toga-ai 1.0.561 → 1.0.562

package/knowledge/1.0/apps/library/features/app-class-placement-base-contracts.md

@@ -17,7 +17,7 @@ files:
   - library/app/api/carrier/fedex.php
 related:
   - ../architecture.md
-  - ./service-request-toga2-provisioning.md
+  - ../../../clients/elite/features/togadesk-service-request-intake.md
 ---
 
 ## Summary

package/knowledge/1.0/apps/library/features/toga2-api-client-and-bridge.md

@@ -23,7 +23,7 @@ related:
   - ../../worker/features/netsuite-togasupply-per-client-sync.md
   - ../architecture.md
   - ./error-capture-1-0.md
-  - ./service-request-toga2-provisioning.md
+  - ../../../clients/elite/features/togadesk-service-request-intake.md
 ---
 
 ## Summary
@@ -91,7 +91,8 @@ belong to the NetSuite importer — documented in the per-client-sync doc, not h
 > `->data->{resource}` sees an empty result and concludes **"the record does not exist"** — which,
 > for a duplicate check or a contact lookup, is exactly the wrong conclusion (it creates a second
 > record). Check `empty($response->isSuccess)` *first*, and keep "unknown" distinct from "absent".
-> See [App_Api_ServiceRequest](./service-request-toga2-provisioning.md) for the three bugs this
+> See [Elite Service Request intake](../../../clients/elite/features/togadesk-service-request-intake.md)
+> for the bugs this
 > caused and the `?bool` tri-state fix.
 
 > **`authenticate()` is also 1.0's ambient-client choke point for error reporting** (added
@@ -391,7 +392,8 @@ enable flags** and an optional `$monitorTogadeskDepartmentIds[]`:
   returns — including GETs — and a `$throwOnError = false` failure must never be read as "the record
   does not exist". Also recorded that naming `fields` on `GET /states` **suppresses** the nested
   country a plain request returns. Surfaced building
-  [App_Api_ServiceRequest](./service-request-toga2-provisioning.md) (TRUE-80497). (snaredla)
+  [App_Api_ServiceRequest](../../../clients/elite/features/togadesk-service-request-intake.md)
+  (TRUE-80497). (snaredla)
 - 2026-08-10 — TRUE-79401 re-synced with `_production` (`c64164fe`, pushed); the sole conflict was a
   positional const-block collision, resolved by keeping both sides. Patch intact; deploy still
   unverified. `STARTECH_TOGADESK_CLIENTS` (credential registry, add a row per client onboard) is

package/knowledge/1.0/apps/togadesk/workflows/standalone-test-scripts.md

@@ -52,7 +52,7 @@ web stack. Example harness: `C:\WWW\test\@Mark\TOGaDeskSupport\test_derive_custo
   harness then tests everything *after* the permission gate — it does **not** test the gate itself,
   so a permission regression will pass. Hit while harnessing
   `Ticket::createEliteServiceRequest()` (see the
-  [Elite desk Service Request feature](../../../clients/elite/features/desk-service-request-creation.md)).
+  [Elite desk Service Request feature](../../../clients/elite/features/togadesk-service-request-intake.md)).
 - **Lint/run with the right PHP.** Desk + library code targets **7.2**, and the default CLI on a dev
   box is 8.x — see the
   [7.2 verification procedure](../../test/features/static-no-db-regression-harness.md).

