fix(fusion_helpdesk): close IDOR + reliability gaps from code review

- P0 IDOR: escape LIKE wildcards in build_scope_domain + normalise emails (email_normalize) on both write and scope sides, so a self-set email of '%' can no longer match every ticket in a deployment (+2 regression tests).
- Convert XML-RPC ProtocolError (central 502/503/429) to _RemoteError instead of a raw 500.
- _resolve_author: log + post as service account on failure instead of silently impersonating the ticket customer.
- _mark_seen now best-effort (runs after the remote post) so a bookkeeping failure can't report a successful reply as failed (no duplicate replies).
- Attachment loop catches network errors + reports failed count (no duplicate-ticket trap); dialog surfaces failures.
- console.error in JS catches for diagnosability.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitignore

@@ -15,4 +15,3 @@ __pycache__/
 
 # Local-only diagnostic logs from test runs
 _test_*.log
-.superpowers/

AGENTS.md

@@ -77,7 +77,6 @@ Odoo content-hashes the compiled bundle URL (`/web/assets/<hash>/...`). When CSS
 
 ## Cursor-Managed Modules
 - **fusion_clock** is currently being modified in Cursor — always read files fresh before editing, don't assume you know the current state
-- **fusion_repairs** — status and deferred work: [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) (bundles 1–11 shipped at `19.0.2.2.4`; not production-deployed)
 
 ## Workflow
 - Local dev: `docker exec odoo-dev-app odoo -d fusion-dev -u <module> --stop-after-init`

CLAUDE.md

@@ -13,7 +13,7 @@
 4. **HTTP routes**: `type="jsonrpc"` — NOT `type="json"` (deprecated).
 5. **res.config.settings**: Only boolean/integer/float/char/selection/many2one/datetime. NO Date fields.
    **`config_parameter=` Boolean fields don't round-trip `False` as a string.** Odoo's `set_values()` calls `IrConfigParameter.set_param(key, value)`, and `set_param` deletes the row when `value` is falsy (False / None / empty). So writing `False` to a Boolean config field means the param no longer exists in `ir_config_parameter`; a subsequent `get_param(key)` returns the *default* (Python `False`), not `'False'`. Test like `self.assertFalse(ICP.get_param('...'))` — never `assertEqual(..., 'False')`. (Integer/Float/Char go through `repr(value)` / strip, so they DO persist as strings — `'90'`, `'0'`, etc.) Source: `odoo/addons/base/models/res_config.py::set_values` and `ir_config_parameter.py::set_param`.
-6. **res.groups**: NO `users` field, NO `category_id` field. **The Odoo 19 replacement for `category_id` is `res.groups.privilege`.** To make a module's groups appear as application-access dropdowns on the user form (Settings → Users → *Application Accesses*) instead of only in developer mode: define an `ir.module.category`, a `res.groups.privilege` (with `category_id` → that category), and set each group's `privilege_id` → that privilege. Groups under one privilege that form an `implied_ids` chain render as a single role dropdown; a standalone group in its own privilege renders as a separate row under the same category header. Verified in `fusion_clock/security/security.xml`; mirrors `fusion_plating`/`fusion_tasks`.
+6. **res.groups**: NO `users` field, NO `category_id` field.
    **res.users**: field was renamed `groups_id` → `group_ids` (also `all_group_ids` for implied). The plural form is gone; using `groups_id` raises `ValueError: Invalid field 'groups_id' in 'res.users'`.
    **`ir.ui.view`**: same rename — view-level visibility gating uses `group_ids`, not `groups_id`. A record like `<field name="groups_id" eval="[(4, ref('base.group_system'))]"/>` on an `ir.ui.view` raises `ValueError: Invalid field 'groups_id' in 'ir.ui.view'` at module install. (The XML *attribute* `groups="base.group_system"` on form elements like `<page>`, `<button>`, `<field>` is unrelated and still works.)
    **`ir.rule` `groups` field is additive, not restrictive.** A rule with `groups=[some_group]` applies ONLY to users in that group — it does NOT restrict non-members. So `domain_force=[(1,'=',1)]` + `groups=[base.group_system]` does NOT mean "only admins see rows"; it means "admins see all rows (and the rule is silent on everyone else)". Non-admins are gated by the ACL (`ir.model.access.csv`), not the rule. To truly restrict by group at the rule layer, pair a global rule (`groups=[]`, `domain_force=[(0,'=',1)]` = block-all baseline) with a group-scoped allow rule. Default to letting the ACL do the gating; use rules for row-level filters that ACLs cannot express.
@@ -33,8 +33,6 @@
 
 15. **There is NO `sale.subscription` model in Odoo 19** (Enterprise `sale_subscription`). A subscription is a **`sale.order`** with `is_subscription=True`, `plan_id` → **`sale.subscription.plan`** (the recurrence), plus `subscription_state` / `next_invoice_date` / `recurring_monthly`. Any Many2one or relation that targets "a subscription" must point at `sale.order` (filter `domain=[('is_subscription','=',True)]`) — **not** `sale.subscription`, which does not exist and fails at install. The surviving `sale.subscription.*` records are only the plan + wizards/reports (`sale.subscription.plan`, `sale.subscription.report`, `sale.subscription.change.customer.wizard`, `sale.subscription.close.reason.wizard`). Verified on live `nexamain` (odoo-nexa, 19.0): `SELECT model FROM ir_model WHERE model LIKE 'sale.subscription%'`.
 
-16. **Renaming a module's technical name needs a DB rename, not just a folder rename.** The technical name is baked into the database: `ir_module_module.name`, every external ID in `ir_model_data.module`, each view's `ir_ui_view.key` prefix, and the `ir_module_module_dependency.name` rows of every module that depends on it. Rename only the folder + in-code references and Odoo treats the new name as a fresh uninstalled module — installing it **duplicates** groups/templates/menus and **orphans** all existing data. On every DB that already has it installed, run an in-place SQL rename (the 4 tables above) **before** `-u <newname>`; a fresh DB needs nothing. Reference script + full rationale: [`fusion_portal/rename_module.sql`](fusion_portal/rename_module.sql) (written for the `fusion_authorizer_portal` → `fusion_portal` rename). Also update cross-module `depends`, `inherit_id="<old>.view"`, `t-call`, `env.ref('<old>.xmlid')`, asset paths (`<old>/static/...`), and `from odoo.addons.<old>... import`.
-
 ## Card Styling — Copy Odoo's Kanban Pattern
 Don't rely on `var(--bs-border-color)` or `var(--bs-body-bg)` for card surfaces — they drift between themes/addons and often render **invisible**. Odoo's own kanban (`.o_kanban_record`) uses **explicit hex** values:
 ```css
@@ -94,9 +92,8 @@ Odoo content-hashes the compiled bundle URL (`/web/assets/<hash>/...`). When CSS
 - Canadian English for all user-facing text
 - Currency: `$` sign with Monetary fields + currency_id
 
-## Module-Specific Notes
-- **fusion_clock** — developed in **Claude Code** (no longer Cursor; no concurrent-editing conflicts). Changed a lot recently (NFC kiosk: tap-to-clock, enrollment + program-from-unknown-tap, manager page, sounds, screen lock, guided profile-photo capture, faster animations). Still read files fresh before editing rather than assuming the layout. Live on entech (`odoo-entech` / LXC 111 on `pve-worker5`).
-- **fusion_repairs** — read [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) before feature work. **Version `19.0.2.2.4`.** Bundles 1–11 shipped in repo (intake, portals, dashboard, pricing, flowcharts, parts/PO). **Not production-deployed** to Westin as of 2026-05-27. Local: `docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init`. Outstanding: RingCentral SMS, C2 history sidebar UI, office follow-up crons (config keys only), `tests/`, more flowchart content, sales-rep dashboard tile in `fusion_portal`.
+## Cursor-Managed Modules
+- **fusion_clock** is currently being modified in Cursor — always read files fresh before editing, don't assume you know the current state
 
 ## Workflow
 - Local dev: `docker exec odoo-modsdev-app odoo -d fusion-dev -u <module> --stop-after-init`
@@ -137,98 +134,3 @@ PGPASSWORD='a09e12e0995dc29446631fa458f3d4b3' psql -h 100.74.28.73 -p 5433 -U po
 - `fusionapps.issues` — known issues and fixes
 - `fusionapps.code_snippets` — reference code
 - `fusionapps.quick_commands` — deployment and admin commands
-
-## Fusion Helpdesk — Customer Follow-up + Embedded Inbox (deployment + handoff)
-
-Two modules: **`fusion_helpdesk`** (client — runs on each client deployment, e.g. entech)
-and **`fusion_helpdesk_central`** (runs on the central Odoo = nexa). The client forwards
-tickets to central over **XML-RPC**; central find-or-creates the customer partner +
-follower; the client shows a server-side-scoped "My Tickets" inbox + systray unread badge.
-
-### Where each runs / how to deploy
-- **Central = nexa** (`erp.nexasystems.ca`, VM 315 on pve-worker1, Docker, DB `nexamain`).
-  Source on host: `/opt/odoo/custom-addons/fusion_helpdesk_central`. Upgrade (brief downtime):
-  ```bash
-  ssh pve-worker1 "qm guest exec 315 --timeout 590 -- bash -c 'docker stop odoo-nexa-app; docker run --rm --network odoo_odoo-network -v odoo_odoo-data:/var/lib/odoo -v /opt/odoo/custom-addons:/mnt/extra-addons -v /opt/odoo/enterprise-addons:/mnt/enterprise-addons -v /opt/odoo/odoo.conf:/etc/odoo/odoo.conf odoo-nexa:19 odoo -d nexamain -u fusion_helpdesk_central --stop-after-init --http-port=0 --gevent-port=0 > /tmp/up.log 2>&1; docker start odoo-nexa-app'"
-  ```
-  Use `;` (not `&&`) before `docker start` so the app ALWAYS restarts even if the upgrade
-  fails. nexa `odoo.conf` has `log_level=warn`, so test/INFO lines are suppressed — verify
-  the result via DB query, not the upgrade log.
-- **Client = entech** (LXC 111 on pve-worker5, **native systemd `odoo.service`**, DB `admin`,
-  config `/etc/odoo/odoo.conf`, source `/mnt/extra-addons/custom/fusion_helpdesk`). No host
-  bind mount — get files in with `scp` to pve-worker5 then `pct push 111 <file> <dest>`.
-  Upgrade as the `odoo` user (NOT root):
-  ```bash
-  pct exec 111 -- bash -lc "systemctl stop odoo; runuser -u odoo -- /usr/bin/odoo --config /etc/odoo/odoo.conf -d admin -u fusion_helpdesk --stop-after-init --http-port=0 --gevent-port=0 --logfile=/tmp/up.log; systemctl start odoo"
-  ```
-  **Backup dir MUST live OUTSIDE the addons path** (e.g. `/root/`). A dir named `*.bak.*`
-  *inside* `/mnt/extra-addons/custom` makes Odoo try to load it as a module →
-  `FileNotFoundError: Invalid module name: fusion_helpdesk.bak.predeploy` → whole registry
-  load fails. (Learned the hard way; auto-rollback restored it.) Current rollback copy:
-  `/root/fh_bak_predeploy`.
-
-### REQUIRED prerequisite on the central service account (easy to miss)
-The keystone passes `partner_email`, so central find-or-creates the partner. The XML-RPC
-service account (**`support@nexasystems.ca`, uid 33** on nexa) MUST have the **Contact
-Creation** group (`base.group_partner_manager`). Without it, `helpdesk.ticket.create`
-faults with *"not allowed to create 'Contact' (res.partner)"* for any reporter who isn't
-already a contact. Granted on nexa 2026-05-27. **Every new client deployment needs this
-grant on the central account.**
-
-### Testing lesson
-Client logic (scope domain, seen model, vals, `_norm_email`) is unit-tested in
-`fusion_helpdesk/tests/` and runs on local Community (`-d modsdev`). **Smoke tests must
-call the controller endpoints, not re-implement their logic** — the Phase 6 smoke test
-replicated `build_scope_domain` directly and so missed a `NameError` (`_norm_email`
-referenced but never imported) that broke every inbox endpoint. Run
-`docker exec odoo-modsdev-app python3 -m pyflakes <file>` after editing controllers — it
-catches undefined names instantly.
-
-### Two non-obvious gotchas the first ship hit (fixed 2026-05-27 afternoon)
-1. **`group_reporter_admin` had zero members on install** — `res.groups` doesn't auto-grant
-   to the deployment admin, so the "All (deployment)" toggle never appeared and admins were
-   stuck with the per-user `partner_email` filter. Fix lives in
-   `fusion_helpdesk/security/fusion_helpdesk_groups.xml`: extend `base.group_system.implied_ids`
-   with `(4, ref('fusion_helpdesk.group_reporter_admin'))`. The (4, id) tuple is additive — it
-   never replaces base's existing implied groups. Verified live: all six entech
-   `base.group_system` members now return True for
-   `has_group('fusion_helpdesk.group_reporter_admin')` after the upgrade.
-2. **Historical tickets had NULL `x_fc_client_label` + NULL `partner_email`** — anything
-   created before the customer-followup ship was invisible in "My Tickets" because the scope
-   filter requires both fields. The reporter identity was preserved only in the description
-   HTML (the diag block's "User" row). Backfill recipe (50 ENTECH + 1 WESTIN, all in one
-   transaction):
-   ```sql
-   UPDATE helpdesk_ticket
-   SET x_fc_client_label = substring(name from '^\[([A-Z]+)\]'),
-       partner_email = lower(substring(
-         substring(description from 'User</td><td[^>]*><code>([^<]+)</code>')
-         from ', ([^)]+)\)')),
-       partner_name = regexp_replace(
-         substring(description from 'User</td><td[^>]*><code>([^<]+)</code>'),
-         ' \(#\d+, [^)]+\)$', '')
-   WHERE name ~ '^\[[A-Z]+\]'
-     AND description ~ 'User</td>'
-     AND x_fc_client_label IS NULL;
-   ```
-   Safe: SQL UPDATE bypasses the central `helpdesk.ticket.create` override, so no duplicate
-   ack emails. Per-deployment label inferred from the `[XXX]` name prefix the old code was
-   already adding. Note: users whose `login != email` (e.g. uid=2 on entech has login
-   `gsinghpal@outlook.com` and email `gs@nexasystems.ca`) get tagged with their *login* in
-   backfill — they won't see their old tickets in "Mine", only in "All". New tickets are
-   tagged with the profile email (`user.email` first, `user.login` fallback).
-
-### STATUS (handoff 2026-05-27 afternoon)
-- **Merged to `main`** as squash commit `6c15a7b1` (initial ship). Today's followup is the
-  group/backfill fix described above — committed separately.
-- **Deployed live**: nexa `fusion_helpdesk_central` **19.0.1.1.0**; entech `fusion_helpdesk`
-  **19.0.1.5.0** (bumped from 19.0.1.4.1 for the implied_ids fix). Both services healthy.
-- **Historical entech tickets backfilled** on nexa (51 rows: 50 ENTECH + 1 WESTIN).
-- **Smoke-tested live end-to-end** (entech→nexa): partner resolved + follower + `ENTECH`
-  label, branded ack email queued, support reply visible in thread, inbox scope finds own
-  ticket, no cross-deployment leak. The "Mine" view for non-admins and the "All" view for
-  the entech owner both populate as expected.
-- **Browser confirmation**: hard-refresh entech (DevTools → Empty Cache and Hard Reload),
-  open the systray helpdesk dialog. The Mine/All toggle appears for the owner; "All" shows
-  all 50 ENTECH tickets, "Mine" shows the count matching the owner's profile email.
-  Tracebacks live in `/var/log/odoo/odoo-server.log` on entech (LXC 111 / pve-worker5).

Work in Progress/fusion_quotations/__manifest__.py

@@ -28,7 +28,7 @@
         'website',
         'mail',
         'fusion_claims',
-        'fusion_portal',
+        'fusion_authorizer_portal',
     ],
     'data': [
         'security/security.xml',

docs/plans/fusion_maintenance_brainstorm.md

@@ -1,194 +0,0 @@
-# fusion_maintenance — Brainstorm & Handoff Brief
-
-> Status: **research/brainstorm only — no code, no final decisions.** Written from a
-> Claude Code *web* session that could **not** reach the private network (no Tailscale,
-> no docker daemon, Supabase KB unreachable). Resume from a **Tailscale-connected env**
-> (dev box or a host that can reach Westin production) and do the live inspection in
-> Step 0 **before** committing to the design.
-
-## Goal (user's words, paraphrased)
-Automated maintenance follow-ups for mobility/accessibility equipment we've sold, to turn
-service into **recurring revenue**. Reminder emails → client books maintenance → booking
-happens in **real time** and **lands in our calendar**. Leverage Odoo Enterprise's
-appointment system. Decide whether this lives in `fusion_repairs` or a new module — the
-result must be **seamless and production-ready**.
-
-## Decisions locked with the user (this session)
-- **Same DB**: `fusion_claims` + `fusion_repairs` run on one database → new module may depend on both.
-- **Enterprise `appointment` is available** → build real-time booking ON it (`appointment.type` /
-  `appointment.slot` / `calendar.event`), do **not** hand-roll a calendar.
-- **Public self-serve booking** → reminder email carries a token link to a no-login slot picker
-  (extend the existing `/repairs/maintenance/book/<token>` pattern). Elderly clients shouldn't log in.
-- **Target box for grounding = Westin production** (where `fusion_claims` runs day-to-day).
-
-## Key findings from repo exploration
-
-### `fusion_repairs` (v19.0.2.2.6) ALREADY has a maintenance engine — reuse it, don't fork
-- `fusion.repair.maintenance.contract`: interval, due/last-service dates, state machine.
-  Auto-spawned on SO confirm when `product.template.x_fc_maintenance_interval_months > 0`.
-- Daily reminder cron `cron_maintenance_due_reminders` → 30/7/1-day bands → branded email
-  `email_template_maintenance_due_reminder` with tokenized link `/repairs/maintenance/book/<token>`.
-- Booking controller: `controllers/portal_maintenance_booking.py` — **single date-confirm form,
-  NO slot availability, NO conflict check, NO calendar event.** ← this is the real gap.
-- Contract **roll-forward** on technician-task completion (`next_due_date += interval`).
-- `fusion.repair.service.plan.subscription`: pre-paid visit plans (recurring-revenue primitive).
-- Deps: `repair, maintenance, sale_management, stock, purchase, website, portal, fusion_tasks,
-  fusion_poynt, fusion_authorizer_portal`. ~8.3k LOC, 25+ models.
-
-### `fusion_claims` (v19.0.9.2.0) is the ideal trigger source
-- Claim container = `sale.order` (`x_fc_sale_type`: adp, odsp, wsib, insurance, march_of_dimes, …).
-- **Equipment unit** = `sale.order.line.x_fc_serial_number` + `product_id`.
-- **Equipment category** = `fusion.adp.device.code.device_type` (wheelchair, walker, hospital bed,
-  stair lift, porch lift, custom ramp, …) — matches the user's "sale groups".
-- **Schedule anchors**: `x_fc_adp_delivery_date`, `x_fc_service_start_date`; gate on `x_fc_adp_approved`.
-- Customer = `sale.order.partner_id`; prescriber = `x_fc_authorizer_id`.
-- Already depends on `calendar, fusion_tasks, ai, fusion_ringcentral`.
-
-## Proposed architecture (PENDING live verification)
-**New module `fusion_maintenance`** depending on `fusion_repairs`, `fusion_claims`, `appointment`.
-Reuses the existing contract/reminder/roll-forward engine; adds the 3 genuinely-missing pieces:
-
-1. **`fusion.maintenance.policy`** (ops-configurable, no code per category):
-   `device_type` → `interval_months`, reminder bands, `service_product_id` (priced visit),
-   `appointment_type_id`, required technician skill. Turns "stair lift = 6 mo, $X" into data.
-2. **Claims bridge** (daily cron): scan `fusion_claims` `sale.order.line` for delivered+approved
-   devices whose `device_type` matches an active policy → ensure a maintenance contract exists,
-   anchored at `delivery_date + interval`. Idempotent (key on serial / sale-line). Extend the
-   reused contract with `x_fc_source_claim_line_id`, `x_fc_device_type`, `x_fc_policy_id` so the
-   repairs path and claims path both feed **one** contract model.
-3. **Real-time booking on `appointment`**: token link → slot picker backed by `appointment.type`
-   (partner pre-resolved from token, no login). Slot pick → real `calendar.event` → hook spawns
-   `repair.order` + technician task, assigns by skill/zone, advances reminder band, rolls contract
-   forward.
-
-**Recurring revenue**: each policy carries `service_product_id` → booked visit drafts a priced
-SO/invoice; optional pre-paid annual plan via existing `service.plan.subscription`; optional
-door payment via existing `fusion_poynt`.
-
-## STEP 0 — run on Westin production FIRST (grounding before any decision)
-> Replace `APP`/`DB` with the real Westin container + database. CLAUDE.md rule #1: never code
-> from memory — read the real Enterprise `appointment` source before building the booking layer.
-
-```bash
-# RESOLVED 2026-06-02 — Westin Odoo prod migrated OFF Digital Ocean onto the on-prem Proxmox
-# cluster. Old DO IPs (152.42.146.204 / 178.128.229.92) are DEAD (:22 timeout). Live box:
-# host `odoo-westin` = 192.168.1.40 via the `supabase-prod` Tailscale jump (Windows OpenSSH
-# ProxyCommand → run `ssh odoo-westin ...` from PowerShell). App container `odoo-dev-app`
-# (odoo:19, Enterprise); DB container `odoo-dev-db`; DB `westin-v19`; user `odoo` (local-socket
-# trust inside odoo-dev-db). Enterprise addons → /mnt/enterprise-addons, custom → /mnt/extra-addons.
-#   SQL:      ssh odoo-westin 'docker exec odoo-dev-db  psql -U odoo -d westin-v19 -c "..."'
-#   FS read:  ssh odoo-westin 'docker exec odoo-dev-app sed -n 1,160p /mnt/enterprise-addons/...'
-APP=odoo-dev-app ; DB=westin-v19 ; DBC=odoo-dev-db
-
-# 1) Install matrix — confirm same-DB + Enterprise appointment present + versions
-docker exec "$APP" psql -U odoo -d "$DB" -c \
-"SELECT name,state,latest_version FROM ir_module_module \
- WHERE name IN ('fusion_claims','fusion_repairs','fusion_maintenance','calendar','maintenance','repair') \
-    OR name LIKE 'appointment%' ORDER BY name;"
-
-# 2) Real device_type distribution (drives per-category policies)
-docker exec "$APP" psql -U odoo -d "$DB" -c \
-"SELECT device_type, count(*) FROM fusion_adp_device_code GROUP BY device_type ORDER BY 2 DESC;"
-
-# 3) Locate the Enterprise appointment source (read, don't guess the API)
-docker exec "$APP" bash -lc 'ls -d /mnt/enterprise-addons/appointment 2>/dev/null || \
-  find / -maxdepth 6 -type d -name appointment 2>/dev/null | grep -i addons | head'
-
-# 4) Appointment model surface to build booking on (adjust path from #3)
-docker exec "$APP" cat <appointment_path>/models/appointment_type.py | head -160
-docker exec "$APP" ls <appointment_path>/controllers/    # find the public booking controller
-
-# 5) How fusion_repairs maintenance contracts already look in live data
-docker exec "$APP" psql -U odoo -d "$DB" -c \
-"SELECT state, count(*) FROM fusion_repair_maintenance_contract GROUP BY state;"
-```
-
-## STEP 0 — RESULTS (ran 2026-06-02 against Westin prod `westin-v19`)
-> Grounding facts only — **no design decisions made**. These correct several assumptions above.
-
-**Connection (resolved):** host `odoo-westin` (192.168.1.40) via the `supabase-prod` Tailscale jump.
-App container `odoo-dev-app` (odoo:19, Enterprise), DB container `odoo-dev-db`, DB `westin-v19`,
-user `odoo`. Old Digital Ocean boxes are DEAD — Westin migrated on-prem.
-
-**1) Install matrix** — `appointment` **19.0.1.3 installed** (+ `appointment_account_payment`,
-`_crm`, `_hr`, `_microsoft_calendar`, `_sms`). All deps present: `calendar`, `maintenance`, `repair`,
-`sale_management`, `portal`, `website`, `resource`, `phone_validation`, `web_gantt`. `fusion_claims`
-**19.0.9.2.0 installed**. `fusion_repairs` and `fusion_maintenance` are **absent entirely** (no
-records). → a module depending on `appointment` installs cleanly; "reuse the fusion_repairs engine"
-means *deploy fusion_repairs to Westin first* (heavy) **or** own a lean contract model here. Note
-Odoo's native `maintenance` (CMMS) is installed — an under-considered third reuse option.
-
-**2) device_type** — 119 distinct values, but `fusion.adp.device.code` is the ADP billing-code
-**CATALOG** (`_order='device_type, device_code'`), so counts are catalog codes per type, **NOT units
-installed**. Top entries are seating COMPONENTS (Seat Cushion 564, Back Support 375, Headrest 193).
-The maintainable **equipment classes** ≈ wheelchairs (manual + power tilt), power bases, power
-scooters, wheeled walkers / walking frames, paediatric standing frames, specialty strollers (~6-8
-clean categories). → `device_type` can't be a 1:1 policy key (119 values, mostly parts); needs a
-grouping/whitelist. **Real install base sized on `sale.order.line`** (`x_fc_adp_device_type` [stored compute from
-product's `x_fc_adp_device_code_id.device_type`], `x_fc_serial_number`, `x_fc_adp_approved`; delivery
-dates `x_fc_adp_delivery_date` / `x_fc_service_start_date`) — **see the Install-base sizing block below.**
-
-**3) + 4) Enterprise appointment source** — `/mnt/enterprise-addons/appointment`. The no-login token
-slot-picker is **mostly NATIVE — don't hand-roll it**: public booking (`auth="public"`), invite
-tokens (`appointment.invite`, `/appointment/<id>?…invite_token`), live availability
-(`/appointment/<id>/update_available_slots`, jsonrpc/public), slot submit → real `calendar.event`
-(`/appointment/<id>/submit`), auto/manual staff+resource assignment, capacity, booked/cancelled mail
-templates. Model `appointment.type`; controller `controllers/appointment.py`. → the module mainly
-needs to: seed an `appointment.type` per category, drop a partner-bound invite link into the reminder
-email, and hook `calendar.event` create → spawn the service task + advance the contract.
-`appointment_account_payment` is installed → native pay-to-book is on the table for the revenue mechanic.
-
-**5) Maintenance-contract state** — `relation "fusion_repair_maintenance_contract" does not exist`
-→ confirms the fusion_repairs maintenance engine is **not** on Westin.
-
-**Headline correction:** Westin's ADP data has **zero** stair lifts / porch lifts / ramps / hospital
-beds — those belong to the fusion_repairs / EN-Tech (mobility) domain. Westin's recurring-revenue
-play is **wheelchairs / power bases / scooters / walkers / seating**. Open questions updated below.
-
-**Install-base sizing (ran 2026-06-02 — the REAL units, complementing #2's catalog counts).** Big tell:
-serial numbers are captured **~only on actual equipment** (every part/option/mod device_type shows 0
-serials), so `x_fc_serial_number` is already a de-facto "trackable unit" marker — convenient, because the
-bridge's idempotency key is the serial.
