@cronwatch/sdk 0.3.0 → 0.4.0

package/dist/webhook.d.cts

@@ -1,8 +1,8 @@
-import { a as AlertChannel } from './types-C1PyRjI5.cjs';
+import { a as AlertChannel } from './types-Ddq1MUPL.cjs';
 
 interface WebhookOptions {
     url: string;
-    /** Extra request headers, for an Authorization header say. */
+    /** Extra request headers, for an Authorization header say. Values are trimmed. */
     headers?: Record<string, string>;
     /**
      * When set, each request carries `X-CronWatch-Signature: sha256=<hex>`,
@@ -14,7 +14,10 @@ interface WebhookOptions {
 /**
  * POSTs the alert as JSON to any URL. The body is the Alert object:
  * { type, job, title, message, run, details, triage, at, definition }.
+ * A redirect is an error: point the url at where the receiver really is.
  */
 declare function webhook(options: WebhookOptions): AlertChannel;
+/** HMAC-SHA256 as lowercase hex, with Web Crypto so it runs on Workers and Deno too. */
+declare function hmacSha256Hex(secret: string, body: string): Promise<string>;
 
-export { type WebhookOptions, webhook };
+export { type WebhookOptions, hmacSha256Hex, webhook };

package/dist/webhook.d.ts

@@ -1,8 +1,8 @@
-import { a as AlertChannel } from './types-C1PyRjI5.js';
+import { a as AlertChannel } from './types-Ddq1MUPL.js';
 
 interface WebhookOptions {
     url: string;
-    /** Extra request headers, for an Authorization header say. */
+    /** Extra request headers, for an Authorization header say. Values are trimmed. */
     headers?: Record<string, string>;
     /**
      * When set, each request carries `X-CronWatch-Signature: sha256=<hex>`,
@@ -14,7 +14,10 @@ interface WebhookOptions {
 /**
  * POSTs the alert as JSON to any URL. The body is the Alert object:
  * { type, job, title, message, run, details, triage, at, definition }.
+ * A redirect is an error: point the url at where the receiver really is.
  */
 declare function webhook(options: WebhookOptions): AlertChannel;
+/** HMAC-SHA256 as lowercase hex, with Web Crypto so it runs on Workers and Deno too. */
+declare function hmacSha256Hex(secret: string, body: string): Promise<string>;
 
-export { type WebhookOptions, webhook };
+export { type WebhookOptions, hmacSha256Hex, webhook };

package/dist/webhook.js

@@ -1,5 +1,3 @@
-import { createHmac } from 'crypto';
-
 // src/alerts/webhook.ts
 var TIMEOUT_MS = 1e4;
 function origin(url) {
@@ -15,16 +13,23 @@ function webhook(options) {
     name: "webhook",
     async send(alert) {
       const body = JSON.stringify(alert);
-      const headers = { "content-type": "application/json", "user-agent": "cronwatch", ...options.headers };
+      const headers = { "content-type": "application/json", "user-agent": "cronwatch" };
+      for (const [name, value] of Object.entries(options.headers ?? {})) headers[name] = typeof value === "string" ? value.trim() : value;
       if (options.secret) {
-        headers["x-cronwatch-signature"] = `sha256=${createHmac("sha256", options.secret).update(body).digest("hex")}`;
+        headers["x-cronwatch-signature"] = `sha256=${await hmacSha256Hex(options.secret, body)}`;
       }
-      const response = await fetch(options.url, { method: "POST", headers, body, signal: AbortSignal.timeout(TIMEOUT_MS) });
+      const response = await fetch(options.url, { method: "POST", headers, body, redirect: "error", signal: AbortSignal.timeout(TIMEOUT_MS) });
       if (!response.ok) throw new Error(`Webhook ${origin(options.url)} answered ${response.status}`);
     }
   };
 }
+async function hmacSha256Hex(secret, body) {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey("raw", encoder.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+  const signature = new Uint8Array(await crypto.subtle.sign("HMAC", key, encoder.encode(body)));
+  return Array.from(signature, (b) => b.toString(16).padStart(2, "0")).join("");
+}
 
