@contrast/protect 1.28.0 → 1.28.1

package/lib/esm-loader.mjs

@@ -14,4 +14,57 @@
  */
 
 import esmHooks from '@contrast/esm-hooks';
-export const { getSource, transformSource, load } = esmHooks();
+import { createRequire } from 'node:module';
+
+const ERROR_MESSAGE = 'A fatal agent installation error has occurred. The application will be run without instrumentation.';
+
+let getSource = async function getSource(url, context, defaultGetSource) {
+  return defaultGetSource(url, context, defaultGetSource);
+};
+
+let transformSource = async function transformSource(url, context, defaultTransformSource) {
+  return defaultTransformSource(url, context, defaultTransformSource);
+};
+
+let load = async function load(url, context, defaultLoad) {
+  return defaultLoad(url, context, defaultLoad);
+};
+
+const require = createRequire(import.meta.url);
+const { name: agentName, version: agentVersion } = require('../package.json');
+const core = { agentName, agentVersion };
+try {
+  require('@contrast/core/lib/events')(core);
+  require('@contrast/config')(core);
+  require('@contrast/logger').default(core);
+
+  // @contrast/info ?
+  require('@contrast/core/lib/agent-info')(core);
+  require('@contrast/core/lib/system-info')(core);
+  require('@contrast/core/lib/app-info')(core);
+  require('@contrast/core/lib/sensitive-data-masking')(core);
+  require('@contrast/core/lib/is-agent-path')(core);
+  require('@contrast/core/lib/capture-stacktrace')(core);
+
+  require('@contrast/patcher')(core);
+  require('@contrast/rewriter')(core); // merge contrast-methods?
+  require('@contrast/core/lib/contrast-methods')(core); // can we remove dependency on patcher?
+
+  require('@contrast/dep-hooks')(core);
+  require('@contrast/scopes')(core);
+  require('@contrast/deadzones')(core);
+  require('@contrast/reporter').default(core);
+  require('@contrast/instrumentation')(core);
+
+  // TODO: i think we still need to INSTALL components.
+  ({ getSource, transformSource, load } = esmHooks(core));
+} catch (err) {
+  // TODO: Consider proper UNINSTALLATION and normal startup w/o agent
+  if (core.logger) {
+    core.logger.error({ err }, ERROR_MESSAGE);
+  } else {
+    console.error(new Error(ERROR_MESSAGE, { cause: err }));
+  }
+}
+
+export { getSource, transformSource, load };

package/lib/index.d.ts

@@ -131,4 +131,6 @@ export interface Protect {
   version: string;
 }
 
-export default function(core: Core): ProtectMessage;
+declare function init(core: Core): ProtectMessage;
+
+export = init;

package/lib/input-analysis/handlers.js

@@ -301,7 +301,8 @@ module.exports = function(core) {
     const { policy: { rulesMask } } = sourceContext;
 
     const cookiesArr = Object.entries(cookies).reduce((acc, [key, value]) => {
-      acc.push(key, value);
+      // things like booleans will cause agent-lib to throw
+      if (isString(value)) acc.push(key, value);
       return acc;
     }, []);
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@contrast/protect",
-  "version": "1.28.0",
+  "version": "1.28.1",
   "description": "Contrast service providing framework-agnostic Protect support",
   "license": "SEE LICENSE IN LICENSE",
   "author": "Contrast Security <nodejs@contrastsecurity.com> (https://www.contrastsecurity.com)",
@@ -19,8 +19,8 @@
   "dependencies": {
     "@contrast/agent-lib": "^7.0.1",
     "@contrast/common": "1.15.1",
-    "@contrast/core": "1.26.0",
-    "@contrast/esm-hooks": "1.22.0",
+    "@contrast/core": "1.26.1",
+    "@contrast/esm-hooks": "1.22.1",
     "@contrast/scopes": "1.4.0",
     "ipaddr.js": "^2.0.1",
     "semver": "^7.3.7"