ekwo-os 0.12.2 → 0.13.0

package/README.md

@@ -173,12 +173,13 @@ project reports what was already there and creates nothing a second time.
 | `ekwo cancel <document>` | Undoes a posted invoice, and says how. Back to draft, through `unpost_document()`, where its country allows it and nothing about it has left; otherwise through `cancel_document()`: the credit note that names it, posted and matched against it, and the invoice cancelled. `--date` books the credit note on another day than the invoice's, which is how a locked period is stepped over; `--credit` asks for the note where a draft was possible. |
 | `ekwo reverse <entry>` | Undoes a posted entry keyed by hand, through `reverse_entry()`: its mirror, posted and matched against it. By id or by number; `--date` as for `cancel`. |
 | `ekwo payment record` | Money in or out, booked and matched. With `--doc`, against that document. |
-| `ekwo match <transaction> <document>` | A bank statement line pays a document, through `settle_from_statement()`. |
+| `ekwo match <transaction> <document>… [--amount <amount>]… [--extra "account=<code>,amount=<amount>,tax=<code>"]…` | A bank statement line pays documents, through `settle_from_statement()`: `--amount`, once per document, says how much settles each; `--extra` books the fee or the charges the line is net of in the same entry, and alone settles a bank charge. The line balances to the cent or is refused. |
 | `ekwo import <source> <file>…` | Books kept elsewhere — `trial-balance`, `fec`, `journal-items`, `journal-report`, `transaction-journal`, `xaf` — whole or not at all, through `import_books()`, with a correspondence of accounts and journals you save and give back; or a bank statement — `camt.053`, `coda`, `cfonb120` — as pending lines. `--dry-run` rehearses. See [taking over books](#taking-over-books-ekwo-import). |
 | `ekwo doc list` / `show` | What exists, and with `--unpaid` what is posted and still owed. See [keeping books](#keeping-books). |
 | `ekwo doc pdf <document>` | The PDF of a sale invoice or credit note, rendered from the books by [`@ekwo-ai/invoice-pdf`](../formats/invoice-pdf/README.md), with the logo the company names by URL (fetched by this command, from a public http(s) address only). Written to `--out`, or under its own name in the current directory. `--factur-x` embeds the CII of a posted sale and makes it a Factur-X PDF/A-3 (the rules it breaks end on exit 1); `--page-size Letter`; `--labels <file.json>` gives the words of the layout in the document's language. `ekwo document` is the whole word of `ekwo doc`. Records nothing. |
 | `ekwo proof stamp` / `upgrade` / `verify` | The sha256 of a filed file — a declaration, the annual accounts of a financial year, a document — committed to Bitcoin through the public OpenTimestamps calendars; only the hash leaves. `upgrade` completes the pending proofs of the company and is made to run on a schedule; `verify` checks a file against its proof and the block it names, and `--out` writes the `.ots` file any verifier reads. See [`docs/filing-proofs.md`](../../docs/filing-proofs.md). |
 | `ekwo einvoice validate` / `issue` / `status` / `list` | The electronic invoice of a posted sale, in the format its country pack declares, through the `einvoicing` module: `validate` writes it and names the rules it breaks (exit 1 if any), `issue` keeps it and with `--send --to <directory>` writes it to that folder, `status --refresh` follows it. See [`modules/einvoicing`](../../modules/einvoicing/README.md). |
+| `ekwo peppol validate <file>` / `lookup <participant>` | The Peppol network, with no installation and no sign-in. `validate` reads a UBL invoice or credit note as it arrived and names the rules it breaks — the arithmetic of EN 16931 and the electronic addresses of both parties — with exit 1 if any; nothing is booked. `lookup` checks a participant identifier (`0208:0999999922`, `iso6523-actorid-upis::…` or a symbolic scheme) and asks the DNS of the Service Metadata Locator whether it is registered, and with which Service Metadata Publisher; `--test` asks the acceptance network. Exit 0 only for a registered participant. See [`@ekwo-ai/peppol-ubl`](../formats/peppol-ubl/README.md#participant-identifiers-and-the-sml). |
 
 There is no `eject`, because there is nothing to eject from. The schema is in
 your database, the migrations are in the repository under AGPL-3.0, and
@@ -262,6 +263,7 @@ ekwo post job-7
 ekwo cancel job-7                # back to draft where the country allows it, else the credit note
 ekwo payment record --doc job-7 --amount 1750.00 --date 2026-06-30 --bank-account <id> --ref bank-1
 ekwo match <bank transaction id> job-9
+ekwo match <payout id> job-9 --extra "account=<fee account>,amount=3.00,tax=<tax code>"
 ekwo doc list --unpaid --since 2026-06-01 --json
 ```
 
@@ -517,7 +519,7 @@ exactly six fields:
   "organization": "My Organisation",
   "country": "<cc>",
   "edition": "community",
-  "schema_version": "0.12.2",
+  "schema_version": "0.13.0",
   "contact_email": "you@example.com"
 }
 ```

