securenow 7.5.0 → 7.5.1

package/cli/diagnostics.js

@@ -39,6 +39,7 @@ function resolvedConfig() {
   const apiUrl = config.getApiUrl();
   const loggingEnabled = !/^(0|false)$/i.test(String(process.env.SECURENOW_LOGGING_ENABLED ?? ''));
   const captureBody = !/^(0|false)$/i.test(String(process.env.SECURENOW_CAPTURE_BODY ?? ''));
+  const captureMultipart = !/^(0|false)$/i.test(String(process.env.SECURENOW_CAPTURE_MULTIPART ?? ''));
   const firewallEnabled =
     !!apiKey && process.env.SECURENOW_FIREWALL_ENABLED !== '0';
 
@@ -52,6 +53,7 @@ function resolvedConfig() {
     apiUrl,
     loggingEnabled,
     captureBody,
+    captureMultipart,
     firewallEnabled,
     firewallLayers: {
       http: firewallEnabled,
@@ -62,6 +64,21 @@ function resolvedConfig() {
   };
 }
 
+function maskSecret(value) {
+  if (!value) return '';
+  const text = String(value);
+  if (text.length <= 12) return '***';
+  return `${text.slice(0, 12)}...${text.slice(-4)}`;
+}
+
+function redactConfig(cfg) {
+  return {
+    ...cfg,
+    headers: cfg.headers ? '***' : '',
+    apiKey: cfg.apiKey ? maskSecret(cfg.apiKey) : '',
+  };
+}
+
 function parseHeaders(str) {
   const out = {};
   if (!str) return out;
@@ -305,6 +322,7 @@ function env(_args, flags) {
     SECURENOW_API_URL: cfg.apiUrl,
     SECURENOW_LOGGING_ENABLED: cfg.loggingEnabled ? '1' : '0',
     SECURENOW_CAPTURE_BODY: cfg.captureBody ? '1' : '0',
+    SECURENOW_CAPTURE_MULTIPART: cfg.captureMultipart ? '1' : '0',
     SECURENOW_NO_UUID: process.env.SECURENOW_NO_UUID || `(auto: ${require('../app-config').resolveNoUuid() ? '1' : '0'})`,
     SECURENOW_FIREWALL_TCP: process.env.SECURENOW_FIREWALL_TCP || '0',
     SECURENOW_FIREWALL_IPTABLES: process.env.SECURENOW_FIREWALL_IPTABLES || '0',
@@ -313,7 +331,7 @@ function env(_args, flags) {
   };
 
   if (flags.json) {
-    ui.json({ resolved: cfg, env: vars });
+    ui.json({ resolved: redactConfig(cfg), env: vars });
     return;
   }
 
@@ -324,6 +342,7 @@ function env(_args, flags) {
     ['Logs endpoint', cfg.logsEndpoint],
     ['Logging', cfg.loggingEnabled ? ui.c.green('enabled') : ui.c.dim('disabled')],
     ['Body capture', cfg.captureBody ? ui.c.green('enabled') : ui.c.dim('disabled')],
+    ['Multipart capture', cfg.captureMultipart ? ui.c.green('enabled') : ui.c.dim('disabled')],
     ['Firewall', cfg.firewallEnabled ? ui.c.green('enabled') : ui.c.dim('disabled (no API key)')],
   ]);
 
@@ -377,7 +396,7 @@ async function doctor(_args, flags) {
   const ok = checks.every((c) => c.ok);
 
   if (flags.json) {
-    ui.json({ ok, resolved: cfg, checks, warnings });
+    ui.json({ ok, resolved: redactConfig(cfg), checks, warnings });
     process.exit(ok ? 0 : 1);
   }
 

package/cli/init.js

@@ -1,24 +1,52 @@
 'use strict';
 
-const fs = require('fs');
-const path = require('path');
-const ui = require('./ui');
-
-const INSTRUMENTATION_JS = `export async function register() {
-  if (process.env.NEXT_RUNTIME === 'nodejs') {
-    const { registerSecureNow } = require('securenow/nextjs');
-    registerSecureNow();
-  }
-}
-`;
-
-const INSTRUMENTATION_TS = `export async function register() {
-  if (process.env.NEXT_RUNTIME === 'nodejs') {
-    const { registerSecureNow } = require('securenow/nextjs');
-    registerSecureNow();
-  }
-}
-`;
+const fs = require('fs');
+const path = require('path');
+const ui = require('./ui');
+const config = require('./config');
+
+const DEFAULT_ENV = {
+  SECURENOW_LOGGING_ENABLED: '1',
+  SECURENOW_CAPTURE_BODY: '1',
+  SECURENOW_CAPTURE_MULTIPART: '1',
+  SECURENOW_FIREWALL_ENABLED: '1',
+};
+
+const INSTRUMENTATION_JS = `import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+
+export async function register() {
+  if (process.env.NEXT_RUNTIME !== 'nodejs') return;
+
+  process.env.SECURENOW_LOGGING_ENABLED ??= '1';
+  process.env.SECURENOW_CAPTURE_BODY ??= '1';
+  process.env.SECURENOW_CAPTURE_MULTIPART ??= '1';
+  process.env.SECURENOW_FIREWALL_ENABLED ??= '1';
+
+  const { registerSecureNow } = require('securenow/nextjs');
+  registerSecureNow({ captureBody: true });
+  require('securenow/nextjs-auto-capture');
+}
+`;
+
+const INSTRUMENTATION_TS = `import { createRequire } from 'node:module';
+
+const require = createRequire(import.meta.url);
+
+export async function register() {
+  if (process.env.NEXT_RUNTIME !== 'nodejs') return;
+
+  process.env.SECURENOW_LOGGING_ENABLED ??= '1';
+  process.env.SECURENOW_CAPTURE_BODY ??= '1';
+  process.env.SECURENOW_CAPTURE_MULTIPART ??= '1';
+  process.env.SECURENOW_FIREWALL_ENABLED ??= '1';
+
+  const { registerSecureNow } = require('securenow/nextjs');
+  registerSecureNow({ captureBody: true });
+  require('securenow/nextjs-auto-capture');
+}
+`;
 
