fix: REPROCESS_PRODUCTS resolved company=None for unified_fiscal/RTC

REPROCESS_PRODUCTS is not in SYNC_JOB_KINDS, so it fell to the else branch of execute_job and hardcoded company=None
for _unified_fiscal - a real gap, not a missing feature: the same deterministic, fail-closed company_context.resolve()
every sync job already uses is cheap (no full-table scan, confirmed against the real database) and applies just as
well to a one-off reprocess job. Now resolves the real company the same way; falls back to None only when the
company genuinely cannot be resolved yet, never a silent guess. Does not touch RTC rule logic.

Verified end-to-end against the real production database (dry-run, zero writes) that this was the last domain still
carrying the old bug - field_contract's post-NCM fiscal completion already bypassed it entirely by reading
Installation.company_uf/crt/company_contribuinte_ipi directly (populated via the 1.3.7 heartbeat fix).

1123 tests passed (tests + central/tests + agent/tests), 0 failed. Version 1.3.8 (single GTI_FISCAL_VERSION).

agent/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gti-fiscal-agent"
-version = "1.3.7"
+version = "1.3.8"
 requires-python = ">=3.10"
 dependencies = ["httpx>=0.27,<1"]
 

agent/scripts/run_agent_service.py

@@ -107,7 +107,7 @@ class Config:
         self.poll_interval_seconds = float(env.get("POLL_INTERVAL_SECONDS", "5"))
         # RTC auto-apply is a SEPARATE switch (default OFF): FIREBIRD_WRITES alone never lets the Agent fill cClassTrib.
         self.rtc_auto_apply_max_per_job = int(env.get("RTC_AUTO_APPLY_MAX_PER_JOB", str(_rtc_apply.DEFAULT_MAX_PER_JOB)))
-        self.agent_version = env.get("AGENT_VERSION", "1.3.7")
+        self.agent_version = env.get("AGENT_VERSION", "1.3.8")
         self.schema_fingerprint = env.get("SCHEMA_FINGERPRINT", REFERENCE_SCHEMA_V1)
         self.state_db = env.get("AGENT_STATE_DB", str(AGENT_ROOT / "agent_state.sqlite"))
         # Pilot write authorization: both must be explicitly set by the installer for
@@ -338,7 +338,14 @@ def execute_job(job, config, executor, state, env):
             operational = summarize_operational_states(product_states)
             fiscal_context = {**fiscal["context"], "evaluated_all": kind != "REPROCESS_PRODUCTS"}
         else:
-            fiscal = _unified_fiscal(env, None, {str(p["CODIGO"]): (d or {}).get("status") == "EXACT_NCM" for p, d in zip(to_process, decisions)})
+            # REPROCESS_PRODUCTS (and any other non-sync kind) used to hardcode company=None here - not a missing feature, a real gap: the SAME
+            # deterministic, fail-closed company_context.resolve() every sync job already uses is cheap (no full-table scan) and applies just as
+            # well to a one-off reprocess job. `company` stays None only when the company genuinely cannot be resolved yet - never a silent guess.
+            try:
+                company = {"crt": _firebird_reader.read_company_context(env).get("crt")}
+            except Exception:
+                company = None
+            fiscal = _unified_fiscal(env, company, {str(p["CODIGO"]): (d or {}).get("status") == "EXACT_NCM" for p, d in zip(to_process, decisions)})
         fiscal_blocked = _fiscal_blocked_products(products, fiscal["findings"])
         fiscal_codes = {b["product_code"] for b in fiscal_blocked}
         summary["blocked_products"] = summary["blocked_products"] + fiscal_blocked
@@ -349,7 +356,7 @@ def execute_job(job, config, executor, state, env):
             "fiscal_context": fiscal_context,
             "rtc_auto_apply": rtc_apply,
             "fiscal_mode": getattr(config, "fiscal_mode", None),
-            "release_version": env.get("AGENT_VERSION") or "1.3.7",
+            "release_version": env.get("AGENT_VERSION") or "1.3.8",
             "products_total": len(products),
             "products_changed": len(to_process),
             "products_processed": summary["processed"],
@@ -543,7 +550,7 @@ def run(config, env, *, max_iterations=None, stopper=None):
 def enforce_startup_preflight(env):
     """Full read-only preflight at startup (Hub, auth, Firebird, capabilities, company context, guards). Fail closed."""
     from gti_fiscal_agent.preflight import run_preflight
-    report = run_preflight(env, agent_version=env.get("AGENT_VERSION") or "1.3.7")
+    report = run_preflight(env, agent_version=env.get("AGENT_VERSION") or "1.3.8")
     logger.info("startup preflight: %s", json.dumps({k: report[k] for k in ("PREFLIGHT", "blockers", "fiscal_mode", "effective_firebird_writes")}, ensure_ascii=False))
     print(json.dumps({"PREFLIGHT": report["PREFLIGHT"], "blockers": report["blockers"]}, ensure_ascii=False))
     if report["PREFLIGHT"] != "PASS":

