feat: Implement fixed sale price functionality for items

- Added a toggle for fixed sale price vs stock value in the item creation form.
- Introduced validation to ensure all variants have a price greater than 0 when fixed price mode is selected.
- Updated the item model to include a nullable salePrice field, which is used for sales only and does not affect GRN/FIFO/ledger.
- Enhanced the GRN page to allow off-PO items and included a refresh button to update the item list without reloading the page.
- Updated documentation to reflect changes in item pricing and GRN handling.

Backend/ERPCore/Controllers/PurchaseOrdersController.cs

@@ -57,6 +57,25 @@ public sealed class PurchaseOrdersController : ApiControllerBase
         return Ok(result.Value);
     }
 
+    /// <summary>Submit a Draft PO (Draft → Approved). 409 PO_NOT_EDITABLE if not Draft.</summary>
+    [HttpPost("{poId:int}/submit")]
+    [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]
+    [ProducesResponseType(StatusCodes.Status404NotFound)]
+    [ProducesResponseType(StatusCodes.Status409Conflict)]
+    public async Task<ActionResult<PurchaseOrderDto>> Submit(int poId, CancellationToken ct)
+        => Ok(await _pos.SubmitAsync(poId, ct));
+
+    /// <summary>Delete a PO — permitted only while Draft (409 PO_NOT_EDITABLE otherwise).</summary>
+    [HttpDelete("{poId:int}")]
+    [ProducesResponseType(StatusCodes.Status204NoContent)]
+    [ProducesResponseType(StatusCodes.Status404NotFound)]
+    [ProducesResponseType(StatusCodes.Status409Conflict)]
+    public async Task<IActionResult> Delete(int poId, CancellationToken ct)
+    {
+        await _pos.DeleteAsync(poId, ct);
+        return NoContent();
+    }
+
     /// <summary>Approve — no-op in Phase 1 (POs auto-approve); transitions PendingApproval→Approved when enabled.</summary>
     [HttpPost("{poId:int}/approve")]
     [ProducesResponseType(typeof(PurchaseOrderDto), StatusCodes.Status200OK)]

Backend/ERPCore/Domain/Entities/GrnLine.cs

@@ -3,9 +3,13 @@ using ERPCore.Domain.Enums;
 namespace ERPCore.Domain.Entities;
 
 /// <summary>
-/// GRN line (FR-GRN-04..08). <see cref="UnitCost"/> is the PO-derived cost for
-/// PO-based receipts (client cost ignored — 02-SECURITY C.3) or the entered cost
-/// for direct receipts. <see cref="ReceivedValue"/> = qty × unitCost.
+/// GRN line (FR-GRN-04..08). <see cref="UnitCost"/> is the gross cost received at:
+/// entered on the line, defaulting to the PO price when omitted (a per-receipt price
+/// override is now permitted — see docs/02-SECURITY C.3, revised). <see cref="PoUnitPrice"/>
+/// snapshots the PO price at receipt so the variance survives later PO edits.
+/// <see cref="NetUnitCost"/> = unitCost after trade discount — this is what the FIFO layer
+/// costs at (VAT never enters stock value; it is recoverable input tax).
+/// <see cref="ReceivedValue"/> = qty × netUnitCost (after discount, before VAT).
 /// <see cref="HoldStatus"/> gates issuability. Model: docs/10 Part C.3.
 /// </summary>
 public class GrnLine
@@ -31,7 +35,30 @@ public class GrnLine
     public Batch? Batch { get; set; }
 
     public decimal Qty { get; set; }
+
+    /// <summary>Gross unit cost received at (entered, or PO price when omitted).</summary>
     public decimal UnitCost { get; set; }
+
+    /// <summary>Snapshot of the PO line price at receipt; null for direct receipts.</summary>
+    public decimal? PoUnitPrice { get; set; }
+
+    /// <summary>Trade discount percentage (0–100), entered.</summary>
+    public decimal DiscountPct { get; set; }
+
+    /// <summary>UnitCost × (1 − DiscountPct/100) — the inventory (FIFO layer) cost.</summary>
+    public decimal NetUnitCost { get; set; }
+
+    /// <summary>VAT percentage (0–100), entered. Recoverable — does not affect stock value.</summary>
+    public decimal VatPct { get; set; }
+
+    /// <summary>Qty × NetUnitCost × VatPct/100.</summary>
+    public decimal VatAmount { get; set; }
+
+    /// <summary>Qty × NetUnitCost (after discount, before VAT).</summary>
     public decimal ReceivedValue { get; set; }
+
+    /// <summary>Qty × NetUnitCost + VatAmount — payable to the vendor.</summary>
+    public decimal LineTotal { get; set; }
+
     public HoldStatus HoldStatus { get; set; } = HoldStatus.Available;
 }

Backend/ERPCore/Domain/Entities/Item.cs

@@ -33,6 +33,14 @@ public class Item
     public StockNature StockNature { get; set; }
     public TrackingMode TrackingMode { get; set; }
     public string? TaxClass { get; set; }
+
+    /// <summary>
+    /// Optional fixed selling price used by Sales only. <c>null</c> means "use stock value"
+    /// (the item is sold at its FIFO stock cost at sale time); a value is the fixed sale price.
+    /// Never enters costing/GRN/FIFO (docs/10 Part C.1, C.9).
+    /// </summary>
+    public decimal? SalePrice { get; set; }
+
     public EntityStatus Status { get; set; } = EntityStatus.Active;
 
     public DateTime CreatedAt { get; set; }

Backend/ERPCore/Domain/Entities/PoLine.cs

@@ -22,7 +22,7 @@ public class PoLine
     public Warehouse? Warehouse { get; set; }
 
     public decimal Qty { get; set; }
-    public decimal UnitPrice { get; set; }
+    public decimal UnitPrice { get; set; }//
     public decimal Tax { get; set; }
     public decimal QtyReceived { get; set; }
 }

Backend/ERPCore/Dtos/Grn/GrnDtos.cs

@@ -7,7 +7,10 @@ namespace ERPCore.Dtos.Grn;
 
 public sealed record GrnLineDto(
     int GrnLineId, int? PoLineId, int ItemId, int UomId, int? BinId,
-    decimal Qty, decimal UnitCost, decimal ReceivedValue, HoldStatus HoldStatus, int? BatchId);
+    decimal Qty, decimal UnitCost, decimal? PoUnitPrice,
+    decimal DiscountPct, decimal NetUnitCost, decimal VatPct, decimal VatAmount,
+    decimal ReceivedValue, decimal LineTotal, decimal PriceVariance,
+    HoldStatus HoldStatus, int? BatchId);
 
 public sealed record GrnDto(
     int GrnId, string DocNo, int? PoId, int VendorId, int WarehouseId, GrnStatus Status,
@@ -44,8 +47,16 @@ public sealed class CreateGrnLineInput
     [Required] public int UomId { get; set; }
     public int? BinId { get; set; }
     [Range(0.0001, double.MaxValue)] public decimal Qty { get; set; }
-    /// <summary>Used only for direct (no-PO) receipts; ignored when <see cref="PoLineId"/> is set.</summary>
+    /// <summary>
+    /// Gross unit cost. Required for direct (no-PO) receipts. For a PO line it is an optional
+    /// per-receipt price override — when 0/omitted the PO line price is used; when supplied it
+    /// wins and a variance is recorded against the PO snapshot (docs/02-SECURITY C.3, revised).
+    /// </summary>
     [Range(0, double.MaxValue)] public decimal UnitCost { get; set; }
+    /// <summary>Trade discount percentage (0–100). Reduces the inventory cost.</summary>
+    [Range(0, 100)] public decimal DiscountPct { get; set; }
+    /// <summary>VAT percentage (0–100). Recoverable — does not affect stock value.</summary>
+    [Range(0, 100)] public decimal VatPct { get; set; }
     [EnumDataType(typeof(HoldStatus))] public HoldStatus HoldStatus { get; set; } = HoldStatus.Available;
     public BatchInput? Batch { get; set; }
 }

Backend/ERPCore/Dtos/Items/ItemDtos.cs

@@ -9,7 +9,7 @@ namespace ERPCore.Dtos.Items;
 public sealed record ItemListItemDto(
     int ItemId, string Sku, string Name, int CategoryId, int? SubCategoryId, int? BrandId,
     int BaseUomId, int? DefaultVendorId, StockNature StockNature, TrackingMode TrackingMode,
-    string? TaxClass, EntityStatus Status);
+    string? TaxClass, decimal? SalePrice, EntityStatus Status);
 
 /// <summary>A single per-warehouse reorder policy row.</summary>
 public sealed record ItemReorderDto(int WarehouseId, decimal ReorderPoint, decimal ReorderQty);
@@ -27,7 +27,7 @@ public sealed record ItemDetailDto(
     int ItemId, string Sku, string Name, string? Description, int CategoryId,
     int? SubCategoryId, int? BrandId, int BaseUomId, int? DefaultVendorId,
     StockNature StockNature, TrackingMode TrackingMode,
-    string? TaxClass, EntityStatus Status, IReadOnlyList<ItemReorderDto> Reorder,
+    string? TaxClass, decimal? SalePrice, EntityStatus Status, IReadOnlyList<ItemReorderDto> Reorder,
     IReadOnlyList<UomConversionDto> Conversions,
     DateTime CreatedAt, DateTime? UpdatedAt);
 
@@ -62,6 +62,8 @@ public sealed class CreateItemRequest
     [Required, EnumDataType(typeof(StockNature))] public StockNature StockNature { get; set; }
     [EnumDataType(typeof(TrackingMode))] public TrackingMode TrackingMode { get; set; } = TrackingMode.None;
     [StringLength(20)] public string? TaxClass { get; set; }
+    /// <summary>Optional fixed sale price (Sales only). Null ⇒ sell at stock/FIFO value.</summary>
+    [Range(0, double.MaxValue)] public decimal? SalePrice { get; set; }
 }
 
 public sealed class UpdateItemRequest
@@ -79,6 +81,8 @@ public sealed class UpdateItemRequest
     [Required, EnumDataType(typeof(StockNature))] public StockNature StockNature { get; set; }
     [EnumDataType(typeof(TrackingMode))] public TrackingMode TrackingMode { get; set; } = TrackingMode.None;
     [StringLength(20)] public string? TaxClass { get; set; }
+    /// <summary>Optional fixed sale price (Sales only). Null ⇒ sell at stock/FIFO value.</summary>
+    [Range(0, double.MaxValue)] public decimal? SalePrice { get; set; }
 }
 
 public sealed class UpdateItemStatusRequest

Backend/ERPCore/Dtos/Procurement/PurchaseOrderDtos.cs

@@ -37,6 +37,13 @@ public sealed class CreatePurchaseOrderRequest
     [Required] public int VendorId { get; set; }
     public int? RequisitionId { get; set; }
     [Required, MinLength(1)] public List<CreatePoLineInput> Lines { get; set; } = new();
+
+    /// <summary>
+    /// When true the PO is created in <c>Draft</c> (editable/deletable, not yet issued).
+    /// When false (default) it auto-approves on creation, preserving the Requisition→PO
+    /// and RFQ→PO flows unchanged (docs/11 §3.3).
+    /// </summary>
+    public bool SaveAsDraft { get; set; }
 }
 
 public sealed class UpdatePurchaseOrderRequest

Backend/ERPCore/Infra/Persistence/Configurations/GrnConfiguration.cs

@@ -37,7 +37,13 @@ public sealed class GrnLineConfiguration : IEntityTypeConfiguration<GrnLine>
 
         builder.Property(l => l.Qty).HasPrecision(18, 4);
         builder.Property(l => l.UnitCost).HasPrecision(18, 6);
+        builder.Property(l => l.PoUnitPrice).HasPrecision(18, 6);
+        builder.Property(l => l.DiscountPct).HasPrecision(9, 4);
+        builder.Property(l => l.NetUnitCost).HasPrecision(18, 6);
+        builder.Property(l => l.VatPct).HasPrecision(9, 4);
+        builder.Property(l => l.VatAmount).HasPrecision(18, 4);
         builder.Property(l => l.ReceivedValue).HasPrecision(18, 4);
+        builder.Property(l => l.LineTotal).HasPrecision(18, 4);
         builder.Property(l => l.HoldStatus).HasConversion<string>().HasMaxLength(20).IsRequired();
 
         builder.HasOne(l => l.Grn).WithMany(g => g.Lines).HasForeignKey(l => l.GrnId).OnDelete(DeleteBehavior.Cascade);

Backend/ERPCore/Infra/Persistence/Configurations/ItemConfiguration.cs

@@ -19,6 +19,9 @@ public sealed class ItemConfiguration : IEntityTypeConfiguration<Item>
         builder.Property(i => i.Description).HasMaxLength(1000);
         builder.Property(i => i.TaxClass).HasMaxLength(20);
 
+        // Sales-only fixed selling price; nullable (null ⇒ sell at stock/FIFO value).
+        builder.Property(i => i.SalePrice).HasPrecision(18, 4);
+
         builder.Property(i => i.StockNature)
             .HasConversion<string>().HasMaxLength(20).IsRequired();
         builder.Property(i => i.TrackingMode)

Backend/ERPCore/Infra/Persistence/Configurations/PermissionConfiguration.cs

@@ -41,7 +41,11 @@ public sealed class PermissionConfiguration : IEntityTypeConfiguration<Permissio
             new Permission { PermissionId = 15, Code = "NAV:products.uom", SubNavItemId = 5 },
             new Permission { PermissionId = 16, Code = "NAV:products.configuration", SubNavItemId = 6 },
             new Permission { PermissionId = 17, Code = "NAV:settings.roles", SubNavItemId = 7 },
-            new Permission { PermissionId = 18, Code = "NAV:settings.users", SubNavItemId = 8 }
+            new Permission { PermissionId = 18, Code = "NAV:settings.users", SubNavItemId = 8 },
+            new Permission { PermissionId = 19, Code = "NAV:procurement.requisitions", SubNavItemId = 9 },
+            new Permission { PermissionId = 20, Code = "NAV:procurement.rfqs", SubNavItemId = 10 },
+            new Permission { PermissionId = 21, Code = "NAV:procurement.purchase-orders", SubNavItemId = 11 },
+            new Permission { PermissionId = 22, Code = "NAV:procurement.purchase-returns", SubNavItemId = 12 }
         );
     }
 }

Backend/ERPCore/Infra/Persistence/Configurations/SubNavItemConfiguration.cs

@@ -32,7 +32,12 @@ public sealed class SubNavItemConfiguration : IEntityTypeConfiguration<SubNavIte
             new SubNavItem { SubNavItemId = 5, NavItemId = 2, Code = "products.uom", Label = "UOM", Href = "/dashboard/products/uoms", SortOrder = 5 },
             new SubNavItem { SubNavItemId = 6, NavItemId = 2, Code = "products.configuration", Label = "Configuration", Href = "/dashboard/products/settings", SortOrder = 6 },
             new SubNavItem { SubNavItemId = 7, NavItemId = 9, Code = "settings.roles", Label = "Roles", Href = "/dashboard/settings/roles", SortOrder = 1 },
-            new SubNavItem { SubNavItemId = 8, NavItemId = 9, Code = "settings.users", Label = "Users", Href = "/dashboard/settings/users", SortOrder = 2 }
+            new SubNavItem { SubNavItemId = 8, NavItemId = 9, Code = "settings.users", Label = "Users", Href = "/dashboard/settings/users", SortOrder = 2 },
+            // Procurement (NavItemId 4) children — mirror the hub page order.
+            new SubNavItem { SubNavItemId = 9, NavItemId = 4, Code = "procurement.requisitions", Label = "Requisitions", Href = "/dashboard/procurement/requisitions", SortOrder = 1 },
+            new SubNavItem { SubNavItemId = 10, NavItemId = 4, Code = "procurement.rfqs", Label = "RFQs", Href = "/dashboard/procurement/rfqs", SortOrder = 2 },
+            new SubNavItem { SubNavItemId = 11, NavItemId = 4, Code = "procurement.purchase-orders", Label = "Purchase Orders", Href = "/dashboard/procurement/purchase-orders", SortOrder = 3 },
+            new SubNavItem { SubNavItemId = 12, NavItemId = 4, Code = "procurement.purchase-returns", Label = "Purchase Returns", Href = "/dashboard/procurement/purchase-returns", SortOrder = 4 }
         );
     }
 }

Backend/ERPCore/Infra/Persistence/Migrations/ErpDbContextModelSnapshot.cs

@@ -277,6 +277,10 @@ namespace ERPCore.Infra.Persistence.Migrations
                     b.Property<int?>("BinId")
                         .HasColumnType("integer");
 
+                    b.Property<decimal>("DiscountPct")
+                        .HasPrecision(9, 4)
+                        .HasColumnType("numeric(9,4)");
+
                     b.Property<int>("GrnId")
                         .HasColumnType("integer");
 
@@ -288,9 +292,21 @@ namespace ERPCore.Infra.Persistence.Migrations
                     b.Property<int>("ItemId")
                         .HasColumnType("integer");
 
+                    b.Property<decimal>("LineTotal")
+                        .HasPrecision(18, 4)
+                        .HasColumnType("numeric(18,4)");
+
+                    b.Property<decimal>("NetUnitCost")
+                        .HasPrecision(18, 6)
+                        .HasColumnType("numeric(18,6)");
+
                     b.Property<int?>("PoLineId")
                         .HasColumnType("integer");
 
