azcomputerguru/claudetools
1
0
Fork 0
Code Issues 59 Pull Requests Actions Packages Projects Releases Wiki Activity

sync: auto-sync from GURU-5070 at 2026-07-01 15:49:56

Browse Source 
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-07-01 15:49:56
This commit is contained in:
Mike Swanson
2026-07-01 15:50:48 -07:00
parent 1775571abb
commit 2937b00ebf
15 changed files with 1217 additions and 67 deletions
Download Patch File Download Diff File Expand all files Collapse all files

216
.claude/skills/self-check/baseline/manifest.json
View File

@@ -4,7 +4,6 @@
"derived_from": "GURU-5070",
"derived_at": "2026-06-02",
"note": "PROVISIONAL baseline, generated from a single known-good machine. V1 of self-check is a CENSUS tool: every machine probes itself, publishes to the coord API, and we refine this manifest from real fleet data (see baseline/README.md). Do NOT treat 'extra' or 'missing' items as authoritative until the fleet census has confirmed them across machines.",
"harness": {
"min_version": "1.4.0",
"version_file": ".claude/harness/VERSION",
@@ -18,48 +17,104 @@
],
"guard_wired_in": ".claude/scripts/sync.sh"
},
"command_standard_links": [
{
"topic": "syncro-billing",
"standard": ".claude/standards/syncro/time-entry-protocol.md",
"must_reference": "syncro\\.md|single source of truth",
"why": "the time-entry standard must DEFER to the /syncro command (one SSOT), not restate billing mechanics. A past drift had the standard say 'always timer' while the command said 'outlier only' — losing the pointer is the early warning of that re-drift."
"why": "the time-entry standard must DEFER to the /syncro command (one SSOT), not restate billing mechanics. A past drift had the standard say 'always timer' while the command said 'outlier only' \u2014 losing the pointer is the early warning of that re-drift."
}
],
"command_standard_links_note": "Deterministic half of the command-restates-standard lint: each linked standard must contain a defer-to-SSOT pointer (must_reference, a grep -iE regex). A WARN means the standard may have drifted back into restating/contradicting the command. The SEMANTIC contradiction judgement (read both files, decide if they actually conflict) is delegated to the model in SKILL.md, mirroring the memory contradiction pass.",
"required_tools": [
{ "name": "bash", "why": "hooks, scripts, sync, vault wrapper" },
{ "name": "git", "why": "repo + submodules + Gitea sync" },
{ "name": "jq", "why": "every hook and coord script parses JSON with jq" },
{ "name": "curl", "why": "coord API, vault, RMM, all HTTP calls" },
{ "name": "sops", "why": "vault decryption (SOPS)" },
{ "name": "age", "why": "SOPS age recipient/decrypt" },
{ "name": "ssh", "why": "infra access; must be system OpenSSH" }
{
"name": "bash",
"why": "hooks, scripts, sync, vault wrapper"
},
{
"name": "git",
"why": "repo + submodules + Gitea sync"
},
{
"name": "jq",
"why": "every hook and coord script parses JSON with jq"
},
{
"name": "curl",
"why": "coord API, vault, RMM, all HTTP calls"
},
{
"name": "sops",
"why": "vault decryption (SOPS)"
},
{
"name": "age",
"why": "SOPS age recipient/decrypt"
},
{
"name": "ssh",
"why": "infra access; must be system OpenSSH"
}
],
"required_python": {
"any_of": ["py", "python3", "python"],
"any_of": [
"py",
"python3",
"python"
],
"why": "JSON sanitizer in check-messages.sh, identity migration, skill scripts. The resolved command is recorded in identity.json (.python.command)."
},
"capability_tools": [
{ "name": "ollama", "capability": "ollama_local", "why": "Tier-0 local inference (prose/classification)" },
{ "name": "cargo", "capability": "rust_build", "why": "GuruRMM / GuruConnect Rust builds" },
{ "name": "node", "capability": "node_build", "why": "dashboard / TS builds" },
{ "name": "gh", "capability": "github_cli", "why": "optional GitHub operations" },
{ "name": "docker", "capability": "containers", "why": "optional container workflows" },
{ "name": "op", "capability": "onepassword_cli","why": "1Password fallback credential access" }
{
"name": "ollama",
"capability": "ollama_local",
"why": "Tier-0 local inference (prose/classification)"
},
{
"name": "cargo",
"capability": "rust_build",
"why": "GuruRMM / GuruConnect Rust builds"
},
{
"name": "node",
"capability": "node_build",
"why": "dashboard / TS builds"
},
{
"name": "gh",
"capability": "github_cli",
"why": "optional GitHub operations"
},
{
"name": "docker",
"capability": "containers",
"why": "optional container workflows"
},
{
"name": "op",
"capability": "onepassword_cli",
"why": "1Password fallback credential access"
}
],
"required_identity_fields": [
"user", "full_name", "email", "role", "machine",
"vault_path", "claudetools_root", "platform", "architecture",
"python.command", "ollama.endpoint", "ollama.fallback", "ollama.prose_model"
"user",
"full_name",
"email",
"role",
"machine",
"vault_path",
"claudetools_root",
"platform",
"architecture",
"python.command",
"ollama.endpoint",
"ollama.fallback",
"ollama.prose_model"
],
"optional_identity_fields": [
"coord_api",
"last_updated"
],
"optional_identity_fields": ["coord_api", "last_updated"],
"required_scripts": [
".claude/scripts/vault.sh",
".claude/scripts/sync.sh",
@@ -70,21 +125,40 @@
"grok_recovery_scripts": [
".claude/scripts/recover_grok_session.py"
],
"required_hook_files": [
