docs: update the wiki for v1.33.0 pro setup --scope standard withholds the privileges that grant privileges or logins. import-profile keeps the profile as installed and takes over where it can; --convert replaces --legacy. pro bulk moves to classic-policies enable/disable and group add-members/remove-members; send-command refuses ten of twelve commands. Device actions exit 7 on a partial failure and --from-file lists take UDIDs, management IDs and names. MCP run_command refuses the writes that change who can log in. Gateway refusals drop from 59 to 53 (restart, shutdown, remote desktop now routed). Generated Pro writes take --from-file; Classic profile writes edit the element the server reads; gateway uploads go out chunked; -vv traces wire headers and -v works for Protect, School and Security Cloud. make sync-specs is retired; the skill and hook name real spec files. Wire-checked against v1.33.0 on platform-nmjspp. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
docs: re-verify the lab page against v1.31.1 Re-ran every command on the page against the sandbox on v1.31.1. All 12 guided blocks and all 42 non-mutating buffet blocks pass unchanged, so the four fixes in that release need no rewording. Three measured figures moved: - The version the page claims it was checked against. - `pro audit` now takes about 15 seconds rather than 20 (14.8s, 16.0s and 16.2s over three runs, against 21.3s on v1.31.0). PR #389 made `--all` page at the endpoint's maximum, so the audit's sweeps cost fewer requests. - `dashboard` prints five Jamf Security Cloud errors to stderr, not four. Checked and unchanged: 15 reports, 17 blueprint components, 15 baselines, 104 rules in the CIS Level 1 scaffold, 12 members in JNUC Lab - macOS 26, the 45/60/192 fleet counts, and the six table column labels. Worth noting for the lab: `pro audit` now emits its "Empty smart groups" finding, at 29 groups. PR #387 fixed the check that could never fire, so the audit output a participant sees is one finding richer than it was. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Updated Hands On With Jamf Concepts (markdown)
docs: open Self Service first for the sandbox credentials Self Service holds the username and password for the Jamf Pro web interface, so opening it is now the first step, ahead of the numbered sections and outside the five-minute budget. Delivered as an `open` command in a code block rather than a markdown link. GitHub strips unknown URL schemes: `[text](jamfselfservice://...)` renders as bare text with no anchor at all, which looks like a link and does nothing, and hides the URL so it cannot even be copied. A code block keeps the copy button every other step on the page uses. The buffet's browser recipes now point back at it, since those are the commands that ask for a sign-in. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
docs: add the JNUC hands-on lab page A guided five-minute walk through jamf-cli for walk-up participants at the "Hands-on with Jamf Concepts" session, followed by a buffet of recipes for anyone who finishes early or already knows the CLI. Written against a sandbox tenant on v1.31.0, and every command was run there rather than reasoned about. The guided path is 11 blocks, which measured at about four minutes once reading the line, pasting it and understanding the output are counted. An earlier draft had 56 blocks in sections labelled nine minutes; at a realistic 22 seconds a block that was over twenty. Three things the testing changed: - The default output format follows the destination: a table on a TTY, JSON through a pipe. Examples verified only through a pipe therefore did not match what a participant sees, so the page teaches the rule and pins -o on every projection. - `--field` and `--select` resolve against the rendered row shape, so a table takes its column labels and -o json takes the record's dot paths. Confirmed as intended behaviour and documented rather than worked around. - Three `| head -N` examples truncated JSON mid-array into invalid documents. They now project with jq instead. The page names fixtures that exist on the lab tenant: the JNUC Lab computer groups, the Playground policy, the Math Settings blueprint and the CIS Level 1 benchmark. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>