@contrast/config 1.44.0 → 1.46.0

package/lib/common.js

@@ -104,6 +104,7 @@ const mappings = {
       if (!isNaN(baseProbability)) return baseProbability;
     }
   },
+  'assess.stacktraces': (remoteData) => remoteData.assess?.report_stacktraces,
   'agent.logger.level': coerceLowerCase('logger.level'),
   'agent.logger.path': (remoteData) => remoteData.logger?.path,
   'agent.security_logger.syslog.enable': (remoteData) => remoteData.security_logger?.syslog?.enable,

package/lib/index.d.ts

@@ -206,6 +206,8 @@ export interface Config {
           /** Default: `./.contrast` */
           path: string;
         }
+        /** Default: `true` */
+        minify: boolean;
       };
       source_maps: {
         /** Default: `true` */

package/lib/options.js

@@ -500,6 +500,13 @@ Example - \`/opt/Contrast/contrast.log\` creates a log in the \`/opt/Contrast\`
     fn: toAbsolutePath,
     desc: "Set the directory in which to cache rewritten source code files. Defaults to `.contrast/` in the application's current working directory.",
   },
+  {
+    name: 'agent.node.rewrite.minify',
+    arg: '[false]',
+    default: true,
+    fn: castBoolean,
+    desc: 'Set to `false` to disable minification of rewritten source code files.'
+  },
   {
     name: 'agent.node.source_maps.enable',
     arg: '[false]',
@@ -575,6 +582,7 @@ Example - \`/opt/Contrast/contrast.log\` creates a log in the \`/opt/Contrast\`
     // effective based on local config and 'assess.sampling' TeamServer DTM
     name: 'assess.probabilistic_sampling.base_probability',
     arg: '<probability>',
+    /** @param {string} val */
     fn: (val) => {
       const p = parseFloat(val);
       if (p >= 0 && p <= 1) return p;
@@ -585,9 +593,24 @@ Example - \`/opt/Contrast/contrast.log\` creates a log in the \`/opt/Contrast\`
         });
       }
     },
-    default: 0.10,
+    default: 0.05,
     desc: 'A value p within the range [0, 1]. Each request will share same probability p of being sampled.',
   },
+  {
+    name: 'assess.probabilistic_sampling.event_detail',
+    arg: '<level>',
+    default: 'FULL',
+    fn: (value) => {
+      if (!value) return undefined;
+      value = String(value).toUpperCase();
+      const valids = new Set(['FULL', 'MINIMAL']);
+      if (valids.has(value)) {
+        return value;
+      }
+      throw new Error(`Invalid option assess.probabilistic_sampling.event_detail: value must be one of ${Array.from(valids)}`);
+    },
+    desc: 'Control the values captured by Assess vulnerability events. FULL captures more context by stringifying all values involved in dataflow activity which can add performance overhead. MINIMAL can improve performance by only capturing type name for non-string event values. FULL is the default.',
+  },
   {
     name: 'assess.probabilistic_sampling.route_monitor.enable',
     arg: '[true]',
@@ -754,8 +777,18 @@ Example - \`label1, label2, label3\``,
   {
     name: 'server.environment',
     arg: '<environment>',
-    // enum: ['QA', 'PRODUCTION', 'DEVELOPMENT'], none of the other agents validate this
-    fn: uppercase,
+    /** @param {string} val */
+    fn: (val) => {
+      if (!val) return val;
+
+      const valid = new Set(['QA', 'PRODUCTION', 'DEVELOPMENT']);
+      const normalized = uppercase(val);
+      if (!valid.has(normalized)) {
+        throw new Error(`Invalid option: server.environment must be one of ${Array.from(valid)}`);
+      }
+
+      return normalized;
+    },
     desc: `Set the environment directly to override the default set by the Contrast UI. This allows the user to configure the environment dynamically at startup rather than manually updating the Server in the Contrast UI themselves afterwards.
 Valid values include \`QA\`, \`PRODUCTION\` and \`DEVELOPMENT\`. For example, \`PRODUCTION\` registers this Server as running in a \`PRODUCTION\` environment, regardless of the organization's default environment in the Contrast UI.`,
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/config",
-  "version": "1.44.0",
+  "version": "1.46.0",
   "description": "An API for discovering Contrast agent configuration data",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@contrast/common": "1.32.0",
-    "@contrast/core": "1.49.0",
+    "@contrast/core": "1.51.0",
     "yaml": "^2.2.2"
   }
 }