toga-ai 1.0.86 → 1.0.88

package/knowledge/1.0/apps/walmarttechservices/INDEX.md

@@ -0,0 +1,5 @@
+# walmarttechservices (Walmart Tech Services) — 1.0 knowledge
+
+| Doc | Summary | Files |
+|-----|---------|-------|
+| [Walmart Tech Services Architecture](architecture.md) | Small public-facing PHP marketing + warranty-registration site for **Walmart Tech Services**, the consumer tech-support / device-repair program. | index.php, _.php, app/template.php, app/menu.php, app/content/home.php, app/content/warrantyregistrations/view.php, app/content/warrantyregistrations/iframe.php, app/content/warrantyregistrations/action.php, config.prod.ini, composer.json, .ebextensions/, ebs/git.json |

package/knowledge/1.0/apps/walmarttechservices/architecture.md

@@ -0,0 +1,141 @@
+---
+title: Walmart Tech Services Architecture
+framework: "1.0"
+repo: walmarttechservices
+project: Walmart Tech Services
+client: shared
+type: architecture
+status: active
+updated: 2026-06-15
+owners: [mhammontree]
+files:
+  - index.php
+  - _.php
+  - app/template.php
+  - app/menu.php
+  - app/content/home.php
+  - app/content/warrantyregistrations/view.php
+  - app/content/warrantyregistrations/iframe.php
+  - app/content/warrantyregistrations/action.php
+  - config.prod.ini
+  - composer.json
+  - .ebextensions/
+  - ebs/git.json
+related: []
+---
+
+# Walmart Tech Services Architecture
+
+Small public-facing PHP marketing + warranty-registration site for **Walmart Tech
+Services**, the consumer tech-support / device-repair program. The site is operated under
+the **True Network Solutions (TNS)** brand (an Agilant business) and is co-branded with
+Walmart. It is **Framework 1.0** (`App_` classes) running on the **TOGa Commerce 1.0**
+platform and deployed to **AWS Elastic Beanstalk**; it leans on the shared `library` core
+and the back-office **ASI / Vision** platform (`vision.asisystem.com`) for its data.
+
+- Repo: `github.com/agilantsolutions/walmarttechservices`. Composer package name is
+  `agilantsolutions/togacommerce1` ("TOGa Commerce 1.0").
+- Local path on dev machines is tracked in Claude memory (`repo-path-walmarttechservices`).
+- Public URL: `https://www.walmarttechservices.com/`.
+
+## Purpose / what the site does
+
+1. **Marketing landing page** — describes the tech-support offerings (Tech Support, Device
+   Repair, Device Setup, In-Home), a "Premium Tech Support & Security" plan ($89/yr,
+   bundles McAfee Total Protection), testimonials, and contact info. Support phone is
+   `(888) 725-4544`; contact emails are `InHomeSupport@TrueNetworkSolutions.com` and
+   `WalmartSupport@TrueNetworkSolutions.com`. Content lives in `app/menu.php`.
+2. **Warranty / service registration** — a customer who purchased a service registers it
+   via a form (first/last name, email, phone, date of purchase, receipt number, and a
+   receipt file upload). On submit it confirms the customer's existing `ServiceRequest`
+   and emails a branded confirmation. This is the only interactive feature.
+
+## Stack
+
+- **PHP 7.2.33** (pinned in `composer.json` `config.platform`).
+- **Framework 1.0** — uses `App_`-prefixed classes from the `library` core (`App_Page`,
+  `App_Registry`, `App_Model_ServiceRequest`, `App_Model_Toga_Contact`, `App_Database`,
+  `App_String`, `App_Client_Walmart`, `App_Email_WalmartB2C`, `Browser_Form` and its
+  `Browser_Form_Input_*` elements, `Browser_Form_Validator`).
+- **Sentry** (`sentry/sentry ^4.9`) for error tracking.
+- Server-rendered HTML (table-based templates); no SPA/JS framework. Assets in `assets/`.
+
+## Application bootstrap & routing
+
+`index.php` → `require('_.php')` (bootstrap/autoloader, wires the `library` core) →
+`App_Framework_WalmartTechServices::initialize()` then `::renderIndex()`.
+
+- `app/template.php` is the page chrome. It branches **mobile vs. desktop**
+  (`App_Page::isOnMobileDevice()`) and renders a content file chosen by the `content`
+  request var: `app/content/<content>.php` (underscores in the var map to directory
+  separators, e.g. `warrantyregistrations_iframe` → `warrantyregistrations/iframe.php`).