".claude/hooks/block-backslash-winpath.sh",
".claude/hooks/block-tmp-path.sh",
".claude/hooks/post-commit.template"
],
"grok_hook_files": [
".grok/hooks/claudetools.json"
],
"required_settings_hooks": [
{ "event": "PreToolUse", "matcher": "Bash", "command_contains": "block-backslash-winpath.sh", "why": "blocks garbled backslash Windows-path redirects in Git Bash" },
{ "event": "UserPromptSubmit", "matcher": "", "command_contains": "check-messages.sh", "why": "injects unread coord messages + dev-mode locks each prompt" },
{ "event": "SessionStart", "matcher": "", "command_contains": "sync-memory.sh", "why": "pulls shared memory at session start" }
{
"event": "PreToolUse",
"matcher": "Bash",
"command_contains": "block-backslash-winpath.sh",
"why": "blocks garbled backslash Windows-path redirects in Git Bash"
},
{
"event": "PreToolUse",
"matcher": "Bash",
"command_contains": "block-tmp-path.sh",
"why": "blocks /tmp file writes in Git Bash on Windows (Write/Python resolve /tmp differently - read-back fails)"
},
{
"event": "UserPromptSubmit",
"matcher": "",
"command_contains": "check-messages.sh",
"why": "injects unread coord messages + dev-mode locks each prompt"
},
{
"event": "SessionStart",
"matcher": "",
"command_contains": "sync-memory.sh",
"why": "pulls shared memory at session start"
}
],
"git": {
"remote_host_contains": "git.azcomputerguru.com",
"remote_host_internal_ip": "172.16.3.20",
@@ -92,32 +166,75 @@
"post_commit_hook_expected": true,
"post_commit_hook_note": "HOOKS.md mandates the dev-alerts post-commit hook in the main repo and each initialized submodule. Missing = AMBER (informational; reinstall from .claude/hooks/post-commit.template)."
},
"skills": [
"1password", "b2", "bitdefender", "frontend-design", "gc-audit",
"impeccable", "memory-dream", "remediation-tool", "rmm-audit",
"screenconnect", "skill-creator", "stop-slop", "theme-factory", "self-check"
"1password",
"b2",
"bitdefender",
"frontend-design",
"gc-audit",
"impeccable",
"memory-dream",
"remediation-tool",
"rmm-audit",
"screenconnect",
"skill-creator",
"stop-slop",
"theme-factory",
"self-check"
],
"commands": [
"1password", "checkpoint", "context", "create-spec",
"feature-request", "forum-post", "gc-feature-request", "import",
"inject-standards", "mailbox", "mode", "recover", "remediation-tool",
"rmm", "save", "scc", "shape-spec", "sync", "syncro-emergency-billing",
"syncro", "wiki-compile", "wiki-lint", "self-check"
"1password",
"checkpoint",
"context",
"create-spec",
"feature-request",
"forum-post",
"gc-feature-request",
"import",
"inject-standards",
"mailbox",
"mode",
"recover",
"remediation-tool",
"rmm",
"save",
"scc",
"shape-spec",
"sync",
"syncro-emergency-billing",
"syncro",
"wiki-compile",
"wiki-lint",
"self-check"
],
"capability_commands": [
{ "name": "autotask", "capability": "psa_autotask", "why": "Autotask PSA command. Syncro is the fleet-default PSA (feedback_psa_default_syncro.md), so /autotask is intentionally NOT in the shared repo and is absent on Syncro machines. Capability-gated, not required-everywhere; absence is INFO, never a FAIL. Present only on machines whose PSA is Autotask." }
{
"name": "autotask",
"capability": "psa_autotask",
"why": "Autotask PSA command. Syncro is the fleet-default PSA (feedback_psa_default_syncro.md), so /autotask is intentionally NOT in the shared repo and is absent on Syncro machines. Capability-gated, not required-everywhere; absence is INFO, never a FAIL. Present only on machines whose PSA is Autotask."
}
],
"capability_commands_note": "Per-machine/per-capability slash commands that must NOT be required fleet-wide. The probe iterates only .commands[] for required conformance; entries here are documentary so a gated command is not silently dropped. Move a command here (and out of .commands[]) when it is intentionally machine-specific.",
"connectivity": [
{ "name": "coord_api", "url": "http://172.16.3.30:8001/api/coord/status", "required": true, "why": "live coordination source of truth" },
{ "name": "claudetools_api","url": "http://172.16.3.30:8001/health", "required": false, "why": "main API health" },
{ "name": "gitea_internal", "url": "http://172.16.3.20:3000", "required": false, "why": "internal Gitea (git/API on-network)" }
{
"name": "coord_api",
"url": "http://172.16.3.30:8001/api/coord/status",
"required": true,
"why": "live coordination source of truth"
},
{
"name": "claudetools_api",
"url": "http://172.16.3.30:8001/health",
"required": false,
"why": "main API health"
},
{
"name": "gitea_internal",
"url": "http://172.16.3.20:3000",
"required": false,
"why": "internal Gitea (git/API on-network)"
}
],
"memory": {
"note": "Deterministic memory checks: MEMORY.md index exists + no orphaned memory files, plus the contradiction_patterns below. A pattern fires ONLY on machines where identity.<when_field> == when_equals, so it flags a memory only where it is actually a contradiction for THIS box. Kept empty in V1 to avoid false positives; the real semantic contradiction analysis (memories vs identity.json + settings.json + this manifest) is done by the model per SKILL.md, optionally via Ollama Tier-0.",
"pattern_schema": {
@@ -128,7 +245,6 @@
},
"contradiction_patterns": []
},
"capability_rules": {
"ollama_local": {
"tier0_engine": "local ollama (localhost:11434) for summarize/classify/extract/draft",