admin/accounted
3
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat: multi-tenant company refactor (GNU-19) (#153)

Browse Source 
* feat: multi-tenant company refactor (GNU-19)

Introduce companies table, company_members, and user_preferences to
support multiple companies per user. All data scoping changes from
user_id to company_id across the entire codebase.

Key changes:
- Database migration: new tables, company_id on 40+ tables, backfill,
  RLS rewrite from user_id to company-member-based, updated RPCs
- Types: Company, CompanyMember, CompanyRole, UserPreferences types;
  company_id added to all entity interfaces; companyId on all events
- Engine: all 7 core functions take companyId; storno, period, year-end
  services updated; 16 report generators updated
- Middleware: company context resolution (cookie → prefs → first company)
- API routes: ~120 routes updated with requireCompanyId()
- Frontend: CompanyProvider context, layout/dashboard/onboarding updated
- Extensions: context factory, 9 extensions, all lib files updated
- Tests: 1880 tests passing, all helpers updated with company_id defaults

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add database migrations for multi-tenant company and team system (GNU-19)

Adds company_invitations, company creation RPC, team_members, account
deletion RPC, and teams table refactor migrations. Updates base
multi-tenant migration with cascading FKs and onboarding_step column.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add team types and update core infrastructure for multi-tenancy (GNU-19)

Adds TeamRole, MemberSource, and Team types. Refactors Supabase service
client to be stateless, updates middleware for team-aware routing, extends
CompanyContext with team/role fields, and updates extension service types
to accept companyId.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* refactor: thread company_id through business logic functions (GNU-19)

Replaces user_id scoping with company_id across all lib modules:
bookkeeping, documents, transactions, invoices, reconciliation, tax,
deadlines, and import. Updates corresponding tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* refactor: thread company_id through API routes and extensions (GNU-19)

Updates all existing API routes to extract and pass companyId. Updates
enable-banking and arcim-migration extensions for company-scoped
transaction ingestion and sync.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add company and team management API routes (GNU-19)

Adds CRUD endpoints for company members, company invitations, team
members, and team invitations. Includes invite token utilities, email
templates, and company switch server action.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* feat: add team/company UI components, pages, and dashboard updates (GNU-19)

Adds CompanySwitcher, ConsultantEmptyState, Step0RoleChoice, company
members and team management panels. Updates dashboard layout for
team-aware routing, onboarding for multi-step role choice, and auth
callback for team invite acceptance. Ignores supabase/.branches/.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add null guards for company in import page (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: move appUrl declaration to outer scope in invite route (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add optional chaining for company.name in members section (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add optional chaining for second company.name in members section (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: add null guards for company in extension components (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: pass companyId to executeSIEImport in arcim-migration extension (GNU-19)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* fix: update tests to use companyId instead of userId and improve type handling

