Howard Enos
db6aa3683f
Several bugs found and fixed during live testing against the ACG GravityZone tenant: - security_sweep_all_clients: iterate each company (the companies container is not a valid endpoint parent; passing it 400'd the whole sweep) - list_quarantine: use service-scoped path quarantine/computers with companyId (bare quarantine module 404'd; param is companyId not parentId) - rename GZEndpointSummary.detection_active -> threat_detected with corrected semantics (True = active threat, tracks with infected; not an engine-on flag) - status: readable sectioned table renderer for the nested apiKey/license dict - portable CLAUDETOOLS_ROOT resolution (derive from file path, not a Windows literal) so it works on the Mac/Linux fleet Adds scripts/selftest.py: a 29-check read-only harness (all passing) covering every read command, --json, error exit codes, and destructive-action gating. EDR/incident commands (blocklist, isolate/unisolate, blocklist-add/remove) and raw destructive-method gating are included from this session's work. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
100 lines
1.7 KiB
Plaintext
100 lines
1.7 KiB
Plaintext
# Backups (local only - don't commit to repo)
|
|
backups/
|
|
|
|
# Remediation-tool cache (live Graph API responses — may contain user data)
|
|
.cache-remediation/
|
|
tmp-remediation/
|
|
|
|
# Bitdefender skill cache (identity/structure only — no secrets/PII)
|
|
.claude/skills/bitdefender/.cache/
|
|
|
|
# Local settings (machine-specific)
|
|
.claude/settings.local.json
|
|
.claude/identity.json
|
|
.claude/current-mode
|
|
.claude/coord-broadcasts-seen
|
|
.claude/scheduled_tasks.lock
|
|
|
|
# /autotask command — kept local/undistributed (Syncro is the default PSA; Autotask is opt-in).
|
|
# Remove this line to distribute /autotask to the fleet. See .claude/memory/feedback_psa_default_syncro.md
|
|
.claude/commands/autotask.md
|
|
|
|
# Temporary files
|
|
*.tmp
|
|
*.log
|
|
*.bak
|
|
.claude/tmp/
|
|
|
|
# Live secrets / tokens — never commit
|
|
.token
|
|
.token_*
|
|
*.jwt
|
|
token.txt
|
|
.token.txt
|
|
|
|
# OS files
|
|
.DS_Store
|
|
Thumbs.db
|
|
desktop.ini
|
|
|
|
# IDE/Editor
|
|
.vscode/
|
|
.idea/
|
|
*.swp
|
|
*.swo
|
|
*~
|
|
|
|
# Python
|
|
__pycache__/
|
|
*.pyc
|
|
*.pyo
|
|
venv/
|
|
.env
|
|
|
|
# Node
|
|
node_modules/
|
|
.npm/
|
|
|
|
# Rust
|
|
target/
|
|
Cargo.lock
|
|
|
|
# Build outputs
|
|
dist/
|
|
build/
|
|
*.exe
|
|
*.dll
|
|
*.so
|
|
*.dylib
|
|
|
|
# ClaudeTools specific
|
|
.encryption-key
|
|
*.key
|
|
.pytest_cache/
|
|
.venv/
|
|
*.db
|
|
*.sqlite
|
|
logs/
|
|
.claude/tokens.json
|
|
**/.tokens.json
|
|
.claude/context-recall-config.env
|
|
.claude/context-recall-config.env.backup
|
|
.claude/context-cache/
|
|
.claude/context-queue/
|
|
api/.env
|
|
|
|
# MCP Configuration (may contain secrets)
|
|
.mcp.json
|
|
Pictures/
|
|
.grepai/
|
|
# Radio processor
|
|
projects/radio-show/audio-processor/test-data/*.mp3
|
|
projects/radio-show/audio-processor/*.egg-info/
|
|
|
|
# Large binary diagnostic artifacts (memory dumps, extracted case archives) —
|
|
# keep raw dumps out of git; record findings in markdown instead.
|
|
clients/internal-infrastructure/datto-bsod-case-2026-05-16.zip
|
|
clients/internal-infrastructure/datto-bsod-case-2026-05-16/
|
|
|
|
temp/
|