@fayz-ai/plugin-inventory 0.12.2 → 0.12.4

package/dist/index.js

@@ -1,7 +1,7 @@
 import React3, { useState, useMemo, useEffect, useCallback, useRef } from 'react';
-import { toast, defineKpiWidget, defineCustomWidget, PageTransition, ModulePage, Button, SubpageHeader, SearchSelect, cn, DatePicker, ListView, ConfirmDialog, Badge, DraftCommitBar, Switch, useSaveBar, DataTable, DashboardCanvas, Modal, ModalContent, ModalHeader, ModalTitle, ModalDescription, ModalBody, ModalFooter, StockEntryForm, KpiCard, Card, CardHeader, CardTitle, CardContent, Skeleton } from '@fayz-ai/ui';
-import { createPluginContext, PluginSettingsPanel, dedup, useModuleNavigation, createViewRouter, ModuleActionBar, useTenantPluginSettings, SettingsGroup, ToggleRow, usePermissionOptional, CrudListView, TeachMeLink, useLimitGuard, invalidateRelationOptions, CrudFormSkeleton, CrudFormPage, CrudDetailPage, formatCurrency, useAgentSurface, askAI, PermissionGate, QuickActionsButton, invalidateLimit } from '@fayz-ai/admin';
-import { createSafeDataProvider, registerTranslations, countByTenant, useTranslation, getActiveUnitId, errorMessage, useDataChanged, getSupabaseClientOptional, getActiveTenantId } from '@fayz-ai/core';
+import { toast, defineKpiWidget, defineCustomWidget, PageTransition, ModulePage, Button, SubpageHeader, SearchSelect, cn, DatePicker, ListView, ConfirmDialog, Badge, DraftCommitBar, Switch, useSaveBar, DataTable, DashboardCanvas, Thumbnail, Modal, ModalContent, ModalHeader, ModalTitle, ModalDescription, ModalBody, ModalFooter, StockEntryForm, KpiCard, Card, CardHeader, CardTitle, CardContent, Skeleton } from '@fayz-ai/ui';
+import { createPluginContext, PluginSettingsPanel, dedup, useModuleNavigation, createViewRouter, ModuleActionBar, useTenantPluginSettings, SettingsGroup, ToggleRow, usePermissionOptional, CrudListView, useLimitGuard, invalidateRelationOptions, CrudFormSkeleton, CrudFormPage, CrudDetailPage, formatCurrency, useAgentSurface, askAI, PermissionGate, QuickActionsButton, invalidateLimit } from '@fayz-ai/admin';
+import { createSafeDataProvider, registerTranslations, countByTenant, useTranslation, getActiveUnitId, createPendingCommand, errorMessage, useDataChanged, getSupabaseClientOptional, getActiveTenantId } from '@fayz-ai/core';
 import { jsxs, jsx, Fragment } from 'react/jsx-runtime';
 import { Trash2, ArrowRightLeft, RefreshCw, ArrowUpRight, ArrowDownRight, Package, Ruler, MapPin, Loader2, Check, ChevronRight, CircleSlash, CircleCheck, ClipboardCheck, AlertTriangle, Plus, BookOpen, Layers, Clock, Coins, Building2, Undo2, PackageX } from 'lucide-react';
 import { createStore as createStore$1 } from 'zustand/vanilla';
@@ -70,6 +70,17 @@ function normalizeMovementType(raw) {
   if (MOVEMENT_TYPE_VALUES.includes(v)) return v;
   return LEDGER_KIND_TO_TYPE[v] ?? LEGACY_PT_MOVEMENT_TYPE[v];
 }
+
+// src/lib/idempotency.ts
+function createIdempotencyKey(scope) {
+  let suffix;
+  try {
+    suffix = typeof globalThis.crypto?.randomUUID === "function" ? globalThis.crypto.randomUUID() : `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+  } catch {
+    suffix = `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+  }
+  return `${scope}:${suffix}`;
+}
 function TableSkeleton() {
   return /* @__PURE__ */ jsx("div", { className: "rounded-card border p-4 space-y-2", children: [1, 2, 3].map((i) => /* @__PURE__ */ jsx("div", { className: "h-3.5 rounded bg-muted/30 animate-pulse" }, i)) });
 }
@@ -87,6 +98,8 @@ function ProductStockTab({ item, onChanged }) {
   const [undoing, setUndoing] = useState(false);
   const [entryVerb, setEntryVerb] = useState(null);
   const [saving, setSaving] = useState(false);
+  const command = useRef(createPendingCommand(() => createIdempotencyKey("inventory:product-movement"), (input) => input.productId));
+  const [pending, setPending] = useState(false);
   const load = useCallback(async () => {
     setLoading(true);
     try {
@@ -104,25 +117,32 @@ function ProductStockTab({ item, onChanged }) {
     void load();
   }, [load]);
   const handleEntry = useCallback(async (entry) => {
+    if (command.current.running) return;
     setSaving(true);
+    setPending(true);
     try {
-      await provider.createMovement({
+      await command.current.run({
         productId: item.id,
         movementType: entry.verb,
         quantity: entry.quantity,
         ...entry.reasonCode ? { reason: entry.reasonCode } : {},
         ...entry.note ? { notes: entry.note } : {},
         ...entry.occurredOn ? { movementDate: entry.occurredOn } : {}
-      });
+      }, (input) => provider.createMovement(input));
       setEntryVerb(null);
-      await load();
-      onChanged?.();
+      try {
+        await load();
+        onChanged?.();
+      } catch {
+        toast.warning(t2("inventory.stock.refreshAfterCommit"));
+      }
     } catch (error) {
       toast.error(t2("inventory.productDetail.movementFailed"), {
         description: error.message
       });
     } finally {
       setSaving(false);
+      setPending(command.current.pending);
     }
   }, [item.id, provider, load, onChanged, t2]);
   const ordered = useMemo(
@@ -260,8 +280,12 @@ function ProductStockTab({ item, onChanged }) {
       StockEntryForm,
       {
         verb: entryVerb,
-        onVerbChange: setEntryVerb,
-        onClose: () => setEntryVerb(null),
+        onVerbChange: (verb) => {
+          if (!command.current.pending) setEntryVerb(verb);
+        },
+        onClose: () => {
+          if (!command.current.pending) setEntryVerb(null);
+        },
         verbs: MOVEMENT_TYPES.map((m) => ({
           value: m.value,
           label: t2(m.labelKey),
@@ -269,6 +293,8 @@ function ProductStockTab({ item, onChanged }) {
         })),
         available: onHand,
         saving,
+        readOnly: pending,
+        notice: pending ? t2("inventory.stock.pendingRetry") : void 0,
         onSubmit: (entry) => void handleEntry(entry),
         labels: {
           title: t2("inventory.productDetail.newMovement"),
@@ -335,13 +361,26 @@ function buildProductEntity(t2, productTypes, currency, onStockChanged, provider
       searchable: true,
       showInTable: true,
       sortable: true,
-      renderCell: (_v, row) => /* @__PURE__ */ jsxs("div", { children: [
-        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-1.5", children: [
-          /* @__PURE__ */ jsx("p", { className: `font-medium ${row.isActive === false ? "text-muted-foreground" : ""}`, children: row.name }),
-          row.isActive === false && /* @__PURE__ */ jsx("span", { className: "inline-flex items-center rounded-full bg-muted px-1.5 py-0.5 text-[9px] font-medium text-muted-foreground", children: t2("inventory.productList.inactive") })
-        ] }),
-        row.sku && /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: row.sku })
-      ] })
+      renderCell: (_v, row) => (
+        // A foto vem junto do nome, como na lista da loja. O produto de um
+        // estoque é uma COISA, e a pessoa que confere a prateleira reconhece a
+        // embalagem antes de ler o SKU. `imageUrl` já viajava na linha — só não
+        // tinha quem o desenhasse.
