Skip to content

feat(syndication): automate daily.dev Squad publishing via /boot session refresh and GraphQL #793

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
codercatdev merged 1 commit into from
Oct 24, 2026
Merged

feat(syndication): automate daily.dev Squad publishing via /boot session refresh and GraphQL #793

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/workflows/syndicate-post.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,7 @@ jobs:
HASHNODE_ACCESS_TOKEN: ${{ secrets.PRIVATE_HASHNODE }}
AWS_BUILDER_SESSION_TOKEN: ${{ secrets.AWS_BUILDER_SESSION_TOKEN }}
DAILY_DEV_TOKEN: ${{ secrets.DAILY_DEV_TOKEN }}
DAILY_DEV_SESSION_COOKIE: ${{ secrets.DAILY_DEV_SESSION_COOKIE }}
GOOGLE_WORKSPACE_REFRESH_TOKEN: ${{ secrets.GOOGLE_WORKSPACE_REFRESH_TOKEN }}
GOOGLE_CLIENT_ID: ${{ secrets.GOOGLE_CLIENT_ID }}
GOOGLE_CLIENT_SECRET: ${{ secrets.GOOGLE_CLIENT_SECRET }}
177 changes: 175 additions & 2 deletions apps/sanity/functions/syndicate-content/index.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,7 @@ interface ContentDocument {
devto?: string;
hashnode?: string;
awsbuilder?: string;
dailydev?: string;
tags?: Array<{ _key?: string; label?: string; value?: string }>;
sponsor?: Array<{ _ref: string }>;
syndications?: Array<{ _type: "reference"; _ref: string; _key?: string }>;
Expand Down Expand Up @@ -118,9 +119,10 @@ export const handler = documentEventHandler<ContentDocument>(
Boolean(data.awsbuilder) ||
process.env.FORCE_AWS_BUILDER === "true";

const platforms: Array<"devto" | "hashnode" | "awsbuilder"> = [
const platforms: Array<"devto" | "hashnode" | "dailydev" | "awsbuilder"> = [
"devto",
"hashnode",
"dailydev",
...(shouldSyndicateAws ? (["awsbuilder"] as const) : []),
];

Expand All @@ -145,7 +147,9 @@ export const handler = documentEventHandler<ContentDocument>(
? "dev.to"
: platform === "hashnode"
? "hashnode.com"
: "builder.aws.com";
: platform === "dailydev"
? "daily.dev"
: "builder.aws.com";
await client.createOrReplace({
_id: syndicationDocId,
_type: "syndication",
Expand Down Expand Up @@ -745,6 +749,175 @@ export const handler = documentEventHandler<ContentDocument>(
console.log(
`[Syndicate Content] Successfully published to AWS Builder Center: ${externalUrl}`,
);
} else if (platform === "dailydev") {
const dailyDevSession = process.env.DAILY_DEV_SESSION_COOKIE;
if (!dailyDevSession) {
console.warn(
"[Syndicate Content] DAILY_DEV_SESSION_COOKIE not configured. Skipping daily.dev Squad live dispatch.",
);
continue;
}

const squadSourceId = "dc8ed5af-d1f6-423d-9f17-703d33946006";
const baseCookie = dailyDevSession.includes("__Secure-dast=")
? dailyDevSession
: `da2=m7Z6H7R0hwoOhyQZ1WW7K; __Secure-dast=${dailyDevSession}`;

// 1. Refresh short-lived da3 JWT via /boot
const bootRes = await fetch("https://api.daily.dev/boot?v=3.47.11", {
headers: {
app: "webapp",
"Content-Type": "application/json",
Cookie: baseCookie,
Origin: "https://app.daily.dev",
Referer: "https://app.daily.dev/",
},
});
const refreshedCookies =
bootRes.headers
.getSetCookie?.()
?.map((c) => c.split(";")[0])
.join("; ") || baseCookie;

const gqlHeaders = {
"Content-Type": "application/json",
Cookie: refreshedCookies,
Origin: "https://app.daily.dev",
Referer: "https://app.daily.dev/",
};

const existingSyndication = await client
.getDocument(syndicationDocId)
.catch(() => null);
const existingPostId =
existingSyndication?.externalId &&
!String(existingSyndication.externalId).startsWith("simulated-")
? String(existingSyndication.externalId)
: null;

const commentary = (
data.excerpt ||
data.title ||
"New on CodingCat.dev!"
).slice(0, 240);
const coverImageUrl =
urlForImage(data.coverImage)?.width(1280).format("jpg").url() || "";

let postId = existingPostId;
if (!postId && data.dailydev) {
const match = data.dailydev.match(/-([A-Za-z0-9]{9})$/);
if (match) postId = match[1];
}