package/knowledge/2.0/apps/api2/INDEX.md

@@ -3,7 +3,7 @@
 | Doc | Summary | Files |
 |-----|---------|-------|
 | [API (api2 / TOGa API v2) Architecture](architecture.md) | `api2` is the backend powering the public **TOGa 2.0 API**. | api2/Controller/Index.php, api2/Component/Api/V2/V2.php, api2/Component/Api/Cxml/Cxml.php, api2/Component/Api/V2/Response/Response.php, api2/Config/ |
-| [API Payload Interceptors (metadata-registered prePost/postPut model hooks)](features/api-payload-interceptors.md) | A `_Model`'s `prePost()` / `postPost()` / `prePut()` / `postPut()` hooks are **not** called by the model. | api2/Component/Api/V2/V2.php, api2/Controller/Index.php, _underscore/Model/Client/ItemFulfillment.php, _underscore/Model/Elite/SalesOrder.php, _underscore/Model/Compass/SalesOrder.php, _underscore/Model/Compass/SalesOrderItem.php, dbchanges2/Core/2026-06-30a - ItemFulfillmentStageDefaultInterceptor.sql |
+| [API Payload Interceptors (metadata-registered prePost/postPut model hooks)](features/api-payload-interceptors.md) | A `_Model`'s `prePost()` / `postPost()` / `prePut()` / `postPut()` hooks are **not** called by the model. | api2/Component/Api/V2/V2.php, api2/Controller/Index.php, _underscore/Model/Client/ItemFulfillment.php, _underscore/Model/Elite/SalesOrder.php, _underscore/Model/Elite/ServiceRequest.php, _underscore/Model/Compass/SalesOrder.php, _underscore/Model/Compass/SalesOrderItem.php, dbchanges2/Core/2026-06-30a - ItemFulfillmentStageDefaultInterceptor.sql, dbchanges2/Core/2026-08-06a - Service request and sales order payload interceptors.sql |
 | [Multi-Client (Cross-Client) Data Retrieval](features/cross-client-data-retrieval.md) | A single authenticated V2 GET listing can return records across **many** clients (designed for 1000+) that the caller is entitled to, honoring **each target cli | api2/Component/Api/CrossClient/CrossClient.php, api2/Component/Api/V2/V2.php, api2/Controller/Index.php, _underscore/Model/Cache/Table.php, _underscore/Model/Cache/Tables/Client.php, _underscore/Model/Core/Record.php, worker2/Worker/Platform/Cache.php, worker2/Controller/Index.php, worker2/_.php, dbchanges2/Cache/2026-06-30a - MultiClientCacheTables.sql, dbchanges2/Core/2026-06-30b - CacheClusterRegistrationAndRecordTtl.sql, dbchanges2/Core/2026-07-27a - PlatformCacheCleanCron.sql |
 | [Encrypted-User-UUID Auth Handoff (/auth/encrypted-user-uuid)](features/encrypted-user-uuid-auth-handoff.md) | `POST /auth/encrypted-user-uuid` is the intended **cross-client / SSO-handoff identity mechanism**: given an encrypted `{client, user}` UUID pair, it mints a fr | api2/Component/Api/CrossClient/CrossClient.php |
 | [ENVIRONMENT (not the EB environment name) decides the _underscore branch and Config file](features/environment-variable-drives-underscore-branch.md) | An api2 Elastic Beanstalk instance decides **which `_underscore` branch it clones** and **which `Config/<env>.ini` it loads** from the EB environment property * | api2/.ebextensions/git.php, api2/.ebextensions/php_include_underscore.config, api2/.ebextensions/git.sandbox-dev.json, api2/Config/beta.ini, api2/Config/sandbox-dev.ini, api2/Component/Api/V2/V2.php |

package/knowledge/2.0/apps/api2/features/api-payload-interceptors.md

@@ -6,16 +6,18 @@ project: API
 client: shared
 type: feature
 status: active
-updated: 2026-08-11
-owners: ["mhammontree", "dfranks", "bala"]
+updated: 2026-08-12
+owners: ["mhammontree", "dfranks", "bala", "snaredla"]
 files:
   - api2/Component/Api/V2/V2.php
   - api2/Controller/Index.php
   - _underscore/Model/Client/ItemFulfillment.php
   - _underscore/Model/Elite/SalesOrder.php
+  - _underscore/Model/Elite/ServiceRequest.php
   - _underscore/Model/Compass/SalesOrder.php
   - _underscore/Model/Compass/SalesOrderItem.php
   - dbchanges2/Core/2026-06-30a - ItemFulfillmentStageDefaultInterceptor.sql
+  - dbchanges2/Core/2026-08-06a - Service request and sales order payload interceptors.sql
 related:
   - ./record-scripts.md
   - ../architecture.md
@@ -333,6 +335,12 @@ and the failing environment**. It is a small table, and the drift is usually exa
   change that switches on a *code* path; if the PHP defining the method is not confirmed deployed to
   that environment, the row takes the endpoint down. Insert inactive, verify the deploy, then flip
   `isActive = 1` — and remember every environment activates independently.
+- **⚠ A post interceptor's `$payload` is the record, not a route-keyed envelope** — and it is
+  by-reference, so pull the record into a local instead of reassigning `$payload`.
+- **⚠ Client behaviour never goes on `_Model_Client_X`.** Every tenant with a row for that record
+  inherits it through `parent::` calls. Put it on `_Model_<Client>_X`.
+- **A client's rows may be in `Core` (with `clientId`), not in `Client_<X>`** — check both before
+  concluding a client has no interceptors.
 - **The method name is derived, so a typo'd enum silently misses.** A row with
   `prePostProcessing = 'PRE'`, `httpMethod = 'PUT'` resolves to `prePut`, not `prePost`; the engine
   will simply find no method and move on.

package/knowledge/2.0/apps/worker2/features/creating-worker-actions.md

@@ -235,7 +235,7 @@ queue failure cannot fail the originating write, so the user's record saves, not
 happens, and no error surfaces. Worked example: `GenerateSalesOrder` →
 `GenerateSalesOrderFromServiceRequest` spans `worker2/Worker/Sync/ServiceRequest.php` and the
 dispatch string in `_underscore/Model/Elite/ServiceRequest.php:44` — see the
-[Elite Service Request pipeline](../../../clients/elite/features/service-request-to-salesorder-pipeline.md).
+[Service Request → Sales Order generation](./service-request-sales-order-generation.md).
 
