feat: admin Chart of Accounts editor (L4) (#89)

Adds /coa page for L4 (owner/admin) users to view and manage tenant-specific
Chart of Accounts overrides alongside the 80 global defaults.

New: client/src/pages/CoaAdmin.tsx
- Searchable, filterable table (scope: all/global/tenant, type: 5 enum)
- Stats header: total / global / tenant-specific counts
- Create form with 8 fields (code, name, type, subtype, parent, schedule E,
  tax deductible, description)
- Toggle activate/deactivate for tenant-specific accounts
- Global defaults are displayed read-only (cannot be edited through this UI)
- L4 authorization enforced server-side; UI shows friendly "need owner/admin
  role" error if PATCH/POST returns 403

validateNewAccountCode() enforces the ChittyFinance code-range convention:
- 4-digit code required
- Code must fall inside one of the ranges defined for its type
  (e.g. expense codes must be in 5000-5499, 5100-5199, 6000-6099, 7000-7099,
  or 9000-9999)
- Code must not already exist for this tenant or as a global default
- Parent code must exist in the COA if provided

Hook additions (client/src/hooks/use-classification.ts):
- useCreateCoaAccount() — POST /api/coa
- useUpdateCoaAccount() — PATCH /api/coa/:id
- Both invalidate the tenant-scoped /api/coa cache on success

Wiring:
- /coa route added to App.tsx
- Sidebar link added (cfo, accountant roles; L4 check is server-side)

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: chitcommit

client/src/App.tsx

@@ -20,6 +20,7 @@ import Reports from "@/pages/Reports";
 import Integrations from "@/pages/Integrations";
 import Allocations from "@/pages/Allocations";
 import Classification from "@/pages/Classification";
+import CoaAdmin from "@/pages/CoaAdmin";
 
 // Lazy-load the Orbital Console (57KB + physics sim + canvas rendering)
 const OrbitalConsole = lazy(() => import("@/pages/OrbitalConsole"));
@@ -61,6 +62,7 @@ function Router() {
             <Route path="/properties/:id" component={PropertyDetail} />
             <Route path="/allocations" component={Allocations} />
             <Route path="/classification" component={Classification} />
+            <Route path="/coa" component={CoaAdmin} />
             <Route path="/connections" component={Connections} />
             <Route path="/admin" component={Admin} />
             <Route path="/orbital">

client/src/components/layout/Sidebar.tsx

@@ -4,7 +4,7 @@ import {
   Settings, Plug, Building2, Shield,
   ChevronDown, ChevronRight, ChevronsUpDown,
   Menu, X, Activity, LayoutDashboard,
-  ArrowLeftRight, Wallet, BarChart3, Cable, Orbit, GitBranch, Tags
+  ArrowLeftRight, Wallet, BarChart3, Cable, Orbit, GitBranch, Tags, BookOpen
 } from "lucide-react";
 import { useState, useMemo } from "react";
 import { useRole, type UserRole } from "@/contexts/RoleContext";
@@ -27,6 +27,7 @@ const NAV_ITEMS: NavItem[] = [
   { href: "/orbital", label: "Orbital", icon: Orbit, roles: ["cfo", "accountant", "bookkeeper", "user"], badge: "NEW" },
   { href: "/allocations", label: "Allocations", icon: GitBranch, roles: ["cfo", "accountant"] },
   { href: "/classification", label: "Classification", icon: Tags, roles: ["cfo", "accountant", "bookkeeper"] },
+  { href: "/coa", label: "Chart of Accounts", icon: BookOpen, roles: ["cfo", "accountant"] },
   { href: "/reports", label: "Reports", icon: BarChart3, roles: ["cfo", "accountant"] },
   { href: "/integrations", label: "Integrations", icon: Cable, roles: ["cfo", "accountant"] },
   { href: "/connections", label: "Connections", icon: Plug, roles: ["cfo", "accountant"] },

client/src/hooks/use-classification.ts

@@ -142,6 +142,40 @@ export function useBatchSuggest() {
   });
 }
 
+/** L4 — create a tenant-specific COA account */
+export function useCreateCoaAccount() {
+  const qc = useQueryClient();
+  const tenantId = useTenantId();
+  return useMutation({
+    mutationFn: (data: {
+      code: string;
+      name: string;
+      type: 'asset' | 'liability' | 'equity' | 'income' | 'expense';
+      subtype?: string | null;
+      description?: string | null;
+      scheduleELine?: string | null;
+      taxDeductible?: boolean;
+      parentCode?: string | null;
+    }) => apiRequest('POST', '/api/coa', data).then((r) => r.json()) as Promise<ChartOfAccount>,
+    onSuccess: () => {
+      qc.invalidateQueries({ queryKey: ['/api/coa', tenantId] });
+    },
+  });
+}
+
+/** L4 — update a tenant-specific COA account */
+export function useUpdateCoaAccount() {
+  const qc = useQueryClient();
+  const tenantId = useTenantId();
+  return useMutation({
+    mutationFn: ({ id, ...data }: { id: string } & Partial<ChartOfAccount>) =>
+      apiRequest('PATCH', `/api/coa/${id}`, data).then((r) => r.json()) as Promise<ChartOfAccount>,
+    onSuccess: () => {
+      qc.invalidateQueries({ queryKey: ['/api/coa', tenantId] });
+    },
+  });
+}
+
 /** L1 — run GPT-4o-mini AI batch over unclassified queue */
 export function useAiSuggest() {
   const qc = useQueryClient();