feat: rename rails/ to tools/ and add service tool suites

Rename the `rails/` directory to `tools/` for agent discoverability — agents frequently failed to locate helper scripts due to the non-intuitive directory name. Add backward-compat symlink `rails/ → tools/`. New tool suites: - Authentik: auth-token, user-list, user-create, group-list, app-list, flow-list, admin-status (8 scripts) - Coolify: team-list, project-list, service-list, service-status, deploy, env-set (7 scripts) - Woodpecker: pipeline-list, pipeline-status, pipeline-trigger (3 stubs) - GLPI: session-init, computer-list, ticket-list, ticket-create, user-list (6 scripts) - Health: stack-health.sh — stack-wide connectivity check Infrastructure: - Shared credential loader at tools/_lib/credentials.sh - install.sh creates symlink + chmod on tool scripts - All ~253 rails/ path references updated across 68+ files Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 11:51:39 -06:00
parent 248db8935c
commit 80c3680ccb
158 changed files with 2481 additions and 213 deletions
--- a/tools/glpi/README.md
+++ b/tools/glpi/README.md
@@ -0,0 +1,55 @@
+# GLPI Tool Suite
+
+Manage GLPI IT service management (tickets, computers/assets, users).
+
+## Prerequisites
+
+- `jq` and `curl` installed
+- GLPI credentials in `~/src/jarvis-brain/credentials.json` (or `$MOSAIC_CREDENTIALS_FILE`)
+- Required fields: `glpi.url`, `glpi.app_token`, `glpi.user_token`
+
+## Authentication
+
+GLPI uses a two-step auth flow:
+1. `session-init.sh` exchanges app_token + user_token for a session_token
+2. All subsequent calls use the session_token + app_token
+
+The session token is cached at `~/.cache/mosaic/glpi-session` and auto-refreshed when expired.
+
+## Scripts
+
+| Script | Purpose |
+|--------|---------|
+| `session-init.sh` | Initialize and cache API session |
+| `computer-list.sh` | List computers/IT assets |
+| `ticket-list.sh` | List tickets (filter by status) |
+| `ticket-create.sh` | Create a new ticket |
+| `user-list.sh` | List users |
+
+## Common Options
+
+- `-f json` — JSON output (default: table)
+- `-l limit` — Result count (default: 50)
+- `-h` — Show help
+
+## API Reference
+
+- Base URL: `https://help.uscllc.com/apirest.php`
+- Auth headers: `App-Token` + `Session-Token`
+- Pattern: RESTful item-based (`/ItemType/{id}`)
+
+## Examples
+
+```bash
+# List all tickets
+~/.config/mosaic/tools/glpi/ticket-list.sh
+
+# List only open tickets
+~/.config/mosaic/tools/glpi/ticket-list.sh -s new
+
+# Create a ticket
+~/.config/mosaic/tools/glpi/ticket-create.sh -t "Server down" -c "Web server unresponsive" -p 4
+
+# List computers as JSON
+~/.config/mosaic/tools/glpi/computer-list.sh -f json
+```
--- a/tools/glpi/computer-list.sh
+++ b/tools/glpi/computer-list.sh
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+#
+# computer-list.sh — List GLPI computers/assets
+#
+# Usage: computer-list.sh [-f format] [-l limit]
+#
+# Options:
+#   -f format   Output format: table (default), json
+#   -l limit    Number of results (default: 50)
+#   -h          Show this help
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials glpi
+
+FORMAT="table"
+LIMIT=50
+
+while getopts "f:l:h" opt; do
+  case $opt in
+    f) FORMAT="$OPTARG" ;;
+    l) LIMIT="$OPTARG" ;;
+    h) head -11 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 [-f format] [-l limit]" >&2; exit 1 ;;
+  esac
+done
+
+SESSION_TOKEN=$("$SCRIPT_DIR/session-init.sh" -q)
+
+response=$(curl -sk -w "\n%{http_code}" \
+  -H "App-Token: $GLPI_APP_TOKEN" \
+  -H "Session-Token: $SESSION_TOKEN" \
+  "${GLPI_URL}/Computer?range=0-${LIMIT}")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "200" ]]; then
+  echo "Error: Failed to list computers (HTTP $http_code)" >&2
+  exit 1
+fi
+
+if [[ "$FORMAT" == "json" ]]; then
+  echo "$body" | jq '.'
