docs: fix invented commands/flags across wiki (#277)
Every jamf-cli invocation in the wiki was validated against the live
command catalog (jamf-cli commands -o json, i.e. the MCP list_commands
tool) and confirmed against the binary's --help. Fixes:
Invented compliance-benchmarks subcommands (issue #277): stats,
baselines, rules, device-results, compliance don't exist. The real
functionality is in separate resources — documented for the first time:
- pro baselines list / pro rules list
- pro benchmark-reports {rules,devices,compliance-percentage} (take a
benchmark ID, not a title)
Invented patch subcommand: patch only exists on PATCH-capable resources.
buildings/scripts have no patch (use update/apply). Rewrote the patch
examples to use computers/mobile-devices and noted the constraint.
Invented flags:
- buildings update --from-file (use apply)
- mobile-devices delete --udid/--serial (only on get/patch)
- mobile-devices get --section (list only)
- app-installer-deployments installation-retry --yes (no such flag)
- app-installer-global-settings update --from-file (singleton; --set)
- blueprints scope add/remove --device-group (--computer-group /
--mobile-device-group / --group-id)
- platform-devices check-in --yes (non-destructive, no --yes)
- platform-device-groups add-members/remove-members --from-file (--id)
- ddm-reports declaration --sort with wrong value form
Other invented subcommands:
- platform-devices apps -> applications
- platform-device-groups export -> get -o yaml
- classic-patch-reports list (get by ID only)
- classic-user-groups scope get (user groups aren't scopable)
- ddm-reports device/declaration require a subcommand (device
declarations / declaration devices)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
86780e6
docs: update wiki for v1.21.0, v1.21.1, and v1.22.0
- Jamf Pro Commands: classic-ldap-servers full CRUD (v1.21.0); backup
prestages resource with embedded device scope (v1.21.0); new Jamf
Protect Deployment Tasks section covering retry-failed (v1.22.0)
- Jamf Protect Commands: network-content-filter-profile download +
--unsigned on signed profile downloads (v1.21.0)
- MCP Server: run_command hardened to reject model-supplied
instance/credential/output flags and pinned to the launch profile
(v1.21.0); list_commands destructive marker (v1.22.0)
- CLI Patterns: commands catalog privileges/destructive fields,
agent-context command, determinate --all pagination progress
(v1.22.0)
- Error Handling: 403 hint enrichment with required privilege names
(v1.22.0)
- Output Formats: ndjson format (v1.22.0)
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
8d2ba4d
docs: add MCP Server page for v1.20.0 (mcp serve)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
48f6a92
docs: update wiki for v1.19.0
- Output Formats: TTY-aware default format (table on terminal, json on
pipe), single-object detail view, semantic --compact
- Error Handling: exit code 7 (partial_failure) + --allow-partial-failure,
JSON envelope hint/exitCodeName/details fields, usage-error suggestions
- Claude Code Skills: correct marketplace install (/plugin marketplace add
+ /plugin install jamf-cli-skills@jamf-cli)
- Jamf Pro Commands: app-installer-global-settings (11.29.0)
- CLI Patterns: --all auto-pagination on all paginated GETs
- CI/CD: handling partial batch failures in pipelines
- Secrets & Keychain: keychain write-failure guidance
- Configuration: clarify TTY-aware default-output
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
24f3c85
docs: add Claude Code Skills wiki page
Covers plugin installation, available skills, how the agent works,
agentic usage tips (Platform device groups, positional IDs, apply vs
create, spec-check behaviour), and troubleshooting.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
ce457d9
docs: update wiki for v1.18.0
- Add --no-hints / JAMF_CLI_NO_HINTS (advisory hints) to global flags, env vars, and Output Formats
- Add --no-version-check / JAMF_NO_VERSION_CHECK and document the tenant version compatibility check
- Expand version command docs (specProVersion, spec provenance with SHA256, structured -o json/yaml)
- Add Classic computer/mobile-device groups and advanced mobile device searches commands
- Document platform-device-groups --device-type disambiguation flag
- Fix scope --computer note (id/name/UDID, not serial); document v1.18.0 identifier resolution
- Backfill --compact / --select in the global flags reference table
9723dd3
docs: add JamfDash and Command-Line-User-Bridge to community showcase
865fac6
docs: update wiki for v1.16.0 and v1.17.0 releases
v1.16.0:
- Document jcds download command (jcds sync already listed under packages sync)
v1.17.0:
- Output Formats: add --compact and --select field projection section
- Output Formats: note spinner is suppressed by NO_COLOR/--no-color
- Jamf Pro Commands: add jcds download documentation
- Jamf Pro Commands: add backup resource filter table (inventory-preloads CSV, mac-apps, mobile-apps)
- Jamf Pro Commands: add classic-ebooks and classic-user-groups sections
- Jamf Pro Commands: update scope flag table with --computer, --mobile-device, --user, --jss-user, --jss-user-group
- Jamf Pro Commands: expand scope-enabled resource list to include ebooks, vpp-assignments, vpp-invitations, user-groups
- Jamf Pro Commands: document server-side scope verification after add/remove
- Jamf Pro Commands: add doctor diagnostic command section
- Jamf Pro Commands: update version command to show -v spec provenance flag
01334c6
docs(pro-workflows): fix systemd example accuracy
- Add -m to useradd so home directory is created
- Replace config add-profile with direct config write: headless servers
have no D-Bus keychain daemon so go-keyring would fail at setup
- Use full path in ExecStart (/usr/local/bin/jamf-cli): systemd has no
user PATH
- Remove [Install] from service unit: misleading for timer-activated
oneshot, the timer unit is what gets enabled
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
0f3b48f
docs(pro-workflows): add systemd scheduled sync example
Covers service account setup, file: secret reference, service +
timer units, and key differences from launchd (ConditionPathIsMountPoint,
Persistent=true, journald logging).