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Mattsson
2026-03-31 16:41:52 +02:00
committed by GitHub
co-authored by Claude Opus 4.6
parent 1756af6c5e
commit 0dd1f5ebc1
290 changed files with 7690 additions and 1339 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/extensions/__tests__/ai-consent.test.ts
+9 -9
View File
@@ -36,14 +36,14 @@ describe('ai-consent', () => {
describe('hasAiConsent', () => {
it('returns true for non-AI extensions without checking DB', async () => {
const result = await hasAiConsent(supabase as any, 'user-1', 'enable-banking')
const result = await hasAiConsent(supabase as any, 'company-1', 'enable-banking')
expect(result).toBe(true)
expect(supabase.from).not.toHaveBeenCalled()
})
it('returns false when no consent record exists', async () => {
mockResult({ data: null })
const result = await hasAiConsent(supabase as any, 'user-1', 'receipt-ocr')
const result = await hasAiConsent(supabase as any, 'company-1', 'receipt-ocr')
expect(result).toBe(false)
})
@@ -57,7 +57,7 @@ describe('ai-consent', () => {
},
},
})
const result = await hasAiConsent(supabase as any, 'user-1', 'receipt-ocr')
const result = await hasAiConsent(supabase as any, 'company-1', 'receipt-ocr')
expect(result).toBe(true)
})
@@ -71,7 +71,7 @@ describe('ai-consent', () => {
},
},
})
const result = await hasAiConsent(supabase as any, 'user-1', 'receipt-ocr')
const result = await hasAiConsent(supabase as any, 'company-1', 'receipt-ocr')
expect(result).toBe(false)
})
@@ -85,7 +85,7 @@ describe('ai-consent', () => {
},
},
})
const result = await hasAiConsent(supabase as any, 'user-1', 'receipt-ocr')
const result = await hasAiConsent(supabase as any, 'company-1', 'receipt-ocr')
expect(result).toBe(false)
})
})
@@ -93,13 +93,13 @@ describe('ai-consent', () => {
describe('grantAiConsent', () => {
it('upserts consent record to extension_data', async () => {
mockResult({ data: null, error: null })
await grantAiConsent(supabase as any, 'user-1', 'receipt-ocr')
await grantAiConsent(supabase as any, 'user-1', 'company-1', 'receipt-ocr')
expect(supabase.from).toHaveBeenCalledWith('extension_data')
})
it('does nothing for non-AI extensions', async () => {
await grantAiConsent(supabase as any, 'user-1', 'enable-banking')
await grantAiConsent(supabase as any, 'user-1', 'company-1', 'enable-banking')
expect(supabase.from).not.toHaveBeenCalled()
})
})
@@ -107,13 +107,13 @@ describe('ai-consent', () => {
describe('revokeAiConsent', () => {
it('upserts revoked consent to extension_data', async () => {
mockResult({ data: null, error: null })
await revokeAiConsent(supabase as any, 'user-1', 'ai-chat')
await revokeAiConsent(supabase as any, 'user-1', 'company-1', 'ai-chat')
expect(supabase.from).toHaveBeenCalledWith('extension_data')
})
it('does nothing for non-AI extensions', async () => {
await revokeAiConsent(supabase as any, 'user-1', 'email')
await revokeAiConsent(supabase as any, 'user-1', 'company-1', 'email')
expect(supabase.from).not.toHaveBeenCalled()
})
})
lib/extensions/__tests__/context-factory.test.ts
+12 -12
View File
@@ -30,7 +30,7 @@ beforeEach(() => {
describe('createExtensionContext', () => {
it('returns context with correct userId and extensionId', () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
expect(ctx.userId).toBe('user-1')
expect(ctx.extensionId).toBe('test-ext')
@@ -38,29 +38,29 @@ describe('createExtensionContext', () => {
it('provides supabase client', () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
expect(ctx.supabase).toBe(supabase)
})
it('emit() delegates to eventBus.emit()', async () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
const handler = vi.fn()
eventBus.on('journal_entry.committed', handler)
await ctx.emit({
type: 'journal_entry.committed',
payload: { entry: { id: 'e1' } as never, userId: 'user-1' },
payload: { entry: { id: 'e1' } as never, userId: 'user-1', companyId: 'company-1' },
})
expect(handler).toHaveBeenCalledWith({ entry: { id: 'e1' }, userId: 'user-1' })
expect(handler).toHaveBeenCalledWith({ entry: { id: 'e1' }, userId: 'user-1', companyId: 'company-1' })
})
it('log methods prefix with extensionId', () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'my-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'my-ext')
const logSpy = vi.spyOn(console, 'log').mockImplementation(() => {})
