ekwo-os 0.19.0 → 0.21.1

package/README.md

@@ -171,7 +171,11 @@ project reports what was already there and creates nothing a second time.
 | `ekwo contact duplicates` | The pairs of contacts that are probably one party, strongest first, through `suggest_duplicate_contacts()`: which one to keep, a score, and the evidence — the same VAT or registration number, the same bank account, the words of the name weighed by how few contacts carry them. Writes nothing. |
 | `ekwo contact merge <keep> <absorb>` | One party created twice — two spellings, two imports — joined through `merge_contacts()`: everything that names the second, posted lines and issued documents included, names the first; the first takes the fields it left empty; the second is retired, never deleted, and named by nothing again. By name or id. |
 | `ekwo doc new` / `doc line add` | A draft document — any kind, with `--type` — and one more line on it. A draft books nothing. `ekwo invoice` is the old name of `ekwo doc`, kept as an alias. |
-| `ekwo post <document>` | Books it, through `post_document()`. `--dry-run` shows the entry the database would write and writes nothing. |
+| `ekwo doc approve <document>` | Approves a draft, as it stands, for an agent to post where agents post in `review`, through `approve_document()`. Signed in as yourself, with `documents.post`; refused to a machine key. A change to the draft afterwards needs another approval. |
+| `ekwo company agent-posting [review\|autopilot\|review_only]` | The setting `agent_posting`: how an agent — a machine key, the MCP server — books a document of the company in use. `review`, the default, once a person approved it, unless the agent's session was started with `--autopilot`; `autopilot`, directly, within its rights, each posting on the audit trail; `review_only`, review with autopilot refused to every session. Without a value, says which. Signed in as yourself, with `company.write`; an agent may only make it stricter. |
+| `ekwo key list [--all]` / `ekwo key create <name> --capability <code>… [--expires <timestamp>] [--autopilot]` | The machine keys of the company in use, with what each may do and how it posts; and one more, through `create_api_key()`, its secret shown once. A key posts as the company's `agent_posting` says; `--autopilot` issues one that posts without approvals — with `company.write`, never in a `review_only` company — and the mode is fixed for good: a key wanted in another mode is issued again. Needs `members.manage`. |
+| `ekwo mcp [--autopilot\|--review]` | The MCP server, over stdio, for an agent: the same server as `ekwo-mcp` of [`@ekwo-ai/mcp`](../mcp/README.md), with its flags and its environment (`ekwo mcp --help`). The `@ekwo-ai/mcp` installed beside this CLI, or the one of its release through `npx` — this CLI keeps its one outside dependency. In `.mcp.json`: `"command": "ekwo", "args": ["mcp"]`. |
+| `ekwo post <document>` | Books it, through `post_document()`. `--dry-run` shows the entry the database would write and writes nothing. Signed in as yourself, you post in any mode; with a machine key, the company's `agent_posting` applies, or the key's own autopilot. |
 | `ekwo cancel <document>` | Undoes a posted invoice, and says how. Back to draft, through `unpost_document()`, where its country allows it and nothing about it has left; otherwise through `cancel_document()`: the credit note that names it, posted and matched against it, and the invoice cancelled. `--date` books the credit note on another day than the invoice's, which is how a locked period is stepped over; `--credit` asks for the note where a draft was possible. |
 | `ekwo reverse <entry>` | Undoes a posted entry keyed by hand, through `reverse_entry()`: its mirror, posted and matched against it. By id or by number; `--date` as for `cancel`. |
 | `ekwo line contacts suggest [--line <line>]…` / `ekwo line contact set <line> <contact>` | The open receivable and payable lines that name nobody — open items of books imported line by line — with the contacts each could be, best first: a learned motif, the number of a document of the company quoted in the label, the description or the reference of the entry, the words of a contact's name, and how many contacts the same evidence reached. `set` names one, once, through `set_line_contact()`, and the label is learned for the next time. A contact by name or id. |
@@ -386,6 +390,14 @@ extra tables are reported as information. It also checks row level security on
 every table, pending migrations, memberships of deleted users, companies
 without a bank account, and posted entries that do not balance.
