liquidware-ninjaSecond brain & toolkit
Personal project. Research and learning only. Not for production. No warranty.Not for production
  • Built on my own time for research and learning. Not affiliated with, endorsed by or supported by my employer, Liquidware or Microsoft.
  • Bring your own Liquidware licenses. Don't run any of it in production or against tenants and subscriptions that matter. Test in a dedicated lab first.
  • Provided "as is", without warranty of any kind, under each repository's license. You use it at your own risk and own the Azure charges it incurs.
  • Contributions and forks are welcome and encouraged on public repos. See Contribute.

liquidware-ninja.prignano.ai · Part of the avd-ops ecosystem

Liquidware across virtual and physical desktops, as code and a living second brain.

Architecture reference, 2ndbrain knowledge base, cross-platform PowerShell utilities, and automation projects for Stratusphere UX, ProfileUnity, FlexApp, and CommandCTRL across Azure Virtual Desktop, Windows 365, Citrix, Omnissa Horizon, RDS, and physical PCs.

Explore Knowledge Base Read Field Notes PowerShell Toolkit GitHub Repo
Public Foundation & Azure Deployment
The why, reference & toolkit (Public)liquidware-ninjaLiving 2ndbrain knowledge base across all four Liquidware products, technical field notes, reference templates, and nine pure PowerShell functions.Public · MIT / Apache-2.0 The Azure / AVD deployment tier (Public)avd-liquidwareSubscription-scoped Bicep and PowerShell to deploy Stratusphere UX appliances, Connector ID Key rollouts, ProfileUnity consoles, and FlexApp App Attach on AVD.Public · MIT

Shared schemas, SpotCheck thresholds, and manifest contracts connect the public reference tier to the private assessment and packaging pipelines.

Private Companion Engines (High-Level Architecture Overview)
Assessment & deliverable pipeline (Private)ux-assessPlatform-agnostic Stratusphere UX Hub API exporter, canonical dataset normalizer, HMAC-SHA256 pseudonymizer, SpotCheck analyzer, and multi-format report + Power BI PBIP generator.Private repo · High-level overview Application evaluator & packaging factory (Private)flexapp-factoryEvaluates existing application servers, builds dependency DAGs, converts legacy packages (.appv, .msix, .intunewin, PSADT), and drives unattended FlexApp captures and smoke tests.Private repo · High-level overview
Each repository owns one clear job and exchanges validated, redacted JSON/Parquet contracts. See how the four Liquidware repositories and avd-ops fit together.

The Liquidware Repositories

Our Liquidware engineering work is split into four focused repositories—two open-source repositories on GitHub and two private companion engines documented here at a high level.

liquidware-ninja

Public · MIT

Second Brain, Templates & PowerShell Toolkit

The authoritative knowledge base and general catchall repository across Stratusphere UX, ProfileUnity, FlexApp, and CommandCTRL.

  • 2ndbrain Knowledge Base (docs/knowledge/): 21 curated topic pages, MADR decision records, known errors, and weekly upstream digests.
  • Reference Templates (templates/): FSLogix Portability coexistence guardrails, FlexApp package manifests, Stratusphere Inspector catalogs, and CommandCTRL multi-session baselines.
  • PowerShell Toolkit (scripts/tools/): LiquidwareNinja.psm1 (9 offline-testable functions) and Test-LwCidKeyHealth.ps1 (PS 5.1/7+ endpoint agent health check).
2ndbrain KBPowerShellTemplates
Repo overview →

avd-liquidware

Public · MIT

Azure & AVD Deployment Tier

Automates deploying and operating the optional Liquidware tier in Azure against an existing avd-landing-zone estate while keeping FSLogix as the primary profile container.

  • Stratusphere UX in Azure (stratusphere/): Preflight checks, Marketplace Hub/Database/Collector appliance deployment, Connector ID Key rollout via Run Command, and safe teardown.
  • ProfileUnity & FlexApp Tier (profileunity/): Spoke VNet peering, Private DNS links, Key Vault, lwconfig / portability / appattach Premium Azure Files shares with Entra Kerberos (no storage keys), and Console VM.
  • Two-Step Promotion: Managed Identity blob staging to on-demand ACI file-share promotion and operator-registered AVD App Attach.
BicepPowerShellAVD
Repo overview →

ux-assess

Private Repo

Stratusphere UX Assessment & Deliverable Pipeline

Automates the end-to-end data engineering and reporting work of a Stratusphere UX engagement across physical PCs, Citrix, Omnissa Horizon, RDS, AVD, and Windows 365.

  • Collection & Health: Pulls business-hour sliced data from /lwl/api (or Inspector exports) and verifies active collection coverage against expected inventory.
  • Normalization & Privacy: Maps Hub columns into five canonical tables and applies deterministic keyed HMAC-SHA256 pseudonymization so before/after migration baselines align without exposing PII.
  • Multi-Format Deliverables: Scores platform-aware SpotCheck thresholds, classifies apps for Base Image vs. FlexApp, and renders .xlsx, .pdf, .pptx, and a Git-backed Power BI Project (.pbip TMDL/PBIR).
PythonPowerShellPower BI PBIP
High-level overview →

flexapp-factory

Private Repo

Application Server Evaluator & Unattended Packaging Factory

Inspects legacy application servers, joins usage telemetry, and orchestrates deterministic, unattended Liquidware FlexApp packaging and validation pipelines.

