securenow 7.6.7 → 7.6.8

package/nuxt-server-plugin.mjs

@@ -9,7 +9,7 @@
 
 import { NodeSDK } from '@opentelemetry/sdk-node';
 import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http';
-import { Resource } from '@opentelemetry/resources';
+import * as otelResources from '@opentelemetry/resources';
 import { SemanticResourceAttributes } from '@opentelemetry/semantic-conventions';
 import { HttpInstrumentation } from '@opentelemetry/instrumentation-http';
 import {
@@ -17,8 +17,8 @@ import {
   trace as otelTrace,
   SpanStatusCode,
 } from '@opentelemetry/api';
-import { v4 as uuidv4 } from 'uuid';
 import { createRequire } from 'node:module';
+import { randomUUID } from 'node:crypto';
 
 const nodeRequire = createRequire(import.meta.url);
 const appConfig = nodeRequire('./app-config');
@@ -27,6 +27,16 @@ const appConfig = nodeRequire('./app-config');
 
 const env = appConfig.env;
 
+function createResource(attributes) {
+  if (typeof otelResources.resourceFromAttributes === 'function') {
+    return otelResources.resourceFromAttributes(attributes);
+  }
+  if (typeof otelResources.Resource === 'function') {
+    return new otelResources.Resource(attributes);
+  }
+  throw new Error('Unsupported @opentelemetry/resources version');
+}
+
 const DEFAULT_SENSITIVE_FIELDS = [
   'password', 'passwd', 'pwd', 'secret', 'token', 'api_key', 'apikey',
   'access_token', 'auth', 'credentials', 'mysql_pwd', 'stripeToken',
@@ -79,9 +89,9 @@ export default defineNitroPlugin(async (nitroApp) => {
 
   let serviceName;
   if (baseName) {
-    serviceName = noUuid ? baseName : `${baseName}-${uuidv4()}`;
+    serviceName = noUuid ? baseName : `${baseName}-${randomUUID()}`;
   } else {
-    serviceName = `nuxt-app-${uuidv4()}`;
+    serviceName = `nuxt-app-${randomUUID()}`;
     console.warn(
       '[securenow] ⚠️  No app identity resolved. Using fallback: %s',
       serviceName,
@@ -91,7 +101,7 @@ export default defineNitroPlugin(async (nitroApp) => {
     );
   }
 
-  const serviceInstanceId = `${baseName || 'securenow'}-${uuidv4()}`;
+  const serviceInstanceId = `${baseName || 'securenow'}-${randomUUID()}`;
 
   // ── Endpoints ──
   const resolvedEndpoints = appConfig.resolveEndpoints({ endpoint: opts.endpoint || resolvedApp.instance });
@@ -101,7 +111,7 @@ export default defineNitroPlugin(async (nitroApp) => {
   const headers = resolvedEndpoints.headers;
 
   // ── Resource ──
-  const resource = new Resource({
+  const resource = createResource({
     [SemanticResourceAttributes.SERVICE_NAME]: serviceName,
     [SemanticResourceAttributes.SERVICE_INSTANCE_ID]: serviceInstanceId,
     [SemanticResourceAttributes.DEPLOYMENT_ENVIRONMENT]: deploymentEnvironment,
@@ -237,10 +247,10 @@ export default defineNitroPlugin(async (nitroApp) => {
       );
 
       const logExporter = new OTLPLogExporter({ url: logsUrl, headers });
-      loggerProvider = new LoggerProvider({ resource });
-      loggerProvider.addLogRecordProcessor(
-        new BatchLogRecordProcessor(logExporter),
-      );
+      loggerProvider = new LoggerProvider({
+        resource,
+        processors: [new BatchLogRecordProcessor(logExporter)],
+      });
 
