npm - toga-ai - Versions diffs - 1.0.1183 → 1.0.1185 - Mend

toga-ai 1.0.1183 → 1.0.1185

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (5) hide show

package/knowledge/1.0/apps/test/INDEX.md CHANGED Viewed

@@ -19,6 +19,6 @@
 | [TOGa 2.0 Client Onboarding Wizard (local tool)](features/toga2-onboarding-wizard.md) | Local browser wizard automating 2.0 client onboarding end-to-end (generates all onboarding SQL + consolidates dbchanges2 loose SQL); local-only, renders secrets |
 | [TOGa 2.0 User Cross-Client Access SQL Generator](features/toga2-user-cross-client-access-sql.md) | 1.0 App_ script generating SQL to grant an existing 2.0 user cross-client access (Users_Roles grants); open when granting a home-client user into another client |
 | [URL & Domain Markdown Document Builder](features/url-domain-markdown-document.md) | 1.0 App_ script building a markdown doc of our URLs/domains from the 2.0 API (/environments, /domains); open to regenerate the URL/domain reference. |
-| [Legacy 1.0 web apps in toga-prod — naming, environment setup, DNS cutover](workflows/legacy-1-0-web-apps-in-toga-prod.md) | Where the 1.0 web apps (store, togadesk, togaview, toga, walmart-activate) run since 2026-10-22 (toga-prod 654654170868; us-east-1, except TOGa Retail in us-wes |
+| [Legacy 1.0 web apps in toga-prod — naming, environment setup, DNS cutover](workflows/legacy-1-0-web-apps-in-toga-prod.md) | Where the 1.0 web apps (store, togadesk, togaview, toga, walmart-activate) run since 2026-10-22 (toga-prod 654654170868; us-east-1, except TOGa Retail and TOGa |
 | [Responding to a PHP Security Release on Elastic Beanstalk (2.0 platform update, legacy stopgap, WAF, exposure check)](workflows/responding-to-a-php-security-release.md) | Playbook for a critical PHP CVE across both AWS accounts: patch 2.0 by EB platform update, shield legacy PHP <= 8.1 envs (stopgap .ebextension, allowlist WAF, r |
 | [Finding and Retiring Unused Elastic Beanstalk Environments (legacy AWS account 502614707982)](workflows/retiring-unused-legacy-elastic-beanstalk-environments.md) | Runbook to prove an EB env in legacy account 502614707982 (us-west-2) is unused (DNS in two accounts + external, shared-ALB rules, CodePipeline) and tear it dow |

package/knowledge/1.0/apps/test/workflows/legacy-1-0-web-apps-in-toga-prod.md CHANGED Viewed

