@dropout-ai/runtime 0.3.3 → 0.3.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dropout-ai/runtime",
-  "version": "0.3.3",
+  "version": "0.3.5",
   "description": "Invisible Node.js runtime for capturing AI interactions.",
   "main": "src/index.js",
   "scripts": {

package/src/index.js

@@ -1,8 +1,7 @@
 /**
  * @dropout-ai/runtime
  * Universal AI Interaction Capture for Node.js & Next.js
- * Role: Passive observer.
- * Behavior: Fire-and-forget raw JSON to Supabase.
+ * Patches: fetch, http.request, https.request
  * Capability: Captures Genkit, OpenAI, LangChain, Axios, and standard fetch.
  */
 
@@ -19,355 +18,285 @@ const KNOWN_AI_DOMAINS = [
   'aiplatform.googleapis.com', 'api.groq.com', 'api.mistral.ai', 'api.cohere.ai'
 ];
 
-// Global State
-const GLOBAL_OBJ = typeof window !== 'undefined' ? window : global;
-let activeConfig = {
-  projectId: null,
-  apiKey: null,
-  captureEndpoint: SUPABASE_FUNCTION_URL,
-  maxOutputBytes: 32768,
-  privacyMode: (typeof process !== 'undefined' && process.env.DROPOUT_PRIVACY_MODE) || 'full',
-  debug: false // Added debug flag
-};
-
-let isPatched = false;
-let turnIndex = 0;
-let lastTurnConfirmed = true;
-let lastPromptHash = null;
-let lastResponseHash = null;
-let instance = null;
-
-// --- UTILS ---
-
-function log(msg, ...args) {
-  if (activeConfig.debug) console.log(`[Dropout] ${msg}`, ...args);
-}
+class Dropout {
+  constructor(config = {}) {
+    // 🚨 BROWSER GUARD 🚨
+    // If this runs in the browser (Client Component), do nothing.
+    // This prevents the "listener" error and protects your API keys.
+    if (typeof window !== 'undefined') {
+      console.warn("[Dropout] ⚠️ Initialization Skipped: This SDK is for Node.js/Server environments only.");
+      return;
+    }
 
-function generateSessionId() {
-  try {
-    return crypto.randomUUID();
-  } catch (e) {
-    return 'sess_' + Math.random().toString(36).substring(2, 12) + Date.now().toString(36);
-  }
-}
+    // 1. Validation
+    if (!config.apiKey || !config.projectId) {
+      console.warn("[Dropout] ⚠️ Initialization Skipped: Missing apiKey or projectId.");
+      return;
+    }
 
-function hash(text) {
-  if (!text) return null;
-  try {
-    return crypto.createHash('sha256').update(text.toLowerCase().trim()).digest('hex');
-  } catch (e) { return 'hash_err'; }
-}
+    // 2. Config Setup
+    this.config = config;
+    this.projectId = config.projectId;
+    this.apiKey = config.apiKey;
+    this.debug = config.debug || false;
+    this.privacy = config.privacy || 'full';
+    this.captureEndpoint = SUPABASE_FUNCTION_URL;
+
+    // 3. Singleton Guard
+    if (global.__dropout_initialized__) {
+      if (this.debug) console.log("[Dropout] ℹ️ Already initialized. Skipping patch.");
+      return;
+    }
+    global.__dropout_initialized__ = true;
 
-function normalize(url, body) {
-  let provider = 'custom';
-  let model = 'unknown';
-
-  if (url) {
-    const u = url.toLowerCase();
-    if (u.includes('openai')) provider = 'openai';
-    else if (u.includes('anthropic')) provider = 'anthropic';
-    else if (u.includes('google') || u.includes('generative') || u.includes('aiplatform')) provider = 'google';
-    else if (u.includes('groq')) provider = 'groq';
-    else if (u.includes('mistral')) provider = 'mistral';
-    else if (u.includes('cohere')) provider = 'cohere';
-    else if (u.includes('localhost') || u.includes('127.0.0.1')) provider = 'local';
-  }
+    // 4. Initialize Identity
+    if (!global.__dropout_session_id__) {
+      global.__dropout_session_id__ = this.generateSessionId();
+    }
 
-  if (body) {
-    try {
-      const parsed = typeof body === 'string' ? JSON.parse(body) : body;
-      if (parsed.model) model = parsed.model;
-    } catch (e) { }
-  }
-  return { provider, model };
-}
+    // 5. Start the Wiretap
+    if (this.debug) console.log(`[Dropout] 🟢 Initialized for Project: ${this.projectId}`);
 