+  exit 0
+fi
+
+echo "ID      NAME                          SERIAL              STATUS"
+echo "------  ----------------------------  ------------------  ----------"
+echo "$body" | jq -r '.[] | [
+  (.id | tostring),
+  .name,
+  (.serial // "—"),
+  (.states_id | tostring)
+] | @tsv' | while IFS=$'\t' read -r id name serial states_id; do
+  printf "%-6s  %-28s  %-18s  %s\n" "$id" "${name:0:28}" "${serial:0:18}" "$states_id"
+done
--- a/tools/glpi/session-init.sh
+++ b/tools/glpi/session-init.sh
@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+#
+# session-init.sh — Initialize GLPI API session
+#
+# Usage: session-init.sh [-f] [-q]
+#
+# Authenticates with GLPI and caches the session token at
+# ~/.cache/mosaic/glpi-session.
+#
+# Options:
+#   -f    Force re-authentication (ignore cached session)
+#   -q    Quiet mode — only output the session token
+#   -h    Show this help
+#
+# Environment variables (or credentials.json):
+#   GLPI_URL        — GLPI API base URL
+#   GLPI_APP_TOKEN  — GLPI application token
+#   GLPI_USER_TOKEN — GLPI user token
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials glpi
+
+CACHE_DIR="$HOME/.cache/mosaic"
+CACHE_FILE="$CACHE_DIR/glpi-session"
+FORCE=false
+QUIET=false
+
+while getopts "fqh" opt; do
+  case $opt in
+    f) FORCE=true ;;
+    q) QUIET=true ;;
+    h) head -18 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 [-f] [-q]" >&2; exit 1 ;;
+  esac
+done
+
+# Check cached session validity
+if [[ "$FORCE" == "false" ]] && [[ -f "$CACHE_FILE" ]]; then
+  cached_token=$(cat "$CACHE_FILE")
+  if [[ -n "$cached_token" ]]; then
+    # Validate with a lightweight call
+    http_code=$(curl -sk -o /dev/null -w "%{http_code}" \
+      -H "App-Token: $GLPI_APP_TOKEN" \
+      -H "Session-Token: $cached_token" \
+      "${GLPI_URL}/getMyEntities")
+    if [[ "$http_code" == "200" ]]; then
+      [[ "$QUIET" == "false" ]] && echo "Using cached session (valid)" >&2
+      echo "$cached_token"
+      exit 0
+    fi
+    [[ "$QUIET" == "false" ]] && echo "Cached session expired, re-authenticating..." >&2
+  fi
+fi
+
+# Initialize session
+response=$(curl -sk -w "\n%{http_code}" \
+  -H "App-Token: $GLPI_APP_TOKEN" \
+  -H "Authorization: user_token $GLPI_USER_TOKEN" \
+  "${GLPI_URL}/initSession")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "200" ]]; then
+  echo "Error: Failed to initialize GLPI session (HTTP $http_code)" >&2
+  echo "$body" | jq -r '.' 2>/dev/null >&2 || echo "$body" >&2
+  exit 1
+fi
+
+session_token=$(echo "$body" | jq -r '.session_token // empty')
+
+if [[ -z "$session_token" ]]; then
+  echo "Error: No session_token in response" >&2
+  exit 1
+fi
+
+# Cache the session
+mkdir -p "$CACHE_DIR"
+echo "$session_token" > "$CACHE_FILE"
+chmod 600 "$CACHE_FILE"
+
+[[ "$QUIET" == "false" ]] && echo "Session initialized and cached" >&2
+echo "$session_token"
--- a/tools/glpi/ticket-create.sh
+++ b/tools/glpi/ticket-create.sh
@@ -0,0 +1,77 @@
+#!/usr/bin/env bash
+#
+# ticket-create.sh — Create a GLPI ticket
+#
+# Usage: ticket-create.sh -t <title> -c <content> [-p priority] [-y type]
+#
+# Options:
+#   -t title      Ticket title (required)
+#   -c content    Ticket description (required)
+#   -p priority   1=VeryLow, 2=Low, 3=Medium (default), 4=High, 5=VeryHigh, 6=Major
+#   -y type       1=Incident (default), 2=Request
+#   -f format     Output format: table (default), json