+        //
+        // O quadrado aparece SEMPRE, com foto ou sem: um produto sem imagem
+        // que não renderizasse nada puxaria o nome para trás contra as linhas
+        // que têm, e a coluna deixaria de ler como coluna.
+        /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-3", children: [
+          /* @__PURE__ */ jsx(Thumbnail, { src: row.imageUrl, icon: Package }),
+          /* @__PURE__ */ jsxs("div", { className: "min-w-0", children: [
+            /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-1.5", children: [
+              /* @__PURE__ */ jsx("p", { className: `truncate font-medium ${row.isActive === false ? "text-muted-foreground" : ""}`, children: row.name }),
+              row.isActive === false && /* @__PURE__ */ jsx("span", { className: "inline-flex items-center rounded-full bg-muted px-1.5 py-0.5 text-[9px] font-medium text-muted-foreground", children: t2("inventory.productList.inactive") })
+            ] }),
+            row.sku && /* @__PURE__ */ jsx("p", { className: "text-xs text-muted-foreground", children: row.sku })
+          ] })
+        ] })
+      )
     },
     { key: "brand", label: t2("inventory.productForm.brand"), type: "text", group: "general", placeholder: t2("inventory.productForm.brandPlaceholder"), showInTable: false },
     { key: "sku", label: t2("inventory.productForm.sku"), type: "text", group: "general", placeholder: t2("inventory.productForm.skuPlaceholder"), searchable: true, showInTable: false },
@@ -638,14 +677,6 @@ function ProductListView({ onNew, onOpen }) {
   return /* @__PURE__ */ jsx(
     CrudListView,
     {
-      headerActions: /* @__PURE__ */ jsx(
-        TeachMeLink,
-        {
-          feature: "inventory.produtos",
-          title: "Produtos",
-          about: "O cat\xE1logo do estoque. O tipo de produto \xE9 a divis\xE3o prim\xE1ria, e o estoque m\xEDnimo \xE9 o que faz o alerta de reposi\xE7\xE3o significar alguma coisa \u2014 com m\xEDnimo zero, tudo vira urgente."
-        }
-      ),
       entityDef: entity,
       items: loadedOnce ? products2 : null,
       total: productsTotal,
@@ -985,6 +1016,8 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
   const [supplierLabel, setSupplierLabel] = useState("");
   const [saving, setSaving] = useState(false);
   const [savedMovement, setSavedMovement] = useState(null);
+  const command = useRef(createPendingCommand(() => createIdempotencyKey("inventory:manual-movement"), (input) => input.productId));
+  const [pending, setPending] = useState(false);
   useEffect(() => {
     fetchProducts({});
     fetchLocations();
@@ -1052,10 +1085,11 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
   const canProceedStep2 = quantity > 0 && (!needsReason || reason.trim()) && (!needsDest || destLocationId);
   const title = defaultType === "entry" ? t2("inventory.stock.entry") : defaultType === "exit" ? t2("inventory.stock.exit") : t2("inventory.stock.movement");
   async function handleSave() {
-    if (!productId || quantity <= 0) return;
+    if (command.current.running || !command.current.pending && (!productId || quantity <= 0)) return;
     setSaving(true);
+    setPending(true);
     try {
-      const movement = await createMovement({
+      const movement = await command.current.run({
         productId,
         quantity,
         movementType,
@@ -1068,10 +1102,12 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
         batchNumber: batchNumber || void 0,
         expirationDate: expirationDate || void 0,
         supplierId: movementType === "entry" ? supplierId || void 0 : void 0
-      });
+      }, createMovement);
       setSavedMovement(movement);
+    } catch {
     } finally {
       setSaving(false);
+      setPending(command.current.pending);
     }
   }
   return /* @__PURE__ */ jsxs("div", { className: "space-y-6", children: [
@@ -1080,7 +1116,12 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
       {
         title,
         subtitle: t2("inventory.stock.stepOf", { step: String(step) }),
-        onBack: step > 1 ? () => setStep(step - 1) : onSaved,
+        onBack: () => {
+          if (!command.current.pending && !command.current.running) {
+            if (step > 1) setStep(step - 1);
+            else onSaved?.();
+          }
+        },
         parentLabel: t2("inventory.nav.stock")
       }
     ),
@@ -1109,6 +1150,7 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
       /* @__PURE__ */ jsx(
         SearchSelect,
         {
+          "data-tour": "inventory.entry-product",
           value: productId,
           displayValue: productLabel,
           onChange: handleProductSelect,
@@ -1290,7 +1332,8 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
           ] })
         ] })
       ] }),
-      /* @__PURE__ */ jsxs("div", { className: "rounded-card border bg-card shadow-sm p-5 space-y-4", children: [
+      pending && /* @__PURE__ */ jsx("p", { role: "status", className: "text-sm text-warning", children: t2("inventory.stock.pendingRetry") }),
+      /* @__PURE__ */ jsxs("fieldset", { disabled: pending, className: "rounded-card border bg-card shadow-sm p-5 space-y-4", children: [
         /* @__PURE__ */ jsx("p", { className: "text-xs font-medium text-muted-foreground", children: t2("inventory.stock.additionalDetails") }),
         /* @__PURE__ */ jsxs("div", { className: "grid gap-4 sm:grid-cols-2", children: [
           movementType === "entry" && /* @__PURE__ */ jsx(
@@ -1331,10 +1374,13 @@ function StockMovementView({ defaultType, onSaved, viewMovement }) {
         ] })
       ] }),
       /* @__PURE__ */ jsxs("div", { className: "flex justify-between", children: [
-        /* @__PURE__ */ jsx("button", { onClick: () => setStep(2), className: "rounded-lg border px-4 py-2 text-sm font-medium hover:bg-muted bg-card shadow-button active:shadow-button-inset transition-colors", children: t2("inventory.stock.back") }),
+        /* @__PURE__ */ jsx("button", { disabled: pending, onClick: () => {
+          if (!command.current.pending) setStep(2);
+        }, className: "rounded-lg border px-4 py-2 text-sm font-medium hover:bg-muted bg-card shadow-button active:shadow-button-inset transition-colors", children: t2("inventory.stock.back") }),
         /* @__PURE__ */ jsxs(
           "button",
           {
+            "data-tour": "inventory.entry-save",
             onClick: handleSave,
             disabled: saving,
             className: "inline-flex items-center gap-1.5 rounded-button bg-primary border border-primary px-5 py-2 text-sm font-medium text-primary-foreground hover:bg-primary/90 shadow-button-primary active:shadow-button-inset transition-colors disabled:opacity-50",
@@ -1566,14 +1612,6 @@ function StockCountsView({ onNew, onOpen }) {
   return /* @__PURE__ */ jsx(
     CrudListView,
     {
-      headerActions: /* @__PURE__ */ jsx(
-        TeachMeLink,
-        {
-          feature: "inventory.contagem",
-          title: "Contagem de Estoque",
-          about: "A contagem f\xEDsica contra o saldo do sistema. A diferen\xE7a vira ajuste com rastro: sobra ou falta, com o n\xFAmero do invent\xE1rio."
