securenow 7.6.5 → 7.6.6

package/cli/auth.js

@@ -237,7 +237,7 @@ async function login(args, flags) {
     const email = payload?.email || 'unknown';
     const exp = payload?.exp ? payload.exp * 1000 : null;
 
-    config.setAuth(token, email, exp, { local });
+    config.setAuth(token, email, exp, { local, enableFirewall: true });
     if (local) config.ensureLocalGitignore();
     console.log('');
     ui.success(`Logged in as ${ui.c.bold(email)}`);
@@ -255,7 +255,7 @@ async function login(args, flags) {
     const email = payload?.email || 'unknown';
     const exp = payload?.exp ? payload.exp * 1000 : null;
 
-    config.setAuth(token, email, exp, { local, app });
+    config.setAuth(token, email, exp, { local, app, enableFirewall: true });
     if (apiKey) config.setApiKey(apiKey, { local });
     if (local) config.ensureLocalGitignore();
     console.log('');

package/cli/config.js

@@ -101,11 +101,22 @@ function saveCredentials(creds, { local = false } = {}) {
   saveJSON(targetFile, appConfig.withCredentialDefaults(creds) || {});
 }
 
-function ensureCredentialDefaults({ local } = {}) {
+function withOnboardingFirewallEnabled(creds) {
+  const payload = appConfig.withCredentialDefaults(creds || {}) || {};
+  payload.config = payload.config || {};
+  payload.config.firewall = payload.config.firewall || {};
+  payload.config.firewall.enabled = true;
+  return payload;
+}
+
+function ensureCredentialDefaults({ local, enableFirewall = false } = {}) {
   const useLocal = local === true || (local == null && hasLocalCredentials());
   const targetFile = credentialsFileForLocal(useLocal);
   const existing = loadJSON(targetFile);
-  saveJSON(targetFile, appConfig.withCredentialDefaults(existing || {}) || {});
+  const payload = enableFirewall
+    ? withOnboardingFirewallEnabled(existing || {})
+    : appConfig.withCredentialDefaults(existing || {}) || {};
+  saveJSON(targetFile, payload);
 }
 
 function clearCredentials({ local } = {}) {
@@ -132,7 +143,7 @@ function getToken() {
   return creds.token;
 }
 
-function setAuth(token, email, expiresAt, { local = false, app = null } = {}) {
+function setAuth(token, email, expiresAt, { local = false, app = null, enableFirewall = false } = {}) {
   const targetFile = credentialsFileForLocal(local);
   const payload = { ...loadJSON(targetFile), token, email, expiresAt };
   if (app && (app.key || app.name || app.instance)) {
@@ -142,7 +153,10 @@ function setAuth(token, email, expiresAt, { local = false, app = null } = {}) {
       instance: app.instance || null,
     };
   }
-  saveCredentials(payload, { local });
+  saveJSON(
+    targetFile,
+    enableFirewall ? withOnboardingFirewallEnabled(payload) : appConfig.withCredentialDefaults(payload) || {}
+  );
 }
 
 function getApp() {
@@ -154,7 +168,7 @@ function setApiKey(apiKey, { local } = {}) {
   const useLocal = local === true || (local == null && hasLocalCredentials());
   const targetFile = credentialsFileForLocal(useLocal);
   const existing = loadJSON(targetFile);
-  saveJSON(targetFile, appConfig.withCredentialDefaults({ ...existing, apiKey }) || { apiKey });
+  saveJSON(targetFile, withOnboardingFirewallEnabled({ ...existing, apiKey }));
 }
 
 function clearApiKey({ local } = {}) {
@@ -238,6 +252,7 @@ module.exports = {
   getAuthSource,
   hasLocalCredentials,
   ensureCredentialDefaults,
+  withOnboardingFirewallEnabled,
   ensureLocalGitignore,
   getApiUrl,
   getAppUrl,

package/cli/credentials.js

@@ -20,7 +20,7 @@ function buildRuntimeCredentials(options = {}) {
     options.env ||
     appConfig.resolveDeploymentEnvironment() ||
     'production';
-  const runtime = appConfig.withCredentialDefaults({
+  const runtime = config.withOnboardingFirewallEnabled({
     apiKey: creds.apiKey || null,
     app: {
       key: creds.app?.key || null,
@@ -33,6 +33,10 @@ function buildRuntimeCredentials(options = {}) {
         ...(creds.config?.runtime || {}),
         deploymentEnvironment,
       },
+      firewall: {
+        ...(creds.config?.firewall || {}),
+        enabled: true,
+      },
     },
     _securenow: {
       ...(creds._securenow || {}),

package/cli/init.js

@@ -86,7 +86,7 @@ async function init(_args, flags) {
 }
 
 function initCredentials(flags) {
-  config.ensureCredentialDefaults({ local: true });
+  config.ensureCredentialDefaults({ local: true, enableFirewall: true });
   config.ensureLocalGitignore();
   const creds = config.loadCredentials();
   creds.config = creds.config || {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "7.6.5",
+  "version": "7.6.6",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",