collabSupport/integrations/mdm/client.js
jmcqueen 351f89a9a4 Initial commit: CollabFinder Webex bot
Multi-integration Webex chat/HTTP bot that unifies phone, AV, and
network status for retail store support. Consolidates data from
Webex Calling, Meraki, Workspace ONE (MDM), Atlas AMP, RED digital
signage, and OptiSigns into rich per-store status commands.

Key surfaces:
- /phonestatus, /avstatus — per-store phone & AV device reports with
  clickable Meraki deep-links and per-port detail.
- /webexhost — check/assign Webex Meetings host licenses via the
  Service App; adaptive-card confirmation flow, HTTP-API-gated.
- /offboarduser — full Webex Admin offboarding (auth revoke, device
  wipe, license removal); adaptive-card confirmation.
- /jirapoll — on-demand trigger for the hourly Jira poller.
- /bulkavstatuscsv — bulk store CSV export with concurrency limits.

Automation:
- Hourly Jira poller (node-cron) with an X.AI (Grok) ticket classifier
  that categorizes unassigned tickets as phone/av/skip, extracts store
  numbers from free-text, and enriches Jira with the same detailed
  markdown the chat commands emit (converted to Jira ADF, preserves
  bold + Meraki links). Idempotent via a `bot-enriched` Jira label.

Architecture:
- Node.js 20+, ESM, Express 5, webex-node-bot-framework.
- Layered integrations (integrations/*), services (services/*),
  commands (commands/*), utils (utils/*).
- Shared markdown renderers (services/renderers/*) feed both chat
  handlers and the Jira poller so the two surfaces stay in sync.
- Hand-rolled markdown-to-ADF converter (utils/markdownToAdf.js) —
  no new npm dependency.
- Node built-in test runner (`node --test tests/*.test.js`), 30 tests
  covering the converter, renderers, and poller ADF assembly.

Docker + docker-compose deployment. Config via .env
(see .env.example for the full option surface).
2026-07-01 16:55:03 -04:00

197 lines
6.9 KiB
JavaScript
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