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
f924b45
docs(pro-workflows): fix launchd plist XML formatting and credentials
- Fix inline key/value pairs to proper one-element-per-line plist style
- Remove plain-text credentials from EnvironmentVariables dict
- Add file:-based secret reference pattern (chmod 600, root-owned)
so launch daemons work without a user session (Keychain unavailable)
- Add config add-profile setup steps with correct --auth-method oauth2
- Use correct YAML key name: client-secret (not client_secret)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
687ec05
docs: add packages sync command reference and distribution point workflow
d283f7f
docs: v1.15.0 — bulk delete, app installers, spec-generated platform commands
e065d6c
docs: v1.14.0 — multi-level verbose and monolith spec ingest
- Output-Formats: document -v/-vv/-vvv count flag
- Configuration-&-Profiles: update global flags table entry
- Architecture-&-Development: verbose bullet, make sync-spec target,
monolith splitter docs, dual sync pipelines workflow
dba4bcd
docs(wiki): document v1.13.0 features — custom payloads, redeploy_on_update, package priority
3a1a3c0
wiki: add JamfReport to community showcase
Marco Devliegere's JamfReport — https://github.com/DevliegereM/JamfReport
A bash script that generates a self-contained HTML snapshot of a Jamf Pro
instance via jamf-cli, with security posture gauges, MDM/app failure
tables, cleanup analysis, and optional adoption timeline tracking.
f5290a9
wiki: restore blueprints components converters to Platform Workflows
The configuration-profile and configuration-profile-plist converters are
real subcommands — useful for manually assembling blueprint JSON outside
of the full import-profile flow, and for converting raw pref-domain
plists. Add a --strip-defaults example so the flag has coverage.
976e240
wiki: update for v1.12.0 — apply for PATCH-only, DEP composite, config -o
- CLI Patterns: note that apply is generated for PATCH-only resources
(replace branch issues merge-patch); DEP token example now uses apply;
v1.11.1 patch file-field fix called out.
- Jamf Pro Commands: File Uploads section simplified to lead with apply
for scripts, VPP, DEP, classic profiles/apps. Create+update pairs
collapsed to apply where apply exists. DEP upload-token / --rename
removal noted.
- Configuration & Profiles: document -o support on config show / list /
validate.
- Pro Workflows: scaffold example updated to apply --scaffold for
consistency.
6e77b7f
Updated Platform Workflows (markdown)
74cbaf6
wiki: update for v1.11.0 — file-based uploads, fixes, showcase up front
- Document new --script-file / --token-file / --mobileconfig-file /
--appconfig-file / --rename flags on create/update/apply (PR 149).
Remove obsolete pro scripts upload and classic-*-config-profiles
upload sections — replaced by the file-field pattern.
- Add --section flag docs for computers/mobile-devices list/get after
the switch to the detail endpoints.
- classic-account-users / classic-account-groups: document full CRUD
(list subcommands added in v1.11.0).
- Fix jamf-cli diff → jamf-cli pro diff (4 occurrences).
- Fix APAC gateway URL: ap.apigw.jamf.com → apac.apigw.jamf.com.
- Fix backup --concurrency default: 10 → 3 (ceiling 10).
- Cross-link file-field pattern from CLI Patterns.
