@openstatus/health-workos 0.1.4-dev.0

package/README.md

@@ -0,0 +1,73 @@
+# @openstatus/health-workos
+
+[WorkOS](https://workos.com/) probe for
+[`@openstatus/health`](https://jsr.io/@openstatus/health). Sends
+`GET {baseUrl}/organizations?limit=1` with your API key as a bearer header, so
+it proves both that the WorkOS API answers and that the key is valid — with
+`fetch` alone, on every runtime.
+
+```sh
+deno add jsr:@openstatus/health jsr:@openstatus/health-workos
+npm install @openstatus/health @openstatus/health-workos
+```
+
+```ts
+import { createHealthHandler, readEnv } from "@openstatus/health";
+import { workosProbe } from "@openstatus/health-workos";
+
+const apiKey = readEnv("WORKOS_API_KEY");
+
+Deno.serve(
+  createHealthHandler({
+    probes: [
+      // the factory validates `apiKey` at construction, so pass a
+      // placeholder and let `skip` keep the unconfigured check from running.
+      workosProbe({
+        apiKey: apiKey || "unconfigured",
+        skip: () => !apiKey,
+      }),
+    ],
+  }),
+);
+```
+
+`apiKey` is the `WORKOS_API_KEY` of the environment (`sk_test_…` or
+`sk_live_…`). Listing one organization is the cheapest authenticated read on
+the API and has no side effects, so the probe can run on every health request.
+`baseUrl` defaults to `https://api.workos.com`. Like every probe here, this
+one never reads the environment itself — pass the values in, and use `skip`
+for environments where WorkOS is not configured.
+
+```ts
+workosProbe({
+  apiKey: apiKey || "unconfigured",
+  // optional overrides from the Probe contract
+  name: "auth",
+  critical: true,
+  timeoutMs: 2000,
+  skip: () => !apiKey,
+});
+```
+
+Non-critical by default, since AuthKit sessions are verified locally with the
+environment's JWKS and most requests never call the API. Set `critical: true`
+when requests cannot be served without it — SSO and Directory Sync lookups, or
+a login flow that is the whole service.
+
+## About openstatus
+
+[openstatus](https://www.openstatus.dev/) is the open-source uptime monitoring
+and status page platform. This package is part of
+[`@openstatus/health`](https://github.com/openstatusHQ/health), the `/health`
+endpoints behind openstatus's own services, extracted so any JavaScript server
+can expose one. Point an
+[openstatus monitor](https://www.openstatus.dev/docs/reference/http-monitor)
+at the endpoint and assert on `status` in the body to be alerted on
+`degraded` before it becomes `unhealthy`.
+
+Source: [github.com/openstatusHQ/health](https://github.com/openstatusHQ/health).
+Issues and PRs welcome.
+
+## License
+
+[MIT](https://github.com/openstatusHQ/health/blob/main/LICENSE)

package/dist/_virtual/rolldown_runtime.cjs

@@ -0,0 +1,30 @@
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+
+Object.defineProperty(exports, '__toESM', {
+  enumerable: true,
+  get: function () {
+    return __toESM;
+  }
+});

