ekwo-os 0.10.0 → 0.11.0

package/README.md

@@ -305,13 +305,13 @@ instead if the account already exists, and no key is needed.
 |---|---|
 | `ekwo init` | The whole installation, interactive or not: the socle's migrations, the reference seeds, then the modules', as `ekwo migrate` applies them. `--no-company` stops before the first company: see [several countries](#several-countries-in-one-installation-init---no-company). |
 | `ekwo migrate` | Applies the migrations this release adds, after showing the gap — the socle's, then the modules'. Re-applies the reference seeds, which are idempotent. `--no-modules` leaves the modules alone. |
-| `ekwo status` | Schema version installed against available, pending migrations, the instance, its administrators, the country packs it holds and, per company, the pack version it copied. Exits 1 when something is pending. |
+| `ekwo status` | Schema version installed against available, pending migrations, the instance, its administrators, the country packs it holds and, per company, the pack version it copied. On an installation that is not registered, a short invitation to [register](#registering-with-ekwo). Exits 1 when something is pending. |
 | `ekwo doctor` | Every object this release defines and every privilege it grants, against what the database holds; row level security on every table, a policy on every protected table, no pending migration, no membership pointing at a deleted user, every company with a bank account, statements that tie to their lines, posted entries that balance. Exits 1 on a problem, 0 on warnings. |
-| `ekwo register` | Opt in to security advisories and release notes. Also the retry when the announcement did not go through. |
+| `ekwo register` | Opt in to security advisories and release notes. Optional: everything works the same without it. Also the retry when the announcement did not go through. |
 | `ekwo unregister` | Opt back out. Clears the address and the date on the instance row. |
 | `ekwo demo` | Loads the sample company. Fictional data, explicit request only. |
 | `ekwo module` | What is installed beside the socle, applies a module's migrations and its country seeds, and turns one on or off for a company. |
-| `ekwo company` | `new` creates a company in its own country, through `create_company()`, and `list` shows the companies held here. One company leaves an installation with its books — `export` writes an archive anybody can read, as a member under row level security — and arrives in another one alive: `import` takes it in whole or not at all. |
+| `ekwo company` | `new` creates a company in its own country, through `create_company()`, and `list` shows the companies held here. `show` reads the company in use as the person signed in — its financial years, lock dates, journals and accounts by role — the same document as the MCP tool `get_company`. One company leaves an installation with its books — `export` writes an archive anybody can read, as a member under row level security — and arrives in another one alive: `import` takes it in whole or not at all. |
 | `ekwo pack` | Compiles a country pack into its seed, and refuses a seed that is no longer the output of its pack. Runs in a checkout of the repository only. |
 | `ekwo login` | Signs in to an instance as yourself and keeps the session, in your own configuration directory. See [acting as a person](#acting-as-a-person-login-use-whoami). |
 | `ekwo logout` | Ends that session, here and on the instance. |
@@ -962,6 +962,7 @@ Every command takes `--json`; see [what a command answers](#what-a-command-answe
 | `EKWO_PROFILE` | `--profile` |
 | `EKWO_CONFIG_DIR` | Where profiles and sessions are kept. |
 | `EKWO_REGISTRY_URL` | `--registry-url`. Default `https://api.ekwo.ai/v1/registrations`. |
+| `EKWO_NO_REGISTER_INVITE` | Set to `1` to hide the invitation to register that `ekwo init` and `ekwo status` show on an installation that is not registered. The MCP server reads it too. |
 | `NO_COLOR` | Plain output. |
 
 See [`.env.example`](../../.env.example) at the root of the repository.
@@ -990,12 +991,24 @@ database the same way.
 
 ## Registering with Ekwo
 
-At the end of `ekwo init` you are asked:
+At the end of `ekwo init`, in a terminal, you are asked:
 
-> Register this installation with Ekwo to receive security advisories and
-> release notes?
+> Register this installation with Ekwo, for security advisories that concern
+> your version and release notes? Everything works the same without it.
 
-The default answer is no, and no is supported forever. Community works
+The default answer is no, and no is supported forever.
+
+Where nobody is asked — `--yes`, `--json`, a script — the end of `ekwo init`
+shows a short invitation instead, after everything else, and `ekwo status`
+shows the same one on an installation that is not registered: what registering
+gives, the six fields it sends and the one command,
+`npx -y ekwo-os@latest register --email <your address>`. Under `--json` it is
+the field `registration` of the document, `{ "registered": false,
+"invitation": { … } }`, and the standard output stays one document. It never
+waits for an answer, it disappears once the installation is registered, and
+`EKWO_NO_REGISTER_INVITE=1` hides it. The MCP server gives its agent one line
+to relay to the person, once, on the same terms; see
+[`docs/agents.md`](../../docs/agents.md#registering-the-installation). Community works
 unregistered: nothing in the schema and nothing in this CLI reads
 `contact_email` or `registered_at` to decide what you may do, and `edition`
 gates no feature.

