managecommand 0.1.0
Run, schedule, and audit Django management commands without SSH access
Requires Python: >=3.10
Keywords: automation, commands, devops, django, management

# managecommand

Python client for [ManageCommand](https://managecommand.com) - run, schedule, and audit Django management commands without SSH access.

## Installation

```bash
pip install managecommand
```

## Quick Start

1. Add to your `INSTALLED_APPS`:

```python
INSTALLED_APPS = [
    # ...
    'managecommand',
]
```

2. Add your API key to `settings.py`:

```python
MANAGECOMMAND_API_KEY = "dc_your_api_key_here"
```

3. Start the runner:

```bash
python manage.py managecommand start
```

The runner will connect to ManageCommand, sync your available commands, and start polling for executions.


## Configuration

### API key

Your project's API key (get this from the ManageCommand dashboard)

```python
MANAGECOMMAND_API_KEY = "dc_..."
```

#### Enabled (allowed) commands

Enable additional commands:

```python
import managecommand
MANAGECOMMAND_ALLOWED_COMMANDS = tuple(
    *managecommand.DEFAULT_ALLOWED_COMMANDS,
    "my_custom_command",
    "another_command",
)
```

Or explicitly allow only specific commands (skip the default ones):

```python
MANAGECOMMAND_ALLOWED_COMMANDS = (
    "my_custom_command",
    "another_command",
)
```

Order does not matter.

By default, only commands in `DEFAULT_ALLOWED_COMMANDS` can be executed remotely:


Default value:

```python
DEFAULT_ALLOWED_COMMANDS = (
    # Database
    "migrate", "showmigrations", "dbbackup", "createcachetable",
    # Static files
    "collectstatic", "findstatic",
    # Maintenance
    "clearsessions", "check", "sendtestemail", "diffsettings",
    # Data
    "dumpdata", "inspectdb",
    # Testing
    "test",
    # django-extensions
    "show_urls", "validate_templates", "clear_cache",
    # Wagtail
    "fixtree", "publish_scheduled", "update_index",
)
```

> **DISCLAIMER**: This list is not fully vetted. You are encouraged to only allow commands that you trust and have vetted yourself.


### Alternative - Blocklist Mode

Alternative to the "ALLOWED" list is the "DISALLOWED" list.

In this mode all commands are allowed except for the ones in the blocklist.

This mode is inherently less secure because newly added commands are automatically allowed.

> **CAUTION**: Any new commands will by allowed by default in this mode!

```python
MANAGECOMMAND_USE_BLOCKLIST = True
```

Default value:

```python
DEFAULT_DISALLOWED_COMMANDS = (
    # Database destruction
    "flush", "sqlflush", "reset_db", "dbrestore", "loaddata",
    # Interactive shells
    "shell", "shell_plus", "dbshell",
    # Development servers
    "runserver", "runserver_plus", "testserver",
    # Security sensitive
    "createsuperuser", "changepassword",
    # File modifications
    "makemigrations", "squashmigrations",
)
```

> **DISCLAIMER**: This list is not exhaustive. You are responsible for ensuring that only safe commands are allowed.


### Optional / Advanced Settings

```python
# Server URL (default: https://app.managecommand.com)
MANAGECOMMAND_SERVER_URL = "https://app.managecommand.com"

# Runner heartbeat interval in seconds (default: 30, minimum: 5)
MANAGECOMMAND_HEARTBEAT_INTERVAL = 30

# HTTP request timeout in seconds (default: 30)
MANAGECOMMAND_REQUEST_TIMEOUT = 30

# Max retries for failed requests (default: 3)
MANAGECOMMAND_MAX_RETRIES = 3

# Hosts allowed to use HTTP instead of HTTPS (default: localhost only)
MANAGECOMMAND_ALLOW_HTTP_HOSTS = ['localhost', '127.0.0.1', '::1']
```


### Metadata-Only Mode

For commands that produce sensitive output (credentials, PII) or very high-volume output, you can enable metadata-only mode. In this mode, the command executes normally but stdout/stderr are not captured or stored.

```python
# Commands that always run in metadata-only mode
MANAGECOMMAND_METADATAONLY_COMMANDS = (
    "generate_api_keys",
    "export_user_data",
    "sync_large_dataset",
)
```

Additionally, the dashboard can also enable metadata-only mode on a per-command basis via the command configuration settings. Either the client setting or the dashboard setting will trigger metadata-only mode.

In metadata-only mode:
- The command executes normally
- Exit code and duration are still tracked
- Output shows: "(metadata-only mode, no output captured)"


## Running the Runner

Current architecture supports only 1 runner per project.

### Foreground

```bash
python manage.py managecommand start
```

Starts the runner in the foreground. Press Ctrl+C to stop.

This is the recommended option for Kubernetes, systemd, Docker, and similar process managers that handle lifecycle and restarts.

### Background (detached)

```bash
python manage.py managecommand start -d
```

Starts the runner in the background.

This is recommended for development and testing only.
It can be used in production where other process managers are not available.
YMMV.

### Managing the Runner

Use these commands to manage a runner.

Works whether the runner is running in the foreground or background.

```bash
# Check if the runner is running
python manage.py managecommand status

# Stop the background runner
python manage.py managecommand stop [--force]

# Restart the runner
python manage.py managecommand restart [-d]
```

## License

MIT