feat(fusion_portal): Phase 3 - assessment visit workspace (accessibility path)

Adds the portal workspace: /my/visit/new starts a visit; /my/visit/<id> shows the
add-as-you-go workspace (add buttons -> existing forms carrying ?visit_id, a
deferred client+funding form, and a Complete button). Accessibility forms launched
from a visit save as a DRAFT linked to it (JS carries visit_id into the form; the
controller captures it and skips the per-assessment SO) - the VISIT completion then
creates the grouped per-funding sale orders.

NOT YET: express/ADP form visit-linking, email consolidation, polished tablet UI.
Untested locally (Enterprise dep) - clone verification pending.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.gitignore

@@ -15,3 +15,4 @@ __pycache__/
 
 # Local-only diagnostic logs from test runs
 _test_*.log
+.superpowers/

CLAUDE.md

@@ -33,6 +33,8 @@
 
 15. **There is NO `sale.subscription` model in Odoo 19** (Enterprise `sale_subscription`). A subscription is a **`sale.order`** with `is_subscription=True`, `plan_id` → **`sale.subscription.plan`** (the recurrence), plus `subscription_state` / `next_invoice_date` / `recurring_monthly`. Any Many2one or relation that targets "a subscription" must point at `sale.order` (filter `domain=[('is_subscription','=',True)]`) — **not** `sale.subscription`, which does not exist and fails at install. The surviving `sale.subscription.*` records are only the plan + wizards/reports (`sale.subscription.plan`, `sale.subscription.report`, `sale.subscription.change.customer.wizard`, `sale.subscription.close.reason.wizard`). Verified on live `nexamain` (odoo-nexa, 19.0): `SELECT model FROM ir_model WHERE model LIKE 'sale.subscription%'`.
 
+16. **Renaming a module's technical name needs a DB rename, not just a folder rename.** The technical name is baked into the database: `ir_module_module.name`, every external ID in `ir_model_data.module`, each view's `ir_ui_view.key` prefix, and the `ir_module_module_dependency.name` rows of every module that depends on it. Rename only the folder + in-code references and Odoo treats the new name as a fresh uninstalled module — installing it **duplicates** groups/templates/menus and **orphans** all existing data. On every DB that already has it installed, run an in-place SQL rename (the 4 tables above) **before** `-u <newname>`; a fresh DB needs nothing. Reference script + full rationale: [`fusion_portal/rename_module.sql`](fusion_portal/rename_module.sql) (written for the `fusion_authorizer_portal` → `fusion_portal` rename). Also update cross-module `depends`, `inherit_id="<old>.view"`, `t-call`, `env.ref('<old>.xmlid')`, asset paths (`<old>/static/...`), and `from odoo.addons.<old>... import`.
+
 ## Card Styling — Copy Odoo's Kanban Pattern
 Don't rely on `var(--bs-border-color)` or `var(--bs-body-bg)` for card surfaces — they drift between themes/addons and often render **invisible**. Odoo's own kanban (`.o_kanban_record`) uses **explicit hex** values:
 ```css
@@ -94,7 +96,7 @@ Odoo content-hashes the compiled bundle URL (`/web/assets/<hash>/...`). When CSS
 
 ## Module-Specific Notes
 - **fusion_clock** — developed in **Claude Code** (no longer Cursor; no concurrent-editing conflicts). Changed a lot recently (NFC kiosk: tap-to-clock, enrollment + program-from-unknown-tap, manager page, sounds, screen lock, guided profile-photo capture, faster animations). Still read files fresh before editing rather than assuming the layout. Live on entech (`odoo-entech` / LXC 111 on `pve-worker5`).
-- **fusion_repairs** — read [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) before feature work. **Version `19.0.2.2.4`.** Bundles 1–11 shipped in repo (intake, portals, dashboard, pricing, flowcharts, parts/PO). **Not production-deployed** to Westin as of 2026-05-27. Local: `docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init`. Outstanding: RingCentral SMS, C2 history sidebar UI, office follow-up crons (config keys only), `tests/`, more flowchart content, sales-rep dashboard tile in `fusion_authorizer_portal`.
+- **fusion_repairs** — read [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) before feature work. **Version `19.0.2.2.4`.** Bundles 1–11 shipped in repo (intake, portals, dashboard, pricing, flowcharts, parts/PO). **Not production-deployed** to Westin as of 2026-05-27. Local: `docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init`. Outstanding: RingCentral SMS, C2 history sidebar UI, office follow-up crons (config keys only), `tests/`, more flowchart content, sales-rep dashboard tile in `fusion_portal`.
 
 ## Workflow
 - Local dev: `docker exec odoo-modsdev-app odoo -d fusion-dev -u <module> --stop-after-init`

Work in Progress/fusion_quotations/__manifest__.py

@@ -28,7 +28,7 @@
         'website',
         'mail',
         'fusion_claims',
-        'fusion_authorizer_portal',
+        'fusion_portal',
     ],
     'data': [
         'security/security.xml',

docs/superpowers/plans/2026-05-31-fusion-clock-statutory-break.md

@@ -0,0 +1,864 @@
+# Fusion Clock — Province-Aware Automatic Unpaid Break Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Make the unpaid meal break deduct automatically from worked hours on every path (portal, kiosk, NFC, cron, **and manual backend entry**), using a 2-tier per-province rule table (Ontario: 5h→30min, 10h→+30min), with no duplicated logic.
+
+**Architecture:** A new `fusion.clock.break.rule` table holds the per-province thresholds. `hr.employee._get_fclk_break_rule()` resolves an employee's rule from its company's province (global default fallback). `hr.attendance.x_fclk_break_minutes` becomes a single stored **computed** field — `statutory_break(worked_hours) + Σ penalty_minutes` — that recomputes on every save and replaces the four scattered write sites (controller `_apply_break_deduction` ×3 call sites, the auto-clock-out cron, and the penalty code's manual write).
+
+**Tech Stack:** Odoo 19, Python, QWeb/XML views, Odoo test framework (`TransactionCase`).
+
+**Spec:** `docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md`
+
+---
+
+## Dev environment & sync (READ FIRST — applies to every task)
+
+**Two working copies (per project memory `feedback_dual_path_fusion_clock`):**
+- **Git/source tree (edit + commit here):** `K:\Github\Odoo-Modules\fusion_clock`
+- **Docker/active tree (what the container loads):** `K:\Github\odoo-modsdev\addons\fusion_clock`
+
+Edit in the **git tree**, then **mirror to the Docker tree before every test run**:
+
+```powershell
+robocopy "K:\Github\Odoo-Modules\fusion_clock" "K:\Github\odoo-modsdev\addons\fusion_clock" /MIR /XD ".git" "__pycache__" /XF "*.pyc" /NFL /NDL /NJH /NJS; if ($LASTEXITCODE -lt 8) { "sync ok" } else { "sync FAILED" }
+```
+(robocopy exit codes < 8 = success.) **Preflight:** if `K:\Github\odoo-modsdev\addons\fusion_clock` does not exist, the dual-tree setup changed — STOP and confirm the active copy with the user before continuing.
+
+**Container/DB:** `odoo-modsdev-app` / db `modsdev` (per memory `reference_docker_env_names`).
+
+**Canonical commands** (note the ephemeral ports — `--test-enable` forces `http_spawn()` so 8069/8072 collide without them; per repo CLAUDE.md):
+
+- Run this module's tests:
+  ```bash
+  docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
+  ```
+- Plain upgrade (no tests):
+  ```bash
+  docker exec odoo-modsdev-app odoo -d modsdev -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -50
+  ```
+- Pyflakes a changed Python file (catches undefined names instantly):
+  ```bash
+  docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/<relpath>.py
+  ```
+
+**Commit:** only from the git tree (`git -C "K:/Github/Odoo-Modules" ...`). Per memory `feedback_always_push_to_main`, push after each commit on `main`.
+
+---
+
+## File Structure
+
+**Created:**
+- `fusion_clock/models/clock_break_rule.py` — the `fusion.clock.break.rule` model + tier engine + constraints.
+- `fusion_clock/data/clock_break_rule_data.xml` — seed Ontario rule (`is_default`).
+- `fusion_clock/views/clock_break_rule_views.xml` — list/form/action for the rule.
+- `fusion_clock/migrations/19.0.4.1.0/post-migrate.py` — drop retired param + recompute break.
+- `fusion_clock/tests/test_break_rules.py` — all new tests.
+
+**Modified:**
+- `fusion_clock/models/__init__.py` — import the new model.
+- `fusion_clock/models/hr_employee.py` — add `_get_fclk_break_rule()`.
+- `fusion_clock/models/hr_attendance.py` — `x_fclk_break_minutes` → stored compute; drop cron break-write.
+- `fusion_clock/controllers/clock_api.py` — delete `_apply_break_deduction`, its clock-out call, and the penalty break-write.
+- `fusion_clock/controllers/clock_kiosk.py` — delete the `_apply_break_deduction` call.
+- `fusion_clock/controllers/clock_nfc_kiosk.py` — delete the `_apply_break_deduction` call.
+- `fusion_clock/models/res_config_settings.py` — remove `fclk_break_threshold_hours`.
+- `fusion_clock/views/res_config_settings_views.xml` — remove threshold row; relabel default-break as scheduling-only; point to Break Rules.
+- `fusion_clock/data/ir_config_parameter_data.xml` — remove the `break_threshold_hours` seed record.
+- `fusion_clock/security/ir.model.access.csv` — manager access for the new model.
+- `fusion_clock/views/clock_menus.xml` — "Break Rules" config menu.
+- `fusion_clock/__manifest__.py` — version bump + new data/view files.
+- `fusion_clock/tests/__init__.py` — import the new test module.
+- `fusion_clock/tests/test_settings.py` — assert the retired field is gone.
+- `fusion_clock/CLAUDE.md` — model map, settings keys, break gotcha (Task 5).
+
+**Behaviour-change note (intentional, approved by spec §4.3):** today a *late-in* penalty written at clock-in (e.g. +15) is silently swallowed at clock-out because `_apply_break_deduction` does `max(break, current)`. The new compute makes **all** penalty minutes strictly additive (`statutory + Σ penalties`), so a late-in penalty on a long shift is no longer lost. Net hours for such shifts will be correctly lower than before.
+
+---
+
+## Task 1: New model `fusion.clock.break.rule`
+
+**Files:**
+- Create: `fusion_clock/models/clock_break_rule.py`
+- Create: `fusion_clock/data/clock_break_rule_data.xml`
+- Create: `fusion_clock/views/clock_break_rule_views.xml`
+- Create: `fusion_clock/tests/test_break_rules.py`
+- Modify: `fusion_clock/models/__init__.py`
+- Modify: `fusion_clock/tests/__init__.py`
+- Modify: `fusion_clock/security/ir.model.access.csv`
+- Modify: `fusion_clock/views/clock_menus.xml`
+- Modify: `fusion_clock/__manifest__.py`
+
+- [ ] **Step 1: Write the failing tests** — create `fusion_clock/tests/test_break_rules.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import datetime, timedelta
+from odoo.tests import tagged, TransactionCase
+from odoo.exceptions import ValidationError
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestBreakRules(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.auto_deduct_break', 'True')
+        cls.Rule = cls.env['fusion.clock.break.rule']
+        cls.default_rule = cls.Rule.search([('is_default', '=', True)], limit=1)
+        cls.employee = cls.env['hr.employee'].create({'name': 'FCLK Break Test'})
+
+    def _mk_att(self, hours):
+        check_in = datetime(2026, 1, 5, 9, 0, 0)
+        return self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': check_in,
+            'check_out': check_in + timedelta(hours=hours),
+        })
+
+    # ---- Task 1: tier engine + constraints ----
+    def test_break_minutes_for_tiers(self):
+        rule = self.Rule.create({
+            'name': 'Tier Test', 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.assertEqual(rule.break_minutes_for(4.99), 0.0)
+        self.assertEqual(rule.break_minutes_for(5.0), 30.0)
+        self.assertEqual(rule.break_minutes_for(9.99), 30.0)
+        self.assertEqual(rule.break_minutes_for(10.0), 60.0)
+        self.assertEqual(rule.break_minutes_for(12.0), 60.0)
+
+    def test_second_tier_must_exceed_first(self):
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Bad', 'is_default': False,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 5.0, 'break2_minutes': 30.0,
+            })
+
+    def test_single_default_enforced(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Another Default', 'is_default': True, 'active': True,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+            })
+```
+
+  Append the import to `fusion_clock/tests/__init__.py` (add the line if not already present):
+
+```python
+from . import test_break_rules
+```
+
+- [ ] **Step 2: Create the model** — `fusion_clock/models/clock_break_rule.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+
+
+class FusionClockBreakRule(models.Model):
+    _name = 'fusion.clock.break.rule'
+    _description = 'Statutory Break Rule'
+    _order = 'sequence, name'
+
+    name = fields.Char(string='Name', required=True)
+    country_id = fields.Many2one('res.country', string='Country')
+    state_id = fields.Many2one(
+        'res.country.state',
+        string='Province / State',
+        help="Employees whose company is in this province use this rule.",
+    )
+    is_default = fields.Boolean(
+        string='Default Rule',
+        help="Used when an employee's company province matches no other rule. "
+             "Only one active rule may be the default.",
+    )
+    break1_after_hours = fields.Float(
+        string='First Break After (h)', default=5.0,
+        help="Worked hours at or above this trigger the first unpaid break.",
+    )
+    break1_minutes = fields.Float(
+        string='First Break (min)', default=30.0,
+        help="Length of the first unpaid break. 0 disables it.",
+    )
+    break2_after_hours = fields.Float(
+        string='Second Break After (h)', default=10.0,
+        help="Worked hours at or above this add the second unpaid break.",
+    )
+    break2_minutes = fields.Float(
+        string='Second Break (min)', default=30.0,
+        help="Length of the second unpaid break. 0 disables it.",
+    )
+    sequence = fields.Integer(default=10)
+    active = fields.Boolean(default=True)
+
+    def break_minutes_for(self, worked_hours):
+        """Total statutory unpaid break (minutes) for the given worked hours.
+
+        Tiers are inclusive (``>=``): a break applies when worked hours are
+        equal to or greater than the threshold. The second tier adds on top of
+        the first.
+        """
+        self.ensure_one()
+        worked = worked_hours or 0.0
+        total = 0.0
+        if self.break1_minutes and worked >= self.break1_after_hours:
+            total += self.break1_minutes
+        if self.break2_minutes and worked >= self.break2_after_hours:
+            total += self.break2_minutes
+        return total
+
+    @api.constrains('break1_after_hours', 'break1_minutes',
+                    'break2_after_hours', 'break2_minutes')
+    def _check_tiers(self):
+        for rule in self:
+            if min(rule.break1_after_hours, rule.break1_minutes,
+                   rule.break2_after_hours, rule.break2_minutes) < 0:
+                raise ValidationError(_("Break hours and minutes cannot be negative."))
+            if rule.break2_minutes and rule.break2_after_hours <= rule.break1_after_hours:
+                raise ValidationError(_(
+                    "The second break threshold (%(n2)s h) must be greater than "
+                    "the first (%(n1)s h).",
+                    n2=rule.break2_after_hours, n1=rule.break1_after_hours))
+
+    @api.constrains('is_default', 'active')
+    def _check_single_default(self):
+        for rule in self:
+            if rule.is_default and rule.active:
+                dupe = self.search([
+                    ('is_default', '=', True), ('active', '=', True),
+                    ('id', '!=', rule.id),
+                ], limit=1)
+                if dupe:
+                    raise ValidationError(_(
+                        "Only one active break rule can be the default "
+                        "(currently: %s).", dupe.name))
+```
+
+- [ ] **Step 3: Register the model** — add to `fusion_clock/models/__init__.py` after the `clock_penalty` import:
+
+```python
+from . import clock_break_rule
+```
+
+- [ ] **Step 4: Grant access** — append one row to `fusion_clock/security/ir.model.access.csv`:
+
+```
+access_fusion_clock_break_rule_manager,fusion.clock.break.rule.manager,model_fusion_clock_break_rule,group_fusion_clock_manager,1,1,1,1
+```
+
+(No user/portal grant needed — the resolver reads the table via `sudo()`.)
+
+- [ ] **Step 5: Seed the Ontario rule** — create `fusion_clock/data/clock_break_rule_data.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+    <record id="break_rule_ontario" model="fusion.clock.break.rule">
+        <field name="name">Ontario</field>
+        <field name="country_id" ref="base.ca"/>
+        <field name="state_id" ref="base.state_ca_on"/>
+        <field name="is_default" eval="True"/>
+        <field name="break1_after_hours">5.0</field>
+        <field name="break1_minutes">30.0</field>
+        <field name="break2_after_hours">10.0</field>
+        <field name="break2_minutes">30.0</field>
+    </record>
+</odoo>
+```
+
+- [ ] **Step 6: Views + action** — create `fusion_clock/views/clock_break_rule_views.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="view_fusion_clock_break_rule_list" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.list</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="sequence" widget="handle"/>
+                <field name="name"/>
+                <field name="state_id"/>
+                <field name="country_id" optional="hide"/>
+                <field name="break1_after_hours" widget="float_time"/>
+                <field name="break1_minutes"/>
+                <field name="break2_after_hours" widget="float_time"/>
+                <field name="break2_minutes"/>
+                <field name="is_default"/>
+                <field name="active" widget="boolean_toggle"/>
+            </list>
+        </field>
+    </record>
+
+    <record id="view_fusion_clock_break_rule_form" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.form</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <form>
+                <sheet>
+                    <widget name="web_ribbon" title="Archived" bg_color="text-bg-danger"
+                            invisible="active"/>
+                    <div class="oe_title">
+                        <h1><field name="name" placeholder="e.g. Ontario"/></h1>
+                    </div>
+                    <group>
+                        <group string="Jurisdiction">
+                            <field name="country_id"/>
+                            <field name="state_id"
+                                   domain="[('country_id', '=', country_id)]"/>
+                            <field name="is_default"/>
+                            <field name="active"/>
+                        </group>
+                        <group string="Unpaid Break Tiers">
+                            <label for="break1_after_hours" string="First break after"/>
+                            <div class="o_row">
+                                <field name="break1_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break1_minutes"/>
+                                <span>min</span>
+                            </div>
+                            <label for="break2_after_hours" string="Second break after"/>
+                            <div class="o_row">
+                                <field name="break2_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break2_minutes"/>
+                                <span>min</span>
+                            </div>
+                        </group>
+                    </group>
+                    <p class="text-muted">
+                        Breaks are unpaid and deducted from actual worked hours. A tier with
+                        0 minutes is disabled. Triggers are inclusive — a break applies when
+                        worked hours are equal to or above the threshold.
+                    </p>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_break_rule" model="ir.actions.act_window">
+        <field name="name">Break Rules</field>
+        <field name="res_model">fusion.clock.break.rule</field>
+        <field name="view_mode">list,form</field>
+        <field name="context">{'active_test': False}</field>
+        <field name="help" type="html">
+            <p class="o_view_nocontent_smiling_face">Create a statutory break rule</p>
+            <p>Define unpaid meal-break thresholds per province/country. Employees inherit
+               the rule matching their company's province, or the default rule.</p>
+        </field>
+    </record>
+</odoo>
+```
+
+- [ ] **Step 7: Add the menu** — in `fusion_clock/views/clock_menus.xml`, insert after the `menu_fusion_clock_locations_config` menuitem (the Locations config item) and before `menu_fusion_clock_nfc_enrollment`:
+
+```xml
+    <menuitem id="menu_fusion_clock_break_rules"
+              name="Break Rules"
+              parent="menu_fusion_clock_config"
+              action="action_fusion_clock_break_rule"
+              sequence="25"
+              groups="group_fusion_clock_manager"/>
+```
+
+- [ ] **Step 8: Wire the manifest** — in `fusion_clock/__manifest__.py`:
+
+  **Do NOT bump the version yet** — it stays `19.0.4.0.3` until Task 4, so the
+  `19.0.4.1.0` migration actually fires in dev (Odoo only runs a version's migration
+  when the installed version is *lower* than the manifest version).
+
+  Add the seed data file after `'data/ir_config_parameter_data.xml',`:
+```python
+        'data/clock_break_rule_data.xml',
+```
+  Add the view file after `'views/clock_schedule_views.xml',`:
+```python
+        'views/clock_break_rule_views.xml',
+```
+  (Data and view files reload on every `-u` regardless of the version number, so the
+  new model/menu install without a bump. No assets change in this plan, so the bump's
+  only purpose is the migration trigger — deferred to Task 4.)
+
+- [ ] **Step 9: Sync, upgrade, run tests**
+
+  Sync (see preamble), then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
+```
+  Expected: module upgrades cleanly; `test_break_minutes_for_tiers`, `test_second_tier_must_exceed_first`, `test_single_default_enforced` PASS. (Other tests in the class will error until Tasks 2–3 add their dependencies — that's expected if you scoped the run; otherwise the not-yet-added methods simply don't exist yet.)
+
+- [ ] **Step 10: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/clock_break_rule.py fusion_clock/models/__init__.py fusion_clock/data/clock_break_rule_data.xml fusion_clock/views/clock_break_rule_views.xml fusion_clock/views/clock_menus.xml fusion_clock/security/ir.model.access.csv fusion_clock/__manifest__.py fusion_clock/tests/test_break_rules.py fusion_clock/tests/__init__.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): add fusion.clock.break.rule per-province break table" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 2: Jurisdiction resolver on `hr.employee`
+
+**Files:**
+- Modify: `fusion_clock/models/hr_employee.py`
+- Modify: `fusion_clock/tests/test_break_rules.py`
+
+- [ ] **Step 1: Add the resolver tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
+
+```python
+    # ---- Task 2: jurisdiction resolver ----
+    def test_resolver_matches_company_province(self):
+        bc = self.env.ref('base.state_ca_bc')
+        bc_rule = self.Rule.create({
+            'name': 'British Columbia', 'state_id': bc.id, 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.employee.company_id.state_id = bc.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), bc_rule)
+
+    def test_resolver_falls_back_to_default(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        alberta = self.env.ref('base.state_ca_ab')   # no rule for AB
+        self.employee.company_id.state_id = alberta.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), self.default_rule)
+```
+
+- [ ] **Step 2: Run to verify they fail**
+
+  Sync, then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+  Expected: FAIL — `AttributeError: 'hr.employee' object has no attribute '_get_fclk_break_rule'`.
+
+- [ ] **Step 3: Implement the resolver** — in `fusion_clock/models/hr_employee.py`, add this method immediately after the `_get_fclk_break_minutes` method (after its `return float(...)` block, before `_get_fclk_scheduled_times`):
+
+```python
+    def _get_fclk_break_rule(self):
+        """Return the statutory break rule for this employee.
+
+        Resolution: company's province → matching rule; else the global default
+        rule; else an empty recordset (caller treats as zero break). Read via
+        sudo so the portal net-hours compute can resolve it without a direct ACL.
+        """
+        self.ensure_one()
+        Rule = self.env['fusion.clock.break.rule'].sudo()
+        rule = Rule.browse()
+        state = self.company_id.state_id
+        if state:
+            rule = Rule.search([('state_id', '=', state.id)], limit=1)
+        if not rule:
+            rule = Rule.search([('is_default', '=', True)], limit=1)
+        return rule
+```
+
+- [ ] **Step 4: Run to verify they pass**
+
+  Sync, then re-run the Step 2 command. Expected: `test_resolver_matches_company_province` and `test_resolver_falls_back_to_default` PASS.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_employee.py fusion_clock/tests/test_break_rules.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): resolve employee break rule from company province" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 3: `x_fclk_break_minutes` → stored compute; remove all manual writes
+
+This task is atomic: once the field is computed (no inverse), any remaining `write({'x_fclk_break_minutes': ...})` raises at runtime, so the field conversion and the removal of all four write sites must land together.
+
+**Files:**
+- Modify: `fusion_clock/models/hr_attendance.py`
+- Modify: `fusion_clock/controllers/clock_api.py`
+- Modify: `fusion_clock/controllers/clock_kiosk.py`
+- Modify: `fusion_clock/controllers/clock_nfc_kiosk.py`
+- Modify: `fusion_clock/tests/test_break_rules.py`
+
+- [ ] **Step 1: Add the attendance tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
+
+```python
+    # ---- Task 3: automatic deduction on every path ----
+    def test_manual_attendance_applies_statutory_break(self):
+        att = self._mk_att(6)                       # 6h >= 5 -> first break
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 5.5, places=2)
+
+    def test_manual_edit_extends_break(self):
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        att.check_out = att.check_in + timedelta(hours=10)   # now >= 10
+        self.assertEqual(att.x_fclk_break_minutes, 60.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 9.0, places=2)
+
+    def test_under_first_threshold_no_break(self):
+        att = self._mk_att(4)                       # 4h < 5 -> nothing
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 4.0, places=2)
+
+    def test_penalty_minutes_are_additive(self):
+        att = self._mk_att(6)                       # statutory 30
+        self.env['fusion.clock.penalty'].create({
+            'attendance_id': att.id,
+            'employee_id': self.employee.id,
+            'penalty_type': 'early_out',
+            'penalty_minutes': 15.0,
+            'date': att.check_in.date(),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 45.0)
+
+    def test_master_toggle_off_zero_statutory(self):
+        self.ICP.set_param('fusion_clock.auto_deduct_break', 'False')
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+
+    def test_open_attendance_zero_break(self):
+        att = self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': datetime(2026, 1, 5, 9, 0, 0),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+```
+
+- [ ] **Step 2: Run to verify they fail**
+
+  Sync, then run the module tests. Expected: the new tests FAIL — e.g. `test_manual_attendance_applies_statutory_break` asserts 30 but gets 0 (no write override exists yet).
+
+- [ ] **Step 3: Convert the field to a stored compute** — in `fusion_clock/models/hr_attendance.py`, replace the field definition:
+
+  OLD:
+```python
+    x_fclk_break_minutes = fields.Float(
+        string='Break (min)',
+        default=0.0,
+        tracking=True,
+        help="Break duration in minutes to deduct from worked hours.",
+    )
+```
+  NEW:
+```python
+    x_fclk_break_minutes = fields.Float(
+        string='Break (min)',
+        compute='_compute_fclk_break_minutes',
+        store=True,
+        tracking=True,
+        help="Unpaid break deducted from worked hours: statutory break (per the "
+             "employee's province rule, from actual hours worked) plus any penalty "
+             "minutes. Computed automatically on every save.",
+    )
+```
+
+- [ ] **Step 4: Add the compute method** — in the same file, insert this method immediately before the `_compute_net_hours` method (just above its `@api.depends('worked_hours', 'x_fclk_break_minutes')` decorator):
+
+```python
+    @api.depends('worked_hours', 'check_out',
+                 'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
+    def _compute_fclk_break_minutes(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
+        for att in self:
+            statutory = 0.0
+            if auto and att.check_out and att.employee_id:
+                rule = att.employee_id._get_fclk_break_rule()
+                if rule:
+                    statutory = rule.break_minutes_for(att.worked_hours or 0.0)
+            penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
+            att.x_fclk_break_minutes = statutory + penalties
+```
+
+- [ ] **Step 5: Remove the cron's break write** — in the same file, inside `_cron_fusion_auto_clock_out`:
+
+  Remove the now-unused threshold read (the line near the top of the method):
+```python
+        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
+```
+  Remove the two now-unused locals in the per-attendance loop:
+```python
+            emp_tz = pytz.timezone(employee.tz or self.env.company.tz or 'UTC')
+            check_in_date = pytz.UTC.localize(check_in).astimezone(emp_tz).date()
+```
+  Remove the break-write block (the compute now applies the break when `check_out` is set):
+```python
+                    if (att.worked_hours or 0) >= threshold:
+                        att.sudo().write(
+                            {'x_fclk_break_minutes': employee._get_fclk_break_minutes(check_in_date)}
+                        )
+```
+  (Leave the surrounding `employee = att.employee_id` and `clock_out_time = effective_deadline` lines intact.)
+
+- [ ] **Step 6: Delete the controller helper and its call sites** — in `fusion_clock/controllers/clock_api.py`:
+
+  Delete the entire `_apply_break_deduction` method:
+```python
+    def _apply_break_deduction(self, attendance, employee):
+        """Apply automatic break deduction if configured."""
+        ICP = request.env['ir.config_parameter'].sudo()
+        if ICP.get_param('fusion_clock.auto_deduct_break', 'True') != 'True':
+            return
+
+        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
+        worked = attendance.worked_hours or 0.0
+
+        if worked >= threshold:
+            local_date = get_local_today(request.env, employee)
+            if attendance.check_in:
+                tz_name = (
+                    employee.resource_id.tz
+                    or (employee.user_id.partner_id.tz if employee.user_id else False)
+                    or employee.company_id.partner_id.tz
+                    or 'UTC'
+                )
+                local_date = pytz.UTC.localize(attendance.check_in).astimezone(pytz.timezone(tz_name)).date()
+            break_min = employee._get_fclk_break_minutes(local_date)
+            current = attendance.x_fclk_break_minutes or 0.0
+            # Set to whichever is higher: configured break or existing (penalty-inflated) value
+            new_val = max(break_min, current)
+            if new_val != current:
+                attendance.sudo().write({'x_fclk_break_minutes': new_val})
+
+```
+  Delete its clock-out call (in the CLOCK OUT branch):
+```python
+                # Apply break deduction
+                self._apply_break_deduction(attendance, employee)
+
+```
+  Delete the penalty break-write in `_check_and_create_penalty` (keep the penalty-record `create` above it and the activity log below it):
+```python
+            # Deduct penalty minutes from attendance (adds to break deduction)
+            current_break = attendance.x_fclk_break_minutes or 0.0
+            attendance.sudo().write({
+                'x_fclk_break_minutes': current_break + deduction,
+            })
+
+```
+
+- [ ] **Step 7: Delete the kiosk call sites**
+
+  In `fusion_clock/controllers/clock_kiosk.py`, delete the line:
+```python
+                api._apply_break_deduction(attendance, employee)
+```
+  In `fusion_clock/controllers/clock_nfc_kiosk.py`, delete the line:
+```python
+            api._apply_break_deduction(attendance, employee)
+```
+
+- [ ] **Step 8: Pyflakes the touched controllers/models** (catches a missed `pytz`/var reference instantly)
+
+```bash
+docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/controllers/clock_api.py /mnt/extra-addons/fusion_clock/controllers/clock_kiosk.py /mnt/extra-addons/fusion_clock/controllers/clock_nfc_kiosk.py /mnt/extra-addons/fusion_clock/models/hr_attendance.py
+```
+  Expected: no output (clean). If it flags `pytz` as unused in `hr_attendance.py`, that's fine only if no other code uses it — verify before removing the import (the absence/overtime crons still use `pytz`, so leave the import).
+
+- [ ] **Step 9: Run to verify all Task 3 tests pass**
+
+  Sync, then run the module tests. Expected: all `test_manual_*`, `test_under_first_threshold_no_break`, `test_penalty_minutes_are_additive`, `test_master_toggle_off_zero_statutory`, `test_open_attendance_zero_break` PASS, and the existing NFC/kiosk/dashboard tests still PASS.
+
+- [ ] **Step 10: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_attendance.py fusion_clock/controllers/clock_api.py fusion_clock/controllers/clock_kiosk.py fusion_clock/controllers/clock_nfc_kiosk.py fusion_clock/tests/test_break_rules.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): auto-apply statutory break via one stored compute" -m "x_fclk_break_minutes is now statutory(worked_hours) + penalties, recomputed on every path including manual backend entry. Removes the four duplicated write sites (controller _apply_break_deduction + 3 call sites, auto-clock-out cron, penalty write)." -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 4: Retire `break_threshold_hours`; clean settings & migrate
+
+**Files:**
+- Modify: `fusion_clock/models/res_config_settings.py`
+- Modify: `fusion_clock/views/res_config_settings_views.xml`
+- Modify: `fusion_clock/data/ir_config_parameter_data.xml`
+- Create: `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`
+- Modify: `fusion_clock/tests/test_settings.py`
+
+- [ ] **Step 1: Add the dead-setting assertion** — in `fusion_clock/tests/test_settings.py`, add one line to `test_dead_settings_removed`:
+
+```python
+        self.assertNotIn('fclk_break_threshold_hours', fields)
+```
+
+- [ ] **Step 2: Remove the settings field** — in `fusion_clock/models/res_config_settings.py`, delete:
+
+```python
+    fclk_break_threshold_hours = fields.Float(
+        string='Break Threshold (hours)',
+        config_parameter='fusion_clock.break_threshold_hours',
+        default=4.0,
+        help="Only deduct break if shift is longer than this many hours.",
+    )
+```
+
+- [ ] **Step 3: Fix the settings view** — in `fusion_clock/views/res_config_settings_views.xml`, replace the whole `fclk_auto_break` setting block:
+
+  OLD:
+```xml
+                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
+                                 help="Automatically deduct unpaid break from worked hours on clock-out.">
+                            <field name="fclk_auto_deduct_break"/>
+                            <div class="content-group" invisible="not fclk_auto_deduct_break">
+                                <div class="row mt16">
+                                    <label for="fclk_default_break_minutes" string="Duration (min)" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_default_break_minutes"/>
+                                </div>
+                                <div class="row mt8">
+                                    <label for="fclk_break_threshold_hours" string="Min. Shift" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_break_threshold_hours" widget="float_time"/>
+                                </div>
+                            </div>
+                        </setting>
+```
+  NEW:
+```xml
+                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
+                                 help="Automatically deduct the statutory unpaid break from worked hours. Break lengths and thresholds are configured per province under Configuration → Break Rules.">
+                            <field name="fclk_auto_deduct_break"/>
+                            <div class="content-group" invisible="not fclk_auto_deduct_break">
+                                <div class="row mt16">
+                                    <label for="fclk_default_break_minutes" string="Default scheduling break (min)" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_default_break_minutes"/>
+                                </div>
+                                <div class="text-muted small mt4">
+                                    Used as the default break when building shifts/schedules
+                                    (planned hours). Actual deductions follow the province Break Rules.
+                                </div>
+                            </div>
+                        </setting>
+```
+
+- [ ] **Step 4: Remove the seed param** — in `fusion_clock/data/ir_config_parameter_data.xml`, delete:
+
+```xml
+    <record id="config_break_threshold_hours" model="ir.config_parameter">
+        <field name="key">fusion_clock.break_threshold_hours</field>
+        <field name="value">4.0</field>
+    </record>
+```
+
+- [ ] **Step 5: Bump the version + create the migration**
+
+  First bump the manifest so the migration fires (installed `19.0.4.0.3` < manifest
+  `19.0.4.1.0`). In `fusion_clock/__manifest__.py`:
+```python
+    'version': '19.0.4.1.0',
+```
+  Then create `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import api, SUPERUSER_ID
+
+
+def migrate(cr, version):
+    """Retire the single-threshold break param (superseded by per-rule
+    break1_after_hours), and force-recompute the now-computed break field so
+    existing closed attendances reflect the province rule + their penalties."""
+    cr.execute(
+        "DELETE FROM ir_config_parameter WHERE key = %s",
+        ('fusion_clock.break_threshold_hours',),
+    )
+    env = api.Environment(cr, SUPERUSER_ID, {})
+    Attendance = env['hr.attendance']
+    field = Attendance._fields['x_fclk_break_minutes']
+    closed = Attendance.search([('check_out', '!=', False)])
+    if closed:
+        env.add_to_compute(field, closed)
+        closed.flush_recordset(['x_fclk_break_minutes'])
+```
+
+- [ ] **Step 6: Sync, upgrade, run tests**
+
+  Sync, then run the module tests. Expected: module upgrades cleanly and the `19.0.4.1.0` migration executes (installed `19.0.4.0.3` < manifest `19.0.4.1.0`; modsdev shows the INFO line, nexa/entech run `log_level=warn`), `test_dead_settings_removed` PASS, full `fusion_clock` suite green.
+
+- [ ] **Step 7: Verify the param is gone and historical rows recomputed** (sanity)
+
+```bash
+docker exec odoo-modsdev-app odoo shell -d modsdev --no-http 2>/dev/null <<'PY'
+ICP = env['ir.config_parameter'].sudo()
+print('threshold param:', ICP.get_param('fusion_clock.break_threshold_hours', 'ABSENT'))
+print('default rule:', env['fusion.clock.break.rule'].search([('is_default','=',True)]).mapped('name'))
+PY
+```
+  Expected: `threshold param: ABSENT`; `default rule: ['Ontario']`.
+
+- [ ] **Step 8: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/migrations/19.0.4.1.0/post-migrate.py fusion_clock/tests/test_settings.py fusion_clock/__manifest__.py
+git -C "K:/Github/Odoo-Modules" commit -m "refactor(fusion_clock): retire break_threshold_hours; breaks now driven by Break Rules" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 5: Full verification, docs, manual smoke
+
+**Files:**
+- Modify: `fusion_clock/CLAUDE.md`
+
+- [ ] **Step 1: Full test run (whole module)**
+
+  Sync, then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -120
+```
+  Expected: all `fusion_clock` tests PASS, zero tracebacks. If anything fails, fix before continuing.
+
+- [ ] **Step 2: Manual smoke (manager UI)** at http://localhost:8082
+
+  - Configuration → **Break Rules** exists; the **Ontario** row shows 5h→30 / 10h→30, Default ticked.
+  - Attendances → create a manual attendance, check-in 09:00 check-out 15:00 (6h) → **Break = 30**, Net = 5.5h, with no clock action.
+  - Edit that record's check-out to 19:00 (10h) → **Break = 60**, Net = 9.0h.
+  - Create a 4h attendance → **Break = 0**.
+  - Settings → the old "Min. Shift" threshold field is gone; the Auto-Deduct Break help points to Break Rules.
+
+- [ ] **Step 3: Update the module CLAUDE.md** — in `fusion_clock/CLAUDE.md`:
+
+  - §4 Model Map: add a row — `fusion.clock.break.rule | models/clock_break_rule.py | Per-province statutory unpaid-break thresholds (2-tier).`
+  - §5 Clocking Flow: note that the break deduction is no longer a controller step — `x_fclk_break_minutes` is a stored compute (`statutory(worked_hours) + Σ penalties`) that fires on every path including manual backend entry; resolved rule via `hr.employee._get_fclk_break_rule()` (company province → default).
+  - §11 Settings Keys: remove `fusion_clock.break_threshold_hours`.
+  - §13 Gotchas: add — "Unpaid break is computed, not written: never `write({'x_fclk_break_minutes': ...})`; change the province rule (`fusion.clock.break.rule`) or `auto_deduct_break` instead. Penalty minutes are now strictly additive (the old `max()` that swallowed late-in penalties is gone)."
+  - Bump the version line in §1 to `19.0.4.1.0`.
+
+- [ ] **Step 4: Commit the docs**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/CLAUDE.md
+git -C "K:/Github/Odoo-Modules" commit -m "docs(fusion_clock): document province break rules + computed break field" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+- [ ] **Step 5: Report** — summarize what changed, the behaviour-change note (penalties now additive), and that live deployment to entech (`odoo-entech`) is a separate step pending user sign-off.
+
+---
+
+## Self-Review (performed against the spec)
+
+**1. Spec coverage**
+- §4.1 model → Task 1. §4.2 resolver → Task 2. §4.3 stored compute → Task 3. §4.4 removals → Task 3 (writes) + Task 4 (setting/param/view). §4.5 UI/security/data → Task 1 (+ settings view in Task 4). §5 edge cases → tests in Tasks 1 & 3. §6 migration → Task 4. §7 tests → all six+ cases present across Tasks 1–3. §8 rollout → preamble + Task 5. ✓ No gaps.
+
+**2. Placeholder scan** — every step has full code/commands; no TBD/TODO/"similar to". ✓
+
+**3. Type/name consistency** — `break_minutes_for`, `_get_fclk_break_rule`, `_compute_fclk_break_minutes`, fields `break1_after_hours/break1_minutes/break2_after_hours/break2_minutes/is_default`, model `fusion.clock.break.rule`, access id `model_fusion_clock_break_rule`, action `action_fusion_clock_break_rule`, menu `menu_fusion_clock_break_rules` — all used identically across tasks. The compute folds `Σ penalty_minutes` (field `penalty_minutes` on `fusion.clock.penalty`, confirmed). ✓

docs/superpowers/plans/2026-06-02-accessibility-funding-selector.md

@@ -0,0 +1,43 @@
+# Accessibility Funding-Source Selector — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: superpowers:executing-plans (inline) — this is a 3-file change. Steps use `- [ ]` checkboxes.
+
+**Goal:** Let the rep mark an accessibility assessment's funding source (Private / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other) on the web form, so the generated sale order routes to the correct funding pipeline instead of always defaulting to private pay.
+
+**Architecture:** The model (`fusion.accessibility.assessment.x_fc_funding_source`) and the SO routing (`_create_draft_sale_order` → `sale_type_map` → `x_fc_sale_type`) already exist (the "2026-04 portal audit fix"). The only gaps: (1) the form has no funding field, (2) the save controller never reads `funding_source` from the POST, (3) `hardship` is missing from the selectable funding sources. The submit JS already serialises every named form field via `FormData`, so no JS change is needed.
+
+**Tech Stack:** Odoo 19, QWeb portal template, JSON-RPC controller. Module `fusion_portal` (worktree `K:\Github\Odoo-Modules-wt-portal`, branch `feat/assessment-visit`).
+
+**Verification constraint:** `fusion_portal` depends on Enterprise `knowledge`, so it can NOT be installed on the local Community Docker. Syntax-check with host Python; functional verification is on westin (or a clone): pick "March of Dimes" on a form → the draft SO gets `x_fc_sale_type='march_of_dimes'` and lands in the MOD pipeline.
+
+---
+
+### Task 1: Add Hardship to the funding source + route it
+
+**Files:** Modify `fusion_portal/models/accessibility_assessment.py` (selection ~:71-87, `sale_type_map` ~:771-779)
+
+- [ ] **Step 1:** Add `('hardship', 'Hardship Funding')` to the `x_fc_funding_source` selection list (after `'wsib'`).
+- [ ] **Step 2:** Add `'hardship': 'hardship',` to `sale_type_map` in `_create_draft_sale_order` (the target `x_fc_sale_type='hardship'` already exists in `fusion_claims` `sale_order.py:332`).
+- [ ] **Step 3:** `python -m py_compile fusion_portal/models/accessibility_assessment.py` → no error.
+- [ ] **Step 4:** Commit.
+
+### Task 2: Add the funding select to the shared client-info form
+
+**Files:** Modify `fusion_portal/views/portal_accessibility_templates.xml` (`accessibility_client_info_section`, ~:366-375)
+
+- [ ] **Step 1:** Add a new row with a `<select name="funding_source">` (options mirror the model selection; `direct_private` pre-selected so existing private behaviour is unchanged) right after the phone/email row, before the card closes.
+- [ ] **Step 2:** Validate XML well-formedness (`[xml]` parse).
+- [ ] **Step 3:** Commit.
+
+### Task 3: Capture funding_source in the save controller
+
+**Files:** Modify `fusion_portal/controllers/portal_main.py` (`accessibility_assessment_save` vals, ~:2498-2511)
+
+- [ ] **Step 1:** Add `'x_fc_funding_source': post.get('funding_source') or 'direct_private',` to the `vals` dict.
+- [ ] **Step 2:** `python -m pyflakes fusion_portal/controllers/portal_main.py` → no new undefined-name errors.
+- [ ] **Step 3:** Commit.
+
+### Task 4: Verify + ship
+
+- [ ] **Step 1:** Grep confirms `funding_source` flows form → controller → `x_fc_funding_source` → `sale_type_map`.
+- [ ] **Step 2:** Deploy to westin (backup → scp the 3 files → `-u fusion_portal` → cache-bust → restart) and confirm: open `/my/accessibility/stairlift/straight`, pick "March of Dimes", complete → the new SO shows `x_fc_sale_type = march_of_dimes` and appears in the MOD pipeline.

docs/superpowers/specs/2026-05-20-fusion-repairs-design.md

@@ -109,7 +109,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | T1 | **Open in Maps button on task** | 2 | `geo:` / Apple Maps URL; one-tap |
 | T2 | **AI pre-visit brief on mobile form** | 2 | Surfaces `x_fc_ai_summary` prominently; "What to bring" + safety flags |
 | T3 | Labour timer via fusion_clock | 3 | Tap Start/Pause; final time pre-fills visit report |
-| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_authorizer_portal`](fusion_authorizer_portal)) |
+| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_portal`](fusion_portal)) |
 | T5 | "Found another issue" button | 2 | Spawn new repair from current visit, same partner, different equipment |
 | T6 | Parts replaced — serial capture | 3 | Scan/type replaced part serials; stores for OEM warranty + traceability |
 | T7 | No-show photo proof | 3 | "Client not home" → camera → photo attached → repair flagged + service-call fee added |
@@ -164,11 +164,11 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | CL19 | **Voice input → AI transcription** | 4 | Client speaks the problem into mic, AI transcribes + classifies |
 | CL20 | **Resolution survey + Google review** | 2 | After "resolved" outcome, ask "save you time today?" + Google review CTA |
 
-### Sales rep portal (mirrors fusion_authorizer_portal pattern)
+### Sales rep portal (mirrors fusion_portal pattern)
 
 | ID | Feature | Phase | Notes |
 |----|---------|-------|-------|
-| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 11 |
+| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 11 |
 | S2 | Sales rep dashboard tile | 1 | Add "Service Calls" tile to `/my/sales-rep/dashboard` showing count of repairs they logged + recent 5 |
 | S3 | **My Service Calls** list page | 1 | `/my/repairs` — sales rep sees their submitted repairs, status, assigned tech, scheduled date |
 | S4 | View repair status from portal | 1 | `/my/repair/<id>` — read-only timeline, chatter for non-internal messages, ability to add a comment |
@@ -183,7 +183,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 
 **Routing namespace:** `/my/repair/*` (intake + my list) and a `/my/sales-rep/repairs` summary route added to the existing sales rep dashboard.
 
-**Record rule** (mirrors [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 129 pattern):
+**Record rule** (mirrors [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 129 pattern):
 