 Rules: rename **both sides in one PR and one deploy**; grep every repo for the old string (including
 `Core.CronJobs.action` and migrations) before merging; and treat it exactly like the

package/knowledge/2.0/apps/worker2/features/service-request-sales-order-generation.md

@@ -139,6 +139,41 @@ have it. See the `c_`-column convention in `2.0/standards/framework-rules.md`.
 - **Placement:** cross-system sync workers live under `worker2/Worker/Sync/`. This worker does
   **not** belong in `Worker/Netsuite/` (which keeps the NetSuite push,
   `Worker/Netsuite/SalesOrder.php`) and not in `Worker/Client/`.
+- **⚠ Renaming this action is a TWO-REPO, single-deploy change.** The method name here and the
+  `runTask(action: 'Sync/ServiceRequest/GenerateSalesOrderFromServiceRequest', …)` **string** in
+  `_underscore/Model/Elite/ServiceRequest.php:44` must land and deploy **together** — the rename
+  from `GenerateSalesOrder` on 2026-08-12 spans both. Ship either alone and the dispatcher targets a
+  name that no longer exists; because `postPost` wraps `runTask` in try/catch + `error_log`, Sales
+  Order generation then stops **silently**. Same exposure for
+  `Sync/SalesOrderStatus/PostSalesOrderStatusToTogadesk1`. See
+  [creating worker actions](./creating-worker-actions.md).
+- **⚠ The copied client-context helper has already DRIFTED.** `getClientContextFromCore()` here,
+  the same private in `Worker/Sync/SalesOrderStatus.php`, and `getClientContext()` in
+  `Worker/Netsuite/SalesOrder.php` are three copies — and only **this** one has `ORDER BY id ASC` on
+  the `Apis` credential lookup, so the other two pick a **non-deterministic** API credential row
+  (`Worker/Netsuite/SalesOrder.php` documents the flaw in a comment). Add the `ORDER BY` to all
+  three if you touch any, and prefer extraction.
+- **The NetSuite actions in this chain are `Netsuite/SalesOrder/CreateNetSuite` and
+  `Netsuite/SalesOrder/UpdateNetSuite`.** There is **no** `Netsuite/SalesOrder/Push` — do not write
+  that string into a migration, a test or a doc.
+
+## Verifying the whole chain — `test_elite_chain_toga2.php`
+
+`test/@srija/Elite Testing/Service Requests/test_elite_chain_toga2.php` (PHP 8.1) exists because the
+interceptor layer is a **single point of silent failure**: the Service Request is created, nothing
+downstream happens, and no error is raised anywhere. It asserts, in order:
+
+1. **every queued action string resolves to a real `class::method`** (the rename hazard above);
+2. the `_underscore` models queue **those same strings**;
+3. `ApiPayloadInterceptors` rows exist for **record 35 (service-requests)** and **record 14
+   (sales-orders)** — and, critically, that each row's **derived** method name
+   (`strtolower(prePostProcessing) . ucfirst(strtolower(httpMethod))`) actually **exists on the
+   model**, because a registered row whose method is missing **500s every request on that route**;
+4. Sales Order / Purchase Order / NetSuite / desk-reply state after a run;
+5. a **repeat** status push, proving the dedupe guard holds.
+
+Those three structural checks (string resolves → producer matches → interceptor row + derived
+method exist) are reusable for any client on this chain.
 
 ## Known limitations — business blockers, not code defects
 
@@ -153,6 +188,15 @@ Recorded so nobody re-debugs them as bugs. All four were confirmed against Elite
 
 ## Change history
 
+- 2026-08-12 (later pass) — Recorded three deployment/verification facts: the action rename
+  `GenerateSalesOrder` → `GenerateSalesOrderFromServiceRequest` is a **two-repo, single-deploy**
+  change (the `runTask` string lives in `_underscore/Model/Elite/ServiceRequest.php:44`, and a
+  half-shipped rename stops Sales Order generation silently); the copied client-context helper has
+  **drifted** (`ORDER BY id ASC` on the `Apis` lookup exists only in this file, so the other two
+  copies pick a non-deterministic credential); and the chain is verified by
+  `test_elite_chain_toga2.php`, which checks that every queued action string resolves, producers
+  match, and each interceptor row's **derived** method name exists. Also noted the real NetSuite
+  action names (no `Netsuite/SalesOrder/Push`). (snaredla)
 - 2026-08-12 — TRUE-80497/80498: built `_Worker_Sync_ServiceRequest` — a tenant-agnostic
   `GenerateSalesOrderFromServiceRequest(clientIdentifier, serviceRequestId)` generalizing the
   Prudential 1.0 cron, with early return when a sales order already exists (idempotent under

