* fix(enable-banking): pin Mobile BankID (decoupled) auth_method so Handelsbanken corporate connects We never sent auth_method to Enable Banking, so it fell back to the ASPSP's visible default — REDIRECT for Handelsbanken. For Handelsbanken *corporate* PSUs the redirect flow does not support Mobile BankID, so authorization failed right after the user approved in the BankID app. Mobile BankID at Handelsbanken is a DECOUPLED method flagged hidden_method=true, which Enable Banking only uses when requested explicitly. Resolve the bank's preferred auth method before /auth: query the ASPSP's auth_methods and pick the DECOUPLED (Mobile BankID) method when present, otherwise leave auth_method unset so banks that already work are untouched. The method name is read dynamically per psu_type, so it is robust across sandbox/production naming. - api-client: add approach/hidden_method to AuthMethod, fix ASPSP.auth_methods field name (was available_auth_methods, never populated), add getPreferredAuthMethod(), thread optional authMethod through startAuthorization - index: resolve authMethod in /connect and pass it on both fresh + reconnect - tests: cover method selection and request-body shaping Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * refactor(invoice-inbox): clean up bulk-selection toolbar UI Redesign the selection toolbar shown when inbox items are checked: one solid primary "Bokför valda" button with outlined secondary actions ("Fråga assistenten", "Ta bort") and a plain selection count. Removes the redundant "Avmarkera" button (users uncheck the still-visible box), fixes label clipping, and gives the toolbar more breathing room. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * chore(entitlements): bypass paywall in local development Add isPaywallBypassed() so all gated capabilities are testable locally without a subscription. Fires only on NODE_ENV=development (npm run dev) or an explicit DISABLE_PAYWALL=true escape hatch — production builds run under NODE_ENV=production and the entitlement suite runs under 'test', so both keep exercising the real gate. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * fix(tic): resolve enskild firma bolagsuppgifter via 12-digit personnummer TIC's Lens search is fuzzy and only resolves an enskild firma from the 12-digit (century-prefixed) personnummer; a 10-digit form fuzzy-matched an unrelated entity. Expand personnummer to 12 digits before querying and reject hits whose registration number is unrelated to the request. Add a "Hämta" action to the settings Bolagsuppgifter panel to (re)fetch on demand. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * feat(transactions): implement categorize core for bank transaction categorization - Added `categorize-core.ts` to handle categorization of bank transactions, supporting single and bulk operations. - Introduced `categorizeMatchedTransaction` and `bulkBookMatchedInboxItems` functions for transaction processing. - Implemented fiscal period validation and duplicate booking detection. - Enhanced logging and error handling for transaction categorization. feat(scripts): add diagnostic script for Handelsbanken ASPSP metadata - Created `check-handelsbanken-aspsp.mjs` to fetch and display available authentication methods for Handelsbanken. - Outputs metadata for business and personal PSU types, including default authentication methods. fix(migrations): increase statement timeout for SIE bulk delete operations - Updated `20260629160000_sie_bulk_delete_statement_timeout.sql` to set a longer statement timeout for bulk delete RPCs to prevent cancellations during large imports. feat(migrations): add bulk book inbox items to pending operations - Expanded `pending_operations` table to include `bulk_book_inbox_items` operation type in `20260630120000_pending_operations_add_bulk_book_inbox_items.sql`. - Supports bulk booking of matched inbox items against bank transactions. test(pg): add tests for replace_period_opening_balance_link RPC - Implemented tests in `replace-period-opening-balance-link.pg.test.ts` to validate the functionality of the opening-balance correction flow. - Ensured immutability of opening balance links and proper handling of posted vs. non-posted entries. * fix(sie-export): update journal entries and lines handling in SIE export tests * fix(migrations): resolve version collision on 20260629160000 The SIE bulk-delete statement_timeout migration shared version 20260629160000 with journal_entries_list_series_filter (merged from main via #798/#823), causing a schema_migrations_pkey duplicate key error on apply. Rename the branch's migration to 20260629160100. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> * fix(compliance): resolve compliance-swarm + review findings - opening-balance/correct: compensating rollback for the non-atomic storno+rebook so a mid-sequence failure never leaves two posted OB entries (ASVS V2.3); durable audit event on every failure path (V16); reference the original verifikationsnummer in the corrected entry per BFL 5 kap 5§; document that requireWrite already enforces write-role + membership (V8.2.1 was a false positive) - reports sources routes: validate the cursor date component as ISO (/^\d{4}-\d{2}-\d{2}$/) before use, 400 on malformed (ASVS V1.2), applied to both the VAT-declaration and trial-balance routes - AgentSessionList: await the rename PATCH, revert the optimistic title and toast on failure (ASVS V4.5) - bank booking: exclude same-batch siblings from the booking-time duplicate guard so bulk-booking distinct same-(date,amount) transactions no longer false-positives; pre-existing duplicate detection is preserved - BulkBookInboxDialog: drop the unsafe currency-based reverse_charge default, add an omvänd skattskyldighet advisory, and type VAT options to the backend VatTreatment union - OpeningBalanceRowEditor: hold onChange in a ref (synced in effect, not during render) so an unstable callback can't cause a render loop Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
73 lines
4.7 KiB
TypeScript
73 lines
4.7 KiB
TypeScript
import { describe, it, expect } from 'vitest'
|
||
import { tools, deriveToolMeta } from '../server'
|
||
|
||
describe('tools/list payload size guard', () => {
|
||
it('keeps the projected tools/list payload under the context-budget ceiling', () => {
|
||
// Mirror the real tools/list serializer, including the derived staging
|
||
// _meta (requires_approval / approve_tool / preflight) merged over any
|
||
// literal _meta — otherwise the guard under-measures the wire payload.