 
+Two checks say where the socle lives, ahead of its move to the schema `ekwo`
+in 0.22.0 ([decision 0090](../../docs/decisions/0090-the-socle-has-its-own-schema.md)):
+`socle_schema` (`ekwo` or `public`, found by the marker `ekwo_schema_version()`)
+and `ekwo_exposed` (whether the Data API serves `ekwo`, read from
+`pgrst.db_schemas` where the database carries it; otherwise the line to set).
+`ekwo migrate` prints the same line: Project Settings → Data API → Exposed
+schemas, add `ekwo`.
+
 Exit code `0` when there is no problem, `1` otherwise — usable as a deployment
 gate.
 
@@ -529,7 +541,7 @@ exactly six fields:
   "organization": "My Organisation",
   "country": "<cc>",
   "edition": "community",
-  "schema_version": "0.19.0",
+  "schema_version": "0.21.0",
   "contact_email": "you@example.com"
 }
 ```

package/dist/assets/expected-objects.json

@@ -1,6 +1,6 @@
 {
-  "schemaVersion": "0.19.0",
-  "migration": "20261023124700",
+  "schemaVersion": "0.21.0",
+  "migration": "20261026030000",
   "socle": {
     "schema": "public",
     "tables": [
@@ -346,6 +346,10 @@
             "name": "name",
             "type": "text"
           },
+          {
+            "name": "posting_mode",
+            "type": "text"
+          },
           {
             "name": "prefix",
             "type": "text"
@@ -889,6 +893,10 @@
             "name": "address_line2",
             "type": "text"
           },
+          {
+            "name": "agent_posting",
+            "type": "text"
+          },
           {
             "name": "archived_at",
             "type": "timestamp with time zone"
@@ -1845,6 +1853,10 @@
             "name": "tax_payee_name",
             "type": "text"
           },
+          {
+            "name": "tax_payee_name_i18n",
+            "type": "jsonb"
+          },
           {
             "name": "tax_payee_source_key",
             "type": "text"
@@ -4747,6 +4759,18 @@
         "name": "aged_balance",
         "arguments": "p_company_id uuid, p_at date, p_group text"
       },
+      {
+        "name": "agent_call",
+        "arguments": ""
+      },
+      {
+        "name": "agent_mark",
+        "arguments": "p_name text"
+      },
+      {
+        "name": "agent_posting_mode",
+        "arguments": "p_company_id uuid"
+      },
       {
         "name": "amount_text_format",
         "arguments": "p_rounding money_rounding"
@@ -4771,6 +4795,10 @@
         "name": "api_key_on_company",
         "arguments": "p_company_id uuid"
       },
+      {
+        "name": "approve_document",
+        "arguments": "p_document_id uuid"
+      },
       {
         "name": "archive_company",
         "arguments": "p_company_id uuid"
@@ -4943,6 +4971,10 @@
         "name": "commercial_entity",
         "arguments": "p_contact_id uuid"
       },
+      {
+        "name": "companies_agent_posting_by_a_person",
+        "arguments": ""
+      },
       {
         "name": "companies_creator_is_fixed",
         "arguments": ""
@@ -5077,12 +5109,16 @@
       },
       {
         "name": "create_api_key",
-        "arguments": "p_company_id uuid, p_name text, p_capabilities jsonb, p_expires_at timestamp with time zone"
+        "arguments": "p_company_id uuid, p_name text, p_capabilities jsonb, p_expires_at timestamp with time zone, p_posting_mode text"
       },
       {
         "name": "create_company",
         "arguments": "p_name text, p_country character, p_currency_code character, p_language character, p_chart_code text, p_fiscal_year integer, p_fiscal_year_start date, p_owner_user_id uuid"
       },
+      {
+        "name": "create_document",
+        "arguments": "p_document jsonb, p_lines jsonb"
+      },
       {
         "name": "currency_of_bank_account",
         "arguments": ""
@@ -5199,6 +5235,10 @@
         "name": "document_territory",
         "arguments": "p_document_id uuid, p_party text"
       },
+      {
+        "name": "document_version",
+        "arguments": "p_document_id uuid"
+      },