package/dist/assets/expected-objects.json

@@ -1,6 +1,6 @@
 {
-  "schemaVersion": "0.10.0",
-  "migration": "20261002065918",
+  "schemaVersion": "0.11.0",
+  "migration": "20261007180000",
   "socle": {
     "schema": "public",
     "tables": [
@@ -345,6 +345,10 @@
             "name": "record_key",
             "type": "text"
           },
+          {
+            "name": "sequence",
+            "type": "integer"
+          },
           {
             "name": "table_name",
             "type": "text"
@@ -753,6 +757,10 @@
             "name": "created_at",
             "type": "timestamp with time zone"
           },
+          {
+            "name": "created_by",
+            "type": "uuid"
+          },
           {
             "name": "currency_code",
             "type": "character(3)"
@@ -2224,6 +2232,10 @@
             "name": "declaration_box",
             "type": "text"
           },
+          {
+            "name": "declared_on",
+            "type": "date"
+          },
           {
             "name": "entry_id",
             "type": "uuid"
@@ -2314,6 +2326,10 @@
       {
         "name": "instance",
         "columns": [
+          {
+            "name": "companies_per_person",
+            "type": "integer"
+          },
           {
             "name": "contact_email",
             "type": "text"
@@ -2354,6 +2370,10 @@
             "name": "schema_version",
             "type": "text"
           },
+          {
+            "name": "shared",
+            "type": "boolean"
+          },
           {
             "name": "updated_at",
             "type": "timestamp with time zone"
@@ -3748,6 +3768,10 @@
         "name": "accounts_in_use",
         "arguments": "p_company_id uuid, p_from date, p_to date"
       },
+      {
+        "name": "acting_user",
+        "arguments": ""
+      },
       {
         "name": "aged_balance",
         "arguments": "p_company_id uuid, p_at date, p_group text"
@@ -3784,6 +3808,14 @@
         "name": "assert_period_open",
         "arguments": "p_company_id uuid, p_date date, p_is_tax boolean"
       },
+      {
+        "name": "assert_references_within_company",
+        "arguments": "p_schema text"
+      },
+      {
+        "name": "assert_writes_into_known_company",
+        "arguments": "p_company_id uuid"
+      },
       {
         "name": "audit_changes",
         "arguments": ""
@@ -3868,6 +3900,10 @@
         "name": "commercial_entity",
         "arguments": "p_contact_id uuid"
       },
+      {
+        "name": "companies_creator_is_fixed",
+        "arguments": ""
+      },
       {
         "name": "companies_default_bank_account_is_ours",
         "arguments": ""
@@ -3900,6 +3936,10 @@
         "name": "company_archive_unclassified",
         "arguments": ""
       },
+      {
+        "name": "company_column",
+        "arguments": "p_table regclass"
+      },
       {
         "name": "company_filing_periods_mirror",
         "arguments": ""
@@ -3916,10 +3956,18 @@
         "name": "company_members_capabilities_known",
         "arguments": ""
       },
+      {
+        "name": "company_members_join_of_their_own_accord",
+        "arguments": ""
+      },
       {
         "name": "company_members_list",
         "arguments": "p_company_id uuid"
       },
+      {
+        "name": "company_references_by_id",
+        "arguments": "p_schema text"
+      },
       {
         "name": "company_role",
         "arguments": "p_company_id uuid"
@@ -3972,6 +4020,14 @@
         "name": "declaration_period_start",
         "arguments": "p_period declaration_period, p_day date"
       },
+      {
+        "name": "declared_lines",
+        "arguments": "p_company_id uuid, p_from date, p_to date"
+      },
+      {
+        "name": "declared_on_of",
+        "arguments": "p_tax_point_date date, p_entry_date date"
+      },
       {
         "name": "default_statement_code",
         "arguments": "p_company_id uuid, p_kind text, p_at date"
@@ -4056,6 +4112,10 @@
         "name": "enable_module",
         "arguments": "p_company_id uuid, p_code text, p_settings jsonb"
       },
+      {
+        "name": "entries_declared_on_follows",
+        "arguments": ""
+      },
       {
         "name": "entries_guard_kind",
         "arguments": ""
@@ -4084,6 +4144,10 @@
         "name": "entry_lines_guard_posted",
         "arguments": ""
       },
+      {
+        "name": "entry_lines_set_declared_on",
+        "arguments": ""
+      },
       {
         "name": "eu_vat_scope_of",
         "arguments": "p_code text, p_on date"
@@ -4208,10 +4272,22 @@
         "name": "installed_schema_version",
         "arguments": ""
       },
+      {
+        "name": "instance_admins_keep_one",
+        "arguments": ""
+      },
       {
         "name": "instance_has_no_admin",
         "arguments": ""
       },
+      {
+        "name": "instance_is_shared",
+        "arguments": ""
+      },
+      {
+        "name": "instance_sharing",
+        "arguments": ""
+      },
       {