if (postId) {
const editRes = await fetch("https://api.daily.dev/graphql", {
method: "POST",
headers: gqlHeaders,
body: JSON.stringify({
query: `mutation UpdateSquadPost($id: ID!, $commentary: String) {
editSharePost(id: $id, commentary: $commentary) {
id
}
}`,
variables: { id: postId, commentary },
}),
});
const editData = (await editRes.json()) as any;
if (editData?.errors) {
console.warn(
"[Syndicate Content] editSharePost warning, creating new Squad post:",
editData.errors,
);
postId = null;
}
}

if (!postId) {
const createRes = await fetch("https://api.daily.dev/graphql", {
method: "POST",
headers: gqlHeaders,
body: JSON.stringify({
query: `mutation CreatePostInMultipleSources(
$sourceIds: [ID!]!
$title: String
$commentary: String
$imageUrl: String
$externalLink: String
) {
createPostInMultipleSources(
sourceIds: $sourceIds
title: $title
commentary: $commentary
imageUrl: $imageUrl
externalLink: $externalLink
) {
id
sourceId
type
slug
}
}`,
variables: {
sourceIds: [squadSourceId],
title: data.title || "Untitled",
commentary,
...(coverImageUrl ? { imageUrl: coverImageUrl } : {}),
externalLink: canonicalUrl,
},
}),
});
const createData = (await createRes.json()) as any;
if (createData?.errors) {
throw new Error(
`daily.dev createPostInMultipleSources error: ${JSON.stringify(createData.errors)}`,
);
}
postId = createData?.data?.createPostInMultipleSources?.[0]?.id;
}

if (!postId) {
throw new Error("daily.dev Squad publish did not return a post ID");
}

const postRes = await fetch("https://api.daily.dev/graphql", {
method: "POST",
headers: gqlHeaders,
body: JSON.stringify({
query: `query GetSquadPost($id: ID!) {
post(id: $id) {
id
commentsPermalink
permalink
}
}`,
variables: { id: postId },
}),
});
const postJson = (await postRes.json()) as any;
const externalUrl =
postJson?.data?.post?.commentsPermalink ||
`https://daily.dev/posts/${postId}`;

await client.createOrReplace({
_id: syndicationDocId,
_type: "syndication",
target: { _type: "reference", _ref: data._id },
platform: "dailydev",
status: "published",
canonicalUrl,
externalUrl,
externalId: String(postId),
syndicatedAt: new Date().toISOString(),
error: undefined,
});

if (data.dailydev !== externalUrl) {
parentPatch.dailydev = externalUrl;
}

console.log(
`[Syndicate Content] Successfully published to daily.dev Squad: ${externalUrl}`,
);
}
} catch (publishErr) {
const errMsg =
Expand Down
6 changes: 6 additions & 0 deletions apps/sanity/schemas/partials/content.ts
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -87,6 +87,12 @@ const content = defineType({
type: "url",
group: "data",
}),
defineField({
name: "dailydev",
title: "daily.dev Squad",
type: "url",
group: "data",
}),
defineField({
name: "tags",
title: "Tags",
Expand Down
14 changes: 14 additions & 0 deletions scripts/publish-php2shell-post.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -457,9 +457,23 @@ sudo systemctl restart php8.4-fpm apache2`
coverImage: postDoc.coverImage,
content: postDoc.content,
awsbuilder: "https://builder.aws.com/content/3L50qXKr83Y2r9mA6ZsGhcc4cRJ/php-shell-cve-how-ai-found-a-decade-old-bug-in-of-the-web",
dailydev: "https://daily.dev/posts/two-critical-pre-auth-rce-flaws-in-php-cve-2026-109618-cve-2026-109619-uncovered-by-ai-models-f-lmbg2iyss",
},
},
},
{
createOrReplace: {
_id: "syndication.post-php2shell-cve-2026-109618.dailydev",
_type: "syndication",
target: { _type: "reference", _ref: postDoc._id },
platform: "dailydev",
status: "published",
canonicalUrl: "https://codingcat.dev/post/php2shell-cve-2026-109618-ai-php-security-scramble",
externalUrl: "https://daily.dev/posts/two-critical-pre-auth-rce-flaws-in-php-cve-2026-109618-cve-2026-109619-uncovered-by-ai-models-f-lmbg2iyss",
externalId: "lmBG2IYsS",
syndicatedAt: "2026-10-24T03:38:28.000Z",
},
},
{ patch: { id: "LzgcvqoNSwz5R8loykZyIB", set: { excerpt: "Learn how to customize your Slack workspace theme using SlackThemes.net and contribute custom color themes on GitHub." } } },
{ patch: { id: "ZKdo3vLUqcb4sYreiCMc5A", set: { excerpt: "Learn how to inspect and debug Angular 9 components directly inside the Chrome DevTools console using the new ng global object." } } },
{ patch: { id: "ZKdo3vLUqcb4sYreiCPNnI", set: { excerpt: "Join Alex Patterson and Brittney Postma with special guests Zach DeRose, Facundo Giuliani, Swyx, Jason Lengstorf, and Scott Tolinski for a year-end Holiday AMA." } } },
Expand Down
Loading
Loading