agent/src/gti_fiscal_agent/preflight.py

@@ -9,7 +9,7 @@ import os
 import sqlite3
 from pathlib import Path
 
-AGENT_VERSION_DEFAULT = "1.3.7"
+AGENT_VERSION_DEFAULT = "1.3.8"
 REQUIRED_ENV = ("GTI_HUB_URL", "AGENT_TOKEN", "FIREBIRD_DATABASE_PATH", "FB_USER", "FB_PASSWORD")
 REQUIRED_CAPABILITIES = ("supports_ncm", "supports_ipi", "supports_cest")
 FISCAL_MODES = ("DRY_RUN", "AUTO_APPLY")

agent/tests/test_run_agent_service.py

@@ -261,6 +261,71 @@ def test_execute_job_success_summarizes_pipeline(monkeypatch):
     assert result["writes_attempted"] == 0  # firebird_writes disabled by default in _config()
 
 
+def test_reprocess_products_resolves_real_company_context_not_none(monkeypatch):
+    """REPROCESS_PRODUCTS used to hardcode company=None for _unified_fiscal (it isn't in SYNC_JOB_KINDS). Company resolution is cheap and
+    deterministic (company_context.resolve, same as every sync job already uses) - it must never silently fall back to None when the company
+    genuinely resolves."""
+    config = _config()
+    products = [{"CODIGO": "000026", "PRODUTO": "x", "CLASSIFICACAO_FISCAL": "03055100", "IPI": None}]
+    decisions = [{"status": "EXACT_NCM", "ipi_status": "IPI_RESOLVED", "classification": {"ipi": {"rate_kind": "NUMERIC", "rate_numeric": 3.25}}, "dataset_versions": {"tipi_ipi": "v1"}}]
+    monkeypatch.setattr(service, "read_products", lambda env, codigos=None: products)
+
+    class FakeClient:
+        def __init__(self, *a, **k): pass
+        def classify_batch(self, items): return decisions
+    monkeypatch.setattr(service, "HubClient", FakeClient)
+    monkeypatch.setattr(service._firebird_reader, "read_company_context", lambda env: {"uf": "BA", "crt": "1", "company_code": "000001"})
+
+    captured = {}
+    real_unified = service._unified_fiscal
+
+    def spy_unified_fiscal(env, company, ncm_valid=None):
+        captured["company"] = company
+        return real_unified(env, company, ncm_valid)
+    monkeypatch.setattr(service, "_unified_fiscal", spy_unified_fiscal)
+
+    executor = _FakeExecutor()
+    state = _FakeState()
+    job = {"kind": "REPROCESS_PRODUCTS", "agent_id": 1, "payload": {"codigos": ["000026"]}}
+
+    result, error = service.execute_job(job, config, executor, state, {})
+    assert error is None
+    assert captured["company"] == {"crt": "1"}      # real CRT, never None, when the company genuinely resolves
+
+
+def test_reprocess_products_falls_back_to_none_only_when_company_unresolved(monkeypatch):
+    """No guessing: when the company genuinely cannot be resolved (e.g. Firebird unreachable), company stays None - same as before."""
+    config = _config()
+    products = [{"CODIGO": "000026", "PRODUTO": "x", "CLASSIFICACAO_FISCAL": "03055100", "IPI": None}]
+    decisions = [{"status": "EXACT_NCM", "ipi_status": "IPI_RESOLVED", "classification": {"ipi": {"rate_kind": "NUMERIC", "rate_numeric": 3.25}}, "dataset_versions": {"tipi_ipi": "v1"}}]
+    monkeypatch.setattr(service, "read_products", lambda env, codigos=None: products)
+
+    class FakeClient:
+        def __init__(self, *a, **k): pass
+        def classify_batch(self, items): return decisions
+    monkeypatch.setattr(service, "HubClient", FakeClient)
+
+    def boom(env):
+        raise RuntimeError("firebird unavailable")
+    monkeypatch.setattr(service._firebird_reader, "read_company_context", boom)
+
+    captured = {}
+    real_unified = service._unified_fiscal
+
+    def spy_unified_fiscal(env, company, ncm_valid=None):
+        captured["company"] = company
+        return real_unified(env, company, ncm_valid)
+    monkeypatch.setattr(service, "_unified_fiscal", spy_unified_fiscal)
+
+    executor = _FakeExecutor()
+    state = _FakeState()
+    job = {"kind": "REPROCESS_PRODUCTS", "agent_id": 1, "payload": {"codigos": ["000026"]}}
+
+    result, error = service.execute_job(job, config, executor, state, {})
+    assert error is None
+    assert captured["company"] is None
+
+
 class _FakeHubForLoop:
     """Simulates: heartbeat flaky twice then OK, one job then nothing, and captures completions."""
 

