260be8c2ad
security.azcomputerguru.com: scaffold the client security-assessment intake app
...
New MSP tool — single-assessor consult intake. Stack: PHP + MySQL on the IX cPanel
host, gated by Cloudflare Access (only mike@azcomputerguru.com ; app re-checks the
Cf-Access-Authenticated-User-Email header).
- app/questions.json — risk-ordered question framework (9 sections); each field tagged
source=syncro/rmm/scan/ask so the consult asks only what a human knows and the
post-meeting scan fills the technical reality.
- app/index.php — wizard UI: Syncro phone lookup -> prefill, section rail with live
progress, importance-colored question cards, in-meeting 365/Google consent links,
review + export.
- app/api.php — Syncro lookup-by-phone, save/load/list, consent-URL generation (reuses
the read-only Security Investigator app bfbc12a4-...), HTML export.
- app/schema.sql, config.sample.php, DEPLOY.md, README.md.
Consent links let the client approve read-only 365/Google access during the consult so
the audit scan runs afterward. Read-only by design (reads Syncro, generates consent; no
tenant writes).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-18 14:20:05 -07:00
0fcc270c02
sync: auto-sync from GURU-5070 at 2026-06-16 18:13:39
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-16 18:13:39
2026-06-16 18:13:57 -07:00
e8d44304cf
submodule: advance guru-rmm -> f38da05 (RMM_THOUGHTS Feature 5: server-side public-IP capture)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-13 06:23:28 -07:00
24b0c4ce9a
submodule: advance guru-rmm -> SPEC-029 legacy fleet RMM (multi-AI validated)
...
Win7 32-bit agent already ships (Rust 1.77 legacy); proxy redundant w/ userspace TLS;
2003 -> relay/jump-host; NSIS not MSI. Gemini + Grok converged.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-12 17:44:21 -07:00
b01e872a2d
submodule: advance guru-rmm -> 8d5bb9d (Feature 4a connectivity-signal refinement)
...
Alert-on-state design note from the 2026-06-12 log-analysis reconciliation:
severity reclassify for benign WS resets + device-class/business-hours offline
budgets + flapping/mass-drop trends. Folds into Feature 1 + Feature 4.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-12 09:17:04 -07:00
31c94a6a91
submodule: advance guru-rmm -> 2fc6ab4 (file 2 log-analysis bugs in RMM_THOUGHTS)
...
Inventory NUL/jsonb reject (7 Windows agents) + update scanner dropping
non-Windows binaries (macOS/Linux agents never offered updates). Both
ROOT-CAUSED from the 2026-06-12 fleet log-analysis reconciliation.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-12 08:18:55 -07:00
dcdd9c3ec8
wiki/memory: retire GuruRMM 'VM' framing + correct Windows build chain
...
Two sweeps:
1. .30 is a PHYSICAL box (Lenovo ThinkCentre M83, Ubuntu 26.04), not a Jupiter
VM — the VM was decommissioned 2026-06-12. Fixed inventory tables and the
gururmm-build system page (overview, index, jupiter, gururmm-build,
POWER_FAILURE_RUNBOOK).
2. Windows build chain: Beast (GURU-BEAST-ROG, tailnet 100.101.122.4, i9-14900K)
is PRIMARY; Pluto (172.16.3.36) is FALLBACK. Verified against build-windows.sh
(`attempt_build beast || attempt_build pluto`). Fixed overview, index,
projects/gururmm (build-host table + flow + host detail), systems/pluto, and
the reference_pluto_build_server memory.
Submodule advanced: build-pipeline doc comments corrected to match.