@@ -32,32 +32,38 @@ related:
   - ../../api/workflows/deploy-to-elastic-beanstalk-al2023.md
 ---
-Where the 1.0 web apps (store, togadesk, togaview, toga, walmart-activate) run since 2026-10-22 (toga-prod 654654170868; us-east-1, except TOGa Retail in us-west-2 since 2026-10-28), their env/pipeline names and settings, the TOGa Retail sandbox (nonprod), how a domain is cut over with "1" test names, how an env moves region, and how each app maps host → client; open before any 1.0 web-app deploy, DNS, cert, region, or domain change.
+Where the 1.0 web apps (store, togadesk, togaview, toga, walmart-activate) run since 2026-10-22 (toga-prod 654654170868; us-east-1, except TOGa Retail and TOGa Desk in us-west-2 since 2026-10-28), their env/pipeline names and settings, the TOGa Retail sandbox (nonprod), how a domain is cut over with "1" test names, how an env moves region, and how each app maps host → client; open before any 1.0 web-app deploy, DNS, cert, region, or domain change.
 ## Summary
 On 2026-10-22 (TRUE-83055) the five legacy 1.0 web apps moved from legacy account 502614707982 (us-west-2) to toga-prod 654654170868 (us-east-1), each on **one** PHP 8.5 / AL2023 environment. Each new env replaced 2–3 legacy envs (store 3, togadesk 3, togaview 2, toga 3: agilant/odp/chat) — same code, same `ENVIRONMENT=prod`; traffic was small (store ~65k requests in 14 days). All legacy prod envs and pipelines for these apps are gone. The 1.0 `worker` still runs in the legacy account (`agilant-worker`).
-The 1.0 databases (`prod-cluster` / `prod-writer`, account 502614707982) stay in **us-west-2**, so a us-east-1 env pays cross-region latency on every query. On 2026-10-28 (TRUE-83361) TOGa Retail moved to toga-prod **us-west-2**, same names: pages ~0.3s vs 0.6–1.5s before. Its us-east-1 env, pipeline and EB app are deleted. The other four are still in us-east-1 (TOGa Desk move is TRUE-83360).
+The 1.0 databases (`prod-cluster` / `prod-writer`, account 502614707982) stay in **us-west-2**, so a us-east-1 env pays cross-region latency on every query. On 2026-10-28 two apps moved to toga-prod **us-west-2**, same names: TOGa Retail (TRUE-83361, pages ~0.3s vs 0.6–1.5s) and TOGa Desk (TRUE-83360, pages ~0.3s vs ~1.7s). Their us-east-1 envs and pipelines are gone. store, TOGa View and Walmart are still in us-east-1. Rule: a 1.0 app runs in the same region as its databases.
 | EB application | EB environment | CodePipeline | Region |
 |---|---|---|---|
 | `store` | `togatech-legacy-store-production` | `Legacy-Store-Production` | us-east-1 |
-| `TOGa Desk` | `togatech-legacy-togadesk-production` | `Legacy-TOGaDesk-Production` | us-east-1 |
+| `TOGa Desk` | `togatech-legacy-togadesk-production` | `Legacy-TOGaDesk-Production` | **us-west-2** |
 | `TOGa View` | `togatech-legacy-togaview-production` | `Legacy-TOGaView-Production` | us-east-1 |
 | `TOGa Retail` (repo `toga`) | `togatech-legacy-togaretail-production` | `Legacy-TOGaRetail-Production` | **us-west-2** |
 | `Walmart` (repo `walmart-activate`) | `togatech-legacy-walmart-production` | `Legacy-Walmart-Production` | us-east-1 |
 Pipelines: source GitHub `agilantsolutions/<repo>` branch `_production` → **Approval** → Deploy. A merge does not deploy until someone approves. Artifact bucket: `true-elasticbeanstalk-deployments-1` (us-east-1) / `-2` (us-west-2). The us-east-1 CodeConnection "Agilant Solutions GitHub" works from a us-west-2 pipeline.
