toga-ai 1.0.878 → 1.0.879

package/knowledge/2.0/apps/_underscore/architecture.md

@@ -6,7 +6,7 @@ project: _Underscore
 client: shared
 type: architecture
 status: active
-updated: 2026-09-22
+updated: 2026-09-23
 owners: ["jcardinal", "rgirish", "mhammontree", "ajean"]
 files:
   - _underscore/_underscore.php
@@ -371,6 +371,7 @@ multi-file UI components (`.php`/`.html`/`.css`/`.js`) invoked as `<_ComponentNa
 
 ## Gotchas
 
+- **⚠ `_Environment::isDebugMode()` (Environment.php) returns TRUE when the `[_underscore]` config group is missing** (fail-safe to debug). Anything gated on it silently turns off in a prod config lacking the group — e.g. worker2 NetSuite order sends return `skippedDebugMode` and still record success. Prod must set `[_underscore]` with debug off. See [NetSuite sales-order push](../worker2/features/netsuite-salesorder-outbound-push.md).
 - **`FIELD_STORAGE` writes were silently dropped platform-wide (fixed 2026-07, `Model.php`).** Two
   bugs: (a) `buildSqlFieldValue()` read the field via `$this->$field`, which for a storage field
   triggers `__get()` → a disk/S3 **refetch** that overwrote the just-assigned value before `save()`

package/knowledge/2.0/apps/worker2/features/netsuite-salesorder-outbound-push.md

@@ -6,8 +6,8 @@ project: Worker
 client: shared
 type: feature
 status: active
-updated: 2026-09-16
-owners: ["bala"]
+updated: 2026-09-23
+owners: ["bala", "jcardinal"]
 files:
   - worker2/Worker/Netsuite/SalesOrder.php
   - test/@Bala/tests/netsuite_salesorder_payload_tests.php
@@ -89,6 +89,14 @@ Flow:
    The internalId is written back to `SalesOrders.c_netsuiteInternalSalesOrderId` by the shared
    `writeBackNetSuiteId()` (three paths now save it).
 7. `dryRun = true` builds and returns the payload without calling NetSuite.
+8. **Non-prod send guard (2026-09-23).** `doCreate`/`doUpdate` check `_Environment::isDebugMode()`
+   after the dry-run return, before any NetSuite read/write or Toga write-back; if true they return
+   `{"action":"skippedDebugMode","intendedAction":"create|update","salesOrderUuid":…}`
+   (`buildDebugModeSkipResult()`). Covers CreateNetSuite, CreateNetSuiteFromTransferOrder,
+   UpdateNetSuite, Sync (all funnel through doCreate/doUpdate). Job records success. `dryRun` still
+   runs in debug mode. Inbound webhooks unaffected. Why: only one NetSuite env (prod); non-prod
+   worker2 was sending orders to it. Callers: `_underscore` Model/Client/TransferOrder.php,
+   Model/Adyen/SalesOrder.php, Model/Elite/SalesOrder.php via `_Worker::runTask`.
 
 ### The shared builder now serves two order types — the changes were additive and defaulted
 
@@ -230,6 +238,10 @@ the transfer-order work.
 
 ## Gotchas
 
+- **⚠ `_Environment::isDebugMode()` returns TRUE when the `[_underscore]` config group is missing**
+  (fail-safe to debug). A prod config missing that group, or with debug on, silently stops ALL
+  NetSuite order sends — jobs still show success with `skippedDebugMode`. Prod must set
+  `[_underscore]` with debug off. Seeing `skippedDebugMode` in prod `WorkerJobs` = config problem.
 - **⚠ Still unverified: can SuiteQL FILTER on `transaction.externalid` in this account?** A `created`
   result **cannot distinguish** *"the lookup ran and found nothing"* from *"the lookup is broken and
   always finds nothing."* This project has already hit a NetSuite column that could be `SELECT`ed but

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toga-ai",
-  "version": "1.0.878",
+  "version": "1.0.879",
   "description": "TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.",
   "keywords": [
     "claude",