package/knowledge/clients/elite/INDEX.md

@@ -3,10 +3,10 @@
 | Doc | Framework | Summary | Files |
 |-----|-----------|---------|-------|
 | [Elite — \"New Service Request\" button on TOGa Desk 1.0 tickets](features/desk-service-request-creation.md) | 1.0 | TRUE-80497. | togadesk/desk/includes/controllers/modals/tickets/serviceRequest.php, togadesk/desk/includes/controllers/actions/tickets/serviceRequest.php, togadesk/desk/template/modals/tickets/serviceRequest.php, togadesk/desk/includes/classes/class.ticket.php, library/app/model/togadesk/ticket.php, library/app/api/servicerequest.php, dbchanges2/Client_Elite/2026-08-11a - EliteServiceRequestTicketUnique.sql, test/@srija/Elite Testing/Service Requests/test_elite_desk_service_request.php |
-| [Elite SalesOrder → NetSuite Push (postPost/postPut interceptors → worker2)](features/salesorder-netsuite-push.md) | 2.0 | Elite orders created in Toga are pushed into NetSuite **event-driven**, not on a cron. | _underscore/Model/Elite/SalesOrder.php, worker2/Worker/Netsuite/SalesOrder.php, dbchanges2/Client_Elite/2026-08-10 - SalesOrderNetsuiteInterceptors.sql |
+| [Elite SalesOrder → NetSuite Push (postPost/postPut interceptors → worker2)](features/salesorder-netsuite-push.md) | 2.0 | Elite orders created in Toga are pushed into NetSuite **event-driven**, not on a cron. | _underscore/Model/Elite/SalesOrder.php, _underscore/Model/Elite/ServiceRequest.php, worker2/Worker/Netsuite/SalesOrder.php, dbchanges2/Core/2026-08-06a - Service request and sales order payload interceptors.sql |
 | [Elite — Sales Order stage change posts a reply on the TOGa Desk (1.0) ticket](features/salesorder-status-togadesk-reply.md) | 2.0 | When an Elite sales order's **stage** changes, a reply is posted on the originating **TOGa Desk (1.0)** ticket so the requester sees progress where they raised | worker2/Worker/Sync/SalesOrderStatus.php, _underscore/Model/Elite/SalesOrderStatus.php, _underscore/Model/Elite/SalesOrder.php |
 | [Elite — Service Request → Sales Order → status back to TOGa Desk 1.0](features/service-request-to-salesorder-pipeline.md) | 2.0 | Once a Service Request exists in 2.0 (raised from [TOGa Desk](./desk-service-request-creation.md) or in supply2), an interceptor-driven chain turns it into a Sa | worker2/Worker/Sync/ServiceRequest.php, worker2/Worker/Sync/SalesOrderStatus.php, _underscore/Model/Elite/ServiceRequest.php, _underscore/Model/Elite/SalesOrder.php, test/@srija/Elite Testing/Service Requests/test_elite_chain_toga2.php |
 | [Elite — supply2 frontend scope (Inventory + Service Requests, both built)](features/supply2-scope.md) | 2.0 | Scope for onboarding Elite to the `toga2-supply` frontend (host `ELITE`). | toga2-supply/ELITE-CLIENT-TASK-NOTES.md, toga2-supply/src/pages/Orders/view/OrderView/viewModel/FIELDS/ELITE/BASEFIELDS.json, toga2-supply/src/pages/Orders/viewModel/FIELDS/ELITE/BASE.json, toga2-supply/src/pages/Inventory/viewModel/FIELDS/DUMMYGROUPOPTIONS.ts, toga2-supply/src/hooks/useFetchData.tsx, toga2-supply/src/components/ui/Toaster.tsx, toga2-supply/src/pages/Inventory/viewModel/FIELDS/DUMMYGROUPOPTIONS.ts, toga2-supply/src/pages/Inventory/viewModel/FIELDS/INVENTORYPAGEFIELDS.ts, toga2-supply/src/pages/Inventory/viewModel/index.ts, toga2-supply/src/pages/Inventory/listing/InventoryPage.tsx, toga2-supply/src/pages/Inventory/listing/InventoryRouter.tsx, toga2-supply/src/pages/Inventory/listing/InventorySubTablePage.tsx, toga2-supply/src/utils/resolveClientHostName.ts, toga2-supply/src/utils/convertConstructorColumnTitles.ts, toga2-supply/src/pages/Orders/OrdersPage.tsx, toga2-supply/src/pages/Orders/viewModel/FIELDS/ELITE/BASE.json, toga2-supply/src/pages/Orders/viewModel/useOrdersPageViewModel.ts, toga2-supply/src/pages/Orders/api/OrdersApi.ts, toga2-supply/src/pages/Orders/view/OrderView/viewModel/useOrderDetailsViewModel.ts, toga2-supply/src/components/ui/Tables/PrimaryTable/helperFunctions/renderModalContent.tsx, toga2-supply/src/components/layout/SlideMenu/SlideMenu.tsx, toga2-supply/package.json |
 | [Elite — stale TableView config (11 dead Core.RecordFields across 9 views)](features/supply2-tableview-config-drift.md) | 2.0 | `Client_Elite`'s `TableViewJoins` predate **two** platform bridge-table migrations and still reference **11 deleted `Core.RecordFields` ids (211, 321, 932, 358, | dbchanges2/Client_Elite/, dbchanges2/Client_Nychh/2026-06-19a - FixItemFulfillmentTableViewTrackingAndRoot.sql |
-| [Elite — raising a Service Request from a TOGa Desk ticket (App_Api_ServiceRequest)](features/togadesk-service-request-intake.md) | 1.0 | An Elite agent raises a **Service Request** from a TOGa Desk (1.0) ticket via a modal. | library/app/api/servicerequest.php, togadesk/desk/includes/classes/class.ticket.php, togadesk/desk/template/modals/tickets/serviceRequest.php, togadesk/desk/includes/controllers/modals/tickets/serviceRequest.php, togadesk/desk/includes/controllers/actions/tickets/serviceRequest.php, dbchanges2/Client_Elite/2026-08-11a - EliteServiceRequestTicketUnique.sql |
+| [Elite — raising a Service Request from a TOGa Desk ticket (App_Api_ServiceRequest)](features/togadesk-service-request-intake.md) | 1.0 | An Elite agent raises a **Service Request** from a TOGa Desk (1.0) ticket via a modal. | library/app/api/servicerequest.php, library/app/model/togadesk/ticket.php, togadesk/desk/includes/classes/class.ticket.php, togadesk/desk/template/modals/tickets/serviceRequest.php, togadesk/desk/includes/controllers/modals/tickets/serviceRequest.php, togadesk/desk/includes/controllers/actions/tickets/serviceRequest.php, dbchanges2/Client_Elite/2026-08-11a - EliteServiceRequestTicketUnique.sql, test/@srija/Elite Testing/Service Requests/test_elite_desk_service_request.php |
 | [Elite](profile.md) | 2.0 | Elite is a managed-services client that uses **Freshservice** as their helpdesk platform. | worker2/Worker/Elite.php, worker2/Worker/Sync/ServiceRequest.php, library/app/api/toga2.php, library/app/api/servicerequest.php, _underscore/Model/Elite/SalesOrder.php, _underscore/Model/Elite/ServiceRequest.php, togadesk/desk/includes/classes/class.ticket.php |