-        }
-      ),
       entityDef: entity,
       items: loadedOnce ? rows : null,
       total: rows.length,
@@ -1796,6 +1834,15 @@ function StockCountSessionView({ sessionId, onBack }) {
       setConfirmingClose(false);
     }
   }
+  function requestClose() {
+    if (summary.uncounted > 0) {
+      toast.error(t2("inventory.counts.incomplete"), {
+        description: t2("inventory.counts.incompleteDescription", { count: String(summary.uncounted) })
+      });
+      return;
+    }
+    setConfirmingClose(true);
+  }
   async function handleCancel() {
     try {
       await provider.cancelCountSession(sessionId);
@@ -1861,7 +1908,7 @@ function StockCountSessionView({ sessionId, onBack }) {
       ] }),
       !closed && /* @__PURE__ */ jsxs("div", { className: "flex items-center gap-2", children: [
         /* @__PURE__ */ jsx(Button, { variant: "outline", size: "sm", onClick: () => setConfirmingCancel(true), children: t2("inventory.counts.cancelCount") }),
-        /* @__PURE__ */ jsx(Button, { size: "sm", onClick: () => setConfirmingClose(true), children: t2("inventory.counts.close") })
+        /* @__PURE__ */ jsx(Button, { size: "sm", onClick: requestClose, children: t2("inventory.counts.close") })
       ] })
     ] }),
     /* @__PURE__ */ jsxs("div", { className: "rounded-card border bg-card shadow-sm divide-y", children: [
@@ -1907,10 +1954,7 @@ function StockCountSessionView({ sessionId, onBack }) {
       {
         open: confirmingClose,
         title: t2("inventory.counts.closeTitle"),
-        description: t2("inventory.counts.closeDescription", {
-          divergent: String(summary.divergent),
-          uncounted: String(summary.uncounted)
-        }),
+        description: t2("inventory.counts.closeDescription", { divergent: String(summary.divergent) }),
         confirmLabel: t2("inventory.counts.closeConfirm"),
         cancelLabel: t2("inventory.counts.cancel"),
         loading: closing,
@@ -2220,17 +2264,7 @@ function RecipesView({ onNew, onView, onNewForProduct }) {
       search,
       onSearchChange: setSearch,
       searchPlaceholder: t2("inventory.recipes.searchPlaceholder"),
-      headerActions: /* @__PURE__ */ jsxs(Fragment, { children: [
-        /* @__PURE__ */ jsx(
-          TeachMeLink,
-          {
-            feature: "inventory.receitas",
-            title: "Receitas / Ficha T\xE9cnica",
-            about: "O que cada item consome. \xC9 a ficha t\xE9cnica que permite a venda baixar o insumo sozinha."
-          }
-        ),
-        /* @__PURE__ */ jsx(PermissionGate, { feature: "inventory", action: "create", children: /* @__PURE__ */ jsx(QuickActionsButton, { variant: "default", label: t2("inventory.recipes.newRecipe"), actions: createActions }) })
-      ] }),
+      headerActions: /* @__PURE__ */ jsx(Fragment, { children: /* @__PURE__ */ jsx(PermissionGate, { feature: "inventory", action: "create", children: /* @__PURE__ */ jsx(QuickActionsButton, { variant: "default", label: t2("inventory.recipes.newRecipe"), actions: createActions }) }) }),
       onRowClick: (row) => {
         const target = row;
         if (target.missing && target.productId) onNewForProduct?.(target.productId);
@@ -3106,15 +3140,7 @@ function UsageAuditView() {
       SubpageHeader,
       {
         title: t2("inventory.usageAudit.title"),
-        subtitle: t2("inventory.usageAudit.subtitle"),
-        actions: /* @__PURE__ */ jsx(
-          TeachMeLink,
-          {
-            feature: "inventory.auditoria-de-uso",
-            title: "Auditoria de Uso",
-            about: "O que os atendimentos consumiram de verdade, lado a lado com o que era o padr\xE3o. \xC9 depois da baixa: o atendimento j\xE1 consumiu, e corrigir lan\xE7a a diferen\xE7a no raz\xE3o. Digite na pr\xF3pria linha e aplique tudo de uma vez, com uma observa\xE7\xE3o s\xF3."
-          }
-        )
+        subtitle: t2("inventory.usageAudit.subtitle")
       }
     ),
     /* @__PURE__ */ jsx(
@@ -3415,6 +3441,7 @@ function InventoryPage({ config, provider, store, registries }) {
   return /* @__PURE__ */ jsx(InventoryContextProvider, { config, provider, store, children: /* @__PURE__ */ jsx(
     ModulePage,
     {
+      navVariant: config.moduleNav,
       title: config.labels.pageTitle,
       subtitle: config.labels.pageSubtitle,
       nav,
@@ -3669,6 +3696,7 @@ function createStore() {
 function createMockInventoryProvider() {
   const store = createStore();
   const tenantId = "mock-tenant";
+  const countMovementWatermarks = /* @__PURE__ */ new Map();
   function withProduct(recipe) {
     const product = store.products.find((p) => p.id === recipe.productId);
     return { ...recipe, productName: product?.name ?? recipe.productName, productSalePrice: product?.salePrice };
@@ -3956,6 +3984,7 @@ function createMockInventoryProvider() {
         updatedAt: now()
       };
       store.countSessions.push(session);
+      countMovementWatermarks.set(session.id, new Set(store.movements.map((movement) => movement.id)));
       for (const product of store.products) {
         if (!product.isActive || product.productType === "asset") continue;
         if (input.categoryId && product.categoryId !== input.categoryId) continue;
@@ -3995,20 +4024,37 @@ function createMockInventoryProvider() {
         return { sessionId, adjustmentsCreated: 0, alreadyClosed: true };
       }
       if (session.status === "cancelled") throw new Error("This count was cancelled");
+      const sessionItems = store.countItems.filter((item) => item.sessionId === sessionId);
+      const uncounted = sessionItems.filter((item) => item.countedQuantity === void 0);
+      if (uncounted.length > 0) {
+        throw new Error(`Count every line before closing (${uncounted.length} uncounted)`);
+      }
+      const movementWatermark = countMovementWatermarks.get(sessionId) ?? /* @__PURE__ */ new Set();
+      const changedAfterOpening = store.movements.some(
+        (movement) => !movementWatermark.has(movement.id) && sessionItems.some((item) => item.productId === movement.productId) && (movement.stockLocationId === session.stockLocationId || movement.destinationLocationId === session.stockLocationId)
+      );
+      if (changedAfterOpening) {
+        throw new Error("Stock changed after this count opened; review and recount");
+      }
       let emitted = 0;
-      for (const item of store.countItems) {
-        if (item.sessionId !== sessionId) continue;
+      for (const item of sessionItems) {
         if (!isDivergent(item) || item.movementId) continue;
         const counted = item.countedQuantity;
         const delta = counted - item.systemQuantity;
+        const hasBatchStock = store.positions.some(
+          (position) => position.productId === item.productId && position.stockLocationId === session.stockLocationId && position.quantity !== 0 && Boolean(position.batchNumber || position.expirationDate)
+        );
+        if (hasBatchStock) {
+          throw new Error(`Product ${item.productId} has batch stock; use a batch-aware count`);
+        }
         const movement = {
           id: uid(),
           productId: item.productId,
           productName: item.productName,
-          quantity: counted,
+          quantity: delta,
           movementType: "adjustment",
           unitCost: item.unitCost,
-          totalCost: item.unitCost * counted,
+          totalCost: item.unitCost * Math.abs(delta),
           stockLocationId: session.stockLocationId,
           stockLocationName: session.stockLocationName,
           reason: reason || "Stock count",
@@ -4037,6 +4083,7 @@ function createMockInventoryProvider() {
       session.status = "closed";
       session.closedAt = now();
       session.updatedAt = now();
+      countMovementWatermarks.delete(sessionId);
       return { sessionId, adjustmentsCreated: emitted, alreadyClosed: false };
     },
     async cancelCountSession(sessionId) {
@@ -4045,6 +4092,7 @@ function createMockInventoryProvider() {
       if (session.status === "closed") throw new Error("A closed count cannot be cancelled");
       session.status = "cancelled";
       session.updatedAt = now();
+      countMovementWatermarks.delete(sessionId);
       return session;
     },
     // --- Recipes ---
@@ -4788,6 +4836,7 @@ function createSupabaseInventoryProvider() {
       if (!locationId) {
         throw new Error("inventory: this tenant has no stock location to record the movement against");
       }
+      const idempotencyKey = input.idempotencyKey ?? createIdempotencyKey(`inventory:${kind}`);
       const { data: opResult, error } = kind === "in" ? await pub.rpc("inventory_receive", {
         p_location: locationId,
         p_lines: [line],
@@ -4796,32 +4845,37 @@ function createSupabaseInventoryProvider() {
           ...input.documentNumber ? { ref: input.documentNumber } : {},
           ...input.supplierId ? { supplier_id: input.supplierId } : {},
           ...input.movementDate ? { date: input.movementDate } : {}
-        }
+        },
+        p_idempotency_key: idempotencyKey
       }) : await pub.rpc("inventory_adjust", {
         p_location: locationId,
         p_lines: [line],
         // The ledger refuses an adjustment with no reason, and the verb is one
         // when the user did not type another.
