* feat(onboarding): company setup from the conversation and POST /api/v1/companies Third PR of agent-first onboarding (#1814). Once connected, the agent can now set up a company end to end without the web wizard, and partner platforms can provision companies over REST. - create_company_for_user: service-role-only SECURITY DEFINER twin of create_company_with_owner taking the owner explicitly (service clients have no auth.uid()). pg-real test covers creation, role gating, unknown owner and foreign team. - lib/company/create-company.ts: the wizard's creation sequence (org number, TIC snapshot, BAS chart, settings, first fiscal period, tax deadlines, rollback) extracted into createCompanyCore; the Server Action delegates to it, behaviour unchanged. - lib/company/onboarding-input.ts: one Zod schema + planner for the agent/API paths; a VAT-registered company without moms_period is refused (a missing period silently yields zero VAT deadlines). - MCP: gnubok_create_company (two-phase: preview, then confirm=true; companies:write, company-independent), gnubok_connect_bank and gnubok_connect_skatteverket (status + the browser link, gated on bank_sync / skatteverket, search-only in the catalog), the "onboarding" skill, and initialize instructions pointing at it. - Consent page pre-ticks companies:write for an account with no company yet, so the setup does not dead-end on insufficient scope after signup. - POST /api/v1/companies (companies:write, dry-run aware) on the same core; scope map, registry, spec snapshot and the generated API skill updated. - tools/list payload ceiling raised 59.95K -> 60.4K for the one new default-catalog tool (documented in the guard). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 * fix(onboarding): explicit f_skatt, org number when VAT-registered, EF first year ends 31 Dec Review findings on #1864 (Swedish compliance review): - f_skatt is required, never defaulted to approved (SE-R-005 risk). - org_number is required when vat_registered: the invoice momsregistreringsnummer derives from it (ML 17 kap 24 §). - An enskild firma's first fiscal year must end on 31 December and its start month is forced to 1 even with first_fiscal_year set, mirroring the wizard's own rule text (BFL 3 kap. 1 §). - POST /api/v1/companies no longer claims Idempotency-Key support (the wrapper only honours it on company-scoped routes). - pg-real: createCompanyCore's chart seed runs under the real service_role, which the unit tests could not prove. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 * test(pg): starter chart has 41 accounts, assert non-empty The service_role chart-seed proof passed the part that mattered (no 42501 from seed_chart_of_accounts) and failed on a wrong row-count guess: the seeded chart is a curated starter set, not the full BAS list. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 * fix(migrations): move create_company_for_user to 20260825120000 main gained 20260824170000_bulk_book_transactions_service_actor.sql with the same version while this branch was open; two files on one version abort every Supabase branch apply and the prod auto-apply. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 * chore(api): refresh spec snapshot and generated skill after rebasing onto main Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 * fix(mcp): flat create_company result, refuse localhost connect links, test hygiene CodeRabbit on #1864: the confirmed-create result was wrapped in the { data, next } envelope while its outputSchema promised top-level fields; it now returns the fields with next as a sibling. The two connect-link tools refuse to build a link when NEXT_PUBLIC_APP_URL is unset instead of handing a remote user a localhost URL. Tests clear mocks and the event bus in beforeEach. Not changed: the rollback already survives user_preferences.active_company_id (that FK is ON DELETE SET NULL since 20260331010000), and v1 error details stay in the surface's English developer convention. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6 --------- Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
61 lines
2.5 KiB
TypeScript
61 lines
2.5 KiB
TypeScript
import type { SupabaseClient } from '@supabase/supabase-js'
|
|
import type { Skill } from './types'
|
|
import { monthEndCloseSkill } from './month-end-close'
|
|
import { quarterlyVatReviewSkill } from './quarterly-vat-review'
|
|
import { yearEndCloseSkill } from './year-end-close'
|
|
import { invoicingRulesSkill } from './invoicing-rules'
|
|
import { payrollMonthlySkill } from './payroll-monthly'
|
|
import { bankReconciliationSkill } from './bank-reconciliation'
|
|
import { kreditfakturaProcessSkill } from './kreditfaktura-process'
|
|
import { customerOnboardingSkill } from './customer-onboarding'
|
|
import { reconcileMonthSkill } from './reconcile-month'
|
|
import { onboardingSkill } from './onboarding'
|
|
import { loadAtomsAsSkills, loadReferenceById } from './atoms'
|
|
|
|
/** Static workflow skills the server ships with. Tier: 'workflow'. */
|
|
export const workflowSkills: Skill[] = [
|
|
monthEndCloseSkill,
|
|
quarterlyVatReviewSkill,
|
|
yearEndCloseSkill,
|
|
invoicingRulesSkill,
|
|
payrollMonthlySkill,
|
|
bankReconciliationSkill,
|
|
kreditfakturaProcessSkill,
|
|
customerOnboardingSkill,
|
|
reconcileMonthSkill,
|
|
onboardingSkill,
|
|
]
|
|
|
|
/** @deprecated Use `workflowSkills` for the static set, or `loadAllSkills(supabase)`
|
|
* for the unified list (workflows + atoms). Kept for backwards compatibility
|
|
* with prior imports. */
|
|
export const skills = workflowSkills
|
|
|
|
/**
|
|
* Resolve a skill by slug. Checks the static workflow array first (synchronous,
|
|
* always available), then falls back to the registry-backed atom set
|
|
* (asynchronous, supabase-bound).
|
|
*/
|
|
export async function findSkill(slug: string, supabase?: SupabaseClient): Promise<Skill | null> {
|
|
const wf = workflowSkills.find((s) => s.slug === slug)
|
|
if (wf) return wf
|
|
if (!supabase) return null
|
|
const atoms = await loadAtomsAsSkills(supabase)
|
|
const atom = atoms.find((s) => s.slug === slug)
|
|
if (atom) return atom
|
|
// Reference children (e.g. "horizontal/swedish-vat/vat-compliance-reference")
|
|
// are excluded from the listed atom set above, so resolve them directly. This
|
|
// is what makes a SKILL.md footer's gnubok_load_skill(<reference id>) work.
|
|
return loadReferenceById(supabase, slug)
|
|
}
|
|
|
|
/** Workflow skills + registry-loaded atoms in one list. */
|
|
export async function loadAllSkills(supabase: SupabaseClient): Promise<Skill[]> {
|
|
const atoms = await loadAtomsAsSkills(supabase)
|
|
return [...workflowSkills, ...atoms]
|
|
}
|
|
|
|
export type { Skill, SkillTier } from './types'
|
|
export { SKILL_MIME_TYPE, SKILL_URI_PREFIX, skillUri, skillSlugFromUri } from './types'
|
|
export { loadAtomsAsSkills, toSummary, __resetAtomCache } from './atoms'
|