Psu type configuration (#248)

* feat: implement salary module with personnummer encryption, salary entries, tax tables, and AGI tracking

- Added personnummer encryption and decryption functions for secure storage.
- Created salary entries handling for journal entries including gross salary, tax withholding, and employer contributions.
- Implemented tax table lookup functionality for calculating tax amounts based on monthly income.
- Developed SQL migration for salary module including tables for payroll configuration, tax rates, employees, salary runs, salary run employees, salary line items, and AGI declarations.
- Established row-level security policies for all new tables to ensure company-scoped access.

* feat: add salary calculation modules for 2026

- Implemented engångsskatt calculation for one-time payments with tax brackets.
- Added löneväxling functionality for salary sacrifice to pension, including employer savings and warnings.
- Created pain.001 generator for salary batch payments in compliance with Swedish banking standards.
- Developed PDF template for payslips, including detailed breakdowns and employer costs.
- Generated seed data for Swedish tax tables for 2026, including SQL insert statements.
- Implemented traktamente calculations for per diem and mileage allowances, adhering to Skatteverket regulations.
- Added seed script for populating tax tables in the database.

* feat: Update meal reduction percentages in traktamente calculation

fix: Remove obsolete seed script for 2026 tax tables

feat: Extend SalaryRunStatus type to include 'corrected' status

feat: Implement KU10 XML generation endpoint for annual employee income statements

feat: Add endpoint for creating corrections to booked salary runs

feat: Implement endpoint for sending payslip PDFs to employees

feat: Create KU10 XML generator for annual reporting

feat: Add salary transaction matcher for auto-linking bank transactions to salary entries

chore: Add database migration for salary correction support

* feat: replace select elements with custom Select component for employment and salary types

* feat: enhance salary calculations with pension entry and avgifter category support

* feat: enhance banking settings with PSU type detection and error handling

* fix: improve error handling for bank connection and update access denial message

app/(dashboard)/settings/banking/page.tsx

@@ -17,6 +17,8 @@ export default function BankingSettingsPage() {
   const router = useRouter()
   const { toast } = useToast()
   const [bankConnectionError, setBankConnectionError] = useState<string | null>(null)
+  const [failedBankName, setFailedBankName] = useState<string | null>(null)
+  const [isAccessDenied, setIsAccessDenied] = useState(false)
   const syncInitiatedRef = useRef(false)
   const abortControllerRef = useRef<AbortController | null>(null)
   const unmountedRef = useRef(false)
@@ -93,13 +95,18 @@ export default function BankingSettingsPage() {
     }
 
     if (bankError) {
-      const errorMsg = decodeURIComponent(bankError)
+      let errorMsg: string
+      try { errorMsg = decodeURIComponent(bankError) } catch { errorMsg = bankError }
+      const bankName = searchParams.get('bank_name')
+      const errorCode = searchParams.get('bank_error_code')
       toast({
         title: 'Anslutning misslyckades',
         description: errorMsg,
         variant: 'destructive',
       })
       setBankConnectionError(errorMsg)
+      if (bankName) setFailedBankName(bankName)
+      if (errorCode === 'access_denied') setIsAccessDenied(true)
       router.replace('/settings/banking')
     }
   }, [searchParams, router, toast])
@@ -111,12 +118,21 @@ export default function BankingSettingsPage() {
           <AlertTriangle className="mt-0.5 h-5 w-5 shrink-0 text-destructive" />
           <div className="flex-1">
             <p className="text-sm font-medium text-destructive">{bankConnectionError}</p>
+            {isAccessDenied && failedBankName && (
+              <p className="mt-1 text-sm text-muted-foreground">
+                {failedBankName} nekade åtkomst. Om du använder ett privatkonto kan du prova att ansluta med kontotypen &quot;Privatkonto&quot; i bankväljaren nedan.
+              </p>
+            )}
             <p className="mt-1 text-sm text-muted-foreground">
               Du kan också <Link href="/import?mode=bank" className="underline hover:text-foreground">importera transaktioner via bankfil</Link> istället.
             </p>
           </div>
           <button
-            onClick={() => setBankConnectionError(null)}
+            onClick={() => {
+              setBankConnectionError(null)
+              setFailedBankName(null)
+              setIsAccessDenied(false)
+            }}
             className="shrink-0 rounded-md p-1 text-muted-foreground hover:text-foreground"
             aria-label="Stäng"
           >

app/api/extensions/enable-banking/callback/route.ts

@@ -54,6 +54,14 @@ export async function GET(request: Request) {
             .from('bank_connections')
             .update({ status: 'error', error_message: errorMessage, oauth_state: null })
             .eq('id', pendingConn.id)
+
+          // Include bank name and error code in redirect so the UI can offer PSU type retry
+          const params = new URLSearchParams({
+            bank_error: errorMessage,
+            ...(pendingConn.bank_name ? { bank_name: pendingConn.bank_name } : {}),
+            ...(error === 'access_denied' ? { bank_error_code: error } : {}),
+          })
+          return NextResponse.redirect(`${baseUrl}/settings/banking?${params.toString()}`)
         }
       } catch (cleanupError) {
         console.error('[enable-banking] Failed to clean up pending bank connection:', cleanupError)