-export { webhook };
+export { hmacSha256Hex, webhook };
 //# sourceMappingURL=webhook.js.map
 //# sourceMappingURL=webhook.js.map

package/dist/webhook.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/alerts/webhook.ts"],"names":[],"mappings":";;;AAeA,IAAM,UAAA,GAAa,GAAA;AAEnB,SAAS,OAAO,GAAA,EAAqB;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,eAAA;AAAA,EACT;AACF;AAMO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,EAAK,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IACN,MAAM,KAAK,KAAA,EAAO;AAChB,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACjC,MAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,kBAAA,EAAoB,cAAc,WAAA,EAAa,GAAG,QAAQ,OAAA,EAAQ;AAC5H,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,OAAA,CAAQ,uBAAuB,CAAA,GAAI,CAAA,OAAA,EAAU,UAAA,CAAW,QAAA,EAAU,OAAA,CAAQ,MAAM,CAAA,CAAE,MAAA,CAAO,IAAI,CAAA,CAAE,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAAA,MAC9G;AACA,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,OAAA,CAAQ,KAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,MAAM,MAAA,EAAQ,WAAA,CAAY,OAAA,CAAQ,UAAU,GAAG,CAAA;AAEpH,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA,UAAA,EAAa,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAChG;AAAA,GACF;AACF","file":"webhook.js","sourcesContent":["import { createHmac } from \"node:crypto\";\nimport type { AlertChannel } from \"../types.js\";\n\nexport interface WebhookOptions {\n  url: string;\n  /** Extra request headers, for an Authorization header say. */\n  headers?: Record<string, string>;\n  /**\n   * When set, each request carries `X-CronWatch-Signature: sha256=<hex>`,\n   * the HMAC-SHA256 of the raw body with this secret, so the receiver can\n   * verify it.\n   */\n  secret?: string;\n}\n\nconst TIMEOUT_MS = 10_000;\n\nfunction origin(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return \"(invalid URL)\";\n  }\n}\n\n/**\n * POSTs the alert as JSON to any URL. The body is the Alert object:\n * { type, job, title, message, run, details, triage, at, definition }.\n */\nexport function webhook(options: WebhookOptions): AlertChannel {\n  if (!options.url) throw new Error(\"webhook() needs a url\");\n  return {\n    name: \"webhook\",\n    async send(alert) {\n      const body = JSON.stringify(alert);\n      const headers: Record<string, string> = { \"content-type\": \"application/json\", \"user-agent\": \"cronwatch\", ...options.headers };\n      if (options.secret) {\n        headers[\"x-cronwatch-signature\"] = `sha256=${createHmac(\"sha256\", options.secret).update(body).digest(\"hex\")}`;\n      }\n      const response = await fetch(options.url, { method: \"POST\", headers, body, signal: AbortSignal.timeout(TIMEOUT_MS) });\n      // Only the origin: a webhook URL's path or query often is the credential.\n      if (!response.ok) throw new Error(`Webhook ${origin(options.url)} answered ${response.status}`);\n    },\n  };\n}\n"]}
+{"version":3,"sources":["../src/alerts/webhook.ts"],"names":[],"mappings":";AAcA,IAAM,UAAA,GAAa,GAAA;AAEnB,SAAS,OAAO,GAAA,EAAqB;AACnC,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,GAAA,CAAI,GAAG,CAAA,CAAE,MAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,eAAA;AAAA,EACT;AACF;AAOO,SAAS,QAAQ,OAAA,EAAuC;AAC7D,EAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,EAAK,MAAM,IAAI,MAAM,uBAAuB,CAAA;AACzD,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,SAAA;AAAA,IACN,MAAM,KAAK,KAAA,EAAO;AAChB,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AACjC,MAAA,MAAM,OAAA,GAAkC,EAAE,cAAA,EAAgB,kBAAA,EAAoB,cAAc,WAAA,EAAY;AAExG,MAAA,KAAA,MAAW,CAAC,IAAA,EAAM,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,QAAQ,OAAA,IAAW,EAAE,CAAA,EAAG,OAAA,CAAQ,IAAI,CAAA,GAAI,OAAO,UAAU,QAAA,GAAW,KAAA,CAAM,MAAK,GAAI,KAAA;AAC9H,MAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,QAAA,OAAA,CAAQ,uBAAuB,IAAI,CAAA,OAAA,EAAU,MAAM,cAAc,OAAA,CAAQ,MAAA,EAAQ,IAAI,CAAC,CAAA,CAAA;AAAA,MACxF;AAEA,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,EAAK,EAAE,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,UAAU,OAAA,EAAS,MAAA,EAAQ,YAAY,OAAA,CAAQ,UAAU,GAAG,CAAA;AAEvI,MAAA,IAAI,CAAC,QAAA,CAAS,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAC,CAAA,UAAA,EAAa,QAAA,CAAS,MAAM,CAAA,CAAE,CAAA;AAAA,IAChG;AAAA,GACF;AACF;AAGA,eAAsB,aAAA,CAAc,QAAgB,IAAA,EAA+B;AACjF,EAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,EAAA,MAAM,MAAM,MAAM,MAAA,CAAO,OAAO,SAAA,CAAU,KAAA,EAAO,QAAQ,MAAA,CAAO,MAAM,GAAG,EAAE,IAAA,EAAM,QAAQ,IAAA,EAAM,SAAA,IAAa,KAAA,EAAO,CAAC,MAAM,CAAC,CAAA;AAC3H,EAAA,MAAM,SAAA,GAAY,IAAI,UAAA,CAAW,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,GAAA,EAAK,OAAA,CAAQ,MAAA,CAAO,IAAI,CAAC,CAAC,CAAA;AAC5F,EAAA,OAAO,KAAA,CAAM,IAAA,CAAK,SAAA,EAAW,CAAC,MAAM,CAAA,CAAE,QAAA,CAAS,EAAE,CAAA,CAAE,SAAS,CAAA,EAAG,GAAG,CAAC,CAAA,CAAE,KAAK,EAAE,CAAA;AAC9E","file":"webhook.js","sourcesContent":["import type { AlertChannel } from \"../types.js\";\n\nexport interface WebhookOptions {\n  url: string;\n  /** Extra request headers, for an Authorization header say. Values are trimmed. */\n  headers?: Record<string, string>;\n  /**\n   * When set, each request carries `X-CronWatch-Signature: sha256=<hex>`,\n   * the HMAC-SHA256 of the raw body with this secret, so the receiver can\n   * verify it.\n   */\n  secret?: string;\n}\n\nconst TIMEOUT_MS = 10_000;\n\nfunction origin(url: string): string {\n  try {\n    return new URL(url).origin;\n  } catch {\n    return \"(invalid URL)\";\n  }\n}\n\n/**\n * POSTs the alert as JSON to any URL. The body is the Alert object:\n * { type, job, title, message, run, details, triage, at, definition }.\n * A redirect is an error: point the url at where the receiver really is.\n */\nexport function webhook(options: WebhookOptions): AlertChannel {\n  if (!options.url) throw new Error(\"webhook() needs a url\");\n  return {\n    name: \"webhook\",\n    async send(alert) {\n      const body = JSON.stringify(alert);\n      const headers: Record<string, string> = { \"content-type\": \"application/json\", \"user-agent\": \"cronwatch\" };\n      // A pasted Authorization value often carries a stray space or newline, which fetch would refuse.\n      for (const [name, value] of Object.entries(options.headers ?? {})) headers[name] = typeof value === \"string\" ? value.trim() : value;\n      if (options.secret) {\n        headers[\"x-cronwatch-signature\"] = `sha256=${await hmacSha256Hex(options.secret, body)}`;\n      }\n      // A redirect is refused, not followed: the headers (and the signature) would go with it.\n      const response = await fetch(options.url, { method: \"POST\", headers, body, redirect: \"error\", signal: AbortSignal.timeout(TIMEOUT_MS) });\n      // Only the origin: a webhook URL's path or query often is the credential.\n      if (!response.ok) throw new Error(`Webhook ${origin(options.url)} answered ${response.status}`);\n    },\n  };\n}\n\n/** HMAC-SHA256 as lowercase hex, with Web Crypto so it runs on Workers and Deno too. */\nexport async function hmacSha256Hex(secret: string, body: string): Promise<string> {\n  const encoder = new TextEncoder();\n  const key = await crypto.subtle.importKey(\"raw\", encoder.