securenow 5.11.0 → 5.11.2

package/nextjs.js

@@ -37,7 +37,7 @@
  *    SECURENOW_INSTANCE=http://your-otlp-backend:4318
  */
 
-const { v4: uuidv4 } = require('uuid');
+const { randomUUID } = require('crypto');
 
 const env = k => process.env[k] ?? process.env[k.toUpperCase()] ?? process.env[k.toLowerCase()];
 
@@ -157,9 +157,9 @@ function registerSecureNow(options = {}) {
     // service.name
     let serviceName;
     if (baseName) {
-      serviceName = noUuid ? baseName : `${baseName}-${uuidv4()}`;
+      serviceName = noUuid ? baseName : `${baseName}-${randomUUID()}`;
     } else {
-      serviceName = `nextjs-app-${uuidv4()}`;
+      serviceName = `nextjs-app-${randomUUID()}`;
       console.warn('[securenow] ⚠️  No SECURENOW_APPID or OTEL_SERVICE_NAME provided. Using fallback: %s', serviceName);
       console.warn('[securenow] 💡 Set SECURENOW_APPID=your-app-name in .env.local for better tracking');
     }
@@ -521,8 +521,8 @@ function registerSecureNow(options = {}) {
           } catch (_) {}
 
           // Graceful shutdown for logs
-          process.on('SIGTERM', async () => { try { await loggerProvider.shutdown(); } catch (_) {} });
-          process.on('SIGINT', async () => { try { await loggerProvider.shutdown(); } catch (_) {} });
+          process.on('SIGTERM', async () => { try { await loggerProvider.shutdown(); } catch (_) {} try { require('./firewall').shutdown(); } catch (_) {} });
+          process.on('SIGINT', async () => { try { await loggerProvider.shutdown(); } catch (_) {} try { require('./firewall').shutdown(); } catch (_) {} });
         } catch (e) {
           console.warn('[securenow] ⚠️  Logging setup failed (missing @opentelemetry/exporter-logs-otlp-http or @opentelemetry/sdk-logs):', e.message);
         }
@@ -541,6 +541,26 @@ function registerSecureNow(options = {}) {
       }
     } catch (_) {}
 
+    // Firewall — auto-activates when SECURENOW_API_KEY is set
+    const firewallApiKey = env('SECURENOW_API_KEY');
+    if (firewallApiKey && env('SECURENOW_FIREWALL_ENABLED') !== '0') {
+      try {
+        require('./firewall').init({
+          apiKey: firewallApiKey,
+          apiUrl: env('SECURENOW_API_URL') || 'https://api.securenow.ai',
+          syncInterval: parseInt(env('SECURENOW_FIREWALL_SYNC_INTERVAL'), 10) || 60,
+          failMode: env('SECURENOW_FIREWALL_FAIL_MODE') || 'open',
+          statusCode: parseInt(env('SECURENOW_FIREWALL_STATUS_CODE'), 10) || 403,
+          log: env('SECURENOW_FIREWALL_LOG') !== '0',
+          tcp: env('SECURENOW_FIREWALL_TCP') === '1',
+          iptables: env('SECURENOW_FIREWALL_IPTABLES') === '1',
+          cloud: env('SECURENOW_FIREWALL_CLOUD') || null,
+        });
+      } catch (e) {
+        console.warn('[securenow] Firewall init failed:', e.message);
+      }
+    }
+
     console.log('[securenow] ✅ OpenTelemetry started for Next.js → %s', tracesUrl);
     console.log('[securenow] 📊 Auto-capturing comprehensive request metadata:');
     console.log('[securenow]    • IP addresses (x-forwarded-for, x-real-ip, socket)');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "5.11.0",
+  "version": "5.11.2",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",