const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {})
@@ -83,7 +83,7 @@ describe('createExtensionContext', () => {
const { supabase, mockResult } = createMockSupabase()
mockResult({ data: { value: { autoOcr: true } }, error: null })
const ctx = createExtensionContext(supabase as never, 'user-1', 'receipt-ocr')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'receipt-ocr')
const result = await ctx.settings.get<{ autoOcr: boolean }>('settings')
expect(result).toEqual({ autoOcr: true })
@@ -94,7 +94,7 @@ describe('createExtensionContext', () => {
const { supabase, mockResult } = createMockSupabase()
mockResult({ data: { value: { foo: 'bar' } }, error: null })
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
const result = await ctx.settings.get<{ foo: string }>()
expect(result).toEqual({ foo: 'bar' })
@@ -104,7 +104,7 @@ describe('createExtensionContext', () => {
const { supabase, mockResult } = createMockSupabase()
mockResult({ data: null, error: null })
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
const result = await ctx.settings.get('missing-key')
expect(result).toBeNull()
@@ -114,7 +114,7 @@ describe('createExtensionContext', () => {
const { supabase, mockResult } = createMockSupabase()
mockResult({ data: null, error: null })
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
await ctx.settings.set('my-key', { value: 123 })
expect(supabase.from).toHaveBeenCalledWith('extension_data')
@@ -122,7 +122,7 @@ describe('createExtensionContext', () => {
it('storage.getPublicUrl() returns URL string', () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
const url = ctx.storage.getPublicUrl('documents', 'path/to/file.pdf')
expect(typeof url).toBe('string')
@@ -130,7 +130,7 @@ describe('createExtensionContext', () => {
it('services.ingestTransactions is a function', () => {
const { supabase } = createMockSupabase()
const ctx = createExtensionContext(supabase as never, 'user-1', 'test-ext')
const ctx = createExtensionContext(supabase as never, 'user-1', 'company-1', 'test-ext')
expect(typeof ctx.services.ingestTransactions).toBe('function')
})
lib/extensions/__tests__/registry.test.ts
+8 -8
View File
@@ -44,11 +44,11 @@ describe('ExtensionRegistry', () => {
await eventBus.emit({
type: 'journal_entry.committed',
payload: { entry: { id: 'e1' } as never, userId: 'u1' },
payload: { entry: { id: 'e1' } as never, userId: 'u1', companyId: 'company-1' },
})
expect(handler).toHaveBeenCalled()
expect(handler.mock.calls[0][0]).toEqual({ entry: { id: 'e1' }, userId: 'u1' })
expect(handler.mock.calls[0][0]).toEqual({ entry: { id: 'e1' }, userId: 'u1', companyId: 'company-1' })
})
it('register() skips duplicate registration (same id)', () => {
@@ -80,7 +80,7 @@ describe('ExtensionRegistry', () => {
await eventBus.emit({
type: 'journal_entry.committed',
payload: { entry: { id: 'e1' } as never, userId: 'u1' },
payload: { entry: { id: 'e1' } as never, userId: 'u1', companyId: 'company-1' },
})
expect(handler).not.toHaveBeenCalled()
@@ -124,11 +124,11 @@ describe('ExtensionRegistry', () => {
await eventBus.emit({
type: 'journal_entry.committed',
payload: { entry: { id: 'e1' } as never, userId: 'u1' },
payload: { entry: { id: 'e1' } as never, userId: 'u1', companyId: 'company-1' },
})
await eventBus.emit({
type: 'journal_entry.drafted',
payload: { entry: { id: 'e1' } as never, userId: 'u1' },
payload: { entry: { id: 'e1' } as never, userId: 'u1', companyId: 'company-1' },
})
expect(handler1).not.toHaveBeenCalled()
@@ -137,7 +137,7 @@ describe('ExtensionRegistry', () => {
it('handler receives ExtensionContext when context factory is set', async () => {
const handler = vi.fn()
const mockCtx = { extensionId: 'ctx-ext', userId: 'u1' } as ExtensionContext
const mockCtx = { extensionId: 'ctx-ext', userId: 'u1', companyId: 'company-1' } as ExtensionContext
setContextFactory((_supabase, _userId, _extId) => mockCtx)
@@ -150,11 +150,11 @@ describe('ExtensionRegistry', () => {
await eventBus.emit({
type: 'journal_entry.committed',
payload: { entry: { id: 'e1' } as never, userId: 'u1' },
payload: { entry: { id: 'e1' } as never, userId: 'u1', companyId: 'company-1' },
})
expect(handler).toHaveBeenCalledWith(
{ entry: { id: 'e1' }, userId: 'u1' },
{ entry: { id: 'e1' }, userId: 'u1', companyId: 'company-1' },
mockCtx
)
})