Function sweepE2e

apps/host-cloudflare/scripts/preview.ts:320–373

()

const E2E_MIN_AGE_MS = 24 * 60 * 60 * 1000;

const sweepE2e = async (): Promise<void> => {
  const now = Date.now();
  const scripts = await cfList(`/accounts/${ACCOUNT}/workers/scripts`);
  const stale = scripts.filter((script: any) => {
    if (!E2E_STACK_PATTERN.test(String(script.id))) return false;
    const created = Date.parse(script.created_on ?? "");
    // Skip stacks younger than a day — they may belong to a live suite run.
    return Number.isFinite(created) && now - created > E2E_MIN_AGE_MS;
  });

  const databases = stale.length > 0 ? await cfList(`/accounts/${ACCOUNT}/d1/database`) : [];
  const apps = stale.length > 0 ? await cfList(`/accounts/${ACCOUNT}/access/apps`) : [];
  for (const script of stale) {
    const name = String(script.id);
    await cfOk("DELETE", `/accounts/${ACCOUNT}/workers/scripts/${name}?force=true`);
    process.stderr.write(`deleted e2e worker ${name}\n`);
    const database = databases.find((d: any) => d.name === `${name}-db`);
    if (database) {
      await cfOk("DELETE", `/accounts/${ACCOUNT}/d1/database/${database.uuid}`);
      process.stderr.write(`deleted e2e D1 ${name}-db\n`);
    }
    const app = apps.find((a: any) => a.name === name);
    if (app) {
      await cfOk("DELETE", `/accounts/${ACCOUNT}/access/apps/${app.id}`);
      process.stderr.write(`deleted e2e Access app ${name}\n`);
    }
  }

  // Seat revocation only — the user records stay (harmless), but they stop
  // counting against the Zero Trust seat quota.
  const users = await cfList(`/accounts/${ACCOUNT}/access/users`);
  const seated = users.filter(
    (user: any) =>
      String(user.email ?? "").endsWith(E2E_SEAT_DOMAIN) &&
      (user.access_seat === true || user.gateway_seat === true) &&
      typeof user.seat_uid === "string",
  );
  if (seated.length > 0) {
    await cfOk(
      "PATCH",
      `/accounts/${ACCOUNT}/access/seats`,
      seated.map((user: any) => ({
        seat_uid: user.seat_uid,
        access_seat: false,
        gateway_seat: false,
      })),
    );
    for (const user of seated) process.stderr.write(`revoked seat for ${user.email}\n`);
  }

  process.stdout.write(
    `${JSON.stringify({ deletedStacks: stale.map((s: any) => s.id), revokedSeats: seated.length })}\n`,
  );
};

// --- main --------------------------------------------------------------------