-
-- **Addressable base ≈ 138 serial-tracked units across ~136 customers** (all funders). By equipment
-  family (serial-tracked / of which delivered): **Walkers & walking frames 68 (55)**, **Wheelchairs 45
-  (40)**, **Power bases 7 (6)**, **Scooters 4 (3)**, plus **14 units with no ADP device_type** (likely
-  private-pay) and 1 misc.
-- **Funder split** (serial-tracked): adp 109, direct_private 13, adp_odsp 10, march_of_dimes 7;
-  wsib / insurance / standalone-odsp / rental / regular = **0 serials**. → an ADP-only gate
-  (`x_fc_adp_approved`) captures ~110 and **misses ~28** real units. The bridge should likely key on
-  **serial (funder-agnostic)**, not approval.
-- **Two data gaps the design must absorb:** (a) the 14 serial units with no ADP device_type can't be
-  classified by a device_type→policy map → need a product-level or manual category override; (b) non-ADP
-  units have no `x_fc_adp_delivery_date` → the contract anchor (`delivery_date + interval`) needs a
-  fallback (invoice/order date).
-- Deliveries span **2022-10 → 2026-05** (active program) — history to anchor intervals + a live pipeline.
-- Top serial-tracked device_types: Adult Wheeled Walker Type 3 (47), Adult Manual Dynamic Tilt Type 5
-  Wheelchair (23), Adult Lightweight Performance Type 3 (11), Adult Lightweight Standard Type 1 (10),
-  Adult Wheeled Walker Type 2 (9), Adult Power Base Type 3 (5), Power Scooter (3). (1 line ≈ 1 unit;
-  equipment device_types are 1 base line each.)
-
-## Open questions to resolve with the user (in the connected session)
-- **MVP cut**: which categories first? Sizing surfaces a real tension: **by volume** it's walkers (68) +
-  wheelchairs (45) ≈ 82% of the base, but rollators/walkers are mechanically low-service; **by
-  service-revenue-per-unit** the targets are the powered units (power bases 7 + scooters 4 + power
-  wheelchairs) — high maintenance value but only ~11–15 units today. Volume vs. margin — or phase it
-  (powered units first to prove the booking loop, then walkers/manual chairs for reach)?
-- **Revenue mechanic**: auto-draft a priced SO/invoice per booking, vs. pre-paid annual plan, vs.
-  pay-at-door via Poynt — which is the default?
-- **Technician assignment**: auto-assign by skill+zone at booking time, or leave dispatch manual
-  (fusion_tasks) and only reserve the calendar slot?
-- **Booking-portal strategy**: Step 0 shows Enterprise `appointment` already ships public,
-  token-based real-time booking (`appointment.invite` + `/appointment/<id>/...`, `auth="public"`).
-  Ride on that (generate an invite per reminder, partner pre-bound, no login) vs. a custom
-  `/maintenance/book/<token>` route? (The `/repairs/...` route is moot — fusion_repairs isn't on Westin.)
-
-## Applicable CLAUDE.md rules (don't relearn the hard way)
-- Rule #1: read reference files from the running instance before coding (esp. the appointment source).
-- Odoo 19: `res.users.group_ids` (not `groups_id`); `ir.cron` has no `numbercall`; declarative
-  `models.Constraint`/`models.Index`; HTTP routes `type="jsonrpc"`; OWL uses standalone `rpc()`.
-- No `sale.subscription` model exists — a subscription is a `sale.order` with `is_subscription=True`.
-- New fields use `x_fc_` prefix; Canadian English; `$` Monetary + `currency_id`.
-- Route attachment opens through `fusion_pdf_preview` (`att.action_fusion_preview(...)`).
-- Tests need `--http-port=0 --gevent-port=0`. Westin prod is Enterprise; local dev is Community
-  (so the appointment-dependent module can't be installed/tested on `odoo-modsdev-app`).

docs/superpowers/2026-05-27-fusion-billing-session-handoff.md

@@ -1,166 +0,0 @@
-# fusion_centralize_billing — Session Handoff (2026-05-27)
-
-Resume point for the centralized-billing initiative. Read this first, then continue
-from **"Decision pending"** below.
-
-## Where we are
-
-- **Sub-project #1 (core billing engine): DONE and on `main`** (tip `d770c0c3`, pushed to
-  GitHub + Gitea).
-  - 11/11 plan tasks, TDD, Opus code-reviewed; all Critical/High bugs fixed
-    (cross-billing cron → match by `plan_id`; `/usage` authz vs IDOR; input validation →
-    4xx not 500; correct billing-period window; idempotency scoped to `(sub, metric, key)`;
-    webhook sign-exact-bytes + event-id + SSRF guard).
-  - **39 tests green on Odoo 19 Enterprise.**
-  - Note: the 14 billing commits were rebased off the old login-audit/helpdesk stack and
-    landed cleanly on `main`.
-
-- **`fusion_login_audit`: also landed on `main`** (2026-05-27). Its 19 commits were rebased
-  onto `main` and the `feat/fusion-login-audit` branch was deleted. This also restored
-  Odoo-19 rules #9–14 in `CLAUDE.md`, which had gone missing on `main` when billing landed
-  alone (they were authored alongside login_audit and never existed on the old base).
-  - A concurrent `feat/helpdesk-customer-followup` session still carries pre-landing copies
-    of the billing + login_audit commits; when it merges, replay its helpdesk-only commits
-    onto `main`.
-
-- **Reference docs (on `main`):**
-  - Spec: `docs/superpowers/specs/2026-05-27-nexa-billing-centralized-design.md`
-  - Core plan: `docs/superpowers/plans/2026-05-27-fusion-centralize-billing-core.md`
-
-## Next: sub-project #2 — NexaCloud adapter + dual-run reconciliation
-
-Per spec §12, each sub-project is its own spec → plan → build cycle. #2 decomposes into
-four chunks (dependency order):
-
-| Chunk | What | Risk |
-|-------|------|------|
-| **2a — Mapping + importer** | Read `nexacloud` DB → create `res.partner` + `account.link`, `product.template` + subscription plans, one subscription `sale.order` per deployment | **Low** — read-only on NexaCloud, writes only into Odoo |
-| **2b — Usage metering wiring** | NexaCloud `usage_metering.py` pushes CPU-seconds → Odoo `/usage`; verify aggregation → draft invoice w/ quota + overage + HST | Edits NexaCloud code |
-| **2c — Control loop** | NexaCloud consumes Odoo's outbound webhooks (`invoice.payment_failed` → suspend via existing `network_isolation`/`throttle_checker`; `subscription.terminated` → deprovision) | Edits NexaCloud code |
-| **2d — Dual-run reconciliation** | `fusion.billing.reconciliation` diffs Odoo-computed vs NexaCloud-actual per customer/period for ≥ 1 cycle before any flip | Safety gate before flipping real billing |
-
-The core engine already built the *receiving* side (`/usage`, webhook engine, charge math).
-#2 is about **connecting NexaCloud to it and proving the numbers match before flipping.**
-
-## Decision pending (resume here)
-
-We were in the `superpowers:brainstorming` flow for #2 and stopped at: **which slice to
-start with?**
-
-- **(recommended) 2a — Mapping + importer** — lowest risk, foundation for everything else.
-- 2d — Reconciliation first (front-load the trust mechanism).
-- Full #2 design as one spec, then one plan.
-- Just write the #2 plan, no code this session.
-
-## Open questions to resolve before building #2
-
-- **Spec §15 Q2 — NexaCloud billing granularity:** confirm **one subscription per
-  deployment** (spec leans this way) vs one subscription per customer with deployment line
-  items.
-- **Access / environments needed:**
-  - Read access to the `nexacloud` DB schema (LXC 102 / its Postgres on LXC 201) to design
-    the importer mapping.
-  - A NexaCloud staging or safe path for 2b/2c (they edit live NexaCloud code).
-  - Test target for the Odoo side stays the odoo-trial Enterprise sandbox.
-- **Resolved already:** Stripe is one account (`acct_1ShlA9IkwUB1dVox`) for everything — no
-  account migration (spec §11 / §15 Q1). Branch strategy — land on `main`, branch new work
-  off `main`.
-
-## How to run / test
-
-- **Billing tests:** `bash scripts/fcb_test_on_trial.sh` from repo root → pass = `FCB_EXIT=0`
-  (~1–2 min). Syncs the module to the odoo-trial Enterprise sandbox (Proxmox VM 316, db
-  `trial`) and runs `--test-enable`. Local dev Odoo is Community and **cannot** install this
-  module.
-
-## Branch hygiene (lesson from this session)
-
-Cut each new feature branch from `main`, and land it before starting the next. For any
-cross-branch git surgery, use a **throwaway `git worktree`** — never switch the shared
-working dir's branch, because a concurrent session may be working on it.
-
----
-
-## UPDATE — sub-project #2 complete (2026-05-27, later session)
-
-All four chunks of #2 are now built. The brainstorm "which slice" question resolved to
-2a-first; everything else followed.
-
-**Done + on `main` in `Odoo-Modules` (fully tested on odoo-trial, suite `FCB_EXIT=0`):**
-- **2a — importer** (`fusion.billing.import.wizard`): read-only `psycopg2` reader split
-  from pure-Odoo writes; users→partners+links, plans→`cpu_seconds` charge catalog
-  (`plan_id` NULL), deployments→one **draft shadow** `sale.order` each with the flat price.
-  Shadow-safe by construction (draft + no token + NULL `plan_id`). Idempotent, dry-run,
-  Test-Connection guard, README runbook.
-- **2d — reconciliation** (`fusion.billing.reconciliation`): `_compute_reconciliation` +
-  `_reconcile_rows` (Odoo flat+overage vs NexaCloud actual, status match/delta), reader for
-  NexaCloud usage+invoice actuals, "Run Reconciliation" button. **Upsert key is
-  `(service, external_subscription_id, period)`** — per subscription, so a customer with
-  two deployments doesn't collide.
-- **/usage enabler**: `_api_record_usage` resolves a subscription by the source app's own
-  id (`x_fc_nexacloud_subscription_id`) so NexaCloud can push against shadow subs.
-- Core-engine bug fixed in passing: `charge.price_per_unit` is now `Float(16,6)` and
-  `_compute_billable` keeps 6-dp precision (was `Monetary`/cent-rounded → would under-bill
-  sub-cent rates and drift from NexaCloud's 4-dp amounts).
-
-**Code-complete in `Nexa-Cloud` (feature-flagged, NOT deployed, NOT integration-tested):**
-- **2b — usage push**: `services/odoo_billing_client.py` + a hook in `usage_metering.py`
-  posting cpu-seconds to Odoo `/usage`. **2c — control loop**:
-  `routers/odoo_billing.py` (`POST /api/v1/billing/webhooks/central`, HMAC-verified) +
-  `services/odoo_billing_integration.py` (suspend/restore/deprovision). All INERT unless
-  `ODOO_BILLING_ENABLED`. Implemented as NEW modules + edits to clean files only —
-  NexaCloud `main` had concurrent **Cursor uncommitted WIP** (`routers/billing.py`,
-  `scheduler.py`, `stripe_service.py`, `models/billing.py`, …) which was deliberately not
-  touched. Commits: `94542ec` + `956abb2` (only my files staged).
-
-**Deployment status (2026-05-27):**
-- **odoo-nexa (production `nexamain`): DEPLOYED** — `fusion_centralize_billing` (core + 2a
-  + 2d) **fresh-installed** (#1 had never actually been deployed here; `DIR_ABSENT` before).
-  `ir_module_module.state = installed`, `odoo-nexa-app` healthy. **INERT**: no
-  `nexacloud_dsn`, all charges `plan_id` NULL (rating cron no-op), no webhooks queued
-  (dispatch cron no-op), inbound API 401s with no key configured. Synced to
-  `/opt/odoo/custom-addons` + `-i` via the restart-safe recipe.
-- **NexaCloud (prod, `vps.nexasystems.ca` / 192.168.1.250): DEPLOYED — INERT.** Did NOT
-  use `./deploy.sh` (it `rsync --delete`s the working tree → would have shipped the
-  concurrent **uncommitted Cursor WIP** (7 files) AND wiped the gitignored prod `.env`
-  files). Instead deployed **surgically**: rsync of ONLY my 6 committed billing files (no
-  `--delete`; `.env` + Cursor's files untouched), `docker compose build backend`,
-  **boot-tested in a throwaway container** (`run --rm --no-deps backend python -c "import
-  app.main"` → BOOT_OK) before swapping, then `up -d backend`. `nexacloud-api` healthy,
-  `/health` OK. Feature OFF: `ODOO_BILLING_ENABLED` unset → `/billing/webhooks/central`
-  returns 404 and no usage is pushed. Activate later by setting `ODOO_BILLING_*` in
-  `/opt/nexacloud/.env` (+ compose env passthrough) once the Odoo side is wired.
-  **NOTE:** Cursor's 7-file WIP remains uncommitted locally and was never deployed — when
-  Cursor finishes, a normal `./deploy.sh` will ship it (and re-sync `.env`).
-
-**Dual-run stand-up results (2026-05-27) — STOPPED here for review, NOT flipped:**
-- Read-only role `odoo_billing_ro` created on nexacloud Postgres (192.168.1.50); DSN set in
-  `ir.config_parameter` `fusion_billing.nexacloud_dsn` on nexamain. Test Connection OK
-  (read 7 users / 232 plans / 87 subscriptions).
-- **Shadow import committed on nexamain**: 7 partners, 232 plan catalogs, 87 draft shadow
-  subscriptions; 0 skipped, 0 failed. (NOTE: importer takes ALL plans/subs regardless of
-  active status → ~464 NC-* products now in the prod ERP catalog. Consider filtering to
-  `is_active` plans / active subscriptions, or prune the shadow records — all reversible.)
-- **Reconciliation pass**: 9 (sub,period) rows had real billing activity → **2 match, 7
-  delta**, 0 failed. The 7 deltas, MUST resolve before flipping:
-  1. **One-off / non-subscription invoices** (3 rows: $877.99, $872.66, $32.20) — nexacloud
-     invoices with NULL subscription_id (fees/manual/credits); not modeled per-subscription.
-  2. **List-price ≠ actual-invoiced** (4 rows: Odoo $200/$50 vs actual ~$9.1x) — likely
-     proration or NexaCloud invoicing ≠ plan list price.
-- **2d bug surfaced (analysis-only, not safety):** `_reconcile_rows` with an empty
-  `subscription_external_id` matches NULL-field orders instead of skipping → spurious
-  delta rows for the one-off invoices. Add `if not sub_ext: skip`.
-
-**Remaining before go-live (gated on infra / ops you do):**
-1. Grant the read-only DSN (`fusion_billing.nexacloud_dsn`) — see the module README — then
-   Test Connection → dry-run import → review → real import.
-2. Run a dual-run cycle (Run Reconciliation), confirm all rows `match`.
-3. **2c needs the Odoo side to actually EMIT** `invoice.payment_failed` /
-   `payment_succeeded` / `subscription.terminated` webhooks with `deployment_id` in the
-   payload — that emission isn't wired yet (it belongs to the live billing flow). The
-   NexaCloud receiver is built to that contract; confirm the payload shape when wiring it.
-4. Integration-test + deploy the NexaCloud changes (no test harness in that repo).
-5. The flip: set `charge.plan_id`, attach Stripe tokens, confirm the shadow subs.
-
-Specs/plans: `specs/2026-05-27-nexacloud-billing-importer-design.md`,
-`specs/2026-05-27-nexacloud-reconciliation-design.md`, and the matching plans.

docs/superpowers/plans/2026-05-27-nexacloud-billing-importer.md

@@ -1,956 +0,0 @@
-# NexaCloud → Odoo Billing Importer (Sub-project #2a) — Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Build a one-time, re-runnable, read-only importer that backfills NexaCloud customers/plans/deployments into Odoo as a shadow copy (drafts, no charge) for dual-run reconciliation.
-
-**Architecture:** A `fusion.billing.import.wizard` transient model. `_read_nexacloud_rows()` opens a read-only `psycopg2` connection (DSN from `ir.config_parameter`) and returns plain row dicts — the only code touching NexaCloud. `_import_rows(data, dry_run)` is pure Odoo: it upserts the `nexacloud` service, a `cpu_seconds` metric, Monthly/Yearly recurrences, partners+links (reusing `_resolve_or_create_partner`), a per-plan catalog (product + CPU-overage product + `fusion.billing.charge` with `plan_id` left NULL), and one **draft** shadow `sale.order` per deployment with the flat price set explicitly on the line. Shadow-safety holds by construction: draft + no payment token + charge `plan_id` NULL.
-
-**Tech Stack:** Odoo 19 Enterprise (Python 3.12), `sale_subscription`, `account_accountant`, `payment_stripe`, `psycopg2`. Tests: `odoo.tests.common.TransactionCase` on odoo-trial.
-
-**Spec:** `docs/superpowers/specs/2026-05-27-nexacloud-billing-importer-design.md`
-
----
-
-## Conventions for every task
-
-- **Never code Odoo internals from memory** (repo CLAUDE.md rule #1). The uncertain internals (`recurring_invoice`, `is_subscription` on a draft order, `sale.subscription.plan` fields, `price_unit` stickiness, `sale.subscription.plan` `billing_period_unit` values) are *verified by the tests themselves* on odoo-trial — when a test fails because an assumption is wrong, fix the source, do not weaken the assertion.
-- **Models, not UI:** all logic lives in `_import_rows` / `_do_import` / `_import_*` model methods; the wizard button only calls them. This keeps everything testable under `TransactionCase`.
-- **Money:** CAD, prices are `Float`/`Monetary`. CPU overage: `price_per_unit=0.0075`, `unit_batch=3600`.
-- **New fields on native models:** `x_fc_*` prefix.
-- **Registering tests:** append `from . import test_importer` to `tests/__init__.py` in the task that creates it; commit `__init__.py` alongside so the package always imports.
-
-## Test environment
-
-Tests run on **odoo-trial** (Proxmox VM 316, Odoo 19 Enterprise, db `trial`) — local dev is Community and cannot install this module. One runner:
-
-```bash
-bash scripts/fcb_test_on_trial.sh
-```
-
-- It re-syncs the module to the sandbox and runs `-u fusion_centralize_billing --test-enable --test-tags /fusion_centralize_billing`.
-- **Pass condition:** output contains `FCB_EXIT=0`.
-- The script runs the **whole** FCB suite (it cannot target one test); every "run the test" step below means "run the suite, ~1–2 min".
-- **Never** run `--test-enable` against production `nexamain`.
-
-## File structure (this plan)
-
-```
-fusion_centralize_billing/
-  __init__.py                 # + from . import wizards
-  models/
-    __init__.py               # + from . import res_partner
-    sale_order.py             # + x_fc_* fields on the existing SaleOrder inherit
-    res_partner.py            # NEW: x_fc_stripe_customer_id
-  wizards/
-    __init__.py               # NEW
-    import_wizard.py          # NEW: the importer (read + import logic)
-  views/
-    import_wizard_views.xml   # NEW: wizard form + action + menu
-  security/
-    ir.model.access.csv       # + wizard ACL line
-  __manifest__.py             # + views file
-  tests/
-    __init__.py               # + from . import test_importer
-    test_importer.py          # NEW
-```
-
----
-
-## Task 1: Scaffolding — x_fc fields, partner inherit, wizard skeleton, security, manifest
-
-**Files:**
-- Modify: `fusion_centralize_billing/models/sale_order.py`
-- Create: `fusion_centralize_billing/models/res_partner.py`
-- Modify: `fusion_centralize_billing/models/__init__.py`
-- Create: `fusion_centralize_billing/wizards/__init__.py`
-- Create: `fusion_centralize_billing/wizards/import_wizard.py`
-- Create: `fusion_centralize_billing/views/import_wizard_views.xml`
-- Modify: `fusion_centralize_billing/__init__.py`
-- Modify: `fusion_centralize_billing/security/ir.model.access.csv`
-- Modify: `fusion_centralize_billing/__manifest__.py`
-
-- [ ] **Step 1: Add `x_fc_*` fields to the existing `sale.order` inherit**
-
-In `models/sale_order.py`, add these fields to the `SaleOrder` class (keep `_fc_rate_usage`):
-```python
-    x_fc_nexacloud_subscription_id = fields.Char(
-        index=True, copy=False,
-        help="Source NexaCloud subscription id — the importer's idempotency key.")
-    x_fc_nexacloud_deployment_id = fields.Char(index=True, copy=False)
-    x_fc_billing_service_id = fields.Many2one(
-        "fusion.billing.service", index=True, copy=False, ondelete="set null")
-    x_fc_shadow = fields.Boolean(
-        default=False, copy=False,
-        help="Imported in shadow mode: Odoo computes but must not charge/post/email.")
-```
-
-- [ ] **Step 2: Create the `res.partner` inherit**
-
-`fusion_centralize_billing/models/res_partner.py`:
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1
-from odoo import fields, models
-
-
-class ResPartner(models.Model):
-    _inherit = "res.partner"
-
-    x_fc_stripe_customer_id = fields.Char(
-        index=True, copy=False,
-        help="Existing Stripe customer id imported from a source app, reused at flip.")
-```
-Append to `models/__init__.py`: `from . import res_partner`.
-
-- [ ] **Step 3: Create the wizard skeleton**
-
-`fusion_centralize_billing/wizards/__init__.py`:
-```python
-from . import import_wizard
-```
-
-`fusion_centralize_billing/wizards/import_wizard.py`:
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1
-import json
-import logging
-
-from odoo import api, fields, models
-from odoo.exceptions import UserError
-
-_logger = logging.getLogger(__name__)
-
-NEXACLOUD_CODE = "nexacloud"
-CPU_METRIC_CODE = "cpu_seconds"
-CPU_RATE_PER_CORE_HOUR = 0.0075      # NexaCloud CPU rate, CAD per core-hour
-CPU_SECONDS_PER_CORE_HOUR = 3600.0   # one core-hour = 3600 cpu-seconds
-
-
-class FusionBillingImportWizard(models.TransientModel):
-    _name = "fusion.billing.import.wizard"
-    _description = "Fusion Billing — NexaCloud Importer"
-
-    dry_run = fields.Boolean(
-        default=True,
-        help="Read and report what would be imported, without writing anything.")
-    result_summary = fields.Text(readonly=True)
-
-    def action_run_import(self):
-        self.ensure_one()
-        data = self._read_nexacloud_rows()
-        summary = self._import_rows(data, dry_run=self.dry_run)
-        self.result_summary = json.dumps(summary, indent=2, default=str)
-        return {
-            "type": "ir.actions.act_window",
-            "res_model": self._name,
-            "res_id": self.id,
-            "view_mode": "form",
-            "target": "new",
-        }
-
-    # ----- read side (the ONLY code that touches NexaCloud) ------------------
-    def _read_nexacloud_rows(self):
-        """Open a READ-ONLY psycopg2 connection to the nexacloud Postgres (DSN in
-        ir.config_parameter 'fusion_billing.nexacloud_dsn') and return rows as dicts.
-        Raises UserError on a missing DSN or a failed connection."""
-        import psycopg2
-        import psycopg2.extras
-        dsn = self.env["ir.config_parameter"].sudo().get_param("fusion_billing.nexacloud_dsn")
-        if not dsn:
-            raise UserError(
-                "NexaCloud DSN not configured. Set the 'fusion_billing.nexacloud_dsn' "
-                "system parameter to a read-only Postgres connection string.")
-        try:
-            conn = psycopg2.connect(dsn)
-        except Exception as e:  # noqa: BLE001 - surface as a user error
-            raise UserError("Could not connect to the NexaCloud database: %s" % e)
-        try:
-            conn.set_session(readonly=True)
-            cur = conn.cursor(cursor_factory=psycopg2.extras.RealDictCursor)
-            data = {}
-            cur.execute(
-                "SELECT id, email, full_name, company, billing_email, billing_address, "
-                "billing_city, billing_state, billing_postal_code, billing_country, "
-                "tax_id, stripe_customer_id FROM users")
-            data["users"] = [dict(r) for r in cur.fetchall()]
-            cur.execute(
-                "SELECT id, name, price_monthly, price_yearly, cpu_seconds_quota, "
-                "is_active FROM plans")
-            data["plans"] = [dict(r) for r in cur.fetchall()]
-            cur.execute(
-                "SELECT id, user_id, deployment_id, plan_id, status, billing_cycle, "
-                "current_period_start, current_period_end FROM subscriptions")
-            data["subscriptions"] = [dict(r) for r in cur.fetchall()]
-            return data
-        finally:
-            conn.close()
-
-    # ----- import side (pure Odoo; unit-tested) ------------------------------
-    @api.model
-    def _import_rows(self, data, dry_run=False):
-        """Upsert NexaCloud rows into Odoo. Idempotent. With dry_run=True the writes
-        happen inside a savepoint that is rolled back, so nothing persists."""
-        if not dry_run:
-            return self._do_import(data)
-        result = {}
-
-        class _Rollback(Exception):
-            pass
-
-        try:
-            with self.env.cr.savepoint():
-                result.update(self._do_import(data))
-                raise _Rollback()
-        except _Rollback:
-            pass
-        result["dry_run"] = True
-        return result
-
-    @api.model
-    def _do_import(self, data):
-        return {"created": {}, "updated": {}, "skipped": [], "failed": []}
-```
-
-- [ ] **Step 4: Add the wizard view + action + menu**
-
-`fusion_centralize_billing/views/import_wizard_views.xml`:
-```xml
-<?xml version="1.0" encoding="utf-8"?>
-<odoo>
-    <record id="view_fusion_billing_import_wizard_form" model="ir.ui.view">
-        <field name="name">fusion.billing.import.wizard.form</field>
-        <field name="model">fusion.billing.import.wizard</field>
-        <field name="arch" type="xml">
-            <form string="Import from NexaCloud">
-                <group>
-                    <field name="dry_run"/>
-                </group>
-                <group string="Result" invisible="not result_summary">
-                    <field name="result_summary" nolabel="1" widget="text"/>
-                </group>
-                <footer>
-                    <button name="action_run_import" type="object" string="Run Import"
-                            class="btn-primary"/>
-                    <button string="Close" class="btn-secondary" special="cancel"/>
-                </footer>
-            </form>
-        </field>
-    </record>
-
-    <record id="action_fusion_billing_import_wizard" model="ir.actions.act_window">
-        <field name="name">Import from NexaCloud</field>
-        <field name="res_model">fusion.billing.import.wizard</field>
-        <field name="view_mode">form</field>
-        <field name="target">new</field>
-    </record>
-
-    <menuitem id="menu_fusion_billing_root" name="Fusion Billing"
-              parent="account.menu_finance" sequence="90"/>
-    <menuitem id="menu_fusion_billing_import" name="Import from NexaCloud"
-              parent="menu_fusion_billing_root"
-              action="action_fusion_billing_import_wizard" sequence="10"
-              groups="base.group_system"/>
-</odoo>
-```
-
-- [ ] **Step 5: Wire module imports, security, manifest**
-
-Append to `fusion_centralize_billing/__init__.py`: `from . import wizards`.
-(Confirm it already has `from . import models` and `from . import controllers`; add the wizards line.)
