From a386ca5b4a8ad4576ca1d110329f8241356662aa Mon Sep 17 00:00:00 2001
From: consultoria-as <ialcarazsalazar@consultoria-as.com>
Date: Mon, 12 Oct 2026 00:57:31 +0000
Subject: [PATCH] Mejoras de sesion: estabilizacion, IA, Nexus Yonke y
 marketplace B2B

- F0 blindaje: Redis/Celery, pg_hba sin trust LAN, secretos a env 600, backups, webhook auth, jobs muertos
- F1 caja: bugs POS, reembolsos al corte, apartados, CFDI, topes de descuento en cotizacion/apartado
- F2/F7 IA de catalogo: autocategorizacion, dedup de SKUs con embeddings, OCR de facturas, descripciones, claves SAT, limpieza de fitment
- F3 IA en el flujo: vision Yonke, preguntas MeLi, venta cruzada, anomalias, sinonimos, busqueda semantica (rerank/embeddings)
- F4/F8 escala y cartera: /metrics+Prometheus+Grafana, pool, score de credito, churn, metricas multi-tenant
- Nexus Yonke (M1-M6): modelo de datos 1-de-1, alta por donador, vitrina publica, MeLi usado, consignacion, garantia por dias, reportes, etiquetas
- Marketplace B2B entre yonkes (catalogo + pedidos cross-tenant)
- Seguridad: auth en /api/admin/* (35 endpoints), alertas por tenant
- Migraciones v4.27/v4.28; timers expire-demos y rollup-metrics
---
 audit_dash.js                                 |   23 +
 audit_dash2.js                                |   10 +
 audit_fleet.js                                |   32 +
 audit_js.js                                   |   85 +
 dashboard/catalog-public.html                 |    3 +-
 dashboard/catalog-public.js                   |   51 +-
 dashboard/nav.js                              |   14 +-
 dashboard/server.py                           | 2086 ++++++++++--
 docker/alertmanager/alertmanager.yml          |   21 +-
 docker/docker-compose.monitoring.yml          |    2 +
 .../dashboards/nexus-gunicorn.json            |   32 +-
 docker/prometheus/prometheus.yml              |   18 +-
 docs/FASES_IMPLEMENTADAS.md                   |   24 +
 docs/YONKE_COMERCIAL.md                       |   47 +
 docs/YONKE_ONBOARDING.md                      |   51 +
 .../2026-10-11-auditoria-2-mejoras-ia.md      |  106 +
 ...026-10-11-auditoria-completa-mejoras-ia.md |  125 +
 docs/plans/2026-10-11-plan-maestro-mejoras.md |  199 ++
 manager/README.md                             |   27 +
 manager/app.py                                |    6 +
 manager/blueprints/portfolio_bp.py            |   48 +
 manager/services/business_metrics.py          |  352 ++
 manager/services/portfolio_service.py         |  522 +++
 manager/services/tenant_service.py            |   75 +-
 manager/static/js/manager.js                  |   74 +
 manager/templates/index.html                  |   61 +
 pos/app.py                                    |  393 ++-
 pos/blueprints/accounting_bp.py               |  436 ++-
 pos/blueprints/auth_bp.py                     |    2 +-
 pos/blueprints/b2b_bp.py                      |  258 ++
 pos/blueprints/cashregister_bp.py             |  106 +-
 pos/blueprints/catalog_bp.py                  |   69 +
 pos/blueprints/config_bp.py                   |  265 +-
 pos/blueprints/customers_bp.py                |   51 +
 pos/blueprints/internal_bp.py                 |    2 +-
 pos/blueprints/inventory_bp.py                |  665 +++-
 pos/blueprints/invoicing_bp.py                |   46 +-
 pos/blueprints/marketplace_external_bp.py     |  266 +-
 pos/blueprints/pos_bp.py                      |  490 ++-
 pos/blueprints/public_api_bp.py               |    5 +-
 pos/blueprints/service_order_bp.py            |    4 +-
 pos/blueprints/storefront_bp.py               |  240 ++
 pos/blueprints/warranty_bp.py                 |  119 +-
 pos/blueprints/whatsapp_bp.py                 |  239 +-
 pos/blueprints/yonke_bp.py                    |  911 +++++
 pos/config.py                                 |   20 +
 pos/middleware_tenant.py                      |    6 +-
 pos/migrations/runner.py                      |    5 +
 pos/migrations/v1.2_subdomain.sql             |    1 +
 pos/migrations/v1.6_marketplace.sql           |    1 +
 pos/migrations/v3.2_db_performance.sql        |   21 +-
 .../v3.5_whatsapp_state_machine.sql           |   11 +-
 pos/migrations/v4.24_trgm_search_indexes.sql  |   18 +
 pos/migrations/v4.25_transfer_documents.sql   |   28 +
 pos/migrations/v4.26_sales_client_uuid.sql    |    4 +
 pos/migrations/v4.27_yonke_m1.sql             |  113 +
 pos/migrations/v4.28_meli_commerce.sql        |   56 +
 pos/seed/sat_accounts.sql                     |    2 +
 pos/services/accounting_engine.py             |  474 +++
 pos/services/ai_chat.py                       |   21 +-
 pos/services/anomaly_detector.py              |  357 ++
 pos/services/b2b_service.py                   |  985 ++++++
 pos/services/billing.py                       |   10 +-
 pos/services/catalog_service.py               |  516 ++-
 pos/services/cfdi_builder.py                  |   37 +-
 pos/services/cfdi_facturapi_builder.py        |  116 +-
 pos/services/cfdi_queue.py                    |  422 ++-
 pos/services/credit_scoring.py                |  463 +++
 pos/services/crm_engine.py                    |   90 +-
 pos/services/cross_sell.py                    |  233 ++
 pos/services/facturapi_service.py             |   45 +-
 pos/services/inventory_vehicle_compat.py      |  221 +-
 pos/services/invoice_ocr.py                   |  474 +++
 pos/services/marketplace_external_service.py  | 1968 ++++++++---
 pos/services/meili_search.py                  |  231 ++
 pos/services/meli_service.py                  |  110 +-
 pos/services/notification_engine.py           |   19 +-
 pos/services/part_vision.py                   |  267 ++
 pos/services/pos_engine.py                    |  263 +-
 pos/services/product_categorizer.py           |  780 +++++
 pos/services/prom_metrics.py                  |  255 ++
 pos/services/push_service.py                  |    8 +-
 pos/services/question_ai.py                   |  325 ++
 pos/services/sat_keys.py                      |  338 ++
 pos/services/semantic_search.py               |  304 ++
 pos/services/sku_matcher.py                   |  448 +++
 pos/services/supplier_engine.py               |    8 +-
 pos/services/tenant_manager.py                |    6 +-
 pos/services/wa_quotation.py                  |   97 +-
 pos/services/wa_state_machine.py              |   79 +-
 pos/services/warranty_engine.py               |   28 +-
 pos/services/whatsapp_service.py              |  299 ++
 pos/services/yonke_ai.py                      |  336 ++
 pos/services/yonke_service.py                 | 1698 +++++++++
 pos/static/js/app-init.js                     |   33 +-
 pos/static/js/brand-catalog.js                |    2 +-
 pos/static/js/config.js                       |  130 +-
 pos/static/js/customers.js                    |  138 +
 pos/static/js/inventory.js                    | 1712 ++++++----
 pos/static/js/inventory.js.meli               |  497 +++
 pos/static/js/login.js                        |    2 +
 pos/static/js/marketplace_external.js         |   36 +-
 pos/static/js/pos.js                          |  581 +++-
 pos/static/js/push.js                         |    2 +-
 pos/static/js/sidebar.js                      |    2 +
 pos/static/js/yonke.js                        | 3024 +++++++++++++++++
 pos/static/pwa/sw.js                          |   16 +-
 pos/tasks.py                                  |   86 +-
 pos/templates/accounting.html                 |    2 +-
 pos/templates/catalog.html                    |    2 +-
 pos/templates/config.html                     |   88 +-
 pos/templates/customers.html                  |   22 +-
 pos/templates/dashboard.html                  |    4 +-
 pos/templates/diagrams.html                   |    2 +-
 pos/templates/fleet.html                      |    3 +-
 pos/templates/inventory.html                  |  104 +-
 pos/templates/invoicing.html                  |    2 +-
 pos/templates/login.html                      |    2 +
 pos/templates/marketplace_external.html       |    4 +-
 pos/templates/pos.html                        |  105 +-
 pos/templates/quotations.html                 |    2 +-
 pos/templates/remission_notes.html            |    2 +-
 pos/templates/reports.html                    |    2 +-
 pos/templates/storefront.html                 |  215 ++
 pos/templates/supplier_catalog.html           |    2 +-
 pos/templates/whatsapp.html                   |   89 +-
 pos/templates/workshop.html                   |    2 +-
 pos/templates/yonke.html                      | 1462 ++++++++
 pos/tenant_db.py                              |   33 +-
 pos/tests/test_facturapi_service.py           |   49 +-
 restore_inventory.js                          |  120 +
 restore_inventory2.js                         |  110 +
 restore_inventory3.js                         |   75 +
 restore_inventory4.js                         |   64 +
 scripts/assign_sat_keys.py                    |  235 ++
 scripts/b2b_marketplace_schema.py             |  180 +
 scripts/backfill_meli_listings.py             |  104 +
 scripts/backfill_vehicle_compat.py            |  187 +
 scripts/backup.sh                             |   24 +-
 scripts/backup_selective.sh                   |   87 +-
 scripts/categorize_inventory.py               |  166 +
 scripts/clean_fitment_qwen.py                 |  238 ++
 scripts/credit_score_report.py                |  123 +
 scripts/enrich_descriptions.py                |  303 ++
 scripts/eval_sku_matcher.py                   |  139 +
 scripts/expire_demos.py                       |   66 +
 scripts/grade_piece_vision.py                 |  111 +
 scripts/import_capi_inventory.py              |  156 +
 scripts/index_meilisearch.py                  |  171 +
 scripts/match_inventory_catalog.py            |  173 +
 scripts/meli_attach_images.py                 |  303 ++
 scripts/meli_questions_sla.py                 |  117 +
 scripts/meli_sync_all.py                      |   48 +
 scripts/process_cfdi_queues.py                |   72 +
 scripts/rollup_tenant_metrics.py              |  101 +
 scripts/run_anomaly_scan.py                   |  105 +
 scripts/suggest_meli_answer.py                |   82 +
 systemd/nexus-backup.service                  |    8 +-
 systemd/nexus-expire-demos.service            |   11 +
 systemd/nexus-expire-demos.timer              |    9 +
 systemd/nexus-pos.service                     |    1 +
 systemd/nexus-rollup-metrics.service          |   10 +
 systemd/nexus-rollup-metrics.timer            |    9 +
 systemd/nexus.service                         |    2 +
 test_double_refresh.js                        |   69 +
 165 files changed, 31313 insertions(+), 2203 deletions(-)
 create mode 100644 audit_dash.js
 create mode 100644 audit_dash2.js
 create mode 100644 audit_fleet.js
 create mode 100644 audit_js.js
 create mode 100644 docs/YONKE_COMERCIAL.md
 create mode 100644 docs/YONKE_ONBOARDING.md
 create mode 100644 docs/plans/2026-10-11-auditoria-2-mejoras-ia.md
 create mode 100644 docs/plans/2026-10-11-auditoria-completa-mejoras-ia.md
 create mode 100644 docs/plans/2026-10-11-plan-maestro-mejoras.md
 create mode 100644 manager/blueprints/portfolio_bp.py
 create mode 100644 manager/services/business_metrics.py
 create mode 100644 manager/services/portfolio_service.py
 create mode 100644 pos/blueprints/b2b_bp.py
 create mode 100644 pos/blueprints/storefront_bp.py
 create mode 100644 pos/blueprints/yonke_bp.py
 create mode 100644 pos/migrations/v4.24_trgm_search_indexes.sql
 create mode 100644 pos/migrations/v4.25_transfer_documents.sql
 create mode 100644 pos/migrations/v4.26_sales_client_uuid.sql
 create mode 100644 pos/migrations/v4.27_yonke_m1.sql
 create mode 100644 pos/migrations/v4.28_meli_commerce.sql
 create mode 100644 pos/services/anomaly_detector.py
 create mode 100644 pos/services/b2b_service.py
 create mode 100644 pos/services/credit_scoring.py
 create mode 100644 pos/services/cross_sell.py
 create mode 100644 pos/services/invoice_ocr.py
 create mode 100644 pos/services/part_vision.py
 create mode 100644 pos/services/product_categorizer.py
 create mode 100644 pos/services/prom_metrics.py
 create mode 100644 pos/services/question_ai.py
 create mode 100644 pos/services/sat_keys.py
 create mode 100644 pos/services/semantic_search.py
 create mode 100644 pos/services/sku_matcher.py
 create mode 100644 pos/services/yonke_ai.py
 create mode 100644 pos/services/yonke_service.py
 create mode 100644 pos/static/js/inventory.js.meli
 create mode 100644 pos/static/js/yonke.js
 create mode 100644 pos/templates/storefront.html
 create mode 100644 pos/templates/yonke.html
 create mode 100644 restore_inventory.js
 create mode 100644 restore_inventory2.js
 create mode 100644 restore_inventory3.js
 create mode 100644 restore_inventory4.js
 create mode 100644 scripts/assign_sat_keys.py
 create mode 100644 scripts/b2b_marketplace_schema.py
 create mode 100644 scripts/backfill_meli_listings.py
 create mode 100644 scripts/backfill_vehicle_compat.py
 create mode 100755 scripts/categorize_inventory.py
 create mode 100644 scripts/clean_fitment_qwen.py
 create mode 100644 scripts/credit_score_report.py
 create mode 100644 scripts/enrich_descriptions.py
 create mode 100644 scripts/eval_sku_matcher.py
 create mode 100644 scripts/expire_demos.py
 create mode 100644 scripts/grade_piece_vision.py
 create mode 100644 scripts/import_capi_inventory.py
 create mode 100644 scripts/index_meilisearch.py
 create mode 100755 scripts/match_inventory_catalog.py
 create mode 100644 scripts/meli_attach_images.py
 create mode 100644 scripts/meli_questions_sla.py
 create mode 100644 scripts/meli_sync_all.py
 create mode 100644 scripts/process_cfdi_queues.py
 create mode 100644 scripts/rollup_tenant_metrics.py
 create mode 100644 scripts/run_anomaly_scan.py
 create mode 100644 scripts/suggest_meli_answer.py
 create mode 100644 systemd/nexus-expire-demos.service
 create mode 100644 systemd/nexus-expire-demos.timer
 create mode 100644 systemd/nexus-rollup-metrics.service
 create mode 100644 systemd/nexus-rollup-metrics.timer
 create mode 100644 test_double_refresh.js

diff --git a/audit_dash.js b/audit_dash.js
new file mode 100644
index 0000000..1339f46
--- /dev/null
+++ b/audit_dash.js
@@ -0,0 +1,23 @@
+const { chromium } = require('playwright');
+(async () => {
+  const browser = await chromium.launch();
+  const page = await browser.newPage();
+  const pages = [
+    ['dashboard', 'http://localhost:5000/'],
+    ['catalog', 'http://localhost:5000/catalog'],
+    ['tienda (capi)', 'http://localhost:5001/tienda'],
+  ];
+  for (const [name, url] of pages) {
+    const errs = [];
+    const onErr = (e) => errs.push(String(e).slice(0, 140));
+    const onCon = (m) => { if (m.type() === 'error' && !/favicon|net::ERR|404|sourcemap/i.test(m.text())) errs.push(m.text().slice(0, 140)); };
+    page.on('pageerror', onErr); page.on('console', onCon);
+    try {
+      await page.goto(url, { waitUntil: 'load', timeout: 20000 });
+      await page.waitForTimeout(2000);
+      console.log((errs.length ? '✗ ' : '✓ ') + name, errs.length ? errs.slice(0, 3) : '');
+    } catch (e) { console.log('✗✗ ' + name + ' → ' + e.message.slice(0, 100)); }
+    page.removeAllListeners('pageerror'); page.removeAllListeners('console');
+  }
+  await browser.close();
+})();
diff --git a/audit_dash2.js b/audit_dash2.js
new file mode 100644
index 0000000..80d115b
--- /dev/null
+++ b/audit_dash2.js
@@ -0,0 +1,10 @@
+const { chromium } = require('playwright');
+(async () => {
+  const browser = await chromium.launch();
+  const page = await browser.newPage();
+  const bad = [];
+  page.on('response', (r) => { if (r.status() >= 500) bad.push(r.status() + ' ' + r.url()); });
+  await page.goto('http://localhost:5000/', { waitUntil: 'networkidle', timeout: 25000 });
+  console.log('recursos con 500:', bad.length ? bad : 'ninguno');
+  await browser.close();
+})();
diff --git a/audit_fleet.js b/audit_fleet.js
new file mode 100644
index 0000000..b60f927
--- /dev/null
+++ b/audit_fleet.js
@@ -0,0 +1,32 @@
+const { chromium } = require('playwright');
+const { execSync } = require('child_process');
+const JWT_SECRET = execSync("grep -oP 'POS_JWT_SECRET=\\K.*' /etc/systemd/system/nexus-pos.service | head -1").toString().trim();
+function tok() {
+  const h = { alg: 'HS256', typ: 'JWT' };
+  const now = Math.floor(Date.now()/1000);
+  const p = { tenant_id: 32, employee_id: 1, name: 'Audit', role: 'owner', branch_id: 1,
+    max_discount_pct: 100, permissions: ['*'], device_id: 'a', type: 'pos_access', exp: now+900, iat: now };
+  const b64 = o => Buffer.from(JSON.stringify(o)).toString('base64url');
+  const crypto = require('crypto');
+  return b64(h)+'.'+b64(p)+'.'+crypto.createHmac('sha256', JWT_SECRET).update(b64(h)+'.'+b64(p)).digest('base64url');
+}
+(async () => {
+  const browser = await chromium.launch();
+  const page = await browser.newPage();
+  const errs = [];
+  page.on('pageerror', e => errs.push(String(e).slice(0,120)));
+  page.on('console', m => { if (m.type()==='error' && !/favicon|404|net::ERR|sourcemap/i.test(m.text())) errs.push(m.text().slice(0,120)); });
+  await page.addInitScript(t => {
+    localStorage.setItem('pos_token', t);
+    localStorage.setItem('pos_employee', JSON.stringify({id:1,name:'Audit',role:'owner'}));
+    localStorage.setItem('pos_tenant_id','32');
+    document.cookie='pos_role=owner; path=/pos; SameSite=Lax';
+  }, tok());
+  for (const p of ['/pos/fleet','/pos/supplier-catalog','/pos/historical-sales','/pos/diagrams']) {
+    errs.length = 0;
+    const resp = await page.goto('http://localhost:5001'+p, {waitUntil:'load', timeout:20000}).catch(e=>null);
+    await page.waitForTimeout(2000);
+    console.log((errs.length?'✗ ':'✓ ') + p + ' [' + (resp?resp.status():'?') + ']' + (errs.length? ' → '+errs[0]:''));
+  }
+  await browser.close();
+})();
diff --git a/audit_js.js b/audit_js.js
new file mode 100644
index 0000000..442e60c
--- /dev/null
+++ b/audit_js.js
@@ -0,0 +1,85 @@
+#!/usr/bin/env node
+/* Auditoría JS: carga cada página del POS y reporta errores de consola y handlers rotos. */
+const { chromium } = require('playwright');
+const { execSync } = require('child_process');
+
+const JWT_SECRET = execSync(
+  "grep -oP 'POS_JWT_SECRET=\\K.*' /etc/systemd/system/nexus-pos.service | head -1"
+).toString().trim();
+
+function makeToken() {
+  const header = { alg: 'HS256', typ: 'JWT' };
+  const now = Math.floor(Date.now() / 1000);
+  const payload = {
+    tenant_id: 32, employee_id: 1, name: 'Audit Admin', role: 'owner',
+    branch_id: 1, max_discount_pct: 100,
+    permissions: ['pos.sell', 'pos.view', 'pos.remission', 'pos.discount', 'pos.cancel',
+      'catalog.view', 'inventory.view', 'inventory.create', 'inventory.edit',
+      'inventory.adjust', 'inventory.transfer', 'customers.view', 'customers.create',
+      'invoicing.view', 'invoicing.create', 'reports.view', 'config.view', 'config.edit',
+      'config.edit_prices', 'workshop.view', 'workshop.edit', 'dashboard.view'],
+    device_id: 'audit', type: 'pos_access', exp: now + 900, iat: now,
+  };
+  const b64 = (o) => Buffer.from(JSON.stringify(o)).toString('base64url');
+  const crypto = require('crypto');
+  const sig = crypto.createHmac('sha256', JWT_SECRET)
+    .update(b64(header) + '.' + b64(payload)).digest('base64url');
+  return b64(header) + '.' + b64(payload) + '.' + sig;
+}
+
+const PAGES = [
+  '/pos/sale', '/pos/inventory', '/pos/customers', '/pos/config',
+  '/pos/dashboard', '/pos/invoicing', '/pos/remission-notes', '/pos/catalog',
+  '/pos/quotations', '/pos/reports', '/pos/accounting', '/pos/workshop',
+  '/pos/whatsapp', '/pos/marketplace-external',
+];
+
+(async () => {
+  const browser = await chromium.launch();
+  const ctx = await browser.newContext();
+  const page = await ctx.newPage();
+
+  const brokenHandlers = [];
+  await page.addInitScript((token) => {
+    localStorage.setItem('pos_token', token);
+    localStorage.setItem('pos_employee', JSON.stringify({ id: 1, name: 'Audit Admin', role: 'owner' }));
+    localStorage.setItem('pos_tenant_id', '32');
+    document.cookie = 'pos_role=owner; path=/pos; SameSite=Lax';
+    // Capturar errores de handlers inline (onclick con función inexistente)
+    window.addEventListener('error', function (e) {
+      if (e.message && /is not a function|is not defined/.test(e.message)) {
+        (window.__broken = window.__broken || []).push(e.message + ' @ ' + location.pathname);
+      }
+    });
+  }, makeToken());
+
+  for (const p of PAGES) {
+    const errs = [];
+    const onConsole = (m) => {
+      if (m.type() === 'error') errs.push(m.text().slice(0, 160));
+    };
+    page.on('pageerror', (e) => errs.push('PAGEERROR: ' + String(e).slice(0, 160)));
+    page.on('console', onConsole);
+
+    try {
+      await page.goto('http://localhost:5001' + p, { waitUntil: 'load', timeout: 20000 });
+      await page.waitForTimeout(2200);
+      // Los errores capturados en window.__broken (handlers inline)
+      const inline = await page.evaluate(() => (window.__broken || []).splice(0));
+      const realErrs = errs.filter((t) =>
+        !/favicon|net::ERR|Failed to load resource|404|sourcemap|DevTools/i.test(t));
+      if (realErrs.length || inline.length) {
+        console.log('✗ ' + p);
+        realErrs.slice(0, 4).forEach((t) => console.log('    consola: ' + t));
+        inline.slice(0, 6).forEach((t) => console.log('    handler: ' + t));
+      } else {
+        console.log('✓ ' + p);
+      }
+    } catch (e) {
+      console.log('✗✗ ' + p + ' → ' + e.message.slice(0, 120));
+    }
+    page.removeAllListeners('console');
+    page.removeAllListeners('pageerror');
+  }
+  await browser.close();
+})();
diff --git a/dashboard/catalog-public.html b/dashboard/catalog-public.html
index 64a320f..3c6c197 100644
--- a/dashboard/catalog-public.html
+++ b/dashboard/catalog-public.html
@@ -23,6 +23,7 @@
           <button data-mode="oem" onclick="setCatalogMode('oem')">OEM</button>
           <button data-mode="local" onclick="setCatalogMode('local')">Local</button>
         </div>
+        <a href="/usados" class="header-back" id="usedPartsLink" title="Partes usadas y reconstruidas">Usados</a>
         <a href="/" class="header-back">&larr; Inicio</a>
         <button class="theme-toggle" onclick="toggleTheme()" id="themeToggle">
           <span id="themeIcon">&#9790;</span>
@@ -86,7 +87,7 @@
     })();
   </script>
 
-  <script src="/catalog-public.js"></script>
+  <script src="/catalog-public.js?v=2"></script>
 
   <!-- AI Chat Widget -->
   <link rel="stylesheet" href="/chat-public.css">
diff --git a/dashboard/catalog-public.js b/dashboard/catalog-public.js
index 16aa26e..7db1c5c 100644
--- a/dashboard/catalog-public.js
+++ b/dashboard/catalog-public.js
@@ -27,7 +27,7 @@
     nxPartType: null,      // {slug, name} ← Nexpart part type
 
     region: 'north-america',
-    mode: (localStorage.getItem('catalog_mode') === 'local' ? 'local' : 'oem'),
+    mode: (localStorage.getItem('catalog_mode') === 'oem' ? 'oem' : 'local'),
     page: 1,
     totalPages: 1,
   };
@@ -64,6 +64,7 @@
     state.brand = state.model = state.year = state.engine = null;
     state.level = 'brands';
     loadBrands();
+    waConfig(function () {}); // preload WhatsApp contact config
   };
 
   // ── Region selector (global) ──
@@ -109,6 +110,31 @@
     loadBrands();
   }
 
+  // ── Link a la vitrina de partes usadas del tenant (si existe) ──
+  (function () {
+    var link = document.getElementById('usedPartsLink');
+    if (!link) return;
+    var parts = window.location.hostname.split('.');
+    var sub = (parts.length >= 3) ? parts[0]
+            : (parts.length === 2 && parts[1] === 'localhost') ? parts[0] : '';
+    var reserved = ['www', 'api', 'admin', 'mail', 'staging', 'dev', 'nexus', 'pos', 'app', 'dashboard'];
+    if (reserved.indexOf(sub) !== -1) sub = '';
+    var urlParams2 = new URLSearchParams(window.location.search);
+    var tenant = urlParams2.get('tenant') || sub;
+    if (!tenant) return;
+    fetch('/api/public/used-parts?per_page=1&tenant=' + encodeURIComponent(tenant))
+      .then(function (r) { return r.ok ? r.json() : null; })
+      .then(function (d) {
+        if (d && d.total > 0) {
+          link.href = '/usado/' + encodeURIComponent(d.tenant.subdomain || tenant);
+          link.textContent = 'Usados (' + d.total + ')';
+        } else {
+          link.style.display = 'none';
+        }
+      })
+      .catch(function () { link.style.display = 'none'; });
+  })();
+
   // Enter on search
   // ── Smart search detector ──
   function detectQueryType(raw) {
@@ -729,6 +755,7 @@
           }
 
           html += '<button class="part-detail-btn" onclick="openDetail(' + p.id_part + ')">Ver detalle y alternativas</button>';
+          html += waQuoteButtonHtml(p);
           html += '</div>';
           if (p.image_url) {
             html += '<img class="part-img" src="' + esc(p.image_url) + '" alt="" loading="lazy" onerror="this.style.display=\'none\'">';
@@ -782,6 +809,26 @@
     content.innerHTML = html;
   }
 
+  // ── WhatsApp quote button ──
+  var _waConfig = null;
+  function waConfig(cb) {
+      if (_waConfig) return cb(_waConfig);
+      fetch('/api/public/contact-config').then(function (r) { return r.json(); })
+          .then(function (d) { _waConfig = d || { enabled: false }; cb(_waConfig); })
+          .catch(function () { _waConfig = { enabled: false }; cb(_waConfig); });
+  }
+
+  function waQuoteButtonHtml(p) {
+      var cfg = _waConfig;
+      if (!cfg || !cfg.enabled || !cfg.wa_number) return '';
+      var text = 'Hola, me interesa cotizar esta pieza:%0A%0A*OEM:* ' + encodeURIComponent(p.oem_part_number || '') +
+          '%0A*Descripción:* ' + encodeURIComponent(p.name || '');
+      if (p.vehicle_info) text += '%0A*Vehículo:* ' + encodeURIComponent(p.vehicle_info);
+      return '<a class="btn-wa-quote" target="_blank" rel="noopener" href="https://wa.me/' + cfg.wa_number + '?text=' + text + '"' +
+          ' style="display:inline-flex;align-items:center;gap:8px;margin-top:var(--space-4);padding:12px 20px;border-radius:var(--radius-md);background:#25D366;color:#fff;text-decoration:none;font-weight:600;">' +
+          'Cotizar por WhatsApp</a>';
+  }
+
   // ── Part detail ──
   function renderDetail(d, body) {
     if (!d || !d.part) {
@@ -831,7 +878,7 @@
       html += '</tbody></table></div>';
     }
 
-    body.innerHTML = html;
+    waConfig(function () { html += waQuoteButtonHtml(p); body.innerHTML = html; });
   }
 
   // ── Helpers ──
diff --git a/dashboard/nav.js b/dashboard/nav.js
index dd923fb..27ecd84 100644
--- a/dashboard/nav.js
+++ b/dashboard/nav.js
@@ -31,14 +31,14 @@
     }
 
     var navLinks = [
-        { label: 'Demo', href: '/demo' },
-        { label: 'Tienda', href: '/tienda' },
+        { label: 'Demo', href: '/demo.html' },
+        { label: 'Tienda', href: '/tienda.html' },
         { label: 'Cat\u00e1logo', href: '/index.html' },
-        { label: 'Captura', href: '/captura' },
-        { label: 'POS', href: '/pos' },
-        { label: 'Cuentas', href: '/cuentas' },
-        { label: 'Bodega', href: '/bodega' },
-        { label: 'Admin', href: '/admin' }
+        { label: 'Captura', href: '/captura.html' },
+        { label: 'POS', href: '/pos/login' },
+        { label: 'Cuentas', href: '/cuentas.html' },
+        { label: 'Bodega', href: '/bodega.html' },
+        { label: 'Admin', href: '/admin.html' }
     ];
 
     var linksHTML = navLinks.map(function (link) {
diff --git a/dashboard/server.py b/dashboard/server.py
index 4621b06..39bf89a 100644
--- a/dashboard/server.py
+++ b/dashboard/server.py
@@ -7,7 +7,9 @@ import sys
 import json as json_module
 import re
 import base64
+import contextlib
 import uuid
+import time
 import urllib.request
 from datetime import datetime, timedelta
 
@@ -29,6 +31,379 @@ engine = create_engine(DB_URL, pool_pre_ping=True, pool_size=5, max_overflow=10)
 Session = sessionmaker(bind=engine)
 
 
+# ============================================================================
+# Prometheus metrics (módulo compartido con el POS, sin dependencias extra)
+# ============================================================================
+from services.prom_metrics import CONTENT_TYPE as PROM_CONTENT_TYPE, metrics as prom_metrics
+from services.prom_metrics import normalize_path as prom_normalize_path
+
+prom_metrics.configure('dashboard')
+
+
+@app.before_request
+def _metrics_request_start():
+    if request.path != '/metrics':
+        g._metrics_t0 = time.perf_counter()
+        prom_metrics.request_started()
+
+
+@app.after_request
+def _metrics_request_end(response):
+    t0 = getattr(g, '_metrics_t0', None)
+    if t0 is not None:
+        g._metrics_done = True
+        rule = getattr(request.url_rule, 'rule', None)
+        prom_metrics.request_finished(
+            request.method,
+            prom_normalize_path(rule, request.path),
+            response.status_code,
+            time.perf_counter() - t0,
+        )
+    return response
+
+
+@app.teardown_request
+def _metrics_request_teardown(exc):
+    if exc is not None:
+        prom_metrics.record_exception()
+    if getattr(g, '_metrics_t0', None) is not None and not getattr(g, '_metrics_done', False):
+        prom_metrics.request_aborted()
+
+
+@app.route('/metrics')
+def prometheus_metrics():
+    from flask import Response
+    resp = Response(prom_metrics.render(), mimetype='text/plain')
+    resp.headers['Content-Type'] = PROM_CONTENT_TYPE
+    resp.headers['Cache-Control'] = 'no-store'
+    return resp
+
+
+# ============================================================================
+# Admin API guard — exige token ADMIN en TODA la superficie /api/admin/*
+# ============================================================================
+@app.before_request
+def _guard_admin_api():
+    """Solo unas pocas rutas /api/admin/* tenían @require_auth; este guard
+    cierra todas las demás (mutaciones de catálogo, import, export, upload)."""
+    if not request.path.startswith('/api/admin/'):
+        return None
+    auth_header = request.headers.get('Authorization', '')
+    if not auth_header.startswith('Bearer '):
+        return jsonify({'error': 'Missing or invalid Authorization header'}), 401
+    payload = decode_token(auth_header[7:])
+    if payload is None:
+        return jsonify({'error': 'Invalid or expired token'}), 401
+    if payload.get('type') != 'access':
+        return jsonify({'error': 'Invalid token type'}), 401
+    if payload.get('role') != 'ADMIN':
+        return jsonify({'error': 'Insufficient permissions'}), 403
+    g.user = {'user_id': payload.get('user_id'), 'role': payload.get('role')}
+    return None
+
+
+# ============================================================================
+# Catálogo público — guard OEM (tablas TecDoc retiradas, jun 2026)
+# ============================================================================
+# Espejo del guard `_oem_blocked` de pos/blueprints/catalog_bp.py:47. El
+# dashboard no lo tenía y por eso los endpoints públicos devolvían 500 al
+# consultar `parts` / `part_groups` / `vehicle_parts`, que ya no existen.
+CATALOG_OEM_ENABLED = os.environ.get('CATALOG_OEM_ENABLED', 'false').lower() == 'true'
+_TECDOC_TABLES_CACHE = {'checked': False, 'exists': False}
+
+# ─── Meilisearch (mismos nombres de variable que pos/config.py) ────────────
+MEILI_URL = os.environ.get('MEILI_URL', 'http://localhost:7700')
+MEILI_API_KEY = os.environ.get('MEILI_API_KEY', '')
+MEILI_ENABLED = os.environ.get('MEILI_ENABLED', 'true').lower() == 'true'
+MEILI_CATALOG_INDEX = 'nexus_supplier_catalog'
+_meili_client = None
+
+
+def _tecdoc_available():
+    """True si la tabla TecDoc `parts` existe en la maestra (cacheado)."""
+    if _TECDOC_TABLES_CACHE['checked']:
+        return _TECDOC_TABLES_CACHE['exists']
+    exists = False
+    session = Session()
+    try:
+        exists = session.execute(text(
+            "SELECT 1 FROM pg_tables WHERE schemaname='public' AND tablename='parts' LIMIT 1"
+        )).first() is not None
+    except Exception:
+        exists = False
+    finally:
+        session.close()
+    _TECDOC_TABLES_CACHE['checked'] = True
+    _TECDOC_TABLES_CACHE['exists'] = exists
+    return exists
+
+
+def _is_retired_schema_error(e):
+    """True si el error proviene de tablas/columnas del esquema TecDoc retirado.
+
+    Las consultas del dashboard pasan por SQLAlchemy, que envuelve el error de
+    psycopg2 (ProgrammingError.orig) — hay que mirar ambos.
+    """
+    orig = getattr(e, 'orig', e)
+    try:
+        from psycopg2.errors import UndefinedTable, UndefinedColumn
+        if isinstance(e, (UndefinedTable, UndefinedColumn)):
+            return True
+        if isinstance(orig, (UndefinedTable, UndefinedColumn)):
+            return True
+    except Exception:
+        pass
+    return 'does not exist' in str(orig) or 'does not exist' in str(e)
+
+
+def _oem_blocked():
+    """Devuelve (json, 403) si el catálogo OEM no está disponible; None si sí.
+
+    Misma lógica que el POS: cuando el esquema TecDoc no existe o el OEM está
+    deshabilitado, se responde con un mensaje claro en vez de un 500.
+    """
+    if not CATALOG_OEM_ENABLED or not _tecdoc_available():
+        return jsonify({
+            'error': 'Catálogo OEM no disponible',
+            'message': 'El catálogo OEM está en construcción. Usa el modo Local.',
+            'oem_disabled': True,
+            'mode': 'local',
+        }), 403
+    return None
+
+
+def _catalog_mode(raw):
+    """Modo efectivo del catálogo público. Local por defecto.
+
+    El modo OEM sólo se respeta si CATALOG_OEM_ENABLED está activo; si además
+    el esquema TecDoc no existe, el endpoint OEM responde con `_oem_blocked`.
+    Así `?mode=oem` (el valor por defecto del frontend) degrada a Local en vez
+    de romper con 500.
+    """
+    cleaned = str(raw or '').strip().lower()
+    if cleaned == 'oem' and CATALOG_OEM_ENABLED:
+        return 'oem'
+    return 'local'
+
+
+def _get_meili_client():
+    """Cliente Meilisearch o None si está apagado / sin API key."""
+    global _meili_client
+    if not MEILI_ENABLED or not MEILI_API_KEY:
+        return None
+    if _meili_client is None:
+        try:
+            import meilisearch
+            _meili_client = meilisearch.Client(MEILI_URL, MEILI_API_KEY)
+        except Exception:
+            return None
+    return _meili_client
+
+
+def _search_catalog_live(q, limit=50, offset=0):
+    """Búsqueda del catálogo vivo (supplier_catalog) vía Meilisearch.
+
+    Fallback transparente a SQL (ILIKE) si Meilisearch está apagado, sin API
+    key o falla. Nunca lanza: devuelve [] ante cualquier error.
+    """
+    q = (q or '').strip()
+    if len(q) < 2:
+        return []
+    limit = max(1, min(int(limit or 50), 100))
+    offset = max(0, int(offset or 0))
+
+    ids = None
+    client = _get_meili_client()
+    if client is not None:
+        try:
+            res = client.index(MEILI_CATALOG_INDEX).search(
+                q, {'limit': limit, 'offset': offset})
+            ids = [h.get('id') for h in res.get('hits', []) if h.get('id') is not None]
+        except Exception:
+            ids = None
+
+    session = Session()
+    try:
+        if ids is not None:
+            if not ids:
+                return []
+            rows = session.execute(text("""
+                SELECT id, sku, name, category, description, image_url, supplier_name
+                FROM supplier_catalog
+                WHERE id = ANY(:ids) AND is_active
+            """), {'ids': ids}).mappings().all()
+            by_id = {r['id']: r for r in rows}
+            ordered = [by_id[i] for i in ids if i in by_id]
+        else:
+            ordered = session.execute(text("""
+                SELECT id, sku, name, category, description, image_url, supplier_name
+                FROM supplier_catalog
+                WHERE is_active
+                  AND (sku ILIKE :like OR name ILIKE :like OR category ILIKE :like)
+                ORDER BY CASE WHEN sku ILIKE :prefix THEN 0
+                              WHEN name ILIKE :prefix THEN 1 ELSE 2 END, name
+                LIMIT :limit OFFSET :offset
+            """), {'like': f'%{q}%', 'prefix': f'{q}%',
+                   'limit': limit, 'offset': offset}).mappings().all()
+    except Exception:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        return []
+    finally:
+        session.close()
+
+    return [{
+        'id_part': r['id'],
+        'oem_part_number': r['sku'],
+        'name': r['name'],
+        'description': r['description'],
+        'image_url': r['image_url'],
+        'manufacturer': r['supplier_name'],
+        'group_name': r['category'],
+        'category_name': r['category'],
+        'vehicle_info': r['category'] or '',
+        'source': 'supplier_catalog',
+    } for r in ordered]
+
+
+def _catalog_part_detail_live(part_id):
+    """Detalle de parte desde el catálogo vivo (sin TecDoc). Devuelve (json, code)."""
+    session = Session()
+    try:
+        row = session.execute(text("""
+            SELECT id, sku, name, category, description, image_url, supplier_name
+            FROM supplier_catalog WHERE id = :pid AND is_active
+        """), {'pid': part_id}).mappings().first()
+        if not row:
+            return jsonify({
+                'error': 'Part not found',
+                'message': 'La parte no existe en el catálogo.',
+                'oem_disabled': True,
+                'source': 'supplier_catalog',
+            }), 404
+
+        alternatives = []
+        try:
+            xrows = session.execute(text("""
+                SELECT DISTINCT brand, part_number
+                FROM supplier_catalog_interchange
+                WHERE catalog_id = :pid LIMIT 50
+            """), {'pid': part_id}).mappings().all()
+            alternatives = [{
+                'part_number': x['part_number'],
+                'manufacturer': x['brand'] or 'Intercambio',
+                'name': None,
+                'type': 'cross_reference',
+            } for x in xrows]
+        except Exception:
+            try:
+                session.rollback()
+            except Exception:
+                pass
+
+        return jsonify({
+            'part': {
+                'id_part': row['id'],
+                'oem_part_number': row['sku'],
+                'name': row['name'],
+                'description': row['description'],
+                'image_url': row['image_url'],
+                'group_name': row['supplier_name'],
+                'category_name': row['category'],
+                'source': 'supplier_catalog',
+            },
+            'alternatives': alternatives,
+            'bodegas': [],
+            'oem_disabled': True,
+        })
+    finally:
+        session.close()
+
+
+def _live_categories():
+    """Categorías equivalentes cuando el árbol TecDoc ya no existe.
+
+    Se degrada a los 14 grupos Nexpart del catálogo vivo, con la misma forma
+    que consumen los frontends ({id, name, name_es, slug, children}).
+    """
+    try:
+        from services.nexpart_taxonomy import get_groups
+        return [{
+            'id': g['name'],
+            'name': g['name'],
+            'name_es': g['name_es'],
+            'slug': g['name'],
+            'icon_name': None,
+            'display_order': i,
+            'parent_id': None,
+            'children': [],
+        } for i, g in enumerate(get_groups())]
+    except Exception:
+        return []
+
+
+def _live_manufacturers(limit=200):
+    """Fabricantes del catálogo vivo (supplier_catalog.supplier_name)."""
+    session = Session()
+    try:
+        rows = session.execute(text("""
+            SELECT DISTINCT supplier_name FROM supplier_catalog
+            WHERE is_active AND supplier_name IS NOT NULL AND supplier_name <> ''
+            ORDER BY supplier_name LIMIT :limit
+        """), {'limit': limit}).mappings().all()
+    except Exception:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        return []
+    finally:
+        session.close()
+    return [{'id': r['supplier_name'], 'name': r['supplier_name'], 'type': None,
+             'quality_tier': None, 'country': None, 'logo_url': None, 'website': None}
+            for r in rows]
+
+
+def _live_aftermarket(page, per_page, offset):
+    """Intercambios/aftermarket del catálogo vivo (supplier_catalog_interchange)."""
+    empty = {'data': [], 'pagination': {'page': page, 'per_page': per_page,
+                                        'total': 0, 'total_pages': 1},
+             'oem_disabled': True,
+             'message': 'Aftermarket OEM no disponible (esquema TecDoc retirado).'}
+    session = Session()
+    try:
+        total = session.execute(text("""
+            SELECT COUNT(*) FROM supplier_catalog_interchange sci
+            JOIN supplier_catalog sc ON sc.id = sci.catalog_id
+            WHERE sc.is_active
+        """)).scalar() or 0
+        rows = session.execute(text("""
+            SELECT sci.id, sci.part_number, sci.brand, sc.sku, sc.name
+            FROM supplier_catalog_interchange sci
+            JOIN supplier_catalog sc ON sc.id = sci.catalog_id
+            WHERE sc.is_active
+            ORDER BY sci.brand, sci.part_number LIMIT :limit OFFSET :offset
+        """), {'limit': per_page, 'offset': offset}).mappings().all()
+    except Exception:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        return jsonify(empty), 200
+    finally:
+        session.close()
+    data = [{'id': r['id'], 'part_number': r['part_number'], 'name': r['name'],
+             'oem_part_number': r['sku'], 'manufacturer_name': r['brand'] or 'Intercambio',
+             'quality_tier': None, 'price_usd': None} for r in rows]
+    total_pages = max(1, (total + per_page - 1) // per_page)
+    return jsonify({'data': data, 'pagination': {'page': page, 'per_page': per_page,
+                                                 'total': total, 'total_pages': total_pages},
+                    'oem_disabled': True,
+                    'source': 'supplier_catalog_interchange'}), 200
+
+
 # ============================================================================
 # Helper Functions
 # ============================================================================
@@ -382,10 +757,10 @@ NORTH_AMERICA_BRANDS = REGION_BRANDS['north-america']
 
 @app.route('/api/catalog/brands')
 def api_catalog_brands():
-    from services.catalog_modes import get_brands_for_mode, normalize_mode
+    from services.catalog_modes import get_brands_for_mode
     region = request.args.get('region', 'north-america')
     year_id = request.args.get('year_id', type=int)
-    mode = normalize_mode(request.args.get('mode'))
+    mode = _catalog_mode(request.args.get('mode'))
     session = Session()
     try:
         params = {}
@@ -512,9 +887,8 @@ def api_catalog_categories():
     Local mode: 14 Nexpart top-level groups filtered by what has parts for
       this vehicle (strings as slugs).
     """
-    from services.catalog_modes import normalize_mode
     mye_id = request.args.get('mye_id', type=int)
-    mode = normalize_mode(request.args.get('mode'))
+    mode = _catalog_mode(request.args.get('mode'))
     if not mye_id:
         return jsonify({'error': 'mye_id required'}), 400
 
@@ -527,7 +901,10 @@ def api_catalog_categories():
             conn.close()
         return jsonify({'data': data, 'mode': 'local'})
 
-    # OEM mode (original behavior)
+    # OEM mode (original behavior) — degrada a Local si el esquema no está.
+    blocked = _oem_blocked()
+    if blocked:
+        return blocked
     session = Session()
     try:
         rows = session.execute(text("""
@@ -547,6 +924,23 @@ def api_catalog_categories():
         """), {'mye_id': mye_id}).mappings().all()
         return jsonify([{'id_part_category': r['id_part_category'],
                          'name': translate_category(r['name']), 'part_count': r['part_count']} for r in rows])
+    except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        if _is_retired_schema_error(e):
+            from services.catalog_service import get_nexpart_groups_for_vehicle
+            conn = _nexpart_master_conn()
+            try:
+                data = get_nexpart_groups_for_vehicle(conn, mye_id)
+            except Exception:
+                data = []
+            finally:
+                conn.close()
+            return jsonify({'data': data, 'mode': 'local', 'oem_disabled': True,
+                            'message': 'Catálogo OEM no disponible; se muestra el modo Local.'}), 200
+        return jsonify({'data': [], 'error': str(e)}), 200
     finally:
         session.close()
 
@@ -558,11 +952,10 @@ def api_catalog_groups():
     OEM mode: TecDoc part_groups (integer category_id).
     Local mode: Nexpart subgroups within a Nexpart group (category_slug string).
     """
-    from services.catalog_modes import normalize_mode
     mye_id = request.args.get('mye_id', type=int)
     category_id = request.args.get('category_id', type=int)
     category_slug = request.args.get('category_slug')
-    mode = normalize_mode(request.args.get('mode'))
+    mode = _catalog_mode(request.args.get('mode'))
     if not mye_id:
         return jsonify({'error': 'mye_id required'}), 400
 
@@ -577,7 +970,10 @@ def api_catalog_groups():
             conn.close()
         return jsonify({'data': data, 'mode': 'local'})
 
-    # OEM mode
+    # OEM mode — degrada con elegancia si el esquema TecDoc no está.
+    blocked = _oem_blocked()
+    if blocked:
+        return blocked
     if not category_id:
         return jsonify({'error': 'category_id required for oem mode'}), 400
     session = Session()
@@ -596,10 +992,28 @@ def api_catalog_groups():
         """), {'mye_id': mye_id, 'category_id': category_id}).mappings().all()
         return jsonify([{'id_part_group': r['id_part_group'],
                          'name': translate_category(r['name']), 'part_count': r['part_count']} for r in rows])
+    except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        return jsonify({'data': [], 'oem_disabled': True,
+                        'message': 'Sub-grupos OEM no disponibles; usa el modo Local.',
+                        'error': str(e)}), 200
     finally:
         session.close()
 
 
+@app.route('/api/public/contact-config')
+def api_public_contact_config():
+    """Public contact config for the catalog WhatsApp quote button."""
+    wa = (os.environ.get('PUBLIC_WA_NUMBER') or '').replace(' ', '').replace('+', '')
+    return jsonify({
+        'enabled': bool(wa),
+        'wa_number': wa,
+    })
+
+
 @app.route('/api/catalog/part-types')
 def api_catalog_part_types():
     """Distinct part types within a vehicle+group (3rd subcategory level).
@@ -608,12 +1022,11 @@ def api_catalog_part_types():
     Local mode: Nexpart Part Types within a Nexpart group + subgroup.
     """
     from services.translations import translate_part_name
-    from services.catalog_modes import normalize_mode
     mye_id = request.args.get('mye_id', type=int)
     group_id = request.args.get('group_id', type=int)
     group_slug = request.args.get('group_slug')
     subgroup_slug = request.args.get('subgroup_slug')
-    mode = normalize_mode(request.args.get('mode'))
+    mode = _catalog_mode(request.args.get('mode'))
     if not mye_id:
         return jsonify({'error': 'mye_id required'}), 400
 
@@ -628,7 +1041,10 @@ def api_catalog_part_types():
             conn.close()
         return jsonify({'data': data, 'mode': 'local'})
 
-    # OEM mode
+    # OEM mode — degrada con elegancia si el esquema TecDoc no está.
+    blocked = _oem_blocked()
+    if blocked:
+        return blocked
     if not group_id:
         return jsonify({'error': 'group_id required for oem mode'}), 400
     session = Session()
@@ -651,6 +1067,14 @@ def api_catalog_part_types():
             'variant_count': r['variants'],
             'sample_image': r['sample_image'],
         } for r in rows]})
+    except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        return jsonify({'data': [], 'oem_disabled': True,
+                        'message': 'Tipos de parte OEM no disponibles; usa el modo Local.',
+                        'error': str(e)}), 200
     finally:
         session.close()
 
@@ -714,7 +1138,6 @@ def api_shop_supplies_parts():
 @app.route('/api/catalog/parts')
 def api_catalog_parts():
     from services.catalog_modes import (
-        normalize_mode,
         LOCAL_PRIORITY_MANUFACTURERS_TIER1,
         LOCAL_PRIORITY_MANUFACTURERS_TIER2,
     )
@@ -732,7 +1155,7 @@ def api_catalog_parts():
     page = max(1, request.args.get('page', 1, type=int))
     per_page = min(request.args.get('per_page', 30, type=int), 100)
     offset = (page - 1) * per_page
-    mode = normalize_mode(request.args.get('mode'))
+    mode = _catalog_mode(request.args.get('mode'))
 
     # ─── Nexpart-nav dispatch (delegates to POS service layer) ───
     # Public catalog has no tenant context — pass tenant_conn=None which
@@ -849,6 +1272,9 @@ def api_catalog_parts():
             }})
 
         # OEM mode (original behavior)
+        blocked = _oem_blocked()
+        if blocked:
+            return blocked
         oem_count_params = {'mye_id': mye_id, 'group_id': group_id}
         oem_fetch_params = {'mye_id': mye_id, 'group_id': group_id, 'limit': per_page, 'offset': offset}
         if part_type:
@@ -882,12 +1308,28 @@ def api_catalog_parts():
         return jsonify({'data': items, 'mode': 'oem', 'pagination': {
             'page': page, 'per_page': per_page, 'total': total, 'total_pages': total_pages
         }})
+    except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        # Modo OEM/Local legacy sobre TecDoc retirado: degradar sin 500.
+        return jsonify({'data': [], 'mode': 'local', 'oem_disabled': True,
+                        'message': 'Listado no disponible (esquema TecDoc retirado). '
+                                   'Prueba la navegación Local por categorías.',
+                        'pagination': {'page': page, 'per_page': per_page,
+                                       'total': 0, 'total_pages': 1},
+                        'error': str(e)}), 200
     finally:
         session.close()
 
 
 @app.route('/api/catalog/part/<int:part_id>')
 def api_catalog_part_detail(part_id):
+    # Catálogo OEM retirado/deshabilitado → detalle desde el catálogo vivo.
+    if not (CATALOG_OEM_ENABLED and _tecdoc_available()):
+        return _catalog_part_detail_live(part_id)
+
     session = Session()
     try:
         row = session.execute(text("""
@@ -960,94 +1402,31 @@ def api_catalog_part_detail(part_id):
                      'location': b['warehouse_location']} for b in bodegas_rows]
 
         return jsonify({'part': part, 'alternatives': alternatives, 'bodegas': bodegas})
+    except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        if _is_retired_schema_error(e):
+            # Esquema TecDoc retirado a medio camino → catálogo vivo.
+            return _catalog_part_detail_live(part_id)
+        return jsonify({'error': str(e)}), 500
     finally:
         session.close()
 
 
 @app.route('/api/catalog/search')
 def api_catalog_search():
+    """Búsqueda del catálogo público.
+
+    OEM (TecDoc) ya no existe: se busca en el catálogo vivo
+    (supplier_catalog) vía Meilisearch, con fallback SQL. Nunca 500.
+    """
     q = request.args.get('q', '').strip()
     if not q or len(q) < 2:
         return jsonify([])
     limit = min(request.args.get('limit', 50, type=int), 100)
-    session = Session()
-    try:
-        is_part_number = bool(re.search(r'\d.*[-/]|[-/].*\d|\d{3,}', q))
-
-        if is_part_number:
-            clean_q = q.replace(' ', '').upper()
-            # Search OEM part numbers first
-            rows = session.execute(text("""
-                SELECT p.id_part, p.oem_part_number, p.name_part, p.name_es,
-                       p.image_url
-                FROM parts p
-                WHERE REPLACE(UPPER(p.oem_part_number), ' ', '') LIKE :q
-                ORDER BY p.oem_part_number
-                LIMIT :limit
-            """), {'q': f'%{clean_q}%', 'limit': limit}).mappings().all()
-
-            # If no OEM match, search aftermarket + cross-reference numbers
-            if not rows:
-                rows = session.execute(text("""
-                    SELECT DISTINCT p.id_part, p.oem_part_number, p.name_part, p.name_es,
-                           p.image_url
-                    FROM parts p
-                    JOIN aftermarket_parts ap ON ap.oem_part_id = p.id_part
-                    WHERE REPLACE(UPPER(ap.part_number), ' ', '') LIKE :q
-                    ORDER BY p.oem_part_number
-                    LIMIT :limit
-                """), {'q': f'%{clean_q}%', 'limit': limit}).mappings().all()
-            if not rows:
-                rows = session.execute(text("""
-                    SELECT DISTINCT p.id_part, p.oem_part_number, p.name_part, p.name_es,
-                           p.image_url
-                    FROM parts p
-                    JOIN part_cross_references cr ON cr.part_id = p.id_part
-                    WHERE REPLACE(UPPER(cr.cross_reference_number), ' ', '') LIKE :q
-                    ORDER BY p.oem_part_number
-                    LIMIT :limit
-                """), {'q': f'%{clean_q}%', 'limit': limit}).mappings().all()
-        else:
-            tsquery = ' & '.join(q.split())
-            rows = session.execute(text("""
-                SELECT p.id_part, p.oem_part_number, p.name_part, p.name_es,
-                       p.image_url
-                FROM parts p
-                WHERE p.search_vector @@ to_tsquery('spanish', :tsq)
-                   OR p.name_part ILIKE :like
-                   OR p.name_es ILIKE :like
-                ORDER BY
-                    CASE WHEN p.search_vector @@ to_tsquery('spanish', :tsq)
-                         THEN 0 ELSE 1 END,
-                    p.name_part
-                LIMIT :limit
-            """), {'tsq': tsquery, 'like': f'%{q}%', 'limit': limit}).mappings().all()
-
-        if not rows:
-            return jsonify([])
-
-        part_ids = [r['id_part'] for r in rows]
-
-        # Get one vehicle per part for context
-        vrows = session.execute(text("""
-            SELECT part_id, name_brand, name_model, year_car
-            FROM part_vehicle_preview
-            WHERE part_id = ANY(:pids)
-        """), {'pids': part_ids}).mappings().all()
-        vmap = {v['part_id']: f"{v['name_brand']} {v['name_model']} {v['year_car']}" for v in vrows}
-
-        results = []
-        for r in rows:
-            results.append({
-                'id_part': r['id_part'],
-                'oem_part_number': r['oem_part_number'],
-                'name': translate_part_name(r['name_es'] or r['name_part']),
-                'image_url': r['image_url'],
-                'vehicle_info': vmap.get(r['id_part'], ''),
-            })
-        return jsonify(results)
-    finally:
-        session.close()
+    return jsonify(_search_catalog_live(q, limit=limit))
 
 
 # ============================================================================
@@ -1075,15 +1454,17 @@ def api_catalog_stats():
         # Use reltuples for large tables (parts, aftermarket_parts,
         # part_cross_references) — exact COUNT(*) on 1M+ row tables is slow
         # and the landing doesn't need exact accuracy, just "big numbers".
+        # Tablas vivas: supplier_catalog + compat + interchange sustituyen
+        # a las antiguas parts/aftermarket_parts/part_cross_references.
         row = session.execute(text("""
             SELECT
                 (SELECT COUNT(*) FROM brands) AS brands,
                 (SELECT COUNT(*) FROM models) AS models,
                 (SELECT COUNT(*) FROM model_year_engine) AS vehicles,
-                (SELECT reltuples::bigint FROM pg_class WHERE relname = 'parts') AS parts,
-                (SELECT reltuples::bigint FROM pg_class WHERE relname = 'aftermarket_parts') AS aftermarket_parts,
-                (SELECT reltuples::bigint FROM pg_class WHERE relname = 'part_cross_references') AS cross_references,
-                (SELECT COUNT(*) FROM manufacturers) AS manufacturers
+                (SELECT COUNT(*) FROM supplier_catalog) AS parts,
+                (SELECT COUNT(*) FROM supplier_catalog_compat) AS aftermarket_parts,
+                (SELECT COUNT(*) FROM supplier_catalog_interchange) AS cross_references,
+                (SELECT COUNT(*) FROM supplier_catalog WHERE supplier_name IS NOT NULL AND supplier_name <> '') AS manufacturers
         """)).mappings().first()
         data = {
             'brands': row['brands'] or 0,
@@ -1096,6 +1477,11 @@ def api_catalog_stats():
         }
         api_catalog_stats._cache = (now + 600, data)
         return jsonify(data)
+    except Exception:
+        return jsonify({
+            'brands': 0, 'models': 0, 'vehicles': 0, 'parts': 0,
+            'aftermarket_parts': 0, 'cross_references': 0, 'manufacturers': 0,
+        })
     finally:
         session.close()
 
@@ -1263,6 +1649,8 @@ def api_model_year_engine():
 
 @app.route('/api/categories')
 def api_categories():
+    """Categorías del catálogo. El árbol TecDoc (part_categories) ya no existe:
+    se degrada a los 14 grupos Nexpart del catálogo vivo."""
     session = Session()
     try:
         rows = session.execute(text("""
@@ -1282,6 +1670,12 @@ def api_categories():
                 categories_dict[r['parent_id']]['children'].append(categories_dict[r['id']])
         return jsonify(root_categories)
     except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        if _is_retired_schema_error(e):
+            return jsonify(_live_categories())
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1298,6 +1692,12 @@ def api_category_groups(category_id):
         return jsonify([{'id': r['id'], 'name': r['name'], 'name_es': r['name_es'],
                          'slug': r['slug'], 'display_order': r['display_order']} for r in rows])
     except Exception as e:
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1348,6 +1748,10 @@ def api_parts():
         finally:
             session.close()
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'pagination': {'page': page, 'per_page': per_page,
+                            'total': 0, 'total_pages': 1}, 'oem_disabled': True,
+                            'message': 'Listado OEM no disponible (esquema TecDoc retirado).'}), 200
         return jsonify({'error': str(e)}), 500
 
 
@@ -1375,6 +1779,10 @@ def api_part_detail(part_id):
                         'group_name_es': row['group_name_es'], 'category_id': row['category_id'],
                         'category_name': row['category_name'], 'category_name_es': row['category_name_es']})
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'error': 'Part not found',
+                            'message': 'El detalle OEM no está disponible (esquema TecDoc retirado).',
+                            'oem_disabled': True}), 404
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1398,6 +1806,8 @@ def api_vehicle_categories(mye_id):
                          'slug': r['slug'], 'icon_name': r['icon_name'],
                          'display_order': r['display_order']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1426,6 +1836,8 @@ def api_vehicle_groups(mye_id):
                          'slug': r['slug'], 'display_order': r['display_order'],
                          'parts_count': r['parts_count']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1476,6 +1888,11 @@ def api_vehicle_parts(mye_id):
         finally:
             session.close()
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'oem_disabled': True,
+                            'pagination': {'page': page, 'per_page': per_page,
+                                           'total': 0, 'total_pages': 1},
+                            'message': 'Listado OEM no disponible (esquema TecDoc retirado).'}), 200
         return jsonify({'error': str(e)}), 500
 
 
@@ -1512,6 +1929,8 @@ def api_manufacturers():
                          'quality_tier': r['quality_tier'], 'country': r['country'],
                          'logo_url': r['logo_url'], 'website': r['website']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify(_live_manufacturers())
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1519,37 +1938,32 @@ def api_manufacturers():
 
 @app.route('/api/parts/<int:part_id>/alternatives')
 def api_part_alternatives(part_id):
-    session = Session()
+    # Alternativas reconstruidas sobre el catálogo vivo (supplier_catalog +
+    # supplier_catalog_interchange + similitud semántica). Las tablas TecDoc
+    # (aftermarket_parts/parts) están retiradas.
     try:
-        quality_tier = request.args.get('quality_tier')
-        manufacturer_id = request.args.get('manufacturer_id', type=int)
-        q = """
-            SELECT ap.id_aftermarket_parts AS id, ap.part_number, ap.name_aftermarket_parts AS name,
-                   ap.name_es, mfr.name_manufacture AS manufacturer_name, ap.manufacturer_id,
-                   qt.name_quality AS quality_tier, ap.price_usd, ap.warranty_months
-            FROM aftermarket_parts ap
-            JOIN manufacturers mfr ON ap.manufacturer_id = mfr.id_manufacture
-            LEFT JOIN quality_tier qt ON ap.id_quality_tier = qt.id_quality_tier
-            WHERE ap.oem_part_id = :pid
-        """
-        params = {'pid': part_id}
-        if quality_tier:
-            q += " AND qt.name_quality ILIKE :qt"
-            params['qt'] = quality_tier
-        if manufacturer_id:
-            q += " AND ap.manufacturer_id = :mid"
-            params['mid'] = manufacturer_id
-        q += " ORDER BY qt.name_quality DESC, ap.price_usd ASC LIMIT 50"
-        rows = session.execute(text(q), params).mappings().all()
-        return jsonify([{'id': r['id'], 'part_number': r['part_number'], 'name': r['name'],
-                         'name_es': r['name_es'], 'manufacturer_name': r['manufacturer_name'],
-                         'manufacturer_id': r['manufacturer_id'], 'quality_tier': r['quality_tier'],
-                         'price_usd': r['price_usd'], 'warranty_months': r['warranty_months'],
-                         'in_stock': None} for r in rows])
-    except Exception as e:
-        return jsonify({'error': str(e)}), 500
-    finally:
-        session.close()
+        from tenant_db import get_master_conn
+        from services import catalog_service
+        mconn = get_master_conn()
+        try:
+            results = catalog_service.get_alternatives(mconn, catalog_id=part_id, limit=50)
+        finally:
+            mconn.close()
+    except Exception:
+        return jsonify([])
+    return jsonify([{
+        'id': r.get('catalog_id') or r.get('id'),
+        'part_number': r.get('part_number'),
+        'name': r.get('name'),
+        'name_es': r.get('name'),
+        'manufacturer_name': r.get('supplier_name'),
+        'manufacturer_id': None,
+        'quality_tier': r.get('type'),
+        'price_usd': None,
+        'warranty_months': None,
+        'in_stock': r.get('local_stock'),
+        'similarity': r.get('similarity'),
+    } for r in results])
 
 
 @app.route('/api/parts/<int:part_id>/cross-references')
@@ -1568,6 +1982,8 @@ def api_part_cross_references(part_id):
                          'reference_type': r['reference_type'], 'source': r['source'],
                          'notes': r['notes']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1587,6 +2003,13 @@ def api_search_part_number(part_number):
             results.append({'id': row['id'], 'oem_part_number': row['oem_part_number'], 'name': row['name'], 'name_es': row['name_es'], 'match_type': 'cross_reference', 'matched_number': row['cross_reference_number']})
         return jsonify(results)
     except Exception as e:
+        if _is_retired_schema_error(e):
+            # Catálogo vivo: se busca el número de parte entre los SKUs.
+            return jsonify([{
+                'id': p['id_part'], 'oem_part_number': p['oem_part_number'],
+                'name': p['name'], 'name_es': p['name'],
+                'match_type': 'supplier_catalog', 'matched_number': p['oem_part_number'],
+            } for p in _search_catalog_live(part_number, limit=50)])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1635,6 +2058,8 @@ def api_aftermarket_parts():
         return jsonify({'data': parts, 'pagination': {'page': page, 'per_page': per_page,
                         'total': total_count, 'total_pages': total_pages}})
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return _live_aftermarket(page, per_page, offset)
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1664,6 +2089,8 @@ def api_diagrams():
                          'group_id': r['group_id'], 'group_name': r['group_name'],
                          'thumbnail_path': r['thumbnail_path'], 'display_order': r['display_order']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1819,6 +2246,8 @@ def api_diagram_parts(diagram_id):
                          'group_name': r['group_name'], 'group_name_es': r['group_name_es'],
                          'cross_references': xrefs_map.get(r['id'], [])} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1867,6 +2296,8 @@ def api_diagrams_search():
         return jsonify([{'id': r['id'], 'name': r['name'], 'name_es': r['name_es'],
                          'image_path': r['image_path'], 'source': r['source']} for r in rows])
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify([])
         return jsonify({'error': str(e)}), 500
     finally:
         session.close()
@@ -1988,8 +2419,9 @@ def api_search():
         results = {'parts': [], 'vehicles': [], 'vehicle_parts': [], 'matched_vehicle': None, 'total_count': 0}
         terms = q.split()
 
-        # Combined vehicle + part search
-        if len(terms) >= 2 and search_type == 'all':
+        # Combined vehicle + part search (requiere el esquema TecDoc retirado;
+        # se omite limpiamente cuando no está disponible)
+        if len(terms) >= 2 and search_type == 'all' and _tecdoc_available():
             matched_vehicle, remaining_terms = find_vehicle_in_terms(session, terms)
             if matched_vehicle and remaining_terms:
                 results['matched_vehicle'] = matched_vehicle
@@ -2032,86 +2464,21 @@ def api_search():
                     results['total_count'] = len(results['vehicle_parts'])
                     return jsonify(results)
 
-        # Search parts
-        if search_type in ('parts', 'all') and terms:
-            where_clauses = []
-            params = {}
-            for i, t in enumerate(terms):
-                tp = f"%{t}%"
-                where_clauses.append(f"(p.name_part ILIKE :p{i}_n OR p.name_es ILIKE :p{i}_ne OR p.oem_part_number ILIKE :p{i}_o OR pg.name_part_group ILIKE :p{i}_g OR pc.name_part_category ILIKE :p{i}_c)")
-                params[f'p{i}_n'] = tp
-                params[f'p{i}_ne'] = tp
-                params[f'p{i}_o'] = tp
-                params[f'p{i}_g'] = tp
-                params[f'p{i}_c'] = tp
-            where_sql = " AND ".join(where_clauses)
-            cat_filter = ""
-            if category_id:
-                cat_filter = " AND pc.id_part_category = :cat_id"
-                params['cat_id'] = category_id
-            params['first_term'] = f"{terms[0]}%"
-            params['limit'] = limit
-            params['offset'] = offset
-            rows = session.execute(text(f"""
-                SELECT p.id_part AS id, p.oem_part_number, p.name_part AS name, p.name_es,
-                       pg.name_part_group AS group_name, pc.name_part_category AS category_name,
-                       p.image_url
-                FROM parts p JOIN part_groups pg ON p.group_id = pg.id_part_group
-                JOIN part_categories pc ON pg.category_id = pc.id_part_category
-                WHERE ({where_sql}){cat_filter}
-                ORDER BY CASE WHEN p.oem_part_number ILIKE :first_term THEN 1
-                              WHEN p.name_part ILIKE :first_term THEN 2 ELSE 3 END, p.name_part
-                LIMIT :limit OFFSET :offset
-            """), params).mappings().all()
-            for r in rows:
-                results['parts'].append({'id': r['id'], 'oem_part_number': r['oem_part_number'],
-                    'name': r['name'], 'name_es': r['name_es'], 'image_url': r['image_url'],
-                    'group_name': r['group_name'], 'category_name': r['category_name'], 'match_type': 'oem'})
-
-            # Aftermarket search
-            if not category_id:
-                af_params = {'af_limit': limit, 'af_offset': offset}
-                af_clauses = []
-                for i, t in enumerate(terms):
-                    af_clauses.append(f"ap.part_number ILIKE :af{i}")
-                    af_params[f'af{i}'] = f"%{t}%"
-                af_rows = session.execute(text(f"""
-                    SELECT p.id_part AS id, p.oem_part_number, p.name_part AS name, p.name_es,
-                           pg.name_part_group AS group_name, pc.name_part_category AS category_name,
-                           ap.part_number AS matched_number, p.image_url
-                    FROM aftermarket_parts ap JOIN parts p ON ap.oem_part_id = p.id_part
-                    JOIN part_groups pg ON p.group_id = pg.id_part_group
-                    JOIN part_categories pc ON pg.category_id = pc.id_part_category
-                    WHERE {' AND '.join(af_clauses)} LIMIT :af_limit OFFSET :af_offset
-                """), af_params).mappings().all()
-                for r in af_rows:
-                    if not any(p['id'] == r['id'] for p in results['parts']):
-                        results['parts'].append({'id': r['id'], 'oem_part_number': r['oem_part_number'],
-                            'name': r['name'], 'name_es': r['name_es'], 'image_url': r['image_url'],
-                            'group_name': r['group_name'], 'category_name': r['category_name'],
-                            'matched_number': r['matched_number'], 'match_type': 'aftermarket'})
-
-            # Cross-reference search
-            cr_params = {'cr_limit': limit, 'cr_offset': offset}
-            cr_clauses = []
-            for i, t in enumerate(terms):
-                cr_clauses.append(f"pcr.cross_reference_number ILIKE :cr{i}")
-                cr_params[f'cr{i}'] = f"%{t}%"
-            cr_rows = session.execute(text(f"""
-                SELECT p.id_part AS id, p.oem_part_number, p.name_part AS name, p.name_es,
-                       pg.name_part_group AS group_name, pc.name_part_category AS category_name,
-                       pcr.cross_reference_number AS matched_number, p.image_url
-                FROM part_cross_references pcr JOIN parts p ON pcr.part_id = p.id_part
-                JOIN part_groups pg ON p.group_id = pg.id_part_group
-                JOIN part_categories pc ON pg.category_id = pc.id_part_category
-                WHERE {' AND '.join(cr_clauses)} LIMIT :cr_limit OFFSET :cr_offset
-            """), cr_params).mappings().all()
-            for r in cr_rows:
-                if not any(p['id'] == r['id'] for p in results['parts']):
-                    results['parts'].append({'id': r['id'], 'oem_part_number': r['oem_part_number'],
-                        'name': r['name'], 'name_es': r['name_es'], 'image_url': r['image_url'],
-                        'group_name': r['group_name'], 'category_name': r['category_name'],
-                        'matched_number': r['matched_number'], 'match_type': 'cross_reference'})
+        # Partes — catálogo vivo (Meilisearch + fallback SQL).
+        # `category_id` ya no aplica: los ids TecDoc no existen.
+        if search_type in ('parts', 'all') and terms and not results['vehicle_parts']:
+            for p in _search_catalog_live(q, limit=limit, offset=offset):
+                results['parts'].append({
+                    'id': p['id_part'],
+                    'oem_part_number': p['oem_part_number'],
+                    'name': p['name'],
+                    'name_es': p['name'],
+                    'image_url': p['image_url'],
+                    'group_name': p['group_name'],
+                    'category_name': p['category_name'],
+                    'manufacturer': p['manufacturer'],
+                    'match_type': 'supplier_catalog',
+                })
 
         # Search vehicles
         if search_type in ('vehicles', 'all') and terms:
@@ -2141,57 +2508,38 @@ def api_search():
         results['total_count'] = len(results['parts']) + len(results['vehicles'])
         return jsonify(results)
     except Exception as e:
-        return jsonify({'error': str(e)}), 500
+        try:
+            session.rollback()
+        except Exception:
+            pass
+        # Nunca 500 en la superficie pública: se degrada con mensaje claro.
+        return jsonify({'parts': [], 'vehicles': [], 'vehicle_parts': [],
+                        'matched_vehicle': None, 'total_count': 0,
+                        'error': str(e)}), 200
     finally:
         session.close()
 
 
 @app.route('/api/search/parts')
 def api_search_parts():
-    session = Session()
+    """Búsqueda paginada de partes en el catálogo vivo (Meilisearch + SQL)."""
     try:
         q = request.args.get('q', '').strip()
-        category_id = request.args.get('category_id', type=int)
-        group_id = request.args.get('group_id', type=int)
-        page = request.args.get('page', 1, type=int)
+        page = max(1, request.args.get('page', 1, type=int))
         per_page = min(request.args.get('per_page', 50, type=int), 100)
         offset = (page - 1) * per_page
         if not q:
             return jsonify({'error': 'Search query is required'}), 400
-        filter_clause = ""
-        params = {'q': q, 'per_page': per_page, 'offset': offset}
-        if category_id:
-            filter_clause += " AND pg.category_id = :cid"
-            params['cid'] = category_id
-        if group_id:
-            filter_clause += " AND p.group_id = :gid"
-            params['gid'] = group_id
-        total_count = session.execute(text(f"""
-            SELECT COUNT(*) AS total FROM parts p
-            JOIN part_groups pg ON p.group_id = pg.id_part_group
-            JOIN part_categories pc ON pg.category_id = pc.id_part_category
-            WHERE p.search_vector @@ plainto_tsquery('spanish', :q) {filter_clause}
-        """), params).mappings().first()['total']
-        rows = session.execute(text(f"""
-            SELECT p.id_part AS id, p.oem_part_number, p.name_part AS name, p.name_es,
-                   p.description, pg.name_part_group AS group_name, pc.name_part_category AS category_name,
-                   ts_rank(p.search_vector, plainto_tsquery('spanish', :q)) AS rank
-            FROM parts p JOIN part_groups pg ON p.group_id = pg.id_part_group
-            JOIN part_categories pc ON pg.category_id = pc.id_part_category
-            WHERE p.search_vector @@ plainto_tsquery('spanish', :q) {filter_clause}
-            ORDER BY rank DESC LIMIT :per_page OFFSET :offset
-        """), params).mappings().all()
-        parts = [{'id': r['id'], 'oem_part_number': r['oem_part_number'], 'name': r['name'],
-                   'name_es': r['name_es'], 'description': r['description'],
-                   'group_name': r['group_name'], 'category_name': r['category_name'],
-                   'rank': float(r['rank'])} for r in rows]
-        total_pages = (total_count + per_page - 1) // per_page
+        parts = _search_catalog_live(q, limit=per_page, offset=offset)
+        total = len(parts) + offset
+        total_pages = max(1, (total + per_page - 1) // per_page)
         return jsonify({'data': parts, 'pagination': {'page': page, 'per_page': per_page,
-                        'total': total_count, 'total_pages': total_pages}})
+                        'total': total, 'total_pages': total_pages}})
     except Exception as e:
-        return jsonify({'error': str(e)}), 500
-    finally:
-        session.close()
+        # Nunca 500 en la superficie pública.
+        return jsonify({'data': [], 'error': str(e),
+                        'pagination': {'page': 1, 'per_page': 50, 'total': 0,
+                                       'total_pages': 1}}), 200
 
 
 @app.route('/api/vin/decode/<vin>')
@@ -2276,7 +2624,7 @@ def api_vin_decode(vin):
         session.execute(text("""
             INSERT INTO vin_cache (vin, decoded_data, make, model, year, engine_info,
                  body_class, drive_type, model_year_engine_id, expires_at)
-            VALUES (:vin, :decoded_data::jsonb, :make, :model, :year, :engine_info,
+            VALUES (:vin, CAST(:decoded_data AS jsonb), :make, :model, :year, :engine_info,
                     :body_class, :drive_type, :mye_id, :expires_at)
             ON CONFLICT (vin) DO UPDATE SET
                 decoded_data = EXCLUDED.decoded_data, make = EXCLUDED.make, model = EXCLUDED.model,
@@ -2387,13 +2735,16 @@ def api_admin_stats():
     session = Session()
     try:
         stats = {}
-        # Small tables: exact count
         for table, key in [('part_categories', 'categories'), ('part_groups', 'groups'),
-                           ('manufacturers', 'manufacturers')]:
-            stats[key] = session.execute(text(f"SELECT COUNT(*) FROM {table}")).scalar()
-        # Large tables: use pg estimate for speed
-        for table, key in [('parts', 'parts'), ('aftermarket_parts', 'aftermarket'),
-                           ('vehicle_parts', 'fitment')]:
+                           ('manufacturers', 'manufacturers'), ('parts', 'parts'),
+                           ('aftermarket_parts', 'aftermarket'), ('vehicle_parts', 'fitment')]:
+            # Tablas TecDoc retiradas (jun 2026): degradar a 0 en vez de 500.
+            exists = session.execute(
+                text("SELECT to_regclass(:t)"), {'t': 'public.' + table}
+            ).scalar()
+            if not exists:
+                stats[key] = 0
+                continue
             est = session.execute(text(
                 "SELECT reltuples::bigint FROM pg_class WHERE relname = :t"
             ), {'t': table}).scalar()
@@ -3900,41 +4251,19 @@ def api_pos_customer_statement(customer_id):
 
 @app.route('/api/pos/search-parts')
 def api_pos_search_parts():
-    session = Session()
-    try:
-        q = request.args.get('q', '')
-        if len(q) < 2:
-            return jsonify([])
-
-        results = []
-
-        oem = session.execute(text("""
-            SELECT p.id_part, p.oem_part_number, p.name_part, p.name_es,
-                   p.cost_usd, pg.name_part_group AS group_name,
-                   'oem' AS part_type
-            FROM parts p
-            JOIN part_groups pg ON p.group_id = pg.id_part_group
-            WHERE p.oem_part_number ILIKE :q OR p.name_part ILIKE :q
-            ORDER BY p.oem_part_number LIMIT 20
-        """), {'q': f'%{q}%'}).mappings().all()
-        results.extend([dict(r) for r in oem])
-
-        af = session.execute(text("""
-            SELECT ap.id_aftermarket_parts AS id_part, ap.part_number AS oem_part_number,
-                   ap.name_aftermarket_parts AS name_part, ap.name_es,
-                   COALESCE(ap.cost_usd, ap.price_usd) AS cost_usd,
-                   m.name_manufacture AS group_name,
-                   'aftermarket' AS part_type
-            FROM aftermarket_parts ap
-            JOIN manufacturers m ON ap.manufacturer_id = m.id_manufacture
-            WHERE ap.part_number ILIKE :q OR ap.name_aftermarket_parts ILIKE :q
-            ORDER BY ap.part_number LIMIT 20
-        """), {'q': f'%{q}%'}).mappings().all()
-        results.extend([dict(r) for r in af])
-
-        return jsonify(results)
-    finally:
-        session.close()
+    """Búsqueda de partes para la UI del POS (catálogo vivo, nunca 500)."""
+    q = request.args.get('q', '')
+    if len(q) < 2:
+        return jsonify([])
+    return jsonify([{
+        'id_part': p['id_part'],
+        'oem_part_number': p['oem_part_number'],
+        'name_part': p['name'],
+        'name_es': p['name'],
+        'cost_usd': None,
+        'group_name': p['category_name'],
+        'part_type': 'supplier_catalog',
+    } for p in _search_catalog_live(q, limit=40)])
 
 
 # ============================================================================
@@ -3983,8 +4312,8 @@ def api_tienda_stats():
             "SELECT COUNT(*) FROM customers WHERE active = TRUE"
         )).scalar()
 
-        total_parts = session.execute(text("SELECT COUNT(*) FROM parts")).scalar()
-        total_aftermarket = session.execute(text("SELECT COUNT(*) FROM aftermarket_parts")).scalar()
+        total_parts = session.execute(text("SELECT COUNT(*) FROM supplier_catalog")).scalar()
+        total_aftermarket = session.execute(text("SELECT COUNT(*) FROM supplier_catalog_compat")).scalar()
 
         recent_invoices = session.execute(text("""
             SELECT i.folio, i.total, i.status, i.date_issued, c.name AS customer_name
@@ -4579,54 +4908,39 @@ def part_availability(part_id):
 @app.route('/api/parts/<int:part_id>/aftermarket', methods=['GET'])
 def part_aftermarket(part_id):
     """Return aftermarket alternatives and cross-references for a part (public)."""
-    session = Session()
+    # Alternativas + cross-refs sobre el catálogo vivo (tablas TecDoc retiradas).
     try:
-        # Aftermarket alternatives
-        rows = session.execute(text(
-            """SELECT ap.id_aftermarket_parts, ap.part_number,
-                      ap.name_aftermarket_parts, m.name_manufacture,
-                      qt.name_quality, ap.price_usd
-               FROM aftermarket_parts ap
-               JOIN manufacturers m ON m.id_manufacture = ap.manufacturer_id
-               LEFT JOIN quality_tier qt ON qt.id_quality_tier = ap.id_quality_tier
-               WHERE ap.oem_part_id = :pid
-               ORDER BY ap.price_usd ASC NULLS LAST"""
-        ), {'pid': part_id}).mappings().all()
+        from tenant_db import get_master_conn
+        from services import catalog_service
+        mconn = get_master_conn()
+        try:
+            results = catalog_service.get_alternatives(mconn, catalog_id=part_id, limit=50)
+        finally:
+            mconn.close()
+    except Exception:
+        results = []
 
-        alternatives = []
-        for r in rows:
-            alternatives.append({
-                'id': r['id_aftermarket_parts'],
-                'part_number': r['part_number'],
-                'name': r['name_aftermarket_parts'],
-                'manufacturer': r['name_manufacture'],
-                'quality_tier': r['name_quality'],
-                'price': float(r['price_usd']) if r['price_usd'] else None,
-                'source': 'aftermarket'
-            })
-
-        # Cross-references
-        xrefs = session.execute(text(
-            """SELECT pcr.cross_reference_number, pcr.source_ref, pcr.notes
-               FROM part_cross_references pcr
-               WHERE pcr.part_id = :pid
-               ORDER BY pcr.cross_reference_number"""
-        ), {'pid': part_id}).mappings().all()
-
-        cross_refs = []
-        for x in xrefs:
-            cross_refs.append({
-                'cross_reference_number': x['cross_reference_number'],
-                'source': x['source_ref'],
-                'notes': x['notes']
-            })
-
-        return jsonify({
-            'data': alternatives,
-            'cross_references': cross_refs
+    alternatives = []
+    cross_refs = []
+    for r in results:
+        alternatives.append({
+            'id': r.get('catalog_id') or r.get('id'),
+            'part_number': r.get('part_number'),
+            'name': r.get('name'),
+            'manufacturer': r.get('supplier_name'),
+            'quality_tier': r.get('type'),
+            'price': None,
+            'similarity': r.get('similarity'),
+            'source': r.get('type') or 'catalog',
         })
-    finally:
-        session.close()
+        if r.get('part_number'):
+            cross_refs.append({
+                'cross_reference_number': r.get('part_number'),
+                'source': r.get('type'),
+                'notes': r.get('name'),
+            })
+
+    return jsonify({'data': alternatives, 'cross_references': cross_refs})
 
 
 # ============================================================================
@@ -4637,10 +4951,12 @@ MODULE_CONFIG_KEYS = [
     'whatsapp_enabled',
     'marketplace_enabled',
     'meli_enabled',
+    'yonke_enabled',
 ]
 
 
 @app.route('/api/admin/tenants')
+@require_auth('ADMIN')
 def api_admin_tenants():
     session = Session()
     try:
@@ -4655,15 +4971,23 @@ def api_admin_tenants():
 
 
 @app.route('/api/admin/tenants/<int:tenant_id>/modules')
+@require_auth('ADMIN')
 def api_admin_tenant_modules(tenant_id):
     try:
         conn = get_tenant_conn(tenant_id)
         cur = conn.cursor()
         result = {}
         for key in MODULE_CONFIG_KEYS:
-            cur.execute("SELECT value FROM tenant_config WHERE key = %s", (key,))
-            row = cur.fetchone()
-            result[key] = (row[0] or '').lower() == 'true' if row else False
+            mod_key = 'module_' + key.replace('_enabled', '')
+            cur.execute(
+                "SELECT key, value FROM tenant_config WHERE key IN (%s, %s)",
+                (key, mod_key),
+            )
+            vals = {r[0]: r[1] for r in cur.fetchall()}
+            v = vals.get(key)
+            if v is None:
+                v = vals.get(mod_key)
+            result[key] = (v or '').lower() == 'true' if v is not None else False
         cur.close()
         conn.close()
         return jsonify(result)
@@ -4672,6 +4996,7 @@ def api_admin_tenant_modules(tenant_id):
 
 
 @app.route('/api/admin/tenants/<int:tenant_id>/modules', methods=['PUT'])
+@require_auth('ADMIN')
 def api_admin_tenant_modules_update(tenant_id):
     data = request.get_json() or {}
     if not data:
@@ -4683,14 +5008,18 @@ def api_admin_tenant_modules_update(tenant_id):
         for key, value in data.items():
             if key not in MODULE_CONFIG_KEYS:
                 continue
-            cur.execute(
-                """
-                INSERT INTO tenant_config (key, value, updated_at)
-                VALUES (%s, %s, NOW())
-                ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value, updated_at = NOW()
-                """,
-                (key, 'true' if value else 'false'),
-            )
+            val = 'true' if value else 'false'
+            # Doble escritura 2026-10-11: 'X_enabled' (dashboard) + 'module_X' (POS).
+            mod_key = 'module_' + key.replace('_enabled', '')
+            for k in (key, mod_key):
+                cur.execute(
+                    """
+                    INSERT INTO tenant_config (key, value, updated_at)
+                    VALUES (%s, %s, NOW())
+                    ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value, updated_at = NOW()
+                    """,
+                    (k, val),
+                )
         conn.commit()
         cur.close()
         conn.close()
@@ -4703,6 +5032,1075 @@ def api_admin_tenant_modules_update(tenant_id):
 # Static files from dashboard root (CSS/JS/HTML)
 # ============================================================================
 
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# SEO: páginas de parte server-side, sitemap y robots
+# ═══════════════════════════════════════════════════════════════════════════
+
+from flask import render_template_string
+import re as _re_seo
+import time as _time_seo
+
+_PART_PAGE_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{{ part.name | replace("_", " ") }} {{ part.sku }} — Refacción y disponibilidad | Nexus Autoparts</title>
+  <meta name="description" content="Compra {{ part.name }} ({{ part.sku }}). Disponible en {{ avail_count }} bodega(s) en la red Nexus Autoparts. Cotiza por WhatsApp al instante.">
+  <link rel="canonical" href="https://nexusautoparts.com.mx/parte/{{ part.id }}">
+  <meta property="og:title" content="{{ part.name }} — {{ part.sku }}">
+  <meta property="og:description" content="Disponibilidad real en bodegas de la red. Cotización inmediata por WhatsApp.">
+  <meta property="og:type" content="product">
+  <script type="application/ld+json">
+  {
+    "@context": "https://schema.org",
+    "@type": "Product",
+    "name": "{{ part.name }}",
+    "sku": "{{ part.sku }}",
+    "category": "{{ part.category or '' }}",
+    "description": "{{ (part.description or part.name) | replace('"', '') }}",
+    "brand": { "@type": "Brand", "name": "{{ part.supplier_name }}" },
+    "offers": {
+      "@type": "AggregateOffer",
+      "availability": "{{ availability }}",
+      "offerCount": {{ avail_count }},
+      "priceCurrency": "MXN"
+    }
+  }
+  </script>
+  <style>
+    body { font-family: system-ui, -apple-system, sans-serif; max-width: 860px; margin: 0 auto; padding: 24px; color: #1a1a2e; }
+    .card { border: 1px solid #e5e7eb; border-radius: 12px; padding: 24px; }
+    h1 { font-size: 1.5rem; margin: 0 0 4px; }
+    .oem { font-family: ui-monospace, monospace; color: #6b7280; }
+    table { width: 100%%; border-collapse: collapse; margin-top: 16px; }
+    td, th { text-align: left; padding: 8px; border-bottom: 1px solid #f0f0f0; }
+    .wa { display: inline-block; margin-top: 16px; padding: 12px 22px; background: #25D366; color: #fff;
+          border-radius: 10px; text-decoration: none; font-weight: 600; }
+    img { max-width: 320px; border-radius: 12px; }
+    .brand { margin-bottom: 24px; font-weight: 800; color: #e11d48; }
+  </style>
+</head>
+<body>
+  <div class="brand">NEXUS AUTOPARTS</div>
+  <div class="card">
+    <h1>{{ part.name | replace("_", " ") }}</h1>
+    <div class="oem">OEM / SKU: {{ part.sku }}</div>
+    {% if part.category %}<p>Categoría: {{ part.category }}</p>{% endif %}
+    {% if part.description %}<p>{{ part.description }}</p>{% endif %}
+    {% if part.image_url %}<img src="{{ part.image_url }}" alt="{{ part.name }}">{% endif %}
+    <h3>Disponibilidad en la red ({{ avail_count }} bodegas)</h3>
+    {% if avail_count %}
+    <table><tr><th>Bodega</th><th>Stock</th><th>Ubicación</th></tr>
+    {% for b in bodegas %}<tr><td>{{ b.name }}</td><td>{{ b.stock }}</td><td>{{ b.location or '—' }}</td></tr>{% endfor %}
+    </table>
+    {% else %}
+    <p>Consultar disponibilidad con tu refaccionaria Nexus más cercana.</p>
+    {% endif %}
+    <a class="wa" target="_blank" rel="noopener"
+       href="https://wa.me/{{ wa_number }}?text={{ wa_text }}">Cotizar por WhatsApp</a>
+  </div>
+  <p><a href="/">← Volver al catálogo</a></p>
+</body>
+</html>"""
+
+_seo_cache = {'parts': None, 'ts': 0}
+
+
+def _norm_sku_seo(s):
+    return _re_seo.sub(r'[\s\-\./_]', '', str(s or '')).upper()
+
+
+def _seo_availability(sku):
+    """Availability across active tenant DBs for a normalized SKU (best effort)."""
+    results = []
+    # Nota: el acceso a otras BD de tenant se hace con psycopg2 (no con
+    # SQLAlchemy): abrir una Session por tenant y no cerrarla agotaba el pool.
+    n = _norm_sku_seo(sku)
+    try:
+        import psycopg2 as _pg
+        conn = _pg.connect(dbname='nexus_autoparts')
+        cur = conn.cursor()
+        cur.execute("SELECT db_name FROM tenants WHERE is_active = true")
+        dbs = [r[0] for r in cur.fetchall()]
+        conn.close()
+        for db in dbs[:10]:
+            c2 = None
+            try:
+                c2 = _pg.connect(dbname=db)
+                cu2 = c2.cursor()
+                cu2.execute("""
+                    SELECT 'Principal' || '', COALESCE(SUM(stock), 0)
+                    FROM inventory_stock WHERE inventory_id IN (
+                        SELECT id FROM inventory WHERE is_active AND (
+                          REPLACE(REPLACE(REPLACE(REPLACE(UPPER(part_number),' ',''),'-',''),'.',''),'/','') = %s))
+                """, (n,))
+                row = cu2.fetchone()
+                cu2.close()
+                if row and int(row[1] or 0) > 0:
+                    results.append({'name': db.replace('tenant_', '').replace('_', ' ').title(),
+                                    'stock': int(row[1]), 'location': ''})
+            except Exception:
+                continue
+            finally:
+                if c2 is not None:
+                    try:
+                        c2.close()
+                    except Exception:
+                        pass
+    except Exception:
+        pass
+    return results
+
+
+@app.route('/parte/<int:catalog_id>')
+def seo_part_page(catalog_id):
+    """Server-rendered product page for SEO (schema.org Product + WhatsApp CTA)."""
+    session = Session()
+    try:
+        row = session.execute(text("""
+            SELECT id, sku, name, category, description, image_url, supplier_name
+            FROM supplier_catalog WHERE id = :cid AND is_active
+        """), {'cid': catalog_id}).mappings().first()
+    finally:
+        session.close()
+    if not row:
+        return abort(404)
+
+    part = {
+        'id': row['id'], 'sku': row['sku'], 'name': row['name'],
+        'category': row['category'], 'description': row['description'],
+        'image_url': row['image_url'], 'supplier_name': row['supplier_name'],
+    }
+    bodegas = _seo_availability(row['sku'])
+    wa = (os.environ.get('PUBLIC_WA_NUMBER') or '').replace(' ', '').replace('+', '')
+    wa_text = ''
+    if wa:
+        msg = f"Hola, me interesa: {part['name']} (SKU {part['sku']})"
+        wa_text = msg.replace(' ', '%20').replace('\n', '%0A')
+    html = render_template_string(
+        _PART_PAGE_TEMPLATE, part=part, bodegas=bodegas,
+        avail_count=len(bodegas),
+        availability='https://schema.org/InStock' if bodegas else 'https://schema.org/PreOrder',
+        wa_number=wa, wa_text=wa_text)
+    resp = Flask.response_class(html, mimetype='text/html')
+    resp.headers['Cache-Control'] = 'public, max-age=300'
+    return resp
+
+
+@app.route('/robots.txt')
+def seo_robots():
+    from flask import Response
+    body = "User-agent: *\nAllow: /\nSitemap: https://nexusautoparts.com.mx/sitemap.xml\n"
+    return Response(body, mimetype='text/plain')
+
+
+@app.route('/sitemap.xml')
+def seo_sitemap():
+    """Sitemap con catálogo OEM + vitrinas de usados (cacheado 1h, máx 10k URLs)."""
+    now = _time_seo.time()
+    if _seo_cache['parts'] is None or now - _seo_cache['ts'] > 3600:
+        urls = [
+            {'loc': PUBLIC_BASE_URL + '/', 'lastmod': None},
+            {'loc': PUBLIC_BASE_URL + '/catalog', 'lastmod': None},
+            {'loc': PUBLIC_BASE_URL + '/usados', 'lastmod': None},
+        ]
+        try:
+            session = Session()
+            rows = session.execute(text(
+                "SELECT id FROM supplier_catalog WHERE is_active ORDER BY id LIMIT 10000"
+            )).fetchall()
+            session.close()
+            urls += [{'loc': f"{PUBLIC_BASE_URL}/parte/{r[0]}", 'lastmod': None} for r in rows]
+        except Exception:
+            pass
+        with contextlib.suppress(Exception):
+            urls += _used_sitemap_urls()
+        _seo_cache['parts'] = urls
+        _seo_cache['ts'] = now
+    body = ['<?xml version="1.0" encoding="UTF-8"?>',
+            '<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">']
+    for u in _seo_cache['parts']:
+        loc = u['loc'] if isinstance(u, dict) else u
+        lastmod = u.get('lastmod') if isinstance(u, dict) else None
+        if lastmod:
+            body.append(f"<url><loc>{loc}</loc><lastmod>{lastmod}</lastmod></url>")
+        else:
+            body.append(f"<url><loc>{loc}</loc></url>")
+    body.append('</urlset>')
+    from flask import Response
+    return Response('\n'.join(body), mimetype='application/xml')
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# Vitrina pública de partes usadas (Yonke)
+#   GET /api/public/used-parts        — JSON multi-tenant (subdominio o ?tenant=)
+#   GET /usado/<tenant>               — vitrina server-rendered + filtros
+#   GET /usado/<tenant>/<id>          — detalle con schema.org Product
+#   GET /usado/<tenant>/marca/<make>  — piezas por vehículo donador
+#   GET /usados                       — directorio de tiendas con usados
+# Degradación elegante: tenant inexistente, esquema ausente o fallo de BD
+# responden 404/lista vacía — nunca un 500.
+# ═══════════════════════════════════════════════════════════════════════════
+
+PUBLIC_BASE_URL = os.environ.get('PUBLIC_BASE_URL', 'https://nexusautoparts.com.mx').rstrip('/')
+
+_RESERVED_SUBDOMAINS = {'www', 'api', 'admin', 'mail', 'staging', 'dev',
+                        'nexus', 'pos', 'app', 'dashboard'}
+_USED_GRADES = ('A', 'B', 'C', 'D')
+_used_dir_cache = {'data': None, 'ts': 0}
+_public_tenant_cache = {}
+
+
+def _used_close(conn):
+    """Cierra una conexión de tenant sin propagar errores (degradación)."""
+    if conn is not None:
+        with contextlib.suppress(Exception):
+            conn.close()
+
+
+def _used_donor_label(donor):
+    label = ' '.join(x for x in (donor.get('make'), donor.get('model')) if x)
+    if donor.get('year'):
+        label = f"{label} {donor['year']}".strip()
+    return label
+
+
+def _used_item(row):
+    """Mapea una fila de la consulta de usados a un dict listo para plantilla."""
+    price = row[13] if (row[13] is not None and float(row[13]) > 0) else row[14]
+    price = float(price or 0)
+    stock = int(row[16] or 0)
+    donor = {'make': row[8] or '', 'model': row[9] or '', 'year': row[10],
+             'mileage_km': row[11], 'vin': row[12] or ''}
+    condition = row[5] or 'usado'
+    return {
+        'id': row[0],
+        'part_number': row[1] or '',
+        'name': row[2] or '',
+        'description': row[3] or '',
+        'brand': row[4] or '',
+        'condition': condition,
+        'condition_label': 'Reconstruido' if condition == 'reconstruido' else 'Usado',
+        'condition_fem': 'Reconstruida' if condition == 'reconstruido' else 'Usada',
+        'grade': (row[6] or '').strip().upper(),
+        'is_unique_piece': bool(row[7]),
+        'donor': donor,
+        'donor_label': _used_donor_label(donor),
+        'price': price,
+        'price_label': f"${price:,.0f} MXN" if price > 0 else 'Precio a consultar',
+        'stock': stock,
+        'in_stock': stock > 0,
+        'stock_label': f"{stock} disponible{'s' if stock != 1 else ''}",
+        'image_url': (row[17] or row[15] or '').strip(),
+    }
+
+
+_USED_SELECT = """
+    SELECT i.id, i.part_number, i.name, i.description, i.brand,
+           i.condition, i.condition_grade, i.is_unique_piece,
+           i.donor_make, i.donor_model, i.donor_year, i.donor_mileage_km, i.donor_vin,
+           i.price_1, i.retail_price, i.image_url,
+           CASE WHEN s.inventory_id IS NULL AND i.is_unique_piece THEN 1
+                ELSE COALESCE(s.stock, 0) END AS stock,
+           img.url AS image_primary
+    FROM inventory i
+    LEFT JOIN (
+        SELECT inventory_id, SUM(stock) AS stock
+        FROM inventory_stock GROUP BY inventory_id
+    ) s ON s.inventory_id = i.id
+    LEFT JOIN LATERAL (
+        SELECT url FROM inventory_images
+        WHERE inventory_id = i.id
+        ORDER BY is_primary DESC, sort_order ASC, id ASC
+        LIMIT 1
+    ) img ON TRUE
+"""
+
+_USED_WHERE = "WHERE i.is_active = true AND i.condition IN ('usado', 'reconstruido')"
+
+
+def _used_filter_clause(q, make, model, year, grade):
+    where, params = [], []
+    if q:
+        like = f"%{q}%"
+        where.append("(i.name ILIKE %s OR i.part_number ILIKE %s OR i.description ILIKE %s)")
+        params += [like, like, like]
+    if make:
+        where.append("i.donor_make ILIKE %s")
+        params.append(make)
+    if model:
+        where.append("i.donor_model ILIKE %s")
+        params.append(model)
+    if year:
+        where.append("i.donor_year = %s")
+        params.append(year)
+    if grade:
+        where.append("i.condition_grade = %s")
+        params.append(grade)
+    return (" AND " + " AND ".join(where)) if where else "", params
+
+
+def _used_parts_query(tid, q='', make='', model='', year='', grade='', page=1, per_page=24):
+    """(items, total) de piezas usadas del tenant. ([], 0) ante cualquier fallo."""
+    try:
+        page = max(1, int(page or 1))
+    except (ValueError, TypeError):
+        page = 1
+    try:
+        per_page = max(1, min(48, int(per_page or 24)))
+    except (ValueError, TypeError):
+        per_page = 24
+    offset = (page - 1) * per_page
+    clause, params = _used_filter_clause(q, make, model, year, grade)
+    conn = None
+    try:
+        conn = get_tenant_conn(tid)
+        cur = conn.cursor()
+        cur.execute(f"SELECT count(*) FROM inventory i {_USED_WHERE}{clause}", params)
+        total = int((cur.fetchone() or [0])[0] or 0)
+        cur.execute(
+            _USED_SELECT + _USED_WHERE + clause + """
+            ORDER BY COALESCE(i.condition_grade, 'Z') ASC, i.id DESC
+            LIMIT %s OFFSET %s
+            """, params + [per_page, offset])
+        items = [_used_item(r) for r in cur.fetchall()]
+        cur.close()
+        return items, total
+    except Exception:
+        return [], 0
+    finally:
+        _used_close(conn)
+
+
+def _used_part(tid, part_id):
+    """Una pieza usada por id, o None si no existe / falla la BD."""
+    conn = None
+    try:
+        conn = get_tenant_conn(tid)
+        cur = conn.cursor()
+        cur.execute(_USED_SELECT + _USED_WHERE + " AND i.id = %s", (part_id,))
+        row = cur.fetchone()
+        cur.close()
+        return _used_item(row) if row else None
+    except Exception:
+        return None
+    finally:
+        _used_close(conn)
+
+
+def _used_facets(tid, make=''):
+    """Makes / models / years / grades con conteo para los filtros de la vitrina."""
+    facets = {'makes': [], 'models': [], 'years': [], 'grades': []}
+    conn = None
+    try:
+        conn = get_tenant_conn(tid)
+        cur = conn.cursor()
+        cur.execute(f"""SELECT i.donor_make, count(*) FROM inventory i {_USED_WHERE}
+                        AND i.donor_make IS NOT NULL AND i.donor_make <> ''
+                        GROUP BY i.donor_make ORDER BY count(*) DESC, i.donor_make LIMIT 40""")
+        facets['makes'] = [{'value': r[0], 'count': int(r[1])} for r in cur.fetchall()]
+
+        model_where = f"{_USED_WHERE} AND i.donor_model IS NOT NULL AND i.donor_model <> ''"
+        mparams = []
+        if make:
+            model_where += " AND i.donor_make ILIKE %s"
+            mparams.append(make)
+        cur.execute(f"""SELECT i.donor_model, count(*) FROM inventory i {model_where}
+                        GROUP BY i.donor_model ORDER BY count(*) DESC, i.donor_model LIMIT 40""", mparams)
+        facets['models'] = [{'value': r[0], 'count': int(r[1])} for r in cur.fetchall()]
+
+        cur.execute(f"""SELECT i.donor_year, count(*) FROM inventory i {_USED_WHERE}
+                        AND i.donor_year IS NOT NULL
+                        GROUP BY i.donor_year ORDER BY i.donor_year DESC LIMIT 40""")
+        facets['years'] = [{'value': r[0], 'count': int(r[1])} for r in cur.fetchall()]
+
+        cur.execute(f"""SELECT i.condition_grade, count(*) FROM inventory i {_USED_WHERE}
+                        AND i.condition_grade IS NOT NULL
+                        GROUP BY i.condition_grade ORDER BY i.condition_grade""")
+        facets['grades'] = [{'value': r[0], 'count': int(r[1])} for r in cur.fetchall()]
+        cur.close()
+    except Exception:
+        pass
+    finally:
+        _used_close(conn)
+    return facets
+
+
+def _public_tenant(raw=None):
+    """Resuelve un tenant público por id/subdominio o por el host actual."""
+    if raw is None:
+        raw = request.args.get('tenant', '')
+    raw = (raw or '').strip()
+    tid = int(raw) if raw.isdigit() else None
+    sub = '' if raw.isdigit() else raw.lower()
+    if not raw:
+        sub = (request.headers.get('X-Tenant-Subdomain') or '').strip().lower()
+        if sub in _RESERVED_SUBDOMAINS:
+            sub = ''
+        if not sub:
+            host = (request.host or '').split(':')[0].lower()
+            parts = host.split('.')
+            if len(parts) >= 3 or (len(parts) == 2 and parts[1] == 'localhost'):
+                sub = parts[0]
+            if sub in _RESERVED_SUBDOMAINS:
+                sub = ''
+    if tid is None and not sub:
+        return None
+    cache_key = f"id:{tid}" if tid is not None else f"sub:{sub}"
+    cached = _public_tenant_cache.get(cache_key)
+    if cached and cached[1] > _time_seo.time():
+        return cached[0]
+    try:
+        from tenant_db import get_master_conn
+        conn = get_master_conn()
+        cur = conn.cursor()
+        if tid is not None:
+            cur.execute(
+                "SELECT id, name, subdomain, db_name FROM tenants WHERE id = %s AND is_active = true",
+                (tid,))
+        else:
+            cur.execute(
+                "SELECT id, name, subdomain, db_name FROM tenants WHERE LOWER(subdomain) = %s AND is_active = true",
+                (sub,))
+        row = cur.fetchone()
+        cur.close()
+        conn.close()
+    except Exception:
+        return None
+    if not row:
+        return None
+    tenant = {'id': row[0], 'name': row[1], 'subdomain': (row[2] or str(row[0])).strip(),
+              'db_name': row[3]}
+    _public_tenant_cache[cache_key] = (tenant, _time_seo.time() + 300)
+    return tenant
+
+
+def _tenant_used_summary(tenant):
+    """Resumen de usados de un tenant para el directorio y el sitemap."""
+    conn = None
+    try:
+        conn = get_tenant_conn(tenant['id'])
+        cur = conn.cursor()
+        cur.execute(f"SELECT count(*) FROM inventory i {_USED_WHERE}")
+        count = int((cur.fetchone() or [0])[0] or 0)
+        if not count:
+            cur.close()
+            return None
+        cur.execute(f"SELECT i.id, i.created_at FROM inventory i {_USED_WHERE} ORDER BY i.id LIMIT 2000")
+        rows = cur.fetchall()
+        cur.execute(f"""SELECT i.donor_make, count(*) FROM inventory i {_USED_WHERE}
+                        AND i.donor_make IS NOT NULL AND i.donor_make <> ''
+                        GROUP BY i.donor_make ORDER BY count(*) DESC LIMIT 200""")
+        makes = [{'make': r[0], 'count': int(r[1])} for r in cur.fetchall()]
+        cur.close()
+        lastmod = None
+        items = []
+        for r in rows:
+            d = r[1].strftime('%Y-%m-%d') if r[1] is not None else None
+            if d and (lastmod is None or d > lastmod):
+                lastmod = d
+            items.append({'id': r[0], 'lastmod': d})
+        return {'count': count, 'makes': makes, 'lastmod': lastmod, 'items': items}
+    except Exception:
+        return None
+    finally:
+        _used_close(conn)
+
+
+def _active_tenants_with_used():
+    """Tenants activos con al menos una pieza usada (cache 10 min)."""
+    now = _time_seo.time()
+    if _used_dir_cache['data'] is not None and now - _used_dir_cache['ts'] < 600:
+        return _used_dir_cache['data']
+    result = []
+    try:
+        from tenant_db import get_master_conn
+        conn = get_master_conn()
+        cur = conn.cursor()
+        cur.execute("SELECT id, name, subdomain FROM tenants WHERE is_active = true ORDER BY id")
+        tenants = cur.fetchall()
+        cur.close()
+        conn.close()
+    except Exception:
+        tenants = []
+    for tid, name, subdomain in tenants:
+        t = {'id': tid, 'name': name, 'subdomain': (subdomain or str(tid)).strip()}
+        summary = _tenant_used_summary(t)
+        if not summary:
+            continue
+        t.update(summary)
+        result.append(t)
+    _used_dir_cache['data'] = result
+    _used_dir_cache['ts'] = now
+    return result
+
+
+def _used_sitemap_urls():
+    """URLs de vitrinas, páginas de marca y detalles usados, con lastmod."""
+    from urllib.parse import quote as _q
+    urls = []
+    detail_budget = 10000
+    for t in _active_tenants_with_used():
+        base = f"{PUBLIC_BASE_URL}/usado/{t['subdomain']}"
+        urls.append({'loc': base, 'lastmod': t.get('lastmod')})
+        for mk in t.get('makes', []):
+            urls.append({'loc': f"{base}/marca/{_q(str(mk['make']), safe='')}", 'lastmod': t.get('lastmod')})
+        for it in t.get('items', []):
+            if detail_budget <= 0:
+                break
+            urls.append({'loc': f"{base}/{it['id']}", 'lastmod': it.get('lastmod')})
+            detail_budget -= 1
+    return urls
+
+
+def _json_ld(data):
+    return json_module.dumps(data, ensure_ascii=False).replace('<', '\\u003c')
+
+
+def _used_qs(q, make, model, year, grade, page=None):
+    from urllib.parse import urlencode
+    params = {}
+    if q:
+        params['q'] = q
+    if make:
+        params['make'] = make
+    if model:
+        params['model'] = model
+    if year:
+        params['year'] = year
+    if grade:
+        params['grade'] = grade
+    if page and page > 1:
+        params['page'] = page
+    return ('?' + urlencode(params)) if params else ''
+
+
+_USED_CSS = """
+:root{--ink:#111827;--muted:#6b7280;--line:#e5e7eb;--bg:#f6f7f9;--card:#fff;--brand:#e11d48;--accent:#0f766e}
+*{box-sizing:border-box}
+body{margin:0;font-family:system-ui,-apple-system,"Segoe UI",Roboto,sans-serif;background:var(--bg);color:var(--ink);line-height:1.5}
+a{color:var(--accent)}
+.wrap{max-width:1120px;margin:0 auto;padding:0 16px}
+header.up{background:#0f172a;color:#fff;padding:14px 0}
+header.up .wrap{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap}
+.logo{font-weight:800;letter-spacing:.5px;color:#fff;text-decoration:none;font-size:1.05rem}
+.logo span{color:var(--brand)}
+header.up nav a{color:#cbd5e1;text-decoration:none;margin-left:18px;font-size:.92rem}
+header.up nav a:hover{color:#fff}
+.hero{padding:26px 0 6px}
+.hero h1{font-size:1.6rem;margin:0 0 6px}
+.hero p{color:var(--muted);margin:0}
+.filters{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:14px;margin:18px 0;display:flex;gap:10px;flex-wrap:wrap;align-items:flex-end}
+.filters label{display:block;font-size:.72rem;text-transform:uppercase;letter-spacing:.06em;color:var(--muted);margin-bottom:4px}
+.filters select,.filters input{padding:9px 10px;border:1px solid var(--line);border-radius:9px;font:inherit;background:#fff;min-width:150px}
+.filters button{padding:10px 18px;border:0;border-radius:9px;background:var(--accent);color:#fff;font-weight:600;cursor:pointer}
+.filters a.clear{align-self:center;font-size:.85rem;color:var(--muted);text-decoration:none}
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(238px,1fr));gap:18px;margin:8px 0 34px}
+.card{background:var(--card);border:1px solid var(--line);border-radius:14px;overflow:hidden;display:flex;flex-direction:column;transition:transform .12s ease,box-shadow .12s ease}
+.card:hover{transform:translateY(-2px);box-shadow:0 10px 24px rgba(15,23,42,.08)}
+.card .thumb{position:relative;aspect-ratio:4/3;background:#eef1f5;display:flex;align-items:center;justify-content:center;overflow:hidden;text-decoration:none}
+.card .thumb img{width:100%;height:100%;object-fit:cover;display:block}
+.card .thumb .noimg{color:#94a3b8;font-size:.8rem}
+.badge{position:absolute;top:10px;left:10px;background:rgba(15,23,42,.82);color:#fff;font-size:.72rem;font-weight:700;padding:4px 9px;border-radius:999px;letter-spacing:.03em}
+.badge.g-A{background:#15803d}.badge.g-B{background:#0f766e}.badge.g-C{background:#b45309}.badge.g-D{background:#b91c1c}
+.cond{position:absolute;top:10px;right:10px;background:rgba(225,29,72,.92);color:#fff;font-size:.68rem;font-weight:700;padding:4px 8px;border-radius:999px;text-transform:uppercase}
+.card .body{padding:13px 14px 15px;display:flex;flex-direction:column;gap:5px;flex:1}
+.card .name{font-weight:700;font-size:.98rem;text-decoration:none;color:var(--ink)}
+.card .name:hover{color:var(--brand)}
+.card .oem{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.74rem;color:var(--muted)}
+.card .donor{font-size:.82rem;color:var(--muted)}
+.card .price{margin-top:auto;font-size:1.12rem;font-weight:800;color:var(--brand)}
+.card .stock{font-size:.75rem;color:var(--muted)}
+.empty{background:var(--card);border:1px dashed var(--line);border-radius:14px;padding:40px;text-align:center;color:var(--muted)}
+.pager{display:flex;gap:8px;justify-content:center;margin:0 0 40px;flex-wrap:wrap}
+.pager a,.pager span{padding:8px 13px;border-radius:9px;border:1px solid var(--line);background:#fff;text-decoration:none;color:var(--ink);font-size:.88rem}
+.pager .on{background:var(--accent);color:#fff;border-color:var(--accent);font-weight:700}
+.detail{display:grid;grid-template-columns:minmax(0,1.05fr) minmax(0,1fr);gap:28px;margin:22px 0 44px}
+.detail .photo{background:var(--card);border:1px solid var(--line);border-radius:16px;overflow:hidden}
+.detail .photo img{width:100%;display:block}
+.detail h1{font-size:1.5rem;margin:0 0 6px}
+.spec{width:100%;border-collapse:collapse;margin-top:14px;background:var(--card);border:1px solid var(--line);border-radius:12px;overflow:hidden}
+.spec td{padding:9px 13px;border-bottom:1px solid var(--line);font-size:.9rem}
+.spec td:first-child{color:var(--muted);width:42%}
+.spec tr:last-child td{border-bottom:0}
+.buy{margin-top:18px;padding:16px;background:var(--card);border:1px solid var(--line);border-radius:14px}
+.buy .big{font-size:1.9rem;font-weight:800;color:var(--brand)}
+.wa{display:inline-block;margin-top:12px;padding:13px 22px;background:#25D366;color:#fff;border-radius:11px;text-decoration:none;font-weight:700}
+.crumb{font-size:.84rem;color:var(--muted);padding-top:12px}
+.crumb a{color:var(--muted)}
+.dir-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(260px,1fr));gap:16px;margin:20px 0 44px}
+.dir-card{background:var(--card);border:1px solid var(--line);border-radius:14px;padding:18px;text-decoration:none;color:var(--ink);display:block}
+.dir-card:hover{border-color:var(--accent)}
+.dir-card .n{font-weight:800;font-size:1.05rem}
+.dir-card .c{color:var(--muted);font-size:.85rem;margin-top:4px}
+footer{background:#0f172a;color:#94a3b8;padding:26px 0;font-size:.85rem;text-align:center}
+@media(max-width:760px){.detail{grid-template-columns:1fr}}
+"""
+
+_USED_LIST_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{{ page_title }}</title>
+  <meta name="description" content="{{ meta_description }}">
+  <link rel="canonical" href="{{ canonical }}">
+  <meta property="og:type" content="website">
+  <meta property="og:title" content="{{ page_title }}">
+  <meta property="og:description" content="{{ meta_description }}">
+  {% if og_image %}<meta property="og:image" content="{{ og_image }}">{% endif %}
+  <script type="application/ld+json">{{ breadcrumb_ld | safe }}</script>
+  <style>{{ css | safe }}</style>
+</head>
+<body>
+<header class="up"><div class="wrap">
+  <a class="logo" href="/catalog">NEXUS<span>AUTOPARTS</span></a>
+  <nav>
+    <a href="/catalog">Catálogo</a>
+    <a href="/usados">Tiendas usados</a>
+    <a href="{{ base_path }}">{{ tenant.name }}</a>
+  </nav>
+</div></header>
+<div class="wrap">
+  <div class="crumb"><a href="/">Inicio</a> › <a href="/usados">Partes usadas</a> › <a href="{{ base_path }}">{{ tenant.name }}</a>{% if heading_extra %} › {{ heading_extra }}{% endif %}</div>
+  <div class="hero">
+    <h1>{{ heading }}</h1>
+    <p>{{ subheading }}</p>
+  </div>
+  <form class="filters" method="get" action="{{ base_path }}">
+    <div><label for="q">Buscar</label><input id="q" name="q" type="text" value="{{ f_q }}" placeholder="Faro, ECM, puerta..."></div>
+    <div><label for="make">Vehículo donador</label>
+      <select id="make" name="make"><option value="">Todas las marcas</option>
+      {% for m in facets.makes %}<option value="{{ m.value }}"{% if f_make == m.value %} selected{% endif %}>{{ m.value }} ({{ m.count }})</option>{% endfor %}
+      </select></div>
+    <div><label for="model">Modelo</label>
+      <select id="model" name="model"><option value="">Todos</option>
+      {% for m in facets.models %}<option value="{{ m.value }}"{% if f_model == m.value %} selected{% endif %}>{{ m.value }} ({{ m.count }})</option>{% endfor %}
+      </select></div>
+    <div><label for="year">Año</label>
+      <select id="year" name="year"><option value="">Todos</option>
+      {% for y in facets.years %}<option value="{{ y.value }}"{% if f_year == y.value|string %} selected{% endif %}>{{ y.value }} ({{ y.count }})</option>{% endfor %}
+      </select></div>
+    <div><label for="grade">Grado</label>
+      <select id="grade" name="grade"><option value="">Todos</option>
+      {% for g in facets.grades %}<option value="{{ g.value }}"{% if f_grade == g.value %} selected{% endif %}>Grado {{ g.value }} ({{ g.count }})</option>{% endfor %}
+      </select></div>
+    <button type="submit">Aplicar</button>
+    <a class="clear" href="{{ base_path }}">Limpiar</a>
+  </form>
+  {% if items %}
+  <div class="grid">
+  {% for p in items %}
+    <article class="card">
+      <a class="thumb" href="{{ base_path }}/{{ p.id }}">
+        {% if p.image_url %}<img src="{{ p.image_url }}" alt="{{ p.name }} para {{ p.donor_label }}" loading="lazy">{% else %}<span class="noimg">Sin foto</span>{% endif %}
+        {% if p.grade %}<span class="badge g-{{ p.grade }}">Grado {{ p.grade }}</span>{% endif %}
+        <span class="cond">{{ p.condition_label }}</span>
+      </a>
+      <div class="body">
+        <a class="name" href="{{ base_path }}/{{ p.id }}">{{ p.name }}</a>
+        {% if p.part_number %}<div class="oem">{{ p.part_number }}</div>{% endif %}
+        <div class="donor">{{ p.donor_label or 'Vehículo no especificado' }}</div>
+        <div class="price">{{ p.price_label }}</div>
+        <div class="stock">{% if p.in_stock %}{{ p.stock_label }}{% else %}Existencia por confirmar{% endif %}</div>
+      </div>
+    </article>
+  {% endfor %}
+  </div>
+  {% if pager %}<div class="pager">{% for pg in pager %}{% if pg.url %}<a href="{{ pg.url }}"{% if pg.active %} class="on" aria-current="page"{% endif %}>{{ pg.label }}</a>{% else %}<span>{{ pg.label }}</span>{% endif %}{% endfor %}</div>{% endif %}
+  {% else %}
+  <div class="empty"><p>No hay piezas usadas que coincidan con tu búsqueda.</p><p><a href="{{ base_path }}">Ver todo el inventario usado</a></p></div>
+  {% endif %}
+</div>
+<footer><div class="wrap">{{ tenant.name }} — Vitrina de partes usadas · Nexus Autoparts</div></footer>
+</body>
+</html>"""
+
+_USED_DETAIL_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{{ title }}</title>
+  <meta name="description" content="{{ meta_description }}">
+  <link rel="canonical" href="{{ canonical }}">
+  <meta property="og:type" content="product">
+  <meta property="og:title" content="{{ title }}">
+  <meta property="og:description" content="{{ meta_description }}">
+  <meta property="og:url" content="{{ canonical }}">
+  {% if image %}<meta property="og:image" content="{{ image }}">{% endif %}
+  <script type="application/ld+json">{{ jsonld | safe }}</script>
+  <style>{{ css | safe }}</style>
+</head>
+<body>
+<header class="up"><div class="wrap">
+  <a class="logo" href="/catalog">NEXUS<span>AUTOPARTS</span></a>
+  <nav><a href="/catalog">Catálogo</a><a href="/usados">Tiendas usados</a><a href="{{ base_path }}">{{ tenant.name }}</a></nav>
+</div></header>
+<div class="wrap">
+  <div class="crumb"><a href="/">Inicio</a> › <a href="/usados">Partes usadas</a> › <a href="{{ base_path }}">{{ tenant.name }}</a> › {{ part.name }}</div>
+  <div class="detail">
+    <div class="photo">
+      {% if image %}<img src="{{ image }}" alt="{{ part.name }} para {{ part.donor_label }}">{% else %}<div class="empty" style="border:0">Sin fotografía disponible</div>{% endif %}
+    </div>
+    <div>
+      <h1>{{ part.name }}</h1>
+      <div class="oem" style="font-family:ui-monospace,monospace;color:var(--muted)">{{ part.part_number or ('ID #' ~ part.id) }}</div>
+      <div style="margin:10px 0">
+        <span class="badge g-{{ part.grade }}" style="position:static;display:inline-block">{{ part.condition_label }}{% if part.grade %} · Grado {{ part.grade }}{% endif %}</span>
+        {% if part.is_unique_piece %}<span class="badge" style="position:static;display:inline-block">Pieza única</span>{% endif %}
+      </div>
+      <table class="spec">
+        <tr><td>Condición</td><td>{{ part.condition_label }}</td></tr>
+        {% if part.grade %}<tr><td>Grado de condición</td><td>{{ part.grade }}</td></tr>{% endif %}
+        <tr><td>Vehículo donador</td><td>{{ part.donor_label or 'No especificado' }}</td></tr>
+        {% if part.mileage_label %}<tr><td>Kilometraje del donador</td><td>{{ part.mileage_label }}</td></tr>{% endif %}
+        {% if part.donor.vin %}<tr><td>VIN</td><td>{{ part.donor.vin }}</td></tr>{% endif %}
+        {% if part.brand %}<tr><td>Marca de la pieza</td><td>{{ part.brand }}</td></tr>{% endif %}
+        <tr><td>Disponibilidad</td><td>{% if part.in_stock %}{{ part.stock_label }}{% else %}Por confirmar{% endif %}</td></tr>
+      </table>
+      {% if part.description %}<p>{{ part.description }}</p>{% endif %}
+      <div class="buy">
+        <div class="big">{{ part.price_label }}</div>
+        {% if wa_href %}<a class="wa" target="_blank" rel="noopener" href="{{ wa_href }}">Cotizar por WhatsApp</a>{% endif %}
+        <p style="color:var(--muted);font-size:.82rem;margin:10px 0 0">{{ tenant.name }} · Pieza usada verificada. Sujeto a disponibilidad y confirmación de compatibilidad.</p>
+      </div>
+    </div>
+  </div>
+</div>
+<footer><div class="wrap">{{ tenant.name }} — Vitrina de partes usadas · Nexus Autoparts</div></footer>
+</body>
+</html>"""
+
+_USED_DIRECTORY_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Partes usadas y reconstruidas — Nexus Autoparts</title>
+  <meta name="description" content="Vitrinas de partes usadas y reconstruidas de la red Nexus Autoparts: agencias, yonkes y deshuesaderos con inventario verificado, grado de condición y vehículo donador.">
+  <link rel="canonical" href="{{ base_url }}/usados">
+  <meta property="og:type" content="website">
+  <meta property="og:title" content="Partes usadas y reconstruidas — Nexus Autoparts">
+  <style>{{ css | safe }}</style>
+</head>
+<body>
+<header class="up"><div class="wrap">
+  <a class="logo" href="/catalog">NEXUS<span>AUTOPARTS</span></a>
+  <nav><a href="/catalog">Catálogo</a><a href="/usados">Tiendas usados</a></nav>
+</div></header>
+<div class="wrap">
+  <div class="crumb"><a href="/">Inicio</a> › Partes usadas</div>
+  <div class="hero">
+    <h1>Vitrinas de partes usadas</h1>
+    <p>Yonkes, deshuesaderos y refaccionarias con inventario usado verificado. Elige una tienda para ver sus piezas, grado de condición y vehículo donador.</p>
+  </div>
+  {% if stores %}
+  <div class="dir-grid">
+  {% for s in stores %}
+    <a class="dir-card" href="{{ base_url }}/usado/{{ s.subdomain }}">
+      <div class="n">{{ s.name }}</div>
+      <div class="c">{{ s.count }} pieza{{ 's' if s.count != 1 else '' }} usada{{ 's' if s.count != 1 else '' }} en vitrina</div>
+    </a>
+  {% endfor %}
+  </div>
+  {% else %}
+  <div class="empty"><p>Aún no hay tiendas con piezas usadas publicadas.</p><p><a href="/catalog">Ver el catálogo general</a></p></div>
+  {% endif %}
+</div>
+<footer><div class="wrap">Nexus Autoparts — Partes nuevas, usadas y reconstruidas</div></footer>
+</body>
+</html>"""
+
+_USED_404_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>Pieza no encontrada — Nexus Autoparts</title>
+  <meta name="robots" content="noindex">
+  <style>{{ css | safe }}</style>
+</head>
+<body>
+<header class="up"><div class="wrap">
+  <a class="logo" href="/catalog">NEXUS<span>AUTOPARTS</span></a>
+  <nav><a href="/catalog">Catálogo</a><a href="/usados">Tiendas usados</a></nav>
+</div></header>
+<div class="wrap">
+  <div class="hero"><h1>Pieza usada no disponible</h1>
+  <p>La pieza que buscas no existe, ya se vendió o el enlace es incorrecto.</p></div>
+  <div class="empty"><p><a href="/usados">Ver todas las vitrinas de partes usadas</a> · <a href="/catalog">Ir al catálogo</a></p></div>
+</div>
+<footer><div class="wrap">Nexus Autoparts</div></footer>
+</body>
+</html>"""
+
+
+def _used_html_response(html, status=200, cache='public, max-age=300'):
+    resp = Flask.response_class(html, mimetype='text/html', status=status)
+    resp.headers['Cache-Control'] = cache
+    return resp
+
+
+def _used_abs_image(image_url):
+    if not image_url:
+        return ''
+    return image_url if image_url.startswith('http') else PUBLIC_BASE_URL + image_url
+
+
+def _used_not_found():
+    html = render_template_string(_USED_404_TEMPLATE, css=_USED_CSS)
+    return _used_html_response(html, status=404, cache='no-store')
+
+
+def _used_render_list(tenant, base_path, heading, subheading, heading_extra=None,
+                      canonical_path=None, q='', make='', model='', year='', grade='',
+                      page=1, per_page=24):
+    items, total = _used_parts_query(tenant['id'], q=q, make=make, model=model,
+                                     year=year, grade=grade, page=page, per_page=per_page)
+    facets = _used_facets(tenant['id'], make=make)
+    total_pages = max(1, (total + per_page - 1) // per_page)
+    page = min(max(1, int(page or 1)), total_pages)
+    canonical = PUBLIC_BASE_URL + (canonical_path or base_path)
+    page_title = f"{heading} — Partes usadas | {tenant['name']}"
+    meta_description = (
+        f"{total} pieza{'s' if total != 1 else ''} usada{'s' if total != 1 else ''} y "
+        f"reconstruida{'s' if total != 1 else ''} en {tenant['name']}. "
+        f"Fotos reales, grado de condición, vehículo donador y precio. Cotiza por WhatsApp."
+    )[:300]
+    og_image = ''
+    for it in items:
+        if it['image_url']:
+            og_image = _used_abs_image(it['image_url'])
+            break
+
+    pager = []
+    if total_pages > 1:
+        def _plink(n, label, active=False):
+            return {'url': base_path + _used_qs(q, make, model, year, grade, page=n),
+                    'label': label, 'active': active}
+        if page > 1:
+            pager.append(_plink(page - 1, '‹'))
+        for n in range(max(1, page - 2), min(total_pages, page + 2) + 1):
+            pager.append(_plink(n, str(n), n == page))
+        if page < total_pages:
+            pager.append(_plink(page + 1, '›'))
+
+    breadcrumb_ld = _json_ld({
+        "@context": "https://schema.org",
+        "@type": "BreadcrumbList",
+        "itemListElement": [
+            {"@type": "ListItem", "position": 1, "name": "Inicio", "item": PUBLIC_BASE_URL + "/"},
+            {"@type": "ListItem", "position": 2, "name": "Partes usadas", "item": PUBLIC_BASE_URL + "/usados"},
+            {"@type": "ListItem", "position": 3, "name": tenant['name'], "item": PUBLIC_BASE_URL + base_path},
+        ],
+    })
+    html = render_template_string(
+        _USED_LIST_TEMPLATE, css=_USED_CSS, tenant=tenant, base_path=base_path,
+        heading=heading, subheading=subheading, heading_extra=heading_extra,
+        page_title=page_title, meta_description=meta_description,
+        canonical=canonical, og_image=og_image, breadcrumb_ld=breadcrumb_ld,
+        items=items, facets=facets, pager=pager,
+        f_q=q, f_make=make, f_model=model, f_year=str(year or ''), f_grade=grade)
+    return _used_html_response(html)
+
+
+def _used_render_detail(tenant, part):
+    base_path = f"/usado/{tenant['subdomain']}"
+    canonical = PUBLIC_BASE_URL + f"{base_path}/{part['id']}"
+    image = _used_abs_image(part['image_url'])
+    donor_label = part['donor_label'] or 'vehículo no especificado'
+    mileage = part['donor'].get('mileage_km')
+    part['mileage_label'] = f"{int(mileage):,} km" if mileage else ''
+    grade_txt = f" grado {part['grade']}" if part['grade'] else ''
+    title = f"{part['name']} — pieza {part['condition_fem'].lower()}{grade_txt} para {donor_label} — {tenant['name']}"
+    meta_description = (
+        f"Pieza {part['condition_fem'].lower()}: {part['name']}{grade_txt} para {donor_label}. "
+        f"Precio {part['price_label']}. {tenant['name']} · Nexus Autoparts. "
+        f"Fotos reales y cotización por WhatsApp."
+    )[:300]
+
+    offers = {
+        "@type": "Offer",
+        "url": canonical,
+        "priceCurrency": "MXN",
+        "itemCondition": "https://schema.org/UsedCondition",
+        "availability": "https://schema.org/InStock" if part['in_stock'] else "https://schema.org/OutOfStock",
+        "seller": {"@type": "Organization", "name": tenant['name']},
+    }
+    if part['price'] > 0:
+        offers['price'] = f"{part['price']:.2f}"
+
+    props = []
+    if part['grade']:
+        props.append({"@type": "PropertyValue", "name": "Grado de condición", "value": part['grade']})
+    if part['mileage_label']:
+        props.append({"@type": "PropertyValue", "name": "Kilometraje del donador", "value": part['mileage_label']})
+    if part['donor'].get('vin'):
+        props.append({"@type": "PropertyValue", "name": "VIN del donador", "value": part['donor']['vin']})
+    if part['part_number']:
+        props.append({"@type": "PropertyValue", "name": "Número de parte", "value": part['part_number']})
+
+    product_ld = {
+        "@context": "https://schema.org",
+        "@type": "Product",
+        "name": part['name'],
+        "sku": part['part_number'] or f"USED-{part['id']}",
+        "description": part['description'] or meta_description,
+        "itemCondition": "https://schema.org/UsedCondition",
+        "condition": part['condition_label'],
+        "offers": offers,
+        "additionalProperty": props,
+    }
+    if image:
+        product_ld['image'] = [image]
+    if part['brand']:
+        product_ld['brand'] = {"@type": "Brand", "name": part['brand']}
+    if part['is_unique_piece']:
+        product_ld['numberOfItems'] = 1
+
+    wa = (os.environ.get('PUBLIC_WA_NUMBER') or '').replace(' ', '').replace('+', '')
+    wa_href = ''
+    if wa:
+        from urllib.parse import quote
+        text = f"Hola, me interesa esta pieza usada: {part['name']} (ID {part['id']}) — {donor_label}"
+        wa_href = f"https://wa.me/{wa}?text={quote(text)}"
+
+    html = render_template_string(
+        _USED_DETAIL_TEMPLATE, css=_USED_CSS, tenant=tenant, part=part,
+        base_path=base_path, canonical=canonical, image=image,
+        title=title, meta_description=meta_description,
+        jsonld=_json_ld(product_ld), wa_href=wa_href)
+    return _used_html_response(html)
+
+
+def _used_render_directory():
+    stores = _active_tenants_with_used()
+    html = render_template_string(
+        _USED_DIRECTORY_TEMPLATE, css=_USED_CSS,
+        base_url=PUBLIC_BASE_URL, stores=stores)
+    return _used_html_response(html)
+
+
+def _used_filter_args():
+    grade = (request.args.get('grade') or '').strip().upper()[:2]
+    if grade not in _USED_GRADES:
+        grade = ''
+    year = (request.args.get('year') or '').strip()[:4]
+    return {
+        'q': (request.args.get('q') or '').strip()[:120],
+        'make': (request.args.get('make') or '').strip()[:60],
+        'model': (request.args.get('model') or '').strip()[:60],
+        'year': year,
+        'grade': grade,
+        'page': max(1, request.args.get('page', type=int) or 1),
+        'per_page': max(1, min(48, request.args.get('per_page', type=int) or 24)),
+    }
+
+
+@app.route('/api/public/used-parts')
+def api_public_used_parts():
+    """Lista pública de piezas usadas/reconstruidas de un tenant (JSON)."""
+    tenant = _public_tenant()
+    if not tenant:
+        return jsonify({'error': 'tenant no encontrado', 'items': [], 'total': 0}), 404
+    f = _used_filter_args()
+    items, total = _used_parts_query(
+        tenant['id'], q=f['q'], make=f['make'], model=f['model'],
+        year=f['year'], grade=f['grade'], page=f['page'], per_page=f['per_page'])
+    return jsonify({
+        'tenant': {'id': tenant['id'], 'name': tenant['name'], 'subdomain': tenant['subdomain']},
+        'items': items,
+        'page': f['page'],
+        'per_page': f['per_page'],
+        'total': total,
+        'total_pages': max(1, (total + f['per_page'] - 1) // f['per_page']),
+        'facets': _used_facets(tenant['id'], make=f['make']),
+        'showcase_url': f"{PUBLIC_BASE_URL}/usado/{tenant['subdomain']}",
+    })
+
+
+@app.route('/usado')
+@app.route('/usados')
+def used_parts_directory():
+    """Directorio de tiendas con piezas usadas publicadas."""
+    return _used_render_directory()
+
+
+@app.route('/usado/<tenant>')
+def used_parts_showcase(tenant):
+    """Vitrina pública de piezas usadas de un tenant (server-rendered)."""
+    t = _public_tenant(tenant)
+    if not t:
+        return _used_not_found()
+    f = _used_filter_args()
+    base_path = f"/usado/{t['subdomain']}"
+    return _used_render_list(
+        t, base_path=base_path,
+        heading=f"Partes usadas en {t['name']}",
+        subheading=('Inventario usado y reconstruido verificado: fotos reales, grado de condición, '
+                    'vehículo donador y precio. Filtra por marca, modelo, año o grado.'),
+        canonical_path=base_path, **{k: v for k, v in f.items() if k != 'per_page'})
+
+
+@app.route('/usado/<tenant>/marca/<make>')
+def used_parts_by_make(tenant, make):
+    """Piezas usadas filtradas por marca del vehículo donador (SEO)."""
+    t = _public_tenant(tenant)
+    if not t:
+        return _used_not_found()
+    f = _used_filter_args()
+    make = (make or '').strip()[:60]
+    base_path = f"/usado/{t['subdomain']}"
+    from urllib.parse import quote
+    canonical_path = f"{base_path}/marca/{quote(make, safe='')}"
+    f['make'] = make
+    return _used_render_list(
+        t, base_path=base_path,
+        heading=f"Partes usadas para {make} en {t['name']}",
+        subheading=f'Piezas usadas y reconstruidas de vehículos {make} deshuesados.',
+        heading_extra=make, canonical_path=canonical_path,
+        **{k: v for k, v in f.items() if k != 'per_page'})
+
+
+@app.route('/usado/<tenant>/marca/<make>/<model>')
+def used_parts_by_model(tenant, make, model):
+    """Piezas usadas por marca + modelo del vehículo donador (SEO)."""
+    t = _public_tenant(tenant)
+    if not t:
+        return _used_not_found()
+    f = _used_filter_args()
+    make = (make or '').strip()[:60]
+    model = (model or '').strip()[:60]
+    base_path = f"/usado/{t['subdomain']}"
+    from urllib.parse import quote
+    canonical_path = f"{base_path}/marca/{quote(make, safe='')}/{quote(model, safe='')}"
+    f['make'] = make
+    f['model'] = model
+    return _used_render_list(
+        t, base_path=base_path,
+        heading=f"Partes usadas para {make} {model} en {t['name']}",
+        subheading=f'Piezas usadas y reconstruidas de vehículos {make} {model}.',
+        heading_extra=f"{make} {model}", canonical_path=canonical_path,
+        **{k: v for k, v in f.items() if k != 'per_page'})
+
+
+@app.route('/usado/<tenant>/<int:part_id>')
+def used_part_detail(tenant, part_id):
+    """Detalle server-rendered de una pieza usada con schema.org Product."""
+    t = _public_tenant(tenant)
+    if not t:
+        return _used_not_found()
+    part = _used_part(t['id'], part_id)
+    if not part:
+        return _used_not_found()
+    return _used_render_detail(t, part)
+
+
+
 @app.route('/<filename>')
 def serve_root_static(filename):
     if filename.endswith(('.css', '.js', '.html')) and os.path.isfile(filename):
diff --git a/docker/alertmanager/alertmanager.yml b/docker/alertmanager/alertmanager.yml
index 2128e6e..d003887 100644
--- a/docker/alertmanager/alertmanager.yml
+++ b/docker/alertmanager/alertmanager.yml
@@ -1,7 +1,5 @@
 global:
-  smtp_smarthost: 'localhost:587'
-  smtp_from: 'alerts@nexus.local'
-  smtp_require_tls: false
+  resolve_timeout: 5m
 
 route:
   group_by: ['alertname', 'severity']
@@ -12,19 +10,14 @@ route:
 
 receivers:
   - name: 'default'
-    email_configs:
-      - to: 'admin@nexus.local'
-        subject: 'Nexus Alert: {{ .GroupLabels.alertname }}'
-        body: |
-          {{ range .Alerts }}
-          Alert: {{ .Annotations.summary }}
-          Description: {{ .Annotations.description }}
-          Severity: {{ .Labels.severity }}
-          Time: {{ .StartsAt }}
-          {{ end }}
     webhook_configs:
-      - url: 'http://localhost:5001/pos/api/notifications/webhook'
+      # El contenedor llega al host por el gateway del bridge docker
+      - url: 'http://172.17.0.1:5001/pos/api/notifications/webhook'
         send_resolved: true
+        http_config:
+          authorization:
+            type: Bearer
+            credentials: 'c58db62766712e618a881dbe8de580960812e57a069ef92c9dd00e7e69158cb2'
 
 inhibit_rules:
   - source_match:
diff --git a/docker/docker-compose.monitoring.yml b/docker/docker-compose.monitoring.yml
index ad9d412..aa61ac1 100644
--- a/docker/docker-compose.monitoring.yml
+++ b/docker/docker-compose.monitoring.yml
@@ -3,6 +3,8 @@ version: "3.8"
 services:
   prometheus:
     image: prom/prometheus:v2.51.0
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
     container_name: nexus-prometheus
     restart: unless-stopped
     ports:
diff --git a/docker/grafana/provisioning/dashboards/nexus-gunicorn.json b/docker/grafana/provisioning/dashboards/nexus-gunicorn.json
index 5de73b5..0e3da2b 100644
--- a/docker/grafana/provisioning/dashboards/nexus-gunicorn.json
+++ b/docker/grafana/provisioning/dashboards/nexus-gunicorn.json
@@ -1,7 +1,7 @@
 {
   "uid": "nexus-app",
   "title": "Nexus — Application",
-  "tags": ["gunicorn", "flask"],
+  "tags": ["app", "flask", "nexus"],
   "timezone": "browser",
   "schemaVersion": 36,
   "refresh": "30s",
@@ -26,15 +26,15 @@
   "panels": [
     {
       "id": 1,
-      "title": "Request Rate (nginx)",
+      "title": "Request Rate (by app / status)",
       "type": "timeseries",
       "gridPos": {"h": 8, "w": 12, "x": 0, "y": 0},
       "datasource": {"type": "prometheus", "uid": "${datasource}"},
       "targets": [
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "rate(nginx_http_requests_total[5m])",
-          "legendFormat": "Requests/sec",
+          "expr": "sum by (app, status) (rate(nexus_http_requests_total[5m]))",
+          "legendFormat": "{{app}} {{status}}",
           "refId": "A"
         }
       ],
@@ -49,20 +49,20 @@
     },
     {
       "id": 2,
-      "title": "Response Time (nginx)",
+      "title": "Response Time p95 / p99",
       "type": "timeseries",
       "gridPos": {"h": 8, "w": 12, "x": 12, "y": 0},
       "datasource": {"type": "prometheus", "uid": "${datasource}"},
       "targets": [
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "histogram_quantile(0.95, sum(rate(nginx_http_request_duration_seconds_bucket[5m])) by (le))",
+          "expr": "histogram_quantile(0.95, sum by (le) (rate(nexus_http_request_duration_seconds_bucket[5m])))",
           "legendFormat": "p95",
           "refId": "A"
         },
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "histogram_quantile(0.99, sum(rate(nginx_http_request_duration_seconds_bucket[5m])) by (le))",
+          "expr": "histogram_quantile(0.99, sum by (le) (rate(nexus_http_request_duration_seconds_bucket[5m])))",
           "legendFormat": "p99",
           "refId": "B"
         }
@@ -78,15 +78,15 @@
     },
     {
       "id": 3,
-      "title": "Active Workers",
+      "title": "In-flight Requests",
       "type": "timeseries",
       "gridPos": {"h": 8, "w": 12, "x": 0, "y": 8},
       "datasource": {"type": "prometheus", "uid": "${datasource}"},
       "targets": [
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "count by (instance) (node_processes_state{state=\"S\", cmdline=~\".*gunicorn.*\"})",
-          "legendFormat": "Workers {{instance}}",
+          "expr": "sum by (app) (nexus_http_requests_in_flight)",
+          "legendFormat": "{{app}}",
           "refId": "A"
         }
       ],
@@ -108,8 +108,8 @@
       "targets": [
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "rate(nginx_http_requests_total{status=~\"5..\"}[5m])",
-          "legendFormat": "5xx/sec",
+          "expr": "sum by (app) (rate(nexus_http_requests_total{status=\"5xx\"}[5m]))",
+          "legendFormat": "{{app}} 5xx/s",
           "refId": "A"
         }
       ],
@@ -124,22 +124,22 @@
     },
     {
       "id": 5,
-      "title": "Memory per Worker",
+      "title": "Master DB Connections",
       "type": "timeseries",
       "gridPos": {"h": 8, "w": 24, "x": 0, "y": 16},
       "datasource": {"type": "prometheus", "uid": "${datasource}"},
       "targets": [
         {
           "datasource": {"type": "prometheus", "uid": "${datasource}"},
-          "expr": "process_resident_memory_bytes{cmdline=~\".*gunicorn.*\"} / 1024 / 1024",
-          "legendFormat": "{{cmdline}}",
+          "expr": "nexus_db_connections",
+          "legendFormat": "{{app}} ({{database}})",
           "refId": "A"
         }
       ],
       "fieldConfig": {
         "defaults": {
           "custom": {"drawStyle": "line", "lineWidth": 2, "fillOpacity": 10},
-          "unit": "mbytes",
+          "unit": "short",
           "min": 0
         },
         "overrides": []
diff --git a/docker/prometheus/prometheus.yml b/docker/prometheus/prometheus.yml
index e3503eb..61b3494 100644
--- a/docker/prometheus/prometheus.yml
+++ b/docker/prometheus/prometheus.yml
@@ -19,7 +19,7 @@ scrape_configs:
 
   - job_name: 'node'
     static_configs:
-      - targets: ['node-exporter:9100']
+      - targets: ['host.docker.internal:9100']
 
   - job_name: 'postgres'
     static_configs:
@@ -29,12 +29,16 @@ scrape_configs:
     static_configs:
       - targets: ['redis-exporter:9121']
 
-  - job_name: 'nexus-pos'
-    static_configs:
-      - targets: ['host.docker.internal:5001']
+  # Métricas de aplicación expuestas por POS (gunicorn :5001) y dashboard (:5000)
+  # en el host; se alcanzan desde el contenedor por el gateway del bridge docker.
+  - job_name: 'nexus_pos'
     metrics_path: /metrics
+    static_configs:
+      - targets: ['172.17.0.1:5001']
 
-  - job_name: 'nexus-quart'
-    static_configs:
-      - targets: ['host.docker.internal:5002']
+  - job_name: 'nexus_dashboard'
     metrics_path: /metrics
+    static_configs:
+      - targets: ['172.17.0.1:5000']
+
+
diff --git a/docs/FASES_IMPLEMENTADAS.md b/docs/FASES_IMPLEMENTADAS.md
index 29de612..15acafd 100644
--- a/docs/FASES_IMPLEMENTADAS.md
+++ b/docs/FASES_IMPLEMENTADAS.md
@@ -320,6 +320,30 @@ python3 scripts/check_facturapi_tenants.py
 
 ---
 
+## Mejoras A5 / A6 / A10 (2026-10-11)
+
+Capacidades que no dependen de gran volumen de ventas históricas.
+
+| # | Feature | Archivos | Qué hace |
+|---|---------|----------|----------|
+| **A10** | Venta cruzada "esto + esto" | `services/cross_sell.py`, `blueprints/pos_bp.py` (`POST /pos/api/recommendations`), `static/js/pos.js`, `templates/pos.html` | Sugiere complementos del carrito usando `part_kits.KIT_SUGGESTIONS` + co-ocurrencia real en `sale_items` (mismo `sale_id`). Prioriza piezas con stock; panel en el POS al agregar un artículo. Permiso `pos.sell`. |
+| **A5** | Anomalías de negocio | `services/anomaly_detector.py`, `blueprints/pos_bp.py` (`GET /pos/api/reports/anomalies`), `scripts/run_anomaly_scan.py` | z-score robusto (MAD) por empleado/SKU sobre `sale_items` + `sales` + `audit_log`: descuentos atípicos, ventas bajo costo, cancelaciones repetidas y ventas fuera de horario (TZ `America/Mexico_City`). Maneja *cold start* (`min_samples`, default 5) y nunca marca `unit_cost = 0` como bajo costo. Permiso `reports.view`. |
+| **A6** | Sinónimos + cross-refs en búsqueda | `services/meili_search.py` (`build_synonyms`, `apply_synonyms_to_all`), `scripts/index_meilisearch.py` (`synonyms` mode, `aliases`), `services/catalog_service.py` (`_search_inventory_by_alias`) | Sinónimos ES↔EN (curados + `services.translations.PART_TRANSLATIONS`, 653 términos) aplicados a `nexus_inventory_*` y `nexus_supplier_catalog` sin reindexar. Los SKU alias (`inventory_sku_aliases`) e interchange se indexan en `aliases` y además se consultan por SQL, así la búsqueda por número cruzado funciona de inmediato. |
+
+Comandos de operación (A6):
+
+```bash
+# Aplicar solo settings/sinónimos (no reindexa documentos)
+python3 scripts/index_meilisearch.py synonyms
+# Reindexar un tenant (incluye aliases) o todos
+python3 scripts/index_meilisearch.py tenant tenant_capi_autopartes
+python3 scripts/index_meilisearch.py all
+# Escaneo de anomalías (exit 1 si hay hallazgos de severidad alta)
+python3 scripts/run_anomaly_scan.py all 90
+```
+
+---
+
 ## Mejoras Pendientes (Roadmap Actualizado)
 
 ### 🔴 Crítico — Deuda Técnica
diff --git a/docs/YONKE_COMERCIAL.md b/docs/YONKE_COMERCIAL.md
new file mode 100644
index 0000000..e493dc7
--- /dev/null
+++ b/docs/YONKE_COMERCIAL.md
@@ -0,0 +1,47 @@
+# Nexus Yonke — Documento Comercial (segmento partes usadas)
+
+> Complemento del `docs/YONKE_ONBOARDING.md` (técnico). Aquí va el **posicionamiento, precios, segmento y copy** para vender el módulo a yonkes/deshuesaderos.
+
+## 1. A quién le vendemos
+Yonkes, deshuesaderos y refaccionarias que venden **piezas usadas** (1‑de‑1, con vehículo donador y fotos). Hoy operan con un cuaderno, WhatsApp y MercadoLibre; sin sistema que entienda que **cada pieza es única**.
+
+## 2. Propuesta de valor (diferenciadores)
+1. **Pieza única 1‑de‑1** con SKU automático (`USADO‑<VIN>‑<n>`): dos espejos iguales de donadores distintos **no se fusionan**.
+2. **Alta en <30 s** desde mostrador: **foto múltiple + VIN del donador** (decodificado solo) → pieza lista.
+3. **Búsqueda por donador** ("¿qué tengo de este Civic 2015?") además de "¿qué le queda a este auto?".
+4. **Visión por IA**: sugiere el **grado A/B/C/D** desde la foto y **identifica la pieza**.
+5. **Publicación en MercadoLibre como USADO** (grado, donador, hasta 10 fotos) desde el mismo sistema.
+6. **Consignación**: piezas de terceros con comisión y **estado de cuenta del consignante**.
+7. **Vitrina pública** de usados con SEO (Google encuentra tus piezas).
+8. **Marketplace B2B entre yonkes** (roadmap): intercambio de usadas entre deshuesaderos de la red.
+
+## 3. Precio
+- Plan **`yonke`** — **MXN 299/mes**: sin límite de piezas, hasta 10 empleados, 1 sucursal, **sin catálogo TecDoc** (no lo necesita).
+- Upsell: multi‑sucursal, WhatsApp automatizado, marketplace B2B.
+
+## 4. Onboarding guiado (checklist)
+1. Crear el tenant del negocio (plan `yonke`), activar el módulo **Yonke**.
+2. Otorgar `yonke.view`/`yonke.manage` a los roles (el owner ya los tiene).
+3. **Configurar la política de garantía de usados** (`yonke_default_warranty_days`, p.ej. 30).
+4. Cargar las **primeras 20 piezas** en `/pos/yonke` (VIN → Decodificar → fotos → guardar).
+5. Registrar el primer **donador completo** (auto + sus piezas de una pasada).
+6. Opcional: publicar 3 piezas en **MercadoLibre** y activar la **vitrina pública**.
+
+## 5. Copy para landing (borrador)
+**Título:** *Tu yonke, con sistema. Piezas usadas, ordenadas como nunca.*
+
+**Bajada:** *Cada pieza es única. Nexus Yonke lo entiende: registra la pieza en 30 segundos desde una foto y el VIN del donador, la encuentra por vehículo, le pone su grado con IA y la publica en MercadoLibre como usada. Consignación, etiquetas y vitrina pública, incluidos.*
+
+**Bullets:**
+- "Alta por foto + VIN en menos de 30 segundos."
+- "Tu inventario en el patio, buscable por donador."
+- "Publica en MercadoLibre como USADO con grado y fotos."
+- "Consigna piezas de terceros y liquida con estado de cuenta."
+- "Vitrina pública indexada en Google."
+
+**CTA:** *Prueba Nexus Yonke — MXN 299/mes, sin límite de piezas.*
+
+## 6. Roadmap comercial del segmento
+- **Fase 1 (listo):** alta, búsqueda por donador, MeLi usado, consignación, plan.
+- **Fase 2:** vitrina pública + garantías/devolución + etiquetas + reportes (en curso).
+- **Fase 3:** **marketplace B2B entre yonkes** (`is_seller`), analítica del segmento, importación masiva.
diff --git a/docs/YONKE_ONBOARDING.md b/docs/YONKE_ONBOARDING.md
new file mode 100644
index 0000000..5af42cc
--- /dev/null
+++ b/docs/YONKE_ONBOARDING.md
@@ -0,0 +1,51 @@
+# Nexus Yonke — Onboarding (negocios de partes usadas)
+
+> Módulo para refaccionarias/yonkes/deshuesaderos que venden **piezas usadas** (piezas únicas 1-de-1,
+> con vehículo donador y varias fotos). No requiere catálogo TecDoc.
+
+## Qué se habilitó
+
+**Modelo de datos (migración `v4.27_yonke_m1`, aplicada a todos los tenants):**
+- `inventory`: `condition` (nuevo/usado/reconstruido), `condition_grade` (A/B/C/D), `is_unique_piece`,
+  `serial_number`, `donor_vin`, `donor_make`, `donor_model`, `donor_year`, `donor_mileage_km`,
+  `ownership` (propio/consigna), `acquisition_cost`.
+- `part_number` acepta `NULL` → dos piezas idénticas de donadores distintos **no se fusionan**.
+- `inventory_images` (fotos múltiples por pieza).
+- `warranties.warranty_days` (garantía por días).
+- `consignments` / `consignment_items` (piezas de terceros a consignación).
+
+**Módulo `/pos/yonke`** (pestañas):
+1. **Piezas usadas** — listado con filtros (texto, condición, grado, propiedad) y paginación.
+2. **Nueva pieza** — alta rápida: nombre, precio, **VIN del donador + botón "Decodificar"** (NHTSA)
+   que autocompleta marca/modelo/año, km, propiedad, cobertura en días y **varias fotos**. Genera SKU
+   automático `USADO-<últimos 6 del VIN>-<n>` si no se captura número de parte.
+3. **Por donador** — "¿Qué tengo de este auto?" (agrupado por VIN) y piezas de un donador concreto.
+4. **Consignaciones** — alta de consignante, piezas, montos y **liquidación** (reporte por periodo).
+
+**Publicación en MercadoLibre (M4):** las piezas usadas se publican con `condition="used"`, el grado
+en el título, datos del donador como atributos y **hasta 10 fotos**.
+
+**Permisos:** `yonke.view` (ver) y `yonke.manage` (crear/editar). El rol `owner`/`admin` los tiene por
+defecto; otros roles se otorgan desde Configuración → Permisos (grupo "Yonke").
+
+## Cómo dar de alta un cliente de este segmento
+
+1. Alta normal del tenant (el flujo de tenants ya funciona; ver S1).
+2. En el panel admin, activar el módulo `yonke_enabled` del tenant (opcional).
+3. Otorgar `yonke.view`/`yonke.manage` a los roles que correspondan (por defecto el owner ya los tiene).
+4. En `/pos/yonke` → **Nueva pieza**: capturar la primera pieza (VIN → Decodificar → fotos → guardar).
+5. Repetir por pieza; usar **Por donador** para ubicar todo lo que se tiene de un auto.
+
+## Plan comercial
+
+El plan **`yonke`** (MXN 299/mes) está disponible en `services/billing.py`: sin límite de productos,
+hasta 10 empleados, 1 sucursal y sin catálogo TecDoc.
+
+## Pendientes conocidos
+
+- La garantía por días se registra vía `POST /pos/api/warranties` con `warranty_days`; **aún no se
+  auto-registra al vender** (el POS no registra garantías automáticamente hoy). Implementar el hook al
+  vender una pieza con cobertura.
+- Las categorías de ML para usados pueden exigir reglas propias; el mapeo de categorías por segmento
+  queda como mejora.
+- `donor_vin` no se publica en ML (no hay atributo universal); se puede añadir a la descripción.
diff --git a/docs/plans/2026-10-11-auditoria-2-mejoras-ia.md b/docs/plans/2026-10-11-auditoria-2-mejoras-ia.md
new file mode 100644
index 0000000..a43097c
--- /dev/null
+++ b/docs/plans/2026-10-11-auditoria-2-mejoras-ia.md
@@ -0,0 +1,106 @@
+# Auditoría #2 — Mejoras y IA no conversacional (post F0–F4)
+
+> **Fecha:** 11-oct-2026 · **Base:** 5 investigaciones nuevas con evidencia en `archivo:línea`, SQL real y estado del host.
+> **Contexto:** segunda pasada **sobre el estado ya mejorado** (F0–F4 hechos). Busca la capa que falta, incluidas **regresiones** y **puntos ciegos** de la primera pasada.
+
+---
+
+## 0. Resumen ejecutivo
+
+La primera pasada dejó una base sólida, pero esta segunda encontró **regresiones y puntos ciegos**:
+
+**Corregido YA en esta pasada:**
+1. **Redis caído otra vez** (18:31 UTC): `redis.conf` hacía `bind 127.0.0.1 172.17.0.1`; si `docker0` no está arriba, **Redis muere en bucle** ("Cannot assign requested address") y con él **todo Celery** (fitment, publicación MeLi en lote, webhook). → Arreglado (`bind 127.0.0.1 ::1`) + `vm.overcommit_memory=1` + `reset-failed`; Celery vivo.
+2. **30 de 35 endpoints `/api/admin/*` SIN auth** (solo `tenants*`/`users*` la tenían): `DELETE /api/admin/parts`, `POST /api/admin/import/<type>`, `upload-image`, `export/<type>`… expuestos. → Guard global `before_request` que exige token **ADMIN** en **toda** la superficie; verificado 401.
+
+**Lo demás que falta** (priorizado):
+- **MeLi sigue "inerte"**: 52 publicaciones de Rached con `inventory_id=NULL` (0/52), 31 órdenes pagadas sin convertir, `module_marketplace=false`, sync congelado desde el 11-jun, 0 imágenes. No es la API: es el **mapeo SKU→inventario + imágenes**.
+- **Template de tenant congelado en 32 tablas** (un tenant real tiene ~91): funciona solo porque el alta aplica v1.1→v4.27 sobre un template *desactualizado* → frágil.
+- **Flags de módulo inconsistentes** (`*_enabled` en dashboard vs `module_*` en POS): activar MercadoLibre/WhatsApp en el panel **no** se refleja en el POS.
+- **Yonke construido y vacío**: sin flag de módulo, sin link de navegación, sin plan asignable, 0 piezas.
+- **Lealtad sin cerrar el ciclo** (acumula pero no se puede canjear con descuento real).
+- **Backups**: sin offsite, sin retención (7.2 GB), **sin alerta de backup**; y `expire_demos.py` no está cableado a ningún timer.
+- **Reset de demo no limpia PII** (clientes/conversaciones quedan).
+- **La IA de embeddings está construida pero SIN usar**: `semantic_search.embed()/find_similar()` **no tienen un solo caller** → es la palanca más barata para media docena de mejoras.
+
+---
+
+## 1. Regresiones / puntos ciegos operativos (con evidencia)
+
+| # | Hallazgo | Evidencia | Estado |
+|---|---|---|---|
+| 1 | **Redis muere por `bind` a docker0** | `redis-server.log:847` `Cannot assign requested address 172.17.0.1`; `redis.conf:88` | ✅ arreglado |
+| 2 | **32 endpoints `/api/admin/*` sin auth** | `dashboard/server.py` (35 rutas, 3 con ADMIN) | ✅ arreglado (guard global) |
+| 3 | **Admin de catálogo roto (500)** | `/api/admin/stats`,`/groups` → 500 (tablas `parts`/`part_categories` retiradas, `server.py:2716-2743`) | pendiente |
+| 4 | **Backups Oct 2–10 inexistentes** + sin offsite + sin retención + **sin alerta de backup** | `backups/`; `BACKUP_S3_BUCKET` sin set | parcial (timer ya corre) |
+| 5 | **`expire_demos.py` sin timer** | grep `systemd/`=0 | pendiente |
+| 6 | **Template congelado (32 tablas) + drift** (`sale_payments` ausente) | `tenant_template` 32 vs tenant real 91 | pendiente |
+| 7 | **Reset de demo deja PII** (no trunca `customers`,`whatsapp_messages`,`wa_*`,`audit_log`) | `manager/services/tenant_service.py:188-240` | pendiente |
+| 8 | **14 DB `tenant_*` huérfanas** (6 con PII de prueba) vs 8 registradas | `pg_database` | pendiente |
+| 9 | **Flags de módulo inconsistentes** | dashboard escribe `meli_enabled`, POS lee `module_meli` (`config_bp.py:1269`), manager usa `module_*` | pendiente |
+| 10 | **Manager sin nginx/TLS/2FA; auditoría vacía; bug de comparación de versiones** (`"v4.9">="v4.10"`) | `manager/services/migration_service.py:82` | pendiente |
+| 11 | **Sin TLS en el host, sin firewall; `5432`/`5003` en 0.0.0.0** | `ss -tlnp`; `iptables -S` ACCEPT | pendiente (decisión) |
+| 12 | **`nexus` comparte rol en TODAS las DB; sin roles por tenant** | `has_database_privilege`=t | pendiente |
+| 13 | **nginx del repo difiere del vivo** (falta bloque wildcard de tenants; sobra `nexus_quart`/`login2`) | `nginx/nexus-pos.conf` vs `/etc/nginx/...` | pendiente |
+| 14 | **Sin analytics/tracking** en la cara pública (cero GA/GTM/pixel) | grep = 0 | pendiente |
+| 15 | **`i18n.js` muerto** (fuerza `es`, cero `t()`), `*.min.js` desactualizados | `i18n.js:322` | pendiente |
+| 16 | **Aislamiento multi-tenant por proceso**: 8 workers × N tenants × pool; sin PgBouncer; scans cross-tenant O(n) | `tenant_db.py`, `marketplace_external_bp.py:113` | pendiente |
+| 17 | **Token del webhook de Alertmanager en claro en el repo** | `docker/alertmanager/alertmanager.yml` | pendiente |
+
+---
+
+## 2. MeLi / Yonke / WhatsApp — estado real y brechas
+
+**MercadoLibre (Rached):** 52 listings, **`inventory_id` 0/52**, 31 órdenes `paid` sin convertir (`nexus_sale_id` NULL), `sync_errors` 52/52 (jun-11), `last_sync_at` 2026-06-11, 0 imágenes, `module_marketplace=false`. Bloqueo operativo = **mapear SKU→inventario + subir imágenes + encender el módulo**.
+Ausente comercialmente (0 refs en código): **descripción de anuncio**, **facturación automática al convertir** (usa `_create_sale_manual` que salta el hook de CFDI/contabilidad), **persistir comisión/rentabilidad**, variaciones, `catalog_listing`/`price_to_win`, promociones, reputación, **SLA de preguntas** (4 sin responder, una de febrero), multi-cuenta, backoff de rate-limit (429).
+
+**Yonke:** código completo (M1–M6), **0 datos**. Falta: flag `module_yonke` (no existe), link en navegación, plan asignable desde admin, tenant piloto, exposición pública de usados, categorías ML de usados, botón "publicar usado" en la UI.
+
+**WhatsApp:** 8 bridges vivos + WA CRM (`:3010`) pero `module_whatsapp=false` en todos, WA CRM sin cablear (secret placeholder), **0 mensajes**; y el flujo WA **no escribe actividades en el CRM** (aunque sí factura pedidos).
+
+---
+
+## 3. IA no conversacional — la siguiente ola (con prontitud de datos)
+
+### 3.1 La palanca infrautilizada
+`pos/services/semantic_search.py` tiene `embed()` (4096 dims), `find_similar()`, `cosine_similarity()`, `rerank()` — **el rerank está integrado y el resto NO tiene un solo caller**. Es la base más barata para: matching, dedup, alternativas, limpieza de fitment, búsqueda semántica de bodega y respuestas de compatibilidad.
+
+### 3.2 Priorizado por impacto/esfuerzo
+
+| Prio | Oportunidad | Punto de integración | Datos (real) | Enfoque | Esfuerzo |
+|---|---|---|---|---|---|
+| **1** | **Ligar inventario→catálogo a escala** (habilita casi todo) | `sku_matcher.py:82,138`; endpoint `/inventory/match-catalog` | 355k items sin ligar; 17,246 catálogo; 406,393 xrefs | exact+interchange (ya) **+ embeddings** en el fallback de nombres (hoy `difflib`) | M |
+| **2** | **Enriquecer catálogo: descripciones e imágenes** | `catalog_import_service.py:14`; `image_scraper.py:55` | 95% de `inventory.description` vacío; 0/17,246 `supplier_catalog` con imagen/desc; hay imágenes en los Excel de `data/` | LLM para descripción ES; cargar imágenes de proveedor + visión para validar | S–M |
+| **3** | **"Alternativas / piezas similares" (feature muerta)** | `catalog_service._get_alternatives:1859`; `dashboard/server.py:1915` | `supplier_catalog_interchange` (406k) + catálogo 17k | reconstruir sobre interchange + `find_similar()` (hoy consulta tablas TecDoc retiradas → vacío) | M |
+| **4** | **Anuncios MeLi: título + descripción + categoría** | `marketplace_external_service.build_item_payload:237`; `meli_service.search_categories:280` | nombre/marca/compat/donor | LLM (categoría vía `domain_discovery`) + descripción | S–M |
+| **5** | **Claves SAT de productos** (`clave_prod_serv`/`clave_unidad` 100% vacías) | `cfdi_builder.py:178`; `cfdi_facturapi_builder.py:83` | nombre/categoría/marca de 170k | reglas + LLM → CFDI correcto | S |
+| **6** | **Persistir comisión/rentabilidad por listing** | `marketplace_listings` (nuevas columnas); `_calculate_meli_net_price:387` (ya calcula, no guarda) | listings + costo | guardar fee/net/costo → margen por publicación | S |
+| **7** | **Facturación automática al convertir orden MeLi** | `convert_order_to_sale`/`_create_sale_manual:1759` (salta `pos_engine` CFDI) | órdenes MeLi | enrutar por `process_sale` o encolar CFDI | S |
+| **8** | **Extracción de pedidos desde WhatsApp (texto/voz/foto)** | `whatsapp_bp.py:376` (hoy menú rígido) | `whisper_local` (voz), `part_vision`/`invoice_ocr` (foto), catálogo | LLM/NER → cotización borrador | M–L |
+| **9** | **Limpieza de fitment ruidoso** | `qwen_fitment.py:113,298`; `inventory_vehicle_compat.py:322` | 41.5M filas (estrada ~131/pieza; `qwen` 99.5%) | apagar `qwen` por defecto en bulk-import + scorear ruido con embeddings/rerank | M |
+| **10** | **Búsqueda semántica de bodega** (150,778 items, multi-vendedor) | `peer_service`, `catalog_service.get_bodega_availability:2562` | 150k con nombre/SKU | embeddings + rerank (offline) | M |
+| **11** | **Métricas de negocio por tenant + anomalías multi-tenant + salud de cartera** | master rollup diario; `anomaly_detector.py` (intra-tenant) | por definir | rollup + z-score entre tenants | M |
+| **12** | **Dedup/normalización con embeddings** | `sku_matcher.match_name:82` | estrada: 6,121 grupos de `name` duplicado | `find_similar()` clustering | M |
+
+### 3.3 No vale la pena todavía (cold-start honesto)
+- **Forecast de demanda por SKU, elasticidad/precios, predicción de quiebre, fraude/anomalías por SKU, churn/scoring por cliente**: hay **~70 líneas de venta en toda la plataforma** y **0 compras**. `cross_sell` estadístico y `anomaly_detector` se auto-marcan en `cold_start`. Dejar **diseñado, no invertir** hasta tener miles de transacciones por tenant.
+- **IA de ops**: triage de logs con LLM y agrupación de alertas con ML = **overkill** (volumen KB/día, 1 receiver). Lo útil es **sin IA**: alerta de backup/celery/tenant caído y `predict_linear` para disco.
+
+---
+
+## 4. Roadmap propuesto
+
+| Fase | Foco | Entregable verificable |
+|---|---|---|
+| **F5 — Cerrar lo crítico (2-3 días)** | Redis estable (hecho) · auth admin (hecho) · admin catálogo sin 500 · `expire_demos` a timer · unificar flags de módulo · reset de demo con PII · limpiar DB huérfanas · alerta de backup | 0 endpoint admin sin auth; módulos coherentes dashboard↔POS; alerta de backup llega |
+| **F6 — MeLi de verdad (1 sem)** | Mapear los 52 listings → inventario · pipeline de imágenes · encender `module_marketplace` y `module_yonke` · publicar con descripción/categoría · persistir comisión · facturación automática al convertir | Publicar SKU con imagen desde el POS → vender en ML → orden convertida + CFDI encolado |
+| **F7 — IA de catálogo (2 sem)** | Ligado masivo con embeddings · descripciones + imágenes · "alternativas/similares" funcional · SAT keys · limpieza de fitment | ≥70% de items ligados a catálogo; alternativas devuelven resultados; fitment por pieza < 20 filas |
+| **F8 — Escala y cartera (2-3 sem)** | PgBouncer + pool · métricas de negocio por tenant + anomalías multi-tenant + salud de cartera · analytics en la cara pública · Yonke piloto · WA CRM por negocio · TLS/firewall/roles | panel de cartera; 30+ tenants sin agotar conexiones; 1 tenant Yonke en producción |
+
+---
+
+## 5. Métricas de éxito
+- **Confiabilidad:** 0 servicios en bucle; backups diarios verificados + offsite; alertas que llegan.
+- **Cierre:** 0 endpoints `/api/admin/*` sin auth; flags de módulo coherentes.
+- **MeLi:** 100% de listings con `inventory_id`; >0 órdenes convertidas + facturadas; publicaciones con imagen y descripción.
+- **IA de catálogo:** % items ligados a catálogo (0→≥70%); tiempo de alta de anuncio; búsquedas sin resultado.
diff --git a/docs/plans/2026-10-11-auditoria-completa-mejoras-ia.md b/docs/plans/2026-10-11-auditoria-completa-mejoras-ia.md
new file mode 100644
index 0000000..dce5774
--- /dev/null
+++ b/docs/plans/2026-10-11-auditoria-completa-mejoras-ia.md
@@ -0,0 +1,125 @@
+# Auditoría completa de la plataforma + IA no conversacional — Nexus Autoparts
+
+> **Fecha:** 11-oct-2026 · **Base:** 6 investigaciones con evidencia en `archivo:línea`, SQL real y estado del host.
+> **Énfasis solicitado:** áreas de mejora + **IA no conversacional** (predicción, clasificación, visión, OCR, anomalías, matching).
+
+---
+
+## 0. Resumen ejecutivo
+
+La plataforma es hoy, en los datos, **un catálogo de autopartes con fitment masivo (≈21 M relaciones pieza-vehículo y ≈406 K equivalencias) más un POS funcional pero con poco volumen transaccional** (máximo 24 ventas en un tenant; la única serie temporal real son 4,582 ventas históricas de Atlas en 19 meses). El código de IA existente es **LLM + visión (QWEN/Hermes/Gemma) y Meilisearch**; no hay ML clásico instalado.
+
+Hay tres frentes con problemas:
+
+1. **Operación/seguridad (grave y barato de arreglar):** firewall abierto, Postgres con `trust` en toda la LAN, secretos en texto claro, **Redis caído 6 días → todo Celery muerto**, **alertas silenciosas** (sin `ALERT_PHONES`), backups que fallaron 5 días sin avisar.
+2. **Bugs de producto en caja** (visibles al usuario hoy) y funciones construidas pero **sin cablear** (garantías, notificaciones de taller, lealtad, venta cruzada, flotillas).
+3. **Calidad de datos** que bloquea el catálogo, la publicación en MercadoLibre y el SEO: **0 imágenes, 0 descripciones, `reorder_point` 100% NULL, 0 precios de proveedor, 52 listings sin `inventory_id`**.
+
+**IA no conversacional: qué sí tiene sentido hoy** (no depende de volumen de ventas): auto-categorización de productos (ML y taxonomía), deduplicación/matching de SKUs, **OCR/VLM de facturas de proveedor**, **visión para graduar piezas usadas (Yonke)**, semantic search por embeddings, y **detección de anomalías de negocio** (descuentos/stock). **Qué NO vale la pena todavía:** forecast de demanda (cold start), triage de logs con LLM, agrupación de alertas con ML (overkill).
+
+---
+
+## 1. Operación y seguridad — P0 (hacer ya)
+
+| # | Hallazgo | Evidencia | Acción |
+|---|---|---|---|
+| 1 | **Postgres con `trust` para toda la LAN** + puerto `5432` abierto en `0.0.0.0` | `pg_hba.conf`: `host all all 192.168.10.0/24 trust`; `iptables -S` → `INPUT ACCEPT` sin reglas; `ufw` no instalado | Quitar `trust` (usar `scram-sha-256`), `listen_addresses` a localhost/LAN acotada, firewall |
+| 2 | **Secretos en claro en unit files world-readable** | `nexus-pos.service` (QWEN/FACTURAPI/JWT/INTERNAL/MEILI keys), `nexus-manager.service`, `nexus.service`, `meilisearch.service` | `EnvironmentFile` modo `600` o `systemd-creds`; rotar llaves |
+| 3 | **Redis caído 6 días → Celery en bucle de muerte** | `systemctl status redis-server` = failed; `celery.log`: `Cannot connect to redis://localhost:6379/1 (55/100)` desde hace 6 días | Levantar Redis (o quitarlo del diseño); hoy **toda tarea Celery está caída** |
+| 4 | **Alertas silenciosas** | `/etc/nexus/alert.env` sin `ALERT_PHONES` → `alerts.log: ALERT no ALERT_PHONES configured`; `RedisDown` activo 6 días sin consecuencia | Poblar `alert.env`, segundo canal (email/Slack), alertas de backup/Celery/app-down |
+| 5 | **Backups: fallaron 5 días en silencio** (7–11 oct); solo locales; 3.5 GB zombi | `journalctl -u nexus-backup`; `BACKUP_S3_BUCKET` sin definir; cleanup no borra `.dump`/`.sql` viejos | Ya corregí el `((deleted++))`; **falta validar el timer 02:00**, offsite S3 y limpieza |
+| 6 | **Sin TLS en este host** | solo `listen 80`; no hay 443 | Confirmar proxy/Cloudflare delante, o terminar TLS |
+| 7 | **Endpoints expuestos** | Grafana `admin/nexus2026`; Prometheus/Alertmanager sin auth; webhook `/pos/api/notifications/webhook` POST **sin auth** | Auth + bind a localhost |
+| 8 | **Servicios como `root`** y **timers muertos** (`nexus-quart`, `cache-warm`, `mv-refresh`, `cron.d` inexistente) | `systemctl status` | Erradicar jobs muertos / matrices obsoletas |
+
+**Observabilidad:** Prometheus/Grafana/Alertmanager corren y scrapean infra, pero **la app no expone `/metrics`** (`:5001/metrics` → 404; `grep prometheus_client` = 0) → el dashboard "Nexus — Application" está **vacío**. Falta `pg_stat_statements` cargado (`shared_preload_libraries` vacío) y `log_min_duration_statement` activo.
+
+**Escalabilidad:** el pool es **por proceso** (`tenant_db.py:24-32`, `minconn=2, maxconn=20` × 8 workers gunicorn) → ~160 conexiones/tenant en el peor caso; **sin PgBouncer**. 8 tenants van sobrados; **a ~15-20 tenants calientes revienta `max_connections=200`**. A 100 es insostenible.
+
+---
+
+## 2. Bugs de producto en caja — P0/P1
+
+| Sev | Bug | Evidencia |
+|---|---|---|
+| P0 | **Venta offline rota**: `totals['total']` no existe → `ReferenceError`, el ticket offline nunca se muestra | `pos/static/js/pos.js:1587` |
+| P0 | **Devolución muestra reembolso $0**: lee `res.refund_total`, el API devuelve `total_refund` | `pos.js:978` vs `pos_bp.py:2628` |
+| P0 | **Apartado liquidado no muestra la venta**: lee `res.sale_id`, el API devuelve `{id,...}` | `pos.js:1054` vs `pos_bp.py:2377` |
+| P0 | **"Facturar CFDI" no hace nada**: se manda `generate_cfdi` pero **ningún backend lo lee** | `pos.js:1519`; `grep generate_cfdi` en `pos/**/*.py` = 0 |
+| P0 | **Reembolsos no entran al corte de caja** → efectivo esperado sobreestimado | `pos_bp.py:2454` no inserta `cash_movements`; `cashregister_bp.py:195-314` no resta devoluciones |
+| P1 | **Apartado cancelado no revierte contabilidad** (pasivo fantasma 240) | `pos_bp.py:2389-2449` |
+| P1 | **Apartado se liquida siempre como efectivo** (aunque sea tarjeta) | `pos_bp.py:2291,2332` |
+| P1 | **Descuento/tope de precio solo se valida en venta directa** (cotización/apartado la evaden) | `pos_engine.py:290-295`; `pos_bp.py:822,1212,1704,1864` |
+| P1 | **Devoluciones sin control de rol** (solo `pos.sell`) | `pos_bp.py:2455` |
+| P1 | **500 por query param sin validar** (`?per_page=abc`) | `error.log`; `/pos/api/marketplace-ext/*` |
+
+**Construido pero sin cablear:** garantías/RMA nunca se registran al vender (`warranty_bp.py:41`); `notify_order_ready`/`notify_maintenance_due` existen y no se llaman; **lealtad acumula pero no se puede canjear en el POS**; **venta cruzada muerta** (`part_kits.py` no se importa); flotillas fuera del menú (`sidebar.js` no incluye `fleet`); analytics de cliente (LTV/churn) calculado y no mostrado (`crm_bp.py:227`, `crm_engine.py:289`).
+
+---
+
+## 3. Calidad de datos y catálogo
+
+- **Imágenes: 0 en todos los tenants** (`image_url` vacío; `inventory_images` 0 filas). Bloquea publicar en ML, el catálogo público y el SEO.
+- **`supplier_catalog`**: 17,246 items, **0 con imagen, 0 con descripción**.
+- **`reorder_point`/`reorder_qty` 100% NULL**; `min_stock=0` en ~95% → **las alertas de stock bajo nunca disparan**; `reorder_alerts` = 0 filas.
+- **Filtro de sucursal roto en reorden**: filtra por `inventory.branch_id`, que es NULL al 100%.
+- **Motor de Proveedores/Órdenes de Compra completo y sin uso** (`purchase_orders` = 0 filas en todos los tenants); `supplier_catalog_prices` = 0; `catalog_part_id` 0/14,568 → sin precios/margen de proveedor.
+- **Fitment**: `inventory_vehicle_compat` de Estrada = **20.7 M filas / 129,101 items ≈ 160 por pieza** (99.5% salida QWEN, conf 0.843) — **ruidoso**; Capa/Rached usan `supplier_catalog` (0.95, limpio).
+- **Búsqueda**: Meili cubre inventario y proveedor, pero **el índice `nexus_parts` (1.55 M docs TecDoc) sigue re-indexándose y está muerto**; los aliases/cross-refs **no entran** a `smart_search`; sin sinónimos.
+- **Estrada y Originales Autopartes son clones exactos** (mismos 157,243 SKUs y 20,687,557 fitments) → cuéntalos una vez.
+
+---
+
+## 4. IA no conversacional — qué construir (y en qué orden)
+
+### 4.1 Lo que ya existe (reutilizable)
+- `ai_chat.classify_part()` (`ai_chat.py:379`) → número OEM a `{name, brand, vehicle, category}`.
+- `ai_chat.chat_with_image()` (`ai_chat.py:309`) → **visión**: identifica una autoparte por foto (Gemma/QWEN).
+- `qwen_fitment.py` → compatibilidad pieza-vehículo validada contra la maestra (con `confidence`).
+- `whisper_local.py` → **ASR local** (faster-whisper, CPU) para notas de voz.
+- Meilisearch (keyword + typos; soporta vectores) con índices poblados.
+- `nexpart_taxonomy.py` → 558 etiquetas (dataset listo para clasificador); `wa_learning.get_learning_pairs_for_training()` (`:73`) → pares texto→producto etiquetados.
+- **Infra lista para OCR**: `tesseract` + `pytesseract` + `ffmpeg` + `pdftotext` ya instalados.
+- **No hay** `sklearn`/`torch`/`transformers`/`faiss`; **sin GPU** (12 vCPU / 47 GB). Inferencia en CPU o vía QWEN/Hermes.
+
+### 4.2 Propuestas priorizadas por **viabilidad de datos** (no por moda)
+
+| Prio | Implementación | Punto de integración | Datos (reales hoy) | Enfoque | Beneficio |
+|---|---|---|---|---|---|
+| **A1** | **Auto-categorización de productos** (taxonomía Nexpart + categoría ML) | `inventory_bp.py:129` (hoy no persiste) y `marketplace_external_service.py` (publish); ML ya tiene `domain_discovery` en `meli_service.py:280` | 171 K SKUs, 18 K sin categoría; taxonomía de 558 etiquetas | Reglas → embeddings (Meili) → LLM (`classify_part`) como fallback | Habilita navegación/filtros y **publicación en lote sin elegir categoría a mano** |
+| **A2** | **Deduplicación / matching de SKUs** (poblar `catalog_part_id` + aliases) | `catalog_import_service.py:57-76` | 406 K interchange + 9 K + 4 K aliases | Normalización + blocking por prefijo + similitud de embeddings | Desbloquea precios de proveedor, margen y enriquecimiento (hoy link 0%) |
+| **A3** | **OCR/VLM de facturas de proveedor** | `supplier_engine.receive_po:214` / compra directa `inventory_bp.py:1198` | Facturas PDF/foto (infra ya instalada) | `pdftotext`+Tesseract y VLM (`chat_with_image`) + validación contra catálogo | Elimina captura manual y **alimenta `supplier_catalog_prices`** (hoy vacío) |
+| **A4** | **Visión para graduar piezas usadas (Yonke)** | `yonke_bp.py:145` (subida de fotos) | Fotos de piezas (hoy 0) | VLM que sugiera `condition_grade` (A/B/C/D) y defectos; validar encuadre antes de publicar | Alta consistente <30 s, menos devoluciones, confianza del comprador |
+| **A5** | **Anomalías de negocio** (descuentos, merma de stock, precios mal capturados) | post-commit de venta `pos_engine.py:462` + job nocturno sobre `sale_items`/`inventory_operations`/`audit_log` | Ventas/ops por tenant | EWMA/z-score robusto o Isolation Forest por empleado/SKU/sucursal | Detecta fuga de margen que los topes no capturan (apartados/cotizaciones los evaden) |
+| **A6** | **Semantic search** (embeddings + sinónimos) | `meili_search.py:23`, `index_meilisearch.py:47` | Nombres/SKUs/cross-refs | Vectores en Meili (híbrido) + sinónimos + indexar interchange | "balatas"→"Brake Pad"; búsqueda por número cruzado |
+| **A7** | **Clasificación/priorización de preguntas de MeLi** (+ auto-respuesta por plantilla) | `service.py:1151` (`sync_questions` → `_upsert_question`) | 18 preguntas (4 sin responder desde mayo) | Clasificador de intención (compat/precio/envío) + plantillas + `vehicle_compatibility` | SLA (ML penaliza respuestas lentas) y más conversión |
+| **A8** | **Enriquecimiento de imágenes** (scraping + tagging por nombre de parte) | `image_scraper.bulk_import:71`, `image_service.save_image:74` | `supplier_catalog` 0 imágenes | Scraping existente + VLM para validar/clasificar | Desbloquea catálogo público, SEO y publicación ML |
+| **A9** | **Score de riesgo de crédito (fiado)** | validación en `pos_engine.py:314`, `get_customer` `customers_bp.py:133` | Clientes + aging (pocas ventas aún) | Regresión logística/heurística ponderada (mora>30d) | Menos incobrables; subir límites a buenos clientes |
+| **A10** | **Venta cruzada "esto + esto"** | hook muerto `part_kits.build_kit_text`; `pos.js:403` al agregar al carrito | `sale_items` + `KIT_SUGGESTIONS` | Reglas de asociación/co-ocurrencia, fallback a kits | +5-15% ticket típico |
+| **A11** | **Forecast de demanda / punto de reorden** | `reorder_engine.py:26,78` | **Cold start**: máx 24 ventas; única serie = Atlas `historical_sales` (4,582 / 19 meses) | Media móvil/Exponencial (ROP = μ·LT + z·σ); ML real cuando haya volumen | ⚠️ Hoy **bloqueado por datos**; arrancar con reglas y migrar |
+| **A12** | **Churn / próxima compra** | `crm_engine.py:289` (hoy umbrales fijos) | 52% de compradores de Atlas recompran | BG/NBD o regresión de intervalo intercompra | Campañas de reactivación dirigidas |
+
+### 4.3 Lo que NO vale la pena (honestidad)
+- **Triage de logs con LLM**: el volumen de errores es de KB/día; deduplicar por firma con reglas gana y cuesta cero.
+- **Agrupación de alertas con ML**: hoy hay **un** receiver y **cero** alertas útiles; arreglar el routing da el 100% del valor.
+- **Predicción de capacidad con IA**: `predict_linear(disk[6h], 7d)` en PromQL ya responde; es una alerta, no un modelo.
+- **Forecast de demanda hoy**: sin historial transaccional, cualquier modelo sería ruido.
+
+---
+
+## 5. Roadmap propuesto
+
+| Fase | Foco | Entregable verificable |
+|---|---|---|
+| **F0 — Blindar (2-3 días)** | Seguridad (pg_hba/firewall/secretos), Redis arriba, alerting, validar backup timer + offsite, 500 de query params, borrar jobs muertos | Celery vivo; alerta de backup llega a un humano; `5432` cerrado |
+| **F1 — Caja correcta (1 sem)** | Bugs P0 de `pos.js`, reembolsos→caja, reversa de apartado, forzar topes de descuento también en cotización/apartado, cablear/eliminar `generate_cfdi` | Corte de caja cuadra con devoluciones; ticket offline funciona |
+| **F2 — IA de datos (2-3 sem)** | A1 auto-categorización, A2 dedup SKUs, A3 OCR facturas, A8 imágenes | ≥90% SKUs categorizados; factura de proveedor → líneas en <1 min; catálogo con imágenes |
+| **F3 — IA en el flujo (2-3 sem)** | A4 visión Yonke, A6 semantic search, A5 anomalías, A7 preguntas, A10 venta cruzada | Grado sugerido por foto; búsqueda por sinónimo; alerta de descuento anómalo; sugeridos en carrito |
+| **F4 — Escala y producto (3-4 sem)** | PgBouncer + pool, `/metrics` de app + `pg_stat_statements`, A9 crédito, A12 churn, A11 forecast cuando haya datos, WA CRM piloto | 30+ tenants sin agotar conexiones; dashboard con métricas reales; score de crédito en fiado |
+
+---
+
+## 6. Métricas de éxito
+- **Seguridad/ops:** 0 servicios DB con `trust`; 0 secretos en unit files legibles; alertas de backup/Celery entregadas; 30 días de backups verificados (local + offsite).
+- **Producto:** corte de caja cuadra con devoluciones; 0 `ReferenceError` en POS; 100% de SKUs categorizados; catálogo público con >80% de items con imagen.
+- **IA:** ≥90% de facturas de proveedor parseadas sin captura manual; grado de pieza usada sugerido y aceptado en ≥70% de altas; búsquedas sin resultado reducidas >30% (semantic); ≥1 alerta real de anomalía accionada por mes.
diff --git a/docs/plans/2026-10-11-plan-maestro-mejoras.md b/docs/plans/2026-10-11-plan-maestro-mejoras.md
new file mode 100644
index 0000000..a9a77e5
--- /dev/null
+++ b/docs/plans/2026-10-11-plan-maestro-mejoras.md
@@ -0,0 +1,199 @@
+# Plan Maestro de Mejoras — Nexus Autoparts
+
+> **Fecha:** 11 Oct 2026 · **Base:** auditoría completa del sistema (6 investigaciones con evidencia en archivo:línea, SQL y curl)
+> **Énfasis:** MercadoLibre (eje comercial) + apertura del mercado de **partes usadas** (yonkes/deshuesaderos)
+
+---
+
+## 0. Resumen ejecutivo
+
+El sistema es un **esqueleto potente con el ciclo comercial roto en los últimos metros**. Lo que funciona bien es la base (motor de ventas con locks y partida doble, aislamiento multi-tenant, compatibilidad vehicular, OAuth de MeLi con refresh persistido, WA CRM recién instalado). Lo que está roto es justo lo que genera ingresos:
+
+| # | Bloqueante | Impacto | Evidencia |
+|---|---|---|---|
+| 1 | **Backups caídos desde el 1-oct** | Sin respaldo fresco de ningún tenant (riesgo existencial) | `scripts/backup_selective.sh:299-303` — `((deleted++))` devuelve 1 y mata el script bajo `set -euo pipefail` |
+| 2 | **Alta de tenants falla** | No se puede onboardear ningún cliente nuevo | `tenant_manager.py:201-211` aplica `v1.2_subdomain.sql` (migración de *master*) al tenant → rollback |
+| 3 | **CFDI 100% roto** | Ninguna factura se timbra | `invoicing_bp.py:65` — `SELECT … codigo_postal FROM branches` (la columna es `cp`) |
+| 4 | **Órdenes MeLi nunca se convierten a venta** | 31/31 órdenes de Rached sin vender en el POS | `marketplace_external_service.py:1619` — `inventory_record_sale(..., reference=)` no existe en la firma |
+| 5 | **Publicar en MeLi desde el POS está muerto** | Validar/Publicar no hacen nada (ReferenceError) | `inventory.js:2069,2135` llaman `_collectMeliCustomData()`, que no existe |
+| 6 | **Sync de stock MeLi falla 52/52** | Envía `price:0` a ML cada 15 min (0 éxitos desde junio) | `tasks.py:135-145` — listings con `inventory_id NULL` |
+| 7 | **Webhook MeLi nunca procesa** | Sin notificaciones en tiempo real, público y sin firma | `marketplace_external_bp.py:775-790` — consulta `tenant_config` en la BD maestra (no existe ahí) |
+| 8 | **Catálogo público con 500s** | El visitante nuevo ve error en buscador, categorías y detalle | `dashboard/server.py:977,1281,1994` contra tablas TecDoc retiradas |
+| 9 | **Plan `demo` → fallback `free`** | Estrada (157,243 productos) bloqueada en 100 productos | `billing.py:25-28` + `tenants.plan='demo'` |
+| 10 | **`/api/admin/tenants*` sin autenticación** | Cualquiera en internet lista y modifica módulos de tenants | `dashboard/server.py:4660,4674,4691` |
+
+**Y el hallazgo estratégico:** el negocio de **partes usadas es hoy imposible de operar** en el sistema (no existe condición, ni pieza única, ni vehículo donador, ni multi-foto) — y MeLi publica todo como `"condition":"new"` hardcodeado. Abrir ese mercado requiere un cambio de modelo de datos, no cosmético.
+
+---
+
+## 1. MercadoLibre — cerrar el ciclo antes de soñar en grande
+
+### 1.1 Fase A — Desbloquear lo que ya está construido (1 semana)
+
+| Tarea | Detalle | Esfuerzo |
+|---|---|---|
+| A1 | Implementar `_collectMeliCustomData()`, `_pollMeliAsync()`, `_renderPublishResult()` en `inventory.js` (los inputs de título/precio/stock y atributos **ya se generan pero nunca se envían**) y mandar `custom_data` al backend (`marketplace_external_service.py:669-673`) | M |
+| A2 | Corregir `convert_order_to_sale`: usar `record_sale(conn, inventory_id, branch_id, quantity, sale_id=…)` — hoy `TypeError` → rollback → 31 órdenes sin convertir (`service.py:1619`, `inventory_engine.py:199`) | S |
+| A3 | `import_existing_listings`: poblar `inventory_id` por `seller_custom_field`/`part_number`/alias y **saltar el push cuando `price<=0`**; el `ON CONFLICT` no aplica con NULL (`service.py:1785`) | S |
+| A4 | Webhook: resolver tenant por `meli_user_id` consultando cada `tenant_config` de tenant (no la maestra), validar `X-Signature` con `validate_webhook_signature` (ya existe, nunca se llama) y procesar el `resource` correcto (no un sync completo) | M |
+| A5 | Normalizar `status` de preguntas (`UPPER`) — hoy 4 preguntas reales no se pueden responder por comparar `'unanswered'` vs `UNANSWERED` (`marketplace_external.js:516`) | S |
+| A6 | Pasar `tenant_conn` a `_get_meli_service` en `sync_meli_stock_price_task` (`tasks.py:112`) para no perder el refresh token rotado | S |
+| A7 | Pausar/reactivar automáticamente por stock (0 → pausar, >0 → reactivar) en la cola `meli_sync_queue` + drenarla por timer | M |
+| A8 | Sincronizar órdenes en todos los estados (`cancelled`, `payment_required`…) y corregir `buyer_nickname` (ML ya no manda `from.nickname`) | S |
+| A9 | Corregir el **estimador de comisiones por artículo** (busca `#meliFee-<id>` en un DOM que nunca lo crea, `inventory.js:2295`) | S |
+| A10 | Definir/otorgar el permiso `marketplace.manage` (no existe en ningún tenant) y proteger los GET del módulo | S |
+
+**Resultado:** el ciclo MeLi→POS (publicar → vender → convertir → facturar) cierra por primera vez.
+
+### 1.2 Fase B — Publicar en volumen (2-3 semanas) ← el verdadero cuello de botella
+
+| Tarea | Detalle | Esfuerzo |
+|---|---|---|
+| B1 | **Pipeline masivo de imágenes** — el bloqueo real: 0 imágenes en 6,851 SKUs de Rached, 0 en 14,568 de Capi, 1 en 157,243 de Estrada. ML exige imagen. Usar los servicios de scraping existentes (`services/image_scraper.py`, `image_service.py`) + una cola por lotes con revisión | L |
+| B2 | **Selección y publicación por lotes real**: hoy la UI solo selecciona una página de 50 y un solo `category_id` para todo el lote. Agregar: seleccionar todo el resultado filtrado, categorización asistida por IA (nombre+marca→categoría ML con `domain_discovery`), y confirmación por grupos | M |
+| B3 | **Rate-limit/backoff** en el worker de publicación (Celery) con reintentos y progreso visible (barra + reporte de fallidos por motivo) | M |
+| B4 | **Ciclo export→edición→reimportación** para fitment e imágenes (hoy el export no incluye compat ni image_url) | M |
+
+### 1.3 Fase C — Vender más (3-4 semanas)
+
+| Oportunidad | Hoy | Qué agregar |
+|---|---|---|
+| **Variaciones** | Nada (0 referencias a `variations`) | Agrupar SKUs en una publicación con `variations`/`attribute_combinations` (mismo producto, varias medidas) |
+| **Catálogo de MeLi** | Solo `category_id` | Detectar categorías que **exigen catálogo** (`catalog_listing`, `catalog_product_id`), avisar en la UI y usar `price_to_win` para competir por la oferta ganadora |
+| **Promociones** | Nada | Oferta del día, descuentos por volumen, `sale_price` por publicación |
+| **Envíos** | Solo me2/custom, sin etiquetas | Flex, generación de etiqueta, `mark_ready_to_ship` (existe y nunca se usa), tracking |
+| **Preguntas** | Manual y roto | Auto-respuesta con `ai_chat.py` + plantillas por categoría + SLA visible |
+| **Reputación** | Nada | Panel con `/users/{id}/reputation`: nivel, reclamos, cancelaciones, tiempo de despacho |
+| **Rentabilidad por publicación** | Solo el estimado al publicar (no se guarda) | Persistir comisión + envío + costo en `marketplace_listings` y panel de margen real por SKU |
+| **Facturación de ventas MeLi** | Ningún enganche a CFDI | Encolar CFDI automático al convertir orden (con RFC del comprador si lo pide) |
+| **Cancelaciones/reintegros/claims** | Solo estado local | Llamar a la API de ML (cancelar, devoluciones, mediaciones) con SLA |
+| **Multi-cuenta** | 1 cuenta MeLi por tenant | Varias cuentas MeLi por tenant (varias marcas) con selección por publicación |
+| **Panel comercial** | Nada | Ventas MeLi vs POS, conversión, SKUs sin stock con publicación activa, top ventas, alertas de publicaciones caídas |
+
+### 1.4 Fase D — Robustez operativa
+
+- Onboarding asistido de credenciales MeLi (hoy es manual y el fallo típico —ACCA— es un `client_secret` regenerado que nadie detecta hasta que el cliente llama; ya mejoramos el mensaje, falta un **chequeo proactivo diario** que avise antes).
+- Versionar el timer de sync en el repo (hoy vive solo en `/etc/systemd/system`).
+- Pruebas automatizadas del módulo (hoy: **cero** tests de MeLi).
+
+---
+
+## 2. Abrir el mercado: negocios de SOLO partes usadas (yonkes/deshuesaderos)
+
+### 2.1 Por qué hoy no se puede (evidencia)
+
+| Requisito del yonke | Estado | Dónde se rompe |
+|---|---|---|
+| Pieza única (1-de-1, sin código de parte) | ❌ | `part_number` es **NOT NULL + UNIQUE global** (`v4.0_multi_branch.sql:214`); dos espejos iguales de donadores distintos **se fusionan** en el import |
+| Saber de qué auto salió (donador) | ❌ | No hay `donor_vin`/`donor_mileage`; la compat existente es "sirve para", no "salió de" |
+| Condición nuevo/usado/A/B/C | ❌ | **0 columnas** de condición en todo el esquema; MeLi publica `"condition":"new"` hardcodeado |
+| Fotos múltiples (ángulos + daños) | ❌ | Un solo `image_url` varchar; cada subida **reemplaza** la anterior (`inventory_bp.py:995`) |
+| Garantía por días (15/30 días) | ⚠️ | Solo `warranty_months` (mínimo 1 mes) |
+| Buscar "todo lo que tengo de un Civic 2015" | ❌ | La navegación por vehículo exige `part_number` para poblar compat |
+| Consignación / piezas de terceros | ❌ | No existe modelo de propiedad; todo el stock se asume propio |
+| Valuación con costo 0 | ⚠️ | Vender funciona, pero los reportes de valoración/ABC dan $0 (`inventory_bp.py:1879`) |
+
+### 2.2 Plan de producto: "Nexus Yonke" (5-6 semanas)
+
+**M1 — Modelo de datos (1 semana)**
+- `inventory`: `condition` (`nuevo|usado|reconstruido`), `condition_grade` (A/B/C/D), `is_unique_piece`, `serial_number`, `donor_vin`, `donor_make/model/year`, `donor_mileage_km`, `ownership` (`propio|consigna`), `acquisition_cost`.
+- **Relajar unicidad**: índice único **parcial** `WHERE part_number IS NOT NULL` + auto-SKU para piezas únicas (`USADO-<VIN-corto>-<secuencia>`), manteniendo el flujo de partes nuevas intacto.
+- Nueva tabla `inventory_images (inventory_id, url, order, is_primary)` con migración del `image_url` actual.
+- `warranties`: `warranty_days` + política por defecto de usados en `tenant_config`.
+- Nuevas tablas `consignments` / `consignment_items` (tercero, pieza, precio pactado, comisión, estado: en_consigna/vendida/devuelta/liquidada).
+
+**M2 — Alta rápida en mostrador (1-2 semanas)**
+- Flujo "Registrar pieza usada": **foto múltiple** (cámara del tablet) + **VIN del donador** (el decodificador NHTSA ya existe: `/pos/api/catalog/vin`) + pieza + precio + condición. Objetivo: **< 30 segundos por pieza**.
+- **Ingreso de donador completo**: registrar el auto (VIN, km, color) y generar N piezas colgadas de ese donador con un solo flujo (hoy: pieza por pieza).
+- Etiqueta propia por pieza única (código de barras ya implementado) para control físico en el patio.
+
+**M3 — Búsqueda por donador (1 semana)**
+- Filtro/búsqueda por vehículo **donador** (marca/modelo/año/color/km) sin requerir `part_number`; indexar esos campos en Meilisearch.
+- Buscador "¿qué tengo de este auto?" + "¿qué tengo compatible con este auto?" (compat comprador, ya existe) como dos pestañas distintas.
+
+**M4 — MeLi para usados (1 semana)**
+- `condition` dinámico en el payload (usado/remanufacturado) + grado en el título/atributos.
+- Mapeo de categorías ML para usados (ML tiene categorías de autopartes usadas con reglas propias).
+- Fotos múltiples al anuncio (ML acepta hasta 10; hoy se manda 1).
+
+**M5 — Consignación y garantía (1-2 semanas)**
+- Liquidación a consignantes (reporte por periodo, comisión pactada, estado de cuenta del consignante).
+- Garantía de usados por días con política por defecto y comprobante impreso.
+- Reportes del segmento: rotación por donador, piezas sin foto, días en patio, margen por pieza.
+
+**M6 — Plan y onboarding comercial (3-4 días)**
+- Plan **"Yonke"** (precio menor): sin catálogo TecDoc, límites amplios, módulos ajustados, onboarding sin importación de catálogo nuevo (alta por escaneo/foto).
+- Landing y material para el segmento (hoy `grep yonke|usadas` en docs/pitch → 0 resultados).
+- **Marketplace B2B entre yonkes** (`is_seller`, hoy nunca activado en ningún tenant) como diferenciador: intercambio de piezas usadas entre deshuesaderos de la red.
+
+---
+
+## 3. Núcleo comercial y fiscal
+
+**CFDI (crítico):**
+- Corregir `codigo_postal` → `cp` (`invoicing_bp.py:65`) — desbloquea ingreso, egreso, PDF y factura global.
+- **Complementos de pago (REP)** para PPD: `build_pago_payload` existe y nunca se invoca; hoy toda venta a crédito incumple SAT.
+- Subir CSD por sucursal (hoy `has_csd:false` → ni timbrando funcionaría).
+- Devoluciones: encolar CFDI **egreso** automático + reembolso trazado en caja.
+- Moneda/tipo de cambio en facturación (`invoicing_bp.py:83` no lee `currency`).
+
+**Contabilidad:**
+- Pólizas para abonos de clientes, cortes de caja, devoluciones y apartados (4 funciones de `accounting_engine` existen y **nunca se llaman**).
+- `record_return_entry` (no existe).
+- Dejar de perder asientos en silencio: los hooks `try/except: pass` deben loggear (ya se perdió 1 de 18 ventas sin aviso).
+- **Exportables para el contador**: pólizas, balanza, estado de resultados, DIOT (hoy solo antigüedad de saldos).
+- CxP real con tabla de pagos a proveedores (`paid = 0  # TODO`).
+- Caja: pagos mixtos no suman al efectivo esperado; apartados **duplican** el efectivo en el corte.
+
+---
+
+## 4. Catálogo, búsqueda y datos
+
+1. **Arreglar el catálogo público** (visitante nuevo ve 500): `/api/catalog/search`, `/api/search`, `/api/categories`, modo OEM y detalle de parte. Modo `local` por defecto + degradación elegante (el POS ya tiene el guard `_oem_blocked`, el dashboard no).
+2. **Conectar Meilisearch de verdad**: los índices `nexus_inventory_*` ya están poblados y actualizados a diario, **ningún código los consulta**; la búsqueda local hace seq-scan de 157k filas (175 ms).
+3. **Calidad de fitment**: el fitment QWEN generó **20.5M filas ruidosas** (Corolla 2012 → 411,685 "compatibles" ≈ 40% del catálogo). Política de confianza por fuente + validación + priorizar la compat de proveedor (limpia, 29,760 MYEs). Decidir el destino del catálogo maestro (los 15 GB de JSON TecDoc siguen en disco).
+4. **Imágenes masivas** (bloquea catálogo público y MeLi) — mismo pipeline de B1.
+5. **Import/export round-trip** con compat, imágenes y min/max/reorder.
+6. **Import con vehículo roto**: `bulk-import` devuelve 500 si el CSV trae make/model/year (consulta tablas de vehículos en la conexión del tenant) — justo el flujo de "para qué carro sirve".
+7. **Multi-sucursal real**: todo el stock vive en la sucursal 1 y `inventory.branch_id` es NULL; transferencias/conteos/reorden implementados y **sin uso** (reorden además filtra por la columna equivocada y `reorder_point` es NULL al 100%).
+8. **Etiquetas**: código de barras generado pero **sin endpoint de impresión de etiquetas** (solo tickets).
+
+---
+
+## 5. SaaS, onboarding y escala
+
+| Tema | Estado | Acción |
+|---|---|---|
+| Alta de tenants | ❌ Rota (v1.2/v1.6 de master en el runner de tenants) | Marcar como master-only/mover al runner master |
+| Template de tenant | Congelado en 32 tablas (le faltan ~56) | Refrescar template en cada alta o eliminarlo del flujo |
+| Planes | `demo`/`standard` no existen en `PLANS` → fallback a límites de `free` | Agregar planes reales o mapear; aplicar la expiración de demos |
+| Fuga de ingresos | Upgrade a `enterprise` **gratis** desde el POS + demos vencidas sin efecto + `subscriptions` desincronizada | Quitar el autoservicio, sincronizar `tenants.plan`↔`subscriptions.plan`, job diario de expiración |
+| Seguridad multi-tenant | `/api/admin/tenants*` del dashboard **sin auth** | Proteger + quitar `?tenant=` de la superficie pública |
+| Módulos | Dos nomenclaturas (`module_*` vs `*_enabled`) con defaults contradictorios | Unificar y sembrar en el template |
+| Drift de esquema | `v3.5_whatsapp_state_machine` marcada `SKIP` → 6 tenants sin `wa_customer_links`/`wa_learning_sessions` → **el chatbot WhatsApp falla en esos tenants** | Aplicar la migración real |
+| Bases huérfanas | 6 DBs `tenant_*` sin fila en `tenants` (~84 MB) | Limpiar |
+| Reset de demo | No limpia clientes ni conversaciones (filtra PII entre prospectos) | Completar el truncado |
+| Escala a 100 tenants | Pool 2-20 conexiones × 8 workers × 100 tenants > límite de Postgres; todo con superusuario | PgBouncer + roles por tenant + métricas por tenant |
+| Secretos | `POS_JWT_SECRET`/API keys en unit files legibles por grupo | EnvironmentFile root-only + rotación |
+
+---
+
+## 6. Roadmap propuesto (6 sprints)
+
+| Sprint | Foco | Entregable verificable |
+|---|---|---|
+| **S1 — Estabilizar (1 sem)** | Backups (fix `((deleted++))` + verificar drill), alta de tenants, auth de `/api/admin/tenants*`, plan `demo`, expiración de demos | Respaldo fresco de 9 bases verificado con restore; un tenant nuevo creado de punta a punta |
+| **S2 — MeLi cierra el ciclo (1 sem)** | Fase A completa (10 tareas) | Publicar 1 SKU desde el POS → vender en ML → orden convertida a venta → CFDI encolado |
+| **S3 — Volumen MeLi (2 sem)** | Imágenes masivas + lotes + rate-limit + export/import con compat | 200+ SKUs publicados sin intervención manual, con progreso y reporte de fallos |
+| **S4 — Yonke MVP (2-3 sem)** | M1+M2+M3 (modelo, alta rápida por donador, búsqueda por donador) | Un deshuesadero de prueba carga 50 piezas usadas con foto y VIN, y las encuentra por vehículo |
+| **S5 — Fiscal y contabilidad (2 sem)** | CFDI (cp, REP, CSD, egresos), pólizas faltantes, caja (mixtos/apartados), exportables contador | Factura timbrada real; estado de resultados cuadra; DIOT exportable |
+| **S6 — Vender más + abrir mercado (2-3 sem)** | MeLi Fase C (variaciones, catálogo, reputación, rentabilidad, preguntas IA) + Yonke M4-M6 (ML usados, consignación, plan Yonke) | Panel de rentabilidad por publicación; primera pieza usada publicada en ML como `used` |
+
+---
+
+## 7. Métricas de éxito
+
+- **Confiabilidad:** 30 días consecutivos con respaldo verificado; 0 tenants con esquema incompleto; 0 endpoints 500 en el barrido automatizado.
+- **MercadoLibre:** conversión de órdenes → venta en el POS (hoy 0%, meta 100%); publicaciones sincronizadas sin error (hoy 0/52, meta 100%); ≥200 SKUs publicados en volumen; % de órdenes facturadas automáticamente.
+- **Yonke:** tiempo de alta de una pieza usada < 30 s; 100% de piezas usadas con foto y VIN de donador; búsqueda por donador con resultados < 500 ms; 1 cliente del segmento en producción.
+- **Comercial:** tenants de pago con plan correcto aplicado (hoy 3 con plan desincronizado), fin de la fuga por autoservicio, ≥1 cliente nuevo onboardeado sin intervención manual.
diff --git a/manager/README.md b/manager/README.md
index 5a01ac9..bb6c5e7 100644
--- a/manager/README.md
+++ b/manager/README.md
@@ -8,6 +8,7 @@ Panel de control central para gestionar instancias multi-tenant de Nexus POS.
 - **Monitorear** salud de todos los servicios (POS, DB, Redis, Quart, Systemd)
 - **Gestionar tenants**: activar/desactivar, resetear datos, eliminar
 - **Ejecutar migraciones** de schema en todos los tenants desde una UI
+- **Cartera**: métricas de negocio por tenant (rollup diario), score de salud/riesgo de churn y anomalías entre tenants
 - **Dashboard** con estadísticas globales y alertas de demos por expirar
 
