securenow 7.7.14 → 7.7.16

package/nextjs.js

@@ -35,8 +35,6 @@ const appConfig = require('./app-config');
 const { resolveClientIpWithDetails } = require('./resolve-ip');
 const otelResources = require('@opentelemetry/resources');
 
-const env = appConfig.env;
-
 let isRegistered = false;
 
 function requireRuntimeModule(name) {
@@ -126,7 +124,7 @@ function redactGraphQLQuery(query, sensitiveFields = DEFAULT_SENSITIVE_FIELDS) {
  * Register SecureNow OpenTelemetry for Next.js using @vercel/otel
  * @param {Object} options - Optional configuration
  * @param {string} options.serviceName - Service name (defaults to .securenow/credentials.json app.key/app.name)
- * @param {string} options.endpoint - Traces endpoint (defaults to .securenow/credentials.json app.instance)
+ * @param {string} options.endpoint - Advanced OTLP endpoint override (defaults to the SecureNow ingest gateway)
  * @param {string} options.environment - deployment.environment override (defaults to config.runtime.deploymentEnvironment)
  * @param {boolean} options.noUuid - Don't append UUID to service name
  */
@@ -144,24 +142,26 @@ function registerSecureNow(options = {}) {
   }
 
   // Detect environment outside try block for error handling
-  const isVercel = !!(env('VERCEL') || env('VERCEL_ENV') || env('VERCEL_URL'));
+  const isVercel = !!(process.env.VERCEL || process.env.VERCEL_ENV || process.env.VERCEL_URL);
   let deploymentEnvironment = appConfig.resolveDeploymentEnvironment();
 
   try {
     console.log('[securenow] Next.js integration loading (pid=%d)', process.pid);
 
     // -------- Configuration --------
-    // Resolution order: explicit options -> .securenow/credentials.json -> legacy env fallback -> package.json#name
+    // Resolution order: explicit options -> .securenow/credentials.json -> package.json#name.
+    // Telemetry goes to the stable ingest gateway by default; the API gateway
+    // routes by app.key to the dashboard-selected instance.
     const resolvedApp = appConfig.resolveAll();
 
     const rawBase = (options.serviceName || resolvedApp.appId || '').trim().replace(/^['"]|['"]$/g, '');
     const baseName = rawBase || null;
     // Default: auto-disable suffix when logged in (appId is the routing UUID
-    // and the dashboard does exact match). opts.noUuid or SECURENOW_NO_UUID
-    // override.
+    // and the dashboard does exact match). opts.noUuid or config.runtime.noUuid
+    // can still override.
     const noUuid = appConfig.resolveNoUuid({ noUuid: options.noUuid });
     deploymentEnvironment = appConfig.normalizeDeploymentEnvironment(
-      options.environment || resolvedApp.deploymentEnvironment || env('VERCEL_ENV')
+      options.environment || resolvedApp.deploymentEnvironment
     );
 
     // service.name
@@ -170,7 +170,7 @@ function registerSecureNow(options = {}) {
       serviceName = noUuid ? baseName : `${baseName}-${randomUUID()}`;
     } else {
       serviceName = `nextjs-app-${randomUUID()}`;
-      console.warn('[securenow] ⚠️  No app identity resolved. Using fallback: %s', serviceName);
+      console.warn('[securenow] No app identity resolved. Using fallback: %s', serviceName);
       console.warn('[securenow] Run `npx securenow login` and `npx securenow init` to write .securenow/credentials.json');
     }
 
@@ -180,24 +180,32 @@ function registerSecureNow(options = {}) {
     const tracesUrl = resolvedEndpoints.tracesUrl;
     const logsUrl = resolvedEndpoints.logsUrl;
     const headers = resolvedEndpoints.headers;
+    const otelLogLevel = String(appConfig.configValue('otel.logLevel', '') || '').toLowerCase();
+    const isDevelopmentRuntime = process.env.NODE_ENV === 'development';
 
