accounted

Files

T

Jakob Wennberg b1a03de34e fix(mcp-oauth): api_keys.company_id nullable so companyless signups can mint their key (#1919 )

Every fresh Claude.ai authorization died at POST /api/mcp-oauth/token
with a silent 500: the multi-tenant refactor's dynamic loop
(20260330130000, line ~250) set company_id NOT NULL on api_keys, and the
companyless key insert from the popup-signup flow (#1814) violates it.
Nothing exercised the real insert before (unit tests mock the client;
no pg test inserted an unbound key), so repo, CI and prod all agreed and
all were wrong. DROP NOT NULL, log the insert/rotation failures at the
token endpoint, and pin the unbound insert + lazy bind on real Postgres.


Claude-Session: https://claude.ai/code/session_018wCdzRTatKiDByKB8hCNT6

Co-authored-by: Jakob Wennberg <311770904+jakobwennberg-oss@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

2026-08-26 09:58:25 +02:00

upgrade

feat(invariants): shared format contracts + upgrade-path CI (#1364 )

2026-08-03 16:30:14 +02:00

account-deletion-rpcs.pg.test.ts

Bug/tic unlink (#1153 )

2026-07-24 16:36:35 +02:00

account-dimension-rules.pg.test.ts

feat(dimensions): PR10 advanced — custom dimensions, hierarchy, account rules, commit enforcement (#886 )

2026-07-03 16:50:28 +02:00

account-reconciliation-attachments.pg.test.ts

feat(reconciliation,bokslut): underlag on a balansdag + persisted closing checklist (Reko bilagor, PR 2 + PR 3) (#1873 )

2026-08-25 09:34:05 +02:00

account-reconciliations.pg.test.ts

feat(reconciliation): sign-off, period picker, Hem row and the three doors for it (#1835 )

2026-08-24 14:07:58 +02:00

account-usage-counts-rpc.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

accrual-schedules.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

agent-atom-registry.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

agent-quota-caller-guard.pg.test.ts

fix(assistant): stop cross-user conversation access, bricked threads and lost sessions (#1209 )

2026-07-26 17:48:18 +02:00

annual-report-versions.pg.test.ts

test(db): verify annual-report compliance stack (#1367 )

2026-08-03 15:41:01 +02:00

api-key-audit-noise.pg.test.ts

Bug/gh issues fiz (#1103 )

2026-07-21 23:00:15 +02:00

api-keys-sod-ack-and-agent-write.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

api-keys-unbound.pg.test.ts

fix(mcp-oauth): api_keys.company_id nullable so companyless signups can mint their key (#1919 )

2026-08-26 09:58:25 +02:00

arsredovisning-submissions.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

articles.pg.test.ts

feat: add currency for articles (#834 )

2026-07-16 16:00:05 +02:00

assets.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

bankid-consumed-sessions.pg.test.ts

fix(auth): move the BankID flow into a signed, user-gated, single-use cookie (#1625 )

2026-08-15 23:07:29 +02:00

bfl-retention-expiry.pg.test.ts

test(db): verify annual-report compliance stack (#1367 )

2026-08-03 15:41:01 +02:00

bokslut-checklist-items.pg.test.ts

feat(reconciliation,bokslut): underlag on a balansdag + persisted closing checklist (Reko bilagor, PR 2 + PR 3) (#1873 )

2026-08-25 09:34:05 +02:00

booking-template-pack-slug.pg.test.ts

feat(packs): sync system templates from packs/ instead of the frozen migration (#1390 )

2026-08-03 18:55:59 +02:00

bootstrap.sql

test: add real-Postgres smoke gate (pg-real) (#357 )

2026-04-24 11:24:45 +02:00

bulk-book-dimensions.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

bulk-book-mixed-currency.pg.test.ts

2026-07-27 03:34:56 +02:00

bulk-book-transactions-service-actor.pg.test.ts

fix(pending-ops): MCP approval of bulk-book works and failed approvals no longer consume the op (#1852 )

2026-08-25 10:32:12 +02:00

bulk-book-transactions.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

categorization-templates-learning.pg.test.ts

fix(bookkeeping): revive counterparty template learning (dead since the multi-tenant refactor) (#989 )

2026-07-11 23:13:50 +02:00

categorize-calibration-samples.pg.test.ts

feat(categorize): confidence calibration engine + measurement loop (cascade step 4) (#1784 )

