2 Commits

Author	SHA1	Message	Date
Howard Enos	1e80fb24db	datto-edr: fix scan to verified Agents/scan endpoint + harden ... - Scan now uses POST Agents/scan with AND-wrapped where {and:[{id:[...]}]} (the Infocyte targets/{id}/scan routes are dead/404; bare {id:{inq}} returns HTTP 412 ambiguous-column). Verified live: single-agent scan -> 'Scanning 1 host'. - scan/isolate REQUIRE explicit --agent ids; empty list refused (tenant-wide footgun). - isolate rides Agents/scan with the Host Isolation extension in options.extensions; resolves --extension-name -> id via /Extensions. - New subcommands: tasks, task, cancel, create-group, mint-key. - deploy-cmd emits full -URL (not -InstanceName; cname 'azcomp4587' trips the install script's .com regex and leaves --url empty). - Docs (SKILL.md + api-reference.md) rewritten to the verified endpoints + footguns. Lifecycle verified end-to-end on RMM-TEST-MACHINE (create-group/mint-key/install/ register/scan/cancel). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-25 13:55:22 -07:00
Howard Enos	bd1e84d32c	skills: add datto-edr (Datto EDR / Infocyte HUNT) + syncro-rmm memory ... New /datto-edr skill — standalone CLI for the Datto EDR REST API (azcomp4587, rebranded Infocyte HUNT, raw-token LoopBack). Live-verified reads across the whole MSP fleet: orgs/sites/agents/detections/sweep + deploy-cmd. Scan/isolate gated behind --confirm (shape-verified, not run against prod). Token vaulted at msp-tools/datto-edr.sops.yaml. Also: reference_syncro_rmm_api_gui_only memory (Syncro RMM policy mgmt is GUI-only) and the guru-rmm submodule pointer bump (Feature 6 EDR research). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-06-25 12:39:58 -07:00