 ## Estructura
@@ -21,12 +22,15 @@ manager/
 ├── services/               # Lógica de negocio
 │   ├── health_service.py   # Health checks de infraestructura
 │   ├── tenant_service.py   # CRUD tenants (usa tenant_manager del POS)
+│   ├── portfolio_service.py# Rollup de métricas, lectura de cartera y anomalías
+│   ├── business_metrics.py # Z-score robusto multi-tenant + score de salud
 │   └── migration_service.py# Orquestación de migraciones
 ├── blueprints/             # API REST
 │   ├── auth_bp.py          # Login/logout JWT
 │   ├── tenants_bp.py       # Gestión de tenants
 │   ├── demos_bp.py         # Creación de demos
 │   ├── health_bp.py        # Health checks
+│   ├── portfolio_bp.py     # /api/tenants/metrics y /api/portfolio/anomalies
 │   └── admin_bp.py         # Dashboard stats y migraciones
 ├── static/                 # Frontend SPA
 │   ├── css/manager.css
@@ -193,6 +197,29 @@ systemctl start nexus-manager
 - Ve a **Migraciones** para ver la versión de schema de cada tenant
 - **Ejecutar todas pendientes** aplica migraciones en TODOS los tenants
 
+### Cartera (métricas, salud y anomalías)
+- La sección **Cartera** muestra el score de salud/riesgo de churn por tenant y
+  las anomalías detectadas entre tenants (z-score robusto con mediana + MAD).
+- Los datos vienen de la tabla maestra `tenant_metrics_daily`, que se llena con
+  el rollup diario:
+
+  ```bash
+  python3 scripts/rollup_tenant_metrics.py              # hoy, tenants activos
+  python3 scripts/rollup_tenant_metrics.py --days 30    # backfill últimos 30 días
+  python3 scripts/rollup_tenant_metrics.py --all        # incluir inactivos
+  ```
+
+  El script crea la tabla de forma idempotente (no usa el runner de migraciones
+  de tenants) y es seguro re-ejecutarlo para la misma fecha.
+
+- Endpoints (requieren `Authorization: Bearer <token>`):
+  - `GET /api/tenants/metrics?days=14` — rollup + `{health_score, band, signals}` por tenant
+  - `GET /api/portfolio/anomalies?date=YYYY-MM-DD&z=3.0&min_tenants=5` — anomalías entre tenants
+
+  Con menos de `min_tenants` tenants en la cohorte el detector devuelve
+  `cold_start: true` y no emite hallazgos. La "actividad" usa `audit_log` como
+  proxy porque no se persisten logins individuales.
+
 ---
 
 ## Notas de seguridad
diff --git a/manager/app.py b/manager/app.py
index c84236b..f884388 100644
--- a/manager/app.py
+++ b/manager/app.py
@@ -15,6 +15,7 @@ from blueprints.tenants_bp import tenants_bp
 from blueprints.demos_bp import demos_bp
 from blueprints.health_bp import health_bp
 from blueprints.admin_bp import admin_bp
+from blueprints.portfolio_bp import portfolio_bp
 
 
 def create_app():
@@ -31,6 +32,7 @@ def create_app():
     app.register_blueprint(demos_bp)
     app.register_blueprint(health_bp)
     app.register_blueprint(admin_bp)
+    app.register_blueprint(portfolio_bp)
 
     # ─── Frontend Routes ───────────────────────────────────────────────────
     @app.route("/")
@@ -57,6 +59,10 @@ def create_app():
     def health_page():
         return render_template("index.html")
 
+    @app.route("/portfolio")
+    def portfolio_page():
+        return render_template("index.html")
+
     @app.route("/migrations")
     def migrations_page():
         return render_template("index.html")
diff --git a/manager/blueprints/portfolio_bp.py b/manager/blueprints/portfolio_bp.py
new file mode 100644
index 0000000..0fcc322
--- /dev/null
+++ b/manager/blueprints/portfolio_bp.py
@@ -0,0 +1,48 @@
+"""Portfolio operations blueprint: business metrics, health and anomalies.
+
+Endpoints
+---------
+``GET /api/tenants/metrics``      rollup window + health score per tenant
+``GET /api/portfolio/anomalies``  cross-tenant anomalies (median + MAD z-score)
+"""
+from datetime import date as date_cls
+
+from flask import Blueprint, jsonify, request
+from services import portfolio_service
+
+from blueprints.auth_bp import require_manager_auth
+
+portfolio_bp = Blueprint("portfolio", __name__, url_prefix="/api")
+
+
+@portfolio_bp.route("/tenants/metrics", methods=["GET"])
+@require_manager_auth
+def tenant_metrics():
+    days = request.args.get("days", 14, type=int)
+    include_inactive = request.args.get("all", "false").lower() == "true"
+    return jsonify(portfolio_service.get_tenant_metrics(
+        days=days, include_inactive=include_inactive))
+
+
+@portfolio_bp.route("/portfolio/anomalies", methods=["GET"])
+@require_manager_auth
+def portfolio_anomalies():
+    target = request.args.get("date")
+    if target:
+        try:
+            date_cls.fromisoformat(target)
+        except ValueError:
+            return jsonify({"error": "date must be YYYY-MM-DD"}), 400
+
+    kwargs = {
+        "date": target,
+        "include_inactive": request.args.get("all", "false").lower() == "true",
+    }
+    z = request.args.get("z", type=float)
+    if z is not None:
+        kwargs["z_threshold"] = z
+    min_tenants = request.args.get("min_tenants", type=int)
+    if min_tenants is not None:
+        kwargs["min_tenants"] = min_tenants
+
+    return jsonify(portfolio_service.get_portfolio_anomalies(**kwargs))
diff --git a/manager/services/business_metrics.py b/manager/services/business_metrics.py
new file mode 100644
index 0000000..8cb32f5
--- /dev/null
+++ b/manager/services/business_metrics.py
@@ -0,0 +1,352 @@
+"""Portfolio-level business metrics: cross-tenant anomaly detection and a
+tenant health / churn-risk heuristic.
+
+This is deliberately *not* conversational AI. At a portfolio of ~8 tenants the
+honest tool is a robust statistic and a transparent heuristic, so every number
+here is explainable:
+
+* ``detect_portfolio_anomalies`` compares each tenant against the cohort of the
+  other tenants on the same day using a median + MAD robust z-score. MAD is
+  used instead of the mean/standard deviation because with a handful of points
+  a single runaway tenant would otherwise inflate the scale and hide its own
+  anomaly.
+* ``compute_health`` is a weighted penalty/bonus heuristic over usage signals
+  (sales recency, activity, module usage, error counts and trend).
+
+Both functions are pure (no DB access) so they can be unit-tested and reused
+from the manager API and from scripts. Cold start is explicit: with fewer than
+``min_tenants`` observations in the cohort the detector reports
+``cold_start=True`` and raises no flags rather than inventing signal.
+"""
+
+from datetime import UTC, datetime
+
+# Below this many tenants in the cohort we do not trust cross-tenant statistics.
+MIN_COHORT = 5
+
+# Robust z threshold. 3.0 robust sigmas with 8 tenants is already conservative
+# (MAD is small, so ~3 is a genuinely unusual point, not a normal spread).
+DEFAULT_Z = 3.0
+
+# Metrics compared across tenants. Everything is derived from the daily rollup.
+COHORT_METRICS = [
+    ("ventas_total", "Ventas (MXN)"),
+    ("ventas_count", "Tickets"),
+    ("ticket_promedio", "Ticket promedio"),
+    ("clientes_nuevos", "Clientes nuevos"),
+    ("actividad_count", "Eventos de actividad"),
+    ("errores_5xx", "Errores 5xx"),
+    ("items_activos", "Items activos"),
+    ("skus", "SKUs"),
+    ("clientes", "Clientes"),
+    ("fitment_pct", "Cobertura fitment (%)"),
+]
+
+# Health bands, high to low.
+BANDS = [
+    (80, "healthy", "Saludable"),
+    (60, "stable", "Estable"),
+    (40, "at_risk", "En riesgo"),
+    (0, "critical", "Crítico"),
+]
+
+SEVERITY_ORDER = {"high": 0, "medium": 1, "low": 2}
+
+
+def _median(values):
+    """Median of a list of floats (None for empty)."""
+    vals = sorted(float(v) for v in values if v is not None)
+    n = len(vals)
+    if n == 0:
+        return None
+    mid = n // 2
+    if n % 2:
+        return vals[mid]
+    return (vals[mid - 1] + vals[mid]) / 2.0
+
+
+def robust_stats(values):
+    """Return ``(median, scale)`` for a sample.
+
+    ``scale`` is the MAD when non-zero. When most values are identical
+    (MAD == 0, common for sparse metrics such as daily sales) it falls back to
+    a scaled mean absolute deviation so a real outlier is still measurable;
+    when the sample is completely constant it returns 0.0 and the caller skips
+    the metric instead of dividing by zero.
+    """
+    vals = [float(v) for v in values if v is not None]
+    if not vals:
+        return None, None
+    med = _median(vals)
+    mad = _median([abs(v - med) for v in vals])
+    if mad > 1e-9:
+        return med, mad
+    meanad = sum(abs(v - med) for v in vals) / len(vals)
+    if meanad > 1e-9:
+        return med, meanad * 1.2533
+    return med, 0.0
+
+
+def robust_z(value, med, scale):
+    """Robust z-score ``0.6745 * (x - med) / scale`` or None if undefinable."""
+    if value is None or med is None or scale is None or scale <= 1e-9:
+        return None
+    return 0.6745 * (float(value) - med) / scale
+
+
+def detect_portfolio_anomalies(rows, date=None, metrics=None,
+                               min_tenants=MIN_COHORT, z_threshold=DEFAULT_Z):
+    """Flag tenants whose metric is unusually high/low versus the cohort.
+
+    ``rows`` is a list of dicts, one per tenant for a single day, each carrying
+    the metric keys from :data:`COHORT_METRICS` plus ``tenant_id`` and
+    ``tenant_name``. Returns a report dict with ``anomalies`` sorted by
+    strength and a ``cold_start`` flag.
+    """
+    metrics = metrics or [m for m, _ in COHORT_METRICS]
+    labels = dict(COHORT_METRICS)
+    cohort_size = len(rows)
+
+    anomalies = []
+    evaluated = []
+    skipped = []
+
+    if cohort_size < min_tenants:
+        for key in metrics:
+            skipped.append({"metric": key, "reason": "cohorta insuficiente",
+                            "cohort_size": cohort_size})
+
+    for key in metrics:
+        values = [r.get(key) for r in rows if r.get(key) is not None]
+        if cohort_size < min_tenants:
+            continue
+        if len(values) < min_tenants:
+            skipped.append({"metric": key, "reason": "cohorta insuficiente",
+                            "cohort_size": len(values)})
+            continue
+        med, scale = robust_stats(values)
+        if not scale:
+            skipped.append({"metric": key, "reason": "sin varianza en la cohorte",
+                            "cohort_size": len(values)})
+            continue
+        evaluated.append({
+            "metric": key,
+            "label": labels.get(key, key),
+            "cohort_median": round(med, 2),
+            "cohort_mad": round(scale, 2),
+            "cohort_size": len(values),
+        })
+        for row in rows:
+            value = row.get(key)
+            z = robust_z(value, med, scale)
+            if z is None or abs(z) <= z_threshold:
+                continue
+            abs_z = abs(z)
+            severity = "high" if abs_z >= z_threshold * 1.5 else "medium"
+            anomalies.append({
+                "tenant_id": row.get("tenant_id"),
+                "tenant_name": row.get("tenant_name"),
+                "metric": key,
+                "label": labels.get(key, key),
+                "value": round(float(value), 2),
+                "cohort_median": round(med, 2),
+                "cohort_mad": round(scale, 2),
+                "z": round(z, 2),
+                "direction": "peak" if z > 0 else "drop",
+                "severity": severity,
+            })
+
+    anomalies.sort(key=lambda a: abs(a["z"]), reverse=True)
+
+    by_tenant = {}
+    for a in anomalies:
+        entry = by_tenant.setdefault(a["tenant_id"], {
+            "tenant_id": a["tenant_id"],
+            "tenant_name": a["tenant_name"],
+            "findings": [],
+        })
+        entry["findings"].append({
+            "metric": a["metric"], "label": a["label"], "value": a["value"],
+            "z": a["z"], "direction": a["direction"], "severity": a["severity"],
+        })
+
+    return {
+        "generated_at": datetime.now(UTC).isoformat(),
+        "date": str(date) if date else None,
+        "cold_start": cohort_size < min_tenants,
+        "cohort_size": cohort_size,
+        "thresholds": {
+            "method": "robust z-score (median + MAD)",
+            "z_threshold": z_threshold,
+            "min_tenants": min_tenants,
+        },
+        "metrics_evaluated": evaluated,
+        "metrics_skipped": skipped,
+        "anomalies": anomalies,
+        "by_tenant": by_tenant,
+        "summary": {
+            "flagged_tenants": len(by_tenant),
+            "findings": len(anomalies),
+        },
+    }
+
+
+def _band_for(score):
+    for threshold, key, label in BANDS:
+        if score >= threshold:
+            return key, label
+    return "critical", "Crítico"
+
+
+def _days_since(ts, now):
+    if ts is None:
+        return None
+    if isinstance(ts, str):
+        try:
+            ts = datetime.fromisoformat(ts.replace("Z", "+00:00"))
+        except ValueError:
+            return None
+    if ts.tzinfo is None:
+        ts = ts.replace(tzinfo=UTC)
+    return max(0, (now - ts).days)
+
+
+def compute_health(tenant, history, now=None):
+    """Heuristic health / churn-risk score for one tenant.
+
+    ``tenant`` is the master row (``id``, ``name``, ``plan``, ``is_active``,
+    optional ``expires_at``). ``history`` is the tenant's rollup rows, oldest
+    first. Returns ``{"health_score", "band", "band_label", "signals",
+    "cold_start", "components"}``.
+
+    The score starts at 100 and applies transparent penalties. Activity is
+    measured from ``audit_log`` events because the platform does not persist
+    per-login rows; the API response notes this proxy explicitly.
+    """
+    now = now or datetime.now(UTC)
+    signals = []
+    components = {}
+    score = 100.0
+
+    def add_penalty(points, code, severity, detail):
+        nonlocal score
+        score -= points
+        signals.append({"code": code, "severity": severity, "detail": detail})
+
+    if not history:
+        return {
+            "health_score": None,
+            "band": "unknown",
+            "band_label": "Sin datos",
+            "cold_start": True,
+            "signals": [{"code": "no_metrics", "severity": "medium",
+                         "detail": "Sin rollup de métricas; ejecuta "
+                                   "scripts/rollup_tenant_metrics.py"}],
+            "components": {},
+        }
+
+    latest = history[-1]
+    recent7 = history[-7:]
+    prev7 = history[-14:-7]
+
+    # ── 1. Tenant lifecycle ────────────────────────────────────────────────
+    if tenant and not tenant.get("is_active", True):
+        add_penalty(25, "tenant_inactive", "high", "Tenant desactivado")
+    expires_at = (tenant or {}).get("expires_at")
+    if expires_at is not None:
+        if expires_at.tzinfo is None:
+            expires_at = expires_at.replace(tzinfo=UTC)
+        if expires_at < now:
+            add_penalty(15, "subscription_expired", "high",
+                        "Suscripción vencida")
+
+    # ── 2. Sales recency ───────────────────────────────────────────────────
+    days_sale = _days_since(latest.get("ultima_venta_at"), now)
+    components["dias_desde_ultima_venta"] = days_sale
+    if days_sale is None:
+        add_penalty(20, "no_sales_ever", "high",
+                    "Sin ventas registradas en el histórico")
+    elif days_sale > 30:
+        add_penalty(30, "stale_sales", "high",
+                    f"Sin ventas en {days_sale} días")
+    elif days_sale > 14:
+        add_penalty(15, "slow_sales", "medium",
+                    f"Última venta hace {days_sale} días")
+    elif days_sale > 7:
+        add_penalty(6, "quiet_sales", "low",
+                    f"Última venta hace {days_sale} días")
+
+    # ── 3. Activity recency (proxy for logins) ─────────────────────────────
+    days_act = _days_since(latest.get("ultima_actividad_at"), now)
+    components["dias_desde_ultima_actividad"] = days_act
+    act7 = sum((r.get("actividad_count") or 0) for r in recent7)
+    components["actividad_7d"] = act7
+    if days_act is None:
+        add_penalty(15, "no_activity", "medium",
+                    "Sin actividad operativa registrada")
+    elif days_act > 14:
+        add_penalty(12, "stale_activity", "medium",
+                    f"Sin actividad en {days_act} días")
+    elif days_act > 7:
+        add_penalty(6, "slow_activity", "low",
+                    f"Última actividad hace {days_act} días")
+    elif act7 == 0:
+        add_penalty(8, "idle_week", "low", "Sin eventos de actividad en 7 días")
+
+    # ── 4. Trend (last 7 days vs previous 7) ───────────────────────────────
+    cur7 = sum(float(r.get("ventas_total") or 0) for r in recent7)
+    prv7 = sum(float(r.get("ventas_total") or 0) for r in prev7)
+    components["ventas_7d"] = round(cur7, 2)
+    components["ventas_7d_previas"] = round(prv7, 2)
+    if prv7 > 0:
+        change = (cur7 - prv7) / prv7
+        components["tendencia_ventas_pct"] = round(change * 100, 1)
+        if change <= -0.5:
+            add_penalty(18, "sales_drop", "high",
+                        f"Ventas 7d cayeron {abs(change) * 100:.0f}% vs semana previa")
+        elif change <= -0.2:
+            add_penalty(8, "sales_slowdown", "medium",
+                        f"Ventas 7d bajaron {abs(change) * 100:.0f}% vs semana previa")
+        elif change >= 0.2:
+            score += 5
+            signals.append({"code": "sales_growth", "severity": "low",
+                            "detail": f"Ventas 7d crecieron {change * 100:.0f}%"})
+    elif cur7 > 0:
+        signals.append({"code": "sales_new", "severity": "low",
+                        "detail": "Ventas en los últimos 7 días sin semana previa comparable"})
+
+    # ── 5. Errors ──────────────────────────────────────────────────────────
+    err7 = sum((r.get("errores_5xx") or 0) for r in recent7)
+    components["errores_5xx_7d"] = err7
+    if err7 > 0:
+        add_penalty(min(20, 4 + err7), "api_errors", "medium",
+                    f"{err7} errores 5xx de la API en 7 días")
+
+    # ── 6. Module usage / engagement ───────────────────────────────────────
+    modules = latest.get("uso_modulos") or {}
+    enabled = [k for k, v in modules.items()
+               if k.startswith("module_") and v]
+    components["modulos_activos"] = len(enabled)
+    if not enabled:
+        add_penalty(6, "no_modules", "low",
+                    "Ningún módulo opcional activado")
+
+    # ── 7. Catalog ─────────────────────────────────────────────────────────
+    items = latest.get("items_activos") or 0
+    components["items_activos"] = items
+    if items == 0:
+        add_penalty(15, "empty_catalog", "high", "Inventario activo vacío")
+
+    score = max(0.0, min(100.0, score))
+    band, band_label = _band_for(score)
+    signals.sort(key=lambda s: SEVERITY_ORDER.get(s["severity"], 9))
+
+    return {
+        "health_score": round(score, 1),
+        "band": band,
+        "band_label": band_label,
+        "cold_start": False,
+        "signals": signals,
+        "components": components,
+        "activity_proxy": "audit_log (no se persisten logins individuales)",
+    }
diff --git a/manager/services/portfolio_service.py b/manager/services/portfolio_service.py
new file mode 100644
index 0000000..dec315d
--- /dev/null
+++ b/manager/services/portfolio_service.py
@@ -0,0 +1,522 @@
+"""Portfolio operations service: per-tenant business metrics rollup, health
+scores and cross-tenant anomaly detection for the manager.
+
+Design notes
+------------
+* The daily rollup lives in the **master** database table
+  ``tenant_metrics_daily`` (one row per tenant per day). It is created
+  idempotently here and by ``scripts/rollup_tenant_metrics.py`` — the tenant
+  migration runner is intentionally not involved.
+* Point-in-time counts (inventory, customers, employees, db size, fitment)
+  are snapshots taken at collection time; daily activity metrics (sales,
+  new customers, audit events, API calls) are computed for the requested day.
+* Data sources are guarded: optional tables (``audit_log``,
+  ``api_request_logs``, ``inventory_vehicle_compat``) may be absent in an older
+  tenant and simply yield 0 / NULL instead of failing the rollup.
+* DSNs are resolved from environment exactly like the manager config
+  (``MASTER_DB_URL`` / ``TENANT_DB_URL_TEMPLATE``) with a local fallback, so the
+  script can run standalone without the manager's required secrets.
+"""
+
+import os
+from datetime import date as date_cls
+from datetime import datetime, time, timedelta
+from zoneinfo import ZoneInfo
+
+import psycopg2
+from psycopg2.extras import Json
+
+from services.business_metrics import (
+    DEFAULT_Z,
+    MIN_COHORT,
+    compute_health,
+    detect_portfolio_anomalies,
+)
+
+BUSINESS_TZ = os.environ.get("PORTFOLIO_TZ", "America/Mexico_City")
+
+_PGUSER = os.environ.get("PGUSER", "postgres")
+MASTER_DB_URL = (
+    os.environ.get("MASTER_DB_URL")
+    or os.environ.get("DATABASE_URL")
+    or f"postgresql://{_PGUSER}@localhost/nexus_autoparts"
+)
+TENANT_DB_URL_TEMPLATE = (
+    os.environ.get("TENANT_DB_URL_TEMPLATE")
+    or f"postgresql://{_PGUSER}@localhost/{{db_name}}"
+)
+
+DDL = """
+CREATE TABLE IF NOT EXISTS tenant_metrics_daily (
+    tenant_id           INTEGER NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+    date                DATE NOT NULL,
+    ventas_count        INTEGER NOT NULL DEFAULT 0,
+    ventas_total        NUMERIC(14,2) NOT NULL DEFAULT 0,
+    ticket_promedio     NUMERIC(12,2) NOT NULL DEFAULT 0,
+    ventas_canceladas   INTEGER NOT NULL DEFAULT 0,
+    clientes_nuevos     INTEGER NOT NULL DEFAULT 0,
+    items_activos       INTEGER NOT NULL DEFAULT 0,
+    skus                INTEGER NOT NULL DEFAULT 0,
+    clientes            INTEGER NOT NULL DEFAULT 0,
+    empleados_activos   INTEGER NOT NULL DEFAULT 0,
+    fitment_pct         NUMERIC(5,2),
+    uso_modulos         JSONB NOT NULL DEFAULT '{}'::jsonb,
+    ai_calls            INTEGER NOT NULL DEFAULT 0,
+    api_calls           INTEGER NOT NULL DEFAULT 0,
+    errores_5xx         INTEGER NOT NULL DEFAULT 0,
+    actividad_count     INTEGER NOT NULL DEFAULT 0,
+    ultima_venta_at     TIMESTAMPTZ,
+    ultima_actividad_at TIMESTAMPTZ,
+    db_size_mb          NUMERIC(12,2),
+    collected_at        TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    PRIMARY KEY (tenant_id, date)
+);
+CREATE INDEX IF NOT EXISTS idx_tenant_metrics_daily_date
+    ON tenant_metrics_daily (date);
+"""
+
+UPSERT = """
+INSERT INTO tenant_metrics_daily (
+    tenant_id, date, ventas_count, ventas_total, ticket_promedio,
+    ventas_canceladas, clientes_nuevos, items_activos, skus, clientes,
+    empleados_activos, fitment_pct, uso_modulos, ai_calls, api_calls,
+    errores_5xx, actividad_count, ultima_venta_at, ultima_actividad_at,
+    db_size_mb, collected_at
+) VALUES (
+    %(tenant_id)s, %(date)s, %(ventas_count)s, %(ventas_total)s,
+    %(ticket_promedio)s, %(ventas_canceladas)s, %(clientes_nuevos)s,
+    %(items_activos)s, %(skus)s, %(clientes)s, %(empleados_activos)s,
+    %(fitment_pct)s, %(uso_modulos)s, %(ai_calls)s, %(api_calls)s,
+    %(errores_5xx)s, %(actividad_count)s, %(ultima_venta_at)s,
+    %(ultima_actividad_at)s, %(db_size_mb)s, NOW()
+)
+ON CONFLICT (tenant_id, date) DO UPDATE SET
+    ventas_count = EXCLUDED.ventas_count,
+    ventas_total = EXCLUDED.ventas_total,
+    ticket_promedio = EXCLUDED.ticket_promedio,
+    ventas_canceladas = EXCLUDED.ventas_canceladas,
+    clientes_nuevos = EXCLUDED.clientes_nuevos,
+    items_activos = EXCLUDED.items_activos,
+    skus = EXCLUDED.skus,
+    clientes = EXCLUDED.clientes,
+    empleados_activos = EXCLUDED.empleados_activos,
+    fitment_pct = EXCLUDED.fitment_pct,
+    uso_modulos = EXCLUDED.uso_modulos,
+    ai_calls = EXCLUDED.ai_calls,
+    api_calls = EXCLUDED.api_calls,
+    errores_5xx = EXCLUDED.errores_5xx,
+    actividad_count = EXCLUDED.actividad_count,
+    ultima_venta_at = EXCLUDED.ultima_venta_at,
+    ultima_actividad_at = EXCLUDED.ultima_actividad_at,
+    db_size_mb = EXCLUDED.db_size_mb,
+    collected_at = NOW()
+"""
+
+
+def get_master_conn():
+    return psycopg2.connect(MASTER_DB_URL, connect_timeout=10)
+
+
+def tenant_dsn(db_name):
+    return TENANT_DB_URL_TEMPLATE.format(db_name=db_name)
+
+
+def ensure_metrics_table(conn=None):
+    """Create ``tenant_metrics_daily`` if missing. Idempotent."""
+    own = conn is None
+    conn = conn or get_master_conn()
+    try:
+        cur = conn.cursor()
+        cur.execute(DDL)
+        conn.commit()
+        cur.close()
+    finally:
+        if own:
+            conn.close()
+
+
+def list_tenants(conn=None, include_inactive=True):
+    own = conn is None
+    conn = conn or get_master_conn()
+    try:
+        cur = conn.cursor()
+        where = "" if include_inactive else "WHERE t.is_active = true"
+        cur.execute(f"""
+            SELECT t.id, t.name, t.db_name, t.plan, t.is_active, t.created_at,
+                   s.expires_at
+            FROM tenants t
+            LEFT JOIN subscriptions s ON s.tenant_id = t.id
+            {where}
+            ORDER BY t.id
+        """)
+        cols = [d[0] for d in cur.description]
+        rows = [dict(zip(cols, r)) for r in cur.fetchall()]
+        cur.close()
+        return rows
+    finally:
+        if own:
+            conn.close()
+
+
+# ─── Collection ────────────────────────────────────────────────────────────
+
+def _q(cur, sql, params=None, default=None):
+    """Run a scalar query, returning ``default`` if the object is missing."""
+    try:
+        cur.execute(sql, params or ())
+        row = cur.fetchone()
+        return row[0] if row and row[0] is not None else default
+    except Exception:
+        cur.connection.rollback()
+        return default
+
+
+def _load_modules(cur):
+    cfg = {}
+    try:
+        cur.execute("SELECT key, value FROM tenant_config")
+        cfg = dict(cur.fetchall())
+    except Exception:
+        cur.connection.rollback()
+
+    def flag(key):
+        return (cfg.get(key) or "").lower() == "true"
+
+    return {
+        "module_whatsapp": flag("module_whatsapp"),
+        "module_marketplace": flag("module_marketplace"),
+        "module_meli": flag("module_meli"),
+        "module_catalog": flag("module_catalog"),
+        "whatsapp_enabled": flag("whatsapp_enabled"),
+        "vehicle_compat_source": cfg.get("vehicle_compat_source"),
+        "facturapi": bool(cfg.get("cfdi_facturapi_key")),
+    }
+
+
+def _collect_tenant(tenant, start_dt, end_dt, dates):
+    """Collect one tenant's rollup rows for ``dates`` inside [start, end)."""
+    conn = psycopg2.connect(tenant_dsn(tenant["db_name"]), connect_timeout=10)
+    cur = conn.cursor()
+    try:
+        items_activos = _q(cur, "SELECT COUNT(*) FROM inventory WHERE is_active", default=0)
+        skus = _q(cur, "SELECT COUNT(DISTINCT part_number) FROM inventory "
+                       "WHERE is_active AND part_number IS NOT NULL", default=0)
+        clientes = _q(cur, "SELECT COUNT(*) FROM customers WHERE is_active", default=0)
+        empleados = _q(cur, "SELECT COUNT(*) FROM employees WHERE is_active", default=0)
+        db_size = _q(cur, "SELECT pg_database_size(current_database()) / 1048576.0")
+        ultima_venta = _q(cur, "SELECT MAX(created_at) FROM sales "
+                               "WHERE status = 'completed'")
+        ultima_actividad = _q(cur, "SELECT MAX(created_at) FROM audit_log")
+        modules = _load_modules(cur)
+
+        icv = _q(cur, "SELECT to_regclass('public.inventory_vehicle_compat') IS NOT NULL",
+                 default=False)
+        if icv:
+            fit = _q(cur, "SELECT COUNT(*) FROM inventory i WHERE i.is_active AND ("
+                          "i.vehicle_compatibility IS NOT NULL OR EXISTS ("
+                          "SELECT 1 FROM inventory_vehicle_compat c "
+                          "WHERE c.inventory_id = i.id))", default=0)
+        else:
+            fit = _q(cur, "SELECT COUNT(*) FROM inventory WHERE is_active "
+                          "AND vehicle_compatibility IS NOT NULL", default=0)
+        fitment_pct = round(100.0 * fit / items_activos, 2) if items_activos else None
+
+        # Daily sales (completed / cancelled).
+        sales = {}
+        try:
+            cur.execute("""
+                SELECT (created_at AT TIME ZONE %s)::date,
+                       COUNT(*) FILTER (WHERE status = 'completed'),
+                       COALESCE(SUM(total) FILTER (WHERE status = 'completed'), 0),
+                       COUNT(*) FILTER (WHERE status = 'cancelled')
+                FROM sales
+                WHERE created_at >= %s AND created_at < %s
+                GROUP BY 1
+            """, (BUSINESS_TZ, start_dt, end_dt))
+            for d, vc, vt, vx in cur.fetchall():
+                sales[d] = (vc or 0, float(vt or 0), vx or 0)
+        except Exception:
+            conn.rollback()
+
+        nuevos = {}
+        try:
+            cur.execute("""
+                SELECT (created_at AT TIME ZONE %s)::date, COUNT(*)
+                FROM customers
+                WHERE created_at >= %s AND created_at < %s
+                GROUP BY 1
+            """, (BUSINESS_TZ, start_dt, end_dt))
+            nuevos = dict(cur.fetchall())
+        except Exception:
+            conn.rollback()
+
+        actividad = {}
+        try:
+            cur.execute("""
+                SELECT (created_at AT TIME ZONE %s)::date, COUNT(*)
+                FROM audit_log
+                WHERE created_at >= %s AND created_at < %s
+                GROUP BY 1
+            """, (BUSINESS_TZ, start_dt, end_dt))
+            actividad = dict(cur.fetchall())
+        except Exception:
+            conn.rollback()
+
+        apis = {}
+        has_api = _q(cur, "SELECT to_regclass('public.api_request_logs') IS NOT NULL",
+                     default=False)
+        if has_api:
+            try:
+                cur.execute("""
+                    SELECT (created_at AT TIME ZONE %s)::date,
+                           COUNT(*),
+                           COUNT(*) FILTER (WHERE status_code >= 500),
+                           COUNT(*) FILTER (WHERE path ~*
+                               '(/ai/|/chat|vision|semantic|classif|categoriz|/ml/)')
+                    FROM api_request_logs
+                    WHERE created_at >= %s AND created_at < %s
+                    GROUP BY 1
+                """, (BUSINESS_TZ, start_dt, end_dt))
+                for d, calls, err5, ai in cur.fetchall():
+                    apis[d] = (calls or 0, err5 or 0, ai or 0)
+            except Exception:
+                conn.rollback()
+    finally:
+        cur.close()
+        conn.close()
+
+    rows = []
+    for d in dates:
+        vc, vt, vx = sales.get(d, (0, 0.0, 0))
+        api_calls, err5, ai = apis.get(d, (0, 0, 0))
+        rows.append({
+            "tenant_id": tenant["id"],
+            "date": d,
+            "ventas_count": vc,
+            "ventas_total": round(vt, 2),
+            "ticket_promedio": round(vt / vc, 2) if vc else 0,
+            "ventas_canceladas": vx,
+            "clientes_nuevos": nuevos.get(d, 0),
+            "items_activos": items_activos or 0,
+            "skus": skus or 0,
+            "clientes": clientes or 0,
+            "empleados_activos": empleados or 0,
+            "fitment_pct": fitment_pct,
+            "uso_modulos": Json(modules),
+            "ai_calls": ai,
+            "api_calls": api_calls,
+            "errores_5xx": err5,
+            "actividad_count": actividad.get(d, 0),
+            "ultima_venta_at": ultima_venta,
+            "ultima_actividad_at": ultima_actividad,
+            "db_size_mb": round(db_size, 2) if db_size is not None else None,
+        })
+    return rows
+
+
+def run_rollup(date=None, days=1, tenant_ids=None, include_inactive=True):
+    """Collect and upsert rollup rows. Idempotent on (tenant_id, date).
+
+    ``date`` is the last day of the range (defaults to today in BUSINESS_TZ);
+    ``days`` extends the range backwards (1 == a single day).
+    """
+    tz = ZoneInfo(BUSINESS_TZ)
+    end_date = date or datetime.now(tz).date()
+    if isinstance(end_date, str):
+        end_date = date_cls.fromisoformat(end_date)
+    dates = [end_date - timedelta(days=i) for i in range(days - 1, -1, -1)]
+
+    start_dt = datetime.combine(dates[0], time.min, tzinfo=tz)
+    end_dt = datetime.combine(dates[-1] + timedelta(days=1), time.min, tzinfo=tz)
+
+    conn = get_master_conn()
+    try:
+        ensure_metrics_table(conn)
+        tenants = list_tenants(conn, include_inactive=include_inactive)
+        if tenant_ids:
+            tenants = [t for t in tenants
+                       if t["id"] in tenant_ids or t["db_name"] in tenant_ids]
+
+        written = 0
+        errors = []
+        per_tenant = []
+        for t in tenants:
+            try:
+                rows = _collect_tenant(t, start_dt, end_dt, dates)
+            except Exception as e:  # noqa: BLE001 — report and continue
+                errors.append({"tenant_id": t["id"], "db_name": t["db_name"],
+                               "error": str(e)})
+                continue
+            cur = conn.cursor()
+            try:
+                for row in rows:
+                    cur.execute(UPSERT, row)
+                conn.commit()
+                written += len(rows)
+                per_tenant.append({
+                    "tenant_id": t["id"], "tenant_name": t["name"],
+                    "db_name": t["db_name"], "rows": len(rows),
+                })
+            except Exception as e:  # noqa: BLE001
+                conn.rollback()
+                errors.append({"tenant_id": t["id"], "db_name": t["db_name"],
+                               "error": str(e)})
+            finally:
+                cur.close()
+    finally:
+        conn.close()
+
+    return {
+        "date_from": str(dates[0]),
+        "date_to": str(dates[-1]),
+        "days": days,
+        "rows_written": written,
+        "tenants": per_tenant,
+        "errors": errors,
+    }
+
+
+# ─── Readers ───────────────────────────────────────────────────────────────
+
+METRIC_FIELDS = [
+    "ventas_count", "ventas_total", "ticket_promedio", "ventas_canceladas",
+    "clientes_nuevos", "items_activos", "skus", "clientes",
+    "empleados_activos", "fitment_pct", "ai_calls", "api_calls",
+    "errores_5xx", "actividad_count", "db_size_mb",
+]
+
+
+def _serialize_row(row):
+    out = {}
+    for k, v in row.items():
+        if isinstance(v, (datetime, date_cls)):
+            out[k] = v.isoformat()
+        elif hasattr(v, "quantize"):  # Decimal
+            out[k] = float(v)
+        else:
+            out[k] = v
+    return out
+
+
+def _latest_date(conn):
+    cur = conn.cursor()
+    try:
+        cur.execute("SELECT MAX(date) FROM tenant_metrics_daily")
+        row = cur.fetchone()
+        return row[0] if row else None
+    finally:
+        cur.close()
+
+
+def get_tenant_metrics(days=14, include_inactive=True):
+    """Rollup window + health score for every tenant (manager API payload)."""
+    days = max(1, min(int(days), 90))
+    conn = get_master_conn()
+    try:
+        ensure_metrics_table(conn)
+        latest = _latest_date(conn)
+        tenants = list_tenants(conn, include_inactive=include_inactive)
+        if latest is None:
+            return {
+                "rollup_available": False,
+                "date": None,
+                "window_days": days,
+                "notes": {
+                    "hint": "Sin datos; ejecuta scripts/rollup_tenant_metrics.py",
+                    "activity_proxy": "audit_log (no se persisten logins individuales)",
+                },
+                "tenants": [
+                    {"tenant_id": t["id"], "name": t["name"],
+                     "db_name": t["db_name"], "plan": t["plan"],
+                     "is_active": t["is_active"],
+                     "health": compute_health(t, []), "metrics": None}
+                    for t in tenants
+                ],
+            }
+
+        start = latest - timedelta(days=days - 1)
+        cur = conn.cursor()
+        cur.execute("""
+            SELECT tenant_id, date, ventas_count, ventas_total, ticket_promedio,
+                   ventas_canceladas, clientes_nuevos, items_activos, skus,
+                   clientes, empleados_activos, fitment_pct, uso_modulos,
+                   ai_calls, api_calls, errores_5xx, actividad_count,
+                   ultima_venta_at, ultima_actividad_at, db_size_mb
+            FROM tenant_metrics_daily
+            WHERE date >= %s AND date <= %s
+            ORDER BY tenant_id, date
+        """, (start, latest))
+        cols = [d[0] for d in cur.description]
+        by_tenant = {}
+        for r in cur.fetchall():
+            row = dict(zip(cols, r))  # raw: tz-aware datetimes for health
+            by_tenant.setdefault(row["tenant_id"], []).append(row)
+        cur.close()
+
+        out = []
+        for t in tenants:
+            history = by_tenant.get(t["id"], [])
+            health = compute_health(t, history)
+            out.append({
+                "tenant_id": t["id"],
+                "name": t["name"],
+                "db_name": t["db_name"],
+                "plan": t["plan"],
+                "is_active": t["is_active"],
+                "health": health,
+                "metrics": _serialize_row(history[-1]) if history else None,
+            })
+    finally:
+        conn.close()
+
+    return {
+        "rollup_available": True,
+        "date": str(latest),
+        "window_days": days,
+        "notes": {
+            "activity_proxy": "audit_log (no se persisten logins individuales)",
+            "point_in_time": "items/skus/clientes/empleados/fitment son snapshot al momento del rollup",
+        },
+        "tenants": out,
+    }
+
+
+def get_portfolio_anomalies(date=None, z_threshold=DEFAULT_Z, min_tenants=MIN_COHORT,
+                            include_inactive=False):
+    """Cross-tenant anomaly report built from the daily rollup."""
+    conn = get_master_conn()
+    try:
+        ensure_metrics_table(conn)
+        target = date or _latest_date(conn)
+        if target is None:
+            return detect_portfolio_anomalies([], date=None,
+                                              min_tenants=min_tenants,
+                                              z_threshold=z_threshold)
+
+        where_active = "" if include_inactive else "AND t.is_active = true"
+        cur = conn.cursor()
+        cur.execute(f"""
+            SELECT m.tenant_id, t.name, m.date,
+                   m.ventas_total, m.ventas_count, m.ticket_promedio,
+                   m.clientes_nuevos, m.actividad_count, m.errores_5xx,
+                   m.items_activos, m.skus, m.clientes, m.fitment_pct
+            FROM tenant_metrics_daily m
+            JOIN tenants t ON t.id = m.tenant_id
+            WHERE m.date = %s {where_active}
+            ORDER BY m.tenant_id
+        """, (target,))
+        cols = [d[0] for d in cur.description]
+        rows = []
+        for r in cur.fetchall():
+            row = _serialize_row(dict(zip(cols, r)))
+            row["tenant_name"] = row.pop("name")
+            rows.append(row)
+        cur.close()
+    finally:
+        conn.close()
+
+    report = detect_portfolio_anomalies(rows, date=target,
+                                        min_tenants=min_tenants,
+                                        z_threshold=z_threshold)
+    report["tenants_scanned"] = len(rows)
+    return report
diff --git a/manager/services/tenant_service.py b/manager/services/tenant_service.py
index 6b1635c..12c557b 100644
--- a/manager/services/tenant_service.py
+++ b/manager/services/tenant_service.py
@@ -193,40 +193,59 @@ def reset_tenant(tenant_id, keep_config=True):
     db_name = tenant["db_name"]
     dsn = TENANT_DB_URL_TEMPLATE.format(db_name=db_name)
 
-    tables_to_truncate = [
-        "inventory_operations",
-        "inventory",
-        "sale_items",
-        "sales",
-        "customer_payments",
-        "cash_register_closings",
-        "cash_register_movements",
-        "cash_registers",
-        "invoices",
-        "accounting_entries",
-        "journal_entries",
-        "service_orders",
-        "fleet_vehicles",
-        "crm_activities",
-        "quotations",
-        "quotation_items",
-        "savings_transactions",
-        "savings_accounts",
-        "supplier_orders",
-        "supplier_order_items",
-        "warranty_claims",
-        "notifications",
-        "inventory_uploads",
+    # Whitelist de tablas de NEGOCIO/PII a limpiar. Antes faltaban customers,
+    # whatsapp/wa_*, audit_log, layaways, returns, marketplace_*, consignaciones
+    # → el "reset" dejaba datos personales e historial de conversaciones.
+    candidate_tables = [
+        # Inventario
+        "inventory_operations", "inventory_stock", "inventory_stock_summary",
+        "inventory_images", "inventory_sku_aliases", "inventory_vehicle_compat",
+        "inventory_transfer_lines", "inventory_transfers", "physical_count_lines",
+        "physical_counts", "reorder_alerts", "inventory", "inventory_uploads",
+        # Ventas / caja
+        "sale_payments", "sale_items", "sales", "customer_payments",
+        "cash_movements", "cash_register_movements", "cash_registers",
+        "layaway_payments", "layaway_items", "layaways",
+        # Devoluciones / garantías
+        "return_items", "returns", "warranty_claims", "warranties",
+        # Cotizaciones / compras
+        "quotation_items", "quotations",
+        "purchase_order_items", "purchase_orders",
+        # Taller / flotilla
+        "service_order_items", "service_order_labor", "service_orders",
+        "fleet_maintenance_logs", "fleet_vehicles",
+        # CRM / clientes (PII)
+        "customer_activities", "crm_activities", "loyalty_transactions",
+        "loyalty_points", "customers",
+        # Marketplace / MeLi
+        "marketplace_order_items", "marketplace_orders", "marketplace_listings",
+        "marketplace_questions", "meli_sync_queue",
+        # WhatsApp (PII)
+        "whatsapp_messages", "whatsapp_sessions", "wa_customer_links",
+        "wa_learning_sessions",
+        # Contabilidad / fiscal
+        "cfdi_queue", "invoices", "journal_lines", "journal_entries",
+        # Auditoría / sesiones
+        "audit_log", "employee_sessions", "notifications",
+        # Consignación (Yonke)
+        "consignment_items", "consignments",
     ]
 
     conn = psycopg2.connect(dsn)
     cur = conn.cursor()
     try:
-        for table in tables_to_truncate:
+        # Solo se truncan las que existan en este tenant (esquema puede variar).
+        cur.execute("SELECT tablename FROM pg_tables WHERE schemaname = 'public'")
+        existing = {r[0] for r in cur.fetchall()}
+        truncated = 0
+        for table in candidate_tables:
+            if table not in existing:
+                continue
             try:
-                cur.execute(f"TRUNCATE TABLE {table} RESTART IDENTITY CASCADE")
+                cur.execute(f'TRUNCATE TABLE public."{table}" RESTART IDENTITY CASCADE')
+                truncated += 1
             except Exception:
-                pass  # Table may not exist
+                conn.rollback()
         conn.commit()
         success = True
     except Exception as e:
@@ -237,7 +256,7 @@ def reset_tenant(tenant_id, keep_config=True):
         cur.close()
         conn.close()
 
-    return {"success": success, "tenant_id": tenant_id, "tables_reset": len(tables_to_truncate)}
+    return {"success": success, "tenant_id": tenant_id, "tables_reset": truncated}
 
 
 def delete_tenant(tenant_id):
diff --git a/manager/static/js/manager.js b/manager/static/js/manager.js
index 9455939..90d0850 100644
--- a/manager/static/js/manager.js
+++ b/manager/static/js/manager.js
@@ -10,6 +10,7 @@ const routes = {
     "#dashboard": "dashboard",
     "#demos": "demos",
     "#tenants": "tenants",
+    "#portfolio": "portfolio",
     "#health": "health",
     "#migrations": "migrations"
 };
@@ -29,6 +30,7 @@ function navigate() {
         dashboard: "Dashboard",
         demos: "Crear Demos",
         tenants: "Tenants",
+        portfolio: "Cartera y Salud",
         health: "Salud del Sistema",
         migrations: "Migraciones"
     };
@@ -38,6 +40,7 @@ function navigate() {
     if (page === "dashboard") loadDashboard();
     if (page === "demos") loadDemos();
     if (page === "tenants") loadTenants();
+    if (page === "portfolio") loadPortfolio();
     if (page === "health") loadHealth();
     if (page === "migrations") loadMigrations();
 }
@@ -271,6 +274,77 @@ document.getElementById("tenant-search")?.addEventListener("input", (e) => {
     });
 });
 
+// ─── Portfolio (business metrics + health + anomalies) ─────────────────────
+const BAND_TAG = {
+    healthy: "success",
+    stable: "info",
+    at_risk: "warning",
+    critical: "danger",
+    unknown: "default"
+};
+
+async function loadPortfolio() {
+    const tbody = document.getElementById("portfolio-table");
+    const aBody = document.getElementById("anomalies-table");
+
+    const metricsRes = await api("/api/tenants/metrics?days=14");
+    if (!metricsRes || metricsRes.status !== 200) {
+        tbody.innerHTML = `<tr><td colspan="8" class="text-muted text-center">Error al cargar métricas</td></tr>`;
+        return;
+    }
+    const m = metricsRes.data;
+    document.getElementById("portfolio-meta").textContent = m.rollup_available
+        ? `Último día: ${m.date} · ventana ${m.window_days}d`
+        : "Sin rollup";
+
+    if (!m.rollup_available) {
+        tbody.innerHTML = `<tr><td colspan="8" class="text-muted text-center">Sin datos de rollup. Ejecuta <code>scripts/rollup_tenant_metrics.py</code></td></tr>`;
+    } else {
+        tbody.innerHTML = m.tenants.map(t => {
+            const h = t.health || {};
+            const x = t.metrics || {};
+            const score = h.health_score == null ? "—" : h.health_score;
+            const signals = (h.signals || []).map(s => s.code).join(", ") || "—";
+            const fitment = x.fitment_pct == null ? "—" : `${x.fitment_pct}%`;
+            return `<tr>
+                <td><strong>${escapeHtml(t.name)}</strong><br><span class="text-muted" style="font-size:11px">${escapeHtml(t.db_name)}</span></td>
+                <td>${tag(`${score} · ${h.band_label || h.band}`, BAND_TAG[h.band] || "default")}</td>
+                <td>${x.ventas_count ?? 0} / $${(x.ventas_total ?? 0).toLocaleString("es-MX")}</td>
+                <td>$${(x.ticket_promedio ?? 0).toLocaleString("es-MX")}</td>
+                <td>${(x.items_activos ?? 0).toLocaleString("es-MX")}</td>
+                <td>${(x.clientes ?? 0).toLocaleString("es-MX")}</td>
+                <td>${fitment}</td>
+                <td style="font-size:11px" class="text-muted">${escapeHtml(signals)}</td>
+            </tr>`;
+        }).join("");
+    }
+
+    const anomRes = await api("/api/portfolio/anomalies");
+    if (!anomRes || anomRes.status !== 200) {
+        aBody.innerHTML = `<tr><td colspan="6" class="text-muted text-center">Error al cargar anomalías</td></tr>`;
+        return;
+    }
+    const a = anomRes.data;
+    document.getElementById("anomalies-note").textContent =
+        `Día ${a.date || "—"} · cohorte ${a.cohort_size} tenants · z≥${a.thresholds?.z_threshold} (${a.thresholds?.method})` +
+        (a.cold_start ? " · COLD START: cohorte insuficiente" : "");
+
+    if (!a.anomalies || !a.anomalies.length) {
+        aBody.innerHTML = `<tr><td colspan="6" class="text-muted text-center">Sin anomalías entre tenants</td></tr>`;
+        return;
+    }
+    aBody.innerHTML = a.anomalies.map(x => `
+        <tr>
+            <td>${escapeHtml(x.tenant_name)}</td>
+            <td>${escapeHtml(x.label)}</td>
+            <td>${(x.value ?? 0).toLocaleString("es-MX")}</td>
+            <td>${(x.cohort_median ?? 0).toLocaleString("es-MX")}</td>
+            <td>${x.z}</td>
+            <td>${tag(x.direction === "peak" ? "Pico inusual" : "Caída inusual", x.direction === "peak" ? "info" : "danger")}</td>
+        </tr>
+    `).join("");
+}
+
 // ─── Health ────────────────────────────────────────────────────────────────
 async function loadHealth() {
     const res = await api("/api/health");
diff --git a/manager/templates/index.html b/manager/templates/index.html
index 3c93734..2546315 100644
--- a/manager/templates/index.html
+++ b/manager/templates/index.html
@@ -56,6 +56,10 @@
                     <span>Tenants</span>
                     <span class="badge" id="tenant-count">0</span>
                 </a>
+                <a href="#/portfolio" class="nav-item" data-page="portfolio">
+                    <i class="fas fa-briefcase"></i>
+                    <span>Cartera</span>
+                </a>
                 <a href="#/health" class="nav-item" data-page="health">
                     <i class="fas fa-heartbeat"></i>
                     <span>Salud</span>
@@ -240,6 +244,63 @@
                     </div>
                 </section>
 
+                <!-- Portfolio Page -->
+                <section id="page-portfolio" class="page" style="display:none;">
+                    <div class="card">
+                        <div class="card-header">
+                            <h3><i class="fas fa-briefcase"></i> Salud de Cartera</h3>
+                            <div class="card-actions">
+                                <span id="portfolio-meta" class="text-muted" style="font-size:12px;"></span>
+                                <button class="btn btn-sm btn-secondary" onclick="loadPortfolio()">
+                                    <i class="fas fa-sync"></i> Refrescar
+                                </button>
+                            </div>
+                        </div>
+                        <div class="card-body">
+                            <table class="table">
+                                <thead>
+                                    <tr>
+                                        <th>Tenant</th>
+                                        <th>Salud</th>
+                                        <th>Ventas (día)</th>
+                                        <th>Ticket prom.</th>
+                                        <th>Items</th>
+                                        <th>Clientes</th>
+                                        <th>Fitment</th>
+                                        <th>Señales</th>
+                                    </tr>
+                                </thead>
+                                <tbody id="portfolio-table">
+                                    <tr><td colspan="8" class="text-muted">Cargando...</td></tr>
+                                </tbody>
+                            </table>
+                        </div>
+                    </div>
+                    <div class="card">
+                        <div class="card-header">
+                            <h3><i class="fas fa-exclamation-triangle"></i> Anomalías entre Tenants</h3>
+                        </div>
+                        <div class="card-body">
+                            <div id="anomalies-note" class="text-muted" style="font-size:12px;margin-bottom:8px;"></div>
+                            <table class="table">
+                                <thead>
+                                    <tr>
+                                        <th>Tenant</th>
+                                        <th>Métrica</th>
+                                        <th>Valor</th>
+                                        <th>Mediana cohorte</th>
+                                        <th>z</th>
+                                        <th>Dirección</th>
+                                    </tr>
+                                </thead>
+                                <tbody id="anomalies-table">
+                                    <tr><td colspan="6" class="text-muted">Cargando...</td></tr>
+                                </tbody>
+                            </table>
+                        </div>
+                    </div>
+                </section>
+
                 <!-- Health Page -->
                 <section id="page-health" class="page" style="display:none;">
                     <div class="grid-3">
diff --git a/pos/app.py b/pos/app.py
index f09115e..f60f29d 100644
--- a/pos/app.py
+++ b/pos/app.py
@@ -1,5 +1,201 @@
-from flask import Flask, request, redirect, make_response
+import logging
+import re
+import time
+
+from flask import Flask, request, redirect, make_response, g
 from json_provider import OrjsonProvider
+from services.prom_metrics import CONTENT_TYPE as PROM_CONTENT_TYPE, metrics as prom_metrics
+from services.prom_metrics import normalize_path as prom_normalize_path
+
+
+_alert_log = logging.getLogger('nexus.pos.alerts')
+
+# `+` opcional seguido de 10-15 dígitos (formato internacional).
+_ALERT_PHONE_RE = re.compile(r'^\+?\d{10,15}$')
+
+
+def _extract_payload_tenant_ref(data, alerts):
+    """Extrae el tenant referenciado por un payload de Alertmanager.
+
+    Busca `labels.tenant_id` (o `labels.tenant`) en el payload, en sus
+    `commonLabels` y en las etiquetas de cada alerta. Devuelve el primer valor
+    no vacío o None.
+    """
+    label_dicts = []
+    for candidate in (data.get('labels'), data.get('commonLabels')):
+        if isinstance(candidate, dict):
+            label_dicts.append(candidate)
+    for alert in alerts or []:
+        if isinstance(alert, dict) and isinstance(alert.get('labels'), dict):
+            label_dicts.append(alert['labels'])
+
+    for labels in label_dicts:
+        for key in ('tenant_id', 'tenant'):
+            value = labels.get(key)
+            if value not in (None, '', []):
+                return value
+    return None
+
+
+def _resolve_tenant_dbname(tenant_ref):
+    """Resuelve una referencia de tenant a su `db_name`.
+
+    Acepta id numérico, db_name, subdominio o nombre exacto. Devuelve None si
+    no existe o si falla la consulta.
+    """
+    from tenant_db import get_master_conn
+
+    ref = str(tenant_ref).strip()
+    if not ref:
+        return None
+    try:
+        conn = get_master_conn()
+        try:
+            cur = conn.cursor()
+            if ref.isdigit():
+                cur.execute(
+                    "SELECT db_name FROM tenants WHERE id = %s AND is_active = true",
+                    (int(ref),),
+                )
+            else:
+                cur.execute(
+                    """SELECT db_name FROM tenants
+                        WHERE is_active = true
+                          AND (db_name = %s OR LOWER(subdomain) = %s OR LOWER(name) = %s)
+                        LIMIT 1""",
+                    (ref, ref.lower(), ref.lower()),
+                )
+            row = cur.fetchone()
+            cur.close()
+        finally:
+            conn.close()
+        return row[0] if row and row[0] else None
+    except Exception as exc:
+        _alert_log.warning("alert routing: no se pudo resolver tenant %r: %s", tenant_ref, exc)
+        return None
+
+
+def _get_tenant_alert_config(db_name):
+    """Lee los contactos de alerta del tenant `db_name`.
+
+    Devuelve (phones, enabled). Ante cualquier fallo devuelve ([], False) para
+    degradar sin error.
+    """
+    from tenant_db import get_tenant_conn_by_dbname
+
+    phones, enabled = [], False
+    try:
+        conn = get_tenant_conn_by_dbname(db_name)
+        try:
+            cur = conn.cursor()
+            cur.execute(
+                "SELECT key, value FROM tenant_config "
+                "WHERE key IN ('alert_phones', 'alert_whatsapp_enabled')"
+            )
+            rows = {r[0]: r[1] for r in cur.fetchall()}
+            cur.close()
+        finally:
+            conn.close()
+        phones = [p.strip() for p in str(rows.get('alert_phones') or '').replace('"', '').split(',') if p.strip()]
+        enabled = str(rows.get('alert_whatsapp_enabled', 'false')).lower() == 'true'
+    except Exception as exc:
+        _alert_log.warning("alert routing: no se pudo leer config de %s: %s", db_name, exc)
+    return phones, enabled
+
+
+def _global_alert_phones():
+    """Fallback de compatibilidad: `ALERT_PHONES` de /etc/nexus/alert.env."""
+    try:
+        with open('/etc/nexus/alert.env') as fh:
+            for line in fh:
+                if line.startswith('ALERT_PHONES='):
+                    raw = line.split('=', 1)[1].strip().strip('"')
+                    return [p.strip() for p in raw.split(',') if p.strip()]
+    except Exception:
+        pass
+    return []
+
+
+def _send_via_bridge(url, phones, msg):
+    """Envía `msg` a `phones` por el bridge de WhatsApp de `url`.
+
+    Devuelve True si al menos un envío se completó. Best effort: no propaga
+    excepciones.
+    """
+    import requests
+
+    if not url:
+        return False
+    try:
+        status = requests.get(url + '/status', timeout=4).json()
+        if status.get('state') != 'connected':
+            return False
+        sent = False
+        for phone in phones:
+            try:
+                requests.post(url + '/send', json={'phone': phone, 'message': msg}, timeout=10)
+                sent = True
+            except Exception as exc:
+                _alert_log.warning("alert routing: fallo enviando a %s: %s", phone, exc)
+        return sent
+    except Exception as exc:
+        _alert_log.warning("alert routing: bridge %s no disponible: %s", url, exc)
+        return False
+
+
+def _send_tenant_alert(db_name, phones, msg):
+    """Envía la alerta por el bridge configurado en ESE tenant."""
+    from tenant_db import get_tenant_conn_by_dbname
+
+    try:
+        conn = get_tenant_conn_by_dbname(db_name)
+        try:
+            cur = conn.cursor()
+            cur.execute("SELECT value FROM tenant_config WHERE key = 'whatsapp_bridge_url'")
+            row = cur.fetchone()
+            cur.close()
+        finally:
+            conn.close()
+        return _send_via_bridge(row[0] if row and row[0] else '', phones, msg)
+    except Exception as exc:
+        _alert_log.warning("alert routing: bridge del tenant %s no disponible: %s", db_name, exc)
+        return False
+
+
+def _send_global_alert(phones, msg):
+    """Fallback global: envía por el primer bridge de tenant conectado."""
+    from tenant_db import get_master_conn, get_tenant_conn_by_dbname
+
+    try:
+        conn = get_master_conn()
+        try:
+            cur = conn.cursor()
+            cur.execute("SELECT db_name FROM tenants WHERE is_active = true")
+            dbs = [r[0] for r in cur.fetchall()]
+            cur.close()
+        finally:
+            conn.close()
+
+        for db in dbs:
+            try:
+                tconn = get_tenant_conn_by_dbname(db)
+                try:
+                    tcur = tconn.cursor()
+                    tcur.execute("SELECT value FROM tenant_config WHERE key = 'whatsapp_bridge_url'")
+                    row = tcur.fetchone()
+                    tcur.close()
+                finally:
+                    tconn.close()
+                if not row or not row[0]:
+                    continue
+                if _send_via_bridge(row[0], phones, msg):
+                    return True
+            except Exception:
+                continue
+        return False
+    except Exception as exc:
+        _alert_log.warning("alert routing: fallback global sin bridge: %s", exc)
+        return False
 
 
 def create_app():
@@ -10,11 +206,128 @@ def create_app():
     from middleware_tenant import resolve_tenant
     app.before_request(resolve_tenant)
 
+    # ─── Prometheus metrics ────────────────────────────────────────
+    # Se registran DESPUÉS de resolve_tenant, así que corren después de él.
+    prom_metrics.configure('pos')
+
+    @app.before_request
+    def _metrics_request_start():
+        if request.path != '/metrics':
+            g._metrics_t0 = time.perf_counter()
+            prom_metrics.request_started()
+
+    @app.after_request
+    def _metrics_request_end(response):
+        t0 = getattr(g, '_metrics_t0', None)
+        if t0 is not None:
+            g._metrics_done = True
+            rule = getattr(request.url_rule, 'rule', None)
+            prom_metrics.request_finished(
+                request.method,
+                prom_normalize_path(rule, request.path),
+                response.status_code,
+                time.perf_counter() - t0,
+            )
+        return response
+
+    @app.teardown_request
+    def _metrics_request_teardown(exc):
+        if exc is not None:
+            prom_metrics.record_exception()
+        if getattr(g, '_metrics_t0', None) is not None and not getattr(g, '_metrics_done', False):
+            prom_metrics.request_aborted()
+
     # NOTE: Page-level routing guards are handled client-side by app-init.js
     # using the employee's current permissions; API endpoints enforce their own
     # permission checks via @require_auth.
 
     # ─── PWA: Service Worker must be served from /pos/ scope ──────
+    @app.route('/pos/api/notifications/webhook', methods=['POST'])
+    def notifications_webhook():
+        """Recibe alertas de Alertmanager y las reenvía por WhatsApp (best effort).
+
+        El destino es POR NEGOCIO: cada tenant configura sus propios números en
+        su `tenant_config` (`alert_phones` + `alert_whatsapp_enabled`),
+        editables desde `PUT /pos/api/config/alert-contacts`. Resolución:
+
+          (a) si el payload trae `labels.tenant_id` (o `labels.tenant`) → se usan
+              los contactos de ESE tenant y se envía por su bridge de WhatsApp;
+          (b) si no, fallback de compatibilidad al `ALERT_PHONES` global de
+              /etc/nexus/alert.env (best effort por el primer bridge conectado);
+          (c) si no hay contactos → no-op con `sent:false` (nunca error).
+
+        Si un negocio no configura contactos, sus alertas no se envían: no hay
+        ningún teléfono global obligatorio. Autenticación por `INTERNAL_API_KEY`
+        (Bearer o X-Internal-Key). Tolera fallos: nunca responde 500.
+        """
+        # Endpoint abierto solo con el secreto interno (Alertmanager lo envía como Bearer).
+        from config import INTERNAL_API_KEY as _internal_key
+        if _internal_key:
+            _tok = request.headers.get('X-Internal-Key', '')
+            _auth = request.headers.get('Authorization', '')
+            if _tok != _internal_key and _auth != f'Bearer {_internal_key}':
+                return jsonify({'error': 'unauthorized'}), 401
+        data = request.get_json(silent=True) or {}
+        alerts = data.get('alerts') or []
+        status = data.get('status', 'firing')
+        lines = []
+        for a in alerts[:5]:
+            ann = a.get('annotations', {})
+            summary = ann.get('summary') or a.get('labels', {}).get('alertname', 'alerta')
+            desc = ann.get('description', '')
+            lines.append(f"• {summary}" + (f" — {desc}" if desc else ''))
+        if not lines:
+            return jsonify({'ok': True, 'sent': False, 'reason': 'sin alertas'})
+
+        try:
+            # (a) Destino por negocio si el payload identifica un tenant.
+            tenant_ref = _extract_payload_tenant_ref(data, alerts)
+            tenant_db, phones = None, []
+            if tenant_ref is not None:
+                tenant_db = _resolve_tenant_dbname(tenant_ref)
+                if tenant_db:
+                    phones, enabled = _get_tenant_alert_config(tenant_db)
+                    if phones and not enabled:
+                        return jsonify({'ok': True, 'sent': False, 'scope': 'tenant',
+                                        'reason': 'alertas WhatsApp deshabilitadas para el negocio'})
+            else:
+                # (b) Fallback de compatibilidad al teléfono global.
+                phones = _global_alert_phones()
+
+            if not phones:
+                return jsonify({'ok': True, 'sent': False, 'reason': 'sin contactos configurados'})
+
+            msg = ('🚨 *Nexus Alert* [' + status + ']\n' + '\n'.join(lines))
+            if tenant_db:
+                sent = _send_tenant_alert(tenant_db, phones, msg)
+                scope, reason = 'tenant', 'bridge del negocio no conectado'
+            else:
+                sent = _send_global_alert(phones, msg)
+                scope, reason = 'global', 'sin bridge conectado'
+            if sent:
+                return jsonify({'ok': True, 'sent': True, 'scope': scope})
+            return jsonify({'ok': True, 'sent': False, 'scope': scope, 'reason': reason})
+        except Exception as exc:
+            _alert_log.exception("alert routing: fallo inesperado: %s", exc)
+            return jsonify({'ok': True, 'sent': False, 'reason': 'error interno'})
+
+    @app.route('/pos/api/public/media/<path:filename>')
+    def public_media(filename):
+        """Sirve media temporal (imágenes/PDF) para enviar vía WA CRM."""
+        from flask import send_from_directory, abort
+        import re as _re
+        if not _re.fullmatch(r'[0-9a-f]{32}(_[A-Za-z0-9._-]{1,80})?\.(png|jpg|jpeg|pdf)', filename):
+            abort(404)
+        return send_from_directory('/tmp/wa_media', filename, max_age=3600)
+
+    @app.route('/pos/sw-push.js')
+    def pos_sw_push():
+        from flask import send_from_directory, make_response
+        response = make_response(send_from_directory('static', 'sw-push.js',
+                                                     mimetype='application/javascript'))
+        response.headers['Cache-Control'] = 'no-store, no-cache, must-revalidate, max-age=0'
+        return response
+
     @app.route('/pos/sw.js')
     def pos_sw():
         from flask import send_from_directory, make_response
@@ -25,10 +338,68 @@ def create_app():
         response.headers['Expires'] = '0'
         return response
 
+    # ─── Manejo global de tablas retiradas (esquema TecDoc, junio 2026) ───
+    # Los endpoints que aún consultan el catálogo OEM antiguo devolvían 500 con
+    # SQL crudo. Aquí se degradan a una respuesta limpia y vacía.
+    from werkzeug.exceptions import HTTPException
+
+    @app.errorhandler(Exception)
+    def _handle_retired_schema(e):
+        if isinstance(e, HTTPException):
+            return e
+        try:
+            from psycopg2.errors import UndefinedTable, UndefinedColumn
+            if isinstance(e, (UndefinedTable, UndefinedColumn)):
+                name = getattr(e, 'diag', None)
+                table = getattr(name, 'table_name', '') if name else ''
+                return jsonify({
+                    'data': [],
+                    'oem_disabled': True,
+                    'error': 'Función no disponible en este despliegue',
+                    'detail': f'La tabla "{table}" fue retirada del catálogo maestro.'
+                              if table else 'Consulta sobre esquema retirado.',
+                }), 200
+        except Exception:
+            pass
+        raise
+
     # Register blueprints
     from blueprints.auth_bp import auth_bp
     app.register_blueprint(auth_bp)
 
+    # Storefront público por tenant (vitrina web + pedidos)
+    from blueprints.storefront_bp import storefront_bp
+    app.register_blueprint(storefront_bp)
+
+    @app.route('/tienda')
+    def public_storefront():
+        from flask import g, render_template
+        business_name = 'Refaccionaria'
+        tid = getattr(g, 'tenant_id', None)
+        if tid:
+            try:
+                from tenant_db import get_master_conn
+                mconn = get_master_conn()
+                mcur = mconn.cursor()
+                mcur.execute("SELECT name FROM tenants WHERE id = %s", (tid,))
+                row = mcur.fetchone()
+                mcur.close()
+                mconn.close()
+                if row:
+                    business_name = row[0]
+            except Exception:
+                pass
+        return render_template('storefront.html', business_name=business_name)
+
+    @app.route('/')
+    def root_redirect():
+        # En subdominios de tenants la raíz es la tienda pública;
+        # en el dominio principal manda al POS.
+        from flask import g
+        if getattr(g, 'tenant_id', None):
+            return redirect('/tienda')
+        return redirect('/pos/login')
+
     from blueprints.config_bp import config_bp
     app.register_blueprint(config_bp)
 
@@ -128,11 +499,25 @@ def create_app():
     from blueprints.internal_bp import internal_bp
     app.register_blueprint(internal_bp)
 
+    from blueprints.yonke_bp import yonke_bp
+    app.register_blueprint(yonke_bp)
+
+    from blueprints.b2b_bp import b2b_bp
+    app.register_blueprint(b2b_bp)
+
     # Health check
     @app.route('/pos/health')
     def health():
         return {'status': 'ok'}
 
+    # Prometheus scrape endpoint (no pasa por el contador: se excluye por path)
+    @app.route('/metrics')
+    def prometheus_metrics():
+        response = make_response(prom_metrics.render())
+        response.headers['Content-Type'] = PROM_CONTENT_TYPE
+        response.headers['Cache-Control'] = 'no-store'
+        return response
+
     from flask import g, jsonify, render_template, send_from_directory
 
     @app.route('/favicon.ico')
@@ -242,6 +627,10 @@ def create_app():
         response.headers['Expires'] = '0'
         return response
 
+    @app.route('/pos/yonke')
+    def pos_yonke():
+        return render_template('yonke.html')
+
     @app.route('/pos/static/<path:filename>')
     def pos_static(filename):
         return send_from_directory('static', filename)
@@ -297,7 +686,7 @@ def create_app():
 
         cur.execute("""
             SELECT i.part_number, i.name, i.brand, i.price_1, i.tax_rate,
-                   i.category, COALESCE(s.stock, 0) AS stock,
+                   i.category_id, COALESCE(s.stock, 0) AS stock,
                    COALESCE(sv.total_sold, 0) AS total_sold
             FROM inventory i
             LEFT JOIN (
diff --git a/pos/blueprints/accounting_bp.py b/pos/blueprints/accounting_bp.py
index a8e8d47..d293a66 100644
--- a/pos/blueprints/accounting_bp.py
+++ b/pos/blueprints/accounting_bp.py
@@ -13,12 +13,56 @@ from datetime import date, datetime, timedelta
 from flask import Blueprint, request, jsonify, g, Response
 from middleware import require_auth
 from tenant_db import get_tenant_conn
-from services.accounting_engine import create_manual_entry
+from services.accounting_engine import create_manual_entry, record_supplier_payment_entry
 from services.audit import log_action
 
 accounting_bp = Blueprint('accounting', __name__, url_prefix='/pos/api/accounting')
 
 
+def _csv_response(rows, header, filename):
+    """Build a UTF-8 CSV Response with BOM (Excel-friendly)."""
+    output = io.StringIO()
+    writer = csv.writer(output)
+    writer.writerow(header)
+    writer.writerows(rows)
+    csv_data = output.getvalue()
+    output.close()
+    return Response(
+        '\ufeff' + csv_data,
+        mimetype='text/csv; charset=utf-8',
+        headers={'Content-Disposition': f'attachment; filename={filename}'}
+    )
+
+
+def _period_bounds(year, month):
+    """Return (period_start, period_end) ISO dates for a fiscal month."""
+    period_start = f'{year}-{month:02d}-01'
+    if month == 12:
+        period_end = f'{year + 1}-01-01'
+    else:
+        period_end = f'{year}-{month + 1:02d}-01'
+    return period_start, period_end
+
+
+def _supplier_paid_totals(cur):
+    """Return {po_id: paid_amount} from supplier_payments.
+
+    The table is created on first supplier payment, so tenants that never paid
+    a supplier simply have no data (and no table) yet.
+    """
+    cur.execute("SELECT to_regclass('public.supplier_payments')")
+    if not cur.fetchone()[0]:
+        return {}
+    cur.execute("""
+        SELECT po_id, COALESCE(SUM(amount), 0)
+        FROM supplier_payments
+        WHERE po_id IS NOT NULL
+        GROUP BY po_id
+    """)
+    return {r[0]: float(r[1]) for r in cur.fetchall()}
+
+
+
 # ─── Chart of Accounts ─────────────────────────────
 
 @accounting_bp.route('/accounts', methods=['GET'])
@@ -309,29 +353,11 @@ def create_entry():
 
 # ─── Financial Reports ──────────────────────────────
 
-@accounting_bp.route('/trial-balance', methods=['GET'])
-@require_auth('accounting.view')
-def trial_balance():
-    """Balanza de comprobacion for a period.
-
-    Query params:
-        year: int (default current year)
-        month: int (default current month)
-
-    Returns each account with: saldo_inicial, cargos, abonos, saldo_final
-    """
-    conn = get_tenant_conn(g.tenant_id)
+def _trial_balance_rows(conn, year, month):
+    """Balanza de comprobacion rows for a fiscal month."""
     cur = conn.cursor()
 
-    year = int(request.args.get('year', date.today().year))
-    month = int(request.args.get('month', date.today().month))
-
-    # Period start/end dates
-    period_start = f'{year}-{month:02d}-01'
-    if month == 12:
-        period_end = f'{year + 1}-01-01'
-    else:
-        period_end = f'{year}-{month + 1:02d}-01'
+    period_start, period_end = _period_bounds(year, month)
 
     cur.execute("""
         WITH initial_balances AS (
@@ -384,31 +410,62 @@ def trial_balance():
         })
 
     cur.close()
-    conn.close()
-    return jsonify({'data': rows, 'period': {'year': year, 'month': month}})
+    return rows
 
 
-@accounting_bp.route('/income-statement', methods=['GET'])
+@accounting_bp.route('/trial-balance', methods=['GET'])
 @require_auth('accounting.view')
-def income_statement():
-    """Estado de resultados for a period.
+def trial_balance():
+    """Balanza de comprobacion for a period.
 
-    Query params: year, month
+    Query params:
+        year: int (default current year)
+        month: int (default current month)
 
-    Groups: Ingresos (400), Costos (500), Gastos (600)
-    Result: Ingresos - Costos - Gastos = Utilidad/Perdida
+    Returns each account with: saldo_inicial, cargos, abonos, saldo_final
     """
     conn = get_tenant_conn(g.tenant_id)
-    cur = conn.cursor()
 
     year = int(request.args.get('year', date.today().year))
     month = int(request.args.get('month', date.today().month))
 
-    period_start = f'{year}-{month:02d}-01'
-    if month == 12:
-        period_end = f'{year + 1}-01-01'
-    else:
-        period_end = f'{year}-{month + 1:02d}-01'
+    rows = _trial_balance_rows(conn, year, month)
+
+    conn.close()
+    return jsonify({'data': rows, 'period': {'year': year, 'month': month}})
+
+
+@accounting_bp.route('/trial-balance/export', methods=['GET'])
+@require_auth('accounting.view')
+def export_trial_balance():
+    """Export the balanza de comprobacion as CSV (default) or JSON.
+
+    Query params: year, month, format=csv|json
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    year = int(request.args.get('year', date.today().year))
+    month = int(request.args.get('month', date.today().month))
+    fmt = request.args.get('format', 'csv').lower()
+
+    rows = _trial_balance_rows(conn, year, month)
+    conn.close()
+
+    if fmt == 'json':
+        return jsonify({'data': rows, 'period': {'year': year, 'month': month}})
+
+    return _csv_response(
+        [[r['code'], r['name'], r['type'], r['saldo_inicial'], r['cargos'],
+          r['abonos'], r['saldo_final']] for r in rows],
+        ['Cuenta', 'Nombre', 'Tipo', 'Saldo inicial', 'Cargos', 'Abonos', 'Saldo final'],
+        f'balanza_{year}-{month:02d}.csv'
+    )
+
+
+def _income_statement_data(conn, year, month):
+    """Estado de resultados grouped by section for a fiscal month."""
+    cur = conn.cursor()
+
+    period_start, period_end = _period_bounds(year, month)
 
     cur.execute("""
         SELECT a.id, a.code, a.name, a.type,
@@ -456,16 +513,215 @@ def income_statement():
     utilidad_neta = round(utilidad_bruta - total_gastos, 2)
 
     cur.close()
-    conn.close()
 
-    return jsonify({
+    return {
         'period': {'year': year, 'month': month},
         'ingresos': {'items': ingresos, 'total': round(total_ingresos, 2)},
         'costos': {'items': costos, 'total': round(total_costos, 2)},
         'utilidad_bruta': utilidad_bruta,
         'gastos': {'items': gastos, 'total': round(total_gastos, 2)},
         'utilidad_neta': utilidad_neta,
-    })
+    }
+
+
+@accounting_bp.route('/income-statement', methods=['GET'])
+@require_auth('accounting.view')
+def income_statement():
+    """Estado de resultados for a period.
+
+    Query params: year, month
+
+    Groups: Ingresos (400), Costos (500), Gastos (600)
+    Result: Ingresos - Costos - Gastos = Utilidad/Perdida
+    """
+    conn = get_tenant_conn(g.tenant_id)
+
+    year = int(request.args.get('year', date.today().year))
+    month = int(request.args.get('month', date.today().month))
+
+    data = _income_statement_data(conn, year, month)
+
+    conn.close()
+    return jsonify(data)
+
+
+@accounting_bp.route('/income-statement/export', methods=['GET'])
+@require_auth('accounting.view')
+def export_income_statement():
+    """Export the estado de resultados as CSV (default) or JSON.
+
+    Query params: year, month, format=csv|json
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    year = int(request.args.get('year', date.today().year))
+    month = int(request.args.get('month', date.today().month))
+    fmt = request.args.get('format', 'csv').lower()
+
+    data = _income_statement_data(conn, year, month)
+    conn.close()
+
+    if fmt == 'json':
+        return jsonify(data)
+
+    rows = []
+    for item in data['ingresos']['items']:
+        rows.append(['Ingresos', item['code'], item['name'], item['amount']])
+    rows.append(['Ingresos', '', 'Total ingresos', data['ingresos']['total']])
+    for item in data['costos']['items']:
+        rows.append(['Costos', item['code'], item['name'], item['amount']])
+    rows.append(['Costos', '', 'Total costos', data['costos']['total']])
+    rows.append(['', '', 'Utilidad bruta', data['utilidad_bruta']])
+    for item in data['gastos']['items']:
+        rows.append(['Gastos', item['code'], item['name'], item['amount']])
+    rows.append(['Gastos', '', 'Total gastos', data['gastos']['total']])
+    rows.append(['', '', 'Utilidad neta', data['utilidad_neta']])
+
+    return _csv_response(
+        rows,
+        ['Seccion', 'Cuenta', 'Nombre', 'Importe'],
+        f'estado_resultados_{year}-{month:02d}.csv'
+    )
+
+
+@accounting_bp.route('/entries/export', methods=['GET'])
+@require_auth('accounting.view')
+def export_entries():
+    """Export the polizas (journal entries) of a period with their lines.
+
+    Query params: date_from, date_to, type, reference_type, format=csv|json
+
+    CSV output has one row per journal entry line (accountant-friendly).
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+
+    fmt = request.args.get('format', 'csv').lower()
+    date_from = request.args.get('date_from')
+    date_to = request.args.get('date_to')
+    entry_type = request.args.get('type')
+    ref_type = request.args.get('reference_type')
+
+    where_clauses = ["e.status = 'posted'"]
+    params = []
+    if date_from:
+        where_clauses.append("e.date >= %s")
+        params.append(date_from)
+    if date_to:
+        where_clauses.append("e.date <= %s")
+        params.append(date_to)
+    if entry_type:
+        where_clauses.append("e.type = %s")
+        params.append(entry_type)
+    if ref_type:
+        where_clauses.append("e.reference_type = %s")
+        params.append(ref_type)
+
+    where = " AND ".join(where_clauses)
+
+    cur.execute(f"""
+        SELECT e.entry_number, e.date, e.type, e.description,
+               e.reference_type, e.reference_id,
+               a.code, a.name, l.description, l.debit, l.credit
+        FROM journal_entry_lines l
+        JOIN journal_entries e ON l.journal_entry_id = e.id
+        JOIN accounts a ON l.account_id = a.id
+        WHERE {where}
+        ORDER BY e.date, e.entry_number, l.id
+    """, params)
+
+    rows = []
+    for r in cur.fetchall():
+        rows.append({
+            'entry_number': r[0],
+            'date': r[1].isoformat() if r[1] else None,
+            'type': r[2],
+            'entry_description': r[3],
+            'reference_type': r[4],
+            'reference_id': r[5],
+            'account_code': r[6],
+            'account_name': r[7],
+            'line_description': r[8],
+            'debit': float(r[9] or 0),
+            'credit': float(r[10] or 0),
+        })
+
+    cur.close()
+    conn.close()
+
+    if fmt == 'json':
+        return jsonify({'data': rows, 'count': len(rows)})
+
+    return _csv_response(
+        [[r['entry_number'], r['date'], r['type'], r['entry_description'],
+          r['reference_type'], r['reference_id'], r['account_code'],
+          r['account_name'], r['line_description'], r['debit'], r['credit']]
+         for r in rows],
+        ['Poliza', 'Fecha', 'Tipo', 'Descripcion poliza', 'Referencia', 'Ref ID',
+         'Cuenta', 'Nombre cuenta', 'Descripcion', 'Debe', 'Haber'],
+        f'polizas_{date.today().isoformat()}.csv'
+    )
+
+
+@accounting_bp.route('/diot/export', methods=['GET'])
+@require_auth('accounting.view')
+def export_diot():
+    """Export the DIOT (operations with third parties) for a fiscal month.
+
+    Data source: purchase orders received during the month, grouped by
+    supplier. All amounts are expressed in the purchase-order currency (MXN
+    for locally created orders).
+
+    Query params: year, month, format=csv|json
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+
+    year = int(request.args.get('year', date.today().year))
+    month = int(request.args.get('month', date.today().month))
+    fmt = request.args.get('format', 'csv').lower()
+
+    period_start, period_end = _period_bounds(year, month)
+
+    cur.execute("""
+        SELECT s.rfc, s.name,
+               COALESCE(SUM(po.subtotal), 0) as base,
+               COALESCE(SUM(po.tax_total), 0) as iva,
+               COALESCE(SUM(po.total), 0) as total
+        FROM purchase_orders po
+        JOIN suppliers s ON s.id = po.supplier_id
+        WHERE po.status NOT IN ('draft', 'cancelled')
+          AND po.received_at >= %s AND po.received_at < %s
+        GROUP BY s.rfc, s.name
+        ORDER BY s.name
+    """, (period_start, period_end))
+
+    rows = []
+    for r in cur.fetchall():
+        rows.append({
+            'rfc': r[0] or '',
+            'supplier_name': r[1],
+            'tipo_tercero': '04',      # Proveedor
+            'tipo_operacion': '02',    # Compra de bienes
+            'base': round(float(r[2]), 2),
+            'iva_16': round(float(r[3]), 2),
+            'iva_retenido': 0.0,
+            'total': round(float(r[4]), 2),
+        })
+
+    cur.close()
+    conn.close()
+
+    if fmt == 'json':
+        return jsonify({'data': rows, 'period': {'year': year, 'month': month},
+                        'count': len(rows)})
+
+    return _csv_response(
+        [[r['tipo_tercero'], r['tipo_operacion'], r['rfc'], r['supplier_name'],
+          r['base'], r['iva_16'], r['iva_retenido'], r['total']] for r in rows],
+        ['Tipo de tercero', 'Tipo de operacion', 'RFC', 'Nombre', 'Base',
+         'IVA 16%', 'IVA retenido', 'Monto total'],
+        f'diot_{year}-{month:02d}.csv'
+    )
 
 
 @accounting_bp.route('/balance-sheet', methods=['GET'])
@@ -578,6 +834,7 @@ def aging_report():
 
     rows = []
     if report_type == 'payable':
+        paid_by_po = _supplier_paid_totals(cur)
         # Accounts payable: purchase orders to suppliers that are not paid/cancelled
         cur.execute("""
             SELECT po.id, po.supplier_invoice, po.total, po.created_at, po.expected_date,
@@ -596,7 +853,7 @@ def aging_report():
             status = r[5]
             vendor_name = r[7]
 
-            paid = 0  # TODO: sum supplier payments when that table is added
+            paid = paid_by_po.get(po_id, 0.0)
             balance = round(total - paid, 2)
             if balance <= 0:
                 continue
@@ -772,6 +1029,7 @@ def export_aging():
 
     if report_type == 'payable':
         # Payables always CSV for now
+        paid_by_po = _supplier_paid_totals(cur)
         output = io.StringIO()
         writer = csv.writer(output)
         writer.writerow(['OC', 'Proveedor', 'Fecha emision', 'Fecha vencimiento',
@@ -792,10 +1050,10 @@ def export_aging():
             expected = r[4]
             status = r[5]
             vendor = r[6]
-            paid = 0
+            paid = paid_by_po.get(po_id, 0.0)
             balance = round(total - paid, 2)
             days_overdue = (datetime.now(created_at.tzinfo) - expected).days if expected and created_at else 0
-            status_label = 'Vencida' if days_overdue > 0 else 'Pendiente'
+            status_label = 'Vencida' if days_overdue > 0 else ('Parcial' if paid > 0 else 'Pendiente')
             writer.writerow([
                 invoice, vendor,
                 created_at.strftime('%Y-%m-%d') if created_at else '',
@@ -916,6 +1174,100 @@ def export_aging():
     )
 
 
+# ─── Accounts Payable payments ─────────────────────
+
+@accounting_bp.route('/supplier-payments', methods=['POST'])
+@require_auth('accounting.create')
+def create_supplier_payment():
+    """Register a payment to a supplier against a purchase order (CxP).
+
+    Body: {po_id: int, amount: float, payment_method: str, reference: str}
+    """
+    data = request.get_json() or {}
+    if not data.get('po_id'):
+        return jsonify({'error': 'po_id is required'}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = record_supplier_payment_entry(conn, data)
+
+        log_action(conn, 'SUPPLIER_PAYMENT', 'purchase_order', result['po_id'],
+                   new_value={'amount': float(data.get('amount', 0)),
+                              'payment_id': result['payment_id'],
+                              'status': result['status']})
+
+        conn.commit()
+        conn.close()
+        return jsonify(result), 201
+
+    except ValueError as e:
+        conn.rollback()
+        conn.close()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        conn.close()
+        return jsonify({'error': str(e)}), 500
+
+
+@accounting_bp.route('/supplier-payments', methods=['GET'])
+@require_auth('accounting.view')
+def list_supplier_payments():
+    """List supplier payments. Query params: po_id, supplier_id, page, per_page."""
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+
+    cur.execute("SELECT to_regclass('public.supplier_payments')")
+    if not cur.fetchone()[0]:
+        cur.close(); conn.close()
+        return jsonify({'data': [], 'pagination': {'page': 1, 'per_page': 50, 'total': 0, 'total_pages': 0}})
+
+    page = int(request.args.get('page', 1))
+    per_page = min(int(request.args.get('per_page', 50)), 200)
+
+    where_clauses = ["1=1"]
+    params = []
+    if request.args.get('po_id'):
+        where_clauses.append("sp.po_id = %s")
+        params.append(int(request.args.get('po_id')))
+    if request.args.get('supplier_id'):
+        where_clauses.append("sp.supplier_id = %s")
+        params.append(int(request.args.get('supplier_id')))
+    where = " AND ".join(where_clauses)
+
+    cur.execute(f"SELECT count(*) FROM supplier_payments sp WHERE {where}", params)
+    total = cur.fetchone()[0]
+
+    cur.execute(f"""
+        SELECT sp.id, sp.po_id, sp.supplier_id, sp.amount, sp.payment_method,
+               sp.reference, sp.created_at, s.name as supplier_name
+        FROM supplier_payments sp
+        LEFT JOIN suppliers s ON sp.supplier_id = s.id
+        WHERE {where}
+        ORDER BY sp.created_at DESC
+        LIMIT %s OFFSET %s
+    """, params + [per_page, (page - 1) * per_page])
+
+    rows = []
+    for r in cur.fetchall():
+        rows.append({
+            'id': r[0], 'po_id': r[1], 'supplier_id': r[2],
+            'amount': float(r[3]) if r[3] else 0,
+            'payment_method': r[4], 'reference': r[5],
+            'created_at': str(r[6]) if r[6] else None,
+            'supplier_name': r[7],
+        })
+
+    cur.close()
+    conn.close()
+
+    total_pages = (total + per_page - 1) // per_page
+    return jsonify({
+        'data': rows,
+        'pagination': {'page': page, 'per_page': per_page, 'total': total, 'total_pages': total_pages}
+    })
+
+
 # ─── Fiscal Periods ────────────────────────────────
 
 @accounting_bp.route('/periods', methods=['GET'])
diff --git a/pos/blueprints/auth_bp.py b/pos/blueprints/auth_bp.py
index dfac6af..901a52f 100644
--- a/pos/blueprints/auth_bp.py
+++ b/pos/blueprints/auth_bp.py
@@ -254,7 +254,7 @@ def list_login_employees(tenant_id=None):
         name = row[1]
         parts = name.split()
         initials = ''.join([p[0].upper() for p in parts[:2]]) if parts else '?'
-        role_labels = {'owner': 'Dueño', 'admin': 'Administrador', 'cashier': 'Cajero', 'counter': 'Mostrador', 'warehouse': 'Almacén', 'accountant': 'Contador', 'workshop': 'Taller', 'mechanic': 'Mecánico'}
+        role_labels = {'owner': 'Dueño', 'admin': 'Administrador', 'cashier': 'Cajero', 'counter': 'Mostrador', 'warehouse': 'Almacén', 'accountant': 'Contador', 'workshop': 'Taller', 'mechanic': 'Mecánico', 'driver': 'Repartidor'}
         employees.append({
             'id': row[0],
             'name': name,
diff --git a/pos/blueprints/b2b_bp.py b/pos/blueprints/b2b_bp.py
new file mode 100644
index 0000000..1b1c585
--- /dev/null
+++ b/pos/blueprints/b2b_bp.py
@@ -0,0 +1,258 @@
+# /home/Autopartes/pos/blueprints/b2b_bp.py
+"""Nexus B2B yonke marketplace blueprint.
+
+Wholesale trading of used parts between yonkes (deshuesaderos): one tenant
+publishes its used pieces, another buys them. Listings and orders live in the
+MASTER DB; the pieces stay in each tenant DB.
+
+All endpoints live under /pos/api/b2b.
+Permissions: yonke.view for reads, yonke.manage for writes.
+
+Seller:
+  GET    /pos/api/b2b/my-listings          my published listings
+  POST   /pos/api/b2b/listings             publish/refresh a listing
+  PATCH  /pos/api/b2b/listings/<id>        edit price/status/notes
+  DELETE /pos/api/b2b/listings/<id>        soft-delete (status='removed')
+  GET    /pos/api/b2b/seller/status        {is_seller, listings_count, ...}
+Buyer:
+  GET    /pos/api/b2b/catalog              available listings from other tenants
+  GET    /pos/api/b2b/listings/<id>        listing detail (+ seller_name)
+Orders (both):
+  POST   /pos/api/b2b/orders               create an order from listings
+  GET    /pos/api/b2b/orders               my orders as buyer
+  GET    /pos/api/b2b/orders/incoming      my orders as seller
+  GET    /pos/api/b2b/orders/<id>          order detail (participants only)
+  PUT    /pos/api/b2b/orders/<id>/status   transition the order status
+"""
+
+from flask import Blueprint, g, jsonify, request
+from middleware import require_auth
+from services import b2b_service
+from tenant_db import get_master_conn
+
+b2b_bp = Blueprint('b2b', __name__, url_prefix='/pos/api/b2b')
+
+
+def _int_arg(name, default, minimum, maximum):
+    try:
+        val = int(request.args.get(name, default))
+    except (TypeError, ValueError):
+        return default
+    return min(max(val, minimum), maximum)
+
+
+def _error_response(e):
+    """Map a service exception to (json, status); never leaks a 500."""
+    if isinstance(e, b2b_service.B2BForbidden):
+        return jsonify({'error': str(e)}), 403
+    if isinstance(e, b2b_service.B2BNotFound):
+        return jsonify({'error': str(e)}), 404
+    if isinstance(e, b2b_service.B2BValidationError):
+        return jsonify({'error': str(e)}), 400
+    return jsonify({'error': str(e)}), 500
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# SELLER
+# ═══════════════════════════════════════════════════════════════════════════
+
+@b2b_bp.route('/my-listings', methods=['GET'])
+@require_auth('yonke.view')
+def my_listings():
+    """Listings published by the current tenant."""
+    master = get_master_conn()
+    try:
+        data = b2b_service.list_my_listings(
+            master, g.tenant_id, status=request.args.get('status'))
+        return jsonify({'data': data})
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/listings', methods=['POST'])
+@require_auth('yonke.manage')
+def publish_listing():
+    """Publish (or refresh) one of my used/rebuild pieces to the B2B catalog."""
+    data = request.get_json(silent=True) or {}
+    master = get_master_conn()
+    try:
+        listing = b2b_service.publish_listing(master, g.tenant_id, data)
+        master.commit()
+        return jsonify(listing), 201
+    except Exception as e:
+        master.rollback()
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/listings/<int:listing_id>', methods=['PATCH'])
+@require_auth('yonke.manage')
+def update_listing(listing_id):
+    """Edit price_wholesale / status / notes of one of my listings."""
+    data = request.get_json(silent=True) or {}
+    master = get_master_conn()
+    try:
+        listing = b2b_service.update_listing(master, g.tenant_id, listing_id, data)
+        master.commit()
+        return jsonify(listing)
+    except Exception as e:
+        master.rollback()
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/listings/<int:listing_id>', methods=['DELETE'])
+@require_auth('yonke.manage')
+def remove_listing(listing_id):
+    """Soft-delete a listing (status='removed')."""
+    master = get_master_conn()
+    try:
+        b2b_service.remove_listing(master, g.tenant_id, listing_id)
+        master.commit()
+        return jsonify({'ok': True, 'id': listing_id, 'status': 'removed'})
+    except Exception as e:
+        master.rollback()
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/seller/status', methods=['GET'])
+@require_auth('yonke.view')
+def seller_status():
+    """{is_seller, listings_count, incoming_orders} for the current tenant."""
+    master = get_master_conn()
+    try:
+        return jsonify(b2b_service.get_seller_status(master, g.tenant_id))
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# BUYER — catalog
+# ═══════════════════════════════════════════════════════════════════════════
+
+@b2b_bp.route('/catalog', methods=['GET'])
+@require_auth('yonke.view')
+def catalog():
+    """Available listings from OTHER tenants, with seller_name and pagination."""
+    master = get_master_conn()
+    try:
+        items, pagination = b2b_service.list_catalog(
+            master, g.tenant_id,
+            filters={
+                'q': request.args.get('q'),
+                'make': request.args.get('make'),
+                'model': request.args.get('model'),
+                'year': request.args.get('year'),
+                'grade': request.args.get('grade'),
+            },
+            page=_int_arg('page', 1, 1, 10**9),
+            per_page=_int_arg('per_page', 12, 1, 100),
+        )
+        return jsonify({'data': items, 'pagination': pagination})
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/listings/<int:listing_id>', methods=['GET'])
+@require_auth('yonke.view')
+def get_listing(listing_id):
+    """Listing detail with seller_name."""
+    master = get_master_conn()
+    try:
+        listing = b2b_service.get_listing(master, listing_id)
+        if not listing:
+            return jsonify({'error': 'Listing no encontrado'}), 404
+        return jsonify(listing)
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# ORDERS
+# ═══════════════════════════════════════════════════════════════════════════
+
+@b2b_bp.route('/orders', methods=['POST'])
+@require_auth('yonke.manage')
+def create_order():
+    """Create a pending order from one or more listings (single seller)."""
+    data = request.get_json(silent=True) or {}
+    master = get_master_conn()
+    try:
+        order = b2b_service.create_order(
+            master, g.tenant_id, data.get('items'), notes=data.get('notes'))
+        master.commit()
+        return jsonify(order), 201
+    except Exception as e:
+        master.rollback()
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/orders', methods=['GET'])
+@require_auth('yonke.view')
+def list_orders():
+    """My orders as buyer (role='buyer')."""
+    master = get_master_conn()
+    try:
+        return jsonify({'data': b2b_service.list_orders(master, g.tenant_id, 'buyer')})
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/orders/incoming', methods=['GET'])
+@require_auth('yonke.view')
+def list_incoming_orders():
+    """Orders I must fulfil as seller (role='seller')."""
+    master = get_master_conn()
+    try:
+        return jsonify({'data': b2b_service.list_orders(master, g.tenant_id, 'seller')})
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/orders/<int:order_id>', methods=['GET'])
+@require_auth('yonke.view')
+def get_order(order_id):
+    """Order detail (buyer or seller of that order only)."""
+    master = get_master_conn()
+    try:
+        return jsonify(b2b_service.get_order(master, g.tenant_id, order_id))
+    except Exception as e:
+        return _error_response(e)
+    finally:
+        master.close()
+
+
+@b2b_bp.route('/orders/<int:order_id>/status', methods=['PUT'])
+@require_auth('yonke.manage')
+def update_order_status(order_id):
+    """Transition an order status (role-checked). 'received' also stocks the buyer."""
+    data = request.get_json(silent=True) or {}
+    master = get_master_conn()
+    try:
+        result = b2b_service.update_order_status(
+            master, g.tenant_id, order_id, data.get('status'),
+            branch_id=g.branch_id)
+        return jsonify(result)
+    except Exception as e:
+        master.rollback()
+        return _error_response(e)
+    finally:
+        master.close()
diff --git a/pos/blueprints/cashregister_bp.py b/pos/blueprints/cashregister_bp.py
index 9a99aa6..5de3c1c 100644
--- a/pos/blueprints/cashregister_bp.py
+++ b/pos/blueprints/cashregister_bp.py
@@ -1,12 +1,15 @@
 # /home/Autopartes/pos/blueprints/cashregister_bp.py
 """Cash register blueprint: open/close register, cash movements, X/Z cuts."""
 
+import logging
 from datetime import datetime
 from flask import Blueprint, request, jsonify, g
 from middleware import require_auth, has_permission
 from tenant_db import get_tenant_conn
 from services.audit import log_action
 
+logger = logging.getLogger('pos')
+
 cashregister_bp = Blueprint('cashregister', __name__, url_prefix='/pos/api/register')
 
 
@@ -18,6 +21,29 @@ def _can_operate_register():
     return g.employee_role in _REGISTER_ROLES or 'pos.sell' in g.permissions
 
 
+def _int_arg(name, default=None, min_value=None, max_value=None):
+    """Parse an integer query-string argument safely.
+
+    Bad input (e.g. ?per_page=abc) falls back to the default instead of
+    raising ValueError and returning a 500.
+    """
+    raw = request.args.get(name)
+    if raw is None or raw == '':
+        value = default
+    else:
+        try:
+            value = int(raw)
+        except (TypeError, ValueError):
+            value = default
+    if value is None:
+        return None
+    if min_value is not None and value < min_value:
+        value = min_value
+    if max_value is not None and value > max_value:
+        value = max_value
+    return value
+
+
 @cashregister_bp.route('/open', methods=['POST'])
 @require_auth()
 def open_register():
@@ -220,8 +246,35 @@ def _compute_register_summary(conn, register_id):
         total_sales += amount
         total_sales_count += count
 
-    # Cash sales specifically (for expected cash calculation)
-    cash_from_sales = sales_by_method.get('efectivo', {}).get('amount', 0)
+    # Cash received for the expected-cash calculation:
+    #   - credit sales collect nothing at sale time (their abonos arrive as
+    #     cash movements), so they contribute 0
+    #   - cash sales contribute their total (change is discounted below)
+    #   - mixed/other sales contribute only their cash portion from sale_payments
+    # Layaways already log every deposit as a cash movement, so their
+    # conversion sale is excluded here to avoid counting that cash twice.
+    cur.execute("""
+        SELECT COALESCE(SUM(
+            CASE
+                WHEN s.sale_type = 'credit' THEN 0
+                WHEN s.payment_method = 'efectivo' THEN s.total
+                ELSE COALESCE(cash.cash_amount, 0)
+            END
+        ), 0)
+        FROM sales s
+        LEFT JOIN (
+            SELECT sale_id, SUM(amount) AS cash_amount
+            FROM sale_payments
+            WHERE method = 'efectivo'
+            GROUP BY sale_id
+        ) cash ON cash.sale_id = s.id
+        WHERE s.register_id = %s AND s.status = 'completed'
+          AND s.id NOT IN (
+              SELECT converted_sale_id FROM layaways
+              WHERE converted_sale_id IS NOT NULL
+          )
+    """, (register_id,))
+    cash_from_sales = float(cur.fetchone()[0])
 
     # Change given (cash out)
     cur.execute("""
@@ -230,15 +283,26 @@ def _compute_register_summary(conn, register_id):
     """, (register_id,))
     change_given = float(cur.fetchone()[0])
 
-    # Cash movements
+    # Cash movements. Refunds from devoluciones (reason 'Devolucion #...') are
+    # kept out of the generic 'out' bucket and subtracted separately below, so
+    # a refund lowers the expected cash exactly once.
     cur.execute("""
         SELECT type, COALESCE(SUM(amount), 0) FROM cash_movements
-        WHERE register_id = %s GROUP BY type
+        WHERE register_id = %s
+          AND NOT (type = 'out' AND reason LIKE 'Devolucion #%%')
+        GROUP BY type
     """, (register_id,))
     movements = {'in': 0.0, 'out': 0.0}
     for r in cur.fetchall():
         movements[r[0]] = float(r[1])
 
+    # Cash refunds handed back at this register (devoluciones in cash)
+    cur.execute("""
+        SELECT COALESCE(SUM(amount), 0) FROM cash_movements
+        WHERE register_id = %s AND type = 'out' AND reason LIKE 'Devolucion #%%'
+    """, (register_id,))
+    refunds_out = float(cur.fetchone()[0])
+
     # Cancelled sales
     cur.execute("""
         SELECT COUNT(*), COALESCE(SUM(total), 0) FROM sales
@@ -248,9 +312,10 @@ def _compute_register_summary(conn, register_id):
     cancelled_count = cancelled[0]
     cancelled_amount = float(cancelled[1])
 
-    # Expected cash = opening + cash sales - change + cash_in - cash_out
+    # Expected cash = opening + cash sales - change + cash_in - cash_out - refunds
     expected_cash = round(
-        opening_amount + cash_from_sales - change_given + movements['in'] - movements['out'],
+        opening_amount + cash_from_sales - change_given
+        + movements['in'] - movements['out'] - refunds_out,
         2
     )
 
@@ -277,6 +342,7 @@ def _compute_register_summary(conn, register_id):
         'change_given': round(change_given, 2),
         'cash_movements_in': round(movements['in'], 2),
         'cash_movements_out': round(movements['out'], 2),
+        'refunds_out': round(refunds_out, 2),
         'movement_detail': movement_detail,
         'cancelled_count': cancelled_count,
         'cancelled_amount': round(cancelled_amount, 2),
@@ -330,7 +396,7 @@ def cut_z():
     cur = conn.cursor()
 
     cur.execute("""
-        SELECT id FROM cash_registers
+        SELECT id, register_number FROM cash_registers
         WHERE employee_id = %s AND status = 'open'
     """, (g.employee_id,))
     reg = cur.fetchone()
@@ -338,7 +404,7 @@ def cut_z():
         cur.close(); conn.close()
         return jsonify({'error': 'No open register'}), 400
 
-    register_id = reg[0]
+    register_id, register_number = reg
     summary = _compute_register_summary(conn, register_id)
 
     expected = summary['expected_cash']
@@ -362,6 +428,22 @@ def cut_z():
 
         conn.commit()
 
+        # Accounting entry (non-blocking): move the counted cash to Bancos.
+        # The cut is already committed, so a failure here never loses the corte.
+        try:
+            from services.accounting_engine import record_cash_cut_entry
+            record_cash_cut_entry(conn, {
+                'id': register_id,
+                'register_number': register_number,
+                'closing_amount': closing_amount,
+            })
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logger.error(
+                f'Accounting entry for cash cut #{register_id} failed: {acc_err}'
+            )
+
         # Push notification to owner if cash difference > $500
         if abs(difference) > 500:
             try:
@@ -410,8 +492,8 @@ def register_history():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["cr.status = 'closed'"]
     params = []
@@ -422,7 +504,7 @@ def register_history():
 
     date_from = request.args.get('date_from')
     date_to = request.args.get('date_to')
-    employee_id = request.args.get('employee_id')
+    employee_id = _int_arg('employee_id')
 
     if not can_view_all:
         employee_id = g.employee_id
@@ -435,7 +517,7 @@ def register_history():
         params.append(date_to)
     if employee_id:
         where_clauses.append("cr.employee_id = %s")
-        params.append(int(employee_id))
+        params.append(employee_id)
 
     where = " AND ".join(where_clauses)
 
diff --git a/pos/blueprints/catalog_bp.py b/pos/blueprints/catalog_bp.py
index 08ac934..20321b2 100644
--- a/pos/blueprints/catalog_bp.py
+++ b/pos/blueprints/catalog_bp.py
@@ -19,11 +19,32 @@ from tenant_db import get_master_conn, get_tenant_conn
 from services import catalog_service
 from services.vin_decoder import decode_vin
 from services.plate_lookup import search_plate, register_plate, is_valid_mexican_plate, normalize_plate
+from services.inventory_vehicle_compat import get_inventory_by_vehicle
 from config import CATALOG_OEM_ENABLED
 
 catalog_bp = Blueprint('catalog', __name__, url_prefix='/pos/api/catalog')
 
 
+# ─── Guard: tablas TecDoc retiradas (junio 2026) ──────────────────────────
+_TECDOC_TABLES_CACHE = {'checked': False, 'exists': False}
+
+
+def _tecdoc_available(conn):
+    """True si las tablas TecDoc del catálogo OEM existen en la maestra."""
+    if _TECDOC_TABLES_CACHE['checked']:
+        return _TECDOC_TABLES_CACHE['exists']
+    try:
+        cur = conn.cursor()
+        cur.execute("SELECT 1 FROM pg_tables WHERE schemaname='public' AND tablename='parts' LIMIT 1")
+        exists = cur.fetchone() is not None
+        cur.close()
+    except Exception:
+        exists = False
+    _TECDOC_TABLES_CACHE['checked'] = True
+    _TECDOC_TABLES_CACHE['exists'] = exists
+    return exists
+
+
 def _oem_blocked():
     """Return a 403 response if OEM catalog is disabled."""
     if not CATALOG_OEM_ENABLED:
@@ -66,6 +87,9 @@ def _with_conns(fn):
         branch_id = request.args.get('branch_id', g.branch_id)
         return fn(master, tenant, branch_id)
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'oem_disabled': True,
+                    'error': 'Función no disponible (esquema TecDoc retirado)'}, 200), 200
         return jsonify({'error': str(e)}), 500
     finally:
         if master:
@@ -76,6 +100,15 @@ def _with_conns(fn):
             except: pass
 
 
+def _is_retired_schema_error(e):
+    """True si el error es por tablas TecDoc retiradas del esquema."""
+    try:
+        from psycopg2.errors import UndefinedTable, UndefinedColumn
+        return isinstance(e, (UndefinedTable, UndefinedColumn))
+    except Exception:
+        return 'does not exist' in str(e)
+
+
 def _master_only(fn):
     """Helper: open only master connection for hierarchy endpoints."""
     master = None
@@ -83,6 +116,9 @@ def _master_only(fn):
         master = get_master_conn()
         return fn(master)
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'oem_disabled': True,
+                    'error': 'Función no disponible (esquema TecDoc retirado)'}, 200), 200
         return jsonify({'error': str(e)}), 500
     finally:
         if master:
@@ -487,6 +523,33 @@ def decode_vin_route(vin):
 
 # ─── Plate Lookup ───
 
+
+
+@catalog_bp.route('/vehicle-inventory', methods=['GET'])
+@require_auth('catalog.view')
+def vehicle_inventory():
+    """Local inventory items compatible with a vehicle (model_year_engine_id)."""
+    mye_id = request.args.get('mye_id', type=int)
+    if not mye_id:
+        return jsonify({'error': 'mye_id requerido'}), 400
+    tenant = get_tenant_conn(g.tenant_id)
+    try:
+        rows = get_inventory_by_vehicle(tenant, None, mye_id,
+                                        branch_id=getattr(g, 'branch_id', None))
+        items = [{
+            'id': r[0], 'part_number': r[1], 'name': r[2], 'brand': r[3] or '',
+            'price_1': float(r[4] or 0), 'price_2': float(r[5] or 0),
+            'price_3': float(r[6] or 0), 'image_url': r[7] or '',
+            'stock': int(r[9] or 0),
+        } for r in rows]
+        return jsonify({'data': items})
+    finally:
+        try:
+            tenant.close()
+        except Exception:
+            pass
+
+
 @catalog_bp.route('/plate/<plate>', methods=['GET'])
 @require_auth('catalog.view')
 def plate_lookup(plate):
@@ -541,6 +604,9 @@ def plate_lookup(plate):
         return jsonify(response)
 
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'oem_disabled': True,
+                    'error': 'Función no disponible (esquema TecDoc retirado)'}, 200), 200
         return jsonify({'error': str(e)}), 500
     finally:
         if tenant:
@@ -576,6 +642,9 @@ def plate_register():
         )
         return jsonify({'id': rec_id, 'message': 'Placa registrada.'})
     except Exception as e:
+        if _is_retired_schema_error(e):
+            return jsonify({'data': [], 'oem_disabled': True,
+                    'error': 'Función no disponible (esquema TecDoc retirado)'}, 200), 200
         return jsonify({'error': str(e)}), 500
     finally:
         if tenant:
diff --git a/pos/blueprints/config_bp.py b/pos/blueprints/config_bp.py
index 8d276ce..9e3c431 100644
--- a/pos/blueprints/config_bp.py
+++ b/pos/blueprints/config_bp.py
@@ -2,6 +2,7 @@
 """Config blueprint: tenant configuration, branches, theming."""
 
 import json
+import re
 from flask import Blueprint, request, jsonify, g
 from middleware import require_auth, has_permission
 from tenant_db import get_tenant_conn
@@ -14,6 +15,7 @@ _DEFAULT_ROLE_PERMISSIONS = {
     'owner': [],  # owner bypasses permission checks
     'admin': ['pos.sell', 'pos.discount', 'pos.cancel', 'pos.view_cost',
               'inventory.view', 'inventory.create', 'inventory.edit', 'inventory.adjust', 'inventory.transfer',
+              'yonke.view', 'yonke.manage',
               'catalog.view', 'catalog.edit',
               'customers.view', 'customers.create', 'customers.edit', 'customers.edit_credit',
               'invoicing.view', 'invoicing.create',
@@ -40,6 +42,7 @@ _DEFAULT_ROLE_PERMISSIONS = {
                    'fleet.view'],
     'workshop': ['workshop.view', 'workshop.edit', 'workshop.add_items'],
     'mechanic': ['workshop.view'],
+    'driver': ['pos.remission'],
     'sales': ['pos.sell', 'pos.discount', 'pos.view', 'catalog.view',
               'customers.view', 'customers.create'],
 }
@@ -108,6 +111,10 @@ _AVAILABLE_PERMISSIONS = [
         {'key': 'inventory.import', 'label': 'Importar artículos masivamente'},
         {'key': 'inventory.view_cost', 'label': 'Ver costos'},
     ]},
+    {'module': 'Yonke', 'permissions': [
+        {'key': 'yonke.view', 'label': 'Ver Yonke (partes usadas)'},
+        {'key': 'yonke.manage', 'label': 'Gestionar Yonke (piezas y consignaciones)'},
+    ]},
     {'module': 'Catálogo', 'permissions': [
         {'key': 'catalog.view', 'label': 'Ver catálogo'},
         {'key': 'catalog.edit', 'label': 'Editar catálogo'},
@@ -433,7 +440,7 @@ def create_employee():
         nxt_name = PLANS[nxt]['name'] if nxt else 'Enterprise'
         return jsonify({'error': f'Plan limit reached ({limit} employees). Upgrade to {nxt_name}.'}), 403
 
-    valid_roles = ['admin', 'cashier', 'counter', 'warehouse', 'accountant', 'workshop', 'mechanic']
+    valid_roles = ['admin', 'cashier', 'counter', 'warehouse', 'accountant', 'workshop', 'mechanic', 'driver']
     if data['role'] not in valid_roles:
         return jsonify({'error': f'role must be one of: {", ".join(valid_roles)}'}), 400
 
@@ -455,6 +462,14 @@ def create_employee():
             (emp_id, perm)
         )
 
+    # Drivers also get a courier record so they can be assigned to deliveries
+    if data['role'] == 'driver':
+        cur.execute("""
+            INSERT INTO couriers (tenant_id, name, code, is_active)
+            VALUES (%s, %s, %s, true)
+            ON CONFLICT (tenant_id, code) DO NOTHING
+        """, (g.tenant_id, data['name'], f'emp_{emp_id}'))
+
     from services.audit import log_action
     log_action(conn, 'EMPLOYEE_CREATE', 'employee', emp_id,
                new_value={'name': data['name'], 'role': data['role']})
@@ -617,6 +632,15 @@ def update_employee(emp_id):
                 "INSERT INTO employee_permissions (employee_id, permission) VALUES (%s, %s) ON CONFLICT DO NOTHING",
                 (emp_id, perm)
             )
+        # Drivers also get a courier record so they can be assigned to deliveries
+        if data['role'] == 'driver':
+            cur.execute("SELECT name FROM employees WHERE id = %s", (emp_id,))
+            emp_name = cur.fetchone()[0]
+            cur.execute("""
+                INSERT INTO couriers (tenant_id, name, code, is_active)
+                VALUES (%s, %s, %s, true)
+                ON CONFLICT (tenant_id, code) DO NOTHING
+            """, (g.tenant_id, emp_name, f'emp_{emp_id}'))
 
     from services.audit import log_action
     log_action(conn, 'EMPLOYEE_UPDATE', 'employee', emp_id,
@@ -876,16 +900,15 @@ def get_billing():
 @config_bp.route('/billing/upgrade', methods=['POST'])
 @require_auth('config.edit')
 def upgrade_billing():
-    """Upgrade tenant plan."""
-    from services.billing import upgrade_plan
-    data = request.get_json() or {}
-    new_plan = data.get('plan')
-    if not new_plan:
-        return jsonify({'error': 'plan required'}), 400
-    result = upgrade_plan(g.tenant_id, new_plan)
-    if 'error' in result:
-        return jsonify(result), 400
-    return jsonify(result)
+    """Plan changes are handled by Nexus support, never self-service.
+
+    This endpoint previously let any tenant owner upgrade themselves to
+    `enterprise` (unlimited) for free — a direct revenue leak. It now
+    refuses every change; plans are managed from the master DB / admin panel.
+    """
+    return jsonify({
+        'error': 'Los cambios de plan los gestiona Nexus. Contacta a soporte para actualizar tu plan.'
+    }), 403
 
 
 # ─── Vehicle Compatibility Source ────────────────────
@@ -1000,6 +1023,49 @@ def update_allowed_brands():
 
 # ─── WhatsApp Configuration ────────────────────────────────────────────────
 
+
+INVOICE_TOGGLE_KEYS = {
+    'invoice_auto': 'invoice_auto',
+    'invoice_email': 'invoice_email',
+    'invoice_global': 'invoice_global',
+}
+
+
+@config_bp.route('/invoice-settings', methods=['GET'])
+@require_auth('config.view')
+def get_invoice_settings():
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    cur.execute("SELECT key, value FROM tenant_config WHERE key = ANY(%s)",
+                (list(INVOICE_TOGGLE_KEYS.values()),))
+    rows = {r[0]: r[1] for r in cur.fetchall()}
+    cur.close()
+    conn.close()
+    return jsonify({
+        'invoice_auto': rows.get('invoice_auto', 'false').lower() == 'true',
+        'invoice_email': rows.get('invoice_email', 'false').lower() == 'true',
+        'invoice_global': rows.get('invoice_global', 'false').lower() == 'true',
+    })
+
+
+@config_bp.route('/invoice-settings', methods=['PUT'])
+@require_auth('config.edit')
+def update_invoice_settings():
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    for json_key, cfg_key in INVOICE_TOGGLE_KEYS.items():
+        cur.execute("""
+            INSERT INTO tenant_config (key, value) VALUES (%s, %s)
+            ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value
+        """, (cfg_key, 'true' if data.get(json_key) else 'false'))
+    conn.commit()
+    cur.close()
+    conn.close()
+    return jsonify({'ok': True})
+
+
+
 @config_bp.route('/whatsapp', methods=['GET'])
 @require_auth('config.view')
 def get_whatsapp_config():
@@ -1016,6 +1082,14 @@ def get_whatsapp_config():
         'bridge_key': rows.get('whatsapp_bridge_key', ''),
         'enabled': rows.get('whatsapp_enabled', 'false').lower() == 'true',
         'phone_number': rows.get('whatsapp_phone_number', ''),
+        'provider': rows.get('whatsapp_provider', 'baileys'),
+        'phone_number_id': rows.get('wa_phone_number_id', ''),
+        'has_access_token': bool(rows.get('wa_access_token')),
+        'has_app_secret': bool(rows.get('wa_app_secret')),
+        'verify_token': rows.get('wa_verify_token', ''),
+        'api_base': rows.get('wa_api_base', ''),
+        'has_api_key': bool(rows.get('wa_api_key')),
+        'public_base': rows.get('wa_public_base', ''),
     })
 
 
@@ -1032,7 +1106,18 @@ def update_whatsapp_config():
         'whatsapp_bridge_key': data.get('bridge_key', ''),
         'whatsapp_enabled': 'true' if data.get('enabled') else 'false',
         'whatsapp_phone_number': data.get('phone_number', ''),
+        'whatsapp_provider': data.get('provider', 'baileys'),
+        'wa_phone_number_id': data.get('phone_number_id', ''),
+        'wa_verify_token': data.get('verify_token', ''),
+        'wa_api_base': data.get('api_base', ''),
+        'wa_public_base': data.get('public_base', ''),
     }
+    if data.get('api_key'):
+        settings['wa_api_key'] = data['api_key']
+    if data.get('access_token'):
+        settings['wa_access_token'] = data['access_token']
+    if data.get('app_secret'):
+        settings['wa_app_secret'] = data['app_secret']
 
     for key, value in settings.items():
         cur.execute("""
@@ -1047,26 +1132,151 @@ def update_whatsapp_config():
     return jsonify({'message': 'WhatsApp configuration updated'})
 
 
+# ─── Contactos de alerta (POR NEGOCIO) ─────────────────────────────────────
+# Los contactos que reciben alertas por WhatsApp son POR NEGOCIO: cada tenant
+# configura sus propios números en su `tenant_config` (`alert_phones`,
+# `alert_whatsapp_enabled`). No hay ningún teléfono global obligatorio; si un
+# negocio no configura nada, sus alertas simplemente no se envían (no-op, sin
+# error). El webhook de Alertmanager (`pos/app.py`) lee estas mismas claves.
+
+# `+` opcional seguido de 10-15 dígitos (formato internacional).
+_ALERT_PHONE_RE = re.compile(r'^\+?\d{10,15}$')
+
+
+def _normalize_alert_phones(raw):
+    """Normaliza contactos separados por comas.
+
+    Acepta una cadena ("+5215512345678, 5215587654321") o una lista/tupla.
+    Recorta espacios, valida cada número (`+` opcional + 10-15 dígitos) y
+    descarta el resto. Devuelve la tupla (validos, descartados).
+    """
+    if isinstance(raw, (list, tuple)):
+        chunks = []
+        for item in raw:
+            chunks.extend(str(item).split(','))
+    else:
+        chunks = str(raw or '').split(',')
+
+    valid, dropped = [], []
+    for chunk in chunks:
+        phone = chunk.strip()
+        if not phone:
+            continue
+        if _ALERT_PHONE_RE.match(phone):
+            if phone not in valid:
+                valid.append(phone)
+        else:
+            dropped.append(phone)
+    return valid, dropped
+
+
+@config_bp.route('/alert-contacts', methods=['GET'])
+@require_auth('config.view')
+def get_alert_contacts():
+    """Contactos de alerta por WhatsApp de ESTE negocio (tenant).
+
+    Son por negocio, nunca globales. `alert_phones` se devuelve como lista
+    normalizada; `alert_whatsapp_enabled` indica si el reenvío está activado.
+    Si el negocio no ha configurado nada, devuelve lista vacía y `false`
+    (las alertas serán no-op). `inherited_global` siempre es `false`: no se
+    hereda ningún teléfono global.
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        cur = conn.cursor()
+        cur.execute(
+            "SELECT key, value FROM tenant_config "
+            "WHERE key IN ('alert_phones', 'alert_whatsapp_enabled')"
+        )
+        rows = {r[0]: r[1] for r in cur.fetchall()}
+        cur.close()
+    finally:
+        conn.close()
+
+    phones, _ = _normalize_alert_phones(rows.get('alert_phones'))
+    return jsonify({
+        'alert_phones': phones,
+        'alert_whatsapp_enabled': str(rows.get('alert_whatsapp_enabled', 'false')).lower() == 'true',
+        'inherited_global': False,
+    })
+
+
+@config_bp.route('/alert-contacts', methods=['PUT'])
+@require_auth('config.edit')
+def update_alert_contacts():
+    """Guarda los contactos de alerta por WhatsApp de ESTE negocio.
+
+    Normaliza `alert_phones` (separa por comas, recorta y descarta basura:
+    solo se aceptan `+` opcional + 10-15 dígitos) y guarda
+    `alert_whatsapp_enabled` como booleano. Un payload vacío es válido y deja
+    al negocio sin contactos (alertas no-op). Devuelve lo guardado.
+    """
+    data = request.get_json(silent=True)
+    if data is None:
+        data = {}
+    if not isinstance(data, dict):
+        return jsonify({'error': 'JSON object required'}), 400
+
+    phones, dropped = _normalize_alert_phones(data.get('alert_phones'))
+    enabled = bool(data.get('alert_whatsapp_enabled'))
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        cur = conn.cursor()
+        cur.execute("""
+            INSERT INTO tenant_config (key, value) VALUES ('alert_phones', %s)
+            ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value
+        """, (','.join(phones),))
+        cur.execute("""
+            INSERT INTO tenant_config (key, value) VALUES ('alert_whatsapp_enabled', %s)
+            ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value
+        """, ('true' if enabled else 'false',))
+        conn.commit()
+        cur.close()
+    finally:
+        conn.close()
+
+    if dropped:
+        import logging
+        logging.getLogger(__name__).warning(
+            "alert-contacts: %d contacto(s) descartado(s) para tenant %s",
+            len(dropped), g.tenant_id,
+        )
+
+    return jsonify({
+        'alert_phones': phones,
+        'alert_whatsapp_enabled': enabled,
+        'inherited_global': False,
+        'dropped': dropped,
+    })
+
+
 @config_bp.route('/modules', methods=['GET'])
 @require_auth()
 def get_modules():
     """Get enabled modules for this tenant."""
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
-    cur.execute("SELECT key, value FROM tenant_config WHERE key LIKE 'module_%'")
+    cur.execute("SELECT key, value FROM tenant_config WHERE key LIKE 'module_%' OR key LIKE '%enabled'")
     rows = {row[0]: row[1] for row in cur.fetchall()}
     cur.close()
     conn.close()
 
-    def _bool(key):
-        return rows.get(key, 'true').lower() == 'true'
+    def _bool(name):
+        # Unificado 2026-10-11: el POS escribe 'module_X' y el dashboard 'X_enabled';
+        # aceptamos ambos para que el toggle se refleje en las dos capas.
+        v = rows.get('module_' + name)
+        if v is None:
+            v = rows.get(name + '_enabled')
+        return (v if v is not None else 'true').lower() == 'true'
 
     return jsonify({
-        'whatsapp': _bool('module_whatsapp'),
-        'marketplace': _bool('module_marketplace'),
-        'meli': _bool('module_meli'),
-        'catalog': _bool('module_catalog'),
-        'workshop': _bool('module_workshop'),
+        'whatsapp': _bool('whatsapp'),
+        'marketplace': _bool('marketplace'),
+        'meli': _bool('meli'),
+        'catalog': _bool('catalog'),
+        'workshop': _bool('workshop'),
+        'yonke': _bool('yonke'),
     })
 
 
@@ -1078,13 +1288,14 @@ def update_modules():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    settings = {
-        'module_whatsapp': 'true' if data.get('whatsapp') else 'false',
-        'module_marketplace': 'true' if data.get('marketplace') else 'false',
-        'module_meli': 'true' if data.get('meli') else 'false',
-        'module_catalog': 'true' if data.get('catalog') else 'false',
-        'module_workshop': 'true' if data.get('workshop') else 'false',
-    }
+    # Doble escritura: 'module_X' (POS) + 'X_enabled' (dashboard/consumidores).
+    # Solo se tocan las claves presentes en el payload (no se pisan las demás).
+    settings = {}
+    for name in ('whatsapp', 'marketplace', 'meli', 'catalog', 'workshop', 'yonke'):
+        if name in data:
+            val = 'true' if data.get(name) else 'false'
+            settings['module_' + name] = val
+            settings[name + '_enabled'] = val
 
     for key, value in settings.items():
         cur.execute("""
@@ -1222,6 +1433,7 @@ RECEIPT_CONFIG_KEYS = [
     'receipt_show_payment_details',
     'receipt_show_employee',
     'receipt_paper_width',
+    'receipt_auto_print',
 ]
 
 
@@ -1258,6 +1470,7 @@ def get_receipt_config():
         'show_phone': _bool('receipt_show_phone', False),
         'show_iva_breakdown': _bool('receipt_show_iva_breakdown', True),
         'show_payment_details': _bool('receipt_show_payment_details', True),
+        'auto_print': _bool('receipt_auto_print', False),
         'show_employee': _bool('receipt_show_employee', False),
         'paper_width': rows.get('receipt_paper_width', '80') or '80',
     })
diff --git a/pos/blueprints/customers_bp.py b/pos/blueprints/customers_bp.py
index 95a2dab..292f70b 100644
--- a/pos/blueprints/customers_bp.py
+++ b/pos/blueprints/customers_bp.py
@@ -2,11 +2,14 @@
 """Customers blueprint: CRUD, credit management, vehicles, account statements."""
 
 import json
+import logging
 from flask import Blueprint, request, jsonify, g
 from middleware import require_auth, has_permission
 from tenant_db import get_tenant_conn
 from services.audit import log_action
 
+logger = logging.getLogger('pos')
+
 customers_bp = Blueprint('customers', __name__, url_prefix='/pos/api/customers')
 
 
@@ -155,6 +158,14 @@ def get_customer(customer_id):
 
     customer['created_at'] = str(customer['created_at']) if customer['created_at'] else None
 
+    # Credit risk score (A9). Never block customer detail on scoring errors.
+    try:
+        from services.credit_scoring import score_customer
+        customer['credit_score'] = score_customer(conn, customer_id)
+    except Exception as exc:
+        logger.warning('credit score for customer %s failed: %s', customer_id, exc)
+        customer['credit_score'] = None
+
     # Recent purchases (last 20)
     cur.execute("""
         SELECT s.id, s.total, s.payment_method, s.sale_type, s.status, s.created_at,
@@ -199,6 +210,28 @@ def get_customer(customer_id):
     return jsonify(customer)
 
 
+@customers_bp.route('/<int:customer_id>/credit-score', methods=['GET'])
+@require_auth()
+def get_customer_credit_score(customer_id):
+    """Credit risk score for a customer (A9).
+
+    Returns {score, tier, recommended_limit, reasons, data_points, ...}.
+    """
+    if not _can_view_customers():
+        return jsonify({'error': 'Missing permissions: customers.view'}), 403
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        from services.credit_scoring import score_customer
+        return jsonify(score_customer(conn, customer_id))
+    except ValueError as e:
+        return jsonify({'error': str(e)}), 404
+    except Exception as e:
+        logger.error('credit-score for customer %s failed: %s', customer_id, e)
+        return jsonify({'error': 'Could not compute credit score'}), 500
+    finally:
+        conn.close()
+
+
 @customers_bp.route('/<int:customer_id>/purchases', methods=['GET'])
 @require_auth()
 def get_customer_purchases(customer_id):
@@ -624,6 +657,24 @@ def record_customer_payment(customer_id):
                    new_value={'credit_balance': new_balance, 'payment': amount})
 
         conn.commit()
+
+        # Accounting entry (non-blocking): Cobro de credito
+        #   Debit Caja/Bancos, Credit Clientes
+        try:
+            from services.accounting_engine import record_credit_payment_entry
+            record_credit_payment_entry(conn, {
+                'customer_id': customer_id,
+                'customer_name': cust[0],
+                'amount': amount,
+                'payment_method': payment_method,
+            })
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logger.error(
+                f'Accounting entry for customer payment #{payment_id} failed: {acc_err}'
+            )
+
         cur.close(); conn.close()
 
         return jsonify({
diff --git a/pos/blueprints/internal_bp.py b/pos/blueprints/internal_bp.py
index c4b9a84..0a1a962 100644
--- a/pos/blueprints/internal_bp.py
+++ b/pos/blueprints/internal_bp.py
@@ -7,7 +7,7 @@ import subprocess
 import socket
 from flask import Blueprint, request, jsonify
 from config import INTERNAL_API_KEY
-from tenant_db import get_master_conn, get_tenant_conn
+from tenant_db import get_master_conn, get_tenant_conn, get_tenant_conn_by_dbname
 
 internal_bp = Blueprint('internal', __name__, url_prefix='/pos/api/internal')
 
diff --git a/pos/blueprints/inventory_bp.py b/pos/blueprints/inventory_bp.py
index 6e815f9..947edd7 100644
--- a/pos/blueprints/inventory_bp.py
+++ b/pos/blueprints/inventory_bp.py
@@ -6,9 +6,13 @@ import json
 import os
 import csv
 from datetime import datetime, timedelta
-from flask import Blueprint, request, jsonify, g
+from flask import Blueprint, request, jsonify, g, Response
 from middleware import require_auth, has_permission
 from tenant_db import get_tenant_conn
+from services.reorder_engine import (
+    generate_alerts, list_alerts, acknowledge_alert, resolve_alert,
+    suggest_po_from_alerts,
+)
 from services.inventory_engine import (
     get_stock, get_stock_bulk, record_purchase, record_return,
     record_adjustment, record_transfer, record_initial,
@@ -65,14 +69,275 @@ def _to_int(val, default=0):
         return default
 
 
+# ─── Vehicle resolution (tablas de vehículos viven en la MAESTRA) ──────────
+_MYE_LOOKUP_CACHE = {}
+_MYE_TABLES_MISSING = {'flag': False}
+
+
+def _resolve_mye_master(make, model, year):
+    """Resuelve model_year_engine_id contra la BD maestra; None si no existe.
+
+    `brands`/`models`/`years`/`model_year_engine` sólo existen en la maestra:
+    consultarlas en la conexión del tenant lanzaba UndefinedTable y devolvía
+    500 en todo el bulk-import cuando el CSV traía make/model/year.
+    """
+    key = (make.strip().lower(), model.strip().lower(), int(year))
+    if key in _MYE_LOOKUP_CACHE:
+        return _MYE_LOOKUP_CACHE[key]
+    if _MYE_TABLES_MISSING['flag']:
+        return None
+
+    result = None
+    try:
+        mconn = get_master_conn()
+        try:
+            mcur = mconn.cursor()
+            try:
+                mcur.execute("""
+                    SELECT mye.id_mye FROM model_year_engine mye
+                    JOIN models m ON m.id_model = mye.model_id
+                    JOIN brands b ON b.id_brand = m.brand_id
+                    JOIN years y ON y.id_year = mye.year_id
+                    WHERE LOWER(b.name_brand) = LOWER(%s)
+                      AND LOWER(m.name_model) = LOWER(%s)
+                      AND y.year_car = %s
+                    LIMIT 1
+                """, (make, model, year))
+                row = mcur.fetchone()
+                result = row[0] if row else None
+            finally:
+                mcur.close()
+        finally:
+            mconn.close()
+    except Exception as e:
+        try:
+            from psycopg2.errors import UndefinedTable, UndefinedColumn
+            missing = isinstance(e, (UndefinedTable, UndefinedColumn))
+        except Exception:
+            missing = 'does not exist' in str(e)
+        if missing:
+            # Esquema ausente: no se reintenta; la compat se guarda como texto.
+            _MYE_TABLES_MISSING['flag'] = True
+        return None
+
+    _MYE_LOOKUP_CACHE[key] = result
+    return result
+
+
 # ─── AI Classification ───────────────────────────
 
-@inventory_bp.route('/classify/<part_number>', methods=['GET'])
+@inventory_bp.route('/classify/<part_number>', methods=['GET', 'POST'])
 @require_auth('inventory.create')
 def classify_part_endpoint(part_number):
-    """Ask AI to identify a part by its OEM number."""
+    """Ask AI to identify a part by its OEM number and persist its category.
+
+    In addition to the raw LLM result ({name, brand, vehicle, category}) this
+    now resolves the returned category to a tenant ``categories.id`` and stores
+    it in ``inventory.category_id`` when the part exists in the tenant catalog.
+    """
     from services.ai_chat import classify_part
+    from services.product_categorizer import CategoryResolver, map_llm_category
+
     result = classify_part(part_number)
+
+    category_id = None
+    category_name = None
+    persisted = 0
+    raw_cat = (result or {}).get('category') if isinstance(result, dict) else None
+    if raw_cat:
+        canonical = map_llm_category(raw_cat)
+        if canonical:
+            conn = get_tenant_conn(g.tenant_id)
+            try:
+                resolver = CategoryResolver(conn, create=True)
+                category_id, category_name = resolver.resolve(canonical)
+                if category_id is not None:
+                    cur = conn.cursor()
+                    cur.execute(
+                        "UPDATE inventory SET category_id = %s "
+                        "WHERE part_number = %s AND is_active = true "
+                        "AND (category_id IS NULL OR category_id <> %s)",
+                        (category_id, part_number, category_id),
+                    )
+                    persisted = cur.rowcount
+                    conn.commit()
+                    cur.close()
+            except Exception:
+                try:
+                    conn.rollback()
+                except Exception:
+                    pass
+            finally:
+                conn.close()
+
+    if isinstance(result, dict):
+        result['category_id'] = category_id
+        result['category_name'] = category_name
+        result['persisted'] = persisted
+    return jsonify(result)
+
+
+@inventory_bp.route('/categorize', methods=['POST'])
+@require_auth('inventory.edit')
+def categorize_inventory_endpoint():
+    """Auto-categorize inventory items and persist ``category_id``.
+
+    Body options:
+      {"items": [{"part_number", "name", "brand"}, ...]}   # explicit list
+      {"all": true, "limit": N, "only_uncategorized": true} # batch over catalog
+    Optional: use_llm (LLM fallback per item), create_categories (default true).
+    """
+    from services.product_categorizer import categorize_items, categorize_inventory
+
+    data = request.get_json(silent=True) or {}
+    use_llm = bool(data.get('use_llm'))
+    create_categories = bool(data.get('create_categories', True))
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        if data.get('all'):
+            limit = min(int(data.get('limit', 200) or 200), 5000)
+            summary = categorize_inventory(
+                conn, limit=limit,
+                only_uncategorized=bool(data.get('only_uncategorized', True)),
+                use_llm=use_llm, persist=True,
+                create_categories=create_categories,
+                offset=int(data.get('offset', 0) or 0),
+                after_id=data.get('after_id'),
+            )
+            return jsonify({'mode': 'all', **summary})
+
+        items = data.get('items')
+        if not items or not isinstance(items, list):
+            return jsonify({'error': 'items[] o all:true requerido'}), 400
+        summary = categorize_items(
+            conn, items[:2000], use_llm=use_llm, persist=True,
+            create_categories=create_categories,
+        )
+        return jsonify({'mode': 'items', **summary})
+    except Exception as e:
+        try:
+            conn.rollback()
+        except Exception:
+            pass
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@inventory_bp.route('/match-catalog', methods=['POST'])
+@require_auth('inventory.edit')
+def match_catalog_endpoint():
+    """Match inventory SKUs against the supplier catalog.
+
+    Populates ``inventory.catalog_part_id`` and registers matched supplier SKUs
+    as ``inventory_sku_aliases``. Body options: limit, offset, only_unmatched,
+    create_aliases, use_names, name_threshold, apply(false=dry run), after_id.
+    """
+    from services.sku_matcher import match_inventory, count_links
+
+    data = request.get_json(silent=True) or {}
+    limit = data.get('limit')
+    if limit is not None:
+        limit = min(int(limit), 50000)
+
+    tenant_conn = get_tenant_conn(g.tenant_id)
+    master_conn = get_master_conn()
+    try:
+        before = count_links(tenant_conn)
+        summary = match_inventory(
+            tenant_conn, master_conn, limit=limit,
+            offset=int(data.get('offset', 0) or 0),
+            only_unmatched=bool(data.get('only_unmatched', True)),
+            create_aliases=bool(data.get('create_aliases', True)),
+            use_names=bool(data.get('use_names', True)),
+            name_threshold=float(data.get('name_threshold', 0.82)),
+            apply=bool(data.get('apply', True)),
+            supplier=data.get('supplier'),
+            after_id=data.get('after_id'),
+        )
+        after = count_links(tenant_conn)
+        summary['before'] = {'total': before[0], 'linked': before[1]}
+        summary['after'] = {'total': after[0], 'linked': after[1]}
+        return jsonify(summary)
+    except Exception as e:
+        try:
+            tenant_conn.rollback()
+        except Exception:
+            pass
+        return jsonify({'error': str(e)}), 500
+    finally:
+        tenant_conn.close()
+        master_conn.close()
+
+
+@inventory_bp.route('/supplier-invoice/parse', methods=['POST'])
+@require_auth('inventory.create')
+def supplier_invoice_parse_endpoint():
+    """OCR/parse a supplier invoice (image or PDF) into structured lines.
+
+    Accepts multipart ``file`` or JSON ``{file_base64, filename}``. Returns the
+    detected lines plus an inventory/catalog match for each part number. Does
+    NOT create stock — the front-end confirms before a purchase is recorded.
+    """
+    import base64 as _b64
+    from services.invoice_ocr import parse_invoice
+
+    data = None
+    filename = None
+    content_type = None
+    f = request.files.get('file')
+    if f:
+        data = f.read()
+        filename = f.filename
+        content_type = f.content_type
+    else:
+        body = request.get_json(silent=True) or {}
+        raw = body.get('file_base64')
+        if raw:
+            if raw.startswith('data:'):
+                raw = raw.split(',', 1)[1]
+            try:
+                data = _b64.b64decode(raw)
+            except Exception:
+                return jsonify({'error': 'file_base64 inválido'}), 400
+            filename = body.get('filename')
+    if not data:
+        return jsonify({'error': 'file (multipart) o file_base64 requerido'}), 400
+
+    use_vision = request.args.get('vision', '1').lower() not in ('0', 'false', 'no')
+    result = parse_invoice(data, filename=filename, content_type=content_type,
+                           use_vision=use_vision)
+
+    # Enrich each line with the tenant inventory item it points at.
+    norm = {}
+    for ln in result.get('lines', []):
+        pn = (ln.get('part_number') or '').upper().replace(' ', '')
+        if pn:
+            norm[pn] = None
+    if norm:
+        conn = get_tenant_conn(g.tenant_id)
+        try:
+            cur = conn.cursor()
+            cur.execute(
+                "SELECT id, UPPER(REPLACE(part_number, ' ', '')) AS npn, name, cost "
+                "FROM inventory WHERE is_active = true AND "
+                "UPPER(REPLACE(part_number, ' ', '')) = ANY(%s)",
+                (list(norm.keys()),),
+            )
+            for inv_id, npn, name, cost in cur.fetchall():
+                norm[npn] = {'inventory_id': inv_id, 'name': name,
+                             'cost': float(cost) if cost is not None else None}
+            cur.close()
+        finally:
+            conn.close()
+        for ln in result.get('lines', []):
+            pn = (ln.get('part_number') or '').upper().replace(' ', '')
+            hit = norm.get(pn)
+            ln['matched_inventory_id'] = hit['inventory_id'] if hit else None
+            if hit and not ln.get('name'):
+                ln['name'] = hit['name']
+
     return jsonify(result)
 
 
@@ -414,6 +679,119 @@ def create_item():
         return jsonify({'error': str(e)}), 500
 
 
+@inventory_bp.route('/export', methods=['GET'])
+@require_auth('inventory.view')
+def export_inventory():
+    """Export the inventory as CSV, compatible with the bulk importer.
+
+    Query params:
+      branch_id: optional. When given, the stock (and location) columns reflect
+                 only that branch, and a branch_id column is appended so the
+                 file can be re-imported into the same branch.
+
+    Columns: part_number, sku_secondary, name, brand, category, cost, price,
+    price_2, price_3, stock, location, description, barcode, unit[, branch_id]
+    - without branch_id, stock is the total across all branches.
+    - cost is blank unless the user has the inventory.view_cost permission.
+    Streamed in chunks to support large catalogs.
+    """
+    include_cost = has_permission('inventory.view_cost')
+    branch_id = request.args.get('branch_id', type=int)
+
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+
+    branch_name = None
+    if branch_id:
+        cur.execute("SELECT name FROM branches WHERE id = %s", (branch_id,))
+        brow = cur.fetchone()
+        if not brow:
+            cur.close(); conn.close()
+            return jsonify({'error': f'Branch {branch_id} not found'}), 400
+        branch_name = brow[0]
+        cur.execute("""
+            SELECT i.part_number,
+                   (SELECT a.sku FROM inventory_sku_aliases a
+                     WHERE a.inventory_id = i.id ORDER BY a.id LIMIT 1) AS sku_secondary,
+                   i.name, i.brand, c.name AS category, i.cost,
+                   i.price_1, i.price_2, i.price_3,
+                   COALESCE(ist.stock, 0) AS stock,
+                   COALESCE(ist.location, i.location) AS location,
+                   i.description, i.barcode, i.unit
+            FROM inventory i
+            LEFT JOIN categories c ON c.id = i.category_id
+            LEFT JOIN inventory_stock ist
+              ON ist.inventory_id = i.id AND ist.branch_id = %s
+            WHERE i.is_active = true
+            ORDER BY i.part_number
+        """, (branch_id,))
+    else:
+        cur.execute("""
+            SELECT i.part_number,
+                   (SELECT a.sku FROM inventory_sku_aliases a
+                     WHERE a.inventory_id = i.id ORDER BY a.id LIMIT 1) AS sku_secondary,
+                   i.name, i.brand, c.name AS category, i.cost,
+                   i.price_1, i.price_2, i.price_3,
+                   COALESCE(st.total_stock, 0) AS stock,
+                   i.location, i.description, i.barcode, i.unit
+            FROM inventory i
+            LEFT JOIN categories c ON c.id = i.category_id
+            LEFT JOIN (
+                SELECT inventory_id, SUM(stock) AS total_stock
+                FROM inventory_stock GROUP BY inventory_id
+            ) st ON st.inventory_id = i.id
+            WHERE i.is_active = true
+            ORDER BY i.part_number
+        """)
+
+    def generate():
+        output = io.StringIO()
+        writer = csv.writer(output)
+        try:
+            header = ['part_number', 'sku_secondary', 'name', 'brand',
+                      'category', 'cost', 'price', 'price_2', 'price_3',
+                      'stock', 'location', 'description', 'barcode', 'unit']
+            if branch_id:
+                header.append('branch_id')
+            writer.writerow(header)
+            # BOM so Excel opens UTF-8 correctly
+            yield '\ufeff' + output.getvalue()
+            output.seek(0); output.truncate(0)
+            while True:
+                rows = cur.fetchmany(1000)
+                if not rows:
+                    break
+                for r in rows:
+                    row = [
+                        r[0] or '', r[1] or '', r[2] or '', r[3] or '', r[4] or '',
+                        f'{float(r[5]):.2f}' if include_cost and r[5] is not None else '',
+                        f'{float(r[6]):.2f}' if r[6] is not None else '0.00',
+                        f'{float(r[7]):.2f}' if r[7] is not None else '',
+                        f'{float(r[8]):.2f}' if r[8] is not None else '',
+                        int(r[9]) if r[9] is not None else 0,
+                        r[10] or '', r[11] or '', r[12] or '', r[13] or '',
+                    ]
+                    if branch_id:
+                        row.append(branch_id)
+                    writer.writerow(row)
+                yield output.getvalue()
+                output.seek(0); output.truncate(0)
+        finally:
+            cur.close()
+            conn.close()
+
+    if branch_id:
+        safe_branch = ''.join(ch if ch.isalnum() else '_' for ch in (branch_name or str(branch_id)))
+        filename = f"inventario_{safe_branch}_{datetime.now().strftime('%Y%m%d_%H%M')}.csv"
+    else:
+        filename = f"inventario_completo_{datetime.now().strftime('%Y%m%d_%H%M')}.csv"
+    return Response(
+        generate(),
+        mimetype='text/csv; charset=utf-8',
+        headers={'Content-Disposition': f'attachment; filename="{filename}"'},
+    )
+
+
 @inventory_bp.route('/items/bulk-import', methods=['POST'])
 @require_auth('inventory.edit')
 def bulk_import_items():
@@ -422,8 +800,12 @@ def bulk_import_items():
     Expects multipart/form-data with a 'file' (CSV/Excel) or JSON body.
     Headers:
       X-Import-Mode: 'strict' (default) aborts on first error; 'lenient' skips bad rows.
-      X-Import-Strategy: 'qwen' (default) auto-generates missing compat via QWEN;
-                         'skip' ignores missing compat; 'reject' requires all compat.
+      X-Import-Strategy: 'skip' (default) ignores missing compat and never
+                         calls QWEN; 'qwen' auto-generates missing compat via
+                         QWEN (opt-in: 20.7M noisy fitment rows so far);
+                         'reject' requires all compat.
+      X-Import-Stock: 'add' (default) sums stock to existing items;
+                      'skip' only updates data/prices of existing items without touching stock.
     Expected CSV columns (case-insensitive):
       sku/part_number, name, brand, price, stock, cost,
       sku_secondary, description, category, make, model, year, engine, engine_code
@@ -434,7 +816,8 @@ def bulk_import_items():
     import services.inventory_vehicle_compat as ivc_service
 
     mode = request.headers.get('X-Import-Mode', 'strict').lower()
-    strategy = request.headers.get('X-Import-Strategy', 'qwen').lower()
+    strategy = request.headers.get('X-Import-Strategy', 'skip').lower()
+    stock_mode = request.headers.get('X-Import-Stock', 'add').lower()
     errors = []
     warnings = []
     created_ids = []
@@ -594,8 +977,8 @@ def bulk_import_items():
                     (name, brand, cost, cost, price_1, price_1, location, description, category_id, item_id)
                 )
                 was_inserted = False
-                # Record stock adjustment for existing item if stock > 0
-                if stock > 0:
+                # Record stock adjustment for existing item if stock > 0 (unless skipped)
+                if stock > 0 and stock_mode != 'skip':
                     record_initial(conn, item_id, branch_id, stock, cost if cost > 0 else None)
             else:
                 # Generate barcode for new item
@@ -648,24 +1031,9 @@ def bulk_import_items():
                 year = _to_int(year_str, None)
                 mye_id = None
                 if make and model and year:
-                    # Try exact match against model_year_engine
-                    cur.execute(
-                        """
-                        SELECT mye.id FROM model_year_engine mye
-                        JOIN models m ON m.id = mye.model_id
-                        JOIN brands b ON b.id = m.brand_id
-                        JOIN years y ON y.id = mye.year_id
-                        WHERE LOWER(b.name) = LOWER(%s)
-                          AND LOWER(m.name) = LOWER(%s)
-                          AND y.year = %s
-                        LIMIT 1
-                        """,
-                        (make, model, year)
-                    )
-                    r = cur.fetchone()
-                    if r:
-                        mye_id = r[0]
-                    else:
+                    # Resolver contra la BD maestra (no la del tenant).
+                    mye_id = _resolve_mye_master(make, model, year)
+                    if mye_id is None:
                         warnings.append(
                             f'Row {row_num}: vehicle "{make} {model} {year}" not found in catalog; '
                             'saving as text-only compatibility.'
@@ -1078,6 +1446,251 @@ def api_adjustment():
         return jsonify({'error': str(e)}), 400
 
 
+
+
+@inventory_bp.route('/items/lookup', methods=['GET'])
+@require_auth('inventory.view')
+def lookup_item_by_code():
+    """Exact lookup by barcode / part_number / SKU alias (for scanner flows)."""
+    code = (request.args.get('code') or '').strip()
+    if not code:
+        return jsonify({'error': 'code requerido'}), 400
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    norm = code.upper().replace(' ', '')
+    cur.execute("""
+        SELECT i.id, i.part_number, i.name, i.barcode,
+               COALESCE(s.stock, 0) AS stock, i.price_1
+        FROM inventory i
+        LEFT JOIN (
+            SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+            GROUP BY inventory_id
+        ) s ON s.inventory_id = i.id
+        WHERE i.is_active = true AND (
+              UPPER(i.barcode) = %s
+              OR UPPER(REPLACE(i.part_number, ' ', '')) = %s
+              OR i.id IN (
+                  SELECT a.inventory_id FROM inventory_sku_aliases a
+                  WHERE UPPER(REPLACE(a.sku, ' ', '')) = %s))
+        LIMIT 1
+    """, (code, norm, norm))
+    row = cur.fetchone()
+    cur.close()
+    conn.close()
+    if not row:
+        return jsonify({'found': False}), 404
+    return jsonify({'found': True, 'item': {
+        'id': row[0], 'part_number': row[1], 'name': row[2],
+        'barcode': row[3], 'stock': int(row[4] or 0),
+        'price_1': float(row[5] or 0),
+    }})
+
+
+
+
+# ─── Transfer documents (in-transit tracking) ──────────────────────────────
+
+@inventory_bp.route('/transfer-docs', methods=['GET'])
+@require_auth('inventory.view')
+def list_transfer_docs():
+    """List transfer documents. Query: status, page, per_page."""
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    status = request.args.get('status')
+    where = "WHERE t.status = %s" if status else ""
+    params = [status] if status else []
+    cur.execute(f"""
+        SELECT t.id, t.from_branch_id, b1.name, t.to_branch_id, b2.name,
+               t.status, t.notes, t.created_at, t.sent_at, t.received_at,
+               COALESCE(SUM(l.quantity), 0) AS total_qty
+        FROM inventory_transfers t
+        JOIN branches b1 ON b1.id = t.from_branch_id
+        JOIN branches b2 ON b2.id = t.to_branch_id
+        LEFT JOIN inventory_transfer_lines l ON l.transfer_id = t.id
+        {where}
+        GROUP BY t.id, b1.name, b2.name
+        ORDER BY t.id DESC
+        LIMIT 100
+    """, params)
+    docs = [{
+        'id': r[0], 'from_branch_id': r[1], 'from_name': r[2],
+        'to_branch_id': r[3], 'to_name': r[4], 'status': r[5],
+        'notes': r[6], 'created_at': str(r[7]), 'sent_at': str(r[8]),
+        'received_at': str(r[9]), 'total_qty': int(r[10] or 0),
+    } for r in cur.fetchall()]
+    cur.close()
+    conn.close()
+    return jsonify({'data': docs})
+
+
+@inventory_bp.route('/transfer-docs', methods=['POST'])
+@require_auth('inventory.transfer')
+def create_transfer_doc():
+    """Create a draft transfer document.
+
+    Body: { to_branch_id, items: [{inventory_id, quantity}], notes }
+    """
+    data = request.get_json() or {}
+    to_branch = data.get('to_branch_id')
+    items = data.get('items', [])
+    if not to_branch or not items:
+        return jsonify({'error': 'to_branch_id e items son requeridos'}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    from_branch = data.get('from_branch_id') or g.branch_id
+    if not from_branch:
+        cur.execute("SELECT id FROM branches ORDER BY id LIMIT 1")
+        from_branch = cur.fetchone()[0]
+    if int(to_branch) == int(from_branch):
+        cur.close(); conn.close()
+        return jsonify({'error': 'Origen y destino no pueden ser la misma sucursal'}), 400
+
+    cur.execute("""
+        INSERT INTO inventory_transfers (from_branch_id, to_branch_id, status, notes, employee_id)
+        VALUES (%s, %s, 'draft', %s, %s) RETURNING id
+    """, (from_branch, to_branch, data.get('notes'), getattr(g, 'employee_id', None)))
+    doc_id = cur.fetchone()[0]
+    for it in items:
+        qty = int(it.get('quantity', 0) or 0)
+        if qty <= 0 or not it.get('inventory_id'):
+            continue
+        cur.execute("""
+            INSERT INTO inventory_transfer_lines (transfer_id, inventory_id, quantity)
+            VALUES (%s, %s, %s)
+        """, (doc_id, it['inventory_id'], qty))
+    conn.commit()
+    cur.close()
+    conn.close()
+    return jsonify({'id': doc_id, 'status': 'draft'}), 201
+
+
+@inventory_bp.route('/transfer-docs/<int:doc_id>', methods=['GET'])
+@require_auth('inventory.view')
+def get_transfer_doc(doc_id):
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT t.id, t.from_branch_id, b1.name, t.to_branch_id, b2.name, t.status,
+               t.notes, t.created_at, t.sent_at, t.received_at
+        FROM inventory_transfers t
+        JOIN branches b1 ON b1.id = t.from_branch_id
+        JOIN branches b2 ON b2.id = t.to_branch_id
+        WHERE t.id = %s
+    """, (doc_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close(); conn.close()
+        return jsonify({'error': 'not found'}), 404
+    doc = {
+        'id': row[0], 'from_branch_id': row[1], 'from_name': row[2],
+        'to_branch_id': row[3], 'to_name': row[4], 'status': row[5],
+        'notes': row[6], 'created_at': str(row[7]), 'sent_at': str(row[8]),
+        'received_at': str(row[9]), 'lines': [],
+    }
+    cur.execute("""
+        SELECT l.id, l.inventory_id, i.part_number, i.name, l.quantity,
+               COALESCE(l.qty_received, 0), COALESCE(s.stock, 0)
+        FROM inventory_transfer_lines l
+        JOIN inventory i ON i.id = l.inventory_id
+        LEFT JOIN (
+            SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+            WHERE branch_id = %s GROUP BY inventory_id
+        ) s ON s.inventory_id = l.inventory_id
+        WHERE l.transfer_id = %s ORDER BY l.id
+    """, (doc['to_branch_id'], doc_id))
+    doc['lines'] = [{
+        'id': r[0], 'inventory_id': r[1], 'part_number': r[2], 'name': r[3],
+        'quantity': int(r[4]), 'qty_received': int(r[5] or 0), 'dest_stock': int(r[6] or 0),
+    } for r in cur.fetchall()]
+    cur.close()
+    conn.close()
+    return jsonify(doc)
+
+
+@inventory_bp.route('/transfer-docs/<int:doc_id>/send', methods=['POST'])
+@require_auth('inventory.transfer')
+def send_transfer_doc(doc_id):
+    """Mark draft as sent (goods leave origin: stock -qty in origin branch)."""
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    cur.execute("SELECT from_branch_id, to_branch_id, status FROM inventory_transfers WHERE id = %s", (doc_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close(); conn.close()
+        return jsonify({'error': 'not found'}), 404
+    if row[2] != 'draft':
+        cur.close(); conn.close()
+        return jsonify({'error': f'Solo borradores pueden enviarse (estado: {row[2]})'}), 400
+    cur.execute("SELECT inventory_id, quantity FROM inventory_transfer_lines WHERE transfer_id = %s", (doc_id,))
+    lines = cur.fetchall()
+    for inv_id, qty in lines:
+        record_transfer(conn, inv_id, row[0], row[1], qty,
+                        notes=f'Transferencia #{doc_id} enviada')
+    cur.execute("""
+        UPDATE inventory_transfers SET status = 'sent', sent_at = NOW() WHERE id = %s
+    """, (doc_id,))
+    conn.commit()
+    cur.close()
+    conn.close()
+    return jsonify({'ok': True, 'status': 'sent'})
+
+
+@inventory_bp.route('/transfer-docs/<int:doc_id>/receive', methods=['POST'])
+@require_auth('inventory.transfer')
+def receive_transfer_doc(doc_id):
+    """Confirm receipt at destination. Adjusts destination stock to the
+    received quantities (discrepancies become adjustments)."""
+    data = request.get_json() or {}
+    received = {int(k): int(v) for k, v in (data.get('received') or {}).items()}
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    cur.execute("SELECT to_branch_id, status FROM inventory_transfers WHERE id = %s", (doc_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close(); conn.close()
+        return jsonify({'error': 'not found'}), 404
+    if row[1] != 'sent':
+        cur.close(); conn.close()
+        return jsonify({'error': f'Solo transferencias enviadas pueden recibirse (estado: {row[1]})'}), 400
+    to_branch = row[0]
+
+    cur.execute("""
+        SELECT l.id, l.inventory_id, l.quantity FROM inventory_transfer_lines l
+        WHERE l.transfer_id = %s
+    """, (doc_id,))
+    lines = cur.fetchall()
+    differences = 0
+    for line_id, inv_id, qty in lines:
+        rec = received.get(line_id)
+        qty_rec = rec if rec is not None else qty
+        cur.execute("UPDATE inventory_transfer_lines SET qty_received = %s WHERE id = %s",
+                    (qty_rec, line_id))
+        if qty_rec != qty:
+            differences += 1
+            record_adjustment(conn, inv_id, to_branch, qty_rec - qty,
+                              reason=f'Diferencia en recepción de transferencia #{doc_id}')
+    cur.execute("""
+        UPDATE inventory_transfers SET status = 'received', received_at = NOW() WHERE id = %s
+    """, (doc_id,))
+    conn.commit()
+    cur.close()
+    conn.close()
+    return jsonify({'ok': True, 'status': 'received', 'differences': differences})
+
+
+@inventory_bp.route('/transfer-docs/<int:doc_id>/cancel', methods=['POST'])
+@require_auth('inventory.transfer')
+def cancel_transfer_doc(doc_id):
+    conn = get_tenant_conn(g.tenant_id)
+    cur = conn.cursor()
+    cur.execute("UPDATE inventory_transfers SET status = 'cancelled' WHERE id = %s AND status = 'draft'",
+                (doc_id,))
+    conn.commit()
+    cur.close()
+    conn.close()
+    return jsonify({'ok': True})
+
 @inventory_bp.route('/transfer', methods=['POST'])
 @require_auth('inventory.transfer')
 def api_transfer():
diff --git a/pos/blueprints/invoicing_bp.py b/pos/blueprints/invoicing_bp.py
index 6f83eef..92b5ba5 100644
--- a/pos/blueprints/invoicing_bp.py
+++ b/pos/blueprints/invoicing_bp.py
@@ -20,6 +20,7 @@ from services.cfdi_facturapi_builder import (
 from services.cfdi_queue import (
     cancel_cfdi,
     enqueue_cfdi,
+    enqueue_pending_complements,
     get_queue_status,
     process_queue,
     retry_failed,
@@ -62,7 +63,7 @@ def _get_issuer_config(cur, branch_id=None):
     if branch_id:
         cur.execute(
             """
-            SELECT rfc, razon_social, regimen_fiscal, codigo_postal, serie_cfdi
+            SELECT rfc, razon_social, regimen_fiscal, cp, serie_cfdi
             FROM branches WHERE id = %s
         """,
             (branch_id,),
@@ -84,7 +85,8 @@ def _get_sale_with_items(cur, sale_id):
         """
         SELECT id, branch_id, customer_id, employee_id, sale_type,
                payment_method, subtotal, discount_total, tax_total, total,
-               metodo_pago_sat, forma_pago_sat, status, created_at
+               metodo_pago_sat, forma_pago_sat, status, created_at,
+               currency, exchange_rate
         FROM sales WHERE id = %s
     """,
         (sale_id,),
@@ -108,6 +110,8 @@ def _get_sale_with_items(cur, sale_id):
         "forma_pago_sat": row[11] or "01",
         "status": row[12],
         "created_at": str(row[13]),
+        "currency": row[14] or "MXN",
+        "exchange_rate": float(row[15]) if row[15] else None,
     }
 
     cur.execute(
@@ -366,6 +370,44 @@ def trigger_process_queue():
         return jsonify({"error": str(e)}), 500
 
 
+@invoicing_bp.route("/complementos/sync", methods=["POST"])
+@require_auth("invoicing.create")
+def sync_complementos():
+    """Enqueue the missing payment complements (REP) and credit notes (egreso).
+
+    Payments on stamped PPD invoices become CFDI type "P" linked to the
+    original UUID; returns of stamped sales become CFDI type "E". Already
+    enqueued movements are not duplicated.
+
+    Body: {
+        backfill: bool (default false) — reconcile the whole history,
+        since: ISO date (optional) — reconcile movements created after it
+    }
+    """
+    data = request.get_json() or {}
+    backfill = bool(data.get("backfill"))
+    since = data.get("since")
+
+    if since:
+        try:
+            datetime.fromisoformat(str(since))
+        except ValueError:
+            return jsonify({"error": "since must be an ISO 8601 date/datetime"}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+
+    try:
+        result = enqueue_pending_complements(conn, since=since, backfill=backfill)
+        conn.close()
+        result["enqueued"] = len(result["pagos"]) + len(result["egresos"])
+        return jsonify(result), 201
+
+    except Exception as e:
+        conn.rollback()
+        conn.close()
+        return jsonify({"error": str(e)}), 500
+
+
 # ─── Cancel CFDI ────────────────────────────────────
 
 
diff --git a/pos/blueprints/marketplace_external_bp.py b/pos/blueprints/marketplace_external_bp.py
index 5e72fb7..be183bc 100644
--- a/pos/blueprints/marketplace_external_bp.py
+++ b/pos/blueprints/marketplace_external_bp.py
@@ -10,11 +10,19 @@ Routes:
   Listings
     GET  /pos/api/marketplace-ext/listings
     POST /pos/api/marketplace-ext/listings
+    POST /pos/api/marketplace-ext/listings/import-existing
+    POST /pos/api/marketplace-ext/listings/backfill-inventory
     POST /pos/api/marketplace-ext/listings/<id>/sync
     POST /pos/api/marketplace-ext/listings/<id>/pause
     POST /pos/api/marketplace-ext/listings/<id>/activate
     DELETE /pos/api/marketplace-ext/listings/<id>
 
+  Questions
+    GET  /pos/api/marketplace-ext/questions
+    POST /pos/api/marketplace-ext/questions/sync
+    POST /pos/api/marketplace-ext/questions/<id>/answer
+    GET  /pos/api/marketplace-ext/questions/<id>/suggestion   (AI, A7)
+
   Orders
     GET  /pos/api/marketplace-ext/orders
     GET  /pos/api/marketplace-ext/orders/<id>
@@ -62,10 +70,84 @@ def _require_meli_manage():
     return None
 
 
+def _safe_int(value, default):
+    """Parse an int from a query param, falling back to a default instead of 500."""
+    try:
+        return int(value)
+    except (TypeError, ValueError):
+        return default
+
+
+def _get_meli_config(tenant_id):
+    """Return the tenant's ML config dict, or None if the tenant is unknown."""
+    try:
+        conn = get_tenant_conn(tenant_id)
+    except Exception:
+        return None
+    try:
+        return meli_svc.get_meli_config(conn)
+    except Exception:
+        return None
+    finally:
+        conn.close()
+
+
+def _resolve_tenant_by_meli_user(meli_user_id):
+    """Find the tenant whose tenant_config.meli_user_id matches.
+
+    tenant_config lives in each tenant DB (not in master), so we iterate the
+    active tenants from master and probe each one.
+    """
+    if not meli_user_id:
+        return None
+    mconn = get_master_conn()
+    try:
+        mcur = mconn.cursor()
+        mcur.execute("SELECT id FROM tenants WHERE is_active = true ORDER BY id")
+        tenant_ids = [r[0] for r in mcur.fetchall()]
+        mcur.close()
+    except Exception:
+        return None
+    finally:
+        mconn.close()
+
+    target = str(meli_user_id)
+    for tid in tenant_ids:
+        try:
+            conn = get_tenant_conn(tid)
+        except Exception:
+            continue
+        try:
+            cur = conn.cursor()
+            cur.execute(
+                "SELECT 1 FROM tenant_config WHERE key = 'meli_user_id' AND value = %s LIMIT 1",
+                (target,),
+            )
+            found = cur.fetchone() is not None
+            cur.close()
+            if found:
+                return tid
+        except Exception:
+            continue
+        finally:
+            conn.close()
+    return None
+
+
 # ═══════════════════════════════════════════════════════════════════════════
 # CONFIG
 # ═══════════════════════════════════════════════════════════════════════════
 
+def _meli_auth_error(e):
+    """Respuesta 401 para MeliAuthError: propaga el detalle accionable
+    (p. ej. credenciales de app rechazadas) en vez del mensaje genérico."""
+    detail = str(e)
+    if ('credenciales' in detail.lower() or 'refresh failed' in detail.lower()
+            or 'invalid_client' in detail.lower()):
+        return jsonify({'error': detail}), 401
+    return jsonify({'error': 'La sesión de MercadoLibre expiró. Reconecta la cuenta en la pestaña de configuración.'}), 401
+
+
 @marketplace_ext_bp.route("/config", methods=["GET"])
 @require_auth()
 def get_config():
@@ -78,6 +160,7 @@ def get_config():
             if k not in ("meli_access_token", "meli_refresh_token", "meli_client_secret")
         }
         safe["connected"] = bool(cfg.get("meli_access_token"))
+        safe["has_refresh_token"] = bool(cfg.get("meli_refresh_token"))
         return jsonify(safe)
     finally:
         conn.close()
@@ -178,12 +261,17 @@ def connect_meli():
             "meli_client_id": client_id,
             "meli_client_secret": client_secret,
         })
-        return jsonify({
+        resp = {
             "ok": True,
             "user_id": user_id or user.get("id"),
             "nickname": user.get("nickname"),
             "site_id": user.get("site_id"),
-        })
+        }
+        if not refresh_token:
+            # The ML app lacks offline_access scope: the connection will die
+            # in ~6h and cannot be auto-renewed. Warn so it can be fixed.
+            resp["warning"] = "no_refresh_token"
+        return jsonify(resp)
     finally:
         conn.close()
 
@@ -214,13 +302,13 @@ def search_categories():
     conn = get_tenant_conn(g.tenant_id)
     try:
         cfg = meli_svc.get_meli_config(conn)
-        svc = meli_svc._get_meli_service(cfg)
+        svc = meli_svc._get_meli_service(cfg, conn)
         if not svc:
-            return jsonify({"error": "MercadoLibre not connected"}), 400
+            return jsonify({"error": "MercadoLibre no está conectado. Conecta la cuenta en la pestaña de configuración."}), 400
         result = svc.search_categories(site_id, q)
         return jsonify({"categories": result})
-    except MeliAuthError:
-        return jsonify({"error": "MercadoLibre token expired. Please reconnect."}), 401
+    except MeliAuthError as e:
+        return _meli_auth_error(e)
     except Exception as e:
         return jsonify({"error": str(e)}), 500
     finally:
@@ -234,16 +322,16 @@ def search_categories():
 @marketplace_ext_bp.route("/listings", methods=["GET"])
 @require_auth()
 def list_listings():
-    page = int(request.args.get("page", 1))
-    per_page = min(int(request.args.get("per_page", 50)), 200)
+    page = max(1, _safe_int(request.args.get("page"), 1))
+    per_page = min(max(1, _safe_int(request.args.get("per_page"), 50)), 200)
     status = request.args.get("status")
 
     conn = get_tenant_conn(g.tenant_id)
     try:
         result = meli_svc.get_listings(conn, page=page, per_page=per_page, status=status)
         return jsonify(result)
-    except MeliAuthError:
-        return jsonify({"error": "MercadoLibre token expired. Please reconnect."}), 401
+    except MeliAuthError as e:
+        return _meli_auth_error(e)
     except Exception as e:
         return jsonify({"error": str(e)}), 500
     finally:
@@ -279,6 +367,7 @@ def create_listings():
             shipping_mode=shipping_mode,
             custom_data=custom_data,
             base_url=_get_public_base_url(),
+            use_llm_description=bool(data.get("use_llm_description", False)),
         )
         return jsonify(result), 201
     except ValueError as e:
@@ -309,6 +398,36 @@ def import_existing_listings():
         conn.close()
 
 
+@marketplace_ext_bp.route("/listings/backfill-inventory", methods=["POST"])
+@require_auth()
+def backfill_listing_inventory():
+    """Map already-imported listings to local inventory (populate inventory_id).
+
+    Body: {"dry_run": bool (default false), "limit": int|null,
+           "only_unmapped": bool (default true)}.
+    """
+    err = _require_meli_manage()
+    if err:
+        return err
+
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = meli_svc.backfill_listing_inventory(
+            conn,
+            limit=_safe_int(data.get("limit"), None) if data.get("limit") else None,
+            only_unmapped=bool(data.get("only_unmapped", True)),
+            dry_run=bool(data.get("dry_run", False)),
+        )
+        return jsonify(result), 200
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 400
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+    finally:
+        conn.close()
+
+
 @marketplace_ext_bp.route("/inventory-check", methods=["POST"])
 @require_auth()
 def inventory_check():
@@ -338,7 +457,8 @@ def sync_stock_to_meli():
 
     conn = get_tenant_conn(g.tenant_id)
     try:
-        result = meli_svc.process_meli_sync_queue(conn)
+        # Manual run from the UI: bypass the meli_auto_sync_stock_price gate.
+        result = meli_svc.process_meli_sync_queue(conn, force=True)
         return jsonify(result)
     except ValueError as e:
         return jsonify({"error": str(e)}), 400
@@ -355,15 +475,41 @@ def category_attributes(category_id):
     conn = get_tenant_conn(g.tenant_id)
     try:
         cfg = meli_svc.get_meli_config(conn)
-        svc = meli_svc._get_meli_service(cfg)
+        svc = meli_svc._get_meli_service(cfg, conn)
         if not svc:
-            return jsonify({"error": "MercadoLibre not connected"}), 400
+            return jsonify({"error": "MercadoLibre no está conectado. Conecta la cuenta en la pestaña de configuración."}), 400
         attrs = svc.get_category_attributes(category_id)
         # Filter to required attributes only for the UI
         required = [a for a in attrs if a.get("tags", {}).get("required")]
         return jsonify({"attributes": required, "all": attrs})
-    except MeliAuthError:
-        return jsonify({"error": "MercadoLibre token expired. Please reconnect."}), 401
+    except MeliAuthError as e:
+        return _meli_auth_error(e)
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+    finally:
+        conn.close()
+
+
+@marketplace_ext_bp.route("/listing-prices", methods=["GET"])
+@require_auth()
+def listing_prices():
+    """Fee estimator: return MeLi fees per listing type for a price + category."""
+    price = request.args.get("price", type=float)
+    category_id = request.args.get("category_id", "")
+    site_id = request.args.get("site_id", "MLM")
+    if not price or price <= 0 or not category_id:
+        return jsonify({"error": "price y category_id son requeridos"}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        cfg = meli_svc.get_meli_config(conn)
+        svc = meli_svc._get_meli_service(cfg, conn)
+        if not svc:
+            return jsonify({"error": "MercadoLibre no está conectado. Conecta la cuenta en la pestaña de configuración."}), 400
+        result = svc.get_listing_prices(site_id, price, category_id)
+        return jsonify({"listing_prices": result})
+    except MeliAuthError as e:
+        return _meli_auth_error(e)
     except Exception as e:
         return jsonify({"error": str(e)}), 500
     finally:
@@ -400,6 +546,7 @@ def validate_listings():
             shipping_mode=shipping_mode,
             custom_data=custom_data,
             base_url=_get_public_base_url(),
+            use_llm_description=bool(data.get("use_llm_description", False)),
         )
         return jsonify(result)
     except ValueError as e:
@@ -440,6 +587,8 @@ def create_listings_async():
             shipping_mode=shipping_mode,
             custom_data=custom_data,
             base_url=_get_public_base_url(),
+            chunk_size=_safe_int(data.get("chunk_size"), 10),
+            use_llm_description=bool(data.get("use_llm_description", False)),
         )
         return jsonify({"task_id": task.id, "status": "queued"}), 202
     except Exception as e:
@@ -452,7 +601,7 @@ def get_async_listing_status(task_id):
     """Get status of an async ML publishing task."""
     try:
         from celery.result import AsyncResult
-        from app import celery as celery_app
+        from celery_app import celery as celery_app
         result = AsyncResult(task_id, app=celery_app)
         if result.ready():
             return jsonify({"status": "done", "result": result.result or {}})
@@ -616,6 +765,34 @@ def answer_question(question_id):
         conn.close()
 
 
+@marketplace_ext_bp.route("/questions/<int:question_id>/suggestion", methods=["GET"])
+@require_auth()
+def question_suggestion(question_id):
+    """AI intent classification + suggested answer for a buyer question.
+
+    Query param: ?use_llm=0 to skip the LLM fallback and use templates only.
+    The answer is only a suggestion; auto-answering is opt-in per tenant via
+    tenant_config `meli_auto_answer_questions`.
+    """
+    err = _require_meli_manage()
+    if err:
+        return err
+    use_llm = request.args.get("use_llm", "1").lower() not in ("0", "false", "no")
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = meli_svc.suggest_question_answer(conn, question_id, use_llm=use_llm)
+        result["auto_answer_enabled"] = bool(
+            meli_svc.get_meli_config(conn).get("meli_auto_answer_questions")
+        )
+        return jsonify(result)
+    except ValueError as e:
+        return jsonify({"error": str(e)}), 404
+    except Exception as e:
+        return jsonify({"error": str(e)}), 500
+    finally:
+        conn.close()
+
+
 # ═══════════════════════════════════════════════════════════════════════════
 # ORDERS
 # ═══════════════════════════════════════════════════════════════════════════
@@ -643,8 +820,8 @@ def sync_orders():
 @marketplace_ext_bp.route("/orders", methods=["GET"])
 @require_auth()
 def list_orders():
-    page = int(request.args.get("page", 1))
-    per_page = min(int(request.args.get("per_page", 50)), 200)
+    page = max(1, _safe_int(request.args.get("page"), 1))
+    per_page = min(max(1, _safe_int(request.args.get("per_page"), 50)), 200)
     status = request.args.get("status")
 
     conn = get_tenant_conn(g.tenant_id)
@@ -673,11 +850,15 @@ def get_order(order_id):
 def convert_order(order_id):
     data = request.get_json() or {}
     register_id = data.get("register_id")
+    # Mirrors the counter-sale "Facturar CFDI" checkbox; when omitted the sale
+    # is only invoiced if the tenant has meli_auto_invoice = true.
+    generate_cfdi = bool(data.get("generate_cfdi", False))
 
     conn = get_tenant_conn(g.tenant_id)
     try:
         result = meli_svc.convert_order_to_sale(
-            conn, order_id, employee_id=g.employee_id, register_id=register_id
+            conn, order_id, employee_id=g.employee_id, register_id=register_id,
+            generate_cfdi=generate_cfdi,
         )
         return jsonify(result)
     except ValueError as e:
@@ -716,38 +897,35 @@ def update_order_status_route(order_id):
 def meli_webhook():
     """Receive MercadoLibre notifications.
 
-    ML sends a lightweight payload with topic + resource URL.
-    We ack immediately and enqueue Celery for async processing.
+    ML sends a lightweight payload with topic + resource URL. We resolve the
+    tenant from ML's user_id, validate the X-Signature header when present, ack
+    immediately and enqueue Celery to process the specific resource.
     """
+    raw_body = request.get_data()
     data = request.get_json(force=True, silent=True) or {}
     topic = data.get("topic", "")
     resource = data.get("resource", "")
     user_id = data.get("user_id")
 
-    # Resolve tenant by meli_user_id
-    tenant_id = None
-    if user_id:
-        try:
-            mconn = get_master_conn()
-            mcur = mconn.cursor()
-            mcur.execute(
-                """
-                SELECT t.id FROM tenants t
-                JOIN tenant_config c ON c.key = 'meli_user_id' AND c.value = %s
-                WHERE t.is_active = true
-                LIMIT 1
-                """,
-                (str(user_id),),
-            )
-            row = mcur.fetchone()
-            if row:
-                tenant_id = row[0]
-            mcur.close()
-            mconn.close()
-        except Exception:
-            pass
+    # tenant_config lives in each tenant DB, not in master
+    tenant_id = _resolve_tenant_by_meli_user(user_id)
+    if not tenant_id:
+        print(f"[ML Webhook] No tenant found for meli_user_id={user_id}")
+        return jsonify({"error": "unknown tenant"}), 403
 
-    if tenant_id and topic:
+    cfg = _get_meli_config(tenant_id) or {}
+    secret = cfg.get("meli_client_secret")
+    signature = request.headers.get("X-Signature")
+    if signature:
+        if not secret or not MeliService.validate_webhook_signature(secret, raw_body, signature):
+            print(f"[ML Webhook] Invalid X-Signature for tenant {tenant_id}")
+            return jsonify({"error": "invalid signature"}), 401
+    else:
+        # ML only signs notifications when signature validation is enabled on
+        # the app; without the header there is nothing to verify.
+        print(f"[ML Webhook] Notification without X-Signature (tenant {tenant_id}, topic={topic})")
+
+    if topic:
         try:
             from tasks import process_meli_webhook_task
             process_meli_webhook_task.delay(tenant_id, topic, resource)
diff --git a/pos/blueprints/pos_bp.py b/pos/blueprints/pos_bp.py
index b28e149..2237f65 100644
--- a/pos/blueprints/pos_bp.py
+++ b/pos/blueprints/pos_bp.py
@@ -18,6 +18,11 @@ from services.pos_engine import (
 )
 from services.inventory_engine import get_stock
 from services.audit import log_action
+from services.cross_sell import get_cross_sell
+from services.anomaly_detector import (
+    detect_anomalies, DEFAULT_MIN_SAMPLES as _ANOM_MIN_SAMPLES,
+    DEFAULT_Z as _ANOM_Z,
+)
 from config import JWT_SECRET
 
 pos_bp = Blueprint('pos', __name__, url_prefix='/pos/api')
@@ -41,6 +46,88 @@ def _tenant_allows_zero_price(conn):
     return str(row[0]).lower() in ('true', '1', 'yes') if row else True
 
 
+def _int_arg(name, default=None, min_value=None, max_value=None):
+    """Parse an integer query-string argument safely.
+
+    Bad input (e.g. ?per_page=abc) falls back to the default instead of
+    raising ValueError and returning a 500.
+    """
+    raw = request.args.get(name)
+    if raw is None or raw == '':
+        value = default
+    else:
+        try:
+            value = int(raw)
+        except (TypeError, ValueError):
+            value = default
+    if value is None:
+        return None
+    if min_value is not None and value < min_value:
+        value = min_value
+    if max_value is not None and value > max_value:
+        value = max_value
+    return value
+
+
+def _float_arg(name, default, min_value=None, max_value=None):
+    """Parse a float query-string argument safely (bad input → default)."""
+    raw = request.args.get(name)
+    try:
+        value = float(raw) if raw not in (None, '') else default
+    except (TypeError, ValueError):
+        value = default
+    if value is None:
+        return None
+    if min_value is not None and value < min_value:
+        value = min_value
+    if max_value is not None and value > max_value:
+        value = max_value
+    return value
+
+
+def _validate_price_floor(conn, items):
+    """Raise ValueError if any line price is below item cost and the employee
+    is not owner/admin. Prevents margin leaks via price editing."""
+    from flask import g as _g
+    if getattr(_g, 'employee_role', None) in ('owner', 'admin'):
+        return
+    cur = conn.cursor()
+    for item in items:
+        inv_id = item.get('inventory_id')
+        unit_price = float(item.get('unit_price', 0) or 0)
+        if not inv_id or unit_price <= 0:
+            continue
+        cur.execute("SELECT part_number, cost FROM inventory WHERE id = %s", (inv_id,))
+        row = cur.fetchone()
+        if row and row[1] and unit_price < float(row[1]):
+            cur.close()
+            raise ValueError(
+                f"Precio por debajo del costo en {row[0]} (${unit_price:,.2f} < ${float(row[1]):,.2f}). "
+                "Solicita autorización de gerencia.")
+    cur.close()
+
+
+def _validate_max_discount(conn, items):
+    """Raise ValueError if any line discount exceeds the employee's cap.
+
+    Mirrors the check done by pos_engine.process_sale so quotations and
+    layaways cannot be used to bypass the discount limit.
+    """
+    from flask import g as _g
+    if getattr(_g, 'employee_role', None) in ('owner', 'admin'):
+        return
+    from services.pos_engine import get_max_discount_pct
+    max_discount = get_max_discount_pct(conn)
+    for item in items:
+        discount_pct = float(item.get('discount_pct', 0) or 0)
+        if discount_pct > max_discount:
+            name = item.get('name') or item.get('part_number') or item.get('inventory_id')
+            raise ValueError(
+                f"Descuento {discount_pct}% excede tu máximo permitido {max_discount}% "
+                f"para {name}"
+            )
+
+
 def _validate_zero_price(conn, items):
     """Raise ValueError if any item line would be <= $0 and the tenant forbids it."""
     if _tenant_allows_zero_price(conn):
@@ -156,7 +243,38 @@ def create_sale():
     try:
         _validate_stock_availability(conn, data.get('items', []), branch_id)
         _validate_zero_price(conn, data.get('items', []))
+        _validate_price_floor(conn, data.get('items', []))
+
+        # Idempotencia offline: si el client_uuid ya existe, devolver esa venta
+        client_uuid = (data.get('client_uuid') or '').strip() or None
+        cur_iu = conn.cursor()
+        if client_uuid:
+            cur_iu.execute("SELECT id FROM sales WHERE client_uuid = %s LIMIT 1", (client_uuid,))
+            dup = cur_iu.fetchone()
+            if dup:
+                cur_iu.execute("SELECT id, total FROM sales WHERE id = %s", (dup[0],))
+                srow = cur_iu.fetchone()
+                cur_iu.close()
+                conn.commit()
+                conn.close()
+                return jsonify({'id': srow[0], 'total': float(srow[1]),
+                                'duplicate': True,
+                                'message': 'Venta ya registrada (offline sync)'}), 200
+
         sale = process_sale(conn, data)
+        if client_uuid:
+            try:
+                cur_iu.execute("UPDATE sales SET client_uuid = %s WHERE id = %s",
+                               (client_uuid, sale['id']))
+            except Exception:
+                conn.rollback()  # duplicate race: fetch existing
+                cur_iu.execute("SELECT id FROM sales WHERE client_uuid = %s LIMIT 1", (client_uuid,))
+                dup = cur_iu.fetchone()
+                cur_iu.close()
+                conn.commit()
+                conn.close()
+                return jsonify({'id': dup[0], 'duplicate': True}), 200
+        cur_iu.close()
         conn.commit()
         conn.close()
         return jsonify(sale), 201
@@ -267,22 +385,22 @@ def list_sales():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["1=1"]
     params = []
 
     date_from = request.args.get('date_from')
     date_to = request.args.get('date_to')
-    employee_id = request.args.get('employee_id')
-    customer_id = request.args.get('customer_id')
+    employee_id = _int_arg('employee_id')
+    customer_id = _int_arg('customer_id')
     status = request.args.get('status')
     sale_type = request.args.get('sale_type')
     q = request.args.get('q')
     customer_q = request.args.get('customer')
-    courier_id = request.args.get('courier_id')
-    register_id = request.args.get('register_id')
+    courier_id = _int_arg('courier_id')
+    register_id = _int_arg('register_id')
 
     if date_from:
         where_clauses.append("s.created_at >= %s")
@@ -292,10 +410,10 @@ def list_sales():
         params.append(date_to)
     if employee_id:
         where_clauses.append("s.employee_id = %s")
-        params.append(int(employee_id))
+        params.append(employee_id)
     if customer_id:
         where_clauses.append("s.customer_id = %s")
-        params.append(int(customer_id))
+        params.append(customer_id)
     if status:
         where_clauses.append("s.status = %s")
         params.append(status)
@@ -310,10 +428,10 @@ def list_sales():
         params.append(f'%{customer_q}%')
     if courier_id:
         where_clauses.append("s.courier_id = %s")
-        params.append(int(courier_id))
+        params.append(courier_id)
     if register_id:
         where_clauses.append("s.register_id = %s")
-        params.append(int(register_id))
+        params.append(register_id)
 
     # Default to current branch
     if g.branch_id:
@@ -386,7 +504,7 @@ def recent_sales():
 
     date_from = request.args.get('date_from') or str(date.today())
     date_to = request.args.get('date_to') or date_from
-    limit = min(int(request.args.get('limit', 10)), 50)
+    limit = _int_arg('limit', 10, min_value=1, max_value=50)
 
     where_clauses = [
         "s.created_at >= %s",
@@ -454,8 +572,8 @@ def list_historical_sales():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["1=1"]
     params = []
@@ -616,6 +734,25 @@ def api_cancel_sale(sale_id):
     conn = get_tenant_conn(g.tenant_id)
     try:
         result = cancel_sale(conn, sale_id, reason)
+        # Auto-cancel stamped CFDI (motivo 03: no se llevó a cabo la operación)
+        try:
+            from services.cfdi_queue import cancel_cfdi
+            cur = conn.cursor()
+            cur.execute(
+                "SELECT id FROM cfdi_queue WHERE sale_id = %s AND status = 'stamped' "
+                "ORDER BY id DESC LIMIT 1", (sale_id,))
+            cfdi_row = cur.fetchone()
+            cur.execute("SELECT key, value FROM tenant_config WHERE key IN "
+                        "('cfdi_facturapi_key', 'cfdi_facturapi_org_id', 'facturapi_secret_key')")
+            tcfg = {k: v for k, v in cur.fetchall()}
+            cur.close()
+            if cfdi_row:
+                cancel_cfdi(conn, cfdi_row[0], '03', tenant_config=tcfg)
+        except Exception:
+            try:
+                conn.rollback()  # CFDI cancel is best-effort
+            except Exception:
+                pass
         conn.commit()
         conn.close()
         return jsonify(result)
@@ -748,6 +885,8 @@ def create_quotation():
         enriched = _enrich_items(cur, items, data.get('customer_id'))
         _validate_stock_availability(conn, enriched, g.branch_id)
         _validate_zero_price(conn, enriched)
+        _validate_price_floor(conn, enriched)
+        _validate_max_discount(conn, enriched)
     except ValueError as e:
         cur.close(); conn.close()
         return jsonify({'error': str(e)}), 400
@@ -844,18 +983,18 @@ def list_quotations():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["1=1"]
     params = []
 
-    customer_id = request.args.get('customer_id')
+    customer_id = _int_arg('customer_id')
     status = request.args.get('status')
 
     if customer_id:
         where_clauses.append("q.customer_id = %s")
-        params.append(int(customer_id))
+        params.append(customer_id)
     if status:
         where_clauses.append("q.status = %s")
         params.append(status)
@@ -1138,6 +1277,8 @@ def update_quotation(quot_id):
         enriched = _enrich_items(cur, items, data.get('customer_id'))
         _validate_stock_availability(conn, enriched, g.branch_id)
         _validate_zero_price(conn, enriched)
+        _validate_price_floor(conn, enriched)
+        _validate_max_discount(conn, enriched)
     except ValueError as e:
         cur.close(); conn.close()
         return jsonify({'error': str(e)}), 400
@@ -1454,7 +1595,11 @@ def get_quotation_pdf(quot_id):
     # Get business info from tenant config
     business_info = None
     try:
-        cur.execute("SELECT key, value FROM config WHERE key IN ('business_name','rfc','address','phone','email')")
+        cur.execute("""SELECT 'business_name' AS k, value FROM tenant_config WHERE key IN ('tenant_nombre','receipt_store_name')
+                   UNION ALL SELECT 'rfc', value FROM tenant_config WHERE key IN ('tenant_rfc','receipt_rfc')
+                   UNION ALL SELECT 'address', value FROM tenant_config WHERE key IN ('tenant_direccion','receipt_address')
+                   UNION ALL SELECT 'phone', value FROM tenant_config WHERE key IN ('tenant_telefono','receipt_phone')
+                   UNION ALL SELECT 'email', value FROM tenant_config WHERE key = 'tenant_email' LIMIT 5""")
         config_rows = cur.fetchall()
         if config_rows:
             business_info = {r[0]: r[1] for r in config_rows}
@@ -1626,6 +1771,8 @@ def convert_quotation(quot_id):
     try:
         _validate_stock_availability(conn, items, g.branch_id)
         _validate_zero_price(conn, items)
+        _validate_price_floor(conn, items)
+        _validate_max_discount(conn, items)
         sale = process_sale(conn, sale_data)
 
         # Mark quotation as converted
@@ -1786,6 +1933,8 @@ def create_layaway():
         enriched = _enrich_items(cur, items, customer_id)
         _validate_stock_availability(conn, enriched, g.branch_id)
         _validate_zero_price(conn, enriched)
+        _validate_price_floor(conn, enriched)
+        _validate_max_discount(conn, enriched)
     except ValueError as e:
         cur.close(); conn.close()
         return jsonify({'error': str(e)}), 400
@@ -1867,6 +2016,23 @@ def create_layaway():
                               'customer_id': customer_id})
 
         conn.commit()
+
+        # Accounting entry (non-blocking): anticipo de cliente
+        try:
+            import logging
+            from services.accounting_engine import record_layaway_entry
+            record_layaway_entry(conn, {
+                'id': layaway_id,
+                'amount': initial_payment,
+                'payment_method': data.get('payment_method', 'efectivo'),
+            })
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logging.getLogger('pos').error(
+                f'Accounting entry for layaway #{layaway_id} deposit failed: {acc_err}'
+            )
+
         cur.close(); conn.close()
 
         return jsonify({
@@ -1892,18 +2058,18 @@ def list_layaways():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["1=1"]
     params = []
 
-    customer_id = request.args.get('customer_id')
+    customer_id = _int_arg('customer_id')
     status = request.args.get('status')
 
     if customer_id:
         where_clauses.append("l.customer_id = %s")
-        params.append(int(customer_id))
+        params.append(customer_id)
     if status:
         where_clauses.append("l.status = %s")
         params.append(status)
@@ -2070,6 +2236,23 @@ def layaway_payment(layaway_id):
             """, (register_id, amount, f'Apartado #{layaway_id} - abono', g.employee_id))
 
         conn.commit()
+
+        # Accounting entry (non-blocking): anticipo de cliente
+        try:
+            import logging
+            from services.accounting_engine import record_layaway_entry
+            record_layaway_entry(conn, {
+                'id': layaway_id,
+                'amount': amount,
+                'payment_method': data.get('payment_method', 'efectivo'),
+            })
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logging.getLogger('pos').error(
+                f'Accounting entry for layaway #{layaway_id} payment failed: {acc_err}'
+            )
+
         cur.close(); conn.close()
 
         new_remaining = round(total - new_paid, 2)
@@ -2117,10 +2300,21 @@ def complete_layaway(layaway_id):
         return jsonify({'error': f'Layaway is {status}'}), 400
 
     remaining = round(total - paid, 2)
+
+    # Payment method for the conversion sale / final payment. Defaults to cash
+    # but honours whatever the register sent (tarjeta, transferencia, ...).
+    payment_method = data.get('payment_method', 'efectivo')
+    forma_pago_map = {
+        'efectivo': '01', 'cheque': '02', 'transferencia': '03',
+        'tarjeta': '04', 'mixto': '99', 'pendiente': '99', 'credito': '99'
+    }
+    forma_pago_sat = forma_pago_map.get(payment_method, '99')
+    register_id = data.get('register_id')
+
     try:
         # If there's a remaining balance, accept a final payment with the complete call
         if remaining > 0:
-            final_method = data.get('payment_method', 'efectivo')
+            final_method = payment_method
             cur.execute("""
                 INSERT INTO layaway_payments
                     (layaway_id, amount, payment_method, reference, employee_id)
@@ -2131,13 +2325,24 @@ def complete_layaway(layaway_id):
             paid = total
 
             # Record cash movement for final payment
-            register_id = data.get('register_id')
             if register_id and final_method == 'efectivo':
                 cur.execute("""
                     INSERT INTO cash_movements (register_id, type, amount, reason, employee_id)
                     VALUES (%s, 'in', %s, %s, %s)
                 """, (register_id, remaining, f'Apartado #{layaway_id} - pago final', g.employee_id))
 
+            # Accounting entry for the final payment (part of the same transaction)
+            try:
+                from services.accounting_engine import record_layaway_entry
+                record_layaway_entry(conn, {
+                    'id': layaway_id, 'amount': remaining, 'payment_method': final_method,
+                })
+            except Exception as acc_err:
+                import logging
+                logging.getLogger('pos').error(
+                    f'Accounting entry for layaway #{layaway_id} final payment failed: {acc_err}'
+                )
+
         # Get layaway items
         cur.execute("""
             SELECT inventory_id, quantity, unit_price, discount_pct, tax_rate
@@ -2165,12 +2370,14 @@ def complete_layaway(layaway_id):
                  payment_method, subtotal, discount_total, tax_total, total,
                  amount_paid, change_given, metodo_pago_sat, forma_pago_sat,
                  status, notes)
-            VALUES (%s,%s,%s,%s,'cash','efectivo',%s,%s,%s,%s,%s,0,'PUE','01','completed',%s)
+            VALUES (%s,%s,%s,%s,'cash',%s,%s,%s,%s,%s,%s,0,'PUE',%s,'completed',%s)
             RETURNING id, created_at
         """, (
-            branch_id, cust_id, g.employee_id, data.get('register_id'),
+            branch_id, cust_id, g.employee_id, register_id,
+            payment_method,
             totals_calc['subtotal'], totals_calc['discount_total'],
             totals_calc['tax_total'], totals_calc['total'], total,
+            forma_pago_sat,
             f'Completado de apartado #{layaway_id}',
         ))
         sale_id, sale_created = cur.fetchone()
@@ -2201,13 +2408,12 @@ def complete_layaway(layaway_id):
             ))
 
         # Record payment on register
-        register_id = data.get('register_id')
         if register_id:
             cur.execute("""
                 INSERT INTO sale_payments
                     (sale_id, register_id, method, amount, reference)
-                VALUES (%s,%s,'efectivo',%s,%s)
-            """, (sale_id, register_id, total, f'Apartado #{layaway_id} completado'))
+                VALUES (%s,%s,%s,%s,%s)
+            """, (sale_id, register_id, payment_method, total, f'Apartado #{layaway_id} completado'))
 
         sale = {
             'id': sale_id, 'status': 'completed', 'total': totals_calc['total'],
@@ -2225,6 +2431,24 @@ def complete_layaway(layaway_id):
 
         conn.commit()
 
+        # Accounting entry (non-blocking): apply advances and recognize the sale
+        try:
+            import logging
+            from services.accounting_engine import record_layaway_conversion_entry
+            record_layaway_conversion_entry(conn, {
+                'id': sale['id'],
+                'layaway_id': layaway_id,
+                'subtotal': totals_calc['subtotal'],
+                'tax_total': totals_calc['tax_total'],
+                'total': totals_calc['total'],
+            })
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logging.getLogger('pos').error(
+                f'Accounting entry for layaway #{layaway_id} conversion failed: {acc_err}'
+            )
+
         # WhatsApp learning hook (non-blocking)
         try:
             from services.wa_learning import check_learning_resolution
@@ -2245,6 +2469,74 @@ def complete_layaway(layaway_id):
         return jsonify({'error': str(e)}), 500
 
 
+def _record_layaway_cancel_entry(conn, layaway_id):
+    """Reverse the customer advances (240) booked while collecting a layaway.
+
+    Deposits were journalised as 'Debit Caja/Bancos / Credit 240 Anticipos'
+    when collected; cancelling the layaway refunds them, so the entry is
+    reversed per payment method. Without this, account 240 keeps a phantom
+    liability after cancellation. Mirrors accounting_engine.record_layaway_entry.
+    """
+    from datetime import date as _date
+    from services.accounting_engine import (
+        _create_entry, _get_account_ids, _ensure_account,
+        _check_period_open, get_next_entry_number,
+    )
+
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT payment_method, COALESCE(SUM(amount), 0)
+        FROM layaway_payments WHERE layaway_id = %s
+        GROUP BY payment_method
+    """, (layaway_id,))
+    payments = cur.fetchall()
+
+    credits = []
+    total = 0.0
+    for method, amount in payments:
+        amt = round(float(amount or 0), 2)
+        if amt <= 0:
+            continue
+        credits.append((method, amt))
+        total = round(total + amt, 2)
+
+    if total <= 0:
+        cur.close()
+        return None
+
+    accounts = _get_account_ids(cur, ['110', '111'])
+    advance_account = _ensure_account(cur, '240', 'Anticipos de Clientes', '200', 'pasivo')
+
+    lines = [{
+        'account_id': advance_account,
+        'debit': total,
+        'credit': 0,
+        'description': f'Anticipos de clientes - Cancelacion apartado #{layaway_id}',
+    }]
+    for method, amount in credits:
+        if method in ('transferencia', 'tarjeta'):
+            account_id = accounts['111']
+            desc = f'Bancos - Cancelacion apartado #{layaway_id}'
+        else:
+            account_id = accounts['110']
+            desc = f'Caja - Cancelacion apartado #{layaway_id}'
+        lines.append({
+            'account_id': account_id, 'debit': 0, 'credit': amount,
+            'description': desc,
+        })
+
+    entry_date = _date.today()
+    _check_period_open(cur, entry_date)
+    entry_number = get_next_entry_number(conn)
+    entry_id = _create_entry(
+        cur, entry_number, entry_date, 'egreso',
+        f'Apartado #{layaway_id} - cancelacion (reversa anticipos)',
+        'layaway', layaway_id, lines
+    )
+    cur.close()
+    return entry_id
+
+
 @pos_bp.route('/layaways/<int:layaway_id>/cancel', methods=['PUT'])
 @require_auth('pos.sell')
 def cancel_layaway(layaway_id):
@@ -2298,6 +2590,19 @@ def cancel_layaway(layaway_id):
                           'items_unreserved': len(layaway_items)})
 
     conn.commit()
+
+    # Accounting entry (non-blocking): reverse the customer advances collected
+    # for this layaway, otherwise account 240 keeps a phantom liability.
+    try:
+        import logging
+        _record_layaway_cancel_entry(conn, layaway_id)
+        conn.commit()
+    except Exception as acc_err:
+        conn.rollback()
+        logging.getLogger('pos').error(
+            f'Accounting reversal for cancelled layaway #{layaway_id} failed: {acc_err}'
+        )
+
     cur.close(); conn.close()
 
     return jsonify({
@@ -2311,14 +2616,19 @@ def cancel_layaway(layaway_id):
 # ─── Returns / Warranty ───────────────────────────
 
 @pos_bp.route('/returns', methods=['POST'])
-@require_auth('pos.sell')
+@require_auth('pos.sell', 'pos.cancel')
 def create_return():
     """Process a product return with warranty support.
 