       const logger = loggerProvider.getLogger('console', '1.0.0');
       const SEV = { DEBUG: 5, INFO: 9, WARN: 13, ERROR: 17 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "7.6.7",
+  "version": "7.6.8",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",
@@ -9,9 +9,6 @@
     "securenow": "cli.js",
     "securenow-mcp": "mcp/server.js"
   },
-  "scripts": {
-    "postinstall": "node postinstall.js || exit 0"
-  },
   "keywords": [
     "opentelemetry",
     "otel",
@@ -135,47 +132,49 @@
     "firewall-tcp.js",
     "firewall-iptables.js",
     "firewall-cloud.js",
-    "postinstall.js",
     "register-vite.js",
     "web-vite.mjs",
     "app-config.js",
-    "examples/",
-    "docs/",
     "README.md",
     "NPM_README.md",
-    "CONSUMING-APPS-GUIDE.md",
     "SKILL-CLI.md",
     "SKILL-API.md"
   ],
   "dependencies": {
-    "@opentelemetry/api": "1.7.0",
-    "@opentelemetry/api-logs": "0.47.0",
-    "@opentelemetry/auto-instrumentations-node": "0.47.0",
-    "@opentelemetry/exporter-logs-otlp-http": "0.47.0",
-    "@opentelemetry/exporter-trace-otlp-http": "0.47.0",
-    "@opentelemetry/instrumentation": "0.47.0",
-    "@opentelemetry/instrumentation-document-load": "0.47.0",
-    "@opentelemetry/instrumentation-fetch": "0.47.0",
-    "@opentelemetry/instrumentation-http": "0.47.0",
-    "@opentelemetry/instrumentation-mongodb": "0.46.0",
-    "@opentelemetry/instrumentation-user-interaction": "0.47.0",
-    "@opentelemetry/instrumentation-xml-http-request": "0.47.0",
-    "@opentelemetry/resources": "1.20.0",
-    "@opentelemetry/sdk-logs": "0.47.0",
-    "@opentelemetry/sdk-node": "0.47.0",
-    "@opentelemetry/sdk-trace-web": "1.20.0",
-    "@opentelemetry/semantic-conventions": "1.20.0",
-    "dotenv": "^17.2.1",
-    "uuid": "^9.0.0"
+    "@opentelemetry/api": "1.9.1",
+    "@opentelemetry/api-logs": "0.218.0",
+    "@opentelemetry/auto-instrumentations-node": "0.76.0",
+    "@opentelemetry/core": "2.7.1",
+    "@opentelemetry/exporter-logs-otlp-http": "0.218.0",
+    "@opentelemetry/exporter-trace-otlp-http": "0.218.0",
+    "@opentelemetry/instrumentation": "0.218.0",
+    "@opentelemetry/instrumentation-document-load": "0.63.0",
+    "@opentelemetry/instrumentation-fetch": "0.218.0",
+    "@opentelemetry/instrumentation-http": "0.218.0",
+    "@opentelemetry/instrumentation-mongodb": "0.71.0",
+    "@opentelemetry/instrumentation-user-interaction": "0.62.0",
+    "@opentelemetry/instrumentation-xml-http-request": "0.218.0",
+    "@opentelemetry/resources": "2.7.1",
+    "@opentelemetry/sdk-logs": "0.218.0",
+    "@opentelemetry/sdk-metrics": "2.7.1",
+    "@opentelemetry/sdk-node": "0.218.0",
+    "@opentelemetry/sdk-trace-base": "2.7.1",
+    "@opentelemetry/sdk-trace-web": "2.7.1",
+    "@opentelemetry/semantic-conventions": "1.41.1",
+    "dotenv": "17.2.1"
   },
   "optionalDependencies": {
-    "@vercel/otel": "1.10.4"
-  },
-  "overrides": {
-    "@opentelemetry/api": "1.7.0",
-    "@opentelemetry/api-logs": "0.47.0",
-    "protobufjs": "^7.5.5"
+    "@vercel/otel": "2.1.2"
   },
   "sideEffects": true,
-  "license": "ISC"
+  "license": "ISC",
+  "directories": {
+    "doc": "docs",
+    "example": "examples"
+  },
+  "devDependencies": {},
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  },
+  "author": ""
 }

package/register.js

@@ -9,7 +9,7 @@
 // 1. Load dotenv quietly only for legacy installs. Normal local and production
 // configuration comes from .securenow/credentials.json via app-config.js.
 try {
-  require('dotenv').config();
+  require('dotenv').config({ quiet: true });
 } catch (e) {
   // dotenv is optional.
 }

