* feat: invoicing & account-security polish bundle
Five independent improvements bundled to ship together:
- BankID/password lockout fix: BankID-only users could enroll MFA and
brick themselves (Supabase requires AAL2 to change password or unenroll
MFA, and AAL2 needs a password sign-in). New app_metadata.has_password
flag tracks this; middleware gates /mfa/enroll behind it, /account/set-
password is the unlock path, SecuritySettings shows a banner, and
/api/account/password is the single write path that flips the flag.
Backfill script for existing users.
- Swish invoice payment method: company_settings.swish + invoice_show_swish
columns, validation in lib/api/schemas.ts (accepts 123XXXXXXX företag or
07XXXXXXXX mobile, strips whitespace/hyphens), rendered on invoice PDFs.
- Send-reminders kill switch: per-company company_settings.send_invoice_
reminders toggle in PdfPrintSettings/Automatisering. Reminder processor
also tightened: positive status allowlist (sent + overdue) so terminal
statuses can never match; skip when customer already responded via
reminder link; race-window re-check before send.
- First-invoice logo prompt: one-shot dialog when creating the first
invoice without a logo (issue #520). Self-limits via head-only count.
- SIE export opening-balance fallback: route IB through getOpeningBalances
so the compute_prior_opening_balances RPC supplies #IB after multi-year
imports where opening_balance_entry_id is intentionally NULL. Previously
#IB silently went to zero and #UB collapsed to current-period movements.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* fix(account-polish): address PR review feedback
- BankID-link path (extensions/general/tic/index.ts): read-merge-write
app_metadata instead of passing { bankid_linked: true } alone.
updateUserById REPLACES app_metadata wholesale, so the previous code
would have wiped has_password for any user who later linked BankID,
causing the set-password banner to (incorrectly) reappear and blocking
the standard MFA enrollment button. The comment is now corrected.
- Middleware (lib/supabase/middleware.ts): thread inner returnTo through
the /mfa/enroll → /account/set-password redirect so the user lands on
their original destination after the full chain completes, not on /.
- safeReturnTo helper (lib/auth/safe-return-to.ts): replace the
starts-with-/-but-not-// guard on mfa/enroll and set-password pages.
The previous guard let /\evil.com and /@evil.com through. The new
helper parses against a synthetic base origin and verifies it matches.
- set-password page (app/(auth)/account/set-password/page.tsx): remove
CLAUDE.md design system violations — bg-gradient-to-b on page bg,
inline shadow-md style on the card, space-y-5, font-medium on the h1,
rounded-xl on the card. Flat surface, hairline border, font-display
h1 per the design tokens.
- Swish dedup (lib/payments/swish.ts): extract normaliseSwish() and
isValidSwish() helpers and use them in lib/api/schemas.ts,
components/settings/BankDetailsForm.tsx, and the invoicing settings
page. Single source of truth for the regex.
- Password route (app/api/account/password/route.ts): emit a structured
success log so the audit pipeline can detect password-set events, not
just failures.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
* feat(voucher): add create voucher and correct entry previews; update commit methods
* feat: add support for pending operations in API key scopes and OAuth client management
- Introduced new API key scopes for reading and approving pending operations.
- Updated the scope groups to include pending operations.
- Added new tools for listing and managing pending operations.
- Implemented OAuth client registration and revocation endpoints.
- Created a UI panel for managing OAuth clients, including registration and revocation.
- Added tests for pending operations tools and OAuth allowlist functionality.
- Implemented a database migration for OAuth client registrations with appropriate policies and constraints.
* feat: Implement OAuth client registration rate limiting and enhance security measures
- Added IP-based rate limiting to the OAuth client registration endpoint to prevent enumeration attacks.
- Introduced a service-role client for allowlist lookups, ensuring trust boundaries are maintained.
- Updated error responses to be uniform across different types of redirect URI validation failures.
- Enhanced tests to reflect changes in OAuth scope handling, ensuring fallback to read-only scopes when no scopes are provided.
- Improved handling of high-risk pending operations, requiring explicit confirmation for approvals.
- Added audit logging for OAuth client revocations and pending operation approvals/rejections to maintain a security audit trail.
- Refactored API key scope management to include default read-only scopes for OAuth-issued keys and added segregation-of-duties checks.
* feat: add recurring invoice scheduling functionality
- Implemented recurring invoice schedules with a new database schema.
- Created API routes for managing recurring invoices (GET and POST).
- Added cron job to automatically generate invoices based on schedules.
- Developed service functions for computing next run dates and executing schedules.
- Added tests for the new functionality, including validation and success cases.
- Introduced error handling for various scenarios in the invoice creation process.
* feat: refine VAT rate validation and enhance recurring invoice handling
* fix(reminder-processor): filter out credited invoices in overdue reminders
* feat: implement linking of transactions to journal entries
- Added POST endpoint for linking a bank transaction to an existing journal entry without creating new bookkeeping.
- Implemented validation for required fields and error handling for various scenarios (e.g., missing journal_entry_id, transaction already linked, journal entry not found).