+                    b.Property<decimal?>("PoUnitPrice")
+                        .HasPrecision(18, 6)
+                        .HasColumnType("numeric(18,6)");
+
                     b.Property<decimal>("Qty")
                         .HasPrecision(18, 4)
                         .HasColumnType("numeric(18,4)");
@@ -306,6 +322,14 @@ namespace ERPCore.Infra.Persistence.Migrations
                     b.Property<int>("UomId")
                         .HasColumnType("integer");
 
+                    b.Property<decimal>("VatAmount")
+                        .HasPrecision(18, 4)
+                        .HasColumnType("numeric(18,4)");
+
+                    b.Property<decimal>("VatPct")
+                        .HasPrecision(9, 4)
+                        .HasColumnType("numeric(9,4)");
+
                     b.HasKey("GrnLineId");
 
                     b.HasIndex("BatchId");
@@ -361,6 +385,10 @@ namespace ERPCore.Infra.Persistence.Migrations
                         .HasColumnType("xid")
                         .HasColumnName("xmin");
 
+                    b.Property<decimal?>("SalePrice")
+                        .HasPrecision(18, 4)
+                        .HasColumnType("numeric(18,4)");
+
                     b.Property<string>("Sku")
                         .IsRequired()
                         .HasMaxLength(50)
@@ -828,6 +856,30 @@ namespace ERPCore.Infra.Persistence.Migrations
                             PermissionId = 18,
                             Code = "NAV:settings.users",
                             SubNavItemId = 8
+                        },
+                        new
+                        {
+                            PermissionId = 19,
+                            Code = "NAV:procurement.requisitions",
+                            SubNavItemId = 9
+                        },
+                        new
+                        {
+                            PermissionId = 20,
+                            Code = "NAV:procurement.rfqs",
+                            SubNavItemId = 10
+                        },
+                        new
+                        {
+                            PermissionId = 21,
+                            Code = "NAV:procurement.purchase-orders",
+                            SubNavItemId = 11
+                        },
+                        new
+                        {
+                            PermissionId = 22,
+                            Code = "NAV:procurement.purchase-returns",
+                            SubNavItemId = 12
                         });
                 });
 
@@ -1916,6 +1968,46 @@ namespace ERPCore.Infra.Persistence.Migrations
                             NavItemId = 9,
                             SortOrder = 2,
                             Status = "Active"
+                        },
+                        new
+                        {
+                            SubNavItemId = 9,
+                            Code = "procurement.requisitions",
+                            Href = "/dashboard/procurement/requisitions",
+                            Label = "Requisitions",
+                            NavItemId = 4,
+                            SortOrder = 1,
+                            Status = "Active"
+                        },
+                        new
+                        {
+                            SubNavItemId = 10,
+                            Code = "procurement.rfqs",
+                            Href = "/dashboard/procurement/rfqs",
+                            Label = "RFQs",
+                            NavItemId = 4,
+                            SortOrder = 2,
+                            Status = "Active"
+                        },
+                        new
+                        {
+                            SubNavItemId = 11,
+                            Code = "procurement.purchase-orders",
+                            Href = "/dashboard/procurement/purchase-orders",
+                            Label = "Purchase Orders",
+                            NavItemId = 4,
+                            SortOrder = 3,
+                            Status = "Active"
+                        },
+                        new
+                        {
+                            SubNavItemId = 12,
+                            Code = "procurement.purchase-returns",
+                            Href = "/dashboard/procurement/purchase-returns",
+                            Label = "Purchase Returns",
+                            NavItemId = 4,
+                            SortOrder = 4,
+                            Status = "Active"
                         });
                 });
 

Backend/ERPCore/Services/GrnService.cs

@@ -138,8 +138,11 @@ public sealed class GrnService : IGrnService
             if (input.BinId is not null && !await _bins.Query().AnyAsync(b => b.BinId == input.BinId && b.WarehouseId == request.WarehouseId, ct))
                 throw new DomainException(ErrorCodes.Validation, $"Bin {input.BinId} is not in warehouse {request.WarehouseId}.", 422);
 
-            // Cost: PO-derived for PO lines (client cost ignored, C.3); entered for direct.
+            // Cost: for a PO line, the PO price is used unless an override is entered (then it
+            // wins and a variance is recorded against the PO snapshot — docs/02-SECURITY C.3,
+            // revised). Direct receipts always use the entered cost.
             decimal unitCost;
+            decimal? poUnitPrice = null;
             if (input.PoLineId is not null)
             {
                 var poLine = po?.Lines.FirstOrDefault(l => l.PoLineId == input.PoLineId)
@@ -152,13 +155,19 @@ public sealed class GrnService : IGrnService
                     throw new DomainException(ErrorCodes.OverReceiptTolerance,
                         $"Receiving {input.Qty} exceeds the open quantity {openQty} on PO line {input.PoLineId}.", 422);
 
-                unitCost = poLine.UnitPrice;
+                poUnitPrice = poLine.UnitPrice;
+                unitCost = input.UnitCost > 0 ? input.UnitCost : poLine.UnitPrice;
             }
             else
             {
                 unitCost = input.UnitCost;
             }
 
+            // Derived figures are always computed server-side, never accepted from the client.
+            var netUnitCost = Math.Round(unitCost * (1 - input.DiscountPct / 100m), 6, MidpointRounding.AwayFromZero);
+            var receivedValue = Math.Round(input.Qty * netUnitCost, 4, MidpointRounding.AwayFromZero);
+            var vatAmount = Math.Round(receivedValue * input.VatPct / 100m, 4, MidpointRounding.AwayFromZero);
+
             var batch = await ResolveBatchAsync(item, input.Batch, batchCache, ct);
 
             lines.Add(new GrnLine
@@ -170,7 +179,13 @@ public sealed class GrnService : IGrnService
                 Batch = batch, // navigation so EF fixes up BatchId once the batch is inserted
                 Qty = input.Qty,
                 UnitCost = unitCost,
-                ReceivedValue = Math.Round(input.Qty * unitCost, 4, MidpointRounding.AwayFromZero),
+                PoUnitPrice = poUnitPrice,
+                DiscountPct = input.DiscountPct,
+                NetUnitCost = netUnitCost,
+                VatPct = input.VatPct,
+                VatAmount = vatAmount,
+                ReceivedValue = receivedValue,
+                LineTotal = receivedValue + vatAmount,
                 HoldStatus = input.HoldStatus
             });
         }
@@ -220,7 +235,9 @@ public sealed class GrnService : IGrnService
             foreach (var line in grn.Lines.OrderBy(l => l.GrnLineId))
             {
                 var item = await _items.Query().AsNoTracking().FirstAsync(i => i.ItemId == line.ItemId, token);
-                var (qtyBase, unitCostBase) = await ToBaseAsync(item, line.UomId, line.Qty, line.UnitCost, token);
+                // FIFO layer costs at the after-discount net price; VAT is recoverable and never
+                // enters stock value (docs/10 FR-GRN-06, revised).
+                var (qtyBase, unitCostBase) = await ToBaseAsync(item, line.UomId, line.Qty, line.NetUnitCost, token);
 
                 var layer = await _fifo.CreateInboundLayerAsync(
                     line.ItemId, grn.WarehouseId, line.BatchId, null, line.GrnLineId,
@@ -380,5 +397,8 @@ public sealed class GrnService : IGrnService
     private static GrnDto Map(Grn g) => new(
         g.GrnId, g.DocNo, g.PoId, g.VendorId, g.WarehouseId, g.Status, g.CreatedBy, g.CreatedAt, g.PostedAt,
         g.Lines.OrderBy(l => l.GrnLineId).Select(l => new GrnLineDto(
-            l.GrnLineId, l.PoLineId, l.ItemId, l.UomId, l.BinId, l.Qty, l.UnitCost, l.ReceivedValue, l.HoldStatus, l.BatchId)).ToList());
+            l.GrnLineId, l.PoLineId, l.ItemId, l.UomId, l.BinId, l.Qty, l.UnitCost, l.PoUnitPrice,
+            l.DiscountPct, l.NetUnitCost, l.VatPct, l.VatAmount, l.ReceivedValue, l.LineTotal,
+            l.PoUnitPrice is null ? 0m : Math.Round((l.UnitCost - l.PoUnitPrice.Value) * l.Qty, 4, MidpointRounding.AwayFromZero),
+            l.HoldStatus, l.BatchId)).ToList());
 }

Backend/ERPCore/Services/Interfaces/IPurchaseOrderService.cs

@@ -16,4 +16,10 @@ public interface IPurchaseOrderService
     Task<ETagged<PurchaseOrderDto>> UpdateAsync(int poId, UpdatePurchaseOrderRequest request, uint expectedRowVersion, CancellationToken ct = default);
     Task<PurchaseOrderDto> ApproveAsync(int poId, CancellationToken ct = default);
     Task<PurchaseOrderDto> CancelAsync(int poId, string? reason, CancellationToken ct = default);
+
+    /// <summary>Submit a Draft PO (Draft → Approved). 409 PO_NOT_EDITABLE if not Draft.</summary>
+    Task<PurchaseOrderDto> SubmitAsync(int poId, CancellationToken ct = default);
+
+    /// <summary>Delete a PO — permitted only while Draft, else 409 PO_NOT_EDITABLE.</summary>
+    Task DeleteAsync(int poId, CancellationToken ct = default);
 }

Backend/ERPCore/Services/ItemService.cs

@@ -79,7 +79,7 @@ public sealed class ItemService : IItemService
             .Select(i => new ItemListItemDto(
                 i.ItemId, i.Sku, i.Name, i.CategoryId, i.SubCategoryId, i.BrandId,
                 i.BaseUomId, i.DefaultVendorId,
-                i.StockNature, i.TrackingMode, i.TaxClass, i.Status))
+                i.StockNature, i.TrackingMode, i.TaxClass, i.SalePrice, i.Status))
             .ToListAsync(ct);
 
         return PagedResponse<ItemListItemDto>.Create(rows, query.Page, query.PageSize, total);
@@ -117,6 +117,7 @@ public sealed class ItemService : IItemService
             StockNature = request.StockNature,
             TrackingMode = request.TrackingMode,
             TaxClass = request.TaxClass,
+            SalePrice = request.SalePrice,
             Status = EntityStatus.Active,
             CreatedAt = DateTime.UtcNow
         };
@@ -158,6 +159,7 @@ public sealed class ItemService : IItemService
         item.StockNature = request.StockNature;
         item.TrackingMode = request.TrackingMode;
         item.TaxClass = request.TaxClass;
+        item.SalePrice = request.SalePrice;
         item.UpdatedAt = DateTime.UtcNow;
 
         await SaveGuardingConcurrencyAsync(ct);
@@ -348,7 +350,7 @@ public sealed class ItemService : IItemService
     private static ItemDetailDto ToDetail(Item i) => new(
         i.ItemId, i.Sku, i.Name, i.Description, i.CategoryId, i.SubCategoryId, i.BrandId,
         i.BaseUomId, i.DefaultVendorId,
-        i.StockNature, i.TrackingMode, i.TaxClass, i.Status,
+        i.StockNature, i.TrackingMode, i.TaxClass, i.SalePrice, i.Status,
         i.ReorderSettings
             .OrderBy(r => r.WarehouseId)
             .Select(r => new ItemReorderDto(r.WarehouseId, r.ReorderPoint, r.ReorderQty))

Backend/ERPCore/Services/PurchaseOrderService.cs

@@ -92,9 +92,10 @@ public sealed class PurchaseOrderService : IPurchaseOrderService
                 DocNo = docNo,
                 VendorId = request.VendorId,
                 RequisitionId = request.RequisitionId,
-                // Phase 1: approvalRequired defaults off → auto-approved on creation (FR-PROC-04).
+                // Phase 1: approvalRequired defaults off → auto-approved on creation (FR-PROC-04),
+                // unless the caller explicitly saves a Draft (editable/deletable until submitted).
                 ApprovalRequired = false,
-                Status = PurchaseOrderStatus.Approved,
+                Status = request.SaveAsDraft ? PurchaseOrderStatus.Draft : PurchaseOrderStatus.Approved,
                 CreatedBy = actor,
                 CreatedAt = DateTime.UtcNow,
                 Lines = request.Lines.Select(ToLine).ToList()
@@ -182,8 +183,41 @@ public sealed class PurchaseOrderService : IPurchaseOrderService
         return Map(po);
     }
 
-    private static bool IsEditable(PurchaseOrderStatus status) => status is not (
-        PurchaseOrderStatus.FullyReceived or PurchaseOrderStatus.Closed or PurchaseOrderStatus.Cancelled);
+    public async Task<PurchaseOrderDto> SubmitAsync(int poId, CancellationToken ct = default)
+    {
+        var po = await _pos.Query()
+            .Include(p => p.Lines)
+            .FirstOrDefaultAsync(p => p.PoId == poId, ct)
+            ?? throw new NotFoundException($"Purchase order {poId} was not found.");
+
+        if (po.Status != PurchaseOrderStatus.Draft)
+            throw new DomainException(ErrorCodes.PoNotEditable, $"Purchase order {poId} is {po.Status} and cannot be submitted.", 409);
+
+        // Phase 1: no value gate, so a submitted draft goes straight to Approved (FR-PROC-04).
+        po.Status = PurchaseOrderStatus.Approved;
+        po.UpdatedAt = DateTime.UtcNow;
+        await _uow.SaveChangesAsync(ct);
+
+        return Map(po);
+    }
+
+    public async Task DeleteAsync(int poId, CancellationToken ct = default)
+    {
+        var po = await _pos.Query()
+            .Include(p => p.Lines)
+            .FirstOrDefaultAsync(p => p.PoId == poId, ct)
+            ?? throw new NotFoundException($"Purchase order {poId} was not found.");
+
+        if (po.Status != PurchaseOrderStatus.Draft)
+            throw new DomainException(ErrorCodes.PoNotEditable, $"Purchase order {poId} is {po.Status} and cannot be deleted; only a Draft can be deleted.", 409);
+
+        _pos.Remove(po);
+        await _uow.SaveChangesAsync(ct);
+    }
+
+    // FR-PROC-05 (revised): a PO is editable/deletable only while Draft. Submitting locks it.
+    // Supersedes Phase-1 Option B "freely editable while open" — see docs/10 FR-PROC-05.
+    private static bool IsEditable(PurchaseOrderStatus status) => status is PurchaseOrderStatus.Draft;
 
     private static PoLine ToLine(CreatePoLineInput l) => new()
     {

Backend/ERPCore/Services/RoleService.cs

@@ -187,8 +187,12 @@ public sealed class RoleService : IRoleService
         if (string.IsNullOrWhiteSpace(roleCode))
             return new MeResponseDto(null, null, Array.Empty<string>());
 
+        // AuthHex mints the RoleCode claim independently of ERPCore's stored casing
+        // (e.g. token "ADMIN" vs seeded "Admin"), so match case-insensitively — an
+        // identity code differing only by case must not lock the user out of the nav.
+        var normalized = roleCode.Trim();
         var role = await _roles.Query().AsNoTracking()
-            .FirstOrDefaultAsync(r => r.Code == roleCode, ct);
+            .FirstOrDefaultAsync(r => r.Code.ToLower() == normalized.ToLower(), ct);
         if (role is null)
             return new MeResponseDto(roleCode, null, Array.Empty<string>());
 

Backend/PROGRESS.md

@@ -27,6 +27,7 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 - [x] Item Type master (FR-MD-10) — CRUD + status + ETag; **unreferenced by design**, feeds the builder dropdown only
 - [x] SubCategory (FR-MD-04) — nested list/create under a category, `PUT`/`PATCH status` by id; `Item.subCategoryId` nullable FK, validated to belong to `categoryId`
 - [x] Product Configuration (FR-MD-11) — singleton `GET`/`PUT /product-config`; `CONFIG_DISABLED` gating on item writes
+- [x] Item **sale price** (FR-MD-01, 2026-07-22) — nullable `Item.SalePrice` (`numeric(18,4)`); on all Item DTOs (list/detail/create/update), validated `>= 0`. **Sales-only** — never enters GRN/FIFO/ledger. `null` ⇒ sell at stock value. Migration `AddItemSalePrice`. See the 2026-07-22 Done entry.
 
 > ### 2026-07-16 — Brands, Subcategories, Item Types, Product Config (migration #2)
 > Makes real three concepts the frontend had been faking on mock data (`Frontend/erp-system/lib/api/mock-data.ts`), per docs/10 §B.3.1 FR-MD-09/10/11 and docs/11 §2.3/2.6/2.7/2.8.
@@ -55,7 +56,7 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 > Requisition/RFQ/PO implemented 2026-07-10. **Live smoke test PASSED** (docNo `PR/RFQ/PO-2026-#####` gap-controlled + incrementing, requestedBy/createdBy = seeded system user, RFQ comparison matrix, duplicate quotation→409, PO auto-approve + server-computed totals matching the spec example `112100/20178/132278`, edit-while-open with recomputed totals + ETag 200/412, PO_NOT_EDITABLE→409 on cancelled, cancel→200, bad reference→422). Same `[~]` reason as §1: the §6 security gate (auth + audit) is not yet wired.
 - [x] Requisition (+ lines) + submit (`POST /requisitions`, `/{id}/submit`, list, get)
 - [x] RFQ + quotations + comparison (`POST /rfqs`, `/{id}/quotations` [one per vendor], `GET /{id}/comparison` matrix)
-- [x] Purchase Order: create (auto-approve, `approvalRequired` flag), edit-while-open (If-Match), approve (no-op), cancel
+- [x] Purchase Order: create (auto-approve **or `saveAsDraft`**, `approvalRequired` flag), edit **Draft-only** (If-Match), **submit** (Draft→Approved), **delete** (Draft-only), approve (no-op), cancel — see the 2026-07-20 entry (FR-PROC-05 revised: draft-lock supersedes edit-while-open)
 - [x] Purchase Return (outbound movement, reason code) — `POST /purchase-returns` auto-posts an outbound FIFO consume via shared `StockMutator`; mandatory Return-context reason (`REASON_CODE_REQUIRED`→400, wrong context→422), references the GRN line for traceability, over-return→`409 STOCK_NEGATIVE_BLOCKED`. Verified. (Cumulative return-vs-received cap still relies on the stock-availability guard.)
 
