Spoj svoj produkt na grantus.

const call = await grantus.calls.get('mksr-fpu-2026-1');
const versions = await grantus.calls.listVersions(call.slug);

console.log(call.title, call.deadlineAt);
for (const v of versions) {
  console.log(`v${v.versionNumber}`, v.diffSummary);
}

const { hits } = await grantus.calls.search({
  q: 'digitalizácia obcí',
  status: ['open', 'closing-soon'],
  perPage: 20,
});

for (const hit of hits) {
  console.log(hit._rankingScore, hit.title);
}

const watchdog = await grantus.watchdogs.create({
  name: 'Digitalisation grants (SK)',
  prompt: 'digitalizácia obcí',
  channels: [
    { channel: 'email', config: {}, enabled: true },
    { channel: 'webhook', config: { url: 'https://example.com/hook' }, enabled: true },
  ],
});

import { createHmac, timingSafeEqual } from 'node:crypto';

// Express/Fastify handler. Body MUST be the raw bytes (not parsed JSON)
// — many frameworks need an explicit raw-body middleware on this route.
app.post('/grantus', { config: { rawBody: true } }, (req, reply) => {
  const header = req.headers['x-grantus-signature'] as string;
  const match = /^t=(\d+),v1=([0-9a-f]+)$/.exec(header ?? '');
  if (!match) return reply.code(400).send('bad signature header');
  const [, tsStr, v1] = match;

  // (1) Reject replays: payload is signed with current time; we accept
  // ±5 minutes of clock skew. Without this check, a captured delivery
  // can be replayed forever.
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - Number(tsStr)) > 300) {
    return reply.code(408).send('signature timestamp outside window');
  }

  // (2) Constant-time HMAC compare. SECRET was shown ONCE on create —
  // load from a secrets manager, never from disk in plaintext.
  const expected = createHmac('sha256', process.env.GRANTUS_WEBHOOK_SECRET!)
    .update(`${tsStr}.${req.rawBody}`)
    .digest();
  const provided = Buffer.from(v1!, 'hex');
  if (expected.length !== provided.length || !timingSafeEqual(expected, provided)) {
    return reply.code(401).send('signature mismatch');
  }

  const payload = JSON.parse(req.rawBody.toString('utf8'));
  // process payload.event …
  reply.code(204).send();
});

for await (const call of grantus.calls.iterate({ status: 'open' })) {
  await pipeline.process(call);
}