-### TOGa Retail prod in us-west-2
+### us-west-2 prod (TOGa Retail, TOGa Desk)
-- 2 x `t4g.large` arm64, PHP 8.5 AL2023 platform 4.13.13, `ENVIRONMENT=prod`.
+Shared by both:
+- PHP 8.5 AL2023 platform 4.13.13, `t4g.large` arm64, `ENVIRONMENT=prod`, own public ALB per env.
 - VPC `true-production-vpc-2` (`vpc-0a447bf81a34396e1`, 10.202.0.0/16): ALB in `true-production-public-web-2a/2b/2c`, instances in `true-production-private-web-2a/2b/2c`. The VPC routes legacy DB network 172.30.0.0/16 through transit gateway `tgw-00a1af4e86e4b4c43`; legacy DB SG `sg-b900a8c3` already allows 3306.
-- HTTPS 443, policy `ELBSecurityPolicy-TLS-1-2-Ext-2018-06`. Default cert `agilantsolutions.com` (also `*.togatech.com`, `*.togatechnology.com`, `*.goagilant.com`, …); SNI: `togahub.com` / `*.togahub.com`, and `*.toga.agilantsolutions.com` / `*.toga.togatechnology.com`.
-- Sessions: `SESSION_REDIS_SAVE_PATH` → the **us-west-2** `togadesk-sessions` cluster (`togadesk-sessions.vniulb.0001.usw2.cache.amazonaws.com`, SG `togadesk-session-redis` `sg-05190dc12fc67c9d3`). The env's instance SG must be allowed on 6379 there. Session rules: [tools deploy § Redis sessions](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md).
-- DNS (EB alias zone us-west-2 `Z38NKT9BP95V3O`): toga-prod `toga.togatech.com`, `odp.toga.togatechnology.com` (A alias), `chat.togahub.com` (CNAME, TTL 300); legacy `agilantsolutions.com` zone: `odp-toga`, `odp.toga`, `staples.toga`, `synnex.toga` (A alias). ODP hosts 302 to the Azure SAML login.
+- HTTPS 443, policy `ELBSecurityPolicy-TLS-1-2-Ext-2018-06`. Default cert `agilantsolutions.com` (also `*.togatech.com`, `*.togatechnology.com`, `*.goagilant.com`, `*.devteam.togatech.com`, `*.agent.agilantsolutions.com`, …); extra certs by SNI per app (below).
+- Sessions: `SESSION_REDIS_SAVE_PATH` → the **us-west-2** `togadesk-sessions` cluster (`togadesk-sessions.vniulb.0001.usw2.cache.amazonaws.com`, `cache.t4g.micro` redis 7.1, SG `togadesk-session-redis` `sg-05190dc12fc67c9d3`). Each env's instance SG must be allowed on 6379 there (today: Retail + Desk). Session rules: [tools deploy § Redis sessions](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md).
+- DNS: EB alias zone us-west-2 `Z38NKT9BP95V3O`.
 - `ebs/register_instance_to_shared_application_load_balancer.php` hardcodes us-west-2 but skips any env name containing `-prod` — it does nothing here.
+- The 2.0 DBs (`writer.core` / `writer.client.database.togahub.com`, us-east-1, 10.201.x) are now cross-region for these apps — a small part of their traffic.
+TOGa Retail: 2 instances. SNI: `togahub.com` / `*.togahub.com`, `*.toga.agilantsolutions.com` / `*.toga.togatechnology.com`. DNS: toga-prod `toga.togatech.com`, `odp.toga.togatechnology.com` (A alias), `chat.togahub.com` (CNAME, TTL 300); legacy `agilantsolutions.com` zone: `odp-toga`, `odp.toga`, `staples.toga`, `synnex.toga` (A alias). ODP hosts 302 to the Azure SAML login.
