toga-ai 1.0.369 → 1.0.370

package/knowledge/clients/rate/INDEX.md

@@ -8,5 +8,5 @@
 | [Rate SAML SSO](features/saml-sso.md) | 2.0 | Rate uses Azure AD as its IdP (`login.rate.com`). | _underscore/Model/Rate/ClientAuthentication.php, saml/Controller/Index.php, toga2-view/src/hooks/useAuthenticationFlow.ts |
 | [Service Card Entitlement Display](features/service-card-entitlements.md) | 2.0 | Rate's home and services pages display one service card per purchased entitlement. | src/components/ServiceCard/ServiceCard.tsx, src/components/ServiceCard/index.ts, src/hooks/useBundleServices.ts, src/pages/Home/api/homeApi.ts, src/pages/Home/view/HomePage.tsx, src/pages/Home/viewModels/useHomePageViewModel.ts, src/pages/Services/view/ServicesPage.tsx, src/pages/Services/viewModels/useServicePageViewModel.ts |
 | [Rate Service-Purchase Confirmation Emails (Tech / Warranty)](features/service-purchase-emails.md) | 2.0 | When a Rate customer purchases a service, a confirmation email is sent. | _underscore/Model/Rate/Entitlement.php, worker2/Worker/Notification/EmailTemplate.php, dbchanges2/Client_Rate/2026-06-30a - Rate purchase email templates.sql |
-| [Rate Whole Home Warranty Per-Address Purchase Guard](features/whole-home-warranty-purchase-guard.md) | 2.0 | > **⚠ NOT IN PRODUCTION (as of 2026-07-17).** TRUE-79533 is **not** merged to `_production`. | _underscore/Model/Rate/Entitlement.php, _underscore/Model/Client/Address.php, dbchanges2/Client_Rate/2026-07-07a - WholeHomeWarrantyPerAddressGuard.sql, test/@Mark/Rate/verify_wholehome_per_address_guard.php |
+| [Rate Whole Home Warranty Per-Address Purchase Guard](features/whole-home-warranty-purchase-guard.md) | 2.0 | > **⚠ BETA-VERIFIED, NOT IN PRODUCTION (as of 2026-07-17).** TRUE-79533 is now merged to > `_beta` (both `_underscore` and `dbchanges2`), applied to the beta `C | _underscore/Model/Rate/Entitlement.php, _underscore/Model/Client/Address.php, dbchanges2/Client_Rate/2026-07-07a - WholeHomeWarrantyPerAddressGuard.sql, test/@Mark/Rate/verify_wholehome_per_address_guard.php |
 | [Rate](profile.md) | 2.0 | Rate is a mortgage/lending client. |  |

package/knowledge/clients/rate/features/whole-home-warranty-purchase-guard.md

@@ -19,12 +19,14 @@ related:
   - ../../../2.0/apps/_underscore/features/address-validation.md
 ---
 
-> **⚠ NOT IN PRODUCTION (as of 2026-07-17).** TRUE-79533 is **not** merged to `_production`.
-> Its `_underscore` + `dbchanges2` PRs are still OPEN / "BACK-END REVIEW" (git-verified: commit
-> `be5002f4` is contained only in branches `TRUE-79533` and `_beta`, never `_production`). An
-> earlier belief that it "shipped weeks ago" is incorrect — TRUE-79251 (purchase emails) shipped,
-> this guard did not. The branch is being caught up to `_production` now. See the
-> **shared-interceptor merge hazard** gotcha below before merging.
+> **⚠ BETA-VERIFIED, NOT IN PRODUCTION (as of 2026-07-17).** TRUE-79533 is now merged to
+> `_beta` (both `_underscore` and `dbchanges2`), applied to the beta `Client_Rate` DB, deployed,
+> and **PM Paulina successfully tested the Whole Home Warranty purchase flow on beta — it works.**
+> It is still **not** merged to `_production`: the `_underscore` + `dbchanges2` `TRUE-79533` PRs to
+> `_production` remain the open path, and the deliberate production promotion is the only remaining
+> step. An earlier belief that it "shipped weeks ago" is incorrect — TRUE-79251 (purchase emails)
+> shipped, this guard did not. See the **shared-interceptor merge hazard** gotcha below and the
+> **beta unblock procedure** note before merging to `_production`.
 
 ## Summary
 
@@ -164,6 +166,17 @@ live carrier waterfall is opt-in via `RUN_LIVE=1` (defaults off). Verified **18/
     two failures (undefined class constant, EV-8 regression) are runtime, not syntax. Verify with
     `test/@Mark/Rate/verify_wholehome_per_address_guard.php` (18/18 against `Client_Rate`,
     carrier calls off).
+- **Beta unblock procedure (how the broken `_beta` was fixed — 2026-07-17).** To repair the
+  partially-merged/broken `_beta` state (the mis-resolved `_production`→`_beta` merge above): merge
+  `TRUE-79533` → `_beta` resolving `Entitlement.php` by taking the TRUE-79533 version wholesale
+  (`git checkout TRUE-79533 -- Model/Rate/Entitlement.php`); do the same on `dbchanges2` to bring
+  the `2026-07-07a` migration onto `_beta`; apply that migration to the beta `Client_Rate` schema
+  (its **step-4 `ApiPayloadInterceptors` PRE/POST row** is the load-bearing part that makes
+  `prePost` fire — the `POST/POST → postPost` row already existed on beta); then redeploy the beta
+  env (api2 beta pulls `_underscore` at deploy). Note the `git checkout <branch> -- <file>`
+  wholesale-take shortcut is only safe here because the *other* interceptor concerns (TRUE-79251
+  passThrough / EV-8) already live on `TRUE-79533`; a straight `_production` conflict still needs
+  the hand-merge described above.
 - **TOCTOU on the uniqueness check (accepted).** The check-then-persist dedup is **not**
   lock-guarded. Two truly concurrent same-address WH purchases could both pass. Accepted for
   sequential purchases; documented in code.
@@ -180,6 +193,13 @@ live carrier waterfall is opt-in via `RUN_LIVE=1` (defaults off). Verified **18/
 
 ## Change history
 
+- 2026-07-17 — **Beta-verified** (TRUE-79533): corrected code merged to `_beta` (`_underscore` +
+  `dbchanges2`), `2026-07-07a` migration applied to the beta `Client_Rate` DB, beta redeployed, and
+  **PM Paulina successfully tested the WH purchase flow on beta.** Recorded the **beta unblock
+  procedure** (take the TRUE-79533 `Entitlement.php` wholesale via `git checkout`, apply the
+  migration whose step-4 PRE/POST interceptor row makes `prePost` fire, redeploy). Status remains
+  pre-production — the `_underscore` + `dbchanges2` PRs to `_production` are still the open path.
+  (mhammontree)
 - 2026-07-17 — **Status corrected to `draft` / not-in-production** (TRUE-79533): git-verified the
   guard was never merged to `_production` (PRs open / back-end review), contrary to a belief it had
   shipped. Documented the **shared-interceptor merge hazard** with TRUE-79251 and the correct

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.369",
+  "version": "1.0.370",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",