package/tracing.js

@@ -33,15 +33,25 @@ const { NodeSDK } = require('@opentelemetry/sdk-node');
 const { OTLPTraceExporter } = require('@opentelemetry/exporter-trace-otlp-http');
 const { OTLPLogExporter } = require('@opentelemetry/exporter-logs-otlp-http');
 const { LoggerProvider, BatchLogRecordProcessor } = require('@opentelemetry/sdk-logs');
-const { Resource } = require('@opentelemetry/resources');
+const otelResources = require('@opentelemetry/resources');
 const { SemanticResourceAttributes } = require('@opentelemetry/semantic-conventions');
 const { getNodeAutoInstrumentations } = require('@opentelemetry/auto-instrumentations-node');
 const { MongoDBInstrumentation } = require('@opentelemetry/instrumentation-mongodb');
-const { v4: uuidv4 } = require('uuid');
+const { randomUUID } = require('crypto');
 const appConfig = require('./app-config');
 
 const env = appConfig.env;
 
+function createResource(attributes) {
+  if (typeof otelResources.resourceFromAttributes === 'function') {
+    return otelResources.resourceFromAttributes(attributes);
+  }
+  if (typeof otelResources.Resource === 'function') {
+    return new otelResources.Resource(attributes);
+  }
+  throw new Error('Unsupported @opentelemetry/resources version');
+}
+
 // Default sensitive fields to redact from request bodies
 const DEFAULT_SENSITIVE_FIELDS = [
   'password', 'passwd', 'pwd', 'secret', 'token', 'api_key', 'apikey',
@@ -297,15 +307,15 @@ if (!baseName && inPm2Cluster && strict) {
 // service.name
 let serviceName;
 if (baseName) {
-  serviceName = noUuid ? baseName : `${baseName}-${uuidv4()}`;
+  serviceName = noUuid ? baseName : `${baseName}-${randomUUID()}`;
 } else {
   // last-resort fallback (only if STRlCT is off). You can rename this to make it obvious in monitoring.
-  serviceName = `securenow-free-${uuidv4()}`;
+  serviceName = `securenow-free-${randomUUID()}`;
 }
 
 // service.instance.id = <appid-or-fallback>-<uuid> (unique per worker)
 const instancePrefix   = baseName || 'securenow';
-const serviceInstanceId = `${instancePrefix}-${uuidv4()}`;
+const serviceInstanceId = `${instancePrefix}-${randomUUID()}`;
 
 // Loud line per worker to prove what was used
 console.log('[securenow] pid=%d appId=%s instance=%s apiKey=%s → service.name=%s instance.id=%s',
@@ -466,7 +476,7 @@ const httpInstrumentation = new HttpInstrumentation({
 const loggingEnabled = !/^(0|false)$/i.test(String(env('SECURENOW_LOGGING_ENABLED') ?? ''));
 
 // Create shared resource for both traces and logs
-const sharedResource = new Resource({
+const sharedResource = createResource({
   [SemanticResourceAttributes.SERVICE_NAME]: serviceName,
   [SemanticResourceAttributes.SERVICE_INSTANCE_ID]: serviceInstanceId,
   [SemanticResourceAttributes.DEPLOYMENT_ENVIRONMENT]: appConfig.resolveDeploymentEnvironment(),
@@ -485,8 +495,8 @@ if (loggingEnabled) {
   const batchLogProcessor = new BatchLogRecordProcessor(logExporter);
   loggerProvider = new LoggerProvider({
     resource: sharedResource,
+    processors: [batchLogProcessor],
   });
-  loggerProvider.addLogRecordProcessor(batchLogProcessor);
 
   // Auto-patch console.* so every log/warn/error becomes an OTel log record
   const _logger = loggerProvider.getLogger('console', '1.0.0');

package/web-vite.mjs

@@ -3,7 +3,7 @@
 
 import { WebTracerProvider, BatchSpanProcessor } from '@opentelemetry/sdk-trace-web';
 import { OTLPTraceExporter } from '@opentelemetry/exporter-trace-otlp-http';
-import { Resource } from '@opentelemetry/resources';
+import * as otelResources from '@opentelemetry/resources';
 import { SemanticResourceAttributes as S } from '@opentelemetry/semantic-conventions';
 import { registerInstrumentations } from '@opentelemetry/instrumentation';
 import { DocumentLoadInstrumentation } from '@opentelemetry/instrumentation-document-load';
@@ -12,9 +12,19 @@ import { FetchInstrumentation } from '@opentelemetry/instrumentation-fetch';
 import { XMLHttpRequestInstrumentation } from '@opentelemetry/instrumentation-xml-http-request';
 