package/dist/assets/expected-objects.json

@@ -1,6 +1,6 @@
 {
-  "schemaVersion": "0.12.2",
-  "migration": "20261011163457",
+  "schemaVersion": "0.13.0",
+  "migration": "20261014164531",
   "socle": {
     "schema": "public",
     "tables": [
@@ -126,6 +126,101 @@
           }
         ]
       },
+      {
+        "name": "analysis_aggregates",
+        "columns": [
+          {
+            "name": "adds_unclosed_result",
+            "type": "boolean"
+          },
+          {
+            "name": "code",
+            "type": "text"
+          },
+          {
+            "name": "description",
+            "type": "text"
+          },
+          {
+            "name": "reading",
+            "type": "text"
+          },
+          {
+            "name": "sequence",
+            "type": "integer"
+          },
+          {
+            "name": "sign",
+            "type": "smallint"
+          }
+        ]
+      },
+      {
+        "name": "analysis_rules",
+        "columns": [
+          {
+            "name": "account_type",
+            "type": "account_type"
+          },
+          {
+            "name": "aggregate",
+            "type": "text"
+          },
+          {
+            "name": "balance_side",
+            "type": "text"
+          },
+          {
+            "name": "chart_code",
+            "type": "text"
+          },
+          {
+            "name": "code_from",
+            "type": "text"
+          },
+          {
+            "name": "code_to",
+            "type": "text"
+          },
+          {
+            "name": "country",
+            "type": "character(2)"
+          },
+          {
+            "name": "rule_kind",
+            "type": "text"
+          },
+          {
+            "name": "sequence",
+            "type": "integer"
+          }
+        ]
+      },
+      {
+        "name": "analysis_templates",
+        "columns": [
+          {
+            "name": "aggregate",
+            "type": "text"
+          },
+          {
+            "name": "chart_code",
+            "type": "text"
+          },
+          {
+            "name": "country",
+            "type": "character(2)"
+          },
+          {
+            "name": "legal_reference",
+            "type": "text"
+          },
+          {
+            "name": "source_key",
+            "type": "text"
+          }
+        ]
+      },
       {
         "name": "analytic_axes",
         "columns": [
@@ -1599,6 +1694,10 @@
             "name": "country",
             "type": "character(2)"
           },
+          {
+            "name": "evidence",
+            "type": "jsonb"
+          },
           {
             "name": "installed_at",
             "type": "timestamp with time zone"
@@ -3877,6 +3976,10 @@
         "name": "account_id_by_code",
         "arguments": "p_company_id uuid, p_code text"
       },
+      {
+        "name": "account_rule_catches",
+        "arguments": "p_rule_kind text, p_code_from text, p_code_to text, p_rule_type account_type, p_side text, p_code text, p_account_type account_type, p_balance numeric"
+      },
       {
         "name": "accounts_guard_frozen",
         "arguments": ""
@@ -4365,6 +4468,10 @@
         "name": "filings_touched_since",
         "arguments": "p_company_id uuid, p_from date, p_to date"
       },
+      {
+        "name": "financial_analysis",
+        "arguments": "p_company_id uuid, p_from date, p_to date"
+      },
       {
         "name": "financial_statement",
         "arguments": "p_company_id uuid, p_statement_code text, p_from date, p_to date"
@@ -4563,7 +4670,7 @@
       },
       {
         "name": "opening_balance",
-        "arguments": "p_company_id uuid, p_fiscal_year_id uuid, p_lines jsonb, p_allow_result_accounts boolean"
+        "arguments": "p_company_id uuid, p_fiscal_year_id uuid, p_lines jsonb, p_allow_result_accounts boolean, p_opening_date date, p_items jsonb"
       },
       {
         "name": "opening_journal_id",
@@ -4739,7 +4846,7 @@
       },
       {
         "name": "settle_from_statement",
-        "arguments": "p_transaction_id uuid, p_line_ids uuid[]"
+        "arguments": "p_transaction_id uuid, p_line_ids uuid[], p_amounts numeric[], p_extra_lines jsonb"
       },
       {
         "name": "share_document",
@@ -4910,6 +5017,21 @@
         "name": "accounts_write",
         "command": "all"
       },
+      {
+        "table": "analysis_aggregates",
+        "name": "analysis_aggregates_select",
+        "command": "select"
+      },
+      {
+        "table": "analysis_rules",
+        "name": "analysis_rules_select",
+        "command": "select"
+      },
+      {
+        "table": "analysis_templates",
+        "name": "analysis_templates_select",
+        "command": "select"
+      },
       {
         "table": "analytic_axes",
         "name": "analytic_axes_select",
@@ -6129,6 +6251,7 @@
         "labels": [
           "community",
           "maintained",
+          "proven",
           "reviewed",
           "ekwo"
         ]
@@ -6350,6 +6473,36 @@
             "update"
           ]
         },
+        {
+          "name": "analysis_aggregates",
+          "anon": [],
+          "authenticated": [
+            "select"
+          ],
+          "service_role": [
+            "select"
+          ]
+        },
+        {
+          "name": "analysis_rules",
+          "anon": [],
+          "authenticated": [
+            "select"
+          ],
+          "service_role": [
+            "select"
+          ]
+        },
+        {
+          "name": "analysis_templates",
+          "anon": [],
+          "authenticated": [
+            "select"
+          ],
+          "service_role": [
+            "select"
+          ]
+        },
         {
           "name": "analytic_axes",
           "anon": [],
@@ -7248,6 +7401,17 @@
             "execute"
           ]
         },
+        {
+          "name": "account_rule_catches",
+          "arguments": "p_rule_kind text, p_code_from text, p_code_to text, p_rule_type account_type, p_side text, p_code text, p_account_type account_type, p_balance numeric",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "accounts_guard_frozen",
           "arguments": "",
@@ -8449,6 +8613,17 @@
             "execute"
           ]
         },
+        {
+          "name": "financial_analysis",
+          "arguments": "p_company_id uuid, p_from date, p_to date",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "financial_statement",
           "arguments": "p_company_id uuid, p_statement_code text, p_from date, p_to date",
@@ -8996,7 +9171,7 @@
         },
         {
           "name": "opening_balance",
-          "arguments": "p_company_id uuid, p_fiscal_year_id uuid, p_lines jsonb, p_allow_result_accounts boolean",
+          "arguments": "p_company_id uuid, p_fiscal_year_id uuid, p_lines jsonb, p_allow_result_accounts boolean, p_opening_date date, p_items jsonb",
           "anon": [],
           "authenticated": [
             "execute"
@@ -9464,7 +9639,7 @@
         },
         {
           "name": "settle_from_statement",
-          "arguments": "p_transaction_id uuid, p_line_ids uuid[]",
+          "arguments": "p_transaction_id uuid, p_line_ids uuid[], p_amounts numeric[], p_extra_lines jsonb",
           "anon": [],
           "authenticated": [
             "execute"

