@harnessa-fe/node-runtime - npm Package Compare versions

Comparing version 1.0.2 to 2.0.0

dist/auto.d.ts

@@ -14,2 +14,4 @@ /**
  *   HARNESSA_FE_MCP_URL      — optional; daemon WS URL (default ws://127.0.0.1:47729)
+ *   HARNESSA_FE_TOKEN        — optional; appended to mcpUrl as ?token= when set
+ *                              (use this when the daemon runs in LAN mode)
  *   HARNESSA_FE_NODE_CONSOLE — set to '1' to enable console capture
@@ -16,0 +18,0 @@ *   NODE_ENV                 — only registers in 'development'

dist/auto.js

@@ -14,2 +14,4 @@ /**
  *   HARNESSA_FE_MCP_URL      — optional; daemon WS URL (default ws://127.0.0.1:47729)
+ *   HARNESSA_FE_TOKEN        — optional; appended to mcpUrl as ?token= when set
+ *                              (use this when the daemon runs in LAN mode)
  *   HARNESSA_FE_NODE_CONSOLE — set to '1' to enable console capture
@@ -20,2 +22,10 @@ *   NODE_ENV                 — only registers in 'development'
 const projectId = process.env.HARNESSA_FE_PROJECT_ID;
+function withToken(url, token) {
+    if (!url || !token)
+        return url;
+    if (/[?&]token=/.test(url))
+        return url;
+    const sep = url.includes('?') ? '&' : '?';
+    return `${url}${sep}token=${encodeURIComponent(token)}`;
+}
 if (process.env.NODE_ENV === 'development' && projectId) {
@@ -26,4 +36,4 @@ register({
         buildId: process.env.HARNESSA_FE_BUILD_ID,
-        mcpUrl: process.env.HARNESSA_FE_MCP_URL,
+        mcpUrl: withToken(process.env.HARNESSA_FE_MCP_URL, process.env.HARNESSA_FE_TOKEN),
     });
 }

package.json

 {
   "name": "@harnessa-fe/node-runtime",
-  "version": "1.0.2",
+  "version": "2.0.0",
   "description": "Node.js server-side SDK for Harnessa-FE. Captures server errors, console output, and Route Handler traces — links them to the browser session via a shared sessionId.",
@@ -39,3 +39,3 @@ "type": "module",
   "dependencies": {
-    "@harnessa-fe/protocol": "1.0.2"
+    "@harnessa-fe/protocol": "2.0.0"
   },
@@ -42,0 +42,0 @@ "peerDependencies": {

src/auto.ts

@@ -14,2 +14,4 @@ /**
  *   HARNESSA_FE_MCP_URL      — optional; daemon WS URL (default ws://127.0.0.1:47729)
+ *   HARNESSA_FE_TOKEN        — optional; appended to mcpUrl as ?token= when set
+ *                              (use this when the daemon runs in LAN mode)
  *   HARNESSA_FE_NODE_CONSOLE — set to '1' to enable console capture
@@ -23,2 +25,9 @@ *   NODE_ENV                 — only registers in 'development'
 
+function withToken(url: string | undefined, token: string | undefined): string | undefined {
+    if (!url || !token) return url;
+    if (/[?&]token=/.test(url)) return url;
+    const sep = url.includes('?') ? '&' : '?';
+    return `${url}${sep}token=${encodeURIComponent(token)}`;
+}
+
 if (process.env.NODE_ENV === 'development' && projectId) {
@@ -29,4 +38,4 @@ register({
         buildId: process.env.HARNESSA_FE_BUILD_ID,
-        mcpUrl: process.env.HARNESSA_FE_MCP_URL,
+        mcpUrl: withToken(process.env.HARNESSA_FE_MCP_URL, process.env.HARNESSA_FE_TOKEN),
     });
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 10 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

95435

1.15%

Lines of code

2069

0.98%

Worsened metrics

Number of low supply chain risk alerts

62

3.33%

Dependency changes

• + Added

  @harnessa-fe/protocol@2.0.0
  (transitive)

• - Removed

  @harnessa-fe/protocol@1.0.2
  (transitive)

• Updated

  @harnessa-fe/protocol@2.0.0