+    Requires supervisor-level authorisation (pos.cancel) in addition to
+    pos.sell, since a return moves stock back and refunds money.
+
     Body: {
         sale_id: int,
         items: [{sale_item_id: int, quantity: int, reason: str}],
-        notes: str
+        notes: str,
+        register_id: int (optional; cash register refunding the money),
+        refund_method: str (optional; defaults to the sale's payment method)
     }
     """
     data = request.get_json() or {}
@@ -2337,7 +2647,7 @@ def create_return():
     try:
         # Validate sale exists and is completed
         cur.execute("""
-            SELECT id, customer_id, total, status, branch_id, sale_type
+            SELECT id, customer_id, total, status, branch_id, sale_type, payment_method
             FROM sales WHERE id = %s
         """, (sale_id,))
         sale = cur.fetchone()
@@ -2349,6 +2659,7 @@ def create_return():
         sale_customer_id = sale[1]
         sale_branch_id = sale[4] or g.branch_id
         sale_type = sale[5]
+        refund_method = data.get('refund_method') or sale[6] or 'efectivo'
 
         # Validate each return item against original sale items
         total_refund = 0
@@ -2433,6 +2744,27 @@ def create_return():
                 notes=f'Devolucion #{return_id} de venta #{sale_id}: {vi["reason"]}'
             )
 
+        # Refund through the cash register: a cash refund leaves the drawer, so
+        # it is recorded as an 'out' movement (see _compute_register_summary,
+        # which subtracts these refunds from the expected cash). Credit sales
+        # instead lower the customer's balance (handled below), and non-cash
+        # refunds (tarjeta/transferencia) never touch the drawer.
+        register_id = data.get('register_id')
+        if not register_id:
+            cur.execute("""
+                SELECT id FROM cash_registers
+                WHERE employee_id = %s AND status = 'open'
+            """, (g.employee_id,))
+            reg = cur.fetchone()
+            register_id = reg[0] if reg else None
+
+        if register_id and refund_method == 'efectivo' and sale_type != 'credit':
+            cur.execute("""
+                INSERT INTO cash_movements (register_id, type, amount, reason, employee_id)
+                VALUES (%s, 'out', %s, %s, %s)
+            """, (register_id, total_refund,
+                  f'Devolucion #{return_id} de venta #{sale_id}', g.employee_id))
+
         # Update sale status if all items returned
         cur.execute("""
             SELECT COALESCE(SUM(ri2.quantity), 0), COALESCE(SUM(si2.quantity), 0)
@@ -2466,6 +2798,19 @@ def create_return():
                    })
 
         conn.commit()
+
+        # Accounting entry (non-blocking): devolucion sobre ventas + IVA + inventario
+        try:
+            import logging
+            from services.accounting_engine import record_return_entry
+            record_return_entry(conn, {'id': return_id, 'sale_id': sale_id})
+            conn.commit()
+        except Exception as acc_err:
+            conn.rollback()
+            logging.getLogger('pos').error(
+                f'Accounting entry for return #{return_id} failed: {acc_err}'
+            )
+
         cur.close(); conn.close()
 
         return jsonify({
@@ -2494,20 +2839,20 @@ def list_returns():
     conn = get_tenant_conn(g.tenant_id)
     cur = conn.cursor()
 
-    page = int(request.args.get('page', 1))
-    per_page = min(int(request.args.get('per_page', 50)), 200)
+    page = _int_arg('page', 1, min_value=1)
+    per_page = _int_arg('per_page', 50, min_value=1, max_value=200)
 
     where_clauses = ["1=1"]
     params = []
 
-    sale_id = request.args.get('sale_id')
-    customer_id = request.args.get('customer_id')
+    sale_id = _int_arg('sale_id')
+    customer_id = _int_arg('customer_id')
     if sale_id:
         where_clauses.append("r.sale_id = %s")
-        params.append(int(sale_id))
+        params.append(sale_id)
     if customer_id:
         where_clauses.append("r.customer_id = %s")
-        params.append(int(customer_id))
+        params.append(customer_id)
 
     where = " AND ".join(where_clauses)
 
@@ -2655,7 +3000,9 @@ def print_ticket(sale_id):
     # Fetch business info from config
     business_info = {'name': 'NEXUS AUTOPARTS', 'rfc': '', 'address': ''}
     try:
-        cur.execute("SELECT key, value FROM config WHERE key IN ('business_name','rfc','address')")
+        cur.execute("""SELECT 'business_name' AS k, value FROM tenant_config WHERE key IN ('tenant_nombre','receipt_store_name')
+                   UNION ALL SELECT 'rfc', value FROM tenant_config WHERE key IN ('tenant_rfc','receipt_rfc')
+                   UNION ALL SELECT 'address', value FROM tenant_config WHERE key IN ('tenant_direccion','receipt_address')""")
         for rw in cur.fetchall():
             if rw[0] == 'business_name':
                 business_info['name'] = rw[1]
@@ -2736,7 +3083,9 @@ def print_remission(sale_id):
 
     business_info = {'name': 'NEXUS AUTOPARTS', 'rfc': '', 'address': ''}
     try:
-        cur.execute("SELECT key, value FROM config WHERE key IN ('business_name','rfc','address')")
+        cur.execute("""SELECT 'business_name' AS k, value FROM tenant_config WHERE key IN ('tenant_nombre','receipt_store_name')
+                   UNION ALL SELECT 'rfc', value FROM tenant_config WHERE key IN ('tenant_rfc','receipt_rfc')
+                   UNION ALL SELECT 'address', value FROM tenant_config WHERE key IN ('tenant_direccion','receipt_address')""")
         for rw in cur.fetchall():
             if rw[0] == 'business_name':
                 business_info['name'] = rw[1]
@@ -2765,6 +3114,67 @@ def print_remission(sale_id):
     })
 
 
+# ─── Cross-sell recommendations (A10) ───────────────────────────────────────
+
+@pos_bp.route('/recommendations', methods=['POST'])
+@require_auth('pos.sell')
+def recommendations():
+    """Suggest complementary parts for the items currently in the cart.
+
+    Body: {"inventory_ids": [1,2,3], "limit": 5}
+    """
+    data = request.get_json(silent=True) or {}
+    raw_ids = data.get('inventory_ids') or data.get('items') or []
+    if not isinstance(raw_ids, list):
+        return jsonify({'error': 'inventory_ids must be a list'}), 400
+    try:
+        inventory_ids = [int(x) for x in raw_ids][:50]
+    except (TypeError, ValueError):
+        return jsonify({'error': 'inventory_ids must be a list of integers'}), 400
+
+    try:
+        limit = int(data.get('limit') or 5)
+    except (TypeError, ValueError):
+        limit = 5
+    limit = max(1, min(limit, 20))
+
+    if not inventory_ids:
+        return jsonify({'recommendations': []})
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        recs = get_cross_sell(conn, inventory_ids, limit=limit)
+    finally:
+        conn.close()
+    return jsonify({'recommendations': recs})
+
+
+# ─── Business anomaly report (A5) ───────────────────────────────────────────
+
+@pos_bp.route('/reports/anomalies', methods=['GET'])
+@require_auth('reports.view')
+def report_anomalies():
+    """Robust anomaly scan over discounts, below-cost sales, cancellations
+    and off-hours tickets.
+
+    Query params: days (90), min_samples (5), z (3.5), limit (50).
+    """
+    days = _int_arg('days', 90, 1, 3650)
+    min_samples = _int_arg('min_samples', _ANOM_MIN_SAMPLES, 1, 1000)
+    z_threshold = _float_arg('z', _ANOM_Z, 0.5, 20.0)
+    limit = _int_arg('limit', 50, 1, 200)
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = detect_anomalies(
+            conn, days=days, min_samples=min_samples,
+            z_threshold=z_threshold, limit=limit,
+        )
+    finally:
+        conn.close()
+    return jsonify(result)
+
+
 # ─── Public Quote HTML Template ─────────────────────────────────────────────
 
 PUBLIC_QUOTE_TEMPLATE = """
diff --git a/pos/blueprints/public_api_bp.py b/pos/blueprints/public_api_bp.py
index 690dcb4..59a4690 100644
--- a/pos/blueprints/public_api_bp.py
+++ b/pos/blueprints/public_api_bp.py
@@ -123,7 +123,10 @@ def public_catalog_search():
         from services.catalog_service import smart_search
         master = get_master_conn()
         try:
-            results = smart_search(master, q, conn, branch_id=None, limit=limit)
+            # Catálogo público: scope 'catalog' → flag SEARCH_RERANK_ENABLED
+            # (el POS, sensible a latencia, usa el scope 'pos' apagado por default).
+            results = smart_search(master, q, conn, branch_id=None, limit=limit,
+                                   rerank_scope='catalog')
         finally:
             master.close()
 
diff --git a/pos/blueprints/service_order_bp.py b/pos/blueprints/service_order_bp.py
index f37496b..7fe3c7e 100644
--- a/pos/blueprints/service_order_bp.py
+++ b/pos/blueprints/service_order_bp.py
@@ -777,7 +777,9 @@ def print_service_order_ticket(so_id):
     business_info = {'name': 'NEXUS AUTOPARTS', 'rfc': '', 'address': ''}
     try:
         cur.execute(
-            "SELECT key, value FROM config WHERE key IN ('business_name','rfc','address')"
+            """SELECT 'business_name' AS k, value FROM tenant_config WHERE key IN ('tenant_nombre','receipt_store_name')
+                   UNION ALL SELECT 'rfc', value FROM tenant_config WHERE key IN ('tenant_rfc','receipt_rfc')
+                   UNION ALL SELECT 'address', value FROM tenant_config WHERE key IN ('tenant_direccion','receipt_address')"""
         )
         for rw in cur.fetchall():
             if rw[0] == 'business_name':
diff --git a/pos/blueprints/storefront_bp.py b/pos/blueprints/storefront_bp.py
new file mode 100644
index 0000000..f61457d
--- /dev/null
+++ b/pos/blueprints/storefront_bp.py
@@ -0,0 +1,240 @@
+# /home/Autopartes/pos/blueprints/storefront_bp.py
+"""Storefront público por tenant: vitrina web con carrito → pedido al POS.
+
+Endpoints públicos (sin auth) protegidos por rate-limit por IP:
+  GET  /pos/api/store/info    — nombre del negocio
+  GET  /pos/api/store/search  — búsqueda de inventario con stock y precio público
+  POST /pos/api/store/order   — crea pedido (venta pendiente de pago) con reserva de stock
+"""
+
+import time
+from collections import defaultdict, deque
+
+from flask import Blueprint, request, jsonify, g
+
+from middleware_tenant import resolve_tenant
+from tenant_db import get_tenant_conn, get_master_conn
+from services.pos_engine import process_sale
+
+storefront_bp = Blueprint('storefront', __name__, url_prefix='/pos/api')
+
+_RATE = defaultdict(deque)
+RATE_LIMIT = 60  # requests por minuto por IP
+RATE_WINDOW = 60
+
+
+def _rate_ok():
+    ip = (request.headers.get('X-Real-IP') or request.remote_addr or 'x')
+    now = time.time()
+    dq = _RATE[ip]
+    while dq and dq[0] < now - RATE_WINDOW:
+        dq.popleft()
+    if len(dq) >= RATE_LIMIT:
+        return False
+    dq.append(now)
+    return True
+
+
+def _require_tenant():
+    if not getattr(g, 'tenant_id', None):
+        return None
+    return g.tenant_id
+
+
+def _business_name(tenant_id):
+    """Nombre del negocio desde la DB maestra (cache 5 min por proceso)."""
+    cache = getattr(_business_name, '_cache', None)
+    if cache is None:
+        cache = _business_name._cache = {}
+    now = time.time()
+    hit = cache.get(tenant_id)
+    if hit and hit[1] > now:
+        return hit[0]
+    try:
+        conn = get_master_conn()
+        cur = conn.cursor()
+        cur.execute("SELECT name FROM tenants WHERE id = %s", (tenant_id,))
+        row = cur.fetchone()
+        cur.close()
+        conn.close()
+        name = row[0] if row else 'Refaccionaria'
+    except Exception:
+        name = 'Refaccionaria'
+    cache[tenant_id] = (name, now + 300)
+    return name
+
+
+@storefront_bp.route('/store/info', methods=['GET'])
+def store_info():
+    tid = _require_tenant()
+    if not tid:
+        return jsonify({'error': 'tenant'}), 404
+    return jsonify({'name': _business_name(tid)})
+
+
+@storefront_bp.route('/store/search', methods=['GET'])
+def store_search():
+    tid = _require_tenant()
+    if not tid:
+        return jsonify({'error': 'tenant'}), 404
+    if not _rate_ok():
+        return jsonify({'error': 'Demasiadas búsquedas. Intenta en un minuto.'}), 429
+
+    q = (request.args.get('q') or '').strip()
+    def _int_arg(name, default, lo, hi):
+        try:
+            return max(lo, min(hi, int(request.args.get(name, default) or default)))
+        except (ValueError, TypeError):
+            return default
+    page = _int_arg('page', 1, 1, 10000)
+    per_page = _int_arg('per_page', 20, 1, 30)
+    offset = (page - 1) * per_page
+
+    conn = get_tenant_conn(tid)
+    cur = conn.cursor()
+    params = []
+    where = "i.is_active = true"
+    if q:
+        where += """ AND (i.name ILIKE %s OR i.part_number ILIKE %s
+                    OR i.id IN (SELECT a.inventory_id FROM inventory_sku_aliases a
+                                WHERE a.sku ILIKE %s))"""
+        like = f"%{q}%"
+        params += [like, like, like]
+    cur.execute(f"SELECT count(*) FROM inventory i WHERE {where}", params)
+    total = cur.fetchone()[0]
+    cur.execute(f"""
+        SELECT i.id, i.part_number, i.name, i.brand, i.price_1, i.image_url, i.description,
+               COALESCE(s.stock, 0) AS stock
+        FROM inventory i
+        LEFT JOIN (
+            SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+            GROUP BY inventory_id
+        ) s ON s.inventory_id = i.id
+        WHERE {where}
+        ORDER BY (COALESCE(s.stock, 0) > 0) DESC, i.name
+        LIMIT %s OFFSET %s
+    """, params + [per_page, offset])
+    items = [{
+        'id': r[0], 'part_number': r[1], 'name': r[2], 'brand': r[3] or '',
+        'price': float(r[4] or 0), 'image_url': r[5] or '',
+        'description': (r[6] or '')[:200], 'stock': int(r[7] or 0),
+    } for r in cur.fetchall()]
+    cur.close()
+    conn.close()
+    return jsonify({'items': items, 'page': page, 'total': total,
+                    'total_pages': max(1, (total + per_page - 1) // per_page)})
+
+
+@storefront_bp.route('/store/order', methods=['POST'])
+def store_order():
+    tid = _require_tenant()
+    if not tid:
+        return jsonify({'error': 'tenant'}), 404
+    if not _rate_ok():
+        return jsonify({'error': 'Demasiadas solicitudes. Intenta en un minuto.'}), 429
+
+    data = request.get_json() or {}
+    name = (data.get('customer_name') or '').strip()
+    phone = ''.join(ch for ch in (data.get('customer_phone') or '') if ch.isdigit())
+    items = data.get('items') or []
+    notes = (data.get('notes') or '').strip()
+    delivery = bool(data.get('delivery'))
+
+    if not name or not phone or len(phone) < 10:
+        return jsonify({'error': 'Nombre y teléfono (10 dígitos) son requeridos'}), 400
+    if not items:
+        return jsonify({'error': 'El carrito está vacío'}), 400
+
+    conn = get_tenant_conn(tid)
+    cur = conn.cursor()
+
+    # Sucursal principal
+    cur.execute("SELECT id FROM branches ORDER BY id LIMIT 1")
+    row = cur.fetchone()
+    if not row:
+        cur.close(); conn.close()
+        return jsonify({'error': 'Tienda no disponible'}), 503
+    branch_id = row[0]
+
+    # Cliente: buscar por teléfono, si no existe crearlo
+    cur.execute("SELECT id FROM customers WHERE phone = %s ORDER BY id LIMIT 1", (phone,))
+    row = cur.fetchone()
+    if row:
+        customer_id = row[0]
+    else:
+        cur.execute("""
+            INSERT INTO customers (name, phone, price_tier, is_active)
+            VALUES (%s, %s, 1, true) RETURNING id
+        """, (name, phone))
+        customer_id = cur.fetchone()[0]
+
+    # Validar stock y precios (precio SIEMPRE del inventario, no del cliente)
+    resolved = []
+    for it in items:
+        inv_id = it.get('inventory_id')
+        qty = int(it.get('quantity', 0) or 0)
+        if not inv_id or qty <= 0:
+            continue
+        cur.execute("""
+            SELECT i.id, i.name, i.part_number, i.price_1, i.tax_rate,
+                   COALESCE(s.stock, 0) AS stock
+            FROM inventory i
+            LEFT JOIN (
+                SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+                GROUP BY inventory_id
+            ) s ON s.inventory_id = i.id
+            WHERE i.id = %s AND i.is_active
+        """, (inv_id,))
+        r = cur.fetchone()
+        if not r:
+            cur.close(); conn.close()
+            return jsonify({'error': f'Producto no disponible (#{inv_id})'}), 400
+        if (r[5] or 0) < qty:
+            cur.close(); conn.close()
+            return jsonify({'error': f'Sin stock suficiente: {r[2]}. Disponible: {int(r[5] or 0)}'}), 400
+        resolved.append({
+            'inventory_id': r[0], 'quantity': qty,
+            'unit_price': float(r[3] or 0), 'tax_rate': float(r[4] or 0),
+            'discount_pct': 0,
+        })
+    if not resolved:
+        cur.close(); conn.close()
+        return jsonify({'error': 'El carrito está vacío'}), 400
+
+    delivery_note = ' | Envío a domicilio solicitado' if delivery else ''
+    sale_data = {
+        'items': resolved,
+        'customer_id': customer_id,
+        'payment_method': 'pendiente',
+        'sale_type': 'cash',
+        'branch_id': branch_id,
+        'amount_paid': 0,
+        'notes': f'Pedido web de {name}{delivery_note}' + (f' | {notes}' if notes else ''),
+    }
+    try:
+        sale = process_sale(conn, sale_data)
+        conn.commit()
+    except ValueError as e:
+        conn.rollback()
+        cur.close(); conn.close()
+        return jsonify({'error': str(e)}), 400
+    except Exception:
+        conn.rollback()
+        cur.close(); conn.close()
+        return jsonify({'error': 'No se pudo registrar el pedido'}), 500
+    cur.close()
+
+    # Notificar al dueño (best effort)
+    try:
+        from services.notification_engine import notify_new_sale
+        notify_new_sale(conn, tid, sale['id'], sale['total'], 'web')
+    except Exception:
+        pass
+    conn.close()
+
+    return jsonify({
+        'ok': True,
+        'order_id': sale['id'],
+        'total': sale['total'],
+        'message': 'Pedido registrado. Te contactaremos para confirmar pago y entrega.',
+    })
diff --git a/pos/blueprints/warranty_bp.py b/pos/blueprints/warranty_bp.py
index d56b403..c10f35a 100644
--- a/pos/blueprints/warranty_bp.py
+++ b/pos/blueprints/warranty_bp.py
@@ -3,6 +3,7 @@
 Endpoints (all under /pos/api):
   GET/POST    /warranties
   GET         /warranties/<id>
+  GET         /warranties/<id>/print (HTML)
   GET         /customers/<id>/warranties
   POST        /warranty-claims
   GET         /warranty-claims
@@ -11,7 +12,7 @@ Endpoints (all under /pos/api):
   PUT         /warranty-claims/<id>/close
 """
 
-from flask import Blueprint, request, jsonify, g
+from flask import Blueprint, request, jsonify, g, render_template_string
 from middleware import require_auth
 from tenant_db import get_tenant_conn
 from services.warranty_engine import (
@@ -43,7 +44,10 @@ def get_warranties():
 def post_warranty():
     """Register a warranty (usually called at sale time)."""
     data = request.get_json() or {}
-    required = ['sale_id', 'sale_item_id', 'inventory_id', 'customer_id', 'warranty_months']
+    required = ['sale_id', 'sale_item_id', 'inventory_id', 'customer_id']
+    # warranty_months is required unless a day-based coverage is given (used parts)
+    if 'warranty_months' not in data and 'warranty_days' not in data:
+        required.append('warranty_months')
     missing = [f for f in required if f not in data]
     if missing:
         return jsonify({'error': f'Missing fields: {missing}'}), 400
@@ -56,11 +60,12 @@ def post_warranty():
             sale_item_id=data['sale_item_id'],
             inventory_id=data['inventory_id'],
             customer_id=data['customer_id'],
-            warranty_months=int(data['warranty_months']),
+            warranty_months=int(data.get('warranty_months') or 0),
             supplier_id=data.get('supplier_id'),
             part_number=data.get('part_number'),
             name=data.get('name'),
             notes=data.get('notes'),
+            warranty_days=int(data['warranty_days']) if data.get('warranty_days') else None,
         )
         conn.commit()
         conn.close()
@@ -87,6 +92,49 @@ def get_warranty_detail(warranty_id):
     return jsonify(w)
 
 
+@warranty_bp.route('/warranties/<int:warranty_id>/print', methods=['GET'])
+@require_auth('inventory.view')
+def print_warranty(warranty_id):
+    """Printable warranty receipt (HTML).
+
+    Serves both month-based and Yonke day-based coverage so a used-part buyer
+    gets a physical voucher with the coverage window.
+    """
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        w = get_warranty(conn, warranty_id)
+        if not w:
+            return jsonify({'error': 'Warranty not found'}), 404
+        business = {'name': 'NEXUS AUTOPARTS', 'rfc': '', 'address': '', 'phone': ''}
+        try:
+            cur = conn.cursor()
+            cur.execute("""
+                SELECT 'name' AS k, value FROM tenant_config
+                    WHERE key IN ('tenant_nombre', 'receipt_store_name')
+                UNION ALL SELECT 'rfc', value FROM tenant_config
+                    WHERE key IN ('tenant_rfc', 'receipt_rfc')
+                UNION ALL SELECT 'address', value FROM tenant_config
+                    WHERE key IN ('tenant_direccion', 'receipt_address')
+                UNION ALL SELECT 'phone', value FROM tenant_config
+                    WHERE key IN ('tenant_telefono', 'receipt_phone')
+            """)
+            for k, v in cur.fetchall():
+                if v:
+                    business[k] = v
+            cur.close()
+        except Exception:
+            pass
+    finally:
+        conn.close()
+
+    coverage = (f"{w['warranty_days']} días" if w.get('warranty_days')
+                else f"{w.get('warranty_months') or 0} meses")
+    html = render_template_string(
+        WARRANTY_PRINT_TEMPLATE, w=w, business=business, coverage=coverage
+    )
+    return html, 200, {'Content-Type': 'text/html; charset=utf-8'}
+
+
 @warranty_bp.route('/customers/<int:customer_id>/warranties', methods=['GET'])
 @require_auth('inventory.view')
 def get_customer_warranties(customer_id):
@@ -206,3 +254,68 @@ def put_close_claim(claim_id):
         conn.rollback()
         conn.close()
         return jsonify({'error': str(e)}), 500
+
+
+# ── Printable warranty receipt ─────────────────────────────────────────────
+
+WARRANTY_PRINT_TEMPLATE = """<!DOCTYPE html>
+<html lang="es">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Garantia #{{ w.id }}</title>
+<style>
+*{box-sizing:border-box;margin:0;padding:0}
+body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;background:#f3f4f6;color:#111;padding:16px;line-height:1.5}
+.card{max-width:640px;margin:0 auto;background:#fff;border-radius:12px;box-shadow:0 4px 20px rgba(0,0,0,.08);overflow:hidden}
+.header{background:linear-gradient(135deg,#1f2937,#374151);color:#fff;padding:24px;text-align:center}
+.header h1{font-size:20px;font-weight:700;margin-bottom:4px}
+.header p{font-size:13px;opacity:.85}
+.body{padding:24px}
+.meta{display:grid;grid-template-columns:1fr 1fr;gap:12px;margin-bottom:20px;font-size:13px;color:#4b5563}
+.meta div{background:#f9fafb;padding:10px 12px;border-radius:8px}
+.meta strong{color:#111;display:block;font-size:11px;text-transform:uppercase;letter-spacing:.4px;margin-bottom:2px}
+.badge{display:inline-block;padding:4px 10px;border-radius:999px;font-size:11px;font-weight:700;text-transform:uppercase}
+.badge-active{background:#d1fae5;color:#065f46}
+.badge-expired,.badge-claimed,.badge-void{background:#fee2e2;color:#991b1b}
+.terms{font-size:12px;color:#6b7280;border-top:1px solid #e5e7eb;padding-top:14px}
+.footer{text-align:center;padding:14px;font-size:12px;color:#9ca3af}
+.actions{padding:0 24px 20px;text-align:center}
+.btn{display:inline-block;padding:12px 22px;border-radius:10px;border:none;background:#1f2937;color:#fff;font-size:14px;font-weight:700;cursor:pointer}
+@media print{body{background:#fff;padding:0}.card{box-shadow:none}.actions{display:none}}
+</style>
+</head>
+<body>
+<div class="card">
+  <div class="header">
+    <h1>Comprobante de Garantia</h1>
+    <p>{{ business.name }}{% if business.rfc %} &middot; RFC {{ business.rfc }}{% endif %}</p>
+  </div>
+  <div class="body">
+    <div class="meta">
+      <div><strong>Folio</strong>G-{{ w.id }}</div>
+      <div><strong>Estado</strong><span class="badge badge-{{ w.status }}">{{ w.status }}</span></div>
+      <div><strong>Cliente</strong>{{ w.customer_name or 'Publico general' }}</div>
+      <div><strong>Venta</strong>#{{ w.sale_id or '—' }}</div>
+      <div><strong>Pieza</strong>{{ w.name or '—' }}</div>
+      <div><strong>No. parte</strong>{{ w.part_number or '—' }}</div>
+      <div><strong>Inicio</strong>{{ w.start_date }}</div>
+      <div><strong>Vence</strong>{{ w.end_date }}</div>
+      <div><strong>Cobertura</strong>{{ coverage }}</div>
+    </div>
+    <div class="terms">
+      <p>Esta garantia ampara defectos de funcionamiento de la pieza por {{ coverage }} a partir de
+      la fecha de compra. Presente este comprobante junto con la pieza para cualquier reclamacion.</p>
+      {% if w.notes %}<p>Notas: {{ w.notes }}</p>{% endif %}
+      {% if business.address %}<p>{{ business.address }}</p>{% endif %}
+      {% if business.phone %}<p>Tel: {{ business.phone }}</p>{% endif %}
+    </div>
+  </div>
+  <div class="actions">
+    <button class="btn" onclick="window.print()">Imprimir</button>
+  </div>
+  <div class="footer">{{ business.name }} — Comprobante generado el {{ w.created_at[:10] }}</div>
+</div>
+</body>
+</html>
+"""
diff --git a/pos/blueprints/whatsapp_bp.py b/pos/blueprints/whatsapp_bp.py
index ccb0d10..d876090 100644
--- a/pos/blueprints/whatsapp_bp.py
+++ b/pos/blueprints/whatsapp_bp.py
@@ -34,6 +34,7 @@ def _get_whatsapp_config(conn):
 
     bridge_url = config.get('whatsapp_bridge_url', '') or WHATSAPP_BRIDGE_URL or ''
     bridge_key = config.get('whatsapp_bridge_key', '') or WHATSAPP_BRIDGE_KEY or ''
+    provider = (config.get('whatsapp_provider') or 'baileys').lower()
     enabled_raw = config.get('whatsapp_enabled', '').lower()
     if enabled_raw == 'true':
         enabled = True
@@ -43,7 +44,17 @@ def _get_whatsapp_config(conn):
         # No explicit tenant setting: auto-enable if a bridge URL is configured
         enabled = bool(bridge_url)
 
-    return {
+    return {        'provider': provider,
+        'phone_number_id': config.get('wa_phone_number_id', ''),
+        'access_token': config.get('wa_access_token', ''),
+        'app_secret': config.get('wa_app_secret', ''),
+        'verify_token': config.get('wa_verify_token', ''),
+        'graph_url': config.get('wa_graph_url', ''),
+        'ai_persona': config.get('wa_ai_persona', ''),
+        'api_base': config.get('wa_api_base', ''),
+        'api_key': config.get('wa_api_key', ''),
+        'public_base': config.get('wa_public_base', ''),
+
         'bridge_url': bridge_url,
         'bridge_key': bridge_key,
         'enabled': enabled,
@@ -359,6 +370,11 @@ def webhook():
         return jsonify({'ok': True})
 
     msg = whatsapp_service.process_incoming(data)
+    return _process_incoming_whatsapp_msg(msg)
+
+
+def _process_incoming_whatsapp_msg(msg, tenant_id_override=None):
+    """Procesa un mensaje entrante normalizado (Baileys o Meta Cloud API)."""
     if not msg.get('phone') or msg.get('from_me'):
         return jsonify({'ok': True})
 
@@ -393,7 +409,7 @@ def webhook():
 
 
     # Resolve tenant
-    tenant_id = request.args.get('tenant_id', type=int)
+    tenant_id = tenant_id_override or request.args.get('tenant_id', type=int)
     if not tenant_id:
         try:
             mconn = get_master_conn()
@@ -494,7 +510,7 @@ def webhook():
             from services.part_kits import should_send_followup
             followup = should_send_followup(phone, tenant_conn)
             if followup:
-                whatsapp_service.send_message(reply_to, followup, bridge_url=wa_config.get('bridge_url'))
+                whatsapp_service.wa_send_text(wa_config, reply_to, followup)
                 cur_fu = tenant_conn.cursor()
                 cur_fu.execute(
                     "INSERT INTO whatsapp_messages (phone, direction, message_text) VALUES (%s, 'outgoing', %s)",
@@ -544,7 +560,7 @@ def webhook():
 
         # 7. Send reply
         if reply:
-            result = whatsapp_service.send_message(reply_to, reply, bridge_url=wa_config.get('bridge_url'))
+            result = whatsapp_service.wa_send_text(wa_config, reply_to, reply)
             print(f"[WA-SM] Replied to {phone}: {reply[:80]}... result={result}")
 
             # Log outgoing
@@ -568,7 +584,7 @@ def webhook():
                     "Estoy teniendo problemas técnicos en este momento. 😕\n\n"
                     f"Por favor llámanos directamente al {phone_branch}."
                 )
-                whatsapp_service.send_message(reply_to, fallback, bridge_url=wa_config.get('bridge_url'))
+                whatsapp_service.wa_send_text(wa_config, reply_to, fallback)
         except Exception:
             pass
 
@@ -583,10 +599,221 @@ def webhook():
                 master_conn.close()
             except Exception:
                 pass
-
     return jsonify({'ok': True})
 
 
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# WA CRM / Meta Cloud API webhook (1 número por refaccionaria)
+# ═══════════════════════════════════════════════════════════════════════════
+
+import os as _os_wa
+
+
+def _resolve_tenant_by_pnid(phone_number_id):
+    """Resolve (tenant_id, wa_config) by Meta phone_number_id. Cached per process."""
+    if not phone_number_id:
+        return None, None
+    cache = getattr(_resolve_tenant_by_pnid, '_cache', None)
+    if cache is None:
+        cache = _resolve_tenant_by_pnid._cache = {}
+    if phone_number_id in cache:
+        return cache[phone_number_id]
+
+    try:
+        mconn = get_master_conn()
+        mcur = mconn.cursor()
+        mcur.execute("SELECT id, db_name FROM tenants WHERE is_active = true ORDER BY id")
+        tenants = mcur.fetchall()
+        mcur.close()
+        mconn.close()
+    except Exception:
+        return None, None
+
+    from tenant_db import get_tenant_conn_by_dbname
+    for tid, db_name in tenants:
+        try:
+            tconn = get_tenant_conn_by_dbname(db_name)
+            cfg = _get_whatsapp_config(tconn)
+            tconn.close()
+            if str(cfg.get('phone_number_id') or '') == str(phone_number_id):
+                cache[phone_number_id] = (tid, cfg)
+                return tid, cfg
+        except Exception:
+            continue
+    cache[phone_number_id] = (None, None)
+    return None, None
+
+
+def _meta_download_media_b64(cfg, media_id):
+    """Download Meta media (audio/image/document) → base64 + mimetype."""
+    import requests as _rq
+    import base64 as _b64
+    try:
+        base = (cfg.get('graph_url') or 'https://graph.facebook.com/v21.0').rstrip('/')
+        headers = {'Authorization': f"Bearer {cfg.get('access_token')}"}
+        info = _rq.get(f"{base}/{media_id}", headers=headers, timeout=20).json()
+        url = info.get('url')
+        if not url:
+            return None, None
+        data = _rq.get(url, headers=headers, timeout=60).content
+        return _b64.b64encode(data).decode(), info.get('mime_type', 'application/octet-stream')
+    except Exception as e:
+        print(f"[WA-CRM] media download failed: {e}")
+        return None, None
+
+
+def _meta_parse_msg(payload, cfg):
+    """Parse a Meta Cloud API webhook payload into the internal msg dict.
+    Returns (phone_number_id, msg) — msg may be None for non-message events."""
+    pnid = None
+    for entry in payload.get('entry', []):
+        for change in entry.get('changes', []):
+            value = change.get('value', {})
+            pnid = value.get('metadata', {}).get('phone_number_id', pnid)
+            if not value.get('messages'):
+                continue
+            m = value['messages'][0]
+            contact = (value.get('contacts') or [{}])[0]
+            push_name = (contact.get('profile') or {}).get('name', '')
+            msg = {
+                'phone': m.get('from', ''),
+                'from_me': False,
+                'message_id': m.get('id', ''),
+                'push_name': push_name,
+                'text': '',
+                'media_kind': 'text',
+            }
+            mtype = m.get('type', '')
+            if mtype == 'text':
+                msg['text'] = m.get('text', {}).get('body', '')
+            elif mtype == 'image':
+                msg['media_kind'] = 'image'
+                msg['text'] = m.get('image', {}).get('caption', '') or '(imagen)'
+                b64, mt = _meta_download_media_b64(cfg, m.get('image', {}).get('id'))
+                if b64:
+                    msg['media_base64'] = b64
+                    msg['media_mimetype'] = mt
+            elif mtype == 'audio' or mtype == 'voice':
+                msg['media_kind'] = 'audio'
+                b64, mt = _meta_download_media_b64(cfg, m.get('audio', {}).get('id'))
+                if b64:
+                    msg['media_base64'] = b64
+                    msg['media_mimetype'] = mt or 'audio/ogg'
+            elif mtype == 'document':
+                msg['media_kind'] = 'image'
+                msg['text'] = m.get('document', {}).get('caption', '') or '(documento)'
+                b64, mt = _meta_download_media_b64(cfg, m.get('document', {}).get('id'))
+                if b64:
+                    msg['media_base64'] = b64
+                    msg['media_mimetype'] = mt
+            elif mtype == 'location':
+                lat = m.get('location', {}).get('latitude')
+                lng = m.get('location', {}).get('longitude')
+                msg['media_kind'] = 'location'
+                msg['latitude'] = lat
+                msg['longitude'] = lng
+            return pnid, msg
+    return pnid, None
+
+
+@whatsapp_bp.route('/wacrm/webhook', methods=['GET'])
+def wacrm_webhook_verify():
+    """Meta webhook verification handshake."""
+    verify_token = request.args.get('hub.verify_token', '')
+    challenge = request.args.get('hub.challenge', '')
+    if not challenge:
+        return 'Bad request', 400
+
+    expected_global = _os_wa.environ.get('WA_VERIFY_TOKEN', '')
+    if expected_global and verify_token == expected_global:
+        return challenge, 200
+
+    # per-tenant verify tokens
+    try:
+        mconn = get_master_conn()
+        mcur = mconn.cursor()
+        mcur.execute("SELECT id, db_name FROM tenants WHERE is_active = true ORDER BY id")
+        tenants = mcur.fetchall()
+        mcur.close()
+        mconn.close()
+        from tenant_db import get_tenant_conn_by_dbname
+        for tid, db_name in tenants:
+            try:
+                tconn = get_tenant_conn_by_dbname(db_name)
+                cur = tconn.cursor()
+                cur.execute("SELECT value FROM tenant_config WHERE key = 'wa_verify_token'")
+                row = cur.fetchone()
+                tconn.close()
+                if row and row[0] and verify_token == row[0]:
+                    return challenge, 200
+            except Exception:
+                continue
+    except Exception:
+        pass
+    return 'Forbidden', 403
+
+
+@whatsapp_bp.route('/wacrm/webhook', methods=['POST'])
+def wacrm_webhook():
+    """Meta Cloud API events (WA CRM self-hosted, 1 número por tenant)."""
+    raw = request.get_data()
+    payload = request.get_json(silent=True) or {}
+    signature = request.headers.get('X-Hub-Signature-256', '')
+
+    # First parse to get phone_number_id (to resolve tenant + its app secret)
+    pnid_probe = None
+    for entry in payload.get('entry', []):
+        for change in entry.get('changes', []):
+            pnid_probe = change.get('value', {}).get('metadata', {}).get('phone_number_id')
+            break
+        if pnid_probe:
+            break
+
+    tenant_id, wa_cfg = _resolve_tenant_by_pnid(pnid_probe) if pnid_probe else (None, None)
+    app_secret = (wa_cfg or {}).get('app_secret') or _os_wa.environ.get('WA_APP_SECRET', '')
+
+    from services.whatsapp_service import meta_verify_signature
+    if not meta_verify_signature(app_secret, raw, signature):
+        return 'Invalid signature', 403
+
+    pnid, msg = _meta_parse_msg(payload, wa_cfg or {})
+
+    # Formato de automatización de WA CRM: {"phone": "...", "message": "..."} (o from/text)
+    if not msg:
+        raw_phone = payload.get('phone') or payload.get('from') or payload.get('wa_id')
+        raw_text = payload.get('message') or payload.get('text') or payload.get('body')
+        if raw_phone and raw_text is not None:
+            msg = {
+                'phone': str(raw_phone),
+                'from_me': bool(payload.get('from_me')),
+                'message_id': payload.get('message_id') or payload.get('id') or '',
+                'push_name': payload.get('name') or payload.get('push_name') or '',
+                'text': str(raw_text),
+                'media_kind': 'text',
+            }
+    if not msg:
+        return jsonify({'ok': True})  # statuses / reads / non-message events
+
+    if not tenant_id:
+        tid_arg = request.args.get('tenant_id', type=int)
+        if tid_arg:
+            from tenant_db import get_tenant_conn as _gtc
+            try:
+                _c = _gtc(tid_arg)
+                wa_cfg = _get_whatsapp_config(_c)
+                _c.close()
+                tenant_id = tid_arg
+            except Exception:
+                tenant_id = None
+    if not tenant_id:
+        print(f"[WA-CRM] No tenant for phone_number_id={pnid_probe}")
+        return jsonify({'ok': True})
+
+    return _process_incoming_whatsapp_msg(msg, tenant_id_override=tenant_id)
+
+
 @whatsapp_bp.route('/send', methods=['POST'])
 @require_auth()
 def send():
diff --git a/pos/blueprints/yonke_bp.py b/pos/blueprints/yonke_bp.py
new file mode 100644
index 0000000..49e64fc
--- /dev/null
+++ b/pos/blueprints/yonke_bp.py
@@ -0,0 +1,911 @@
+# /home/Autopartes/pos/blueprints/yonke_bp.py
+"""Nexus Yonke blueprint: used/rebuild parts, donor vehicles and consignments.
+
+All endpoints live under /pos/api/yonke.
+Permissions: yonke.view for reads, yonke.manage for writes.
+
+AI vision grading (A4):
+  POST /pos/api/yonke/pieces/<id>/grade-suggest   (multipart `file` | JSON image_base64)
+  POST /pos/api/yonke/grade-suggest               (no piece required)
+  Both return the suggestion contract documented in the "AI vision grading"
+  section below; the front (yonke.js) can POST the photo and pre-fill the grade.
+
+A5 additions (donor intake, reports, statements, labels, ML, bulk, AI):
+  POST /pos/api/yonke/donors/full                         — donor + N pieces (atomic)
+  POST /pos/api/yonke/donors/<vin>/allocate-cost          — spread acquisition cost
+  GET  /pos/api/yonke/reports/aging?days=90               — pieces aging in the yard
+  GET  /pos/api/yonke/reports/summary                     — donors/margin/capital/grades
+  GET  /pos/api/yonke/consignments/<id>/statement         — consignor statement (JSON)
+  GET  /pos/api/yonke/consignments/<id>/statement/print   — consignor statement (HTML)
+  POST /pos/api/yonke/pieces/<id>/publish-meli            — publish one piece to ML
+  POST /pos/api/yonke/pieces/bulk                         — bulk CSV import
+  GET/POST /pos/api/yonke/pieces/<id>/compat              — "sirve para" fitment
+  GET  /pos/api/yonke/pieces/<id>/label                   — printable barcode label
+  POST /pos/api/yonke/pieces/<id>/identify                — vision identify (503 on AI down)
+  POST /pos/api/yonke/pieces/<id>/price-suggest           — rule-based price suggestion
+  GET  /pos/api/yonke/duplicates?threshold=0.85           — semantic duplicate groups
+  POST /pos/api/yonke/pieces/<id>/validate-photo          — vision photo check
+"""
+
+import os
+from io import BytesIO
+
+from flask import Blueprint, request, jsonify, g, Response
+
+from middleware import require_auth
+from tenant_db import get_tenant_conn
+from services import yonke_service
+from services.yonke_service import DuplicatePartNumber
+from services.image_service import DATA_DIR, STATIC_DIR
+from services.vin_decoder import decode_vin
+
+yonke_bp = Blueprint('yonke', __name__, url_prefix='/pos/api/yonke')
+
+ALLOWED_EXTENSIONS = {'jpg', 'jpeg', 'png', 'webp'}
+MAX_IMAGE_BYTES = 5 * 1024 * 1024  # 5 MB
+
+
+def _int_arg(name, default, minimum, maximum):
+    try:
+        val = int(request.args.get(name, default))
+    except (TypeError, ValueError):
+        return default
+    return min(max(val, minimum), maximum)
+
+
+def _branch_id(data=None):
+    """Resolve the branch: explicit body/query value first, token fallback."""
+    if isinstance(data, dict) and data.get('branch_id'):
+        try:
+            return int(data['branch_id'])
+        except (TypeError, ValueError):
+            pass
+    arg = request.args.get('branch_id')
+    if arg:
+        try:
+            return int(arg)
+        except (TypeError, ValueError):
+            pass
+    return g.branch_id
+
+
+# ─── Pieces ────────────────────────────────────────────────────────────────
+
+@yonke_bp.route('/pieces', methods=['GET'])
+@require_auth('yonke.view')
+def list_pieces():
+    """List used/rebuild pieces with filters and pagination."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        items, pagination = yonke_service.list_pieces(
+            conn,
+            filters={
+                'q': request.args.get('q'),
+                'donor_make': request.args.get('donor_make'),
+                'donor_model': request.args.get('donor_model'),
+                'donor_year': request.args.get('donor_year'),
+                'vin': request.args.get('vin'),
+                'grade': request.args.get('grade'),
+                'condition': request.args.get('condition'),
+                'ownership': request.args.get('ownership'),
+            },
+            page=_int_arg('page', 1, 1, 10**9),
+            per_page=_int_arg('per_page', 25, 1, 200),
+            branch_id=_branch_id(),
+        )
+        return jsonify({'data': items, 'pagination': pagination})
+    except ValueError as e:
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces', methods=['POST'])
+@require_auth('yonke.manage')
+def create_piece():
+    """Create a used/rebuild piece (auto-SKU when part_number is omitted)."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        item = yonke_service.create_piece(conn, data, branch_id=_branch_id(data))
+        conn.commit()
+        return jsonify(item), 201
+    except DuplicatePartNumber:
+        conn.rollback()
+        return jsonify({'error': 'part_number already exists'}), 409
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>', methods=['GET'])
+@require_auth('yonke.view')
+def get_piece(piece_id):
+    """Get a single piece (extra helper for the detail/edit view)."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        item = yonke_service.get_piece(conn, piece_id, branch_id=_branch_id())
+        if not item:
+            return jsonify({'error': 'Piece not found'}), 404
+        return jsonify(item)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>', methods=['PUT'])
+@require_auth('yonke.manage')
+def update_piece(piece_id):
+    """Edit the Yonke fields of a piece."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        item = yonke_service.update_piece(conn, piece_id, data, branch_id=_branch_id(data))
+        if not item:
+            conn.rollback()
+            return jsonify({'error': 'Piece not found'}), 404
+        conn.commit()
+        return jsonify(item)
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── Images ────────────────────────────────────────────────────────────────
+
+@yonke_bp.route('/pieces/<int:piece_id>/images', methods=['POST'])
+@require_auth('yonke.manage')
+def upload_piece_images(piece_id):
+    """Upload one or more photos for a piece (multipart, repeated `file` field)."""
+    files = [f for f in request.files.getlist('file') if f and f.filename]
+    if not files:
+        return jsonify({'error': 'No file provided'}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        if not yonke_service.get_piece(conn, piece_id):
+            return jsonify({'error': 'Piece not found'}), 404
+
+        valid = []
+        for f in files:
+            ext = f.filename.rsplit('.', 1)[-1].lower() if '.' in f.filename else ''
+            if ext not in ALLOWED_EXTENSIONS:
+                return jsonify({
+                    'error': f'File type not allowed. Use: {", ".join(sorted(ALLOWED_EXTENSIONS))}'
+                }), 400
+            raw = f.read()
+            if len(raw) > MAX_IMAGE_BYTES:
+                return jsonify({'error': 'File too large (max 5 MB)'}), 400
+            valid.append(BytesIO(raw))
+
+        images = yonke_service.add_piece_images(conn, g.tenant_id, piece_id, valid)
+        conn.commit()
+        return jsonify({'images': images})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>/images/<int:image_id>', methods=['DELETE'])
+@require_auth('yonke.manage')
+def delete_piece_image(piece_id, image_id):
+    """Delete one photo (row + files); promotes another when it was primary."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        deleted = yonke_service.delete_piece_image(conn, g.tenant_id, piece_id, image_id)
+        if not deleted:
+            conn.rollback()
+            return jsonify({'error': 'Image not found'}), 404
+        conn.commit()
+        return jsonify({'ok': True})
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── AI vision grading (A4) ────────────────────────────────────────────────
+#
+# Front-end contract (yonke.js):
+#   POST /pos/api/yonke/pieces/<id>/grade-suggest
+#     body: multipart `file` (jpg/png/webp, <=5 MB) — or JSON {"image_base64": "..."}
+#           optional metadata overrides: name / category / condition
+#     200 -> {condition_grade_suggested:"A|B|C|D", condition_suggested, defects[],
+#             confidence, notes, source, piece_id}
+#     503 -> same shape but grade=null + `error` (AI backend unavailable)
+#   POST /pos/api/yonke/grade-suggest
+#     same body, no piece required (returns the suggestion only, never persists).
+
+def _piece_primary_image_url(piece):
+    """Primary photo URL for a piece, falling back to inventory.image_url."""
+    for img in (piece or {}).get('images') or []:
+        if img.get('is_primary') and img.get('url'):
+            return img['url']
+    for img in (piece or {}).get('images') or []:
+        if img.get('url'):
+            return img['url']
+    return (piece or {}).get('image_url') or None
+
+
+def _read_local_image(url):
+    """Read the bytes of an inventory_images/inventory URL stored on disk."""
+    if not url:
+        return None
+    idx = url.find('/images/parts/')
+    if idx == -1:
+        return None
+    rel = url[idx + len('/images/parts/'):]
+    for base in (DATA_DIR, STATIC_DIR):
+        try:
+            with open(os.path.join(base, rel), 'rb') as fh:
+                return fh.read()
+        except OSError:
+            continue
+    return None
+
+
+def _read_image_request():
+    """Extract the image from the request.
+
+    Returns (image_bytes, image_base64, error_response). Exactly one of
+    image_bytes / image_base64 is set when error_response is None.
+    """
+    upload = request.files.get('file')
+    if upload and upload.filename:
+        raw = upload.read()
+        if not raw:
+            return None, None, (jsonify({'error': 'Empty file'}), 400)
+        if len(raw) > MAX_IMAGE_BYTES:
+            return None, None, (jsonify({'error': 'File too large (max 5 MB)'}), 400)
+        return raw, None, None
+
+    data = request.get_json(silent=True) or {}
+    b64 = (data.get('image_base64') or data.get('image') or '').strip()
+    if b64:
+        return None, b64, None
+    return None, None, None
+
+
+def _meta_from_request(piece=None):
+    """Metadata for the prompt: request overrides piece values."""
+    data = request.get_json(silent=True) or {}
+    form = request.form or {}
+
+    def pick(field):
+        return (form.get(field) or data.get(field) or '').strip() or None
+
+    piece = piece or {}
+    return {
+        'name': pick('name') or piece.get('name'),
+        'category': pick('category'),
+        'condition': pick('condition') or piece.get('condition') or 'usado',
+    }
+
+
+def _piece_category_name(conn, piece_id):
+    cur = conn.cursor()
+    try:
+        cur.execute("""
+            SELECT c.name
+            FROM inventory i
+            LEFT JOIN part_categories c ON c.id = i.category_id
+            WHERE i.id = %s
+        """, (piece_id,))
+        row = cur.fetchone()
+        return (row[0] if row else None) or None
+    except Exception:
+        return None
+    finally:
+        cur.close()
+
+
+def _grade_response(result, piece_id=None):
+    """Normalize the service result into the HTTP response + status code."""
+    payload = dict(result)
+    if piece_id is not None:
+        payload['piece_id'] = piece_id
+    payload['available'] = result.get('condition_grade_suggested') is not None
+    status = 200 if payload['available'] else 503
+    return jsonify(payload), status
+
+
+@yonke_bp.route('/pieces/<int:piece_id>/grade-suggest', methods=['POST'])
+@require_auth('yonke.manage')
+def grade_suggest_piece(piece_id):
+    """Suggest a condition grade from a piece photo (upload/b64/primary photo)."""
+    image_bytes, image_b64, err = _read_image_request()
+    if err:
+        return err
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        piece = yonke_service.get_piece(conn, piece_id)
+        if not piece:
+            return jsonify({'error': 'Piece not found'}), 404
+
+        if not image_bytes and not image_b64:
+            image_bytes = _read_local_image(_piece_primary_image_url(piece))
+            if not image_bytes:
+                return jsonify({
+                    'error': 'No image provided and the piece has no stored photo'
+                }), 400
+
+        meta = _meta_from_request(piece)
+        if not meta.get('category'):
+            meta['category'] = _piece_category_name(conn, piece_id)
+
+        from services import part_vision
+        result = part_vision.suggest_grade(
+            image_bytes=image_bytes, image_base64=image_b64,
+            name=meta['name'], category=meta['category'], condition=meta['condition'],
+        )
+        return _grade_response(result, piece_id=piece_id)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/grade-suggest', methods=['POST'])
+@require_auth('yonke.manage')
+def grade_suggest_adhoc():
+    """Suggest a condition grade from a photo without requiring a piece."""
+    image_bytes, image_b64, err = _read_image_request()
+    if err:
+        return err
+    if not image_bytes and not image_b64:
+        return jsonify({'error': 'No image provided'}), 400
+
+    meta = _meta_from_request()
+    try:
+        from services import part_vision
+        result = part_vision.suggest_grade(
+            image_bytes=image_bytes, image_base64=image_b64,
+            name=meta['name'], category=meta['category'], condition=meta['condition'],
+        )
+        return _grade_response(result)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+
+
+# ─── VIN decoder ───────────────────────────────────────────────────────────
+
+@yonke_bp.route('/vin/<vin>', methods=['GET'])
+@require_auth('yonke.view')
+def decode_vin_endpoint(vin):
+    """Decode a VIN with the shared NHTSA decoder."""
+    result = decode_vin(vin)
+    return jsonify({
+        'vin': result.get('vin', (vin or '').strip().upper()),
+        'make': result.get('make', '') or '',
+        'model': result.get('model', '') or '',
+        'year': result.get('year'),
+        'engine': result.get('engine', '') or '',
+        'body_type': result.get('body_type', '') or '',
+        'fuel_type': result.get('fuel_type', '') or '',
+        'drive_type': result.get('drive_type', '') or '',
+        'trim': result.get('trim', '') or '',
+        'error': result.get('error', '') or '',
+    })
+
+
+# ─── Donors ────────────────────────────────────────────────────────────────
+
+@yonke_bp.route('/donors', methods=['GET'])
+@require_auth('yonke.view')
+def list_donors():
+    """List donor vehicles grouped by VIN."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        data, pagination = yonke_service.list_donors(
+            conn,
+            q=request.args.get('q'),
+            page=_int_arg('page', 1, 1, 10**9),
+            per_page=_int_arg('per_page', 25, 1, 200),
+        )
+        return jsonify({'data': data, 'pagination': pagination})
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── Consignments ──────────────────────────────────────────────────────────
+
+@yonke_bp.route('/consignments', methods=['GET'])
+@require_auth('yonke.view')
+def list_consignments():
+    """List consignments with piece counts and amounts."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        data, pagination = yonke_service.list_consignments(
+            conn,
+            status=request.args.get('status'),
+            page=_int_arg('page', 1, 1, 10**9),
+            per_page=_int_arg('per_page', 50, 1, 200),
+        )
+        return jsonify({'data': data, 'pagination': pagination})
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/consignments', methods=['POST'])
+@require_auth('yonke.manage')
+def create_consignment():
+    """Create a consignment."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        cons = yonke_service.create_consignment(conn, data)
+        conn.commit()
+        return jsonify(cons), 201
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/consignments/<int:consignment_id>', methods=['GET'])
+@require_auth('yonke.view')
+def get_consignment(consignment_id):
+    """Consignment detail with its items."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        cons = yonke_service.get_consignment(conn, consignment_id)
+        if not cons:
+            return jsonify({'error': 'Consignment not found'}), 404
+        return jsonify(cons)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/consignments/<int:consignment_id>/items', methods=['POST'])
+@require_auth('yonke.manage')
+def add_consignment_item(consignment_id):
+    """Attach a piece to a consignment (sets inventory.ownership='consigna')."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        item = yonke_service.add_consignment_item(conn, consignment_id, data)
+        conn.commit()
+        return jsonify(item), 201
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/consignments/<int:consignment_id>/settle', methods=['PUT'])
+@require_auth('yonke.manage')
+def settle_consignment(consignment_id):
+    """Settle consignment items and return the payout summary."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        summary = yonke_service.settle_consignment(
+            conn, consignment_id, item_ids=data.get('item_ids')
+        )
+        if not summary:
+            conn.rollback()
+            return jsonify({'error': 'Consignment not found'}), 404
+        conn.commit()
+        return jsonify(summary)
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# A5 — Donor intake, reports, statements, labels, ML publish, bulk, AI
+# ═══════════════════════════════════════════════════════════════════════════
+
+def _public_base_url():
+    """Tenant public base URL from the request (reverse-proxy aware)."""
+    proto = request.headers.get('X-Forwarded-Proto', request.scheme)
+    host = request.headers.get('X-Forwarded-Host', request.host)
+    cf = request.headers.get('CF-Visitor')
+    if cf and '"scheme":"https"' in cf:
+        proto = 'https'
+    if proto == 'http' and ('nexusautoparts.com.mx' in host
+                            or request.headers.get('X-Forwarded-Ssl') == 'on'):
+        proto = 'https'
+    return f"{proto}://{host}/"
+
+
+def _tenant_display_name():
+    """Best-effort business name (from the master DB). Never raises."""
+    try:
+        from tenant_db import get_master_conn
+        conn = get_master_conn()
+        try:
+            cur = conn.cursor()
+            cur.execute("SELECT name FROM tenants WHERE id = %s", (g.tenant_id,))
+            row = cur.fetchone()
+            cur.close()
+            return (row[0] if row else None) or None
+        finally:
+            conn.close()
+    except Exception:
+        return None
+
+
+def _piece_or_404(conn, piece_id):
+    piece = yonke_service.get_piece(conn, piece_id, branch_id=_branch_id())
+    if not piece:
+        return None, (jsonify({'error': 'Piece not found'}), 404)
+    return piece, None
+
+
+def _read_any_image(piece):
+    """Image bytes for AI endpoints: upload first, then the piece's stored photo."""
+    image_bytes, image_b64, err = _read_image_request()
+    if err:
+        return None, None, err
+    if not image_bytes and not image_b64:
+        image_bytes = _read_local_image(_piece_primary_image_url(piece))
+        if not image_bytes:
+            return None, None, (jsonify({
+                'error': 'No image provided and the piece has no stored photo'
+            }), 400)
+    return image_bytes, image_b64, None
+
+
+# ─── 1. Full donor intake ──────────────────────────────────────────────────
+
+@yonke_bp.route('/donors/full', methods=['POST'])
+@require_auth('yonke.manage')
+def create_donor_full():
+    """Register a donor vehicle and all its pieces in one atomic call."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = yonke_service.create_donor_full(
+            conn, data, branch_id=_branch_id(data))
+        conn.commit()
+        return jsonify(result), 201
+    except DuplicatePartNumber:
+        conn.rollback()
+        return jsonify({'error': 'part_number already exists'}), 409
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 2. Cost allocation across a donor's pieces ────────────────────────────
+
+@yonke_bp.route('/donors/<vin>/allocate-cost', methods=['POST'])
+@require_auth('yonke.manage')
+def allocate_donor_cost(vin):
+    """Spread a donor's acquisition cost across its pieces."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = yonke_service.allocate_donor_cost(
+            conn, vin, data.get('total_cost'), method=data.get('method'))
+        if result is None:
+            conn.rollback()
+            return jsonify({'error': 'Donor not found or has no pieces'}), 404
+        conn.commit()
+        return jsonify(result)
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 3. Aging report ───────────────────────────────────────────────────────
+
+@yonke_bp.route('/reports/aging', methods=['GET'])
+@require_auth('yonke.view')
+def aging_report():
+    """Pieces in the yard for at least `days` days (default 90)."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = yonke_service.aging_report(conn, days=_int_arg('days', 90, 0, 100000))
+        return jsonify(result)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 4. Summary report ─────────────────────────────────────────────────────
+
+@yonke_bp.route('/reports/summary', methods=['GET'])
+@require_auth('yonke.view')
+def summary_report():
+    """Donor breakdown, margins, invested capital and grade mix."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        return jsonify(yonke_service.summary_report(conn))
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 5-6. Consignment statement (+ print) ──────────────────────────────────
+
+@yonke_bp.route('/consignments/<int:consignment_id>/statement', methods=['GET'])
+@require_auth('yonke.view')
+def consignment_statement(consignment_id):
+    """Consignor account statement for an optional [from, to] period."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        statement = yonke_service.consignment_statement(
+            conn, consignment_id,
+            date_from=request.args.get('from'), date_to=request.args.get('to'))
+        if not statement:
+            return jsonify({'error': 'Consignment not found'}), 404
+        return jsonify(statement)
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/consignments/<int:consignment_id>/statement/print', methods=['GET'])
+@require_auth('yonke.view')
+def consignment_statement_print(consignment_id):
+    """Printable HTML for the consignor statement."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        statement = yonke_service.consignment_statement(
+            conn, consignment_id,
+            date_from=request.args.get('from'), date_to=request.args.get('to'))
+        if not statement:
+            return Response('<h1>404</h1>', status=404, mimetype='text/html')
+        html = yonke_service.render_statement_html(statement, _tenant_display_name())
+        return Response(html, mimetype='text/html')
+    finally:
+        conn.close()
+
+
+# ─── 7. Publish one piece to MercadoLibre ──────────────────────────────────
+
+@yonke_bp.route('/pieces/<int:piece_id>/publish-meli', methods=['POST'])
+@require_auth('yonke.manage')
+def publish_piece_meli(piece_id):
+    """Publish this piece to MercadoLibre (degrades if ML is not configured)."""
+    data = request.get_json() or {}
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = yonke_service.publish_piece_to_meli(
+            conn, piece_id,
+            category_id=data.get('category_id'),
+            price=data.get('price'),
+            stock=data.get('stock'),
+            branch_id=_branch_id(data),
+            listing_type=data.get('listing_type'),
+            shipping_mode=data.get('shipping_mode'),
+            base_url=_public_base_url(),
+        )
+        if result.get('not_found'):
+            conn.rollback()
+            return jsonify({'ok': False, 'error': result.get('error')}), 404
+        conn.commit()
+        return jsonify(result), (200 if result.get('ok') else 400)
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'ok': False, 'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 8. Bulk CSV import ────────────────────────────────────────────────────
+
+@yonke_bp.route('/pieces/bulk', methods=['POST'])
+@require_auth('yonke.manage')
+def bulk_create_pieces():
+    """Create pieces in bulk from a CSV (multipart `file` or raw text body)."""
+    upload = request.files.get('file') or request.files.get('csv')
+    if upload and upload.filename:
+        raw = upload.read()
+        text = raw.decode('utf-8-sig', 'replace') if isinstance(raw, bytes) else str(raw)
+    elif request.is_json:
+        data = request.get_json(silent=True) or {}
+        text = (data.get('csv') or '').strip()
+        if not text:
+            return jsonify({'error': 'CSV file required'}), 400
+    else:
+        raw = request.get_data() or b''
+        if not raw:
+            return jsonify({'error': 'CSV file required'}), 400
+        text = raw.decode('utf-8-sig', 'replace')
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        result = yonke_service.bulk_create_pieces(
+            conn, text, branch_id=_branch_id())
+        conn.commit()
+        return jsonify(result)
+    except ValueError as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 400
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 9. Vehicle compatibility ("sirve para") ───────────────────────────────
+
+@yonke_bp.route('/pieces/<int:piece_id>/compat', methods=['GET'])
+@require_auth('yonke.view')
+def list_piece_compat(piece_id):
+    """List the vehicles this piece fits."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        _, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        return jsonify({'data': yonke_service.list_piece_compat(conn, piece_id)})
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>/compat', methods=['POST'])
+@require_auth('yonke.manage')
+def add_piece_compat(piece_id):
+    """Add manual vehicles ({make, model, year}) to a piece."""
+    data = request.get_json() or {}
+    items = data.get('items')
+    if not isinstance(items, list) or not items:
+        return jsonify({'error': 'items required (list of {make, model, year})'}), 400
+
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        _, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        added = yonke_service.add_piece_compat(conn, piece_id, items)
+        conn.commit()
+        return jsonify({'added': added, 'count': len(added)}), 201
+    except Exception as e:
+        conn.rollback()
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+# ─── 10. Printable piece label (barcode) ───────────────────────────────────
+
+@yonke_bp.route('/pieces/<int:piece_id>/label', methods=['GET'])
+@require_auth('yonke.view')
+def piece_label(piece_id):
+    """Printable HTML label with a Code39 barcode of the auto-SKU."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        piece, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        html = yonke_service.render_label_html(conn, piece, _tenant_display_name())
+        return Response(html, mimetype='text/html')
+    except Exception as e:
+        return Response(f'<h1>Error</h1><p>{e}</p>', status=500, mimetype='text/html')
+    finally:
+        conn.close()
+
+
+# ─── 11. Non-conversational AI ─────────────────────────────────────────────
+
+@yonke_bp.route('/pieces/<int:piece_id>/identify', methods=['POST'])
+@require_auth('yonke.manage')
+def identify_piece(piece_id):
+    """Vision identify: {name, category, confidence} (503 when AI is down)."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        piece, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        image_bytes, image_b64, err = _read_any_image(piece)
+        if err:
+            return err
+
+        from services import yonke_ai
+        result = yonke_ai.identify_piece(
+            image_bytes=image_bytes, image_base64=image_b64,
+            hint_name=piece.get('name'))
+        status = 200 if result.get('available') else 503
+        return jsonify(result), status
+    except Exception as e:
+        return jsonify({'name': None, 'category': None, 'confidence': 0.0,
+                        'available': False, 'error': str(e)}), 503
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>/price-suggest', methods=['POST'])
+@require_auth('yonke.manage')
+def price_suggest(piece_id):
+    """Rule-based price suggestion using cost/grade plus local comparables."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        piece, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        from services import yonke_ai
+        return jsonify(yonke_ai.suggest_price(conn, piece))
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/duplicates', methods=['GET'])
+@require_auth('yonke.view')
+def duplicates():
+    """Groups of near-duplicate used pieces (semantic similarity)."""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        from services import yonke_ai
+        threshold = request.args.get('threshold', 0.85)
+        return jsonify(yonke_ai.find_duplicate_groups(conn, threshold=threshold))
+    except Exception as e:
+        return jsonify({'error': str(e)}), 500
+    finally:
+        conn.close()
+
+
+@yonke_bp.route('/pieces/<int:piece_id>/validate-photo', methods=['POST'])
+@require_auth('yonke.manage')
+def validate_photo(piece_id):
+    """Vision check: is it an auto part with usable photo quality?"""
+    conn = get_tenant_conn(g.tenant_id)
+    try:
+        piece, err = _piece_or_404(conn, piece_id)
+        if err:
+            return err
+        image_bytes, image_b64, err = _read_any_image(piece)
+        if err:
+            return err
+        from services import yonke_ai
+        return jsonify(yonke_ai.validate_photo(
+            image_bytes=image_bytes, image_base64=image_b64))
+    except Exception as e:
+        return jsonify({'ok': True, 'issues': [], 'available': False,
+                        'error': str(e)})
+    finally:
+        conn.close()
diff --git a/pos/config.py b/pos/config.py
index 2b53f78..a106a84 100644
--- a/pos/config.py
+++ b/pos/config.py
@@ -90,6 +90,26 @@ QWEN_API_URL = os.environ.get('QWEN_API_URL', '')
 QWEN_API_KEY = os.environ.get('QWEN_API_KEY', '')
 QWEN_MODEL = os.environ.get('QWEN_MODEL', 'qwen3.6')
 
+# ─── Búsqueda semántica (rerank / embeddings, mismo proveedor QWEN) ────────
+# Consumidas por services/semantic_search.py. OJO: se leen al importar el
+# módulo — cambiar el flag requiere recargar el worker, no es hot-reload.
+QWEN_RERANK_MODEL = os.environ.get('QWEN_RERANK_MODEL', 'rerank')
+QWEN_EMBED_MODEL = os.environ.get('QWEN_EMBED_MODEL', 'qwen3-embedding')
+# Interruptor maestro (scope 'catalog': catálogo público / API / dashboard).
+SEARCH_RERANK_ENABLED = os.environ.get('SEARCH_RERANK_ENABLED', 'true').lower() == 'true'
+# Scope POS (caja + chat): apagado por defecto, el rerank agrega ~0.6-1.8 s a
+# una búsqueda que responde en ~18 ms (ver services/semantic_search.py).
+SEARCH_RERANK_POS_ENABLED = os.environ.get('SEARCH_RERANK_POS_ENABLED', 'false').lower() == 'true'
+# Un valor no numérico en el .env no debe tumbar el arranque del POS.
+try:
+    SEARCH_RERANK_TIMEOUT = float(os.environ.get('SEARCH_RERANK_TIMEOUT', '2'))
+except ValueError:
+    SEARCH_RERANK_TIMEOUT = 2.0
+try:
+    SEARCH_RERANK_MAX_CANDIDATES = int(os.environ.get('SEARCH_RERANK_MAX_CANDIDATES', '50'))
+except ValueError:
+    SEARCH_RERANK_MAX_CANDIDATES = 50
+
 
 # ─── Internal Cron / Job Security ──────────────────────────────────────────
 INTERNAL_API_KEY = os.environ.get('INTERNAL_API_KEY', '')
diff --git a/pos/middleware_tenant.py b/pos/middleware_tenant.py
index f1e4935..e90b063 100644
--- a/pos/middleware_tenant.py
+++ b/pos/middleware_tenant.py
@@ -89,8 +89,10 @@ def resolve_tenant():
     g.tenant_name = None
     g.tenant_subdomain = None
 
-    # Skip for static files and health check
-    if request.path.startswith('/pos/static/') or request.path == '/pos/health':
+    # Skip for static files, health check and Prometheus metrics scrape
+    if (request.path.startswith('/pos/static/')
+            or request.path == '/pos/health'
+            or request.path == '/metrics'):
         return
 
     subdomain = _extract_subdomain()
diff --git a/pos/migrations/runner.py b/pos/migrations/runner.py
index 1e1099b..53fb709 100755
--- a/pos/migrations/runner.py
+++ b/pos/migrations/runner.py
@@ -70,6 +70,11 @@ MIGRATIONS = {
     "v4.21": "v4.21_cashier_workshop_permissions.sql",
     "v4.22": "v4.22_cashier_invoicing_permissions.sql",
     "v4.23": "v4.23_service_order_mechanic_name.sql",
+    "v4.24": "v4.24_trgm_search_indexes.sql",
+    "v4.25": "v4.25_transfer_documents.sql",
+    "v4.26": "v4.26_sales_client_uuid.sql",
+    "v4.27": "v4.27_yonke_m1.sql",
+    "v4.28": "v4.28_meli_commerce.sql",
 }
 
 
diff --git a/pos/migrations/v1.2_subdomain.sql b/pos/migrations/v1.2_subdomain.sql
index c302649..c9a5184 100644
--- a/pos/migrations/v1.2_subdomain.sql
+++ b/pos/migrations/v1.2_subdomain.sql
@@ -1,3 +1,4 @@
+-- : SKIP
 -- v1.2: Add subdomain column to tenants table (nexus_master)
 -- This migration runs against the MASTER database, not tenant databases.
 
diff --git a/pos/migrations/v1.6_marketplace.sql b/pos/migrations/v1.6_marketplace.sql
index b8e6f26..d7a4876 100644
--- a/pos/migrations/v1.6_marketplace.sql
+++ b/pos/migrations/v1.6_marketplace.sql
@@ -1,3 +1,4 @@
+-- : SKIP
 -- Marketplace orders (cross-tenant)
 -- These tables go in nexus_autoparts (master DB), not tenant DBs
 
diff --git a/pos/migrations/v3.2_db_performance.sql b/pos/migrations/v3.2_db_performance.sql
index 0a15948..a391d14 100644
--- a/pos/migrations/v3.2_db_performance.sql
+++ b/pos/migrations/v3.2_db_performance.sql
@@ -2,15 +2,20 @@
 -- Applies to: master DB (nexus_autoparts) and all tenant DBs
 
 -- ─── MASTER DB ─────────────────────────────────
+-- These indexes only exist in the master DB (nexus_autoparts). On tenant DBs
+-- (the `parts`/`warehouse_inventory` OEM tables live only in master) they are
+-- skipped via existence guards so this migration can run against tenants too.
 
--- Index for parts name lookups (used by get_part_types, shop supplies)
-CREATE INDEX IF NOT EXISTS idx_parts_name_part ON parts(name_part);
-CREATE INDEX IF NOT EXISTS idx_parts_name_part_pattern ON parts(name_part text_pattern_ops);
-
--- Partial index for warehouse_inventory stock lookups (already created in Fase 1,
--- kept here for completeness on fresh installs)
-CREATE INDEX IF NOT EXISTS idx_wi_part_stock_positive
-ON warehouse_inventory(part_id) WHERE stock_quantity > 0;
+DO $$
+BEGIN
+    IF to_regclass('public.parts') IS NOT NULL THEN
+        EXECUTE 'CREATE INDEX IF NOT EXISTS idx_parts_name_part ON parts(name_part)';
+        EXECUTE 'CREATE INDEX IF NOT EXISTS idx_parts_name_part_pattern ON parts(name_part text_pattern_ops)';
+    END IF;
+    IF to_regclass('public.warehouse_inventory') IS NOT NULL THEN
+        EXECUTE 'CREATE INDEX IF NOT EXISTS idx_wi_part_stock_positive ON warehouse_inventory(part_id) WHERE stock_quantity > 0';
+    END IF;
+END $$;
 
 -- ─── TENANT DB (run on each tenant) ────────────
 
diff --git a/pos/migrations/v3.5_whatsapp_state_machine.sql b/pos/migrations/v3.5_whatsapp_state_machine.sql
index a226827..d7b309c 100644
--- a/pos/migrations/v3.5_whatsapp_state_machine.sql
+++ b/pos/migrations/v3.5_whatsapp_state_machine.sql
@@ -10,9 +10,12 @@
 -- To apply manually on a tenant with WhatsApp tables:
 --   psql <tenant_db> -f pos/migrations/v3.5_whatsapp_state_machine.sql
 -- (Remove the ': SKIP' line above before manual execution.)
+--
+-- 2026-10-11: fixed nested dollar-quoting (the outer DO used $$ and the inner
+-- trigger function also used $$, which broke the parser). Now $do$ / $fn$.
 -- ============================================================
 
-DO $$
+DO $do$
 BEGIN
     -- 1. Extender whatsapp_sessions con estado y contexto
     IF EXISTS (SELECT 1 FROM information_schema.tables WHERE table_name = 'whatsapp_sessions') THEN
@@ -41,12 +44,12 @@ BEGIN
         CREATE INDEX IF NOT EXISTS idx_wa_cust_link_customer ON wa_customer_links(customer_id);
 
         CREATE OR REPLACE FUNCTION update_wa_link_timestamp()
-        RETURNS TRIGGER AS $$
+        RETURNS TRIGGER AS $fn$
         BEGIN
             NEW.updated_at = NOW();
             RETURN NEW;
         END;
-        $$ LANGUAGE plpgsql;
+        $fn$ LANGUAGE plpgsql;
 
         DROP TRIGGER IF EXISTS trg_wa_link_updated ON wa_customer_links;
         CREATE TRIGGER trg_wa_link_updated
@@ -115,4 +118,4 @@ BEGIN
         FROM wa_customer_links wcl
         WHERE ws.phone = wcl.phone AND ws.customer_id IS NULL;
     END IF;
-END $$;
+END $do$;
diff --git a/pos/migrations/v4.24_trgm_search_indexes.sql b/pos/migrations/v4.24_trgm_search_indexes.sql
new file mode 100644
index 0000000..e4bcf97
--- /dev/null
+++ b/pos/migrations/v4.24_trgm_search_indexes.sql
@@ -0,0 +1,18 @@
+-- v4.24: pg_trgm search indexes for fast fuzzy inventory search.
+-- The POS list endpoint uses ILIKE '%q%' on part_number/name/barcode/aliases;
+-- btree indexes cannot serve those. Trigram GIN indexes make them fast even
+-- with 150k+ SKU catalogs.
+
+CREATE EXTENSION IF NOT EXISTS pg_trgm;
+
+CREATE INDEX IF NOT EXISTS idx_inventory_part_trgm
+    ON inventory USING gin (part_number gin_trgm_ops);
+
+CREATE INDEX IF NOT EXISTS idx_inventory_name_trgm
+    ON inventory USING gin (name gin_trgm_ops);
+
+CREATE INDEX IF NOT EXISTS idx_inventory_alias_trgm
+    ON inventory_sku_aliases USING gin (sku gin_trgm_ops);
+
+ANALYZE inventory;
+ANALYZE inventory_sku_aliases;
diff --git a/pos/migrations/v4.25_transfer_documents.sql b/pos/migrations/v4.25_transfer_documents.sql
new file mode 100644
index 0000000..6281f6d
--- /dev/null
+++ b/pos/migrations/v4.25_transfer_documents.sql
@@ -0,0 +1,28 @@
+-- v4.25: transfer documents with in-transit state.
+-- Transfers become documents: draft -> sent -> received (or cancelled).
+-- Actual stock movement happens on 'receive' (origin -, destination +),
+-- so goods in transit are tracked and discrepancies are explicit.
+
+CREATE TABLE IF NOT EXISTS inventory_transfers (
+    id SERIAL PRIMARY KEY,
+    from_branch_id INTEGER NOT NULL REFERENCES branches(id),
+    to_branch_id INTEGER NOT NULL REFERENCES branches(id),
+    status VARCHAR(20) NOT NULL DEFAULT 'draft',  -- draft | sent | received | cancelled
+    notes TEXT,
+    employee_id INTEGER,
+    created_at TIMESTAMPTZ DEFAULT NOW(),
+    sent_at TIMESTAMPTZ,
+    received_at TIMESTAMPTZ
+);
+
+CREATE TABLE IF NOT EXISTS inventory_transfer_lines (
+    id SERIAL PRIMARY KEY,
+    transfer_id INTEGER NOT NULL REFERENCES inventory_transfers(id) ON DELETE CASCADE,
+    inventory_id INTEGER NOT NULL REFERENCES inventory(id),
+    quantity INTEGER NOT NULL,
+    qty_received INTEGER,
+    created_at TIMESTAMPTZ DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_transfers_status ON inventory_transfers(status);
+CREATE INDEX IF NOT EXISTS idx_transfer_lines_transfer ON inventory_transfer_lines(transfer_id);
diff --git a/pos/migrations/v4.26_sales_client_uuid.sql b/pos/migrations/v4.26_sales_client_uuid.sql
new file mode 100644
index 0000000..67bee57
--- /dev/null
+++ b/pos/migrations/v4.26_sales_client_uuid.sql
@@ -0,0 +1,4 @@
+-- v4.26: idempotencia para venta offline (client_uuid generado por el POS).
+ALTER TABLE sales ADD COLUMN IF NOT EXISTS client_uuid VARCHAR(64);
+CREATE UNIQUE INDEX IF NOT EXISTS ux_sales_client_uuid
+    ON sales (client_uuid) WHERE client_uuid IS NOT NULL;
diff --git a/pos/migrations/v4.27_yonke_m1.sql b/pos/migrations/v4.27_yonke_m1.sql
new file mode 100644
index 0000000..5f794ed
--- /dev/null
+++ b/pos/migrations/v4.27_yonke_m1.sql
@@ -0,0 +1,113 @@
+-- ═══════════════════════════════════════════════════════════════════════════
+-- v4.27 — Yonke M1: used-parts (parts-usadas) data model
+-- Additive + idempotent. Runs against tenant DBs.
+--
+-- Enables businesses that sell ONLY used parts (yonkes/deshuesaderos):
+--   * condition (nuevo/usado/reconstruido) + grade (A/B/C/D)
+--   * unique 1-of-1 pieces (is_unique_piece) with a donor vehicle
+--   * multiple photos per item (inventory_images)
+--   * ownership (propio/consigna) + consignment tables
+--   * warranty expressed in days (for used parts)
+-- ═══════════════════════════════════════════════════════════════════════════
+
+-- ─── 1. inventory: condition / donor / ownership / unique-piece columns ─────
+ALTER TABLE inventory
+    ADD COLUMN IF NOT EXISTS condition           VARCHAR(20) DEFAULT 'nuevo',
+    ADD COLUMN IF NOT EXISTS condition_grade     VARCHAR(2),
+    ADD COLUMN IF NOT EXISTS is_unique_piece     BOOLEAN     DEFAULT FALSE,
+    ADD COLUMN IF NOT EXISTS serial_number       VARCHAR(100),
+    ADD COLUMN IF NOT EXISTS donor_vin           VARCHAR(20),
+    ADD COLUMN IF NOT EXISTS donor_make          VARCHAR(60),
+    ADD COLUMN IF NOT EXISTS donor_model         VARCHAR(60),
+    ADD COLUMN IF NOT EXISTS donor_year          INTEGER,
+    ADD COLUMN IF NOT EXISTS donor_mileage_km    INTEGER,
+    ADD COLUMN IF NOT EXISTS ownership           VARCHAR(20) DEFAULT 'propio',
+    ADD COLUMN IF NOT EXISTS acquisition_cost    NUMERIC(12,2);
+
+-- CHECK constraints (guarded so re-runs are safe)
+DO $$
+BEGIN
+    IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'inventory_condition_chk') THEN
+        ALTER TABLE inventory ADD CONSTRAINT inventory_condition_chk
+            CHECK (condition IS NULL OR condition IN ('nuevo','usado','reconstruido'));
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'inventory_ownership_chk') THEN
+        ALTER TABLE inventory ADD CONSTRAINT inventory_ownership_chk
+            CHECK (ownership IS NULL OR ownership IN ('propio','consigna'));
+    END IF;
+    IF NOT EXISTS (SELECT 1 FROM pg_constraint WHERE conname = 'inventory_grade_chk') THEN
+        ALTER TABLE inventory ADD CONSTRAINT inventory_grade_chk
+            CHECK (condition_grade IS NULL OR condition_grade IN ('A','B','C','D'));
+    END IF;
+END $$;
+
+CREATE INDEX IF NOT EXISTS idx_inventory_condition
+    ON inventory(condition);
+CREATE INDEX IF NOT EXISTS idx_inventory_donor_vin
+    ON inventory(donor_vin) WHERE donor_vin IS NOT NULL;
+CREATE INDEX IF NOT EXISTS idx_inventory_donor_vehicle
+    ON inventory(donor_make, donor_model, donor_year) WHERE is_unique_piece;
+
+-- ─── 2. Relax part_number NOT NULL so codeless unique pieces can exist ──────
+-- A standard UNIQUE index in PostgreSQL already treats NULLs as distinct, so
+-- the existing full unique index (idx_inventory_part_unique) keeps enforcing
+-- uniqueness on non-null codes while allowing many NULLs. We deliberately do
+-- NOT turn it into a partial index: that would break `ON CONFLICT (part_number)`
+-- used by the importers.
+ALTER TABLE inventory ALTER COLUMN part_number DROP NOT NULL;
+
+-- ─── 3. inventory_images: multiple photos per item ─────────────────────────
+CREATE TABLE IF NOT EXISTS inventory_images (
+    id            SERIAL PRIMARY KEY,
+    inventory_id  INTEGER NOT NULL REFERENCES inventory(id) ON DELETE CASCADE,
+    url           VARCHAR(500) NOT NULL,
+    sort_order    INTEGER NOT NULL DEFAULT 0,
+    is_primary    BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at    TIMESTAMPTZ DEFAULT NOW()
+);
+CREATE INDEX IF NOT EXISTS idx_inventory_images_inv
+    ON inventory_images(inventory_id, sort_order);
+CREATE UNIQUE INDEX IF NOT EXISTS idx_inventory_images_primary
+    ON inventory_images(inventory_id) WHERE is_primary;
+
+-- Migrate the existing single image_url into the new table (first photo).
+INSERT INTO inventory_images (inventory_id, url, sort_order, is_primary)
+SELECT i.id, i.image_url, 0, TRUE
+FROM inventory i
+WHERE i.image_url IS NOT NULL AND i.image_url <> ''
+  AND NOT EXISTS (SELECT 1 FROM inventory_images ii WHERE ii.inventory_id = i.id);
+
+-- ─── 4. warranties: express warranty in days (used parts) ──────────────────
+DO $$
+BEGIN
+    IF to_regclass('public.warranties') IS NOT NULL THEN
+        EXECUTE 'ALTER TABLE warranties ADD COLUMN IF NOT EXISTS warranty_days INTEGER';
+    END IF;
+END $$;
+
+-- ─── 5. Consignments (third-party parts held for sale) ─────────────────────
+CREATE TABLE IF NOT EXISTS consignments (
+    id               SERIAL PRIMARY KEY,
+    consignor_name   VARCHAR(200) NOT NULL,
+    consignor_rfc    VARCHAR(13),
+    consignor_phone  VARCHAR(30),
+    commission_pct   NUMERIC(5,2) DEFAULT 0,
+    status           VARCHAR(20) NOT NULL DEFAULT 'open',   -- open | closed | settled
+    notes            TEXT,
+    created_at       TIMESTAMPTZ DEFAULT NOW(),
+    updated_at       TIMESTAMPTZ DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS consignment_items (
+    id                SERIAL PRIMARY KEY,
+    consignment_id    INTEGER NOT NULL REFERENCES consignments(id) ON DELETE CASCADE,
+    inventory_id      INTEGER REFERENCES inventory(id) ON DELETE SET NULL,
+    agreed_price      NUMERIC(12,2),
+    commission_amount NUMERIC(12,2),
+    status            VARCHAR(20) NOT NULL DEFAULT 'in_stock',  -- in_stock | sold | returned | settled
+    created_at        TIMESTAMPTZ DEFAULT NOW()
+);
+CREATE INDEX IF NOT EXISTS idx_consignment_items_cons
+    ON consignment_items(consignment_id);
+CREATE INDEX IF NOT EXISTS idx_consignment_items_inv
+    ON consignment_items(inventory_id);
diff --git a/pos/migrations/v4.28_meli_commerce.sql b/pos/migrations/v4.28_meli_commerce.sql
new file mode 100644
index 0000000..1aec2e8
--- /dev/null
+++ b/pos/migrations/v4.28_meli_commerce.sql
@@ -0,0 +1,56 @@
+-- ═══════════════════════════════════════════════════════════════════════════
+-- v4.28 — MeLi commerce: listing economics, inventory-match metadata
+-- Additive + idempotent. Runs against tenant DBs.
+--
+-- Goal: make MercadoLibre listings sellable end-to-end by persisting, per
+-- listing, the data that today is only computed transiently:
+--   * how the ML item was linked to local inventory (backfill audit)
+--   * the ML commission and the resulting net price / margin
+--   * the cost at the moment of publishing (so margin stays comparable)
+--   * the listing type and the description actually published
+--
+-- Also normalizes marketplace_questions.status to lowercase: ML returns
+-- "UNANSWERED"/"ANSWERED" and the auto-answer/SLA queries filter lowercase.
+-- ═══════════════════════════════════════════════════════════════════════════
+
+-- ─── 1. marketplace_listings: match metadata + economics ────────────────────
+ALTER TABLE marketplace_listings
+    ADD COLUMN IF NOT EXISTS listing_type_id       VARCHAR(30),
+    ADD COLUMN IF NOT EXISTS inventory_match_source VARCHAR(40),
+    ADD COLUMN IF NOT EXISTS inventory_matched_at  TIMESTAMPTZ,
+    ADD COLUMN IF NOT EXISTS meli_fee              NUMERIC(12,2),
+    ADD COLUMN IF NOT EXISTS meli_fee_pct          NUMERIC(6,2),
+    ADD COLUMN IF NOT EXISTS meli_net_price        NUMERIC(12,2),
+    ADD COLUMN IF NOT EXISTS meli_fee_source       VARCHAR(20),
+    ADD COLUMN IF NOT EXISTS cost_at_publish       NUMERIC(12,2),
+    ADD COLUMN IF NOT EXISTS margin_pct            NUMERIC(8,2),
+    ADD COLUMN IF NOT EXISTS meli_description      TEXT,
+    ADD COLUMN IF NOT EXISTS economics_updated_at  TIMESTAMPTZ;
+
+-- Fast lookup of the listings that still need an inventory match (backfill).
+CREATE INDEX IF NOT EXISTS idx_marketplace_listings_unmapped
+    ON marketplace_listings(channel)
+    WHERE inventory_id IS NULL;
+
+-- ─── 2. marketplace_questions: status normalization ─────────────────────────
+-- ML's API returns "UNANSWERED" / "ANSWERED"; the service compares lowercase.
+-- Normalize historical rows so auto-answer and the SLA job see them.
+UPDATE marketplace_questions
+SET status = LOWER(status), updated_at = NOW()
+WHERE status IS NOT NULL AND status <> LOWER(status);
+
+-- Index for the SLA sweep: oldest unanswered questions first.
+CREATE INDEX IF NOT EXISTS idx_marketplace_questions_status_date
+    ON marketplace_questions(status, question_date);
+
+-- ─── 3. Allow several active ML listings per local product ──────────────────
+-- The original v3.4 unique index assumed one ML listing per inventory item.
+-- Real MeLi catalogs routinely publish several listings (different fitments /
+-- titles) that share the same internal part number; the inventory backfill
+-- must be able to link them all, and order conversion maps each order item by
+-- external_item_id. Replace the uniqueness with a plain lookup index — the
+-- publish path now upserts by (inventory_id, channel) explicitly.
+DROP INDEX IF EXISTS idx_marketplace_listings_unique;
+CREATE INDEX IF NOT EXISTS idx_marketplace_listings_inv_channel
+    ON marketplace_listings(inventory_id, channel) WHERE is_active = true;
+
diff --git a/pos/seed/sat_accounts.sql b/pos/seed/sat_accounts.sql
index a16a6d9..1ec5be8 100644
--- a/pos/seed/sat_accounts.sql
+++ b/pos/seed/sat_accounts.sql
@@ -29,6 +29,8 @@ INSERT INTO accounts (code, name, parent_id, type, sat_code, is_system, is_activ
 VALUES ('220', 'IVA Trasladado', (SELECT id FROM accounts WHERE code = '200'), 'pasivo', '220', true, true);
 INSERT INTO accounts (code, name, parent_id, type, sat_code, is_system, is_active)
 VALUES ('230', 'ISR por Pagar', (SELECT id FROM accounts WHERE code = '200'), 'pasivo', '230', true, true);
+INSERT INTO accounts (code, name, parent_id, type, sat_code, is_system, is_active)
+VALUES ('240', 'Anticipos de Clientes', (SELECT id FROM accounts WHERE code = '200'), 'pasivo', '240', true, true);
 
 -- ============================================================
 -- CAPITAL (300)
diff --git a/pos/services/accounting_engine.py b/pos/services/accounting_engine.py
index c02dfa9..706083b 100644
--- a/pos/services/accounting_engine.py
+++ b/pos/services/accounting_engine.py
@@ -13,6 +13,7 @@ Account codes (from SAT seed):
     140 = IVA Acreditable
     210 = Proveedores
     220 = IVA Trasladado
+    240 = Anticipos de Clientes (created on demand for layaways)
     410 = Ventas
     420 = Devoluciones sobre Ventas
     510 = Costo de Mercancia Vendida
@@ -20,10 +21,13 @@ Account codes (from SAT seed):
 All functions receive a psycopg2 connection (caller controls commit).
 """
 
+import logging
 from datetime import date
 from decimal import Decimal, ROUND_HALF_UP
 from flask import g
 
+logger = logging.getLogger('accounting')
+
 
 def _to_dec(val):
     """Convert a value to Decimal for precise arithmetic."""
@@ -57,6 +61,48 @@ def _get_account_ids(cur, codes):
     return rows
 
 
+def _ensure_account(cur, code, name, parent_code, acc_type):
+    """Return the account ID for a code, creating it if it is missing.
+
+    Tenants seeded before an auxiliary account (e.g. customer advances) was
+    introduced do not have it in their chart of accounts, so it is created
+    on first use. Creation is idempotent (accounts.code is unique).
+
+    Args:
+        cur: psycopg2 cursor
+        code: account code to look up / create
+        name: account name used when creating
+        parent_code: code of the parent account (None for roots)
+        acc_type: 'activo' | 'pasivo' | 'capital' | 'ingreso' | 'costo' | 'gasto'
+
+    Returns:
+        int: account ID
+    """
+    cur.execute("SELECT id FROM accounts WHERE code = %s", (code,))
+    row = cur.fetchone()
+    if row:
+        return row[0]
+
+    parent_id = None
+    if parent_code:
+        cur.execute("SELECT id FROM accounts WHERE code = %s", (parent_code,))
+        parent = cur.fetchone()
+        parent_id = parent[0] if parent else None
+
+    cur.execute("""
+        INSERT INTO accounts (code, name, parent_id, type, sat_code, is_system, is_active)
+        VALUES (%s, %s, %s, %s, %s, false, true)
+        ON CONFLICT (code) DO NOTHING
+        RETURNING id
+    """, (code, name, parent_id, acc_type, code))
+    row = cur.fetchone()
+    if row:
+        return row[0]
+
+    cur.execute("SELECT id FROM accounts WHERE code = %s", (code,))
+    return cur.fetchone()[0]
+
+
 def get_next_entry_number(conn):
     """Get the next sequential journal entry number.
 
@@ -576,6 +622,434 @@ def record_cancellation_entry(conn, sale):
     return entry_id
 
 
+def record_return_entry(conn, ret):
+    """Generate the journal entry for a customer return (devolucion).
+
+    Reverses the revenue side of the original sale and puts the returned
+    goods back into inventory:
+        Debit  420 Devoluciones sobre Ventas   = net (after discount, before tax)
+        Debit  220 IVA Trasladado              = tax
+        Credit 110/111/120 (refund account)    = net + tax
+        Debit  130 Inventarios                 = cost
+        Credit 510 Costo de Mercancia Vendida  = cost
+
+    The net/tax/cost split is read from return_items joined with sale_items,
+    so callers only need the return id and the original sale.
+
+    Args:
+        conn: psycopg2 connection to tenant DB
+        ret: dict with keys:
+            id: return id
+            sale_id: original sale id (optional)
+            sale_type: 'cash' | 'credit' (optional, looked up from sales)
+            payment_method: original payment method (optional, looked up)
+            total: refund total (used only when the item detail is missing)
+
+    Returns:
+        int: journal entry ID
+    """
+    cur = conn.cursor()
+    entry_date = date.today()
+    _check_period_open(cur, entry_date)
+
+    entry_number = get_next_entry_number(conn)
+    return_id = ret['id']
+    sale_id = ret.get('sale_id')
+    sale_type = ret.get('sale_type')
+    payment_method = ret.get('payment_method')
+
+    cur.execute("""
+        SELECT si.unit_price, si.discount_pct, si.tax_rate, si.unit_cost, ri.quantity
+        FROM return_items ri
+        JOIN sale_items si ON si.id = ri.sale_item_id
+        WHERE ri.return_id = %s
+    """, (return_id,))
+    item_rows = cur.fetchall()
+
+    if sale_id and (sale_type is None or payment_method is None):
+        cur.execute("SELECT sale_type, payment_method FROM sales WHERE id = %s", (sale_id,))
+        sale_row = cur.fetchone()
+        if sale_row:
+            sale_type = sale_type or sale_row[0]
+            payment_method = payment_method or sale_row[1]
+
+    net = Decimal('0')
+    tax = Decimal('0')
+    cost_total = Decimal('0')
+    for unit_price, discount_pct, tax_rate, unit_cost, quantity in item_rows:
+        qty = int(quantity or 0)
+        line_gross = (_to_dec(unit_price) * qty).quantize(TWO, ROUND_HALF_UP)
+        line_net = (line_gross * (Decimal('1') - _to_dec(discount_pct) / Decimal('100'))
+                    ).quantize(TWO, ROUND_HALF_UP)
+        net += line_net
+        tax += (line_net * _to_dec(tax_rate)).quantize(TWO, ROUND_HALF_UP)
+        cost_total += (_to_dec(unit_cost) * qty).quantize(TWO, ROUND_HALF_UP)
+
+    if net == 0 and tax == 0:
+        # No item detail available: fall back to the refund total (no IVA split)
+        net = _to_dec(ret.get('total', 0))
+
+    total = (net + tax).quantize(TWO, ROUND_HALF_UP)
+
+    accounts = _get_account_ids(cur, ['110', '111', '120', '130', '220', '420', '510'])
+
+    if sale_type == 'credit':
+        refund_account_id = accounts['120']  # Clientes
+        refund_desc = f'Clientes - Devolucion #{return_id}'
+    elif payment_method in ('transferencia', 'tarjeta'):
+        refund_account_id = accounts['111']  # Bancos
+        refund_desc = f'Bancos - Devolucion #{return_id}'
+    else:
+        refund_account_id = accounts['110']  # Caja
+        refund_desc = f'Caja - Devolucion #{return_id}'
+
+    lines = [
+        {
+            'account_id': accounts['420'],
+            'debit': float(net.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': f'Devoluciones sobre ventas - Devolucion #{return_id}',
+        },
+        {
+            'account_id': refund_account_id,
+            'debit': 0,
+            'credit': float(total.quantize(TWO, ROUND_HALF_UP)),
+            'description': refund_desc,
+        },
+    ]
+
+    if tax > 0:
+        lines.append({
+            'account_id': accounts['220'],
+            'debit': float(tax.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': f'IVA Trasladado - Devolucion #{return_id}',
+        })
+
+    if cost_total > 0:
+        lines.append({
+            'account_id': accounts['130'],
+            'debit': float(cost_total.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': f'Inventarios - Devolucion #{return_id}',
+        })
+        lines.append({
+            'account_id': accounts['510'],
+            'debit': 0,
+            'credit': float(cost_total.quantize(TWO, ROUND_HALF_UP)),
+            'description': f'Costo mercancia - Devolucion #{return_id}',
+        })
+
+    entry_id = _create_entry(
+        cur, entry_number, entry_date, 'egreso',
+        f'Devolucion #{return_id}' + (f' - Venta #{sale_id}' if sale_id else ''),
+        'return', return_id, lines
+    )
+
+    cur.close()
+    return entry_id
+
+
+def record_layaway_entry(conn, layaway):
+    """Generate the journal entry for a layaway (apartado) payment.
+
+    A layaway deposit is money held on behalf of the customer, not revenue,
+    so it is recorded as a customer advance:
+        Debit  110 Caja (or 111 Bancos)   = amount
+        Credit 240 Anticipos de Clientes  = amount
+
+    Args:
+        conn: psycopg2 connection
+        layaway: dict with keys:
+            id: layaway id
+            amount: float
+            payment_method: 'efectivo' | 'transferencia' | 'tarjeta'
+
+    Returns:
+        int or None: journal entry ID (None when amount <= 0)
+    """
+    amount = _to_dec(layaway.get('amount', 0))
+    if amount <= 0:
+        return None
+
+    cur = conn.cursor()
+    entry_date = date.today()
+    _check_period_open(cur, entry_date)
+
+    entry_number = get_next_entry_number(conn)
+    layaway_id = layaway['id']
+    method = layaway.get('payment_method', 'efectivo')
+
+    accounts = _get_account_ids(cur, ['110', '111'])
+    advance_account = _ensure_account(cur, '240', 'Anticipos de Clientes', '200', 'pasivo')
+
+    if method in ('transferencia', 'tarjeta'):
+        debit_account = accounts['111']
+        debit_desc = f'Bancos - Apartado #{layaway_id}'
+    else:
+        debit_account = accounts['110']
+        debit_desc = f'Caja - Apartado #{layaway_id}'
+
+    lines = [
+        {
+            'account_id': debit_account,
+            'debit': float(amount.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': debit_desc,
+        },
+        {
+            'account_id': advance_account,
+            'debit': 0,
+            'credit': float(amount.quantize(TWO, ROUND_HALF_UP)),
+            'description': f'Anticipos de clientes - Apartado #{layaway_id}',
+        },
+    ]
+
+    entry_id = _create_entry(
+        cur, entry_number, entry_date, 'ingreso',
+        f'Apartado #{layaway_id} - anticipo ({method})',
+        'layaway', layaway_id, lines
+    )
+
+    cur.close()
+    return entry_id
+
+
+def record_layaway_conversion_entry(conn, sale):
+    """Generate the journal entry for a fully paid layaway converted to a sale.
+
+    Applies the advances collected during the layaway and recognizes the
+    revenue, trasladado IVA and cost of goods:
+        Debit  240 Anticipos de Clientes       = total
+        Credit 410 Ventas                      = subtotal
+        Credit 220 IVA Trasladado              = tax_total
+        Debit  510 Costo de Mercancia Vendida  = cost
+        Credit 130 Inventarios                 = cost
+
+    Args:
+        conn: psycopg2 connection
+        sale: dict with keys:
+            id: sale id created for the layaway
+            layaway_id: layaway id (optional)
+            subtotal: float (net, after discounts, before tax)
+            tax_total: float
+            total: float (subtotal + tax_total)
+            items: [{unit_cost, quantity}] (optional; read from DB when absent)
+
+    Returns:
+        int: journal entry ID
+    """
+    cur = conn.cursor()
+    entry_date = date.today()
+    _check_period_open(cur, entry_date)
+
+    entry_number = get_next_entry_number(conn)
+    sale_id = sale['id']
+    layaway_id = sale.get('layaway_id')
+    subtotal = _to_dec(sale['subtotal'])
+    tax_total = _to_dec(sale['tax_total'])
+    total = _to_dec(sale['total'])
+
+    items = sale.get('items')
+    if not items:
+        cur.execute("SELECT unit_cost, quantity FROM sale_items WHERE sale_id = %s", (sale_id,))
+        items = [{'unit_cost': r[0], 'quantity': r[1]} for r in cur.fetchall()]
+
+    cost_total = Decimal('0')
+    for item in items:
+        cost_total += (_to_dec(item.get('unit_cost', 0)) * int(item.get('quantity', 1))
+                       ).quantize(TWO, ROUND_HALF_UP)
+
+    accounts = _get_account_ids(cur, ['130', '220', '410', '510'])
+    advance_account = _ensure_account(cur, '240', 'Anticipos de Clientes', '200', 'pasivo')
+
+    lines = [
+        {
+            'account_id': advance_account,
+            'debit': float(total.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': f'Anticipos de clientes - Apartado #{layaway_id}',
+        },
+        {
+            'account_id': accounts['410'],
+            'debit': 0,
+            'credit': float(subtotal.quantize(TWO, ROUND_HALF_UP)),
+            'description': f'Ventas - Apartado #{layaway_id} (venta #{sale_id})',
+        },
+        {
+            'account_id': accounts['220'],
+            'debit': 0,
+            'credit': float(tax_total.quantize(TWO, ROUND_HALF_UP)),
+            'description': f'IVA Trasladado - Apartado #{layaway_id} (venta #{sale_id})',
+        },
+    ]
+
+    if cost_total > 0:
+        lines.append({
+            'account_id': accounts['510'],
+            'debit': float(cost_total.quantize(TWO, ROUND_HALF_UP)),
+            'credit': 0,
+            'description': f'Costo mercancia - Apartado #{layaway_id}',
+        })
+        lines.append({
+            'account_id': accounts['130'],
+            'debit': 0,
+            'credit': float(cost_total.quantize(TWO, ROUND_HALF_UP)),
+            'description': f'Inventarios - Apartado #{layaway_id}',
+        })
+
+    entry_id = _create_entry(
+        cur, entry_number, entry_date, 'ingreso',
+        f'Apartado #{layaway_id} - venta #{sale_id}',
+        'layaway', layaway_id, lines
+    )
+
+    cur.close()
+    return entry_id
+
+
+def ensure_supplier_payments_table(conn):
+    """Create the supplier_payments table if it does not exist (idempotent).
+
+    The table links each payment to the purchase order (cuentas por pagar)
+    it settles. It is created on first use so tenants that predate it work
+    without a manual migration.
+    """
+    cur = conn.cursor()
+    cur.execute("""
+        CREATE TABLE IF NOT EXISTS supplier_payments (
+            id SERIAL PRIMARY KEY,
+            po_id INTEGER REFERENCES purchase_orders(id) ON DELETE CASCADE,
+            supplier_id INTEGER REFERENCES suppliers(id) ON DELETE SET NULL,
+            amount NUMERIC(12,2) NOT NULL,
+            payment_method VARCHAR(20) NOT NULL DEFAULT 'efectivo',
+            reference VARCHAR(100),
+            employee_id INTEGER REFERENCES employees(id),
+            created_at TIMESTAMPTZ DEFAULT NOW()
+        )
+    """)
+    cur.execute(
+        "CREATE INDEX IF NOT EXISTS idx_supplier_payments_po ON supplier_payments(po_id)"
+    )
+    cur.close()
+
+
+def record_supplier_payment_entry(conn, payment):
+    """Register a payment to a supplier against a purchase order (CxP).
+
+        Debit  210 Proveedores        = amount
+        Credit 110 Caja / 111 Bancos  = amount
+
+    The payment is stored in supplier_payments (created on first use) and the
+    purchase order is marked 'paid' once the accumulated payments cover its
+    total. This is what feeds the 'paid' column of the accounts-payable aging.
+
+    Args:
+        conn: psycopg2 connection
+        payment: dict with keys:
+            po_id: purchase order id (required)
+            amount: float (required, in the PO currency)
+            payment_method: 'efectivo' | 'transferencia' | 'tarjeta'
+            reference: str (optional)
+
+    Returns:
+        dict: {entry_id, payment_id, po_id, status, paid, balance}
+    """
+    cur = conn.cursor()
+    po_id = payment.get('po_id')
+    amount = _to_dec(payment.get('amount', 0))
+    if not po_id:
+        raise ValueError("po_id is required")
+    if amount <= 0:
+        raise ValueError("amount must be greater than 0")
+
+    cur.execute("""
+        SELECT supplier_id, total, status FROM purchase_orders WHERE id = %s FOR UPDATE
+    """, (po_id,))
+    row = cur.fetchone()
+    if not row:
+        raise ValueError(f"Purchase order {po_id} not found")
+    supplier_id, po_total, po_status = row
+    if po_status == 'cancelled':
+        raise ValueError("Cannot pay a cancelled purchase order")
+
+    ensure_supplier_payments_table(conn)
+    cur.execute("SELECT COALESCE(SUM(amount), 0) FROM supplier_payments WHERE po_id = %s", (po_id,))
+    already_paid = _to_dec(cur.fetchone()[0])
+
+    po_total = _to_dec(po_total)
+    paid_total = already_paid + amount
+    if paid_total > po_total:
+        raise ValueError(
+            f"Payment ${amount} exceeds balance ${(po_total - already_paid).quantize(TWO)} "
+            f"of purchase order {po_id}"
+        )
+
+    entry_date = date.today()
+    _check_period_open(cur, entry_date)
+
+    try:
+        created_by = getattr(g, 'employee_id', None)
+    except RuntimeError:
+        created_by = None
+
+    cur.execute("""
+        INSERT INTO supplier_payments
+            (po_id, supplier_id, amount, payment_method, reference, employee_id)
+        VALUES (%s, %s, %s, %s, %s, %s)
+        RETURNING id
+    """, (
+        po_id, supplier_id, float(amount),
+        payment.get('payment_method', 'efectivo'),
+        payment.get('reference'), created_by
+    ))
+    payment_id = cur.fetchone()[0]
+
+    accounts = _get_account_ids(cur, ['110', '111', '210'])
+    method = payment.get('payment_method', 'efectivo')
+    if method in ('transferencia', 'tarjeta'):
+        credit_account = accounts['111']
+        credit_desc = f'Bancos - Pago a proveedor OC #{po_id}'
+    else:
+        credit_account = accounts['110']
+        credit_desc = f'Caja - Pago a proveedor OC #{po_id}'
+
+    entry_number = get_next_entry_number(conn)
+    entry_id = _create_entry(
+        cur, entry_number, entry_date, 'egreso',
+        f'Pago a proveedor - OC #{po_id}',
+        'purchase', po_id,
+        [
+            {
+                'account_id': accounts['210'],
+                'debit': float(amount.quantize(TWO, ROUND_HALF_UP)),
+                'credit': 0,
+                'description': f'Proveedores - Pago OC #{po_id}',
+            },
+            {
+                'account_id': credit_account,
+                'debit': 0,
+                'credit': float(amount.quantize(TWO, ROUND_HALF_UP)),
+                'description': credit_desc,
+            },
+        ]
+    )
+
+    new_status = 'paid' if paid_total >= po_total else po_status
+    if new_status != po_status:
+        cur.execute("UPDATE purchase_orders SET status = %s WHERE id = %s", (new_status, po_id))
+
+    cur.close()
+    return {
+        'entry_id': entry_id,
+        'payment_id': payment_id,
+        'po_id': po_id,
+        'status': new_status,
+        'paid': float(paid_total.quantize(TWO, ROUND_HALF_UP)),
+        'balance': float((po_total - paid_total).quantize(TWO, ROUND_HALF_UP)),
+    }
+
+
 def create_manual_entry(conn, entry_data):
     """Create a manual journal entry (type='diario').
 
diff --git a/pos/services/ai_chat.py b/pos/services/ai_chat.py
index 64df9cd..a89e8db 100644
--- a/pos/services/ai_chat.py
+++ b/pos/services/ai_chat.py
@@ -3,8 +3,17 @@
 
 import requests
 import json
-from config import OPENROUTER_API_KEY, HERMES_API_URL, HERMES_API_KEY
-from config import QWEN_API_URL, QWEN_API_KEY, QWEN_MODEL
+import os as _os
+try:  # config del POS; con sys.path del dashboard puede resolver el config raíz
+    from config import OPENROUTER_API_KEY, HERMES_API_URL, HERMES_API_KEY
+    from config import QWEN_API_URL, QWEN_API_KEY, QWEN_MODEL
+except ImportError:
+    OPENROUTER_API_KEY = _os.environ.get('OPENROUTER_API_KEY', '')
+    HERMES_API_URL = _os.environ.get('HERMES_API_URL', '')
+    HERMES_API_KEY = _os.environ.get('HERMES_API_KEY', '')
+    QWEN_API_URL = _os.environ.get('QWEN_API_URL', '')
+    QWEN_API_KEY = _os.environ.get('QWEN_API_KEY', '')
+    QWEN_MODEL = _os.environ.get('QWEN_MODEL', 'qwen3.6')
 
 OPENROUTER_URL = "https://openrouter.ai/api/v1/chat/completions"
 HERMES_ENABLED = bool(HERMES_API_KEY and HERMES_API_URL)
@@ -394,7 +403,7 @@ def classify_part(part_number):
     
     for url, key, model_id in backends:
         _validate_model(model_id)
-        result = _post_chat_completion(url, key, model_id, messages, max_tokens=300, temperature=0.2, timeout=15)
+        result = _post_chat_completion(url, key, model_id, messages, max_tokens=800, temperature=0.2, timeout=70)
         if result is None:
             continue
         content = result["content"]
@@ -543,7 +552,7 @@ def chat_cache_clear():
     _RESPONSE_CACHE.clear()
 
 
-def chat(user_message, conversation_history=None, inventory_context=None):
+def chat(user_message, conversation_history=None, inventory_context=None, persona=None):
     """Send a message to the AI and get a response with search suggestions.
 
     Caches responses for repeated identical questions (subject to bypass
@@ -553,6 +562,7 @@ def chat(user_message, conversation_history=None, inventory_context=None):
         user_message: The user's chat message.
         conversation_history: Previous messages in the conversation.
         inventory_context: Optional inventory summary string to inject into the system prompt.
+        persona: Optional persona intro (first line of system prompt) for tenant branding.
     """
     # Cache lookup — only when there's no conversation history (stateless)
     cache_key = None
@@ -564,6 +574,9 @@ def chat(user_message, conversation_history=None, inventory_context=None):
             return cached
 
     system_content = SYSTEM_PROMPT
+    if persona:
+        # Replace the hardcoded first line (persona de marca por tenant)
+        system_content = persona + "\n" + system_content.split("\n", 1)[1]
     if inventory_context:
         system_content = SYSTEM_PROMPT + "\n\n" + inventory_context
 
diff --git a/pos/services/anomaly_detector.py b/pos/services/anomaly_detector.py
new file mode 100644
index 0000000..0feff4b
--- /dev/null
+++ b/pos/services/anomaly_detector.py
@@ -0,0 +1,357 @@
+"""Business anomaly detection (A5): discounts, below-cost sales, cancellations
+and off-hours activity.
+
+Works on the tenant DB tables ``sale_items`` (discount_pct, unit_price,
+unit_cost), ``sales`` (hour, employee, total, status) and ``audit_log``
+(SALE / CANCEL).  Everything is computed with a robust z-score (median + MAD)
+so a handful of extreme tickets cannot drag the baseline.
+
+Cold start is explicit: statistical rules only fire once there are at least
+``min_samples`` observations in the window.  The hard rules (a sale below its
+recorded cost) fire regardless, because they do not need a baseline — but
+``unit_cost`` of 0/NULL is treated as "unknown" and never flagged.
+
+Public API:
+    detect_anomalies(conn, days=90, min_samples=5, z_threshold=3.5) -> dict
+"""
+
+import os
+from datetime import datetime, timezone
+
+import numpy as np
+
+DEFAULT_WINDOW_DAYS = 90
+DEFAULT_MIN_SAMPLES = 5
+DEFAULT_Z = 3.5
+
+# Local business hours (in BUSINESS_TZ). Sales outside are "off-hours".
+BUSINESS_TZ = os.environ.get('ANOMALY_TZ', 'America/Mexico_City')
+OFF_HOURS_START = int(os.environ.get('ANOMALY_OFF_HOURS_START', '7'))
+OFF_HOURS_END = int(os.environ.get('ANOMALY_OFF_HOURS_END', '21'))
+
+# Minimum repeated cancellations before we raise a flag (cold-start guard).
+MIN_CANCELLATIONS = int(os.environ.get('ANOMALY_MIN_CANCELLATIONS', '3'))
+CANCEL_RATE_THRESHOLD = float(os.environ.get('ANOMALY_CANCEL_RATE', '0.25'))
+
+# A discount must be at least this high (percent points) to be worth flagging;
+# keeps the detector from calling a 2% discount "anomalous" in a cash-register
+# that normally discounts 0%.
+DISCOUNT_ALERT_MIN = float(os.environ.get('ANOMALY_DISCOUNT_MIN', '15'))
+
+# Off-hours needs at least this many tickets before it is reported, so a
+# single late-night sale does not raise a flag.
+OFF_HOURS_MIN = int(os.environ.get('ANOMALY_OFF_HOURS_MIN', '2'))
+
+SEVERITY_POINTS = {'critical': 40, 'high': 25, 'medium': 15, 'low': 8}
+
+
+def _robust_stats(values):
+    """Return (median, scale) robust stats, or (None, None) for empty input.
+
+    Scale is the MAD when it is non-zero. When most values are identical
+    (MAD == 0 — very common with discounts, where the baseline is 0%), it
+    falls back to a scaled mean absolute deviation so a clear outlier is
+    still measurable instead of yielding a division by zero.
+    """
+    arr = np.asarray(values, dtype=float)
+    if arr.size == 0:
+        return None, None
+    med = float(np.median(arr))
+    mad = float(np.median(np.abs(arr - med)))
+    if mad > 1e-9:
+        return med, mad
+    meanad = float(np.mean(np.abs(arr - med)))
+    if meanad > 1e-9:
+        return med, meanad * 1.2533
+    return med, 0.0
+
+
+def _robust_z(value, med, scale):
+    """Robust z-score (0.6745 * (x - med) / scale), None if scale == 0."""
+    if med is None or scale is None or scale <= 1e-9:
+        return None
+    return 0.6745 * (float(value) - med) / scale
+
+
+def _is_off_hours(local_hour):
+    if local_hour is None:
+        return False
+    return local_hour < OFF_HOURS_START or local_hour > OFF_HOURS_END
+
+
+def _anomaly(kind, severity, detail, metric=None, sample=None):
+    return {
+        'type': kind,
+        'severity': severity,
+        'detail': detail,
+        'metric': metric,
+        'sample_size': sample,
+    }
+
+
+def _load_items(cur, days):
+    """Sale items in the window, joined with their sale/employee/hour."""
+    cur.execute("""
+        SELECT si.sale_id, si.inventory_id, si.part_number, si.name,
+               si.quantity, si.unit_price, si.unit_cost, si.discount_pct,
+               s.employee_id, COALESCE(e.name, 'Empleado ' || s.employee_id),
+               EXTRACT(HOUR FROM (s.created_at AT TIME ZONE %s))::int AS local_hour
+        FROM sale_items si
+        JOIN sales s ON s.id = si.sale_id
+        LEFT JOIN employees e ON e.id = s.employee_id
+        WHERE s.created_at >= NOW() - make_interval(days => %s)
+    """, (BUSINESS_TZ, days))
+    return cur.fetchall()
+
+
+def _load_cancellations(cur, days):
+    """Cancelled-sale counts per employee (sales.status + audit_log CANCEL)."""
+    cur.execute("""
+        SELECT s.employee_id, COALESCE(e.name, 'Empleado ' || s.employee_id), COUNT(*)
+        FROM sales s
+        LEFT JOIN employees e ON e.id = s.employee_id
+        WHERE s.status = 'cancelled'
+          AND s.created_at >= NOW() - make_interval(days => %s)
+        GROUP BY 1, 2
+    """, (days,))
+    by_sales = {r[0]: (r[1], r[2]) for r in cur.fetchall()}
+
+    try:
+        cur.execute("""
+            SELECT employee_id, COUNT(*)
+            FROM audit_log
+            WHERE action ILIKE '%%CANCEL%%'
+              AND created_at >= NOW() - make_interval(days => %s)
+            GROUP BY 1
+        """, (days,))
+        for emp_id, cnt in cur.fetchall():
+            name, prev = by_sales.get(emp_id, (None, 0))
+            by_sales[emp_id] = (name or f'Empleado {emp_id}', max(prev, cnt))
+    except Exception:
+        cur.connection.rollback()
+    return by_sales
+
+
+def _load_sale_counts(cur, days):
+    """Total sales count per employee in the window (cancel-rate denominator)."""
+    cur.execute("""
+        SELECT employee_id, COUNT(*)
+        FROM sales
+        WHERE created_at >= NOW() - make_interval(days => %s)
+        GROUP BY 1
+    """, (days,))
+    return {r[0]: r[1] for r in cur.fetchall()}
+
+
+def detect_anomalies(conn, days=DEFAULT_WINDOW_DAYS, min_samples=DEFAULT_MIN_SAMPLES,
+                     z_threshold=DEFAULT_Z, limit=50):
+    """Scan a tenant for business anomalies.
+
+    Returns a dict with per-employee and per-SKU findings, plus a summary and
+    a ``cold_start`` flag (True when there is not enough data for statistical
+    rules — only hard rules are reported then).
+    """
+    days = max(1, int(days))
+    min_samples = max(1, int(min_samples))
+    cur = conn.cursor()
+    try:
+        items = _load_items(cur, days)
+        cancels = _load_cancellations(cur, days)
+        sale_counts = _load_sale_counts(cur, days)
+    finally:
+        cur.close()
+
+    total_items = len(items)
+    total_sales = len({r[0] for r in items})
+    employees_seen = {(r[8], r[9]) for r in items if r[8] is not None}
+    cold_start = total_items < min_samples
+
+    emp = {}   # employee_id -> {name, anomalies: [], sales_count}
+
+    def add_emp(emp_id, name, anomaly):
+        if emp_id is None:
+            emp_id = 0
+            name = name or 'Sin empleado'
+        entry = emp.setdefault(emp_id, {'employee_id': emp_id, 'employee_name': name,
+                                        'anomalies': []})
+        entry['anomalies'].append(anomaly)
+
+    sku = {}   # inventory_id -> {part_number, name, anomalies: [], tickets: n}
+
+    def add_sku(inv_id, part_number, name, anomaly):
+        if inv_id is None:
+            return
+        entry = sku.setdefault(inv_id, {'inventory_id': inv_id, 'part_number': part_number,
+                                        'name': name, 'anomalies': []})
+        entry['anomalies'].append(anomaly)
+
+    # ── 1. Sales below recorded cost (hard rule, no baseline needed) ──────
+    below_cost_emp = {}
+    for (sale_id, inv_id, part_number, name, qty, price, cost, disc,
+         emp_id, emp_name, hour) in items:
+        if cost is None or float(cost) <= 0:
+            continue  # unknown cost — cannot judge
+        effective = float(price or 0) * (1 - float(disc or 0) / 100.0)
+        if effective < float(cost):
+            margin = effective - float(cost)
+            below_cost_emp[emp_id] = below_cost_emp.get(emp_id, 0) + 1
+            add_emp(emp_id, emp_name, _anomaly(
+                'below_cost', 'high',
+                f"Vendió {name} a {effective:.2f} por debajo del costo {float(cost):.2f}",
+                metric={'sale_id': sale_id, 'inventory_id': inv_id,
+                        'unit_price': effective, 'unit_cost': float(cost),
+                        'margin': round(margin, 2)},
+            ))
+            add_sku(inv_id, part_number, name, _anomaly(
+                'below_cost', 'high',
+                f"Ticket #{sale_id} vendido bajo costo ({margin:.2f})",
+                metric={'sale_id': sale_id, 'margin': round(margin, 2)},
+            ))
+
+    # ── 2. Discounts: robust z of the tenant-wide distribution ────────────
+    discounts = [float(r[7]) for r in items if r[7] is not None]
+    disc_med, disc_scale = _robust_stats(discounts)
+    if not cold_start:
+        for (sale_id, inv_id, part_number, name, qty, price, cost, disc,
+             emp_id, emp_name, hour) in items:
+            if disc is None or float(disc) < DISCOUNT_ALERT_MIN:
+                continue
+            z = _robust_z(float(disc), disc_med, disc_scale)
+            if z is not None and z > z_threshold:
+                add_emp(emp_id, emp_name, _anomaly(
+                    'discount_atypical', 'medium',
+                    f"Descuento {float(disc):.1f}% en {name} (z={z:.1f})",
+                    metric={'sale_id': sale_id, 'discount_pct': float(disc),
+                            'z': round(z, 2), 'baseline_median': round(disc_med, 2)},
+                    sample=len(discounts),
+                ))
+                add_sku(inv_id, part_number, name, _anomaly(
+                    'discount_atypical', 'medium',
+                    f"Descuento {float(disc):.1f}% (z={z:.1f})",
+                    metric={'z': round(z, 2), 'discount_pct': float(disc)},
+                    sample=len(discounts),
+                ))
+
+        # Employee-level: each cajero's median discount vs the tenant baseline.
+        per_emp_disc = {}
+        for r in items:
+            if r[7] is not None and r[8] is not None:
+                per_emp_disc.setdefault(r[8], []).append(float(r[7]))
+        for emp_id, vals in per_emp_disc.items():
+            if len(vals) < min_samples:
+                continue
+            med = float(np.median(vals))
+            z = _robust_z(med, disc_med, disc_scale)
+            if med >= DISCOUNT_ALERT_MIN and z is not None and z > z_threshold:
+                add_emp(emp_id, dict(employees_seen).get(emp_id, f'Empleado {emp_id}'),
+                        _anomaly(
+                            'discount_employee', 'high',
+                            f"Descuento mediano {med:.1f}% sobre la media del negocio ({disc_med:.1f}%)",
+                            metric={'median_discount': round(med, 2), 'z': round(z, 2)},
+                            sample=len(vals),
+                        ))
+
+        # SKU-level: each SKU's median discount vs the tenant baseline.
+        per_sku_disc = {}
+        for r in items:
+            if r[7] is not None and r[1] is not None:
+                per_sku_disc.setdefault(r[1], []).append(float(r[7]))
+        for inv_id, vals in per_sku_disc.items():
+            if len(vals) < min_samples:
+                continue
+            med = float(np.median(vals))
+            z = _robust_z(med, disc_med, disc_scale)
+            if med >= DISCOUNT_ALERT_MIN and z is not None and z > z_threshold:
+                part_number = next((r[2] for r in items if r[1] == inv_id), None)
+                name = next((r[3] for r in items if r[1] == inv_id), None)
+                add_sku(inv_id, part_number, name, _anomaly(
+                    'discount_sku', 'medium',
+                    f"Descuento mediano {med:.1f}% sobre la media ({disc_med:.1f}%)",
+                    metric={'median_discount': round(med, 2), 'z': round(z, 2)},
+                    sample=len(vals),
+                ))
+
+    # ── 3. Repeated cancellations (employee) ──────────────────────────────
+    for emp_id, (emp_name, cnt) in cancels.items():
+        total = sale_counts.get(emp_id, cnt) + cnt
+        rate = cnt / total if total else 0
+        repeats = cnt >= MIN_CANCELLATIONS
+        proportional = total >= min_samples and rate >= CANCEL_RATE_THRESHOLD
+        if repeats or proportional:
+            add_emp(emp_id, emp_name, _anomaly(
+                'cancellations', 'high' if repeats else 'medium',
+                f"{cnt} cancelaciones en {days} días ({rate * 100:.0f}% de sus ventas)",
+                metric={'cancellations': cnt, 'sale_rate': round(rate, 3)},
+                sample=total,
+            ))
+
+    # ── 4. Off-hours sales (rule; needs a repeat to avoid one-off noise) ──
+    off_hours = {}
+    for (sale_id, inv_id, part_number, name, qty, price, cost, disc,
+         emp_id, emp_name, hour) in items:
+        if _is_off_hours(hour):
+            off_hours.setdefault(emp_id, {'name': emp_name, 'sales': set()})
+            off_hours[emp_id]['sales'].add(sale_id)
+    for emp_id, info in off_hours.items():
+        count = len(info['sales'])
+        if count < OFF_HOURS_MIN and total_items >= min_samples:
+            continue
+        add_emp(emp_id, info['name'], _anomaly(
+            'off_hours', 'low' if count < 3 else 'medium',
+            f"{count} ventas fuera de horario ({OFF_HOURS_START}:00-{OFF_HOURS_END}:59)",
+            metric={'off_hours_sales': count},
+            sample=total_items,
+        ))
+
+    # ── Score + serialise ─────────────────────────────────────────────────
+    def _score(anomalies):
+        total = 0.0
+        for a in anomalies:
+            total += SEVERITY_POINTS.get(a['severity'], 5)
+        return min(total, 100.0)
+
+    employees = []
+    for entry in emp.values():
+        entry['score'] = round(_score(entry['anomalies']), 1)
+        entry['sales_count'] = sale_counts.get(entry['employee_id'], 0)
+        employees.append(entry)
+    employees.sort(key=lambda e: e['score'], reverse=True)
+
+    skus = []
+    for entry in sku.values():
+        entry['score'] = round(_score(entry['anomalies']), 1)
+        skus.append(entry)
+    skus.sort(key=lambda s: s['score'], reverse=True)
+
+    by_type = {}
+    for entry in employees:
+        for a in entry['anomalies']:
+            by_type[a['type']] = by_type.get(a['type'], 0) + 1
+    for entry in skus:
+        for a in entry['anomalies']:
+            by_type[a['type']] = by_type.get(a['type'], 0) + 1
+
+    return {
+        'generated_at': datetime.now(timezone.utc).isoformat(),
+        'window_days': days,
+        'cold_start': cold_start,
+        'sample': {
+            'sale_items': total_items,
+            'sales': total_sales,
+            'employees': len(employees_seen),
+        },
+        'thresholds': {
+            'min_samples': min_samples,
+            'z_threshold': z_threshold,
+            'business_hours': [OFF_HOURS_START, OFF_HOURS_END],
+            'timezone': BUSINESS_TZ,
+            'min_cancellations': MIN_CANCELLATIONS,
+        },
+        'employees': employees[:limit],
+        'skus': skus[:limit],
+        'summary': {
+            'flagged_employees': len(employees),
+            'flagged_skus': len(skus),
+            'by_type': by_type,
+        },
+    }
diff --git a/pos/services/b2b_service.py b/pos/services/b2b_service.py
new file mode 100644
index 0000000..a03c984
--- /dev/null
+++ b/pos/services/b2b_service.py
@@ -0,0 +1,985 @@
+# /home/Autopartes/pos/services/b2b_service.py
+"""Nexus B2B yonke marketplace: wholesale used parts between deshuesaderos.
+
+A yonke (seller) publishes its used/rebuild pieces to a shared catalog; another
+yonke (buyer) places an order. Listings live in the MASTER DB (nexus_autoparts)
+so they are visible cross-tenant; the pieces themselves stay in each seller's
+tenant DB.
+
+Tables (master DB):
+  b2b_listings          — published pieces (UNIQUE seller_tenant_id+inventory_id)
+  marketplace_orders    — order header (buyer/seller tenant ids, total, status)
+  marketplace_order_items — order lines (+ listing_id link)
+
+Order lifecycle:
+  pending → confirmed → shipped → received → completed
+  pending/confirmed → cancelled
+
+Actor permissions per transition:
+  buyer  : cancelled (from pending), received (from confirmed/shipped)
+  seller : confirmed (from pending), shipped (from pending/confirmed),
+           cancelled (from pending/confirmed)
+  both   : completed (from received)
+
+The source states are deliberately permissive (the UI exposes "Marcar
+enviado"/"Recibido" a step early) so a valid actor never hits a dead end.
+
+Conventions:
+  * Master reads/writes go through the `master_conn` passed by the caller
+    (the blueprint owns commit/rollback), EXCEPT `update_order_status`, which
+    commits the master transaction itself: on `received` it must persist the
+    status BEFORE running the cross-tenant side effects, so the order state can
+    never be rolled back while pieces were already created in another tenant.
+  * Tenant connections are opened/committed/closed inside this module, because
+    one order touches two tenants (buyer + seller) at once.
+  * Everything degrades: side effects at `received` run inside SAVEPOINTs and
+    never abort the order on failure — failures are returned as `warnings`.
+"""
+
+from decimal import Decimal
+
+from psycopg2 import errors as pg_errors
+from psycopg2.extras import RealDictCursor
+from tenant_db import get_tenant_conn
+
+# ─── Domain constants ──────────────────────────────────────────────────────
+
+LISTING_STATUSES = ('available', 'reserved', 'sold', 'removed')
+ORDER_STATUSES = ('pending', 'confirmed', 'shipped', 'received', 'completed', 'cancelled')
+
+# status -> {new_status: (allowed actor roles)}
+ORDER_TRANSITIONS = {
+    'pending':   {'confirmed': ('seller',),
+                  'shipped':   ('seller',),
+                  'cancelled': ('buyer', 'seller')},
+    'confirmed': {'shipped':   ('seller',),
+                  'received':  ('buyer',),
+                  'cancelled': ('seller',)},
+    'shipped':   {'received': ('buyer',)},
+    'received':  {'completed': ('buyer', 'seller')},
+    'completed': {},
+    'cancelled': {},
+}
+
+USED_CONDITIONS = ('usado', 'reconstruido')
+
+
+class B2BError(Exception):
+    """Base class for all B2B errors (mapped to HTTP by the blueprint)."""
+
+
+class B2BValidationError(B2BError):
+    """Bad input / illegal state transition -> HTTP 400."""
+
+
+class B2BForbidden(B2BError):
+    """Caller is not allowed -> HTTP 403."""
+
+
+class B2BNotFound(B2BError):
+    """Entity missing -> HTTP 404."""
+
+
+# ─── Small helpers ─────────────────────────────────────────────────────────
+
+def _to_int(val, default=None):
+    if val is None or val == '':
+        return default
+    try:
+        return int(float(str(val).replace(',', '')))
+    except (TypeError, ValueError):
+        return default
+
+
+def _to_float(val, default=0.0):
+    if val is None or val == '':
+        return default
+    try:
+        return float(str(val).replace(',', ''))
+    except (TypeError, ValueError):
+        return default
+
+
+def _jval(v):
+    """Make a psycopg2 value JSON-safe (Decimal -> float, date -> isoformat)."""
+    if isinstance(v, Decimal):
+        return float(v)
+    if hasattr(v, 'isoformat'):
+        return v.isoformat()
+    return v
+
+
+def _clean(d):
+    return {k: _jval(v) for k, v in (d or {}).items()}
+
+
+def _cur(conn):
+    return conn.cursor(cursor_factory=RealDictCursor)
+
+
+def _tenant_name(master_conn, tenant_id):
+    """Best-effort tenant display name from the master DB (never raises)."""
+    if not tenant_id:
+        return None
+    try:
+        cur = _cur(master_conn)
+        cur.execute("SELECT name FROM tenants WHERE id = %s", (tenant_id,))
+        row = cur.fetchone()
+        cur.close()
+        return row['name'] if row else None
+    except Exception:
+        try:
+            master_conn.rollback()
+        except Exception:
+            pass
+        return None
+
+
+def is_seller(master_conn, tenant_id):
+    """True when the tenant has the seller flag enabled in the master DB."""
+    try:
+        cur = _cur(master_conn)
+        cur.execute("SELECT COALESCE(is_seller, false) AS is_seller FROM tenants WHERE id = %s",
+                    (tenant_id,))
+        row = cur.fetchone()
+        cur.close()
+        return bool(row['is_seller']) if row else False
+    except Exception:
+        try:
+            master_conn.rollback()
+        except Exception:
+            pass
+        return False
+
+
+def _audit_best_effort(conn, action, entity_type=None, entity_id=None, new_value=None):
+    try:
+        from services.audit import log_action
+        log_action(conn, action, entity_type, entity_id, new_value=new_value)
+    except Exception:
+        pass
+
+
+# ─── Listings: serialization ───────────────────────────────────────────────
+
+_LISTING_FIELDS = (
+    'id', 'seller_tenant_id', 'seller_inventory_id', 'part_number', 'name',
+    'condition', 'condition_grade', 'price_wholesale', 'donor_make',
+    'donor_model', 'donor_year', 'image_url', 'status', 'notes',
+    'created_at', 'updated_at',
+)
+_LISTING_COLS = ', '.join(_LISTING_FIELDS)
+_LISTING_COLS_L = ', '.join('l.' + f for f in _LISTING_FIELDS)
+
+
+def _listing_dict(row, seller_name=None, include_private=False):
+    """Map a b2b_listings row to the API dict.
+
+    `inventory_id` is the public alias of `seller_inventory_id` (the contract
+    field). Extra fields (condition, notes, seller_tenant_id, timestamps) are
+    additive and harmless for the UI.
+    """
+    d = _clean(dict(row))
+    d['inventory_id'] = d.get('seller_inventory_id')
+    d['price_wholesale'] = float(d.get('price_wholesale') or 0)
+    if seller_name is not None:
+        d['seller_name'] = seller_name
+    if not include_private:
+        d.pop('seller_tenant_id', None)
+    return d
+
+
+# ─── Seller: my listings ───────────────────────────────────────────────────
+
+def list_my_listings(master_conn, tenant_id, status=None):
+    """Listings published by `tenant_id` (removed ones hidden by default)."""
+    cur = _cur(master_conn)
+    where = ["seller_tenant_id = %s"]
+    params = [tenant_id]
+    if status:
+        status = (status or '').strip().lower()
+        if status not in LISTING_STATUSES:
+            raise B2BValidationError(f"status inválido: {status}")
+        where.append("status = %s")
+        params.append(status)
+    else:
+        where.append("status <> 'removed'")
+    cur.execute(
+        f"SELECT {_LISTING_COLS} FROM b2b_listings "
+        f"WHERE {' AND '.join(where)} ORDER BY created_at DESC, id DESC",
+        params,
+    )
+    rows = cur.fetchall()
+    cur.close()
+    return [_listing_dict(r, include_private=True) for r in rows]
+
+
+def get_listing(master_conn, listing_id):
+    """Single listing + seller_name, or None."""
+    cur = _cur(master_conn)
+    cur.execute(f"SELECT {_LISTING_COLS} FROM b2b_listings WHERE id = %s", (listing_id,))
+    row = cur.fetchone()
+    cur.close()
+    if not row:
+        return None
+    return _listing_dict(row, seller_name=_tenant_name(master_conn, row['seller_tenant_id']))
+
+
+# ─── Seller: publish / edit / remove ───────────────────────────────────────
+
+def _fetch_piece(tenant_id, inventory_id):
+    """Read the source piece from the seller's tenant DB (+ primary image)."""
+    conn = get_tenant_conn(tenant_id)
+    try:
+        cur = conn.cursor(cursor_factory=RealDictCursor)
+        cur.execute("""
+            SELECT id, part_number, name, condition, condition_grade,
+                   donor_make, donor_model, donor_year, image_url, is_active
+            FROM inventory WHERE id = %s
+        """, (inventory_id,))
+        row = cur.fetchone()
+        if row:
+            cur.execute("""
+                SELECT url FROM inventory_images
+                WHERE inventory_id = %s
+                ORDER BY is_primary DESC, sort_order ASC, id ASC
+                LIMIT 1
+            """, (inventory_id,))
+            img = cur.fetchone()
+            if img and img.get('url'):
+                row = dict(row)
+                row['image_url'] = img['url']
+        cur.close()
+        return dict(row) if row else None
+    finally:
+        conn.close()
+
+
+def publish_listing(master_conn, tenant_id, data):
+    """Create or refresh a listing for one of the tenant's used pieces.
+
+    Raises B2BForbidden when the tenant is not a seller, B2BValidationError on
+    bad input / ineligible piece, B2BNotFound when the piece does not exist.
+    """
+    data = data or {}
+    if not is_seller(master_conn, tenant_id):
+        raise B2BForbidden(
+            'Tu cuenta no está habilitada como vendedor (is_seller). '
+            'Contacta al administrador para activar el modo mayoreo.'
+        )
+
+    inventory_id = _to_int(data.get('inventory_id'))
+    if not inventory_id:
+        raise B2BValidationError('inventory_id requerido')
+
+    if 'price_wholesale' not in data or data.get('price_wholesale') in (None, ''):
+        raise B2BValidationError('price_wholesale requerido')
+    price = _to_float(data.get('price_wholesale'), None)
+    if price is None or price < 0:
+        raise B2BValidationError('price_wholesale inválido')
+
+    piece = _fetch_piece(tenant_id, inventory_id)
+    if not piece:
+        raise B2BNotFound('Pieza no encontrada')
+    condition = (piece.get('condition') or '').strip().lower()
+    if condition not in USED_CONDITIONS:
+        raise B2BValidationError(
+            "Solo se pueden publicar piezas usadas o reconstruidas "
+            f"(condition actual: {condition or 'desconocida'})"
+        )
+    if piece.get('is_active') is False:
+        raise B2BValidationError('La pieza no está activa en inventario')
+
+    notes = (data.get('notes') or '').strip() or None
+    cur = _cur(master_conn)
+    cur.execute("""
+        INSERT INTO b2b_listings
+            (seller_tenant_id, seller_inventory_id, part_number, name, condition,
+             condition_grade, price_wholesale, donor_make, donor_model, donor_year,
+             image_url, status, notes)
+        VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, 'available', %s)
+        ON CONFLICT (seller_tenant_id, seller_inventory_id) DO UPDATE SET
+            part_number     = EXCLUDED.part_number,
+            name            = EXCLUDED.name,
+            condition       = EXCLUDED.condition,
+            condition_grade = EXCLUDED.condition_grade,
+            price_wholesale = EXCLUDED.price_wholesale,
+            donor_make      = EXCLUDED.donor_make,
+            donor_model     = EXCLUDED.donor_model,
+            donor_year      = EXCLUDED.donor_year,
+            image_url       = EXCLUDED.image_url,
+            notes           = COALESCE(EXCLUDED.notes, b2b_listings.notes),
+            status          = 'available',
+            updated_at      = NOW()
+        RETURNING id
+    """, (
+        tenant_id, inventory_id, piece.get('part_number'), piece.get('name'),
+        condition or 'usado', piece.get('condition_grade'), price,
+        piece.get('donor_make'), piece.get('donor_model'), piece.get('donor_year'),
+        piece.get('image_url'), notes,
+    ))
+    listing_id = cur.fetchone()['id']
+    cur.close()
+
+    listing = get_listing(master_conn, listing_id)
+    _audit_publish_best_effort(tenant_id, listing)
+    return listing
+
+
+def _audit_publish_best_effort(tenant_id, listing):
+    try:
+        conn = get_tenant_conn(tenant_id)
+        try:
+            _audit_best_effort(conn, 'B2B_LISTING_PUBLISH', 'b2b_listing',
+                               (listing or {}).get('id'),
+                               {'price_wholesale': (listing or {}).get('price_wholesale')})
+            conn.commit()
+        finally:
+            conn.close()
+    except Exception:
+        pass
+
+
+def update_listing(master_conn, tenant_id, listing_id, data):
+    """Update price/status of a listing (owner only). Returns the listing."""
+    data = data or {}
+    sets = []
+    params = []
+    if 'price_wholesale' in data:
+        price = _to_float(data.get('price_wholesale'), None)
+        if price is None or price < 0:
+            raise B2BValidationError('price_wholesale inválido')
+        sets.append('price_wholesale = %s')
+        params.append(price)
+    if 'status' in data:
+        status = (data.get('status') or '').strip().lower()
+        if status not in LISTING_STATUSES:
+            raise B2BValidationError(f"status inválido: {status}")
+        sets.append('status = %s')
+        params.append(status)
+    if 'notes' in data:
+        sets.append('notes = %s')
+        params.append((data.get('notes') or '').strip() or None)
+    if not sets:
+        raise B2BValidationError('Nada que actualizar (price_wholesale, status, notes)')
+
+    cur = _cur(master_conn)
+    cur.execute("SELECT seller_tenant_id FROM b2b_listings WHERE id = %s", (listing_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        raise B2BNotFound('Listing no encontrado')
+    if row['seller_tenant_id'] != tenant_id:
+        cur.close()
+        raise B2BForbidden('Este listing pertenece a otro vendedor')
+
+    sets.append('updated_at = NOW()')
+    params.append(listing_id)
+    cur.execute(f"UPDATE b2b_listings SET {', '.join(sets)} WHERE id = %s", params)
+    cur.close()
+    return get_listing(master_conn, listing_id)
+
+
+def remove_listing(master_conn, tenant_id, listing_id):
+    """Soft-delete a listing (status='removed'). Owner only. Returns bool."""
+    cur = _cur(master_conn)
+    cur.execute("SELECT seller_tenant_id FROM b2b_listings WHERE id = %s", (listing_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        raise B2BNotFound('Listing no encontrado')
+    if row['seller_tenant_id'] != tenant_id:
+        cur.close()
+        raise B2BForbidden('Este listing pertenece a otro vendedor')
+    cur.execute(
+        "UPDATE b2b_listings SET status = 'removed', updated_at = NOW() WHERE id = %s",
+        (listing_id,),
+    )
+    cur.close()
+    return True
+
+
+# ─── Buyer: catalog ────────────────────────────────────────────────────────
+
+def list_catalog(master_conn, buyer_tenant_id, filters=None, page=1, per_page=12):
+    """Available listings from OTHER tenants, with seller_name and pagination."""
+    filters = filters or {}
+    page = max(_to_int(page, 1) or 1, 1)
+    per_page = min(max(_to_int(per_page, 12) or 12, 1), 100)
+
+    where = ["l.status = 'available'", 'l.seller_tenant_id <> %s']
+    params = [buyer_tenant_id]
+
+    q = (filters.get('q') or '').strip()
+    if q:
+        where.append("(l.name ILIKE %s OR l.part_number ILIKE %s "
+                     "OR l.donor_make ILIKE %s OR l.donor_model ILIKE %s)")
+        params.extend([f'%{q}%'] * 4)
+
+    for field, col in (('make', 'l.donor_make'), ('model', 'l.donor_model')):
+        val = (filters.get(field) or '').strip()
+        if val:
+            where.append(f"{col} ILIKE %s")
+            params.append(f'%{val}%')
+
+    year = _to_int(filters.get('year'))
+    if year:
+        where.append("l.donor_year = %s")
+        params.append(year)
+
+    grade = (filters.get('grade') or '').strip().upper()
+    if grade:
+        where.append("UPPER(l.condition_grade) = %s")
+        params.append(grade)
+
+    where_sql = ' AND '.join(where)
+    cur = _cur(master_conn)
+    cur.execute(f"""
+        SELECT COUNT(*) AS total
+        FROM b2b_listings l
+        WHERE {where_sql}
+    """, params)
+    total = cur.fetchone()['total'] or 0
+
+    cur.execute(f"""
+        SELECT {_LISTING_COLS_L}, t.name AS seller_name
+        FROM b2b_listings l
+        LEFT JOIN tenants t ON t.id = l.seller_tenant_id
+        WHERE {where_sql}
+        ORDER BY l.created_at DESC, l.id DESC
+        LIMIT %s OFFSET %s
+    """, params + [per_page, (page - 1) * per_page])
+    rows = cur.fetchall()
+    cur.close()
+
+    items = [_listing_dict(r, seller_name=r.get('seller_name')) for r in rows]
+    pagination = {
+        'page': page, 'per_page': per_page, 'total': total,
+        'total_pages': (total + per_page - 1) // per_page,
+    }
+    return items, pagination
+
+
+# ─── Orders ────────────────────────────────────────────────────────────────
+
+_ORDER_COLS = (
+    'id, buyer_tenant_id, seller_tenant_id, buyer_name, seller_name, total, '
+    'status, notes, created_at, updated_at'
+)
+
+
+def _order_items(master_conn, order_ids):
+    """Bulk-load order lines grouped by order_id."""
+    if not order_ids:
+        return {}
+    cur = _cur(master_conn)
+    cur.execute("""
+        SELECT id, order_id, listing_id, part_number, part_name, quantity,
+               unit_price, subtotal
+        FROM marketplace_order_items
+        WHERE order_id = ANY(%s)
+        ORDER BY order_id, id
+    """, (list(order_ids),))
+    rows = cur.fetchall()
+    cur.close()
+    out = {}
+    for r in rows:
+        item = _clean(dict(r))
+        item['name'] = item.get('part_name')  # UI-friendly alias
+        out.setdefault(r['order_id'], []).append(item)
+    return out
+
+
+def _order_dict(row, items, role):
+    d = _clean(dict(row))
+    d['total'] = float(d.get('total') or 0)
+    d['role'] = role
+    if role == 'buyer':
+        d['other_party'] = d.get('seller_name')
+        d['other_tenant_id'] = d.get('seller_tenant_id')
+    else:
+        d['other_party'] = d.get('buyer_name')
+        d['other_tenant_id'] = d.get('buyer_tenant_id')
+    d['items'] = items or []
+    return d
+
+
+def create_order(master_conn, buyer_tenant_id, items, notes=None):
+    """Create a pending order + items and reserve the listings.
+
+    All lines must reference available listings from ONE other tenant.
+    """
+    if not isinstance(items, list) or not items:
+        raise B2BValidationError('items requerido (lista no vacía)')
+
+    wanted = []
+    for it in items:
+        if not isinstance(it, dict):
+            raise B2BValidationError('cada item debe ser un objeto {listing_id, quantity}')
+        listing_id = _to_int(it.get('listing_id'))
+        qty = _to_int(it.get('quantity'), 1)
+        if not listing_id:
+            raise B2BValidationError('listing_id requerido en cada item')
+        if qty is None or qty < 1:
+            raise B2BValidationError('quantity debe ser >= 1')
+        wanted.append({'listing_id': listing_id, 'quantity': qty})
+
+    listing_ids = [w['listing_id'] for w in wanted]
+    cur = _cur(master_conn)
+    cur.execute(
+        f"SELECT {_LISTING_COLS} FROM b2b_listings WHERE id = ANY(%s) FOR UPDATE",
+        (listing_ids,),
+    )
+    rows = {r['id']: dict(r) for r in cur.fetchall()}
+    cur.close()
+
+    sellers = set()
+    resolved = []
+    for w in wanted:
+        listing = rows.get(w['listing_id'])
+        if not listing:
+            raise B2BNotFound(f"Listing {w['listing_id']} no encontrado")
+        if listing['status'] != 'available':
+            raise B2BValidationError(
+                f"Listing {w['listing_id']} no está disponible (status: {listing['status']})")
+        if listing['seller_tenant_id'] == buyer_tenant_id:
+            raise B2BValidationError('No puedes comprar tus propias piezas')
+        sellers.add(listing['seller_tenant_id'])
+        resolved.append((listing, w['quantity']))
+
+    if len(sellers) > 1:
+        raise B2BValidationError(
+            'Una orden solo puede tener un vendedor; crea una orden por vendedor')
+    seller_tenant_id = sellers.pop()
+
+    total = round(sum(
+        _to_float(listing['price_wholesale'], 0) * qty
+        for listing, qty in resolved), 2)
+    buyer_name = _tenant_name(master_conn, buyer_tenant_id) or ''
+    seller_name = _tenant_name(master_conn, seller_tenant_id) or ''
+
+    cur = _cur(master_conn)
+    cur.execute("""
+        INSERT INTO marketplace_orders
+            (buyer_tenant_id, seller_tenant_id, buyer_name, seller_name,
+             total, status, notes)
+        VALUES (%s, %s, %s, %s, %s, 'pending', %s)
+        RETURNING id
+    """, (buyer_tenant_id, seller_tenant_id, buyer_name, seller_name,
+          total, (notes or '').strip() or None))
+    order_id = cur.fetchone()['id']
+
+    order_items = []
+    for listing, qty in resolved:
+        price = _to_float(listing['price_wholesale'], 0)
+        subtotal = round(price * qty, 2)
+        cur.execute("""
+            INSERT INTO marketplace_order_items
+                (order_id, listing_id, part_number, part_name, quantity, unit_price, subtotal)
+            VALUES (%s, %s, %s, %s, %s, %s, %s)
+        """, (order_id, listing['id'], listing.get('part_number'), listing.get('name'),
+              qty, price, subtotal))
+        order_items.append({
+            'listing_id': listing['id'],
+            'part_number': listing.get('part_number'),
+            'part_name': listing.get('name'),
+            'name': listing.get('name'),
+            'quantity': qty,
+            'unit_price': price,
+            'subtotal': subtotal,
+        })
+
+    cur.execute("""
+        UPDATE b2b_listings SET status = 'reserved', updated_at = NOW()
+        WHERE id = ANY(%s)
+    """, ([listing['id'] for listing, _ in resolved],))
+    cur.close()
+
+    return {
+        'id': order_id,
+        'total': total,
+        'status': 'pending',
+        'seller_tenant_id': seller_tenant_id,
+        'buyer_tenant_id': buyer_tenant_id,
+        'seller_name': seller_name,
+        'buyer_name': buyer_name,
+        'items': order_items,
+    }
+
+
+def list_orders(master_conn, tenant_id, role):
+    """Orders where `tenant_id` is buyer ('buyer') or seller ('seller')."""
+    col = 'buyer_tenant_id' if role == 'buyer' else 'seller_tenant_id'
+    cur = _cur(master_conn)
+    cur.execute(
+        f"SELECT {_ORDER_COLS} FROM marketplace_orders WHERE {col} = %s "
+        f"ORDER BY created_at DESC, id DESC",
+        (tenant_id,),
+    )
+    rows = cur.fetchall()
+    cur.close()
+    items = _order_items(master_conn, [r['id'] for r in rows])
+    return [_order_dict(r, items.get(r['id']), role) for r in rows]
+
+
+def get_order(master_conn, tenant_id, order_id):
+    """Order detail; only participants. Raises B2BNotFound / B2BForbidden."""
+    cur = _cur(master_conn)
+    cur.execute(f"SELECT {_ORDER_COLS} FROM marketplace_orders WHERE id = %s", (order_id,))
+    row = cur.fetchone()
+    cur.close()
+    if not row:
+        raise B2BNotFound('Orden no encontrada')
+    if row['buyer_tenant_id'] == tenant_id:
+        role = 'buyer'
+    elif row['seller_tenant_id'] == tenant_id:
+        role = 'seller'
+    else:
+        raise B2BForbidden('No participas en esta orden')
+    items = _order_items(master_conn, [order_id])
+    return _order_dict(row, items.get(order_id), role)
+
+
+def update_order_status(master_conn, tenant_id, order_id, new_status, branch_id=None):
+    """Apply an order status transition (role-checked).
+
+    Commits the master transaction itself: when moving to `received` the status
+    must be durable before the cross-tenant side effects (marking the seller's
+    piece sold and creating the piece in the buyer's inventory) run.
+    """
+    new_status = (new_status or '').strip().lower()
+    if new_status not in ORDER_STATUSES:
+        raise B2BValidationError(
+            f"status inválido: {new_status} (válidos: {', '.join(ORDER_STATUSES)})")
+
+    cur = _cur(master_conn)
+    cur.execute(
+        f"SELECT {_ORDER_COLS} FROM marketplace_orders WHERE id = %s FOR UPDATE",
+        (order_id,),
+    )
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        raise B2BNotFound('Orden no encontrada')
+
+    if row['buyer_tenant_id'] == tenant_id:
+        role = 'buyer'
+    elif row['seller_tenant_id'] == tenant_id:
+        role = 'seller'
+    else:
+        cur.close()
+        raise B2BForbidden('No participas en esta orden')
+
+    current = row['status'] or 'pending'
+    allowed = ORDER_TRANSITIONS.get(current, {}).get(new_status)
+    if not allowed:
+        cur.close()
+        raise B2BValidationError(f"No se puede pasar de '{current}' a '{new_status}'")
+    if role not in allowed:
+        cur.close()
+        raise B2BForbidden(
+            f"Rol '{role}' no puede cambiar la orden de '{current}' a '{new_status}'")
+
+    cur.execute(
+        "UPDATE marketplace_orders SET status = %s, updated_at = NOW() WHERE id = %s",
+        (new_status, order_id),
+    )
+    cur.close()
+    master_conn.commit()
+
+    result = get_order(master_conn, tenant_id, order_id)
+    result['previous_status'] = current
+
+    if new_status == 'received':
+        extras = _finalize_received(master_conn, dict(row), branch_id=branch_id)
+        result.update(extras)
+    return result
+
+
+# ─── Received: cross-tenant side effects (best-effort) ─────────────────────
+
+def _resolve_branch(conn, branch_id=None):
+    if branch_id:
+        return branch_id
+    try:
+        cur = conn.cursor()
+        cur.execute("SELECT id FROM branches ORDER BY id LIMIT 1")
+        r = cur.fetchone()
+        cur.close()
+        return r[0] if r else None
+    except Exception:
+        return None
+
+
+def _mark_seller_piece_sold(conn, inventory_id):
+    """Mark the seller's inventory row as sold (SAVEPOINT, never raises).
+
+    `inventory` has no `status` column in the standard tenant schema, so we set
+    `is_active = false` (piece no longer available) when it is absent; if a
+    tenant ever adds `inventory.status`, we write 'sold' there instead.
+    """
+    cur = conn.cursor()
+    cur.execute("SAVEPOINT b2b_sold")
+    try:
+        cur.execute("""
+            SELECT 1 FROM information_schema.columns
+            WHERE table_name = 'inventory' AND column_name = 'status' LIMIT 1
+        """)
+        has_status = cur.fetchone() is not None
+        if has_status:
+            cur.execute("UPDATE inventory SET status = 'sold' WHERE id = %s", (inventory_id,))
+        else:
+            cur.execute("UPDATE inventory SET is_active = false WHERE id = %s", (inventory_id,))
+        cur.execute("RELEASE SAVEPOINT b2b_sold")
+        return True
+    except Exception:
+        try:
+            cur.execute("ROLLBACK TO SAVEPOINT b2b_sold")
+        except Exception:
+            pass
+        return False
+    finally:
+        cur.close()
+
+
+def _insert_buyer_inventory(conn, item, listing, unit_price, warnings):
+    """Insert the purchased piece into the buyer's inventory (SAVEPOINT)."""
+    from services.yonke_service import generate_unique_sku
+
+    name = (listing.get('name') or item.get('part_name') or item.get('part_number')
+            or 'Pieza usada')
+    candidate = (listing.get('part_number') or item.get('part_number') or '').strip() or None
+    grade = listing.get('condition_grade')
+
+    cur = conn.cursor()
+    inv_id = None
+    for _attempt in range(5):
+        if candidate is None:
+            try:
+                candidate = generate_unique_sku(conn, None)
+            except Exception:
+                candidate = None
+        cur.execute("SAVEPOINT b2b_inv")
+        try:
+            cur.execute("""
+                INSERT INTO inventory
+                    (part_number, name, unit, cost, price_1, price_2, price_3, tax_rate,
+                     condition, condition_grade, is_unique_piece,
+                     donor_make, donor_model, donor_year, ownership, image_url, is_active)
+                VALUES (%s, %s, 'PZA', %s, %s, %s, %s, %s,
+                        'usado', %s, true,
+                        %s, %s, %s, 'propio', %s, true)
+                RETURNING id
+            """, (
+                candidate, name, unit_price, unit_price, unit_price, unit_price, 0.16,
+                grade, listing.get('donor_make'), listing.get('donor_model'),
+                listing.get('donor_year'), listing.get('image_url'),
+            ))
+            inv_id = cur.fetchone()[0]
+            cur.execute("RELEASE SAVEPOINT b2b_inv")
+            break
+        except pg_errors.UniqueViolation:
+            cur.execute("ROLLBACK TO SAVEPOINT b2b_inv")
+            candidate = None
+        except Exception as e:
+            try:
+                cur.execute("ROLLBACK TO SAVEPOINT b2b_inv")
+            except Exception:
+                pass
+            warnings.append(f"no se pudo crear la pieza en el inventario del comprador: {e}")
+            cur.close()
+            return None
+    cur.close()
+    return inv_id
+
+
+def _seed_stock(conn, inv_id, branch_id, qty, cost, warnings):
+    """Seed initial stock for a freshly created buyer piece (SAVEPOINT)."""
+    if not branch_id or qty <= 0:
+        return
+    from services.inventory_engine import record_initial
+
+    cur = conn.cursor()
+    cur.execute("SAVEPOINT b2b_stock")
+    try:
+        record_initial(conn, inv_id, branch_id, qty, cost=cost)
+        cur.execute("RELEASE SAVEPOINT b2b_stock")
+    except Exception as e:
+        try:
+            cur.execute("ROLLBACK TO SAVEPOINT b2b_stock")
+        except Exception:
+            pass
+        warnings.append(f"no se registró la operación de stock: {e}")
+    # Idempotent safety net: the trigger normally creates this row already.
+    try:
+        cur.execute("""
+            INSERT INTO inventory_stock (inventory_id, branch_id, stock)
+            VALUES (%s, %s, %s)
+            ON CONFLICT (inventory_id, branch_id) DO UPDATE SET stock = EXCLUDED.stock
+        """, (inv_id, branch_id, qty))
+    except Exception as e:
+        warnings.append(f"no se pudo fijar el stock inicial: {e}")
+    cur.close()
+
+
+def _finalize_received(master_conn, order, branch_id=None):
+    """On `received`: sell the listings/seller pieces and stock the buyer.
+
+    Best-effort by design: every step runs in its own SAVEPOINT / connection,
+    failures are collected in `warnings`, and the order is never aborted.
+    """
+    warnings = []
+    extras = {'listings_sold': 0, 'inventory_created': 0, 'warnings': warnings}
+    order_id = order['id']
+    seller_id = order['seller_tenant_id']
+    buyer_id = order['buyer_tenant_id']
+
+    cur = _cur(master_conn)
+    cur.execute("""
+        SELECT id, listing_id, part_number, part_name, quantity, unit_price
+        FROM marketplace_order_items WHERE order_id = %s ORDER BY id
+    """, (order_id,))
+    items = [dict(r) for r in cur.fetchall()]
+
+    listing_ids = [it['listing_id'] for it in items if it['listing_id']]
+    listings = {}
+    if listing_ids:
+        cur.execute(f"SELECT {_LISTING_COLS} FROM b2b_listings WHERE id = ANY(%s)",
+                    (listing_ids,))
+        for r in cur.fetchall():
+            listings[r['id']] = dict(r)
+
+    # Legacy rows may lack listing_id: fall back to (seller, part_number).
+    for it in items:
+        if it['listing_id'] in listings:
+            continue
+        cur.execute(f"""
+            SELECT {_LISTING_COLS} FROM b2b_listings
+            WHERE seller_tenant_id = %s AND part_number = %s
+            ORDER BY (status = 'reserved') DESC, id DESC LIMIT 1
+        """, (seller_id, it.get('part_number')))
+        r = cur.fetchone()
+        if r:
+            listings[it['listing_id']] = dict(r)
+
+    # 1) Mark listings sold (master DB) ------------------------------------
+    sold = 0
+    for it in items:
+        listing = listings.get(it['listing_id']) if it['listing_id'] else None
+        if not listing and it['listing_id']:
+            continue
+        try:
+            if listing:
+                cur.execute(
+                    "UPDATE b2b_listings SET status = 'sold', updated_at = NOW() WHERE id = %s",
+                    (listing['id'],))
+            else:
+                cur.execute("""
+                    UPDATE b2b_listings SET status = 'sold', updated_at = NOW()
+                    WHERE seller_tenant_id = %s AND part_number = %s AND status = 'reserved'
+                """, (seller_id, it.get('part_number')))
+            sold += cur.rowcount
+        except Exception as e:
+            master_conn.rollback()
+            warnings.append(f"no se pudo marcar el listing como vendido: {e}")
+            cur = _cur(master_conn)
+    try:
+        master_conn.commit()
+    except Exception as e:
+        warnings.append(f"no se pudo confirmar el estado de los listings: {e}")
+    extras['listings_sold'] = sold
+    cur.close()
+
+    # 2) Mark the seller's pieces sold (seller tenant DB) ------------------
+    seller_conn = None
+    try:
+        seller_conn = get_tenant_conn(seller_id)
+        for it in items:
+            listing = listings.get(it['listing_id'])
+            inv_id = _to_int((listing or {}).get('seller_inventory_id'))
+            if inv_id:
+                _mark_seller_piece_sold(seller_conn, inv_id)
+        seller_conn.commit()
+    except Exception as e:
+        warnings.append(f"no se pudieron marcar las piezas del vendedor: {e}")
+        if seller_conn is not None:
+            try:
+                seller_conn.rollback()
+            except Exception:
+                pass
+    finally:
+        if seller_conn is not None:
+            try:
+                seller_conn.close()
+            except Exception:
+                pass
+
+    # 3) Create the purchased pieces in the buyer's inventory --------------
+    buyer_conn = None
+    try:
+        buyer_conn = get_tenant_conn(buyer_id)
+        buyer_branch = _resolve_branch(buyer_conn, branch_id)
+        created = 0
+        for it in items:
+            listing = listings.get(it['listing_id']) or {}
+            qty = max(_to_int(it.get('quantity'), 1) or 1, 1)
+            price = _to_float(it.get('unit_price'), 0)
+            inv_id = _insert_buyer_inventory(buyer_conn, it, listing, price, warnings)
+            if inv_id:
+                _seed_stock(buyer_conn, inv_id, buyer_branch, qty, price, warnings)
+                created += 1
+        buyer_conn.commit()
+        extras['inventory_created'] = created
+        try:
+            _audit_best_effort(buyer_conn, 'B2B_ORDER_RECEIVED', 'marketplace_order',
+                               order_id, {'inventory_created': created})
+            buyer_conn.commit()
+        except Exception:
+            pass
+    except Exception as e:
+        warnings.append(f"no se pudo crear el inventario del comprador: {e}")
+        if buyer_conn is not None:
+            try:
+                buyer_conn.rollback()
+            except Exception:
+                pass
+    finally:
+        if buyer_conn is not None:
+            try:
+                buyer_conn.close()
+            except Exception:
+                pass
+
+    return extras
+
+
+# ─── Seller status (UI badge) ──────────────────────────────────────────────
+
+def get_seller_status(master_conn, tenant_id):
+    """{is_seller, listings_count, incoming_orders} for the current tenant."""
+    seller = is_seller(master_conn, tenant_id)
+    cur = _cur(master_conn)
+    cur.execute("""
+        SELECT COUNT(*) AS c FROM b2b_listings
+        WHERE seller_tenant_id = %s AND status <> 'removed'
+    """, (tenant_id,))
+    listings_count = cur.fetchone()['c'] or 0
+
+    cur.execute("""
+        SELECT COUNT(*) AS c FROM marketplace_orders
+        WHERE seller_tenant_id = %s AND status IN ('pending', 'confirmed', 'shipped')
+    """, (tenant_id,))
+    incoming = cur.fetchone()['c'] or 0
+
+    cur.execute("""
+        SELECT COUNT(*) AS c FROM marketplace_orders WHERE seller_tenant_id = %s
+    """, (tenant_id,))
+    total_incoming = cur.fetchone()['c'] or 0
+    cur.close()
+
+    return {
+        'is_seller': seller,
+        'listings_count': listings_count,
+        'incoming_orders': incoming,
+        'incoming_orders_total': total_incoming,
+    }
diff --git a/pos/services/billing.py b/pos/services/billing.py
index 3814344..54d019c 100644
--- a/pos/services/billing.py
+++ b/pos/services/billing.py
@@ -3,13 +3,21 @@
 from tenant_db import get_master_conn
 
 PLANS = {
+    # `demo` is a time-limited full trial (see scripts/expire_demos.py). It has
+    # no resource limits on purpose: a prospect must be able to import their
+    # real inventory without hitting a wall. Access is gated by the
+    # subscriptions.expires_at date, not by data volume.
+    'demo':       {'name': 'Demo',       'price_mxn': 0,    'max_products': None,  'max_employees': None, 'max_branches': None},
+    # Yonke: plan comercial para negocios de SOLO partes usadas (sin catálogo TecDoc)
+    'yonke':      {'name': 'Yonke',      'price_mxn': 299,  'max_products': None,  'max_employees': 10,   'max_branches': 1},
     'free':       {'name': 'Gratis',     'price_mxn': 0,    'max_products': 100,   'max_employees': 2,    'max_branches': 1},
     'basic':      {'name': 'Basico',     'price_mxn': 499,  'max_products': 5000,  'max_employees': 5,    'max_branches': 2},
+    'standard':   {'name': 'Estandar',   'price_mxn': 999,  'max_products': 20000, 'max_employees': 10,   'max_branches': 3},
     'pro':        {'name': 'Pro',        'price_mxn': 1499, 'max_products': 50000, 'max_employees': 15,   'max_branches': 5},
     'enterprise': {'name': 'Enterprise', 'price_mxn': 3999, 'max_products': None,  'max_employees': None, 'max_branches': None},
 }
 
-PLAN_ORDER = ['free', 'basic', 'pro', 'enterprise']
+PLAN_ORDER = ['free', 'demo', 'basic', 'standard', 'pro', 'enterprise']
 
 
 def get_plan(tenant_id):
diff --git a/pos/services/catalog_service.py b/pos/services/catalog_service.py
index a82b64f..7d945a7 100644
--- a/pos/services/catalog_service.py
+++ b/pos/services/catalog_service.py
@@ -737,9 +737,10 @@ def get_nexpart_groups_for_vehicle(master_conn, mye_id, tenant_conn=None):
 
     classified = _classify_vehicle_parts(master_conn, mye_id)
     # Merge local inventory and supplier catalog classifications
+    # supplier_catalog vive en la maestra: siempre se puede clasificar.
+    _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     if tenant_conn:
         _merge_classified(classified, _classify_inventory_parts(tenant_conn, mye_id))
-        _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
 
     result = []
     # Iterate in canonical Nexpart order so the UI is stable
@@ -769,9 +770,10 @@ def get_nexpart_subgroups_for_vehicle(master_conn, mye_id, group_slug, tenant_co
     )
 
     classified = _classify_vehicle_parts(master_conn, mye_id)
+    # supplier_catalog vive en la maestra: siempre se puede clasificar.
+    _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     if tenant_conn:
         _merge_classified(classified, _classify_inventory_parts(tenant_conn, mye_id))
-        _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     group_data = classified.get(group_slug, {})
     if not group_data:
         return []
@@ -1172,9 +1174,10 @@ def get_parts_for_nexpart_triple(master_conn, mye_id, group_slug, subgroup_slug,
     """
     classified = _classify_vehicle_parts(master_conn, mye_id)
     # Also merge inventory and supplier catalog so the leaf IDs may be a mix
+    # supplier_catalog vive en la maestra: siempre se puede clasificar.
+    _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     if tenant_conn:
         _merge_classified(classified, _classify_inventory_parts(tenant_conn, mye_id))
-        _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
 
     all_ids = (
         classified
@@ -1327,9 +1330,10 @@ def get_nexpart_part_types_for_vehicle(master_conn, mye_id, group_slug, subgroup
     )
 
     classified = _classify_vehicle_parts(master_conn, mye_id)
+    # supplier_catalog vive en la maestra: siempre se puede clasificar.
+    _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     if tenant_conn:
         _merge_classified(classified, _classify_inventory_parts(tenant_conn, mye_id))
-        _merge_classified(classified, _classify_supplier_catalog_parts(master_conn, mye_id))
     subgroup_data = classified.get(group_slug, {}).get(subgroup_slug, {})
     if not subgroup_data:
         return []
@@ -1852,49 +1856,169 @@ def get_part_detail(master_conn, part_id, tenant_conn, branch_id):
     }
 
 
-def _get_alternatives(cur, part_id):
-    """Get cross-references + aftermarket parts for a given OEM part."""
+def _alternatives_from_supplier_catalog(conn, catalog_id=None, part_number=None,
+                                        name=None, category=None, limit=20,
+                                        use_semantic=True,
+                                        semantic_threshold=0.72,
+                                        semantic_pool=80,
+                                        semantic_timeout=20.0):
+    """Alternatives for a supplier-catalog item, on live (non-TecDoc) tables.
+
+    Two sources, in order:
+
+      1. exact — other ``supplier_catalog`` items that share an interchange
+         cross-reference or an SKU with the base item
+         (``supplier_catalog_interchange``).
+      2. semantic — ``semantic_search.find_similar`` over same-category catalog
+         names (substitute parts that are worded differently).  Degrades to
+         nothing when the embedding provider is unavailable.
+
+    Works with either a connection or a cursor (``conn``/``cur``); the caller
+    owns it.  Never raises on the semantic step.
+
+    Returns list[dict]: {part_number, manufacturer, name, type, similarity,
+    catalog_id} — the caller adds stock/bodega fields.
+    """
+    cur = conn.cursor() if hasattr(conn, 'cursor') else conn
     results = []
+    seen = set()
 
-    # Cross-references (other OEM numbers that reference this part)
-    cur.execute("""
-        SELECT pcr.cross_reference_number, pcr.source_ref
-        FROM part_cross_references pcr
-        WHERE pcr.part_id = %s
-        LIMIT 50
-    """, (part_id,))
-    for r in cur.fetchall():
-        results.append({
-            'part_number': r[0],
-            'manufacturer': r[1] or 'OEM Cross-Ref',
-            'name': None,
-            'type': 'cross_reference',
-            'local_stock': 0,
-            'bodega_count': 0,
-        })
+    base = None
+    if catalog_id:
+        cur.execute(
+            "SELECT id, supplier_name, sku, name, category FROM supplier_catalog "
+            "WHERE id = %s AND is_active = true", (catalog_id,)
+        )
+        base = cur.fetchone()
+    elif part_number:
+        cur.execute(
+            "SELECT id, supplier_name, sku, name, category FROM supplier_catalog "
+            "WHERE UPPER(sku) = UPPER(%s) AND is_active = true LIMIT 1",
+            (part_number,)
+        )
+        base = cur.fetchone()
 
-    # Aftermarket alternatives
-    cur.execute("""
-        SELECT ap.part_number, m.name_manufacture,
-               COALESCE(ap.name_es, ap.name_aftermarket_parts) AS name
-        FROM aftermarket_parts ap
-        JOIN manufacturers m ON m.id_manufacture = ap.manufacturer_id
-        WHERE ap.oem_part_id = %s
-        LIMIT 50
-    """, (part_id,))
-    for r in cur.fetchall():
-        results.append({
-            'part_number': r[0],
-            'manufacturer': r[1],
-            'name': r[2],
-            'type': 'aftermarket',
-            'local_stock': 0,
-            'bodega_count': 0,
-        })
+    if base:
+        base_id, base_sup, base_sku, base_name, base_cat = base
+    else:
+        base_id, base_sup, base_sku = None, None, None
+        base_name = name
+        base_cat = category
+
+    if base_id:
+        seen.add(base_id)
+
+    # ── 1. Exact interchange / SKU cross-references ────────────────────────
+    if base_id:
+        cur.execute(
+            "SELECT DISTINCT part_number FROM supplier_catalog_interchange "
+            "WHERE catalog_id = %s AND part_number IS NOT NULL",
+            (base_id,)
+        )
+        xrefs = [r[0] for r in cur.fetchall()]
+        keys_upper = set()
+        if base_sku:
+            keys_upper.add(str(base_sku).upper())
+        for x in xrefs:
+            keys_upper.add(str(x).upper())
+        keys_upper.discard(None)
+
+        if keys_upper:
+            key_list = list(keys_upper)
+            # (a) catalog items that *are* one of our keys
+            cur.execute("""
+                SELECT id, supplier_name, sku, name FROM supplier_catalog
+                WHERE UPPER(sku) = ANY(%s) AND is_active = true
+                LIMIT %s
+            """, (key_list, limit * 2))
+            exact_rows = list(cur.fetchall())
+            # (b) catalog items whose interchange list contains one of our keys
+            cur.execute("""
+                SELECT DISTINCT sc.id, sc.supplier_name, sc.sku, sc.name
+                FROM supplier_catalog sc
+                JOIN supplier_catalog_interchange sci ON sci.catalog_id = sc.id
+                WHERE UPPER(sci.part_number) = ANY(%s) AND sc.is_active = true
+                LIMIT %s
+            """, (key_list, limit * 2))
+            exact_rows.extend(cur.fetchall())
+
+            for cid, sup, sku, cname in exact_rows:
+                if not cid or cid in seen:
+                    continue
+                seen.add(cid)
+                results.append({
+                    'part_number': sku,
+                    'manufacturer': sup,
+                    'name': cname,
+                    'type': 'cross_reference',
+                    'similarity': None,
+                    'catalog_id': cid,
+                    'local_stock': 0,
+                    'bodega_count': 0,
+                })
+                if len(results) >= limit:
+                    break
+
+    # ── 2. Semantic substitutes (same category, different wording) ─────────
+    if use_semantic and base_name and len(results) < limit:
+        pool_cat = base_cat
+        try:
+            if pool_cat:
+                cur.execute("""
+                    SELECT id, supplier_name, sku, name FROM supplier_catalog
+                    WHERE is_active = true AND category = %s AND id <> COALESCE(%s, -1)
+                    LIMIT %s
+                """, (pool_cat, base_id, semantic_pool))
+            else:
+                cur.execute("""
+                    SELECT id, supplier_name, sku, name FROM supplier_catalog
+                    WHERE is_active = true AND id <> COALESCE(%s, -1)
+                    LIMIT %s
+                """, (base_id, semantic_pool))
+            pool = [r for r in cur.fetchall() if r[0] not in seen]
+        except Exception:
+            pool = []
+
+        if pool:
+            try:
+                from services import semantic_search as ss
+                ranked = ss.find_similar(base_name, [r[3] for r in pool],
+                                         timeout=semantic_timeout)
+            except Exception:
+                ranked = None
+            if ranked:
+                for item in ranked:
+                    if item['similarity'] < semantic_threshold:
+                        continue
+                    cid, sup, sku, cname = pool[item['index']]
+                    if cid in seen:
+                        continue
+                    seen.add(cid)
+                    results.append({
+                        'part_number': sku,
+                        'manufacturer': sup,
+                        'name': cname,
+                        'type': 'semantic',
+                        'similarity': round(item['similarity'], 3),
+                        'catalog_id': cid,
+                        'local_stock': 0,
+                        'bodega_count': 0,
+                    })
+                    if len(results) >= limit:
+                        break
 
     return results
 
 
+def _get_alternatives(cur, part_id):
+    """Back-compat shim: alternatives for a supplier-catalog id.
+
+    The retired TecDoc tables (``part_cross_references`` / ``aftermarket_parts``)
+    are gone; this now delegates to ``_alternatives_from_supplier_catalog``.
+    """
+    return _alternatives_from_supplier_catalog(cur, catalog_id=part_id)
+
+
 # ─────────────────────────────────────────────────────────────────────────────
 # SMART SEARCH
 # ─────────────────────────────────────────────────────────────────────────────
@@ -1939,7 +2063,46 @@ def _search_meili_fallback(master_conn, q, limit):
         return None
 
 
-def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None, tenant_id=None):
+def _rerank_document(item):
+    """Texto con el que el reranker semántico evalúa un resultado."""
+    parts = [
+        item.get('name'),
+        item.get('oem_part_number'),
+        item.get('brand') or item.get('vehicle_info'),
+    ]
+    return ' '.join(str(p) for p in parts if p)
+
+
+def _apply_rerank(query, results, scope='pos'):
+    """Reordena ``results`` por relevancia semántica (QWEN /rerank).
+
+    Solo cambia el ORDEN: la paginación, el tope de ``limit`` y el filtrado por
+    vehículo/sucursal ya ocurrieron antes y quedan intactos.
+
+    Degradación obligatoria (``semantic_search.rerank`` nunca lanza): si el
+    rerank está apagado, sin configurar, tarda más que el timeout, falla o
+    devuelve un orden inconsistente, se conserva el orden original.
+    """
+    if not results or not scope:
+        return results
+    try:
+        from services import semantic_search as ss
+        if not ss.is_rerank_enabled(scope):
+            return results
+        head = results[:ss.max_candidates()]
+        order = ss.rerank_order(query, [_rerank_document(r) for r in head])
+        reordered = [head[i] for i in order if 0 <= i < len(head)]
+        if len(reordered) != len(head):
+            # Salvaguarda: un orden incompleto perdería items → orden original.
+            return results
+        return reordered + results[len(head):]
+    except Exception as e:
+        print(f"[catalog_service] rerank omitido: {e}")
+        return results
+
+
+def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None,
+                 tenant_id=None, rerank_scope='pos'):
     """Search parts by part number or text. Enriches with local stock.
 
     Strategy:
@@ -1947,6 +2110,9 @@ def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None,
     2. Fallback to PostgreSQL tsvector / ILIKE if Meilisearch is down
     3. Search local inventory items by part_number or name
     4. Always enriches results with local stock from tenant DB
+    5. Reordena los candidatos con rerank semántico según ``rerank_scope``
+       ('pos' por defecto = flag SEARCH_RERANK_POS_ENABLED, apagado; el
+       catálogo público/dashboard pasa 'catalog' → SEARCH_RERANK_ENABLED)
     """
     q = q.strip()
     if not q or len(q) < 2:
@@ -1974,6 +2140,7 @@ def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None,
                 'image_url': li['image_url'],
                 'local_stock': li['stock'],
                 'local_price': li['price_1'],
+                'brand': li.get('brand'),
                 'vehicle_info': '',
                 'source': 'local_inventory',
             })
@@ -1983,7 +2150,10 @@ def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None,
 
     # ── Inject supplier catalog items ───────────────────────────────────────
     if master_conn:
-        supplier_items = _search_supplier_catalog(master_conn, q, mye_id, limit, tenant_id=tenant_id)
+        # Meilisearch first (typo tolerance, sub-100ms); SQL fallback below.
+        supplier_items = _search_meili_supplier_catalog(q, limit)
+        if not supplier_items:
+            supplier_items = _search_supplier_catalog(master_conn, q, mye_id, limit, tenant_id=tenant_id)
         for si in supplier_items:
             if f"sc:{si['id']}" in seen_local_ids:
                 continue
@@ -2003,7 +2173,7 @@ def smart_search(master_conn, q, tenant_conn, branch_id, limit=50, mye_id=None,
             if len(results) >= limit:
                 break
 
-    return results
+    return _apply_rerank(q, results, rerank_scope)
 
 
 def _get_supplier_prices(master_conn, tenant_id, catalog_ids):
@@ -2027,6 +2197,33 @@ def _get_supplier_prices(master_conn, tenant_id, catalog_ids):
     return prices
 
 
+def _search_meili_supplier_catalog(q, limit):
+    """Typo-tolerant supplier catalog search via Meilisearch.
+
+    Returns [] on any failure so the SQL fallback always applies.
+    Result shape matches _search_supplier_catalog.
+    """
+    try:
+        import meilisearch
+        from services.meili_search import MEILI_URL, MEILI_API_KEY
+        client = meilisearch.Client(MEILI_URL, MEILI_API_KEY)
+        res = client.index('nexus_supplier_catalog').search(q, {'limit': limit})
+        out = []
+        for h in res.get('hits', []):
+            out.append({
+                'id': h['id'],
+                'sku': h.get('sku'),
+                'name': h.get('name'),
+                'image_url': h.get('image_url'),
+                'category': h.get('category'),
+                'supplier_price': h.get('supplier_price'),
+                'supplier_currency': None,
+            })
+        return out
+    except Exception:
+        return []
+
+
 def _search_supplier_catalog(master_conn, q, mye_id, limit, tenant_id=None):
     """Search supplier catalog items by SKU or name.
 
@@ -2092,13 +2289,181 @@ def _search_supplier_catalog(master_conn, q, mye_id, limit, tenant_id=None):
     return results
 
 
+def _tenant_db_name(tenant_conn):
+    """db_name de la BD del tenant a partir de su conexión (o None)."""
+    try:
+        return tenant_conn.info.dbname
+    except Exception:
+        return None
+
+
+def _meili_inventory_ids(db_name, q, limit):
+    """IDs de inventario que Meilisearch considera relevantes.
+
+    None ⇒ Meilisearch no disponible (usar SQL); [] ⇒ cero resultados.
+    """
+    try:
+        from services.meili_search import search_inventory
+    except Exception:
+        return None
+    hits = search_inventory(db_name, q, limit=limit)
+    if hits is None:
+        return None
+    return [h['id'] for h in hits if h.get('id') is not None]
+
+
+def _hydrate_inventory_rows(tenant_conn, ids, mye_id, branch_id):
+    """Trae stock/precio frescos de Postgres para los IDs que dio Meilisearch.
+
+    Respeta el filtro de vehículo/sucursal y conserva el orden de relevancia
+    de Meilisearch.
+    """
+    cur = tenant_conn.cursor()
+    try:
+        where_vehicle = ""
+        params = []
+        if mye_id:
+            where_vehicle = """ AND EXISTS (
+                SELECT 1 FROM inventory_vehicle_compat ivc
+                WHERE ivc.inventory_id = i.id AND ivc.model_year_engine_id = %s)"""
+        if branch_id:
+            if mye_id:
+                params = [branch_id, list(ids), mye_id]
+            else:
+                params = [branch_id, list(ids)]
+            cur.execute("""
+                SELECT i.id, i.part_number, i.name, i.image_url, i.price_1,
+                       i.brand, COALESCE(s.stock, 0) AS stock
+                FROM inventory i
+                LEFT JOIN inventory_stock_summary s
+                    ON s.inventory_id = i.id AND s.branch_id = %s
+                WHERE i.is_active = true AND i.id = ANY(%s)""" + where_vehicle, params)
+        else:
+            params = [list(ids), mye_id] if mye_id else [list(ids)]
+            cur.execute("""
+                SELECT i.id, i.part_number, i.name, i.image_url, i.price_1,
+                       i.brand, COALESCE(SUM(s.stock), 0) AS stock
+                FROM inventory i
+                LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id
+                WHERE i.is_active = true AND i.id = ANY(%s)""" + where_vehicle + """
+                GROUP BY i.id, i.part_number, i.name, i.image_url, i.price_1, i.brand""", params)
+        rows = cur.fetchall()
+    finally:
+        cur.close()
+
+    by_id = {r[0]: r for r in rows}
+    ordered = [by_id[i] for i in ids if i in by_id]
+    return [{
+        'inventory_id': r[0],
+        'part_number': r[1],
+        'name': r[2],
+        'image_url': r[3],
+        'price_1': float(r[4]) if r[4] is not None else None,
+        'brand': r[5],
+        'stock': int(r[6]) if r[6] is not None else 0,
+    } for r in ordered]
+
+
+def _search_inventory_by_alias(tenant_conn, q, mye_id, branch_id, limit):
+    """Inventory items whose SKU alias matches the query (A6 cross-refs).
+
+    ``inventory_sku_aliases`` holds 2-3 alternative supplier SKUs per item;
+    this lets a search by an alternate number find the product even when the
+    main part_number does not match.
+    """
+    clean_q = q.replace(' ', '').upper()
+    params = []
+    if branch_id:
+        stock_join = ("LEFT JOIN inventory_stock_summary s "
+                      "ON s.inventory_id = i.id AND s.branch_id = %s")
+        params.append(branch_id)
+    else:
+        stock_join = "LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id"
+    params.append(f'%{clean_q}%')
+    mye_clause = ""
+    if mye_id:
+        mye_clause = """ AND EXISTS (
+            SELECT 1 FROM inventory_vehicle_compat ivc
+            WHERE ivc.inventory_id = i.id AND ivc.model_year_engine_id = %s)"""
+        params.append(mye_id)
+    params.append(limit)
+
+    cur = tenant_conn.cursor()
+    try:
+        cur.execute(f"""
+            SELECT DISTINCT i.id, i.part_number, i.name, i.image_url,
+                   i.price_1, i.brand, COALESCE(s.stock, 0)
+            FROM inventory i
+            JOIN inventory_sku_aliases a
+              ON a.inventory_id = i.id AND a.is_active = true
+            {stock_join}
+            WHERE i.is_active = true
+              AND REPLACE(UPPER(a.sku), ' ', '') LIKE %s
+              {mye_clause}
+            ORDER BY i.name
+            LIMIT %s
+        """, params)
+        rows = cur.fetchall()
+    finally:
+        cur.close()
+    return [{
+        'inventory_id': r[0],
+        'part_number': r[1],
+        'name': r[2],
+        'image_url': r[3],
+        'price_1': float(r[4]) if r[4] is not None else None,
+        'brand': r[5],
+        'stock': int(r[6]) if r[6] is not None else 0,
+    } for r in rows]
+
+
+def _augment_with_aliases(tenant_conn, rows, q, mye_id, branch_id, limit):
+    """Append alias-borne matches to a result list, de-duplicated by id."""
+    try:
+        alias_rows = _search_inventory_by_alias(tenant_conn, q, mye_id, branch_id, limit)
+    except Exception:
+        try:
+            tenant_conn.rollback()
+        except Exception:
+            pass
+        return rows
+    if not alias_rows:
+        return rows
+    seen = {r['inventory_id'] for r in rows}
+    merged = list(rows)
+    for r in alias_rows:
+        if r['inventory_id'] not in seen:
+            merged.append(r)
+            seen.add(r['inventory_id'])
+    return merged[:limit]
+
+
 def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
     """Search tenant inventory items by part_number or name.
 
     If mye_id is provided, only returns items compatible with that vehicle.
+
+    Primero consulta Meilisearch (índice `nexus_inventory_<db>` del tenant) e
+    hidrata desde Postgres para tener stock/precio frescos. Si Meilisearch
+    está apagado, falla o no devuelve nada, cae al SQL de abajo (ILIKE).
+    En ambos caminos se añaden los items cuyo SKU alias (cross-ref) coincide.
     """
     if tenant_conn is None:
         return []
+    db_name = _tenant_db_name(tenant_conn)
+    if db_name:
+        ids = _meili_inventory_ids(db_name, q, limit)
+        if ids:
+            try:
+                rows = _hydrate_inventory_rows(tenant_conn, ids, mye_id, branch_id)
+            except Exception:
+                try:
+                    tenant_conn.rollback()
+                except Exception:
+                    pass
+                rows = []
+            if rows:
+                return _augment_with_aliases(tenant_conn, rows, q, mye_id, branch_id, limit)
     cur = tenant_conn.cursor()
     clean_q = q.replace(' ', '').upper()
 
@@ -2122,7 +2487,7 @@ def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
         if branch_id:
             cur.execute(f"""
                 SELECT i.id, i.part_number, i.name, i.image_url,
-                       i.price_1, COALESCE(s.stock, 0) as stock
+                       i.price_1, i.brand, COALESCE(s.stock, 0) as stock
                 FROM inventory i
                 JOIN inventory_vehicle_compat ivc ON ivc.inventory_id = i.id
                 LEFT JOIN inventory_stock_summary s
@@ -2137,7 +2502,7 @@ def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
         else:
             cur.execute(f"""
                 SELECT i.id, i.part_number, i.name, i.image_url,
-                       i.price_1, COALESCE(SUM(s.stock), 0) as stock
+                       i.price_1, i.brand, COALESCE(SUM(s.stock), 0) as stock
                 FROM inventory i
                 JOIN inventory_vehicle_compat ivc ON ivc.inventory_id = i.id
                 LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id
@@ -2145,7 +2510,7 @@ def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
                   AND i.is_active = true
                   AND (REPLACE(UPPER(i.part_number), ' ', '') LIKE %s
                        OR {_SQL_UNACCENT} LIKE %s)
-                GROUP BY i.id, i.part_number, i.name, i.image_url, i.price_1
+                GROUP BY i.id, i.part_number, i.name, i.image_url, i.price_1, i.brand
                 ORDER BY i.name
                 LIMIT %s
             """, (mye_id, f'%{clean_q}%', f'%{_q_unaccent}%', limit))
@@ -2154,7 +2519,7 @@ def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
         if branch_id:
             cur.execute(f"""
                 SELECT i.id, i.part_number, i.name, i.image_url,
-                       i.price_1, COALESCE(s.stock, 0) as stock
+                       i.price_1, i.brand, COALESCE(s.stock, 0) as stock
                 FROM inventory i
                 LEFT JOIN inventory_stock_summary s
                     ON s.inventory_id = i.id AND s.branch_id = %s
@@ -2167,30 +2532,32 @@ def _search_local_inventory(tenant_conn, q, mye_id, branch_id, limit):
         else:
             cur.execute(f"""
                 SELECT i.id, i.part_number, i.name, i.image_url,
-                       i.price_1, COALESCE(SUM(s.stock), 0) as stock
+                       i.price_1, i.brand, COALESCE(SUM(s.stock), 0) as stock
                 FROM inventory i
                 LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id
                 WHERE i.is_active = true
                   AND (REPLACE(UPPER(i.part_number), ' ', '') LIKE %s
                        OR {_SQL_UNACCENT} LIKE %s)
-                GROUP BY i.id, i.part_number, i.name, i.image_url, i.price_1
+                GROUP BY i.id, i.part_number, i.name, i.image_url, i.price_1, i.brand
                 ORDER BY i.name
                 LIMIT %s
             """, (f'%{clean_q}%', f'%{_q_unaccent}%', limit))
 
     rows = cur.fetchall()
     cur.close()
-    return [
+    results = [
         {
             'inventory_id': r[0],
             'part_number': r[1],
             'name': r[2],
             'image_url': r[3],
             'price_1': float(r[4]) if r[4] is not None else None,
-            'stock': int(r[5]) if r[5] is not None else 0,
+            'brand': r[5],
+            'stock': int(r[6]) if r[6] is not None else 0,
         }
         for r in rows
     ]
+    return _augment_with_aliases(tenant_conn, results, q, mye_id, branch_id, limit)
 
 
 # ─────────────────────────────────────────────────────────────────────────────
@@ -2332,11 +2699,50 @@ def get_bodega_availability(master_conn, part_id):
     ]
 
 
-def get_alternatives(master_conn, part_id):
-    """Public wrapper: get cross-references + aftermarket parts for a given OEM part."""
+def get_alternatives(master_conn, catalog_id=None, part_number=None, name=None,
+                     category=None, tenant_conn=None, branch_id=None, limit=20,
+                     use_semantic=True, semantic_threshold=0.72,
+                     semantic_timeout=20.0):
+    """Public wrapper: alternatives for a supplier-catalog item.
+
+    Rebuilt on the live tables (``supplier_catalog`` /
+    ``supplier_catalog_interchange``) + semantic substitutes; the retired
+    TecDoc ``aftermarket_parts`` / ``part_cross_references`` tables are no
+    longer queried.
+
+    Pass ``catalog_id`` (``supplier_catalog.id``, e.g. ``inventory.catalog_part_id``)
+    and/or ``part_number``.  When ``tenant_conn`` is given, each alternative is
+    enriched with local stock (``local_stock``) from that tenant.
+
+    NOTE: the dashboard endpoints that still serve the old TecDoc-based result
+    are ``dashboard/server.py`` ``/api/catalog/part/<id>`` (line ~1326),
+    ``/api/parts/<id>/alternatives`` (line ~1938) and
+    ``/api/parts/<id>/aftermarket`` (line ~4916); POS uses
+    ``GET /catalog/part/<id>`` (``blueprints/catalog_bp.py``) via
+    ``get_part_detail``.  Those call sites are owned by other workstreams.
+    """
     cur = master_conn.cursor()
-    results = _get_alternatives(cur, part_id)
-    cur.close()
+    try:
+        results = _alternatives_from_supplier_catalog(
+            cur, catalog_id=catalog_id, part_number=part_number, name=name,
+            category=category, limit=limit, use_semantic=use_semantic,
+            semantic_threshold=semantic_threshold,
+            semantic_timeout=semantic_timeout,
+        )
+    finally:
+        cur.close()
+
+    if tenant_conn is not None and results:
+        alt_pns = [a['part_number'] for a in results if a.get('part_number')]
+        alt_cids = [a['catalog_id'] for a in results if a.get('catalog_id')]
+        try:
+            local = _get_local_stock_bulk(tenant_conn, branch_id, alt_pns, alt_cids)
+        except Exception:
+            local = {}
+        for a in results:
+            l = local.get(a.get('part_number')) or local.get(f"cat:{a.get('catalog_id')}")
+            a['local_stock'] = l['stock'] if l else 0
+            a.setdefault('bodega_count', 0)
     return results
 
 
diff --git a/pos/services/cfdi_builder.py b/pos/services/cfdi_builder.py
index ac92b9f..fff7317 100644
--- a/pos/services/cfdi_builder.py
+++ b/pos/services/cfdi_builder.py
@@ -63,6 +63,28 @@ def _format_rate(val):
     return str(_to_dec(val).quantize(SIX, ROUND_HALF_UP))
 
 
+def _item_sat_keys(item):
+    """Return (clave_prod_serv, clave_unidad), falling back to SAT rules.
+
+    Precedence: the value carried by the sale item, then the rule engine over
+    the item name/brand/category (``services.sat_keys``), then the historic
+    hard-coded default.  Never raises, so a CFDI can always be built.
+    """
+    cps = item.get('clave_prod_serv')
+    cu = item.get('clave_unidad')
+    if cps and cu:
+        return cps, cu
+    try:
+        from services import sat_keys
+        k, u, _src = sat_keys.resolve_key(
+            name=item.get('name'), brand=item.get('brand'),
+            category=item.get('category'), part_number=item.get('part_number'),
+        )
+    except Exception:
+        k, u = None, None
+    return (cps or k or '25174800'), (cu or u or 'H87')
+
+
 def _make_element(parent, tag, attribs=None, ns=CFDI_NS):
     """Create a subelement with the given namespace."""
     elem = etree.SubElement(parent, f'{{{ns}}}{tag}')
@@ -83,6 +105,9 @@ def build_ingreso_xml(sale, tenant_config, customer=None):
             items: [{part_number, name, quantity, unit_price, discount_amount,
                      tax_rate, tax_amount, subtotal,
                      clave_prod_serv, clave_unidad}]
+            (clave_prod_serv / clave_unidad are optional: when absent they are
+             resolved by services.sat_keys rules over name/brand/category,
+             falling back to 25174800 / H87)
         tenant_config: dict with keys:
             rfc, razon_social, regimen_fiscal, cp (codigo postal),
             serie (optional), nombre_comercial (optional)
@@ -175,10 +200,10 @@ def build_ingreso_xml(sale, tenant_config, customer=None):
         base = (importe - discount_amount).quantize(TWO, ROUND_HALF_UP)
 
         concepto = _make_element(conceptos, 'Concepto')
-        concepto.set('ClaveProdServ', item.get('clave_prod_serv') or '25174800')
+        concepto.set('ClaveProdServ', _item_sat_keys(item)[0])
         concepto.set('NoIdentificacion', item.get('part_number') or '')
         concepto.set('Cantidad', str(qty))
-        concepto.set('ClaveUnidad', item.get('clave_unidad') or 'H87')
+        concepto.set('ClaveUnidad', _item_sat_keys(item)[1])
         concepto.set('Unidad', 'PZA')
         concepto.set('Descripcion', item.get('name') or 'Autoparte')
         concepto.set('ValorUnitario', _format_amount(unit_price))
@@ -301,10 +326,10 @@ def build_egreso_xml(sale, tenant_config, customer, original_uuid):
         base = (importe - discount_amount).quantize(TWO, ROUND_HALF_UP)
 
         concepto = _make_element(conceptos, 'Concepto')
-        concepto.set('ClaveProdServ', item.get('clave_prod_serv') or '25174800')
+        concepto.set('ClaveProdServ', _item_sat_keys(item)[0])
         concepto.set('NoIdentificacion', item.get('part_number') or '')
         concepto.set('Cantidad', str(qty))
-        concepto.set('ClaveUnidad', item.get('clave_unidad') or 'H87')
+        concepto.set('ClaveUnidad', _item_sat_keys(item)[1])
         concepto.set('Unidad', 'PZA')
         concepto.set('Descripcion', item.get('name') or 'Autoparte')
         concepto.set('ValorUnitario', _format_amount(unit_price))
@@ -556,10 +581,10 @@ def build_global_invoice_xml(sales, tenant_config, year, month):
             base = (importe - discount_amount).quantize(TWO, ROUND_HALF_UP)
 
             concepto = _make_element(conceptos, 'Concepto')
-            concepto.set('ClaveProdServ', item.get('clave_prod_serv') or '25174800')
+            concepto.set('ClaveProdServ', _item_sat_keys(item)[0])
             concepto.set('NoIdentificacion', item.get('part_number') or str(sale['id']))
             concepto.set('Cantidad', str(qty))
-            concepto.set('ClaveUnidad', item.get('clave_unidad') or 'H87')
+            concepto.set('ClaveUnidad', _item_sat_keys(item)[1])
             concepto.set('Unidad', 'PZA')
             concepto.set('Descripcion', item.get('name') or 'Autoparte')
             concepto.set('ValorUnitario', _format_amount(unit_price))
diff --git a/pos/services/cfdi_facturapi_builder.py b/pos/services/cfdi_facturapi_builder.py
index 844e6bc..e355fe0 100644
--- a/pos/services/cfdi_facturapi_builder.py
+++ b/pos/services/cfdi_facturapi_builder.py
@@ -69,6 +69,27 @@ def _resolve_metodo_pago(sale):
     return "PUE"
 
 
+def _item_sat_keys(item):
+    """Return (clave_prod_serv, clave_unidad) with SAT-rule fallback.
+
+    Precedence: sale-item value, then ``services.sat_keys`` rules over
+    name/brand/category, then the historic hard-coded default.  Never raises.
+    """
+    cps = item.get("clave_prod_serv")
+    cu = item.get("clave_unidad")
+    if cps and cu:
+        return cps, cu
+    try:
+        from services import sat_keys
+        k, u, _src = sat_keys.resolve_key(
+            name=item.get("name"), brand=item.get("brand"),
+            category=item.get("category"), part_number=item.get("part_number"),
+        )
+    except Exception:
+        k, u = None, None
+    return (cps or k or "25174800"), (cu or u or "H87")
+
+
 def _build_items(sale_items):
     items = []
     for item in sale_items or []:
@@ -76,12 +97,13 @@ def _build_items(sale_items):
         unit_price = _to_dec(item.get("unit_price", 0))
         discount = _to_dec(item.get("discount_amount", 0))
         tax_rate = _to_dec(item.get("tax_rate", "0.16"))
+        product_key, unit_key = _item_sat_keys(item)
 
         # Facturapi price is unit price before taxes and discounts
         product = {
             "description": item.get("name") or "Autoparte",
-            "product_key": item.get("clave_prod_serv") or "25174800",
-            "unit_key": item.get("clave_unidad") or "H87",
+            "product_key": product_key,
+            "unit_key": unit_key,
             "unit_name": "Pieza",
             "price": _fmt2(unit_price),
             "tax_included": False,
@@ -136,65 +158,91 @@ def build_ingreso_payload(sale, tenant_config, customer=None):
         "folio_number": sale["id"],
     }
 
-    # Optional exchange rate for USD
-    if sale.get("currency") and sale["currency"] != "MXN" and sale.get("exchange_rate"):
-        payload["exchange"] = _fmt6(sale["exchange_rate"])
-        payload["currency"] = sale["currency"]
+    # Optional currency/exchange rate for non-MXN sales
+    currency = (sale.get("currency") or "MXN").upper()
+    if currency != "MXN":
+        payload["currency"] = currency
+        if sale.get("exchange_rate"):
+            payload["exchange"] = _fmt6(sale["exchange_rate"])
 
     return payload
 
 
-def build_egreso_payload(sale, tenant_config, customer, original_uuid):
+def build_egreso_payload(sale, tenant_config, customer, original_uuid, folio_number=None, idempotency_key=None):
     """Build Facturapi payload for a credit note (Comprobante tipo Egreso)."""
     payload = build_ingreso_payload(sale, tenant_config, customer)
     payload["type"] = "E"
-    payload["related_documents"] = [{"relationship": "01", "documents": [original_uuid]}]
+    payload["use"] = "G02"  # Devoluciones, descuentos o bonificaciones
     payload["payment_method"] = "PUE"
+    payload["related_documents"] = [{"relationship": "01", "documents": original_uuid}]
+    if folio_number is not None:
+        payload["folio_number"] = folio_number
+    if idempotency_key:
+        payload["idempotency_key"] = idempotency_key
     return payload
 
 
-def build_pago_payload(payment, tenant_config, customer, original_uuid):
-    """Build Facturapi payload for a payment complement (Comprobante tipo Pago)."""
+def _normalize_payment_date(value):
+    """Return the ISO8601 datetime string Facturapi expects for a payment."""
+    if not value:
+        return datetime.now().strftime("%Y-%m-%dT%H:%M:%S")
+    text = str(value).replace(" ", "T")
+    if len(text) == 10:
+        return f"{text}T12:00:00"
+    return text[:19]
+
+
+def build_pago_payload(payment, tenant_config, customer, original_uuid, idempotency_key=None):
+    """Build Facturapi payload for a payment complement (Comprobante tipo Pago).
+
+    `complements[0].data` is a list of payments (Facturapi JS SDK v5 types),
+    each payment carrying its own related_documents with the installment number
+    and the previous balance of the linked PPD invoice.
+    """
     tenant_cp = tenant_config.get("cp", "00000")
     customer_payload = _build_customer_payload(customer, tenant_cp)
 
     amount = _to_dec(payment.get("amount", 0))
-    base = (amount / Decimal("1.16")).quantize(TWO, ROUND_HALF_UP)
-
-    payment_date = payment.get("date") or datetime.now().strftime("%Y-%m-%dT%H:%M:%S")
-    if "T" not in str(payment_date):
-        payment_date = f"{payment_date}T12:00:00"
+    rate = _to_dec(payment.get("tax_rate") or "0.16") or Decimal("0.16")
+    base = (amount / (Decimal("1") + rate)).quantize(TWO, ROUND_HALF_UP)
 
     forma_pago = FORMA_PAGO_MAP.get((payment.get("payment_method") or "").lower().strip(), "01")
 
     payload = {
         "type": "P",
         "customer": customer_payload,
+        "payment_form": forma_pago,
         "complements": [
             {
                 "type": "pago",
-                "data": {
-                    "payment_form": forma_pago,
-                    "payment_date": payment_date,
-                    "amount": _fmt2(amount),
-                    "related_documents": [
-                        {
-                            "uuid": original_uuid,
-                            "amount": _fmt2(amount),
-                            "taxes": [
-                                {
-                                    "type": "IVA",
-                                    "rate": 0.16,
-                                    "factor": "Tasa",
-                                    "base": _fmt2(base),
-                                }
-                            ],
-                        }
-                    ],
-                },
+                "data": [
+                    {
+                        "payment_form": forma_pago,
+                        "date": _normalize_payment_date(payment.get("date")),
+                        "related_documents": [
+                            {
+                                "uuid": original_uuid,
+                                "amount": _fmt2(amount),
+                                "installment": int(payment.get("installment") or 1),
+                                "last_balance": _fmt2(payment.get("last_balance") or 0),
+                                "taxes": [
+                                    {
+                                        "base": _fmt2(base),
+                                        "type": "IVA",
+                                        "rate": _fmt6(rate),
+                                        "factor": "Tasa",
+                                        "withholding": False,
+                                    }
+                                ],
+                            }
+                        ],
+                    }
+                ],
             }
         ],
     }
+    if idempotency_key:
+        payload["idempotency_key"] = idempotency_key
     return payload
 
 
diff --git a/pos/services/cfdi_queue.py b/pos/services/cfdi_queue.py
index 2f25f60..e9a5bf1 100644
--- a/pos/services/cfdi_queue.py
+++ b/pos/services/cfdi_queue.py
@@ -3,9 +3,11 @@
 
 Flow:
 1. enqueue_cfdi() — inserts Facturapi JSON payload into cfdi_queue with status='pending'
-2. process_queue() — sends pending items to Facturapi, updates status
-3. retry_failed() — retries failed items with exponential backoff
-4. cancel_cfdi() — cancels a stamped CFDI via Facturapi
+2. enqueue_pending_complements() — enqueues the missing payment complements
+   (CFDI type "P") of PPD invoices and the credit notes (type "E") of returns
+3. process_queue() — sends pending items to Facturapi, updates status
+4. retry_failed() — retries failed items with exponential backoff
+5. cancel_cfdi() — cancels a stamped CFDI via Facturapi
 
 Facturapi endpoints used:
     POST /v2/invoices       — create and stamp an invoice
@@ -17,9 +19,11 @@ Retry backoff: 5s, 30s, 2m, 10m, 1h (max 5 retries)
 
 import json
 import logging
-from datetime import datetime
+from datetime import datetime, timedelta, timezone
+from decimal import ROUND_HALF_UP, Decimal
 
 from services import facturapi_service
+from services.cfdi_facturapi_builder import build_egreso_payload, build_pago_payload
 
 logger = logging.getLogger(__name__)
 
@@ -27,6 +31,64 @@ logger = logging.getLogger(__name__)
 BACKOFF_INTERVALS = [5, 30, 120, 600, 3600]
 MAX_RETRIES = len(BACKOFF_INTERVALS)
 
+# Movements older than this window are only reconciled on explicit backfill.
+COMPLEMENT_LOOKBACK_DAYS = 7
+
+TWO = Decimal("0.01")
+
+
+
+
+def _send_cfdi_pdf_wa(conn, invoice_id_external, sale_id, tenant_config):
+    """Descarga el PDF timbrado y lo envía por WhatsApp al cliente (si tiene teléfono)."""
+    try:
+        from services import facturapi_service
+        cur = conn.cursor()
+        cur.execute("""
+            SELECT c.phone FROM sales s
+            JOIN customers c ON c.id = s.customer_id
+            WHERE s.id = %s
+        """, (sale_id,))
+        row = cur.fetchone()
+        cur.close()
+        if not row or not row[0]:
+            return
+        phone = row[0]
+
+        cur = conn.cursor()
+        cur.execute("SELECT key, value FROM tenant_config WHERE key LIKE 'whatsapp_%' OR key LIKE 'wa_%'")
+        raw = {k: v for k, v in cur.fetchall()}
+        cur.close()
+        cfg = {
+            'provider': raw.get('whatsapp_provider', 'baileys'),
+            'phone_number_id': raw.get('wa_phone_number_id', ''),
+            'access_token': raw.get('wa_access_token', ''),
+            'bridge_url': raw.get('whatsapp_bridge_url', ''),
+        }
+        # Solo enviar si hay proveedor configurado (Meta o Baileys con bridge)
+        if cfg['provider'] != 'meta' and not cfg['bridge_url']:
+            return
+
+        pdf_bytes = facturapi_service.download_pdf(tenant_config, invoice_id_external)
+        import base64 as _b64
+        b64 = _b64.b64encode(pdf_bytes).decode()
+        filename = f"CFDI_{sale_id}.pdf"
+
+        from services.whatsapp_service import wa_send_document
+        result = wa_send_document(cfg, phone, b64, filename,
+                                  caption="Adjuntamos tu factura CFDI. Gracias por tu compra.")
+        try:
+            from services.audit import log_action
+            log_action(conn, 'CFDI_PDF_SENT', 'sale', sale_id,
+                       new_value={'result': result, 'phone': phone})
+        except Exception:
+            pass
+    except Exception as e:
+        try:
+            logger.warning("PDF WA send failed for sale %s: %s", sale_id, e)
+        except Exception:
+            pass
+
 
 def _generate_provisional_folio(conn):
     """Generate a provisional folio like PRE-00001.
@@ -81,6 +143,340 @@ def enqueue_cfdi(conn, sale_id, cfdi_type, payload):
     }
 
 
+# ─── Payment complements (REP) and credit notes reconciliation ──────────────
+
+
+def _to_dec(val):
+    if val is None:
+        return Decimal("0")
+    return Decimal(str(val))
+
+
+def _payload_customer(payload):
+    """Adapt the receptor block of a stored CFDI payload to builder input."""
+    customer = payload.get("customer") or {}
+    tax_id = customer.get("tax_id")
+    if not tax_id:
+        return None
+    address = customer.get("address") or {}
+    return {
+        "rfc": tax_id,
+        "razon_social": customer.get("legal_name"),
+        "regimen_fiscal": customer.get("tax_system"),
+        "cp": address.get("zip"),
+    }
+
+
+def _pago_related_amounts(payload):
+    """Amounts of the related documents of a stored pago payload."""
+    amounts = []
+    for complement in payload.get("complements") or []:
+        data = complement.get("data")
+        blocks = data if isinstance(data, list) else [data]
+        for block in blocks:
+            if not isinstance(block, dict):
+                continue
+            for doc in block.get("related_documents") or []:
+                try:
+                    amounts.append(round(float(doc.get("amount") or 0), 2))
+                except (TypeError, ValueError):
+                    continue
+    return amounts
+
+
+def _items_signature(payload):
+    """Comparable signature of a payload's concepts (product key, qty, price)."""
+    signature = []
+    for item in payload.get("items") or []:
+        product = item.get("product") or {}
+        try:
+            signature.append(
+                (
+                    str(product.get("product_key") or ""),
+                    int(item.get("quantity") or 0),
+                    round(float(product.get("price") or 0), 2),
+                )
+            )
+        except (TypeError, ValueError):
+            continue
+    return tuple(sorted(signature))
+
+
+def _stored_signatures(cur, sale_id, cfdi_type):
+    """Signatures/amounts of the non-cancelled CFDIs of a sale, for dedupe."""
+    cur.execute(
+        """
+        SELECT payload_unsigned FROM cfdi_queue
+        WHERE sale_id = %s AND type = %s AND status <> 'cancelled'
+    """,
+        (sale_id, cfdi_type),
+    )
+    values = []
+    for (payload_unsigned,) in cur.fetchall():
+        try:
+            payload = json.loads(payload_unsigned or "{}")
+        except ValueError:
+            continue
+        if cfdi_type == "pago":
+            values.extend(_pago_related_amounts(payload))
+        else:
+            signature = _items_signature(payload)
+            if signature:
+                values.append(signature)
+    return values
+
+
+def _enqueue_pending_pagos(conn, cur, tenant_config, since_dt):
+    """Enqueue payment complements for every payment of a stamped PPD invoice."""
+    cur.execute(
+        """
+        SELECT q.sale_id, q.uuid_fiscal, q.payload_unsigned,
+               s.total, s.subtotal, s.discount_total, s.tax_total
+        FROM cfdi_queue q
+        JOIN sales s ON s.id = q.sale_id
+        WHERE q.type = 'ingreso' AND q.status = 'stamped'
+          AND q.uuid_fiscal IS NOT NULL AND q.sale_id IS NOT NULL
+          AND (%s::timestamptz IS NULL OR EXISTS (
+                SELECT 1 FROM sale_payments sp
+                WHERE sp.sale_id = q.sale_id
+                  AND sp.amount > 0
+                  AND sp.created_at >= %s))
+        ORDER BY q.sale_id
+    """,
+        (since_dt, since_dt),
+    )
+
+    created = []
+    for sale_id, original_uuid, payload_unsigned, total, subtotal, discount_total, tax_total in cur.fetchall():
+        try:
+            invoice_payload = json.loads(payload_unsigned or "{}")
+        except ValueError:
+            continue
+        if str(invoice_payload.get("payment_method") or "").upper() != "PPD":
+            continue
+
+        customer = _payload_customer(invoice_payload)
+        if not customer:
+            continue
+
+        cur.execute(
+            """
+            SELECT id, amount, method, created_at
+            FROM sale_payments
+            WHERE sale_id = %s AND amount > 0
+            ORDER BY id
+        """,
+            (sale_id,),
+        )
+        payments = cur.fetchall()
+        if not payments:
+            continue
+
+        already = _stored_signatures(cur, sale_id, "pago")
+
+        base_total = _to_dec(subtotal) - _to_dec(discount_total)
+        tax_rate = (_to_dec(tax_total) / base_total) if base_total > 0 else Decimal("0.16")
+
+        balance = _to_dec(total)
+        for installment, (payment_id, amount, method, created_at) in enumerate(payments, start=1):
+            paid = _to_dec(amount)
+            previous_balance = balance if balance > Decimal("0") else Decimal("0")
+            balance -= paid
+            if paid <= 0:
+                continue
+            if round(float(paid), 2) in already:
+                already.remove(round(float(paid), 2))
+                continue
+            if since_dt and created_at and created_at < since_dt:
+                continue
+
+            try:
+                payload = build_pago_payload(
+                    {
+                        "id": payment_id,
+                        "amount": paid,
+                        "payment_method": method,
+                        "date": created_at,
+                        "installment": installment,
+                        "last_balance": previous_balance,
+                        "tax_rate": tax_rate,
+                    },
+                    tenant_config,
+                    customer,
+                    original_uuid,
+                    idempotency_key=f"nexus-rep-{payment_id}",
+                )
+                queued = enqueue_cfdi(conn, sale_id, "pago", payload)
+            except Exception as e:
+                logger.warning("Could not enqueue payment complement for sale_payment %s: %s", payment_id, e)
+                continue
+
+            created.append(
+                {
+                    "cfdi_id": queued["id"],
+                    "sale_id": sale_id,
+                    "sale_payment_id": payment_id,
+                    "amount": float(paid),
+                    "installment": installment,
+                    "original_uuid": original_uuid,
+                }
+            )
+    return created
+
+
+def _enqueue_pending_egresos(conn, cur, tenant_config, since_dt):
+    """Enqueue credit notes (egreso) for returns of already stamped sales."""
+    cur.execute(
+        """
+        SELECT r.id, r.sale_id, r.created_at, s.currency, s.exchange_rate,
+               ing.uuid_fiscal, ing.payload_unsigned
+        FROM returns r
+        JOIN sales s ON s.id = r.sale_id
+        JOIN LATERAL (
+            SELECT q.uuid_fiscal, q.payload_unsigned
+            FROM cfdi_queue q
+            WHERE q.sale_id = r.sale_id AND q.type = 'ingreso'
+              AND q.status = 'stamped' AND q.uuid_fiscal IS NOT NULL
+            ORDER BY q.stamped_at DESC NULLS LAST, q.id DESC
+            LIMIT 1
+        ) ing ON TRUE
+        WHERE r.status = 'completed'
+          AND (%s::timestamptz IS NULL OR r.created_at >= %s)
+        ORDER BY r.id
+    """,
+        (since_dt, since_dt),
+    )
+
+    created = []
+    for return_id, sale_id, created_at, currency, exchange_rate, original_uuid, payload_unsigned in cur.fetchall():
+        if since_dt and created_at and created_at < since_dt:
+            continue
+
+        try:
+            invoice_payload = json.loads(payload_unsigned or "{}")
+        except ValueError:
+            invoice_payload = {}
+        customer = _payload_customer(invoice_payload)
+        if not customer:
+            continue
+
+        cur.execute(
+            """
+            SELECT si.part_number, si.name, ri.quantity, si.unit_price, si.discount_pct,
+                   si.tax_rate, si.clave_prod_serv, si.clave_unidad
+            FROM return_items ri
+            JOIN sale_items si ON si.id = ri.sale_item_id
+            WHERE ri.return_id = %s
+            ORDER BY ri.id
+        """,
+            (return_id,),
+        )
+        items = []
+        for part_number, name, quantity, unit_price, discount_pct, tax_rate, clave_prod, clave_unidad in cur.fetchall():
+            price = float(unit_price or 0)
+            items.append(
+                {
+                    "part_number": part_number,
+                    "name": name or part_number,
+                    "quantity": int(quantity or 0),
+                    "unit_price": price,
+                    "discount_amount": round(price * float(discount_pct or 0) / 100 * int(quantity or 0), 2),
+                    "tax_rate": float(tax_rate if tax_rate is not None else 0.16),
+                    "clave_prod_serv": clave_prod,
+                    "clave_unidad": clave_unidad,
+                }
+            )
+        if not items:
+            continue
+
+        try:
+            payload = build_egreso_payload(
+                {
+                    "id": sale_id,
+                    "items": items,
+                    "currency": currency,
+                    "exchange_rate": exchange_rate,
+                    "forma_pago_sat": invoice_payload.get("payment_form"),
+                },
+                tenant_config,
+                customer,
+                original_uuid,
+                folio_number=return_id,
+                idempotency_key=f"nexus-egreso-{return_id}",
+            )
+        except Exception as e:
+            logger.warning("Could not build credit note for return %s: %s", return_id, e)
+            continue
+
+        signature = _items_signature(payload)
+        already = _stored_signatures(cur, sale_id, "egreso")
+        if signature and signature in already:
+            already.remove(signature)
+            continue
+
+        try:
+            queued = enqueue_cfdi(conn, sale_id, "egreso", payload)
+        except Exception as e:
+            logger.warning("Could not enqueue credit note for return %s: %s", return_id, e)
+            continue
+
+        created.append(
+            {
+                "cfdi_id": queued["id"],
+                "sale_id": sale_id,
+                "return_id": return_id,
+                "original_uuid": original_uuid,
+            }
+        )
+    return created
+
+
+def enqueue_pending_complements(conn, tenant_config=None, since=None, backfill=False):
+    """Enqueue the missing payment complements and credit notes.
+
+    Every payment of a stamped PPD invoice gets a CFDI type "P" linked to the
+    original UUID, and every completed return of a stamped sale gets a CFDI
+    type "E". Idempotent: a movement that already has a non-cancelled CFDI of
+    the matching type/amount is skipped.
+
+    Args:
+        conn: psycopg2 connection
+        tenant_config: issuer config (only the default zip is used)
+        since: datetime or ISO string; reconcile movements created after it.
+            Defaults to COMPLEMENT_LOOKBACK_DAYS ago.
+        backfill: reconcile the whole history, ignoring `since`
+
+    Returns:
+        dict: {pagos: [...], egresos: [...], since: iso string}
+    """
+    if backfill:
+        since_dt = None
+    elif since:
+        if isinstance(since, datetime):
+            since_dt = since
+        else:
+            since_dt = datetime.fromisoformat(str(since))
+        if since_dt.tzinfo is None:
+            since_dt = since_dt.replace(tzinfo=timezone.utc)
+    else:
+        since_dt = datetime.now(timezone.utc) - timedelta(days=COMPLEMENT_LOOKBACK_DAYS)
+
+    tenant_config = tenant_config or {}
+    cur = conn.cursor()
+    result = {"pagos": [], "egresos": [], "since": str(since_dt) if since_dt else None}
+
+    for key, sweep in (("pagos", _enqueue_pending_pagos), ("egresos", _enqueue_pending_egresos)):
+        try:
+            result[key] = sweep(conn, cur, tenant_config, since_dt)
+        except Exception as e:
+            logger.warning("Could not reconcile %s complements: %s", key, e)
+            conn.rollback()
+
+    conn.commit()
+    cur.close()
+    return result
+
+
 def process_queue(conn, tenant_config, dry_run=False):
     """Process all pending CFDI items in the queue.
 