-function isAiRequest(url, bodyString) {
-  if (!url) return false;
-  // Guard: Infinite Loop Prevention
-  if (url.includes(activeConfig.captureEndpoint)) return false;
+    // Bind methods
+    this.log = this.log.bind(this);
+    this.isAiRequest = this.isAiRequest.bind(this);
+    this.patchNetwork();
+  }
 
-  // 1. Check Known Domains
-  if (KNOWN_AI_DOMAINS.some(d => url.includes(d))) return true;
+  // --- UTILS ---
+  log(msg, ...args) {
+    if (this.debug) console.log(`[Dropout] ${msg}`, ...args);
+  }
 
-  // 2. Heuristic Check (for custom endpoints)
-  if (bodyString) {
-    return (bodyString.includes('"model"') || bodyString.includes('"messages"')) &&
-      (bodyString.includes('"user"') || bodyString.includes('"prompt"'));
+  generateSessionId() {
+    try {
+      return crypto.randomUUID();
+    } catch (e) {
+      return 'sess_' + Math.random().toString(36).substring(2, 12) + Date.now().toString(36);
+    }
   }
-  return false;
-}
 
-// --- EMITTER (Authenticated) ---
+  hash(text) {
+    if (!text) return null;
+    try {
+      return crypto.createHash('sha256').update(text.toLowerCase().trim()).digest('hex');
+    } catch (e) { return 'hash_err'; }
+  }
 
-function emit(payload) {
-  // 1. Guard: Do not emit if not initialized
-  if (!activeConfig.apiKey || !activeConfig.projectId) return;
+  normalize(url, body) {
+    let provider = 'custom';
+    let model = 'unknown';
+
+    if (url) {
+      const u = url.toLowerCase();
+      if (u.includes('openai')) provider = 'openai';
+      else if (u.includes('anthropic')) provider = 'anthropic';
+      else if (u.includes('google') || u.includes('gemini') || u.includes('aiplatform')) provider = 'google';
+      else if (u.includes('groq')) provider = 'groq';
+      else if (u.includes('mistral')) provider = 'mistral';
+      else if (u.includes('cohere')) provider = 'cohere';
+      else if (u.includes('localhost') || u.includes('127.0.0.1')) provider = 'local';
+    }
 
-  // 2. Construct Final Payload
-  const finalPayload = {
-    ...payload,
-    project_id: activeConfig.projectId,
+    if (body) {
+      try {
+        const parsed = typeof body === 'string' ? JSON.parse(body) : body;
+        if (parsed.model) model = parsed.model;
+      } catch (e) { }
+    }
+    return { provider, model };
+  }
 
-    // ✅ Ensure these columns are always populated for the DB
-    content_blob: payload.content, // Map content to blob
-    received_at: new Date().toISOString()
-  };
+  isAiRequest(url, bodyString) {
+    if (!url) return false;
+    if (url.includes(this.captureEndpoint)) return false;
 
-  log(`🚀 Sending Capture (${payload.turn_role})`);
+    if (KNOWN_AI_DOMAINS.some(d => url.includes(d))) return true;
 
-  // 3. Fire and Forget using HTTPS (Bypassing our own patches)
-  const req = https.request(activeConfig.captureEndpoint, {
-    method: 'POST',
-    headers: {
-      'Content-Type': 'application/json',
-      'x-dropout-key': activeConfig.apiKey
+    if (bodyString) {
+      return (bodyString.includes('"model"') || bodyString.includes('"messages"')) &&
+        (bodyString.includes('"user"') || bodyString.includes('"prompt"'));
     }
-  });
-
-  req.on('error', (e) => log("❌ Upload Failed", e.message));
-  req.write(JSON.stringify(finalPayload));
-  req.end();
-}
+    return false;
+  }
 
-// --- MONKEY PATCH ---
+  // --- EMITTER ---
+  emit(payload) {
+    if (!this.apiKey || !this.projectId) return;
 
-function applyPatch() {
-  if (isPatched) return;
+    const finalPayload = {
+      ...payload,
+      project_id: this.projectId,
+      //content_blob: payload.content,
+      content: payload.content,
+      received_at: new Date().toISOString()
+    };
 