 ```xml
 <record id="rule_repair_order_sales_rep_portal" model="ir.rule">
@@ -236,7 +236,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
     'website',                  # QWeb portal templates
     'fusion_tasks',             # technician tasks + fusion.email.builder.mixin
     'fusion_poynt',             # payment collection
-    'fusion_authorizer_portal', # sales rep portal flag + group + dashboard scaffold
+    'fusion_portal', # sales rep portal flag + group + dashboard scaffold
 ]
 # Phase 3 soft-add: 'appointment', 'fusion_schedule' for client self-booking
 # Phase 3 soft-add: 'fusion_clock' for tech labour timer (T3)
@@ -245,7 +245,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 # Phase 3 soft-add: 'fusion_ringcentral' for SMS verify (CL12) + voicemail greeting (CL16) + caller-ID launch (Phase 4)
 # Phase 4 soft-add: 'fusion_shipping', 'fusion_canada_post' for mail-in repairs (M4)
 # Soft-call (no depend) at runtime: 'fusion.api.service' via try/except per fusion-api-integration rule
-# NOTE: fusion_authorizer_portal transitively pulls fusion_claims — accepted for portal reuse
+# NOTE: fusion_portal transitively pulls fusion_claims — accepted for portal reuse
 ```
 
 Before coding any Odoo 19 view/JS, read reference files from local OrbStack Docker per project rules.
@@ -712,7 +712,7 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 ---
 
-## Sales rep portal (Phase 1 — mirrors fusion_authorizer_portal)
+## Sales rep portal (Phase 1 — mirrors fusion_portal)
 
 **Goal:** A sales rep on the road takes a client call and submits a repair request from their phone — same intake flow as backend CS wizard, no Odoo login screen.
 
@@ -720,10 +720,10 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 | Option | Recommendation |
 |--------|----------------|
-| **Hard depend on `fusion_authorizer_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
+| **Hard depend on `fusion_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
 | Soft depend (try/except + own fallback flag) | Possible but doubles the code: own `is_sales_rep_portal` mirror + own group. Only worth it if you ever want fusion_repairs standalone. |
 
-We go with hard depend. Add `fusion_authorizer_portal` to the manifest `depends` list.
+We go with hard depend. Add `fusion_portal` to the manifest `depends` list.
 
 ### Architecture
 
@@ -740,7 +740,7 @@ flowchart LR
 
 ### Controller layout ([`controllers/portal_sales_rep_repair.py`](fusion_repairs/controllers/portal_sales_rep_repair.py))
 
-Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_authorizer_portal/controllers/portal_assessment.py`](fusion_authorizer_portal/controllers/portal_assessment.py) line 25):
+Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_portal/controllers/portal_assessment.py`](fusion_portal/controllers/portal_assessment.py) line 25):
 
 | Route | Type | Purpose |
 |-------|------|---------|
@@ -767,14 +767,14 @@ Avoids the trap of two intake flows drifting out of sync.
 
 ### Templates ([`views/portal_sales_rep_templates.xml`](fusion_repairs/views/portal_sales_rep_templates.xml))
 
-QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style:
+QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style:
 
 - `portal_repair_intake_form` — multi-step (accordion or stepper) with same 5 sections as backend wizard
 - `portal_repair_list` — card list with status badge, scheduled date, tech name
 - `portal_repair_detail` — timeline + chatter
 - `portal_repair_intake_thanks` — confirmation page with "Submit Another" button (common on multi-call days)
 
-Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_authorizer_portal/controllers/portal_main.py) line 85.
+Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_portal/controllers/portal_main.py) line 85.
 
 ### JS ([`static/src/js/portal_repair_intake.js`](fusion_repairs/static/src/js/portal_repair_intake.js))
 
@@ -860,7 +860,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Reused (do NOT recreate):**
 - [`fusion_tasks.group_field_technician`](fusion_tasks/security/security.xml) — for technician access to `repair.order` (parallel to existing tech task rules). Same domain `('technician_id', '=', user.id)` adapted as `('x_fc_technician_task_ids.technician_id', '=', user.id)` on repair orders
-- [`fusion_authorizer_portal.group_sales_rep_portal`](fusion_authorizer_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
+- [`fusion_portal.group_sales_rep_portal`](fusion_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
 
 **New groups specific to fusion_repairs:**
 - `group_fusion_repairs_user` — CS intake, view repairs (implied by `base.group_user`)
@@ -896,7 +896,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Sales rep portal (S1-S4, S6, S8):**
 - Portal controllers `/my/repair/new`, `/my/repairs`, `/my/repair/<id>`
-- Mobile-friendly QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style
+- Mobile-friendly QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style
 - Same intake question flow as backend (via shared service layer)
 - Mobile photo / camera capture
 - Client history sidebar exposed in portal form
@@ -1137,7 +1137,7 @@ After implementation, test on local dev only:
 | Backend wizard and sales rep portal drift apart | Both call the same `fusion.repair.intake.service.create_repair_orders(payload)` AbstractModel method; no duplicate business logic |
 | Sales rep accidentally sees other reps' repairs | Record rule `('x_fc_intake_user_id', '=', user.id)` scoped to `base.group_portal`; integration test asserts cross-rep isolation |
 | Portal form abandoned mid-flow on call drop | Save partial state to `localStorage` keyed by partner + timestamp; "Resume" prompt on `/my/repair/new` if recent draft exists |
-| fusion_authorizer_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_authorizer_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
+| fusion_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
 | **Public form spam / abuse** | reCAPTCHA v3 + honeypot + per-IP rate limit + per-phone rate limit + SMS verify before submit (Phase 2). Block ASN ranges via Odoo's `ir.rule` if needed |
 | **AI giving unsafe medical advice** | Strict system prompt + JSON schema validation + keyword filter (rejects "diagnose", "you have", "stop using"); falls back to deterministic rules on any malformed/unsafe output; legal disclaimer "this is not medical advice" shown on every AI step |
 | **AI cost runaway from public traffic** | Hard daily/monthly budget cap via `fusion.api.service`; CAPTCHA gates AI calls; cache results for identical symptom-category pairs; deterministic fallback never costs anything |

docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md

@@ -0,0 +1,256 @@
+# Fusion Clock — Province-Aware Automatic Unpaid Break (2-tier)
+
+- **Date:** 2026-05-31
+- **Module:** `fusion_clock`
+- **Version bump:** `19.0.4.0.3` → `19.0.4.1.0`
+- **Status:** Approved design, pending implementation plan
+- **Author:** Claude Code (brainstormed with user)
+
+## 1. Problem
+
+Statutory unpaid meal breaks are jurisdiction-driven: a break is required after N1
+hours of work, and a second break after a higher N2 threshold. Ontario, for example:
+a 30-minute eating period after 5 hours of work, and (per the user's policy) another
+30 minutes after 10 hours. The deduction must be **automatic** and must apply on **every**
+way an attendance is recorded — including a manager manually adding or editing hours.
+
+### Audit of current behaviour (what exists today)
+
+The deduction field is `hr.attendance.x_fclk_break_minutes` (minutes). Net hours are
+`x_fclk_net_hours = worked_hours − x_fclk_break_minutes/60` (`models/hr_attendance.py:261`).
+
+Break minutes are written from **four** places, all implementing variations of one rule:
+
+1. `controllers/clock_api.py::_apply_break_deduction` (line 161) — on **clock-out**;
+   reused by the PIN kiosk (`controllers/clock_kiosk.py:158`) and NFC kiosk
+   (`controllers/clock_nfc_kiosk.py:381`). Logic: `if worked_hours >= break_threshold_hours`
+   (default **4.0h**) → set break to `employee._get_fclk_break_minutes()` (default **30**),
+   using `max(new, current)` so it doesn't wipe penalty minutes.
+2. Auto-clock-out cron (`models/hr_attendance.py:343`) — same single-threshold write.
+3. `controllers/clock_api.py::_check_and_create_penalty` (line 140) — **adds** penalty
+   minutes into the same `x_fclk_break_minutes` field.
+
+### Gaps vs. requirement
+
+1. **Single tier only** — one threshold (4h), one break (30m). No second break.
+2. **Not applied on manual entry** — there is **no `create`/`write` override** on
+   `hr.attendance`. A manager-created or manager-edited attendance gets break `= 0`.
+   This is the central gap.
+3. **No province/country awareness** — no jurisdiction field exists anywhere (location
+   has address/timezone but no province; company has none). Threshold + amount are flat
+   global config params.
+4. **First-break default is 4h, not 5h** (Ontario is 5h).
+
+## 2. Goals / Non-goals
+
+**Goals**
+- Statutory unpaid break applies automatically based on **actual worked hours**, on every
+  path (portal, systray, PIN kiosk, NFC kiosk, auto-clock-out cron, **and manual backend
+  create/edit**).
+- Two tiers: first break after N1 hours, second break adds after N2 hours. Trigger is
+  `worked_hours >= N` (inclusive; nothing under N1).
+- Rules are defined **per province/country** in a table; an employee resolves its rule
+  from its **company's province**, with a single global default fallback.
+- **Eliminate the duplicated deduction logic** — one calculator, called everywhere.
+
+**Non-goals (YAGNI)**
+- Per-employee break-rule override (resolver is structured so this is a cheap add later).
+- GPS/location-based jurisdiction detection.
+- More than two tiers (the table is 2-tier; a 3rd break would be a future schema change).
+- Changing the *planned* break concept used for scheduled-hours math.
+
+## 3. Locked decisions
+
+| # | Decision | Choice |
+|---|---|---|
+| 1 | Rule model | **Per-province table**, 2-tier (`fusion.clock.break.rule`) |
+| 2 | Jurisdiction source | **Company province** (`company_id.state_id`) + global default fallback |
+| 3 | Override behaviour | **Fully automatic** — idempotent stored compute, recomputes on every save |
+| 4 | Planned-vs-statute | **Statutory only** — the planned/scheduled break never affects the actual deduction |
+
+## 4. Design
+
+### 4.1 New model `fusion.clock.break.rule`
+
+`models/clock_break_rule.py`, `_name = 'fusion.clock.break.rule'`,
+`_description = 'Statutory Break Rule'`, `_order = 'sequence, name'`.
+
+| Field | Type | Default | Notes |
+|---|---|---|---|
+| `name` | Char (required) | — | e.g. "Ontario" |
+| `country_id` | Many2one `res.country` | — | scopes the province picker |
+| `state_id` | Many2one `res.country.state` | — | the province; `domain` on `country_id` |
+| `is_default` | Boolean | False | global fallback when no province matches |
+| `break1_after_hours` | Float | 5.0 | first break trigger N1 |
+| `break1_minutes` | Float | 30.0 | first break amount M1 (0 = disabled) |
+| `break2_after_hours` | Float | 10.0 | second break trigger N2 |
+| `break2_minutes` | Float | 30.0 | second break amount M2 (0 = disabled) |
+| `sequence` | Integer | 10 | |
+| `active` | Boolean | True | |
+
+**Constraints** (`models.Constraint`, per repo Odoo-19 rule 9):
+- `break1_after_hours >= 0`, `break2_after_hours >= 0`, minutes `>= 0`.
+- When `break2_minutes > 0`: `break2_after_hours > break1_after_hours`
+  (a misordered second tier is a config error).
+- (Soft) at most one `is_default = True` — enforced in a Python `@api.constrains`
+  rather than a partial unique index, to give a friendly message.
+
+**Method** — `break_minutes_for(self, worked_hours)`:
+```
+self.ensure_one()
+total = 0.0
+if self.break1_minutes and worked_hours >= self.break1_after_hours:
+    total += self.break1_minutes
+if self.break2_minutes and worked_hours >= self.break2_after_hours:
+    total += self.break2_minutes
+return total
+```
+`>=` is intentional and matches the requirement ("equal to or more than N1").
+
+**Seed** (`data/clock_break_rule_data.xml`, `noupdate="1"`): one row —
+`name="Ontario"`, `state_id=base.state_ca_on`, `is_default=True`,
+`break1_after_hours=5.0`, `break1_minutes=30.0`,
+`break2_after_hours=10.0`, `break2_minutes=30.0`.
+(Acting as both the Ontario match and the global fallback for this deployment.
+Other provinces can be added as rows.)
+
+### 4.2 Jurisdiction resolver — `hr.employee._get_fclk_break_rule()`
+
+```
+self.ensure_one()
+Rule = self.env['fusion.clock.break.rule'].sudo()
+state = self.company_id.state_id
+rule = Rule.browse()
+if state:
+    rule = Rule.search([('state_id', '=', state.id)], limit=1)
+if not rule:
+    rule = Rule.search([('is_default', '=', True)], limit=1)
+return rule   # may be empty recordset → caller treats as 0 break
+```
+`sudo()` so the portal net-hours compute (run as the employee) can read the rule table
+without a direct ACL grant. Resolver is a single method → adding a per-employee override
+(`x_fclk_break_rule_id`) later is a two-line change.
+
+### 4.3 `hr.attendance` — `x_fclk_break_minutes` becomes a stored compute
+
+The field changes from a plain editable Float to a **stored computed** field — this is the
+single calculator that replaces all four write sites.
+
+```python
+x_fclk_break_minutes = fields.Float(
+    string='Break (min)',
+    compute='_compute_fclk_break_minutes',
+    store=True,
+    tracking=True,
+    help="Unpaid break deducted from worked hours: statutory break (by province "
+         "rule, from actual hours worked) plus any penalty minutes.",
+)
+
+@api.depends('worked_hours', 'check_out',
+             'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
+def _compute_fclk_break_minutes(self):
+    ICP = self.env['ir.config_parameter'].sudo()
+    auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
+    for att in self:
+        statutory = 0.0
+        if auto and att.check_out and att.employee_id:
+            rule = att.employee_id._get_fclk_break_rule()
+            if rule:
+                statutory = rule.break_minutes_for(att.worked_hours or 0.0)
+        penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
+        att.x_fclk_break_minutes = statutory + penalties
+```
+
+Properties:
+- **Idempotent** — same hours + same penalties always yield the same value; no drift,
+  nothing to wipe.
+- **Fires on every path** — `worked_hours` recomputes whenever `check_in`/`check_out`
+  change, so portal, kiosk, NFC, cron, **and manual backend create/edit** all recompute
+  automatically. This is what fixes the manual-entry gap.
+- **Mid-shift = 0** — `check_out` empty → statutory 0 (penalties, if any, still counted).
+- **Master toggle preserved** — `auto_deduct_break` False → statutory 0 (penalties remain).
+- `_compute_net_hours` is unchanged (still `worked_hours − break/60`); it now depends on a
+  computed-stored field, which Odoo chains correctly.
+
+The attendance form's Break field becomes read-only (consistent with "fully automatic").
+`views/hr_attendance_views.xml` updated accordingly.
+
+### 4.4 Removals (the de-duplication)
+
+| Remove | File | Replaced by |
+|---|---|---|
+| `_apply_break_deduction` method + its 3 call sites | `controllers/clock_api.py:161`, `controllers/clock_kiosk.py:158`, `controllers/clock_nfc_kiosk.py:381` | the compute |
+| cron's `x_fclk_break_minutes` write | `models/hr_attendance.py:343-346` | the compute |
+| penalty's `current_break + deduction` write | `controllers/clock_api.py:140-144` | the compute's `Σ penalty_minutes` |
+| setting `fclk_break_threshold_hours` + `fusion_clock.break_threshold_hours` | `models/res_config_settings.py:39`, seed in `data/ir_config_parameter_data.xml` | per-rule `break1_after_hours` |
+
+**Kept and untouched:** `hr.employee._get_fclk_break_minutes()`, `fusion_clock.default_break_minutes`,
+`fusion.clock.shift.break_minutes`, `fusion.clock.schedule.break_minutes` — these are the
+**planned** break (used to compute scheduled `planned_hours`), a separate concept from the
+actual worked-hours deduction. Decision #4 keeps them out of the deduction path.
+
+**Kept:** the `auto_deduct_break` master toggle (now gates the statutory portion only).
+
+### 4.5 UI / security / data
+
+- **Menu:** *Fusion Clock → Configuration → Break Rules* (new `ir.actions.act_window` +
+  list/form views in `views/clock_break_rule_views.xml`), gated to
+  `group_fusion_clock_manager`. Add the menu item in `views/clock_menus.xml`.
+- **Security:** `security/ir.model.access.csv` — `fusion.clock.break.rule`: manager =
+  full CRUD; team-lead/user = read (or none — the resolver uses sudo, so no direct grant
+  is strictly required; grant manager full, no portal access).
+- **Manifest `data`:** add `data/clock_break_rule_data.xml` (after security, before crons)
+  and `views/clock_break_rule_views.xml` (with the other config views, before
+  `clock_menus.xml`). Bump `version` to `19.0.4.1.0`.
+
+## 5. Edge cases
+
+- **No rule resolvable** (no province match, no default) → statutory 0. The seeded default
+  prevents this in practice.
+- **Company has no `state_id`** → falls to the default rule.
+- **`break2_after_hours <= break1_after_hours`** → blocked by constraint.
+- **Penalty created after clock-out** → `x_fclk_penalty_ids` change retriggers the compute;
+  final break = statutory + penalty (preserves today's combined-field semantics, reported
+  as one "Break" number).
+- **Open attendance** (no checkout) → break 0; recomputed when it's closed.
+- **Worked hours exactly at a boundary** (5.0h, 10.0h) → tier fires (`>=`).
+
+## 6. Migration / upgrade
+
+- On upgrade, flipping `x_fclk_break_minutes` to `store=True compute` makes Odoo recompute
+  it for all existing rows. For closed attendances this re-derives break from
+  `worked_hours` + linked penalties using the seeded Ontario rule — which is the intended
+  corrected value. Any historical hand-edited break values are replaced (acceptable per
+  Decision #3, "fully automatic"). Call this out in the change log.
+- No `pre`/`post` migration script is required; the recompute is automatic. (If we later
+  want to *avoid* touching very old periods, a guarded post-migrate could pin them — out of
+  scope for now.)
+
+## 7. Testing (`tests/test_break_rules.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+
+1. `break_minutes_for`: 4.99h→0, 5.0h→30, 9.99h→30, 10.0h→60.
+2. Resolver: company in Ontario → Ontario rule; company with unset/other province → default.
+3. **Manual backend create** of a closed attendance (check_in/out spanning 6h) → break 30,
+   net = worked − 0.5. **Manual edit** extending to 10h → break 60. (This is the headline
+   gap; assert it directly via `env['hr.attendance'].create(...)`, not via a controller.)
+4. Penalty additivity: 6h + one 15-min penalty record → break 45.
+5. Master toggle off (`auto_deduct_break=False`) → statutory 0 (penalty-only).
+6. Constraint: `break2_after_hours <= break1_after_hours` raises.
+
+Run (note ephemeral ports per repo CLAUDE.md):
+```
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+## 8. Rollout notes
+
+- **Dual-path write** during dev: edit files in **both** `K:\Github\odoo-modsdev\addons\fusion_clock`
+  (Docker-mounted, for tests) **and** `K:\Github\Odoo-Modules\fusion_clock` (git); commit
+  from the git path only. (Per project memory.)
+- Live target is **entech** (`odoo-entech`); deploy after local tests pass and user review.
+- Asset/version bump already covered by the manifest `version` change.
+
+## 9. Open questions
+
+None — all four design forks resolved (see §3).

docs/superpowers/specs/2026-06-02-assessment-visit-funding-design.md

@@ -0,0 +1,164 @@
+# Assessment Visit — bundled, funding-routed assessments
+
+**Date:** 2026-06-02
+**Module:** `fusion_portal` (depends on `fusion_claims`, `fusion_tasks`); live on `odoo-westin` (DB `westin-v19`)
+**Status:** Draft for review
+**Author:** Brainstormed with Gurpreet (Fusion / Westin Healthcare)
+
+---
+
+## 1. Problem & goals
+
+A sales rep visits a client's home **with an occupational therapist (OT) and the client present for only 30–45 minutes**, and the OT's time is the scarcest resource. In that window the team often does more than one assessment — a wheelchair (ADP) plus, opportunistically, accessibility products the rep spots (a ramp at the front steps, a stair lift inside, a tub cutout, a patient lift for transfers). Today each assessment is a **separate, standalone web form** that re-collects the client's details and creates its own sale order, and the front-end forms give the rep **no way to mark a case's funding source** — so March-of-Dimes work silently defaults to private pay and never reaches the MOD pipeline.
+
+**Goals**
+
+1. **One visit, many assessments, entered once.** Bundle every assessment from one home visit; capture the client + funding details a single time.
+2. **Measurement-first.** Capture measurements while the OT is present; defer client/health-card data to after they leave; let the OT sign the ADP application on the spot.
+3. **Add as you go.** The rep adds an assessment/product the instant they spot it — repeatable, with a location tag (Front / Back / Inside).
+4. **Route by funding workflow.** On completion the visit emits **one sale order per funding workflow** (ADP, March of Dimes, ODSP, WSIB, private, …) — never one combined SO, and never a separate SO per item within the same funding.
+5. **Let the rep set funding at assessment time** (the real MOD "tracking" gap).
+6. **ADP multi-device** with valid-combination rules, including a new **mobility scooter** type and a **home-accessibility hard rule** for power mobility that feeds the accessibility upsell.
+
+**Non-goals (v1):** voice/dictated entry; rebuilding the measurement math; a new MOD/ADP claim model (the pipelines already exist — we reuse them).
+
+---
+
+## 2. Current state (verified against source)
+
+- **Two assessment models, already two separate SO lineages.** `fusion.assessment` (ADP: rollator/wheelchair/powerchair) and `fusion.accessibility.assessment` (the 7 lift/mod types) each have their own `_create_draft_sale_order` (`assessment.py:587`, `accessibility_assessment.py:751`), their own `x_fc_sale_type`, and their own state machine — ADP's 24-state `x_fc_adp_application_status` vs MOD's 16-state `x_fc_mod_status`. Each guards against a second SO (`accessibility_assessment.py:503-511`). SO back-links are **scalar** Many2one: `assessment_id`, `accessibility_assessment_id` (`fusion_portal/models/sale_order.py:37,48`).
+- **SOs are born with no order lines.** Specs become a **chatter HTML note** (`_format_assessment_html_table`, `accessibility_assessment.py:815`); a human prices the draft afterward. **No per-type product mapping exists.**
+- **Funding is modelled but not on the measurement forms.** `x_fc_funding_source` (required, default `direct_private`) on the accessibility model — values `march_of_dimes`, `odsp`, `wsib`, `insurance`, `direct_private`, `other` (`accessibility_assessment.py:71-87`) — is present on the public booking form but **absent from all 7 measurement forms**, so they default to private. Canonical billing type `sale.order.x_fc_sale_type` (`fusion_claims/models/sale_order.py:320`) carries the full set incl. `adp`, `adp_odsp`, `march_of_dimes`, etc.
+- **MOD tracking already exists** as `x_fc_mod_status` (16 states) + ~60 `x_fc_mod_*` fields (HVMP reference #, vendor code, drawings, PCA, POD, approved/payment amounts, dated audit trail) + MOD views + ~7 wizards + ~40 MOD/ODSP stage emails (`fusion_claims/models/sale_order.py:438,877`). An accessibility assessment funded `march_of_dimes` already lands its SO in this pipeline at `need_to_schedule`. **The gap is purely that the rep can't choose `march_of_dimes` on the form.**
+- **Emails** are mostly Python-built via the shared `fusion.email.builder.mixin._email_build` (`fusion_tasks/models/email_builder_mixin.py:8`), gated by `ir.config_parameter` `fusion_claims.enable_email_notifications`. Completion email fires from inside `_create_draft_sale_order` (`assessment.py:847`; `accessibility_assessment.py:624`). Stage emails (`_adp_send_stage_email`, `_mod_email_build`, `_odsp_email_build`) are keyed off the SO's funding type + status, so **they keep working per-SO unchanged**.
+- **Known bug:** backend ADP `action_complete()` sends the authorizer **two** completion emails (template pair at `assessment.py:494` + inline report via `:847`). Must consolidate before fanning out across a visit.
+
+---
+
+## 3. The design
+
+### 3.1 The Visit aggregate (only net-new model)
+
+`fusion.assessment.visit` — the hub for one home visit.
+
+- **Client/context, entered once:** `partner_id`, address fields, `visit_date`, `sales_rep_id`, `authorizer_id` (OT), `x_fc_funding_source`-style default, `state` (`measuring` → `client_pending` → `done`).
+- **Links to its assessments:** `adp_assessment_ids` (One2many → `fusion.assessment`) and `accessibility_assessment_ids` (One2many → `fusion.accessibility.assessment`). Each assessment gains `visit_id`.
+- **Links to its sale orders:** `sale_order_ids` (One2many → `sale.order`) — one per funding workflow it produced.
+- On the SO side, add `visit_id`. Each assessment already carries `sale_order_id` (Many2one — `accessibility_assessment.py:153`, `assessment.py:422`), so several same-funding assessments can already point at one SO; the redundant **scalar** `assessment_id` / `accessibility_assessment_id` on the SO (`fusion_portal/models/sale_order.py:37,48`) become **One2many** (or are dropped in favour of the `sale_order_id` reverse) so an SO no longer assumes a single source assessment.
+
+Client info moves to the Visit as the single source of truth; the per-assessment `client_name`-required gate is relaxed (the model keeps the field for back-compat / standalone use but the Visit flow fills it from `partner_id`).
+
+### 3.2 Add-as-you-go workspace (portal UX)
+
+A portal "visit workspace" (reps are portal users, tablet-first):
+
+- Always-present **"+ Add"** → pick a type + location tag (Front / Back / Inside / custom) → drop **straight into the existing measurement form** for that type. No client paperwork required to start.
+- Each added assessment is a **card** showing type, location, status (To measure / Measured / Signed), and — once priced — its amount.
+- **Measurement-first:** the forms render with client fields hidden/optional; a **deferred "Client + funding" step** is completed after the OT leaves and is shared by every item.
+- The **OT signs the ADP application (Page 11)** inline on the wheelchair/ADP item, on-site, independent of client demographics (reuse `portal_assessment_express` Page-11 section + signature pad).
+- Mockups (for reference, in repo `docs/mockups/` if committed): `fusion_portal_new_approach_mockup.html`.
+
+### 3.3 Multi-instance + location tags
+
+Any type can be added **more than once**, each its own assessment record with a **location label** ("Main stairs", "Basement", "Front porch"). Two stair lifts = two assessment records (→ two lines on the same funding SO; see §3.6). A **"Same as the previous"** action copies shared options so the rep only re-enters the differing measurements.
+
+### 3.4 Per-item funding selector — the MOD gap fix
+
+Expose `x_fc_funding_source` on **each accessibility assessment** in the flow: **Private Pay / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other**. This one field drives the existing `sale_type_map` → `x_fc_sale_type` → correct pipeline (MOD 16-state tracker, ODSP, hardship, …). Defaults to the previous item's funding so an all-MOD visit isn't re-picked each time. **ADP/wheelchair items are fixed to ADP** (no picker). This is the minimal change that closes the "can't mark a case as March of Dimes" gap — no new tracking model.
+
+> **Patient lift** is an accessibility/equipment item that uses this same picker — funded by March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents), so its funding is chosen per case, not fixed.
+> **`sale_type_map` gap:** `x_fc_funding_source` currently lacks `hardship` while `x_fc_sale_type` already has it (`sale_order.py:320`) — add `hardship` to the picker + a `sale_type_map` entry (`accessibility_assessment.py:771`), and review the map so every offered funding routes to a real `x_fc_sale_type`.
+> **MOD funding cap** applies to MOD items — see Resolved decision 1 (§4).
+
+### 3.5 ADP multi-device + combinations + scooter + home-access rule
+
+**Multi-device ADP order.** Today one ADP device per order; the visit allows a **valid combination** of ADP devices for one client, all landing on the **one ADP SO**. Each ADP device is an item; the combination check runs across the visit's ADP items.
+
+**Device categories:** Walker/Rollator · Manual Wheelchair · Power Wheelchair · **Scooter (new)**.
+
+**Combination rules (confirmed):**
+
+| Combination | Allowed? |
+|---|---|
+| Any single device | ✓ |
+| Walker + Manual Wheelchair | ✓ |
+| Walker + Power Wheelchair | ✓ |
+| Walker + Scooter | ✓ |
+| Manual + Power Wheelchair | ✗ |
+| Power Wheelchair + Scooter | ✗ |
+| Manual Wheelchair + Scooter | ✗ |
+| Two walkers / any duplicate | ✗ |
+
+Rule in words: **at most one "seated-mobility" device** {manual wheelchair, power wheelchair, scooter}, **optionally one walker/rollator alongside, no duplicates.** Enforced when adding/saving an ADP device.
+
+**Scooter (new ADP type) fields:** `client_weight` (exists), scooter type, **maximum travel range**, and the home-accessibility check (below). Gets its own measurement section in the ADP form, mirroring the rollator/wheelchair/powerchair sections.
+
+**Power-mobility home-accessibility hard rule.** For **scooter and power wheelchair**, a required check: *"Is the home accessible enough for the device to be used **inside and outside** the home independently — no lifting, not left outside/in the garage?"* ADP will not fund power mobility a home can't accommodate. If the answer is **No**, the visit **flags an accessibility need** and prompts the rep to add an accessibility item (ramp / porch lift, typically March of Dimes) to remediate. This is the explicit bridge between the ADP power-mobility item and the accessibility/MOD upsell.
+
+> **The power-wheelchair form is already well-optimized — do NOT change its fields.** The *only* addition there is this home-accessibility warning. The new **scooter** type gets its own section (fields above); the manual-wheelchair and rollator sections are unchanged.
+
+### 3.6 Funding-workflow grouping → one SO per workflow
+
+On visit completion, group its assessments by **funding workflow** (`x_fc_sale_type`) and create **one SO per group**:
+
+- All `march_of_dimes` items (stair lift + porch lift + tub cutout, or two stair lifts) → **one MOD SO, multiple lines** (funding permitting).
+- All ADP devices (the valid combination) → **one ADP SO**.
+- Private / ODSP / WSIB / insurance → their own SO each.
+- A separate SO appears **only when the case type changes**, never per-item within a funding.
+
+Refactor the two per-model `_create_draft_sale_order` routines into a **shared, group-aware builder** that takes a set of same-funding assessments and produces one SO, branching on funding type to stamp the right starting status field (`x_fc_adp_application_status` for ADP, `x_fc_mod_status` for MOD, etc. — mirroring `assessment.py:600-622`) and the right links. **Reuse the existing MOD/ADP/ODSP pipelines unchanged.**
+
+### 3.7 Emails
+
+- Reuse `fusion.email.builder.mixin` and the existing per-funding stage emails (they're keyed off SO type + status, so per-SO they keep working).
+- **Move the completion send to per-SO** inside the new builder (not per-assessment), and **dedupe recipients**, so a 3-item visit doesn't emit 3–6 completion emails.
+- **Fix the existing duplicate** (authorizer gets two completion emails on backend ADP completion) as part of this.
+- Make `enable_email_notifications` gating consistent across the sends the visit touches.
+
+### 3.8 Reused vs net-new
+
+- **Reused, largely untouched:** the 7 accessibility measurement forms + their JS/Python calc; the ADP Express form + Page-11 signature; the MOD/ADP/ODSP pipelines, views, wizards, and stage emails; the email branding mixin.
+- **Net-new:** the `fusion.assessment.visit` model + workspace UI; per-item funding selector on the accessibility forms; the group-aware SO builder + link-cardinality change; ADP multi-device + combination validation; scooter type + fields; power-mobility home-access rule + cross-sell flag; completion-email consolidation.
+
+---
+
+## 4. Resolved decisions
+
+1. **MOD funding cap — documented rule, light-touch in v1.** March of Dimes covers **up to $15,000 per person, lifetime**, income-gated: if the client's income is **under** that year's threshold (the threshold changes annually), MOD funds the full $15k; if **over**, MOD may **deny or partially approve**. **v1:** surface this cap as a reminder on MOD items and capture an *"income under MOD threshold? (yes / no / unknown)"* flag so the rep can judge — **do not** auto-compute lifetime used-vs-remaining across the client's prior MOD orders (the SO's existing `x_fc_mod_*` approved/payment fields already record per-order amounts). **Future:** yearly-threshold config + automatic lifetime-remaining tracking + a hard warning.
+2. **No auto pricing / products in v1.** The visit creates a **draft** SO per funding workflow and appends each assessment's specs to that SO's chatter (today's pattern); **the sales rep builds the quotation lines manually.** One SO can hold many items. No per-assessment-type product mapping. (Auto-pricing is a future expansion.)
+3. **Patient-lift funding is chosen per case** via the funding picker — March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents) all fund it; it is not fixed (see §3.4).
+4. **Power-wheelchair form unchanged** — already well-optimized; the only addition is the **home-accessibility warning** (device usable **inside and outside** the home). The home-access rule applies to **scooter (new type, new section) and power wheelchair (warning only)**.
+
+---
+
+## 5. Phasing
+
+- **Phase 1 — Funding correctness + visit backbone:** `fusion.assessment.visit`, link-cardinality change, **funding selector on the accessibility forms** (incl. Hardship; patient-lift routing), **MOD $15k-cap reminder + income-threshold flag** (informational), group-and-route to per-workflow **draft** SOs (specs to chatter, manual pricing) reusing existing pipelines, completion-email consolidation + duplicate fix. *(Delivers the MOD-routing fix and the multi-SO split.)*
+- **Phase 2 — ADP expansion:** multi-device ADP order + combination validation, **scooter** type + fields, power-mobility **home-access hard rule** + accessibility cross-sell prompt.
+- **Phase 3 — Seamless field UX:** the full add-as-you-go workspace, measurement-first deferral, location tags, "same as previous", OT on-site sign-off polish.
+- **Later:** product-line auto-pricing, MOD funding-cap tracking, voice/quick entry.
+
+---
+
+## 6. Risks (from investigation)
+
+- **Duplicate completion emails** already live on the ADP backend path — fix before fan-out (§3.7).
+- **Scalar back-links + double-SO guards** assume one SO per assessment; grouping breaks them — must move to `visit_id` / One2many and make the guard visit-aware.
+- **Inconsistent `enable_email_notifications`** — template sends ignore the kill-switch; don't route new traffic through templates without honoring it.
+- **Label drift** `x_fc_funding_source` vs `x_fc_sale_type` (`insurance`="Private Insurance" vs "Insurance"; `direct_private`="Private Pay (Direct)" vs "Direct/Private") — keys match so routing works; align labels in any shared UI.
+- **Unreachable funding types from accessibility:** `sale_type_map` (`accessibility_assessment.py:771`) covers 6 values; decide which funding types each assessment type may emit.
+
+---
+
+## 7. Files in scope
+
+- `fusion_portal/models/assessment.py` — ADP `_create_draft_sale_order` (:587), completion email (:847), multi-device + scooter + home-access.
+- `fusion_portal/models/accessibility_assessment.py` — accessibility `_create_draft_sale_order` (:751), `action_complete` (:493), completion email (:624), funding routing.
+- `fusion_portal/models/sale_order.py` — back-links (:37,:48) → `visit_id` / One2many.
+- `fusion_portal/models/visit.py` — **new** `fusion.assessment.visit`.
+- `fusion_portal/views/portal_accessibility_forms.xml` + `portal_assessment_express.xml` — funding selector, scooter section, home-access check; workspace shell.
+- `fusion_portal/controllers/portal_main.py` (`/my/accessibility/save` :2482) + `portal_assessment.py` — visit-aware save/group/route.
+- `fusion_claims/models/sale_order.py` — reuse `x_fc_sale_type` (:320), `x_fc_mod_status` (:438), stage emails (:6876,:9038,:10063); no pipeline rebuild.
+- `fusion_tasks/models/email_builder_mixin.py` — reuse for any new visit emails.
+
+**Deployment note:** `fusion_portal` is live on `odoo-westin` (`westin-v19`, container `odoo-dev-app`). Ship per the rename/deploy procedure (backup → code sync → `-u fusion_portal` → cache-bust → restart → verify).

fusion_authorizer_portal/graphify-out/GRAPH_REPORT.md

@@ -1,883 +0,0 @@
-# Graph Report - /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal  (2026-04-22)
-
-## Corpus Check
-- 33 files · ~40,589 words
-- Verdict: corpus is large enough that graph structure adds value.
-
-## Summary
-- 470 nodes · 550 edges · 123 communities detected
-- Extraction: 89% EXTRACTED · 11% INFERRED · 0% AMBIGUOUS · INFERRED: 60 edges (avg confidence: 0.76)
-- Token cost: 0 input · 0 output
-
-## Community Hubs (Navigation)
-- [[_COMMUNITY_Community 0|Community 0]]
-- [[_COMMUNITY_Community 1|Community 1]]
-- [[_COMMUNITY_Community 2|Community 2]]
-- [[_COMMUNITY_Community 3|Community 3]]
-- [[_COMMUNITY_Community 4|Community 4]]
-- [[_COMMUNITY_Community 5|Community 5]]
-- [[_COMMUNITY_Community 6|Community 6]]
-- [[_COMMUNITY_Community 7|Community 7]]
-- [[_COMMUNITY_Community 8|Community 8]]
-- [[_COMMUNITY_Community 9|Community 9]]
-- [[_COMMUNITY_Community 10|Community 10]]
-- [[_COMMUNITY_Community 11|Community 11]]
-- [[_COMMUNITY_Community 12|Community 12]]
-- [[_COMMUNITY_Community 13|Community 13]]
-- [[_COMMUNITY_Community 14|Community 14]]
-- [[_COMMUNITY_Community 15|Community 15]]
-- [[_COMMUNITY_Community 16|Community 16]]
-- [[_COMMUNITY_Community 17|Community 17]]
-- [[_COMMUNITY_Community 18|Community 18]]
-- [[_COMMUNITY_Community 19|Community 19]]
-- [[_COMMUNITY_Community 20|Community 20]]
-- [[_COMMUNITY_Community 21|Community 21]]
-- [[_COMMUNITY_Community 22|Community 22]]
-- [[_COMMUNITY_Community 23|Community 23]]
-- [[_COMMUNITY_Community 24|Community 24]]
-- [[_COMMUNITY_Community 25|Community 25]]
-- [[_COMMUNITY_Community 26|Community 26]]
-- [[_COMMUNITY_Community 27|Community 27]]
-- [[_COMMUNITY_Community 28|Community 28]]
-- [[_COMMUNITY_Community 29|Community 29]]
-- [[_COMMUNITY_Community 30|Community 30]]
-- [[_COMMUNITY_Community 31|Community 31]]
-- [[_COMMUNITY_Community 32|Community 32]]
-- [[_COMMUNITY_Community 33|Community 33]]
-- [[_COMMUNITY_Community 34|Community 34]]
-- [[_COMMUNITY_Community 35|Community 35]]
-- [[_COMMUNITY_Community 36|Community 36]]
-- [[_COMMUNITY_Community 37|Community 37]]
-- [[_COMMUNITY_Community 38|Community 38]]
-- [[_COMMUNITY_Community 39|Community 39]]
-- [[_COMMUNITY_Community 40|Community 40]]
-- [[_COMMUNITY_Community 41|Community 41]]
-- [[_COMMUNITY_Community 42|Community 42]]
-- [[_COMMUNITY_Community 43|Community 43]]
-- [[_COMMUNITY_Community 44|Community 44]]
-- [[_COMMUNITY_Community 45|Community 45]]
-- [[_COMMUNITY_Community 46|Community 46]]
-- [[_COMMUNITY_Community 47|Community 47]]
-- [[_COMMUNITY_Community 48|Community 48]]
-- [[_COMMUNITY_Community 49|Community 49]]
-- [[_COMMUNITY_Community 50|Community 50]]
-- [[_COMMUNITY_Community 51|Community 51]]
-- [[_COMMUNITY_Community 52|Community 52]]
-- [[_COMMUNITY_Community 53|Community 53]]
-- [[_COMMUNITY_Community 54|Community 54]]
-- [[_COMMUNITY_Community 55|Community 55]]
-- [[_COMMUNITY_Community 56|Community 56]]
-- [[_COMMUNITY_Community 57|Community 57]]
-- [[_COMMUNITY_Community 58|Community 58]]
-- [[_COMMUNITY_Community 59|Community 59]]
-- [[_COMMUNITY_Community 60|Community 60]]
-- [[_COMMUNITY_Community 61|Community 61]]
-- [[_COMMUNITY_Community 62|Community 62]]
-- [[_COMMUNITY_Community 63|Community 63]]
-- [[_COMMUNITY_Community 64|Community 64]]
-- [[_COMMUNITY_Community 65|Community 65]]
-- [[_COMMUNITY_Community 66|Community 66]]
-- [[_COMMUNITY_Community 67|Community 67]]
-- [[_COMMUNITY_Community 68|Community 68]]
-- [[_COMMUNITY_Community 69|Community 69]]
-- [[_COMMUNITY_Community 70|Community 70]]
-- [[_COMMUNITY_Community 71|Community 71]]
-- [[_COMMUNITY_Community 72|Community 72]]
-- [[_COMMUNITY_Community 73|Community 73]]
-- [[_COMMUNITY_Community 74|Community 74]]
-- [[_COMMUNITY_Community 75|Community 75]]
-- [[_COMMUNITY_Community 76|Community 76]]
-- [[_COMMUNITY_Community 77|Community 77]]
-- [[_COMMUNITY_Community 78|Community 78]]
-- [[_COMMUNITY_Community 79|Community 79]]
-- [[_COMMUNITY_Community 80|Community 80]]
-- [[_COMMUNITY_Community 81|Community 81]]
-- [[_COMMUNITY_Community 82|Community 82]]
-- [[_COMMUNITY_Community 83|Community 83]]
-- [[_COMMUNITY_Community 84|Community 84]]
-- [[_COMMUNITY_Community 85|Community 85]]
-- [[_COMMUNITY_Community 86|Community 86]]
-- [[_COMMUNITY_Community 87|Community 87]]
-- [[_COMMUNITY_Community 88|Community 88]]
-- [[_COMMUNITY_Community 89|Community 89]]
-- [[_COMMUNITY_Community 90|Community 90]]
-- [[_COMMUNITY_Community 91|Community 91]]
-- [[_COMMUNITY_Community 92|Community 92]]
-- [[_COMMUNITY_Community 93|Community 93]]
-- [[_COMMUNITY_Community 94|Community 94]]
-- [[_COMMUNITY_Community 95|Community 95]]
-- [[_COMMUNITY_Community 96|Community 96]]
-- [[_COMMUNITY_Community 97|Community 97]]
-- [[_COMMUNITY_Community 98|Community 98]]
-- [[_COMMUNITY_Community 99|Community 99]]
-- [[_COMMUNITY_Community 100|Community 100]]
-- [[_COMMUNITY_Community 101|Community 101]]
-- [[_COMMUNITY_Community 102|Community 102]]
-- [[_COMMUNITY_Community 103|Community 103]]
-- [[_COMMUNITY_Community 104|Community 104]]
-- [[_COMMUNITY_Community 105|Community 105]]
-- [[_COMMUNITY_Community 106|Community 106]]
-- [[_COMMUNITY_Community 107|Community 107]]
-- [[_COMMUNITY_Community 108|Community 108]]
-- [[_COMMUNITY_Community 109|Community 109]]
-- [[_COMMUNITY_Community 110|Community 110]]
-- [[_COMMUNITY_Community 111|Community 111]]
-- [[_COMMUNITY_Community 112|Community 112]]
-- [[_COMMUNITY_Community 113|Community 113]]
-- [[_COMMUNITY_Community 114|Community 114]]
-- [[_COMMUNITY_Community 115|Community 115]]
-- [[_COMMUNITY_Community 116|Community 116]]
-- [[_COMMUNITY_Community 117|Community 117]]
-- [[_COMMUNITY_Community 118|Community 118]]
-- [[_COMMUNITY_Community 119|Community 119]]
-- [[_COMMUNITY_Community 120|Community 120]]
-- [[_COMMUNITY_Community 121|Community 121]]
-- [[_COMMUNITY_Community 122|Community 122]]
-
-## God Nodes (most connected - your core abstractions)
-1. `create()` - 22 edges
-2. `FusionAssessment` - 20 edges
-3. `AuthorizerPortal` - 19 edges
-4. `ResPartner` - 16 edges
-5. `accessibility_assessment_save()` - 12 edges
-6. `FusionAccessibilityAssessment` - 11 edges
-7. `selectField()` - 11 edges
-8. `PDFTemplateFiller` - 10 edges
-9. `SaleOrder` - 10 edges
-10. `FusionPdfTemplate` - 9 edges
-
-## Surprising Connections (you probably didn't know these)
-- `create_field()` --calls--> `create()`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/pdf_editor.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/accessibility_assessment.py
-- `FusionPdfTemplatePreview` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `FusionPdfTemplateField` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `Generate PNG preview images from the PDF using poppler (pdftoppm).         Falls` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `Set template to active.` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-
-## Communities
-
-### Community 0 - "Community 0"
-Cohesion: 0.05
-Nodes (29): accessibility_bathroom(), accessibility_ceiling_lift(), accessibility_ramp(), accessibility_stairlift_curved(), accessibility_stairlift_straight(), accessibility_tub_cutout(), accessibility_vpl(), home() (+21 more)
-
-### Community 1 - "Community 1"
-Cohesion: 0.06
-Nodes (20): Assign role-specific portal groups to a portal user based on contact checkboxes., Assign backend groups to an internal user based on contact checkboxes.         A, Grant portal access to this partner, or update permissions for existing users., Create a role-specific welcome Knowledge article for the new portal user., Send a professional portal invitation email to the partner.                  Gen, Resend portal invitation email to an existing portal user., Open the list of assigned sale orders, Open the list of assessments for this partner (+12 more)
-
-### Community 2 - "Community 2"
-Cohesion: 0.07
-Nodes (19): create(), FusionAssessment, Format assessment data as HTML table for chatter, Format wheelchair specifications for the sale order notes (legacy), Generate document records for signed pages, Send email notifications when assessment is completed, View related documents, View the created sale order (+11 more)
-
-### Community 3 - "Community 3"
-Cohesion: 0.08
-Nodes (15): create(), FusionAccessibilityAssessment, Complete the assessment and create a Sale Order.          2026-04 portal audit f, Add a tag to the sale order based on assessment type, Copy assessment photos to sale order chatter, Send email notification to office about assessment completion, Schedule a follow-up activity for the sales rep, Find or create a partner for the client (+7 more)
-
-### Community 4 - "Community 4"
-Cohesion: 0.08
-Nodes (20): Complete express assessment and create draft sale order (no signatures required), CustomerPortal, Ensure all module views are active after install/update.      Odoo silently deac, _reactivate_views(), AssessmentPortal, portal_assessment_express_edit(), portal_assessment_express_new(), portal_assessment_express_save() (+12 more)
-
-### Community 5 - "Community 5"
-Cohesion: 0.09
-Nodes (14): authorizer_cases_search(), sales_rep_cases_search(), get_authorizer_portal_cases(), get_sales_rep_portal_cases(), Open composer to send message to authorizer only, Send email when an authorizer is assigned to the order, View portal documents, Get data for portal display, excluding sensitive information (+6 more)
-
-### Community 6 - "Community 6"
-Cohesion: 0.12
-Nodes (14): preview_pdf(), _draw_field(), fill_template(), PDFTemplateFiller, Generic PDF template filler. Works with any template, any number of pages., create(), FusionPdfTemplate, FusionPdfTemplateField (+6 more)
-
-### Community 7 - "Community 7"
-Cohesion: 0.11
-Nodes (14): accessibility_assessment_save(), AuthorizerPortal, Portal controller for Authorizers (OTs/Therapists), Parse straight stair lift specific fields, Parse curved stair lift specific fields, Parse VPL specific fields, Parse ceiling lift specific fields, Parse ramp specific fields (+6 more)
-
-### Community 8 - "Community 8"
-Cohesion: 0.21
-Nodes (22): buildDataKeyOptions(), buildDataKeysSidebar(), init(), jsonrpc(), loadFields(), normalize(), onFieldDragStart(), renderFieldMarker() (+14 more)
-
-### Community 9 - "Community 9"
-Cohesion: 0.29
-Nodes (11): checkClockStatus(), ensureModal(), getLocation(), hideModal(), isTechnicianPortal(), logLocation(), showDeniedBanner(), showModal() (+3 more)
-
-### Community 10 - "Community 10"
-Cohesion: 0.18
-Nodes (3): ADPDocument, Download the document, Get the download URL for portal access
-
-### Community 11 - "Community 11"
-Cohesion: 0.2
-Nodes (5): create_field(), FusionPdfEditorController, Controller for the PDF field position visual editor., update_field(), upload_preview_image()
-
-### Community 12 - "Community 12"
-Cohesion: 0.38
-Nodes (4): page11_sign_form(), page11_sign_submit(), Page11PublicSignController, Look up and validate a signing request by token.
-
-### Community 13 - "Community 13"
-Cohesion: 0.4
-Nodes (1): migrate()
-
-### Community 14 - "Community 14"
-Cohesion: 0.5
-Nodes (1): AuthorizerComment
-
-### Community 15 - "Community 15"
-Cohesion: 0.83
-Nodes (3): _detectAndSaveTimezone(), _getCookie(), start()
-
-### Community 16 - "Community 16"
-Cohesion: 0.67
-Nodes (1): FusionLoanerCheckoutAssessment
-
-### Community 17 - "Community 17"
-Cohesion: 0.67
-Nodes (0): 
-
-### Community 18 - "Community 18"
-Cohesion: 1.0
-Nodes (2): registerPushSubscription(), urlBase64ToUint8Array()
-
-### Community 19 - "Community 19"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 20 - "Community 20"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 21 - "Community 21"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 22 - "Community 22"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 23 - "Community 23"
-Cohesion: 1.0
-Nodes (1): Fill a PDF template by overlaying text/checkmarks/signatures at configured posit
-
-### Community 24 - "Community 24"
-Cohesion: 1.0
-Nodes (1): Draw a single field onto the reportlab canvas.          Args:             c: rep
-
-### Community 25 - "Community 25"
-Cohesion: 1.0
-Nodes (1): Override create to generate reference number
-
-### Community 26 - "Community 26"
-Cohesion: 1.0
-Nodes (1): Get authorizer from x_fc_authorizer_id field
-
-### Community 27 - "Community 27"
-Cohesion: 1.0
-Nodes (1): Get cases for authorizer portal with optional search
-
-### Community 28 - "Community 28"
-Cohesion: 1.0
-Nodes (1): Get cases for sales rep portal with optional search
-
-### Community 29 - "Community 29"
-Cohesion: 1.0
-Nodes (1): Override create to handle revision numbering
-
-### Community 30 - "Community 30"
-Cohesion: 1.0
-Nodes (1): Get documents for a sale order, optionally filtered by type
-
-### Community 31 - "Community 31"
-Cohesion: 1.0
-Nodes (1): Get all revisions of a specific document type
-
-### Community 32 - "Community 32"
-Cohesion: 1.0
-Nodes (1): Override create to set author from current user if not provided
-
-### Community 33 - "Community 33"
-Cohesion: 1.0
-Nodes (1): Kanban group expansion — always show all 6 workflow states.
-
-### Community 34 - "Community 34"
-Cohesion: 1.0
-Nodes (1): Straight stair lift: (steps × nose_to_nose) + 13" top landing
-
-### Community 35 - "Community 35"
-Cohesion: 1.0
-Nodes (1): Use manual override if provided, otherwise use calculated
-
-### Community 36 - "Community 36"
-Cohesion: 1.0
-Nodes (1): Curved stair lift calculation:         - 12" per step         - 16" per curve
-
-### Community 37 - "Community 37"
-Cohesion: 1.0
-Nodes (1): Use manual override if provided, otherwise use calculated
-
-### Community 38 - "Community 38"
-Cohesion: 1.0
-Nodes (1): Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)
-
-### Community 39 - "Community 39"
-Cohesion: 1.0
-Nodes (1): Landing required every 30 feet (360 inches)
-
-### Community 40 - "Community 40"
-Cohesion: 1.0
-Nodes (1): Total length including landings (5 feet = 60 inches each)
-
-### Community 41 - "Community 41"
-Cohesion: 1.0
-Nodes (1): Compute portal access status based on user account and login history.
-
-### Community 42 - "Community 42"
-Cohesion: 1.0
-Nodes (1): Count sale orders where this partner is the authorizer
-
-### Community 43 - "Community 43"
-Cohesion: 1.0
-Nodes (1): Count assessments where this partner is involved
-
-### Community 44 - "Community 44"
-Cohesion: 1.0
-Nodes (1): Count sale orders assigned to this partner as delivery technician
-
-### Community 45 - "Community 45"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 46 - "Community 46"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 47 - "Community 47"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 48 - "Community 48"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 49 - "Community 49"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 50 - "Community 50"
-Cohesion: 1.0
-Nodes (1): Display the Page 11 signing form.
-
-### Community 51 - "Community 51"
-Cohesion: 1.0
-Nodes (1): Process the submitted Page 11 signature.
-
-### Community 52 - "Community 52"
-Cohesion: 1.0
-Nodes (1): Download the signed Page 11 PDF.
-
-### Community 53 - "Community 53"
-Cohesion: 1.0
-Nodes (1): Start a new assessment
-
-### Community 54 - "Community 54"
-Cohesion: 1.0
-Nodes (1): View/edit an assessment
-
-### Community 55 - "Community 55"
-Cohesion: 1.0
-Nodes (1): Save assessment data (create or update)
-
-### Community 56 - "Community 56"
-Cohesion: 1.0
-Nodes (1): Signature capture page
-
-### Community 57 - "Community 57"
-Cohesion: 1.0
-Nodes (1): Save a signature (AJAX)
-
-### Community 58 - "Community 58"
-Cohesion: 1.0
-Nodes (1): Complete the assessment
-
-### Community 59 - "Community 59"
-Cohesion: 1.0
-Nodes (1): Start a new express assessment (Page 1 - Equipment Selection)
-
-### Community 60 - "Community 60"
-Cohesion: 1.0
-Nodes (1): Continue/edit an express assessment
-
-### Community 61 - "Community 61"
-Cohesion: 1.0
-Nodes (1): Save express assessment data (create or update)
-
-### Community 62 - "Community 62"
-Cohesion: 1.0
-Nodes (1): Public page for booking an accessibility assessment.
-
-### Community 63 - "Community 63"
-Cohesion: 1.0
-Nodes (1): Process assessment booking form submission.
-
-### Community 64 - "Community 64"
-Cohesion: 1.0
-Nodes (1): Render the visual field editor for a PDF template.
-
-### Community 65 - "Community 65"
-Cohesion: 1.0
-Nodes (1): Return all fields for a template.
-
-### Community 66 - "Community 66"
-Cohesion: 1.0
-Nodes (1): Update a field's position or properties.
-
-### Community 67 - "Community 67"
-Cohesion: 1.0
-Nodes (1): Create a new field on a template.
-
-### Community 68 - "Community 68"
-Cohesion: 1.0
-Nodes (1): Delete a field from a template.
-
-### Community 69 - "Community 69"
-Cohesion: 1.0
-Nodes (1): Return the preview image URL for a specific page.
-
-### Community 70 - "Community 70"
-Cohesion: 1.0
-Nodes (1): Upload a preview image for a template page directly from the editor.
-
-### Community 71 - "Community 71"
-Cohesion: 1.0
-Nodes (1): Generate a preview filled PDF with sample data.
-
-### Community 72 - "Community 72"
-Cohesion: 1.0
-Nodes (1): Auto-save browser-detected timezone to the user profile if not already set.
-
-### Community 73 - "Community 73"
-Cohesion: 1.0
-Nodes (1): Override home to add ADP posting info for Fusion users
-
-### Community 74 - "Community 74"
-Cohesion: 1.0
-Nodes (1): Authorizer dashboard - simplified mobile-first view
-
-### Community 75 - "Community 75"
-Cohesion: 1.0
-Nodes (1): List of cases assigned to the authorizer
-
-### Community 76 - "Community 76"
-Cohesion: 1.0
-Nodes (1): AJAX search endpoint for real-time search
-
-### Community 77 - "Community 77"
-Cohesion: 1.0
-Nodes (1): Add a comment to a case - posts to sale order chatter and emails salesperson
-
-### Community 78 - "Community 78"
-Cohesion: 1.0
-Nodes (1): Upload a document for a case
-
-### Community 79 - "Community 79"
-Cohesion: 1.0
-Nodes (1): Download an attachment from sale order (original application, xml, proof of deli
-
-### Community 80 - "Community 80"
-Cohesion: 1.0
-Nodes (1): View an approval photo
-
-### Community 81 - "Community 81"
-Cohesion: 1.0
-Nodes (1): Sales rep dashboard with search and filters
-
-### Community 82 - "Community 82"
-Cohesion: 1.0
-Nodes (1): List of cases for the sales rep
-
-### Community 83 - "Community 83"
-Cohesion: 1.0
-Nodes (1): AJAX search endpoint for sales rep real-time search
-
-### Community 84 - "Community 84"
-Cohesion: 1.0
-Nodes (1): View a specific case for sales rep
-
-### Community 85 - "Community 85"
-Cohesion: 1.0
-Nodes (1): Add a comment to a case (sales rep) - posts to sale order chatter and emails aut
-
-### Community 86 - "Community 86"
-Cohesion: 1.0
-Nodes (1): List of funding claims for the client
-
-### Community 87 - "Community 87"
-Cohesion: 1.0
-Nodes (1): View a specific funding claim
-
-### Community 88 - "Community 88"
-Cohesion: 1.0
-Nodes (1): Download a document from a funding claim
-
-### Community 89 - "Community 89"
-Cohesion: 1.0
-Nodes (1): Download proof of delivery from a funding claim
-
-### Community 90 - "Community 90"
-Cohesion: 1.0
-Nodes (1): Technician dashboard - today's schedule with timeline.
-
-### Community 91 - "Community 91"
-Cohesion: 1.0
-Nodes (1): List of all tasks for the technician.
-
-### Community 92 - "Community 92"
-Cohesion: 1.0
-Nodes (1): View a specific technician task.
-
-### Community 93 - "Community 93"
-Cohesion: 1.0
-Nodes (1): Add notes (and optional photos) to a completed task.          :param notes: text
-
-### Community 94 - "Community 94"
-Cohesion: 1.0
-Nodes (1): Handle task status changes (start, complete, en_route, cancel).         Location
-
-### Community 95 - "Community 95"
-Cohesion: 1.0
-Nodes (1): Transcribe voice recording using OpenAI Whisper, translate to English.
-
-### Community 96 - "Community 96"
-Cohesion: 1.0
-Nodes (1): Use GPT to clean up and format raw notes text.
-
-### Community 97 - "Community 97"
-Cohesion: 1.0
-Nodes (1): Format transcription with GPT and complete the task.
-
-### Community 98 - "Community 98"
-Cohesion: 1.0
-Nodes (1): Next day preparation view.
-
-### Community 99 - "Community 99"
-Cohesion: 1.0
-Nodes (1): View schedule for a specific date.
-
-### Community 100 - "Community 100"
-Cohesion: 1.0
-Nodes (1): Admin map view showing latest technician locations using Google Maps.
-
-### Community 101 - "Community 101"
-Cohesion: 1.0
-Nodes (1): Log the technician's current GPS location.
-
-### Community 102 - "Community 102"
-Cohesion: 1.0
-Nodes (1): Check if the current technician is clocked in.          Returns {clocked_in: boo
-
-### Community 103 - "Community 103"
-Cohesion: 1.0
-Nodes (1): Save the technician's personal start location.
-
-### Community 104 - "Community 104"
-Cohesion: 1.0
-Nodes (1): Register a push notification subscription.
-
-### Community 105 - "Community 105"
-Cohesion: 1.0
-Nodes (1): Legacy: List of deliveries for the technician (redirects to tasks).
-
-### Community 106 - "Community 106"
-Cohesion: 1.0
-Nodes (1): View a specific delivery for technician (legacy, still works).
-
-### Community 107 - "Community 107"
-Cohesion: 1.0
-Nodes (1): POD signature capture page - accessible by technicians and sales reps
-
-### Community 108 - "Community 108"
-Cohesion: 1.0
-Nodes (1): Save POD signature via AJAX
-
-### Community 109 - "Community 109"
-Cohesion: 1.0
-Nodes (1): Task-level POD signature capture page (works for all tasks including shadow).
-
-### Community 110 - "Community 110"
-Cohesion: 1.0
-Nodes (1): Save POD signature directly on a task.
-
-### Community 111 - "Community 111"
-Cohesion: 1.0
-Nodes (1): Show the accessibility assessment type selector
-
-### Community 112 - "Community 112"
-Cohesion: 1.0
-Nodes (1): List all accessibility assessments for the current user (sales rep or authorizer
-
-### Community 113 - "Community 113"
-Cohesion: 1.0
-Nodes (1): Straight stair lift assessment form
-
-### Community 114 - "Community 114"
-Cohesion: 1.0
-Nodes (1): Curved stair lift assessment form
-
-### Community 115 - "Community 115"
-Cohesion: 1.0
-Nodes (1): Vertical Platform Lift assessment form
-
-### Community 116 - "Community 116"
-Cohesion: 1.0
-Nodes (1): Ceiling Lift assessment form
-
-### Community 117 - "Community 117"
-Cohesion: 1.0
-Nodes (1): Custom Ramp assessment form
-
-### Community 118 - "Community 118"
-Cohesion: 1.0
-Nodes (1): Bathroom Modification assessment form
-
-### Community 119 - "Community 119"
-Cohesion: 1.0
-Nodes (1): Tub Cutout assessment form
-
-### Community 120 - "Community 120"
-Cohesion: 1.0
-Nodes (1): Save an accessibility assessment and optionally create a Sale Order
-
-### Community 121 - "Community 121"
-Cohesion: 1.0
-Nodes (1): Render the rental pickup inspection form for the technician.
-
-### Community 122 - "Community 122"
-Cohesion: 1.0
-Nodes (1): Save the rental inspection results.
-
-## Knowledge Gaps
-- **177 isolated node(s):** `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`, `Draw a single field onto the reportlab canvas.          Args:             c: rep`, `Override create to generate reference number` (+172 more)
-  These have ≤1 connection - possible missing edges or undocumented components.
-- **Thin community `Community 19`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 20`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 21`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 22`** (1 nodes): `__manifest__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 23`** (1 nodes): `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 24`** (1 nodes): `Draw a single field onto the reportlab canvas.          Args:             c: rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 25`** (1 nodes): `Override create to generate reference number`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 26`** (1 nodes): `Get authorizer from x_fc_authorizer_id field`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 27`** (1 nodes): `Get cases for authorizer portal with optional search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 28`** (1 nodes): `Get cases for sales rep portal with optional search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 29`** (1 nodes): `Override create to handle revision numbering`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 30`** (1 nodes): `Get documents for a sale order, optionally filtered by type`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 31`** (1 nodes): `Get all revisions of a specific document type`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 32`** (1 nodes): `Override create to set author from current user if not provided`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 33`** (1 nodes): `Kanban group expansion — always show all 6 workflow states.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 34`** (1 nodes): `Straight stair lift: (steps × nose_to_nose) + 13" top landing`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 35`** (1 nodes): `Use manual override if provided, otherwise use calculated`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 36`** (1 nodes): `Curved stair lift calculation:         - 12" per step         - 16" per curve`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 37`** (1 nodes): `Use manual override if provided, otherwise use calculated`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 38`** (1 nodes): `Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 39`** (1 nodes): `Landing required every 30 feet (360 inches)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 40`** (1 nodes): `Total length including landings (5 feet = 60 inches each)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 41`** (1 nodes): `Compute portal access status based on user account and login history.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 42`** (1 nodes): `Count sale orders where this partner is the authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 43`** (1 nodes): `Count assessments where this partner is involved`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 44`** (1 nodes): `Count sale orders assigned to this partner as delivery technician`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 45`** (1 nodes): `assessment_form.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 46`** (1 nodes): `technician_sw.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 47`** (1 nodes): `loaner_portal.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 48`** (1 nodes): `signature_pad.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 49`** (1 nodes): `portal_search.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 50`** (1 nodes): `Display the Page 11 signing form.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 51`** (1 nodes): `Process the submitted Page 11 signature.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 52`** (1 nodes): `Download the signed Page 11 PDF.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 53`** (1 nodes): `Start a new assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 54`** (1 nodes): `View/edit an assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 55`** (1 nodes): `Save assessment data (create or update)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 56`** (1 nodes): `Signature capture page`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 57`** (1 nodes): `Save a signature (AJAX)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 58`** (1 nodes): `Complete the assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 59`** (1 nodes): `Start a new express assessment (Page 1 - Equipment Selection)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 60`** (1 nodes): `Continue/edit an express assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 61`** (1 nodes): `Save express assessment data (create or update)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 62`** (1 nodes): `Public page for booking an accessibility assessment.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 63`** (1 nodes): `Process assessment booking form submission.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 64`** (1 nodes): `Render the visual field editor for a PDF template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 65`** (1 nodes): `Return all fields for a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 66`** (1 nodes): `Update a field's position or properties.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 67`** (1 nodes): `Create a new field on a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 68`** (1 nodes): `Delete a field from a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 69`** (1 nodes): `Return the preview image URL for a specific page.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 70`** (1 nodes): `Upload a preview image for a template page directly from the editor.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 71`** (1 nodes): `Generate a preview filled PDF with sample data.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 72`** (1 nodes): `Auto-save browser-detected timezone to the user profile if not already set.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 73`** (1 nodes): `Override home to add ADP posting info for Fusion users`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 74`** (1 nodes): `Authorizer dashboard - simplified mobile-first view`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 75`** (1 nodes): `List of cases assigned to the authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 76`** (1 nodes): `AJAX search endpoint for real-time search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 77`** (1 nodes): `Add a comment to a case - posts to sale order chatter and emails salesperson`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 78`** (1 nodes): `Upload a document for a case`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 79`** (1 nodes): `Download an attachment from sale order (original application, xml, proof of deli`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 80`** (1 nodes): `View an approval photo`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 81`** (1 nodes): `Sales rep dashboard with search and filters`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 82`** (1 nodes): `List of cases for the sales rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 83`** (1 nodes): `AJAX search endpoint for sales rep real-time search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 84`** (1 nodes): `View a specific case for sales rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 85`** (1 nodes): `Add a comment to a case (sales rep) - posts to sale order chatter and emails aut`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 86`** (1 nodes): `List of funding claims for the client`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 87`** (1 nodes): `View a specific funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 88`** (1 nodes): `Download a document from a funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 89`** (1 nodes): `Download proof of delivery from a funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 90`** (1 nodes): `Technician dashboard - today's schedule with timeline.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 91`** (1 nodes): `List of all tasks for the technician.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 92`** (1 nodes): `View a specific technician task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 93`** (1 nodes): `Add notes (and optional photos) to a completed task.          :param notes: text`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 94`** (1 nodes): `Handle task status changes (start, complete, en_route, cancel).         Location`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 95`** (1 nodes): `Transcribe voice recording using OpenAI Whisper, translate to English.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 96`** (1 nodes): `Use GPT to clean up and format raw notes text.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 97`** (1 nodes): `Format transcription with GPT and complete the task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 98`** (1 nodes): `Next day preparation view.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 99`** (1 nodes): `View schedule for a specific date.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 100`** (1 nodes): `Admin map view showing latest technician locations using Google Maps.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 101`** (1 nodes): `Log the technician's current GPS location.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 102`** (1 nodes): `Check if the current technician is clocked in.          Returns {clocked_in: boo`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 103`** (1 nodes): `Save the technician's personal start location.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 104`** (1 nodes): `Register a push notification subscription.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 105`** (1 nodes): `Legacy: List of deliveries for the technician (redirects to tasks).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 106`** (1 nodes): `View a specific delivery for technician (legacy, still works).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 107`** (1 nodes): `POD signature capture page - accessible by technicians and sales reps`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 108`** (1 nodes): `Save POD signature via AJAX`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 109`** (1 nodes): `Task-level POD signature capture page (works for all tasks including shadow).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 110`** (1 nodes): `Save POD signature directly on a task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 111`** (1 nodes): `Show the accessibility assessment type selector`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 112`** (1 nodes): `List all accessibility assessments for the current user (sales rep or authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 113`** (1 nodes): `Straight stair lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 114`** (1 nodes): `Curved stair lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 115`** (1 nodes): `Vertical Platform Lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 116`** (1 nodes): `Ceiling Lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 117`** (1 nodes): `Custom Ramp assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 118`** (1 nodes): `Bathroom Modification assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 119`** (1 nodes): `Tub Cutout assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 120`** (1 nodes): `Save an accessibility assessment and optionally create a Sale Order`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 121`** (1 nodes): `Render the rental pickup inspection form for the technician.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 122`** (1 nodes): `Save the rental inspection results.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-
-## Suggested Questions
-_Questions this graph is uniquely positioned to answer:_
-
-- **Why does `create()` connect `Community 3` to `Community 0`, `Community 1`, `Community 4`, `Community 7`, `Community 11`?**
-  _High betweenness centrality (0.080) - this node is a cross-community bridge._
-- **Why does `FusionAssessment` connect `Community 2` to `Community 4`?**
-  _High betweenness centrality (0.059) - this node is a cross-community bridge._
-- **Why does `AuthorizerPortal` connect `Community 7` to `Community 0`, `Community 4`?**
-  _High betweenness centrality (0.047) - this node is a cross-community bridge._
-- **Are the 17 inferred relationships involving `create()` (e.g. with `._generate_tutorial_articles()` and `.action_grant_portal_access()`) actually correct?**
-  _`create()` has 17 INFERRED edges - model-reasoned connections that need verification._
-- **Are the 2 inferred relationships involving `accessibility_assessment_save()` (e.g. with `create()` and `.action_complete()`) actually correct?**
-  _`accessibility_assessment_save()` has 2 INFERRED edges - model-reasoned connections that need verification._
-- **What connects `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit` to the rest of the system?**
-  _177 weakly-connected nodes found - possible documentation gaps or missing edges._
-- **Should `Community 0` be split into smaller, more focused modules?**
-  _Cohesion score 0.05 - nodes in this community are weakly interconnected._

fusion_authorizer_portal/graphify-out/cache/046056455412ebee936412c1240a69f937f190344b64ec0454b6063195d45271.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "label": "authorizer_comment.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L1"}, {"id": "authorizer_comment_authorizercomment", "label": "AuthorizerComment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9"}, {"id": "authorizer_comment_compute_display_name", "label": "_compute_display_name()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70"}, {"id": "authorizer_comment_create", "label": "create()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78"}, {"id": "authorizer_comment_rationale_79", "label": "Override create to set author from current user if not provided", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_authorizercomment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_compute_display_name", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_create", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78", "weight": 1.0}, {"source": "authorizer_comment_rationale_79", "target": "authorizer_comment_authorizercomment_create", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79", "weight": 1.0}], "raw_calls": [{"caller_nid": "authorizer_comment_compute_display_name", "callee": "strftime", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L73"}, {"caller_nid": "authorizer_comment_compute_display_name", "callee": "_", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L75"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L81"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L83"}, {"caller_nid": "authorizer_comment_create", "callee": "super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L85"}]}

fusion_authorizer_portal/graphify-out/cache/201bffcfb9df81c1c697f76723db3d2b55f70a670695aa4cffad72f1e543c31a.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/308a1a5138c86acd5683293941dccb2eddc57c55e2795de263eee8f7ceaf4785.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "label": "chatter_message_authorizer.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L1"}, {"id": "chatter_message_authorizer_setup", "label": "setup()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14"}, {"id": "chatter_message_authorizer_onclickmessageauthorizer", "label": "onClickMessageAuthorizer()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "patch", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "hooks", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_setup", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_onclickmessageauthorizer", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20", "weight": 1.0}], "raw_calls": [{"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L16"}, {"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L17"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "call", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L25"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "map", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "split", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "doAction", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L34"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "warn", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L37"}]}

fusion_authorizer_portal/graphify-out/cache/344325bcf48b6dae6ea42a035e0cc7e4cec0dfedec2b4e2bd28faece240df747.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L6", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L11", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3bd9ca6c402373c66eb4922b9d6ba658e2386a32cd63c119daea3714ef5ca4fa.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "label": "timezone_detect.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L1"}, {"id": "timezone_detect_start", "label": "start()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8"}, {"id": "timezone_detect_detectandsavetimezone", "label": "_detectAndSaveTimezone()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13"}, {"id": "timezone_detect_getcookie", "label": "_getCookie()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_start", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_detectandsavetimezone", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_getcookie", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30", "weight": 1.0}, {"source": "timezone_detect_start", "target": "timezone_detect_detectandsavetimezone", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L10", "weight": 1.0}, {"source": "timezone_detect_detectandsavetimezone", "target": "timezone_detect_getcookie", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L22", "weight": 1.0}], "raw_calls": [{"caller_nid": "timezone_detect_start", "callee": "_super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L9"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "resolvedOptions", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "DateTimeFormat", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "catch", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "_rpc", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_getcookie", "callee": "match", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L31"}, {"caller_nid": "timezone_detect_getcookie", "callee": "decodeURIComponent", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L32"}]}

fusion_authorizer_portal/graphify-out/cache/3c8153d244043ce50d63f92e28c5047a85aa0403183feb9318309e281c3a3aee.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L6", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3cd6493213bae26920500259650a0498e68c60d6ba1969312a624edc63c9fd93.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L28"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchone", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L35"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L36"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L39"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L44"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L49"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L60"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L62"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L64"}]}

fusion_authorizer_portal/graphify-out/cache/55625cb82706d37b738a37ae8c2666788e3e3bde08167936cd99f4a7b65dd586.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L1"}, {"id": "init_reactivate_views", "label": "_reactivate_views()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7"}, {"id": "init_rationale_8", "label": "Ensure all module views are active after install/update.      Odoo silently deac", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "init_reactivate_views", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "init_rationale_8", "target": "init_reactivate_views", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8", "weight": 1.0}], "raw_calls": [{"caller_nid": "init_reactivate_views", "callee": "search", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "sudo", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "write", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L20"}, {"caller_nid": "init_reactivate_views", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L21"}, {"caller_nid": "init_reactivate_views", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L26"}, {"caller_nid": "init_reactivate_views", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "getLogger", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L29"}]}

fusion_authorizer_portal/graphify-out/cache/5e06da4bd569ef8ff94d79611571501a0fe7ccc3d3d3a1355cafc7d83441e575.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_manifest_py", "label": "__manifest__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__manifest__.py", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/66efd778b81d727e4df14662ff378f4d8c31bca05f87fa387c0760f7ecb8e0bf.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_signature_pad_js", "label": "signature_pad.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/signature_pad.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/82b54859e3cdc0d06aa234bd56e490b57a84237c34185a8293d42ea42e64f01c.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_assessment_form_js", "label": "assessment_form.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/assessment_form.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/8e18c26853be951ba743bc6bc1f889014ea593bbdb3f096de5307c4a29291298.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/a0b44e9d1d686feedbb45abc7155102474b444c2375e41ec4e884d331befcef4.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/adeb8dd4ce55111ffd86c41804940dc0bba334af2e7a1a4e2caa11d2a5fded3d.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_portal_search_js", "label": "portal_search.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/portal_search.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/bdab7c3bffb56f3c01889c19039dda8139704dae111032451eee29d4da1aba7e.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "label": "loaner_checkout.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L1"}, {"id": "loaner_checkout_fusionloanercheckoutassessment", "label": "FusionLoanerCheckoutAssessment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6"}, {"id": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "label": ".action_view_assessment()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "loaner_checkout_fusionloanercheckoutassessment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6", "weight": 1.0}, {"source": "loaner_checkout_fusionloanercheckoutassessment", "target": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "relation": "method", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17", "weight": 1.0}], "raw_calls": [{"caller_nid": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "callee": "ensure_one", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L18"}]}

fusion_authorizer_portal/graphify-out/cache/bdadca0a69fae44893e3cd9e9e3178034415564cc70f31d6353ea1a688d5e54e.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "label": "loaner_portal.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/dee4a573c575f3c42bf1f4a7d900626dacaba915ece6630ef0274e624fc906f8.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_technician_sw_js", "label": "technician_sw.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/technician_sw.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/df42568b96706fa316a1cf512784acdf5b0014abc5fc1ff47f187baed68f0a1f.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_claims/CLAUDE.md

@@ -33,14 +33,14 @@ fusion_ringcentral, fusion_tasks
 
 `wizard/odsp_submit_to_odsp_wizard.py` calls into `fusion_faxes.send.fax.wizard` (the fax composer) and reads `partner.x_ff_fax_number` — **but `fusion_faxes` is NOT in `__manifest__.py.depends`**. The fax actions are guarded by `hasattr` checks so the wizard still loads if `fusion_faxes` is missing, but the "Send Fax" / "Send Email + Fax" buttons will fail at click-time. If you're moving this module to a new database, install `fusion_faxes` alongside it.
 
-### ⚠ Reverse-dependency: `fusion_authorizer_portal` always installed alongside
+### ⚠ Reverse-dependency: `fusion_portal` always installed alongside
 
-The dependency direction is **`fusion_authorizer_portal` → `fusion_claims`** (hard, declared in fusion_authorizer_portal's manifest), but fusion_claims uses APIs that only exist when fusion_authorizer_portal is installed:
+The dependency direction is **`fusion_portal` → `fusion_claims`** (hard, declared in fusion_portal's manifest), but fusion_claims uses APIs that only exist when fusion_portal is installed:
 
-- `sale.order._apply_pod_signature_to_approval_form` imports `PDFTemplateFiller` from `odoo.addons.fusion_authorizer_portal.utils.pdf_filler` — `ImportError` if missing.
-- `fusion.page11.sign.request` renders PDFs using `fusion.pdf.template` records — that **model lives in fusion_authorizer_portal**, not here.
-- The `/page11/sign/<token>` URL that the Page 11 wizard generates is handled by `fusion_authorizer_portal.controllers.portal_page11_sign` — without it the public signing flow is dead.
-- `page11_sign_request._generate_signed_pdf` references `fusion.assessment` records — that model also lives in fusion_authorizer_portal.
+- `sale.order._apply_pod_signature_to_approval_form` imports `PDFTemplateFiller` from `odoo.addons.fusion_portal.utils.pdf_filler` — `ImportError` if missing.
+- `fusion.page11.sign.request` renders PDFs using `fusion.pdf.template` records — that **model lives in fusion_portal**, not here.
+- The `/page11/sign/<token>` URL that the Page 11 wizard generates is handled by `fusion_portal.controllers.portal_page11_sign` — without it the public signing flow is dead.
+- `page11_sign_request._generate_signed_pdf` references `fusion.assessment` records — that model also lives in fusion_portal.
 
 In practice both modules are always installed together. See §29 for the full integration map.
 
@@ -861,7 +861,7 @@ Mirrors the MOD on_hold pattern. `x_fc_odsp_previous_status_before_hold` saves t
 | Method | Used when | Mechanism |
 |---|---|---|
 | `action_sign_sa_mobility_form` | Client signs the SA Mobility form directly (Page 2 client consent) | **Hard-coded coordinates**: writes printed name at `(180, h-180)` and `(72, h-560)`, date at `(350, h-560)`, signature image at `(72, h-540, 200×50px)`. Uses `reportlab.pdfgen.canvas` + `odoo.tools.pdf.PdfFileReader/Writer`. **Brittle** — if the gov PDF layout changes, the coordinates must be re-measured. |
-| `_apply_pod_signature_to_approval_form` | POD signature collected (auto-fired by `write` override when `x_fc_pod_signature` is set) | **PDFTemplateFiller** from `fusion_authorizer_portal` — reads field positions from the active `fusion.pdf.template` (category=`odsp`), uses per-case `x_fc_sa_signature_page`. Configurable via drag-and-drop visual editor, not code. Bypass via `skip_pod_signature_hook=True` context. |
+| `_apply_pod_signature_to_approval_form` | POD signature collected (auto-fired by `write` override when `x_fc_pod_signature` is set) | **PDFTemplateFiller** from `fusion_portal` — reads field positions from the active `fusion.pdf.template` (category=`odsp`), uses per-case `x_fc_sa_signature_page`. Configurable via drag-and-drop visual editor, not code. Bypass via `skip_pod_signature_hook=True` context. |
 
 The PDFTemplateFiller approach is the preferred path going forward — it survives gov form revisions because positions live in the database, not in Python code.
 
@@ -1588,7 +1588,7 @@ All user-facing text is **Canadian English** (per repo CLAUDE.md). All monetary
 
 74. **`odsp_sa_mobility_wizard._get_template_path()` uses raw `os.path`** instead of Odoo's `tools.misc.file_path`. If the module is ever deployed as a zip (rare in Odoo deployments but possible), this will fail. Migrate to `file_path('fusion_claims/static/src/pdf/sa_mobility_form_template.pdf')` if you ship this for multi-tenant.
 
-75. **PDF template field positions for ODSP signing live in `fusion.pdf.template` (category=odsp)** — managed via a drag-and-drop editor that lives in `fusion_authorizer_portal`. The OWL editor reads field positions per-page; `_apply_pod_signature_to_approval_form` consumes them. If the gov SA form layout changes, edit the template via the visual editor, not by changing Python coordinates.
+75. **PDF template field positions for ODSP signing live in `fusion.pdf.template` (category=odsp)** — managed via a drag-and-drop editor that lives in `fusion_portal`. The OWL editor reads field positions per-page; `_apply_pod_signature_to_approval_form` consumes them. If the gov SA form layout changes, edit the template via the visual editor, not by changing Python coordinates.
 
 76. **SA Mobility wizard limits rows**: 6 parts, 5 labour, 4 fees. The gov PDF only has that many slots. If the SO has more lines, the rest are silently dropped from the form fill (but still appear in the invoice). The wizard truncates via slicing in `default_get`.
 
@@ -1862,11 +1862,11 @@ This module is the **lower-level engine**. Two sibling modules layer on top of i
 
 The whole technician task → sale order coupling lives in `fusion_claims/models/technician_task.py:674` — and the calendar / map / scheduling logic stays in the base `fusion.technician.task` model in fusion_tasks.
 
-### 29.2 `fusion_authorizer_portal` (portal layer — undeclared but co-installed)
+### 29.2 `fusion_portal` (portal layer — undeclared but co-installed)
 
-fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `fusion_loaners_management` as hard deps. fusion_claims uses APIs that only exist when fusion_authorizer_portal is installed — see the dependency note at the top of §2.
+fusion_portal manifest declares `fusion_claims` + `fusion_tasks` + `fusion_loaners_management` as hard deps. fusion_claims uses APIs that only exist when fusion_portal is installed — see the dependency note at the top of §2.
 
-| Provided by fusion_authorizer_portal | Used by fusion_claims |
+| Provided by fusion_portal | Used by fusion_claims |
 |---|---|
 | `PDFTemplateFiller` class (`utils/pdf_filler.py`) | `sale.order._apply_pod_signature_to_approval_form` imports it. Same pattern as Odoo Enterprise Sign module — overlays text/checkmarks/signatures via reportlab Canvas + `mergePage()`. |
 | `fusion.pdf.template` model + `fusion.pdf.template.field` + `fusion.pdf.template.preview` | Drag-and-drop visual editor for placing fields on PDF preview images. Categories: `adp`, `mod`, `odsp`, `hardship`, `other`. fusion_claims searches for `(category='odsp', state='active')` for SA Mobility / OW signature overlays. The Page 11 wizard searches for `name ilike 'adp_page_11'` or `'page 11'`. |
@@ -1888,7 +1888,7 @@ fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `f
 - Renaming a field on `sale.order` likely affects portal templates (`portal_templates.xml`, `portal_assessment_express.xml`, `portal_accessibility_*.xml`) that reference it via QWeb.
 - Adding a new `x_fc_adp_application_status` value may need a portal-side handler in `portal_main.py` to render the new state.
 - The `fusion.pdf.template` schema (page-positioned fields) is the ground truth for ODSP signature placement — DON'T hard-code coordinates in fusion_claims when you could create a template field instead.
-- The `_reactivate_views` post-init hook on fusion_authorizer_portal exists specifically because the inheritance from this module's views is fragile — if you rename a field referenced by an xpath in fusion_authorizer_portal, that view goes dead and stays dead.
+- The `_reactivate_views` post-init hook on fusion_portal exists specifically because the inheritance from this module's views is fragile — if you rename a field referenced by an xpath in fusion_portal, that view goes dead and stays dead.
 
 ### 29.3 Other co-installed Nexa modules
 
@@ -1896,7 +1896,7 @@ fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `f
 |---|---|---|
 | `fusion_ringcentral` | RingCentral softphone, click-to-dial widget, fax composer | Click-to-dial works on any phone field — no direct API calls from this module |
 | `fusion_faxes` | `fusion_faxes.send.fax.wizard` + `partner.x_ff_fax_number` | Hard-soft-dep: `odsp_submit_to_odsp_wizard` calls the fax wizard for ODSP submissions |
-| `fusion_loaners_management` | Loaner equipment lending | fusion_authorizer_portal depends on this; fusion_claims doesn't touch it directly |
+| `fusion_loaners_management` | Loaner equipment lending | fusion_portal depends on this; fusion_claims doesn't touch it directly |
 | `fusion_pdf_preview` | PDF preview client action + report intercept | Project CLAUDE.md says prefer this over `act_url`+`target=new` for attachments. fusion_claims still has legacy attachment buttons using the old pattern — see gotcha #12 |
 
 ## 30. Per-funder workflow state machines
@@ -2323,7 +2323,7 @@ Creates a `fusion.technician.location` record on the remote with `source='sync'`
 - `context['skip_travel_recalc']` — prevents the pull from triggering local recalculations.
 - Terminal-state tasks (`completed`, `cancelled`) — push side does write, but pull side does NOT update existing shadow records that are already terminal (defensive against late race conditions).
 
-## 33. `fusion.assessment` (OT assessment model — lives in `fusion_authorizer_portal`)
+## 33. `fusion.assessment` (OT assessment model — lives in `fusion_portal`)
 
 The 1,636-line model that captures an OT's assessment of a client + their equipment needs, then generates the draft sale order.
 
@@ -2395,7 +2395,7 @@ The model has `signature_page_11` + `signature_page_12` binary fields. `signatur
 
 `action_complete_express()` skips step 3 (signatures) entirely — used for the "express" assessment route from the sales-rep portal where the rep just needs to spec a wheelchair without doing the full ADP assessment.
 
-## 34. `fusion.accessibility.assessment` (MOD/accessibility assessment — lives in `fusion_authorizer_portal`)
+## 34. `fusion.accessibility.assessment` (MOD/accessibility assessment — lives in `fusion_portal`)
 
 The 966-line sibling for accessibility modifications (not ADP).
 
@@ -2466,7 +2466,7 @@ The model has hundreds of measurement fields, only some of which are visible per
 
 `stairlift_curved`, `vpl`, `ceiling_lift`, `ramp`, `bathroom`, `tub_cutout` each have their own set of fields.
 
-## 35. `fusion_authorizer_portal` controller routes — detailed
+## 35. `fusion_portal` controller routes — detailed
 
 Full per-route inventory from `portal_main.py` (2,827 lines), `portal_assessment.py` (1,238), `portal_page11_sign.py` (206), `pdf_editor.py` (218).
 
@@ -2816,7 +2816,7 @@ All filtered to `move_type in ['out_invoice', 'out_refund']` (customer invoices
 
 ACSD (Assistance to Children with Severe Disabilities) is a CLIENT TYPE, not a sale type. The menu has a dedicated ACSD entry that catches any sale type but with `client_type='ACS'`.
 
-## 40. `fusion_authorizer_portal.sale_order` extensions (266 lines)
+## 40. `fusion_portal.sale_order` extensions (266 lines)
 
 Adds 6 fields to `sale.order` + 5 methods:
 
@@ -2843,7 +2843,7 @@ JSON-RPC methods (called from portal JS):
 `_get_partner_address_display()` — formatted address string.
 `_get_product_lines_for_portal()` — product lines minus internal-only data.
 
-## 41. `fusion_authorizer_portal.res_partner` extensions (767 lines)
+## 41. `fusion_portal.res_partner` extensions (767 lines)
 
 Adds geolocation + portal access management:
 
@@ -3019,7 +3019,7 @@ ssh odoo-westin "docker exec odoo-dev-app odoo -d westin-v19 -u fusion_claims --
 ssh odoo-mobility "docker exec odoo-mobility-app odoo -d mobility -u fusion_claims --stop-after-init && docker restart odoo-mobility-app"
 ```
 