       {
         "name": "documents_allocate_included_tax",
         "arguments": "p_document_id uuid"
@@ -5219,6 +5259,10 @@
         "name": "documents_match_credit_note_on_posting",
         "arguments": ""
       },
+      {
+        "name": "documents_posting_mode",
+        "arguments": ""
+      },
       {
         "name": "documents_refresh_amount_paid",
         "arguments": "p_document_id uuid"
@@ -5815,6 +5859,10 @@
         "name": "reopen_fiscal_year",
         "arguments": "p_fiscal_year_id uuid"
       },
+      {
+        "name": "replace_document_lines",
+        "arguments": "p_document_id uuid, p_lines jsonb"
+      },
       {
         "name": "resolve_counterpart_account",
         "arguments": "p_company_id uuid, p_contact_id uuid, p_is_sale boolean"
@@ -6095,6 +6143,10 @@
         "name": "version_at_least",
         "arguments": "p_version text, p_floor text"
       },
+      {
+        "name": "write_filing_outcome",
+        "arguments": "p_filing_id uuid, p_state tax_filing_state, p_reference text, p_message text"
+      },
       {
         "name": "year_result_account",
         "arguments": "p_company_id uuid, p_balance numeric"
@@ -6646,11 +6698,6 @@
         "name": "tax_filing_deposits_select",
         "command": "select"
       },
-      {
-        "table": "tax_filing_deposits",
-        "name": "tax_filing_deposits_write",
-        "command": "all"
-      },
       {
         "table": "tax_filings",
         "name": "tax_filings_select",
@@ -6841,6 +6888,10 @@
         "table": "bank_transactions",
         "name": "bank_transactions_set_updated_at"
       },
+      {
+        "table": "companies",
+        "name": "companies_agent_posting_by_a_person"
+      },
       {
         "table": "companies",
         "name": "companies_audit"
@@ -7105,6 +7156,10 @@
         "table": "documents",
         "name": "documents_match_credit_note_on_posting"
       },
+      {
+        "table": "documents",
+        "name": "documents_posting_mode"
+      },
       {
         "table": "documents",
         "name": "documents_refresh_payment_state"
@@ -8693,16 +8748,10 @@
           "name": "tax_filing_deposits",
           "anon": [],
           "authenticated": [
-            "delete",
-            "insert",
-            "select",
-            "update"
+            "select"
           ],
           "service_role": [
-            "delete",
-            "insert",
-            "select",
-            "update"
+            "select"
           ]
         },
         {
@@ -9059,6 +9108,39 @@
             "execute"
           ]
         },
+        {
+          "name": "agent_call",
+          "arguments": "",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
+        {
+          "name": "agent_mark",
+          "arguments": "p_name text",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
+        {
+          "name": "agent_posting_mode",
+          "arguments": "p_company_id uuid",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "amount_text_format",
           "arguments": "p_rounding money_rounding",
@@ -9127,6 +9209,17 @@
             "execute"
           ]
         },
+        {
+          "name": "approve_document",
+          "arguments": "p_document_id uuid",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "archive_company",
           "arguments": "p_company_id uuid",
@@ -9547,6 +9640,14 @@
             "execute"
           ]
         },
+        {
+          "name": "companies_agent_posting_by_a_person",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "companies_creator_is_fixed",
           "arguments": "",
@@ -9857,7 +9958,7 @@
         },
         {
           "name": "create_api_key",
-          "arguments": "p_company_id uuid, p_name text, p_capabilities jsonb, p_expires_at timestamp with time zone",
+          "arguments": "p_company_id uuid, p_name text, p_capabilities jsonb, p_expires_at timestamp with time zone, p_posting_mode text",
           "anon": [],
