Mattsson
8a6ce7093e
* feat: implement skattekonto drift detection and alerting - Add skattekonto drift computation logic to compare Skatteverket's saldo with GL 1630 sum. - Implement alerting mechanism for significant drift changes, with throttling to prevent alert spamming. - Introduce database functions to sum GL 1630 entries and list unbooked skattekonto rows. feat: create own account transfer detection - Develop logic to detect transfers between a company's own cash accounts based on counterparty IBAN. - Implement tests to validate detection logic under various scenarios, including matching and non-matching IBANs. feat: establish cash accounts as a first-class entity - Create cash_accounts table to manage routable cash accounts, replacing ad-hoc JSONB structures. - Implement functions for listing, upserting, and managing cash accounts, including primary account designation. feat: enhance GL line reconciliation functionality - Modify get_unlinked_1930_lines RPC to accept any account number for reconciliation, improving flexibility for different currencies. - Update related functions to ensure compatibility with the new cash_accounts structure. feat: capture counterparty IBAN in transactions - Add counterparty_iban column to transactions table to facilitate intra-account transfer detection. - Create index for efficient lookups based on counterparty IBAN. * feat: Enhance cash account handling and reconciliation processes - Updated reconciliation routes to enforce cash account validation for all account numbers, including '1930'. - Improved error handling for unknown cash accounts in reconciliation status and unmatched entries routes. - Changed CashAccountSelector to use sessionStorage instead of localStorage for better data privacy. - Fixed mapping for employer payroll taxes to route to the correct account (2730 instead of 2731). - Added safety checks for company IDs in the guessCounterAccount function to prevent injection vulnerabilities. - Introduced atomic RPC for setting primary cash accounts to avoid intermediate states during updates. - Seeded default cash accounts for new companies to ensure reconciliation routes are accessible from day one. - Updated email notifications for drift detection to avoid exposing sensitive financial data. - Enhanced bank reconciliation logic to handle multi-currency transactions correctly. - Renamed and updated tests to reflect changes in the underlying RPCs and ensure accurate coverage. - Migrated existing cash account rules to correct mappings in compliance with Swedish accounting standards.
45 lines
1.7 KiB
TypeScript
45 lines
1.7 KiB
TypeScript
import { createClient } from '@/lib/supabase/server'
|
|
import { NextResponse } from 'next/server'
|
|
import { ensureInitialized } from '@/lib/init'
|
|
import { requireCompanyId } from '@/lib/company/context'
|
|
import { createExtensionContext } from '@/lib/extensions/context-factory'
|
|
import { computeSkattekontoDrift } from '@/extensions/general/skatteverket/lib/skattekonto-drift'
|
|
import { createLogger } from '@/lib/logger'
|
|
|
|
ensureInitialized()
|
|
|
|
const log = createLogger('skattekonto-drift-route')
|
|
|
|
/**
|
|
* GET /api/extensions/skatteverket/skattekonto/drift
|
|
*
|
|
* Returns the current SKV saldo vs GL 1630 drift snapshot for the active
|
|
* company. Backs the dashboard SkattekontoDriftTile. Returns null when no
|
|
* snapshot exists yet (fresh company, never synced).
|
|
*
|
|
* Access is recorded through the structured logger (Sentry / Vercel logs)
|
|
* because the response carries sensitive GL drift figures. Persisting every
|
|
* dashboard tile poll into event_log would be too noisy — the structured
|
|
* log line gives an auditable record without overrunning the 30-day event
|
|
* log retention (SOC 2 CC8.1, ISO 27001 A.8.15).
|
|
*/
|
|
export async function GET(_request: Request) {
|
|
const supabase = await createClient()
|
|
const { data: { user } } = await supabase.auth.getUser()
|
|
|
|
if (!user) {
|
|
return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
|
|
}
|
|
|
|
const companyId = await requireCompanyId(supabase, user.id)
|
|
const ctx = createExtensionContext(supabase, user.id, companyId, 'skatteverket')
|
|
|
|
const drift = await computeSkattekontoDrift(ctx)
|
|
log.info('skattekonto drift snapshot accessed', {
|
|
userId: user.id,
|
|
companyId,
|
|
hasDrift: drift !== null,
|
|
})
|
|
return NextResponse.json({ data: drift })
|
|
}
|