-
-Append to `security/ir.model.access.csv`:
-```
-access_fusion_billing_import_wizard,fusion.billing.import.wizard,model_fusion_billing_import_wizard,base.group_system,1,1,1,1
-```
-
-In `__manifest__.py`, add the view to `data` (after the cron):
-```python
-    "data": [
-        "security/ir.model.access.csv",
-        "data/ir_cron.xml",
-        "views/import_wizard_views.xml",
-    ],
-```
-
-- [ ] **Step 6: Verify the module upgrades cleanly on odoo-trial**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0` (the 39 existing tests still pass; new model/fields/view load with no traceback).
-
-- [ ] **Step 7: Commit**
-
-```bash
-git add fusion_centralize_billing/models/sale_order.py fusion_centralize_billing/models/res_partner.py fusion_centralize_billing/models/__init__.py fusion_centralize_billing/wizards/ fusion_centralize_billing/views/import_wizard_views.xml fusion_centralize_billing/__init__.py fusion_centralize_billing/security/ir.model.access.csv fusion_centralize_billing/__manifest__.py
-git commit -m "feat(billing): importer scaffold — x_fc fields, wizard, security, view"
-```
-
----
-
-## Task 2: Identity import (users → partners + links)
-
-**Files:**
-- Modify: `fusion_centralize_billing/wizards/import_wizard.py`
-- Create: `fusion_centralize_billing/tests/test_importer.py`
-- Modify: `fusion_centralize_billing/tests/__init__.py`
-
-- [ ] **Step 1: Register + write the failing test**
-
-Append to `tests/__init__.py`: `from . import test_importer`.
-
-`fusion_centralize_billing/tests/test_importer.py`:
-```python
-# -*- coding: utf-8 -*-
-from odoo.tests.common import TransactionCase, tagged
-
-
-def _fixture():
-    """Two users, one plan, two subscriptions (monthly + yearly) — the canonical
-    NexaCloud row dicts the importer consumes."""
-    return {
-        "users": [
-            {"id": "u-1", "email": "ar@acme.test", "full_name": "Acme Inc",
-             "company": "Acme", "billing_email": "billing@acme.test",
-             "billing_address": "1 Main St", "billing_city": "Toronto",
-             "billing_state": "ON", "billing_postal_code": "M1M1M1",
-             "billing_country": "CA", "tax_id": "123456789RT0001",
-             "stripe_customer_id": "cus_ACME"},
-            {"id": "u-2", "email": "ops@globex.test", "full_name": "Globex",
-             "company": "Globex", "billing_email": None, "billing_address": None,
-             "billing_city": None, "billing_state": None, "billing_postal_code": None,
-             "billing_country": None, "tax_id": None, "stripe_customer_id": "cus_GLBX"},
-        ],
-        "plans": [
-            {"id": "p-1", "name": "Starter", "price_monthly": 20.0,
-             "price_yearly": 200.0, "cpu_seconds_quota": 18000.0, "is_active": True},
-        ],
-        "subscriptions": [
-            {"id": "s-1", "user_id": "u-1", "deployment_id": "d-1", "plan_id": "p-1",
-             "status": "active", "billing_cycle": "monthly",
-             "current_period_start": "2026-05-01", "current_period_end": "2026-06-01"},
-            {"id": "s-2", "user_id": "u-2", "deployment_id": "d-2", "plan_id": "p-1",
-             "status": "active", "billing_cycle": "yearly",
-             "current_period_start": "2026-05-01", "current_period_end": "2027-05-01"},
-        ],
-    }
-
-
-@tagged('post_install', '-at_install')
-class TestImporterIdentity(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-        self.Link = self.env['fusion.billing.account.link'].sudo()
-
-    def test_imports_users_as_partners_and_links(self):
-        self.Wizard._import_rows({'users': _fixture()['users']})
-        svc = self.env['fusion.billing.service'].search([('code', '=', 'nexacloud')])
-        self.assertTrue(svc, "importer must find-or-create the nexacloud service")
-        link1 = self.Link.search([('service_id', '=', svc.id), ('external_id', '=', 'u-1')])
-        self.assertEqual(len(link1), 1)
-        self.assertEqual(link1.partner_id.email, 'billing@acme.test')  # billing_email wins
-        self.assertEqual(link1.partner_id.city, 'Toronto')
-        self.assertEqual(link1.partner_id.vat, '123456789RT0001')
-        self.assertEqual(link1.partner_id.x_fc_stripe_customer_id, 'cus_ACME')
-        self.assertEqual(link1.partner_id.country_id.code, 'CA')
-        link2 = self.Link.search([('service_id', '=', svc.id), ('external_id', '=', 'u-2')])
-        self.assertEqual(link2.partner_id.email, 'ops@globex.test')   # falls back to email
-```
-
-- [ ] **Step 2: Run it, expect failure**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: FAIL — `_do_import` returns the empty stub; no partners/links created.
-
-- [ ] **Step 3: Implement service/metric/recurrence helpers + user import**
-
-Replace the stub `_do_import` and add helpers in `wizards/import_wizard.py`:
-```python
-    @api.model
-    def _fc_service(self):
-        Service = self.env['fusion.billing.service']
-        svc = Service.search([('code', '=', NEXACLOUD_CODE)], limit=1)
-        return svc or Service.create({'name': 'NexaCloud', 'code': NEXACLOUD_CODE})
-
-    @api.model
-    def _fc_cpu_metric(self):
-        Metric = self.env['fusion.billing.metric']
-        m = Metric.search([('code', '=', CPU_METRIC_CODE)], limit=1)
-        return m or Metric.create({
-            'name': 'CPU seconds', 'code': CPU_METRIC_CODE,
-            'aggregation': 'sum', 'unit_label': 'CPU-seconds'})
-
-    @api.model
-    def _fc_recurrence_plan(self, unit):
-        Plan = self.env['sale.subscription.plan']
-        plan = Plan.search([('billing_period_value', '=', 1),
-                            ('billing_period_unit', '=', unit)], limit=1)
-        if plan:
-            return plan
-        label = 'Monthly' if unit == 'month' else 'Yearly'
-        return Plan.create({'name': label, 'billing_period_value': 1,
-                            'billing_period_unit': unit})
-
-    @api.model
-    def _fc_resolve_country(self, value):
-        Country = self.env['res.country']
-        if not value:
-            return Country.browse()
-        v = value.strip()
-        return Country.search(['|', ('code', '=ilike', v), ('name', '=ilike', v)], limit=1)
-
-    @staticmethod
-    def _bump(summary, created, key):
-        bucket = 'created' if created else 'updated'
-        summary[bucket][key] = summary[bucket].get(key, 0) + 1
-
-    @api.model
-    def _import_user(self, service, urow):
-        Link = self.env['fusion.billing.account.link']
-        ext = str(urow['id'])
-        email = (urow.get('billing_email') or urow.get('email') or '').strip().lower() or None
-        name = urow.get('full_name') or urow.get('company') or email or ext
-        existed = bool(Link.search(
-            [('service_id', '=', service.id), ('external_id', '=', ext)], limit=1))
-        link = Link._resolve_or_create_partner(service, ext, name=name, email=email)
-        vals = {}
-        if urow.get('billing_address'):
-            vals['street'] = urow['billing_address']
-        if urow.get('billing_city'):
-            vals['city'] = urow['billing_city']
-        if urow.get('billing_postal_code'):
-            vals['zip'] = urow['billing_postal_code']
-        if urow.get('tax_id'):
-            vals['vat'] = urow['tax_id']
-        if urow.get('stripe_customer_id'):
-            vals['x_fc_stripe_customer_id'] = urow['stripe_customer_id']
-        country = self._fc_resolve_country(urow.get('billing_country'))
-        if country:
-            vals['country_id'] = country.id
-        if vals:
-            link.partner_id.write(vals)
-        return link, not existed
-
-    @api.model
-    def _do_import(self, data):
-        service = self._fc_service()
-        summary = {'created': {}, 'updated': {}, 'skipped': [], 'failed': []}
-        partner_by_user = {}
-        for u in data.get('users', []):
-            try:
-                with self.env.cr.savepoint():
-                    link, created = self._import_user(service, u)
-                partner_by_user[str(u['id'])] = link.partner_id
-                self._bump(summary, created, 'partners')
-            except Exception as e:  # noqa: BLE001 - per-row isolation
-                summary['failed'].append(
-                    {'kind': 'user', 'id': str(u.get('id')), 'error': str(e)})
-        return summary
-```
-
-> **Note:** `partner_by_user` and (Task 3) `plan_ctx_by_id` are **method-local** dicts — never set them as attributes on `self` (Odoo recordsets reject arbitrary attribute assignment). Tasks 3 and 4 add their loops to this same `_do_import` method, so the locals stay in scope.
-
-- [ ] **Step 4: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0`; `TestImporterIdentity` passes. If `country_id.code` assertion fails, fix `_fc_resolve_country` (don't weaken the assertion).
-
-- [ ] **Step 5: Commit**
-
-```bash
-git add fusion_centralize_billing/wizards/import_wizard.py fusion_centralize_billing/tests/test_importer.py fusion_centralize_billing/tests/__init__.py
-git commit -m "feat(billing): importer identity (NexaCloud users -> partners + links)"
-```
-
----
-
-## Task 3: Catalog import (plans → metric + products + charge, plan_id NULL)
-
-**Files:**
-- Modify: `fusion_centralize_billing/wizards/import_wizard.py`
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-@tagged('post_install', '-at_install')
-class TestImporterCatalog(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-
-    def test_imports_plan_as_charge_with_null_plan_id(self):
-        self.Wizard._import_rows({'plans': _fixture()['plans']})
-        metric = self.env['fusion.billing.metric'].search([('code', '=', 'cpu_seconds')])
-        self.assertTrue(metric)
-        charge = self.env['fusion.billing.charge'].search([('plan_code', '=', 'p-1')])
-        self.assertEqual(len(charge), 1)
-        self.assertEqual(charge.metric_id, metric)
-        self.assertEqual(charge.included_quota, 18000.0)        # = plan.cpu_seconds_quota
-        self.assertEqual(charge.unit_batch, 3600.0)             # one core-hour
-        self.assertAlmostEqual(charge.price_per_unit, 0.0075)   # CAD per core-hour
-        self.assertEqual(charge.charge_model, 'standard')
-        self.assertFalse(charge.plan_id, "shadow: charge.plan_id must be NULL so the "
-                                         "rating cron never auto-mutates order lines")
-        self.assertTrue(charge.product_id, "charge needs an overage product")
-        self.assertTrue(charge.product_id.recurring_invoice is False
-                        or charge.product_id.recurring_invoice in (False, None))
-
-    def test_charge_math_matches_nexacloud(self):
-        # 18000 quota + 2 core-hours overage (7200s) -> 2 batches * $0.0075 = $0.015
-        self.Wizard._import_rows({'plans': _fixture()['plans']})
-        charge = self.env['fusion.billing.charge'].search([('plan_code', '=', 'p-1')])
-        _overage, amount = charge._compute_billable(18000.0 + 7200.0)
-        self.assertAlmostEqual(amount, 0.015, places=4)
-```
-
-- [ ] **Step 2: Run it, expect failure**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: FAIL — no charge created (catalog import not implemented).
-
-- [ ] **Step 3: Implement catalog import**
-
-Add to `wizards/import_wizard.py`:
-```python
-    @api.model
-    def _import_plan(self, metric, prow):
-        Product = self.env['product.product']
-        Charge = self.env['fusion.billing.charge']
-        plan_code = str(prow['id'])
-        name = prow.get('name') or plan_code
-        price_monthly = float(prow.get('price_monthly') or 0.0)
-        price_yearly = float(prow.get('price_yearly') or 0.0)
-
-        sub_code = 'NC-PLAN-%s' % plan_code
-        sub_product = Product.search([('default_code', '=', sub_code)], limit=1)
-        created = False
-        if not sub_product:
-            sub_product = Product.create({
-                'name': 'NexaCloud %s' % name, 'default_code': sub_code,
-                'type': 'service', 'recurring_invoice': True,
-                'list_price': price_monthly})
-            created = True
-
-        ov_code = 'NC-CPU-OVG-%s' % plan_code
-        ov_product = Product.search([('default_code', '=', ov_code)], limit=1)
-        if not ov_product:
-            ov_product = Product.create({
-                'name': 'NexaCloud CPU overage (%s)' % name, 'default_code': ov_code,
-                'type': 'service', 'list_price': 0.0})
-
-        charge_vals = {
-            'name': 'NexaCloud CPU overage — %s' % name,
-            'plan_code': plan_code, 'metric_id': metric.id, 'product_id': ov_product.id,
-            'included_quota': float(prow.get('cpu_seconds_quota') or 0.0),
-            'price_per_unit': CPU_RATE_PER_CORE_HOUR, 'unit_batch': CPU_SECONDS_PER_CORE_HOUR,
-            'charge_model': 'standard',
-            # plan_id intentionally omitted (NULL) — shadow safety guarantee #3
-        }
-        charge = Charge.search(
-            [('plan_code', '=', plan_code), ('metric_id', '=', metric.id)], limit=1)
-        if charge:
-            charge.write(charge_vals)
-        else:
-            charge = Charge.create(charge_vals)
-            created = True
-        return {'sub_product': sub_product, 'overage_product': ov_product,
-                'charge': charge, 'price_monthly': price_monthly,
-                'price_yearly': price_yearly}, created
-```
-In `_do_import`, after the users loop, add the plans loop:
-```python
-        metric = self._fc_cpu_metric()
-        plan_ctx_by_id = {}
-        for p in data.get('plans', []):
-            try:
-                with self.env.cr.savepoint():
-                    ctx, created = self._import_plan(metric, p)
-                plan_ctx_by_id[str(p['id'])] = ctx
-                self._bump(summary, created, 'plans')
-            except Exception as e:  # noqa: BLE001
-                summary['failed'].append(
-                    {'kind': 'plan', 'id': str(p.get('id')), 'error': str(e)})
-```
-
-- [ ] **Step 4: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0`; both catalog tests pass. If `product.product` rejects `recurring_invoice` or `type='service'`, read the field on odoo-trial and fix the source.
-
-- [ ] **Step 5: Commit**
-
-```bash
-git add fusion_centralize_billing/wizards/import_wizard.py fusion_centralize_billing/tests/test_importer.py
-git commit -m "feat(billing): importer catalog (plans -> products + CPU charge, plan_id NULL)"
-```
-
----
-
-## Task 4: Subscription import (deployments → draft shadow sale.order)
-
-**Files:**
-- Modify: `fusion_centralize_billing/wizards/import_wizard.py`
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-@tagged('post_install', '-at_install')
-class TestImporterSubscriptions(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-
-    def test_imports_one_draft_shadow_subscription_per_deployment(self):
-        self.Wizard._import_rows(_fixture())
-        SaleOrder = self.env['sale.order']
-        sub1 = SaleOrder.search([('x_fc_nexacloud_subscription_id', '=', 's-1')])
-        self.assertEqual(len(sub1), 1)
-        self.assertTrue(sub1.is_subscription)
-        self.assertTrue(sub1.x_fc_shadow)
-        self.assertEqual(sub1.x_fc_nexacloud_deployment_id, 'd-1')
-        self.assertNotEqual(sub1.subscription_state, '3_progress')  # left in draft
-        # monthly flat price set explicitly on the plan product line
-        plan_line = sub1.order_line.filtered(
-            lambda l: l.product_id.default_code == 'NC-PLAN-p-1')
-        self.assertEqual(len(plan_line), 1)
-        self.assertAlmostEqual(plan_line.price_unit, 20.0)         # price_monthly
-        # the yearly subscription gets the yearly price + yearly recurrence
-        sub2 = SaleOrder.search([('x_fc_nexacloud_subscription_id', '=', 's-2')])
-        line2 = sub2.order_line.filtered(lambda l: l.product_id.default_code == 'NC-PLAN-p-1')
-        self.assertAlmostEqual(line2.price_unit, 200.0)            # price_yearly
-        self.assertEqual(sub2.plan_id.billing_period_unit, 'year')
-
-    def test_subscription_skipped_when_user_or_plan_unresolved(self):
-        data = _fixture()
-        data['subscriptions'].append(
-            {"id": "s-3", "user_id": "u-missing", "deployment_id": "d-3", "plan_id": "p-1",
-             "status": "active", "billing_cycle": "monthly",
-             "current_period_start": "2026-05-01", "current_period_end": "2026-06-01"})
-        summary = self.Wizard._import_rows(data)
-        self.assertFalse(self.env['sale.order'].search(
-            [('x_fc_nexacloud_subscription_id', '=', 's-3')]))
-        self.assertTrue(any(s.get('id') == 's-3' for s in summary['skipped']))
-```
-
-- [ ] **Step 2: Run it, expect failure**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: FAIL — no subscriptions created (subscription import not implemented).
-
-- [ ] **Step 3: Implement subscription import**
-
-Add to `wizards/import_wizard.py`:
-```python
-    @api.model
-    def _import_subscription(self, service, partner, plan_ctx, recurrence_plans, srow):
-        SaleOrder = self.env['sale.order']
-        SaleOrderLine = self.env['sale.order.line']
-        sub_ext = str(srow['id'])
-        cycle = (srow.get('billing_cycle') or 'monthly').lower()
-        rec_plan = recurrence_plans['yearly'] if cycle == 'yearly' else recurrence_plans['monthly']
-        price = plan_ctx['price_yearly'] if cycle == 'yearly' else plan_ctx['price_monthly']
-        product = plan_ctx['sub_product']
-        order_vals = {
-            'partner_id': partner.id, 'plan_id': rec_plan.id,
-            'x_fc_nexacloud_subscription_id': sub_ext,
-            'x_fc_nexacloud_deployment_id': str(srow.get('deployment_id') or ''),
-            'x_fc_billing_service_id': service.id, 'x_fc_shadow': True,
-        }
-        existing = SaleOrder.search(
-            [('x_fc_nexacloud_subscription_id', '=', sub_ext)], limit=1)
-        if existing:
-            existing.write(order_vals)
-            line = existing.order_line.filtered(lambda l: l.product_id == product)
-            line_vals = {'product_uom_qty': 1, 'price_unit': price}
-            if line:
-                line.write(line_vals)
-            else:
-                SaleOrderLine.create(dict(order_id=existing.id, product_id=product.id, **line_vals))
-            order = existing
-            created = False
-        else:
-            order_vals['order_line'] = [(0, 0, {
-                'product_id': product.id, 'product_uom_qty': 1, 'price_unit': price})]
-            order = SaleOrder.create(order_vals)
-            created = True
-        # guarantee the explicit price stuck (a pricelist compute may have overwritten it)
-        line = order.order_line.filtered(lambda l: l.product_id == product)
-        if line and line.price_unit != price:
-            line.price_unit = price
-        return order, created
-```
-In `_do_import`, before `return summary`, add the recurrences + subscriptions loop:
-```python
-        recurrence_plans = {'monthly': self._fc_recurrence_plan('month'),
-                            'yearly': self._fc_recurrence_plan('year')}
-        for s in data.get('subscriptions', []):
-            partner = partner_by_user.get(str(s.get('user_id') or ''))
-            ctx = plan_ctx_by_id.get(str(s.get('plan_id') or ''))
-            if not partner or not ctx:
-                summary['skipped'].append({
-                    'kind': 'subscription', 'id': str(s.get('id')),
-                    'reason': 'unresolved %s' % ('user' if not partner else 'plan')})
-                continue
-            try:
-                with self.env.cr.savepoint():
-                    _order, created = self._import_subscription(
-                        service, partner, ctx, recurrence_plans, s)
-                self._bump(summary, created, 'subscriptions')
-            except Exception as e:  # noqa: BLE001
-                summary['failed'].append(
-                    {'kind': 'subscription', 'id': str(s.get('id')), 'error': str(e)})
-```
-
-- [ ] **Step 4: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0`. If `is_subscription` is False on the draft order, that disproves the design assumption — read `sale_order.py` in `sale_subscription` on odoo-trial and adjust how the subscription is created (e.g. set the field driving `is_subscription`), never weaken the assertion. If `billing_period_unit` rejects `'year'`, read the selection values and fix `_fc_recurrence_plan`.
-
-- [ ] **Step 5: Commit**
-
-```bash
-git add fusion_centralize_billing/wizards/import_wizard.py fusion_centralize_billing/tests/test_importer.py
-git commit -m "feat(billing): importer subscriptions (one draft shadow sale.order per deployment)"
-```
-
----
-
-## Task 5: Idempotency + dry-run
-
-**Files:**
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-@tagged('post_install', '-at_install')
-class TestImporterIdempotencyDryRun(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-
-    def _counts(self):
-        return (
-            self.env['fusion.billing.account.link'].search_count([]),
-            self.env['fusion.billing.charge'].search_count([]),
-            self.env['sale.order'].search_count([('x_fc_shadow', '=', True)]),
-        )
-
-    def test_rerun_updates_not_duplicates(self):
-        self.Wizard._import_rows(_fixture())
-        before = self._counts()
-        # change a value and re-run; counts stay the same, value updates
-        data = _fixture()
-        data['plans'][0]['cpu_seconds_quota'] = 99999.0
-        self.Wizard._import_rows(data)
-        self.assertEqual(self._counts(), before, "re-run must upsert, not duplicate")
-        charge = self.env['fusion.billing.charge'].search([('plan_code', '=', 'p-1')])
-        self.assertEqual(charge.included_quota, 99999.0)
-
-    def test_dry_run_writes_nothing(self):
-        summary = self.Wizard._import_rows(_fixture(), dry_run=True)
-        self.assertTrue(summary.get('dry_run'))
-        self.assertEqual(self._counts(), (0, 0, 0), "dry-run must not persist anything")
-        # the nexacloud service is created inside the rolled-back savepoint too
-        self.assertFalse(self.env['fusion.billing.service'].search([('code', '=', 'nexacloud')]))
-```
-
-- [ ] **Step 2: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0` — idempotency and dry-run already hold from Tasks 2–4 + the savepoint in `_import_rows`. If the dry-run leaves a `nexacloud` service behind, the savepoint isn't wrapping `_fc_service` — confirm `_do_import` (which creates the service) runs entirely inside the `with self.env.cr.savepoint()` block.
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add fusion_centralize_billing/tests/test_importer.py
-git commit -m "test(billing): importer idempotency + dry-run"
-```
-
----
-
-## Task 6: Shadow-mode safety assertions
-
-**Files:**
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-@tagged('post_install', '-at_install')
-class TestImporterShadowSafety(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-
-    def test_import_creates_no_invoice_and_no_payment_token(self):
-        self.Wizard._import_rows(_fixture())
-        subs = self.env['sale.order'].search([('x_fc_shadow', '=', True)])
-        self.assertTrue(subs)
-        partners = subs.mapped('partner_id')
-        # no posted/draft customer invoice for any imported partner
-        invoices = self.env['account.move'].search([
-            ('partner_id', 'in', partners.ids), ('move_type', '=', 'out_invoice')])
-        self.assertFalse(invoices, "shadow import must not create any invoice")
-        # no Stripe payment token -> charging is physically impossible
-        tokens = self.env['payment.token'].search([('partner_id', 'in', partners.ids)])
-        self.assertFalse(tokens, "shadow import must not attach a payment token")
-        # every imported charge has a NULL plan_id so the rating cron skips it
-        charges = self.env['fusion.billing.charge'].search([('plan_code', 'like', 'p-%')])
-        self.assertTrue(charges)
-        self.assertFalse(any(charges.mapped('plan_id')))
-
-    def test_rating_cron_leaves_shadow_subscriptions_untouched(self):
-        self.Wizard._import_rows(_fixture())
-        subs = self.env['sale.order'].search([('x_fc_shadow', '=', True)])
-        lines_before = sum(len(s.order_line) for s in subs)
-        self.env['fusion.billing.usage']._cron_rate_open_periods()
-        subs.invalidate_recordset()
-        lines_after = sum(len(s.order_line) for s in subs)
-        self.assertEqual(lines_before, lines_after,
-                         "charges with NULL plan_id must keep the rating cron a no-op")
-```
-
-- [ ] **Step 2: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0` — the safety properties hold by construction (draft, no token, NULL plan_id). If `payment.token` is not a valid model name in this build, read the `payment` model names on odoo-trial and use the correct one (don't drop the assertion). If an invoice *is* found, the draft-import guarantee is broken — investigate whether `sale.order.create` auto-invoices, and stop confirming/posting.
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add fusion_centralize_billing/tests/test_importer.py
-git commit -m "test(billing): importer shadow-mode safety (no invoice/token, cron no-op)"
-```
-
----
-
-## Task 7: Error handling — malformed rows isolated
-
-**Files:**
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-@tagged('post_install', '-at_install')
-class TestImporterErrorIsolation(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-
-    def test_one_bad_user_does_not_abort_the_batch(self):
-        data = _fixture()
-        # a row with no id -> str(urow['id']) raises KeyError, must be caught per-row
-        data['users'].insert(0, {"email": "broken@x.test"})
-        summary = self.Wizard._import_rows(data)
-        # the two good users still import
-        self.assertEqual(
-            self.env['fusion.billing.account.link'].search_count([]), 2)
-        self.assertTrue(summary['failed'], "the bad row must be recorded in failed[]")
-        self.assertTrue(any(f['kind'] == 'user' for f in summary['failed']))
-```
-
-- [ ] **Step 2: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0` — the per-row `try/except` + `savepoint` already isolates failures. If the whole batch aborts, the `savepoint` is missing around `_import_user` or the broad `except` is too narrow — fix so one bad row never poisons the cursor.
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add fusion_centralize_billing/tests/test_importer.py
-git commit -m "test(billing): importer per-row error isolation"
-```
-
----
-
-## Task 8: Read path — DSN guard
-
-**Files:**
-- Modify: `fusion_centralize_billing/tests/test_importer.py`
-
-- [ ] **Step 1: Write the failing test** (append to `test_importer.py`)
-
-```python
-from odoo.exceptions import UserError
-
-
-@tagged('post_install', '-at_install')
-class TestImporterReadGuard(TransactionCase):
-
-    def test_missing_dsn_raises_usererror(self):
-        # ensure no DSN is configured in the test DB
-        self.env['ir.config_parameter'].sudo().set_param('fusion_billing.nexacloud_dsn', '')
-        wiz = self.env['fusion.billing.import.wizard'].sudo().create({'dry_run': True})
-        with self.assertRaises(UserError):
-            wiz._read_nexacloud_rows()
-```
-
-- [ ] **Step 2: Run it, expect pass**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0` — `_read_nexacloud_rows` raises `UserError` when the DSN param is empty (implemented in Task 1). If `psycopg2` import fails on odoo-trial, confirm it ships with the image (it does — Odoo depends on it).
-
-- [ ] **Step 3: Commit**
-
-```bash
-git add fusion_centralize_billing/tests/test_importer.py
-git commit -m "test(billing): importer read-path DSN guard"
-```
-
----
-
-## Task 9: Full suite + static checks
-
-**Files:** none (verification task)
-
-- [ ] **Step 1: Full test run**
-
-Run: `bash scripts/fcb_test_on_trial.sh`
-Expected: `FCB_EXIT=0`, no `FAIL`/`ERROR` lines for `fusion_centralize_billing`.
-
-- [ ] **Step 2: No `_sql_constraints` regressions**
-
-Run: `grep -rn "_sql_constraints" fusion_centralize_billing/ || echo "clean"`
-Expected: `clean`.
-
-- [ ] **Step 3: No bare `sale.subscription` model references**
-
-Run: `grep -rnE "sale\.subscription[^.]" fusion_centralize_billing/ || echo "clean"`
-Expected: `clean` (only `sale.subscription.plan` is valid).
