botversion-sdk 1.0.4 → 1.0.6

package/interceptor.js

@@ -1,16 +1,17 @@
 // botversion-sdk/interceptor.js
 "use strict";
 
+const reportedEndpoints = new Set();
+
 /**
  * Attaches a middleware to the Express app that
  * silently intercepts every request and reports
- * new endpoints to BotVersion platform
+ * new endpoints to BotVersion platform.
+ * Auth and user context are handled client-side — not here.
  */
 function attachInterceptor(app, client, options) {
   options = options || {};
-  var getUserContext = options.getUserContext || null;
 
-  // Paths to always ignore
   const ignorePaths = [
     "/health",
     "/favicon.ico",
@@ -19,12 +20,7 @@ function attachInterceptor(app, client, options) {
     "/public",
   ].concat(options.exclude || []);
 
-  // Track which endpoints we have already reported
-  // so we don't spam the platform on every request
-  const reportedEndpoints = new Set();
-
   app.use(function botVersionInterceptor(req, res, next) {
-    // Skip ignored paths
     const path = req.path || req.url || "";
     const shouldIgnore = ignorePaths.some(function (p) {
       return path.startsWith(p);
@@ -34,21 +30,15 @@ function attachInterceptor(app, client, options) {
       return next();
     }
 
-    // Skip non-API paths if configured
     if (options.apiPrefix && !path.startsWith(options.apiPrefix)) {
       return next();
     }
 
     const method = req.method.toUpperCase();
-
-    // Normalize path — replace IDs with :param
     const normalizedPath = normalizePath(path);
     const endpointKey = method + ":" + normalizedPath;
 
-    // Only report if we haven't seen this endpoint before
     const bodyStructure = buildBodyStructure(req.body);
-    console.log("[DEBUG] endpoint:", endpointKey);
-    console.log("[DEBUG] bodyStructure:", JSON.stringify(bodyStructure));
     const bodyKey =
       endpointKey +
       ":" +
@@ -59,7 +49,6 @@ function attachInterceptor(app, client, options) {
     if (!reportedEndpoints.has(bodyKey)) {
       reportedEndpoints.add(bodyKey);
 
-      // Convert to JSON Schema format so Gemini can read field names
       const jsonSchema = bodyStructure
         ? {
             type: "object",
@@ -78,9 +67,8 @@ function attachInterceptor(app, client, options) {
             ),
           }
         : null;
-      console.log("[DEBUG] jsonSchema:", JSON.stringify(jsonSchema));
 
-      // Report async — don't block the request
+      // Report async — never block the request
       setImmediate(function () {
         client
           .updateEndpoint({
@@ -90,65 +78,13 @@ function attachInterceptor(app, client, options) {
             detectedBy: "runtime",
           })
           .catch(function (err) {
-            // Silent fail — never crash customer's app
-            if (options.debug) {
-              console.warn(
-                "[BotVersion SDK] Failed to report endpoint:",
-                err.message,
-              );
-            }
+            console.error("[botversion] update_endpoint failed:", err.message);
           });
       });
     }
 
     next();
   });
-  // Attached to app so SaaS owner can call it in their agent route
-  app.executeAgentCall = function (req, call) {
-    var userContext = getUserContext
-      ? getUserContext(req)
-      : extractDefaultContext(req);
-
-    return client
-      .agentChat({
-        message: req.body.message,
-        conversationHistory: req.body.conversationHistory || [],
-        pageContext: req.body.pageContext || {},
-        userContext: userContext,
-      })
-      .then(function (response) {
-        // Handle plain chat/greeting responses from ai-response.js
-        if (response.answer) {
-          return { action: "RESPOND", message: response.answer };
-        }
-
-        // Handle agent action
-        if (response.action !== "EXECUTE_CALL") return response;
-
-        return makeLocalCall(req, response.call).then(function (result) {
-          return client
-            .agentToolResult(
-              response.sessionToken,
-              result,
-              response.sessionData,
-            )
-            .then(function (toolResponse) {
-              if (toolResponse.action === "EXECUTE_CALL") {
-                return makeLocalCall(req, toolResponse.call).then(
-                  function (result2) {
-                    return client.agentToolResult(
-                      toolResponse.sessionToken,
-                      result2,
-                      toolResponse.sessionData,
-                    );
-                  },
-                );
-              }
-              return toolResponse;
-            });
-        });
-      });
-  };
 }
 
 /**
@@ -172,7 +108,7 @@ function normalizePath(path) {
       // Numeric ID
       if (/^\d+$/.test(segment)) return ":id";
 