-        p_reason: input.reason ?? input.movementType
+        p_reason: input.reason ?? input.movementType,
+        p_idempotency_key: idempotencyKey
       });
-      if (error) throw new Error(error.message);
+      if (error) throw error;
       const written = opResult?.movements?.[0];
       if (!written) throw new Error("inventory: the ledger accepted the operation but returned no movement");
       const data = { ...written, tenant_id: tenantId, movement_type: input.movementType };
-      const { data: product } = await core.from(PRODUCTS_READ).select("id, name, stock").eq("id", input.productId).single();
       const movement = snakeToCamel(data);
-      movement.productName = product?.name;
-      if (input.stockLocationId) {
-        const { data: loc } = await pub.from(T.stockLocations).select("name").eq("id", input.stockLocationId).single();
-        movement.stockLocationName = loc?.name;
-      }
-      if (input.destinationLocationId) {
-        const { data: loc } = await pub.from(T.stockLocations).select("name").eq("id", input.destinationLocationId).single();
-        movement.destinationLocationName = loc?.name;
-      }
-      if (input.supplierId) {
-        const { data: supplier } = await core.from("people").select("name").eq("id", input.supplierId).single();
-        movement.supplierName = supplier?.name;
+      try {
+        const { data: product } = await core.from(PRODUCTS_READ).select("id, name, stock").eq("id", input.productId).single();
+        movement.productName = product?.name;
+        if (input.stockLocationId) {
+          const { data: loc } = await pub.from(T.stockLocations).select("name").eq("id", input.stockLocationId).single();
+          movement.stockLocationName = loc?.name;
+        }
+        if (input.destinationLocationId) {
+          const { data: loc } = await pub.from(T.stockLocations).select("name").eq("id", input.destinationLocationId).single();
+          movement.destinationLocationName = loc?.name;
+        }
+        if (input.supplierId) {
+          const { data: supplier } = await core.from("people").select("name").eq("id", input.supplierId).single();
+          movement.supplierName = supplier?.name;
+        }
+      } catch {
       }
       return movement;
     },
@@ -5459,16 +5513,20 @@ function createInventoryStore(provider) {
       }
     },
     async createMovement(input) {
+      let movement;
       try {
-        const movement = await provider.createMovement(input);
-        const [summary] = await Promise.all([provider.getSummary()]);
-        set({ summary });
-        toast.success("Stock movement recorded");
-        return movement;
+        movement = await provider.createMovement(input);
       } catch (err) {
         toast.error("Failed to record movement", { description: err?.message });
         throw err;
       }
+      try {
+        set({ summary: await provider.getSummary() });
+        toast.success("Stock movement recorded");
+      } catch {
+        toast.warning("Stock movement recorded; refresh the list to see the updated balance");
+      }
+      return movement;
     },
     async createRecipe(input) {
       try {
@@ -5647,8 +5705,12 @@ var products = {
       check: "existe pelo menos um local \u2014 \xE9 onde o saldo vai morar"
     }
   ],
+  // O tour navega até o cadastro de produto; os passos sem âncora ficam de
+  // briefing (a tela é um CRUD genérico, sem campos ancoráveis por enquanto).
   steps: [
-    { do: "Estoque \u203A Produtos \u203A Novo.", route: "/inventory/products/new" },
+    { do: "O Estoque mora aqui.", anchor: "nav./inventory", route: "/inventory" },
+    { do: "Produtos ficam neste menu.", anchor: "modnav.products", route: "/inventory/products/list" },
+    { do: "Cadastre um produto novo aqui.", anchor: "action.new-product", route: "/inventory/products/list" },
     {
       do: "Escolha a unidade em que voc\xEA CONTA o produto, n\xE3o a que o fornecedor vende.",
       why: "Se voc\xEA conta ampolas e ele vende caixa, o produto \xE9 em ampola \u2014 a convers\xE3o \xE9 problema da entrada."
@@ -5686,10 +5748,16 @@ var movements = {
       check: "o movimento pede um local e existe op\xE7\xE3o"
     }
   ],
+  // Navega até a tela de entrada; a `practice` deixa a pessoa dar a entrada.