-
-- [ ] **Step 4: Pyflakes the new Python**
-
-Run: `docker exec odoo-modsdev-app python3 -m pyflakes fusion_centralize_billing/wizards/import_wizard.py fusion_centralize_billing/models/res_partner.py 2>&1 | tail -20 || true`
-Expected: no undefined names (catches the kind of `_norm_email` NameError the helpdesk smoke test missed).
-
-- [ ] **Step 5: Commit (if any fixes)**
-
-```bash
-git add -A fusion_centralize_billing/
-git commit -m "test(billing): 2a importer full suite green + static checks"
-```
-
----
-
-## Done = 2a importer complete
-
-A NexaCloud backfill produces, idempotently: unified partners + links, a `cpu_seconds` charge catalog (`plan_id` NULL), and one draft shadow `sale.order` per deployment carrying the exact NexaCloud flat price — with zero customer-visible billing in Odoo (no invoice, no token, rating cron a no-op). The `psycopg2` read path is ready; the live run is gated only on the read-only DSN grant.
-
-## Next (not this plan)
-
-- 2b: NexaCloud `usage_metering.py` pushes cpu-seconds (= core-hours × 3600) to `POST /usage`.
-- 2c: NexaCloud consumes `invoice.payment_failed` / `subscription.terminated` webhooks → throttle/deprovision.
-- 2d: `fusion.billing.reconciliation` diffs Odoo-computed (flat + `charge._compute_billable`) vs NexaCloud actuals per period; flip when within tolerance (set `charge.plan_id`, attach tokens, confirm subs).

docs/superpowers/plans/2026-05-27-nexacloud-invoice-ledger.md

@@ -1,637 +0,0 @@
-# NexaCloud → Odoo Invoice Ledger — Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: superpowers:executing-plans. Steps use checkbox (`- [ ]`) syntax.
-
-**Goal:** Ingest NexaCloud's real (Stripe-billed) invoices into Odoo as posted `account.move` customer invoices with reconciled payments + HST, so Odoo is the accounting system of record — all history + ongoing, revenue split by service family, draft-first on the live books.
-
-**Architecture:** A new ingester in `fusion_centralize_billing` mirroring the importer's read/write split: `_read_nexacloud_invoices` (read-only psycopg2 via the existing DSN) → `_ingest_invoices` (pure Odoo: create `account.move` drafts idempotently, map lines to per-family income accounts, derive tax, reconcile Stripe payments) → `_post_ingested` (bulk-post after review). Reuses the `account.link` partner mapping. Native Odoo accounting does the rest.
-
-**Tech Stack:** Odoo 19 Enterprise, `account_accountant`, `psycopg2`. Tests: `TransactionCase` on odoo-trial (`bash scripts/fcb_test_on_trial.sh`, pass = `FCB_EXIT=0`).
-
-**Spec:** `docs/superpowers/specs/2026-05-27-nexacloud-invoice-ledger-design.md`
-
----
-
-## Conventions
-- **Never code accounting internals from memory** (CLAUDE rule #1). Reference confirmed on trial: `account.move` has `invoice_line_ids`/`invoice_date`/`action_post`; `account.payment.register` exists; `account_type='income'`/`'asset_receivable'` valid; sale taxes are Canadian (find HST 13% by `amount=13` / name). Where a step says "read reference", confirm before relying on it.
-- **Models, not UI:** logic in model methods; the wizard only calls them. Testable under `TransactionCase`.
-- **New fields on native models:** `x_fc_*`. Declarative `models.Constraint` only.
-- Tests run on **odoo-trial** (`bash scripts/fcb_test_on_trial.sh`, full suite, ~1–2 min). Register each new `tests/test_*.py` in `tests/__init__.py` in the same task.
-
-## File structure
-```
-fusion_centralize_billing/
-  models/
-    account_move.py            # NEW: account.move inherit (x_fc_nexacloud_invoice_id, x_fc_stripe_invoice_id)
-    __init__.py                # + account_move
-  wizards/
-    invoice_ledger.py          # NEW: the ingester (read + ingest + post + family/tax/payment helpers)
-    __init__.py                # + invoice_ledger
-  views/
-    invoice_ledger_views.xml   # NEW: wizard form + action + menu + cron
-  security/ir.model.access.csv # + ledger wizard ACL
-  __manifest__.py              # + views/invoice_ledger_views.xml
-  tests/
-    test_invoice_ledger.py     # NEW
-    __init__.py                # + test_invoice_ledger
-```
-
----
-
-## Task 1: Scaffold — account.move fields + ledger wizard skeleton
-
-**Files:** create `models/account_move.py`, `wizards/invoice_ledger.py`, `views/invoice_ledger_views.xml`; modify `models/__init__.py`, `wizards/__init__.py`, `security/ir.model.access.csv`, `__manifest__.py`.
-
-- [ ] **Step 1: account.move inherit** — `models/account_move.py`:
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1
-from odoo import fields, models
-
-
-class AccountMove(models.Model):
-    _inherit = "account.move"
-
-    x_fc_nexacloud_invoice_id = fields.Char(
-        index=True, copy=False, help="Source NexaCloud invoice id — ledger idempotency key.")
-    x_fc_stripe_invoice_id = fields.Char(index=True, copy=False)
-
-    _fc_nc_invoice_uniq = models.Constraint(
-        "unique(x_fc_nexacloud_invoice_id)",
-        "One Odoo invoice per NexaCloud invoice id.")
-```
-Add `from . import account_move` to `models/__init__.py`.
-
-- [ ] **Step 2: ledger wizard skeleton** — `wizards/invoice_ledger.py`:
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1
-import json
-import logging
-
-from odoo import api, fields, models
-from odoo.exceptions import UserError
-
-_logger = logging.getLogger(__name__)
-
-
-class FusionBillingInvoiceLedgerWizard(models.TransientModel):
-    _name = "fusion.billing.invoice.ledger.wizard"
-    _description = "Fusion Billing — NexaCloud Invoice Ledger Ingester"
-
-    dry_run = fields.Boolean(default=True)
-    auto_post = fields.Boolean(
-        default=False, help="Post invoices immediately (else leave draft for review).")
-    result_summary = fields.Text(readonly=True)
-
-    def _ingest_invoices(self, data, post=False):
-        return {"created": 0, "updated": 0, "posted": 0, "skipped": [], "failed": [], "by_family": {}}
-```
-Add `from . import invoice_ledger` to `wizards/__init__.py`.
-
-- [ ] **Step 3: view + action + menu** — `views/invoice_ledger_views.xml`:
-```xml
-<?xml version="1.0" encoding="utf-8"?>
-<odoo>
-    <record id="view_fc_invoice_ledger_wizard_form" model="ir.ui.view">
-        <field name="name">fusion.billing.invoice.ledger.wizard.form</field>
-        <field name="model">fusion.billing.invoice.ledger.wizard</field>
-        <field name="arch" type="xml">
-            <form string="Ingest NexaCloud Invoices">
-                <group>
-                    <field name="dry_run"/>
-                    <field name="auto_post"/>
-                </group>
-                <group string="Result" invisible="not result_summary">
-                    <field name="result_summary" nolabel="1" widget="text"/>
-                </group>
-                <footer>
-                    <button name="action_run" type="object" string="Run" class="btn-primary"/>
-                    <button string="Close" class="btn-secondary" special="cancel"/>
-                </footer>
-            </form>
-        </field>
-    </record>
-    <record id="action_fc_invoice_ledger_wizard" model="ir.actions.act_window">
-        <field name="name">Ingest NexaCloud Invoices</field>
-        <field name="res_model">fusion.billing.invoice.ledger.wizard</field>
-        <field name="view_mode">form</field>
-        <field name="target">new</field>
-    </record>
-    <menuitem id="menu_fc_invoice_ledger" name="Ingest NexaCloud Invoices"
-              parent="menu_fusion_billing_root"
-              action="action_fc_invoice_ledger_wizard" sequence="20"
-              groups="base.group_system"/>
-</odoo>
-```
-
-- [ ] **Step 4: security + manifest** — append to `security/ir.model.access.csv`:
-```
-access_fc_invoice_ledger_wizard,fusion.billing.invoice.ledger.wizard,model_fusion_billing_invoice_ledger_wizard,base.group_system,1,1,1,1
-```
-Add `"views/invoice_ledger_views.xml"` to `__manifest__.py` `data`.
-
-- [ ] **Step 5: verify upgrade** — `bash scripts/fcb_test_on_trial.sh` → `FCB_EXIT=0` (existing tests pass; new model/fields/view load).
-
-- [ ] **Step 6: commit** — `feat(billing): invoice-ledger scaffold (account.move x_fc fields + wizard)`
-
----
-
-## Task 2: Service-family classification + income account
-
-**Files:** modify `wizards/invoice_ledger.py`; create `tests/test_invoice_ledger.py` (+ register in `tests/__init__.py`).
-
-- [ ] **Step 1: failing test** — `tests/test_invoice_ledger.py`:
-```python
-# -*- coding: utf-8 -*-
-from odoo.tests.common import TransactionCase, tagged
-
-
-@tagged('post_install', '-at_install')
-class TestLedgerFamily(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
-
-    def test_family_classification(self):
-        f = self.W._fc_family_for
-        self.assertEqual(f('Odoo ERP Hosting (2026-05-01 to 2026-06-01)'), 'hosting')
-        self.assertEqual(f('WordPress Website Hosting - Managed (at $50.00 / month)'), 'hosting')
-        self.assertEqual(f('Managed Odoo - Standard (at $49.99 / month)'), 'managed')
-        self.assertEqual(f('Daily Backup Protection'), 'addons')
-        self.assertEqual(f('Remaining time on Daily Backup Protection after 27 May 2026'), 'addons')
-        self.assertEqual(f('Something Unmapped'), 'other')
-
-    def test_income_account_per_family_distinct(self):
-        a_host = self.W._fc_income_account('hosting')
-        a_add = self.W._fc_income_account('addons')
-        self.assertEqual(a_host.account_type, 'income')
-        self.assertNotEqual(a_host, a_add)               # split by family
-        self.assertEqual(self.W._fc_income_account('hosting'), a_host)  # idempotent
-```
-Append `from . import test_invoice_ledger` to `tests/__init__.py`.
-
-- [ ] **Step 2: run** → FAIL (`_fc_family_for` missing).
-
-- [ ] **Step 3: implement** — in `wizards/invoice_ledger.py`:
-```python
-    _FAMILY_KEYWORDS = [
-        ('hosting', ['odoo erp hosting', 'wordpress website hosting']),
-        ('managed', ['managed']),
-        ('addons', ['daily backup', 'whatsapp', 'forms builder', 'white label']),
-    ]
-
-    @api.model
-    def _fc_family_for(self, description):
-        import re
-        d = (description or '').lower()
-        m = re.match(r'remaining time on (.+?)(?: after| from |\s*\()', d)
-        if m:
-            d = m.group(1)  # classify proration by the prorated item
-        for fam, kws in self._FAMILY_KEYWORDS:
-            if any(k in d for k in kws):
-                return fam
-        return 'other'
-
-    @api.model
-    def _fc_income_account(self, family):
-        Account = self.env['account.account']
-        code = 'NCR-' + family.upper()[:6]
-        acc = Account.search([('code', '=', code)], limit=1)
-        if not acc:
-            acc = Account.create({
-                'code': code, 'name': 'NexaCloud %s Revenue' % family.title(),
-                'account_type': 'income'})
-        return acc
-```
-
-- [ ] **Step 4: run** → PASS. (If `account.account.create` needs more required fields on this build, read `account_account.py` on trial and add them — don't weaken the test.)
-
-- [ ] **Step 5: commit** — `feat(billing): ledger service-family classification + per-family income accounts`
-
----
-
-## Task 3: Tax derivation (match NexaCloud's invoice.tax)
-
-**Files:** modify `wizards/invoice_ledger.py`, `tests/test_invoice_ledger.py`.
-
-- [ ] **Step 1: failing test** (append):
-```python
-@tagged('post_install', '-at_install')
-class TestLedgerTax(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
-
-    def test_tax_for_13pct_is_a_13_percent_sale_tax(self):
-        tax = self.W._fc_tax_for(100.0, 13.0)
-        self.assertTrue(tax, "expected an HST/13% sale tax on the Canadian COA")
-        self.assertEqual(tax.type_tax_use, 'sale')
-        # the chosen tax computes 13.00 on 100.00
-        res = tax.compute_all(100.0)
-        self.assertAlmostEqual(res['total_included'] - res['total_excluded'], 13.0, places=2)
-
-    def test_tax_for_zero_is_zero_or_empty(self):
-        tax = self.W._fc_tax_for(100.0, 0.0)
-        if tax:
-            res = tax.compute_all(100.0)
-            self.assertAlmostEqual(res['total_included'] - res['total_excluded'], 0.0, places=2)
-```
-
-- [ ] **Step 2: run** → FAIL.
-
-- [ ] **Step 3: implement**:
-```python
-    @api.model
-    def _fc_tax_for(self, subtotal, tax_amount):
-        """Map a NexaCloud invoice's (subtotal, tax_amount) to the Odoo sale tax whose
-        computed tax equals it. Picks by effective percent; falls back to a 0% sale tax."""
-        Tax = self.env['account.tax']
-        sub = float(subtotal or 0.0)
-        tax_amt = float(tax_amount or 0.0)
-        if sub <= 0 or tax_amt <= 0:
-            return Tax.search([('type_tax_use', '=', 'sale'), ('amount', '=', 0.0)], limit=1)
-        rate = round(100.0 * tax_amt / sub)
-        tax = Tax.search([('type_tax_use', '=', 'sale'), ('amount_type', '=', 'percent'),
-                          ('amount', '=', float(rate))], limit=1)
-        if not tax:
-            tax = Tax.search([('type_tax_use', '=', 'sale'), ('name', 'ilike', '%s' % rate)], limit=1)
-        return tax
-```
-
-- [ ] **Step 4: run** → PASS. (Read reference if no 13% sale tax exists: `docker exec odoo-trial-app ... grep -i hst` the l10n_ca data; on nexamain confirm the HST 13% record from `nexa_coa_setup`.)
-
-- [ ] **Step 5: commit** — `feat(billing): ledger tax derivation matching source invoice tax`
-
----
-
-## Task 4: Ingest invoices → draft account.move (idempotent)
-
-**Read reference first:**
-```bash
-ssh pve-worker1 "qm guest exec 316 -- bash -lc 'docker exec odoo-trial-app bash -lc \"grep -nE \\\"def action_post|invoice_line_ids|move_type\\\" /mnt/enterprise-addons/account_accountant/../account/models/account_move.py | head\"'"
-```
-Confirm `account.move.create({'move_type':'out_invoice','partner_id':..,'invoice_line_ids':[(0,0,{'name','quantity','price_unit','account_id','tax_ids'})]})` and `move.amount_untaxed/amount_tax/amount_total`.
-
-**Files:** modify `wizards/invoice_ledger.py`, `tests/test_invoice_ledger.py`.
-
-- [ ] **Step 1: failing test** (append) — uses a fixture invoice dict shaped like `_read_nexacloud_invoices` output:
-```python
-def _inv_fixture():
-    return [{
-        'id': 'inv-1', 'stripe_invoice_id': 'in_test1', 'invoice_number': 'NEX-0001',
-        'user_external_id': 'u-1', 'partner_name': 'Acme', 'partner_email': 'ar@acme.test',
-        'invoice_date': '2026-05-01', 'currency': 'CAD', 'status': 'open',
-        'subtotal': 100.0, 'tax': 13.0, 'amount_paid': 0.0, 'paid_at': None,
-        'items': [{'description': 'Odoo ERP Hosting (2026-05-01 to 2026-06-01)',
-                   'quantity': 1.0, 'unit_price': 100.0, 'amount': 100.0}],
-    }]
-
-
-@tagged('post_install', '-at_install')
-class TestLedgerIngest(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
-        self.svc = self.env['fusion.billing.service'].sudo().create(
-            {'name': 'NexaCloud', 'code': 'nexacloud'})
-
-    def test_ingest_creates_draft_invoice_with_right_totals(self):
-        self.W._ingest_invoices(_inv_fixture(), post=False)
-        mv = self.env['account.move'].search([('x_fc_nexacloud_invoice_id', '=', 'inv-1')])
-        self.assertEqual(len(mv), 1)
-        self.assertEqual(mv.move_type, 'out_invoice')
-        self.assertEqual(mv.state, 'draft')
-        self.assertAlmostEqual(mv.amount_untaxed, 100.0, places=2)
-        self.assertAlmostEqual(mv.amount_tax, 13.0, places=2)      # equals source tax
-        self.assertAlmostEqual(mv.amount_total, 113.0, places=2)
-        self.assertEqual(mv.partner_id.email, 'ar@acme.test')
-        line = mv.invoice_line_ids
-        self.assertEqual(line.account_id, self.W._fc_income_account('hosting'))
-
-    def test_ingest_is_idempotent(self):
-        self.W._ingest_invoices(_inv_fixture(), post=False)
-        self.W._ingest_invoices(_inv_fixture(), post=False)
-        self.assertEqual(self.env['account.move'].search_count(
-            [('x_fc_nexacloud_invoice_id', '=', 'inv-1')]), 1)
-```
-
-- [ ] **Step 2: run** → FAIL.
-
-- [ ] **Step 3: implement** the partner resolver + `_ingest_invoices`:
-```python
-    @api.model
-    def _fc_partner_for(self, inv):
-        """Resolve the unified partner for an invoice via the nexacloud account.link
-        (by user_external_id); create partner+link if missing (covers NULL-subscription
-        invoices, which still carry a user)."""
-        service = self.env['fusion.billing.service'].search([('code', '=', 'nexacloud')], limit=1)
-        link = self.env['fusion.billing.account.link']._resolve_or_create_partner(
-            service, str(inv.get('user_external_id')),
-            name=inv.get('partner_name'), email=inv.get('partner_email'))
-        return link.partner_id
-
-    @api.model
-    def _ingest_invoices(self, data, post=False):
-        Move = self.env['account.move']
-        cad = self.env.ref('base.CAD', raise_if_not_found=False) or self.env.company.currency_id
-        summary = {'created': 0, 'updated': 0, 'posted': 0, 'skipped': [], 'failed': [], 'by_family': {}}
-        for inv in data:
-            nc_id = str(inv.get('id') or '')
-            try:
-                with self.env.cr.savepoint():
-                    existing = Move.search([('x_fc_nexacloud_invoice_id', '=', nc_id)], limit=1)
-                    if existing:
-                        if existing.state != 'draft':
-                            summary['skipped'].append({'id': nc_id, 'reason': 'already posted'})
-                            continue
-                        existing.invoice_line_ids.unlink()  # draft: replace lines
-                        move = existing
-                    else:
-                        move = Move.create({
-                            'move_type': 'out_invoice',
-                            'partner_id': self._fc_partner_for(inv).id,
-                            'invoice_date': inv.get('invoice_date'),
-                            'ref': inv.get('invoice_number'),
-                            'currency_id': cad.id,
-                            'x_fc_nexacloud_invoice_id': nc_id,
-                            'x_fc_stripe_invoice_id': inv.get('stripe_invoice_id'),
-                        })
-                    tax = self._fc_tax_for(inv.get('subtotal'), inv.get('tax'))
-                    line_vals = []
-                    for it in inv.get('items', []):
-                        fam = self._fc_family_for(it.get('description'))
-                        summary['by_family'][fam] = round(
-                            summary['by_family'].get(fam, 0.0) + float(it.get('amount') or 0.0), 2)
-                        line_vals.append((0, 0, {
-                            'name': it.get('description') or 'NexaCloud',
-                            'quantity': float(it.get('quantity') or 1.0),
-                            'price_unit': float(it.get('unit_price') or it.get('amount') or 0.0),
-                            'account_id': self._fc_income_account(fam).id,
-                            'tax_ids': [(6, 0, tax.ids)] if tax else [(5, 0, 0)],
-                        }))
-                    move.write({'invoice_line_ids': line_vals})
-                    summary['updated' if existing else 'created'] += 1
-                    if post:
-                        move.action_post()
-                        summary['posted'] += 1
-                        self._fc_reconcile_payment(move, inv)
-            except Exception as e:  # noqa: BLE001 - per-invoice isolation
-                _logger.exception("Ledger ingest: invoice %s failed", nc_id)
-                summary['failed'].append({'id': nc_id, 'error': '%s: %s' % (type(e).__name__, e)})
-        return summary
-
-    @api.model
-    def _fc_reconcile_payment(self, move, inv):
-        """Placeholder until Task 5; defined so post=True doesn't AttributeError."""
-        return False
-```
-
-- [ ] **Step 4: run** → PASS. (If tax computes to 13.00 only when the company/fiscal position allows it, read the tax setup on trial; if `amount_tax` ≠ 13.00, the chosen tax is wrong — fix `_fc_tax_for`, never weaken the assertion.)
-
-- [ ] **Step 5: commit** — `feat(billing): ingest NexaCloud invoices -> draft account.move (idempotent)`
-
----
-
-## Task 5: Reconcile Stripe payments (paid invoices show paid)
-
-**Read reference first:** confirm the payment-register flow on trial:
-```bash
-ssh pve-worker1 "qm guest exec 316 -- bash -lc 'docker exec odoo-trial-app bash -lc \"grep -nE \\\"_create_payments|def action_create_payments\\\" /mnt/enterprise-addons/account/wizard/account_payment_register.py | head\"'"
-```
-
-**Files:** modify `wizards/invoice_ledger.py`, `tests/test_invoice_ledger.py`.
-
-- [ ] **Step 1: failing test** (append):
-```python
-    def test_paid_invoice_is_reconciled_and_shows_paid(self):
-        data = _inv_fixture()
-        data[0].update({'status': 'paid', 'amount_paid': 113.0, 'paid_at': '2026-05-02'})
-        self.W._ingest_invoices(data, post=True)
-        mv = self.env['account.move'].search([('x_fc_nexacloud_invoice_id', '=', 'inv-1')])
-        self.assertEqual(mv.state, 'posted')
-        self.assertIn(mv.payment_state, ('paid', 'in_payment'))
-```
-(Add this inside `TestLedgerIngest`.)
-
-- [ ] **Step 2: run** → FAIL (payment not reconciled).
-
-- [ ] **Step 3: implement** `_fc_reconcile_payment` + a journal helper (replace the placeholder):
-```python
-    @api.model
-    def _fc_stripe_journal(self):
-        Journal = self.env['account.journal']
-        j = Journal.search([('code', '=', 'NCSTR')], limit=1)
-        if not j:
-            j = Journal.create({'name': 'NexaCloud Stripe', 'code': 'NCSTR', 'type': 'bank'})
-        return j
-
-    @api.model
-    def _fc_reconcile_payment(self, move, inv):
-        paid = float(inv.get('amount_paid') or 0.0)
-        if (inv.get('status') != 'paid' and paid <= 0) or move.state != 'posted':
-            return False
-        reg = self.env['account.payment.register'].with_context(
-            active_model='account.move', active_ids=move.ids).create({
-                'journal_id': self._fc_stripe_journal().id,
-                'payment_date': inv.get('paid_at') or move.invoice_date or fields.Date.today(),
-                'amount': paid or move.amount_total,
-            })
-        reg._create_payments()
-        return True
-```
-
-- [ ] **Step 4: run** → PASS. (If `payment_state` is `in_payment` rather than `paid`, that's expected when the bank journal isn't reconciled to a statement — accept both, as the assertion does.)
-
-- [ ] **Step 5: commit** — `feat(billing): reconcile Stripe payments so ingested invoices show paid`
-
----
-
-## Task 6: Reader + wizard actions + bulk-post + cron
-
-**Files:** modify `wizards/invoice_ledger.py`, `views/invoice_ledger_views.xml`, `tests/test_invoice_ledger.py`.
-
-- [ ] **Step 1: failing test** for bulk-post + DSN guard (append):
-```python
-    def test_post_ingested_posts_drafts(self):
-        self.W._ingest_invoices(_inv_fixture(), post=False)
-        n = self.W._post_ingested()
-        mv = self.env['account.move'].search([('x_fc_nexacloud_invoice_id', '=', 'inv-1')])
-        self.assertEqual(mv.state, 'posted')
-        self.assertGreaterEqual(n, 1)
-
-    def test_read_invoices_guards_missing_dsn(self):
-        from odoo.exceptions import UserError
-        self.env['ir.config_parameter'].sudo().set_param('fusion_billing.nexacloud_dsn', '')
-        with self.assertRaises(UserError):
-            self.W._read_nexacloud_invoices()
-```
-
-- [ ] **Step 2: run** → FAIL.
-
-- [ ] **Step 3: implement** `_post_ingested`, `_read_nexacloud_invoices`, `action_run`, and a cron entry:
-```python
-    @api.model
-    def _post_ingested(self):
-        moves = self.env['account.move'].search([
-            ('x_fc_nexacloud_invoice_id', '!=', False),
-            ('state', '=', 'draft'), ('move_type', '=', 'out_invoice')])
-        posted = 0
-        for mv in moves:
-            try:
-                with self.env.cr.savepoint():
-                    mv.action_post()
-                    posted += 1
-            except Exception as e:  # noqa: BLE001
-                _logger.exception("Ledger post: move %s failed", mv.id)
-        return posted
-
-    def _read_nexacloud_invoices(self, since=None):
-        import psycopg2
-        import psycopg2.extras
-        dsn = self.env['ir.config_parameter'].sudo().get_param('fusion_billing.nexacloud_dsn')
-        if not dsn:
-            raise UserError("NexaCloud DSN not configured (fusion_billing.nexacloud_dsn).")
