feat(skatteverket): production-ready momsdeklaration submission (#380)

* feat(skatteverket): production-ready momsdeklaration submission Brings the Skatteverket extension up to a state where it can ship moms declaration submission to Vercel production. Verified end-to-end against SKV's Komplett testtjänst — all 8 momsdeklaration operations tested (kontrollera, spara/hämta/radera utkast, lås/lås upp, hämta inlämnade, hämta beslutade) plus signing-link return. Bundles three coherent changes: 1. Skatteverket extension (the main work) - extensions.config.json: enable `skatteverket`, drop `invoice-inbox` and `ai-agent` (those were enabled in config but lacked AWS env vars in prod, so they loaded but failed at runtime) - lib/reports/vat-declaration.ts: extend ACCOUNT_RUTA to populate Ruta 06 (uttag 3401–3403), Ruta 20–24 (reverse-charge bases from 4xxx cost accounts), Ruta 50 (import 4545–4547), and Ruta 42 (3404/3994/3980); delete the supplier-type heuristic that made Ruta 20 and Ruta 23 always 0 - extensions/general/skatteverket/lib/token-store.ts: work around three real prod schema-drift issues — wrong column on read/delete (was `company_id`, schema only has `user_id`), missing UNIQUE(user_id) constraint that makes UPSERT fail (switched to DELETE+INSERT), missing RLS policies (switched to service-role client). Refresh path now reuses existing row's company_id when none is passed. - extensions/general/skatteverket/index.ts: 9 sites switched from ctx.companyId to ctx.userId for the token-store key; pass companyId from the OAuth callback - extensions/general/skatteverket/types.ts + components/reports/ SkatteverketPanel.tsx: align field names with v1.0.24 RAML (signeringsLank/kontrollResultat/resultat/kod/status/beskrivning). Without this, the signing link never displayed. - SkatteverketPanel: add Lås upp + Radera utkast + Hämta utkast + Hämta beslut buttons so the full lifecycle is reachable from the UI - lib/reports/__tests__/vat-declaration.test.ts: rewritten to match the refactored calculator; new fixtures for cost-account-based reverse charge (Ruta 20/21/22/23/24), Ruta 50 import, Ruta 06 uttag, Ruta 42 expansion; SKV §4.1.1.4 cross-field contract checks - supabase/migrations/20260428120000_skatteverket_tokens_user_id_unique.sql: idempotently adds the missing UNIQUE(user_id) constraint - scripts/*: dev-only helpers used during the prod-of-test verification (create test company, seed VAT data, inspect token state, etc.) 2. Journal-entries cancelled-status filter - app/api/bookkeeping/journal-entries/route.ts: when no status filter is supplied, exclude `cancelled` entries by default - supabase/migrations/20260428153500_journal_entries_with_related_exclude_statuses.sql 3. Swedish e-invoicing skill (reference docs only — no runtime code) - .claude/skills/swedish-e-invoicing/ Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * fix(skatteverket): address PR review findings - panel: handleFetchDraft read `result.data?.last` (typo) — switched to `result.data?.locked` to match the field defined in SkatteverketUtkastResponse and the v1.0.24 RAML. The "(låst)" suffix on the success message would silently never appear before this fix. - api-client: getValidToken had no concurrency guard, so two parallel SKV requests from the same user could both call /token with the same refresh_token. SKV rotates the refresh_token on first use, so the second call would 401 with REFRESH_EXHAUSTED-adjacent failures. With the new 6-button UI on SkatteverketPanel, rapid clicks made this a realistic trigger. Added an in-process Promise map keyed on userId that coalesces concurrent refresh attempts; cross-process races are mitigated by re-reading tokens inside the critical section before calling refreshAccessToken (if another process refreshed already, we use the newer token instead of burning the old refresh_token). - migration 20260428120000: dedup query used `created_at < max(...)`, which failed to remove duplicates inserted in the same second. The subsequent ALTER TABLE … ADD CONSTRAINT would then abort. Switched to ctid (Postgres physical row identifier) to break timestamp ties. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * fix(skatteverket): throw on token-store SELECT error before destructive DELETE The company_id pre-read in storeTokens used destructuring that discarded the error field. If the service-role SELECT failed for any reason (network blip, overloaded DB, transient permissions issue), `existing` became null, `resolvedCompanyId` stayed undefined, and execution fell through to the DELETE. The old row got deleted successfully, then the INSERT omitted company_id and failed with the NOT NULL constraint violation — leaving the user with no token row at all and forcing a fresh BankID handshake. Now we capture the SELECT error and throw before the DELETE runs. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-28 18:26:03 +02:00