-    if (!process.env.OTEL_SERVICE_NAME) process.env.OTEL_SERVICE_NAME = serviceName;
-    if (!process.env.OTEL_EXPORTER_OTLP_ENDPOINT) process.env.OTEL_EXPORTER_OTLP_ENDPOINT = endpointBase;
-    if (!process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT) process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT = tracesUrl;
+    // @vercel/otel still reads OTel process variables internally. These are
+    // derived from credentials JSON; customers do not set them.
+    if (isVercel) {
+      if (!process.env.OTEL_SERVICE_NAME) process.env.OTEL_SERVICE_NAME = serviceName;
+      if (!process.env.OTEL_EXPORTER_OTLP_ENDPOINT) process.env.OTEL_EXPORTER_OTLP_ENDPOINT = endpointBase;
+      if (!process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT) process.env.OTEL_EXPORTER_OTLP_TRACES_ENDPOINT = tracesUrl;
+      const headerString = appConfig.headersToString(headers);
+      if (headerString && !process.env.OTEL_EXPORTER_OTLP_HEADERS) process.env.OTEL_EXPORTER_OTLP_HEADERS = headerString;
+    }
 
     console.log('[securenow] Next.js App -> service.name=%s', serviceName);
     console.log('[securenow] Environment: %s', deploymentEnvironment);
 
     // -------- Body Capture Configuration --------
     // Opt-out default: set config.capture.body=false (or options.captureBody=false) to disable.
-    const captureBody = options.captureBody ?? !/^(0|false)$/i.test(String(env('SECURENOW_CAPTURE_BODY') ?? ''));
-    const maxBodySize = Math.max(1024, parseInt(env('SECURENOW_MAX_BODY_SIZE'), 10) || 10240);
-    const customSensitiveFields = (env('SECURENOW_SENSITIVE_FIELDS') || '').split(',').map(s => s.trim()).filter(Boolean);
+    const captureBody = options.captureBody ?? appConfig.boolConfig('capture.body', true);
+    const maxBodySize = appConfig.numberConfig('capture.maxBodySize', 10240, 1024);
+    const customSensitiveFields = appConfig.listConfig('capture.sensitiveFields');
     const allSensitiveFields = [...DEFAULT_SENSITIVE_FIELDS, ...customSensitiveFields];
 
     // -------- Log environment detection --------
     if (!isVercel) {
-      console.log('[securenow] 🖥️  Self-hosted environment detected (EC2/PM2) - using vanilla SDK');
+      console.log('[securenow] Self-hosted environment detected (EC2/PM2) - using vanilla SDK');
     }
 
     // -------- Use different initialization based on environment --------
@@ -331,8 +339,8 @@ function registerSecureNow(options = {}) {
           }
 
           // Debug log in development
-          if (env('NODE_ENV') === 'development' || env('OTEL_LOG_LEVEL') === 'debug') {
-            console.log('[securenow] 📡 Captured IP: %s (from: %s)', 
+          if (isDevelopmentRuntime || otelLogLevel === 'debug') {
+            console.log('[securenow] Captured IP: %s (from: %s)',
               primaryIp, 
               ipDetails.source || 'unknown'
             );
@@ -345,8 +353,8 @@ function registerSecureNow(options = {}) {
           