+TOGa Desk: 3 instances. SNI: `*.togadesk.togatechnology.com`; `*.agilantsolutions.com` + `*.togadesk.com` / `*.togadesk.togatech.com` / `*.togadesk.agilantsolutions.com` / `*.togaview.*` / `*.togapay.*`; `togadesk.com` + `*.togadesk.com`. DNS (7): `togadesk.togatech.com`, `rumcsi.togadesk.togatech.com`; `fordham.togadesk.com`, `imhouston.togadesk.com` (CNAME); legacy `agilantsolutions.com` zone: `odp.togadesk.agilantsolutions.com`, `rumcsi.togadesk.agilantsolutions.com`; plus `odp.togadesk.togatechnology.com`. Deploy details: [Desk deploy](../../togadesk/workflows/deploy-to-elastic-beanstalk-al2023.md).
 ### Non-prod: TOGa Retail sandbox (ODP, TRUE-83279)
@@ -92,7 +98,7 @@ ODP calls it "sandbox"; internally it **is beta** (replaces the old shared `agil
 ### Move an env to another region (same names)
-Done for TOGa Retail us-east-1 → us-west-2 (TRUE-83361). EB app/env/pipeline names are per region, so the new region reuses them.
+Done for TOGa Retail (TRUE-83361) and TOGa Desk (TRUE-83360), us-east-1 → us-west-2. EB app/env/pipeline names are per region, so the new region reuses them. New region = new Redis, so every user is logged out once.
 1. Create the env in the new region (steps above) on the target VPC; check it reaches the DB network and the DB SG allows 3306.
 2. Request ACM certs in the new region. If the DNS validation CNAMEs already exist in the same account, they issue in minutes (validation records are per account + domain, shared across regions).
@@ -100,9 +106,10 @@ Done for TOGa Retail us-east-1 → us-west-2 (TRUE-83361). EB app/env/pipeline n
 4. Create the pipeline in the new region with that region's artifact bucket.
 5. Test each host against the new env CNAME (`curl --resolve` or Host header): same status and page size as the old env.
 6. UPSERT every DNS record (both accounts) to the new env's alias zone.
-7. Save the old env config to a file (EB saved configs die with the EB app — see Gotchas).
-8. Remove the old env's instance SG from the old-region Redis SG ingress (us-east-1 `sg-03e79bcb9c105e100`).
-9. Delete the old pipeline, terminate the old env, delete the old EB app.
+7. Wait until the old ALB `RequestCount` is 0 (staff browsers keep old keep-alive connections ~10 min after the DNS change).
+8. Save the old env config to a file (EB saved configs die with the EB app — see Gotchas).
+9. Remove only the old env's instance SG rule from the old-region Redis SG ingress (us-east-1 `sg-03e79bcb9c105e100`). Never delete the us-east-1 `togadesk-sessions` cluster — Vision, View, Store, Walmart and Tools still use it (TRUE-83179).
+10. Delete the old pipeline, terminate the old env, delete the old EB app.
 ### Where DNS lives
@@ -134,6 +141,7 @@ SAML ACS URLs are hard-coded (store: `prudential.togahub.com/?acs`, then redirec
 - **Old env names in other docs are history.** `prudential-store-prod`, `true-togacommerce-prod`, `spglobal-store-prod`, `*-togadesk-prod` and pipeline `Store-Production` no longer exist.
 ## Change history
+- 2026-10-28 — TOGa Desk prod moved to us-west-2 (3 x t4g.large, 4 certs, 7 DNS records), wait-for-drain step, keep us-east-1 Redis (TRUE-83360) (rgirish)
 - 2026-10-28 — TOGa Retail prod moved to us-west-2 (next to the 1.0 DBs), region-move steps, EB app/SG/cert gotchas (TRUE-83361) (rgirish)
 - 2026-10-27 — TOGa Retail sandbox for ODP (= beta internally), `-sandbox` host strip, nonprod S3 grants, `_beta` drift (TRUE-83279) (rgirish)
 - 2026-10-22 — Created: 5 legacy 1.0 web apps moved to toga-prod us-east-1, naming, env settings, "1"-host cutover, host → client lookup (TRUE-83055) (rgirish)