   steps: [
-    { do: "Estoque \u203A Movimenta\xE7\xF5es \u203A Entrada para a compra que chegou.", route: "/inventory/stock/entry" },
-    { do: "Sa\xEDda para o que foi descartado, perdido ou usado fora de um atendimento.", route: "/inventory/stock/exit" },
-    { do: "O hist\xF3rico mostra tudo, inclusive o que o sistema lan\xE7ou sozinho.", route: "/inventory/stock/history" }
+    { do: "O Estoque mora aqui.", anchor: "nav./inventory", route: "/inventory" },
+    { do: "Abra Entrada neste menu para lan\xE7ar a compra que chegou.", anchor: "modnav.stock-entry", route: "/inventory/stock/entry" },
+    { do: "Sa\xEDda \xE9 para o que foi descartado, perdido ou usado fora de um atendimento." },
+    { do: "O hist\xF3rico mostra tudo, inclusive o que o sistema lan\xE7ou sozinho." }
+  ],
+  practice: [
+    { anchor: "inventory.entry-product", label: "Escolha o produto que chegou" },
+    { anchor: "inventory.entry-save", label: "Confirme a entrada", final: true }
   ],
   rules: [
     "O raz\xE3o \xE9 append-only: nada \xE9 apagado. Corrigir \xE9 lan\xE7ar o movimento contr\xE1rio \u2014 e o hist\xF3rico guarda os dois.",
@@ -5867,6 +5935,8 @@ function buildInventoryOnboarding() {
 
 // src/locales/en.ts
 var en = {
+  "inventory.stock.pendingRetry": "Confirmation is pending. Do not create another entry. Retry the same details before leaving this screen.",
+  "inventory.stock.refreshAfterCommit": "Movement recorded. Refresh the screen to see the balance.",
   "inventory.dashboard.activeItems": "Active items",
   "inventory.dashboard.belowMinimum": "Below minimum",
   "inventory.dashboard.entries": "Entries:",
@@ -6255,7 +6325,9 @@ var en = {
   "inventory.counts.saveFailed": "Could not save this line",
   "inventory.counts.close": "Close the count",
   "inventory.counts.closeTitle": "Close the count?",
-  "inventory.counts.closeDescription": "{{divergent}} line(s) differ from the system and will get an adjustment. {{uncounted}} line(s) were never counted and are left exactly as they are.",
+  "inventory.counts.closeDescription": "{{divergent}} line(s) differ from the system and will get an adjustment.",
+  "inventory.counts.incomplete": "Finish the count before closing",
+  "inventory.counts.incompleteDescription": "{{count}} line(s) are still blank. Enter zero when the item is physically out of stock.",
   "inventory.counts.closeConfirm": "Close and adjust",
   "inventory.counts.closed": "Count closed \u2014 {{count}} adjustment(s) recorded",
   "inventory.counts.alreadyClosed": "This count was already closed",
@@ -6316,6 +6388,8 @@ var en = {
 
 // src/locales/pt-BR.ts
 var ptBR = {
+  "inventory.stock.pendingRetry": "A confirma\xE7\xE3o ainda est\xE1 pendente. N\xE3o fa\xE7a outro lan\xE7amento. Tente novamente com os mesmos dados antes de sair desta tela.",
+  "inventory.stock.refreshAfterCommit": "Movimento registrado. Atualize a tela para consultar o saldo.",
   "inventory.dashboard.activeItems": "Itens ativos",
   "inventory.dashboard.belowMinimum": "Abaixo do m\xEDnimo",
   "inventory.dashboard.entries": "Entradas:",
@@ -6704,7 +6778,9 @@ var ptBR = {
   "inventory.counts.saveFailed": "N\xE3o foi poss\xEDvel salvar esta linha",
   "inventory.counts.close": "Fechar a contagem",
   "inventory.counts.closeTitle": "Fechar a contagem?",
-  "inventory.counts.closeDescription": "{{divergent}} linha(s) divergem do sistema e v\xE3o receber um ajuste. {{uncounted}} linha(s) ningu\xE9m contou e ficam exatamente como est\xE3o.",
+  "inventory.counts.closeDescription": "{{divergent}} linha(s) divergem do sistema e v\xE3o receber um ajuste.",
+  "inventory.counts.incomplete": "Finalize a contagem antes de fechar",
+  "inventory.counts.incompleteDescription": "Ainda existem {{count}} linha(s) em branco. Informe zero quando o item acabou fisicamente.",
   "inventory.counts.closeConfirm": "Fechar e ajustar",
   "inventory.counts.closed": "Contagem fechada \u2014 {{count}} ajuste(s) lan\xE7ado(s)",
   "inventory.counts.alreadyClosed": "Esta contagem j\xE1 estava fechada",
@@ -10883,10 +10959,435 @@ REVOKE ALL ON FUNCTION public.inventory_correct_usage_batch(text, jsonb) FROM PU
 GRANT ALL ON FUNCTION public.inventory_correct_usage_batch(text, jsonb) TO authenticated;
 GRANT ALL ON FUNCTION public.inventory_correct_usage_batch(text, jsonb) TO service_role;
 `;
+var MIGRATION_003_STOCK_COUNT_CLOSES_THROUGH_LEDGER = `-- 003_stock_count_closes_through_ledger.sql
+--
+-- A physical count is a reconciliation, not a second stock writer. The old
+-- function inserted values into GENERATED columns, recorded the counted total
+-- instead of the variance and then updated the position a second time outside
+-- the ledger trigger. This replacement emits one canonical \`adjust\` movement
+-- per divergent line and lets the existing movement trigger update the balance.
+--
+-- Safety gates: every line must be counted (zero is valid); any stock movement
+-- after the opening snapshot aborts the close; lot stock requires a future
+-- batch-aware count instead of guessing which lot changed.
+
+CREATE OR REPLACE FUNCTION public.inventory_close_count_session(p_session_id uuid, p_reason text DEFAULT NULL::text) RETURNS jsonb
+    LANGUAGE plpgsql SECURITY DEFINER
+    SET search_path TO ''
+    AS $$
+DECLARE
+  v_tenant uuid := app.inventory_require_tenant();
+  v_session public.plg_inventory_count_sessions%ROWTYPE;
+  v_item public.plg_inventory_count_items%ROWTYPE;
+  v_op record;
+  v_delta numeric;
+  v_current numeric;
+  v_current_cost numeric;
+  v_has_lots boolean;
+  v_movement_id uuid;
+  v_reason text;
+  v_key text := 'count:' || p_session_id::text || ':close:v1';
+  v_line_no int := 0;
+  v_uncounted int;
+  v_conflicts int;
+  v_emitted int := 0;
+  v_movements jsonb := '[]'::jsonb;
+  v_positions jsonb := '[]'::jsonb;
+  v_result jsonb;
+BEGIN
+  SELECT * INTO v_session FROM public.plg_inventory_count_sessions
+   WHERE id = p_session_id AND tenant_id = v_tenant FOR UPDATE;
+  IF NOT FOUND THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'unknown count session');
+  END IF;
+  PERFORM app.inventory_authorize_location(v_tenant, v_session.stock_location_id, 'inventory.edit');
+
+  IF v_session.status = 'closed' THEN
+    RETURN jsonb_build_object('ok', true, 'session_id', p_session_id,
+      'status', 'closed', 'already_closed', true, 'adjustments_created', 0);
+  END IF;
+  IF v_session.status = 'cancelled' THEN
+    RETURN jsonb_build_object('ok', false, 'error', 'this count was cancelled');
+  END IF;
+
+  v_reason := COALESCE(NULLIF(btrim(COALESCE(p_reason, '')), ''), 'Stock count');
+
+  SELECT count(*) INTO v_uncounted
+    FROM public.plg_inventory_count_items i
+   WHERE i.session_id = p_session_id AND i.counted_quantity IS NULL;
+  IF v_uncounted > 0 THEN
+    RAISE EXCEPTION 'inventory: count session has % uncounted line(s)', v_uncounted
+      USING ERRCODE = '22023', HINT = 'Count every line, including physical zero, before closing.';
+  END IF;
+
+  PERFORM p.id
+    FROM public.plg_inventory_stock_positions p
+    JOIN public.plg_inventory_count_items i
+      ON i.tenant_id = p.tenant_id AND i.product_id = p.product_id
+   WHERE i.session_id = p_session_id
+     AND p.stock_location_id = v_session.stock_location_id
+   ORDER BY p.id
+   FOR UPDATE OF p;
+
+  SELECT count(DISTINCT i.id) INTO v_conflicts
+    FROM public.plg_inventory_count_items i