2026-08-21 15:55:26 +02:00

check-email-exists.pg.test.ts

fix(auth): provision invitees server-side when signups are disabled (#1404 )

2026-08-04 19:34:54 +02:00

closing-entry-detach.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

commit-method-provenance.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

committed-at-preservation.pg.test.ts

feat(audit): log trusted-role committed_at overrides to behandlingshistorik (#1490 )

2026-08-10 14:11:09 +02:00

company-inbound-domains.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

company-migration-reset.pg.test.ts

feat: add safe owner-only migration reset (#1682 )

2026-08-19 12:04:24 +02:00

create-company-for-user.pg.test.ts

feat(onboarding): company setup from the conversation and POST /api/v1/companies (#1814 PR 3) (#1864 )

2026-08-25 12:41:02 +02:00

credit-note-amount-cap.pg.test.ts

2026-07-27 03:34:56 +02:00

credit-note-creation-guards.pg.test.ts

2026-07-27 03:34:56 +02:00

customers-personal-number-ciphertext.pg.test.ts

Fix/07 27 (#1271 )

2026-07-28 19:50:16 +02:00

db-advisor-lockdowns.pg.test.ts

fix(db): lock down exchange_rates writes, drop duplicate JEL index, receipts anon read (#969 )

2026-07-10 11:05:40 +02:00

delete-last-voucher-ib.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

detach-underlag-duplicate.pg.test.ts

fix(documents): anchor underlag at deferred SI booking, sanctioned duplicate detach (#1860 )

2026-08-24 17:05:00 +02:00

dimension-retag.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

dimensions-generated-cutover.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

dimensions-substrate.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

document-surfaces-unification.pg.test.ts

feat(webshop): generate orderunderlag and attach it to the verifikat at booking (#1899 )

2026-08-25 15:15:33 +02:00

documents-bucket-company-scope.pg.test.ts

2026-07-27 03:34:56 +02:00

documents-bucket-worm.pg.test.ts

fix(storage): drop the client-side DELETE policy on the documents bucket (#1254 )

2026-07-28 18:34:55 +02:00

employee-opening-balances.pg.test.ts

Fix/skv connection flow (#1015 )

2026-07-13 22:54:33 +02:00

employee-vacation-balances.pg.test.ts

Fix/skv connection flow (#1015 )

2026-07-13 22:54:33 +02:00

extension-wrappers.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

fiscal-period-tax-adjustments.pg.test.ts

Bug/gh issues fiz (#1103 )

2026-07-21 23:00:15 +02:00

fixtures.ts

feat(import): undo a bank file import including ignored transactions (#1764 )

2026-08-20 21:25:18 +02:00

full-archive-coverage.pg.test.ts

2026-07-27 03:34:56 +02:00

get_account_gl_lines_for_matching.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

get_unlinked_1930_lines.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

gl_lines_rpc_tenant_guard.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

gl-lines-voucher-links.pg.test.ts

feat(reconciliation): residual booking + junction-aware bridge (#1862 )

2026-08-25 08:30:54 +02:00

inbox-rate-limit.pg.test.ts

Inbox UX overhaul + cross-currency supplier-invoice fixes (#444 )

2026-05-12 13:12:17 +02:00

inline-rattelse.pg.test.ts

fix(rattelse): let a bank-side strike land on the linked bank amount (#1701 )

2026-08-19 20:09:23 +02:00

invoice-backfill-snapshot-lockdown.pg.test.ts

fix: lock down invoice backfill snapshot (#1901 )

2026-08-25 17:03:57 +02:00

invoice-delivery-summaries-service.pg.test.ts

feat(invoices): per-recipient email delivery outcomes (#1384 )

2026-08-03 17:56:37 +02:00

invoice-inbox-processing-status.pg.test.ts

feat(inbox): staged upload ack, HEIC/HEIF validation, WhatsApp silence fixes (#1605 )

2026-08-13 23:57:53 +02:00

invoices-journal-entry-id-backfill.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

invoices-remaining-amount-guard.pg.test.ts

fix(invoices): remaining_amount can no longer be inserted as 0 on an unpaid invoice (#1655 )

2026-08-17 21:36:16 +02:00

journal-entry-no-doc-required.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

kontantmetod-cutoff-unique.pg.test.ts

fix: harden kontantmetod year-end cutoff (#1592 )

