feat: document inbox + fix MCP pending operations user_id (#172)

* fix: always use business PSU type for bank connections EF (sole trader) users connecting to Nordea got personal accounts because psu_type was set to 'personal' based on entity_type. Since gnubok is accounting software, all bank connections should use 'business' PSU type regardless of entity type. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * feat: document inbox extension with AI classification Add invoice-inbox extension for email-based document processing with AI-powered classification, supplier matching, and inbox management. Includes MCP tools for document upload/listing, migration, and supporting changes across document service, API keys, and banking. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: disable invoice-inbox extension, use dynamic import in MCP server Keep invoice-inbox out of extensions.config.json until ready for production. MCP server now dynamically imports classifyDocument to avoid breaking when the extension is disabled. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * fix: correct file size error message in invoice-inbox upload Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-03 16:45:17 +02:00
parent 1dcec370b6
commit c4a6d16e94
19 changed files with 4444 additions and 306 deletions
@@ -0,0 +1,50 @@
+-- Document Ingestion Phase 1: classification support + email connections
+-- Adds raw LLM response storage and Gmail OAuth connection table
+
+-- 1. Add raw_llm_response column to invoice_inbox_items
+ALTER TABLE public.invoice_inbox_items
+  ADD COLUMN IF NOT EXISTS raw_llm_response jsonb;
+
+-- 2. Email connections for Gmail OAuth
+CREATE TABLE public.email_connections (
+  id              uuid DEFAULT gen_random_uuid() PRIMARY KEY,
+  company_id      uuid NOT NULL REFERENCES public.companies(id) ON DELETE CASCADE,
+  user_id         uuid NOT NULL REFERENCES auth.users(id) ON DELETE CASCADE,
+  provider        text NOT NULL DEFAULT 'gmail'
+                    CHECK (provider IN ('gmail')),
+  email_address   text NOT NULL,
+  encrypted_token text NOT NULL,   -- AES-256-GCM: base64(iv):base64(authTag):base64(ciphertext)
+  last_sync_at    timestamptz,
+  gmail_label_id  text,            -- ID of the gnubok-processed Gmail label
+  status          text NOT NULL DEFAULT 'active'
+                    CHECK (status IN ('active','expired','revoked','error')),
+  error_message   text,
+  created_at      timestamptz NOT NULL DEFAULT now(),
+  updated_at      timestamptz NOT NULL DEFAULT now(),
+  UNIQUE(company_id, email_address)
+);
+
+-- RLS
+ALTER TABLE public.email_connections ENABLE ROW LEVEL SECURITY;
+
+CREATE POLICY "email_connections_select" ON public.email_connections
+  FOR SELECT USING (company_id IN (SELECT public.user_company_ids()));
+CREATE POLICY "email_connections_insert" ON public.email_connections
+  FOR INSERT WITH CHECK (company_id IN (SELECT public.user_company_ids()));
+CREATE POLICY "email_connections_update" ON public.email_connections
+  FOR UPDATE USING (company_id IN (SELECT public.user_company_ids()));
+CREATE POLICY "email_connections_delete" ON public.email_connections
+  FOR DELETE USING (company_id IN (SELECT public.user_company_ids()));
+
+-- Indexes
+CREATE INDEX idx_email_connections_company_status
+  ON public.email_connections(company_id, status);
+
+-- updated_at trigger
+CREATE TRIGGER email_connections_updated_at
+  BEFORE UPDATE ON public.email_connections
+  FOR EACH ROW EXECUTE FUNCTION public.update_updated_at_column();
+
+-- 3. Better index for classification cron queries on inbox items
+CREATE INDEX IF NOT EXISTS idx_inbox_items_company_status_created
+  ON public.invoice_inbox_items(company_id, status, created_at);