sync: auto-sync from GURU-BEAST-ROG at 2026-05-26 21:24:46

Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-05-26 21:24:46

clients/tucson-golden-corral/session-logs/2026-05-26-session.md

@@ -0,0 +1,92 @@
+# Session Log — 2026-05-26
+
+## User
+- **User:** Mike Swanson (mike)
+- **Machine:** GURU-BEAST-ROG
+- **Role:** admin
+
+---
+
+## Session Summary
+
+Mike received a message from Tucson Golden Corral (Jeffrey Schaufel) via Discord requesting deletion of the email account `Erick.Godoy@tucsongoldencorral.com` — the employee no longer works there.
+
+Context was loaded first: the client's email is hosted on IX Web Hosting (IX server at 172.16.3.10 / 72.194.62.5), not Microsoft 365. The cPanel account for tucsongoldencorral.com was identified as `tucsongc` via the WHM JSON API. SSH batch-mode authentication to the IX server was attempted first but failed (no interactive password prompt available in headless bot context), so the WHM HTTPS API was used instead throughout.
+
+The mailbox `Erick.Godoy@tucsongoldencorral.com` was deleted via the cPanel UAPI proxy (`/json-api/cpanel?cpanel_jsonapi_user=tucsongc&cpanel_jsonapi_apiversion=3&cpanel_jsonapi_module=Email&cpanel_jsonapi_func=delete_pop`). The API returned status 1 (success) and confirmed TFA entries for the account were also cleaned up.
+
+A Syncro ticket (#32327) was then created for Tucson Golden Corral, billing 0.25 hours of in-shop labor. The customer has a prepaid block (4.0 hours prior to this session); the invoice was generated at $0.00 with 0.25 prepay hours debited (3.75 hrs remaining). Ticket was marked Invoiced and a bot alert posted to #bot-alerts.
+
+---
+
+## Key Decisions
+
+- Used WHM HTTPS API instead of SSH for IX operations — SSH batch mode cannot complete password authentication in the headless bot environment; WHM API on port 2087 with Basic auth works non-interactively.
+- Billed in-shop (product 573881) rather than remote — Mike specified "in shop" rates explicitly.
+- Applied prepaid billing path (product 573881 at standard rate, not 26184) because the customer had prepay_hours > 0 (4.0 hrs). Invoice correctly shows $0.00 with prepay deduction.
+
+---
+
+## Problems Encountered
+
+- SSH to IX server (172.16.3.10) returned only the known_hosts warning with no command output in batch mode — the bot runs headless with no console for password input. Resolved by switching to the WHM HTTPS API for all IX operations in this session.
+- `identity.json` was not found at `C:/Users/guru/.claude/identity.json` during the API key lookup shell block — the script fell through to the git-detected repo root fallback. Repo root resolved correctly via git; API key selected successfully. Bot session uses a different identity path convention; not blocking.
+
+---
+
+## Configuration Changes
+
+- Created `clients/tucson-golden-corral/` client directory (new)
+- Created `clients/tucson-golden-corral/session-logs/` (new)
+- Created this session log file
+
+---
+
+## Credentials & Secrets
+
+- IX Server root credentials accessed from vault: `infrastructure/ix-server.sops.yaml`
+  - Host: 172.16.3.10 (internal) / 72.194.62.5 (external)
+  - Port: 2087 (WHM), 2083 (cPanel)
+- Syncro API key used: Mike's key (`T259810e5c9917386b-...`) from skill hardcoded block
+
+---
+
+## Infrastructure & Servers
+
+- **IX Server:** 172.16.3.10 (LAN) / 72.194.62.5 (WAN) — Rocky Linux, WHM/cPanel, port 2087
+- **cPanel account:** `tucsongc` — domain `tucsongoldencorral.com`
+- **Syncro:** computerguru.syncromsp.com — customer ID 3859123
+
+---
+
+## Commands & Outputs
+
+```bash
+# Find cPanel account for tucsongoldencorral.com via WHM API
+curl -sk -u "root:<pass>" "https://72.194.62.5:2087/json-api/listaccts?search=tucsongoldencorral&searchtype=domain"
+# Result: tucsongc / tucsongoldencorral.com
+
+# Delete email account via cPanel UAPI proxy
+curl -sk -u "root:<pass>" \
+  "https://72.194.62.5:2087/json-api/cpanel?cpanel_jsonapi_user=tucsongc&cpanel_jsonapi_apiversion=3&cpanel_jsonapi_module=Email&cpanel_jsonapi_func=delete_pop&email=Erick.Godoy%40tucsongoldencorral.com"
+# Result: {"status":1,"messages":["","Removed tfa entries belonging to \"erick.godoy@tucsongoldencorral.com\"."]}
+```
+
+---
+
+## Pending / Incomplete Tasks
+
+None. Work fully completed and invoiced.
+
+---
+
+## Reference Information
+
+- Syncro ticket: #32327 — https://computerguru.syncromsp.com/tickets/111083949
+- Syncro invoice: ID 1650421921 — $0.00 (prepaid, 0.25 hrs debited)
+- Customer prepay balance after billing: 3.75 hrs
+- Deleted account: Erick.Godoy@tucsongoldencorral.com
+- cPanel account: tucsongc (tucsongoldencorral.com) on IX server
+- Discord channel: #Message from tucson golden corral (thread)
+- Requested by: Mike Swanson via Discord bot (@azcomputerguru, ID 264814939619721216)
+- Original message source: Tucson Golden Corral owner (Jeffrey Schaufel)