toga-ai 1.0.200 → 1.0.201

package/knowledge/1.0/apps/worker/features/forecast2-netsuite-reconciliation.md

@@ -68,6 +68,12 @@ by reconciling a chosen tranDate range directly against NetSuite.
     still go to stderr.
   - **`--verbose`** was trimmed — removed per-line MATCH/EXCLUDE/NOOP and the always-on per-SO summary;
     the per-SO header now prints lazily, once, only when the order has an INSERT/UPDATE/DELETE.
+  - **Step 4 per-statement SQL audit (added 2026-06-25).** The Step 4 results block now lists, one line
+    per statement, `<NetSuite SO internal id>  <SQL>` — the exact statement that **was run** (live) or
+    **would be run** (`--dry-run`), so you can audit a dry-run before applying or trace an unexpected
+    insert/update/delete back to its source order. Previously `emit()` executed-or-counted each write but
+    discarded the SQL string, leaving only aggregate counts. The listing inherits the existing `--quiet`
+    gating (prints only on a changed pass) and the `--dry-run` header wording ("would run" vs "applied").
 - `loop_trueup_open_orders.php [--prod] [--dry-run] [--verbose] [--quiet] [--sleep=N] [--days-back=N]`
   — continuous runner that recomputes a rolling `[today−N .. today]` window each pass and re-invokes
   `trueup_open_orders.php --by-lastmodified` until Ctrl-C. Uses `PHP_BINARY` + `passthru` with
@@ -113,6 +119,18 @@ by reconciling a chosen tranDate range directly against NetSuite.
   **classify a drift set as whole-missing vs. present-but-different**, and to scope a
   `Logs.Webhook`/`WorkerJobs` search window from the lastmodified timestamps.
 
+- **`trueup_open_orders` SQL-audit collector.** A global `$sqlLog` (alongside `$opCount`) collects
+  `['soid'=>.., 'sql'=>..]` for every write **in both live and dry-run modes**; `emit($sql, $db, $soId=null)`
+  records first, then executes only when not `--dry-run`. Every main-loop `emit()` passes the in-scope
+  NetSuite SO internal id (`$nsSoId`) — closed-order DELETE, both Classifications INSERT/UPDATE, the
+  OpenOrderItems UPDATE/INSERT, and the per-order DELETE flush. The Step 3b stale-cleanup DELETE is batched
+  by local row id across many SOs, so it keeps the default null `$soId` and is labelled `stale` (the full
+  stale SO id set is printed once above the listing). Each statement is whitespace-collapsed
+  (`preg_replace('/\s+/', ' ', trim(...))`) so multi-line built SQL renders on one line, and the listing is
+  appended to the existing `$resultLines` array (inheriting `--quiet` gating + `--dry-run` wording). Memory
+  stays bounded under the existing 1G `memory_limit`. (This corrected a prior docblock claim that `$sqls`
+  was never accumulated globally.)
+
 ## Data model
 
 `Forecast.Sales`, `Forecast.OpenOrderItems` on the **core2** cluster
@@ -253,6 +271,14 @@ None — Forecast2 is a single shared dataset.
 
 ## Change history
 
+- 2026-06-25 — **`trueup_open_orders` Step 4 now lists the exact per-statement SQL** (`<NS SO id>  <SQL>`,
+  one line per statement) for both live and `--dry-run` passes, so a dry-run is auditable and any
+  unexpected insert/update/delete is traceable to its source order. Implemented via a global `$sqlLog`
+  collector + `emit($sql,$db,$soId)` (records always, executes only when not dry-run); each main-loop emit
+  passes `$nsSoId`, and the batched Step 3b stale-cleanup DELETE is labelled `stale`. Inherits existing
+  `--quiet` gating and `--dry-run` wording; whitespace-collapsed to one line per statement. Corrects the
+  prior "`$sqls` never accumulated globally" docblock. `php -l` clean (PHP 7.2); not executed live/dry-run
+  this session. (dfranks)
 - 2026-06-25 — **`trueup_open_orders` gained `--by-lastmodified` / `--quiet` / leaner `--verbose`; added
   `loop_trueup_open_orders.php` as the stopgap for the real-time billed-order removal gap.**
   `--by-lastmodified` windows both Step 1 and Step 3b on `lastmodifieddate` (ET TIMESTAMP bounds) and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.200",
+  "version": "1.0.201",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",