fix: downgrade missing extension env vars to warning, add error boundaries and cron auth fixes

- Change missing extension env vars from throw to log.warn (graceful degradation)
- Move initialized flag after all init steps complete
- Add error.tsx and loading.tsx for dashboard error boundaries
- Fix cron route auth header checks
- Add ensureInitialized() to journal entry reverse and invoice mark-paid/sent routes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

app/api/bookkeeping/journal-entries/[id]/reverse/__tests__/route.test.ts

@@ -12,6 +12,10 @@ vi.mock('@/lib/supabase/server', () => ({
   createClient: () => mockCreateClient(),
 }))
 
+vi.mock('@/lib/init', () => ({
+  ensureInitialized: vi.fn(),
+}))
+
 const mockReverseEntry = vi.fn()
 vi.mock('@/lib/bookkeeping/engine', () => ({
   reverseEntry: (...args: unknown[]) => mockReverseEntry(...args),

app/api/bookkeeping/journal-entries/[id]/reverse/route.ts

@@ -1,6 +1,9 @@
 import { createClient } from '@/lib/supabase/server'
 import { NextResponse } from 'next/server'
 import { reverseEntry } from '@/lib/bookkeeping/engine'
+import { ensureInitialized } from '@/lib/init'
+
+ensureInitialized()
 
 export async function POST(
   request: Request,

app/api/deadlines/status/cron/route.ts

@@ -14,7 +14,7 @@ export async function GET(request: Request) {
   const authHeader = request.headers.get('authorization')
   const cronSecret = process.env.CRON_SECRET
 
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+  if (!cronSecret || authHeader !== `Bearer ${cronSecret}`) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 

app/api/documents/verify/cron/route.ts

@@ -16,7 +16,7 @@ export async function GET(request: Request) {
   const authHeader = request.headers.get('authorization')
   const cronSecret = process.env.CRON_SECRET
 
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+  if (!cronSecret || authHeader !== `Bearer ${cronSecret}`) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 

app/api/extensions/enable-banking/sync/cron/route.ts

@@ -21,7 +21,7 @@ export async function GET(request: Request) {
   const authHeader = request.headers.get('authorization')
   const cronSecret = process.env.CRON_SECRET
 
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+  if (!cronSecret || authHeader !== `Bearer ${cronSecret}`) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 

app/api/extensions/push-notifications/cron/route.ts

@@ -22,7 +22,7 @@ export async function GET(request: Request) {
   const authHeader = request.headers.get('authorization')
   const cronSecret = process.env.CRON_SECRET
 
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+  if (!cronSecret || authHeader !== `Bearer ${cronSecret}`) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 

app/api/invoices/[id]/mark-paid/__tests__/route.test.ts

@@ -13,6 +13,10 @@ vi.mock('@/lib/supabase/server', () => ({
   createClient: () => Promise.resolve(mockSupabase),
 }))
 
+vi.mock('@/lib/init', () => ({
+  ensureInitialized: vi.fn(),
+}))
+
 const mockCreateInvoicePaymentJournalEntry = vi.fn()
 const mockCreateInvoiceCashEntry = vi.fn()
 vi.mock('@/lib/bookkeeping/invoice-entries', () => ({

app/api/invoices/[id]/mark-paid/route.ts

@@ -5,8 +5,11 @@ import {
   createInvoiceCashEntry,
 } from '@/lib/bookkeeping/invoice-entries'
 import { MarkInvoicePaidSchema } from '@/lib/api/schemas'
+import { ensureInitialized } from '@/lib/init'
 import type { EntityType, Invoice } from '@/types'
 
+ensureInitialized()
+
 /**
  * POST /api/invoices/[id]/mark-paid
  *

app/api/invoices/[id]/mark-sent/route.ts

@@ -1,8 +1,11 @@
 import { createClient } from '@/lib/supabase/server'
 import { NextResponse } from 'next/server'
 import { createInvoiceJournalEntry } from '@/lib/bookkeeping/invoice-entries'
+import { ensureInitialized } from '@/lib/init'
 import type { EntityType, Invoice } from '@/types'
 
+ensureInitialized()
+
 /**
  * POST /api/invoices/[id]/mark-sent
  *

app/api/tax-deadlines/cron/route.ts

@@ -14,7 +14,7 @@ export async function GET(request: Request) {
   const authHeader = request.headers.get('authorization')
   const cronSecret = process.env.CRON_SECRET
 
-  if (cronSecret && authHeader !== `Bearer ${cronSecret}`) {
+  if (!cronSecret || authHeader !== `Bearer ${cronSecret}`) {
     return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
   }
 

app/api/transactions/[id]/categorize/route.ts

@@ -201,7 +201,7 @@ export async function POST(
   if (is_business && body.account_override) {
     // Validate the account exists in the user's chart of accounts
     const { data: accountExists } = await supabase
-      .from('accounts')
+      .from('chart_of_accounts')
       .select('account_number, account_class')
       .eq('user_id', user.id)
       .eq('account_number', body.account_override)