package/dist/mod.cjs

@@ -0,0 +1,36 @@
+const require_rolldown_runtime = require('./_virtual/rolldown_runtime.cjs');
+const __openstatus_health = require_rolldown_runtime.__toESM(require("@openstatus/health"));
+
+//#region src/mod.ts
+/** API base URL when `baseUrl` is unset. */
+const workosDefaultBaseUrl = "https://api.workos.com";
+/** Probe name when `name` is unset. */
+const workosDefaultName = "workos";
+/** A probe that expects 2xx from `GET {baseUrl}/organizations?limit=1` with `apiKey` as a bearer token; non-critical by default. Throws `ProbeConfigError` for an empty `apiKey` or an invalid `baseUrl`. */
+function workosProbe(options) {
+	const doFetch = options.fetch ?? globalThis.fetch;
+	const url = (0, __openstatus_health.probeUrl)({
+		probe: "workosProbe",
+		field: "baseUrl",
+		value: options.baseUrl ?? workosDefaultBaseUrl,
+		path: "/organizations?limit=1"
+	});
+	if (typeof options.apiKey !== "string" || options.apiKey.length === 0) throw new __openstatus_health.ProbeConfigError("workosProbe", "apiKey", typeof options.apiKey !== "string" ? `must be a string, got ${String(options.apiKey)}` : "must not be empty");
+	const headers = { authorization: `Bearer ${options.apiKey}` };
+	return {
+		name: options.name ?? workosDefaultName,
+		critical: options.critical ?? false,
+		timeoutMs: options.timeoutMs,
+		skip: options.skip,
+		run: (signal) => (0, __openstatus_health.expectOk)(doFetch(url, {
+			method: "GET",
+			headers,
+			signal
+		}))
+	};
+}
+
+//#endregion
+exports.workosDefaultBaseUrl = workosDefaultBaseUrl;
+exports.workosDefaultName = workosDefaultName;
+exports.workosProbe = workosProbe;

package/dist/mod.d.cts

@@ -0,0 +1,23 @@
+import { Probe, ProbeOverrides } from "@openstatus/health";
+
+//#region src/mod.d.ts
+
+/** API base URL when `baseUrl` is unset. */
+declare const workosDefaultBaseUrl = "https://api.workos.com";
+/** Probe name when `name` is unset. */
+declare const workosDefaultName = "workos";
+/** Options for `workosProbe()`. */
+interface WorkosProbeOptions extends ProbeOverrides {
+  /** The `WORKOS_API_KEY` of the environment (`sk_…`). */
+  readonly apiKey: string;
+  /** API host. Default `workosDefaultBaseUrl`. */
+  readonly baseUrl?: string | URL;
+  /** Replacement `fetch`, for tests. */
+  readonly fetch?: typeof fetch;
+}
+/** A probe that expects 2xx from `GET {baseUrl}/organizations?limit=1` with `apiKey` as a bearer token; non-critical by default. Throws `ProbeConfigError` for an empty `apiKey` or an invalid `baseUrl`. */
+declare function workosProbe(options: WorkosProbeOptions): Probe;
+//# sourceMappingURL=mod.d.ts.map
+//#endregion
+export { WorkosProbeOptions, workosDefaultBaseUrl, workosDefaultName, workosProbe };
+//# sourceMappingURL=mod.d.cts.map

package/dist/mod.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.cts","names":[],"sources":["../src/mod.ts"],"sourcesContent":[],"mappings":";;;;;AAoCqC,cAfxB,oBAAA,GAewB,wBAAA;;AAA0B,cAblD,iBAAA,GAakD,QAAA;;UAV9C,kBAAA,SAA2B;;;;8BAId;;0BAEJ;;;iBAIV,WAAA,UAAqB,qBAAqB"}

package/dist/mod.d.ts

@@ -0,0 +1,23 @@
+import { Probe, ProbeOverrides } from "@openstatus/health";
+
+//#region src/mod.d.ts
+
+/** API base URL when `baseUrl` is unset. */
+declare const workosDefaultBaseUrl = "https://api.workos.com";
+/** Probe name when `name` is unset. */
+declare const workosDefaultName = "workos";
+/** Options for `workosProbe()`. */
+interface WorkosProbeOptions extends ProbeOverrides {
+  /** The `WORKOS_API_KEY` of the environment (`sk_…`). */
+  readonly apiKey: string;
+  /** API host. Default `workosDefaultBaseUrl`. */
+  readonly baseUrl?: string | URL;
+  /** Replacement `fetch`, for tests. */
+  readonly fetch?: typeof fetch;
+}
+/** A probe that expects 2xx from `GET {baseUrl}/organizations?limit=1` with `apiKey` as a bearer token; non-critical by default. Throws `ProbeConfigError` for an empty `apiKey` or an invalid `baseUrl`. */
+declare function workosProbe(options: WorkosProbeOptions): Probe;
+//# sourceMappingURL=mod.d.ts.map
+//#endregion
+export { WorkosProbeOptions, workosDefaultBaseUrl, workosDefaultName, workosProbe };
+//# sourceMappingURL=mod.d.ts.map

