Jakob WennbergandClaude Fable 5
19cbb0094b
The Dokumentinkorg (invoice-inbox) leaked past the paywall: visible in the sidebar, command palette, and home "Att gora" list, its page directly reachable, and every non-AI HTTP route open. Its whole value is AI field extraction (Claude Sonnet 4.6 via Bedrock), already the paid chokepoint elsewhere, so gate the whole surface on CAPABILITY.ai. - EXTENSION_REQUIRED_CAPABILITY map + resolvers (keys.ts, sectors.ts) as the single source the nav item, the page, and the API dispatcher all read. - Hide the sidebar item, command-palette entry, and home inbox row for non-payers; subtract inbox_document from the "Att gora" total via one shared visibleWorklistTotal helper (KPI tile + header cannot drift), clamped to >= 0. - Block the /e/[sector]/[slug] page (fail-closed) with an upsell EmptyState. - Enforce the capability in the extension API dispatcher (the single chokepoint that already enforces MFA), so every company-context inbox route 403s. The skipAuth /inbound webhook stays open (freeze-and-retain). - FORCE_PAYWALL=true override so the real gate is exercisable in local dev. - Tests: gating resolver, FORCE_PAYWALL, dispatcher 403/allow/webhook-exempt, visibleWorklistTotal, and enable-banking /connect + /sync 403. Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
23 lines
911 B
JSON
23 lines
911 B
JSON
{
|
|
"id": "invoice-inbox",
|
|
"sector": "general",
|
|
"exportName": "invoiceInboxExtension",
|
|
"entryPoint": "@/extensions/general/invoice-inbox",
|
|
"workspace": "@/components/extensions/general/InvoiceInboxWorkspace",
|
|
"requiredEnvVars": [
|
|
"RESEND_API_KEY",
|
|
"RESEND_INBOUND_DOMAIN",
|
|
"RESEND_INBOUND_WEBHOOK_SECRET"
|
|
],
|
|
"definition": {
|
|
"name": "Dokumentinkorg",
|
|
"category": "import",
|
|
"icon": "Inbox",
|
|
"dataPattern": "both",
|
|
"hasOwnData": true,
|
|
"readsCoreTables": ["document_attachments", "suppliers"],
|
|
"description": "Vidarebefordra leverantörsfakturor till en unik adress: dokumenten landar här med extraherade fält",
|
|
"longDescription": "Varje bolag får en unik fakturainkorg-adress. Fakturor som skickas dit fångas automatiskt och fält som org.nr, OCR, bankgiro, belopp och förfallodatum läses av med AI. Kräver AI-funktionen i din prenumeration."
|
|
}
|
|
}
|