package/knowledge/clients/elite/features/salesorder-netsuite-push.md

@@ -6,16 +6,20 @@ project: _Underscore
 client: elite
 type: client-feature
 status: active
-updated: 2026-08-10
-owners: ["bala"]
+updated: 2026-08-12
+owners: ["bala", "snaredla"]
 files:
   - _underscore/Model/Elite/SalesOrder.php
+  - _underscore/Model/Elite/ServiceRequest.php
   - worker2/Worker/Netsuite/SalesOrder.php
-  - dbchanges2/Client_Elite/2026-08-10 - SalesOrderNetsuiteInterceptors.sql
+  - dbchanges2/Core/2026-08-06a - Service request and sales order payload interceptors.sql
 related:
   - ../../../2.0/apps/worker2/features/netsuite-salesorder-outbound-push.md
+  - ../../../2.0/apps/worker2/features/service-request-sales-order-generation.md
   - ../../../2.0/apps/api2/features/api-payload-interceptors.md
   - ../../../2.0/apps/_underscore/features/netsuite-rest-client.md
+  - ./salesorder-status-togadesk-reply.md
+  - ./togadesk-service-request-intake.md
   - ../profile.md
 ---
 
@@ -48,15 +52,51 @@ different shape — a CashSale built inline in `postPost`).
 5. `runTask` is wrapped in `try/catch` + `error_log`, so a broken queue can never fail the sales
    order POST itself.
 
+## `postPut` also drives the desk reply (2026-08-12)
+
+`postPut` now branches on **what was actually submitted** (`$api->httpPayload` holds only the fields
+sent):
+
+- **stage changed** (`salesOrderStageId` / `salesOrderStage`) → queues
+  `Sync/SalesOrderStatus/PostSalesOrderStatusToTogadesk1`, **first**, because it does not need the
+  NetSuite read-back. See [Sales Order stage → desk reply](./salesorder-status-togadesk-reply.md).
+- **shipping method changed** → the existing `Netsuite/SalesOrder/UpdateNetSuite` path, which also
+  bails when the order has no `c_netsuiteInternalSalesOrderId` (never sent, so nothing to update).
+
+Neither branch replaces the by-reference `$payload`; the record is read into a local, so a
+multi-record response is not truncated.
+
 ## Interceptor registration is per-environment DATA — and prod has none
 
 `Client_Elite.ApiPayloadInterceptors` is **EMPTY in production**. Without rows, `postPost`/`postPut`
-**never run**: the order saves, nothing else happens, and there is no error anywhere. The
-migration `dbchanges2/Client_Elite/2026-08-10 - SalesOrderNetsuiteInterceptors.sql` registers
-`POST`/`POST` and `POST`/`PUT` for **`recordId 14` (sales-orders)**, guarded with
-`WHERE NOT EXISTS` so a replay cannot create duplicates — **a duplicate row would queue the same
-NetSuite job twice for one order.** (Check the file carries dbchanges2's mandatory
-`YYYY-MM-DD<letter>` suffix before it merges.)
+**never run**: the order saves, nothing else happens, and there is no error anywhere.
+
+> **⚠ CORRECTION (2026-08-12): the registration migration moved.** It is no longer
+> `dbchanges2/Client_Elite/2026-08-10 - SalesOrderNetsuiteInterceptors.sql` (that file no longer
+> exists). The rows now land in **`Core.ApiPayloadInterceptors`** via
+> **`dbchanges2/Core/2026-08-06a - Service request and sales order payload interceptors.sql`**,
+> using the *one-client / all-APIs* form: `clientId 41` (Elite), **`apiId NULL`**, `isActive 1`,
+> `minDepth 1`. Three rows: **record 35 (`service-requests`) POST/POST**, **record 14
+> (`sales-orders`) POST/POST**, and **record 14 POST/PUT**.
+
+Every row is guarded with `WHERE NOT EXISTS` on `(clientId, recordId, prePostProcessing,
+httpMethod)` so a replay cannot create duplicates — **a duplicate row would queue the same NetSuite
+job twice for one order.**
+
+**The record 14 rows fire for EVERY Elite sales order**, not only ones that came from a service
+request — the migration says so explicitly. Any guard that should apply only to service-request
+orders has to live in the PHP.
+
+## Decision — the push lives on Elite models, never on `_Model_Client_SalesOrder`
+
+`_Model_Compass_SalesOrder` and `_Model_Quad_SalesOrder` both call `parent::postPost()`, and
+Compass has an **active `recordId 14` interceptor row**. So a NetSuite push placed on the shared
+`_Model_Client_SalesOrder` would have pushed **Compass and Quad** orders into NetSuite as a side
+effect. It is on `_Model_Elite_SalesOrder` / `_Model_Elite_ServiceRequest` for that reason.
+
+**Decision: no traits for per-client interceptor behaviour.** A small interceptor is added per
+client as each one needs it. A shared trait `use`d by several client models re-creates the same
+blast radius the client-model split exists to prevent, and hides it one level further down.
 
