sermon-js 0.0.0-stage → 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 BSide-Tech
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,240 @@
-# Temporary Holding Version
+# sermon-js
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Ser**vice **mon**itor: everything behind a status page, as a TypeScript library.
+
+Describe the services you depend on, and get checks, scoring, history, an HTTP API and a
+ready-made page. It runs anywhere: Node, Bun, Deno, Vercel, Netlify, Cloudflare Workers.
+No hosting assumptions, no required database.
+
+> **Status: pre-release.** Everything below is built and tested; the first npm release is
+> pending. See [Roadmap](#roadmap).
+
+```bash
+npm install sermon-js
+```
+
+## Quick start
+
+```ts
+import { custom, defineStatus, generic, group } from "sermon-js";
+import { createStatusHandler } from "sermon-js/api";
+
+export const status = defineStatus({
+  services: [
+    group({
+      title: "Our services",
+      services: [
+        generic.http({ name: "Web app", url: process.env.WEB_URL, critical: true }),
+        generic.http({
+          name: "API",
+          url: "https://api.example.com/health",
+          secrets: { token: process.env.API_TOKEN },
+          headers: (secrets) => ({ Authorization: `Bearer ${secrets.token}` }),
+          critical: true,
+        }),
+      ],
+    }),
+    custom({
+      name: "Queue depth",
+      check: async ({ http }) => {
+        const res = await http("https://queue.internal/stats");
+        if (!res.ok) return res.outcome;
+        const { waiting, limit } = res.json as { waiting: number; limit: number };
+        return {
+          status: waiting > limit * 0.9 ? "degraded" : "up",
+          usage: [{ label: "Queue", used: waiting, limit, unit: "jobs" }],
+        };
+      },
+    }),
+  ],
+});
+
+// A standard (Request) => Response handler: mount it in any framework
+export const handler = createStatusHandler(status);
+```
+
+Then trigger `status.tick()` on a schedule (see [Scheduling](docs/scheduling.md)) and read
+`GET /api/status`.
+
+## Describing services
+
+`services` is a list of **presets** (see [all presets](docs/presets.md)), **custom checks** and
+**groups**. Groups can nest. Every service takes the same five concerns:
+
+| Concern | Option |
+|---|---|
+| How to call it | `name` |
+| What it is | the function you call, plus the fields it needs (`url`, …) |
+| Secrets it needs | `secrets: { … }`: redacted from everything public and from logs (see [Security](docs/security.md)) |
+| What to track | `track: { … }`: options of the preset |
+| Importance | `critical: true` weighs more in the score; one critical service down means "outage" |
+
+```ts
+import { deepgram, fly, statuspage } from "sermon-js/presets";
+
+group({ title: "Platform", services: [
+  // Never wakes a sleeping machine; reports each region on its own
+  fly.app({ app: "my-api", secrets: { token: process.env.FLY_API_TOKEN }, critical: true }),
+  deepgram({ secrets: { apiKey: process.env.DEEPGRAM_API_KEY }, track: { balance: { warnBelow: 20 } } }),
+  statuspage({ name: "Fly.io", url: "https://status.flyio.net" }),
+] })
+```
+
+A service whose required secret or field is empty (say, an environment variable that isn't
+set yet) is listed as **not configured**: it never runs and never throws.
+
+Services have no IDs. Keys are derived (`our-services:web-app`), unique and URL-safe.
+
+### Custom checks
+
+```ts
+custom({
+  name: "Queue depth",              // required
+  description: "Jobs waiting in the worker queue",
+  critical: false,
+  secrets: { apiKey: process.env.QUEUE_API_KEY },   // typed inside `check`
+  slowMs: 1500,                     // slower than this → degraded (default 2000)
+  timeoutMs: 10_000,                // hard cap (default 10 s)
+  check: async ({ secrets, http, measure, combine, signal, cache }) => { … },
+});
+```
+
+`check` returns `true`/nothing (up), `false` (down), or an outcome:
+
+```ts
+type CheckOutcome = {
+  status: "up" | "degraded" | "down" | "sleeping";
+  latencyMs?: number;      // measured for you when omitted
+  httpStatus?: number;
+  error?: string;          // shown publicly: secrets are redacted, long text truncated
+  metrics?: Record<string, string | number>;                        // small chips
+  usage?: { label; used; limit; unit?; resetsAt? }[];               // quota bars
+  instances?: { key; region?; state?; status; latencyMs?; error? }[]; // per machine/region
+  probed?: boolean;        // false when the target was deliberately not touched
+};
+```
+
+Throwing means down. The helpers never throw: `http()` returns
+`{ ok, status, latencyMs, json, text, outcome }` where `outcome` is ready to return.
+
+### Statuses
+
+| Status | Meaning | Score |
+|---|---|---|
+| `up` | Reachable and healthy | 1 |
+| `degraded` | Working with a warning: slow, rate limited, low quota, part of its instances down | 0.6 |
+| `down` | Unreachable, erroring, rejected, crashed | 0 |
+| `sleeping` | Deliberately not running (scale to zero), and not probed | 1 |
+| `unconfigured` | A required secret or field is empty; never run | excluded |
+
+Applied to every service: latency above `slowMs` turns up into degraded, HTTP 429 is
+degraded, timeouts and thrown errors are down.
+
+### Writing a preset
+
+```ts
+import { definePreset, type PresetOptions } from "sermon-js";
+
+type Options = PresetOptions & {
+  app: string;
+  secrets: { token: string | undefined };
+  track?: { health?: string | false };
+};
+
+export const flyApp = definePreset<Options>()({
+  kind: "fly.app",
+  requiredSecrets: ["token"],
+  derive: (o) => ({ name: o.app, identity: `fly.app:${o.app}` }),
+  check: async ({ options, secrets, http }) => { … },
+});
+```
+
+`identity` gives the service a natural key, so its history survives renames and moves.
+
+## The engine
+
+```ts
+await status.tick();                      // run everything, only if due (idempotent)
+await status.run();                       // run everything now
+await status.run({ keys: ["queue-depth"] });
+await status.snapshot();                  // tree + latest results + statistics + score
+await status.history({ range: "24h" });   // score history in buckets ("24h" | "7d")
+await status.serviceHistory("queue-depth");
+```
+
+Options: `interval` (default `"5m"`), `retention` (`"7d"`), `scoring`, `store`, `hideResponseBodies`
+(report failed answers by status code only; see [Security](docs/security.md)).
+
+## HTTP API
+
+```ts
+createStatusHandler(status, {
+  basePath: "/api",          // default
+  secret: process.env.TICK_SECRET,   // protects /tick when set
+  refreshOnRead: false,      // start a run when /status is read and data is stale
+  rateLimits: { runAll: "60s", runOne: "20s" },
+  cors: false,
+});
+```
+
+| Route | |
+|---|---|
+| `GET /status` | Snapshot |
+| `GET /history?range=24h\|7d` | Score history |
+| `GET /services/:key/history` | Samples of one service |
+| `POST /run`, `POST /run/:key` | On-demand runs, rate limited |
+| `GET\|POST /tick` | Run if due, for schedulers |
+
+For plain Node servers: `http.createServer(toNodeListener(handler))`.