-For multiple modules: `-u fusion_claims,fusion_tasks,fusion_authorizer_portal`.
+For multiple modules: `-u fusion_claims,fusion_tasks,fusion_portal`.
 
 ### 46.3 Database probes
 
@@ -3077,7 +3077,7 @@ After 9 rounds of deep diving, here's what CLAUDE.md covers vs the codebase:
 - Every cron job with cadence + logic
 - Every constraint method with regex + rule
 - Every special-character/edge-case behaviour I encountered
-- Every cross-module integration point with both sibling modules (fusion_tasks, fusion_authorizer_portal)
+- Every cross-module integration point with both sibling modules (fusion_tasks, fusion_portal)
 - Every PDF report's conditional sections + business logic
 - Every ICP setting (~60+)
 - Every gotcha (~83)
@@ -3103,4 +3103,4 @@ After 9 rounds of deep diving, here's what CLAUDE.md covers vs the codebase:
 - Build new reports following the established color/header/footer conventions
 - Add new gotchas in the right format
 - Understand the soft-dep on `fusion_faxes` + `fusion_pdf_preview`
-- Know the deployment fact that fusion_authorizer_portal is always co-installed
+- Know the deployment fact that fusion_portal is always co-installed

fusion_claims/models/sale_order.py

@@ -1709,7 +1709,7 @@ class SaleOrder(models.Model):
             return
 
         import base64
-        from odoo.addons.fusion_authorizer_portal.utils.pdf_filler import PDFTemplateFiller
+        from odoo.addons.fusion_portal.utils.pdf_filler import PDFTemplateFiller
 
         tpl = self.env['fusion.pdf.template'].search([
             ('category', '=', 'odsp'), ('state', '=', 'active'),

fusion_clock/CLAUDE.md

@@ -5,7 +5,7 @@
 ## 1. What This Module Is
 
 - **Name**: Fusion Clock.
-- **Version**: `19.0.3.3.0`.
+- **Version**: `19.0.4.1.0`.
 - **Category**: Human Resources/Attendances.
 - **License**: OPL-1, Nexa Systems Inc.
 - **Purpose**: complete time and attendance app built on Odoo `hr.attendance`.
@@ -68,6 +68,7 @@ Custom models:
 | `fusion.clock.leave.request` | `models/clock_leave_request.py` | Portal leave requests, auto-approved but office-notified. |
 | `fusion.clock.correction` | `models/clock_correction.py` | Timesheet correction requests with approve/reject workflow. |
 | `fusion.clock.report` | `models/clock_report.py` | Employee or batch pay-period report with PDF/CSV export and email send. |
+| `fusion.clock.break.rule` | `models/clock_break_rule.py` | Per-province statutory unpaid-break thresholds (2-tier: first break after N1 h, second after N2 h). |
 | `fusion.clock.nfc.enrollment.wizard` | `wizard/clock_nfc_enrollment_wizard.py` | Backend NFC card enrolment/reassignment wizard. |
 
 Inherited models:
@@ -101,7 +102,7 @@ Clock-out flow:
 1. Verify location again.
 2. Call `_attendance_action_change()`.
 3. Write out-distance.
-4. Apply break deduction when configured.
+4. Break is deducted automatically — `x_fclk_break_minutes` is a stored compute (see §13), not an explicit controller step.
 5. Create `early_out` penalty when outside grace.
 6. Log `clock_out`.
 7. Log overtime if computed overtime is positive.
@@ -110,16 +111,23 @@ Location verification uses GPS when coordinates are available and geocoded locat
 
 ## 6. Kiosk And NFC
 
-Classic kiosk:
+PIN kiosk (opt-in alternative to NFC; v19.0.4.0.0+):
 
-- Page: `/fusion_clock/kiosk`
+- Page: `/fusion_clock/kiosk` — polished photo-tile → PIN flow (logo, brand-hue
+  gradient, live clock), matching the NFC kiosk style; built as an Odoo 19
+  Interaction (`#pin_kiosk_root`, `static/src/js/fusion_clock_kiosk.js`,
+  `static/src/scss/pin_kiosk.scss`, brand-hue var `--pk-h`).
 - JSON routes:
-  - `/fusion_clock/kiosk/search`
-  - `/fusion_clock/kiosk/verify_pin`
-  - `/fusion_clock/kiosk/clock`
-- Requires `fusion_clock.group_fusion_clock_manager`.
-- Controlled by `fusion_clock.enable_kiosk` and `fusion_clock.kiosk_pin_required`.
-- Uses `hr.employee.x_fclk_kiosk_pin`.
+  - `/fusion_clock/kiosk/search` (grid rows: +`avatar_url`, +`has_pin`; also used by the NFC kiosk's employee_search — keep additive)
+  - `/fusion_clock/kiosk/verify_pin` (returns `needs_setup` when the employee has no PIN)
+  - `/fusion_clock/kiosk/set_pin` (first-use PIN creation, 4–6 digits)
+  - `/fusion_clock/kiosk/clock` (uses the company kiosk location, no GPS geofence; optional master-gated selfie)
+- Requires `group_fusion_clock_manager` or `group_fusion_clock_kiosk_app`; has its own app icon.
+- Opt-in via `fusion_clock.enable_kiosk`. PIN is ALWAYS required (the old
+  `kiosk_pin_required` setting was removed). Selfie capture is gated by the
+  master `fusion_clock.enable_photo_verification`. Kiosk location =
+  `res.company.x_fclk_nfc_kiosk_location_id` (shared with the NFC kiosk).
+- Uses `hr.employee.x_fclk_kiosk_pin` (manager-editable; created on first tap otherwise).
 
