Jakob Wennberg
c74b19df1b
* feat(reconciliation): close the bank-feed loop on voucher links and re-tag mis-typed opening balances
Two related fixes to bank reconciliation correctness:
1. Auto-reconcile on voucher link. Linking an invoice or supplier invoice to
an existing voucher previously advanced only the invoice — the bank
transaction that paid it kept sitting in the Transactions inbox with a null
journal_entry_id. linkInvoiceToVoucher / linkSupplierInvoiceToVoucher now
call autoReconcileTransactionForLinkedVoucher (lib/reconciliation), which
links the bank transaction to the same verifikat when exactly one unbooked
line matches it. Best-effort and post-commit: a failure here never fails the
link. The result surfaces reconciledTransactionId; the inbox row leaves the
list and the UI shows link_success_tx_reconciled.
2. Re-tag mis-typed opening balances. getReconciliationStatus and the GL-line
matching RPCs identify a cash account's ingående balans solely by
journal_entries.source_type='opening_balance'. Companies migrated from other
systems often booked the bank IB as an ordinary voucher (source_type
'import' or 'manual'), so it was never excluded and surfaced as a phantom
reconciliation difference equal to the opening balance. Adds:
- migration mark_entry_as_opening_balance: a GUC-gated carve-out in the
immutability trigger plus a SECURITY DEFINER RPC that validates the entry
(balance-sheet lines only, dated on a fiscal-period boundary), flips the
source_type, and writes an audit row — no blanket data sweep.
- POST /api/reconciliation/bank/mark-opening-balance + MarkOpeningBalanceSchema.
- BankReconciliationView action to trigger it from the IB diff.
The gnubok_create_voucher executor now accepts a typed is_opening_balance flag
and derives source_type='opening_balance' only after validating class 1/2 lines
on the period start, so new IBs land correctly typed.
Covered by lib/reconciliation auto-reconcile tests, voucher-executors tests,
and a mark-entry-as-opening-balance pg-real test.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
* chore: rebrand gnubok → Accounted and prune swarm agent skills
Product rebrand and skills housekeeping. No runtime behaviour change.
Rebrand: replace user-visible "gnubok" with "Accounted" across docs, READMEs,
in-code comments, doc-site content, MCP skill/resource prose, and the
gnubok-mcp package description. The MCP resource URI scheme is moved gnubok://
→ Accounted:// consistently across resource registrations, the event-type
comment, and the resource/skill tests. Deliberately preserved as stable
identifiers (NOT rebranded): the gnubok-company-id cookie, gnubok_sk_ / gnubok_inv_
token prefixes, the gnubok-mcp npm bridge name, and the AGI <gem:Programnamn>
value (kept 'gnubok' per its source comment — it is the software identifier sent
to Skatteverket and must not churn across visual rebrands).
Skills: remove the 27 swarm-* agent SKILL.md atoms (no longer used; already
absent from the agent_atom_registry in prod), refresh the remaining skill docs,
add the .claude/rules/ path-scoped rule set, and regenerate the
seed_agent_atom_bodies migration + .skill-body-manifest.json via
`npm run skills:generate` so the DB-backed skill bodies match the trimmed set.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
76 lines
3.0 KiB
TypeScript
76 lines
3.0 KiB
TypeScript
/**
|
|
* /llms.txt — agent-discoverable index of the Accounted API.
|
|
*
|
|
* Convention adopted by Stripe, Anthropic, and other agent-facing platforms:
|
|
* a plain-text Markdown file at the doc root that points LLM crawlers and
|
|
* IDE agents (Cursor, Claude Code, Windsurf) at the canonical resources
|
|
* they need. Cheaper than scraping HTML.
|
|
*/
|
|
|
|
import { NextResponse } from 'next/server'
|
|
import { API_V1_VERSION } from '@/lib/api/v1/version'
|
|
import { withPublicSecurityHeaders } from '@/lib/api/v1/security-headers'
|
|
import { getCanonicalBaseUrl } from '@/lib/api/v1/base-url'
|
|
|
|
export async function GET(_request: Request) {
|
|
const base = getCanonicalBaseUrl()
|
|
|
|
const body = `# Accounted API
|
|
|
|
> Swedish double-entry bookkeeping as a public REST API. API version ${API_V1_VERSION}.
|
|
|
|
This API lets agents and integrations do anything the Accounted dashboard can do —
|
|
read transactions, create invoices, mark them paid, run VAT reports, file year-end
|
|
declarations, ingest SIE files, and subscribe to webhooks for state changes.
|
|
|
|
## Quickstart
|
|
|
|
1. Create an API key in the Accounted dashboard at /settings/api.
|
|
2. Authenticate with \`Authorization: Bearer gnubok_sk_<live|test>_<random>\`.
|
|
3. List companies the key can access: \`GET ${base}/api/v1/companies\`.
|
|
4. Use the returned \`id\` as \`{companyId}\` in subsequent paths.
|
|
|
|
## Core principles
|
|
|
|
- **Dry-run on every write.** Add \`?dry_run=true\` or \`X-Dry-Run: true\` to any
|
|
POST/PATCH/DELETE to preview the effect (journal lines, voucher number,
|
|
account deltas) without committing. The same call without dry-run commits.
|
|
- **Idempotency-Key on every write.** Pass a UUID in \`Idempotency-Key\`; replays
|
|
return the cached response (24h TTL) with \`Idempotent-Replayed: true\`.
|
|
- **Test mode.** API keys prefixed \`gnubok_sk_test_\` are bound to deterministic
|
|
sandbox companies — safe for evals and agent learning. Live keys hit real data.
|
|
- **Compliance pre-flight.** \`GET /api/v1/companies/{id}/compliance/check?type=…\`
|
|
returns structured findings (voucher gaps, locked-period violations, VAT close
|
|
blockers, missing receipts) before you submit.
|
|
|
|
## Resources
|
|
|
|
- OpenAPI 3.1 spec: ${base}/api/v1/openapi.json
|
|
- Skills catalogue: ${base}/.well-known/skills/index.json
|
|
- Health check: ${base}/api/v1/health
|
|
- Docs (cookbook + reference): ${base}/docs/api
|
|
- Error reference: ${base}/docs/api/errors
|
|
- Security disclosure policy: ${base}/SECURITY.md (responsible disclosure to security@arcim.io)
|
|
|
|
## Schema discovery
|
|
|
|
Every \`.md\` URL under /docs/api is served as plain Markdown so agents can
|
|
ingest it without HTML parsing.
|
|
|
|
## Versioning
|
|
|
|
The URL major version is \`/api/v1/\`. Within v1, the response shape is pinned to
|
|
\`${API_V1_VERSION}\`. Future breaking changes inside v1 will accept an optional
|
|
\`Gnubok-Version: YYYY-MM-DD\` header for opt-in upgrades; older versions keep
|
|
working until explicitly retired.
|
|
`
|
|
|
|
return new NextResponse(body, {
|
|
status: 200,
|
|
headers: withPublicSecurityHeaders({
|
|
'Content-Type': 'text/markdown; charset=utf-8',
|
|
'Cache-Control': 'public, max-age=300, s-maxage=300',
|
|
}),
|
|
})
|
|
}
|