-      // cuid pattern (your system uses these)
+      // cuid pattern
       if (/^c[a-z0-9]{20,}$/i.test(segment)) return ":id";
 
       // MongoDB ObjectId
@@ -201,7 +137,6 @@ function buildBodyStructure(body) {
   const structure = {};
 
   Object.keys(body).forEach(function (key) {
-    // Never store sensitive values
     const sensitiveKeys = [
       "password",
       "token",
@@ -237,69 +172,59 @@ function buildBodyStructure(body) {
   return structure;
 }
 
-module.exports = {
-  attachInterceptor,
-  normalizePath,
-  buildBodyStructure,
-};
-
-// Default userContext extraction — reads common patterns
-// SaaS owner can override this with getUserContext option
-function extractDefaultContext(req) {
-  var user = req.user || (req.session && req.session.user) || {};
-  return {
-    userId: user.id || user.userId || user._id || null,
-    email: user.email || null,
-    role: user.role || user.userRole || null,
-    name: user.name || user.username || null,
-  };
-}
+function attachNextJsInterceptor(client, options) {
+  try {
+    const http = require("http");
+    const originalEmit = http.Server.prototype.emit;
 
-// Makes the HTTP call locally on the SaaS owner's server
-// forwarding the user's real auth headers
-function makeLocalCall(req, call) {
-  return new Promise(function (resolve) {
-    var http = require("http");
-    var https = require("https");
-
-    var body = call.body ? JSON.stringify(call.body) : null;
-    var isHttps = req.protocol === "https" || req.secure;
-    var lib = isHttps ? https : http;
-
-    var options = {
-      hostname: "127.0.0.1",
-      port: process.env.PORT || 3000,
-      path: call.path,
-      method: call.method,
-      headers: {
-        "Content-Type": "application/json",
-        // Forward the user's real auth token — this is the key part
-        Authorization: req.headers["authorization"] || "",
-        Cookie: req.headers["cookie"] || "",
-      },
-    };
+    http.Server.prototype.emit = function (event, req, res) {
+      if (event === "request") {
+        const path = req.url ? req.url.split("?")[0] : "";
+        const method = req.method ? req.method.toUpperCase() : "";
 
-    if (body) options.headers["Content-Length"] = Buffer.byteLength(body);
+        const shouldIgnore = (options.exclude || [])
+          .concat(["/health", "/favicon.ico", "/_next", "/static", "/public"])
+          .some(function (p) {
+            return path.startsWith(p);
+          });
 
-    var apiReq = lib.request(options, function (apiRes) {
-      var data = "";
-      apiRes.on("data", function (chunk) {
-        data += chunk;
-      });
-      apiRes.on("end", function () {
-        try {
-          resolve({ status: apiRes.statusCode, data: JSON.parse(data) });
-        } catch {
-          resolve({ status: apiRes.statusCode, data: { raw: data } });
+        const isApiPath = path.startsWith(options.apiPrefix || "/api");
+
+        if (!shouldIgnore && isApiPath) {
+          const normalizedPath = normalizePath(path);
+          const endpointKey = method + ":" + normalizedPath;
+
+          if (!reportedEndpoints.has(endpointKey)) {
+            reportedEndpoints.add(endpointKey);
+
+            setImmediate(function () {
+              client
+                .updateEndpoint({
+                  method: method,
+                  path: normalizedPath,
+                  detectedBy: "runtime",
+                })
+                .catch(function (err) {
+                  console.error("[botversion] update failed:", err.message);
+                });
+            });
+          }
         }
-      });
-    });
-
-    apiReq.on("error", function (err) {
-      resolve({ status: 500, error: err.message });
-    });
+      }
 
-    if (body) apiReq.write(body);
-    apiReq.end();
-  });
+      return originalEmit.apply(this, arguments);
+    };
+  } catch (err) {
+    console.error(
+      "[botversion] failed to attach Next.js interceptor:",
+      err.message,
+    );
+  }
 }
+
+module.exports = {
+  attachInterceptor,
+  attachNextJsInterceptor,
+  normalizePath,
+  buildBodyStructure,
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "botversion-sdk",
-  "version": "1.0.4",
+  "version": "1.0.6",
   "description": "BotVersion SDK — auto-detect and register your API endpoints",
   "main": "index.js",
   "bin": {
@@ -16,6 +16,8 @@
   "author": "Saurav Dhakal",
   "license": "MIT",
   "dependencies": {
+    "@babel/parser": "^7.29.3",
+    "@babel/traverse": "^7.29.0",
     "express": "^4.18.2"
   }
 }