@dooer/dooer-test-env 1.2.3 → 1.4.0

package/lib/account.js

@@ -8,7 +8,10 @@
 //   - service_accounts.subscriptions         the same active set Ghost Inspector has on staging
 //   - service_accounts."partnerOrganization" the org placed under partner `dooer` by default
 //   - service_accounts."tosAcceptance"        the current Terms of Service pre-accepted (so sumify doesn't block)
-// It does NOT add customer data (ledger, documents, tasks, …) — the account starts empty.
+//   - service_ledger.fiscal_year              the CURRENT year, + default company information written to
+//     service_accounts."temporalKeyValue"     both the companies columns and temporalKeyValue
+//                                             (disable the whole block with --no-fiscal-year)
+// It does NOT add customer data (documents, verifications, tasks, …) — the account starts empty.
 
 const crypto = require('crypto')
 const { Client } = require('pg')
@@ -19,6 +22,16 @@ const SUBSCRIPTION_TYPES = ['accounting', 'billing', 'salaries', 'sales', 'prebo
 // The partner every new test account is placed under by default (Jimmy 2026-09-01).
 const DEFAULT_PARTNER_DOMAIN = 'dooer'
 
+// Company-information defaults, applied unless --no-fiscal-year (Jimmy 2026-09-03). A brand-new account
+// otherwise has no fiscal year and blank registration fields, so nothing can be booked and HQ's
+// /customers/<org>/information page is empty. Each value is written BOTH as a companies column (what that
+// page edits) AND as a service_accounts."temporalKeyValue" row (the temporal source the platform reads),
+// plus the service_ledger.fiscal_year row itself.
+const currentYearDates = () => {
+  const year = new Date().getFullYear()
+  return { year, start: `${year}-01-01`, end: `${year}-12-31` }
+}
+
 const uuid = () => crypto.randomUUID()
 // A plausible unique 10-digit Swedish org number (556XXXXXXX) — dev placeholder, not a real registration.
 const orgNumber = () => `556${String(crypto.randomInt(0, 1e7)).padStart(7, '0')}`
@@ -44,9 +57,10 @@ async function uniqueSlug(client, name) {
   return `${base}-${crypto.randomBytes(3).toString('hex')}`
 }
 
-async function createAccount({ local, name, ownerUserId, execute = false } = {}) {
+async function createAccount({ local, name, ownerUserId, execute = false, fiscalYear = true } = {}) {
   if (!name) throw new Error('customer new: a name is required')
   if (!ownerUserId) throw new Error('customer new: --owner <userId> is required')
+  const fy = currentYearDates()
 