package/dist/mod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.d.ts","names":[],"sources":["../src/mod.ts"],"sourcesContent":[],"mappings":";;;;;AAoCqC,cAfxB,oBAAA,GAewB,wBAAA;;AAA0B,cAblD,iBAAA,GAakD,QAAA;;UAV9C,kBAAA,SAA2B;;;;8BAId;;0BAEJ;;;iBAIV,WAAA,UAAqB,qBAAqB"}

package/dist/mod.js

@@ -0,0 +1,34 @@
+import { ProbeConfigError, expectOk, probeUrl } from "@openstatus/health";
+
+//#region src/mod.ts
+/** API base URL when `baseUrl` is unset. */
+const workosDefaultBaseUrl = "https://api.workos.com";
+/** Probe name when `name` is unset. */
+const workosDefaultName = "workos";
+/** A probe that expects 2xx from `GET {baseUrl}/organizations?limit=1` with `apiKey` as a bearer token; non-critical by default. Throws `ProbeConfigError` for an empty `apiKey` or an invalid `baseUrl`. */
+function workosProbe(options) {
+	const doFetch = options.fetch ?? globalThis.fetch;
+	const url = probeUrl({
+		probe: "workosProbe",
+		field: "baseUrl",
+		value: options.baseUrl ?? workosDefaultBaseUrl,
+		path: "/organizations?limit=1"
+	});
+	if (typeof options.apiKey !== "string" || options.apiKey.length === 0) throw new ProbeConfigError("workosProbe", "apiKey", typeof options.apiKey !== "string" ? `must be a string, got ${String(options.apiKey)}` : "must not be empty");
+	const headers = { authorization: `Bearer ${options.apiKey}` };
+	return {
+		name: options.name ?? workosDefaultName,
+		critical: options.critical ?? false,
+		timeoutMs: options.timeoutMs,
+		skip: options.skip,
+		run: (signal) => expectOk(doFetch(url, {
+			method: "GET",
+			headers,
+			signal
+		}))
+	};
+}
+
+//#endregion
+export { workosDefaultBaseUrl, workosDefaultName, workosProbe };
+//# sourceMappingURL=mod.js.map

