Mattsson
bb855d2ddc
* feat(branding): implement dynamic branding in service worker and reports * feat(auth): enhance API key scopes and add bookkeeping write scope - Updated transaction write scope description to include additional tools. - Enhanced reports read scope description to reflect new functionality. - Introduced bookkeeping write scope with relevant description. - Updated SCOPE_GROUPS to include bookkeeping domain. - Modified TOOL_SCOPE_MAP to include new bookkeeping operations. - Updated validateApiKey function to return api_key_id and api_key_name for better actor attribution. feat(tests): add unit tests for MCP resource registry - Created tests for data resources to ensure all required fields are present. - Added tests for resource query parsing and retrieval. feat(resources): implement MCP resources for company and accounting data - Added capabilities resource to expose API key capabilities based on granted scopes. - Implemented chart of accounts resource to retrieve active BAS chart. - Created company current resource to fetch active company details. - Developed active fiscal period resource to check posting eligibility. - Implemented recent activity resource to fetch latest journal entries, invoices, and transactions. - Added VAT treatments resource to provide available VAT rates per customer type. feat(pending-operations): introduce risk tiers for operations - Added risk level classification for pending operations to determine auto-commit eligibility. - Implemented functions to classify operation risk levels and identify high-risk operations. feat(migrations): add actor model and risk tier to pending operations - Updated pending_operations table to include actor type and risk level columns. - Enhanced audit_log to mirror actor information for compliance. - Modified validate_and_increment_api_key function to return actor details. - Expanded operation types in pending_operations to include new high-risk operations. * feat: add auto-commit functionality for low-risk pending operations - Implemented shouldAutoCommit function to determine eligibility for auto-commit based on operation type, actor type, and company settings. - Created commitPendingOperation function to handle execution of pending operations with consistent status updates. - Added tests for shouldAutoCommit to cover various scenarios including high-risk operations, user actors, company opt-in status, and monetary thresholds. - Introduced new columns in company_settings for agent_auto_commit_enabled and agent_auto_commit_max_amount to allow companies to opt-in for auto-commit functionality. - Added SQL migration to update the database schema for new auto-commit settings. * feat(idempotency): implement idempotency key handling for safe retries and cleanup * feat: expand API key scopes and pending operations for bookkeeping - Added 'suppliers:write' scope to API key scopes for supplier invoice management. - Updated SCOPE_GROUPS to include the new 'suppliers:write' scope. - Introduced new pending operation types for bookkeeping: close_period, lock_period, run_year_end, set_opening_balances, run_currency_revaluation, explain_voucher_gap, uncategorize_transaction, approve_supplier_invoice, credit_supplier_invoice, and convert_invoice. - Implemented corresponding commit functions for the new operations in the pending operations module. - Enhanced PendingOperation type to include actor model and risk level attributes. - Added tests for new functionality, ensuring proper behavior and constraints in the database. * feat: implement unlockPeriod functionality and related tests * feat: add agent auto-commit settings and related functionality * feat: add attention resource with comprehensive summary of outstanding tasks * feat: enhance pending operations with 'committing' status and immutability checks, improve idempotency handling, and add original voucher reference for credit notes
57 lines
2.0 KiB
TypeScript
57 lines
2.0 KiB
TypeScript
import { describe, it, expect } from 'vitest'
|
|
import { getRiskLevel, isHighRisk, OPERATION_RISK_TIERS } from '../risk-tiers'
|
|
|
|
describe('risk-tiers', () => {
|
|
it('classifies all currently-staged op types', () => {
|
|
// Op types that exist in the pending_operations CHECK constraint today.
|
|
const knownOps = [
|
|
'categorize_transaction',
|
|
'create_customer',
|
|
'create_invoice',
|
|
'mark_invoice_paid',
|
|
'send_invoice',
|
|
'mark_invoice_sent',
|
|
'match_transaction_invoice',
|
|
]
|
|
for (const op of knownOps) {
|
|
expect(OPERATION_RISK_TIERS).toHaveProperty(op)
|
|
}
|
|
})
|
|
|
|
it('treats sending invoices and marking paid as high risk', () => {
|
|
expect(getRiskLevel('send_invoice')).toBe('high')
|
|
expect(getRiskLevel('mark_invoice_paid')).toBe('high')
|
|
expect(getRiskLevel('mark_invoice_sent')).toBe('high')
|
|
})
|
|
|
|
it('treats period close, year-end, and SIE import as high risk', () => {
|
|
expect(getRiskLevel('close_period')).toBe('high')
|
|
expect(getRiskLevel('lock_period')).toBe('high')
|
|
expect(getRiskLevel('run_year_end')).toBe('high')
|
|
expect(getRiskLevel('import_sie')).toBe('high')
|
|
expect(getRiskLevel('set_opening_balances')).toBe('high')
|
|
})
|
|
|
|
it('treats customer creation as low risk (no booking impact)', () => {
|
|
expect(getRiskLevel('create_customer')).toBe('low')
|
|
})
|
|
|
|
it('treats reversible bookings as medium risk', () => {
|
|
expect(getRiskLevel('categorize_transaction')).toBe('medium')
|
|
expect(getRiskLevel('match_transaction_invoice')).toBe('medium')
|
|
expect(getRiskLevel('create_invoice')).toBe('medium')
|
|
expect(getRiskLevel('uncategorize_transaction')).toBe('medium')
|
|
})
|
|
|
|
it('defaults unknown op types to high (fail-safe)', () => {
|
|
expect(getRiskLevel('totally_unknown_op')).toBe('high')
|
|
expect(isHighRisk('totally_unknown_op')).toBe(true)
|
|
})
|
|
|
|
it('isHighRisk returns true only for high-risk ops', () => {
|
|
expect(isHighRisk('send_invoice')).toBe(true)
|
|
expect(isHighRisk('create_customer')).toBe(false)
|
|
expect(isHighRisk('categorize_transaction')).toBe(false)
|
|
})
|
|
})
|