* fix(errors): close remaining raw-message leaks after #1048 (#337) Follow-up to PR #1048. No user-visible toast or response field can now carry a raw engine or DB message; everything maps through getErrorMessage or the structured-errors registry. - get-error-message: only normalize a code-carrying Error instance into the structured path when the registry knows the code; unknown codes (Node system errors, stray third-party codes, Error-wrapped Postgres SQLSTATEs) fall through to pattern match, Swedish check, Postgres map and the status/context/generic fallbacks instead of returning the raw message. New Swedish-detection pattern for "ar last" phrases and a known-pattern row for "already has a journal entry". - structured-errors: add CANNOT_EDIT_NON_DRAFT (409) and MANDATORY_DIMENSION_MISSING (400) rows, plus common Node network codes (ECONNREFUSED, ECONNRESET, ETIMEDOUT, ENOTFOUND, EAI_AGAIN, EPIPE) as retryable 503 transients with a Swedish message. - pending-operations commit + bulk-commit routes: map executor error strings through getErrorMessage before responding (raw stays in logs); Swedish passes through, English falls to status-appropriate Swedish. - pending page: toast via getErrorMessage, fixing raw English toasts and "[object Object]" for structured envelopes on commit/bulk/reject. - transactions book + journal-entries routes: untyped catch and DB list errors no longer return err.message; mapped or static Swedish instead. - invoice send + issue-credit-note: partial_failures reasons are now Swedish (raw provider/DB text logged, never returned). - Tests: new unknown-code/Error-instance suite, registry rows asserted, route tests updated off the pinned raw-English expectations. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(skatteverket): target the räkenskapsår for yearly VAT redovisningsperiod A yearly filer with a broken fiscal year has a Skatteverket period ending in its FY-end month, not December, and the panel's year state is never maintained in yearly mode (the year picker is replaced by the räkenskapsår selector), so calls targeted the wrong period even for calendar-FY companies filing after year end. The selected fiscal period now rides through the whole chain: panel query strings, draft/validate/ submit bodies, buildMomsuppgift (which resolves the FY bounds so the period id and the figures describe the same räkenskapsår), and the staged-commit path. MCP callers without a fiscal period keep the calendar fallback. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(deadlines): group same-day skattekonto deadlines into one card Moms, AGI and preliminärskatt legally share the skattekonto date (den 12:e), so a small monthly-moms employer saw 2-3 near-identical rows per month. Two or more pending system rows of the skattekonto family on the same due date now render as one grouped card with the date block once and each obligation as a sub-row keeping its own confirm-to-complete flow. Presentation only: rows, statuses, ICS feed unchanged. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * feat(deadlines): KU + ROT/RUT + long-tail opt-in deadlines, rolling horizon Follow-ups from the #1028 audit left out of the #1057-#1060 fix stack, each with its own condition modeling: - kontrolluppgifter (KU10/KU20/KU31), due 31 Jan (SFL 24 kap. 1 §): opt-in flag suggested from ledger signals (2898 utdelning, 2393/2893 ägarlån; deliberately not 2091, see DECISIONS.md), AB only, mirroring the #1059 EU-sales suggest-and-confirm pattern. - rot_rut_begaran, due 31 Jan after the payment year (Lag 2009:194 8 §): rows generated only for years with actually PAID ROT/RUT invoices, resolved inside the generator; invoice-derived suggestion. - Long tail, explicit opt-in ('Fler deadlines'): OSS quarterly and IOSS monthly with a skipBankingDayAdjustment config flag (EU-law dates stand on weekends), Intrastat (10th banking day of the following month), punktskatt (ordinary skattedeklaration schedule), and fyllnadsinbetalning (12th of 2nd month over 30k / 3rd of 5th month, SFL 62:8 + 65 kap.). Kvarskatt deferred: needs a slutskattebesked date the app does not hold. - Rolling generation horizon: recurring types ~6 months ahead, annual 12 months, mirrored in the backfill expectation keys so the nightly cron never thrashes; regeneration now preserves manual in_progress status; one-time cleanup migration removes existing far-future rows. Migrations also applied to the staging branch, together with the previously missing 20260717xxxxxx deadline migrations (staging had drifted and lacked dismissed_at). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(arsredovisning): keep narrative editable after year-end close The narrative save endpoint refused writes whenever the fiscal period was closed/locked, but Verkstall bokslut closes the period before the arsredovisning text is ever written, so every legitimate save failed with PERIOD_LOCKED and the PDF fell back to placeholder text. The narrative is arsredovisning document text (ARL 6 kap.), not journal rakenskapsinformation, so the bookkeeping period lock does not apply. Saves are now refused only once a Bolagsverket submission for the period is registrerad (ARSREDOVISNING_REGISTERED, 409); the filed artifact was already frozen separately by the submissions immutability trigger. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(skatteverket): surface dead SKV connections and nudge reconnect Prod has ~70 companies that connected Skatteverket before the post-connect sync fix (#1010) and silently never synced skattekonto: the only reconnect prompt lived in the settings panel nobody revisits. - transactions-page banner when the connection is needs_reconsent or expired without refresh, linking to /settings/tax - pre-connect note in the connect panel: approve ALL behorigheter on Skatteverket's consent page (previously only shown after a failure) - wire the inert skattekonto.connection.expired event to an email nudge to the token owner; one send per consent episode via claim-first dedup in notification_log (type skv_connection_expired, partial unique index in migration 20260720090000, applied to staging) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(archive): per-year behandlingshistorik covers late-booked vouchers + Drive backup disclaimer The per-fiscal-year archive filtered audit rows by created_at within the period, dropping treatment history for bokslut entries, stornos and SIE imports booked after year end (BFNAR 2013:2 kap 8). The year archive now unions the date window with every audit row touching the period's journal entries and lines, deduped by audit id; line rows (company_id NULL by trigger design) are admitted via a scoped OR and reachable on the service-role backup path. ARCHIVE_FORMAT_VERSION 2->3 forces a one-time Drive re-upload so existing archives pick up the complete history. The Drive card on /import Exportera and the LASMIG texts now state the Drive copy is a convenience backup, not the BFL 7 kap legal archive. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(decisions): clarify Arsredovisning narrative save behavior on submission status * feat(invoices): gate payment links behind invoice settings opt-in The payment-link section (manual URL field + Stripe auto-create toggle) was visible on every invoice and auto-created Stripe links on send for any connected company. It is now opt-in per company: - new company_settings.invoice_payment_links_enabled, default false for everyone (no grandfathering of Stripe-connected companies) - invoice editor hides the whole section unless enabled; a draft that already carries a link still shows it so old links stay clearable - enforced server-side in maybeCreatePaymentLinkForInvoice (after the provider lookup, so the extension-free core build never queries), so dashboard, v1, MCP and recurring sends all obey it - new toggle on Settings -> Invoicing, saves instantly; sv/en strings Migration applied to the staging branch; prod gets it on merge. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> * fix(tests): add invoice_payment_links_enabled to company settings fixture The makeCompanySettings fixture missed the new required boolean, failing the core-only build's type check of tests/helpers.ts. Default false, matching the migration default. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Emil <emilmattsson14@gmail.com> * fix(review): address CodeRabbit, compliance and Swedish review findings Round 2 of PR #1076 review feedback, one change per accepted finding: - pending page: res.json() safe fallback in both commit paths so a non-JSON proxy response cannot surface a raw parser error - bulk-commit: map operation status enums to Swedish display labels in the 'Redan hanterad' skip message - payment-link settings: disable the toggle while a save is in flight to prevent out-of-order PUT responses - deadlines group card: route all UI strings through next-intl (deadlines namespace, sv + en) - archive export: scope the period audit entry lookup to posted/reversed, matching the rest of the export - error tests: assert the exact registry English message for ECONNREFUSED to lock the no-leakage contract - signal routes: log.warn when best-effort lookups swallow a Supabase error (forensics), keep fail-closed behavior - narrative route: document that 'avslutad' submissions deliberately stay editable (never registered at Bolagsverket) - VAT: yearly declarations without an explicit fiscalPeriodId now resolve the räkenskapsår ending in the target year from fiscal_periods instead of assuming a calendar FY (SFL 26 kap 10-11 §§); calendar fallback only when no fiscal period exists - deadlines: IOSS deadline no longer requires vat_registered (Art. 369s has no Swedish VAT registration prerequisite) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Signed-off-by: Emil <emilmattsson14@gmail.com> --------- Signed-off-by: Emil <emilmattsson14@gmail.com> Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
141 lines
6.2 KiB
TypeScript
141 lines
6.2 KiB
TypeScript
/**
|
|
* LÄSMIG.txt for the full archive: a Swedish, human-readable map of the ZIP.