+
+## Stores
+
+History is kept in memory by default, which lasts as long as the process. For anything
+serverless, or to survive restarts, pass a store:
+
+```ts
+import { upstashStore } from "sermon-js/stores/upstash";   // Upstash / Vercel KV, fetch only
+import { redisStore } from "sermon-js/stores/redis";       // any Redis client you already have
+
+defineStatus({ store: upstashStore({ url, token }), services });
+defineStatus({ store: redisStore({ client: new Redis(url) }), services });   // ioredis or node-redis
+```
+
+```ts
+import { sqlStore } from "sermon-js/stores/sql";           // Postgres, MySQL/MariaDB, SQLite: your driver
+import { mongoStore } from "sermon-js/stores/mongodb";
+
+defineStatus({ store: sqlStore({ dialect: "postgres", query: async (sql, params) => (await pool.query(sql, params)).rows }), services });
+defineStatus({ store: mongoStore({ db: client.db("status") }), services });
+```
+
+Anything else is a small interface to implement and a conformance suite to check it with.
+See [Stores](docs/stores.md).
+
+## UI
+
+```tsx
+import { StatusPage } from "sermon-js/react/heroui";
+
+<StatusPage baseUrl="/api" brand={<Logo />} />
+```
+
+A complete page (score, history, collapsible sections, per-region details, usage bars,
+on-demand checks, deep links, theme switch) on HeroUI and Tailwind, plus a headless layer of
+hooks and helpers to build your own. See [UI kit](docs/ui.md) and
+[`examples/vite`](examples/vite).
+
+## Roadmap
+
+- [x] Core: config tree, custom checks, `generic.http`, runner, scoring, history, statistics
+- [x] Host-agnostic scheduling: `tick()`, `startScheduler`, `/tick`, refresh on read
+- [x] HTTP API handler, Node adapter
+- [x] Stores: memory, Upstash REST, any Redis client
+- [x] Presets: Fly apps (sleep-safe, per region), GCP instances, AWS/S3, Statuspage, Pusher, AI/translation/video/email/search providers, Vercel, MongoDB, Redis, PostgreSQL
+- [x] Stores: SQL (Postgres, MySQL/MariaDB, SQLite), MongoDB
+- [x] React UI kit (headless hooks + HeroUI components)
+- [ ] First npm release
+
+## License
+
+MIT

package/dist/api/index.cjs

@@ -0,0 +1,174 @@
+'use strict';
+
+var chunkNP3YYVRZ_cjs = require('../chunk-NP3YYVRZ.cjs');
+
+// src/api/index.ts
+var RUN_ALL_LOCK = "sermon:run:all";
+function parseRange(value) {
+  return value && value in chunkNP3YYVRZ_cjs.RANGES ? value : "24h";
+}
+function safeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+function presentedSecret(request, url) {
+  const authorization = request.headers.get("authorization");
+  if (authorization?.toLowerCase().startsWith("bearer ")) return authorization.slice(7).trim();
+  return request.headers.get("x-sermon-secret") ?? url.searchParams.get("key") ?? void 0;
+}
+function describeError(error) {
+  if (!(error instanceof Error)) return String(error);
+  const parts = [error.stack ?? `${error.name}: ${error.message}`];
+  let cause = error.cause;
+  for (let depth = 0; cause && depth < 3; depth++) {
+    parts.push(`Caused by: ${cause instanceof Error ? `${cause.name}: ${cause.message}` : String(cause)}`);
+    cause = cause instanceof Error ? cause.cause : void 0;
+  }
+  return parts.join("\n");
+}
+function createStatusHandler(status, options = {}) {
+  const basePath = `/${(options.basePath ?? "/api").replace(/^\/+|\/+$/g, "")}`.replace(/^\/$/, "");
+  const runAllMs = chunkNP3YYVRZ_cjs.toMs(options.rateLimits?.runAll ?? "60s");
+  const runOneMs = chunkNP3YYVRZ_cjs.toMs(options.rateLimits?.runOne ?? "20s");
+  const refreshBudgetMs = chunkNP3YYVRZ_cjs.toMs(options.refreshBudget ?? "8s");
+  const cache = options.cache === false ? void 0 : { status: 10, history: 30, ...options.cache };
+  const corsHeaders = (request) => {
+    if (!options.cors) return {};
+    const origin = options.cors === true ? request.headers.get("origin") ?? "*" : options.cors;
+    return {
+      "access-control-allow-origin": origin,
+      "access-control-allow-methods": "GET, POST, OPTIONS",
+      "access-control-allow-headers": "authorization, content-type, x-sermon-secret",
+      vary: "origin"
+    };
+  };
+  const json = (request, body, init = {}) => new Response(JSON.stringify(body), {
+    status: init.status ?? 200,
+    headers: {
+      "content-type": "application/json; charset=utf-8",
+      "cache-control": "no-store",
+      ...corsHeaders(request),
+      ...init.headers
+    }
+  });
+  const cached = (seconds) => seconds ? {
+    "cache-control": "no-cache",
+    "cdn-cache-control": `max-age=${seconds}, stale-while-revalidate=${seconds * 3}`
+  } : {};
+  const tooSoon = (request, message, retryAfterMs) => {
+    const retryAfter = Math.max(1, Math.ceil(retryAfterMs / 1e3));
+    return json(request, { error: message, retryAfter }, { status: 429, headers: { "retry-after": String(retryAfter) } });
+  };
+  async function refreshIfStale(context) {
+    const last = await status.lastFullRun();
+    if (last && Date.now() < last.at + status.intervalMs) return;
+    const tick = status.tick().catch(() => void 0);
+    const waitUntil = context?.waitUntil ?? options.waitUntil;
+    if (waitUntil) {
+      waitUntil(tick);
+      return;
+    }
+    await Promise.race([tick, new Promise((resolve) => setTimeout(resolve, refreshBudgetMs))]);
+  }
+  return async function handle(request, context) {
+    const url = new URL(request.url);
+    const method = request.method.toUpperCase();
+    if (basePath && url.pathname !== basePath && !url.pathname.startsWith(`${basePath}/`)) {
+      return json(request, { error: "Not found" }, { status: 404 });
+    }
+    if (method === "OPTIONS") return new Response(null, { status: 204, headers: corsHeaders(request) });
+    let segments;
+    try {
+      segments = url.pathname.slice(basePath.length).split("/").filter(Boolean).map((segment) => decodeURIComponent(segment));