   const client = new Client({ ...local, ssl: local.ssl === false ? undefined : { rejectUnauthorized: false } })
   await client.connect()
@@ -81,6 +95,7 @@ async function createAccount({ local, name, ownerUserId, execute = false } = {})
       ownerType,
       partner: DEFAULT_PARTNER_DOMAIN,
       subscriptions: SUBSCRIPTION_TYPES,
+      fiscalYear: fiscalYear ? { start: fy.start, end: fy.end } : null,
       warning,
     }
     if (!execute) {
@@ -93,11 +108,29 @@ async function createAccount({ local, name, ownerUserId, execute = false } = {})
     await client.query(
       // Populate a placeholder address: some org endpoints serialize organization.address as a required
       // OBJECT and return null (schema violation, seen in sumify) when all address columns are empty.
+      // The registration/fiscal-year columns are NULL unless the defaults are enabled (--no-fiscal-year).
       `INSERT INTO service_accounts.companies
          (companies_pk, fk_countries_pk, fk_company_types_pk, company_name, short_name, organization_number,
-          api_uuid, language, "timeZone", currency, address, postal_code, city, inserted_at, updated_at)
-       VALUES ($1,'SE','AB',$2,$3,$4,$5,'sv','Europe/Stockholm','SEK','Testgatan 1','11111','Stockholm',now(),now())`,
-      [orgId, name, shortName, orgNumber(), uuid()]
+          api_uuid, language, "timeZone", currency, address, postal_code, city,
+          bookkeeping_start_date, skv_fiscal_year_start, skv_fiscal_year_end,
+          is_registered_for_vat, vat_registration_date, registered_for_f_tax, is_employer,
+          inserted_at, updated_at)
+       VALUES ($1,'SE','AB',$2,$3,$4,$5,'sv','Europe/Stockholm','SEK','Testgatan 1','11111','Stockholm',
+               $6,$7,$8,$9,$10,$11,$12,now(),now())`,
+      [
+        orgId,
+        name,
+        shortName,
+        orgNumber(),
+        uuid(),
+        fiscalYear ? fy.start : null, // bookkeeping_start_date
+        fiscalYear ? fy.start : null, // skv_fiscal_year_start
+        fiscalYear ? fy.end : null, // skv_fiscal_year_end
+        fiscalYear ? true : null, // is_registered_for_vat
+        fiscalYear ? fy.start : null, // vat_registration_date
+        fiscalYear ? true : null, // registered_for_f_tax
+        fiscalYear ? true : null, // is_employer
+      ]
     )
     await client.query(
       `INSERT INTO service_accounts.companies2users
@@ -131,6 +164,34 @@ async function createAccount({ local, name, ownerUserId, execute = false } = {})
       )
     }
     plan.tosAccepted = activeTos.rowCount
+
+    if (fiscalYear) {
+      // The fiscal year itself (service-ledger owns it; HQ's "Räkenskapsår" + all booking depends on it).
+      await client.query(
+        `INSERT INTO service_ledger.fiscal_year (id, company_id, start_date, end_date, created_at, closed)
+         VALUES ($1,$2,$3,$4,now(),false)`,
+        [uuid(), orgId, fy.start, fy.end]
+      )
+      // The temporal source of truth mirroring the columns set above. `fiscalYear` carries the period in
+      // both the value and the row's own start/endDate (matching how ibSync writes it); the registration
+      // flags are open-ended from the start of the year.
+      const tkv = [
+        { key: 'fiscalYear', value: { start: fy.start, end: fy.end }, startDate: fy.start, endDate: fy.end },
+        { key: 'hasVatRegistration', value: true, startDate: fy.start, endDate: null },
+        { key: 'hasCompanyTax', value: true, startDate: fy.start, endDate: null }, // F-skatt
+        { key: 'hasEmployeeRegistration', value: true, startDate: fy.start, endDate: null },
+      ]
+      for (const t of tkv) {
+        await client.query(
+          `INSERT INTO service_accounts."temporalKeyValue"
+             (id, "organizationId", key, value, "startDate", "endDate", "setBySource", "createdAt", "updatedAt")
+           VALUES ($1,$2,$3,$4::jsonb,$5,$6,'user',now(),now())`,
+          [uuid(), orgId, t.key, JSON.stringify(t.value), t.startDate, t.endDate]
+        )
+      }
+      plan.temporalKeys = tkv.map((t) => t.key)
+    }
+
     await client.query('COMMIT')
     return plan
   } catch (e) {

package/lib/command/customer.js

@@ -87,11 +87,23 @@ module.exports = {
           y2
             .positional('name', { type: 'string', describe: 'company name for the new account' })
             .option('owner', { type: 'string', demandOption: true, describe: 'user (users_pk) to set as Owner' })
+            .option('fiscal-year', {
+              type: 'boolean',
+              default: true,
+              describe:
+                'create the current-year fiscal year + default company information (VAT/F-skatt/employer registered, bookkeeping start). --no-fiscal-year leaves all of it blank',
+            })
             .option('port', { type: 'number', default: 55432, describe: 'local Postgres port' })
             .option('execute', { type: 'boolean', default: false, describe: 'actually create (default: dry-run)' }),
         handler: async (argv) => {
           const local = { host: 'localhost', port: argv.port, user: 'dooer', password: 'dooer', database: 'dooer' }
-          const res = await createAccount({ local, name: argv.name, ownerUserId: argv.owner, execute: argv.execute })
+          const res = await createAccount({
+            local,
+            name: argv.name,
+            ownerUserId: argv.owner,
+            execute: argv.execute,
+            fiscalYear: argv.fiscalYear,
+          })
           if (argv.execute) {
             console.log(chalk.green(`\ncreated account "${res.name}"`))
             console.log(`  org id:        ${res.orgId}`)
@@ -100,6 +112,11 @@ module.exports = {
             console.log(`  partner:       ${res.partner}`)
             console.log(`  subscriptions: ${SUBSCRIPTION_TYPES.join(', ')} (active)`)
             console.log(`  TOS:           ${res.tosAccepted} version(s) pre-accepted`)
+            console.log(
+              res.fiscalYear
+                ? `  fiscal year:   ${res.fiscalYear.start} → ${res.fiscalYear.end} (+ VAT/F-skatt/employer registered; ${res.temporalKeys.length} temporal keys)`
+                : `  fiscal year:   none (--no-fiscal-year)`
+            )
           }
           if (res.warning) console.log(chalk.yellow(`\n⚠  ${res.warning}`))
         },