-  // --- A. PATCH FETCH (Next.js / OpenAI) ---
-  if (GLOBAL_OBJ.fetch) {
-    GLOBAL_OBJ.__dropout_original_fetch__ = GLOBAL_OBJ.fetch;
-    GLOBAL_OBJ.fetch = async function (input, init) {
-      const url = typeof input === 'string' ? input : (input && input.url);
+    this.log(`🚀 Sending Capture (${payload.turn_role})`);
 
-      // Check body string safely
-      let bodyStr = "";
-      if (init && init.body) {
-        try { bodyStr = typeof init.body === 'string' ? init.body : JSON.stringify(init.body); } catch (e) { }
+    const req = https.request(this.captureEndpoint, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        'x-dropout-key': this.apiKey
       }
+    });
 
-      // Guard
-      if (!isAiRequest(url, bodyStr)) {
-        return GLOBAL_OBJ.__dropout_original_fetch__(input, init);
-      }
-
-      log(`⚡ [FETCH] Intercepting: ${url}`);
+    req.on('error', (e) => this.log("❌ Upload Failed", e.message));
+    req.write(JSON.stringify(finalPayload));
+    req.end();
+  }
 
-      const start = Date.now();
+  // --- CORE PATCHING ---
+  patchNetwork() {
+    const _this = this;
 
-      // Calculate Turn
-      let activeTurn;
-      if (lastTurnConfirmed) {
-        activeTurn = turnIndex++;
-        lastTurnConfirmed = false;
-      } else {
-        activeTurn = turnIndex > 0 ? turnIndex - 1 : 0;
-      }
+    // --- A. PATCH FETCH ---
+    if (global.fetch) {
+      const originalFetch = global.fetch;
+      global.fetch = async function (input, init) {
+        const url = typeof input === 'string' ? input : input?.url;
 
-      const { provider, model } = normalize(url, bodyStr);
-      const pHash = hash(bodyStr);
-
-      // Emit Request (User)
-      emit({
-        session_id: GLOBAL_OBJ.__dropout_session_id__,
-        turn_index: activeTurn,
-        direction: 'user_to_ai',
-        turn_role: 'user',
-        provider,
-        model,
-        content: activeConfig.privacyMode === 'full' ? bodyStr : null,
-        content_hash: pHash,
-        metadata_flags: {
-          retry_like: pHash === lastPromptHash ? 1 : 0,
-          method: 'FETCH',
-          url: url
+        let bodyStr = "";
+        if (init && init.body) {
+          try { bodyStr = typeof init.body === 'string' ? init.body : JSON.stringify(init.body); } catch (e) { }
         }
-      });
-      lastPromptHash = pHash;
 
-      // Actual Call
-      let response;
-      try {
-        response = await GLOBAL_OBJ.__dropout_original_fetch__(input, init);
-      } catch (err) { throw err; }
+        if (!_this.isAiRequest(url, bodyStr)) {
+          return originalFetch.apply(this, arguments);
+        }
 
-      const latency = Date.now() - start;
+        _this.log(`⚡ [FETCH] Intercepting: ${url}`);
+        const start = Date.now();
 
-      // Emit Response (Assistant)
-      try {
-        const cloned = response.clone();
-        const oText = await cloned.text();
-        const oHash = hash(oText);
-
-        emit({
-          session_id: GLOBAL_OBJ.__dropout_session_id__,
-          turn_index: activeTurn,
-          direction: 'ai_to_user',
-          turn_role: 'assistant',
-          latency_ms: latency,
+        const { provider, model } = _this.normalize(url, bodyStr);
+        _this.emit({
+          session_id: global.__dropout_session_id__,
+          turn_index: 0,
+          turn_role: 'user',
           provider,
           model,
-          content: activeConfig.privacyMode === 'full' ? oText : null,
-          content_hash: oHash,
-          metadata_flags: {
-            non_adaptive_response: oHash === lastResponseHash ? 1 : 0,
-            turn_boundary_confirmed: 1,
-            status: response.status
-          }
+          content: _this.privacy === 'full' ? bodyStr : null,
+          metadata_flags: { method: 'FETCH', url: url }
         });
-        lastResponseHash = oHash;
-      } catch (e) { log("⚠️ Failed to read response body"); }
-
-      lastTurnConfirmed = true;
-      return response;
-    };
-    log("✅ Patch Applied: global.fetch");
-  }
 