+    JOIN public.plg_inventory_stock_movements m
+      ON m.tenant_id = i.tenant_id
+     AND m.product_id = i.product_id
+     AND (m.source_location_id = v_session.stock_location_id
+       OR m.destination_location_id = v_session.stock_location_id)
+   WHERE i.session_id = p_session_id
+     AND m.created_at > v_session.opened_at
+     AND (i.movement_id IS NULL OR m.id <> i.movement_id);
+  IF v_conflicts > 0 THEN
+    RAISE EXCEPTION 'inventory: stock changed after this count opened (% line(s)); review and recount', v_conflicts
+      USING ERRCODE = '40001';
+  END IF;
+
+  SELECT * INTO v_op FROM app.inventory_begin_operation(
+    v_tenant, 'adjust', v_key,
+    jsonb_build_object('count_session_id', p_session_id, 'reason', v_reason));
+  IF v_op.existing IS NOT NULL THEN
+    UPDATE public.plg_inventory_count_sessions
+       SET status = 'closed', closed_at = coalesce(closed_at, now()),
+           closed_by = coalesce(closed_by, auth.uid()), updated_at = now()
+     WHERE id = p_session_id;
+    RETURN v_op.existing || jsonb_build_object('already_closed', true, 'adjustments_created', 0);
+  END IF;
+
+  FOR v_item IN
+    SELECT * FROM public.plg_inventory_count_items
+     WHERE session_id = p_session_id AND movement_id IS NULL
+     ORDER BY id
+     FOR UPDATE
+  LOOP
+    SELECT coalesce(sum(p.quantity), 0),
+           coalesce(max(p.unit_cost), v_item.unit_cost, 0),
+           coalesce(bool_or((p.batch_number IS NOT NULL OR p.expiration_date IS NOT NULL) AND p.quantity <> 0), false)
+      INTO v_current, v_current_cost, v_has_lots
+      FROM public.plg_inventory_stock_positions p
+     WHERE p.tenant_id = v_tenant
+       AND p.product_id = v_item.product_id
+       AND p.stock_location_id = v_session.stock_location_id;
+
+    v_delta := v_item.counted_quantity - v_current;
+    IF v_delta = 0 THEN CONTINUE; END IF;
+    IF v_has_lots THEN
+      RAISE EXCEPTION 'inventory: product % has batch stock; close it with a batch-aware count', v_item.product_id
+        USING ERRCODE = '22023';
+    END IF;
+
+    v_line_no := v_line_no + 1;
+    INSERT INTO public.plg_inventory_stock_movements (
+      tenant_id, product_id, kind, quantity, unit_cost,
+      source_location_id, document_type, reason,
+      idempotency_key, line_no, operation_id,
+      source_item_type, source_item_id, metadata
+    ) VALUES (
+      v_tenant, v_item.product_id, 'adjust', v_delta, v_current_cost,
+      v_session.stock_location_id, 'stock_count', v_reason,
+      v_key, v_line_no, v_op.op_id,
+      'stock_count_item', v_item.id,
+      jsonb_build_object(
+        'countSessionId', p_session_id,
+        'countItemId', v_item.id,
+        'systemQuantity', v_item.system_quantity,
+        'currentQuantity', v_current,
+        'countedQuantity', v_item.counted_quantity,
+        'variance', v_delta
+      )
+    )
+    RETURNING id INTO v_movement_id;
+
+    UPDATE public.plg_inventory_count_items
+       SET movement_id = v_movement_id, updated_at = now()
+     WHERE id = v_item.id;
+    v_movements := v_movements || app.inventory_movement_json(v_movement_id);
+    v_positions := v_positions || app.inventory_position_json(
+      v_tenant, v_item.product_id, v_session.stock_location_id, NULL, NULL);
+    v_emitted := v_emitted + 1;
+  END LOOP;
+
+  UPDATE public.plg_inventory_count_sessions
+     SET status = 'closed', closed_at = now(), closed_by = auth.uid(), updated_at = now()
+   WHERE id = p_session_id;
+
+  v_result := jsonb_build_object(
+    'ok', true, 'session_id', p_session_id, 'status', 'closed',
+    'already_closed', false, 'adjustments_created', v_emitted,
+    'operation_id', v_op.op_id, 'idempotency_key', v_key,
+    'movements', v_movements, 'positions', v_positions);
+  RETURN app.inventory_finish_operation(
+    v_tenant, v_op.op_id, 'count.close', v_key, v_result,
+    jsonb_build_object('count_session_id', p_session_id, 'adjustments_created', v_emitted));
+END;
+$$;
+`;
+var MIGRATION_004_A_POSICAO_DE_ESTOQUE_ATRAVESSA = `-- A posi\xE7\xE3o de estoque atravessa.
+--
+-- \`stock_positions\` \u2014 o saldo por produto \xD7 local \xD7 lote \u2014 estava no plano de
+-- leitura e sem destino: 1.861 linhas do tenant Pertinho do C\xE9u ficaram
+-- \`pendentes\` em toda rodada, nunca ofertadas a writer nenhum. A nota no
+-- extrator dizia "no V2 a posi\xE7\xE3o \xE9 derivada do movimento", e essa frase \xE9
+-- verdadeira e insuficiente.
+--
+-- Derivar o saldo do movimento s\xF3 d\xE1 o mesmo n\xFAmero quando o movimento
+-- atravessa INTEIRO. Neste tenant 2.208 dos 2.697 movimentos estavam em
+-- quarentena, ent\xE3o o saldo derivado seria o saldo de 18% do hist\xF3rico \u2014
+-- apresentado com a mesma confian\xE7a do saldo certo. E lote e validade, que a
+-- posi\xE7\xE3o carrega e o movimento n\xE3o, n\xE3o se derivam de soma nenhuma.
+--
+-- Ent\xE3o a posi\xE7\xE3o vem do V1 como fato, e n\xE3o como conta.
+--
+-- \u2500\u2500 O que o destino exige e a origem n\xE3o d\xE1 \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- \`plg_inventory_stock_positions\` tem tr\xEAs colunas NOT NULL que precisam de
+-- tradu\xE7\xE3o:
+--
+--   product_id          \u2192 resolvido pelo ledger de \`products\`
+--   stock_location_id   \u2192 pelo ledger de \`stock_locations\`
+--   unit_id             \u2192 a unidade da EMPRESA (app.units), e o V1 guarda duas
+--                         coisas com nome parecido: \`unit_id\` (a unidade de
+--                         MEDIDA do item) e \`company_unit_id\` (a filial). \xC9 a
+--                         segunda. Confundi-las poria a posi\xE7\xE3o na unidade
+--                         errada \u2014 e num tenant de 63 filiais isso \xE9 saldo no
+--                         lugar de outro.
+--
+-- Quando a filial n\xE3o vem na linha, ela vem do LOCAL: um local de estoque
+-- pertence a uma unidade, e o saldo que est\xE1 nele est\xE1 nela.
+--
+-- Idempotente.
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 1. O writer
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+CREATE OR REPLACE FUNCTION migration.upsert_inv_position(
+  p_tenant uuid, p_id uuid, p_row jsonb, p_args jsonb DEFAULT '{}'::jsonb
+) RETURNS jsonb
+LANGUAGE plpgsql SECURITY DEFINER SET search_path TO ''
+AS $function$
+DECLARE
+  v_meta jsonb := coalesce(p_row -> 'metadata', '{}'::jsonb);
+  v_product uuid := (p_row ->> 'product_id')::uuid;
+  v_location uuid := (p_row ->> 'stock_location_id')::uuid;
+  v_unit uuid := (p_row ->> 'unit_id')::uuid;
+  v_qty numeric := round(coalesce((p_row ->> 'quantity')::numeric, 0), 4);
+  v_existing_tenant uuid;
+  v_created boolean := false;
+  v_standalone boolean := migration._standalone();
+BEGIN
+  IF v_standalone THEN PERFORM migration._assert_fence(p_tenant); PERFORM set_config('migration.writer', 'on', true); END IF;
+  IF p_id IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'state', 'reason', 'uma posi\xE7\xE3o precisa de id');
+  END IF;
+  IF v_product IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'fk',
+      'reason', 'posi\xE7\xE3o de saldo cujo produto ainda n\xE3o atravessou');
+  END IF;
+  IF v_location IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'fk',
+      'reason', 'posi\xE7\xE3o de saldo sem local \u2014 saldo sem lugar n\xE3o \xE9 saldo');
+  END IF;
+
+  -- A filial pelo LOCAL quando a linha n\xE3o a traz: o local pertence a uma
+  -- unidade, e o saldo que est\xE1 nele est\xE1 nela.