         } catch (error) {
           // Silently fail to not break the request
-          if (env('OTEL_LOG_LEVEL') === 'debug') {
-            console.error('[securenow] ⚠️  Error in requestHook:', error.message);
+          if (otelLogLevel === 'debug') {
+            console.error('[securenow] Error in requestHook:', error.message);
           }
         }
       },
@@ -370,11 +378,11 @@ function registerSecureNow(options = {}) {
     // the remote end (ECONNRESET / "socket hang up"). These transient errors
     // sometimes escape as unhandled exceptions or rejections. We catch them
     // here and log at debug level instead of crashing the host app.
-    const _TRANSIENT_CODES = new Set(['ECONNRESET', 'ECONNREFUSED', 'ETIMEDOUT', 'EPIPE', 'EAI_AGAIN']);
+    const _TRANSIENT_CODES = new Set(['ECONNRESET', 'ECONNREFUSED', 'ETIMEDOUT', 'EPIPE', 'EAI_AGAIN', 'ENOTFOUND']);
     function _isOtlpTransientError(err) {
       if (!err) return false;
       if (_TRANSIENT_CODES.has(err.code)) return true;
-      if (typeof err.message === 'string' && /socket hang up|ECONNRESET/.test(err.message)) return true;
+      if (typeof err.message === 'string' && /socket hang up|ECONNRESET|ECONNREFUSED|ENOTFOUND|EAI_AGAIN|timed out/i.test(err.message)) return true;
       return false;
     }
     function _looksLikeOtlpStack(err) {
@@ -383,21 +391,53 @@ function registerSecureNow(options = {}) {
       return /OTLPTraceExporter|OTLPLogExporter|otlp|exporter.*http|BatchSpanProcessor|BatchLogRecordProcessor/i.test(s)
         || /node:_http_client|ClientRequest|TLSSocket/i.test(s);
     }
-    const _diagDebug = (env('OTEL_LOG_LEVEL') || '').toLowerCase() === 'debug';
+    function _looksLikeConfiguredOtlpEndpoint(err) {
+      const text = `${err && err.hostname || ''} ${err && err.host || ''} ${err && err.message || ''}`;
+      try {
+        const hosts = [new URL(tracesUrl).hostname, new URL(logsUrl).hostname].filter(Boolean);
+        return hosts.some((host) => host && text.includes(host));
+      } catch (_) {
+        return false;
+      }
+    }
+    const _diagDebug = otelLogLevel === 'debug';
+    let _lastSuppressedOtlpErrorLogAt = 0;
+    function _originalConsole(method) {
+      const originals = console.__securenow_original || console.__securenowOriginalConsole;
+      return (originals && originals[method]) || console[method] || console.log;
+    }
+    function _formatOtlpError(err) {
+      if (!err) return 'unknown error';
+      const parts = [err.message || String(err)];
+      if (err.code && !parts[0].includes(err.code)) parts.push(`code=${err.code}`);
+      if (err.syscall) parts.push(`syscall=${err.syscall}`);
+      if (err.hostname) parts.push(`host=${err.hostname}`);
+      return parts.join(' ');
+    }
+    function _reportSuppressedOtlpError(kind, err, origin) {
+      if (otelLogLevel === 'none') return;
+      const now = Date.now();
+      if (!_diagDebug && now - _lastSuppressedOtlpErrorLogAt < 60_000) return;
+      _lastSuppressedOtlpErrorLogAt = now;
+      const method = _diagDebug ? 'debug' : 'error';
+      _originalConsole(method).call(
+        console,
+        '[securenow] OTLP exporter %s suppressed (%s). Telemetry may be missing until the ingest endpoint is reachable: %s',
+        kind,
+        origin || 'async',
+        _formatOtlpError(err)
+      );
+    }
     process.on('uncaughtException', (err, origin) => {
-      if (_isOtlpTransientError(err) && _looksLikeOtlpStack(err)) {
-        if (_diagDebug) {
-          console.debug('[securenow] Suppressed transient OTLP exporter error (%s): %s', origin, err.message);
-        }
+      if (_isOtlpTransientError(err) && (_looksLikeOtlpStack(err) || _looksLikeConfiguredOtlpEndpoint(err))) {
+        _reportSuppressedOtlpError('error', err, origin);
         return;
       }
       throw err;
     });
     process.on('unhandledRejection', (reason) => {
-      if (_isOtlpTransientError(reason) && _looksLikeOtlpStack(reason)) {
-        if (_diagDebug) {
-          console.debug('[securenow] Suppressed transient OTLP exporter rejection: %s', reason && reason.message);
-        }
+      if (_isOtlpTransientError(reason) && (_looksLikeOtlpStack(reason) || _looksLikeConfiguredOtlpEndpoint(reason))) {
+        _reportSuppressedOtlpError('rejection', reason, 'unhandledRejection');
         return;
       }
       throw reason;
@@ -455,11 +495,11 @@ function registerSecureNow(options = {}) {
       });
       
       sdk.start();
-      console.log('[securenow] 🎯 Vanilla SDK initialized for self-hosted environment');
+      console.log('[securenow] Vanilla SDK initialized for self-hosted environment');
 
       // -------- Logging (self-hosted only) --------
       // Opt-out default: set config.logging.enabled=false to disable.
-      const loggingEnabled = !/^(0|false)$/i.test(String(env('SECURENOW_LOGGING_ENABLED') ?? ''));
+      const loggingEnabled = appConfig.boolConfig('logging.enabled', true);
       if (loggingEnabled) {
         try {
           const { OTLPLogExporter } = require('@opentelemetry/exporter-logs-otlp-http');
@@ -511,7 +551,7 @@ function registerSecureNow(options = {}) {
             _emitLog(SeverityNumber.ERROR, 'ERROR', args);
           };
 
-          console.log('[securenow] 📋 Logging: ENABLED → %s', logsUrl);
+          console.log('[securenow] Logging: ENABLED -> %s', logsUrl);
 
