feat: multi-tenant company refactor (GNU-19) (#153)

* feat: multi-tenant company refactor (GNU-19) Introduce companies table, company_members, and user_preferences to support multiple companies per user. All data scoping changes from user_id to company_id across the entire codebase. Key changes: - Database migration: new tables, company_id on 40+ tables, backfill, RLS rewrite from user_id to company-member-based, updated RPCs - Types: Company, CompanyMember, CompanyRole, UserPreferences types; company_id added to all entity interfaces; companyId on all events - Engine: all 7 core functions take companyId; storno, period, year-end services updated; 16 report generators updated - Middleware: company context resolution (cookie → prefs → first company) - API routes: ~120 routes updated with requireCompanyId() - Frontend: CompanyProvider context, layout/dashboard/onboarding updated - Extensions: context factory, 9 extensions, all lib files updated - Tests: 1880 tests passing, all helpers updated with company_id defaults Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: add database migrations for multi-tenant company and team system (GNU-19) Adds company_invitations, company creation RPC, team_members, account deletion RPC, and teams table refactor migrations. Updates base multi-tenant migration with cascading FKs and onboarding_step column. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: add team types and update core infrastructure for multi-tenancy (GNU-19) Adds TeamRole, MemberSource, and Team types. Refactors Supabase service client to be stateless, updates middleware for team-aware routing, extends CompanyContext with team/role fields, and updates extension service types to accept companyId. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * refactor: thread company_id through business logic functions (GNU-19) Replaces user_id scoping with company_id across all lib modules: bookkeeping, documents, transactions, invoices, reconciliation, tax, deadlines, and import. Updates corresponding tests. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * refactor: thread company_id through API routes and extensions (GNU-19) Updates all existing API routes to extract and pass companyId. Updates enable-banking and arcim-migration extensions for company-scoped transaction ingestion and sync. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: add company and team management API routes (GNU-19) Adds CRUD endpoints for company members, company invitations, team members, and team invitations. Includes invite token utilities, email templates, and company switch server action. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: add team/company UI components, pages, and dashboard updates (GNU-19) Adds CompanySwitcher, ConsultantEmptyState, Step0RoleChoice, company members and team management panels. Updates dashboard layout for team-aware routing, onboarding for multi-step role choice, and auth callback for team invite acceptance. Ignores supabase/.branches/. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add null guards for company in import page (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: move appUrl declaration to outer scope in invite route (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add optional chaining for company.name in members section (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add optional chaining for second company.name in members section (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: add null guards for company in extension components (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: pass companyId to executeSIEImport in arcim-migration extension (GNU-19) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: update tests to use companyId instead of userId and improve type handling --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-31 16:41:52 +02:00
parent 1756af6c5e
commit 0dd1f5ebc1
290 changed files with 7690 additions and 1339 deletions
@@ -138,7 +138,7 @@ export async function runReconciliation(
  let query = supabase
    .from('transactions')
    .select('*')
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .is('journal_entry_id', null)
    .eq('currency', 'SEK')

@@ -172,7 +172,7 @@ export async function runReconciliation(
          is_business: true,
        })
        .eq('id', match.transaction.id)
-        .eq('user_id', userId)
+        .eq('company_id', userId)

      if (error) {
        errors++
@@ -186,6 +186,7 @@ export async function runReconciliation(
              journalEntryId: match.glLine.journal_entry_id,
              method: match.method,
              userId,
+              companyId: userId,
            },
          })
        } catch {
@@ -217,7 +218,7 @@ export async function getReconciliationStatus(
  let txQuery = supabase
    .from('transactions')
    .select('amount, journal_entry_id, reconciliation_method')
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .eq('currency', 'SEK')

  if (dateFrom) txQuery = txQuery.gte('date', dateFrom)
@@ -230,7 +231,7 @@ export async function getReconciliationStatus(
    .from('journal_entry_lines')
    .select('debit_amount, credit_amount, journal_entries!inner(user_id, entry_date, status)')
    .eq('account_number', '1930')
-    .eq('journal_entries.user_id', userId)
+    .eq('journal_entries.company_id', userId)
    .eq('journal_entries.status', 'posted')

  if (dateFrom) glQuery = glQuery.gte('journal_entries.entry_date', dateFrom)
@@ -292,7 +293,7 @@ export async function manualLink(
    .from('transactions')
    .select('*')
    .eq('id', transactionId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .single()

  if (txError || !tx) {
@@ -308,7 +309,7 @@ export async function manualLink(
    .from('journal_entries')
    .select('id, user_id, status')
    .eq('id', journalEntryId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .single()

  if (entryError || !entry) {
@@ -335,7 +336,7 @@ export async function manualLink(
    .from('transactions')
    .select('id')
    .eq('journal_entry_id', journalEntryId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .single()

  if (existingLink) {
@@ -351,7 +352,7 @@ export async function manualLink(
      is_business: true,
    })
    .eq('id', transactionId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)

  if (updateError) {
    return { success: false, error: 'Failed to link transaction' }
@@ -365,6 +366,7 @@ export async function manualLink(
        journalEntryId,
        method: 'manual' as ReconciliationMethod,
        userId,
+        companyId: userId,
      },
    })
  } catch {
@@ -388,7 +390,7 @@ export async function unlinkReconciliation(
    .from('transactions')
    .select('id, journal_entry_id, reconciliation_method')
    .eq('id', transactionId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)
    .single()

  if (txError || !tx) {
@@ -411,7 +413,7 @@ export async function unlinkReconciliation(
      is_business: null,
    })
    .eq('id', transactionId)
-    .eq('user_id', userId)
+    .eq('company_id', userId)

  if (updateError) {
    return { success: false, error: 'Failed to unlink transaction' }
@@ -434,12 +436,12 @@ export async function unlinkReconciliation(
 /** Fetch unlinked 1930 GL lines via the RPC function */
 export async function fetchUnlinkedGLLines(
  supabase: SupabaseClient,
-  userId: string,
+  companyId: string,
  dateFrom?: string,
  dateTo?: string
 ): Promise<UnlinkedGLLine[]> {
  const { data, error } = await supabase.rpc('get_unlinked_1930_lines', {
-    p_user_id: userId,
+    p_user_id: companyId,
    p_date_from: dateFrom || null,
    p_date_to: dateTo || null,
  })