 `recordId 14` and the `Apis` ids (**1 = Agilant, 2 = Elite**) happen to match between dev-sandbox
 and production — **verify them per environment rather than assuming.**
@@ -107,6 +147,20 @@ precedent**. Treat the first prod Elite order as a real first run.
 
 ## Change history
 
+- 2026-08-12 — TRUE-80498/80501: **corrected the registration migration** — the
+  `Client_Elite/2026-08-10 - SalesOrderNetsuiteInterceptors.sql` file no longer exists; the rows now
+  land in **`Core.ApiPayloadInterceptors`** via
+  `Core/2026-08-06a - Service request and sales order payload interceptors.sql` in the
+  one-client/all-APIs form (`clientId 41`, `apiId NULL`, `minDepth 1`), covering **record 35
+  service-requests POST/POST** as well as record 14 POST/POST and POST/PUT, and noting that the
+  record 14 rows fire for **every** Elite sales order. Extended `postPut` to queue
+  `Sync/SalesOrderStatus/PostSalesOrderStatusToTogadesk1` on a **stage** change (ahead of the
+  NetSuite read-back it does not need), leaving the shipping-method branch as-is. Recorded the
+  **decision** that the push lives on `_Model_Elite_*` and never on the shared
+  `_Model_Client_SalesOrder` — Compass and Quad both call `parent::postPost()` and Compass has an
+  active record 14 row, so the shared model would have pushed their orders to NetSuite — and the
+  companion decision to add **a small interceptor per client rather than a shared trait**.
+  (snaredla)
 - 2026-08-10 — **Built the Elite push trigger**: `_Model_Elite_SalesOrder::postPost` queues
   `Netsuite/SalesOrder/CreateNetSuite`, `postPut` queues `UpdateNetSuite` on a shipping-method
   change; both call `parent::postPost()` first, bail when the payload carries

package/knowledge/clients/elite/features/togadesk-service-request-intake.md

@@ -10,17 +10,21 @@ updated: 2026-08-12
 owners: ["snaredla"]
 files:
   - library/app/api/servicerequest.php
+  - library/app/model/togadesk/ticket.php
   - togadesk/desk/includes/classes/class.ticket.php
   - togadesk/desk/template/modals/tickets/serviceRequest.php
   - togadesk/desk/includes/controllers/modals/tickets/serviceRequest.php
   - togadesk/desk/includes/controllers/actions/tickets/serviceRequest.php
   - dbchanges2/Client_Elite/2026-08-11a - EliteServiceRequestTicketUnique.sql
+  - test/@srija/Elite Testing/Service Requests/test_elite_desk_service_request.php
 related:
   - ../profile.md
   - ./salesorder-netsuite-push.md
   - ../../../2.0/apps/worker2/features/service-request-sales-order-generation.md
   - ../../../1.0/apps/library/features/toga2-api-client-and-bridge.md
   - ../../../1.0/apps/togadesk/features/ticket-lifecycle.md
+  - ../../../1.0/apps/togadesk/workflows/standalone-test-scripts.md
+  - ../../../1.0/apps/library/features/app-class-placement-base-contracts.md
 ---
 
 ## Summary
@@ -37,6 +41,26 @@ only the **desk gate** (is this an Elite service-request ticket?) and the **tick
 reporting**. Commit `e2b03fa7` moved ~235 lines out of `class.ticket.php` to get there — record the
 library file as the home; `class.ticket.php` is now the caller, not the implementation.
 
