@dropout-ai/runtime 0.2.10 → 0.2.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dropout-ai/runtime",
-  "version": "0.2.10",
+  "version": "0.2.12",
   "description": "Invisible Node.js runtime for capturing AI interactions.",
   "main": "src/index.js",
   "scripts": {

package/src/index.js

@@ -1,13 +1,16 @@
 /**
  * @dropout-ai/runtime
- * Role: Passive observer inside the user’s app.
- * 
- * Runtime never reasons, never interprets, never stores intelligence.
- * it only: Observes, Normalizes, Emits signals.
+ * Role: Passive observer.
+ * Behavior: Fire-and-forget raw JSON to Supabase.
+ * Authentication: None (Public Endpoint).
  */
 
 const crypto = require('crypto');
 
+// --- CONFIGURATION ---
+// Public ingestion endpoint (No keys required)
+const SUPABASE_FUNCTION_URL = "https://hipughmjlwmwjxzyxfzs.supabase.co/functions/v1/capture-sealed";
+
 // --- Identity & State ---
 const GLOBAL_OBJ = typeof window !== 'undefined' ? window : global;
 
@@ -28,27 +31,12 @@ let lastTurnConfirmed = true;
 let lastPromptHash = null;
 let lastResponseHash = null;
 
-// --- Runtime Guarantees ---
 let config = {
   maxOutputBytes: 32768,
-  captureEndpoint: 'http://localhost:4000/capture',
-  configEndpoint: 'http://localhost:4000/config',
-  privacyMode: (typeof process !== 'undefined' && process.env.DROPOUT_PRIVACY_MODE) || 'safe'
+  captureEndpoint: SUPABASE_FUNCTION_URL,
+  privacyMode: (typeof process !== 'undefined' && process.env.DROPOUT_PRIVACY_MODE) || 'full'
 };
 
-// Remote config fetch (Non-blocking)
-setTimeout(async () => {
-  const fetchFn = GLOBAL_OBJ.__dropout_original_fetch__ || GLOBAL_OBJ.fetch;
-  if (typeof fetchFn !== 'function') return;
-  try {
-    const resp = await fetchFn(config.configEndpoint);
-    const remote = await resp.json();
-    if (remote && typeof remote === 'object') {
-      config = Object.assign(config, remote);
-    }
-  } catch (e) { }
-}, 0);
-
 /**
  * Telemetry Emitter (Non-blocking, Fire-and-forget)
  */
@@ -59,10 +47,15 @@ function emit(payload) {
   setTimeout(() => {
     fetchFn(config.captureEndpoint, {
       method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
+      headers: {
+        'Content-Type': 'application/json'
+        // No Authorization header needed since Enforce JWT is OFF
+      },
       body: JSON.stringify(payload),
       keepalive: true
-    }).catch(() => { });
+    }).catch(() => {
+      // Silent fail (Fire & Forget) to ensure no impact on host app
+    });
   }, 0);
 }
 
@@ -142,6 +135,12 @@ if (typeof GLOBAL_OBJ.fetch === 'function' && !GLOBAL_OBJ.fetch.__dropout_patche
 
   GLOBAL_OBJ.fetch = async function (input, init) {
     const url = typeof input === 'string' ? input : (input && input.url);
+
+    // GUARD: Avoid infinite loops
+    if (url && url.includes(config.captureEndpoint)) {
+      return GLOBAL_OBJ.__dropout_original_fetch__(input, init);
+    }
+
     const isAI = url && (
       url.includes('openai.com') ||
       url.includes('anthropic.com') ||
@@ -315,4 +314,4 @@ module.exports = {
     lastPromptHash = null;
     lastResponseHash = null;
   }
-};
+};