+  IF v_unit IS NULL THEN
+    SELECT l.unit_id INTO v_unit
+      FROM public.plg_inventory_stock_locations l
+     WHERE l.id = v_location AND l.tenant_id = p_tenant;
+  END IF;
+  IF v_unit IS NULL THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'fk',
+      'reason', 'posi\xE7\xE3o sem unidade, e o local dela tamb\xE9m n\xE3o diz de qual \xE9');
+  END IF;
+
+  -- \`quantity >= 0\` \xE9 CHECK da tabela. O V1 admite saldo negativo (sa\xEDda que
+  -- n\xE3o conferiu com a entrada); recusar aqui, com a frase, \xE9 melhor que o erro
+  -- cru do banco no meio do lote \u2014 e melhor que gravar zero, que apagaria a
+  -- evid\xEAncia de que a contagem daquele item est\xE1 furada.
+  IF v_qty < 0 THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'value',
+      'reason', format('saldo negativo (%s) \u2014 o V1 admite, o raz\xE3o de estoque do V2 n\xE3o', v_qty));
+  END IF;
+
+  SELECT tenant_id INTO v_existing_tenant FROM public.plg_inventory_stock_positions WHERE id = p_id;
+  IF v_existing_tenant IS NOT NULL AND v_existing_tenant <> p_tenant THEN
+    RETURN jsonb_build_object('status', 'quarantined', 'kind', 'tenant',
+      'reason', format('%s already exists in another tenant', p_id));
+  END IF;
+
+  IF v_existing_tenant IS NULL THEN
+    INSERT INTO public.plg_inventory_stock_positions
+      (id, tenant_id, unit_id, product_id, stock_location_id, quantity, unit_cost,
+       batch_number, expiration_date, unit_type)
+    VALUES (p_id, p_tenant, v_unit, v_product, v_location, v_qty,
+            round(coalesce((p_row ->> 'unit_cost')::numeric, 0), 4),
+            p_row ->> 'batch_number', (p_row ->> 'expiration_date')::date,
+            coalesce(nullif(btrim(p_row ->> 'unit_type'), ''), 'base'));
+    v_created := true;
+  ELSE
+    UPDATE public.plg_inventory_stock_positions SET
+      unit_id           = coalesce(v_unit, unit_id),
+      product_id        = coalesce(v_product, product_id),
+      stock_location_id = coalesce(v_location, stock_location_id),
+      quantity          = CASE WHEN p_row ? 'quantity' THEN v_qty ELSE quantity END,
+      unit_cost         = CASE WHEN p_row ? 'unit_cost' THEN round(coalesce((p_row ->> 'unit_cost')::numeric, 0), 4) ELSE unit_cost END,
+      batch_number      = CASE WHEN p_row ? 'batch_number' THEN p_row ->> 'batch_number' ELSE batch_number END,
+      expiration_date   = CASE WHEN p_row ? 'expiration_date' THEN (p_row ->> 'expiration_date')::date ELSE expiration_date END,
+      unit_type         = CASE WHEN p_row ? 'unit_type' THEN coalesce(nullif(btrim(p_row ->> 'unit_type'), ''), 'base') ELSE unit_type END,
+      updated_at        = now()
+    WHERE id = p_id;
+  END IF;
+
+  IF v_standalone THEN PERFORM migration._audit(p_tenant, 'public.plg_inventory_stock_positions', p_id, jsonb_build_object('reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END)); END IF;
+  RETURN jsonb_build_object('status', 'migrated', 'target_id', p_id, 'reason', CASE WHEN v_created THEN 'created' ELSE 'updated' END);
+END $function$;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 2. O vocabul\xE1rio de writers aceita o nome novo
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+
+DO $$
+DECLARE v_def text;
+BEGIN
+  SELECT pg_get_constraintdef(oid) INTO v_def
+    FROM pg_constraint WHERE conname = 'allowlist_writer_check';
+  IF v_def IS NULL OR strpos(v_def, 'inv_position') > 0 THEN RETURN; END IF;
+  ALTER TABLE migration.allowlist DROP CONSTRAINT allowlist_writer_check;
+  EXECUTE replace(
+    'ALTER TABLE migration.allowlist ADD CONSTRAINT allowlist_writer_check ' || v_def,
+    '''inv_movement''::text',
+    '''inv_movement''::text, ''inv_position''::text');
+END $$;
+
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+-- 3. O de-para
+-- \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- \`unit_id\` do V1 \xE9 a unidade de MEDIDA e n\xE3o a filial \u2014 por isso ela vai para
+-- metadata e quem responde pela filial \xE9 \`company_unit_id\`.
+
+-- A allowlist \xE9 CONGELADA (\`trg_allowlist_frozen\`): mudan\xE7a de core-A \xE9
+-- arquivo de migration, n\xE3o escrita solta \u2014 e esta \xE9 um arquivo. A escotilha
+-- \xE9 transacional (\`true\` no terceiro argumento), ent\xE3o n\xE3o fica porta aberta.
+SELECT set_config('migration.allowlist_unlock', 'on', true);
+
+SELECT migration._allow(
+  'stock_positions', 'public.plg_inventory_stock_positions', 'inventory',
+  'inv_position', '{}'::jsonb, ARRAY['quantity', 'unit_cost'],
+  jsonb_build_object(
+    'uuid',              'id',
+    'product_id',        'product_id@products',
+    'stock_location_id', 'stock_location_id@stock_locations',
+    'company_unit_id',   'unit_id@companies:app.units',
+    'quantity',          'quantity',
+    'unit_cost',         'unit_cost',
+    'batch_number',      'batch_number',
+    'expiration_date',   'expiration_date',
+    'unit_type',         'unit_type',
+    'location',          'jsonb:v1.location_label',
+    'unit_id',           'jsonb:v1.measurement_unit_ref'
+  ),
+  'O SALDO por produto \xD7 local \xD7 lote. Vem da origem como FATO e n\xE3o derivado '
+  'do movimento: o saldo derivado s\xF3 bate quando o movimento atravessa inteiro, '
+  'e lote e validade a posi\xE7\xE3o carrega e o movimento n\xE3o.'
+);
+
+SELECT set_config('migration.allowlist_unlock', 'off', true);
+
+
+-- \u2500\u2500 quem pode executar \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Fun\xE7\xE3o nova nasce execut\xE1vel por PUBLIC, e \`anon\`/\`authenticated\` herdam
+-- dali. Estas s\xE3o de PORTE: SECURITY DEFINER, escrevem dados de qualquer
+-- inquilino, e uma delas alcan\xE7\xE1vel pela chave an\xF4nima \xE9 a base inteira
+-- alcan\xE7\xE1vel pela chave an\xF4nima. S\xF3 o service_role, que \xE9 quem roda a onda.
+REVOKE ALL ON FUNCTION migration.upsert_inv_position(uuid, uuid, jsonb, jsonb) FROM PUBLIC, anon, authenticated;
+GRANT EXECUTE ON FUNCTION migration.upsert_inv_position(uuid, uuid, jsonb, jsonb) TO service_role;
+`;
+var MIGRATION_005_A_POSICAO_E_CONSEQUENCIA_DO_MOVIMENTO = `-- A posi\xE7\xE3o \xE9 consequ\xEAncia do movimento.
+--
+-- Desfaz a migration 004, que estava errada \u2014 e o registro do porqu\xEA vale mais
+-- que o c\xF3digo que sai.