 // ---- helpers / env ----
-const viteEnv: any = (import.meta as any).env || {};
+const viteEnv = import.meta.env || {};
 
-function env(k: string): string | undefined {
+function createResource(attributes) {
+  if (typeof otelResources.resourceFromAttributes === 'function') {
+    return otelResources.resourceFromAttributes(attributes);
+  }
+  if (typeof otelResources.Resource === 'function') {
+    return new otelResources.Resource(attributes);
+  }
+  throw new Error('Unsupported @opentelemetry/resources version');
+}
+
+function env(k) {
   // Accept both Vite envs (VITE_*) and raw names for window.__SECURENOW__
   const direct =
     viteEnv[k] ??
@@ -23,13 +33,13 @@ function env(k: string): string | undefined {
   if (direct != null) return String(direct);
 
   // Optionally support runtime overrides via window.__SECURENOW__
-  const w = (globalThis as any).window as any;
+  const w = globalThis.window;
   if (w && w.__SECURENOW__ && k in w.__SECURENOW__) return String(w.__SECURENOW__[k]);
   return undefined;
 }
 
-function parseHeaders(str?: string) {
-  const out: Record<string, string> = {};
+function parseHeaders(str) {
+  const out = {};
   if (!str) return out;
   String(str).split(',').forEach(raw => {
     const s = raw.trim();
@@ -63,7 +73,7 @@ const noUuid =
     : !!baseName;
 const strict = String(env('SECURENOW_STRICT')) === '1' || String(env('SECURENOW_STRICT')).toLowerCase() === 'true';
 
-function uuidv4(): string {
+function uuidv4() {
   if (typeof crypto !== 'undefined' && crypto.randomUUID) {
     return crypto.randomUUID();
   }
@@ -79,7 +89,7 @@ function uuidv4(): string {
   return `${hex.slice(0,8)}-${hex.slice(8,12)}-${hex.slice(12,16)}-${hex.slice(16,20)}-${hex.slice(20)}`;
 }
 
-let serviceName: string;
+let serviceName;
 let disabled = false;
 if (baseName) {
   serviceName = noUuid ? baseName : `${baseName}-${uuidv4()}`;
@@ -125,15 +135,15 @@ export function startSecurenowWeb() {
   });
 
   const provider = new WebTracerProvider({
-    resource: new Resource({
+    resource: createResource({
       [S.SERVICE_NAME]: serviceName,
       [S.SERVICE_INSTANCE_ID]: serviceInstanceId,
       [S.DEPLOYMENT_ENVIRONMENT]: viteEnv.MODE || 'production',
       [S.SERVICE_VERSION]: viteEnv.VITE_APP_VERSION || undefined,
     }),
+    spanProcessors: [new BatchSpanProcessor(exporter)],
   });
 
-  provider.addSpanProcessor(new BatchSpanProcessor(exporter));
   provider.register();
 
   registerInstrumentations({
@@ -163,13 +173,13 @@ export function startSecurenowWeb() {
 }
 
 // ---- Free trial banner (browser DOM injection) ----
-function injectFreeTrialBanner(): void {
+function injectFreeTrialBanner() {
   const FREETRIAL_HOST = 'freetrial.securenow.ai';
   const hideBanner = String(env('SECURENOW_HIDE_BANNER')) === '1';
   if (hideBanner || !endpointBase.includes(FREETRIAL_HOST)) return;
   if (typeof document === 'undefined') return;
 
-  function create(): void {
+  function create() {
     if (document.getElementById('sn-ft-banner')) return;
 
     const d = document.createElement('div');
@@ -240,7 +250,7 @@ function injectFreeTrialBanner(): void {
 try {
   startSecurenowWeb();
   injectFreeTrialBanner();
-} catch (e: any) {
+} catch (e) {
   console.error('[securenow/web-vite] failed to start:', e);
 }