 NFC kiosk:
 
@@ -245,16 +253,13 @@ fusion_clock.default_clock_in_time
 fusion_clock.default_clock_out_time
 fusion_clock.default_break_minutes
 fusion_clock.auto_deduct_break
-fusion_clock.break_threshold_hours
 fusion_clock.enable_auto_clockout
-fusion_clock.grace_period_minutes
 fusion_clock.max_shift_hours
 fusion_clock.enable_penalties
 fusion_clock.penalty_grace_minutes
 fusion_clock.penalty_deduction_minutes
 fusion_clock.enable_overtime
 fusion_clock.daily_overtime_threshold
-fusion_clock.weekly_overtime_threshold
 fusion_clock.office_user_id
 fusion_clock.very_late_threshold_minutes
 fusion_clock.max_monthly_absences
@@ -266,7 +271,6 @@ fusion_clock.enable_ip_fallback
 fusion_clock.enable_photo_verification
 fusion_clock.google_maps_api_key
 fusion_clock.enable_kiosk
-fusion_clock.kiosk_pin_required
 fusion_clock.enable_correction_requests
 fusion_clock.enable_sounds
 fusion_clock.pay_period_type
@@ -323,10 +327,12 @@ All new JSON endpoints must use `type="jsonrpc"`, not deprecated `type="json"`.
 
 - Always use local-day helpers for date domains. UTC midnight boundaries will break attendance totals around timezone offsets.
 - `hr.employee._get_fclk_scheduled_times(date)` returns naive UTC datetimes suitable for Odoo comparisons.
-- Break deduction is stored as minutes in `hr.attendance.x_fclk_break_minutes`; penalties add to that same field.
-- `x_fclk_net_hours` is computed from Odoo `worked_hours` minus break minutes.
-- Daily overtime currently compares net hours to employee scheduled hours or daily threshold; weekly threshold is configured but not used in `hr.attendance._compute_overtime_hours()`.
-- `fusion_clock.enable_ip_fallback` exists in settings, but server-side `_verify_location()` attempts IP whitelist matching whenever a client IP is present.
+- **`hr.attendance.x_fclk_break_minutes` is a stored COMPUTE, not a writable field** (`_compute_fclk_break_minutes`): statutory break (per the employee's province `fusion.clock.break.rule`, from actual `worked_hours`, 2-tier — first break after N1 h, second after N2 h, inclusive `>=`) **plus** Σ penalty minutes. It recomputes on every path incl. manual backend create/edit, which is what makes the break auto-apply on manually-entered hours. NEVER `write()` it — change the province rule or toggle `fusion_clock.auto_deduct_break` instead. Penalty minutes are now strictly additive (the old controller `max()` that could swallow a late clock-in penalty is gone). Rule resolved via `hr.employee._get_fclk_break_rule()` (company `state_id` → matching rule → global `is_default` rule). The retired `break_threshold_hours` setting is superseded by per-rule `break1_after_hours`.
+- `x_fclk_net_hours` is computed from Odoo `worked_hours` minus break minutes. **Gotcha: `worked_hours` itself subtracts the resource-calendar lunch interval for NON-flexible employees** (Odoo core `hr.attendance._get_worked_hours_in_range`), so the statutory tiers run on lunch-excluded hours; flexible / no-calendar employees get the raw check_in→check_out span. Tests that need a deterministic span give the employee a `flexible_hours` calendar.
+- **Migration recompute gotcha**: recomputing ONE stored computed field via `env.add_to_compute(field, recs) + recs.flush_recordset([field])` does NOT cascade to fields that depend on it. The `19.0.4.1.0` post-migrate recomputes `x_fclk_break_minutes`, `x_fclk_net_hours` AND `x_fclk_overtime_hours` (in that dependency order, flushing each) — recomputing only the break left historical `net_hours` stale (caught on the entech deploy 2026-06-01).
+- Daily overtime compares net hours to the employee's scheduled hours or the daily threshold. (The old `weekly_overtime_threshold` and `grace_period_minutes` settings were removed 2026-05-31 — they were defined/shown but never consumed.)
+- `fusion_clock.enable_ip_fallback` is honoured: `_verify_location()` only attempts IP-whitelist matching when the toggle is on (default on).
+- **All fusion_clock Boolean settings are persisted explicitly** (`'True'`/`'False'`) via the `_FCLK_BOOL_PARAMS` loop in `res.config.settings.get_values/set_values`, NOT via `config_parameter=`. Reason: a `config_parameter` Boolean can't be turned OFF (Odoo deletes the param row on a falsy value, so `get_param` returns the default and the feature stays on). When adding a new Boolean setting, add it to `_FCLK_BOOL_PARAMS` with its default; don't use `config_parameter=`.
 - NFC kiosk needs a company-level `x_fclk_nfc_kiosk_location_id`; without it taps return `no_location_configured`.
 - Kiosk routes are authenticated (`auth='user'`) and manager-gated; wall tablets need a manager-authorised kiosk user.
 - Portal report download manually streams the PDF binary rather than using `fusion_pdf_preview`.

fusion_clock/__manifest__.py

@@ -5,7 +5,7 @@
 
 {
     'name': 'Fusion Clock',
-    'version': '19.0.3.14.4',
+    'version': '19.0.4.1.0',
     'category': 'Human Resources/Attendances',
     'summary': 'Complete Employee T&A with Geofencing, Shifts, Penalties, Overtime, Kiosk, Dashboard & Payroll Export',
     'description': """
@@ -52,6 +52,7 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'security/ir.model.access.csv',
         # Data
         'data/ir_config_parameter_data.xml',
+        'data/clock_break_rule_data.xml',
         'data/ir_cron_data.xml',
         # Reports (must load before mail templates that reference them)
         'report/clock_report_template.xml',
@@ -71,8 +72,10 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'views/clock_dashboard_views.xml',
         'views/hr_employee_views.xml',
         'views/clock_schedule_views.xml',
+        'views/clock_break_rule_views.xml',
         # Wizards (must load before clock_menus.xml since menu references wizard action)
         'wizard/clock_nfc_enrollment_views.xml',
+        'wizard/clock_period_picker_views.xml',
         'views/clock_menus.xml',
         # Views - Portal
         'views/portal_clock_templates.xml',
@@ -86,6 +89,7 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'web.assets_frontend': [
             'fusion_clock/static/src/css/portal_clock.css',
             'fusion_clock/static/src/scss/nfc_kiosk.scss',
+            'fusion_clock/static/src/scss/pin_kiosk.scss',
             'fusion_clock/static/src/js/fusion_clock_portal.js',
             'fusion_clock/static/src/js/fusion_clock_kiosk.js',
             'fusion_clock/static/src/js/fusion_clock_nfc_kiosk.js',

fusion_clock/controllers/clock_api.py

@@ -5,7 +5,6 @@
 import base64
 import math
 import logging
-import pytz
 from datetime import datetime, timedelta
 from odoo import http, fields, _
 from odoo.http import request
@@ -74,9 +73,11 @@ class FusionClockAPI(http.Controller):
                 if dist < nearest_distance:
                     nearest_distance = dist
 
-        # IP fallback -- try when GPS is unavailable OR GPS is outside all geofences
+        # IP fallback -- only when enabled (default on); try when GPS is
+        # unavailable OR GPS is outside all geofences.
         ICP = request.env['ir.config_parameter'].sudo()
-        if client_ip:
+        ip_fallback_enabled = ICP.get_param('fusion_clock.enable_ip_fallback', 'True') == 'True'
+        if client_ip and ip_fallback_enabled:
             for loc in locations:
                 if loc.check_ip_whitelist(client_ip):
                     return loc, 0, None, 'ip'
@@ -135,12 +136,6 @@ class FusionClockAPI(http.Controller):
                 'date': actual_dt.date() if isinstance(actual_dt, datetime) else get_local_today(request.env, employee),
             })
 
-            # Deduct penalty minutes from attendance (adds to break deduction)
-            current_break = attendance.x_fclk_break_minutes or 0.0
-            attendance.sudo().write({
-                'x_fclk_break_minutes': current_break + deduction,
-            })
-
             # Log penalty
             log_type = 'late_clock_in' if penalty_type == 'late_in' else 'early_clock_out'
             request.env['fusion.clock.activity.log'].sudo().create({
@@ -156,32 +151,6 @@ class FusionClockAPI(http.Controller):
             if penalty_type == 'late_in':
                 employee.sudo().write({'x_fclk_ontime_streak': 0})
 
-    def _apply_break_deduction(self, attendance, employee):
-        """Apply automatic break deduction if configured."""
-        ICP = request.env['ir.config_parameter'].sudo()
-        if ICP.get_param('fusion_clock.auto_deduct_break', 'True') != 'True':
-            return
-
-        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
-        worked = attendance.worked_hours or 0.0
-
-        if worked >= threshold:
-            local_date = get_local_today(request.env, employee)
-            if attendance.check_in:
-                tz_name = (
-                    employee.resource_id.tz
-                    or (employee.user_id.partner_id.tz if employee.user_id else False)
-                    or employee.company_id.partner_id.tz
-                    or 'UTC'
-                )
-                local_date = pytz.UTC.localize(attendance.check_in).astimezone(pytz.timezone(tz_name)).date()
-            break_min = employee._get_fclk_break_minutes(local_date)
-            current = attendance.x_fclk_break_minutes or 0.0
-            # Set to whichever is higher: configured break or existing (penalty-inflated) value
-            new_val = max(break_min, current)
-            if new_val != current:
-                attendance.sudo().write({'x_fclk_break_minutes': new_val})
-
     def _log_activity(self, employee, log_type, description, attendance=None,
                       location=None, latitude=0, longitude=0, distance=0, source='portal'):
         """Create an activity log entry."""
@@ -306,8 +275,11 @@ class FusionClockAPI(http.Controller):
                     'x_fclk_clock_source': source,
                 }
 
-                # Photo verification
-                if photo and location.require_photo:
+                # Photo verification — only when the global toggle is on (master);
+                # per-location require_photo refines it from there.
+                enable_photo = request.env['ir.config_parameter'].sudo().get_param(
+                    'fusion_clock.enable_photo_verification', 'False') == 'True'
+                if photo and enable_photo and location.require_photo:
                     try:
                         write_vals['x_fclk_checkin_photo'] = photo
                     except Exception:
@@ -400,9 +372,6 @@ class FusionClockAPI(http.Controller):
                     'x_fclk_out_distance': round(distance, 1),
                 })
 
-                # Apply break deduction
-                self._apply_break_deduction(attendance, employee)
-
                 # Check for early clock-out penalty
                 if not is_scheduled_off:
                     _, scheduled_out = self._get_scheduled_times(employee, today)

fusion_clock/controllers/clock_kiosk.py

@@ -17,11 +17,11 @@ def _is_kiosk_operator(user):
 
 
 class FusionClockKiosk(http.Controller):
-    """Kiosk mode controller for shared-device clock-in/out."""
+    """PIN kiosk — shared-device clock-in/out: tap your photo, enter a PIN."""
 
     @http.route('/fusion_clock/kiosk', type='http', auth='user', website=True)
     def kiosk_page(self, **kw):
-        """Kiosk clock-in/out page for shared tablets."""
+        """Polished PIN kiosk page for shared tablets."""
         user = request.env.user
         if not _is_kiosk_operator(user):
             return request.redirect('/my')
@@ -30,74 +30,95 @@ class FusionClockKiosk(http.Controller):
         if ICP.get_param('fusion_clock.enable_kiosk', 'False') != 'True':
             return request.redirect('/my')
 
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
         values = {
-            'pin_required': ICP.get_param('fusion_clock.kiosk_pin_required', 'True') == 'True',
             'page_name': 'kiosk',
+            'company_name': company.name,
+            'company_logo_url': '/web/image/res.company/%s/logo' % company.id if company.logo else '',
+            'location_name': location.name if location else 'No location configured',
+            'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
+            'photo_required': ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True',
         }
         return request.render('fusion_clock.kiosk_page', values)
 
     @http.route('/fusion_clock/kiosk/search', type='jsonrpc', auth='user', methods=['POST'])
     def kiosk_search(self, query='', **kw):
-        """Search employees for kiosk identification."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+        """Employees for the kiosk grid. Also used by the NFC kiosk's
+        employee_search — keep the return shape additive."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
         employees = request.env['hr.employee'].sudo().search([
             ('x_fclk_enable_clock', '=', True),
             ('name', 'ilike', query),
-        ], limit=20)
-
-        return {
-            'employees': [{
+        ], limit=200, order='name')
+        rows = []
+        for emp in employees:
+            unique = emp.write_date.strftime('%Y%m%d%H%M%S') if emp.write_date else ''
+            rows.append({
                 'id': emp.id,
                 'name': emp.name,
                 'department': emp.department_id.name or '',
                 'is_checked_in': emp.attendance_state == 'checked_in',
                 'card_uid': emp.x_fclk_nfc_card_uid or '',
-            } for emp in employees],
-        }
+                'has_pin': bool(emp.x_fclk_kiosk_pin),
+                'avatar_url': '/web/image/hr.employee.public/%s/avatar_128?unique=%s' % (emp.id, unique),
+            })
+        return {'employees': rows}
 
     @http.route('/fusion_clock/kiosk/verify_pin', type='jsonrpc', auth='user', methods=['POST'])
     def kiosk_verify_pin(self, employee_id=0, pin='', **kw):
-        """Verify employee PIN for kiosk mode."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+        """Verify a PIN. Employees with no PIN return needs_setup."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
-        employee = request.env['hr.employee'].sudo().browse(employee_id)
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
         if not employee.exists():
-            return {'error': 'Employee not found.'}
+            return {'error': 'not_found'}
+        if not employee.x_fclk_kiosk_pin:
+            return {'needs_setup': True, 'employee_name': employee.name}
+        if employee.x_fclk_kiosk_pin != pin:
+            return {'error': 'invalid_pin'}
+        return {'success': True, 'employee_name': employee.name,
+                'is_checked_in': employee.attendance_state == 'checked_in'}
 
-        if employee.x_fclk_kiosk_pin and employee.x_fclk_kiosk_pin != pin:
-            return {'error': 'Invalid PIN.'}
-
-        return {
-            'success': True,
-            'employee_name': employee.name,
-            'is_checked_in': employee.attendance_state == 'checked_in',
-        }
+    @http.route('/fusion_clock/kiosk/set_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_set_pin(self, employee_id=0, pin='', **kw):
+        """First-use PIN creation. Rejects if the employee already has one."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+        if employee.x_fclk_kiosk_pin:
+            return {'error': 'already_set'}
+        pin = (pin or '').strip()
+        if not (pin.isdigit() and 4 <= len(pin) <= 6):
+            return {'error': 'bad_pin'}
+        employee.write({'x_fclk_kiosk_pin': pin})
+        return {'success': True, 'employee_name': employee.name}
 
     @http.route('/fusion_clock/kiosk/clock', type='jsonrpc', auth='user', methods=['POST'])
-    def kiosk_clock(self, employee_id=0, latitude=0, longitude=0, **kw):
-        """Perform clock action from kiosk on behalf of an employee."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+    def kiosk_clock(self, employee_id=0, photo_b64='', **kw):
+        """Clock the employee in/out from the shared kiosk. Fixed wall device:
+        uses the company kiosk location, no per-clock GPS geofence."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
-        employee = request.env['hr.employee'].sudo().browse(employee_id)
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
         if not employee.exists() or not employee.x_fclk_enable_clock:
-            return {'error': 'Employee not found or clock not enabled.'}
+            return {'error': 'not_found'}
 
-        from .clock_api import FusionClockAPI, haversine_distance
+        ICP = request.env['ir.config_parameter'].sudo()
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        if not location:
+            return {'error': 'no_location_configured'}
+
+        from .clock_api import FusionClockAPI
+        from .clock_nfc_kiosk import _strip_data_url_prefix
         api = FusionClockAPI()
 
-        location, distance, err, method = api._verify_location(latitude, longitude, employee)
-        if not location:
-            return {
-                'error': api._location_error_message(err, distance),
-                'allowed': False,
-            }
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
 
         is_checked_in = employee.attendance_state == 'checked_in'
         now = fields.Datetime.now()
@@ -105,75 +126,45 @@ class FusionClockKiosk(http.Controller):
         day_plan = employee._get_fclk_day_plan(today)
         is_scheduled_off = not day_plan.get('scheduled')
 
-        geo_info = {
-            'latitude': latitude,
-            'longitude': longitude,
-            'browser': 'kiosk',
-            'ip_address': request.httprequest.remote_addr or '',
-        }
-
+        geo_info = {'latitude': 0, 'longitude': 0, 'browser': 'kiosk',
+                    'ip_address': request.httprequest.remote_addr or ''}
         try:
             attendance = employee.sudo()._attendance_action_change(geo_info)
-
             if not is_checked_in:
                 attendance.sudo().write({
                     'x_fclk_location_id': location.id,
-                    'x_fclk_in_distance': round(distance, 1),
+                    'x_fclk_in_distance': 0.0,
                     'x_fclk_clock_source': 'kiosk',
+                    'x_fclk_check_in_photo': photo_bytes if photo_bytes else False,
                 })
-
-                api._log_activity(
-                    employee, 'clock_in',
-                    f"Kiosk clock-in at {location.name}",
-                    attendance=attendance, location=location,
-                    latitude=latitude, longitude=longitude, distance=distance,
-                    source='kiosk',
-                )
-
+                api._log_activity(employee, 'clock_in', f"Kiosk clock-in at {location.name}",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
                 if is_scheduled_off:
-                    api._log_activity(
-                        employee, 'unscheduled_shift',
-                        f"Kiosk clock-in on an unscheduled day at {location.name}",
-                        attendance=attendance, location=location,
-                        latitude=latitude, longitude=longitude, distance=distance,
-                        source='kiosk',
-                    )
+                    api._log_activity(employee, 'unscheduled_shift',
+                                      f"Kiosk clock-in on an unscheduled day at {location.name}",
+                                      attendance=attendance, location=location,
+                                      latitude=0, longitude=0, distance=0, source='kiosk')
                 else:
                     scheduled_in, _ = api._get_scheduled_times(employee, today)
                     api._check_and_create_penalty(employee, attendance, 'late_in', scheduled_in, now)
-
-                return {
-                    'success': True,
-                    'action': 'clock_in',
-                    'employee_name': employee.name,
-                    'message': f'{employee.name} clocked in at {location.name}',
-                }
+                return {'success': True, 'action': 'clock_in', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked in at {location.name}', 'worked_hours': 0.0}
             else:
                 attendance.sudo().write({
-                    'x_fclk_out_distance': round(distance, 1),
+                    'x_fclk_out_distance': 0.0,
+                    'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
                 })
-                api._apply_break_deduction(attendance, employee)
-
                 if not is_scheduled_off:
                     _, scheduled_out = api._get_scheduled_times(employee, today)
                     api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)
-
-                api._log_activity(
-                    employee, 'clock_out',
-                    f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
-                    attendance=attendance, location=location,
-                    latitude=latitude, longitude=longitude, distance=distance,
-                    source='kiosk',
-                )
-
-                return {
-                    'success': True,
-                    'action': 'clock_out',
-                    'employee_name': employee.name,
-                    'message': f'{employee.name} clocked out from {location.name}',
-                    'net_hours': round(attendance.x_fclk_net_hours or 0, 2),
-                }
-
+                api._log_activity(employee, 'clock_out',
+                                  f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                return {'success': True, 'action': 'clock_out', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked out from {location.name}',
+                        'net_hours': round(attendance.x_fclk_net_hours or 0, 2)}
         except Exception as e:
-            _logger.error("Fusion Clock kiosk error: %s", str(e))
+            _logger.error("Fusion Clock PIN kiosk error: %s", str(e))
             return {'error': str(e)}

fusion_clock/controllers/clock_nfc_kiosk.py

@@ -91,7 +91,8 @@ class FusionClockNfcKiosk(http.Controller):
             'company_logo_url': company_logo_url,
             'location_name': location.name if location else 'No location configured',
             'location_configured': bool(location),
-            'photo_required': ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True',
+            'photo_required': (ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+                               and ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'),
             'debug_enabled': ICP.get_param('fusion_clock.nfc_kiosk_debug', 'False') == 'True',
             'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
         }
@@ -289,10 +290,12 @@ class FusionClockNfcKiosk(http.Controller):
         if _is_debounced(normalized):
             return {'error': 'debounce'}
 
-        photo_required = ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'
+        # Master switch: no photo capture/storage when global Photo Verification is off.
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_required = photo_enabled and ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'
         if photo_required and not photo_b64:
             return {'error': 'photo_required', 'message': 'Camera unavailable. Ask IT to check the kiosk.'}
-        photo_bytes = _strip_data_url_prefix(photo_b64) if photo_b64 else b''
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
 
         company = request.env.company.sudo()
         location = company.x_fclk_nfc_kiosk_location_id
@@ -375,7 +378,6 @@ class FusionClockNfcKiosk(http.Controller):
                 'x_fclk_out_distance': 0.0,
                 'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
             })
-            api._apply_break_deduction(attendance, employee)
             if not is_scheduled_off:
                 _, scheduled_out = api._get_scheduled_times(employee, today)
                 api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)

fusion_clock/data/clock_break_rule_data.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+    <record id="break_rule_ontario" model="fusion.clock.break.rule">
+        <field name="name">Ontario</field>
+        <field name="country_id" ref="base.ca"/>
+        <field name="state_id" ref="base.state_ca_on"/>
+        <field name="is_default" eval="True"/>
+        <field name="break1_after_hours">5.0</field>
+        <field name="break1_minutes">30.0</field>
+        <field name="break2_after_hours">10.0</field>
+        <field name="break2_minutes">30.0</field>
+    </record>
+</odoo>

fusion_clock/data/ir_config_parameter_data.xml

@@ -20,16 +20,8 @@
         <field name="key">fusion_clock.auto_deduct_break</field>
         <field name="value">True</field>
     </record>
-    <record id="config_break_threshold_hours" model="ir.config_parameter">
-        <field name="key">fusion_clock.break_threshold_hours</field>
-        <field name="value">4.0</field>
-    </record>
 
-    <!-- Grace Period & Auto Clock-Out -->
-    <record id="config_grace_period_minutes" model="ir.config_parameter">
-        <field name="key">fusion_clock.grace_period_minutes</field>
-        <field name="value">15</field>
-    </record>
+    <!-- Auto Clock-Out -->
     <record id="config_enable_auto_clockout" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_auto_clockout</field>
         <field name="value">True</field>
@@ -92,15 +84,11 @@
         <field name="key">fusion_clock.daily_overtime_threshold</field>
         <field name="value">8.0</field>
     </record>
-    <record id="config_weekly_overtime_threshold" model="ir.config_parameter">
-        <field name="key">fusion_clock.weekly_overtime_threshold</field>
-        <field name="value">40.0</field>
-    </record>
 
     <!-- Location & Verification -->
     <record id="config_enable_ip_fallback" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_ip_fallback</field>
-        <field name="value">False</field>
+        <field name="value">True</field>
     </record>
     <record id="config_enable_photo_verification" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_photo_verification</field>
@@ -112,10 +100,6 @@
         <field name="key">fusion_clock.enable_kiosk</field>
         <field name="value">False</field>
     </record>
-    <record id="config_kiosk_pin_required" model="ir.config_parameter">
-        <field name="key">fusion_clock.kiosk_pin_required</field>
-        <field name="value">True</field>
-    </record>
 
     <!-- Corrections -->
     <record id="config_enable_corrections" model="ir.config_parameter">

fusion_clock/docs/superpowers/plans/2026-05-31-biweekly-attendance-filter.md

@@ -0,0 +1,642 @@
+# Bi-Weekly Attendance Filter — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Let operators scope the All Attendances list to a pay period — one-click Current/Previous/Next Pay-Period filters plus a "Bi-Weekly Period" picker — reusing the module's existing Pay Period setting and date math.
+
+**Architecture:** Extract the existing period math into one pure helper (`models/pay_period.py`) shared by the report, three search-method computed booleans on `hr.attendance` (→ search-view filters), and a transient picker wizard (→ menu item + dashboard tile). The window follows the configured Frequency (bi-weekly by default).
+
+**Tech Stack:** Odoo 19, Python (pure helper + ORM search methods + TransientModel), QWeb search/wizard views, OWL dashboard tile, `TransactionCase` tests.
+
+**Reference (read first):** spec `fusion_clock/docs/superpowers/specs/2026-05-31-biweekly-attendance-filter-design.md`; repo-root `CLAUDE.md` + `fusion_clock/CLAUDE.md`.
+
+**Test command** (substitute `odoo-modsdev-app` if that's your dev container):
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+**Commit discipline (shared working tree):** stage explicit paths, verify `git diff --cached --name-only`, then `git commit --only -- <paths>`. Never `git add -A`. Don't stage `.pyc`/`.DS_Store`. Push to **both** `origin` and `gitea` at the end.
+
+**File structure:**
+- `models/pay_period.py` (new) — pure date math: `compute_pay_period`, `period_length_days`, `current_prev_next`.
+- `models/hr_attendance.py` — 3 computed booleans + search methods (filter backing).
+- `models/clock_report.py` — `_calculate_current_period` delegates to the helper.
+- `wizard/clock_period_picker_wizard.py` (new) — transient picker.
+- `wizard/clock_period_picker_views.xml` (new) — picker form + action.
+- `views/hr_attendance_views.xml` — 3 filters in the existing search view.
+- `views/clock_menus.xml` — "Bi-Weekly Period" menu item.
+- `views/res_config_settings_views.xml` — clarify Anchor Date help.
+- `static/src/js|xml/fusion_clock_dashboard.*` — dashboard tile.
+- `tests/test_pay_period.py` (new).
+
+---
+
+## Task 1: Shared period-math helper + report delegation
+
+**Files:**
+- Create: `fusion_clock/models/pay_period.py`
+- Create: `fusion_clock/tests/test_pay_period.py`
+- Modify: `fusion_clock/models/__init__.py`, `fusion_clock/tests/__init__.py`, `fusion_clock/models/clock_report.py`
+
+- [ ] **Step 1: Register the new test module**
+
+In `fusion_clock/tests/__init__.py` add at the end:
+```python
+from . import test_pay_period
+```
+
+- [ ] **Step 2: Write the failing math test**
+
+Create `fusion_clock/tests/test_pay_period.py`:
+```python
+# -*- coding: utf-8 -*-
+from datetime import date
+from odoo.tests import tagged, TransactionCase
+from odoo.addons.fusion_clock.models.pay_period import (
+    compute_pay_period, period_length_days, current_prev_next,
+)
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodMath(TransactionCase):
+
+    def test_biweekly_window_is_14_days(self):
+        # anchor Mon 2026-05-04; a date inside the 2nd period
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 31))
+        self.assertEqual((e - s).days, 13)
+
+    def test_weekly_window_is_7_days(self):
+        s, e = compute_pay_period('weekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 24))
+
+    def test_reference_before_anchor(self):
+        # 2026-04-20 is one biweekly period BEFORE the anchor
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 4, 25))
+        self.assertEqual(s, date(2026, 4, 20))
+        self.assertEqual(e, date(2026, 5, 3))
+
+    def test_monthly_window(self):
+        s, e = compute_pay_period('monthly', '', date(2026, 2, 10))
+        self.assertEqual(s, date(2026, 2, 1))
+        self.assertEqual(e, date(2026, 2, 28))
+
+    def test_semi_monthly_window(self):
+        s1, e1 = compute_pay_period('semi_monthly', '', date(2026, 3, 10))
+        self.assertEqual((s1, e1), (date(2026, 3, 1), date(2026, 3, 15)))
+        s2, e2 = compute_pay_period('semi_monthly', '', date(2026, 3, 20))
+        self.assertEqual((s2, e2), (date(2026, 3, 16), date(2026, 3, 31)))
+
+    def test_period_length_days(self):
+        self.assertEqual(period_length_days('weekly'), 7)
+        self.assertEqual(period_length_days('biweekly'), 14)
+        self.assertIsNone(period_length_days('monthly'))
+
+    def test_current_prev_next_are_contiguous(self):
+        w = current_prev_next('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(w['current'], (date(2026, 5, 18), date(2026, 5, 31)))
+        self.assertEqual(w['previous'][1], w['current'][0] - __import__('datetime').timedelta(days=1))
+        self.assertEqual(w['next'][0], w['current'][1] + __import__('datetime').timedelta(days=1))
+```
+
+- [ ] **Step 3: Run the test, verify it FAILS**
+
+Run the test command. Expected: import error / FAIL — `fusion_clock.models.pay_period` does not exist.
+
+- [ ] **Step 4: Create the helper**
+
+Create `fusion_clock/models/pay_period.py`:
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+"""Pay-period date math shared by reports, attendance filters and the period
+picker. Pure functions (no ORM) so they unit-test trivially and never drift
+between callers."""
+
+from datetime import date, timedelta
+
+
+def period_length_days(frequency):
+    """Fixed window length for grid frequencies; None for calendar-based ones."""
+    return {'weekly': 7, 'biweekly': 14}.get(frequency)
+
+
+def compute_pay_period(frequency, anchor_str, reference_date):
+    """Return (start_date, end_date) for the period containing reference_date.
+
+    ``anchor_str`` is a 'YYYY-MM-DD' string or falsy (falls back to
+    first-of-month). Mirrors the original
+    fusion.clock.report._calculate_current_period logic, including floor
+    division so dates before the anchor resolve to the correct earlier period.
+    """
+    if anchor_str:
+        try:
+            anchor = date.fromisoformat(anchor_str)
+        except (ValueError, TypeError):
+            anchor = reference_date.replace(day=1)
+    else:
+        anchor = reference_date.replace(day=1)
+
+    if frequency == 'weekly':
+        period_num = (reference_date - anchor).days // 7
+        start = anchor + timedelta(days=period_num * 7)
+        end = start + timedelta(days=6)
+    elif frequency == 'semi_monthly':
+        if reference_date.day <= 15:
+            start = reference_date.replace(day=1)
+            end = reference_date.replace(day=15)
+        else:
+            start = reference_date.replace(day=16)
+            next_month = reference_date.replace(day=28) + timedelta(days=4)
+            end = next_month - timedelta(days=next_month.day)
+    elif frequency == 'monthly':
+        start = reference_date.replace(day=1)
+        next_month = reference_date.replace(day=28) + timedelta(days=4)
+        end = next_month - timedelta(days=next_month.day)
+    else:  # 'biweekly' and default
+        period_num = (reference_date - anchor).days // 14
+        start = anchor + timedelta(days=period_num * 14)
+        end = start + timedelta(days=13)
+    return start, end
+
+
+def current_prev_next(frequency, anchor_str, today):
+    """Return {'current','previous','next'} (start,end) windows. Previous/next
+    are derived by stepping the reference date one day outside the current
+    window, which works for grid AND calendar frequencies."""
+    cur = compute_pay_period(frequency, anchor_str, today)
+    prev = compute_pay_period(frequency, anchor_str, cur[0] - timedelta(days=1))
+    nxt = compute_pay_period(frequency, anchor_str, cur[1] + timedelta(days=1))
+    return {'current': cur, 'previous': prev, 'next': nxt}
+```
+
+In `fusion_clock/models/__init__.py`, add as the FIRST import (before the model files that use it):
+```python
+from . import pay_period
+```
+
+- [ ] **Step 5: Run the math test, verify it PASSES**
+
+Run the test command. Expected: all `TestPayPeriodMath` tests PASS.
+
+- [ ] **Step 6: Delegate the report method to the helper**
+
+In `fusion_clock/models/clock_report.py`, replace the entire body of `_calculate_current_period` (the method starting at `def _calculate_current_period(self, schedule_type, period_start_str, reference_date):` through its `return period_start, period_end`) with:
+```python
+    def _calculate_current_period(self, schedule_type, period_start_str, reference_date):
+        """Calculate the period start/end dates based on schedule type.
+
+        Delegates to the shared pure helper so reports, the attendance period
+        filters and the picker wizard all use one implementation.
+        """
+        from .pay_period import compute_pay_period
+        return compute_pay_period(schedule_type, period_start_str, reference_date)
+```
+
+- [ ] **Step 7: Upgrade to confirm the delegation loads cleanly**
+
+Run: `docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20`
+Expected: no traceback; module loads.
+
+- [ ] **Step 8: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/pay_period.py fusion_clock/models/__init__.py fusion_clock/models/clock_report.py fusion_clock/tests/test_pay_period.py fusion_clock/tests/__init__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/pay_period.py fusion_clock/models/__init__.py fusion_clock/models/clock_report.py fusion_clock/tests/test_pay_period.py fusion_clock/tests/__init__.py \
+    -m "refactor(fusion_clock): extract pay-period math to shared helper"
+```
+(Append the `Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>` trailer.)
+
+---
+
+## Task 2: Period filters on the attendance list
+
+**Files:**
+- Modify: `fusion_clock/models/hr_attendance.py`, `fusion_clock/views/hr_attendance_views.xml`, `fusion_clock/tests/test_pay_period.py`
+
+- [ ] **Step 1: Write the failing filter test**
+
+Append to `fusion_clock/tests/test_pay_period.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodFilters(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        from datetime import timedelta
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        # Make TODAY the first day of the current bi-weekly window.
+        from odoo.addons.fusion_clock.models.tz_utils import get_local_today
+        self.today = get_local_today(self.env)
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', str(self.today))
+        self.emp = self.env['hr.employee'].create({'name': 'Filter Fred'})
+        Att = self.env['hr.attendance']
+        # current period: today .. today+13  -> attendance at 10:00 "now-ish"
+        self.att_current = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': fields.Datetime.now(),
+            'check_out': fields.Datetime.now(),
+        })
+        # previous period: today-14 .. today-1 -> attendance 8 days ago
+        eight_ago = fields.Datetime.now() - timedelta(days=8)
+        self.att_prev = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': eight_ago,
+            'check_out': eight_ago,
+        })
+
+    def test_current_filter_returns_only_current(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_current_period', '=', True),
+        ])
+        self.assertIn(self.att_current, res)
+        self.assertNotIn(self.att_prev, res)
+
+    def test_previous_filter_returns_only_previous(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_previous_period', '=', True),
+        ])
+        self.assertIn(self.att_prev, res)
+        self.assertNotIn(self.att_current, res)
+```
+(`fields` is already imported at the top of the file from Task 1? No — add `from odoo import fields` to the test file's imports.)
+
+In the test file imports (top), ensure:
+```python
+from odoo import fields
+```
+
+- [ ] **Step 2: Run the test, verify it FAILS**
+
+Run the test command. Expected: FAIL — `Invalid field 'x_fclk_in_current_period' in leaf ...` (field doesn't exist yet).
+
+- [ ] **Step 3: Add the computed fields + search methods**
+
+In `fusion_clock/models/hr_attendance.py`, add to the imports near the top (the file already imports `get_local_today, get_local_day_boundaries` from `.tz_utils`):
+```python
+from .pay_period import current_prev_next
+```
+Then add these fields and methods inside the `hr.attendance` model class (place them after the existing `x_fclk_*` field declarations):
+```python
+    x_fclk_in_current_period = fields.Boolean(
+        string='In Current Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_current_period')
+    x_fclk_in_previous_period = fields.Boolean(
+        string='In Previous Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_previous_period')
+    x_fclk_in_next_period = fields.Boolean(
+        string='In Next Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_next_period')
+
+    def _compute_fclk_period_flags(self):
+        # Display-only; filtering happens entirely in the search methods.
+        for att in self:
+            att.x_fclk_in_current_period = False
+            att.x_fclk_in_previous_period = False
+            att.x_fclk_in_next_period = False
+
+    def _fclk_period_domain(self, which):
+        """check_in domain for the named pay-period window ('current' /
+        'previous' / 'next'), computed from the configured frequency + anchor."""
+        ICP = self.env['ir.config_parameter'].sudo()
+        frequency = ICP.get_param('fusion_clock.pay_period_type', 'biweekly')
+        anchor = ICP.get_param('fusion_clock.pay_period_start', '')
+        start, end = current_prev_next(frequency, anchor, get_local_today(self.env))[which]
+        start_utc, _dummy = get_local_day_boundaries(self.env, start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, end)
+        return ['&',
+                ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                ('check_in', '<', fields.Datetime.to_string(end_excl_utc))]
+
+    def _search_fclk_in_current_period(self, operator, value):
+        return self._fclk_period_domain('current')
+
+    def _search_fclk_in_previous_period(self, operator, value):
+        return self._fclk_period_domain('previous')
+
+    def _search_fclk_in_next_period(self, operator, value):
+        return self._fclk_period_domain('next')
+```
+
+- [ ] **Step 4: Run the test, verify it PASSES**
+
+Run the test command. Expected: `TestPayPeriodFilters` tests PASS.
+
+- [ ] **Step 5: Add the filters to the search view**
+
+In `fusion_clock/views/hr_attendance_views.xml`, inside `view_hr_attendance_search_fusion_clock`, replace:
+```xml
+                <filter name="fclk_has_overtime" string="Has Overtime" domain="[('x_fclk_is_overtime', '=', True)]"/>
+                <separator/>
+                <filter name="group_location" string="Location" context="{'group_by': 'x_fclk_location_id'}"/>
+```
+with:
+```xml
+                <filter name="fclk_has_overtime" string="Has Overtime" domain="[('x_fclk_is_overtime', '=', True)]"/>
+                <separator/>
+                <filter name="fclk_period_current" string="Current Pay Period" domain="[('x_fclk_in_current_period', '=', True)]"/>
+                <filter name="fclk_period_previous" string="Previous Pay Period" domain="[('x_fclk_in_previous_period', '=', True)]"/>
+                <filter name="fclk_period_next" string="Next Pay Period" domain="[('x_fclk_in_next_period', '=', True)]"/>
+                <separator/>
+                <filter name="group_location" string="Location" context="{'group_by': 'x_fclk_location_id'}"/>
+```
+
+- [ ] **Step 6: Upgrade to confirm the view parses**
+
+Run: `docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20`
+Expected: no ParseError.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/hr_attendance.py fusion_clock/views/hr_attendance_views.xml fusion_clock/tests/test_pay_period.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/hr_attendance.py fusion_clock/views/hr_attendance_views.xml fusion_clock/tests/test_pay_period.py \
+    -m "feat(fusion_clock): Current/Previous/Next Pay Period attendance filters"
+```
+
+---
+
+## Task 3: "Bi-Weekly Period" picker wizard + menu
+
+**Files:**
+- Create: `fusion_clock/wizard/clock_period_picker_wizard.py`, `fusion_clock/wizard/clock_period_picker_views.xml`
+- Modify: `fusion_clock/wizard/__init__.py`, `fusion_clock/__manifest__.py`, `fusion_clock/views/clock_menus.xml`, `fusion_clock/tests/test_pay_period.py`
+
+- [ ] **Step 1: Write the failing wizard test**
+
+Append to `fusion_clock/tests/test_pay_period.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPeriodPickerWizard(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        from odoo.addons.fusion_clock.models.tz_utils import get_local_today
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', '2026-05-04')
+        self.today = get_local_today(self.env)
+
+    def test_default_start_is_current_period_start(self):
+        from odoo.addons.fusion_clock.models.pay_period import current_prev_next
+        wiz = self.env['fusion.clock.period.picker'].create({})
+        expected_start = current_prev_next('biweekly', '2026-05-04', self.today)['current'][0]
+        self.assertEqual(wiz.date_start, expected_start)
+
+    def test_onchange_autofills_two_weeks(self):
+        from datetime import date, timedelta
+        wiz = self.env['fusion.clock.period.picker'].new({'date_start': date(2026, 6, 1)})
+        wiz._onchange_date_start()
+        self.assertEqual(wiz.date_end, date(2026, 6, 1) + timedelta(days=13))
+
+    def test_action_apply_returns_attendance_domain(self):
+        from datetime import date
+        wiz = self.env['fusion.clock.period.picker'].create({
+            'date_start': date(2026, 6, 1), 'date_end': date(2026, 6, 14),
+        })
+        act = wiz.action_apply()
+        self.assertEqual(act['res_model'], 'hr.attendance')
+        self.assertEqual(act['view_mode'], 'list,form')
+        leaves = [l for l in act['domain'] if isinstance(l, tuple)]
+        self.assertTrue(any(l[0] == 'check_in' and l[1] == '>=' for l in leaves))
+        self.assertTrue(any(l[0] == 'check_in' and l[1] == '<' for l in leaves))
+```
+
+- [ ] **Step 2: Run the test, verify it FAILS**
+
+Run the test command. Expected: FAIL — model `fusion.clock.period.picker` does not exist.
+
+- [ ] **Step 3: Create the wizard model**
+
+Create `fusion_clock/wizard/clock_period_picker_wizard.py`:
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import timedelta
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+from ..models.pay_period import compute_pay_period, period_length_days, current_prev_next
+from ..models.tz_utils import get_local_today, get_local_day_boundaries
+
+
+class FusionClockPeriodPicker(models.TransientModel):
+    """Pick a pay-period window and open the attendance list filtered to it.
+
+    Defaults to the current pay period. Changing the start auto-fills the end
+    to one pay period later (two weeks by default); the end stays editable so a
+    fully custom range can be entered too.
+    """
+    _name = 'fusion.clock.period.picker'
+    _description = 'Bi-Weekly Period Picker'
+
+    date_start = fields.Date(string='Period Start', required=True,
+                             default=lambda self: self._fclk_default_window()[0])
+    date_end = fields.Date(string='Period End', required=True,
+                           default=lambda self: self._fclk_default_window()[1])
+
+    def _fclk_config(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        return (ICP.get_param('fusion_clock.pay_period_type', 'biweekly'),
+                ICP.get_param('fusion_clock.pay_period_start', ''))
+
+    def _fclk_default_window(self):
+        frequency, anchor = self._fclk_config()
+        return current_prev_next(frequency, anchor, get_local_today(self.env))['current']
+
+    @api.onchange('date_start')
+    def _onchange_date_start(self):
+        if not self.date_start:
+            return
+        frequency, anchor = self._fclk_config()
+        length = period_length_days(frequency)
+        if length:
+            self.date_end = self.date_start + timedelta(days=length - 1)
+        else:
+            self.date_end = compute_pay_period(frequency, anchor, self.date_start)[1]
+
+    @api.constrains('date_start', 'date_end')
+    def _check_dates(self):
+        for rec in self:
+            if rec.date_start and rec.date_end and rec.date_end < rec.date_start:
+                raise ValidationError(_("Period end cannot be before period start."))
+
+    def action_apply(self):
+        self.ensure_one()
+        start_utc, _dummy = get_local_day_boundaries(self.env, self.date_start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, self.date_end)
+        return {
+            'type': 'ir.actions.act_window',
+            'name': _("Attendances · %s – %s") % (self.date_start, self.date_end),
+            'res_model': 'hr.attendance',
+            'view_mode': 'list,form',
+            'domain': ['&',
+                       ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                       ('check_in', '<', fields.Datetime.to_string(end_excl_utc))],
+            'target': 'current',
+        }
+```
+
+In `fusion_clock/wizard/__init__.py`, add:
+```python
+from . import clock_period_picker_wizard
+```
+
+- [ ] **Step 4: Create the wizard view + action**
+
+Create `fusion_clock/wizard/clock_period_picker_views.xml`:
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+
+    <record id="view_fusion_clock_period_picker_form" model="ir.ui.view">
+        <field name="name">fusion.clock.period.picker.form</field>
+        <field name="model">fusion.clock.period.picker</field>
+        <field name="arch" type="xml">
+            <form string="Bi-Weekly Period">
+                <sheet>
+                    <div class="alert alert-info" role="alert">
+                        Pick the period start — the end auto-fills to one pay period later
+                        (two weeks by default). Adjust either date, then click
+                        <b>View Attendances</b>.
+                    </div>
+                    <group>
+                        <field name="date_start"/>
+                        <field name="date_end"/>
+                    </group>
+                </sheet>
+                <footer>
+                    <button name="action_apply" string="View Attendances" type="object" class="btn-primary"/>
+                    <button special="cancel" string="Cancel" class="btn-secondary"/>
+                </footer>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_period_picker" model="ir.actions.act_window">
+        <field name="name">Bi-Weekly Period</field>
+        <field name="res_model">fusion.clock.period.picker</field>
+        <field name="view_mode">form</field>
+        <field name="view_id" ref="view_fusion_clock_period_picker_form"/>
+        <field name="target">new</field>
+    </record>
+
+</odoo>
+```
+
+In `fusion_clock/__manifest__.py`, in the `data` list add this line immediately AFTER `'wizard/clock_nfc_enrollment_views.xml',` (it must load before `views/clock_menus.xml`, which references the action):
+```python
+        'wizard/clock_period_picker_views.xml',
+```
+
+- [ ] **Step 5: Add the menu item**
+
+In `fusion_clock/views/clock_menus.xml`, add after the `menu_fusion_clock_attendance_list` menuitem (the "All Attendances" item, sequence 10):
+```xml
+    <menuitem id="menu_fusion_clock_biweekly_period"
+              name="Bi-Weekly Period"
+              parent="menu_fusion_clock_attendance"
+              action="action_fusion_clock_period_picker"
+              sequence="15"
+              groups="group_fusion_clock_manager,group_fusion_clock_team_lead"/>
+```
+
+- [ ] **Step 6: Run the wizard test, verify it PASSES**
+
+Run the test command. Expected: `TestPeriodPickerWizard` tests PASS, and the upgrade (triggered by `-u`) loads the new view + menu with no ParseError.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/wizard/clock_period_picker_wizard.py fusion_clock/wizard/clock_period_picker_views.xml fusion_clock/wizard/__init__.py fusion_clock/__manifest__.py fusion_clock/views/clock_menus.xml fusion_clock/tests/test_pay_period.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/wizard/clock_period_picker_wizard.py fusion_clock/wizard/clock_period_picker_views.xml fusion_clock/wizard/__init__.py fusion_clock/__manifest__.py fusion_clock/views/clock_menus.xml fusion_clock/tests/test_pay_period.py \
+    -m "feat(fusion_clock): Bi-Weekly Period picker wizard + Attendance menu item"
+```
+
+---
+
+## Task 4: Dashboard tile, settings label, version bump, full verify
+
+**Files:**
+- Modify: `fusion_clock/static/src/js/fusion_clock_dashboard.js`, `fusion_clock/static/src/xml/fusion_clock_dashboard.xml`, `fusion_clock/views/res_config_settings_views.xml`, `fusion_clock/__manifest__.py`
+
+- [ ] **Step 1: Add the dashboard action handler**
+
+In `fusion_clock/static/src/js/fusion_clock_dashboard.js`, add this method next to the other `onView*` handlers:
+```javascript
+    onViewBiweekly() { this.action.doAction("fusion_clock.action_fusion_clock_period_picker"); }
+```
+
+- [ ] **Step 2: Add the dashboard tile**
+
+In `fusion_clock/static/src/xml/fusion_clock_dashboard.xml`, inside the Quick Actions `<t t-if="state.team">` block, add after the Activity Logs tile:
+```xml
+                                <span class="fclk-dash-act" t-on-click="onViewBiweekly">🗓 Bi-Weekly Period</span>
+```
+
+- [ ] **Step 3: Clarify the Anchor Date setting help**
+
+In `fusion_clock/views/res_config_settings_views.xml`, replace the Pay Period setting's `help` attribute:
+```xml
+                        <setting id="fclk_pay_period" string="Pay Period Schedule"
+                                 help="Defines how often attendance reports are generated and the start/end dates of each reporting period.">
+```
+with:
+```xml
+                        <setting id="fclk_pay_period" string="Pay Period Schedule"
+                                 help="Defines how often attendance reports are generated and the start/end dates of each period. The Anchor Date is the pay-period start used by both the reports AND the Bi-Weekly Period filter/picker on the Attendances list.">
+```
+
+- [ ] **Step 4: Bump the manifest version**
+
+In `fusion_clock/__manifest__.py`, change the `version` string to `19.0.3.15.0`.
+
+- [ ] **Step 5: Full upgrade + run the whole suite**
+
+Run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+Expected: upgrade succeeds; all `test_pay_period` classes pass; existing tests still pass; `0 failed, 0 error`.
+
+- [ ] **Step 6: Manual browser smoke (local)**
+
+http://localhost:8082 → Fusion Clock → Attendance → **All Attendances**: open Filters, confirm **Current / Previous / Next Pay Period** appear and each narrows the list. Then Attendance → **Bi-Weekly Period**: the dialog opens with the current period pre-filled; change the start and confirm the end jumps +2 weeks; **View Attendances** opens the list scoped to that window. On the dashboard (as manager), the **🗓 Bi-Weekly Period** tile opens the same dialog.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/js/fusion_clock_dashboard.js fusion_clock/static/src/xml/fusion_clock_dashboard.xml fusion_clock/views/res_config_settings_views.xml fusion_clock/__manifest__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/js/fusion_clock_dashboard.js fusion_clock/static/src/xml/fusion_clock_dashboard.xml fusion_clock/views/res_config_settings_views.xml fusion_clock/__manifest__.py \
+    -m "feat(fusion_clock): dashboard Bi-Weekly Period tile + settings note; bump 19.0.3.15.0"
+```
+
+- [ ] **Step 8: Push both remotes + deploy entech**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git log origin/main..HEAD --oneline
+git push origin main && git push gitea main
+```
+Then deploy to entech (whole module dir): tar (exclude `.superpowers`/`__pycache__`/`*.pyc`/`.DS_Store`) → `scp` to pve-worker5 → `pct push 111` → extract into `/mnt/extra-addons/custom` → `chown -R odoo:odoo` → upgrade as the `odoo` user (`systemctl stop odoo; runuser -u odoo -- /usr/bin/odoo --config /etc/odoo/odoo.conf -d admin -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 --logfile=/tmp/up.log; systemctl start odoo`). Verify `web/login` → 200 and `ir.module.module` version == `19.0.3.15.0`. Hard-refresh.
+
+---
+
+## Self-Review (completed inline)
+
+- **Spec coverage:** §3A shared helper → Task 1; §3B filters → Task 2; §3C wizard → Task 3; §3D menu → Task 3, dashboard tile → Task 4; §3E settings note → Task 4; §6 tests → Tasks 1–3 + Task 4 full run; §9 deploy → Task 4 Step 8.
+- **Placeholder scan:** none — every code step has complete code; commands have expected output.
+- **Type/name consistency:** helper API (`compute_pay_period`, `period_length_days`, `current_prev_next` returning `{'current','previous','next'}`) is identical across Task 1 (definition + math test), Task 2 (`_fclk_period_domain` uses `current_prev_next(...)[which]`), and Task 3 (wizard uses all three). Field names `x_fclk_in_current_period` / `_previous_period` / `_next_period` match between the model (Task 2), the filters (Task 2), and the search-method names. Action xmlid `action_fusion_clock_period_picker` matches between the wizard view (Task 3), the menu (Task 3), and the dashboard handler (Task 4). `get_local_day_boundaries` end value used as the exclusive upper bound consistently.
+- **Scope:** single focused feature; one plan.