2026-06-12 07:46:15 -07:00
6bfdae214a
submodule: advance guru-rmm (runbook cleanup done); memory: old VM decommissioned + .47 dropped
2026-06-12 07:38:49 -07:00
c21c55efcb
submodule: advance guru-rmm -> 37c8593 (runbook: host migration marked COMPLETE)
2026-06-12 07:32:05 -07:00
e47133a352
submodule: advance guru-rmm -> c869e4d (log analysis via Claude API, not Ollama-on-Beast)
2026-06-12 07:16:42 -07:00
6f695b2979
submodule: advance guru-rmm -> 5eca48d (session log: command_type 'cmd' mis-diagnosis + 0.6.66 fix)
2026-06-12 06:00:58 -07:00
43b9677cbd
submodule: advance guru-rmm -> 33150af (session log: Beast parallel build)
2026-06-12 05:59:45 -07:00
7e10274584
submodule: advance guru-rmm -> 80df458 (fix parallel Windows build: drop cargo-fetch, isolate target dirs)
2026-06-11 21:04:29 -07:00
1444933ff9
submodule: advance guru-rmm -> b5ea567 (parallelise Windows build variants on Beast)
2026-06-11 20:50:55 -07:00
884f632d06
submodule: advance guru-rmm — Beast primary Windows build host + Pluto fallback (build-windows.sh)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 20:15:14 -07:00
55599a1681
submodule: advance guru-rmm — policies backend-drift close (offline-alerting + scope-aware sweep + vss.auto_heal)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 18:04:56 -07:00
897a5b53d0
submodule: re-point guru-rmm -> 6af5f7b (rebased deploy session log onto current main)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 16:04:43 -07:00
8a72627c0f
submodule: advance guru-rmm (comms-durability Phase 1 deploy + fleet rollout session log)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 16:03:50 -07:00
3981207e15
submodule: advance guru-rmm -> 5c0d004 (installer + CLI-logging robustness fixes)
...
Hardens the Windows install invocation (Start-Process + exit-code check) and
cleans up agent CLI logging (file-only for one-shot commands, ANSI off on
stdout). Prompted by the Tucson RED-LION-9255 install failure (root cause was a
transient post-migration download, server cache since purged). gururmm-remote
push of 45870b1/ca1657b/dd52b20/5c0d004 still pending from .47.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 14:54:09 -07:00
cf55bac57d
submodule: advance guru-rmm -> dd52b20 (comms-durability Phase 1 slices B+C + session log)
...
Agent CommandAck+dedup (45870b1), server reaper re-delivery + heartbeat re-offer
(ca1657b), session log (dd52b20). gururmm-remote push pending from .47.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-11 14:15:33 -07:00
63afd2a055
submodule: advance guru-rmm (comms-durability spec + slice A + session log)
2026-06-11 13:18:06 -07:00
848bb4b347
rmm: bump guru-rmm pointer -> 08bf323 (file WS-flakiness bug — agents heartbeat+update but interactive commands time out; needs investigation)
2026-06-11 12:36:16 -07:00
fcf583d876
submodule: advance guru-rmm to cea51d6 (Task 1 + session log + spec)
2026-06-11 12:31:06 -07:00
e0cabe0f9a
submodule: advance guru-rmm to 8ff9baf (durable-agent-identity spec)
2026-06-11 12:01:57 -07:00
a647fc4948
rmm: bump guru-rmm pointer -> 4b5ed30 (chmod 644 published agent artifacts — fix post-migration download 403 / fleet self-update outage + runbook gap #4 )
2026-06-11 11:13:39 -07:00
9b23ab1535
submodule: advance guru-rmm to 197b843 (migration docs + session logs)
2026-06-11 11:09:09 -07:00
1cd8ff8edf
rmm: bump pointer — migration Phase 0 staged + Workstream B done
2026-06-10 20:05:03 -07:00
68612251e8
rmm: host-migration runbook + ratified architecture (memory + pointer)
...
Bump guru-rmm pointer (host-migration runbook). Record the migration architecture
decision in memory: physical box becomes .30 (all-but-Gitea-runner), VM retired,
MariaDB migrates (backs the coord claudetools DB per Gate-A).
2026-06-10 18:40:07 -07:00
a66e48d9e1
rmm: bump guru-rmm pointer — batch agent_logs ingest (multi-row INSERT)
2026-06-10 16:36:13 -07:00
eb7cec8432
rmm: bump guru-rmm pointer — remove LHM support from agent
2026-06-10 14:47:47 -07:00
0047a695f4
rmm: bump guru-rmm pointer — BSOD warn->debug + WS keepalive 30s
2026-06-10 14:30:02 -07:00
1e6e389d99
rmm: bump guru-rmm pointer — server self-error capture + alert
2026-06-10 14:06:21 -07:00
13a9ec5c70
rmm: bump guru-rmm pointer — log-feedback backfill + ERROR/WARN panel filter
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 13:47:52 -07:00
6295ff0f0f
rmm: bump guru-rmm pointer -> 56e1871 (log-feedback Phase 1 + normalizer v2 fix)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 12:53:26 -07:00
3e9732737d
rmm: bump guru-rmm pointer -> 18de5c7 (systemic-log-feedback Phase 1 complete)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 12:38:45 -07:00
000465cc13
rmm: bump guru-rmm pointer -> da86aca (systemic-log-feedback spec + Phase 1 foundation, WIP)
...