parent 0363aff1d4
commit cd64c0e3fb
35 changed files with 3549 additions and 486 deletions
@@ -7,6 +7,5 @@ export const ENABLED_EXTENSION_IDS: ReadonlySet<string> = new Set([
  'tic',
  'mcp-server',
  'cloud-backup',
-  'invoice-inbox',
-  'ai-agent',
+  'skatteverket',
 ])
@@ -6,8 +6,7 @@ import { arcimMigrationExtension } from '@/extensions/general/arcim-migration'
 import { ticExtension } from '@/extensions/general/tic'
 import { mcpServerExtension } from '@/extensions/general/mcp-server'
 import { cloudBackupExtension } from '@/extensions/general/cloud-backup'
-import { invoiceInboxExtension } from '@/extensions/general/invoice-inbox'
-import { aiAgentExtension } from '@/extensions/general/ai-agent'
+import { skatteverketExtension } from '@/extensions/general/skatteverket'

 export const FIRST_PARTY_EXTENSIONS: Extension[] = [
  enableBankingExtension,
@@ -16,6 +15,5 @@ export const FIRST_PARTY_EXTENSIONS: Extension[] = [
  ticExtension,
  mcpServerExtension,
  cloudBackupExtension,
-  invoiceInboxExtension,
-  aiAgentExtension,
+  skatteverketExtension,
 ]
@@ -81,37 +81,14 @@ export const EXTENSION_DEFINITIONS: Record<string, ExtensionDefinition[]> = {
          "subscriptionNotice": "Kräver ett Google-konto. Uppladdningar sker direkt till din Drive — ingen data lagras hos tredje part utöver Google."
    },
    {
-          "slug": "invoice-inbox",
-          "name": "Dokumentinkorg",
-          "sector": "general",
-          "category": "import",
-          "icon": "Inbox",
-          "dataPattern": "both",
-          "description": "AI-klassificering och extraktion av leverantörsfakturor och kvitton",
-          "longDescription": "Varje bolag får en unik fakturainkorg-adress. Fakturor som skickas dit fångas automatiskt, klassificeras med AI (leverantör, belopp, moms) och matchas mot transaktioner. Kräver AWS Bedrock och Resend.",
-          "readsCoreTables": [
-                "document_attachments",
-                "suppliers",
-                "transactions"
-          ],
-          "hasOwnData": true
-    },
-    {
-          "slug": "ai-agent",
-          "name": "AI-agent (beta)",
+          "slug": "skatteverket",
+          "name": "Skatteverket Integration",
          "sector": "general",
          "category": "operations",
-          "icon": "Sparkles",
+          "icon": "FileCheck",
          "dataPattern": "core",
-          "description": "Autonom bokföring — AI föreslår match + bokföring, du godkänner.",
-          "longDescription": "När ett kvitto kommer in föreslår AI-agenten först vilken banktransaktion som matchar, sedan hur det ska bokföras. Du granskar och godkänner varje steg — inget bokförs automatiskt. Om AI:n inte kan producera ett förslag (oläslig bild, ingen matchande transaktion, osäker moms) frågar den dig specifikt vad som behövs.",
-          "readsCoreTables": [
-                "invoice_inbox_items",
-                "transactions",
-                "ai_proposals",
-                "ai_requests",
-                "processing_history"
-          ]
+          "description": "Skicka momsdeklaration direkt till Skatteverket via BankID.",
+          "longDescription": "Anslut till Skatteverket med BankID och skicka din momsdeklaration direkt från gnubok. Spara utkast, validera, lås och signera — utan att lämna appen."
    },
  ],
 }
@@ -8,5 +8,4 @@ export const WORKSPACES: Record<string, ComponentType<WorkspaceComponentProps>>
  'general/arcim-migration': dynamic(() => import('@/components/extensions/general/ArcimMigrationWorkspace')),
  'general/tic': dynamic(() => import('@/components/extensions/general/TicWorkspace')),
  'general/cloud-backup': dynamic(() => import('@/components/extensions/general/CloudBackupWorkspace')),
-  'general/invoice-inbox': dynamic(() => import('@/components/extensions/general/InvoiceInboxWorkspace')),
 }