 > **Deviation (recorded):** `VendorQuotation` is modelled as header + `VendorQuotationLine` (per-item pricing) to satisfy the API contract (docs/11 §3.2); docs/10 Part C.2's scalar `VENDOR_QUOTATION(unit_price, lead_days)` with no item ref cannot represent it. Update the ER model doc to match.
@@ -74,7 +75,8 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 
 ## 3. Goods Receipt
 > Implemented + **smoke test PASSED** 2026-07-13 (see §4 note for the shared stock verification). Same `[~]` reason as §1/§2: the §6 auth+audit gate.
-- [x] GRN create (against PO / direct), over-receipt tolerance — `unitCost` **PO-derived server-side** (client `999` verified ignored → PO price used, 02-SECURITY C.3); direct receipt requires `vendorId` + entered cost (AR-04); over-receipt → `422 OVER_RECEIPT_TOLERANCE` (verified at open-qty boundary); batch created/reused per (item, batchNo). Serial capture deferred.
+- [x] GRN create (against PO / direct), over-receipt tolerance — `unitCost` **defaults to the PO price but is now overridable per line** (variance recorded vs `poUnitPrice` snapshot — 02-SECURITY C.3 revised 2026-07-20; the old "client cost ignored" block is gone); direct receipt requires `vendorId` + entered cost (AR-04); over-receipt → `422 OVER_RECEIPT_TOLERANCE` (verified at open-qty boundary); batch created/reused per (item, batchNo). Serial capture deferred. **Discount/VAT added** — see the 2026-07-20 entry.
+- [x] **Off-PO lines on a PO-based GRN** (FR-GRN-01, 2026-07-22) — a line with `poLineId: null` on a PO-based GRN is received like a direct line (entered `unitCost`, no over-receipt check, PO balances untouched). **No code change was needed** — `GrnService.CreateAsync` already branches per-line on `input.PoLineId is not null`; documented + frontend-enabled. Same review/audit surface as AR-04 (02-SECURITY C.3).
 - [x] GRN confirm → FIFO layer + ledger + PO `qtyReceived` (single UoW txn) — verified: layers+ledger posted, running balance, PO → PartiallyReceived/FullyReceived, UOM→base conversion (10 Box-12 → 120 base @10). **Idempotent** re-confirm verified (no double-post). Note: `Idempotency-Key` accepted but idempotency is resource-state based (already-Confirmed replays existing result); a keyed idempotency store is deferred.
 - [x] Inspection hold release / reject — Release fully verified (OnHold excluded from `available`, then released). Reject removes on-hand + posts a reversing ledger entry; formal link to a Purchase Return is deferred (§3.4).
 
@@ -111,6 +113,20 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 ## Done
 <!-- move [x] items here with date + note if the active list grows long -->
 
+### 2026-07-22 — Item fixed sale price + GRN off-PO items (migration `AddItemSalePrice`)
+- **Item sale price (FR-MD-01).** New nullable `Item.SalePrice` (`numeric(18,4)`, `ItemConfiguration.HasPrecision(18,4)`), threaded through `ItemListItemDto`/`ItemDetailDto`/`CreateItemRequest`/`UpdateItemRequest` (`[Range(0, …)]`) and mapped in `ItemService` (create/update/`ToDetail`/list projection). **Sales-only** — it never touches `GrnService`, FIFO, `StockLayer`, or the ledger, so receipt/costing behaviour is byte-for-byte unchanged. `null` ⇒ "use stock value"; the fixed-vs-stock choice is a frontend toggle, not a server field (no `price_mode` enum). docs/10 C.1/C.9 + decision #14, docs/11 §2.1, 02-SECURITY C.1.
+- **GRN off-PO items (FR-GRN-01).** A PO-based GRN may now carry lines with `poLineId: null` (item not on the PO). **No backend change** — `GrnService.CreateAsync` already routed such lines through the direct-receipt path (entered cost, no over-receipt check, no PO-balance update). Documented as intended behaviour; the frontend now exposes it. docs/10 FR-GRN-01/C.3 (`po_line_id` nullable) + decision #15, docs/11 §4.1, 02-SECURITY C.3.
+- **Migration** `AddItemSalePrice` — single nullable column add; no backfill (`Down()` drops it). **Applied** to the local DB (`dotnet ef database update` → Done).
+- **Verified:** `dotnet build` clean (compile succeeded; the only earlier failure was the running dev exe holding a file lock, resolved by stopping it). Migration Up applied. Frontend `tsc --noEmit` clean. End-to-end runtime smoke (Swagger/UI) still to be run by the user.
+- **PO draft lifecycle (FR-PROC-05 revised).** `CreatePurchaseOrderRequest.SaveAsDraft` (default `false` → auto-approve unchanged; `true` → `Draft`). New `POST /purchase-orders/{id}/submit` (Draft→Approved, else `409 PO_NOT_EDITABLE`) and `DELETE /purchase-orders/{id}` (Draft-only, else 409). `IsEditable` narrowed from "not FullyReceived/Closed/Cancelled" to **`Draft` only** — so `PUT` now 409s on any submitted PO. **Option B ("freely edit while open") is superseded**; docs/10 FR-PROC-05, docs/11 §3.3 updated. ⚠️ **Every pre-existing PO is `Approved` and therefore now uneditable/undeletable** — intended, not a regression. No schema change (reuses the existing `Draft` enum value).
+- **GRN discount + VAT + price override.** `GrnLine` gained `PoUnitPrice`(nullable snapshot), `DiscountPct`, `NetUnitCost`, `VatPct`, `VatAmount`, `LineTotal`. All derived figures **server-computed**, never client-supplied. FIFO layer + ledger now cost at **`NetUnitCost`** (after discount) — VAT is recoverable and never enters stock value (docs/10 FR-GRN-06 revised). For a PO line, `unitCost` defaults to the PO price but an entered override wins and a **variance** is recorded against `PoUnitPrice` (02-SECURITY C.3 revised — the "client cost ignored, decision locked" control is deliberately loosened; the variance trail + audit log are the compensating control). Multi-GRN-per-PO at differing prices (the 20/50/30 case) already worked via `openQty`/`QtyReceived` and is untouched.
+- **Migration** `AddGrnPricingAndPoDraft` — hand-added a data backfill (`UPDATE grn_lines SET NetUnitCost = UnitCost, LineTotal = ReceivedValue`) so existing GRN lines stay consistent with their already-posted FIFO layers; `PoUnitPrice` left NULL for historical rows (no retroactive variance). `Down()` drops the six columns cleanly.
+- **Verified:** `dotnet build` clean (0/0); migration **Up and Down** exercised against the live DB (rollback to `AddRolesNavPermissions` then re-apply — both `Done`). **Runtime end-to-end PASSED — 22/22 assertions** (Node script, register→cookie session): PO draft→edit→submit→edit/delete-locked (409), draft delete (204→404), plain create still auto-approves; **costing proof** (100 @10, 10% disc, 18% VAT → net 9.00, receivedValue 900, VAT 162, lineTotal 1062, **FIFO layer @9.00, valuation 900 — VAT absent from stock**); multi-GRN 20@10/50@11/30@12 → variances +50/+60, PO FullyReceived, blended valuation 2010.
+
+### 2026-07-20 (2) — Procurement sidebar submenu (migration `AddProcurementSubNav`)
+- The sidebar submenu is driven by seeded `SubNavItem` rows + `GET /auth/me` navCodes; only Products/Settings had children, so **Purchase Orders had no sidebar section**. Added 4 `SubNavItem`s (ids 9–12, `NavItemId 4`) + 4 `Permission`s (ids 19–22) for Requisitions/RFQs/Purchase Orders/Purchase Returns via `AddProcurementSubNav`. The migration also grants the 4 to any role already holding the parent `NAV:procurement` (raw SQL, `ON CONFLICT DO NOTHING`); `Down()` removes the grants then the rows.
+- **Found:** the `Admin` role (`RoleId 2`) was never granted `NAV:procurement` at all (nor Vendors), so its whole Procurement branch was hidden — granted the parent + 4 children directly. **Verified:** `/auth/me` for Admin returns `procurement` + all 4 children; frontend `tsc`/`eslint` clean.
+
 ### 2026-07-09 — Bootstrap verified + Master Data (§1) implemented
 - Bootstrap scaffolding confirmed against 00-CORE §5 (solution, packages, `Program.cs` wiring, UoW, generic repo, `ICurrentUser`, ProblemDetails handler). Added enum-as-string JSON (`JsonStringEnumConverter`) and registered the 5 master-data services.
 - Domain: 3 enums (`ItemType`, `TrackingMode`, `EntityStatus`) + 8 entities (Category, Uom, UomConversion, Item, ItemReorder, Vendor, Warehouse, Bin) with one `IEntityTypeConfiguration` each; FKs `Restrict` (masters deactivate, not cascade-delete), unique indexes (SKU, vendor/warehouse code, uom name, bin code per-warehouse), decimal precision, `xmin` concurrency token on Item/Vendor.

Frontend/PROGRESS.md

@@ -27,7 +27,7 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 - [~] Forgot password — change password screen — UI built (`app/login/forgot/reset`); not yet wired to API
 
 ## 2. Master Data screens
-- [~] Items (`app/dashboard/products` list + filters, `/new` create, `/[id]` full edit + ETag/If-Match with 412-conflict handling + activate/deactivate) — FR-MD-01/08. Reused the pre-existing "Products" sidebar entry/stub route rather than adding a new nav item. **2026-07-15, rebuilt twice this session — see the two same-day entries below for the full history; current state:** `/new` is now Category → Subcategory (always visible, disabled with "No subcategories" when the category has none) → Brand → a checkbox-driven **variant builder** sourced live from `variantCategoriesApi`, with no SKU/Name/Description/Default vendor/Tax class/Item type/Tracking mode/Base UOM fields left on the form at all (Item type/tracking mode/base UOM are now fixed constants — `"Stocked"`/`"None"`/`uomId 1` — baked into the submit call, not user-facing). Checking a category (Color, Size, or any custom one) reveals its value-entry UI; Color gets a native color picker + a required name field (stored internally as `"name|hex"`, decoded everywhere it's displayed/used for SKU) while every other category is free-text chips. A flat table (one column per checked category + SKU + Quantity) generalizes to any number of active categories via a cartesian-product `useMemo`, replacing the earlier hardcoded 2-column Color×Size matrix. Submitting loops `itemsApi.create()` once per combination; SKU is `<CategoryCode>-<value1Code>-<value2Code>...`; item name is `<Brand> <Category> - <value1>/<value2>...`. Added optional `brandId`/`initialQty` to `Item`/`CreateItemRequest`/`ItemListItem` (`types/master-data.ts`) — **deviation:** neither field is in the documented Item DTO (`docs/11-BACKEND-PHASE1.md` §2.1); `initialQty` is captured but not wired into the Stock Core ledger (informational only, no warehouse/GRN behind it).
+- [~] Items (`app/dashboard/products` list + filters, `/new` create, `/[id]` full edit + ETag/If-Match with 412-conflict handling + activate/deactivate) — FR-MD-01/08. **2026-07-22:** `/new` gained a **"Fixed price / Use stock value" sale-price toggle** — see the 2026-07-22 entry. Reused the pre-existing "Products" sidebar entry/stub route rather than adding a new nav item. **2026-07-15, rebuilt twice this session — see the two same-day entries below for the full history; current state:** `/new` is now Category → Subcategory (always visible, disabled with "No subcategories" when the category has none) → Brand → a checkbox-driven **variant builder** sourced live from `variantCategoriesApi`, with no SKU/Name/Description/Default vendor/Tax class/Item type/Tracking mode/Base UOM fields left on the form at all (Item type/tracking mode/base UOM are now fixed constants — `"Stocked"`/`"None"`/`uomId 1` — baked into the submit call, not user-facing). Checking a category (Color, Size, or any custom one) reveals its value-entry UI; Color gets a native color picker + a required name field (stored internally as `"name|hex"`, decoded everywhere it's displayed/used for SKU) while every other category is free-text chips. A flat table (one column per checked category + SKU + Quantity) generalizes to any number of active categories via a cartesian-product `useMemo`, replacing the earlier hardcoded 2-column Color×Size matrix. Submitting loops `itemsApi.create()` once per combination; SKU is `<CategoryCode>-<value1Code>-<value2Code>...`; item name is `<Brand> <Category> - <value1>/<value2>...`. Added optional `brandId`/`initialQty` to `Item`/`CreateItemRequest`/`ItemListItem` (`types/master-data.ts`) — **deviation:** neither field is in the documented Item DTO (`docs/11-BACKEND-PHASE1.md` §2.1); `initialQty` is captured but not wired into the Stock Core ledger (informational only, no warehouse/GRN behind it).
 - [~] UOM + conversions (`app/dashboard/products/uoms` flat list + create dialog; conversions edited inline on the Item detail page via `PUT /items/{itemId}/uom-conversions`) — FR-MD-02/03
 - [~] Categories (`app/dashboard/products/categories` indented tree view + create dialog with parent picker) — FR-MD-04. **2026-07-15:** added debounced search + Previous/Next pagination (`categoriesApi.list()` now takes `page`/`pageSize`/`q`/`sortOrder`, page size 5), matching the Vendor list's pagination pattern.
 - [~] Brands (`app/dashboard/products/brands` list + create/edit dialog + delete) — **not a documented FR/endpoint**; `lib/api/brands.ts` treats it as a standalone name-only master, same shape as Categories, since Item has no `brandId` in the doc. **2026-07-15:** added the same debounced search + pagination as Categories; `Item`/`CreateItemRequest`/`ItemListItem` gained `brandId` so the new-item variant builder (above) can attach a brand.
@@ -39,12 +39,12 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 ## 3. Procurement screens
 - [~] Requisition (`app/dashboard/procurement/requisitions` list, `/new` create, `/[id]` detail + Submit) — FR-PROC-01
 - [~] RFQ + quotations + comparison view (`.../rfqs` list, `/new` create with vendor multi-invite, `/[id]` detail: lines, comparison matrix, record-quotation form, "Create PO from vendor") — FR-PROC-02
-- [~] Purchase Order (`.../purchase-orders` list, `/new` create — auto-approved, prefillable from a Requisition or an RFQ+vendor quotation via query params — `/[id]` detail: edit-while-open with ETag/If-Match, Cancel with reason) — FR-PROC-03..07
+- [~] Purchase Order (`.../purchase-orders` list, `/new` create — **Save as draft** or **Create & submit** (auto-approve), prefillable from a Requisition or an RFQ+vendor quotation via query params — `/[id]` detail: **Draft** is editable (ETag/If-Match) with **Submit** + **Delete**; a submitted/open PO is read-only with **Cancel** (with reason)) — FR-PROC-03..07. **2026-07-20:** rewired to the draft lifecycle — `isPoEditable` is now `Draft`-only, `submit`/`remove` added to `lib/api/purchase-orders.ts`, `saveAsDraft` on the create request. See the 2026-07-20 entry.
 - [~] Purchase Return (`.../purchase-returns` list, `/new` create against a Confirmed/Closed GRN's lines) — FR-PROC-08; also reachable from a `Rejected` GRN line via a "Create Return" button on the GRN detail page
 
 ## 4. Receiving screens
 - [~] GRN list (`app/dashboard/receiving/grn/page.tsx`) — loading/empty/error states, links to detail
-- [~] GRN create (`app/dashboard/receiving/grn/new/page.tsx`) — "Against PO" (picks an Approved/PartiallyReceived PO, prefills open lines) and "Direct receipt" (vendor + manual lines) modes; per-line bin, qty, unit cost, hold status, and batch (batchNo+expiryDate) or serial-number-list capture driven by the item's `trackingMode`
+- [~] GRN create (`app/dashboard/receiving/grn/new/page.tsx`) — "Against PO" (picks an Approved/PartiallyReceived PO, prefills open lines) and "Direct receipt" (vendor + manual lines) modes; per-line bin, qty, unit cost, **discount % / VAT %** (with live after-discount/after-VAT line total + a per-row PO-price variance hint and a document total), hold status, and batch (batchNo+expiryDate) or serial-number-list capture driven by the item's `trackingMode`. **2026-07-20:** discount/VAT/variance added — see the 2026-07-20 entry. **2026-07-22:** "Add line" now works in **PO mode** (off-PO items) + **"New item"** (opens `/dashboard/products/new` in a new tab) + **refresh** icon — see the 2026-07-22 entry.
 - [~] GRN confirm (`app/dashboard/receiving/grn/[id]/page.tsx`) — renders returned `createdLayers`/`ledgerRefs`/`poStatus` as a confirmation panel (20-FRONTEND §4); sends a stable `Idempotency-Key` per detail-page session
 - [~] Inspection hold release / reject — Release/Reject buttons per on-hold line, shown once the GRN is `Confirmed`
 - Sidebar: added "Receiving" nav entry (`components/Layouts/AppSidebar.tsx`) → `/dashboard/receiving/grn`
@@ -90,6 +90,19 @@ Convention: `docs/01-DOC-GUIDE.md §6`. Update this file in the **same commit**
 ## Done
 <!-- move [x] items here with date + note if the active list grows long -->
 