         "name": "invite_member",
         "arguments": "p_company_id uuid, p_email text, p_role member_role, p_capabilities jsonb, p_valid_for interval"
@@ -4272,6 +4348,10 @@
         "name": "matching_policy_of",
         "arguments": "p_company_id uuid"
       },
+      {
+        "name": "may_know_of_company",
+        "arguments": "p_company_id uuid"
+      },
       {
         "name": "member_capabilities",
         "arguments": "p_company_id uuid, p_user_id uuid"
@@ -4464,6 +4544,10 @@
         "name": "rounding_of",
         "arguments": "p_company_id uuid, p_currency_code text"
       },
+      {
+        "name": "scope_references_to_company",
+        "arguments": "p_schema text"
+      },
       {
         "name": "set_member_role",
         "arguments": "p_company_id uuid, p_user_id uuid, p_role member_role, p_capabilities jsonb"
@@ -4492,6 +4576,10 @@
         "name": "share_document",
         "arguments": "p_document_id uuid, p_expires_at timestamp with time zone"
       },
+      {
+        "name": "share_instance",
+        "arguments": "p_companies_per_person integer"
+      },
       {
         "name": "shared_document",
         "arguments": "p_token text"
@@ -4524,6 +4612,10 @@
         "name": "tax_filing_boxes_are_frozen",
         "arguments": ""
       },
+      {
+        "name": "tax_filing_deposits_files_are_its_own",
+        "arguments": ""
+      },
       {
         "name": "tax_filings_report_exists",
         "arguments": ""
@@ -4584,6 +4676,10 @@
         "name": "unregister_instance",
         "arguments": ""
       },
+      {
+        "name": "unshare_instance",
+        "arguments": ""
+      },
       {
         "name": "upcoming_filings",
         "arguments": "p_company_id uuid, p_from date, p_to date"
@@ -4592,6 +4688,10 @@
         "name": "use_api_key",
         "arguments": "p_secret text"
       },
+      {
+        "name": "user_preferences_company_is_known",
+        "arguments": ""
+      },
       {
         "name": "vat_prefix_of",
         "arguments": "p_code text"
@@ -5203,6 +5303,10 @@
         "table": "companies",
         "name": "companies_audit"
       },
+      {
+        "table": "companies",
+        "name": "companies_creator_is_fixed"
+      },
       {
         "table": "companies",
         "name": "companies_default_bank_account_is_ours"
@@ -5251,6 +5355,10 @@
         "table": "company_members",
         "name": "company_members_capabilities_known"
       },
+      {
+        "table": "company_members",
+        "name": "company_members_join_of_their_own_accord"
+      },
       {
         "table": "company_members",
         "name": "company_members_set_updated_at"
@@ -5363,6 +5471,10 @@
         "table": "entries",
         "name": "entries_audit_posting"
       },
+      {
+        "table": "entries",
+        "name": "entries_declared_on_follows"
+      },
       {
         "table": "entries",
         "name": "entries_guard_kind"
@@ -5395,6 +5507,10 @@
         "table": "entry_lines",
         "name": "entry_lines_refresh_totals"
       },
+      {
+        "table": "entry_lines",
+        "name": "entry_lines_set_declared_on"
+      },
       {
         "table": "entry_lines",
         "name": "entry_lines_set_updated_at"
@@ -5431,6 +5547,10 @@
         "table": "instance_admins",
         "name": "instance_admins_audit"
       },
+      {
+        "table": "instance_admins",
+        "name": "instance_admins_keep_one"
+      },
       {
         "table": "instance_admins",
         "name": "instance_members_set_updated_at"
@@ -5495,6 +5615,10 @@
         "table": "tax_filing_boxes",
         "name": "tax_filing_boxes_are_frozen"
       },
+      {
+        "table": "tax_filing_deposits",
+        "name": "tax_filing_deposits_files_are_its_own"
+      },
       {
         "table": "tax_filings",
         "name": "tax_filings_audit"
@@ -5535,6 +5659,10 @@
         "table": "taxes",
         "name": "taxes_set_updated_at"
       },
+      {
+        "table": "user_preferences",
+        "name": "user_preferences_company_is_known"
+      },
       {
         "table": "user_preferences",
         "name": "user_preferences_set_updated_at"
@@ -6053,10 +6181,10 @@
           "name": "audit_log",
           "anon": [],
           "authenticated": [
-            "select"
+            "select(occurred_at, actor_id, api_key_id, company_id, table_name, record_id, record_key, operation, action, old_values, new_values, sequence)"
           ],
           "service_role": [
-            "select"
+            "select(occurred_at, actor_id, api_key_id, company_id, table_name, record_id, record_key, operation, action, old_values, new_values, sequence)"
           ]
         },
         {
@@ -6898,6 +7026,17 @@
             "execute"
           ]
         },
+        {
+          "name": "acting_user",
+          "arguments": "",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "aged_balance",
           "arguments": "p_company_id uuid, p_at date, p_group text",