+#   -h            Show this help
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials glpi
+
+TITLE=""
+CONTENT=""
+PRIORITY=3
+TYPE=1
+FORMAT="table"
+
+while getopts "t:c:p:y:f:h" opt; do
+  case $opt in
+    t) TITLE="$OPTARG" ;;
+    c) CONTENT="$OPTARG" ;;
+    p) PRIORITY="$OPTARG" ;;
+    y) TYPE="$OPTARG" ;;
+    f) FORMAT="$OPTARG" ;;
+    h) head -13 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 -t <title> -c <content> [-p priority] [-y type]" >&2; exit 1 ;;
+  esac
+done
+
+if [[ -z "$TITLE" || -z "$CONTENT" ]]; then
+  echo "Error: -t title and -c content are required" >&2
+  exit 1
+fi
+
+SESSION_TOKEN=$("$SCRIPT_DIR/session-init.sh" -q)
+
+payload=$(jq -n \
+  --arg name "$TITLE" \
+  --arg content "$CONTENT" \
+  --argjson priority "$PRIORITY" \
+  --argjson type "$TYPE" \
+  '{input: {name: $name, content: $content, priority: $priority, type: $type}}')
+
+response=$(curl -sk -w "\n%{http_code}" -X POST \
+  -H "App-Token: $GLPI_APP_TOKEN" \
+  -H "Session-Token: $SESSION_TOKEN" \
+  -H "Content-Type: application/json" \
+  -d "$payload" \
+  "${GLPI_URL}/Ticket")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "201" && "$http_code" != "200" ]]; then
+  echo "Error: Failed to create ticket (HTTP $http_code)" >&2
+  echo "$body" | jq -r '.' 2>/dev/null >&2 || echo "$body" >&2
+  exit 1
+fi
+
+if [[ "$FORMAT" == "json" ]]; then
+  echo "$body" | jq '.'
+else
+  ticket_id=$(echo "$body" | jq -r '.id // .message // .')
+  echo "Ticket created: #$ticket_id"
+  echo "  Title:    $TITLE"
+  echo "  Priority: $PRIORITY"
+  echo "  Type:     $([ "$TYPE" = "1" ] && echo "Incident" || echo "Request")"
+fi
--- a/tools/glpi/ticket-list.sh
+++ b/tools/glpi/ticket-list.sh
@@ -0,0 +1,88 @@
+#!/usr/bin/env bash
+#
+# ticket-list.sh — List GLPI tickets
+#
+# Usage: ticket-list.sh [-f format] [-l limit] [-s status]
+#
+# Options:
+#   -f format   Output format: table (default), json
+#   -l limit    Number of results (default: 50)
+#   -s status   Filter: new, processing, pending, solved, closed
+#   -h          Show this help
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials glpi
+
+FORMAT="table"
+LIMIT=50
+STATUS=""
+
+while getopts "f:l:s:h" opt; do
+  case $opt in
+    f) FORMAT="$OPTARG" ;;
+    l) LIMIT="$OPTARG" ;;
+    s) STATUS="$OPTARG" ;;
+    h) head -13 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 [-f format] [-l limit] [-s status]" >&2; exit 1 ;;
+  esac
+done
+
+SESSION_TOKEN=$("$SCRIPT_DIR/session-init.sh" -q)
+
+ENDPOINT="${GLPI_URL}/Ticket?range=0-${LIMIT}&order=DESC&sort=date_mod"
+
+# Map status names to GLPI status IDs
+if [[ -n "$STATUS" ]]; then
+  case "$STATUS" in
+    new) STATUS_ID=1 ;;
+    processing|assigned) STATUS_ID=2 ;;
+    pending|planned) STATUS_ID=3 ;;
+    solved) STATUS_ID=5 ;;
+    closed) STATUS_ID=6 ;;
+    *) echo "Error: Unknown status '$STATUS'. Use: new, processing, pending, solved, closed" >&2; exit 1 ;;
+  esac
+  ENDPOINT="${ENDPOINT}&searchText[status]=${STATUS_ID}"
+fi
+
+response=$(curl -sk -w "\n%{http_code}" \
+  -H "App-Token: $GLPI_APP_TOKEN" \
+  -H "Session-Token: $SESSION_TOKEN" \
+  "$ENDPOINT")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "200" ]]; then
+  echo "Error: Failed to list tickets (HTTP $http_code)" >&2
+  exit 1
+fi
+
+if [[ "$FORMAT" == "json" ]]; then
+  echo "$body" | jq '.'
