@hasna/uptime 0.1.2 → 0.1.3

package/CHANGELOG.md

@@ -6,6 +6,30 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.3] - 2026-06-28
+
+### Added
+
+- Private/local probe identities, check jobs, fenced signed submissions, and
+  probe signing helpers exported from `@hasna/uptime/probes`.
+- CLI commands for `uptime probes create`, `uptime probes jobs create`,
+  `uptime probes jobs claim`, and `uptime probes submit`.
+- Local API and MCP probe surfaces for public-key enrollment, job
+  creation/claiming, and signed result submission.
+
+### Changed
+
+- Bumped the local SQLite schema to version 2 while keeping schema version 1
+  backups restorable when they are only missing the new probe tables.
+- Hosted probe ingest fails closed until cloud check jobs, workspace stores, and
+  audit logging are implemented.
+
+### Security
+
+- API and MCP probe enrollment require caller-managed public keys; generated
+  private keys are written only by the CLI to an explicit private-key file.
+- Probe job reads redact fencing tokens outside the claim response.
+
 ## [0.1.2] - 2026-06-28
 
 ### Fixed

package/README.md

@@ -31,6 +31,27 @@ uptime incidents
 uptime serve --port 3899 --check
 ```
 
+Private/local probes can submit signed results from another machine:
+
+```bash
+uptime probes create spark01 --private-key-file ./spark01-probe.key.pem
+uptime probes jobs create --monitor <monitor-id> --schedule-slot 2026-06-28T12:00:00Z
+uptime probes jobs claim <job-id> --probe <probe-id>
+uptime probes submit \
+  --probe <probe-id> \
+  --job <job-id> \
+  --schedule-slot 2026-06-28T12:00:00Z \
+  --fencing-token <claim-fencing-token> \
+  --monitor <monitor-id> \
+  --monitor-revision <claim-monitor-revision> \
+  --private-key-file ./spark01-probe.key.pem \
+  --status up
+```
+
+Generated probe private keys are written only to the explicit
+`--private-key-file` path. API and MCP probe enrollment require caller-managed
+public keys.
+
 The local dashboard and API bind to `127.0.0.1` by default:
 
 ```bash
@@ -70,7 +91,9 @@ claude mcp add --scope user uptime -- uptime-mcp
 ```
 
 The MCP server exposes monitor CRUD, check execution, summary, incident, and
-result tools, plus an `uptime_send_report` tool for report delivery.
+result tools, an `uptime_send_report` tool for report delivery, and local probe
+tools for public-key enrollment, job creation/claiming, and signed result
+submission.
 
 ## SDK
 
@@ -100,6 +123,8 @@ await uptime.sendReport({
 });
 ```
 
+Probe agents can import signing helpers from `@hasna/uptime/probes`.
+
 ## API
 
 Run `uptime serve` and use:
@@ -115,6 +140,17 @@ Run `uptime serve` and use:
 - `POST /api/monitors/:id/check`
 - `GET /api/incidents`
 - `GET /api/results?monitorId=<id>&limit=100`
+- `GET /api/probes`
+- `POST /api/probes`
+- `POST /api/probes/jobs`
+- `GET /api/probes/jobs/:id`
+- `POST /api/probes/jobs/:id/claim`
+- `POST /api/probes/results`
+
+Hosted `/api/v1/probes*` routes currently fail closed with `501` until cloud
+check jobs, workspace stores, and audit logging are implemented. Local job reads
+redact fencing tokens; the claim response is the only API response that returns
+the active fencing token.
 
 ## Scope
 
@@ -129,11 +165,14 @@ First release:
 - local dashboard/API
 - CLI, MCP, SDK, and tests
 - Optional report delivery through Open Mailery, Open Telephony, and Open Logs
+- Private/local probe identities, check jobs, signed submissions, and fenced
+  result recording for internal agents
 
 Non-goals for this first release:
 
 - Sentry-style exception tracing
 - hosted multi-tenant SaaS billing
+- hosted probe ingest before cloud check jobs and workspace-scoped storage
 - synthetic browser journeys
 - public incident pages
 - provider-owned delivery configuration; Open Uptime sends through existing

package/dist/api.d.ts

@@ -1,4 +1,5 @@
 import { UptimeService, type UptimeServiceOptions } from "./service.js";
+import { type UptimeRuntimeMode } from "./store.js";
 import type { SchedulerHandle } from "./types.js";
 export interface ServeOptions extends UptimeServiceOptions {
     host?: string;
@@ -6,13 +7,24 @@ export interface ServeOptions extends UptimeServiceOptions {
     check?: boolean;
     service?: UptimeService;
     apiToken?: string;
+    hostedToken?: string;
+    hostedTokens?: HostedToken[];
     allowUnsafeRemoteMutations?: boolean;
 }
 export interface CreateApiHandlerOptions {
     apiToken?: string;
+    hostedToken?: string;
+    hostedTokens?: HostedToken[];
     allowUnsafeRemoteMutations?: boolean;
     fetchImpl?: typeof fetch;
     trustedLoopback?: boolean;
+    mode?: UptimeRuntimeMode;
+}
+export type HostedScope = "uptime:read" | "uptime:write" | "uptime:probe" | "uptime:report" | "uptime:admin";
+export interface HostedToken {
+    token: string;
+    scopes: HostedScope[];
+    workspaceId?: string;
 }
 export declare function createApiHandler(service: UptimeService, options?: CreateApiHandlerOptions): (request: Request) => Promise<Response>;
 export declare function serveUptime(options?: ServeOptions): {

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,YAAa,SAAQ,oBAAoB;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE,uBAA4B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAqEvI;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,CAarJ"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,YAAa,SAAQ,oBAAoB;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,GAAG,eAAe,GAAG,cAAc,CAAC;AAE7G,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE,uBAA4B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA2BvI;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,CA2BrJ"}