|
||
const projection = tools.map((t) => {
|
||
const meta = { ...(deriveToolMeta(t) ?? {}), ...(t._meta ?? {}) }
|
||
return {
|
||
name: t.name,
|
||
...(t.title ? { title: t.title } : {}),
|
||
description: t.description,
|
||
inputSchema: t.inputSchema,
|
||
...(t.outputSchema ? { outputSchema: t.outputSchema } : {}),
|
||
annotations: t.annotations,
|
||
...(Object.keys(meta).length > 0 ? { _meta: meta } : {}),
|
||
}
|
||
})
|
||
const payload = JSON.stringify({ tools: projection })
|
||
const approxTokens = Math.round(payload.length / 4)
|
||
// Ceiling progression: 20K → 25K → 30K → 31K → 31.5K → 32K → 36K.
|
||
// * 20K → 25K when item 8 of the agent-native API plan landed
|
||
// (additionalProperties: false on all inputSchemas + period_status in the
|
||
// staged operation envelope).
|
||
// * 25K → 30K when the agentic branch merged with main: catalog grew from
|
||
// ~75 to 83 tools (added gnubok_create_supplier, gnubok_list_pending_operations,
|
||
// gnubok_approve_pending_operation, gnubok_reject_pending_operation,
|
||
// gnubok_set_inbox_extracted_data from main + gnubok_get_agent_briefing,
|
||
// _remember_fact, _forget_fact, _feedback from the agent branch).
|
||
// * 30K → 31K when gnubok_match_batch_allocate and
|
||
// gnubok_bulk_book_transactions landed (PRs #603/#606/#608/#610). Each
|
||
// adds the shared STAGED_OPERATION_SCHEMA + a non-trivial inputSchema
|
||
// for the multi-tx flows. Descriptions already trimmed to 230–260 chars.
|
||
// * 31K → 31.5K when gnubok_link_transaction_to_journal_entry landed (PR
|
||
// #614). Same family as match_batch_allocate / bulk_book_transactions —
|
||
// closes the MCP parity gap with the existing REST endpoint so agents
|
||
// can attach a bank tx to an already-posted verifikat without creating
|
||
// duplicate bookkeeping. Description trimmed to ~180 chars.
|
||
// * 31.5K → 32K when gnubok_find_voucher_candidates_for_supplier_invoice +
|
||
// gnubok_link_supplier_invoice_to_voucher landed — the supplier-side
|
||
// mirror of the customer find/link voucher tools. The link tool inlines
|
||
// the shared STAGED_OPERATION_SCHEMA. Lets agents mark a leverantörs-
|
||
// faktura paid against an already-posted verifikat (no new bokföring),
|
||
// which is exactly the fix for invoices imported from Fortnox as open
|
||
// payables while their payment already exists in the SIE-imported GL.
|
||
// * 32K → 36K when top-level Tool.title (MCP spec 2025-06-18) landed on all
|
||
// 92 tools for Connectors Directory readiness; the ~10 longest descriptions
|
||
// were trimmed toward 180–200 chars to partly offset. Headroom reserved for
|
||
// the upcoming Skatteverket tools.
|
||
// * Held at 36K when gnubok_list_accrual_schedules (add/bokslut) merged with
|
||
// the categorize vat_amount override (#717): the combination crossed the
|
||
// ceiling by ~75, offset by trimming the 8 longest descriptions to ~200 chars.
|
||
// * 36K → 38K with the MCP legibility pass: the machine-readable staging
|
||
// contract now emits `_meta { requires_approval, approve_tool, preflight }`
|
||
// on every staging write (~40 tools) so an agent can tell — without reading
|
||
// prose — which writes need a follow-up gnubok_approve_pending_operation and
|
||
// which have a pre-flight; gnubok_get_agent_briefing also gained a `company`
|
||
// identity block in its outputSchema. This is wire data the agent depends
|
||
// on, not trimmable prose — hence a bump rather than a description trim.
|
||
// * 38K → 40K as the catalog grew from 92 to 103 tools (gnubok_link_document_
|
||
// to_voucher #804, gnubok_bulk_book_inbox_items, the categorize-core additions,
|
||
// plus per-line supplier-invoice overrides). Each new tool carries its
|
||
// inputSchema + staging _meta; the growth is genuine wire data, not prose,
|
||
// so descriptions are already at their trimmed floor (~180–220 chars).
|
||
// Long-term answer to growth is leaning harder on gnubok_search_tools — if this
|
||
// fires again, prefer trimming descriptions or making a tool opt-in via search
|
||
// before bumping further.
|
||
expect(approxTokens).toBeLessThan(40_000)
|
||
})
|
||
})
|