fusion_clock/docs/superpowers/plans/2026-05-31-pin-kiosk.md

@@ -0,0 +1,940 @@
+# PIN Kiosk Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Ship a polished, opt-in PIN kiosk (photo-tile → PIN → optional selfie → clock) matching the NFC kiosk's premium dark/glass/brand-gradient style, gated by the existing `enable_kiosk` setting.
+
+**Architecture:** Rework the existing `controllers/clock_kiosk.py` (4 routes + 1 new), rebuild `views/kiosk_templates.xml`, rewrite `static/src/js/fusion_clock_kiosk.js` as an Odoo-19 Interaction with a small state machine, and add a new `static/src/scss/pin_kiosk.scss` that mirrors `nfc_kiosk.scss` (scoped to `#pin_kiosk_root`, brand hue in `--pk-h`). Reuse the master photo gate, `hr.employee.public` avatars, and the company kiosk location.
+
+**Tech Stack:** Odoo 19 HTTP controllers (`type='jsonrpc'` / `type='http'`), `@web/public/interaction` Interaction, SCSS (frontend bundle), `HttpCase`/`TransactionCase` tests.
+
+**Reference (read first):** spec `fusion_clock/docs/superpowers/specs/2026-05-31-pin-kiosk-design.md`; mirror sources `static/src/scss/nfc_kiosk.scss` and `static/src/js/fusion_clock_nfc_kiosk.js` (hue extraction lines ~60-117, photo capture); repo `CLAUDE.md` + `fusion_clock/CLAUDE.md` (Interaction rule, scoped-SCSS rule).
+
+**Test command** (substitute `odoo-modsdev-app` if that's your dev container):
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+**Commit discipline (shared tree):** stage explicit paths, verify `git diff --cached --name-only`, `git commit --only -- <paths>`, never `git add -A`, no `.pyc`/`.DS_Store`. Push **origin + gitea** at the end. Append `Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>` to messages.
+
+**File structure:**
+- `controllers/clock_kiosk.py` — rework `kiosk_search` (+avatar/has_pin), `kiosk_verify_pin` (→ needs_setup), new `kiosk_set_pin`, rework `kiosk_clock` (kiosk location + photo).
+- `static/src/scss/pin_kiosk.scss` (new) — kiosk styling, scoped to `#pin_kiosk_root`.
+- `views/kiosk_templates.xml` — rebuilt root + chrome + `#pin_state_container`.
+- `static/src/js/fusion_clock_kiosk.js` — Interaction state machine.
+- `models/res_config_settings.py`, `views/res_config_settings_views.xml`, `data/ir_config_parameter_data.xml` — drop `kiosk_pin_required`.
+- `models/res_company.py` — relabel kiosk-location field string.
+- `views/clock_menus.xml` — PIN kiosk app icon.
+- `__manifest__.py` — register scss + version bump.
+- `tests/test_clock_kiosk.py` (new).
+
+---
+
+## Task 1: Backend — employee list (+avatar/has_pin), verify_pin (needs_setup), set_pin
+
+**Files:**
+- Modify: `controllers/clock_kiosk.py`
+- Create: `tests/test_clock_kiosk.py`
+- Modify: `tests/__init__.py`
+
+- [ ] **Step 1: Register the test module** — add to `fusion_clock/tests/__init__.py`:
+```python
+from . import test_clock_kiosk
+```
+
+- [ ] **Step 2: Write the failing tests** — create `fusion_clock/tests/test_clock_kiosk.py`:
+```python
+# -*- coding: utf-8 -*-
+import json
+from odoo.tests.common import HttpCase, tagged
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskIdentity(HttpCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Kiosk Op', 'login': 'pin-kiosk-op', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.withpin = cls.env['hr.employee'].create({
+            'name': 'Pat WithPin', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+        cls.nopin = cls.env['hr.employee'].create({
+            'name': 'Nora NoPin', 'x_fclk_enable_clock': True,
+        })
+
+    def _call(self, route, params):
+        self.authenticate('pin-kiosk-op', 'kioskpass123')
+        resp = self.url_open(route, data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call', 'params': params,
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def test_search_returns_avatar_and_has_pin(self):
+        res = self._call('/fusion_clock/kiosk/search', {'query': ''})
+        rows = {e['name']: e for e in res['employees']}
+        self.assertIn('Pat WithPin', rows)
+        self.assertTrue(rows['Pat WithPin']['has_pin'])
+        self.assertFalse(rows['Nora NoPin']['has_pin'])
+        self.assertIn('/web/image/hr.employee.public/', rows['Pat WithPin']['avatar_url'])
+
+    def test_verify_pin_correct(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '1234'})
+        self.assertTrue(res.get('success'))
+
+    def test_verify_pin_incorrect(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '9999'})
+        self.assertEqual(res.get('error'), 'invalid_pin')
+
+    def test_verify_pin_needs_setup(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.nopin.id, 'pin': ''})
+        self.assertTrue(res.get('needs_setup'))
+
+    def test_set_pin_success_then_required(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '4321'})
+        self.assertTrue(res.get('success'))
+        self.assertEqual(self.nopin.x_fclk_kiosk_pin, '4321')
+        # already set → reject
+        res2 = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '0000'})
+        self.assertEqual(res2.get('error'), 'already_set')
+
+    def test_set_pin_rejects_bad_format(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.withpin.id, 'pin': '12'})
+        self.assertEqual(res.get('error'), 'bad_pin')
+```
+
+- [ ] **Step 3: Run the tests, verify they FAIL** — run the test command. Expected: FAIL (`search` lacks `has_pin`/`avatar_url`; `verify_pin` has no `needs_setup`; `set_pin` route 404).
+
+- [ ] **Step 4: Implement** — in `controllers/clock_kiosk.py`, replace `kiosk_search` and `kiosk_verify_pin` and add `kiosk_set_pin`:
+```python
+    @http.route('/fusion_clock/kiosk/search', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_search(self, query='', **kw):
+        """Employees for the kiosk grid. Also used by the NFC kiosk's
+        employee_search — keep the return shape additive."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employees = request.env['hr.employee'].sudo().search([
+            ('x_fclk_enable_clock', '=', True),
+            ('name', 'ilike', query),
+        ], limit=200, order='name')
+        rows = []
+        for emp in employees:
+            unique = emp.write_date.strftime('%Y%m%d%H%M%S') if emp.write_date else ''
+            rows.append({
+                'id': emp.id,
+                'name': emp.name,
+                'department': emp.department_id.name or '',
+                'is_checked_in': emp.attendance_state == 'checked_in',
+                'card_uid': emp.x_fclk_nfc_card_uid or '',
+                'has_pin': bool(emp.x_fclk_kiosk_pin),
+                'avatar_url': '/web/image/hr.employee.public/%s/avatar_128?unique=%s' % (emp.id, unique),
+            })
+        return {'employees': rows}
+
+    @http.route('/fusion_clock/kiosk/verify_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_verify_pin(self, employee_id=0, pin='', **kw):
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists():
+            return {'error': 'not_found'}
+        if not employee.x_fclk_kiosk_pin:
+            return {'needs_setup': True, 'employee_name': employee.name}
+        if employee.x_fclk_kiosk_pin != pin:
+            return {'error': 'invalid_pin'}
+        return {'success': True, 'employee_name': employee.name,
+                'is_checked_in': employee.attendance_state == 'checked_in'}
+
+    @http.route('/fusion_clock/kiosk/set_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_set_pin(self, employee_id=0, pin='', **kw):
+        """First-use PIN creation. Rejects if the employee already has one."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+        if employee.x_fclk_kiosk_pin:
+            return {'error': 'already_set'}
+        pin = (pin or '').strip()
+        if not (pin.isdigit() and 4 <= len(pin) <= 6):
+            return {'error': 'bad_pin'}
+        employee.write({'x_fclk_kiosk_pin': pin})
+        return {'success': True, 'employee_name': employee.name}
+```
+
+- [ ] **Step 5: Run the tests, verify they PASS** — run the test command. Expected: `TestPinKioskIdentity` passes.
+
+- [ ] **Step 6: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py fusion_clock/tests/__init__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py fusion_clock/tests/__init__.py \
+    -m "feat(fusion_clock): PIN kiosk identity endpoints (grid list, verify, first-use set_pin)"
+```
+
+---
+
+## Task 2: Backend — clock with kiosk location + photo gating
+
+**Files:**
+- Modify: `controllers/clock_kiosk.py` (rework `kiosk_clock`)
+- Modify: `tests/test_clock_kiosk.py`
+
+- [ ] **Step 1: Write the failing tests** — append to `test_clock_kiosk.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskClock(HttpCase):
+
+    PNG = ('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwC'
+           'AAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=')
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant 2', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Op2', 'login': 'pin-op2', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.emp = cls.env['hr.employee'].create({
+            'name': 'Quinn Clock', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+
+    def _clock(self, photo_b64=''):
+        self.authenticate('pin-op2', 'kioskpass123')
+        resp = self.url_open('/fusion_clock/kiosk/clock', data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call',
+            'params': {'employee_id': self.emp.id, 'photo_b64': photo_b64},
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def _latest(self):
+        return self.env['hr.attendance'].search(
+            [('employee_id', '=', self.emp.id)], order='check_in desc', limit=1)
+
+    def test_clock_in_uses_kiosk_location(self):
+        res = self._clock()
+        self.assertTrue(res.get('success'))
+        self.assertEqual(res.get('action'), 'clock_in')
+        att = self._latest()
+        self.assertEqual(att.x_fclk_clock_source, 'kiosk')
+        self.assertEqual(att.x_fclk_location_id, self.location)
+
+    def test_photo_stored_only_when_master_on(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'False')
+        self._clock(self.PNG)
+        self.assertFalse(self._latest().x_fclk_check_in_photo)
+        # new employee for an ON run (avoid debounce/clocked-in state)
+        emp2 = self.env['hr.employee'].create({
+            'name': 'Quinn Two', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234'})
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'True')
+        self.authenticate('pin-op2', 'kioskpass123')
+        self.url_open('/fusion_clock/kiosk/clock', data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call',
+            'params': {'employee_id': emp2.id, 'photo_b64': self.PNG}}),
+            headers={'Content-Type': 'application/json'})
+        att2 = self.env['hr.attendance'].search([('employee_id', '=', emp2.id)], limit=1)
+        self.assertTrue(att2.x_fclk_check_in_photo)
+
+    def test_no_location_configured(self):
+        self.env.company.x_fclk_nfc_kiosk_location_id = False
+        res = self._clock()
+        self.assertEqual(res.get('error'), 'no_location_configured')
+```
+
+- [ ] **Step 2: Run the tests, verify they FAIL** — run the test command. Expected: FAIL (current `kiosk_clock` uses `_verify_location` GPS, takes no `photo_b64`, no `no_location_configured`).
+
+- [ ] **Step 3: Implement** — in `controllers/clock_kiosk.py`, replace the whole `kiosk_clock` method with:
+```python
+    @http.route('/fusion_clock/kiosk/clock', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_clock(self, employee_id=0, photo_b64='', **kw):
+        """Clock the employee in/out from the shared kiosk. Fixed wall device:
+        uses the company kiosk location, no per-clock GPS geofence."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+
+        ICP = request.env['ir.config_parameter'].sudo()
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        if not location:
+            return {'error': 'no_location_configured'}
+
+        from .clock_api import FusionClockAPI
+        from .clock_nfc_kiosk import _strip_data_url_prefix
+        api = FusionClockAPI()
+
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
+
+        is_checked_in = employee.attendance_state == 'checked_in'
+        now = fields.Datetime.now()
+        today = get_local_today(request.env, employee)
+        day_plan = employee._get_fclk_day_plan(today)
+        is_scheduled_off = not day_plan.get('scheduled')
+
+        geo_info = {'latitude': 0, 'longitude': 0, 'browser': 'kiosk',
+                    'ip_address': request.httprequest.remote_addr or ''}
+        try:
+            attendance = employee.sudo()._attendance_action_change(geo_info)
+            if not is_checked_in:
+                attendance.sudo().write({
+                    'x_fclk_location_id': location.id,
+                    'x_fclk_in_distance': 0.0,
+                    'x_fclk_clock_source': 'kiosk',
+                    'x_fclk_check_in_photo': photo_bytes if photo_bytes else False,
+                })
+                api._log_activity(employee, 'clock_in', f"Kiosk clock-in at {location.name}",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                if is_scheduled_off:
+                    api._log_activity(employee, 'unscheduled_shift',
+                                      f"Kiosk clock-in on an unscheduled day at {location.name}",
+                                      attendance=attendance, location=location,
+                                      latitude=0, longitude=0, distance=0, source='kiosk')
+                else:
+                    scheduled_in, _ = api._get_scheduled_times(employee, today)
+                    api._check_and_create_penalty(employee, attendance, 'late_in', scheduled_in, now)
+                return {'success': True, 'action': 'clock_in', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked in at {location.name}', 'worked_hours': 0.0}
+            else:
+                attendance.sudo().write({
+                    'x_fclk_out_distance': 0.0,
+                    'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
+                })
+                api._apply_break_deduction(attendance, employee)
+                if not is_scheduled_off:
+                    _, scheduled_out = api._get_scheduled_times(employee, today)
+                    api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)
+                api._log_activity(employee, 'clock_out',
+                                  f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                return {'success': True, 'action': 'clock_out', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked out from {location.name}',
+                        'net_hours': round(attendance.x_fclk_net_hours or 0, 2)}
+        except Exception as e:
+            _logger.error("Fusion Clock PIN kiosk error: %s", str(e))
+            return {'error': str(e)}
+```
+Confirm `_strip_data_url_prefix` exists in `controllers/clock_nfc_kiosk.py` (it does — used by the NFC tap). Confirm `kiosk_page` already imports `fields` and `get_local_today` at module top (it does).
+
+- [ ] **Step 4: Run the tests, verify they PASS** — run the test command. Expected: `TestPinKioskClock` passes.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py \
+    -m "feat(fusion_clock): PIN kiosk clock — kiosk location + master-gated selfie"
+```
+
+---
+
+## Task 3: Settings cleanup, company relabel, app icon
+
+**Files:**
+- Modify: `models/res_config_settings.py`, `views/res_config_settings_views.xml`, `data/ir_config_parameter_data.xml`, `models/res_company.py`, `views/clock_menus.xml`
+
+- [ ] **Step 1: Drop `kiosk_pin_required`** (PIN always required now):
+  - `models/res_config_settings.py`: delete the `fclk_kiosk_pin_required = fields.Boolean(...)` field block AND its line in `_FCLK_BOOL_PARAMS` (`('fclk_kiosk_pin_required', 'fusion_clock.kiosk_pin_required', True),`).
+  - `views/res_config_settings_views.xml`: delete the `<field name="fclk_kiosk_pin_required"/>` and its surrounding `<setting>`/row.
+  - `data/ir_config_parameter_data.xml`: delete the `config_kiosk_pin_required` record.
+
+- [ ] **Step 2: Relabel the kiosk location** — in `models/res_company.py`, change the field string/help (it now serves NFC + PIN):
+```python
+    x_fclk_nfc_kiosk_location_id = fields.Many2one(
+        'fusion.clock.location',
+        string='Kiosk Location',
+        help="Clock location bound to the on-site kiosk (NFC and PIN) for this company.",
+    )
+```
+
+- [ ] **Step 3: Add the PIN Kiosk app icon** — in `views/clock_menus.xml`, after the NFC kiosk app block, add:
+```xml
+    <record id="action_fusion_clock_kiosk_pin" model="ir.actions.act_url">
+        <field name="name">Fusion Clock PIN Kiosk</field>
+        <field name="url">/fusion_clock/kiosk</field>
+        <field name="target">self</field>
+    </record>
+
+    <menuitem id="menu_fusion_clock_kiosk_pin_app_root"
+              name="Fusion Clock PIN Kiosk"
+              web_icon="fusion_clock,static/description/icon.png"
+              action="action_fusion_clock_kiosk_pin"
+              sequence="47"
+              groups="group_fusion_clock_kiosk_app"/>
+```
+
+- [ ] **Step 4: Apply + verify** — run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20
+```
+Expected: no ParseError / no `Invalid field` for `fclk_kiosk_pin_required`.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/models/res_company.py fusion_clock/views/clock_menus.xml
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/models/res_company.py fusion_clock/views/clock_menus.xml \
+    -m "feat(fusion_clock): drop kiosk_pin_required, relabel kiosk location, add PIN kiosk app icon"
+```
+
+---
+
+## Task 4: SCSS — `pin_kiosk.scss` (mirror the NFC kiosk)
+
+**Files:**
+- Create: `static/src/scss/pin_kiosk.scss`
+- Modify: `__manifest__.py` (register in `web.assets_frontend`)
+
+- [ ] **Step 1: Create `static/src/scss/pin_kiosk.scss`** — mirror `nfc_kiosk.scss` exactly for the shared chrome, **but** scope every rule under `:has(#pin_kiosk_root)` / `.pin-kiosk`, rename the hue var to `--pk-h`, and replace the NFC idle/icon section with the **grid + tiles**. Full file:
+
+```scss
+// PIN Clock Kiosk — premium glass + animated mesh, always-dark.
+// Mirrors nfc_kiosk.scss; scoped under :has(#pin_kiosk_root) so it never leaks.
+// Brand hue --pk-h is set by JS from the company logo's dominant color.
+:root {
+    --pk-h: 168;
+    --pk-bg: #0b0d10;
+    --pk-text: #ffffff;
+    --pk-text-muted: #9ba3ad;
+    --pk-success: #18a957;
+    --pk-error: #d9374e;
+}
+html:has(#pin_kiosk_root) {
+    overflow: hidden; height: 100%;
+    body { overflow: hidden; height: 100%; margin: 0; padding: 0;
+        background: var(--pk-bg) !important; color: var(--pk-text);
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; }
+    .o_main_navbar, header, footer, .o_header_standard, .o_footer { display: none !important; }
+}
+.pin-kiosk {
+    position: fixed; inset: 0; width: 100vw; height: 100vh;
+    display: flex; flex-direction: column; align-items: center; justify-content: flex-start;
+    padding: 1.25rem 2rem 2rem; box-sizing: border-box; user-select: none;
+    -webkit-tap-highlight-color: transparent; overflow: hidden; background: var(--pk-bg);
+
+    &::before { content: ""; position: absolute; inset: -15%;
+        background:
+            radial-gradient(circle at 20% 30%, hsla(var(--pk-h), 75%, 40%, 0.55) 0%, transparent 45%),
+            radial-gradient(circle at 80% 20%, hsla(calc(var(--pk-h) + 40), 65%, 35%, 0.50) 0%, transparent 50%),
+            radial-gradient(circle at 70% 75%, hsla(calc(var(--pk-h) - 25), 70%, 35%, 0.45) 0%, transparent 55%),
+            radial-gradient(circle at 15% 85%, hsla(calc(var(--pk-h) + 80), 60%, 30%, 0.40) 0%, transparent 50%);
+        filter: blur(60px) saturate(140%); animation: pk-mesh 28s ease-in-out infinite alternate; z-index: 0; }
+    &::after { content: ""; position: absolute; inset: 0;
+        background: radial-gradient(ellipse at center, transparent 55%, rgba(0,0,0,0.45) 100%); z-index: 1; pointer-events: none; }
+    > * { position: relative; z-index: 2; }
+}
+@keyframes pk-mesh {
+    0% { transform: translate(0,0) rotate(0) scale(1); }
+    50% { transform: translate(3%,-2%) rotate(2deg) scale(1.05); }
+    100% { transform: translate(-3%,3%) rotate(-1deg) scale(0.98); }
+}
+
+// Header chrome
+.pin-kiosk__logo { max-height: 56px; max-width: 240px; object-fit: contain;
+    background: rgba(255,255,255,0.95); padding: 0.55rem 1rem; border-radius: 0.9rem;
+    border: 2px solid hsla(var(--pk-h), 85%, 72%, 0.95);
+    box-shadow: 0 8px 28px rgba(0,0,0,0.4), 0 0 26px hsla(var(--pk-h), 90%, 60%, 0.5); }
+.pin-kiosk__clock { margin-top: 0.5rem; font-size: 2.1rem; font-weight: 300; font-variant-numeric: tabular-nums;
+    letter-spacing: -0.02em; text-shadow: 0 2px 12px rgba(0,0,0,0.4);
+    .ampm { font-size: 0.9rem; font-weight: 500; color: var(--pk-text-muted); margin-left: 0.3rem; } }
+.pin-kiosk__date { font-size: 0.8rem; color: var(--pk-text-muted); text-transform: uppercase; letter-spacing: 0.06em; margin-top: 0.1rem; }
+
+// Search
+.pin-kiosk__search { margin: 1rem 0 0.85rem; width: min(440px, 92%);
+    background: rgba(255,255,255,0.06); border: 1px solid rgba(255,255,255,0.12); border-radius: 999px;
+    padding: 0.7rem 1.2rem; color: var(--pk-text); font-size: 1rem; outline: none;
+    &::placeholder { color: var(--pk-text-muted); }
+    &:focus { border-color: hsl(var(--pk-h), 80%, 55%); } }
+
+// Tile grid
+.pin-kiosk__grid { flex: 1; min-height: 0; overflow-y: auto; width: 100%; max-width: 1100px;
+    display: grid; grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); gap: 0.85rem; align-content: start; padding-bottom: 1rem; }
+.pin-kiosk__tile { display: flex; flex-direction: column; align-items: center; gap: 0.5rem; padding: 0.85rem 0.4rem;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); border-radius: 1rem;
+    box-shadow: 0 8px 24px rgba(0,0,0,0.25); cursor: pointer; transition: transform 120ms ease, background 150ms ease;
+    &:hover, &:active { background: rgba(255,255,255,0.1); transform: translateY(-2px); } }
+.pin-kiosk__tile-av { width: 60px; height: 60px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.25rem; font-weight: 700; color: #fff;
+    border: 2px solid rgba(255,255,255,0.25); box-shadow: 0 6px 16px rgba(0,0,0,0.35); }
+.pin-kiosk__tile-nm { font-size: 0.8rem; text-align: center; line-height: 1.15; color: #e7ebf0; max-width: 100px; }
+
+// Bottom chrome
+.pin-kiosk__location { position: absolute; bottom: 1.5rem; left: 1.5rem; font-size: 0.85rem; color: var(--pk-text-muted);
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); padding: 0.5rem 1rem; border-radius: 999px; }
+.pin-kiosk__settings { position: absolute; bottom: 1.5rem; right: 1.5rem; width: 2.75rem; height: 2.75rem; border-radius: 50%;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); color: var(--pk-text-muted);
+    display: flex; align-items: center; justify-content: center; font-size: 1.2rem; cursor: pointer; }
+
+// Glass overlay (PIN pad / setup / result), centered
+.pin-kiosk__overlay { position: fixed; inset: 0; z-index: 1000; display: flex; align-items: center; justify-content: center;
+    background: rgba(0,0,0,0.55); backdrop-filter: blur(6px); padding: 2rem; animation: pk-fade 200ms ease-out; }
+@keyframes pk-fade { from { opacity: 0; } to { opacity: 1; } }
+%pk-glass { background: rgba(255,255,255,0.06); backdrop-filter: blur(24px) saturate(160%);
+    border: 1px solid rgba(255,255,255,0.12); box-shadow: 0 20px 60px rgba(0,0,0,0.5); border-radius: 1.5rem; }
+.pin-kiosk__panel { @extend %pk-glass; padding: 1.75rem 2rem; width: min(360px, 90%);
+    display: flex; flex-direction: column; align-items: center; gap: 0.75rem; }
+.pin-kiosk__av { width: 64px; height: 64px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.4rem; font-weight: 700; color: #fff;
+    background-color: hsl(var(--pk-h), 60%, 45%); border: 2px solid rgba(255,255,255,0.25); }
+.pin-kiosk__name { font-size: 1.25rem; font-weight: 600; }
+.pin-kiosk__sub { font-size: 0.85rem; color: var(--pk-text-muted); margin-top: -0.3rem; }
+.pin-kiosk__dots { display: flex; gap: 0.85rem; margin: 0.5rem 0; }
+.pin-kiosk__dot { width: 0.85rem; height: 0.85rem; border-radius: 50%; border: 2px solid hsla(var(--pk-h),80%,70%,0.8);
+    &.on { background: hsl(var(--pk-h),80%,65%); border-color: hsl(var(--pk-h),80%,65%); } }
+.pin-kiosk__pad { display: grid; grid-template-columns: repeat(3, 4rem); gap: 0.6rem; }
+.pin-kiosk__key { height: 3.25rem; border-radius: 0.85rem; background: rgba(255,255,255,0.06);
+    border: 1px solid rgba(255,255,255,0.12); color: var(--pk-text); font-size: 1.4rem; font-weight: 300; cursor: pointer;
+    display: flex; align-items: center; justify-content: center;
+    &:active { transform: scale(0.95); background: rgba(255,255,255,0.14); }
+    &.ok { background: hsl(var(--pk-h),80%,45%); border-color: transparent; } }
+.pin-kiosk__cancel { margin-top: 0.3rem; color: var(--pk-text-muted); font-size: 0.85rem; cursor: pointer; background: none; border: none; }
+.pin-kiosk__err { min-height: 1.1rem; color: var(--pk-error); font-size: 0.9rem; }
+.pin-kiosk__panel.shake { animation: pk-shake 350ms ease-in-out; }
+@keyframes pk-shake { 0%,100%{transform:translateX(0)} 20%{transform:translateX(-10px)} 40%{transform:translateX(10px)} 60%{transform:translateX(-6px)} 80%{transform:translateX(6px)} }
+
+// Result card
+.pin-kiosk__result { @extend %pk-glass; padding: 2.25rem 3rem; display: flex; flex-direction: column; align-items: center;
+    gap: 0.6rem; text-align: center; width: min(420px, 90%);
+    border-color: rgba(24,169,87,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 80px rgba(24,169,87,0.35);
+    &--error { border-color: rgba(217,55,78,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 60px rgba(217,55,78,0.3); } }
+.pin-kiosk__check { width: 74px; height: 74px; border-radius: 50%; background: rgba(24,169,87,0.18);
+    border: 2px solid rgba(24,169,87,0.6); display: flex; align-items: center; justify-content: center; font-size: 2rem; color: #34d399; }
+.pin-kiosk__result .name { font-size: 1.6rem; font-weight: 600; }
+.pin-kiosk__result .action { font-size: 1.2rem; color: #34d399; font-weight: 500; }
+.pin-kiosk__result .meta { font-size: 0.9rem; color: var(--pk-text-muted); }
+
+// Photo capture (reuse the NFC oval-guide pattern)
+.pin-kiosk__photo { @extend %pk-glass; padding: 1.5rem; width: min(540px,86%); text-align: center;
+    .stage { position: relative; aspect-ratio: 3/4; height: 56vh; max-height: 480px; margin: 0 auto; border-radius: 1rem; overflow: hidden; background: #000; }
+    video, img { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; }
+    video { transform: scaleX(-1); }
+    .guide { position: absolute; top: 47%; left: 50%; width: 64%; aspect-ratio: 3/4; transform: translate(-50%,-50%);
+        border: 3px dashed rgba(255,255,255,0.92); border-radius: 50%; box-shadow: 0 0 0 9999px rgba(0,0,0,0.5); }
+    .countdown { position: absolute; top: 47%; left: 50%; transform: translate(-50%,-50%); font-size: 5rem; font-weight: 200; color: #fff; text-shadow: 0 2px 24px rgba(0,0,0,0.85); } }
+
+@media (prefers-reduced-motion: reduce) {
+    .pin-kiosk::before, .pin-kiosk__panel.shake, .pin-kiosk__result { animation: none; }
+}
+```
+
+- [ ] **Step 2: Register in the manifest** — in `__manifest__.py` `web.assets_frontend`, add after `nfc_kiosk.scss`:
+```python
+            'fusion_clock/static/src/scss/pin_kiosk.scss',
+```
+
+- [ ] **Step 3: Force-compile to verify the SCSS is valid** — run:
+```bash
+docker exec odoo-dev-app odoo shell -d fusion-dev --no-http 2>/dev/null <<'PY'
+env['ir.qweb']._get_asset_bundle('web.assets_frontend').css()
+print('FRONTEND BUNDLE OK')
+PY
+```
+Expected: `FRONTEND BUNDLE OK`, no Sass error. (If `min()`/mixed-unit or `@extend` errors appear, fix before moving on.)
+
+- [ ] **Step 4: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/scss/pin_kiosk.scss fusion_clock/__manifest__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/scss/pin_kiosk.scss fusion_clock/__manifest__.py \
+    -m "feat(fusion_clock): PIN kiosk SCSS (glass + brand-gradient, scoped)"
+```
+
+---
+
+## Task 5: Template — rebuild `views/kiosk_templates.xml`
+
+**Files:**
+- Modify: `views/kiosk_templates.xml`
+- Modify: `controllers/clock_kiosk.py` (`kiosk_page` context)
+
+- [ ] **Step 1: Update `kiosk_page` context** — in `controllers/clock_kiosk.py`, replace the `values = {...}` in `kiosk_page` with:
+```python
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        values = {
+            'page_name': 'kiosk',
+            'company_name': company.name,
+            'company_logo_url': '/web/image/res.company/%s/logo' % company.id if company.logo else '',
+            'location_name': location.name if location else 'No location configured',
+            'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
+            'photo_required': ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True',
+        }
+```
+
+- [ ] **Step 2: Replace `views/kiosk_templates.xml`** with:
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <template id="kiosk_page" name="Fusion Clock PIN Kiosk">
+        <t t-call="web.frontend_layout">
+            <t t-set="no_header" t-value="True"/>
+            <t t-set="no_footer" t-value="True"/>
+            <div id="pin_kiosk_root" class="pin-kiosk"
+                 t-att-data-logo-url="company_logo_url"
+                 t-att-data-location="location_name"
+                 t-att-data-sounds="'1' if sounds_enabled else '0'"
+                 t-att-data-photo="'1' if photo_required else '0'">
+                <img t-if="company_logo_url" id="pin_kiosk_logo" class="pin-kiosk__logo" t-att-src="company_logo_url" alt="Logo"/>
+                <div class="pin-kiosk__clock" id="pin_kiosk_clock"></div>
+                <div class="pin-kiosk__date" id="pin_kiosk_date"></div>
+                <input type="text" class="pin-kiosk__search" id="pin_kiosk_search" placeholder="Search your name…" autocomplete="off"/>
+                <div class="pin-kiosk__grid" id="pin_kiosk_grid"></div>
+                <div class="pin-kiosk__location" t-esc="location_name"/>
+                <div class="pin-kiosk__settings" id="pin_kiosk_settings">⚙</div>
+                <div id="pin_state_container"></div>
+            </div>
+        </t>
+    </template>
+</odoo>
+```
+
+- [ ] **Step 3: Apply + verify the template loads** — run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -15
+```
+Expected: no ParseError on `fusion_clock.kiosk_page`.
+
+- [ ] **Step 4: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/views/kiosk_templates.xml fusion_clock/controllers/clock_kiosk.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/views/kiosk_templates.xml fusion_clock/controllers/clock_kiosk.py \
+    -m "feat(fusion_clock): PIN kiosk template (logo, clock, search, grid, state container)"
+```
+
+---
+
+## Task 6: JS — rewrite `fusion_clock_kiosk.js` as an Interaction
+
+**Files:**
+- Modify: `static/src/js/fusion_clock_kiosk.js`
+
+- [ ] **Step 1: Replace the file** with an Odoo-19 Interaction. Full implementation:
+
+```javascript
+/** @odoo-module **/
+import { Interaction } from "@web/public/interaction";
+import { registry } from "@web/core/registry";
+import { rpc } from "@web/core/network/rpc";
+
+export class PinKiosk extends Interaction {
+    static selector = "#pin_kiosk_root";
+
+    setup() {
+        this.root = this.el;
+        this.grid = this.el.querySelector("#pin_kiosk_grid");
+        this.searchEl = this.el.querySelector("#pin_kiosk_search");
+        this.stage = this.el.querySelector("#pin_state_container");
+        this.photoRequired = this.el.dataset.photo === "1";
+        this.soundsOn = this.el.dataset.sounds === "1";
+        this.employees = [];
+        this.filtered = [];
+    }
+
+    async willStart() {
+        const res = await rpc("/fusion_clock/kiosk/search", { query: "" });
+        this.employees = res.employees || [];
+        this.filtered = this.employees;
+    }
+
+    start() {
+        this.initBrandHue();
+        this.startClock();
+        this.renderGrid();
+        this.searchEl.addEventListener("input", () => this.onSearch());
+    }
+
+    // ---- brand hue (mirrors fusion_clock_nfc_kiosk.js) ----
+    rgbToHue(r, g, b) {
+        r /= 255; g /= 255; b /= 255;
+        const mx = Math.max(r, g, b), mn = Math.min(r, g, b), d = mx - mn;
+        if (d === 0) return null;
+        let h = mx === r ? ((g - b) / d) % 6 : mx === g ? (b - r) / d + 2 : (r - g) / d + 4;
+        h = Math.round(h * 60); if (h < 0) h += 360; return h;
+    }
+    extractHue(img) {
+        try {
+            const w = img.naturalWidth, h = img.naturalHeight; if (!w || !h) return null;
+            const c = document.createElement("canvas"); c.width = w; c.height = h;
+            const ctx = c.getContext("2d"); ctx.drawImage(img, 0, 0);
+            const data = ctx.getImageData(0, 0, w, h).data;
+            let rs = 0, gs = 0, bs = 0, n = 0;
+            for (let i = 0; i < data.length; i += 4) {
+                const r = data[i], g = data[i+1], b = data[i+2], a = data[i+3];
+                if (a < 128) continue;
+                if (Math.max(r,g,b) - Math.min(r,g,b) < 25) continue;
+                rs += r; gs += g; bs += b; n++;
+            }
+            if (n < 20) return null;
+            return this.rgbToHue(Math.round(rs/n), Math.round(gs/n), Math.round(bs/n));
+        } catch (e) { return null; }
+    }
+    initBrandHue() {
+        const img = this.el.querySelector("#pin_kiosk_logo");
+        if (!img) return;
+        const apply = () => { const hue = this.extractHue(img); if (hue != null) document.documentElement.style.setProperty("--pk-h", String(hue)); };
+        if (img.complete) apply(); else img.addEventListener("load", apply);
+    }
+
+    // ---- clock ----
+    startClock() {
+        const tick = () => {
+            const d = new Date();
+            let h = d.getHours(); const m = String(d.getMinutes()).padStart(2, "0");
+            const ap = h >= 12 ? "PM" : "AM"; h = h % 12 || 12;
+            this.el.querySelector("#pin_kiosk_clock").innerHTML = `${h}:${m}<span class="ampm">${ap}</span>`;
+            this.el.querySelector("#pin_kiosk_date").textContent =
+                d.toLocaleDateString(undefined, { weekday: "long", month: "long", day: "numeric" });
+        };
+        tick(); this._clockTimer = setInterval(tick, 1000);
+    }
+
+    // ---- grid ----
+    initials(name) { return (name||"").split(" ").filter(Boolean).slice(0,2).map(p=>p[0].toUpperCase()).join(""); }
+    onSearch() {
+        const q = this.searchEl.value.trim().toLowerCase();
+        this.filtered = q ? this.employees.filter(e => e.name.toLowerCase().includes(q)) : this.employees;
+        this.renderGrid();
+    }
+    renderGrid() {
+        this.grid.innerHTML = "";
+        for (const emp of this.filtered) {
+            const tile = document.createElement("div");
+            tile.className = "pin-kiosk__tile";
+            const av = document.createElement("div");
+            av.className = "pin-kiosk__tile-av";
+            if (emp.avatar_url) av.style.backgroundImage = `url(${emp.avatar_url})`;
+            av.textContent = emp.avatar_url ? "" : this.initials(emp.name);
+            const nm = document.createElement("div");
+            nm.className = "pin-kiosk__tile-nm"; nm.textContent = emp.name;
+            tile.append(av, nm);
+            tile.addEventListener("click", () => this.onTile(emp));
+            this.grid.appendChild(tile);
+        }
+    }
+
+    // ---- PIN / setup overlay ----
+    onTile(emp) {
+        this.current = emp; this.pinBuf = ""; this.attempts = 0;
+        if (emp.has_pin) this.showPin(emp, "Enter your PIN", false);
+        else this.showPin(emp, "Create a PIN", true);   // first-use
+    }
+    showPin(emp, sub, isSetup, confirming) {
+        this.stage.innerHTML = "";
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const panel = document.createElement("div"); panel.className = "pin-kiosk__panel";
+        panel.innerHTML = `
+            <div class="pin-kiosk__av">${emp.avatar_url ? "" : this.initials(emp.name)}</div>
+            <div class="pin-kiosk__name">${emp.name}</div>
+            <div class="pin-kiosk__sub">${confirming ? "Re-enter to confirm" : sub}</div>
+            <div class="pin-kiosk__dots"></div>
+            <div class="pin-kiosk__err"></div>
+            <div class="pin-kiosk__pad"></div>
+            <button class="pin-kiosk__cancel">✕ Cancel</button>`;
+        if (emp.avatar_url) panel.querySelector(".pin-kiosk__av").style.backgroundImage = `url(${emp.avatar_url})`;
+        const pad = panel.querySelector(".pin-kiosk__pad");
+        const keys = ["1","2","3","4","5","6","7","8","9","⌫","0","✓"];
+        for (const k of keys) {
+            const b = document.createElement("button");
+            b.className = "pin-kiosk__key" + (k === "✓" ? " ok" : "");
+            b.textContent = k;
+            b.addEventListener("click", () => this.onKey(k, emp, isSetup, confirming));
+            pad.appendChild(b);
+        }
+        panel.querySelector(".pin-kiosk__cancel").addEventListener("click", () => this.reset());
+        ov.appendChild(panel); this.stage.appendChild(ov);
+        this._panel = panel; this.renderDots();
+    }
+    renderDots() {
+        const dots = this._panel.querySelector(".pin-kiosk__dots"); dots.innerHTML = "";
+        const len = Math.max(4, this.pinBuf.length);
+        for (let i = 0; i < len; i++) {
+            const d = document.createElement("span");
+            d.className = "pin-kiosk__dot" + (i < this.pinBuf.length ? " on" : "");
+            dots.appendChild(d);
+        }
+    }
+    err(msg) {
+        const e = this._panel.querySelector(".pin-kiosk__err"); e.textContent = msg;
+        this._panel.classList.add("shake"); setTimeout(() => this._panel.classList.remove("shake"), 360);
+    }
+    onKey(k, emp, isSetup, confirming) {
+        if (k === "⌫") { this.pinBuf = this.pinBuf.slice(0, -1); this.renderDots(); return; }
+        if (k === "✓") { this.submitPin(emp, isSetup, confirming); return; }
+        if (this.pinBuf.length < 6) { this.pinBuf += k; this.renderDots(); }
+        if (this.pinBuf.length >= 4 && !isSetup) { /* allow ✓; no auto-submit */ }
+    }
+    async submitPin(emp, isSetup, confirming) {
+        const pin = this.pinBuf;
+        if (pin.length < 4) return this.err("PIN must be at least 4 digits");
+        if (isSetup && !confirming) {                 // first entry of new PIN → confirm
+            this._newPin = pin; this.pinBuf = "";
+            return this.showPin(emp, "Create a PIN", true, true);
+        }
+        if (isSetup && confirming) {
+            if (pin !== this._newPin) { this.pinBuf = ""; this.renderDots(); return this.err("PINs didn't match"); }
+            const r = await rpc("/fusion_clock/kiosk/set_pin", { employee_id: emp.id, pin });
+            if (r.error) return this.err("Couldn't save PIN");
+            return this.afterPin(emp);
+        }
+        const v = await rpc("/fusion_clock/kiosk/verify_pin", { employee_id: emp.id, pin });
+        if (v.success) return this.afterPin(emp);
+        this.attempts++; this.pinBuf = ""; this.renderDots();
+        if (this.attempts >= 3) return this.reset();
+        this.err("Wrong PIN — try again");
+    }
+
+    // ---- photo (optional) then clock ----
+    async afterPin(emp) {
+        let photo = "";
+        if (this.photoRequired) {
+            try { photo = await this.capturePhoto(emp); } catch (e) { photo = ""; }
+        }
+        const r = await rpc("/fusion_clock/kiosk/clock", { employee_id: emp.id, photo_b64: photo });
+        this.showResult(emp, r);
+    }
+    showResult(emp, r) {
+        this.stage.innerHTML = "";
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const card = document.createElement("div");
+        if (r && r.success) {
+            card.className = "pin-kiosk__result";
+            const act = r.action === "clock_out" ? "Clocked Out" : "Clocked In";
+            card.innerHTML = `<div class="pin-kiosk__check">✓</div>
+                <div class="name">${emp.name}</div><div class="action">${act}</div>
+                <div class="meta">${r.message || ""}</div>`;
+            if (this.soundsOn) this.beep();
+        } else {
+            card.className = "pin-kiosk__result pin-kiosk__result--error";
+            card.innerHTML = `<div class="pin-kiosk__check" style="color:#f87171;background:rgba(217,55,78,.18);border-color:rgba(217,55,78,.6)">!</div>
+                <div class="name">${emp.name}</div><div class="action" style="color:#f87171">Couldn't clock</div>
+                <div class="meta">${(r && r.error) || "Try again"}</div>`;
+        }
+        ov.appendChild(card); this.stage.appendChild(ov);
+        setTimeout(() => this.reset(), 3000);
+    }
+    beep() { try { const a = new (window.AudioContext || window.webkitAudioContext)(); const o = a.createOscillator(); o.frequency.value = 880; o.connect(a.destination); o.start(); o.stop(a.currentTime + 0.12); } catch (e) {} }
+
+    // ---- camera capture (mirrors the NFC kiosk; oval guide + 3s countdown) ----
+    capturePhoto(emp) {
+        return new Promise(async (resolve, reject) => {
+            let stream;
+            try { stream = await navigator.mediaDevices.getUserMedia({ video: { facingMode: "user" } }); }
+            catch (e) { return reject(e); }
+            this.stage.innerHTML = "";
+            const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+            const panel = document.createElement("div"); panel.className = "pin-kiosk__photo";
+            panel.innerHTML = `<h2>${emp.name}</h2>
+                <div class="stage"><video autoplay playsinline></video><div class="guide"></div><div class="countdown"></div></div>`;
+            ov.appendChild(panel); this.stage.appendChild(ov);
+            const video = panel.querySelector("video"); video.srcObject = stream;
+            const cd = panel.querySelector(".countdown");
+            let n = 3; cd.textContent = n;
+            const timer = setInterval(() => {
+                n--; if (n > 0) { cd.textContent = n; return; }
+                clearInterval(timer);
+                const c = document.createElement("canvas"); c.width = video.videoWidth; c.height = video.videoHeight;
+                c.getContext("2d").drawImage(video, 0, 0);
+                stream.getTracks().forEach(t => t.stop());
+                resolve(c.toDataURL("image/jpeg", 0.8));
+            }, 1000);
+        });
+    }
+
+    reset() {
+        this.stage.innerHTML = ""; this.pinBuf = ""; this.current = null; this._newPin = null;
+        this.searchEl.value = ""; this.filtered = this.employees; this.renderGrid();
+        // refresh checked-in state in the background
+        rpc("/fusion_clock/kiosk/search", { query: "" }).then(res => { this.employees = res.employees || []; });
+    }
+    destroy() { if (this._clockTimer) clearInterval(this._clockTimer); }
+}
+
+registry.category("public.interactions").add("fusion_clock.pin_kiosk", PinKiosk);
+```
+
+- [ ] **Step 2: Syntax-check** — run:
+```bash
+docker exec odoo-dev-app node --check /mnt/extra-addons/custom/fusion_clock/static/src/js/fusion_clock_kiosk.js 2>&1 | tail -3 || echo "(node unavailable — rely on browser load in Task 7)"
+```
+Expected: no syntax error.
+
+- [ ] **Step 3: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/js/fusion_clock_kiosk.js
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/js/fusion_clock_kiosk.js \
+    -m "feat(fusion_clock): PIN kiosk Interaction (grid, PIN/setup, photo, clock)"
+```
+
+---
+
+## Task 7: Version bump, full upgrade + tests, manual smoke, deploy
+
+**Files:**
+- Modify: `__manifest__.py` (version), `fusion_clock/CLAUDE.md`
+
+- [ ] **Step 1: Bump version** — `__manifest__.py` version → `19.0.4.0.0` (new feature).
+
+- [ ] **Step 2: Update module docs** — in `fusion_clock/CLAUDE.md`: in the kiosk section note the classic kiosk is now the polished PIN kiosk (photo-tile → PIN → optional selfie, brand-gradient, app icon, opt-in via `enable_kiosk`); remove `fusion_clock.kiosk_pin_required` from the §11 settings-keys list.
+
+- [ ] **Step 3: Full upgrade + run the suite**
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+Expected: upgrade succeeds; `test_clock_kiosk` passes; existing tests still pass; `0 failed, 0 error`.
+
+- [ ] **Step 4: Manual browser smoke (local)** — http://localhost:8082: as a manager, set `enable_kiosk` ON + a Kiosk Location, open `/fusion_clock/kiosk`. Confirm: logo pill + brand gradient + live clock; the photo-tile grid; search filters; tapping a tile opens the PIN pad; a no-PIN employee gets the create+confirm flow; correct PIN → (selfie if Photo Verification ON) → success card → auto-return; wrong PIN shakes. Toggle Photo Verification and confirm the selfie step appears/disappears.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/__manifest__.py fusion_clock/CLAUDE.md
+git diff --cached --name-only
+git commit --only -- fusion_clock/__manifest__.py fusion_clock/CLAUDE.md \
+    -m "chore(fusion_clock): bump 19.0.4.0.0 (PIN kiosk) + docs"
+```
+
+- [ ] **Step 6: Push both remotes + deploy entech**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git log origin/main..HEAD --oneline
+git push origin main && git push gitea main
+```
+Then deploy the whole `fusion_clock` dir to entech (tar excluding `.superpowers`/`__pycache__`/`*.pyc`/`.DS_Store` → scp pve-worker5 → pct push 111 → extract → chown odoo:odoo → upgrade as `odoo` user with `--http-port=0 --gevent-port=0`). Verify web/login → 200, version `19.0.4.0.0`, and (read-only) the `/fusion_clock/kiosk` page renders for the operator. Hard-refresh the tablet. (entech can keep using the NFC kiosk; the PIN kiosk is opt-in via `enable_kiosk` + the PIN Kiosk app icon.)
+
+---
+
+## Self-Review (completed inline)
+
+- **Spec coverage:** §3.1 flow → Tasks 5/6; §3.2 style → Task 4; §3.3 backend (search/verify/set_pin/clock) → Tasks 1–2; §3.4 JS Interaction → Task 6; §3.5 template → Task 5; §3.6 settings/menu/location/PIN → Task 3 (+ company relabel); photo master-gate → Task 2; tests → Tasks 1–2 + Task 7; deploy → Task 7.
+- **Placeholder scan:** none — complete code for backend/tests/config/template/JS/SCSS; commands have expected output.
+- **Type/name consistency:** routes `/fusion_clock/kiosk/{search,verify_pin,set_pin,clock}` match between controller (Tasks 1–2), JS `rpc(...)` calls (Task 6), and tests. Return keys (`employees[].{has_pin,avatar_url}`, `needs_setup`, `invalid_pin`, `already_set`, `bad_pin`, `no_location_configured`, `success/action/message/net_hours`) consistent across controller, JS, tests. DOM ids (`#pin_kiosk_root`, `#pin_kiosk_grid`, `#pin_kiosk_search`, `#pin_state_container`, `#pin_kiosk_logo`, `#pin_kiosk_clock`, `#pin_kiosk_date`) match between template (Task 5), JS (Task 6), and SCSS scoping (Task 4). `--pk-h` used in SCSS + set in JS. `x_fclk_nfc_kiosk_location_id` used consistently as the kiosk location.
+- **Scope:** single feature; one plan.