           "authenticated": [
             "execute"
@@ -9877,6 +9978,17 @@
             "execute"
           ]
         },
+        {
+          "name": "create_document",
+          "arguments": "p_document jsonb, p_lines jsonb",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "currency_of_bank_account",
           "arguments": "",
@@ -10154,6 +10266,17 @@
             "execute"
           ]
         },
+        {
+          "name": "document_version",
+          "arguments": "p_document_id uuid",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "documents_allocate_included_tax",
           "arguments": "p_document_id uuid",
@@ -10197,6 +10320,14 @@
           "authenticated": [],
           "service_role": []
         },
+        {
+          "name": "documents_posting_mode",
+          "arguments": "",
+          "trigger": true,
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "documents_refresh_amount_paid",
           "arguments": "p_document_id uuid",
@@ -11764,6 +11895,17 @@
             "execute"
           ]
         },
+        {
+          "name": "replace_document_lines",
+          "arguments": "p_document_id uuid, p_lines jsonb",
+          "anon": [],
+          "authenticated": [
+            "execute"
+          ],
+          "service_role": [
+            "execute"
+          ]
+        },
         {
           "name": "resolve_counterpart_account",
           "arguments": "p_company_id uuid, p_contact_id uuid, p_is_sale boolean",
@@ -12506,6 +12648,13 @@
             "execute"
           ]
         },
+        {
+          "name": "write_filing_outcome",
+          "arguments": "p_filing_id uuid, p_state tax_filing_state, p_reference text, p_message text",
+          "anon": [],
+          "authenticated": [],
+          "service_role": []
+        },
         {
           "name": "year_result_account",
           "arguments": "p_company_id uuid, p_balance numeric",

package/dist/assets/migrations/20261023160000_a_declaration_already_paid_says_so.sql

@@ -0,0 +1,45 @@
+-- Ekwo OS — a declaration whose debt was matched before matching said so is paid.
+--
+-- `20261023124650` made a declaration paid when the line its settlement
+-- carried the net on is matched in full — by the trigger
+-- `tax_filings_paid_by_matching`, which fires when `matched_amount` moves. A
+-- debt matched before that migration ran never moved again, so its
+-- declaration stayed `accepted` with its money in the bank.
+--
+-- This finds them and records `paid` through `record_filing_outcome()`, the
+-- function the trigger calls, so the declaration and its last deposit carry
+-- the outcome exactly as if the payment had been matched today. The line is
+-- the one the trigger reads: in the settlement entry, on the account the pack
+-- names for the side the period ended on — `tax_payable_code`, or for a
+-- credit `tax_receivable_code` where the pack names one — with something to
+-- pay and nothing left open. A debt paid in part stays accepted, as it would
+-- by the trigger.
+--
+-- It only ever reads `accepted` declarations and writes them `paid`, so a
+-- second run finds nothing to do.
+
+do $$
+declare
+  r record;
+begin
+  for r in
+    select f.id
+      from tax_filings f
+      join companies c on c.id = f.company_id
+      join country_defaults d on d.country = c.fiscal_country
+     where f.state = 'accepted'
+       and f.settlement_entry_id is not null
+       and exists (
+         select 1 from entry_lines l
+          where l.entry_id = f.settlement_entry_id
+            and l.account_id = account_id_by_code(f.company_id,
+                  case when f.credit_treatment is null then d.tax_payable_code
+                       else coalesce(d.tax_receivable_code, d.tax_payable_code) end)
+            and abs(l.debit - l.credit) > 0
+            and abs(l.debit - l.credit) - l.matched_amount = 0)
+     order by f.company_id, f.period_start, f.id
+  loop
+    perform record_filing_outcome(r.id, 'paid');
+  end loop;
+end;
+$$;