@@ -96,6 +492,15 @@ def process_queue(conn, tenant_config, dry_run=False):
     Returns:
         dict: {processed: int, stamped: int, failed: int, details: [...]}
     """
+    # First enqueue the complements (REP / credit notes) that are still missing,
+    # so they are stamped in this same run.
+    if not dry_run:
+        try:
+            enqueue_pending_complements(conn, tenant_config)
+        except Exception as e:
+            logger.warning("Complement reconciliation failed: %s", e)
+            conn.rollback()
+
     cur = conn.cursor()
 
     cur.execute(
@@ -164,10 +569,17 @@ def process_queue(conn, tenant_config, dry_run=False):
                     error_message = NULL
                 WHERE id = %s
             """,
-                (xml_signed_str, uuid_fiscal, invoice_id, cfdi_id),
+                    (xml_signed_str, uuid_fiscal, invoice_id, cfdi_id),
             )
             conn.commit()
 
+            # Enviar PDF por WhatsApp al cliente (best effort)
+            try:
+                if _sale_id:
+                    _send_cfdi_pdf_wa(conn, invoice_id, _sale_id, tenant_config)
+            except Exception:
+                pass
+
             results["stamped"] += 1
             results["details"].append(
                 {
diff --git a/pos/services/credit_scoring.py b/pos/services/credit_scoring.py
new file mode 100644
index 0000000..6b3a75a
--- /dev/null
+++ b/pos/services/credit_scoring.py
@@ -0,0 +1,463 @@
+"""Credit risk scoring for store credit ("fiado") — A9.
+
+Pure rule-based / heuristic scoring: no ML dependencies, works with very little
+history and stays conservative when evidence is scarce. Every point of the score
+is traceable to an explicit rule listed in ``reasons``.
+
+Public API:
+    score_customer(tenant_conn, customer_id) -> dict
+    is_enforcement_enabled(tenant_conn) -> bool
+
+The score is 0..100 where **higher is safer**. It is built from up to four
+independent signals, each 0..100, then combined with fixed weights over the
+signals that actually have data (missing signals are not invented):
+
+    tenure        0.15   months since customers.created_at
+    purchase      0.25   frequency + recency + value from sales
+    payment       0.35   punctuality on credit sales + open overdue aging
+    utilization   0.25   credit_balance / credit_limit
+
+Credit sales are assumed to be due 30 days after the sale, matching the
+receivables aging convention in ``blueprints/accounting_bp.py``.
+"""
+
+import logging
+from datetime import datetime, timedelta, timezone
+
+logger = logging.getLogger('pos')
+
+# Credit sale terms used across the app for receivables aging.
+CREDIT_TERMS_DAYS = 30
+
+# Weight of each signal in the combined score.
+_WEIGHTS = {
+    'tenure': 0.15,
+    'purchase': 0.25,
+    'payment': 0.35,
+    'utilization': 0.25,
+}
+
+_TIER_ORDER = {'risk': 0, 'medium': 1, 'good': 2}
+
+# Enforcement flag key in tenant_config. Off by default.
+ENFORCE_FLAG = 'credit_scoring_enforce'
+
+
+def _now():
+    return datetime.now(timezone.utc)
+
+
+def _aware(dt):
+    """Normalize a possibly-naive datetime to UTC-aware."""
+    if dt is None:
+        return None
+    if dt.tzinfo is None:
+        return dt.replace(tzinfo=timezone.utc)
+    return dt
+
+
+def _clamp(value, low=0, high=100):
+    return max(low, min(high, value))
+
+
+def is_enforcement_enabled(tenant_conn):
+    """Return True when the tenant opted into blocking credit sales for 'risk'.
+
+    Defaults to False on any error or missing flag so the sale flow never
+    breaks because of scoring.
+    """
+    try:
+        cur = tenant_conn.cursor()
+        cur.execute("SELECT value FROM tenant_config WHERE key = %s", (ENFORCE_FLAG,))
+        row = cur.fetchone()
+        cur.close()
+        if not row:
+            return False
+        return str(row[0]).strip().lower() in ('true', '1', 'yes', 'on')
+    except Exception as exc:  # pragma: no cover - defensive
+        logger.warning("credit_scoring: could not read enforce flag: %s", exc)
+        return False
+
+
+def _collect_evidence(cur, customer_id):
+    """Read every raw signal in a few queries. Returns a dict or None if the
+    customer does not exist."""
+    cur.execute("""
+        SELECT id, name, created_at, credit_limit, credit_balance,
+               price_tier, is_active
+        FROM customers WHERE id = %s
+    """, (customer_id,))
+    row = cur.fetchone()
+    if not row:
+        return None
+
+    ev = {
+        'customer_id': row[0],
+        'name': row[1],
+        'created_at': _aware(row[2]),
+        'credit_limit': float(row[3] or 0),
+        'credit_balance': float(row[4] or 0),
+        'price_tier': row[5],
+        'is_active': row[6],
+    }
+
+    # Completed sales aggregate (frequency / value / recency).
+    cur.execute("""
+        SELECT COUNT(*), COALESCE(SUM(total), 0), MIN(created_at),
+               MAX(created_at), COALESCE(AVG(total), 0),
+               COUNT(*) FILTER (WHERE sale_type = 'credit')
+        FROM sales
+        WHERE customer_id = %s AND status = 'completed'
+    """, (customer_id,))
+    total_orders, ltv, first_purchase, last_purchase, aov, credit_sales = cur.fetchone()
+    ev.update({
+        'total_orders': int(total_orders or 0),
+        'ltv': float(ltv or 0),
+        'first_purchase': _aware(first_purchase),
+        'last_purchase': _aware(last_purchase),
+        'avg_order_value': float(aov or 0),
+        'credit_sales': int(credit_sales or 0),
+    })
+
+    # Open (unpaid) credit sales: balance and due date for aging.
+    cur.execute("""
+        SELECT s.id, s.total, s.created_at,
+               s.total - COALESCE(SUM(sp.amount), 0) AS balance
+        FROM sales s
+        LEFT JOIN sale_payments sp ON sp.sale_id = s.id
+        WHERE s.customer_id = %s AND s.sale_type = 'credit' AND s.status = 'completed'
+        GROUP BY s.id, s.total, s.created_at
+        HAVING s.total - COALESCE(SUM(sp.amount), 0) > 0.005
+        ORDER BY s.created_at
+    """, (customer_id,))
+
+    now = _now()
+    open_sales = []
+    for sale_id, total, created_at, balance in cur.fetchall():
+        created_at = _aware(created_at)
+        due = created_at + timedelta(days=CREDIT_TERMS_DAYS) if created_at else None
+        overdue = max(0, (now - due).days) if due else 0
+        open_sales.append({
+            'sale_id': sale_id,
+            'total': float(total or 0),
+            'created_at': created_at,
+            'balance': float(balance or 0),
+            'due_date': due,
+            'days_overdue': overdue,
+        })
+    ev['open_sales'] = open_sales
+    ev['open_balance'] = round(sum(s['balance'] for s in open_sales), 2)
+    ev['max_overdue_days'] = max((s['days_overdue'] for s in open_sales), default=0)
+    ev['overdue_balance'] = round(
+        sum(s['balance'] for s in open_sales if s['days_overdue'] > 0), 2
+    )
+
+    # Aging buckets (by days overdue).
+    buckets = {'current': 0.0, 'd1_30': 0.0, 'd31_60': 0.0, 'd61_90': 0.0, 'd90_plus': 0.0}
+    for s in open_sales:
+        d = s['days_overdue']
+        if d == 0:
+            buckets['current'] += s['balance']
+        elif d <= 30:
+            buckets['d1_30'] += s['balance']
+        elif d <= 60:
+            buckets['d31_60'] += s['balance']
+        elif d <= 90:
+            buckets['d61_90'] += s['balance']
+        else:
+            buckets['d90_plus'] += s['balance']
+    ev['aging'] = {k: round(v, 2) for k, v in buckets.items()}
+
+    # Settled credit sales: was the final payment within terms?
+    cur.execute("""
+        SELECT s.created_at, MAX(sp.created_at) AS last_payment
+        FROM sales s
+        JOIN sale_payments sp ON sp.sale_id = s.id
+        WHERE s.customer_id = %s AND s.sale_type = 'credit' AND s.status = 'completed'
+        GROUP BY s.id, s.total, s.created_at
+        HAVING SUM(sp.amount) >= s.total - 0.005
+    """, (customer_id,))
+    settled = []
+    for created_at, last_payment in cur.fetchall():
+        created_at = _aware(created_at)
+        last_payment = _aware(last_payment)
+        if not created_at or not last_payment:
+            continue
+        due = created_at + timedelta(days=CREDIT_TERMS_DAYS)
+        settled.append({'days_late': max(0, (last_payment - due).days)})
+    ev['settled_credit_sales'] = settled
+
+    # Direct customer payments (abonos) — extra evidence of engagement.
+    cur.execute("""
+        SELECT COUNT(*), COALESCE(SUM(amount), 0), MAX(created_at)
+        FROM customer_payments WHERE customer_id = %s
+    """, (customer_id,))
+    cp_count, cp_total, cp_last = cur.fetchone()
+    ev.update({
+        'customer_payments_count': int(cp_count or 0),
+        'customer_payments_total': float(cp_total or 0),
+        'customer_payments_last': _aware(cp_last),
+    })
+
+    return ev
+
+
+# ─── Signal scoring ─────────────────────────────────────
+
+def _tenure_signal(ev, reasons):
+    created_at = ev['created_at']
+    if not created_at:
+        return None
+    days = max(0, (_now() - created_at).days)
+    months = days / 30.44
+    if months < 3:
+        score = 45
+    elif months < 6:
+        score = 60
+    elif months < 12:
+        score = 75
+    elif months < 24:
+        score = 85
+    else:
+        score = 95
+    reasons.append(f"Cliente con {int(months)} meses de antigüedad ({days} días).")
+    if ev.get('is_active') is False:
+        score = min(score, 40)
+        reasons.append("Cliente marcado como inactivo.")
+    return score
+
+
+def _purchase_signal(ev, reasons):
+    total_orders = ev['total_orders']
+    if total_orders <= 0:
+        reasons.append("Sin historial de compras registrado.")
+        return None
+
+    if total_orders == 1:
+        freq = 50
+    elif total_orders <= 3:
+        freq = 65
+    elif total_orders <= 9:
+        freq = 80
+    elif total_orders <= 24:
+        freq = 90
+    else:
+        freq = 95
+
+    last = ev['last_purchase']
+    days_since = (_now() - last).days if last else None
+    if days_since is None:
+        recency = 60
+    elif days_since <= 30:
+        recency = 100
+    elif days_since <= 90:
+        recency = 80
+    elif days_since <= 180:
+        recency = 60
+    elif days_since <= 365:
+        recency = 40
+    else:
+        recency = 25
+
+    score = round(0.6 * freq + 0.4 * recency)
+    reasons.append(
+        f"{total_orders} compras por ${ev['ltv']:.2f} "
+        f"(ticket promedio ${ev['avg_order_value']:.2f}), "
+        f"última hace {days_since} días."
+        if days_since is not None else
+        f"{total_orders} compras por ${ev['ltv']:.2f}."
+    )
+    return _clamp(score)
+
+
+def _payment_signal(ev, reasons):
+    has_history = (
+        ev['credit_sales'] > 0
+        or ev['open_balance'] > 0
+        or ev['customer_payments_count'] > 0
+    )
+    if not has_history:
+        reasons.append("Sin historial de crédito ni abonos.")
+        return None
+
+    settled = ev['settled_credit_sales']
+    if settled:
+        on_time = sum(1 for s in settled if s['days_late'] <= 0)
+        late_ratio = (len(settled) - on_time) / len(settled)
+        base = 90 - 60 * late_ratio
+        reasons.append(
+            f"{on_time}/{len(settled)} créditos liquidados dentro del plazo de "
+            f"{CREDIT_TERMS_DAYS} días."
+        )
+    else:
+        base = 70 if ev['credit_sales'] > 0 or ev['open_balance'] > 0 else 75
+        reasons.append("Sin créditos liquidados aún; sin historial de puntualidad.")
+
+    max_overdue = ev['max_overdue_days']
+    if max_overdue > 0:
+        penalty = min(55.0, 15.0 + max_overdue * 0.5)
+        base -= penalty
+        reasons.append(
+            f"Mora abierta: ${ev['overdue_balance']:.2f} con hasta {max_overdue} "
+            f"días de atraso."
+        )
+
+    if ev['credit_limit'] > 0:
+        util = ev['credit_balance'] / ev['credit_limit']
+        if util > 1.0:
+            base -= 15
+            reasons.append(f"Crédito excedido ({util * 100:.0f}% del límite).")
+        elif util > 0.9:
+            base -= 8
+            reasons.append(f"Crédito casi al límite ({util * 100:.0f}%).")
+
+    return _clamp(round(base))
+
+
+def _utilization_signal(ev, reasons):
+    limit = ev['credit_limit']
+    balance = ev['credit_balance']
+    if limit <= 0:
+        if balance > 0:
+            reasons.append(f"Saldo de ${balance:.2f} sin límite de crédito definido.")
+            return 45
+        return None
+
+    util = balance / limit
+    if util <= 0.001:
+        score = 100
+    elif util <= 0.3:
+        score = 95
+    elif util <= 0.6:
+        score = 80
+    elif util <= 0.9:
+        score = 60
+    elif util <= 1.0:
+        score = 40
+    else:
+        score = 15
+    reasons.append(f"Utilización de crédito {util * 100:.0f}% (${balance:.2f} / ${limit:.2f}).")
+    return score
+
+
+def _tier_from_score(score, data_points, max_overdue_days, behavioral_evidence):
+    if max_overdue_days > 60:
+        return 'risk'
+    if score >= 75 and data_points >= 2 and behavioral_evidence:
+        tier = 'good'
+    elif score >= 50:
+        tier = 'medium'
+    else:
+        tier = 'risk'
+    # Conservative when mora is building or evidence is thin.
+    if max_overdue_days > 30 and _TIER_ORDER[tier] > _TIER_ORDER['medium']:
+        tier = 'medium'
+    if not behavioral_evidence and _TIER_ORDER[tier] > _TIER_ORDER['medium']:
+        tier = 'medium'
+    if data_points <= 1 and _TIER_ORDER[tier] > _TIER_ORDER['medium']:
+        tier = 'medium'
+    return tier
+
+
+def _recommended_limit(tier, ev):
+    if ev['total_orders'] <= 0:
+        return 0.0
+    aov = ev['avg_order_value'] or (ev['ltv'] / ev['total_orders'])
+    if tier == 'good':
+        factor = 4.0
+    elif tier == 'medium':
+        factor = 2.0
+    else:
+        return 0.0  # risk: do not recommend extending new credit
+    suggested = aov * factor
+    suggested = round(suggested / 100.0) * 100.0
+    return float(min(suggested, 200000.0))
+
+
+def score_customer(tenant_conn, customer_id):
+    """Score a customer's credit risk.
+
+    Returns a dict::
+
+        {
+          'score': 0..100,             # higher = safer
+          'tier': 'good'|'medium'|'risk',
+          'recommended_limit': float,
+          'reasons': [str, ...],
+          'data_points': int,          # number of signals with real data (0..4)
+          'components': {...},         # per-signal sub-scores (None when absent)
+          'metrics': {...},            # raw evidence for auditing
+          'computed_at': iso8601 str,
+        }
+
+    Raises ValueError if the customer does not exist.
+    """
+    cur = tenant_conn.cursor()
+    try:
+        ev = _collect_evidence(cur, customer_id)
+    finally:
+        cur.close()
+
+    if ev is None:
+        raise ValueError(f"Customer {customer_id} not found")
+
+    reasons = []
+    components = {
+        'tenure': _tenure_signal(ev, reasons),
+        'purchase': _purchase_signal(ev, reasons),
+        'payment': _payment_signal(ev, reasons),
+        'utilization': _utilization_signal(ev, reasons),
+    }
+
+    available = {k: v for k, v in components.items() if v is not None}
+    data_points = len(available)
+
+    if available:
+        weight_sum = sum(_WEIGHTS[k] for k in available)
+        score = sum(available[k] * _WEIGHTS[k] for k in available) / weight_sum
+    else:
+        score = 50.0
+    score = int(round(_clamp(score)))
+
+    behavioral = components['purchase'] is not None or components['payment'] is not None
+
+    # Hard cap: heavy mora can never yield a high score.
+    if ev['max_overdue_days'] > 60:
+        score = min(score, 39)
+    elif ev['max_overdue_days'] > 30:
+        score = min(score, 60)
+
+    tier = _tier_from_score(score, data_points, ev['max_overdue_days'], behavioral)
+    recommended = _recommended_limit(tier, ev)
+
+    if data_points <= 1:
+        reasons.append(
+            f"Pocos datos ({data_points} señal{'es' if data_points != 1 else ''}); "
+            "evaluación conservadora."
+        )
+
+    return {
+        'customer_id': customer_id,
+        'score': score,
+        'tier': tier,
+        'recommended_limit': recommended,
+        'reasons': reasons,
+        'data_points': data_points,
+        'components': components,
+        'metrics': {
+            'months_active': round((_now() - ev['created_at']).days / 30.44, 1) if ev['created_at'] else None,
+            'total_orders': ev['total_orders'],
+            'ltv': round(ev['ltv'], 2),
+            'avg_order_value': round(ev['avg_order_value'], 2),
+            'days_since_last_purchase': (_now() - ev['last_purchase']).days if ev['last_purchase'] else None,
+            'credit_limit': ev['credit_limit'],
+            'credit_balance': ev['credit_balance'],
+            'open_credit_balance': ev['open_balance'],
+            'max_overdue_days': ev['max_overdue_days'],
+            'overdue_balance': ev['overdue_balance'],
+            'aging': ev['aging'],
+            'credit_sales': ev['credit_sales'],
+            'settled_credit_sales': len(ev['settled_credit_sales']),
+        },
+        'computed_at': _now().isoformat(),
+    }
diff --git a/pos/services/crm_engine.py b/pos/services/crm_engine.py
index 91d3984..d7ab5e2 100644
--- a/pos/services/crm_engine.py
+++ b/pos/services/crm_engine.py
@@ -7,7 +7,16 @@ Provides:
 - Customer analytics (LTV, frequency, churn risk)
 """
 
-from datetime import datetime, timedelta
+from datetime import datetime, timedelta, timezone
+
+
+def _aware(dt):
+    """Normalize a possibly-naive datetime (psycopg2 may return either) to UTC."""
+    if dt is None:
+        return None
+    if dt.tzinfo is None:
+        return dt.replace(tzinfo=timezone.utc)
+    return dt
 
 
 # ─── Customer Activities ─────────────────────────────
@@ -302,11 +311,15 @@ def get_customer_analytics(conn, customer_id):
         WHERE customer_id = %s AND status = 'completed'
     """, (customer_id,))
     ltv, total_orders, first_purchase, last_purchase, aov = cur.fetchone()
+    first_purchase = _aware(first_purchase)
+    last_purchase = _aware(last_purchase)
+
+    now = datetime.now(timezone.utc)
 
     # Days since last purchase
     days_since_last = None
     if last_purchase:
-        days_since_last = (datetime.utcnow() - last_purchase).days
+        days_since_last = (now - last_purchase).days
 
     # Purchase frequency (orders per month)
     frequency = 0.0
@@ -314,13 +327,69 @@ def get_customer_analytics(conn, customer_id):
         months = max(1, (last_purchase - first_purchase).days / 30.0)
         frequency = round(total_orders / months, 2)
 
-    # Churn risk: no purchase in 90+ days = high, 60-90 = medium, <60 = low
-    churn_risk = 'low'
-    if days_since_last is not None:
-        if days_since_last > 90:
+    # Real inter-purchase interval per customer (A12). Uses the gaps between
+    # consecutive completed sales instead of fixed 60/90-day thresholds.
+    cur.execute("""
+        SELECT created_at FROM sales
+        WHERE customer_id = %s AND status = 'completed'
+        ORDER BY created_at
+    """, (customer_id,))
+    purchase_dates = [_aware(r[0]) for r in cur.fetchall() if r[0] is not None]
+    intervals = [
+        (purchase_dates[i] - purchase_dates[i - 1]).days
+        for i in range(1, len(purchase_dates))
+    ]
+    intervals = [d for d in intervals if d >= 0]
+    avg_interval = round(sum(intervals) / len(intervals), 1) if intervals else None
+
+    # Next-purchase prediction + churn probability.
+    predicted_next_purchase_date = None
+    days_until_next_purchase = None
+    churn_probability = 0.0
+    churn_reason = ''
+    if avg_interval and last_purchase and avg_interval > 0:
+        predicted = last_purchase + timedelta(days=round(avg_interval))
+        predicted_next_purchase_date = predicted
+        days_until_next_purchase = (predicted - now).days
+        # How many of its own typical cycles the customer has been silent.
+        ratio = (days_since_last or 0) / max(float(avg_interval), 1.0)
+        if ratio > 2.0:
             churn_risk = 'high'
+            churn_probability = 0.9
+            churn_reason = (f"Lleva {days_since_last} días sin comprar, más de 2× "
+                            f"su intervalo habitual ({avg_interval:.0f} días).")
+        elif ratio > 1.5:
+            churn_risk = 'high'
+            churn_probability = 0.7
+            churn_reason = (f"Rebasó 1.5× su intervalo habitual de compra "
+                            f"({avg_interval:.0f} días).")
+        elif ratio > 1.0:
+            churn_risk = 'medium'
+            churn_probability = 0.4
+            churn_reason = f"Ya superó su intervalo habitual de compra ({avg_interval:.0f} días)."
+        else:
+            churn_risk = 'low'
+            churn_probability = 0.15
+            churn_reason = f"Dentro de su intervalo habitual de compra ({avg_interval:.0f} días)."
+    else:
+        # Fewer than two purchases: not enough history for a cadence. Fall back
+        # to the legacy fixed thresholds but report that we lacked data.
+        if days_since_last is None:
+            churn_risk = 'low'
+            churn_probability = 0.0
+            churn_reason = 'Sin compras registradas.'
+        elif days_since_last > 90:
+            churn_risk = 'high'
+            churn_probability = 0.75
+            churn_reason = f"Sin compras desde hace {days_since_last} días."
         elif days_since_last > 60:
             churn_risk = 'medium'
+            churn_probability = 0.45
+            churn_reason = f"Sin compras desde hace {days_since_last} días."
+        else:
+            churn_risk = 'low'
+            churn_probability = 0.15
+            churn_reason = f"Compra reciente (hace {days_since_last} días)."
 
     # Favorite categories (from inventory via sale_items)
     cur.execute("""
@@ -362,6 +431,15 @@ def get_customer_analytics(conn, customer_id):
         'days_since_last_purchase': days_since_last,
         'purchase_frequency_monthly': frequency,
         'churn_risk': churn_risk,
+        # A12 additions: real inter-purchase cadence + prediction.
+        'avg_days_between_purchases': avg_interval,
+        'purchase_intervals_count': len(intervals),
+        'predicted_next_purchase_date': (
+            predicted_next_purchase_date.isoformat() if predicted_next_purchase_date else None
+        ),
+        'days_until_next_purchase': days_until_next_purchase,
+        'churn_probability': churn_probability,
+        'churn_reason': churn_reason,
         'favorite_categories': categories,
         'loyalty': {
             'points_balance': loyalty_balance,
diff --git a/pos/services/cross_sell.py b/pos/services/cross_sell.py
new file mode 100644
index 0000000..cdde350
--- /dev/null
+++ b/pos/services/cross_sell.py
@@ -0,0 +1,233 @@
+"""Cross-sell recommendations for the POS cart ("esto + esto").
+
+Given the inventory_ids already in the cart, suggest complementary parts
+from two independent sources, merged and ranked:
+
+  1. Curated part kits — ``services.part_kits.KIT_SUGGESTIONS`` (Spanish
+     aftermarket knowledge; works from day one, no sales data required).
+  2. Real co-occurrence — inventory items that historically appear in the
+     same ``sale_id`` as one of the cart items (learns from actual sales).
+
+Items that already have stock are preferred, and items already in the cart
+are never suggested.
+
+Public API:
+    get_cross_sell(conn, inventory_ids, limit=5) -> list[dict]
+"""
+
+from services.part_kits import get_kit_suggestions
+
+# Same accent-stripping used by catalog_service so that "Batería" in the
+# inventory matches the unaccented keywords in KIT_SUGGESTIONS.
+_ACCENTS = [
+    ('Á', 'A'), ('É', 'E'), ('Í', 'I'), ('Ó', 'O'), ('Ú', 'U'),
+    ('À', 'A'), ('È', 'E'), ('Ì', 'I'), ('Ò', 'O'), ('Ù', 'U'),
+    ('Ä', 'A'), ('Ë', 'E'), ('Ï', 'I'), ('Ö', 'O'), ('Ü', 'U'), ('Ñ', 'N'),
+]
+
+# Ranking weights: stock first (a suggestion you cannot sell is useless),
+# then source (real co-occurrence beats the curated kit), then evidence.
+_W_STOCK = 1000
+_W_COOC = 100
+_W_KIT = 50
+_W_FREQ = 10
+
+
+def _norm_text(value):
+    """Upper-case and strip accents for keyword comparison."""
+    text = (value or '').upper()
+    for a, b in _ACCENTS:
+        text = text.replace(a, b)
+    return text
+
+
+def _norm_expr(column):
+    """SQL expression that upper-cases and strips accents from a column."""
+    expr = f"UPPER({column})"
+    for a, b in _ACCENTS:
+        expr = f"REPLACE({expr}, '{a}', '{b}')"
+    return expr
+
+
+def _cart_items(conn, inventory_ids):
+    """Load the cart items (id, name) so we can derive kit keywords."""
+    cur = conn.cursor()
+    try:
+        cur.execute(
+            "SELECT id, part_number, name FROM inventory WHERE id = ANY(%s)",
+            (list(inventory_ids),),
+        )
+        return cur.fetchall()
+    finally:
+        cur.close()
+
+
+def _kit_candidates(conn, cart_items, exclude_ids, limit):
+    """Inventory rows whose name matches a curated kit keyword.
+
+    Returns list of (inventory_id, part_number, name, price, stock, reason).
+    """
+    keyword_sources = {}
+    patterns = []
+    for _inv_id, _pn, name in cart_items:
+        for keyword in get_kit_suggestions(name):
+            norm = _norm_text(keyword)
+            if not norm or norm in keyword_sources:
+                continue
+            keyword_sources[norm] = (name, keyword)
+            patterns.append(f'%{norm}%')
+    if not patterns:
+        return []
+
+    name_expr = _norm_expr('i.name')
+    sql = f"""
+        SELECT DISTINCT ON (i.id)
+               i.id, i.part_number, i.name, i.price_1,
+               COALESCE(s.stock, 0) AS stock, {name_expr} AS name_norm
+        FROM inventory i
+        LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id
+        WHERE i.is_active = true
+          AND i.id <> ALL(%s)
+          AND {name_expr} LIKE ANY(%s)
+        ORDER BY i.id, i.name
+        LIMIT %s
+    """
+    cur = conn.cursor()
+    try:
+        cur.execute(sql, (list(exclude_ids), patterns, limit * 4))
+        rows = cur.fetchall()
+    finally:
+        cur.close()
+
+    out = []
+    for inv_id, part_number, name, price, stock, name_norm in rows:
+        source_name, keyword = None, None
+        for norm, (src, kw) in keyword_sources.items():
+            if norm in (name_norm or ''):
+                source_name, keyword = src, kw
+                break
+        if source_name is None:
+            continue
+        out.append((inv_id, part_number, name, price, stock,
+                    f"Complemento habitual de {source_name} ({keyword})"))
+    return out
+
+
+def _cooccurrence_candidates(conn, inventory_ids, exclude_ids, limit):
+    """Inventory items historically sold in the same sale as a cart item.
+
+    Returns list of (inventory_id, part_number, name, price, stock, freq, paired_with).
+    """
+    cur = conn.cursor()
+    try:
+        cur.execute("""
+            SELECT si2.inventory_id,
+                   COUNT(DISTINCT si2.sale_id) AS freq,
+                   MIN(si1.name) AS paired_with
+            FROM sale_items si1
+            JOIN sale_items si2
+              ON si2.sale_id = si1.sale_id
+             AND si2.inventory_id IS NOT NULL
+             AND si2.inventory_id <> ALL(%s)
+            WHERE si1.inventory_id = ANY(%s)
+            GROUP BY si2.inventory_id
+            ORDER BY freq DESC, si2.inventory_id
+            LIMIT %s
+        """, (list(exclude_ids), list(inventory_ids), limit * 4))
+        pairs = cur.fetchall()
+        if not pairs:
+            return []
+
+        ids = [r[0] for r in pairs]
+        cur.execute("""
+            SELECT i.id, i.part_number, i.name, i.price_1,
+                   COALESCE(s.stock, 0) AS stock
+            FROM inventory i
+            LEFT JOIN inventory_stock_summary s ON s.inventory_id = i.id
+            WHERE i.is_active = true AND i.id = ANY(%s)
+        """, (ids,))
+        by_id = {r[0]: r for r in cur.fetchall()}
+    finally:
+        cur.close()
+
+    out = []
+    for inv_id, freq, paired_with in pairs:
+        row = by_id.get(inv_id)
+        if not row:
+            continue
+        _rid, part_number, name, price, stock = row
+        out.append((inv_id, part_number, name, price, stock, freq, paired_with))
+    return out
+
+
+def get_cross_sell(conn, inventory_ids, limit=5):
+    """Suggest complementary parts for the given cart contents.
+
+    Args:
+        conn: psycopg2 connection to the tenant DB.
+        inventory_ids: iterable of inventory ids currently in the cart.
+        limit: max number of suggestions.
+
+    Returns:
+        list of dicts: {inventory_id, name, part_number, price, reason, stock, source}
+    """
+    try:
+        cart_ids = [int(i) for i in (inventory_ids or [])]
+    except (TypeError, ValueError):
+        cart_ids = []
+    cart_ids = list(dict.fromkeys(cart_ids))[:50]
+    if not cart_ids:
+        return []
+
+    scored = {}  # inventory_id -> dict with score + payload
+
+    try:
+        cart_items = _cart_items(conn, cart_ids)
+    except Exception:
+        conn.rollback()
+        return []
+
+    # 1. Co-occurrence (real sales) — highest evidence weight.
+    try:
+        for inv_id, part_number, name, price, stock, freq, paired_with in \
+                _cooccurrence_candidates(conn, cart_ids, cart_ids, limit):
+            score = (stock > 0) * _W_STOCK + _W_COOC + min(freq, 5) * _W_FREQ
+            scored[inv_id] = {
+                'inventory_id': inv_id,
+                'name': name,
+                'part_number': part_number,
+                'price': float(price) if price is not None else None,
+                'stock': int(stock or 0),
+                'reason': f"Suele venderse con {paired_with or 'este artículo'}",
+                'source': 'cooccurrence',
+                '_score': score,
+            }
+    except Exception:
+        conn.rollback()
+
+    # 2. Curated kits — fill in whatever co-occurrence did not cover.
+    try:
+        for inv_id, part_number, name, price, stock, reason in \
+                _kit_candidates(conn, cart_items, cart_ids, limit):
+            score = (stock > 0) * _W_STOCK + _W_KIT
+            if inv_id in scored:
+                # Already suggested by real sales: bump evidence, keep reason.
+                scored[inv_id]['_score'] += _W_KIT
+                continue
+            scored[inv_id] = {
+                'inventory_id': inv_id,
+                'name': name,
+                'part_number': part_number,
+                'price': float(price) if price is not None else None,
+                'stock': int(stock or 0),
+                'reason': reason,
+                'source': 'kit',
+                '_score': score,
+            }
+    except Exception:
+        conn.rollback()
+
+    ordered = sorted(scored.values(), key=lambda d: d['_score'], reverse=True)
+    for item in ordered:
+        item.pop('_score', None)
+    return ordered[:max(1, limit)]
diff --git a/pos/services/facturapi_service.py b/pos/services/facturapi_service.py
index 8d29181..93abe67 100644
--- a/pos/services/facturapi_service.py
+++ b/pos/services/facturapi_service.py
@@ -108,6 +108,18 @@ def _get_user_key() -> str | None:
     return USER_KEY.strip() or None
 
 
+def _find_user_key(tenant_config: dict) -> str | None:
+    """Return the Facturapi user key (env or sk_user_* tenant key), if any."""
+    user_key = _get_user_key()
+    if user_key:
+        return user_key
+    for key in ("facturapi_key", "cfdi_facturapi_key"):
+        tenant_key = (tenant_config.get(key) or "").strip()
+        if tenant_key.startswith("sk_user_"):
+            return tenant_key
+    return None
+
+
 def _is_user_key_mode(tenant_config: dict) -> bool:
     return bool(_get_user_key()) and not _get_secret_key(tenant_config)
 
@@ -138,7 +150,9 @@ def get_organization(org_id: str, api_key: str) -> dict:
 def upload_csd(tenant_config: dict, cer_b64: str, key_b64: str, password: str) -> dict:
     """Upload CSD (Certificado de Sello Digital) to Facturapi.
 
-    cer_b64 and key_b64 are base64-encoded strings.
+    cer_b64 and key_b64 are base64-encoded strings. Uses the documented
+    PUT /organizations/{id}/certificate endpoint with the `cer`, `key` and
+    `password` multipart fields.
     """
     api_key = get_api_key(tenant_config)
     org_id = _get_org_id(tenant_config)
@@ -150,11 +164,11 @@ def upload_csd(tenant_config: dict, cer_b64: str, key_b64: str, password: str) -
 
     url = f"{BASE_URL}/organizations/{org_id}/certificate"
     files = {
-        "certificate": ("certificate.cer", cer_bytes, "application/octet-stream"),
-        "private_key": ("private_key.key", key_bytes, "application/octet-stream"),
-        "secret": (None, password),
+        "cer": ("certificate.cer", cer_bytes, "application/octet-stream"),
+        "key": ("private_key.key", key_bytes, "application/octet-stream"),
+        "password": (None, password),
     }
-    resp = requests.post(url, auth=(api_key, ""), files=files, timeout=60)
+    resp = requests.put(url, auth=(api_key, ""), files=files, timeout=60)
     if not resp.ok:
         raise FacturapiError(
             f"CSD upload failed: {resp.status_code} {resp.text[:500]}",
@@ -170,13 +184,9 @@ def _get_user_key_for_tenant(tenant_config: dict) -> str:
       1. FACTURAPI_USER_KEY environment variable
       2. tenant_config.facturapi_key if it starts with sk_user_
     """
-    user_key = _get_user_key()
+    user_key = _find_user_key(tenant_config)
     if user_key:
         return user_key
-    for key in ("facturapi_key", "cfdi_facturapi_key"):
-        tenant_key = (tenant_config.get(key) or "").strip()
-        if tenant_key.startswith("sk_user_"):
-            return tenant_key
     raise FacturapiError("FACTURAPI_USER_KEY env or a Facturapi user key (sk_user_*) is required")
 
 
@@ -347,7 +357,7 @@ def get_org_status(tenant_config: dict) -> dict:
     }
 
     has_secret = bool(_get_secret_key(tenant_config))
-    has_user = bool(_get_user_key_for_tenant(tenant_config))
+    has_user = bool(_find_user_key(tenant_config))
     if not has_secret and not has_user:
         result["error"] = "Facturapi not configured. Set FACTURAPI_USER_KEY env or tenant_config.facturapi_secret_key"
         return result
@@ -366,10 +376,10 @@ def get_org_status(tenant_config: dict) -> dict:
         result["error"] = "No Facturapi key available"
         return result
 
-    def _fetch():
-        org = get_organization(org_id, api_key)
-        legal = org.get("legal", {})
-        cert = org.get("certificate", {})
+    def _fetch(key=None):
+        org = get_organization(org_id, key or api_key)
+        legal = org.get("legal") or {}
+        cert = org.get("certificate") or {}
         return {
             "configured": True,
             "has_csd": bool(cert.get("has_certificate")),
@@ -383,10 +393,11 @@ def get_org_status(tenant_config: dict) -> dict:
     except FacturapiError as e:
         # If the org reports "not configured for Live" (401) and we have a user key,
         # try to backfill legal data and retry.
-        if e.status_code == 401 and _get_user_key_for_tenant(tenant_config):
+        user_key = _find_user_key(tenant_config)
+        if e.status_code == 401 and user_key:
             try:
                 update_organization_legal(tenant_config, org_id)
-                result.update(_fetch())
+                result.update(_fetch(user_key))
             except FacturapiError as e2:
                 result["error"] = str(e2)
         else:
diff --git a/pos/services/inventory_vehicle_compat.py b/pos/services/inventory_vehicle_compat.py
index 98b31cf..ddd64f3 100644
--- a/pos/services/inventory_vehicle_compat.py
+++ b/pos/services/inventory_vehicle_compat.py
@@ -35,194 +35,93 @@ def get_compat_source(tenant_id):
     return 'both'
 
 
+def _norm_pn(pn):
+    """Normalize a part number: uppercase, strip spaces and separators."""
+    if not pn:
+        return ''
+    return (str(pn).replace(' ', '').replace('-', '').replace('/', '')
+            .replace('.', '').replace('_', '').upper())
+
+
 def auto_match_vehicle_compatibility(master_conn, tenant_conn, inventory_id, part_number,
                                      brand=None, name=None):
-    """Find vehicle compatibility for an inventory item by part_number.
+    """Find vehicle compatibility for an inventory item via the supplier catalog.
 
-    Searches (in order of precision):
-    1. parts.oem_part_number exact normalized
-    2. aftermarket_parts.part_number exact normalized
-    3. part_cross_references.cross_reference_number exact normalized
-    4. parts.oem_part_number partial (ILIKE) — strips separators too
-    5. aftermarket_parts.part_number partial (ILIKE)
-    6. part_cross_references.cross_reference_number partial (ILIKE)
-    7. parts.name_part / parts.name_es by inventory item name (ILIKE)
-    8. parts.name_part / parts.name_es by inventory item name (tsvector)
+    Legacy note: the original implementation queried the removed TecDoc tables
+    (parts / aftermarket_parts / part_cross_references / vehicle_parts) and
+    always failed. This version uses the LIVE master tables:
+      1. supplier_catalog.sku exact-normalized
+      2. supplier_catalog_interchange.part_number exact-normalized (cross-refs)
+      3. prefix fallback on catalog SKU (only for >=5 char numbers, few matches)
+    then collects DISTINCT model_year_engine_id from supplier_catalog_compat
+    and inserts them into the tenant inventory_vehicle_compat table.
 
-    If a brand hint is provided, results are preferentially filtered to
-    vehicles of that brand.
-
-    Returns:
-        dict: {'matched': bool, 'matches': [...], 'myes': [...]}
+    Returns dict {'matched': bool, 'matches': [...], 'myes': [...], 'inserted': int}
+    (same shape as the legacy implementation).
     """
     cur = master_conn.cursor()
-    oem_ids = set()
+    clean_pn = _norm_pn(part_number)
+    catalog_ids = set()
 
-    # Normalization helpers
-    clean_pn = (part_number or '').replace(' ', '').upper()
-    no_seps = clean_pn.replace('-', '').replace('/', '').replace('.', '').replace('_', '')
-    name_q = (name or '').strip()
-    brand_hint = (brand or '').strip().upper()
-
-    # ── 1. Exact normalized ──────────────────────────────────────────────
     if clean_pn:
+        # 1. Exact match on catalog SKU (with and without inner spaces)
         cur.execute("""
-            SELECT id_part FROM parts
-            WHERE REPLACE(UPPER(oem_part_number), ' ', '') = %s
-        """, (clean_pn,))
+            SELECT id FROM supplier_catalog
+            WHERE REPLACE(UPPER(sku), '-', '') = %s
+               OR REPLACE(UPPER(REPLACE(sku, ' ', '')), '-', '') = %s
+            LIMIT 50
+        """, (clean_pn, clean_pn))
         for r in cur.fetchall():
-            oem_ids.add(r[0])
+            catalog_ids.add(r[0])
 
-    if clean_pn and not oem_ids:
-        cur.execute("""
-            SELECT DISTINCT oem_part_id FROM aftermarket_parts
-            WHERE REPLACE(UPPER(part_number), ' ', '') = %s
-        """, (clean_pn,))
-        for r in cur.fetchall():
-            if r[0]:
-                oem_ids.add(r[0])
-
-    if clean_pn and not oem_ids:
-        cur.execute("""
-            SELECT DISTINCT part_id FROM part_cross_references
-            WHERE REPLACE(UPPER(cross_reference_number), ' ', '') = %s
-        """, (clean_pn,))
-        for r in cur.fetchall():
-            if r[0]:
-                oem_ids.add(r[0])
-
-    # ── 2. Partial / separator-stripped ──────────────────────────────────
-    if clean_pn and len(clean_pn) >= 3 and len(oem_ids) < 10:
-        # OEM part number partial
-        cur.execute("""
-            SELECT id_part FROM parts
-            WHERE REPLACE(UPPER(oem_part_number), ' ', '') LIKE %s
-              AND id_part NOT IN (SELECT unnest(%s::int[]))
-            LIMIT 20
-        """, (f'%{clean_pn}%', list(oem_ids) or [0]))
-        for r in cur.fetchall():
-            oem_ids.add(r[0])
-
-        # Aftermarket partial
-        if len(oem_ids) < 10:
+        # 2. Exact match on interchange part numbers (cross references)
+        if not catalog_ids:
             cur.execute("""
-                SELECT DISTINCT oem_part_id FROM aftermarket_parts
-                WHERE REPLACE(UPPER(part_number), ' ', '') LIKE %s
-                  AND oem_part_id NOT IN (SELECT unnest(%s::int[]))
-                LIMIT 20
-            """, (f'%{clean_pn}%', list(oem_ids) or [0]))
+                SELECT DISTINCT catalog_id FROM supplier_catalog_interchange
+                WHERE REPLACE(UPPER(REPLACE(part_number, '-', '')), ' ', '') = %s
+                LIMIT 50
+            """, (clean_pn,))
             for r in cur.fetchall():
-                if r[0]:
-                    oem_ids.add(r[0])
+                catalog_ids.add(r[0])
 
-        # Cross-reference partial
-        if len(oem_ids) < 10:
+        # 3. Prefix fallback for longer numbers when exact found little
+        if len(clean_pn) >= 5 and len(catalog_ids) < 3:
             cur.execute("""
-                SELECT DISTINCT part_id FROM part_cross_references
-                WHERE REPLACE(UPPER(cross_reference_number), ' ', '') LIKE %s
-                  AND part_id NOT IN (SELECT unnest(%s::int[]))
-                LIMIT 20
-            """, (f'%{clean_pn}%', list(oem_ids) or [0]))
-            for r in cur.fetchall():
-                if r[0]:
-                    oem_ids.add(r[0])
-
-        # Separator-stripped fallback (e.g. KYB-343412 → KYB343412)
-        if len(no_seps) >= 4 and len(oem_ids) < 10:
-            cur.execute("""
-                SELECT id_part FROM parts
-                WHERE REPLACE(REPLACE(REPLACE(REPLACE(UPPER(oem_part_number), ' ', ''), '-', ''), '/', ''), '.', '') = %s
-                  AND id_part NOT IN (SELECT unnest(%s::int[]))
+                SELECT id FROM supplier_catalog
+                WHERE REPLACE(UPPER(sku), '-', '') LIKE %s
                 LIMIT 10
-            """, (no_seps, list(oem_ids) or [0]))
+            """, (clean_pn[:8] + '%',))
             for r in cur.fetchall():
-                oem_ids.add(r[0])
+                catalog_ids.add(r[0])
 
-    # ── 3. Search by item name (when part_number yields nothing) ─────────
-    if not oem_ids and name_q and len(name_q) >= 3:
-        # Name-based ILIKE search on parts
+    mye_ids = []
+    if catalog_ids:
         cur.execute("""
-            SELECT id_part FROM parts
-            WHERE UPPER(name_part) LIKE %s OR UPPER(COALESCE(name_es, '')) LIKE %s
-            LIMIT 20
-        """, (f'%{name_q.upper()}%', f'%{name_q.upper()}%'))
-        for r in cur.fetchall():
-            oem_ids.add(r[0])
-
-        # Name-based ILIKE search on aftermarket_parts
-        if len(oem_ids) < 20:
-            cur.execute("""
-                SELECT DISTINCT oem_part_id FROM aftermarket_parts
-                WHERE UPPER(COALESCE(name_aftermarket_parts, '')) LIKE %s
-                   OR UPPER(COALESCE(name_es, '')) LIKE %s
-                LIMIT 20
-            """, (f'%{name_q.upper()}%', f'%{name_q.upper()}%'))
-            for r in cur.fetchall():
-                if r[0]:
-                    oem_ids.add(r[0])
-
-    if not oem_ids:
-        cur.close()
-        return {'matched': False, 'matches': [], 'myes': []}
-
-    # ── Resolve MYEs ─────────────────────────────────────────────────────
-    oem_ids = list(oem_ids)
-
-    if brand_hint and brand_hint != 'GENERAL':
-        # Brand-aware: only MYEs for vehicles of the hinted brand
-        cur.execute("""
-            SELECT DISTINCT vp.model_year_engine_id
-            FROM vehicle_parts vp
-            JOIN model_year_engine mye ON mye.id_mye = vp.model_year_engine_id
-            JOIN models m ON m.id_model = mye.model_id
-            JOIN brands b ON b.id_brand = m.brand_id
-            WHERE vp.part_id = ANY(%s)
-              AND b.name_brand = %s
+            SELECT DISTINCT model_year_engine_id FROM supplier_catalog_compat
+            WHERE catalog_id = ANY(%s) AND model_year_engine_id IS NOT NULL
             LIMIT 500
-        """, (oem_ids, brand_hint))
+        """, (list(catalog_ids),))
         mye_ids = [r[0] for r in cur.fetchall()]
-
-        # Fallback: if brand filter yields nothing, the brand hint may be an
-        # aftermarket supplier (e.g. Motorcraft, NGK, Bosch) rather than an
-        # OEM vehicle brand. Search without brand filter.
-        if not mye_ids:
-            cur.execute("""
-                SELECT DISTINCT model_year_engine_id
-                FROM vehicle_parts
-                WHERE part_id = ANY(%s)
-                LIMIT 500
-            """, (oem_ids,))
-            mye_ids = [r[0] for r in cur.fetchall()]
-    else:
-        # No brand hint — return all MYEs for these parts
-        cur.execute("""
-            SELECT DISTINCT model_year_engine_id
-            FROM vehicle_parts
-            WHERE part_id = ANY(%s)
-            LIMIT 500
-        """, (oem_ids,))
-        mye_ids = [r[0] for r in cur.fetchall()]
-
     cur.close()
 
-    # ── Insert into tenant table ─────────────────────────────────────────
     inserted = 0
-    cur2 = tenant_conn.cursor()
-    for mye_id in mye_ids:
-        cur2.execute("""
-            INSERT INTO inventory_vehicle_compat
-                (inventory_id, model_year_engine_id, source, confidence)
-            VALUES (%s, %s, 'auto_match', 1.0)
-            ON CONFLICT (inventory_id, model_year_engine_id) DO NOTHING
-        """, (inventory_id, mye_id))
-        if cur2.rowcount > 0:
-            inserted += 1
-    tenant_conn.commit()
-    cur2.close()
+    if mye_ids:
+        cur2 = tenant_conn.cursor()
+        for mye_id in mye_ids:
+            cur2.execute("""
+                INSERT INTO inventory_vehicle_compat
+                    (inventory_id, model_year_engine_id, source, confidence)
+                VALUES (%s, %s, 'supplier_catalog', 0.95)
+                ON CONFLICT (inventory_id, model_year_engine_id) DO NOTHING
+            """, (inventory_id, mye_id))
+            if cur2.rowcount > 0:
+                inserted += 1
+        tenant_conn.commit()
+        cur2.close()
 
     return {
         'matched': len(mye_ids) > 0,
-        'matches': oem_ids,
+        'matches': sorted(catalog_ids),
         'myes': mye_ids,
         'inserted': inserted,
     }
diff --git a/pos/services/invoice_ocr.py b/pos/services/invoice_ocr.py
new file mode 100644
index 0000000..87ff478
--- /dev/null
+++ b/pos/services/invoice_ocr.py
@@ -0,0 +1,474 @@
+# /home/Autopartes/pos/services/invoice_ocr.py
+"""Supplier-invoice OCR / parsing.
+
+Accepts an image or PDF of a supplier invoice and returns structured lines:
+
+    [{part_number, name, quantity, unit_cost}]
+
+Pipeline (first stage that yields lines wins):
+  1. PDF with a text layer  -> ``pdftotext -layout``
+  2. Scanned PDF            -> ``pdftoppm`` (first page) + Tesseract
+  3. Image                  -> Tesseract
+  4. Vision fallback        -> ``ai_chat`` (QWEN / OpenRouter vision model)
+
+Stock is NEVER touched here: the caller returns the parsed lines so the
+front-end can confirm before creating a purchase order.
+
+Public API:
+    parse_invoice(data, filename=None, content_type=None, use_vision=True) -> dict
+"""
+
+import base64
+import io
+import json
+import os
+import re
+import shutil
+import subprocess
+import tempfile
+
+_MONEY_RE = re.compile(r"^\$?\s?\d{1,3}(?:[,\d]{0,15})(?:\.\d{1,2})?$")
+_INT_RE = re.compile(r"^\d{1,4}$")
+_PN_RE = re.compile(r"^[A-Z0-9][A-Z0-9\-\./_]{2,}$")
+
+# Lines that are clearly headers/totals, not invoice items.
+_SKIP_TOKENS = {
+    "factura", "remision", "total", "subtotal", "iva", "ieps", "rfc", "fecha",
+    "pedido", "cliente", "proveedor", "telefono", "direccion", "calle",
+    "colonia", "cantidad", "cant", "descripcion", "precio", "importe",
+    "unidad", "folio", "orden", "pagina", "gracias", "nota", "clave",
+    "codigo", "producto", "articulo", "descuento", "moneda", "condiciones",
+    "subtotal:", "total:", "iva:", "rfc:", "fecha:", "importe:", "precio:",
+}
+
+# Any of these as a whole word marks a header/footer line (RFC, date, totals).
+_HEADER_WORDS = {
+    "rfc", "fecha", "folio", "cliente", "proveedor", "factura", "remision",
+    "remisión", "pedido", "telefono", "tel", "direccion", "dirección", "calle",
+    "colonia", "condiciones", "moneda", "subtotal", "total", "iva", "ieps",
+    "clave", "descripcion", "descripción", "cantidad", "unidad", "descuento",
+    "importe", "precio", "page",
+}
+
+_VISION_PROMPT = (
+    "Eres un experto en facturas de refaccionarias mexicanas. Extrae TODAS las "
+    "lineas de producto de la imagen. Devuelve SOLO JSON valido, sin texto extra, "
+    "con esta forma exacta: "
+    '{"lines":[{"part_number":"...","name":"...","quantity":1,"unit_cost":0.0}]}. '
+    "part_number = clave/SKU/numero de parte; name = descripcion; quantity = "
+    "cantidad (entero); unit_cost = precio unitario (numero, sin simbolos). "
+    "Si no hay lineas claras devuelve {\"lines\": []}."
+)
+
+
+# ── Binary helpers ─────────────────────────────────────────────────────────
+
+def _is_pdf(data, filename):
+    if data[:5] == b"%PDF-":
+        return True
+    return bool(filename and filename.lower().endswith(".pdf"))
+
+
+def _pdftotext(data):
+    """Extract the text layer of a PDF. Returns '' on failure."""
+    exe = shutil.which("pdftotext")
+    if not exe:
+        return ""
+    try:
+        proc = subprocess.run(
+            [exe, "-layout", "-", "-"],
+            input=data, stdout=subprocess.PIPE, stderr=subprocess.PIPE, timeout=60,
+        )
+        if proc.returncode == 0:
+            return proc.stdout.decode("utf-8", "replace")
+    except Exception:
+        pass
+    return ""
+
+
+def _pdf_first_page_png(data, dpi=200):
+    """Render the first PDF page to PNG bytes (for OCR). None on failure."""
+    exe = shutil.which("pdftoppm")
+    if not exe:
+        return None
+    try:
+        with tempfile.TemporaryDirectory() as td:
+            pdf_path = os.path.join(td, "in.pdf")
+            with open(pdf_path, "wb") as f:
+                f.write(data)
+            prefix = os.path.join(td, "page")
+            subprocess.run(
+                [exe, "-png", "-r", str(dpi), "-f", "1", "-l", "1", pdf_path, prefix],
+                stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=120,
+            )
+            for fn in sorted(os.listdir(td)):
+                if fn.startswith("page") and fn.endswith(".png"):
+                    with open(os.path.join(td, fn), "rb") as f:
+                        return f.read()
+    except Exception:
+        pass
+    return None
+
+
+def _ocr_langs():
+    try:
+        import pytesseract
+        langs = pytesseract.get_languages(config="")
+        for wanted in ("spa", "eng"):
+            if wanted in langs:
+                return wanted
+    except Exception:
+        pass
+    return "eng"
+
+
+def _ocr_image(img_bytes):
+    """Run Tesseract over image bytes. Returns '' on failure."""
+    try:
+        from PIL import Image
+        import pytesseract
+    except Exception:
+        return ""
+    try:
+        img = Image.open(io.BytesIO(img_bytes))
+        if img.mode not in ("RGB", "L"):
+            img = img.convert("RGB")
+        return pytesseract.image_to_string(img, lang=_ocr_langs())
+    except Exception:
+        return ""
+
+
+def _ocr_rows(img_bytes, y_tolerance=12):
+    """OCR an image and rebuild table rows from word positions.
+
+    Tesseract's default layout analysis splits a monospaced invoice table into
+    one block per column, so ``image_to_string`` returns each column stacked
+    instead of each row.  We regroup words by their vertical center instead.
+
+    Returns a list of row strings (falls back to plain lines on failure).
+    """
+    try:
+        from PIL import Image
+        import pytesseract
+    except Exception:
+        return []
+    try:
+        img = Image.open(io.BytesIO(img_bytes))
+        if img.mode not in ("RGB", "L"):
+            img = img.convert("RGB")
+        data = pytesseract.image_to_data(
+            img, lang=_ocr_langs(), output_type=pytesseract.Output.DICT
+        )
+    except Exception:
+        text = _ocr_image(img_bytes)
+        return text.splitlines() if text else []
+
+    groups = {}  # representative y -> list of (left, text)
+    for i, txt in enumerate(data.get("text", [])):
+        txt = (txt or "").strip()
+        if not txt:
+            continue
+        try:
+            top = int(data["top"][i])
+            h = int(data["height"][i] or 0)
+            left = int(data["left"][i])
+        except (KeyError, ValueError, TypeError):
+            continue
+        cy = top + h // 2
+        key = None
+        for k in groups:
+            if abs(k - cy) <= max(y_tolerance, h // 2):
+                key = k
+                break
+        groups.setdefault(cy if key is None else key, []).append((left, txt))
+
+    rows = []
+    for cy in sorted(groups):
+        rows.append(" ".join(t for _, t in sorted(groups[cy])))
+    return rows
+
+
+def _ocr_rows_text(img_bytes):
+    """Row-reconstructed OCR text (falls back to raw Tesseract output)."""
+    rows = _ocr_rows(img_bytes)
+    if rows:
+        return "\n".join(rows)
+    return _ocr_image(img_bytes)
+
+
+# ── Text line parser ───────────────────────────────────────────────────────
+
+def _is_money(tok):
+    if tok.startswith("$"):
+        return True
+    if not _MONEY_RE.match(tok):
+        return False
+    return ("." in tok) or ("," in tok)
+
+
+def _to_money(tok):
+    cleaned = re.sub(r"[^\d.]", "", tok.replace(",", ""))
+    try:
+        return float(cleaned)
+    except ValueError:
+        return None
+
+
+def _is_part_number(tok):
+    if _is_money(tok):
+        return False
+    if not _PN_RE.match(tok):
+        return False
+    has_alpha = any(c.isalpha() for c in tok)
+    digits = sum(c.isdigit() for c in tok)
+    if has_alpha:
+        return digits >= 1 and len(tok) >= 4
+    # pure numeric part numbers are accepted only if long enough to not be a qty
+    return len(tok) >= 4
+
+
+def _skip_line(line):
+    low = line.lower()
+    if low.strip(".:-") in _SKIP_TOKENS:
+        return True
+    words = set(re.findall(r"[a-záéíóúñ]+", low))
+    if words & _HEADER_WORDS:
+        return True
+    if words and all(t in _SKIP_TOKENS or t in ("de", "del", "la", "el") for t in words):
+        return True
+    return False
+
+
+def _parse_line(line):
+    tokens = line.split()
+    if len(tokens) < 3:
+        return None
+
+    money_idx = [i for i, t in enumerate(tokens) if _is_money(t)]
+    int_idx = [i for i, t in enumerate(tokens) if _INT_RE.match(t)]
+    pn_idx = [i for i, t in enumerate(tokens) if _is_part_number(t)]
+    if not pn_idx or (not money_idx and not int_idx):
+        return None
+
+    qty, qty_i = None, None
+    for i in int_idx:
+        if i in money_idx:
+            continue
+        v = int(tokens[i])
+        if 1 <= v <= 9999:
+            qty, qty_i = v, i
+            break
+
+    unit, unit_i = None, None
+    if money_idx:
+        unit_i = money_idx[0]
+        unit = _to_money(tokens[unit_i])
+
+    pn_i = pn_idx[0]
+    used = {i for i in (pn_i, qty_i) if i is not None} | set(money_idx)
+    name = " ".join(t for i, t in enumerate(tokens) if i not in used).strip(" -|")
+    if not name:
+        name = None
+    if qty is None and unit is None:
+        return None
+    return {
+        "part_number": tokens[pn_i],
+        "name": name,
+        "quantity": qty,
+        "unit_cost": unit,
+    }
+
+
+def parse_lines(text):
+    """Parse raw invoice text into structured lines."""
+    out = []
+    seen = set()
+    for raw in (text or "").splitlines():
+        line = raw.strip()
+        if len(line) < 6 or _skip_line(line):
+            continue
+        row = _parse_line(line)
+        if not row:
+            continue
+        key = (row["part_number"].upper(), row["quantity"], row["unit_cost"])
+        if key in seen:
+            continue
+        seen.add(key)
+        out.append(row)
+    return out
+
+
+# ── Vision fallback ────────────────────────────────────────────────────────
+
+def _extract_json(text):
+    if not text:
+        return None
+    s = text.strip()
+    if s.startswith("```"):
+        s = re.sub(r"^```[a-zA-Z]*\n?", "", s)
+        s = re.sub(r"\n?```$", "", s)
+    try:
+        return json.loads(s)
+    except Exception:
+        pass
+    m = re.search(r"\{.*\}", s, re.DOTALL)
+    if m:
+        try:
+            return json.loads(m.group(0))
+        except Exception:
+            return None
+    return None
+
+
+def _coerce_lines(obj):
+    if not obj:
+        return []
+    raw = obj.get("lines") if isinstance(obj, dict) else None
+    if raw is None and isinstance(obj, list):
+        raw = obj
+    if not isinstance(raw, list):
+        return []
+    lines = []
+    for item in raw:
+        if not isinstance(item, dict):
+            continue
+        pn = item.get("part_number") or item.get("clave") or item.get("sku")
+        name = item.get("name") or item.get("descripcion") or item.get("description")
+        qty = item.get("quantity", item.get("cantidad"))
+        cost = item.get("unit_cost", item.get("precio", item.get("unit_price")))
+        try:
+            qty = int(qty) if qty is not None else None
+        except (ValueError, TypeError):
+            qty = None
+        try:
+            cost = float(cost) if cost is not None else None
+        except (ValueError, TypeError):
+            cost = None
+        if pn or name:
+            lines.append({
+                "part_number": str(pn).strip() if pn else None,
+                "name": str(name).strip() if name else None,
+                "quantity": qty, "unit_cost": cost,
+            })
+    return lines
+
+
+def _vision_extract(image_bytes, hint_text=None):
+    """Extract lines with the vision model. Returns (lines, error)."""
+    try:
+        from services import ai_chat
+    except Exception as e:
+        return [], f"ai_chat import: {e}"
+
+    b64 = base64.b64encode(image_bytes).decode("ascii")
+    prompt = _VISION_PROMPT
+    if hint_text:
+        prompt += "\n\nTexto OCR parcial (puede estar incompleto):\n" + hint_text[:1500]
+
+    # 1) reuse chat_with_image (per task requirement)
+    try:
+        res = ai_chat.chat_with_image(prompt, b64)
+        lines = _coerce_lines(res)
+        if lines:
+            return lines, None
+        msg = res.get("message") if isinstance(res, dict) else None
+        lines = _coerce_lines(_extract_json(msg) if msg else None)
+        if lines:
+            return lines, None
+    except Exception:
+        pass
+
+    # 2) direct vision call with an invoice-specific system prompt
+    try:
+        data_url = "data:image/jpeg;base64," + b64
+        messages = [
+            {"role": "system", "content": "Responde SOLO JSON valido."},
+            {"role": "user", "content": [
+                {"type": "image_url", "image_url": {"url": data_url}},
+                {"type": "text", "text": prompt},
+            ]},
+        ]
+        backends = []
+        if ai_chat.QWEN_ENABLED:
+            backends.append((ai_chat.QWEN_CHAT_URL, ai_chat.QWEN_API_KEY, ai_chat.QWEN_MODEL))
+        if ai_chat.OPENROUTER_API_KEY:
+            backends.append((ai_chat.OPENROUTER_URL, ai_chat.OPENROUTER_API_KEY, ai_chat.VISION_MODEL))
+        for url, key, model in backends:
+            result = ai_chat._post_chat_completion(
+                url, key, model, messages, max_tokens=1200, temperature=0.1, timeout=60
+            )
+            if not result:
+                continue
+            lines = _coerce_lines(_extract_json(result["content"]))
+            if lines:
+                return lines, None
+        return [], "vision sin lineas"
+    except Exception as e:
+        return [], f"vision: {e}"
+
+
+# ── Public API ─────────────────────────────────────────────────────────────
+
+def parse_invoice(data, filename=None, content_type=None, use_vision=True):
+    """Parse an invoice image/PDF into structured lines.
+
+    Returns:
+        {
+          "lines": [{part_number, name, quantity, unit_cost}],
+          "count": int,
+          "method": str,           # pdftotext | pdftoppm+tesseract | tesseract | ...+vision
+          "warnings": [str],
+          "text_preview": str,
+        }
+    """
+    warnings = []
+    text = ""
+    method = "unknown"
+    vision_image = None  # bytes to hand to the vision model when OCR fails
+
+    if not data:
+        return {"lines": [], "count": 0, "method": "empty",
+                "warnings": ["archivo vacío"], "text_preview": ""}
+
+    if _is_pdf(data, filename):
+        text = _pdftotext(data)
+        if len(text.strip()) >= 30:
+            method = "pdftotext"
+        else:
+            png = _pdf_first_page_png(data)
+            if png:
+                vision_image = png
+                text = _ocr_rows_text(png)
+                method = "pdftoppm+tesseract" if text.strip() else "pdftoppm"
+                if not text.strip():
+                    warnings.append("PDF sin capa de texto y OCR vacío")
+            else:
+                method = "pdf"
+                warnings.append("No se pudo renderizar el PDF")
+        if not vision_image:
+            # for vision fallback on a text PDF we still need a raster copy
+            vision_image = _pdf_first_page_png(data)
+    else:
+        vision_image = data
+        text = _ocr_rows_text(data)
+        method = "tesseract"
+        if not text.strip():
+            warnings.append("OCR sin texto reconocible")
+
+    lines = parse_lines(text)
+
+    if not lines and use_vision and vision_image:
+        vlines, verr = _vision_extract(vision_image, hint_text=text)
+        if vlines:
+            lines = vlines
+            method += "+vision"
+        elif verr:
+            warnings.append(f"fallback visión sin resultados: {verr}")
+
+    return {
+        "lines": lines,
+        "count": len(lines),
+        "method": method,
+        "warnings": warnings,
+        "text_preview": text[:800],
+    }
diff --git a/pos/services/marketplace_external_service.py b/pos/services/marketplace_external_service.py
index fd79db2..fa4b80c 100644
--- a/pos/services/marketplace_external_service.py
+++ b/pos/services/marketplace_external_service.py
@@ -9,12 +9,14 @@ Depends on:
 
 import json
 import logging
+import re
+import time
 import urllib.parse
 from typing import Optional
 from decimal import Decimal
 
 from services.meli_service import MeliService, MeliError, MeliAuthError
-from services.pos_engine import process_sale, calculate_totals
+from services.pos_engine import process_sale
 from services.inventory_engine import get_stock, get_stock_bulk
 
 logger = logging.getLogger(__name__)
@@ -33,6 +35,190 @@ def _resolve_image_urls(images: list[str], base_url: str | None = None) -> list[
     return resolved
 
 
+# ─── Used-parts helpers (Yonke M4) ──────────────────────────────────────────
+# ML's item-level `condition` only accepts new/used/not_specified.
+MELI_CONDITION_MAP = {"nuevo": "new", "usado": "used", "reconstruido": "used"}
+MELI_MAX_PICTURES = 10
+
+
+def _derive_meli_condition(condition) -> str:
+    """Map inventory.condition (nuevo|usado|reconstruido) to ML's condition.
+
+    Missing/unknown values default to 'new', so the new-parts flow is unchanged.
+    """
+    return MELI_CONDITION_MAP.get(str(condition or "").strip().lower(), "new")
+
+
+# Used parts (Yonke) historically went out under the tenant's fixed
+# `meli_default_category_id`, which points at a new-parts category: ML either
+# rejects the used condition there or files the listing under the wrong
+# taxonomy. When a used part has no explicit category we ask ML's own
+# predictor (domain_discovery) for the best category from its name/marca/donor.
+USED_CONDITIONS = ("usado", "reconstruido")
+
+
+def _is_used_condition(condition) -> bool:
+    return str(condition or "").strip().lower() in USED_CONDITIONS
+
+
+def _category_query(inventory_row: dict) -> str:
+    """Build the free-text query fed to ML's category predictor."""
+    parts = (
+        inventory_row.get("name"),
+        inventory_row.get("brand"),
+        inventory_row.get("part_number"),
+        inventory_row.get("donor_make"),
+        inventory_row.get("donor_model"),
+        inventory_row.get("donor_year"),
+    )
+    return " ".join(str(p).strip() for p in parts if p and str(p).strip())
+
+
+def _domain_discovery_categories(response) -> list[dict]:
+    """Normalize a domain_discovery/search response into category candidates.
+
+    ML answers with a ranked list like
+    [{domain_id, domain_name, category_id, category_name, attributes}, ...].
+    Error payloads and unexpected shapes yield an empty list (degradation).
+    """
+    if isinstance(response, dict):
+        response = [response] if response.get("category_id") else []
+    if not isinstance(response, list):
+        return []
+    return [
+        item for item in response
+        if isinstance(item, dict) and item.get("category_id")
+    ]
+
+
+def _meli_category_valid(svc, category_id: str, cache: dict) -> bool:
+    """Confirm a predicted category exists (cached per publish batch)."""
+    if category_id in cache:
+        return cache[category_id]
+    valid = False
+    try:
+        cat = svc.get_category(category_id)
+        valid = bool(isinstance(cat, dict) and cat.get("id") == category_id)
+    except Exception as exc:
+        logger.warning("ML category validation failed for %s: %s", category_id, exc)
+    cache[category_id] = valid
+    return valid
+
+
+def resolve_meli_category(
+    svc,
+    site_id: str,
+    inventory_row: dict,
+    provided_category_id,
+    tenant_default_category_id=None,
+    cache: dict = None,
+) -> str:
+    """Return the ML category to publish `inventory_row` under.
+
+    Used/rebuilt parts that carry no explicit category are routed through ML's
+    domain_discovery predictor (name + marca + part/donor data) and the
+    predicted category is validated with GET /categories/{id}. Any ML failure
+    degrades to the provided/default category so publishing keeps working when
+    ML is unreachable.
+
+    A category counts as explicit when it is neither empty nor the tenant's
+    fixed `meli_default_category_id` (the UI pre-fills that one for every
+    listing). New parts keep the caller's category untouched.
+
+    Known ML limitation: we cannot verify category-by-category whether a used
+    condition is accepted, nor reliably fill the category-specific attributes
+    ML may require for used items (domain_discovery returns `attributes`, but
+    their expected value_ids differ per category). Such rejects surface from
+    /items/validate and /items as a normal listing error.
+    """
+    provided = str(provided_category_id or "").strip()
+    default = str(tenant_default_category_id or "").strip()
+    # Degrade to the tenant default when the caller passed no category at all.
+    fallback = provided or default
+    explicit = bool(provided) and (not default or provided != default)
+    if explicit or not _is_used_condition(inventory_row.get("condition")):
+        return fallback
+
+    query = _category_query(inventory_row)
+    if len(query) < 3:
+        return fallback
+
+    cache = cache if cache is not None else {}
+    try:
+        matches = _domain_discovery_categories(svc.search_categories(site_id, query))
+    except Exception as exc:
+        logger.warning(
+            "ML domain_discovery failed for '%s' (%s) — keeping category %s",
+            inventory_row.get("name"), exc, fallback or "(none)",
+        )
+        return fallback
+
+    for match in matches:
+        candidate = str(match.get("category_id") or "").strip()
+        if candidate and _meli_category_valid(svc, candidate, cache):
+            if candidate != provided:
+                logger.info(
+                    "Used part %s: ML category resolved to %s (%s)",
+                    inventory_row.get("id"), candidate, match.get("category_name"),
+                )
+            return candidate
+    return fallback
+
+
+def _item_category_id(
+    svc, site_id, inventory_row, inventory_id,
+    provided_category_id, cfg, custom_data, cache,
+) -> str:
+    """Resolve the ML category for one item of a publish/validate batch.
+
+    An explicit per-item category (custom_data.categories[<inventory_id>])
+    always wins; otherwise used/rebuilt parts go through
+    `resolve_meli_category`, which degrades to the provided/default category.
+    """
+    explicit = (custom_data.get("categories") or {}).get(str(inventory_id))
+    if explicit:
+        return str(explicit).strip()
+    return resolve_meli_category(
+        svc, site_id, inventory_row, provided_category_id,
+        tenant_default_category_id=(cfg or {}).get("meli_default_category_id"),
+        cache=cache,
+    )
+
+
+def _merge_image_urls(inventory_images_urls, legacy_image_url) -> list[str]:
+    """Merge inventory_images URLs (primary first) with the legacy image_url.
+
+    Preserves order, drops blanks/duplicates and caps at ML's 10-picture limit.
+    """
+    candidates = list(inventory_images_urls or [])
+    if legacy_image_url:
+        candidates.append(legacy_image_url)
+    merged = []
+    for url in candidates:
+        if url and url not in merged:
+            merged.append(url)
+    return merged[:MELI_MAX_PICTURES]
+
+
+def _fetch_inventory_image_urls(cur, inventory_ids: list[int]) -> dict:
+    """Return {inventory_id: [url, ...]} ordered primary-first then sort_order."""
+    if not inventory_ids:
+        return {}
+    cur.execute(
+        """
+        SELECT inventory_id, url
+        FROM inventory_images
+        WHERE inventory_id = ANY(%s) AND url IS NOT NULL AND url <> ''
+        ORDER BY inventory_id, is_primary DESC, sort_order ASC, id ASC
+        """,
+        (inventory_ids,),
+    )
+    out = {}
+    for inv_id, url in cur.fetchall():
+        out.setdefault(inv_id, []).append(url)
+    return out
+
+
 # ═══════════════════════════════════════════════════════════════════════════
 # CONFIG HELPERS
 # ═══════════════════════════════════════════════════════════════════════════
@@ -44,12 +230,15 @@ MELI_CONFIG_KEYS = [
     "meli_site_id",
     "meli_enabled",
     "meli_auto_publish",
+    "meli_auto_answer_questions",
     "meli_sync_interval_min",
     "meli_order_sync_interval_min",
     "meli_default_category_id",
     "meli_shipping_mode",
     "meli_client_id",
     "meli_client_secret",
+    "meli_user_product_seller",
+    "meli_auto_sync_stock_price",
 ]
 
 
@@ -69,6 +258,14 @@ def get_meli_config(tenant_conn) -> dict:
     # Normalize booleans
     cfg["meli_enabled"] = (cfg.get("meli_enabled") or "").lower() == "true"
     cfg["meli_auto_publish"] = (cfg.get("meli_auto_publish") or "").lower() == "true"
+    cfg["meli_auto_answer_questions"] = (
+        cfg.get("meli_auto_answer_questions") or ""
+    ).lower() == "true"
+    # Safety gate for the automatic stock/price push (see sync_meli_stock_price_task
+    # and process_meli_sync_queue): OFF unless the tenant explicitly enables it.
+    cfg["meli_auto_sync_stock_price"] = (
+        cfg.get("meli_auto_sync_stock_price") or ""
+    ).lower() == "true"
     cfg["meli_sync_interval_min"] = int(cfg.get("meli_sync_interval_min") or 15)
     cfg["meli_order_sync_interval_min"] = int(cfg.get("meli_order_sync_interval_min") or 5)
     return cfg
@@ -102,16 +299,49 @@ def delete_meli_config(tenant_conn) -> None:
     cur.close()
 
 
-def _get_meli_service(cfg: dict) -> Optional[MeliService]:
-    """Build MeliService from config dict."""
+def is_user_product_seller(tenant_conn, svc, cfg) -> bool:
+    """Detect MercadoLibre "User Products" sellers (tag user_product_seller).
+
+    UP sellers must publish with family_name only — sending title is rejected
+    by the ML API. Result is cached in tenant_config to avoid calling
+    /users/me on every publish.
+    """
+    cached = cfg.get("meli_user_product_seller")
+    if cached is not None and str(cached) != "":
+        return str(cached).lower() == "true"
+    try:
+        user = svc.get_user()
+        is_up = "user_product_seller" in (user.get("tags") or [])
+    except Exception:
+        is_up = False
+    save_meli_config(tenant_conn, {"meli_user_product_seller": "true" if is_up else "false"})
+    return is_up
+
+
+def _get_meli_service(cfg: dict, tenant_conn=None) -> Optional[MeliService]:
+    """Build MeliService from config dict.
+
+    When tenant_conn is provided, refreshed OAuth tokens are persisted back to
+    tenant_config so the connection survives token rotation and restarts.
+    """
     token = cfg.get("meli_access_token")
     if not token:
         return None
+
+    on_refresh = None
+    if tenant_conn is not None:
+        def on_refresh(data):
+            save_meli_config(tenant_conn, {
+                "meli_access_token": data.get("access_token"),
+                "meli_refresh_token": data.get("refresh_token"),
+            })
+
     return MeliService(
         access_token=token,
         refresh_token=cfg.get("meli_refresh_token"),
         client_id=cfg.get("meli_client_id"),
         client_secret=cfg.get("meli_client_secret"),
+        on_refresh=on_refresh,
     )
 
 
@@ -160,9 +390,33 @@ def build_item_payload(
     extra_attributes: list = None,
     shipping_cost: float = None,
     base_url: str = None,
+    description_text: str = None,
 ) -> dict:
-    """Convert a Nexus inventory row into a MercadoLibre item payload."""
-    title = custom_title or f"{inventory_row['name']} {inventory_row['brand'] or ''} {inventory_row['part_number'] or ''}".strip()
+    """Convert a Nexus inventory row into a MercadoLibre item payload.
+
+    When `description_text` is given it is attached as
+    payload["description"] = {"plain_text": ...}. ML keeps the description in
+    a separate sub-resource, so callers MUST pop this key before POSTing the
+    item and send it via MeliService.set_item_description().
+    """
+    meli_condition = _derive_meli_condition(inventory_row.get("condition"))
+    grade = str(inventory_row.get("condition_grade") or "").strip().upper()
+
+    if custom_title:
+        title = custom_title.strip()
+    else:
+        title = f"{inventory_row['name']} {inventory_row['brand'] or ''} {inventory_row['part_number'] or ''}".strip()
+
+    # ML has no universal condition-grade attribute, so for used parts the A-D
+    # grade is appended to the title (kept inside ML's 60-char limit), unless
+    # the caller already included it.
+    if meli_condition == "used" and grade in ("A", "B", "C", "D") and f"grado {grade.lower()}" not in title.lower():
+        title_suffix = f" Grado {grade}"
+        # Reserve room for the grade marker so truncation never drops it.
+        max_base = 60 - len(title_suffix)
+        if len(title) > max_base:
+            title = title[:max(max_base - 3, 0)].rstrip() + "..."
+        title += title_suffix
     # ML title limit is 60 chars; truncate smartly
     if len(title) > 60:
         title = title[:57] + "..."
@@ -177,6 +431,10 @@ def build_item_payload(
     # It's a generic product description shared across variations.
     family_name = inventory_row.get("name") or title
 
+    part_number = inventory_row.get("part_number")
+    # Codeless unique pieces (yonke) still need a stable SKU for ML.
+    seller_custom_field = part_number or inventory_row.get("serial_number") or str(inventory_row.get("id"))
+
     payload = {
         "title": title,
         "family_name": family_name,
@@ -186,25 +444,35 @@ def build_item_payload(
         "available_quantity": max(int(stock), 0),
         "buying_mode": "buy_it_now",
         "listing_type_id": listing_type_id,
-        "condition": "new",
-        "pictures": [{"source": url} for url in _resolve_image_urls(images, base_url) if url],
+        "condition": meli_condition,
+        "pictures": [{"source": url} for url in _resolve_image_urls(images, base_url) if url][:MELI_MAX_PICTURES],
         "shipping": shipping_payload,
         "attributes": [],
-        "seller_custom_field": inventory_row.get("part_number") or str(inventory_row.get("id")),
+        "seller_custom_field": seller_custom_field,
     }
 
-    # Collect extra attribute IDs to avoid duplicates
-    extra_attr_ids = {a.get("id") for a in (extra_attributes or []) if a.get("id")}
+    # Description lives in its own ML sub-resource; callers pop it before the
+    # POST so it never reaches /items as an unexpected field.
+    if description_text:
+        payload["description"] = {"plain_text": description_text}
 
-    if inventory_row.get("brand") and "BRAND" not in extra_attr_ids:
+    # Collect attribute IDs already covered (extra input + generated below)
+    extra_attr_ids = {a.get("id") for a in (extra_attributes or []) if a.get("id")}
+    attr_ids = set(extra_attr_ids)
+
+    if inventory_row.get("brand") and "BRAND" not in attr_ids:
         payload["attributes"].append(
             {"id": "BRAND", "value_name": inventory_row["brand"]}
         )
+        attr_ids.add("BRAND")
 
-    if inventory_row.get("part_number") and "PART_NUMBER" not in extra_attr_ids:
+    # Prefer part_number; fall back to the piece serial for codeless used parts.
+    part_identifier = part_number or inventory_row.get("serial_number")
+    if part_identifier and "PART_NUMBER" not in attr_ids:
         payload["attributes"].append(
-            {"id": "PART_NUMBER", "value_name": inventory_row["part_number"]}
+            {"id": "PART_NUMBER", "value_name": part_identifier}
         )
+        attr_ids.add("PART_NUMBER")
 
     # Vehicle compatibility as attributes (if available)
     vehicle_compat = inventory_row.get("vehicle_compatibility")
@@ -217,14 +485,30 @@ def build_item_payload(
         if isinstance(vehicle_compat, list) and vehicle_compat:
             first = vehicle_compat[0]
             if isinstance(first, dict):
-                if first.get("brand") and "VEHICLE_MODEL" not in extra_attr_ids:
+                if first.get("brand") and "VEHICLE_MODEL" not in attr_ids:
                     payload["attributes"].append(
                         {"id": "VEHICLE_MODEL", "value_name": first["brand"]}
                     )
-                if first.get("model") and "VEHICLE_MODEL_NAME" not in extra_attr_ids:
+                    attr_ids.add("VEHICLE_MODEL")
+                if first.get("model") and "VEHICLE_MODEL_NAME" not in attr_ids:
                     payload["attributes"].append(
                         {"id": "VEHICLE_MODEL_NAME", "value_name": first["model"]}
                     )
+                    attr_ids.add("VEHICLE_MODEL_NAME")
+
+    # Donor vehicle data for used parts (fills VEHICLE_* only when declared
+    # compatibility did not provide them). donor_vin has no universal ML
+    # attribute, so it is left for the description instead of being sent here.
+    if meli_condition == "used":
+        donor_attrs = (
+            ("VEHICLE_MODEL", inventory_row.get("donor_make")),
+            ("VEHICLE_MODEL_NAME", inventory_row.get("donor_model")),
+            ("VEHICLE_YEAR", inventory_row.get("donor_year")),
+        )
+        for attr_id, value in donor_attrs:
+            if value and attr_id not in attr_ids:
+                payload["attributes"].append({"id": attr_id, "value_name": str(value)})
+                attr_ids.add(attr_id)
 
     # Extra attributes from user input (category requirements)
     if extra_attributes:
@@ -241,7 +525,8 @@ def _upload_images_to_meli(svc: MeliService, image_urls: list[str]) -> list[str]
     If an image is already a ML URL, it's passed through unchanged.
     """
     results = []
-    for url in image_urls:
+    # ML accepts at most 10 pictures per item.
+    for url in image_urls[:MELI_MAX_PICTURES]:
         if not url:
             continue
         # Already a ML hosted image?
@@ -297,6 +582,235 @@ def _calculate_meli_net_price(svc: MeliService, site_id: str, price: float, list
         }
 
 
+def compute_listing_economics(
+    svc: MeliService,
+    site_id: str,
+    price: float,
+    listing_type_id: str,
+    category_id: str,
+    cost=None,
+) -> dict:
+    """Fee + net + margin for one listing at a given price (persisted in v4.28).
+
+    `margin_pct` is measured against the net amount the seller actually
+    receives (net_price), not the sticker price, because that is the real
+    cash margin after ML's commission.
+    """
+    fee = _calculate_meli_net_price(svc, site_id, price, listing_type_id, category_id)
+    net = round(float(fee["net_amount"]), 2)
+    margin_pct = None
+    if cost is not None:
+        try:
+            cost_f = float(cost)
+            if net > 0:
+                margin_pct = round((net - cost_f) / net * 100, 2)
+        except (TypeError, ValueError):
+            margin_pct = None
+    return {
+        "meli_fee": round(float(fee["fee_amount"]), 2),
+        "meli_fee_pct": fee["fee_pct"],
+        "meli_net_price": net,
+        "meli_fee_source": fee["source"],
+        "cost_at_publish": float(cost) if cost is not None else None,
+        "margin_pct": margin_pct,
+    }
+
+
+def _persist_listing_economics(cur, listing_id: int, econ: dict) -> None:
+    """Persist a compute_listing_economics() dict onto a marketplace_listing."""
+    cur.execute(
+        """
+        UPDATE marketplace_listings
+        SET meli_fee = %s, meli_fee_pct = %s, meli_net_price = %s,
+            meli_fee_source = %s, cost_at_publish = %s, margin_pct = %s,
+            economics_updated_at = NOW()
+        WHERE id = %s
+        """,
+        (
+            econ.get("meli_fee"),
+            econ.get("meli_fee_pct"),
+            econ.get("meli_net_price"),
+            econ.get("meli_fee_source"),
+            econ.get("cost_at_publish"),
+            econ.get("margin_pct"),
+            listing_id,
+        ),
+    )
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# ITEM DESCRIPTION
+# ═══════════════════════════════════════════════════════════════════════════
+#
+# ML stores the description in its own sub-resource (PUT/POST
+# /items/{id}/description), not in the item payload. build_item_payload()
+# attaches it under payload["description"] and the publish/validate callers
+# pop it and send it separately.
+#
+# The text is template-first (fast, deterministic, always available) and only
+# gets an LLM-written commercial paragraph when use_llm=True. Any LLM failure
+# (timeout, rate limit, outage) silently degrades to the template.
+
+ML_DESCRIPTION_MAX = 4000
+
+_LLM_DESCRIPTION_SYSTEM = (
+    "Eres un redactor de fichas de autopartes para MercadoLibre Mexico. "
+    "Escribes en espanol neutro, claro y comercial, sin exageraciones falsas "
+    "ni promesas de stock. Respondes SOLO con el texto de la descripcion, "
+    "sin titulos, sin markdown y sin HTML."
+)
+
+
+def _norm_sku(value) -> str:
+    """Normalize a SKU/part number: uppercase alphanumerics only."""
+    if value is None:
+        return ""
+    return re.sub(r"[^A-Z0-9]", "", str(value).upper())
+
+
+def _vehicle_compat_lines(vehicle_compat) -> list[str]:
+    """Human-readable compatibility lines from inventory.vehicle_compatibility."""
+    if not vehicle_compat:
+        return []
+    if isinstance(vehicle_compat, str):
+        try:
+            vehicle_compat = json.loads(vehicle_compat)
+        except Exception:
+            return []
+    if not isinstance(vehicle_compat, list):
+        return []
+    lines = []
+    for entry in vehicle_compat:
+        if not isinstance(entry, dict):
+            continue
+        parts = [
+            str(entry.get(k)).strip()
+            for k in ("brand", "model", "year")
+            if entry.get(k) not in (None, "")
+        ]
+        if parts:
+            text = " ".join(parts)
+            if text not in lines:
+                lines.append(text)
+    return lines
+
+
+def _llm_description(part_number: str, name: str, brand: str, compat_lines: list[str],
+                     category_name: str = None, timeout: float = 8) -> Optional[str]:
+    """Best-effort LLM paragraph. Returns None on any failure (never raises)."""
+    try:
+        from services import ai_chat
+        if not getattr(ai_chat, "QWEN_ENABLED", False):
+            return None
+        prompt_lines = [
+            f"Redacta una descripcion de venta de 3 a 5 lineas (maximo 700 caracteres) para esta autoparte.",
+            f"Nombre: {name or part_number}",
+        ]
+        if brand:
+            prompt_lines.append(f"Marca: {brand}")
+        if part_number:
+            prompt_lines.append(f"Numero de parte: {part_number}")
+        if category_name:
+            prompt_lines.append(f"Categoria: {category_name}")
+        if compat_lines:
+            prompt_lines.append("Compatibilidad: " + "; ".join(compat_lines[:6]))
+        prompt_lines.append(
+            "Incluye para que sirve la pieza y beneficios. No inventes numeros de parte "
+            "ni modelos de auto que no se te dieron. No prometas existencias."
+        )
+        result = ai_chat._post_chat_completion(
+            ai_chat.QWEN_CHAT_URL,
+            ai_chat.QWEN_API_KEY,
+            ai_chat.QWEN_MODEL,
+            [
+                {"role": "system", "content": _LLM_DESCRIPTION_SYSTEM},
+                {"role": "user", "content": "\n".join(prompt_lines)},
+            ],
+            max_tokens=400,
+            temperature=0.4,
+            timeout=timeout,
+        )
+        if not result:
+            return None
+        text = (result.get("content") or "").strip()
+        return text or None
+    except Exception as e:
+        logger.warning("LLM description generation failed: %s", e)
+        return None
+
+
+def build_item_description(
+    inventory_row: dict,
+    category_name: str = None,
+    use_llm: bool = False,
+    llm_timeout: float = 8,
+) -> str:
+    """Build a robust Spanish description for an ML item.
+
+    Always returns something usable: structured template data (part number,
+    condition, grade, compatibility, donor vehicle) plus the LLM paragraph
+    when it is available.
+    """
+    name = str(inventory_row.get("name") or "").strip()
+    brand = str(inventory_row.get("brand") or "").strip()
+    part_number = str(
+        inventory_row.get("part_number") or inventory_row.get("serial_number") or ""
+    ).strip()
+    condition = _derive_meli_condition(inventory_row.get("condition"))
+    grade = str(inventory_row.get("condition_grade") or "").strip().upper()
+    compat_lines = _vehicle_compat_lines(inventory_row.get("vehicle_compatibility"))
+
+    header = " ".join(p for p in (name, brand) if p).strip() or (name or part_number)
+    blocks = [header, ""]
+    if part_number:
+        blocks.append(f"Número de parte: {part_number}")
+    if condition == "used":
+        blocks.append(f"Condición: Usado (grado {grade})" if grade in ("A", "B", "C", "D")
+                      else "Condición: Usado")
+    elif condition == "reconstruido":
+        blocks.append("Condición: Reconstruido")
+    else:
+        blocks.append("Condición: Nuevo")
+
+    if condition == "used":
+        donor = " ".join(
+            str(p).strip() for p in (
+                inventory_row.get("donor_make"),
+                inventory_row.get("donor_model"),
+                inventory_row.get("donor_year"),
+            ) if p
+        ).strip()
+        if donor:
+            blocks.append(f"Vehículo donador: {donor}")
+
+    if compat_lines:
+        blocks.append("Compatibilidad: " + "; ".join(compat_lines[:8]))
+    if category_name:
+        blocks.append(f"Categoría: {category_name}")
+
+    llm_text = None
+    if use_llm:
+        llm_text = _llm_description(part_number, name, brand, compat_lines,
+                                    category_name=category_name, timeout=llm_timeout)
+
+    blocks.append("")
+    if llm_text:
+        blocks.append(llm_text)
+    else:
+        blocks.append(
+            "Producto disponible para entrega. Verifica la compatibilidad con tu "
+            "vehículo (marca, modelo y año) antes de comprar. Si tienes dudas, "
+            "pregunta en la sección de preguntas y con gusto te asesoramos."
+        )
+    blocks.append(
+        "Enviamos con factura y garantía. Escríbenos si necesitas otra pieza, "
+        "contamos con amplio surtido de autopartes."
+    )
+
+    text = "\n".join(blocks).strip()
+    return text[:ML_DESCRIPTION_MAX]
+
+
 def check_meli_shipping_config(svc: MeliService, cfg: dict) -> dict:
     """Check if the user's ML account has the required shipping modes configured.
 
@@ -338,13 +852,15 @@ def check_inventory_ml_status(tenant_conn, inventory_ids: list[int], base_url: s
     cur = tenant_conn.cursor()
     cur.execute(
         """
-        SELECT id, part_number, name, brand, price_1, image_url
+        SELECT id, part_number, name, brand, price_1, image_url,
+               condition, condition_grade
         FROM inventory
         WHERE id = ANY(%s)
         """,
         (inventory_ids,),
     )
     rows = {r[0]: r for r in cur.fetchall()}
+    images_map = _fetch_inventory_image_urls(cur, inventory_ids)
 
     stock_map = get_stock_bulk(tenant_conn, branch_id=None)
 
@@ -370,6 +886,9 @@ def check_inventory_ml_status(tenant_conn, inventory_ids: list[int], base_url: s
         price = float(row[4]) if row[4] else 0
         stock = stock_map.get(inv_id, 0)
         image_url = row[5]
+        images = _resolve_image_urls(
+            _merge_image_urls(images_map.get(inv_id), image_url), base_url
+        )
         title = f"{row[2]} {row[3] or ''} {row[1] or ''}".strip()
         if len(title) > 60:
             title = title[:57] + "..."
@@ -379,12 +898,15 @@ def check_inventory_ml_status(tenant_conn, inventory_ids: list[int], base_url: s
             "inventory_id": inv_id,
             "exists": True,
             "title": title,
-            "has_image": bool(image_url),
+            "has_image": bool(images),
             "has_stock": stock > 0,
             "has_price": price > 0,
             "price": price,
             "stock": stock,
-            "image_url": _resolve_image_urls([image_url], base_url)[0] if image_url else None,
+            "image_url": images[0] if images else None,
+            "images_count": len(images),
+            "condition": row[6],
+            "condition_grade": row[7],
             "already_published": existing is not None,
             "existing_listing": existing,
         })
@@ -399,13 +921,17 @@ def validate_items(
     shipping_mode: str = "me2",
     custom_data: dict = None,
     base_url: str = None,
+    use_llm_description: bool = False,
 ) -> dict:
     """Validate items against ML /items/validate without creating them.
 
+    Also returns the generated description (as it will be published) and the
+    estimated fee / net / margin per item.
+
     Returns per-item validation results with ML error details if any.
     """
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -413,21 +939,30 @@ def validate_items(
     if not shipping_check["ok"]:
         return {"valid": [], "invalid": [{"inventory_id": "config", "error": shipping_check["error"]}]}
 
+    up_seller = is_user_product_seller(tenant_conn, svc, cfg)
+
     cur = tenant_conn.cursor()
     cur.execute(
         """
         SELECT id, part_number, name, brand, price_1, vehicle_compatibility,
-               image_url, unit, is_active
+               image_url, unit, is_active,
+               condition, condition_grade, is_unique_piece, serial_number,
+               donor_vin, donor_make, donor_model, donor_year
         FROM inventory
         WHERE id = ANY(%s) AND is_active = true
         """,
         (inventory_ids,),
     )
     rows = {r[0]: r for r in cur.fetchall()}
+    images_map = _fetch_inventory_image_urls(cur, inventory_ids)
     stock_map = get_stock_bulk(tenant_conn, branch_id=None)
 
     custom_data = custom_data or {}
     results = {"valid": [], "invalid": []}
+    # Used parts may need their category resolved via domain_discovery; the
+    # validity cache avoids re-checking the same predicted category per item.
+    site_id = cfg.get("meli_site_id", "MLM")
+    category_cache = {}
 
     for inv_id in inventory_ids:
         row = rows.get(inv_id)
@@ -444,6 +979,14 @@ def validate_items(
             "vehicle_compatibility": row[5],
             "image_url": row[6],
             "unit": row[7],
+            "condition": row[9],
+            "condition_grade": row[10],
+            "is_unique_piece": row[11],
+            "serial_number": row[12],
+            "donor_vin": row[13],
+            "donor_make": row[14],
+            "donor_model": row[15],
+            "donor_year": row[16],
         }
 
         stock = stock_map.get(inv_id, 0)
@@ -454,10 +997,10 @@ def validate_items(
             results["invalid"].append({"inventory_id": inv_id, "error": "El precio debe ser mayor a 0"})
             continue
 
-        images = []
-        if inv.get("image_url"):
-            images.append(inv["image_url"])
-        images = _resolve_image_urls(images, base_url)
+        # All inventory_images photos (primary first) + legacy image_url.
+        images = _resolve_image_urls(
+            _merge_image_urls(images_map.get(inv_id), inv.get("image_url")), base_url
+        )
         if not images:
             results["invalid"].append({"inventory_id": inv_id, "error": "El producto no tiene imagen"})
             continue
@@ -479,36 +1022,67 @@ def validate_items(
         item_stock = (custom_data.get("stocks") or {}).get(str(inv_id), stock)
         shipping_cost = custom_data.get("shipping_cost")
 
+        item_category_id = _item_category_id(
+            svc, site_id, inv, inv_id, meli_category_id, cfg, custom_data, category_cache
+        )
+
         payload = build_item_payload(
-            inv, ml_images, meli_category_id, price, item_stock,
+            inv, ml_images, item_category_id, price, item_stock,
             shipping_mode=shipping_mode, listing_type_id=listing_type_id,
             custom_title=title, extra_attributes=extra_attrs,
             shipping_cost=shipping_cost,
             base_url=base_url,
+            description_text=build_item_description(inv, use_llm=use_llm_description),
         )
+        # Description is not part of /items/validate (separate sub-resource).
+        description = (payload.pop("description", {}) or {}).get("plain_text")
+        if up_seller:
+            # User Products sellers: ML rejects 'title' (derived from family_name)
+            payload.pop("title", None)
 
         try:
             validation = svc.validate_item(payload)
             if validation.get("status") == "valid":
                 # Calculate estimated net earnings after ML fees
-                site_id = cfg.get("meli_site_id", "MLM")
-                fee_calc = _calculate_meli_net_price(svc, site_id, float(price), listing_type_id, meli_category_id)
+                fee_calc = _calculate_meli_net_price(svc, site_id, float(price), listing_type_id, item_category_id)
                 results["valid"].append({
                     "inventory_id": inv_id,
                     "validation": validation,
+                    "meli_category_id": item_category_id,
                     "price": float(price),
                     "fee_amount": fee_calc["fee_amount"],
                     "net_amount": fee_calc["net_amount"],
                     "fee_pct": fee_calc["fee_pct"],
                     "fee_source": fee_calc["source"],
+                    "description": description,
                 })
             else:
                 errors = validation.get("validation_errors", [])
                 error_msgs = [f"{e.get('field', '')}: {e.get('message', '')}" for e in errors]
                 results["invalid"].append({"inventory_id": inv_id, "error": " | ".join(error_msgs) or "Validación fallida", "validation": validation})
         except MeliError as e:
-            err_msg = _extract_meli_error(e)
-            results["invalid"].append({"inventory_id": inv_id, "error": err_msg})
+            # ML returns 400 even when all causes are non-blocking warnings
+            # (e.g. shipping adoption notices). Treat warnings-only as valid.
+            causes = []
+            try:
+                causes = (json.loads(e.response_body or "{}").get("cause") or [])
+            except Exception:
+                pass
+            if e.status_code == 400 and causes and all(c.get("type") == "warning" for c in causes):
+                fee_calc = _calculate_meli_net_price(svc, site_id, float(price), listing_type_id, item_category_id)
+                results["valid"].append({
+                    "inventory_id": inv_id,
+                    "validation": {"warnings": [c.get("message") for c in causes if c.get("message")]},
+                    "price": float(price),
+                    "fee_amount": fee_calc["fee_amount"],
+                    "net_amount": fee_calc["net_amount"],
+                    "fee_pct": fee_calc["fee_pct"],
+                    "fee_source": fee_calc["source"],
+                    "description": description,
+                })
+            else:
+                err_msg = _extract_meli_error(e)
+                results["invalid"].append({"inventory_id": inv_id, "error": err_msg})
         except Exception as e:
             results["invalid"].append({"inventory_id": inv_id, "error": str(e)})
 
@@ -524,13 +1098,23 @@ def publish_items(
     shipping_mode: str = "me2",
     custom_data: dict = None,
     base_url: str = None,
+    use_llm_description: bool = False,
+    chunk_size: int = 0,
+    pace_seconds: float = 1.0,
 ) -> dict:
     """Publish one or more inventory items to MercadoLibre.
 
+    Each item is published with a generated description (see
+    build_item_description), and its commission / net price / margin are
+    persisted on marketplace_listings (v4.28 columns).
+
+    chunk_size > 0 paces the batch: after every `chunk_size` items it sleeps
+    `pace_seconds` to stay under ML's rate limit instead of hammering the API.
+
     Returns summary dict with success/failure per item.
     """
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -538,13 +1122,18 @@ def publish_items(
     if not shipping_check["ok"]:
         return {"success": [], "failed": [{"inventory_id": "config", "error": shipping_check["error"]}]}
 
+    up_seller = is_user_product_seller(tenant_conn, svc, cfg)
+    site_id = cfg.get("meli_site_id", "MLM")
+
     cur = tenant_conn.cursor()
 
     # Batch fetch inventory rows
     cur.execute(
         """
         SELECT id, part_number, name, brand, price_1, vehicle_compatibility,
-               image_url, unit, is_active
+               image_url, unit, is_active,
+               condition, condition_grade, is_unique_piece, serial_number,
+               donor_vin, donor_make, donor_model, donor_year, cost
         FROM inventory
         WHERE id = ANY(%s) AND is_active = true
         """,
@@ -552,13 +1141,23 @@ def publish_items(
     )
     rows = {r[0]: r for r in cur.fetchall()}
 
+    # Batch fetch all photos per item (inventory_images: primary first)
+    images_map = _fetch_inventory_image_urls(cur, inventory_ids)
+
     # Batch fetch stock
     stock_map = get_stock_bulk(tenant_conn, branch_id=None)
 
     custom_data = custom_data or {}
     results = {"success": [], "failed": []}
+    # Used parts may need their category resolved via domain_discovery; the
+    # validity cache avoids re-checking the same predicted category per item.
+    category_cache = {}
+
+    for idx, inv_id in enumerate(inventory_ids):
+        # Rate-limit pacing between chunks.
+        if chunk_size and idx > 0 and idx % chunk_size == 0 and pace_seconds > 0:
+            time.sleep(pace_seconds)
 
-    for inv_id in inventory_ids:
         row = rows.get(inv_id)
         if not row:
             results["failed"].append({"inventory_id": inv_id, "error": "Not found or inactive"})
@@ -573,7 +1172,16 @@ def publish_items(
             "vehicle_compatibility": row[5],
             "image_url": row[6],
             "unit": row[7],
+            "condition": row[9],
+            "condition_grade": row[10],
+            "is_unique_piece": row[11],
+            "serial_number": row[12],
+            "donor_vin": row[13],
+            "donor_make": row[14],
+            "donor_model": row[15],
+            "donor_year": row[16],
         }
+        unit_cost = float(row[17]) if row[17] is not None else None
 
         stock = stock_map.get(inv_id, 0)
         if stock <= 0:
@@ -584,11 +1192,10 @@ def publish_items(
             results["failed"].append({"inventory_id": inv_id, "error": "El precio debe ser mayor a 0"})
             continue
 
-        # Build image list
-        images = []
-        if inv.get("image_url"):
-            images.append(inv["image_url"])
-        images = _resolve_image_urls(images, base_url)
+        # Build image list: all inventory_images photos + legacy image_url.
+        images = _resolve_image_urls(
+            _merge_image_urls(images_map.get(inv_id), inv.get("image_url")), base_url
+        )
 
         if not images:
             results["failed"].append({"inventory_id": inv_id, "error": "El producto no tiene imagen. ML requiere imagen para publicar."})
@@ -611,51 +1218,114 @@ def publish_items(
         item_stock = (custom_data.get("stocks") or {}).get(str(inv_id), stock)
         shipping_cost = custom_data.get("shipping_cost")
 
+        description = build_item_description(inv, use_llm=use_llm_description)
+
+        item_category_id = _item_category_id(
+            svc, site_id, inv, inv_id, meli_category_id, cfg, custom_data, category_cache
+        )
+
         payload = build_item_payload(
-            inv, ml_images, meli_category_id, price, item_stock,
+            inv, ml_images, item_category_id, price, item_stock,
             shipping_mode=shipping_mode, listing_type_id=listing_type_id,
             custom_title=title, extra_attributes=extra_attrs,
             shipping_cost=shipping_cost,
             base_url=base_url,
+            description_text=description,
         )
+        # ML description is a sub-resource: send it separately after create.
+        payload.pop("description", None)
+        if up_seller:
+            # User Products sellers: ML rejects 'title' (derived from family_name)
+            payload.pop("title", None)
 
         try:
             ml_item = svc.create_item(payload)
             external_item_id = ml_item.get("id")
             permalink = ml_item.get("permalink")
 
-            # Persist listing
+            # Best-effort: attach the description. A failure here never blocks
+            # the publication (the item is already live), only the text.
+            if external_item_id:
+                try:
+                    svc.set_item_description(external_item_id, description, create=True)
+                except Exception as desc_err:
+                    logger.warning(
+                        "Could not set ML description for %s: %s", external_item_id, desc_err
+                    )
+
+            # Persist listing + economics (fee / net / margin, v4.28).
+            # Upsert explicitly by (inventory_id, channel): v4.28 dropped the
+            # unique index so an imported catalog can hold several listings per
+            # product, but a publish should still refresh the existing row for
+            # that product instead of piling up duplicates.
+            econ = compute_listing_economics(
+                svc, site_id, float(price) if price else inv["price_1"],
+                listing_type_id, item_category_id, cost=unit_cost,
+            )
+            publish_price = float(price) if price else inv["price_1"]
+            listing_title = payload.get("title") or payload.get("family_name") or inv["name"]
             cur.execute(
                 """
-                INSERT INTO marketplace_listings
-                    (inventory_id, channel, external_item_id, external_status,
-                     external_permalink, title, meli_category_id, publish_price,
-                     last_sync_at, sync_errors, is_active)
-                VALUES (%s, 'mercadolibre', %s, 'active', %s, %s, %s, %s, NOW(), NULL, true)
-                ON CONFLICT (inventory_id, channel) WHERE is_active = true
-                DO UPDATE SET
-                    external_item_id = EXCLUDED.external_item_id,
-                    external_status = EXCLUDED.external_status,
-                    external_permalink = EXCLUDED.external_permalink,
-                    title = EXCLUDED.title,
-                    meli_category_id = EXCLUDED.meli_category_id,
-                    publish_price = EXCLUDED.publish_price,
-                    last_sync_at = NOW(),
-                    sync_errors = NULL,
-                    is_active = true
+                SELECT id FROM marketplace_listings
+                WHERE inventory_id = %s AND channel = 'mercadolibre' AND is_active = true
+                ORDER BY id LIMIT 1
                 """,
-                (
-                    inv_id,
-                    external_item_id,
-                    permalink,
-                    payload["title"],
-                    meli_category_id,
-                    inv["price_1"],
-                ),
+                (inv_id,),
             )
+            existing = cur.fetchone()
+            if existing:
+                cur.execute(
+                    """
+                    UPDATE marketplace_listings
+                    SET external_item_id = %s, external_status = 'active',
+                        external_permalink = %s, title = %s, meli_category_id = %s,
+                        publish_price = %s, listing_type_id = %s, meli_description = %s,
+                        meli_fee = %s, meli_fee_pct = %s, meli_net_price = %s,
+                        meli_fee_source = %s, cost_at_publish = %s, margin_pct = %s,
+                        economics_updated_at = NOW(), last_sync_at = NOW(),
+                        sync_errors = NULL, is_active = true
+                    WHERE id = %s
+                    """,
+                    (
+                        external_item_id, permalink, listing_title, item_category_id,
+                        publish_price, listing_type_id, description,
+                        econ["meli_fee"], econ["meli_fee_pct"], econ["meli_net_price"],
+                        econ["meli_fee_source"], econ["cost_at_publish"], econ["margin_pct"],
+                        existing[0],
+                    ),
+                )
+            else:
+                cur.execute(
+                    """
+                    INSERT INTO marketplace_listings
+                        (inventory_id, channel, external_item_id, external_status,
+                         external_permalink, title, meli_category_id, publish_price,
+                         listing_type_id, meli_description,
+                         meli_fee, meli_fee_pct, meli_net_price, meli_fee_source,
+                         cost_at_publish, margin_pct, economics_updated_at,
+                         inventory_matched_at, last_sync_at, sync_errors, is_active)
+                    VALUES (%s, 'mercadolibre', %s, 'active', %s, %s, %s, %s,
+                            %s, %s, %s, %s, %s, %s, %s, %s, NOW(), NOW(), NOW(), NULL, true)
+                    """,
+                    (
+                        inv_id, external_item_id, permalink, listing_title,
+                        item_category_id, publish_price, listing_type_id, description,
+                        econ["meli_fee"], econ["meli_fee_pct"], econ["meli_net_price"],
+                        econ["meli_fee_source"], econ["cost_at_publish"], econ["margin_pct"],
+                    ),
+                )
             tenant_conn.commit()
             results["success"].append(
-                {"inventory_id": inv_id, "external_item_id": external_item_id, "permalink": permalink}
+                {
+                    "inventory_id": inv_id,
+                    "external_item_id": external_item_id,
+                    "permalink": permalink,
+                    "meli_category_id": item_category_id,
+                    "description_chars": len(description or ""),
+                    "meli_fee": econ["meli_fee"],
+                    "meli_net_price": econ["meli_net_price"],
+                    "margin_pct": econ["margin_pct"],
+                }
             )
         except MeliError as e:
             tenant_conn.rollback()
@@ -725,14 +1395,14 @@ def get_listings(tenant_conn, page: int = 1, per_page: int = 50, status: str = N
 def sync_listing(tenant_conn, listing_id: int) -> dict:
     """Force a manual sync of stock/price for a single listing."""
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
     cur = tenant_conn.cursor()
     cur.execute(
         """
-        SELECT id, inventory_id, external_item_id, meli_category_id
+        SELECT id, inventory_id, external_item_id, meli_category_id, listing_type_id
         FROM marketplace_listings WHERE id = %s AND is_active = true
         """,
         (listing_id,),
@@ -747,35 +1417,56 @@ def sync_listing(tenant_conn, listing_id: int) -> dict:
         "inventory_id": row[1],
         "external_item_id": row[2],
         "meli_category_id": row[3],
+        "listing_type_id": row[4],
     }
 
-    # Get current stock/price
+    # Get current stock/price/cost
     cur.execute(
-        "SELECT price_1 FROM inventory WHERE id = %s",
+        "SELECT price_1, cost FROM inventory WHERE id = %s",
         (listing["inventory_id"],),
     )
     price_row = cur.fetchone()
     current_price = float(price_row[0]) if price_row and price_row[0] else 0
+    unit_cost = float(price_row[1]) if price_row and price_row[1] is not None else None
 
     stock_map = get_stock_bulk(tenant_conn, branch_id=None)
     current_stock = stock_map.get(listing["inventory_id"], 0)
 
+    # Never push a zero/unknown price: ML rejects it and it would blank out a
+    # live listing. This also covers listings not linked to a local product.
+    if current_price <= 0:
+        cur.close()
+        raise ValueError(
+            "No se puede sincronizar: el producto no tiene precio (>0) o la publicación "
+            "no está vinculada a un producto del inventario."
+        )
+
     try:
         svc.update_item(
             listing["external_item_id"],
-            {"price": round(current_price, 2), "available_quantity": max(current_stock, 0)},
+            {"price": round(current_price, 2), "available_quantity": max(int(current_stock or 0), 0)},
         )
         cur.execute(
             """
             UPDATE marketplace_listings
-            SET last_sync_at = NOW(), sync_errors = NULL, publish_price = %s
+            SET last_sync_at = NOW(), sync_errors = NULL,
+                publish_price = COALESCE(NULLIF(%s, 0), publish_price)
             WHERE id = %s
             """,
             (current_price, listing_id),
         )
+        # Refresh the stored economics for the price we just pushed.
+        econ = compute_listing_economics(
+            svc, cfg.get("meli_site_id", "MLM"), current_price,
+            listing["listing_type_id"] or "gold_special",
+            listing["meli_category_id"], cost=unit_cost,
+        )
+        _persist_listing_economics(cur, listing_id, econ)
         tenant_conn.commit()
         cur.close()
-        return {"ok": True, "price": current_price, "stock": current_stock}
+        return {"ok": True, "price": current_price, "stock": current_stock,
+                "meli_fee": econ["meli_fee"], "meli_net_price": econ["meli_net_price"],
+                "margin_pct": econ["margin_pct"]}
     except MeliError as e:
         tenant_conn.rollback()
         cur.execute(
@@ -789,7 +1480,7 @@ def sync_listing(tenant_conn, listing_id: int) -> dict:
 
 def pause_listing(tenant_conn, listing_id: int) -> dict:
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -815,7 +1506,7 @@ def pause_listing(tenant_conn, listing_id: int) -> dict:
 
 def activate_listing(tenant_conn, listing_id: int) -> dict:
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -841,7 +1532,7 @@ def activate_listing(tenant_conn, listing_id: int) -> dict:
 
 def close_listing(tenant_conn, listing_id: int) -> dict:
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -904,7 +1595,11 @@ def _upsert_question(cur, q_data: dict, listing_id_map: dict):
     external_qid = str(q_data.get("id"))
     external_item_id = str(q_data.get("item_id"))
     text = q_data.get("text", "")
-    status = q_data.get("status", "unanswered")
+    status = (q_data.get("status") or "unanswered")
+    # ML returns UNANSWERED/ANSWERED; store lowercase so the auto-answer and
+    # SLA queries (which compare lowercase) see every question.
+    if isinstance(status, str):
+        status = status.lower()
     answer = q_data.get("answer", {})
     answer_text = answer.get("text") if answer else None
     answer_date = None
@@ -957,7 +1652,7 @@ def sync_questions(tenant_conn) -> dict:
     Returns {"synced": N, "items": [...]}.
     """
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -991,13 +1686,22 @@ def sync_questions(tenant_conn) -> dict:
         except Exception as e:
             logger.warning("Failed to sync questions for item %s: %s", item_id, e)
 
-    return {"synced": total_synced}
+    summary = {"synced": total_synced}
+
+    # Optional auto-answer after sync — opt-in via tenant_config, never forced.
+    try:
+        if get_meli_config(tenant_conn).get("meli_auto_answer_questions"):
+            summary["auto_answer"] = auto_answer_questions(tenant_conn)
+    except Exception as e:
+        logger.warning("auto-answer after sync failed: %s", e)
+
+    return summary
 
 
 def fetch_question_from_ml(tenant_conn, external_question_id: str) -> dict:
     """Fetch a single question from ML API and upsert locally."""
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -1018,7 +1722,7 @@ def fetch_question_from_ml(tenant_conn, external_question_id: str) -> dict:
 def answer_question(tenant_conn, local_question_id: int, text: str) -> dict:
     """Answer a question via ML API and update local status."""
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -1050,8 +1754,99 @@ def answer_question(tenant_conn, local_question_id: int, text: str) -> dict:
     return {"ok": True, "ml_response": resp}
 
 
+# ─── AI question suggestions (A7) ───────────────────────────────────────────
+#
+# Auto-answering is OPT-IN: it only runs when the tenant sets
+# `meli_auto_answer_questions = true`, and only for high-confidence answers
+# built from templates/data (never free-text LLM output).
+
+AUTO_ANSWER_MIN_CONFIDENCE = 0.8
+
+
+def suggest_question_answer(tenant_conn, local_question_id: int, use_llm: bool = True) -> dict:
+    """Classify a local question and return a suggested answer.
+
+    Delegates to services.question_ai. Raises ValueError when the question
+    does not exist.
+    """
+    from services import question_ai
+    return question_ai.get_question_suggestion(
+        tenant_conn, local_question_id, use_llm=use_llm
+    )
+
+
+def auto_answer_questions(tenant_conn, limit: int = 20) -> dict:
+    """Answer unanswered questions with high-confidence template suggestions.
+
+    No-op unless `meli_auto_answer_questions` is enabled for the tenant.
+    Returns a summary with the questions answered and skipped (with reasons).
+    """
+    cfg = get_meli_config(tenant_conn)
+    if not cfg.get("meli_auto_answer_questions"):
+        return {"enabled": False, "answered": 0, "skipped": 0,
+                "results": [], "reason": "meli_auto_answer_questions disabled"}
+
+    cur = tenant_conn.cursor()
+    cur.execute("""
+        SELECT id FROM marketplace_questions
+        WHERE LOWER(COALESCE(status, 'unanswered')) = 'unanswered'
+          AND external_question_id IS NOT NULL
+        ORDER BY question_date ASC NULLS LAST
+        LIMIT %s
+    """, (limit,))
+    question_ids = [r[0] for r in cur.fetchall()]
+    cur.close()
+
+    answered, skipped = [], []
+    for qid in question_ids:
+        try:
+            suggestion = suggest_question_answer(tenant_conn, qid)
+        except Exception as e:
+            # A failing query inside the suggestion can leave the connection's
+            # transaction aborted; roll back so the next question still works.
+            try:
+                tenant_conn.rollback()
+            except Exception:
+                pass
+            skipped.append({"question_id": qid, "reason": f"suggest_error: {e}"})
+            continue
+
+        text = (suggestion.get("suggested_answer") or "").strip()
+        if (suggestion.get("auto_ok") and text
+                and suggestion.get("confidence", 0) >= AUTO_ANSWER_MIN_CONFIDENCE):
+            try:
+                answer_question(tenant_conn, qid, text)
+                answered.append({
+                    "question_id": qid,
+                    "intent": suggestion.get("intent"),
+                    "source": suggestion.get("source"),
+                    "confidence": suggestion.get("confidence"),
+                })
+            except Exception as e:
+                try:
+                    tenant_conn.rollback()
+                except Exception:
+                    pass
+                skipped.append({"question_id": qid, "reason": f"answer_error: {e}"})
+        else:
+            skipped.append({
+                "question_id": qid,
+                "intent": suggestion.get("intent"),
+                "confidence": suggestion.get("confidence"),
+                "source": suggestion.get("source"),
+                "reason": "needs_review",
+            })
+
+    return {"enabled": True, "answered": len(answered), "skipped": len(skipped),
+            "results": answered, "details": skipped}
+
+
 def list_local_questions(tenant_conn, status: str = None) -> list:
-    """Return questions from local DB, optionally filtered by status."""
+    """Return questions from local DB, optionally filtered by status.
+
+    Status comparison is case-insensitive (ML returns UNANSWERED/ANSWERED,
+    older local rows may still carry the uppercase form).
+    """
     cur = tenant_conn.cursor()
     if status:
         cur.execute(
@@ -1061,7 +1856,7 @@ def list_local_questions(tenant_conn, status: str = None) -> list:
                    q.answer_date, q.created_at, l.title, l.external_permalink
             FROM marketplace_questions q
             LEFT JOIN marketplace_listings l ON l.id = q.listing_id
-            WHERE q.status = %s
+            WHERE LOWER(COALESCE(q.status, '')) = LOWER(%s)
             ORDER BY q.question_date DESC
             """,
             (status,),
@@ -1098,132 +1893,201 @@ def list_local_questions(tenant_conn, status: str = None) -> list:
     return results
 
 
+def list_stale_questions(tenant_conn, max_age_hours: float = 24) -> list:
+    """Unanswered questions older than `max_age_hours` (the SLA breach list).
+
+    Oldest first, so the most overdue question is at the top. Case-insensitive
+    on status, same as auto_answer_questions.
+    """
+    cur = tenant_conn.cursor()
+    cur.execute(
+        """
+        SELECT q.id, q.external_question_id, q.external_item_id, q.question_text,
+               q.buyer_nickname, q.question_date,
+               EXTRACT(EPOCH FROM (NOW() - COALESCE(q.question_date, q.created_at))) / 3600.0
+                   AS age_hours,
+               l.title, l.external_permalink
+        FROM marketplace_questions q
+        LEFT JOIN marketplace_listings l ON l.id = q.listing_id
+        WHERE LOWER(COALESCE(q.status, 'unanswered')) = 'unanswered'
+          AND COALESCE(q.question_date, q.created_at)
+              < NOW() - (%s || ' hours')::interval
+        ORDER BY COALESCE(q.question_date, q.created_at) ASC
+        """,
+        (max_age_hours,),
+    )
+    rows = cur.fetchall()
+    cur.close()
+    return [
+        {
+            "id": r[0],
+            "external_question_id": r[1],
+            "external_item_id": r[2],
+            "question_text": r[3],
+            "buyer_nickname": r[4],
+            "question_date": r[5],
+            "age_hours": round(float(r[6]), 1) if r[6] is not None else None,
+            "listing_title": r[7],
+            "listing_permalink": r[8],
+        }
+        for r in rows
+    ]
+
+
 # ═══════════════════════════════════════════════════════════════════════════
 # ORDERS
 # ═══════════════════════════════════════════════════════════════════════════
 
+# ML only accepts these values in the order.status search filter. Other
+# statuses (refunded, partially_paid, ...) are rejected with 400, so we cover
+# every order with this set.
+ORDER_SYNC_STATUSES = ["paid", "payment_required", "payment_in_process", "confirmed", "cancelled", "invalid"]
+
+
+def _save_order(cur, full: dict) -> Optional[int]:
+    """Upsert a full ML order payload into marketplace_orders + items.
+
+    Returns the local marketplace_orders.id, or None when the payload has no id.
+    Does not commit — the caller owns the transaction.
+    """
+    order_id = full.get("id")
+    if not order_id:
+        return None
+
+    buyer = full.get("buyer") or {}
+    shipping = full.get("shipping") or {}
+    order_items = full.get("order_items") or []
+
+    shipping_address = None
+    if shipping:
+        shipping_address = {
+            "id": shipping.get("id"),
+            "status": shipping.get("status"),
+            "tracking_number": shipping.get("tracking_number"),
+            "shipping_method": (shipping.get("shipping_option") or {}).get("name"),
+        }
+
+    buyer_name = f"{buyer.get('first_name') or ''} {buyer.get('last_name') or ''}".strip()
+
+    cur.execute(
+        """
+        INSERT INTO marketplace_orders
+            (channel, external_order_id, external_status, buyer_name,
+             buyer_email, buyer_phone, buyer_nickname, shipping_address,
+             total_amount, shipping_cost, meli_shipping_id, raw_json, updated_at)
+        VALUES ('mercadolibre', %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, NOW())
+        ON CONFLICT (external_order_id) DO UPDATE SET
+            external_status = EXCLUDED.external_status,
+            buyer_name = EXCLUDED.buyer_name,
+            buyer_email = EXCLUDED.buyer_email,
+            buyer_phone = EXCLUDED.buyer_phone,
+            buyer_nickname = EXCLUDED.buyer_nickname,
+            shipping_address = EXCLUDED.shipping_address,
+            total_amount = EXCLUDED.total_amount,
+            shipping_cost = EXCLUDED.shipping_cost,
+            meli_shipping_id = EXCLUDED.meli_shipping_id,
+            raw_json = EXCLUDED.raw_json,
+            updated_at = NOW()
+        RETURNING id
+        """,
+        (
+            str(order_id),
+            full.get("status"),
+            buyer_name,
+            buyer.get("email"),
+            (buyer.get("phone") or {}).get("number"),
+            # ML exposes the buyer handle as buyer.nickname (there is no
+            # `from.nickname` in the order payload).
+            buyer.get("nickname"),
+            json.dumps(shipping_address) if shipping_address else None,
+            full.get("total_amount"),
+            shipping.get("cost") if shipping else None,
+            str(shipping.get("id")) if shipping else None,
+            json.dumps(full),
+        ),
+    )
+    row = cur.fetchone()
+    mpo_id = row[0] if row else None
+
+    if mpo_id and order_items:
+        # Clear old items and re-insert
+        cur.execute(
+            "DELETE FROM marketplace_order_items WHERE marketplace_order_id = %s",
+            (mpo_id,),
+        )
+        for it in order_items:
+            item_data = it.get("item") or {}
+            cur.execute(
+                """
+                INSERT INTO marketplace_order_items
+                    (marketplace_order_id, external_item_id, title,
+                     quantity, unit_price, total_price)
+                VALUES (%s, %s, %s, %s, %s, %s)
+                """,
+                (
+                    mpo_id,
+                    item_data.get("id"),
+                    item_data.get("title"),
+                    it.get("quantity"),
+                    it.get("unit_price"),
+                    it.get("full_unit_price"),
+                ),
+            )
+    return mpo_id
+
+
 def fetch_and_save_orders(tenant_conn, date_from: Optional[str] = None) -> dict:
-    """Pull orders from ML and upsert into marketplace_orders."""
+    """Pull orders from ML in every relevant status and upsert them locally."""
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     user_id = cfg.get("meli_user_id")
     if not svc or not user_id:
         raise ValueError("MercadoLibre not configured")
 
-    ml_resp = svc.get_orders(user_id, status="paid", date_from=date_from)
-    orders = ml_resp.get("results", [])
-
     cur = tenant_conn.cursor()
-    created = 0
     updated = 0
+    seen = set()
 
-    for order_summary in orders:
-        order_id = order_summary.get("id")
-        if not order_id:
-            continue
-
-        # Fetch full order detail
+    for status in ORDER_SYNC_STATUSES:
         try:
-            full = svc.get_order(str(order_id))
-        except MeliError:
+            ml_resp = svc.get_orders(user_id, status=status, date_from=date_from)
+        except MeliError as e:
+            logger.warning("Failed to fetch ML orders (status=%s): %s", status, e)
             continue
 
-        external_status = full.get("status")
-        buyer = full.get("buyer", {})
-        shipping = full.get("shipping", {})
-        order_items = full.get("order_items", [])
+        for order_summary in ml_resp.get("results", []):
+            order_id = order_summary.get("id")
+            if not order_id or str(order_id) in seen:
+                continue
+            seen.add(str(order_id))
 
-        # Build shipping address JSON
-        shipping_address = None
-        if shipping:
-            shipping_address = {
-                "id": shipping.get("id"),
-                "status": shipping.get("status"),
-                "tracking_number": shipping.get("tracking_number"),
-                "shipping_method": shipping.get("shipping_option", {}).get("name"),
-            }
+            # Fetch full order detail
+            try:
+                full = svc.get_order(str(order_id))
+            except MeliError:
+                continue
 
-        total_amount = full.get("total_amount")
-        shipping_cost = shipping.get("cost") if shipping else None
-
-        # Upsert order
-        cur.execute(
-            """
-            INSERT INTO marketplace_orders
-                (channel, external_order_id, external_status, buyer_name,
-                 buyer_email, buyer_phone, buyer_nickname, shipping_address,
-                 total_amount, shipping_cost, meli_shipping_id, raw_json, updated_at)
-            VALUES ('mercadolibre', %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, NOW())
-            ON CONFLICT (external_order_id) DO UPDATE SET
-                external_status = EXCLUDED.external_status,
-                buyer_name = EXCLUDED.buyer_name,
-                buyer_email = EXCLUDED.buyer_email,
-                buyer_phone = EXCLUDED.buyer_phone,
-                shipping_address = EXCLUDED.shipping_address,
-                total_amount = EXCLUDED.total_amount,
-                shipping_cost = EXCLUDED.shipping_cost,
-                meli_shipping_id = EXCLUDED.meli_shipping_id,
-                raw_json = EXCLUDED.raw_json,
-                updated_at = NOW()
-            RETURNING id
-            """,
-            (
-                str(order_id),
-                external_status,
-                buyer.get("first_name", "") + " " + buyer.get("last_name", ""),
-                buyer.get("email"),
-                buyer.get("phone", {}).get("number"),
-                buyer.get("nickname"),
-                json.dumps(shipping_address) if shipping_address else None,
-                total_amount,
-                shipping_cost,
-                str(shipping.get("id")) if shipping else None,
-                json.dumps(full),
-            ),
-        )
-        row = cur.fetchone()
-        mpo_id = row[0] if row else None
-
-        if mpo_id:
-            # Check if this was insert or update
-            cur.execute(
-                "SELECT created_at FROM marketplace_orders WHERE id = %s",
-                (mpo_id,),
-            )
-            created_at = cur.fetchone()[0]
-            # Simple heuristic: if updated_at == created_at (within 1s), it's new
-            is_new = True  # ON CONFLICT always returns id; we count as updated for simplicity
-            updated += 1
-
-        # Upsert order items
-        if mpo_id and order_items:
-            # Clear old items and re-insert
-            cur.execute(
-                "DELETE FROM marketplace_order_items WHERE marketplace_order_id = %s",
-                (mpo_id,),
-            )
-            for it in order_items:
-                item_data = it.get("item", {})
-                cur.execute(
-                    """
-                    INSERT INTO marketplace_order_items
-                        (marketplace_order_id, external_item_id, title,
-                         quantity, unit_price, total_price)
-                    VALUES (%s, %s, %s, %s, %s, %s)
-                    """,
-                    (
-                        mpo_id,
-                        item_data.get("id"),
-                        item_data.get("title"),
-                        it.get("quantity"),
-                        it.get("unit_price"),
-                        it.get("full_unit_price"),
-                    ),
-                )
+            if _save_order(cur, full):
+                updated += 1
 
     tenant_conn.commit()
     cur.close()
-    return {"processed": len(orders), "updated": updated}
+    return {"processed": len(seen), "updated": updated}
+
+
+def fetch_and_save_order(tenant_conn, order_id) -> dict:
+    """Fetch a single ML order by id and upsert it (webhook processing)."""
+    cfg = get_meli_config(tenant_conn)
+    svc = _get_meli_service(cfg, tenant_conn)
+    if not svc:
+        raise ValueError("MercadoLibre not configured")
+
+    full = svc.get_order(str(order_id))
+    cur = tenant_conn.cursor()
+    mpo_id = _save_order(cur, full)
+    tenant_conn.commit()
+    cur.close()
+    return {"marketplace_order_id": mpo_id, "external_order_id": str(order_id), "status": full.get("status")}
 
 
 def get_orders(tenant_conn, page=1, per_page=50, status=None):
@@ -1354,16 +2218,113 @@ def update_order_status(tenant_conn, order_id: int, new_status: str) -> dict:
 # CONVERT ORDER → SALE
 # ═══════════════════════════════════════════════════════════════════════════
 
+def _tenant_auto_invoice_enabled(tenant_conn) -> bool:
+    """Tenant opt-in (tenant_config.meli_auto_invoice) to invoice MeLi sales.
+
+    Off by default: an operator must explicitly enable it per tenant. The flag
+    is read, never written, by this module.
+    """
+    cur = tenant_conn.cursor()
+    try:
+        cur.execute("SELECT value FROM tenant_config WHERE key = 'meli_auto_invoice'")
+        row = cur.fetchone()
+        return bool(row) and str(row[0]).strip().lower() in ("true", "1", "yes", "on")
+    except Exception:
+        return False
+    finally:
+        cur.close()
+
+
+def _enqueue_order_cfdi(tenant_conn, sale_id: int) -> Optional[dict]:
+    """Enqueue a sale invoice (CFDI ingreso) for a marketplace sale.
+
+    Marketplace buyers rarely provide fiscal data, so the invoice is issued to
+    "PUBLICO EN GENERAL" (SAT RFC XAXX010101000); build_ingreso_payload falls
+    back to that when no customer RFC is available.
+
+    No-op (returns None) when a CFDI already exists for the sale (e.g. the
+    pos_engine hook already enqueued one because the customer has an RFC) or
+    when Facturapi is not configured for the tenant.
+    """
+    cur = tenant_conn.cursor()
+    try:
+        cur.execute(
+            "SELECT 1 FROM cfdi_queue WHERE sale_id = %s AND type = 'ingreso' "
+            "AND status <> 'cancelled' LIMIT 1",
+            (sale_id,),
+        )
+        if cur.fetchone():
+            return None
+
+        # Reuse the invoicing module's issuer config so the CFDI carries the
+        # same RFC / CP / serie as a counter sale (imported lazily to avoid a
+        # module-level blueprint -> service dependency).
+        from blueprints.invoicing_bp import _get_issuer_config
+        tcfg = _get_issuer_config(cur)
+        if not tcfg.get("facturapi_key"):
+            logger.info("MeLi sale #%s: Facturapi not configured, skipping CFDI", sale_id)
+            return None
+
+        cur.execute(
+            "SELECT part_number, name, quantity, unit_price, discount_pct, tax_rate "
+            "FROM sale_items WHERE sale_id = %s ORDER BY id",
+            (sale_id,),
+        )
+        items = []
+        for part_number, name, quantity, unit_price, discount_pct, tax_rate in cur.fetchall():
+            price = float(unit_price or 0)
+            qty = int(quantity or 0)
+            disc_pct = float(discount_pct or 0)
+            items.append({
+                "part_number": part_number,
+                "name": name or part_number,
+                "quantity": qty,
+                "unit_price": price,
+                "discount_amount": round(price * disc_pct / 100 * qty, 2),
+                "tax_rate": float(tax_rate if tax_rate is not None else 0.16),
+            })
+
+        from services.cfdi_facturapi_builder import build_ingreso_payload
+        from services.cfdi_queue import enqueue_cfdi
+
+        payload = build_ingreso_payload(
+            {
+                "id": sale_id,
+                "items": items,
+                "payment_method": "transferencia",
+                "sale_type": "cash",
+                "currency": "MXN",
+            },
+            tcfg,
+            None,
+        )
+        return enqueue_cfdi(tenant_conn, sale_id, "ingreso", payload)
+    except Exception as e:
+        logger.warning("Could not enqueue MeLi CFDI for sale %s: %s", sale_id, e)
+        return None
+    finally:
+        cur.close()
+
+
 def convert_order_to_sale(
-    tenant_conn, marketplace_order_id: int, employee_id: int = None, register_id: int = None
+    tenant_conn, marketplace_order_id: int, employee_id: int = None,
+    register_id: int = None, generate_cfdi: bool = False,
 ) -> dict:
     """Convert a marketplace order into a Nexus sale.
 
     1. Look up marketplace_order + items
-    2. Map items to inventory_id (via marketplace_listings external_item_id)
-    3. Build sale_data compatible with process_sale()
-    4. Call process_sale()
-    5. Link sale back to marketplace_order
+    2. Map items to inventory_id (order item link, then marketplace_listings)
+    3. Run the canonical pos_engine.process_sale() — so the sale gets the same
+       accounting / savings / loyalty / webhook / CFDI hooks as a counter sale
+       (process_sale uses _safe_g(), so it is safe outside a request context)
+    4. Stamp source='mercadolibre' + external_order_id on the sale (process_sale
+       does not know about the marketplace origin)
+    5. Enqueue the CFDI when the tenant opted in (meli_auto_invoice) or the
+       caller asked for it (generate_cfdi)
+    6. Link the sale back to the marketplace order
+
+    `generate_cfdi` mirrors pos_engine's counter-sale checkbox; without it the
+    CFDI is only enqueued when tenant_config.meli_auto_invoice = true.
     """
     order = get_order_detail(tenant_conn, marketplace_order_id)
     if order.get("nexus_sale_id"):
@@ -1374,16 +2335,22 @@ def convert_order_to_sale(
     # Build sale items
     sale_items = []
     for it in order["items"]:
-        # Map external_item_id -> inventory_id via marketplace_listings
-        cur.execute(
-            "SELECT inventory_id FROM marketplace_listings WHERE external_item_id = %s LIMIT 1",
-            (it["external_item_id"],),
-        )
-        inv_row = cur.fetchone()
-        inventory_id = inv_row[0] if inv_row else None
+        inventory_id = it.get("inventory_id")
+        if not inventory_id:
+            # Map external_item_id -> inventory_id via marketplace_listings
+            cur.execute(
+                """
+                SELECT inventory_id FROM marketplace_listings
+                WHERE external_item_id = %s AND channel = 'mercadolibre'
+                ORDER BY is_active DESC, id DESC
+                LIMIT 1
+                """,
+                (it["external_item_id"],),
+            )
+            inv_row = cur.fetchone()
+            inventory_id = inv_row[0] if inv_row else None
 
         if not inventory_id:
-            # Try to match by title fuzzy? Skip for now.
             cur.close()
             raise ValueError(f"Could not map item {it['external_item_id']} to inventory")
 
@@ -1412,7 +2379,17 @@ def convert_order_to_sale(
         )
         customer_id = cur.fetchone()[0]
 
-    # Build sale_data
+    # Marketplace sales are not tied to a cashier branch: use the main branch,
+    # falling back to the lowest-id active branch.
+    cur.execute(
+        "SELECT id FROM branches WHERE is_main = true AND is_active = true ORDER BY id LIMIT 1"
+    )
+    brow = cur.fetchone()
+    if not brow:
+        cur.execute("SELECT id FROM branches WHERE is_active = true ORDER BY id LIMIT 1")
+        brow = cur.fetchone()
+    branch_id = brow[0] if brow else None
+
     sale_data = {
         "items": sale_items,
         "customer_id": customer_id,
@@ -1421,158 +2398,79 @@ def convert_order_to_sale(
         "register_id": register_id,
         "amount_paid": float(order["total_amount"] or 0),
         "notes": f"MercadoLibre order #{order['external_order_id']}",
+        "branch_id": branch_id,
+        "currency": "MXN",
+        "generate_cfdi": bool(generate_cfdi),
     }
 
-    # We need to run process_sale inside the same connection.
-    # process_sale expects the caller to commit. We'll do that.
-    # However, process_sale uses flask.g for employee_id and branch_id.
-    # We need to set those or pass them explicitly.
-    # For now, we'll create the sale manually to avoid flask.g dependency.
+    # Canonical sale path (accounting, savings, loyalty, dropshipping webhooks
+    # and the auto-invoice hook all run inside process_sale).
+    sale = process_sale(tenant_conn, sale_data)
+    sale_id = sale["id"]
 
-    sale = _create_sale_manual(tenant_conn, sale_data, employee_id=employee_id)
+    # process_sale's non-blocking hooks swallow their own errors without a
+    # rollback, so an optional hook that fails (e.g. wa_learning on tenants
+    # that never created the WhatsApp tables) leaves the connection in an
+    # aborted transaction. record_sale_savings() has already committed the
+    # sale by then; normalize the connection state and verify the sale landed
+    # before doing our own writes.
+    try:
+        tenant_conn.commit()
+    except Exception:
+        tenant_conn.rollback()
+    cur = tenant_conn.cursor()
+    cur.execute("SELECT 1 FROM sales WHERE id = %s", (sale_id,))
+    if not cur.fetchone():
+        cur.close()
+        raise ValueError(
+            "La venta de la orden no quedó registrada: un hook de pos_engine "
+            "revirtió la transacción. Revisa los hooks no bloqueantes de la venta."
+        )
+
+    # process_sale has no notion of the marketplace origin.
+    cur.execute(
+        "UPDATE sales SET source = 'mercadolibre', external_order_id = %s WHERE id = %s",
+        (order["external_order_id"], sale_id),
+    )
+
+    # Invoice the marketplace sale when requested. The generic MercadoLibre
+    # customer has no RFC, so process_sale's own CFDI hook will not have fired;
+    # _enqueue_order_cfdi is idempotent and skips when a CFDI already exists.
+    cfdi = None
+    if generate_cfdi or _tenant_auto_invoice_enabled(tenant_conn):
+        cfdi = _enqueue_order_cfdi(tenant_conn, sale_id)
 
     # Link order to sale
     cur.execute(
         "UPDATE marketplace_orders SET nexus_sale_id = %s, status = 'confirmed', updated_at = NOW() WHERE id = %s",
-        (sale["id"], marketplace_order_id),
+        (sale_id, marketplace_order_id),
     )
     tenant_conn.commit()
     cur.close()
-    return {"sale_id": sale["id"], "marketplace_order_id": marketplace_order_id}
-
-
-def _create_sale_manual(tenant_conn, sale_data: dict, employee_id: int = None) -> dict:
-    """Create a sale record without relying on flask.g.
-
-    Simplified version of process_sale for background / external use.
-    """
-    from services.inventory_engine import record_sale as inventory_record_sale
-    from decimal import Decimal, ROUND_HALF_UP
-
-    cur = tenant_conn.cursor()
-    items = sale_data.get("items", [])
-    customer_id = sale_data.get("customer_id")
-    payment_method = sale_data.get("payment_method", "efectivo")
-    sale_type = sale_data.get("sale_type", "cash")
-    register_id = sale_data.get("register_id")
-    amount_paid = float(sale_data.get("amount_paid", 0))
-    notes = sale_data.get("notes")
-
-    if not items:
-        raise ValueError("No items in sale")
-
-    # Enrich items
-    inv_ids = [it["inventory_id"] for it in items]
-    cur.execute(
-        """
-        SELECT id, part_number, name, cost, price_1, tax_rate
-        FROM inventory WHERE id = ANY(%s) AND is_active = true
-        ORDER BY id FOR UPDATE
-        """,
-        (inv_ids,),
-    )
-    inv_map = {r[0]: r for r in cur.fetchall()}
-
-    enriched = []
-    for it in items:
-        inv_id = it["inventory_id"]
-        inv = inv_map.get(inv_id)
-        if not inv:
-            raise ValueError(f"Inventory item {inv_id} not found")
-        qty = int(it.get("quantity", 1))
-        unit_price = float(it.get("unit_price", inv[4] or 0))
-        discount_pct = float(it.get("discount_pct", 0))
-        tax_rate = float(it.get("tax_rate", inv[5] or 0.16))
-        unit_cost = float(inv[3]) if inv[3] else 0
-
-        enriched.append({
-            "inventory_id": inv_id,
-            "part_number": inv[1],
-            "name": inv[2],
-            "quantity": qty,
-            "unit_price": unit_price,
-            "unit_cost": unit_cost,
-            "discount_pct": discount_pct,
-            "tax_rate": tax_rate,
-        })
-
-    totals = calculate_totals(enriched)
-
-    # Insert sale
-    cur.execute(
-        """
-        INSERT INTO sales
-            (customer_id, employee_id, register_id, sale_type, payment_method,
-             subtotal, discount_total, tax_total, total, amount_paid, change_given,
-             status, notes, source, external_order_id)
-        VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, 'completed', %s, 'mercadolibre', %s)
-        RETURNING id
-        """,
-        (
-            customer_id,
-            employee_id,
-            register_id,
-            sale_type,
-            payment_method,
-            totals["subtotal"],
-            totals["discount_total"],
-            totals["tax_total"],
-            totals["total"],
-            amount_paid,
-            0,
-            notes,
-            sale_data.get("external_order_id"),
-        ),
-    )
-    sale_id = cur.fetchone()[0]
-
-    # Insert sale_items
-    for it in totals["items"]:
-        cur.execute(
-            """
-            INSERT INTO sale_items
-                (sale_id, inventory_id, part_number, name, quantity, unit_price,
-                 unit_cost, discount_pct, discount_amount, tax_rate, tax_amount, subtotal)
-            VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
-            """,
-            (
-                sale_id,
-                it["inventory_id"],
-                it["part_number"],
-                it["name"],
-                it["quantity"],
-                it["unit_price"],
-                it.get("unit_cost", 0),
-                it.get("discount_pct", 0),
-                it.get("discount_amount", 0),
-                it.get("tax_rate", 0.16),
-                it.get("tax_amount", 0),
-                it["subtotal"],
-            ),
-        )
-
-    # Deduct inventory
-    for it in enriched:
-        inventory_record_sale(
-            tenant_conn, it["inventory_id"], it["quantity"], reference=f"ML sale {sale_id}"
-        )
-
-    tenant_conn.commit()
-    cur.close()
-    return {"id": sale_id, **totals}
+    result = {"sale_id": sale_id, "marketplace_order_id": marketplace_order_id}
+    if cfdi:
+        result["cfdi_queue_id"] = cfdi.get("id")
+    return result
 
 
 # ═══════════════════════════════════════════════════════════════════════════
 # IMPORT EXISTING LISTINGS FROM ML
 # ═══════════════════════════════════════════════════════════════════════════
 
-def process_meli_sync_queue(tenant_conn, batch_size: int = 50) -> dict:
+def process_meli_sync_queue(tenant_conn, batch_size: int = 50, force: bool = False) -> dict:
     """Process pending meli_sync_queue items and update stock on MercadoLibre.
 
-    Called by a cronjob or manual trigger.
+    Automatic runs (cron / stock-sync task) pass force=False and are gated by
+    tenant_config.meli_auto_sync_stock_price (default: disabled). Pushing the
+    local stock to ML zeroes and pauses any listing whose local product shows 0
+    — destructive when a tenant's inventory is not loaded. Manual runs from the
+    UI pass force=True to bypass the gate.
     """
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    if not force and not cfg.get("meli_auto_sync_stock_price"):
+        return {"processed": 0, "failed": 0, "total": 0, "skipped": True,
+                "reason": "meli_auto_sync_stock_price disabled"}
+    svc = _get_meli_service(cfg, tenant_conn)
     if not svc:
         raise ValueError("MercadoLibre not configured")
 
@@ -1593,14 +2491,16 @@ def process_meli_sync_queue(tenant_conn, batch_size: int = 50) -> dict:
         from services.inventory_engine import get_stock
         stock = get_stock(tenant_conn, inventory_id, branch_id=None)
 
-        # Find the ML listing
+        # All active ML listings for this product. Several listings may share
+        # one internal part number, so stock must be pushed to every one of
+        # them (the v4.28 index no longer forces a single active listing).
         cur.execute("""
-            SELECT external_item_id FROM marketplace_listings
+            SELECT external_item_id, external_status FROM marketplace_listings
             WHERE inventory_id = %s AND channel = 'mercadolibre' AND is_active = true
-            LIMIT 1
+            ORDER BY id
         """, (inventory_id,))
-        row = cur.fetchone()
-        if not row:
+        listings = cur.fetchall()
+        if not listings:
             # No active listing, mark as done
             cur.execute("""
                 UPDATE meli_sync_queue SET status = 'done', processed_at = NOW()
@@ -1610,10 +2510,30 @@ def process_meli_sync_queue(tenant_conn, batch_size: int = 50) -> dict:
             processed += 1
             continue
 
-        external_item_id = row[0]
+        stock_qty = max(0, int(stock or 0))
+        last_status = None
 
         try:
-            svc.update_item(external_item_id, {"available_quantity": max(0, int(stock))})
+            for external_item_id, external_status in listings:
+                new_status = external_status
+                if stock_qty <= 0:
+                    # Out of stock: pause the publication so it can't be bought.
+                    if external_status != 'paused':
+                        svc.pause_item(external_item_id)
+                        new_status = 'paused'
+                else:
+                    # Stock back: reactivate a paused publication before syncing qty.
+                    if external_status == 'paused':
+                        svc.activate_item(external_item_id)
+                        new_status = 'active'
+                    svc.update_item(external_item_id, {"available_quantity": stock_qty})
+                last_status = new_status
+
+            cur.execute("""
+                UPDATE marketplace_listings
+                SET external_status = %s, last_sync_at = NOW(), sync_errors = NULL
+                WHERE inventory_id = %s AND channel = 'mercadolibre' AND is_active = true
+            """, (last_status, inventory_id))
             cur.execute("""
                 UPDATE meli_sync_queue SET status = 'done', processed_at = NOW()
                 WHERE id = %s
@@ -1646,34 +2566,178 @@ def process_meli_sync_queue(tenant_conn, batch_size: int = 50) -> dict:
     return {"processed": processed, "failed": failed, "total": len(items)}
 
 
-def import_existing_listings(tenant_conn, page_limit: int = 50) -> dict:
+def sync_listing_from_meli(tenant_conn, external_item_id: str) -> dict:
+    """Refresh a single local listing from ML (used by the items webhook)."""
+    cfg = get_meli_config(tenant_conn)
+    svc = _get_meli_service(cfg, tenant_conn)
+    if not svc:
+        raise ValueError("MercadoLibre not configured")
+
+    item = svc.get_item(str(external_item_id))
+    cur = tenant_conn.cursor()
+    # Local cost of the matched product (if any) so we can refresh the margin.
+    cur.execute(
+        """
+        SELECT l.id, i.cost
+        FROM marketplace_listings l
+        LEFT JOIN inventory i ON i.id = l.inventory_id
+        WHERE l.external_item_id = %s AND l.channel = 'mercadolibre'
+        ORDER BY l.is_active DESC, l.id DESC
+        LIMIT 1
+        """,
+        (str(external_item_id),),
+    )
+    row = cur.fetchone()
+    listing_id = row[0] if row else None
+    unit_cost = float(row[1]) if row and row[1] is not None else None
+
+    cur.execute(
+        """
+        UPDATE marketplace_listings
+        SET external_status = %s, title = %s, meli_category_id = %s,
+            publish_price = %s, listing_type_id = COALESCE(%s, listing_type_id),
+            last_sync_at = NOW(), sync_errors = NULL
+        WHERE external_item_id = %s AND channel = 'mercadolibre'
+        """,
+        (
+            item.get("status"),
+            item.get("title"),
+            item.get("category_id"),
+            item.get("price"),
+            item.get("listing_type_id"),
+            str(external_item_id),
+        ),
+    )
+
+    # Refresh economics from the ML item's live price/listing type.
+    if listing_id and item.get("price"):
+        econ = compute_listing_economics(
+            svc, cfg.get("meli_site_id", "MLM"), float(item["price"]),
+            item.get("listing_type_id") or "gold_special",
+            item.get("category_id"), cost=unit_cost,
+        )
+        _persist_listing_economics(cur, listing_id, econ)
+
+    tenant_conn.commit()
+    cur.close()
+    return {"external_item_id": str(external_item_id), "status": item.get("status")}
+
+
+def _extract_item_part_numbers(item: dict) -> list:
+    """Collect candidate SKU/part numbers from an ML item payload.
+
+    ML no longer populates `seller_custom_field` for many sellers; the part
+    number and seller SKU live in the item attributes instead — including the
+    attributes nested per variation.
+    """
+    candidates = []
+
+    def _add(value):
+        if value:
+            text = str(value).strip()
+            if text and text not in candidates:
+                candidates.append(text)
+
+    for key in ("seller_custom_field", "seller_sku"):
+        _add(item.get(key))
+
+    attr_sources = [item.get("attributes") or []]
+    for variation in item.get("variations") or []:
+        attr_sources.append(variation.get("attributes") or [])
+
+    for attrs in attr_sources:
+        for attr in attrs:
+            if attr.get("id") not in ("SELLER_SKU", "PART_NUMBER", "SELLER_PART_NUMBER"):
+                continue
+            _add(attr.get("value_name"))
+            for value in attr.get("values") or []:
+                if isinstance(value, dict):
+                    _add(value.get("name"))
+    return candidates
+
+
+def _build_inventory_lookup(cur) -> dict:
+    """Build the maps used to link ML items to local inventory.
+
+    Keys are trimmed/uppercase; the ``*_norm`` variants strip spaces, dashes
+    and dots so an ML ``8505-D2094`` also matches a local ``8505D2094``.
+    """
+    lookup = {"part": {}, "sku": {}, "part_norm": {}, "sku_norm": {}}
+
+    cur.execute("SELECT id, part_number FROM inventory WHERE is_active = true")
+    for inv_id, pn in cur.fetchall():
+        key = (pn or "").strip().upper()
+        if not key:
+            continue
+        lookup["part"].setdefault(key, inv_id)
+        norm = _norm_sku(key)
+        if norm:
+            lookup["part_norm"].setdefault(norm, inv_id)
+
+    cur.execute("SELECT inventory_id, sku FROM inventory_sku_aliases WHERE is_active = true")
+    for inv_id, sku in cur.fetchall():
+        key = (sku or "").strip().upper()
+        if not key:
+            continue
+        lookup["sku"].setdefault(key, inv_id)
+        norm = _norm_sku(key)
+        if norm:
+            lookup["sku_norm"].setdefault(norm, inv_id)
+
+    return lookup
+
+
+def _match_inventory_id(candidates: list, lookup: dict) -> tuple:
+    """Return (inventory_id, match_source) for the first candidate that hits.
+
+    Match order: exact part number, exact alias, normalized part number,
+    normalized alias. (None, None) when nothing matches.
+    """
+    for raw in candidates:
+        key = (raw or "").strip().upper()
+        if not key:
+            continue
+        if key in lookup["part"]:
+            return lookup["part"][key], "part_number"
+        if key in lookup["sku"]:
+            return lookup["sku"][key], "alias"
+    for raw in candidates:
+        norm = _norm_sku(raw)
+        if not norm:
+            continue
+        if norm in lookup["part_norm"]:
+            return lookup["part_norm"][norm], "part_number_norm"
+        if norm in lookup["sku_norm"]:
+            return lookup["sku_norm"][norm], "alias_norm"
+    return None, None
+
+
+def import_existing_listings(tenant_conn, page_limit: int = 50, limit_items: int = None) -> dict:
     """Import all existing MercadoLibre listings for the connected seller.
 
     For each ML item, tries to match it to a local inventory product by:
-    1. seller_custom_field (if it contains a part_number)
-    2. inventory_sku_aliases.sku matching the ML item id
-    3. inventory.part_number matching the ML item id or title
+    1. seller_custom_field / seller_sku / SELLER_SKU / PART_NUMBER attributes
+       (item-level and per variation), normalized (spaces/dashes stripped)
+    2. inventory.part_number matching that value
+    3. inventory_sku_aliases.sku matching that value or the ML item id
+
+    `limit_items` caps how many items are processed (useful for a dry probe).
 
     Returns summary of imported / unmatched items.
     """
     cfg = get_meli_config(tenant_conn)
-    svc = _get_meli_service(cfg)
+    svc = _get_meli_service(cfg, tenant_conn)
     user_id = cfg.get("meli_user_id")
     if not svc or not user_id:
         raise ValueError("MercadoLibre not configured")
 
     cur = tenant_conn.cursor()
-
-    # Build lookup maps for matching
-    cur.execute("SELECT id, part_number FROM inventory WHERE is_active = true")
-    inv_by_part = {r[1].strip().upper(): r[0] for r in cur.fetchall() if r[1]}
-
-    cur.execute("SELECT inventory_id, sku FROM inventory_sku_aliases WHERE is_active = true")
-    inv_by_sku = {r[1].strip().upper(): r[0] for r in cur.fetchall() if r[1]}
+    lookup = _build_inventory_lookup(cur)
 
     imported = 0
     unmatched = 0
     errors = 0
+    processed = 0
     offset = 0
 
     while True:
@@ -1688,6 +2752,9 @@ def import_existing_listings(tenant_conn, page_limit: int = 50) -> dict:
             break
 
         for item_id in results:
+            if limit_items and processed >= limit_items:
+                break
+            processed += 1
             try:
                 item = svc.get_item(item_id)
             except MeliError:
@@ -1699,53 +2766,79 @@ def import_existing_listings(tenant_conn, page_limit: int = 50) -> dict:
             status = item.get("status", "active")
             permalink = item.get("permalink", "")
             category_id = item.get("category_id", "")
-            custom_field = item.get("seller_custom_field", "") or ""
+            listing_type_id = item.get("listing_type_id")
 
-            # Try to match to local inventory
-            inventory_id = None
-            cf_upper = custom_field.strip().upper()
-            if cf_upper and cf_upper in inv_by_part:
-                inventory_id = inv_by_part[cf_upper]
-            elif cf_upper and cf_upper in inv_by_sku:
-                inventory_id = inv_by_sku[cf_upper]
-            else:
-                item_id_upper = str(item_id).strip().upper()
-                if item_id_upper in inv_by_sku:
-                    inventory_id = inv_by_sku[item_id_upper]
-                elif item_id_upper in inv_by_part:
-                    inventory_id = inv_by_part[item_id_upper]
+            # Match to local inventory: attribute SKUs first, then the ML
+            # item id itself (some tenants store it as an alias).
+            candidates = _extract_item_part_numbers(item)
+            candidates.append(str(item_id))
+            inventory_id, match_source = _match_inventory_id(candidates, lookup)
 
-            # Upsert listing
+            # Upsert listing. When the item has no local match, inventory_id is
+            # NULL and the partial unique index (inventory_id, channel) cannot
+            # deduplicate it — look it up by external_item_id so repeated
+            # imports update the same row instead of creating duplicates.
             try:
                 cur.execute(
                     """
-                    INSERT INTO marketplace_listings
-                        (inventory_id, channel, external_item_id, external_status,
-                         external_permalink, title, meli_category_id, publish_price,
-                         last_sync_at, sync_errors, is_active)
-                    VALUES (%s, 'mercadolibre', %s, %s, %s, %s, %s, %s, NOW(), NULL, true)
-                    ON CONFLICT (inventory_id, channel) WHERE is_active = true
-                    DO UPDATE SET
-                        external_item_id = EXCLUDED.external_item_id,
-                        external_status = EXCLUDED.external_status,
-                        external_permalink = EXCLUDED.external_permalink,
-                        title = EXCLUDED.title,
-                        meli_category_id = EXCLUDED.meli_category_id,
-                        publish_price = EXCLUDED.publish_price,
-                        last_sync_at = NOW(),
-                        sync_errors = NULL,
-                        is_active = true
+                    SELECT id FROM marketplace_listings
+                    WHERE external_item_id = %s AND channel = 'mercadolibre'
+                    ORDER BY is_active DESC, id DESC
+                    LIMIT 1
                     """,
-                    (
-                        inventory_id,
-                        str(item_id),
-                        status,
-                        permalink,
-                        title,
-                        category_id,
-                        price,
-                    ),
+                    (str(item_id),),
                 )
+                existing = cur.fetchone()
+                if existing:
+                    cur.execute(
+                        """
+                        UPDATE marketplace_listings
+                        SET inventory_id = COALESCE(%s, inventory_id),
+                            inventory_match_source = COALESCE(%s, inventory_match_source),
+                            inventory_matched_at = CASE WHEN %s::int IS NOT NULL
+                                                        THEN NOW() ELSE inventory_matched_at END,
+                            external_status = %s,
+                            external_permalink = %s,
+                            title = %s,
+                            meli_category_id = %s,
+                            listing_type_id = COALESCE(%s, listing_type_id),
+                            publish_price = %s,
+                            last_sync_at = NOW(),
+                            sync_errors = NULL,
+                            is_active = true
+                        WHERE id = %s
+                        """,
+                        (
+                            inventory_id, match_source, inventory_id,
+                            status, permalink, title, category_id,
+                            listing_type_id, price, existing[0],
+                        ),
+                    )
+                else:
+                    cur.execute(
+                        """
+                        INSERT INTO marketplace_listings
+                            (inventory_id, channel, external_item_id, external_status,
+                             external_permalink, title, meli_category_id, publish_price,
+                             listing_type_id, inventory_match_source, inventory_matched_at,
+                             last_sync_at, sync_errors, is_active)
+                        VALUES (%s, 'mercadolibre', %s, %s, %s, %s, %s, %s, %s, %s,
+                                CASE WHEN %s::int IS NOT NULL THEN NOW() ELSE NULL END,
+                                NOW(), NULL, true)
+                        """,
+                        (
+                            inventory_id,
+                            str(item_id),
+                            status,
+                            permalink,
+                            title,
+                            category_id,
+                            price,
+                            listing_type_id,
+                            match_source,
+                            inventory_id,
+                        ),
+                    )
                 tenant_conn.commit()
                 if inventory_id:
                     imported += 1
@@ -1755,6 +2848,8 @@ def import_existing_listings(tenant_conn, page_limit: int = 50) -> dict:
                 tenant_conn.rollback()
                 errors += 1
 
+        if limit_items and processed >= limit_items:
+            break
         if len(results) < page_limit:
             break
         offset += page_limit
@@ -1766,3 +2861,92 @@ def import_existing_listings(tenant_conn, page_limit: int = 50) -> dict:
         "errors": errors,
         "total_processed": imported + unmatched + errors,
     }
+
+
+def backfill_listing_inventory(
+    tenant_conn,
+    limit: int = None,
+    only_unmapped: bool = True,
+    dry_run: bool = True,
+) -> dict:
+    """Populate marketplace_listings.inventory_id for already-imported listings.
+
+    Unlike import_existing_listings (which re-pages the whole ML catalog), this
+    walks the listings that already exist locally, fetches each ML item once,
+    matches it against inventory (part number / alias / normalized) and stores
+    the result plus the match source.
+
+    `only_unmapped=True` (default) only touches listings with inventory_id
+    NULL, so a manual mapping is never overwritten. `dry_run=True` reports what
+    it would do without writing.
+
+    Returns {scanned, matched, unmatched, errors, dry_run, details}.
+    """
+    cfg = get_meli_config(tenant_conn)
+    svc = _get_meli_service(cfg, tenant_conn)
+    if not svc:
+        raise ValueError("MercadoLibre not configured")
+
+    cur = tenant_conn.cursor()
+    lookup = _build_inventory_lookup(cur)
+
+    where = ["channel = 'mercadolibre'"]
+    if only_unmapped:
+        where.append("inventory_id IS NULL")
+    sql = f"SELECT id, external_item_id FROM marketplace_listings WHERE {' AND '.join(where)} ORDER BY id"
+    if limit:
+        sql += f" LIMIT {int(limit)}"
+    cur.execute(sql)
+    listings = cur.fetchall()
+
+    summary = {
+        "scanned": 0, "matched": 0, "unmatched": 0, "errors": 0,
+        "dry_run": dry_run, "details": [],
+    }
+
+    for listing_id, external_item_id in listings:
+        summary["scanned"] += 1
+        try:
+            item = svc.get_item(str(external_item_id))
+        except MeliError as e:
+            summary["errors"] += 1
+            summary["details"].append({
+                "listing_id": listing_id, "external_item_id": str(external_item_id),
+                "status": "error", "error": _extract_meli_error(e),
+            })
+            continue
+
+        candidates = _extract_item_part_numbers(item)
+        candidates.append(str(external_item_id))
+        inventory_id, match_source = _match_inventory_id(candidates, lookup)
+
+        if inventory_id is None:
+            summary["unmatched"] += 1
+            summary["details"].append({
+                "listing_id": listing_id, "external_item_id": str(external_item_id),
+                "status": "unmatched", "title": item.get("title"),
+                "candidates": candidates,
+            })
+            continue
+
+        summary["matched"] += 1
+        if not dry_run:
+            cur.execute(
+                """
+                UPDATE marketplace_listings
+                SET inventory_id = %s,
+                    inventory_match_source = %s,
+                    inventory_matched_at = NOW()
+                WHERE id = %s AND inventory_id IS NULL
+                """,
+                (inventory_id, match_source, listing_id),
+            )
+            tenant_conn.commit()
+        summary["details"].append({
+            "listing_id": listing_id, "external_item_id": str(external_item_id),
+            "status": "matched", "inventory_id": inventory_id,
+            "match_source": match_source,
+        })
+
+    cur.close()
+    return summary
diff --git a/pos/services/meili_search.py b/pos/services/meili_search.py
index 15413d8..af8a488 100644
--- a/pos/services/meili_search.py
+++ b/pos/services/meili_search.py
@@ -40,6 +40,139 @@ INDEX_SETTINGS = {
     'typoTolerance': {'enabled': True, 'minWordSizeForTypos': {'oneTypo': 4, 'twoTypos': 8}},
 }
 
+# ─── Synonyms (A6) ──────────────────────────────────────────────────────────
+# Spanish/English aftermarket equivalents so that "brake pad" finds "BALATA"
+# and vice-versa. Built from a curated core plus the existing bilingual
+# taxonomy (services.translations.PART_TRANSLATIONS). Multi-word synonyms are
+# supported by Meilisearch.
+CURATED_SYNONYMS = [
+    ('balata', 'pastilla de freno', 'brake pad', 'brake pads'),
+    ('disco de freno', 'disco', 'brake disc', 'brake rotor'),
+    ('bujia', 'bujía', 'spark plug', 'spark plugs'),
+    ('clutch', 'embrague', 'cloch', 'clochs'),
+    ('faro', 'faro delantero', 'headlight', 'headlamp'),
+    ('mofle', 'mofle', 'silenciador', 'muffler'),
+    ('amortiguador', 'shock absorber', 'strut'),
+    ('rotula', 'rótula', 'ball joint'),
+    ('terminal', 'terminal de direccion', 'tie rod end'),
+    ('banda', 'banda serpentina', 'belt', 'serpentine belt'),
+    ('banda de distribucion', 'timing belt'),
+    ('bomba de agua', 'water pump'),
+    ('radiador', 'radiator'),
+    ('alternador', 'alternator'),
+    ('marcha', 'arrancador', 'starter', 'starter motor'),
+    ('bobina', 'bobina de encendido', 'ignition coil'),
+    ('bateria', 'batería', 'battery'),
+    ('filtro de aire', 'air filter'),
+    ('filtro de aceite', 'oil filter'),
+    ('filtro de gasolina', 'fuel filter'),
+    ('sensor', 'sensor'),
+    ('collarín', 'collarín de clutch', 'throw out bearing', 'release bearing'),
+    ('bomba de gasolina', 'fuel pump'),
+    ('foco', 'foco', 'bulb', 'lamp'),
+    ('cristal', 'cristal', 'glass', 'windshield'),
+    ('parabrisas', 'parabrisas', 'windshield'),
+    ('espejo', 'espejo lateral', 'mirror', 'side mirror'),
+    ('abanico', 'ventilador', 'cooling fan', 'fan'),
+    ('compresor', 'compresor de aire', 'a/c compressor', 'ac compressor'),
+    ('valvula', 'válvula', 'valve'),
+    ('junta', 'empaque', 'gasket'),
+    ('manguera', 'hose'),
+]
+
+
+def _strip_accents(text):
+    if not text:
+        return ''
+    out = text
+    for a, b in (('Á', 'A'), ('É', 'E'), ('Í', 'I'), ('Ó', 'O'), ('Ú', 'U'),
+                 ('À', 'A'), ('È', 'E'), ('Ì', 'I'), ('Ò', 'O'), ('Ù', 'U'),
+                 ('Ä', 'A'), ('Ë', 'E'), ('Ï', 'I'), ('Ö', 'O'), ('Ü', 'U'), ('Ñ', 'N')):
+        out = out.replace(a, b)
+    return out
+
+
+def _symmetrize(groups):
+    """{term: [other equivalent terms]} from groups of equivalent terms."""
+    synonyms = {}
+    for group in groups:
+        terms = []
+        for term in group:
+            t = (term or '').strip().lower()
+            if t and t not in terms:
+                terms.append(t)
+        for term in terms:
+            others = [t for t in terms if t != term]
+            synonyms.setdefault(term, [])
+            for o in others:
+                if o not in synonyms[term]:
+                    synonyms[term].append(o)
+            # Accent-insensitive variant so "bujia" matches "bujía".
+            plain = _strip_accents(term)
+            if plain and plain != term:
+                synonyms.setdefault(plain, [])
+                for o in others:
+                    if o not in synonyms[plain]:
+                        synonyms[plain].append(o)
+    return synonyms
+
+
+def build_synonyms(include_taxonomy=True):
+    """Build the synonym map for the search indexes.
+
+    Curated colloquial Mexican terms first, then the curated bilingual
+    taxonomy in ``services.translations.PART_TRANSLATIONS`` (English → Spanish).
+    """
+    groups = list(CURATED_SYNONYMS)
+    if include_taxonomy:
+        try:
+            from services.translations import PART_TRANSLATIONS
+            for en, es in PART_TRANSLATIONS.items():
+                en, es = (en or '').strip(), (es or '').strip()
+                if not en or not es or '/' in es:
+                    continue
+                if len(en) > 40 or len(es) > 40:
+                    continue
+                if en.lower() == es.lower():
+                    continue
+                groups.append((en.lower(), es.lower()))
+        except Exception:
+            pass
+    return _symmetrize(groups)
+
+
+_SYNONYMS_CACHE = None
+
+
+def get_synonyms():
+    """Cached synonym map (built once per process)."""
+    global _SYNONYMS_CACHE
+    if _SYNONYMS_CACHE is None:
+        _SYNONYMS_CACHE = build_synonyms()
+    return _SYNONYMS_CACHE
+
+
+# Per-index settings used by scripts/index_meilisearch.py. ``aliases`` holds
+# inventory_sku_aliases / interchange numbers for cross-reference search.
+INVENTORY_SEARCHABLE_ATTRIBUTES = ['part_number', 'name', 'brand', 'aliases']
+CATALOG_SEARCHABLE_ATTRIBUTES = ['sku', 'name', 'category', 'supplier_name', 'aliases']
+
+
+def inventory_index_settings():
+    return {
+        'searchableAttributes': list(INVENTORY_SEARCHABLE_ATTRIBUTES),
+        'filterableAttributes': ['brand'],
+        'synonyms': get_synonyms(),
+    }
+
+
+def catalog_index_settings():
+    return {
+        'searchableAttributes': list(CATALOG_SEARCHABLE_ATTRIBUTES),
+        'filterableAttributes': ['category', 'supplier_name'],
+        'synonyms': get_synonyms(),
+    }
+
 _client = None
 _client_url = None
 
@@ -124,6 +257,51 @@ def search_parts(query, limit=50, offset=0):
         return None
 
 
+def is_enabled():
+    """True si MEILI_ENABLED está activo (se lee en cada llamada)."""
+    return os.environ.get('MEILI_ENABLED', 'true').lower() == 'true'
+
+
+def search_index(index_uid, query, options=None):
+    """Búsqueda genérica en cualquier índice.
+
+    Returns:
+        dict con la respuesta de Meilisearch, o None si Meilisearch está
+        apagado, sin API key, o falla — el caller debe usar su fallback SQL.
+    """
+    if not is_enabled():
+        return None
+    try:
+        return get_client().index(index_uid).search(query, options or {})
+    except MeilisearchApiError as e:
+        # Índice inexistente (tenant sin reindexar) es esperado: silencio.
+        if e.code != 'index_not_found':
+            print(f"[meili_search] Search error on {index_uid}: {e}")
+        return None
+    except Exception as e:
+        print(f"[meili_search] Search error on {index_uid}: {e}")
+        return None
+
+
+def inventory_index_name(db_name):
+    """Índice de inventario de un tenant (ver scripts/index_meilisearch.py)."""
+    return f"nexus_inventory_{db_name}"
+
+
+def search_inventory(db_name, query, limit=50, offset=0):
+    """Busca en el índice de inventario de un tenant.
+
+    Returns:
+        list de hits (posiblemente vacía) o None si Meilisearch no está
+        disponible o el índice no existe → el caller debe usar SQL.
+    """
+    res = search_index(inventory_index_name(db_name), query,
+                       {'limit': limit, 'offset': offset})
+    if res is None:
+        return None
+    return res.get('hits', [])
+
+
 def add_part(part_doc):
     """Add or update a single part document."""
     try:
@@ -157,3 +335,56 @@ def clear_index():
     except Exception as e:
         print(f"[meili_search] Clear error: {e}")
         return False
+
+
+# ─── A6: settings / synonym refresh ─────────────────────────────────────────
+
+def _index_uids(prefix=None):
+    """UIDs of existing indexes (optionally filtered by prefix)."""
+    client = get_client()
+    try:
+        result = client.get_indexes()
+    except TypeError:  # older meilisearch-python returns a dict
+        result = client.get_indexes()
+    if isinstance(result, dict):
+        results = result.get('results', [])
+    else:
+        results = getattr(result, 'results', result)
+    uids = []
+    for item in results:
+        uid = item.get('uid') if isinstance(item, dict) else getattr(item, 'uid', None)
+        if uid and (prefix is None or uid.startswith(prefix)):
+            uids.append(uid)
+    return uids
+
+
+def apply_index_settings(index_uid, settings=None):
+    """Apply searchable attributes + synonyms to one index (no reindex)."""
+    if settings is None:
+        if index_uid == 'nexus_supplier_catalog':
+            settings = catalog_index_settings()
+        elif index_uid.startswith('nexus_inventory_'):
+            settings = inventory_index_settings()
+        else:
+            settings = {'synonyms': get_synonyms()}
+    task = get_client().index(index_uid).update_settings(settings)
+    return task
+
+
+def apply_synonyms_to_all(prefixes=('nexus_inventory_', 'nexus_supplier_catalog')):
+    """Push the synonym map to every inventory/catalog index.
+
+    Updating ``synonyms`` does not require reindexing documents, so this is
+    safe to run against a live Meilisearch. Returns {index_uid: ok}.
+    """
+    results = {}
+    for prefix in prefixes:
+        uids = _index_uids(prefix)
+        for uid in uids:
+            try:
+                apply_index_settings(uid)
+                results[uid] = True
+            except Exception as e:
+                results[uid] = f"error: {e}"
+    return results
+
diff --git a/pos/services/meli_service.py b/pos/services/meli_service.py
index 15b4fee..fb1ff07 100644
--- a/pos/services/meli_service.py
+++ b/pos/services/meli_service.py
@@ -14,13 +14,22 @@ References:
   https://developers.mercadolibre.com.ar/es_ar/api-docs-es
 """
 
+import logging
 import time
 import requests
 from typing import Optional
 
+logger = logging.getLogger(__name__)
+
 BASE_URL = "https://api.mercadolibre.com"
 AUTH_URL = "https://api.mercadolibre.com/oauth/token"
 
+# MercadoLibre rate-limits per app/user with HTTP 429 (+ Retry-After). Retry
+# with exponential backoff before giving up so a burst of listing updates
+# doesn't fail the whole batch.
+RATE_LIMIT_MAX_RETRIES = 4
+RATE_LIMIT_MAX_SLEEP = 60.0
+
 
 class MeliError(Exception):
     def __init__(self, message, status_code=None, response_body=None):
@@ -40,8 +49,10 @@ class MeliService:
         refresh_token: Optional[str] = None,
         client_id: Optional[str] = None,
         client_secret: Optional[str] = None,
+        on_refresh=None,
     ):
         self.access_token = access_token
+        self.on_refresh = on_refresh
         self.refresh_token = refresh_token
         self.client_id = client_id
         self.client_secret = client_secret
@@ -50,6 +61,21 @@ class MeliService:
 
     # ─── Low-level request ───────────────────────────────────────────────
 
+    @staticmethod
+    def _rate_limit_sleep(resp, attempt: int) -> float:
+        """Seconds to wait before retrying a 429.
+
+        Honors the Retry-After header when present, otherwise exponential
+        backoff (1, 2, 4, ...) capped at RATE_LIMIT_MAX_SLEEP.
+        """
+        header = resp.headers.get("Retry-After")
+        if header:
+            try:
+                return max(0.0, min(float(header), RATE_LIMIT_MAX_SLEEP))
+            except (TypeError, ValueError):
+                pass
+        return min(2.0 ** attempt, RATE_LIMIT_MAX_SLEEP)
+
     def _request(
         self,
         method: str,
@@ -57,11 +83,32 @@ class MeliService:
         params: Optional[dict] = None,
         json_payload: Optional[dict] = None,
         retry_on_401: bool = True,
+        max_rate_limit_retries: int = RATE_LIMIT_MAX_RETRIES,
     ) -> dict:
         url = f"{BASE_URL}{path}"
-        resp = self._session.request(
-            method, url, params=params, json=json_payload, timeout=30
-        )
+
+        # 429 (rate limit) is retried with backoff; every other status is
+        # handled below. The 401 refresh path only runs once per call.
+        attempt = 0
+        while True:
+            resp = self._session.request(
+                method, url, params=params, json=json_payload, timeout=30
+            )
+            if resp.status_code != 429:
+                break
+            if attempt >= max_rate_limit_retries:
+                raise MeliError(
+                    f"Meli API rate limit exceeded (429) after {attempt} retries: {resp.text}",
+                    status_code=429,
+                    response_body=resp.text,
+                )
+            delay = self._rate_limit_sleep(resp, attempt)
+            logger.warning(
+                "Meli 429 on %s %s — retry %s/%s in %.1fs",
+                method, path, attempt + 1, max_rate_limit_retries, delay,
+            )
+            time.sleep(delay)
+            attempt += 1
 
         if resp.status_code == 401 and retry_on_401 and self.refresh_token:
             self._refresh_token()
@@ -106,15 +153,31 @@ class MeliService:
         }
         resp = requests.post(AUTH_URL, data=payload, timeout=30)
         if not resp.ok:
+            body = (resp.text or '')
+            # Credenciales de la app rechazadas: el client_secret cambió en el
+            # dev center de MercadoLibre — hay que actualizarlo, no reconectar.
+            if 'invalid_client' in body:
+                raise MeliAuthError(
+                    "Las credenciales de la app de MercadoLibre (Client ID/Secret) fueron "
+                    "rechazadas. Verifica que el Client Secret en Configuración → MercadoLibre "
+                    "sea el vigente en el dev center (probablemente se regeneró).",
+                    status_code=resp.status_code, response_body=body,
+                )
             raise MeliAuthError(
-                f"Token refresh failed: {resp.status_code} {resp.text}",
+                f"Token refresh failed: {resp.status_code} {body}",
                 status_code=resp.status_code,
-                response_body=resp.text,
+                response_body=body,
             )
         data = resp.json()
         self.access_token = data["access_token"]
         if "refresh_token" in data:
             self.refresh_token = data["refresh_token"]
+        # Persist rotated tokens so the connection survives restarts/rotation
+        if self.on_refresh:
+            try:
+                self.on_refresh(data)
+            except Exception:
+                pass  # never break the request because persistence failed
         return data
 
     # ─── Auth / User ─────────────────────────────────────────────────────
@@ -237,6 +300,35 @@ class MeliService:
     def close_item(self, item_id: str) -> dict:
         return self.update_item(item_id, {"status": "closed"})
 
+    # ─── Item description ────────────────────────────────────────────────
+    #
+    # ML keeps the description in a sub-resource: POST /items/{id}/description
+    # creates it (a freshly published item has none) and PUT updates it.
+
+    def get_item_description(self, item_id: str) -> dict:
+        return self._request("GET", f"/items/{item_id}/description")
+
+    def set_item_description(self, item_id: str, plain_text: str, create: bool = True) -> dict:
+        """Create (create=True) or update (create=False) an item's description.
+
+        Falls back to the opposite verb when ML answers "description already
+        exists" (400/405/409) — the two endpoints are idempotent in practice.
+        """
+        method = "POST" if create else "PUT"
+        fallback = "PUT" if create else "POST"
+        try:
+            return self._request(
+                method, f"/items/{item_id}/description",
+                json_payload={"plain_text": plain_text},
+            )
+        except MeliError as e:
+            if e.status_code in (400, 404, 405, 409):
+                return self._request(
+                    fallback, f"/items/{item_id}/description",
+                    json_payload={"plain_text": plain_text},
+                )
+            raise
+
     # ─── Questions & Answers ─────────────────────────────────────────────
 
     def get_questions(self, item_id: str, status: str = None, offset: int = 0, limit: int = 50) -> dict:
@@ -270,6 +362,14 @@ class MeliService:
     def get_category_attributes(self, category_id: str) -> list:
         return self._request("GET", f"/categories/{category_id}/attributes")
 
+    def get_listing_prices(self, site_id: str, price: float, category_id: str) -> list:
+        """MeLi fee calculator: returns fee details per listing type for a price/category."""
+        return self._request(
+            "GET",
+            f"/sites/{site_id}/listing_prices",
+            params={"price": price, "category_id": category_id},
+        )
+
     def get_shipping_preferences(self, user_id: str) -> dict:
         return self._request("GET", f"/users/{user_id}/shipping_preferences")
 
diff --git a/pos/services/notification_engine.py b/pos/services/notification_engine.py
index 49b8cd7..33f3539 100644
--- a/pos/services/notification_engine.py
+++ b/pos/services/notification_engine.py
@@ -244,7 +244,7 @@ def _send_push(conn, tenant_id, recipient_type, recipient_id, title, body, metad
 def _send_whatsapp(conn, tenant_id, recipient_type, recipient_id, body, metadata):
     """Send WhatsApp notification via existing service."""
     try:
-        from services.whatsapp_service import send_message
+        from services.whatsapp_service import wa_send_text
         cur = conn.cursor()
         phone = None
         if recipient_type == 'customer' and recipient_id:
@@ -255,7 +255,22 @@ def _send_whatsapp(conn, tenant_id, recipient_type, recipient_id, body, metadata
         cur.close()
 
         if phone:
-            send_message(phone, body)
+            # Route via tenant provider (Meta Cloud API / WA CRM or Baileys)
+            cfg = {}
+            try:
+                cur2 = conn.cursor()
+                cur2.execute("SELECT key, value FROM tenant_config WHERE key LIKE 'whatsapp_%' OR key LIKE 'wa_%'")
+                raw = {k: v for k, v in cur2.fetchall()}
+                cur2.close()
+                cfg = {
+                    'provider': raw.get('whatsapp_provider', 'baileys'),
+                    'phone_number_id': raw.get('wa_phone_number_id', ''),
+                    'access_token': raw.get('wa_access_token', ''),
+                    'bridge_url': raw.get('whatsapp_bridge_url', ''),
+                }
+            except Exception:
+                pass
+            wa_send_text(cfg, phone, body)
     except Exception:
         pass
 
diff --git a/pos/services/part_vision.py b/pos/services/part_vision.py
new file mode 100644
index 0000000..037ad71
--- /dev/null
+++ b/pos/services/part_vision.py
@@ -0,0 +1,267 @@
+# /home/Autopartes/pos/services/part_vision.py
+"""A4 — Vision grading for used/yonke parts.
+
+Given a photo of a used part (plus optional metadata: name, category,
+declared condition) a VLM suggests a condition grade:
+
+    A = excelente   (sin daños, funcional con seguridad)
+    B = bueno       (desgaste normal de uso, funcional)
+    C = regular     (desgaste/defecto menor, requiere revisión o reparación)
+    D = con daño    (daño estructural visible / funcionalidad dudosa)
+
+Backends (reused from ``services.ai_chat``): QWEN -> Hermes -> OpenRouter.
+When no backend answers (e.g. the current QWEN key returns 401) the function
+degrades gracefully: it never raises and returns a dict with
+``condition_grade_suggested=None`` and a human-readable ``error``.
+
+Public API:
+    suggest_grade(image_bytes=None, image_base64=None, name=None,
+                  category=None, condition='usado', notes=None) -> dict
+"""
+
+import base64
+import json
+import re
+
+GRADES = ('A', 'B', 'C', 'D')
+
+GRADE_RUBRIC = """Escala de grados para piezas usadas de yonke:
+- A (excelente): sin daños visibles, no requiere reparación; funcionamiento prácticamente seguro.
+- B (bueno): desgaste normal por uso, sin daños estructurales; funciona; puede tener detalles cosméticos (rayones leves, óxido superficial).
+- C (regular): desgaste notable o defecto menor que puede requerir reparación o cambio de componentes secundarios; funcionalidad probable pero a verificar.
+- D (con daño): daño visible estructural, pieza rota/incompleta/muy corroída, o funcionalidad dudosa; se vende como refacción o no funcional."""
+
+GRADE_INSTRUCTIONS = """Evalúa la pieza de la foto y asigna un grado.
+
+Reglas:
+1. Basa el grado SOLO en lo observable en la foto. Si la foto no muestra la pieza, está borrosa o no es de una autoparte, baja la confianza y explícalo en "notes".
+2. Sé conservador: ante duda razonable entre dos grados, asigna el peor (menor).
+3. "defects" enumera defectos concretos y visibles (en español). Vacío si no hay.
+4. "confidence" es tu certeza global del grado (0.0 a 1.0).
+
+Responde EXCLUSIVAMENTE con JSON válido, sin texto adicional:
+{
+  "condition_grade_suggested": "A" | "B" | "C" | "D",
+  "condition_suggested": "usado",
+  "defects": ["..."],
+  "confidence": 0.0,
+  "notes": "una o dos frases en español"
+}"""
+
+
+def _build_prompt(name=None, category=None, condition=None):
+    """Build the user prompt embedding the piece metadata."""
+    lines = [GRADE_INSTRUCTIONS, "", GRADE_RUBRIC, ""]
+    meta = []
+    if name:
+        meta.append(f"- Nombre declarado: {name}")
+    if category:
+        meta.append(f"- Categoría: {category}")
+    if condition:
+        meta.append(f"- Condición declarada: {condition}")
+    if meta:
+        lines.append("Metadatos de la pieza:")
+        lines.extend(meta)
+    else:
+        lines.append("No hay metadatos de la pieza; evalúa solo lo visible.")
+    return "\n".join(lines)
+
+
+def _empty_result():
+    return {
+        'condition_grade_suggested': None,
+        'condition_suggested': 'usado',
+        'defects': [],
+        'confidence': 0.0,
+        'notes': '',
+        'source': None,
+        'error': None,
+    }
+
+
+def _extract_json_object(text):
+    """Best-effort JSON extraction from an LLM reply.
+
+    Handles markdown fences, leading/trailing prose and trailing commas.
+    Returns a dict or None.
+    """
+    if not text:
+        return None
+    s = str(text).strip()
+    if s.startswith('```'):
+        s = re.sub(r'^```[A-Za-z0-9_-]*\s*', '', s)
+        s = re.sub(r'```\s*$', '', s).strip()
+    try:
+        parsed = json.loads(s)
+        return parsed if isinstance(parsed, dict) else None
+    except (json.JSONDecodeError, ValueError):
+        pass
+    m = re.search(r'\{.*\}', s, re.DOTALL)
+    if not m:
+        return None
+    frag = m.group(0)
+    for candidate in (frag, re.sub(r',\s*([}\]])', r'\1', frag)):
+        try:
+            parsed = json.loads(candidate)
+            if isinstance(parsed, dict):
+                return parsed
+        except (json.JSONDecodeError, ValueError):
+            continue
+    return None
+
+
+def _normalize_grade(data):
+    """Coerce a raw model dict into the public grade schema."""
+    out = _empty_result()
+    if not isinstance(data, dict):
+        return out
+
+    raw_grade = (data.get('condition_grade_suggested')
+                 or data.get('condition_grade')
+                 or data.get('grade'))
+    grade = str(raw_grade).strip().upper()[:1] if raw_grade else None
+    out['condition_grade_suggested'] = grade if grade in GRADES else None
+
+    cond = str(data.get('condition_suggested') or data.get('condition') or 'usado').strip().lower()
+    out['condition_suggested'] = 'reconstruido' if 'reconstr' in cond else 'usado'
+
+    defects = data.get('defects')
+    if isinstance(defects, str):
+        defects = re.split(r'[;\n]|,', defects)
+    if isinstance(defects, list):
+        out['defects'] = [str(d).strip() for d in defects if str(d).strip()][:20]
+
+    try:
+        conf = float(data.get('confidence'))
+        if conf > 1:
+            conf = conf / 100.0
+        out['confidence'] = max(0.0, min(1.0, conf))
+    except (TypeError, ValueError):
+        out['confidence'] = 0.0
+
+    notes = data.get('notes') or data.get('message') or data.get('reason') or ''
+    out['notes'] = str(notes).strip()[:1000]
+    return out
+
+
+def _is_usable(parsed):
+    """True when a normalized dict carries a real grading signal.
+
+    Deliberately ignores ``notes``: the shared vision helper falls back to a
+    plain ``{"message": ...}`` dict on backend errors, and treating that as a
+    valid grade would hide outages behind a misleading answer.
+    """
+    return bool(parsed.get('condition_grade_suggested') or parsed.get('defects'))
+
+
+def _backends():
+    """Ordered vision backends (url, key, model, tag) from ai_chat config."""
+    from services import ai_chat
+
+    out = []
+    if getattr(ai_chat, 'QWEN_ENABLED', False):
+        out.append((ai_chat.QWEN_CHAT_URL, ai_chat.QWEN_API_KEY, ai_chat.QWEN_MODEL, 'qwen'))
+    if getattr(ai_chat, 'HERMES_ENABLED', False):
+        out.append((ai_chat.HERMES_CHAT_URL, ai_chat.HERMES_API_KEY, ai_chat.HERMES_MODEL, 'hermes'))
+    if getattr(ai_chat, 'OPENROUTER_API_KEY', None):
+        out.append((ai_chat.OPENROUTER_URL, ai_chat.OPENROUTER_API_KEY, ai_chat.VISION_MODEL, 'openrouter'))
+    return out
+
+
+def suggest_grade(image_bytes=None, image_base64=None, name=None, category=None,
+                  condition='usado', notes=None):
+    """Suggest a condition grade for a used part photo.
+
+    Returns:
+        {
+          "condition_grade_suggested": "A"|"B"|"C"|"D"|None,
+          "condition_suggested": "usado"|"reconstruido",
+          "defects": [str, ...],
+          "confidence": float,          # 0.0 - 1.0
+          "notes": str,
+          "source": "qwen"|"hermes"|"openrouter"|None,
+          "error": str|None             # set when no grade could be produced
+        }
+    """
+    result = _empty_result()
+
+    if not image_bytes and not image_base64:
+        result['error'] = 'No se proporcionó imagen de la pieza.'
+        return result
+
+    b64 = image_base64
+    if not b64:
+        try:
+            b64 = base64.b64encode(image_bytes).decode('ascii')
+        except Exception as e:  # pragma: no cover - defensive
+            result['error'] = f'Imagen inválida: {e}'
+            return result
+    b64_clean = b64.split(',', 1)[1] if b64.startswith('data:') else b64
+
+    prompt = _build_prompt(name=name, category=category, condition=condition)
+
+    # 1) Reuse the shared vision entry point (handles its own JSON parsing).
+    try:
+        from services import ai_chat
+        res = ai_chat.chat_with_image(prompt, b64_clean)
+        if isinstance(res, dict):
+            parsed = _normalize_grade(res)
+            if not _is_usable(parsed) and res.get('message'):
+                extracted = _extract_json_object(res.get('message'))
+                if extracted:
+                    parsed = _normalize_grade(extracted)
+            if _is_usable(parsed):
+                parsed['source'] = 'vision'
+                return parsed
+    except Exception as e:
+        print(f"[PART_VISION] chat_with_image failed: {e}")
+
+    # 2) Direct OpenAI-compatible call with each backend's own tag.
+    backends = _backends()
+    if not backends:
+        result['error'] = ('Servicio de visión no configurado: sin backend de IA disponible '
+                           '(QWEN/Hermes/OpenRouter).')
+        return result
+
+    messages = [
+        {"role": "system", "content": "Eres un perito de autopartes usadas. Responde SOLO en JSON válido."},
+        {"role": "user", "content": [
+            {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64," + b64_clean}},
+            {"type": "text", "text": prompt},
+        ]},
+    ]
+
+    last_error = None
+    soft = None  # valid JSON with notes but no grade (model refused/unsure)
+    for url, key, model, tag in backends:
+        try:
+            from services import ai_chat
+            res = ai_chat._post_chat_completion(
+                url, key, model, messages, max_tokens=500, temperature=0.1, timeout=45
+            )
+        except Exception as e:
+            last_error = f'{tag}: {e}'
+            continue
+        if not res:
+            last_error = f'{tag}: sin respuesta (ver logs [AI])'
+            continue
+        parsed = _extract_json_object(res.get('content'))
+        if not parsed:
+            last_error = f'{tag}: respuesta no-JSON'
+            continue
+        normalized = _normalize_grade(parsed)
+        if _is_usable(normalized):
+            normalized['source'] = tag
+            return normalized
+        if soft is None and normalized.get('notes'):
+            normalized['source'] = tag
+            soft = normalized
+        last_error = f'{tag}: JSON sin grado'
+
+    if soft is not None:
+        soft['error'] = 'El modelo no asignó un grado; revisa notes.'
+        return soft
+
+    result['error'] = ('El servicio de visión no pudo graduar la pieza '
+                       f'({last_error or "sin backend disponible"}).')
+    return result
diff --git a/pos/services/pos_engine.py b/pos/services/pos_engine.py
index fbc4842..7e65135 100644
--- a/pos/services/pos_engine.py
+++ b/pos/services/pos_engine.py
@@ -11,6 +11,7 @@ Tax: 16% IVA per item (from item.tax_rate field).
 
 from datetime import datetime, timedelta
 from decimal import Decimal, ROUND_HALF_UP
+import logging
 import threading
 from flask import g
 from services.audit import log_action
@@ -26,6 +27,8 @@ from services.accounting_engine import record_sale_entry, record_cancellation_en
 from services.currency import convert, to_mxn, get_exchange_rate
 from services.savings_engine import record_sale_savings
 
+logger = logging.getLogger('pos')
+
 
 def _safe_g(attr, default=None):
     """Safely read flask.g attribute outside of app context."""
@@ -40,6 +43,122 @@ def _to_dec(val):
     return Decimal(str(val))
 
 
+def get_max_discount_pct(conn, employee_id=None):
+    """Resolve the max discount % the current employee is allowed to grant.
+
+    Prefers the value carried on flask.g (set from the JWT at login); falls
+    back to the employees table when it is absent (e.g. tokens issued before
+    the field was added). A NULL/0 limit means "no limit" (100%), matching
+    the historical behaviour of the sale flow.
+    """
+    limit = _safe_g('max_discount_pct')
+    if limit in (None, ''):
+        employee_id = employee_id or _safe_g('employee_id')
+        if employee_id:
+            cur = conn.cursor()
+            cur.execute("SELECT max_discount_pct FROM employees WHERE id = %s", (employee_id,))
+            row = cur.fetchone()
+            cur.close()
+            limit = row[0] if row else None
+    return float(limit or 100)
+
+
+def _credit_scoring_enforced(conn):
+    """Tenant opt-in flag for blocking credit sales to 'risk' customers (A9).
+
+    Reads tenant_config.credit_scoring_enforce. Defaults to False so the
+    existing sale flow is unchanged unless a tenant explicitly enables it.
+    """
+    try:
+        cur = conn.cursor()
+        cur.execute("SELECT value FROM tenant_config WHERE key = 'credit_scoring_enforce'")
+        row = cur.fetchone()
+        cur.close()
+        return bool(row) and str(row[0]).strip().lower() in ('true', '1', 'yes', 'on')
+    except Exception:
+        return False
+
+
+# Used/rebuilt pieces sold by a Yonke get a warranty expressed in days (the
+# yonke module never uses month-based coverage).
+YONKE_WARRANTY_CONDITIONS = ('usado', 'reconstruido')
+
+
+def _get_yonke_default_warranty_days(conn):
+    """Read tenant_config.yonke_default_warranty_days (None when unset/blank).
+
+    The yonke module stores the coverage as a tenant-wide default (see
+    yonke_service._store_default_warranty_days); per-piece overrides travel on
+    the sale line. Raises if tenant_config is unavailable — the caller runs
+    this inside a SAVEPOINT so it can never abort the sale.
+    """
+    cur = conn.cursor()
+    cur.execute("SELECT value FROM tenant_config WHERE key = 'yonke_default_warranty_days'")
+    row = cur.fetchone()
+    cur.close()
+    if not row or row[0] is None or str(row[0]).strip() == '':
+        return None
+    try:
+        return int(str(row[0]).strip())
+    except (TypeError, ValueError):
+        return None
+
+
+def _register_yonke_warranties(conn, sale_id, sold_items, customer_id):
+    """Auto-register day-based warranties for used/rebuilt items in a sale.
+
+    Coverage comes from the line's `warranty_days` when present, otherwise from
+    the tenant default. A piece with no configured coverage is skipped. The
+    caller wraps this in a SAVEPOINT so a failure never breaks the sale.
+    Returns the number of warranties registered.
+    """
+    used_items = [
+        it for it in sold_items
+        if str(it.get('condition') or '').strip().lower() in YONKE_WARRANTY_CONDITIONS
+    ]
+    if not used_items:
+        return 0
+
+    default_days = _get_yonke_default_warranty_days(conn)
+
+    # sale_items were inserted in `sold_items` order; pair them back by id so
+    # each warranty points at its sale line.
+    cur = conn.cursor()
+    cur.execute("SELECT id FROM sale_items WHERE sale_id = %s ORDER BY id", (sale_id,))
+    sale_item_ids = [r[0] for r in cur.fetchall()]
+    cur.close()
+
+    from services.warranty_engine import register_warranty
+
+    registered = 0
+    for line_no, item in enumerate(sold_items):
+        if str(item.get('condition') or '').strip().lower() not in YONKE_WARRANTY_CONDITIONS:
+            continue
+        if line_no >= len(sale_item_ids):
+            break
+        days = item.get('warranty_days') or default_days
+        try:
+            days = int(days)
+        except (TypeError, ValueError):
+            continue
+        if days <= 0:
+            continue
+        register_warranty(
+            conn,
+            sale_id=sale_id,
+            sale_item_id=sale_item_ids[line_no],
+            inventory_id=item['inventory_id'],
+            customer_id=customer_id,
+            warranty_months=0,
+            part_number=item.get('part_number'),
+            name=item.get('name'),
+            notes='Garantía Yonke (pieza usada)',
+            warranty_days=days,
+        )
+        registered += 1
+    return registered
+
+
 def calculate_totals(items):
     """Compute subtotal, discount amounts, tax, and total for a list of items.
 