 function detectProject(dir) {
   const pkgPath = path.join(dir, 'package.json');
@@ -165,37 +193,52 @@ function initNode(dir, project) {
   }
 }
 
-function initEnv(dir, flags) {
-  const envFiles = ['.env', '.env.local'];
-  let envPath = null;
-
-  for (const f of envFiles) {
-    const p = path.join(dir, f);
-    if (fs.existsSync(p)) {
-      const content = fs.readFileSync(p, 'utf8');
-      if (content.includes('SECURENOW_API_KEY')) {
-        ui.info(`SECURENOW_API_KEY already set in ${f}`);
-        return;
-      }
-      envPath = p;
-      break;
-    }
-  }
-
-  if (!envPath) envPath = path.join(dir, '.env.local');
-
-  const apiKey = flags.key || flags['api-key'] || '';
-  if (apiKey) {
-    const existing = fs.existsSync(envPath) ? fs.readFileSync(envPath, 'utf8') : '';
-    const sep = existing && !existing.endsWith('\n') ? '\n' : '';
-    fs.appendFileSync(envPath, `${sep}SECURENOW_API_KEY=${apiKey}\n`, 'utf8');
-    ui.success(`Added SECURENOW_API_KEY to ${path.basename(envPath)}`);
-  } else {
-    ui.warn(`Add your API key to ${path.basename(envPath)}:`);
-    console.log('');
-    console.log('  SECURENOW_API_KEY=snk_live_...');
-    console.log('');
-  }
-}
+function initEnv(dir, flags) {
+  const envFiles = ['.env', '.env.local'];
+  let envPath = null;
+
+  for (const f of envFiles) {
+    const p = path.join(dir, f);
+    if (fs.existsSync(p)) {
+      envPath = p;
+      break;
+    }
+  }
+
+  if (!envPath) envPath = path.join(dir, '.env.local');
+
+  const existing = fs.existsSync(envPath) ? fs.readFileSync(envPath, 'utf8') : '';
+  const additions = [];
+  for (const [key, value] of Object.entries(DEFAULT_ENV)) {
+    if (!hasEnvKey(existing, key)) additions.push(`${key}=${value}`);
+  }
+
+  const explicitApiKey = flags.key || flags['api-key'] || '';
+  const hasApiKey = hasEnvKey(existing, 'SECURENOW_API_KEY');
+  if (explicitApiKey && !hasApiKey) additions.push(`SECURENOW_API_KEY=${explicitApiKey}`);
+
+  if (additions.length > 0) {
+    const sep = existing && !existing.endsWith('\n') ? '\n' : '';
+    fs.appendFileSync(envPath, `${sep}${additions.join('\n')}\n`, 'utf8');
+    ui.success(`Updated ${path.basename(envPath)} with SecureNow defaults`);
+  } else {
+    ui.info(`${path.basename(envPath)} already contains SecureNow defaults`);
+  }
+
+  if (hasApiKey || explicitApiKey) {
+    ui.info(`SECURENOW_API_KEY is set in ${path.basename(envPath)}`);
+  } else if (config.getApiKey()) {
+    ui.info('Using firewall API key from project .securenow/credentials.json');
+  } else {
+    ui.warn(`Add your API key to ${path.basename(envPath)}:`);
+    console.log('');
+    console.log('  SECURENOW_API_KEY=snk_live_...');
+    console.log('');
+  }
+}
+
+function hasEnvKey(content, key) {
+  return new RegExp(`^\\s*${key}\\s*=`, 'm').test(content || '');
+}
 
 module.exports = { init };

package/cli/ui.js

@@ -111,13 +111,21 @@ function keyValue(pairs) {
   }
 }
 
-function heading(text) {
-  console.log(`\n${c.bold(c.cyan(text))}`);
-}
-
-function subheading(text) {
-  console.log(`\n  ${c.bold(text)}`);
-}
+function heading(text) {
+  console.log(`\n${c.bold(c.cyan(text))}`);
+}
+
+function header(text) {
+  heading(text);
+}
+
+function bold(text) {
+  return c.bold(text);
+}
+
+function subheading(text) {
+  console.log(`\n  ${c.bold(text)}`);
+}
 
 function success(msg) {
   console.log(`${c.green('✓')} ${msg}`);
@@ -361,11 +369,13 @@ function durationColor(ms) {
 module.exports = {
   c,
   NO_COLOR,
-  stripAnsi,
-  table,
-  keyValue,
-  heading,
-  subheading,
+  stripAnsi,
+  table,
+  keyValue,
+  heading,
+  header,
+  bold,
+  subheading,
   success,
   error,
   warn,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "7.5.0",
+  "version": "7.5.1",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",