+    } catch {
+      return json(request, { error: "Not found" }, { status: 404 });
+    }
+    const [first, second, third] = segments;
+    try {
+      if (method === "GET" && first === "status" && segments.length === 1) {
+        if (options.refreshOnRead) await refreshIfStale(context);
+        return json(request, await status.snapshot(), { headers: cached(cache?.status) });
+      }
+      if (method === "GET" && first === "history" && segments.length === 1) {
+        const range = parseRange(url.searchParams.get("range"));
+        return json(request, await status.history({ range }), { headers: cached(cache?.history) });
+      }
+      if (method === "GET" && first === "services" && second && third === "history" && segments.length === 3) {
+        if (!status.has(second)) return json(request, { error: "Unknown service" }, { status: 404 });
+        const range = parseRange(url.searchParams.get("range"));
+        return json(request, await status.serviceHistory(second, { range }), { headers: cached(cache?.history) });
+      }
+      if (method === "POST" && first === "run" && segments.length === 1) {
+        const lock = await status.lock(RUN_ALL_LOCK, runAllMs);
+        if (!lock.ok) return tooSoon(request, "A full run happened recently", lock.retryAfterMs);
+        await status.run({ trigger: "manual" });
+        return json(request, await status.snapshot());
+      }
+      if (method === "POST" && first === "run" && second && segments.length === 2) {
+        if (!status.has(second)) return json(request, { error: "Unknown service" }, { status: 404 });
+        const lock = await status.lock(`sermon:run:${second}`, runOneMs);
+        if (!lock.ok) return tooSoon(request, "This service was checked recently", lock.retryAfterMs);
+        await status.run({ keys: [second], trigger: "manual" });
+        return json(request, await status.snapshot());
+      }
+      if ((method === "GET" || method === "POST") && (first === "tick" || first === "cron") && segments.length === 1) {
+        const presented = presentedSecret(request, url);
+        const authorized = !!options.secret && !!presented && safeEqual(presented, options.secret);
+        if (options.secret && !authorized) return json(request, { error: "Unauthorized" }, { status: 401 });
+        const force = authorized && ["1", "true"].includes(url.searchParams.get("force") ?? "");
+        const result = await status.tick({ force });
+        if (!result.ran) return json(request, result);
+        await status.lock(RUN_ALL_LOCK, runAllMs);
+        return json(request, {
+          ran: true,
+          at: result.report.at,
+          score: result.report.score,
+          label: result.report.label,
+          statuses: Object.fromEntries(result.report.results.map((r) => [r.key, r.status]))
+        });
+      }
+      return json(request, { error: "Not found" }, { status: 404 });
+    } catch (error) {
+      const message = status.redact(describeError(error));
+      if (options.onError) options.onError({ message, error });
+      else console.error(`[sermon-js] ${message}`);
+      return json(request, { error: "Internal error" }, { status: 500 });
+    }
+  };
+}
+function toNodeListener(handler) {
+  return async function listener(req, res) {
+    try {
+      const host = (Array.isArray(req.headers.host) ? req.headers.host[0] : req.headers.host) ?? "localhost";
+      const headers = new Headers();
+      for (const [name, value] of Object.entries(req.headers)) {
+        if (value !== void 0) headers.set(name, Array.isArray(value) ? value.join(", ") : value);
+      }
+      const method = (req.method ?? "GET").toUpperCase();
+      let body;
+      if (method !== "GET" && method !== "HEAD") {
+        const decoder = new TextDecoder();
+        body = "";
+        for await (const chunk of req) body += decoder.decode(chunk, { stream: true });
+        body += decoder.decode();
+      }
+      const response = await handler(
+        new Request(`http://${host}${req.url ?? "/"}`, { method, headers, body: body || void 0 })
+      );
+      res.statusCode = response.status;
+      response.headers.forEach((value, name) => res.setHeader(name, value));
+      res.end(await response.text());
+    } catch (error) {
+      console.error(`[sermon-js] ${error instanceof Error ? error.name : "Error"} while serving a request`);
+      res.statusCode = 500;
+      res.end('{"error":"Internal error"}');
+    }
+  };
+}
+
+exports.createStatusHandler = createStatusHandler;
+exports.toNodeListener = toNodeListener;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/api/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/api/index.ts"],"names":["RANGES","toMs"],"mappings":";;;;;AAoDA,IAAM,YAAA,GAAe,gBAAA;AAErB,SAAS,WAAW,KAAA,EAAoC;AACtD,EAAA,OAAO,KAAA,IAAS,KAAA,IAASA,wBAAA,GAAU,KAAA,GAAyB,KAAA;AAC9D;AAGA,SAAS,SAAA,CAAU,GAAW,CAAA,EAAW;AACvC,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,CAAA,CAAE,MAAA,EAAQ,OAAO,KAAA;AAClC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,MAAA,EAAQ,CAAA,EAAA,EAAK,IAAA,IAAQ,CAAA,CAAE,UAAA,CAAW,CAAC,CAAA,GAAI,CAAA,CAAE,WAAW,CAAC,CAAA;AAC3E,EAAA,OAAO,IAAA,KAAS,CAAA;AAClB;AAEA,SAAS,eAAA,CAAgB,SAAkB,GAAA,EAAU;AACnD,EAAA,MAAM,aAAA,GAAgB,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,eAAe,CAAA;AACzD,EAAA,IAAI,aAAA,EAAe,WAAA,EAAY,CAAE,UAAA,CAAW,SAAS,CAAA,EAAG,OAAO,aAAA,CAAc,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA,EAAK;AAC3F,EAAA,OAAO,OAAA,CAAQ,QAAQ,GAAA,CAAI,iBAAiB,KAAK,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,KAAK,CAAA,IAAK,MAAA;AAClF;AAgBA,SAAS,cAAc,KAAA,EAAgB;AACrC,EAAA,IAAI,EAAE,KAAA,YAAiB,KAAA,CAAA,EAAQ,OAAO,OAAO,KAAK,CAAA;AAClD,EAAA,MAAM,KAAA,GAAQ,CAAC,KAAA,CAAM,KAAA,IAAS,CAAA,EAAG,MAAM,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAC/D,