fix(transactions): retire stale invoice match pointers when an invoice settles (#1313)

* fix(transactions): retire stale invoice match pointers when an invoice settles potential_invoice_id / potential_supplier_invoice_id are write-once import suggestions: nothing revisited them once written. With recurring same-amount invoices, an earlier suggestion pointed transaction A at invoice X, X was then paid off by transaction B, and A kept pointing at a fully paid invoice. The match dialog computed its amount diff against that invoice's 0 kr remaining_amount and reported a bogus partial payment, and the dead pointer also blocked a fresh suggestion: both re-suggestion scans require the column to be NULL. Add one shared helper, clearSettledInvoiceSuggestions(), that nulls a settled invoice's own suggestion column on every other transaction of the same company, scoped by company_id and by that invoice id only, never widening to the confirmed invoice_id / supplier_invoice_id links. It is best effort by construction: every caller has already booked a payment verifikat, so a failed cleanup logs and returns instead of failing the settle. Wired into every path where an invoice reaches paid through a payment: the dashboard and v1 match-invoice / match-supplier-invoice routes, the dashboard and v1 mark-paid routes, settleInvoicePayment, the batch allocation route (per fully settled allocation), linkInvoiceToVoucher and linkSupplierInvoiceToVoucher, linkTransactionToJournalEntry, and the MCP staged-operation executors for mark_invoice_paid and match_transaction_invoice. Partial payments are deliberately left alone: a partially paid invoice is still matchable. The v1 supplier match route also clears its own row's hint, which it was missing next to its dashboard twin. Read-time revalidation stays as the backstop for the paths not wired up here. countSuggestedMatches now delegates to listSuggestedMatches, which already revalidates candidates, so the worklist badge can no longer claim a number the list refuses to render. A data-only backfill migration retires the pointers already stranded in the database. It touches no journal entry, verifikat or period-locked data, is idempotent, and its status lists mirror lib/invoices/matchable-statuses.ts. Fixes #1259 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> * fix(transactions): wire the MCP batch allocation into the settled-pointer cleanup Review follow-up on the #1259 fix. commitMatchBatchAllocate calls the same match_batch_allocate RPC as the dashboard route, and gnubok_match_batch_allocate is a live staged MCP tool, so an agent settling a samlingsbetalning reproduced the issue exactly: the RPC nulls potential_invoice_id / potential_supplier_invoice_id only on the source transaction, leaving every other transaction of the company pointing at an invoice the batch just closed. The per-allocation loop moves into clearSettledBatchAllocationSuggestions() so the HTTP route and the MCP executor run the same code and cannot drift again, with a commit-path test pinning that only the fully settled allocation is retired. The enlarged badge scan is made safe. countSuggestedMatches now feeds up to 200 ids into listSuggestedMatches, past the 150 per .in() that countInboxDocuments already chunks for, so the candidate lookups are chunked at IN_CLAUSE_CHUNK too and their ids deduped. Both lookups now check .error: previously a 414, a 500 or an RLS change produced empty maps, an empty list and a zero badge with nothing logged. Every failure branch here logs companyId, matching the logAndZero convention. Also: restore the anchorSupplierInvoiceDocument doc comment above its own call in the dashboard supplier-invoice mark-paid route (the #1259 block had been inserted between them), and assert the transaction update payload in the v1 match-supplier-invoice test, which now covers the potential_supplier_invoice_id null that the route was missing next to its dashboard twin. Fixes #1259 Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
2026-07-30 18:52:24 +02:00
parent 1a5d205bd6
commit 27ae59040e
35 changed files with 1627 additions and 86 deletions
@@ -57,6 +57,11 @@ import { linkInvoiceToVoucher } from '@/lib/invoices/voucher-matching'
 import { planInvoicePayment } from '@/lib/invoices/apply-invoice-payment'
 import { findDuplicatePaymentCandidatesForInvoice } from '@/lib/invoices/duplicate-payment-candidates'
 import { linkSupplierInvoiceToVoucher } from '@/lib/invoices/supplier-voucher-matching'
+import { clearSettledInvoiceSuggestions } from '@/lib/invoices/clear-settled-invoice-suggestions'
+import {
+  clearSettledBatchAllocationSuggestions,
+  type BatchAllocationResult,
+} from '@/lib/invoices/clear-settled-batch-allocations'
 import { linkTransactionToJournalEntry } from '@/lib/transactions/link-journal-entry'
 import { getErrorEntry } from '@/lib/errors/structured-errors'
 import { parseSIEFile } from '@/lib/import/sie-parser'
@@ -2051,6 +2056,13 @@ async function commitMarkInvoicePaid(
    }
  }

+  // Fully settled: retire every transaction's suggestion pointer at this
+  // invoice (issue #1259). No exceptTransactionId: this flow is not driven by
+  // a bank transaction, so any pointer at it is now dead.
+  if (newStatus === 'paid') {
+    await clearSettledInvoiceSuggestions(supabase, companyId, 'invoice', invoiceId)
+  }
+
  // Notify subscribers: invoice.paid fans out to registered webhooks
  // (lib/webhooks/handler.ts). Best-effort: the payment is already committed,
  // so an emit failure must not fail the operation. Parity with the v1 and
@@ -2600,6 +2612,15 @@ async function commitMatchTransactionInvoice(
    notes: paymentNotes,
  })

+  // The invoice is now settled, so every OTHER transaction still carrying a
+  // suggestion pointer at it is dead: retire them (issue #1259). This
+  // operation's own row is cleared by the update just below.
+  if (isFullyPaid) {
+    await clearSettledInvoiceSuggestions(supabase, companyId, 'invoice', invoiceId, {
+      exceptTransactionId: transactionId,
+    })
+  }
+
  await supabase
    .from('transactions')
    .update({
@@ -5052,7 +5073,13 @@ async function commitMatchBatchAllocate(
    })
    return { error: error.message || 'Database error', status: 500 }
  }
-  const result = data as { ok: boolean; code?: string; details?: unknown; journal_entry_id?: string }
+  const result = data as {
+    ok: boolean
+    code?: string
+    details?: unknown
+    journal_entry_id?: string
+    allocations?: BatchAllocationResult[]
+  }
  if (!result || !result.ok) {
    return {
      error: result?.code || 'match_batch_allocate failed',
@@ -5060,6 +5087,12 @@ async function commitMatchBatchAllocate(
      data: result?.details as Record<string, unknown> | undefined,
    }
  }
+  // Every allocation the RPC settled in full retires its suggestion pointer
+  // from the company's OTHER transactions (issue #1259): the RPC only nulls
+  // them on the source tx. Same helper as the HTTP twin
+  // (app/api/transactions/[id]/match-batch/route.ts) so the two cannot drift.
+  await clearSettledBatchAllocationSuggestions(supabase, companyId, result.allocations ?? [], txId)
+
  // Structured audit-trail entry on success (compliance-swarm V16). Tx
  // count + JE id + the source tx id only: no amounts, no
  // counterparty identifiers, no descriptions. txId is included