+--
+-- A 004 criou um writer para trazer \`stock_positions\` do V1 como FATO, com o
+-- argumento de que derivar o saldo do movimento s\xF3 d\xE1 o mesmo n\xFAmero quando o
+-- movimento atravessa inteiro. O argumento era bom e a premissa tinha deixado
+-- de valer no mesmo dia: os 2.697 movimentos passaram a atravessar inteiros
+-- assim que a entrada por DANFE ganhou o local (a ponte no extrator).
+--
+-- E o destino j\xE1 dizia isso, em voz alta:
+--
+--     plg_inventory_stock_positions is written only through the inventory RPCs
+--     (inventory_receive / _transfer \u2026)
+--
+-- 339 das 1.861 linhas bateram nesse gatilho. O gatilho est\xE1 certo: no V2 a
+-- posi\xE7\xE3o n\xE3o \xE9 algo que se escreve, \xE9 o que sobra depois que o movimento
+-- passou. Escrever por fora seria manter duas verdades sobre o mesmo saldo e
+-- deixar a diverg\xEAncia para depois.
+--
+-- \u2500\u2500 A prova \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Medido em 19/09/2026 no tenant Pertinho do C\xE9u, depois de os movimentos
+-- entrarem:
+--
+--     V1  stock_positions                  1.861 linhas   251.561,2484
+--     V2  plg_inventory_stock_positions       990 linhas   251.561,2484
+--
+-- O SALDO \xE9 o mesmo at\xE9 o quarto decimal. A contagem de linhas difere porque o
+-- V1 guarda uma posi\xE7\xE3o por lote/validade e o V2 consolida por produto \xD7 local
+-- quando n\xE3o h\xE1 lote \u2014 duas formas de escrever o mesmo estoque, e \xE9 o estoque
+-- que se confere.
+--
+-- \u2500\u2500 O que sai e o que fica \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+--
+-- Sai a linha de \`stock_positions\` da allowlist. Fica \`migration.excluded_tables\`
+-- com o motivo medido, para que a pr\xF3xima pessoa que vir 1.861 linhas paradas
+-- no dashboard leia a resposta em vez de refazer a investiga\xE7\xE3o.
+--
+-- O writer \`upsert_inv_position\` FICA. Ele n\xE3o faz mal parado, e um pool que
+-- porte posi\xE7\xE3o sem portar movimento vai precisar dele \u2014 o que muda \xE9 que este
+-- n\xE3o \xE9 esse caso.
+--
+-- Idempotente.
+
+-- A linha est\xE1 CONGELADA, e o gatilho recusa DELETE nela pelo mesmo motivo que
+-- recusa UPDATE: mudan\xE7a de core-A \xE9 arquivo de migration. Este \xE9 o arquivo, e
+-- a escotilha \xE9 transacional \u2014 n\xE3o fica porta aberta depois dele.
+SELECT set_config('migration.allowlist_unlock', 'on', true);
+DELETE FROM migration.allowlist WHERE source_table = 'stock_positions';
+SELECT set_config('migration.allowlist_unlock', 'off', true);
+
+-- \`WHERE tenant_id IS NULL\` no \xE1rbitro: a 073 da espinha trocou a PK de
+-- \`migration.excluded_tables\` por dois \xEDndices \xFAnicos PARCIAIS \u2014 um global e
+-- um por inquilino \u2014, porque "n\xE3o trazer esta tabela" passou a ser decis\xE3o de
+-- cliente e n\xE3o do cluster. \xCDndice parcial s\xF3 serve de \xE1rbitro de ON CONFLICT
+-- quando o comando repete o mesmo recorte. Esta decis\xE3o \xE9 global.
+INSERT INTO migration.excluded_tables (source_table, reason)
+VALUES ('stock_positions',
+        'Consequ\xEAncia, n\xE3o fato: no V2 a posi\xE7\xE3o s\xF3 se escreve pelas RPCs de '
+        'invent\xE1rio (o gatilho recusa INSERT direto), e ela se forma sozinha '
+        'quando o movimento atravessa. Conferido em 19/09/2026 no Pertinho do '
+        'C\xE9u \u2014 V1 1.861 linhas / 251.561,2484 contra V2 990 linhas / '
+        '251.561,2484: mesmo saldo, formas diferentes de agrupar (o V1 guarda '
+        'por lote, o V2 consolida sem lote).')
+-- \`WHERE tenant_id IS NULL\` porque a PK de \`excluded_tables\` deixou de existir:
+-- o spine 070 a trocou por dois \xEDndices \xFAnicos PARCIAIS \u2014 um por tabela global,
+-- outro por tabela e tenant. \`ON CONFLICT (source_table)\` sozinho n\xE3o casa com
+-- \xEDndice parcial, e a cadeia do zero parou aqui com "there is no unique or
+-- exclusion constraint matching the ON CONFLICT specification".
+--
+-- Esta linha \xE9 global (sem tenant), ent\xE3o \xE9 o \xEDndice global que ela quer.
+ON CONFLICT (source_table) WHERE tenant_id IS NULL DO UPDATE SET reason = EXCLUDED.reason;
+`;
 var MIGRATIONS = [
   { id: "000_baseline", sql: MIGRATION_000_BASELINE },
   { id: "001_the_usage_that_left_stock_can_be_audited", sql: MIGRATION_001_THE_USAGE_THAT_LEFT_STOCK_CAN_BE_AUDITED },
-  { id: "002_a_auditoria_fecha_em_lote", sql: MIGRATION_002_A_AUDITORIA_FECHA_EM_LOTE }
+  { id: "002_a_auditoria_fecha_em_lote", sql: MIGRATION_002_A_AUDITORIA_FECHA_EM_LOTE },
+  { id: "003_stock_count_closes_through_ledger", sql: MIGRATION_003_STOCK_COUNT_CLOSES_THROUGH_LEDGER },
+  { id: "004_a_posicao_de_estoque_atravessa", sql: MIGRATION_004_A_POSICAO_DE_ESTOQUE_ATRAVESSA },
+  { id: "005_a_posicao_e_consequencia_do_movimento", sql: MIGRATION_005_A_POSICAO_E_CONSEQUENCIA_DO_MOVIMENTO }
 ];
 
 // src/index.ts
@@ -10923,7 +11424,8 @@ function resolveConfig(options) {
     labels: { ...DEFAULT_LABELS, ...options?.labels },
     currency: { ...DEFAULT_CURRENCY, ...options?.currency },
     productTypes: options?.productTypes ?? DEFAULT_PRODUCT_TYPES,
-    locations: options?.locations ?? []
+    locations: options?.locations ?? [],
+    moduleNav: options?.moduleNav
   };
 }
 function createInventoryDataProvider() {
@@ -10941,6 +11443,13 @@ function createInventoryPlugin(options) {
   const PageComponent = () => React3.createElement(InventoryPage, { config, provider, store, registries: inventoryRegistries });
   return {
     id: "inventory",
+    // Como esta conta refaz o módulo com as opções DELA. Ver PluginRebuild:
+    // a fábrica roda no carregamento do aplicativo, muito antes de a
+    // configuração da conta existir, e sem isto `app.tenant_plugins.config`
+    // não tinha como chegar aqui. A fusão é RASA e por bloco — a conta troca
+    // `modules` inteiro ou não o troca —, que é o mesmo contrato que a chamada
+    // do aplicativo já tem.
+    rebuild: (tenantConfig) => createInventoryPlugin({ ...options, ...tenantConfig }),
     defaultAgentRole: "operations",
     name: config.labels.pageTitle,
     icon: "Package",