- Move Community Showcase to the top of Home.md and _Sidebar.md.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
693819e
wiki: use full command names, fix errors, add group-tools docs
- Replace alias usage with full command names in all code examples
(e.g., `pro comp` → `pro computers`, `protect rscs` → `protect removable-storage-control-sets`)
- Fix Alerts section incorrectly labeled with `al` alias (belongs to audit-logs)
- Add missing group-tools documentation (list, members, analyze, export)
- Update resource count from "140+" to "200+" (210 unique pro resource groups)
- Update overview API call count from "~37"/"~34" to "~39"
- Fix outdated helper function names in Architecture page
(readProtectInput → readInput, etc.)
- Section headers retain alias annotations for reference
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
478b356
wiki: update for v1.9.0 release
- Add Jamf School product namespace (new pages: Jamf School Commands, School Workflows)
- Document auth token commands for Pro, Platform, and Protect (--refresh flag, JSON output)
- Document optimistic locking for prestage commands (automatic versionLock handling)
- Add School setup guide, config profile examples, and environment variables
- Update sidebar, home page, CLI patterns, CI/CD, and architecture docs
- Platform SDK v0.3.0 upgrade (internal refactor, no user-facing changes)
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
ecdd3fc
docs: link project names in showcase table to detail sections
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
5bfa5de
docs: add Community Showcase wiki page
Feature JamfCLI-Runner (Graham Pugh) and jamf-reports-community
(Tony Young) — the first community projects building on jamf-cli.
Includes summary table for quick scanning and detailed write-ups
for each project.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
fa6759c
docs: restructure wiki — split by product, extract shared patterns
Replace the 2100-line Command Reference monolith with focused pages:
- CLI Patterns: shared apply/scaffold/pagination/patch/dry-run concepts
- Jamf Pro Commands: all Pro-specific commands and Classic API
- Platform API Commands: blueprints, compliance benchmarks, DDM, devices
- Jamf Protect Commands: plans, analytics, alerts, insights, audit logs
Replace the 980-line Common Workflows monolith with:
- Pro Workflows: fleet management, device actions, multi-instance
- Platform Workflows: blueprints, benchmarks, DDM reports
- Protect Workflows: analytics import, detection sets, downloads
Platform API promoted to its own page — reflects the platform convergence
direction where these are shared services spanning tenants, not Pro-specific.
Update Home, Sidebar, Setup Guide cross-references.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
49a3e40
docs: update wiki for v1.8.0
- Command-Reference: scaffold applies to apply commands, YAML input for Pro apply, blueprint scope/components/import-profile, cb export/clone/scaffold-from-baseline, protect computers expand, add alerts/insights/audit-logs/permissions sections, protect aliases
- Common-Workflows: add blueprint import-profile, component scaffold, cb export/clone/scaffold-from-baseline
- Architecture: update protect and blueprint file structure tables
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
4f6a931
docs: add Protect token caching and device deep-dive platform sections
- Protect SDK v0.2.0 caches tokens to disk across invocations
- Device deep-dive shows blueprint/compliance/DDM sections with platform auth
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
b6caf93
docs: update wiki for v1.7.0
- Platform Gateway setup as recommended path for Jamf Cloud (beta)
- Platform API commands: blueprints, compliance-benchmarks, platform-devices,
platform-device-groups, ddm-reports with aliases (bp, cb, pdev, pdg, ddm)
- Platform reports: blueprint-status, compliance-rules, compliance-devices,
ddm-status
- Platform audit checks (auto-enabled with gateway auth)
- Folded get-by-name/delete-by-name into parent commands with --name flag
(both modern and classic API)
- Per-resource lookup flags: --serial, --udid on computers/mobile-devices
- Destructive cooldown: configurable per-profile delay between destructive ops
- New MDM commands: settings, set-auto-admin-password, request-mirroring,
stop-mirroring, refresh-cellular-plans, apply-redemption-code, delete-user,
log-out-user, unlock-user-account
- Platform gateway env vars (JAMF_TENANT_ID triggers platform auth mode)
- Protect token caching via SDK v0.2.0
- CI/CD examples for platform gateway auth and Platform API commands
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
16fcd9b
docs: add SSO / no local accounts guidance to Setup Guide
Users with SSO-only Jamf Pro instances can't use 'pro setup' since it
requires a local username and password. Adds a quick-start callout in
the Jamf Pro section and a new subsection walking through manual API
role + client creation, then 'config add-profile --auth-method oauth2'.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
b9db952
docs: update wiki for v1.6.0
- Add patch command section (JSON Merge Patch, --set, --name/--serial/--udid lookup, scaffold)
- Update pro overview: ~37 API calls, groups, ADE/VPP token expiry, APNs, Admin SSO, App Installers
- Remove policy-execute: command removed in v1.6.0 (no valid API backing)
- Add classic-removable-mac-addresses resource to Classic API section
- Document full scope filter flags for bulk enable/disable-policies
- Add patch workflow to Common Workflows (section 7), renumber sections
- Bump endpoint count to 140+
7a39951