package/knowledge/1.0/apps/togadesk/workflows/deploy-to-elastic-beanstalk-al2023.md CHANGED Viewed

@@ -6,7 +6,7 @@ project: TOGa Desk
 client: shared
 type: workflow
 status: active
-updated: 2026-10-24
+updated: 2026-10-28
 owners: ["rgirish", "jcardinal"]
 files:
   - togadesk/.ebextensions/000_al2023_platform.config
@@ -28,13 +28,14 @@ related:
   - ../../togaview/workflows/deploy-to-elastic-beanstalk-al2023.md
   - ../../library/features/php-8-5-runtime-compatibility.md
   - ../../library/features/error-capture-1-0.md
+  - ../../test/workflows/legacy-1-0-web-apps-in-toga-prod.md
 ---
 How TOGa Desk 1.0 deploys and boots on EB PHP 8.5 / AL2023 — deploy file layout, blue/green rollout, own Redis sessions, PHP 8 shims (offset-on-false, Medoo), error visibility, debug path; open before touching togadesk `.ebextensions`/`.platform`/`ebs` or deploying Desk.
 ## Summary
-Desk moved from AL1 / PHP 7.2 to EB "PHP 8.5 running on 64bit Amazon Linux 2023/4.13.13" on TRUE-83053 (library side TRUE-83055 / TRUE-83059). First env: `togatech-legacy-togadesk-production`, account 654654170868 / us-east-1, host `togadesk1.togatech.com`. Shared AL2023 rules (ini via cfn-init `files:`, `ini_set()` for sessions, PECL redis install, fpm overrides `/etc/php.d`, clone fails the deploy) live in the [Tools deploy doc](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md); togaview's sibling is the [TOGa View deploy doc](../../togaview/workflows/deploy-to-elastic-beanstalk-al2023.md). This doc holds what differs for Desk.
+Desk moved from AL1 / PHP 7.2 to EB "PHP 8.5 running on 64bit Amazon Linux 2023/4.13.13" on TRUE-83053 (library side TRUE-83055 / TRUE-83059). Env `togatech-legacy-togadesk-production`, account 654654170868, **us-west-2** since 2026-10-28 (TRUE-83360; was us-east-1 — cross-region to the 1.0 DBs made pages ~1.7s, now ~0.3s). Env, certs, DNS, pipeline: [legacy 1.0 web apps § us-west-2 prod](../../test/workflows/legacy-1-0-web-apps-in-toga-prod.md). Shared AL2023 rules (ini via cfn-init `files:`, `ini_set()` for sessions, PECL redis install, fpm overrides `/etc/php.d`, clone fails the deploy) live in the [Tools deploy doc](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md); togaview's sibling is the [TOGa View deploy doc](../../togaview/workflows/deploy-to-elastic-beanstalk-al2023.md). This doc holds what differs for Desk.
 ## Steps
@@ -59,7 +60,7 @@ Desk moved from AL1 / PHP 7.2 to EB "PHP 8.5 running on 64bit Amazon Linux 2023/
 ### Sessions — Desk's own Redis (not 2.0 infra)
 Desk does not use the 2.0 Logs DB.
-- ElastiCache `togadesk-sessions` (redis 7.1, `cache.t4g.micro`, 654654170868 / us-east-1) is now the shared session store for all 1.0 apps (`asi-session-cache` decommissioned, TRUE-83179). SG `togadesk-session-redis` allows 6379 from each app's EB instance SG. Rules: [Tools deploy doc § Redis sessions](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md#redis-sessions-survive-deploys--load-balancing).
+- ElastiCache `togadesk-sessions` (redis 7.1, `cache.t4g.micro`, 654654170868) exists in **both** regions under the same name, SG `togadesk-session-redis` (6379 from each app's EB instance SG). Desk uses the **us-west-2** one (shared with TOGa Retail). The us-east-1 one is the session store for Vision, View, Store, Walmart, Tools (`asi-session-cache` decommissioned, TRUE-83179) — never delete it. Rules: [Tools deploy doc § Redis sessions](../../tools/workflows/deploy-to-elastic-beanstalk-al2023.md#redis-sessions-survive-deploys--load-balancing).
 - EB env property `SESSION_REDIS_SAVE_PATH=tcp://<endpoint>:6379`.
 - `App_Framework_TOGaDesk::startSession()` runs before `parent::initialize()` with `useSessions=false`: handler `redis` for `tcp://`, `rediscluster` for `seed[]=`, set with `ini_set()`. On failure it logs and falls back to file sessions.
@@ -85,5 +86,6 @@ App_Error shows the red box but sends the message only to Sentry / Logs DB ([err
 - **Debug path that worked:** EB request-environment-info bundle → `/var/log/messages` + httpd `access_log` time buckets (500s began at the first live deploy). SSM needs `AmazonSSMManagedInstanceCore` on role `ElasticBeanstalk-EC2-Instance-Profile` (654654170868, shared role — now attached).
 ## Change history
+- 2026-10-28 — Prod moved to us-west-2 next to the 1.0 DBs; Desk now on us-west-2 Redis (TRUE-83360) (rgirish)
 - 2026-10-22 — sentry 4.34 / guzzle 7.16 in root lock for the 8.5 `curl_close` 500 (TRUE-83055) (rgirish)
 - 2026-10-22 — Created: Desk moved to PHP 8.5 / AL2023 (layout, own Redis sessions, offset + Medoo shims, syslog error visibility) (TRUE-83053) (rgirish)