+## The button and its gate — three conditions, one helper
+
+On a qualifying ticket the **"New Service Request"** button **replaces** the existing **"New Part
+Request"** button; it is not an extra button, and every other Elite department keeps the parts flow.
+
+`App_Model_TogaDesk_Ticket::isEliteServiceRequestTicket(int $clientId, int $departmentId, ?string $ticketTypeValue): bool`
+(`library/app/model/togadesk/ticket.php`) is the single source of truth — `true` only when **all
+three** hold:
+
+| Condition | Constant |
+|---|---|
+| `tickets.clientid` = 163 (Elite) | `TOGADESK_CLIENT_ID__ELITE` |
+| `tickets.departmentid` = 299 (Elite Helpdesk - Contact Center) | `TOGADESK_DEPARTMENT_ID__ELITE_CONTACT_CENTER` |
+| custom field 88 "Ticket Type" = `Service Request` | `TOGADESK_CUSTOM_FIELD_ID__ELITE_TICKET_TYPE` + `ELITE_TICKET_TYPE__SERVICE_REQUEST` |
+
+The template, the modal controller **and** `Ticket::createEliteServiceRequest()` all call the helper
+rather than repeating the three ids — re-checked server-side, because a hidden button is not a
+security control. The ticket's 2.0 uuid comes from **`tickets.referenceId`**; without one the modal
+cannot proceed.
+
 ## How it works
 
 1. The modal (`desk/template/modals/tickets/serviceRequest.php`) collects the requested-for person,
@@ -51,7 +75,23 @@ library file as the home; `class.ticket.php` is now the caller, not the implemen
 5. `App_Api_ServiceRequest::createServiceRequestInToga2(...)` posts the **parent and its units in
    one request**. Related records resolve by **natural key** (type name, part number, email) —
    only the customer is referenced by uuid.
-6. The desk writes a `Service Request created <number>` history entry with the unit count.
+6. The desk writes a `Service Request created <number>` history entry with the unit count, and adds
+   a reply authored by `ELITE_DEFAULT_AGENT = 35876` (Agilant Helpdesk / serviceops@togatech.com —
+   the author of the other machine-written replies on Elite tickets). The reply passes the ticket's
+   **current** status as `newStatus`, so raising a Service Request does not silently move the ticket
+   to *In Progress*.
+
+## Statuscodes: 1705 = success, 11 = failure
+
+`Ticket::ELITE_SERVICE_REQUEST_STATUS__SUCCESS = 1705` is Elite's own success message row;
+`ELITE_SERVICE_REQUEST_STATUS__FAILURE = 11` is the generic "cannot add item" failure, with the
+detail written to the ticket history. **Two paths return 1705 without creating anything, and both
+are deliberate:**
+
+- the **duplicate guard** — the desired end state (one Service Request on this ticket) already
+  holds, so a second submit is duplicate-safe SUCCESS, not an error;
+- a **create that succeeded but whose reply write failed** — `addReply()` is wrapped in try/catch
+  and the exception is swallowed, so a reply failure can never report a successful create as failed.
 
 ## The duplicate guard must filter IN the query
 
@@ -114,8 +154,43 @@ wrong-country address.
 select2 state list kept emptying the dropdown — the file's own comment records this. The
 server-side pair check is the guard; the modal stays as-is.
 
+## Test harness
+
+`test/@srija/Elite Testing/Service Requests/test_elite_desk_service_request.php` (PHP **7.2**)
+exercises the desk half from the CLI — a path that had **never been executed** before 2026-08-12:
+the button gate, `referenceId` resolution, the six modal lookups, the duplicate guard, and under
+`--run` a real create with history/reply verification.
+
+**It cannot test the permission gate.** `createEliteServiceRequest()` calls `isOwner()`, which reads
+the `$isAdmin` / `$liu` globals and **redirects + exits** when they are absent; the harness seeds
+them, so it proves everything *after* the permission check, not the check itself. See
+[standalone test-script bootstrap](../../../1.0/apps/togadesk/workflows/standalone-test-scripts.md)
+— and note that verifying 7.2 compatibility needs a real 7.2 binary, since the default CLI is 8.x
+([procedure](../../../1.0/apps/test/features/static-no-db-regression-harness.md)).
+
 ## Gotchas / known issues
 
+- **⚠ The endpoint is hardcoded to PRODUCTION, in TWO constants that must stay in sync.**
+  `Ticket::ELITE_SERVICE_REQUEST_CREATE_ENDPOINT` (`class.ticket.php`) and
+  `ELITE_SERVICE_REQUEST_LOOKUP_ENDPOINT` (the modal controller) are both
+  `https://api.togahub.com/v2`. They **must** match: the modal reads customer / state / item uuids
+  from the lookup endpoint and the create posts those same uuids, and **a uuid from one environment
+  does not exist in another**. Consequence, deliberate but sharp: **every environment
+  (alpha/beta/stage) writes Service Requests into production.** Change one constant and you must
+  change the other in the same commit.
+- **⚠ A failed contact lookup used to create a DUPLICATE contact in 2.0.**
+  `findContactUuidByEmailAddress()` returned `null` on an API failure, which the caller read as "no
+  such contact" and created one — for someone 2.0 already held. Same root cause as the duplicate-SR
+  bug above: with throwing off, a failure arrives as a *response*. `empty($response->isSuccess)` is
+  a safe check on **anything** `App_Api_Toga2::send()` returns, GETs included — see
+  [the transport doc](../../../1.0/apps/library/features/toga2-api-client-and-bridge.md).
+- **`States.countryId` has `isIdentifier = 0`**, so a nested country cannot disambiguate a state
+  either — the state **uuid** is the only country-safe handle when posting.
+- **A 2.0 list route returns an array; a single-record response returns a bare object.** The modal
+  controller normalises this — new lookups must do the same or they break on the one-result case.
+- **`App_Api_ServiceRequest` extends nothing, deliberately.** In `library/app/`, the folder is a
+  behavioural contract and `App_Api` is the fulfilment-vendor base — see
+  [where a new App_ class goes](../../../1.0/apps/library/features/app-class-placement-base-contracts.md).
 - **⚠ Do not re-implement this in `class.ticket.php`.** After `e2b03fa7` that file holds the desk
   gate and history reporting only. New validation or payload work belongs in
   `library/app/api/servicerequest.php`.
@@ -129,6 +204,16 @@ server-side pair check is the guard; the modal stays as-is.
 