+### 2026-07-22 — Item fixed sale price + GRN off-PO items / inline create
+- **Item sale-price toggle** (`app/dashboard/products/new/page.tsx`). New "Fixed price / Use stock value" segmented toggle (default **stock**). **Stock** sends `salePrice: null` on every created item. **Fixed** reveals a top "fix value" input that pre-fills a per-variant **Sale price** column (`priceFor(key) = pricesByKey[key] ?? fixValue`, so editing a row overrides only it while the rest follow the shared value); submit is blocked until **every** generated variant has a price `> 0` (`validateVariantPrices` in `lib/validations/master-data.ts`). Each variant's price rides its own `POST /items` in the existing non-transactional create loop. `types/master-data.ts`: `salePrice` added to `CreateItemRequest` (optional) and `Item`/`ItemListItem` (`number|null`).
+- **GRN off-PO items + inline create** (`app/dashboard/receiving/grn/new/page.tsx`). "Add line" is now shown in **both** PO and direct mode — an added PO-mode line has `poLineId: null` (editable item/UOM, `unitCost` required) and the server receives it as a direct line. New **"New item"** button opens `/dashboard/products/new` in a new browser tab (`window.open(..., "_blank", "noopener,noreferrer")` — the first new-tab pattern in the app), and a **refresh** icon (`refreshItems`) re-pulls `GET /items?status=Active` so the new item is selectable without reloading the in-progress GRN. Existing `validateLine` covers off-PO lines unchanged.
+- **Verified:** `tsc --noEmit` clean. Runtime browser verification (create fixed-priced variants; add an off-PO line + inline item on a PO GRN) is the next step.
+
+### 2026-07-20 — PO draft lifecycle + GRN discount/VAT/price-override (backend + frontend, same pass)
+- **PO draft lifecycle.** `lib/api/purchase-orders.ts`: `isPoEditable` narrowed to `status === "Draft"` (was the three-status exclusion); added `submit(poId)` and `remove(poId)`. `types/procurement.ts`: `saveAsDraft?` on `CreatePurchaseOrderRequest`; `UpdatePurchaseOrderRequest` now `Omit`s it. `/new`: the single "Create PO" button split into **Save as draft** / **Create & submit**. `/[id]`: **Draft** shows the editable line grid + **Submit** + **Delete draft**; an issued-but-open PO (`Approved`/`PartiallyReceived`) is read-only with **Cancel PO** (with reason, disabled once receipts exist); closed/cancelled are terminal. The old Cancel button was gated on `isPoEditable` — that would have shown Cancel only for Draft, so the affordances were re-split into `editable` (Draft) vs `cancellable` (Approved/PartiallyReceived).
+- **GRN discount/VAT/variance.** `types/grn.ts`: `discountPct`/`vatPct` on `CreateGrnLineInput`; `poUnitPrice`/`discountPct`/`netUnitCost`/`vatPct`/`vatAmount`/`lineTotal`/`priceVariance` on `GrnLine`. `/new`: per-line Disc %/VAT % inputs, a client mirror of the server arithmetic (`computeLine`, display-only — server stays authoritative) driving a live Line total + document total, and a PO-price variance hint when the entered unit cost differs from the prefilled PO price. `/[id]`: renders the full cost breakdown (unit cost + variance, disc %, net cost, received value, VAT, line total) and a stock-value/VAT/document-total footer. `lib/validations/grn.ts`: 0–100 range checks on the two percentages.
+- **Deliberately not touched:** the item picker already showed `sku — name` (the request's stated need); multi-GRN-per-PO and adding a non-PO item to a PO GRN already worked. Vendor stays PO-derived (non-selectable) for a PO-based GRN — selecting a different vendor than the PO's would be wrong.
+- **Select trigger showed the id, not the label (global fix).** Base UI's `Select.Value` renders the raw selected value unless the `Select.Root` is given an `items` map — the popup items unmount when closed, so their text isn't available to the trigger (confirmed in `@base-ui/react`'s `resolveSelectedLabel`, which `find`s `items` by value and only falls back to stringifying the value when none is supplied). Fixed once in the shared wrapper (`components/ui/select.tsx`): `Select` now walks its own `SelectItem` children and derives the `items` array automatically, so all ~60 `<SelectValue>` call sites across 26 files show the selected label without any per-site change. `tsc`/`eslint` clean; verified against Base UI's label-resolution source.
+- **Procurement sidebar submenu.** The sidebar builds submenus from backend-seeded `SubNavItem` rows filtered by `GET /auth/me`'s `navCodes`; only Products and Settings had children, so Purchase Orders had no sidebar section (only reachable via the Procurement hub card). Added a `children` array to the Procurement nav entry (`components/Layouts/AppSidebar.tsx`) — Requisitions, RFQs, Purchase Orders, Purchase Returns — matching new backend sub-nav codes. Also found the Admin role (`RoleId 2`) was never granted `NAV:procurement` at all, so the whole Procurement branch was hidden for it; granted the parent + 4 children. **Verified:** `/auth/me` for Admin now returns all five procurement codes → submenu renders. Stale PO hub-card copy ("freely editable while open") updated to the draft/submit wording.
+- **Verified:** `tsc --noEmit` clean; `eslint` unchanged from baseline (7 pre-existing `set-state-in-effect` on the PO/GRN screens before and after — 0 new issues, confirmed by stashing and re-counting). Runtime browser verification is the next step in this pass.
+
 ### 2026-07-17 — connected to the real API (mock-data.ts deleted)
 
 **The app now talks to ERPCore.** Every `lib/api/*.ts` module calls the backend; `lib/api/mock-data.ts` is gone. This is the pass the 2026-07-15 note anticipated.

Frontend/erp-system/app/dashboard/procurement/page.tsx

@@ -18,7 +18,7 @@ const areas: { title: string; description: string; href: string; icon: LucideIco
   },
   {
     title: "Purchase Orders",
-    description: "Auto-approved on creation, freely editable while open, cancellable before receipt.",
+    description: "Save as draft (editable/deletable) or submit to lock; cancel an issued PO before receipt.",
     href: "/dashboard/procurement/purchase-orders",
     icon: ShoppingCart,
   },

Frontend/erp-system/app/dashboard/procurement/purchase-orders/[id]/page.tsx

@@ -3,7 +3,7 @@
 import { useEffect, useState } from "react"
 import { useParams, useRouter } from "next/navigation"
 import Link from "next/link"
-import { AlertTriangle, ArrowLeft, Ban, Plus, Save, Trash2 } from "lucide-react"
+import { AlertTriangle, ArrowLeft, Ban, Plus, Save, Send, Trash2 } from "lucide-react"
 
 import { isPoEditable, purchaseOrdersApi } from "@/lib/api/purchase-orders"
 import { warehousesApi } from "@/lib/api/warehouses"
@@ -65,6 +65,8 @@ export default function PurchaseOrderDetailPage() {
   const [showCancelForm, setShowCancelForm] = useState(false)
   const [cancelReason, setCancelReason] = useState("")
   const [cancelling, setCancelling] = useState(false)
+  const [submitting, setSubmitting] = useState(false)
+  const [deleting, setDeleting] = useState(false)
 
   function toDraftLines(order: PurchaseOrder): DraftLine[] {
     return order.lines.map((l) => ({
@@ -185,6 +187,39 @@ export default function PurchaseOrderDetailPage() {
     }
   }
 
+  async function handleSubmitPo() {
+    if (!po) return
+    setSaveError(null)
+    setSubmitting(true)
+    try {
+      const updated = await purchaseOrdersApi.submit(po.poId)
+      setPo(updated)
+      setLines(toDraftLines(updated))
+      toast.success("Purchase order submitted", `${updated.docNo} — now ${updated.status} and locked for editing.`)
+    } catch (err) {
+      setSaveError(errorMessage(err))
+      toast.error("Could not submit purchase order", errorMessage(err))
+    } finally {
+      setSubmitting(false)
+    }
+  }
+
+  async function handleDelete() {
+    if (!po) return
+    if (!window.confirm(`Delete draft ${po.docNo}? This cannot be undone.`)) return
+    setSaveError(null)
+    setDeleting(true)
+    try {
+      await purchaseOrdersApi.remove(po.poId)
+      toast.success("Draft deleted", po.docNo)
+      router.push("/dashboard/procurement/purchase-orders")
+    } catch (err) {
+      setSaveError(errorMessage(err))
+      toast.error("Could not delete purchase order", errorMessage(err))
+      setDeleting(false)
+    }
+  }
+
   async function handleCancel() {
     if (!po) return
     if (!cancelReason.trim()) {
@@ -226,6 +261,9 @@ export default function PurchaseOrderDetailPage() {
 
   const editable = isPoEditable(po.status) && !conflict
   const hasReceipts = po.lines.some((l) => l.qtyReceived > 0)
+  // A submitted-but-still-open PO (issued to the vendor) is cancellable with a reason;
+  // a Draft is deleted instead, and closed/cancelled POs are terminal.
+  const cancellable = po.status === "Approved" || po.status === "PartiallyReceived"
 
   return (
     <div className="flex flex-col gap-6">
@@ -245,18 +283,32 @@ export default function PurchaseOrderDetailPage() {
           </div>
         </div>
 
-        {isPoEditable(po.status) && !showCancelForm && (
-          <Button
-            variant="destructive"
-            size="lg"
-            onClick={() => setShowCancelForm(true)}
-            disabled={hasReceipts}
-            title={hasReceipts ? "Cannot cancel — this PO already has receipts against it" : undefined}
-          >
-            <Ban className="size-5" />
-            Cancel PO
-          </Button>
-        )}
+        <div className="flex items-center gap-3">
+          {po.status === "Draft" && (
+            <>
+              <Button variant="outline" size="lg" onClick={handleSubmitPo} disabled={submitting || deleting}>
+                <Send className="size-5" />
+                {submitting ? "Submitting…" : "Submit"}
+              </Button>
+              <Button variant="destructive" size="lg" onClick={handleDelete} disabled={deleting || submitting}>
+                <Trash2 className="size-5" />
+                {deleting ? "Deleting…" : "Delete draft"}
+              </Button>
+            </>
+          )}
+          {cancellable && !showCancelForm && (
+            <Button
+              variant="destructive"
+              size="lg"
+              onClick={() => setShowCancelForm(true)}
+              disabled={hasReceipts}
+              title={hasReceipts ? "Cannot cancel — this PO already has receipts against it" : undefined}
+            >
+              <Ban className="size-5" />
+              Cancel PO
+            </Button>
+          )}
+        </div>
       </div>
 
       {showCancelForm && (

Frontend/erp-system/app/dashboard/procurement/purchase-orders/new/page.tsx

@@ -43,8 +43,12 @@ function newKey() {
   return `poline-${keySeq}`
 }
 
+// Unit price and tax are no longer entered at PO creation — pricing is captured at GRN
+// receipt (with discount/VAT there). They default to 0 here and stay off the form, but
+// remain on the payload because the backend line DTO still requires them; a PO prefilled
+// from an RFQ keeps its negotiated price (below).
 function emptyLine(): DraftLine {
-  return { key: newKey(), itemId: null, uomId: null, warehouseId: null, qty: "", unitPrice: "", tax: "0.18" }
+  return { key: newKey(), itemId: null, uomId: null, warehouseId: null, qty: "", unitPrice: "0", tax: "0" }
 }
 
 function NewPurchaseOrderContent() {
@@ -98,8 +102,8 @@ function NewPurchaseOrderContent() {
                 uomId: null,
                 warehouseId: null,
                 qty: String(l.qty),
-                unitPrice: "",
-                tax: "0.18",
+                unitPrice: "0",
+                tax: "0",
               })
             )
           )
@@ -124,8 +128,8 @@ function NewPurchaseOrderContent() {
                 uomId: null,
                 warehouseId: null,
                 qty: String(l.qty),
-                unitPrice: cell ? String(cell.unitPrice) : "",
-                tax: "0.18",
+                unitPrice: cell ? String(cell.unitPrice) : "0",
+                tax: "0",
               }
             })
           )
@@ -151,7 +155,7 @@ function NewPurchaseOrderContent() {
     return items?.find((i) => i.itemId === itemId) ?? null
   }
 
-  async function handleSubmit() {
+  async function handleSubmit(saveAsDraft: boolean) {
     setHeaderError(null)
     setSubmitError(null)
 
@@ -197,8 +201,12 @@ function NewPurchaseOrderContent() {
         vendorId,
         requisitionId: requisitionId ?? (rfqId ? undefined : null),
         lines: payloadLines,
+        saveAsDraft,
       })
-      toast.success("Purchase order created", `${po.docNo} — auto-approved (FR-PROC-04).`)
+      toast.success(
+        "Purchase order created",
+        saveAsDraft ? `${po.docNo} — saved as draft.` : `${po.docNo} — auto-approved (FR-PROC-04).`
+      )
       router.push(`/dashboard/procurement/purchase-orders/${po.poId}`)
     } catch (err) {
       setSubmitError(errorMessage(err))
@@ -274,8 +282,6 @@ function NewPurchaseOrderContent() {
                       <TableHead className="h-12 w-28 px-3 text-sm">UOM</TableHead>
                       <TableHead className="h-12 w-40 px-3 text-sm">Warehouse</TableHead>
                       <TableHead className="h-12 w-24 px-3 text-sm">Qty</TableHead>
-                      <TableHead className="h-12 w-28 px-3 text-sm">Unit price</TableHead>
-                      <TableHead className="h-12 w-24 px-3 text-sm">Tax</TableHead>
                       <TableHead className="h-12 w-10 px-3" />
                     </TableRow>
                   </TableHeader>
@@ -348,30 +354,6 @@ function NewPurchaseOrderContent() {
                             />
                             <FieldError errors={[errors.qty ? { message: errors.qty } : undefined]} />
                           </TableCell>
-                          <TableCell className="px-3 py-3 align-top">
-                            <Input
-                              type="number"
-                              min="0"
-                              step="any"
-                              value={line.unitPrice}
-                              aria-invalid={!!errors.unitPrice}
-                              onChange={(e) => updateLine(line.key, { unitPrice: e.target.value })}
-                              className="h-11 text-base"
-                            />
-                            <FieldError errors={[errors.unitPrice ? { message: errors.unitPrice } : undefined]} />
-                          </TableCell>
-                          <TableCell className="px-3 py-3 align-top">
-                            <Input
-                              type="number"
-                              min="0"
-                              step="0.01"
-                              value={line.tax}
-                              aria-invalid={!!errors.tax}
-                              onChange={(e) => updateLine(line.key, { tax: e.target.value })}
-                              className="h-11 text-base"
-                            />
-                            <FieldError errors={[errors.tax ? { message: errors.tax } : undefined]} />
-                          </TableCell>
                           <TableCell className="px-3 py-3 align-top">
                             <Button type="button" variant="ghost" size="icon" onClick={() => removeLine(line.key)} aria-label="Remove line">
                               <Trash2 className="size-5" />
@@ -394,8 +376,11 @@ function NewPurchaseOrderContent() {
             <Link href="/dashboard/procurement/purchase-orders" className={cn(buttonVariants({ variant: "outline", size: "lg" }))}>
               Cancel
             </Link>
-            <Button size="lg" type="button" onClick={handleSubmit} disabled={submitting}>
-              {submitting ? "Creating…" : "Create PO"}
+            <Button size="lg" type="button" variant="outline" onClick={() => handleSubmit(true)} disabled={submitting}>
+              {submitting ? "Saving…" : "Save as draft"}
+            </Button>
+            <Button size="lg" type="button" onClick={() => handleSubmit(false)} disabled={submitting}>
+              {submitting ? "Creating…" : "Create & submit"}
             </Button>
           </div>
         </>

Frontend/erp-system/app/dashboard/products/new/page.tsx

@@ -13,7 +13,7 @@ import { productConfig } from "@/lib/api/product-config"
 import { uomsApi } from "@/lib/api/uoms"
 import { warehousesApi } from "@/lib/api/warehouses"
 import { errorMessage } from "@/lib/error-map"
-import { validateVariantItemForm } from "@/lib/validations/master-data"
+import { validateVariantItemForm, validateVariantPrices } from "@/lib/validations/master-data"
 import { cn } from "@/lib/utils"
 import { Brand, Category, ItemType, ProductConfig, StockNature, SubCategory } from "@/types/master-data"
 
@@ -73,10 +73,21 @@ export default function NewItemPage() {
   // submit, without having to remove and re-add the whole value that produced it.
   const [removedVariantKeys, setRemovedVariantKeys] = useState<Set<string>>(new Set())
 