+  exit 0
+fi
+
+echo "ID      PRIORITY  STATUS  TITLE                                   DATE"
+echo "------  --------  ------  ----------------------------------------  ----------"
+echo "$body" | jq -r '.[] | [
+  (.id | tostring),
+  (.priority | tostring),
+  (.status | tostring),
+  .name,
+  (.date_mod | split(" ")[0])
+] | @tsv' | while IFS=$'\t' read -r id priority status name date; do
+  # Map priority numbers
+  case "$priority" in
+    1) pri="VLow" ;; 2) pri="Low" ;; 3) pri="Med" ;;
+    4) pri="High" ;; 5) pri="VHigh" ;; 6) pri="Major" ;; *) pri="$priority" ;;
+  esac
+  # Map status numbers
+  case "$status" in
+    1) stat="New" ;; 2) stat="Proc" ;; 3) stat="Pend" ;;
+    4) stat="Plan" ;; 5) stat="Solv" ;; 6) stat="Clos" ;; *) stat="$status" ;;
+  esac
+  printf "%-6s  %-8s  %-6s  %-40s  %s\n" "$id" "$pri" "$stat" "${name:0:40}" "$date"
+done
--- a/tools/glpi/user-list.sh
+++ b/tools/glpi/user-list.sh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+#
+# user-list.sh — List GLPI users
+#
+# Usage: user-list.sh [-f format] [-l limit]
+#
+# Options:
+#   -f format   Output format: table (default), json
+#   -l limit    Number of results (default: 50)
+#   -h          Show this help
+set -euo pipefail
+
+MOSAIC_HOME="${MOSAIC_HOME:-$HOME/.config/mosaic}"
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "$MOSAIC_HOME/tools/_lib/credentials.sh"
+load_credentials glpi
+
+FORMAT="table"
+LIMIT=50
+
+while getopts "f:l:h" opt; do
+  case $opt in
+    f) FORMAT="$OPTARG" ;;
+    l) LIMIT="$OPTARG" ;;
+    h) head -11 "$0" | grep "^#" | sed 's/^# \?//'; exit 0 ;;
+    *) echo "Usage: $0 [-f format] [-l limit]" >&2; exit 1 ;;
+  esac
+done
+
+SESSION_TOKEN=$("$SCRIPT_DIR/session-init.sh" -q)
+
+response=$(curl -sk -w "\n%{http_code}" \
+  -H "App-Token: $GLPI_APP_TOKEN" \
+  -H "Session-Token: $SESSION_TOKEN" \
+  "${GLPI_URL}/User?range=0-${LIMIT}")
+
+http_code=$(echo "$response" | tail -n1)
+body=$(echo "$response" | sed '$d')
+
+if [[ "$http_code" != "200" ]]; then
+  echo "Error: Failed to list users (HTTP $http_code)" >&2
+  exit 1
+fi
+
+if [[ "$FORMAT" == "json" ]]; then
+  echo "$body" | jq '.'
+  exit 0
+fi
+
+echo "ID      USERNAME              REALNAME              FIRSTNAME             ACTIVE"
+echo "------  --------------------  --------------------  --------------------  ------"
+echo "$body" | jq -r '.[] | [
+  (.id | tostring),
+  (.name // "—"),
+  (.realname // "—"),
+  (.firstname // "—"),
+  (if .is_active == 1 then "yes" else "no" end)
+] | @tsv' | while IFS=$'\t' read -r id name realname firstname active; do
+  printf "%-6s  %-20s  %-20s  %-20s  %s\n" \
+    "$id" "${name:0:20}" "${realname:0:20}" "${firstname:0:20}" "$active"
+done