrestHeaders(new Headers(), serviceRoleKey),
       fetchImpl,
       manifest: options.manifest
     }).then((ladder) => {
       for (const w of ladder.warnings) {
-        console.error(`[agentify-supabase] degradation ladder: ${w.rung}: ${w.reason}`);
+        console.error(`[exposify-supabase] degradation ladder: ${w.rung}: ${w.reason}`);
       }
       return ladder;
     });
@@ -657,7 +666,7 @@ function aiReady(options = {}) {
           return { status: res.status, bodyText: await res.text() };
         };
         return buildSupabaseMcpServer({
-          appName: "agentify-supabase",
+          appName: "exposify-supabase",
           appVersion: "0.0.0",
           tables: ladder.tables,
           cfg,
@@ -675,11 +684,11 @@ function aiReady(options = {}) {
 }
 export {
   MANIFEST_VERSION,
-  MissingAgentifyMetaError,
+  MissingExposifyMetaError,
   aiReady,
   buildManifest,
   columnsFromOpenApi,
-  fetchAgentifyMeta,
+  fetchExposifyMeta,
   fetchOpenApi,
   introspectTables,
   loadManifest,