@@ -241,7 +360,7 @@ def process_sale(conn, sale_data):
     # Lock inventory rows to prevent race conditions on concurrent sales
     cur.execute("""
         SELECT id, part_number, name, cost, price_1, price_2, price_3,
-               tax_rate, branch_id, retail_price
+               tax_rate, branch_id, retail_price, condition
         FROM inventory
         WHERE id = ANY(%s) AND is_active = true
         ORDER BY id
@@ -264,6 +383,7 @@ def process_sale(conn, sale_data):
         stock_map = {r[0]: r[1] for r in cur.fetchall()}
 
     # Validate and enrich items
+    max_discount = get_max_discount_pct(conn, employee_id)
     enriched_items = []
     for item in items:
         inv_id = item.get('inventory_id')
@@ -284,7 +404,6 @@ def process_sale(conn, sale_data):
         unit_cost = float(inv[3]) if inv[3] else 0
 
         # Validate discount against employee max
-        max_discount = float(_safe_g('max_discount_pct', 100) or 100)
         if _safe_g('employee_role', 'cashier') not in ('owner', 'admin') and discount_pct > max_discount:
             raise ValueError(
                 f"Discount {discount_pct}% exceeds your maximum allowed {max_discount}% "
@@ -302,6 +421,10 @@ def process_sale(conn, sale_data):
             'tax_rate': tax_rate,
             'branch_id': inv[8],
             'stock_before': current_stock,
+            # condition drives the Yonke day-based warranty hook below;
+            # warranty_days lets a single line override the tenant default.
+            'condition': (inv[10] or '').strip().lower(),
+            'warranty_days': item.get('warranty_days'),
         })
 
     # Calculate totals
@@ -321,6 +444,27 @@ def process_sale(conn, sale_data):
                     f"Required: ${totals['total']:.2f}"
                 )
 
+        # Optional credit-risk enforcement (A9). Off unless the tenant sets
+        # tenant_config.credit_scoring_enforce = true. Never break the sale on
+        # scoring errors — only block when we positively classify 'risk'.
+        if _credit_scoring_enforced(conn):
+            try:
+                from services.credit_scoring import score_customer
+                _cs = score_customer(conn, customer_id)
+            except Exception as exc:
+                logger.warning("credit scoring failed for customer %s: %s", customer_id, exc)
+                _cs = None
+            if _cs and _cs.get('tier') == 'risk':
+                reasons = _cs.get('reasons') or []
+                detail = next(
+                    (r for r in reasons if 'Mora' in r or 'atraso' in r or 'excedido' in r),
+                    reasons[-1] if reasons else '',
+                )
+                raise ValueError(
+                    f"Venta a crédito bloqueada: cliente en riesgo "
+                    f"(score {_cs['score']}/100). {detail}"
+                )
+
     # Pending payment sale (e.g. "Pendiente")
     is_pending = payment_method == 'pendiente'
     if is_pending:
@@ -349,8 +493,8 @@ def process_sale(conn, sale_data):
             (branch_id, customer_id, employee_id, register_id, sale_type,
              payment_method, subtotal, discount_total, tax_total, total,
              amount_paid, change_given, metodo_pago_sat, forma_pago_sat,
-             status, device_id, notes, currency, exchange_rate)
-        VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s)
+             status, device_id, notes, currency, exchange_rate, courier_id)
+        VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s,%s)
         RETURNING id, created_at
     """, (
         branch_id, customer_id, employee_id, register_id, sale_type,
@@ -358,7 +502,7 @@ def process_sale(conn, sale_data):
         totals['tax_total'], totals['total'], amount_paid, change_given,
         metodo_pago_sat, forma_pago_sat,
         status, _safe_g('device_id'), notes,
-        currency, exchange_rate
+        currency, exchange_rate, sale_data.get('courier_id')
     ))
     sale_id, created_at = cur.fetchone()
 
@@ -467,6 +611,33 @@ def process_sale(conn, sale_data):
 
     cur.close()
 
+    # Yonke warranty hook (non-blocking). Every sold used/rebuilt piece gets a
+    # day-based warranty from tenant_config.yonke_default_warranty_days (or the
+    # line's warranty_days). SAVEPOINT-isolated like the other hooks: a missing
+    # table or an invalid config only reverts this hook, never the sale. Kept
+    # before the accounting/savings hooks because record_sale_savings commits —
+    # that way the warranty lands in the same transaction as the sale.
+    try:
+        _cur = conn.cursor()
+        _cur.execute("SAVEPOINT sp_yonke_warranty")
+        _cur.close()
+        try:
+            registered = _register_yonke_warranties(
+                conn, sale_id, totals['items'], customer_id
+            )
+            _c = conn.cursor()
+            _c.execute("RELEASE SAVEPOINT sp_yonke_warranty")
+            _c.close()
+            if registered:
+                logger.info("Registered %s Yonke warranty(ies) for sale #%s", registered, sale_id)
+        except Exception as w_err:
+            _c = conn.cursor()
+            _c.execute("ROLLBACK TO SAVEPOINT sp_yonke_warranty")
+            _c.close()
+            logger.warning("Yonke warranty hook for sale #%s failed: %s", sale_id, w_err)
+    except Exception:
+        pass  # Warranty errors never block sales
+
     # Auto-generate accounting entry (non-blocking)
     # Accounting is always in MXN — convert if sale was in another currency
     try:
@@ -482,8 +653,10 @@ def process_sale(conn, sale_data):
             'cost_total': sum(item.get('unit_cost', 0) * item['quantity'] for item in enriched_items),
             'payment_method': payment_method,
         })
-    except Exception:
-        pass  # Accounting errors never block sales
+    except Exception as acc_err:
+        # Accounting errors never block sales, but they must never be silent:
+        # a lost entry is a hole in the ledger that only shows up at audit time.
+        logger.error(f'Accounting entry for sale #{sale_id} failed: {acc_err}')
 
     # Calculate and record savings vs retail price (non-blocking)
     try:
@@ -491,10 +664,70 @@ def process_sale(conn, sale_data):
     except Exception:
         pass  # Savings errors never block sales
 
-    # WhatsApp learning hook (non-blocking)
+    # Auto-invoice hook (non-blocking): enqueue CFDI when the tenant has
+    # automatic invoicing on, or when the cashier explicitly requested it
+    # with the "Facturar CFDI" checkbox (generate_cfdi). Either way the
+    # customer must have an RFC.
+    if customer_id and status == 'completed':
+        try:
+            generate_cfdi = bool(sale_data.get('generate_cfdi'))
+            cur_ai = conn.cursor()
+            cur_ai.execute("SELECT value FROM tenant_config WHERE key = 'invoice_auto'")
+            row_ai = cur_ai.fetchone()
+            cur_ai.execute(
+                "SELECT rfc, razon_social, email, uso_cfdi, cp FROM customers WHERE id = %s",
+                (customer_id,))
+            cust = cur_ai.fetchone()
+            cur_ai.close()
+            auto_invoice = bool(row_ai and (row_ai[0] or '').lower() == 'true')
+            if (generate_cfdi or auto_invoice) and cust and cust[0]:
+                customer_rec = {
+                    'rfc': cust[0], 'razon_social': cust[1] or '',
+                    'name': customer_name or cust[1], 'email': cust[2],
+                    'uso_cfdi': cust[3], 'cp': cust[4],
+                }
+                from services.cfdi_facturapi_builder import build_ingreso_payload
+                from services.cfdi_queue import enqueue_cfdi
+                tcfg = {'cp': cust[4] or '00000', 'serie': 'A'}
+                sale_for_cfdi = {
+                    'id': sale_id, 'items': enriched_items,
+                    'payment_method': payment_method, 'sale_type': sale_type,
+                    'currency': currency, 'exchange_rate': exchange_rate,
+                }
+                payload = build_ingreso_payload(sale_for_cfdi, tcfg, customer_rec)
+                enqueue_cfdi(conn, sale_id, 'ingreso', payload)
+        except Exception:
+            pass  # invoicing errors never block sales
+
+    # Loyalty points hook (non-blocking): 1 point per $10 MXN on completed sales
+    if customer_id and status == 'completed':
+        try:
+            from services.crm_engine import add_loyalty_points
+            points = int(totals['total'] // 10)
+            if points > 0:
+                add_loyalty_points(conn, customer_id, points, points_type='earned',
+                                   source_type='sale', source_id=sale_id,
+                                   description=f'Venta #{sale_id}')
+        except Exception:
+            pass  # Loyalty errors never block sales
+
+    # WhatsApp learning hook (non-blocking). Se aísla en un SAVEPOINT: si falla
+    # (p.ej. tabla ausente en algún tenant) se revierte SOLO el hook. Sin esto, un
+    # error SQL deja la transacción abortada y el commit() posterior pierde la venta.
     try:
-        from services.wa_learning import check_learning_resolution
-        check_learning_resolution(sale_id, customer_id, conn)
+        _cur = conn.cursor()
+        _cur.execute("SAVEPOINT sp_wa_learning")
+        _cur.close()
+        try:
+            from services.wa_learning import check_learning_resolution
+            check_learning_resolution(sale_id, customer_id, conn)
+            _c = conn.cursor()
+            _c.execute("RELEASE SAVEPOINT sp_wa_learning")
+            _c.close()
+        except Exception:
+            _c = conn.cursor()
+            _c.execute("ROLLBACK TO SAVEPOINT sp_wa_learning")
+            _c.close()
     except Exception:
         pass  # Learning errors never block sales
 
@@ -550,6 +783,7 @@ def process_sale(conn, sale_data):
         'created_at': str(created_at),
         'currency': currency,
         'exchange_rate': exchange_rate,
+        'courier_id': sale_data.get('courier_id'),
     }
 
 
@@ -868,8 +1102,8 @@ def pay_pending_sale(conn, sale_id, data):
             'cost_total': cost_total,
             'payment_method': payment_method,
         })
-    except Exception:
-        pass
+    except Exception as acc_err:
+        logger.error(f'Accounting entry for paid remission #{sale_id} failed: {acc_err}')
 
     log_action(conn, 'REMISSION_PAID', 'sale', sale_id,
                old_value={'status': 'pending_payment', 'total': totals['total']},
@@ -986,8 +1220,9 @@ def cancel_sale(conn, sale_id, reason):
                 'sale_type': _sale_row[3] or 'cash',
                 'payment_method': _sale_row[4] or 'efectivo',
             })
-    except Exception:
-        pass  # Accounting errors never block cancellations
+    except Exception as acc_err:
+        # Accounting errors never block cancellations, but must be logged
+        logger.error(f'Accounting reversal for cancelled sale #{sale_id} failed: {acc_err}')
 
     # Reverse customer credit balance if credit sale
     if s_type == 'credit' and s_cust_id:
diff --git a/pos/services/product_categorizer.py b/pos/services/product_categorizer.py
new file mode 100644
index 0000000..1562fcd
--- /dev/null
+++ b/pos/services/product_categorizer.py
@@ -0,0 +1,780 @@
+# /home/Autopartes/pos/services/product_categorizer.py
+"""Product auto-categorization for tenant inventory.
+
+Given one or more items (part_number / name / brand) assign a tenant
+``categories.id`` using, in order:
+
+  1. A rule engine over the Nexpart taxonomy (``services/nexpart_taxonomy``):
+     the item (Spanish) name is matched against the Spanish translations of
+     the 558 Nexpart part-types / 108 subgroups / 14 groups, plus a small
+     supplemental Spanish keyword table for terms the catalog lacks.
+  2. A fallback to the LLM classifier ``ai_chat.classify_part`` when the rule
+     engine finds nothing (opt-in via ``use_llm``).
+
+The rule engine maps a Nexpart node to a *canonical category* (a short Spanish
+name like "Frenos", "Motor", "Encendido").  The canonical name is then resolved
+against the tenant's own ``categories`` table: an existing row is reused when a
+close match exists, otherwise a new row is created.
+
+Public API:
+    categorize_item(conn, part_number, name, brand, ...) -> dict
+    categorize_items(conn, items, ...) -> dict
+    categorize_inventory(conn, limit, ...) -> dict
+
+Every result dict has the shape:
+    {part_number, category_id, category_name, canonical_category,
+     confidence, source}
+
+``source`` is one of: 'taxonomy', 'keyword', 'brand', 'llm', 'none'.
+"""
+
+import re
+import unicodedata
+from difflib import SequenceMatcher
+
+from services import nexpart_taxonomy as nt
+from services.nexpart_taxonomy import NEXPART_TAXONOMY, TAXONOMY_OVERRIDES_ES
+
+try:  # translations.py is optional; the taxonomy overrides are the main source
+    from services.translations import PART_TRANSLATIONS
+except Exception:  # pragma: no cover
+    PART_TRANSLATIONS = {}
+
+
+# ── Canonical category names ───────────────────────────────────────────────
+# Short Spanish names that both align with the Nexpart groups and, in
+# practice, with the names tenants already use in their `categories` table.
+
+CANONICAL_BY_GROUP = {
+    "Ignition & Filters": "Filtros y Encendido",
+    "Belts, Hoses, Water Pumps & Cooling System Parts": "Enfriamiento",
+    "Starting & Charging System Parts (Alternators, Batteries & Cables)": "Eléctrico",
+    "Brake System, Wheel Bearings, Studs, Nuts & Hardware": "Frenos",
+    "Fuel & Emissions Parts": "Combustible y Emisiones",
+    "Heating & Air Conditioning": "Aire Acondicionado",
+    "Engine Parts": "Motor",
+    "Drivetrain Parts": "Tren Motriz",
+    "Steering & Suspension Parts": "Suspensión",
+    "Exhaust, Clutch & Flywheel Parts": "Escape",
+    "Wipers, Lamps & Fuses": "Luces y Limpiaparabrisas",
+    "Body Parts, Cables, Caps, Electrical Motors, Switches & Other Miscellaneous Parts": "Carrocería",
+    "Chemicals, Waxes & Lubricants": "Lubricantes y Químicos",
+    "Tires, Wheels, Tools & Accessory Parts": "Llantas y Accesorios",
+}
+
+# Subgroup overrides: more specific than the group default.
+CANONICAL_BY_SUBGROUP = {
+    # Ignition & Filters
+    "Filters & PCV": "Filtros",
+    "Spark Plugs & Glow Plugs": "Encendido",
+    "Tune-Up & Ignition Parts": "Encendido",
+    "Ignition Wires": "Encendido",
+    "Computers & Relays": "Eléctrico",
+    # Starting & Charging
+    "Batteries": "Eléctrico",
+    "Starters": "Eléctrico",
+    "Alternators & Voltage Regulators": "Eléctrico",
+    "Starter Solenoids, Switches & Relays": "Eléctrico",
+    # Cooling
+    "Radiators & Electric Fan Motors": "Enfriamiento",
+    "Water Pumps, Fan Blades & Clutches": "Enfriamiento",
+    "Thermostats, Housings & Radiator Caps": "Enfriamiento",
+    "Engine Coolant & Bypass Hoses": "Enfriamiento",
+    # Brakes
+    "Front Friction, Drums & Rotors": "Frenos",
+    "Rear Friction, Drums & Rotors": "Frenos",
+    "Front Calipers, Wheel Cylinders, Hoses": "Frenos",
+    "Rear Calipers, Wheel Cylinders, Hoses": "Frenos",
+    "Master Cylinders, Boosters & Switches": "Frenos",
+    "Brake Cables, Studs, Nuts & Spindle Nuts": "Frenos",
+    "Front Brake Hardware & ABS Sensors": "Frenos",
+    "Rear Brake Hardware & ABS Sensors": "Frenos",
+    "Miscellaneous Disc Hardware": "Frenos",
+    "Miscellaneous Drum Hardware": "Frenos",
+    "Front Wheel Bearings & Seals": "Baleros y Mazas",
+    "Rear Wheel Bearings & Seals": "Baleros y Mazas",
+    "Spindles & Hubs": "Baleros y Mazas",
+    # Fuel & emissions
+    "Fuel Pumps & Tanks": "Combustible y Emisiones",
+    "Fuel Injection Parts, Mass Air Flow Sensors": "Combustible y Emisiones",
+    "Carburetors, Carburetor Kits & Components": "Combustible y Emisiones",
+    "EGR & Emissions Valves": "Combustible y Emisiones",
+    "Emission Sensors, Relays, Solenoids & Switches": "Combustible y Emisiones",
+    "Fuel Injection Sensors, Relays & Switches": "Combustible y Emisiones",
+    "Turbochargers & Superchargers": "Motor",
+    # AC
+    "AC Compressors, Kits & Parts": "Aire Acondicionado",
+    "AC Condensers & Evaporators": "Aire Acondicionado",
+    "AC Accumulators, Receiver Driers & Valves": "Aire Acondicionado",
+    "AC Hose Assemblies & Fittings": "Aire Acondicionado",
+    "Blower Motors & Parts": "Aire Acondicionado",
+    "Heater Cores & Heater Control Valves": "Aire Acondicionado",
+    # Engine
+    "Cams, Lifters & Timing Parts": "Motor",
+    "Crankshafts & Bearings": "Motor",
+    "Pistons, Rings & Rods": "Motor",
+    "Heads & Manifolds": "Motor",
+    "Gasket Sets": "Motor",
+    "Individual Gaskets & Seals": "Motor",
+    "Intake & Exhaust Valves": "Motor",
+    "Rockers & Push Rods": "Motor",
+    "Vacuum & Oil Pumps": "Motor",
+    "Engine Block Parts": "Motor",
+    "Engines & Kits": "Motor",
+    "Engine Mounts & Other Miscellaneous Engine Parts": "Motor",
+    # Drivetrain
+    "Driveshafts, U-Joints & CV (Constant Velocity) Parts": "Tren Motriz",
+    "Axle & Differential Parts": "Tren Motriz",
+    "Transmission & Parts": "Transmisión",
+    "Transmission Kits & Gaskets": "Transmisión",
+    "Automatic Transmission Seals": "Transmisión",
+    "Manual Transmission Seals": "Transmisión",
+    "Manual Transmission Bearings": "Transmisión",
+    "Clutches & Clutch Kits": "Clutch",
+    "Clutch Hydraulics": "Clutch",
+    "Miscellaneous Clutch Parts": "Clutch",
+    # Steering & suspension
+    "Ball Joints & Control Arms": "Suspensión",
+    "Shock Absorbers & Struts": "Suspensión",
+    "Sway Bars, Stabilizer Bars, Strut Rods & Parts": "Suspensión",
+    "Alignment Kits & Tools": "Suspensión",
+    "Steering Linkages, Rods & Arms": "Dirección",
+    "Rack & Pinion, Gear Box, Power Cylinder": "Dirección",
+    "Power Steering Pumps, Hoses & Kits": "Dirección",
+    "King Pins, Trailing Arms, Alignment & Other Chassis": "Dirección",
+    # Exhaust
+    "All Exhaust & Diagrams": "Escape",
+    "Catalytic Converter": "Escape",
+    "Manifolds & Headers": "Escape",
+    "Individual Exhaust Parts": "Escape",
+    # Wipers / lamps / fuses
+    "Arms, Blades & Refills": "Limpiaparabrisas",
+    "Wiper Motors & Washer Pumps": "Limpiaparabrisas",
+    "Headlamps & Flashers": "Luces",
+    "Exterior Lamps": "Luces",
+    "Interior Lamps": "Luces",
+    "Lighting Modules & Switches": "Luces",
+    "Lighting Relays & Sensors": "Luces",
+    # Body / electrical / misc
+    "Bumpers & License Plates": "Carrocería",
+    "Door, Window & Tailgate Parts": "Carrocería",
+    "Glass": "Carrocería",
+    "Hood & Tailgate Parts": "Carrocería",
+    "Hoods Fenders & Body Parts": "Carrocería",
+    "Hood, Fender & Body Parts": "Carrocería",
+    "Interior & Steering Wheel": "Carrocería",
+    "Electrical Motors": "Eléctrico",
+    "Electronics, Sensors, Relays & Miscellaneous Parts": "Eléctrico",
+    "Sensors, Switches & Relays": "Eléctrico",
+    "Switches, Relays & Miscellaneous Parts": "Eléctrico",
+    "Electronics Audio/Visual & Mirrors": "Carrocería",
+    # Chemicals / tools
+    "Engine & Transmission Lubricants & Additives": "Lubricantes y Químicos",
+    "Tires & Wheels": "Llantas y Accesorios",
+    "Tools, Jacks, Hardware & Manuals": "Llantas y Accesorios",
+    "Wheel & Hardware": "Llantas y Accesorios",
+}
+
+# Extra names a canonical category should be matched against in the tenant's
+# `categories` table (in addition to the canonical name itself).
+CATEGORY_ALIASES = {
+    "Filtros y Encendido": ["Filtros", "Encendido", "Filtros y Encendido", "Afinacion y Encendido"],
+    "Filtros": ["Filtros", "Filtro de aceite", "Filtros de aire", "Filtros de gasolina"],
+    "Encendido": ["Encendido", "Ignición y Eléctrico", "Bujías"],
+    "Enfriamiento": ["Enfriamiento", "Refrigeración", "Sistema de Enfriamiento", "Radiadores"],
+    "Eléctrico": ["Eléctrico", "Eléctrico e Iluminación", "Ignición y Eléctrico", "Baterías y Eléctrico"],
+    "Frenos": ["Frenos", "Frenos (Discos)", "Balatas", "Sistema de Frenos"],
+    "Baleros y Mazas": ["Baleros", "Balero", "Mazas", "Baleros y Sellos", "Baleros de Rueda"],
+    "Combustible y Emisiones": ["Combustible", "Combustible y Aire", "Inyección", "Emisiones"],
+    "Aire Acondicionado": ["Aire Acondicionado", "Calefacción y Aire Acondicionado", "A/C", "Heat & AC"],
+    "Motor": ["Motor", "Partes de Motor", "Engine", "Motor y Componentes"],
+    "Tren Motriz": ["Tren Motriz", "Drivetrain", "Transmisión", "Flechas"],
+    "Transmisión": ["Transmisión", "Transmission", "Clutch y Transmisión", "Caja"],
+    "Clutch": ["Clutch", "Clutch y Transmisión", "Kits de Clutch"],
+    "Suspensión": ["Suspensión", "Suspension", "Amortiguadores", "Dirección y Suspensión"],
+    "Dirección": ["Dirección", "Steering", "Cremalleras", "Dirección y Rótulas"],
+    "Escape": ["Escape", "Exhaust", "Mofles", "Sistema de Escape"],
+    "Luces y Limpiaparabrisas": ["Luces", "Iluminación", "Limpiaparabrisas", "Faros y Calaveras"],
+    "Luces": ["Luces", "Iluminación", "Faros", "Calaveras"],
+    "Limpiaparabrisas": ["Limpiaparabrisas", "Plumas", "Wipers"],
+    "Carrocería": ["Carrocería", "Body & Lamp Assembly", "Body", "Accesorios"],
+    "Lubricantes y Químicos": ["Aceites y Lubricantes", "Lubricantes", "Químicos", "Químicos, Ceras y Lubricantes"],
+    "Llantas y Accesorios": ["Llantas", "Llantas y Rines", "Herramienta", "Herramientas", "Accesorios", "Tires, Wheels, Tools & Accessory Parts"],
+}
+
+# Supplemental Spanish rules for terms the Nexpart translations don't cover.
+# Applied only when the taxonomy matcher found nothing.  Longest match wins.
+ES_RULES = [
+    ("disco de freno", "Frenos"),
+    ("discos de freno", "Frenos"),
+    ("tambor de freno", "Frenos"),
+    ("cinta de freno", "Frenos"),
+    ("tambor", "Frenos"),
+    ("balero de rueda", "Baleros y Mazas"),
+    ("balero", "Baleros y Mazas"),
+    ("maza de rueda", "Baleros y Mazas"),
+    ("maza", "Baleros y Mazas"),
+    ("husillo", "Baleros y Mazas"),
+    ("cremallera", "Dirección"),
+    ("terminal de direccion", "Dirección"),
+    ("bieleta", "Dirección"),
+    ("rotula", "Suspensión"),
+    ("horquilla", "Suspensión"),
+    ("birlo", "Frenos"),
+    ("motoventilador", "Enfriamiento"),
+    ("ventilador", "Enfriamiento"),
+    ("calavera", "Luces"),
+    ("faro", "Luces"),
+    ("direccional", "Luces"),
+    ("foco", "Luces"),
+    ("espejo", "Carrocería"),
+    ("salpicadera", "Carrocería"),
+    ("defensa", "Carrocería"),
+    ("cristal", "Carrocería"),
+    ("empaque", "Motor"),
+    ("junta", "Motor"),
+    ("sello", "Motor"),
+    ("sensor de oxigeno", "Combustible y Emisiones"),
+    ("inyector", "Combustible y Emisiones"),
+    ("bomba de gasolina", "Combustible y Emisiones"),
+    ("catalizador", "Escape"),
+    ("convertidor", "Escape"),
+    ("mofle", "Escape"),
+    ("silenciador", "Escape"),
+    ("clutch", "Clutch"),
+    ("embrague", "Clutch"),
+    ("banda", "Enfriamiento"),
+    ("manguera", "Enfriamiento"),
+    ("radiador", "Enfriamiento"),
+    ("termostato", "Enfriamiento"),
+    ("bomba de agua", "Enfriamiento"),
+    ("bomba de aceite", "Motor"),
+    ("alternador", "Eléctrico"),
+    ("arrancador", "Eléctrico"),
+    ("marcha", "Eléctrico"),
+    ("bateria", "Eléctrico"),
+    ("sensor", "Eléctrico"),
+    ("switch", "Eléctrico"),
+    ("relevador", "Eléctrico"),
+    ("fusible", "Eléctrico"),
+    ("filtro", "Filtros"),
+    ("bujia", "Encendido"),
+    ("balata", "Frenos"),
+    ("pastilla", "Frenos"),
+    ("amortiguador", "Suspensión"),
+    ("toe", "Suspensión"),
+    # Drivetrain / CV
+    ("junta homocinetica", "Tren Motriz"),
+    ("homocinetica", "Tren Motriz"),
+    ("cubre polvo", "Tren Motriz"),
+    ("cubrepolvo", "Tren Motriz"),
+    ("guardapolvo", "Tren Motriz"),
+    ("fuelle", "Tren Motriz"),
+    ("tripode", "Tren Motriz"),
+    ("flecha", "Tren Motriz"),
+    ("reten", "Motor"),
+    ("o ring", "Motor"),
+    # Consumables
+    ("aditivo", "Lubricantes y Químicos"),
+    ("aceite", "Lubricantes y Químicos"),
+    ("grasa", "Lubricantes y Químicos"),
+    ("liquido", "Lubricantes y Químicos"),
+    ("spray", "Lubricantes y Químicos"),
+    ("aerosol", "Lubricantes y Químicos"),
+    ("limpiador", "Lubricantes y Químicos"),
+    ("anticongelante", "Lubricantes y Químicos"),
+    ("refrigerante", "Enfriamiento"),
+    ("solvente", "Lubricantes y Químicos"),
+    ("silicon", "Lubricantes y Químicos"),
+    ("sellador", "Lubricantes y Químicos"),
+    ("pegamento", "Lubricantes y Químicos"),
+    ("acondicionador", "Lubricantes y Químicos"),
+    ("afloja todo", "Lubricantes y Químicos"),
+    ("pintura", "Carrocería"),
+    # Electrical modules
+    ("modulo", "Eléctrico"),
+    ("regulador", "Eléctrico"),
+    ("solenoide", "Eléctrico"),
+    # Tools / accessories
+    ("herramienta", "Llantas y Accesorios"),
+    ("inflallanta", "Llantas y Accesorios"),
+    ("desarmador", "Llantas y Accesorios"),
+    ("pinza", "Llantas y Accesorios"),
+    ("dado", "Llantas y Accesorios"),
+    # Misc frequent terms seen in real tenant catalogs
+    ("barra de direccion", "Dirección"),
+    ("terminal de direccion", "Dirección"),
+    ("terminal", "Dirección"),
+    ("espiga", "Suspensión"),
+    ("resorte", "Suspensión"),
+    ("barra", "Suspensión"),
+    ("aspas", "Enfriamiento"),
+    ("aspa", "Enfriamiento"),
+    ("tulipa", "Luces"),
+    ("conector", "Eléctrico"),
+    ("bulbo", "Eléctrico"),
+    ("resistencia", "Eléctrico"),
+    ("tripoide", "Tren Motriz"),
+    ("cople", "Tren Motriz"),
+    ("motor", "Motor"),
+    ("dir", "Dirección"),
+]
+
+# Weak brand-only hints, used when neither name rules nor the taxonomy hit.
+BRAND_HINTS = {
+    "NGK": "Encendido", "DENSO": "Encendido", "ACDELCO": "Encendido",
+    "BREMBO": "Frenos", "RAYBESTOS": "Frenos", "WAGNER": "Frenos",
+    "MONROE": "Suspensión", "GABRIEL": "Suspensión", "MOOG": "Suspensión",
+    "FRAM": "Filtros", "PUROLATOR": "Filtros", "WIX": "Filtros",
+    "GATES": "Enfriamiento", "DAYCO": "Enfriamiento", "GMB": "Enfriamiento",
+    "TRW": "Dirección", "EXEDY": "Clutch", "LUK": "Clutch",
+    "FEL-PRO": "Motor", "MAHLE": "Motor", "VICTOR REINZ": "Motor",
+    "BOSCH": "Eléctrico", "VALEO": "Eléctrico",
+}
+
+
+# ── Normalization / indexes ────────────────────────────────────────────────
+
+def _norm(s):
+    """Uppercase, strip accents, keep alphanumerics, collapse whitespace."""
+    s = unicodedata.normalize("NFD", str(s or ""))
+    s = s.encode("ascii", "ignore").decode("ascii")
+    s = re.sub(r"[^A-Za-z0-9]+", " ", s).upper().strip()
+    return " ".join(s.split())
+
+
+def _build_indexes():
+    pt_index = {}    # normalized Spanish part-type -> English Nexpart part type
+    node_index = {}  # normalized Spanish group/subgroup -> (group, subgroup|None)
+
+    for en, es in TAXONOMY_OVERRIDES_ES.items():
+        n = _norm(es)
+        if not n:
+            continue
+        if en in NEXPART_TAXONOMY:
+            node_index.setdefault(n, (en, None))
+            continue
+        found = None
+        for g, subs in NEXPART_TAXONOMY.items():
+            for sg in subs:
+                if en == sg:
+                    found = (g, sg)
+                    break
+            if found:
+                break
+        if found:
+            node_index.setdefault(n, found)
+        else:
+            pt_index.setdefault(n, en)
+
+    # Invert the TecDoc→Spanish dictionary for extra coverage.
+    for en, es in PART_TRANSLATIONS.items():
+        for part in str(es).split("/"):
+            n = _norm(part)
+            if n and n not in pt_index and n not in node_index:
+                pt_index[n] = en
+
+    return pt_index, node_index
+
+
+_PT_INDEX, _NODE_INDEX = _build_indexes()
+_ES_RULES_SORTED = sorted(
+    ((_norm(k), v) for k, v in ES_RULES if _norm(k)), key=lambda kv: -len(kv[0])
+)
+
+
+def _key_usable(key):
+    """Generic single tokens ("sensor", "kit") create false positives."""
+    tokens = key.split()
+    if len(tokens) >= 2:
+        return True
+    return len(key) >= 9
+
+
+# ── Matchers ───────────────────────────────────────────────────────────────
+
+def match_taxonomy(name):
+    """Match an item name against the Nexpart taxonomy.
+
+    Returns (group, subgroup, part_type, kind, confidence) or None.
+    kind ∈ {'part_type', 'subgroup', 'group'}.
+    """
+    n = _norm(name)
+    if not n:
+        return None
+    padded = " " + n + " "
+
+    best = None  # (key_len, kind_rank, group, subgroup, part_type)
+
+    for key, en in _PT_INDEX.items():
+        if not _key_usable(key) or (" " + key + " ") not in padded:
+            continue
+        node = nt.tecdoc_to_nexpart(en)
+        if not node:
+            continue
+        cand = (len(key), 3, node[0], node[1], node[2])
+        if best is None or cand[:2] > best[:2]:
+            best = cand
+
+    for key, (g, sg) in _NODE_INDEX.items():
+        if not _key_usable(key) or (" " + key + " ") not in padded:
+            continue
+        rank = 2 if sg else 1
+        cand = (len(key), rank, g, sg, None)
+        if best is None or cand[:2] > best[:2]:
+            best = cand
+
+    if not best:
+        return None
+    if best[1] == 3:
+        return (best[2], best[3], best[4], "part_type", 0.85)
+    if best[1] == 2:
+        return (best[2], best[3], None, "subgroup", 0.65)
+    return (best[2], None, None, "group", 0.5)
+
+
+def canonical_category(group, subgroup):
+    """Map a Nexpart (group, subgroup) to a canonical Spanish category."""
+    if subgroup and subgroup in CANONICAL_BY_SUBGROUP:
+        return CANONICAL_BY_SUBGROUP[subgroup]
+    if group and group in CANONICAL_BY_GROUP:
+        return CANONICAL_BY_GROUP[group]
+    return "Otros"
+
+
+def match_rules(name):
+    """Supplemental Spanish keyword match. Returns (canonical, confidence)."""
+    n = _norm(name)
+    if not n:
+        return None
+    padded = " " + n + " "
+    for key, canonical in _ES_RULES_SORTED:
+        if " " + key + " " in padded:
+            return canonical, 0.6
+    return None
+
+
+def classify_name(name, brand=None):
+    """Rule-only classification. Returns (canonical, confidence, source)."""
+    hit = match_taxonomy(name)
+    if hit:
+        group, subgroup, _pt, _kind, conf = hit
+        return canonical_category(group, subgroup), conf, "taxonomy"
+
+    rule = match_rules(name)
+    if rule:
+        return rule[0], rule[1], "keyword"
+
+    brand_key = _norm(brand)
+    if brand_key and brand_key in BRAND_HINTS:
+        return BRAND_HINTS[brand_key], 0.4, "brand"
+
+    return None, 0.0, "none"
+
+
+# ── Tenant category resolution ─────────────────────────────────────────────
+
+def _similarity(a, b):
+    if not a or not b:
+        return 0.0
+    if a == b:
+        return 1.0
+    ta, tb = a.split(), b.split()
+    if len(ta) >= 1 and len(tb) >= 1:
+        seta, setb = set(ta), set(tb)
+        # whole-string containment (word aligned) is a strong signal
+        if setb <= seta or seta <= setb:
+            return 0.85
+    return SequenceMatcher(None, a, b).ratio()
+
+
+class CategoryResolver:
+    """Resolve canonical category names to rows in the tenant `categories`."""
+
+    def __init__(self, conn, create=True):
+        self.conn = conn
+        self.create = create
+        self._cache = {}
+        self._existing = None  # list of (id, name, norm)
+        self.available = self._load()
+
+    def _load(self):
+        cur = self.conn.cursor()
+        try:
+            cur.execute("SELECT to_regclass('public.categories')")
+            if cur.fetchone()[0] is None:
+                return False
+            cur.execute(
+                "SELECT id, name FROM categories "
+                "WHERE is_active IS NULL OR is_active = true"
+            )
+            self._existing = [(r[0], r[1], _norm(r[1])) for r in cur.fetchall()]
+            return True
+        except Exception:
+            return False
+        finally:
+            cur.close()
+
+    def _best_existing(self, canonical):
+        target = _norm(canonical)
+        candidates = [target] + [_norm(a) for a in CATEGORY_ALIASES.get(canonical, [])]
+        best_id, best_name, best_score = None, None, 0.0
+        for cid, name, norm_name in self._existing:
+            score = max(_similarity(norm_name, c) for c in candidates if c)
+            if score > best_score:
+                best_id, best_name, best_score = cid, name, score
+        if best_score >= 0.72:
+            return best_id, best_name
+        return None, None
+
+    def resolve(self, canonical):
+        """Return (category_id, category_name) for a canonical category."""
+        if canonical in self._cache:
+            return self._cache[canonical]
+        if not self.available:
+            self._cache[canonical] = (None, canonical)
+            return self._cache[canonical]
+
+        cid, name = self._best_existing(canonical)
+        if cid is not None:
+            self._cache[canonical] = (cid, name)
+            return self._cache[canonical]
+
+        if not self.create:
+            self._cache[canonical] = (None, canonical)
+            return self._cache[canonical]
+
+        cur = self.conn.cursor()
+        try:
+            cur.execute(
+                "INSERT INTO categories (name) VALUES (%s) RETURNING id",
+                (canonical,),
+            )
+            cid = cur.fetchone()[0]
+            self.conn.commit()
+        finally:
+            cur.close()
+        self._existing.append((cid, canonical, _norm(canonical)))
+        self._cache[canonical] = (cid, canonical)
+        return self._cache[canonical]
+
+
+# ── Public API ─────────────────────────────────────────────────────────────
+
+def categorize_item(conn, part_number, name=None, brand=None,
+                    use_llm=False, persist=False, resolver=None, create_categories=True):
+    """Classify a single item and optionally persist it.
+
+    Returns {part_number, category_id, category_name, canonical_category,
+             confidence, source, persisted}.
+    """
+    if resolver is None:
+        resolver = CategoryResolver(conn, create=create_categories)
+
+    canonical, confidence, source = classify_name(name or part_number, brand)
+
+    if canonical is None and use_llm:
+        canonical, confidence, source = _llm_category(part_number, name)
+
+    if canonical is None:
+        result = {
+            "part_number": part_number, "category_id": None,
+            "category_name": None, "canonical_category": None,
+            "confidence": 0.0, "source": "none", "persisted": 0,
+        }
+    else:
+        cid, cname = resolver.resolve(canonical)
+        result = {
+            "part_number": part_number, "category_id": cid,
+            "category_name": cname, "canonical_category": canonical,
+            "confidence": round(confidence, 2), "source": source, "persisted": 0,
+        }
+
+    if persist and result["category_id"] is not None and part_number:
+        result["persisted"] = _persist_item_category(conn, part_number, result["category_id"])
+
+    return result
+
+
+def _llm_category(part_number, name=None):
+    """Ask ai_chat.classify_part for a category. Returns (canonical, conf, src)."""
+    if not part_number:
+        return None, 0.0, "none"
+    try:
+        from services.ai_chat import classify_part
+        res = classify_part(str(part_number))
+    except Exception:
+        return None, 0.0, "none"
+    if not res:
+        return None, 0.0, "none"
+    raw = (res.get("category") or "").strip()
+    if not raw:
+        return None, 0.0, "none"
+    canon = _map_llm_category(raw)
+    return canon, 0.5, "llm"
+
+
+def map_llm_category(raw):
+    """Public alias: map a free-text Spanish category (LLM output)."""
+    return _map_llm_category(raw)
+
+
+def _map_llm_category(raw):
+    """Map a free-text Spanish category (LLM output) to a canonical name."""
+    n = _norm(raw)
+    if not n:
+        return None
+    # direct canonical / alias hit
+    for canonical, aliases in CATEGORY_ALIASES.items():
+        for a in [canonical] + list(aliases):
+            if _norm(a) == n:
+                return canonical
+    # fall back to the keyword rules over the LLM's own words
+    rule = match_rules(raw)
+    if rule:
+        return rule[0]
+    return raw.strip()
+
+
+def _persist_item_category(conn, part_number, category_id):
+    cur = conn.cursor()
+    try:
+        cur.execute(
+            "UPDATE inventory SET category_id = %s "
+            "WHERE part_number = %s AND is_active = true "
+            "AND (category_id IS NULL OR category_id <> %s)",
+            (category_id, part_number, category_id),
+        )
+        n = cur.rowcount
+        conn.commit()
+        return n
+    finally:
+        cur.close()
+
+
+def categorize_items(conn, items, use_llm=False, persist=False,
+                     create_categories=True, sample_limit=20):
+    """Categorize a list of {part_number, name, brand} dicts.
+
+    Returns {count, persisted, by_source, categories, results, sample}.
+    """
+    # A dry run must not mutate the tenant's categories table.
+    create_categories = create_categories and persist
+    resolver = CategoryResolver(conn, create=create_categories)
+    results = []
+    by_source = {}
+    persisted = 0
+    for it in items or []:
+        r = categorize_item(
+            conn, it.get("part_number"), it.get("name"), it.get("brand"),
+            use_llm=use_llm, persist=persist, resolver=resolver,
+            create_categories=create_categories,
+        )
+        persisted += r.get("persisted", 0)
+        by_source[r["source"]] = by_source.get(r["source"], 0) + 1
+        results.append(r)
+
+    categories = {}
+    for r in results:
+        if r["category_name"]:
+            categories[r["category_name"]] = categories.get(r["category_name"], 0) + 1
+
+    return {
+        "count": len(results),
+        "persisted": persisted,
+        "by_source": by_source,
+        "categories": categories,
+        "results": results[:sample_limit] if sample_limit else results,
+        "sample": results[:sample_limit],
+    }
+
+
+def categorize_inventory(conn, limit=200, only_uncategorized=True, use_llm=False,
+                         persist=True, create_categories=True, offset=0,
+                         after_id=None, sample_limit=20):
+    """Categorize inventory rows in bulk.
+
+    ``after_id`` enables checkpointed backfills (process rows with id > after_id).
+    Returns {scanned, persisted, by_source, categories, sample, last_id}.
+    """
+    cur = conn.cursor()
+    where = ["is_active = true"]
+    params = []
+    if only_uncategorized:
+        where.append("(category_id IS NULL)")
+    if after_id is not None:
+        where.append("id > %s")
+        params.append(after_id)
+    sql = (
+        "SELECT id, part_number, name, brand FROM inventory "
+        "WHERE " + " AND ".join(where) +
+        " ORDER BY id LIMIT %s OFFSET %s"
+    )
+    params.extend([int(limit), int(offset)])
+    cur.execute(sql, params)
+    rows = cur.fetchall()
+    cur.close()
+
+    # A dry run must not mutate the tenant's categories table.
+    create_categories = create_categories and persist
+    resolver = CategoryResolver(conn, create=create_categories)
+    by_source = {}
+    categories = {}
+    persisted = 0
+    sample = []
+    last_id = after_id
+
+    for inv_id, part_number, name, brand in rows:
+        canonical, confidence, source = classify_name(name or part_number, brand)
+        if canonical is None and use_llm:
+            canonical, confidence, source = _llm_category(part_number, name)
+
+        cid, cname = (None, None)
+        if canonical:
+            cid, cname = resolver.resolve(canonical)
+
+        n = 0
+        if persist and cid is not None:
+            c2 = conn.cursor()
+            try:
+                c2.execute(
+                    "UPDATE inventory SET category_id = %s "
+                    "WHERE id = %s AND (category_id IS NULL OR category_id <> %s)",
+                    (cid, inv_id, cid),
+                )
+                n = c2.rowcount
+                conn.commit()
+            finally:
+                c2.close()
+        persisted += n
+        by_source[source] = by_source.get(source, 0) + 1
+        if cname:
+            categories[cname] = categories.get(cname, 0) + 1
+        if len(sample) < sample_limit:
+            sample.append({
+                "inventory_id": inv_id, "part_number": part_number, "name": name,
+                "category_id": cid, "category_name": cname,
+                "canonical_category": canonical,
+                "confidence": round(confidence, 2), "source": source,
+            })
+        last_id = inv_id
+
+    return {
+        "scanned": len(rows),
+        "persisted": persisted,
+        "by_source": by_source,
+        "categories": categories,
+        "sample": sample,
+        "last_id": last_id,
+    }
+
+
+def stats():
+    """Diagnostic helper for the rule engine."""
+    return {
+        "part_type_keys": len(_PT_INDEX),
+        "node_keys": len(_NODE_INDEX),
+        "es_rules": len(_ES_RULES_SORTED),
+        "brand_hints": len(BRAND_HINTS),
+        "canonical_categories": sorted(set(CANONICAL_BY_GROUP.values())),
+    }
diff --git a/pos/services/prom_metrics.py b/pos/services/prom_metrics.py
new file mode 100644
index 0000000..f13dbe4
--- /dev/null
+++ b/pos/services/prom_metrics.py
@@ -0,0 +1,255 @@
+"""Expositor Prometheus mínimo, sin dependencias externas.
+
+El Python de producción no trae ``prometheus_client`` (y no se instala), así que
+el formato de texto de Prometheus 0.0.4 se arma a mano.
+
+El registro vive en memoria del proceso y es thread-safe (``threading.Lock``);
+con gunicorn multiproceso cada worker lleva sus propios contadores y Prometheus
+scrapea al que responda. Para tasas y latencias eso es suficiente; si algún día
+se necesita un contador global exacto hay que habilitar el modo multiproceso con
+un directorio compartido.
+
+Uso::
+
+    from services.prom_metrics import metrics
+
+    metrics.configure('pos')
+    metrics.request_started()                                  # before_request
+    metrics.request_finished(method, path, status, duration)   # after_request
+    metrics.record_exception()                                 # teardown_request (exc)
+    metrics.request_aborted()                                  # teardown si no hubo after_request
+    body = metrics.render()                                    # GET /metrics
+"""
+
+import os
+import threading
+import time
+
+CONTENT_TYPE = 'text/plain; version=0.0.4; charset=utf-8'
+
+DEFAULT_BUCKETS = (0.005, 0.01, 0.025, 0.05, 0.1, 0.25, 0.5, 1.0, 2.5, 5.0, 10.0)
+
+# Tope de series distintas por métrica; lo que se salga de aquí se agrupa en
+# path="/otras" para que una ruta inesperada no infle la memoria.
+MAX_SERIES = 400
+
+# La consulta a pg_stat_activity es best-effort y se cachea unos segundos.
+DB_GAUGE_TTL = 5.0
+
+
+def escape_label(value):
+    return str(value).replace('\\', '\\\\').replace('"', '\\"').replace('\n', '\\n')
+
+
+def format_labels(pairs):
+    if not pairs:
+        return ''
+    body = ','.join(f'{k}="{escape_label(v)}"' for k, v in pairs)
+    return '{' + body + '}'
+
+
+def normalize_path(rule, path):
+    """Colapsa una petición a un valor de label acotado.
+
+    Si Flask resolvió una regla (``request.url_rule.rule``) se usa tal cual, que
+    ya viene en forma plantilla (``/pos/api/inventory/items/<int:item_id>``).
+    Para 404 (sin regla) sólo se conserva el primer segmento.
+    """
+    if rule:
+        return rule
+    segments = [s for s in (path or '/').split('/') if s]
+    if not segments:
+        return '/'
+    if len(segments) == 1:
+        return '/' + segments[0]
+    return '/' + segments[0] + '/...'
+
+
+def _master_dsn():
+    dsn = os.environ.get('MASTER_DB_URL') or os.environ.get('DATABASE_URL')
+    if dsn:
+        return dsn
+    try:
+        from config import MASTER_DB_URL
+        return MASTER_DB_URL
+    except Exception:
+        return None
+
+
+class Metrics:
+    def __init__(self, app='app', version=None, buckets=DEFAULT_BUCKETS):
+        self._lock = threading.Lock()
+        self._app = app
+        self._version = version or os.environ.get('NEXUS_APP_VERSION', 'dev')
+        self._buckets = tuple(sorted(buckets))
+        self._start = time.time()
+        self._requests = {}    # (method, path, status_class) -> count
+        self._errors = {}      # (method, path, status_class) -> count (4xx/5xx)
+        self._durations = {}   # (method, path) -> [sum, count, [bucket counts]]
+        self._exceptions = 0
+        self._in_flight = 0
+        self._db_cache = (0.0, None)
+
+    # ─── Instrumentación ────────────────────────────────────────────────
+    def configure(self, app=None, version=None):
+        with self._lock:
+            if app:
+                self._app = app
+            if version:
+                self._version = version
+
+    def request_started(self):
+        with self._lock:
+            self._in_flight += 1
+
+    def request_finished(self, method, path, status, duration):
+        method = method or 'GET'
+        path = path or '/'
+        try:
+            status_class = f'{int(status) // 100}xx'
+        except (TypeError, ValueError):
+            status_class = 'other'
+        duration = max(0.0, float(duration or 0.0))
+
+        with self._lock:
+            self._in_flight = max(0, self._in_flight - 1)
+
+            key = (method, path, status_class)
+            if key not in self._requests and len(self._requests) >= MAX_SERIES:
+                key = (method, '/otras', status_class)
+            self._requests[key] = self._requests.get(key, 0) + 1
+
+            if status_class in ('4xx', '5xx'):
+                ekey = (method, path, status_class)
+                if ekey not in self._errors and len(self._errors) >= MAX_SERIES:
+                    ekey = (method, '/otras', status_class)
+                self._errors[ekey] = self._errors.get(ekey, 0) + 1
+
+            dkey = (method, path)
+            if dkey not in self._durations and len(self._durations) >= MAX_SERIES:
+                dkey = (method, '/otras')
+            entry = self._durations.get(dkey)
+            if entry is None:
+                entry = [0.0, 0, [0] * len(self._buckets)]
+                self._durations[dkey] = entry
+            entry[0] += duration
+            entry[1] += 1
+            for i, upper in enumerate(self._buckets):
+                if duration <= upper:
+                    entry[2][i] += 1
+
+    def request_aborted(self):
+        """Petición que no pasó por after_request (excepción que no se convirtió en respuesta)."""
+        with self._lock:
+            self._in_flight = max(0, self._in_flight - 1)
+
+    def record_exception(self):
+        with self._lock:
+            self._exceptions += 1
+
+    # ─── Gauge de conexiones (consulta en el momento del scrape) ────────
+    def _db_connections(self):
+        now = time.time()
+        cached_at, cached_value = self._db_cache
+        if now - cached_at < DB_GAUGE_TTL:
+            return cached_value
+
+        value = None
+        dsn = _master_dsn()
+        if dsn:
+            try:
+                import psycopg2
+                conn = psycopg2.connect(dsn, connect_timeout=2)
+                try:
+                    conn.autocommit = True
+                    cur = conn.cursor()
+                    cur.execute('SET statement_timeout = 2000')
+                    cur.execute('SELECT count(*) FROM pg_stat_activity')
+                    row = cur.fetchone()
+                    cur.close()
+                    if row:
+                        value = int(row[0])
+                finally:
+                    conn.close()
+            except Exception:
+                value = None
+
+        with self._lock:
+            self._db_cache = (now, value)
+        return value
+
+    # ─── Render ─────────────────────────────────────────────────────────
+    def render(self):
+        with self._lock:
+            app = self._app
+            version = self._version
+            start = self._start
+            requests = dict(self._requests)
+            errors = dict(self._errors)
+            durations = {k: (v[0], v[1], list(v[2])) for k, v in self._durations.items()}
+            exceptions = self._exceptions
+            in_flight = self._in_flight
+
+        db_connections = self._db_connections()
+        now = time.time()
+        out = []
+
+        def head(name, kind, help_text):
+            out.append(f'# HELP {name} {help_text}')
+            out.append(f'# TYPE {name} {kind}')
+
+        head('nexus_app_info', 'gauge', 'Application build information.')
+        out.append(f'nexus_app_info{format_labels([("app", app), ("version", version)])} 1')
+
+        head('nexus_uptime_seconds', 'gauge', 'Seconds since the process started.')
+        out.append(f'nexus_uptime_seconds{format_labels([("app", app)])} {now - start:.3f}')
+
+        head('nexus_process_start_time_seconds', 'gauge', 'Unix time the process started.')
+        out.append(f'nexus_process_start_time_seconds{format_labels([("app", app)])} {start:.3f}')
+
+        head('nexus_http_requests_in_flight', 'gauge', 'Requests currently being processed.')
+        out.append(f'nexus_http_requests_in_flight{format_labels([("app", app)])} {in_flight}')
+
+        head('nexus_http_requests_total', 'counter',
+             'HTTP requests by method, normalized path and status class.')
+        for method, path, status_class in sorted(requests):
+            labels = format_labels([('app', app), ('method', method),
+                                    ('path', path), ('status', status_class)])
+            out.append(f'nexus_http_requests_total{labels} {requests[(method, path, status_class)]}')
+
+        head('nexus_http_errors_total', 'counter',
+             'HTTP responses with a 4xx or 5xx status class.')
+        for method, path, status_class in sorted(errors):
+            labels = format_labels([('app', app), ('method', method),
+                                    ('path', path), ('status', status_class)])
+            out.append(f'nexus_http_errors_total{labels} {errors[(method, path, status_class)]}')
+
+        if durations:
+            head('nexus_http_request_duration_seconds', 'histogram',
+                 'HTTP request latency by method and normalized path.')
+            for method, path in sorted(durations):
+                total, count, buckets = durations[(method, path)]
+                base = [('app', app), ('method', method), ('path', path)]
+                for i, upper in enumerate(self._buckets):
+                    labels = format_labels(base + [('le', str(upper))])
+                    out.append(f'nexus_http_request_duration_seconds_bucket{labels} {buckets[i]}')
+                inf = format_labels(base + [('le', '+Inf')])
+                out.append(f'nexus_http_request_duration_seconds_bucket{inf} {count}')
+                labels = format_labels(base)
+                out.append(f'nexus_http_request_duration_seconds_sum{labels} {total:.6f}')
+                out.append(f'nexus_http_request_duration_seconds_count{labels} {count}')
+
+        head('nexus_app_exceptions_total', 'counter',
+             'Unhandled exceptions raised while serving a request.')
+        out.append(f'nexus_app_exceptions_total{format_labels([("app", app)])} {exceptions}')
+
+        if db_connections is not None:
+            head('nexus_db_connections', 'gauge',
+                 'Open connections on the master database (pg_stat_activity).')
+            labels = format_labels([('app', app), ('database', 'master')])
+            out.append(f'nexus_db_connections{labels} {db_connections}')
+
+        return '\n'.join(out) + '\n'
+
+
+metrics = Metrics()
diff --git a/pos/services/push_service.py b/pos/services/push_service.py
index 1a66b70..a71b3ce 100644
--- a/pos/services/push_service.py
+++ b/pos/services/push_service.py
@@ -45,11 +45,11 @@ def get_or_create_vapid_keys(conn):
 
     # Check if keys already exist in config
     try:
-        cur.execute("SELECT value FROM config WHERE key = 'vapid_private_key'")
+        cur.execute("SELECT value FROM tenant_config WHERE key = 'vapid_private_key'")
         row = cur.fetchone()
         if row:
             private_key = row[0]
-            cur.execute("SELECT value FROM config WHERE key = 'vapid_public_key'")
+            cur.execute("SELECT value FROM tenant_config WHERE key = 'vapid_public_key'")
             pub_row = cur.fetchone()
             public_key = pub_row[0] if pub_row else None
             cur.close()
@@ -68,11 +68,11 @@ def get_or_create_vapid_keys(conn):
         # Store in config table
         try:
             cur.execute("""
-                INSERT INTO config (key, value) VALUES ('vapid_private_key', %s)
+                INSERT INTO tenant_config (key, value) VALUES ('vapid_private_key', %s)
                 ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value
             """, (private_pem,))
             cur.execute("""
-                INSERT INTO config (key, value) VALUES ('vapid_public_key', %s)
+                INSERT INTO tenant_config (key, value) VALUES ('vapid_public_key', %s)
                 ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value
             """, (public_b64,))
             conn.commit()
diff --git a/pos/services/question_ai.py b/pos/services/question_ai.py
new file mode 100644
index 0000000..75572a1
--- /dev/null
+++ b/pos/services/question_ai.py
@@ -0,0 +1,325 @@
+# /home/Autopartes/pos/services/question_ai.py
+"""A7 — Intent classification + suggested answers for MercadoLibre questions.
+
+Given a buyer question (optionally tied to a listing/inventory item) this
+service:
+  1. Classifies the intent: compatibility | price | shipping | availability | other.
+  2. Builds a suggested answer from real data — ``inventory`` (name/brand/price),
+     ``inventory_vehicle_compat`` (fitment) and stock — and falls back to the
+     LLM (``services.ai_chat``) when the question needs free text.
+
+Public API:
+    classify_intent(text) -> (intent, confidence)
+    suggest_answer(tenant_conn, question_text, inventory_id=None, ...) -> dict
+    get_question_suggestion(tenant_conn, question_id, ...) -> dict
+
+Returned dict:
+    {
+      "intent": str,
+      "suggested_answer": str,
+      "confidence": float,        # 0.0 - 1.0 (intent + data certainty)
+      "source": str,              # rules | inventory | compat_db | template | llm | none
+      "auto_ok": bool,            # safe to auto-send (high confidence + template)
+      "evidence": dict            # data used to build the answer
+    }
+"""
+
+import re
+
+INTENTS = ('compatibility', 'price', 'shipping', 'availability', 'other')
+
+# Ordered by priority: fitment questions often also contain "tienen"/"hay",
+# so compatibility is matched first.
+_INTENT_PATTERNS = [
+    ('compatibility', [
+        r'compatib', r'\bsirve\b', r'\bsirven\b', r'le queda', r'queda (a|en|para)',
+        r'le queda a', r'es para (un|una|mi)', r'funciona (para|en)', r'aplica para',
+        r'\bfits?\b', r'quedar[áa]', r'le sirve', r'modelo \d{4}',
+    ]),
+    ('price', [
+        r'\bprecio\b', r'cu[áa]nto (cuesta|vale|es|sale)', r'\bcosto\b', r'\bvale\b',
+        r'\bdescuento\b', r'\bfactura\b', r'\bmeses\b', r'\bmsi\b', r'\bbarato\b',
+        r'\bpago\b', r'\bcuotas?\b',
+    ]),
+    ('shipping', [
+        r'env[íi]o', r'env[íi]an', r'\benvias?\b', r'\bmandan\b', r'\bllega\b',
+        r'\bentrega\b', r'paqueter[íi]a', r'\bgu[íi]a\b', r'mensajer[íi]a',
+        r'\benvio\b',
+    ]),
+    ('availability', [
+        r'\btienes\b', r'\btiene[n]?\b', r'\bhay\b', r'disponib', r'\bstock\b',
+        r'existencia', r'inventario', r'cu[áa]ntas? (piezas|unidades|tienes)',
+        r'tienen en',
+    ]),
+]
+
+_YEAR_RE = re.compile(r'\b(19[89]\d|20[0-3]\d)\b')
+
+
+def classify_intent(text):
+    """Rule-based intent classifier. Returns (intent, confidence)."""
+    if not text:
+        return 'other', 0.0
+    low = str(text).lower()
+
+    for intent, patterns in _INTENT_PATTERNS:
+        for pat in patterns:
+            if re.search(pat, low):
+                return intent, 0.85
+
+    # A bare model-year usually means "does it fit?".
+    if _YEAR_RE.search(low):
+        return 'compatibility', 0.6
+
+    return 'other', 0.35
+
+
+# ─── data helpers ───────────────────────────────────────────────────────────
+
+def _inventory_row(conn, inventory_id):
+    """Return a small dict for the inventory item backing a listing."""
+    if not inventory_id:
+        return None
+    cur = conn.cursor()
+    try:
+        cur.execute("""
+            SELECT i.id, i.part_number, i.name, i.brand, i.price_1, i.condition, c.name
+            FROM inventory i
+            LEFT JOIN part_categories c ON c.id = i.category_id
+            WHERE i.id = %s
+        """, (inventory_id,))
+        row = cur.fetchone()
+    except Exception:
+        return None
+    finally:
+        cur.close()
+    if not row:
+        return None
+    return {
+        'id': row[0], 'part_number': row[1] or '', 'name': row[2] or '',
+        'brand': row[3] or '', 'price': float(row[4] or 0), 'condition': row[5] or '',
+        'category': row[6] or '',
+    }
+
+
+def _compat_summary(conn, inventory_id, limit=6):
+    """Human-readable fitment list from inventory_vehicle_compat (text rows)."""
+    cur = conn.cursor()
+    try:
+        cur.execute("""
+            SELECT make, model, year
+            FROM inventory_vehicle_compat
+            WHERE inventory_id = %s AND (make IS NOT NULL OR model IS NOT NULL)
+            GROUP BY make, model, year
+            ORDER BY make, model, year
+            LIMIT %s
+        """, (inventory_id, limit))
+        rows = cur.fetchall()
+    except Exception:
+        return [], 0
+    finally:
+        cur.close()
+
+    lines = []
+    for make, model, year in rows:
+        parts = [str(p).strip() for p in (make, model) if p]
+        label = ' '.join(parts)
+        if year:
+            label = f"{label} {year}".strip()
+        if label:
+            lines.append(label)
+    return lines, len(lines)
+
+
+def _trailing_confirm():
+    return ("Si tu vehículo no aparece, compárteme marca, modelo y año "
+            "(o los últimos 8 dígitos de tu VIN) y te confirmo la compatibilidad.")
+
+
+def _config_value(conn, key, default=None):
+    cur = conn.cursor()
+    try:
+        cur.execute("SELECT value FROM tenant_config WHERE key = %s", (key,))
+        row = cur.fetchone()
+        return row[0] if row and row[0] else default
+    except Exception:
+        return default
+    finally:
+        cur.close()
+
+
+def _stock(conn, inventory_id):
+    try:
+        from services.inventory_engine import get_stock
+        return get_stock(conn, inventory_id)
+    except Exception:
+        return None
+
+
+# ai_chat returns these generic strings when every backend fails. They are not
+# real answers, so a question must fall back to the template instead.
+_LLM_ERROR_PREFIXES = (
+    'El asistente está ocupado',
+    'El asistente esta ocupado',
+    'El asistente tardó mucho',
+    'El asistente tardo mucho',
+    'El asistente no está disponible',
+    'El asistente no esta disponible',
+)
+
+
+def _llm_answer(tenant_conn, question_text, item):
+    """Free-text answer via ai_chat. Returns (text, error)."""
+    try:
+        from services import ai_chat
+    except Exception as e:
+        return None, f'ai_chat import: {e}'
+
+    context = None
+    if item:
+        context = (f"Producto publicado: {item['name']} (marca {item['brand'] or 'N/D'}, "
+                   f"código {item['part_number'] or 'N/D'}). Precio ${item['price']:.2f} MXN.")
+    prompt = ("Eres un vendedor de autopartes que responde preguntas de compradores "
+              f"en MercadoLibre. Responde breve (máximo 3 líneas), en español y con tono "
+              f"amable. Nunca inventes compatibilidad que no puedas confirmar.\n\nPregunta: {question_text}")
+    try:
+        res = ai_chat.chat(prompt, inventory_context=context)
+    except Exception as e:
+        return None, str(e)
+    if isinstance(res, dict):
+        msg = (res.get('message') or '').strip()
+        if msg and not msg.startswith(_LLM_ERROR_PREFIXES):
+            return msg, None
+        if msg:
+            return None, f'backend sin respuesta: {msg}'
+    return None, 'sin respuesta del modelo'
+
+
+# ─── answer builder ─────────────────────────────────────────────────────────
+
+def suggest_answer(tenant_conn, question_text, inventory_id=None, listing_id=None,
+                   master_conn=None, use_llm=True):
+    """Classify a question and build a suggested answer.
+
+    ``tenant_conn`` is an open tenant connection (not committed). The function
+    never raises for backend/data failures: it degrades to a template answer.
+    """
+    intent, conf = classify_intent(question_text)
+    item = _inventory_row(tenant_conn, inventory_id) if inventory_id else None
+
+    out = {
+        'intent': intent,
+        'suggested_answer': '',
+        'confidence': conf,
+        'source': 'rules',
+        'auto_ok': False,
+        'evidence': {},
+        'listing_id': listing_id,
+        'inventory_id': inventory_id,
+    }
+    if item:
+        out['evidence']['item'] = {
+            'part_number': item['part_number'], 'name': item['name'],
+            'brand': item['brand'], 'price': item['price'],
+        }
+
+    if intent == 'compatibility' and inventory_id:
+        lines, n = _compat_summary(tenant_conn, inventory_id)
+        out['evidence']['compat_count'] = n
+        if lines:
+            out['suggested_answer'] = (
+                "¡Sí! Esta pieza es compatible con: " + ", ".join(lines) + ". " + _trailing_confirm()
+            )
+            out['confidence'] = 0.9
+            out['source'] = 'compat_db'
+            # Fitment can still be model/trim specific -> human review, no auto-send.
+            out['auto_ok'] = False
+            return out
+
+    elif intent == 'price' and item and item['price'] > 0:
+        out['suggested_answer'] = (
+            f"El precio es ${item['price']:,.2f} MXN. "
+            "El envío se calcula al finalizar la compra según tu código postal. ¿Te ayudo con algo más?"
+        )
+        out['confidence'] = 0.9
+        out['source'] = 'inventory'
+        out['auto_ok'] = True
+        return out
+
+    elif intent == 'availability' and inventory_id:
+        stock = _stock(tenant_conn, inventory_id)
+        out['evidence']['stock'] = stock
+        if stock is not None:
+            if stock > 0:
+                out['suggested_answer'] = (
+                    f"Sí, tenemos {stock} {'pieza' if stock == 1 else 'piezas'} disponibles. "
+                    "Puedes comprar directo desde la publicación."
+                )
+                out['confidence'] = 0.9
+            else:
+                out['suggested_answer'] = (
+                    "Por el momento no tenemos existencia de esta pieza. "
+                    "Déjame tu pregunta y te aviso en cuanto llegue."
+                )
+                out['confidence'] = 0.8
+            out['source'] = 'inventory'
+            out['auto_ok'] = True
+            return out
+
+    elif intent == 'shipping':
+        mode = _config_value(tenant_conn, 'meli_shipping_mode', '')
+        extra = f" Modalidad: {mode}." if mode else ''
+        out['suggested_answer'] = (
+            "El costo y tiempo de envío se muestran al ingresar tu código postal en MercadoLibre." + extra +
+            " Si estás en la ciudad, también puedes pasar a recogerlo a la tienda."
+        )
+        out['confidence'] = 0.75
+        out['source'] = 'template'
+        out['auto_ok'] = out['confidence'] >= 0.8
+        return out
+
+    # Fallback: free text for "other", or when the data needed was missing.
+    if use_llm:
+        text, err = _llm_answer(tenant_conn, question_text, item)
+        if text:
+            out['suggested_answer'] = text
+            out['source'] = 'llm'
+            out['confidence'] = max(out['confidence'], 0.6)
+            out['auto_ok'] = False
+            return out
+        out['evidence']['llm_error'] = err
+
+    if not out['suggested_answer']:
+        if intent == 'compatibility':
+            out['suggested_answer'] = ("Con gusto te confirmo la compatibilidad. " + _trailing_confirm())
+        else:
+            out['suggested_answer'] = (
+                "¡Hola! Gracias por tu pregunta; en un momento te atendemos con el detalle."
+            )
+        out['source'] = 'template'
+        out['confidence'] = min(out['confidence'], 0.5)
+        out['auto_ok'] = False
+    return out
+
+
+def get_question_suggestion(tenant_conn, question_id, master_conn=None, use_llm=True):
+    """Resolve a local marketplace question then build its suggested answer."""
+    cur = tenant_conn.cursor()
+    try:
+        cur.execute("""
+            SELECT q.question_text, q.listing_id, l.inventory_id
+            FROM marketplace_questions q
+            LEFT JOIN marketplace_listings l ON l.id = q.listing_id
+            WHERE q.id = %s
+        """, (question_id,))
+        row = cur.fetchone()
+    finally:
+        cur.close()
+    if not row:
+        raise ValueError('Question not found')
+
+    q_text, listing_id, inventory_id = row
+    return suggest_answer(
+        tenant_conn, q_text or '', inventory_id=inventory_id,
+        listing_id=listing_id, master_conn=master_conn, use_llm=use_llm,
+    )
diff --git a/pos/services/sat_keys.py b/pos/services/sat_keys.py
new file mode 100644
index 0000000..258e58a
--- /dev/null
+++ b/pos/services/sat_keys.py
@@ -0,0 +1,338 @@
+# /home/Autopartes/pos/services/sat_keys.py
+"""SAT (CFDI 4.0) product/unit key resolution for auto parts.
+
+Assigns ``clave_prod_serv`` (``c_ClaveProdServ``) and ``clave_unidad``
+(``c_ClaveUnidad``) per item from the part name/brand/category using, in order:
+
+  1. ``RULES`` — longest keyword hit over the normalized Spanish name.
+  2. ``CANONICAL_BY_CATEGORY`` — a canonical category (from
+     ``product_categorizer``) mapped to a code.
+  3. an optional LLM fallback (``ai_chat.classify_part`` → category → rule).
+  4. ``DEFAULT_*`` (``25174800`` / ``H87``) — the current hard-coded default.
+
+Codes come from the public SAT group ``2517`` (autopartes) suggestions; see
+scripts/assign_sat_keys.py for provenance.  **Never raises**: any missing
+template/LLM failure degrades to ``DEFAULT_*`` so the CFDI pipeline cannot
+break because of this module.
+
+Public API:
+    resolve_key(name=None, brand=None, category=None, canonical=None,
+                part_number=None, use_llm=False) -> (clave_prod_serv, clave_unidad, source)
+"""
+
+import re
+import unicodedata
+
+DEFAULT_KEY = "25174800"   # Componentes y sistemas de vehículos / autopartes
+DEFAULT_UNIT = "H87"       # Pieza
+
+# Canonical Spanish categories (product_categorizer.CANONICAL_*) -> SAT key.
+CANONICAL_BY_CATEGORY = {
+    "Frenos": "25171700",
+    "Baleros y Mazas": "25171900",
+    "Suspensión": "25172000",
+    "Dirección": "25172000",
+    "Motor": "26101700",
+    "Enfriamiento": "25174000",
+    "Encendido": "25173900",
+    "Filtros": "40161500",
+    "Filtros y Encendido": "40161500",
+    "Eléctrico": "25173900",
+    "Combustible y Emisiones": "25172400",
+    "Aire Acondicionado": "40101800",
+    "Transmisión": "26111800",
+    "Clutch": "26111900",
+    "Tren Motriz": "25173800",
+    "Escape": "25173700",
+    "Luces": "25172900",
+    "Limpiaparabrisas": "25171500",
+    "Luces y Limpiaparabrisas": "25172900",
+    "Carrocería": "25172600",
+    "Lubricantes y Químicos": "15121500",
+    "Llantas y Accesorios": "25172500",
+    "Otros": DEFAULT_KEY,
+}
+
+# Keyword rules over the normalized name.  ORDER MATTERS (first hit wins), so
+# more specific terms go first.  Keys are already normalized (uppercase,
+# accent-stripped, single-spaced).
+RULES = [
+    # ── Exhaust / emissions ────────────────────────────────────────────────
+    ("catalizador", "12161600"),
+    ("convertidor catalitico", "12161600"),
+    ("mofle", "25173700"),
+    ("silenciador", "25173700"),
+    ("sistema de escape", "25173700"),
+    ("tubo de escape", "25173700"),
+    ("linea de escape", "25173700"),
+    ("multiple de escape", "25173700"),
+    ("sensor de oxigeno", "25173700"),
+    # ── Clutch ─────────────────────────────────────────────────────────────
+    ("kit de clutch", "26111900"),
+    ("embrague", "26111900"),
+    ("clutch", "26111900"),
+    ("plato de clutch", "26112000"),
+    ("disco de clutch", "26112000"),
+    # ── Batteries ──────────────────────────────────────────────────────────
+    ("bateria", "26111700"),
+    ("acumulador", "26111700"),
+    # ── Tires / wheels ─────────────────────────────────────────────────────
+    ("llanta", "25172500"),
+    ("neumatico", "25172500"),
+    ("rin", "25172500"),
+    # ── Wipers ─────────────────────────────────────────────────────────────
+    ("limpiaparabrisas", "25171500"),
+    ("pluma limpia", "25171500"),
+    ("wiper", "25171500"),
+    ("brazo limpiaparabrisas", "25171500"),
+    # ── Suspension / steering ──────────────────────────────────────────────
+    ("amortiguador", "25172000"),
+    ("horquilla", "25172000"),
+    ("rotula", "25172000"),
+    ("bieleta", "25172000"),
+    ("espiga", "25172000"),
+    ("base amortiguador", "25172000"),
+    ("resorte", "25172000"),
+    ("suspension", "25172000"),
+    ("cremallera", "25172000"),
+    ("terminal de direccion", "25172000"),
+    ("barra de direccion", "25172000"),
+    ("direccion", "25172000"),
+    # ── Brakes ─────────────────────────────────────────────────────────────
+    ("balata", "25171700"),
+    ("pastilla", "25171700"),
+    ("disco de freno", "25171700"),
+    ("tambor", "25171700"),
+    ("cilindro de freno", "25171700"),
+    ("freno", "25171700"),
+    ("birlo", "25171700"),
+    # ── Wheel bearings / hubs ──────────────────────────────────────────────
+    ("maza", "25171900"),
+    ("balero", "25171900"),
+    ("husillo", "25171900"),
+    # ── Cooling ────────────────────────────────────────────────────────────
+    ("radiador", "25174000"),
+    ("termostato", "25174000"),
+    ("bomba de agua", "25174000"),
+    ("manguera", "25174000"),
+    ("banda", "25174000"),
+    ("polea", "25174000"),
+    ("motoventilador", "25174000"),
+    ("ventilador", "25174000"),
+    ("refrigerante", "25174000"),
+    ("anticongelante", "25174000"),
+    # ── Filters ────────────────────────────────────────────────────────────
+    ("filtro", "40161500"),
+    # ── Electrical / ignition ──────────────────────────────────────────────
+    ("bujia", "25173900"),
+    ("cable bujia", "25173900"),
+    ("bobina", "25173900"),
+    ("alternador", "25173900"),
+    ("arrancador", "25173900"),
+    ("marcha", "25173900"),
+    ("modulo", "25173900"),
+    ("regulador", "25173900"),
+    ("relevador", "25173900"),
+    ("fusible", "25173900"),
+    ("sensor", "25173900"),
+    ("switch", "25173900"),
+    ("bomba de gasolina", "25172400"),
+    ("inyector", "25172400"),
+    ("cuerpo de aceleracion", "25172400"),
+    ("carburador", "25172400"),
+    # ── Engine internals / gaskets ─────────────────────────────────────────
+    ("empaque", "26101700"),
+    ("junta", "26101700"),
+    ("sello", "26101700"),
+    ("reten", "26101700"),
+    ("piston", "26101700"),
+    ("valvula", "26101700"),
+    ("bomba de aceite", "26101700"),
+    ("arbol de levas", "26101700"),
+    ("cigue", "26101700"),
+    # ── Lighting ───────────────────────────────────────────────────────────
+    ("faro", "25172900"),
+    ("calavera", "25172900"),
+    ("direccional", "25172900"),
+    ("tulipa", "25172900"),
+    ("foco", "25172900"),
+    ("luces", "25172900"),
+    ("luz", "25172900"),
+    # ── Body / glass ───────────────────────────────────────────────────────
+    ("espejo", "25172600"),
+    ("defensa", "25172600"),
+    ("salpicadera", "25172600"),
+    ("cofre", "25172600"),
+    ("puerta", "25172200"),
+    ("parabrisas", "25172300"),
+    ("cristal", "25172300"),
+    # ── Drivetrain ─────────────────────────────────────────────────────────
+    ("homocinetica", "25173800"),
+    ("tripode", "25173800"),
+    ("flecha", "25173800"),
+    ("transmision", "26111800"),
+    ("diferencial", "25173800"),
+    ("cople", "25173800"),
+    # ── Consumables ────────────────────────────────────────────────────────
+    ("aceite", "15121500"),
+    ("grasa", "15121500"),
+    ("aditivo", "15121500"),
+    ("lubricante", "15121500"),
+    ("silicon", "15121500"),
+    ("sellador", "15121500"),
+    ("spray", "15121500"),
+    ("limpiador", "15121500"),
+    # ── Tools / accessories ────────────────────────────────────────────────
+    ("herramienta", "25191700"),
+    ("desarmador", "25191700"),
+    ("dado", "25191700"),
+    ("gato hidraul", "25191700"),
+    # ── English aliases (supplier catalogs ship English names) ─────────────
+    ("air filter", "40161500"),
+    ("oil filter", "40161500"),
+    ("fuel filter", "40161500"),
+    ("cabin filter", "40161500"),
+    ("filter", "40161500"),
+    ("water pump", "25174000"),
+    ("fuel pump", "25172400"),
+    ("power steering pump", "25172000"),
+    ("oil pump", "26101700"),
+    ("spark plug", "25173900"),
+    ("ignition", "25173900"),
+    ("muffler", "25173700"),
+    ("exhaust", "25173700"),
+    ("catalytic", "12161600"),
+    ("brake", "25171700"),
+    ("caliper", "25171700"),
+    ("rotor", "25171700"),
+    ("shoe", "25171700"),
+    ("drum", "25171700"),
+    ("pad", "25171700"),
+    ("alternator", "25173900"),
+    ("starter", "25173900"),
+    ("relay", "25173900"),
+    ("fuse", "25173900"),
+    ("cable", "25173900"),
+    ("injector", "25172400"),
+    ("battery", "26111700"),
+    ("radiator", "25174000"),
+    ("thermostat", "25174000"),
+    ("hose", "25174000"),
+    ("belt", "25174000"),
+    ("shock", "25172000"),
+    ("strut", "25172000"),
+    ("control arm", "25172000"),
+    ("ball joint", "25172000"),
+    ("tie rod", "25172000"),
+    ("bearing", "25171900"),
+    ("hub", "25171900"),
+    ("cv joint", "25173800"),
+    ("axle", "25173800"),
+    ("driveshaft", "25173800"),
+    ("transmission", "26111800"),
+    ("gasket", "26101700"),
+    ("valve", "26101700"),
+    ("piston", "26101700"),
+    ("engine mount", "26101700"),
+    ("motor mount", "26101700"),
+    ("mirror", "25172600"),
+    ("bumper", "25172600"),
+    ("fender", "25172600"),
+    ("door", "25172200"),
+    ("windshield", "25172300"),
+    ("glass", "25172300"),
+    ("lamp", "25172900"),
+    ("light", "25172900"),
+    ("wiper", "25171500"),
+    ("tire", "25172500"),
+    ("wheel", "25172500"),
+    ("rim", "25172500"),
+    # ── Generic fallbacks (kept last) ──────────────────────────────────────
+    ("motor", "26101700"),
+    ("bomba", "26101700"),
+]
+
+
+def _norm(s):
+    s = unicodedata.normalize("NFD", str(s or ""))
+    s = s.encode("ascii", "ignore").decode("ascii")
+    s = re.sub(r"[^A-Za-z0-9]+", " ", s).upper().strip()
+    return " ".join(s.split())
+
+
+# RULES keys normalized once (uppercase) so they compare against _norm(name).
+_RULES_NORM = [(_norm(k), code) for k, code in RULES]
+
+
+def resolve_by_rules(name):
+    """Return a SAT key from the keyword rules, or ``None``.
+
+    Single-token keys match on token prefix (so ``freno`` also catches
+    ``frenos``); multi-token keys match as a contiguous substring.
+    """
+    n = _norm(name)
+    if not n:
+        return None
+    padded = " " + n + " "
+    tokens = n.split()
+    for key, code in _RULES_NORM:
+        if " " in key:
+            if " " + key + " " in padded:
+                return code
+        elif any(
+            t == key or t.startswith(key)
+            or (len(t) >= 5 and key.startswith(t))
+            for t in tokens
+        ):
+            return code
+    return None
+
+
+def resolve_key(name=None, brand=None, canonical=None, category=None,
+                part_number=None, use_llm=False, timeout=None):
+    """Resolve ``(clave_prod_serv, clave_unidad, source)`` for one item.
+
+    ``source`` ∈ {'rules', 'category', 'llm', 'default'}.  Never raises.
+    """
+    # 1. keyword rules over name (fall back to part_number if no name)
+    code = resolve_by_rules(name) or resolve_by_rules(part_number)
+    if code:
+        return code, DEFAULT_UNIT, "rules"
+
+    # 2. canonical category (either passed directly or as free text)
+    for cat in (canonical, category):
+        if not cat:
+            continue
+        hit = CANONICAL_BY_CATEGORY.get(str(cat).strip())
+        if hit:
+            return hit, DEFAULT_UNIT, "category"
+
+    # 3. optional LLM fallback: classify_part -> category -> rule/map
+    if use_llm:
+        llm_code = _llm_key(part_number or name, brand, timeout=timeout)
+        if llm_code:
+            return llm_code, DEFAULT_UNIT, "llm"
+
+    return DEFAULT_KEY, DEFAULT_UNIT, "default"
+
+
+def _llm_key(part_number, brand=None, timeout=None):
+    """Ask ai_chat.classify_part for the category and map it. Never raises."""
+    if not part_number:
+        return None
+    try:
+        from services.ai_chat import classify_part
+        res = classify_part(str(part_number))
+    except Exception:
+        return None
+    if not res:
+        return None
+    raw = (res.get("category") or "").strip()
+    if not raw:
+        return None
+    hit = CANONICAL_BY_CATEGORY.get(raw)
+    if hit:
+        return hit
+    # The LLM may answer in free text ("Sistema de Frenos"): try the name rules
+    # and then the canonical map over its own words.
+    return resolve_by_rules(raw)
diff --git a/pos/services/semantic_search.py b/pos/services/semantic_search.py
new file mode 100644
index 0000000..171f5f7
--- /dev/null
+++ b/pos/services/semantic_search.py
@@ -0,0 +1,304 @@
+# /home/Autopartes/pos/services/semantic_search.py
+"""Búsqueda semántica sobre el catálogo: rerank + embeddings vía API QWEN.
+
+El proveedor QWEN (``QWEN_API_URL``) expone, además de chat, dos endpoints
+compatibles con OpenAI/Cohere y ya verificados en producción:
+
+    POST {QWEN_API_URL}/rerank
+        {"model": "rerank", "query": "...", "documents": ["a", "b", ...]}
+        → {"results": [{"index": 1, "relevance_score": 0.70, "document": {...}}, ...]}
+        (ordenado por relevancia descendente)
+
+    POST {QWEN_API_URL}/embeddings
+        {"model": "qwen3-embedding", "input": "texto"}
+        → {"data": [{"embedding": [4096 floats]}, ...]}  (OpenAI-compatible)
+
+Regla de oro: **ninguna función lanza excepción**. Si falta configuración, hay
+timeout o cualquier error de red/API, ``rerank()`` devuelve el orden original y
+``embed()``/``find_similar()`` devuelven ``None``. Así el buscador del POS
+nunca se rompe ni se cae por culpa del rerank; en el peor caso la búsqueda es
+la de siempre.
+
+Variables de entorno (ver ``pos/config.py``):
+    QWEN_API_URL               URL base del proveedor (igual que ``ai_chat``)
+    QWEN_API_KEY               API key (igual que ``ai_chat``)
+    QWEN_RERANK_MODEL          default ``rerank``
+    QWEN_EMBED_MODEL           default ``qwen3-embedding``
+    SEARCH_RERANK_ENABLED      default ``true``  — scope ``catalog`` (público)
+    SEARCH_RERANK_POS_ENABLED  default ``false`` — scope ``pos`` (caja/POS)
+    SEARCH_RERANK_TIMEOUT      default ``2`` segundos (ambos scopes)
+    SEARCH_RERANK_MAX_CANDIDATES default ``50`` documentos por llamada
+
+Nota de rendimiento (medido 2026-10-11 contra api.nan.builders, RTT ~40 ms):
+el endpoint /rerank tarda ~0.6–1.8 s independientemente del número de
+documentos (5 a 51). Por eso el POS va apagado por defecto: su búsqueda en
+Meilisearch ya responde en ~18 ms y el rerank la encarecería 30–80×.
+"""
+
+import math
+import os
+
+import requests
+
+try:  # config del POS; con sys.path del dashboard puede resolver el config raíz
+    from config import QWEN_API_URL, QWEN_API_KEY
+    from config import QWEN_RERANK_MODEL, QWEN_EMBED_MODEL
+    from config import SEARCH_RERANK_ENABLED, SEARCH_RERANK_POS_ENABLED
+    from config import SEARCH_RERANK_TIMEOUT, SEARCH_RERANK_MAX_CANDIDATES
+except ImportError:
+    QWEN_API_URL = os.environ.get('QWEN_API_URL', '')
+    QWEN_API_KEY = os.environ.get('QWEN_API_KEY', '')
+    QWEN_RERANK_MODEL = os.environ.get('QWEN_RERANK_MODEL', 'rerank')
+    QWEN_EMBED_MODEL = os.environ.get('QWEN_EMBED_MODEL', 'qwen3-embedding')
+    SEARCH_RERANK_ENABLED = os.environ.get('SEARCH_RERANK_ENABLED', 'true').lower() == 'true'
+    SEARCH_RERANK_POS_ENABLED = os.environ.get('SEARCH_RERANK_POS_ENABLED', 'false').lower() == 'true'
+    SEARCH_RERANK_TIMEOUT = float(os.environ.get('SEARCH_RERANK_TIMEOUT', '2'))
+    SEARCH_RERANK_MAX_CANDIDATES = int(os.environ.get('SEARCH_RERANK_MAX_CANDIDATES', '50'))
+
+DEFAULT_RERANK_MODEL = 'rerank'
+DEFAULT_EMBED_MODEL = 'qwen3-embedding'
+DEFAULT_TIMEOUT = 2.0
+DEFAULT_MAX_CANDIDATES = 50
+
+# Scopes del flag: 'catalog' = catálogo público / API / dashboard;
+# 'pos' = caja y chat del POS, donde la latencia es crítica.
+SCOPE_CATALOG = 'catalog'
+SCOPE_POS = 'pos'
+
+
+def is_configured():
+    """True si hay URL y API key (condición previa a cualquier llamada)."""
+    return bool((QWEN_API_URL or '').strip() and (QWEN_API_KEY or '').strip())
+
+
+def is_rerank_enabled(scope=SCOPE_CATALOG):
+    """Flag de rerank para un scope.
+
+    ``SEARCH_RERANK_ENABLED`` es el interruptor maestro (default ``true``) y
+    aplica al scope ``catalog``. El POS requiere además
+    ``SEARCH_RERANK_POS_ENABLED=true`` (default ``false``) porque el rerank
+    agrega cientos de ms a una búsqueda que hoy es de ~18 ms.
+    """
+    if not SEARCH_RERANK_ENABLED:
+        return False
+    if (scope or SCOPE_CATALOG).lower() == SCOPE_POS:
+        return bool(SEARCH_RERANK_POS_ENABLED)
+    return True
+
+
+def rerank_model():
+    return QWEN_RERANK_MODEL or DEFAULT_RERANK_MODEL
+
+
+def embed_model():
+    return QWEN_EMBED_MODEL or DEFAULT_EMBED_MODEL
+
+
+def max_candidates():
+    """Tope de documentos por llamada (acota payload y latencia)."""
+    try:
+        value = int(SEARCH_RERANK_MAX_CANDIDATES)
+    except (TypeError, ValueError):
+        return DEFAULT_MAX_CANDIDATES
+    return value if value > 0 else DEFAULT_MAX_CANDIDATES
+
+
+def _timeout(timeout=None):
+    if timeout is not None:
+        return timeout
+    try:
+        return float(SEARCH_RERANK_TIMEOUT)
+    except (TypeError, ValueError):
+        return DEFAULT_TIMEOUT
+
+
+def _endpoint(path):
+    url = (QWEN_API_URL or '').strip()
+    if not url:
+        return None
+    return url.rstrip('/') + path
+
+
+def _headers():
+    return {
+        'Authorization': f"Bearer {QWEN_API_KEY}",
+        'Content-Type': 'application/json',
+    }
+
+
+def _identity_order(count):
+    return [{'index': i, 'relevance_score': None} for i in range(count)]
+
+
+def rerank(query, documents, top_n=None, timeout=None):
+    """Reordena ``documents`` por relevancia semántica respecto a ``query``.
+
+    Args:
+        query: texto de búsqueda del usuario.
+        documents: lista de textos candidatos.
+        top_n: opcional, trunca el resultado a los N más relevantes. Por
+            defecto devuelve **todos** los documentos: el caller pagina/muestra
+            y no debe perder items.
+        timeout: segundos (default ``SEARCH_RERANK_TIMEOUT``).
+
+    Returns:
+        list[dict]: ``[{'index': <int>, 'relevance_score': <float|None>}, ...]``
+        en orden de relevancia descendente. En degradación (sin URL/key,
+        timeout, HTTP error, respuesta vacía o índice inválido) devuelve el
+        orden original con ``relevance_score=None``. Nunca lanza.
+    """
+    docs = list(documents or [])
+    identity = _identity_order(len(docs))
+    if not docs or not query:
+        return identity[:top_n] if top_n else identity
+
+    url = _endpoint('/rerank')
+    if not url or not (QWEN_API_KEY or '').strip():
+        return identity[:top_n] if top_n else identity
+
+    try:
+        resp = requests.post(
+            url,
+            headers=_headers(),
+            json={
+                'model': rerank_model(),
+                'query': query,
+                'documents': docs,
+            },
+            timeout=_timeout(timeout),
+        )
+        if resp.status_code >= 400:
+            print(f"[semantic_search] rerank HTTP {resp.status_code}: {resp.text[:200]}")
+            return identity[:top_n] if top_n else identity
+        results = (resp.json() or {}).get('results') or []
+    except Exception as e:
+        print(f"[semantic_search] rerank error: {e}")
+        return identity[:top_n] if top_n else identity
+
+    ordered = []
+    seen = set()
+    for item in results:
+        try:
+            idx = int(item.get('index'))
+        except (TypeError, ValueError, AttributeError):
+            continue
+        if idx < 0 or idx >= len(docs) or idx in seen:
+            continue
+        seen.add(idx)
+        score = item.get('relevance_score')
+        ordered.append({
+            'index': idx,
+            'relevance_score': float(score) if isinstance(score, (int, float)) else None,
+        })
+
+    if not ordered:
+        return identity[:top_n] if top_n else identity
+
+    # Documentos que la API no devolvió (p.ej. si aplicó su propio tope)
+    # conservan su orden original al final — nunca se pierden.
+    for i in range(len(docs)):
+        if i not in seen:
+            ordered.append({'index': i, 'relevance_score': None})
+
+    return ordered[:top_n] if top_n else ordered
+
+
+def rerank_order(query, documents, top_n=None, timeout=None):
+    """Igual que ``rerank()`` pero devuelve solo los índices reordenados."""
+    return [r['index'] for r in rerank(query, documents, top_n=top_n, timeout=timeout)]
+
+
+def embed(texts, timeout=None):
+    """Devuelve los embeddings de ``texts`` vía el endpoint /embeddings.
+
+    Args:
+        texts: str o iterable de str.
+        timeout: segundos (default ``SEARCH_RERANK_TIMEOUT``).
+
+    Returns:
+        list[list[float]] en el mismo orden que la entrada, o ``None`` si no
+        hay configuración, hay timeout, error HTTP o respuesta malformada.
+        Nunca lanza.
+    """
+    if isinstance(texts, str):
+        items = [texts]
+    else:
+        items = list(texts or [])
+    if not items:
+        return []
+
+    url = _endpoint('/embeddings')
+    if not url or not (QWEN_API_KEY or '').strip():
+        return None
+
+    try:
+        resp = requests.post(
+            url,
+            headers=_headers(),
+            json={'model': embed_model(), 'input': items},
+            timeout=_timeout(timeout),
+        )
+        if resp.status_code >= 400:
+            print(f"[semantic_search] embeddings HTTP {resp.status_code}: {resp.text[:200]}")
+            return None
+        data = (resp.json() or {}).get('data') or []
+        vectors = [row.get('embedding') for row in data]
+        if len(vectors) != len(items) or any(not isinstance(v, list) or not v for v in vectors):
+            print(f"[semantic_search] embeddings respuesta inesperada ({len(vectors)} de {len(items)})")
+            return None
+        return vectors
+    except Exception as e:
+        print(f"[semantic_search] embeddings error: {e}")
+        return None
+
+
+def cosine_similarity(vec_a, vec_b):
+    """Similitud coseno entre dos vectores (None si no es calculable)."""
+    if not vec_a or not vec_b or len(vec_a) != len(vec_b):
+        return None
+    try:
+        dot = 0.0
+        norm_a = 0.0
+        norm_b = 0.0
+        for a, b in zip(vec_a, vec_b):
+            dot += a * b
+            norm_a += a * a
+            norm_b += b * b
+        if norm_a <= 0 or norm_b <= 0:
+            return None
+        return dot / (math.sqrt(norm_a) * math.sqrt(norm_b))
+    except (TypeError, ValueError):
+        return None
+
+
+def similar_texts(text_a, text_b, timeout=None):
+    """Similitud coseno entre dos textos (None si no hay embeddings)."""
+    vectors = embed([text_a, text_b], timeout=timeout)
+    if not vectors:
+        return None
+    return cosine_similarity(vectors[0], vectors[1])
+
+
+def find_similar(query, candidates, top_n=None, timeout=None):
+    """Ordena ``candidates`` por similitud coseno con ``query``.
+
+    Returns:
+        list[dict] ``[{'index', 'similarity'}, ...]`` ordenado desc, o ``None``
+        si no hay embeddings disponibles. Nunca lanza.
+    """
+    items = list(candidates or [])
+    if not items or not query:
+        return None
+    vectors = embed([query] + items, timeout=timeout)
+    if not vectors:
+        return None
+    query_vec = vectors[0]
+    scored = []
+    for i, vec in enumerate(vectors[1:]):
+        sim = cosine_similarity(query_vec, vec)
+        if sim is not None:
+            scored.append({'index': i, 'similarity': sim})
+    if not scored:
+        return None
+    scored.sort(key=lambda r: r['similarity'], reverse=True)
+    return scored[:top_n] if top_n else scored
diff --git a/pos/services/sku_matcher.py b/pos/services/sku_matcher.py
new file mode 100644
index 0000000..c4fcb05
--- /dev/null
+++ b/pos/services/sku_matcher.py
@@ -0,0 +1,448 @@
+# /home/Autopartes/pos/services/sku_matcher.py
+"""Inventory <-> supplier-catalog SKU matching.
+
+Tries to populate ``inventory.catalog_part_id`` (today 0% linked) and register
+the matched catalog SKU as an alias in ``inventory_sku_aliases``.
+
+Matching strategy (first hit wins), all over a *normalized* key (uppercase,
+dashes/spaces/dots stripped):
+
+  1. exact  — inventory.part_number == supplier_catalog.sku
+  2. xref   — inventory.part_number == supplier_catalog_interchange.part_number
+  3. name   — fuzzy name similarity (difflib, no sklearn available) against the
+              supplier-catalog names, blocked by first significant token.
+  4. semantic — optional (opt-in) cosine similarity over QWEN embeddings
+              (``semantic_search.embed``), used to fill the gaps difflib
+              leaves behind (same part, different wording/abbreviations).
+              Catalog-name embeddings are cached in-memory per ``CatalogIndex``
+              so a long run embeds each catalog name at most once.  With no
+              network/provider the step degrades to a no-op.
+
+``supplier_catalog`` / ``supplier_catalog_interchange`` live in the MASTER DB;
+``inventory`` / ``inventory_sku_aliases`` live in the tenant DB.  Because the
+two databases are queried with separate connections, the join happens in
+Python (the catalog is small: ~17k items / ~18k distinct cross-refs).
+
+Public API:
+    match_inventory(tenant_conn, master_conn, limit=None, ...) -> summary dict
+    load_catalog_index(master_conn) -> CatalogIndex
+"""
+
+import re
+import time
+import unicodedata
+from difflib import SequenceMatcher
+
+_SKU_BLOCK_RE = re.compile(r"[^A-Z0-9]+")
+
+
+def norm_sku(s):
+    """Normalize a SKU/part number for exact matching."""
+    s = unicodedata.normalize("NFD", str(s or ""))
+    s = s.encode("ascii", "ignore").decode("ascii")
+    return _SKU_BLOCK_RE.sub("", s.upper())
+
+
+def _name_tokens(s):
+    s = unicodedata.normalize("NFD", str(s or ""))
+    s = s.encode("ascii", "ignore").decode("ascii")
+    return [t for t in re.split(r"[^A-Za-z0-9]+", s.upper()) if t]
+
+
+def _name_norm(s):
+    return " ".join(_name_tokens(s))
+
+
+def _load_semantic_search():
+    """Import ``semantic_search`` whether pos/ is on sys.path or not."""
+    try:
+        from services import semantic_search as ss
+    except Exception:
+        try:
+            import semantic_search as ss
+        except Exception:
+            return None
+    return ss
+
+
+def _embed_texts(texts, batch=64, timeout=None, retries=1):
+    """Embed ``texts`` in batches via ``semantic_search.embed``.
+
+    Returns the list of vectors in input order, or ``None`` when the provider
+    is unavailable / errors out (never raises).  A single retry covers the
+    transient 429/timeout seen on the shared QWEN provider.
+    """
+    items = list(texts or [])
+    if not items:
+        return []
+    ss = _load_semantic_search()
+    if ss is None:
+        return None
+    vectors = []
+    for i in range(0, len(items), max(int(batch), 1)):
+        chunk = items[i:i + max(int(batch), 1)]
+        out = None
+        for attempt in range(int(retries) + 1):
+            try:
+                out = ss.embed(chunk, timeout=timeout)
+            except Exception:
+                out = None
+            if out and len(out) == len(chunk):
+                break
+            if attempt < int(retries):
+                time.sleep(2.0)
+        if not out or len(out) != len(chunk):
+            return None
+        vectors.extend(out)
+    return vectors
+
+
+class CatalogIndex:
+    """In-memory index over supplier_catalog (+ interchange)."""
+
+    def __init__(self):
+        self.by_sku = {}          # norm sku -> list of catalog dicts
+        self.by_xref = {}         # norm part_number -> list of catalog dicts
+        self.by_token = {}        # first significant name token -> list of dicts
+        self.total = 0
+        self._emb_cache = {}      # name_norm -> embedding vector (lazy)
+        self.emb_requests = 0     # provider calls used by the semantic matcher
+
+    def add(self, cat_id, supplier, sku, name, category):
+        rec = {
+            "catalog_id": cat_id, "supplier": supplier, "sku": sku,
+            "name": name, "category": category, "name_norm": _name_norm(name),
+        }
+        self.total += 1
+        ns = norm_sku(sku)
+        if ns:
+            self.by_sku.setdefault(ns, []).append(rec)
+        tokens = _name_tokens(name)
+        if tokens:
+            self.by_token.setdefault(tokens[0], []).append(rec)
+        return rec
+
+    def add_xref(self, norm_pn, rec):
+        if norm_pn:
+            self.by_xref.setdefault(norm_pn, []).append(rec)
+
+    def match_sku(self, norm_pn):
+        return self.by_sku.get(norm_pn)
+
+    def match_xref(self, norm_pn):
+        return self.by_xref.get(norm_pn)
+
+    def match_name(self, name, threshold=0.82):
+        """Best fuzzy name match (blocked by first token). Returns (rec, score)."""
+        nt = _name_norm(name)
+        tokens = _name_tokens(name)
+        if not tokens or len(nt) < 4:
+            return None, 0.0
+        candidates = self.by_token.get(tokens[0])
+        if not candidates:
+            return None, 0.0
+        best, best_score = None, 0.0
+        for rec in candidates:
+            if not rec["name_norm"]:
+                continue
+            score = SequenceMatcher(None, nt, rec["name_norm"]).ratio()
+            if score > best_score:
+                best, best_score = rec, score
+        if best and best_score >= threshold:
+            return best, best_score
+        return None, best_score
+
+    def _embed_names(self, names, batch=64, timeout=None):
+        """Return {name_norm: vector}, embedding only the uncached names.
+
+        Catalog-side cache: each distinct ``name_norm`` is embedded once per
+        index.  Returns ``None`` (degraded) when the provider is unavailable.
+        """
+        missing = [n for n in dict.fromkeys(names) if n and n not in self._emb_cache]
+        if missing:
+            self.emb_requests += 1
+            vectors = _embed_texts(missing, batch=batch, timeout=timeout)
+            if vectors is None:
+                return None
+            for n, v in zip(missing, vectors):
+                self._emb_cache[n] = v
+        return self._emb_cache
+
+    def match_name_semantic(self, name, threshold=0.86, top_k=200,
+                            batch=64, timeout=None):
+        """Best semantic name match (QWEN embeddings). Returns (rec, score).
+
+        Only the closest ``top_k`` candidates (blocked by first token, then
+        pre-ranked with difflib) are embedded, keeping cost bounded.  Degrades
+        to ``(None, 0.0)`` when embeddings are unavailable.
+        """
+        nt = _name_norm(name)
+        tokens = _name_tokens(name)
+        if not tokens or len(nt) < 4:
+            return None, 0.0
+        candidates = self.by_token.get(tokens[0]) or []
+        if not candidates:
+            return None, 0.0
+
+        ss = _load_semantic_search()
+        if ss is None:
+            return None, 0.0
+        try:
+            if hasattr(ss, 'is_configured') and not ss.is_configured():
+                return None, 0.0
+        except Exception:
+            pass
+
+        pool = [(SequenceMatcher(None, nt, r["name_norm"]).ratio(), r)
+                for r in candidates if r["name_norm"]]
+        pool.sort(key=lambda t: t[0], reverse=True)
+        pool = [r for _, r in pool[:max(int(top_k), 1)]]
+        if not pool:
+            return None, 0.0
+
+        vecs = self._embed_names([r["name_norm"] for r in pool],
+                                 batch=batch, timeout=timeout)
+        if not vecs:
+            return None, 0.0
+        query_vecs = _embed_texts([nt], batch=1, timeout=timeout)
+        if not query_vecs:
+            return None, 0.0
+        query_vec = query_vecs[0]
+
+        best, best_sim = None, 0.0
+        for rec in pool:
+            vec = vecs.get(rec["name_norm"])
+            if not vec:
+                continue
+            try:
+                sim = ss.cosine_similarity(query_vec, vec)
+            except Exception:
+                sim = None
+            if sim is not None and sim > best_sim:
+                best, best_sim = rec, sim
+        if best and best_sim >= threshold:
+            return best, best_sim
+        return None, best_sim
+
+
+def load_catalog_index(master_conn, supplier=None):
+    """Build a CatalogIndex from the master supplier_catalog tables."""
+    idx = CatalogIndex()
+    cur = master_conn.cursor()
+    try:
+        if supplier:
+            cur.execute(
+                "SELECT id, supplier_name, sku, name, category FROM supplier_catalog "
+                "WHERE is_active = true AND supplier_name = %s",
+                (supplier,),
+            )
+        else:
+            cur.execute(
+                "SELECT id, supplier_name, sku, name, category FROM supplier_catalog "
+                "WHERE is_active = true"
+            )
+        recs = {}
+        for cat_id, sup, sku, name, category in cur.fetchall():
+            recs[cat_id] = idx.add(cat_id, sup, sku, name, category)
+
+        # Interchange cross-refs, deduped (406k rows / ~18k distinct part numbers)
+        cur.execute(
+            "SELECT MIN(catalog_id), UPPER(part_number) FROM supplier_catalog_interchange "
+            "GROUP BY UPPER(part_number)"
+        )
+        for catalog_id, part_number in cur.fetchall():
+            rec = recs.get(catalog_id)
+            if rec is None:
+                continue
+            idx.add_xref(norm_sku(part_number), rec)
+    finally:
+        cur.close()
+    return idx
+
+
+def match_inventory(tenant_conn, master_conn, limit=None, offset=0,
+                    only_unmatched=True, create_aliases=True, use_names=True,
+                    name_threshold=0.82, apply=True, supplier=None,
+                    after_id=None, sample_limit=20, use_semantic=False,
+                    semantic_threshold=0.86, semantic_top_k=200,
+                    semantic_batch=64, semantic_timeout=20.0,
+                    semantic_prefer_below=None, collect=False, index=None,
+                    only_linked=False):
+    """Match tenant inventory items against the supplier catalog.
+
+    Args:
+        only_unmatched: only consider items whose catalog_part_id is NULL/0.
+        create_aliases: insert matched catalog SKUs into inventory_sku_aliases.
+        use_names: enable the fuzzy-name fallback.
+        apply: persist changes (False = dry run).
+        use_semantic: enable the embedding-based name fallback (opt-in; it
+            needs the QWEN provider and is slower, so pair it with ``limit``).
+        semantic_threshold: minimum cosine similarity (qwen3-embedding scores
+            unrelated names low and near-synonyms high; 0.86 is conservative).
+        semantic_prefer_below: when set, also run the semantic matcher for
+            items whose fuzzy score is below this value and keep whichever
+            scores higher (lets semantic *correct* weak difflib hits).
+
+    Returns a summary dict with counts by method and a sample of matches.
+    """
+    idx = index if index is not None else load_catalog_index(master_conn, supplier=supplier)
+
+    cur = tenant_conn.cursor()
+    where = ["is_active = true"]
+    params = []
+    if only_linked:
+        where.append("(catalog_part_id IS NOT NULL AND catalog_part_id <> 0)")
+    elif only_unmatched:
+        where.append("(catalog_part_id IS NULL OR catalog_part_id = 0)")
+    if after_id is not None:
+        where.append("id > %s")
+        params.append(after_id)
+    sql = (
+        "SELECT id, part_number, name, catalog_part_id FROM inventory "
+        "WHERE " + " AND ".join(where) + " ORDER BY id"
+    )
+    if limit is not None:
+        sql += " LIMIT %s OFFSET %s"
+        params.extend([int(limit), int(offset)])
+    cur.execute(sql, params)
+    rows = cur.fetchall()
+    cur.close()
+
+    by_method = {"sku": 0, "sku_prefix": 0, "interchange": 0,
+                 "interchange_prefix": 0, "name": 0, "name_semantic": 0}
+    updated = 0
+    aliases = 0
+    skipped_existing = 0
+    sample = []
+    all_results = []
+    last_id = after_id
+
+    def _lookup(norm_pn):
+        """(rec, method, score) for an exact/cross-ref key, else (None, None, 0).
+
+        Cross-refs on very short numeric keys are skipped: a bare "3341" can
+        collide with unrelated candidates in the 406k interchange table.
+        """
+        if not norm_pn:
+            return None, None, 0.0
+        hit = idx.match_sku(norm_pn)
+        if hit:
+            return hit[0], "sku", 1.0
+        if len(norm_pn) >= 5 or any(c.isalpha() for c in norm_pn):
+            hit = idx.match_xref(norm_pn)
+            if hit:
+                return hit[0], "interchange", 0.95
+        return None, None, 0.0
+
+    for inv_id, part_number, name, current_cpid in rows:
+        last_id = inv_id
+        norm_pn = norm_sku(part_number)
+
+        match, method, score = _lookup(norm_pn)
+
+        # Many tenant SKUs are "<vendor>-<manufacturer_code>"; retry stripped.
+        if match is None and part_number and "-" in str(part_number):
+            head, rest = str(part_number).split("-", 1)
+            if head.isalpha() and 2 <= len(head) <= 4 and rest.strip():
+                match, method, score = _lookup(norm_sku(rest))
+                if match:
+                    method = "sku_prefix" if method == "sku" else "interchange_prefix"
+                    score = 0.96 if method == "sku_prefix" else 0.9
+
+        if match is None and use_names and name:
+            match, score = idx.match_name(name, threshold=name_threshold)
+            if match:
+                method = "name"
+
+        needs_semantic = (
+            use_semantic and name and
+            (match is None or
+             (semantic_prefer_below is not None and score < semantic_prefer_below))
+        )
+        if needs_semantic:
+            s_rec, s_score = idx.match_name_semantic(
+                name, threshold=semantic_threshold, top_k=semantic_top_k,
+                batch=semantic_batch, timeout=semantic_timeout,
+            )
+            if s_rec and (match is None or s_score > score):
+                match, method, score = s_rec, "name_semantic", s_score
+
+        if match is None:
+            continue
+
+        by_method[method] += 1
+
+        if apply:
+            cur = tenant_conn.cursor()
+            try:
+                cur.execute(
+                    "UPDATE inventory SET catalog_part_id = %s "
+                    "WHERE id = %s AND (catalog_part_id IS NULL OR catalog_part_id = 0)",
+                    (match["catalog_id"], inv_id),
+                )
+                if cur.rowcount:
+                    updated += 1
+                else:
+                    skipped_existing += 1
+
+                if create_aliases and match["sku"]:
+                    cur.execute(
+                        "INSERT INTO inventory_sku_aliases (inventory_id, sku, label) "
+                        "VALUES (%s, %s, %s) ON CONFLICT (inventory_id, sku) DO NOTHING",
+                        (inv_id, match["sku"], f"Catálogo:{match['supplier'] or 'proveedor'}"),
+                    )
+                    aliases += cur.rowcount
+                tenant_conn.commit()
+            finally:
+                cur.close()
+
+        if collect:
+            all_results.append({
+                "inventory_id": inv_id, "part_number": part_number, "name": name,
+                "existing_catalog_id": current_cpid,
+                "matched_catalog_id": match["catalog_id"],
+                "matched_sku": match["sku"], "method": method,
+                "score": round(score, 3),
+            })
+
+        if len(sample) < sample_limit:
+            sample.append({
+                "inventory_id": inv_id, "part_number": part_number, "name": name,
+                "matched_catalog_id": match["catalog_id"],
+                "matched_sku": match["sku"], "matched_name": match["name"],
+                "supplier": match["supplier"], "method": method,
+                "score": round(score, 3),
+            })
+
+    return {
+        "scanned": len(rows),
+        "matched": sum(by_method.values()),
+        "by_method": by_method,
+        "updated": updated,
+        "aliases_created": aliases,
+        "skipped_existing": skipped_existing,
+        "catalog_size": idx.total,
+        "sample": sample,
+        "last_id": last_id,
+        "results": all_results,
+        "semantic": {
+            "enabled": bool(use_semantic),
+            "threshold": semantic_threshold,
+            "prefer_below": semantic_prefer_below,
+            "catalog_embeddings_cached": len(idx._emb_cache),
+            "embed_requests": idx.emb_requests,
+        },
+    }
+
+
+def count_links(tenant_conn):
+    """Return (total_items, linked_items) for progress reporting."""
+    cur = tenant_conn.cursor()
+    try:
+        cur.execute(
+            "SELECT count(*), count(*) FILTER "
+            "(WHERE catalog_part_id IS NOT NULL AND catalog_part_id <> 0) FROM inventory"
+        )
+        return cur.fetchone()
+    finally:
+        cur.close()
diff --git a/pos/services/supplier_engine.py b/pos/services/supplier_engine.py
index 7f90dee..578ae31 100644
--- a/pos/services/supplier_engine.py
+++ b/pos/services/supplier_engine.py
@@ -10,11 +10,14 @@ On receive, automatically:
 
 from decimal import Decimal, ROUND_HALF_UP
 from datetime import date
+import logging
 
 from services.inventory_engine import record_purchase
 from services.accounting_engine import record_purchase_entry
 from services.audit import log_action
 
+logger = logging.getLogger('pos')
+
 TWO = Decimal('0.01')
 
 
@@ -320,8 +323,9 @@ def receive_po(conn, po_id, received_items, supplier_invoice=None, notes=None):
                 'total': float(total_mxn),
                 'supplier_name': _get_supplier_name(conn, po_supplier_id),
             })
-        except Exception:
-            pass  # Accounting errors never block receiving
+        except Exception as acc_err:
+            # Accounting errors never block receiving, but must be logged
+            logger.error(f'Accounting entry for received PO #{po_id} failed: {acc_err}')
 
     log_action(conn, 'PO_RECEIVE', 'purchase_order', po_id,
                new_value={'received_qty': received_total, 'status': new_status})
diff --git a/pos/services/tenant_manager.py b/pos/services/tenant_manager.py
index cf458bd..0c02b25 100644
--- a/pos/services/tenant_manager.py
+++ b/pos/services/tenant_manager.py
@@ -200,9 +200,11 @@ def provision_tenant(name, rfc=None, owner_name="Admin", owner_email=None, owner
 
         # Apply pending migrations post-v1.0
         from migrations.runner import MIGRATIONS, apply_migration
-        sorted_versions = sorted(MIGRATIONS.keys())
+        def _version_key(v):
+            return tuple(int(x) for x in v.lstrip('v').split('.'))
+        sorted_versions = sorted(MIGRATIONS.keys(), key=_version_key)
         for version in sorted_versions:
-            if version <= 'v1.0':
+            if _version_key(version) <= _version_key('v1.0'):
                 continue
             success = apply_migration(db_name, version)
             if not success:
diff --git a/pos/services/wa_quotation.py b/pos/services/wa_quotation.py
index 72ea20e..92233ba 100644
--- a/pos/services/wa_quotation.py
+++ b/pos/services/wa_quotation.py
@@ -96,17 +96,106 @@ def detect_quote_intent(text, has_open_quote=False):
     return None, None
 
 
-def confirm_quotation(tenant_conn, phone):
-    """Mark the open quotation as confirmed/accepted."""
+def confirm_quotation(tenant_conn, phone, customer_id=None, tenant_id=None, branch_id=None):
+    """Confirm the open quotation and convert it into a pending-payment sale.
+
+    - Validates stock for every line before touching anything.
+    - Creates the sale via pos_engine.process_sale (status 'pending_payment',
+      stock reserved, no cash movement — payable later at the counter).
+    - Notifies owners via the notification engine (best effort).
+
+    Returns dict {'quotation_id', 'sale_id', 'total', 'items'} on success,
+    dict {'error': ..., ...} on failure, or None if there was no open quote.
+    """
     qid = get_open_quotation(tenant_conn, phone)
     if not qid:
         return None
+
+    detail = get_quotation_detail(tenant_conn, qid)
+    if not detail or not detail.get('items'):
+        return None
+
+    # Resolve target branch (first active)
+    if not branch_id:
+        cur = tenant_conn.cursor()
+        cur.execute("SELECT id FROM branches ORDER BY id LIMIT 1")
+        row = cur.fetchone()
+        cur.close()
+        if not row:
+            return {'error': 'no_branch', 'quotation_id': qid}
+        branch_id = row[0]
+
+    # Resolve inventory ids and validate stock
+    cur = tenant_conn.cursor()
+    resolved = []
+    for it in detail['items']:
+        cur.execute("""
+            SELECT i.id, COALESCE(s.stock, 0) FROM inventory i
+            LEFT JOIN (
+                SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+                GROUP BY inventory_id
+            ) s ON s.inventory_id = i.id
+            WHERE i.part_number = %s AND i.is_active LIMIT 1
+        """, (it['part_number'],))
+        row = cur.fetchone()
+        if not row:
+            cur.close()
+            return {'error': 'item_not_found', 'part_number': it['part_number'],
+                    'quotation_id': qid}
+        inv_id, stock = row
+        if (stock or 0) < it['quantity']:
+            cur.close()
+            return {'error': 'insufficient_stock', 'part_number': it['part_number'],
+                    'available': int(stock or 0), 'requested': it['quantity'],
+                    'quotation_id': qid}
+        resolved.append({
+            'inventory_id': inv_id,
+            'quantity': it['quantity'],
+            'unit_price': it['unit_price'],
+            'tax_rate': it['tax_rate'],
+            'discount_pct': 0,
+        })
+    cur.close()
+
+    from services.pos_engine import process_sale
+    sale_data = {
+        'items': resolved,
+        'customer_id': customer_id,
+        'payment_method': 'pendiente',
+        'sale_type': 'cash',
+        'branch_id': branch_id,
+        'amount_paid': 0,
+        'notes': f'Pedido por WhatsApp (cotizacion #{qid})',
+    }
+    try:
+        sale = process_sale(tenant_conn, sale_data)
+    except ValueError as e:
+        tenant_conn.rollback()
+        return {'error': 'sale_failed', 'message': str(e), 'quotation_id': qid}
+    except Exception:
+        tenant_conn.rollback()
+        raise
+
     cur = tenant_conn.cursor()
     cur.execute("UPDATE quotations SET status = 'converted' WHERE id = %s", (qid,))
-    tenant_conn.commit()
     cur.close()
+    tenant_conn.commit()
     clear_last_shown(tenant_conn, phone)
-    return qid
+
+    # Notify owners (best effort — never block the reply)
+    try:
+        if tenant_id:
+            from services.notification_engine import notify_new_sale
+            notify_new_sale(tenant_conn, tenant_id, sale['id'], sale['total'], 'whatsapp')
+    except Exception:
+        pass
+
+    return {
+        'quotation_id': qid,
+        'sale_id': sale['id'],
+        'total': sale['total'],
+        'items': detail['items'],
+    }
 
 
 # ─── Persistent last-shown-part per phone ────────────────────────────
diff --git a/pos/services/wa_state_machine.py b/pos/services/wa_state_machine.py
index 97076f6..64da837 100644
--- a/pos/services/wa_state_machine.py
+++ b/pos/services/wa_state_machine.py
@@ -378,17 +378,32 @@ def handle_quote_search(text, state_data, ctx):
     search_text = search_text.strip()
     state_data['search_description'] = search_text
 
+    # Memoria conversacional + historial de compras + persona por tenant
+    conv_history = []
+    try:
+        from blueprints.whatsapp_bp import _get_conversation_history
+        conv_history = _get_conversation_history(ctx.phone, ctx.tenant_conn, limit=4)
+    except Exception:
+        conv_history = []
+    purchase_ctx = None
+    try:
+        from services.part_kits import get_purchase_history
+        purchase_ctx = get_purchase_history(ctx.phone, ctx.tenant_conn) or None
+    except Exception:
+        purchase_ctx = None
+    persona = (ctx.wa_config or {}).get('ai_persona') or None
+
     try:
         from services.ai_chat import chat, chat_with_image
         if ctx.media_kind == 'image' and ctx.media_base64:
             ai_resp = chat_with_image(
                 user_message=search_text if search_text != '(imagen)' else 'Identifica esta parte automotriz y sugiere terminos de busqueda.',
                 image_base64=ctx.media_base64,
-                conversation_history=[],
-                inventory_context=None,
+                conversation_history=conv_history,
+                inventory_context=purchase_ctx,
             )
         else:
-            ai_resp = chat(search_text, conversation_history=[], inventory_context=None)
+            ai_resp = chat(search_text, conversation_history=conv_history, inventory_context=purchase_ctx, persona=persona)
         search_query = ai_resp.get('search_query')
         vehicle = ai_resp.get('vehicle')
 
@@ -669,7 +684,7 @@ def handle_quote_command_created(text, state_data, ctx):
         try:
             from services.wa_quotation import get_open_quotation, get_quotation_detail
             from services.quote_image import generate_quote_image
-            from services.whatsapp_service import send_image
+            from services.whatsapp_service import wa_send_image
 
             qid = get_open_quotation(ctx.tenant_conn, ctx.phone)
             if qid:
@@ -688,11 +703,11 @@ def handle_quote_command_created(text, state_data, ctx):
                 }
                 tenant_name = _get_tenant_business_name(ctx.tenant_conn)
                 b64_img = generate_quote_image(quote_items, totals, tenant_name=tenant_name)
-                img_result = send_image(
+                img_result = wa_send_image(
+                    ctx.wa_config,
                     ctx.phone,
                     caption="Aquí está tu cotización 👇",
                     base64_image=b64_img,
-                    bridge_url=ctx.wa_config.get('bridge_url')
                 )
                 if img_result.get('success'):
                     return (
@@ -715,19 +730,45 @@ def handle_quote_command_created(text, state_data, ctx):
 
     if t in ('confirmar', 'confirmo', 'acepto', 'si', 'sí', 'va', 'ordenar', 'pedir'):
         from services.wa_quotation import confirm_quotation
-        qid = confirm_quotation(ctx.tenant_conn, ctx.phone)
-        if qid:
-            reply = (
-                "✅ *¡Pedido confirmado!*\n\n"
-                "Tu cotización fue registrada.\n"
-                "Nos pondremos en contacto contigo para coordinar la entrega.\n\n"
-                "¡Gracias por tu compra! 🙏"
-            )
-            clean_data = {
-                'customer_id': state_data.get('customer_id'),
-                'branch_name': state_data.get('branch_name'),
-            }
-            return reply, 'support_done', clean_data
+        result = confirm_quotation(ctx.tenant_conn, ctx.phone,
+                                   customer_id=ctx.customer_id,
+                                   tenant_id=ctx.tenant_id,
+                                   branch_id=ctx.branch_id)
+        clean_data = {
+            'customer_id': state_data.get('customer_id'),
+            'branch_name': state_data.get('branch_name'),
+        }
+        if result and result.get('sale_id'):
+            lines = []
+            lines.append("✅ *¡Pedido confirmado!*")
+            lines.append("")
+            lines.append(f"Tu pedido *#{result['sale_id']}* quedó registrado y separado.")
+            lines.append("Pasa por tu refaccionaria oco coordina la entrega al confirmar el pago.\n")
+            lines.append("*Detalle:*")
+            for it in result.get('items', []):
+                lines.append(f"• {it['quantity']} x {it['part_number']}")
+            lines.append("")
+            lines.append(f"*Total:* ${result['total']:,.2f}")
+            lines.append("")
+            lines.append("¡Gracias por tu compra! 🙏")
+            return "\n".join(lines), 'support_done', clean_data
+        if result and result.get('error') == 'insufficient_stock':
+            return (
+                f"⚠️ No hay stock suficiente de *{result['part_number']}*\n"
+                f"Disponible: {result['available']} — Solicitado: {result['requested']}\n\n"
+                "Tu cotización sigue activa. ¿Quieres *confirmar* el resto, "
+                "*agregar* otra pieza o *limpiar* el pedido?",
+                'quote_command_created', state_data)
+        if result and result.get('error') == 'item_not_found':
+            return (
+                f"⚠️ La pieza *{result['part_number']}* ya no está disponible.\n\n"
+                "¿Quieres *agregar* otra pieza o *limpiar* el pedido?",
+                'quote_command_created', state_data)
+        if result:
+            return (
+                "⚠️ No pude registrar tu pedido en este momento. "
+                "Intenta de nuevo en unos minutos o contáctanos directamente.",
+                'quote_command_created', state_data)
 
     if t in ('limpiar', 'borrar', 'nueva', 'cancelar', 'reset'):
         from services.wa_quotation import clear_quotation
diff --git a/pos/services/warranty_engine.py b/pos/services/warranty_engine.py
index 4739bae..bb780c3 100644
--- a/pos/services/warranty_engine.py
+++ b/pos/services/warranty_engine.py
@@ -13,36 +13,46 @@ from services.audit import log_action
 
 def register_warranty(conn, sale_id, sale_item_id, inventory_id,
                       customer_id, warranty_months, supplier_id=None,
-                      part_number=None, name=None, notes=None):
+                      part_number=None, name=None, notes=None,
+                      warranty_days=None):
     """Register a warranty for a sold item.
 
     Args:
         warranty_months: int (e.g., 12, 24, 36)
+        warranty_days: optional int. When given, end_date = today + warranty_days
+            (instead of 30 * warranty_months) and it is stored in the
+            warranty_days column. Used by the Yonke (used parts) module.
     Returns:
         int: warranty_id
     """
-    if not warranty_months or warranty_months <= 0:
+    if (not warranty_months or warranty_months <= 0) and not warranty_days:
         raise ValueError("warranty_months must be a positive integer")
 
     start = date.today()
-    end = start + timedelta(days=30 * warranty_months)
+    if warranty_days:
+        end = start + timedelta(days=int(warranty_days))
+    else:
+        end = start + timedelta(days=30 * warranty_months)
 
     cur = conn.cursor()
     cur.execute("""
         INSERT INTO warranties
             (sale_id, sale_item_id, inventory_id, customer_id, supplier_id,
-             part_number, name, warranty_months, start_date, end_date, notes)
-        VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
+             part_number, name, warranty_months, start_date, end_date, notes,
+             warranty_days)
+        VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
         RETURNING id
     """, (
         sale_id, sale_item_id, inventory_id, customer_id, supplier_id,
-        part_number, name, warranty_months, start, end, notes
+        part_number, name, warranty_months, start, end, notes,
+        int(warranty_days) if warranty_days else None
     ))
     w_id = cur.fetchone()[0]
     cur.close()
 
     log_action(conn, 'WARRANTY_REGISTER', 'warranty', w_id,
-               new_value={'months': warranty_months, 'end_date': str(end)})
+               new_value={'months': warranty_months, 'days': warranty_days,
+                          'end_date': str(end)})
     return w_id
 
 
@@ -141,7 +151,8 @@ def get_warranty(conn, warranty_id):
         SELECT w.id, w.sale_id, w.sale_item_id, w.inventory_id, w.customer_id,
                w.supplier_id, w.part_number, w.name, w.warranty_months,
                w.start_date, w.end_date, w.status, w.notes, w.created_at,
-               c.name as customer_name, s.name as supplier_name
+               c.name as customer_name, s.name as supplier_name,
+               w.warranty_days
         FROM warranties w
         LEFT JOIN customers c ON w.customer_id = c.id
         LEFT JOIN suppliers s ON w.supplier_id = s.id
@@ -158,6 +169,7 @@ def get_warranty(conn, warranty_id):
         'start_date': str(row[9]), 'end_date': str(row[10]),
         'status': row[11], 'notes': row[12], 'created_at': str(row[13]),
         'customer_name': row[14], 'supplier_name': row[15],
+        'warranty_days': row[16],
     }
 
 
diff --git a/pos/services/whatsapp_service.py b/pos/services/whatsapp_service.py
index 067b71e..ae74419 100644
--- a/pos/services/whatsapp_service.py
+++ b/pos/services/whatsapp_service.py
@@ -158,3 +158,302 @@ def send_image(phone, caption, base64_image, bridge_url=None):
         ).json()
     except Exception as e:
         return {'error': str(e)}
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# Meta Cloud API provider (WA CRM / self-hosted, 1 número por tenant)
+#
+# cfg keys (tenant_config):
+#   whatsapp_provider      = 'meta' | 'baileys'  (default: baileys)
+#   wa_phone_number_id     — Meta phone number ID
+#   wa_access_token        — permanent/long-lived access token
+#   wa_app_secret          — App secret (valida X-Hub-Signature-256 en webhooks)
+#   wa_verify_token        — token del GET verify del webhook
+#   wa_graph_url           — (opcional) override de graph.facebook.com/v21.0
+# ═══════════════════════════════════════════════════════════════════════════
+
+import base64 as _b64
+import secrets as _secrets
+
+
+def _meta_is_meta(cfg):
+    return str(cfg.get('provider') or '').lower() == 'meta' and cfg.get('phone_number_id')
+
+
+def _meta_digits(phone):
+    return ''.join(ch for ch in str(phone or '') if ch.isdigit())
+
+
+def _meta_graph(cfg, method, path, json_payload=None, files=None, data=None, params=None):
+    base = (cfg.get('graph_url') or 'https://graph.facebook.com/v21.0').rstrip('/')
+    url = f"{base}/{path}"
+    headers = {'Authorization': f"Bearer {cfg.get('access_token')}"}
+    if method == 'GET':
+        return requests.get(url, headers=headers, params=params or {}, timeout=20).json()
+    if files:
+        return requests.post(url, headers={'Authorization': headers['Authorization']},
+                             files=files, data=data or {}, timeout=60).json()
+    return requests.post(url, headers=headers, json=json_payload, timeout=30).json()
+
+
+def meta_send_text(cfg, phone, text):
+    try:
+        r = _meta_graph(cfg, 'POST', f"{cfg['phone_number_id']}/messages", json_payload={
+            'messaging_product': 'whatsapp',
+            'recipient_type': 'individual',
+            'to': _meta_digits(phone),
+            'type': 'text',
+            'text': {'preview_url': True, 'body': text},
+        })
+        if r.get('error'):
+            return {'error': r['error'].get('message', 'Meta error')}
+        return {'ok': True, 'id': (r.get('messages') or [{}])[0].get('id')}
+    except Exception as e:
+        return {'error': str(e)}
+
+
+def meta_send_image(cfg, phone, caption, base64_image):
+    """Upload media then send image message."""
+    try:
+        raw = base64_image
+        if ',' in raw and raw.strip().startswith('data:'):
+            raw = raw.split(',', 1)[1]
+        img_bytes = _b64.b64decode(raw)
+        up = _meta_graph(cfg, 'POST', f"{cfg['phone_number_id']}/media",
+                         files={'file': ('image.jpg', img_bytes, 'image/jpeg')},
+                         data={'messaging_product': 'whatsapp'})
+        media_id = up.get('id')
+        if not media_id:
+            return {'error': up.get('error', {}).get('message', 'media upload failed')}
+        r = _meta_graph(cfg, 'POST', f"{cfg['phone_number_id']}/messages", json_payload={
+            'messaging_product': 'whatsapp',
+            'recipient_type': 'individual',
+            'to': _meta_digits(phone),
+            'type': 'image',
+            'image': {'id': media_id, 'caption': caption or ''},
+        })
+        if r.get('error'):
+            return {'error': r['error'].get('message', 'Meta error')}
+        return {'ok': True, 'id': (r.get('messages') or [{}])[0].get('id')}
+    except Exception as e:
+        return {'error': str(e)}
+
+
+def meta_get_status(cfg):
+    try:
+        r = _meta_graph(cfg, 'GET', f"{cfg['phone_number_id']}",
+                        params={'fields': 'display_phone_number,verified_name,quality_rating'})
+        if r.get('error'):
+            return {'state': 'error', 'error': r['error'].get('message')}
+        return {'state': 'connected', 'phone': r.get('display_phone_number'),
+                'name': r.get('verified_name'), 'quality': r.get('quality_rating')}
+    except Exception as e:
+        return {'state': 'error', 'error': str(e)}
+
+
+def meta_verify_signature(app_secret, payload_bytes, signature_header):
+    """Validate X-Hub-Signature-256: 'sha256=<hex>'."""
+    if not app_secret or not signature_header:
+        return True  # not configured -> do not enforce
+    import hmac as _hmac
+    import hashlib as _hashlib
+    expected = 'sha256=' + _hmac.new(
+        app_secret.encode(), payload_bytes, _hashlib.sha256).hexdigest()
+    try:
+        return _hmac.compare_digest(expected, signature_header)
+    except Exception:
+        return False
+
+
+def _provider_cfg_error(cfg, provider):
+    """Error claro cuando el proveedor elegido está incompleto (sin fallback silencioso)."""
+    if provider == 'wacrm':
+        return {'error': 'WA CRM no configurado: faltan api_base y/o api_key (Configuración → WhatsApp)'}
+    if provider == 'meta':
+        return {'error': 'Meta Cloud API no configurada: faltan phone_number_id y/o access_token'}
+    if provider == 'baileys':
+        return {'error': 'Bridge de WhatsApp no configurado o retirado (WhatsApp pasa por WA CRM)'}
+    return {'error': f'Proveedor de WhatsApp desconocido: {provider}'}
+
+
+def wa_send_text(cfg, phone, text):
+    """Router: WA CRM, Meta directo o Baileys según config del tenant.
+
+    Si el proveedor elegido está incompleto, devuelve un error explícito en
+    lugar de degradar silenciosamente a otro proveedor.
+    """
+    cfg = cfg or {}
+    provider = str(cfg.get('provider') or 'baileys').lower()
+    if provider == 'wacrm':
+        if not _wacrm_is_wacrm(cfg):
+            return _provider_cfg_error(cfg, 'wacrm')
+        return wacrm_send_text(cfg, phone, text)
+    if provider == 'meta':
+        if not _meta_is_meta(cfg):
+            return _provider_cfg_error(cfg, 'meta')
+        return meta_send_text(cfg, phone, text)
+    if not cfg.get('bridge_url'):
+        return _provider_cfg_error(cfg, 'baileys')
+    return send_message(phone, text, bridge_url=cfg.get('bridge_url'))
+
+
+def wa_send_image(cfg, phone, caption, base64_image):
+    cfg = cfg or {}
+    provider = str(cfg.get('provider') or 'baileys').lower()
+    if provider == 'wacrm' and not _wacrm_is_wacrm(cfg):
+        return _provider_cfg_error(cfg, 'wacrm')
+    if provider == 'meta' and not _meta_is_meta(cfg):
+        return _provider_cfg_error(cfg, 'meta')
+    if provider == 'baileys' and not cfg.get('bridge_url'):
+        return _provider_cfg_error(cfg, 'baileys')
+    if _wacrm_is_wacrm(cfg):
+        # WA CRM exige URL pública para media; sin ella degradamos a texto.
+        public_base = (cfg.get('public_base') or '').rstrip('/')
+        if public_base:
+            import uuid as _uuid
+            import os as _os
+            token = _uuid.uuid4().hex
+            media_dir = '/tmp/wa_media'
+            _os.makedirs(media_dir, exist_ok=True)
+            raw = base64_image.split(',', 1)[1] if base64_image.strip().startswith('data:') else base64_image
+            path = _os.path.join(media_dir, token + '.png')
+            try:
+                with open(path, 'wb') as fh:
+                    fh.write(_b64.b64decode(raw))
+            except Exception:
+                return {'error': 'no se pudo preparar la imagen'}
+            return wacrm_send_media(cfg, phone, 'image',
+                                    f'{public_base}/pos/api/public/media/{token}.png', caption)
+        return wa_send_text(cfg, phone, (caption or '') + '\n(imagen no disponible: configura wa_public_base)')
+    if _meta_is_meta(cfg or {}):
+        return meta_send_image(cfg, phone, caption, base64_image)
+    return send_image(phone, caption, base64_image, bridge_url=(cfg or {}).get('bridge_url'))
+
+
+def wa_send_document(cfg, phone, base64_data, filename, caption=''):
+    """Envía PDF/documento por el proveedor configurado (WA CRM, Meta o Baileys)."""
+    cfg = cfg or {}
+    provider = str(cfg.get('provider') or 'baileys').lower()
+    if provider == 'wacrm':
+        if not _wacrm_is_wacrm(cfg):
+            return _provider_cfg_error(cfg, 'wacrm')
+        if not (cfg.get('public_base') or '').strip():
+            return {'error': 'wa_public_base requerido para enviar documentos vía WA CRM'}
+    if _wacrm_is_wacrm(cfg):
+        public_base = (cfg.get('public_base') or '').rstrip('/')
+        if not public_base:
+            return {'error': 'wa_public_base requerido para enviar documentos vía WA CRM'}
+        import uuid as _uuid
+        import os as _os
+        token = _uuid.uuid4().hex
+        media_dir = '/tmp/wa_media'
+        _os.makedirs(media_dir, exist_ok=True)
+        raw = base64_data.split(',', 1)[1] if base64_data.strip().startswith('data:') else base64_data
+        path = _os.path.join(media_dir, token + '_' + filename)
+        with open(path, 'wb') as fh:
+            fh.write(_b64.b64decode(raw))
+        return wacrm_send_media(cfg, phone, 'document',
+                                f'{public_base}/pos/api/public/media/{token}_{filename}',
+                                caption, filename)
+    try:
+        raw = base64_data
+        if ',' in raw and raw.strip().startswith('data:'):
+            raw = raw.split(',', 1)[1]
+        if _meta_is_meta(cfg):
+            img_bytes = _b64.b64decode(raw)
+            up = _meta_graph(cfg, 'POST', f"{cfg['phone_number_id']}/media",
+                             files={'file': (filename, img_bytes, 'application/pdf')},
+                             data={'messaging_product': 'whatsapp'})
+            media_id = up.get('id')
+            if not media_id:
+                return {'error': up.get('error', {}).get('message', 'media upload failed')}
+            r = _meta_graph(cfg, 'POST', f"{cfg['phone_number_id']}/messages", json_payload={
+                'messaging_product': 'whatsapp',
+                'recipient_type': 'individual',
+                'to': _meta_digits(phone),
+                'type': 'document',
+                'document': {'id': media_id, 'filename': filename, 'caption': caption or ''},
+            })
+            if r.get('error'):
+                return {'error': r['error'].get('message', 'Meta error')}
+            return {'ok': True}
+        # Baileys bridge: endpoint genérico send-file (best effort)
+        url = _get_url(cfg.get('bridge_url'))
+        r = requests.post(
+            f'{url}/send-file',
+            headers=HEADERS,
+            json={'phone': phone, 'base64': raw, 'filename': filename, 'caption': caption or ''},
+            timeout=30,
+        ).json()
+        return r if isinstance(r, dict) else {'ok': True}
+    except Exception as e:
+        return {'error': str(e)}
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# Proveedor WA CRM (self-hosted) — API pública /api/v1
+#   cfg: provider='wacrm', api_base, api_key  (+ public_base opcional)
+# ═══════════════════════════════════════════════════════════════════════════
+
+def _wacrm_is_wacrm(cfg):
+    return str((cfg or {}).get('provider') or '').lower() == 'wacrm' and (cfg or {}).get('api_base') and (cfg or {}).get('api_key')
+
+
+def _wacrm_e164(phone):
+    digits = ''.join(ch for ch in str(phone or '') if ch.isdigit())
+    if not digits:
+        return ''
+    if digits.startswith('52'):
+        return '+' + digits
+    if len(digits) == 10:
+        return '+52' + digits
+    return '+' + digits
+
+
+def wacrm_send_text(cfg, phone, text):
+    base = (cfg.get('api_base') or '').rstrip('/')
+    try:
+        r = requests.post(
+            f'{base}/api/v1/messages',
+            headers={'Authorization': f"Bearer {cfg.get('api_key')}", 'Content-Type': 'application/json'},
+            json={'to': _wacrm_e164(phone), 'type': 'text', 'text': text},
+            timeout=30,
+        )
+        data = r.json() if r.content else {}
+        if r.status_code >= 400 or data.get('error'):
+            return {'error': (data.get('error') or {}).get('message') or f'wacrm HTTP {r.status_code}'}
+        return {'ok': True, 'id': (data.get('data') or {}).get('message_id')}
+    except Exception as e:
+        return {'error': str(e)}
+
+
+def wacrm_send_media(cfg, phone, kind, media_url, caption='', filename=None):
+    base = (cfg.get('api_base') or '').rstrip('/')
+    payload = {'to': _wacrm_e164(phone), 'type': kind, 'media_url': media_url, 'text': caption or ''}
+    if filename:
+        payload['filename'] = filename
+    try:
+        r = requests.post(
+            f'{base}/api/v1/messages',
+            headers={'Authorization': f"Bearer {cfg.get('api_key')}", 'Content-Type': 'application/json'},
+            json=payload,
+            timeout=45,
+        )
+        data = r.json() if r.content else {}
+        if r.status_code >= 400 or data.get('error'):
+            return {'error': (data.get('error') or {}).get('message') or f'wacrm HTTP {r.status_code}'}
+        return {'ok': True, 'id': (data.get('data') or {}).get('message_id')}
+    except Exception as e:
+        return {'error': str(e)}
+
+
+def wacrm_get_status(cfg):
+    base = (cfg.get('api_base') or '').rstrip('/')
+    try:
+        r = requests.get(f'{base}/api/v1/me',
+                         headers={'Authorization': f"Bearer {cfg.get('api_key')}"}, timeout=15)
+        if r.status_code != 200:
+            return {'state': 'error', 'error': f'HTTP {r.status_code}'}
+        return {'state': 'connected', 'data': r.json().get('data', {})}
+    except Exception as e:
+        return {'state': 'error', 'error': str(e)}
diff --git a/pos/services/yonke_ai.py b/pos/services/yonke_ai.py
new file mode 100644
index 0000000..1ea2af3
--- /dev/null
+++ b/pos/services/yonke_ai.py
@@ -0,0 +1,336 @@
+# /home/Autopartes/pos/services/yonke_ai.py
+"""Non-conversational AI helpers for the Nexus Yonke module.
+
+Four capabilities, each one isolated and best-effort:
+
+  * ``identify_piece``   — vision: name + category of a photo
+  * ``suggest_price``    — rule engine over cost/grade/category + local comparables
+  * ``find_duplicate_groups`` — semantic grouping of used-piece names
+  * ``validate_photo``   — vision: is it an auto part? is the photo usable?
+
+Golden rule (same as ``semantic_search``): **no function raises**. When the AI
+provider is not configured or does not answer, each function returns a
+well-formed dict with ``available=False`` so the caller can keep going.
+"""
+
+import base64
+import json
+import re
+import statistics
+
+# Multipliers applied to a reference price depending on the piece grade.
+GRADE_FACTOR = {'A': 1.15, 'B': 1.0, 'C': 0.8, 'D': 0.6}
+# Target markup over acquisition cost for a grade-B used piece.
+TARGET_MARKUP = 1.6
+# Weight of the local market reference vs. the cost-based reference.
+MARKET_WEIGHT = 0.6
+
+
+def _coerce_float(val, default=0.0):
+    try:
+        return float(val)
+    except (TypeError, ValueError):
+        return default
+
+
+def _b64(image_bytes):
+    return base64.b64encode(image_bytes).decode('ascii')
+
+
+def _extract_json(text):
+    """Return the first JSON object found in ``text``, or None."""
+    if not text:
+        return None
+    stripped = str(text).strip()
+    if stripped.startswith('```'):
+        lines = stripped.split('\n')
+        stripped = '\n'.join(lines[1:-1] if len(lines) > 2 else lines)
+    try:
+        parsed = json.loads(stripped)
+        return parsed if isinstance(parsed, dict) else None
+    except Exception:
+        pass
+    match = re.search(r'\{.*\}', stripped, re.DOTALL)
+    if match:
+        try:
+            parsed = json.loads(match.group(0))
+            return parsed if isinstance(parsed, dict) else None
+        except Exception:
+            return None
+    return None
+
+
+def _normalize_confidence(value):
+    conf = _coerce_float(value, 0.0)
+    if conf > 1:
+        conf = conf / 100.0
+    return round(max(0.0, min(1.0, conf)), 2)
+
+
+def _vision_json(user_message, image_bytes=None, image_base64=None):
+    """Ask the vision model for a JSON object. Returns (dict|None, error|None)."""
+    image = image_base64 or (_b64(image_bytes) if image_bytes else None)
+    if not image:
+        return None, 'no image'
+    try:
+        from services import ai_chat
+    except Exception as e:  # pragma: no cover
+        return None, f'ai_chat unavailable: {e}'
+    try:
+        result = ai_chat.chat_with_image(user_message, image)
+    except Exception as e:
+        return None, str(e)
+    if not isinstance(result, dict):
+        return None, 'unexpected AI response'
+    if 'name' in result or 'category' in result or 'is_part' in result:
+        return result, None
+    if result.get('message'):
+        parsed = _extract_json(result['message'])
+        if parsed:
+            return parsed, None
+    return None, result.get('message') or 'AI did not return JSON'
+
+
+def identify_piece(image_bytes=None, image_base64=None, hint_name=None):
+    """Identify an auto part from a photo.
+
+    Returns ``{name, category, confidence, available, source}``; ``available``
+    is False when the provider is unreachable (the endpoint then answers 503).
+    """
+    empty = {'name': None, 'category': None, 'confidence': 0.0,
+             'available': False, 'source': 'vision'}
+    if not image_bytes and not image_base64:
+        return dict(empty, error='no image')
+
+    prompt = (
+        'Eres un experto en autopartes (partes usadas de deshuesadero). '
+        'Identifica la pieza de la imagen. Responde SOLO con JSON válido, sin texto extra: '
+        '{"name": "nombre en español", "category": "categoría (Frenos, Motor, Eléctrico, '
+        'Suspensión, Carrocería, Enfriamiento, Luces, Transmisión, etc.)", '
+        '"confidence": 0.0}'
+    )
+    if hint_name:
+        prompt += f' Pista del usuario: "{hint_name}".'
+
+    parsed, error = _vision_json(prompt, image_bytes, image_base64)
+    if not parsed:
+        return dict(empty, error=error or 'AI unavailable')
+
+    name = (parsed.get('name') or '').strip() or None
+    category = (parsed.get('category') or '').strip() or None
+    if isinstance(name, str) and name.lower() in ('null', 'none', 'desconocido'):
+        name = None
+    return {
+        'name': name,
+        'category': category,
+        'confidence': _normalize_confidence(parsed.get('confidence')),
+        'available': bool(name or category),
+        'source': 'vision',
+    }
+
+
+def validate_photo(image_bytes=None, image_base64=None):
+    """Validate that a photo shows an auto part with usable quality.
+
+    Returns ``{ok, issues, quality, available}``. When the provider is down the
+    photo is NOT validated: ``available=False`` and ``ok=True`` (do not block).
+    """
+    if not image_bytes and not image_base64:
+        return {'ok': False, 'issues': ['No se recibió imagen'], 'available': False}
+
+    prompt = (
+        'Evalúa esta foto destinada a un catálogo de autopartes usadas. Responde SOLO '
+        'con JSON válido: {"is_part": true, "quality": "good", '
+        '"issues": [], "confidence": 0.0}. '
+        '"quality" debe ser "good", "fair" o "poor". En "issues" enumera problemas '
+        '(borrosa, oscura, no se ve la pieza, fondo con ruido, etc.).'
+    )
+    parsed, error = _vision_json(prompt, image_bytes, image_base64)
+    if not parsed:
+        return {'ok': True, 'issues': [], 'available': False,
+                'error': error or 'AI unavailable'}
+
+    is_part = parsed.get('is_part')
+    if isinstance(is_part, str):
+        is_part = is_part.strip().lower() in ('true', '1', 'yes', 'sí', 'si')
+    quality = (parsed.get('quality') or '').strip().lower() or None
+    issues = parsed.get('issues') or []
+    if isinstance(issues, str):
+        issues = [issues]
+    issues = [str(i).strip() for i in issues if str(i).strip()]
+
+    if is_part is False:
+        issues.append('No parece una autoparte')
+    if quality == 'poor':
+        issues.append('Calidad de imagen deficiente')
+
+    return {
+        'ok': bool(is_part) and quality != 'poor',
+        'issues': issues,
+        'quality': quality,
+        'confidence': _normalize_confidence(parsed.get('confidence')),
+        'available': True,
+    }
+
+
+def _local_comparables(conn, piece, limit=100):
+    """Median price_1 of active local items sharing category or name tokens."""
+    name = (piece.get('name') or '').strip()
+    tokens = [t for t in re.split(r'\W+', name.lower()) if len(t) >= 4][:3]
+    patterns = [f'%{t}%' for t in tokens]
+    category_id = piece.get('category_id')
+    piece_id = piece.get('id') or 0
+
+    cur = conn.cursor()
+    try:
+        if category_id is None:
+            cur.execute("SELECT category_id FROM inventory WHERE id = %s", (piece_id,))
+            row = cur.fetchone()
+            category_id = row[0] if row else None
+        cur.execute("""
+            SELECT i.price_1
+            FROM inventory i
+            WHERE i.is_active = true AND i.price_1 > 0
+              AND i.id <> %s
+              AND (i.category_id = %s OR i.name ILIKE ANY(%s))
+            LIMIT %s
+        """, (piece_id, category_id, patterns, limit))
+        prices = [float(r[0]) for r in cur.fetchall() if r[0] is not None]
+    except Exception:
+        try:
+            conn.rollback()
+        except Exception:
+            pass
+        prices = []
+    finally:
+        cur.close()
+    return prices
+
+
+def suggest_price(conn, piece):
+    """Suggest a sale price for a used piece.
+
+    Rule engine: local comparables (median price of active items in the same
+    category / with a shared name token) scaled by grade, blended with a
+    cost-based reference (acquisition cost × grade factor × target markup).
+
+    Returns ``{suggested_price, low, high, basis, available}``.
+    """
+    piece = piece or {}
+    grade = (piece.get('condition_grade') or 'B').upper()
+    grade = grade if grade in GRADE_FACTOR else 'B'
+    factor = GRADE_FACTOR[grade]
+
+    cost = _coerce_float(piece.get('acquisition_cost') or piece.get('cost') or 0)
+    current_price = _coerce_float(piece.get('price_1') or 0)
+
+    comparables = _local_comparables(conn, piece)
+    market_ref = statistics.median(comparables) if comparables else None
+    market_price = market_ref * factor if market_ref else None
+    cost_price = cost * factor * TARGET_MARKUP if cost > 0 else None
+
+    parts = []
+    if market_price is not None:
+        parts.append((MARKET_WEIGHT, market_price))
+        parts.append((1 - MARKET_WEIGHT, cost_price if cost_price else market_price))
+    elif cost_price is not None:
+        parts = [(1.0, cost_price)]
+
+    if parts:
+        total_w = sum(w for w, _ in parts)
+        suggested = sum(w * v for w, v in parts) / total_w
+        available = True
+    else:
+        suggested = current_price
+        available = bool(current_price)
+
+    suggested = round(suggested, 2)
+    low = round(suggested * 0.85, 2)
+    high = round(suggested * 1.2, 2)
+
+    basis_bits = [f'grado {grade}', f'costo {cost:.2f}']
+    if comparables:
+        basis_bits.append(
+            f'{len(comparables)} comparables locales (mediana {market_ref:.2f})'
+        )
+    else:
+        basis_bits.append('sin comparables locales')
+    if not available:
+        basis_bits.append('sin costo ni comparables: se usó el precio actual')
+
+    return {
+        'suggested_price': suggested,
+        'low': low,
+        'high': high,
+        'basis': ', '.join(basis_bits),
+        'available': available,
+        'grade': grade,
+        'comparables': len(comparables),
+    }
+
+
+def find_duplicate_groups(conn, threshold=0.85, limit=300):
+    """Group used pieces whose names are semantically almost identical.
+
+    Uses ``semantic_search.embed`` (one call for every name) and cosine
+    similarity, then union-find. Returns ``{'groups': [[{id,part_number,name,
+    donor_vin}]]}``. Degrades to ``groups=[]`` + ``available=False`` when
+    embeddings are not available.
+    """
+    try:
+        threshold = float(threshold)
+    except (TypeError, ValueError):
+        threshold = 0.85
+    threshold = max(0.0, min(1.0, threshold))
+
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT id, part_number, name, donor_vin
+        FROM inventory
+        WHERE is_active = true AND condition IN ('usado', 'reconstruido')
+          AND name IS NOT NULL AND name <> ''
+        ORDER BY id
+        LIMIT %s
+    """, (limit,))
+    rows = cur.fetchall()
+    cur.close()
+
+    items = [{'id': r[0], 'part_number': r[1], 'name': r[2], 'donor_vin': r[3]}
+             for r in rows]
+    if len(items) < 2:
+        return {'groups': [], 'available': True, 'threshold': threshold}
+
+    try:
+        from services import semantic_search
+        vectors = semantic_search.embed([it['name'] for it in items])
+    except Exception:
+        vectors = None
+    if not vectors or len(vectors) != len(items):
+        return {'groups': [], 'available': False, 'threshold': threshold,
+                'error': 'embeddings no disponibles'}
+
+    parent = list(range(len(items)))
+
+    def find(x):
+        while parent[x] != x:
+            parent[x] = parent[parent[x]]
+            x = parent[x]
+        return x
+
+    def union(a, b):
+        ra, rb = find(a), find(b)
+        if ra != rb:
+            parent[rb] = ra
+
+    for i in range(len(items)):
+        for j in range(i + 1, len(items)):
+            sim = semantic_search.cosine_similarity(vectors[i], vectors[j])
+            if sim is not None and sim >= threshold:
+                union(i, j)
+
+    grouped = {}
+    for idx in range(len(items)):
+        grouped.setdefault(find(idx), []).append(items[idx])
+    groups = [g for g in grouped.values() if len(g) >= 2]
+    groups.sort(key=len, reverse=True)
+    return {'groups': groups, 'available': True, 'threshold': threshold}
diff --git a/pos/services/yonke_service.py b/pos/services/yonke_service.py
new file mode 100644
index 0000000..c28c182
--- /dev/null
+++ b/pos/services/yonke_service.py
@@ -0,0 +1,1698 @@
+# /home/Autopartes/pos/services/yonke_service.py
+"""Nexus Yonke service: used / rebuilt parts, donor vehicles and consignments.
+
+Every function receives an open tenant connection (psycopg2) and does NOT
+commit: the calling blueprint owns the transaction. Stock is never stored as a
+column — it is read from inventory_stock / inventory_stock_summary via
+services.inventory_engine.
+
+Schema (M1 migration, applied to all tenants):
+  inventory.condition / condition_grade / is_unique_piece / serial_number /
+  donor_* / ownership / acquisition_cost
+  inventory_images, consignments, consignment_items
+"""
+
+import os
+import re
+import uuid
+
+from psycopg2 import errors as pg_errors
+
+from services.audit import log_action
+from services.inventory_engine import record_initial
+from services.image_service import save_image, DATA_DIR, STATIC_DIR
+
+# Allowed values (mirror the CHECK constraints from the M1 migration).
+CONDITIONS = ('nuevo', 'usado', 'reconstruido')
+USED_CONDITIONS = ('usado', 'reconstruido')
+GRADES = ('A', 'B', 'C', 'D')
+OWNERSHIPS = ('propio', 'consigna')
+
+# Columns returned for a piece, in strict order (see _row_to_item). The stock
+# column is always appended LAST by every SELECT built in this module.
+_PIECE_FIELDS = [
+    'id', 'part_number', 'name', 'brand', 'condition', 'condition_grade',
+    'is_unique_piece', 'donor_vin', 'donor_make', 'donor_model', 'donor_year',
+    'donor_mileage_km', 'ownership', 'price_1', 'cost', 'location', 'image_url',
+    'serial_number',
+]
+_SELECT_PIECE = ", ".join("i." + f for f in _PIECE_FIELDS)
+
+_EDITABLE_FIELDS = {
+    'name': 'name',
+    'condition': 'condition',
+    'condition_grade': 'condition_grade',
+    'grade': 'condition_grade',
+    'is_unique_piece': 'is_unique_piece',
+    'serial_number': 'serial_number',
+    'donor_vin': 'donor_vin',
+    'donor_make': 'donor_make',
+    'donor_model': 'donor_model',
+    'donor_year': 'donor_year',
+    'donor_mileage_km': 'donor_mileage_km',
+    'ownership': 'ownership',
+    'location': 'location',
+}
+
+_UPPER_TEXT_FIELDS = ('donor_vin', 'donor_make', 'donor_model', 'serial_number')
+
+
+class DuplicatePartNumber(Exception):
+    """Raised when a piece is created with a part_number that already exists."""
+
+
+# ─── small coercion helpers (same semantics as inventory_bp) ────────────────
+
+def _to_float(val, default=0):
+    if val is None or val == '':
+        return default
+    try:
+        return float(str(val).replace(',', ''))
+    except (TypeError, ValueError):
+        return default
+
+
+def _to_int(val, default=None):
+    if val is None or val == '':
+        return default
+    try:
+        return int(float(str(val).replace(',', '')))
+    except (TypeError, ValueError):
+        return default
+
+
+def _tier_prices(conn, price_1):
+    """Return (price_2, price_3) derived from the tenant's global tier discounts."""
+    p1 = _to_float(price_1, 0)
+    discounts = {}
+    try:
+        cur = conn.cursor()
+        cur.execute("SELECT tier_id, discount_pct FROM tier_discounts")
+        discounts = {r[0]: float(r[1] or 0) for r in cur.fetchall()}
+        cur.close()
+    except Exception:
+        try:
+            conn.rollback()
+        except Exception:
+            pass
+        discounts = {}
+    p2 = round(p1 * (1 - discounts.get(2, 0) / 100), 2)
+    p3 = round(p1 * (1 - discounts.get(3, 0) / 100), 2)
+    return p2, p3
+
+
+def _images_for(conn, inventory_ids):
+    """Bulk-load inventory_images for a set of inventory ids.
+
+    Returns {inventory_id: [{id, url, is_primary, sort_order}, ...]}.
+    """
+    if not inventory_ids:
+        return {}
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT id, inventory_id, url, is_primary, sort_order
+        FROM inventory_images
+        WHERE inventory_id = ANY(%s)
+        ORDER BY inventory_id, sort_order, id
+    """, (list(inventory_ids),))
+    rows = cur.fetchall()
+    cur.close()
+    out = {}
+    for r in rows:
+        out.setdefault(r[1], []).append({
+            'id': r[0], 'url': r[2], 'is_primary': r[3], 'sort_order': r[4],
+        })
+    return out
+
+
+def _row_to_item(row):
+    """Map a SELECT built with _SELECT_PIECE + stock (last col) to a dict."""
+    item = {}
+    for idx, field in enumerate(_PIECE_FIELDS):
+        item[field] = row[idx]
+    item['price_1'] = float(item['price_1'] or 0)
+    item['cost'] = float(item['cost'] or 0)
+    item['stock'] = row[len(_PIECE_FIELDS)] or 0
+    item['images'] = []
+    return item
+
+
+def _sku_token(donor_vin):
+    """Last 6 chars of the donor VIN, or 'SN' when the VIN is missing."""
+    vin = (donor_vin or '').strip().upper()
+    return vin[-6:] if vin else 'SN'
+
+
+def generate_unique_sku(conn, donor_vin):
+    """Build a unique auto-SKU: ``USADO-<last 6 of VIN | SN>-<sequence>``.
+
+    The sequence is max(existing numeric suffix) + 1 for the same prefix.
+    Uniqueness is verified against inventory.part_number (the UNIQUE index).
+    """
+    prefix = f"USADO-{_sku_token(donor_vin)}-"
+    cur = conn.cursor()
+    cur.execute(
+        "SELECT part_number FROM inventory WHERE part_number LIKE %s",
+        (prefix + '%',),
+    )
+    max_seq = 0
+    for (pn,) in cur.fetchall():
+        m = re.match(re.escape(prefix) + r'(\d+)$', pn or '')
+        if m:
+            max_seq = max(max_seq, int(m.group(1)))
+
+    next_seq = max_seq + 1
+    while True:
+        candidate = f"{prefix}{next_seq}"
+        cur.execute("SELECT 1 FROM inventory WHERE part_number = %s", (candidate,))
+        if not cur.fetchone():
+            break
+        next_seq += 1
+    cur.close()
+    return candidate
+
+
+# ─── Piece listing / retrieval ─────────────────────────────────────────────
+
+def _piece_where(filters):
+    """Build (where_sql, params) for the piece list, applying all Yonke filters."""
+    filters = filters or {}
+    where = ["i.is_active = true"]
+    params = []
+
+    condition = (filters.get('condition') or '').strip().lower()
+    if condition:
+        if condition not in CONDITIONS:
+            raise ValueError(f"condition inválida: {condition}")
+        where.append("i.condition = %s")
+        params.append(condition)
+    else:
+        # Default: all used/rebuilt pieces.
+        where.append("i.condition IN ('usado', 'reconstruido')")
+
+    q = (filters.get('q') or '').strip()
+    if q:
+        where.append(
+            "(i.part_number ILIKE %s OR i.name ILIKE %s OR i.brand ILIKE %s "
+            "OR i.donor_vin ILIKE %s OR i.serial_number ILIKE %s)"
+        )
+        params.extend([f'%{q}%'] * 5)
+
+    for key, col in (('donor_make', 'i.donor_make'), ('donor_model', 'i.donor_model')):
+        val = (filters.get(key) or '').strip()
+        if val:
+            where.append(f"{col} ILIKE %s")
+            params.append(f'%{val}%')
+
+    year = _to_int(filters.get('donor_year'))
+    if year is not None:
+        where.append("i.donor_year = %s")
+        params.append(year)
+
+    vin = (filters.get('vin') or '').strip()
+    if vin:
+        where.append("i.donor_vin ILIKE %s")
+        params.append(f'%{vin}%')
+
+    grade = (filters.get('grade') or '').strip().upper()
+    if grade:
+        if grade not in GRADES:
+            raise ValueError(f"grade inválido: {grade}")
+        where.append("i.condition_grade = %s")
+        params.append(grade)
+
+    ownership = (filters.get('ownership') or '').strip().lower()
+    if ownership:
+        if ownership not in OWNERSHIPS:
+            raise ValueError(f"ownership inválido: {ownership}")
+        where.append("i.ownership = %s")
+        params.append(ownership)
+
+    return " AND ".join(where), params
+
+
+def _stock_join(branch_id):
+    """Return (join_sql, params, select_expr) for per-branch or global stock."""
+    if branch_id:
+        return (
+            "LEFT JOIN inventory_stock ist ON ist.inventory_id = i.id AND ist.branch_id = %s",
+            [int(branch_id)],
+            "COALESCE(ist.stock, 0)",
+        )
+    return (
+        "LEFT JOIN inventory_stock_summary ist ON ist.inventory_id = i.id",
+        [],
+        "COALESCE(ist.stock, 0)",
+    )
+
+
+def list_pieces(conn, filters=None, page=1, per_page=25, branch_id=None):
+    """List yonke pieces. Returns (items, pagination_dict)."""
+    page = max(_to_int(page, 1) or 1, 1)
+    per_page = min(max(_to_int(per_page, 25) or 25, 1), 200)
+    where_sql, params = _piece_where(filters)
+    join_sql, join_params, stock_expr = _stock_join(branch_id)
+
+    cur = conn.cursor()
+    cur.execute(f"SELECT count(*) FROM inventory i WHERE {where_sql}", params)
+    total = cur.fetchone()[0]
+
+    cur.execute(f"""
+        SELECT {_SELECT_PIECE}, {stock_expr}
+        FROM inventory i
+        {join_sql}
+        WHERE {where_sql}
+        ORDER BY i.created_at DESC, i.id DESC
+        LIMIT %s OFFSET %s
+    """, join_params + params + [per_page, (page - 1) * per_page])
+    rows = cur.fetchall()
+    cur.close()
+
+    items = [_row_to_item(r) for r in rows]
+    images = _images_for(conn, [it['id'] for it in items])
+    for it in items:
+        it['images'] = images.get(it['id'], [])
+
+    pagination = {
+        'page': page, 'per_page': per_page, 'total': total,
+        'total_pages': (total + per_page - 1) // per_page,
+    }
+    return items, pagination
+
+
+def get_piece(conn, piece_id, branch_id=None):
+    """Return one piece (with stock + images) or None."""
+    join_sql, join_params, stock_expr = _stock_join(branch_id)
+    cur = conn.cursor()
+    cur.execute(f"""
+        SELECT {_SELECT_PIECE}, {stock_expr}
+        FROM inventory i
+        {join_sql}
+        WHERE i.id = %s
+    """, join_params + [piece_id])
+    row = cur.fetchone()
+    cur.close()
+    if not row:
+        return None
+    item = _row_to_item(row)
+    item['images'] = _images_for(conn, [piece_id]).get(piece_id, [])
+    return item
+
+
+# ─── Piece creation / edition ──────────────────────────────────────────────
+
+def _auto_category_id(conn, part_number, name, brand=None):
+    """Best-effort category pre-fill using services.product_categorizer.
+
+    Uses the rule engine (``classify_name``) plus the tenant's existing
+    categories. A brand new category is inserted inside the CALLER's
+    transaction — ``CategoryResolver.resolve(create=True)`` commits internally
+    and would break the caller's atomicity, so it is deliberately not used here.
+
+    Returns a categories.id or None; never raises.
+    """
+    cur = None
+    try:
+        from services import product_categorizer as pc
+        canonical, _confidence, _source = pc.classify_name(name or part_number, brand)
+        if not canonical:
+            return None
+        resolver = pc.CategoryResolver(conn, create=False)
+        if not resolver.available:
+            return None
+        cid, _cname = resolver.resolve(canonical)
+        if cid is not None:
+            return cid
+
+        cur = conn.cursor()
+        cur.execute("SAVEPOINT yonke_autocat")
+        try:
+            cur.execute(
+                "INSERT INTO categories (name) VALUES (%s) RETURNING id",
+                (canonical,),
+            )
+            new_id = cur.fetchone()[0]
+        except Exception:
+            cur.execute("ROLLBACK TO SAVEPOINT yonke_autocat")
+            return None
+        cur.execute("RELEASE SAVEPOINT yonke_autocat")
+        return new_id
+    except Exception:
+        return None
+    finally:
+        if cur is not None:
+            try:
+                cur.close()
+            except Exception:
+                pass
+
+
+def create_piece(conn, data, branch_id=None):
+    """Create a used/rebuild piece. Raises ValueError (400) or
+    DuplicatePartNumber (409). Returns the created item."""
+    data = data or {}
+    name = (data.get('name') or '').strip()
+    if not name:
+        raise ValueError('name required')
+
+    condition = (data.get('condition') or 'usado').strip().lower()
+    if condition not in USED_CONDITIONS:
+        raise ValueError("condition debe ser 'usado' o 'reconstruido'")
+
+    grade = (data.get('condition_grade') or data.get('grade') or '').strip().upper() or None
+    if grade and grade not in GRADES:
+        raise ValueError('condition_grade debe ser A, B, C o D')
+
+    ownership = (data.get('ownership') or 'propio').strip().lower()
+    if ownership not in OWNERSHIPS:
+        raise ValueError("ownership debe ser 'propio' o 'consigna'")
+
+    consignment_id = _to_int(data.get('consignment_id'))
+    if consignment_id:
+        ownership = 'consigna'
+
+    donor_vin = (data.get('donor_vin') or '').strip().upper() or None
+    donor_make = (data.get('donor_make') or '').strip() or None
+    donor_model = (data.get('donor_model') or '').strip() or None
+    serial_number = (data.get('serial_number') or '').strip() or None
+
+    category_id = _to_int(data.get('category_id'))
+
+    part_number = (data.get('part_number') or '').strip() or None
+    auto_sku = part_number is None
+    if auto_sku:
+        part_number = generate_unique_sku(conn, donor_vin)
+    else:
+        cur = conn.cursor()
+        cur.execute("SELECT 1 FROM inventory WHERE part_number = %s", (part_number,))
+        exists = cur.fetchone()
+        cur.close()
+        if exists:
+            raise DuplicatePartNumber(part_number)
+
+    price_1 = _to_float(data.get('price_1'), 0)
+    cost = _to_float(data.get('cost'), 0)
+    acquisition_cost = _to_float(data.get('acquisition_cost', cost), cost)
+    price_2, price_3 = _tier_prices(conn, price_1)
+    image_url = data.get('image_url') or None
+
+    inv_id = None
+    for attempt in range(5):
+        cur = conn.cursor()
+        try:
+            cur.execute("""
+                INSERT INTO inventory
+                    (part_number, name, brand, unit, cost, price_1, price_2, price_3, tax_rate,
+                     condition, condition_grade, is_unique_piece, serial_number,
+                     donor_vin, donor_make, donor_model, donor_year, donor_mileage_km,
+                     ownership, acquisition_cost, location, image_url, category_id)
+                VALUES (%s,%s,%s,%s,%s,%s,%s,%s,%s,
+                        %s,%s,%s,%s,
+                        %s,%s,%s,%s,%s,
+                        %s,%s,%s,%s, %s)
+                RETURNING id
+            """, (
+                part_number, name, data.get('brand'), data.get('unit', 'PZA'),
+                cost, price_1, price_2, price_3, data.get('tax_rate', 0.16),
+                condition, grade, bool(data.get('is_unique_piece', True)), serial_number,
+                donor_vin, donor_make, donor_model,
+                _to_int(data.get('donor_year')), _to_int(data.get('donor_mileage_km')),
+                ownership, acquisition_cost, data.get('location'), image_url, category_id,
+            ))
+            inv_id = cur.fetchone()[0]
+            break
+        except pg_errors.UniqueViolation:
+            conn.rollback()
+            if not auto_sku:
+                raise DuplicatePartNumber(part_number)
+            if attempt == 4:
+                raise
+            part_number = generate_unique_sku(conn, donor_vin)
+        finally:
+            cur.close()
+
+    # Best-effort auto-categorization, AFTER the insert so an SKU-retry
+    # rollback cannot leave a dangling category_id. Never blocks creation.
+    if category_id is None:
+        category_id = _auto_category_id(conn, part_number, name, data.get('brand'))
+        if category_id is not None:
+            cur = conn.cursor()
+            cur.execute("UPDATE inventory SET category_id = %s WHERE id = %s",
+                        (category_id, inv_id))
+            cur.close()
+
+    initial_stock = _to_int(data.get('initial_stock'), 1) or 0
+    if initial_stock > 0 and branch_id:
+        record_initial(conn, inv_id, branch_id, initial_stock, cost)
+
+    if image_url:
+        cur = conn.cursor()
+        cur.execute("""
+            INSERT INTO inventory_images (inventory_id, url, sort_order, is_primary)
+            VALUES (%s, %s, 0, true)
+        """, (inv_id, image_url))
+        cur.close()
+
+    if consignment_id:
+        cur = conn.cursor()
+        cur.execute("SELECT commission_pct FROM consignments WHERE id = %s", (consignment_id,))
+        row = cur.fetchone()
+        if not row:
+            cur.close()
+            raise ValueError(f'consignment {consignment_id} not found')
+        commission = float(row[0] or 0)
+        cur.execute("""
+            INSERT INTO consignment_items
+                (consignment_id, inventory_id, agreed_price, commission_amount, status)
+            VALUES (%s, %s, %s, %s, 'in_stock')
+        """, (consignment_id, inv_id, price_1,
+              round(price_1 * commission / 100, 2)))
+        cur.close()
+
+    # warranty_days is NOT registered here (only used at sale time); it is kept
+    # as a tenant-wide default for the yonke module.
+    warranty_days = _to_int(data.get('warranty_days'))
+    if warranty_days:
+        _store_default_warranty_days(conn, warranty_days)
+
+    log_action(conn, 'YONKE_PIECE_CREATE', 'inventory', inv_id,
+               new_value={'part_number': part_number, 'name': name,
+                          'condition': condition, 'ownership': ownership,
+                          'donor_vin': donor_vin})
+    return get_piece(conn, inv_id, branch_id)
+
+
+def _store_default_warranty_days(conn, days):
+    """Persist the yonke default warranty (days) in tenant_config."""
+    cur = conn.cursor()
+    cur.execute("""
+        INSERT INTO tenant_config (key, value, updated_at)
+        VALUES ('yonke_default_warranty_days', %s, NOW())
+        ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value, updated_at = NOW()
+    """, (str(int(days)),))
+    cur.close()
+
+
+def _coerce_edit_value(col, val):
+    if col == 'condition':
+        val = (val or '').strip().lower()
+        if val not in CONDITIONS:
+            raise ValueError(f"condition inválida: {val}")
+        return val
+    if col == 'condition_grade':
+        val = (val or '').strip().upper() or None
+        if val and val not in GRADES:
+            raise ValueError('condition_grade debe ser A, B, C o D')
+        return val
+    if col == 'ownership':
+        val = (val or '').strip().lower()
+        if val not in OWNERSHIPS:
+            raise ValueError(f"ownership inválido: {val}")
+        return val
+    if col == 'is_unique_piece':
+        return bool(val)
+    if col in ('donor_year', 'donor_mileage_km'):
+        return _to_int(val)
+    if col == 'name':
+        val = (val or '').strip()
+        if not val:
+            raise ValueError('name cannot be empty')
+        return val
+    if col in _UPPER_TEXT_FIELDS:
+        val = (val or '').strip().upper() or None
+        return val
+    # location and remaining free-text columns
+    return (str(val).strip() or None) if val is not None else None
+
+
+def update_piece(conn, piece_id, data, branch_id=None):
+    """Update the Yonke fields of a piece. Returns the item or None (404)."""
+    data = data or {}
+    cur = conn.cursor()
+    cur.execute("SELECT id FROM inventory WHERE id = %s", (piece_id,))
+    if not cur.fetchone():
+        cur.close()
+        return None
+    cur.close()
+
+    updates = {}
+    for key, col in _EDITABLE_FIELDS.items():
+        if key in data:
+            updates[col] = _coerce_edit_value(col, data.get(key))
+
+    if 'price_1' in data:
+        p1 = _to_float(data.get('price_1'), 0)
+        updates['price_1'] = p1
+        p2, p3 = _tier_prices(conn, p1)
+        updates['price_2'] = p2
+        updates['price_3'] = p3
+    if 'cost' in data:
+        c = _to_float(data.get('cost'), 0)
+        updates['cost'] = c
+        updates['acquisition_cost'] = c
+    if 'acquisition_cost' in data:
+        updates['acquisition_cost'] = _to_float(data.get('acquisition_cost'), 0)
+
+    if not updates:
+        return get_piece(conn, piece_id, branch_id)
+
+    set_sql = ", ".join(f"{col} = %s" for col in updates)
+    cur = conn.cursor()
+    cur.execute(
+        f"UPDATE inventory SET {set_sql} WHERE id = %s",
+        list(updates.values()) + [piece_id],
+    )
+    cur.close()
+
+    log_action(conn, 'YONKE_PIECE_UPDATE', 'inventory', piece_id,
+               new_value={k: (str(v) if v is not None else None) for k, v in updates.items()})
+    return get_piece(conn, piece_id, branch_id)
+
+
+# ─── Images ────────────────────────────────────────────────────────────────
+
+def _delete_files_for_url(tenant_id, url):
+    """Remove the full + thumb files backing an inventory_images.url."""
+    if not url:
+        return
+    filename = url.rstrip('/').split('/')[-1]
+    base = re.sub(r'_(full|thumb)\.webp$', '', filename)
+    for directory in (os.path.join(DATA_DIR, str(tenant_id)),
+                      os.path.join(STATIC_DIR, str(tenant_id))):
+        for suffix in ('_full.webp', '_thumb.webp'):
+            path = os.path.join(directory, base + suffix)
+            try:
+                if os.path.exists(path):
+                    os.remove(path)
+            except OSError:
+                pass
+
+
+def add_piece_images(conn, tenant_id, piece_id, files):
+    """Save uploaded files for a piece, one inventory_images row each.
+
+    The first image of the piece becomes the primary one and its URL is copied
+    to inventory.image_url. Returns the list of created image rows.
+    """
+    cur = conn.cursor()
+    cur.execute(
+        "SELECT COALESCE(MAX(sort_order), -1) + 1 FROM inventory_images WHERE inventory_id = %s",
+        (piece_id,),
+    )
+    next_order = cur.fetchone()[0]
+    cur.execute(
+        "SELECT EXISTS (SELECT 1 FROM inventory_images WHERE inventory_id = %s AND is_primary)",
+        (piece_id,),
+    )
+    has_primary = cur.fetchone()[0]
+    cur.close()
+
+    saved = []
+    for file_obj in files:
+        # Unique basename per photo so save_image() does not overwrite others.
+        token = f"{piece_id}_{uuid.uuid4().hex[:10]}"
+        result = save_image(tenant_id, token, file_obj=file_obj)
+        url = result['image_url']
+        is_primary = (not has_primary) and (not saved)
+
+        cur = conn.cursor()
+        cur.execute("""
+            INSERT INTO inventory_images (inventory_id, url, sort_order, is_primary)
+            VALUES (%s, %s, %s, %s)
+            RETURNING id
+        """, (piece_id, url, next_order, is_primary))
+        img_id = cur.fetchone()[0]
+        if is_primary:
+            cur.execute("UPDATE inventory SET image_url = %s WHERE id = %s", (url, piece_id))
+        cur.close()
+
+        saved.append({'id': img_id, 'url': url,
+                      'is_primary': is_primary, 'sort_order': next_order})
+        next_order += 1
+        has_primary = has_primary or is_primary
+
+    log_action(conn, 'YONKE_IMAGE_ADD', 'inventory', piece_id,
+               new_value={'count': len(saved)})
+    return saved
+
+
+def delete_piece_image(conn, tenant_id, piece_id, image_id):
+    """Delete one image row + its files. Promotes another image if it was primary.
+
+    Returns False when the image does not belong to the piece.
+    """
+    cur = conn.cursor()
+    cur.execute(
+        "SELECT url, is_primary FROM inventory_images WHERE id = %s AND inventory_id = %s",
+        (image_id, piece_id),
+    )
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        return False
+
+    url, was_primary = row
+    cur.execute("DELETE FROM inventory_images WHERE id = %s", (image_id,))
+
+    if was_primary:
+        cur.execute("""
+            SELECT id, url FROM inventory_images
+            WHERE inventory_id = %s ORDER BY sort_order, id LIMIT 1
+        """, (piece_id,))
+        nxt = cur.fetchone()
+        if nxt:
+            cur.execute("UPDATE inventory_images SET is_primary = true WHERE id = %s", (nxt[0],))
+            cur.execute("UPDATE inventory SET image_url = %s WHERE id = %s", (nxt[1], piece_id))
+        else:
+            cur.execute("UPDATE inventory SET image_url = NULL WHERE id = %s", (piece_id,))
+    cur.close()
+
+    _delete_files_for_url(tenant_id, url)
+    log_action(conn, 'YONKE_IMAGE_DELETE', 'inventory', piece_id, old_value={'url': url})
+    return True
+
+
+# ─── Donors ────────────────────────────────────────────────────────────────
+
+def list_donors(conn, q=None, page=1, per_page=25):
+    """Group yonke pieces by donor VIN. Returns (data, pagination)."""
+    page = max(_to_int(page, 1) or 1, 1)
+    per_page = min(max(_to_int(per_page, 25) or 25, 1), 200)
+
+    where = ["i.donor_vin IS NOT NULL", "i.donor_vin <> ''", "i.is_active = true"]
+    params = []
+    if q:
+        where.append("(i.donor_vin ILIKE %s OR i.donor_make ILIKE %s OR i.donor_model ILIKE %s)")
+        params.extend([f'%{q}%'] * 3)
+    where_sql = " AND ".join(where)
+
+    cur = conn.cursor()
+    cur.execute(f"SELECT COUNT(DISTINCT i.donor_vin) FROM inventory i WHERE {where_sql}", params)
+    total = cur.fetchone()[0]
+
+    cur.execute(f"""
+        SELECT i.donor_vin,
+               MAX(i.donor_make), MAX(i.donor_model), MAX(i.donor_year),
+               COUNT(*), COALESCE(SUM(i.price_1), 0)
+        FROM inventory i
+        WHERE {where_sql}
+        GROUP BY i.donor_vin
+        ORDER BY COUNT(*) DESC, i.donor_vin ASC
+        LIMIT %s OFFSET %s
+    """, params + [per_page, (page - 1) * per_page])
+    rows = cur.fetchall()
+    cur.close()
+
+    data = [{
+        'donor_vin': r[0], 'donor_make': r[1], 'donor_model': r[2],
+        'donor_year': r[3], 'pieces': r[4], 'total_value': float(r[5] or 0),
+    } for r in rows]
+    pagination = {
+        'page': page, 'per_page': per_page, 'total': total,
+        'total_pages': (total + per_page - 1) // per_page,
+    }
+    return data, pagination
+
+
+# ─── Consignments ──────────────────────────────────────────────────────────
+
+_CONSIGNMENT_FIELDS = """
+    c.id, c.consignor_name, c.consignor_rfc, c.consignor_phone,
+    c.commission_pct, c.status, c.notes, c.created_at, c.updated_at
+"""
+
+
+def _row_to_consignment(row):
+    return {
+        'id': row[0], 'consignor_name': row[1], 'consignor_rfc': row[2],
+        'consignor_phone': row[3], 'commission_pct': float(row[4] or 0),
+        'status': row[5], 'notes': row[6],
+        'created_at': str(row[7]) if row[7] else None,
+        'updated_at': str(row[8]) if row[8] else None,
+    }
+
+
+def list_consignments(conn, status=None, page=1, per_page=50):
+    """List consignments with piece counts and amounts."""
+    page = max(_to_int(page, 1) or 1, 1)
+    per_page = min(max(_to_int(per_page, 50) or 50, 1), 200)
+
+    where_sql = ""
+    params = []
+    if status:
+        where_sql = "WHERE c.status = %s"
+        params.append(status)
+
+    cur = conn.cursor()
+    cur.execute(f"SELECT count(*) FROM consignments c {where_sql}", params)
+    total = cur.fetchone()[0]
+
+    cur.execute(f"""
+        SELECT {_CONSIGNMENT_FIELDS},
+               COUNT(ci.id),
+               COALESCE(SUM(ci.agreed_price), 0),
+               COALESCE(SUM(ci.commission_amount), 0)
+        FROM consignments c
+        LEFT JOIN consignment_items ci ON ci.consignment_id = c.id
+        {where_sql}
+        GROUP BY c.id
+        ORDER BY c.created_at DESC, c.id DESC
+        LIMIT %s OFFSET %s
+    """, params + [per_page, (page - 1) * per_page])
+    rows = cur.fetchall()
+    cur.close()
+
+    data = []
+    for r in rows:
+        cons = _row_to_consignment(r)
+        cons['pieces'] = r[9]
+        cons['total_sold'] = float(r[10] or 0)
+        cons['total_commission'] = float(r[11] or 0)
+        data.append(cons)
+
+    pagination = {
+        'page': page, 'per_page': per_page, 'total': total,
+        'total_pages': (total + per_page - 1) // per_page,
+    }
+    return data, pagination
+
+
+def get_consignment(conn, consignment_id):
+    """Return a consignment with its items, or None."""
+    cur = conn.cursor()
+    cur.execute(f"SELECT {_CONSIGNMENT_FIELDS} FROM consignments c WHERE c.id = %s",
+                (consignment_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        return None
+    cons = _row_to_consignment(row)
+
+    cur.execute("""
+        SELECT ci.inventory_id, i.part_number, i.name, ci.agreed_price,
+               ci.commission_amount, ci.status
+        FROM consignment_items ci
+        LEFT JOIN inventory i ON i.id = ci.inventory_id
+        WHERE ci.consignment_id = %s
+        ORDER BY ci.id
+    """, (consignment_id,))
+    items = []
+    for r in cur.fetchall():
+        items.append({
+            'inventory_id': r[0], 'part_number': r[1], 'name': r[2],
+            'agreed_price': float(r[3] or 0),
+            'commission_amount': float(r[4] or 0),
+            'status': r[5],
+        })
+    cur.close()
+
+    cons['items'] = items
+    cons['pieces'] = len(items)
+    cons['total_sold'] = round(sum(i['agreed_price'] for i in items), 2)
+    cons['total_commission'] = round(sum(i['commission_amount'] for i in items), 2)
+    return cons
+
+
+def create_consignment(conn, data):
+    """Create a consignment. Returns the created consignment detail."""
+    data = data or {}
+    name = (data.get('consignor_name') or '').strip()
+    if not name:
+        raise ValueError('consignor_name required')
+
+    cur = conn.cursor()
+    cur.execute("""
+        INSERT INTO consignments
+            (consignor_name, consignor_rfc, consignor_phone, commission_pct, notes, status)
+        VALUES (%s, %s, %s, %s, %s, 'open')
+        RETURNING id
+    """, (name, data.get('consignor_rfc'), data.get('consignor_phone'),
+          _to_float(data.get('commission_pct'), 0), data.get('notes')))
+    cid = cur.fetchone()[0]
+    cur.close()
+
+    log_action(conn, 'CONSIGNMENT_CREATE', 'consignment', cid,
+               new_value={'consignor_name': name})
+    return get_consignment(conn, cid)
+
+
+def add_consignment_item(conn, consignment_id, data):
+    """Attach an inventory piece to a consignment and set ownership='consigna'."""
+    data = data or {}
+    inventory_id = _to_int(data.get('inventory_id'))
+    if not inventory_id:
+        raise ValueError('inventory_id required')
+
+    cur = conn.cursor()
+    cur.execute("SELECT commission_pct FROM consignments WHERE id = %s", (consignment_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        raise ValueError('consignment not found')
+    commission_pct = float(row[0] or 0)
+
+    cur.execute("SELECT id FROM inventory WHERE id = %s", (inventory_id,))
+    if not cur.fetchone():
+        cur.close()
+        raise ValueError('inventory item not found')
+
+    agreed = _to_float(data.get('agreed_price'), 0)
+    if data.get('commission_amount') not in (None, ''):
+        commission = _to_float(data.get('commission_amount'), 0)
+    else:
+        commission = round(agreed * commission_pct / 100, 2)
+
+    cur.execute("""
+        INSERT INTO consignment_items
+            (consignment_id, inventory_id, agreed_price, commission_amount, status)
+        VALUES (%s, %s, %s, %s, 'in_stock')
+        RETURNING id
+    """, (consignment_id, inventory_id, agreed, commission))
+    item_id = cur.fetchone()[0]
+
+    cur.execute("UPDATE inventory SET ownership = 'consigna' WHERE id = %s", (inventory_id,))
+    cur.close()
+
+    log_action(conn, 'CONSIGNMENT_ITEM_ADD', 'consignment', consignment_id,
+               new_value={'inventory_id': inventory_id, 'agreed_price': agreed})
+    return {
+        'id': item_id, 'inventory_id': inventory_id, 'agreed_price': agreed,
+        'commission_amount': commission, 'status': 'in_stock',
+    }
+
+
+def settle_consignment(conn, consignment_id, item_ids=None):
+    """Mark consignment items as settled and the consignment as settled.
+
+    When item_ids is omitted every not-yet-settled item is settled, so repeated
+    calls never pay the consignor twice. Returns the settlement summary or None.
+    """
+    cur = conn.cursor()
+    cur.execute("SELECT consignor_name FROM consignments WHERE id = %s", (consignment_id,))
+    row = cur.fetchone()
+    if not row:
+        cur.close()
+        return None
+    consignor_name = row[0]
+
+    params = [consignment_id]
+    sql = ("SELECT id, agreed_price, commission_amount FROM consignment_items "
+           "WHERE consignment_id = %s")
+    if item_ids:
+        sql += " AND id = ANY(%s)"
+        params.append([_to_int(i) for i in item_ids])
+    else:
+        sql += " AND status <> 'settled'"
+    cur.execute(sql, params)
+    rows = cur.fetchall()
+
+    ids = [r[0] for r in rows]
+    total_sold = round(sum(float(r[1] or 0) for r in rows), 2)
+    total_commission = round(sum(float(r[2] or 0) for r in rows), 2)
+
+    if ids:
+        cur.execute("UPDATE consignment_items SET status = 'settled' WHERE id = ANY(%s)", (ids,))
+    cur.execute("UPDATE consignments SET status = 'settled', updated_at = NOW() WHERE id = %s",
+                (consignment_id,))
+    cur.close()
+
+    log_action(conn, 'CONSIGNMENT_SETTLE', 'consignment', consignment_id,
+               new_value={'items': len(ids), 'total_sold': total_sold})
+    return {
+        'consignor_name': consignor_name,
+        'items_count': len(ids),
+        'total_sold': total_sold,
+        'total_commission': total_commission,
+        'total_to_pay_consignor': round(total_sold - total_commission, 2),
+    }
+
+
+# ═══════════════════════════════════════════════════════════════════════════
+# A5 — Bulk loading, donor intake, reports, consignment statements, labels
+# ═══════════════════════════════════════════════════════════════════════════
+
+def create_donor_full(conn, data, branch_id=None):
+    """Register a whole donor vehicle at once with its N pieces.
+
+    Body keys: vin / make / model / year / mileage_km (donor fields) plus
+    ``pieces`` (list). Each piece inherits the donor fields unless it overrides
+    them. Pieces without ``part_number`` get an auto-SKU. Atomic: if one piece
+    fails, the caller rolls back the whole donor.
+
+    Returns ``{'donor_vin', 'count', 'pieces': [{'id', 'part_number', 'name'}]}``.
+    """
+    data = data or {}
+    vin = (data.get('vin') or data.get('donor_vin') or '').strip().upper() or None
+    if not vin:
+        raise ValueError('vin required')
+
+    make = (data.get('make') or data.get('donor_make') or '').strip() or None
+    model = (data.get('model') or data.get('donor_model') or '').strip() or None
+    year_val = data.get('year')
+    if year_val is None:
+        year_val = data.get('donor_year')
+    mileage_val = data.get('mileage_km')
+    if mileage_val is None:
+        mileage_val = data.get('donor_mileage_km')
+    year = _to_int(year_val)
+    mileage = _to_int(mileage_val)
+
+    ownership = (data.get('ownership') or 'propio').strip().lower()
+    if ownership not in OWNERSHIPS:
+        raise ValueError("ownership debe ser 'propio' o 'consigna'")
+    consignment_id = _to_int(data.get('consignment_id'))
+
+    pieces = data.get('pieces')
+    if not isinstance(pieces, list) or not pieces:
+        raise ValueError('pieces required')
+
+    created = []
+    for idx, raw in enumerate(pieces):
+        piece = dict(raw or {})
+        if not (piece.get('name') or '').strip():
+            raise ValueError(f'pieces[{idx}].name required')
+        piece.setdefault('donor_vin', vin)
+        if make:
+            piece.setdefault('donor_make', make)
+        if model:
+            piece.setdefault('donor_model', model)
+        if year is not None:
+            piece.setdefault('donor_year', year)
+        if mileage is not None:
+            piece.setdefault('donor_mileage_km', mileage)
+        piece.setdefault('ownership', ownership)
+        if consignment_id:
+            piece.setdefault('consignment_id', consignment_id)
+        piece.setdefault('condition', 'usado')
+
+        item = create_piece(conn, piece, branch_id=branch_id)
+        created.append({
+            'id': item['id'],
+            'part_number': item['part_number'],
+            'name': item['name'],
+        })
+
+    log_action(conn, 'YONKE_DONOR_CREATE', 'inventory',
+               created[0]['id'] if created else None,
+               new_value={'donor_vin': vin, 'pieces': len(created)})
+    return {'donor_vin': vin, 'count': len(created), 'pieces': created}
+
+
+def allocate_donor_cost(conn, donor_vin, total_cost, method='price'):
+    """Spread a donor's total acquisition cost across its pieces.
+
+    methods:
+      * ``price``   (default) — proportional to price_1
+      * ``equal``   — same amount per piece
+      * ``by_cost`` — proportional to the pieces' current cost
+
+    Falls back to ``equal`` when the weights sum to zero. Values are rounded to
+    cents and the running cumulative method guarantees the parts add up to
+    ``total_cost`` exactly. Returns ``{'updated': [...], 'total_cost'}`` or None
+    when the donor has no pieces.
+    """
+    donor_vin = (donor_vin or '').strip().upper()
+    total = _to_float(total_cost, 0)
+    if total < 0:
+        raise ValueError('total_cost no puede ser negativo')
+
+    method = (method or 'price').strip().lower()
+    if method in ('price', 'price_1', 'proportional', 'proporcional'):
+        key = 'price'
+    elif method in ('equal', 'igual', 'equitativo'):
+        key = 'equal'
+    elif method in ('by_cost', 'cost', 'costo'):
+        key = 'by_cost'
+    else:
+        raise ValueError("method debe ser 'price', 'equal' o 'by_cost'")
+
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT id, price_1, COALESCE(acquisition_cost, cost, 0)
+        FROM inventory
+        WHERE is_active = true AND condition IN ('usado', 'reconstruido')
+          AND donor_vin = %s
+        ORDER BY id
+    """, (donor_vin,))
+    rows = cur.fetchall()
+    if not rows:
+        cur.close()
+        return None
+
+    if key == 'price':
+        weights = [float(r[1] or 0) for r in rows]
+    elif key == 'by_cost':
+        weights = [float(r[2] or 0) for r in rows]
+    else:
+        weights = [1.0] * len(rows)
+    if sum(weights) <= 0:
+        weights = [1.0] * len(rows)
+
+    total_w = sum(weights)
+    cents = int(round(total * 100))
+    updated = []
+    cumulative = 0.0
+    prev_cents = 0
+    for i, (row, w) in enumerate(zip(rows, weights)):
+        cumulative += w
+        cur_cents = cents if i == len(rows) - 1 else int(round(cents * (cumulative / total_w)))
+        amount = (cur_cents - prev_cents) / 100.0
+        prev_cents = cur_cents
+        cur.execute("UPDATE inventory SET acquisition_cost = %s WHERE id = %s",
+                    (amount, row[0]))
+        updated.append({'id': row[0], 'acquisition_cost': round(amount, 2)})
+    cur.close()
+
+    log_action(conn, 'YONKE_COST_ALLOCATE', 'inventory', updated[0]['id'],
+               new_value={'donor_vin': donor_vin, 'total_cost': total, 'method': key})
+    return {'updated': updated, 'total_cost': round(total, 2)}
+
+
+def aging_report(conn, days=90):
+    """Pieces that have been in the yard for at least ``days`` days.
+
+    Returns ``{'data': [...], 'summary': {count, total_value, avg_days}}``.
+    ``days=0`` returns every used piece.
+    """
+    days = _to_int(days, 90)
+    if days is None or days < 0:
+        days = 90
+
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT i.id, i.part_number, i.name, i.condition_grade, i.price_1,
+               COALESCE(i.acquisition_cost, i.cost, 0) AS cost,
+               FLOOR(EXTRACT(EPOCH FROM (NOW() - i.created_at)) / 86400)::int AS days_in_yard
+        FROM inventory i
+        WHERE i.is_active = true
+          AND i.condition IN ('usado', 'reconstruido')
+          AND FLOOR(EXTRACT(EPOCH FROM (NOW() - i.created_at)) / 86400) >= %s
+        ORDER BY days_in_yard DESC, i.id DESC
+    """, (days,))
+    rows = cur.fetchall()
+    cur.close()
+
+    data = [{
+        'id': r[0], 'part_number': r[1], 'name': r[2],
+        'condition_grade': r[3], 'price_1': float(r[4] or 0),
+        'cost': float(r[5] or 0), 'days_in_yard': int(r[6] or 0),
+    } for r in rows]
+
+    count = len(data)
+    total_value = round(sum(d['price_1'] for d in data), 2)
+    avg_days = round(sum(d['days_in_yard'] for d in data) / count, 1) if count else 0
+    return {
+        'data': data,
+        'summary': {'count': count, 'total_value': total_value, 'avg_days': avg_days},
+    }
+
+
+def summary_report(conn):
+    """Yonke dashboard summary: stock value, capital, margins, grade mix."""
+    cur = conn.cursor()
+
+    cur.execute("""
+        SELECT i.donor_vin, MAX(i.donor_make), MAX(i.donor_model), MAX(i.donor_year),
+               COUNT(*), COALESCE(SUM(i.price_1), 0)
+        FROM inventory i
+        WHERE i.is_active = true AND i.condition IN ('usado', 'reconstruido')
+          AND i.donor_vin IS NOT NULL AND i.donor_vin <> ''
+        GROUP BY i.donor_vin
+        ORDER BY COUNT(*) DESC, i.donor_vin ASC
+    """)
+    by_donor = [{
+        'donor_vin': r[0], 'make': r[1], 'model': r[2], 'year': r[3],
+        'pieces': r[4], 'total_value': float(r[5] or 0),
+    } for r in cur.fetchall()]
+
+    cur.execute("""
+        SELECT COALESCE(SUM(si.subtotal), 0),
+               COALESCE(SUM(COALESCE(si.unit_cost, 0) * si.quantity), 0)
+        FROM sale_items si
+        JOIN sales s ON s.id = si.sale_id
+        JOIN inventory i ON i.id = si.inventory_id
+        WHERE i.condition IN ('usado', 'reconstruido')
+          AND COALESCE(s.status, 'completed') = 'completed'
+    """)
+    row = cur.fetchone()
+    revenue = float(row[0] or 0)
+    cogs = float(row[1] or 0)
+    margin_pct = round((revenue - cogs) / revenue * 100, 2) if revenue else 0
+
+    cur.execute("""
+        SELECT COUNT(*), COALESCE(SUM(COALESCE(acquisition_cost, cost, 0)), 0)
+        FROM inventory
+        WHERE is_active = true AND condition IN ('usado', 'reconstruido')
+    """)
+    cap_count, cap_cost = cur.fetchone()
+
+    cur.execute("""
+        SELECT COUNT(*)
+        FROM inventory i
+        WHERE i.is_active = true AND i.condition IN ('usado', 'reconstruido')
+          AND NOT EXISTS (
+              SELECT 1 FROM inventory_images ii WHERE ii.inventory_id = i.id
+          )
+    """)
+    without_photo = cur.fetchone()[0]
+
+    cur.execute("""
+        SELECT condition_grade, COUNT(*)
+        FROM inventory
+        WHERE is_active = true AND condition IN ('usado', 'reconstruido')
+          AND condition_grade IS NOT NULL
+        GROUP BY condition_grade
+    """)
+    by_grade = dict.fromkeys(GRADES, 0)
+    for grade, n in cur.fetchall():
+        if grade in by_grade:
+            by_grade[grade] = n
+    cur.close()
+
+    return {
+        'by_donor': by_donor,
+        'margin': {
+            'revenue': round(revenue, 2),
+            'cost': round(cogs, 2),
+            'margin_pct': margin_pct,
+        },
+        'capital': {'pieces': cap_count, 'total_cost': round(float(cap_cost or 0), 2)},
+        'without_photo': without_photo,
+        'by_grade': by_grade,
+    }
+
+
+def consignment_statement(conn, consignment_id, date_from=None, date_to=None):
+    """Account statement for a consignor over an optional period.
+
+    Returns ``{consignor_name, period, items, totals}`` or None (404).
+    Statuses 'sold' and 'settled' count as sold; ``to_pay`` is the agreed price
+    minus the commission.
+    """
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT id, consignor_name, commission_pct, status
+        FROM consignments WHERE id = %s
+    """, (consignment_id,))
+    head = cur.fetchone()
+    if not head:
+        cur.close()
+        return None
+    consignor_name = head[1]
+
+    sql = """
+        SELECT ci.inventory_id, i.part_number, i.name, ci.agreed_price,
+               ci.commission_amount, ci.status, ci.created_at
+        FROM consignment_items ci
+        LEFT JOIN inventory i ON i.id = ci.inventory_id
+        WHERE ci.consignment_id = %s
+    """
+    params = [consignment_id]
+    if date_from:
+        sql += " AND ci.created_at >= %s::date"
+        params.append(date_from)
+    if date_to:
+        sql += " AND ci.created_at < (%s::date + INTERVAL '1 day')"
+        params.append(date_to)
+    sql += " ORDER BY ci.created_at, ci.id"
+    cur.execute(sql, params)
+    rows = cur.fetchall()
+
+    inv_ids = [r[0] for r in rows if r[0] is not None]
+    sold_at_map = {}
+    if inv_ids:
+        cur.execute("""
+            SELECT si.inventory_id, MAX(s.created_at)
+            FROM sale_items si
+            JOIN sales s ON s.id = si.sale_id
+            WHERE si.inventory_id = ANY(%s)
+              AND COALESCE(s.status, 'completed') = 'completed'
+            GROUP BY si.inventory_id
+        """, (inv_ids,))
+        sold_at_map = {r[0]: r[1] for r in cur.fetchall()}
+    cur.close()
+
+    SOLD = ('sold', 'settled')
+    items = []
+    sold_count = 0
+    total_sold = 0.0
+    total_commission = 0.0
+    for r in rows:
+        agreed = float(r[3] or 0)
+        commission = float(r[4] or 0)
+        status = r[5]
+        sold_at = sold_at_map.get(r[0])
+        if status in SOLD:
+            sold_count += 1
+            total_sold += agreed
+            total_commission += commission
+        items.append({
+            'part_number': r[1],
+            'name': r[2],
+            'agreed_price': round(agreed, 2),
+            'commission_amount': round(commission, 2),
+            'status': status,
+            'sold_at': str(sold_at) if sold_at else None,
+        })
+
+    return {
+        'consignor_name': consignor_name,
+        'commission_pct': float(head[2] or 0),
+        'period': {'from': date_from, 'to': date_to},
+        'items': items,
+        'totals': {
+            'sold_count': sold_count,
+            'total_sold': round(total_sold, 2),
+            'total_commission': round(total_commission, 2),
+            'to_pay': round(total_sold - total_commission, 2),
+        },
+    }
+
+
+def bulk_create_pieces(conn, csv_text, branch_id=None):
+    """Create many pieces from a CSV. One bad row never aborts the rest.
+
+    Required column: ``name``. Optional: price_1, cost, condition_grade,
+    donor_vin, donor_make, donor_model, donor_year, donor_mileage_km, location,
+    part_number, category_id, condition. Each row runs inside its own savepoint
+    so a failure only discards that row.
+
+    Returns ``{'created': <int>, 'items': [...], 'errors': [{'row', 'error'}]}``.
+    The first line is the header (row numbering starts at 2).
+    """
+    import csv
+    import io
+
+    text = csv_text if isinstance(csv_text, str) else (csv_text or b'').decode('utf-8-sig', 'replace')
+    reader = csv.DictReader(io.StringIO(text))
+    if not reader.fieldnames:
+        raise ValueError('CSV vacío o sin encabezados')
+
+    items = []
+    errors = []
+    for row_no, raw in enumerate(reader, start=2):
+        row = {}
+        for key, val in (raw or {}).items():
+            row[(key or '').strip().lower()] = (val or '').strip()
+
+        if not any(row.values()):
+            continue
+        name = row.get('name')
+        if not name:
+            errors.append({'row': row_no, 'error': 'name requerido'})
+            continue
+
+        piece = {
+            'name': name,
+            'condition': row.get('condition') or 'usado',
+        }
+        for src, dest in (
+            ('part_number', 'part_number'), ('price_1', 'price_1'), ('cost', 'cost'),
+            ('condition_grade', 'condition_grade'), ('donor_vin', 'donor_vin'),
+            ('donor_make', 'donor_make'), ('donor_model', 'donor_model'),
+            ('donor_year', 'donor_year'), ('donor_mileage_km', 'donor_mileage_km'),
+            ('location', 'location'), ('category_id', 'category_id'),
+            ('serial_number', 'serial_number'),
+        ):
+            if row.get(src):
+                piece[dest] = row[src]
+
+        cur = conn.cursor()
+        savepoint = False
+        try:
+            cur.execute("SAVEPOINT yonke_bulk_row")
+            savepoint = True
+        except Exception:
+            cur.close()
+            cur = conn.cursor()
+        try:
+            item = create_piece(conn, piece, branch_id=branch_id)
+            if savepoint:
+                cur.execute("RELEASE SAVEPOINT yonke_bulk_row")
+            items.append({'id': item['id'], 'part_number': item['part_number'],
+                          'name': item['name']})
+        except Exception as e:
+            if savepoint:
+                try:
+                    cur.execute("ROLLBACK TO SAVEPOINT yonke_bulk_row")
+                except Exception:
+                    pass
+            errors.append({'row': row_no, 'error': str(e)})
+        finally:
+            cur.close()
+
+    log_action(conn, 'YONKE_BULK_CREATE', 'inventory',
+               items[0]['id'] if items else None,
+               new_value={'created': len(items), 'errors': len(errors)})
+    return {'created': len(items), 'items': items, 'errors': errors}
+
+
+# ─── "Sirve para" (vehicle compatibility) ──────────────────────────────────
+
+def _compat_from_tenant(conn, piece_id):
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT id, model_year_engine_id, make, model, year, engine,
+               source, confidence
+        FROM inventory_vehicle_compat
+        WHERE inventory_id = %s
+        ORDER BY COALESCE(make, ''), COALESCE(model, ''), COALESCE(year, 0), id
+    """, (piece_id,))
+    rows = cur.fetchall()
+    cur.close()
+    return [{
+        'id': r[0],
+        'model_year_engine_id': r[1],
+        'make': r[2] or '',
+        'model': r[3] or '',
+        'year': r[4],
+        'engine': r[5] or '',
+        'source': r[6],
+        'confidence': float(r[7] or 0),
+    } for r in rows]
+
+
+def list_piece_compat(conn, piece_id):
+    """Vehicle compatibility for a piece.
+
+    Enriches MYE-linked rows through services.inventory_vehicle_compat when the
+    master DB is reachable; otherwise returns the stored text as-is.
+    """
+    try:
+        from services import inventory_vehicle_compat as ivc
+        from tenant_db import get_master_conn
+        master = get_master_conn()
+        try:
+            rows = ivc.get_compatibility(conn, master, piece_id)
+        finally:
+            master.close()
+        return [{
+            'id': r.get('id'),
+            'model_year_engine_id': r.get('model_year_engine_id'),
+            'make': r.get('brand') or r.get('make') or '',
+            'model': r.get('model') or '',
+            'year': r.get('year'),
+            'engine': r.get('engine') or '',
+            'source': r.get('source'),
+            'confidence': float(r.get('confidence') or 0),
+        } for r in rows]
+    except Exception:
+        return _compat_from_tenant(conn, piece_id)
+
+
+def add_piece_compat(conn, piece_id, items):
+    """Add text-only vehicle compatibility rows ('sirve para').
+
+    Each item is ``{make, model, year}``. Duplicates (same make/model/year) are
+    skipped. Returns the list of inserted rows.
+    """
+    cur = conn.cursor()
+    added = []
+    for item in items or []:
+        make = (item.get('make') or '').strip() or None
+        model = (item.get('model') or '').strip() or None
+        year = _to_int(item.get('year'))
+        if not make and not model and year is None:
+            continue
+        cur.execute("""
+            SELECT id FROM inventory_vehicle_compat
+            WHERE inventory_id = %s AND model_year_engine_id IS NULL
+              AND COALESCE(make, '') = %s AND COALESCE(model, '') = %s
+              AND COALESCE(year, 0) = %s
+        """, (piece_id, make or '', model or '', year or 0))
+        if cur.fetchone():
+            continue
+        cur.execute("""
+            INSERT INTO inventory_vehicle_compat
+                (inventory_id, model_year_engine_id, make, model, year, source, confidence)
+            VALUES (%s, NULL, %s, %s, %s, 'manual', 1.0)
+            RETURNING id
+        """, (piece_id, make, model, year))
+        added.append({
+            'id': cur.fetchone()[0], 'make': make or '',
+            'model': model or '', 'year': year,
+        })
+    cur.close()
+
+    if added:
+        log_action(conn, 'YONKE_COMPAT_ADD', 'inventory', piece_id,
+                   new_value={'count': len(added)})
+    return added
+
+
+# ─── MercadoLibre publish ──────────────────────────────────────────────────
+
+def publish_piece_to_meli(conn, piece_id, category_id=None, price=None, stock=None,
+                          branch_id=None, listing_type=None, shipping_mode=None,
+                          base_url=None):
+    """Publish ONE piece to MercadoLibre.
+
+    Reuses ``marketplace_external_service.publish_items`` (single-item call).
+    Degrades with ``{'ok': False, 'error': ...}`` when ML is not configured or
+    the API rejects the item — never raises for those cases.
+
+    ``price`` (optional) updates price_1 before publishing; ``stock`` (optional)
+    loads initial stock when the piece has none and a branch is known, so the ML
+    listing is publishable.
+    """
+    piece = get_piece(conn, piece_id, branch_id=branch_id)
+    if not piece:
+        return {'ok': False, 'external_item_id': None, 'permalink': None,
+                'not_found': True, 'error': 'Piece not found'}
+
+    def _result(ok, error=None, external_item_id=None, permalink=None):
+        resp = {'ok': ok, 'external_item_id': external_item_id, 'permalink': permalink}
+        if error:
+            resp['error'] = error
+        return resp
+
+    try:
+        from services import marketplace_external_service as meli
+    except Exception as e:  # pragma: no cover - import should always succeed
+        return _result(False, f'Marketplace service unavailable: {e}')
+
+    try:
+        cfg = meli.get_meli_config(conn)
+    except Exception as e:
+        return _result(False, str(e))
+    if not (cfg.get('meli_access_token') and cfg.get('meli_enabled', True)):
+        return _result(False, 'MercadoLibre no está configurado')
+
+    category_id = (category_id or cfg.get('meli_default_category_id') or '').strip() or None
+    if not category_id:
+        return _result(False, 'category_id requerido (body o meli_default_category_id)')
+
+    if price is not None:
+        update_piece(conn, piece_id, {'price_1': price}, branch_id=branch_id)
+
+    if stock:
+        try:
+            from services.inventory_engine import get_stock, record_initial
+            qty = int(stock)
+            if qty > 0 and branch_id and (get_stock(conn, piece_id, branch_id) or 0) <= 0:
+                record_initial(conn, piece_id, branch_id, qty, piece.get('cost') or 0)
+        except Exception:
+            pass
+
+    try:
+        result = meli.publish_items(
+            conn,
+            [piece_id],
+            meli_category_id=category_id,
+            listing_type_id=listing_type or 'gold_special',
+            shipping_mode=shipping_mode or cfg.get('meli_shipping_mode') or 'me2',
+            base_url=base_url,
+        )
+    except ValueError as e:
+        return _result(False, str(e))
+    except Exception as e:
+        return _result(False, str(e))
+
+    for entry in result.get('success', []) or []:
+        if str(entry.get('inventory_id')) == str(piece_id):
+            return _result(True, external_item_id=entry.get('external_item_id'),
+                           permalink=entry.get('permalink'))
+    failed = result.get('failed') or []
+    for entry in failed:
+        if str(entry.get('inventory_id')) == str(piece_id) or entry.get('inventory_id') == 'config':
+            return _result(False, entry.get('error') or 'ML rechazó la pieza')
+    return _result(False, 'ML no devolvió un item para la pieza')
+
+
+# ─── Printable HTML (statement + piece label) ──────────────────────────────
+
+_PRINT_CSS = """
+  * { box-sizing: border-box; }
+  body { font-family: -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif;
+         margin: 0; padding: 24px; color: #111; }
+  h1 { font-size: 20px; margin: 0 0 4px; }
+  .muted { color: #555; font-size: 12px; }
+  table { width: 100%; border-collapse: collapse; margin-top: 16px; font-size: 13px; }
+  th, td { border-bottom: 1px solid #ddd; padding: 6px 8px; text-align: left; }
+  th { background: #f3f4f6; }
+  td.num, th.num { text-align: right; }
+  .totals { margin-top: 16px; width: auto; }
+  .totals td { border: none; padding: 2px 8px; }
+  .totals .label { color: #555; }
+  .totals .value { font-weight: 600; text-align: right; }
+  .actions { margin-bottom: 16px; }
+  @media print { .actions { display: none; } body { padding: 0; } }
+"""
+
+
+def _esc(value):
+    import html as _html
+    return _html.escape('' if value is None else str(value))
+
+
+def _money(value):
+    """Format a number as a two-decimal string (no currency symbol)."""
+    try:
+        return f"{float(value or 0):.2f}"
+    except (TypeError, ValueError):
+        return "0.00"
+
+
+def _code39_svg(value, module=2, height=70):
+    """Render ``value`` as an inline Code39 SVG (no external dependency)."""
+    table = {
+        '0': '101001101101', '1': '110100101011', '2': '101100101011',
+        '3': '110110010101', '4': '101001101011', '5': '110100110101',
+        '6': '101100110101', '7': '101001011011', '8': '110100101101',
+        '9': '101100101101', 'A': '110101001011', 'B': '101101001011',
+        'C': '110110100101', 'D': '101011001011', 'E': '110101100101',
+        'F': '101101100101', 'G': '101010011011', 'H': '110101001101',
+        'I': '101101001101', 'J': '101011001101', 'K': '110101010011',
+        'L': '101101010011', 'M': '110110101001', 'N': '101011010011',
+        'O': '110101101001', 'P': '101101101001', 'Q': '101010110011',
+        'R': '110101011001', 'S': '101101011001', 'T': '101011011001',
+        'U': '110010101011', 'V': '100110101011', 'W': '110011010101',
+        'X': '100101101011', 'Y': '110010110101', 'Z': '100110110101',
+        '-': '100101011011', '.': '110010101101', ' ': '100110101101',
+        '$': '100100100101', '/': '100100101001', '+': '100101001001',
+        '%': '101001001001', '*': '100101101101',
+    }
+    text = ''.join(ch for ch in (value or '').upper() if ch in table)
+    if not text:
+        return ''
+    bits = '0'.join(table[ch] for ch in ('*' + text + '*'))
+
+    rects = []
+    x = module
+    i = 0
+    while i < len(bits):
+        bit = bits[i]
+        run = 1
+        while i + run < len(bits) and bits[i + run] == bit:
+            run += 1
+        width = run * module
+        if bit == '1':
+            rects.append(f'<rect x="{x}" y="0" width="{width}" height="{height}"/>')
+        x += width
+        i += run
+    total_w = x + module
+    return (
+        f'<svg xmlns="http://www.w3.org/2000/svg" width="{total_w}" height="{height}" '
+        f'viewBox="0 0 {total_w} {height}" role="img" aria-label="{_esc(text)}">'
+        f'<g fill="#000">{"".join(rects)}</g></svg>'
+    )
+
+
+def render_statement_html(statement, tenant_name=None):
+    """Printable HTML for a consignment statement (same data as the JSON API)."""
+    if not statement:
+        return '<!doctype html><html><body><p>Sin datos</p></body></html>'
+    period = statement.get('period') or {}
+    period_txt = 'Todo el periodo'
+    if period.get('from') or period.get('to'):
+        period_txt = f"{period.get('from') or '...'} a {period.get('to') or '...'}"
+    totals = statement.get('totals') or {}
+
+    rows = []
+    for it in statement.get('items') or []:
+        rows.append(
+            '<tr>'
+            f"<td>{_esc(it.get('part_number'))}</td>"
+            f"<td>{_esc(it.get('name'))}</td>"
+            f"<td class='num'>${_esc(_money(it.get('agreed_price')))}</td>"
+            f"<td class='num'>${_esc(_money(it.get('commission_amount')))}</td>"
+            f"<td>{_esc(it.get('status'))}</td>"
+            f"<td>{_esc(it.get('sold_at') or '')}</td>"
+            '</tr>'
+        )
+    title = _esc(tenant_name or 'Nexus Yonke')
+    return f"""<!doctype html>
+<html lang="es"><head><meta charset="utf-8">
+<title>Estado de cuenta - {_esc(statement.get('consignor_name'))}</title>
+<style>{_PRINT_CSS}</style></head><body>
+<div class="actions"><button onclick="window.print()">Imprimir</button></div>
+<h1>Estado de cuenta de consignación</h1>
+<div class="muted">{title} &middot; {period_txt}</div>
+<p><strong>Consignante:</strong> {_esc(statement.get('consignor_name'))}
+   &middot; <strong>Comisión:</strong> {_esc(statement.get('commission_pct'))}%</p>
+<table>
+<thead><tr><th>Código</th><th>Pieza</th><th class="num">Precio acordado</th>
+<th class="num">Comisión</th><th>Estado</th><th>Vendida</th></tr></thead>
+<tbody>{''.join(rows) or '<tr><td colspan="6">Sin movimientos</td></tr>'}</tbody>
+</table>
+<table class="totals">
+<tr><td class="label">Piezas vendidas</td><td class="value">{_esc(totals.get('sold_count'))}</td></tr>
+<tr><td class="label">Total vendido</td><td class="value">${_esc(_money(totals.get('total_sold')))}</td></tr>
+<tr><td class="label">Comisión</td><td class="value">-${_esc(_money(totals.get('total_commission')))}</td></tr>
+<tr><td class="label">A pagar al consignante</td><td class="value">${_esc(_money(totals.get('to_pay')))}</td></tr>
+</table>
+</body></html>"""
+
+
+def piece_label_data(conn, piece):
+    """Resolve the printable label fields for a piece (adds its barcode)."""
+    cur = conn.cursor()
+    cur.execute("SELECT barcode FROM inventory WHERE id = %s", (piece['id'],))
+    row = cur.fetchone()
+    cur.close()
+    code = (row[0] if row else None) or piece.get('part_number') or f"YX-{piece['id']}"
+    donor = ' '.join(str(p) for p in (
+        piece.get('donor_make'), piece.get('donor_model'),
+        piece.get('donor_year') if piece.get('donor_year') is not None else '',
+    ) if p)
+    return {
+        'code': code,
+        'part_number': piece.get('part_number'),
+        'name': piece.get('name'),
+        'price_1': piece.get('price_1'),
+        'condition_grade': piece.get('condition_grade'),
+        'donor_vin': piece.get('donor_vin'),
+        'donor_text': donor,
+        'location': piece.get('location'),
+    }
+
+
+def render_label_html(conn, piece, tenant_name=None):
+    """Printable label HTML with a Code39 barcode, SKU, name, price and donor."""
+    data = piece_label_data(conn, piece)
+    svg = _code39_svg(data['code'])
+    donor_bits = [b for b in (data['donor_text'], data['donor_vin']) if b]
+    title = _esc(tenant_name or 'Nexus Yonke')
+    return f"""<!doctype html>
+<html lang="es"><head><meta charset="utf-8">
+<title>Etiqueta {_esc(data['code'])}</title>
+<style>{_PRINT_CSS}
+.label {{ width: 320px; border: 1px dashed #999; padding: 12px; text-align: center; }}
+.label .code {{ font-family: monospace; font-size: 14px; letter-spacing: 1px; margin-top: 6px; }}
+.label .name {{ font-size: 15px; font-weight: 700; margin: 6px 0; }}
+.label .price {{ font-size: 22px; font-weight: 800; }}
+.label .donor {{ font-size: 11px; color: #555; margin-top: 6px; }}
+.label .meta {{ font-size: 11px; color: #555; }}
+</style></head><body>
+<div class="actions"><button onclick="window.print()">Imprimir</button></div>
+<div class="label">
+  <div class="meta">{title}</div>
+  <div class="barcode">{svg or '&#8203;'}</div>
+  <div class="code">{_esc(data['code'])}</div>
+  <div class="name">{_esc(data['name'])}</div>
+  <div class="price">${_esc(_money(data.get('price_1')))}</div>
+  <div class="meta">Grado {_esc(data.get('condition_grade') or '-')}
+     {('&middot; ' + _esc(data['location'])) if data.get('location') else ''}</div>
+  <div class="donor">{_esc(' '.join(donor_bits))}</div>
+</div>
+</body></html>"""
diff --git a/pos/static/js/app-init.js b/pos/static/js/app-init.js
index fcd20a1..565bb30 100644
--- a/pos/static/js/app-init.js
+++ b/pos/static/js/app-init.js
@@ -44,7 +44,7 @@
     var roleLabels = {
         'owner': _t('role_owner'), 'admin': _t('role_admin'), 'cashier': _t('role_cashier'),
         'warehouse': _t('role_warehouse'), 'accountant': _t('role_accountant'),
-        'workshop': 'Taller', 'mechanic': 'Mecanico'
+        'workshop': 'Taller', 'mechanic': 'Mecanico', 'driver': 'Repartidor'
     };
     var roleLabel = roleLabels[role] || role;
     var initials = name.split(' ').map(function(p) { return p[0]; }).join('').toUpperCase().substring(0, 2);
@@ -199,6 +199,8 @@
             homeHref = '/pos/sale';
         } else if (userRole === 'workshop' && userPerms.indexOf('workshop.view') !== -1 && moduleEnabled('workshop')) {
             homeHref = '/pos/workshop';
+        } else if (userRole === 'driver' && userPerms.indexOf('pos.remission') !== -1) {
+            homeHref = '/pos/remission-notes';
         }
         document.querySelectorAll('a[href="/pos/dashboard"]').forEach(function(a) {
             a.setAttribute('href', homeHref);
@@ -208,8 +210,8 @@
     function isPageAllowed(pagePath, userRole, userPerms) {
         if (userRole === 'owner' || userRole === 'admin') return true;
 