central/app/version.py

@@ -4,5 +4,5 @@ kept identical to this) and what an AgentRelease row's `version` column holds
 once published — never a second, independent version number. Fiscal semantics
 are versioned separately (ENGINE_VERSION/DECISION_VERSION in classification.py,
 DECISION_ENGINE_VERSION etc.) and are NOT changed by a release bump."""
-GTI_FISCAL_VERSION = "1.3.7"
+GTI_FISCAL_VERSION = "1.3.8"
 API_COMPAT_MAJOR_MINOR = "1.0"  # an Agent 1.0.x/1.1.x talks to any Hub 1.0.x

central/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "gti-fiscal-hub"
-version = "1.3.7"
+version = "1.3.8"
 requires-python = ">=3.10"
 dependencies = [
   "fastapi>=0.115,<1",

central/tests/test_health.py

@@ -17,7 +17,7 @@ def test_health_is_unavailable_when_database_is_down():
 
 def test_version_endpoint_reports_release_and_fiscal_versions():
     body = TestClient(create_app(database_probe=lambda: True)).get("/version").json()
-    assert body["version"] == "1.3.7" and body["api_compat"] == "1.0" and body["engine_version"] and body["decision_version"]
+    assert body["version"] == "1.3.8" and body["api_compat"] == "1.0" and body["engine_version"] and body["decision_version"]
 
 
 def test_production_refuses_the_dev_token(monkeypatch):

release/RELEASE_MANIFEST.json

@@ -1,14 +1,14 @@
 {
  "artifact": "RELEASE_MANIFEST",
- "GTI_FISCAL_VERSION": "1.3.7",
+ "GTI_FISCAL_VERSION": "1.3.8",
- "generated_at": "2026-09-27T00:00:00+00:00",
+ "generated_at": "2026-09-28T00:30:00+00:00",
  "hub": {
-  "version": "1.3.7",
+  "version": "1.3.8",
   "api_compat": "1.0",
   "engine_version": "0.3.0",
   "decision_version": "mission-04c-ipi-ex-split"
  },
- "agent_version": "1.3.7",
+ "agent_version": "1.3.8",
  "fiscal_engine": {
   "ENGINE_VERSION": "0.3.0",
   "DECISION_VERSION": "mission-04c-ipi-ex-split",
@@ -19,7 +19,7 @@
  "migrations": {
   "alembic_head_in_repo": "0032_contribuinte_ipi",
   "applied_revision": "0032_contribuinte_ipi",
-  "applied_revision_source": "PENDING REAL DEPLOY - placeholder set equal to repo head for local test coherence; scripts/release_manifest.py must be re-run against the live post-deploy Hub to confirm the real applied_revision before this manifest is trusted",
+  "applied_revision_source": "confirmed live via docker exec alembic current on gti-fiscal-hub-fiscal-hub-1 during the 1.3.7 deploy; migration 0032 did not change again in 1.3.8",
   "count": 32
  },
  "datasets_active": [
@@ -89,5 +89,5 @@
    "record_count": 11103
   }
  ],
- "note": "1.3.7: field_contract wired into /v1/products/resolve (post-NCM fiscal completion); Agent heartbeat now reports company_crt and company_contribuinte_ipi (auto-discovered from C000004, migration 0032); Agent now reports CURRENT_REPORT_FIELDS (fiscal-completion fields + classification columns) for role inference. Agent code changed: a new GTIFiscalAgent-Setup-1.3.7 installer is published this release."
+ "note": "1.3.8: fixes REPROCESS_PRODUCTS hardcoding company=None for _unified_fiscal/RTC (it isn't in SYNC_JOB_KINDS) - now resolves the real company context the same deterministic way every sync job already does, never guesses, falls back to None only when genuinely unresolved. No schema change. Agent code changed (run_agent_service.py): a new GTIFiscalAgent-Setup-1.3.8 installer is published this release."
 }

release/VERSION

@@ -1 +1 @@
-1.3.7
+1.3.8

tests/test_release_candidate.py

@@ -14,11 +14,11 @@ sys.path.insert(0, str(ROOT))
 def test_versions_are_coherent_across_hub_agent_and_packages():
     from central.app.version import GTI_FISCAL_VERSION
     v = (ROOT / "release" / "VERSION").read_text(encoding="utf-8").strip()
-    assert v == GTI_FISCAL_VERSION == "1.3.7"
+    assert v == GTI_FISCAL_VERSION == "1.3.8"
     pep = v.replace("-rc", "rc")
     for pp in ("central/pyproject.toml", "agent/pyproject.toml"):
         assert f'version = "{pep}"' in (ROOT / pp).read_text(encoding="utf-8")
-    assert '"AGENT_VERSION", "1.3.7"' in (ROOT / "agent" / "scripts" / "run_agent_service.py").read_text(encoding="utf-8")
+    assert '"AGENT_VERSION", "1.3.8"' in (ROOT / "agent" / "scripts" / "run_agent_service.py").read_text(encoding="utf-8")
     manifest = ROOT / "release" / "RELEASE_MANIFEST.json"
     if manifest.exists():
         m = json.loads(manifest.read_text(encoding="utf-8"))