|
|
* The archive outlives the product subscription; whoever opens it (the user
|
|
* years later, a revisor, a Skatteverket auditor) must understand it without
|
|
* Accounted running.
|
|
*/
|
|
|
|
export interface ArchiveReadmeParams {
|
|
companyName: string
|
|
orgNumber: string | null
|
|
generatedAt: string
|
|
scope: 'all' | 'period'
|
|
periodLabel?: string
|
|
appName?: string
|
|
}
|
|
|
|
export interface DriveFolderReadmeParams {
|
|
companyName: string
|
|
orgNumber: string | null
|
|
generatedAt: string
|
|
appName?: string
|
|
}
|
|
|
|
/**
|
|
* README for the Drive backup folder layout: one `Arkiv <år>.zip` per
|
|
* räkenskapsår plus `Grunddata.zip`. Uploaded both as a standalone
|
|
* LÄSMIG.txt in the Drive folder and inside Grunddata.zip.
|
|
*/
|
|
export function buildDriveFolderReadme(params: DriveFolderReadmeParams): string {
|
|
const app = params.appName || 'Accounted'
|
|
return [
|
|
`SÄKERHETSKOPIA FRÅN ${app.toUpperCase()}`,
|
|
'='.repeat(30),
|
|
'',
|
|
`Företag: ${params.companyName}${params.orgNumber ? ` (${params.orgNumber})` : ''}`,
|
|
`Senast uppdaterad: ${params.generatedAt}`,
|
|
'',
|
|
'Den här mappen innehåller företagets löpande säkerhetskopia:',
|
|
'',
|
|
'Arkiv <år>.zip Ett komplett arkiv per räkenskapsår: bokföringen som',
|
|
' SIE4-fil, rapporter (JSON och CSV), underlag döpta',
|
|
' efter verifikat samt behandlingshistorik för årets',
|
|
' bokföring.',
|
|
'Grunddata.zip Register (kunder, leverantörer, fakturor, anställda,',
|
|
' löner, tillgångar med mera), ursprungliga SIE-filer,',
|
|
' dokument som ännu inte kopplats till verifikat samt',
|
|
' fullständig behandlingshistorik.',
|
|
'',
|
|
'Filerna uppdateras på plats vid varje säkerhetskopiering: bara år med',
|
|
'ändringar laddas upp på nytt. Google Drive sparar tidigare versioner i',
|
|
'cirka 30 dagar (högerklicka på filen och välj Hantera versioner).',
|
|
'',
|
|
'Den här mappen är en extra säkerhetskopia som du själv råder över.',
|
|
'Filer i Drive kan ändras eller raderas, så mappen utgör inte företagets',
|
|
`lagliga arkiv enligt bokföringslagen: ${app} bevarar`,
|
|
'räkenskapsinformationen i oföränderligt skick i minst 7 år (BFL 7 kap.).',
|
|
'',
|
|
'Varje zip innehåller en egen LÄSMIG.txt som beskriver innehållet.',
|
|
`${app} är öppen källkod (AGPL): bokföringen förblir läsbar utan tjänsten.`,
|
|
'',
|
|
].join('\n')
|
|
}
|
|
|
|
export function buildArchiveReadme(params: ArchiveReadmeParams): string {
|
|
const app = params.appName || 'Accounted'
|
|
const scopeLine =
|
|
params.scope === 'all'
|
|
? 'Hela bokföringen (samtliga räkenskapsår)'
|
|
: `Räkenskapsår ${params.periodLabel ?? ''}`.trim()
|
|
|
|
const lines: string[] = [
|
|
`SÄKERHETSKOPIA FRÅN ${app.toUpperCase()}`,
|
|
'='.repeat(30),
|
|
'',
|
|