-        try:
-            conn = psycopg2.connect(dsn)
-        except Exception as e:  # noqa: BLE001
-            raise UserError("Could not connect to the NexaCloud database: %s" % e)
-        try:
-            conn.set_session(readonly=True)
-            cur = conn.cursor(cursor_factory=psycopg2.extras.RealDictCursor)
-            where = "WHERE i.created_at >= %(since)s" if since else ""
-            cur.execute(
-                "SELECT i.id, i.stripe_invoice_id, i.invoice_number, i.user_id AS user_external_id, "
-                "u.full_name AS partner_name, COALESCE(u.billing_email,u.email) AS partner_email, "
-                "i.created_at AS invoice_date, i.currency, i.status, i.subtotal, i.tax, "
-                "i.amount_paid, i.paid_at "
-                "FROM invoices i JOIN users u ON u.id = i.user_id " + where +
-                " ORDER BY i.created_at", {'since': since})
-            invoices = {str(r['id']): dict(r, items=[]) for r in cur.fetchall()}
-            cur.execute(
-                "SELECT ii.invoice_id, ii.description, ii.quantity, ii.unit_price, ii.amount "
-                "FROM invoice_items ii WHERE ii.invoice_id = ANY(%(ids)s)",
-                {'ids': list(invoices.keys())})
-            for r in cur.fetchall():
-                inv = invoices.get(str(r['invoice_id']))
-                if inv:
-                    inv['items'].append({'description': r['description'], 'quantity': r['quantity'],
-                                         'unit_price': r['unit_price'], 'amount': r['amount']})
-            for inv in invoices.values():
-                inv['id'] = str(inv['id'])
-                inv['user_external_id'] = str(inv['user_external_id'])
-            return list(invoices.values())
-        except psycopg2.Error as e:
-            raise UserError("Failed reading NexaCloud invoices — schema may have changed:\n%s" % e)
-        finally:
-            conn.close()
-
-    def action_run(self):
-        self.ensure_one()
-        data = self._read_nexacloud_invoices()
-        if self.dry_run:
-            class _Rollback(Exception):
-                pass
-            res = {}
-            try:
-                with self.env.cr.savepoint():
-                    res.update(self._ingest_invoices(data, post=False))
-                    raise _Rollback()
-            except _Rollback:
-                pass
-            res['dry_run'] = True
-        else:
-            res = self._ingest_invoices(data, post=self.auto_post)
-        self.result_summary = json.dumps(res, indent=2, default=str)
-        if res.get('failed'):
-            _logger.error("Ledger ingest: %s failed: %s", len(res['failed']), res['failed'])
-        return {"type": "ir.actions.act_window", "res_model": self._name,
-                "res_id": self.id, "view_mode": "form", "target": "new"}
-```
-Add a daily cron to `views/invoice_ledger_views.xml`:
-```xml
-    <record id="cron_fc_invoice_ledger" model="ir.cron">
-        <field name="name">Fusion Billing: Ingest NexaCloud invoices (daily)</field>
-        <field name="model_id" ref="model_fusion_billing_invoice_ledger_wizard"/>
-        <field name="state">code</field>
-        <field name="code">model.create({'dry_run': False, 'auto_post': True})._cron_ingest_recent()</field>
-        <field name="interval_number">1</field>
-        <field name="interval_type">days</field>
-        <field name="active">False</field>
-    </record>
-```
-And `_cron_ingest_recent` (ingest invoices from the last 2 days, idempotent):
-```python
-    def _cron_ingest_recent(self):
-        from datetime import timedelta
-        since = fields.Datetime.to_string(fields.Datetime.now() - timedelta(days=2))
-        return self._ingest_invoices(self._read_nexacloud_invoices(since=since), post=True)
-```
-(Cron ships `active=False` — enabled only after the backfill is reviewed.)
-
-- [ ] **Step 4: run** → PASS.
-
-- [ ] **Step 5: commit** — `feat(billing): invoice-ledger reader, wizard actions, bulk-post, daily cron`
-
----
-
-## Task 7: Prune obsolete metered shadow data
-
-**Files:** modify `wizards/invoice_ledger.py`, `tests/test_invoice_ledger.py`.
-
-- [ ] **Step 1: failing test** (append):
-```python
-    def test_prune_shadow_removes_shadow_subs_only(self):
-        # a shadow sub + a normal order
-        p = self.env['res.partner'].sudo().create({'name': 'X'})
-        shadow = self.env['sale.order'].sudo().create({'partner_id': p.id, 'x_fc_shadow': True})
-        n = self.W._fc_prune_metered_shadow()
-        self.assertFalse(shadow.exists())
-        self.assertGreaterEqual(n.get('subscriptions', 0), 1)
-```
-
-- [ ] **Step 2: run** → FAIL.
-
-- [ ] **Step 3: implement**:
-```python
-    @api.model
-    def _fc_prune_metered_shadow(self):
-        """Delete the superseded metered shadow data (shadow sale.orders, NC-* products,
-        NexaCloud charges, reconciliation rows). Reversible only by re-import."""
-        counts = {}
-        subs = self.env['sale.order'].search([('x_fc_shadow', '=', True)])
-        counts['subscriptions'] = len(subs)
-        subs.unlink()
-        prods = self.env['product.product'].search([('default_code', '=like', 'NC-%')])
-        counts['products'] = len(prods)
-        prods.unlink()
-        ch = self.env['fusion.billing.charge'].search([])
-        counts['charges'] = len(ch)
-        ch.unlink()
-        rec = self.env['fusion.billing.reconciliation'].search([])
-        counts['reconciliations'] = len(rec)
-        rec.unlink()
-        return counts
-```
-
-- [ ] **Step 4: run** → PASS. (If a product can't unlink due to references, archive instead — read the error and adjust.)
-
-- [ ] **Step 5: commit** — `feat(billing): prune obsolete metered shadow data helper`
-
----
-
-## Task 8: Full suite + static checks
-
-- [ ] `bash scripts/fcb_test_on_trial.sh` → `FCB_EXIT=0`.
-- [ ] `grep -rn "_sql_constraints" fusion_centralize_billing/ || echo clean` → clean.
-- [ ] `grep -rnE "sale\.subscription[^.]" fusion_centralize_billing/ | grep -v "sale.subscription.plan"` → only docstring.
-- [ ] commit any fixes.
-
-## Done = invoice ledger ready to run
-
-Then (separate, gated, NOT in this plan): on nexamain — prune shadow data, **dry-run** the full backfill (review the per-family $ summary + unmatched "Other" lines), ingest **as draft**, you review a sample, **bulk-post**, enable the daily cron.

docs/superpowers/plans/2026-05-27-nexacloud-reconciliation.md

@@ -1,288 +0,0 @@
-# NexaCloud Dual-Run Reconciliation (Sub-project #2d) — Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: superpowers:executing-plans. Checkbox steps.
-
-**Goal:** Compute, per shadow subscription + period, Odoo's would-be charge vs NexaCloud's actual charge and record the delta in `fusion.billing.reconciliation`, so the dual-run can prove parity before any flip.
-
-**Architecture:** A pure `_compute_reconciliation(...)` (testable) + `_reconcile_rows(rows)` (resolves the shadow sub → flat + charge, upserts recon rows) + a read-only `_read_reconciliation_rows()` (psycopg2, integration glue). Triggered from the import wizard + cron. Odoo-only; reads NexaCloud, writes only reconciliation rows.
-
-**Tech Stack:** Odoo 19 Enterprise, `psycopg2`. Tests: `TransactionCase` on odoo-trial (`bash scripts/fcb_test_on_trial.sh`, pass = `FCB_EXIT=0`).
-
-**Spec:** `docs/superpowers/specs/2026-05-27-nexacloud-reconciliation-design.md`
-
----
-
-## Task 1: 2a amendment — store the NexaCloud plan id on the shadow subscription
-
-**Files:** `models/sale_order.py`, `wizards/import_wizard.py`, `tests/test_importer.py`
-
-- [ ] **Step 1: failing test** (append to `TestImporterSubscriptions` in `tests/test_importer.py`):
-```python
-    def test_subscription_records_nexacloud_plan_id(self):
-        self.Wizard._import_rows(_fixture())
-        sub1 = self.env['sale.order'].search([('x_fc_nexacloud_subscription_id', '=', 's-1')])
-        self.assertEqual(sub1.x_fc_nexacloud_plan_id, 'p-1')
-```
-- [ ] **Step 2: run** `bash scripts/fcb_test_on_trial.sh` → FAIL (field missing).
-- [ ] **Step 3: add the field** to `models/sale_order.py` (next to the other `x_fc_*`):
-```python
-    x_fc_nexacloud_plan_id = fields.Char(index=True, copy=False)
-```
-- [ ] **Step 4: set it in the importer.** In `wizards/import_wizard.py` `_import_subscription`, add the plan id to both the `shadow_vals` dict (so re-runs keep it current) :
-```python
-        shadow_vals = {
-            "x_fc_nexacloud_deployment_id": str(srow.get("deployment_id") or ""),
-            "x_fc_nexacloud_plan_id": str(srow.get("plan_id") or ""),
-            "x_fc_billing_service_id": service.id, "x_fc_shadow": True,
-        }
-```
-- [ ] **Step 5: run** → PASS.
-- [ ] **Step 6: commit** `feat(billing): record NexaCloud plan id on shadow subscription (for reconciliation)`
-
----
-
-## Task 2: pure reconciliation math
-
-**Files:** `models/reconciliation.py`, `tests/test_reconciliation.py` (new), `tests/__init__.py`
-
-- [ ] **Step 1:** append `from . import test_reconciliation` to `tests/__init__.py`.
-- [ ] **Step 2: failing test** `tests/test_reconciliation.py`:
-```python
-# -*- coding: utf-8 -*-
-from odoo.tests.common import TransactionCase, tagged
-
-
-@tagged('post_install', '-at_install')
-class TestReconciliationMath(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Recon = self.env['fusion.billing.reconciliation'].sudo()
-        self.metric = self.env['fusion.billing.metric'].sudo().create(
-            {'name': 'CPU seconds', 'code': 'cpu_seconds', 'aggregation': 'sum'})
-        self.charge = self.env['fusion.billing.charge'].sudo().create({
-            'name': 'CPU', 'plan_code': 'p-1', 'metric_id': self.metric.id,
-            'included_quota': 18000.0, 'price_per_unit': 0.0075,
-            'unit_batch': 3600.0, 'charge_model': 'standard'})
-
-    def test_match_within_tolerance(self):
-        # flat 20 + 0 overage (under quota) vs external 20.00 -> match
-        odoo_amt, delta, status = self.Recon._compute_reconciliation(
-            20.0, self.charge, 10000.0, 20.0, 0.01)
-        self.assertAlmostEqual(odoo_amt, 20.0)
-        self.assertEqual(status, 'match')
-
-    def test_overage_match(self):
-        # flat 20 + 2 core-hours overage (7200s -> $0.015) = 20.015 vs external 20.015
-        odoo_amt, delta, status = self.Recon._compute_reconciliation(
-            20.0, self.charge, 18000.0 + 7200.0, 20.015, 0.01)
-        self.assertAlmostEqual(odoo_amt, 20.015, places=4)
-        self.assertEqual(status, 'match')
-
-    def test_delta_flags_mismatch(self):
-        odoo_amt, delta, status = self.Recon._compute_reconciliation(
-            20.0, self.charge, 18000.0, 25.0, 0.01)   # external 25 vs odoo 20
-        self.assertAlmostEqual(delta, -5.0, places=2)
-        self.assertEqual(status, 'delta')
-```
-- [ ] **Step 3: run** → FAIL (`_compute_reconciliation` missing).
-- [ ] **Step 4: implement** in `models/reconciliation.py` (add `from odoo import api, fields, models`):
-```python
-    @api.model
-    def _compute_reconciliation(self, flat_amount, charge, cpu_seconds, external_amount,
-                                tolerance=0.01):
-        """Return (odoo_amount, delta, status). odoo = flat + overage(cpu_seconds);
-        delta = odoo - external; status 'match' if |delta| <= tolerance else 'delta'."""
-        _units, overage = charge._compute_billable(cpu_seconds) if charge else (0.0, 0.0)
-        odoo_amount = round((flat_amount or 0.0) + (overage or 0.0), 2)
-        delta = round(odoo_amount - (external_amount or 0.0), 2)
-        status = 'match' if abs(delta) <= (tolerance or 0.0) else 'delta'
-        return odoo_amount, delta, status
-```
-- [ ] **Step 5: run** → PASS.
-- [ ] **Step 6: commit** `feat(billing): reconciliation math (odoo-computed vs external)`
-
----
-
-## Task 3: `_reconcile_rows` — resolve shadow sub and upsert recon rows
-
-**Files:** `models/reconciliation.py`, `tests/test_reconciliation.py`
-
-- [ ] **Step 1: failing test** (append):
-```python
-@tagged('post_install', '-at_install')
-class TestReconcileRows(TransactionCase):
-
-    def setUp(self):
-        super().setUp()
-        self.Wizard = self.env['fusion.billing.import.wizard'].sudo()
-        from odoo.addons.fusion_centralize_billing.tests.test_importer import _fixture
-        self.Wizard._import_rows(_fixture())   # creates shadow subs + p-1 charge
-        self.Recon = self.env['fusion.billing.reconciliation'].sudo()
-
-    def test_creates_one_row_per_subscription_with_status(self):
-        # s-1 monthly flat 20, no overage; external 20.00 -> match.
-        # s-2 yearly flat 200; external 250 -> delta -50.
-        summary = self.Recon._reconcile_rows([
-            {'subscription_external_id': 's-1', 'period': '2026-05',
-             'cpu_seconds': 0.0, 'external_amount': 20.0},
-            {'subscription_external_id': 's-2', 'period': '2026-05',
-             'cpu_seconds': 0.0, 'external_amount': 250.0},
-        ])
-        rows = self.Recon.search([('period', '=', '2026-05')])
-        self.assertEqual(len(rows), 2)
-        s1 = rows.filtered(lambda r: r.odoo_amount == 20.0)
-        self.assertEqual(s1.status, 'match')
-        s2 = rows.filtered(lambda r: r.odoo_amount == 200.0)
-        self.assertEqual(s2.status, 'delta')
-        self.assertAlmostEqual(s2.delta, -50.0, places=2)
-        self.assertEqual(summary['match'], 1)
-        self.assertEqual(summary['delta'], 1)
-
-    def test_rerun_upserts(self):
-        row = [{'subscription_external_id': 's-1', 'period': '2026-05',
-                'cpu_seconds': 0.0, 'external_amount': 20.0}]
-        self.Recon._reconcile_rows(row)
-        self.Recon._reconcile_rows(row)
-        self.assertEqual(self.Recon.search_count(
-            [('period', '=', '2026-05'),
-             ('partner_id', '=', self.env['sale.order'].search(
-                 [('x_fc_nexacloud_subscription_id', '=', 's-1')]).partner_id.id)]), 1)
-
-    def test_unknown_subscription_is_skipped(self):
-        summary = self.Recon._reconcile_rows([
-            {'subscription_external_id': 'nope', 'period': '2026-05',
-             'cpu_seconds': 0.0, 'external_amount': 1.0}])
-        self.assertTrue(any(s['id'] == 'nope' for s in summary['skipped']))
-```
-- [ ] **Step 2: run** → FAIL.
-- [ ] **Step 3: implement** in `models/reconciliation.py`:
-```python
-    @api.model
-    def _reconcile_rows(self, rows, tolerance=0.01):
-        SaleOrder = self.env['sale.order']
-        Charge = self.env['fusion.billing.charge']
-        Service = self.env['fusion.billing.service']
-        service = Service.search([('code', '=', 'nexacloud')], limit=1)
-        summary = {'match': 0, 'delta': 0, 'skipped': [], 'failed': []}
-        for r in rows:
-            sub_ext = str(r.get('subscription_external_id') or '')
-            period = str(r.get('period') or '')
-            try:
-                sub = SaleOrder.search(
-                    [('x_fc_nexacloud_subscription_id', '=', sub_ext)], limit=1)
-                if not sub:
-                    summary['skipped'].append({'id': sub_ext, 'reason': 'unknown subscription'})
-                    continue
-                charge = Charge.search(
-                    [('plan_code', '=', sub.x_fc_nexacloud_plan_id)], limit=1)
-                plan_line = sub.order_line.filtered(
-                    lambda l: l.product_id.default_code
-                    and l.product_id.default_code.startswith('NC-PLAN-'))
-                flat = plan_line[:1].price_unit
-                odoo_amount, delta, status = self._compute_reconciliation(
-                    flat, charge, float(r.get('cpu_seconds') or 0.0),
-                    float(r.get('external_amount') or 0.0), tolerance)
-                vals = {
-                    'service_id': service.id if service else False,
-                    'partner_id': sub.partner_id.id, 'period': period,
-                    'odoo_amount': odoo_amount,
-                    'external_amount': float(r.get('external_amount') or 0.0),
-                    'delta': delta, 'status': status,
-                }
-                existing = self.search([
-                    ('service_id', '=', vals['service_id']),
-                    ('partner_id', '=', sub.partner_id.id), ('period', '=', period)], limit=1)
-                if existing:
-                    existing.write(vals)
-                else:
-                    self.create(vals)
-                summary['match' if status == 'match' else 'delta'] += 1
-            except Exception as e:  # noqa: BLE001 - per-row isolation
-                summary['failed'].append({'id': sub_ext, 'error': '%s: %s' % (type(e).__name__, e)})
-        return summary
-```
-- [ ] **Step 4: run** → PASS.
-- [ ] **Step 5: commit** `feat(billing): reconcile shadow subscriptions -> fusion.billing.reconciliation`
-
----
-
-## Task 4: read NexaCloud actuals + wizard trigger
-
-**Files:** `wizards/import_wizard.py`, `views/import_wizard_views.xml`
-
-- [ ] **Step 1: add the reader** in `wizards/import_wizard.py` (reuses the DSN + the same connect/guard pattern as `_read_nexacloud_rows`). Aggregate usage cpu_hours per (subscription, period) and the invoice subtotal per (subscription, period); return rows shaped for `_reconcile_rows`:
-```python
-    def _read_reconciliation_rows(self):
-        import psycopg2
-        import psycopg2.extras
-        dsn = self.env["ir.config_parameter"].sudo().get_param("fusion_billing.nexacloud_dsn")
-        if not dsn:
-            raise UserError("NexaCloud DSN not configured (fusion_billing.nexacloud_dsn).")
-        try:
-            conn = psycopg2.connect(dsn)
-        except Exception as e:  # noqa: BLE001
-            raise UserError("Could not connect to the NexaCloud database: %s" % e)
-        try:
-            conn.set_session(readonly=True)
-            cur = conn.cursor(cursor_factory=psycopg2.extras.RealDictCursor)
-            # period label = YYYY-MM of the usage period_start; cpu_seconds = cpu_hours*3600
-            cur.execute("""
-                SELECT u.subscription_id::text AS subscription_external_id,
-                       to_char(u.period_start, 'YYYY-MM') AS period,
-                       COALESCE(SUM(u.cpu_hours), 0) * 3600.0 AS cpu_seconds
-                FROM usage_records u
-                GROUP BY u.subscription_id, to_char(u.period_start, 'YYYY-MM')""")
-            usage = {(r['subscription_external_id'], r['period']): r for r in cur.fetchall()}
-            cur.execute("""
-                SELECT i.subscription_id::text AS subscription_external_id,
-                       to_char(ii.period_start, 'YYYY-MM') AS period,
-                       COALESCE(SUM(i.subtotal), 0) AS external_amount
-                FROM invoices i JOIN invoice_items ii ON ii.invoice_id = i.id
-                GROUP BY i.subscription_id, to_char(ii.period_start, 'YYYY-MM')""")
-            rows = []
-            for r in cur.fetchall():
-                key = (r['subscription_external_id'], r['period'])
-                rows.append({
-                    'subscription_external_id': r['subscription_external_id'],
-                    'period': r['period'],
-                    'cpu_seconds': float((usage.get(key) or {}).get('cpu_seconds') or 0.0),
-                    'external_amount': float(r['external_amount'] or 0.0)})
-            return rows
-        except psycopg2.Error as e:
-            raise UserError("Failed reading NexaCloud actuals — schema may have changed:\n%s" % e)
-        finally:
-            conn.close()
-
-    def action_run_reconciliation(self):
-        self.ensure_one()
-        rows = self._read_reconciliation_rows()
-        summary = self.env['fusion.billing.reconciliation']._reconcile_rows(rows)
-        self.result_summary = json.dumps(summary, indent=2, default=str)
-        self.failed_count = len(summary.get('failed') or [])
-        if summary.get('delta') or summary.get('failed'):
-            _logger.error("NexaCloud reconciliation: %s delta / %s failed row(s): %s",
-                          summary.get('delta'), len(summary.get('failed') or []), summary)
-        return {"type": "ir.actions.act_window", "res_model": self._name,
-                "res_id": self.id, "view_mode": "form", "target": "new"}
-```
-- [ ] **Step 2: add the button** to `views/import_wizard_views.xml` footer:
-```xml
-                    <button name="action_run_reconciliation" type="object"
-                            string="Run Reconciliation" class="btn-secondary"/>
-```
-- [ ] **Step 3:** `bash scripts/fcb_test_on_trial.sh` → `FCB_EXIT=0` (module upgrades; reader is integration-only, not unit-tested).
-- [ ] **Step 4: commit** `feat(billing): NexaCloud reconciliation reader + wizard trigger`
-
----
-
-## Task 5: full suite + static checks
-
-- [ ] `bash scripts/fcb_test_on_trial.sh` → `FCB_EXIT=0`.
-- [ ] `grep -rn "_sql_constraints" fusion_centralize_billing/ || echo clean` → clean.
-- [ ] `grep -rnE "sale\.subscription[^.]" fusion_centralize_billing/ | grep -v "sale.subscription.plan"` → only docstring.
-- [ ] commit any fixes.
-
-## Done = 2d complete
-
-The dual-run can be run each cycle (button/cron): it reads NexaCloud usage + invoice subtotals, computes Odoo's would-be charge, and records per-subscription `match`/`delta` rows. Flip happens (manually) once a cycle is all-match.

docs/superpowers/plans/2026-05-31-fusion-clock-statutory-break.md

@@ -1,864 +0,0 @@
-# Fusion Clock — Province-Aware Automatic Unpaid Break Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Make the unpaid meal break deduct automatically from worked hours on every path (portal, kiosk, NFC, cron, **and manual backend entry**), using a 2-tier per-province rule table (Ontario: 5h→30min, 10h→+30min), with no duplicated logic.
-
-**Architecture:** A new `fusion.clock.break.rule` table holds the per-province thresholds. `hr.employee._get_fclk_break_rule()` resolves an employee's rule from its company's province (global default fallback). `hr.attendance.x_fclk_break_minutes` becomes a single stored **computed** field — `statutory_break(worked_hours) + Σ penalty_minutes` — that recomputes on every save and replaces the four scattered write sites (controller `_apply_break_deduction` ×3 call sites, the auto-clock-out cron, and the penalty code's manual write).
-
-**Tech Stack:** Odoo 19, Python, QWeb/XML views, Odoo test framework (`TransactionCase`).
-
-**Spec:** `docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md`
-
----
-
-## Dev environment & sync (READ FIRST — applies to every task)
-
-**Two working copies (per project memory `feedback_dual_path_fusion_clock`):**
-- **Git/source tree (edit + commit here):** `K:\Github\Odoo-Modules\fusion_clock`
-- **Docker/active tree (what the container loads):** `K:\Github\odoo-modsdev\addons\fusion_clock`
-
-Edit in the **git tree**, then **mirror to the Docker tree before every test run**:
-
-```powershell
-robocopy "K:\Github\Odoo-Modules\fusion_clock" "K:\Github\odoo-modsdev\addons\fusion_clock" /MIR /XD ".git" "__pycache__" /XF "*.pyc" /NFL /NDL /NJH /NJS; if ($LASTEXITCODE -lt 8) { "sync ok" } else { "sync FAILED" }
-```
-(robocopy exit codes < 8 = success.) **Preflight:** if `K:\Github\odoo-modsdev\addons\fusion_clock` does not exist, the dual-tree setup changed — STOP and confirm the active copy with the user before continuing.
-
-**Container/DB:** `odoo-modsdev-app` / db `modsdev` (per memory `reference_docker_env_names`).
-
-**Canonical commands** (note the ephemeral ports — `--test-enable` forces `http_spawn()` so 8069/8072 collide without them; per repo CLAUDE.md):
-
-- Run this module's tests:
-  ```bash
-  docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
-  ```
-- Plain upgrade (no tests):
-  ```bash
-  docker exec odoo-modsdev-app odoo -d modsdev -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -50
-  ```
-- Pyflakes a changed Python file (catches undefined names instantly):
-  ```bash
-  docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/<relpath>.py
-  ```
-
-**Commit:** only from the git tree (`git -C "K:/Github/Odoo-Modules" ...`). Per memory `feedback_always_push_to_main`, push after each commit on `main`.
-
----
-
-## File Structure
-
-**Created:**
-- `fusion_clock/models/clock_break_rule.py` — the `fusion.clock.break.rule` model + tier engine + constraints.
-- `fusion_clock/data/clock_break_rule_data.xml` — seed Ontario rule (`is_default`).
-- `fusion_clock/views/clock_break_rule_views.xml` — list/form/action for the rule.
-- `fusion_clock/migrations/19.0.4.1.0/post-migrate.py` — drop retired param + recompute break.
-- `fusion_clock/tests/test_break_rules.py` — all new tests.
-
-**Modified:**
-- `fusion_clock/models/__init__.py` — import the new model.
-- `fusion_clock/models/hr_employee.py` — add `_get_fclk_break_rule()`.
-- `fusion_clock/models/hr_attendance.py` — `x_fclk_break_minutes` → stored compute; drop cron break-write.
-- `fusion_clock/controllers/clock_api.py` — delete `_apply_break_deduction`, its clock-out call, and the penalty break-write.
-- `fusion_clock/controllers/clock_kiosk.py` — delete the `_apply_break_deduction` call.
-- `fusion_clock/controllers/clock_nfc_kiosk.py` — delete the `_apply_break_deduction` call.
-- `fusion_clock/models/res_config_settings.py` — remove `fclk_break_threshold_hours`.
-- `fusion_clock/views/res_config_settings_views.xml` — remove threshold row; relabel default-break as scheduling-only; point to Break Rules.
-- `fusion_clock/data/ir_config_parameter_data.xml` — remove the `break_threshold_hours` seed record.
-- `fusion_clock/security/ir.model.access.csv` — manager access for the new model.
-- `fusion_clock/views/clock_menus.xml` — "Break Rules" config menu.
-- `fusion_clock/__manifest__.py` — version bump + new data/view files.
-- `fusion_clock/tests/__init__.py` — import the new test module.
-- `fusion_clock/tests/test_settings.py` — assert the retired field is gone.
-- `fusion_clock/CLAUDE.md` — model map, settings keys, break gotcha (Task 5).
-
-**Behaviour-change note (intentional, approved by spec §4.3):** today a *late-in* penalty written at clock-in (e.g. +15) is silently swallowed at clock-out because `_apply_break_deduction` does `max(break, current)`. The new compute makes **all** penalty minutes strictly additive (`statutory + Σ penalties`), so a late-in penalty on a long shift is no longer lost. Net hours for such shifts will be correctly lower than before.