@@ -6990,6 +7129,20 @@
             "execute"
           ]
         },
+        {
+          "name": "assert_references_within_company",
+          "arguments": "p_schema text",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
+        {
+          "name": "assert_writes_into_known_company",
+          "arguments": "p_company_id uuid",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "audit_changes",
           "arguments": "",
@@ -7191,6 +7344,14 @@
             "execute"
           ]
         },
+        {
+          "name": "companies_creator_is_fixed",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "companies_default_bank_account_is_ours",
           "arguments": "",
@@ -7270,6 +7431,13 @@
             "execute"
           ]
         },
+        {
+          "name": "company_column",
+          "arguments": "p_table regclass",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "company_filing_periods_mirror",
           "arguments": "",
@@ -7307,6 +7475,14 @@
           "authenticated": [],
           "service_role": []
         },
+        {
+          "name": "company_members_join_of_their_own_accord",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "company_members_list",
           "arguments": "p_company_id uuid",
@@ -7318,6 +7494,13 @@
             "execute"
           ]
         },
+        {
+          "name": "company_references_by_id",
+          "arguments": "p_schema text",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "company_role",
           "arguments": "p_company_id uuid",
@@ -7454,6 +7637,28 @@
             "execute"
           ]
         },
+        {
+          "name": "declared_lines",
+          "arguments": "p_company_id uuid, p_from date, p_to date",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
+        {
+          "name": "declared_on_of",
+          "arguments": "p_tax_point_date date, p_entry_date date",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "default_statement_code",
           "arguments": "p_company_id uuid, p_kind text, p_at date",
@@ -7660,6 +7865,14 @@
             "execute"
           ]
         },
+        {
+          "name": "entries_declared_on_follows",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "entries_guard_kind",
           "arguments": "",
@@ -7716,6 +7929,14 @@
           "authenticated": [],
           "service_role": []
         },
+        {
+          "name": "entry_lines_set_declared_on",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "eu_vat_scope_of",
           "arguments": "p_code text, p_on date",
@@ -8055,6 +8276,14 @@
             "execute"
           ]
         },
+        {
+          "name": "instance_admins_keep_one",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "instance_has_no_admin",
           "arguments": "",
@@ -8068,6 +8297,28 @@
             "execute"
           ]
         },
+        {
+          "name": "instance_is_shared",
+          "arguments": "",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
+        {
+          "name": "instance_sharing",
+          "arguments": "",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "invite_member",
           "arguments": "p_company_id uuid, p_email text, p_role member_role, p_capabilities jsonb, p_valid_for interval",
@@ -8240,6 +8491,17 @@
             "execute"
           ]
         },
+        {
+          "name": "may_know_of_company",
+          "arguments": "p_company_id uuid",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "member_capabilities",
           "arguments": "p_company_id uuid, p_user_id uuid",
@@ -8764,6 +9026,13 @@
             "execute"
           ]
         },
+        {
+          "name": "scope_references_to_company",
+          "arguments": "p_schema text",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "set_member_role",
           "arguments": "p_company_id uuid, p_user_id uuid, p_role member_role, p_capabilities jsonb",
@@ -8838,6 +9107,17 @@
             "execute"
           ]
         },
+        {
+          "name": "share_instance",
+          "arguments": "p_companies_per_person integer",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "shared_document",
           "arguments": "p_token text",
@@ -8925,6 +9205,14 @@
           "authenticated": [],
           "service_role": []
         },
+        {
+          "name": "tax_filing_deposits_files_are_its_own",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "tax_filings_report_exists",
           "arguments": "",
@@ -9079,6 +9367,17 @@
             "execute"
           ]
         },
+        {
+          "name": "unshare_instance",
+          "arguments": "",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "upcoming_filings",
           "arguments": "p_company_id uuid, p_from date, p_to date",
@@ -9101,6 +9400,14 @@
             "execute"
           ]
         },
+        {
+          "name": "user_preferences_company_is_known",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "vat_prefix_of",
           "arguments": "p_code text",