* fix(pending-ops): MCP approval of bulk-book works and failed approvals no longer consume the op
Feedback seq 261545 (deepCFO): approving a bulk_book_transactions op over
MCP returned BULK_BOOK_UNAUTHORIZED, yet the op vanished from /pending
with nothing booked; the user believed it had been approved.
Two defects:
1. The bulk_book_transactions RPC gates on auth.uid(), which is NULL on
the cookieless service client every MCP approval runs on, so EVERY
API-key approval of a samlingsverifikat was refused. New migration
20260824170000 adds p_user_id, honored only for service_role callers
(same gate as match_batch_allocate 20260817150000 and undo_sie_import);
the executor passes the approving user, who is now also the actor
stamped on the verifikat. pg-real test covers member/spoof/no-JWT/
grants like the precedent.
2. The dispatcher consumed the op on ANY executor error other than 404/
409. An authorization refusal happens before any side-effect and says
nothing about the op, so 401/403 now release the claim back to
'pending'. The executor maps RPC codes through the structured-error
registry so 403/404/409 are distinguishable from 400. Every
CommitResult carries operation_status (pending | committed | rejected
| failed_partial), exposed on gnubok_approve_pending_operation, so
agents stop inferring consumption from status 'failed'.
Catalog token ceiling 59.95K -> 60K per the documented ratchet protocol.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScVhg6XsDtNXkiEQNV7LaZ
* fix(pending-ops): revoke anon explicitly on the service-actor bulk_book signature
Default privileges grant EXECUTE on new functions to anon; the pg-real
grants test (mirroring match_batch_allocate) caught it.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ScVhg6XsDtNXkiEQNV7LaZ
---------
Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Jakob Wennberg
dc92fb5c0c