+  // Sales pricing (FR-MD-01). "stock" ⇒ salePrice sent as null (sell at FIFO value);
+  // "fixed" ⇒ every variant must carry a price. `fixValue` is the shared default that
+  // pre-fills rows; a per-key entry in `pricesByKey` overrides it for that one row only.
+  const [priceMode, setPriceMode] = useState<"stock" | "fixed">("stock")
+  const [fixValue, setFixValue] = useState<string>("")
+  const [pricesByKey, setPricesByKey] = useState<Record<string, string>>({})
+  const [priceErrors, setPriceErrors] = useState<Record<string, string>>({})
+
   const [errors, setErrors] = useState<Record<string, string>>({})
   const [submitError, setSubmitError] = useState<string | null>(null)
   const [submitting, setSubmitting] = useState(false)
 
+  // A row shows its own override if set, otherwise it follows the shared fix value.
+  const priceFor = (key: string) => pricesByKey[key] ?? fixValue
+
   useEffect(() => {
     Promise.all([
       categoriesApi.list({ pageSize: 200, status: "Active" }),
@@ -190,7 +201,11 @@ export default function NewItemPage() {
     setSubmitError(null)
     const nextErrors = validateVariantItemForm({ categoryId, hasVariants: variants.length > 0 })
     setErrors(nextErrors)
-    if (Object.keys(nextErrors).length > 0) return
+    // In fixed mode, block the whole submit until every variant has a price > 0.
+    const nextPriceErrors =
+      priceMode === "fixed" ? validateVariantPrices(variants.map((v) => v.key), priceFor) : {}
+    setPriceErrors(nextPriceErrors)
+    if (Object.keys(nextErrors).length > 0 || Object.keys(nextPriceErrors).length > 0) return
     if (baseUomId === null) {
       setSubmitError("No unit of measure exists yet — create one under Products → UOM before adding items.")
       return
@@ -212,6 +227,7 @@ export default function NewItemPage() {
           baseUomId,
           stockNature,
           trackingMode: "None",
+          salePrice: priceMode === "fixed" ? Number(priceFor(variant.key)) : null,
         })
         created += 1
       }
@@ -384,6 +400,59 @@ export default function NewItemPage() {
             </div>
           </div>
 
+          {/* Sales pricing (FR-MD-01). The toggle is frontend-only: "stock" sends
+              salePrice=null (sold at FIFO value); "fixed" requires a price per variant. */}
+          <div className="flex flex-col gap-4 rounded-xl border p-5">
+            <div>
+              <h2 className="text-lg font-semibold text-foreground">Sale price</h2>
+              <p className="text-sm text-muted-foreground">
+                Choose a fixed selling price, or leave it to the item&apos;s stock value.
+              </p>
+            </div>
+
+            <div className="inline-flex w-fit rounded-lg border p-1">
+              <button
+                type="button"
+                onClick={() => setPriceMode("stock")}
+                className={cn(
+                  "rounded-md px-4 py-2 text-base font-medium transition-colors",
+                  priceMode === "stock" ? "bg-primary text-primary-foreground" : "text-muted-foreground hover:bg-muted/50",
+                )}
+              >
+                Use stock value
+              </button>
+              <button
+                type="button"
+                onClick={() => setPriceMode("fixed")}
+                className={cn(
+                  "rounded-md px-4 py-2 text-base font-medium transition-colors",
+                  priceMode === "fixed" ? "bg-primary text-primary-foreground" : "text-muted-foreground hover:bg-muted/50",
+                )}
+              >
+                Fixed price
+              </button>
+            </div>
+
+            {priceMode === "fixed" && (
+              <div className="flex max-w-xs flex-col gap-2">
+                <Label className="text-base">Fix value (applies to all variants)</Label>
+                <Input
+                  type="number"
+                  min="0"
+                  step="0.01"
+                  inputMode="decimal"
+                  value={fixValue}
+                  onChange={(e) => setFixValue(e.target.value)}
+                  placeholder="0.00"
+                  className="h-11 text-base"
+                />
+                <p className="text-sm text-muted-foreground">
+                  Edit any row below to give that variant a different price.
+                </p>
+              </div>
+            )}
+          </div>
+
           {/* itemTypesEnabled is advisory — the server cannot enforce it (items hold no
               item-type reference), so this section IS the enforcement. */}
           {config?.itemTypesEnabled && (
@@ -469,6 +538,9 @@ export default function NewItemPage() {
                         <TableHead key={cat.itemTypeId} className="h-11 px-3 text-sm text-indigo-700">{cat.name}</TableHead>
                       ))}
                       <TableHead className="h-11 px-3 text-sm text-indigo-700">SKU</TableHead>
+                      {priceMode === "fixed" && (
+                        <TableHead className="h-11 px-3 text-sm text-indigo-700">Sale price</TableHead>
+                      )}
                       {/* Quantity column removed 2026-07-17: there is no `initialQty` on the
                           Item contract and no initial-receipt flow — stock arrives via a GRN.
                           The input was informational-only under the mock and would now be a
@@ -485,6 +557,31 @@ export default function NewItemPage() {
                           </TableCell>
                         ))}
                         <TableCell className="py-2.5 pr-1 pl-3 font-medium">{variant.sku}</TableCell>
+                        {priceMode === "fixed" && (
+                          <TableCell className="px-3 py-2.5">
+                            <Input
+                              type="number"
+                              min="0"
+                              step="0.01"
+                              inputMode="decimal"
+                              value={priceFor(variant.key)}
+                              onChange={(e) => {
+                                const value = e.target.value
+                                setPricesByKey((prev) => ({ ...prev, [variant.key]: value }))
+                                setPriceErrors((prev) => {
+                                  if (!prev[variant.key]) return prev
+                                  const next = { ...prev }
+                                  delete next[variant.key]
+                                  return next
+                                })
+                              }}
+                              placeholder="0.00"
+                              aria-invalid={!!priceErrors[variant.key]}
+                              className="h-10 w-28 text-base"
+                            />
+                            <FieldError errors={[priceErrors[variant.key] ? { message: priceErrors[variant.key] } : undefined]} />
+                          </TableCell>
+                        )}
                         <TableCell className="py-2.5 pr-3 pl-0">
                           <Button
                             type="button"

Frontend/erp-system/app/dashboard/receiving/grn/[id]/page.tsx

@@ -158,6 +158,7 @@ export default function GrnDetailPage() {
         </div>
       )}
 
+      <div className="overflow-x-auto">
       <Table className="text-base">
         <TableHeader>
           <TableRow>
@@ -165,8 +166,12 @@ export default function GrnDetailPage() {
             <TableHead className="h-12 px-3 text-sm">UOM</TableHead>
             <TableHead className="h-12 px-3 text-sm">Bin</TableHead>
             <TableHead className="h-12 px-3 text-sm">Qty</TableHead>
-            <TableHead className="h-12 px-3 text-sm">Unit cost</TableHead>
-            <TableHead className="h-12 px-3 text-sm">Received value</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">Unit cost</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">Disc %</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">Net cost</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">Received value</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">VAT</TableHead>
+            <TableHead className="h-12 px-3 text-sm text-right">Line total</TableHead>
             <TableHead className="h-12 px-3 text-sm">Hold status</TableHead>
             {grn.status === "Confirmed" && <TableHead className="h-12 px-3 text-sm">Actions</TableHead>}
           </TableRow>
@@ -180,8 +185,22 @@ export default function GrnDetailPage() {
                 <TableCell className="px-3 py-3.5">{uomFor(line.uomId)}</TableCell>
                 <TableCell className="px-3 py-3.5">{binFor(line.binId)}</TableCell>
                 <TableCell className="px-3 py-3.5">{line.qty}</TableCell>
-                <TableCell className="px-3 py-3.5">{line.unitCost.toFixed(2)}</TableCell>
-                <TableCell className="px-3 py-3.5">{line.receivedValue.toFixed(2)}</TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums">
+                  {line.unitCost.toFixed(2)}
+                  {line.poUnitPrice !== null && line.priceVariance !== 0 && (
+                    <span className="block text-xs text-warning">
+                      PO {line.poUnitPrice.toFixed(2)} · var {line.priceVariance > 0 ? "+" : ""}{line.priceVariance.toFixed(2)}
+                    </span>
+                  )}
+                </TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums">{line.discountPct.toFixed(2)}</TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums">{line.netUnitCost.toFixed(2)}</TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums">{line.receivedValue.toFixed(2)}</TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums">
+                  {line.vatAmount.toFixed(2)}
+                  <span className="block text-xs text-muted-foreground">{line.vatPct.toFixed(2)}%</span>
+                </TableCell>
+                <TableCell className="px-3 py-3.5 text-right tabular-nums font-medium">{line.lineTotal.toFixed(2)}</TableCell>
                 <TableCell className="px-3 py-3.5">
                   <HoldStatusBadge status={line.holdStatus} />
                 </TableCell>
@@ -228,6 +247,22 @@ export default function GrnDetailPage() {
           })}
         </TableBody>
       </Table>
+      </div>
+
+      <div className="flex justify-end gap-8 border-t border-border pt-4 text-base">
+        <div className="flex gap-3">
+          <span className="text-muted-foreground">Stock value (excl. VAT)</span>
+          <span className="tabular-nums">{grn.lines.reduce((s, l) => s + l.receivedValue, 0).toFixed(2)}</span>
+        </div>
+        <div className="flex gap-3">
+          <span className="text-muted-foreground">VAT</span>
+          <span className="tabular-nums">{grn.lines.reduce((s, l) => s + l.vatAmount, 0).toFixed(2)}</span>
+        </div>
+        <div className="flex gap-3">
+          <span className="text-muted-foreground">Document total</span>
+          <span className="font-semibold tabular-nums">{grn.lines.reduce((s, l) => s + l.lineTotal, 0).toFixed(2)}</span>
+        </div>
+      </div>
     </div>
   )
 }

Frontend/erp-system/app/dashboard/receiving/grn/new/page.tsx

@@ -3,7 +3,7 @@
 import { useEffect, useState } from "react"
 import { useRouter } from "next/navigation"
 import Link from "next/link"
-import { ArrowLeft, Plus, Trash2 } from "lucide-react"
+import { ArrowLeft, ExternalLink, Plus, RefreshCw, Trash2 } from "lucide-react"
 
 import { grnsApi } from "@/lib/api/grns"
 import { purchaseOrdersApi } from "@/lib/api/purchase-orders"
@@ -37,12 +37,28 @@ interface DraftLine {
   binId: number | null
   qty: string
   unitCost: string
+  /** PO line price when prefilled from a PO; drives the variance hint. */
+  poUnitPrice: number | null
+  discountPct: string
+  vatPct: string
   holdStatus: HoldStatus
   batchNo: string
   expiryDate: string
   serialNumbersText: string
 }
 
+/** Mirror of the server's line arithmetic — display only (docs/20 §3, server stays authoritative). */
+function computeLine(l: DraftLine) {
+  const qty = Number(l.qty) || 0
+  const gross = Number(l.unitCost) || 0
+  const disc = Number(l.discountPct) || 0
+  const vat = Number(l.vatPct) || 0
+  const netUnitCost = gross * (1 - disc / 100)
+  const receivedValue = qty * netUnitCost
+  const vatAmount = receivedValue * (vat / 100)
+  return { netUnitCost, receivedValue, vatAmount, lineTotal: receivedValue + vatAmount }
+}
+
 let keySeq = 0
 function newKey() {
   keySeq += 1
@@ -58,6 +74,9 @@ function emptyLine(): DraftLine {
     binId: null,
     qty: "",
     unitCost: "",
+    poUnitPrice: null,
+    discountPct: "0",
+    vatPct: "0",
     holdStatus: "Available",
     batchNo: "",
     expiryDate: "",
@@ -88,6 +107,7 @@ export default function NewGrnPage() {
   const [lineErrors, setLineErrors] = useState<Record<string, Record<string, string>>>({})
   const [submitError, setSubmitError] = useState<string | null>(null)
   const [submitting, setSubmitting] = useState(false)
+  const [refreshingItems, setRefreshingItems] = useState(false)
 
   useEffect(() => {
     Promise.all([
@@ -152,6 +172,9 @@ export default function NewGrnPage() {
             binId: null,
             qty: String(l.qty - l.qtyReceived),
             unitCost: String(l.unitPrice),
+            poUnitPrice: l.unitPrice,
+            discountPct: "0",
+            vatPct: "0",
             holdStatus: "Available",
             batchNo: "",
             expiryDate: "",
@@ -166,6 +189,21 @@ export default function NewGrnPage() {
     }
   }
 
+  // Re-pull the active items list so an item created in the other tab (via "New item")
+  // becomes selectable without reloading the whole screen and losing the in-progress GRN.
+  async function refreshItems() {
+    setRefreshingItems(true)
+    try {
+      const res = await itemsApi.list({ pageSize: 200, status: "Active" })
+      setItems(res.items)
+      toast.success("Items refreshed", `${res.items.length} active item${res.items.length === 1 ? "" : "s"} loaded.`)
+    } catch (err) {
+      toast.error("Could not refresh items", errorMessage(err))
+    } finally {
+      setRefreshingItems(false)
+    }
+  }
+
   function updateLine(key: string, patch: Partial<DraftLine>) {
     setLines((prev) => prev.map((l) => (l.key === key ? { ...l, ...patch } : l)))
   }
@@ -211,6 +249,8 @@ export default function NewGrnPage() {
         uomId: line.uomId,
         qty: line.qty,
         unitCost: line.unitCost,
+        discountPct: line.discountPct,
+        vatPct: line.vatPct,
         trackingMode: itemFor(line.itemId)?.trackingMode ?? null,
         batchNo: line.batchNo,
         serialNumbersText: line.serialNumbersText,
@@ -232,6 +272,8 @@ export default function NewGrnPage() {
         binId: l.binId,
         qty: Number(l.qty),
         unitCost: Number(l.unitCost),
+        discountPct: Number(l.discountPct) || 0,
+        vatPct: Number(l.vatPct) || 0,
         holdStatus: l.holdStatus,
         batch: trackingMode === "Batch" ? { batchNo: l.batchNo.trim(), expiryDate: l.expiryDate || null } : null,
         serialNumbers: trackingMode === "Serial" ? splitSerials(l.serialNumbersText) : null,
@@ -358,29 +400,62 @@ export default function NewGrnPage() {
           )}
 
           <div className="flex flex-col gap-3">
-            <div className="flex items-center justify-between">
-              <h2 className="text-base font-semibold text-foreground">Lines</h2>
-              {mode === "direct" && (
+            <div className="flex items-center justify-between gap-3">
+              <div>
+                <h2 className="text-base font-semibold text-foreground">Lines</h2>
+                {mode === "po" && (
+                  <p className="text-sm text-muted-foreground">
+                    PO lines are prefilled. Use “Add line” to receive an item that isn’t on the PO.
+                  </p>
+                )}
+              </div>
+              <div className="flex items-center gap-2">
+                {/* Off-PO items are allowed on a PO-based GRN — the server treats a line with
+                    no poLineId as a direct receipt (docs/10 FR-GRN-01, revised). */}
                 <Button type="button" variant="outline" onClick={() => setLines((prev) => [...prev, emptyLine()])}>
                   <Plus className="size-5" />
                   Add line
                 </Button>
-              )}
+                {/* Create a brand-new item in a separate tab, then refresh to pick it up. */}
+                <Button
+                  type="button"
+                  variant="outline"
+                  onClick={() => window.open("/dashboard/products/new", "_blank", "noopener,noreferrer")}
+                >
+                  <ExternalLink className="size-5" />
+                  New item
+                </Button>
+                <Button
+                  type="button"
+                  variant="outline"
+                  size="icon"
+                  onClick={refreshItems}
+                  disabled={refreshingItems}
+                  aria-label="Refresh items"
+                  title="Refresh items"
+                >
+                  <RefreshCw className={cn("size-5", refreshingItems && "animate-spin")} />
+                </Button>
+              </div>
             </div>
 
