import: ingested 160 files from C:\Users\howar\Clients

Howard's personal MSP client documentation folder imported into shared
ClaudeTools repo via /import command. Scope:

Clients (structured MSP docs under clients/<name>/docs/):
- anaise       (NEW)  - 13 files
- cascades-tucson     - 47 files merged (existing had only reports/)
- dataforth           - 18 files merged (alongside incident reports)
- instrumental-music-center - 14 files merged
- khalsa       (NEW)  - 22 files, multi-site (camden, river)
- kittle       (NEW)  - 16 files incl. fix-pdf-preview, gpo-intranet-zone
- lens-auto-brokerage (NEW) - 3 files (name matches SOPS vault)
- _client_template    - 13-file scaffold for new clients

MSP tooling (projects/msp-tools/):
- msp-audit-scripts/ - server_audit.ps1, workstation_audit.ps1, README
- utilities/         - clean_printer_ports, win11_upgrade,
                       screenconnect-toolbox-commands

Credential handling:
- Extracted 1 inline password (Anaise DESKTOP-O8GF4SD / david)
  to SOPS vault: clients/anaise/desktop-o8gf4sd.sops.yaml
- Redacted overview.md with vault reference pattern
- Scanned all 160 files for keys/tokens/connection strings -
  no other credentials found

Skipped:
- Cascades/.claude/settings.local.json (per-machine config)
- Source-root CLAUDE.md (personal, claudetools has its own)
- scripts/server_audit.ps1 and workstation_audit.ps1 at source root
  (identical duplicates of msp-audit-scripts versions)

Memory updates:
- reference_client_docs_structure.md (layout, conventions, active list)
- reference_msp_audit_scripts.md (locations, ScreenConnect 80-char rule)

Session log: session-logs/2026-04-16-howard-client-docs-import.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.claude/memory/MEMORY.md

@@ -10,6 +10,8 @@
 - [Matomo Analytics](reference_matomo_analytics.md) - Self-hosted analytics at analytics.azcomputerguru.com, site IDs, tracking for all 3 sites
 - [Dataforth Contact - AJ](reference_dataforth_contact.md) - AJ at Dataforth, dataforthgit@ email forwarding to him
 - [TickTick Integration](reference_ticktick_integration.md) - OAuth API integration, MCP server, SOPS vault creds, project/task CRUD
+- [Client Docs Structure](reference_client_docs_structure.md) - clients/<name>/docs/ layout (overview, network, servers, cloud, security, rmm, issues). Template at clients/_client_template/.
+- [MSP Audit Scripts](reference_msp_audit_scripts.md) - server_audit.ps1 / workstation_audit.ps1 at projects/msp-tools/msp-audit-scripts/. ScreenConnect 80-char rule.
 
 ## Users
 - [Howard Enos](user_howard.md) — Mike's brother, technician, full trust/access. Known machine: ACG-TECH03L.

.claude/memory/reference_client_docs_structure.md

@@ -0,0 +1,33 @@
+---
+name: Client Documentation Structure
+description: Howard's MSP client docs live under clients/<name>/docs/ with a standard subfolder layout (overview, network, servers, cloud, security, rmm, issues). Template at clients/_client_template/.
+type: reference
+---
+
+Each active client has structured Markdown documentation under `clients/<client-name>/docs/`:
+
+| File / Folder | Purpose |
+|---|---|
+| `overview.md` | Company info, contacts, environment summary, device counts |
+| `network/topology.md` | Switches, APs, cabling, interconnects |
+| `network/vlans.md` | VLAN table, subnets, inter-VLAN routing |
+| `network/dns.md` | DNS servers, zones, records, forwarders |
+| `network/dhcp.md` | Scopes, reservations, relay config |
+| `network/firewall.md` | Rules, NAT, VPN, interfaces |
+| `network/wifi.md` | SSIDs, security, AP assignments |
+| `servers/<name>.md` | Per-server docs (use `server_template.md`) |
+| `cloud/m365.md` | Tenant, licensing, Exchange, Entra ID |
+| `cloud/azure.md` | Subscriptions, VMs, networking |
+| `security/antivirus.md` | EDR/AV product, deployment status |
+| `security/backup.md` | Backup jobs, targets, DR plan |
+| `rmm/rmm.md` | RMM product, agent counts, patch policy |
+| `issues/log.md` | Historical incident log with root causes |
+| `billing-log.md` | Per-client billing / work log |
+
+Clients currently documented (imported 2026-04-16 from Howard's `C:\Users\howar\Clients`):
+anaise, cascades-tucson, dataforth, instrumental-music-center, khalsa, kittle, lens-auto-brokerage.
+
+Credentials NEVER go inline in these docs — reference SOPS vault instead:
+`clients/<name>/<system>.sops.yaml` field path.
+
+The template at `clients/_client_template/` is the scaffold for new clients.

.claude/memory/reference_msp_audit_scripts.md

@@ -0,0 +1,29 @@
+---
+name: MSP Audit Scripts
+description: server_audit.ps1 and workstation_audit.ps1 for on-demand auditing via ScreenConnect Toolbox. Also hosted on GitHub (Howweird/msp-audit-scripts) for remote fetch.
+type: reference
+---
+
+Location in claudetools: `projects/msp-tools/msp-audit-scripts/`.
+
+Scripts:
+- `server_audit.ps1` — Full server + AD + security audit, outputs JSON to `C:\Temp\`.
+- `workstation_audit.ps1` — Full workstation audit, outputs JSON to `C:\Temp\`.
+- `README.md` — Usage notes.
+
+Remote fetch URL pattern (for ScreenConnect Toolbox):
+```
+https://raw.githubusercontent.com/Howweird/msp-audit-scripts/master/server_audit.ps1
+https://raw.githubusercontent.com/Howweird/msp-audit-scripts/master/workstation_audit.ps1
+```
+
+ScreenConnect Toolbox PowerShell rules (IMPORTANT):
+- No line may exceed 80 chars — Toolbox silently truncates long lines
+- Store long URLs/paths in variables first
+- Use multi-line try/catch blocks, never single-line
+- Paste whole scripts as one command — no inline comments between blocks
+
+Utility scripts also at `projects/msp-tools/utilities/`:
+- `clean_printer_ports.ps1`
+- `win11_upgrade.ps1`
+- `screenconnect-toolbox-commands.txt` (saved Toolbox one-liners)