// src/integrations/mdm/client.js
// VMware Workspace ONE / AirWatch MDM integration
import axios from 'axios';
import { logger } from '../../utils/logger.js';
const MDM_BASE_URL = 'https://as1991.awmdm.com';
const TOKEN_URL = 'https://na.uemauth.workspaceone.com/connect/token';
// Dedicated axios instance
export const mdmAxios = axios.create({
baseURL: MDM_BASE_URL,
timeout: 12000,
headers: {
'Accept': 'application/json',
},
});
// ──────────────────────────────────────────────
// Get OAuth token (client_credentials flow)
// ──────────────────────────────────────────────
export async function getMDMToken() {
logger('mdm:token', 'Requesting new MDM OAuth token', 'debug');
try {
const response = await axios.post(
TOKEN_URL,
new URLSearchParams({
grant_type: 'client_credentials',
client_id: process.env.WS1_CLIENT_ID,
client_secret: process.env.WS1_CLIENT_SECRET,
}),
{
headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
}
);
const accessToken = response.data.access_token;
logger('mdm:token', `MDM token acquired successfully (length: ${accessToken.length})`, 'debug');
return accessToken;
} catch (err) {
const msg = err.response
? `${err.response.status} ${JSON.stringify(err.response.data)}`
: err.message;
logger('mdm:token', `Failed to acquire MDM token: ${msg}`, 'error');
throw new Error(`MDM token fetch failed: ${msg}`);
}
}
// ──────────────────────────────────────────────
// Get MDM devices for a store
// ──────────────────────────────────────────────
export async function getMDMDevices2(storeNum) {
logger('mdm:device', `Fetching devices for store ${storeNum}`, 'debug');
const storeNumPadded = String(storeNum).padStart(6, '0');
try {
const accessToken = await getMDMToken();
logger('mdm:device', `Searching devices for user/store: ${storeNumPadded}`, 'debug');
const response = await axios.get('/api/mdm/devices/search', {
baseURL: MDM_BASE_URL,
params: { user: storeNumPadded },
headers: {
Authorization: `Bearer ${accessToken}`,
'aw-tenant-code': process.env.WS1_TENANT_CODE,
Accept: 'application/json'
}
});
let devices = response.data.Devices || [];
logger('mdm:device', `Raw devices returned from MDM: ${devices.length}`, 'debug');
logger('mdm:client', `Fetched ${response.data.Devices?.length || 0} devices from MDM`);
const result = devices.map(d => ({
friendlyName: d.DeviceFriendlyName || 'Unknown',
serialNumber: d.SerialNumber || '—',
lastSeen: d.LastSeen || d.LastSystemSampleTime || 'Unknown',
locationGroup: d.LocationGroupId?.Name || d.LocationGroupName || 'Unknown',
orgGroupId: parseInt(d.OrganizationalGroupID || d.orgGroupId || d.OrganizationalGroup || d.groupId || 0, 10)
}));
logger('mdm:device', `Returning ${result.length} MDM devices for store ${storeNum}`, 'debug');
return result;
} catch (err) {
logger('mdm:device', `Error fetching devices for store ${storeNum}: ${err.message}`, 'error');
if (err.response) {
logger('mdm:device', `MDM API error status: ${err.response.status}`, 'error');
}
return [];
}
}
export async function getMDMDevices(storeNum) {
logger('mdm:device', `Fetching devices for store ${storeNum}`, 'debug');
const storeNumPadded = String(storeNum).padStart(6, '0');
try {
const accessToken = await getMDMToken();
logger('mdm:device', `Searching devices for user/store: ${storeNumPadded}`, 'debug');
const response = await axios.get('/api/mdm/devices/search', {
baseURL: MDM_BASE_URL,
params: { user: storeNumPadded },
headers: {
Authorization: `Bearer ${accessToken}`,
'aw-tenant-code': process.env.WS1_TENANT_CODE,
Accept: 'application/json'
}
});
let devices = response.data.Devices || [];
logger('mdm:device', `Raw devices returned from MDM: ${devices.length}`, 'debug');
logger('mdm:device', `Returning ${devices.length} MDM devices for store ${storeNum}`, 'debug');
return devices;
} catch (err) {
logger('mdm:device', `Error fetching devices for store ${storeNum}: ${err.message}`, 'error');
if (err.response) {
logger('mdm:device', `MDM API error status: ${err.response.status}`, 'error');
}
return [];
}
}
/**
* Get ALL devices with NO filtering whatsoever
* No platform parameter, no client-side filtering.
*/
export async function getMDMDevicesByPlatform(platformFilter = null, maxDevices = 9999) {
logger('mdm:device', `Fetching ALL devices (broad search, no filters at all)`);
let allDevices = [];
let page = 0;
const pageSize = 500;
try {
while (allDevices.length < maxDevices) {
const accessToken = await getMDMToken();
const response = await axios.get('/api/mdm/devices/search', {
baseURL: 'https://as1991.awmdm.com',
params: {
page: page,
page_size: pageSize,
platform: platformFilter
// NO platform, NO group, NO other filters
},
headers: {
Authorization: `Bearer ${accessToken}`,
'aw-tenant-code': process.env.WS1_TENANT_CODE,
Accept: 'application/json'
}
});
const pageDevices = response.data.Devices || response.data.devices || response.data.results || [];
allDevices = allDevices.concat(pageDevices);
logger('mdm:device', `Page ${page} returned ${pageDevices.length} devices (total so far: ${allDevices.length})`);
if (pageDevices.length < pageSize) break;
page++;
}
logger('mdm:device', `Broad fetch complete ${allDevices.length} total devices returned (NO filtering applied)`);
return allDevices.slice(0, maxDevices);
} catch (err) {
logger('mdm:device', `Broad fetch failed: ${err.message}`, 'error');
return [];
}
}
/**
* Returns ONLY Audio-Visual devices from MDM (VW, MSC, LED in name)
* Used specifically for the AV modal view
*/
export async function getAVMDMDevices(storeNum) {
logger('mdm:av', `Fetching AV devices (VW/MSC/LED) for store ${storeNum}`, 'debug');
const allDevices = await getMDMDevices(storeNum);
if (!allDevices || allDevices.length === 0) return [];
const AV_PATTERN = /(VW|MSC|LED|AppleTV)/i;
const avDevices = allDevices.filter(device => {
const name = (device.UserName || '').toUpperCase();
return AV_PATTERN.test(name);
});
logger('mdm:av', `MDM AV filter: ${allDevices.length} total → ${avDevices.length} AV devices`, 'debug');
return avDevices;
}
export default mdmAxios;