2026-08-13 16:53:19 +02:00

kpi-report-aggregates-rpc.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

ledger-deep-context-rpc.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

ledger-usage-stats-rpc.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

link-voucher-rpcs-tenant-guard.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

mail-hunt-file-dedupe.pg.test.ts

feat(receipt-hunt): find receipts in connected mailboxes and pair them on the amount (#1492 )

2026-08-10 12:23:42 +02:00

mark-entry-as-opening-balance.pg.test.ts

Fix/fdb fr usrs (#1125 )

2026-07-23 16:16:55 +02:00

match-batch-allocate-service-actor.pg.test.ts

fix(matching): make match_batch_allocate commit from the MCP approval path (#1645 )

2026-08-17 22:20:52 +02:00

match-batch-allocate.pg.test.ts

fix(invoices): settle öresavrundning in batch match and close stuck partially_paid invoices (#1829 )

2026-08-24 13:19:32 +02:00

mcp-oauth-rotation-grace.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

mcp-tasks.pg.test.ts

feat(mcp): Tasks extension (io.modelcontextprotocol/tasks) (#1283 )

2026-07-29 18:15:06 +02:00

notice-dismissals.pg.test.ts

feat(notices): one aggregated notice line instead of stacked degraded-state banners (#1733 )

2026-08-20 10:27:52 +02:00

null-safe-tenant-guards.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

oauth-used-codes-lockdown.pg.test.ts

Lock down OAuth used codes table (#641 )

2026-06-08 09:47:33 +02:00

payment-company-consistency.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

payment-match-log-actions.pg.test.ts

feat(reconciliation): match migrated bank history against imported SIE verifikat (#1598 )

2026-08-13 23:12:27 +02:00

pending-operations-committing-recovery.pg.test.ts

fix(pending-ops): recovery sweep for operations stuck in committing (#843 ) (#1108 )

2026-07-22 18:30:33 +02:00

pending-operations-failed-partial.pg.test.ts

fix(pending-ops): record posted ids and land failed_partial instead of clean rejected after partial commits (#842 ) (#1110 )

2026-07-22 18:33:49 +02:00

pending-operations-op-type-audit.pg.test.ts

feat: stage kontantmetod year-end cutoff (#1586 )

2026-08-13 15:55:01 +02:00

pending-operations-recurring-schedule.pg.test.ts

2026-07-27 03:34:56 +02:00

pending-operations-update-invoice.pg.test.ts

2026-07-27 03:34:56 +02:00

peppol-access.pg.test.ts

feat(peppol): gate Peppol per company: request access, operator enables with a sending cap (#1794 )

2026-08-21 17:27:45 +02:00

peppol-delivery-lifecycle.pg.test.ts

feat(invoices): add Peppol delivery foundation (#1595 )

2026-08-13 19:44:32 +02:00

peppol-receiving.pg.test.ts

feat(peppol): receive e-invoices via Qvalia: registration, inbound archive, inbox delivery (#1789 )

2026-08-21 16:56:32 +02:00

production-error-regressions.pg.test.ts

fix(underlag): carry the phone photo that is too big to send, and say why when we cannot (#1550 )

2026-08-13 09:39:23 +02:00

replace-period-opening-balance-link.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

reset-fiscal-year.pg.test.ts

feat(bookkeeping): guarded fiscal-year reset + findable Angra import (#1883 ) (#1897 )

2026-08-25 14:36:18 +02:00

resolve-active-company-rpc.pg.test.ts

Fix/fdb fr usrs (#1125 )

2026-07-23 16:16:55 +02:00

rls-role-gate.pg.test.ts

feat: custom inbound mail domains, rot/rut payout file, invoice email texts, security hardening (#878 )

2026-07-03 13:57:59 +02:00

rot-rut-apply-beslut-rpc.pg.test.ts

Add/stripe skv (#1004 )

2026-07-12 19:14:12 +02:00

rot-rut-avdrag.pg.test.ts

Fix/chrome pdf preview csp (#572 )

2026-05-26 22:29:41 +02:00

rot-rut-payout-requests.pg.test.ts

feat: custom inbound mail domains, rot/rut payout file, invoice email texts, security hardening (#878 )

2026-07-03 13:57:59 +02:00

salary-payslip-links.pg.test.ts

Check/salary bankid api (#892 )