+  Unknown `content` throws `Invalid content destination`.
+- Default content is `home` (`app/content/home.php`), which just requires
+  `warrantyregistrations/view.php`.
+
+## Warranty-registration flow
+
+- **Form** (`app/content/warrantyregistrations/iframe.php`) — a `Browser_Form` posting to
+  the `warrantyregistrations_action` content via an iframe target. Fields: `firstName`,
+  `lastName`, `emailAddress` (email-validated), `primaryPhone` (phone-validated),
+  `dateOfPurchase` (datepicker), `receiptNumber` (numeric, 5–10 chars), `fileReceipt`
+  (file upload). A success state shows a "Thank You" message.
+- **Handler** (`app/content/warrantyregistrations/action.php`, `MODE_NEW`) —
+  1. Sanitizes input (`App_Page::htmlProtect`, `App_String::filterCharactersAlphaOnly`,
+     `cleanPhoneNumber`, `cleanEmailAddress`).
+  2. Decrypts an `id` request var (`App_String::decrypt`) into a `serviceRequestId`.
+  3. Loads the linked `App_Model_Toga_Contact`, updates name/phone/email, saves.
+  4. Marks the `App_Model_ServiceRequest` `confirmed = true`.
+  5. Looks up the service(s) on the request and sends a branded confirmation email
+     (`App_Email_WalmartB2C`). Two variants by `Services.requiresAgentDownload`: an
+     "agent download" email (link built from `App_Client_Walmart::AGENTDOWNLOADURLPREFIX`
+     + the contact email) or a "call us" email.
+
+## Data / back-office
+
+Configured per-environment in `config.<env>.ini` (`[database_*]`), pointing at the ASI
+Vision RDS cluster (`*.cluster-clwbyqvxdm4q.us-west-2.rds.amazonaws.com`). Logical DBs:
+`Vision` (main), `Logs`, `Vision_Log`, `TOGA` (`db_toga` — `ServiceRequest*`, `Services`,
+`Contact`), `Common`. The site is essentially a thin consumer front-end over service
+requests created elsewhere in the Vision platform.
+
+## External integrations
+
+Set in `config.<env>.ini`:
+
+- **AWS SES** SMTP (`[email]`) for outbound mail; from-name branded "Office Depot" on some
+  envs. Confirmation-email HTML is built with a Stripo template.
+- **OptimumDesk / Easeedesk** (`[optimumdesk]`) — `promo_support_order/create` endpoint.
+- **HP PQWS** (`[hp_pqws]`) — HPE/HPI warranty product/serial lookup web services (mutual
+  TLS client certs).
+- **Vision portal / ITAD portal / punchout** (`[portal]`, `[punchout]`) URLs.
+
+## Build, environments & deploy
+
+- **AWS Elastic Beanstalk** (PHP platform). `.ebextensions/` configures: HTTP→HTTPS
+  redirect, export/cache folders, custom `php.ini`, **Redis sessions**, request-timeout
+  fix, **Composer install**, **git-based pull of the `library` core** (`020_setup_git_libraries.config`
+  + `ebs/git.json`), and **registration to a shared Application Load Balancer**.
+- Many environments: `config.alpha|beta|demo|stage|test|hotfix|prod.ini` plus per-dev
+  `config.dev-*.ini`.
+- Recent work (2025): Sentry integration, composer.json added, EB shared-ALB + name
+  truncation, alpha RDS endpoint fix.
+
+## Gotchas / known issues
+
+- **`config.*.ini` are committed to git** (`.gitignore` only excludes `.DS_Store`), and
+  they contain live credentials (RDS, AWS SES SMTP keys, OptimumDesk, HP cert passwords).
+  Treat them as committed secrets — see the constant/section names in `config.prod.ini`
+  for *where* a credential lives; never copy values out. If the repo is/was public, rotate.
+- The warranty form's datepicker is hard-coded to a **2017-07-23 → 2018-12-31** purchase
+  window (`iframe.php`) — a leftover from the original promo that makes the live form look
+  stale; revisit if the form is reused.
+- The desktop footer in `app/template.php` embeds a verbatim copy of Walmart.com's global
+  footer markup (Walmart CSS classes, nav links, `© Walmart. All Rights Reserved.`). It is
+  decorative/co-branding, not a live Walmart integration.
+- `library` is **not** vendored — it is pulled at deploy via `ebs/git.json`. Local dev
+  needs the `library` core checked out alongside.
+
+## Change history
+
+- 2026-06-15 — Initial architecture doc; repo onboarded to registry (1.0 app, dependsOn library) (mhammontree)