-  // --- B. PATCH HTTP/HTTPS (Axios / Genkit / Node SDKs) ---
-  const patchNodeRequest = (module, moduleName) => {
-    const originalRequest = module.request;
-    module.request = function (...args) {
-      // Resolve URL
-      let url;
-      let options;
-      if (typeof args[0] === 'string') {
-        url = args[0];
-        options = args[1] || {};
-      } else {
-        options = args[0] || {};
-        const protocol = options.protocol || 'https:';
-        const host = options.hostname || options.host || 'localhost';
-        const path = options.path || '/';
-        url = `${protocol}//${host}${path}`;
-      }
+        let response;
+        try {
+          response = await originalFetch.apply(this, arguments);
+        } catch (err) { throw err; }
 
-      // We can't check body here yet, so we rely on URL
-      if (!isAiRequest(url, null)) {
-        return originalRequest.apply(this, args);
-      }
+        const latency = Date.now() - start;
 
-      log(`⚡ [${moduleName.toUpperCase()}] Intercepting: ${url}`);
-
-      const start = Date.now();
-      const clientRequest = originalRequest.apply(this, args);
-
-      // Capture Request Body
-      const reqChunks = [];
-      const originalWrite = clientRequest.write;
-      const originalEnd = clientRequest.end;
+        try {
+          const cloned = response.clone();
+          const oText = await cloned.text();
+          _this.emit({
+            session_id: global.__dropout_session_id__,
+            turn_index: 0,
+            turn_role: 'assistant',
+            latency_ms: latency,
+            provider,
+            model,
+            content: _this.privacy === 'full' ? oText : null,
+            metadata_flags: { status: response.status }
+          });
+        } catch (e) { _this.log("⚠️ Failed to read response body"); }
 
-      clientRequest.write = function (...writeArgs) {
-        if (writeArgs[0]) reqChunks.push(Buffer.from(writeArgs[0]));
-        return originalWrite.apply(this, writeArgs);
+        return response;
       };
+      this.log("✅ Patch Applied: global.fetch");
+    }
 
-      clientRequest.end = function (...endArgs) {
-        if (endArgs[0]) reqChunks.push(Buffer.from(endArgs[0]));
-
-        // Request Complete - Emit User Turn
-        const reqBody = Buffer.concat(reqChunks).toString('utf8');
-        const { provider, model } = normalize(url, reqBody);
-        const pHash = hash(reqBody);
-
-        let activeTurn;
-        if (lastTurnConfirmed) {
-          activeTurn = turnIndex++;
-          lastTurnConfirmed = false;
+    // --- B. PATCH NODE HTTP/HTTPS ---
+    const patchNodeRequest = (module, moduleName) => {
+      const originalRequest = module.request;
+      module.request = function (...args) {
+        let url;
+        if (typeof args[0] === 'string') {
+          url = args[0];
         } else {
-          activeTurn = turnIndex > 0 ? turnIndex - 1 : 0;
+          const opts = args[0] || {};
+          const protocol = opts.protocol || (moduleName === 'https' ? 'https:' : 'http:');
+          const host = opts.hostname || opts.host || 'localhost';
+          const path = opts.path || '/';
+          url = `${protocol}//${host}${path}`;
         }
 
-        // Save state on request object for response handler
-        clientRequest._dropout_turn = activeTurn;
-        clientRequest._dropout_provider = provider;
-        clientRequest._dropout_model = model;
+        if (!_this.isAiRequest(url, null)) {
+          return originalRequest.apply(this, args);
+        }
 
-        emit({
-          session_id: GLOBAL_OBJ.__dropout_session_id__,
-          turn_index: activeTurn,
-          direction: 'user_to_ai',
-          turn_role: 'user',
-          provider,
-          model,
-          content: activeConfig.privacyMode === 'full' ? reqBody : null,
-          content_hash: pHash,
-          metadata_flags: { method: moduleName.toUpperCase(), url: url }
-        });
-        lastPromptHash = pHash;
+        _this.log(`⚡ [${moduleName.toUpperCase()}] Intercepting: ${url}`);
+        const start = Date.now();
 
-        return originalEnd.apply(this, endArgs);
-      };
+        const clientRequest = originalRequest.apply(this, args);
+        const reqChunks = [];
+        const originalWrite = clientRequest.write;
+        const originalEnd = clientRequest.end;
 