-
----
-
-## Task 1: New model `fusion.clock.break.rule`
-
-**Files:**
-- Create: `fusion_clock/models/clock_break_rule.py`
-- Create: `fusion_clock/data/clock_break_rule_data.xml`
-- Create: `fusion_clock/views/clock_break_rule_views.xml`
-- Create: `fusion_clock/tests/test_break_rules.py`
-- Modify: `fusion_clock/models/__init__.py`
-- Modify: `fusion_clock/tests/__init__.py`
-- Modify: `fusion_clock/security/ir.model.access.csv`
-- Modify: `fusion_clock/views/clock_menus.xml`
-- Modify: `fusion_clock/__manifest__.py`
-
-- [ ] **Step 1: Write the failing tests** — create `fusion_clock/tests/test_break_rules.py`:
-
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1 (Odoo Proprietary License v1.0)
-
-from datetime import datetime, timedelta
-from odoo.tests import tagged, TransactionCase
-from odoo.exceptions import ValidationError
-
-
-@tagged('-at_install', 'post_install', 'fusion_clock')
-class TestBreakRules(TransactionCase):
-
-    @classmethod
-    def setUpClass(cls):
-        super().setUpClass()
-        cls.ICP = cls.env['ir.config_parameter'].sudo()
-        cls.ICP.set_param('fusion_clock.auto_deduct_break', 'True')
-        cls.Rule = cls.env['fusion.clock.break.rule']
-        cls.default_rule = cls.Rule.search([('is_default', '=', True)], limit=1)
-        cls.employee = cls.env['hr.employee'].create({'name': 'FCLK Break Test'})
-
-    def _mk_att(self, hours):
-        check_in = datetime(2026, 1, 5, 9, 0, 0)
-        return self.env['hr.attendance'].create({
-            'employee_id': self.employee.id,
-            'check_in': check_in,
-            'check_out': check_in + timedelta(hours=hours),
-        })
-
-    # ---- Task 1: tier engine + constraints ----
-    def test_break_minutes_for_tiers(self):
-        rule = self.Rule.create({
-            'name': 'Tier Test', 'is_default': False,
-            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
-            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
-        })
-        self.assertEqual(rule.break_minutes_for(4.99), 0.0)
-        self.assertEqual(rule.break_minutes_for(5.0), 30.0)
-        self.assertEqual(rule.break_minutes_for(9.99), 30.0)
-        self.assertEqual(rule.break_minutes_for(10.0), 60.0)
-        self.assertEqual(rule.break_minutes_for(12.0), 60.0)
-
-    def test_second_tier_must_exceed_first(self):
-        with self.assertRaises(ValidationError):
-            self.Rule.create({
-                'name': 'Bad', 'is_default': False,
-                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
-                'break2_after_hours': 5.0, 'break2_minutes': 30.0,
-            })
-
-    def test_single_default_enforced(self):
-        self.assertTrue(self.default_rule, "seed default rule must exist")
-        with self.assertRaises(ValidationError):
-            self.Rule.create({
-                'name': 'Another Default', 'is_default': True, 'active': True,
-                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
-                'break2_after_hours': 10.0, 'break2_minutes': 30.0,
-            })
-```
-
-  Append the import to `fusion_clock/tests/__init__.py` (add the line if not already present):
-
-```python
-from . import test_break_rules
-```
-
-- [ ] **Step 2: Create the model** — `fusion_clock/models/clock_break_rule.py`:
-
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1 (Odoo Proprietary License v1.0)
-
-from odoo import models, fields, api, _
-from odoo.exceptions import ValidationError
-
-
-class FusionClockBreakRule(models.Model):
-    _name = 'fusion.clock.break.rule'
-    _description = 'Statutory Break Rule'
-    _order = 'sequence, name'
-
-    name = fields.Char(string='Name', required=True)
-    country_id = fields.Many2one('res.country', string='Country')
-    state_id = fields.Many2one(
-        'res.country.state',
-        string='Province / State',
-        help="Employees whose company is in this province use this rule.",
-    )
-    is_default = fields.Boolean(
-        string='Default Rule',
-        help="Used when an employee's company province matches no other rule. "
-             "Only one active rule may be the default.",
-    )
-    break1_after_hours = fields.Float(
-        string='First Break After (h)', default=5.0,
-        help="Worked hours at or above this trigger the first unpaid break.",
-    )
-    break1_minutes = fields.Float(
-        string='First Break (min)', default=30.0,
-        help="Length of the first unpaid break. 0 disables it.",
-    )
-    break2_after_hours = fields.Float(
-        string='Second Break After (h)', default=10.0,
-        help="Worked hours at or above this add the second unpaid break.",
-    )
-    break2_minutes = fields.Float(
-        string='Second Break (min)', default=30.0,
-        help="Length of the second unpaid break. 0 disables it.",
-    )
-    sequence = fields.Integer(default=10)
-    active = fields.Boolean(default=True)
-
-    def break_minutes_for(self, worked_hours):
-        """Total statutory unpaid break (minutes) for the given worked hours.
-
-        Tiers are inclusive (``>=``): a break applies when worked hours are
-        equal to or greater than the threshold. The second tier adds on top of
-        the first.
-        """
-        self.ensure_one()
-        worked = worked_hours or 0.0
-        total = 0.0
-        if self.break1_minutes and worked >= self.break1_after_hours:
-            total += self.break1_minutes
-        if self.break2_minutes and worked >= self.break2_after_hours:
-            total += self.break2_minutes
-        return total
-
-    @api.constrains('break1_after_hours', 'break1_minutes',
-                    'break2_after_hours', 'break2_minutes')
-    def _check_tiers(self):
-        for rule in self:
-            if min(rule.break1_after_hours, rule.break1_minutes,
-                   rule.break2_after_hours, rule.break2_minutes) < 0:
-                raise ValidationError(_("Break hours and minutes cannot be negative."))
-            if rule.break2_minutes and rule.break2_after_hours <= rule.break1_after_hours:
-                raise ValidationError(_(
-                    "The second break threshold (%(n2)s h) must be greater than "
-                    "the first (%(n1)s h).",
-                    n2=rule.break2_after_hours, n1=rule.break1_after_hours))
-
-    @api.constrains('is_default', 'active')
-    def _check_single_default(self):
-        for rule in self:
-            if rule.is_default and rule.active:
-                dupe = self.search([
-                    ('is_default', '=', True), ('active', '=', True),
-                    ('id', '!=', rule.id),
-                ], limit=1)
-                if dupe:
-                    raise ValidationError(_(
-                        "Only one active break rule can be the default "
-                        "(currently: %s).", dupe.name))
-```
-
-- [ ] **Step 3: Register the model** — add to `fusion_clock/models/__init__.py` after the `clock_penalty` import:
-
-```python
-from . import clock_break_rule
-```
-
-- [ ] **Step 4: Grant access** — append one row to `fusion_clock/security/ir.model.access.csv`:
-
-```
-access_fusion_clock_break_rule_manager,fusion.clock.break.rule.manager,model_fusion_clock_break_rule,group_fusion_clock_manager,1,1,1,1
-```
-
-(No user/portal grant needed — the resolver reads the table via `sudo()`.)
-
-- [ ] **Step 5: Seed the Ontario rule** — create `fusion_clock/data/clock_break_rule_data.xml`:
-
-```xml
-<?xml version="1.0" encoding="utf-8"?>
-<odoo noupdate="1">
-    <record id="break_rule_ontario" model="fusion.clock.break.rule">
-        <field name="name">Ontario</field>
-        <field name="country_id" ref="base.ca"/>
-        <field name="state_id" ref="base.state_ca_on"/>
-        <field name="is_default" eval="True"/>
-        <field name="break1_after_hours">5.0</field>
-        <field name="break1_minutes">30.0</field>
-        <field name="break2_after_hours">10.0</field>
-        <field name="break2_minutes">30.0</field>
-    </record>
-</odoo>
-```
-
-- [ ] **Step 6: Views + action** — create `fusion_clock/views/clock_break_rule_views.xml`:
-
-```xml
-<?xml version="1.0" encoding="utf-8"?>
-<odoo>
-    <record id="view_fusion_clock_break_rule_list" model="ir.ui.view">
-        <field name="name">fusion.clock.break.rule.list</field>
-        <field name="model">fusion.clock.break.rule</field>
-        <field name="arch" type="xml">
-            <list>
-                <field name="sequence" widget="handle"/>
-                <field name="name"/>
-                <field name="state_id"/>
-                <field name="country_id" optional="hide"/>
-                <field name="break1_after_hours" widget="float_time"/>
-                <field name="break1_minutes"/>
-                <field name="break2_after_hours" widget="float_time"/>
-                <field name="break2_minutes"/>
-                <field name="is_default"/>
-                <field name="active" widget="boolean_toggle"/>
-            </list>
-        </field>
-    </record>
-
-    <record id="view_fusion_clock_break_rule_form" model="ir.ui.view">
-        <field name="name">fusion.clock.break.rule.form</field>
-        <field name="model">fusion.clock.break.rule</field>
-        <field name="arch" type="xml">
-            <form>
-                <sheet>
-                    <widget name="web_ribbon" title="Archived" bg_color="text-bg-danger"
-                            invisible="active"/>
-                    <div class="oe_title">
-                        <h1><field name="name" placeholder="e.g. Ontario"/></h1>
-                    </div>
-                    <group>
-                        <group string="Jurisdiction">
-                            <field name="country_id"/>
-                            <field name="state_id"
-                                   domain="[('country_id', '=', country_id)]"/>
-                            <field name="is_default"/>
-                            <field name="active"/>
-                        </group>
-                        <group string="Unpaid Break Tiers">
-                            <label for="break1_after_hours" string="First break after"/>
-                            <div class="o_row">
-                                <field name="break1_after_hours" widget="float_time"/>
-                                <span>h  →</span>
-                                <field name="break1_minutes"/>
-                                <span>min</span>
-                            </div>
-                            <label for="break2_after_hours" string="Second break after"/>
-                            <div class="o_row">
-                                <field name="break2_after_hours" widget="float_time"/>
-                                <span>h  →</span>
-                                <field name="break2_minutes"/>
-                                <span>min</span>
-                            </div>
-                        </group>
-                    </group>
-                    <p class="text-muted">
-                        Breaks are unpaid and deducted from actual worked hours. A tier with
-                        0 minutes is disabled. Triggers are inclusive — a break applies when
-                        worked hours are equal to or above the threshold.
-                    </p>
-                </sheet>
-            </form>
-        </field>
-    </record>
-
-    <record id="action_fusion_clock_break_rule" model="ir.actions.act_window">
-        <field name="name">Break Rules</field>
-        <field name="res_model">fusion.clock.break.rule</field>
-        <field name="view_mode">list,form</field>
-        <field name="context">{'active_test': False}</field>
-        <field name="help" type="html">
-            <p class="o_view_nocontent_smiling_face">Create a statutory break rule</p>
-            <p>Define unpaid meal-break thresholds per province/country. Employees inherit
-               the rule matching their company's province, or the default rule.</p>
-        </field>
-    </record>
-</odoo>
-```
-
-- [ ] **Step 7: Add the menu** — in `fusion_clock/views/clock_menus.xml`, insert after the `menu_fusion_clock_locations_config` menuitem (the Locations config item) and before `menu_fusion_clock_nfc_enrollment`:
-
-```xml
-    <menuitem id="menu_fusion_clock_break_rules"
-              name="Break Rules"
-              parent="menu_fusion_clock_config"
-              action="action_fusion_clock_break_rule"
-              sequence="25"
-              groups="group_fusion_clock_manager"/>
-```
-
-- [ ] **Step 8: Wire the manifest** — in `fusion_clock/__manifest__.py`:
-
-  **Do NOT bump the version yet** — it stays `19.0.4.0.3` until Task 4, so the
-  `19.0.4.1.0` migration actually fires in dev (Odoo only runs a version's migration
-  when the installed version is *lower* than the manifest version).
-
-  Add the seed data file after `'data/ir_config_parameter_data.xml',`:
-```python
-        'data/clock_break_rule_data.xml',
-```
-  Add the view file after `'views/clock_schedule_views.xml',`:
-```python
-        'views/clock_break_rule_views.xml',
-```
-  (Data and view files reload on every `-u` regardless of the version number, so the
-  new model/menu install without a bump. No assets change in this plan, so the bump's
-  only purpose is the migration trigger — deferred to Task 4.)
-
-- [ ] **Step 9: Sync, upgrade, run tests**
-
-  Sync (see preamble), then:
-```bash
-docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
-```
-  Expected: module upgrades cleanly; `test_break_minutes_for_tiers`, `test_second_tier_must_exceed_first`, `test_single_default_enforced` PASS. (Other tests in the class will error until Tasks 2–3 add their dependencies — that's expected if you scoped the run; otherwise the not-yet-added methods simply don't exist yet.)
-
-- [ ] **Step 10: Commit**
-
-```bash
-git -C "K:/Github/Odoo-Modules" add fusion_clock/models/clock_break_rule.py fusion_clock/models/__init__.py fusion_clock/data/clock_break_rule_data.xml fusion_clock/views/clock_break_rule_views.xml fusion_clock/views/clock_menus.xml fusion_clock/security/ir.model.access.csv fusion_clock/__manifest__.py fusion_clock/tests/test_break_rules.py fusion_clock/tests/__init__.py
-git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): add fusion.clock.break.rule per-province break table" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
-git -C "K:/Github/Odoo-Modules" push
-```
-
----
-
-## Task 2: Jurisdiction resolver on `hr.employee`
-
-**Files:**
-- Modify: `fusion_clock/models/hr_employee.py`
-- Modify: `fusion_clock/tests/test_break_rules.py`
-
-- [ ] **Step 1: Add the resolver tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
-
-```python
-    # ---- Task 2: jurisdiction resolver ----
-    def test_resolver_matches_company_province(self):
-        bc = self.env.ref('base.state_ca_bc')
-        bc_rule = self.Rule.create({
-            'name': 'British Columbia', 'state_id': bc.id, 'is_default': False,
-            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
-            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
-        })
-        self.employee.company_id.state_id = bc.id
-        self.assertEqual(self.employee._get_fclk_break_rule(), bc_rule)
-
-    def test_resolver_falls_back_to_default(self):
-        self.assertTrue(self.default_rule, "seed default rule must exist")
-        alberta = self.env.ref('base.state_ca_ab')   # no rule for AB
-        self.employee.company_id.state_id = alberta.id
-        self.assertEqual(self.employee._get_fclk_break_rule(), self.default_rule)
-```
-
-- [ ] **Step 2: Run to verify they fail**
-
-  Sync, then:
-```bash
-docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
-```
-  Expected: FAIL — `AttributeError: 'hr.employee' object has no attribute '_get_fclk_break_rule'`.
-
-- [ ] **Step 3: Implement the resolver** — in `fusion_clock/models/hr_employee.py`, add this method immediately after the `_get_fclk_break_minutes` method (after its `return float(...)` block, before `_get_fclk_scheduled_times`):
-
-```python
-    def _get_fclk_break_rule(self):
-        """Return the statutory break rule for this employee.
-
-        Resolution: company's province → matching rule; else the global default
-        rule; else an empty recordset (caller treats as zero break). Read via
-        sudo so the portal net-hours compute can resolve it without a direct ACL.
-        """
-        self.ensure_one()
-        Rule = self.env['fusion.clock.break.rule'].sudo()
-        rule = Rule.browse()
-        state = self.company_id.state_id
-        if state:
-            rule = Rule.search([('state_id', '=', state.id)], limit=1)
-        if not rule:
-            rule = Rule.search([('is_default', '=', True)], limit=1)
-        return rule
-```
-
-- [ ] **Step 4: Run to verify they pass**
-
-  Sync, then re-run the Step 2 command. Expected: `test_resolver_matches_company_province` and `test_resolver_falls_back_to_default` PASS.
-
-- [ ] **Step 5: Commit**
-
-```bash
-git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_employee.py fusion_clock/tests/test_break_rules.py
-git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): resolve employee break rule from company province" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
-git -C "K:/Github/Odoo-Modules" push
-```
-
----
-
-## Task 3: `x_fclk_break_minutes` → stored compute; remove all manual writes
-
-This task is atomic: once the field is computed (no inverse), any remaining `write({'x_fclk_break_minutes': ...})` raises at runtime, so the field conversion and the removal of all four write sites must land together.
-
-**Files:**
-- Modify: `fusion_clock/models/hr_attendance.py`
-- Modify: `fusion_clock/controllers/clock_api.py`
-- Modify: `fusion_clock/controllers/clock_kiosk.py`
-- Modify: `fusion_clock/controllers/clock_nfc_kiosk.py`
-- Modify: `fusion_clock/tests/test_break_rules.py`
-
-- [ ] **Step 1: Add the attendance tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
-
-```python
-    # ---- Task 3: automatic deduction on every path ----
-    def test_manual_attendance_applies_statutory_break(self):
-        att = self._mk_att(6)                       # 6h >= 5 -> first break
-        self.assertEqual(att.x_fclk_break_minutes, 30.0)
-        self.assertAlmostEqual(att.x_fclk_net_hours, 5.5, places=2)
-
-    def test_manual_edit_extends_break(self):
-        att = self._mk_att(6)
-        self.assertEqual(att.x_fclk_break_minutes, 30.0)
-        att.check_out = att.check_in + timedelta(hours=10)   # now >= 10
-        self.assertEqual(att.x_fclk_break_minutes, 60.0)
-        self.assertAlmostEqual(att.x_fclk_net_hours, 9.0, places=2)
-
-    def test_under_first_threshold_no_break(self):
-        att = self._mk_att(4)                       # 4h < 5 -> nothing
-        self.assertEqual(att.x_fclk_break_minutes, 0.0)
-        self.assertAlmostEqual(att.x_fclk_net_hours, 4.0, places=2)
-
-    def test_penalty_minutes_are_additive(self):
-        att = self._mk_att(6)                       # statutory 30
-        self.env['fusion.clock.penalty'].create({
-            'attendance_id': att.id,
-            'employee_id': self.employee.id,
-            'penalty_type': 'early_out',
-            'penalty_minutes': 15.0,
-            'date': att.check_in.date(),
-        })
-        self.assertEqual(att.x_fclk_break_minutes, 45.0)
-
-    def test_master_toggle_off_zero_statutory(self):
-        self.ICP.set_param('fusion_clock.auto_deduct_break', 'False')
-        att = self._mk_att(6)
-        self.assertEqual(att.x_fclk_break_minutes, 0.0)
-
-    def test_open_attendance_zero_break(self):
-        att = self.env['hr.attendance'].create({
-            'employee_id': self.employee.id,
-            'check_in': datetime(2026, 1, 5, 9, 0, 0),
-        })
-        self.assertEqual(att.x_fclk_break_minutes, 0.0)
-```
-
-- [ ] **Step 2: Run to verify they fail**
-
-  Sync, then run the module tests. Expected: the new tests FAIL — e.g. `test_manual_attendance_applies_statutory_break` asserts 30 but gets 0 (no write override exists yet).
-
-- [ ] **Step 3: Convert the field to a stored compute** — in `fusion_clock/models/hr_attendance.py`, replace the field definition:
-
-  OLD:
-```python
-    x_fclk_break_minutes = fields.Float(
-        string='Break (min)',
-        default=0.0,
-        tracking=True,
-        help="Break duration in minutes to deduct from worked hours.",
-    )
-```
-  NEW:
-```python
-    x_fclk_break_minutes = fields.Float(
-        string='Break (min)',
-        compute='_compute_fclk_break_minutes',
-        store=True,
-        tracking=True,
-        help="Unpaid break deducted from worked hours: statutory break (per the "
-             "employee's province rule, from actual hours worked) plus any penalty "
-             "minutes. Computed automatically on every save.",
-    )
-```
-
-- [ ] **Step 4: Add the compute method** — in the same file, insert this method immediately before the `_compute_net_hours` method (just above its `@api.depends('worked_hours', 'x_fclk_break_minutes')` decorator):
-
-```python
-    @api.depends('worked_hours', 'check_out',
-                 'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
-    def _compute_fclk_break_minutes(self):
-        ICP = self.env['ir.config_parameter'].sudo()
-        auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
-        for att in self:
-            statutory = 0.0
-            if auto and att.check_out and att.employee_id:
-                rule = att.employee_id._get_fclk_break_rule()
-                if rule:
-                    statutory = rule.break_minutes_for(att.worked_hours or 0.0)
-            penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
-            att.x_fclk_break_minutes = statutory + penalties
-```
-
-- [ ] **Step 5: Remove the cron's break write** — in the same file, inside `_cron_fusion_auto_clock_out`:
-
-  Remove the now-unused threshold read (the line near the top of the method):
-```python
-        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
-```
-  Remove the two now-unused locals in the per-attendance loop:
-```python
-            emp_tz = pytz.timezone(employee.tz or self.env.company.tz or 'UTC')
-            check_in_date = pytz.UTC.localize(check_in).astimezone(emp_tz).date()
-```
-  Remove the break-write block (the compute now applies the break when `check_out` is set):
-```python
-                    if (att.worked_hours or 0) >= threshold:
-                        att.sudo().write(
-                            {'x_fclk_break_minutes': employee._get_fclk_break_minutes(check_in_date)}
-                        )
-```
-  (Leave the surrounding `employee = att.employee_id` and `clock_out_time = effective_deadline` lines intact.)
-
-- [ ] **Step 6: Delete the controller helper and its call sites** — in `fusion_clock/controllers/clock_api.py`:
-
-  Delete the entire `_apply_break_deduction` method:
-```python
-    def _apply_break_deduction(self, attendance, employee):
-        """Apply automatic break deduction if configured."""
-        ICP = request.env['ir.config_parameter'].sudo()
-        if ICP.get_param('fusion_clock.auto_deduct_break', 'True') != 'True':
-            return
-
-        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
-        worked = attendance.worked_hours or 0.0
-
-        if worked >= threshold:
-            local_date = get_local_today(request.env, employee)
-            if attendance.check_in:
-                tz_name = (
-                    employee.resource_id.tz
-                    or (employee.user_id.partner_id.tz if employee.user_id else False)
-                    or employee.company_id.partner_id.tz
-                    or 'UTC'
-                )
-                local_date = pytz.UTC.localize(attendance.check_in).astimezone(pytz.timezone(tz_name)).date()
-            break_min = employee._get_fclk_break_minutes(local_date)
-            current = attendance.x_fclk_break_minutes or 0.0
-            # Set to whichever is higher: configured break or existing (penalty-inflated) value
-            new_val = max(break_min, current)
-            if new_val != current:
-                attendance.sudo().write({'x_fclk_break_minutes': new_val})
-
-```
-  Delete its clock-out call (in the CLOCK OUT branch):
-```python
-                # Apply break deduction
-                self._apply_break_deduction(attendance, employee)
-
-```
-  Delete the penalty break-write in `_check_and_create_penalty` (keep the penalty-record `create` above it and the activity log below it):
-```python
-            # Deduct penalty minutes from attendance (adds to break deduction)
-            current_break = attendance.x_fclk_break_minutes or 0.0
-            attendance.sudo().write({
-                'x_fclk_break_minutes': current_break + deduction,
-            })
-
-```
-
-- [ ] **Step 7: Delete the kiosk call sites**
-
-  In `fusion_clock/controllers/clock_kiosk.py`, delete the line:
-```python
-                api._apply_break_deduction(attendance, employee)
-```
-  In `fusion_clock/controllers/clock_nfc_kiosk.py`, delete the line:
-```python
-            api._apply_break_deduction(attendance, employee)
-```
-
-- [ ] **Step 8: Pyflakes the touched controllers/models** (catches a missed `pytz`/var reference instantly)
-
-```bash
-docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/controllers/clock_api.py /mnt/extra-addons/fusion_clock/controllers/clock_kiosk.py /mnt/extra-addons/fusion_clock/controllers/clock_nfc_kiosk.py /mnt/extra-addons/fusion_clock/models/hr_attendance.py
-```
-  Expected: no output (clean). If it flags `pytz` as unused in `hr_attendance.py`, that's fine only if no other code uses it — verify before removing the import (the absence/overtime crons still use `pytz`, so leave the import).
-
-- [ ] **Step 9: Run to verify all Task 3 tests pass**
-
-  Sync, then run the module tests. Expected: all `test_manual_*`, `test_under_first_threshold_no_break`, `test_penalty_minutes_are_additive`, `test_master_toggle_off_zero_statutory`, `test_open_attendance_zero_break` PASS, and the existing NFC/kiosk/dashboard tests still PASS.
-
-- [ ] **Step 10: Commit**
-
-```bash
-git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_attendance.py fusion_clock/controllers/clock_api.py fusion_clock/controllers/clock_kiosk.py fusion_clock/controllers/clock_nfc_kiosk.py fusion_clock/tests/test_break_rules.py
-git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): auto-apply statutory break via one stored compute" -m "x_fclk_break_minutes is now statutory(worked_hours) + penalties, recomputed on every path including manual backend entry. Removes the four duplicated write sites (controller _apply_break_deduction + 3 call sites, auto-clock-out cron, penalty write)." -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
-git -C "K:/Github/Odoo-Modules" push
-```
-
----
-
-## Task 4: Retire `break_threshold_hours`; clean settings & migrate
-
-**Files:**
-- Modify: `fusion_clock/models/res_config_settings.py`
-- Modify: `fusion_clock/views/res_config_settings_views.xml`
-- Modify: `fusion_clock/data/ir_config_parameter_data.xml`
-- Create: `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`
-- Modify: `fusion_clock/tests/test_settings.py`
-
-- [ ] **Step 1: Add the dead-setting assertion** — in `fusion_clock/tests/test_settings.py`, add one line to `test_dead_settings_removed`:
-
-```python
-        self.assertNotIn('fclk_break_threshold_hours', fields)
-```
-
-- [ ] **Step 2: Remove the settings field** — in `fusion_clock/models/res_config_settings.py`, delete:
-
-```python
-    fclk_break_threshold_hours = fields.Float(
-        string='Break Threshold (hours)',
-        config_parameter='fusion_clock.break_threshold_hours',
-        default=4.0,
-        help="Only deduct break if shift is longer than this many hours.",
-    )
-```
-
-- [ ] **Step 3: Fix the settings view** — in `fusion_clock/views/res_config_settings_views.xml`, replace the whole `fclk_auto_break` setting block:
-
-  OLD:
-```xml
-                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
-                                 help="Automatically deduct unpaid break from worked hours on clock-out.">
-                            <field name="fclk_auto_deduct_break"/>
-                            <div class="content-group" invisible="not fclk_auto_deduct_break">
-                                <div class="row mt16">
-                                    <label for="fclk_default_break_minutes" string="Duration (min)" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_default_break_minutes"/>
-                                </div>
-                                <div class="row mt8">
-                                    <label for="fclk_break_threshold_hours" string="Min. Shift" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_break_threshold_hours" widget="float_time"/>
-                                </div>
-                            </div>
-                        </setting>
-```
-  NEW:
-```xml
-                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
-                                 help="Automatically deduct the statutory unpaid break from worked hours. Break lengths and thresholds are configured per province under Configuration → Break Rules.">
-                            <field name="fclk_auto_deduct_break"/>
-                            <div class="content-group" invisible="not fclk_auto_deduct_break">
-                                <div class="row mt16">
-                                    <label for="fclk_default_break_minutes" string="Default scheduling break (min)" class="col-lg-5 o_light_label"/>
-                                    <field name="fclk_default_break_minutes"/>
-                                </div>
-                                <div class="text-muted small mt4">
-                                    Used as the default break when building shifts/schedules
-                                    (planned hours). Actual deductions follow the province Break Rules.
-                                </div>
-                            </div>
-                        </setting>
-```
-
-- [ ] **Step 4: Remove the seed param** — in `fusion_clock/data/ir_config_parameter_data.xml`, delete:
-
-```xml
-    <record id="config_break_threshold_hours" model="ir.config_parameter">
-        <field name="key">fusion_clock.break_threshold_hours</field>
-        <field name="value">4.0</field>
-    </record>
-```
-
-- [ ] **Step 5: Bump the version + create the migration**
-
-  First bump the manifest so the migration fires (installed `19.0.4.0.3` < manifest
-  `19.0.4.1.0`). In `fusion_clock/__manifest__.py`:
-```python
-    'version': '19.0.4.1.0',
-```
-  Then create `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`:
-
-```python
-# -*- coding: utf-8 -*-
-# Copyright 2026 Nexa Systems Inc.
-# License OPL-1 (Odoo Proprietary License v1.0)
-
-from odoo import api, SUPERUSER_ID
-
-
-def migrate(cr, version):
-    """Retire the single-threshold break param (superseded by per-rule
-    break1_after_hours), and force-recompute the now-computed break field so
-    existing closed attendances reflect the province rule + their penalties."""