`Företag: ${params.companyName}${params.orgNumber ? ` (${params.orgNumber})` : ''}`,
|
|
`Skapad: ${params.generatedAt}`,
|
|
`Omfattning: ${scopeLine}`,
|
|
'',
|
|
'Det här arkivet innehåller företagets räkenskapsinformation i öppna',
|
|
'format (SIE4, JSON, CSV), läsbart utan särskild programvara.',
|
|
'',
|
|
'Arkivet är en säkerhetskopia. En fil som lagras utanför tjänsten kan',
|
|
'ändras eller raderas och utgör därför inte i sig det lagliga arkivet',
|
|
`enligt bokföringslagen: ${app} bevarar räkenskapsinformationen i`,
|
|
'oföränderligt skick i minst 7 år (BFL 7 kap.).',
|
|
'',
|
|
'INNEHÅLL',
|
|
'--------',
|
|
]
|
|
|
|
if (params.scope === 'all') {
|
|
lines.push(
|
|
'sie/ Bokföringen som SIE4-filer, en per räkenskapsår.',
|
|
' Kan importeras i de flesta svenska bokföringsprogram.',
|
|
'sie/original/ Ursprungliga SIE-filer som importerats, bevarade',
|
|
' byte för byte. manifest.json beskriver varje fil.',
|
|
'rapporter/<år>/ Rapporter per räkenskapsår: saldobalans, resultat-',
|
|
' och balansräkning, huvudbok, grundbok och moms.',
|
|
' JSON för maskiner, CSV för Excel (semikolonavgränsad,',
|
|
' svensk teckenkodning).',
|
|
'dokument/<år>/ Underlag (kvitton, fakturor) döpta efter verifikat,',
|
|
' t.ex. A17_kvitto.pdf. dokument/_okopplade/ innehåller',
|
|
' dokument som ännu inte kopplats till något verifikat.',
|
|
' dokument/manifest.json listar alla filer med SHA-256.',
|
|
'data/ Register som JSON: kunder, leverantörer, fakturor,',
|
|
' anställda, löner, tillgångar, med mera. En fil per',
|
|
' tabell, radernas fältnamn följer databasen.',
|
|
'revision/ behandlingshistorik.json (alla ändringar, BFL 5 kap',
|
|
' 11 §) och systemdokumentation.json (kontoplan,',
|
|
' verifikationsserier, arkiveringsprinciper).'
|
|
)
|
|
} else {
|
|
lines.push(
|
|
'bokforing.se Räkenskapsårets bokföring som SIE4-fil.',
|
|
'rapporter/ Saldobalans, resultat- och balansräkning, huvudbok,',
|
|
' grundbok och momsdeklaration. JSON för maskiner,',
|
|
' CSV för Excel (semikolonavgränsad).',
|
|
'dokument/ Underlag (kvitton, fakturor) döpta efter verifikat.',
|
|
' dokument/manifest.json listar alla filer med SHA-256.',
|
|
'revision/ behandlingshistorik.json (ändringar under året samt',
|
|
' ändringar som rör årets verifikat även när de',
|
|
' bokförts efter årets slut) och systemdokumentation.json.'
|
|
)
|
|
}
|
|
|
|
lines.push(
|
|
'',
|
|
'ÅTERSTÄLLNING',
|
|
'-------------',
|
|
`SIE-filerna kan importeras i ${app} eller annat bokföringsprogram.`,
|
|
'Dokumentens koppling till verifikat framgår av dokument/manifest.json',
|
|
'(fältet journal_entry_id samt verifikatnumret i filnamnet).',
|
|
'',
|
|
`${app} är öppen källkod (AGPL): programvaran kan även köras självhostad,`,
|
|
'så bokföringen förblir åtkomlig oavsett tjänstens framtid.',
|
|
''
|
|
)
|
|
|
|
return lines.join('\n')
|
|
}
|