-      // Capture Response
-      clientRequest.on('response', (res) => {
-        const resChunks = [];
-        res.on('data', (chunk) => resChunks.push(chunk));
-        res.on('end', () => {
-          const resBody = Buffer.concat(resChunks).toString('utf8');
-          const latency = Date.now() - start;
-          const oHash = hash(resBody);
-
-          emit({
-            session_id: GLOBAL_OBJ.__dropout_session_id__,
-            turn_index: clientRequest._dropout_turn || 0,
-            direction: 'ai_to_user',
-            turn_role: 'assistant',
-            latency_ms: latency,
-            provider: clientRequest._dropout_provider,
-            model: clientRequest._dropout_model,
-            content: activeConfig.privacyMode === 'full' ? resBody : null,
-            content_hash: oHash,
-            metadata_flags: { status: res.statusCode }
+        clientRequest.write = function (...writeArgs) {
+          const chunk = writeArgs[0];
+          if (chunk && (typeof chunk === 'string' || Buffer.isBuffer(chunk))) {
+            reqChunks.push(Buffer.from(chunk));
+          }
+          return originalWrite.apply(this, writeArgs);
+        };
+
+        clientRequest.end = function (...endArgs) {
+          const chunk = endArgs[0];
+          if (chunk && (typeof chunk === 'string' || Buffer.isBuffer(chunk))) {
+            reqChunks.push(Buffer.from(chunk));
+          }
+
+          const reqBody = Buffer.concat(reqChunks).toString('utf8');
+          const { provider, model } = _this.normalize(url, reqBody);
+          clientRequest._dropout_meta = { provider, model };
+
+          _this.emit({
+            session_id: global.__dropout_session_id__,
+            turn_index: 0,
+            turn_role: 'user',
+            provider,
+            model,
+            content: _this.privacy === 'full' ? reqBody : null,
+            metadata_flags: { method: moduleName.toUpperCase(), url: url }
           });
 
-          lastResponseHash = oHash;
-          lastTurnConfirmed = true;
+          return originalEnd.apply(this, endArgs);
+        };
+
+        clientRequest.on('response', (res) => {
+          const resChunks = [];
+          res.on('data', (chunk) => resChunks.push(chunk));
+          res.on('end', () => {
+            const resBody = Buffer.concat(resChunks).toString('utf8');
+            const latency = Date.now() - start;
+            const meta = clientRequest._dropout_meta || {};
+
+            _this.emit({
+              session_id: global.__dropout_session_id__,
+              turn_index: 0,
+              turn_role: 'assistant',
+              latency_ms: latency,
+              provider: meta.provider,
+              model: meta.model,
+              content: _this.privacy === 'full' ? resBody : null,
+              metadata_flags: { status: res.statusCode }
+            });
+          });
         });
-      });
 
-      return clientRequest;
+        return clientRequest;
+      };
     };
-  };
-
-  patchNodeRequest(https, 'https');
-  patchNodeRequest(http, 'http');
-  log("✅ Patch Applied: http/https");
-
-  isPatched = true;
-}
-
-// --- MAIN CLASS EXPORT ---
-
-class Dropout {
-  constructor(config = {}) {
-    if (instance) return instance;
-
-    if (!config.apiKey || !config.projectId) {
-      console.warn("[Dropout] Missing apiKey or projectId. Tracking disabled.");
-      return;
-    }
-
-    // Update Global Configuration
-    activeConfig.apiKey = config.apiKey;
-    activeConfig.projectId = config.projectId;
-    if (config.privacyMode) activeConfig.privacyMode = config.privacyMode;
-    activeConfig.debug = config.debug || false;
-
-    // Initialize Identity
-    if (!GLOBAL_OBJ.__dropout_session_id__) {
-      GLOBAL_OBJ.__dropout_session_id__ = generateSessionId();
-    }
 
-    // Apply the patch
-    if (activeConfig.debug) console.log(`[Dropout] 🟢 Initialized for Project: ${config.projectId}`);
-    applyPatch();
-    instance = this;
+    patchNodeRequest(https, 'https');
+    patchNodeRequest(http, 'http');
+    this.log("✅ Patch Applied: http/https");
   }
 }
 
-// Auto-Start
+// Auto-Start (Node Preload)
 if (process.env.DROPOUT_PROJECT_ID && process.env.DROPOUT_API_KEY) {
   new Dropout({
     projectId: process.env.DROPOUT_PROJECT_ID,