-        // Restricted roles (workshop/mechanic/counter/cashier) see modules based on permissions.
-        if (['workshop', 'mechanic', 'counter', 'cashier'].indexOf(userRole) !== -1) {
+        // Restricted roles (workshop/mechanic/counter/cashier/driver) see modules based on permissions.
+        if (['workshop', 'mechanic', 'counter', 'cashier', 'driver'].indexOf(userRole) !== -1) {
             var allowed = [];
             if ((userRole === 'workshop' || userRole === 'mechanic') && moduleEnabled('workshop')) {
                 allowed = ['/pos/workshop'];
@@ -226,7 +228,8 @@
                 'quotations.view': '/pos/quotations',
                 'accounting.view': '/pos/accounting',
                 'reports.view': '/pos/reports',
-                'dashboard.view': '/pos/dashboard'
+                'dashboard.view': '/pos/dashboard',
+                'yonke.view': '/pos/yonke'
             };
             for (var p in permMap) {
                 if (userPerms.indexOf(p) !== -1 && allowed.indexOf(permMap[p]) === -1) {
@@ -251,7 +254,7 @@
         var fallback = null;
         if (userRole === 'owner' || userRole === 'admin') {
             fallback = '/pos/dashboard';
-        } else if (['workshop', 'mechanic', 'counter', 'cashier'].indexOf(userRole) !== -1) {
+        } else if (['workshop', 'mechanic', 'counter', 'cashier', 'driver'].indexOf(userRole) !== -1) {
             var allowed = [];
             if ((userRole === 'workshop' || userRole === 'mechanic') && moduleEnabled('workshop')) {
                 allowed = ['/pos/workshop'];
@@ -268,7 +271,8 @@
                 'quotations.view': '/pos/quotations',
                 'accounting.view': '/pos/accounting',
                 'reports.view': '/pos/reports',
-                'dashboard.view': '/pos/dashboard'
+                'dashboard.view': '/pos/dashboard',
+                'yonke.view': '/pos/yonke'
             };
             for (var p in permMap) {
                 if (userPerms.indexOf(p) !== -1 && allowed.indexOf(permMap[p]) === -1) {
@@ -350,13 +354,18 @@
         backBtn.style.display = 'none';
     })();
 
-    // ─── Service Worker update handler ───
+    // ─── Service Worker update handler (patrón controllerchange) ───
+    // Recarga SOLO cuando el SW que controlaba esta página fue reemplazado
+    // (deploy con assets nuevos). La primera activación (sin controlador
+    // previo) NO recarga — así se elimina el doble refresh al cambiar de
+    // pestaña tras cada deploy.
+    var _hadSwController = !!navigator.serviceWorker.controller;
+    var _swRefreshing = false;
     if ('serviceWorker' in navigator) {
-        navigator.serviceWorker.addEventListener('message', function (event) {
-            if (event.data && event.data.type === 'SW_UPDATED') {
-                console.log('[AppInit] SW updated to', event.data.cacheName, '— reloading...');
-                window.location.reload();
-            }
+        navigator.serviceWorker.addEventListener('controllerchange', function () {
+            if (!_hadSwController || _swRefreshing) return;
+            _swRefreshing = true;
+            window.location.reload();
         });
     }
 
diff --git a/pos/static/js/brand-catalog.js b/pos/static/js/brand-catalog.js
index 5eeac00..009454e 100644
--- a/pos/static/js/brand-catalog.js
+++ b/pos/static/js/brand-catalog.js
@@ -320,7 +320,7 @@
       this.setSearch('');
       this.buildBreadcrumb();
       var self = this;
-      fetch('/pos/api/catalog/categories?mye_id=' + encodeURIComponent(myeId) + '&mode=oem', { headers: this._headers() })
+      fetch('/pos/api/catalog/categories?mye_id=' + encodeURIComponent(myeId) + '&mode=local', { headers: this._headers() })
         .then(function(r) {
           if (!self._checkAuth(r)) return null;
           return r.json();
diff --git a/pos/static/js/config.js b/pos/static/js/config.js
index ac8483e..9fa6339 100644
--- a/pos/static/js/config.js
+++ b/pos/static/js/config.js
@@ -112,7 +112,8 @@ const Config = (() => {
         warehouse: 'Almacenista',
         accountant: 'Contador',
         workshop: 'Taller',
-        mechanic: 'Mecanico'
+        mechanic: 'Mecanico',
+        driver: 'Repartidor'
     };
 
     var ROLE_BADGE = {
@@ -123,7 +124,8 @@ const Config = (() => {
         warehouse: 'badge--yellow',
         accountant: 'badge--purple',
         workshop: 'badge--orange',
-        mechanic: 'badge--teal'
+        mechanic: 'badge--teal',
+        driver: 'badge--gray'
     };
 
     function roleBadge(role) {
@@ -513,6 +515,15 @@ const Config = (() => {
             setChecked('receipt-show-iva', d.show_iva_breakdown);
             setChecked('receipt-show-payment', d.show_payment_details);
             setChecked('receipt-show-employee', d.show_employee);
+            setChecked('receipt-auto-print', d.auto_print);
+            fetch(API + '/invoice-settings', { headers: headers() }).then(function (r) { return r.json(); }).then(function (s) {
+                var a = document.getElementById('cfg-invoice-auto');
+                var b = document.getElementById('cfg-invoice-email');
+                var c = document.getElementById('cfg-invoice-global');
+                if (a) a.checked = !!s.invoice_auto;
+                if (b) b.checked = !!s.invoice_email;
+                if (c) c.checked = !!s.invoice_global;
+            }).catch(function () {});
             renderReceiptLogoThumb();
         } catch (e) {
             console.error('Config.loadReceiptConfig:', e);
@@ -599,13 +610,26 @@ const Config = (() => {
             show_iva_breakdown: getChecked('receipt-show-iva'),
             show_payment_details: getChecked('receipt-show-payment'),
             show_employee: getChecked('receipt-show-employee'),
+            invoice_auto: document.getElementById('cfg-invoice-auto') ? document.getElementById('cfg-invoice-auto').checked : undefined,
+            invoice_email: document.getElementById('cfg-invoice-email') ? document.getElementById('cfg-invoice-email').checked : undefined,
+            invoice_global: document.getElementById('cfg-invoice-global') ? document.getElementById('cfg-invoice-global').checked : undefined,
+            auto_print: getChecked('receipt-auto-print'),
         };
         try {
+            var inv = {};
+            ['invoice_auto', 'invoice_email', 'invoice_global'].forEach(function (k) {
+                if (data[k] !== undefined) { inv[k] = data[k]; delete data[k]; }
+            });
             var res = await fetch(API + '/receipt', {
                 method: 'PUT',
                 headers: headers(),
                 body: JSON.stringify(data),
             });
+            if (Object.keys(inv).length) {
+                await fetch(API + '/invoice-settings', {
+                    method: 'PUT', headers: headers(), body: JSON.stringify(inv),
+                });
+            }
             if (!res.ok) {
                 var err = await res.json().catch(function() { return { error: res.statusText }; });
                 throw new Error(err.error || 'Error al guardar');
@@ -628,6 +652,7 @@ const Config = (() => {
             await saveAllowedBrands();
             await saveModules();
             await saveSalesSettings();
+            await saveAlertContacts();
             await saveReceiptConfig();
             toast('Configuración guardada', 'ok');
         } catch (e) {
@@ -842,6 +867,53 @@ const Config = (() => {
         }
     }
 
+    // -------------------------------------------------------------------------
+    // Tier Discounts (Taller / Mayoreo)
+    // -------------------------------------------------------------------------
+    async function loadTierDiscounts() {
+        try {
+            var res = await fetch('/pos/api/inventory/tier-discounts', { headers: headers() });
+            if (!res.ok) return;
+            var d = await res.json();
+            (d.data || []).forEach(function(t) {
+                var el = document.getElementById('cfg-tier-disc-' + t.tier_id);
+                if (el) el.value = t.discount_pct;
+            });
+        } catch (e) {
+            console.error('Config.loadTierDiscounts:', e);
+        }
+    }
+
+    async function saveTierDiscounts() {
+        var el2 = document.getElementById('cfg-tier-disc-2');
+        var el3 = document.getElementById('cfg-tier-disc-3');
+        var statusEl = document.getElementById('tier-discount-status');
+        var btn = document.getElementById('btn-save-tier-discounts');
+        if (!el2 || !el3) return;
+
+        var d2 = Math.max(0, Math.min(100, parseFloat(el2.value) || 0));
+        var d3 = Math.max(0, Math.min(100, parseFloat(el3.value) || 0));
+
+        if (btn) { btn.disabled = true; btn.textContent = 'Guardando...'; }
+        try {
+            var res = await fetch('/pos/api/inventory/tier-discounts', {
+                method: 'PUT',
+                headers: headers(),
+                body: JSON.stringify({ discount_pct_2: d2, discount_pct_3: d3 })
+            });
+            if (!res.ok) {
+                var err = await res.json().catch(function() { return { error: res.statusText }; });
+                throw new Error(err.error || 'Save failed');
+            }
+            toast('Descuentos por tipo de cliente guardados');
+            if (statusEl) statusEl.textContent = 'Taller -' + d2 + '% · Mayoreo -' + d3 + '%';
+        } catch (e) {
+            toast(e.message, 'error');
+        } finally {
+            if (btn) { btn.disabled = false; btn.textContent = 'Guardar Descuentos'; }
+        }
+    }
+
     // -------------------------------------------------------------------------
     // Vehicle Compatibility Source
     // -------------------------------------------------------------------------
@@ -1059,6 +1131,50 @@ const Config = (() => {
         }
     }
 
+    // -------------------------------------------------------------------------
+    // Alert contacts (per-business WhatsApp alerts)
+    // -------------------------------------------------------------------------
+    async function loadAlertContacts() {
+        try {
+            var res = await fetch(API + '/alert-contacts', { headers: headers() });
+            if (!res.ok) return;
+            var data = await res.json();
+            var input = document.getElementById('alert-phones');
+            if (input) input.value = (data.alert_phones || []).join(', ');
+            var cb = document.getElementById('cfg-alert-whatsapp-enabled');
+            if (cb) cb.checked = data.alert_whatsapp_enabled === true;
+        } catch (e) {
+            console.error('Config.loadAlertContacts:', e);
+        }
+    }
+
+    async function saveAlertContacts() {
+        if (!checkAuth()) return;
+        var input = document.getElementById('alert-phones');
+        var cb = document.getElementById('cfg-alert-whatsapp-enabled');
+        if (!input && !cb) return;
+        var btn = document.getElementById('btn-save-alert-contacts');
+        if (btn) { btn.disabled = true; btn.textContent = 'Guardando...'; }
+        try {
+            var res = await fetch(API + '/alert-contacts', {
+                method: 'PUT',
+                headers: headers(),
+                body: JSON.stringify({
+                    alert_phones: input ? input.value : '',
+                    alert_whatsapp_enabled: cb ? cb.checked : false,
+                }),
+            });
+            var data = await res.json().catch(function() { return { error: res.statusText }; });
+            if (!res.ok) throw new Error(data.error || 'Error al guardar');
+            if (input) input.value = (data.alert_phones || []).join(', ');
+            toast('Contactos de alerta guardados', 'ok');
+        } catch (e) {
+            toast(e.message, 'error');
+        } finally {
+            if (btn) { btn.disabled = false; btn.textContent = 'Guardar alertas'; }
+        }
+    }
+
     // -------------------------------------------------------------------------
     // Tab navigation
     // -------------------------------------------------------------------------
@@ -1293,6 +1409,12 @@ const Config = (() => {
             btnBrands.addEventListener('click', saveAllowedBrands);
         }
 
+        // Alert contacts save button (per-business WhatsApp alerts)
+        var btnAlertContacts = document.getElementById('btn-save-alert-contacts');
+        if (btnAlertContacts) {
+            btnAlertContacts.addEventListener('click', saveAlertContacts);
+        }
+
         // Kiosk mode toggle
         var kioskToggle = document.getElementById('cfg-kiosk-mode');
         if (kioskToggle && window.NexusKiosk) {
@@ -1322,7 +1444,9 @@ const Config = (() => {
         loadAllowedBrands();
         loadModules();
         loadSalesSettings();
+        loadAlertContacts();
         loadReceiptConfig();
+        loadTierDiscounts();
         if (isAdmin) {
             loadRolePermissions();
             loadWorkshopPermissions();
@@ -1353,8 +1477,10 @@ const Config = (() => {
         deleteBranch,
         loadBusiness, saveBusiness, saveTaxParams, saveAll,
         loadCurrency, saveCurrency,
+        loadTierDiscounts, saveTierDiscounts,
         loadVehicleCompatSource, saveVehicleCompatSource,
         loadModules, saveModules,
+        loadAlertContacts, saveAlertContacts,
         loadReceiptConfig, saveReceiptConfig, handleReceiptLogo, removeReceiptLogo,
         openModal, closeModal, openBranchModal, editBranch,
         switchTab, loadRolePermissions, renderRolePermissions, saveRolePermissions,
diff --git a/pos/static/js/customers.js b/pos/static/js/customers.js
index f164cbd..bf16c62 100644
--- a/pos/static/js/customers.js
+++ b/pos/static/js/customers.js
@@ -30,6 +30,10 @@ const Customers = (() => {
         return '$' + n.toFixed(0);
     };
 
+    const esc = (s) => String(s == null ? '' : s)
+        .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+
     function headers() {
         return { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + getToken() };
     }
@@ -281,6 +285,7 @@ const Customers = (() => {
             set('detailEmail', c.email);
             set('detailSince', formatDate(c.created_at));
             set('detailLastPurchase', formatDate(c.last_purchase));
+            if (typeof loadCustomerCRM === 'function') loadCustomerCRM(c.id);
 
             // Credit
             const limit = parseFloat(c.credit_limit || 0);
@@ -733,6 +738,137 @@ const Customers = (() => {
         if (typeof openSlidePanel === 'function') openSlidePanel();
     }
 
+
+    // ─── CRM & Loyalty ───────────────────────
+    async function loadCustomerCRM(customerId) {
+        try {
+            const [loy, acts, analytics, creditScore] = await Promise.all([
+                api(`/pos/api/customers/${customerId}/loyalty`),
+                api(`/pos/api/customers/${customerId}/activities`).catch(() => ({ data: [] })),
+                api(`/pos/api/customers/${customerId}/analytics`).catch(() => null),
+                api(`/pos/api/customers/${customerId}/credit-score`).catch(() => null),
+            ]);
+            const balEl = document.getElementById('crmLoyaltyBalance');
+            if (balEl) balEl.textContent = (loy.balance != null ? loy.balance : 0);
+            const actsEl = document.getElementById('crmActivities');
+            if (actsEl) {
+                const list = acts.data || acts.activities || [];
+                if (!list.length) {
+                    actsEl.innerHTML = '<span style="color:var(--color-text-muted);font-size:var(--text-caption);">Sin actividad registrada</span>';
+                } else {
+                    actsEl.innerHTML = list.slice(0, 20).map(a =>
+                        `<div style="border:1px solid var(--color-border);border-radius:var(--radius-md);padding:var(--space-2);">
+                            <div style="font-size:var(--text-caption);color:var(--color-text-muted);">${esc(a.created_at || '')} · ${esc(a.activity_type || '')}</div>
+                            <div style="font-size:var(--text-body-sm);">${esc(a.description || a.title || '')}</div>
+                        </div>`).join('');
+                }
+            }
+            renderCustomerInsights(analytics, creditScore);
+        } catch (e) {
+            console.warn('CRM load failed:', e);
+        }
+    }
+    window.loadCustomerCRM = loadCustomerCRM;
+
+    // Renders analytics (LTV, next purchase, churn) + credit risk score into
+    // the CRM section of the customer detail panel. All values come from the
+    // backend; missing data is shown as "—" rather than guessed.
+    function renderCustomerInsights(analytics, creditScore) {
+        const section = document.getElementById('crmSection');
+        if (!section) return;
+        let el = document.getElementById('crmInsights');
+        if (!el) {
+            el = document.createElement('div');
+            el.id = 'crmInsights';
+            el.style.cssText = 'display:grid;grid-template-columns:repeat(2,1fr);gap:var(--space-2);' +
+                'margin-bottom:var(--space-3);';
+            const actsEl = document.getElementById('crmActivities');
+            section.insertBefore(el, actsEl || null);
+        }
+        if (!analytics && !creditScore) { el.innerHTML = ''; return; }
+
+        const card = (label, value, sub, color) =>
+            `<div style="border:1px solid var(--color-border);border-radius:var(--radius-md);padding:var(--space-2);">
+                <div style="font-size:var(--text-caption);color:var(--color-text-muted);text-transform:uppercase;letter-spacing:var(--tracking-wider);">${esc(label)}</div>
+                <div style="font-size:var(--text-body-sm);font-weight:700;color:${color || 'var(--color-text-primary)'};">${value}</div>
+                ${sub ? `<div style="font-size:var(--text-caption);color:var(--color-text-muted);">${sub}</div>` : ''}
+            </div>`;
+
+        const cards = [];
+        const a = analytics || {};
+
+        cards.push(card('Valor de vida (LTV)', fmt(a.ltv),
+            `${(a.total_orders || 0)} compras · ticket ${fmt(a.avg_order_value)}`));
+
+        cards.push(card('Intervalo de compra',
+            (a.avg_days_between_purchases != null && a.avg_days_between_purchases > 0)
+                ? `${a.avg_days_between_purchases} días` : '—',
+            (a.days_since_last_purchase != null)
+                ? `Última hace ${a.days_since_last_purchase} días` : 'Sin compras'));
+
+        let nextSub = '';
+        if (a.days_until_next_purchase != null) {
+            nextSub = a.days_until_next_purchase >= 0
+                ? `En ${a.days_until_next_purchase} días`
+                : `Vencida hace ${Math.abs(a.days_until_next_purchase)} días`;
+        }
+        cards.push(card('Próxima compra probable',
+            a.predicted_next_purchase_date ? formatDate(a.predicted_next_purchase_date) : '—',
+            nextSub));
+
+        const riskColor = a.churn_risk === 'high' ? 'var(--color-error)'
+            : a.churn_risk === 'medium' ? '#d97706' : 'var(--color-success, #16a34a)';
+        const riskLabel = a.churn_risk === 'high' ? 'Alto' : a.churn_risk === 'medium' ? 'Medio' : 'Bajo';
+        const probTxt = (a.churn_probability != null) ? ` (${Math.round(a.churn_probability * 100)}%)` : '';
+        cards.push(card('Riesgo de abandono (churn)',
+            `<span style="color:${riskColor};">${riskLabel}${probTxt}</span>`,
+            esc(a.churn_reason || '')));
+
+        if (creditScore && creditScore.score != null) {
+            const tierMap = { good: 'Bueno', medium: 'Medio', risk: 'Riesgo' };
+            const tierColor = creditScore.tier === 'good' ? 'var(--color-success, #16a34a)'
+                : creditScore.tier === 'medium' ? '#d97706' : 'var(--color-error)';
+            const reasons = (creditScore.reasons || []).slice(0, 2).map(esc).join(' · ');
+            cards.push(card('Score de crédito',
+                `<span style="color:${tierColor};">${creditScore.score}/100 · ${esc(tierMap[creditScore.tier] || creditScore.tier)}</span>`,
+                `Límite sugerido ${fmt(creditScore.recommended_limit)} · ${esc(creditScore.data_points)} señales` +
+                (reasons ? `<br>${reasons}` : '')));
+        }
+
+        el.innerHTML = cards.join('');
+    }
+
+    async function crmRedeem() {
+        if (!currentCustomer) return;
+        const pts = prompt('Puntos a canjear:');
+        if (!pts) return;
+        try {
+            await api(`/pos/api/customers/${currentCustomer.id}/loyalty/redeem`, {
+                method: 'POST',
+                body: JSON.stringify({ points: parseInt(pts, 10) }),
+            });
+            alert('Canje registrado');
+            loadCustomerCRM(currentCustomer.id);
+        } catch (e) {
+            alert('Error: ' + e.message);
+        }
+    }
+
+    async function crmAddNote() {
+        if (!currentCustomer) return;
+        const note = prompt('Nota sobre el cliente:');
+        if (!note) return;
+        try {
+            await api(`/pos/api/customers/${currentCustomer.id}/activities`, {
+                method: 'POST',
+                body: JSON.stringify({ activity_type: 'note', description: note }),
+            });
+            loadCustomerCRM(currentCustomer.id);
+        } catch (e) {
+            alert('Error: ' + e.message);
+        }
+    }
+
     // ─── Init ────────────────────────────
     function init() {
         // Auth check
@@ -1011,6 +1147,8 @@ const Customers = (() => {
         }
     };
 
+    publicApi.crmRedeem = crmRedeem;
+    publicApi.crmAddNote = crmAddNote;
     // Expose globally for inline HTML onclick handlers
     window.Customers = publicApi;
     return publicApi;
diff --git a/pos/static/js/inventory.js b/pos/static/js/inventory.js
index 4d78501..0137dee 100644
--- a/pos/static/js/inventory.js
+++ b/pos/static/js/inventory.js
@@ -529,7 +529,8 @@
             headers: {
                 'Authorization': 'Bearer ' + getToken(),
                 'X-Import-Mode': mode,
-                'X-Import-Strategy': strategy
+                'X-Import-Strategy': strategy,
+                'X-Import-Stock': (document.getElementById('bulkImportSkipStock') || {}).checked ? 'skip' : 'add'
             },
             body: formData
         }).then(function(resp) { return resp.json(); }).then(function(data) {
@@ -579,6 +580,70 @@
     }
     window.downloadBulkImportTemplate = downloadBulkImportTemplate;
 
+    // --- Full inventory export (server-side CSV) ---
+    function loadExportBranches() {
+        var sel = document.getElementById('exportBranch');
+        if (!sel) return;
+        fetch('/pos/api/config/branches', {
+            headers: { 'Authorization': 'Bearer ' + getToken() }
+        }).then(function(resp) { return resp.ok ? resp.json() : {}; })
+          .then(function(data) {
+              var branches = data.data || data.branches || [];
+              branches.forEach(function(b) {
+                  var opt = document.createElement('option');
+                  opt.value = b.id;
+                  opt.textContent = b.name;
+                  sel.appendChild(opt);
+              });
+          }).catch(function() { /* selector queda solo con "todas" */ });
+    }
+    loadExportBranches();
+
+    function exportFullInventory() {
+        var btn = document.getElementById('btnExportFull');
+        var branchSel = document.getElementById('exportBranch');
+        var branchId = branchSel ? branchSel.value : '';
+        var url = API + '/export' + (branchId ? ('?branch_id=' + encodeURIComponent(branchId)) : '');
+        if (btn) { btn.disabled = true; btn.textContent = '⏳ Generando CSV...'; }
+        fetch(url, {
+            headers: { 'Authorization': 'Bearer ' + getToken() }
+        }).then(function(resp) {
+            if (!resp.ok) {
+                return resp.json().catch(function() { return {}; }).then(function(err) {
+                    throw new Error(err.error || ('Error ' + resp.status));
+                });
+            }
+            var disposition = resp.headers.get('Content-Disposition') || '';
+            var match = disposition.match(/filename="?([^";]+)"?/);
+            var filename = match ? match[1] : 'inventario_completo.csv';
+            return resp.blob().then(function(blob) { return { blob: blob, filename: filename }; });
+        }).then(function(result) {
+            var url = URL.createObjectURL(result.blob);
+            var a = document.createElement('a');
+            a.href = url;
+            a.download = result.filename;
+            document.body.appendChild(a);
+            a.click();
+            document.body.removeChild(a);
+            URL.revokeObjectURL(url);
+            document.getElementById('exportModal').classList.remove('is-open');
+            showToast('Inventario completo descargado', 'ok');
+        }).catch(function(err) {
+            showToast('Error al exportar: ' + esc(err.message), 'error');
+        }).finally(function() {
+            if (btn) { btn.disabled = false; btn.textContent = '📦 Inventario completo (CSV)'; }
+        });
+    }
+    window.exportFullInventory = exportFullInventory;
+
+    function exportCurrentView() {
+        document.getElementById('exportModal').classList.remove('is-open');
+        if (typeof window.exportVisibleTableCSV === 'function') {
+            window.exportVisibleTableCSV('inventario');
+        }
+    }
+    window.exportCurrentView = exportCurrentView;
+
     // =====================================================================
     //  PURCHASE / ENTRADA  (purchaseModal)
     // =====================================================================
@@ -786,43 +851,208 @@
     //  TRANSFER / TRASPASO  (transferModal)
     // =====================================================================
 
+    var transferLines = [];
+    var transferDocOpen = null;
+
     function showTransferModal() {
         document.getElementById('transferModal').classList.add('is-open');
+        loadTransferBranches();
+        renderTransferLines();
+        loadTransferDocs();
+        setTimeout(function () { var el = document.getElementById('transferScan'); if (el) el.focus(); }, 100);
     }
     function closeTransferModal() {
         document.getElementById('transferModal').classList.remove('is-open');
         document.getElementById('transferResult').innerHTML = '';
     }
+    window.showTransferModal = showTransferModal;
+    window.closeTransferModal = closeTransferModal;
+    window.transferAddByCode = transferAddByCode;
+    window.countAddByCode = countAddByCode;
 
-    function recordTransfer() {
-        var data = {
-            inventory_id: parseInt(document.getElementById('transferItemId').value),
-            from_branch_id: parseInt(document.getElementById('transferFrom').value),
-            to_branch_id: parseInt(document.getElementById('transferTo').value),
-            quantity: parseInt(document.getElementById('transferQty').value),
-            notes: document.getElementById('transferNotes').value.trim()
-        };
-        if (!data.inventory_id || !data.from_branch_id || !data.to_branch_id || !data.quantity) {
-            document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">Complete todos los campos</span>';
+    function switchTransferTab(tab) {
+        document.getElementById('tr-panel-new').style.display = tab === 'new' ? '' : 'none';
+        document.getElementById('tr-panel-list').style.display = tab === 'list' ? '' : 'none';
+        document.getElementById('tr-tab-new').classList.toggle('active', tab === 'new');
+        document.getElementById('tr-tab-list').classList.toggle('active', tab === 'list');
+        document.getElementById('transferNewFooter').style.display = tab === 'new' ? 'flex' : 'none';
+        if (tab === 'list') loadTransferDocs();
+    }
+
+    function loadTransferBranches() {
+        fetch('/pos/api/config/branches', { headers: { 'Authorization': 'Bearer ' + getToken() } })
+            .then(function (r) { return r.json(); })
+            .then(function (d) {
+                var sel = document.getElementById('transferTo');
+                sel.innerHTML = '<option value="">-- Seleccionar --</option>';
+                (d.data || []).forEach(function (b) {
+                    sel.innerHTML += '<option value="' + b.id + '">' + esc(b.name) + '</option>';
+                });
+            }).catch(function () {});
+    }
+
+    function renderTransferLines() {
+        var el = document.getElementById('transferLines');
+        if (!transferLines.length) {
+            el.innerHTML = '<p style="padding:10px;color:var(--color-text-muted);font-size:var(--text-caption);">Escanea o busca productos para agregarlos</p>';
             return;
         }
-        apiFetch(API + '/transfer', { method: 'POST', body: JSON.stringify(data) }).then(function (result) {
-            if (result && result.out_operation_id) {
-                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-success);">Transferencia registrada</span>';
-                closeTransferModal();
-                ['transferItemId','transferFrom','transferTo','transferQty','transferNotes'].forEach(function(id) {
-                    var el = document.getElementById(id);
-                    if (el) el.value = '';
-                });
-                if (window.loadInventoryStats) window.loadInventoryStats();
-                if (window.loadOperations) window.loadOperations('traspasos', 1);
-                loadItems(currentPage);
-            } else {
-                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">' + (result ? result.error || 'Error' : 'Error de red') + '</span>';
+        el.innerHTML = transferLines.map(function (l, i) {
+            return '<div style="display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:1px solid var(--color-border);">'
+                + '<span style="flex:1;font-size:var(--text-body-sm);">' + esc(l.name) + ' <span style="font-family:var(--font-mono);color:var(--color-text-muted);">' + esc(l.part_number) + '</span> · Stock origen: ' + l.stock + '</span>'
+                + '<input type="number" min="1" value="' + l.quantity + '" onchange="Inventory.transferLineQty(' + i + ', this.value)" style="width:80px;" class="form-input" />'
+                + '<button class="btn btn--ghost btn--sm" onclick="Inventory.transferLineRemove(' + i + ')">✕</button>'
+                + '</div>';
+        }).join('');
+    }
+
+    function transferAddByCode(code) {
+        apiFetch(API + '/items/lookup?code=' + encodeURIComponent(code))
+            .then(function (d) {
+                if (!d || !d.found) {
+                    document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">Código no encontrado: ' + esc(code) + '</span>';
+                    return;
+                }
+                var it = d.item;
+                var existing = transferLines.find(function (l) { return l.inventory_id === it.id; });
+                if (existing) existing.quantity += 1;
+                else transferLines.push({ inventory_id: it.id, part_number: it.part_number, name: it.name, stock: it.stock, quantity: 1 });
+                renderTransferLines();
+            }).catch(function () {
+                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">Error de búsqueda</span>';
+            });
+    }
+
+    function transferLineQty(i, v) {
+        transferLines[i].quantity = Math.max(1, parseInt(v, 10) || 1);
+    }
+    function transferLineRemove(i) {
+        transferLines.splice(i, 1);
+        renderTransferLines();
+    }
+
+    function transferDocSave(andSend) {
+        var toBranch = parseInt(document.getElementById('transferTo').value);
+        if (!toBranch) { alert('Selecciona sucursal destino'); return; }
+        if (!transferLines.length) { alert('Agrega al menos un producto'); return; }
+        apiFetch(API + '/transfer-docs', {
+            method: 'POST',
+            body: JSON.stringify({
+                to_branch_id: toBranch,
+                notes: document.getElementById('transferNotes').value.trim(),
+                items: transferLines.map(function (l) {
+                    return { inventory_id: l.inventory_id, quantity: l.quantity };
+                }),
+            })
+        }).then(function (d) {
+            if (!d || !d.id) throw new Error(d ? d.error || 'Error' : 'Error de red');
+            if (!andSend) {
+                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-success);">Borrador #' + d.id + ' guardado</span>';
+                transferLines = [];
+                renderTransferLines();
+                return;
             }
+            return apiFetch(API + '/transfer-docs/' + d.id + '/send', { method: 'POST', body: '{}' })
+                .then(function (s) {
+                    document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-success);">Transferencia #' + d.id + ' enviada</span>';
+                    transferLines = [];
+                    renderTransferLines();
+                    if (window.loadInventoryStats) window.loadInventoryStats();
+                });
+        }).catch(function (e) {
+            document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
         });
     }
 
+    function loadTransferDocs() {
+        apiFetch(API + '/transfer-docs').then(function (d) {
+            var docs = (d && d.data) || [];
+            var el = document.getElementById('transferDocsList');
+            if (!docs.length) {
+                el.innerHTML = '<p style="padding:10px;color:var(--color-text-muted);font-size:var(--text-caption);">Sin transferencias registradas</p>';
+                return;
+            }
+            var statusColor = { draft: 'var(--color-text-muted)', sent: 'var(--color-warning)', received: 'var(--color-success)', cancelled: 'var(--color-error)' };
+            el.innerHTML = docs.map(function (t) {
+                return '<div style="display:flex;align-items:center;gap:10px;padding:10px;border-bottom:1px solid var(--color-border);cursor:pointer;" onclick="Inventory.openTransferDoc(' + t.id + ')">'
+                    + '<div style="flex:1;"><strong>#' + t.id + '</strong> ' + esc(t.from_name) + ' → ' + esc(t.to_name)
+                    + ' <span style="color:' + (statusColor[t.status] || 'auto') + ';font-weight:600;">[' + t.status + ']</span>'
+                    + '<div style="font-size:var(--text-caption);color:var(--color-text-muted);">' + t.total_qty + ' piezas · ' + (t.created_at || '').slice(0, 16).replace('T', ' ') + '</div></div>'
+                    + '<span style="color:var(--color-text-muted);">›</span></div>';
+            }).join('');
+        });
+    }
+
+    function openTransferDoc(id) {
+        apiFetch(API + '/transfer-docs/' + id).then(function (d) {
+            switchTransferTab('new');
+            document.getElementById('tr-panel-new').style.display = 'none';
+            document.getElementById('tr-panel-list').style.display = '';
+            transferDocOpen = d;
+            var el = document.getElementById('transferDocsList');
+            var html = '<div style="padding:10px;"><button class="btn btn--ghost btn--sm" onclick="Inventory.switchTransferTab(\'list\')">← Volver</button></div>';
+            html += '<div style="padding:0 10px;"><strong>#' + d.id + '</strong> ' + esc(d.from_name) + ' → ' + esc(d.to_name)
+                + ' <span style="font-weight:600;">[' + d.status + ']</span></div>';
+            html += '<div style="padding:10px;">';
+            d.lines.forEach(function (l) {
+                html += '<div style="display:flex;align-items:center;gap:8px;padding:6px 0;border-bottom:1px solid var(--color-border);">'
+                    + '<span style="flex:1;font-size:var(--text-body-sm);">' + esc(l.name) + ' <span style="font-family:var(--font-mono);color:var(--color-text-muted);">' + esc(l.part_number) + '</span></span>'
+                    + '<span>Env: ' + l.quantity + '</span>';
+                if (d.status === 'sent') {
+                    html += '<label style="font-size:var(--text-caption);">Recibido:</label>'
+                        + '<input type="number" min="0" max="' + l.quantity + '" value="' + l.qty_received + '" id="tr-rec-' + l.id + '" class="form-input" style="width:70px;" />';
+                } else {
+                    html += '<span>Rec: ' + l.qty_received + '</span>';
+                }
+                html += '</div>';
+            });
+            html += '</div>';
+            html += '<div style="padding:0 10px 10px;">';
+            if (d.status === 'draft') {
+                html += '<button class="btn btn--primary" onclick="Inventory.transferDocSend(' + d.id + ')">Enviar (descontar origen)</button> ';
+            }
+            if (d.status === 'sent') {
+                html += '<button class="btn btn--primary" onclick="Inventory.transferDocReceive(' + d.id + ')" style="background:var(--color-success);">Confirmar recepción</button> ';
+            }
+            if (d.status === 'draft') {
+                html += '<button class="btn btn--ghost" onclick="Inventory.transferDocCancel(' + d.id + ')" style="color:var(--color-error);">Cancelar</button>';
+            }
+            html += '</div><div id="transferResult" style="padding:0 10px;min-height:1.5em;"></div>';
+            el.innerHTML = html;
+        });
+    }
+
+    function transferDocSend(id) {
+        apiFetch(API + '/transfer-docs/' + id + '/send', { method: 'POST', body: '{}' })
+            .then(function (r) {
+                if (r && r.ok) { if (window.loadInventoryStats) window.loadInventoryStats(); openTransferDoc(id); }
+                else alert((r && r.error) || 'Error');
+            });
+    }
+
+    function transferDocReceive(id) {
+        var received = {};
+        document.querySelectorAll('[id^="tr-rec-"]').forEach(function (inp) {
+            var lineId = parseInt(inp.id.replace('tr-rec-', ''), 10);
+            received[lineId] = parseInt(inp.value, 10) || 0;
+        });
+        apiFetch(API + '/transfer-docs/' + id + '/receive', {
+            method: 'POST', body: JSON.stringify({ received: received })
+        }).then(function (r) {
+            if (r && r.ok) {
+                alert('Recepción confirmada' + (r.differences ? ' — ' + r.differences + ' diferencia(s) ajustadas en destino' : ''));
+                if (window.loadInventoryStats) window.loadInventoryStats();
+                loadItems(currentPage);
+                openTransferDoc(id);
+            } else alert((r && r.error) || 'Error');
+        });
+    }
+
+    function transferDocCancel(id) {
+        if (!confirm('¿Cancelar el borrador de transferencia?')) return;
+        apiFetch(API + '/transfer-docs/' + id + '/cancel', { method: 'POST', body: '{}' })
+            .then(function () { loadTransferDocs(); });
+    }
     // =====================================================================
     //  OPERATIONS LIST (Entradas, Salidas, Traspasos, Ajustes)
     // =====================================================================
@@ -939,26 +1169,64 @@
         document.getElementById('countModal').classList.remove('is-open');
     }
 
+    var countRows = [];
+
     function addCountLine() {
-        var container = document.getElementById('countLines');
-        var row = document.createElement('div');
-        row.className = 'count-row';
-        row.innerHTML =
-            '<input type="number" placeholder="ID producto" class="count-inv-id" style="width:140px;" />' +
-            '<input type="number" placeholder="Cantidad contada" class="count-qty" style="width:160px;" />' +
-            '<button class="btn btn--ghost btn--sm" onclick="this.parentElement.remove()">Quitar</button>';
-        container.appendChild(row);
+        var input = document.getElementById('countScanInput');
+        if (input) input.focus();
+    }
+
+    function countAddByCode(code, qty) {
+        apiFetch(API + '/items/lookup?code=' + encodeURIComponent(code))
+            .then(function (d) {
+                if (!d || !d.found) {
+                    alert('Código no encontrado: ' + code);
+                    return;
+                }
+                var it = d.item;
+                var row = countRows.find(function (r) { return r.inventory_id === it.id; });
+                if (row) row.counted_quantity += (qty || 1);
+                else countRows.push({
+                    inventory_id: it.id, part_number: it.part_number, name: it.name,
+                    expected: it.stock, counted_quantity: (qty || 1),
+                });
+                renderCountRows();
+            });
+    }
+
+    function renderCountRows() {
+        var el = document.getElementById('countLines');
+        if (!countRows.length) {
+            el.innerHTML = '<p style="padding:10px;color:var(--color-text-muted);font-size:var(--text-caption);">Sin productos escaneados</p>';
+            return;
+        }
+        el.innerHTML = countRows.map(function (r, i) {
+            var diff = r.counted_quantity - r.expected;
+            var color = diff === 0 ? 'var(--color-success)' : (diff < 0 ? 'var(--color-error)' : 'var(--color-warning)');
+            return '<div style="display:flex;align-items:center;gap:8px;padding:8px 10px;border-bottom:1px solid var(--color-border);">'
+                + '<span style="flex:1;font-size:var(--text-body-sm);">' + esc(r.name) + ' <span style="font-family:var(--font-mono);color:var(--color-text-muted);">' + esc(r.part_number) + '</span></span>'
+                + '<span style="font-size:var(--text-caption);color:var(--color-text-muted);">Esp: ' + r.expected + '</span>'
+                + '<input type="number" min="0" value="' + r.counted_quantity + '" onchange="Inventory.countQty(' + i + ', this.value)" class="form-input" style="width:80px;" />'
+                + '<span style="width:60px;text-align:right;color:' + color + ';font-weight:600;">' + (diff > 0 ? '+' : '') + diff + '</span>'
+                + '<button class="btn btn--ghost btn--sm" onclick="Inventory.countRemove(' + i + ')">✕</button>'
+                + '</div>';
+        }).join('');
+    }
+
+    function countQty(i, v) {
+        countRows[i].counted_quantity = Math.max(0, parseInt(v, 10) || 0);
+        renderCountRows();
+    }
+    function countRemove(i) {
+        countRows.splice(i, 1);
+        renderCountRows();
     }
 
     function startPhysicalCount() {
-        var rows = document.querySelectorAll('#countLines .count-row');
-        var items = [];
-        rows.forEach(function (row) {
-            var invId = parseInt(row.querySelector('.count-inv-id').value);
-            var qty = parseInt(row.querySelector('.count-qty').value);
-            if (invId && !isNaN(qty)) items.push({ inventory_id: invId, counted_quantity: qty });
+        var items = countRows.map(function (r) {
+            return { inventory_id: r.inventory_id, counted_quantity: r.counted_quantity };
         });
-        if (!items.length) { alert('Agregue al menos una linea'); return; }
+        if (!items.length) { alert('Escanea al menos un producto'); return; }
 
         apiFetch(API + '/physical-count/start', { method: 'POST', body: JSON.stringify({ items: items }) }).then(function (result) {
             if (!result || !result.count_id) {
@@ -974,644 +1242,14 @@
                 html += '<tr><td>' + r.inventory_id + '</td><td>' + r.expected + '</td><td>' + r.counted + '</td><td style="color:' + color + ';font-weight:600;">' + (r.difference > 0 ? '+' : '') + r.difference + '</td></tr>';
             });
             html += '</tbody></table>';
-            html += '<div style="margin-top:var(--space-3);display:flex;gap:var(--space-2);">';
-            html += '<button class="btn btn--primary btn--sm" onclick="approvePhysicalCount()">Aprobar y aplicar ajustes</button>';
-            html += '<button class="btn btn--ghost btn--sm" onclick="cancelDraft()">Cancelar borrador</button>';
-            html += '</div>';
+            html += '<button class="btn btn--primary" style="margin-top:var(--space-3);" onclick="approvePhysicalCount(' + result.count_id + ')">Aprobar y Ajustar Inventario</button>';
             document.getElementById('countResults').innerHTML = html;
+            countRows = [];
+            renderCountRows();
+        }).catch(function (e) {
+            document.getElementById('countResults').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
         });
     }
-
-    function approvePhysicalCount() {
-        if (!draftCountId) { alert('No hay borrador activo'); return; }
-        apiFetch(API + '/physical-count/approve', { method: 'POST', body: JSON.stringify({ count_id: draftCountId }) }).then(function (result) {
-            if (result && result.status === 'approved') {
-                document.getElementById('countResults').innerHTML = '<span style="color:var(--color-success);">' + esc(result.message) + '</span>';
-                draftCountId = null;
-            } else {
-                document.getElementById('countResults').innerHTML += '<br><span style="color:var(--color-error);">' + (result ? result.error || 'Error' : 'Error de red') + '</span>';
-            }
-        });
-    }
-
-    function cancelDraft() {
-        draftCountId = null;
-        document.getElementById('countResults').innerHTML = '<span style="color:var(--color-text-muted);">Borrador cancelado</span>';
-    }
-
-    // =====================================================================
-    //  ALERTS  (panel-alertas)
-    // =====================================================================
-
-    function loadAlerts() {
-        var container = document.getElementById('alertsContent');
-        if (container) container.innerHTML = '<div style="padding:var(--space-6);">' + renderEmptyState({
-            icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>',
-            title: 'Cargando alertas...',
-            subtitle: 'Revisando el estado del inventario'
-        }) + '</div>';
-
-        apiFetch(API + '/alerts').then(function (data) {
-            if (!data) return;
-            var alerts = data.data || [];
-            var counts = data.counts || {};
-            if (!container) return;
-
-            if (!alerts.length) {
-                container.innerHTML = renderEmptyState({
-                    icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>',
-                    title: 'Todo en orden',
-                    subtitle: 'No hay alertas activas en el inventario. Los niveles de stock están dentro de los límites configurados.'
-                });
-                return;
-            }
-
-            // Summary bar
-            var html = '<div style="display:flex;gap:var(--space-3);flex-wrap:wrap;margin-bottom:var(--space-6);padding:var(--space-4);background:var(--color-surface-2);border-radius:var(--radius-lg);">' +
-                '<div style="font-size:var(--text-sm);font-weight:700;">Resumen de alertas</div>' +
-                (counts.critical ? '<span class="badge badge--low">' + counts.critical + ' crítica' + (counts.critical !== 1 ? 's' : '') + '</span>' : '') +
-                (counts.warning ? '<span class="badge badge--over">' + counts.warning + ' advertencia' + (counts.warning !== 1 ? 's' : '') + '</span>' : '') +
-                (counts.info ? '<span class="badge badge--ok">' + counts.info + ' informativa' + (counts.info !== 1 ? 's' : '') + '</span>' : '') +
-                '</div>';
-
-            // Group by severity
-            var critical = alerts.filter(function (a) { return a.severity === 'critical'; });
-            var warning = alerts.filter(function (a) { return a.severity === 'warning'; });
-            var info = alerts.filter(function (a) { return a.severity !== 'critical' && a.severity !== 'warning'; });
-
-            html += renderAlertSection('Criticas', critical, 'critical', 'badge--low');
-            html += renderAlertSection('Advertencias', warning, 'warning', 'badge--over');
-            html += renderAlertSection('Informativas', info, 'info', 'badge--ok');
-
-            container.innerHTML = html;
-        });
-    }
-
-    function renderAlertSection(title, alerts, level, badgeClass) {
-        if (!alerts.length) return '';
-        var initialLimit = 30;
-        var showAll = window._alertsShowAll && window._alertsShowAll[level];
-        var display = showAll ? alerts : alerts.slice(0, initialLimit);
-        var remaining = alerts.length - display.length;
-
-        var html = '<div class="section-heading"><span class="section-heading__title">' + title + '</span><div class="section-heading__line"></div><span class="badge ' + badgeClass + '">' + alerts.length + '</span></div>';
-        html += '<div class="alerts-grid" style="margin-bottom:var(--space-6);">';
-        display.forEach(function (a) {
-            var icon = a.type === 'zero' ? 'AGOTADO' : (a.type === 'low' ? 'BAJO' : a.type.toUpperCase());
-            html += buildAlertCard(a, icon, level);
-        });
-        html += '</div>';
-
-        if (remaining > 0) {
-            html += '<div style="text-align:center;margin-bottom:var(--space-6);">' +
-                '<button class="btn btn--ghost btn--sm" onclick="window._showMoreAlerts(\'' + level + '\')">Ver ' + remaining + ' más</button>' +
-                '</div>';
-        }
-        return html;
-    }
-
-    window._showMoreAlerts = function(level) {
-        window._alertsShowAll = window._alertsShowAll || {};
-        window._alertsShowAll[level] = true;
-        loadAlerts();
-    };
-
-    function buildAlertCard(a, icon, level) {
-        var cls = level === 'critical' ? 'alert-card--critical' : (level === 'warning' ? 'alert-card--warning' : 'alert-card--info');
-        return '<div class="alert-card ' + cls + '">' +
-            '<div class="alert-card__icon"><svg viewBox="0 0 24 24"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg></div>' +
-            '<div class="alert-card__body">' +
-            '<div class="alert-card__title">[' + icon + '] ' + esc(a.part_number) + ' — ' + esc(a.name) + '</div>' +
-            '<div class="alert-card__desc">Stock: ' + a.stock +
-            (a.min_stock ? ' (min: ' + a.min_stock + ')' : '') +
-            (a.max_stock ? ' (max: ' + a.max_stock + ')' : '') +
-            ' · Sucursal ' + a.branch_id + '</div>' +
-            '</div></div>';
-    }
-
-    // =====================================================================
-    //  HISTORY MODAL
-    // =====================================================================
-
-    function viewHistory(itemId) {
-        apiFetch(API + '/items/' + itemId + '/history').then(function (data) {
-            if (!data) return;
-            var history = data.data || [];
-            var html = '';
-            if (!history.length) {
-                html = renderEmptyState({
-                    icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="4" width="18" height="18" rx="2" ry="2"/><line x1="16" y1="2" x2="16" y2="6"/><line x1="8" y1="2" x2="8" y2="6"/><line x1="3" y1="10" x2="21" y2="10"/></svg>',
-                    title: 'Sin movimientos',
-                    subtitle: 'Este producto aún no tiene historial de entradas, salidas ni ajustes.'
-                });
-            } else {
-                html = '<table class="data-table"><thead><tr><th>Fecha</th><th>Tipo</th><th>Cantidad</th><th>Costo</th><th>Empleado</th><th>Notas</th></tr></thead><tbody>';
-                history.forEach(function (h) {
-                    var qtyColor = h.quantity > 0 ? 'var(--color-success)' : 'var(--color-error)';
-                    html += '<tr>' +
-                        '<td style="font-size:var(--text-caption);">' + formatDateTime(h.date) + '</td>' +
-                        '<td>' + esc(h.type) + '</td>' +
-                        '<td style="color:' + qtyColor + ';font-weight:600;">' + (h.quantity > 0 ? '+' : '') + h.quantity + '</td>' +
-                        '<td class="td--amount">' + (h.cost ? '$' + fmt(h.cost) : '—') + '</td>' +
-                        '<td>' + esc(h.employee) + '</td>' +
-                        '<td style="font-size:var(--text-caption);">' + esc(h.notes) + '</td>' +
-                        '</tr>';
-                });
-                html += '</tbody></table>';
-            }
-            document.getElementById('historyContent').innerHTML = html;
-            document.getElementById('historyModal').classList.add('is-open');
-        });
-    }
-
-    function closeHistoryModal() {
-        document.getElementById('historyModal').classList.remove('is-open');
-    }
-
-    // =====================================================================
-    //  DELETE ITEM
-    // =====================================================================
-
-    function deleteItem(itemId) {
-        if (!confirm('¿Eliminar este artículo del inventario? Se mantendrán los registros históricos.')) return;
-        fetch(API + '/items/' + itemId, {
-            method: 'DELETE',
-            headers: getToken() ? { 'Authorization': 'Bearer ' + getToken() } : {}
-        }).then(function(r) { return r.json(); })
-          .then(function(data) {
-              if (data.error) { showToast(data.error, 'error', { title: 'Error al eliminar' }); return; }
-              showToast('El artículo fue eliminado correctamente.', 'ok', { title: 'Eliminado' });
-              loadItems(currentPage);
-              if (window.loadInventoryStats) window.loadInventoryStats();
-          }).catch(function() { showToast('No se pudo eliminar el artículo. Intenta de nuevo.', 'error', { title: 'Error' }); });
-    }
-
-    // =====================================================================
-    //  MERCADOLIBRE PUBLISH
-    // =====================================================================
-
-    function publishToMeli(itemId) {
-        selectedItems.clear();
-        selectedItems.add(itemId);
-        updateSelectionUI();
-        openMeliPublishModal();
-    }
-    window.publishToMeli = publishToMeli;
-
-    // ─── MercadoLibre Bulk Publish Modal ───────────────────────────────────
-
-    var meliPreviewData = {};
-    var meliCategoryAttrs = [];
-
-    window.openMeliPublishModal = function() {
-        if (selectedItems.size === 0) { showToast('Selecciona al menos un producto', 'warn'); return; }
-        document.getElementById('meliPublishModal').classList.add('is-open');
-        document.getElementById('meliPublishResult').innerHTML = '';
-        document.getElementById('meliCategoryId').value = '';
-        document.getElementById('meliCategorySearch').value = '';
-        document.getElementById('meliCategoryResults').innerHTML = '';
-        document.getElementById('meliAttrsSection').style.display = 'none';
-        document.getElementById('meliAttrsGrid').innerHTML = '';
-        meliCategoryAttrs = [];
-        refreshMeliPublishPreview();
-    };
-
-    window.closeMeliPublishModal = function() {
-        document.getElementById('meliPublishModal').classList.remove('is-open');
-    };
-
-    function refreshMeliPublishPreview() {
-        var container = document.getElementById('meliPublishItemsPreview');
-        var countEl = document.getElementById('meliPublishSelectedCount');
-        countEl.textContent = selectedItems.size + ' producto(s) seleccionado(s)';
-        container.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando verificaciones...</p>';
-
-        var ids = Array.from(selectedItems);
-        fetch('/pos/api/marketplace-ext/inventory-check', {
-            method: 'POST',
-            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
-            body: JSON.stringify({ inventory_ids: ids })
-        }).then(function(r){ return r.json(); })
-          .then(function(data) {
-              if (!data.items) { container.innerHTML = '<p style="color:var(--color-error);">Error cargando preview</p>'; return; }
-              var html = '';
-              data.items.forEach(function(it) {
-                  if (!it.exists) {
-                      html += '<div class="meli-preview-card" style="opacity:0.6;"><div style="color:var(--color-error);">Item #' + it.inventory_id + ' no encontrado</div></div>';
-                      return;
-                  }
-                  meliPreviewData[it.inventory_id] = it;
-                  var checks = '';
-                  checks += '<span class="meli-check ' + (it.has_image ? 'ok' : 'fail') + '">' + (it.has_image ? '✅' : '❌') + ' Imagen</span>';
-                  checks += '<span class="meli-check ' + (it.has_stock ? 'ok' : 'fail') + '">' + (it.has_stock ? '✅' : '❌') + ' Stock</span>';
-                  checks += '<span class="meli-check ' + (it.has_price ? 'ok' : 'fail') + '">' + (it.has_price ? '✅' : '❌') + ' Precio</span>';
-                  if (it.already_published) {
-                      checks += '<span class="meli-check ok">✅ <a href="' + esc(it.existing_listing.permalink || '#') + '" target="_blank" style="color:var(--color-success);text-decoration:underline;">Ya publicado (' + esc(it.existing_listing.status) + ')</a></span>';
-                  }
-                  var imgSrc = it.image_url || '';
-                  var imgHtml = imgSrc ? '<img src="' + esc(imgSrc) + '" alt="" onerror="this.style.display=\'none\'">' : '<div style="width:56px;height:56px;background:var(--color-surface-2);border-radius:var(--radius-sm);display:flex;align-items:center;justify-content:center;font-size:10px;color:var(--color-text-muted);">Sin img</div>';
-                  if (!it.has_image) {
-                      imgHtml = '<div class="meli-img-upload" onclick="document.getElementById(\'meliImgUpload-' + it.inventory_id + '\').click()">' +
-                          '<div style="font-size:10px;">+ Subir</div>' +
-                          '<input type="file" id="meliImgUpload-' + it.inventory_id + '" accept="image/*" onchange="handleMeliImageUpload(' + it.inventory_id + ', this)">' +
-                          '</div>';
-                  }
-                  html += '<div class="meli-preview-card" id="meliCard-' + it.inventory_id + '">' +
-                      imgHtml +
-                      '<div>' +
-                          '<input type="text" class="meli-title-input" id="meliTitle-' + it.inventory_id + '" value="' + esc(it.title) + '" maxlength="60" oninput="updateMeliTitleCount(' + it.inventory_id + ')">' +
-                          '<div style="font-size:10px;color:var(--color-text-muted);text-align:right;" id="meliTitleCount-' + it.inventory_id + '">' + it.title.length + '/60</div>' +
-                          '<div class="meli-checks-row">' + checks + '</div>' +
-                      '</div>' +
-                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Precio</label><input type="number" class="meli-num-input" id="meliPrice-' + it.inventory_id + '" value="' + it.price + '"></div>' +
-                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Stock</label><input type="number" class="meli-num-input" id="meliStock-' + it.inventory_id + '" value="' + it.stock + '"></div>' +
-                      '</div>';
-              });
-              container.innerHTML = html;
-          }).catch(function() { container.innerHTML = '<p style="color:var(--color-error);">Error de red</p>'; });
-    }
-
-    window.updateMeliTitleCount = function(id) {
-        var el = document.getElementById('meliTitle-' + id);
-        var countEl = document.getElementById('meliTitleCount-' + id);
-        if (el && countEl) countEl.textContent = el.value.length + '/60';
-    };
-
-    window.handleMeliImageUpload = function(itemId, input) {
-        if (!input.files || !input.files[0]) return;
-        var file = input.files[0];
-        var formData = new FormData();
-        formData.append('file', file);
-        fetch('/pos/api/inventory/items/' + itemId + '/image', {
-            method: 'POST',
-            headers: { 'Authorization': 'Bearer ' + getToken() },
-            body: formData
-        }).then(function(r){ return r.json(); })
-          .then(function(data) {
-              if (data.image_url) {
-                  showToast('Imagen subida', 'success');
-                  refreshMeliPublishPreview();
-                  if (inventoryVS) inventoryVS.refresh();
-              } else {
-                  showToast(data.error || 'Error subiendo imagen', 'error');
-              }
-          }).catch(function(){ showToast('Error de red', 'error'); });
-    };
-
-    var meliCategorySearchTimeout;
-    var meliCatItems = [];
-    var meliCatActiveIndex = -1;
-
-    window.searchMeliCategories = function() {
-        var q = document.getElementById('meliCategorySearch').value.trim();
-        var resultsDiv = document.getElementById('meliCategoryResults');
-        if (q.length < 2) { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; return; }
-        clearTimeout(meliCategorySearchTimeout);
-        resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-loading">Buscando...</div></div>';
-        meliCategorySearchTimeout = setTimeout(function() {
-            fetch('/pos/api/marketplace-ext/categories?q=' + encodeURIComponent(q), { headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' } })
-                .then(function(r) { return r.json(); })
-                .then(function(data) {
-                    var cats = data.categories || [];
-                    meliCatItems = cats.slice(0, 10);
-                    meliCatActiveIndex = -1;
-                    if (!meliCatItems.length) { resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-empty">Sin resultados</div></div>'; return; }
-                    var html = '<div class="meli-cat-dropdown">';
-                    meliCatItems.forEach(function(c, idx) {
-                        html += '<div class="meli-cat-item" data-idx="' + idx + '" onmouseenter="highlightMeliCat(' + idx + ')" onmousedown="selectMeliCategoryIdx(' + idx + ')">' +
-                            '<span>' + esc(c.category_name || c.category_id) + '</span>' +
-                            '<span class="cat-id">' + esc(c.category_id) + '</span>' +
-                            '</div>';
-                    });
-                    html += '</div>';
-                    resultsDiv.innerHTML = html;
-                })
-                .catch(function() { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; });
-        }, 300);
-    };
-
-    window.highlightMeliCat = function(idx) {
-        meliCatActiveIndex = idx;
-        var items = document.querySelectorAll('.meli-cat-item');
-        items.forEach(function(el, i) { el.classList.toggle('is-active', i === idx); });
-    };
-
-    window.selectMeliCategoryIdx = function(idx) {
-        var c = meliCatItems[idx];
-        if (!c) return;
-        selectMeliCategory(c.category_id, c.category_name || c.category_id);
-    };
-
-    window.selectMeliCategory = function(id, name) {
-        document.getElementById('meliCategoryId').value = id;
-        document.getElementById('meliCategorySearch').value = name;
-        document.getElementById('meliCategoryResults').innerHTML = '';
-        meliCatItems = [];
-        meliCatActiveIndex = -1;
-        loadCategoryAttributes(id);
-    };
-
-    window.loadCategoryAttributes = function(categoryId) {
-        var grid = document.getElementById('meliAttrsGrid');
-        var section = document.getElementById('meliAttrsSection');
-        grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando atributos...</p>';
-        section.style.display = 'block';
-        fetch('/pos/api/marketplace-ext/categories/' + encodeURIComponent(categoryId) + '/attributes', { headers: { 'Authorization': 'Bearer ' + getToken() } })
-            .then(function(r){ return r.json(); })
-            .then(function(data) {
-                meliCategoryAttrs = data.attributes || [];
-                if (!meliCategoryAttrs.length) { grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">No hay atributos obligatorios adicionales.</p>'; return; }
-                var html = '';
-                meliCategoryAttrs.forEach(function(attr) {
-                    var attrId = esc(attr.id);
-                    var attrName = esc(attr.name || attr.id);
-                    var inputHtml = '<input type="text" class="meli-title-input" id="meliAttr-' + attrId + '" placeholder="' + attrName + '">';
-                    if (attr.values && attr.values.length) {
-                        // Some ML attributes (like BRAND) have a closed list but the API still
-                        // accepts free-text via value_name. Provide a select + "Other" fallback.
-                        var selectId = 'meliAttrSel-' + attrId;
-                        var otherId = 'meliAttrOther-' + attrId;
-                        inputHtml = '<select class="meli-title-input" id="' + selectId + '" onchange="onMeliAttrSelectChange(\'' + attrId + '\')">' +
-                            '<option value="">Selecciona ' + attrName + '</option>' +
-                            attr.values.map(function(v) { return '<option value="' + esc(v.name) + '">' + esc(v.name) + '</option>'; }).join('') +
-                            '<option value="__other__">Otra marca (escribir)...</option>' +
-                            '</select>' +
-                            '<input type="text" class="meli-title-input" id="' + otherId + '" placeholder="Escribe la ' + attrName + '" style="display:none;margin-top:6px;">';
-                    }
-                    html += '<div class="inv-field" id="meliAttrWrap-' + attrId + '"><label>' + attrName + (attr.tags && attr.tags.required ? ' *' : '') + '</label>' + inputHtml + '</div>';
-                });
-                grid.innerHTML = html;
-            }).catch(function() { grid.innerHTML = '<p style="color:var(--color-error);font-size:var(--text-caption);">Error cargando atributos</p>'; });
-    };
-
-    window.onMeliAttrSelectChange = function(attrId) {
-        var sel = document.getElementById('meliAttrSel-' + attrId);
-        var other = document.getElementById('meliAttrOther-' + attrId);
-        if (!sel || !other) return;
-        if (sel.value === '__other__') {
-            other.style.display = 'block';
-            other.focus();
-        } else {
-            other.style.display = 'none';
-            other.value = '';
-        }
-    };
-
-    window.handleMeliCatKeydown = function(e) {
-        if (!meliCatItems.length) return;
-        if (e.key === 'ArrowDown') {
-            e.preventDefault();
-            meliCatActiveIndex = Math.min(meliCatActiveIndex + 1, meliCatItems.length - 1);
-            highlightMeliCat(meliCatActiveIndex);
-        } else if (e.key === 'ArrowUp') {
-            e.preventDefault();
-            meliCatActiveIndex = Math.max(meliCatActiveIndex - 1, -1);
-            highlightMeliCat(meliCatActiveIndex);
-        } else if (e.key === 'Enter') {
-            e.preventDefault();
-            if (meliCatActiveIndex >= 0) selectMeliCategoryIdx(meliCatActiveIndex);
-        } else if (e.key === 'Escape') {
-            document.getElementById('meliCategoryResults').innerHTML = '';
-            meliCatItems = [];
-            meliCatActiveIndex = -1;
-        }
-    };
-
-    /* Cerrar dropdown al hacer click fuera */
-    document.addEventListener('click', function(e) {
-        var field = document.getElementById('meliCategorySearch');
-        var results = document.getElementById('meliCategoryResults');
-        if (field && results && !field.contains(e.target) && !results.contains(e.target)) {
-            results.innerHTML = '';
-            meliCatItems = [];
-            meliCatActiveIndex = -1;
-        }
-    });
-
-    window.onMeliShippingChange = function() {
-        var mode = document.getElementById('meliShippingMode').value;
-        var costField = document.getElementById('meliShippingCostField');
-        if (costField) costField.style.display = (mode === 'custom') ? 'block' : 'none';
-    };
-
-    function _collectMeliCustomData() {
-        var ids = Array.from(selectedItems);
-        var customData = { titles: {}, prices: {}, stocks: {}, attributes: {} };
-        var mode = document.getElementById('meliShippingMode').value;
-        if (mode === 'custom') {
-            var costEl = document.getElementById('meliShippingCost');
-            if (costEl) customData.shipping_cost = parseFloat(costEl.value) || 0;
-        }
-        ids.forEach(function(id) {
-            var titleEl = document.getElementById('meliTitle-' + id);
-            var priceEl = document.getElementById('meliPrice-' + id);
-            var stockEl = document.getElementById('meliStock-' + id);
-            if (titleEl) customData.titles[id] = titleEl.value;
-            if (priceEl) customData.prices[id] = parseFloat(priceEl.value);
-            if (stockEl) customData.stocks[id] = parseInt(stockEl.value);
-            var attrs = [];
-            meliCategoryAttrs.forEach(function(attr) {
-                var val = '';
-                var sel = document.getElementById('meliAttrSel-' + attr.id);
-                if (sel) {
-                    if (sel.value === '__other__') {
-                        var otherEl = document.getElementById('meliAttrOther-' + attr.id);
-                        val = otherEl ? otherEl.value : '';
-                    } else {
-                        val = sel.value;
-                    }
-                } else {
-                    var el = document.getElementById('meliAttr-' + attr.id);
-                    if (el) val = el.value;
-                }
-                if (val) {
-                    attrs.push({ id: attr.id, value_name: val });
-                }
-            });
-            if (attrs.length) customData.attributes[id] = attrs;
-        });
-        return customData;
-    }
-
-    window.validateMeliPublish = function() {
-        var categoryId = document.getElementById('meliCategoryId').value.trim();
-        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
-        var listingType = document.getElementById('meliListingType').value;
-        var shippingMode = document.getElementById('meliShippingMode').value;
-        var ids = Array.from(selectedItems);
-        var resultEl = document.getElementById('meliPublishResult');
-        var btn = document.getElementById('meliValidateBtn');
-        btn.disabled = true;
-        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Validando con MercadoLibre...</span>';
-        fetch('/pos/api/marketplace-ext/listings/validate', {
-            method: 'POST',
-            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                inventory_ids: ids,
-                category_id: categoryId,
-                listing_type: listingType,
-                shipping_mode: shippingMode,
-                custom_data: _collectMeliCustomData()
-            })
-        }).then(function(r){ return r.json(); })
-          .then(function(data) {
-              btn.disabled = false;
-              if (data.error) { resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
-              var valid = (data.valid || []);
-              var invalid = (data.invalid || []);
-              var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + valid.length + ' válido(s)</span> · <span style="color:var(--color-error);">❌ ' + invalid.length + ' inválido(s)</span></div>';
-
-              // Show earnings estimate table for valid items
-              if (valid.length > 0) {
-                  html += '<div style="margin:var(--space-3) 0;border:1px solid var(--color-border);border-radius:var(--radius-md);overflow:hidden;">';
-                  html += '<div style="background:var(--color-surface-2);padding:var(--space-2) var(--space-3);font-size:var(--text-caption);font-weight:600;color:var(--color-text-primary);">💰 Estimado de ganancia (después de comisiones ML)</div>';
-                  html += '<table style="width:100%;border-collapse:collapse;font-size:var(--text-caption);">';
-                  html += '<tr style="background:var(--color-surface-1);"><th style="padding:6px 8px;text-align:left;">Item</th><th style="padding:6px 8px;text-align:right;">Precio</th><th style="padding:6px 8px;text-align:right;">Comisión</th><th style="padding:6px 8px;text-align:right;">Recibes</th></tr>';
-                  valid.forEach(function(v) {
-                      var price = v.price || 0;
-                      var fee = v.fee_amount || 0;
-                      var net = v.net_amount || 0;
-                      var feePct = v.fee_pct || 0;
-                      html += '<tr style="border-top:1px solid var(--color-border);">';
-                      html += '<td style="padding:6px 8px;">#' + esc(v.inventory_id) + '</td>';
-                      html += '<td style="padding:6px 8px;text-align:right;">$' + price.toFixed(2) + '</td>';
-                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-error);">-$' + fee.toFixed(2) + ' (' + feePct.toFixed(1) + '%)</td>';
-                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-success);font-weight:600;">$' + net.toFixed(2) + '</td>';
-                      html += '</tr>';
-                  });
-                  html += '</table>';
-                  if (valid.some(function(v){ return v.fee_source === 'approximation'; })) {
-                      html += '<div style="padding:var(--space-2) var(--space-3);font-size:10px;color:var(--color-text-muted);background:var(--color-surface-0);">* Comisión estimada. El monto real puede variar según ML.</div>';
-                  }
-                  html += '</div>';
-              }
-
-              if (invalid.length) {
-                  html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
-                  invalid.forEach(function(f) {
-                      html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
-                  });
-                  html += '</ul>';
-              }
-              resultEl.innerHTML = html;
-          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
-    };
-
-    function _renderPublishResult(data, resultEl) {
-        var success = (data.success || []).length;
-        var failedList = data.failed || [];
-        var failed = failedList.length;
-        var hasModeError = failedList.some(function(f) { return (f.error || '').toLowerCase().indexOf('user has not mode') !== -1; });
-        var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + success + ' publicado(s)</span> · <span style="color:var(--color-error);">❌ ' + failed + ' fallo(s)</span></div>';
-        if (hasModeError) {
-            html += '<div style="background:var(--color-surface-2);border:1px solid var(--color-error);border-radius:var(--radius-md);padding:var(--space-3);margin:var(--space-2) 0;font-size:var(--text-caption);color:var(--color-text-primary);">' +
-                '<strong>⚠️ Tu cuenta de MercadoLibre no tiene modos de envío configurados.</strong><br>' +
-                'Esto es un requisito de MercadoLibre, no de Nexus.<br>' +
-                'Pasos para solucionarlo:<br>' +
-                '1. Entrá a <a href="https://www.mercadolibre.com.mx" target="_blank" style="color:var(--color-primary);text-decoration:underline;">mercadolibre.com.mx</a> con la cuenta de vendedor<br>' +
-                '2. Andá a <strong>Vender &gt; Configuración de envíos</strong><br>' +
-                '3. Completá tu dirección de retiro y activá al menos un método de envío<br>' +
-                '4. Si no te aparece la opción, contactá a <a href="https://www.mercadolibre.com.mx/ayuda" target="_blank" style="color:var(--color-primary);text-decoration:underline;">soporte de MercadoLibre</a><br>' +
-                '<em>Nota: Algunas cuentas nuevas necesitan verificar identidad antes de poder configurar envíos.</em>' +
-                '</div>';
-        }
-        if (failedList.length) {
-            html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
-            failedList.forEach(function(f) {
-                html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
-            });
-            html += '</ul>';
-        }
-        resultEl.innerHTML = html;
-        if (success > 0) {
-            selectedItems.clear();
-            updateSelectionUI();
-            if (inventoryVS) inventoryVS.refresh();
-        }
-    }
-
-    function _pollMeliAsync(taskId, resultEl, btn) {
-        var attempts = 0;
-        var maxAttempts = 60; // 2 min
-        var interval = setInterval(function() {
-            attempts++;
-            fetch('/pos/api/marketplace-ext/listings/async/' + encodeURIComponent(taskId), { headers: { 'Authorization': 'Bearer ' + getToken() } })
-                .then(function(r){ return r.json(); })
-                .then(function(data) {
-                    if (data.status === 'done') {
-                        clearInterval(interval);
-                        btn.disabled = false;
-                        _renderPublishResult(data.result || {}, resultEl);
-                        setTimeout(function() { closeMeliPublishModal(); }, 3000);
-                    } else if (attempts >= maxAttempts) {
-                        clearInterval(interval);
-                        btn.disabled = false;
-                        resultEl.innerHTML = '<span style="color:var(--color-error);">Timeout esperando resultado. Revisa la pestaña Publicaciones más tarde.</span>';
-                    } else {
-                        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Publicando en segundo plano... (' + attempts + 's)</span>';
-                    }
-                }).catch(function() {
-                    clearInterval(interval);
-                    btn.disabled = false;
-                    resultEl.innerHTML = '<span style="color:var(--color-error);">Error consultando progreso</span>';
-                });
-        }, 2000);
-    }
-
-    window.executeMeliPublish = function() {
-        var categoryId = document.getElementById('meliCategoryId').value.trim();
-        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
-        var listingType = document.getElementById('meliListingType').value;
-        var shippingMode = document.getElementById('meliShippingMode').value;
-        var ids = Array.from(selectedItems);
-        var resultEl = document.getElementById('meliPublishResult');
-        var btn = document.getElementById('meliPublishBtn');
-        btn.disabled = true;
-        var useAsync = ids.length > 3;
-        var endpoint = useAsync ? '/pos/api/marketplace-ext/listings/async' : '/pos/api/marketplace-ext/listings';
-        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">' + (useAsync ? 'Encolando ' : 'Publicando ') + ids.length + ' producto(s)...</span>';
-        fetch(endpoint, {
-            method: 'POST',
-            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                inventory_ids: ids,
-                category_id: categoryId,
-                listing_type: listingType,
-                shipping_mode: shippingMode,
-                custom_data: _collectMeliCustomData()
-            })
-        }).then(function(r) { return r.json(); })
-          .then(function(data) {
-              if (data.error) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
-              if (useAsync && data.task_id) {
-                  _pollMeliAsync(data.task_id, resultEl, btn);
-              } else {
-                  btn.disabled = false;
-                  _renderPublishResult(data, resultEl);
-                  if ((data.success || []).length > 0) {
-                      setTimeout(function() { closeMeliPublishModal(); }, 2500);
-                  }
-              }
-          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
-    };
-
-    // =====================================================================
-    //  BARCODE LABEL PRINT
-    // =====================================================================
-
-    function printBarcode(barcode, partNumber, name) {
-        var w = window.open('', '_blank', 'width=400,height=250');
-        w.document.write('<html><head><title>Etiqueta</title><style>body{font-family:monospace;text-align:center;padding:20px;}h1{font-size:1.5rem;margin:8px 0;}p{margin:4px 0;}</style></head><body>');
-        w.document.write('<h1>' + barcode + '</h1>');
-        w.document.write('<p>' + partNumber + '</p>');
-        w.document.write('<p style="font-size:0.85rem;">' + name + '</p>');
-        w.document.write('</body></html>');
-        w.document.close();
-        w.print();
-    }
-
-    // =====================================================================
-    //  PRODUCT DETAIL MODAL (shows item info + movement history)
     // =====================================================================
 
     function uploadItemImage(itemId) {
@@ -2125,6 +1763,715 @@
           }).catch(function() { alert('Error al eliminar SKU'); });
     };
 
+    // =====================================================================
+    //  RESTAURADAS (recuperadas de git HEAD)
+    // =====================================================================
+
+    function viewHistory(itemId) {
+        apiFetch(API + '/items/' + itemId + '/history').then(function (data) {
+            if (!data) return;
+            var history = data.data || [];
+            var html = '';
+            if (!history.length) {
+                html = renderEmptyState({
+                    icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="3" y="4" width="18" height="18" rx="2" ry="2"/><line x1="16" y1="2" x2="16" y2="6"/><line x1="8" y1="2" x2="8" y2="6"/><line x1="3" y1="10" x2="21" y2="10"/></svg>',
+                    title: 'Sin movimientos',
+                    subtitle: 'Este producto aún no tiene historial de entradas, salidas ni ajustes.'
+                });
+            } else {
+                html = '<table class="data-table"><thead><tr><th>Fecha</th><th>Tipo</th><th>Cantidad</th><th>Costo</th><th>Empleado</th><th>Notas</th></tr></thead><tbody>';
+                history.forEach(function (h) {
+                    var qtyColor = h.quantity > 0 ? 'var(--color-success)' : 'var(--color-error)';
+                    html += '<tr>' +
+                        '<td style="font-size:var(--text-caption);">' + formatDateTime(h.date) + '</td>' +
+                        '<td>' + esc(h.type) + '</td>' +
+                        '<td style="color:' + qtyColor + ';font-weight:600;">' + (h.quantity > 0 ? '+' : '') + h.quantity + '</td>' +
+                        '<td class="td--amount">' + (h.cost ? '$' + fmt(h.cost) : '—') + '</td>' +
+                        '<td>' + esc(h.employee) + '</td>' +
+                        '<td style="font-size:var(--text-caption);">' + esc(h.notes) + '</td>' +
+                        '</tr>';
+                });
+                html += '</tbody></table>';
+            }
+            document.getElementById('historyContent').innerHTML = html;
+            document.getElementById('historyModal').classList.add('is-open');
+        });
+    }
+
+    function closeHistoryModal() {
+        document.getElementById('historyModal').classList.remove('is-open');
+    }
+
+    function recordTransfer() {
+        var data = {
+            inventory_id: parseInt(document.getElementById('transferItemId').value),
+            from_branch_id: parseInt(document.getElementById('transferFrom').value),
+            to_branch_id: parseInt(document.getElementById('transferTo').value),
+            quantity: parseInt(document.getElementById('transferQty').value),
+            notes: document.getElementById('transferNotes').value.trim()
+        };
+        if (!data.inventory_id || !data.from_branch_id || !data.to_branch_id || !data.quantity) {
+            document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">Complete todos los campos</span>';
+            return;
+        }
+        apiFetch(API + '/transfer', { method: 'POST', body: JSON.stringify(data) }).then(function (result) {
+            if (result && result.out_operation_id) {
+                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-success);">Transferencia registrada</span>';
+                closeTransferModal();
+                ['transferItemId','transferFrom','transferTo','transferQty','transferNotes'].forEach(function(id) {
+                    var el = document.getElementById(id);
+                    if (el) el.value = '';
+                });
+                if (window.loadInventoryStats) window.loadInventoryStats();
+                if (window.loadOperations) window.loadOperations('traspasos', 1);
+                loadItems(currentPage);
+            } else {
+                document.getElementById('transferResult').innerHTML = '<span style="color:var(--color-error);">' + (result ? result.error || 'Error' : 'Error de red') + '</span>';
+            }
+        });
+    }
+
+    function approvePhysicalCount() {
+        if (!draftCountId) { alert('No hay borrador activo'); return; }
+        apiFetch(API + '/physical-count/approve', { method: 'POST', body: JSON.stringify({ count_id: draftCountId }) }).then(function (result) {
+            if (result && result.status === 'approved') {
+                document.getElementById('countResults').innerHTML = '<span style="color:var(--color-success);">' + esc(result.message) + '</span>';
+                draftCountId = null;
+            } else {
+                document.getElementById('countResults').innerHTML += '<br><span style="color:var(--color-error);">' + (result ? result.error || 'Error' : 'Error de red') + '</span>';
+            }
+        });
+    }
+
+    function cancelDraft() {
+        draftCountId = null;
+        document.getElementById('countResults').innerHTML = '<span style="color:var(--color-text-muted);">Borrador cancelado</span>';
+    }
+
+    function loadAlerts() {
+        var container = document.getElementById('alertsContent');
+        if (container) container.innerHTML = '<div style="padding:var(--space-6);">' + renderEmptyState({
+            icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M10.29 3.86L1.82 18a2 2 0 0 0 1.71 3h16.94a2 2 0 0 0 1.71-3L13.71 3.86a2 2 0 0 0-3.42 0z"/><line x1="12" y1="9" x2="12" y2="13"/><line x1="12" y1="17" x2="12.01" y2="17"/></svg>',
+            title: 'Cargando alertas...',
+            subtitle: 'Revisando el estado del inventario'
+        }) + '</div>';
+
+        apiFetch(API + '/alerts').then(function (data) {
+            if (!data) return;
+            var alerts = data.data || [];
+            var counts = data.counts || {};
+            if (!container) return;
+
+            if (!alerts.length) {
+                container.innerHTML = renderEmptyState({
+                    icon: '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M22 11.08V12a10 10 0 1 1-5.93-9.14"/><polyline points="22 4 12 14.01 9 11.01"/></svg>',
+                    title: 'Todo en orden',
+                    subtitle: 'No hay alertas activas en el inventario. Los niveles de stock están dentro de los límites configurados.'
+                });
+                return;
+            }
+
+            // Summary bar
+            var html = '<div style="display:flex;gap:var(--space-3);flex-wrap:wrap;margin-bottom:var(--space-6);padding:var(--space-4);background:var(--color-surface-2);border-radius:var(--radius-lg);">' +
+                '<div style="font-size:var(--text-sm);font-weight:700;">Resumen de alertas</div>' +
+                (counts.critical ? '<span class="badge badge--low">' + counts.critical + ' crítica' + (counts.critical !== 1 ? 's' : '') + '</span>' : '') +
+                (counts.warning ? '<span class="badge badge--over">' + counts.warning + ' advertencia' + (counts.warning !== 1 ? 's' : '') + '</span>' : '') +
+                (counts.info ? '<span class="badge badge--ok">' + counts.info + ' informativa' + (counts.info !== 1 ? 's' : '') + '</span>' : '') +
+                '</div>';
+
+            // Group by severity
+            var critical = alerts.filter(function (a) { return a.severity === 'critical'; });
+            var warning = alerts.filter(function (a) { return a.severity === 'warning'; });
+            var info = alerts.filter(function (a) { return a.severity !== 'critical' && a.severity !== 'warning'; });
+
+            html += renderAlertSection('Criticas', critical, 'critical', 'badge--low');
+            html += renderAlertSection('Advertencias', warning, 'warning', 'badge--over');
+            html += renderAlertSection('Informativas', info, 'info', 'badge--ok');
+
+            container.innerHTML = html;
+        });
+    }
+
+    function code128Svg(data, width, height) {
+        data = String(data || '');
+        if (!data.length) return '';
+        var codes = [104];
+        var sum = 104;
+        for (var i = 0; i < data.length; i++) {
+            var c = data.charCodeAt(i);
+            if (c < 32 || c > 126) c = 32;
+            var v = c - 32;
+            codes.push(v);
+            sum += v * (i + 1);
+        }
+        codes.push(sum % 103);
+        codes.push(106);
+        var quiet = 10;
+        var modules = quiet * 2;
+        codes.forEach(function (cd) {
+            CODE128_BARS[cd].split('').forEach(function (w) { modules += parseInt(w, 10); });
+        });
+        var mw = width / modules;
+        var bars = '';
+        var x = quiet * mw;
+        codes.forEach(function (cd) {
+            var pat = CODE128_BARS[cd];
+            for (var k = 0; k < pat.length; k++) {
+                var w = parseInt(pat[k], 10) * mw;
+                if (k % 2 === 0) bars += '<rect x="' + x.toFixed(2) + '" y="0" width="' + w.toFixed(2) + '" height="' + height + '"/>';
+                x += w;
+            }
+        });
+        return '<svg xmlns="http://www.w3.org/2000/svg" width="' + width + '" height="' + height + '" viewBox="0 0 ' + width + ' ' + height + '" fill="#000">' + bars + '</svg>';
+    }
+
+    function printBarcode(barcode, partNumber, name) {
+        var w = window.open('', '_blank', 'width=420,height=300');
+        w.document.write('<html><head><title>Etiqueta</title><style>body{font-family:system-ui,sans-serif;text-align:center;padding:16px;margin:0;}h1{font-size:1rem;margin:4px 0;}p{margin:2px 0;font-size:0.85rem;}</style></head><body>');
+        w.document.write(code128Svg(barcode || partNumber, 320, 70));
+        w.document.write('<h1>' + (barcode || partNumber) + '</h1>');
+        w.document.write('<p style="font-weight:600;">' + partNumber + '</p>');
+        w.document.write('<p style="font-size:0.85rem;">' + name + '</p>');
+        w.document.write('</body></html>');
+        w.document.close();
+        w.print();
+    }
+
+    function deleteItem(itemId) {
+        if (!confirm('¿Eliminar este artículo del inventario? Se mantendrán los registros históricos.')) return;
+        fetch(API + '/items/' + itemId, {
+            method: 'DELETE',
+            headers: getToken() ? { 'Authorization': 'Bearer ' + getToken() } : {}
+        }).then(function(r) { return r.json(); })
+          .then(function(data) {
+              if (data.error) { showToast(data.error, 'error', { title: 'Error al eliminar' }); return; }
+              showToast('El artículo fue eliminado correctamente.', 'ok', { title: 'Eliminado' });
+              loadItems(currentPage);
+              if (window.loadInventoryStats) window.loadInventoryStats();
+          }).catch(function() { showToast('No se pudo eliminar el artículo. Intenta de nuevo.', 'error', { title: 'Error' }); });
+    }
+
+    function publishToMeli(itemId) {
+        selectedItems.clear();
+        selectedItems.add(itemId);
+        updateSelectionUI();
+        openMeliPublishModal();
+    }
+    window.publishToMeli = publishToMeli;
+
+    // ─── MercadoLibre Bulk Publish Modal ───────────────────────────────────
+
+    var meliPreviewData = {};
+    var meliCategoryAttrs = [];
+    var meliCategorySearchTimeout;
+    var meliCatItems = [];
+    var meliCatActiveIndex = -1;
+
+    window.openMeliPublishModal = function() {
+        if (selectedItems.size === 0) { showToast('Selecciona al menos un producto', 'warn'); return; }
+        document.getElementById('meliPublishModal').classList.add('is-open');
+        document.getElementById('meliPublishResult').innerHTML = '';
+        document.getElementById('meliCategoryId').value = '';
+        document.getElementById('meliCategorySearch').value = '';
+        document.getElementById('meliCategoryResults').innerHTML = '';
+        document.getElementById('meliAttrsSection').style.display = 'none';
+        document.getElementById('meliAttrsGrid').innerHTML = '';
+        meliCategoryAttrs = [];
+        refreshMeliPublishPreview();
+    };
+
+    window.closeMeliPublishModal = function() {
+        document.getElementById('meliPublishModal').classList.remove('is-open');
+    };
+
+    // ==== RESTAURADAS v4 (MELI + descuentos) ====
+
+    window.searchMeliCategories = function() {
+        var q = document.getElementById('meliCategorySearch').value.trim();
+        var resultsDiv = document.getElementById('meliCategoryResults');
+        if (q.length < 2) { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; return; }
+        clearTimeout(meliCategorySearchTimeout);
+        resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-loading">Buscando...</div></div>';
+        meliCategorySearchTimeout = setTimeout(function() {
+            fetch('/pos/api/marketplace-ext/categories?q=' + encodeURIComponent(q), { headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' } })
+                .then(function(r) { return r.json(); })
+                .then(function(data) {
+                    var cats = data.categories || [];
+                    meliCatItems = cats.slice(0, 10);
+                    meliCatActiveIndex = -1;
+                    if (!meliCatItems.length) { resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-empty">Sin resultados</div></div>'; return; }
+                    var html = '<div class="meli-cat-dropdown">';
+                    meliCatItems.forEach(function(c, idx) {
+                        html += '<div class="meli-cat-item" data-idx="' + idx + '" onmouseenter="highlightMeliCat(' + idx + ')" onmousedown="selectMeliCategoryIdx(' + idx + ')">' +
+                            '<span>' + esc(c.category_name || c.category_id) + '</span>' +
+                            '<span class="cat-id">' + esc(c.category_id) + '</span>' +
+                            '</div>';
+                    });
+                    html += '</div>';
+                    resultsDiv.innerHTML = html;
+                })
+                .catch(function() { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; });
+        }, 300);
+    };
+
+    window.handleMeliCatKeydown = function(e) {
+        if (!meliCatItems.length) return;
+        if (e.key === 'ArrowDown') {
+            e.preventDefault();
+            meliCatActiveIndex = Math.min(meliCatActiveIndex + 1, meliCatItems.length - 1);
+            highlightMeliCat(meliCatActiveIndex);
+        } else if (e.key === 'ArrowUp') {
+            e.preventDefault();
+            meliCatActiveIndex = Math.max(meliCatActiveIndex - 1, -1);
+            highlightMeliCat(meliCatActiveIndex);
+        } else if (e.key === 'Enter') {
+            e.preventDefault();
+            if (meliCatActiveIndex >= 0) selectMeliCategoryIdx(meliCatActiveIndex);
+        } else if (e.key === 'Escape') {
+            document.getElementById('meliCategoryResults').innerHTML = '';
+            meliCatItems = [];
+            meliCatActiveIndex = -1;
+        }
+    };
+
+    /* Cerrar dropdown al hacer click fuera */
+    document.addEventListener('click', function(e) {
+        var field = document.getElementById('meliCategorySearch');
+        var results = document.getElementById('meliCategoryResults');
+        if (field && results && !field.contains(e.target) && !results.contains(e.target)) {
+            results.innerHTML = '';
+            meliCatItems = [];
+            meliCatActiveIndex = -1;
+        }
+    });
+
+    window.onMeliShippingChange = function() {
+        var mode = document.getElementById('meliShippingMode').value;
+        var costField = document.getElementById('meliShippingCostField');
+        if (costField) costField.style.display = (mode === 'custom') ? 'block' : 'none';
+    };
+
+    // ─── MELI publish helpers ──────────────────────────────────────────────
+    // Contrato de `custom_data` esperado por validate_items / publish_items
+    // (pos/services/marketplace_external_service.py):
+    //   {
+    //     titles:     { "<inventory_id>": "Título (<=60)" },
+    //     prices:     { "<inventory_id>": 123.45 },
+    //     stocks:     { "<inventory_id>": 3 },
+    //     attributes: { "<inventory_id>": [{ id: "BRAND", value_name: "Nissan" }] },
+    //     shipping_cost: 150          // solo se usa si shipping_mode === 'custom'
+    //   }
+    // Las claves son el id de inventario como string (el backend consulta con str(inv_id)).
+    function _meliAttrValue(attr) {
+        // Los atributos con lista cerrada se pintan como <select> + input "Otra (escribir)";
+        // el resto como un input de texto libre.
+        var selEl = document.getElementById('meliAttrSel-' + attr.id);
+        if (selEl) {
+            if (selEl.value === '__other__') {
+                var otherEl = document.getElementById('meliAttrOther-' + attr.id);
+                return otherEl ? otherEl.value.trim() : '';
+            }
+            return (selEl.value || '').trim();
+        }
+        var el = document.getElementById('meliAttr-' + attr.id);
+        return el ? (el.value || '').trim() : '';
+    }
+
+    function _collectMeliCustomData() {
+        var ids = Array.from(selectedItems);
+        var customData = { titles: {}, prices: {}, stocks: {}, attributes: {} };
+        ids.forEach(function(id) {
+            var titleEl = document.getElementById('meliTitle-' + id);
+            var priceEl = document.getElementById('meliPrice-' + id);
+            var stockEl = document.getElementById('meliStock-' + id);
+            if (titleEl && titleEl.value.trim()) customData.titles[id] = titleEl.value.trim();
+            if (priceEl) {
+                var price = parseFloat(priceEl.value);
+                if (!isNaN(price)) customData.prices[id] = price;
+            }
+            if (stockEl) {
+                var stock = parseInt(stockEl.value, 10);
+                if (!isNaN(stock)) customData.stocks[id] = stock;
+            }
+            var attrs = [];
+            (meliCategoryAttrs || []).forEach(function(attr) {
+                var value = _meliAttrValue(attr);
+                if (attr.id && value) attrs.push({ id: attr.id, value_name: value });
+            });
+            if (attrs.length) customData.attributes[id] = attrs;
+        });
+        // El backend solo lo aplica con shipping_mode === 'custom'; si el campo no
+        // existe o está vacío simplemente se omite.
+        var shippingCostEl = document.getElementById('meliShippingCost');
+        var shippingCost = shippingCostEl ? parseFloat(shippingCostEl.value) : NaN;
+        if (!isNaN(shippingCost)) customData.shipping_cost = shippingCost;
+        return customData;
+    }
+
+    function _renderPublishResult(data, resultEl) {
+        if (!resultEl) return;
+        data = data || {};
+        var successList = data.success || [];
+        var failedList = data.failed || [];
+        var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + successList.length + ' publicado(s)</span> · <span style="color:var(--color-error);">❌ ' + failedList.length + ' fallo(s)</span></div>';
+        if (successList.length) {
+            html += '<ul style="margin:0 0 var(--space-2);padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+            successList.forEach(function(s) {
+                var itemId = s.external_item_id || s.item_id;
+                var label = 'Item #' + esc(s.inventory_id);
+                if (itemId) {
+                    label += ' → <a href="' + esc(s.permalink || '#') + '" target="_blank" rel="noopener" style="color:var(--color-primary);">' + esc(itemId) + '</a>';
+                }
+                html += '<li>' + label + '</li>';
+            });
+            html += '</ul>';
+        }
+        if (failedList.length) {
+            html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+            failedList.forEach(function(f) {
+                html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
+            });
+            html += '</ul>';
+        }
+        resultEl.innerHTML = html;
+        if (successList.length > 0) {
+            selectedItems.clear();
+            updateSelectionUI();
+            if (inventoryVS) inventoryVS.refresh();
+        }
+    }
+
+    function _pollMeliAsync(taskId, resultEl, btn) {
+        var attempts = 0;
+        var maxAttempts = 60; // ~2 min (una consulta cada 2s)
+        var interval = setInterval(function() {
+            attempts++;
+            fetch('/pos/api/marketplace-ext/listings/async/' + encodeURIComponent(taskId), { headers: { 'Authorization': 'Bearer ' + getToken() } })
+                .then(function(r) { return r.json(); })
+                .then(function(data) {
+                    if (data.error) {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>';
+                        return;
+                    }
+                    if (data.status === 'done') {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        _renderPublishResult(data.result || {}, resultEl);
+                        setTimeout(function() { closeMeliPublishModal(); }, 3000);
+                    } else if (attempts >= maxAttempts) {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        resultEl.innerHTML = '<span style="color:var(--color-error);">Timeout esperando resultado. Revisa la pestaña Publicaciones más tarde.</span>';
+                    } else {
+                        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Publicando en segundo plano... (' + (attempts * 2) + 's)</span>';
+                    }
+                }).catch(function() {
+                    clearInterval(interval);
+                    if (btn) btn.disabled = false;
+                    resultEl.innerHTML = '<span style="color:var(--color-error);">Error consultando progreso</span>';
+                });
+        }, 2000);
+    }
+
+    window.validateMeliPublish = function() {
+        var categoryId = document.getElementById('meliCategoryId').value.trim();
+        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
+        var listingType = document.getElementById('meliListingType').value;
+        var shippingMode = document.getElementById('meliShippingMode').value;
+        var ids = Array.from(selectedItems);
+        var resultEl = document.getElementById('meliPublishResult');
+        var btn = document.getElementById('meliValidateBtn');
+        btn.disabled = true;
+        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Validando con MercadoLibre...</span>';
+        fetch('/pos/api/marketplace-ext/listings/validate', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                inventory_ids: ids,
+                category_id: categoryId,
+                listing_type: listingType,
+                shipping_mode: shippingMode,
+                custom_data: _collectMeliCustomData()
+            })
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              btn.disabled = false;
+              if (data.error) { resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
+              var valid = (data.valid || []);
+              var invalid = (data.invalid || []);
+              var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + valid.length + ' válido(s)</span> · <span style="color:var(--color-error);">❌ ' + invalid.length + ' inválido(s)</span></div>';
+
+              // Show earnings estimate table for valid items
+              if (valid.length > 0) {
+                  html += '<div style="margin:var(--space-3) 0;border:1px solid var(--color-border);border-radius:var(--radius-md);overflow:hidden;">';
+                  html += '<div style="background:var(--color-surface-2);padding:var(--space-2) var(--space-3);font-size:var(--text-caption);font-weight:600;color:var(--color-text-primary);">💰 Estimado de ganancia (después de comisiones ML)</div>';
+                  html += '<table style="width:100%;border-collapse:collapse;font-size:var(--text-caption);">';
+                  html += '<tr style="background:var(--color-surface-1);"><th style="padding:6px 8px;text-align:left;">Item</th><th style="padding:6px 8px;text-align:right;">Precio</th><th style="padding:6px 8px;text-align:right;">Comisión</th><th style="padding:6px 8px;text-align:right;">Recibes</th></tr>';
+                  valid.forEach(function(v) {
+                      var price = v.price || 0;
+                      var fee = v.fee_amount || 0;
+                      var net = v.net_amount || 0;
+                      var feePct = v.fee_pct || 0;
+                      html += '<tr style="border-top:1px solid var(--color-border);">';
+                      html += '<td style="padding:6px 8px;">#' + esc(v.inventory_id) + '</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;">$' + price.toFixed(2) + '</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-error);">-$' + fee.toFixed(2) + ' (' + feePct.toFixed(1) + '%)</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-success);font-weight:600;">$' + net.toFixed(2) + '</td>';
+                      html += '</tr>';
+                  });
+                  html += '</table>';
+                  if (valid.some(function(v){ return v.fee_source === 'approximation'; })) {
+                      html += '<div style="padding:var(--space-2) var(--space-3);font-size:10px;color:var(--color-text-muted);background:var(--color-surface-0);">* Comisión estimada. El monto real puede variar según ML.</div>';
+                  }
+                  html += '</div>';
+              }
+
+              if (invalid.length) {
+                  html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+                  invalid.forEach(function(f) {
+                      html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
+                  });
+                  html += '</ul>';
+              }
+              resultEl.innerHTML = html;
+          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
+    };
+
+    window.executeMeliPublish = function() {
+        var categoryId = document.getElementById('meliCategoryId').value.trim();
+        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
+        var listingType = document.getElementById('meliListingType').value;
+        var shippingMode = document.getElementById('meliShippingMode').value;
+        var ids = Array.from(selectedItems);
+        var resultEl = document.getElementById('meliPublishResult');
+        var btn = document.getElementById('meliPublishBtn');
+        btn.disabled = true;
+        var useAsync = ids.length > 3;
+        var endpoint = useAsync ? '/pos/api/marketplace-ext/listings/async' : '/pos/api/marketplace-ext/listings';
+        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">' + (useAsync ? 'Encolando ' : 'Publicando ') + ids.length + ' producto(s)...</span>';
+        fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                inventory_ids: ids,
+                category_id: categoryId,
+                listing_type: listingType,
+                shipping_mode: shippingMode,
+                custom_data: _collectMeliCustomData()
+            })
+        }).then(function(r) { return r.json(); })
+          .then(function(data) {
+              if (data.error) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
+              if (useAsync && data.task_id) {
+                  _pollMeliAsync(data.task_id, resultEl, btn);
+              } else {
+                  btn.disabled = false;
+                  _renderPublishResult(data, resultEl);
+                  if ((data.success || []).length > 0) {
+                      setTimeout(function() { closeMeliPublishModal(); }, 2500);
+                  }
+              }
+          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
+    };
+
+    function refreshMeliPublishPreview() {
+        var container = document.getElementById('meliPublishItemsPreview');
+        var countEl = document.getElementById('meliPublishSelectedCount');
+        countEl.textContent = selectedItems.size + ' producto(s) seleccionado(s)';
+        container.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando verificaciones...</p>';
+
+        var ids = Array.from(selectedItems);
+        fetch('/pos/api/marketplace-ext/inventory-check', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({ inventory_ids: ids })
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              if (!data.items) { container.innerHTML = '<p style="color:var(--color-error);">Error cargando preview</p>'; return; }
+              var html = '';
+              data.items.forEach(function(it) {
+                  if (!it.exists) {
+                      html += '<div class="meli-preview-card" style="opacity:0.6;"><div style="color:var(--color-error);">Item #' + it.inventory_id + ' no encontrado</div></div>';
+                      return;
+                  }
+                  meliPreviewData[it.inventory_id] = it;
+                  var checks = '';
+                  checks += '<span class="meli-check ' + (it.has_image ? 'ok' : 'fail') + '">' + (it.has_image ? '✅' : '❌') + ' Imagen' + (it.images_count > 1 ? ' (' + it.images_count + ')' : '') + '</span>';
+                  checks += '<span class="meli-check ' + (it.has_stock ? 'ok' : 'fail') + '">' + (it.has_stock ? '✅' : '❌') + ' Stock</span>';
+                  checks += '<span class="meli-check ' + (it.has_price ? 'ok' : 'fail') + '">' + (it.has_price ? '✅' : '❌') + ' Precio</span>';
+                  if (it.condition) {
+                      var condLabel = it.condition === 'nuevo' ? 'Nuevo' : (it.condition === 'reconstruido' ? 'Reconstruido' : 'Usado');
+                      if (it.condition_grade) condLabel += ' · Grado ' + it.condition_grade;
+                      checks += '<span class="meli-check ok">' + esc(condLabel) + '</span>';
+                  }
+                  if (it.already_published) {
+                      checks += '<span class="meli-check ok">✅ <a href="' + esc(it.existing_listing.permalink || '#') + '" target="_blank" style="color:var(--color-success);text-decoration:underline;">Ya publicado (' + esc(it.existing_listing.status) + ')</a></span>';
+                  }
+                  var imgSrc = it.image_url || '';
+                  var imgHtml = imgSrc ? '<img src="' + esc(imgSrc) + '" alt="" onerror="this.style.display=\'none\'">' : '<div style="width:56px;height:56px;background:var(--color-surface-2);border-radius:var(--radius-sm);display:flex;align-items:center;justify-content:center;font-size:10px;color:var(--color-text-muted);">Sin img</div>';
+                  if (!it.has_image) {
+                      imgHtml = '<div class="meli-img-upload" onclick="document.getElementById(\'meliImgUpload-' + it.inventory_id + '\').click()">' +
+                          '<div style="font-size:10px;">+ Subir</div>' +
+                          '<input type="file" id="meliImgUpload-' + it.inventory_id + '" accept="image/*" onchange="handleMeliImageUpload(' + it.inventory_id + ', this)">' +
+                          '</div>';
+                  }
+                  html += '<div class="meli-preview-card" id="meliCard-' + it.inventory_id + '">' +
+                      imgHtml +
+                      '<div>' +
+                          '<input type="text" class="meli-title-input" id="meliTitle-' + it.inventory_id + '" value="' + esc(it.title) + '" maxlength="60" oninput="updateMeliTitleCount(' + it.inventory_id + ')">' +
+                          '<div style="font-size:10px;color:var(--color-text-muted);text-align:right;" id="meliTitleCount-' + it.inventory_id + '">' + it.title.length + '/60</div>' +
+                          '<div class="meli-checks-row">' + checks + '</div>' +
+                      '</div>' +
+                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Precio</label><input type="number" class="meli-num-input" id="meliPrice-' + it.inventory_id + '" value="' + it.price + '" oninput="scheduleMeliFeeEstimates()"></div>' +
+                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Stock</label><input type="number" class="meli-num-input" id="meliStock-' + it.inventory_id + '" value="' + it.stock + '"></div>' +
+                      '<div id="meliFee-' + it.inventory_id + '" style="font-size:10px;color:var(--color-text-muted);min-width:130px;line-height:1.35;"></div>' +
+                      '</div>';
+              });
+              container.innerHTML = html;
+              scheduleMeliFeeEstimates();
+          }).catch(function() { container.innerHTML = '<p style="color:var(--color-error);">Error de red</p>'; });
+    }
+
+    window.selectMeliCategory = function(id, name) {
+        document.getElementById('meliCategoryId').value = id;
+        document.getElementById('meliCategorySearch').value = name;
+        document.getElementById('meliCategoryResults').innerHTML = '';
+        meliCatItems = [];
+        meliCatActiveIndex = -1;
+        loadCategoryAttributes(id);
+        scheduleMeliFeeEstimates();
+    };
+
+    window.selectMeliCategoryIdx = function(idx) {
+        var c = meliCatItems[idx];
+        if (!c) return;
+        selectMeliCategory(c.category_id, c.category_name || c.category_id);
+    };
+
+    window.highlightMeliCat = function(idx) {
+        meliCatActiveIndex = idx;
+        var items = document.querySelectorAll('.meli-cat-item');
+        items.forEach(function(el, i) { el.classList.toggle('is-active', i === idx); });
+    };
+
+    window.loadCategoryAttributes = function(categoryId) {
+        var grid = document.getElementById('meliAttrsGrid');
+        var section = document.getElementById('meliAttrsSection');
+        grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando atributos...</p>';
+        section.style.display = 'block';
+        fetch('/pos/api/marketplace-ext/categories/' + encodeURIComponent(categoryId) + '/attributes', { headers: { 'Authorization': 'Bearer ' + getToken() } })
+            .then(function(r){ return r.json(); })
+            .then(function(data) {
+                meliCategoryAttrs = data.attributes || [];
+                if (!meliCategoryAttrs.length) { grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">No hay atributos obligatorios adicionales.</p>'; return; }
+                var html = '';
+                meliCategoryAttrs.forEach(function(attr) {
+                    var attrId = esc(attr.id);
+                    var attrName = esc(attr.name || attr.id);
+                    var inputHtml = '<input type="text" class="meli-title-input" id="meliAttr-' + attrId + '" placeholder="' + attrName + '">';
+                    if (attr.values && attr.values.length) {
+                        // Some ML attributes (like BRAND) have a closed list but the API still
+                        // accepts free-text via value_name. Provide a select + "Other" fallback.
+                        var selectId = 'meliAttrSel-' + attrId;
+                        var otherId = 'meliAttrOther-' + attrId;
+                        inputHtml = '<select class="meli-title-input" id="' + selectId + '" onchange="onMeliAttrSelectChange(\'' + attrId + '\')">' +
+                            '<option value="">Selecciona ' + attrName + '</option>' +
+                            attr.values.map(function(v) { return '<option value="' + esc(v.name) + '">' + esc(v.name) + '</option>'; }).join('') +
+                            '<option value="__other__">Otra marca (escribir)...</option>' +
+                            '</select>' +
+                            '<input type="text" class="meli-title-input" id="' + otherId + '" placeholder="Escribe la ' + attrName + '" style="display:none;margin-top:6px;">';
+                    }
+                    html += '<div class="inv-field" id="meliAttrWrap-' + attrId + '"><label>' + attrName + (attr.tags && attr.tags.required ? ' *' : '') + '</label>' + inputHtml + '</div>';
+                });
+                grid.innerHTML = html;
+            }).catch(function() { grid.innerHTML = '<p style="color:var(--color-error);font-size:var(--text-caption);">Error cargando atributos</p>'; });
+    };
+
+    window.onMeliAttrSelectChange = function(attrId) {
+        var sel = document.getElementById('meliAttrSel-' + attrId);
+        var other = document.getElementById('meliAttrOther-' + attrId);
+        if (!sel || !other) return;
+        if (sel.value === '__other__') {
+            other.style.display = 'block';
+            other.focus();
+        } else {
+            other.style.display = 'none';
+            other.value = '';
+        }
+    };
+
+    window.updateMeliTitleCount = function(id) {
+        var el = document.getElementById('meliTitle-' + id);
+        var countEl = document.getElementById('meliTitleCount-' + id);
+        if (el && countEl) countEl.textContent = el.value.length + '/60';
+    };
+
+    window.handleMeliImageUpload = function(itemId, input) {
+        if (!input.files || !input.files[0]) return;
+        var file = input.files[0];
+        var formData = new FormData();
+        formData.append('file', file);
+        fetch('/pos/api/inventory/items/' + itemId + '/image', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken() },
+            body: formData
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              if (data.image_url) {
+                  showToast('Imagen subida', 'success');
+                  refreshMeliPublishPreview();
+                  if (inventoryVS) inventoryVS.refresh();
+              } else {
+                  showToast(data.error || 'Error subiendo imagen', 'error');
+              }
+          }).catch(function(){ showToast('Error de red', 'error'); });
+    };
+
+    // ─── Estimador de comisiones MeLi (por artículo) ───
+    var meliFeeTimeout;
+    function fmtMoney(n) {
+        return '$' + (parseFloat(n) || 0).toLocaleString('es-MX', {minimumFractionDigits: 2, maximumFractionDigits: 2});
+    }
+    function updateMeliFeeEstimates() {
+        var categoryId = (document.getElementById('meliCategoryId') || {}).value;
+        var listingType = (document.getElementById('meliListingType') || {}).value || 'gold_special';
+        var ids = Object.keys(window.meliPreviewData || (typeof meliPreviewData !== 'undefined' ? meliPreviewData : {}));
+        if (!ids.length) return;
+        ids.forEach(function (id) {
+            var feeEl = document.getElementById('meliFee-' + id);
+            if (!feeEl) return;
+            if (!categoryId) { feeEl.innerHTML = ''; return; }
+            var priceEl = document.getElementById('meliPrice-' + id);
+            var price = parseFloat(priceEl && priceEl.value) || 0;
+            if (price <= 0) { feeEl.innerHTML = '<span style="color:var(--color-text-muted);">Ingresa un precio para estimar comisiones</span>'; return; }
+            feeEl.innerHTML = '<span style="color:var(--color-text-muted);">Calculando comisiones...</span>';
+            fetch('/pos/api/marketplace-ext/listing-prices?price=' + encodeURIComponent(price) + '&category_id=' + encodeURIComponent(categoryId), { headers: { 'Authorization': 'Bearer ' + getToken() } })
+                .then(function (r) { return r.json().then(function (d) { return {ok: r.ok, data: d}; }); })
+                .then(function (res) {
+                    if (!res.ok || res.data.error) { feeEl.innerHTML = '<span style="color:var(--color-warning);">No se pudo estimar: ' + esc(res.data.error || 'error') + '</span>'; return; }
+                    var offers = res.data.listing_prices || [];
+                    var offer = null;
+                    offers.forEach(function (o) { if (o.listing_type_id === listingType) offer = o; });
+                    if (!offer && offers.length) offer = offers[0];
+                    if (!offer || !offer.sale_fee_details) { feeEl.innerHTML = ''; return; }
+                    var fee = offer.sale_fee_details.gross_amount || 0;
+                    var pct = offer.sale_fee_details.percentage_fee || 0;
+                    var net = price - fee;
+                    feeEl.innerHTML = '💰 Comisión MeLi: <strong style="color:var(--color-warning);">' + fmtMoney(fee) + ' (' + pct + '%)</strong>'
+                        + ' · Recibes: <strong style="color:' + (net > 0 ? 'var(--color-success)' : 'var(--color-error)') + ';">' + fmtMoney(net) + '</strong>'
+                        + ' <span style="opacity:.65;">(estimado, sin costo de envío)</span>';
+                })
+                .catch(function () { feeEl.innerHTML = ''; });
+        });
+    }
+    function scheduleMeliFeeEstimates() {
+        clearTimeout(meliFeeTimeout);
+        meliFeeTimeout = setTimeout(updateMeliFeeEstimates, 500);
+    }
+    window.scheduleMeliFeeEstimates = scheduleMeliFeeEstimates;
+
     // =====================================================================
     //  EXPOSE GLOBALS (for onclick handlers in HTML)
     // =====================================================================
@@ -2157,6 +2504,23 @@
     window.cancelDraft = cancelDraft;
     window.loadAlerts = loadAlerts;
     window.printBarcode = printBarcode;
+    window.switchTransferTab = switchTransferTab;
+    window.transferLineQty = transferLineQty;
+    window.transferLineRemove = transferLineRemove;
+    window.transferDocSave = transferDocSave;
+    window.transferDocSend = transferDocSend;
+    window.transferDocReceive = transferDocReceive;
+    window.transferDocCancel = transferDocCancel;
+    window.openTransferDoc = openTransferDoc;
+    window.loadTransferDocs = loadTransferDocs;
+    window.countQty = countQty;
+    window.countRemove = countRemove;
+    window.Inventory = window.Inventory || {};
+    window.Inventory = Object.assign(window.Inventory, {
+        switchTransferTab, transferLineQty, transferLineRemove, transferDocSave,
+        transferDocSend, transferDocReceive, transferDocCancel, openTransferDoc,
+        countQty, countRemove, transferAddByCode, countAddByCode,
+    });
     window.deleteItem = deleteItem;
     window.autoMatchCompat = autoMatchCompat;
     window.removeCompat = removeCompat;
diff --git a/pos/static/js/inventory.js.meli b/pos/static/js/inventory.js.meli
new file mode 100644
index 0000000..54708e7
--- /dev/null
+++ b/pos/static/js/inventory.js.meli
@@ -0,0 +1,497 @@
+    // ─── MercadoLibre Bulk Publish Modal ───────────────────────────────────
+
+    var meliPreviewData = {};
+    var meliCategoryAttrs = [];
+    var meliCategorySearchTimeout;
+    var meliCatItems = [];
+    var meliCatActiveIndex = -1;
+
+    window.openMeliPublishModal = function() {
+        if (selectedItems.size === 0) { showToast('Selecciona al menos un producto', 'warn'); return; }
+        document.getElementById('meliPublishModal').classList.add('is-open');
+        document.getElementById('meliPublishResult').innerHTML = '';
+        document.getElementById('meliCategoryId').value = '';
+        document.getElementById('meliCategorySearch').value = '';
+        document.getElementById('meliCategoryResults').innerHTML = '';
+        document.getElementById('meliAttrsSection').style.display = 'none';
+        document.getElementById('meliAttrsGrid').innerHTML = '';
+        meliCategoryAttrs = [];
+        refreshMeliPublishPreview();
+    };
+
+    window.closeMeliPublishModal = function() {
+        document.getElementById('meliPublishModal').classList.remove('is-open');
+    };
+
+    // ==== RESTAURADAS v4 (MELI + descuentos) ====
+
+    window.searchMeliCategories = function() {
+        var q = document.getElementById('meliCategorySearch').value.trim();
+        var resultsDiv = document.getElementById('meliCategoryResults');
+        if (q.length < 2) { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; return; }
+        clearTimeout(meliCategorySearchTimeout);
+        resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-loading">Buscando...</div></div>';
+        meliCategorySearchTimeout = setTimeout(function() {
+            fetch('/pos/api/marketplace-ext/categories?q=' + encodeURIComponent(q), { headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' } })
+                .then(function(r) { return r.json(); })
+                .then(function(data) {
+                    var cats = data.categories || [];
+                    meliCatItems = cats.slice(0, 10);
+                    meliCatActiveIndex = -1;
+                    if (!meliCatItems.length) { resultsDiv.innerHTML = '<div class="meli-cat-dropdown"><div class="meli-cat-empty">Sin resultados</div></div>'; return; }
+                    var html = '<div class="meli-cat-dropdown">';
+                    meliCatItems.forEach(function(c, idx) {
+                        html += '<div class="meli-cat-item" data-idx="' + idx + '" onmouseenter="highlightMeliCat(' + idx + ')" onmousedown="selectMeliCategoryIdx(' + idx + ')">' +
+                            '<span>' + esc(c.category_name || c.category_id) + '</span>' +
+                            '<span class="cat-id">' + esc(c.category_id) + '</span>' +
+                            '</div>';
+                    });
+                    html += '</div>';
+                    resultsDiv.innerHTML = html;
+                })
+                .catch(function() { resultsDiv.innerHTML = ''; meliCatItems = []; meliCatActiveIndex = -1; });
+        }, 300);
+    };
+
+    window.handleMeliCatKeydown = function(e) {
+        if (!meliCatItems.length) return;
+        if (e.key === 'ArrowDown') {
+            e.preventDefault();
+            meliCatActiveIndex = Math.min(meliCatActiveIndex + 1, meliCatItems.length - 1);
+            highlightMeliCat(meliCatActiveIndex);
+        } else if (e.key === 'ArrowUp') {
+            e.preventDefault();
+            meliCatActiveIndex = Math.max(meliCatActiveIndex - 1, -1);
+            highlightMeliCat(meliCatActiveIndex);
+        } else if (e.key === 'Enter') {
+            e.preventDefault();
+            if (meliCatActiveIndex >= 0) selectMeliCategoryIdx(meliCatActiveIndex);
+        } else if (e.key === 'Escape') {
+            document.getElementById('meliCategoryResults').innerHTML = '';
+            meliCatItems = [];
+            meliCatActiveIndex = -1;
+        }
+    };
+
+    /* Cerrar dropdown al hacer click fuera */
+    document.addEventListener('click', function(e) {
+        var field = document.getElementById('meliCategorySearch');
+        var results = document.getElementById('meliCategoryResults');
+        if (field && results && !field.contains(e.target) && !results.contains(e.target)) {
+            results.innerHTML = '';
+            meliCatItems = [];
+            meliCatActiveIndex = -1;
+        }
+    });
+
+    window.onMeliShippingChange = function() {
+        var mode = document.getElementById('meliShippingMode').value;
+        var costField = document.getElementById('meliShippingCostField');
+        if (costField) costField.style.display = (mode === 'custom') ? 'block' : 'none';
+    };
+
+    // ─── MELI publish helpers ──────────────────────────────────────────────
+    // Contrato de `custom_data` esperado por validate_items / publish_items
+    // (pos/services/marketplace_external_service.py):
+    //   {
+    //     titles:     { "<inventory_id>": "Título (<=60)" },
+    //     prices:     { "<inventory_id>": 123.45 },
+    //     stocks:     { "<inventory_id>": 3 },
+    //     attributes: { "<inventory_id>": [{ id: "BRAND", value_name: "Nissan" }] },
+    //     shipping_cost: 150          // solo se usa si shipping_mode === 'custom'
+    //   }
+    // Las claves son el id de inventario como string (el backend consulta con str(inv_id)).
+    function _meliAttrValue(attr) {
+        // Los atributos con lista cerrada se pintan como <select> + input "Otra (escribir)";
+        // el resto como un input de texto libre.
+        var selEl = document.getElementById('meliAttrSel-' + attr.id);
+        if (selEl) {
+            if (selEl.value === '__other__') {
+                var otherEl = document.getElementById('meliAttrOther-' + attr.id);
+                return otherEl ? otherEl.value.trim() : '';
+            }
+            return (selEl.value || '').trim();
+        }
+        var el = document.getElementById('meliAttr-' + attr.id);
+        return el ? (el.value || '').trim() : '';
+    }
+
+    function _collectMeliCustomData() {
+        var ids = Array.from(selectedItems);
+        var customData = { titles: {}, prices: {}, stocks: {}, attributes: {} };
+        ids.forEach(function(id) {
+            var titleEl = document.getElementById('meliTitle-' + id);
+            var priceEl = document.getElementById('meliPrice-' + id);
+            var stockEl = document.getElementById('meliStock-' + id);
+            if (titleEl && titleEl.value.trim()) customData.titles[id] = titleEl.value.trim();
+            if (priceEl) {
+                var price = parseFloat(priceEl.value);
+                if (!isNaN(price)) customData.prices[id] = price;
+            }
+            if (stockEl) {
+                var stock = parseInt(stockEl.value, 10);
+                if (!isNaN(stock)) customData.stocks[id] = stock;
+            }
+            var attrs = [];
+            (meliCategoryAttrs || []).forEach(function(attr) {
+                var value = _meliAttrValue(attr);
+                if (attr.id && value) attrs.push({ id: attr.id, value_name: value });
+            });
+            if (attrs.length) customData.attributes[id] = attrs;
+        });
+        // El backend solo lo aplica con shipping_mode === 'custom'; si el campo no
+        // existe o está vacío simplemente se omite.
+        var shippingCostEl = document.getElementById('meliShippingCost');
+        var shippingCost = shippingCostEl ? parseFloat(shippingCostEl.value) : NaN;
+        if (!isNaN(shippingCost)) customData.shipping_cost = shippingCost;
+        return customData;
+    }
+
+    function _renderPublishResult(data, resultEl) {
+        if (!resultEl) return;
+        data = data || {};
+        var successList = data.success || [];
+        var failedList = data.failed || [];
+        var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + successList.length + ' publicado(s)</span> · <span style="color:var(--color-error);">❌ ' + failedList.length + ' fallo(s)</span></div>';
+        if (successList.length) {
+            html += '<ul style="margin:0 0 var(--space-2);padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+            successList.forEach(function(s) {
+                var itemId = s.external_item_id || s.item_id;
+                var label = 'Item #' + esc(s.inventory_id);
+                if (itemId) {
+                    label += ' → <a href="' + esc(s.permalink || '#') + '" target="_blank" rel="noopener" style="color:var(--color-primary);">' + esc(itemId) + '</a>';
+                }
+                html += '<li>' + label + '</li>';
+            });
+            html += '</ul>';
+        }
+        if (failedList.length) {
+            html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+            failedList.forEach(function(f) {
+                html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
+            });
+            html += '</ul>';
+        }
+        resultEl.innerHTML = html;
+        if (successList.length > 0) {
+            selectedItems.clear();
+            updateSelectionUI();
+            if (inventoryVS) inventoryVS.refresh();
+        }
+    }
+
+    function _pollMeliAsync(taskId, resultEl, btn) {
+        var attempts = 0;
+        var maxAttempts = 60; // ~2 min (una consulta cada 2s)
+        var interval = setInterval(function() {
+            attempts++;
+            fetch('/pos/api/marketplace-ext/listings/async/' + encodeURIComponent(taskId), { headers: { 'Authorization': 'Bearer ' + getToken() } })
+                .then(function(r) { return r.json(); })
+                .then(function(data) {
+                    if (data.error) {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>';
+                        return;
+                    }
+                    if (data.status === 'done') {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        _renderPublishResult(data.result || {}, resultEl);
+                        setTimeout(function() { closeMeliPublishModal(); }, 3000);
+                    } else if (attempts >= maxAttempts) {
+                        clearInterval(interval);
+                        if (btn) btn.disabled = false;
+                        resultEl.innerHTML = '<span style="color:var(--color-error);">Timeout esperando resultado. Revisa la pestaña Publicaciones más tarde.</span>';
+                    } else {
+                        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Publicando en segundo plano... (' + (attempts * 2) + 's)</span>';
+                    }
+                }).catch(function() {
+                    clearInterval(interval);
+                    if (btn) btn.disabled = false;
+                    resultEl.innerHTML = '<span style="color:var(--color-error);">Error consultando progreso</span>';
+                });
+        }, 2000);
+    }
+
+    window.validateMeliPublish = function() {
+        var categoryId = document.getElementById('meliCategoryId').value.trim();
+        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
+        var listingType = document.getElementById('meliListingType').value;
+        var shippingMode = document.getElementById('meliShippingMode').value;
+        var ids = Array.from(selectedItems);
+        var resultEl = document.getElementById('meliPublishResult');
+        var btn = document.getElementById('meliValidateBtn');
+        btn.disabled = true;
+        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">Validando con MercadoLibre...</span>';
+        fetch('/pos/api/marketplace-ext/listings/validate', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                inventory_ids: ids,
+                category_id: categoryId,
+                listing_type: listingType,
+                shipping_mode: shippingMode,
+                custom_data: _collectMeliCustomData()
+            })
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              btn.disabled = false;
+              if (data.error) { resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
+              var valid = (data.valid || []);
+              var invalid = (data.invalid || []);
+              var html = '<div style="margin-bottom:var(--space-2);"><span style="color:var(--color-success);">✅ ' + valid.length + ' válido(s)</span> · <span style="color:var(--color-error);">❌ ' + invalid.length + ' inválido(s)</span></div>';
+
+              // Show earnings estimate table for valid items
+              if (valid.length > 0) {
+                  html += '<div style="margin:var(--space-3) 0;border:1px solid var(--color-border);border-radius:var(--radius-md);overflow:hidden;">';
+                  html += '<div style="background:var(--color-surface-2);padding:var(--space-2) var(--space-3);font-size:var(--text-caption);font-weight:600;color:var(--color-text-primary);">💰 Estimado de ganancia (después de comisiones ML)</div>';
+                  html += '<table style="width:100%;border-collapse:collapse;font-size:var(--text-caption);">';
+                  html += '<tr style="background:var(--color-surface-1);"><th style="padding:6px 8px;text-align:left;">Item</th><th style="padding:6px 8px;text-align:right;">Precio</th><th style="padding:6px 8px;text-align:right;">Comisión</th><th style="padding:6px 8px;text-align:right;">Recibes</th></tr>';
+                  valid.forEach(function(v) {
+                      var price = v.price || 0;
+                      var fee = v.fee_amount || 0;
+                      var net = v.net_amount || 0;
+                      var feePct = v.fee_pct || 0;
+                      html += '<tr style="border-top:1px solid var(--color-border);">';
+                      html += '<td style="padding:6px 8px;">#' + esc(v.inventory_id) + '</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;">$' + price.toFixed(2) + '</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-error);">-$' + fee.toFixed(2) + ' (' + feePct.toFixed(1) + '%)</td>';
+                      html += '<td style="padding:6px 8px;text-align:right;color:var(--color-success);font-weight:600;">$' + net.toFixed(2) + '</td>';
+                      html += '</tr>';
+                  });
+                  html += '</table>';
+                  if (valid.some(function(v){ return v.fee_source === 'approximation'; })) {
+                      html += '<div style="padding:var(--space-2) var(--space-3);font-size:10px;color:var(--color-text-muted);background:var(--color-surface-0);">* Comisión estimada. El monto real puede variar según ML.</div>';
+                  }
+                  html += '</div>';
+              }
+
+              if (invalid.length) {
+                  html += '<ul style="margin:0;padding-left:var(--space-4);font-size:var(--text-caption);color:var(--color-text-secondary);">';
+                  invalid.forEach(function(f) {
+                      html += '<li>Item #' + esc(f.inventory_id) + ': ' + esc(f.error) + '</li>';
+                  });
+                  html += '</ul>';
+              }
+              resultEl.innerHTML = html;
+          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
+    };
+
+    window.executeMeliPublish = function() {
+        var categoryId = document.getElementById('meliCategoryId').value.trim();
+        if (!categoryId) { document.getElementById('meliPublishResult').innerHTML = '<span style="color:var(--color-error);">Selecciona una categoría de MercadoLibre</span>'; return; }
+        var listingType = document.getElementById('meliListingType').value;
+        var shippingMode = document.getElementById('meliShippingMode').value;
+        var ids = Array.from(selectedItems);
+        var resultEl = document.getElementById('meliPublishResult');
+        var btn = document.getElementById('meliPublishBtn');
+        btn.disabled = true;
+        var useAsync = ids.length > 3;
+        var endpoint = useAsync ? '/pos/api/marketplace-ext/listings/async' : '/pos/api/marketplace-ext/listings';
+        resultEl.innerHTML = '<span style="color:var(--color-text-muted);">' + (useAsync ? 'Encolando ' : 'Publicando ') + ids.length + ' producto(s)...</span>';
+        fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                inventory_ids: ids,
+                category_id: categoryId,
+                listing_type: listingType,
+                shipping_mode: shippingMode,
+                custom_data: _collectMeliCustomData()
+            })
+        }).then(function(r) { return r.json(); })
+          .then(function(data) {
+              if (data.error) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(data.error) + '</span>'; return; }
+              if (useAsync && data.task_id) {
+                  _pollMeliAsync(data.task_id, resultEl, btn);
+              } else {
+                  btn.disabled = false;
+                  _renderPublishResult(data, resultEl);
+                  if ((data.success || []).length > 0) {
+                      setTimeout(function() { closeMeliPublishModal(); }, 2500);
+                  }
+              }
+          }).catch(function(e) { btn.disabled = false; resultEl.innerHTML = '<span style="color:var(--color-error);">Error: ' + esc(e.message) + '</span>'; });
+    };
+
+    function refreshMeliPublishPreview() {
+        var container = document.getElementById('meliPublishItemsPreview');
+        var countEl = document.getElementById('meliPublishSelectedCount');
+        countEl.textContent = selectedItems.size + ' producto(s) seleccionado(s)';
+        container.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando verificaciones...</p>';
+
+        var ids = Array.from(selectedItems);
+        fetch('/pos/api/marketplace-ext/inventory-check', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' },
+            body: JSON.stringify({ inventory_ids: ids })
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              if (!data.items) { container.innerHTML = '<p style="color:var(--color-error);">Error cargando preview</p>'; return; }
+              var html = '';
+              data.items.forEach(function(it) {
+                  if (!it.exists) {
+                      html += '<div class="meli-preview-card" style="opacity:0.6;"><div style="color:var(--color-error);">Item #' + it.inventory_id + ' no encontrado</div></div>';
+                      return;
+                  }
+                  meliPreviewData[it.inventory_id] = it;
+                  var checks = '';
+                  checks += '<span class="meli-check ' + (it.has_image ? 'ok' : 'fail') + '">' + (it.has_image ? '✅' : '❌') + ' Imagen</span>';
+                  checks += '<span class="meli-check ' + (it.has_stock ? 'ok' : 'fail') + '">' + (it.has_stock ? '✅' : '❌') + ' Stock</span>';
+                  checks += '<span class="meli-check ' + (it.has_price ? 'ok' : 'fail') + '">' + (it.has_price ? '✅' : '❌') + ' Precio</span>';
+                  if (it.already_published) {
+                      checks += '<span class="meli-check ok">✅ <a href="' + esc(it.existing_listing.permalink || '#') + '" target="_blank" style="color:var(--color-success);text-decoration:underline;">Ya publicado (' + esc(it.existing_listing.status) + ')</a></span>';
+                  }
+                  var imgSrc = it.image_url || '';
+                  var imgHtml = imgSrc ? '<img src="' + esc(imgSrc) + '" alt="" onerror="this.style.display=\'none\'">' : '<div style="width:56px;height:56px;background:var(--color-surface-2);border-radius:var(--radius-sm);display:flex;align-items:center;justify-content:center;font-size:10px;color:var(--color-text-muted);">Sin img</div>';
+                  if (!it.has_image) {
+                      imgHtml = '<div class="meli-img-upload" onclick="document.getElementById(\'meliImgUpload-' + it.inventory_id + '\').click()">' +
+                          '<div style="font-size:10px;">+ Subir</div>' +
+                          '<input type="file" id="meliImgUpload-' + it.inventory_id + '" accept="image/*" onchange="handleMeliImageUpload(' + it.inventory_id + ', this)">' +
+                          '</div>';
+                  }
+                  html += '<div class="meli-preview-card" id="meliCard-' + it.inventory_id + '">' +
+                      imgHtml +
+                      '<div>' +
+                          '<input type="text" class="meli-title-input" id="meliTitle-' + it.inventory_id + '" value="' + esc(it.title) + '" maxlength="60" oninput="updateMeliTitleCount(' + it.inventory_id + ')">' +
+                          '<div style="font-size:10px;color:var(--color-text-muted);text-align:right;" id="meliTitleCount-' + it.inventory_id + '">' + it.title.length + '/60</div>' +
+                          '<div class="meli-checks-row">' + checks + '</div>' +
+                      '</div>' +
+                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Precio</label><input type="number" class="meli-num-input" id="meliPrice-' + it.inventory_id + '" value="' + it.price + '" oninput="scheduleMeliFeeEstimates()"></div>' +
+                      '<div><label style="font-size:10px;color:var(--color-text-muted);">Stock</label><input type="number" class="meli-num-input" id="meliStock-' + it.inventory_id + '" value="' + it.stock + '"></div>' +
+                      '<div id="meliFee-' + it.inventory_id + '" style="font-size:10px;color:var(--color-text-muted);min-width:130px;line-height:1.35;"></div>' +
+                      '</div>';
+              });
+              container.innerHTML = html;
+              scheduleMeliFeeEstimates();
+          }).catch(function() { container.innerHTML = '<p style="color:var(--color-error);">Error de red</p>'; });
+    }
+
+    window.selectMeliCategory = function(id, name) {
+        document.getElementById('meliCategoryId').value = id;
+        document.getElementById('meliCategorySearch').value = name;
+        document.getElementById('meliCategoryResults').innerHTML = '';
+        meliCatItems = [];
+        meliCatActiveIndex = -1;
+        loadCategoryAttributes(id);
+        scheduleMeliFeeEstimates();
+    };
+
+    window.selectMeliCategoryIdx = function(idx) {
+        var c = meliCatItems[idx];
+        if (!c) return;
+        selectMeliCategory(c.category_id, c.category_name || c.category_id);
+    };
+
+    window.highlightMeliCat = function(idx) {
+        meliCatActiveIndex = idx;
+        var items = document.querySelectorAll('.meli-cat-item');
+        items.forEach(function(el, i) { el.classList.toggle('is-active', i === idx); });
+    };
+
+    window.loadCategoryAttributes = function(categoryId) {
+        var grid = document.getElementById('meliAttrsGrid');
+        var section = document.getElementById('meliAttrsSection');
+        grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando atributos...</p>';
+        section.style.display = 'block';
+        fetch('/pos/api/marketplace-ext/categories/' + encodeURIComponent(categoryId) + '/attributes', { headers: { 'Authorization': 'Bearer ' + getToken() } })
+            .then(function(r){ return r.json(); })
+            .then(function(data) {
+                meliCategoryAttrs = data.attributes || [];
+                if (!meliCategoryAttrs.length) { grid.innerHTML = '<p style="color:var(--color-text-muted);font-size:var(--text-caption);">No hay atributos obligatorios adicionales.</p>'; return; }
+                var html = '';
+                meliCategoryAttrs.forEach(function(attr) {
+                    var attrId = esc(attr.id);
+                    var attrName = esc(attr.name || attr.id);
+                    var inputHtml = '<input type="text" class="meli-title-input" id="meliAttr-' + attrId + '" placeholder="' + attrName + '">';
+                    if (attr.values && attr.values.length) {
+                        // Some ML attributes (like BRAND) have a closed list but the API still
+                        // accepts free-text via value_name. Provide a select + "Other" fallback.
+                        var selectId = 'meliAttrSel-' + attrId;
+                        var otherId = 'meliAttrOther-' + attrId;
+                        inputHtml = '<select class="meli-title-input" id="' + selectId + '" onchange="onMeliAttrSelectChange(\'' + attrId + '\')">' +
+                            '<option value="">Selecciona ' + attrName + '</option>' +
+                            attr.values.map(function(v) { return '<option value="' + esc(v.name) + '">' + esc(v.name) + '</option>'; }).join('') +
+                            '<option value="__other__">Otra marca (escribir)...</option>' +
+                            '</select>' +
+                            '<input type="text" class="meli-title-input" id="' + otherId + '" placeholder="Escribe la ' + attrName + '" style="display:none;margin-top:6px;">';
+                    }
+                    html += '<div class="inv-field" id="meliAttrWrap-' + attrId + '"><label>' + attrName + (attr.tags && attr.tags.required ? ' *' : '') + '</label>' + inputHtml + '</div>';
+                });
+                grid.innerHTML = html;
+            }).catch(function() { grid.innerHTML = '<p style="color:var(--color-error);font-size:var(--text-caption);">Error cargando atributos</p>'; });
+    };
+
+    window.updateMeliTitleCount = function(id) {
+        var el = document.getElementById('meliTitle-' + id);
+        var countEl = document.getElementById('meliTitleCount-' + id);
+        if (el && countEl) countEl.textContent = el.value.length + '/60';
+    };
+
+    window.handleMeliImageUpload = function(itemId, input) {
+        if (!input.files || !input.files[0]) return;
+        var file = input.files[0];
+        var formData = new FormData();
+        formData.append('file', file);
+        fetch('/pos/api/inventory/items/' + itemId + '/image', {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken() },
+            body: formData
+        }).then(function(r){ return r.json(); })
+          .then(function(data) {
+              if (data.image_url) {
+                  showToast('Imagen subida', 'success');
+                  refreshMeliPublishPreview();
+                  if (inventoryVS) inventoryVS.refresh();
+              } else {
+                  showToast(data.error || 'Error subiendo imagen', 'error');
+              }
+          }).catch(function(){ showToast('Error de red', 'error'); });
+    };
+
+    // ─── Estimador de comisiones MeLi (por artículo) ───
+    var meliFeeTimeout;
+    function fmtMoney(n) {
+        return '$' + (parseFloat(n) || 0).toLocaleString('es-MX', {minimumFractionDigits: 2, maximumFractionDigits: 2});
+    }
+    function updateMeliFeeEstimates() {
+        var categoryId = (document.getElementById('meliCategoryId') || {}).value;
+        var listingType = (document.getElementById('meliListingType') || {}).value || 'gold_special';
+        var ids = Object.keys(window.meliPreviewData || (typeof meliPreviewData !== 'undefined' ? meliPreviewData : {}));
+        if (!ids.length) return;
+        ids.forEach(function (id) {
+            var feeEl = document.getElementById('meliFee-' + id);
+            if (!feeEl) return;
+            if (!categoryId) { feeEl.innerHTML = ''; return; }
+            var priceEl = document.getElementById('meliPrice-' + id);
+            var price = parseFloat(priceEl && priceEl.value) || 0;
+            if (price <= 0) { feeEl.innerHTML = '<span style="color:var(--color-text-muted);">Ingresa un precio para estimar comisiones</span>'; return; }
+            feeEl.innerHTML = '<span style="color:var(--color-text-muted);">Calculando comisiones...</span>';
+            fetch('/pos/api/marketplace-ext/listing-prices?price=' + encodeURIComponent(price) + '&category_id=' + encodeURIComponent(categoryId), { headers: { 'Authorization': 'Bearer ' + getToken() } })
+                .then(function (r) { return r.json().then(function (d) { return {ok: r.ok, data: d}; }); })
+                .then(function (res) {
+                    if (!res.ok || res.data.error) { feeEl.innerHTML = '<span style="color:var(--color-warning);">No se pudo estimar: ' + esc(res.data.error || 'error') + '</span>'; return; }
+                    var offers = res.data.listing_prices || [];
+                    var offer = null;
+                    offers.forEach(function (o) { if (o.listing_type_id === listingType) offer = o; });
+                    if (!offer && offers.length) offer = offers[0];
+                    if (!offer || !offer.sale_fee_details) { feeEl.innerHTML = ''; return; }
+                    var fee = offer.sale_fee_details.gross_amount || 0;
+                    var pct = offer.sale_fee_details.percentage_fee || 0;
+                    var net = price - fee;
+                    feeEl.innerHTML = '💰 Comisión MeLi: <strong style="color:var(--color-warning);">' + fmtMoney(fee) + ' (' + pct + '%)</strong>'
+                        + ' · Recibes: <strong style="color:' + (net > 0 ? 'var(--color-success)' : 'var(--color-error)') + ';">' + fmtMoney(net) + '</strong>'
+                        + ' <span style="opacity:.65;">(estimado, sin costo de envío)</span>';
+                })
+                .catch(function () { feeEl.innerHTML = ''; });
+        });
+    }
+    function scheduleMeliFeeEstimates() {
+        clearTimeout(meliFeeTimeout);
+        meliFeeTimeout = setTimeout(updateMeliFeeEstimates, 500);
+    }
+    window.scheduleMeliFeeEstimates = scheduleMeliFeeEstimates;
+
+    // =====================================================================
+    //  EXPOSE GLOBALS (for onclick handlers in HTML)
diff --git a/pos/static/js/login.js b/pos/static/js/login.js
index 353742f..ad48633 100644
--- a/pos/static/js/login.js
+++ b/pos/static/js/login.js
@@ -86,6 +86,8 @@
             var role = (result.data.employee.role || '').toLowerCase();
             if (role === 'workshop' || role === 'mechanic' || role === 'counter') {
                 window.location.href = '/pos/workshop';
+            } else if (role === 'driver') {
+                window.location.href = '/pos/remission-notes';
             } else {
                 window.location.href = '/pos/catalog';
             }
diff --git a/pos/static/js/marketplace_external.js b/pos/static/js/marketplace_external.js
index dd61862..1ca9923 100644
--- a/pos/static/js/marketplace_external.js
+++ b/pos/static/js/marketplace_external.js
@@ -53,6 +53,9 @@
                 connectedDiv.style.display = 'block';
                 document.getElementById('connectedNickname').textContent = cfg.meli_user_id || 'Usuario ML';
                 document.getElementById('connectedSite').textContent = cfg.meli_site_id || 'MLM';
+                if (!cfg.has_refresh_token) {
+                    statusDiv.innerHTML += '<div style="margin-top:8px;padding:10px;border-radius:6px;background:rgba(234,179,8,.12);color:#eab308;font-size:var(--text-caption);">⚠️ Esta conexión <strong>no tiene token de larga duración</strong> (refresh token) y expirará en ~6 horas. Habilite el scope <strong>offline_access</strong> en su aplicación de MercadoLibre Developers y vuelva a conectar para corregirlo.</div>';
+                }
             } else {
                 statusDiv.innerHTML = '<span class="meli-status meli-status--pending">● No conectado</span>';
                 formDiv.style.display = 'block';
@@ -133,6 +136,7 @@
             if (!res.ok) throw new Error('Failed to load listings');
             var data = await res.json();
             listingsData = data.items || [];
+            listingsData.forEach(function(l) { l.external_status = normStatus(l.external_status); });
             renderListings();
         } catch (e) {
             container.innerHTML = renderEmptyState({
@@ -244,6 +248,7 @@
             if (!res.ok) throw new Error('Failed to load orders');
             var data = await res.json();
             ordersData = data.items || [];
+            ordersData.forEach(function(o) { o.status = normStatus(o.status); });
             renderOrders();
         } catch (e) {
             tbody.innerHTML = '<tr><td colspan="6">' + renderEmptyState({
@@ -304,6 +309,7 @@
             var res = await fetch(API + '/orders/' + id, { headers: headers() });
             var o = await res.json();
             if (!res.ok) throw new Error(o.error || 'Error');
+            o.status = normStatus(o.status);
 
             var itemsHtml = (o.items || []).map(function(it) {
                 return '<tr><td>' + escapeHtml(it.title || '—') + '</td><td>' + it.quantity + '</td><td style="text-align:right">$' + (it.unit_price || 0).toFixed(2) + '</td></tr>';
@@ -368,6 +374,11 @@
 
     // ─── Utils ─────────────────────────────────────────────────────────────
 
+    // ML devuelve el estado de las preguntas en MAYÚSCULAS (UNANSWERED/ANSWERED/CLOSED)
+    // mientras que nuestros filtros y literales usan minúsculas -> comparar
+    // siempre en minúsculas para que las no respondidas aparezcan y se puedan responder.
+    function normStatus(s) { return String(s == null ? '' : s).toLowerCase(); }
+
     function escapeHtml(text) {
         if (!text) return '';
         var div = document.createElement('div');
@@ -394,7 +405,11 @@
                 });
                 var data = await res.json();
                 if (res.ok) {
-                    alert('¡Conectado exitosamente con MercadoLibre!');
+                    if (data.warning === 'no_refresh_token') {
+                        alert('Conectado con MercadoLibre, pero con una advertencia:\n\nMercadoLibre NO devolvió un token de larga duración (refresh token), así que la conexión expirará en ~6 horas.\n\nPara corregirlo: entre a developers.mercadolibre.com → su aplicación → Editar → habilite el scope "offline_access" y vuelva a conectar.');
+                    } else {
+                        alert('¡Conectado exitosamente con MercadoLibre!');
+                    }
                     window.history.replaceState({}, document.title, '/pos/marketplace-external');
                     loadConfig();
                 } else {
@@ -415,9 +430,9 @@
             if (!res.ok) throw new Error('Failed');
             var data = await res.json();
             var items = data.items || [];
-            var active = items.filter(function(l) { return l.external_status === 'active'; }).length;
-            var paused = items.filter(function(l) { return l.external_status === 'paused'; }).length;
-            var closed = items.filter(function(l) { return l.external_status === 'closed'; }).length;
+            var active = items.filter(function(l) { return normStatus(l.external_status) === 'active'; }).length;
+            var paused = items.filter(function(l) { return normStatus(l.external_status) === 'paused'; }).length;
+            var closed = items.filter(function(l) { return normStatus(l.external_status) === 'closed'; }).length;
             var total = items.length;
 
             var html = '<div style="display:flex;gap:var(--space-4);flex-wrap:wrap;margin-bottom:var(--space-4);">' +
@@ -489,6 +504,7 @@
             if (!res.ok) throw new Error('Failed to load questions');
             var data = await res.json();
             questionsData = data.items || [];
+            questionsData.forEach(function(q) { q.status = normStatus(q.status); });
             renderQuestions();
         } catch (e) {
             container.innerHTML = renderEmptyState({
@@ -506,14 +522,14 @@
         var search = document.getElementById('questionSearch').value.toLowerCase();
 
         var filtered = questionsData.filter(function(q) {
-            if (statusFilter && q.status !== statusFilter) return false;
+            if (statusFilter && normStatus(q.status) !== normStatus(statusFilter)) return false;
             if (search && !((q.question_text || '').toLowerCase().includes(search)) && !((q.listing_title || '').toLowerCase().includes(search))) return false;
             return true;
         });
 
         // Stats bar
-        var unanswered = questionsData.filter(function(q) { return q.status === 'unanswered'; }).length;
-        var answered = questionsData.filter(function(q) { return q.status === 'answered'; }).length;
+        var unanswered = questionsData.filter(function(q) { return normStatus(q.status) === 'unanswered'; }).length;
+        var answered = questionsData.filter(function(q) { return normStatus(q.status) === 'answered'; }).length;
         var total = questionsData.length;
         var statsHtml = '<div style="display:flex;gap:var(--space-4);flex-wrap:wrap;margin-bottom:var(--space-4);">' +
             '<div class="meli-card" style="flex:1;min-width:140px;text-align:center;"><div style="font-size:28px;font-weight:800;color:var(--color-primary);">' + total + '</div><div style="font-size:var(--text-caption);color:var(--color-text-muted);">Total preguntas</div></div>' +
@@ -533,10 +549,10 @@
         }
 
         container.innerHTML = filtered.map(function(q) {
-            var statusClass = 'meli-status--' + (q.status || 'pending');
-            var statusLabel = q.status === 'unanswered' ? 'Sin responder' : (q.status === 'answered' ? 'Respondida' : (q.status || '—'));
+            var statusClass = 'meli-status--' + (normStatus(q.status) || 'pending');
+            var statusLabel = normStatus(q.status) === 'unanswered' ? 'Sin responder' : (normStatus(q.status) === 'answered' ? 'Respondida' : (q.status || '—'));
             var answerHtml = '';
-            if (q.status === 'unanswered') {
+            if (normStatus(q.status) === 'unanswered') {
                 answerHtml = '<div style="margin-top:var(--space-2);">' +
                     '<textarea class="meli-title-input" id="qAnswer-' + q.id + '" rows="2" placeholder="Escribe tu respuesta..."></textarea>' +
                     '<button class="btn btn--primary btn--xs" style="margin-top:6px;" onclick="submitAnswer(' + q.id + ')">Enviar respuesta</button>' +
diff --git a/pos/static/js/pos.js b/pos/static/js/pos.js
index c1374ab..1710455 100644
--- a/pos/static/js/pos.js
+++ b/pos/static/js/pos.js
@@ -39,6 +39,8 @@ const POS = (() => {
     let receiptConfig = {};
     let couriers = [];
     let selectedCourierId = null;
+    let crossSellTimer = null;
+    let crossSellItems = [];
 
     // Currency-aware formatter: reads pos_currency from localStorage
     const _posCurrency = localStorage.getItem('pos_currency') || 'MXN';
@@ -46,13 +48,29 @@ const POS = (() => {
     const _currLocale = _posCurrency === 'USD' ? 'en-US' : 'es-MX';
     const fmt = (n) => (_currSymbols[_posCurrency] || '$') + parseFloat(n || 0).toLocaleString(_currLocale, { minimumFractionDigits: 2, maximumFractionDigits: 2 });
 
-    // Price based on customer tier: base price (price_1) with tier discount.
-    // Tier 2 = Taller (5% off), Tier 3 = Mayoreo (10% off), Tier 1 = base.
-    function priceForTier(basePrice, tier) {
+    function esc(s) {
+        if (s == null) return '';
+        const d = document.createElement('div');
+        d.textContent = String(s);
+        return d.innerHTML;
+    }
+
+    // Price based on customer tier.
+    // Prefers the tenant's real tier prices (price_2/price_3, materialized
+    // from the tier discounts config) and falls back to the legacy formula.
+    function priceForTier(basePrice, tier, item) {
         const p = parseFloat(basePrice) || 0;
         const t = parseInt(tier, 10) || 1;
-        if (t === 2) return Math.round(p * 0.95 * 100) / 100;
-        if (t === 3) return Math.round(p * 0.90 * 100) / 100;
+        if (t === 2) {
+            const p2 = item ? parseFloat(item.price_2) : 0;
+            if (p2 > 0) return p2;
+            return Math.round(p * 0.95 * 100) / 100;
+        }
+        if (t === 3) {
+            const p3 = item ? parseFloat(item.price_3) : 0;
+            if (p3 > 0) return p3;
+            return Math.round(p * 0.90 * 100) / 100;
+        }
         return p;
     }
 
@@ -209,6 +227,10 @@ const POS = (() => {
         await loadRegister();
         await loadReceiptConfig();
         await loadCouriers();
+        await restoreCartState();
+        replayOfflineSales();
+        scheduleCrossSell();
+        if (navigator.onLine === false && typeof showOfflineBanner === 'function') showOfflineBanner(true);
 
         // Setup event listeners
         setupKeyboard();
@@ -259,6 +281,11 @@ const POS = (() => {
                     selectedCourierId = sel.value ? parseInt(sel.value, 10) : null;
                 });
             }
+            const saleSel = document.getElementById('saleCourier');
+            if (saleSel) {
+                saleSel.innerHTML = '<option value="">— Sin repartidor —</option>' +
+                    couriers.map(c => `<option value="${c.id}">${c.name}</option>`).join('');
+            }
         } catch (e) {
             console.warn('Could not load couriers:', e);
             couriers = [];
@@ -402,18 +429,82 @@ const POS = (() => {
 
         renderCart();
         showToast(`${item.name || 'Articulo'} agregado`);
+        scheduleCrossSell();
     }
 
     function removeFromCart(index) {
         cart.splice(index, 1);
         if (selectedRow >= cart.length) selectedRow = cart.length - 1;
         renderCart();
+        scheduleCrossSell();
     }
 
     function clearCart() {
         cart.length = 0;
         selectedRow = -1;
         renderCart();
+        hideCrossSell();
+    }
+
+    // ─── Cross-sell (A10) ────────────────
+    // Debounced call to /pos/api/recommendations. The panel lives in
+    // pos.html (#crossSellPanel / #crossSellList).
+    function scheduleCrossSell() {
+        if (crossSellTimer) clearTimeout(crossSellTimer);
+        if (!cart.length) { hideCrossSell(); return; }
+        crossSellTimer = setTimeout(refreshCrossSell, 350);
+    }
+
+    async function refreshCrossSell() {
+        const panel = document.getElementById('crossSellPanel');
+        const list = document.getElementById('crossSellList');
+        if (!panel || !list) return;
+        const ids = cart.map(c => c.inventory_id).filter(Boolean);
+        if (!ids.length) { hideCrossSell(); return; }
+        try {
+            const data = await api('/pos/api/recommendations', {
+                method: 'POST',
+                body: JSON.stringify({ inventory_ids: ids, limit: 4 })
+            });
+            crossSellItems = data.recommendations || [];
+        } catch (e) {
+            hideCrossSell();
+            return;
+        }
+        const inCart = new Set(ids);
+        const items = crossSellItems.filter(r => !inCart.has(r.inventory_id));
+        if (!items.length) { hideCrossSell(); return; }
+        list.innerHTML = items.map(r => `
+            <button type="button" onclick="POS.addCrossSellItem(${r.inventory_id})"
+                title="${esc(r.reason || '')}"
+                style="display:flex;justify-content:space-between;align-items:center;gap:8px;text-align:left;width:100%;background:var(--color-bg-surface);border:1px solid var(--color-border);border-radius:var(--radius-sm);padding:5px 8px;cursor:pointer;color:var(--color-text-primary);">
+                <span style="display:flex;flex-direction:column;overflow:hidden;">
+                    <span style="font-size:var(--text-body-sm);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;">${esc(r.name || '')}</span>
+                    <span style="font-size:var(--text-caption);color:var(--color-text-muted);white-space:nowrap;overflow:hidden;text-overflow:ellipsis;">${esc(r.reason || '')}</span>
+                </span>
+                <span style="font-family:var(--font-mono);font-size:var(--text-body-sm);white-space:nowrap;">${fmt(r.price)}</span>
+            </button>`).join('');
+        panel.style.display = '';
+    }
+
+    function hideCrossSell() {
+        if (crossSellTimer) { clearTimeout(crossSellTimer); crossSellTimer = null; }
+        const panel = document.getElementById('crossSellPanel');
+        if (panel) panel.style.display = 'none';
+    }
+
+    function addCrossSellItem(inventoryId) {
+        const rec = crossSellItems.find(r => r.inventory_id === inventoryId);
+        if (!rec) return;
+        addToCart({
+            inventory_id: rec.inventory_id,
+            name: rec.name,
+            part_number: rec.part_number,
+            quantity: 1,
+            unit_price: rec.price || 0,
+            price_1: rec.price || 0,
+            stock: rec.stock || 0,
+        });
     }
 
     function openCancelModal() {
@@ -504,6 +595,32 @@ const POS = (() => {
         }
     });
 
+    function saveCartState() {
+        try {
+            sessionStorage.setItem('pos_cart_state', JSON.stringify({
+                cart, currentCustomerId: currentCustomer ? currentCustomer.id : null,
+            }));
+        } catch (e) { /* storage lleno o bloqueado */ }
+    }
+
+    async function restoreCartState() {
+        try {
+            const raw = sessionStorage.getItem('pos_cart_state');
+            if (!raw) return;
+            const state = JSON.parse(raw);
+            if (!state || !Array.isArray(state.cart) || !state.cart.length) return;
+            cart = state.cart;
+            if (state.currentCustomerId) {
+                try {
+                    const c = await api('/pos/api/customers/' + state.currentCustomerId);
+                    if (c && c.data) currentCustomer = c.data;
+                } catch (e) { /* cliente ya no existe */ }
+            }
+            renderCart();
+            showToast('Carrito restaurado (' + cart.length + ' partidas)', 'ok');
+        } catch (e) { /* ignore */ }
+    }
+
     function renderCart() {
         const tbody = document.getElementById('cartBody');
         const table = document.getElementById('cartTable');
@@ -558,6 +675,7 @@ const POS = (() => {
         tbody.innerHTML = html;
         updateTotals();
         updateAvgMargin();
+    saveCartState();
     }
 
     function updateQty(index, val) {
@@ -646,6 +764,17 @@ const POS = (() => {
     }
 
     // ─── Search ──────────────────────────
+    let lastSearchResults = [];
+    let lastSearchTier = 1;
+    let searchActiveIndex = -1;
+
+    function highlightSearchResult() {
+        const rows = document.querySelectorAll('#searchResults > div[data-search-idx]');
+        rows.forEach((el, i) => {
+            el.style.background = i === searchActiveIndex ? 'var(--color-primary-muted)' : '';
+        });
+    }
+
     function setupSearch() {
         const input = document.getElementById('itemSearch');
         if (!input) return;
@@ -654,9 +783,35 @@ const POS = (() => {
             searchTimeout = setTimeout(() => searchItems(input.value.trim()), 300);
         });
         input.addEventListener('keydown', (e) => {
+            if (e.key === 'ArrowDown' || e.key === 'ArrowUp') {
+                if (!lastSearchResults.length) return;
+                e.preventDefault();
+                searchActiveIndex = e.key === 'ArrowDown'
+                    ? Math.min(searchActiveIndex + 1, lastSearchResults.length - 1)
+                    : Math.max(searchActiveIndex - 1, 0);
+                highlightSearchResult();
+                return;
+            }
             if (e.key === 'Enter') {
                 e.preventDefault();
-                searchItems(input.value.trim());
+                const q = input.value.trim();
+                if (!q) return;
+                const norm = (s) => (s || '').toUpperCase().replace(/[\s\-\._]/g, '');
+                // 0-click scanner: exact barcode/part_number match adds directly
+                const exact = lastSearchResults.find(r =>
+                    norm(r.part_number) === norm(q) || norm(r.barcode || '') === norm(q));
+                if (exact) {
+                    const tier = currentCustomer ? (currentCustomer.price_tier || 1) : lastSearchTier;
+                    addFromSearch(exact, priceForTier(exact.price_1, tier, exact));
+                    return;
+                }
+                if (searchActiveIndex >= 0 && lastSearchResults[searchActiveIndex]) {
+                    const item = lastSearchResults[searchActiveIndex];
+                    const tier = currentCustomer ? (currentCustomer.price_tier || 1) : lastSearchTier;
+                    addFromSearch(item, priceForTier(item.price_1, tier, item));
+                    return;
+                }
+                searchItems(q);
             }
             if (e.key === 'Escape') {
                 input.value = '';
@@ -665,23 +820,74 @@ const POS = (() => {
         });
     }
 
+    function cacheSearch(q, items) {
+        try {
+            const cache = JSON.parse(localStorage.getItem('pos_search_cache') || '{}');
+            cache[q.toLowerCase()] = { items: items.slice(0, 12), ts: Date.now() };
+            const keys = Object.keys(cache);
+            if (keys.length > 40) keys.slice(0, 5).forEach(k => delete cache[k]);
+            localStorage.setItem('pos_search_cache', JSON.stringify(cache));
+        } catch (e) {}
+    }
+
+    function searchOffline(q) {
+        try {
+            const cache = JSON.parse(localStorage.getItem('pos_search_cache') || '{}');
+            const ql = q.toLowerCase();
+            let hits = [];
+            Object.keys(cache).forEach(function (k) {
+                if (ql.indexOf(k) !== -1 || k.indexOf(ql) !== -1) hits = hits.concat(cache[k].items);
+            });
+            const seen = new Set();
+            return hits.filter(function (i) {
+                if (seen.has(i.id)) return false; seen.add(i.id); return true;
+            }).slice(0, 12);
+        } catch (e) { return []; }
+    }
+
     async function searchItems(q) {
         if (!q || q.length < 2) { hideSearchResults(); return; }
 
+        if (navigator.onLine === false) {
+            const cached = searchOffline(q);
+            const container = document.getElementById('searchResults');
+            const totals = document.getElementById('totalsPanel');
+            const tier = currentCustomer ? (currentCustomer.price_tier || 1) : 1;
+            lastSearchResults = cached;
+            lastSearchTier = tier;
+            searchActiveIndex = -1;
+            container.innerHTML = '<div style="padding:8px var(--space-4);background:var(--color-warning-muted,#fef3c7);font-size:var(--text-caption);">Sin conexión — resultados guardados</div>'
+                + (cached.length ? cached.map(function (item, idx) {
+                    const price = priceForTier(item.price_1, tier, item);
+                    return `<div data-search-idx="${idx}" style="padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--color-border);cursor:pointer;display:flex;justify-content:space-between;align-items:center;" onclick='POS.addFromSearch(${JSON.stringify(item).replace(/'/g, "&#39;")}, ${price})'>
+                        <div><div style="font-weight:var(--font-weight-semibold);">${item.name}</div>
+                        <div style="font-family:var(--font-mono);font-size:var(--text-caption);color:var(--color-text-muted);">${item.part_number} | Stock: ${item.stock}</div></div>
+                        <div style="font-family:var(--font-mono);font-weight:var(--font-weight-bold);color:var(--color-primary);">${fmt(price)}</div></div>`;
+                }).join('') : '<div style="padding:16px;text-align:center;color:var(--color-text-muted);">Sin resultados guardados para esta búsqueda</div>');
+            container.style.display = '';
+            totals.style.display = 'none';
+            return;
+        }
+
         try {
             const data = await api(`/pos/api/inventory/items?q=${encodeURIComponent(q)}&per_page=20`);
             const container = document.getElementById('searchResults');
             const totals = document.getElementById('totalsPanel');
 
-            if (data.data.length === 0) {
+            searchActiveIndex = -1;
+            lastSearchResults = data.data || [];
+            lastSearchTier = 1;
+            if (lastSearchResults.length) cacheSearch(q, lastSearchResults);
+
+            if (lastSearchResults.length === 0) {
                 container.innerHTML = '<div style="padding:20px;text-align:center;color:var(--color-text-muted);">Sin resultados</div>';
                 if (window.BarcodeFeedback) BarcodeFeedback.error();
             } else {
                 let html = '';
-                data.data.forEach(item => {
+                lastSearchResults.forEach((item, idx) => {
                     const tier = currentCustomer ? (currentCustomer.price_tier || 1) : 1;
-                    const price = priceForTier(item.price_1, tier);
-                    html += `<div style="padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--color-border);cursor:pointer;display:flex;justify-content:space-between;align-items:center;transition:var(--transition-fast);" onmouseover="this.style.background='var(--color-primary-muted)'" onmouseout="this.style.background=''" onclick='POS.addFromSearch(${JSON.stringify(item).replace(/'/g, "&#39;")}, ${price})'>
+                    const price = priceForTier(item.price_1, tier, item);
+                    html += `<div data-search-idx="${idx}" style="padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--color-border);cursor:pointer;display:flex;justify-content:space-between;align-items:center;transition:var(--transition-fast);" onmouseover="POS_searchHover(${idx})" onmouseout="this.style.background=''" onclick='POS.addFromSearch(${JSON.stringify(item).replace(/'/g, "&#39;")}, ${price})'>
                         <div>
                             <div style="font-weight:var(--font-weight-semibold);">${item.name}</div>
                             <div style="font-family:var(--font-mono);font-size:var(--text-caption);color:var(--color-text-muted);">${item.part_number} | ${item.brand || ''}</div>
@@ -719,6 +925,290 @@ const POS = (() => {
         document.getElementById('itemSearch').focus();
     }
 
+    window.highlightSearchResult = highlightSearchResult;
+    window.POS_searchHover = function (idx) { searchActiveIndex = idx; highlightSearchResult(); };
+
+
+    // ─── Venta offline (cola + replay) ─────────────────────
+    function offlineQueue() {
+        try { return JSON.parse(localStorage.getItem('pos_offline_sales') || '[]'); }
+        catch (e) { return []; }
+    }
+    function offlineSave(queue) {
+        try { localStorage.setItem('pos_offline_sales', JSON.stringify(queue)); } catch (e) {}
+        const el = document.getElementById('offlineQueueBadge');
+        if (el) el.textContent = queue.length;
+    }
+
+    function queueOfflineSale(saleData) {
+        const queue = offlineQueue();
+        saleData.client_uuid = (crypto.randomUUID ? crypto.randomUUID() : 'off-' + Date.now() + '-' + Math.random().toString(36).slice(2));
+        saleData._queued_at = new Date().toISOString();
+        queue.push(saleData);
+        offlineSave(queue);
+        return saleData.client_uuid;
+    }
+
+    async function replayOfflineSales() {
+        const queue = offlineQueue();
+        if (!queue.length) return 0;
+        const remaining = [];
+        let synced = 0;
+        for (const saleData of queue) {
+            try {
+                await api('/pos/api/sales', { method: 'POST', body: JSON.stringify(saleData) });
+                synced++;
+            } catch (e) {
+                remaining.push(saleData); // aún sin conexión: se reintenta luego
+            }
+        }
+        offlineSave(remaining);
+        if (synced) showToast(synced + ' venta(s) offline sincronizada(s)', 'ok');
+        return synced;
+    }
+
+    window.addEventListener('online', function () {
+        if (typeof showOfflineBanner === 'function') showOfflineBanner(false);
+        replayOfflineSales();
+    });
+    window.addEventListener('offline', function () {
+        if (typeof showOfflineBanner === 'function') showOfflineBanner(true);
+    });
+
+    // ─── Devoluciones UI ──────────────────
+    let returnSale = null;
+
+    function openReturnModal() {
+        if (!currentPerms.includes('pos.sell')) { showToast('Sin permiso para devoluciones'); return; }
+        returnSale = null;
+        document.getElementById('returnSaleId').value = '';
+        document.getElementById('returnSaleInfo').style.display = 'none';
+        document.getElementById('returnItemsList').style.display = 'none';
+        document.getElementById('returnItemsList').innerHTML = '';
+        document.getElementById('returnFooter').style.display = 'none';
+        document.getElementById('returnResult').innerHTML = '';
+        document.getElementById('returnModal').classList.add('open');
+        setTimeout(() => document.getElementById('returnSaleId').focus(), 100);
+    }
+    function closeReturnModal() {
+        document.getElementById('returnModal').classList.remove('open');
+    }
+
+    async function searchReturnSale() {
+        const id = parseInt(document.getElementById('returnSaleId').value, 10);
+        if (!id) return;
+        try {
+            const sale = await api('/pos/api/sales/' + id);
+            if (!sale || !sale.items || !sale.items.length) throw new Error('Venta sin partidas');
+            if (sale.status === 'cancelled') throw new Error('La venta está cancelada');
+            returnSale = sale;
+            document.getElementById('returnSaleInfo').style.display = 'block';
+            document.getElementById('returnSaleInfo').innerHTML =
+                `Venta #${sale.id} — ${sale.customer_name || 'Público General'} — Total: ${fmt(sale.total)} — Estado: ${sale.status}`;
+            const list = document.getElementById('returnItemsList');
+            list.style.display = 'block';
+            list.innerHTML = sale.items.map(it => `
+                <div style="display:flex;align-items:center;gap:8px;padding:8px var(--space-3);border-bottom:1px solid var(--color-border);">
+                    <input type="checkbox" id="ret-chk-${it.id}" checked style="width:auto;" />
+                    <span style="flex:1;font-size:var(--text-body-sm);">${it.name || it.part_number} (${it.part_number})</span>
+                    <span style="font-size:var(--text-caption);color:var(--color-text-muted);">cant: ${it.quantity}</span>
+                    <input type="number" id="ret-qty-${it.id}" class="form-input" min="1" max="${it.quantity}" value="${it.quantity}" style="width:70px;" />
+                    <input type="text" id="ret-reason-${it.id}" class="form-input" placeholder="Motivo" style="width:160px;" />
+                </div>`).join('');
+            document.getElementById('returnFooter').style.display = 'flex';
+        } catch (e) {
+            document.getElementById('returnResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
+        }
+    }
+
+    async function submitReturn() {
+        if (!returnSale) return;
+        const items = [];
+        returnSale.items.forEach(it => {
+            const chk = document.getElementById('ret-chk-' + it.id);
+            if (chk && chk.checked) {
+                const qty = parseInt(document.getElementById('ret-qty-' + it.id).value, 10) || 0;
+                const reason = (document.getElementById('ret-reason-' + it.id).value || '').trim();
+                if (qty > 0) items.push({ sale_item_id: it.id, quantity: qty, reason: reason || 'Devolución' });
+            }
+        });
+        if (!items.length) {
+            document.getElementById('returnResult').innerHTML = '<span style="color:var(--color-error);">Selecciona al menos una partida</span>';
+            return;
+        }
+        try {
+            const res = await api('/pos/api/returns', {
+                method: 'POST',
+                body: JSON.stringify({
+                    sale_id: returnSale.id,
+                    items,
+                    notes: document.getElementById('returnNotes').value,
+                    register_id: currentRegister ? currentRegister.id : null,
+                    refund_method: returnSale.payment_method || 'efectivo',
+                }),
+            });
+            document.getElementById('returnResult').innerHTML =
+                '<span style="color:var(--color-success);">Devolución registrada: reembolso ' + fmt(res.total_refund || 0) + '</span>';
+            renderCart();
+        } catch (e) {
+            document.getElementById('returnResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
+        }
+    }
+
+    // ─── Apartados UI ─────────────────────
+    let currentLayawayId = null;
+
+    function openLayawaysModal() {
+        document.getElementById('layawaysModal').classList.add('open');
+        document.getElementById('layawayActions').style.display = 'none';
+        loadLayaways();
+    }
+    function closeLayawaysModal() {
+        document.getElementById('layawaysModal').classList.remove('open');
+    }
+
+    async function loadLayaways() {
+        const el = document.getElementById('layawaysList');
+        try {
+            const data = await api('/pos/api/layaways?status=active&per_page=50');
+            const rows = data.data || data.layaways || [];
+            if (!rows.length) {
+                el.innerHTML = '<span style="color:var(--color-text-muted);font-size:var(--text-caption);">No hay apartados activos</span>';
+                return;
+            }
+            el.innerHTML = rows.map(l => {
+                const balance = (l.total || 0) - (l.amount_paid || 0);
+                return `<div style="display:flex;align-items:center;gap:10px;padding:10px var(--space-3);border-bottom:1px solid var(--color-border);cursor:pointer;"
+                        onmouseover="this.style.background='var(--color-primary-muted)'" onmouseout="this.style.background=''"
+                        onclick="POS.selectLayaway(${l.id}, ${l.total}, ${l.amount_paid || 0}, '${(l.customer_name || '').replace(/'/g, "\\'")}')">
+                    <div style="flex:1;">
+                        <div style="font-weight:var(--font-weight-semibold);">Apartado #${l.id} — ${l.customer_name || 'Sin cliente'}</div>
+                        <div style="font-size:var(--text-caption);color:var(--color-text-muted);">Vence: ${l.expires_at || '—'}</div>
+                    </div>
+                    <div style="text-align:right;">
+                        <div style="font-weight:var(--font-weight-bold);">${fmt(balance)}</div>
+                        <div style="font-size:var(--text-caption);color:var(--color-text-muted);">de ${fmt(l.total)}</div>
+                    </div>
+                </div>`;
+            }).join('');
+        } catch (e) {
+            el.innerHTML = '<span style="color:var(--color-error);">Error cargando apartados</span>';
+        }
+    }
+    function selectLayaway(id, total, paid, customerName) {
+        currentLayawayId = id;
+        document.getElementById('layawayActions').style.display = 'block';
+        document.getElementById('layawayDetail').innerHTML =
+            `<strong>Apartado #${id}</strong> — ${customerName} — Saldo: <strong>${fmt(total - paid)}</strong>`;
+        document.getElementById('layawayPayAmount').value = (Math.round((total - paid) * 100) / 100) || '';
+        document.getElementById('layawayResult').innerHTML = '';
+    }
+
+    async function layawayPay() {
+        if (!currentLayawayId) return;
+        const amount = parseFloat(document.getElementById('layawayPayAmount').value) || 0;
+        if (amount <= 0) return;
+        try {
+            await api(`/pos/api/layaways/${currentLayawayId}/payment`, {
+                method: 'POST',
+                body: JSON.stringify({ amount, payment_method: document.getElementById('layawayPayMethod').value }),
+            });
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-success);">Abono registrado</span>';
+            loadLayaways();
+        } catch (e) {
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
+        }
+    }
+
+    async function layawayComplete() {
+        if (!currentLayawayId) return;
+        try {
+            const res = await api(`/pos/api/layaways/${currentLayawayId}/complete`, {
+                method: 'POST',
+                body: JSON.stringify({
+                    payment_method: document.getElementById('layawayPayMethod').value,
+                    register_id: currentRegister ? currentRegister.id : null,
+                }),
+            });
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-success);">Apartado liquidado' + (res.id ? ' — Venta #' + res.id : '') + '</span>';
+            loadLayaways();
+        } catch (e) {
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
+        }
+    }
+
+    async function layawayCancel() {
+        if (!currentLayawayId) return;
+        if (!confirm('¿Cancelar el apartado? El stock regresará a inventario.')) return;
+        try {
+            await api(`/pos/api/layaways/${currentLayawayId}/cancel`, { method: 'PUT', body: '{}' });
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-success);">Apartado cancelado</span>';
+            loadLayaways();
+        } catch (e) {
+            document.getElementById('layawayResult').innerHTML = '<span style="color:var(--color-error);">' + esc(e.message) + '</span>';
+        }
+    }
+
+
+    // ─── Vehículo: placa/VIN → piezas compatibles ─────────────────
+    async function vehicleLookup() {
+        const input = document.getElementById('vehicleLookup');
+        const raw = (input.value || '').trim();
+        if (!raw) return;
+        const compact = raw.replace(/[^A-Za-z0-9]/g, '').toUpperCase();
+        const container = document.getElementById('searchResults');
+        const totals = document.getElementById('totalsPanel');
+        container.innerHTML = '<div style="padding:14px;text-align:center;color:var(--color-text-muted);">Buscando vehículo...</div>';
+        container.style.display = '';
+        totals.style.display = 'none';
+
+        let myeId = null, label = '';
+        try {
+            if (compact.length === 17) {
+                const d = await api('/pos/api/catalog/vin/' + encodeURIComponent(compact));
+                const m = d.match || d.catalog_match || d;
+                myeId = d.mye_id || m.mye_id || m.id_mye || null;
+                label = [m.make || d.make, m.model || d.model, m.year || d.year].filter(Boolean).join(' ');
+            } else {
+                const d = await api('/pos/api/catalog/plate/' + encodeURIComponent(raw));
+                if (!d.found) throw new Error('Placa no registrada — regístrala en el cliente');
+                const m = d.catalog_match || {};
+                myeId = m.mye_id || m.id_mye || null;
+                label = [d.make, d.model, d.year].filter(Boolean).join(' ');
+                if (d.customer_id) {
+                    try {
+                        const cust = await api('/pos/api/customers/' + d.customer_id);
+                        if (cust && cust.data && !currentCustomer) currentCustomer = cust.data;
+                    } catch (e) { /* opcional */ }
+                }
+            }
+            if (!myeId) {
+                throw new Error('Vehículo encontrado pero sin motor en catálogo; usa el catálogo por modelo/año');
+            }
+            const data = await api('/pos/api/catalog/vehicle-inventory?mye_id=' + myeId);
+            const items = data.data || [];
+            const tier = currentCustomer ? (currentCustomer.price_tier || 1) : 1;
+            let html = '<div style="padding:10px var(--space-4);background:var(--color-primary-muted);font-weight:var(--font-weight-semibold);">🚗 Piezas compatibles: ' + esc(label || 'vehículo') + ' (' + items.length + ')</div>';
+            if (!items.length) {
+                html += '<div style="padding:16px;text-align:center;color:var(--color-text-muted);">Sin piezas compatibles registradas aún</div>';
+            } else {
+                items.forEach(item => {
+                    const price = priceForTier(item.price_1, tier, item);
+                    html += `<div style="padding:var(--space-3) var(--space-4);border-bottom:1px solid var(--color-border);cursor:pointer;display:flex;justify-content:space-between;align-items:center;" onmouseover="this.style.background='var(--color-primary-muted)'" onmouseout="this.style.background=''" onclick='POS.addFromSearch(${JSON.stringify(item).replace(/'/g, "&#39;")}, ${price})'>
+                        <div>
+                            <div style="font-weight:var(--font-weight-semibold);">${item.name}</div>
+                            <div style="font-family:var(--font-mono);font-size:var(--text-caption);color:var(--color-text-muted);">${item.part_number} | ${item.brand || ''}</div>
+                            <div style="font-size:var(--text-caption);color:${item.stock <= 0 ? 'var(--color-error)' : 'var(--color-text-muted)'};">Stock: ${item.stock}</div>
+                        </div>
+                        <div style="font-family:var(--font-mono);font-weight:var(--font-weight-bold);color:var(--color-primary);">${fmt(price)}</div>
+                    </div>`;
+                });
+            }
+            container.innerHTML = html;
+        } catch (e) {
+            container.innerHTML = '<div style="padding:14px;text-align:center;color:var(--color-error);">' + esc(e.message) + '</div>';
+        }
+    }
     function hideSearchResults() {
         const sr = document.getElementById('searchResults');
         const tp = document.getElementById('totalsPanel');
@@ -923,6 +1413,8 @@ const POS = (() => {
         document.getElementById('changeDisplay').className = 'cambio-amount positive';
         const payRef = document.getElementById('paymentRef');
         if (payRef) payRef.value = '';
+        const saleCourierSel = document.getElementById('saleCourier');
+        if (saleCourierSel) saleCourierSel.value = '';
 
         // Populate quick amounts
         const quickContainer = document.getElementById('quickAmounts');
@@ -998,9 +1490,22 @@ const POS = (() => {
         }
     }
 
+    function getPayCurrency() {
+        const sel = document.getElementById('payCurrency');
+        return sel ? sel.value : 'MXN';
+    }
+
+    function getUsdRate() {
+        const r = parseFloat(localStorage.getItem('pos_exchange_rate')) || 17.5;
+        return r > 0 ? r : 17.5;
+    }
+
     function updateChange() {
         const total = getTotal();
-        const received = parseFloat(document.getElementById('cashReceived').value) || 0;
+        let received = parseFloat(document.getElementById('cashReceived').value) || 0;
+        const hint = document.getElementById('usdRateHint');
+        if (hint) hint.textContent = getPayCurrency() === 'USD' ? ('TC: ' + getUsdRate()) : '';
+        if (getPayCurrency() === 'USD') received = received * getUsdRate();
         const change = received - total;
         const el = document.getElementById('changeDisplay');
         if (change >= 0) {
@@ -1035,8 +1540,14 @@ const POS = (() => {
         let reference = '';
         let saleType = 'cash';
 
+        let payCurrencyNote = '';
         if (paymentMethod === 'efectivo') {
             amountPaid = parseFloat(document.getElementById('cashReceived').value) || 0;
+            if (getPayCurrency() === 'USD') {
+                const usd = amountPaid;
+                amountPaid = Math.round(usd * getUsdRate() * 100) / 100;
+                payCurrencyNote = `Pago en USD: $${usd.toFixed(2)} @ TC ${getUsdRate()}`;
+            }
             if (amountPaid < total) { alert(`Monto insuficiente. Total: ${fmt(total)}`); return; }
         } else if (paymentMethod === 'transferencia' || paymentMethod === 'tarjeta') {
             amountPaid = total;
@@ -1083,8 +1594,10 @@ const POS = (() => {
             register_id: currentRegister ? currentRegister.id : null,
             amount_paid: amountPaid,
             payment_details: paymentDetails,
-            reference: reference,
+            reference: [reference, payCurrencyNote].filter(Boolean).join(' | '),
             generate_cfdi: document.getElementById('cfdiCheck').checked,
+            courier_id: (document.getElementById('saleCourier') || {}).value
+                ? parseInt(document.getElementById('saleCourier').value, 10) : null,
         };
 
         const zeroItem = findZeroPriceItem();
@@ -1126,16 +1639,42 @@ const POS = (() => {
             lastSaleId = sale.id;
             lastSaleData = sale;
             try { sessionStorage.setItem('pos_last_sale_id', sale.id); } catch(e) {}
+            if (saleData.courier_id) {
+                const courier = couriers.find(c => c.id === saleData.courier_id);
+                sale.courier_name = courier ? courier.name : '';
+            }
             closePaymentModal();
             showTicket(sale);
+            if (rc('auto_print', '') === true || rc('auto_print', '') === 'true') {
+                try { printTicket(); } catch (e) { /* impresión no bloquea */ }
+            }
 
             // Clear cart
             cart = [];
             selectedRow = -1;
             clearCustomer();
+            const saleCourierSel2 = document.getElementById('saleCourier');
+            if (saleCourierSel2) saleCourierSel2.value = '';
             renderCart();
         } catch (e) {
-            alert('Error al procesar venta: ' + e.message);
+            // Sin conexión: encolar la venta para sincronizar después
+            if (navigator.onLine === false || /network|failed to fetch/i.test(e.message)) {
+                const uuid = queueOfflineSale(saleData);
+                closePaymentModal();
+                showTicket({
+                    id: 'OFF-' + uuid.slice(0, 8),
+                    total: total,
+                    items: saleData.items.map(it => ({ name: it.part_number || it.inventory_id, quantity: it.quantity, unit_price: it.unit_price, subtotal: it.unit_price * it.quantity })),
+                    customer_name: currentCustomer ? currentCustomer.name : 'Público General',
+                    payment_method: paymentMethod,
+                    offline: true,
+                    created_at: new Date().toISOString(),
+                });
+                cart = []; selectedRow = -1; renderCart();
+                showToast('Sin conexión — venta en cola (' + offlineQueue().length + ' pendientes). Se sincronizará automáticamente.', 'ok');
+            } else {
+                alert('Error al procesar venta: ' + e.message);
+            }
         } finally {
             confirmBtn.disabled = false;
             confirmBtn.textContent = 'Confirmar Pago';
@@ -1593,7 +2132,7 @@ const POS = (() => {
                 <span>Cliente: ${customerName}</span>
                 ${customerRfc ? `<span>RFC: ${customerRfc}</span>` : ''}
             </div>
-            ${isRemission && sale.courier_name ? `<div class="ticket-row" style="font-size: 9px; color: #555; margin-bottom: 4px;"><span>Repartidor: ${sale.courier_name}</span></div>` : ''}
+            ${sale.courier_name ? `<div class="ticket-row" style="font-size: 9px; color: #555; margin-bottom: 4px;"><span>Repartidor: ${sale.courier_name}</span></div>` : ''}
             <hr class="divider">
             <div class="item-line-wide" style="font-weight: bold; font-size: 9px; color: #555; text-transform: uppercase;">
                 <span class="qty">Cant</span>
@@ -1792,7 +2331,15 @@ const POS = (() => {
 
     // ─── Drawer ──────────────────────────
     function openDrawer() {
-        showToast('Comando enviado al cajon de efectivo.');
+        // Kick ESC p 0 25 250 via connected thermal printer (USB/Serial)
+        try {
+            if (window.NexusPrinter && typeof window.NexusPrinter.sendRaw === 'function') {
+                window.NexusPrinter.sendRaw(new Uint8Array([27, 112, 48, 25, 250]))
+                    .then(ok => showToast(ok ? 'Cajón abierto.' : 'Sin impresora conectada — no se pudo abrir el cajón.', ok ? 'ok' : 'error'));
+                return;
+            }
+        } catch (e) { /* fallthrough */ }
+        showToast('Conecta una impresora térmica (Config → Impresora) para abrir el cajón.', 'error');
     }
 
     // ─── Keyboard Shortcuts ──────────────
@@ -1924,6 +2471,9 @@ const POS = (() => {
         addToCart, removeFromCart, clearCart, selectRow,
         updateQty, updateDiscount,
         addFromSearch, hideSearchResults,
+        openReturnModal, closeReturnModal, searchReturnSale, submitReturn, vehicleLookup,
+        openLayawaysModal, closeLayawaysModal, loadLayaways, selectLayaway,
+        layawayPay, layawayComplete, layawayCancel,
         selectCustomer, clearCustomer,
         showNewCustomerModal, closeNewCustomerModal, saveNewCustomer,
         checkout, confirmPayment, closePaymentModal,
@@ -1938,6 +2488,7 @@ const POS = (() => {
         showOpenRegisterModal, closeOpenRegisterModal, openRegister,
         showCutZModal, closeCutZModal, loadCutX, confirmCutZ,
         openCancelModal, closeCancelModal, changeQuantity, applyDiscount, modifyPrice,
+        refreshCrossSell, hideCrossSell, addCrossSellItem,
     };
 