package/dist/mod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mod.js","names":["options: WorkosProbeOptions"],"sources":["../src/mod.ts"],"sourcesContent":["/**\n * WorkOS reachability probe for `@openstatus/health`, against `/organizations?limit=1`.\n *\n * ```ts\n * import { workosProbe } from \"@openstatus/health-workos\";\n *\n * const probe = workosProbe({ apiKey: env.WORKOS_API_KEY });\n * ```\n *\n * @module\n */\n\nimport {\n  expectOk,\n  type Probe,\n  ProbeConfigError,\n  type ProbeOverrides,\n  probeUrl,\n} from \"@openstatus/health\";\n\n/** API base URL when `baseUrl` is unset. */\nexport const workosDefaultBaseUrl = \"https://api.workos.com\";\n/** Probe name when `name` is unset. */\nexport const workosDefaultName = \"workos\";\n\n/** Options for `workosProbe()`. */\nexport interface WorkosProbeOptions extends ProbeOverrides {\n  /** The `WORKOS_API_KEY` of the environment (`sk_…`). */\n  readonly apiKey: string;\n  /** API host. Default `workosDefaultBaseUrl`. */\n  readonly baseUrl?: string | URL;\n  /** Replacement `fetch`, for tests. */\n  readonly fetch?: typeof fetch;\n}\n\n/** A probe that expects 2xx from `GET {baseUrl}/organizations?limit=1` with `apiKey` as a bearer token; non-critical by default. Throws `ProbeConfigError` for an empty `apiKey` or an invalid `baseUrl`. */\nexport function workosProbe(options: WorkosProbeOptions): Probe {\n  const doFetch = options.fetch ?? globalThis.fetch;\n  const url = probeUrl({\n    probe: \"workosProbe\",\n    field: \"baseUrl\",\n    value: options.baseUrl ?? workosDefaultBaseUrl,\n    path: \"/organizations?limit=1\",\n  });\n  if (typeof options.apiKey !== \"string\" || options.apiKey.length === 0) {\n    throw new ProbeConfigError(\n      \"workosProbe\",\n      \"apiKey\",\n      typeof options.apiKey !== \"string\"\n        ? `must be a string, got ${String(options.apiKey)}`\n        : \"must not be empty\",\n    );\n  }\n  const headers = { authorization: `Bearer ${options.apiKey}` };\n  return {\n    name: options.name ?? workosDefaultName,\n    critical: options.critical ?? false,\n    timeoutMs: options.timeoutMs,\n    skip: options.skip,\n    run: (signal) => expectOk(doFetch(url, { method: \"GET\", headers, signal })),\n  };\n}\n"],"mappings":";;;;AAqBA,MAAa,uBAAuB;;AAEpC,MAAa,oBAAoB;;AAajC,SAAgB,YAAYA,SAAoC;CAC9D,MAAM,UAAU,QAAQ,SAAS,WAAW;CAC5C,MAAM,MAAM,SAAS;EACnB,OAAO;EACP,OAAO;EACP,OAAO,QAAQ,WAAW;EAC1B,MAAM;CACP,EAAC;AACF,YAAW,QAAQ,WAAW,YAAY,QAAQ,OAAO,WAAW,EAClE,OAAM,IAAI,iBACR,eACA,iBACO,QAAQ,WAAW,YACrB,wBAAwB,OAAO,QAAQ,OAAO,CAAC,IAChD;CAGR,MAAM,UAAU,EAAE,gBAAgB,SAAS,QAAQ,OAAO,EAAG;AAC7D,QAAO;EACL,MAAM,QAAQ,QAAQ;EACtB,UAAU,QAAQ,YAAY;EAC9B,WAAW,QAAQ;EACnB,MAAM,QAAQ;EACd,KAAK,CAAC,WAAW,SAAS,QAAQ,KAAK;GAAE,QAAQ;GAAO;GAAS;EAAQ,EAAC,CAAC;CAC5E;AACF"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@openstatus/health-workos",
+  "version": "0.1.4-dev.0",
+  "description": "WorkOS API probe for @openstatus/health",
+  "keywords": [
+    "openstatus",
+    "health",
+    "healthcheck",
+    "workos",
+    "auth",
+    "sso",
+    "authkit"
+  ],
+  "license": "MIT",
+  "author": {
+    "name": "openstatus",
+    "url": "https://www.openstatus.dev/"
+  },
+  "homepage": "https://github.com/openstatusHQ/health",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/openstatusHQ/health.git",
+    "directory": "packages/workos/"
+  },
+  "bugs": {
+    "url": "https://github.com/openstatusHQ/health/issues"
+  },
+  "type": "module",
+  "module": "./dist/mod.js",
+  "main": "./dist/mod.cjs",
+  "types": "./dist/mod.d.ts",
+  "exports": {
+    ".": {
+      "types": {
+        "import": "./dist/mod.d.ts",
+        "require": "./dist/mod.d.cts"
+      },
+      "import": "./dist/mod.js",
+      "require": "./dist/mod.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "sideEffects": false,
+  "files": [
+    "dist/"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "peerDependencies": {
+    "@openstatus/health": "^0.1.4-dev.0"
+  },
+  "devDependencies": {
+    "tsdown": "^0.12.7",
+    "typescript": "^5.8.3"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "prepack": "tsdown",
+    "test": "node --experimental-transform-types --test"
+  }
+}