           // Auto-log every incoming HTTP request/response
           try {
@@ -559,51 +599,51 @@ function registerSecureNow(options = {}) {
               }
               return originalEmit.apply(this, arguments);
             };
-            console.log('[securenow] 📋 HTTP request logging: ENABLED');
+            console.log('[securenow] HTTP request logging: ENABLED');
           } catch (_) {}
 
           // Graceful shutdown for logs
           process.on('SIGTERM', async () => { try { await loggerProvider.shutdown(); } catch (_) {} try { requireRuntimeModule('./firewall').shutdown(); } catch (_) {} });
           process.on('SIGINT', async () => { try { await loggerProvider.shutdown(); } catch (_) {} try { requireRuntimeModule('./firewall').shutdown(); } catch (_) {} });
         } catch (e) {
-          console.warn('[securenow] ⚠️  Logging setup failed (missing @opentelemetry/exporter-logs-otlp-http or @opentelemetry/sdk-logs):', e.message);
+          console.warn('[securenow] Logging setup failed (missing @opentelemetry/exporter-logs-otlp-http or @opentelemetry/sdk-logs):', e.message);
         }
       } else {
-        console.log('[securenow] 📋 Logging: DISABLED (SECURENOW_LOGGING_ENABLED=0)');
+        console.log('[securenow] Logging: DISABLED (config.logging.enabled=false)');
       }
     }
 
     isRegistered = true;
 
-    // Free trial banner (optional — may not be bundled in standalone builds)
+    // Free trial banner (optional - may not be bundled in standalone builds)
     try {
       const { isFreeTrial, patchHttpForBanner } = requireRuntimeModule('./free-trial-banner');
-      if (isFreeTrial(endpointBase) && String(env('SECURENOW_HIDE_BANNER')) !== '1') {
+      if (isFreeTrial(endpointBase) && !appConfig.boolConfig('runtime.hideBanner', false)) {
         patchHttpForBanner();
       }
     } catch (_) {}
 
-    console.log('[securenow] ✅ OpenTelemetry started for Next.js → %s', tracesUrl);
-    console.log('[securenow] 📊 Auto-capturing comprehensive request metadata:');
-    console.log('[securenow]    • IP addresses (x-forwarded-for, x-real-ip, socket)');
-    console.log('[securenow]    • User-Agent, Referer, Origin, Accept headers');
-    console.log('[securenow]    • Protocol, Host, Port (proxy-aware)');
-    console.log('[securenow]    • Geographic data (Vercel/Cloudflare)');
-    console.log('[securenow]    • Request IDs, CSRF tokens, Auth presence');
-    console.log('[securenow]    • Response status, content-type, content-length');
-    console.log('[securenow] ⚠️  Body capture DISABLED at HTTP instrumentation level (prevents Next.js conflicts)');
+    console.log('[securenow] OpenTelemetry started for Next.js -> %s', tracesUrl);
+    console.log('[securenow] Auto-capturing comprehensive request metadata:');
+    console.log('[securenow]    - IP addresses (x-forwarded-for, x-real-ip, socket)');
+    console.log('[securenow]    - User-Agent, Referer, Origin, Accept headers');
+    console.log('[securenow]    - Protocol, Host, Port (proxy-aware)');
+    console.log('[securenow]    - Geographic data (Vercel/Cloudflare)');
+    console.log('[securenow]    - Request IDs, CSRF tokens, Auth presence');
+    console.log('[securenow]    - Response status, content-type, content-length');
+    console.log('[securenow] Body capture DISABLED at HTTP instrumentation level (prevents Next.js conflicts)');
     if (captureBody) {
-      console.log('[securenow] 💡 For body capture in Next.js, use: import "securenow/nextjs-auto-capture"');
+      console.log('[securenow] For body capture in Next.js, use: import "securenow/nextjs-auto-capture"');
     }
 
     // Optional test span
-    if (String(env('SECURENOW_TEST_SPAN')) === '1') {
+    if (appConfig.boolConfig('runtime.testSpan', false)) {
       const api = require('@opentelemetry/api');
       const tracer = api.trace.getTracer('securenow-nextjs');
       const span = tracer.startSpan('securenow.nextjs.startup');
       span.setAttribute('next.runtime', process.env.NEXT_RUNTIME || 'nodejs');
       span.end();
-      console.log('[securenow] 🧪 Test span created');
+      console.log('[securenow] Test span created');
     }
 