package/knowledge/1.0/apps/webhook/features/netsuite-clickup-opportunity-sync.md

@@ -57,9 +57,11 @@ Its output depends entirely on the trigger **context** (because it reads field v
   changed field on `context.newRecord` → `tranid`/entity/title read empty → 2493 falls back to
   `name = "OPP " + record.id` with empty descriptive/custom fields → the degenerate stub.
 
-The degenerate trigger is **scheduled script 2412 "Update Opp Status / % to Close / Presales Lead"**
+The degenerate trigger was **scheduled script 2412 "Update Opp Status / % to Close / Presales Lead"**
 (deployment `customdeploy_update_opp_status_morning`, status SCHEDULED). It auto-assigns the Presales
-Lead via `submitFields` (NetSuite context `SCH`, user `-System-`), which fires 2493 in `xedit` → stub.
+Lead (NetSuite context `SCH`, user `-System-`) — originally via `submitFields`, which fired 2493 in
+`xedit` → stub. **Fixed 2026-06-15:** 2412 now does a full `record.load()`/`setValue()`/`save()`, so
+the assignment fires 2493 in `edit` (full-record) context → proper name (see Gotchas → Fix).
 
 ## Data model
 - ClickUp Opportunities list `901111987449`; custom-item id `1009`.
@@ -85,17 +87,25 @@ None — single internal Agilant/True integration.
   June 1 edit added the Presales-Lead auto-assignment. **Precise failure condition:** only the
   *empty→set* transition fires it — a scheduled set to an already-present lead is a no-op (confirmed
   on opp 5483750, where a 07:02 `SCH` set produced no stub because the lead was already present).
-- **Fix options (NetSuite-side, in script 2493):**
-  - *Preferred* — `record.load({type, id: context.newRecord.id})` (or `search.lookupFields` for
-    `tranid`/entity/title) before building `name`. Works for **every** trigger context; produces
-    correct names instead of stubs-or-nothing.
-  - *Alternative* — skip on `xedit` (`if (context.type === context.UserEventType.XEDIT) return;`).
-    Suppresses the stubs but **also drops** legitimate task creation from inline-grid edits, mass
-    updates, and any other `submitFields` automation. Does **not** affect full-form saves, creates,
-    or REST/SOAP edits (incl. the touch tool, which is `RWS`/full-edit). Trades a visible bug for a
-    silent one — only acceptable if presales leads are never set inline/in bulk.
-  - *TOGA backstop (optional)* — in `createTask()`, if `name` is empty or matches `^OPP \d+$`, look
-    the opp up by internal id and rebuild the name before POSTing.
+- **Fix — applied in NetSuite prod 2026-06-15 (deployed; pending verification on next scheduled
+  run).** In scheduled script **2412**, the presales-lead assignment was changed from
+  `record.submitFields({type, id, values:{custbody_ctc_solution_architect: employeeId}, ...})` to a
+  full `record.load()` → `setValue('custbody_ctc_solution_architect', employeeId)` →
+  `record.save({ignoreMandatoryFields:true})`. A full `save()` fires 2493 with `context.type='edit'`
+  and the **complete** `newRecord`, so it reads `tranid`/entity/title and builds a proper name; the
+  empty→set guard still works (`oldRecord` reflects the pre-save state). **Verify** by watching the
+  next `SCH` empty→set run for a properly-named task (not `OPP <id>`) — not yet observed against a
+  live scheduled run as of the fix.
+  - **Residual exposure:** 2493 still reads off `context.newRecord`, so *other* `xedit`-context
+    presales-lead sets (inline-grid edit, Mass Update, any other script's `submitFields`) would still
+    stub. The 2412 fix closes the actual regression, not the latent 2493 hole. Belt-and-suspenders =
+    add a `record.load()`/`lookupFields` fallback **inside 2493** too (not done).
+  - **Watch-outs from the full save:** governance per opp rose ~2.5× (`load` ~5 + `save` ~20 units vs
+    `submitFields` ~10) — guard batch runs against the governance ceiling (yield/reschedule); and a
+    full `save()` re-fires **all** `edit`-context UserEvents/workflows on the opp (Quosal, LSA, etc.),
+    not just 2493.
+  - **TOGA backstop (optional, not done):** in `createTask()`, if `name` is empty or matches
+    `^OPP \d+$`, look the opp up by internal id and rebuild the name before POSTing.
 - **No inbound logging.** `Webhook_NetSuite::post()` has a `// Log payload to file` comment but does
   **nothing** — the raw NetSuite payload is persisted nowhere, which is why this was hard to trace.
   Adding real request logging here would make recurrences diagnosable immediately.
@@ -118,9 +128,13 @@ It blanks then restores `custbody_ctc_solution_architect` via REST (`RWS`/full-e
 with the full record → proper `<tranid> — <custNum> <customer> — <title>` task ~1–2s later.
 **Leaves the original stub** — delete the `OPP <id>` task in ClickUp afterward.
 Done 2026-06-15 for opps 7147699/7147698/7147472/6382879 → 4 proper tasks created; the 4 stubs
-(task ids `868k0tr41`, `868k0tr16`, `868k0rwtp`, `868k0h44m`) were left for deletion.
+(task ids `868k0tr41`, `868k0tr16`, `868k0rwtp`, `868k0h44m`) were archived in ClickUp afterward.
 