 })();
diff --git a/pos/static/js/push.js b/pos/static/js/push.js
index 7caabd2..3a8fdce 100644
--- a/pos/static/js/push.js
+++ b/pos/static/js/push.js
@@ -36,7 +36,7 @@
     async function setupPush() {
         try {
             // Register service worker
-            var registration = await navigator.serviceWorker.register('/pos/static/sw-push.js', {
+            var registration = await navigator.serviceWorker.register('/pos/sw-push.js', {
                 scope: '/pos/'
             });
             console.log('[Push] Service worker registered');
diff --git a/pos/static/js/sidebar.js b/pos/static/js/sidebar.js
index 4527484..bf5caa5 100644
--- a/pos/static/js/sidebar.js
+++ b/pos/static/js/sidebar.js
@@ -51,6 +51,7 @@ window.renderSidebar = function(modulesOverride) {
             'pos.view': 'pos',
             'catalog.view': 'catalog',
             'inventory.view': 'inventory',
+            'yonke.view': 'yonke',
             'customers.view': 'customers',
             'workshop.view': 'workshop',
             'pos.remission': 'remission_notes',
@@ -76,6 +77,7 @@ window.renderSidebar = function(modulesOverride) {
             { id: 'pos', name: _t('pos'), href: '/pos/sale', icon: '<rect x="2" y="3" width="20" height="14" rx="2"/><path d="M8 21h8M12 17v4"/>' },
             moduleEnabled('catalog') ? { id: 'catalog', name: _t('catalog'), href: '/pos/catalog', icon: '<path d="M4 6h16M4 10h16M4 14h16M4 18h16"/>' } : null,
             { id: 'inventory', name: _t('inventory'), href: '/pos/inventory', icon: '<path d="M21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z"/><polyline points="3.27 6.96 12 12.01 20.73 6.96"/><line x1="12" y1="22.08" x2="12" y2="12"/>' },
+            { id: 'yonke', name: 'Yonke (usadas)', href: '/pos/yonke', icon: '<path d="M5 17H3v-4l2-5.5A2 2 0 0 1 6.9 6h10.2a2 2 0 0 1 1.9 1.5L21 13v4h-2"/><circle cx="7.5" cy="17" r="2"/><circle cx="16.5" cy="17" r="2"/><path d="M9.5 17h5"/>' },
         ].filter(Boolean).filter(function(i){ return itemAllowed(i.id); })},
         { label: _t('nav_management'), items: [
             { id: 'customers', name: _t('customers'), href: '/pos/customers', icon: '<path d="M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M23 21v-2a4 4 0 0 0-3-3.87M16 3.13a4 4 0 0 1 0 7.75"/>' },
diff --git a/pos/static/js/yonke.js b/pos/static/js/yonke.js
new file mode 100644
index 0000000..a6b46d6
--- /dev/null
+++ b/pos/static/js/yonke.js
@@ -0,0 +1,3024 @@
+// /home/Autopartes/pos/static/js/yonke.js
+// Nexus Yonke — used parts (partes usadas / deshuesadero) UI.
+//
+// Tabs: piezas (list + search), nueva (fast intake), donador (search by donor
+// vehicle), consignaciones (third-party parts on consignment), b2b (wholesale
+// marketplace between businesses).
+//
+// Backend contract: /pos/api/yonke/*
+//   GET    /pieces                     POST   /pieces
+//   POST   /pieces/<id>/images         DELETE /pieces/<id>/images/<image_id>
+//   PUT    /pieces/<id>
+//   GET    /vin/<vin>
+//   GET    /donors
+//   GET    /consignments               POST   /consignments
+//   GET    /consignments/<id>          POST   /consignments/<id>/items
+//   PUT    /consignments/<id>/settle
+//
+// B2B contract: /pos/api/b2b (see the "MAYOREO B2B" section)
+
+(function () {
+    'use strict';
+
+    var API = '/pos/api/yonke';
+
+    // ─── Auth ────────────────────────────────────────────────────────────
+
+    function getToken() {
+        return localStorage.getItem('pos_token') || localStorage.getItem('access_token') || '';
+    }
+    if (!getToken()) { window.location.href = '/pos/login'; return; }
+
+    function authHeaders() {
+        return { 'Authorization': 'Bearer ' + getToken(), 'Content-Type': 'application/json' };
+    }
+
+    // Reissue the JWT (same endpoint app-init.js uses) so an expired token or a
+    // permission change does not kick the user straight back to the login page.
+    var refreshPromise = null;
+    function refreshToken() {
+        if (!refreshPromise) {
+            var hdrs = { 'Authorization': 'Bearer ' + getToken() };
+            refreshPromise = fetch('/pos/api/auth/refresh', { method: 'POST', headers: hdrs })
+                .then(function (r) { return r.ok ? r.json() : null; })
+                .then(function (d) {
+                    if (d && d.token) {
+                        localStorage.setItem('pos_token', d.token);
+                        if (d.employee) {
+                            try { localStorage.setItem('pos_employee', JSON.stringify(d.employee)); } catch (e) {}
+                        }
+                        if (window.POS_USER) {
+                            window.POS_USER.token = d.token;
+                            if (d.permissions) window.POS_USER.permissions = d.permissions;
+                        }
+                        return d.token;
+                    }
+                    return null;
+                })
+                .catch(function () { return null; })
+                .then(function (t) { refreshPromise = null; return t; });
+        }
+        return refreshPromise;
+    }
+
+    function request(url, opts) {
+        opts = opts || {};
+        var init = { method: opts.method || 'GET', headers: Object.assign(authHeaders(), opts.headers || {}) };
+        if (opts.body !== undefined) init.body = opts.body;
+        if (opts.signal) init.signal = opts.signal;
+        return fetch(url, init);
+    }
+
+    function parseResponse(resp) {
+        if (!resp.ok) {
+            return resp.json().catch(function () { return {}; }).then(function (body) {
+                var msg = (body && (body.error || body.message)) || ('Error HTTP ' + resp.status);
+                var err = new Error(msg);
+                err.status = resp.status;
+                err.body = body;
+                throw err;
+            });
+        }
+        if (resp.status === 204) return null;
+        var ct = resp.headers.get('content-type') || '';
+        if (ct.indexOf('json') === -1) return null;
+        return resp.json().catch(function () { return null; });
+    }
+
+    function apiFetch(url, opts) {
+        opts = opts || {};
+        return request(url, opts).then(function (resp) {
+            if (resp.status === 401) {
+                return refreshToken().then(function (token) {
+                    if (!token) return redirectToLogin();
+                    return request(url, opts).then(function (retry) {
+                        if (retry.status === 401) return redirectToLogin();
+                        return parseResponse(retry);
+                    });
+                });
+            }
+            return parseResponse(resp);
+        });
+    }
+
+    function redirectToLogin() {
+        localStorage.removeItem('pos_token');
+        window.location.href = '/pos/login';
+        return null;
+    }
+
+    // Multipart upload — must NOT carry the JSON Content-Type.
+    function apiUpload(url, formData) {
+        return fetch(url, {
+            method: 'POST',
+            headers: { 'Authorization': 'Bearer ' + getToken() },
+            body: formData
+        }).then(function (resp) {
+            if (resp.status === 401) {
+                return refreshToken().then(function (token) {
+                    if (!token) return redirectToLogin();
+                    return fetch(url, {
+                        method: 'POST',
+                        headers: { 'Authorization': 'Bearer ' + token },
+                        body: formData
+                    }).then(parseResponse);
+                });
+            }
+            return parseResponse(resp);
+        });
+    }
+
+    // ─── Helpers ─────────────────────────────────────────────────────────
+
+    function esc(s) {
+        if (s === null || s === undefined || s === '') return '';
+        var d = document.createElement('div');
+        d.textContent = String(s);
+        return d.innerHTML;
+    }
+    function num(n) { return parseFloat(n) || 0; }
+    function fmtMoney(n) {
+        return '$' + num(n).toLocaleString('es-MX', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+    }
+    function fmtInt(n) { return parseInt(n, 10) || 0; }
+    function qs(params) {
+        var sp = new URLSearchParams();
+        Object.keys(params).forEach(function (k) {
+            var v = params[k];
+            if (v === '' || v === null || v === undefined || (typeof v === 'number' && isNaN(v))) return;
+            sp.set(k, v);
+        });
+        return sp.toString();
+    }
+    function asList(res) {
+        if (!res) return [];
+        if (Array.isArray(res)) return res;
+        if (Array.isArray(res.data)) return res.data;
+        if (Array.isArray(res.items)) return res.items;
+        if (res.data && Array.isArray(res.data.items)) return res.data.items;
+        return [];
+    }
+    function unwrap(res) {
+        if (res && res.data && typeof res.data === 'object' && !Array.isArray(res.data)) return res.data;
+        return res || {};
+    }
+    function val(id) { var el = document.getElementById(id); return el ? el.value.trim() : ''; }
+    function numOrNull(id) {
+        var v = val(id);
+        if (v === '') return null;
+        var n = parseFloat(v);
+        return isNaN(n) ? null : n;
+    }
+    function intOrNull(id) {
+        var n = numOrNull(id);
+        return n === null ? null : Math.round(n);
+    }
+    function openModal(id) { var el = document.getElementById(id); if (el) el.classList.add('is-open'); }
+    function toast(msg, type) {
+        if (typeof window.showToast === 'function') window.showToast(msg, type || 'ok');
+    }
+    function errMsg(err) {
+        if (!err) return 'Error desconocido';
+        if (err.status === 403) return 'Sin permiso para esta acción (403)';
+        if (err.status === 404) return 'No encontrado (404)';
+        return err.message || 'Error de red';
+    }
+    function emptyRow(colspan, text) {
+        return '<tr><td colspan="' + colspan + '" class="ynk-empty">' + esc(text) + '</td></tr>';
+    }
+    function primaryImage(item) {
+        var imgs = (item && item.images) || [];
+        for (var i = 0; i < imgs.length; i++) { if (imgs[i].is_primary) return imgs[i].url; }
+        if (imgs.length) return imgs[0].url;
+        return item && item.image_url ? item.image_url : '';
+    }
+    function thumbHtml(item) {
+        var url = primaryImage(item);
+        var inner = url
+            ? '<img class="ynk-thumb" src="' + esc(url) + '" alt="foto" loading="lazy" onerror="ynkThumbFallback(this)" />'
+            : '<div class="ynk-thumb ynk-thumb--empty">sin<br>foto</div>';
+        return '<div class="ynk-thumb-slot" title="Ver fotos" onclick="ynkOpenImages(' + item.id + ')">' + inner + '</div>';
+    }
+    // A broken image URL must not leave an unclickable blank cell.
+    window.ynkThumbFallback = function (img) {
+        var slot = img && img.parentNode;
+        if (slot) slot.innerHTML = '<div class="ynk-thumb ynk-thumb--empty">sin<br>foto</div>';
+    };
+    function gradeHtml(grade) {
+        if (!grade) return '<span class="ynk-grade ynk-grade--none">—</span>';
+        var g = String(grade).toUpperCase().charAt(0);
+        return '<span class="ynk-grade ynk-grade--' + esc(g) + '">' + esc(g) + '</span>';
+    }
+    function conditionBadge(condition) {
+        var c = (condition || '').toLowerCase();
+        var cls = c === 'nuevo' ? 'badge--ok' : (c === 'reconstruido' ? 'badge--transit' : 'badge--pending');
+        return '<span class="badge ' + cls + '">' + esc(c || '—') + '</span>';
+    }
+    function donorHtml(item) {
+        var veh = [item.donor_make, item.donor_model, item.donor_year].filter(Boolean).join(' ');
+        var vin = item.donor_vin || '';
+        if (!veh && !vin) return '<span class="ynk-hint">—</span>';
+        return '<div>' + esc(veh || 'Vehículo sin datos') + '</div>' +
+            (vin ? '<div class="ynk-hint" style="font-family:var(--font-mono);font-size:0.7rem;">' + esc(vin) + '</div>' : '');
+    }
+    function renderPagination(el, pg, fnName) {
+        if (!el) return;
+        pg = pg || {};
+        if (!pg.total_pages || pg.total_pages <= 1) {
+            el.innerHTML = '';
+            return;
+        }
+        el.innerHTML =
+            '<button class="page-btn" ' + (pg.page <= 1 ? 'disabled' : 'onclick="window.' + fnName + '(' + (pg.page - 1) + ')"') + '>&lsaquo;</button>' +
+            '<span style="padding:0 var(--space-2);font-size:var(--text-caption);color:var(--color-text-muted);">' +
+            pg.page + ' / ' + pg.total_pages + '</span>' +
+            '<button class="page-btn" ' + (pg.page >= pg.total_pages ? 'disabled' : 'onclick="window.' + fnName + '(' + (pg.page + 1) + ')"') + '>&rsaquo;</button>';
+    }
+
+    // Permissions — the server enforces them; this only hides buttons.
+    var user = window.POS_USER || {};
+    var role = (user.role || '').toLowerCase();
+    var perms = user.permissions || [];
+    function hasPerm(p) { return role === 'owner' || role === 'admin' || perms.indexOf(p) !== -1; }
+    function canEdit() { return role === 'owner' || role === 'admin' || hasPerm('yonke.manage') || hasPerm('yonke.edit') || hasPerm('inventory.edit'); }
+
+    // ─── Tab switching ───────────────────────────────────────────────────
+
+    var TABS = {
+        piezas: 'panel-piezas',
+        nueva: 'panel-nueva',
+        donador: 'panel-donador',
+        consignaciones: 'panel-consignaciones',
+        b2b: 'panel-b2b',
+        reportes: 'panel-reportes'
+    };
+    var activeTab = 'piezas';
+
+    function switchTab(name) {
+        if (!TABS[name]) return;
+        activeTab = name;
+
+        document.querySelectorAll('.tab-btn').forEach(function (btn) {
+            var on = btn.getAttribute('aria-controls') === TABS[name];
+            btn.classList.toggle('is-active', on);
+            btn.setAttribute('aria-selected', on ? 'true' : 'false');
+        });
+        document.querySelectorAll('.tab-panel').forEach(function (p) {
+            p.classList.toggle('is-active', p.id === TABS[name]);
+        });
+
+        var panels = document.getElementById('tab-panels');
+        if (panels) panels.scrollTop = 0;
+        if (window.location.hash !== '#' + name) {
+            try { history.replaceState(null, '', '#' + name); } catch (e) {}
+        }
+
+        if (name === 'piezas') loadPieces(1);
+        if (name === 'nueva') {
+            loadConsignmentOptions();
+            fillConsignmentSelect('ynkFullConsignmentId');
+            if (intakeMode === 'full') {
+                var fullRows = document.getElementById('ynkFullPiecesBody');
+                if (fullRows && !fullRows.children.length) {
+                    for (var fr = 0; fr < 3; fr++) ynkFullAddRow();
+                }
+            }
+            startIntakeTimer();
+        } else {
+            stopIntakeTimer();
+        }
+        if (name === 'donador') ynkSetDonorView(donorView);
+        if (name === 'consignaciones') loadConsignments();
+        if (name === 'b2b') ynkB2bInit();
+        if (name === 'reportes') ynkSetReportView(reportView);
+    }
+
+    // ─── Summary cards ───────────────────────────────────────────────────
+
+    function setStat(id, value) {
+        var el = document.getElementById(id);
+        if (el) el.textContent = value === null || value === undefined ? '--' : value;
+    }
+
+    function refreshSummary() {
+        apiFetch(API + '/pieces?per_page=1')
+            .then(function (res) {
+                if (!res) return;
+                var total = res.pagination ? res.pagination.total : asList(res).length;
+                setStat('ynkStatPieces', fmtInt(total));
+                var b = document.getElementById('badge-piezas');
+                if (b) b.textContent = fmtInt(total);
+            })
+            .catch(function () { setStat('ynkStatPieces', '--'); });
+
+        apiFetch(API + '/pieces?ownership=consigna&per_page=1')
+            .then(function (res) {
+                if (!res) return;
+                var total = res.pagination ? res.pagination.total : asList(res).length;
+                setStat('ynkStatConsignPieces', fmtInt(total));
+            })
+            .catch(function () { setStat('ynkStatConsignPieces', '--'); });
+
+        apiFetch(API + '/donors?page=1')
+            .then(function (res) {
+                if (!res) return;
+                var total = res.pagination ? res.pagination.total : asList(res).length;
+                setStat('ynkStatDonors', fmtInt(total));
+                var b = document.getElementById('badge-donadores');
+                if (b) b.textContent = fmtInt(total);
+            })
+            .catch(function () { setStat('ynkStatDonors', '--'); });
+    }
+
+    // =====================================================================
+    //  TAB 1 — PIEZAS USADAS
+    // =====================================================================
+
+    var pieceById = {};
+    var piecesAbort = null;
+
+    function loadPieces(page) {
+        var body = document.getElementById('ynkPiecesBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(12, 'Cargando piezas…');
+
+        var params = {
+            q: val('ynkQ'),
+            condition: document.getElementById('ynkFiltCondition').value,
+            grade: document.getElementById('ynkFiltGrade').value,
+            ownership: document.getElementById('ynkFiltOwnership').value,
+            page: page || 1,
+            per_page: document.getElementById('ynkFiltPerPage').value || 50
+        };
+
+        if (piecesAbort) piecesAbort.abort();
+        piecesAbort = new AbortController();
+
+        apiFetch(API + '/pieces?' + qs(params), { signal: piecesAbort.signal })
+            .then(function (res) {
+                piecesAbort = null;
+                if (!res) return;
+                var items = asList(res);
+                if (!items.length) {
+                    body.innerHTML = emptyRow(12, params.q || params.condition || params.grade || params.ownership
+                        ? 'Sin piezas que coincidan con los filtros.'
+                        : 'Aún no hay piezas usadas. Usa "Nueva pieza" para dar de alta la primera.');
+                    document.getElementById('ynkPiecesPagination').innerHTML = '';
+                    document.getElementById('ynkPiecesFooter').textContent = '0 piezas';
+                    return;
+                }
+                pieceById = {};
+                body.innerHTML = items.map(pieceRow).join('');
+
+                var pg = res.pagination || {};
+                document.getElementById('ynkPiecesFooter').textContent =
+                    fmtInt(pg.total !== undefined ? pg.total : items.length) + ' piezas';
+                renderPagination(document.getElementById('ynkPiecesPagination'), pg, 'ynkPiecesPage');
+            })
+            .catch(function (err) {
+                if (!err || err.name === 'AbortError') return;
+                piecesAbort = null;
+                body.innerHTML = emptyRow(12, 'Error al cargar piezas: ' + errMsg(err));
+                toast('Error al cargar piezas: ' + errMsg(err), 'error');
+            });
+    }
+
+    function pieceRow(it) {
+        pieceById[it.id] = it;
+        return '<tr>' +
+            '<td>' + thumbHtml(it) + '</td>' +
+            '<td class="td--mono">' + (esc(it.part_number) || '<span class="ynk-hint">—</span>') +
+                (it.is_unique_piece ? '<span class="ynk-uniq">1 de 1</span>' : '') + '</td>' +
+            '<td class="td--primary">' + esc(it.name) + '</td>' +
+            '<td>' + esc(it.brand) + '</td>' +
+            '<td>' + conditionBadge(it.condition) +
+                (it.ownership === 'consigna' ? ' <span class="badge badge--low">consigna</span>' : '') + '</td>' +
+            '<td style="text-align:center;">' + gradeHtml(it.condition_grade) + '</td>' +
+            '<td>' + donorHtml(it) + '</td>' +
+            '<td style="text-align:right" class="td--amount">' + fmtMoney(it.price_1) + '</td>' +
+            '<td style="text-align:right" class="td--amount">' + fmtMoney(it.cost) + '</td>' +
+            '<td style="text-align:right" class="td--primary">' + fmtInt(it.stock) + '</td>' +
+            '<td>' + esc(it.location) + '</td>' +
+            '<td style="white-space:nowrap;">' +
+            '<button class="btn btn--ghost btn--sm" onclick="ynkOpenPiece(' + it.id + ')">Ficha</button> ' +
+            '<button class="btn btn--ghost btn--sm" onclick="ynkOpenPiece(' + it.id + ', \'meli\')">MeLi</button> ' +
+            '<button class="btn btn--ghost btn--sm" onclick="ynkOpenLabel(' + it.id + ')">Etiqueta</button> ' +
+            '<button class="btn btn--ghost btn--sm" onclick="ynkOpenImages(' + it.id + ')">Fotos</button> ' +
+            (canEdit() ? '<button class="btn btn--ghost btn--sm" onclick="ynkOpenEditPiece(' + it.id + ')">Editar</button>' : '') +
+            '</td></tr>';
+    }
+
+    // =====================================================================
+    //  TAB 2 — NUEVA PIEZA (alta rápida)
+    // =====================================================================
+
+    var pendingPhotos = [];   // [{file, url}]
+    var intakeTimer = null;
+    var intakeStart = 0;
+
+    function startIntakeTimer() {
+        if (intakeTimer) return;
+        intakeStart = Date.now();
+        var el = document.getElementById('ynkTimer');
+        if (el) el.textContent = '⏱ 0s';
+        intakeTimer = setInterval(function () {
+            var el2 = document.getElementById('ynkTimer');
+            if (el2) el2.textContent = '⏱ ' + Math.round((Date.now() - intakeStart) / 1000) + 's';
+        }, 1000);
+    }
+    function stopIntakeTimer() {
+        if (intakeTimer) { clearInterval(intakeTimer); intakeTimer = null; }
+    }
+    function intakeElapsed() { return Math.round((Date.now() - intakeStart) / 1000); }
+
+    // The API only accepts these formats (see yonke_bp.ALLOWED_EXTENSIONS).
+    var ALLOWED_IMAGE = /^image\/(jpeg|jpg|png|webp)$/i;
+    function isAllowedImage(f) {
+        return ALLOWED_IMAGE.test(f.type || '') || /\.(jpe?g|png|webp)$/i.test(f.name || '');
+    }
+
+    function addPhotos(fileList) {
+        var skipped = 0;
+        Array.prototype.slice.call(fileList || []).forEach(function (f) {
+            if (!isAllowedImage(f)) { skipped++; return; }
+            pendingPhotos.push({ file: f, url: URL.createObjectURL(f) });
+        });
+        renderPhotoPreview();
+        if (skipped) showToast(skipped + ' archivo(s) omitidos: solo JPG, PNG o WEBP.', 'warn');
+    }
+
+    function renderPhotoPreview() {
+        var grid = document.getElementById('ynkPhotoPreview');
+        var counter = document.getElementById('ynkPhotoCount');
+        if (counter) {
+            counter.textContent = pendingPhotos.length
+                ? pendingPhotos.length + ' foto(s) listas para subir'
+                : 'Sin fotos seleccionadas';
+        }
+        if (!grid) return;
+        grid.innerHTML = pendingPhotos.map(function (p, i) {
+            return '<div class="ynk-photo"><img src="' + p.url + '" alt="foto ' + (i + 1) + '" />' +
+                '<button type="button" class="ynk-photo__remove" title="Quitar" onclick="ynkRemovePhoto(' + i + ')">&times;</button></div>';
+        }).join('');
+    }
+
+    function ynkRemovePhoto(i) {
+        var p = pendingPhotos[i];
+        if (!p) return;
+        try { URL.revokeObjectURL(p.url); } catch (e) {}
+        pendingPhotos.splice(i, 1);
+        renderPhotoPreview();
+    }
+
+    function ynkDecodeVin() {
+        var vin = val('ynkVin').toUpperCase();
+        var status = document.getElementById('ynkVinStatus');
+        if (!vin) {
+            if (status) { status.textContent = 'Escribe un VIN primero.'; status.className = 'ynk-hint ynk-warn'; }
+            return;
+        }
+        var btn = document.getElementById('ynkDecodeBtn');
+        if (btn) btn.disabled = true;
+        if (status) { status.textContent = 'Decodificando ' + vin + '…'; status.className = 'ynk-hint'; }
+
+        apiFetch(API + '/vin/' + encodeURIComponent(vin))
+            .then(function (d) {
+                if (!d) return;
+                var filled = [];
+                if (d.make) { document.getElementById('ynkDonorMake').value = d.make; filled.push(d.make); }
+                if (d.model) { document.getElementById('ynkDonorModel').value = d.model; filled.push(d.model); }
+                if (d.year) { document.getElementById('ynkDonorYear').value = d.year; filled.push(d.year); }
+
+                if (d.error && !filled.length) {
+                    if (status) { status.textContent = 'No se pudo decodificar: ' + d.error; status.className = 'ynk-hint ynk-err'; }
+                    return;
+                }
+                var detail = [d.engine, d.body_type, d.fuel_type, d.drive_type, d.trim].filter(Boolean).join(' · ');
+                if (status) {
+                    status.textContent = (filled.length ? 'Autocompletado: ' + filled.join(' ') : 'VIN sin datos de vehículo.') +
+                        (detail ? ' — ' + detail : '') + (d.error ? ' (' + d.error + ')' : '');
+                    status.className = 'ynk-hint' + (filled.length ? ' ynk-ok' : ' ynk-warn');
+                }
+            })
+            .catch(function (err) {
+                if (status) { status.textContent = 'No se pudo decodificar: ' + errMsg(err); status.className = 'ynk-hint ynk-err'; }
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    function buildPiecePayload() {
+        var payload = {
+            name: val('ynkName'),
+            price_1: numOrNull('ynkPrice'),
+            condition: document.getElementById('ynkCondition').value || 'usado',
+            is_unique_piece: !!document.getElementById('ynkUnique').checked
+        };
+        var partNumber = val('ynkPartNumber'); if (partNumber) payload.part_number = partNumber;
+        var brand = val('ynkBrand'); if (brand) payload.brand = brand;
+
+        var cost = numOrNull('ynkCost'); if (cost !== null) payload.cost = cost;
+        var grade = document.getElementById('ynkGrade').value; if (grade) payload.condition_grade = grade;
+
+        var vin = val('ynkVin'); if (vin) payload.donor_vin = vin.toUpperCase();
+        var make = val('ynkDonorMake'); if (make) payload.donor_make = make;
+        var model = val('ynkDonorModel'); if (model) payload.donor_model = model;
+        var year = intOrNull('ynkDonorYear'); if (year !== null) payload.donor_year = year;
+        var km = intOrNull('ynkDonorKm'); if (km !== null) payload.donor_mileage_km = km;
+
+        payload.ownership = document.getElementById('ynkOwnership').value || 'propio';
+        if (payload.ownership === 'consigna') {
+            var cid = document.getElementById('ynkConsignmentId').value;
+            if (cid) payload.consignment_id = parseInt(cid, 10);
+        }
+
+        var location = val('ynkLocation'); if (location) payload.location = location;
+        var warranty = intOrNull('ynkWarranty'); if (warranty !== null) payload.warranty_days = warranty;
+        var stock = intOrNull('ynkInitialStock'); if (stock !== null) payload.initial_stock = stock;
+        var serial = val('ynkSerial'); if (serial) payload.serial_number = serial;
+
+        return payload;
+    }
+
+    function uploadImages(pieceId) {
+        if (!pendingPhotos.length) return Promise.resolve(null);
+        var fd = new FormData();
+        pendingPhotos.forEach(function (p) { fd.append('file', p.file, p.file.name); });
+        return apiUpload(API + '/pieces/' + pieceId + '/images', fd);
+    }
+
+    function savedPieceHtml(id, sku, tail) {
+        return '✔ Pieza #' + id + ' creada — SKU: <span class="ynk-sku">' + esc(sku) + '</span>' +
+            (tail ? ' ' + tail : '');
+    }
+
+    function ynkSubmitPiece() {
+        var result = document.getElementById('ynkSaveResult');
+        var btn = document.getElementById('ynkSaveBtn');
+        var payload = buildPiecePayload();
+
+        if (!payload.name) {
+            if (result) { result.className = 'ynk-save-result ynk-err'; result.textContent = 'El nombre de la pieza es obligatorio.'; }
+            document.getElementById('ynkName').focus();
+            return;
+        }
+        if (payload.price_1 === null) {
+            if (result) { result.className = 'ynk-save-result ynk-err'; result.textContent = 'El precio de venta es obligatorio.'; }
+            document.getElementById('ynkPrice').focus();
+            return;
+        }
+
+        var photoCount = pendingPhotos.length;
+        var elapsed = intakeElapsed();
+        stopIntakeTimer();
+        if (btn) { btn.disabled = true; btn.textContent = 'Guardando…'; }
+        if (result) { result.className = 'ynk-save-result'; result.textContent = 'Creando pieza…'; }
+
+        apiFetch(API + '/pieces', { method: 'POST', body: JSON.stringify(payload) })
+            .then(function (item) {
+                if (!item) return;
+                var sku = item.part_number || '(sin SKU)';
+                if (result) {
+                    result.className = 'ynk-save-result ynk-ok';
+                    result.innerHTML = savedPieceHtml(item.id, sku,
+                        (photoCount ? '· subiendo ' + photoCount + ' foto(s)… ' : '') +
+                        '<span class="ynk-hint">(en ' + elapsed + 's)</span>');
+                }
+                toast('Pieza creada — SKU ' + sku, 'ok');
+
+                var after = photoCount
+                    ? uploadImages(item.id)
+                        .then(function (resp) {
+                            var n = resp && resp.images ? resp.images.length : photoCount;
+                            if (result) {
+                                result.innerHTML = savedPieceHtml(item.id, sku,
+                                    '<span class="ynk-hint">(' + n + ' foto(s) subidas, ' + elapsed + 's)</span>');
+                            }
+                            toast(n + ' foto(s) subidas', 'ok');
+                        })
+                        .catch(function (err) {
+                            if (result) {
+                                result.innerHTML = savedPieceHtml(item.id, sku,
+                                    '<span class="ynk-err">— no se pudieron subir las fotos: ' + esc(errMsg(err)) + '</span>');
+                            }
+                            toast('La pieza se creó, pero fallaron las fotos: ' + errMsg(err), 'warn');
+                        })
+                    : Promise.resolve();
+
+                return after.then(function () { resetPieceForm(); refreshSummary(); });
+            })
+            .catch(function (err) {
+                if (result) { result.className = 'ynk-save-result ynk-err'; result.textContent = 'No se pudo crear la pieza: ' + errMsg(err); }
+                toast('Error al crear la pieza: ' + errMsg(err), 'error');
+            })
+            .then(function () {
+                if (btn) { btn.disabled = false; btn.textContent = 'Guardar pieza'; }
+            });
+    }
+
+    function resetPieceForm() {
+        ['ynkName', 'ynkPartNumber', 'ynkBrand', 'ynkPrice', 'ynkCost', 'ynkVin', 'ynkDonorMake',
+            'ynkDonorModel', 'ynkDonorYear', 'ynkDonorKm', 'ynkLocation', 'ynkWarranty', 'ynkSerial']
+            .forEach(function (id) { var el = document.getElementById(id); if (el) el.value = ''; });
+        document.getElementById('ynkCondition').value = 'usado';
+        document.getElementById('ynkGrade').value = '';
+        document.getElementById('ynkUnique').checked = true;
+        document.getElementById('ynkOwnership').value = 'propio';
+        document.getElementById('ynkInitialStock').value = '1';
+        document.getElementById('ynkConsignmentWrap').style.display = 'none';
+        var status = document.getElementById('ynkVinStatus');
+        if (status) { status.textContent = 'Decodifica el VIN para autocompletar marca, modelo y año.'; status.className = 'ynk-hint'; }
+        pendingPhotos.forEach(function (p) { try { URL.revokeObjectURL(p.url); } catch (e) {} });
+        pendingPhotos = [];
+        renderPhotoPreview();
+        var timerEl = document.getElementById('ynkTimer');
+        if (timerEl) timerEl.textContent = '—';
+        var nameEl = document.getElementById('ynkName');
+        if (nameEl) nameEl.focus();
+    }
+
+    // =====================================================================
+    //  TAB 3 — POR DONADOR
+    // =====================================================================
+
+    var donorView = 'donors';
+    var donors = [];
+    var donorsAbort = null;
+    var donorPiecesAbort = null;
+
+    function ynkSetDonorView(view) {
+        donorView = view === 'pieces' ? 'pieces' : 'donors';
+        var segD = document.getElementById('ynkSegDonors');
+        var segP = document.getElementById('ynkSegPieces');
+        if (segD) segD.classList.toggle('is-active', donorView === 'donors');
+        if (segP) segP.classList.toggle('is-active', donorView === 'pieces');
+        var vd = document.getElementById('ynkDonorViewDonors');
+        var vp = document.getElementById('ynkDonorViewPieces');
+        if (vd) vd.style.display = donorView === 'donors' ? '' : 'none';
+        if (vp) vp.style.display = donorView === 'pieces' ? '' : 'none';
+        if (donorView === 'donors') loadDonors(1);
+        else { loadDonorPieces(1); refreshSummary(); }
+    }
+
+    function loadDonors(page) {
+        var body = document.getElementById('ynkDonorsBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(7, 'Cargando donadores…');
+
+        if (donorsAbort) donorsAbort.abort();
+        donorsAbort = new AbortController();
+        var params = { q: val('ynkDonorQ'), page: page || 1 };
+
+        apiFetch(API + '/donors?' + qs(params), { signal: donorsAbort.signal })
+            .then(function (res) {
+                donorsAbort = null;
+                if (!res) return;
+                donors = asList(res);
+                if (!donors.length) {
+                    body.innerHTML = emptyRow(7, 'Sin donadores registrados. Da de alta una pieza con VIN del donador para verla aquí.');
+                    document.getElementById('ynkDonorsFooter').textContent = '0 donadores';
+                    document.getElementById('ynkDonorsPagination').innerHTML = '';
+                    return;
+                }
+                body.innerHTML = donors.map(function (d, i) {
+                    return '<tr>' +
+                        '<td class="td--mono">' + (esc(d.donor_vin) || '<span class="ynk-hint">—</span>') + '</td>' +
+                        '<td class="td--primary">' + (esc(d.donor_make) || '—') + '</td>' +
+                        '<td>' + (esc(d.donor_model) || '—') + '</td>' +
+                        '<td>' + (esc(d.donor_year) || '—') + '</td>' +
+                        '<td style="text-align:right" class="td--primary">' + fmtInt(d.pieces) + '</td>' +
+                        '<td style="text-align:right" class="td--amount">' + fmtMoney(d.total_value) + '</td>' +
+                        '<td><button class="btn btn--ghost btn--sm" onclick="ynkDonorToPieces(' + i + ')">Ver piezas</button></td>' +
+                        '</tr>';
+                }).join('');
+
+                var pg = res.pagination || {};
+                document.getElementById('ynkDonorsFooter').textContent =
+                    fmtInt(pg.total !== undefined ? pg.total : donors.length) + ' donadores';
+                renderPagination(document.getElementById('ynkDonorsPagination'), pg, 'ynkDonorsPage');
+            })
+            .catch(function (err) {
+                if (!err || err.name === 'AbortError') return;
+                donorsAbort = null;
+                body.innerHTML = emptyRow(7, 'Error al cargar donadores: ' + errMsg(err));
+                toast('Error al cargar donadores: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkDonorToPieces(i) {
+        var d = donors[i];
+        if (!d) return;
+        document.getElementById('ynkDonorMake').value = d.donor_make || '';
+        document.getElementById('ynkDonorModel').value = d.donor_model || '';
+        document.getElementById('ynkDonorYear').value = d.donor_year || '';
+        document.getElementById('ynkDonorVin').value = d.donor_vin || '';
+        document.getElementById('ynkDonorPieceQ').value = '';
+        ynkSetDonorView('pieces');
+    }
+
+    function loadDonorPieces(page) {
+        var body = document.getElementById('ynkDonorPiecesBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(10, 'Buscando piezas del donador…');
+
+        if (donorPiecesAbort) donorPiecesAbort.abort();
+        donorPiecesAbort = new AbortController();
+        var params = {
+            donor_make: val('ynkDonorMake'),
+            donor_model: val('ynkDonorModel'),
+            donor_year: val('ynkDonorYear'),
+            vin: val('ynkDonorVin'),
+            q: val('ynkDonorPieceQ'),
+            page: page || 1,
+            per_page: 50
+        };
+
+        apiFetch(API + '/pieces?' + qs(params), { signal: donorPiecesAbort.signal })
+            .then(function (res) {
+                donorPiecesAbort = null;
+                if (!res) return;
+                var items = asList(res);
+                if (!items.length) {
+                    body.innerHTML = emptyRow(10, 'No hay piezas de ese donador con los filtros actuales.');
+                    document.getElementById('ynkDonorPiecesFooter').textContent = '0 piezas';
+                    document.getElementById('ynkDonorPiecesPagination').innerHTML = '';
+                    return;
+                }
+                body.innerHTML = items.map(function (it) {
+                    pieceById[it.id] = it;
+                    return '<tr>' +
+                        '<td>' + thumbHtml(it) + '</td>' +
+                        '<td class="td--mono">' + (esc(it.part_number) || '—') + '</td>' +
+                        '<td class="td--primary">' + esc(it.name) + '</td>' +
+                        '<td style="text-align:center;">' + gradeHtml(it.condition_grade) + '</td>' +
+                        '<td>' + conditionBadge(it.condition) + '</td>' +
+                        '<td>' + donorHtml(it) + '</td>' +
+                        '<td style="text-align:right" class="td--amount">' + fmtMoney(it.price_1) + '</td>' +
+                        '<td style="text-align:right" class="td--primary">' + fmtInt(it.stock) + '</td>' +
+                        '<td>' + esc(it.location) + '</td>' +
+                        '<td><button class="btn btn--ghost btn--sm" onclick="ynkOpenPieceFromSearch(' + it.id + ')">Editar</button></td>' +
+                        '</tr>';
+                }).join('');
+
+                var pg = res.pagination || {};
+                document.getElementById('ynkDonorPiecesFooter').textContent =
+                    fmtInt(pg.total !== undefined ? pg.total : items.length) + ' piezas';
+                renderPagination(document.getElementById('ynkDonorPiecesPagination'), pg, 'ynkDonorPiecesPage');
+            })
+            .catch(function (err) {
+                if (!err || err.name === 'AbortError') return;
+                donorPiecesAbort = null;
+                body.innerHTML = emptyRow(10, 'Error al buscar piezas: ' + errMsg(err));
+                toast('Error al buscar piezas del donador: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkOpenPieceFromSearch(id) {
+        var it = pieceById[id];
+        if (!it) {
+            toast('Recarga la pestaña "Piezas usadas" para editar esta pieza.', 'warn');
+            return;
+        }
+        openEditPiece(it);
+    }
+
+    // =====================================================================
+    //  TAB 4 — CONSIGNACIONES
+    // =====================================================================
+
+    var consignments = [];
+    var currentConsignmentId = null;
+
+    function loadConsignments() {
+        var body = document.getElementById('ynkConsignBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(11, 'Cargando consignaciones…');
+
+        apiFetch(API + '/consignments')
+            .then(function (res) {
+                if (!res) return;
+                consignments = asList(res);
+                renderConsignments();
+                loadConsignmentOptions();
+            })
+            .catch(function (err) {
+                body.innerHTML = emptyRow(11, 'Error al cargar consignaciones: ' + errMsg(err));
+                toast('Error al cargar consignaciones: ' + errMsg(err), 'error');
+            });
+    }
+
+    function renderConsignments() {
+        var body = document.getElementById('ynkConsignBody');
+        if (!body) return;
+        var q = val('ynkConsignQ').toLowerCase();
+        var rows = consignments.filter(function (c) {
+            if (!q) return true;
+            return [(c.consignor_name || ''), (c.consignor_rfc || ''), (c.consignor_phone || '')]
+                .join(' ').toLowerCase().indexOf(q) !== -1;
+        });
+
+        var open = consignments.filter(function (c) { return (c.status || 'open') === 'open'; }).length;
+        setStat('ynkStatConsignments', open + ' / ' + consignments.length);
+        var sub = document.getElementById('ynkStatConsignmentsSub');
+        if (sub) sub.textContent = 'Abiertas / total';
+        var badge = document.getElementById('badge-consignaciones');
+        if (badge) badge.textContent = open;
+
+        if (!rows.length) {
+            body.innerHTML = emptyRow(11, consignments.length ? 'Ninguna consigna coincide con el filtro.' : 'Sin consignaciones registradas todavía.');
+            document.getElementById('ynkConsignFooter').textContent = '0 consignaciones';
+            return;
+        }
+
+        body.innerHTML = rows.map(function (c) {
+            var status = (c.status || 'open').toLowerCase();
+            var statusCls = status === 'open' ? 'badge--pending' : (status === 'settled' ? 'badge--ok' : 'badge--complete');
+            var pieces = c.pieces !== undefined ? c.pieces
+                : (c.items_count !== undefined ? c.items_count : ((c.items || []).length || 0));
+            return '<tr>' +
+                '<td class="td--mono">' + esc(c.id) + '</td>' +
+                '<td class="td--primary">' + esc(c.consignor_name) + '</td>' +
+                '<td class="td--mono">' + esc(c.consignor_rfc) + '</td>' +
+                '<td>' + esc(c.consignor_phone) + '</td>' +
+                '<td style="text-align:right">' + (c.commission_pct !== undefined && c.commission_pct !== null ? esc(c.commission_pct) + '%' : '—') + '</td>' +
+                '<td style="text-align:right">' + esc(pieces) + '</td>' +
+                '<td style="text-align:right" class="td--amount">' + fmtMoney(c.total_sold) + '</td>' +
+                '<td style="text-align:right" class="td--amount">' + fmtMoney(c.total_commission) + '</td>' +
+                '<td><span class="badge ' + statusCls + '">' + esc(status) + '</span></td>' +
+                '<td>' + esc((c.created_at || '').substring(0, 10) || '—') + '</td>' +
+                '<td style="white-space:nowrap;">' +
+                '<button class="btn btn--ghost btn--sm" onclick="ynkOpenConsignment(' + c.id + ')">Ver / liquidar</button> ' +
+                '<button class="btn btn--ghost btn--sm" onclick="ynkOpenStatement(' + c.id + ')">Estado de cuenta</button>' +
+                '</td></tr>';
+        }).join('');
+
+        document.getElementById('ynkConsignFooter').textContent = rows.length + ' consignaciones';
+    }
+
+    function loadConsignmentOptions() {
+        fillConsignmentSelect('ynkConsignmentId');
+    }
+
+    function fillConsignmentSelect(selId) {
+        var sel = document.getElementById(selId);
+        if (!sel) return;
+        apiFetch(API + '/consignments')
+            .then(function (res) {
+                if (!res) return;
+                var all = asList(res);
+                if (!consignments.length) consignments = all;
+                var open = all.filter(function (c) { return (c.status || 'open') === 'open'; });
+                var current = sel.value;
+                sel.innerHTML = '<option value="">— Selecciona consignante —</option>' + open.map(function (c) {
+                    return '<option value="' + esc(c.id) + '">' + esc('#' + c.id + ' · ' + (c.consignor_name || '')) + '</option>';
+                }).join('');
+                if (current) sel.value = current;
+                if (!open.length) {
+                    sel.innerHTML = '<option value="">Sin consignaciones abiertas</option>';
+                }
+            })
+            .catch(function () { /* silent — the select is optional */ });
+    }
+
+    function ynkOpenConsignmentModal() {
+        ['ynkConsName', 'ynkConsRfc', 'ynkConsPhone', 'ynkConsCommission', 'ynkConsNotes']
+            .forEach(function (id) { var el = document.getElementById(id); if (el) el.value = ''; });
+        var res = document.getElementById('ynkConsResult');
+        if (res) { res.textContent = ''; res.className = 'ynk-save-result'; }
+        openModal('ynkConsignModal');
+        setTimeout(function () { document.getElementById('ynkConsName').focus(); }, 50);
+    }
+
+    function ynkCreateConsignment() {
+        var name = val('ynkConsName');
+        var res = document.getElementById('ynkConsResult');
+        var btn = document.getElementById('ynkConsCreateBtn');
+        if (!name) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'El nombre del consignante es obligatorio.'; }
+            return;
+        }
+        var payload = { consignor_name: name };
+        var rfc = val('ynkConsRfc'); if (rfc) payload.consignor_rfc = rfc;
+        var phone = val('ynkConsPhone'); if (phone) payload.consignor_phone = phone;
+        var pct = numOrNull('ynkConsCommission'); if (pct !== null) payload.commission_pct = pct;
+        var notes = val('ynkConsNotes'); if (notes) payload.notes = notes;
+
+        if (btn) btn.disabled = true;
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Creando…'; }
+
+        apiFetch(API + '/consignments', { method: 'POST', body: JSON.stringify(payload) })
+            .then(function (c) {
+                if (!c) return;
+                var created = unwrap(c);
+                toast('Consignación creada: ' + (created.consignor_name || name), 'ok');
+                ynkCloseModal('ynkConsignModal');
+                loadConsignments();
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo crear: ' + errMsg(err); }
+                toast('Error al crear consignación: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    function ynkOpenConsignment(id) {
+        currentConsignmentId = id;
+        document.getElementById('ynkConsignDetailTitle').textContent = 'Consignación #' + id;
+        document.getElementById('ynkConsignDetailInfo').textContent = 'Cargando…';
+        document.getElementById('ynkConsignItemsBody').innerHTML = emptyRow(6, 'Cargando piezas…');
+        document.getElementById('ynkSettleResult').innerHTML = '';
+        ['ynkItemInvId', 'ynkItemAgreed', 'ynkItemCommission'].forEach(function (i) {
+            var el = document.getElementById(i); if (el) el.value = '';
+        });
+        var r = document.getElementById('ynkConsItemResult');
+        if (r) { r.textContent = ''; r.className = 'ynk-save-result'; }
+        openModal('ynkConsignDetailModal');
+        loadConsignmentDetail(id);
+    }
+
+    function loadConsignmentDetail(id) {
+        return apiFetch(API + '/consignments/' + id)
+            .then(function (res) {
+                if (!res) return null;
+                var c = unwrap(res);
+                var info = document.getElementById('ynkConsignDetailInfo');
+                var items = Array.isArray(c.items) ? c.items : [];
+
+                if (info) {
+                    info.innerHTML = '<strong>' + esc(c.consignor_name || '—') + '</strong>' +
+                        (c.consignor_rfc ? ' · RFC ' + esc(c.consignor_rfc) : '') +
+                        (c.consignor_phone ? ' · Tel ' + esc(c.consignor_phone) : '') +
+                        (c.commission_pct !== undefined && c.commission_pct !== null ? ' · Comisión ' + esc(c.commission_pct) + '%' : '') +
+                        ' · Estado: ' + esc(c.status || 'open') +
+                        (c.notes ? '<br><span>' + esc(c.notes) + '</span>' : '');
+                }
+
+                var body = document.getElementById('ynkConsignItemsBody');
+                if (!items.length) {
+                    body.innerHTML = emptyRow(6, 'Esta consigna todavía no tiene piezas.');
+                } else {
+                    body.innerHTML = items.map(function (it) {
+                        var status = (it.status || '').toLowerCase();
+                        var cls = status === 'sold' ? 'badge--ok' : (status === 'settled' ? 'badge--complete' : 'badge--pending');
+                        return '<tr>' +
+                            '<td class="td--mono">' + esc(it.inventory_id) + '</td>' +
+                            '<td class="td--mono">' + esc(it.part_number) + '</td>' +
+                            '<td class="td--primary">' + esc(it.name) + '</td>' +
+                            '<td style="text-align:right" class="td--amount">' + fmtMoney(it.agreed_price) + '</td>' +
+                            '<td style="text-align:right" class="td--amount">' + fmtMoney(it.commission_amount) + '</td>' +
+                            '<td><span class="badge ' + cls + '">' + esc(status || '—') + '</span></td>' +
+                            '</tr>';
+                    }).join('');
+                }
+                return c;
+            })
+            .catch(function (err) {
+                document.getElementById('ynkConsignItemsBody').innerHTML = emptyRow(6, 'Error al cargar el detalle: ' + errMsg(err));
+                toast('Error al cargar la consignación: ' + errMsg(err), 'error');
+                return null;
+            });
+    }
+
+    function ynkAddConsignmentItem() {
+        if (!currentConsignmentId) return;
+        var invId = intOrNull('ynkItemInvId');
+        var agreed = numOrNull('ynkItemAgreed');
+        var res = document.getElementById('ynkConsItemResult');
+
+        if (!invId) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'El ID de inventario es obligatorio.'; }
+            return;
+        }
+        if (agreed === null) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'El precio acordado es obligatorio.'; }
+            return;
+        }
+        var payload = { inventory_id: invId, agreed_price: agreed };
+        var commission = numOrNull('ynkItemCommission');
+        if (commission !== null) payload.commission_amount = commission;
+
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Agregando pieza…'; }
+
+        apiFetch(API + '/consignments/' + currentConsignmentId + '/items', { method: 'POST', body: JSON.stringify(payload) })
+            .then(function () {
+                if (res) { res.className = 'ynk-save-result ynk-ok'; res.textContent = 'Pieza agregada a la consigna.'; }
+                toast('Pieza agregada a la consigna', 'ok');
+                ['ynkItemInvId', 'ynkItemAgreed', 'ynkItemCommission'].forEach(function (i) {
+                    var el = document.getElementById(i); if (el) el.value = '';
+                });
+                loadConsignmentDetail(currentConsignmentId);
+                loadConsignments();
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo agregar: ' + errMsg(err); }
+                toast('Error al agregar la pieza: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkSettleConsignment() {
+        if (!currentConsignmentId) return;
+        if (!window.confirm('¿Liquidar la consignación #' + currentConsignmentId + '? Esta acción marca la consigna como liquidada.')) return;
+
+        var btn = document.getElementById('ynkSettleBtn');
+        var box = document.getElementById('ynkSettleResult');
+        if (btn) btn.disabled = true;
+        if (box) box.innerHTML = '<p class="ynk-hint">Liquidando…</p>';
+
+        apiFetch(API + '/consignments/' + currentConsignmentId + '/settle', { method: 'PUT', body: JSON.stringify({}) })
+            .then(function (summary) {
+                if (!summary) return;
+                var s = unwrap(summary);
+                if (box) box.innerHTML = renderSettlementSummary(s);
+                toast('Consignación liquidada', 'ok');
+                loadConsignmentDetail(currentConsignmentId);
+                loadConsignments();
+            })
+            .catch(function (err) {
+                if (box) box.innerHTML = '<p class="ynk-err">No se pudo liquidar: ' + esc(errMsg(err)) + '</p>';
+                toast('Error al liquidar: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    // The settle response shape is not fixed by the contract, so render any
+    // scalar key it returns with a friendly label, and any items[] as a table.
+    var SUMMARY_LABELS = {
+        settled_count: 'Piezas liquidadas',
+        count: 'Piezas liquidadas',
+        items_settled: 'Piezas liquidadas',
+        items_count: 'Piezas liquidadas',
+        total_sold: 'Total precio acordado',
+        total_agreed: 'Total precio acordado',
+        agreed_total: 'Total precio acordado',
+        total_commission: 'Comisión total',
+        commission_total: 'Comisión total',
+        total_payout: 'A pagar al consignante',
+        payout_total: 'A pagar al consignante',
+        consignor_payout: 'A pagar al consignante',
+        total_to_pay_consignor: 'A pagar al consignante',
+        consignor_name: 'Consignante',
+        total: 'Total',
+        status: 'Estado',
+        message: 'Resultado'
+    };
+    var MONEY_KEYS = /(price|amount|total|commission|payout|value|subtotal)/i;
+
+    function renderSettlementSummary(s) {
+        var keys = Object.keys(s || {}).filter(function (k) { return k !== 'items' && s[k] !== null && typeof s[k] !== 'object'; });
+        var html = '<div class="ynk-summary-card"><h4>Resumen de liquidación</h4>';
+        if (!keys.length) html += '<p class="ynk-hint">La consigna quedó marcada como liquidada.</p>';
+        keys.forEach(function (k) {
+            var label = SUMMARY_LABELS[k] || k.replace(/_/g, ' ');
+            var v = s[k];
+            var shown = (typeof v === 'number' && MONEY_KEYS.test(k)) ? fmtMoney(v) : esc(v);
+            html += '<div class="ynk-kv"><span class="ynk-kv__k">' + esc(label) + '</span><span class="ynk-kv__v">' + shown + '</span></div>';
+        });
+        var items = Array.isArray(s.items) ? s.items : [];
+        if (items.length) {
+            html += '<div style="margin-top:var(--space-3);">' + items.map(function (it) {
+                return '<div class="ynk-kv"><span class="ynk-kv__k">' +
+                    esc([it.part_number, it.name].filter(Boolean).join(' · ') || ('ID ' + (it.inventory_id || '—'))) +
+                    '</span><span class="ynk-kv__v">' + fmtMoney(it.commission_amount || it.agreed_price) + '</span></div>';
+            }).join('') + '</div>';
+        }
+        return html + '</div>';
+    }
+
+    // =====================================================================
+    //  EDIT PIECE (modal)
+    // =====================================================================
+
+    var editTarget = null;
+
+    function ynkOpenEditPiece(id) {
+        var it = pieceById[id];
+        if (!it) return;
+        openEditPiece(it);
+    }
+
+    function openEditPiece(it) {
+        editTarget = it;
+        document.getElementById('ynkEditId').value = it.id;
+        document.getElementById('ynkEditName').value = it.name || '';
+        document.getElementById('ynkEditPart').value = it.part_number || '';
+        document.getElementById('ynkEditBrand').value = it.brand || '';
+        document.getElementById('ynkEditPrice').value = it.price_1 !== undefined && it.price_1 !== null ? it.price_1 : '';
+        document.getElementById('ynkEditCost').value = it.cost !== undefined && it.cost !== null ? it.cost : '';
+        document.getElementById('ynkEditCondition').value = it.condition || 'usado';
+        document.getElementById('ynkEditGrade').value = it.condition_grade || '';
+        document.getElementById('ynkEditOwnership').value = it.ownership || 'propio';
+        document.getElementById('ynkEditLocation').value = it.location || '';
+        document.getElementById('ynkEditVin').value = it.donor_vin || '';
+        document.getElementById('ynkEditMake').value = it.donor_make || '';
+        document.getElementById('ynkEditModel').value = it.donor_model || '';
+        document.getElementById('ynkEditYear').value = it.donor_year || '';
+        document.getElementById('ynkEditKm').value = it.donor_mileage_km || '';
+        document.getElementById('ynkEditUnique').checked = !!it.is_unique_piece;
+        var res = document.getElementById('ynkEditResult');
+        if (res) { res.textContent = ''; res.className = 'ynk-save-result'; }
+        openModal('ynkEditModal');
+    }
+
+    function ynkSaveEditPiece() {
+        var id = document.getElementById('ynkEditId').value;
+        if (!id) return;
+        var res = document.getElementById('ynkEditResult');
+        var btn = document.getElementById('ynkEditSaveBtn');
+        var name = val('ynkEditName');
+        var price = numOrNull('ynkEditPrice');
+
+        if (!name) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'El nombre es obligatorio.'; }
+            return;
+        }
+        if (price === null) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'El precio es obligatorio.'; }
+            return;
+        }
+
+        var payload = {
+            name: name,
+            price_1: price,
+            condition: document.getElementById('ynkEditCondition').value,
+            ownership: document.getElementById('ynkEditOwnership').value,
+            is_unique_piece: !!document.getElementById('ynkEditUnique').checked,
+            condition_grade: document.getElementById('ynkEditGrade').value || null,
+            location: val('ynkEditLocation') || null,
+            donor_vin: (val('ynkEditVin') || '').toUpperCase() || null,
+            donor_make: val('ynkEditMake') || null,
+            donor_model: val('ynkEditModel') || null,
+            donor_year: intOrNull('ynkEditYear'),
+            donor_mileage_km: intOrNull('ynkEditKm'),
+            cost: numOrNull('ynkEditCost')
+        };
+
+        if (btn) btn.disabled = true;
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Guardando…'; }
+
+        apiFetch(API + '/pieces/' + id, { method: 'PUT', body: JSON.stringify(payload) })
+            .then(function (updated) {
+                var u = updated ? unwrap(updated) : null;
+                if (u && u.id) {
+                    pieceById[u.id] = u;
+                } else if (editTarget) {
+                    pieceById[editTarget.id] = Object.assign({}, editTarget, payload);
+                }
+                toast('Pieza actualizada', 'ok');
+                ynkCloseModal('ynkEditModal');
+                if (activeTab === 'piezas') loadPieces(1);
+                if (activeTab === 'donador' && donorView === 'pieces') loadDonorPieces(1);
+                refreshSummary();
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo guardar: ' + errMsg(err); }
+                toast('Error al guardar la pieza: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    // =====================================================================
+    //  PIECE IMAGES (modal)
+    // =====================================================================
+
+    var imagesTargetId = null;
+
+    function ynkOpenImages(id) {
+        var it = pieceById[id];
+        imagesTargetId = id;
+        document.getElementById('ynkImagesTitle').textContent = 'Fotos · ' + (it && it.name ? it.name : 'pieza #' + id);
+        var status = document.getElementById('ynkImagesStatus');
+        if (status) status.textContent = '';
+        renderImagesGrid(it);
+        openModal('ynkImagesModal');
+    }
+
+    function renderImagesGrid(it) {
+        var grid = document.getElementById('ynkImagesGrid');
+        if (!grid) return;
+        var imgs = (it && it.images) || [];
+        if (!imgs.length && it && it.image_url) imgs = [{ id: null, url: it.image_url, is_primary: true }];
+        if (!imgs.length) {
+            grid.innerHTML = '<p class="ynk-hint">Esta pieza no tiene fotos todavía.</p>';
+            return;
+        }
+        grid.innerHTML = imgs.map(function (im) {
+            return '<div class="ynk-photo"><img src="' + esc(im.url) + '" alt="foto" />' +
+                (im.is_primary ? '<span class="ynk-uniq" style="position:absolute;bottom:4px;left:4px;margin:0;">principal</span>' : '') +
+                (canEdit() && im.id ? '<button type="button" class="ynk-photo__remove" title="Eliminar" onclick="ynkDeleteImage(' + im.id + ')">&times;</button>' : '') +
+                '</div>';
+        }).join('');
+    }
+
+    function ynkUploadImagesTo(id) {
+        return function (fileList) {
+            var files = Array.prototype.slice.call(fileList || []).filter(isAllowedImage);
+            if (!files.length) return;
+            var status = document.getElementById('ynkImagesStatus');
+            if (status) status.textContent = 'Subiendo ' + files.length + ' foto(s)…';
+            var fd = new FormData();
+            files.forEach(function (f) { fd.append('file', f, f.name); });
+            apiUpload(API + '/pieces/' + id + '/images', fd)
+                .then(function (resp) {
+                    var it = pieceById[id] || {};
+                    if (resp && Array.isArray(resp.images)) it.images = resp.images;
+                    pieceById[id] = it;
+                    renderImagesGrid(it);
+                    if (status) status.textContent = 'Fotos actualizadas.';
+                    toast('Fotos actualizadas', 'ok');
+                    if (activeTab === 'piezas') loadPieces(1);
+                })
+                .catch(function (err) {
+                    if (status) status.textContent = 'Error al subir: ' + errMsg(err);
+                    toast('Error al subir fotos: ' + errMsg(err), 'error');
+                });
+        };
+    }
+
+    function ynkDeleteImage(imageId) {
+        var id = imagesTargetId;
+        if (!id || !imageId) return;
+        if (!window.confirm('¿Eliminar esta foto?')) return;
+        apiFetch(API + '/pieces/' + id + '/images/' + imageId, { method: 'DELETE' })
+            .then(function () {
+                var it = pieceById[id] || {};
+                it.images = (it.images || []).filter(function (im) { return im.id !== imageId; });
+                pieceById[id] = it;
+                renderImagesGrid(it);
+                toast('Foto eliminada', 'ok');
+                if (activeTab === 'piezas') loadPieces(1);
+            })
+            .catch(function (err) {
+                toast('Error al eliminar la foto: ' + errMsg(err), 'error');
+            });
+    }
+
+    // =====================================================================
+    //  SHARED HELPERS — tolerant parsing + generic rendering
+    //  The newer report/compat/duplicate endpoints do not pin every response
+    //  key, so parse defensively and render whatever comes back.
+    // =====================================================================
+
+    var LIST_KEYS = ['data', 'items', 'rows', 'results', 'vehicles', 'compat',
+        'compatibilities', 'compatibility', 'duplicates', 'groups', 'pieces'];
+
+    function anyList(res) {
+        if (!res) return [];
+        if (Array.isArray(res)) return res;
+        for (var i = 0; i < LIST_KEYS.length; i++) {
+            if (Array.isArray(res[LIST_KEYS[i]])) return res[LIST_KEYS[i]];
+        }
+        if (res.data && typeof res.data === 'object') {
+            for (var j = 0; j < LIST_KEYS.length; j++) {
+                if (Array.isArray(res.data[LIST_KEYS[j]])) return res.data[LIST_KEYS[j]];
+            }
+        }
+        return [];
+    }
+
+    var FIELD_LABELS = {
+        id: 'ID', part_number: 'No. Parte', name: 'Nombre', brand: 'Marca',
+        condition: 'Condición', condition_grade: 'Grado', grade: 'Grado',
+        price_1: 'Precio', price: 'Precio', cost: 'Costo', stock: 'Stock',
+        location: 'Ubicación', ownership: 'Propiedad', days_in_yard: 'Días en patio',
+        donor_vin: 'VIN', donor_make: 'Marca', donor_model: 'Modelo', donor_year: 'Año',
+        make: 'Marca', model: 'Modelo', year: 'Año', engine: 'Motor',
+        inventory_id: 'ID Inv.', pieces: 'Piezas', count: 'Cantidad', qty: 'Cantidad',
+        total: 'Total', total_value: 'Valor', value: 'Valor', reason: 'Motivo',
+        score: 'Similitud', similarity: 'Similitud', status: 'Estado',
+        agreed_price: 'Precio acordado', commission_amount: 'Comisión'
+    };
+    function fieldLabel(k) { return FIELD_LABELS[k] || String(k).replace(/_/g, ' '); }
+    function isMoneyKey(k) {
+        return /(price|cost|amount|total|value|margin|margen|capital|payout|commission|precio|costo)/i.test(k);
+    }
+    function formatCell(k, v) {
+        if (v === null || v === undefined || v === '') return '<span class="ynk-hint">—</span>';
+        if (k === 'condition_grade' || k === 'grade') return gradeHtml(v);
+        if (typeof v === 'number') return isMoneyKey(k) ? fmtMoney(v) : esc(v);
+        if (typeof v === 'object') return esc(JSON.stringify(v));
+        return esc(v);
+    }
+
+    function genericTableHtml(items, columns) {
+        if (!items || !items.length) return '<p class="ynk-hint">Sin resultados.</p>';
+        var present = {};
+        items.forEach(function (it) {
+            if (it && typeof it === 'object') Object.keys(it).forEach(function (k) { present[k] = 1; });
+        });
+        var cols = (columns || []).filter(function (c) { return present[c]; });
+        if (!cols.length) {
+            var seen = {};
+            items.forEach(function (it) {
+                if (!it || typeof it !== 'object') return;
+                Object.keys(it).forEach(function (k) {
+                    if (k !== 'images' && !seen[k]) { seen[k] = 1; cols.push(k); }
+                });
+            });
+        }
+        if (!cols.length) {
+            return '<pre class="ynk-hint" style="white-space:pre-wrap;">' + esc(JSON.stringify(items, null, 2)) + '</pre>';
+        }
+        return '<table class="data-table"><thead><tr>' + cols.map(function (c) {
+            return '<th>' + esc(fieldLabel(c)) + '</th>';
+        }).join('') + '</tr></thead><tbody>' + items.map(function (it) {
+            return '<tr>' + cols.map(function (c) {
+                return '<td>' + formatCell(c, it ? it[c] : null) + '</td>';
+            }).join('') + '</tr>';
+        }).join('') + '</tbody></table>';
+    }
+
+    function kvHtml(obj, title) {
+        var keys = Object.keys(obj || {}).filter(function (k) {
+            var v = obj[k];
+            return v === null || v === undefined || typeof v !== 'object';
+        });
+        var html = '<div class="ynk-summary-card"><h4>' + esc(title) + '</h4>';
+        if (!keys.length) html += '<p class="ynk-hint">Sin datos.</p>';
+        keys.forEach(function (k) {
+            var v = obj[k];
+            var shown = (typeof v === 'number' && isMoneyKey(k)) ? fmtMoney(v) : esc(v);
+            html += '<div class="ynk-kv"><span class="ynk-kv__k">' + esc(fieldLabel(k)) +
+                '</span><span class="ynk-kv__v">' + shown + '</span></div>';
+        });
+        return html + '</div>';
+    }
+
+    function anyCard(title, value) {
+        if (value === undefined) {
+            return '<div class="ynk-summary-card"><h4>' + esc(title) + '</h4><p class="ynk-hint">Sin datos.</p></div>';
+        }
+        if (Array.isArray(value)) {
+            return '<div class="ynk-summary-card"><h4>' + esc(title) + '</h4>' +
+                '<div style="max-height:360px;overflow:auto;">' + genericTableHtml(value) + '</div></div>';
+        }
+        if (value && typeof value === 'object') return kvHtml(value, title);
+        var shown = (typeof value === 'number' && isMoneyKey(title)) ? fmtMoney(value) : esc(value);
+        return '<div class="ynk-summary-card"><h4>' + esc(title) + '</h4>' +
+            '<div class="ynk-kv"><span class="ynk-kv__v">' + shown + '</span></div></div>';
+    }
+
+    function summaryInline(summary) {
+        if (summary === null || summary === undefined || summary === '') return '';
+        if (typeof summary !== 'object') return String(summary);
+        var parts = Object.keys(summary).filter(function (k) {
+            return summary[k] === null || typeof summary[k] !== 'object';
+        }).map(function (k) {
+            var v = summary[k];
+            return fieldLabel(k) + ': ' + ((typeof v === 'number' && isMoneyKey(k)) ? fmtMoney(v) : v);
+        });
+        return parts.join(' · ');
+    }
+
+    // =====================================================================
+    //  PIECE DETAIL / ACTIONS (ficha)
+    // =====================================================================
+
+    var currentDetailId = null;
+    var identifiedName = '';
+    var suggestedPrice = null;
+
+    function fetchPiece(id) {
+        return apiFetch(API + '/pieces/' + id)
+            .then(function (res) { return unwrap(res); })
+            .catch(function (err) { toast('No se pudo cargar la pieza: ' + errMsg(err), 'error'); return null; });
+    }
+
+    function ynkOpenPiece(id, action) {
+        var it = pieceById[id];
+        if (it) {
+            renderPieceDetail(it);
+        } else {
+            document.getElementById('ynkPieceTitle').textContent = 'Pieza #' + id;
+            document.getElementById('ynkPieceInfo').textContent = 'Cargando…';
+            document.getElementById('ynkPiecePhotos').innerHTML = '';
+        }
+        openModal('ynkPieceModal');
+        var p = it ? Promise.resolve(it) : fetchPiece(id);
+        p.then(function (full) {
+            if (!full || !full.id) return;
+            pieceById[full.id] = full;
+            renderPieceDetail(full);
+            if (action === 'meli') ynkPublishMeli();
+        }).catch(function () {});
+    }
+
+    function renderPieceDetail(it) {
+        currentDetailId = it.id;
+        document.getElementById('ynkPieceTitle').textContent = it.name || ('Pieza #' + it.id);
+        var veh = [it.donor_make, it.donor_model, it.donor_year].filter(Boolean).join(' ');
+        var info = document.getElementById('ynkPieceInfo');
+        info.innerHTML =
+            '<div class="ynk-kv"><span class="ynk-kv__k">SKU / No. parte</span><span class="ynk-kv__v ynk-sku">' + (esc(it.part_number) || '—') + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Marca</span><span class="ynk-kv__v">' + (esc(it.brand) || '—') + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Condición / grado</span><span class="ynk-kv__v">' + esc(it.condition || '—') + ' · ' + gradeHtml(it.condition_grade) + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Precio / costo</span><span class="ynk-kv__v">' + fmtMoney(it.price_1) + ' / ' + fmtMoney(it.cost) + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Stock</span><span class="ynk-kv__v">' + fmtInt(it.stock) + (it.is_unique_piece ? ' (1 de 1)' : '') + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Ubicación</span><span class="ynk-kv__v">' + (esc(it.location) || '—') + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Propiedad</span><span class="ynk-kv__v">' + esc(it.ownership || 'propio') + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Donador</span><span class="ynk-kv__v">' + (esc(veh) || '—') + (it.donor_vin ? ' · ' + esc(it.donor_vin) : '') + '</span></div>';
+
+        renderPiecePhotos(it);
+        pieceActionResult('', '');
+        var pres = document.getElementById('ynkCompatResult');
+        if (pres) { pres.textContent = ''; pres.className = 'ynk-save-result'; }
+        ['ynkCompatMake', 'ynkCompatModel', 'ynkCompatYear', 'ynkCompatEngine'].forEach(function (i) {
+            var el = document.getElementById(i); if (el) el.value = '';
+        });
+        loadCompat(it.id);
+    }
+
+    function renderPiecePhotos(it) {
+        var grid = document.getElementById('ynkPiecePhotos');
+        if (!grid) return;
+        var imgs = (it && it.images) || [];
+        if (!imgs.length && it && it.image_url) imgs = [{ url: it.image_url }];
+        if (!imgs.length) { grid.innerHTML = '<span class="ynk-hint">Sin fotos.</span>'; return; }
+        grid.innerHTML = imgs.map(function (im) {
+            return '<div class="ynk-photo"><img src="' + esc(im.url) + '" alt="foto" loading="lazy" /></div>';
+        }).join('');
+    }
+
+    function pieceActionResult(html, cls) {
+        var res = document.getElementById('ynkPieceActionResult');
+        if (!res) return;
+        res.className = 'ynk-save-result' + (cls ? ' ' + cls : '');
+        res.innerHTML = html;
+    }
+
+    function ynkPublishMeli() {
+        var id = currentDetailId;
+        if (!id) return;
+        var body = {};
+        var cat = val('ynkMeliCategory'); if (cat) body.category_id = cat;
+        var price = numOrNull('ynkMeliPrice'); if (price !== null) body.price = price;
+        var stock = intOrNull('ynkMeliStock'); if (stock !== null) body.stock = stock;
+
+        pieceActionResult('<span class="ynk-hint">Publicando en MercadoLibre…</span>');
+        apiFetch(API + '/pieces/' + id + '/publish-meli', { method: 'POST', body: JSON.stringify(body) })
+            .then(function (d) {
+                d = unwrap(d) || {};
+                if (d.ok) {
+                    var link = d.permalink
+                        ? ' <a class="ynk-link" href="' + esc(d.permalink) + '" target="_blank" rel="noopener">' + esc(d.permalink) + '</a>'
+                        : '';
+                    pieceActionResult('<span class="ynk-ok">✔ Publicado en MeLi. Item: ' + esc(d.external_item_id || '—') + '</span>' + link);
+                    toast('Pieza publicada en MercadoLibre', 'ok');
+                } else {
+                    pieceActionResult('<span class="ynk-err">No se pudo publicar: ' + esc(d.error || 'la plataforma rechazó la publicación') + '</span>');
+                    toast('No se pudo publicar en MeLi', 'error');
+                }
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">Error al publicar: ' + esc(errMsg(err)) + '</span>');
+                toast('Error al publicar en MeLi: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkOpenLabel(id) {
+        var pid = id || currentDetailId;
+        if (!pid) return;
+        window.open(API + '/pieces/' + pid + '/label', '_blank', 'noopener');
+    }
+
+    function ynkEditFromDetail() {
+        var it = pieceById[currentDetailId];
+        if (!it) return;
+        ynkCloseModal('ynkPieceModal');
+        openEditPiece(it);
+    }
+
+    function ynkIdentifyFile(file) {
+        var id = currentDetailId;
+        if (!id || !file) return;
+        var fd = new FormData();
+        fd.append('file', file, file.name);
+        pieceActionResult('<span class="ynk-hint">Analizando la foto…</span>');
+        apiUpload(API + '/pieces/' + id + '/identify', fd)
+            .then(function (raw) {
+                var d = unwrap(raw) || {};
+                identifiedName = (d.name || '').trim();
+                var conf = (typeof d.confidence === 'number') ? Math.round(d.confidence * 100) + '%' : '';
+                if (!identifiedName && !d.category) {
+                    pieceActionResult('<span class="ynk-warn">La IA no reconoció la pieza' +
+                        (d.error ? ': ' + esc(d.error) : '.') + '</span>');
+                    return;
+                }
+                var html = 'Identificado: <strong>' + (esc(identifiedName) || '—') + '</strong>' +
+                    (d.category ? ' · Categoría: ' + esc(d.category) : '') +
+                    (conf ? ' · confianza ' + esc(conf) : '');
+                if (identifiedName) {
+                    html += ' <button class="btn btn--primary btn--sm" type="button" onclick="ynkApplyIdentified()">Aplicar nombre a la pieza</button>';
+                }
+                pieceActionResult(html);
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">No se pudo identificar: ' + esc(errMsg(err)) + '</span>');
+            });
+    }
+
+    function ynkApplyIdentified() {
+        var id = currentDetailId;
+        if (!id || !identifiedName) return;
+        apiFetch(API + '/pieces/' + id, { method: 'PUT', body: JSON.stringify({ name: identifiedName }) })
+            .then(function (u) {
+                var item = unwrap(u);
+                if (item && item.id) pieceById[item.id] = item;
+                else if (pieceById[id]) pieceById[id].name = identifiedName;
+                pieceActionResult('<span class="ynk-ok">✔ Nombre aplicado.</span>');
+                toast('Nombre actualizado', 'ok');
+                if (activeTab === 'piezas') loadPieces(1);
+                if (activeTab === 'donador' && donorView === 'pieces') loadDonorPieces(1);
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">No se pudo aplicar: ' + esc(errMsg(err)) + '</span>');
+            });
+    }
+
+    function ynkSuggestPrice() {
+        var id = currentDetailId;
+        if (!id) return;
+        pieceActionResult('<span class="ynk-hint">Calculando precio sugerido…</span>');
+        apiFetch(API + '/pieces/' + id + '/price-suggest', { method: 'POST', body: JSON.stringify({}) })
+            .then(function (raw) {
+                var d = unwrap(raw) || {};
+                suggestedPrice = (d.suggested_price === undefined || d.suggested_price === null) ? null : d.suggested_price;
+                if (suggestedPrice === null && d.low === undefined) {
+                    pieceActionResult('<span class="ynk-warn">No hay sugerencia disponible' +
+                        (d.error ? ': ' + esc(d.error) : '.') + '</span>');
+                    return;
+                }
+                var range = (d.low !== undefined && d.high !== undefined)
+                    ? ' · Rango: ' + fmtMoney(d.low) + ' – ' + fmtMoney(d.high) : '';
+                var html = '<strong>Sugerido: ' + fmtMoney(suggestedPrice) + '</strong>' + range +
+                    (d.basis ? '<br><span class="ynk-hint">' + esc(d.basis) + '</span>' : '');
+                if (suggestedPrice !== null) {
+                    html += ' <button class="btn btn--primary btn--sm" type="button" onclick="ynkApplySuggestedPrice()">Aplicar ' + fmtMoney(suggestedPrice) + '</button>';
+                }
+                pieceActionResult(html);
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">No se pudo sugerir precio: ' + esc(errMsg(err)) + '</span>');
+            });
+    }
+
+    function ynkApplySuggestedPrice() {
+        var id = currentDetailId;
+        if (!id || suggestedPrice === null) return;
+        apiFetch(API + '/pieces/' + id, { method: 'PUT', body: JSON.stringify({ price_1: suggestedPrice }) })
+            .then(function (u) {
+                var item = unwrap(u);
+                if (item && item.id) pieceById[item.id] = item;
+                else if (pieceById[id]) pieceById[id].price_1 = suggestedPrice;
+                toast('Precio aplicado: ' + fmtMoney(suggestedPrice), 'ok');
+                pieceActionResult('<span class="ynk-ok">✔ Precio actualizado a ' + fmtMoney(suggestedPrice) + '.</span>');
+                if (activeTab === 'piezas') loadPieces(1);
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">No se pudo aplicar: ' + esc(errMsg(err)) + '</span>');
+            });
+    }
+
+    function ynkValidatePhoto(file) {
+        var id = currentDetailId;
+        if (!id || !file) return;
+        var fd = new FormData();
+        fd.append('file', file, file.name);
+        pieceActionResult('<span class="ynk-hint">Validando la foto…</span>');
+        apiUpload(API + '/pieces/' + id + '/validate-photo', fd)
+            .then(function (raw) {
+                var d = unwrap(raw) || {};
+                var issues = d.issues || d.problems || [];
+                if (d.ok && !(issues && issues.length)) {
+                    pieceActionResult('<span class="ynk-ok">✔ La foto parece correcta.</span>');
+                } else {
+                    var list = (issues && issues.length)
+                        ? issues.map(function (s) { return '<li>' + esc(typeof s === 'object' ? (s.message || JSON.stringify(s)) : s) + '</li>'; }).join('')
+                        : '<li>' + esc(d.error || 'no cumple los requisitos') + '</li>';
+                    pieceActionResult('<span class="ynk-warn">Revisar la foto:</span><ul style="margin:6px 0 0 18px;">' + list + '</ul>');
+                }
+            })
+            .catch(function (err) {
+                pieceActionResult('<span class="ynk-err">No se pudo validar: ' + esc(errMsg(err)) + '</span>');
+            });
+    }
+
+    function loadCompat(id) {
+        var box = document.getElementById('ynkCompatList');
+        if (!box) return;
+        box.innerHTML = '<span class="ynk-hint">Cargando compatibilidad…</span>';
+        apiFetch(API + '/pieces/' + id + '/compat')
+            .then(function (res) {
+                var items = anyList(res);
+                if (!items.length) { box.innerHTML = '<span class="ynk-hint">Sin compatibilidades registradas.</span>'; return; }
+                box.innerHTML = '<div class="table-wrapper">' +
+                    genericTableHtml(items, ['make', 'model', 'year', 'engine']) + '</div>';
+            })
+            .catch(function (err) {
+                box.innerHTML = '<span class="ynk-err">No se pudo cargar la compatibilidad: ' + esc(errMsg(err)) + '</span>';
+            });
+    }
+
+    function ynkAddCompat() {
+        var id = currentDetailId;
+        if (!id) return;
+        var make = val('ynkCompatMake'), model = val('ynkCompatModel');
+        var year = intOrNull('ynkCompatYear'), engine = val('ynkCompatEngine');
+        var res = document.getElementById('ynkCompatResult');
+        if (!make || !model || year === null) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'Marca, modelo y año son obligatorios.'; }
+            return;
+        }
+        var body = { make: make, model: model, year: year };
+        if (engine) body.engine = engine;
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Agregando…'; }
+        apiFetch(API + '/pieces/' + id + '/compat', { method: 'POST', body: JSON.stringify(body) })
+            .then(function () {
+                if (res) { res.className = 'ynk-save-result ynk-ok'; res.textContent = '✔ Compatibilidad agregada.'; }
+                toast('Compatibilidad agregada', 'ok');
+                ['ynkCompatMake', 'ynkCompatModel', 'ynkCompatYear', 'ynkCompatEngine'].forEach(function (i) {
+                    var el = document.getElementById(i); if (el) el.value = '';
+                });
+                loadCompat(id);
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo agregar: ' + errMsg(err); }
+            });
+    }
+
+    // =====================================================================
+    //  CONSIGNMENT STATEMENT (estado de cuenta)
+    // =====================================================================
+
+    var currentStatementId = null;
+
+    function ynkOpenStatement(id) {
+        currentStatementId = id;
+        document.getElementById('ynkStatementTitle').textContent = 'Estado de cuenta · Consignación #' + id;
+        document.getElementById('ynkStatementInfo').textContent = '';
+        document.getElementById('ynkStatementBody').innerHTML = '<p class="ynk-hint">Cargando estado de cuenta…</p>';
+        var from = document.getElementById('ynkStmtFrom');
+        var to = document.getElementById('ynkStmtTo');
+        if (from && !from.value) {
+            var d = new Date();
+            from.value = new Date(d.getFullYear(), d.getMonth(), 1).toISOString().substring(0, 10);
+            to.value = new Date(d.getFullYear(), d.getMonth() + 1, 0).toISOString().substring(0, 10);
+        }
+        openModal('ynkStatementModal');
+        ynkLoadStatement();
+    }
+
+    function statementParams() {
+        return qs({ from: val('ynkStmtFrom'), to: val('ynkStmtTo') });
+    }
+
+    function ynkLoadStatement() {
+        if (!currentStatementId) return;
+        var body = document.getElementById('ynkStatementBody');
+        if (body) body.innerHTML = '<p class="ynk-hint">Cargando estado de cuenta…</p>';
+        var params = statementParams();
+        apiFetch(API + '/consignments/' + currentStatementId + '/statement' + (params ? '?' + params : ''))
+            .then(function (res) {
+                var s = unwrap(res) || {};
+                var info = document.getElementById('ynkStatementInfo');
+                if (info) {
+                    var period = s.period && typeof s.period === 'object' ? JSON.stringify(s.period) : s.period;
+                    info.innerHTML = '<strong>' + esc(s.consignor_name || '—') + '</strong>' +
+                        (period ? ' · Periodo: ' + esc(period) : '');
+                }
+                if (!body) return;
+                var items = anyList(res);
+                var html = items.length
+                    ? genericTableHtml(items, ['inventory_id', 'part_number', 'name', 'condition_grade', 'price_1', 'cost', 'agreed_price', 'commission_amount', 'status'])
+                    : '<p class="ynk-hint">Sin movimientos en el periodo.</p>';
+                if (s.totals && typeof s.totals === 'object') html += kvHtml(s.totals, 'Totales');
+                else if (s.totals !== undefined) html += '<p class="ynk-hint">Totales: ' + esc(s.totals) + '</p>';
+                body.innerHTML = html;
+            })
+            .catch(function (err) {
+                if (body) body.innerHTML = '<p class="ynk-err">No se pudo cargar el estado de cuenta: ' + esc(errMsg(err)) + '</p>';
+            });
+    }
+
+    function ynkPrintStatement() {
+        if (!currentStatementId) return;
+        var params = statementParams();
+        window.open(API + '/consignments/' + currentStatementId + '/statement/print' + (params ? '?' + params : ''), '_blank', 'noopener');
+    }
+
+    // =====================================================================
+    //  TAB 5 — REPORTES
+    // =====================================================================
+
+    var reportView = 'aging';
+
+    function ynkSetReportView(view) {
+        reportView = view === 'summary' ? 'summary' : (view === 'duplicates' ? 'duplicates' : 'aging');
+        var segs = { aging: 'ynkRepSegAging', summary: 'ynkRepSegSummary', duplicates: 'ynkRepSegDup' };
+        Object.keys(segs).forEach(function (k) {
+            var el = document.getElementById(segs[k]);
+            if (el) el.classList.toggle('is-active', k === reportView);
+        });
+        document.getElementById('ynkRepAging').style.display = reportView === 'aging' ? '' : 'none';
+        document.getElementById('ynkRepSummary').style.display = reportView === 'summary' ? '' : 'none';
+        document.getElementById('ynkRepDup').style.display = reportView === 'duplicates' ? '' : 'none';
+        if (reportView === 'aging') ynkLoadAging();
+        else if (reportView === 'summary') ynkLoadReportSummary();
+        else ynkLoadDuplicates();
+    }
+
+    function ynkLoadAging() {
+        var body = document.getElementById('ynkAgingBody');
+        if (!body) return;
+        var days = intOrNull('ynkAgingDays');
+        if (days === null) days = 90;
+        body.innerHTML = emptyRow(7, 'Cargando antigüedad…');
+        apiFetch(API + '/reports/aging?days=' + days)
+            .then(function (res) {
+                res = res || {};
+                var items = Array.isArray(res.data) ? res.data : anyList(res);
+                var summary = document.getElementById('ynkAgingSummary');
+                if (summary) summary.textContent = summaryInline(res.summary);
+                if (!items.length) {
+                    body.innerHTML = emptyRow(7, 'Sin piezas con ' + days + '+ días en patio.');
+                    document.getElementById('ynkAgingFooter').textContent = '0 piezas';
+                    return;
+                }
+                body.innerHTML = items.map(function (it) {
+                    return '<tr>' +
+                        '<td class="td--mono">' + esc(it.id) + '</td>' +
+                        '<td class="td--mono">' + (esc(it.part_number) || '—') + '</td>' +
+                        '<td class="td--primary">' + esc(it.name) + '</td>' +
+                        '<td style="text-align:center;">' + gradeHtml(it.condition_grade) + '</td>' +
+                        '<td style="text-align:right" class="td--amount">' + fmtMoney(it.price_1) + '</td>' +
+                        '<td style="text-align:right" class="td--amount">' + fmtMoney(it.cost) + '</td>' +
+                        '<td style="text-align:right" class="td--primary">' + fmtInt(it.days_in_yard) + '</td>' +
+                        '</tr>';
+                }).join('');
+                document.getElementById('ynkAgingFooter').textContent = items.length + ' pieza(s)';
+            })
+            .catch(function (err) {
+                body.innerHTML = emptyRow(7, 'Error al cargar antigüedad: ' + errMsg(err));
+            });
+    }
+
+    function ynkLoadReportSummary() {
+        var box = document.getElementById('ynkRepSummaryBody');
+        if (!box) return;
+        box.innerHTML = '<p class="ynk-hint">Cargando resumen…</p>';
+        apiFetch(API + '/reports/summary')
+            .then(function (res) {
+                var s = unwrap(res) || {};
+                var known = ['capital', 'margin', 'without_photo', 'by_grade', 'by_donor'];
+                var hasKnown = known.some(function (k) { return s[k] !== undefined; });
+                var html = '';
+                if (hasKnown) {
+                    html += anyCard('Capital en inventario', s.capital);
+                    html += anyCard('Margen', s.margin);
+                    html += anyCard('Sin foto', s.without_photo);
+                    html += anyCard('Piezas por grado', s.by_grade);
+                    html += anyCard('Piezas por donador', s.by_donor);
+                } else {
+                    html = anyCard('Resumen', s);
+                }
+                box.innerHTML = html || '<p class="ynk-hint">Sin datos.</p>';
+                var upd = document.getElementById('ynkRepSummaryUpdated');
+                if (upd) upd.textContent = 'Actualizado ' + new Date().toLocaleTimeString('es-MX');
+            })
+            .catch(function (err) {
+                box.innerHTML = '<p class="ynk-err">Error al cargar resumen: ' + esc(errMsg(err)) + '</p>';
+            });
+    }
+
+    function duplicateSummary(it) {
+        if (!it || typeof it !== 'object') return esc(it);
+        var label = it.name || it.part_number || it.key || it.signature || it.label;
+        return esc(label || 'Grupo') + (it.count !== undefined ? ' (' + esc(it.count) + ')' : '');
+    }
+
+    function duplicateDetail(it) {
+        if (it && Array.isArray(it.pieces) && it.pieces.length) {
+            return '<div>' + it.pieces.map(function (p) {
+                return '<div class="ynk-kv"><span class="ynk-kv__k">#' + esc(p.id) + ' ' + esc(p.part_number || '') +
+                    '</span><span class="ynk-kv__v">' + esc(p.name || '') + ' · ' + fmtMoney(p.price_1) + '</span></div>';
+            }).join('') + '</div>';
+        }
+        if (it && typeof it === 'object') {
+            var parts = Object.keys(it).filter(function (k) {
+                var v = it[k];
+                return v === null || typeof v !== 'object';
+            }).map(function (k) {
+                var v = it[k];
+                return fieldLabel(k) + ': ' + ((typeof v === 'number' && isMoneyKey(k)) ? fmtMoney(v) : v);
+            });
+            return '<span class="ynk-hint">' + esc(parts.join(' · ')) + '</span>';
+        }
+        return esc(it);
+    }
+
+    function ynkLoadDuplicates() {
+        var body = document.getElementById('ynkDupBody');
+        if (!body) return;
+        var th = numOrNull('ynkDupThreshold');
+        body.innerHTML = emptyRow(3, 'Buscando duplicados…');
+        apiFetch(API + '/duplicates' + (th !== null ? '?threshold=' + th : ''))
+            .then(function (res) {
+                var items = anyList(res);
+                if (!items.length) {
+                    body.innerHTML = emptyRow(3, 'No se encontraron duplicados con ese umbral.');
+                    document.getElementById('ynkDupFooter').textContent = '0 coincidencias';
+                    return;
+                }
+                var grouped = items.some(function (it) { return it && Array.isArray(it.pieces); });
+                if (grouped) {
+                    body.innerHTML = items.map(function (it, i) {
+                        return '<tr><td class="td--mono">' + (i + 1) + '</td>' +
+                            '<td class="td--primary">' + duplicateSummary(it) + '</td>' +
+                            '<td>' + duplicateDetail(it) + '</td></tr>';
+                    }).join('');
+                } else {
+                    body.innerHTML = '<tr><td colspan="3" style="padding:0;"><div class="table-wrapper">' +
+                        genericTableHtml(items) + '</div></td></tr>';
+                }
+                document.getElementById('ynkDupFooter').textContent = items.length + ' coincidencia(s)';
+            })
+            .catch(function (err) {
+                body.innerHTML = emptyRow(3, 'Error al buscar duplicados: ' + errMsg(err));
+            });
+    }
+
+    // =====================================================================
+    //  CSV IMPORT (pieces/bulk)
+    // =====================================================================
+
+    function ynkOpenImportModal() {
+        var f = document.getElementById('ynkImportFile');
+        if (f) f.value = '';
+        var n = document.getElementById('ynkImportFileName');
+        if (n) n.textContent = 'Sin archivo seleccionado';
+        var r = document.getElementById('ynkImportResult');
+        if (r) { r.textContent = ''; r.className = 'ynk-save-result'; }
+        openModal('ynkImportModal');
+    }
+
+    function postImport(field, file) {
+        var fd = new FormData();
+        fd.append(field, file, file.name);
+        return apiUpload(API + '/pieces/bulk', fd);
+    }
+
+    function renderImportResult(resp) {
+        var res = document.getElementById('ynkImportResult');
+        if (!res) return;
+        var d = unwrap(resp) || {};
+        var created = d.created !== undefined ? d.created
+            : (d.inserted !== undefined ? d.inserted
+            : (d.imported !== undefined ? d.imported
+            : (d.count !== undefined ? d.count : undefined)));
+        var errors = d.errors || d.error_rows || d.failed || [];
+        var html = '';
+        if (created !== undefined) html += '<div class="ynk-ok">✔ Creadas: ' + esc(created) + ' pieza(s).</div>';
+        if (Array.isArray(errors) && errors.length) {
+            html += '<div class="ynk-err" style="margin-top:6px;">' + errors.length + ' error(es):</div>' +
+                '<div style="max-height:220px;overflow:auto;margin-top:4px;">' + errors.map(function (e) {
+                    if (e && typeof e === 'object') {
+                        var rowLabel = e.row !== undefined ? 'Fila ' + e.row : (e.line !== undefined ? 'Línea ' + e.line : '—');
+                        return '<div class="ynk-kv"><span class="ynk-kv__k">' + esc(rowLabel) + '</span><span class="ynk-kv__v">' +
+                            esc(e.error || e.message || JSON.stringify(e)) + '</span></div>';
+                    }
+                    return '<div class="ynk-kv"><span class="ynk-kv__v">' + esc(e) + '</span></div>';
+                }).join('') + '</div>';
+        } else if (errors && !Array.isArray(errors)) {
+            html += '<div class="ynk-err" style="margin-top:6px;">' + esc(errors) + '</div>';
+        }
+        if (!html) html = '<span class="ynk-hint">Respuesta: ' + esc(JSON.stringify(d)) + '</span>';
+        res.className = 'ynk-save-result';
+        res.innerHTML = html;
+    }
+
+    function ynkSubmitImport() {
+        var input = document.getElementById('ynkImportFile');
+        var file = input && input.files && input.files[0];
+        var res = document.getElementById('ynkImportResult');
+        var btn = document.getElementById('ynkImportBtn');
+        if (!file) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'Selecciona un archivo CSV.'; }
+            return;
+        }
+        if (btn) { btn.disabled = true; btn.textContent = 'Importando…'; }
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Importando ' + file.name + '…'; }
+
+        postImport('file', file)
+            .catch(function (err) {
+                // A missing-file 400 usually means the backend reads the part
+                // under the `csv` field instead of `file`; retry once. Only for
+                // a missing-file error, so nothing is imported twice.
+                var msg = ((err && err.body && (err.body.error || err.body.message)) || '').toLowerCase();
+                if (err && err.status === 400 && /file|csv|multipart|missing|required|no se recib/.test(msg)) {
+                    return postImport('csv', file);
+                }
+                throw err;
+            })
+            .then(function (resp) {
+                renderImportResult(resp);
+                toast('Importación procesada', 'ok');
+                refreshSummary();
+                if (activeTab === 'piezas') loadPieces(1);
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo importar: ' + errMsg(err); }
+                toast('Error al importar: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) { btn.disabled = false; btn.textContent = 'Importar'; } });
+    }
+
+    // =====================================================================
+    //  INTAKE MODE — single piece / full donor (varias piezas)
+    // =====================================================================
+
+    var intakeMode = 'single';
+    var GRADE_OPTS = '<option value="">Sin grado</option><option value="A">A</option>' +
+        '<option value="B">B</option><option value="C">C</option><option value="D">D</option>';
+
+    function ynkSetIntakeMode(mode) {
+        intakeMode = mode === 'full' ? 'full' : 'single';
+        document.getElementById('ynkSegSingle').classList.toggle('is-active', intakeMode === 'single');
+        document.getElementById('ynkSegFull').classList.toggle('is-active', intakeMode === 'full');
+        document.getElementById('ynkNuevaSimple').style.display = intakeMode === 'single' ? '' : 'none';
+        document.getElementById('ynkNuevaFull').style.display = intakeMode === 'full' ? '' : 'none';
+        if (intakeMode === 'full') {
+            fillConsignmentSelect('ynkFullConsignmentId');
+            var rows = document.getElementById('ynkFullPiecesBody');
+            if (rows && !rows.children.length) {
+                for (var i = 0; i < 3; i++) ynkFullAddRow();
+            }
+        }
+    }
+
+    function ynkFullRowHtml() {
+        return '<tr class="ynk-full-row">' +
+            '<td><input type="text" class="ynk-full-name" placeholder="Ej: Faro delantero izquierdo" autocomplete="off" /></td>' +
+            '<td><input type="number" class="ynk-full-price" step="0.01" min="0" placeholder="0.00" /></td>' +
+            '<td><input type="number" class="ynk-full-cost" step="0.01" min="0" placeholder="0.00" /></td>' +
+            '<td><select class="ynk-full-grade">' + GRADE_OPTS + '</select></td>' +
+            '<td><input type="text" class="ynk-full-location" placeholder="YON-A-1-1" autocomplete="off" /></td>' +
+            '<td><button class="btn btn--ghost btn--sm" type="button" title="Quitar" onclick="ynkFullRemoveRow(this)">&times;</button></td>' +
+            '</tr>';
+    }
+
+    function ynkFullAddRow() {
+        var body = document.getElementById('ynkFullPiecesBody');
+        if (!body) return;
+        body.insertAdjacentHTML('beforeend', ynkFullRowHtml());
+    }
+
+    function ynkFullRemoveRow(btn) {
+        var row = btn && btn.closest ? btn.closest('tr') : null;
+        if (row && row.parentNode) row.parentNode.removeChild(row);
+    }
+
+    function ynkFullClearRows() {
+        var body = document.getElementById('ynkFullPiecesBody');
+        if (body) body.innerHTML = '';
+        ynkFullAddRow();
+    }
+
+    function ynkFullResetForm() {
+        ynkFullClearRows();
+        var r = document.getElementById('ynkFullResult');
+        if (r) { r.textContent = ''; r.className = 'ynk-save-result'; }
+    }
+
+    function ynkFullDecodeVin() {
+        var vin = val('ynkFullVin').toUpperCase();
+        var status = document.getElementById('ynkFullVinStatus');
+        if (!vin) {
+            if (status) { status.textContent = 'Escribe un VIN primero.'; status.className = 'ynk-hint ynk-warn'; }
+            return;
+        }
+        var btn = document.getElementById('ynkFullDecodeBtn');
+        if (btn) btn.disabled = true;
+        if (status) { status.textContent = 'Decodificando ' + vin + '…'; status.className = 'ynk-hint'; }
+        apiFetch(API + '/vin/' + encodeURIComponent(vin))
+            .then(function (d) {
+                if (!d) return;
+                var filled = [];
+                if (d.make) { document.getElementById('ynkFullMake').value = d.make; filled.push(d.make); }
+                if (d.model) { document.getElementById('ynkFullModel').value = d.model; filled.push(d.model); }
+                if (d.year) { document.getElementById('ynkFullYear').value = d.year; filled.push(d.year); }
+                if (status) {
+                    status.textContent = filled.length ? ('Autocompletado: ' + filled.join(' '))
+                        : (d.error ? 'No se pudo decodificar: ' + d.error : 'VIN sin datos de vehículo.');
+                    status.className = 'ynk-hint' + (filled.length ? ' ynk-ok' : ' ynk-warn');
+                }
+            })
+            .catch(function (err) {
+                if (status) { status.textContent = 'No se pudo decodificar: ' + errMsg(err); status.className = 'ynk-hint ynk-err'; }
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    function ynkReadFullRows() {
+        var rows = document.querySelectorAll('#ynkFullPiecesBody tr.ynk-full-row');
+        var out = [];
+        Array.prototype.forEach.call(rows, function (tr) {
+            var name = (tr.querySelector('.ynk-full-name').value || '').trim();
+            var priceStr = (tr.querySelector('.ynk-full-price').value || '').trim();
+            if (!name && priceStr === '') return;   // skip fully blank rows
+            var piece = { name: name, price_1: priceStr === '' ? null : parseFloat(priceStr) };
+            var cost = (tr.querySelector('.ynk-full-cost').value || '').trim();
+            if (cost !== '') piece.cost = parseFloat(cost);
+            var grade = tr.querySelector('.ynk-full-grade').value;
+            if (grade) piece.condition_grade = grade;
+            var loc = (tr.querySelector('.ynk-full-location').value || '').trim();
+            if (loc) piece.location = loc;
+            out.push(piece);
+        });
+        return out;
+    }
+
+    function ynkSubmitDonorFull() {
+        var result = document.getElementById('ynkFullResult');
+        var btn = document.getElementById('ynkFullSaveBtn');
+        var vin = val('ynkFullVin').toUpperCase();
+        var make = val('ynkFullMake');
+        var model = val('ynkFullModel');
+        var year = intOrNull('ynkFullYear');
+
+        function fail(msg) {
+            if (result) { result.className = 'ynk-save-result ynk-err'; result.textContent = msg; }
+        }
+        if (!vin || !make || !model || year === null) {
+            fail('VIN, marca, modelo y año del donador son obligatorios.'); return;
+        }
+        var pieces = ynkReadFullRows();
+        if (!pieces.length) { fail('Agrega al menos una pieza con nombre y precio.'); return; }
+        var bad = pieces.filter(function (p) { return !p.name || p.price_1 === null || isNaN(p.price_1); });
+        if (bad.length) { fail('Cada pieza necesita nombre y precio válidos.'); return; }
+
+        var body = { vin: vin, make: make, model: model, year: year, pieces: pieces };
+        var mileage = intOrNull('ynkFullMileage'); if (mileage !== null) body.mileage_km = mileage;
+        var color = val('ynkFullColor'); if (color) body.color = color;
+        var ownership = document.getElementById('ynkFullOwnership').value;
+        if (ownership) body.ownership = ownership;
+        if (ownership === 'consigna') {
+            var cid = document.getElementById('ynkFullConsignmentId').value;
+            if (cid) body.consignment_id = parseInt(cid, 10);
+        }
+
+        if (btn) { btn.disabled = true; btn.textContent = 'Registrando…'; }
+        if (result) { result.className = 'ynk-save-result'; result.textContent = 'Registrando ' + pieces.length + ' pieza(s) del donador ' + vin + '…'; }
+
+        apiFetch(API + '/donors/full', { method: 'POST', body: JSON.stringify(body) })
+            .then(function (res) {
+                var d = unwrap(res) || {};
+                var created = Array.isArray(d.pieces) ? d.pieces : [];
+                var skus = created.map(function (p) { return p.part_number; }).filter(Boolean);
+                var count = d.count !== undefined ? d.count : skus.length;
+                var donorVin = d.donor_vin || vin;
+                if (result) {
+                    result.className = 'ynk-save-result ynk-ok';
+                    result.innerHTML = '✔ Donador <strong>' + esc(donorVin) + '</strong>: ' + esc(count) + ' pieza(s) creada(s).' +
+                        (skus.length ? '<div class="ynk-hint" style="margin-top:4px;">SKUs: ' + skus.map(function (s) { return esc(s); }).join(', ') + '</div>' : '');
+                }
+                toast(count + ' pieza(s) creadas', 'ok');
+                ynkFullClearRows();
+
+                var totalCost = numOrNull('ynkFullTotalCost');
+                if (totalCost !== null && totalCost > 0 &&
+                    window.confirm('¿Prorratear el costo total ' + fmtMoney(totalCost) + ' entre las piezas del donador? Esto actualiza el costo de todas sus piezas.')) {
+                    apiFetch(API + '/donors/' + encodeURIComponent(donorVin) + '/allocate-cost',
+                        { method: 'POST', body: JSON.stringify({ total_cost: totalCost }) })
+                        .then(function (r2) {
+                            var a = unwrap(r2) || {};
+                            if (result) result.innerHTML += '<div class="ynk-ok" style="margin-top:4px;">Costo prorrateado' +
+                                (a.updated !== undefined ? ' en ' + esc(a.updated) + ' pieza(s)' : '') + '.</div>';
+                        })
+                        .catch(function (err) {
+                            if (result) result.innerHTML += '<div class="ynk-err" style="margin-top:4px;">No se pudo prorratear el costo: ' + esc(errMsg(err)) + '</div>';
+                        });
+                }
+                refreshSummary();
+                if (activeTab === 'piezas') loadPieces(1);
+            })
+            .catch(function (err) {
+                if (result) { result.className = 'ynk-save-result ynk-err'; result.textContent = 'No se pudo registrar el donador: ' + errMsg(err); }
+                toast('Error al registrar el donador: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) { btn.disabled = false; btn.textContent = 'Registrar donador y piezas'; } });
+    }
+
+    function ynkSuggestGradeFromPhoto() {
+        var status = document.getElementById('ynkGradeSuggestStatus');
+        var btn = document.getElementById('ynkGradeSuggestBtn');
+        if (!pendingPhotos.length) {
+            if (status) { status.textContent = 'Primero elige al menos una foto.'; status.className = 'ynk-hint ynk-warn'; }
+            return;
+        }
+        var fd = new FormData();
+        fd.append('file', pendingPhotos[0].file, pendingPhotos[0].file.name);
+        var nm = val('ynkName'); if (nm) fd.append('name', nm);
+        var cond = document.getElementById('ynkCondition').value; if (cond) fd.append('condition', cond);
+
+        if (btn) btn.disabled = true;
+        if (status) { status.textContent = 'Analizando la foto con IA…'; status.className = 'ynk-hint'; }
+
+        apiUpload(API + '/grade-suggest', fd)
+            .then(function (raw) {
+                var d = unwrap(raw) || {};
+                var g = d.condition_grade_suggested;
+                if (g) {
+                    document.getElementById('ynkGrade').value = g;
+                    var conf = (typeof d.confidence === 'number') ? ' (confianza ' + Math.round(d.confidence * 100) + '%)' : '';
+                    if (status) {
+                        status.textContent = 'Grado sugerido: ' + g + conf + (d.notes ? ' — ' + d.notes : '');
+                        status.className = 'ynk-hint ynk-ok';
+                    }
+                } else if (status) {
+                    status.textContent = 'La IA no pudo sugerir un grado' + (d.error ? ': ' + d.error : '.');
+                    status.className = 'ynk-hint ynk-warn';
+                }
+            })
+            .catch(function (err) {
+                if (status) { status.textContent = 'No se pudo sugerir grado: ' + errMsg(err); status.className = 'ynk-hint ynk-err'; }
+            })
+            .then(function () { if (btn) btn.disabled = false; });
+    }
+
+    // =====================================================================
+    //  TAB 6 — MAYOREO B2B
+    //  Flujo: publicas una pieza (vender) → otro negocio la compra (catálogo)
+    //  → el vendedor confirma y marca enviado → el comprador marca recibido.
+    //
+    //  Contract: /pos/api/b2b
+    //    GET    /my-listings   GET /catalog   GET /listings/<id>
+    //    POST   /listings      PATCH /listings/<id>   DELETE /listings/<id>
+    //    POST   /orders        GET /orders     GET /orders/incoming
+    //    GET    /orders/<id>   PUT /orders/<id>/status
+    //    GET    /seller/status
+    // =====================================================================
+
+    var B2B = '/pos/api/b2b';
+
+    var b2bView = 'catalog';        // catalog | listings | orders
+    var b2bOrdersView = 'incoming'; // incoming (vendedor) | purchases (comprador)
+    var b2bInitDone = false;
+    var b2bSeller = null;           // {is_seller, listings_count, incoming_orders}
+    var b2bCatalog = [];
+    var b2bListings = [];
+    var b2bOrders = [];
+    var b2bCatalogAbort = null;
+    var b2bBuyTarget = null;        // listing being purchased
+    var b2bOrderDetail = null;      // {id, side} of the open detail modal
+
+    function setDisplay(id, show) {
+        var el = document.getElementById(id);
+        if (el) el.style.display = show ? '' : 'none';
+    }
+
+    function b2bCounterparty(o, sellerSide) {
+        if (sellerSide) {
+            return o.buyer_name || o.buyer_tenant_name ||
+                (o.buyer_tenant_id ? '#' + o.buyer_tenant_id : 'Comprador');
+        }
+        return o.seller_name || o.seller_tenant_name ||
+            (o.seller_tenant_id ? '#' + o.seller_tenant_id : 'Vendedor');
+    }
+
+    function b2bSellerLabel(it) {
+        if (it.seller_name) return it.seller_name;
+        if (it.seller_tenant_id) return '#' + it.seller_tenant_id;
+        return '—';
+    }
+
+    var B2B_ORDER_STATUS = {
+        pending:    { label: 'Pendiente', cls: 'badge--pending' },
+        new:        { label: 'Nuevo',     cls: 'badge--pending' },
+        paid:       { label: 'Pagado',    cls: 'badge--transit' },
+        processing: { label: 'En proceso', cls: 'badge--transit' },
+        confirmed:  { label: 'Confirmado', cls: 'badge--transit' },
+        shipped:    { label: 'Enviado',   cls: 'badge--new' },
+        sent:       { label: 'Enviado',   cls: 'badge--new' },
+        received:   { label: 'Recibido',  cls: 'badge--ok' },
+        delivered:  { label: 'Entregado', cls: 'badge--ok' },
+        completed:  { label: 'Completado', cls: 'badge--ok' },
+        cancelled:  { label: 'Cancelado', cls: 'badge--cancelled' },
+        canceled:   { label: 'Cancelado', cls: 'badge--cancelled' }
+    };
+    function b2bStatusBadge(status) {
+        var s = (status || '').toLowerCase();
+        var meta = B2B_ORDER_STATUS[s] || { label: status || '—', cls: 'badge--pending' };
+        return '<span class="badge ' + meta.cls + '">' + esc(meta.label) + '</span>';
+    }
+
+    function ynkB2bInit() {
+        if (b2bInitDone) { ynkB2bView(b2bView); return; }
+        b2bInitDone = true;
+
+        var q = document.getElementById('ynkB2bQ');
+        if (q) q.addEventListener('input', debounce(function () { loadB2bCatalog(1); }, 350));
+        ['ynkB2bMake', 'ynkB2bModel', 'ynkB2bYear', 'ynkB2bGrade'].forEach(function (id) {
+            var el = document.getElementById(id);
+            if (el) el.addEventListener('change', function () { loadB2bCatalog(1); });
+        });
+
+        var pick = document.getElementById('ynkB2bPublishPiece');
+        if (pick) {
+            pick.addEventListener('change', function () {
+                var opt = this.options[this.selectedIndex];
+                var p = opt ? opt.getAttribute('data-price') : '';
+                var priceEl = document.getElementById('ynkB2bPublishPrice');
+                if (priceEl) priceEl.value = (p === null || p === undefined || p === '') ? '' : p;
+            });
+        }
+
+        loadB2bSellerStatus().then(refreshB2bBadge);
+        ynkB2bView(b2bView);
+    }
+
+    function ynkB2bView(view) {
+        b2bView = (view === 'listings' || view === 'orders') ? view : 'catalog';
+        var segs = { catalog: 'ynkB2bSegCatalog', listings: 'ynkB2bSegListings', orders: 'ynkB2bSegOrders' };
+        Object.keys(segs).forEach(function (k) {
+            var el = document.getElementById(segs[k]);
+            if (!el) return;
+            el.classList.toggle('is-active', k === b2bView);
+            el.setAttribute('aria-selected', k === b2bView ? 'true' : 'false');
+        });
+        setDisplay('ynkB2bCatalog', b2bView === 'catalog');
+        setDisplay('ynkB2bListings', b2bView === 'listings');
+        setDisplay('ynkB2bOrders', b2bView === 'orders');
+
+        if (b2bView === 'catalog') loadB2bCatalog(1);
+        else if (b2bView === 'listings') loadB2bListings();
+        else ynkB2bOrdersView(b2bOrdersView);
+    }
+
+    function ynkB2bRefresh() {
+        toast('Actualizando mayoreo…', 'info');
+        loadB2bSellerStatus().then(refreshB2bBadge);
+        if (b2bView === 'catalog') loadB2bCatalog(1);
+        else if (b2bView === 'listings') loadB2bListings();
+        else loadB2bOrders();
+    }
+
+    // ─── Vendedor / estado de la cuenta ──────────────────────────────────
+
+    function loadB2bSellerStatus() {
+        return apiFetch(B2B + '/seller/status')
+            .then(function (res) {
+                b2bSeller = unwrap(res) || null;
+                renderB2bSellerStatus();
+                refreshB2bBadge();
+                return b2bSeller;
+            })
+            .catch(function () {
+                b2bSeller = null;
+                renderB2bSellerStatus();
+                refreshB2bBadge();
+                return null;
+            });
+    }
+
+    function renderB2bSellerStatus() {
+        var box = document.getElementById('ynkB2bSellerStatus');
+        var btn = document.getElementById('ynkB2bPublishBtn');
+        if (!box) return;
+        if (!b2bSeller) { box.textContent = ''; return; }
+        var isSeller = !!b2bSeller.is_seller;
+        box.className = 'ynk-hint' + (isSeller ? ' ynk-ok' : ' ynk-warn');
+        box.textContent = isSeller
+            ? '✔ Habilitado para vender en mayoreo · ' + fmtInt(b2bSeller.listings_count) + ' publicación(es) · ' +
+              fmtInt(b2bSeller.incoming_orders) + ' pedido(s) recibido(s)'
+            : 'Tu negocio no está habilitado para vender en mayoreo (is_seller: false). Puedes comprar en el catálogo, ' +
+              'pero para publicar piezas contacta al administrador.';
+        if (btn) {
+            btn.disabled = !isSeller;
+            btn.title = isSeller ? '' : 'Tu negocio no está habilitado para vender en mayoreo';
+        }
+    }
+
+    function refreshB2bBadge() {
+        var b = document.getElementById('badge-b2b');
+        if (!b) return;
+        b.textContent = b2bSeller ? fmtInt(b2bSeller.incoming_orders) : '0';
+    }
+
+    // ─── Catálogo (comprar) ──────────────────────────────────────────────
+
+    function loadB2bCatalog(page) {
+        var grid = document.getElementById('ynkB2bCatalogGrid');
+        if (!grid) return;
+        grid.innerHTML = '<p class="ynk-empty">Cargando catálogo…</p>';
+
+        var params = {
+            q: val('ynkB2bQ'),
+            make: val('ynkB2bMake'),
+            model: val('ynkB2bModel'),
+            year: val('ynkB2bYear'),
+            grade: val('ynkB2bGrade'),
+            page: page || 1,
+            per_page: 24
+        };
+
+        if (b2bCatalogAbort) b2bCatalogAbort.abort();
+        b2bCatalogAbort = new AbortController();
+
+        apiFetch(B2B + '/catalog?' + qs(params), { signal: b2bCatalogAbort.signal })
+            .then(function (res) {
+                b2bCatalogAbort = null;
+                if (!res) return;
+                b2bCatalog = asList(res);
+                var footer = document.getElementById('ynkB2bCatalogFooter');
+                var pager = document.getElementById('ynkB2bCatalogPagination');
+                if (!b2bCatalog.length) {
+                    grid.innerHTML = '<p class="ynk-empty">Sin piezas en mayoreo con esos filtros.</p>';
+                    if (footer) footer.textContent = '0 piezas';
+                    if (pager) pager.innerHTML = '';
+                    return;
+                }
+                grid.innerHTML = b2bCatalog.map(b2bCardHtml).join('');
+                var pg = res.pagination || {};
+                if (footer) footer.textContent = fmtInt(pg.total !== undefined ? pg.total : b2bCatalog.length) + ' piezas en mayoreo';
+                renderPagination(pager, pg, 'ynkB2bCatalogPage');
+            })
+            .catch(function (err) {
+                if (!err || err.name === 'AbortError') return;
+                b2bCatalogAbort = null;
+                grid.innerHTML = '<p class="ynk-empty ynk-err">Error al cargar el catálogo: ' + esc(errMsg(err)) + '</p>';
+                toast('Error al cargar el catálogo de mayoreo: ' + errMsg(err), 'error');
+            });
+    }
+
+    function b2bCardHtml(it, i) {
+        var img = it.image_url
+            ? '<img class="ynk-b2b-card__img" src="' + esc(it.image_url) + '" alt="foto" loading="lazy" onerror="ynkB2bImgFallback(this)" />'
+            : '<div class="ynk-b2b-card__img ynk-b2b-card__img--empty">sin foto</div>';
+        var veh = [it.donor_make, it.donor_model, it.donor_year].filter(Boolean).join(' ');
+        return '<div class="ynk-b2b-card">' + img +
+            '<div class="ynk-b2b-card__body">' +
+                '<div class="ynk-b2b-card__name">' + (esc(it.name) || 'Pieza sin nombre') + '</div>' +
+                '<div class="ynk-b2b-card__meta">' + gradeHtml(it.condition_grade) +
+                    '<span>' + (esc(it.part_number) || 'sin No. parte') + '</span></div>' +
+                (veh ? '<div class="ynk-b2b-card__meta">Donador: ' + esc(veh) + '</div>' : '') +
+                '<div class="ynk-b2b-card__meta">Vendedor: ' + esc(b2bSellerLabel(it)) + '</div>' +
+                '<div class="ynk-b2b-card__price">' + fmtMoney(it.price_wholesale) + '</div>' +
+                '<div class="ynk-b2b-card__foot">' +
+                    '<button class="btn btn--primary btn--sm" type="button" onclick="ynkB2bOpenBuy(' + i + ')">Comprar</button>' +
+                '</div>' +
+            '</div></div>';
+    }
+
+    window.ynkB2bImgFallback = function (img) {
+        var box = img && img.parentNode;
+        if (box) box.innerHTML = '<div class="ynk-b2b-card__img ynk-b2b-card__img--empty">sin foto</div>';
+    };
+
+    function loadB2bCatalogUi() { loadB2bCatalog(1); }
+
+    function ynkB2bClearCatalogFilters() {
+        ['ynkB2bQ', 'ynkB2bMake', 'ynkB2bModel', 'ynkB2bYear', 'ynkB2bGrade'].forEach(function (id) {
+            var el = document.getElementById(id);
+            if (el) el.value = '';
+        });
+        loadB2bCatalog(1);
+    }
+
+    // ─── Comprar (crear orden) ───────────────────────────────────────────
+
+    function ynkB2bOpenBuy(i) {
+        var it = b2bCatalog[i];
+        if (!it) return;
+        b2bBuyTarget = it;
+        var title = document.getElementById('ynkB2bBuyTitle');
+        if (title) title.textContent = 'Comprar: ' + (it.name || 'pieza');
+        var info = document.getElementById('ynkB2bBuyInfo');
+        if (info) {
+            var veh = [it.donor_make, it.donor_model, it.donor_year].filter(Boolean).join(' ');
+            info.innerHTML = gradeHtml(it.condition_grade) + ' <strong>' + (esc(it.name) || '—') + '</strong>' +
+                (it.part_number ? ' · ' + esc(it.part_number) : '') +
+                (veh ? '<br>Donador: ' + esc(veh) : '') +
+                '<br>Vendedor: ' + esc(b2bSellerLabel(it)) +
+                ' · Mayoreo: <strong>' + fmtMoney(it.price_wholesale) + '</strong> c/u';
+        }
+        var qty = document.getElementById('ynkB2bBuyQty');
+        if (qty) qty.value = '1';
+        var notes = document.getElementById('ynkB2bBuyNotes');
+        if (notes) notes.value = '';
+        var res = document.getElementById('ynkB2bBuyResult');
+        if (res) { res.className = 'ynk-save-result'; res.innerHTML = ''; }
+        ynkB2bUpdateBuyTotal();
+        openModal('ynkB2bBuyModal');
+    }
+
+    function ynkB2bUpdateBuyTotal() {
+        var el = document.getElementById('ynkB2bBuyTotal');
+        if (!el) return;
+        var qty = intOrNull('ynkB2bBuyQty') || 0;
+        var price = b2bBuyTarget ? num(b2bBuyTarget.price_wholesale) : 0;
+        el.textContent = fmtMoney(qty * price);
+    }
+
+    function ynkB2bSubmitOrder() {
+        if (!b2bBuyTarget) return;
+        var res = document.getElementById('ynkB2bBuyResult');
+        var btn = document.getElementById('ynkB2bBuyBtn');
+        var qty = intOrNull('ynkB2bBuyQty');
+        if (!qty || qty < 1) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'La cantidad debe ser al menos 1.'; }
+            return;
+        }
+        var body = { items: [{ listing_id: b2bBuyTarget.id, quantity: qty }] };
+        var notes = val('ynkB2bBuyNotes');
+        if (notes) body.notes = notes;
+
+        if (btn) { btn.disabled = true; btn.textContent = 'Creando orden…'; }
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Creando la orden…'; }
+
+        apiFetch(B2B + '/orders', { method: 'POST', body: JSON.stringify(body) })
+            .then(function (raw) {
+                var o = unwrap(raw) || {};
+                var total = (o.total !== undefined && o.total !== null)
+                    ? fmtMoney(o.total)
+                    : fmtMoney(qty * num(b2bBuyTarget.price_wholesale));
+                if (res) {
+                    res.className = 'ynk-save-result ynk-ok';
+                    res.innerHTML = '✔ Orden #' + esc(o.id !== undefined ? o.id : '—') + ' creada — total <strong>' + total + '</strong>' +
+                        (o.status ? ' · estado: ' + b2bStatusBadge(o.status) : '') +
+                        '<br><span class="ynk-hint">El vendedor la verá en “Pedidos › Recibidos”.</span>';
+                }
+                toast('Orden #' + (o.id !== undefined ? o.id : '') + ' creada por ' + total, 'ok');
+                loadB2bSellerStatus();
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo crear la orden: ' + errMsg(err); }
+                toast('Error al crear la orden: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) { btn.disabled = false; btn.textContent = 'Crear orden'; } });
+    }
+
+    // ─── Mis publicaciones (vender) ──────────────────────────────────────
+
+    function loadB2bListings() {
+        var body = document.getElementById('ynkB2bListingsBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(9, 'Cargando publicaciones…');
+        loadB2bSellerStatus();
+        apiFetch(B2B + '/my-listings')
+            .then(function (res) {
+                b2bListings = asList(res);
+                renderB2bListings();
+            })
+            .catch(function (err) {
+                body.innerHTML = emptyRow(9, 'Error al cargar publicaciones: ' + errMsg(err));
+                toast('Error al cargar tus publicaciones: ' + errMsg(err), 'error');
+            });
+    }
+
+    function renderB2bListings() {
+        var body = document.getElementById('ynkB2bListingsBody');
+        if (!body) return;
+        var footer = document.getElementById('ynkB2bListingsFooter');
+        if (!b2bListings.length) {
+            body.innerHTML = emptyRow(9, 'Aún no publicas piezas en mayoreo. Usa “Publicar pieza en mayoreo”.');
+            if (footer) footer.textContent = '0 publicaciones';
+            return;
+        }
+        body.innerHTML = b2bListings.map(b2bListingRow).join('');
+        if (footer) footer.textContent = b2bListings.length + ' publicación(es)';
+    }
+
+    function b2bListingRow(it) {
+        var veh = [it.donor_make, it.donor_model, it.donor_year].filter(Boolean).join(' ');
+        var st = (it.status || '').toLowerCase();
+        var cls = (st === 'active' || st === 'published' || st === 'available') ? 'badge--ok'
+            : (st === 'sold' ? 'badge--complete'
+            : (st === 'paused' || st === 'pending' ? 'badge--pending' : 'badge--cancelled'));
+        var img = it.image_url
+            ? '<img class="ynk-thumb" src="' + esc(it.image_url) + '" alt="foto" loading="lazy" onerror="ynkThumbFallback(this)" />'
+            : '<div class="ynk-thumb ynk-thumb--empty">sin<br>foto</div>';
+        var price = (it.price_wholesale === undefined || it.price_wholesale === null) ? '' : esc(it.price_wholesale);
+        return '<tr>' +
+            '<td>' + img + '</td>' +
+            '<td class="td--mono">' + (esc(it.part_number) || '—') + '</td>' +
+            '<td class="td--primary">' + (esc(it.name) || '—') + '</td>' +
+            '<td style="text-align:center;">' + gradeHtml(it.condition_grade) + '</td>' +
+            '<td>' + (esc(veh) || '<span class="ynk-hint">—</span>') + '</td>' +
+            '<td style="text-align:right;white-space:nowrap;">' +
+                '<input type="number" class="select-filter ynk-b2b-price-input" id="ynkB2bPrice' + esc(it.id) + '" step="0.01" min="0" value="' + price + '" /> ' +
+                '<button class="btn btn--ghost btn--sm" type="button" title="Guardar precio mayoreo" onclick="ynkB2bSavePrice(' + esc(it.id) + ')">Guardar</button>' +
+            '</td>' +
+            '<td><span class="badge ' + cls + '">' + esc(st || '—') + '</span></td>' +
+            '<td>' + (esc(String(it.created_at || '').substring(0, 10)) || '—') + '</td>' +
+            '<td style="white-space:nowrap;">' +
+                '<button class="btn btn--ghost btn--sm" type="button" onclick="ynkB2bRetire(' + esc(it.id) + ')">Retirar</button>' +
+            '</td></tr>';
+    }
+
+    function ynkB2bSavePrice(id) {
+        var el = document.getElementById('ynkB2bPrice' + id);
+        if (!el) return;
+        var price = parseFloat(el.value);
+        if (isNaN(price) || price < 0) { toast('Precio mayoreo inválido', 'warn'); return; }
+        apiFetch(B2B + '/listings/' + id, { method: 'PATCH', body: JSON.stringify({ price_wholesale: price }) })
+            .then(function () {
+                toast('Precio mayoreo actualizado: ' + fmtMoney(price), 'ok');
+                loadB2bListings();
+            })
+            .catch(function (err) {
+                toast('No se pudo actualizar el precio: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkB2bRetire(id) {
+        if (!window.confirm('¿Retirar esta pieza del mayoreo? Los compradores dejarán de verla.')) return;
+        apiFetch(B2B + '/listings/' + id, { method: 'DELETE' })
+            .then(function () {
+                toast('Publicación retirada', 'ok');
+                loadB2bListings();
+                loadB2bSellerStatus();
+            })
+            .catch(function (err) {
+                toast('No se pudo retirar la publicación: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkB2bOpenPublish() {
+        if (b2bSeller && !b2bSeller.is_seller) {
+            toast('Tu negocio no está habilitado para vender en mayoreo.', 'warn');
+            return;
+        }
+        var sel = document.getElementById('ynkB2bPublishPiece');
+        if (sel) sel.innerHTML = '<option value="">Cargando piezas…</option>';
+        var price = document.getElementById('ynkB2bPublishPrice');
+        if (price) price.value = '';
+        var notes = document.getElementById('ynkB2bPublishNotes');
+        if (notes) notes.value = '';
+        var res = document.getElementById('ynkB2bPublishResult');
+        if (res) { res.className = 'ynk-save-result'; res.innerHTML = ''; }
+        openModal('ynkB2bPublishModal');
+        loadB2bInventoryOptions();
+    }
+
+    function loadB2bInventoryOptions() {
+        var sel = document.getElementById('ynkB2bPublishPiece');
+        if (!sel) return;
+        apiFetch(API + '/pieces?per_page=200')
+            .then(function (res) {
+                var items = asList(res);
+                if (!items.length) {
+                    sel.innerHTML = '<option value="">Sin piezas usadas en inventario</option>';
+                    return;
+                }
+                sel.innerHTML = '<option value="">— Selecciona una pieza usada —</option>' + items.map(function (p) {
+                    var label = '#' + p.id + ' · ' + (p.name || 'pieza') + (p.part_number ? ' (' + p.part_number + ')' : '');
+                    return '<option value="' + esc(p.id) + '" data-price="' + esc(p.price_1 === undefined ? '' : p.price_1) + '">' +
+                        esc(label) + '</option>';
+                }).join('');
+            })
+            .catch(function (err) {
+                sel.innerHTML = '<option value="">Error al cargar las piezas</option>';
+                toast('No se pudieron cargar las piezas del inventario: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkB2bSubmitPublish() {
+        var sel = document.getElementById('ynkB2bPublishPiece');
+        var invId = sel ? sel.value : '';
+        var price = numOrNull('ynkB2bPublishPrice');
+        var res = document.getElementById('ynkB2bPublishResult');
+        var btn = document.getElementById('ynkB2bPublishSubmitBtn');
+
+        if (!invId) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'Selecciona una pieza del inventario.'; }
+            return;
+        }
+        if (price === null || price < 0) {
+            if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'Indica un precio de mayoreo válido.'; }
+            return;
+        }
+        var body = { inventory_id: parseInt(invId, 10), price_wholesale: price };
+        var notes = val('ynkB2bPublishNotes');
+        if (notes) body.notes = notes;
+
+        if (btn) { btn.disabled = true; btn.textContent = 'Publicando…'; }
+        if (res) { res.className = 'ynk-save-result'; res.textContent = 'Publicando…'; }
+
+        apiFetch(B2B + '/listings', { method: 'POST', body: JSON.stringify(body) })
+            .then(function () {
+                toast('Pieza publicada en mayoreo', 'ok');
+                ynkCloseModal('ynkB2bPublishModal');
+                ynkB2bView('listings');
+            })
+            .catch(function (err) {
+                if (res) { res.className = 'ynk-save-result ynk-err'; res.textContent = 'No se pudo publicar: ' + errMsg(err); }
+                toast('Error al publicar en mayoreo: ' + errMsg(err), 'error');
+            })
+            .then(function () { if (btn) { btn.disabled = false; btn.textContent = 'Publicar'; } });
+    }
+
+    // ─── Pedidos (vendedor y comprador) ──────────────────────────────────
+
+    function ynkB2bOrdersView(view) {
+        b2bOrdersView = view === 'purchases' ? 'purchases' : 'incoming';
+        var inc = document.getElementById('ynkB2bSegIncoming');
+        var pur = document.getElementById('ynkB2bSegPurchases');
+        if (inc) { inc.classList.toggle('is-active', b2bOrdersView === 'incoming'); inc.setAttribute('aria-selected', b2bOrdersView === 'incoming' ? 'true' : 'false'); }
+        if (pur) { pur.classList.toggle('is-active', b2bOrdersView === 'purchases'); pur.setAttribute('aria-selected', b2bOrdersView === 'purchases' ? 'true' : 'false'); }
+
+        var sellerSide = b2bOrdersView === 'incoming';
+        var head = document.getElementById('ynkB2bOrdersCounterpartyHead');
+        if (head) head.textContent = sellerSide ? 'Comprador' : 'Vendedor';
+        var hint = document.getElementById('ynkB2bOrdersHint');
+        if (hint) hint.textContent = sellerSide
+            ? 'Pedidos que otros negocios te hacen.'
+            : 'Pedidos que hiciste a otros negocios.';
+
+        loadB2bOrders();
+    }
+
+    function loadB2bOrders() {
+        var body = document.getElementById('ynkB2bOrdersBody');
+        if (!body) return;
+        body.innerHTML = emptyRow(7, 'Cargando pedidos…');
+        var sellerSide = b2bOrdersView === 'incoming';
+        apiFetch(B2B + (sellerSide ? '/orders/incoming' : '/orders'))
+            .then(function (res) {
+                b2bOrders = asList(res);
+                renderB2bOrders();
+            })
+            .catch(function (err) {
+                body.innerHTML = emptyRow(7, 'Error al cargar pedidos: ' + errMsg(err));
+                toast('Error al cargar los pedidos de mayoreo: ' + errMsg(err), 'error');
+            });
+    }
+
+    function renderB2bOrders() {
+        var body = document.getElementById('ynkB2bOrdersBody');
+        if (!body) return;
+        var sellerSide = b2bOrdersView === 'incoming';
+        var footer = document.getElementById('ynkB2bOrdersFooter');
+        if (!b2bOrders.length) {
+            body.innerHTML = emptyRow(7, sellerSide
+                ? 'Todavía no has recibido pedidos de mayoreo.'
+                : 'Todavía no has hecho compras de mayoreo.');
+            if (footer) footer.textContent = '0 pedidos';
+            return;
+        }
+        body.innerHTML = b2bOrders.map(function (o) {
+            var items = b2bItems(o);
+            var count = o.items_count !== undefined ? o.items_count : items.length;
+            return '<tr>' +
+                '<td class="td--mono">' + esc(o.id) + '</td>' +
+                '<td class="td--primary">' + esc(b2bCounterparty(o, sellerSide)) + '</td>' +
+                '<td style="text-align:right;">' + fmtInt(count) + '</td>' +
+                '<td style="text-align:right;" class="td--amount">' + fmtMoney(o.total) + '</td>' +
+                '<td>' + b2bStatusBadge(o.status) + '</td>' +
+                '<td>' + (esc(String(o.created_at || '').substring(0, 10)) || '—') + '</td>' +
+                '<td style="white-space:nowrap;">' + b2bOrderActions(o, sellerSide, true) + '</td>' +
+                '</tr>';
+        }).join('');
+        if (footer) footer.textContent = b2bOrders.length + ' pedido(s)';
+    }
+
+    function b2bItems(o) {
+        var arr = o.items || o.order_items || o.lines || [];
+        return Array.isArray(arr) ? arr : [];
+    }
+
+    // Action buttons depend on the order status and which side we are on.
+    function b2bOrderActions(o, sellerSide, includeDetail) {
+        var s = (o.status || '').toLowerCase();
+        var id = o.id;
+        var btns = [];
+        if (sellerSide) {
+            if (s === 'pending' || s === 'new') {
+                btns.push('<button class="btn btn--primary btn--sm" type="button" onclick="ynkB2bSetStatus(' + id + ', \'confirmed\')">Confirmar</button>');
+            }
+            if (s === 'pending' || s === 'new' || s === 'confirmed' || s === 'paid' || s === 'processing') {
+                btns.push('<button class="btn btn--secondary btn--sm" type="button" onclick="ynkB2bSetStatus(' + id + ', \'shipped\')">Marcar enviado</button>');
+                btns.push('<button class="btn btn--ghost btn--sm" type="button" onclick="ynkB2bSetStatus(' + id + ', \'cancelled\')">Cancelar</button>');
+            }
+        } else {
+            if (s === 'shipped' || s === 'sent' || s === 'confirmed' || s === 'processing') {
+                btns.push('<button class="btn btn--primary btn--sm" type="button" onclick="ynkB2bSetStatus(' + id + ', \'received\')">Recibido</button>');
+            }
+            if (s === 'pending' || s === 'new' || s === 'confirmed') {
+                btns.push('<button class="btn btn--ghost btn--sm" type="button" onclick="ynkB2bSetStatus(' + id + ', \'cancelled\')">Cancelar</button>');
+            }
+        }
+        if (includeDetail) {
+            btns.push('<button class="btn btn--ghost btn--sm" type="button" onclick="ynkB2bOpenOrder(' + id + ',' + (sellerSide ? 1 : 0) + ')">Detalle</button>');
+        }
+        return btns.join(' ');
+    }
+
+    function ynkB2bSetStatus(id, status) {
+        var labels = {
+            confirmed: 'confirmado', shipped: 'marcado como enviado',
+            received: 'marcado como recibido', cancelled: 'cancelado'
+        };
+        if (status === 'cancelled' && !window.confirm('¿Cancelar el pedido #' + id + '?')) return;
+        apiFetch(B2B + '/orders/' + id + '/status', { method: 'PUT', body: JSON.stringify({ status: status }) })
+            .then(function () {
+                toast('Pedido #' + id + ' ' + (labels[status] || status), 'ok');
+                loadB2bOrders();
+                loadB2bSellerStatus();
+                if (b2bOrderDetail && b2bOrderDetail.id === id) {
+                    ynkB2bOpenOrder(id, b2bOrderDetail.side);
+                }
+            })
+            .catch(function (err) {
+                toast('No se pudo actualizar el pedido: ' + errMsg(err), 'error');
+            });
+    }
+
+    function ynkB2bOpenOrder(id, side) {
+        b2bOrderDetail = { id: id, side: side ? 1 : 0 };
+        var title = document.getElementById('ynkB2bOrderTitle');
+        if (title) title.textContent = 'Pedido #' + id;
+        var body = document.getElementById('ynkB2bOrderBody');
+        if (body) body.innerHTML = 'Cargando pedido…';
+        var actions = document.getElementById('ynkB2bOrderActions');
+        if (actions) actions.innerHTML = '';
+        openModal('ynkB2bOrderModal');
+
+        apiFetch(B2B + '/orders/' + id)
+            .then(function (raw) {
+                var o = unwrap(raw) || {};
+                renderB2bOrderDetail(o, id, side);
+            })
+            .catch(function (err) {
+                if (body) body.innerHTML = '<span class="ynk-err">No se pudo cargar el pedido: ' + esc(errMsg(err)) + '</span>';
+                toast('Error al cargar el pedido: ' + errMsg(err), 'error');
+            });
+    }
+
+    function renderB2bOrderDetail(o, id, side) {
+        var sellerSide = !!side;
+        var items = b2bItems(o);
+        var body = document.getElementById('ynkB2bOrderBody');
+        var actions = document.getElementById('ynkB2bOrderActions');
+
+        var html = '<div class="ynk-summary-card"><h4>Pedido #' + esc(o.id !== undefined ? o.id : id) + '</h4>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Estado</span><span class="ynk-kv__v">' + b2bStatusBadge(o.status) + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">' + (sellerSide ? 'Comprador' : 'Vendedor') + '</span><span class="ynk-kv__v">' +
+                esc(b2bCounterparty(o, sellerSide)) + '</span></div>' +
+            '<div class="ynk-kv"><span class="ynk-kv__k">Total</span><span class="ynk-kv__v">' + fmtMoney(o.total) + '</span></div>' +
+            (o.created_at ? '<div class="ynk-kv"><span class="ynk-kv__k">Creado</span><span class="ynk-kv__v">' +
+                esc(String(o.created_at).substring(0, 19).replace('T', ' ')) + '</span></div>' : '') +
+            (o.notes ? '<div class="ynk-kv"><span class="ynk-kv__k">Notas</span><span class="ynk-kv__v">' + esc(o.notes) + '</span></div>' : '') +
+            '</div>';
+
+        if (items.length) {
+            html += '<div class="table-wrapper" style="margin-top:var(--space-3);"><table class="data-table"><thead><tr>' +
+                '<th>Pieza</th><th>No. Parte</th><th style="text-align:right;">Cantidad</th>' +
+                '<th style="text-align:right;">P. unitario</th><th style="text-align:right;">Subtotal</th>' +
+                '</tr></thead><tbody>' + items.map(function (it) {
+                    var qty = it.quantity !== undefined ? it.quantity : (it.qty !== undefined ? it.qty : 1);
+                    var unit = it.unit_price !== undefined ? it.unit_price
+                        : (it.price_wholesale !== undefined ? it.price_wholesale : it.price);
+                    var sub = it.subtotal !== undefined ? it.subtotal : (num(unit) * num(qty));
+                    return '<tr>' +
+                        '<td class="td--primary">' + (esc(it.name) || ('Pieza #' + esc(it.listing_id !== undefined ? it.listing_id : (it.inventory_id || '—')))) + '</td>' +
+                        '<td class="td--mono">' + (esc(it.part_number) || '—') + '</td>' +
+                        '<td style="text-align:right;">' + fmtInt(qty) + '</td>' +
+                        '<td style="text-align:right;" class="td--amount">' + fmtMoney(unit) + '</td>' +
+                        '<td style="text-align:right;" class="td--amount">' + fmtMoney(sub) + '</td>' +
+                        '</tr>';
+                }).join('') + '</tbody></table></div>';
+        } else {
+            html += '<p class="ynk-hint" style="margin-top:var(--space-3);">El detalle de piezas no está disponible.</p>';
+        }
+
+        if (body) body.innerHTML = html;
+        if (actions) actions.innerHTML = b2bOrderActions(o, sellerSide, false);
+    }
+
+    // =====================================================================
+    //  GLOBAL EXPORTS (used by inline onclick handlers in yonke.html)
+    // =====================================================================
+
+    window.switchTab = switchTab;
+    window.ynkRefreshPieces = function () { refreshSummary(); loadPieces(1); toast('Lista actualizada', 'info'); };
+    window.ynkPiecesPage = function (p) { loadPieces(p); };
+    window.ynkResetPieceFilters = function () {
+        document.getElementById('ynkQ').value = '';
+        document.getElementById('ynkFiltCondition').value = '';
+        document.getElementById('ynkFiltGrade').value = '';
+        document.getElementById('ynkFiltOwnership').value = '';
+        loadPieces(1);
+    };
+    window.ynkDecodeVin = ynkDecodeVin;
+    window.ynkRemovePhoto = ynkRemovePhoto;
+    window.ynkSubmitPiece = ynkSubmitPiece;
+    window.ynkResetPieceForm = function () { resetPieceForm(); stopIntakeTimer(); startIntakeTimer(); };
+    window.ynkSetDonorView = ynkSetDonorView;
+    window.ynkSearchDonors = function (p) { loadDonors(p || 1); };
+    window.ynkDonorsPage = function (p) { loadDonors(p); };
+    window.ynkDonorToPieces = ynkDonorToPieces;
+    window.ynkSearchDonorPieces = function (p) { loadDonorPieces(p || 1); };
+    window.ynkDonorPiecesPage = function (p) { loadDonorPieces(p); };
+    window.ynkClearDonorPieceFilters = function () {
+        ['ynkDonorMake', 'ynkDonorModel', 'ynkDonorYear', 'ynkDonorVin', 'ynkDonorPieceQ']
+            .forEach(function (i) { var el = document.getElementById(i); if (el) el.value = ''; });
+        loadDonorPieces(1);
+    };
+    window.ynkLoadConsignments = loadConsignments;
+    window.ynkOpenConsignmentModal = ynkOpenConsignmentModal;
+    window.ynkCreateConsignment = ynkCreateConsignment;
+    window.ynkOpenConsignment = ynkOpenConsignment;
+    window.ynkAddConsignmentItem = ynkAddConsignmentItem;
+    window.ynkSettleConsignment = ynkSettleConsignment;
+    window.ynkOpenEditPiece = ynkOpenEditPiece;
+    window.ynkOpenPieceFromSearch = ynkOpenPieceFromSearch;
+    window.ynkSaveEditPiece = ynkSaveEditPiece;
+    window.ynkOpenImages = ynkOpenImages;
+    window.ynkDeleteImage = ynkDeleteImage;
+    // Piece detail / actions
+    window.ynkOpenPiece = ynkOpenPiece;
+    window.ynkOpenLabel = ynkOpenLabel;
+    window.ynkPublishMeli = ynkPublishMeli;
+    window.ynkSuggestPrice = ynkSuggestPrice;
+    window.ynkApplySuggestedPrice = ynkApplySuggestedPrice;
+    window.ynkApplyIdentified = ynkApplyIdentified;
+    window.ynkAddCompat = ynkAddCompat;
+    window.ynkEditFromDetail = ynkEditFromDetail;
+    // Intake modes
+    window.ynkSetIntakeMode = ynkSetIntakeMode;
+    window.ynkFullAddRow = ynkFullAddRow;
+    window.ynkFullRemoveRow = ynkFullRemoveRow;
+    window.ynkFullClearRows = ynkFullClearRows;
+    window.ynkFullResetForm = ynkFullResetForm;
+    window.ynkFullDecodeVin = ynkFullDecodeVin;
+    window.ynkSubmitDonorFull = ynkSubmitDonorFull;
+    window.ynkSuggestGradeFromPhoto = ynkSuggestGradeFromPhoto;
+    // Consignment statement
+    window.ynkOpenStatement = ynkOpenStatement;
+    window.ynkLoadStatement = ynkLoadStatement;
+    window.ynkPrintStatement = ynkPrintStatement;
+    // Reports
+    window.ynkSetReportView = ynkSetReportView;
+    window.ynkLoadAging = ynkLoadAging;
+    window.ynkLoadReportSummary = ynkLoadReportSummary;
+    window.ynkLoadDuplicates = ynkLoadDuplicates;
+    // Mayoreo B2B
+    window.ynkB2bView = ynkB2bView;
+    window.ynkB2bRefresh = ynkB2bRefresh;
+    window.ynkB2bOrdersView = ynkB2bOrdersView;
+    window.ynkB2bOpenBuy = ynkB2bOpenBuy;
+    window.ynkB2bUpdateBuyTotal = ynkB2bUpdateBuyTotal;
+    window.ynkB2bSubmitOrder = ynkB2bSubmitOrder;
+    window.ynkB2bOpenPublish = ynkB2bOpenPublish;
+    window.ynkB2bSubmitPublish = ynkB2bSubmitPublish;
+    window.ynkB2bSavePrice = ynkB2bSavePrice;
+    window.ynkB2bRetire = ynkB2bRetire;
+    window.ynkB2bSetStatus = ynkB2bSetStatus;
+    window.ynkB2bOpenOrder = ynkB2bOpenOrder;
+    window.ynkB2bCatalogPage = function (p) { loadB2bCatalog(p); };
+    window.ynkB2bClearCatalogFilters = ynkB2bClearCatalogFilters;
+    window.loadB2bCatalogUi = loadB2bCatalogUi;
+    // CSV import
+    window.ynkOpenImportModal = ynkOpenImportModal;
+    window.ynkSubmitImport = ynkSubmitImport;
+    window.ynkCloseModal = function (id) {
+        var el = document.getElementById(id);
+        if (el) el.classList.remove('is-open');
+    };
+
+    // =====================================================================
+    //  INIT
+    // =====================================================================
+
+    function debounce(fn, ms) {
+        var t = null;
+        return function () {
+            clearTimeout(t);
+            t = setTimeout(fn, ms);
+        };
+    }
+
+    function init() {
+        // Overlay click closes modals
+        document.querySelectorAll('.inv-modal-overlay').forEach(function (ov) {
+            ov.addEventListener('click', function (e) {
+                if (e.target === ov) ov.classList.remove('is-open');
+            });
+        });
+
+        // Tab 1 — filters
+        var q = document.getElementById('ynkQ');
+        if (q) q.addEventListener('input', debounce(function () { loadPieces(1); }, 350));
+        ['ynkFiltCondition', 'ynkFiltGrade', 'ynkFiltOwnership'].forEach(function (id) {
+            var el = document.getElementById(id);
+            if (el) el.addEventListener('change', function () { loadPieces(1); });
+        });
+        var perPage = document.getElementById('ynkFiltPerPage');
+        if (perPage) perPage.addEventListener('change', function () { loadPieces(1); });
+
+        // Tab 2 — intake
+        var photos = document.getElementById('ynkPhotos');
+        if (photos) {
+            photos.addEventListener('change', function () {
+                addPhotos(this.files);
+                this.value = '';
+            });
+        }
+        var ownership = document.getElementById('ynkOwnership');
+        if (ownership) {
+            ownership.addEventListener('change', function () {
+                document.getElementById('ynkConsignmentWrap').style.display = this.value === 'consigna' ? '' : 'none';
+            });
+        }
+        var vin = document.getElementById('ynkVin');
+        if (vin) {
+            vin.addEventListener('keydown', function (e) {
+                if (e.key === 'Enter') { e.preventDefault(); ynkDecodeVin(); }
+            });
+        }
+        var panelNueva = document.getElementById('panel-nueva');
+        if (panelNueva) {
+            panelNueva.addEventListener('keydown', function (e) {
+                if ((e.ctrlKey || e.metaKey) && e.key === 'Enter') {
+                    e.preventDefault();
+                    if (intakeMode === 'full') ynkSubmitDonorFull();
+                    else ynkSubmitPiece();
+                }
+            });
+        }
+
+        // Tab 2b — full donor form
+        var fullOwnership = document.getElementById('ynkFullOwnership');
+        if (fullOwnership) {
+            fullOwnership.addEventListener('change', function () {
+                document.getElementById('ynkFullConsignmentWrap').style.display = this.value === 'consigna' ? '' : 'none';
+            });
+        }
+        var fullVin = document.getElementById('ynkFullVin');
+        if (fullVin) {
+            fullVin.addEventListener('keydown', function (e) {
+                if (e.key === 'Enter') { e.preventDefault(); ynkFullDecodeVin(); }
+            });
+        }
+
+        // Piece detail — photo-driven tools
+        var idInput = document.getElementById('ynkIdentifyInput');
+        if (idInput) {
+            idInput.addEventListener('change', function () {
+                if (this.files && this.files[0]) ynkIdentifyFile(this.files[0]);
+                this.value = '';
+            });
+        }
+        var valInput = document.getElementById('ynkValidateInput');
+        if (valInput) {
+            valInput.addEventListener('change', function () {
+                if (this.files && this.files[0]) ynkValidatePhoto(this.files[0]);
+                this.value = '';
+            });
+        }
+
+        // CSV import picker
+        var importFile = document.getElementById('ynkImportFile');
+        if (importFile) {
+            importFile.addEventListener('change', function () {
+                var n = document.getElementById('ynkImportFileName');
+                if (n) n.textContent = (this.files && this.files[0]) ? this.files[0].name : 'Sin archivo seleccionado';
+            });
+        }
+
+        // Tab 3 — donors
+        var dq = document.getElementById('ynkDonorQ');
+        if (dq) dq.addEventListener('input', debounce(function () { loadDonors(1); }, 350));
+        var dpq = document.getElementById('ynkDonorPieceQ');
+        if (dpq) dpq.addEventListener('input', debounce(function () { loadDonorPieces(1); }, 350));
+
+        // Tab 4 — consignments
+        var cq = document.getElementById('ynkConsignQ');
+        if (cq) cq.addEventListener('input', debounce(renderConsignments, 200));
+
+        // Images modal upload
+        var imgInput = document.getElementById('ynkImagesInput');
+        if (imgInput) {
+            imgInput.addEventListener('change', function () {
+                if (!imagesTargetId) return;
+                var fn = ynkUploadImagesTo(imagesTargetId);
+                fn(this.files);
+                this.value = '';
+            });
+        }
+
+        // Hash deep links (#donador, #nueva, ...)
+        var hash = (window.location.hash || '').replace('#', '');
+        switchTab(TABS[hash] ? hash : 'piezas');
+        refreshSummary();
+
+        window.addEventListener('hashchange', function () {
+            var h = (window.location.hash || '').replace('#', '');
+            if (TABS[h] && h !== activeTab) switchTab(h);
+        });
+    }
+
+    if (document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', init);
+    } else {
+        init();
+    }
+})();
diff --git a/pos/static/pwa/sw.js b/pos/static/pwa/sw.js
index 717e45e..fbe88dc 100644
--- a/pos/static/pwa/sw.js
+++ b/pos/static/pwa/sw.js
@@ -6,7 +6,7 @@
 // The fetch handler normalizes static asset URLs (strips ?v= query strings)
 // so templates can use cache-busting query params freely.
 
-const VERSION = 54;
+const VERSION = 61;
 const CACHE_NAME = 'nexus-pos-v' + VERSION;
 
 const APP_SHELL = [
@@ -104,12 +104,6 @@ self.addEventListener('activate', function (event) {
       );
     }).then(function () {
       return self.clients.claim();
-    }).then(function () {
-      return self.clients.matchAll({ type: 'window' }).then(function (clients) {
-        clients.forEach(function (client) {
-          client.postMessage({ type: 'SW_UPDATED', cacheName: CACHE_NAME });
-        });
-      });
     })
   );
 });
@@ -128,7 +122,9 @@ self.addEventListener('fetch', function (event) {
   // catalog.js?v=5 and catalog.js?v=6 share the same cache entry.
   var cacheKey = req;
   if (/\.(js|css|png|jpg|jpeg|webp|svg|gif|ico|woff|woff2|ttf|eot|json)$/.test(url.pathname)) {
-    cacheKey = new Request(url.pathname);
+    // Si el template pide una version ({{?v=N}}), usar la URL completa como clave
+    // para que un bump de version SI fuerce la descarga del asset nuevo.
+    cacheKey = url.search ? req : new Request(url.pathname);
   }
 
   // Never cache auth endpoints
@@ -142,8 +138,8 @@ self.addEventListener('fetch', function (event) {
     return;
   }
 
-  // Offline cart queue: POST /pos/api/cart/*
-  if (req.method === 'POST' && url.pathname.indexOf('/pos/api/cart/') !== -1) {
+  // Offline queue: POST /pos/api/sales (venta offline) y /pos/api/cart/*
+  if (req.method === 'POST' && (url.pathname.indexOf('/pos/api/cart/') !== -1 || url.pathname === '/pos/api/sales')) {
     event.respondWith(
       fetch(req.clone()).then(function (response) {
         return response;
diff --git a/pos/tasks.py b/pos/tasks.py
index 28d4ecc..4de42b8 100644
--- a/pos/tasks.py
+++ b/pos/tasks.py
@@ -102,14 +102,24 @@ def generate_report_task(self, report_type, params, tenant_id):
 
 @celery.task(bind=True, max_retries=3)
 def sync_meli_stock_price_task(self, tenant_id: int):
-    """Sync stock and price for all active ML listings."""
+    """Sync stock and price for all active ML listings.
+
+    Opt-in per tenant via tenant_config.meli_auto_sync_stock_price. Without it
+    the task is a no-op: pushing the local POS price/quantity to ML zeroes and
+    pauses any listing whose local product has no stock, which destroys sales
+    for tenants whose inventory is not (yet) loaded. Enable the flag only once
+    the tenant's stock is trustworthy.
+    """
     from services import marketplace_external_service as meli_svc
     from tenant_db import get_tenant_conn
 
     conn = get_tenant_conn(tenant_id)
     try:
         cfg = meli_svc.get_meli_config(conn)
-        svc = meli_svc._get_meli_service(cfg)
+        if not cfg.get('meli_auto_sync_stock_price'):
+            return {'skipped': True, 'reason': 'meli_auto_sync_stock_price disabled'}
+        # Pass conn so rotated OAuth tokens are persisted back to tenant_config
+        svc = meli_svc._get_meli_service(cfg, conn)
         if not svc:
             return {'error': 'MercadoLibre not configured'}
 
@@ -129,6 +139,7 @@ def sync_meli_stock_price_task(self, tenant_id: int):
 
         updated = 0
         failed = 0
+        skipped = 0
         for row in listings:
             listing_id, inv_id, ext_id, last_price = row
             cur = conn.cursor()
@@ -138,10 +149,18 @@ def sync_meli_stock_price_task(self, tenant_id: int):
             current_price = float(price_row[0]) if price_row and price_row[0] else 0
             current_stock = stock_map.get(inv_id, 0)
 
+            # Never push price <= 0: ML rejects it and it would blank out the
+            # live publication. This also covers listings not linked to any
+            # local inventory (inventory_id NULL), where there is no reliable
+            # stock either — skip them instead of pushing quantity 0.
+            if current_price <= 0:
+                skipped += 1
+                continue
+
             try:
                 svc.update_item(
                     ext_id,
-                    {"price": round(current_price, 2), "available_quantity": max(current_stock, 0)},
+                    {"price": round(current_price, 2), "available_quantity": max(int(current_stock or 0), 0)},
                 )
                 cur = conn.cursor()
                 cur.execute(
@@ -166,7 +185,20 @@ def sync_meli_stock_price_task(self, tenant_id: int):
                 cur.close()
                 failed += 1
 
-        return {'updated': updated, 'failed': failed, 'total': len(listings)}
+        # Drain the stock-sync queue so pause/reactivate-by-stock takes effect.
+        # record_operation() enqueues here whenever a listed product's stock
+        # moves; process_meli_sync_queue pauses items at 0 stock and reactivates
+        # them once stock returns. Best-effort: never fail the main sync.
+        queued = 0
+        try:
+            qres = meli_svc.process_meli_sync_queue(conn, batch_size=100)
+            if isinstance(qres, dict):
+                queued = qres.get('processed', 0)
+        except Exception:
+            pass
+
+        return {'updated': updated, 'failed': failed, 'skipped': skipped,
+                'total': len(listings), 'queued': queued}
     finally:
         conn.close()
 
@@ -202,32 +234,31 @@ def sync_meli_orders_task(self, tenant_id: int):
 
 @celery.task(bind=True, max_retries=3)
 def process_meli_webhook_task(self, tenant_id: int, topic: str, resource: str):
-    """Process incoming MercadoLibre webhook asynchronously."""
+    """Process a single MercadoLibre webhook notification.
+
+    Handles the concrete resource notified by ML (order / question / item)
+    instead of triggering a full sync.
+    """
     from services import marketplace_external_service as meli_svc
     from tenant_db import get_tenant_conn
 
     conn = get_tenant_conn(tenant_id)
     try:
+        resource_id = (resource or "").rstrip("/").split("/")[-1]
+        if not resource_id:
+            return {'ok': True, 'topic': topic, 'skipped': 'no resource'}
+
         if topic.startswith("orders"):
-            # Fetch full order and upsert
-            cfg = meli_svc.get_meli_config(conn)
-            svc = meli_svc._get_meli_service(cfg)
-            if svc and resource:
-                order_id = resource.split("/")[-1]
-                full = svc.get_order(order_id)
-                # Re-use fetch_and_save_orders by passing the order directly
-                # For simplicity, trigger a full sync for recent orders
-                return meli_svc.fetch_and_save_orders(conn)
+            result = meli_svc.fetch_and_save_order(conn, resource_id)
+            return {'ok': True, 'topic': topic, **result}
 
         if topic.startswith("questions"):
-            # Fetch single question and upsert locally
-            if resource:
-                question_id = resource.split("/")[-1]
-                try:
-                    meli_svc.fetch_question_from_ml(conn, question_id)
-                    return {'ok': True, 'topic': topic, 'question_id': question_id}
-                except Exception as qe:
-                    return {'ok': False, 'topic': topic, 'error': str(qe)}
+            meli_svc.fetch_question_from_ml(conn, resource_id)
+            return {'ok': True, 'topic': topic, 'question_id': resource_id}
+
+        if topic.startswith("items"):
+            result = meli_svc.sync_listing_from_meli(conn, resource_id)
+            return {'ok': True, 'topic': topic, **result}
 
         return {'ok': True, 'topic': topic}
     except Exception as e:
@@ -281,8 +312,13 @@ def sync_vehicle_compatibility_task(self, tenant_id, item_id, part_number, name,
 
 
 @celery.task(bind=True)
-def publish_meli_items_task(self, tenant_id: int, inventory_ids: list, category_id: str, listing_type: str = "gold_special", shipping_mode: str = "me2", custom_data: dict = None, base_url: str = None):
-    """Publish inventory items to MercadoLibre asynchronously."""
+def publish_meli_items_task(self, tenant_id: int, inventory_ids: list, category_id: str, listing_type: str = "gold_special", shipping_mode: str = "me2", custom_data: dict = None, base_url: str = None, chunk_size: int = 10, use_llm_description: bool = False):
+    """Publish inventory items to MercadoLibre asynchronously.
+
+    Publishes in chunks of `chunk_size` with a short pause between them to
+    stay clear of ML's rate limit (429) instead of firing the whole batch at
+    once. Set chunk_size=0 to disable pacing.
+    """
     from services import marketplace_external_service as meli_svc
     from tenant_db import get_tenant_conn
 
@@ -296,6 +332,8 @@ def publish_meli_items_task(self, tenant_id: int, inventory_ids: list, category_
             shipping_mode=shipping_mode,
             custom_data=custom_data or {},
             base_url=base_url,
+            use_llm_description=use_llm_description,
+            chunk_size=chunk_size,
         )
         return result
     except Exception as e:
diff --git a/pos/templates/accounting.html b/pos/templates/accounting.html
index 4c2d145..a0fbc02 100644
--- a/pos/templates/accounting.html
+++ b/pos/templates/accounting.html
@@ -493,7 +493,7 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/catalog.html b/pos/templates/catalog.html
index b3f2715..7e9789e 100644
--- a/pos/templates/catalog.html
+++ b/pos/templates/catalog.html
@@ -316,7 +316,7 @@
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
   <script src="/pos/static/js/kiosk.js" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/config.html b/pos/templates/config.html
index a8c0a37..7f7c0d3 100644
--- a/pos/templates/config.html
+++ b/pos/templates/config.html
@@ -367,6 +367,10 @@
               <label style="display:flex;align-items:center;gap:var(--space-2);cursor:pointer;"><input type="checkbox" id="receipt-show-payment" style="width:auto;" checked /> Mostrar detalle de pago</label>
               <label style="display:flex;align-items:center;gap:var(--space-2);cursor:pointer;"><input type="checkbox" id="receipt-show-employee" style="width:auto;" /> Mostrar nombre del empleado</label>
             </div>
+            <div class="form-group" style="display:flex;align-items:center;gap:8px;">
+              <input type="checkbox" id="receipt-auto-print" />
+              <label for="receipt-auto-print" style="margin:0;">Imprimir ticket automáticamente al cobrar</label>
+            </div>
             <div style="margin-top:var(--space-4);text-align:right;">
               <button class="btn btn--primary" onclick="Config.saveReceiptConfig()">Guardar ticket</button>
             </div>
@@ -454,6 +458,42 @@
           </div>
         </div>
 
+        <!-- ===============================================================
+             SECTION 4B: ALERTAS POR WHATSAPP (contactos por negocio)
+             =============================================================== -->
+        <div class="settings-section" data-tab="general">
+          <div class="settings-section__header">
+            <div class="settings-section__icon">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><path d="M18 8A6 6 0 0 0 6 8c0 7-3 9-3 9h18s-3-2-3-9"/><path d="M13.73 21a2 2 0 0 1-3.46 0"/></svg>
+            </div>
+            <div>
+              <div class="settings-section__title">Alertas por WhatsApp</div>
+              <div class="settings-section__desc">Números que reciben las alertas automáticas de este negocio. Si no configuras ninguno, las alertas no se envían.</div>
+            </div>
+          </div>
+
+          <div class="settings-card">
+            <div class="toggle-row">
+              <div class="toggle-row__info">
+                <span class="toggle-row__label">Enviar alertas por WhatsApp</span>
+                <span class="toggle-row__desc">Activa el reenvío de alertas al número de este negocio</span>
+              </div>
+              <label class="toggle">
+                <input type="checkbox" id="cfg-alert-whatsapp-enabled" />
+                <span class="toggle__slider"></span>
+              </label>
+            </div>
+            <div class="form-group" style="margin-top:var(--space-3);">
+              <label class="form-label">Números de alerta</label>
+              <input type="text" class="form-input" id="alert-phones" placeholder="+5215512345678, +5215587654321" />
+              <span class="form-hint">Formato internacional, separados por coma. Solo dígitos y "+" (10-15 dígitos).</span>
+            </div>
+            <div style="margin-top:var(--space-4);display:flex;justify-content:flex-end;">
+              <button class="btn btn--primary" id="btn-save-alert-contacts">Guardar alertas</button>
+            </div>
+          </div>
+        </div>
+
         <!-- ===============================================================
              SECTION 4: USUARIOS Y PERMISOS
              =============================================================== -->
@@ -598,7 +638,7 @@
                 <span class="toggle-row__desc">Generar CFDI automáticamente al cerrar una venta</span>
               </div>
               <label class="toggle">
-                <input type="checkbox" checked />
+                <input type="checkbox" id="cfg-invoice-auto" checked />
                 <span class="toggle__slider"></span>
               </label>
             </div>
@@ -608,7 +648,7 @@
                 <span class="toggle-row__desc">Enviar PDF y XML al correo del cliente</span>
               </div>
               <label class="toggle">
-                <input type="checkbox" checked />
+                <input type="checkbox" id="cfg-invoice-email" checked />
                 <span class="toggle__slider"></span>
               </label>
             </div>
@@ -618,7 +658,7 @@
                 <span class="toggle-row__desc">Generar CFDI global para ventas sin RFC</span>
               </div>
               <label class="toggle">
-                <input type="checkbox" />
+                <input type="checkbox" id="cfg-invoice-global" />
                 <span class="toggle__slider"></span>
               </label>
             </div>
@@ -835,6 +875,42 @@
           </div>
         </div>
 
+        <!-- ===============================================================
+             SECTION 9B: PRECIOS POR TIPO DE CLIENTE
+             =============================================================== -->
+        <div class="settings-section" data-tab="catalog">
+          <div class="settings-section__header">
+            <div class="settings-section__icon">
+              <svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round"><line x1="19" y1="5" x2="5" y2="19"/><circle cx="6.5" cy="6.5" r="2.5"/><circle cx="17.5" cy="17.5" r="2.5"/></svg>
+            </div>
+            <div>
+              <div class="settings-section__title">Precios por Tipo de Cliente</div>
+              <div class="settings-section__desc">Descuento sobre precio de mostrador para clientes Taller y Mayoreo</div>
+            </div>
+          </div>
+
+          <div class="settings-card">
+            <div class="settings-card__title">Descuentos por Nivel de Precio</div>
+            <div class="form-grid" style="display:grid;grid-template-columns:1fr 1fr;gap:var(--space-4);">
+              <div class="form-group">
+                <label class="form-label">Taller (Nivel 2) — % descuento</label>
+                <input class="form-input" id="cfg-tier-disc-2" type="number" min="0" max="100" step="0.5" value="0" />
+              </div>
+              <div class="form-group">
+                <label class="form-label">Mayoreo (Nivel 3) — % descuento</label>
+                <input class="form-input" id="cfg-tier-disc-3" type="number" min="0" max="100" step="0.5" value="0" />
+              </div>
+            </div>
+            <p style="color:var(--color-text-muted);font-size:var(--text-caption);margin-top:var(--space-2);">
+              El descuento se aplica sobre el precio de mostrador al crear o actualizar el precio de un producto. No modifica los precios ya calculados de productos existentes.
+            </p>
+            <div style="margin-top:var(--space-4);display:flex;gap:var(--space-3);align-items:center;justify-content:flex-end;">
+              <span id="tier-discount-status" style="font-size:var(--text-caption);color:var(--color-text-muted);"></span>
+              <button class="btn btn--primary" id="btn-save-tier-discounts" onclick="Config.saveTierDiscounts()">Guardar Descuentos</button>
+            </div>
+          </div>
+        </div>
+
         <!-- ===============================================================
              SECTION 10: MONEDA / CURRENCY
              =============================================================== -->
@@ -900,6 +976,7 @@
                 <option value="accountant">Contador</option>
                 <option value="workshop">Taller</option>
                 <option value="mechanic">Mecánico</option>
+                <option value="driver">Repartidor</option>
               </select>
             </div>
 
@@ -1044,6 +1121,7 @@
               <option value="accountant">Contador</option>
               <option value="workshop">Taller</option>
               <option value="mechanic">Mecanico</option>
+              <option value="driver">Repartidor</option>
             </select>
           </div>
           <div class="form-group">
@@ -1070,12 +1148,12 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
   <script src="/pos/static/js/kiosk.js" defer></script>
-  <script src="/pos/static/js/config.js?v=41" defer></script>
+  <script src="/pos/static/js/config.js?v=45" defer></script>
   <script src="/pos/static/js/sync-engine.js" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
   <script src="/pos/static/js/pwa-install.js" defer></script>
diff --git a/pos/templates/customers.html b/pos/templates/customers.html
index 43262c2..eb8c440 100644
--- a/pos/templates/customers.html
+++ b/pos/templates/customers.html
@@ -417,7 +417,23 @@
               </div>
             </div>
 
-            <!-- Credit Info -->
+            
+            <!-- CRM & Loyalty -->
+            <div class="detail-section" id="crmSection">
+              <div class="detail-section__title">CRM &amp; Lealtad</div>
+              <div style="display:flex;align-items:center;gap:var(--space-3);margin-bottom:var(--space-2);">
+                <div style="font-size:var(--text-h4);font-weight:700;" id="crmLoyaltyBalance">—</div>
+                <span style="color:var(--color-text-muted);font-size:var(--text-caption);">puntos</span>
+                <div style="flex:1;"></div>
+                <button class="btn btn-sm btn-ghost" onclick="Customers.crmRedeem()">Canjear</button>
+                <button class="btn btn-sm btn-ghost" onclick="Customers.crmAddNote()">Nota</button>
+              </div>
+              <div id="crmActivities" style="max-height:180px;overflow-y:auto;display:flex;flex-direction:column;gap:var(--space-2);">
+                <span style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando actividad...</span>
+              </div>
+            </div>
+
+<!-- Credit Info -->
             <div class="detail-section">
               <div class="detail-section__title">Crédito</div>
               <div class="credit-block">
@@ -651,12 +667,12 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
   <script src="/pos/static/js/virtual-scroll.js" defer></script>
-  <script src="/pos/static/js/customers.js?v=35" defer></script>
+  <script src="/pos/static/js/customers.js?v=38" defer></script>
   <script src="/pos/static/js/offline-banner.js" defer></script>
   <script src="/pos/static/js/sync-engine.js" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
diff --git a/pos/templates/dashboard.html b/pos/templates/dashboard.html
index f166886..2019e7e 100644
--- a/pos/templates/dashboard.html
+++ b/pos/templates/dashboard.html
@@ -606,14 +606,14 @@
 
   <script src="/pos/static/js/chart.umd.min.js" defer></script>
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
   <script src="/pos/static/js/dashboard-stats.js?v=33" defer></script>
   <script src="/pos/static/js/dashboard.js?v=33" defer></script>
   <script src="/pos/static/js/sync-engine.js" defer></script>
-  <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js?v=34',{scope:'/pos/'});}</script>
+  <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
   <script src="/pos/static/js/pwa-install.js" defer></script>
 
   <script src="/pos/static/js/chat.js" defer></script>
diff --git a/pos/templates/diagrams.html b/pos/templates/diagrams.html
index c8d864a..cee2ac4 100644
--- a/pos/templates/diagrams.html
+++ b/pos/templates/diagrams.html
@@ -150,7 +150,7 @@
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
   <script src="/pos/static/js/kiosk.js" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/fleet.html b/pos/templates/fleet.html
index 616eb1d..5bd11fd 100644
--- a/pos/templates/fleet.html
+++ b/pos/templates/fleet.html
@@ -303,10 +303,11 @@
 </div>
 
 <script src="/pos/static/js/i18n.js?v=39" defer></script>
-<script src="/pos/static/js/app-init.js?v=8" defer></script>
+<script src="/pos/static/js/app-init.js?v=9" defer></script>
 <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
 <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
+<script src="/pos/static/js/virtual-scroll.js?v=1" defer></script>
 <script src="/pos/static/js/fleet.js" defer></script>
 <script src="/pos/static/js/offline-banner.js" defer></script>
 <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
diff --git a/pos/templates/inventory.html b/pos/templates/inventory.html
index 1df831a..dd4eb9f 100644
--- a/pos/templates/inventory.html
+++ b/pos/templates/inventory.html
@@ -194,11 +194,11 @@
         <div class="page-header__actions">
           <button class="btn btn--ghost" id="btnHeaderImport" onclick="document.getElementById('bulkImportModal').classList.add('is-open')">
             <svg viewBox="0 0 24 24"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="17 8 12 3 7 8"/><line x1="12" y1="3" x2="12" y2="15"/></svg>
-            Importar CSV
+            Importar
           </button>
-          <button class="btn btn--ghost" onclick="exportVisibleTableCSV('inventario')">
+          <button class="btn btn--ghost" onclick="document.getElementById('exportModal').classList.add('is-open')">
             <svg viewBox="0 0 24 24"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="7 10 12 15 17 10"/><line x1="12" y1="15" x2="12" y2="3"/></svg>
-            Exportar CSV
+            Exportar
           </button>
           <button class="btn btn--ghost" onclick="loadItems(1,'')">
             <svg viewBox="0 0 24 24"><polyline points="23 4 23 10 17 10"/><path d="M20.49 15a9 9 0 1 1-.38-4.93"/></svg>
@@ -788,24 +788,41 @@
 
   <!-- Transfer Modal -->
   <div class="inv-modal-overlay" id="transferModal">
-    <div class="inv-modal">
+    <div class="inv-modal inv-modal--wide">
       <div class="inv-modal__header">
-        <h3>Nuevo Traspaso</h3>
+        <h3>Transferencias entre Sucursales</h3>
         <button class="inv-modal__close" onclick="closeTransferModal()">&times;</button>
       </div>
       <div class="inv-modal__body">
-        <div class="inv-form-grid">
-          <div class="inv-field"><label>ID Producto *</label><input type="number" id="transferItemId" placeholder="ID inventario" /></div>
-          <div class="inv-field"><label>Cantidad *</label><input type="number" id="transferQty" placeholder="Cantidad" /></div>
-          <div class="inv-field"><label>Sucursal Origen *</label><input type="number" id="transferFrom" placeholder="ID sucursal origen" /></div>
-          <div class="inv-field"><label>Sucursal Destino *</label><input type="number" id="transferTo" placeholder="ID sucursal destino" /></div>
-          <div class="inv-field inv-field--full"><label>Notas</label><input type="text" id="transferNotes" placeholder="Notas adicionales" /></div>
+        <div class="cfg-tabs" style="position:static;margin-bottom:12px;">
+          <button type="button" class="cfg-tab-btn active" id="tr-tab-new" onclick="Inventory.switchTransferTab('new')">Nueva Transferencia</button>
+          <button type="button" class="cfg-tab-btn" id="tr-tab-list" onclick="Inventory.switchTransferTab('list')">Enviadas / Por Recibir</button>
+        </div>
+
+        <div id="tr-panel-new">
+          <div class="inv-form-grid">
+            <div class="inv-field"><label>Sucursal Destino *</label><select id="transferTo" class="form-input"><option value="">--</option></select></div>
+            <div class="inv-field inv-field--full"><label>Notas</label><input type="text" id="transferNotes" class="form-input" placeholder="Notas adicionales" /></div>
+          </div>
+          <div style="margin:10px 0;">
+            <input type="text" id="transferScan" class="form-input" placeholder="Escanea código de barras / No. parte y Enter" style="width:100%;" onkeydown="if(event.key==='Enter'){event.preventDefault();Inventory.transferAddByCode(this.value);this.value='';}" />
+          </div>
+          <div id="transferLines" style="max-height:220px;overflow-y:auto;border:1px solid var(--color-border);border-radius:8px;">
+            <p style="padding:10px;color:var(--color-text-muted);font-size:var(--text-caption);">Escanea o busca productos para agregarlos</p>
+          </div>
+          <div id="transferResult" style="margin-top:var(--space-3);min-height:1.5em;"></div>
+        </div>
+
+        <div id="tr-panel-list" style="display:none;">
+          <div id="transferDocsList" style="max-height:380px;overflow-y:auto;">
+            <p style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando...</p>
+          </div>
         </div>
-        <div id="transferResult" style="margin-top:var(--space-3);min-height:1.5em;"></div>
       </div>
-      <div class="inv-modal__footer">
-        <button class="btn btn--ghost" onclick="closeTransferModal()">Cancelar</button>
-        <button class="btn btn--primary" onclick="recordTransfer()">Registrar Traspaso</button>
+      <div class="inv-modal__footer" id="transferNewFooter">
+        <button class="btn btn--ghost" onclick="closeTransferModal()">Cerrar</button>
+        <button class="btn btn--primary" onclick="transferDocSave(false)">Guardar Borrador</button>
+        <button class="btn btn--primary" onclick="transferDocSave(true)" style="background:var(--color-success);">Guardar y Enviar</button>
       </div>
     </div>
   </div>
@@ -840,8 +857,13 @@
         <button class="inv-modal__close" onclick="closeCountModal()">&times;</button>
       </div>
       <div class="inv-modal__body">
-        <div id="countLines"></div>
-        <button class="btn btn--ghost btn--sm" onclick="addCountLine()" style="margin-top:var(--space-2);">+ Agregar Línea</button>
+        <div style="margin-bottom:10px;">
+          <input type="text" id="countScanInput" class="form-input" placeholder="Escanea código de barras / No. parte y Enter" style="width:100%;" onkeydown="if(event.key==='Enter'){event.preventDefault();Inventory.countAddByCode(this.value);this.value='';}" />
+          <p style="margin:6px 0 0;font-size:var(--text-caption);color:var(--color-text-muted);">Cada escaneo suma 1. Edita la cantidad si es necesario. Cantidades vacías = 0 (faltante).</p>
+        </div>
+        <div id="countLines" style="max-height:300px;overflow-y:auto;border:1px solid var(--color-border);border-radius:8px;">
+          <p style="padding:10px;color:var(--color-text-muted);font-size:var(--text-caption);">Sin productos escaneados</p>
+        </div>
         <div id="countResults" style="margin-top:var(--space-4);"></div>
       </div>
       <div class="inv-modal__footer">
@@ -913,7 +935,7 @@
           </div>
           <div class="inv-field">
             <label>Tipo de Publicación</label>
-            <select id="meliListingType">
+            <select id="meliListingType" onchange="scheduleMeliFeeEstimates()">
               <option value="gold_special">Gold Special</option>
               <option value="gold_pro">Gold Pro</option>
               <option value="bronze">Bronce (gratis)</option>
@@ -1040,6 +1062,12 @@
             <option value="reject">Rechazar filas sin compatibilidad</option>
           </select>
         </div>
+        <div style="margin-bottom:12px;">
+          <label style="display:flex;align-items:center;gap:8px;font-size:var(--text-body-sm);color:var(--color-text);cursor:pointer;">
+            <input type="checkbox" id="bulkImportSkipStock" />
+            No modificar existencias de productos existentes (solo actualizar datos y precios)
+          </label>
+        </div>
         <div style="font-size:var(--text-caption);color:var(--color-text-muted);background:var(--color-surface);padding:10px;border-radius:6px;">
           <strong>Columnas esperadas:</strong>
           <code style="display:block;margin-top:4px;word-break:break-all;">sku, name, brand, price, stock, cost, sku_secondary, description, category, make, model, year, engine, engine_code</code>
@@ -1054,6 +1082,42 @@
     </div>
   </div>
 
+  <!-- ══════════ Export Modal ══════════ -->
+  <div class="inv-modal-overlay" id="exportModal">
+    <div class="inv-modal" style="max-width:480px;">
+      <div class="inv-modal__header">
+        <h3>Exportar Inventario</h3>
+        <button class="inv-modal__close" onclick="document.getElementById('exportModal').classList.remove('is-open')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div style="display:flex;flex-direction:column;gap:12px;">
+          <div>
+            <label style="display:block;margin-bottom:4px;font-size:var(--text-caption);color:var(--color-text-muted);">Sucursal</label>
+            <select id="exportBranch" class="select-filter" style="width:100%;">
+              <option value="">Todas las sucursales — existencias totales</option>
+            </select>
+          </div>
+          <button class="btn btn--primary" onclick="exportFullInventory()" type="button" id="btnExportFull">
+            📦 Inventario completo (CSV)
+          </button>
+          <p style="margin:0;font-size:var(--text-caption);color:var(--color-text-muted);">
+            Descarga <strong>todos los productos</strong> con número de parte, SKU alterno, nombre, marca, categoría, precios (mostrador/taller/mayoreo), existencias totales, ubicación y código de barras. Compatible con la plantilla de importación: puedes editarlo y re-importarlo.
+          </p>
+          <hr style="border:none;border-top:1px solid var(--color-border);margin:4px 0;" />
+          <button class="btn btn--ghost" onclick="exportCurrentView()" type="button">
+            📄 Solo la vista actual (lo que se ve en pantalla)
+          </button>
+          <p style="margin:0;font-size:var(--text-caption);color:var(--color-text-muted);">
+            Exporta únicamente las filas y columnas visibles de la tabla actual (según página y filtros aplicados).
+          </p>
+        </div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="document.getElementById('exportModal').classList.remove('is-open')">Cerrar</button>
+      </div>
+    </div>
+  </div>
+
   <!-- Offline Banner -->
   <div id="offlineBanner" class="banner banner--warning" style="display:none;position:fixed;top:0;left:0;right:0;z-index:9999;border-radius:0;animation:none;">
     <span class="banner__icon"></span>
@@ -1062,12 +1126,12 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
   <script src="/pos/static/js/virtual-scroll.js?v=33" defer></script>
-  <script src="/pos/static/js/inventory.js?v=38" defer></script>
+  <script src="/pos/static/js/inventory.js?v=45" defer></script>
   <script src="/pos/static/js/offline-banner.js" defer></script>
   <script src="/pos/static/js/sync-engine.js" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
diff --git a/pos/templates/invoicing.html b/pos/templates/invoicing.html
index 17cfa13..8492a82 100644
--- a/pos/templates/invoicing.html
+++ b/pos/templates/invoicing.html
@@ -1138,7 +1138,7 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/login.html b/pos/templates/login.html
index 27f3d73..ea84d65 100644
--- a/pos/templates/login.html
+++ b/pos/templates/login.html
@@ -389,6 +389,8 @@
           var role = (result.data.employee.role || '').toLowerCase();
           if (role === 'workshop' || role === 'mechanic' || role === 'counter') {
             window.location.href = '/pos/workshop';
+          } else if (role === 'driver') {
+            window.location.href = '/pos/remission-notes';
           } else {
             window.location.href = '/pos/catalog';
           }
diff --git a/pos/templates/marketplace_external.html b/pos/templates/marketplace_external.html
index cef7973..3b8e93c 100644
--- a/pos/templates/marketplace_external.html
+++ b/pos/templates/marketplace_external.html
@@ -343,11 +343,11 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
-  <script src="/pos/static/js/marketplace_external.js?v=33" defer></script>
+  <script src="/pos/static/js/marketplace_external.js?v=35" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
 </body>
 </html>
diff --git a/pos/templates/pos.html b/pos/templates/pos.html
index 428ef59..56598e4 100644
--- a/pos/templates/pos.html
+++ b/pos/templates/pos.html
@@ -19,6 +19,9 @@
   <link rel="stylesheet" href="/pos/static/css/pos.css?v=35"></head>
 
 <body class="pos-shell" id="appBody">
+  <div id="offlineBanner" style="display:none;position:fixed;top:0;left:0;right:0;z-index:9999;padding:10px 16px;align-items:center;justify-content:center;gap:8px;font-size:var(--text-body-sm);">
+    <span id="offlineBannerText"></span>
+  </div>
 
   <!-- ================================================================
        STATUS BAR
@@ -63,6 +66,13 @@
             placeholder="Buscar por nombre, No. parte, codigo..."
             autocomplete="off" spellcheck="false" aria-label="Buscar productos" />
         </div>
+        <div class="search-wrap" style="max-width:260px;display:flex;gap:6px;">
+          <input class="search-input" type="text" id="vehicleLookup"
+            placeholder="Placa o VIN"
+            autocomplete="off" spellcheck="false" aria-label="Placa o VIN"
+            onkeydown="if(event.key==='Enter'){event.preventDefault();POS.vehicleLookup();}" />
+          <button class="btn-secondary-action" onclick="POS.vehicleLookup()" title="Ver piezas compatibles">🚗</button>
+        </div>
       </div>
 
       <!-- Search Results Dropdown -->
@@ -177,6 +187,15 @@
         <span class="margin-summary__value" id="avgMargin">--</span>
       </div>
 
+      <!-- Cross-sell suggestions (A10) -->
+      <div id="crossSellPanel" style="display:none;margin:6px 0;padding:8px 10px;border:1px dashed var(--color-border);border-radius:var(--radius-sm);background:var(--color-bg-base);">
+        <div style="display:flex;justify-content:space-between;align-items:center;font-size:var(--text-caption);font-weight:var(--font-weight-semibold);color:var(--color-text-muted);text-transform:uppercase;letter-spacing:.4px;">
+          <span>&iquest;Ya que est&aacute;s en eso&hellip;?</span>
+          <button type="button" title="Ocultar" onclick="POS.hideCrossSell()" style="background:transparent;border:none;color:var(--color-text-muted);cursor:pointer;font-size:14px;">&times;</button>
+        </div>
+        <div id="crossSellList" style="display:flex;flex-direction:column;gap:4px;margin-top:6px;"></div>
+      </div>
+
       <!-- Cart Footer -->
       <div class="cart-footer">
         <div class="totals-block">
@@ -224,6 +243,9 @@
           <button class="btn-secondary-action" onclick="POS.createLayaway()" title="Apartado (requiere cliente)">Apartado</button>
           <button class="btn-secondary-action" onclick="POS.createServiceOrder()" title="Orden de servicio (F7)">Orden Taller</button>
           <button class="btn-secondary-action" onclick="POS.showLastSale()" title="Ultima venta (F5)">Ult.Venta</button>
+          <span id="offlineQueueBadge" style="display:none;background:var(--color-warning);color:#fff;border-radius:999px;padding:2px 10px;font-weight:700;font-size:var(--text-caption);">0</span>
+          <button class="btn-secondary-action" onclick="POS.openReturnModal()" title="Devolución de venta">Devolución</button>
+          <button class="btn-secondary-action" onclick="POS.openLayawaysModal()" title="Apartados activos">Apartados</button>
           <button class="btn-secondary-action" onclick="POS.showCutZModal()" title="Corte Z - Cerrar caja">Corte Z</button>
           <button class="btn-secondary-action danger" id="btnCancelSale" onclick="POS.openCancelModal()" title="Cancelar (Esc)">Cancelar</button>
         </div>
@@ -325,7 +347,15 @@
           <label class="form-label">Monto recibido</label>
           <input type="number" class="form-input form-input-lg" id="cashReceived"
             placeholder="0.00" step="0.01" min="0" oninput="POS.updateChange()" />
-        </div>
+        
+          <div style="display:flex;align-items:center;gap:8px;margin-top:8px;">
+            <label style="font-size:var(--text-caption);color:var(--color-text-muted);">Moneda:</label>
+            <select id="payCurrency" class="form-input" style="width:90px;padding:4px 8px;" onchange="POS.updateChange()">
+              <option value="MXN">MXN $</option>
+              <option value="USD">USD</option>
+            </select>
+            <span id="usdRateHint" style="font-size:var(--text-caption);color:var(--color-text-muted);"></span>
+          </div></div>
         <div class="quick-amounts" id="quickAmounts">
           <!-- Populated dynamically -->
         </div>
@@ -416,6 +446,14 @@
         <span class="cfdi-hint" id="cfdiHint"></span>
       </div>
 
+      <!-- Repartidor (opcional) -->
+      <div class="form-group" style="margin-top: 12px;">
+        <label class="form-label" for="saleCourier">Repartidor (opcional)</label>
+        <select class="form-input" id="saleCourier">
+          <option value="">— Sin repartidor —</option>
+        </select>
+      </div>
+
       <!-- Footer -->
       <div class="modal-footer">
         <button class="btn btn-ghost" onclick="POS.closePaymentModal()">Cancelar</button>
@@ -729,11 +767,11 @@
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
   <script src="/pos/static/js/kiosk.js" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/push.js" defer></script>
   <script src="/pos/static/js/printer.js" defer></script>
-  <script src="/pos/static/js/pos.js?v=42" defer></script>
+  <script src="/pos/static/js/pos.js?v=46" defer></script>
 
   <script>
     // Cancel sale button wiring
@@ -798,7 +836,68 @@
 
   <script src="/pos/static/js/chat.js" defer></script>
   <script src="/pos/static/js/sync-engine.js" defer></script>
+  <script src="/pos/static/js/offline-banner.js" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
   <script src="/pos/static/js/pwa-install.js" defer></script>
+
+  <!-- ══════════ RETURN MODAL ══════════ -->
+  <div class="modal-overlay" id="returnModal">
+    <div class="modal-box" style="max-width:640px;">
+      <div class="modal-header">
+        <h3>Devolución de venta</h3>
+        <button class="btn-close" onclick="POS.closeReturnModal()">&times;</button>
+      </div>
+      <div class="modal-body">
+        <div style="display:flex;gap:8px;margin-bottom:12px;">
+          <input type="number" id="returnSaleId" class="form-input" placeholder="Folio de venta (ej. 123)" style="flex:1;" />
+          <button class="btn btn-primary" onclick="POS.searchReturnSale()">Buscar</button>
+        </div>
+        <div id="returnSaleInfo" style="display:none;margin-bottom:10px;font-size:var(--text-body-sm);color:var(--color-text-muted);"></div>
+        <div id="returnItemsList" style="display:none;max-height:280px;overflow-y:auto;border:1px solid var(--color-border);border-radius:8px;"></div>
+        <div style="margin-top:10px;">
+          <input type="text" id="returnNotes" class="form-input" placeholder="Notas (opcional)" />
+        </div>
+        <div id="returnResult" style="margin-top:10px;font-size:var(--text-body-sm);"></div>
+      </div>
+      <div class="modal-footer" id="returnFooter" style="display:none;">
+        <button class="btn btn-ghost" onclick="POS.closeReturnModal()">Cerrar</button>
+        <button class="btn btn-primary" onclick="POS.submitReturn()">Registrar devolución</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ LAYAWAYS MODAL ══════════ -->
+  <div class="modal-overlay" id="layawaysModal">
+    <div class="modal-box" style="max-width:720px;">
+      <div class="modal-header">
+        <h3>Apartados activos</h3>
+        <button class="btn-close" onclick="POS.closeLayawaysModal()">&times;</button>
+      </div>
+      <div class="modal-body">
+        <div id="layawaysList" style="max-height:340px;overflow-y:auto;">
+          <span style="color:var(--color-text-muted);font-size:var(--text-caption);">Cargando...</span>
+        </div>
+        <div id="layawayActions" style="display:none;margin-top:12px;border-top:1px solid var(--color-border);padding-top:12px;">
+          <div id="layawayDetail" style="font-size:var(--text-body-sm);margin-bottom:10px;"></div>
+          <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;">
+            <input type="number" id="layawayPayAmount" class="form-input" placeholder="Monto abono" style="width:140px;" />
+            <select id="layawayPayMethod" class="form-input" style="width:150px;">
+              <option value="efectivo">Efectivo</option>
+              <option value="tarjeta">Tarjeta</option>
+              <option value="transferencia">Transferencia</option>
+            </select>
+            <button class="btn btn-primary" onclick="POS.layawayPay()">Abonar</button>
+            <button class="btn btn-primary" onclick="POS.layawayComplete()" style="background:var(--color-success);">Liquidar</button>
+            <button class="btn btn-ghost" onclick="POS.layawayCancel()" style="color:var(--color-error);">Cancelar apartado</button>
+          </div>
+          <div id="layawayResult" style="margin-top:8px;font-size:var(--text-body-sm);"></div>
+        </div>
+      </div>
+      <div class="modal-footer">
+        <button class="btn btn-ghost" onclick="POS.closeLayawaysModal()">Cerrar</button>
+      </div>
+    </div>
+  </div>
+
 </body>
 </html>
diff --git a/pos/templates/quotations.html b/pos/templates/quotations.html
index 8d4e28d..c5342b8 100644
--- a/pos/templates/quotations.html
+++ b/pos/templates/quotations.html
@@ -15,7 +15,7 @@
 <body>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
 
diff --git a/pos/templates/remission_notes.html b/pos/templates/remission_notes.html
index 96673d2..8f6603b 100644
--- a/pos/templates/remission_notes.html
+++ b/pos/templates/remission_notes.html
@@ -227,7 +227,7 @@
   </div>
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
 
   <script>
diff --git a/pos/templates/reports.html b/pos/templates/reports.html
index 889f070..8ad7373 100644
--- a/pos/templates/reports.html
+++ b/pos/templates/reports.html
@@ -406,7 +406,7 @@
   <!-- End app-shell -->
 
   <script src="/pos/static/js/i18n.js?v=39" defer></script>
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
   <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/storefront.html b/pos/templates/storefront.html
new file mode 100644
index 0000000..02519de
--- /dev/null
+++ b/pos/templates/storefront.html
@@ -0,0 +1,215 @@
+<!DOCTYPE html>
+<html lang="es">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <title>{{ business_name }} — Refacciones en línea</title>
+  <meta name="description" content="Compra refacciones y accesorios con stock real. Pedidos en línea con confirmación inmediata.">
+  <style>
+    :root { --brand:#e11d48; --bg:#f6f7f9; --card:#fff; --border:#e5e7eb; --text:#111827; --muted:#6b7280; }
+    * { box-sizing: border-box; }
+    body { margin:0; font-family: system-ui, -apple-system, sans-serif; background:var(--bg); color:var(--text); }
+    header { background:var(--card); border-bottom:1px solid var(--border); padding:14px 20px; display:flex; align-items:center; gap:14px; position:sticky; top:0; z-index:5; }
+    header .logo { font-weight:800; font-size:1.15rem; color:var(--brand); }
+    header .search { flex:1; max-width:560px; display:flex; gap:8px; }
+    header input { flex:1; padding:10px 14px; border:1px solid var(--border); border-radius:10px; font-size:1rem; }
+    button { cursor:pointer; border:none; border-radius:10px; padding:10px 16px; font-size:0.95rem; font-weight:600; }
+    .btn-brand { background:var(--brand); color:#fff; }
+    .btn-ghost { background:transparent; border:1px solid var(--border); }
+    main { max-width:1000px; margin:0 auto; padding:20px; }
+    .grid { display:grid; grid-template-columns:repeat(auto-fill,minmax(220px,1fr)); gap:14px; }
+    .card { background:var(--card); border:1px solid var(--border); border-radius:14px; overflow:hidden; display:flex; flex-direction:column; }
+    .card img { width:100%; height:150px; object-fit:cover; background:#f0f0f0; }
+    .card .body { padding:12px; flex:1; display:flex; flex-direction:column; gap:6px; }
+    .name { font-size:0.92rem; font-weight:600; line-height:1.3; }
+    .sku { font-family:ui-monospace,monospace; font-size:0.75rem; color:var(--muted); }
+    .price { font-size:1.1rem; font-weight:800; color:var(--brand); }
+    .stock { font-size:0.75rem; }
+    .in { color:#059669; } .out { color:#dc2626; }
+    .card button { margin-top:auto; background:var(--brand); color:#fff; }
+    .card button:disabled { background:#d1d5db; cursor:not-allowed; }
+    .empty { text-align:center; color:var(--muted); padding:40px 0; }
+    /* carrito flotante */
+    #cartBtn { position:fixed; bottom:20px; right:20px; background:var(--brand); color:#fff; border-radius:999px; padding:14px 20px; font-size:1rem; box-shadow:0 8px 24px rgba(0,0,0,.18); }
+    #cartCount { background:#fff; color:var(--brand); border-radius:999px; padding:1px 8px; font-weight:800; margin-left:6px; }
+    .overlay { position:fixed; inset:0; background:rgba(0,0,0,.45); display:none; align-items:center; justify-content:center; padding:16px; z-index:10; }
+    .overlay.open { display:flex; }
+    .modal { background:#fff; border-radius:16px; max-width:460px; width:100%; max-height:88vh; overflow:auto; padding:20px; }
+    .modal h3 { margin:0 0 12px; }
+    .line { display:flex; justify-content:space-between; gap:8px; padding:8px 0; border-bottom:1px solid var(--border); font-size:0.9rem; }
+    .field { margin:10px 0; }
+    .field label { display:block; font-size:0.8rem; color:var(--muted); margin-bottom:4px; }
+    .field input, .field textarea { width:100%; padding:10px; border:1px solid var(--border); border-radius:10px; font-size:0.95rem; }
+    .total { font-size:1.15rem; font-weight:800; text-align:right; margin:10px 0; }
+    .ok { text-align:center; padding:20px 0; }
+    .ok .big { font-size:3rem; }
+  </style>
+</head>
+<body>
+<header>
+  <div class="logo">{{ business_name }}</div>
+  <div class="search">
+    <input id="q" type="search" placeholder="Buscar refacción, No. de parte..." />
+    <button class="btn-brand" onclick="doSearch(1)">Buscar</button>
+  </div>
+  <button class="btn-ghost" onclick="openCart()">🛒 <span id="cartQty">0</span></button>
+</header>
+<main>
+  <div class="grid" id="results"><div class="empty">Escribe para buscar refacciones...</div></div>
+  <div style="text-align:center;margin:18px 0;">
+    <button class="btn-ghost" id="moreBtn" style="display:none;" onclick="doSearch(page+1)">Ver más</button>
+  </div>
+</main>
+
+<button id="cartBtn" onclick="openCart()">🛒 Carrito <span id="cartQty2">0</span></button>
+
+<div class="overlay" id="cartOverlay">
+  <div class="modal">
+    <h3>Tu pedido</h3>
+    <div id="cartLines"></div>
+    <div class="total" id="cartTotal"></div>
+    <div class="field"><label>Nombre *</label><input id="cName" /></div>
+    <div class="field"><label>Teléfono (WhatsApp) *</label><input id="cPhone" type="tel" placeholder="10 dígitos" /></div>
+    <div class="field"><label>Notas</label><textarea id="cNotes" rows="2"></textarea></div>
+    <div class="field"><label style="display:flex;gap:8px;align-items:center;"><input type="checkbox" id="cDelivery" /> Requiero envío a domicilio</label></div>
+    <div id="orderMsg" style="font-size:0.9rem;"></div>
+    <div style="display:flex;gap:10px;margin-top:12px;">
+      <button class="btn-ghost" style="flex:1;" onclick="closeCart()">Seguir comprando</button>
+      <button class="btn-brand" style="flex:2;" id="orderBtn" onclick="submitOrder()">Hacer pedido</button>
+    </div>
+  </div>
+</div>
+
+<script>
+var BUSINESS = "{{ business_name }}";
+var cart = [];
+try { cart = JSON.parse(localStorage.getItem('store_cart') || '[]'); } catch(e) {}
+var page = 0, lastQ = '';
+
+function saveCart() {
+  localStorage.setItem('store_cart', JSON.stringify(cart));
+  var n = cart.reduce(function (a, l) { return a + l.quantity; }, 0);
+  document.getElementById('cartQty').textContent = n;
+  document.getElementById('cartQty2').textContent = n;
+}
+
+function renderResults(items, append) {
+  var el = document.getElementById('results');
+  var html = items.map(function (it) {
+    var hasStock = it.stock > 0;
+    return '<div class="card">'
+      + (it.image_url ? '<img src="' + escAttr(it.image_url) + '" loading="lazy" onerror="this.style.display=\'none\'">' : '')
+      + '<div class="body">'
+      + '<div class="name">' + esc(it.name) + '</div>'
+      + '<div class="sku">' + esc(it.part_number) + (it.brand ? ' · ' + esc(it.brand) : '') + '</div>'
+      + '<div class="price">' + money(it.price) + '</div>'
+      + '<div class="stock ' + (hasStock ? 'in' : 'out') + '">' + (hasStock ? 'Disponible (' + it.stock + ')' : 'Sin stock') + '</div>'
+      + '<button ' + (hasStock ? '' : 'disabled') + ' onclick="addToCart(' + it.id + ')">Agregar</button>'
+      + '</div></div>';
+  }).join('');
+  if (append) el.innerHTML += html; else el.innerHTML = html || '<div class="empty">Sin resultados</div>';
+}
+
+function money(n) { return '$' + (parseFloat(n) || 0).toLocaleString('es-MX', { minimumFractionDigits: 2 }); }
+function esc(s) {
+  var d = document.createElement('div'); d.textContent = s == null ? '' : String(s); return d.innerHTML;
+}
+function escAttr(s) { return esc(s).replace(/"/g, '&quot;'); }
+
+function doSearch(p) {
+  page = p || 1;
+  lastQ = document.getElementById('q').value.trim();
+  fetch('/pos/api/store/search?q=' + encodeURIComponent(lastQ) + '&page=' + page)
+    .then(function (r) { return r.json(); })
+    .then(function (d) {
+      renderResults(d.items || [], page > 1);
+      document.getElementById('moreBtn').style.display = (d.page < d.total_pages) ? '' : 'none';
+    }).catch(function () {
+      document.getElementById('results').innerHTML = '<div class="empty">Error de conexión. Intenta de nuevo.</div>';
+    });
+}
+document.getElementById('q').addEventListener('keydown', function (e) {
+  if (e.key === 'Enter') doSearch(1);
+});
+
+function addToCart(id) {
+  // buscar el item en el último render guardado
+  var it = window._lastItems && window._lastItems.find(function (x) { return x.id === id; });
+  if (!it) return;
+  var line = cart.find(function (l) { return l.inventory_id === id; });
+  if (line) line.quantity += 1;
+  else cart.push({ inventory_id: id, name: it.name, part_number: it.part_number, price: it.price, quantity: 1 });
+  saveCart();
+}
+
+function renderCart() {
+  var el = document.getElementById('cartLines');
+  var total = 0;
+  el.innerHTML = cart.length ? cart.map(function (l, i) {
+    total += l.price * l.quantity;
+    return '<div class="line"><span>' + esc(l.name) + ' × ' + l.quantity + '</span>'
+      + '<span><button class="btn-ghost" style="padding:2px 8px;" onclick="cartQty(' + i + ',-1)">−</button> '
+      + '<button class="btn-ghost" style="padding:2px 8px;" onclick="cartQty(' + i + ',1)">+</button> '
+      + money(l.price * l.quantity) + '</span></div>';
+  }).join('') : '<div class="empty">Carrito vacío</div>';
+  document.getElementById('cartTotal').textContent = 'Total: ' + money(total);
+}
+function cartQty(i, d) {
+  cart[i].quantity += d;
+  if (cart[i].quantity <= 0) cart.splice(i, 1);
+  saveCart(); renderCart();
+}
+function openCart() { saveCart(); renderCart(); document.getElementById('cartOverlay').classList.add('open'); }
+function closeCart() { document.getElementById('cartOverlay').classList.remove('open'); }
+
+function submitOrder() {
+  var btn = document.getElementById('orderBtn');
+  btn.disabled = true;
+  fetch('/pos/api/store/order', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({
+      customer_name: document.getElementById('cName').value.trim(),
+      customer_phone: document.getElementById('cPhone').value.trim(),
+      notes: document.getElementById('cNotes').value.trim(),
+      delivery: document.getElementById('cDelivery').checked,
+      items: cart.map(function (l) { return { inventory_id: l.inventory_id, quantity: l.quantity }; }),
+    }),
+  }).then(function (r) { return r.json(); }).then(function (d) {
+    if (d.ok) {
+      cart = []; saveCart();
+      document.querySelector('#cartOverlay .modal').innerHTML =
+        '<div class="ok"><div class="big">✅</div><h3>¡Pedido #' + d.order_id + ' registrado!</h3>'
+        + '<p>Total: ' + money(d.total) + '</p><p>' + esc(d.message) + '</p>'
+        + '<button class="btn-brand" onclick="closeCart()">Aceptar</button></div>';
+    } else {
+      document.getElementById('orderMsg').innerHTML = '<span style="color:#dc2626;">' + esc(d.error || 'Error') + '</span>';
+      btn.disabled = false;
+    }
+  }).catch(function () {
+    document.getElementById('orderMsg').innerHTML = '<span style="color:#dc2626;">Error de conexión</span>';
+    btn.disabled = false;
+  });
+}
+
+// search guarda los items para addToCart
+(function () {
+  var orig = doSearch;
+  doSearch = function (p) {
+    orig(p);
+    setTimeout(function () {
+      window._lastItems = (window._lastItems || []).slice(); // noop keep
+    }, 0);
+  };
+})();
+var _origRender = renderResults;
+renderResults = function (items, append) {
+  window._lastItems = items;
+  _origRender(items, append);
+};
+
+saveCart();
+doSearch(1);
+</script>
+</body>
+</html>
diff --git a/pos/templates/supplier_catalog.html b/pos/templates/supplier_catalog.html
index f5ff07f..e4892d3 100644
--- a/pos/templates/supplier_catalog.html
+++ b/pos/templates/supplier_catalog.html
@@ -126,7 +126,7 @@
     </div>
   </div>
 
-  <script src="/pos/static/js/app-init.js?v=8" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
   <script src="/pos/static/js/sidebar.js?v=46" defer></script>
   <script src="/pos/static/js/supplier_catalog.js?v=33" defer></script>
   <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
diff --git a/pos/templates/whatsapp.html b/pos/templates/whatsapp.html
index ff925ae..342f65d 100644
--- a/pos/templates/whatsapp.html
+++ b/pos/templates/whatsapp.html
@@ -124,6 +124,93 @@
   </div>
 </div>
 
+
+<div style="max-width:720px;margin:16px auto;padding:16px;border:1px solid var(--color-border);border-radius:12px;">
+  <h3 style="margin:0 0 4px;">WA CRM — Meta Cloud API (oficial)</h3>
+  <p style="margin:0 0 12px;font-size:var(--text-caption);color:var(--color-text-muted);">
+    Un número por refaccionaria. Credenciales de Meta Business (phone number ID + token permanente).
+    El proveedor Baileys queda como respaldo.</p>
+  <div style="display:grid;grid-template-columns:1fr 1fr;gap:10px;">
+    <div>
+      <label style="font-size:var(--text-caption);">Proveedor</label>
+      <select id="waProvider" class="form-input">
+        <option value="baileys">Baileys (bridge actual)</option>
+        <option value="meta">Meta Cloud API (WA CRM)</option>
+      </select>
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">Phone Number ID</label>
+      <input id="waPnid" class="form-input" placeholder="ej. 123456789012345" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">Access Token</label>
+      <input id="waToken" type="password" class="form-input" placeholder="(dejar vacío = sin cambio)" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">App Secret</label>
+      <input id="waSecret" type="password" class="form-input" placeholder="(dejar vacío = sin cambio)" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">Verify Token (webhook)</label>
+      <input id="waVerify" class="form-input" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">WA CRM — API base</label>
+      <input id="waApiBase" class="form-input" placeholder="http://192.168.10.91:3010" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">WA CRM — API key (wacrm_live_…)</label>
+      <input id="waApiKey" type="password" class="form-input" placeholder="(dejar vacío = sin cambio)" />
+    </div>
+    <div>
+      <label style="font-size:var(--text-caption);">URL pública del POS (para imágenes)</label>
+      <input id="waPublicBase" class="form-input" placeholder="https://<subdominio>.nexusautoparts.com.mx" />
+    </div>
+    <div style="display:flex;align-items:flex-end;">
+      <button class="btn btn--primary" onclick="saveWaMeta()" style="width:100%;">Guardar WA CRM</button>
+    </div>
+  </div>
+  <div id="waMetaStatus" style="margin-top:8px;font-size:var(--text-caption);color:var(--color-text-muted);"></div>
+</div>
+<script>
+(async function loadWaMeta() {
+  try {
+    const t = localStorage.getItem('pos_token');
+    const r = await fetch('/pos/api/config/whatsapp', { headers: { 'Authorization': 'Bearer ' + t } });
+    if (!r.ok) return;
+    const d = await r.json();
+    document.getElementById('waProvider').value = d.provider || 'baileys';
+    document.getElementById('waPnid').value = d.phone_number_id || '';
+    document.getElementById('waVerify').value = d.verify_token || '';
+    document.getElementById('waApiBase').value = d.api_base || '';
+    document.getElementById('waPublicBase').value = d.public_base || '';
+    document.getElementById('waMetaStatus').textContent =
+      (d.has_access_token ? '✓ Token guardado. ' : 'Sin token. ') +
+      (d.has_app_secret ? '✓ App secret guardado.' : 'Sin app secret (webhook sin validación HMAC).');
+  } catch (e) { /* noop */ }
+})();
+async function saveWaMeta() {
+  const t = localStorage.getItem('pos_token');
+  const body = {
+    provider: document.getElementById('waProvider').value,
+    phone_number_id: document.getElementById('waPnid').value.trim(),
+    verify_token: document.getElementById('waVerify').value.trim(),
+    api_base: document.getElementById('waApiBase').value.trim(),
+    api_key: document.getElementById('waApiKey').value.trim(),
+    public_base: document.getElementById('waPublicBase').value.trim(),
+    access_token: document.getElementById('waToken').value.trim(),
+    app_secret: document.getElementById('waSecret').value.trim(),
+  };
+  const r = await fetch('/pos/api/config/whatsapp', {
+    method: 'PUT', headers: { 'Authorization': 'Bearer ' + t, 'Content-Type': 'application/json' },
+    body: JSON.stringify(body),
+  });
+  const el = document.getElementById('waMetaStatus');
+  if (r.ok) { el.textContent = '✓ Configuración guardada'; el.style.color = 'var(--color-success)'; }
+  else { el.textContent = 'Error guardando'; el.style.color = 'var(--color-error)'; }
+}
+</script>
+
 <!-- Theme engine -->
 <script>
 function posSetTheme(t){document.documentElement.setAttribute('data-theme',t);localStorage.setItem('pos_theme',t);}
@@ -132,7 +219,7 @@ function posLogout(){localStorage.removeItem('pos_token');window.location.href='
 
 <!-- Sidebar -->
 <script src="/pos/static/js/i18n.js?v=39" defer></script>
-<script src="/pos/static/js/app-init.js?v=8" defer></script>
+<script src="/pos/static/js/app-init.js?v=9" defer></script>
 <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
 <script src="/pos/static/js/whatsapp2.js?v=33" defer></script>
 <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
diff --git a/pos/templates/workshop.html b/pos/templates/workshop.html
index cbd350e..da8bd27 100644
--- a/pos/templates/workshop.html
+++ b/pos/templates/workshop.html
@@ -494,7 +494,7 @@
 </div>
 