package/lib/command/service.js

@@ -79,7 +79,8 @@ module.exports = {
         command: 'deploy <name> <tag>',
         describe: 'switch a service to a published registry version/tag (upgrade/downgrade)',
         handler: (a) => {
-          if (!a.tag || typeof a.tag !== 'string') throw new Error('missing image tag, e.g. `service deploy <name> 1.2.3`')
+          if (!a.tag || typeof a.tag !== 'string')
+            throw new Error('missing image tag, e.g. `service deploy <name> 1.2.3`')
           const base = imageFor(a.name, rt.SERVICES_DIR)
           if (!base) throw new Error(`unknown service ${a.name} (no manifest image)`)
           const image = `${base.replace(/:[^:/]+$/, '')}:${a.tag}`

package/lib/compose/generate.js

@@ -18,6 +18,7 @@ const AUTH_PRIVATE_KEY_PEM = Buffer.from(AUTH_PRIVATE_KEY_B64, 'base64').toStrin
 
 // The narrower `booking` profile — the minimum set to drive a booking end to end.
 const BOOKING_PROFILE_SERVICES = [
+  'public-facade', // the browser-facing entrypoint (GraphQL + REST passthrough) — frontends need it
   'service-graphql',
   'service-core-objects',
   'service-accounts',
@@ -101,6 +102,12 @@ const SERVICE_ENV_OVERRIDES = {
   // library's built-in TEST cert (appapi2.test.bankid.com). Present → `up` also sets IS_PRODUCTION=true, so
   // local login uses PRODUCTION BankID exactly like staging (@dooer/config env override beats the
   // per-environment `local:false`). See lib/bankid.js.
+  'public-facade': {
+    // The manifest ships DOOER_HOST_PROTOCOL="" — an EMPTY value that overrides the config default
+    // ("http"), so @dooer/facade builds protocol-less upstream URLs and falls back to port 80
+    // (ECONNREFUSED ::1:80 → 502 on every proxied route). Restore the default explicitly.
+    DOOER_HOST_PROTOCOL: 'http',
+  },
   'service-accounts': {
     // service-accounts is the only token SIGNER — give it the LOCAL dev private key matching the public key
     // forced on every verifier (GLOBAL_OVERRIDES.DOOER_AUTH_PUBLIC_KEY). Non-secret dev material.
@@ -292,7 +299,11 @@ function infraServices() {
 }
 
 // Host ports published so the BROWSER (and dev) can reach things on localhost.
-const GATEWAY_HOST_PORT = 4000 // service-graphql (the public GraphQL facade the frontends' browsers call)
+// public-facade is the browser-facing entrypoint (api.dooer.com / api.s-e032.com): it serves GraphQL AND
+// the REST passthrough (e.g. /v1/companies/:org/documents/:doc/pages/:page image URLs). service-graphql is
+// an internal backend it fronts — NOT the facade — so it gets its own port for direct dev access.
+const FACADE_HOST_PORT = 4000 // public-facade  → DOOER_PUBLIC_FACADE_HOST / DOOER_GRAPHQL_HOST
+const GRAPHQL_HOST_PORT = 4001 // service-graphql (direct access; frontends go through the facade)
 const HQ_HOST_PORT = 8080 // frontend-hq
 