             {poLoading && <Skeleton className="h-24 w-full" />}
 
             {!poLoading && lines.length > 0 && (
+              <div className="overflow-x-auto">
               <Table className="text-base">
                 <TableHeader>
                   <TableRow>
                     <TableHead className="h-12 w-56 px-3 text-sm">Item</TableHead>
-                    <TableHead className="h-12 w-28 px-3 text-sm">UOM</TableHead>
-                    <TableHead className="h-12 w-32 px-3 text-sm">Bin</TableHead>
-                    <TableHead className="h-12 w-24 px-3 text-sm">Qty</TableHead>
+                    <TableHead className="h-12 w-24 px-3 text-sm">UOM</TableHead>
+                    <TableHead className="h-12 w-28 px-3 text-sm">Bin</TableHead>
+                    <TableHead className="h-12 w-20 px-3 text-sm">Qty</TableHead>
                     <TableHead className="h-12 w-28 px-3 text-sm">Unit cost</TableHead>
-                    <TableHead className="h-12 w-36 px-3 text-sm">Hold status</TableHead>
-                    <TableHead className="h-12 w-48 px-3 text-sm">Batch / Serial</TableHead>
+                    <TableHead className="h-12 w-24 px-3 text-sm">Disc %</TableHead>
+                    <TableHead className="h-12 w-24 px-3 text-sm">VAT %</TableHead>
+                    <TableHead className="h-12 w-28 px-3 text-sm text-right">Line total</TableHead>
+                    <TableHead className="h-12 w-32 px-3 text-sm">Hold status</TableHead>
+                    <TableHead className="h-12 w-44 px-3 text-sm">Batch / Serial</TableHead>
                     <TableHead className="h-12 w-10 px-3" />
                   </TableRow>
                 </TableHeader>
@@ -473,6 +548,50 @@ export default function NewGrnPage() {
                             className="h-11 text-base"
                           />
                           <FieldError errors={[errors.unitCost ? { message: errors.unitCost } : undefined]} />
+                          {line.poUnitPrice !== null && Number(line.unitCost) !== line.poUnitPrice && (
+                            <p className="mt-1 text-xs text-warning">
+                              PO price {line.poUnitPrice.toFixed(2)} — variance recorded
+                            </p>
+                          )}
+                        </TableCell>
+                        <TableCell className="px-3 py-3 align-top">
+                          <Input
+                            type="number"
+                            min="0"
+                            max="100"
+                            step="any"
+                            value={line.discountPct}
+                            aria-invalid={!!errors.discountPct}
+                            onChange={(e) => updateLine(line.key, { discountPct: e.target.value })}
+                            className="h-11 text-base"
+                          />
+                          <FieldError errors={[errors.discountPct ? { message: errors.discountPct } : undefined]} />
+                        </TableCell>
+                        <TableCell className="px-3 py-3 align-top">
+                          <Input
+                            type="number"
+                            min="0"
+                            max="100"
+                            step="any"
+                            value={line.vatPct}
+                            aria-invalid={!!errors.vatPct}
+                            onChange={(e) => updateLine(line.key, { vatPct: e.target.value })}
+                            className="h-11 text-base"
+                          />
+                          <FieldError errors={[errors.vatPct ? { message: errors.vatPct } : undefined]} />
+                        </TableCell>
+                        <TableCell className="px-3 py-3 align-top text-right tabular-nums">
+                          {(() => {
+                            const c = computeLine(line)
+                            return (
+                              <div className="flex h-11 flex-col justify-center">
+                                <span>{c.lineTotal.toFixed(2)}</span>
+                                <span className="text-xs text-muted-foreground">
+                                  net {c.receivedValue.toFixed(2)} + VAT {c.vatAmount.toFixed(2)}
+                                </span>
+                              </div>
+                            )
+                          })()}
                         </TableCell>
                         <TableCell className="px-3 py-3 align-top">
                           <Select<HoldStatus>
@@ -533,6 +652,16 @@ export default function NewGrnPage() {
                   })}
                 </TableBody>
               </Table>
+              </div>
+            )}
+
+            {!poLoading && lines.length > 0 && (
+              <div className="flex justify-end gap-6 pr-12 text-base">
+                <span className="text-muted-foreground">Document total (incl. VAT)</span>
+                <span className="font-semibold tabular-nums">
+                  {lines.reduce((sum, l) => sum + computeLine(l).lineTotal, 0).toFixed(2)}
+                </span>
+              </div>
             )}
           </div>
 

Frontend/erp-system/components/Layouts/AppSidebar.tsx

@@ -8,12 +8,14 @@ import {
   Building2,
   ChevronRight,
   ClipboardList,
+  FileText,
   HelpCircle,
   LayoutGrid,
   ListTree,
   Menu,
   Package,
   PackageCheck,
+  PackageX,
   Ruler,
   Settings,
   ShieldCheck,
@@ -56,7 +58,19 @@ const navItems: {
     ],
   },
   { title: "Vendors", code: "vendors", href: "/dashboard/vendors", icon: Truck, chevron: true },
-  { title: "Procurement", code: "procurement", href: "/dashboard/procurement", icon: ClipboardList, chevron: true },
+  {
+    title: "Procurement",
+    code: "procurement",
+    href: "/dashboard/procurement",
+    icon: ClipboardList,
+    chevron: true,
+    children: [
+      { title: "Requisitions", code: "procurement.requisitions", href: "/dashboard/procurement/requisitions", icon: ClipboardList },
+      { title: "RFQs", code: "procurement.rfqs", href: "/dashboard/procurement/rfqs", icon: FileText },
+      { title: "Purchase Orders", code: "procurement.purchase-orders", href: "/dashboard/procurement/purchase-orders", icon: ShoppingCart },
+      { title: "Purchase Returns", code: "procurement.purchase-returns", href: "/dashboard/procurement/purchase-returns", icon: PackageX },
+    ],
+  },
   { title: "Receiving", code: "receiving", href: "/dashboard/receiving/grn", icon: PackageCheck, chevron: true },
   { title: "Stock", code: "stock", href: "/dashboard/stock", icon: Warehouse, chevron: true },
   { title: "Warehouses", code: "warehouses", href: "/dashboard/warehouse", icon: Building2, chevron: true },
@@ -91,18 +105,36 @@ function SidebarContent({
   pathname: string
   isMobile: boolean
 }) {
+  const iconOnly = !isMobile && collapsed
+
+  // Which parent menus are open. Starts with the parent that owns the active
+  // route auto-expanded; user toggles are preserved across navigation.
+  const [expanded, setExpanded] = useState<Record<string, boolean>>({})
+
+  useEffect(() => {
+    const parent = items.find((i) =>
+      i.children?.some((c) => pathname === c.href || pathname.startsWith(`${c.href}/`))
+    )
+    if (parent) {
+      setExpanded((prev) => (prev[parent.code] ? prev : { ...prev, [parent.code]: true }))
+    }
+  }, [pathname, items])
+
+  const toggleExpand = (code: string) =>
+    setExpanded((prev) => ({ ...prev, [code]: !prev[code] }))
+
   return (
     <nav
       className={cn(
-        "flex h-full flex-col rounded-3xl bg-white p-3 shadow-sm ring-1 ring-black/5 transition-[width] duration-200",
+        "flex h-full flex-col rounded-3xl bg-white p-3 shadow-sm ring-1 ring-black/5 transition-[width] duration-300 ease-in-out",
         !isMobile && (collapsed ? "w-20" : "w-64")
       )}
     >
       {/* Header */}
       <div
         className={cn(
-          "mb-10 flex items-center gap-2.5 px-4 py-3",
-          !isMobile && collapsed ? "flex-col-reverse justify-center gap-3 px-0" : "justify-between"
+          "mb-8 flex shrink-0 items-center gap-2.5 px-4 py-3",
+          iconOnly ? "flex-col-reverse justify-center gap-3 px-0" : "justify-between"
         )}
       >
         <Link href="/dashboard" className="flex items-center gap-2.5" onClick={onClose}>
@@ -111,7 +143,7 @@ function SidebarContent({
               <path d="M24 16c-3-8-11-12-16-8s-3 14 6 14c5 0 8.5-2.5 10-6 1.5 3.5 5 6 10 6 9 0 11-10 6-14s-13 0-16 8Z" />
             </svg>
           </div>
-          {(!collapsed || isMobile) && (
+          {!iconOnly && (
             <span className="text-lg font-bold tracking-tight text-slate-900">Hexa ERP</span>
           )}
         </Link>
@@ -126,79 +158,116 @@ function SidebarContent({
         </button>
       </div>
 
-      {/* Nav items */}
-      <ul className="flex flex-col gap-1">
+      {/* Nav items — scrolls internally when it overflows, without a visible
+          scrollbar so the rounded panel stays clean. */}
+      <ul className="flex min-h-0 flex-1 flex-col gap-1 overflow-y-auto [scrollbar-width:none] [&::-webkit-scrollbar]:hidden">
         {items.map((item) => {
           const isActive =
             item.href === "/dashboard" ? pathname === item.href : pathname.startsWith(item.href)
+          const hasChildren = !!item.children?.length && !iconOnly
+          const isOpen = !!expanded[item.code]
 
           return (
             <li key={item.href}>
-              <Link
-                href={item.href}
-                title={!isMobile && collapsed ? item.title : undefined}
-                onClick={onClose}
+              <div
                 className={cn(
-                  "flex items-center gap-3 rounded-2xl px-4 py-3 text-base font-semibold transition-colors",
-                  !isMobile && collapsed && "justify-center px-0",
-                  isActive
-                    ? "bg-indigo-50 text-indigo-600"
-                    : "text-slate-700 hover:bg-slate-50"
+                  "flex items-center rounded-2xl transition-colors",
+                  isActive ? "bg-indigo-50" : "hover:bg-slate-50"
                 )}
               >
-                <item.icon
-                  className={cn("size-5 shrink-0", isActive ? "text-indigo-600" : "text-slate-400")}
-                />
-                {(!collapsed || isMobile) && (
-                  <>
-                    <span className="flex-1">{item.title}</span>
-                    {item.chevron && !item.children && !isActive && (
-                      <ChevronRight className="size-4 shrink-0 text-slate-300" />
-                    )}
-                  </>
-                )}
-              </Link>
+                <Link
+                  href={item.href}
+                  title={iconOnly ? item.title : undefined}
+                  onClick={onClose}
+                  className={cn(
+                    "flex flex-1 items-center gap-3 rounded-2xl px-4 py-3 text-base font-semibold",
+                    iconOnly && "justify-center px-0",
+                    isActive ? "text-indigo-600" : "text-slate-700"
+                  )}
+                >
+                  <item.icon
+                    className={cn("size-5 shrink-0", isActive ? "text-indigo-600" : "text-slate-400")}
+                  />
+                  {!iconOnly && (
+                    <>
+                      <span className="flex-1">{item.title}</span>
+                      {item.chevron && !hasChildren && (
+                        <ChevronRight
+                          className={cn("size-4 shrink-0", isActive ? "text-indigo-400" : "text-slate-300")}
+                        />
+                      )}
+                    </>
+                  )}
+                </Link>
 
-              {item.children && (!collapsed || isMobile) && (
-                <ul className="mt-1 flex flex-col gap-0.5 pl-11">
-                  {(() => {
-                    // Longest-matching href wins so a shared prefix (e.g. "Item" and
-                    // "Category" both live under /dashboard/products) doesn't light up
-                    // more than one sub-item at once.
-                    const activeChild = [...item.children]
-                      .filter((c) => pathname === c.href || pathname.startsWith(`${c.href}/`))
-                      .sort((a, b) => b.href.length - a.href.length)[0]
-                    return item.children.map((child) => {
-                    const childActive = child.href === activeChild?.href
-                    return (
-                      <li key={child.href}>
-                        <Link
-                          href={child.href}
-                          onClick={onClose}
-                          className={cn(
-                            "flex items-center gap-2.5 rounded-xl px-3 py-2 text-sm font-medium transition-colors",
-                            childActive
-                              ? "bg-indigo-50 text-indigo-600"
-                              : "text-slate-500 hover:bg-slate-50 hover:text-slate-700"
-                          )}
-                        >
-                          <child.icon
-                            className={cn("size-4 shrink-0", childActive ? "text-indigo-600" : "text-slate-400")}
-                          />
-                          {child.title}
-                        </Link>
-                      </li>
-                    )
-                    })
-                  })()}
-                </ul>
+                {hasChildren && (
+                  <button
+                    type="button"
+                    onClick={() => toggleExpand(item.code)}
+                    aria-label={isOpen ? `Collapse ${item.title}` : `Expand ${item.title}`}
+                    aria-expanded={isOpen}
+                    className={cn(
+                      "mr-2 flex size-7 shrink-0 items-center justify-center rounded-lg transition-colors hover:bg-white/60",
+                      isActive ? "text-indigo-500" : "text-slate-400"
+                    )}
+                  >
+                    <ChevronRight
+                      className={cn("size-4 transition-transform duration-300 ease-in-out", isOpen && "rotate-90")}
+                    />
+                  </button>
+                )}
+              </div>
+
+              {hasChildren && (
+                <div
+                  className={cn(
+                    "grid transition-all duration-300 ease-in-out",
+                    isOpen ? "mt-1 grid-rows-[1fr] opacity-100" : "grid-rows-[0fr] opacity-0"
+                  )}
+                >
+                  <div className="overflow-hidden">
+                    <ul className="flex flex-col gap-0.5 pl-11">
+                      {(() => {
+                        // Longest-matching href wins so a shared prefix (e.g. "Item" and
+                        // "Category" both live under /dashboard/products) doesn't light up
+                        // more than one sub-item at once.
+                        const activeChild = [...item.children!]
+                          .filter((c) => pathname === c.href || pathname.startsWith(`${c.href}/`))
+                          .sort((a, b) => b.href.length - a.href.length)[0]
+                        return item.children!.map((child) => {
+                          const childActive = child.href === activeChild?.href
+                          return (
+                            <li key={child.href}>
+                              <Link
+                                href={child.href}
+                                onClick={onClose}
+                                tabIndex={isOpen ? undefined : -1}
+                                className={cn(
+                                  "flex items-center gap-2.5 rounded-xl px-3 py-2 text-sm font-medium transition-colors",
+                                  childActive
+                                    ? "bg-indigo-50 text-indigo-600"
+                                    : "text-slate-500 hover:bg-slate-50 hover:text-slate-700"
+                                )}
+                              >
+                                <child.icon
+                                  className={cn("size-4 shrink-0", childActive ? "text-indigo-600" : "text-slate-400")}
+                                />
+                                {child.title}
+                              </Link>
+                            </li>
+                          )
+                        })
+                      })()}
+                    </ul>
+                  </div>
+                </div>
               )}
             </li>
           )
         })}
       </ul>
 
-      <div className="mt-auto flex items-center justify-center pt-6">
+      <div className="flex items-center justify-center pt-6">
         <div className="flex size-12 items-center justify-center rounded-2xl bg-slate-50 ring-1 ring-black/5">
           <svg viewBox="0 0 48 32" className="h-4 w-6 fill-slate-400">
             <path d="M24 16c-3-8-11-12-16-8s-3 14 6 14c5 0 8.5-2.5 10-6 1.5 3.5 5 6 10 6 9 0 11-10 6-14s-13 0-16 8Z" />

Frontend/erp-system/components/ui/select.tsx

@@ -6,7 +6,40 @@ import { Select as SelectPrimitive } from "@base-ui/react/select"
 import { cn } from "@/lib/utils"
 import { ChevronDownIcon, CheckIcon, ChevronUpIcon } from "lucide-react"
 
-const Select = SelectPrimitive.Root
+// Base UI's `Select.Value` renders the raw selected value (e.g. an id) unless the Root is
+// given an `items` map to resolve the label from — the popup items are unmounted when closed,
+// so their text isn't otherwise available. Rather than pass `items` at all ~60 call sites,
+// this wrapper walks its own `SelectItem` children and derives that map automatically, so the
+// trigger shows the selected item's label instead of its value.
+function collectItems(
+  children: React.ReactNode,
+  acc: { value: unknown; label: React.ReactNode }[]
+) {
+  React.Children.forEach(children, (child) => {
+    if (!React.isValidElement(child)) return
+    if (child.type === SelectItem) {
+      const p = child.props as { value?: unknown; children?: React.ReactNode }
+      acc.push({ value: p.value, label: p.children })
+      return
+    }
+    const nested = (child.props as { children?: React.ReactNode }).children
+    if (nested) collectItems(nested, acc)
+  })
+}
+
+function Select<Value, Multiple extends boolean | undefined = false>(
+  props: SelectPrimitive.Root.Props<Value, Multiple>
+) {
+  const { items, children } = props
+  const derivedItems = React.useMemo(() => {
+    if (items) return items
+    const acc: { value: unknown; label: React.ReactNode }[] = []
+    collectItems(children, acc)
+    return acc.length ? (acc as ReadonlyArray<{ value: Value; label: React.ReactNode }>) : undefined
+  }, [items, children])
+
+  return <SelectPrimitive.Root {...props} items={derivedItems} />
+}
 
 function SelectGroup({ className, ...props }: SelectPrimitive.Group.Props) {
   return (

Frontend/erp-system/lib/api/purchase-orders.ts

@@ -20,10 +20,10 @@ export interface ListPurchaseOrdersParams {
   sort?: string
 }
 
-/** Editable while open (FR-PROC-05, Option B). The server is authoritative — it returns
- *  409 PO_NOT_EDITABLE regardless — this only drives UI affordances. */
+/** Editable/deletable only while Draft (FR-PROC-05, revised — submitting locks the PO).
+ *  The server is authoritative (409 PO_NOT_EDITABLE otherwise); this only drives UI affordances. */
 export function isPoEditable(status: PurchaseOrderStatus): boolean {
-  return status !== "FullyReceived" && status !== "Closed" && status !== "Cancelled"
+  return status === "Draft"
 }
 
 export const purchaseOrdersApi = {
@@ -54,6 +54,16 @@ export const purchaseOrdersApi = {
     return apiRequest<PurchaseOrder>(`/purchase-orders/${poId}/approve`, { method: "POST" })
   },
 
+  /** Submit a Draft PO (Draft → Approved). 409 PO_NOT_EDITABLE if not Draft. */
+  submit(poId: number): Promise<PurchaseOrder> {
+    return apiRequest<PurchaseOrder>(`/purchase-orders/${poId}/submit`, { method: "POST" })
+  },
+
+  /** Delete a Draft PO. 409 PO_NOT_EDITABLE once submitted. */
+  remove(poId: number): Promise<void> {
+    return apiRequest<void>(`/purchase-orders/${poId}`, { method: "DELETE" })
+  },
+
   /** 409 if any receipt exists against the PO. */
   cancel(poId: number, request: CancelPurchaseOrderRequest): Promise<PurchaseOrder> {
     return apiRequest<PurchaseOrder>(`/purchase-orders/${poId}/cancel`, { method: "POST", body: request })

