[dev] [tofikwest] tofik/onboarding-vendor-step

[github-actions]

This is an automated pull request to merge tofik/onboarding-vendor-step into dev.
It was created by the [Auto Pull Request] action.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
app	Ready	Preview, Comment	Jan 16, 2026 3:22am

1 Skipped Deployment

Project	Deployment	Review	Updated (UTC)
portal	Skipped		Jan 16, 2026 3:22am

[cursor]

PR Summary

Major UX and data flow updates for vendor onboarding and review.

• Introduces VendorReviewClient and refactors review page to a hybrid server/client flow with SWR + task polling, loading state, and consumption of GlobalVendors risk data
• Onboarding “software” step now supports custom vendors (name + optional website) with autocomplete from GlobalVendors, debounced URL validation, error UI, and persistence across steps; blocks continue on invalid URLs
• Extends schemas/types (companyDetailsSchema, OnboardingFormFields, etc.) to include customVendors; captures and saves them in usePostPaymentOnboarding and complete-onboarding action
• Persists customVendors to context; when URLs provided, upserts new entries into GlobalVendors (pending approval)
• Vendor extraction pipeline enhanced: parses all selected vendors + custom URLs from context, merges user URLs, ensures missed vendors are added with defaults, enriches missing websites from GlobalVendors, and sets new vendors to in_progress
• Triggers batch vendor risk assessments via internal API (idempotent), and starts background research; API task now marks vendor status in_progress at task start (removed duplicate later update)

^{Written by Cursor Bugbot for commit 6281e73. This will update automatically on new commits. Configure here.}