EAAA,IAAI,QAAS,KAAA,CAAsC,KAAA;AACnD,EAAA,KAAA,IAAS,KAAA,GAAQ,CAAA,EAAG,KAAA,IAAS,KAAA,GAAQ,GAAG,KAAA,EAAA,EAAS;AAC/C,IAAA,KAAA,CAAM,IAAA,CAAK,CAAA,WAAA,EAAc,KAAA,YAAiB,KAAA,GAAQ,GAAG,KAAA,CAAM,IAAI,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA,GAAK,MAAA,CAAO,KAAK,CAAC,CAAA,CAAE,CAAA;AACrG,IAAA,KAAA,GAAQ,KAAA,YAAiB,KAAA,GAAS,KAAA,CAAsC,KAAA,GAAQ,MAAA;AAAA,EAClF;AACA,EAAA,OAAO,KAAA,CAAM,KAAK,IAAI,CAAA;AACxB;AAEO,SAAS,mBAAA,CAAoB,MAAA,EAAgB,OAAA,GAAgC,EAAC,EAAkB;AACrG,EAAA,MAAM,QAAA,GAAW,CAAA,CAAA,EAAA,CAAK,OAAA,CAAQ,QAAA,IAAY,MAAA,EAAQ,OAAA,CAAQ,YAAA,EAAc,EAAE,CAAC,CAAA,CAAA,CAAG,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AAChG,EAAA,MAAM,QAAA,GAAWC,sBAAA,CAAK,OAAA,CAAQ,UAAA,EAAY,UAAU,KAAK,CAAA;AACzD,EAAA,MAAM,QAAA,GAAWA,sBAAA,CAAK,OAAA,CAAQ,UAAA,EAAY,UAAU,KAAK,CAAA;AACzD,EAAA,MAAM,eAAA,GAAkBA,sBAAA,CAAK,OAAA,CAAQ,aAAA,IAAiB,IAAI,CAAA;AAC1D,EAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,KAAA,KAAU,KAAA,GAAQ,MAAA,GAAY,EAAE,MAAA,EAAQ,EAAA,EAAI,OAAA,EAAS,EAAA,EAAI,GAAG,OAAA,CAAQ,KAAA,EAAM;AAEhG,EAAA,MAAM,WAAA,GAAc,CAAC,OAAA,KAA6C;AAChE,IAAA,IAAI,CAAC,OAAA,CAAQ,IAAA,EAAM,OAAO,EAAC;AAC3B,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,KAAS,IAAA,GAAQ,OAAA,CAAQ,QAAQ,GAAA,CAAI,QAAQ,CAAA,IAAK,GAAA,GAAO,OAAA,CAAQ,IAAA;AACxF,IAAA,OAAO;AAAA,MACL,6BAAA,EAA+B,MAAA;AAAA,MAC/B,8BAAA,EAAgC,oBAAA;AAAA,MAChC,8BAAA,EAAgC,8CAAA;AAAA,MAChC,IAAA,EAAM;AAAA,KACR;AAAA,EACF,CAAA;AAEA,EAAA,MAAM,IAAA,GAAO,CAAC,OAAA,EAAkB,IAAA,EAAe,IAAA,GAA8D,EAAC,KAC5G,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA,EAAG;AAAA,IACjC,MAAA,EAAQ,KAAK,MAAA,IAAU,GAAA;AAAA,IACvB,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,iCAAA;AAAA,MAChB,eAAA,EAAiB,UAAA;AAAA,MACjB,GAAG,YAAY,OAAO,CAAA;AAAA,MACtB,GAAG,IAAA,CAAK;AAAA;AACV,GACD,CAAA;AAGH,EAAA,MAAM,MAAA,GAAS,CAAC,OAAA,KACd,OAAA,GACI;AAAA,IACE,eAAA,EAAiB,UAAA;AAAA,IACjB,mBAAA,EAAqB,CAAA,QAAA,EAAW,OAAO,CAAA,yBAAA,EAA4B,UAAU,CAAC,CAAA;AAAA,MAEhF,EAAC;AAEP,EAAA,MAAM,OAAA,GAAU,CAAC,OAAA,EAAkB,OAAA,EAAiB,YAAA,KAAyB;AAC3E,IAAA,MAAM,UAAA,GAAa,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,IAAA,CAAK,YAAA,GAAe,GAAI,CAAC,CAAA;AAC7D,IAAA,OAAO,KAAK,OAAA,EAAS,EAAE,KAAA,EAAO,OAAA,EAAS,YAAW,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,SAAS,EAAE,aAAA,EAAe,OAAO,UAAU,CAAA,IAAK,CAAA;AAAA,EACtH,CAAA;AAEA,EAAA,eAAe,eAAe,OAAA,EAAqC;AACjE,IAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,WAAA,EAAY;AACtC,IAAA,IAAI,QAAQ,IAAA,CAAK,GAAA,KAAQ,IAAA,CAAK,EAAA,GAAK,OAAO,UAAA,EAAY;AACtD,IAAA,MAAM,OAAO,MAAA,CAAO,IAAA,EAAK,CAAE,KAAA,CAAM,MAAM,MAAS,CAAA;AAChD,IAAA,MAAM,SAAA,GAAY,OAAA,EAAS,SAAA,IAAa,OAAA,CAAQ,SAAA;AAChD,IAAA,IAAI,SAAA,EAAW;AACb,MAAA,SAAA,CAAU,IAAI,CAAA;AACd,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,CAAQ,IAAA,CAAK,CAAC,IAAA,EAAM,IAAI,OAAA,CAAQ,CAAC,OAAA,KAAY,UAAA,CAAW,OAAA,EAAS,eAAe,CAAC,CAAC,CAAC,CAAA;AAAA,EAC3F;AAEA,EAAA,OAAO,eAAe,MAAA,CAAO,OAAA,EAAS,OAAA,EAAS;AAC7C,IAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,OAAA,CAAQ,GAAG,CAAA;AAC/B,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAY;AAC1C,IAAA,IAAI,QAAA,IAAY,GAAA,CAAI,QAAA,KAAa,QAAA,IAAY,CAAC,GAAA,CAAI,QAAA,CAAS,UAAA,CAAW,CAAA,EAAG,QAAQ,CAAA,CAAA,CAAG,CAAA,EAAG;AACrF,MAAA,OAAO,IAAA,CAAK,SAAS,EAAE,KAAA,EAAO,aAAY,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAC9D;AACA,IAAA,IAAI,MAAA,KAAW,SAAA,EAAW,OAAO,IAAI,QAAA,CAAS,IAAA,EAAM,EAAE,MAAA,EAAQ,GAAA,EAAK,OAAA,EAAS,WAAA,CAAY,OAAO,GAAG,CAAA;AAElG,IAAA,IAAI,QAAA;AACJ,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,IAAI,QAAA,CACZ,KAAA,CAAM,QAAA,CAAS,MAAM,EACrB,KAAA,CAAM,GAAG,CAAA,CACT,MAAA,CAAO,OAAO,CAAA,CACd,GAAA,CAAI,CAAC,OAAA,KAAY,kBAAA,CAAmB,OAAO,CAAC,CAAA;AAAA,IACjD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,IAAA,CAAK,SAAS,EAAE,KAAA,EAAO,aAAY,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAC9D;AACA,IAAA,MAAM,CAAC,KAAA,EAAO,MAAA,EAAQ,KAAK,CAAA,GAAI,QAAA;AAE/B,IAAA,IAAI;AACF,MAAA,IAAI,WAAW,KAAA,IAAS,KAAA,KAAU,QAAA,IAAY,QAAA,CAAS,WAAW,CAAA,EAAG;AACnE,QAAA,IAAI,OAAA,CAAQ,aAAA,EAAe,MAAM,cAAA,CAAe,OAAO,CAAA;AACvD,QAAA,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,MAAA,CAAO,QAAA,EAAS,EAAG,EAAE,OAAA,EAAS,MAAA,CAAO,KAAA,EAAO,MAAM,CAAA,EAAG,CAAA;AAAA,MAClF;AAEA,MAAA,IAAI,WAAW,KAAA,IAAS,KAAA,KAAU,SAAA,IAAa,QAAA,CAAS,WAAW,CAAA,EAAG;AACpE,QAAA,MAAM,QAAQ,UAAA,CAAW,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AACtD,QAAA,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,MAAA,CAAO,QAAQ,EAAE,KAAA,EAAO,CAAA,EAAG,EAAE,OAAA,EAAS,MAAA,CAAO,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC3F;AAEA,MAAA,IAAI,MAAA,KAAW,SAAS,KAAA,KAAU,UAAA,IAAc,UAAU,KAAA,KAAU,SAAA,IAAa,QAAA,CAAS,MAAA,KAAW,CAAA,EAAG;AACtG,QAAA,IAAI,CAAC,MAAA,CAAO,GAAA,CAAI,MAAM,GAAG,OAAO,IAAA,CAAK,OAAA,EAAS,EAAE,OAAO,iBAAA,EAAkB,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAC3F,QAAA,MAAM,QAAQ,UAAA,CAAW,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAC,CAAA;AACtD,QAAA,OAAO,KAAK,OAAA,EAAS,MAAM,MAAA,CAAO,cAAA,CAAe,QAAQ,EAAE,KAAA,EAAO,CAAA,EAAG,EAAE,OAAA,EAAS,MAAA,CAAO,KAAA,EAAO,OAAO,GAAG,CAAA;AAAA,MAC1G;AAEA,MAAA,IAAI,WAAW,MAAA,IAAU,KAAA,KAAU,KAAA,IAAS,QAAA,CAAS,WAAW,CAAA,EAAG;AACjE,QAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,IAAA,CAAK,cAAc,QAAQ,CAAA;AACrD,QAAA,IAAI,CAAC,KAAK,EAAA,EAAI,OAAO,QAAQ,OAAA,EAAS,8BAAA,EAAgC,KAAK,YAAY,CAAA;AACvF,QAAA,MAAM,MAAA,CAAO,GAAA,CAAI,EAAE,OAAA,EAAS,UAAU,CAAA;AACtC,QAAA,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAAA,MAC9C;AAEA,MAAA,IAAI,WAAW,MAAA,IAAU,KAAA,KAAU,SAAS,MAAA,IAAU,QAAA,CAAS,WAAW,CAAA,EAAG;AAC3E,QAAA,IAAI,CAAC,MAAA,CAAO,GAAA,CAAI,MAAM,GAAG,OAAO,IAAA,CAAK,OAAA,EAAS,EAAE,OAAO,iBAAA,EAAkB,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAC3F,QAAA,MAAM,OAAO,MAAM,MAAA,CAAO,KAAK,CAAA,WAAA,EAAc,MAAM,IAAI,QAAQ,CAAA;AAC/D,QAAA,IAAI,CAAC,KAAK,EAAA,EAAI,OAAO,QAAQ,OAAA,EAAS,mCAAA,EAAqC,KAAK,YAAY,CAAA;AAC5F,QAAA,MAAM,MAAA,CAAO,IAAI,EAAE,IAAA,EAAM,CAAC,MAAM,CAAA,EAAG,OAAA,EAAS,QAAA,EAAU,CAAA;AACtD,QAAA,OAAO,IAAA,CAAK,OAAA,EAAS,MAAM,MAAA,CAAO,UAAU,CAAA;AAAA,MAC9C;AAGA,MAAA,IAAA,CAAK,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,MAAA,MAAY,KAAA,KAAU,UAAU,KAAA,KAAU,MAAA,CAAA,IAAW,QAAA,CAAS,MAAA,KAAW,CAAA,EAAG;AAC9G,QAAA,MAAM,SAAA,GAAY,eAAA,CAAgB,OAAA,EAAS,GAAG,CAAA;AAC9C,QAAA,MAAM,UAAA,GAAa,CAAC,CAAC,OAAA,CAAQ,MAAA,IAAU,CAAC,CAAC,SAAA,IAAa,SAAA,CAAU,SAAA,EAAW,OAAA,CAAQ,MAAM,CAAA;AACzF,QAAA,IAAI,OAAA,CAAQ,MAAA,IAAU,CAAC,UAAA,SAAmB,IAAA,CAAK,OAAA,EAAS,EAAE,KAAA,EAAO,cAAA,EAAe,EAAG,EAAE,MAAA,EAAQ,KAAK,CAAA;AAGlG,QAAA,MAAM,KAAA,GAAQ,UAAA,IAAc,CAAC,GAAA,EAAK,MAAM,CAAA,CAAE,QAAA,CAAS,GAAA,CAAI,YAAA,CAAa,GAAA,CAAI,OAAO,CAAA,IAAK,EAAE,CAAA;AACtF,QAAA,MAAM,SAAS,MAAM,MAAA,CAAO,IAAA,CAAK,EAAE,OAAO,CAAA;AAC1C,QAAA,IAAI,CAAC,MAAA,CAAO,GAAA,EAAK,OAAO,IAAA,CAAK,SAAS,MAAM,CAAA;AAE5C,QAAA,MAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,QAAQ,CAAA;AACxC,QAAA,OAAO,KAAK,OAAA,EAAS;AAAA,UACnB,GAAA,EAAK,IAAA;AAAA,UACL,EAAA,EAAI,OAAO,MAAA,CAAO,EAAA;AAAA,UAClB,KAAA,EAAO,OAAO,MAAA,CAAO,KAAA;AAAA,UACrB,KAAA,EAAO,OAAO,MAAA,CAAO,KAAA;AAAA,UACrB,QAAA,EAAU,MAAA,CAAO,WAAA,CAAY,MAAA,CAAO,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,GAAA,EAAK,CAAA,CAAE,MAAM,CAAC,CAAC;AAAA,SACjF,CAAA;AAAA,MACH;AAEA,MAAA,OAAO,IAAA,CAAK,SAAS,EAAE,KAAA,EAAO,aAAY,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IAC9D,SAAS,KAAA,EAAO;AAEd,MAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAA,CAAO,aAAA,CAAc,KAAK,CAAC,CAAA;AAClD,MAAA,IAAI,QAAQ,OAAA,EAAS,OAAA,CAAQ,QAAQ,EAAE,OAAA,EAAS,OAAO,CAAA;AAAA,WAClD,OAAA,CAAQ,KAAA,CAAM,CAAA,YAAA,EAAe,OAAO,CAAA,CAAE,CAAA;AAC3C,MAAA,OAAO,IAAA,CAAK,SAAS,EAAE,KAAA,EAAO,kBAAiB,EAAG,EAAE,MAAA,EAAQ,GAAA,EAAK,CAAA;AAAA,IACnE;AAAA,EACF,CAAA;AACF;AAsBO,SAAS,eAAe,OAAA,EAAwB;AACrD,EAAA,OAAO,eAAe,QAAA,CAAS,GAAA,EAAkB,GAAA,EAAmB;AAClE,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,GAAA,CAAQ,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,IAAI,CAAA,GAAI,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,GAAI,GAAA,CAAI,QAAQ,IAAA,KAAS,WAAA;AAC3F,MAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,MAAA,KAAA,MAAW,CAAC,MAAM,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACvD,QAAA,IAAI,KAAA,KAAU,KAAA,CAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,IAAA,EAAM,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,GAAI,KAAA,CAAM,IAAA,CAAK,IAAI,IAAI,KAAK,CAAA;AAAA,MAC5F;AACA,MAAA,MAAM,MAAA,GAAA,CAAU,GAAA,CAAI,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AACjD,MAAA,IAAI,IAAA;AACJ,MAAA,IAAI,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,MAAA,EAAQ;AACzC,QAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAChC,QAAA,IAAA,GAAO,EAAA;AACP,QAAA,WAAA,MAAiB,KAAA,IAAS,KAAK,IAAA,IAAQ,OAAA,CAAQ,OAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAC7E,QAAA,IAAA,IAAQ,QAAQ,MAAA,EAAO;AAAA,MACzB;AACA,MAAA,MAAM,WAAW,MAAM,OAAA;AAAA,QACrB,IAAI,OAAA,CAAQ,CAAA,OAAA,EAAU,IAAI,GAAG,GAAA,CAAI,GAAA,IAAO,GAAG,CAAA,CAAA,EAAI,EAAE,MAAA,EAAQ,OAAA,EAAS,IAAA,EAAM,IAAA,IAAQ,QAAW;AAAA,OAC7F;AACA,MAAA,GAAA,CAAI,aAAa,QAAA,CAAS,MAAA;AAC1B,MAAA,QAAA,CAAS,OAAA,CAAQ,QAAQ,CAAC,KAAA,EAAO,SAAS,GAAA,CAAI,SAAA,CAAU,IAAA,EAAM,KAAK,CAAC,CAAA;AACpE,MAAA,GAAA,CAAI,GAAA,CAAI,MAAM,QAAA,CAAS,IAAA,EAAM,CAAA;AAAA,IAC/B,SAAS,KAAA,EAAO;AAEd,MAAA,OAAA,CAAQ,MAAM,CAAA,YAAA,EAAe,KAAA,YAAiB,QAAQ,KAAA,CAAM,IAAA,GAAO,OAAO,CAAA,wBAAA,CAA0B,CAAA;AACpG,MAAA,GAAA,CAAI,UAAA,GAAa,GAAA;AACjB,MAAA,GAAA,CAAI,IAAI,4BAA4B,CAAA;AAAA,IACtC;AAAA,EACF,CAAA;AACF","file":"index.cjs","sourcesContent":["import { toMs, type Duration } from \"../duration\";\nimport { RANGES } from \"../history\";\nimport type { Status } from \"../status\";\nimport type { HistoryRange } from \"../types\";\n\nexport type HandlerContext = {\n  /** Keeps the platform alive for background work after the response (Workers, Vercel, Netlify…) */\n  waitUntil?: (promise: Promise<unknown>) => void;\n};\n\nexport type StatusHandlerOptions = {\n  /** Where the routes are mounted (default \"/api\"). The handler ignores anything before it. */\n  basePath?: string;\n  /**\n   * Protects `/tick`. When set, callers must send it as `Authorization: Bearer <secret>`,\n   * `x-sermon-secret: <secret>` or `?key=<secret>`. Without a secret, `/tick` is public but\n   * harmless: it only runs when a run is due.\n   */\n  secret?: string;\n  /** Minimum time between public on-demand runs */\n  rateLimits?: {\n    /** Full runs (default \"60s\") */\n    runAll?: Duration;\n    /** Single-service runs, per service (default \"20s\") */\n    runOne?: Duration;\n  };\n  /**\n   * When `/status` is read and the data is stale, start a `tick()`. With a `waitUntil` the\n   * response isn't delayed; without one the handler waits for the run (up to `refreshBudget`).\n   * Keeps a page fresh without any scheduler, as long as someone visits it.\n   */\n  refreshOnRead?: boolean;\n  /** How long a read may wait for a refresh when there is no `waitUntil` (default \"8s\") */\n  refreshBudget?: Duration;\n  waitUntil?: HandlerContext[\"waitUntil\"];\n  /**\n   * Shared-cache lifetimes in seconds for CDNs and edges (default `{ status: 10, history: 30 }`).\n   * Browsers are always told to revalidate. Pass `false` to disable shared caching.\n   */\n  cache?: { status?: number; history?: number } | false;\n  /** Allow other origins to call the API: `true` for any, or one origin (default: same-origin only) */\n  cors?: boolean | string;\n  /**\n   * Receives unexpected failures (e.g. the store is unreachable). `message` has every configured\n   * secret and credential-shaped value removed; `error` is the raw value, which may contain\n   * connection strings: don't print it. Default: `console.error` of `message` only.