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n  const signature = new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, encoder.encode(body)));\n  return Array.from(signature, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cronwatch/sdk",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Cron and scheduled-job monitoring that lives inside your app. Wrap a job, mount a route, get told when it is missed, failed, slow or over budget. No server to run.",
   "license": "MIT",
   "repository": {
@@ -17,7 +17,14 @@
     "vercel cron",
     "nextjs",
     "agents",
-    "mcp"
+    "mcp",
+    "cloudflare",
+    "workers",
+    "d1",
+    "supabase",
+    "pg_cron",
+    "sentry",
+    "email"
   ],
   "type": "module",
   "sideEffects": false,
@@ -40,6 +47,9 @@
       "postgres": [
         "./dist/postgres.d.cts"
       ],
+      "d1": [
+        "./dist/d1.d.cts"
+      ],
       "slack": [
         "./dist/slack.d.cts"
       ],
@@ -49,8 +59,50 @@
       "webhook": [
         "./dist/webhook.d.cts"
       ],
+      "resend": [
+        "./dist/resend.d.cts"
+      ],
+      "postmark": [
+        "./dist/postmark.d.cts"
+      ],
+      "sendgrid": [
+        "./dist/sendgrid.d.cts"
+      ],
+      "mailgun": [
+        "./dist/mailgun.d.cts"
+      ],
+      "ses": [
+        "./dist/ses.d.cts"
+      ],
+      "twilio": [
+        "./dist/twilio.d.cts"
+      ],
+      "sentry": [
+        "./dist/sentry.d.cts"
+      ],
+      "honeybadger": [
+        "./dist/honeybadger.d.cts"
+      ],
+      "datadog": [
+        "./dist/datadog.d.cts"
+      ],
+      "rollbar": [
+        "./dist/rollbar.d.cts"
+      ],
+      "bugsnag": [
+        "./dist/bugsnag.d.cts"
+      ],
+      "newrelic": [
+        "./dist/newrelic.d.cts"
+      ],
       "anthropic": [
         "./dist/anthropic.d.cts"
+      ],
+      "pg-cron": [
+        "./dist/pg-cron.d.cts"
+      ],
+      "node": [
+        "./dist/node.d.cts"
       ]
     }
   },
@@ -85,6 +137,16 @@
         "default": "./dist/postgres.cjs"
       }
     },
+    "./d1": {
+      "import": {
+        "types": "./dist/d1.d.ts",
+        "default": "./dist/d1.js"
+      },
+      "require": {
+        "types": "./dist/d1.d.cts",
+        "default": "./dist/d1.cjs"
+      }
+    },
     "./slack": {
       "import": {
         "types": "./dist/slack.d.ts",
@@ -115,6 +177,126 @@
         "default": "./dist/webhook.cjs"
       }
     },
+    "./resend": {
+      "import": {
+        "types": "./dist/resend.d.ts",
+        "default": "./dist/resend.js"
+      },
+      "require": {
+        "types": "./dist/resend.d.cts",
+        "default": "./dist/resend.cjs"
+      }
+    },
+    "./postmark": {
+      "import": {
+        "types": "./dist/postmark.d.ts",
+        "default": "./dist/postmark.js"
+      },
+      "require": {
+        "types": "./dist/postmark.d.cts",
+        "default": "./dist/postmark.cjs"
+      }
+    },
+    "./sendgrid": {
+      "import": {
+        "types": "./dist/sendgrid.d.ts",
+        "default": "./dist/sendgrid.js"
+      },
+      "require": {
+        "types": "./dist/sendgrid.d.cts",
+        "default": "./dist/sendgrid.cjs"
+      }
+    },
+    "./mailgun": {
+      "import": {
+        "types": "./dist/mailgun.d.ts",
+        "default": "./dist/mailgun.js"
+      },
+      "require": {
+        "types": "./dist/mailgun.d.cts",