Protects in-progress submodule work from submodule-update reverts.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 12:25:34 -07:00
658dfd5cb7
rmm: bump guru-rmm pointer — RMM_THOUGHTS Feature 4 (systemic log-feedback)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 11:59:15 -07:00
c3f4b9849f
rmm: bump guru-rmm pointer -> Event Log Watch management UI (e67dd82)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 11:47:16 -07:00
5e00c5a919
rmm: bump guru-rmm pointer -> 5260a0f (2026-06-09 audit fixes + tray pipeline, merged & shipped to prod)
...
Submodule now at the merge that shipped: status-stream auth, event-log
reconnect, credential-key fail-closed, coord proxy, sqlx runtime, internal_err
sweep, WS payload caps, credential-reveal audit log (migration 056), tray
build/sign/deploy pipeline (BUG-020). Deployed via pipeline: server v0.3.58,
dashboard beta v0.2.67, tray 0.6.57.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:52:27 -07:00
0fcec29642
rmm: bump guru-rmm pointer — MEDIUM fixes (WS payload caps, Agent TS types, credential-reveal audit log)
...
Submodule 5cd11a3..ed92097:
- harden: bound agent-pushed WS payloads + fix Agent TS type drift
- feat: credential-reveal audit logging (audit_log table)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:23:20 -07:00
73019844df
rmm: bump guru-rmm pointer — 2026-06-09 audit HIGH fixes (cred key, coord proxy, sqlx, 500-leak sweep)
...
Submodule 4321e91..5cd11a3
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:23:20 -07:00
3980ff0af3
rmm: bump guru-rmm pointer — event-log watch CRUD full-config push
...
Submodule 557fa52..4321e91:
- fix: event-log watch CRUD push sends full policy + watches
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:23:20 -07:00
66fa1faeff
rmm: bump guru-rmm pointer — event-log watch reconnect re-push
...
Submodule f7750fa..557fa52:
- fix: re-push event-log watch rules on agent (re)connect
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:23:20 -07:00
73f23b5087
rmm: bump guru-rmm pointer — status-stream auth fix + 2026-06-09 audit
...
Submodule 226ba9f..f7750fa:
- fix: authenticate /api/agents/status-stream (SSE) + org-scope it
- docs: 2026-06-09 rmm-audit report + living-doc reconcile
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-10 10:23:20 -07:00
b18dc125b5
sync: auto-sync from GURU-5070 at 2026-06-07 08:15:08
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-07 08:15:08
2026-06-07 08:15:11 -07:00
18250eb7c2
sync: auto-sync from GURU-BEAST-ROG at 2026-06-05 15:42:37
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-05 15:42:37
2026-06-05 15:42:43 -07:00
7e90d11acd
glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged
...
- 2026-06-05-tom-reply2-draft.md (SENT): web-DB rearchitecture ack, CVV-no-paper
correction, key-backup/escrow guidance, least-priv sync-job note
- 2026-06-05-tom-quo-checklist.txt: clean 80-site quo() list sent to Tom
- session log: TimeForce 2005->2008->2016 payroll chain (load-bearing, preserve)
- guru-rmm submodule pointer -> dashboard redesign doc set (local)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 14:37:26 -07:00
383f137186
rmm dashboard redesign (Gemini live review) + CDP Chrome driver
...
- .claude/scripts/cdp.py: drive Chrome via DevTools Protocol; screenshots to disk
(so Gemini/Grok can see the live site). Fixes invisible-window + no-disk-screenshot.
- reference_cdp_chrome_driver.md (+ MEMORY index)
- gururmm submodule pointer -> dashboard redesign docs (local 3cef6ba)
- session log
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 13:10:37 -07:00
2ac6c568fb
scc: Session save and push from GURU-5070 at 2026-06-05 10:35
...
glaztech: :3436 backup-job recon + Tom's architectural reply; session log update.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 11:35:16 -07:00
08f0a1b4b1
chore: auto-recover 1 unsaved session log(s)
...
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-04 19:08:18 -07:00