securenow 5.6.0 → 5.7.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "securenow",
-  "version": "5.6.0",
-  "description": "OpenTelemetry instrumentation for Node.js and Next.js - Send traces and logs to any OTLP-compatible backend",
+  "version": "5.7.0",
+  "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",
   "types": "register.d.ts",
@@ -29,7 +29,11 @@
     "node",
     "express",
     "fastify",
-    "nestjs"
+    "nestjs",
+    "nuxt",
+    "nuxt3",
+    "nitro",
+    "vue"
   ],
   "exports": {
     ".": {
@@ -65,6 +69,11 @@
     },
     "./nextjs-webpack-config": "./nextjs-webpack-config.js",
     "./package.json": "./package.json",
+    "./nuxt": {
+      "types": "./nuxt.d.ts",
+      "import": "./nuxt.mjs",
+      "default": "./nuxt.mjs"
+    },
     "./register-vite": "./register-vite.js",
     "./web-vite": {
       "import": "./web-vite.mjs",
@@ -85,6 +94,10 @@
     "nextjs-middleware.d.ts",
     "nextjs-wrapper.js",
     "nextjs-wrapper.d.ts",
+    "nextjs-webpack-config.js",
+    "nuxt.mjs",
+    "nuxt.d.ts",
+    "nuxt-server-plugin.mjs",
     "cli.js",
     "cli/",
     "free-trial-banner.js",
@@ -119,11 +132,15 @@
     "uuid": "^9.0.0"
   },
   "peerDependencies": {
-    "next": ">=13.0.0"
+    "next": ">=13.0.0",
+    "nuxt": ">=3.0.0"
   },
   "peerDependenciesMeta": {
     "next": {
       "optional": true
+    },
+    "nuxt": {
+      "optional": true
     }
   },
   "overrides": {

package/register.js

@@ -1,14 +1,49 @@
-// securenow/preload.js
+// securenow/register.js — the only preload customers need:
+//   node --require securenow/register app.js
+//
+// For ESM apps ("type": "module"), this file auto-registers the
+// OpenTelemetry ESM loader hook via module.register() (Node >=20.6).
+// On older Node versions it falls back to a warning.
 'use strict';
 
-// load .env into process.env before anything else
+// 1. load .env before anything else
 try {
   require('dotenv').config();
   console.log('[securenow] dotenv loaded from', process.env.DOTENV_CONFIG_PATH || '.env');
 } catch (e) {
-  // dotenv is optional — only warn if it’s missing
   console.warn('[securenow] dotenv not found or failed to load');
 }
 
-// then run the real tracer preload
+// 2. Auto-register the ESM loader hook so customers never need --import
+(() => {
+  try {
+    const fs = require('fs');
+    const path = require('path');
+    const pkgPath = path.resolve(process.cwd(), 'package.json');
+    if (!fs.existsSync(pkgPath)) return;
+
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    if (pkg.type !== 'module') return;
+
+    // Already registered via --import?
+    const execArgv = process.execArgv.join(' ');
+    if (execArgv.includes('hook.mjs') || execArgv.includes('import-in-the-middle')) return;
+
+    // Node >=20.6 exposes module.register() for programmatic ESM hooks
+    const mod = require('node:module');
+    if (typeof mod.register !== 'function') {
+      console.warn('[securenow] ESM app detected but Node %s lacks module.register().', process.version);
+      console.warn('[securenow]    Upgrade to Node >=20.6 or add: --import @opentelemetry/instrumentation/hook.mjs');
+      return;
+    }
+
+    const { pathToFileURL } = require('node:url');
+    mod.register('@opentelemetry/instrumentation/hook.mjs', pathToFileURL(__filename));
+    console.log('[securenow] ESM loader hook auto-registered (module.register)');
+  } catch (_) {
+    // Non-fatal — tracing.js will show its own ESM warning if the hook is missing
+  }
+})();
+
+// 3. Run the OTel SDK setup
 require('./tracing');

package/tracing.js

@@ -3,7 +3,9 @@
 /**
  * Preload with: node --require securenow/register app.js
  *
- * For ESM apps ("type": "module" in package.json), you MUST also add the ESM loader hook:
+ * Works for both CJS and ESM apps. On Node >=20.6 the ESM loader hook is
+ * auto-registered via module.register() — no --import flag needed.
+ * On Node 18 with "type": "module", add the hook manually:
  *   node --import @opentelemetry/instrumentation/hook.mjs --require securenow/register app.js
  *
  * Env:
@@ -21,7 +23,7 @@
  *   SECURENOW_STRICT=1  -> if no appid/name is provided in cluster, exit(1) so PM2 restarts the worker
  */
 
-const { diag, DiagConsoleLogger, DiagLogLevel } = require('@opentelemetry/api');
+const { diag, DiagConsoleLogger, DiagLogLevel, context, trace } = require('@opentelemetry/api');
 const { NodeSDK } = require('@opentelemetry/sdk-node');
 const { OTLPTraceExporter } = require('@opentelemetry/exporter-trace-otlp-http');
 const { OTLPLogExporter } = require('@opentelemetry/exporter-logs-otlp-http');
@@ -101,6 +103,9 @@ function redactGraphQLQuery(query, sensitiveFields = DEFAULT_SENSITIVE_FIELDS) {
 }
 
 // -------- ESM detection --------
+// register.js auto-registers the hook via module.register() on Node >=20.6.
+// This warning only fires if BOTH --import AND module.register() were skipped
+// (e.g. Node 18, or require('securenow/tracing') called directly without register.js).
 (() => {
   try {
     const fs = require('fs');
@@ -110,11 +115,11 @@ function redactGraphQLQuery(query, sensitiveFields = DEFAULT_SENSITIVE_FIELDS) {
       const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
       if (pkg.type === 'module') {
         const execArgv = process.execArgv.join(' ');
-        const hasEsmHook = execArgv.includes('hook.mjs') || execArgv.includes('import-in-the-middle');
-        if (!hasEsmHook) {
-          console.warn('[securenow] ⚠️  ESM app detected ("type": "module") but no ESM loader hook found.');
-          console.warn('[securenow]    Instrumentations will NOT work without the ESM hook.');
-          console.warn('[securenow]    Fix: node --import @opentelemetry/instrumentation/hook.mjs --require securenow/register app.js');
+        const hasCliHook = execArgv.includes('hook.mjs') || execArgv.includes('import-in-the-middle');
+        const hasModuleRegister = typeof require('node:module').register === 'function';
+        if (!hasCliHook && !hasModuleRegister) {
+          console.warn('[securenow] ⚠️  ESM app detected ("type": "module") but no ESM loader hook available.');
+          console.warn('[securenow]    Upgrade to Node >=20.6 (recommended) or add: --import @opentelemetry/instrumentation/hook.mjs');
         }
       }
     }
@@ -363,11 +368,14 @@ if (loggingEnabled) {
   const SEV = { DEBUG: 5, INFO: 9, WARN: 13, ERROR: 17 };
   function _emit(sn, st, args) {
     try {
+      const activeCtx = context.active();
+      const spanCtx = trace.getSpanContext(activeCtx);
       _logger.emit({
         severityNumber: sn,
         severityText: st,
         body: args.map(a => (typeof a === 'object' && a !== null) ? JSON.stringify(a) : String(a)).join(' '),
         attributes: { 'log.source': 'console', 'log.method': st.toLowerCase() },
+        ...(spanCtx && { context: activeCtx }),
       });
     } catch (_) {}
   }