fusion_clock/docs/superpowers/specs/2026-05-31-biweekly-attendance-filter-design.md

@@ -0,0 +1,105 @@
+# Fusion Clock — Bi-Weekly Attendance Filter Design
+
+**Date:** 2026-05-31
+**Module:** `fusion_clock`
+**Status:** Approved (brainstorming) — ready for implementation plan
+
+---
+
+## 1. Problem
+
+Operators reviewing **All Attendances** have no quick way to scope the list to a pay period. In Canada most payroll runs **bi-weekly**, so the common need is "show me this two-week pay period's attendances" (and step to the previous/next, or jump to an arbitrary period). The module already computes bi-weekly windows for its reports and already has the configuration — but none of it is exposed as a filter on the attendance list.
+
+## 2. Existing state (reused, not rebuilt)
+
+- **Period math already exists:** `fusion.clock.report._calculate_current_period(frequency, anchor_str, reference_date) → (start, end)` (`models/clock_report.py:457`). Handles `weekly` (7d), `biweekly` (14d), `semi_monthly`, `monthly`; uses floor division so dates *before* the anchor resolve correctly; anchor defaults to first-of-month when unset.
+- **Setting already exists:** Settings → Fusion Clock → Pay Period: **Frequency** (`fusion_clock.pay_period_type`, default `biweekly`) + **Anchor Date** (`fusion_clock.pay_period_start`, `YYYY-MM-DD`). Decision (brainstorming): **reuse this as the single source of truth** — no new setting.
+- **Attendance search view already inherited:** `view_hr_attendance_search_fusion_clock` (`views/hr_attendance_views.xml`) inherits `hr_attendance.hr_attendance_view_filter` and already adds custom filters — the natural home for the new period filters.
+- **TZ helpers:** `get_local_day_boundaries(env, date[, employee])` and `get_local_today(env)` in `models/tz_utils.py`.
+
+Decisions from brainstorming: reuse the Pay Period setting; provide **both** quick filters and a picker; the window **follows the Frequency setting** (one pay period; 2 weeks by default).
+
+## 3. Design
+
+### A. Shared period math (DRY)
+Extract the body of `_calculate_current_period` into a reusable, model-free helper so reports, filters, and the wizard share one implementation and never drift.
+
+`models/pay_period.py` (new):
+```python
+def compute_pay_period(frequency, anchor_str, reference_date) -> (date, date)
+    # identical logic to _calculate_current_period; pure function
+def period_length_days(frequency) -> int | None
+    # 7 for 'weekly', 14 for 'biweekly'/default, None for calendar-based (semi_monthly/monthly)
+def current_prev_next(frequency, anchor_str, today) -> dict
+    # {'current': (s,e), 'previous': (s,e), 'next': (s,e)} where
+    # previous = compute_pay_period(..., current_start - 1 day),
+    # next     = compute_pay_period(..., current_end   + 1 day)   # works for ALL frequencies
+```
+`fusion.clock.report._calculate_current_period` becomes a thin delegator to `compute_pay_period` (no behaviour change).
+
+### B. Quick filters on the attendance list
+On `hr.attendance`, three **non-stored computed Boolean** fields, each with a `search` method (the compute returns `False` — display only; the search method does the work):
+- `x_fclk_in_current_period`, `x_fclk_in_previous_period`, `x_fclk_in_next_period`
+
+Each `_search_*(operator, value)`:
+1. Read `pay_period_type` + `pay_period_start` via `ICP.sudo().get_param`.
+2. Compute the window with `current_prev_next(...)` keyed on `get_local_today(env)`.
+3. Convert the date window to UTC bounds with `get_local_day_boundaries` (start → 00:00 local, end → next-day 00:00 / inclusive end-of-day).
+4. Return `['&', ('check_in', '>=', start_utc), ('check_in', '<', end_excl_utc)]`.
+
+Add three filters to `view_hr_attendance_search_fusion_clock`:
+```xml
+<filter name="fclk_period_current"  string="Current Pay Period"  domain="[('x_fclk_in_current_period','=',True)]"/>
+<filter name="fclk_period_previous" string="Previous Pay Period" domain="[('x_fclk_in_previous_period','=',True)]"/>
+<filter name="fclk_period_next"     string="Next Pay Period"     domain="[('x_fclk_in_next_period','=',True)]"/>
+```
+
+### C. "Pick Pay Period" wizard
+`wizard/clock_period_picker_wizard.py` (new) — transient `fusion.clock.period.picker`:
+- `date_start` (Date, required) — default = current period start (`current_prev_next(...)['current'][0]`).
+- `date_end` (Date, required) — default = current period end; **editable**.
+- `@api.onchange('date_start')`: if `period_length_days(freq)` is not None → `date_end = date_start + length - 1`; else (calendar frequencies) → `date_end = compute_pay_period(freq, anchor, date_start)[1]`. (User can still override `date_end` → covers "set both, or just the start and auto-calc".)
+- `action_apply()` returns an `ir.actions.act_window`:
+  ```python
+  return {
+      'type': 'ir.actions.act_window', 'name': f"Attendances · {date_start} – {date_end}",
+      'res_model': 'hr.attendance', 'view_mode': 'list,form',
+      'domain': ['&', ('check_in','>=', start_utc), ('check_in','<', end_excl_utc)],
+      'target': 'current',
+  }
+  ```
+  (`start_utc`/`end_excl_utc` from `get_local_day_boundaries` on `date_start` / `date_end`.)
+
+`wizard/clock_period_picker_views.xml` (new): a small form (date_start, date_end, **Apply** + **Cancel**) and an `ir.actions.act_window` opening it as a dialog (`target="new"`).
+
+### D. Entry points
+- **Menu:** `views/clock_menus.xml` — add **Fusion Clock → Attendance → Bi-Weekly Period** (`sequence` after All Attendances), `groups="group_fusion_clock_manager,group_fusion_clock_team_lead"`, action = the picker wizard.
+- **Dashboard tile:** add an **onViewBiweekly()** handler (opens the picker wizard act_window) and a "🗓 Bi-Weekly Period" tile in the dashboard Quick Actions, inside the existing `t-if="state.team"` block (so only leads/managers see it).
+
+### E. Settings
+No new setting. Clarify the Anchor Date help/label in `res_config_settings_views.xml` to note it is the bi-weekly week-start used by **both** the reports and the attendance period filter.
+
+## 4. Permissions
+Filters, menu, and dashboard tile are gated to **manager + team-lead** (the attendance list itself is already gated to them in `clock_menus.xml`). Search methods read `ir.config_parameter` via `sudo()` (config only — no employee data). The returned domains run through Odoo's normal ACL/record rules, so a team-lead still sees only their own reports' attendance rows. No new data exposure.
+
+## 5. Edge cases
+- **No anchor set** → `compute_pay_period` falls back to first-of-month (existing behaviour); filters and picker still resolve a sane window. The picker pre-fills `date_start` with the computed current start so it is never blank.
+- **Frequency = semi_monthly / monthly** → window follows it; previous/next via `current_start − 1` / `current_end + 1` handles calendar stepping; picker auto-end uses the calendar period end containing the chosen start.
+- **TZ / DST** → date windows convert through `get_local_day_boundaries`, so a UTC `check_in` is matched against local pay-period days; end is exclusive next-day-00:00 to include the whole last day.
+- **date_end before date_start** in the picker → `@api.constrains` raises a friendly `ValidationError`.
+
+## 6. Testing (`tests/test_pay_period.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+- `compute_pay_period` for weekly / biweekly / semi_monthly / monthly, including a reference date **before** the anchor (negative offset) and exact boundary days.
+- `current_prev_next` returns contiguous, non-overlapping windows for biweekly (prev_end + 1 day == current_start, current_end + 1 == next_start).
+- Create attendances spanning two bi-weekly periods; assert the **Current** search filter returns only current-period rows and **Previous** only previous-period rows.
+- Wizard: default `date_start` == current period start; `onchange` sets `date_end = start + 13` for biweekly; `action_apply` returns an act_window whose domain bounds equal the local-day UTC boundaries of the chosen window.
+
+## 7. Out of scope (YAGNI)
+Custom OWL toolbar dropdown on the list (native Filters menu + wizard instead); per-employee differing pay periods; editing the anchor from the picker; saving favourite/named periods; touching the gantt view.
+
+## 8. Files touched
+- New: `models/pay_period.py`, `wizard/clock_period_picker_wizard.py`, `wizard/clock_period_picker_views.xml`, `tests/test_pay_period.py`
+- Modify: `models/__init__.py`, `models/clock_report.py` (delegate), `models/hr_attendance.py` (3 fields + search methods), `wizard/__init__.py`, `views/hr_attendance_views.xml` (3 filters), `views/clock_menus.xml` (menu item), `views/res_config_settings_views.xml` (label text), `static/src/js/fusion_clock_dashboard.js` + `static/src/xml/fusion_clock_dashboard.xml` (tile), `__manifest__.py` (data entry for the wizard view + version bump)
+
+## 9. Deployment
+Local test on the dev container (when available), then the standard entech path: bump version, `git commit --only` the explicit paths, push **origin + gitea**, upgrade entech (`pct exec 111`, native `odoo.service`, DB `admin`, `--http-port=0 --gevent-port=0`), verify web 200 + installed version, hard-refresh.

fusion_clock/docs/superpowers/specs/2026-05-31-pin-kiosk-design.md

@@ -0,0 +1,85 @@
+# Fusion Clock — PIN Kiosk Design
+
+**Date:** 2026-05-31
+**Module:** `fusion_clock`
+**Status:** Approved (brainstorming) — ready for implementation plan
+
+---
+
+## 1. Problem / goal
+
+The module has a premium **NFC kiosk** but only a bare-Bootstrap **classic PIN kiosk** (`/fusion_clock/kiosk`) with no logo, gradient, or polish, reachable only by direct URL. We want a properly designed, **opt-in PIN kiosk** as an additional feature for clients who want simple PIN entry instead of NFC — matching the NFC kiosk's look and quality. This makes the existing `enable_kiosk` setting meaningful (it becomes this feature's on/off).
+
+## 2. Decisions (from brainstorming)
+
+- **Flow:** photo-tile grid (with search) → tap your tile → enter PIN → clock. (Not PIN-as-identifier; not name-search.)
+- **PIN always required.** Drop the `kiosk_pin_required` toggle.
+- **Set PIN on first use:** an employee with no PIN is walked through creating + confirming one on first tap.
+- **Selfie respects the global Photo Verification master toggle** (`enable_photo_verification`): ON → guided selfie after PIN; OFF → none.
+- **Style:** always-dark glass + brand-hue mesh gradient, logo pill, live clock/date — matching the NFC kiosk.
+
+## 3. Design
+
+### 3.1 Screens / flow
+1. **Grid** (`#pin_kiosk_root`): company logo pill (top-centre), live clock + date, a search box, and a responsive grid of employee **photo tiles** (avatar + name) over the animated brand-tinted mesh gradient. Bottom chrome: location pill (left), operator ⚙ + lock (right).
+2. **Tap a tile** → **PIN pad**: glass panel with the person's avatar + name, masked PIN dots, a big touch numpad (`⌫ 0 ✓`), Cancel.
+   - If the employee **has no PIN** → **first-use setup**: "Create a PIN" → enter → "Re-enter to confirm" → saved, then proceed to clock.
+   - Wrong PIN → shake + clear + retry (max 3 attempts, then back to grid).
+3. **Selfie** (only if `enable_photo_verification` master is ON) → guided capture with the oval face-guide + countdown (reuse the NFC kiosk's capture).
+4. **Result**: green-glow success card (avatar, name, "Clocked In/Out", time · location), auto-returns to the grid after ~3 s. Error → red shake card.
+
+### 3.2 Style
+New `static/src/scss/pin_kiosk.scss`, **scoped to `:has(#pin_kiosk_root)`** (never leaks to other pages — same discipline as `nfc_kiosk.scss`). Mirrors the NFC kiosk's tokens/patterns: dark page, animated mesh `::before`, vignette `::after`, frosted logo pill, clock/date, `%glass` panels, numpad, result card (success/error), photo panel + oval guide, reduced-motion fallback. Brand hue in its **own** CSS var `--pk-h` (don't collide with `--nfc-h`); deliberately a parallel file, not shared, to avoid coupling the two kiosks.
+
+### 3.3 Backend — rework `controllers/clock_kiosk.py`
+All routes `auth='user'`, gated by `_is_kiosk_operator` (Clock Manager **or** Kiosk Operator group — unchanged). Page additionally gated by `enable_kiosk`.
+
+- **`GET /fusion_clock/kiosk`** — render the new template. Context: `company_name`, `company_logo_url` (for display + hue extraction), `location_name`, `sounds_enabled`, `photo_required` (= `enable_photo_verification` master). Redirect to `/my` if `enable_kiosk` off or not an operator (as today).
+- **`POST /fusion_clock/kiosk/search`** (extend the existing — keep the name; the NFC kiosk's `employee_search` delegates to it) — add `avatar_url` (via `hr.employee.public`, `?unique=write_date` cache-buster) and `has_pin` (bool) to each row, alongside the current `id/name/department/is_checked_in/card_uid`.
+- **`POST /fusion_clock/kiosk/verify_pin`** (rework) — if `not employee.x_fclk_kiosk_pin` → `{'needs_setup': True}`; else compare and return `{'success': True, ...}` or `{'error': 'invalid_pin'}`.
+- **`POST /fusion_clock/kiosk/set_pin`** (NEW) — first-use: validate a 4-digit numeric PIN, reject if the employee already has one (`already_set`), else write `x_fclk_kiosk_pin` (sudo) and return success.
+- **`POST /fusion_clock/kiosk/clock`** (rework) — accept `photo_b64`. Use the **configured kiosk location** (`company.x_fclk_nfc_kiosk_location_id`) — a fixed wall device, so NO per-clock GPS geofence (matches the NFC kiosk); return `no_location_configured` if unset. Clock via `_attendance_action_change`; write source `'kiosk'`, location, logs, penalties (as today). If `enable_photo_verification` master ON and `photo_b64` present → store on `x_fclk_check_in_photo` (in) / `x_fclk_check_out_photo` (out), stripping the data-URL prefix. Unscheduled-day → `unscheduled_shift` log (as today). Module-level tap debounce (~5 s, like NFC).
+
+### 3.4 Frontend — rewrite `static/src/js/fusion_clock_kiosk.js`
+Rebuild as a proper Odoo-19 **Interaction** (`@web/public/interaction`, registered in `registry.category("public.interactions")`) — not the old IIFE. State machine: `grid → pin | setup → (photo) → result → grid`. Reuse the NFC kiosk's **dominant-hue extraction** (set `--pk-h` from the logo) and **guided photo capture** (camera + oval guide + countdown) — replicate those helpers cleanly in this file (parallel, not imported, to keep the two kiosks decoupled). Search filters the tile grid client-side; tile tap loads the PIN/setup panel; numpad drives the dots; success plays a sound if `sounds_enabled`.
+
+### 3.5 Template — rebuild `views/kiosk_templates.xml`
+Root `<div id="pin_kiosk_root" class="pin-kiosk">` inside `web.frontend_layout` (no header/footer), carrying `data-*` for `company_logo_url`, `location_name`, `sounds_enabled`, `photo_required`. Contains the logo pill, clock/date, search, a grid container, and a JS-driven `#pin_state_container` (mirroring the NFC `#nfc_state_container`).
+
+### 3.6 Access, settings, menu
+- **Operator account:** runs as the shared **Kiosk Operator** (`group_fusion_clock_kiosk_app`) or a manager — same as NFC. Screen lock + operator ⚙ for parity.
+- **App icon:** add a **"Fusion Clock PIN Kiosk"** `ir.actions.act_url` → `/fusion_clock/kiosk` + a `menuitem` gated to `group_fusion_clock_kiosk_app` (parallel to the NFC app icon). Clients enable `enable_kiosk` and point the tablet at it.
+- **Settings:** `enable_kiosk` is the on/off (kept). **Remove `kiosk_pin_required`** (field + view row + seed + `_FCLK_BOOL_PARAMS` entry) — PIN is always required. The **kiosk location** reuses `res.company.x_fclk_nfc_kiosk_location_id`; relabel its field string to **"Kiosk Location"** (it now serves NFC + PIN) and note in help it applies to both.
+- **PIN storage:** existing `hr.employee.x_fclk_kiosk_pin` (Char, 4-digit, manager-editable, server-verified). Kept plaintext to match the existing field and keep it simple; hashing noted as optional future hardening (it's a low-stakes attribution PIN, manager-only field, never sent to other clients).
+
+## 4. Reuse / dependencies
+- Keep `FusionClockKiosk.kiosk_search` working — the NFC kiosk's `employee_search` delegates to it (`clock_nfc_kiosk.py:409`).
+- Reuse (replicate) the NFC kiosk's hue extraction (`extractDominantHue`/`applyBrandHue`) and photo capture.
+- Reuse `hr.employee.public` for avatars (kiosk operator can't read `hr.employee` images — established for the NFC kiosk).
+- Reuse the master photo gate added in `19.0.3.16.1`.
+
+## 5. Edge cases
+- **No PIN** → first-use setup (enter + confirm; `set_pin`).
+- **Wrong PIN** → shake + retry, max 3 → back to grid.
+- **Employee not clock-enabled** → not listed; defensive re-check in `clock`.
+- **No kiosk location configured** → `no_location_configured` message.
+- **Photo master OFF** → skip the selfie step entirely; clock directly.
+- **Unscheduled day** → `unscheduled_shift` activity log (parity with NFC).
+- **Double-tap** → debounced.
+
+## 6. Testing (`tests/test_clock_kiosk.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+- `search` returns `avatar_url` + `has_pin`; only clock-enabled employees.
+- `verify_pin`: correct PIN → success; wrong → `invalid_pin`; no PIN → `needs_setup`.
+- `set_pin`: sets a 4-digit PIN; rejects non-numeric / wrong length; rejects when one already exists (`already_set`).
+- `clock`: clock-in then clock-out (source `'kiosk'`, kiosk location); photo stored only when master ON and `photo_b64` present, not when OFF; `no_location_configured` when unset.
+- Page redirects when `enable_kiosk` off / non-operator.
+
+## 7. Out of scope (YAGNI)
+Offline mode; switching locations on one device; PIN hashing (noted as future); removing or changing the NFC kiosk; multi-company kiosk selection.
+
+## 8. Files touched
+- Modify: `controllers/clock_kiosk.py`, `views/kiosk_templates.xml`, `static/src/js/fusion_clock_kiosk.js`, `models/res_config_settings.py` (drop `kiosk_pin_required`), `views/res_config_settings_views.xml` (drop row, relabel location), `data/ir_config_parameter_data.xml` (drop seed), `models/res_company.py` (relabel field string), `views/clock_menus.xml` (PIN kiosk app icon), `__manifest__.py` (register `pin_kiosk.scss` + version bump), `fusion_clock/CLAUDE.md` (kiosk section + settings keys).
+- Create: `static/src/scss/pin_kiosk.scss`, `tests/test_clock_kiosk.py`.
+
+## 9. Deployment
+Local test on the dev container, then the standard entech path: bump version, `git commit --only` explicit paths, push **origin + gitea**, upgrade entech, verify web 200 + version + (read-only) the page renders for the operator. Bump version so the new SCSS/JS bundle rebuilds; hard-refresh the tablet.

fusion_clock/migrations/19.0.4.1.0/post-migrate.py

@@ -0,0 +1,26 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import api, SUPERUSER_ID
+
+
+def migrate(cr, version):
+    """Retire the single-threshold break param (superseded by per-rule
+    break1_after_hours), and force-recompute the now-computed break field so
+    existing closed attendances reflect the province rule + their penalties."""
+    cr.execute(
+        "DELETE FROM ir_config_parameter WHERE key = %s",
+        ('fusion_clock.break_threshold_hours',),
+    )
+    env = api.Environment(cr, SUPERUSER_ID, {})
+    Attendance = env['hr.attendance']
+    closed = Attendance.search([('check_out', '!=', False)])
+    if closed:
+        # Recompute the break AND everything that derives from it, in dependency
+        # order (break -> net hours -> overtime). Recomputing break alone leaves
+        # stored x_fclk_net_hours / x_fclk_overtime_hours stale, because
+        # add_to_compute + flush of one field does not cascade to its dependents.
+        for fname in ('x_fclk_break_minutes', 'x_fclk_net_hours', 'x_fclk_overtime_hours'):
+            env.add_to_compute(Attendance._fields[fname], closed)
+            closed.flush_recordset([fname])

fusion_clock/models/__init__.py

@@ -1,9 +1,11 @@
 # -*- coding: utf-8 -*-
 
+from . import pay_period
 from . import clock_location
 from . import hr_attendance
 from . import hr_employee
 from . import clock_penalty
+from . import clock_break_rule
 from . import clock_report
 from . import res_config_settings
 from . import clock_activity_log

fusion_clock/models/clock_break_rule.py

@@ -0,0 +1,85 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+
+
+class FusionClockBreakRule(models.Model):
+    _name = 'fusion.clock.break.rule'
+    _description = 'Statutory Break Rule'
+    _order = 'sequence, name'
+
+    name = fields.Char(string='Name', required=True)
+    country_id = fields.Many2one('res.country', string='Country')
+    state_id = fields.Many2one(
+        'res.country.state',
+        string='Province / State',
+        help="Employees whose company is in this province use this rule.",
+    )
+    is_default = fields.Boolean(
+        string='Default Rule',
+        help="Used when an employee's company province matches no other rule. "
+             "Only one active rule may be the default.",
+    )
+    break1_after_hours = fields.Float(
+        string='First Break After (h)', default=5.0,
+        help="Worked hours at or above this trigger the first unpaid break.",
+    )
+    break1_minutes = fields.Float(
+        string='First Break (min)', default=30.0,
+        help="Length of the first unpaid break. 0 disables it.",
+    )
+    break2_after_hours = fields.Float(
+        string='Second Break After (h)', default=10.0,
+        help="Worked hours at or above this add the second unpaid break.",
+    )
+    break2_minutes = fields.Float(
+        string='Second Break (min)', default=30.0,
+        help="Length of the second unpaid break. 0 disables it.",
+    )
+    sequence = fields.Integer(default=10)
+    active = fields.Boolean(default=True)
+
+    def break_minutes_for(self, worked_hours):
+        """Total statutory unpaid break (minutes) for the given worked hours.
+
+        Tiers are inclusive (``>=``): a break applies when worked hours are
+        equal to or greater than the threshold. The second tier adds on top of
+        the first.
+        """
+        self.ensure_one()
+        worked = worked_hours or 0.0
+        total = 0.0
+        if self.break1_minutes and worked >= self.break1_after_hours:
+            total += self.break1_minutes
+        if self.break2_minutes and worked >= self.break2_after_hours:
+            total += self.break2_minutes
+        return total
+
+    @api.constrains('break1_after_hours', 'break1_minutes',
+                    'break2_after_hours', 'break2_minutes')
+    def _check_tiers(self):
+        for rule in self:
+            if min(rule.break1_after_hours, rule.break1_minutes,
+                   rule.break2_after_hours, rule.break2_minutes) < 0:
+                raise ValidationError(_("Break hours and minutes cannot be negative."))
+            if rule.break2_minutes and rule.break2_after_hours <= rule.break1_after_hours:
+                raise ValidationError(_(
+                    "The second break threshold (%(n2)s h) must be greater than "
+                    "the first (%(n1)s h).",
+                    n2=rule.break2_after_hours, n1=rule.break1_after_hours))
+
+    @api.constrains('is_default', 'active')
+    def _check_single_default(self):
+        for rule in self:
+            if rule.is_default and rule.active:
+                dupe = self.search([
+                    ('is_default', '=', True), ('active', '=', True),
+                    ('id', '!=', rule.id),
+                ], limit=1)
+                if dupe:
+                    raise ValidationError(_(
+                        "Only one active break rule can be the default "
+                        "(currently: %s).", dupe.name))

fusion_clock/models/clock_report.py

@@ -455,53 +455,13 @@ class FusionClockReport(models.Model):
 
     @api.model
     def _calculate_current_period(self, schedule_type, period_start_str, reference_date):
-        """Calculate the period start/end dates based on schedule type."""
-        from dateutil.relativedelta import relativedelta
-        import datetime
+        """Calculate the period start/end dates based on schedule type.
 
-        if period_start_str:
-            try:
-                anchor = fields.Date.from_string(period_start_str)
-            except Exception:
-                anchor = reference_date.replace(day=1)
-        else:
-            anchor = reference_date.replace(day=1)
-
-        if schedule_type == 'weekly':
-            days_diff = (reference_date - anchor).days
-            period_num = days_diff // 7
-            period_start = anchor + timedelta(days=period_num * 7)
-            period_end = period_start + timedelta(days=6)
-
-        elif schedule_type == 'biweekly':
-            days_diff = (reference_date - anchor).days
-            period_num = days_diff // 14
-            period_start = anchor + timedelta(days=period_num * 14)
-            period_end = period_start + timedelta(days=13)
-
-        elif schedule_type == 'semi_monthly':
-            if reference_date.day <= 15:
-                period_start = reference_date.replace(day=1)
-                period_end = reference_date.replace(day=15)
-            else:
-                period_start = reference_date.replace(day=16)
-                # Last day of month
-                next_month = reference_date.replace(day=28) + timedelta(days=4)
-                period_end = next_month - timedelta(days=next_month.day)
-
-        elif schedule_type == 'monthly':
-            period_start = reference_date.replace(day=1)
-            next_month = reference_date.replace(day=28) + timedelta(days=4)
-            period_end = next_month - timedelta(days=next_month.day)
-
-        else:
-            # Default biweekly
-            days_diff = (reference_date - anchor).days
-            period_num = days_diff // 14
-            period_start = anchor + timedelta(days=period_num * 14)
-            period_end = period_start + timedelta(days=13)
-
-        return period_start, period_end
+        Delegates to the shared pure helper so reports, the attendance period
+        filters and the Bi-Weekly Period picker all use one implementation.
+        """
+        from .pay_period import compute_pay_period
+        return compute_pay_period(schedule_type, period_start_str, reference_date)
 
     @api.model
     def action_generate_historical_reports(self):

fusion_clock/models/hr_attendance.py

@@ -8,6 +8,7 @@ from datetime import datetime, timedelta
 from odoo import models, fields, api
 from odoo.tools import float_round
 from .tz_utils import get_local_today, get_local_day_boundaries
+from .pay_period import current_prev_next
 
 _logger = logging.getLogger(__name__)
 
@@ -160,9 +161,12 @@ class HrAttendance(models.Model):
     )
     x_fclk_break_minutes = fields.Float(
         string='Break (min)',
-        default=0.0,
+        compute='_compute_fclk_break_minutes',
+        store=True,
         tracking=True,
-        help="Break duration in minutes to deduct from worked hours.",
+        help="Unpaid break deducted from worked hours: statutory break (per the "
+             "employee's province rule, from actual hours worked) plus any penalty "
+             "minutes. Computed automatically on every save.",
     )
     x_fclk_net_hours = fields.Float(
         string='Net Hours',
@@ -207,6 +211,70 @@ class HrAttendance(models.Model):
         help="Selfie captured at clock-in for verification.",
     )
 
+    # Pay-period filters (display-only flags; the filtering is done by the
+    # search methods, which compute the window from the configured frequency +
+    # anchor — see models/pay_period.py).
+    x_fclk_in_current_period = fields.Boolean(
+        string='In Current Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_current_period')
+    x_fclk_in_previous_period = fields.Boolean(
+        string='In Previous Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_previous_period')
+    x_fclk_in_next_period = fields.Boolean(
+        string='In Next Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_next_period')
+
+    def _compute_fclk_period_flags(self):
+        # Display-only; filtering happens entirely in the search methods.
+        for att in self:
+            att.x_fclk_in_current_period = False
+            att.x_fclk_in_previous_period = False
+            att.x_fclk_in_next_period = False
+
+    def _fclk_period_domain(self, which):
+        """check_in domain for the named pay-period window ('current' /
+        'previous' / 'next'), computed from the configured frequency + anchor."""
+        ICP = self.env['ir.config_parameter'].sudo()
+        frequency = ICP.get_param('fusion_clock.pay_period_type', 'biweekly')
+        anchor = ICP.get_param('fusion_clock.pay_period_start', '')
+        start, end = current_prev_next(frequency, anchor, get_local_today(self.env))[which]
+        start_utc, _dummy = get_local_day_boundaries(self.env, start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, end)
+        return ['&',
+                ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                ('check_in', '<', fields.Datetime.to_string(end_excl_utc))]
+
+    def _fclk_period_search(self, which, operator, value):
+        """Resolve the filter to a check_in domain. The shipped filters emit
+        ('=', True); handle '='/'!='+bool generally so the public field never
+        silently returns the wrong set under negation."""
+        domain = self._fclk_period_domain(which)
+        positive = (operator == '=') == bool(value)
+        return domain if positive else ['!'] + domain
+
+    def _search_fclk_in_current_period(self, operator, value):
+        return self._fclk_period_search('current', operator, value)
+
+    def _search_fclk_in_previous_period(self, operator, value):
+        return self._fclk_period_search('previous', operator, value)
+
+    def _search_fclk_in_next_period(self, operator, value):
+        return self._fclk_period_search('next', operator, value)
+
+    @api.depends('worked_hours', 'check_out',
+                 'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
+    def _compute_fclk_break_minutes(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
+        for att in self:
+            statutory = 0.0
+            if auto and att.check_out and att.employee_id:
+                rule = att.employee_id._get_fclk_break_rule()
+                if rule:
+                    statutory = rule.break_minutes_for(att.worked_hours or 0.0)
+            penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
+            att.x_fclk_break_minutes = statutory + penalties
+
     @api.depends('worked_hours', 'x_fclk_break_minutes')
     def _compute_net_hours(self):
         for att in self:
@@ -263,7 +331,6 @@ class HrAttendance(models.Model):
 
         max_shift = float(ICP.get_param('fusion_clock.max_shift_hours', '16.0'))
         office_user_id = int(ICP.get_param('fusion_clock.office_user_id', '0'))
-        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
 
         now = fields.Datetime.now()
         open_attendances = self.sudo().search([('check_out', '=', False)])
@@ -278,8 +345,6 @@ class HrAttendance(models.Model):
                 continue
 
             employee = att.employee_id
-            emp_tz = pytz.timezone(employee.tz or self.env.company.tz or 'UTC')
-            check_in_date = pytz.UTC.localize(check_in).astimezone(emp_tz).date()
             clock_out_time = effective_deadline
             try:
                 with self.env.cr.savepoint():
@@ -289,10 +354,6 @@ class HrAttendance(models.Model):
                         'x_fclk_grace_used': True,
                         'x_fclk_clock_source': 'auto',
                     })
-                    if (att.worked_hours or 0) >= threshold:
-                        att.sudo().write(
-                            {'x_fclk_break_minutes': employee._get_fclk_break_minutes(check_in_date)}
-                        )
                     att.sudo().message_post(
                         body=f"Auto clocked out at {_fclk_utc_to_local_str(clock_out_time, employee, '%H:%M')} "
                              f"(max-shift cap reached). Net hours: {att.x_fclk_net_hours:.1f}h",

fusion_clock/models/hr_employee.py

@@ -215,6 +215,23 @@ class HrEmployee(models.Model):
             )
         )
 
+    def _get_fclk_break_rule(self):
+        """Return the statutory break rule for this employee.
+
+        Resolution: company's province -> matching rule; else the global default
+        rule; else an empty recordset (caller treats as zero break). Read via
+        sudo so the portal net-hours compute can resolve it without a direct ACL.
+        """
+        self.ensure_one()
+        Rule = self.env['fusion.clock.break.rule'].sudo()
+        rule = Rule.browse()
+        state = self.company_id.state_id
+        if state:
+            rule = Rule.search([('state_id', '=', state.id)], limit=1)
+        if not rule:
+            rule = Rule.search([('is_default', '=', True)], limit=1)
+        return rule
+
     def _get_fclk_scheduled_times(self, date):
         """Return (scheduled_in_dt, scheduled_out_dt) for a given date.
 

fusion_clock/models/pay_period.py

@@ -0,0 +1,65 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+"""Pay-period date math shared by reports, attendance filters and the period
+picker. Pure functions (no ORM) so they unit-test trivially and never drift
+between callers."""
+
+from datetime import date, timedelta
+
+
+def period_length_days(frequency):
+    """Fixed window length for grid frequencies; None for calendar-based ones."""
+    return {'weekly': 7, 'biweekly': 14}.get(frequency)
+
+
+def compute_pay_period(frequency, anchor_str, reference_date):
+    """Return (start_date, end_date) for the period containing reference_date.
+
+    ``anchor_str`` is a 'YYYY-MM-DD' string or falsy (falls back to
+    first-of-month). Mirrors the original
+    fusion.clock.report._calculate_current_period logic, including floor
+    division so dates before the anchor resolve to the correct earlier period.
+    """
+    if anchor_str:
+        try:
+            # Truncate to 'YYYY-MM-DD' first, matching Odoo's fields.Date.from_string
+            # (Date.to_date), so a stored datetime-ish anchor like
+            # "2026-05-04 00:00:00" still parses instead of silently falling back.
+            anchor = date.fromisoformat(anchor_str[:10])
+        except (ValueError, TypeError):
+            anchor = reference_date.replace(day=1)
+    else:
+        anchor = reference_date.replace(day=1)
+
+    if frequency == 'weekly':
+        period_num = (reference_date - anchor).days // 7
+        start = anchor + timedelta(days=period_num * 7)
+        end = start + timedelta(days=6)
+    elif frequency == 'semi_monthly':
+        if reference_date.day <= 15:
+            start = reference_date.replace(day=1)
+            end = reference_date.replace(day=15)
+        else:
+            start = reference_date.replace(day=16)
+            next_month = reference_date.replace(day=28) + timedelta(days=4)
+            end = next_month - timedelta(days=next_month.day)
+    elif frequency == 'monthly':
+        start = reference_date.replace(day=1)
+        next_month = reference_date.replace(day=28) + timedelta(days=4)
+        end = next_month - timedelta(days=next_month.day)
+    else:  # 'biweekly' and default
+        period_num = (reference_date - anchor).days // 14
+        start = anchor + timedelta(days=period_num * 14)
+        end = start + timedelta(days=13)
+    return start, end
+
+
+def current_prev_next(frequency, anchor_str, today):
+    """Return {'current','previous','next'} (start,end) windows. Previous/next
+    are derived by stepping the reference date one day outside the current
+    window, which works for grid AND calendar frequencies."""
+    cur = compute_pay_period(frequency, anchor_str, today)
+    prev = compute_pay_period(frequency, anchor_str, cur[0] - timedelta(days=1))
+    nxt = compute_pay_period(frequency, anchor_str, cur[1] + timedelta(days=1))
+    return {'current': cur, 'previous': prev, 'next': nxt}

fusion_clock/models/res_company.py

@@ -10,8 +10,7 @@ class ResCompany(models.Model):
 
     x_fclk_nfc_kiosk_location_id = fields.Many2one(
         'fusion.clock.location',
-        string='NFC Kiosk Location',
+        string='Kiosk Location',
         domain="[('company_id', '=', id)]",
-        help="Designates which fusion.clock.location is bound to the NFC kiosk "
-             "for this company. Required when NFC kiosk is enabled.",
+        help="Clock location bound to the on-site kiosk (NFC and PIN) for this company.",
     )

fusion_clock/models/res_config_settings.py

@@ -9,21 +9,24 @@ class ResConfigSettings(models.TransientModel):
     _inherit = 'res.config.settings'
 
     # ── Work Schedule ──────────────────────────────────────────────────
-    fclk_default_clock_in_time = fields.Float(
+    # 12-hour AM/PM dropdowns (people aren't good with 24h). The selection VALUE
+    # is the float-as-string the backend stores (e.g. '9.0', '17.5'), so all
+    # downstream float(get_param(...)) reads are unchanged. Persisted manually in
+    # get_values/set_values (a 15-min grid; get snaps any off-grid stored value).
+    fclk_default_clock_in_time = fields.Selection(
+        selection='_fclk_time_selection',
         string='Default Clock-In Time',
-        config_parameter='fusion_clock.default_clock_in_time',
-        default=9.0,
-        help="Default scheduled clock-in time (24h format, e.g. 9.0 = 9:00 AM).",
+        default='9.0',
+        help="Default scheduled clock-in time, used when no shift is assigned.",
     )
-    fclk_default_clock_out_time = fields.Float(
+    fclk_default_clock_out_time = fields.Selection(
+        selection='_fclk_time_selection',
         string='Default Clock-Out Time',
-        config_parameter='fusion_clock.default_clock_out_time',
-        default=17.0,
-        help="Default scheduled clock-out time (24h format, e.g. 17.0 = 5:00 PM).",
+        default='17.0',
+        help="Default scheduled clock-out time, used when no shift is assigned.",
     )
     fclk_auto_deduct_break = fields.Boolean(
         string='Auto-Deduct Break',
-        config_parameter='fusion_clock.auto_deduct_break',
         default=True,
         help="Automatically deduct break from worked hours on clock-out.",
     )
@@ -33,25 +36,14 @@ class ResConfigSettings(models.TransientModel):
         default=30.0,
         help="Default unpaid break duration in minutes.",
     )
-    fclk_break_threshold_hours = fields.Float(
-        string='Break Threshold (hours)',
-        config_parameter='fusion_clock.break_threshold_hours',
-        default=4.0,
-        help="Only deduct break if shift is longer than this many hours.",
-    )
 
