julien/remanso-jetstream
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refactor(scripts): switch webhooks:all to api fetch

Browse Source 
Hits GET /admin/webhooks instead of opening the local SQLite directly,
so the task can be run from a developer laptop without ssh or file
access to the server. Drops the FFI/read/write task permissions in
favour of net/env.
This commit is contained in:
Julien Calixte
2026-05-05 14:07:31 +02:00
parent 1c160b6c53
commit 355fc45316
2 changed files with 43 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
deno.json
View File

@@ -6,7 +6,7 @@
"server:prod": "deno run --allow-net --allow-read --allow-write --allow-env --allow-ffi --unstable-ffi server.ts",
"migrate": "deno run --allow-net --allow-read --allow-write --allow-env --allow-ffi --unstable-ffi src/migrations/init.ts",
"webhooks": "deno run --allow-net --allow-env scripts/manage-webhooks.ts",
"webhooks:all": "deno run --allow-read --allow-write --allow-env --allow-ffi --unstable-ffi scripts/list-all-webhooks.ts"
"webhooks:all": "deno run --allow-net --allow-env scripts/list-all-webhooks.ts"
},
"imports": {
"@db/sqlite": "jsr:@db/sqlite@^0.13.0",

61
scripts/list-all-webhooks.ts
View File

@@ -1,29 +1,52 @@
// Admin: list every webhook subscription from the local SQLite, across all
// DIDs. Talks to the database directly — does NOT go through the API.
// Admin: list every webhook subscription via the Remanso API. Requires the
// authenticated DID to be in the server-side ADMIN_DIDS allowlist.
//
// deno task webhooks:all
//
// Reads SQLITE_PATH (defaults to "notes.db"). The `token` column is
// intentionally excluded from the output — it is a write-only secret.
// Inputs (env or flag, env preferred):
// ATPROTO_HANDLE / --handle e.g. alice.eurosky.social
// ATPROTO_APP_PASSWORD / --app-password app password (NOT your account password)
// REMANSO_API / --api default: https://api.remanso.space
import { Database } from "@db/sqlite";
const HELP = `
Usage:
deno task webhooks:all
type WebhookRow = {
id: number;
did: string;
method: string;
url: string;
verb: string;
Inputs (env or flag, env preferred):
ATPROTO_HANDLE / --handle your AT Protocol handle
ATPROTO_APP_PASSWORD / --app-password app password (NOT your account password)
REMANSO_API / --api default: https://api.remanso.space
`;
import { parseArgs, sessionFromFlagsOrEnv } from "./_atproto-session.ts";
const die = (msg: string): never => {
console.error(`error: ${msg}`);
console.error(HELP);
Deno.exit(1);
};
const path = Deno.env.get("SQLITE_PATH") ?? "notes.db";
const db = new Database(path);
const main = async () => {
const flags = parseArgs(Deno.args);
if (flags.help === "true" || flags.h === "true") {
console.log(HELP);
Deno.exit(0);
}
const rows = db.prepare(
"SELECT id, did, method, url, verb FROM webhook_subscription ORDER BY did, id",
).all<WebhookRow>();
const { session, api } = await sessionFromFlagsOrEnv(flags).catch(
(e: Error) => die(e.message),
);
console.log(JSON.stringify(rows, null, 2));
console.error(`[done] ${rows.length} subscription(s) at ${path}`);
const res = await fetch(`${api}/admin/webhooks`, {
headers: { "Authorization": `Bearer ${session.accessJwt}` },
});
if (!res.ok) {
console.error(`list-all failed (${res.status}): ${await res.text()}`);
Deno.exit(1);
}
const rows = await res.json();
console.log(JSON.stringify(rows, null, 2));
console.error(`[done] ${rows.length} subscription(s) at ${api}`);
};
db.close();
await main();