Frontend/erp-system/lib/validations/grn.ts

@@ -16,6 +16,8 @@ export function validateLine(input: {
   uomId: number | null
   qty: string
   unitCost: string
+  discountPct: string
+  vatPct: string
   trackingMode: TrackingMode | null
   batchNo: string
   serialNumbersText: string
@@ -31,6 +33,14 @@ export function validateLine(input: {
   const unitCost = Number(input.unitCost)
   if (input.unitCost === "" || Number.isNaN(unitCost) || unitCost < 0) errors.unitCost = "Unit cost cannot be negative"
 
+  const discountPct = Number(input.discountPct)
+  if (input.discountPct !== "" && (Number.isNaN(discountPct) || discountPct < 0 || discountPct > 100))
+    errors.discountPct = "Discount must be 0–100%"
+
+  const vatPct = Number(input.vatPct)
+  if (input.vatPct !== "" && (Number.isNaN(vatPct) || vatPct < 0 || vatPct > 100))
+    errors.vatPct = "VAT must be 0–100%"
+
   if (input.trackingMode === "Batch" && !input.batchNo.trim()) {
     errors.batchNo = "Batch number is required for this item"
   }

Frontend/erp-system/lib/validations/master-data.ts

@@ -73,3 +73,23 @@ export function validateVariantItemForm(input: {
   if (!input.hasVariants) errors.variants = "Check at least one variant category and add its values"
   return errors
 }
+
+/**
+ * Fixed-price mode requires every generated variant to carry a sale price > 0
+ * (docs/20 §3.1). Returns a map keyed by variant key → message; empty when valid.
+ * In "stock" mode there is nothing to validate (prices are sent as null).
+ */
+export function validateVariantPrices(
+  variantKeys: string[],
+  priceFor: (key: string) => string,
+): Record<string, string> {
+  const errors: Record<string, string> = {}
+  for (const key of variantKeys) {
+    const raw = priceFor(key).trim()
+    const value = Number(raw)
+    if (raw === "" || Number.isNaN(value) || value <= 0) {
+      errors[key] = "Enter a price greater than 0"
+    }
+  }
+  return errors
+}

Frontend/erp-system/types/grn.ts

@@ -29,7 +29,16 @@ export interface CreateGrnLineInput {
   uomId: number
   binId?: number | null
   qty: number
+  /**
+   * Gross unit cost. For a PO line it is an optional per-receipt override — 0/omitted uses
+   * the PO price; a value wins and the server records a variance (docs/02-SECURITY C.3,
+   * revised). Required (> 0) for a direct receipt.
+   */
   unitCost: number
+  /** Trade discount % (0–100). Reduces inventory cost. */
+  discountPct?: number
+  /** VAT % (0–100). Recoverable — does not affect stock value. */
+  vatPct?: number
   holdStatus: HoldStatus
   batch?: BatchInput | null
 }
@@ -49,8 +58,21 @@ export interface GrnLine {
   uomId: number
   binId: number | null
   qty: number
+  /** Gross unit cost received at. */
   unitCost: number
+  /** PO price snapshot at receipt; null for direct receipts. */
+  poUnitPrice: number | null
+  discountPct: number
+  /** After-discount cost — what the FIFO layer is valued at. */
+  netUnitCost: number
+  vatPct: number
+  vatAmount: number
+  /** qty × netUnitCost (after discount, before VAT). */
   receivedValue: number
+  /** qty × netUnitCost + vatAmount — payable to vendor. */
+  lineTotal: number
+  /** (unitCost − poUnitPrice) × qty; 0 for direct receipts. */
+  priceVariance: number
   holdStatus: HoldStatus
   batchId: number | null
 }

Frontend/erp-system/types/master-data.ts

@@ -22,6 +22,8 @@ export interface ItemListItem {
   stockNature: StockNature
   trackingMode: TrackingMode
   taxClass: string | null
+  /** Fixed sale price (Sales only); null ⇒ sell at stock/FIFO value. */
+  salePrice: number | null
   status: EntityStatus
 }
 
@@ -59,6 +61,8 @@ export interface Item {
   stockNature: StockNature
   trackingMode: TrackingMode
   taxClass: string | null
+  /** Fixed sale price (Sales only); null ⇒ sell at stock/FIFO value. */
+  salePrice: number | null
   status: EntityStatus
   reorder: ItemReorderSetting[]
   conversions: UomConversion[]
@@ -81,6 +85,8 @@ export interface CreateItemRequest {
   stockNature: StockNature
   trackingMode: TrackingMode
   taxClass?: string | null
+  /** Optional fixed sale price (Sales only). Null/omitted ⇒ sell at stock/FIFO value. */
+  salePrice?: number | null
 }
 
 export type UpdateItemRequest = CreateItemRequest

Frontend/erp-system/types/procurement.ts

@@ -189,10 +189,12 @@ export interface CreatePurchaseOrderRequest {
   vendorId: number
   requisitionId?: number | null
   lines: CreatePoLineInput[]
+  /** When true the PO is created as an editable/deletable Draft; false (default) auto-approves. */
+  saveAsDraft?: boolean
 }
 
-/** PUT /purchase-orders/{poId} — edit-while-open, same line shape as create (FR-PROC-05, Option B). */
-export type UpdatePurchaseOrderRequest = CreatePurchaseOrderRequest
+/** PUT /purchase-orders/{poId} — edit a Draft only (FR-PROC-05, revised); same line shape as create. */
+export type UpdatePurchaseOrderRequest = Omit<CreatePurchaseOrderRequest, "saveAsDraft">
 
 export interface CancelPurchaseOrderRequest {
   reason?: string | null

docs/02-SECURITY.md

@@ -74,6 +74,7 @@ These are known, deliberately-accepted Phase-1 exposures. Each has a compensatin
 - [ ] Create/update DTOs exclude server-controlled fields (`status`, ids, timestamps)
 - [ ] Deactivate — not delete — referenced masters (FR-MD-08); hard delete blocked → `MASTER_IN_USE`
 - [ ] Nested/reference writes validate the target exists and is active
+- [ ] `Item.salePrice` is a **legitimately client-supplied** field (a deliberate exception to B.6's over-posting list) — validated `>= 0` server-side, nullable. It is **Sales-only** (never enters GRN/FIFO/ledger), so unlike GRN `unitCost` it has **no** inventory-value or costing impact; the fixed/stock-value choice is frontend UX (`docs/11 §2.1`).
 
 ### C.2 Procurement (Requisition / RFQ / PO / Purchase Return)
 - [ ] PO totals computed **server-side** from lines (never trust client totals)
@@ -83,10 +84,11 @@ These are known, deliberately-accepted Phase-1 exposures. Each has a compensatin
 - [ ] Note in review: **AR-01/AR-02/AR-03** apply to these endpoints
 
 ### C.3 GRN
-- [ ] `unitCost` **derived from the PO line server-side**; any client-supplied cost is ignored *(decision locked)*
-- [ ] `receivedValue` computed server-side (qty × PO-line cost), not accepted from client
-- [ ] Direct GRN (no PO) is the exception where cost is entered → extra scrutiny + review flag + audit (**AR-04**)
-- [ ] Over-receipt tolerance enforced server-side → `OVER_RECEIPT_TOLERANCE`
+- [ ] `unitCost` **defaults to the PO line price**; a per-line override **is now permitted** *(decision revised 2026-07-20 — was "locked, client cost ignored")*. When an override is entered it is used, and the PO price is snapshotted (`poUnitPrice`) so a **`priceVariance` is recorded** against it for review. Rationale: one PO legitimately spans batches received at different prices; the variance trail (plus the audit log) is the compensating control that replaces the old hard block.
+- [ ] **Derived figures stay server-computed** — `netUnitCost`/`receivedValue`/`vatAmount`/`lineTotal` are never accepted from the client, so the client cannot inflate stock value except by an *auditable* unit-cost override. Discount reduces inventory cost; **VAT is recoverable and never enters stock value**.
+- [ ] Direct GRN (no PO) remains the higher-scrutiny path where cost is entered with no PO to compare against → review flag + audit (**AR-04**)
+- [ ] **Off-PO lines on a PO-based GRN** (`poLineId: null`, 2026-07-22) are the **same exposure class as AR-04** — cost is entered with no PO line to compare against, and `OVER_RECEIPT_TOLERANCE` does not apply to them. Treat them with the direct-receipt scrutiny (review flag + audit); they do not touch PO balances.
+- [ ] Over-receipt tolerance enforced server-side → `OVER_RECEIPT_TOLERANCE` (PO-linked lines only; off-PO lines have no PO qty to check)
 - [ ] On-hold stock is not issuable (FR-WH-07); expired batch blocked
 
 ### C.4 Stock Core (FIFO / Ledger)

docs/10-BACKEND-PHASE1.md

@@ -118,7 +118,7 @@ One base currency; invoicing/3-way match in Accounting (GRN carries data); users
 ### B.3.1 Master Data (FR-MD)
 | ID | Requirement | Pri |
 |---|---|---|
-| FR-MD-01 | Maintain **Item master**: SKU (unique), name, description, category (+ optional subcategory), optional brand, **stock nature** (Stocked/NonStocked/Service), tracking mode (None/Batch/Serial), status, tax class, default vendor. | M |
+| FR-MD-01 | Maintain **Item master**: SKU (unique), name, description, category (+ optional subcategory), optional brand, **stock nature** (Stocked/NonStocked/Service), tracking mode (None/Batch/Serial), status, tax class, default vendor, **optional fixed sale price** (nullable; Sales-only — never enters costing/GRN/FIFO; `null` ⇒ item is sold at its stock/FIFO value). | M |
 | FR-MD-02 | Maintain **UOM master** with base UOM per item and **conversion factors** (purchase→stock→base). | M |
 | FR-MD-03 | Convert quantities between UOMs on every transaction; store base-UOM quantity in the ledger. | M |
 | FR-MD-04 | Maintain **item categories with one optional subcategory level**. An item references a category (required) and a subcategory (optional) that must belong to it. Deeper nesting is not supported. | S |
@@ -137,7 +137,7 @@ One base currency; invoicing/3-way match in Accounting (GRN carries data); users
 | FR-PROC-02 | Optional **RFQ**: issue to vendors, record quotations for comparison. | S |
 | FR-PROC-03 | Generate **PO** from PR/RFQ or directly (item, UOM, qty, price, tax, delivery date, warehouse). | M |
 | FR-PROC-04 | **[Phase 1: auto-approve]** Auto-approve PO on creation (status `Approved`). Config flag `approvalRequired` (default off) gates a future approval workflow (authorization matrix); when on, PO cannot issue until approved. `PendingApproval` state + approval fields retained in schema (no migration to enable). | M |
-| FR-PROC-05 | **[Phase 1: Option B — edit-while-open]** PO may be **freely edited while open** (not fully received/closed); changes take effect immediately with an audit entry. Versioned amendments deferred; schema must not preclude adding a version field later. | S |
+| FR-PROC-05 | **[Phase 1: Option B *superseded* 2026-07-20 — draft-lock]** A PO is **editable and deletable only while `Draft`**; **submitting locks it** (Draft → Approved) and no further edit/delete/add-line is allowed — an issued PO is corrected by Cancel-with-reason (blocked once receipts exist) or a reversing document, never edited. Create takes `saveAsDraft` (default `false` → auto-approve, preserving the Requisition→PO / RFQ→PO flows). *Why the reversal:* Option B ("freely edit while open") let an already-issued, vendor-facing PO change silently after the fact; the draft/submit boundary makes "issued to vendor" a real, immutable commitment. Versioned amendments still deferred; schema unchanged (reuses the existing `Draft` enum value). | S |
 | FR-PROC-06 | PO lifecycle: Draft → (PendingApproval →) Approved → PartiallyReceived → FullyReceived → Closed/Cancelled. Phase 1 bypasses PendingApproval via auto-approve. | M |
 | FR-PROC-07 | Support **partial receipt**; PO stays open until fully received or manually closed. | M |
 | FR-PROC-08 | Support **Purchase Return** referencing original GRN/PO line; generates outbound movement. | M |
@@ -146,12 +146,12 @@ One base currency; invoicing/3-way match in Accounting (GRN carries data); users
 ### B.3.3 Goods Receipt (FR-GRN)
 | ID | Requirement | Pri |
 |---|---|---|
-| FR-GRN-01 | Create **GRN** against an approved PO, defaulting lines/quantities from open PO lines. | M |
+| FR-GRN-01 | Create **GRN** against an approved PO, defaulting lines/quantities from open PO lines. **Additional lines for items not on the PO are permitted** — a line with no `po_line_id` is received like a direct receipt (entered cost, no over-receipt check) and does not affect PO line balances. Off-PO lines are a review surface (see 02-SECURITY C.3). | M |
 | FR-GRN-02 | Support **GRN without PO** (direct/emergency) by permission, flagged for review. | S |
 | FR-GRN-03 | Support **over/under-receipt tolerances** (per item or global); warn or block beyond tolerance. | S |
 | FR-GRN-04 | Capture **batch + expiry** and/or **serial numbers** for tracked items on receipt. | M |
 | FR-GRN-05 | Allow receipt into **inspection/quarantine hold** (not issuable) pending QC, before QC module exists. | M |
-| FR-GRN-06 | On confirm, each line **creates a FIFO cost layer** at unit cost (PO price + attributable charges; landed cost per §B.1.2.1) and posts an inbound ledger entry. | M |
+| FR-GRN-06 | On confirm, each line **creates a FIFO cost layer** at the **after-discount net unit cost** (`unitCost × (1 − discountPct/100)`) and posts an inbound ledger entry. **VAT never enters stock value** — it is recoverable input tax (revised 2026-07-20). PO price is the default unit cost; a per-line override is permitted and recorded as a variance (see 02-SECURITY C.3, revised). | M |
 | FR-GRN-07 | Record **received value per line** and PO reference for downstream matching. | M |
 | FR-GRN-08 | Assign received stock to a **bin/location** (putaway). | S |
 
@@ -250,6 +250,8 @@ Adjustment: Damage, Theft/Loss, Count Variance, Expiry Write-off, System Correct
 | 11 | Category hierarchy depth | **Resolved:** dedicated `SUBCATEGORY` table, exactly two levels; `CATEGORY.parent_id` dropped. Item carries both FKs (subcategory nullable). Arbitrary nesting is not coming back. |
 | 12 | Item types / variants | **Resolved:** the `ItemType` **enum** was replaced by an **unreferenced master list**; Stocked/NonStocked/Service survives as `stock_nature`. Values are **SKU-encoded only** — no value table, no item link, no product-variation model (Part C.9 records the accepted trade-off). |
 | 13 | Product-config authorization | **Open:** `PUT /product-config` is gated by the door policy only, like every other endpoint. A `CONFIG_MANAGE` permission is reserved for when per-endpoint RBAC lands (decision #6). Until then any ERP-admitted user can flip the flags. |
+| 14 | Item sale price (fixed vs stock value) | **Resolved (2026-07-22):** a single **nullable** `ITEM.sale_price` — `NULL` ⇒ sell at stock/FIFO value, a value ⇒ fixed price. **Sales-only** (never touches GRN/FIFO/ledger). No `price_mode` enum; the create-time fixed/stock toggle is frontend UX that requires a price per generated variant when "fixed" is chosen (Part C.9). |
+| 15 | Off-PO lines on a PO-based GRN | **Resolved (2026-07-22):** allowed. `GRN_LINE.po_line_id` is nullable; a null line on a PO-based GRN is received like a direct receipt (entered cost, no over-receipt check) and does not touch PO balances. Same cost-entry/fraud surface as GRN-without-PO (AR-04) — flagged for review, not blocked (02-SECURITY C.3). |
 
 ---
 
@@ -267,7 +269,8 @@ UOM(uom_id PK, name)
 UOM_CONVERSION(conversion_id PK, item_id FK→ITEM, from_uom FK→UOM, to_uom FK→UOM, factor)
 ITEM(item_id PK, sku, name, category_id FK→CATEGORY, subcategory_id FK→SUBCATEGORY [nullable],
      brand_id FK→BRAND [nullable], base_uom_id FK→UOM,
-     default_vendor_id FK→VENDOR, stock_nature, tracking_mode, tax_class, status)
+     default_vendor_id FK→VENDOR, stock_nature, tracking_mode, tax_class,
+     sale_price [nullable], status)   -- sale_price: Sales-only selling price; NULL ⇒ sell at stock (FIFO) value
 ITEM_REORDER(reorder_id PK, item_id FK→ITEM, warehouse_id FK→WAREHOUSE, reorder_point, reorder_qty)
 VENDOR(vendor_id PK, code, name, terms, tax_reg, currency, status)
 WAREHOUSE(warehouse_id PK, code, name)
@@ -303,8 +306,9 @@ PURCHASE_RETURN_LINE(return_line_id PK, return_id FK→PURCHASE_RETURN,
 ```
 GRN(grn_id PK, doc_no, po_id FK→PURCHASE_ORDER, vendor_id FK→VENDOR,
      warehouse_id FK→WAREHOUSE, status, created_by FK→USER, created_at)
-GRN_LINE(grn_line_id PK, grn_id FK→GRN, po_line_id FK→PO_LINE, item_id FK→ITEM, uom_id FK→UOM,
+GRN_LINE(grn_line_id PK, grn_id FK→GRN, po_line_id FK→PO_LINE [nullable], item_id FK→ITEM, uom_id FK→UOM,
      bin_id FK→BIN, batch_id FK→BATCH, qty, unit_cost, received_value, hold_status)
+     -- po_line_id nullable: NULL for a direct receipt OR an off-PO line added to a PO-based GRN (FR-GRN-01)
 ```
 