package/dist/assets/migrations/20261011192741_pack_certification_proven.sql

@@ -0,0 +1,28 @@
+-- Ekwo OS — a pack can be proven on the real books of a company.
+--
+-- Between `maintained` and `reviewed` there was a step the scale could not
+-- say. A pack can reproduce, to the unit they were filed in, the statements a
+-- real company filed and the administration accepted, once that company's
+-- books are imported. That is more than the maintainers testing that the pack
+-- holds together, and it is less than a professional reading the pack against
+-- the law: it proves the cases that one company uses, and no other regime of
+-- the country. So the scale becomes:
+--
+--   community   contributed, not read by an accountant
+--   maintained  maintained by Ekwo, not yet reviewed by an accountant
+--   proven      maintained, and it reproduced a real company's accepted
+--               filing; the manifest of the pack says, per scope, what was
+--               reproduced and what was not tested
+--   reviewed    read by a named professional, with `certified_by`,
+--               `certified_at` and the sources they worked from
+--
+-- Nothing here moves a row: a pack becomes proven when its seed says so, and
+-- a new enum value cannot be used in the transaction that adds it anyway.
+
+alter type pack_certification add value if not exists 'proven' after 'maintained';
+
+comment on type pack_certification is
+  'How much a pack has been read: community (contributed, unread), maintained (by Ekwo, not yet reviewed), proven (maintained, and it reproduced the accepted filing of a real company whose books were imported; it proves the cases that company uses), reviewed (by a named professional). The value `ekwo` is deprecated and nothing writes it.';
+
+comment on column country_packs.certification_status is
+  'How much a pack has been read, printed by `ekwo init`: community (contributed, unread), maintained (by Ekwo, not yet reviewed), proven (it reproduced the accepted filing of a real company; the pack manifest carries the evidence), reviewed (by the professional named in certified_by).';

package/dist/assets/migrations/20261012050145_pack_evidence.sql

@@ -0,0 +1,28 @@
+-- Ekwo OS — what a proven pack was proven on, in the database that applies it.
+--
+-- `20261011192741` let a pack say it is `proven`, and `certification.evidence`
+-- in its manifest says on what: one entry per scope, with the kind of filing,
+-- the financial year, the result and one plain sentence. The status reached
+-- `country_packs`; the evidence stopped at the seed header and at
+-- `ekwo pack describe`, which reads a clone of the repository. An application
+-- or an agent that reads the installation saw the word `proven` and nothing
+-- that said which statements were reproduced and which were not tested — and
+-- what a proof did not cover is half of what it says.
+--
+-- `country_packs.evidence` brings it here, in the order the pack declares it.
+--
+-- Additive: one column, defaulting to an empty list, no backfill. The value is
+-- the pack's, and only the seed of a pack that carries evidence writes it, so
+-- the seeds of every other country keep running on a schema from before this
+-- file. Writing the evidence of a country in a migration would put a country
+-- back into the core.
+
+alter table country_packs
+  add column if not exists evidence jsonb not null default '[]'::jsonb;
+
+comment on column country_packs.evidence is
+  'What a proven pack was proven on, in the pack''s own order: [{scope, result, fiscal_year, filing, summary, checked_on}]. `result` is one of reproduced, partly_reproduced, not_tested. An entry names the kind of filing and never the company. Written by the generated seed of a pack that carries evidence; empty otherwise.';
+
+-- No object is created and no function is added, so there is nothing to grant
+-- and nothing to revoke: a column added to a table is reachable by whoever
+-- could already select that table, under the policies it already has.