tiennm99/claude-status-webhook
1
0
Fork 0
mirror of https://github.com/tiennm99/claude-status-webhook.git synced 2026-04-17 13:21:01 +00:00
Code Issues Packages Projects Releases Wiki Activity
19 Commits 3 Branches 0 Tags
976a2594b7eadd4c5c3b27c3905b58eab5385a04
Commit Graph

19 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tiennm99
976a2594b7 fix: security and robustness improvements, add project docs 
- Hash inputs in timingSafeEqual to prevent length leak side-channel
- Add quote escaping to escapeHtml for defense in depth
- Normalize chatId to Number in parseKvKey for type consistency
- Log Retry-After header on 429 rate limit responses
- Slim README to focused overview, move details to docs/
- Add docs/: system-architecture, setup-guide, feature-decisions
- Add documentation section and README guidelines to CLAUDE.md
 2026-04-09 09:27:45 +07:00
tiennm99
923ad7a40e refactor: remove migration route and logic after successful migration 2026-04-09 09:11:38 +07:00
tiennm99
fce23b3c59 refactor: make setup script interactive instead of using env vars 2026-04-09 09:02:54 +07:00
tiennm99
e8b30743d3 refactor: remove cron, use KV metadata, extract shared crypto util 
- Remove cron status polling (statuspage notifies via email on webhook failure)
- Store subscriber types/components as KV metadata for O(1) filtering
- Extract timingSafeEqual to shared crypto-utils.js (was duplicated)
- Change /migrate route from GET to POST (prevent CSRF/prefetch)
- Preserve existing subscriber preferences on /start re-subscribe
- Remove dead getAllSubscribers export
- Update docs to reflect changes
 2026-04-09 08:58:52 +07:00
tiennm99
f356c8e3e8 Merge remote-tracking branch 'origin/dev' 2026-04-09 08:58:15 +07:00
tiennm99
877a75b053 fix: normalize double slashes in URL path for webhook routing 
Statuspage deactivated our webhook because requests to
//webhook/status/<secret> returned 404 — Hono requires exact path
matches. Added middleware that rewrites consecutive slashes before
routing, preserving POST body via internal re-dispatch.
 2026-04-09 08:41:32 +07:00
tiennm99
392fecf350 refactor: replace metrics with console.log, remove HMAC 
Statuspage doesn't support HMAC signatures - removed all HMAC code.
Replaced KV-based metrics with simple console.log for CF Workers logs.
Queue consumer logs batch summary (sent/failed/retried/removed).
 2026-04-09 00:52:41 +07:00
tiennm99
d78e761731 feat: add metrics tracking and remove unsupported HMAC verification 
- Add metrics.js tracking webhooks, messages, cron, commands
- Add GET /metrics/:secret endpoint (text + JSON format)
- Remove HMAC verification (Statuspage doesn't support it)
- Extract validateSecret helper in index.js
- Integrate trackMetrics across webhook, queue, cron, bot handlers
 2026-04-09 00:48:42 +07:00
tiennm99
b728ae7d38 refactor: per-subscriber KV keys, HMAC verification, cron trigger 
Major refactor addressing scalability, security, and reliability:

- KV schema: single-key → per-subscriber keys (sub:{chatId}:{threadId})
  eliminates read-modify-write race conditions
- Component-specific subscriptions: /subscribe component <name>
- HMAC-SHA256 webhook verification with URL secret fallback
- Cron trigger (every 5 min) polls status.claude.com as safety net
- Shared telegram-api.js module (DRY fix)
- Error logging in all catch blocks
- Migration endpoint for existing subscribers
- Setup moved to standalone script (scripts/setup-bot.js)
- Removed setup HTTP route to reduce attack surface
 2026-04-09 00:43:07 +07:00
tiennm99
30ffaae612 feat: add /help, /history, /uptime commands and enhance /status 
- /help: detailed guide with examples for all commands
- /status: overall indicator, emoji markers, updated time, status page link
- /history [count]: recent incidents with impact, dates, links (max 10)
- /uptime: component health with last change time
- Split info commands into bot-info-commands.js for modularity
- Register all 7 commands in bot-setup.js
 2026-04-08 23:41:53 +07:00
tiennm99
37c2a01677 feat: add setup endpoint to register bot commands and webhook 
GET /webhook/setup/:secret registers commands with Telegram
and sets webhook URL in one step.
 2026-04-08 23:31:11 +07:00
tiennm99
68b9604598 refactor: update bindings to match CF resource names 
KV binding: claude_status, Queue binding: claude-status.
Real KV namespace ID configured with remote flag.
 2026-04-08 23:23:32 +07:00
tiennm99
b3d1f5acb4 fix: rename KV binding to CLAUDE_STATUS and fix threadId nullish check 
- Rename KV binding SUBSCRIBERS → CLAUDE_STATUS for consistent naming
- Fix || null → ?? null to preserve threadId 0 (General topic)
- Update KV namespace creation command in README
 2026-04-08 23:14:26 +07:00
tiennm99
41bdcf36ef refactor: rename queue to claude-status and remove KV key prefix 
Namespace provides scoping, prefix on KV key is redundant.
 2026-04-08 23:09:02 +07:00
tiennm99
cb9fd58565 fix: correct license to Apache-2.0 in package.json and README 2026-04-08 23:07:03 +07:00
tiennm99
cc35e8a649 update README with setup instructions and project documentation 2026-04-08 23:06:00 +07:00
tiennm99
399e1d21dc add CLAUDE.md with project architecture and dev commands 2026-04-08 23:01:32 +07:00
tiennm99
01320abacd feat: implement Telegram bot for Claude status webhooks 
Cloudflare Workers bot that forwards status.claude.com (Atlassian
Statuspage) incident and component updates to subscribed Telegram
users via CF Queues fan-out.

- Hono.js routing with grammY webhook handler
- Bot commands: /start, /stop, /status, /subscribe
- Supergroup topic support (message_thread_id)
- KV store with claude-status: prefix and composite keys
- Queue consumer with batch send, 403 auto-removal, 429 retry
- Timing-safe webhook secret validation
- HTML escaping for Telegram messages
 2026-04-08 22:59:37 +07:00
Tien Nguyen Minh
902b46720d Initial commit 2026-04-08 22:19:28 +07:00