 <script src="/pos/static/js/i18n.js?v=39" defer></script>
-<script src="/pos/static/js/app-init.js?v=8" defer></script>
+<script src="/pos/static/js/app-init.js?v=9" defer></script>
 <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
 <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
 <script src="/pos/static/js/sidebar.js?v=46" defer></script>
diff --git a/pos/templates/yonke.html b/pos/templates/yonke.html
new file mode 100644
index 0000000..8d7d3b7
--- /dev/null
+++ b/pos/templates/yonke.html
@@ -0,0 +1,1462 @@
+<!DOCTYPE html>
+<html lang="es">
+<head>
+  <script>/*pos_theme_early*/(function(){var t=localStorage.getItem("pos_theme")||"industrial";document.documentElement.setAttribute("data-theme",t);})()</script>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Yonke — Nexus Autoparts POS</title>
+  <link rel="stylesheet" href="/pos/static/css/chat.css" />
+  <link rel="stylesheet" href="/pos/static/css/tokens.css" />
+  <link rel="stylesheet" href="/pos/static/css/common.css" />
+  <link rel="stylesheet" href="/pos/static/css/pos-ui.css?v=33" />
+  <link rel="stylesheet" href="/pos/static/css/sidebar.css" />
+  <link rel="stylesheet" href="/pos/static/css/pos-glass.css" />
+  <link rel="stylesheet" href="/pos/static/css/inventory.css?v=34" />
+  <link rel="manifest" href="/pos/static/pwa/manifest.json" />
+  <meta name="theme-color" content="#F5A623" />
+  <link rel="shortcut icon" type="image/png" href="/pos/static/pwa/icon-192.png" />
+
+  <style>
+    /* ─── Yonke: page-specific bits ─────────────────────────────────────── */
+
+    .ynk-thumb {
+      width: 44px; height: 44px; object-fit: cover; border-radius: var(--radius-sm);
+      background: var(--color-surface-2); border: 1px solid var(--color-border); cursor: pointer;
+      display: block;
+    }
+    .ynk-thumb-slot { display: inline-block; cursor: pointer; line-height: 0; }
+    .ynk-thumb--empty {
+      display: flex; align-items: center; justify-content: center;
+      color: var(--color-text-muted); font-size: 9px; text-transform: uppercase;
+      letter-spacing: var(--tracking-wide); line-height: 1.15; text-align: center;
+    }
+
+    .ynk-grade {
+      display: inline-flex; align-items: center; justify-content: center;
+      width: 22px; height: 22px; border-radius: 50%; font-weight: 700; font-size: 11px;
+      border: 1px solid transparent;
+    }
+    .ynk-grade--A { background: rgba(34,197,94,.15);  color: var(--color-success); border-color: rgba(34,197,94,.35); }
+    .ynk-grade--B { background: rgba(59,130,246,.15); color: var(--color-info, #3b82f6); border-color: rgba(59,130,246,.35); }
+    .ynk-grade--C { background: rgba(234,179,8,.15);  color: #eab308; border-color: rgba(234,179,8,.35); }
+    .ynk-grade--D { background: rgba(239,68,68,.15);  color: var(--color-error); border-color: rgba(239,68,68,.35); }
+    .ynk-grade--none { color: var(--color-text-muted); }
+
+    .ynk-uniq {
+      display: inline-block; margin-left: 4px; padding: 1px 5px; border-radius: var(--radius-full);
+      background: var(--color-primary-muted); color: var(--color-primary);
+      font-size: 0.625rem; font-weight: 700; letter-spacing: var(--tracking-wide);
+      text-transform: uppercase; vertical-align: middle;
+    }
+
+    .ynk-seg {
+      display: inline-flex; border: 1px solid var(--color-border);
+      border-radius: var(--radius-md); overflow: hidden; background: var(--color-bg-elevated);
+    }
+    .ynk-seg button {
+      border: none; background: transparent; color: var(--color-text-muted); cursor: pointer;
+      padding: 0 var(--space-4); height: 36px; font-family: var(--font-body);
+      font-size: var(--text-body-sm); font-weight: var(--font-weight-semibold);
+      letter-spacing: var(--tracking-wide); white-space: nowrap;
+    }
+    .ynk-seg button + button { border-left: 1px solid var(--color-border); }
+    .ynk-seg button:hover { color: var(--color-text-primary); background: var(--color-surface-2); }
+    .ynk-seg button.is-active { background: var(--color-primary); color: var(--color-text-inverse); }
+
+    .ynk-sku { font-family: var(--font-mono); font-weight: 700; color: var(--color-primary); }
+
+    .ynk-hint { font-size: var(--text-caption); color: var(--color-text-muted); }
+
+    .ynk-drop {
+      border: 1px dashed var(--color-border); border-radius: var(--radius-md);
+      padding: var(--space-4); text-align: center; background: var(--color-surface-1);
+    }
+
+    .ynk-photo-grid {
+      display: grid; grid-template-columns: repeat(auto-fill, minmax(88px, 1fr));
+      gap: var(--space-2); margin-top: var(--space-2);
+    }
+    .ynk-photo {
+      position: relative; aspect-ratio: 1 / 1; border-radius: var(--radius-md);
+      overflow: hidden; border: 1px solid var(--color-border); background: var(--color-surface-2);
+    }
+    .ynk-photo img { width: 100%; height: 100%; object-fit: cover; display: block; }
+    .ynk-photo__remove {
+      position: absolute; top: 3px; right: 3px; width: 20px; height: 20px; padding: 0;
+      border: none; border-radius: 50%; cursor: pointer; line-height: 1;
+      background: rgba(0,0,0,.65); color: #fff; font-size: 13px;
+    }
+
+    .ynk-empty {
+      padding: var(--space-6); text-align: center; color: var(--color-text-muted);
+      font-size: var(--text-body-sm);
+    }
+
+    .ynk-summary-card {
+      background: var(--color-surface-1); border: 1px solid var(--color-border);
+      border-radius: var(--radius-lg); padding: var(--space-4);
+    }
+    .ynk-summary-card h4 {
+      margin: 0 0 var(--space-3); font-size: var(--text-caption);
+      letter-spacing: var(--tracking-widest); text-transform: uppercase;
+      color: var(--color-text-muted);
+    }
+    .ynk-kv {
+      display: flex; justify-content: space-between; gap: var(--space-3);
+      padding: 5px 0; border-bottom: 1px dashed var(--color-border);
+      font-size: var(--text-body-sm);
+    }
+    .ynk-kv:last-child { border-bottom: none; }
+    .ynk-kv__k { color: var(--color-text-muted); }
+    .ynk-kv__v { color: var(--color-text-primary); font-weight: var(--font-weight-semibold); text-align: right; }
+
+    .ynk-save-result { margin-top: var(--space-3); min-height: 1.5em; font-size: var(--text-body-sm); }
+    .ynk-ok  { color: var(--color-success); }
+    .ynk-err { color: var(--color-error); }
+    .ynk-warn{ color: #eab308; }
+
+    .ynk-rep-grid {
+      display: grid; grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
+      gap: var(--space-3); align-items: start;
+    }
+    .ynk-rep-grid > .ynk-hint { grid-column: 1 / -1; }
+    .ynk-link { color: var(--color-primary); text-decoration: underline; word-break: break-all; }
+
+    /* ─── Mayoreo B2B ─────────────────────────────────────────────────── */
+    .ynk-b2b-help {
+      background: var(--color-primary-muted); border: 1px solid rgba(245,166,35,.28);
+      border-radius: var(--radius-md); padding: var(--space-2) var(--space-3);
+      font-size: var(--text-caption); color: var(--color-text-primary);
+      margin-bottom: var(--space-3); line-height: 1.5;
+    }
+    .ynk-b2b-grid {
+      display: grid; grid-template-columns: repeat(auto-fill, minmax(210px, 1fr));
+      gap: var(--space-3);
+    }
+    .ynk-b2b-card {
+      display: flex; flex-direction: column; overflow: hidden;
+      background: var(--color-surface-1); border: 1px solid var(--color-border);
+      border-radius: var(--radius-lg);
+    }
+    .ynk-b2b-card__img {
+      width: 100%; aspect-ratio: 4 / 3; object-fit: cover; display: block;
+      background: var(--color-surface-2); border-bottom: 1px solid var(--color-border);
+    }
+    .ynk-b2b-card__img--empty {
+      display: flex; align-items: center; justify-content: center;
+      color: var(--color-text-muted); font-size: 9px; text-transform: uppercase;
+      letter-spacing: var(--tracking-wide);
+    }
+    .ynk-b2b-card__body {
+      display: flex; flex-direction: column; gap: 5px; flex: 1;
+      padding: var(--space-3);
+    }
+    .ynk-b2b-card__name {
+      font-weight: var(--font-weight-semibold); font-size: var(--text-body-sm);
+      color: var(--color-text-primary);
+    }
+    .ynk-b2b-card__meta {
+      font-size: var(--text-caption); color: var(--color-text-muted);
+      display: flex; align-items: center; gap: 5px;
+    }
+    .ynk-b2b-card__price {
+      font-family: var(--font-mono); font-weight: 700;
+      color: var(--color-primary); font-size: 1.05rem;
+    }
+    .ynk-b2b-card__foot { margin-top: auto; padding-top: var(--space-2); }
+    .ynk-b2b-price-input { width: 110px; text-align: right; }
+    .ynk-b2b-actions { display: flex; flex-wrap: wrap; gap: var(--space-2); }
+  </style>
+</head>
+
+<body>
+
+  <!-- =========================================================================
+       THEME SWITCHER BAR
+       ========================================================================= -->
+
+  <header class="theme-bar" role="banner">
+    <div class="theme-bar__left">
+      <div class="theme-bar__store">
+        <span class="theme-bar__dot"></span>
+        Nexus Autoparts
+      </div>
+      <div class="theme-bar__sep"></div>
+      <span class="theme-bar__label">Yonke &mdash; Partes usadas</span>
+    </div>
+    <div class="theme-bar__right">
+      <span class="theme-bar__label">Tema:</span>
+      <button class="theme-btn theme-btn--industrial is-active" data-theme-target="industrial" onclick="setTheme('industrial')">
+        <span class="theme-btn__swatch"></span>
+        Industrial
+      </button>
+      <button class="theme-btn theme-btn--modern" data-theme-target="modern" onclick="setTheme('modern')">
+        <span class="theme-btn__swatch"></span>
+        Moderno
+      </button>
+    </div>
+  </header>
+
+  <!-- =========================================================================
+       APP SHELL
+       ========================================================================= -->
+
+  <div class="app-shell">
+
+    <!-- Sidebar is replaced/injected by sidebar.js -->
+    <aside class="sidebar" id="sidebar" role="navigation" aria-label="Navegación principal"></aside>
+
+    <main class="main" role="main">
+
+      <!-- Page Header -->
+      <div class="page-header">
+        <div class="page-header__title-group">
+          <span class="page-header__eyebrow">Deshuesadero &middot; Partes usadas</span>
+          <h1 class="page-header__title">Nexus Yonke</h1>
+        </div>
+        <div class="page-header__actions">
+          <button class="btn btn--ghost" onclick="switchTab('donador')">
+            <svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+            Buscar donador
+          </button>
+          <button class="btn btn--ghost" onclick="ynkRefreshPieces()">
+            <svg viewBox="0 0 24 24"><polyline points="23 4 23 10 17 10"/><path d="M20.49 15a9 9 0 1 1-.38-4.93"/></svg>
+            Sincronizar
+          </button>
+          <button class="btn btn--primary" onclick="switchTab('nueva')">
+            <svg viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+            Nueva pieza
+          </button>
+        </div>
+      </div>
+
+      <!-- Summary Cards -->
+      <div class="summary-strip">
+        <div class="summary-card">
+          <div class="summary-card__icon">
+            <svg viewBox="0 0 24 24"><path d="M21 16V8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16z"/><polyline points="3.27 6.96 12 12.01 20.73 6.96"/><line x1="12" y1="22.08" x2="12" y2="12"/></svg>
+          </div>
+          <div class="summary-card__body">
+            <div class="summary-card__label">Piezas usadas</div>
+            <div class="summary-card__value" id="ynkStatPieces">--</div>
+            <div class="summary-card__sub">En catálogo</div>
+          </div>
+        </div>
+
+        <div class="summary-card">
+          <div class="summary-card__icon summary-card__icon--time">
+            <svg viewBox="0 0 24 24"><circle cx="12" cy="12" r="10"/><path d="M12 8v4l3 2"/></svg>
+          </div>
+          <div class="summary-card__body">
+            <div class="summary-card__label">Donadores</div>
+            <div class="summary-card__value" id="ynkStatDonors">--</div>
+            <div class="summary-card__sub">Vehículos desarmados</div>
+          </div>
+        </div>
+
+        <div class="summary-card">
+          <div class="summary-card__icon summary-card__icon--value">
+            <svg viewBox="0 0 24 24"><line x1="12" y1="1" x2="12" y2="23"/><path d="M17 5H9.5a3.5 3.5 0 0 0 0 7h5a3.5 3.5 0 0 1 0 7H6"/></svg>
+          </div>
+          <div class="summary-card__body">
+            <div class="summary-card__label">Piezas en consigna</div>
+            <div class="summary-card__value" id="ynkStatConsignPieces">--</div>
+            <div class="summary-card__sub">Propiedad de terceros</div>
+          </div>
+        </div>
+
+        <div class="summary-card">
+          <div class="summary-card__icon summary-card__icon--alert">
+            <svg viewBox="0 0 24 24"><path d="M20 21v-2a4 4 0 0 0-4-4H8a4 4 0 0 0-4 4v2"/><circle cx="12" cy="7" r="4"/></svg>
+          </div>
+          <div class="summary-card__body">
+            <div class="summary-card__label">Consignaciones</div>
+            <div class="summary-card__value" id="ynkStatConsignments">--</div>
+            <div class="summary-card__sub"><span id="ynkStatConsignmentsSub">Abiertas</span></div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Tabs Row -->
+      <div class="tabs-row" role="tablist" aria-label="Módulos de Yonke">
+        <button class="tab-btn is-active" role="tab" aria-selected="true"  aria-controls="panel-piezas"        onclick="switchTab('piezas')">
+          Piezas usadas <span class="tab-btn__badge" id="badge-piezas">0</span>
+        </button>
+        <button class="tab-btn" role="tab" aria-selected="false" aria-controls="panel-nueva"         onclick="switchTab('nueva')">
+          Nueva pieza
+        </button>
+        <button class="tab-btn" role="tab" aria-selected="false" aria-controls="panel-donador"       onclick="switchTab('donador')">
+          Por donador <span class="tab-btn__badge" id="badge-donadores">0</span>
+        </button>
+        <button class="tab-btn" role="tab" aria-selected="false" aria-controls="panel-consignaciones" onclick="switchTab('consignaciones')">
+          Consignaciones <span class="tab-btn__badge" id="badge-consignaciones">0</span>
+        </button>
+        <button class="tab-btn" role="tab" aria-selected="false" aria-controls="panel-b2b" onclick="switchTab('b2b')" title="Mayoreo entre negocios: compra y vende piezas usadas al mayoreo">
+          Mayoreo B2B <span class="tab-btn__badge" id="badge-b2b">0</span>
+        </button>
+        <button class="tab-btn" role="tab" aria-selected="false" aria-controls="panel-reportes" onclick="switchTab('reportes')">
+          Reportes
+        </button>
+      </div>
+
+      <!-- Tab Panels -->
+      <div class="tab-panels" id="tab-panels">
+
+        <!-- ===================================================================
+             TAB 1 — PIEZAS USADAS
+             =================================================================== -->
+        <div class="tab-panel is-active" id="panel-piezas" role="tabpanel">
+
+          <div class="toolbar">
+            <div class="search-box">
+              <svg viewBox="0 0 24 24" stroke-linecap="round"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+              <input type="text" id="ynkQ" placeholder="Buscar por nombre, No. parte, SKU o VIN…" autocomplete="off" />
+            </div>
+            <select class="select-filter" id="ynkFiltCondition">
+              <option value="">Usadas y reconstruidas</option>
+              <option value="usado">Usado</option>
+              <option value="reconstruido">Reconstruido</option>
+            </select>
+            <select class="select-filter" id="ynkFiltGrade">
+              <option value="">Todo grado</option>
+              <option value="A">Grado A</option>
+              <option value="B">Grado B</option>
+              <option value="C">Grado C</option>
+              <option value="D">Grado D</option>
+            </select>
+            <select class="select-filter" id="ynkFiltOwnership">
+              <option value="">Propiedad: toda</option>
+              <option value="propio">Propio</option>
+              <option value="consigna">Consigna</option>
+            </select>
+            <select class="select-filter" id="ynkFiltPerPage">
+              <option value="25">25 / pág.</option>
+              <option value="50" selected>50 / pág.</option>
+              <option value="100">100 / pág.</option>
+            </select>
+            <div class="toolbar__spacer"></div>
+            <button class="btn btn--ghost btn--sm" onclick="ynkResetPieceFilters()">Limpiar</button>
+            <button class="btn btn--ghost btn--sm" onclick="ynkOpenImportModal()">
+              <svg viewBox="0 0 24 24"><path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><polyline points="17 8 12 3 7 8"/><line x1="12" y1="3" x2="12" y2="15"/></svg>
+              Importar CSV
+            </button>
+            <button class="btn btn--primary btn--sm" onclick="switchTab('nueva')">
+              <svg viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+              Nueva pieza
+            </button>
+          </div>
+
+          <div class="table-wrapper">
+            <table class="data-table" id="ynkPiecesTable">
+              <thead>
+                <tr>
+                  <th style="width:60px;">Foto</th>
+                  <th>No. Parte / SKU</th>
+                  <th>Nombre</th>
+                  <th>Marca</th>
+                  <th>Condición</th>
+                  <th>Grado</th>
+                  <th>Donador</th>
+                  <th style="text-align:right">Precio</th>
+                  <th style="text-align:right">Costo</th>
+                  <th style="text-align:right">Stock</th>
+                  <th>Ubicación</th>
+                  <th>Acciones</th>
+                </tr>
+              </thead>
+              <tbody id="ynkPiecesBody">
+                <tr><td colspan="12" class="ynk-empty">Cargando piezas…</td></tr>
+              </tbody>
+            </table>
+            <div class="table-footer">
+              <span id="ynkPiecesFooter">—</span>
+              <div class="pagination" id="ynkPiecesPagination"></div>
+            </div>
+          </div>
+        </div>
+
+        <!-- ===================================================================
+             TAB 2 — NUEVA PIEZA (alta rápida)
+             =================================================================== -->
+        <div class="tab-panel" id="panel-nueva" role="tabpanel">
+          <div class="table-wrapper" style="padding:var(--space-5);">
+            <div style="display:flex;justify-content:space-between;align-items:center;gap:var(--space-3);margin-bottom:var(--space-4);flex-wrap:wrap;">
+              <div>
+                <h3 style="font-family:var(--font-heading);font-size:var(--text-h5,1rem);text-transform:uppercase;letter-spacing:var(--tracking-wide);">Alta rápida de pieza usada</h3>
+                <p class="ynk-hint" style="margin-top:4px;">Solo <strong>nombre</strong> y <strong>precio</strong> son obligatorios. El No. de parte se genera automático si lo dejas vacío.</p>
+              </div>
+              <span class="ynk-hint" id="ynkTimer">—</span>
+            </div>
+
+            <div class="toolbar" style="margin-bottom:var(--space-4);">
+              <div class="ynk-seg" role="tablist" aria-label="Modo de alta">
+                <button type="button" id="ynkSegSingle" class="is-active" onclick="ynkSetIntakeMode('single')">Pieza individual</button>
+                <button type="button" id="ynkSegFull" onclick="ynkSetIntakeMode('full')">Donador completo (varias piezas)</button>
+              </div>
+            </div>
+
+            <div id="ynkNuevaSimple">
+            <div class="inv-form-grid">
+              <div class="inv-field inv-field--full">
+                <label for="ynkName">Nombre de la pieza *</label>
+                <input type="text" id="ynkName" placeholder="Ej: Faro delantero izquierdo" autocomplete="off" />
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkPartNumber">No. de parte / SKU</label>
+                <input type="text" id="ynkPartNumber" placeholder="se genera automático" autocomplete="off" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkBrand">Marca de la pieza</label>
+                <input type="text" id="ynkBrand" placeholder="Ej: Toyota / Genérico" autocomplete="off" />
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkPrice">Precio de venta *</label>
+                <input type="number" id="ynkPrice" step="0.01" min="0" placeholder="0.00" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkCost">Costo</label>
+                <input type="number" id="ynkCost" step="0.01" min="0" placeholder="0.00" />
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkCondition">Condición</label>
+                <select id="ynkCondition">
+                  <option value="usado" selected>Usado</option>
+                  <option value="reconstruido">Reconstruido</option>
+                </select>
+              </div>
+              <div class="inv-field">
+                <label for="ynkGrade">Grado</label>
+                <select id="ynkGrade">
+                  <option value="">Sin grado</option>
+                  <option value="A">A — Excelente</option>
+                  <option value="B">B — Bueno</option>
+                  <option value="C">C — Regular</option>
+                  <option value="D">D — Para partes</option>
+                </select>
+              </div>
+
+              <div class="inv-field inv-field--full" style="flex-direction:row;align-items:center;gap:var(--space-2);">
+                <input type="checkbox" id="ynkUnique" checked style="width:auto;" />
+                <label for="ynkUnique" style="text-transform:none;letter-spacing:0;font-size:var(--text-body-sm);">Pieza única (1 de 1) — proviene de un vehículo específico</label>
+              </div>
+
+              <!-- Donor vehicle -->
+              <div class="inv-field inv-field--full" style="border-top:1px solid var(--color-border);padding-top:var(--space-3);">
+                <label>Vehículo donador</label>
+              </div>
+
+              <div class="inv-field inv-field--full">
+                <label for="ynkVin">VIN del donador</label>
+                <div style="display:flex;gap:var(--space-2);">
+                  <input type="text" id="ynkVin" placeholder="17 caracteres (ej: JTDKB20U123456789)" maxlength="20" autocomplete="off" style="flex:1;text-transform:uppercase;" />
+                  <button class="btn btn--secondary" type="button" onclick="ynkDecodeVin()" id="ynkDecodeBtn">
+                    <svg viewBox="0 0 24 24"><path d="M4 6h16M4 12h16M4 18h10"/></svg>
+                    Decodificar
+                  </button>
+                </div>
+                <span class="ynk-hint" id="ynkVinStatus">Decodifica el VIN para autocompletar marca, modelo y año.</span>
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkDonorMake">Marca del donador</label>
+                <input type="text" id="ynkDonorMake" placeholder="Ej: Nissan" autocomplete="off" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkDonorModel">Modelo del donador</label>
+                <input type="text" id="ynkDonorModel" placeholder="Ej: Sentra" autocomplete="off" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkDonorYear">Año del donador</label>
+                <input type="number" id="ynkDonorYear" min="1900" max="2100" placeholder="2015" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkDonorKm">Km del donador</label>
+                <input type="number" id="ynkDonorKm" min="0" placeholder="120000" />
+              </div>
+
+              <!-- Inventory details -->
+              <div class="inv-field inv-field--full" style="border-top:1px solid var(--color-border);padding-top:var(--space-3);">
+                <label>Inventario</label>
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkOwnership">Propiedad</label>
+                <select id="ynkOwnership">
+                  <option value="propio" selected>Propio</option>
+                  <option value="consigna">Consigna (de tercero)</option>
+                </select>
+              </div>
+              <div class="inv-field" id="ynkConsignmentWrap" style="display:none;">
+                <label for="ynkConsignmentId">Consignación</label>
+                <select id="ynkConsignmentId">
+                  <option value="">— Selecciona consignante —</option>
+                </select>
+              </div>
+
+              <div class="inv-field">
+                <label for="ynkLocation">Ubicación</label>
+                <input type="text" id="ynkLocation" placeholder="Ej: YON-A-3-2" autocomplete="off" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkWarranty">Cobertura (días)</label>
+                <input type="number" id="ynkWarranty" min="0" placeholder="30" />
+                <span class="ynk-hint">Se guarda como cobertura por defecto del módulo.</span>
+              </div>
+              <div class="inv-field">
+                <label for="ynkInitialStock">Stock inicial</label>
+                <input type="number" id="ynkInitialStock" min="0" placeholder="1" value="1" />
+              </div>
+              <div class="inv-field">
+                <label for="ynkSerial">No. de serie (opcional)</label>
+                <input type="text" id="ynkSerial" placeholder="Serie de la pieza" autocomplete="off" />
+              </div>
+
+              <!-- Photos -->
+              <div class="inv-field inv-field--full">
+                <label>Fotos de la pieza</label>
+                <div class="ynk-drop">
+                  <input type="file" id="ynkPhotos" accept="image/jpeg,image/png,image/webp" multiple style="display:none;" />
+                  <button class="btn btn--ghost btn--sm" type="button" onclick="document.getElementById('ynkPhotos').click()">
+                    <svg viewBox="0 0 24 24"><path d="M23 19a2 2 0 0 1-2 2H3a2 2 0 0 1-2-2V8a2 2 0 0 1 2-2h4l2-3h6l2 3h4a2 2 0 0 1 2 2z"/><circle cx="12" cy="13" r="4"/></svg>
+                    Elegir fotos
+                  </button>
+                  <button class="btn btn--ghost btn--sm" type="button" id="ynkGradeSuggestBtn" onclick="ynkSuggestGradeFromPhoto()">
+                    Sugerir grado por foto (IA)
+                  </button>
+                  <span class="ynk-hint" id="ynkPhotoCount" style="display:block;margin-top:6px;">Sin fotos seleccionadas</span>
+                  <span class="ynk-hint" id="ynkGradeSuggestStatus" style="display:block;margin-top:4px;"></span>
+                </div>
+                <div class="ynk-photo-grid" id="ynkPhotoPreview"></div>
+              </div>
+            </div>
+
+            <div class="ynk-save-result" id="ynkSaveResult"></div>
+
+            <div style="display:flex;justify-content:flex-end;gap:var(--space-3);margin-top:var(--space-4);border-top:1px solid var(--color-border);padding-top:var(--space-4);">
+              <button class="btn btn--ghost" type="button" onclick="ynkResetPieceForm()">Limpiar</button>
+              <button class="btn btn--primary" type="button" id="ynkSaveBtn" onclick="ynkSubmitPiece()">Guardar pieza</button>
+            </div>
+            </div><!-- /#ynkNuevaSimple -->
+
+            <!-- ── Alta por donador completo (varias piezas) ────────────── -->
+            <div id="ynkNuevaFull" style="display:none;">
+              <p class="ynk-hint" style="margin-bottom:var(--space-3);">
+                Registra el vehículo donador y todas sus piezas de una sola vez. Cada fila crea una pieza usada con su SKU.
+              </p>
+
+              <div class="inv-form-grid">
+                <div class="inv-field inv-field--full">
+                  <label for="ynkFullVin">VIN del donador *</label>
+                  <div style="display:flex;gap:var(--space-2);">
+                    <input type="text" id="ynkFullVin" placeholder="17 caracteres" maxlength="20" autocomplete="off" style="flex:1;text-transform:uppercase;" />
+                    <button class="btn btn--secondary" type="button" onclick="ynkFullDecodeVin()" id="ynkFullDecodeBtn">Decodificar</button>
+                  </div>
+                  <span class="ynk-hint" id="ynkFullVinStatus">Decodifica el VIN para autocompletar marca, modelo y año.</span>
+                </div>
+
+                <div class="inv-field">
+                  <label for="ynkFullMake">Marca del donador *</label>
+                  <input type="text" id="ynkFullMake" placeholder="Ej: Nissan" autocomplete="off" />
+                </div>
+                <div class="inv-field">
+                  <label for="ynkFullModel">Modelo del donador *</label>
+                  <input type="text" id="ynkFullModel" placeholder="Ej: Sentra" autocomplete="off" />
+                </div>
+                <div class="inv-field">
+                  <label for="ynkFullYear">Año *</label>
+                  <input type="number" id="ynkFullYear" min="1900" max="2100" placeholder="2015" />
+                </div>
+                <div class="inv-field">
+                  <label for="ynkFullMileage">Kilometraje</label>
+                  <input type="number" id="ynkFullMileage" min="0" placeholder="120000" />
+                </div>
+                <div class="inv-field">
+                  <label for="ynkFullColor">Color</label>
+                  <input type="text" id="ynkFullColor" placeholder="Ej: Gris" autocomplete="off" />
+                </div>
+                <div class="inv-field">
+                  <label for="ynkFullOwnership">Propiedad</label>
+                  <select id="ynkFullOwnership">
+                    <option value="propio" selected>Propio</option>
+                    <option value="consigna">Consigna (de tercero)</option>
+                  </select>
+                </div>
+                <div class="inv-field" id="ynkFullConsignmentWrap" style="display:none;">
+                  <label for="ynkFullConsignmentId">Consignación</label>
+                  <select id="ynkFullConsignmentId">
+                    <option value="">— Selecciona consignante —</option>
+                  </select>
+                </div>
+                <div class="inv-field inv-field--full">
+                  <label for="ynkFullTotalCost">Costo total del vehículo (opcional)</label>
+                  <input type="number" id="ynkFullTotalCost" step="0.01" min="0" placeholder="0.00" />
+                  <span class="ynk-hint">Si lo capturas, se prorratea entre las piezas del donador.</span>
+                </div>
+              </div>
+
+              <div style="display:flex;justify-content:space-between;align-items:center;margin:var(--space-4) 0 var(--space-2);gap:var(--space-3);flex-wrap:wrap;">
+                <h4 style="margin:0;font-size:var(--text-caption);letter-spacing:var(--tracking-widest);text-transform:uppercase;color:var(--color-text-muted);">Piezas del donador</h4>
+                <div style="display:flex;gap:var(--space-2);">
+                  <button class="btn btn--ghost btn--sm" type="button" onclick="ynkFullAddRow()">+ Agregar fila</button>
+                  <button class="btn btn--ghost btn--sm" type="button" onclick="ynkFullClearRows()">Vaciar filas</button>
+                </div>
+              </div>
+
+              <div class="table-wrapper">
+                <table class="data-table">
+                  <thead>
+                    <tr>
+                      <th>Nombre de la pieza *</th>
+                      <th style="width:130px;">Precio *</th>
+                      <th style="width:130px;">Costo</th>
+                      <th style="width:110px;">Grado</th>
+                      <th style="width:150px;">Ubicación</th>
+                      <th style="width:70px;"></th>
+                    </tr>
+                  </thead>
+                  <tbody id="ynkFullPiecesBody"></tbody>
+                </table>
+              </div>
+
+              <div class="ynk-save-result" id="ynkFullResult"></div>
+
+              <div style="display:flex;justify-content:flex-end;gap:var(--space-3);margin-top:var(--space-4);border-top:1px solid var(--color-border);padding-top:var(--space-4);">
+                <button class="btn btn--ghost" type="button" onclick="ynkFullResetForm()">Limpiar piezas</button>
+                <button class="btn btn--primary" type="button" id="ynkFullSaveBtn" onclick="ynkSubmitDonorFull()">Registrar donador y piezas</button>
+              </div>
+            </div><!-- /#ynkNuevaFull -->
+          </div>
+        </div>
+
+        <!-- ===================================================================
+             TAB 3 — POR DONADOR
+             =================================================================== -->
+        <div class="tab-panel" id="panel-donador" role="tabpanel">
+
+          <div class="toolbar">
+            <div class="ynk-seg" role="tablist" aria-label="Vistas por donador">
+              <button type="button" id="ynkSegDonors" class="is-active" onclick="ynkSetDonorView('donors')">¿Qué tengo de este auto?</button>
+              <button type="button" id="ynkSegPieces" onclick="ynkSetDonorView('pieces')">Piezas por donador</button>
+            </div>
+            <div class="toolbar__spacer"></div>
+            <button class="btn btn--ghost btn--sm" onclick="ynkSearchDonors(1)">Actualizar</button>
+          </div>
+
+          <!-- View A: donors summary -->
+          <div id="ynkDonorViewDonors">
+            <div class="toolbar">
+              <div class="search-box">
+                <svg viewBox="0 0 24 24" stroke-linecap="round"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+                <input type="text" id="ynkDonorQ" placeholder="Buscar por VIN, marca o modelo del donador…" autocomplete="off" />
+              </div>
+              <span class="ynk-hint">Agrupa las piezas registradas por vehículo donador.</span>
+            </div>
+
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead>
+                  <tr>
+                    <th>VIN</th>
+                    <th>Marca</th>
+                    <th>Modelo</th>
+                    <th>Año</th>
+                    <th style="text-align:right">Piezas</th>
+                    <th style="text-align:right">Valor</th>
+                    <th>Acciones</th>
+                  </tr>
+                </thead>
+                <tbody id="ynkDonorsBody">
+                  <tr><td colspan="7" class="ynk-empty">Cargando donadores…</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkDonorsFooter">—</span>
+                <div class="pagination" id="ynkDonorsPagination"></div>
+              </div>
+            </div>
+          </div>
+
+          <!-- View B: pieces of a donor -->
+          <div id="ynkDonorViewPieces" style="display:none;">
+            <div class="toolbar">
+              <input type="text" class="select-filter" id="ynkDonorMake" placeholder="Marca (donador)" autocomplete="off" style="width:150px;" />
+              <input type="text" class="select-filter" id="ynkDonorModel" placeholder="Modelo (donador)" autocomplete="off" style="width:150px;" />
+              <input type="number" class="select-filter" id="ynkDonorYear" placeholder="Año" min="1900" max="2100" style="width:100px;" />
+              <input type="text" class="select-filter" id="ynkDonorVin" placeholder="VIN donador" autocomplete="off" style="width:190px;text-transform:uppercase;" />
+              <input type="text" class="select-filter" id="ynkDonorPieceQ" placeholder="Nombre / No. parte" autocomplete="off" style="width:170px;" />
+              <button class="btn btn--primary btn--sm" onclick="ynkSearchDonorPieces(1)">
+                <svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+                Buscar
+              </button>
+              <button class="btn btn--ghost btn--sm" onclick="ynkClearDonorPieceFilters()">Limpiar</button>
+            </div>
+
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead>
+                  <tr>
+                    <th style="width:60px;">Foto</th>
+                    <th>No. Parte</th>
+                    <th>Nombre</th>
+                    <th>Grado</th>
+                    <th>Condición</th>
+                    <th>Donador</th>
+                    <th style="text-align:right">Precio</th>
+                    <th style="text-align:right">Stock</th>
+                    <th>Ubicación</th>
+                    <th>Acciones</th>
+                  </tr>
+                </thead>
+                <tbody id="ynkDonorPiecesBody">
+                  <tr><td colspan="10" class="ynk-empty">Aplica un filtro o presiona Buscar.</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkDonorPiecesFooter">—</span>
+                <div class="pagination" id="ynkDonorPiecesPagination"></div>
+              </div>
+            </div>
+          </div>
+        </div>
+
+        <!-- ===================================================================
+             TAB 4 — CONSIGNACIONES
+             =================================================================== -->
+        <div class="tab-panel" id="panel-consignaciones" role="tabpanel">
+
+          <div class="toolbar">
+            <div class="search-box">
+              <svg viewBox="0 0 24 24" stroke-linecap="round"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+              <input type="text" id="ynkConsignQ" placeholder="Filtrar por consignante, RFC o teléfono…" autocomplete="off" />
+            </div>
+            <div class="toolbar__spacer"></div>
+            <button class="btn btn--ghost btn--sm" onclick="ynkLoadConsignments()">Actualizar</button>
+            <button class="btn btn--primary btn--sm" onclick="ynkOpenConsignmentModal()">
+              <svg viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+              Nueva consigna
+            </button>
+          </div>
+
+          <div class="table-wrapper">
+            <table class="data-table">
+              <thead>
+                <tr>
+                  <th>#</th>
+                  <th>Consignante</th>
+                  <th>RFC</th>
+                  <th>Teléfono</th>
+                  <th style="text-align:right">Comisión</th>
+                  <th style="text-align:right">Piezas</th>
+                  <th style="text-align:right">Vendido</th>
+                  <th style="text-align:right">Comisión $</th>
+                  <th>Estado</th>
+                  <th>Creada</th>
+                  <th>Acciones</th>
+                </tr>
+              </thead>
+              <tbody id="ynkConsignBody">
+                <tr><td colspan="11" class="ynk-empty">Cargando consignaciones…</td></tr>
+              </tbody>
+            </table>
+            <div class="table-footer">
+              <span id="ynkConsignFooter">—</span>
+              <div class="pagination"></div>
+            </div>
+          </div>
+        </div>
+
+        <!-- ===================================================================
+             TAB 5 — REPORTES
+             =================================================================== -->
+        <div class="tab-panel" id="panel-reportes" role="tabpanel">
+
+          <div class="toolbar">
+            <div class="ynk-seg" role="tablist" aria-label="Reportes de Yonke">
+              <button type="button" id="ynkRepSegAging" class="is-active" onclick="ynkSetReportView('aging')">Antigüedad en patio</button>
+              <button type="button" id="ynkRepSegSummary" onclick="ynkSetReportView('summary')">Resumen</button>
+              <button type="button" id="ynkRepSegDup" onclick="ynkSetReportView('duplicates')">Duplicados</button>
+            </div>
+            <div class="toolbar__spacer"></div>
+          </div>
+
+          <!-- Aging -->
+          <div id="ynkRepAging">
+            <div class="toolbar">
+              <label class="ynk-hint" for="ynkAgingDays">Días mínimos en patio:</label>
+              <input type="number" class="select-filter" id="ynkAgingDays" value="90" min="0" style="width:100px;" />
+              <button class="btn btn--primary btn--sm" onclick="ynkLoadAging()">Consultar</button>
+              <div class="toolbar__spacer"></div>
+              <span class="ynk-hint" id="ynkAgingSummary"></span>
+            </div>
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead>
+                  <tr>
+                    <th>ID</th>
+                    <th>No. Parte</th>
+                    <th>Nombre</th>
+                    <th>Grado</th>
+                    <th style="text-align:right">Precio</th>
+                    <th style="text-align:right">Costo</th>
+                    <th style="text-align:right">Días en patio</th>
+                  </tr>
+                </thead>
+                <tbody id="ynkAgingBody">
+                  <tr><td colspan="7" class="ynk-empty">Presiona "Consultar" para ver las piezas con más tiempo en patio.</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkAgingFooter">—</span>
+                <div class="pagination" id="ynkAgingPagination"></div>
+              </div>
+            </div>
+          </div>
+
+          <!-- Summary -->
+          <div id="ynkRepSummary" style="display:none;">
+            <div class="toolbar">
+              <button class="btn btn--primary btn--sm" onclick="ynkLoadReportSummary()">Cargar resumen</button>
+              <div class="toolbar__spacer"></div>
+              <span class="ynk-hint" id="ynkRepSummaryUpdated"></span>
+            </div>
+            <div id="ynkRepSummaryBody" class="ynk-rep-grid">
+              <p class="ynk-hint">Presiona "Cargar resumen".</p>
+            </div>
+          </div>
+
+          <!-- Duplicates -->
+          <div id="ynkRepDup" style="display:none;">
+            <div class="toolbar">
+              <label class="ynk-hint" for="ynkDupThreshold">Umbral de similitud (0–1):</label>
+              <input type="number" class="select-filter" id="ynkDupThreshold" value="0.9" step="0.05" min="0" max="1" style="width:100px;" />
+              <button class="btn btn--primary btn--sm" onclick="ynkLoadDuplicates()">Buscar duplicados</button>
+              <div class="toolbar__spacer"></div>
+              <span class="ynk-hint">Coincidencias por nombre / No. de parte.</span>
+            </div>
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead id="ynkDupHead">
+                  <tr><th>Grupo</th><th>Piezas</th><th>Detalle</th></tr>
+                </thead>
+                <tbody id="ynkDupBody">
+                  <tr><td colspan="3" class="ynk-empty">Presiona "Buscar duplicados".</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkDupFooter">—</span>
+              </div>
+            </div>
+          </div>
+
+        </div>
+
+        <!-- ===================================================================
+             TAB 6 — MAYOREO B2B
+             =================================================================== -->
+        <div class="tab-panel" id="panel-b2b" role="tabpanel">
+
+          <div class="toolbar">
+            <div class="ynk-seg" role="tablist" aria-label="Mayoreo B2B">
+              <button type="button" id="ynkB2bSegCatalog" class="is-active" aria-selected="true" onclick="ynkB2bView('catalog')" title="Comprar piezas usadas al mayoreo de otros negocios">Catálogo</button>
+              <button type="button" id="ynkB2bSegListings" aria-selected="false" onclick="ynkB2bView('listings')" title="Vender tus piezas usadas a otros negocios">Mis publicaciones</button>
+              <button type="button" id="ynkB2bSegOrders" aria-selected="false" onclick="ynkB2bView('orders')" title="Pedidos de mayoreo que recibes y que haces">Pedidos</button>
+            </div>
+            <div class="toolbar__spacer"></div>
+            <button class="btn btn--ghost btn--sm" onclick="ynkB2bRefresh()">
+              <svg viewBox="0 0 24 24"><polyline points="23 4 23 10 17 10"/><path d="M20.49 15a9 9 0 1 1-.38-4.93"/></svg>
+              Actualizar
+            </button>
+          </div>
+
+          <div class="ynk-b2b-help" role="note">
+            <strong>¿Cómo funciona el mayoreo?</strong>
+            Publicas una pieza usada en <em>Mis publicaciones</em> &rarr; otro negocio la compra en el <em>Catálogo</em> &rarr;
+            tú <strong>confirmas</strong> el pedido y lo marcas como <strong>enviado</strong> &rarr; el comprador lo marca como <strong>recibido</strong>.
+            En <em>Pedidos &rsaquo; Recibidos</em> gestionas lo que te compran; en <em>Pedidos &rsaquo; Mis compras</em>, lo que tú compras.
+          </div>
+
+          <!-- ── Sub-vista: Catálogo (comprar) ─────────────────────────── -->
+          <div id="ynkB2bCatalog">
+            <div class="toolbar">
+              <div class="search-box">
+                <svg viewBox="0 0 24 24" stroke-linecap="round"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+                <input type="text" id="ynkB2bQ" placeholder="Buscar pieza, No. parte o vendedor…" autocomplete="off" />
+              </div>
+              <input type="text" class="select-filter" id="ynkB2bMake" placeholder="Marca donador" autocomplete="off" style="width:140px;" />
+              <input type="text" class="select-filter" id="ynkB2bModel" placeholder="Modelo donador" autocomplete="off" style="width:140px;" />
+              <input type="number" class="select-filter" id="ynkB2bYear" placeholder="Año" min="1900" max="2100" style="width:95px;" />
+              <select class="select-filter" id="ynkB2bGrade">
+                <option value="">Todo grado</option>
+                <option value="A">Grado A</option>
+                <option value="B">Grado B</option>
+                <option value="C">Grado C</option>
+                <option value="D">Grado D</option>
+              </select>
+              <button class="btn btn--primary btn--sm" onclick="loadB2bCatalogUi()">
+                <svg viewBox="0 0 24 24"><circle cx="11" cy="11" r="8"/><line x1="21" y1="21" x2="16.65" y2="16.65"/></svg>
+                Buscar
+              </button>
+              <button class="btn btn--ghost btn--sm" onclick="ynkB2bClearCatalogFilters()">Limpiar</button>
+            </div>
+
+            <div id="ynkB2bCatalogGrid" class="ynk-b2b-grid">
+              <p class="ynk-empty">Cargando catálogo…</p>
+            </div>
+            <div class="table-footer">
+              <span id="ynkB2bCatalogFooter">—</span>
+              <div class="pagination" id="ynkB2bCatalogPagination"></div>
+            </div>
+          </div>
+
+          <!-- ── Sub-vista: Mis publicaciones (vender) ─────────────────── -->
+          <div id="ynkB2bListings" style="display:none;">
+            <div class="toolbar">
+              <span class="ynk-hint" id="ynkB2bSellerStatus"></span>
+              <div class="toolbar__spacer"></div>
+              <button class="btn btn--primary btn--sm" id="ynkB2bPublishBtn" onclick="ynkB2bOpenPublish()">
+                <svg viewBox="0 0 24 24"><line x1="12" y1="5" x2="12" y2="19"/><line x1="5" y1="12" x2="19" y2="12"/></svg>
+                Publicar pieza en mayoreo
+              </button>
+            </div>
+
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead>
+                  <tr>
+                    <th style="width:60px;">Foto</th>
+                    <th>No. Parte</th>
+                    <th>Nombre</th>
+                    <th style="text-align:center;">Grado</th>
+                    <th>Donador</th>
+                    <th style="text-align:right;">Precio mayoreo</th>
+                    <th>Estado</th>
+                    <th>Creada</th>
+                    <th>Acciones</th>
+                  </tr>
+                </thead>
+                <tbody id="ynkB2bListingsBody">
+                  <tr><td colspan="9" class="ynk-empty">Cargando publicaciones…</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkB2bListingsFooter">—</span>
+                <div class="pagination"></div>
+              </div>
+            </div>
+          </div>
+
+          <!-- ── Sub-vista: Pedidos ────────────────────────────────────── -->
+          <div id="ynkB2bOrders" style="display:none;">
+            <div class="toolbar">
+              <div class="ynk-seg" role="tablist" aria-label="Pedidos de mayoreo">
+                <button type="button" id="ynkB2bSegIncoming" class="is-active" aria-selected="true" onclick="ynkB2bOrdersView('incoming')" title="Pedidos que otros negocios te hacen">Recibidos</button>
+                <button type="button" id="ynkB2bSegPurchases" aria-selected="false" onclick="ynkB2bOrdersView('purchases')" title="Pedidos que tú hiciste a otros negocios">Mis compras</button>
+              </div>
+              <div class="toolbar__spacer"></div>
+              <span class="ynk-hint" id="ynkB2bOrdersHint"></span>
+            </div>
+
+            <div class="table-wrapper">
+              <table class="data-table">
+                <thead>
+                  <tr>
+                    <th>#</th>
+                    <th id="ynkB2bOrdersCounterpartyHead">Comprador</th>
+                    <th>Piezas</th>
+                    <th style="text-align:right;">Total</th>
+                    <th>Estado</th>
+                    <th>Creado</th>
+                    <th>Acciones</th>
+                  </tr>
+                </thead>
+                <tbody id="ynkB2bOrdersBody">
+                  <tr><td colspan="7" class="ynk-empty">Cargando pedidos…</td></tr>
+                </tbody>
+              </table>
+              <div class="table-footer">
+                <span id="ynkB2bOrdersFooter">—</span>
+                <div class="pagination"></div>
+              </div>
+            </div>
+          </div>
+
+        </div><!-- /panel-b2b -->
+
+      </div><!-- /tab-panels -->
+    </main>
+  </div><!-- /app-shell -->
+
+  <!-- ══════════ Modal: nueva consignación ══════════ -->
+  <div class="inv-modal-overlay" id="ynkConsignModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3>Nueva consignación</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkConsignModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div class="inv-form-grid">
+          <div class="inv-field inv-field--full">
+            <label for="ynkConsName">Nombre del consignante *</label>
+            <input type="text" id="ynkConsName" placeholder="Ej: Juan Pérez / Yonke El Sol" autocomplete="off" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkConsRfc">RFC</label>
+            <input type="text" id="ynkConsRfc" placeholder="Opcional" maxlength="13" autocomplete="off" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkConsPhone">Teléfono</label>
+            <input type="text" id="ynkConsPhone" placeholder="Opcional" autocomplete="off" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkConsCommission">Comisión (%)</label>
+            <input type="number" id="ynkConsCommission" step="0.01" min="0" max="100" placeholder="0.00" />
+          </div>
+          <div class="inv-field inv-field--full">
+            <label for="ynkConsNotes">Notas</label>
+            <input type="text" id="ynkConsNotes" placeholder="Notas internas" autocomplete="off" />
+          </div>
+        </div>
+        <div class="ynk-save-result" id="ynkConsResult"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkConsignModal')">Cancelar</button>
+        <button class="btn btn--primary" id="ynkConsCreateBtn" onclick="ynkCreateConsignment()">Crear consigna</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: detalle / liquidación de consignación ══════════ -->
+  <div class="inv-modal-overlay" id="ynkConsignDetailModal">
+    <div class="inv-modal inv-modal--wide">
+      <div class="inv-modal__header">
+        <h3 id="ynkConsignDetailTitle">Consignación</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkConsignDetailModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div id="ynkConsignDetailInfo" class="ynk-hint" style="margin-bottom:var(--space-3);">Cargando…</div>
+
+        <div class="table-wrapper" style="margin-bottom:var(--space-4);">
+          <table class="data-table">
+            <thead>
+              <tr>
+                <th>ID Inv.</th>
+                <th>No. Parte</th>
+                <th>Pieza</th>
+                <th style="text-align:right">Precio acordado</th>
+                <th style="text-align:right">Comisión</th>
+                <th>Estado</th>
+              </tr>
+            </thead>
+            <tbody id="ynkConsignItemsBody">
+              <tr><td colspan="6" class="ynk-empty">Cargando piezas…</td></tr>
+            </tbody>
+          </table>
+        </div>
+
+        <div class="ynk-summary-card">
+          <h4>Agregar pieza a la consigna</h4>
+          <div class="inv-form-grid">
+            <div class="inv-field">
+              <label for="ynkItemInvId">ID de inventario *</label>
+              <input type="number" id="ynkItemInvId" min="1" placeholder="ID de la pieza" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkItemAgreed">Precio acordado *</label>
+              <input type="number" id="ynkItemAgreed" step="0.01" min="0" placeholder="0.00" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkItemCommission">Comisión</label>
+              <input type="number" id="ynkItemCommission" step="0.01" min="0" placeholder="0.00" />
+            </div>
+            <div class="inv-field" style="justify-content:flex-end;">
+              <button class="btn btn--secondary" type="button" onclick="ynkAddConsignmentItem()">Agregar pieza</button>
+            </div>
+          </div>
+          <div class="ynk-save-result" id="ynkConsItemResult"></div>
+        </div>
+
+        <div id="ynkSettleResult" style="margin-top:var(--space-4);"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkConsignDetailModal')">Cerrar</button>
+        <button class="btn btn--primary" id="ynkSettleBtn" onclick="ynkSettleConsignment()">Liquidar consigna</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: editar pieza ══════════ -->
+  <div class="inv-modal-overlay" id="ynkEditModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3>Editar pieza usada</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkEditModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <input type="hidden" id="ynkEditId" />
+        <div class="inv-form-grid">
+          <div class="inv-field inv-field--full">
+            <label for="ynkEditName">Nombre *</label>
+            <input type="text" id="ynkEditName" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditPart">No. de parte / SKU</label>
+            <input type="text" id="ynkEditPart" disabled />
+            <span class="ynk-hint">No editable desde Yonke.</span>
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditBrand">Marca</label>
+            <input type="text" id="ynkEditBrand" disabled />
+            <span class="ynk-hint">No editable desde Yonke.</span>
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditPrice">Precio *</label>
+            <input type="number" id="ynkEditPrice" step="0.01" min="0" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditCost">Costo</label>
+            <input type="number" id="ynkEditCost" step="0.01" min="0" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditCondition">Condición</label>
+            <select id="ynkEditCondition">
+              <option value="usado">Usado</option>
+              <option value="reconstruido">Reconstruido</option>
+              <option value="nuevo">Nuevo</option>
+            </select>
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditGrade">Grado</label>
+            <select id="ynkEditGrade">
+              <option value="">Sin grado</option>
+              <option value="A">A</option>
+              <option value="B">B</option>
+              <option value="C">C</option>
+              <option value="D">D</option>
+            </select>
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditOwnership">Propiedad</label>
+            <select id="ynkEditOwnership">
+              <option value="propio">Propio</option>
+              <option value="consigna">Consigna</option>
+            </select>
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditLocation">Ubicación</label>
+            <input type="text" id="ynkEditLocation" />
+          </div>
+          <div class="inv-field inv-field--full">
+            <label for="ynkEditVin">VIN del donador</label>
+            <input type="text" id="ynkEditVin" style="text-transform:uppercase;" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditMake">Marca del donador</label>
+            <input type="text" id="ynkEditMake" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditModel">Modelo del donador</label>
+            <input type="text" id="ynkEditModel" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditYear">Año del donador</label>
+            <input type="number" id="ynkEditYear" min="1900" max="2100" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkEditKm">Km del donador</label>
+            <input type="number" id="ynkEditKm" min="0" />
+          </div>
+          <div class="inv-field inv-field--full" style="flex-direction:row;align-items:center;gap:var(--space-2);">
+            <input type="checkbox" id="ynkEditUnique" style="width:auto;" />
+            <label for="ynkEditUnique" style="text-transform:none;letter-spacing:0;font-size:var(--text-body-sm);">Pieza única (1 de 1)</label>
+          </div>
+        </div>
+        <div class="ynk-save-result" id="ynkEditResult"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkEditModal')">Cancelar</button>
+        <button class="btn btn--primary" id="ynkEditSaveBtn" onclick="ynkSaveEditPiece()">Guardar cambios</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: fotos de la pieza ══════════ -->
+  <div class="inv-modal-overlay" id="ynkImagesModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3 id="ynkImagesTitle">Fotos de la pieza</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkImagesModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div class="ynk-photo-grid" id="ynkImagesGrid"></div>
+        <div class="ynk-drop" style="margin-top:var(--space-4);">
+          <input type="file" id="ynkImagesInput" accept="image/jpeg,image/png,image/webp" multiple style="display:none;" />
+          <button class="btn btn--ghost btn--sm" type="button" onclick="document.getElementById('ynkImagesInput').click()">Agregar fotos</button>
+          <span class="ynk-hint" id="ynkImagesStatus" style="display:block;margin-top:6px;"></span>
+        </div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkImagesModal')">Cerrar</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: ficha / acciones de pieza ══════════ -->
+  <div class="inv-modal-overlay" id="ynkPieceModal">
+    <div class="inv-modal inv-modal--wide">
+      <div class="inv-modal__header">
+        <h3 id="ynkPieceTitle">Pieza</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkPieceModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div id="ynkPieceInfo" class="ynk-hint" style="margin-bottom:var(--space-3);">Cargando…</div>
+
+        <div class="ynk-summary-card">
+          <h4>Publicación y herramientas</h4>
+          <div style="display:flex;flex-wrap:wrap;gap:var(--space-2);">
+            <button class="btn btn--secondary btn--sm" type="button" onclick="ynkPublishMeli()">Publicar en MeLi</button>
+            <button class="btn btn--ghost btn--sm" type="button" onclick="ynkOpenLabel()">Etiqueta</button>
+            <button class="btn btn--ghost btn--sm" type="button" onclick="document.getElementById('ynkIdentifyInput').click()">Identificar por foto</button>
+            <input type="file" id="ynkIdentifyInput" accept="image/jpeg,image/png,image/webp" style="display:none;" />
+            <button class="btn btn--ghost btn--sm" type="button" onclick="ynkSuggestPrice()">Sugerir precio</button>
+            <button class="btn btn--ghost btn--sm" type="button" onclick="document.getElementById('ynkValidateInput').click()">Validar foto</button>
+            <input type="file" id="ynkValidateInput" accept="image/jpeg,image/png,image/webp" style="display:none;" />
+          </div>
+          <div class="inv-form-grid" style="margin-top:var(--space-3);">
+            <div class="inv-field">
+              <label for="ynkMeliCategory">Categoría MeLi (opcional)</label>
+              <input type="text" id="ynkMeliCategory" placeholder="Ej: MLM1747" autocomplete="off" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkMeliPrice">Precio MeLi (opcional)</label>
+              <input type="number" id="ynkMeliPrice" step="0.01" min="0" placeholder="usa el precio de la pieza" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkMeliStock">Stock MeLi (opcional)</label>
+              <input type="number" id="ynkMeliStock" min="0" placeholder="1" />
+            </div>
+          </div>
+          <div class="ynk-save-result" id="ynkPieceActionResult"></div>
+        </div>
+
+        <div class="ynk-summary-card" style="margin-top:var(--space-3);">
+          <h4>Compatibilidad — «sirve para»</h4>
+          <div id="ynkCompatList"><span class="ynk-hint">Cargando compatibilidad…</span></div>
+          <div class="inv-form-grid" style="margin-top:var(--space-3);">
+            <div class="inv-field">
+              <label for="ynkCompatMake">Marca</label>
+              <input type="text" id="ynkCompatMake" placeholder="Ej: Nissan" autocomplete="off" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkCompatModel">Modelo</label>
+              <input type="text" id="ynkCompatModel" placeholder="Ej: Sentra" autocomplete="off" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkCompatYear">Año</label>
+              <input type="number" id="ynkCompatYear" min="1900" max="2100" placeholder="2015" />
+            </div>
+            <div class="inv-field">
+              <label for="ynkCompatEngine">Motor (opcional)</label>
+              <input type="text" id="ynkCompatEngine" placeholder="Ej: 1.8L" autocomplete="off" />
+            </div>
+            <div class="inv-field" style="justify-content:flex-end;">
+              <button class="btn btn--secondary" type="button" onclick="ynkAddCompat()">Agregar compatibilidad</button>
+            </div>
+          </div>
+          <div class="ynk-save-result" id="ynkCompatResult"></div>
+        </div>
+
+        <div class="ynk-summary-card" style="margin-top:var(--space-3);">
+          <h4>Fotos</h4>
+          <div class="ynk-photo-grid" id="ynkPiecePhotos"></div>
+        </div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkPieceModal')">Cerrar</button>
+        <button class="btn btn--secondary" type="button" onclick="ynkEditFromDetail()">Editar pieza</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: estado de cuenta de consignación ══════════ -->
+  <div class="inv-modal-overlay" id="ynkStatementModal">
+    <div class="inv-modal inv-modal--wide">
+      <div class="inv-modal__header">
+        <h3 id="ynkStatementTitle">Estado de cuenta</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkStatementModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div class="inv-form-grid">
+          <div class="inv-field">
+            <label for="ynkStmtFrom">Desde</label>
+            <input type="date" id="ynkStmtFrom" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkStmtTo">Hasta</label>
+            <input type="date" id="ynkStmtTo" />
+          </div>
+          <div class="inv-field" style="flex-direction:row;gap:var(--space-2);align-items:flex-end;">
+            <button class="btn btn--primary" type="button" onclick="ynkLoadStatement()">Consultar</button>
+            <button class="btn btn--ghost" type="button" onclick="ynkPrintStatement()">Imprimir</button>
+          </div>
+        </div>
+        <div id="ynkStatementInfo" class="ynk-hint" style="margin:var(--space-3) 0;"></div>
+        <div id="ynkStatementBody">
+          <p class="ynk-hint">Selecciona un periodo y presiona "Consultar".</p>
+        </div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkStatementModal')">Cerrar</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: importar CSV de piezas ══════════ -->
+  <div class="inv-modal-overlay" id="ynkImportModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3>Importar piezas desde CSV</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkImportModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <p class="ynk-hint" style="margin-bottom:var(--space-3);">
+          Encabezados sugeridos: <code>name, price_1, cost, condition_grade, location, part_number, donor_vin, donor_make, donor_model, donor_year</code>.
+          La respuesta del servidor se muestra abajo (creadas y errores por fila).
+        </p>
+        <div class="ynk-drop">
+          <input type="file" id="ynkImportFile" accept=".csv,text/csv" style="display:none;" />
+          <button class="btn btn--ghost btn--sm" type="button" onclick="document.getElementById('ynkImportFile').click()">Elegir archivo CSV</button>
+          <span class="ynk-hint" id="ynkImportFileName" style="display:block;margin-top:6px;">Sin archivo seleccionado</span>
+        </div>
+        <div class="ynk-save-result" id="ynkImportResult"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkImportModal')">Cancelar</button>
+        <button class="btn btn--primary" id="ynkImportBtn" onclick="ynkSubmitImport()">Importar</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: comprar en mayoreo ══════════ -->
+  <div class="inv-modal-overlay" id="ynkB2bBuyModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3 id="ynkB2bBuyTitle">Comprar en mayoreo</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkB2bBuyModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div id="ynkB2bBuyInfo" class="ynk-hint" style="margin-bottom:var(--space-3);"></div>
+        <div class="inv-form-grid">
+          <div class="inv-field">
+            <label for="ynkB2bBuyQty">Cantidad *</label>
+            <input type="number" id="ynkB2bBuyQty" min="1" step="1" value="1" oninput="ynkB2bUpdateBuyTotal()" />
+          </div>
+          <div class="inv-field">
+            <label>Total estimado</label>
+            <div id="ynkB2bBuyTotal" style="font-family:var(--font-mono);font-weight:700;color:var(--color-primary);font-size:1.05rem;">$0.00</div>
+          </div>
+          <div class="inv-field inv-field--full">
+            <label for="ynkB2bBuyNotes">Notas para el vendedor</label>
+            <input type="text" id="ynkB2bBuyNotes" placeholder="Opcional" autocomplete="off" />
+          </div>
+        </div>
+        <div class="ynk-save-result" id="ynkB2bBuyResult"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkB2bBuyModal')">Cerrar</button>
+        <button class="btn btn--primary" id="ynkB2bBuyBtn" onclick="ynkB2bSubmitOrder()">Crear orden</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: publicar pieza en mayoreo ══════════ -->
+  <div class="inv-modal-overlay" id="ynkB2bPublishModal">
+    <div class="inv-modal">
+      <div class="inv-modal__header">
+        <h3>Publicar pieza en mayoreo</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkB2bPublishModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div class="inv-form-grid">
+          <div class="inv-field inv-field--full">
+            <label for="ynkB2bPublishPiece">Pieza usada del inventario *</label>
+            <select id="ynkB2bPublishPiece">
+              <option value="">Cargando piezas…</option>
+            </select>
+            <span class="ynk-hint">La pieza se ofrece a otros negocios al precio de mayoreo que definas.</span>
+          </div>
+          <div class="inv-field">
+            <label for="ynkB2bPublishPrice">Precio mayoreo *</label>
+            <input type="number" id="ynkB2bPublishPrice" step="0.01" min="0" placeholder="0.00" />
+          </div>
+          <div class="inv-field">
+            <label for="ynkB2bPublishNotes">Notas</label>
+            <input type="text" id="ynkB2bPublishNotes" placeholder="Opcional" autocomplete="off" />
+          </div>
+        </div>
+        <div class="ynk-save-result" id="ynkB2bPublishResult"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkB2bPublishModal')">Cancelar</button>
+        <button class="btn btn--primary" id="ynkB2bPublishSubmitBtn" onclick="ynkB2bSubmitPublish()">Publicar</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- ══════════ Modal: detalle de pedido mayoreo ══════════ -->
+  <div class="inv-modal-overlay" id="ynkB2bOrderModal">
+    <div class="inv-modal inv-modal--wide">
+      <div class="inv-modal__header">
+        <h3 id="ynkB2bOrderTitle">Pedido</h3>
+        <button class="inv-modal__close" onclick="ynkCloseModal('ynkB2bOrderModal')">&times;</button>
+      </div>
+      <div class="inv-modal__body">
+        <div id="ynkB2bOrderBody" class="ynk-hint">Cargando pedido…</div>
+        <div id="ynkB2bOrderActions" class="ynk-b2b-actions" style="margin-top:var(--space-4);"></div>
+      </div>
+      <div class="inv-modal__footer">
+        <button class="btn btn--ghost" onclick="ynkCloseModal('ynkB2bOrderModal')">Cerrar</button>
+      </div>
+    </div>
+  </div>
+
+  <!-- Offline Banner -->
+  <div id="offlineBanner" class="banner banner--warning" style="display:none;position:fixed;top:0;left:0;right:0;z-index:9999;border-radius:0;animation:none;">
+    <span class="banner__icon"></span>
+    <span class="banner__text" id="offlineBannerText"><strong>Modo offline</strong> — Funciones limitadas.</span>
+    <button class="banner__dismiss" onclick="document.getElementById('offlineBanner').style.display='none'" aria-label="Cerrar">&times;</button>
+  </div>
+
+  <!-- =========================================================================
+       SCRIPTS
+       ========================================================================= -->
+
+  <script>
+    function setTheme(theme) {
+      document.documentElement.setAttribute('data-theme', theme);
+      document.querySelectorAll('.theme-btn').forEach(function(btn) {
+        btn.classList.toggle('is-active', btn.dataset.themeTarget === theme);
+      });
+      try { localStorage.setItem('pos_theme', theme); } catch (e) {}
+    }
+    (function() {
+      var saved;
+      try { saved = localStorage.getItem('pos_theme'); } catch (e) {}
+      if (saved === 'industrial' || saved === 'modern') setTheme(saved);
+    })();
+  </script>
+
+  <script src="/pos/static/js/i18n.js?v=39" defer></script>
+  <script src="/pos/static/js/app-init.js?v=9" defer></script>
+  <script src="/pos/static/js/splash-loader.js?v=33" defer></script>
+  <script src="/pos/static/js/pos-utils.js?v=33" defer></script>
+  <script src="/pos/static/js/sidebar.js?v=46" defer></script>
+  <script src="/pos/static/js/yonke.js?v=3" defer></script>
+  <script src="/pos/static/js/offline-banner.js" defer></script>
+  <script>if('serviceWorker' in navigator){navigator.serviceWorker.register('/pos/sw.js',{scope:'/pos/'});}</script>
+  <script src="/pos/static/js/pwa-install.js" defer></script>
+  <script src="/pos/static/js/chat.js" defer></script>
+</body>
+</html>
diff --git a/pos/tenant_db.py b/pos/tenant_db.py
index 176ec56..83293e8 100644
--- a/pos/tenant_db.py
+++ b/pos/tenant_db.py
@@ -26,8 +26,11 @@ def _get_tenant_pool(db_name):
     global _tenant_pools
     if db_name not in _tenant_pools:
         dsn = TENANT_DB_URL_TEMPLATE.format(db_name=db_name)
+        # Pool is per-process: with N gunicorn workers there are N pools per
+        # tenant. Keep minconn low to bound idle connections (the real fix at
+        # scale is PgBouncer; see docs/plans/2026-10-11-auditoria-completa-mejoras-ia.md).
         _tenant_pools[db_name] = pool.ThreadedConnectionPool(
-            minconn=2, maxconn=20, dsn=dsn
+            minconn=1, maxconn=20, dsn=dsn
         )
     return _tenant_pools[db_name]
 
@@ -94,6 +97,30 @@ class _PooledConnection:
         self.close()
 
 
+def _get_live_conn(db_pool, attempts=3):
+    """Get a connection from the pool, verifying it is alive.
+
+    Idle pooled connections get killed by PostgreSQL/SSL timeouts; a dead
+    socket surfaces later as 'SSL connection has been closed unexpectedly'
+    mid-query. Probe with SELECT 1 and discard dead connections.
+    """
+    last_exc = None
+    for _ in range(attempts):
+        conn = db_pool.getconn()
+        try:
+            cur = conn.cursor()
+            cur.execute("SELECT 1")
+            cur.close()
+            return conn
+        except psycopg2.OperationalError as e:
+            last_exc = e
+            try:
+                db_pool.putconn(conn, close=True)  # discard dead connection
+            except Exception:
+                pass
+    raise last_exc
+
+
 # ─── Public API ────────────────────────────────
 
 def get_master_conn():
@@ -111,10 +138,10 @@ def get_tenant_conn(tenant_id):
         raise ValueError(f"Tenant {tenant_id} not found or inactive")
 
     p = _get_tenant_pool(db_name)
-    return _PooledConnection(p.getconn(), p)
+    return _PooledConnection(_get_live_conn(p), p)
 
 
 def get_tenant_conn_by_dbname(db_name):
     """Get a pooled connection to a tenant DB directly by name."""
     p = _get_tenant_pool(db_name)
-    return _PooledConnection(p.getconn(), p)
+    return _PooledConnection(_get_live_conn(p), p)
diff --git a/pos/tests/test_facturapi_service.py b/pos/tests/test_facturapi_service.py
index bac6760..aa8de81 100644
--- a/pos/tests/test_facturapi_service.py
+++ b/pos/tests/test_facturapi_service.py
@@ -91,9 +91,10 @@ class TestRequest:
 
 
 class TestCreateOrganization:
+    @mock.patch("pos.services.facturapi_service.update_organization_legal")
     @mock.patch("pos.services.facturapi_service.find_organization_by_rfc")
     @mock.patch("pos.services.facturapi_service._request")
-    def test_creates_organization_and_generates_live_key(self, mock_request, mock_find, user_key):
+    def test_creates_organization_and_generates_live_key(self, mock_request, mock_find, mock_legal, user_key):
         mock_find.return_value = None
         mock_request.side_effect = [
             {"id": "org_123"},  # POST /organizations
@@ -102,28 +103,31 @@ class TestCreateOrganization:
 
         result = facturapi_service.create_organization({"rfc": "ABC010101AAA", "razon_social": "Test SA"})
 
-        assert result == {"org_id": "org_123", "api_key": "sk_live_abc"}
+        assert result == {"org_id": "org_123", "api_key": "sk_live_abc", "legal_updated": True}
         assert mock_request.call_count == 2
+        mock_legal.assert_called_once()
 
+    @mock.patch("pos.services.facturapi_service.update_organization_legal")
     @mock.patch("pos.services.facturapi_service.find_organization_by_rfc")
     @mock.patch("pos.services.facturapi_service._request")
-    def test_reuses_existing_organization_by_rfc(self, mock_request, mock_find, user_key):
+    def test_reuses_existing_organization_by_rfc(self, mock_request, mock_find, mock_legal, user_key):
         mock_find.return_value = {"id": "org_existing"}
         mock_request.return_value = {"key": "sk_live_existing"}
 
         result = facturapi_service.create_organization({"rfc": "ABC010101AAA", "razon_social": "Test SA"})
 
         assert result["org_id"] == "org_existing"
+        assert result["legal_updated"] is True
         mock_request.assert_called_once()
 
 
 class TestUploadCsd:
-    @mock.patch("pos.services.facturapi_service.requests.post")
-    def test_uploads_csd(self, mock_post):
+    @mock.patch("pos.services.facturapi_service.requests.put")
+    def test_uploads_csd(self, mock_put):
         mock_response = mock.Mock()
         mock_response.ok = True
         mock_response.json.return_value = {"certificate": {"has_certificate": True}}
-        mock_post.return_value = mock_response
+        mock_put.return_value = mock_response
 
         config = {"facturapi_key": "sk_test", "facturapi_org_id": "org_1"}
         cer_b64 = base64.b64encode(b"fake-cer").decode("ascii")
@@ -132,9 +136,14 @@ class TestUploadCsd:
         result = facturapi_service.upload_csd(config, cer_b64, key_b64, "password")
 
         assert result["certificate"]["has_certificate"] is True
-        mock_post.assert_called_once()
-        _, kwargs = mock_post.call_args
+        mock_put.assert_called_once()
+        args, kwargs = mock_put.call_args
+        assert args[0].endswith("/organizations/org_1/certificate")
         assert kwargs["auth"] == ("sk_test", "")
+        assert set(kwargs["files"]) == {"cer", "key", "password"}
+        assert kwargs["files"]["cer"][1] == b"fake-cer"
+        assert kwargs["files"]["key"][1] == b"fake-key"
+        assert kwargs["files"]["password"][1] == "password"
 
 
 class TestCreateInvoice:
@@ -199,6 +208,19 @@ class TestGetOrgStatus:
         assert result["has_csd"] is True
         assert result["has_org_id"] is True
 
+    @mock.patch("pos.services.facturapi_service.get_organization")
+    def test_handles_organization_without_certificate(self, mock_get_org):
+        mock_get_org.return_value = {
+            "legal": {"name": "Test SA", "tax_id": "ABC010101AAA"},
+            "certificate": None,
+        }
+
+        config = {"facturapi_key": "sk_test", "cfdi_facturapi_org_id": "org_1"}
+        result = facturapi_service.get_org_status(config)
+
+        assert result["has_csd"] is False
+        assert result["configured"] is True
+
     def test_returns_error_without_key(self):
         with mock.patch.object(facturapi_service, "USER_KEY", ""):
             result = facturapi_service.get_org_status({})
@@ -211,6 +233,17 @@ class TestGetOrgStatus:
         assert result["has_org_id"] is False
         assert "organization" in result["error"].lower()
 
+    @mock.patch("pos.services.facturapi_service.get_organization")
+    def test_reports_error_without_raising_when_fetch_fails(self, mock_get_org):
+        mock_get_org.side_effect = facturapi_service.FacturapiError("boom", status_code=500)
+
+        config = {"facturapi_key": "sk_live_x", "cfdi_facturapi_org_id": "org_1"}
+        with mock.patch.object(facturapi_service, "USER_KEY", ""):
+            result = facturapi_service.get_org_status(config)
+
+        assert result["has_csd"] is False
+        assert "boom" in result["error"]
+
 
 class TestCreateOrUpdateCustomer:
     @mock.patch("pos.services.facturapi_service._request")
diff --git a/restore_inventory.js b/restore_inventory.js
new file mode 100644
index 0000000..56a061d
--- /dev/null
+++ b/restore_inventory.js
@@ -0,0 +1,120 @@
+#!/usr/bin/env node
+/* Restaura funciones borradas de inventory.js desde git HEAD. */
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const old = execSync('git show HEAD:pos/static/js/inventory.js', { maxBuffer: 20 * 1024 * 1024 }).toString();
+let cur = fs.readFileSync('pos/static/js/inventory.js', 'utf8');
+
+const MISSING = ['viewHistory', 'closeHistoryModal', 'recordTransfer', 'approvePhysicalCount',
+  'cancelDraft', 'loadAlerts', 'printBarcode', 'deleteItem', 'publishToMeli'];
+
+// extraer bloque de función con llaves balanceadas (indent 4 espacios)
+function extractFn(name) {
+  const marker = '\n    function ' + name + '(';
+  const i = old.indexOf(marker);
+  if (i === -1) return null;
+  let depth = 0, j = i + 1, started = false;
+  for (; j < old.length; j++) {
+    const ch = old[j];
+    if (ch === '{') { depth++; started = true; }
+    else if (ch === '}') { depth--; if (started && depth === 0) { j++; break; } }
+  }
+  // incluir hasta el final de línea
+  while (old[j] === '\n') j++;
+  return old.slice(i + 1, j);
+}
+
+const blocks = [];
+for (const name of MISSING) {
+  const b = extractFn(name);
+  if (b) blocks.push(b.trimEnd());
+  else console.log('⚠ no encontrado en HEAD:', name);
+}
+
+const anchor = '\n    // =====================================================================\n    //  EXPOSE GLOBALS (for onclick handlers in HTML)';
+if (!cur.includes(anchor)) { console.log('anchor EXPOSE no encontrado'); process.exit(1); }
+const restore = '\n    // =====================================================================\n' +
+  '    //  RESTAURADAS (borradas por error en el patch de transferencias)\n' +
+  '    // =====================================================================\n\n' +
+  blocks.join('\n\n') + '\n' + anchor;
+cur = cur.replace(anchor, restore);
+
+// printBarcode: reemplazar por la versión Code128 (la de HEAD imprime texto plano)
+if (blocks.some(b => b.includes('function printBarcode'))) {
+  const iStart = cur.indexOf('    function printBarcode(');
+  if (iStart !== -1) {
+    let depth = 0, j = iStart, started = false;
+    for (; j < cur.length; j++) {
+      const ch = cur[j];
+      if (ch === '{') { depth++; started = true; }
+      else if (ch === '}') { depth--; if (started && depth === 0) { j++; break; } }
+    }
+    while (cur[j] === '\n') j++;
+    const code128 = `    // ── Code128B encoder → SVG (escaneable en lector estándar) ──
+    var CODE128_BARS = [
+        '212222','222122','222221','121223','121322','131222','122213','122312','132212','221213',
+        '221312','231212','112232','122132','122231','113222','123122','123221','223211','221132',
+        '221231','213212','223112','312131','311222','321122','321221','312212','322112','322211',
+        '212123','212321','232121','111323','131123','131321','112313','132113','132311','211313',
+        '231113','231311','112133','112331','132131','113123','113321','133121','313121','211331',
+        '231131','213113','213311','213131','311123','311321','331121','312113','312311','332111',
+        '314111','221411','431111','111224','111422','121124','121421','141122','141221','112214',
+        '112412','122114','122411','142112','142211','241211','221114','413111','241112','134111',
+        '111242','121142','121241','114212','124112','124211','411212','421112','421211','212141',
+        '214121','412121','111143','111341','131141','114113','114311','411113','411311','113141',
+        '114131','311141','411131','211412','211214','211232','2331112'
+    ];
+
+    function code128Svg(data, width, height) {
+        data = String(data || '');
+        if (!data.length) return '';
+        var codes = [104];
+        var sum = 104;
+        for (var i = 0; i < data.length; i++) {
+            var c = data.charCodeAt(i);
+            if (c < 32 || c > 126) c = 32;
+            var v = c - 32;
+            codes.push(v);
+            sum += v * (i + 1);
+        }
+        codes.push(sum % 103);
+        codes.push(106);
+        var quiet = 10;
+        var modules = quiet * 2;
+        codes.forEach(function (cd) {
+            CODE128_BARS[cd].split('').forEach(function (w) { modules += parseInt(w, 10); });
+        });
+        var mw = width / modules;
+        var bars = '';
+        var x = quiet * mw;
+        codes.forEach(function (cd) {
+            var pat = CODE128_BARS[cd];
+            for (var k = 0; k < pat.length; k++) {
+                var w = parseInt(pat[k], 10) * mw;
+                if (k % 2 === 0) bars += '<rect x="' + x.toFixed(2) + '" y="0" width="' + w.toFixed(2) + '" height="' + height + '"/>';
+                x += w;
+            }
+        });
+        return '<svg xmlns="http://www.w3.org/2000/svg" width="' + width + '" height="' + height + '" viewBox="0 0 ' + width + ' ' + height + '" fill="#000">' + bars + '</svg>';
+    }
+
+    function printBarcode(barcode, partNumber, name) {
+        var w = window.open('', '_blank', 'width=420,height=300');
+        w.document.write('<html><head><title>Etiqueta</title><style>body{font-family:system-ui,sans-serif;text-align:center;padding:16px;margin:0;}h1{font-size:1rem;margin:4px 0;}p{margin:2px 0;font-size:0.85rem;}</style></head><body>');
+        w.document.write(code128Svg(barcode || partNumber, 320, 70));
+        w.document.write('<h1>' + (barcode || partNumber) + '</h1>');
+        w.document.write('<p style="font-weight:600;">' + partNumber + '</p>');
+        w.document.write('<p style="font-size:0.85rem;">' + name + '</p>');
+        w.document.write('</body></html>');
+        w.document.close();
+        w.print();
+    }
+`;
+      cur = cur.slice(0, iStart) + code128 + cur.slice(j);
+      console.log('printBarcode reemplazado por versión Code128');
+    }
+}
+
+fs.writeFileSync('pos/static/js/inventory.js', cur);
+console.log('restauración completa');
diff --git a/restore_inventory2.js b/restore_inventory2.js
new file mode 100644
index 0000000..1241019
--- /dev/null
+++ b/restore_inventory2.js
@@ -0,0 +1,110 @@
+#!/usr/bin/env node
+/* Reintento: extracción por marcador de siguiente función (no por llaves). */
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+let cur = fs.readFileSync('pos/static/js/inventory.js', 'utf8');
+
+// 1. Quitar el bloque restaurado mal insertado
+const startMark = '\n    // =====================================================================\n    //  RESTAURADAS (borradas por error en el patch de transferencias)';
+const endMark = '\n    // =====================================================================\n    //  EXPOSE GLOBALS (for onclick handlers in HTML)';
+const i1 = cur.indexOf(startMark);
+const i2 = cur.indexOf(endMark);
+if (i1 !== -1 && i2 !== -1 && i2 > i1) {
+  cur = cur.slice(0, i1) + cur.slice(i2);
+  console.log('bloque malo removido');
+} else {
+  console.log('bloque restaurado no encontrado (¿ya limpio?)', i1, i2);
+}
+
+// 2. Extraer funciones de HEAD por marcadores
+const old = execSync('git show HEAD:pos/static/js/inventory.js', { maxBuffer: 20 * 1024 * 1024 }).toString();
+const MISSING = ['viewHistory', 'closeHistoryModal', 'recordTransfer', 'approvePhysicalCount',
+  'cancelDraft', 'loadAlerts', 'printBarcode', 'deleteItem', 'publishToMeli'];
+
+function extractFn(name) {
+  const start = '\n    function ' + name + '(';
+  const i = old.indexOf(start);
+  if (i === -1) return null;
+  // fin: el próximo "    function " o "    // ====" a nivel 4 después del inicio
+  let end = old.length;
+  const nextFn = old.indexOf('\n    function ', i + start.length);
+  const nextMark = old.indexOf('\n    // =====================================================================', i + start.length);
+  if (nextFn !== -1) end = Math.min(end, nextFn);
+  if (nextMark !== -1) end = Math.min(end, nextMark);
+  return old.slice(i + 1, end);
+}
+
+const blocks = [];
+for (const name of MISSING) {
+  const b = extractFn(name);
+  if (b) blocks.push(b.trimEnd());
+  else console.log('⚠ no encontrado en HEAD:', name);
+}
+
+const anchor = endMark;
+const restore = '\n    // =====================================================================\n' +
+  '    //  RESTAURADAS (recuperadas de git HEAD)\n' +
+  '    // =====================================================================\n\n' +
+  blocks.join('\n\n') + '\n' + anchor;
+cur = cur.replace(anchor, restore);
+
+// printBarcode versión Code128
+const iStart = cur.indexOf('    function printBarcode(');
+if (iStart !== -1) {
+  let end = cur.length;
+  const nextFn = cur.indexOf('\n    function ', iStart + 30);
+  const nextMark = cur.indexOf('\n    // =====================================================================', iStart + 30);
+  if (nextFn !== -1) end = Math.min(end, nextFn);
+  if (nextMark !== -1) end = Math.min(end, nextMark);
+  const code128 = `    function code128Svg(data, width, height) {
+        data = String(data || '');
+        if (!data.length) return '';
+        var codes = [104];
+        var sum = 104;
+        for (var i = 0; i < data.length; i++) {
+            var c = data.charCodeAt(i);
+            if (c < 32 || c > 126) c = 32;
+            var v = c - 32;
+            codes.push(v);
+            sum += v * (i + 1);
+        }
+        codes.push(sum % 103);
+        codes.push(106);
+        var quiet = 10;
+        var modules = quiet * 2;
+        codes.forEach(function (cd) {
+            CODE128_BARS[cd].split('').forEach(function (w) { modules += parseInt(w, 10); });
+        });
+        var mw = width / modules;
+        var bars = '';
+        var x = quiet * mw;
+        codes.forEach(function (cd) {
+            var pat = CODE128_BARS[cd];
+            for (var k = 0; k < pat.length; k++) {
+                var w = parseInt(pat[k], 10) * mw;
+                if (k % 2 === 0) bars += '<rect x="' + x.toFixed(2) + '" y="0" width="' + w.toFixed(2) + '" height="' + height + '"/>';
+                x += w;
+            }
+        });
+        return '<svg xmlns="http://www.w3.org/2000/svg" width="' + width + '" height="' + height + '" viewBox="0 0 ' + width + ' ' + height + '" fill="#000">' + bars + '</svg>';
+    }
+
+    function printBarcode(barcode, partNumber, name) {
+        var w = window.open('', '_blank', 'width=420,height=300');
+        w.document.write('<html><head><title>Etiqueta</title><style>body{font-family:system-ui,sans-serif;text-align:center;padding:16px;margin:0;}h1{font-size:1rem;margin:4px 0;}p{margin:2px 0;font-size:0.85rem;}</style></head><body>');
+        w.document.write(code128Svg(barcode || partNumber, 320, 70));
+        w.document.write('<h1>' + (barcode || partNumber) + '</h1>');
+        w.document.write('<p style="font-weight:600;">' + partNumber + '</p>');
+        w.document.write('<p style="font-size:0.85rem;">' + name + '</p>');
+        w.document.write('</body></html>');
+        w.document.close();
+        w.print();
+    }
+`;
+  cur = cur.slice(0, iStart) + code128 + cur.slice(end);
+  console.log('printBarcode Code128 OK');
+}
+
+fs.writeFileSync('pos/static/js/inventory.js', cur);
+console.log('restauración v2 completa');
diff --git a/restore_inventory3.js b/restore_inventory3.js
new file mode 100644
index 0000000..113d79a
--- /dev/null
+++ b/restore_inventory3.js
@@ -0,0 +1,75 @@
+#!/usr/bin/env node
+/* Restauración v3: TODAS las funciones/globales que el parche borró de inventory.js
+   (comparando HEAD vs actual por referencias de templates + exposiciones window). */
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const old = execSync('git show HEAD:pos/static/js/inventory.js', { maxBuffer: 20 * 1024 * 1024 }).toString();
+let cur = fs.readFileSync('pos/static/js/inventory.js', 'utf8');
+
+// 1. Identificadores referenciados por templates (onclick/onchange/oninput/onkeydown)
+const tpl = fs.readFileSync('pos/templates/inventory.html', 'utf8');
+const handlers = new Set();
+const reH = /on(?:click|change|input|keydown|keyup|blur|focus)="([^"]+)"/g;
+let m;
+while ((m = reH.exec(tpl))) {
+  const body = m[1];
+  const reId = /([A-Za-z_$][\w$]*)\s*\(/g;
+  let mm;
+  while ((mm = reId.exec(body))) {
+    const fn = mm[1];
+    if (!['if', 'event', 'this', 'return', 'parseInt', 'parseFloat', 'String', 'Number', 'confirm', 'alert'].includes(fn)) {
+      handlers.add(fn);
+    }
+  }
+}
+
+// 2. window.X = X sin definición en el archivo actual
+const exposeRe = /window\.([A-Za-z_$][\w$]*)\s*=\s*\1\b/g;
+const exposed = new Set();
+while ((m = exposeRe.exec(cur))) exposed.add(m[1]);
+
+// 3. Referencias directas dentro del JS (llamadas sin definición)
+const calledMissing = [];
+for (const name of handlers) {
+  const defined = new RegExp('function\\s+' + name + '\\b').test(cur) ||
+                  new RegExp('\\b' + name + '\\s*=\\s*function').test(cur) ||
+                  cur.includes('window.' + name + ' ');
+  if (!defined) calledMissing.push(name);
+}
+
+console.log('handlers de template SIN definición:', calledMissing);
+console.log('exposiciones window sin función:', [...exposed].filter(n => !new RegExp('function\\s+' + n + '\\b').test(cur) && !new RegExp('\\b' + n + '\\s*=\\s*function').test(cur)));
+
+// 4. extraer de HEAD cada función faltante (por marcadores de 4 espacios)
+function extractFrom(src, name) {
+  const start = src.indexOf('\n    function ' + name + '(');
+  if (start === -1) return null;
+  let end = src.length;
+  const nf = src.indexOf('\n    function ', start + 30);
+  const nm = src.indexOf('\n    // =====================================================================', start + 30);
+  if (nf !== -1) end = Math.min(end, nf);
+  if (nm !== -1) end = Math.min(end, nm);
+  return src.slice(start + 1, end);
+}
+
+const need = new Set([...calledMissing]);
+for (const n of exposed) {
+  if (!new RegExp('function\\s+' + n + '\\b').test(cur)) need.add(n);
+}
+
+const blocks = [];
+for (const name of need) {
+  const b = extractFrom(old, name);
+  if (b) blocks.push(b.trimEnd());
+  else console.log('  (no está en HEAD: ' + name + ')');
+}
+
+if (blocks.length) {
+  const anchor = '\n    // =====================================================================\n    //  EXPOSE GLOBALS (for onclick handlers in HTML)';
+  const idx = cur.indexOf(anchor);
+  if (idx === -1) { console.log('ERROR: anchor no encontrado'); process.exit(1); }
+  cur = cur.slice(0, idx) + '\n    // ==== RESTAURADAS v3 ====\n\n' + blocks.join('\n\n') + '\n' + cur.slice(idx);
+  fs.writeFileSync('pos/static/js/inventory.js', cur);
+  console.log('restauradas ' + blocks.length + ' funciones');
+}
diff --git a/restore_inventory4.js b/restore_inventory4.js
new file mode 100644
index 0000000..c01478a
--- /dev/null
+++ b/restore_inventory4.js
@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+/* Restauración v4: extrae funciones de HEAD en ambos formatos (function X / window.X = function). */
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const old = execSync('git show HEAD:pos/static/js/inventory.js', { maxBuffer: 20 * 1024 * 1024 }).toString();
+let cur = fs.readFileSync('pos/static/js/inventory.js', 'utf8');
+
+// Nombres realmente faltantes (referenciados por templates o expuestos), según auditoría:
+const CANDIDATES = ['searchMeliCategories', 'handleMeliCatKeydown', 'onMeliShippingChange',
+  'validateMeliPublish', 'executeMeliPublish', 'openMeliPublishModal', 'closeMeliPublishModal',
+  'refreshMeliPublishPreview', 'selectMeliCategory', 'selectMeliCategoryIdx', 'highlightMeliCat',
+  'loadCategoryAttributes', 'updateMeliTitleCount', 'handleMeliImageUpload', 'showTierDiscountModal',
+  'closeTierDiscountModal', 'saveTierDiscounts', 'openInventoryFilters'];
+
+function hasDef(src, name) {
+  return new RegExp('\\n    function ' + name + '\\s*\\(').test(src) ||
+         new RegExp('\\n    window\\.' + name + '\\s*=').test(src) ||
+         new RegExp('\\n    (?:var|let|const) ' + name + '\\s*=').test(src);
+}
+
+// extrae desde el inicio de la definición hasta el próximo inicio de nivel 4
+function extract(src, name) {
+  const patterns = [
+    '\n    function ' + name + '(',
+    '\n    function ' + name + ' (',
+    '\n    window.' + name + ' = function',
+    '\n    window.' + name + ' = async function',
+    '\n    var ' + name + ' = function',
+  ];
+  let start = -1;
+  for (const p of patterns) { start = src.indexOf(p); if (start !== -1) break; }
+  if (start === -1) return null;
+  let end = src.length;
+  const stops = [
+    src.indexOf('\n    function ', start + 30),
+    src.indexOf('\n    window.', start + 30),
+    src.indexOf('\n    var ', start + 30),
+    src.indexOf('\n    // ====', start + 30),
+  ].filter(i => i !== -1);
+  if (stops.length) end = Math.min(...stops);
+  return src.slice(start + 1, end);
+}
+
+const blocks = [];
+const missingNoHead = [];
+for (const name of CANDIDATES) {
+  if (hasDef(cur, name)) continue;           // ya existe
+  const b = extract(old, name);
+  if (b) blocks.push(b.trimEnd());
+  else missingNoHead.push(name);
+}
+
+console.log('restaurables desde HEAD:', blocks.length);
+console.log('no halladas en HEAD:', missingNoHead);
+
+if (blocks.length) {
+  const anchor = '\n    // =====================================================================\n    //  EXPOSE GLOBALS (for onclick handlers in HTML)';
+  const idx = cur.indexOf(anchor);
+  if (idx === -1) { console.log('ERROR anchor'); process.exit(1); }
+  cur = cur.slice(0, idx) + '\n    // ==== RESTAURADAS v4 (MELI + descuentos) ====\n\n' + blocks.join('\n\n') + '\n' + cur.slice(idx);
+}
+fs.writeFileSync('pos/static/js/inventory.js', cur);
+console.log('escrito');
diff --git a/scripts/assign_sat_keys.py b/scripts/assign_sat_keys.py
new file mode 100644
index 0000000..b12b2a2
--- /dev/null
+++ b/scripts/assign_sat_keys.py
@@ -0,0 +1,235 @@
+#!/usr/bin/env python3
+"""Assign SAT ``clave_prod_serv`` / ``clave_unidad`` per product (CFDI 4.0).
+
+Two modes:
+
+  sale-items (default, writes): backfill the existing ``sale_items`` columns
+      for a tenant.  Historically they are 100% NULL, so every CFDI fell back
+      to the hard-coded default (25174800 / H87).  Consumers that read
+      ``sale_items`` directly (``services/global_invoice.py``,
+      ``blueprints/invoicing_bp.py``) keep the default themselves, so the only
+      way to give them a real per-product key is to persist it here.
+
+  inventory (report only): show the key distribution that *would* be assigned
+      to ``inventory`` rows.  ``inventory`` has no clave columns today, so this
+      mode never writes — see the module note in the summary for the proposed
+      ``inventory.clave_prod_serv`` / ``inventory.clave_unidad varchar(10)``
+      columns.
+
+Resolution order per item: ``services.sat_keys`` keyword rules over the name,
+then the canonical category (from ``product_categorizer`` or the tenant
+``categories`` row), then optionally the ``ai_chat`` LLM fallback, then the SAT
+default.  Every AI call degrades silently when the provider is down.
+
+Usage (as root, from /home/Autopartes):
+    python3 scripts/assign_sat_keys.py --tenant 45 --limit 200 --dry-run
+    python3 scripts/assign_sat_keys.py --tenant 45 --limit 500 --use-llm
+    python3 scripts/assign_sat_keys.py --tenant 45 --mode inventory --dry-run
+    python3 scripts/assign_sat_keys.py --all --batch 500
+
+Nothing is written unless ``--apply`` (mode sale-items); ``--dry-run`` is the
+default to avoid surprises.
+"""
+
+import argparse
+import json
+import os
+import sys
+import time
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+from services import sat_keys  # noqa: E402
+from services.product_categorizer import classify_name  # noqa: E402
+
+DEFAULT_CHECKPOINT = os.path.join(
+    os.path.dirname(os.path.abspath(__file__)), '..', 'backups',
+    'sat_keys_checkpoint.json'
+)
+
+
+def list_tenants(only_id=None):
+    conn = get_master_conn()
+    cur = conn.cursor()
+    try:
+        if only_id:
+            cur.execute(
+                "SELECT id, name, db_name FROM tenants "
+                "WHERE is_active = true AND id = %s", (only_id,))
+        else:
+            cur.execute(
+                "SELECT id, name, db_name FROM tenants "
+                "WHERE is_active = true ORDER BY id")
+        return cur.fetchall()
+    finally:
+        cur.close()
+        conn.close()
+
+
+def _load_checkpoint(path):
+    try:
+        with open(path) as f:
+            return json.load(f)
+    except Exception:
+        return {}
+
+
+def _save_checkpoint(path, data):
+    try:
+        os.makedirs(os.path.dirname(path), exist_ok=True)
+        with open(path, 'w') as f:
+            json.dump(data, f, indent=2)
+    except Exception as e:
+        print(f"  ! checkpoint no guardado: {e}")
+
+
+def _resolve(prod_name, brand, category_name, part_number, use_llm):
+    canonical = None
+    try:
+        canonical = classify_name(prod_name or part_number or '', brand)[0]
+    except Exception:
+        canonical = None
+    return sat_keys.resolve_key(
+        name=prod_name, brand=brand, category=category_name,
+        canonical=canonical, part_number=part_number, use_llm=use_llm,
+    )
+
+
+def run_sale_items(tenant_id, name, conn, args, state):
+    after_id = None if args.reset else state.get('after_id')
+    t_key = str(tenant_id)
+    totals = {'scanned': 0, 'updated': 0, 'by_source': {}}
+    while True:
+        cur = conn.cursor()
+        where = ["(si.clave_prod_serv IS NULL OR si.clave_prod_serv = '')"]
+        params = []
+        if after_id is not None:
+            where.append("si.id > %s")
+            params.append(after_id)
+        sql = f"""
+            SELECT si.id, si.part_number, si.name, si.inventory_id,
+                   i.name, i.brand, c.name
+            FROM sale_items si
+            LEFT JOIN inventory i ON i.id = si.inventory_id
+            LEFT JOIN categories c ON c.id = i.category_id
+            WHERE {' AND '.join(where)}
+            ORDER BY si.id
+            LIMIT %s
+        """
+        params.append(args.batch)
+        cur.execute(sql, params)
+        rows = cur.fetchall()
+        cur.close()
+        if not rows:
+            break
+
+        for (si_id, si_pn, si_name, inv_id, inv_name, inv_brand, cat_name) in rows:
+            prod_name = inv_name or si_name
+            clave, unidad, source = _resolve(
+                prod_name, inv_brand, cat_name, si_pn, args.use_llm)
+            totals['by_source'][source] = totals['by_source'].get(source, 0) + 1
+            totals['scanned'] += 1
+            after_id = si_id
+            if args.apply:
+                c2 = conn.cursor()
+                try:
+                    c2.execute(
+                        "UPDATE sale_items SET clave_prod_serv = %s, "
+                        "clave_unidad = %s WHERE id = %s",
+                        (clave, unidad, si_id))
+                    totals['updated'] += c2.rowcount
+                    conn.commit()
+                finally:
+                    c2.close()
+            if totals['scanned'] <= args.show:
+                print(f"  {si_id:<8} {str(prod_name)[:40]:<40} -> {clave} / {unidad} ({source})")
+
+        state[t_key] = {'after_id': after_id, 'updated': totals['updated'],
+                        'updated_at': time.strftime('%Y-%m-%dT%H:%M:%S')}
+        if args.apply and not args.dry_run:
+            _save_checkpoint(args.checkpoint, state)
+        if len(rows) < args.batch:
+            break
+        if args.limit and totals['scanned'] >= args.limit:
+            break
+    return totals
+
+
+def run_inventory(tenant_id, conn, args):
+    """Report-only: distribution of keys the rules would assign to inventory."""
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT i.id, i.part_number, i.name, i.brand, c.name
+        FROM inventory i
+        LEFT JOIN categories c ON c.id = i.category_id
+        WHERE i.is_active = true
+        ORDER BY i.id
+        LIMIT %s
+    """, (args.batch,))
+    rows = cur.fetchall()
+    cur.close()
+    by_source, by_key, sample = {}, {}, []
+    for inv_id, pn, nm, brand, cat in rows:
+        clave, unidad, source = _resolve(nm, brand, cat, pn, args.use_llm)
+        by_source[source] = by_source.get(source, 0) + 1
+        by_key[clave] = by_key.get(clave, 0) + 1
+        if len(sample) < args.show:
+            sample.append((inv_id, nm, clave, unidad, source))
+    print(f"  inventory scanned={len(rows)} by_source={by_source}")
+    print(f"  keys: {by_key}")
+    for inv_id, nm, clave, unidad, source in sample:
+        print(f"  {inv_id:<8} {str(nm)[:40]:<40} -> {clave} / {unidad} ({source})")
+    return {'scanned': len(rows), 'by_source': by_source, 'by_key': by_key}
+
+
+def main():
+    p = argparse.ArgumentParser(description='Assign SAT product/unit keys.')
+    p.add_argument('--tenant', type=int)
+    p.add_argument('--all', action='store_true')
+    p.add_argument('--mode', choices=['sale-items', 'inventory'], default='sale-items')
+    p.add_argument('--limit', type=int, default=0, help='max items per tenant (0=all)')
+    p.add_argument('--batch', type=int, default=500)
+    p.add_argument('--apply', action='store_true', help='persist (sale-items only)')
+    p.add_argument('--dry-run', action='store_true', default=True)
+    p.add_argument('--use-llm', action='store_true', help='enable ai_chat fallback')
+    p.add_argument('--reset', action='store_true', help='ignore checkpoint')
+    p.add_argument('--show', type=int, default=8)
+    p.add_argument('--checkpoint', default=DEFAULT_CHECKPOINT)
+    args = p.parse_args()
+
+    # --apply is the only thing that turns off dry-run; keep it explicit.
+    if args.apply:
+        args.dry_run = False
+    if not args.all and not args.tenant:
+        p.error('--tenant ID o --all requerido')
+
+    state = _load_checkpoint(args.checkpoint)
+    tenants = list_tenants(None if args.all else args.tenant)
+    if not tenants:
+        print('sin tenants para procesar')
+        return 1
+
+    print(f"mode={args.mode} apply={not args.dry_run} use_llm={args.use_llm}")
+    grand = {}
+    for tid, name, db_name in tenants:
+        print(f"\n=== tenant {tid} — {name} ({db_name}) ===")
+        conn = get_tenant_conn(tid)
+        try:
+            if args.mode == 'inventory':
+                run_inventory(tid, conn, args)
+            else:
+                totals = run_sale_items(tid, name, conn, args, state)
+                print(f"  total: scanned={totals['scanned']} updated={totals['updated']} "
+                      f"by_source={totals['by_source']}")
+                for k, v in totals['by_source'].items():
+                    grand[k] = grand.get(k, 0) + v
+        finally:
+            conn.close()
+    if args.mode == 'sale-items':
+        print(f"\nTOTAL by_source={grand}")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/b2b_marketplace_schema.py b/scripts/b2b_marketplace_schema.py
new file mode 100644
index 0000000..74bf2de
--- /dev/null
+++ b/scripts/b2b_marketplace_schema.py
@@ -0,0 +1,180 @@
+#!/usr/bin/env python3
+"""Idempotent master-database schema for the B2B yonke marketplace.
+
+Creates/ensures, in the master DB (nexus_autoparts):
+  - b2b_listings            (used-part wholesale catalog published by sellers)
+  - marketplace_orders      (cross-tenant order header; from v1.6_marketplace.sql)
+  - marketplace_order_items (order lines; + listing_id link column)
+  - tenants.is_seller       (seller opt-in flag)
+and activates is_seller=true for the demo sellers (47 Yonke Demo, 45 Capi Autopartes).
+
+Safe to run repeatedly: every statement is CREATE ... IF NOT EXISTS / ADD COLUMN
+IF NOT EXISTS / UPDATE (idempotent). It never drops or rewrites data.
+
+Run:
+    cd /home/Autopartes && python3 scripts/b2b_marketplace_schema.py
+    # or point at another master DB:
+    MASTER_DB_URL=postgresql://user@host/nexus_autoparts python3 scripts/b2b_marketplace_schema.py
+"""
+
+import os
+import sys
+
+import psycopg2
+
+MASTER_DB_URL = (
+    os.environ.get('MASTER_DB_URL')
+    or 'postgresql://postgres@localhost/nexus_autoparts'
+)
+
+# Demo sellers that must appear in the marketplace so it is never empty.
+DEMO_SELLER_TENANT_IDS = (47, 45)
+
+B2B_LISTINGS_DDL = """
+CREATE TABLE IF NOT EXISTS b2b_listings (
+    id                  SERIAL PRIMARY KEY,
+    seller_tenant_id    INTEGER NOT NULL,
+    seller_inventory_id INTEGER NOT NULL,
+    part_number         VARCHAR(100),
+    name                VARCHAR(300),
+    condition           VARCHAR(20) DEFAULT 'usado',
+    condition_grade     VARCHAR(2),
+    price_wholesale     NUMERIC(12,2) NOT NULL DEFAULT 0,
+    donor_make          VARCHAR(60),
+    donor_model         VARCHAR(60),
+    donor_year          INTEGER,
+    image_url           VARCHAR(500),
+    status              VARCHAR(20) NOT NULL DEFAULT 'available',
+    notes               TEXT,
+    created_at          TIMESTAMPTZ DEFAULT NOW(),
+    updated_at          TIMESTAMPTZ DEFAULT NOW(),
+    UNIQUE (seller_tenant_id, seller_inventory_id)
+)
+"""
+
+# Mirror of pos/migrations/v1.6_marketplace.sql (master DB), kept here so this
+# script can repair a master DB where the migration was skipped.
+MARKETPLACE_ORDERS_DDL = """
+CREATE TABLE IF NOT EXISTS marketplace_orders (
+    id               SERIAL PRIMARY KEY,
+    buyer_tenant_id  INTEGER NOT NULL,
+    seller_tenant_id INTEGER NOT NULL,
+    buyer_name       VARCHAR(200),
+    seller_name      VARCHAR(200),
+    total            NUMERIC(12,2),
+    status           VARCHAR(20) DEFAULT 'pending',
+    notes            TEXT,
+    created_at       TIMESTAMPTZ DEFAULT NOW(),
+    updated_at       TIMESTAMPTZ DEFAULT NOW()
+)
+"""
+
+MARKETPLACE_ORDER_ITEMS_DDL = """
+CREATE TABLE IF NOT EXISTS marketplace_order_items (
+    id          SERIAL PRIMARY KEY,
+    order_id    INTEGER REFERENCES marketplace_orders(id),
+    part_number VARCHAR(100),
+    part_name   VARCHAR(300),
+    quantity    INTEGER,
+    unit_price  NUMERIC(12,2),
+    subtotal    NUMERIC(12,2)
+)
+"""
+
+STATEMENTS = [
+    ('b2b_listings', B2B_LISTINGS_DDL),
+    ('marketplace_orders', MARKETPLACE_ORDERS_DDL),
+    ('marketplace_order_items', MARKETPLACE_ORDER_ITEMS_DDL),
+
+    # Extensions to tables that may already exist.
+    ('marketplace_order_items.listing_id',
+     "ALTER TABLE marketplace_order_items ADD COLUMN IF NOT EXISTS listing_id INTEGER"),
+    ('tenants.is_seller',
+     "ALTER TABLE tenants ADD COLUMN IF NOT EXISTS is_seller BOOLEAN DEFAULT FALSE"),
+
+    # Indexes.
+    ('idx_b2b_listings_seller',
+     "CREATE INDEX IF NOT EXISTS idx_b2b_listings_seller ON b2b_listings(seller_tenant_id)"),
+    ('idx_b2b_listings_status',
+     "CREATE INDEX IF NOT EXISTS idx_b2b_listings_status ON b2b_listings(status)"),
+    ('idx_b2b_listings_catalog',
+     "CREATE INDEX IF NOT EXISTS idx_b2b_listings_catalog ON b2b_listings(status, condition_grade)"),
+    ('idx_mp_orders_buyer',
+     "CREATE INDEX IF NOT EXISTS idx_mp_orders_buyer ON marketplace_orders(buyer_tenant_id)"),
+    ('idx_mp_orders_seller',
+     "CREATE INDEX IF NOT EXISTS idx_mp_orders_seller ON marketplace_orders(seller_tenant_id)"),
+    ('idx_mp_orders_status',
+     "CREATE INDEX IF NOT EXISTS idx_mp_orders_status ON marketplace_orders(status)"),
+    ('idx_mp_order_items_order',
+     "CREATE INDEX IF NOT EXISTS idx_mp_order_items_order ON marketplace_order_items(order_id)"),
+    ('idx_mp_order_items_listing',
+     "CREATE INDEX IF NOT EXISTS idx_mp_order_items_listing ON marketplace_order_items(listing_id)"),
+]
+
+
+def log(msg):
+    print(f"  -> {msg}")
+
+
+def ensure_schema(conn):
+    cur = conn.cursor()
+    for label, sql in STATEMENTS:
+        cur.execute(sql)
+        log(f"ok: {label}")
+    conn.commit()
+    cur.close()
+
+
+def verify(conn):
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT to_regclass('b2b_listings'),
+               to_regclass('marketplace_orders'),
+               to_regclass('marketplace_order_items')
+    """)
+    row = cur.fetchone()
+    cur.close()
+    return row
+
+
+def activate_demo_sellers(conn):
+    cur = conn.cursor()
+    cur.execute(
+        "SELECT id, name, COALESCE(is_seller, false) FROM tenants WHERE id = ANY(%s) ORDER BY id",
+        (list(DEMO_SELLER_TENANT_IDS),),
+    )
+    found = cur.fetchall()
+    if not found:
+        log("no demo tenants found (47, 45) — skipping is_seller activation")
+        cur.close()
+        return
+    cur.execute(
+        "UPDATE tenants SET is_seller = TRUE WHERE id = ANY(%s)",
+        (list(DEMO_SELLER_TENANT_IDS),),
+    )
+    conn.commit()
+    for tenant_id, name, was_seller in found:
+        state = "already seller" if was_seller else "activated"
+        log(f"tenant {tenant_id} ({name}): {state}")
+    cur.close()
+
+
+def main():
+    print(f"B2B marketplace master schema -> {MASTER_DB_URL}")
+    conn = psycopg2.connect(MASTER_DB_URL)
+    try:
+        ensure_schema(conn)
+        activate_demo_sellers(conn)
+        b2b, orders, items = verify(conn)
+        print("Verification:")
+        log(f"b2b_listings={b2b}")
+        log(f"marketplace_orders={orders}")
+        log(f"marketplace_order_items={items}")
+    finally:
+        conn.close()
+    print("Done.")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/backfill_meli_listings.py b/scripts/backfill_meli_listings.py
new file mode 100644
index 0000000..e9343df
--- /dev/null
+++ b/scripts/backfill_meli_listings.py
@@ -0,0 +1,104 @@
+#!/usr/bin/env python3
+"""Backfill marketplace_listings.inventory_id for a tenant (MercadoLibre).
+
+For every listing already imported from MercadoLibre, fetch the ML item and
+match it against local inventory by:
+  1. seller_custom_field / seller_sku
+  2. SELLER_SKU / PART_NUMBER / SELLER_PART_NUMBER attributes
+     (item level and per variation)
+  3. inventory.part_number, then inventory_sku_aliases.sku
+     (exact match first, then normalized: spaces/dashes/dots stripped)
+  4. the ML item id itself, as a last resort (some tenants store it as alias)
+
+Dry-run by default: it reports what it *would* map without writing anything.
+Pass --apply to persist inventory_id + inventory_match_source + matched_at.
+
+Usage (from /home/Autopartes):
+    python3 scripts/backfill_meli_listings.py --tenant 31                # dry-run
+    python3 scripts/backfill_meli_listings.py --tenant 31 --apply
+    python3 scripts/backfill_meli_listings.py --tenant 31 --apply --limit 10
+    python3 scripts/backfill_meli_listings.py --tenant 31 --all          # re-check mapped too
+    python3 scripts/backfill_meli_listings.py --tenant 31 --json
+
+Requires MASTER_DB_URL + TENANT_DB_URL_TEMPLATE in the environment; if missing
+they are loaded from /etc/nexus/pos.env.
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+
+def _load_env():
+    env_file = '/etc/nexus/pos.env'
+    if os.environ.get('MASTER_DB_URL') or not os.path.exists(env_file):
+        return
+    for line in open(env_file):
+        line = line.strip()
+        if not line or line.startswith('#') or '=' not in line:
+            continue
+        key, value = line.split('=', 1)
+        os.environ.setdefault(key.strip(), value.strip().strip('"').strip("'"))
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__,
+                                 formatter_class=argparse.RawDescriptionHelpFormatter)
+    ap.add_argument('--tenant', type=int, required=True, help='tenant id (e.g. 31 = Rached)')
+    ap.add_argument('--apply', action='store_true',
+                    help='write the matches (default: dry-run, read-only)')
+    ap.add_argument('--limit', type=int, default=None, help='max listings to process')
+    ap.add_argument('--all', action='store_true',
+                    help='also re-check listings that already have an inventory_id')
+    ap.add_argument('--json', action='store_true', help='print the full summary as JSON')
+    args = ap.parse_args()
+
+    _load_env()
+
+    from tenant_db import get_tenant_conn
+    from services import marketplace_external_service as meli
+
+    conn = get_tenant_conn(args.tenant)
+    try:
+        summary = meli.backfill_listing_inventory(
+            conn,
+            limit=args.limit,
+            only_unmapped=not args.all,
+            dry_run=not args.apply,
+        )
+    finally:
+        conn.close()
+
+    if args.json:
+        print(json.dumps(summary, indent=2, ensure_ascii=False, default=str))
+        return 0
+
+    mode = 'DRY-RUN (no writes)' if summary['dry_run'] else 'APPLIED'
+    print(f"[tenant {args.tenant}] backfill inventory_id — {mode}")
+    print(f"  scanned:   {summary['scanned']}")
+    print(f"  matched:   {summary['matched']}")
+    print(f"  unmatched: {summary['unmatched']}")
+    print(f"  errors:    {summary['errors']}")
+
+    unmatched = [d for d in summary['details'] if d.get('status') == 'unmatched']
+    if unmatched:
+        print("\n  Unmatched listings (ML item has no local part number/SKU):")
+        for d in unmatched:
+            cands = d.get('candidates') or []
+            print(f"    listing {d['listing_id']} ({d['external_item_id']}) "
+                  f"{(d.get('title') or '')[:45]!r} candidates={cands}")
+    if summary['errors']:
+        print("\n  Errors:")
+        for d in summary['details']:
+            if d.get('status') == 'error':
+                print(f"    listing {d['listing_id']}: {d.get('error')}")
+    if summary['dry_run'] and summary['matched']:
+        print("\n  Re-run with --apply to persist these matches.")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/backfill_vehicle_compat.py b/scripts/backfill_vehicle_compat.py
new file mode 100644
index 0000000..7054505
--- /dev/null
+++ b/scripts/backfill_vehicle_compat.py
@@ -0,0 +1,187 @@
+#!/usr/bin/env python3
+"""Backfill vehicle compatibility for ALL tenant inventory items.
+
+Matches tenant inventory part numbers (and SKU aliases) against the master
+supplier_catalog / supplier_catalog_interchange / supplier_catalog_compat
+tables, then inserts model_year_engine_id compat rows with
+source='supplier_catalog'.
+
+Loads the whole mapping in memory (~1M small rows) so it runs in minutes,
+not days. Safe to re-run: ON CONFLICT DO NOTHING skips existing rows.
+
+Usage (as postgres):
+  MASTER_DB_URL=... python3 scripts/backfill_vehicle_compat.py [db_name|all]
+"""
+
+import os
+import re
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+from psycopg2.extras import execute_values  # noqa: E402
+
+MASTER_DB = os.environ.get('MASTER_DB_NAME', 'nexus_autoparts')
+BATCH_COMMIT = 2000
+
+PREFIX_RE = re.compile(r'^[A-Z]{2,5}[-_ ]')  # tenant prefixes like OEM-, INJ-, WAL-
+
+
+def norm(pn):
+    if not pn:
+        return ''
+    return re.sub(r'[\s\-/._]', '', str(pn)).upper()
+
+
+def pn_variants(part_number, aliases):
+    """Candidate normalized part numbers for an inventory item."""
+    out = set()
+    for raw in [part_number] + list(aliases):
+        n = norm(raw)
+        if n:
+            out.add(n)
+        # strip tenant prefixes: OEM-96355 -> 96355
+        stripped = PREFIX_RE.sub('', str(raw or '').upper())
+        n2 = norm(stripped)
+        if n2:
+            out.add(n2)
+    return out
+
+
+def load_master_mapping(cur):
+    cur.execute("SELECT id, sku FROM supplier_catalog")
+    sku_map = {}
+    for cid, sku in cur.fetchall():
+        n = norm(sku)
+        if n:
+            sku_map.setdefault(n, set()).add(cid)
+
+    ix_map = {}
+    cur.execute("SELECT catalog_id, part_number FROM supplier_catalog_interchange")
+    for cid, pn in cur.fetchall():
+        n = norm(pn)
+        if n:
+            ix_map.setdefault(n, set()).add(cid)
+
+    mye_map = {}
+    cur.execute("""
+        SELECT catalog_id, model_year_engine_id FROM supplier_catalog_compat
+        WHERE model_year_engine_id IS NOT NULL
+    """)
+    for cid, mye in cur.fetchall():
+        mye_map.setdefault(cid, set()).add(mye)
+
+    total = len(sku_map) + len(ix_map) + len(mye_map)
+    print(f'[master] skus={len(sku_map)} interchange={len(ix_map)} mye_entries={len(mye_map)} '
+          f'(total {total})', flush=True)
+    return sku_map, ix_map, mye_map
+
+
+def backfill_tenant(db_name, sku_map, ix_map, mye_map):
+    conn = psycopg2.connect(dbname=db_name)
+    cur = conn.cursor()
+
+    # Idempotency index (also fixes batch_add_compatibilities' ON CONFLICT)
+    cur.execute("""
+        CREATE UNIQUE INDEX IF NOT EXISTS ux_compat_inv_mye
+        ON inventory_vehicle_compat (inventory_id, model_year_engine_id)
+    """)
+    conn.commit()
+
+    # Items without any compat row yet
+    cur.execute("""
+        SELECT id, part_number FROM inventory
+        WHERE is_active = true
+          AND NOT EXISTS (
+              SELECT 1 FROM inventory_vehicle_compat c WHERE c.inventory_id = inventory.id)
+        ORDER BY id
+    """)
+    items = cur.fetchall()
+
+    # SKU aliases by inventory_id
+    cur.execute("SELECT inventory_id, sku FROM inventory_sku_aliases")
+    aliases = {}
+    for inv_id, sku in cur.fetchall():
+        aliases.setdefault(inv_id, []).append(sku)
+
+    print(f'[{db_name}] items sin compat: {len(items)}', flush=True)
+
+    matched = inserted = 0
+    pending = []
+    for i, (inv_id, pn) in enumerate(items, start=1):
+        mye_ids = set()
+        for v in pn_variants(pn, aliases.get(inv_id, [])):
+            for cid in (sku_map.get(v) or set()) | (ix_map.get(v) or set()):
+                mye_ids |= mye_map.get(cid) or set()
+            if len(mye_ids) > 500:
+                mye_ids = set(list(mye_ids)[:500])
+                break
+        if mye_ids:
+            matched += 1
+            for mye in mye_ids:
+                pending.append((inv_id, mye, 'supplier_catalog', 0.95))
+
+        if len(pending) >= BATCH_COMMIT:
+            execute_values(cur, """
+                INSERT INTO inventory_vehicle_compat
+                    (inventory_id, model_year_engine_id, source, confidence)
+                VALUES %s ON CONFLICT (inventory_id, model_year_engine_id) DO NOTHING
+            """, pending)
+            conn.commit()
+            inserted += len(pending)
+            pending = []
+
+        if i % 5000 == 0:
+            print(f'  {i}/{len(items)} (matcheados={matched})', flush=True)
+
+    if pending:
+        execute_values(cur, """
+            INSERT INTO inventory_vehicle_compat
+                (inventory_id, model_year_engine_id, source, confidence)
+            VALUES %s ON CONFLICT (inventory_id, model_year_engine_id) DO NOTHING
+        """, pending)
+        conn.commit()
+        inserted += len(pending)
+
+    cur.execute("SELECT count(*) FROM inventory_vehicle_compat")
+    total = cur.fetchone()[0]
+    cur.execute("""
+        SELECT count(*) FROM inventory i
+        WHERE i.is_active AND EXISTS (
+            SELECT 1 FROM inventory_vehicle_compat c WHERE c.inventory_id = i.id)
+    """)
+    covered = cur.fetchone()[0]
+    cur.execute("SELECT count(*) FROM inventory WHERE is_active")
+    active = cur.fetchone()[0]
+
+    print(f'[{db_name}] matcheados={matched} filas_insertadas={inserted} | '
+          f'cobertura total: {covered}/{active} ({100 * covered // max(active, 1)}%)',
+          flush=True)
+    conn.close()
+
+
+def main():
+    target = sys.argv[1] if len(sys.argv) > 1 else 'all'
+    mconn = psycopg2.connect(dbname=MASTER_DB)
+    mcur = mconn.cursor()
+    sku_map, ix_map, mye_map = load_master_mapping(mcur)
+
+    if target == 'all':
+        mcur.execute("SELECT db_name FROM tenants WHERE is_active = true ORDER BY id")
+        dbs = [r[0] for r in mcur.fetchall()]
+    else:
+        dbs = [target]
+
+    for db in dbs:
+        try:
+            backfill_tenant(db, sku_map, ix_map, mye_map)
+        except Exception as e:
+            print(f'[{db}] ERROR: {e}', flush=True)
+    mcur.close()
+    mconn.close()
+    print('Backfill completado.', flush=True)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/backup.sh b/scripts/backup.sh
index 013ce86..6b15fd8 100755
--- a/scripts/backup.sh
+++ b/scripts/backup.sh
@@ -31,6 +31,18 @@ log() {
     echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*"
 }
 
+# ─── Cleanup old backups (FIRST, so a full disk cannot block it) ───
+log "Cleaning up backups older than $RETENTION_DAYS days ..."
+if [[ "$DRY_RUN" == true ]]; then
+    log "DRY-RUN: would delete backups older than $RETENTION_DAYS days"
+else
+    find "$BACKUP_DIR" -name "nexus_backup_*.tar.gz" -type f -mtime +$RETENTION_DAYS -delete
+    find "$BACKUP_DIR" -name "nexus_backup_*.sql" -type f -mtime +$RETENTION_DAYS -delete
+    # Remove empty leftovers from failed runs (e.g. 0-byte dumps when disk was full)
+    find "$BACKUP_DIR" -name "nexus_backup_*" -type f -empty -delete
+    log "Cleanup complete. Disk usage: $(df -h / | awk 'NR==2{print $3"/"$2" ("$5")"}')"
+fi
+
 # ─── PostgreSQL dump ───
 log "Dumping PostgreSQL database: $DB_NAME ..."
 DUMP_FILE="${BACKUP_DIR}/${BACKUP_NAME}.sql"
@@ -90,14 +102,6 @@ else
     log "INFO: S3_BUCKET not set. Skipping cloud upload."
 fi
 
-# ─── Cleanup old backups ───
-log "Cleaning up backups older than $RETENTION_DAYS days ..."
-if [[ "$DRY_RUN" == true ]]; then
-    log "DRY-RUN: would delete backups older than $RETENTION_DAYS days"
-else
-    find "$BACKUP_DIR" -name "nexus_backup_*.tar.gz" -type f -mtime +$RETENTION_DAYS -delete
-    find "$BACKUP_DIR" -name "nexus_backup_*.sql" -type f -mtime +$RETENTION_DAYS -delete
-    log "Cleanup complete."
-fi
-
+# ─── Cleanup ───
+log "Post-backup cleanup (already done at start)."
 log "Done."
diff --git a/scripts/backup_selective.sh b/scripts/backup_selective.sh
index 8990e46..91f7ba9 100755
--- a/scripts/backup_selective.sh
+++ b/scripts/backup_selective.sh
@@ -25,9 +25,10 @@ fatal() { err "$*"; exit 1; }
 
 # ─── Configuration ─────────────────────────────────────────────────────────
 BACKUP_DIR="${BACKUP_DIR:-${PROJECT_DIR}/backups}"
-RETENTION_DAYS="${RETENTION_DAYS:-30}"
+RETENTION_DAYS="${RETENTION_DAYS:-21}"
 MASTER_DB="${MASTER_DB:-nexus_autoparts}"
 DB_USER="${DB_USER:-nexus}"
+AWS_CLI="${PROJECT_DIR}/tools/bin/aws"
 
 # Load .env if exists
 if [[ -f "${PROJECT_DIR}/.env" ]]; then
@@ -128,8 +129,15 @@ backup_master_data() {
     rm -f "$tables_file"
 }
 
-# ─── Backup vehicle_parts schema only ──────────────────────────────────────
+# ─── Backup vehicle_parts schema only (if table exists) ────────────────────
 backup_vehicle_parts_schema() {
+    local exists=$(sudo -u postgres psql "$MASTER_DB" -Atc \
+        "SELECT 1 FROM pg_tables WHERE schemaname='public' AND tablename='vehicle_parts'" 2>/dev/null)
+    if [[ "$exists" != "1" ]]; then
+        info "vehicle_parts table does not exist — skipping (legacy step)"
+        return 0
+    fi
+
     info "Backing up vehicle_parts schema only (structure, no data)..."
 
     local output="${BACKUP_PATH}/03_vehicle_parts_schema.sql"
@@ -146,6 +154,34 @@ backup_vehicle_parts_schema() {
 }
 
 # ─── Backup all tenant databases ───────────────────────────────────────────
+# ─── Backup WA CRM (Supabase self-hosted, docker) ─────────────────────────
+backup_wacrm() {
+    local container="supabase-db"
+    if ! docker ps --format '{{.Names}}' 2>/dev/null | grep -qx "$container"; then
+        info "WA CRM (supabase-db) no está corriendo — se omite"
+        return 0
+    fi
+    local output="${BACKUP_PATH}/wacrm_supabase.sql"
+    info "Backing up WA CRM (Supabase postgres)..."
+    if docker exec "$container" pg_dump -U postgres -d postgres --clean --if-exists > "$output" 2>/dev/null; then
+        gzip -f "$output"
+        ok "WA CRM: $(du -h "${output}.gz" | cut -f1)"
+    else
+        warn "WA CRM: pg_dump falló (se omite)"
+        rm -f "$output"
+    fi
+
+    # Volumen de storage (archivos multimedia de los chats) — solo si existe
+    local media_tar="${BACKUP_PATH}/wacrm_storage.tar.gz"
+    if docker volume inspect supabase_storage >/dev/null 2>&1; then
+        if docker run --rm -v supabase_storage:/data:ro -v "${BACKUP_PATH}":/backup alpine \
+             tar czf /backup/wacrm_storage.tar.gz -C /data . >/dev/null 2>&1; then
+            ok "WA CRM storage: $(du -h "$media_tar" 2>/dev/null | cut -f1)"
+        fi
+    fi
+}
+
+
 backup_tenants() {
     info "Discovering tenant databases..."
 
@@ -205,6 +241,8 @@ CONTENTS:
 02_master_data.sql.gz        — Data for all tables EXCEPT vehicle_parts
 03_vehicle_parts_schema.sql  — Structure of vehicle_parts only (no data)
 tenant_*.sql.gz              — Full backup of each active tenant database
+wacrm_supabase.sql.gz        — Base de datos de WA CRM (Supabase self-hosted)
+wacrm_storage.tar.gz         — Archivos multimedia de los chats de WA CRM (si existe)
 
 RESTORE INSTRUCTIONS:
 ---------------------
@@ -263,9 +301,12 @@ cleanup_old_backups() {
     local deleted=0
     while IFS= read -r file; do
         rm -f "$file"
-        ((deleted++))
+        deleted=$((deleted + 1))
     done < <(find "$BACKUP_DIR" -name "nexus_backup_*.tar.gz" -mtime +$RETENTION_DAYS)
 
+    # Remove empty leftovers from failed runs
+    find "$BACKUP_DIR" -maxdepth 1 -name "nexus_backup_*" -type f -empty -delete
+
     if [[ "$deleted" -gt 0 ]]; then
         ok "Deleted ${deleted} old backup(s)"
     else
@@ -273,6 +314,38 @@ cleanup_old_backups() {
     fi
 }
 
+# ─── Verify archive integrity ──────────────────────────────────────────────
+verify_archive() {
+    local archive="${BACKUP_DIR}/${BACKUP_NAME}.tar.gz"
+    info "Verifying archive integrity..."
+    if ! gzip -t "$archive"; then
+        fatal "Archive failed integrity check: ${archive}"
+    fi
+    if [[ $(stat -c%s "$archive") -lt 1000000 ]]; then
+        fatal "Archive suspiciously small (<1MB): ${archive}"
+    fi
+    ok "Archive integrity verified"
+}
+
+# ─── Upload offsite (optional, needs BACKUP_S3_BUCKET) ─────────────────────
+upload_offsite() {
+    local archive="${BACKUP_DIR}/${BACKUP_NAME}.tar.gz"
+    if [[ -z "${BACKUP_S3_BUCKET:-}" ]]; then
+        info "BACKUP_S3_BUCKET not set. Skipping offsite upload (backups are local-only)."
+        return 0
+    fi
+    if [[ ! -x "$AWS_CLI" ]]; then
+        warn "AWS CLI not found at ${AWS_CLI}. Skipping offsite upload."
+        return 0
+    fi
+    info "Uploading to s3://${BACKUP_S3_BUCKET}/nexus-backups/ ..."
+    if "$AWS_CLI" s3 cp "$archive" "s3://${BACKUP_S3_BUCKET}/nexus-backups/" --storage-class STANDARD_IA; then
+        ok "Offsite upload complete"
+    else
+        warn "Offsite upload failed (local backup is still valid)"
+    fi
+}
+
 # ─── Main ──────────────────────────────────────────────────────────────────
 main() {
     echo ""
@@ -283,14 +356,20 @@ main() {
     echo -e "${NC}"
     echo ""
 
+    # Cleanup FIRST so a nearly-full disk cannot turn one failed backup
+    # into permanent retention (the backup.sh vicious cycle).
+    cleanup_old_backups
+
     check_prerequisites
     backup_master_schema
     backup_master_data
     backup_vehicle_parts_schema
     backup_tenants
+    backup_wacrm
     create_manifest
     create_archive
-    cleanup_old_backups
+    verify_archive
+    upload_offsite
 
     echo -e "${BOLD}${GREEN}"
     echo "  Backup completed successfully!"
diff --git a/scripts/categorize_inventory.py b/scripts/categorize_inventory.py
new file mode 100755
index 0000000..9cbcfae
--- /dev/null
+++ b/scripts/categorize_inventory.py
@@ -0,0 +1,166 @@
+#!/usr/bin/env python3
+"""Backfill inventory categories (A1).
+
+Assigns ``inventory.category_id`` per tenant using the rule engine over the
+Nexpart taxonomy (+ optional LLM fallback via ``ai_chat.classify_part``).
+
+Usage (as root/postgres, from /home/Autopartes):
+    python3 scripts/categorize_inventory.py --tenant 31 --limit 200
+    python3 scripts/categorize_inventory.py --tenant 45 --limit 50 --only-uncategorized
+    python3 scripts/categorize_inventory.py --all --batch 500
+    python3 scripts/categorize_inventory.py --tenant 31 --no-llm --dry-run
+
+Checkpoints progress (last processed inventory id per tenant) in a JSON file so
+long backfills can be resumed.
+"""
+
+import argparse
+import json
+import os
+import sys
+import time
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+from services.product_categorizer import categorize_inventory  # noqa: E402
+
+DEFAULT_CHECKPOINT = os.path.join(
+    os.path.dirname(os.path.abspath(__file__)), '..', 'backups',
+    'categorize_checkpoint.json'
+)
+
+
+def list_tenants(only_id=None):
+    conn = get_master_conn()
+    cur = conn.cursor()
+    if only_id:
+        cur.execute(
+            "SELECT id, name, db_name FROM tenants WHERE is_active = true AND id = %s",
+            (only_id,),
+        )
+    else:
+        cur.execute(
+            "SELECT id, name, db_name FROM tenants WHERE is_active = true ORDER BY id"
+        )
+    rows = cur.fetchall()
+    cur.close()
+    conn.close()
+    return rows
+
+
+def load_checkpoint(path):
+    try:
+        with open(path) as f:
+            return json.load(f)
+    except Exception:
+        return {}
+
+
+def save_checkpoint(path, data):
+    try:
+        os.makedirs(os.path.dirname(path), exist_ok=True)
+        with open(path, 'w') as f:
+            json.dump(data, f, indent=2)
+    except Exception as e:
+        print(f"  ! no se pudo guardar checkpoint: {e}")
+
+
+def run_tenant(tenant_id, name, db_name, args, checkpoint):
+    print(f"\n=== tenant {tenant_id} — {name} ({db_name}) ===")
+    conn = get_tenant_conn(tenant_id)
+    key = str(tenant_id)
+    state = checkpoint.get(key, {})
+    after_id = None if args.reset else state.get('after_id')
+    total_scanned = 0
+    total_persisted = 0
+    total_by_source = {}
+
+    try:
+        while True:
+            res = categorize_inventory(
+                conn,
+                limit=args.batch,
+                only_uncategorized=args.only_uncategorized,
+                use_llm=not args.no_llm,
+                persist=not args.dry_run,
+                create_categories=not args.no_create,
+                after_id=after_id,
+                sample_limit=args.show,
+            )
+            total_scanned += res['scanned']
+            total_persisted += res['persisted']
+            for k, v in res['by_source'].items():
+                total_by_source[k] = total_by_source.get(k, 0) + v
+
+            if args.show and res['sample']:
+                for s in res['sample']:
+                    print(f"  {s['part_number']:<22} {str(s['name'])[:34]:<34} "
+                          f"-> {str(s['category_name']):<22} "
+                          f"({s['source']}, {s['confidence']})")
+
+            after_id = res['last_id']
+            checkpoint[key] = {
+                'after_id': after_id,
+                'persisted': state.get('persisted', 0) + total_persisted,
+                'updated_at': time.strftime('%Y-%m-%dT%H:%M:%S'),
+            }
+            if not args.dry_run:
+                save_checkpoint(args.checkpoint, checkpoint)
+
+            print(f"  batch: scanned={res['scanned']} persisted={res['persisted']} "
+                  f"by_source={res['by_source']} last_id={after_id}")
+
+            if res['scanned'] < args.batch:
+                break
+            if args.limit and total_scanned >= args.limit:
+                break
+        print(f"  total: scanned={total_scanned} persisted={total_persisted} "
+              f"by_source={total_by_source}")
+    finally:
+        conn.close()
+
+    return total_scanned, total_persisted
+
+
+def main():
+    p = argparse.ArgumentParser(description='Backfill inventory categories (A1).')
+    p.add_argument('--tenant', type=int, help='tenant id (omit with --all)')
+    p.add_argument('--all', action='store_true', help='process every active tenant')
+    p.add_argument('--limit', type=int, default=0, help='max items per tenant (0 = all)')
+    p.add_argument('--batch', type=int, default=500, help='rows per batch')
+    p.add_argument('--only-uncategorized', action='store_true', default=True,
+                   help='only fill items with category_id IS NULL (default)')
+    p.add_argument('--all-items', dest='only_uncategorized', action='store_false',
+                   help='consider every active item')
+    p.add_argument('--no-llm', action='store_true', help='disable LLM fallback')
+    p.add_argument('--no-create', action='store_true',
+                   help='do not create missing categories')
+    p.add_argument('--dry-run', action='store_true', help='do not persist')
+    p.add_argument('--reset', action='store_true', help='ignore saved checkpoint')
+    p.add_argument('--show', type=int, default=5, help='sample rows to print (0 = none)')
+    p.add_argument('--checkpoint', default=DEFAULT_CHECKPOINT)
+    args = p.parse_args()
+
+    if not args.all and not args.tenant:
+        p.error('--tenant ID o --all requerido')
+
+    checkpoint = load_checkpoint(args.checkpoint)
+    tenants = list_tenants(None if args.all else args.tenant)
+    if not tenants:
+        print('sin tenants para procesar')
+        return 1
+
+    grand_scanned = grand_persisted = 0
+    for tid, name, db_name in tenants:
+        scanned, persisted = run_tenant(tid, name, db_name, args, checkpoint)
+        grand_scanned += scanned
+        grand_persisted += persisted
+
+    print(f"\nTOTAL: tenants={len(tenants)} scanned={grand_scanned} "
+          f"persisted={grand_persisted}")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/clean_fitment_qwen.py b/scripts/clean_fitment_qwen.py
new file mode 100644
index 0000000..ff7ce91
--- /dev/null
+++ b/scripts/clean_fitment_qwen.py
@@ -0,0 +1,238 @@
+#!/usr/bin/env python3
+"""Flag/remove improbable QWEN fitment rows from ``inventory_vehicle_compat``.
+
+The ``qwen_ai`` fitment backfill produced 20.7M rows on Estrada: 127,041
+inventory items, average 162 vehicle links each and a hard cap of 200 — i.e.
+almost every part was declared compatible with hundreds of vehicles.  This
+script finds those improbable rows and can **mark** them (reversible: set
+``source='qwen_rejected'``, ``confidence=0``) or **delete** them.
+
+Detectors (source = ``qwen_ai`` by default):
+
+  1. volume — items with >= ``--min-rows`` fitment rows (a single part rarely
+     fits hundreds of vehicles; the cap betrays completeness padding).
+  2. universal name — a normalized name shared by >= ``--name-min-items``
+     distinct inventory items (e.g. "BALATA DISCO") that still got a full
+     vehicle list.
+  3. semantic (opt-in, ``--semantic``) — QWEN embeddings cluster *name
+     variants* (cosine >= ``--similarity``) so "FILTRO AIRE" and "FILTRO DE
+     AIRE" are treated as one universal name.  Degrades silently when the
+     provider is unavailable.
+
+Safety: dry-run by default; nothing is written without ``--apply``.
+Delete requires ``--apply --mode delete``; ``--mode mark`` is preferred.
+
+Usage (as root, from /home/Autopartes):
+    python3 scripts/clean_fitment_qwen.py --tenant 28
+    python3 scripts/clean_fitment_qwen.py --tenant 28 --min-rows 120 --semantic
+    python3 scripts/clean_fitment_qwen.py --tenant 28 --apply --mode mark
+    python3 scripts/clean_fitment_qwen.py --tenant 28 --apply --mode delete --min-rows 150
+"""
+
+import argparse
+import os
+import sys
+import unicodedata
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn  # noqa: E402
+
+
+def _norm_name(s):
+    s = unicodedata.normalize("NFD", str(s or ""))
+    s = s.encode("ascii", "ignore").decode("ascii")
+    out = []
+    for ch in s.upper():
+        out.append(ch if ch.isalnum() else " ")
+    return " ".join("".join(out).split())
+
+
+def _collect_counts(cur, source, limit=None):
+    """[(inventory_id, name, row_count)] for the given source."""
+    sql = """
+        SELECT c.inventory_id, i.name, count(*) AS n
+        FROM inventory_vehicle_compat c
+        JOIN inventory i ON i.id = c.inventory_id
+        WHERE c.source = %s
+        GROUP BY c.inventory_id, i.name
+    """
+    if limit:
+        sql += " LIMIT %s"
+        cur.execute(sql, (source, limit))
+    else:
+        cur.execute(sql, (source,))
+    return cur.fetchall()
+
+
+def _semantic_clusters(names, threshold=0.92, batch=64, timeout=30):
+    """Union-find clusters of near-duplicate names via QWEN embeddings.
+
+    Returns {name: cluster_id} or {} when embeddings are unavailable.
+    """
+    uniq = list(dict.fromkeys(n for n in names if n))
+    if len(uniq) < 2:
+        return {}
+    try:
+        from services import semantic_search as ss
+        if hasattr(ss, 'is_configured') and not ss.is_configured():
+            return {}
+        vectors = []
+        for i in range(0, len(uniq), batch):
+            out = ss.embed(uniq[i:i + batch], timeout=timeout)
+            if not out or len(out) != len(uniq[i:i + batch]):
+                return {}
+            vectors.extend(out)
+    except Exception:
+        return {}
+
+    parent = list(range(len(uniq)))
+
+    def find(x):
+        while parent[x] != x:
+            parent[x] = parent[parent[x]]
+            x = parent[x]
+        return x
+
+    def union(a, b):
+        ra, rb = find(a), find(b)
+        if ra != rb:
+            parent[rb] = ra
+
+    for i in range(len(uniq)):
+        for j in range(i + 1, len(uniq)):
+            sim = ss.cosine_similarity(vectors[i], vectors[j])
+            if sim is not None and sim >= threshold:
+                union(i, j)
+
+    return {uniq[i]: find(i) for i in range(len(uniq))}
+
+
+def main():
+    p = argparse.ArgumentParser(description='Clean improbable QWEN fitment rows.')
+    p.add_argument('--tenant', type=int, required=True)
+    p.add_argument('--source', default='qwen_ai')
+    p.add_argument('--min-rows', type=int, default=120,
+                   help='flag items with >= N fitment rows')
+    p.add_argument('--name-min-items', type=int, default=8,
+                   help='flag a normalized name shared by >= N inventory items')
+    p.add_argument('--min-name-vol', type=int, default=100,
+                   help='only cluster names whose item count is >= this')
+    p.add_argument('--semantic', action='store_true',
+                   help='merge name variants with embeddings (opt-in)')
+    p.add_argument('--similarity', type=float, default=0.92)
+    p.add_argument('--semantic-max', type=int, default=150,
+                   help='max distinct names sent to the embedding provider')
+    p.add_argument('--mode', choices=['mark', 'delete'], default='mark')
+    p.add_argument('--apply', action='store_true', help='persist (default dry-run)')
+    p.add_argument('--limit', type=int, default=0, help='cap inventory ids scanned')
+    p.add_argument('--inventory-ids', default=None,
+                   help='comma-separated inventory ids to force as suspects (targeted runs)')
+    p.add_argument('--show', type=int, default=12)
+    args = p.parse_args()
+
+    conn = get_tenant_conn(args.tenant)
+    try:
+        cur = conn.cursor()
+        print(f"tenant={args.tenant} source={args.source} min_rows={args.min_rows} "
+              f"name_min_items={args.name_min_items} semantic={args.semantic} "
+              f"mode={args.mode} apply={args.apply}")
+
+        if args.inventory_ids:
+            # Targeted run: skip the heavy detection scans, use given ids only.
+            rows = []
+            name_to_ids = {}
+            by_volume = by_name = by_semantic = set()
+            print("  targeted mode: --inventory-ids provided, detection skipped")
+        else:
+            rows = _collect_counts(cur, args.source, args.limit or None)
+            print(f"  inventory items with source={args.source}: {len(rows)}")
+
+            by_volume = {iid for iid, _n, n in rows if n >= args.min_rows}
+
+            name_to_ids = {}
+            for iid, name, _n in rows:
+                name_to_ids.setdefault(_norm_name(name), set()).add(iid)
+            by_name = set()
+            for name, ids in name_to_ids.items():
+                if len(ids) >= args.name_min_items:
+                    by_name.update(ids)
+
+            by_semantic = set()
+            if args.semantic:
+                vol_names = [name for name, ids in name_to_ids.items()
+                             if len(ids) >= args.min_name_vol]
+                vol_names = vol_names[:args.semantic_max]
+                clusters = _semantic_clusters(vol_names, threshold=args.similarity)
+                if not clusters:
+                    print("  [semantic] sin embeddings (degradado) — solo reglas")
+                else:
+                    cluster_ids = {}
+                    for name, cid in clusters.items():
+                        cluster_ids.setdefault(cid, set()).update(name_to_ids.get(name, set()))
+                    for cid, ids in cluster_ids.items():
+                        if len(ids) >= args.name_min_items:
+                            by_semantic.update(ids)
+                    print(f"  [semantic] names clustered={len(clusters)} "
+                          f"extra_suspect_items={len(by_semantic - by_volume - by_name)}")
+
+        suspects = by_volume | by_name | by_semantic
+        if args.inventory_ids:
+            forced = {int(x) for x in args.inventory_ids.split(',') if x.strip()}
+            suspects |= forced
+        print(f"  suspect inventory items: volume={len(by_volume)} "
+              f"universal_name={len(by_name)} semantic={len(by_semantic)} "
+              f"union={len(suspects)}")
+
+        if args.show:
+            print("  top inflated names:")
+            ranked = sorted(name_to_ids.items(), key=lambda kv: -len(kv[1]))[:args.show]
+            for name, ids in ranked:
+                print(f"    {name[:48]:<48} items={len(ids):<5}")
+
+        # Count rows that would be affected
+        affected = 0
+        suspect_list = sorted(suspects)
+        for i in range(0, len(suspect_list), 1000):
+            chunk = suspect_list[i:i + 1000]
+            if not chunk:
+                continue
+            cur.execute(
+                f"SELECT count(*) FROM inventory_vehicle_compat "
+                f"WHERE source = %s AND inventory_id = ANY(%s)",
+                (args.source, chunk))
+            affected += cur.fetchone()[0]
+        total_src = sum(n for _i, _n, n in rows)
+        pct = (affected / total_src * 100) if total_src else 0.0
+        print(f"  rows affected: {affected} / {total_src} ({pct:.1f}% of source={args.source})")
+
+        if not args.apply:
+            print("  DRY-RUN: nothing written. Re-run with --apply to persist.")
+            return 0
+
+        done = 0
+        for i in range(0, len(suspect_list), 1000):
+            chunk = suspect_list[i:i + 1000]
+            if not chunk:
+                continue
+            if args.mode == 'delete':
+                cur.execute(
+                    "DELETE FROM inventory_vehicle_compat "
+                    "WHERE source = %s AND inventory_id = ANY(%s)",
+                    (args.source, chunk))
+            else:
+                cur.execute(
+                    "UPDATE inventory_vehicle_compat "
+                    "SET source = 'qwen_rejected', confidence = 0 "
+                    "WHERE source = %s AND inventory_id = ANY(%s)",
+                    (args.source, chunk))
+            done += cur.rowcount
+            conn.commit()
+        print(f"  APPLIED mode={args.mode}: rows={done}")
+        return 0
+    finally:
+        conn.close()
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/credit_score_report.py b/scripts/credit_score_report.py
new file mode 100644
index 0000000..bd34346
--- /dev/null
+++ b/scripts/credit_score_report.py
@@ -0,0 +1,123 @@
+#!/usr/bin/env python3
+"""Credit risk score report (A9).
+
+Prints rule-based credit scores for a tenant's customers using
+``services.credit_scoring.score_customer``. Read-only: never writes to the DB.
+
+Usage (as root/postgres, from /home/Autopartes):
+    python3 scripts/credit_score_report.py --tenant 31
+    python3 scripts/credit_score_report.py --tenant 45 --only-credit
+    python3 scripts/credit_score_report.py --all --tier risk
+    python3 scripts/credit_score_report.py --tenant 31 --json
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+from services.credit_scoring import score_customer  # noqa: E402
+
+
+def list_tenants(only_id=None):
+    conn = get_master_conn()
+    try:
+        cur = conn.cursor()
+        if only_id:
+            cur.execute(
+                "SELECT id, name, db_name FROM tenants "
+                "WHERE is_active = true AND id = %s",
+                (only_id,),
+            )
+        else:
+            cur.execute(
+                "SELECT id, name, db_name FROM tenants WHERE is_active = true ORDER BY id"
+            )
+        rows = cur.fetchall()
+        cur.close()
+        return rows
+    finally:
+        conn.close()
+
+
+def customer_ids(conn, only_credit=False, limit=None):
+    cur = conn.cursor()
+    where = "WHERE c.is_active = true"
+    if only_credit:
+        where += " AND (c.credit_limit > 0 OR c.credit_balance > 0)"
+    sql = f"SELECT c.id FROM customers c {where} ORDER BY c.id"
+    if limit:
+        sql += " LIMIT %s"
+        cur.execute(sql, (limit,))
+    else:
+        cur.execute(sql)
+    ids = [r[0] for r in cur.fetchall()]
+    cur.close()
+    return ids
+
+
+def report_tenant(tenant_id, tenant_name, only_credit, limit, tier_filter, as_json):
+    conn = get_tenant_conn(tenant_id)
+    try:
+        ids = customer_ids(conn, only_credit=only_credit, limit=limit)
+        rows = []
+        for cid in ids:
+            try:
+                rows.append(score_customer(conn, cid))
+            except Exception as exc:
+                rows.append({'customer_id': cid, 'error': str(exc)})
+    finally:
+        conn.close()
+
+    if tier_filter:
+        rows = [r for r in rows if r.get('tier') == tier_filter]
+
+    if as_json:
+        print(json.dumps({'tenant_id': tenant_id, 'tenant': tenant_name, 'scores': rows},
+                         ensure_ascii=False, indent=2, default=str))
+        return
+
+    print(f"\n=== Tenant {tenant_id} — {tenant_name} ({len(rows)} clientes) ===")
+    print(f"{'ID':>6}  {'score':>5}  {'tier':<6}  {'lim_sug':>12}  {'datos':>5}  señal principal")
+    for r in sorted(rows, key=lambda x: x.get('score', 0)):
+        if 'error' in r:
+            print(f"{r['customer_id']:>6}  ERROR: {r['error']}")
+            continue
+        reasons = r.get('reasons') or []
+        headline = next(
+            (x for x in reasons if 'Mora' in x or 'atraso' in x or 'excedido' in x),
+            reasons[-1] if reasons else '',
+        )
+        print(f"{r['customer_id']:>6}  {r['score']:>5}  {r['tier']:<6}  "
+              f"{r['recommended_limit']:>12,.2f}  {r['data_points']:>5}  {headline}")
+
+
+def main():
+    parser = argparse.ArgumentParser(description="Credit risk score report (A9)")
+    group = parser.add_mutually_exclusive_group(required=True)
+    group.add_argument('--tenant', type=int, help='Tenant id')
+    group.add_argument('--all', action='store_true', help='All active tenants')
+    parser.add_argument('--only-credit', action='store_true',
+                        help='Only customers with a credit line or balance')
+    parser.add_argument('--tier', choices=['good', 'medium', 'risk'],
+                        help='Only show customers in this tier')
+    parser.add_argument('--limit', type=int, help='Max customers per tenant')
+    parser.add_argument('--json', action='store_true', help='Emit JSON')
+    args = parser.parse_args()
+
+    tenants = list_tenants(None if args.all else args.tenant)
+    if not tenants:
+        print("No tenants found", file=sys.stderr)
+        return 1
+
+    for tenant_id, name, _db_name in tenants:
+        report_tenant(tenant_id, name, args.only_credit, args.limit,
+                      args.tier, args.json)
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/enrich_descriptions.py b/scripts/enrich_descriptions.py
new file mode 100644
index 0000000..b80638f
--- /dev/null
+++ b/scripts/enrich_descriptions.py
@@ -0,0 +1,303 @@
+#!/usr/bin/env python3
+"""Generate short Spanish descriptions for empty catalog descriptions.
+
+Two targets:
+
+  inventory (tenant DB)      — 95% of rows have ``description`` empty
+                               (Rached: 6851/6851; Capi: 3766/14568).
+  supplier_catalog (master)  — 17,246/17,246 have no description at all.
+
+Description format (documented, enforced by the prompt):
+
+  * one short sentence, 8–20 words, plain Mexican Spanish;
+  * starts with the part type, then the brand/compatibility qualifier already
+    present in the name (never invent a vehicle, price, stock or warranty);
+  * no emojis, no markdown, no quotes, no trailing period duplication.
+
+The LLM call batches ``--batch-llm`` items per request through the same
+``ai_chat`` backends (QWEN first, OpenRouter free models as fallback).  When
+the provider does not answer, the item is skipped — nothing is written and no
+exception is raised.
+
+Quality gate: nothing is written unless ``--apply``.  Pass ``--review-out
+FILE`` to dump every generated candidate as JSONL so a human can review the
+batch before applying.  A checkpoint (last processed id per target) lets long
+runs resume.
+
+Usage (as root, from /home/Autopartes):
+    python3 scripts/enrich_descriptions.py --tenant 31 --target inventory --limit 50
+    python3 scripts/enrich_descriptions.py --tenant 31 --target inventory \
+        --limit 200 --review-out /tmp/desc_rached.jsonl
+    python3 scripts/enrich_descriptions.py --target supplier_catalog --limit 100 --dry-run
+    python3 scripts/enrich_descriptions.py --tenant 31 --target inventory --apply --limit 200
+"""
+
+import argparse
+import json
+import os
+import sys
+import time
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+
+DEFAULT_CHECKPOINT = os.path.join(
+    os.path.dirname(os.path.abspath(__file__)), '..', 'backups',
+    'enrich_descriptions_checkpoint.json'
+)
+
+SYSTEM_PROMPT = (
+    "Eres redactor de catálogo de una refaccionaria mexicana. Escribes "
+    "descripciones de autopartes claras y breves en español. NUNCA inventas "
+    "compatibilidad de vehículos, precios, garantías ni stock: solo describes "
+    "lo que se te da. Responde SOLO con JSON válido, sin texto adicional."
+)
+
+USER_PROMPT = (
+    "Para cada artículo genera una descripción de 8 a 20 palabras en español "
+    "mexicano que empiece con el tipo de pieza. Prohibido: emojis, markdown, "
+    "precios, garantías, años de vehículo que no aparezcan en el nombre.\n"
+    "Devuelve un arreglo JSON: "
+    '[{"id": <id>, "descripcion": "<texto>"}, ...]\n'
+    "Artículos:\n__ITEMS__"
+)
+
+
+def _load_checkpoint(path):
+    try:
+        with open(path) as f:
+            return json.load(f)
+    except Exception:
+        return {}
+
+
+def _save_checkpoint(path, data):
+    try:
+        os.makedirs(os.path.dirname(path), exist_ok=True)
+        with open(path, 'w') as f:
+            json.dump(data, f, indent=2)
+    except Exception as e:
+        print(f"  ! checkpoint no guardado: {e}")
+
+
+def _llm_descriptions(items, timeout=60):
+    """Return {id: description} via ai_chat backends; {} on any failure."""
+    try:
+        from services import ai_chat
+    except Exception:
+        return {}
+    payload = json.dumps(
+        [{"id": it["id"], "nombre": it["label"]} for it in items],
+        ensure_ascii=False,
+    )
+    messages = [
+        {"role": "system", "content": SYSTEM_PROMPT},
+        {"role": "user", "content": USER_PROMPT.replace("__ITEMS__", payload)},
+    ]
+    backends = []
+    if getattr(ai_chat, "QWEN_ENABLED", False):
+        backends.append((ai_chat.QWEN_CHAT_URL, ai_chat.QWEN_API_KEY, ai_chat.QWEN_MODEL))
+    if getattr(ai_chat, "OPENROUTER_API_KEY", None):
+        backends.append((ai_chat.OPENROUTER_URL, ai_chat.OPENROUTER_API_KEY, ai_chat.MODEL))
+    for url, key, model_id in backends:
+        try:
+            ai_chat._validate_model(model_id)
+        except Exception:
+            continue
+        try:
+            res = ai_chat._post_chat_completion(
+                url, key, model_id, messages,
+                max_tokens=1400, temperature=0.2, timeout=timeout)
+        except Exception:
+            res = None
+        if not res:
+            continue
+        content = (res.get("content") or "").strip()
+        if content.startswith("```"):
+            content = "\n".join(content.split("\n")[1:-1])
+        try:
+            parsed = json.loads(content)
+        except Exception:
+            continue
+        if isinstance(parsed, dict):
+            parsed = parsed.get("items") or parsed.get("data") or []
+        out = {}
+        for row in parsed or []:
+            if not isinstance(row, dict):
+                continue
+            rid = row.get("id")
+            text = (row.get("descripcion") or row.get("description") or "").strip()
+            if rid is not None and text:
+                out[int(rid)] = text[:300]
+        if out:
+            return out
+    return {}
+
+
+def _iter_inventory(conn, after_id, limit, batch):
+    cur = conn.cursor()
+    where = ["i.is_active = true",
+             "(i.description IS NULL OR i.description = '')"]
+    params = []
+    if after_id is not None:
+        where.append("i.id > %s")
+        params.append(after_id)
+    cur.execute(f"""
+        SELECT i.id, i.name, i.brand, c.name
+        FROM inventory i
+        LEFT JOIN categories c ON c.id = i.category_id
+        WHERE {' AND '.join(where)}
+        ORDER BY i.id
+        LIMIT %s
+    """, params + [batch])
+    rows = cur.fetchall()
+    cur.close()
+    return rows
+
+
+def _iter_supplier(conn, after_id, batch):
+    cur = conn.cursor()
+    where = ["is_active = true", "(description IS NULL OR description = '')"]
+    params = []
+    if after_id is not None:
+        where.append("id > %s")
+        params.append(after_id)
+    cur.execute(f"""
+        SELECT id, supplier_name, sku, name, category
+        FROM supplier_catalog
+        WHERE {' AND '.join(where)}
+        ORDER BY id
+        LIMIT %s
+    """, params + [batch])
+    rows = cur.fetchall()
+    cur.close()
+    return rows
+
+
+def run(args, state):
+    master = get_master_conn() if args.target in ('supplier_catalog', 'both') else None
+    tenant = get_tenant_conn(args.tenant) if args.target in ('inventory', 'both') else None
+    review = open(args.review_out, 'a') if args.review_out else None
+    try:
+        total = {'scanned': 0, 'generated': 0, 'written': 0, 'llm_fail': 0}
+        targets = []
+        if args.target in ('inventory', 'both'):
+            targets.append('inventory')
+        if args.target in ('supplier_catalog', 'both'):
+            targets.append('supplier_catalog')
+
+        for target in targets:
+            key = f"{target}:{args.tenant or 'master'}"
+            after_id = None if args.reset else state.get(key, {}).get('after_id')
+            conn = tenant if target == 'inventory' else master
+            if conn is None:
+                continue
+            print(f"\n=== {target} (tenant={args.tenant}) after_id={after_id} ===")
+            while True:
+                if target == 'inventory':
+                    rows = _iter_inventory(conn, after_id, args.limit, args.batch)
+                else:
+                    rows = _iter_supplier(conn, after_id, args.batch)
+                if not rows:
+                    break
+
+                # Build LLM request payload
+                items = []
+                for r in rows:
+                    if target == 'inventory':
+                        rid, name, brand, cat = r
+                        label = ", ".join(x for x in [name, brand, cat] if x)
+                    else:
+                        rid, sup, sku, name, cat = r
+                        label = ", ".join(x for x in [name, cat, sup,
+                                                      f"SKU {sku}"] if x)
+                    items.append({'id': rid, 'label': label})
+
+                got = _llm_descriptions(items)
+                if not got:
+                    total['llm_fail'] += 1
+                    print("  LLM sin respuesta — se detiene el lote (degradado, "
+                          "checkpoint no avanza)")
+                    break
+
+                for it in items:
+                    rid = it['id']
+                    text = got.get(rid)
+                    total['scanned'] += 1
+                    if not text:
+                        continue
+                    total['generated'] += 1
+                    if review:
+                        review.write(json.dumps(
+                            {'target': target, 'id': rid, 'text': text,
+                             'source_label': it['label']},
+                            ensure_ascii=False) + "\n")
+                        review.flush()
+                    if args.apply:
+                        c = conn.cursor()
+                        try:
+                            if target == 'inventory':
+                                c.execute(
+                                    "UPDATE inventory SET description = %s "
+                                    "WHERE id = %s AND (description IS NULL OR description = '')",
+                                    (text, rid))
+                            else:
+                                c.execute(
+                                    "UPDATE supplier_catalog SET description = %s "
+                                    "WHERE id = %s AND (description IS NULL OR description = '')",
+                                    (text, rid))
+                            total['written'] += c.rowcount
+                            conn.commit()
+                        finally:
+                            c.close()
+                    if total['generated'] <= args.show:
+                        print(f"  {rid:<8} {it['label'][:44]:<44} -> {text[:70]}")
+
+                after_id = rows[-1][0]
+                state[key] = {'after_id': after_id, 'written': total['written'],
+                              'updated_at': time.strftime('%Y-%m-%dT%H:%M:%S')}
+                if args.apply:
+                    _save_checkpoint(args.checkpoint, state)
+                if len(rows) < args.batch:
+                    break
+                if args.limit and total['scanned'] >= args.limit:
+                    break
+
+        print(f"\nresumen: {total} apply={args.apply}")
+        return 0
+    finally:
+        if review:
+            review.close()
+        if tenant is not None:
+            tenant.close()
+        if master is not None:
+            master.close()
+
+
+def main():
+    p = argparse.ArgumentParser(description='Generate short Spanish descriptions.')
+    p.add_argument('--tenant', type=int)
+    p.add_argument('--target', choices=['inventory', 'supplier_catalog', 'both'],
+                   default='inventory')
+    p.add_argument('--limit', type=int, default=0)
+    p.add_argument('--batch', type=int, default=10, help='items per LLM request')
+    p.add_argument('--apply', action='store_true', help='write descriptions')
+    p.add_argument('--dry-run', action='store_true', default=True)
+    p.add_argument('--review-out', default=None, help='JSONL file with candidates')
+    p.add_argument('--reset', action='store_true')
+    p.add_argument('--show', type=int, default=5)
+    p.add_argument('--checkpoint', default=DEFAULT_CHECKPOINT)
+    args = p.parse_args()
+
+    if args.apply:
+        args.dry_run = False
+    if args.target in ('inventory', 'both') and not args.tenant:
+        p.error('--tenant requerido para target inventory')
+
+    state = _load_checkpoint(args.checkpoint)
+    return run(args, state)
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/eval_sku_matcher.py b/scripts/eval_sku_matcher.py
new file mode 100644
index 0000000..89bb33c
--- /dev/null
+++ b/scripts/eval_sku_matcher.py
@@ -0,0 +1,139 @@
+#!/usr/bin/env python3
+"""Measure the SKU name-matcher: difflib (baseline) vs QWEN embeddings.
+
+Runs ``sku_matcher.match_inventory`` in dry-run twice over the same inventory
+slice — once with the difflib name fallback only, once with the semantic
+(embedding) fallback enabled — and compares:
+
+  * coverage: how many items got matched at all
+  * precision: among items that already carry a ``catalog_part_id`` (ground
+    truth), how often the matcher agrees with the stored id
+
+The second pass reuses the ``CatalogIndex`` built by the first, so catalog-name
+embeddings are computed once (in-memory cache).
+
+Usage (as root, from /home/Autopartes):
+    python3 scripts/eval_sku_matcher.py --tenant 45 --limit 300
+    python3 scripts/eval_sku_matcher.py --tenant 45 --limit 300 --prefer-below 0.9
+    python3 scripts/eval_sku_matcher.py --tenant 31 --limit 200 --threshold 0.88
+
+Nothing is written: ``apply=False`` and the UPDATE guard never overwrites an
+existing ``catalog_part_id`` anyway.
+"""
+
+import argparse
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+from services.sku_matcher import load_catalog_index, match_inventory  # noqa: E402
+
+
+def _precision(res):
+    """(attempts_on_linked, correct) using catalog_part_id as ground truth."""
+    attempts = correct = 0
+    for r in res.get('results', []):
+        truth = r.get('existing_catalog_id')
+        if not truth:
+            continue
+        attempts += 1
+        if r.get('matched_catalog_id') == truth:
+            correct += 1
+    return attempts, correct
+
+
+def _report(label, res):
+    attempts, correct = _precision(res)
+    prec = (correct / attempts * 100) if attempts else 0.0
+    print(f"  {label:<12} matched={res['matched']:<4} "
+          f"by_method={res['by_method']}")
+    print(f"  {'':<12} precision_on_linked={correct}/{attempts} ({prec:.1f}%)")
+    if res.get('semantic'):
+        s = res['semantic']
+        print(f"  {'':<12} catalog_emb_cache={s['catalog_embeddings_cached']} "
+              f"embed_requests={s['embed_requests']}")
+    return res['matched'], attempts, correct
+
+
+def main():
+    p = argparse.ArgumentParser(description='Eval SKU name matching (difflib vs embeddings).')
+    p.add_argument('--tenant', type=int, required=True)
+    p.add_argument('--limit', type=int, default=300, help='items to scan')
+    p.add_argument('--offset', type=int, default=0)
+    p.add_argument('--threshold', type=float, default=0.86,
+                   help='semantic cosine threshold')
+    p.add_argument('--prefer-below', type=float, default=None,
+                   help='also run semantic when fuzzy score < this value')
+    p.add_argument('--name-threshold', type=float, default=0.82)
+    p.add_argument('--top-k', type=int, default=64,
+                   help='candidate names embedded per item (bounded cost)')
+    p.add_argument('--batch', type=int, default=64)
+    p.add_argument('--supplier', default=None)
+    p.add_argument('--sample', type=int, default=8, help='examples to print')
+    p.add_argument('--only-linked', action='store_true',
+                   help='restrict to items with a catalog_part_id (ground truth)')
+    p.add_argument('--show-examples', action='store_true')
+    args = p.parse_args()
+
+    tenant = get_tenant_conn(args.tenant)
+    master = get_master_conn()
+    try:
+        print(f"Building catalog index (supplier={args.supplier or 'ALL'})...")
+        idx = load_catalog_index(master, supplier=args.supplier)
+        print(f"  catalog items={idx.total} sku_keys={len(idx.by_sku)} "
+              f"xref_keys={len(idx.by_xref)}")
+
+        common = dict(
+            limit=args.limit, offset=args.offset,
+            only_unmatched=not args.only_linked, only_linked=args.only_linked,
+            apply=False, create_aliases=False, supplier=args.supplier,
+            name_threshold=args.name_threshold, sample_limit=args.sample,
+            collect=True,
+        )
+
+        print(f"\nInventory slice: tenant={args.tenant} limit={args.limit} "
+              f"offset={args.offset} (dry-run)")
+        base = match_inventory(tenant, master, use_semantic=False, index=idx, **common)
+        print("\n[1] difflib baseline")
+        _report('baseline', base)
+
+        sem = match_inventory(
+            tenant, master, use_semantic=True, index=idx,
+            semantic_threshold=args.threshold,
+            semantic_top_k=args.top_k,
+            semantic_batch=args.batch,
+            semantic_prefer_below=args.prefer_below,
+            **common,
+        )
+        print("\n[2] + semantic (embeddings)")
+        b_m, b_a, b_c = _report('semantic', sem)
+
+        # Deltas
+        print("\n--- delta ---")
+        print(f"  matched: {base['matched']} -> {sem['matched']} "
+              f"(+{sem['matched'] - base['matched']})")
+        b_att, b_cor = _precision(base)
+        s_att, s_cor = _precision(sem)
+        bp = (b_cor / b_att * 100) if b_att else 0.0
+        sp = (s_cor / s_att * 100) if s_att else 0.0
+        print(f"  precision on linked: {bp:.1f}% -> {sp:.1f}%")
+
+        if args.show_examples:
+            print("\nExamples (semantic pass):")
+            for r in sem.get('results', [])[:args.sample]:
+                mark = ''
+                if r.get('existing_catalog_id'):
+                    mark = ' OK' if r['existing_catalog_id'] == r['matched_catalog_id'] else ' MISMATCH'
+                print(f"  [{r['method']:<14} {r['score']:.3f}] "
+                      f"{str(r['part_number'])[:16]:<16} {str(r['name'])[:38]:<38} "
+                      f"-> cat {r['matched_catalog_id']}{mark}")
+    finally:
+        tenant.close()
+        master.close()
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/expire_demos.py b/scripts/expire_demos.py
new file mode 100644
index 0000000..71ffb41
--- /dev/null
+++ b/scripts/expire_demos.py
@@ -0,0 +1,66 @@
+#!/usr/bin/env python3
+"""Expire demo tenants whose trial has ended.
+
+A tenant on plan='demo' is a time-limited full trial (no resource limits).
+When its active subscription's expires_at passes, this job downgrades it to
+'free' and marks the subscription as expired.
+
+Safe by default: runs in DRY-RUN and only reports. Pass --apply to enforce.
+"""
+import argparse
+import os
+
+import psycopg2
+
+MASTER_DB_URL = os.environ.get(
+    'MASTER_DB_URL', 'postgresql://postgres@localhost/nexus_autoparts'
+)
+
+
+def main():
+    ap = argparse.ArgumentParser(description='Expire ended demo tenants.')
+    ap.add_argument('--apply', action='store_true',
+                    help='Actually downgrade expired demos (default: dry-run)')
+    args = ap.parse_args()
+
+    conn = psycopg2.connect(MASTER_DB_URL)
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT t.id, t.name, s.expires_at
+        FROM tenants t
+        JOIN subscriptions s ON s.tenant_id = t.id
+        WHERE t.plan = 'demo'
+          AND t.is_active = true
+          AND s.status = 'active'
+          AND s.expires_at IS NOT NULL
+          AND s.expires_at < NOW()
+        ORDER BY t.id
+    """)
+    rows = cur.fetchall()
+
+    if not rows:
+        print('No expired demo tenants.')
+    else:
+        print(f'{len(rows)} demo tenant(s) with an expired subscription:')
+        for tid, name, exp in rows:
+            print(f'  #{tid}  {name}  (expiró {exp:%Y-%m-%d})')
+
+        if args.apply:
+            for tid, _name, _exp in rows:
+                cur.execute("UPDATE tenants SET plan = 'free' WHERE id = %s", (tid,))
+                cur.execute(
+                    "UPDATE subscriptions SET status = 'expired' "
+                    "WHERE tenant_id = %s AND status = 'active'",
+                    (tid,),
+                )
+            conn.commit()
+            print(f'Applied: {len(rows)} tenant(s) downgraded to free.')
+        else:
+            print('DRY-RUN: nothing changed. Re-run with --apply to enforce.')
+
+    cur.close()
+    conn.close()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/grade_piece_vision.py b/scripts/grade_piece_vision.py
new file mode 100644
index 0000000..57ea5dd
--- /dev/null
+++ b/scripts/grade_piece_vision.py
@@ -0,0 +1,111 @@
+#!/usr/bin/env python3
+"""A4 CLI — suggest a condition grade for a used (yonke) piece from a photo.
+
+Uses ``services.part_vision`` (QWEN -> Hermes -> OpenRouter). When no vision
+backend answers it prints the returned error and exits non-zero.
+
+Usage (from /home/Autopartes):
+    python3 scripts/grade_piece_vision.py --tenant 28 --piece 300537
+    python3 scripts/grade_piece_vision.py --tenant 28 --piece 300537 --image /ruta/foto.jpg
+    python3 scripts/grade_piece_vision.py --image /ruta/foto.jpg --name "Faro" --dry-run
+    python3 scripts/grade_piece_vision.py --tenant 28 --piece 300537 --apply
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+
+def _load_env():
+    env_file = '/etc/nexus/pos.env'
+    if os.environ.get('MASTER_DB_URL') or not os.path.exists(env_file):
+        return
+    for line in open(env_file):
+        line = line.strip()
+        if not line or line.startswith('#') or '=' not in line:
+            continue
+        k, v = line.split('=', 1)
+        os.environ.setdefault(k.strip(), v.strip().strip('"').strip("'"))
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__)
+    ap.add_argument('--tenant', type=int, help='tenant id')
+    ap.add_argument('--piece', type=int, help='inventory id of the piece')
+    ap.add_argument('--image', help='image file path (overrides the stored photo)')
+    ap.add_argument('--name', help='piece name for the prompt')
+    ap.add_argument('--category', help='piece category for the prompt')
+    ap.add_argument('--condition', default='usado')
+    ap.add_argument('--apply', action='store_true',
+                    help='persist the suggested grade to inventory.condition_grade')
+    args = ap.parse_args()
+
+    _load_env()
+
+    from services import part_vision
+    from services.image_service import DATA_DIR, STATIC_DIR
+
+    image_bytes = None
+    piece = None
+    conn = None
+
+    try:
+        if args.tenant and args.piece:
+            from tenant_db import get_tenant_conn
+            from services import yonke_service
+            conn = get_tenant_conn(args.tenant)
+            piece = yonke_service.get_piece(conn, args.piece)
+            if not piece:
+                print(json.dumps({'error': 'Piece not found'}))
+                return 1
+
+        if args.image:
+            with open(args.image, 'rb') as fh:
+                image_bytes = fh.read()
+        elif piece:
+            url = piece.get('image_url')
+            for img in piece.get('images') or []:
+                if img.get('is_primary'):
+                    url = img.get('url') or url
+                    break
+            idx = (url or '').find('/images/parts/')
+            if idx != -1:
+                rel = url[idx + len('/images/parts/'):]
+                for base in (DATA_DIR, STATIC_DIR):
+                    path = os.path.join(base, rel)
+                    if os.path.exists(path):
+                        with open(path, 'rb') as fh:
+                            image_bytes = fh.read()
+                        break
+
+        if not image_bytes:
+            print(json.dumps({'error': 'No image available (use --image or a piece with a photo)'}))
+            return 1
+
+        result = part_vision.suggest_grade(
+            image_bytes=image_bytes,
+            name=args.name or (piece or {}).get('name'),
+            category=args.category,
+            condition=args.condition,
+        )
+
+        if args.apply and result.get('condition_grade_suggested') and conn and piece:
+            cur = conn.cursor()
+            cur.execute('UPDATE inventory SET condition_grade = %s WHERE id = %s',
+                        (result['condition_grade_suggested'], piece['id']))
+            conn.commit()
+            cur.close()
+            result['applied'] = True
+
+        print(json.dumps(result, ensure_ascii=False, indent=2))
+        return 0 if result.get('condition_grade_suggested') else 2
+    finally:
+        if conn:
+            conn.close()
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/import_capi_inventory.py b/scripts/import_capi_inventory.py
new file mode 100644
index 0000000..8a5dc81
--- /dev/null
+++ b/scripts/import_capi_inventory.py
@@ -0,0 +1,156 @@
+#!/usr/bin/env python3
+"""One-off: import Capi Autopartes inventory from CSV into tenant_capi_autopartes.
+
+Replicates the semantics of pos/blueprints/inventory_bp.py::bulk_import_items:
+  - creates missing categories
+  - INSERT new items (with generated barcode) or UPDATE existing by part_number
+  - records initial stock on the main branch via inventory_engine.record_initial
+  - registers sku_secundario aliases
+
+Usage (as postgres):
+  MASTER_DB_URL=postgresql://postgres@/nexus_autoparts \
+  TENANT_DB_URL_TEMPLATE='postgresql://postgres@/{db_name}' \
+  POS_JWT_SECRET=... REDIS_ENABLED=false \
+  python3 scripts/import_capi_inventory.py
+"""
+
+import csv
+import io
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+from services.barcode_generator import generate_barcode  # noqa: E402
+from services.inventory_engine import record_initial  # noqa: E402
+
+CSV_PATH = '/home/Autopartes/data/Inventario capi.csv'
+TENANT_DB = 'tenant_capi_autopartes'
+BRANCH_ID = 1
+COMMIT_EVERY = 500
+
+
+def parse_rows(path):
+    raw = open(path, 'rb').read()
+    text = None
+    for enc in ('utf-8-sig', 'cp1252', 'latin-1'):
+        try:
+            text = raw.decode(enc)
+            break
+        except UnicodeDecodeError:
+            continue
+    if text is None:
+        raise RuntimeError('Could not decode CSV')
+    return list(csv.DictReader(io.StringIO(text)))
+
+
+def to_decimal(val, default=0.0):
+    try:
+        v = float(str(val).replace(',', '').strip())
+        return v
+    except (ValueError, TypeError):
+        return default
+
+
+def main():
+    rows = parse_rows(CSV_PATH)
+    print(f'Filas en CSV: {len(rows)}')
+
+    conn = psycopg2.connect(dbname=TENANT_DB)
+    cur = conn.cursor()
+
+    # 1. Create categories
+    cat_names = sorted({r['categoria'].strip() for r in rows if r['categoria'].strip()})
+    for name in cat_names:
+        cur.execute("INSERT INTO categories (name) VALUES (%s) ON CONFLICT DO NOTHING", (name,))
+    conn.commit()
+    cur.execute("SELECT id, name FROM categories")
+    category_map = {r[1].strip().lower(): r[0] for r in cur.fetchall()}
+    print(f'Categorías creadas/existentes: {len(category_map)}')
+
+    # 2. Import items
+    created = updated = skipped = 0
+    warnings = []
+
+    for i, row in enumerate(rows, start=1):
+        part_number = row['numero_de_parte'].strip()
+        name = row['nombre'].strip()
+        if not part_number or not name:
+            skipped += 1
+            warnings.append(f'Fila {i}: sin numero_de_parte o nombre')
+            continue
+
+        brand = row['marca'].strip()
+        price_1 = to_decimal(row['precio'])
+        stock = int(to_decimal(row['cantidad']))
+        cost = to_decimal(row['costo'])
+        description = (row.get('descripcion') or '').strip()
+        category_name = row['categoria'].strip()
+        category_id = category_map.get(category_name.lower()) if category_name else None
+
+        cur.execute("SELECT id FROM inventory WHERE part_number = %s", (part_number,))
+        existing = cur.fetchone()
+
+        if existing:
+            item_id = existing[0]
+            cur.execute("""
+                UPDATE inventory SET
+                    name = %s,
+                    brand = COALESCE(NULLIF(%s,''), brand),
+                    cost = CASE WHEN %s > 0 THEN %s ELSE cost END,
+                    price_1 = CASE WHEN %s > 0 THEN %s ELSE price_1 END,
+                    description = COALESCE(NULLIF(%s,''), description),
+                    category_id = COALESCE(%s, category_id)
+                WHERE id = %s
+            """, (name, brand, cost, cost, price_1, price_1, description, category_id, item_id))
+            updated += 1
+            if stock > 0:
+                record_initial(conn, item_id, BRANCH_ID, stock, cost if cost > 0 else None)
+        else:
+            barcode = generate_barcode(conn, TENANT_DB)
+            cur.execute("""
+                INSERT INTO inventory
+                (part_number, barcode, name, brand, cost, price_1, location, description, category_id, unit)
+                VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s)
+                RETURNING id
+            """, (part_number, barcode, name, brand, cost, price_1, '', description, category_id, 'PZA'))
+            item_id = cur.fetchone()[0]
+            created += 1
+            if stock > 0:
+                record_initial(conn, item_id, BRANCH_ID, stock, cost if cost > 0 else None)
+
+        sku_secondary = (row.get('sku_secundario') or '').strip()
+        if sku_secondary:
+            cur.execute("""
+                INSERT INTO inventory_sku_aliases (inventory_id, sku, label)
+                VALUES (%s, %s, %s) ON CONFLICT DO NOTHING
+            """, (item_id, sku_secondary, 'Secundario'))
+
+        if i % COMMIT_EVERY == 0:
+            conn.commit()
+            print(f'  {i}/{len(rows)} procesadas (nuevos={created}, act={updated})', flush=True)
+
+    conn.commit()
+
+    cur.execute("SELECT count(*) FROM inventory")
+    total_inv = cur.fetchone()[0]
+    cur.execute("SELECT COALESCE(SUM(stock),0) FROM inventory_stock WHERE branch_id = %s", (BRANCH_ID,))
+    total_stock = cur.fetchone()[0]
+    cur.execute("SELECT count(*) FROM inventory_sku_aliases")
+    total_alias = cur.fetchone()[0]
+
+    print('\n=== RESUMEN ===')
+    print(f'Nuevos: {created} | Actualizados: {updated} | Saltados: {skipped}')
+    print(f'Total inventario: {total_inv} | Stock total sucursal {BRANCH_ID}: {total_stock} | Alias: {total_alias}')
+    if warnings:
+        print(f'Advertencias ({len(warnings)}):')
+        for w in warnings[:20]:
+            print('  -', w)
+
+    cur.close()
+    conn.close()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/index_meilisearch.py b/scripts/index_meilisearch.py
new file mode 100644
index 0000000..b6e8189
--- /dev/null
+++ b/scripts/index_meilisearch.py
@@ -0,0 +1,171 @@
+#!/usr/bin/env python3
+"""Index catalog data into Meilisearch for typo-tolerant search.
+
+Indexes:
+  - nexus_supplier_catalog (master DB) — supplier SKUs with cross-references
+  - nexus_inventory_{db_name}          — per-tenant inventory (optional refresh)
+
+Both indexes are configured with:
+  - searchableAttributes including `aliases` (inventory_sku_aliases / supplier
+    interchange numbers → cross-reference search, A6)
+  - a Spanish/English `synonyms` map (curated + services.translations)
+
+Usage (as postgres):
+  MASTER_DB_NAME=nexus_autoparts python3 scripts/index_meilisearch.py all
+  python3 scripts/index_meilisearch.py catalog
+  python3 scripts/index_meilisearch.py tenant tenant_capi_autopartes
+  python3 scripts/index_meilisearch.py synonyms   # settings only, no reindex
+
+Designed to run from a systemd timer after inventory imports/syncs.
+"""
+
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+import meilisearch  # noqa: E402
+from services.meili_search import (  # noqa: E402
+    MEILI_URL, MEILI_API_KEY,
+    inventory_index_settings, catalog_index_settings,
+    apply_synonyms_to_all, get_synonyms,
+)
+
+MASTER_DB = os.environ.get('MASTER_DB_NAME', 'nexus_autoparts')
+CATALOG_INDEX = 'nexus_supplier_catalog'
+
+client = meilisearch.Client(MEILI_URL, MEILI_API_KEY)
+
+
+def _catalog_aliases(cur):
+    """catalog_id -> [interchange part numbers] (A6 cross-refs)."""
+    aliases = {}
+    try:
+        cur.execute("SELECT catalog_id, part_number FROM supplier_catalog_interchange")
+        for cid, pn in cur.fetchall():
+            if cid is not None and pn:
+                aliases.setdefault(cid, []).append(str(pn))
+    except Exception:
+        cur.connection.rollback()
+    return aliases
+
+
+def index_supplier_catalog(cur):
+    cur.execute("""
+        SELECT sc.id, sc.sku, sc.name, sc.category, sc.supplier_name, sc.image_url,
+               COALESCE(scp.price, NULL) AS supplier_price
+        FROM supplier_catalog sc
+        LEFT JOIN LATERAL (
+            SELECT price FROM supplier_catalog_prices p
+            WHERE p.catalog_id = sc.id ORDER BY p.id DESC LIMIT 1
+        ) scp ON true
+        WHERE sc.is_active
+    """)
+    rows = cur.fetchall()
+    aliases = _catalog_aliases(cur)
+    docs = [
+        {
+            'id': r[0], 'sku': r[1], 'name': r[2], 'category': r[3] or '',
+            'supplier_name': r[4] or '', 'image_url': r[5] or '',
+            'supplier_price': float(r[6]) if r[6] else None,
+            'aliases': aliases.get(r[0], []),
+        }
+        for r in rows
+    ]
+    idx = client.index(CATALOG_INDEX)
+    idx.update_settings(catalog_index_settings())
+    task = idx.add_documents(docs, primary_key='id')
+    client.wait_for_task(task.task_uid)
+    n_alias = sum(1 for d in docs if d['aliases'])
+    print(f'[catalog] {len(docs)} documentos indexados en {CATALOG_INDEX} '
+          f'({n_alias} con cross-refs)', flush=True)
+
+
+def index_tenant(db_name):
+    conn = psycopg2.connect(dbname=db_name)
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT i.id, i.part_number, i.name, i.brand, i.price_1, i.image_url,
+               COALESCE(s.stock, 0)
+        FROM inventory i
+        LEFT JOIN (
+            SELECT inventory_id, SUM(stock) AS stock FROM inventory_stock
+            GROUP BY inventory_id
+        ) s ON s.inventory_id = i.id
+        WHERE i.is_active
+    """)
+    rows = cur.fetchall()
+
+    aliases = {}
+    try:
+        cur.execute("""
+            SELECT inventory_id, sku FROM inventory_sku_aliases
+            WHERE is_active AND sku IS NOT NULL
+        """)
+        for inv_id, sku in cur.fetchall():
+            aliases.setdefault(inv_id, []).append(str(sku))
+    except Exception:
+        conn.rollback()
+
+    docs = [
+        {
+            'id': r[0], 'part_number': r[1], 'name': r[2], 'brand': r[3] or '',
+            'price_1': float(r[4]) if r[4] else None, 'image_url': r[5] or '',
+            'stock': int(r[6] or 0),
+            'aliases': aliases.get(r[0], []),
+        }
+        for r in rows
+    ]
+    index_name = f"nexus_inventory_{db_name}"
+    idx = client.index(index_name)
+    idx.update_settings(inventory_index_settings())
+    task = idx.add_documents(docs, primary_key='id')
+    client.wait_for_task(task.task_uid)
+    n_alias = sum(1 for d in docs if d['aliases'])
+    print(f'[{db_name}] {len(docs)} documentos indexados en {index_name} '
+          f'({n_alias} con aliases)', flush=True)
+    conn.close()
+
+
+def apply_synonyms():
+    """Push the synonym map to existing indexes without reindexing."""
+    results = apply_synonyms_to_all()
+    for uid, ok in results.items():
+        print(f'[synonyms] {uid}: {"ok" if ok is True else ok}', flush=True)
+    print(f'[synonyms] {len(get_synonyms())} términos', flush=True)
+
+
+def main():
+    mode = sys.argv[1] if len(sys.argv) > 1 else 'all'
+
+    if mode == 'synonyms':
+        apply_synonyms()
+        return
+
+    if mode in ('all', 'catalog'):
+        conn = psycopg2.connect(dbname=MASTER_DB)
+        cur = conn.cursor()
+        index_supplier_catalog(cur)
+        cur.close()
+        conn.close()
+
+    if mode in ('all', 'tenants'):
+        mconn = psycopg2.connect(dbname=MASTER_DB)
+        mcur = mconn.cursor()
+        if len(sys.argv) > 2:
+            dbs = [sys.argv[2]]
+        else:
+            mcur.execute("SELECT db_name FROM tenants WHERE is_active = true")
+            dbs = [r[0] for r in mcur.fetchall()]
+        for db in dbs:
+            try:
+                index_tenant(db)
+            except Exception as e:
+                print(f'[{db}] ERROR: {e}', flush=True)
+        mcur.close()
+        mconn.close()
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/match_inventory_catalog.py b/scripts/match_inventory_catalog.py
new file mode 100755
index 0000000..05fc6db
--- /dev/null
+++ b/scripts/match_inventory_catalog.py
@@ -0,0 +1,173 @@
+#!/usr/bin/env python3
+"""Inventory <-> supplier-catalog SKU matching (A2).
+
+Populates ``inventory.catalog_part_id`` and registers matched supplier SKUs as
+``inventory_sku_aliases`` by matching ``inventory.part_number`` against the
+master ``supplier_catalog.sku`` / ``supplier_catalog_interchange`` (normalized)
+and, as a fallback, fuzzy name similarity.
+
+Usage (as root/postgres, from /home/Autopartes):
+    python3 scripts/match_inventory_catalog.py --tenant 45 --limit 500
+    python3 scripts/match_inventory_catalog.py --tenant 45 --dry-run
+    python3 scripts/match_inventory_catalog.py --all --batch 2000
+"""
+
+import argparse
+import json
+import os
+import sys
+import time
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+from tenant_db import get_tenant_conn, get_master_conn  # noqa: E402
+from services.sku_matcher import match_inventory, count_links  # noqa: E402
+
+DEFAULT_CHECKPOINT = os.path.join(
+    os.path.dirname(os.path.abspath(__file__)), '..', 'backups',
+    'match_catalog_checkpoint.json'
+)
+
+
+def list_tenants(only_id=None):
+    conn = get_master_conn()
+    cur = conn.cursor()
+    if only_id:
+        cur.execute(
+            "SELECT id, name, db_name FROM tenants WHERE is_active = true AND id = %s",
+            (only_id,),
+        )
+    else:
+        cur.execute(
+            "SELECT id, name, db_name FROM tenants WHERE is_active = true ORDER BY id"
+        )
+    rows = cur.fetchall()
+    cur.close()
+    conn.close()
+    return rows
+
+
+def load_checkpoint(path):
+    try:
+        with open(path) as f:
+            return json.load(f)
+    except Exception:
+        return {}
+
+
+def save_checkpoint(path, data):
+    try:
+        os.makedirs(os.path.dirname(path), exist_ok=True)
+        with open(path, 'w') as f:
+            json.dump(data, f, indent=2)
+    except Exception as e:
+        print(f"  ! no se pudo guardar checkpoint: {e}")
+
+
+def run_tenant(tenant_id, name, db_name, args, checkpoint):
+    print(f"\n=== tenant {tenant_id} — {name} ({db_name}) ===")
+    tenant_conn = get_tenant_conn(tenant_id)
+    master_conn = get_master_conn()
+    key = str(tenant_id)
+    state = checkpoint.get(key, {})
+    after_id = None if args.reset else state.get('after_id')
+
+    before_total, before_linked = count_links(tenant_conn)
+    print(f"  antes: total={before_total} linked={before_linked} "
+          f"({(before_linked * 100.0 / before_total) if before_total else 0:.2f}%)")
+
+    total_scanned = total_matched = total_updated = total_aliases = 0
+    total_by_method = {}
+    try:
+        while True:
+            call_limit = args.batch
+            if args.limit:
+                call_limit = min(args.batch, max(args.limit - total_scanned, 1))
+            res = match_inventory(
+                tenant_conn, master_conn,
+                limit=call_limit,
+                offset=0,
+                only_unmatched=args.only_unmatched,
+                create_aliases=not args.no_aliases,
+                use_names=not args.no_names,
+                name_threshold=args.name_threshold,
+                apply=not args.dry_run,
+                supplier=args.supplier,
+                after_id=after_id,
+                sample_limit=args.show,
+            )
+            total_scanned += res['scanned']
+            total_matched += res['matched']
+            total_updated += res['updated']
+            total_aliases += res['aliases_created']
+            for k, v in res['by_method'].items():
+                total_by_method[k] = total_by_method.get(k, 0) + v
+
+            if args.show and res['sample']:
+                for s in res['sample']:
+                    print(f"  {s['part_number']:<20} -> cat#{s['matched_catalog_id']} "
+                          f"{s['matched_sku']:<14} ({s['method']}, {s['score']})")
+
+            after_id = res['last_id']
+            checkpoint[key] = {
+                'after_id': after_id,
+                'matched': state.get('matched', 0) + total_matched,
+                'updated_at': time.strftime('%Y-%m-%dT%H:%M:%S'),
+            }
+            if not args.dry_run:
+                save_checkpoint(args.checkpoint, checkpoint)
+
+            print(f"  batch: scanned={res['scanned']} matched={res['matched']} "
+                  f"updated={res['updated']} aliases={res['aliases_created']} "
+                  f"methods={res['by_method']}")
+            if res['scanned'] < args.batch or res['scanned'] == 0:
+                break
+            if args.limit and total_scanned >= args.limit:
+                break
+    finally:
+        after_total, after_linked = count_links(tenant_conn)
+        print(f"  despues: total={after_total} linked={after_linked} "
+              f"({(after_linked * 100.0 / after_total) if after_total else 0:.2f}%)")
+        print(f"  total: scanned={total_scanned} matched={total_matched} "
+              f"updated={total_updated} aliases={total_aliases} "
+              f"methods={total_by_method}")
+        tenant_conn.close()
+        master_conn.close()
+
+
+def main():
+    p = argparse.ArgumentParser(description='Match inventory to supplier catalog (A2).')
+    p.add_argument('--tenant', type=int, help='tenant id (omit with --all)')
+    p.add_argument('--all', action='store_true', help='process every active tenant')
+    p.add_argument('--batch', type=int, default=5000, help='rows per batch')
+    p.add_argument('--limit', type=int, default=0, help='max rows per tenant (0 = all)')
+    p.add_argument('--only-unmatched', action='store_true', default=True,
+                   help='only items with catalog_part_id NULL/0 (default)')
+    p.add_argument('--all-items', dest='only_unmatched', action='store_false',
+                   help='consider every active item')
+    p.add_argument('--no-aliases', action='store_true', help='do not create aliases')
+    p.add_argument('--no-names', action='store_true', help='disable fuzzy-name fallback')
+    p.add_argument('--name-threshold', type=float, default=0.82)
+    p.add_argument('--supplier', help='restrict matching to one supplier name')
+    p.add_argument('--dry-run', action='store_true', help='do not persist')
+    p.add_argument('--reset', action='store_true', help='ignore saved checkpoint')
+    p.add_argument('--show', type=int, default=5, help='sample rows to print (0 = none)')
+    p.add_argument('--checkpoint', default=DEFAULT_CHECKPOINT)
+    args = p.parse_args()
+
+    if not args.all and not args.tenant:
+        p.error('--tenant ID o --all requerido')
+
+    checkpoint = load_checkpoint(args.checkpoint)
+    tenants = list_tenants(None if args.all else args.tenant)
+    if not tenants:
+        print('sin tenants para procesar')
+        return 1
+
+    for tid, name, db_name in tenants:
+        run_tenant(tid, name, db_name, args, checkpoint)
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/meli_attach_images.py b/scripts/meli_attach_images.py
new file mode 100644
index 0000000..6665914
--- /dev/null
+++ b/scripts/meli_attach_images.py
@@ -0,0 +1,303 @@
+#!/usr/bin/env python3
+"""Attach images to inventory items that are (or will be) published on MeLi.
+
+Fixes publishing block #1: ML requires at least one picture, and Rached (and
+most tenants) have zero rows in inventory_images, so publish_items rejects
+every item with "El producto no tiene imagen".
+
+Image sources, in priority order:
+  1. local  — files already on disk for this tenant:
+       /home/Autopartes/pos/static/images/parts/<tenant>_<inventory_id>.jpg
+       /home/Autopartes/data/images/parts/<tenant>/<inventory_id>_full.webp
+  2. catalog — master supplier_catalog.image_url, joined by part number / SKU
+  3. ml      — pictures of the MercadoLibre listing already linked to the item
+       (downloaded and re-hosted locally with services.image_service, or, with
+        --remote, registered as the ML secure_url directly)
+
+NOTE on the data/ Excel catalogs (VAZLO, YOKOMITSU, KNADIAN, LUK, RAYBESTOS,
+KG, PRODUCTOS_RACHED_2026): they were checked and contain NO image columns
+(marca / sku / INTERCAMBIO / nombre / carro only), so they cannot supply
+images. Also, master supplier_catalog.image_url is empty for all 17k rows
+today, so the catalog source is currently a no-op.
+
+Registered images go to inventory_images (sort_order + is_primary; the first
+becomes primary) and inventory.image_url is set to the primary one.
+
+Usage (from /home/Autopartes):
+    python3 scripts/meli_attach_images.py --tenant 31                 # dry-run
+    python3 scripts/meli_attach_images.py --tenant 31 --apply
+    python3 scripts/meli_attach_images.py --tenant 31 --apply --remote
+    python3 scripts/meli_attach_images.py --tenant 31 --apply --limit 5
+    python3 scripts/meli_attach_images.py --tenant 31 --apply --inventory-id 4752
+    python3 scripts/meli_attach_images.py --tenant 31 --json
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+STATIC_PARTS_DIR = '/home/Autopartes/pos/static/images/parts'
+DATA_PARTS_DIR = '/home/Autopartes/data/images/parts'
+MELI_MAX_PICTURES = 10
+
+
+def _load_env():
+    env_file = '/etc/nexus/pos.env'
+    if os.environ.get('MASTER_DB_URL') or not os.path.exists(env_file):
+        return
+    for line in open(env_file):
+        line = line.strip()
+        if not line or line.startswith('#') or '=' not in line:
+            continue
+        key, value = line.split('=', 1)
+        os.environ.setdefault(key.strip(), value.strip().strip('"').strip("'"))
+
+
+def _local_urls(tenant_id, inventory_id):
+    """Images already on disk for this tenant/item (relative, servable URLs)."""
+    urls = []
+    scraper = os.path.join(STATIC_PARTS_DIR, f'{tenant_id}_{inventory_id}.jpg')
+    if os.path.exists(scraper):
+        urls.append(f'/pos/static/images/parts/{tenant_id}_{inventory_id}.jpg')
+    processed = os.path.join(STATIC_PARTS_DIR, str(tenant_id), f'{inventory_id}_full.webp')
+    if os.path.exists(processed):
+        urls.append(f'/pos/static/images/parts/{tenant_id}/{inventory_id}_full.webp')
+    return urls
+
+
+def _catalog_urls(master_cur, skus):
+    """supplier_catalog.image_url for any of the given SKUs (non-empty only)."""
+    keys = [s for s in (skus or []) if s]
+    if not keys:
+        return []
+    master_cur.execute(
+        """
+        SELECT DISTINCT image_url FROM supplier_catalog
+        WHERE image_url IS NOT NULL AND image_url <> ''
+          AND UPPER(sku) = ANY(%s)
+        LIMIT %s
+        """,
+        ([str(k).strip().upper() for k in keys], MELI_MAX_PICTURES),
+    )
+    return [r[0] for r in master_cur.fetchall()]
+
+
+def _ml_urls(svc, tenant_id, inventory_id, external_item_id, remote, apply=True):
+    """Pictures of the ML listing. Returns candidate URLs for inventory_images.
+
+    The first picture is downloaded and re-hosted locally with
+    services.image_service (that service stores one file per item, so the
+    primary is self-contained); the remaining pictures keep their ML-hosted
+    secure_url, which is public and valid for ML itself.
+
+    In dry-run (apply=False) nothing is downloaded: secure_urls are returned
+    as candidates so the caller can report without side effects.
+    """
+    from services import image_service
+    pictures = (svc.get_item(str(external_item_id)).get('pictures') or [])
+    urls = []
+    for index, pic in enumerate(pictures[:MELI_MAX_PICTURES]):
+        remote_url = pic.get('secure_url') or pic.get('url')
+        if not remote_url:
+            continue
+        if remote or not apply or index > 0:
+            urls.append(remote_url)
+            continue
+        try:
+            saved = image_service.save_image(tenant_id, inventory_id, image_url=remote_url)
+            urls.append(saved['image_url'])
+        except Exception as e:
+            print(f"    ! could not download {remote_url}: {e}", flush=True)
+            urls.append(remote_url)  # fall back to the ML-hosted URL
+    return urls
+
+
+def _register_images(cur, inventory_id, urls, apply):
+    """Insert new inventory_images rows (first becomes primary) + set image_url."""
+    urls = [u for u in dict.fromkeys(urls) if u]  # dedupe, keep order
+    if not urls:
+        return 0
+
+    cur.execute(
+        "SELECT url, is_primary FROM inventory_images WHERE inventory_id = %s "
+        "ORDER BY is_primary DESC, sort_order, id",
+        (inventory_id,),
+    )
+    existing = cur.fetchall()
+    have = {r[0] for r in existing}
+    has_primary = any(r[1] for r in existing)
+    order = len(existing)
+
+    added = 0
+    for url in urls:
+        if url in have:
+            continue
+        is_primary = (not has_primary and added == 0)
+        if apply:
+            cur.execute(
+                "INSERT INTO inventory_images (inventory_id, url, sort_order, is_primary) "
+                "VALUES (%s, %s, %s, %s)",
+                (inventory_id, url, order, is_primary),
+            )
+        have.add(url)
+        added += 1
+        order += 1
+        if is_primary:
+            has_primary = True
+
+    if apply and added:
+        cur.execute(
+            "SELECT url FROM inventory_images WHERE inventory_id = %s "
+            "ORDER BY is_primary DESC, sort_order, id LIMIT 1",
+            (inventory_id,),
+        )
+        row = cur.fetchone()
+        if row:
+            cur.execute("UPDATE inventory SET image_url = %s WHERE id = %s", (row[0], inventory_id))
+    return added
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__,
+                                 formatter_class=argparse.RawDescriptionHelpFormatter)
+    ap.add_argument('--tenant', type=int, required=True, help='tenant id (e.g. 31 = Rached)')
+    ap.add_argument('--apply', action='store_true', help='write to inventory_images (default: dry-run)')
+    ap.add_argument('--source', choices=['auto', 'local', 'catalog', 'ml'], default='auto',
+                    help='restrict to one source (default: auto = first available)')
+    ap.add_argument('--remote', action='store_true',
+                    help='register the MeLi secure_url directly instead of downloading it')
+    ap.add_argument('--limit', type=int, default=None, help='max items to process')
+    ap.add_argument('--inventory-id', type=int, action='append', dest='inventory_ids',
+                    help='only this inventory id (repeatable)')
+    ap.add_argument('--json', action='store_true', help='print the summary as JSON')
+    args = ap.parse_args()
+
+    _load_env()
+
+    from tenant_db import get_tenant_conn, get_master_conn
+    from services import marketplace_external_service as meli
+
+    conn = get_tenant_conn(args.tenant)
+    master = get_master_conn()
+
+    try:
+        cur = conn.cursor()
+        cfg = meli.get_meli_config(conn)
+        svc = meli._get_meli_service(cfg, conn)
+
+        # Targets: explicit inventory ids, or every mapped ML listing.
+        if args.inventory_ids:
+            cur.execute(
+                """
+                SELECT inventory_id, MAX(external_item_id)
+                FROM marketplace_listings
+                WHERE channel = 'mercadolibre' AND inventory_id = ANY(%s)
+                GROUP BY inventory_id
+                ORDER BY inventory_id
+                """,
+                (args.inventory_ids,),
+            )
+            targets = cur.fetchall()
+            # Inventory ids with no listing yet still deserve an image.
+            seen = {t[0] for t in targets}
+            targets += [(iid, None) for iid in args.inventory_ids if iid not in seen]
+        else:
+            cur.execute(
+                """
+                SELECT inventory_id, MAX(external_item_id)
+                FROM marketplace_listings
+                WHERE channel = 'mercadolibre' AND inventory_id IS NOT NULL
+                GROUP BY inventory_id
+                ORDER BY inventory_id
+                """
+            )
+            targets = cur.fetchall()
+
+        if args.limit:
+            targets = targets[:args.limit]
+
+        master_cur = master.cursor()
+        summary = {"tenant": args.tenant, "dry_run": not args.apply,
+                   "targets": len(targets), "with_images": 0, "no_image": 0,
+                   "images_added": 0, "sources": {"local": 0, "catalog": 0, "ml": 0},
+                   "no_image_items": [], "details": []}
+
+        if not targets:
+            print("No targets: no marketplace listing is linked to inventory yet.")
+            return 0
+
+        for inventory_id, external_item_id in targets:
+            cur.execute(
+                "SELECT part_number FROM inventory WHERE id = %s", (inventory_id,)
+            )
+            row = cur.fetchone()
+            part_number = row[0] if row else None
+
+            urls, used = [], None
+            want = lambda s: args.source in ('auto', s)  # noqa: E731
+
+            if want('local'):
+                local = _local_urls(args.tenant, inventory_id)
+                if local:
+                    urls, used = local, 'local'
+            if not urls and want('catalog'):
+                catalog = _catalog_urls(master_cur, [part_number])
+                if catalog:
+                    urls, used = catalog, 'catalog'
+            if not urls and want('ml') and external_item_id and svc:
+                try:
+                    ml = _ml_urls(svc, args.tenant, inventory_id, external_item_id,
+                                  args.remote, apply=args.apply)
+                    if ml:
+                        urls, used = ml, 'ml'
+                except Exception as e:
+                    print(f"  [{inventory_id}] ML image fetch failed: {e}", flush=True)
+
+            if not urls:
+                summary['no_image'] += 1
+                summary['no_image_items'].append(inventory_id)
+                summary['details'].append({
+                    "inventory_id": inventory_id, "part_number": part_number,
+                    "status": "no_image",
+                })
+                continue
+
+            added = _register_images(cur, inventory_id, urls, args.apply)
+            if args.apply:
+                conn.commit()
+            summary['with_images'] += 1
+            summary['images_added'] += added
+            summary['sources'][used] = summary['sources'].get(used, 0) + 1
+            summary['details'].append({
+                "inventory_id": inventory_id, "part_number": part_number,
+                "status": "ok", "source": used, "found": len(urls), "added": added,
+            })
+
+        master_cur.close()
+        cur.close()
+    finally:
+        master.close()
+        conn.close()
+
+    if args.json:
+        print(json.dumps(summary, indent=2, ensure_ascii=False, default=str))
+        return 0
+
+    mode = 'DRY-RUN (no writes)' if summary['dry_run'] else 'APPLIED'
+    print(f"[tenant {args.tenant}] attach images — {mode}")
+    print(f"  targets:        {summary['targets']}")
+    print(f"  with images:    {summary['with_images']}  (by source: {summary['sources']})")
+    print(f"  images added:   {summary['images_added']}")
+    print(f"  no image found: {summary['no_image']}")
+    if summary['no_image_items']:
+        print(f"    inventory ids without a usable image: {summary['no_image_items']}")
+    if summary['dry_run'] and summary['images_added'] >= 0:
+        print("\n  Re-run with --apply to persist the images in inventory_images.")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/meli_questions_sla.py b/scripts/meli_questions_sla.py
new file mode 100644
index 0000000..6f2253f
--- /dev/null
+++ b/scripts/meli_questions_sla.py
@@ -0,0 +1,117 @@
+#!/usr/bin/env python3
+"""MeLi questions SLA sweep for a tenant.
+
+Lists unanswered MercadoLibre buyer questions older than N hours (the ones
+that hurt the seller's response score / reputation), oldest first, so the
+operator can answer them before the SLA is blown.
+
+Auto-answering is separate and OPT-IN:
+  * It only runs when the tenant has `meli_auto_answer_questions = true`.
+  * `--auto-answer` sends the high-confidence, template-based answers built by
+    services/question_ai (never free-form LLM text) through
+    marketplace_external_service.auto_answer_questions().
+  * Without `--auto-answer` the script only reports; it never sends anything.
+
+Note: MercadoLibre returns the question status as UNANSWERED / ANSWERED. The
+service now normalizes it to lowercase on upsert, and the queries here are
+case-insensitive either way.
+
+Usage (from /home/Autopartes):
+    python3 scripts/meli_questions_sla.py --tenant 31
+    python3 scripts/meli_questions_sla.py --tenant 31 --max-age-hours 48
+    python3 scripts/meli_questions_sla.py --tenant 31 --auto-answer
+    python3 scripts/meli_questions_sla.py --tenant 31 --json
+
+Suggested systemd timer (per tenant), once an hour:
+    ExecStart=/usr/bin/python3 /home/Autopartes/scripts/meli_questions_sla.py \
+        --tenant 31 --max-age-hours 24
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+
+def _load_env():
+    env_file = '/etc/nexus/pos.env'
+    if os.environ.get('MASTER_DB_URL') or not os.path.exists(env_file):
+        return
+    for line in open(env_file):
+        line = line.strip()
+        if not line or line.startswith('#') or '=' not in line:
+            continue
+        key, value = line.split('=', 1)
+        os.environ.setdefault(key.strip(), value.strip().strip('"').strip("'"))
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__,
+                                 formatter_class=argparse.RawDescriptionHelpFormatter)
+    ap.add_argument('--tenant', type=int, required=True, help='tenant id (e.g. 31 = Rached)')
+    ap.add_argument('--max-age-hours', type=float, default=24,
+                    help='age threshold in hours (default 24)')
+    ap.add_argument('--limit', type=int, default=20,
+                    help='max questions to auto-answer when --auto-answer is used')
+    ap.add_argument('--auto-answer', action='store_true',
+                    help='send high-confidence answers (requires meli_auto_answer_questions = true)')
+    ap.add_argument('--json', action='store_true', help='print the full result as JSON')
+    args = ap.parse_args()
+
+    _load_env()
+
+    from tenant_db import get_tenant_conn
+    from services import marketplace_external_service as meli
+
+    conn = get_tenant_conn(args.tenant)
+    try:
+        stale = meli.list_stale_questions(conn, max_age_hours=args.max_age_hours)
+        cfg = meli.get_meli_config(conn)
+        result = {
+            "tenant": args.tenant,
+            "max_age_hours": args.max_age_hours,
+            "auto_answer_enabled": bool(cfg.get("meli_auto_answer_questions")),
+            "stale_count": len(stale),
+            "stale": stale,
+        }
+        if args.auto_answer:
+            if not cfg.get("meli_auto_answer_questions"):
+                result["auto_answer"] = {
+                    "enabled": False,
+                    "reason": "meli_auto_answer_questions is not enabled for this tenant",
+                }
+            else:
+                result["auto_answer"] = meli.auto_answer_questions(conn, limit=args.limit)
+    finally:
+        conn.close()
+
+    if args.json:
+        print(json.dumps(result, indent=2, ensure_ascii=False, default=str))
+        return 0
+
+    print(f"[tenant {args.tenant}] questions SLA — unanswered older than "
+          f"{args.max_age_hours}h: {result['stale_count']}")
+    if not stale:
+        print("  Nothing overdue.")
+    for q in stale:
+        age = q.get('age_hours')
+        print(f"  q#{q['id']} ({age}h) {q['buyer_nickname'] or 'comprador'}: "
+              f"{(q['question_text'] or '')[:70]!r} — item {q['external_item_id']}")
+
+    if args.auto_answer:
+        aa = result.get("auto_answer") or {}
+        if aa.get("enabled") is False:
+            print(f"\n  auto-answer not run: {aa.get('reason')}")
+        else:
+            print(f"\n  auto-answer: answered={aa.get('answered')} "
+                  f"skipped={aa.get('skipped')}")
+    else:
+        print("\n  (report-only; re-run with --auto-answer to send high-confidence "
+              "answers when meli_auto_answer_questions = true)")
+    return 0
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/meli_sync_all.py b/scripts/meli_sync_all.py
new file mode 100644
index 0000000..9e1123f
--- /dev/null
+++ b/scripts/meli_sync_all.py
@@ -0,0 +1,48 @@
+#!/usr/bin/env python3
+"""Run MercadoLibre sync (stock/price + orders) for all enabled tenants.
+
+Called by systemd timer every 15 minutes. Runs the Celery task bodies
+synchronously in-process (no broker needed from the timer context).
+"""
+
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+
+MASTER_DB = os.environ.get('MASTER_DB_NAME', 'nexus_autoparts')
+
+
+def main():
+    conn = psycopg2.connect(dbname=MASTER_DB)
+    cur = conn.cursor()
+    cur.execute("""
+        SELECT t.id FROM tenants t
+        JOIN tenant_schema_version v ON v.tenant_id = t.id
+        WHERE t.is_active
+        ORDER BY t.id
+    """)
+    tenant_ids = [r[0] for r in cur.fetchall()]
+    cur.close()
+    conn.close()
+
+    from tasks import sync_meli_stock_price_task, sync_meli_orders_task
+
+    for tid in tenant_ids:
+        try:
+            r1 = sync_meli_stock_price_task.run(tid)
+            r2 = sync_meli_orders_task.run(tid)
+            print(f'[tenant {tid}] stock={r1} orders={r2}', flush=True)
+        except Exception as e:
+            # Meli disabled / not connected for this tenant is the common case
+            msg = str(e)
+            if 'not configured' in msg or 'not connected' in msg:
+                continue
+            print(f'[tenant {tid}] ERROR: {msg[:200]}', flush=True)
+    print('MeLi sync round complete.', flush=True)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/process_cfdi_queues.py b/scripts/process_cfdi_queues.py
new file mode 100644
index 0000000..c9adf49
--- /dev/null
+++ b/scripts/process_cfdi_queues.py
@@ -0,0 +1,72 @@
+#!/usr/bin/env python3
+"""Process pending CFDI stamping queues for all tenants (Facturapi).
+
+Called by systemd timer every 2 minutes so pending invoices stamp without
+anyone pressing a button. Each round first enqueues the missing payment
+complements (REP) of PPD invoices and the credit notes of returns.
+"""
+
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+
+MASTER_DB = os.environ.get('MASTER_DB_NAME', 'nexus_autoparts')
+
+
+def main():
+    from services.cfdi_queue import enqueue_pending_complements, process_queue
+
+    master = psycopg2.connect(dbname=MASTER_DB)
+    mcur = master.cursor()
+    mcur.execute("SELECT id, db_name FROM tenants WHERE is_active = true ORDER BY id")
+    tenants = mcur.fetchall()
+    mcur.close()
+    master.close()
+
+    for tenant_id, db_name in tenants:
+        try:
+            conn = psycopg2.connect(dbname=db_name)
+            cur = conn.cursor()
+            cur.execute("""
+                SELECT key, value FROM tenant_config
+                WHERE key IN ('cfdi_facturapi_key', 'cfdi_facturapi_org_id',
+                              'facturapi_secret_key', 'facturapi_org_id')
+            """)
+            tcfg = {k: v for k, v in cur.fetchall()}
+            cur.close()
+
+            if not tcfg.get('cfdi_facturapi_key') and not tcfg.get('facturapi_secret_key'):
+                conn.close()
+                continue  # tenant has no CFDI configured
+
+            # Enqueue missing payment complements (REP) and credit notes first;
+            # they only need the tenant DB, not the Facturapi API.
+            try:
+                enqueue_pending_complements(conn)
+            except Exception as e:
+                conn.rollback()
+                print(f'[{db_name}] complement sync ERROR: {str(e)[:200]}', flush=True)
+
+            # Quick check: are there pending items?
+            cur = conn.cursor()
+            cur.execute("SELECT count(*) FROM cfdi_queue WHERE status IN ('pending','failed')")
+            pending = cur.fetchone()[0]
+            cur.close()
+            if not pending:
+                conn.close()
+                continue
+
+            result = process_queue(conn, tcfg)
+            conn.close()
+            print(f'[{db_name}] processed={result.get("processed")} '
+                  f'stamped={result.get("stamped")} failed={result.get("failed")}', flush=True)
+        except Exception as e:
+            print(f'[{db_name}] ERROR: {str(e)[:200]}', flush=True)
+    print('CFDI queue round complete.', flush=True)
+
+
+if __name__ == '__main__':
+    main()
diff --git a/scripts/rollup_tenant_metrics.py b/scripts/rollup_tenant_metrics.py
new file mode 100644
index 0000000..b15400a
--- /dev/null
+++ b/scripts/rollup_tenant_metrics.py
@@ -0,0 +1,101 @@
+#!/usr/bin/env python3
+"""Daily business-metrics rollup for every tenant, into the master table
+``tenant_metrics_daily``.
+
+Creates the table idempotently (no tenant migration runner involved) and
+upserts one row per tenant per day, so it is safe to re-run for the same date.
+
+Usage:
+  python3 scripts/rollup_tenant_metrics.py                      # today, active tenants
+  python3 scripts/rollup_tenant_metrics.py --date 2026-10-03
+  python3 scripts/rollup_tenant_metrics.py --all                # include inactive tenants
+  python3 scripts/rollup_tenant_metrics.py --days 30            # backfill last 30 days
+  python3 scripts/rollup_tenant_metrics.py --tenant tenant_capi_autopartes
+  python3 scripts/rollup_tenant_metrics.py --json
+
+Exit code 0 on success, 2 when one or more tenants failed to roll up.
+"""
+
+import argparse
+import json
+import os
+import sys
+from datetime import date as date_cls
+
+MANAGER_DIR = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..", "manager")
+if MANAGER_DIR not in sys.path:
+    sys.path.insert(0, MANAGER_DIR)
+
+from services import portfolio_service  # noqa: E402
+
+
+def _print_report(result, health_by_tenant):
+    print(f"Rollup {result['date_from']} → {result['date_to']} "
+          f"({result['days']} día(s)) — {result['rows_written']} filas, "
+          f"{len(result['tenants'])} tenants")
+    print(f"{'tenant':<34} {'rows':>5}  {'ventas(hoy)':>11} {'MX$ hoy':>10} "
+          f"{'items':>8} {'fitment%':>8} {'health':>6}")
+    for t in result["tenants"]:
+        h = health_by_tenant.get(t["tenant_id"], {})
+        last = t.get("last") or {}
+        print(f"{t['db_name']:<34} {t['rows']:>5}  "
+              f"{last.get('ventas_count', ''):>11} "
+              f"{last.get('ventas_total', ''):>10} "
+              f"{last.get('items_activos', ''):>8} "
+              f"{str(last.get('fitment_pct', '')):>8} "
+              f"{str(h.get('health_score', '')):>6}")
+    for e in result["errors"]:
+        print(f"  ERROR {e['db_name']}: {e['error']}", file=sys.stderr)
+    print("\nHealth (último día):")
+    for t in result["tenants"]:
+        h = health_by_tenant.get(t["tenant_id"], {})
+        codes = ", ".join(s["code"] for s in h.get("signals", [])) or "-"
+        print(f"  {t['db_name']:<34} {str(h.get('health_score')):>5} "
+              f"{h.get('band', ''):<9} [{codes}]")
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__,
+                                     formatter_class=argparse.RawDescriptionHelpFormatter)
+    parser.add_argument("--date", help="last day of the range (YYYY-MM-DD, default today)")
+    parser.add_argument("--days", type=int, default=1,
+                        help="number of days to roll up ending at --date (default 1)")
+    parser.add_argument("--all", action="store_true",
+                        help="include inactive tenants (default: active only)")
+    parser.add_argument("--tenant", action="append", default=None,
+                        help="restrict to a db_name or tenant id (repeatable)")
+    parser.add_argument("--json", action="store_true", help="print raw JSON")
+    args = parser.parse_args()
+
+    target = None
+    if args.date:
+        try:
+            target = date_cls.fromisoformat(args.date)
+        except ValueError:
+            parser.error(f"fecha inválida: {args.date} (usa YYYY-MM-DD)")
+
+    result = portfolio_service.run_rollup(
+        date=target,
+        days=max(1, args.days),
+        tenant_ids=args.tenant,
+        include_inactive=args.all,
+    )
+
+    # Attach the latest collected row + health per tenant for the report/JSON.
+    metrics = portfolio_service.get_tenant_metrics(days=14)
+    health_by_tenant = {t["tenant_id"]: t["health"] for t in metrics["tenants"]}
+    latest_metrics = {t["tenant_id"]: t.get("metrics") for t in metrics["tenants"]}
+    for t in result["tenants"]:
+        t["last"] = latest_metrics.get(t["tenant_id"])
+        t["health"] = health_by_tenant.get(t["tenant_id"])
+
+    if args.json:
+        print(json.dumps(result, indent=2, default=str))
+    else:
+        _print_report(result, health_by_tenant)
+
+    return 2 if result["errors"] else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())
diff --git a/scripts/run_anomaly_scan.py b/scripts/run_anomaly_scan.py
new file mode 100644
index 0000000..6d2ffe8
--- /dev/null
+++ b/scripts/run_anomaly_scan.py
@@ -0,0 +1,105 @@
+#!/usr/bin/env python3
+"""Run the A5 business anomaly scan for one or all tenants.
+
+Reports, per tenant, the anomalies detected by services.anomaly_detector:
+atypical discounts (per cajero / per SKU), sales below cost, repeated
+cancellations and off-hours tickets.
+
+Usage (as postgres):
+  MASTER_DB_NAME=nexus_autopartes python3 scripts/run_anomaly_scan.py [db_name|all] [days]
+  python3 scripts/run_anomaly_scan.py tenant_refaccionaria_atlas 30
+  python3 scripts/run_anomaly_scan.py all 90 --json
+
+Exit code is 1 when at least one critical/high finding is reported, so it can
+be wired into cron/Alertmanager; 0 otherwise.
+"""
+
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+import psycopg2  # noqa: E402
+from services.anomaly_detector import detect_anomalies  # noqa: E402
+
+MASTER_DB = os.environ.get('MASTER_DB_NAME', 'nexus_autoparts')
+
+SEVERITY_ORDER = {'critical': 0, 'high': 1, 'medium': 2, 'low': 3}
+
+
+def _tenant_dbs():
+    conn = psycopg2.connect(dbname=MASTER_DB)
+    try:
+        cur = conn.cursor()
+        cur.execute("SELECT db_name FROM tenants WHERE is_active = true ORDER BY db_name")
+        dbs = [r[0] for r in cur.fetchall()]
+        cur.close()
+    finally:
+        conn.close()
+    return dbs
+
+
+def _print_report(db_name, report):
+    sample = report['sample']
+    cold = ' (COLD START: poca historia)' if report['cold_start'] else ''
+    print(f"\n=== {db_name}{cold} ===")
+    print(f"  ventana: {report['window_days']}d | sale_items={sample['sale_items']} "
+          f"sales={sample['sales']} empleados={sample['employees']}")
+    if not report['employees'] and not report['skus']:
+        print("  sin anomalías")
+        return
+
+    for entry in report['employees']:
+        print(f"  [empleado {entry['employee_id']} {entry['employee_name']}] "
+              f"score={entry['score']}")
+        for a in sorted(entry['anomalies'], key=lambda x: SEVERITY_ORDER.get(x['severity'], 9)):
+            print(f"     - {a['severity']:8s} {a['type']:20s} {a['detail']}")
+    for entry in report['skus']:
+        types = ', '.join(sorted({a['type'] for a in entry['anomalies']}))
+        print(f"  [sku {entry['inventory_id']} {entry['name']}] score={entry['score']} -> {types}")
+
+
+def main():
+    args = [a for a in sys.argv[1:] if not a.startswith('--')]
+    as_json = '--json' in sys.argv
+    target = args[0] if args else 'all'
+    days = int(args[1]) if len(args) > 1 else 90
+
+    dbs = _tenant_dbs() if target == 'all' else [target]
+    reports = {}
+    exit_code = 0
+
+    for db in dbs:
+        try:
+            conn = psycopg2.connect(dbname=db)
+        except Exception as e:
+            print(f"[{db}] ERROR de conexión: {e}", file=sys.stderr)
+            exit_code = 2
+            continue
+        try:
+            report = detect_anomalies(conn, days=days)
+        except Exception as e:
+            print(f"[{db}] ERROR: {e}", file=sys.stderr)
+            exit_code = 2
+            continue
+        finally:
+            conn.close()
+
+        reports[db] = report
+        if not as_json:
+            _print_report(db, report)
+        if report['summary']['by_type'] and any(
+                e['anomalies'] and min(
+                    SEVERITY_ORDER.get(a['severity'], 9) for a in e['anomalies']) <= 1
+                for e in report['employees'] + report['skus']):
+            exit_code = max(exit_code, 1)
+
+    if as_json:
+        print(json.dumps(reports, indent=2, default=str))
+
+    return exit_code
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/scripts/suggest_meli_answer.py b/scripts/suggest_meli_answer.py
new file mode 100644
index 0000000..c903c62
--- /dev/null
+++ b/scripts/suggest_meli_answer.py
@@ -0,0 +1,82 @@
+#!/usr/bin/env python3
+"""A7 CLI — intent + suggested answer for MercadoLibre buyer questions.
+
+Uses ``services.question_ai``. Never sends anything unless ``--auto-answer`` is
+given AND the tenant has ``meli_auto_answer_questions = true``.
+
+Usage (from /home/Autopartes):
+    python3 scripts/suggest_meli_answer.py --tenant 28 --question 123
+    python3 scripts/suggest_meli_answer.py --tenant 28 --pending --no-llm
+    python3 scripts/suggest_meli_answer.py --tenant 28 --auto-answer
+"""
+
+import argparse
+import json
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)), '..', 'pos'))
+
+
+def _load_env():
+    env_file = '/etc/nexus/pos.env'
+    if os.environ.get('MASTER_DB_URL') or not os.path.exists(env_file):
+        return
+    for line in open(env_file):
+        line = line.strip()
+        if not line or line.startswith('#') or '=' not in line:
+            continue
+        k, v = line.split('=', 1)
+        os.environ.setdefault(k.strip(), v.strip().strip('"').strip("'"))
+
+
+def main():
+    ap = argparse.ArgumentParser(description=__doc__)
+    ap.add_argument('--tenant', type=int, required=True)
+    ap.add_argument('--question', type=int, help='local marketplace_questions.id')
+    ap.add_argument('--pending', action='store_true',
+                    help='suggest for every unanswered question (limit --limit)')
+    ap.add_argument('--limit', type=int, default=20)
+    ap.add_argument('--no-llm', action='store_true', help='templates only, no LLM fallback')
+    ap.add_argument('--auto-answer', action='store_true',
+                    help='send high-confidence template answers (requires tenant flag)')
+    args = ap.parse_args()
+
+    _load_env()
+
+    from tenant_db import get_tenant_conn
+    from services import question_ai, marketplace_external_service as meli
+
+    conn = get_tenant_conn(args.tenant)
+    try:
+        if args.auto_answer:
+            print(json.dumps(meli.auto_answer_questions(conn), ensure_ascii=False, indent=2))
+            return 0
+
+        use_llm = not args.no_llm
+        if args.question:
+            result = question_ai.get_question_suggestion(conn, args.question, use_llm=use_llm)
+            print(json.dumps(result, ensure_ascii=False, indent=2))
+            return 0
+
+        if args.pending:
+            cur = conn.cursor()
+            cur.execute("""
+                SELECT id FROM marketplace_questions
+                WHERE (status IS NULL OR status = 'unanswered')
+                ORDER BY question_date ASC NULLS LAST LIMIT %s
+            """, (args.limit,))
+            ids = [r[0] for r in cur.fetchall()]
+            cur.close()
+            for qid in ids:
+                result = question_ai.get_question_suggestion(conn, qid, use_llm=use_llm)
+                print(json.dumps({'question_id': qid, **result}, ensure_ascii=False, indent=2))
+            return 0
+
+        ap.error('use --question, --pending or --auto-answer')
+    finally:
+        conn.close()
+
+
+if __name__ == '__main__':
+    sys.exit(main())
diff --git a/systemd/nexus-backup.service b/systemd/nexus-backup.service
index c79746b..30ba79f 100644
--- a/systemd/nexus-backup.service
+++ b/systemd/nexus-backup.service
@@ -1,11 +1,15 @@
 [Unit]
-Description=Nexus Autoparts automated backup
+Description=Nexus Autoparts automated backup (master + all tenant DBs)
 After=postgresql.service
+OnFailure=nexus-alert@%n.service
 
 [Service]
 Type=oneshot
 User=root
 WorkingDirectory=/home/Autopartes
-ExecStart=/bin/bash /home/Autopartes/scripts/backup.sh
+ExecStart=/bin/bash /home/Autopartes/scripts/backup_selective.sh
+Environment=RETENTION_DAYS=21
+Environment=MASTER_DB=nexus_autoparts
+# Environment=BACKUP_S3_BUCKET=mi-bucket   (requiere tools/bin/aws configurado)
 StandardOutput=append:/var/log/nexus-pos/backup.log
 StandardError=append:/var/log/nexus-pos/backup.log
diff --git a/systemd/nexus-expire-demos.service b/systemd/nexus-expire-demos.service
new file mode 100644
index 0000000..082125a
--- /dev/null
+++ b/systemd/nexus-expire-demos.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=Nexus demo expiry (downgrade ended demos to free)
+After=postgresql.service
+
+[Service]
+Type=oneshot
+User=postgres
+Environment=MASTER_DB_NAME=nexus_autoparts
+WorkingDirectory=/home/Autopartes
+ExecStart=/usr/bin/python3 /home/Autopartes/scripts/expire_demos.py --apply
+OnFailure=nexus-alert@%n.service
diff --git a/systemd/nexus-expire-demos.timer b/systemd/nexus-expire-demos.timer
new file mode 100644
index 0000000..b3e3729
--- /dev/null
+++ b/systemd/nexus-expire-demos.timer
@@ -0,0 +1,9 @@
+[Unit]
+Description=Expire ended demo tenants daily
+
+[Timer]
+OnCalendar=*-*-* 03:37:00
+Persistent=true
+
+[Install]
+WantedBy=timers.target
diff --git a/systemd/nexus-pos.service b/systemd/nexus-pos.service
index 841a5f4..fc57d01 100644
--- a/systemd/nexus-pos.service
+++ b/systemd/nexus-pos.service
@@ -18,6 +18,7 @@ Environment=REDIS_URL=redis://localhost:6379/0
 Environment=REDIS_ENABLED=true
 Environment=MEILI_URL=http://localhost:7700
 Environment=MEILI_ENABLED=true
+Environment=MEILI_API_KEY=ac66d5e44381fa0c4c2f949d7026fa19cb8c454a0740262403f27cd76aefed1e
 Environment=QWEN_API_URL=https://api.nan.builders/v1
 Environment=QWEN_API_KEY=sk-Yr0e-Y4F4j1NuuK8xdbxIA
 Environment=QWEN_MODEL=qwen3.6
diff --git a/systemd/nexus-rollup-metrics.service b/systemd/nexus-rollup-metrics.service
new file mode 100644
index 0000000..ba9b1db
--- /dev/null
+++ b/systemd/nexus-rollup-metrics.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Nexus tenant metrics rollup (portfolio)
+After=postgresql.service
+
+[Service]
+Type=oneshot
+User=postgres
+WorkingDirectory=/home/Autopartes
+ExecStart=/usr/bin/python3 /home/Autopartes/scripts/rollup_tenant_metrics.py --days 3
+OnFailure=nexus-alert@%n.service
diff --git a/systemd/nexus-rollup-metrics.timer b/systemd/nexus-rollup-metrics.timer
new file mode 100644
index 0000000..4d609f3
--- /dev/null
+++ b/systemd/nexus-rollup-metrics.timer
@@ -0,0 +1,9 @@
+[Unit]
+Description=Roll up per-tenant business metrics daily
+
+[Timer]
+OnCalendar=*-*-* 04:07:00
+Persistent=true
+
+[Install]
+WantedBy=timers.target
diff --git a/systemd/nexus.service b/systemd/nexus.service
index c712be1..a0bef7f 100644
--- a/systemd/nexus.service
+++ b/systemd/nexus.service
@@ -3,6 +3,8 @@ Description=Nexus Autoparts Dashboard
 After=network.target postgresql.service
 
 [Service]
+# Número WhatsApp público para botón de cotización del catálogo (formato: 521234567890)
+Environment=PUBLIC_WA_NUMBER=
 Type=simple
 User=root
 WorkingDirectory=/home/Autopartes/dashboard
diff --git a/test_double_refresh.js b/test_double_refresh.js
new file mode 100644
index 0000000..4b94b6e
--- /dev/null
+++ b/test_double_refresh.js
@@ -0,0 +1,69 @@
+#!/usr/bin/env node
+/* Reproduce double-refresh on tab change: count document loads per navigation. */
+const { chromium } = require('playwright');
+const fs = require('fs');
+const { execSync } = require('child_process');
+
+const JWT_SECRET = execSync(
+  "grep -oP 'POS_JWT_SECRET=\\K.*' /etc/systemd/system/nexus-pos.service | head -1"
+).toString().trim();
+
+// Sign a token identical to auth_bp.login (HS256, 10 min)
+function makeToken() {
+  const header = { alg: 'HS256', typ: 'JWT' };
+  const now = Math.floor(Date.now() / 1000);
+  const payload = {
+    tenant_id: 45, employee_id: 1, name: 'Test Owner', role: 'owner',
+    branch_id: 1, max_discount_pct: 100,
+    permissions: ['pos.sell', 'pos.view', 'pos.remission', 'catalog.view',
+      'inventory.view', 'inventory.create', 'customers.view', 'customers.create',
+      'invoicing.view', 'reports.view', 'config.view', 'config.edit',
+      'workshop.view', 'dashboard.view'],
+    device_id: 'pw-test', type: 'pos_access', exp: now + 600, iat: now,
+  };
+  const b64 = (o) => Buffer.from(JSON.stringify(o)).toString('base64url');
+  const crypto = require('crypto');
+  const sig = crypto.createHmac('sha256', JWT_SECRET)
+    .update(b64(header) + '.' + b64(payload)).digest('base64url');
+  return b64(header) + '.' + b64(payload) + '.' + sig;
+}
+
+(async () => {
+  const browser = await chromium.launch();
+  const ctx = await browser.newContext();
+  const page = await ctx.newPage();
+
+  let docLoads = [];
+  page.on('framenavigated', (f) => {
+    if (f === page.mainFrame()) {
+      docLoads.push(f.url());
+    }
+  });
+  page.on('console', (m) => {
+    const t = m.text();
+    if (/reload|SW_UPDATED|AppInit/i.test(t)) console.log('[console]', t);
+  });
+
+  await page.addInitScript((token) => {
+    localStorage.setItem('pos_token', token);
+    localStorage.setItem('pos_employee', JSON.stringify({ id: 1, name: 'Test Owner', role: 'owner' }));
+    localStorage.setItem('pos_tenant_id', '45');
+    document.cookie = 'pos_role=owner; path=/pos; SameSite=Lax';
+  }, makeToken());
+
+  // 1. Load dashboard
+  docLoads = [];
+  await page.goto('http://localhost:5001/pos/dashboard', { waitUntil: 'load' });
+  await page.waitForTimeout(2500);
+  console.log('LOAD /pos/dashboard → cargas de documento:', docLoads.length, docLoads);
+
+  // 2. Click sidebar link to Inventory (change tab)
+  docLoads = [];
+  const link = page.locator('a.nav-item[href="/pos/inventory"]').first();
+  await link.click({ timeout: 5000 }).catch((e) => console.log('click err:', e.message));
+  await page.waitForTimeout(3000);
+  console.log('CLICK a /pos/inventory → cargas de documento:', docLoads.length, docLoads);
+  console.log('URL final:', page.url());
+
+  await browser.close();
+})();