* feat(providers): WINT migration provider behind WINT_MIGRATION_ENABLED
Adds WINT (wint.se) as a sixth migration provider, built against the
OpenAPI specs WINT's own API host serves publicly. Tier A scope: only the
partner-facing v1 endpoints are used; the general ledger is fetched as
vouchers/accounts and rendered as SIE 4E by our own sie-builder, with
opening balances for earlier years derived backward from the current-year
Ib anchor. Auth is the user's WINT login exchanged once for a JWT pair;
the password is never stored.
Ships dark: the wizard shows a disabled "Kommer snart" card, and the
server-side /connect gate rejects WINT until WINT_MIGRATION_ENABLED=true.
Live verification against a real WINT account is still outstanding.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(providers): harden WINT provider per PR #1446 review findings
Addresses CodeRabbit and Swedish accounting review feedback in one pass:
- Ib anchor selection now uses WINT's unfiltered fiscal-year list, so an
active year outside the allowed import window can never silently anchor
the wrong year; the voucher chain is extended through the anchor and a
per-year fetch failure fails that year loudly instead of sinking the
whole migration.
- Auth token exchange is strict: only LoginState Success with a complete
access+refresh pair mints a consent (a pair without a refresh token is
unrefreshable and would break days later).
- WintApiError no longer retains full response bodies (bounded 300-char
diagnostic; bodies can carry customer data and errors get logged).
- sie-builder refuses to render structurally invalid vouchers (missing
account number or booking date) and documents deleted-voucher gaps in a
#PROSA record per BFL 5 kap 6-7 §.
- Account classification: 20xx is equity, 83xx is financial income.
- SIE validator accepts EUBAS97 as BAS-based (standard kontoplanstyp; it
previously produced a false non-BAS warning on every WINT/Bollbok file).
- New tests: resolveConsent WINT refresh flow, credential upsert payload
(no mail/password persisted), WINT fetch failure path, EUBAS97 warning
regression, builder invalid-data rejection, vi.clearAllMocks hygiene.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* fix(import): pin EUBAS97 acceptance to the exact SIE spec value
Review follow-up on PR #1446: match EUBAS97 exactly instead of any
EUBAS* prefix, so the non-BAS kontoplan warning stays pinned to the four
kontoplanstyp values the SIE 4B spec enumerates (BAS95, BAS96, EUBAS97,
NE2007) rather than silently accepting unknown future variants.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
A Bokio integration token is scoped to one Bokio company and the company id is typed in by hand, so credentials for the user's other company imported that company's customers, suppliers and invoices with no error at all. Probe /companies/{id} before storing, mirroring the Bjorn Lunden /details probe, and refuse on a confident org-number mismatch.
Also surface the inbox mail body when nothing was attached: it was captured in email_body_text and never read back, which made Gmail's forwarding-confirmation mail unreadable and the forward impossible to complete.
Em dashes (—) and en dashes (–) had spread across comments, docs, tests,
and a few UI strings, reading as AI-generated boilerplate rather than
house style. Replaced each with punctuation matching its context: colon
for explanatory clauses, comma for asides, plain hyphen for numeric/legal
ranges (e.g. "21-23§"), "to"/"till" for date ranges, parentheses for
paired-dash asides. messages/en.json and messages/sv.json were fixed by
hand together to keep sv/en in sync.
Left untouched where the dash is the functional subject rather than
decorative punctuation: date-range-parser.ts's separator regex,
charset-repair.ts's CP1252 byte-mapping table (and its test), the SIE
encoding mojibake docs, generic-csv.ts's minus-sign normalizer, the
agent system-prompt files that already instruct against em dashes, and
a golden iXBRL test fixture compared byte-for-byte.
Also fixes two bugs surfaced along the way: an off-by-one in
ApiKeysPanel's scope-label split (a leftover from an earlier partial
pass), and a charset-repair test that had lost the literal en-dash it
exists to verify.
Regenerated the agent atom seed migration (skills:generate) since 27
SKILL.md files changed. Added a CLAUDE.md rule against em/en dashes,
with an explicit carve-out for the functional-dash cases above.
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
* feat(arcim-migration): Briox provider with SIE-over-API import
- Briox auth via account ID + application token (no app-level
credentials); both tokens rotate on refresh and are persisted
- New sie-fetcher pulls the general ledger as SIE through the
provider API for Fortnox, Briox and Bjorn Lunden
- Wizard stops on a failed SIE import and surfaces the real errors
instead of proceeding to the misleading migrate-guard message
- PROVIDER_SIE_ONLY_FORTNOX renamed to PROVIDER_SIE_NOT_SUPPORTED;
new PROVIDER_TOKEN_INVALID for rejected provider credentials
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* feat(bookkeeping): per-line accruals (periodisering) on invoices and supplier invoices
Defer revenue/costs per invoice line to 29xx/17xx interim accounts with
automatic monthly dissolution (nightly cron + catch-up at registration),
schedule cancellation on credit, year-end auto-detect exclusion for
already-scheduled invoices, invoice-inbox service-period extraction for
prefill, and an MCP tool to list schedules.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* feat(bokslut): iXBRL arsredovisning generation and Bolagsverket digital filing
Generate the annual report as iXBRL from a generated taxonomy registry
(K2 element lists, taxonomy:generate/check scripts + CI guard), expose it
via the fiscal-period API, and add the bolagsverket extension for digital
submission to eget utrymme with webhook-driven status tracking
(submissions table + pg tests, lifecycle events, year-end wizard UI).
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* test(mcp): raise origin-guard test timeout to 20s
The dynamic import pulls in the full server module; the parse alone
flirts with the 5s default under full-suite parallel load.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
* Add new scripts and documentation for K2 AB taxonomy generation and validation
- Introduced `generate-taxonomy-registry.ts` to automate the generation of the iXBRL taxonomy concept registry from official element lists and tuple models.
- Added `validate-ixbrl.mjs` for validating generated iXBRL reports against the official taxonomy package using Arelle.
- Included new documentation files:
- `k2-ab-arsredovisning-elementlista-2024-09-12_rev20250312_sv.xlsx`
- `tuple-innehallsmodell-arsredovisning-k2-2024-09-12.xlsx`
- `taxonomi-paket-2024-09-12_rev20250312.zip`
* Add tests for bookkeeping accruals dissolution and supplier invoices
- Implement tests for the POST /api/bookkeeping/accruals/[id]/dissolve route, covering success and error scenarios.
- Add tests for the DELETE /api/supplier-invoices/[id] route, including authentication checks and validation of invoice deletion conditions.
- Introduce tests for the Arcim migration provider client, ensuring token handling and error classification.
- Create tests for the Bolagsverket extension, validating submission role enforcement and environment settings.
- Add Zod schemas for Bolagsverket response payloads to ensure proper validation.
- Implement tests for MCP server's list accrual schedules, confirming registration and scope mapping.
- Add consistency tests for IXBRL document generation, ensuring duplicate facts and XML escaping are handled correctly.
- Introduce typed domain errors for accrual schedules to improve error handling in the service.
- Add tests for resolving consent with Briox token refresh concurrency, ensuring proper token management and error handling.
* fix(tests): update payload size guard comments to reflect recent changes in tool descriptions and ceiling adjustments
* fix(gitattributes): mark generated JSON files in bokslut taxonomy as linguist-generated
* feat(migrations): add backfill for invoices.journal_entry_id and fallback for next_voucher_number user_id
* feat(bokslut): enhance compliance and financial processing features with new submission details and security measures
---------
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Mattsson