\n   */\n  onError?: (failure: { message: string; error: unknown }) => void;\n};\n\nexport type StatusHandler = (request: Request, context?: HandlerContext) => Promise<Response>;\n\nconst RUN_ALL_LOCK = \"sermon:run:all\";\n\nfunction parseRange(value: string | null): HistoryRange {\n  return value && value in RANGES ? (value as HistoryRange) : \"24h\";\n}\n\n/** Constant-time comparison, so the secret can't be guessed byte by byte from response times */\nfunction safeEqual(a: string, b: string) {\n  if (a.length !== b.length) return false;\n  let diff = 0;\n  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n  return diff === 0;\n}\n\nfunction presentedSecret(request: Request, url: URL) {\n  const authorization = request.headers.get(\"authorization\");\n  if (authorization?.toLowerCase().startsWith(\"bearer \")) return authorization.slice(7).trim();\n  return request.headers.get(\"x-sermon-secret\") ?? url.searchParams.get(\"key\") ?? undefined;\n}\n\n/**\n * Expose a status engine over HTTP. The result is a standard `(Request) => Response` function:\n * mount it in Next.js, Hono, Bun, Deno, Cloudflare Workers, Netlify or Vercel functions, or wrap\n * it with `toNodeListener` for plain Node servers.\n *\n * Routes (under `basePath`):\n * - `GET  /status`                 snapshot: tree, latest results, statistics, score\n * - `GET  /history?range=24h|7d`   score history\n * - `GET  /services/:key/history`  samples of one service\n * - `POST /run`                    run everything now (rate limited)\n * - `POST /run/:key`               run one service now (rate limited)\n * - `GET|POST /tick`               run everything if due (for schedulers); `?force=1` with the secret\n */\n/** An error as loggable text: name, message, causes and stack frames */\nfunction describeError(error: unknown) {\n  if (!(error instanceof Error)) return String(error);\n  const parts = [error.stack ?? `${error.name}: ${error.message}`];\n  let cause = (error as Error & { cause?: unknown }).cause;\n  for (let depth = 0; cause && depth < 3; depth++) {\n    parts.push(`Caused by: ${cause instanceof Error ? `${cause.name}: ${cause.message}` : String(cause)}`);\n    cause = cause instanceof Error ? (cause as Error & { cause?: unknown }).cause : undefined;\n  }\n  return parts.join(\"\\n\");\n}\n\nexport function createStatusHandler(status: Status, options: StatusHandlerOptions = {}): StatusHandler {\n  const basePath = `/${(options.basePath ?? \"/api\").replace(/^\\/+|\\/+$/g, \"\")}`.replace(/^\\/$/, \"\");\n  const runAllMs = toMs(options.rateLimits?.runAll ?? \"60s\");\n  const runOneMs = toMs(options.rateLimits?.runOne ?? \"20s\");\n  const refreshBudgetMs = toMs(options.refreshBudget ?? \"8s\");\n  const cache = options.cache === false ? undefined : { status: 10, history: 30, ...options.cache };\n\n  const corsHeaders = (request: Request): Record<string, string> => {\n    if (!options.cors) return {};\n    const origin = options.cors === true ? (request.headers.get(\"origin\") ?? \"*\") : options.cors;\n    return {\n      \"access-control-allow-origin\": origin,\n      \"access-control-allow-methods\": \"GET, POST, OPTIONS\",\n      \"access-control-allow-headers\": \"authorization, content-type, x-sermon-secret\",\n      vary: \"origin\",\n    };\n  };\n\n  const json = (request: Request, body: unknown, init: { status?: number; headers?: Record<string, string> } = {}) =>\n    new Response(JSON.stringify(body), {\n      status: init.status ?? 200,\n      headers: {\n        \"content-type\": \"application/json; charset=utf-8\",\n        \"cache-control\": \"no-store\",\n        ...corsHeaders(request),\n        ...init.headers,\n      },\n    });\n\n  /** Short shared cache for CDNs only: browsers must always revalidate, or they show stale results */\n  const cached = (seconds: number | undefined): Record<string, string> =>\n    seconds\n      ? {\n          \"cache-control\": \"no-cache\",\n          \"cdn-cache-control\": `max-age=${seconds}, stale-while-revalidate=${seconds * 3}`,\n        }\n      : {};\n\n  const tooSoon = (request: Request, message: string, retryAfterMs: number) => {\n    const retryAfter = Math.max(1, Math.ceil(retryAfterMs / 1000));\n    return json(request, { error: message, retryAfter }, { status: 429, headers: { \"retry-after\": String(retryAfter) } });\n  };\n\n  async function refreshIfStale(context: HandlerContext | undefined) {\n    const last = await status.lastFullRun();\n    if (last && Date.now() < last.at + status.intervalMs) return;\n    const tick = status.tick().catch(() => undefined);\n    const waitUntil = context?.waitUntil ?? options.waitUntil;\n    if (waitUntil) {\n      waitUntil(tick);\n      return;\n    }\n    await Promise.race([tick, new Promise((resolve) => setTimeout(resolve, refreshBudgetMs))]);\n  }\n\n  return async function handle(request, context) {\n    const url = new URL(request.url);\n    const method = request.method.toUpperCase();\n    if (basePath && url.pathname !== basePath && !url.pathname.startsWith(`${basePath}/`)) {\n      return json(request, { error: \"Not found\" }, { status: 404 });\n    }\n    if (method === \"OPTIONS\") return new Response(null, { status: 204, headers: corsHeaders(request) });\n\n    let segments: string[];\n    try {\n      segments = url.pathname\n        .slice(basePath.length)\n        .split(\"/\")\n        .filter(Boolean)\n        .map((segment) => decodeURIComponent(segment));\n    } catch {\n      return json(request, { error: \"Not found\" }, { status: 404 });\n    }\n    const [first, second, third] = segments;\n\n    try {\n      if (method === \"GET\" && first === \"status\" && segments.length === 1) {\n        if (options.refreshOnRead) await refreshIfStale(context);\n        return json(request, await status.snapshot(), { headers: cached(cache?.status) });\n      }\n\n      if (method === \"GET\" && first === \"history\" && segments.length === 1) {\n        const range = parseRange(url.searchParams.get(\"range\"));\n        