     # ── Attendance Rules ───────────────────────────────────────────────
     fclk_enable_auto_clockout = fields.Boolean(
         string='Enable Auto Clock-Out',
-        config_parameter='fusion_clock.enable_auto_clockout',
         default=True,
-        help="Automatically clock out employees who forget. Triggers after shift end time plus grace period, or after max shift hours.",
-    )
-    fclk_grace_period_minutes = fields.Float(
-        string='Grace Period (min)',
-        config_parameter='fusion_clock.grace_period_minutes',
-        default=15.0,
-        help="Minutes allowed after scheduled end before auto clock-out.",
+        help="Automatically clock out employees who forget — closes an attendance "
+             "left open past the Max Shift Length safety cap (overtime up to the cap "
+             "is never cut off).",
     )
     fclk_max_shift_hours = fields.Float(
         string='Max Shift Length (hours)',
@@ -64,7 +56,6 @@ class ResConfigSettings(models.TransientModel):
     )
     fclk_enable_penalties = fields.Boolean(
         string='Enable Penalty Tracking',
-        config_parameter='fusion_clock.enable_penalties',
         default=True,
         help="Deduct minutes from worked hours when employees clock in late or clock out early.",
     )
@@ -82,9 +73,8 @@ class ResConfigSettings(models.TransientModel):
     )
     fclk_enable_overtime = fields.Boolean(
         string='Enable Overtime Tracking',
-        config_parameter='fusion_clock.enable_overtime',
         default=True,
-        help="Calculate and track overtime when net hours exceed the daily or weekly threshold.",
+        help="Calculate and track overtime when net hours exceed the daily threshold.",
     )
     fclk_daily_overtime_threshold = fields.Float(
         string='Daily OT Threshold (hours)',
@@ -92,12 +82,6 @@ class ResConfigSettings(models.TransientModel):
         default=8.0,
         help="Net hours beyond this threshold count as daily overtime.",
     )
-    fclk_weekly_overtime_threshold = fields.Float(
-        string='Weekly OT Threshold (hours)',
-        config_parameter='fusion_clock.weekly_overtime_threshold',
-        default=40.0,
-        help="Net hours beyond this threshold count as weekly overtime.",
-    )
 
     # ── Notifications ──────────────────────────────────────────────────
     fclk_office_user_id = fields.Many2one(
@@ -119,7 +103,6 @@ class ResConfigSettings(models.TransientModel):
     )
     fclk_enable_employee_notifications = fields.Boolean(
         string='Enable Employee Notifications',
-        config_parameter='fusion_clock.enable_employee_notifications',
         default=True,
         help="Send clock-in/out reminders to employees.",
     )
@@ -137,7 +120,6 @@ class ResConfigSettings(models.TransientModel):
     )
     fclk_send_weekly_summary = fields.Boolean(
         string='Send Weekly Summary',
-        config_parameter='fusion_clock.send_weekly_summary',
         default=True,
         help="Send weekly attendance summary to each employee on Monday.",
     )
@@ -145,15 +127,16 @@ class ResConfigSettings(models.TransientModel):
     # ── Location & Verification ────────────────────────────────────────
     fclk_enable_ip_fallback = fields.Boolean(
         string='Enable IP Fallback',
-        config_parameter='fusion_clock.enable_ip_fallback',
-        default=False,
-        help="Allow IP-based location verification when GPS is unavailable.",
+        default=True,
+        help="Allow IP-whitelist location verification when GPS is unavailable "
+             "or outside all geofences.",
     )
     fclk_enable_photo_verification = fields.Boolean(
         string='Enable Photo Verification',
-        config_parameter='fusion_clock.enable_photo_verification',
         default=False,
-        help="Global toggle for selfie verification on clock-in (per-location control).",
+        help="Master switch for selfie capture. When OFF, no photos are taken on "
+             "any clock-in/out (portal or NFC kiosk). When ON, the per-location and "
+             "NFC-kiosk photo settings apply.",
     )
     fclk_google_maps_api_key = fields.Char(
         string='Google Maps API Key',
@@ -163,25 +146,16 @@ class ResConfigSettings(models.TransientModel):
     # ── Kiosk & Portal ─────────────────────────────────────────────────
     fclk_enable_kiosk = fields.Boolean(
         string='Enable Kiosk Mode',
-        config_parameter='fusion_clock.enable_kiosk',
         default=False,
         help="Allow employees to clock in/out from a shared device using their PIN code.",
     )
-    fclk_kiosk_pin_required = fields.Boolean(
-        string='Require PIN for Kiosk',
-        config_parameter='fusion_clock.kiosk_pin_required',
-        default=True,
-        help="Require employees to enter a PIN when using kiosk mode.",
-    )
     fclk_enable_correction_requests = fields.Boolean(
         string='Enable Correction Requests',
-        config_parameter='fusion_clock.enable_correction_requests',
         default=True,
         help="Allow employees to request timesheet corrections from the portal.",
     )
     fclk_enable_sounds = fields.Boolean(
         string='Enable Clock Sounds',
-        config_parameter='fusion_clock.enable_sounds',
         default=True,
         help="Play audio confirmation sounds when employees clock in or out.",
     )
@@ -199,20 +173,23 @@ class ResConfigSettings(models.TransientModel):
         default='biweekly',
         help="How often attendance reports are generated.",
     )
-    fclk_pay_period_start = fields.Char(
+    # NOTE: a real Date field (date picker), but NOT a config_parameter field —
+    # res.config.settings Date fields don't round-trip via config_parameter in
+    # Odoo 19, so it is persisted manually in get_values/set_values as a
+    # 'YYYY-MM-DD' string under fusion_clock.pay_period_start (same pattern as
+    # fclk_report_recipient_user_ids).
+    fclk_pay_period_start = fields.Date(
         string='Pay Period Anchor Date',
-        config_parameter='fusion_clock.pay_period_start',
-        help="Start date for pay period calculations (YYYY-MM-DD format).",
+        help="The pay-period start date. Reports and the Bi-Weekly Period "
+             "filter/picker count forward from this anchor.",
     )
     fclk_auto_generate_reports = fields.Boolean(
         string='Auto-Generate Reports',
-        config_parameter='fusion_clock.auto_generate_reports',
         default=True,
         help="Automatically create attendance reports at the end of each pay period.",
     )
     fclk_send_employee_reports = fields.Boolean(
         string='Send Employee Copies',
-        config_parameter='fusion_clock.send_employee_reports',
         default=True,
         help="Send each employee a copy of their individual attendance report.",
     )
@@ -238,13 +215,11 @@ class ResConfigSettings(models.TransientModel):
     # ── NFC Clock Kiosk ────────────────────────────────────────────────
     fclk_enable_nfc_kiosk = fields.Boolean(
         string='Enable NFC Clock Kiosk',
-        config_parameter='fusion_clock.enable_nfc_kiosk',
         default=False,
         help="Enable the tap-to-clock NFC kiosk page at /fusion_clock/kiosk/nfc.",
     )
     fclk_nfc_photo_required = fields.Boolean(
         string='Require Photo on Tap',
-        config_parameter='fusion_clock.nfc_photo_required',
         default=True,
         help="If enabled, the kiosk rejects taps when the front camera is unavailable. "
              "Recommended for buddy-punch deterrence.",
@@ -257,7 +232,6 @@ class ResConfigSettings(models.TransientModel):
     )
     fclk_nfc_kiosk_debug = fields.Boolean(
         string='Debug Mode (overlay + mock-tap)',
-        config_parameter='fusion_clock.nfc_kiosk_debug',
         default=False,
         help="Enables two dev/troubleshooting features on the NFC kiosk page: "
              "(1) a green-text debug overlay at the top of the screen logging every NFC and tap event in real time, "
@@ -281,9 +255,63 @@ class ResConfigSettings(models.TransientModel):
              "Set to 0 to disable the auto-wipe.",
     )
 
+    # Boolean settings persisted explicitly (NOT via config_parameter): Odoo
+    # deletes a config param when you write a falsy value, so a config_parameter
+    # Boolean can never be turned OFF (the row vanishes and get_param returns the
+    # default). Storing 'True'/'False' strings ourselves makes the toggles work.
+    _FCLK_BOOL_PARAMS = [
+        ('fclk_auto_deduct_break', 'fusion_clock.auto_deduct_break', True),
+        ('fclk_enable_auto_clockout', 'fusion_clock.enable_auto_clockout', True),
+        ('fclk_enable_penalties', 'fusion_clock.enable_penalties', True),
+        ('fclk_enable_overtime', 'fusion_clock.enable_overtime', True),
+        ('fclk_enable_employee_notifications', 'fusion_clock.enable_employee_notifications', True),
+        ('fclk_send_weekly_summary', 'fusion_clock.send_weekly_summary', True),
+        ('fclk_enable_ip_fallback', 'fusion_clock.enable_ip_fallback', True),
+        ('fclk_enable_photo_verification', 'fusion_clock.enable_photo_verification', False),
+        ('fclk_enable_kiosk', 'fusion_clock.enable_kiosk', False),
+        ('fclk_enable_correction_requests', 'fusion_clock.enable_correction_requests', True),
+        ('fclk_enable_sounds', 'fusion_clock.enable_sounds', True),
+        ('fclk_auto_generate_reports', 'fusion_clock.auto_generate_reports', True),
+        ('fclk_send_employee_reports', 'fusion_clock.send_employee_reports', True),
+        ('fclk_enable_nfc_kiosk', 'fusion_clock.enable_nfc_kiosk', False),
+        ('fclk_nfc_photo_required', 'fusion_clock.nfc_photo_required', True),
+        ('fclk_nfc_kiosk_debug', 'fusion_clock.nfc_kiosk_debug', False),
+    ]
+
+    @api.model
+    def _fclk_time_selection(self):
+        """15-minute grid of 12-hour clock times. Each option's VALUE is the
+        float-as-string the backend stores (e.g. '9.0', '17.5'); the LABEL is
+        the friendly 12-hour form (e.g. '9:00 AM')."""
+        opts = []
+        for i in range(96):
+            f = i * 0.25
+            h24 = int(f)
+            mm = int(round((f - h24) * 60))
+            ap = 'AM' if h24 < 12 else 'PM'
+            h12 = h24 % 12 or 12
+            opts.append((str(f), '%d:%02d %s' % (h12, mm, ap)))
+        return opts
+
+    @staticmethod
+    def _fclk_snap_time(value, default_float):
+        """Snap a stored float-ish time to the nearest 15-min grid key string."""
+        try:
+            f = float(value)
+        except (ValueError, TypeError):
+            f = default_float
+        f = round(f * 4) / 4
+        if f < 0 or f >= 24:
+            f = default_float
+        return str(f)
+
     def set_values(self):
         super().set_values()
         ICP = self.env['ir.config_parameter'].sudo()
+        for fname, key, _default in self._FCLK_BOOL_PARAMS:
+            ICP.set_param(key, 'True' if self[fname] else 'False')
+        ICP.set_param('fusion_clock.default_clock_in_time', self.fclk_default_clock_in_time or '9.0')
+        ICP.set_param('fusion_clock.default_clock_out_time', self.fclk_default_clock_out_time or '17.0')
         if self.fclk_office_user_id:
             ICP.set_param('fusion_clock.office_user_id', str(self.fclk_office_user_id.id))
         else:
@@ -293,11 +321,18 @@ class ResConfigSettings(models.TransientModel):
                          ','.join(str(uid) for uid in self.fclk_report_recipient_user_ids.ids))
         else:
             ICP.set_param('fusion_clock.report_recipient_user_ids', '')
+        if self.fclk_pay_period_start:
+            ICP.set_param('fusion_clock.pay_period_start',
+                          fields.Date.to_string(self.fclk_pay_period_start))
+        else:
+            ICP.set_param('fusion_clock.pay_period_start', '')
 
     @api.model
     def get_values(self):
         res = super().get_values()
         ICP = self.env['ir.config_parameter'].sudo()
+        for fname, key, default in self._FCLK_BOOL_PARAMS:
+            res[fname] = ICP.get_param(key, 'True' if default else 'False') == 'True'
         office_user_id = int(ICP.get_param('fusion_clock.office_user_id', '0'))
         if office_user_id:
             res['fclk_office_user_id'] = office_user_id
@@ -308,4 +343,15 @@ class ResConfigSettings(models.TransientModel):
                 res['fclk_report_recipient_user_ids'] = [(6, 0, user_ids)]
             except (ValueError, TypeError):
                 pass
+        anchor_str = ICP.get_param('fusion_clock.pay_period_start', '')
+        if anchor_str:
+            try:
+                # Truncate to 'YYYY-MM-DD' to tolerate any legacy datetime-ish value.
+                res['fclk_pay_period_start'] = fields.Date.to_date(anchor_str[:10])
+            except (ValueError, TypeError):
+                pass
+        res['fclk_default_clock_in_time'] = self._fclk_snap_time(
+            ICP.get_param('fusion_clock.default_clock_in_time', '9.0'), 9.0)
+        res['fclk_default_clock_out_time'] = self._fclk_snap_time(
+            ICP.get_param('fusion_clock.default_clock_out_time', '17.0'), 17.0)
         return res

fusion_clock/models/tz_utils.py

@@ -10,10 +10,12 @@ date boundaries, and display strings in the **user's local timezone**
 so that queries, penalties, and UI all reflect the real calendar day.
 
 Timezone resolution order:
-  1. Explicit employee.tz  (if an employee record is available)
-  2. env.user.tz           (logged-in portal / backend user)
-  3. env.company.tz        (company-level default)
-  4. 'UTC'                 (last resort — should rarely happen)
+  1. Explicit employee.tz            (if an employee record is available)
+  2. env.user.tz                     (logged-in portal / backend user)
+  3. env.company.partner_id.tz       (company-level default; res.company has
+                                      no tz field in Odoo 19 — it lives on the
+                                      company's partner)
+  4. 'UTC'                           (last resort — should rarely happen)
 """
 
 import pytz
@@ -25,7 +27,7 @@ def _resolve_tz(env, employee=None):
     tz_name = (
         (employee.tz if employee else None)
         or env.user.tz
-        or env.company.tz
+        or (env.company.partner_id.tz if env.company.partner_id else None)
         or 'UTC'
     )
     try:

fusion_clock/security/ir.model.access.csv

@@ -27,3 +27,4 @@ access_hr_employee_portal_clock,hr.employee.portal.clock,hr.model_hr_employee,ba
 access_fusion_clock_shift_portal,fusion.clock.shift.portal,model_fusion_clock_shift,base.group_portal,1,0,0,0
 access_fusion_clock_schedule_portal,fusion.clock.schedule.portal,model_fusion_clock_schedule,base.group_portal,1,0,0,0
 access_fusion_clock_nfc_enrollment_wizard_manager,fusion.clock.nfc.enrollment.wizard.manager,model_fusion_clock_nfc_enrollment_wizard,group_fusion_clock_manager,1,1,1,1
+access_fusion_clock_break_rule_manager,fusion.clock.break.rule.manager,model_fusion_clock_break_rule,group_fusion_clock_manager,1,1,1,1

fusion_clock/static/src/js/fusion_clock_dashboard.js

@@ -87,6 +87,7 @@ export class FusionClockDashboard extends Component {
     onViewActivityLogs() { this.action.doAction("fusion_clock.action_fusion_clock_activity_log"); }
     onViewPenalties() { this.action.doAction("fusion_clock.action_fusion_clock_penalty"); }
     onViewShiftPlanner() { this.action.doAction("fusion_clock.action_fusion_clock_shift_planner"); }
+    onViewBiweekly() { this.action.doAction("fusion_clock.action_fusion_clock_period_picker"); }
     onViewReports() { this.action.doAction("fusion_clock.action_fusion_clock_report"); }
 }
 

fusion_clock/static/src/js/fusion_clock_kiosk.js

@@ -1,242 +1,288 @@
 /** @odoo-module **/
+// Fusion Clock PIN Kiosk — tap your photo, enter a PIN, clock in/out.
+// Built as an Odoo 19 public Interaction. Employee-derived strings are always
+// inserted via textContent (never interpolated into innerHTML) to avoid XSS.
 
 import { Interaction } from "@web/public/interaction";
 import { registry } from "@web/core/registry";
+import { rpc } from "@web/core/network/rpc";
 
-export class FusionClockKiosk extends Interaction {
-    static selector = "#fclk-kiosk";
+export class PinKiosk extends Interaction {
+    static selector = "#pin_kiosk_root";
 
     setup() {
-        this.selectedEmployeeId = 0;
-        this.resetTimer = null;
-        this.searchTimeout = null;
-
-        const pinAttr = this.el.dataset.pinRequired;
-        this.pinRequired = pinAttr === "true" || pinAttr === "True";
-
-        this._startClock();
-        this._bindEvents();
+        this.grid = this.el.querySelector("#pin_kiosk_grid");
+        this.searchEl = this.el.querySelector("#pin_kiosk_search");
+        this.stage = this.el.querySelector("#pin_state_container");
+        this.photoRequired = this.el.dataset.photo === "1";
+        this.soundsOn = this.el.dataset.sounds === "1";
+        this.employees = [];
+        this.filtered = [];
+        this.pinBuf = "";
+        this.startClock();
+        this.initBrandHue();
+        this.searchEl.addEventListener("input", () => this.onSearch());
+        const gear = this.el.querySelector("#pin_kiosk_settings");
+        if (gear) gear.addEventListener("click", () => this.toggleFullscreen());
+        this._load();
     }
 
-    _startClock() {
-        const el = document.getElementById("fclk-kiosk-time");
-        if (!el) return;
-        const update = () => {
-            el.textContent = new Date().toLocaleTimeString([], { hour: "2-digit", minute: "2-digit" });
-        };
-        update();
-        setInterval(update, 1000);
-    }
-
-    _bindEvents() {
-        const queryInput = document.getElementById("fclk-kiosk-query");
-        if (queryInput) {
-            queryInput.addEventListener("input", (e) => this._onSearch(e.target.value));
-        }
-
-        const backBtn = document.getElementById("fclk-kiosk-back-btn");
-        if (backBtn) {
-            backBtn.addEventListener("click", () => this._resetKiosk());
-        }
-
-        const clockBtn = document.getElementById("fclk-kiosk-clock-btn");
-        if (clockBtn) {
-            clockBtn.addEventListener("click", () => this._onClock());
-        }
-    }
-
-    _resetKiosk() {
-        const search = document.getElementById("fclk-kiosk-search");
-        const pin = document.getElementById("fclk-kiosk-pin");
-        const result = document.getElementById("fclk-kiosk-result");
-        const error = document.getElementById("fclk-kiosk-error");
-        const query = document.getElementById("fclk-kiosk-query");
-        const results = document.getElementById("fclk-kiosk-results");
-        const pinInput = document.getElementById("fclk-kiosk-pin-input");
-
-        if (search) search.style.display = "";
-        if (pin) pin.style.display = "none";
-        if (result) result.style.display = "none";
-        if (error) error.style.display = "none";
-        if (query) query.value = "";
-        if (results) results.innerHTML = "";
-        if (pinInput) pinInput.value = "";
-
-        this.selectedEmployeeId = 0;
-        if (this.resetTimer) clearTimeout(this.resetTimer);
-    }
-
-    _showError(msg) {
-        const el = document.getElementById("fclk-kiosk-error");
-        if (el) {
-            el.textContent = msg;
-            el.style.display = "";
-        }
-    }
-
-    _onSearch(value) {
-        if (this.searchTimeout) clearTimeout(this.searchTimeout);
-        const q = value.trim();
-        if (q.length < 2) {
-            const container = document.getElementById("fclk-kiosk-results");
-            if (container) container.innerHTML = "";
-            return;
-        }
-        this.searchTimeout = setTimeout(async () => {
-            try {
-                const resp = await fetch("/fusion_clock/kiosk/search", {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify({ jsonrpc: "2.0", method: "call", params: { query: q } }),
-                });
-                const data = await resp.json();
-                const employees = (data.result || {}).employees || [];
-                const container = document.getElementById("fclk-kiosk-results");
-                if (!container) return;
-                container.innerHTML = "";
-                for (const emp of employees) {
-                    const item = document.createElement("a");
-                    item.href = "#";
-                    item.className = "list-group-item list-group-item-action d-flex justify-content-between";
-                    const statusBadge = emp.is_checked_in ? "bg-success" : "bg-secondary";
-                    const statusText = emp.is_checked_in ? "In" : "Out";
-                    item.innerHTML =
-                        `<span>${emp.name} <small class="text-muted">${emp.department}</small></span>` +
-                        `<span class="badge ${statusBadge}">${statusText}</span>`;
-                    item.addEventListener("click", (e) => {
-                        e.preventDefault();
-                        this._selectEmployee(emp);
-                    });
-                    container.appendChild(item);
-                }
-            } catch {
-                this._showError("Search failed.");
-            }
-        }, 300);
-    }
-
-    _selectEmployee(emp) {
-        this.selectedEmployeeId = emp.id;
-        const nameEl = document.getElementById("fclk-kiosk-emp-name");
-        if (nameEl) nameEl.textContent = emp.name;
-
-        const searchEl = document.getElementById("fclk-kiosk-search");
-        const pinEl = document.getElementById("fclk-kiosk-pin");
-        const errorEl = document.getElementById("fclk-kiosk-error");
-        if (searchEl) searchEl.style.display = "none";
-        if (pinEl) pinEl.style.display = "";
-        if (errorEl) errorEl.style.display = "none";
-
-        const clockBtn = document.getElementById("fclk-kiosk-clock-btn");
-        if (clockBtn) {
-            clockBtn.textContent = emp.is_checked_in ? "Clock Out" : "Clock In";
-            clockBtn.className = "btn btn-lg " + (emp.is_checked_in ? "btn-danger" : "btn-success");
-        }
-    }
-
-    async _onClock() {
-        if (!this.selectedEmployeeId) return;
-
-        const btn = document.getElementById("fclk-kiosk-clock-btn");
-        if (btn) btn.disabled = true;
-
-        const pinInput = document.getElementById("fclk-kiosk-pin-input");
-        const pin = pinInput ? pinInput.value : "";
-
-        if (this.pinRequired && pin.length === 0) {
-            this._showError("Please enter your PIN.");
-            if (btn) btn.disabled = false;
-            return;
-        }
-
+    toggleFullscreen() {
         try {
-            if (this.pinRequired) {
-                const vResp = await fetch("/fusion_clock/kiosk/verify_pin", {
-                    method: "POST",
-                    headers: { "Content-Type": "application/json" },
-                    body: JSON.stringify({
-                        jsonrpc: "2.0",
-                        method: "call",
-                        params: { employee_id: this.selectedEmployeeId, pin },
-                    }),
-                });
-                const vData = await vResp.json();
-                if (vData.result && vData.result.error) {
-                    this._showError(vData.result.error);
-                    if (btn) btn.disabled = false;
-                    return;
-                }
+            if (document.fullscreenElement) document.exitFullscreen();
+            else if (this.el.requestFullscreen) this.el.requestFullscreen().catch(() => {});
+        } catch (e) { /* unsupported */ }
+    }
+
+    destroy() {
+        if (this._clockTimer) clearInterval(this._clockTimer);
+        if (this._stream) this._stream.getTracks().forEach((t) => t.stop());
+    }
+
+    async _load() {
+        const res = await rpc("/fusion_clock/kiosk/search", { query: "" });
+        this.employees = res.employees || [];
+        this.filtered = this.employees;
+        this.renderGrid();
+    }
+
+    // ---- brand hue (mirrors fusion_clock_nfc_kiosk.js) ----
+    rgbToHue(r, g, b) {
+        r /= 255; g /= 255; b /= 255;
+        const mx = Math.max(r, g, b), mn = Math.min(r, g, b), d = mx - mn;
+        if (d === 0) return null;
+        let h = mx === r ? ((g - b) / d) % 6 : mx === g ? (b - r) / d + 2 : (r - g) / d + 4;
+        h = Math.round(h * 60); if (h < 0) h += 360; return h;
+    }
+    extractHue(img) {
+        try {
+            const w = Math.min(img.naturalWidth, 200), h = Math.min(img.naturalHeight, 200);
+            if (!w || !h) return null;
+            const c = document.createElement("canvas"); c.width = w; c.height = h;
+            const ctx = c.getContext("2d", { willReadFrequently: true });
+            ctx.drawImage(img, 0, 0, w, h);
+            const data = ctx.getImageData(0, 0, w, h).data;
+            let rs = 0, gs = 0, bs = 0, n = 0;
+            for (let i = 0; i < data.length; i += 4) {
+                if (data[i + 3] < 128) continue;
+                const r = data[i], g = data[i + 1], b = data[i + 2];
+                const lum = (r + g + b) / 3;
+                if (lum > 235 || lum < 25) continue;
+                if (Math.max(r, g, b) - Math.min(r, g, b) < 25) continue;
+                rs += r; gs += g; bs += b; n++;
             }
+            if (n < 50) return null;
+            return this.rgbToHue(Math.round(rs / n), Math.round(gs / n), Math.round(bs / n));
+        } catch (e) { return null; }
+    }
+    initBrandHue() {
+        const img = this.el.querySelector("#pin_kiosk_logo");
+        if (!img) return;
+        const apply = () => { const hue = this.extractHue(img); if (hue != null) document.documentElement.style.setProperty("--pk-h", String(hue)); };
+        if (img.complete && img.naturalWidth) apply();
+        else img.addEventListener("load", apply);
+    }
 
-            let lat = 0;
-            let lng = 0;
-            try {
-                const pos = await new Promise((resolve, reject) => {
-                    navigator.geolocation.getCurrentPosition(resolve, reject, {
-                        timeout: 10000,
-                        enableHighAccuracy: true,
-                    });
-                });
-                lat = pos.coords.latitude;
-                lng = pos.coords.longitude;
-            } catch {
-                // Native GPS unavailable -- try IP geolocation
-            }
-            if (lat === 0 && lng === 0) {
-                try {
-                    const ipResp = await fetch("https://ipapi.co/json/");
-                    if (ipResp.ok) {
-                        const ipData = await ipResp.json();
-                        if (ipData.latitude && ipData.longitude) {
-                            lat = ipData.latitude;
-                            lng = ipData.longitude;
-                        }
-                    }
-                } catch {
-                    // IP geolocation also unavailable
-                }
-            }
+    // ---- clock ----
+    startClock() {
+        const tick = () => {
+            const d = new Date();
+            let h = d.getHours(); const m = String(d.getMinutes()).padStart(2, "0");
+            const ap = h >= 12 ? "PM" : "AM"; h = h % 12 || 12;
+            const clock = this.el.querySelector("#pin_kiosk_clock");
+            clock.textContent = `${h}:${m}`;
+            const span = document.createElement("span");
+            span.className = "ampm"; span.textContent = ap;
+            clock.appendChild(span);
+            this.el.querySelector("#pin_kiosk_date").textContent =
+                d.toLocaleDateString(undefined, { weekday: "long", month: "long", day: "numeric" });
+        };
+        tick(); this._clockTimer = setInterval(tick, 1000);
+    }
 
-            const resp = await fetch("/fusion_clock/kiosk/clock", {
-                method: "POST",
-                headers: { "Content-Type": "application/json" },
-                body: JSON.stringify({
-                    jsonrpc: "2.0",
-                    method: "call",
-                    params: { employee_id: this.selectedEmployeeId, latitude: lat, longitude: lng },
-                }),
-            });
-            const data = await resp.json();
-            const result = data.result || {};
-
-            if (result.error) {
-                this._showError(result.error);
-                if (btn) btn.disabled = false;
-                return;
-            }
-
-            const pinEl = document.getElementById("fclk-kiosk-pin");
-            const resultEl = document.getElementById("fclk-kiosk-result");
-            if (pinEl) pinEl.style.display = "none";
-            if (resultEl) resultEl.style.display = "";
-
-            const msgEl = document.getElementById("fclk-kiosk-result-msg");
-            if (msgEl) {
-                const icon = result.action === "clock_in" ? "fa-check-circle text-success" : "fa-hand-paper-o text-warning";
-                let html = `<div style="font-size:3rem"><i class="fa ${icon}"></i></div>`;
-                html += `<div class="mt-2">${result.message || "Done"}</div>`;
-                if (result.net_hours !== undefined) {
-                    html += `<div class="text-muted mt-1">Net hours: ${result.net_hours}h</div>`;
-                }
-                msgEl.innerHTML = html;
-            }
-
-            this.resetTimer = setTimeout(() => this._resetKiosk(), 10000);
-        } catch {
-            this._showError("Operation failed.");
+    // ---- grid ----
+    initials(name) { return (name || "").split(" ").filter(Boolean).slice(0, 2).map((p) => p[0].toUpperCase()).join(""); }
+    onSearch() {
+        const q = this.searchEl.value.trim().toLowerCase();
+        this.filtered = q ? this.employees.filter((e) => e.name.toLowerCase().includes(q)) : this.employees;
+        this.renderGrid();
+    }
+    renderGrid() {
+        this.grid.replaceChildren();
+        for (const emp of this.filtered) {
+            const tile = document.createElement("div");
+            tile.className = "pin-kiosk__tile";
+            const av = document.createElement("div");
+            av.className = "pin-kiosk__tile-av";
+            if (emp.avatar_url) av.style.backgroundImage = `url(${encodeURI(emp.avatar_url)})`;
+            else av.textContent = this.initials(emp.name);
+            const nm = document.createElement("div");
+            nm.className = "pin-kiosk__tile-nm"; nm.textContent = emp.name;
+            tile.append(av, nm);
+            tile.addEventListener("click", () => this.onTile(emp));
+            this.grid.appendChild(tile);
         }
-        if (btn) btn.disabled = false;
+    }
+
+    // ---- PIN / first-use setup ----
+    onTile(emp) {
+        this.current = emp; this.pinBuf = ""; this.attempts = 0; this._newPin = null;
+        this.showPin(emp, emp.has_pin ? "Enter your PIN" : "Create a PIN", !emp.has_pin, false);
+    }
+    showPin(emp, sub, isSetup, confirming) {
+        this.isSetup = isSetup; this.confirming = confirming; this.pinBuf = "";
+        this.stage.replaceChildren();
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const panel = document.createElement("div"); panel.className = "pin-kiosk__panel";
+        panel.innerHTML =
+            '<div class="pin-kiosk__av"></div><div class="pin-kiosk__name"></div>' +
+            '<div class="pin-kiosk__sub"></div><div class="pin-kiosk__dots"></div>' +
+            '<div class="pin-kiosk__err"></div><div class="pin-kiosk__pad"></div>' +
+            '<button class="pin-kiosk__cancel">✕ Cancel</button>';
+        const av = panel.querySelector(".pin-kiosk__av");
+        if (emp.avatar_url) av.style.backgroundImage = `url(${encodeURI(emp.avatar_url)})`;
+        else av.textContent = this.initials(emp.name);
+        panel.querySelector(".pin-kiosk__name").textContent = emp.name;
+        panel.querySelector(".pin-kiosk__sub").textContent = confirming ? "Re-enter to confirm" : sub;
+        const pad = panel.querySelector(".pin-kiosk__pad");
+        for (const k of ["1", "2", "3", "4", "5", "6", "7", "8", "9", "⌫", "0", "✓"]) {
+            const b = document.createElement("button");
+            b.className = "pin-kiosk__key" + (k === "✓" ? " ok" : "");
+            b.textContent = k;
+            b.addEventListener("click", () => this.onKey(k));
+            pad.appendChild(b);
+        }
+        panel.querySelector(".pin-kiosk__cancel").addEventListener("click", () => this.reset());
+        ov.appendChild(panel); this.stage.appendChild(ov);
+        this._panel = panel; this.renderDots();
+    }
+    renderDots() {
+        const dots = this._panel.querySelector(".pin-kiosk__dots"); dots.replaceChildren();
+        const len = Math.max(4, this.pinBuf.length);
+        for (let i = 0; i < len; i++) {
+            const d = document.createElement("span");
+            d.className = "pin-kiosk__dot" + (i < this.pinBuf.length ? " on" : "");
+            dots.appendChild(d);
+        }
+    }
+    err(msg) {
+        this._panel.querySelector(".pin-kiosk__err").textContent = msg;
+        this._panel.classList.add("shake");
+        setTimeout(() => this._panel.classList.remove("shake"), 360);
+    }
+    onKey(k) {
+        if (k === "⌫") { this.pinBuf = this.pinBuf.slice(0, -1); this.renderDots(); return; }
+        if (k === "✓") { this.submitPin(); return; }
+        if (this.pinBuf.length < 6) { this.pinBuf += k; this.renderDots(); }
+    }
+    async submitPin() {
+        const emp = this.current, pin = this.pinBuf;
+        if (pin.length < 4) return this.err("PIN must be at least 4 digits");
+        if (this.isSetup && !this.confirming) {
+            this._newPin = pin;
+            return this.showPin(emp, "Create a PIN", true, true);
+        }
+        try {
+            if (this.isSetup && this.confirming) {
+                if (pin !== this._newPin) { this.pinBuf = ""; this.renderDots(); return this.err("PINs didn't match"); }
+                const r = await rpc("/fusion_clock/kiosk/set_pin", { employee_id: emp.id, pin });
+                if (r.error) return this.err("Couldn't save PIN");
+                return this.afterPin(emp);
+            }
+            const v = await rpc("/fusion_clock/kiosk/verify_pin", { employee_id: emp.id, pin });
+            if (v.success) return this.afterPin(emp);
+            this.attempts++; this.pinBuf = ""; this.renderDots();
+            if (this.attempts >= 3) return this.reset();
+            this.err("Wrong PIN — try again");
+        } catch (e) {
+            this.pinBuf = ""; this.renderDots();
+            this.err("Connection error — try again");
+        }
+    }
+
+    // ---- photo (optional) then clock ----
+    async afterPin(emp) {
+        let photo = "";
+        if (this.photoRequired) {
+            try { photo = await this.capturePhoto(emp); } catch (e) { photo = ""; }
+        }
+        let r;
+        try {
+            r = await rpc("/fusion_clock/kiosk/clock", { employee_id: emp.id, photo_b64: photo });
+        } catch (e) {
+            r = { error: "Connection error" };
+        }
+        this.showResult(emp, r);
+    }
+    showResult(emp, r) {
+        this.stage.replaceChildren();
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const card = document.createElement("div");
+        const success = !!(r && r.success);
+        card.className = "pin-kiosk__result" + (success ? "" : " pin-kiosk__result--error");
+        card.innerHTML =
+            '<div class="pin-kiosk__check"></div><div class="name"></div>' +
+            '<div class="action"></div><div class="meta"></div>';
+        const check = card.querySelector(".pin-kiosk__check");
+        if (success) {
+            check.textContent = "✓";
+            card.querySelector(".action").textContent = r.action === "clock_out" ? "Clocked Out" : "Clocked In";
+            card.querySelector(".meta").textContent = r.message || "";
+            if (this.soundsOn) this.beep();
+        } else {
+            check.textContent = "!";
+            check.style.cssText = "color:#f87171;background:rgba(217,55,78,.18);border-color:rgba(217,55,78,.6)";
+            const act = card.querySelector(".action"); act.textContent = "Couldn't clock"; act.style.color = "#f87171";
+            card.querySelector(".meta").textContent = (r && r.error) || "Try again";
+        }
+        card.querySelector(".name").textContent = emp.name;
+        ov.appendChild(card); this.stage.appendChild(ov);
+        setTimeout(() => this.reset(), 3000);
+    }
+    beep() {
+        try {
+            const a = new (window.AudioContext || window.webkitAudioContext)();
+            const o = a.createOscillator(); o.frequency.value = 880; o.connect(a.destination);
+            o.start(); o.stop(a.currentTime + 0.12);
+        } catch (e) { /* no audio */ }
+    }
+
+    // ---- camera capture (oval guide + 3s countdown; mirrors NFC kiosk) ----
+    capturePhoto(emp) {
+        return new Promise(async (resolve, reject) => {
+            let stream;
+            try { stream = await navigator.mediaDevices.getUserMedia({ video: { facingMode: "user" } }); }
+            catch (e) { return reject(e); }
+            this._stream = stream;
+            this.stage.replaceChildren();
+            const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+            const panel = document.createElement("div"); panel.className = "pin-kiosk__photo";
+            const h2 = document.createElement("h2"); h2.textContent = emp.name; panel.appendChild(h2);
+            const stage = document.createElement("div"); stage.className = "stage";
+            stage.innerHTML = '<video autoplay="autoplay" playsinline="playsinline"></video><div class="guide"></div><div class="countdown"></div>';
+            panel.appendChild(stage); ov.appendChild(panel); this.stage.appendChild(ov);
+            const video = stage.querySelector("video"); video.srcObject = stream;
+            const cd = stage.querySelector(".countdown"); let n = 3; cd.textContent = String(n);
+            const timer = setInterval(() => {
+                n--; if (n > 0) { cd.textContent = String(n); return; }
+                clearInterval(timer);
+                const c = document.createElement("canvas"); c.width = video.videoWidth || 480; c.height = video.videoHeight || 640;
+                c.getContext("2d").drawImage(video, 0, 0, c.width, c.height);
+                stream.getTracks().forEach((t) => t.stop()); this._stream = null;
+                resolve(c.toDataURL("image/jpeg", 0.8));
+            }, 1000);
+        });
+    }
+
+    reset() {
+        if (this._stream) { this._stream.getTracks().forEach((t) => t.stop()); this._stream = null; }
+        this.stage.replaceChildren();
+        this.pinBuf = ""; this.current = null; this._newPin = null;
+        this.searchEl.value = ""; this.filtered = this.employees; this.renderGrid();
+        rpc("/fusion_clock/kiosk/search", { query: "" }).then((res) => {
+            this.employees = res.employees || []; this.filtered = this.employees;
+        });
     }
 }
 
-registry.category("public.interactions").add("fusion_clock.kiosk", FusionClockKiosk);
+registry.category("public.interactions").add("fusion_clock.pin_kiosk", PinKiosk);

fusion_clock/static/src/scss/pin_kiosk.scss

@@ -0,0 +1,129 @@
+// PIN Clock Kiosk — premium glass + animated mesh, always-dark.
+// Mirrors nfc_kiosk.scss; scoped under :has(#pin_kiosk_root) so it never leaks
+// to other frontend pages. Brand hue --pk-h is set by JS from the company
+// logo's dominant color; all colors interpolate from it via HSL.
+:root {
+    --pk-h: 168;
+    --pk-bg: #0b0d10;
+    --pk-text: #ffffff;
+    --pk-text-muted: #9ba3ad;
+    --pk-success: #18a957;
+    --pk-error: #d9374e;
+}
+html:has(#pin_kiosk_root) {
+    overflow: hidden; height: 100%;
+    body { overflow: hidden; height: 100%; margin: 0; padding: 0;
+        background: var(--pk-bg) !important; color: var(--pk-text);
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; }
+    .o_main_navbar, header, footer, .o_header_standard, .o_footer { display: none !important; }
+}
+.pin-kiosk {
+    position: fixed; inset: 0; width: 100vw; height: 100vh;
+    display: flex; flex-direction: column; align-items: center; justify-content: flex-start;
+    padding: 1.25rem 2rem 2rem; box-sizing: border-box; user-select: none;
+    -webkit-tap-highlight-color: transparent; overflow: hidden; background: var(--pk-bg);
+
+    &::before { content: ""; position: absolute; inset: -15%;
+        background:
+            radial-gradient(circle at 20% 30%, hsla(var(--pk-h), 75%, 40%, 0.55) 0%, transparent 45%),
+            radial-gradient(circle at 80% 20%, hsla(calc(var(--pk-h) + 40), 65%, 35%, 0.50) 0%, transparent 50%),
+            radial-gradient(circle at 70% 75%, hsla(calc(var(--pk-h) - 25), 70%, 35%, 0.45) 0%, transparent 55%),
+            radial-gradient(circle at 15% 85%, hsla(calc(var(--pk-h) + 80), 60%, 30%, 0.40) 0%, transparent 50%);
+        filter: blur(60px) saturate(140%); animation: pk-mesh 28s ease-in-out infinite alternate; z-index: 0; }
+    &::after { content: ""; position: absolute; inset: 0;
+        background: radial-gradient(ellipse at center, transparent 55%, rgba(0,0,0,0.45) 100%); z-index: 1; pointer-events: none; }
+    > * { position: relative; z-index: 2; }
+}
+@keyframes pk-mesh {
+    0%   { transform: translate(0, 0) rotate(0) scale(1); }
+    50%  { transform: translate(3%, -2%) rotate(2deg) scale(1.05); }
+    100% { transform: translate(-3%, 3%) rotate(-1deg) scale(0.98); }
+}
+
+// Header chrome
+.pin-kiosk__logo { max-height: 56px; max-width: 240px; object-fit: contain;
+    background: rgba(255,255,255,0.95); padding: 0.55rem 1rem; border-radius: 0.9rem;
+    border: 2px solid hsla(var(--pk-h), 85%, 72%, 0.95);
+    box-shadow: 0 8px 28px rgba(0,0,0,0.4), 0 0 26px hsla(var(--pk-h), 90%, 60%, 0.5); }
+.pin-kiosk__clock { margin-top: 0.5rem; font-size: 2.1rem; font-weight: 300; font-variant-numeric: tabular-nums;
+    letter-spacing: -0.02em; text-shadow: 0 2px 12px rgba(0,0,0,0.4);
+    .ampm { font-size: 0.9rem; font-weight: 500; color: var(--pk-text-muted); margin-left: 0.3rem; } }
+.pin-kiosk__date { font-size: 0.8rem; color: var(--pk-text-muted); text-transform: uppercase; letter-spacing: 0.06em; margin-top: 0.1rem; }
+
+// Search
+.pin-kiosk__search { margin: 1rem 0 0.85rem; width: 92%; max-width: 440px;
+    background: rgba(255,255,255,0.06); border: 1px solid rgba(255,255,255,0.12); border-radius: 999px;
+    padding: 0.7rem 1.2rem; color: var(--pk-text); font-size: 1rem; outline: none;
+    &::placeholder { color: var(--pk-text-muted); }
+    &:focus { border-color: hsl(var(--pk-h), 80%, 55%); } }
+
+// Tile grid
+.pin-kiosk__grid { flex: 1; min-height: 0; overflow-y: auto; width: 100%; max-width: 1100px;
+    display: grid; grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); gap: 0.85rem; align-content: start; padding-bottom: 1rem; }
+.pin-kiosk__tile { display: flex; flex-direction: column; align-items: center; gap: 0.5rem; padding: 0.85rem 0.4rem;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); border-radius: 1rem;
+    box-shadow: 0 8px 24px rgba(0,0,0,0.25); cursor: pointer; transition: transform 120ms ease, background 150ms ease;
+    &:hover, &:active { background: rgba(255,255,255,0.1); transform: translateY(-2px); } }
+.pin-kiosk__tile-av { width: 60px; height: 60px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.25rem; font-weight: 700; color: #fff;
+    background-color: hsl(var(--pk-h), 55%, 42%);
+    border: 2px solid rgba(255,255,255,0.25); box-shadow: 0 6px 16px rgba(0,0,0,0.35); }
+.pin-kiosk__tile-nm { font-size: 0.8rem; text-align: center; line-height: 1.15; color: #e7ebf0; max-width: 100px; }
+
+// Bottom chrome
+.pin-kiosk__location { position: absolute; bottom: 1.5rem; left: 1.5rem; font-size: 0.85rem; color: var(--pk-text-muted);
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); padding: 0.5rem 1rem; border-radius: 999px; }
+.pin-kiosk__settings { position: absolute; bottom: 1.5rem; right: 1.5rem; width: 2.75rem; height: 2.75rem; border-radius: 50%;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); color: var(--pk-text-muted);
+    display: flex; align-items: center; justify-content: center; font-size: 1.2rem; cursor: pointer; }
+
+// Glass overlay (PIN pad / setup / result), centered
+.pin-kiosk__overlay { position: fixed; inset: 0; z-index: 1000; display: flex; align-items: center; justify-content: center;
+    background: rgba(0,0,0,0.55); backdrop-filter: blur(6px); -webkit-backdrop-filter: blur(6px); padding: 2rem; animation: pk-fade 200ms ease-out; }
+@keyframes pk-fade { from { opacity: 0; } to { opacity: 1; } }
+%pk-glass { background: rgba(255,255,255,0.06); backdrop-filter: blur(24px) saturate(160%); -webkit-backdrop-filter: blur(24px) saturate(160%);
+    border: 1px solid rgba(255,255,255,0.12); box-shadow: 0 20px 60px rgba(0,0,0,0.5); border-radius: 1.5rem; }
+.pin-kiosk__panel { @extend %pk-glass; padding: 1.75rem 2rem; width: 90%; max-width: 360px;
+    display: flex; flex-direction: column; align-items: center; gap: 0.75rem; }
+.pin-kiosk__av { width: 64px; height: 64px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.4rem; font-weight: 700; color: #fff;
+    background-color: hsl(var(--pk-h), 60%, 45%); border: 2px solid rgba(255,255,255,0.25); }
+.pin-kiosk__name { font-size: 1.25rem; font-weight: 600; }
+.pin-kiosk__sub { font-size: 0.85rem; color: var(--pk-text-muted); margin-top: -0.3rem; }
+.pin-kiosk__dots { display: flex; gap: 0.85rem; margin: 0.5rem 0; }
+.pin-kiosk__dot { width: 0.85rem; height: 0.85rem; border-radius: 50%; border: 2px solid hsla(var(--pk-h),80%,70%,0.8);
+    &.on { background: hsl(var(--pk-h),80%,65%); border-color: hsl(var(--pk-h),80%,65%); } }
+.pin-kiosk__pad { display: grid; grid-template-columns: repeat(3, 4rem); gap: 0.6rem; }
+.pin-kiosk__key { height: 3.25rem; border-radius: 0.85rem; background: rgba(255,255,255,0.06);
+    border: 1px solid rgba(255,255,255,0.12); color: var(--pk-text); font-size: 1.4rem; font-weight: 300; cursor: pointer;
+    display: flex; align-items: center; justify-content: center;
+    &:active { transform: scale(0.95); background: rgba(255,255,255,0.14); }
+    &.ok { background: hsl(var(--pk-h),80%,45%); border-color: transparent; } }
+.pin-kiosk__cancel { margin-top: 0.3rem; color: var(--pk-text-muted); font-size: 0.85rem; cursor: pointer; background: none; border: none; }
+.pin-kiosk__err { min-height: 1.1rem; color: var(--pk-error); font-size: 0.9rem; }
+.pin-kiosk__panel.shake { animation: pk-shake 350ms ease-in-out; }
+@keyframes pk-shake { 0%,100%{transform:translateX(0)} 20%{transform:translateX(-10px)} 40%{transform:translateX(10px)} 60%{transform:translateX(-6px)} 80%{transform:translateX(6px)} }
+
+// Result card
+.pin-kiosk__result { @extend %pk-glass; padding: 2.25rem 3rem; display: flex; flex-direction: column; align-items: center;
+    gap: 0.6rem; text-align: center; width: 90%; max-width: 420px;
+    border-color: rgba(24,169,87,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 80px rgba(24,169,87,0.35);
+    &--error { border-color: rgba(217,55,78,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 60px rgba(217,55,78,0.3); } }
+.pin-kiosk__check { width: 74px; height: 74px; border-radius: 50%; background: rgba(24,169,87,0.18);
+    border: 2px solid rgba(24,169,87,0.6); display: flex; align-items: center; justify-content: center; font-size: 2rem; color: #34d399; }
+.pin-kiosk__result .name { font-size: 1.6rem; font-weight: 600; }
+.pin-kiosk__result .action { font-size: 1.2rem; color: #34d399; font-weight: 500; }
+.pin-kiosk__result .meta { font-size: 0.9rem; color: var(--pk-text-muted); }
+
+// Photo capture (oval guide, mirrors the NFC kiosk)
+.pin-kiosk__photo { @extend %pk-glass; padding: 1.5rem; width: 86%; max-width: 540px; text-align: center;
+    .stage { position: relative; aspect-ratio: 3 / 4; height: 56vh; max-height: 480px; margin: 0 auto; border-radius: 1rem; overflow: hidden; background: #000; }
+    video, img { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; }
+    video { transform: scaleX(-1); }
+    .guide { position: absolute; top: 47%; left: 50%; width: 64%; aspect-ratio: 3 / 4; transform: translate(-50%, -50%);
+        border: 3px dashed rgba(255,255,255,0.92); border-radius: 50%; box-shadow: 0 0 0 9999px rgba(0,0,0,0.5); }
+    .countdown { position: absolute; top: 47%; left: 50%; transform: translate(-50%, -50%); font-size: 5rem; font-weight: 200; color: #fff; text-shadow: 0 2px 24px rgba(0,0,0,0.85); } }
+
+@media (prefers-reduced-motion: reduce) {
+    .pin-kiosk::before, .pin-kiosk__panel.shake, .pin-kiosk__result { animation: none; }
+}