   } catch (error) {
@@ -615,7 +655,7 @@ function registerSecureNow(options = {}) {
     }
   }
 
-  // Firewall — runs independently from OTel so it works even if tracing fails.
+  // Firewall - runs independently from OTel so it works even if tracing fails.
   // Key and environment come from .securenow/credentials.json (written by
   // login/init or credentials runtime), so no .env entry is needed.
   const firewallOptions = appConfig.resolveFirewallOptions();
@@ -626,6 +666,7 @@ function registerSecureNow(options = {}) {
         appKey: firewallOptions.appKey,
         environment: deploymentEnvironment || firewallOptions.environment,
         apiUrl: firewallOptions.apiUrl,
+        apiUrlFallbacks: firewallOptions.apiUrlFallbacks,
         versionCheckInterval: firewallOptions.versionCheckInterval,
         syncInterval: firewallOptions.syncInterval,
         failMode: firewallOptions.failMode,

package/nuxt-server-plugin.mjs

@@ -26,8 +26,6 @@ const { resolveClientIpWithDetails } = nodeRequire('./resolve-ip');
 
 // ── Helpers ──
 
-const env = appConfig.env;
-
 function createResource(attributes) {
   if (typeof otelResources.resourceFromAttributes === 'function') {
     return otelResources.resourceFromAttributes(attributes);
@@ -74,7 +72,7 @@ function getRuntimeOptions() {
 export default defineNitroPlugin(async (nitroApp) => {
   const opts = getRuntimeOptions();
 
-  // Resolution order: opts -> .securenow/credentials.json -> legacy env fallback -> package.json#name
+  // Resolution order: opts -> .securenow/credentials.json -> package.json#name
   const resolvedApp = appConfig.resolveAll();
 
   // ── Naming ──
@@ -125,12 +123,9 @@ export default defineNitroPlugin(async (nitroApp) => {
   // Opt-out default: set config.capture.body=false (or opts.captureBody=false) to disable.
   const captureBody =
     opts.captureBody ??
-    !/^(0|false)$/i.test(String(env('SECURENOW_CAPTURE_BODY') ?? ''));
-  const maxBodySize = Math.max(1024, parseInt(env('SECURENOW_MAX_BODY_SIZE'), 10) || 10240);
-  const customSensitiveFields = (env('SECURENOW_SENSITIVE_FIELDS') || '')
-    .split(',')
-    .map((s) => s.trim())
-    .filter(Boolean);
+    appConfig.boolConfig('capture.body', true);
+  const maxBodySize = appConfig.numberConfig('capture.maxBodySize', 10240, 1024);
+  const customSensitiveFields = appConfig.listConfig('capture.sensitiveFields');
   const allSensitiveFields = [...DEFAULT_SENSITIVE_FIELDS, ...customSensitiveFields];
 
   // ── HTTP instrumentation ──
@@ -238,7 +233,7 @@ export default defineNitroPlugin(async (nitroApp) => {
   // Opt-out default: set config.logging.enabled=false (or opts.logging=false) to disable.
   const loggingEnabled =
     opts.logging ??
-    !/^(0|false)$/i.test(String(env('SECURENOW_LOGGING_ENABLED') ?? ''));
+    appConfig.boolConfig('logging.enabled', true);
 
   let loggerProvider = null;
 
@@ -314,7 +309,7 @@ export default defineNitroPlugin(async (nitroApp) => {
   // ── Free trial banner ──
   try {
     const { isFreeTrial, patchHttpForBanner } = await import('./free-trial-banner.js');
-    if (isFreeTrial(endpointBase) && String(env('SECURENOW_HIDE_BANNER')) !== '1') {
+    if (isFreeTrial(endpointBase) && !appConfig.boolConfig('runtime.hideBanner', false)) {
       patchHttpForBanner();
     }
   } catch {
@@ -331,6 +326,7 @@ export default defineNitroPlugin(async (nitroApp) => {
         appKey: firewallOptions.appKey,
         environment: deploymentEnvironment || firewallOptions.environment,
         apiUrl: firewallOptions.apiUrl,
+        apiUrlFallbacks: firewallOptions.apiUrlFallbacks,
         versionCheckInterval: firewallOptions.versionCheckInterval,
         syncInterval: firewallOptions.syncInterval,
         failMode: firewallOptions.failMode,

package/nuxt.d.ts

@@ -1,8 +1,8 @@
-/**
- * SecureNow Nuxt 3 Module TypeScript Declarations
- */
-
-export interface SecureNowNuxtOptions {
+/**
+ * SecureNow Nuxt 3 Module TypeScript Declarations
+ */
+
+export interface SecureNowNuxtOptions {
   /**
    * Service name for OpenTelemetry traces.
    * @default .securenow/credentials.json app.key/app.name
@@ -11,7 +11,11 @@ export interface SecureNowNuxtOptions {
 
