@hasna/uptime 0.1.2 → 0.1.4

package/CHANGELOG.md

@@ -6,6 +6,56 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.1.4] - 2026-06-28
+
+### Added
+
+- Local scheduled uptime reports with persisted schedules, run history, and due
+  execution through Mailery email, Telephony SMS, and Open Logs.
+- CLI commands under `uptime report-schedules` plus `uptime audit`.
+- Local API and MCP surfaces for report schedules, report runs, and audit
+  events.
+- Immutable local audit events for report schedule create/update/delete/run
+  actions.
+
+### Changed
+
+- Bumped the local SQLite schema to version 3 while keeping schema version 1
+  and 2 backups restorable when they only lack newer probe/report/audit tables.
+- Hosted report schedule routes fail closed until cloud channel refs, workspace
+  stores, and audit logging are implemented.
+
+### Security
+
+- Persisted report schedules reject inline API keys and tokens; scheduled runs
+  resolve Mailery/Open Logs credentials from environment variables or future
+  cloud channel refs.
+- Audit metadata redacts token/key/secret-like fields before persistence.
+
+## [0.1.3] - 2026-06-28
+
+### Added
+
+- Private/local probe identities, check jobs, fenced signed submissions, and
+  probe signing helpers exported from `@hasna/uptime/probes`.
+- CLI commands for `uptime probes create`, `uptime probes jobs create`,
+  `uptime probes jobs claim`, and `uptime probes submit`.
+- Local API and MCP probe surfaces for public-key enrollment, job
+  creation/claiming, and signed result submission.
+
+### Changed
+
+- Bumped the local SQLite schema to version 2 while keeping schema version 1
+  backups restorable when they are only missing the new probe tables.
+- Hosted probe ingest fails closed until cloud check jobs, workspace stores, and
+  audit logging are implemented.
+
+### Security
+
+- API and MCP probe enrollment require caller-managed public keys; generated
+  private keys are written only by the CLI to an explicit private-key file.
+- Probe job reads redact fencing tokens outside the claim response.
+
 ## [0.1.2] - 2026-06-28
 
 ### Fixed

package/README.md

@@ -27,10 +27,39 @@ uptime summary
 uptime report --dry-run
 uptime report --email ops@example.com --from alerts@example.com --send-key "$MAILERY_SEND_KEY"
 uptime report --sms +15550000001 --logs
+uptime report-schedules create ops --interval 3600 --email ops@example.com --from alerts@example.com
+uptime report-schedules run-due
+uptime report-schedules runs
+uptime audit
 uptime incidents
 uptime serve --port 3899 --check
 ```
 
+Scheduled reports persist endpoint and recipient configuration, but not send
+keys or API tokens. Configure `MAILERY_SEND_KEY`, `HASNA_MAILERY_SEND_KEY`,
+`HASNA_LOGS_API_TOKEN`, or the matching service env vars before scheduled runs.
+
+Private/local probes can submit signed results from another machine:
+
+```bash
+uptime probes create spark01 --private-key-file ./spark01-probe.key.pem
+uptime probes jobs create --monitor <monitor-id> --schedule-slot 2026-06-28T12:00:00Z
+uptime probes jobs claim <job-id> --probe <probe-id>
+uptime probes submit \
+  --probe <probe-id> \
+  --job <job-id> \
+  --schedule-slot 2026-06-28T12:00:00Z \
+  --fencing-token <claim-fencing-token> \
+  --monitor <monitor-id> \
+  --monitor-revision <claim-monitor-revision> \
+  --private-key-file ./spark01-probe.key.pem \
+  --status up
+```
+
+Generated probe private keys are written only to the explicit
+`--private-key-file` path. API and MCP probe enrollment require caller-managed
+public keys.
+
 The local dashboard and API bind to `127.0.0.1` by default:
 
 ```bash
@@ -70,7 +99,9 @@ claude mcp add --scope user uptime -- uptime-mcp
 ```
 
 The MCP server exposes monitor CRUD, check execution, summary, incident, and
-result tools, plus an `uptime_send_report` tool for report delivery.
+result tools, an `uptime_send_report` tool for one-shot report delivery,
+scheduled report tools, local audit event reads, and local probe tools for
+public-key enrollment, job creation/claiming, and signed result submission.
 
 ## SDK
 
@@ -98,8 +129,20 @@ await uptime.sendReport({
   sms: { apiUrl: "http://localhost:19451", to: "+15550000001" },
   logs: { apiUrl: "http://localhost:3460", apiKey: process.env.HASNA_LOGS_API_TOKEN, projectId: "open-uptime" },
 });
+
+const schedule = uptime.createReportSchedule({
+  name: "ops",
+  intervalSeconds: 3600,
+  channels: {
+    email: { from: "alerts@example.com", to: "ops@example.com" },
+    logs: { apiUrl: "http://localhost:3460", projectId: "open-uptime" },
+  },
+});
+await uptime.runReportSchedule(schedule.id);
 ```
 