- Created tests for the new endpoint to cover various cases including successful linking, error responses, and invoice handling.
- Introduced duplicate payment detection logic to prevent double-booking of bank receipts.
- Added a new component for correction affordance in the UI to facilitate user corrections on journal entries.
* feat(invoice-matching): enhance force matching with expected journal entry validation
* feat(invoices): implement inline membership checks for invoice-number RPCs and enhance error handling
* fix(invoices): enhance unpaid amount calculation to support currency-specific rounding
* fix(api-client): handle response.text() error for 403 status in skvRequest
* feat(invoices): implement öresavrundning logic and next invoice number preview
- Added `getDisplayTotal` utility to handle rounding for SEK invoices based on company settings.
- Updated `InvoicesPage` to utilize the new rounding logic when displaying totals.
- Introduced `peek_next_invoice_number` function to allow previewing the next invoice number without consuming the sequence.
- Modified invoice number generation to remove the year prefix and prevent truncation of numbers exceeding three digits.
- Enhanced tests for invoice number generation and rounding functionality to ensure correctness.
- Updated PDF template to reflect new rounding logic for totals and display appropriate values.
- Adjusted company switcher to hide options in sandbox mode.
- Improved error handling and logging in sandbox seeding process.
* fix(skatteverket): remove unused scope labels from SCOPE_LABELS and DEFAULT_SCOPES
* feat: make invoice_number nullable and assign on send
- Updated the invoices table to allow invoice_number to be nullable.
- Modified the logic to assign invoice numbers only when the invoice status transitions to 'sent'.
- Refactored related code to handle nullable invoice numbers, including UI components and API routes.
- Added tests to ensure correct behavior when handling invoices with null invoice numbers.
- Introduced a utility function to display invoice numbers, defaulting to '(Utkast)' for drafts.
* fix: update fiscal period handling to return names of open periods in error messages
* fix: enhance period creation logic to account for company-wide bookkeeping lock-through
* fix: remove unnecessary customer_type field from customer insertion query
* fix: scope invoice number count query to specific companies to avoid test interference
* feat: Implement atomic invoice number generation and ensure compliance with invoice numbering rules
- Introduced `ensureInvoiceNumber` function to assign invoice numbers atomically, handling concurrency and ensuring compliance with document types.
- Updated invoice-related components to utilize the new `invoiceNumberDisplay` utility for consistent invoice number formatting.
- Added checks to ensure that invoices in non-draft statuses have valid invoice numbers, preventing violations of legal requirements.
- Created tests for the new invoice number generation logic, ensuring correct behavior under various scenarios, including concurrent requests.
- Added a draft banner to PDF templates for invoices without assigned numbers, clarifying their status to users.
- Updated database migrations to support the new atomic invoice number generation logic and enforce constraints on invoice statuses.
* chore: remove Sentry, consolidate migrations, add test coverage
Remove @sentry/nextjs and all Sentry integration code — error tracking
now handled by Recapt. Consolidate 22 incremental migrations into a
single schema sync migration. Add 6 new test suites (auth, invoice
matching, VAT rules, opening balances) and extend report tests with
edge cases. Update Docker image name to gnubok, sync crontabs and
extension presets, fix CSP missing space, simplify journal entry
missing-document dialog.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix: remove viewer bank import migration never applied to production
20260413150000_viewer_bank_import_permissions.sql (PR #234) was merged
to main but never applied to the production database. It references
current_active_company_id() which does not exist in production either.
This breaks fresh installs and Supabase preview branches because the
migration runs before the consolidated schema sync.
Remove it so the migration chain matches production. The viewer bank
import RLS policies should be re-added in a future migration alongside
the helper functions they depend on.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
* fix: correct delete policies for tables without company_id column
Seven tables in the generic delete-policy loop don't have a direct
company_id column, causing fresh installs to fail with "column
company_id does not exist". Fix by moving them out of the loop:
- invoice_items, journal_entry_lines, receipt_line_items,
supplier_invoice_items → join through parent table
- extension_toggles, notification_settings, push_subscriptions →
user-scoped (auth.uid() = user_id)
All policies match their existing production definitions.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
- Expand BAS reference from ~180 to ~1,276 accounts (full BAS Kontoplan 2026)
with K2 exclusion flags, per-class data files, and computed SRU codes
- Evolve invoice inbox into unified document inbox handling invoices, receipts,
and government letters with AI-powered classification (Claude Haiku Vision)
- Add multi-pass document-to-transaction matching engine with greedy assignment
for both supplier invoices (reference/amount/date/name) and receipts
(weighted amount/merchant/date scoring)
- Add supplier invoice matching in transaction ingest pipeline
- Inject booking template suggestions into AI extraction prompts
- Surface matched documents in swipe categorization UI with one-tap booking
- Auto-activate missing BAS accounts during SIE import against full reference
- Add K2 filter toggle in Chart of Accounts manager
- Add receipt confirmation route with BFNAR representation fields
- Add database migrations for K2 support and document matching columns
- Remove obsolete extension migration scripts
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