   /**
    * OTLP endpoint base URL.
-   * @default .securenow/credentials.json app.instance, or https://freetrial.securenow.ai:4318
+   * @default https://ingest.securenow.ai
+   *
+   * Advanced OTLP endpoint override. Normal SecureNow apps should leave this
+   * unset so the ingest gateway can route by app.key to the dashboard-selected
+   * instance.
    */
   endpoint?: string;
 
@@ -20,14 +24,14 @@ export interface SecureNowNuxtOptions {
    * @default .securenow/credentials.json config.runtime.deploymentEnvironment
    */
   environment?: string;
-
-  /**
-   * Don't append UUID to service name (useful when running a single instance).
-   * @default false
-   */
-  noUuid?: boolean;
-
-  /**
+
+  /**
+   * Don't append UUID to service name (useful when running a single instance).
+   * @default false
+   */
+  noUuid?: boolean;
+
+  /**
    * Capture request bodies (POST/PUT/PATCH) on traced spans.
    * Sensitive fields are automatically redacted.
    * @default true from .securenow/credentials.json secure defaults
@@ -40,27 +44,27 @@ export interface SecureNowNuxtOptions {
    */
   logging?: boolean;
 }
-
-declare module 'nuxt/schema' {
-  interface NuxtConfig {
-    securenow?: SecureNowNuxtOptions;
-  }
-  interface NuxtOptions {
-    securenow?: SecureNowNuxtOptions;
-  }
-  interface RuntimeConfig {
-    securenow?: SecureNowNuxtOptions;
-  }
-}
-
-declare module '@nuxt/schema' {
-  interface NuxtConfig {
-    securenow?: SecureNowNuxtOptions;
-  }
-  interface NuxtOptions {
-    securenow?: SecureNowNuxtOptions;
-  }
-  interface RuntimeConfig {
-    securenow?: SecureNowNuxtOptions;
-  }
-}
+
+declare module 'nuxt/schema' {
+  interface NuxtConfig {
+    securenow?: SecureNowNuxtOptions;
+  }
+  interface NuxtOptions {
+    securenow?: SecureNowNuxtOptions;
+  }
+  interface RuntimeConfig {
+    securenow?: SecureNowNuxtOptions;
+  }
+}
+
+declare module '@nuxt/schema' {
+  interface NuxtConfig {
+    securenow?: SecureNowNuxtOptions;
+  }
+  interface NuxtOptions {
+    securenow?: SecureNowNuxtOptions;
+  }
+  interface RuntimeConfig {
+    securenow?: SecureNowNuxtOptions;
+  }
+}

package/nuxt.mjs

@@ -11,7 +11,7 @@
  *   });
  *
  * Environment variables (same as all SecureNow integrations):
- *   SECURENOW_APPID, SECURENOW_INSTANCE, SECURENOW_LOGGING_ENABLED, etc.
+ *   Configuration is read from .securenow/credentials.json.
  */
 
 import { defineNuxtModule, createResolver, addServerPlugin } from '@nuxt/kit';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "securenow",
-  "version": "7.7.14",
+  "version": "7.7.16",
   "description": "OpenTelemetry instrumentation for Node.js, Next.js, and Nuxt - Send traces and logs to any OTLP-compatible backend",
   "type": "commonjs",
   "main": "register.js",

package/tracing.d.ts

@@ -173,7 +173,8 @@ export const loggerProvider: LoggerProvider | null;
  * generated JSON to .securenow/credentials.json in the running app.
  *
  * Main config fields:
- * - app.key / app.name / app.instance
+ * - app.key / app.name
+ * - config.otel.endpoint only for advanced/self-hosted collector overrides
  * - apiKey
  * - config.runtime.deploymentEnvironment
  * - config.logging.enabled