jmcqueen
025b70de56
Node/Express service that:
- Receives Appspace outbound webhooks, enriches with Workspace ONE MDM
data (matched by serial), and posts Adaptive Card alerts to Webex.
- Runs a Webex bot in WebSocket mode with two commands:
* `offline [filter]` - lists currently offline / lost / failed
Appspace devices, enriched with per-device MDM facts + console links.
* `restart-offline [filter]` - sends WS1 SoftReset (reboot) to every
currently-offline device that has a WS1 record. Capped at 50 per
invocation with bounded concurrency to protect the WS1 API.
Notes on hardening already applied:
- In-flight promise coalescing in mdm.js and index.js so burst webhook
traffic can't stampede the WS1 token / device-cache refresh or the
Appspace token refresh.
- Structured logger that serializes Error instances (message, stack,
code, axios response.status/data) instead of stringifying to "{}".
- Webex 7439-char message-limit handling: `offline` builds its body
incrementally against a character budget and reports accurate
"N more not shown" truncation.
- Uses string phrases for `framework.hears(...)` so the framework's
`(^| )phrase($| )` wrapper handles group-space @mentions correctly,
and a shared `extractFilterArg()` helper so filter parsing works
identically in DMs and mentioned messages.
Config, Docker, smoke-test profile, and healthcheck included.
Secrets are managed via `.env` (gitignored); see `.env.example`.
Co-authored-by: Cursor <cursoragent@cursor.com>
45 lines
777 B
Text
45 lines
777 B
Text
# ============================================
|
|
# Secrets — NEVER commit real values
|
|
# ============================================
|
|
.env
|
|
.env.*
|
|
!.env.example
|
|
|
|
# Common credential / key patterns (defense in depth)
|
|
*.pem
|
|
*.key
|
|
*.crt
|
|
*.pfx
|
|
*.p12
|
|
credentials*
|
|
secrets*
|
|
|
|
# ============================================
|
|
# Node
|
|
# ============================================
|
|
node_modules/
|
|
npm-debug.log*
|
|
yarn-debug.log*
|
|
yarn-error.log*
|
|
.pnpm-debug.log*
|
|
|
|
# ============================================
|
|
# Runtime / build artifacts
|
|
# ============================================
|
|
*.log
|
|
logs/
|
|
coverage/
|
|
.nyc_output/
|
|
dist/
|
|
build/
|
|
|
|
# ============================================
|
|
# Editor / OS
|
|
# ============================================
|
|
.DS_Store
|
|
Thumbs.db
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|