return json(request, await status.history({ range }), { headers: cached(cache?.history) });\n      }\n\n      if (method === \"GET\" && first === \"services\" && second && third === \"history\" && segments.length === 3) {\n        if (!status.has(second)) return json(request, { error: \"Unknown service\" }, { status: 404 });\n        const range = parseRange(url.searchParams.get(\"range\"));\n        return json(request, await status.serviceHistory(second, { range }), { headers: cached(cache?.history) });\n      }\n\n      if (method === \"POST\" && first === \"run\" && segments.length === 1) {\n        const lock = await status.lock(RUN_ALL_LOCK, runAllMs);\n        if (!lock.ok) return tooSoon(request, \"A full run happened recently\", lock.retryAfterMs);\n        await status.run({ trigger: \"manual\" });\n        return json(request, await status.snapshot());\n      }\n\n      if (method === \"POST\" && first === \"run\" && second && segments.length === 2) {\n        if (!status.has(second)) return json(request, { error: \"Unknown service\" }, { status: 404 });\n        const lock = await status.lock(`sermon:run:${second}`, runOneMs);\n        if (!lock.ok) return tooSoon(request, \"This service was checked recently\", lock.retryAfterMs);\n        await status.run({ keys: [second], trigger: \"manual\" });\n        return json(request, await status.snapshot());\n      }\n\n      // \"/cron\" is kept as an alias for schedulers configured before \"/tick\" existed\n      if ((method === \"GET\" || method === \"POST\") && (first === \"tick\" || first === \"cron\") && segments.length === 1) {\n        const presented = presentedSecret(request, url);\n        const authorized = !!options.secret && !!presented && safeEqual(presented, options.secret);\n        if (options.secret && !authorized) return json(request, { error: \"Unauthorized\" }, { status: 401 });\n\n        // Forcing a run is only for callers that hold the secret\n        const force = authorized && [\"1\", \"true\"].includes(url.searchParams.get(\"force\") ?? \"\");\n        const result = await status.tick({ force });\n        if (!result.ran) return json(request, result);\n        // A scheduled run also counts for the public rate limit\n        await status.lock(RUN_ALL_LOCK, runAllMs);\n        return json(request, {\n          ran: true,\n          at: result.report.at,\n          score: result.report.score,\n          label: result.report.label,\n          statuses: Object.fromEntries(result.report.results.map((r) => [r.key, r.status])),\n        });\n      }\n\n      return json(request, { error: \"Not found\" }, { status: 404 });\n    } catch (error) {\n      // Never log the raw error: driver and store errors can carry connection strings\n      const message = status.redact(describeError(error));\n      if (options.onError) options.onError({ message, error });\n      else console.error(`[sermon-js] ${message}`);\n      return json(request, { error: \"Internal error\" }, { status: 500 });\n    }\n  };\n}\n\ntype NodeRequest = {\n  method?: string;\n  url?: string;\n  headers: Record<string, string | string[] | undefined>;\n  [Symbol.asyncIterator](): AsyncIterator<Uint8Array>;\n};\n\ntype NodeResponse = {\n  statusCode: number;\n  setHeader(name: string, value: string): unknown;\n  end(body?: string): unknown;\n};\n\n/**\n * Adapt the handler to Node's `http.createServer` / Express / Connect:\n *\n * ```ts\n * http.createServer(toNodeListener(createStatusHandler(status))).listen(3000);\n * ```\n */\nexport function toNodeListener(handler: StatusHandler) {\n  return async function listener(req: NodeRequest, res: NodeResponse) {\n    try {\n      const host = (Array.isArray(req.headers.host) ? req.headers.host[0] : req.headers.host) ?? \"localhost\";\n      const headers = new Headers();\n      for (const [name, value] of Object.entries(req.headers)) {\n        if (value !== undefined) headers.set(name, Array.isArray(value) ? value.join(\", \") : value);\n      }\n      const method = (req.method ?? \"GET\").toUpperCase();\n      let body: string | undefined;\n      if (method !== \"GET\" && method !== \"HEAD\") {\n        const decoder = new TextDecoder();\n        body = \"\";\n        for await (const chunk of req) body += decoder.decode(chunk, { stream: true });\n        body += decoder.decode();\n      }\n      const response = await handler(\n        new Request(`http://${host}${req.url ?? \"/\"}`, { method, headers, body: body || undefined })\n      );\n      res.statusCode = response.status;\n      response.headers.forEach((value, name) => res.setHeader(name, value));\n      res.end(await response.text());\n    } catch (error) {\n      // The handler reports its own failures; this only covers a broken request or response\n      console.error(`[sermon-js] ${error instanceof Error ? error.name : \"Error\"} while serving a request`);\n      res.statusCode = 500;\n      res.end('{\"error\":\"Internal error\"}');\n    }\n  };\n}\n"]}

package/dist/api/index.d.cts

@@ -0,0 +1,77 @@
+import { D as Duration, S as Status } from '../status-DsWzgb9Q.cjs';
+import '../config-BEbP-uLf.cjs';
+import '../types-CctvUAs2.cjs';
+import '../store-DybhDphS.cjs';
+
+type HandlerContext = {
+    /** Keeps the platform alive for background work after the response (Workers, Vercel, Netlify…) */
+    waitUntil?: (promise: Promise<unknown>) => void;
+};
+type StatusHandlerOptions = {
+    /** Where the routes are mounted (default "/api"). The handler ignores anything before it. */
+    basePath?: string;
+    /**
+     * Protects `/tick`. When set, callers must send it as `Authorization: Bearer <secret>`,
+     * `x-sermon-secret: <secret>` or `?key=<secret>`. Without a secret, `/tick` is public but
+     * harmless: it only runs when a run is due.