fusion_clock/static/src/xml/fusion_clock_dashboard.xml

@@ -125,6 +125,7 @@
                                 <span class="fclk-dash-act" t-on-click="onViewCorrections">📨 Approvals</span>
                                 <span class="fclk-dash-act" t-on-click="onViewPenalties">⚠ Penalties</span>
                                 <span class="fclk-dash-act" t-on-click="onViewActivityLogs">🗒 Activity Logs</span>
+                                <span class="fclk-dash-act" t-on-click="onViewBiweekly">🗓 Bi-Weekly Period</span>
                             </t>
                             <t t-if="state.role === 'manager'">
                                 <span class="fclk-dash-act" t-on-click="onViewShiftPlanner">📅 Shift Planner</span>

fusion_clock/tests/__init__.py

@@ -6,3 +6,7 @@ from . import test_shift_planner
 from . import test_photo_retention
 from . import test_schedule_driven
 from . import test_dashboard
+from . import test_pay_period
+from . import test_settings
+from . import test_clock_kiosk
+from . import test_break_rules

fusion_clock/tests/test_break_rules.py

@@ -0,0 +1,124 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import datetime, timedelta
+from odoo.tests import tagged, TransactionCase
+from odoo.exceptions import ValidationError
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestBreakRules(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.auto_deduct_break', 'True')
+        cls.Rule = cls.env['fusion.clock.break.rule']
+        cls.default_rule = cls.Rule.search([('is_default', '=', True)], limit=1)
+        # Flexible calendar -> hr.attendance.worked_hours is the raw check_in..check_out
+        # span (no lunch interval subtracted), so the tier math below is deterministic.
+        # This also mirrors real clock-in/out employees, who are effectively flexible.
+        flex = cls.env['resource.calendar'].create({
+            'name': 'FCLK Flexible', 'flexible_hours': True,
+        })
+        cls.employee = cls.env['hr.employee'].create({
+            'name': 'FCLK Break Test', 'resource_calendar_id': flex.id,
+        })
+
+    def _mk_att(self, hours):
+        check_in = datetime(2026, 1, 5, 9, 0, 0)
+        return self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': check_in,
+            'check_out': check_in + timedelta(hours=hours),
+        })
+
+    # ---- Task 1: tier engine + constraints ----
+    def test_break_minutes_for_tiers(self):
+        rule = self.Rule.create({
+            'name': 'Tier Test', 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.assertEqual(rule.break_minutes_for(4.99), 0.0)
+        self.assertEqual(rule.break_minutes_for(5.0), 30.0)
+        self.assertEqual(rule.break_minutes_for(9.99), 30.0)
+        self.assertEqual(rule.break_minutes_for(10.0), 60.0)
+        self.assertEqual(rule.break_minutes_for(12.0), 60.0)
+
+    def test_second_tier_must_exceed_first(self):
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Bad', 'is_default': False,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 5.0, 'break2_minutes': 30.0,
+            })
+
+    def test_single_default_enforced(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Another Default', 'is_default': True, 'active': True,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+            })
+
+    # ---- Task 2: jurisdiction resolver ----
+    def test_resolver_matches_company_province(self):
+        bc = self.env.ref('base.state_ca_bc')
+        bc_rule = self.Rule.create({
+            'name': 'British Columbia', 'state_id': bc.id, 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.employee.company_id.state_id = bc.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), bc_rule)
+
+    def test_resolver_falls_back_to_default(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        alberta = self.env.ref('base.state_ca_ab')   # no rule for AB
+        self.employee.company_id.state_id = alberta.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), self.default_rule)
+
+    # ---- Task 3: automatic deduction on every path ----
+    def test_manual_attendance_applies_statutory_break(self):
+        att = self._mk_att(6)                       # 6h >= 5 -> first break
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 5.5, places=2)
+
+    def test_manual_edit_extends_break(self):
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        att.check_out = att.check_in + timedelta(hours=10)   # now >= 10
+        self.assertEqual(att.x_fclk_break_minutes, 60.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 9.0, places=2)
+
+    def test_under_first_threshold_no_break(self):
+        att = self._mk_att(4)                       # 4h < 5 -> nothing
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 4.0, places=2)
+
+    def test_penalty_minutes_are_additive(self):
+        att = self._mk_att(6)                       # statutory 30
+        self.env['fusion.clock.penalty'].create({
+            'attendance_id': att.id,
+            'employee_id': self.employee.id,
+            'penalty_type': 'early_out',
+            'penalty_minutes': 15.0,
+            'date': att.check_in.date(),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 45.0)
+
+    def test_master_toggle_off_zero_statutory(self):
+        self.ICP.set_param('fusion_clock.auto_deduct_break', 'False')
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+
+    def test_open_attendance_zero_break(self):
+        att = self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': datetime(2026, 1, 5, 9, 0, 0),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)

fusion_clock/tests/test_clock_kiosk.py

@@ -0,0 +1,130 @@
+# -*- coding: utf-8 -*-
+import json
+from odoo.tests.common import HttpCase, tagged
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskIdentity(HttpCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Kiosk Op', 'login': 'pin-kiosk-op', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.withpin = cls.env['hr.employee'].create({
+            'name': 'Pat WithPin', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+        cls.nopin = cls.env['hr.employee'].create({
+            'name': 'Nora NoPin', 'x_fclk_enable_clock': True,
+        })
+
+    def _call(self, route, params):
+        self.authenticate('pin-kiosk-op', 'kioskpass123')
+        resp = self.url_open(route, data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call', 'params': params,
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def test_search_returns_avatar_and_has_pin(self):
+        res = self._call('/fusion_clock/kiosk/search', {'query': ''})
+        rows = {e['name']: e for e in res['employees']}
+        self.assertIn('Pat WithPin', rows)
+        self.assertTrue(rows['Pat WithPin']['has_pin'])
+        self.assertFalse(rows['Nora NoPin']['has_pin'])
+        self.assertIn('/web/image/hr.employee.public/', rows['Pat WithPin']['avatar_url'])
+
+    def test_verify_pin_correct(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '1234'})
+        self.assertTrue(res.get('success'))
+
+    def test_verify_pin_incorrect(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '9999'})
+        self.assertEqual(res.get('error'), 'invalid_pin')
+
+    def test_verify_pin_needs_setup(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.nopin.id, 'pin': ''})
+        self.assertTrue(res.get('needs_setup'))
+
+    def test_set_pin_success_then_required(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '4321'})
+        self.assertTrue(res.get('success'))
+        self.assertEqual(self.nopin.x_fclk_kiosk_pin, '4321')
+        res2 = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '0000'})
+        self.assertEqual(res2.get('error'), 'already_set')
+
+    def test_set_pin_rejects_bad_format(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.withpin.id, 'pin': '12'})
+        self.assertEqual(res.get('error'), 'bad_pin')
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskClock(HttpCase):
+
+    PNG = ('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwC'
+           'AAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=')
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant 2', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Op2', 'login': 'pin-op2', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.emp = cls.env['hr.employee'].create({
+            'name': 'Quinn Clock', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+
+    def _clock(self, employee_id, photo_b64=''):
+        self.authenticate('pin-op2', 'kioskpass123')
+        resp = self.url_open('/fusion_clock/kiosk/clock', data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call',
+            'params': {'employee_id': employee_id, 'photo_b64': photo_b64},
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def _latest(self, emp_id):
+        return self.env['hr.attendance'].search(
+            [('employee_id', '=', emp_id)], order='check_in desc', limit=1)
+
+    def test_clock_in_uses_kiosk_location(self):
+        res = self._clock(self.emp.id)
+        self.assertTrue(res.get('success'))
+        self.assertEqual(res.get('action'), 'clock_in')
+        att = self._latest(self.emp.id)
+        self.assertEqual(att.x_fclk_clock_source, 'kiosk')
+        self.assertEqual(att.x_fclk_location_id, self.location)
+
+    def test_photo_off_stores_nothing(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'False')
+        emp = self.env['hr.employee'].create({
+            'name': 'Quinn Off', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234'})
+        self._clock(emp.id, self.PNG)
+        self.assertFalse(self._latest(emp.id).x_fclk_check_in_photo)
+
+    def test_photo_on_stores_selfie(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'True')
+        emp = self.env['hr.employee'].create({
+            'name': 'Quinn On', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234'})
+        self._clock(emp.id, self.PNG)
+        self.assertTrue(self._latest(emp.id).x_fclk_check_in_photo)
+
+    def test_no_location_configured(self):
+        self.env.company.x_fclk_nfc_kiosk_location_id = False
+        emp = self.env['hr.employee'].create({
+            'name': 'Quinn NoLoc', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234'})
+        res = self._clock(emp.id)
+        self.assertEqual(res.get('error'), 'no_location_configured')

fusion_clock/tests/test_clock_nfc_kiosk.py

@@ -454,3 +454,63 @@ class TestCreateEmployeeEndpoint(HttpCase):
     def test_create_invalid_name(self):
         result = self._call({'name': 'X', 'enroll_password': '1234'})
         self.assertEqual(result.get('error'), 'invalid_name')
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestTapPhotoMasterSwitch(HttpCase):
+    """The global Photo Verification toggle is the master switch: when OFF, the
+    NFC kiosk stores no photo even if the client sends one; when ON (with
+    nfc_photo_required), it does."""
+
+    PNG = ('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwC'
+           'AAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=')
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_nfc_kiosk', 'True')
+        cls.ICP.set_param('fusion_clock.nfc_photo_required', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'Photo Plant', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'Photo Kiosk User', 'login': 'nfc-kiosk-photo', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.bob = cls.env['hr.employee'].create({
+            'name': 'Bob P', 'x_fclk_enable_clock': True,
+            'x_fclk_nfc_card_uid': '04:A2:B5:62:C1:91',
+        })
+
+    def setUp(self):
+        super().setUp()
+        from odoo.addons.fusion_clock.controllers import clock_nfc_kiosk as nfc_kiosk_module
+        nfc_kiosk_module._recent_taps.clear()
+
+    def _tap(self):
+        self.authenticate('nfc-kiosk-photo', 'kioskpass123')
+        response = self.url_open(
+            '/fusion_clock/kiosk/nfc/tap',
+            data=json.dumps({'jsonrpc': '2.0', 'method': 'call',
+                             'params': {'card_uid': '04:A2:B5:62:C1:91', 'photo_b64': self.PNG}}),
+            headers={'Content-Type': 'application/json'},
+        )
+        return response.json().get('result', {})
+
+    def _latest(self):
+        return self.env['hr.attendance'].search(
+            [('employee_id', '=', self.bob.id)], order='check_in desc', limit=1)
+
+    def test_no_photo_stored_when_master_off(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'False')
+        result = self._tap()
+        self.assertTrue(result.get('success'))
+        self.assertFalse(self._latest().x_fclk_check_in_photo)
+
+    def test_photo_stored_when_master_on(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'True')
+        result = self._tap()
+        self.assertTrue(result.get('success'))
+        self.assertTrue(self._latest().x_fclk_check_in_photo)

fusion_clock/tests/test_pay_period.py

@@ -0,0 +1,145 @@
+# -*- coding: utf-8 -*-
+from datetime import date, timedelta
+from odoo import fields
+from odoo.tests import tagged, TransactionCase
+from odoo.addons.fusion_clock.models.pay_period import (
+    compute_pay_period, period_length_days, current_prev_next,
+)
+from odoo.addons.fusion_clock.models.tz_utils import get_local_today
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodMath(TransactionCase):
+
+    def test_biweekly_window_is_14_days(self):
+        # anchor Mon 2026-05-04; a date inside the 2nd period
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 31))
+        self.assertEqual((e - s).days, 13)
+
+    def test_weekly_window_is_7_days(self):
+        s, e = compute_pay_period('weekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 24))
+
+    def test_datetime_string_anchor_still_parses(self):
+        # Anchor is a free-text Char; a stored "YYYY-MM-DD hh:mm:ss" must resolve
+        # the same as the bare date (parity with Odoo's fields.Date.from_string).
+        s, e = compute_pay_period('biweekly', '2026-05-04 00:00:00', date(2026, 5, 20))
+        self.assertEqual((s, e), (date(2026, 5, 18), date(2026, 5, 31)))
+
+    def test_reference_before_anchor(self):
+        # 2026-04-25 is one biweekly period BEFORE the anchor
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 4, 25))
+        self.assertEqual(s, date(2026, 4, 20))
+        self.assertEqual(e, date(2026, 5, 3))
+
+    def test_monthly_window(self):
+        s, e = compute_pay_period('monthly', '', date(2026, 2, 10))
+        self.assertEqual(s, date(2026, 2, 1))
+        self.assertEqual(e, date(2026, 2, 28))
+
+    def test_semi_monthly_window(self):
+        s1, e1 = compute_pay_period('semi_monthly', '', date(2026, 3, 10))
+        self.assertEqual((s1, e1), (date(2026, 3, 1), date(2026, 3, 15)))
+        s2, e2 = compute_pay_period('semi_monthly', '', date(2026, 3, 20))
+        self.assertEqual((s2, e2), (date(2026, 3, 16), date(2026, 3, 31)))
+
+    def test_period_length_days(self):
+        self.assertEqual(period_length_days('weekly'), 7)
+        self.assertEqual(period_length_days('biweekly'), 14)
+        self.assertIsNone(period_length_days('monthly'))
+
+    def test_current_prev_next_are_contiguous(self):
+        w = current_prev_next('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(w['current'], (date(2026, 5, 18), date(2026, 5, 31)))
+        self.assertEqual(w['previous'][1], w['current'][0] - timedelta(days=1))
+        self.assertEqual(w['next'][0], w['current'][1] + timedelta(days=1))
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodFilters(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        self.today = get_local_today(self.env)
+        # Make TODAY the first day of the current bi-weekly window.
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', str(self.today))
+        self.emp = self.env['hr.employee'].create({'name': 'Filter Fred'})
+        Att = self.env['hr.attendance']
+        # current period: today .. today+13  -> attendance "now"
+        self.att_current = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': fields.Datetime.now(),
+            'check_out': fields.Datetime.now(),
+        })
+        # previous period: today-14 .. today-1 -> attendance 8 days ago
+        eight_ago = fields.Datetime.now() - timedelta(days=8)
+        self.att_prev = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': eight_ago,
+            'check_out': eight_ago,
+        })
+
+    def test_resolve_tz_company_fallback_when_user_has_no_tz(self):
+        # Regression: res.company has no `tz` field in Odoo 19; the resolver must
+        # fall back to env.company.partner_id.tz, not env.company.tz, or a
+        # tz-less user crashes the period filters with AttributeError.
+        self.env.user.tz = False
+        self.env.company.partner_id.tz = 'America/Toronto'
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_current_period', '=', True),
+        ])
+        self.assertIn(self.att_current, res)
+
+    def test_current_filter_returns_only_current(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_current_period', '=', True),
+        ])
+        self.assertIn(self.att_current, res)
+        self.assertNotIn(self.att_prev, res)
+
+    def test_previous_filter_returns_only_previous(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_previous_period', '=', True),
+        ])
+        self.assertIn(self.att_prev, res)
+        self.assertNotIn(self.att_current, res)
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPeriodPickerWizard(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', '2026-05-04')
+        self.today = get_local_today(self.env)
+
+    def test_default_start_is_current_period_start(self):
+        wiz = self.env['fusion.clock.period.picker'].create({})
+        expected_start = current_prev_next('biweekly', '2026-05-04', self.today)['current'][0]
+        self.assertEqual(wiz.date_start, expected_start)
+
+    def test_onchange_autofills_two_weeks(self):
+        wiz = self.env['fusion.clock.period.picker'].new({'date_start': date(2026, 6, 1)})
+        wiz._onchange_date_start()
+        self.assertEqual(wiz.date_end, date(2026, 6, 1) + timedelta(days=13))
+
+    def test_action_apply_returns_attendance_domain(self):
+        wiz = self.env['fusion.clock.period.picker'].create({
+            'date_start': date(2026, 6, 1), 'date_end': date(2026, 6, 14),
+        })
+        act = wiz.action_apply()
+        self.assertEqual(act['res_model'], 'hr.attendance')
+        self.assertEqual(act['view_mode'], 'list,form')
+        leaves = [leaf for leaf in act['domain'] if isinstance(leaf, tuple)]
+        self.assertTrue(any(leaf[0] == 'check_in' and leaf[1] == '>=' for leaf in leaves))
+        self.assertTrue(any(leaf[0] == 'check_in' and leaf[1] == '<' for leaf in leaves))

fusion_clock/tests/test_settings.py

@@ -0,0 +1,43 @@
+# -*- coding: utf-8 -*-
+from odoo.tests import tagged, TransactionCase
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestFusionClockSettings(TransactionCase):
+    """The fusion_clock Boolean settings are persisted explicitly as
+    'True'/'False' so they can actually be turned OFF (a config_parameter
+    Boolean can't — Odoo deletes the row on a falsy value)."""
+
+    def _save(self, vals):
+        self.env['res.config.settings'].create(vals).set_values()
+
+    def test_boolean_toggle_off_persists(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        self._save({'fclk_enable_overtime': False})
+        self.assertEqual(ICP.get_param('fusion_clock.enable_overtime'), 'False')
+        # reopening Settings shows it OFF
+        self.assertFalse(self.env['res.config.settings'].get_values()['fclk_enable_overtime'])
+
+    def test_boolean_toggle_back_on_persists(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        self._save({'fclk_enable_overtime': False})
+        self._save({'fclk_enable_overtime': True})
+        self.assertEqual(ICP.get_param('fusion_clock.enable_overtime'), 'True')
+        self.assertTrue(self.env['res.config.settings'].get_values()['fclk_enable_overtime'])
+
+    def test_default_on_boolean_when_param_absent(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        # set_param with a falsy value deletes the row → simulates "never set"
+        ICP.set_param('fusion_clock.enable_ip_fallback', False)
+        self.assertTrue(self.env['res.config.settings'].get_values()['fclk_enable_ip_fallback'])
+
+    def test_default_off_boolean_when_param_absent(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        ICP.set_param('fusion_clock.enable_kiosk', False)
+        self.assertFalse(self.env['res.config.settings'].get_values()['fclk_enable_kiosk'])
+
+    def test_dead_settings_removed(self):
+        fields = self.env['res.config.settings']._fields
+        self.assertNotIn('fclk_grace_period_minutes', fields)
+        self.assertNotIn('fclk_weekly_overtime_threshold', fields)
+        self.assertNotIn('fclk_break_threshold_hours', fields)

fusion_clock/views/clock_break_rule_views.xml

@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="view_fusion_clock_break_rule_list" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.list</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="sequence" widget="handle"/>
+                <field name="name"/>
+                <field name="state_id"/>
+                <field name="country_id" optional="hide"/>
+                <field name="break1_after_hours" widget="float_time"/>
+                <field name="break1_minutes"/>
+                <field name="break2_after_hours" widget="float_time"/>
+                <field name="break2_minutes"/>
+                <field name="is_default"/>
+                <field name="active" widget="boolean_toggle"/>
+            </list>
+        </field>
+    </record>
+
+    <record id="view_fusion_clock_break_rule_form" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.form</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <form>
+                <sheet>
+                    <widget name="web_ribbon" title="Archived" bg_color="text-bg-danger"
+                            invisible="active"/>
+                    <div class="oe_title">
+                        <h1><field name="name" placeholder="e.g. Ontario"/></h1>
+                    </div>
+                    <group>
+                        <group string="Jurisdiction">
+                            <field name="country_id"/>
+                            <field name="state_id"
+                                   domain="[('country_id', '=', country_id)]"/>
+                            <field name="is_default"/>
+                            <field name="active"/>
+                        </group>
+                        <group string="Unpaid Break Tiers">
+                            <label for="break1_after_hours" string="First break after"/>
+                            <div class="o_row">
+                                <field name="break1_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break1_minutes"/>
+                                <span>min</span>
+                            </div>
+                            <label for="break2_after_hours" string="Second break after"/>
+                            <div class="o_row">
+                                <field name="break2_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break2_minutes"/>
+                                <span>min</span>
+                            </div>
+                        </group>
+                    </group>
+                    <p class="text-muted">
+                        Breaks are unpaid and deducted from actual worked hours. A tier with
+                        0 minutes is disabled. Triggers are inclusive — a break applies when
+                        worked hours are equal to or above the threshold.
+                    </p>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_break_rule" model="ir.actions.act_window">
+        <field name="name">Break Rules</field>
+        <field name="res_model">fusion.clock.break.rule</field>
+        <field name="view_mode">list,form</field>
+        <field name="context">{'active_test': False}</field>
+        <field name="help" type="html">
+            <p class="o_view_nocontent_smiling_face">Create a statutory break rule</p>
+            <p>Define unpaid meal-break thresholds per province/country. Employees inherit
+               the rule matching their company's province, or the default rule.</p>
+        </field>
+    </record>
+</odoo>

fusion_clock/views/clock_menus.xml

@@ -24,6 +24,20 @@
               sequence="46"
               groups="group_fusion_clock_kiosk_app"/>
 
+    <!-- PIN kiosk app icon (opt-in alternative to NFC: tap photo + PIN). -->
+    <record id="action_fusion_clock_kiosk_pin" model="ir.actions.act_url">
+        <field name="name">Fusion Clock PIN Kiosk</field>
+        <field name="url">/fusion_clock/kiosk</field>
+        <field name="target">self</field>
+    </record>
+
+    <menuitem id="menu_fusion_clock_kiosk_pin_app_root"
+              name="Fusion Clock PIN Kiosk"
+              web_icon="fusion_clock,static/description/icon.png"
+              action="action_fusion_clock_kiosk_pin"
+              sequence="47"
+              groups="group_fusion_clock_kiosk_app"/>
+
     <!-- Dashboard — layered & role-aware: personal band for everyone,
          team band for leads (direct reports), org band for managers.
          Gated to the base clock-user group (lead/manager imply it). -->
@@ -49,6 +63,13 @@
               sequence="10"
               groups="group_fusion_clock_manager,group_fusion_clock_team_lead"/>
 
+    <menuitem id="menu_fusion_clock_biweekly_period"
+              name="Bi-Weekly Period"
+              parent="menu_fusion_clock_attendance"
+              action="action_fusion_clock_period_picker"
+              sequence="15"
+              groups="group_fusion_clock_manager,group_fusion_clock_team_lead"/>
+
     <menuitem id="menu_fusion_clock_leaves"
               name="Leave Requests"
               parent="menu_fusion_clock_attendance"
@@ -175,6 +196,13 @@
               sequence="20"
               groups="group_fusion_clock_manager"/>
 
+    <menuitem id="menu_fusion_clock_break_rules"
+              name="Break Rules"
+              parent="menu_fusion_clock_config"
+              action="action_fusion_clock_break_rule"
+              sequence="25"
+              groups="group_fusion_clock_manager"/>
+
     <menuitem id="menu_fusion_clock_nfc_enrollment"
               name="Enroll NFC Card"
               parent="menu_fusion_clock_config"

fusion_clock/views/hr_attendance_views.xml

@@ -88,6 +88,10 @@
                 <filter name="fclk_has_penalty" string="Has Penalty" domain="[('x_fclk_penalty_ids', '!=', False)]"/>
                 <filter name="fclk_has_overtime" string="Has Overtime" domain="[('x_fclk_is_overtime', '=', True)]"/>
                 <separator/>
+                <filter name="fclk_period_current" string="Current Pay Period" domain="[('x_fclk_in_current_period', '=', True)]"/>
+                <filter name="fclk_period_previous" string="Previous Pay Period" domain="[('x_fclk_in_previous_period', '=', True)]"/>
+                <filter name="fclk_period_next" string="Next Pay Period" domain="[('x_fclk_in_next_period', '=', True)]"/>
+                <separator/>
                 <filter name="group_location" string="Location" context="{'group_by': 'x_fclk_location_id'}"/>
                 <filter name="group_source" string="Source" context="{'group_by': 'x_fclk_clock_source'}"/>
             </xpath>

fusion_clock/views/kiosk_templates.xml

@@ -1,61 +1,38 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
 
-    <!-- Kiosk Page Template -->
-    <template id="kiosk_page" name="Fusion Clock Kiosk">
+    <template id="kiosk_page" name="Fusion Clock PIN Kiosk">
         <t t-call="web.frontend_layout">
             <t t-set="no_header" t-value="True"/>
             <t t-set="no_footer" t-value="True"/>
-            <div id="fclk-kiosk" class="container-fluid vh-100 d-flex flex-column align-items-center justify-content-center"
-                 style="background: var(--o-main-bg-color, #f8f9fa);"
-                 t-att-data-pin-required="'true' if pin_required else 'false'">
+            <t t-set="head">
+                <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1, user-scalable=no"/>
+                <!-- Kiosk lockdown: hide Odoo's frontend->backend nav so a kiosk
+                     user can't reach the backend. Page-scoped. -->
+                <style>.o_frontend_to_backend_nav { display: none !important; }</style>
+            </t>
 
-                <!-- Header -->
-                <div class="text-center mb-4">
-                    <h1 style="font-size: 2.5rem;">Fusion Clock</h1>
-                    <p class="text-muted" style="font-size: 1.2rem;">Kiosk Mode</p>
-                    <div id="fclk-kiosk-time" style="font-size: 3rem; font-weight: 300;"></div>
-                </div>
+            <div id="pin_kiosk_root" class="pin-kiosk"
+                 t-att-data-location="location_name"
+                 t-att-data-sounds="'1' if sounds_enabled else '0'"
+                 t-att-data-photo="'1' if photo_required else '0'">
 
-                <!-- Search / PIN Entry -->
-                <div class="card shadow-sm" style="width: 100%; max-width: 500px;">
-                    <div class="card-body p-4">
+                <img t-if="company_logo_url"
+                     id="pin_kiosk_logo" class="pin-kiosk__logo"
+                     t-att-src="company_logo_url" crossorigin="anonymous" alt="Company logo"/>
 
-                        <!-- Step 1: Search Employee -->
-                        <div id="fclk-kiosk-search">
-                            <label class="form-label fw-bold">Employee Name</label>
-                            <input type="text" id="fclk-kiosk-query" class="form-control form-control-lg mb-3"
-                                   placeholder="Type your name..." autocomplete="off"/>
-                            <div id="fclk-kiosk-results" class="list-group mb-3" style="max-height: 300px; overflow-y: auto;"></div>
-                        </div>
+                <div class="pin-kiosk__clock" id="pin_kiosk_clock">--:--</div>
+                <div class="pin-kiosk__date" id="pin_kiosk_date">—</div>
 
-                        <!-- Step 2: PIN (if required) -->
-                        <div id="fclk-kiosk-pin" style="display: none;">
-                            <h4 id="fclk-kiosk-emp-name" class="text-center mb-3"></h4>
-                            <t t-if="pin_required">
-                                <label class="form-label fw-bold">Enter PIN</label>
-                                <input type="password" id="fclk-kiosk-pin-input" class="form-control form-control-lg text-center mb-3"
-                                       maxlength="6" placeholder="------"/>
-                            </t>
-                            <div class="d-grid gap-2">
-                                <button id="fclk-kiosk-clock-btn" class="btn btn-lg btn-primary">
-                                    Clock In / Out
-                                </button>
-                                <button id="fclk-kiosk-back-btn" class="btn btn-outline-secondary">
-                                    Back
-                                </button>
-                            </div>
-                        </div>
+                <input type="text" class="pin-kiosk__search" id="pin_kiosk_search"
+                       placeholder="Search your name…" autocomplete="off"/>
+                <div class="pin-kiosk__grid" id="pin_kiosk_grid"></div>
 
-                        <!-- Step 3: Result -->
-                        <div id="fclk-kiosk-result" style="display: none;">
-                            <div id="fclk-kiosk-result-msg" class="text-center py-4" style="font-size: 1.3rem;"></div>
-                        </div>
+                <div class="pin-kiosk__location" t-esc="location_name"/>
+                <div class="pin-kiosk__settings" id="pin_kiosk_settings" title="Settings">⚙</div>
 
-                        <!-- Error message -->
-                        <div id="fclk-kiosk-error" class="alert alert-danger mt-3" style="display: none;"></div>
-                    </div>
-                </div>
+                <!-- JS swaps overlays (PIN pad / setup / photo / result) in here -->
+                <div id="pin_state_container"></div>
             </div>
         </t>
     </template>

fusion_clock/views/portal_clock_templates.xml

@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
 <odoo>
 
-    <!-- Clock link removed from portal home - now handled by fusion_authorizer_portal -->
+    <!-- Clock link removed from portal home - now handled by fusion_portal -->
     <template id="portal_my_home_clock" name="Portal My Home: Clock"
               inherit_id="portal.portal_my_home" priority="60">
         <xpath expr="//div[hasclass('o_portal_docs')]" position="inside">

fusion_clock/views/res_config_settings_views.xml

@@ -19,25 +19,25 @@
                             <div class="content-group">
                                 <div class="row mt16">
                                     <label for="fclk_default_clock_in_time" string="Clock-In" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_default_clock_in_time" widget="float_time"/>
+                                    <field name="fclk_default_clock_in_time"/>
                                 </div>
                                 <div class="row mt8">
                                     <label for="fclk_default_clock_out_time" string="Clock-Out" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_default_clock_out_time" widget="float_time"/>
+                                    <field name="fclk_default_clock_out_time"/>
                                 </div>
                             </div>
                         </setting>
                         <setting id="fclk_auto_break" string="Auto-Deduct Break"
-                                 help="Automatically deduct unpaid break from worked hours on clock-out.">
+                                 help="Automatically deduct the statutory unpaid break from worked hours. Break lengths and thresholds are configured per province under Configuration → Break Rules.">
                             <field name="fclk_auto_deduct_break"/>
                             <div class="content-group" invisible="not fclk_auto_deduct_break">
                                 <div class="row mt16">
-                                    <label for="fclk_default_break_minutes" string="Duration (min)" class="col-lg-5 o_light_label"/>
+                                    <label for="fclk_default_break_minutes" string="Default scheduling break (min)" class="col-lg-5 o_light_label"/>
                                     <field name="fclk_default_break_minutes"/>
                                 </div>
-                                <div class="row mt8">
-                                    <label for="fclk_break_threshold_hours" string="Min. Shift" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_break_threshold_hours" widget="float_time"/>
+                                <div class="text-muted small mt4">
+                                    Used as the default break when building shifts/schedules
+                                    (planned hours). Actual deductions follow the province Break Rules.
                                 </div>
                             </div>
                         </setting>
@@ -52,10 +52,6 @@
                             <field name="fclk_enable_auto_clockout"/>
                             <div class="content-group" invisible="not fclk_enable_auto_clockout">
                                 <div class="row mt16">
-                                    <label for="fclk_grace_period_minutes" string="Grace (min)" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_grace_period_minutes"/>
-                                </div>
-                                <div class="row mt8">
                                     <label for="fclk_max_shift_hours" string="Max Shift" class="col-lg-5 o_light_label"/>
                                     <field name="fclk_max_shift_hours" widget="float_time"/>
                                 </div>
@@ -83,10 +79,6 @@
                                     <label for="fclk_daily_overtime_threshold" string="Daily Limit" class="col-lg-5 o_light_label"/>
                                     <field name="fclk_daily_overtime_threshold" widget="float_time"/>
                                 </div>
-                                <div class="row mt8">
-                                    <label for="fclk_weekly_overtime_threshold" string="Weekly Limit" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_weekly_overtime_threshold" widget="float_time"/>
-                                </div>
                             </div>
                         </setting>
                     </block>
@@ -141,8 +133,14 @@
                             <field name="fclk_enable_ip_fallback"/>
                         </setting>
                         <setting id="fclk_photo_verification" string="Photo Verification"
-                                 help="Require selfie on clock-in. Per-location control is available in each location's settings.">
+                                 help="Master switch for clock-in/out selfies. When OFF, no photos are captured anywhere (portal, PIN kiosk or NFC kiosk). When ON, the per-location and kiosk photo settings apply.">
                             <field name="fclk_enable_photo_verification"/>
+                            <div class="content-group" invisible="not fclk_enable_photo_verification">
+                                <div class="row mt16">
+                                    <label for="fclk_photo_retention_days" string="Auto-Wipe Photos After (days)" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_photo_retention_days"/>
+                                </div>
+                            </div>
                         </setting>
                         <setting id="fclk_google_maps" string="Google Maps API Key"
                                  help="Required for location geocoding and map previews in clock location setup.">
@@ -165,19 +163,53 @@
                     </block>
 
                     <!-- ============================================================ -->
-                    <!-- Kiosk & Portal -->
+                    <!-- Kiosk (shared-device clock-in: PIN or NFC) -->
                     <!-- ============================================================ -->
-                    <block title="Kiosk &amp; Portal" name="fclk_kiosk_portal">
-                        <setting id="fclk_kiosk" string="Kiosk Mode"
-                                 help="Allow employees to clock in/out from a shared device (tablet or computer).">
+                    <block title="Kiosk" name="fclk_kiosk_modes">
+                        <setting id="fclk_pin_kiosk" string="PIN Kiosk"
+                                 help="Shared tablet where staff tap their photo and enter a PIN. Best when you don't use NFC cards/fobs.">
                             <field name="fclk_enable_kiosk"/>
                             <div class="content-group" invisible="not fclk_enable_kiosk">
-                                <div class="row mt16">
-                                    <field name="fclk_kiosk_pin_required"/>
-                                    <label for="fclk_kiosk_pin_required" class="ms-1"/>
+                                <div class="mt16">
+                                    <a href="/fusion_clock/kiosk" target="_blank" role="button" class="btn btn-secondary btn-sm">
+                                        <i class="fa fa-external-link me-1"/> Open PIN Kiosk
+                                    </a>
                                 </div>
                             </div>
                         </setting>
+                        <setting id="fclk_nfc_kiosk" string="NFC Kiosk"
+                                 help="Shared tablet where staff tap an NFC card or fob (contactless). Fastest for shop floors.">
+                            <field name="fclk_enable_nfc_kiosk"/>
+                            <div class="content-group" invisible="not fclk_enable_nfc_kiosk">
+                                <div class="row mt16">
+                                    <label for="fclk_nfc_kiosk_location_id" string="Location" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_nfc_kiosk_location_id"/>
+                                </div>
+                                <div class="row mt8">
+                                    <label for="fclk_nfc_photo_required" string="Require Photo" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_nfc_photo_required"/>
+                                </div>
+                                <div class="row mt8">
+                                    <label for="fclk_nfc_enroll_password" string="Enroll Password" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_nfc_enroll_password" password="True"/>
+                                </div>
+                                <div class="row mt8">
+                                    <label for="fclk_nfc_kiosk_debug" string="Debug Overlay" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_nfc_kiosk_debug"/>
+                                </div>
+                                <div class="mt16">
+                                    <a href="/fusion_clock/kiosk/nfc" target="_blank" role="button" class="btn btn-secondary btn-sm">
+                                        <i class="fa fa-external-link me-1"/> Open NFC Kiosk
+                                    </a>
+                                </div>
+                            </div>
+                        </setting>
+                    </block>
+
+                    <!-- ============================================================ -->
+                    <!-- Portal -->
+                    <!-- ============================================================ -->
+                    <block title="Portal" name="fclk_portal">
                         <setting id="fclk_corrections" string="Correction Requests"
                                  help="Allow employees to request timesheet corrections from the portal.">
                             <field name="fclk_enable_correction_requests"/>
@@ -193,7 +225,7 @@
                     <!-- ============================================================ -->
                     <block title="Pay Period &amp; Reports" name="fclk_pay_period_reports">
                         <setting id="fclk_pay_period" string="Pay Period Schedule"
-                                 help="Defines how often attendance reports are generated and the start/end dates of each reporting period.">
+                                 help="Defines how often attendance reports are generated and the start/end dates of each period. The Anchor Date is the pay-period start used by both the reports AND the Bi-Weekly Period filter/picker on the Attendances list.">
                             <div class="content-group">
                                 <div class="row mt16">
                                     <label for="fclk_pay_period_type" string="Frequency" class="col-lg-5 o_light_label"/>
@@ -242,38 +274,6 @@
                         </setting>
                     </block>
 
-                    <!-- ============================================================ -->
-                    <!-- NFC Clock Kiosk -->
-                    <!-- ============================================================ -->
-                    <block title="NFC Clock Kiosk" name="fclk_nfc_kiosk">
-                        <setting id="fclk_nfc_enable" string="Enable NFC Kiosk"
-                                 help="Tap-to-clock kiosk for shop-floor tablets at /fusion_clock/kiosk/nfc">
-                            <field name="fclk_enable_nfc_kiosk"/>
-                            <div class="content-group" invisible="not fclk_enable_nfc_kiosk">
-                                <div class="row mt16">
-                                    <label for="fclk_nfc_kiosk_location_id" string="Location" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_nfc_kiosk_location_id"/>
-                                </div>
-                                <div class="row mt8">
-                                    <label for="fclk_nfc_photo_required" string="Require Photo" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_nfc_photo_required"/>
-                                </div>
-                                <div class="row mt8">
-                                    <label for="fclk_photo_retention_days" string="Auto-Wipe Photos After (days)" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_photo_retention_days"/>
-                                </div>
-                                <div class="row mt8">
-                                    <label for="fclk_nfc_enroll_password" string="Enroll Password" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_nfc_enroll_password" password="True"/>
-                                </div>
-                                <div class="row mt8">
-                                    <label for="fclk_nfc_kiosk_debug" string="Debug Overlay" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_nfc_kiosk_debug"/>
-                                </div>
-                            </div>
-                        </setting>
-                    </block>
-
                 </app>
             </xpath>
         </field>

fusion_clock/wizard/__init__.py

@@ -3,3 +3,4 @@
 # License OPL-1 (Odoo Proprietary License v1.0)
 
 from . import clock_nfc_enrollment_wizard
+from . import clock_period_picker_wizard

fusion_clock/wizard/clock_period_picker_views.xml

@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+
+    <record id="view_fusion_clock_period_picker_form" model="ir.ui.view">
+        <field name="name">fusion.clock.period.picker.form</field>
+        <field name="model">fusion.clock.period.picker</field>
+        <field name="arch" type="xml">
+            <form string="Bi-Weekly Period">
+                <sheet>
+                    <div class="alert alert-info" role="alert">
+                        Pick the period start — the end auto-fills to one pay period later
+                        (two weeks by default). Adjust either date, then click
+                        <b>View Attendances</b>.
+                    </div>
+                    <group>
+                        <field name="date_start"/>
+                        <field name="date_end"/>
+                    </group>
+                </sheet>
+                <footer>
+                    <button name="action_apply" string="View Attendances" type="object" class="btn-primary"/>
+                    <button special="cancel" string="Cancel" class="btn-secondary"/>
+                </footer>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_period_picker" model="ir.actions.act_window">
+        <field name="name">Bi-Weekly Period</field>
+        <field name="res_model">fusion.clock.period.picker</field>
+        <field name="view_mode">form</field>
+        <field name="view_id" ref="view_fusion_clock_period_picker_form"/>
+        <field name="target">new</field>
+    </record>
+
+</odoo>

fusion_clock/wizard/clock_period_picker_wizard.py

@@ -0,0 +1,66 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import timedelta
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+from ..models.pay_period import compute_pay_period, period_length_days, current_prev_next
+from ..models.tz_utils import get_local_today, get_local_day_boundaries
+
+
+class FusionClockPeriodPicker(models.TransientModel):
+    """Pick a pay-period window and open the attendance list filtered to it.
+
+    Defaults to the current pay period. Changing the start auto-fills the end
+    to one pay period later (two weeks by default); the end stays editable so a
+    fully custom range can be entered too.
+    """
+    _name = 'fusion.clock.period.picker'
+    _description = 'Bi-Weekly Period Picker'
+
+    date_start = fields.Date(string='Period Start', required=True,
+                             default=lambda self: self._fclk_default_window()[0])
+    date_end = fields.Date(string='Period End', required=True,
+                           default=lambda self: self._fclk_default_window()[1])
+
+    def _fclk_config(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        return (ICP.get_param('fusion_clock.pay_period_type', 'biweekly'),
+                ICP.get_param('fusion_clock.pay_period_start', ''))
+
+    def _fclk_default_window(self):
+        frequency, anchor = self._fclk_config()
+        return current_prev_next(frequency, anchor, get_local_today(self.env))['current']
+
+    @api.onchange('date_start')
+    def _onchange_date_start(self):
+        if not self.date_start:
+            return
+        frequency, anchor = self._fclk_config()
+        length = period_length_days(frequency)
+        if length:
+            self.date_end = self.date_start + timedelta(days=length - 1)
+        else:
+            self.date_end = compute_pay_period(frequency, anchor, self.date_start)[1]
+
+    @api.constrains('date_start', 'date_end')
+    def _check_dates(self):
+        for rec in self:
+            if rec.date_start and rec.date_end and rec.date_end < rec.date_start:
+                raise ValidationError(_("Period end cannot be before period start."))
+
+    def action_apply(self):
+        self.ensure_one()
+        start_utc, _dummy = get_local_day_boundaries(self.env, self.date_start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, self.date_end)
+        return {
+            'type': 'ir.actions.act_window',
+            'name': _("Attendances · %s – %s") % (self.date_start, self.date_end),
+            'res_model': 'hr.attendance',
+            'view_mode': 'list,form',
+            'domain': ['&',
+                       ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                       ('check_in', '<', fields.Datetime.to_string(end_excl_utc))],
+            'target': 'current',
+        }

fusion_portal/README.md

@@ -79,7 +79,7 @@ This module integrates with the `fusion_claims` module to provide a seamless wor
 
 1. **Copy the module** to your Odoo addons directory:
    ```bash
-   cp -r fusion_authorizer_portal /path/to/odoo/custom-addons/
+   cp -r fusion_portal /path/to/odoo/custom-addons/
    ```
 
 2. **Update the apps list** in Odoo:
@@ -627,14 +627,14 @@ Enable debug logging for this module:
 
 ```python
 import logging
-_logger = logging.getLogger('fusion_authorizer_portal')
+_logger = logging.getLogger('fusion_portal')
 _logger.setLevel(logging.DEBUG)
 ```
 
 Or in Odoo configuration:
 ```ini
 [options]
-log_handler = fusion_authorizer_portal:DEBUG
+log_handler = fusion_portal:DEBUG
 ```
 
 ---
@@ -671,7 +671,7 @@ log_handler = fusion_authorizer_portal:DEBUG
 ## File Structure
 
 ```
-fusion_authorizer_portal/
+fusion_portal/
 ├── __init__.py
 ├── __manifest__.py
 ├── README.md

fusion_portal/__init__.py

@@ -13,14 +13,14 @@ def _reactivate_views(env):
     This hook prevents that from silently breaking the portal.
     """
     views = env['ir.ui.view'].sudo().search([
-        ('key', 'like', 'fusion_authorizer_portal.%'),
+        ('key', 'like', 'fusion_portal.%'),
         ('active', '=', False),
     ])
     if views:
         views.write({'active': True})
         env.cr.execute("""
             SELECT key FROM ir_ui_view
-            WHERE key LIKE 'fusion_authorizer_portal.%%'
+            WHERE key LIKE 'fusion_portal.%%'
               AND id = ANY(%s)
         """, [views.ids])
         keys = [r[0] for r in env.cr.fetchall()]