2026-07-05 03:05:09 +02:00

salary-settings-p1.pg.test.ts

Check/salary bankid api (#892 )

2026-07-05 03:05:09 +02:00

sandbox-cleanup.pg.test.ts

fix(sandbox): delete api_keys and retag log in teardown (final backlog blockers) (#1454 )

2026-08-07 16:05:46 +02:00

securitydefiner_write_rpc_tenant_guards.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

self-billing-invoice.pg.test.ts

Feat/voucher docs (#664 )

2026-06-04 13:14:57 +02:00

setup.ts

2026-07-27 03:34:56 +02:00

shopify-connections.pg.test.ts

feat(shopify): Shopify order/refund feed into the transactions inbox (#1474 )

2026-08-09 12:44:08 +02:00

sie-rpc-statement-timeout.pg.test.ts

fix(import): raise statement_timeout on import_sie_journal_entries to 290s (#1101 )

2026-07-21 16:54:14 +02:00

skatteverket-company-connections.pg.test.ts

Add/stripe skv (#1004 )

2026-07-12 19:14:12 +02:00

skatteverket-tokens-per-company.pg.test.ts

fix(scoping): Skatteverket per företag + nåbara startkort + företags-scopade val (#1610 )

2026-08-14 08:21:57 +02:00

stripe-integration.pg.test.ts

Add/stripe skv (#1004 )

2026-07-12 19:14:12 +02:00

supplier-arrival-number.pg.test.ts

Fix/dependabot cus feedback (#946 )

2026-07-09 12:19:57 +02:00

supplier-invoice-overdue-cron.pg.test.ts

fix(supplier-invoices): make the 'overdue' label two-way and stop it locking an invoice (#1227 )

2026-07-27 14:49:22 +02:00

supplier-invoice-vat-rate-fraction.pg.test.ts

fix(vat): enforce fraction unit for supplier invoice vat_rate writes (#1385 )

2026-08-03 18:49:46 +02:00

supplier-payment-batches.pg.test.ts

feat(payments): supplier payment batch schema + pain.001 domain lib (betalfil 1/3) (#1500 )

2026-08-10 19:53:39 +02:00

tax-assessment-notices.pg.test.ts

Bug/gh issues fiz (#1103 )

2026-07-21 23:00:15 +02:00

tax-depreciation-elections.pg.test.ts

feat(bokslut): IL 18 kap pooled tax depreciation with method election (#1393 )

2026-08-04 11:43:58 +02:00

transaction_voucher_links.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

transactions-cash-account-id.pg.test.ts

style: remove em/en dashes repo-wide, add CLAUDE.md rule against them (#890 )

2026-07-04 15:58:06 +02:00

transactions-document-id.pg.test.ts

feat(invoice-inbox): pin documents to bank transactions + MCP tools (#397 )

2026-05-06 10:24:57 +02:00

transactions-potential-journal-entry.pg.test.ts

feat(reconciliation): match migrated bank history against imported SIE verifikat (#1598 )

2026-08-13 23:12:27 +02:00

transactions-transaction-method.pg.test.ts

feat(transactions): structured transaction_method instead of channel-in-the-name (#1459 )

2026-08-08 11:58:51 +02:00

underlag-attach-period-lock.pg.test.ts

feat(import): attach underlag to SIE-migrated verifikat by filename (#1627 )

2026-08-15 19:50:32 +02:00

vat-declaration-totals-rpc.pg.test.ts

fix: harden kontantmetod year-end cutoff (#1592 )

2026-08-13 16:53:19 +02:00

vat-totals-closing-entry.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

verifikat-without-documents-rpc.pg.test.ts

fix(db): enforce balance check on directly inserted posted journal entries (v2) (#1439 )

2026-08-06 23:00:05 +02:00

webshop-orders.pg.test.ts

feat(woo): mark an order as already booked outside the integration (#1895 )

2026-08-25 14:23:56 +02:00

whatsapp-account-deletion.pg.test.ts

fix(whatsapp-inbox): harden against adversarial review findings (#1342 )

2026-08-05 15:47:23 +02:00

whatsapp-channel.pg.test.ts

feat(whatsapp-inbox): conversation layer with clarifying questions (#1340 )

2026-08-05 15:27:00 +02:00

woocommerce-connections.pg.test.ts

feat(webshop-orders): Orders page with per-store, per-payment-method booking (#1525 )

2026-08-12 15:08:13 +02:00