-    cr.execute(
-        "DELETE FROM ir_config_parameter WHERE key = %s",
-        ('fusion_clock.break_threshold_hours',),
-    )
-    env = api.Environment(cr, SUPERUSER_ID, {})
-    Attendance = env['hr.attendance']
-    field = Attendance._fields['x_fclk_break_minutes']
-    closed = Attendance.search([('check_out', '!=', False)])
-    if closed:
-        env.add_to_compute(field, closed)
-        closed.flush_recordset(['x_fclk_break_minutes'])
-```
-
-- [ ] **Step 6: Sync, upgrade, run tests**
-
-  Sync, then run the module tests. Expected: module upgrades cleanly and the `19.0.4.1.0` migration executes (installed `19.0.4.0.3` < manifest `19.0.4.1.0`; modsdev shows the INFO line, nexa/entech run `log_level=warn`), `test_dead_settings_removed` PASS, full `fusion_clock` suite green.
-
-- [ ] **Step 7: Verify the param is gone and historical rows recomputed** (sanity)
-
-```bash
-docker exec odoo-modsdev-app odoo shell -d modsdev --no-http 2>/dev/null <<'PY'
-ICP = env['ir.config_parameter'].sudo()
-print('threshold param:', ICP.get_param('fusion_clock.break_threshold_hours', 'ABSENT'))
-print('default rule:', env['fusion.clock.break.rule'].search([('is_default','=',True)]).mapped('name'))
-PY
-```
-  Expected: `threshold param: ABSENT`; `default rule: ['Ontario']`.
-
-- [ ] **Step 8: Commit**
-
-```bash
-git -C "K:/Github/Odoo-Modules" add fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/migrations/19.0.4.1.0/post-migrate.py fusion_clock/tests/test_settings.py fusion_clock/__manifest__.py
-git -C "K:/Github/Odoo-Modules" commit -m "refactor(fusion_clock): retire break_threshold_hours; breaks now driven by Break Rules" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
-git -C "K:/Github/Odoo-Modules" push
-```
-
----
-
-## Task 5: Full verification, docs, manual smoke
-
-**Files:**
-- Modify: `fusion_clock/CLAUDE.md`
-
-- [ ] **Step 1: Full test run (whole module)**
-
-  Sync, then:
-```bash
-docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -120
-```
-  Expected: all `fusion_clock` tests PASS, zero tracebacks. If anything fails, fix before continuing.
-
-- [ ] **Step 2: Manual smoke (manager UI)** at http://localhost:8082
-
-  - Configuration → **Break Rules** exists; the **Ontario** row shows 5h→30 / 10h→30, Default ticked.
-  - Attendances → create a manual attendance, check-in 09:00 check-out 15:00 (6h) → **Break = 30**, Net = 5.5h, with no clock action.
-  - Edit that record's check-out to 19:00 (10h) → **Break = 60**, Net = 9.0h.
-  - Create a 4h attendance → **Break = 0**.
-  - Settings → the old "Min. Shift" threshold field is gone; the Auto-Deduct Break help points to Break Rules.
-
-- [ ] **Step 3: Update the module CLAUDE.md** — in `fusion_clock/CLAUDE.md`:
-
-  - §4 Model Map: add a row — `fusion.clock.break.rule | models/clock_break_rule.py | Per-province statutory unpaid-break thresholds (2-tier).`
-  - §5 Clocking Flow: note that the break deduction is no longer a controller step — `x_fclk_break_minutes` is a stored compute (`statutory(worked_hours) + Σ penalties`) that fires on every path including manual backend entry; resolved rule via `hr.employee._get_fclk_break_rule()` (company province → default).
-  - §11 Settings Keys: remove `fusion_clock.break_threshold_hours`.
-  - §13 Gotchas: add — "Unpaid break is computed, not written: never `write({'x_fclk_break_minutes': ...})`; change the province rule (`fusion.clock.break.rule`) or `auto_deduct_break` instead. Penalty minutes are now strictly additive (the old `max()` that swallowed late-in penalties is gone)."
-  - Bump the version line in §1 to `19.0.4.1.0`.
-
-- [ ] **Step 4: Commit the docs**
-
-```bash
-git -C "K:/Github/Odoo-Modules" add fusion_clock/CLAUDE.md
-git -C "K:/Github/Odoo-Modules" commit -m "docs(fusion_clock): document province break rules + computed break field" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
-git -C "K:/Github/Odoo-Modules" push
-```
-
-- [ ] **Step 5: Report** — summarize what changed, the behaviour-change note (penalties now additive), and that live deployment to entech (`odoo-entech`) is a separate step pending user sign-off.
-
----
-
-## Self-Review (performed against the spec)
-
-**1. Spec coverage**
-- §4.1 model → Task 1. §4.2 resolver → Task 2. §4.3 stored compute → Task 3. §4.4 removals → Task 3 (writes) + Task 4 (setting/param/view). §4.5 UI/security/data → Task 1 (+ settings view in Task 4). §5 edge cases → tests in Tasks 1 & 3. §6 migration → Task 4. §7 tests → all six+ cases present across Tasks 1–3. §8 rollout → preamble + Task 5. ✓ No gaps.
-
-**2. Placeholder scan** — every step has full code/commands; no TBD/TODO/"similar to". ✓
-
-**3. Type/name consistency** — `break_minutes_for`, `_get_fclk_break_rule`, `_compute_fclk_break_minutes`, fields `break1_after_hours/break1_minutes/break2_after_hours/break2_minutes/is_default`, model `fusion.clock.break.rule`, access id `model_fusion_clock_break_rule`, action `action_fusion_clock_break_rule`, menu `menu_fusion_clock_break_rules` — all used identically across tasks. The compute folds `Σ penalty_minutes` (field `penalty_minutes` on `fusion.clock.penalty`, confirmed). ✓

docs/superpowers/plans/2026-06-02-accessibility-funding-selector.md

@@ -1,43 +0,0 @@
-# Accessibility Funding-Source Selector — Implementation Plan
-
-> **For agentic workers:** REQUIRED SUB-SKILL: superpowers:executing-plans (inline) — this is a 3-file change. Steps use `- [ ]` checkboxes.
-
-**Goal:** Let the rep mark an accessibility assessment's funding source (Private / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other) on the web form, so the generated sale order routes to the correct funding pipeline instead of always defaulting to private pay.
-
-**Architecture:** The model (`fusion.accessibility.assessment.x_fc_funding_source`) and the SO routing (`_create_draft_sale_order` → `sale_type_map` → `x_fc_sale_type`) already exist (the "2026-04 portal audit fix"). The only gaps: (1) the form has no funding field, (2) the save controller never reads `funding_source` from the POST, (3) `hardship` is missing from the selectable funding sources. The submit JS already serialises every named form field via `FormData`, so no JS change is needed.
-
-**Tech Stack:** Odoo 19, QWeb portal template, JSON-RPC controller. Module `fusion_portal` (worktree `K:\Github\Odoo-Modules-wt-portal`, branch `feat/assessment-visit`).
-
-**Verification constraint:** `fusion_portal` depends on Enterprise `knowledge`, so it can NOT be installed on the local Community Docker. Syntax-check with host Python; functional verification is on westin (or a clone): pick "March of Dimes" on a form → the draft SO gets `x_fc_sale_type='march_of_dimes'` and lands in the MOD pipeline.
-
----
-
-### Task 1: Add Hardship to the funding source + route it
-
-**Files:** Modify `fusion_portal/models/accessibility_assessment.py` (selection ~:71-87, `sale_type_map` ~:771-779)
-
-- [ ] **Step 1:** Add `('hardship', 'Hardship Funding')` to the `x_fc_funding_source` selection list (after `'wsib'`).
-- [ ] **Step 2:** Add `'hardship': 'hardship',` to `sale_type_map` in `_create_draft_sale_order` (the target `x_fc_sale_type='hardship'` already exists in `fusion_claims` `sale_order.py:332`).
-- [ ] **Step 3:** `python -m py_compile fusion_portal/models/accessibility_assessment.py` → no error.
-- [ ] **Step 4:** Commit.
-
-### Task 2: Add the funding select to the shared client-info form
-
-**Files:** Modify `fusion_portal/views/portal_accessibility_templates.xml` (`accessibility_client_info_section`, ~:366-375)
-
-- [ ] **Step 1:** Add a new row with a `<select name="funding_source">` (options mirror the model selection; `direct_private` pre-selected so existing private behaviour is unchanged) right after the phone/email row, before the card closes.
-- [ ] **Step 2:** Validate XML well-formedness (`[xml]` parse).
-- [ ] **Step 3:** Commit.
-
-### Task 3: Capture funding_source in the save controller
-
-**Files:** Modify `fusion_portal/controllers/portal_main.py` (`accessibility_assessment_save` vals, ~:2498-2511)
-
-- [ ] **Step 1:** Add `'x_fc_funding_source': post.get('funding_source') or 'direct_private',` to the `vals` dict.
-- [ ] **Step 2:** `python -m pyflakes fusion_portal/controllers/portal_main.py` → no new undefined-name errors.
-- [ ] **Step 3:** Commit.
-
-### Task 4: Verify + ship
-
-- [ ] **Step 1:** Grep confirms `funding_source` flows form → controller → `x_fc_funding_source` → `sale_type_map`.
-- [ ] **Step 2:** Deploy to westin (backup → scp the 3 files → `-u fusion_portal` → cache-bust → restart) and confirm: open `/my/accessibility/stairlift/straight`, pick "March of Dimes", complete → the new SO shows `x_fc_sale_type = march_of_dimes` and appears in the MOD pipeline.

docs/superpowers/plans/2026-06-02-fusion-maintenance-foundation.md

@@ -1,506 +0,0 @@
-# fusion_maintenance Foundation — Implementation Plan (Plan 1 of 5)
-
-> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
-
-**Goal:** Confirming a sale of a maintainable product auto-creates a *priced* maintenance contract, and the due-reminder email shows the maintenance cost.
-
-**Architecture:** Extend `fusion_repairs`. A maintenance **policy** (enabled / interval / flat fee) lives on `fusion.repair.product.category`, with a per-product fee/interval override on `product.template`. We fix the dead `_spawn_maintenance_contracts()` (anchor on delivery date, capture serial + fee + provenance, dedup) and call it from the **existing** `action_confirm()` override. The branded reminder email gains a fee line.
-
-**Tech Stack:** Odoo 19 **Community**, Python, `TransactionCase`. Local dev: `docker odoo-modsdev-app`, DB `fusion-dev`.
-
-**Spec:** [`2026-06-02-fusion-maintenance-design.md`](../specs/2026-06-02-fusion-maintenance-design.md). This is **Plan 1 of 5**; see the Roadmap at the bottom for Plans 2–5 (booking, visit log, backfill, office crons) — each is written when reached because it needs its own live-source reads (spec §15).
-
-**Conventions (from CLAUDE.md):** new fields `x_fc_` prefix; Canadian English; Monetary = `$` + `currency_id`; declarative `models.Constraint` / `models.Index` (no `_sql_constraints`); `message_post` HTML wrapped in `Markup()`; `res.users` group field is `group_ids`.
-
-**Run tests:**
-```bash
-docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs \
-  -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
-```
-
-**Grounding (verified source, 2026-06-02):**
-- [`maintenance_contract.py`](../../../fusion_repairs/models/maintenance_contract.py) — contract model (fields end at `company_id`, line 81; `_booking_token_unique` constraint line 83); dead `_spawn_maintenance_contracts()` (line 198, anchors on `today`, dedups by partner/product/SO, no fee/serial/source).
-- [`repair_product_category.py`](../../../fusion_repairs/models/repair_product_category.py) — category model; `safety_critical`, `equipment_class`; `_code_unique` constraint line 56.
-- [`product_template.py`](../../../fusion_repairs/models/product_template.py) — `x_fc_repair_category_id` (line 11), `x_fc_maintenance_interval_months` (line 23, default 0).
-- [`repair_service_plan.py`](../../../fusion_repairs/models/repair_service_plan.py) — **existing** `action_confirm()` override (line 229) ending `return res` (line 250); wire the maintenance spawn here.
-
----
-
-## File Structure
-
-- **Modify** `fusion_repairs/models/repair_product_category.py` — add maintenance-policy fields + `currency_id`.
-- **Modify** `fusion_repairs/models/product_template.py` — add `x_fc_maintenance_fee` override.
-- **Modify** `fusion_repairs/models/maintenance_contract.py` — add contract fields + indexes; add `_fc_maintenance_anchor_date`; rewrite `_spawn_maintenance_contracts`.
-- **Modify** `fusion_repairs/models/repair_service_plan.py` — call `self._spawn_maintenance_contracts()` inside `action_confirm`.
-- **Modify** `fusion_repairs/data/mail_template_data.xml` — add a fee row to the reminder template.
-- **Modify** `fusion_repairs/views/repair_product_category_views.xml` — expose the policy fields.
-- **Create** `fusion_repairs/tests/__init__.py`, `fusion_repairs/tests/test_maintenance_foundation.py`.
-- **Modify** `fusion_repairs/__manifest__.py` — bump `version` to `19.0.2.3.0`.
-
-> **Scope note:** the technician-skill field (`x_fc_maintenance_skill_id`) is deferred to **Plan 2 (booking)** because skill matching is a booking concern and the exact skills representation is an open item (spec §15). Plan 1 is enrollment + pricing only.
-
----
-
-## Task 1: Maintenance policy fields on the equipment category
-
-**Files:**
-- Modify: `fusion_repairs/models/repair_product_category.py` (insert after `intake_template_id`, before `_code_unique` at line 56)
-- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
-
-- [ ] **Step 1: Create the tests package + write the failing test**
-
-Create `fusion_repairs/tests/__init__.py`:
-```python
-from . import test_maintenance_foundation
-```
-
-Create `fusion_repairs/tests/test_maintenance_foundation.py`:
-```python
-# -*- coding: utf-8 -*-
-from odoo.tests import TransactionCase, tagged
-
-
-@tagged('post_install', '-at_install')
-class TestMaintenanceFoundation(TransactionCase):
-
-    @classmethod
-    def setUpClass(cls):
-        super().setUpClass()
-        cls.partner = cls.env['res.partner'].create({'name': 'Mrs. Test Client'})
-        cls.category = cls.env['fusion.repair.product.category'].create({
-            'name': 'Stair Lift', 'code': 'stairlift',
-            'equipment_class': 'lift_elevating', 'safety_critical': True,
-            'x_fc_maintenance_enabled': True,
-            'x_fc_maintenance_interval_months': 6,
-            'x_fc_maintenance_fee': 149.0,
-        })
-
-    def test_category_policy_fields_exist(self):
-        self.assertTrue(self.category.x_fc_maintenance_enabled)
-        self.assertEqual(self.category.x_fc_maintenance_interval_months, 6)
-        self.assertEqual(self.category.x_fc_maintenance_fee, 149.0)
-        self.assertTrue(self.category.currency_id)
-```
-
-- [ ] **Step 2: Run the test to verify it fails**
-
-Run:
-```bash
-docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -40
-```
-Expected: FAIL — `Invalid field 'x_fc_maintenance_enabled' on model 'fusion.repair.product.category'`.
-
-- [ ] **Step 3: Add the policy fields**
-
-In `repair_product_category.py`, insert before the `_code_unique = models.Constraint(...)` line:
-```python
-    # ── Maintenance policy (per equipment type) ──────────────────────────
-    x_fc_maintenance_enabled = fields.Boolean(
-        string='Offer Maintenance',
-        help='If set, units in this category are enrolled in recurring preventive '
-             'maintenance on sale (and via the backfill wizard).',
-    )
-    x_fc_maintenance_interval_months = fields.Integer(
-        string='Maintenance Interval (Months)', default=6,
-        help='Default months between preventive maintenance visits for this category. '
-             'Overridden by the product field of the same name when that is > 0.',
-    )
-    currency_id = fields.Many2one(
-        'res.currency', string='Currency',
-        default=lambda self: self.env.company.currency_id,
-    )
-    x_fc_maintenance_fee = fields.Monetary(
-        string='Maintenance Fee', currency_field='currency_id',
-        help='Flat fee shown to the client for a maintenance visit of this equipment type.',
-    )
-    x_fc_maintenance_service_product_id = fields.Many2one(
-        'product.product', string='Maintenance Service Product',
-        help='Optional product used when drafting the priced visit line (Plan 2). '
-             'Falls back to a generic visit product.',
-    )
-```
-
-- [ ] **Step 4: Run the test to verify it passes**
-
-Run the same command as Step 2. Expected: `test_category_policy_fields_exist` PASS.
-
-- [ ] **Step 5: Commit**
-```bash
-git add fusion_repairs/models/repair_product_category.py fusion_repairs/tests/
-git commit -m "feat(fusion_repairs): maintenance policy fields on equipment category"
-```
-
----
-
-## Task 2: Per-product fee override
-
-**Files:**
-- Modify: `fusion_repairs/models/product_template.py` (after `x_fc_maintenance_interval_months`, line 28)
-- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
-
-- [ ] **Step 1: Write the failing test** (append to the test class)
-```python
-    def test_product_fee_override_field_exists(self):
-        tmpl = self.env['product.template'].create({
-            'name': 'Handicare Freecurve Stairlift',
-            'x_fc_repair_category_id': self.category.id,
-            'x_fc_maintenance_fee': 199.0,
-        })
-        self.assertEqual(tmpl.x_fc_maintenance_fee, 199.0)
-```
-
-- [ ] **Step 2: Run to verify it fails**
-
-Run the test command. Expected: FAIL — `Invalid field 'x_fc_maintenance_fee' on model 'product.template'`.
-
-- [ ] **Step 3: Add the field**
-
-In `product_template.py`, after the `x_fc_maintenance_interval_months` field (line 28):
-```python
-    x_fc_maintenance_fee = fields.Monetary(
-        string='Maintenance Fee (override)', currency_field='currency_id',
-        help='Per-product override of the category maintenance fee. 0 = use the category fee.',
-    )
-```
-(`product.template` already provides `currency_id`.)
-
-- [ ] **Step 4: Run to verify it passes** — `test_product_fee_override_field_exists` PASS.
-
-- [ ] **Step 5: Commit**
-```bash
-git add fusion_repairs/models/product_template.py fusion_repairs/tests/test_maintenance_foundation.py
-git commit -m "feat(fusion_repairs): per-product maintenance fee override"
-```
-
----
-
-## Task 3: Contract model extensions (fee, source, serial, policy)
-
-**Files:**
-- Modify: `fusion_repairs/models/maintenance_contract.py` (add fields after `company_id`, line 81; add indexes near `_booking_token_unique`, line 83)
-- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
-
-- [ ] **Step 1: Write the failing test**
-```python
-    def test_contract_extension_fields_exist(self):
-        c = self.env['fusion.repair.maintenance.contract'].create({
-            'partner_id': self.partner.id,
-            'product_id': self.env['product.product'].create({'name': 'Unit'}).id,
-            'next_due_date': '2026-12-01',
-            'x_fc_source': 'sale',
-            'x_fc_device_serial': 'SN-123',
-            'x_fc_maintenance_fee': 149.0,
-        })
-        self.assertEqual(c.x_fc_source, 'sale')
-        self.assertEqual(c.x_fc_device_serial, 'SN-123')
-        self.assertEqual(c.x_fc_maintenance_fee, 149.0)
-```
-
-- [ ] **Step 2: Run to verify it fails** — `Invalid field 'x_fc_source' ...`.
-
-- [ ] **Step 3: Add the fields + indexes**
-
-In `maintenance_contract.py`, after the `company_id` field (line 81), before `_booking_token_unique`:
-```python
-    currency_id = fields.Many2one(
-        'res.currency', default=lambda self: self.env.company.currency_id,
-    )
-    x_fc_maintenance_fee = fields.Monetary(
-        string='Maintenance Fee', currency_field='currency_id',
-        help='Flat fee shown to the client for this maintenance visit.',
-    )
-    x_fc_source = fields.Selection(
-        [('sale', 'New Sale'), ('backfill', 'Backfill'),
-         ('claims', 'Claims Bridge'), ('manual', 'Manual')],
-        string='Source', default='manual', index=True,
-    )
-    x_fc_source_sale_line_id = fields.Many2one(
-        'sale.order.line', string='Source Sale Line', index=True, copy=False,
-    )
-    x_fc_device_serial = fields.Char(string='Serial (text)', index=True, copy=False)
-    x_fc_policy_category_id = fields.Many2one(
-        'fusion.repair.product.category', string='Maintenance Policy',
-    )
-```
-(Idempotency is enforced in Python — Task 4 — to support the two-regime dedup in spec §6.2; the `index=True` above covers lookups.)
-
-- [ ] **Step 4: Run to verify it passes** — `test_contract_extension_fields_exist` PASS.
-
-- [ ] **Step 5: Commit**
-```bash
-git add fusion_repairs/models/maintenance_contract.py fusion_repairs/tests/test_maintenance_foundation.py
-git commit -m "feat(fusion_repairs): maintenance contract fee/source/serial/policy fields"
-```
-
----
-
-## Task 4: Spawn priced contracts on sale confirm (fix the dead trigger + wire it)
-
-**Files:**
-- Modify: `fusion_repairs/models/maintenance_contract.py` (rewrite `_spawn_maintenance_contracts`, lines 198-227; add `_fc_maintenance_anchor_date` helper)
-- Modify: `fusion_repairs/models/repair_service_plan.py` (call it in `action_confirm`, before `return res` at line 250)
-- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
-
-- [ ] **Step 1: Write the failing tests**
-```python
-    def _make_product(self, **kw):
-        vals = {'name': 'Stairlift Unit', 'type': 'consu',
-                'x_fc_repair_category_id': self.category.id}
-        vals.update(kw)
-        return self.env['product.product'].create(vals)
-
-    def _confirm_so(self, product, commitment='2026-01-10'):
-        so = self.env['sale.order'].create({
-            'partner_id': self.partner.id,
-            'commitment_date': commitment,
-            'order_line': [(0, 0, {'product_id': product.id, 'product_uom_qty': 1})],
-        })
-        so.action_confirm()
-        return so
-
-    def _contracts_for(self, so):
-        return self.env['fusion.repair.maintenance.contract'].search(
-            [('original_sale_order_id', '=', so.id)])
-
-    def test_no_contract_when_category_not_maintainable(self):
-        cat = self.env['fusion.repair.product.category'].create(
-            {'name': 'Cane', 'code': 'cane', 'x_fc_maintenance_enabled': False})
-        so = self._confirm_so(self._make_product(x_fc_repair_category_id=cat.id))
-        self.assertFalse(self._contracts_for(so))
-
-    def test_contract_created_via_category_policy(self):
-        so = self._confirm_so(self._make_product())
-        contracts = self._contracts_for(so)
-        self.assertEqual(len(contracts), 1)
-        c = contracts
-        self.assertEqual(c.interval_months, 6)
-        self.assertEqual(c.x_fc_maintenance_fee, 149.0)
-        self.assertEqual(c.x_fc_source, 'sale')
-        self.assertEqual(c.x_fc_policy_category_id, self.category)
-        # anchor = commitment_date + 6 months
-        self.assertEqual(str(c.next_due_date), '2026-07-10')
-
-    def test_product_override_beats_category(self):
-        p = self._make_product()
-        p.product_tmpl_id.x_fc_maintenance_interval_months = 3
-        p.product_tmpl_id.x_fc_maintenance_fee = 199.0
-        so = self._confirm_so(p)
-        c = self._contracts_for(so)
-        self.assertEqual(c.interval_months, 3)
-        self.assertEqual(c.x_fc_maintenance_fee, 199.0)
-
-    def test_idempotent_on_reconfirm(self):
-        p = self._make_product()
-        so = self._confirm_so(p)
-        so._spawn_maintenance_contracts()  # call again
-        self.assertEqual(len(self._contracts_for(so)), 1)
-```
-
-- [ ] **Step 2: Run to verify they fail** — contracts not created (trigger not wired) → assertions fail.
-
-- [ ] **Step 3: Rewrite `_spawn_maintenance_contracts` + add the anchor helper**
-
-Replace the body of `_spawn_maintenance_contracts` (lines 198-227) and add the helper, in the `SaleOrder` class of `maintenance_contract.py`:
-```python
-    def _fc_maintenance_anchor_date(self, line):
-        """Best-available delivery anchor: commitment_date -> date_order -> today.
-        (Non-ADP/lift units lack a delivery date; this fallback chain handles them.)"""
-        so = line.order_id
-        anchor = so.commitment_date or so.date_order
-        return fields.Date.to_date(anchor) if anchor else fields.Date.context_today(self)
-
-    def _spawn_maintenance_contracts(self):
-        """Create a priced maintenance contract per maintainable unit on a confirmed SO.
-        Policy = product interval override, else the product's category policy.
-        Idempotent: by serial when captured, else by source sale line."""
-        Contract = self.env['fusion.repair.maintenance.contract'].sudo()
-        for so in self:
-            if so.state not in ('sale', 'done'):
-                continue
-            for line in so.order_line:
-                product = line.product_id
-                if not product:
-                    continue
-                tmpl = product.product_tmpl_id
-                category = tmpl.x_fc_repair_category_id
-                product_interval = tmpl.x_fc_maintenance_interval_months or 0
-                cat_enabled = bool(category) and category.x_fc_maintenance_enabled
-                interval = product_interval or (
-                    category.x_fc_maintenance_interval_months if cat_enabled else 0)
-                if interval <= 0 or not (product_interval > 0 or cat_enabled):
-                    continue
-                fee = tmpl.x_fc_maintenance_fee or (
-                    category.x_fc_maintenance_fee if category else 0.0)
-                # Capture serial only if fusion_claims' line field is present.
-                serial = ''
-                if 'x_fc_serial_number' in line._fields:
-                    serial = (line.x_fc_serial_number or '').strip()
-                # Idempotency: serial regime vs source-line regime (spec §6.2).
-                if serial:
-                    dedup = [('state', '=', 'active'), ('x_fc_device_serial', '=', serial)]
-                else:
-                    dedup = [('state', '=', 'active'),
-                             ('x_fc_source_sale_line_id', '=', line.id)]
-                if Contract.search_count(dedup):
-                    continue
-                anchor = so._fc_maintenance_anchor_date(line)
-                # One contract per serialized unit; without a serial, per quantity.
-                count = 1 if serial else max(int(line.product_uom_qty or 1), 1)
-                for _i in range(count):
-                    Contract.create({
-                        'partner_id': so.partner_id.id,
-                        'product_id': product.id,
-                        'original_sale_order_id': so.id,
-                        'x_fc_source_sale_line_id': line.id,
-                        'x_fc_source': 'sale',
-                        'x_fc_device_serial': serial,
-                        'x_fc_policy_category_id': category.id if category else False,
-                        'interval_months': interval,
-                        'x_fc_maintenance_fee': fee,
-                        'next_due_date': anchor + relativedelta(months=interval),
-                        'state': 'active',
-                    })
-```
-
-- [ ] **Step 4: Wire it into the existing `action_confirm`**
-
-In `repair_service_plan.py`, in `action_confirm`, change line 249-250 from:
-```python
-        self._fc_spawn_labor_warranties()
-        return res
-```
-to:
-```python
-        self._fc_spawn_labor_warranties()
-        self._spawn_maintenance_contracts()
-        return res
-```
-
-- [ ] **Step 5: Run to verify the Task-4 tests pass** — all four PASS.