+        "default": "./dist/mailgun.cjs"
+      }
+    },
+    "./ses": {
+      "import": {
+        "types": "./dist/ses.d.ts",
+        "default": "./dist/ses.js"
+      },
+      "require": {
+        "types": "./dist/ses.d.cts",
+        "default": "./dist/ses.cjs"
+      }
+    },
+    "./twilio": {
+      "import": {
+        "types": "./dist/twilio.d.ts",
+        "default": "./dist/twilio.js"
+      },
+      "require": {
+        "types": "./dist/twilio.d.cts",
+        "default": "./dist/twilio.cjs"
+      }
+    },
+    "./sentry": {
+      "import": {
+        "types": "./dist/sentry.d.ts",
+        "default": "./dist/sentry.js"
+      },
+      "require": {
+        "types": "./dist/sentry.d.cts",
+        "default": "./dist/sentry.cjs"
+      }
+    },
+    "./honeybadger": {
+      "import": {
+        "types": "./dist/honeybadger.d.ts",
+        "default": "./dist/honeybadger.js"
+      },
+      "require": {
+        "types": "./dist/honeybadger.d.cts",
+        "default": "./dist/honeybadger.cjs"
+      }
+    },
+    "./datadog": {
+      "import": {
+        "types": "./dist/datadog.d.ts",
+        "default": "./dist/datadog.js"
+      },
+      "require": {
+        "types": "./dist/datadog.d.cts",
+        "default": "./dist/datadog.cjs"
+      }
+    },
+    "./rollbar": {
+      "import": {
+        "types": "./dist/rollbar.d.ts",
+        "default": "./dist/rollbar.js"
+      },
+      "require": {
+        "types": "./dist/rollbar.d.cts",
+        "default": "./dist/rollbar.cjs"
+      }
+    },
+    "./bugsnag": {
+      "import": {
+        "types": "./dist/bugsnag.d.ts",
+        "default": "./dist/bugsnag.js"
+      },
+      "require": {
+        "types": "./dist/bugsnag.d.cts",
+        "default": "./dist/bugsnag.cjs"
+      }
+    },
+    "./newrelic": {
+      "import": {
+        "types": "./dist/newrelic.d.ts",
+        "default": "./dist/newrelic.js"
+      },
+      "require": {
+        "types": "./dist/newrelic.d.cts",
+        "default": "./dist/newrelic.cjs"
+      }
+    },
     "./anthropic": {
       "import": {
         "types": "./dist/anthropic.d.ts",
@@ -125,6 +307,26 @@
         "default": "./dist/anthropic.cjs"
       }
     },
+    "./pg-cron": {
+      "import": {
+        "types": "./dist/pg-cron.d.ts",
+        "default": "./dist/pg-cron.js"
+      },
+      "require": {
+        "types": "./dist/pg-cron.d.cts",
+        "default": "./dist/pg-cron.cjs"
+      }
+    },
+    "./node": {
+      "import": {
+        "types": "./dist/node.d.ts",
+        "default": "./dist/node.js"
+      },
+      "require": {
+        "types": "./dist/node.d.cts",
+        "default": "./dist/node.cjs"
+      }
+    },
     "./package.json": "./package.json"
   },
   "scripts": {
@@ -137,7 +339,7 @@
     "croner": "^10.0.1"
   },
   "peerDependencies": {
-    "@anthropic-ai/sdk": ">=0.115.0",
+    "@anthropic-ai/sdk": ">=0.115.0 <0.129.0",
     "@types/better-sqlite3": ">=7.6",
     "@types/pg": ">=8.11",
     "better-sqlite3": ">=9",
@@ -161,11 +363,15 @@
     }
   },
   "devDependencies": {
-    "@anthropic-ai/sdk": "^0.127.0",
+    "@anthropic-ai/sdk": "^0.128.0",
     "@types/better-sqlite3": "^7.6.13",
-    "@types/node": "^20.19.0",
+    "@types/express": "^5.0.6",
+    "@types/koa": "^3.0.3",
+    "@types/node": "^22.20.4",
     "@types/pg": "^8.15.0",
     "better-sqlite3": "^13.0.3",
+    "express": "^5.2.1",
+    "koa": "^3.2.1",
     "pg": "^8.23.0",
     "tsup": "^8.5.1",
     "tsx": "^4.23.0",