 ## Change history
+- 2026-06-15 — **Fix deployed in NetSuite prod:** scheduled script 2412's presales-lead assignment
+  switched from `submitFields` to full `load`/`setValue`/`save` → fires 2493 in `edit` (full-record)
+  context → proper names. Residual: 2493 still latently `xedit`-vulnerable to other triggers; watch
+  governance (~2.5×) and other UserEvents re-firing on the full save. Pending live-run verification. (dfranks)
 - 2026-06-15 — Identified the exact NetSuite culprits (scheduled **2412** `submitFields`→`xedit`→
   UserEvent **2493**), regression date (script 2412 modified 2026-06-01; no stubs before Jun 12),
   and `systemnote`/`SCH` confirmation; added remediation-via-touch procedure and fix-option

package/knowledge/INDEX.md

@@ -9,6 +9,7 @@ _Auto-generated by `knowledge.js index`. Do not hand-edit._
 - **togadesk** (TOGa Desk) — 7 doc(s) → [1.0/apps/togadesk/INDEX.md](1.0/apps/togadesk/INDEX.md)
 - **togaview** (TOGa View) — 5 doc(s) → [1.0/apps/togaview/INDEX.md](1.0/apps/togaview/INDEX.md)
 - **webhook** (Webhook) — 1 doc(s) → [1.0/apps/webhook/INDEX.md](1.0/apps/webhook/INDEX.md)
+- **walmarttechservices** (Walmart Tech Services) — 1 doc(s) → [1.0/apps/walmarttechservices/INDEX.md](1.0/apps/walmarttechservices/INDEX.md)
 
 ## 2.0 framework
 

package/knowledge/registry.json

@@ -12,5 +12,6 @@
   { "repo": "togaview",    "project": "TOGa View",   "framework": "1.0", "role": "app",  "dependsOn": [] },
   { "repo": "toga2-hub",   "project": "TOGa Hub",    "framework": "2.0", "role": "app",  "dependsOn": ["api2"] },
   { "repo": "togatech",    "project": "TOGA Technology Website", "framework": "standalone", "role": "app", "dependsOn": [] },
-  { "repo": "webhook",     "project": "Webhook",     "framework": "1.0", "role": "app",  "dependsOn": ["library"] }
+  { "repo": "webhook",     "project": "Webhook",     "framework": "1.0", "role": "app",  "dependsOn": ["library"] },
+  { "repo": "walmarttechservices", "project": "Walmart Tech Services", "framework": "1.0", "role": "app", "dependsOn": ["library"] }
 ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.86",
+  "version": "1.0.88",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",