+     */
+    secret?: string;
+    /** Minimum time between public on-demand runs */
+    rateLimits?: {
+        /** Full runs (default "60s") */
+        runAll?: Duration;
+        /** Single-service runs, per service (default "20s") */
+        runOne?: Duration;
+    };
+    /**
+     * When `/status` is read and the data is stale, start a `tick()`. With a `waitUntil` the
+     * response isn't delayed; without one the handler waits for the run (up to `refreshBudget`).
+     * Keeps a page fresh without any scheduler, as long as someone visits it.
+     */
+    refreshOnRead?: boolean;
+    /** How long a read may wait for a refresh when there is no `waitUntil` (default "8s") */
+    refreshBudget?: Duration;
+    waitUntil?: HandlerContext["waitUntil"];
+    /**
+     * Shared-cache lifetimes in seconds for CDNs and edges (default `{ status: 10, history: 30 }`).
+     * Browsers are always told to revalidate. Pass `false` to disable shared caching.
+     */
+    cache?: {
+        status?: number;
+        history?: number;
+    } | false;
+    /** Allow other origins to call the API: `true` for any, or one origin (default: same-origin only) */
+    cors?: boolean | string;
+    /**
+     * Receives unexpected failures (e.g. the store is unreachable). `message` has every configured
+     * secret and credential-shaped value removed; `error` is the raw value, which may contain
+     * connection strings: don't print it. Default: `console.error` of `message` only.
+     */
+    onError?: (failure: {
+        message: string;
+        error: unknown;
+    }) => void;
+};
+type StatusHandler = (request: Request, context?: HandlerContext) => Promise<Response>;
+declare function createStatusHandler(status: Status, options?: StatusHandlerOptions): StatusHandler;
+type NodeRequest = {
+    method?: string;
+    url?: string;
+    headers: Record<string, string | string[] | undefined>;
+    [Symbol.asyncIterator](): AsyncIterator<Uint8Array>;
+};
+type NodeResponse = {
+    statusCode: number;
+    setHeader(name: string, value: string): unknown;
+    end(body?: string): unknown;
+};
+/**
+ * Adapt the handler to Node's `http.createServer` / Express / Connect:
+ *
+ * ```ts
+ * http.createServer(toNodeListener(createStatusHandler(status))).listen(3000);
+ * ```
+ */
+declare function toNodeListener(handler: StatusHandler): (req: NodeRequest, res: NodeResponse) => Promise<void>;
+
+export { type HandlerContext, type StatusHandler, type StatusHandlerOptions, createStatusHandler, toNodeListener };

package/dist/api/index.d.ts

@@ -0,0 +1,77 @@
+import { D as Duration, S as Status } from '../status-zd04ZQ98.js';
+import '../config-w1tm1bdu.js';
+import '../types-CctvUAs2.js';
+import '../store-_GuzSP0z.js';
+
+type HandlerContext = {
+    /** Keeps the platform alive for background work after the response (Workers, Vercel, Netlify…) */
+    waitUntil?: (promise: Promise<unknown>) => void;
+};
+type StatusHandlerOptions = {
+    /** Where the routes are mounted (default "/api"). The handler ignores anything before it. */
+    basePath?: string;
+    /**
+     * Protects `/tick`. When set, callers must send it as `Authorization: Bearer <secret>`,
+     * `x-sermon-secret: <secret>` or `?key=<secret>`. Without a secret, `/tick` is public but
+     * harmless: it only runs when a run is due.
+     */
+    secret?: string;
+    /** Minimum time between public on-demand runs */
+    rateLimits?: {
+        /** Full runs (default "60s") */
+        runAll?: Duration;
+        /** Single-service runs, per service (default "20s") */
+        runOne?: Duration;
+    };
+    /**
+     * When `/status` is read and the data is stale, start a `tick()`. With a `waitUntil` the
+     * response isn't delayed; without one the handler waits for the run (up to `refreshBudget`).
+     * Keeps a page fresh without any scheduler, as long as someone visits it.
+     */
+    refreshOnRead?: boolean;
+    /** How long a read may wait for a refresh when there is no `waitUntil` (default "8s") */
+    refreshBudget?: Duration;
+    waitUntil?: HandlerContext["waitUntil"];
+    /**
+     * Shared-cache lifetimes in seconds for CDNs and edges (default `{ status: 10, history: 30 }`).
+     * Browsers are always told to revalidate. Pass `false` to disable shared caching.
+     */
+    cache?: {
+        status?: number;
+        history?: number;
+    } | false;
+    /** Allow other origins to call the API: `true` for any, or one origin (default: same-origin only) */
+    cors?: boolean | string;
+    /**
+     * Receives unexpected failures (e.g. the store is unreachable). `message` has every configured
+     * secret and credential-shaped value removed; `error` is the raw value, which may contain
+     * connection strings: don't print it. Default: `console.error` of `message` only.
+     */
+    onError?: (failure: {
+        message: string;
+        error: unknown;
+    }) => void;
+};
+type StatusHandler = (request: Request, context?: HandlerContext) => Promise<Response>;
+declare function createStatusHandler(status: Status, options?: StatusHandlerOptions): StatusHandler;
+type NodeRequest = {
+    method?: string;
+    url?: string;
+    headers: Record<string, string | string[] | undefined>;
+    [Symbol.asyncIterator](): AsyncIterator<Uint8Array>;
+};
+type NodeResponse = {
+    statusCode: number;
+    setHeader(name: string, value: string): unknown;
+    end(body?: string): unknown;
+};
+/**
+ * Adapt the handler to Node's `http.createServer` / Express / Connect:
+ *
+ * ```ts
+ * http.createServer(toNodeListener(createStatusHandler(status))).listen(3000);
+ * ```
+ */
+declare function toNodeListener(handler: StatusHandler): (req: NodeRequest, res: NodeResponse) => Promise<void>;
+
+export { type HandlerContext, type StatusHandler, type StatusHandlerOptions, createStatusHandler, toNodeListener };