package/knowledge/2.0/apps/worker2/features/committed-secrets-and-config-debt.md CHANGED Viewed

@@ -6,8 +6,8 @@ project: Worker
 client: shared
 type: feature
 status: active
-updated: 2026-10-22
-owners: ["kyalamarthi", "ajean", "mhammontree", "jcardinal", "bala"]
+updated: 2026-10-28
+owners: ["kyalamarthi", "ajean", "mhammontree", "jcardinal", "bala", "amadda"]
 files:
   - worker2/.gitignore
   - worker2/Worker/Team/Github.php
@@ -16,6 +16,8 @@ files:
   - worker2/Config/netsuite_ec_key.pem
   - worker2/Worker/Team/Sprint.php
   - worker2/.platform/php/conf.d/00-log-errors.ini
+  - api2/.platform/php/conf.d/00-exception-ignore-args.ini
+  - worker2/Controller/Index.php
 related:
   - ../workflows/clickup-credential-rotation.md
   - ./automated-pr-merger-force-push-race.md
@@ -56,11 +58,19 @@ the publish on a credential literal.
 | Exposure | Location | Status |
 |---|---|---|
-| Stack traces include function arguments (first 15 chars of each string) | worker2 stores failed-job traces in `Core.WorkerJobs`; `.platform/php/conf.d/00-log-errors.ini` does **not** set `zend.exception_ignore_args = On` | **DevOps option, not done (Mark: devops decision).** Turning it on strips arguments from every trace. Known leak: phpseclib `login()` frames carry the password — NYCDOE `Sftp/Import` `connect()` works around it by not chaining the exception. |
 | NYCDOE vendor FTP passwords | `Core.WorkerJobs.parameters` of old 1.0 `Utilities/Sftp/DeleteFile/DeleteSftpFile` jobs (1.0 sent the password in the job; source = `FTP_*` constants in `library/app/asnprocessor/*.php`) | **Open — separate ticket: rotate.** See [NYCDOE ServiceNow / ASN Integration](../../../../clients/nycdoe/features/servicenow-integration.md). |
 ### Fixed / no longer true
+- **Argument values in stack traces** (2026-10-28, TRUE-83206) — `zend.exception_ignore_args = On`
+  is now pinned in repo config: worker2 `.platform/php/conf.d/00-log-errors.ini`, api2
+  `.platform/php/conf.d/00-exception-ignore-args.ini` (own file, one line, so api2 error logging is
+  unchanged). worker2 prod was already On via the server default; the pin stops drift. Needed
+  because worker2 `Controller/Index.php` writes `getTraceAsString()` into `Core.WorkerJobs.output`
+  and Sentry gets raw traces (`_Error::buildSafeTrace()` only covers `Logs.Issue`). No code in
+  api2, worker2 or `_underscore` reads trace `['args']`. Other PHP repos (tools, worker, togadesk,
+  toga2-commerce, …) are not covered — possible follow-up ticket.
 - **AWS `[cloud]` static access key** (2026-10-12, TRUE-82705) — key deleted in IAM and removed from
   every `Config/*.ini` (plus the dead `[teams]` `s3_*` keys). AWS access is the instance role assuming
   `WorkloadsRuntime` — see [cross-account AWS access](./cross-account-aws-access.md). Still in git
@@ -86,6 +96,11 @@ the publish on a credential literal.
 - **Any credential that has ever been committed must be rotated**, not just deleted. Deleting the
   line leaves it in history and in every branch that still carries it (166 of 167, for the GitHub
   token).
+- **`zend.exception_ignore_args` drops every argument value, nothing else.** Message, file, line,
+  and function/class names stay. It does not clean the exception **message** — never put a secret
+  in a message.
+- **`.platform/php/conf.d/*.ini` is read only by Elastic Beanstalk on deploy.** Local PHP uses its
+  own `php.ini` (setting stays off locally — fine for debugging). Do not test it locally.
 - **Keep this table current.** Add an entry whenever a committed credential is found, and move it to
   *Fixed* when it is rotated and relocated, so this stays the one place the team looks.
@@ -98,6 +113,7 @@ the publish on a credential literal.
 - [Rate PayPal Subscription Purchase & Webhook Pipeline](../../../../clients/rate/features/paypal-subscription-purchase-webhook.md)
 ## Change history
+- 2026-10-28 — Trace arguments moved to Fixed: `zend.exception_ignore_args = On` pinned in worker2 + api2 `.platform` ini (TRUE-83206). (amadda)
 - 2026-10-22 — Added the hardcoded Elite API secret in `Worker/Elite.php` (TRUE-82919). (jcardinal)
 - 2026-10-19 — Added the shared SFTP server passwords: Compass `PeopleFile.php` (worker2) and the 1.0 NYCDOE/Staples copies (TRUE-82898). (bala)
 - 2026-10-12 — Moved the `[cloud]` AWS key to Fixed (deleted, TRUE-82705); listed the `[talos]` AWS key as still open (jcardinal)

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.1183",
+  "version": "1.0.1185",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",