sync: auto-sync from GURU-BEAST-ROG at 2026-07-10 10:06:22

Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-07-10 10:06:22

clients/mineralogical-record/session-logs/2026-07/2026-07-10-discord-bot-tpm-pc-ace-association-fix.md

@@ -137,3 +137,29 @@ On TPM-PC (Mineralogical Record):
   (ticket #32511, invoice #67997 — original Ace file-level removal)
 - Discord thread: 1525175952261382354 (#tech-department)
 - SFTA tool: https://github.com/DanysysTeam/PS-SFTA
+
+## Update: 10:05 AZ — Winter's per-user Syncro API key vaulted + wired
+
+Follow-up in the same thread: I had noted the ticket comment/billing on #32529 were
+attributed to Mike's API key (only line-item user_id could be set to Winter). Winter
+generated and provided her own Syncro API token. Actions taken:
+
+- Verified the token live against GET /me — authenticates as Winter Williams, user_id
+  1737, admin, full permissions. (Note: /me response is FLAT — user_id/user_email at top
+  level, not under .user.)
+- Vaulted it: `msp-tools/syncro-winter.sops.yaml` (kind api-key, owner winter,
+  syncro_user_id 1737), SOPS-encrypted, round-trip verified via vault.sh get-field.
+  Vault commit 6cb2639, pushed.
+- Wired into `.claude/scripts/syncro-env.sh`: refactored the key-select case into
+  `_syncro_key_path()` (mike/howard/winter), and added a **requester preference** — when
+  `CLAUDETOOLS_REQUESTER_USER` is set (Discord bot threads) and that user has a vaulted
+  key, syncro-env.sh uses THEIR key and sets SYNCRO_USER accordingly, so bot-driven
+  Syncro actions attribute to the person who asked. Falls back to the identity.json user
+  when the requester has no key (e.g. rob) — never hard-fails on the preference.
+  Tested: `CLAUDETOOLS_REQUESTER_USER=winter` resolves Winter's key (Td75b771c601...).
+- Updated `.claude/commands/syncro.md`: user table now includes winter (1737) + vault
+  paths column; removed the stale "keys are baked into the skill" note (Howard's
+  2f351638 refactor moved keys to the vault).
+
+Effect: all future Syncro comments/tickets/invoices created through the bot in Winter's
+threads are attributed to Winter in Syncro, not Mike.