securenow 5.12.2 → 5.15.0

package/CONSUMING-APPS-GUIDE.md

@@ -175,37 +175,37 @@ SECURENOW_LOGGING_ENABLED=1 SECURENOW_APPID=express-app node app.js
 
 ### Next.js (App Router)
 
-**1. Create `instrumentation.ts` in project root:**
+**1. Run `npx securenow init`** or create `instrumentation.ts` in your project root:
 
 ```typescript
 // instrumentation.ts
 export async function register() {
   if (process.env.NEXT_RUNTIME === 'nodejs') {
-    process.env.SECURENOW_LOGGING_ENABLED = '1';
-    await import('securenow/register');
+    const { registerSecureNow } = require('securenow/nextjs');
+    registerSecureNow();
   }
 }
 ```
 
-**2. Enable in `next.config.js`:**
+**2. Update `next.config.js` with `withSecureNow()`:**
 
 ```javascript
-/** @type {import('next').NextConfig} */
-const nextConfig = {
-  experimental: {
-    instrumentationHook: true,
-  },
-};
+const { withSecureNow } = require('securenow/nextjs-webpack-config');
 
-module.exports = nextConfig;
+module.exports = withSecureNow({
+  // your existing config
+});
 ```
 
+This auto-detects Next.js 14 vs 15 and sets the correct `serverExternalPackages` / `experimental.serverComponentsExternalPackages` config.
+
 **3. Add to `.env.local`:**
 
 ```bash
 SECURENOW_LOGGING_ENABLED=1
 SECURENOW_APPID=my-nextjs-app
 SECURENOW_INSTANCE=http://localhost:4318
+SECURENOW_API_KEY=snk_live_abc123...
 ```
 
 **4. Use in API routes:**
@@ -414,15 +414,21 @@ Add your API key to `.env`:
 SECURENOW_API_KEY=snk_live_abc123...
 ```
 
-The firewall activates automatically on startup and syncs the blocklist every 60 seconds:
+The firewall activates automatically on startup and syncs the blocklist using a version-based protocol:
 
 ```
 [securenow] Firewall: ENABLED
 [securenow] Firewall: Layer 1 (HTTP 403)      active
-[securenow] Firewall: synced 142 blocked IPs
+[securenow] Firewall: synced 142 blocked IPs (138 exact + 4 CIDR ranges)
 ```
 
-Blocked IPs get a 403 Forbidden response. No code changes needed — works with Express, Next.js, Fastify, and all Node.js frameworks.
+Blocked IPs get a 403 Forbidden with a full security alert page. Changes propagate in 10-15 seconds. No code changes needed -- works with Express, Next.js, Nuxt, Fastify, and all Node.js frameworks.
+
+**Firewall-only mode** (no tracing overhead):
+
+```bash
+node -r securenow/firewall-only app.js
+```
 
 See the [Firewall Guide](./docs/FIREWALL-GUIDE.md) for advanced layers (TCP blocking, iptables, Cloud WAF).