 ## Change history
 
+- 2026-08-12 (later pass) — Recorded the **button gate** itself
+  (`isEliteServiceRequestTicket()`: client 163 + department 299 + custom field 88 = `Service
+  Request`; the button **replaces** "New Part Request" on those tickets, and the 2.0 uuid comes from
+  `tickets.referenceId`), the **statuscode semantics** (1705 success / 11 failure, with both the
+  duplicate guard and a swallowed reply failure returning 1705), the reply author
+  `ELITE_DEFAULT_AGENT = 35876` and its status-preserving `newStatus`, the ⚠ **hardcoded production
+  endpoint pair** that makes every environment write to production, the **duplicate-contact** bug
+  from reading past a failed lookup (`empty($response->isSuccess)` is the safe check on anything
+  `send()` returns), `States.countryId isIdentifier = 0`, and the PHP 7.2 desk harness plus its
+  `isOwner()` limitation. (snaredla)
 - 2026-08-12 — TRUE-80497: moved the Elite service-request intake out of
   `togadesk` `class.ticket.php` into `library/app/api/servicerequest.php`
   (`App_Api_ServiceRequest`, commit `e2b03fa7`, ~235 lines); `class.ticket.php` keeps only the desk

package/knowledge/clients/elite/profile.md

@@ -30,8 +30,9 @@ related:
   - features/supply2-scope.md
   - features/supply2-tableview-config-drift.md
   - features/salesorder-netsuite-push.md
-  - features/desk-service-request-creation.md
-  - features/service-request-to-salesorder-pipeline.md
+  - features/togadesk-service-request-intake.md
+  - features/salesorder-status-togadesk-reply.md
+  - 2.0/apps/worker2/features/service-request-sales-order-generation.md
 ---
 
 ## Summary
@@ -60,19 +61,20 @@ renders a designed "no order details" empty state (see supply2-scope).
 Center tickets (client 163 / department 299 / Ticket Type = *Service Request*) show a **New Service
 Request** button that replaces *New Part Request* and creates the Service Request in TOGa 2.0 via
 the shared `App_Api_ServiceRequest` — see
-[desk-service-request-creation](features/desk-service-request-creation.md). The 2.0 side then
+[togadesk-service-request-intake](features/togadesk-service-request-intake.md). The 2.0 side then
 generates a Sales Order and posts the order status back onto the desk ticket —
-[service-request-to-salesorder-pipeline](features/service-request-to-salesorder-pipeline.md). This
+[service-request-sales-order-generation](../../2.0/apps/worker2/features/service-request-sales-order-generation.md). This
 adds **`togadesk`** (and **`test`**, for the two CLI harnesses) to Elite's app scope. **One Service
 Request per ticket** is enforced by a UNIQUE index on `ServiceRequests.ticketId`
 (`dbchanges2/Client_Elite/2026-08-11a`) — applied on dev-sandbox, **not yet in production** —
 and the desk endpoints are currently **hardcoded to production**, so every environment writes there.
 
 **Elite orders are pushed to NetSuite event-driven (2026-08).** `_Model_Elite_SalesOrder`'s
-`postPost`/`postPut` interceptors queue the shared worker2 push. Elite's
-`ApiPayloadInterceptors` table is **empty in production**, so the registration migration is the
-go-live gate — see [salesorder-netsuite-push](features/salesorder-netsuite-push.md). This work adds
-**`_underscore`** and **`api2`** to Elite's app scope.
+`postPost`/`postPut` interceptors queue the shared worker2 push. `Client_Elite.ApiPayloadInterceptors`
+is **empty in production**; the registration rows now live in **`Core.ApiPayloadInterceptors`**
+(`dbchanges2/Core/2026-08-06a`, `clientId 41` / `apiId NULL`, records 35 and 14) and landing them is
+the go-live gate — see [salesorder-netsuite-push](features/salesorder-netsuite-push.md). This work
+adds **`_underscore`** and **`api2`** to Elite's app scope.
 
 **Tenant/test-account notes.** `Core.Domains` rows for Elite already exist in **every**
 environment (dev `http://elite.togasupply`, beta, production, sandbox-dev) with no dbchanges2 Core

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.561",
+  "version": "1.0.562",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",