+Probe agents can import signing helpers from `@hasna/uptime/probes`.
+
 ## API
 
 Run `uptime serve` and use:
@@ -108,6 +151,15 @@ Run `uptime serve` and use:
 - `GET /api/summary`
 - `GET /api/report`
 - `POST /api/report`
+- `GET /api/report-schedules`
+- `POST /api/report-schedules`
+- `GET /api/report-schedules/:id`
+- `PATCH /api/report-schedules/:id`
+- `DELETE /api/report-schedules/:id`
+- `POST /api/report-schedules/:id/run`
+- `POST /api/report-schedules/run-due`
+- `GET /api/report-runs?scheduleId=<id>&limit=100`
+- `GET /api/audit-events?resourceType=<type>&resourceId=<id>`
 - `GET /api/monitors`
 - `POST /api/monitors`
 - `GET /api/monitors/:id`
@@ -115,6 +167,21 @@ Run `uptime serve` and use:
 - `POST /api/monitors/:id/check`
 - `GET /api/incidents`
 - `GET /api/results?monitorId=<id>&limit=100`
+- `GET /api/probes`
+- `POST /api/probes`
+- `POST /api/probes/jobs`
+- `GET /api/probes/jobs/:id`
+- `POST /api/probes/jobs/:id/claim`
+- `POST /api/probes/results`
+
+Hosted `/api/v1/probes*` routes currently fail closed with `501` until cloud
+check jobs, workspace stores, and audit logging are implemented. Local job reads
+redact fencing tokens; the claim response is the only API response that returns
+the active fencing token.
+
+Hosted `/api/v1/report-schedules*`, `/api/v1/report-runs`, and
+`/api/v1/audit-events` also fail closed until cloud channel refs, workspace
+stores, and cloud audit logging are implemented.
 
 ## Scope
 
@@ -129,11 +196,15 @@ First release:
 - local dashboard/API
 - CLI, MCP, SDK, and tests
 - Optional report delivery through Open Mailery, Open Telephony, and Open Logs
+- Scheduled report definitions, report run history, and local audit events
+- Private/local probe identities, check jobs, signed submissions, and fenced
+  result recording for internal agents
 
 Non-goals for this first release:
 
 - Sentry-style exception tracing
 - hosted multi-tenant SaaS billing
+- hosted probe ingest before cloud check jobs and workspace-scoped storage
 - synthetic browser journeys
 - public incident pages
 - provider-owned delivery configuration; Open Uptime sends through existing

package/dist/api.d.ts

@@ -1,4 +1,5 @@
 import { UptimeService, type UptimeServiceOptions } from "./service.js";
+import { type UptimeRuntimeMode } from "./store.js";
 import type { SchedulerHandle } from "./types.js";
 export interface ServeOptions extends UptimeServiceOptions {
     host?: string;
@@ -6,13 +7,24 @@ export interface ServeOptions extends UptimeServiceOptions {
     check?: boolean;
     service?: UptimeService;
     apiToken?: string;
+    hostedToken?: string;
+    hostedTokens?: HostedToken[];
     allowUnsafeRemoteMutations?: boolean;
 }
 export interface CreateApiHandlerOptions {
     apiToken?: string;
+    hostedToken?: string;
+    hostedTokens?: HostedToken[];
     allowUnsafeRemoteMutations?: boolean;
     fetchImpl?: typeof fetch;
     trustedLoopback?: boolean;
+    mode?: UptimeRuntimeMode;
+}
+export type HostedScope = "uptime:read" | "uptime:write" | "uptime:probe" | "uptime:report" | "uptime:admin";
+export interface HostedToken {
+    token: string;
+    scopes: HostedScope[];
+    workspaceId?: string;
 }
 export declare function createApiHandler(service: UptimeService, options?: CreateApiHandlerOptions): (request: Request) => Promise<Response>;
 export declare function serveUptime(options?: ServeOptions): {

package/dist/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,YAAa,SAAQ,oBAAoB;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE,uBAA4B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAqEvI;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,CAarJ"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,YAAa,SAAQ,oBAAoB;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC;IAC7B,0BAA0B,CAAC,EAAE,OAAO,CAAC;IACrC,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,IAAI,CAAC,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,cAAc,GAAG,cAAc,GAAG,eAAe,GAAG,cAAc,CAAC;AAE7G,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE,uBAA4B,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA2BvI;AAED,wBAAgB,WAAW,CAAC,OAAO,GAAE,YAAiB,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,OAAO,EAAE,aAAa,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,CA2BrJ"}