From d39fef2a23d4707f5045c40e1db0935b4d1d08fd Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Wed, 22 Apr 2026 11:22:39 -0700 Subject: [PATCH] sync: auto-sync from HOWARD-HOME at 2026-04-22 11:22:39 Author: Howard Enos Machine: HOWARD-HOME Timestamp: 2026-04-22 11:22:39 --- .claude/messages/for-howard.md | 65 +--------------------------------- .claude/messages/for-mike.md | 8 ++++- 2 files changed, 8 insertions(+), 65 deletions(-) diff --git a/.claude/messages/for-howard.md b/.claude/messages/for-howard.md index 7513c1a..07e6160 100644 --- a/.claude/messages/for-howard.md +++ b/.claude/messages/for-howard.md @@ -4,67 +4,4 @@ Check this file at sync. Delete items after you've addressed them. --- -## From Mike, 2026-04-22 — RE: intune-manager vault file + Syncro rates - -**intune-manager SOPS file:** It's there — your vault is just 2 commits behind. Pull the vault repo and you'll have it: - -``` -ebdd711 feat: add ComputerGuru Intune Manager app credentials -1c837ba fix: re-encrypt intune-manager vault entry with correct SOPS config -``` - -```bash -cd ~/vault && git pull -``` - -**Syncro labor rates:** Look in Syncro for rates, I don't know them off hand. - ---- - -## From Mike, 2026-04-21 — RE: Syncro labor rates + vault.sh fix - -**Rates:** Syncro auto-calculates from the product's configured rate — no hardcoding needed. I've updated syncro.md to reflect this: omit `price_retail` entirely and Syncro fills it from the product. Your $175 ticket is fine; that's what the product is set to. - -**vault.sh MSYS path bug:** Already patched and pushed before you reported it — same fix you described (jq-first, cygpath -m fallback for Python). Should work on HOWARD-HOME now. Pull and test. - ---- - -## From Mike, 2026-04-21 — RE: Intune Manager Added to Remediation Tool - -**New tier available:** `intune-manager` — 7th remediation-tool tier now operational. - -**What it enables:** -- Device inventory and status checks -- Compliance policy queries -- App deployment verification -- Configuration profile audits -- Privileged operations (wipe/lock/retire devices) - -**How to use:** -```bash -# Acquire Intune token (works on any tenant where app is consented) -bash .claude/skills/remediation-tool/scripts/get-token.sh intune-manager - -# Or invoke via /remediation-tool command -# Claude will automatically use this tier for Intune-related tasks -``` - -**Graph API permissions (all active):** -- DeviceManagementManagedDevices.Read.All -- DeviceManagementManagedDevices.ReadWrite.All -- DeviceManagementManagedDevices.PrivilegedOperations.All -- DeviceManagementConfiguration.ReadWrite.All -- DeviceManagementApps.ReadWrite.All -- DeviceManagementRBAC.Read.All -- DeviceManagementServiceConfig.ReadWrite.All - -**Vault file:** Already synced to all machines at `msp-tools/computerguru-intune-manager.sops.yaml` - -**Use cases for you:** -- Setting up Intune features via Claude -- Device compliance checks -- iPad enrollment status (Cascades kitchen iPads) -- App deployment verification -- MDM certificate renewals - -Let me know if you need any Intune-specific scripts added to the toolkit. +_No active messages._ diff --git a/.claude/messages/for-mike.md b/.claude/messages/for-mike.md index 6f96ac7..8a7ea19 100644 --- a/.claude/messages/for-mike.md +++ b/.claude/messages/for-mike.md @@ -4,4 +4,10 @@ Check this file at sync. Delete items after you've addressed them. --- - +## From Howard, 2026-04-22 — Ack: intune-manager + rates + +Pulled vault (got `ebdd711` + `1c837ba`). intune-manager vault file loads fine now. Tried a token against grabblaw.com — returns `AADSTS700016` (app not consented in that tenant). Same category as the `defender` case, tenant-onboarding work, not a code bug. No action needed from you. + +Rates reply on Syncro — understood, will omit `price_retail` going forward. Saw the syncro.md update. + +Good luck with Valleywide — saw the NVRAM corruption log. Holler if you need a hand with anything from here.