refactor: #85 T2 extrait le CRUD webhooks vers backend/routers (comportement inchange)

backend/main.py

@@ -93,7 +93,6 @@ from backend.schemas import (
     VaultSettingsResponse,
     VaultsStatusResponse,
     VaultStatsResponse,
-    WebhookModel,
 )
 from backend.search import (
     init_inverted_index,
@@ -947,6 +946,7 @@ from backend.ai_routes import router as ai_router
 from backend.bookslm_routes import router as bookslm_router
 from backend.export import ExportError, export_epub, export_html, export_md_bundle
 from backend.routers.health import router as health_router
+from backend.routers.webhooks import router as webhooks_router
 from backend.saved_searches import delete_saved, get_saved, save_search
 from backend.share import (
     create_share,
@@ -957,19 +957,14 @@ from backend.share import (
     update_shares_after_rename,
 )
 from backend.skills_routes import router as skills_router
-from backend.webhooks import (
-    create_webhook,
-    delete_webhook,
-    dispatch_webhooks,
-    get_webhooks,
-    update_webhook,
-)
+from backend.webhooks import dispatch_webhooks
 
 app.include_router(auth_router)
 app.include_router(ai_router)
 app.include_router(bookslm_router)
 app.include_router(skills_router)
 app.include_router(health_router)  # ROADMAP #85 T1 — System / health
+app.include_router(webhooks_router)  # ROADMAP #85 T2 — Webhooks
 
 # Admin Dashboard endpoints (system stats, audit logs, backups, stream)
 try:
@@ -4256,39 +4251,9 @@ async def api_dashboard(current_user=Depends(require_auth)):
 
 
 # ---------------------------------------------------------------------------
-# Webhook CRUD endpoints
+# Webhook CRUD endpoints : voir backend.routers.webhooks (#85 T2)
 # ---------------------------------------------------------------------------
 
-@app.get("/api/webhooks", response_model=list[WebhookModel])
-async def api_webhooks_list(current_user=Depends(require_admin)):
-    return get_webhooks()
-
-
-@app.post("/api/webhooks", response_model=WebhookModel)
-async def api_webhooks_create(body: dict = Body(...), current_user=Depends(require_admin)):
-    name = body.get("name", "Unnamed")
-    url = body.get("url", "")
-    events = body.get("events", [])
-    secret = body.get("secret")
-    if not url:
-        raise HTTPException(400, "URL is required")
-    return create_webhook(name, url, events, secret)
-
-
-@app.patch("/api/webhooks/{webhook_id}", response_model=WebhookModel)
-async def api_webhooks_update(webhook_id: str, body: dict = Body(...), current_user=Depends(require_admin)):
-    result = update_webhook(webhook_id, body)
-    if not result:
-        raise HTTPException(404, "Webhook not found")
-    return result
-
-
-@app.delete("/api/webhooks/{webhook_id}", response_model=StatusResponse)
-async def api_webhooks_delete(webhook_id: str, current_user=Depends(require_admin)):
-    if not delete_webhook(webhook_id):
-        raise HTTPException(404, "Webhook not found")
-    return {"status": "deleted"}
-
 
 # ---------------------------------------------------------------------------
 # Share (public document) endpoints

backend/routers/webhooks.py

@@ -0,0 +1,54 @@
+"""Webhook CRUD endpoints (ROADMAP #85, tranche 2).
+
+Handlers déplacés depuis :mod:`backend.main` sans changement de
+comportement : mêmes chemins (``/api/webhooks``), même modèle de réponse
+(:class:`backend.schemas.WebhookModel`), même dépendance admin. La logique
+métier vit déjà dans :mod:`backend.webhooks` (validation d'URL anti-SSRF,
+store ``webhook_secrets.json`` — BUG-026).
+"""
+
+from fastapi import APIRouter, Body, Depends, HTTPException
+
+from backend.auth.middleware import require_admin
+from backend.schemas import StatusResponse, WebhookModel
+from backend.webhooks import (
+    create_webhook,
+    delete_webhook,
+    get_webhooks,
+    update_webhook,
+)
+
+router = APIRouter(prefix="/api/webhooks", tags=["webhooks"])
+
+
+@router.get("", response_model=list[WebhookModel])
+async def api_webhooks_list(current_user=Depends(require_admin)):
+    return get_webhooks()
+
+
+@router.post("", response_model=WebhookModel)
+async def api_webhooks_create(body: dict = Body(...), current_user=Depends(require_admin)):
+    name = body.get("name", "Unnamed")
+    url = body.get("url", "")
+    events = body.get("events", [])
+    secret = body.get("secret")
+    if not url:
+        raise HTTPException(400, "URL is required")
+    return create_webhook(name, url, events, secret)
+
+
+@router.patch("/{webhook_id}", response_model=WebhookModel)
+async def api_webhooks_update(
+    webhook_id: str, body: dict = Body(...), current_user=Depends(require_admin)
+):
+    result = update_webhook(webhook_id, body)
+    if not result:
+        raise HTTPException(404, "Webhook not found")
+    return result
+
+
+@router.delete("/{webhook_id}", response_model=StatusResponse)
+async def api_webhooks_delete(webhook_id: str, current_user=Depends(require_admin)):
+    if not delete_webhook(webhook_id):
+        raise HTTPException(404, "Webhook not found")
+    return {"status": "deleted"}