 ## C.4 Batch / Serial
@@ -362,6 +366,7 @@ Note: `USER_ROLE` from the original placeholder sketch was dropped — a user ha
 ## C.9 Modeling notes (load-bearing)
 - **Item types are a dropdown, not a relationship.** `ITEM_TYPE` (Color, Size, Material) exists **only** to populate the frontend item-builder's dropdown via `GET /item-types`. Nothing references it and it references nothing — there is no value table and no join to `ITEM`. The builder cross-products the checked types into **one standalone item per combination**; the chosen values (Red, S, M) are encoded by the **client** into the generated SKU (`BL-0002` for one type, `BL-100-0003` for two) and the server only checks that SKU for uniqueness. **The item list is the record of what was built.** This is not a product-variation model: there is no parent-product entity and no variant hierarchy.
   - *Accepted trade-off (a decision, not an oversight):* the backend cannot answer "list all blue items", cannot filter or report by colour/size, and cannot validate that a SKU's segments correspond to real item types. Renaming an item type (`Color` → `Colour`) does **not** touch existing SKUs, which keep their old segments — the two are permanently decoupled the moment an item is created. If value-level querying is ever needed, an `ITEM_TYPE_VALUE` table plus a link table can be added additively, but existing SKUs will not be back-fillable without parsing them by hand.
+- **Sale price is a per-item scalar, not a variant/price table.** Because each "variant" is its own `ITEM` row (above), the optional selling price lives directly on `ITEM.sale_price` (nullable). `NULL` means "use stock value" — Sales values the item at its FIFO stock cost at sale time (FR-STK-04 / `STOCK_LAYER`); a value is a fixed selling price. It is **Sales-only**: it never participates in GRN, FIFO layering, or the stock ledger, so receipt/costing behaviour is identical whether the item is fixed-priced or not. The create-time "fixed price vs use stock value" choice is a **frontend UX toggle** — the contract is simply the nullable column, and the item builder requires a price on every generated variant when the user picks fixed pricing.
 - **Two-level categories.** `CATEGORY` no longer self-nests; `SUBCATEGORY` is the single optional level below it. An item stores both FKs rather than pointing only at the deepest node, so the parent is never inferred or lost. A subcategory cannot be reparented (it would silently invalidate the category of every item referencing it) — deactivate and recreate instead.
 - **Product config is a singleton, and only two of its flags are enforceable.** `subcategories_enabled` / `brands_enabled` gate item writes (`CONFIG_DISABLED`, 422). `item_types_enabled` is **advisory only** — since items carry no item-type reference, there is nothing on a write to reject; the frontend honours it by hiding the builder's type section. Reads are never gated, so existing data stays readable after a flag is switched off.
 - **FIFO = two structures.** `STOCK_LAYER` answers valuation ("what's on hand and at what cost"); `STOCK_LEDGER` answers history ("what moved, when, by whom"). Layers are keyed per item **per warehouse**.

docs/11-BACKEND-PHASE1.md

@@ -164,6 +164,8 @@ docs/10 C.9): every write below forwards to AuthHex's new `/api/role` functions
 
 ### 2.1 Items
 > **`itemType` → `stockNature` (2026-07-16).** The Stocked/NonStocked/Service field was renamed so the name `itemType` could be taken by the new Item Type master (§2.7) — an unrelated concept. Items gained `subCategoryId` and `brandId` (both nullable). Items carry **no** item-type reference: the values chosen in the builder are encoded into the client-generated SKU (docs/10 Part C.9).
+>
+> **`salePrice` added (nullable, 2026-07-22).** Every item body below carries `salePrice` (`number|null`). It is the **Sales-only** fixed selling price: `null` ⇒ the item is sold at its stock/FIFO value; a value ⇒ fixed price. It never affects GRN/FIFO/ledger. On write it is optional; when supplied it must be `>= 0` (else `400` validation). The item builder's "fixed price / use stock value" toggle is UI-only — the contract is just the nullable field.
 
 #### `GET /items`
 Query: `q`, `status` (`Active|Inactive`), `categoryId`, `subCategoryId`, `brandId`, `trackingMode` (`None|Batch|Serial`), + paging.
@@ -171,7 +173,8 @@ Query: `q`, `status` (`Active|Inactive`), `categoryId`, `subCategoryId`, `brandI
 ```json
 { "items": [ { "itemId": 1001, "sku": "ITM-1001", "name": "Steel Bolt M8x40",
       "categoryId": 12, "subCategoryId": 30, "brandId": 2, "baseUomId": 1, "defaultVendorId": 5,
-      "stockNature": "Stocked", "trackingMode": "Batch", "taxClass": "STD", "status": "Active" } ],
+      "stockNature": "Stocked", "trackingMode": "Batch", "taxClass": "STD",
+      "salePrice": 12.5000, "status": "Active" } ],
   "pagination": { "page": 1, "pageSize": 20, "totalItems": 1, "totalPages": 1 } }
 ```
 
@@ -181,7 +184,8 @@ Query: `q`, `status` (`Active|Inactive`), `categoryId`, `subCategoryId`, `brandI
   "description": "Grade 8.8 zinc-plated hex bolt", "categoryId": 12, "subCategoryId": 30,
   "brandId": 2, "baseUomId": 1,
   "defaultVendorId": 5, "stockNature": "Stocked", "trackingMode": "Batch", "taxClass": "STD",
-  "status": "Active", "reorder": [ { "warehouseId": 1, "reorderPoint": 500, "reorderQty": 2000 } ],
+  "salePrice": 12.5000, "status": "Active",
+  "reorder": [ { "warehouseId": 1, "reorderPoint": 500, "reorderQty": 2000 } ],
   "conversions": [ { "conversionId": 33, "fromUom": 7, "toUom": 1, "factor": 12 } ],
   "createdAt": "2026-06-01T08:00:00Z", "updatedAt": "2026-07-01T10:15:00Z" }
 ```
@@ -192,14 +196,14 @@ The `sku` is **generated by the client** (it encodes the chosen item-type values
 ```json
 { "sku": "ITM-1002", "name": "Steel Nut M8", "description": "Grade 8 zinc-plated hex nut",
   "categoryId": 12, "subCategoryId": 30, "brandId": 2, "baseUomId": 1, "defaultVendorId": 5,
-  "stockNature": "Stocked", "trackingMode": "None", "taxClass": "STD" }
+  "stockNature": "Stocked", "trackingMode": "None", "taxClass": "STD", "salePrice": 3.2500 }
 ```
 **201 Created** — `Location: /api/v1/items/1002`
 ```json
 { "itemId": 1002, "sku": "ITM-1002", "name": "Steel Nut M8", "categoryId": 12,
   "subCategoryId": 30, "brandId": 2, "baseUomId": 1,
   "defaultVendorId": 5, "stockNature": "Stocked", "trackingMode": "None", "taxClass": "STD",
-  "status": "Active", "createdAt": "2026-07-07T09:30:00Z" }
+  "salePrice": 3.2500, "status": "Active", "createdAt": "2026-07-07T09:30:00Z" }
 ```
 `400` → `code: SKU_DUPLICATE` if SKU exists.
 `422` → `code: CONFIG_DISABLED` if `subCategoryId` is sent while subcategories are disabled, or `brandId` while brands are disabled (§2.8).
@@ -457,14 +461,15 @@ Query: `q`, `status` (`Open|Closed`), + paging. → list envelope of
 `GET /rfqs/{rfqId}/comparison` → vendor-by-line price matrix.
 
 ### 3.3 Purchase Orders
-> **Phase 1:** `approvalRequired` defaults `false` → PO **auto-approved on creation**. Approve endpoint exists but is a no-op unless enabled (FR-PROC-04). PO **freely editable while open** (Option B, FR-PROC-05).
+> **Phase 1:** `approvalRequired` defaults `false`. Create takes **`saveAsDraft`** (default `false` → **auto-approved on creation**; `true` → `Draft`). Approve endpoint exists but is a no-op unless enabled (FR-PROC-04). **A PO is editable/deletable only while `Draft`; submitting locks it** (FR-PROC-05, revised 2026-07-20 — Option B "freely edit while open" superseded).
 
 #### `POST /purchase-orders`
 ```json
-{ "vendorId": 5, "requisitionId": 210,
+{ "vendorId": 5, "requisitionId": 210, "saveAsDraft": false,
   "lines": [ { "itemId": 1001, "uomId": 1, "warehouseId": 1, "qty": 5000, "unitPrice": 12.50, "tax": 0.18 },
              { "itemId": 1002, "uomId": 1, "warehouseId": 1, "qty": 8000, "unitPrice": 6.20, "tax": 0.18 } ] }
 ```
+`saveAsDraft` optional (default `false`). When `true` the response `status` is `Draft`.
 **201 Created** — `Location: /api/v1/purchase-orders/342`
 ```json
 { "poId": 342, "docNo": "PO-2026-00342", "vendorId": 5, "requisitionId": 210,
@@ -477,7 +482,11 @@ Query: `q`, `status` (`Open|Closed`), + paging. → list envelope of
 `GET /purchase-orders?status=Approved&vendorId=5` → list envelope of PO summaries.
 
 #### `PUT /purchase-orders/{poId}`
-Edit while open (not FullyReceived/Closed/Cancelled); requires `If-Match`. → **200 OK** updated resource; `409 PO_NOT_EDITABLE` if closed.
+Edit a **Draft only**; requires `If-Match`. → **200 OK** updated resource; `409 PO_NOT_EDITABLE` once submitted (any non-Draft status).
+
+#### `POST /purchase-orders/{poId}/submit` → **200 OK** — `Draft → Approved`. `409 PO_NOT_EDITABLE` if not Draft.
+
+#### `DELETE /purchase-orders/{poId}` → **204 No Content** — permitted **only while Draft**; `409 PO_NOT_EDITABLE` once submitted.
 
 #### `POST /purchase-orders/{poId}/approve` → **200 OK** (no-op in Phase 1; transitions PendingApproval→Approved when enabled).
 
@@ -524,15 +533,31 @@ Against a PO (lines default from open PO lines) or direct (`poId: null`, by perm
 ```json
 { "poId": 342, "warehouseId": 1,
   "lines": [ { "poLineId": 900, "itemId": 1001, "uomId": 1, "binId": 45, "qty": 5000,
-      "unitCost": 12.50, "holdStatus": "OnHold",
-      "batch": { "batchNo": "B-2607", "expiryDate": "2028-07-01" } } ] }
+      "unitCost": 12.50, "discountPct": 10, "vatPct": 18, "holdStatus": "OnHold",
+      "batch": { "batchNo": "B-2607", "expiryDate": "2028-07-01" } },
+    { "poLineId": null, "itemId": 1050, "uomId": 1, "qty": 20,
+      "unitCost": 8.00, "holdStatus": "Available" } ] }
 ```
-**201 Created** — status `Draft`
+`discountPct`/`vatPct` optional (default 0, range 0–100). `unitCost` on a **PO line** is an optional
+override: 0/omitted uses the PO price; a value wins and a variance is recorded (02-SECURITY C.3, revised).
+On a direct receipt `unitCost` is required.
+**Off-PO lines (`poLineId: null`) are allowed even on a PO-based GRN** (2026-07-22, FR-GRN-01) — the second
+line above receives an item that is not on the PO. Such a line behaves exactly like a direct-receipt line:
+`unitCost` is required, `OVER_RECEIPT_TOLERANCE` does **not** apply (there is no PO qty to check), and no PO
+line balance is touched. The inline "create new item" UI simply calls `POST /items` (§2.1) first, then adds
+the returned item as an off-PO line.
+**201 Created** — status `Draft`. All derived figures are **server-computed**:
+`netUnitCost = unitCost × (1 − discountPct/100)`, `receivedValue = qty × netUnitCost` (after discount,
+**before** VAT — this is the stock value), `vatAmount = receivedValue × vatPct/100`,
+`lineTotal = receivedValue + vatAmount`, `priceVariance = (unitCost − poUnitPrice) × qty`.
 ```json
 { "grnId": 780, "docNo": "GRN-2026-00780", "poId": 342, "vendorId": 5, "warehouseId": 1,
   "status": "Draft", "createdBy": 17,
   "lines": [ { "grnLineId": 1300, "poLineId": 900, "itemId": 1001, "uomId": 1, "binId": 45,
-      "qty": 5000, "unitCost": 12.50, "receivedValue": 62500.00, "holdStatus": "OnHold", "batchId": 410 } ] }
+      "qty": 5000, "unitCost": 12.50, "poUnitPrice": 12.50, "discountPct": 10.0,
+      "netUnitCost": 11.25, "vatPct": 18.0, "vatAmount": 10125.00,
+      "receivedValue": 56250.00, "lineTotal": 66375.00, "priceVariance": 0.00,
+      "holdStatus": "OnHold", "batchId": 410 } ] }
 ```
 `422 OVER_RECEIPT_TOLERANCE` if qty exceeds open PO qty beyond tolerance.
 

docs/20-FRONTEND.md

@@ -143,9 +143,11 @@ Vendors, Items, Categories, Subcategories, UOM, Warehouses, Brands, and Item Typ
 - **SKU generation stays client-side** (`buildVariantSku`) and is the *only* record of which colour/size an item is; the server only uniqueness-checks it. **Nothing can query items by colour** — accepted (`docs/10 Part C.9`).
 - **`remove()` → `updateStatus(id, "Inactive")`** everywhere. There are no `DELETE` endpoints on any master (FR-MD-08); the lists show a Status column and Deactivate/Activate.
 - **`initialQty` is gone** from the builder — the Item contract has no such field and there is no initial-receipt flow. Stock arrives via a GRN.
+- **Sale-price toggle on the builder (2026-07-22).** A "Fixed price / Use stock value" toggle sits on `/dashboard/products/new`. **Use stock value** (default) sends `salePrice: null` on every created item (sold at FIFO value). **Fixed price** reveals a top "fix value" input that pre-fills a per-variant `Sale price` column; each row is editable, and submit is blocked until **every** generated variant has a price `> 0`. The toggle is **frontend-only** — the contract is just the nullable `salePrice` field (`docs/11 §2.1`); it is Sales-only and never affects GRN/costing. The non-transactional create loop still applies — each variant's `salePrice` rides its own `POST /items`.
 - **Product Configuration** (`app/dashboard/products/settings`, `GET`/`PUT /product-config`) — only **3** of the original design's ~13 toggles exist. `subcategoriesEnabled`/`brandsEnabled` are server-enforced (`CONFIG_DISABLED`); **`itemTypesEnabled` is advisory** and this app is what honours it (it hides the builder's type section). The UI states that distinction on the screen rather than implying a guarantee.
 - **Non-transactional create loop:** the builder's per-row `itemsApi.create()` has no transaction — a `SKU_DUPLICATE` on row 7 of 12 leaves 6 items created. The error message now says how many landed rather than implying nothing happened. A transactional bulk-create endpoint would be the real fix.
 - **GRN edit/delete removed** — the API has no `PUT`/`DELETE` for a GRN; receipts are corrected by reversing documents (FR-X-05).
+- **GRN off-PO items + inline item create (2026-07-22).** On `/dashboard/receiving/grn/new`, "Add line" is available in **both** PO and direct mode — an added line in PO mode has `poLineId: null` and receives an item not on the PO (editable item/UOM dropdowns, `unitCost` required). A **"New item"** button opens `/dashboard/products/new` in a **new browser tab** (`window.open`, the first such pattern in the app), and a **refresh icon** re-pulls `GET /items?status=Active` so the newly created item is selectable **without** reloading the screen and losing the in-progress GRN. Server treats off-PO lines as direct receipts (no over-receipt check) — `docs/11 §4.1`.
 - **RFQ invited-vendors is not persisted** — `POST /rfqs` validates `vendorIds` then discards them, so the list/detail screens show quotations received instead of vendors invited.
 - **Known gap — serial numbers:** FR-GRN-04 requires capturing serials on receipt, but `CreateGrnLineInput` has no such field (only `batch`). The UI does not collect them rather than silently discarding them. Needs a backend change to honour the requirement.
 
@@ -159,7 +161,7 @@ Vendors, Items, Categories, Subcategories, UOM, Warehouses, Brands, and Item Typ
 **Client-side (UX only — safe to check locally):** purely input-level facts the browser already has.
 - Required fields present.
 - Format: SKU pattern, numeric fields numeric, date format, positive integers.
-- Range/bounds: `qty > 0`, `unitPrice >= 0`, `factor > 0`.
+- Range/bounds: `qty > 0`, `unitPrice >= 0`, `factor > 0`. Item `salePrice` is a client-supplied number — the builder requires `> 0` per variant in fixed mode; the server only checks `>= 0` on a supplied value (`docs/11 §2.1`).
 - Simple cross-field input rules: transfer `destWarehouseId != srcWarehouseId`.
 - Enum membership via constrained dropdowns (`stockNature` — ex-`itemType`, `trackingMode`, `countType`, `holdStatus`). Note the **Item Type** dropdown is *not* in this category: it's server data (`GET /item-types`), not an enum.