  • Server Evaluation & Dependency DAG: Inspects registry uninstall keys, MSI tables, services, kernel drivers (.sys), COM classes, and ODBC DSNs; joins ux-assess usage data; classifies apps into 3 tiers and groups composite recipes.
  • 4-Step Installer Sourcing Cascade: Resolves media across customer shares, curated recipes + Winget/Evergreen, full-CAB cached MSIs, or emits a Missing Media Checklist.
  • Unattended Capture & Smoke Testing: Converts .appv, .msix, .intunewin, and PSADT bundles into a deterministic build-queue.json, drives Single-VM CLI or Batch FPA REST APIs, and emits validated liquidware-ninja-flexapp-package/v1 manifests.
PythonPowerShellFlexApp FPA
High-level overview →

Four Products, Six Desktop Platforms

The knowledge base and toolkit cover all four Liquidware products across physical Windows PCs, Citrix CVAD/DaaS, Omnissa Horizon, Windows Server RDS, Azure Virtual Desktop, and Windows 365:

ProductRole in the EstateKey Guardrail in This ToolkitKnowledge Base
Stratusphere UXHistorical UX telemetry, SpotCheck diagnostics, right-sizing, and before/after migration baseliningAlways slice by active business hours (08:00–18:00) and evaluate p95 alongside means; pseudonymize before exportAPI · SpotCheck · CID Key
ProfileUnityUser environment management (UEM), contextual policy, privilege elevation, and cross-OS Profile PortabilityFSLogix owns the primary VHDX container; Portability never captures FSLogix-owned paths (Test-LwPortabilityOverlap)Architecture & Portability · AVD & FSLogix
FlexAppElastic VHDX/CimFS application layering delivered natively, via AVD App Attach, or offline via FlexApp OneEnforce the Single Assignment System Rule (Get-LwAssignmentConflict)—never assign an app in both App Attach and ProfileUnityPackaging & Delivery
CommandCTRLSaaS real-time helpdesk diagnostics, live process/protocol triage, and remote remediationRequire user consent, disable history where Stratusphere collects, and restrict remote shell on multi-session hosts (Test-LwCommandCtrlBaseline)CommandCTRL Overview

The Broader avd-ops & EUC Ecosystem

The Liquidware repositories plug into avd-ops, the open toolkit for Azure Virtual Desktop. Each repository in the family stays self-contained and communicates through versioned, redacted contracts:

Front door · avd-ops.devavd-opsThe overview, onboarding docs, standards library, and shared design system for the AVD family. Foundation · How we build itavd-landing-zoneEntra ID-joined, Intune-managed, private-by-default AVD landing zone in Bicep + browser deployment portal. Foundation · What it isavd-current-stateRead-only offline PowerShell collector and validator for live Azure Virtual Desktop estates. Foundation · What it should beavd-assessAssessment methodology, standards library, and target-state design contracts linked to published sources. On top · Lifecycle memoryavd-second-brainFamily knowledge base, contract schemas (C9–C21), and reasoning across an estate's lifecycle. On top · Approved automationavd-swarmAgents that read freely and execute changes only through human-approved plans with a kill switch. Control plane · Identityavd-entraEntra ID identity, dynamic groups, Kerberos trust, and Conditional Access for AVD. Control plane · Endpointsavd-intuneIntune session-host enrollment, Settings Catalog baselines, and Win32 app delivery. Control plane · Productivityavd-m365Greenfield Microsoft 365 Apps, OneDrive Known Folder Move, and Teams VDI optimization. Control plane · Infrastructureavd-azureCore Azure ARM and Bicep infrastructure patterns, networking, and storage. Control plane · Workflowsavd-power-platformPower Platform and Power Automate day-2 operational workflows for AVD. Sibling KB · Terraform & Packernerdio-hclHashiCorp Terraform and Packer deployment kit for Nerdio Manager for Enterprise on AVD.

Quick Start in Azure Cloud Shell

Clone liquidware-ninja in Azure Cloud Shell (or locally in PowerShell 7+) to run the offline guardrail functions or query the knowledge base:

if (-not (Test-Path ~/liquidware-ninja)) { git clone https://github.com/nickprignano/liquidware-ninja.git ~/liquidware-ninja }
Set-Location ~/liquidware-ninja; git checkout -q main; git pull -q --ff-only
Import-Module ./scripts/tools/LiquidwareNinja.psm1 -Force
Get-LwSpotCheckThreshold
Test-LwPortabilityOverlap -PortabilityPath @('%APPDATA%\Notepad++', '%LOCALAPPDATA%\Contoso\App') -EnabledModule @('Portability')

Guardrails & Contributing

  • Zero Tenant or Customer DataNothing in any public repo identifies a real tenant, subscription, employer, or customer. Examples use contoso.com, 10.60.x.x, and all-zero GUIDs.
  • No Vendor Binaries or LicensesBring your own Liquidware licenses and download appliances or installers from your own Hub or Azure Marketplace.
  • Evidence & Guards FirstEvery rule in the knowledge base traces to a primary source or lab run, and every PowerShell utility is backed by offline Pester tests.
  • Open Knowledge BaseContributions, forks, and field reports on the public repos are welcome under the MIT License.

liquidware-ninja on GitHub avd-liquidware on GitHub View Knowledge Graph llms.txt