 // host port for a frontend: HQ is pinned to 8080; the rest get 8081+ in sorted order.
@@ -327,7 +338,9 @@ const FRONTEND_URL_ENV = {
 // cross-frontend base URL → its frontend's own host port. Only rewrites keys already present (from the
 // manifest) whose target frontend has a known port. Applied to services AND frontends.
 function rewriteBrowserUrls(env, portMap) {
-  if ('DOOER_PUBLIC_FACADE_HOST' in env) env.DOOER_PUBLIC_FACADE_HOST = `http://localhost:${GATEWAY_HOST_PORT}`
+  // Both point at public-facade (on staging both are https://api.s-e032.com) — not at service-graphql.
+  if ('DOOER_PUBLIC_FACADE_HOST' in env) env.DOOER_PUBLIC_FACADE_HOST = `http://localhost:${FACADE_HOST_PORT}`
+  if ('DOOER_GRAPHQL_HOST' in env) env.DOOER_GRAPHQL_HOST = `http://localhost:${FACADE_HOST_PORT}`
   for (const [key, frontendName] of Object.entries(FRONTEND_URL_ENV)) {
     if (key in env && portMap[frontendName]) env[key] = `http://localhost:${portMap[frontendName]}`
   }
@@ -357,8 +370,9 @@ function buildCompose(services, frontends, { profile } = {}) {
       // (Consul path) which hangs on consul-template.
       command: svc.command || ['./CMD-OPF.sh'],
       environment: rewriteBrowserUrls({ ...buildServiceEnv(svc), ...(SERVICE_ENV_OVERRIDES[svc.name] || {}) }, portMap),
-      // publish the GraphQL gateway on the host so the frontends' browsers can reach it at localhost
-      ...(svc.name === 'service-graphql' ? { ports: [`${GATEWAY_HOST_PORT}:3000`] } : {}),
+      // publish the browser-facing facade (4000) and service-graphql (4001) on the host
+      ...(svc.name === 'public-facade' ? { ports: [`${FACADE_HOST_PORT}:3000`] } : {}),
+      ...(svc.name === 'service-graphql' ? { ports: [`${GRAPHQL_HOST_PORT}:3000`] } : {}),
       // legacy-name DNS aliases (e.g. service-periods → service-closing), so callers resolving the old name
       // reach this container on the compose network.
       ...(SERVICE_ALIASES[svc.name] ? { networks: { default: { aliases: SERVICE_ALIASES[svc.name] } } } : {}),
@@ -382,7 +396,7 @@ function buildCompose(services, frontends, { profile } = {}) {
     // Repoint the facade + every cross-frontend link at the right local ports. Each base URL points at the
     // frontend that SERVES it (e.g. DOOER_PUBLIC_FRONTEND_BASE_URL → frontend-sumify-neue's port), never at
     // this app's own port — that was the bug that sent HQ's "open go.dooer.com" button to localhost:8080.
-    if (!('DOOER_PUBLIC_FACADE_HOST' in env)) env.DOOER_PUBLIC_FACADE_HOST = `http://localhost:${GATEWAY_HOST_PORT}`
+    if (!('DOOER_PUBLIC_FACADE_HOST' in env)) env.DOOER_PUBLIC_FACADE_HOST = `http://localhost:${FACADE_HOST_PORT}`
     rewriteBrowserUrls(env, portMap)
     composeServices[fe.name] = {
       image: fe.image,

package/lib/compose/manifests.js

@@ -19,6 +19,11 @@ const DEFAULT_SERVICES_DIR = path.resolve(
 
 const SERVICE_FILE_RE = /^service-.*\.yaml$/
 const FRONTEND_FILE_RE = /^frontend-.*\.yaml$/
+// Backend services whose manifest filename doesn't match `service-*.yaml` but which are real runnable
+// Deployments we must include. public-facade is the browser-facing REST+GraphQL entrypoint
+// (DOOER_PUBLIC_FACADE_HOST); without it, document page images (/v1/…/pages/…) and other REST passthrough
+// 404. (Jimmy 2026-09-03.)
+const EXTRA_SERVICE_FILES = ['public-facade.yaml']
 
 // Pull the application container out of a Deployment doc. Containers are named
 // `node` across the fleet; fall back to the first container defensively.
@@ -67,7 +72,7 @@ function listServices(servicesDir) {
   const dir = servicesDir || DEFAULT_SERVICES_DIR
   return fs
     .readdirSync(dir)
-    .filter((f) => SERVICE_FILE_RE.test(f))
+    .filter((f) => SERVICE_FILE_RE.test(f) || EXTRA_SERVICE_FILES.includes(f))
     .sort()
     .map((f) => parseManifestFile(path.join(dir, f)))
     .filter(Boolean)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dooer/dooer-test-env",
-  "version": "1.2.3",
+  "version": "1.4.0",
   "description": "Run the whole Dooer backend locally (staging DB minus customers), copy/purge customers between environments, and shred — one CLI.",
   "license": "UNLICENSED",
   "repository": "Dooer/cli-dooer-test-env",