-
-- [ ] **Step 6: Commit**
-```bash
-git add fusion_repairs/models/maintenance_contract.py fusion_repairs/models/repair_service_plan.py fusion_repairs/tests/test_maintenance_foundation.py
-git commit -m "feat(fusion_repairs): spawn priced maintenance contracts on sale confirm"
-```
-
----
-
-## Task 5: Show the fee in the reminder email
-
-**Files:**
-- Modify: `fusion_repairs/data/mail_template_data.xml` (the `email_template_maintenance_due_reminder` record)
-
-- [ ] **Step 1: Read the current template**
-
-Run:
-```bash
-docker exec odoo-modsdev-app sh -c "grep -n 'email_template_maintenance_due_reminder' /mnt/odoo-modules/fusion_repairs/data/mail_template_data.xml"
-```
-Then open that record's `<field name="body_html">` and find the equipment-name / due-date details table (the green-accent reminder).
-
-- [ ] **Step 2: Add a fee row to the details table**
-
-Inside the details table of the reminder body, after the "Next due" row, add (Canadian English, `$` + currency):
-```xml
-<tr t-if="object.x_fc_maintenance_fee">
-  <td style="opacity:0.6;width:35%;">Maintenance fee</td>
-  <td><span t-field="object.x_fc_maintenance_fee"
-            t-options='{"widget": "monetary", "display_currency": object.currency_id}'/>
-      <span style="opacity:0.6;"> + applicable tax</span></td>
-</tr>
-```
-
-- [ ] **Step 3: Upgrade + manually verify the rendered email**
-
-Run:
-```bash
-docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init
-```
-Then in odoo-shell render the template for a contract with a fee and confirm the fee line appears:
-```bash
-docker exec odoo-modsdev-app odoo shell -d fusion-dev --no-http <<'PY'
-c = env['fusion.repair.maintenance.contract'].search([('x_fc_maintenance_fee','>',0)], limit=1)
-tpl = env.ref('fusion_repairs.email_template_maintenance_due_reminder')
-print('FEE' if 'applicable tax' in tpl._render_field('body_html', c.ids)[c.id] else 'MISSING')
-PY
-```
-Expected: `FEE`.
-
-- [ ] **Step 4: Commit**
-```bash
-git add fusion_repairs/data/mail_template_data.xml
-git commit -m "feat(fusion_repairs): show maintenance fee in due-reminder email"
-```
-
----
-
-## Task 6: Expose policy fields in the category form + bump version
-
-**Files:**
-- Modify: `fusion_repairs/views/repair_product_category_views.xml`
-- Modify: `fusion_repairs/__manifest__.py`
-
-- [ ] **Step 1: Read the category form view**
-
-Run:
-```bash
-docker exec odoo-modsdev-app sh -c "grep -n 'fusion.repair.product.category' /mnt/odoo-modules/fusion_repairs/views/repair_product_category_views.xml | head"
-```
-Locate the `<form>` for the category.
-
-- [ ] **Step 2: Add a Maintenance group to the form**
-
-Inside the category form sheet, add:
-```xml
-<group string="Maintenance Policy">
-    <field name="x_fc_maintenance_enabled"/>
-    <field name="x_fc_maintenance_interval_months"
-           invisible="not x_fc_maintenance_enabled"/>
-    <field name="x_fc_maintenance_fee"
-           invisible="not x_fc_maintenance_enabled"/>
-    <field name="x_fc_maintenance_service_product_id"
-           invisible="not x_fc_maintenance_enabled"/>
-    <field name="currency_id" invisible="1"/>
-</group>
-```
-
-- [ ] **Step 3: Bump the version**
-
-In `fusion_repairs/__manifest__.py`, change `'version': '19.0.2.2.6',` to `'version': '19.0.2.3.0',`.
-
-- [ ] **Step 4: Upgrade + run the full test module green**
-
-Run:
-```bash
-docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -40
-```
-Expected: all `TestMaintenanceFoundation` tests PASS, 0 failures, module loads.
-
-- [ ] **Step 5: Commit**
-```bash
-git add fusion_repairs/views/repair_product_category_views.xml fusion_repairs/__manifest__.py
-git commit -m "feat(fusion_repairs): category maintenance-policy UI + version 19.0.2.3.0"
-```
-
----
-
-## Self-Review (against the spec)
-
-- **Spec §2 D2 (flat fee per type):** Tasks 1-2 (policy on category + product override), Task 4 (fee snapshot on contract), Task 5 (fee in email). ✓
-- **Spec §3.2 gap #1 (dead trigger):** Task 4 fixes + wires `_spawn_maintenance_contracts`. ✓
-- **Spec §3.2 gap #3 (no cost shown):** Task 5. ✓
-- **Spec §5.1 / §5.2 (policy + contract fields):** Tasks 1-3. ✓
-- **Spec §6.1 (new-sale path, delivery anchor, idempotent, serial when present):** Task 4 (`_fc_maintenance_anchor_date`, two-regime dedup, guarded serial capture). ✓
-- **Deferred to Plan 2:** `x_fc_maintenance_skill_id` (skills representation is §15 open item) — noted in File Structure.
-- **No placeholders:** every code step shows complete code; the two "read first" steps (Tasks 5-6) target XML whose exact surrounding markup must be read live before editing, and give the exact snippet to insert.
-- **Type consistency:** `x_fc_maintenance_fee` Monetary + `currency_id` used identically on category, product, contract; `_spawn_maintenance_contracts` / `_fc_maintenance_anchor_date` names consistent between maintenance_contract.py and the call site in repair_service_plan.py.
-
----
-
-## Roadmap — Plans 2–5 (write each when reached; each needs its own live-source reads per spec §15)
-
-- **Plan 2 — Technician-aware booking** (the largest build): read `fusion_tasks/models/technician_task.py` `_find_next_available_slot` (line 544) / `_get_available_gaps` (line 664) signatures + working-hours source; add `x_fc_maintenance_skill_id` to the category and confirm the `res.users.x_fc_repair_skills` representation; replace the `<input type="date">` booking page with a real slot-picker controller; on confirm create a `fusion.technician.task` (`task_type='maintenance'`) + the maintenance `repair.order`; double-book guard; office "Book maintenance" action; per-cycle `booking_token` regen in `roll_next_due_date`. Delivers: real self-serve booking.
-- **Plan 3 — Maintenance visit log + checklist**: read the visit-report wizard + the inspection-certificate (M1) API; add `fusion.repair.maintenance.visit` + `fusion.repair.maintenance.checklist.line`; seed checklists per category; issue an inspection certificate for `safety_critical` categories. Delivers: queryable per-unit history + compliance proof.
-- **Plan 4 — Backfill wizard** (two-regime, spec §6.2): `fusion.repair.maintenance.backfill.wizard`; serial dedup for ADP wheelchairs (guarded `fusion_claims` read), partner+base-product+sale-line dedup for lifts with accessory-line exclusion; stagger; dry-run report → execute. Delivers: the existing install base enrolled.
-- **Plan 5 — Office follow-up crons**: `unbooked` + `overdue` crons gated on the existing `ir.config_parameter` toggles; per-row savepoint isolation. Delivers: staff nudges when clients don't self-serve.

docs/superpowers/specs/2026-05-20-fusion-repairs-design.md

@@ -3,7 +3,7 @@
 **Date:** 2026-05-20
 **Module:** `fusion_repairs` (new)
 **Owner:** Gurpreet
-**Status:** Implemented in repo (bundles 1–11); see [`fusion_repairs/cloud.md`](../../../fusion_repairs/cloud.md) for shipped vs deferred
+**Status:** Approved (ready for implementation plan)
 **Scope:** Four-phase build (~8-12 weeks); three intake surfaces; 53 features
 **Sister modules:** `fusion_repair_compliance`, `fusion_repair_plans`, `fusion_repair_shop`, `fusion_repair_analytics` (Phase 4, optional split)
 
@@ -26,8 +26,8 @@ Built incrementally across 4 phases; each phase ships a usable slice.
 
 ## Current state
 
-- [`fusion_repairs/`](fusion_repairs/) is a **full Odoo 19 addon** (~100+ files, version `19.0.2.2.4`). Living status: [`fusion_repairs/cloud.md`](../../../fusion_repairs/cloud.md).
-- Extends Odoo `repair.order`, `sale.order`, `fusion.technician.task`, portals, and adds flowchart / pricing / parts models.
+- [`fusion_repairs/`](fusion_repairs/) is an **empty folder** — no `__manifest__.py`, models, or views yet.
+- No existing code in the repo extends Odoo's `repair` app.
 - Closest precedents:
   - [`fusion_ltc_management/models/ltc_repair.py`](fusion_ltc_management/models/ltc_repair.py) — repair workflow + SO + technician task (LTC facilities only; **keep separate**)
   - [`fusion_tasks/models/technician_task.py`](fusion_tasks/models/technician_task.py) — field service scheduling with `task_type` including `repair` / `maintenance`
@@ -109,7 +109,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | T1 | **Open in Maps button on task** | 2 | `geo:` / Apple Maps URL; one-tap |
 | T2 | **AI pre-visit brief on mobile form** | 2 | Surfaces `x_fc_ai_summary` prominently; "What to bring" + safety flags |
 | T3 | Labour timer via fusion_clock | 3 | Tap Start/Pause; final time pre-fills visit report |
-| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_portal`](fusion_portal)) |
+| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_authorizer_portal`](fusion_authorizer_portal)) |
 | T5 | "Found another issue" button | 2 | Spawn new repair from current visit, same partner, different equipment |
 | T6 | Parts replaced — serial capture | 3 | Scan/type replaced part serials; stores for OEM warranty + traceability |
 | T7 | No-show photo proof | 3 | "Client not home" → camera → photo attached → repair flagged + service-call fee added |
@@ -164,11 +164,11 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | CL19 | **Voice input → AI transcription** | 4 | Client speaks the problem into mic, AI transcribes + classifies |
 | CL20 | **Resolution survey + Google review** | 2 | After "resolved" outcome, ask "save you time today?" + Google review CTA |
 
-### Sales rep portal (mirrors fusion_portal pattern)
+### Sales rep portal (mirrors fusion_authorizer_portal pattern)
 
 | ID | Feature | Phase | Notes |
 |----|---------|-------|-------|
-| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 11 |
+| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 11 |
 | S2 | Sales rep dashboard tile | 1 | Add "Service Calls" tile to `/my/sales-rep/dashboard` showing count of repairs they logged + recent 5 |
 | S3 | **My Service Calls** list page | 1 | `/my/repairs` — sales rep sees their submitted repairs, status, assigned tech, scheduled date |
 | S4 | View repair status from portal | 1 | `/my/repair/<id>` — read-only timeline, chatter for non-internal messages, ability to add a comment |
@@ -183,7 +183,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 
 **Routing namespace:** `/my/repair/*` (intake + my list) and a `/my/sales-rep/repairs` summary route added to the existing sales rep dashboard.
 
-**Record rule** (mirrors [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 129 pattern):
+**Record rule** (mirrors [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 129 pattern):
 
 ```xml
 <record id="rule_repair_order_sales_rep_portal" model="ir.rule">
@@ -236,7 +236,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
     'website',                  # QWeb portal templates
     'fusion_tasks',             # technician tasks + fusion.email.builder.mixin
     'fusion_poynt',             # payment collection
-    'fusion_portal', # sales rep portal flag + group + dashboard scaffold
+    'fusion_authorizer_portal', # sales rep portal flag + group + dashboard scaffold
 ]
 # Phase 3 soft-add: 'appointment', 'fusion_schedule' for client self-booking
 # Phase 3 soft-add: 'fusion_clock' for tech labour timer (T3)
@@ -245,7 +245,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 # Phase 3 soft-add: 'fusion_ringcentral' for SMS verify (CL12) + voicemail greeting (CL16) + caller-ID launch (Phase 4)
 # Phase 4 soft-add: 'fusion_shipping', 'fusion_canada_post' for mail-in repairs (M4)
 # Soft-call (no depend) at runtime: 'fusion.api.service' via try/except per fusion-api-integration rule
-# NOTE: fusion_portal transitively pulls fusion_claims — accepted for portal reuse
+# NOTE: fusion_authorizer_portal transitively pulls fusion_claims — accepted for portal reuse
 ```
 
 Before coding any Odoo 19 view/JS, read reference files from local OrbStack Docker per project rules.
@@ -712,7 +712,7 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 ---
 
-## Sales rep portal (Phase 1 — mirrors fusion_portal)
+## Sales rep portal (Phase 1 — mirrors fusion_authorizer_portal)
 
 **Goal:** A sales rep on the road takes a client call and submits a repair request from their phone — same intake flow as backend CS wizard, no Odoo login screen.
 
@@ -720,10 +720,10 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 | Option | Recommendation |
 |--------|----------------|
-| **Hard depend on `fusion_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
+| **Hard depend on `fusion_authorizer_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
 | Soft depend (try/except + own fallback flag) | Possible but doubles the code: own `is_sales_rep_portal` mirror + own group. Only worth it if you ever want fusion_repairs standalone. |
 
-We go with hard depend. Add `fusion_portal` to the manifest `depends` list.
+We go with hard depend. Add `fusion_authorizer_portal` to the manifest `depends` list.
 
 ### Architecture
 
@@ -740,7 +740,7 @@ flowchart LR
 
 ### Controller layout ([`controllers/portal_sales_rep_repair.py`](fusion_repairs/controllers/portal_sales_rep_repair.py))
 
-Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_portal/controllers/portal_assessment.py`](fusion_portal/controllers/portal_assessment.py) line 25):
+Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_authorizer_portal/controllers/portal_assessment.py`](fusion_authorizer_portal/controllers/portal_assessment.py) line 25):
 
 | Route | Type | Purpose |
 |-------|------|---------|
@@ -767,14 +767,14 @@ Avoids the trap of two intake flows drifting out of sync.
 
 ### Templates ([`views/portal_sales_rep_templates.xml`](fusion_repairs/views/portal_sales_rep_templates.xml))
 
-QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style:
+QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style:
 
 - `portal_repair_intake_form` — multi-step (accordion or stepper) with same 5 sections as backend wizard
 - `portal_repair_list` — card list with status badge, scheduled date, tech name
 - `portal_repair_detail` — timeline + chatter
 - `portal_repair_intake_thanks` — confirmation page with "Submit Another" button (common on multi-call days)
 
-Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_portal/controllers/portal_main.py) line 85.
+Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_authorizer_portal/controllers/portal_main.py) line 85.
 
 ### JS ([`static/src/js/portal_repair_intake.js`](fusion_repairs/static/src/js/portal_repair_intake.js))
 
@@ -860,7 +860,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Reused (do NOT recreate):**
 - [`fusion_tasks.group_field_technician`](fusion_tasks/security/security.xml) — for technician access to `repair.order` (parallel to existing tech task rules). Same domain `('technician_id', '=', user.id)` adapted as `('x_fc_technician_task_ids.technician_id', '=', user.id)` on repair orders
-- [`fusion_portal.group_sales_rep_portal`](fusion_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
+- [`fusion_authorizer_portal.group_sales_rep_portal`](fusion_authorizer_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
 
 **New groups specific to fusion_repairs:**
 - `group_fusion_repairs_user` — CS intake, view repairs (implied by `base.group_user`)
@@ -896,7 +896,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Sales rep portal (S1-S4, S6, S8):**
 - Portal controllers `/my/repair/new`, `/my/repairs`, `/my/repair/<id>`
-- Mobile-friendly QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style
+- Mobile-friendly QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style
 - Same intake question flow as backend (via shared service layer)
 - Mobile photo / camera capture
 - Client history sidebar exposed in portal form
@@ -1137,7 +1137,7 @@ After implementation, test on local dev only:
 | Backend wizard and sales rep portal drift apart | Both call the same `fusion.repair.intake.service.create_repair_orders(payload)` AbstractModel method; no duplicate business logic |
 | Sales rep accidentally sees other reps' repairs | Record rule `('x_fc_intake_user_id', '=', user.id)` scoped to `base.group_portal`; integration test asserts cross-rep isolation |
 | Portal form abandoned mid-flow on call drop | Save partial state to `localStorage` keyed by partner + timestamp; "Resume" prompt on `/my/repair/new` if recent draft exists |
-| fusion_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
+| fusion_authorizer_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_authorizer_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
 | **Public form spam / abuse** | reCAPTCHA v3 + honeypot + per-IP rate limit + per-phone rate limit + SMS verify before submit (Phase 2). Block ASN ranges via Odoo's `ir.rule` if needed |
 | **AI giving unsafe medical advice** | Strict system prompt + JSON schema validation + keyword filter (rejects "diagnose", "you have", "stop using"); falls back to deterministic rules on any malformed/unsafe output; legal disclaimer "this is not medical advice" shown on every AI step |
 | **AI cost runaway from public traffic** | Hard daily/monthly budget cap via `fusion.api.service`; CAPTCHA gates AI calls; cache results for identical symptom-category pairs; deterministic fallback never costs anything |

docs/superpowers/specs/2026-05-27-nexacloud-billing-importer-design.md

@@ -1,212 +0,0 @@
-# Sub-project #2a — NexaCloud → Odoo Billing Importer (Design)
-
-- **Date:** 2026-05-27
-- **Status:** Design approved (brainstorming session) — implementation in progress
-- **Module:** `fusion_centralize_billing` (Odoo 19 Enterprise, host odoo-nexa / tested on odoo-trial)
-- **Parent:** Sub-project #2 (NexaCloud adapter + dual-run reconciliation). This spec covers **chunk 2a only** — the read-only importer/backfill. 2b (usage wiring), 2c (control loop), 2d (reconciliation) are separate specs.
-- **Depends on:** the core engine (sub-project #1, on `main` at `d770c0c3`): service registry, `_resolve_or_create_partner`, `fusion.billing.charge._compute_billable`, `fusion.billing.usage`, the inbound API, the webhook engine.
-
-## 1. Goal
-
-Backfill the **existing** NexaCloud customers, plans, and deployments into Odoo so the
-central billing engine has a complete shadow copy to run dual-run reconciliation (2d)
-against. The importer is a **one-time, re-runnable** migration — *not* a continuous sync.
-New NexaCloud signups after the cutover already flow through the live inbound API built in
-sub-project #1.
-
-The importer must be **safe by construction**: while NexaCloud is still the live biller,
-nothing the importer creates in Odoo may charge, post, or email a customer.
-
-## 2. Decisions locked in brainstorming (2026-05-27)
-
-1. **Per-deployment granularity.** NexaCloud's own `subscriptions` table carries
-   `deployment_id` + `plan_id`, so the natural mapping is **one Odoo subscription
-   `sale.order` per deployment**. (Confirms spec §15 Q2.)
-2. **Billing model = flat plan price + metered overage.** Customers pay a fixed
-   monthly/yearly plan price PLUS per-unit charges for usage above the plan's quota.
-   (Confirms the original §6 quota+overage assumption.)
-3. **CPU metric standardized to `cpu_seconds`.** The NexaCloud plan quota
-   (`plans.cpu_seconds_quota`) is already in seconds, so it maps to `charge.included_quota`
-   with no conversion. NexaCloud's CPU rate ($0.0075/core-hour) maps to
-   `price_per_unit = 0.0075`, `unit_batch = 3600` (one core-hour = 3600 cpu-seconds).
-4. **CPU is the only metered-overage metric in v1.** It is the only resource with a plan
-   quota. RAM / disk / bandwidth are treated as bundled in the flat plan price for now,
-   addable later as more metrics if NexaCloud actually bills them as overage. (YAGNI.)
-5. **Importer = Odoo-side read-only reader** (Approach A). An Odoo wizard connects
-   read-only to the `nexacloud` Postgres, reads its tables, and writes only into Odoo via
-   the existing model methods. No NexaCloud code is touched.
-6. **Idempotent / re-runnable.** Every created entity is upserted on a stable key, so the
-   importer can run each cycle during the dual-run and update rather than duplicate.
-
-## 3. Source data (NexaCloud, read-only)
-
-Confirmed by reading `/Users/gurpreet/Github/Nexa-Cloud/backend/app/models`. FastAPI +
-async SQLAlchemy on Postgres. Relevant tables/columns:
-
-- **`users`** — `id` (UUID), `email`, `full_name`, `company`, `billing_email`,
-  `billing_address`/`_city`/`_state`/`_postal_code`/`_country`, `tax_id`,
-  `stripe_customer_id`.
-- **`plans`** — `id` (UUID), `product_id`, `name`, `price_monthly`, `price_yearly`,
-  `stripe_price_id`, `cpu_seconds_quota` (BigInteger), `is_active`.
-- **`deployments`** — `id` (UUID), `user_id`, `product_id`, `plan_id`, `name`, `status`,
-  `billing_cycle`, `next_due_date`.
-- **`subscriptions`** — `id` (UUID), `user_id`, `deployment_id`, `plan_id`, `status`
-  (active/cancelled/past_due/trialing/paused), `billing_cycle` (monthly/yearly),
-  `current_period_start`, `current_period_end`, `stripe_subscription_id`.
-
-(The `usage_records`, `invoices`, `addons` tables are out of scope for 2a — usage wiring
-is 2b; reconciliation against NexaCloud invoice/usage totals is 2d.)
-
-## 4. Data mapping
-
-| NexaCloud (read) | Odoo (upsert) | Idempotency key |
-|---|---|---|
-| `users` | `res.partner` + `fusion.billing.account.link` (service=`nexacloud`, external_id=`user.id`) | `account.link (service_id, external_id)` (existing unique constraint) |
-| `plans` | one subscription `product.template` (flat price) + one CPU-overage `product.product` + one `fusion.billing.charge` | `charge.plan_code = plan.id` (UUID string) |
-| `subscriptions`/`deployments` | one **draft** `sale.order(is_subscription)` per deployment | `sale.order.x_fc_nexacloud_subscription_id` |
-| (constant) | `fusion.billing.metric` `cpu_seconds` | `metric.code` (existing unique) |
-| (constant) | `sale.subscription.plan` Monthly + Yearly recurrences | `(billing_period_value, billing_period_unit)` |
-
-### 4.1 Identity (`users` → partner + link)
-
-Reuse `account_link._resolve_or_create_partner(service, external_id, name, email, extra)`.
-- `external_id` = `str(user.id)`, `email` = `user.billing_email or user.email`,
-  `name` = `user.full_name or user.company or email`.
-- `extra` carries billing address fields → `res.partner` (`street`, `city`, `country_id`
-  resolved from the ISO/name, `vat` from `tax_id`).
-- Stash `user.stripe_customer_id` on `res.partner.x_fc_stripe_customer_id` so the eventual
-  flip (not 2a) can reuse the existing Stripe customer instead of creating a new one.
-
-### 4.2 Catalog (`plans` → product + charge)
-
-For each active NexaCloud plan:
-- **Subscription product** (`product.template`, `type='service'`, `recurring_invoice=True`)
-  named after the plan. `recurring_invoice=True` is what makes Odoo treat an order using
-  it as a subscription (verified pattern from the core engine's `_api_create_subscription`).
-- **CPU-overage product** (`product.product`, `type='service'`) — the product the rating
-  math attaches the overage amount to (`charge.product_id`).
-- **`fusion.billing.charge`**: `plan_code=str(plan.id)`, `metric_id=cpu_seconds`,
-  `product_id=`overage product, `included_quota=plan.cpu_seconds_quota`,
-  `price_per_unit=0.0075`, `unit_batch=3600`, `charge_model='standard'`, CAD.
-  **`plan_id` is left NULL on purpose** (see §6) — the hourly auto-rating cron skips
-  charges with no `plan_id`, so importing charges never auto-mutates shadow subscriptions.
-
-### 4.3 Subscription (`deployment` → draft shadow sale.order)
-
-For each deployment that has a NexaCloud subscription:
-- `partner_id` = the mapped partner.
-- `plan_id` = the Monthly or Yearly `sale.subscription.plan` per `subscription.billing_cycle`.
-- `order_line` = one line: the plan's subscription product, qty 1, **`price_unit` set
-  explicitly** to `plan.price_monthly` or `plan.price_yearly` (matching the cycle). Setting
-  the price explicitly makes Odoo's computed amount match NexaCloud's by construction —
-  it does not depend on Odoo subscription-pricing internals or a pricelist.
-- `x_fc_nexacloud_subscription_id` = `str(subscription.id)` (upsert key),
-  `x_fc_nexacloud_deployment_id` = `str(deployment.id)`,
-  `x_fc_billing_service_id` = the nexacloud service, `x_fc_shadow = True`.
-- **Left in draft** (`action_confirm()` is NOT called). No payment token is attached.
-
-## 5. Architecture / mechanism
-
-A new transient model **`fusion.billing.import.wizard`** with one button, but the logic
-lives in two model methods so it is unit-testable headless (the core-engine pattern —
-logic in model methods, thin UI):
-
-- **`_read_nexacloud_rows()`** — opens a **read-only `psycopg2`** connection using a DSN
-  from `ir.config_parameter` (`fusion_billing.nexacloud_dsn`), runs `SELECT`s, and returns
-  a plain dict: `{'users': [...], 'plans': [...], 'subscriptions': [...]}` (rows as dicts).
-  This is the *only* code that touches NexaCloud, and it only reads.
-- **`_import_rows(data, dry_run=False)`** — pure Odoo writes. Consumes the dict, upserts in
-  FK order (metric+recurrences → partners → catalog → subscriptions), returns a summary
-  `{'created': {...}, 'updated': {...}, 'skipped': [...], 'failed': [...]}`. With
-  `dry_run=True` it computes the summary inside a rolled-back savepoint and writes nothing.
-
-`action_run_import()` on the wizard wires them: `self._import_rows(self._read_nexacloud_rows(), dry_run=self.dry_run)`.
-
-## 6. Shadow-mode safety (the critical property)
-
-While NexaCloud is the live biller, the importer must not produce any customer-visible
-billing in Odoo. Three independent guarantees, any one of which is sufficient:
-
-1. **Subscriptions are imported in `draft`.** Odoo's native recurring-invoice cron only
-   invoices confirmed (`3_progress`) subscriptions, so draft imports are never auto-invoiced,
-   posted, or emailed.
-2. **No payment token is imported.** Even a posted invoice could not be auto-charged,
-   because Odoo has no saved Stripe payment method for the partner. Charging is physically
-   impossible.
-3. **Charges are imported with `plan_id = NULL`.** The hourly `_cron_rate_open_periods`
-   skips charges without a `plan_id`, so importing the catalog never mutates any order line.
-
-`x_fc_shadow=True` marks every imported subscription for later identification. The flip
-(out of scope here) is: set `charge.plan_id`, attach payment tokens, `action_confirm()`.
-
-## 7. Error handling
-
-- **Per-row `savepoint`** (`with self.env.cr.savepoint():`) around each entity write
-  (CLAUDE rule #14 — no `cr.commit()` in tests). One malformed row (missing email, unknown
-  plan, bad country) is recorded in `failed` with its reason and skipped; the batch
-  continues.
-- Rows that reference an unresolved parent (subscription whose user/plan failed) are
-  `skipped` with a reason, not failed.
-- `_read_nexacloud_rows()` raises a clear `UserError` if the DSN config param is missing or
-  the connection fails — the wizard surfaces it; nothing is half-written (read happens
-  before any write).
-
-## 8. Testing
-
-Split mirrors §5 so the Odoo logic is fully testable without a foreign DB:
-- **`_import_rows(data)` unit tests** (`TransactionCase`, run on odoo-trial Enterprise via
-  `bash scripts/fcb_test_on_trial.sh`) with hand-built fixture dicts:
-  - partners + links created; re-run updates, does not duplicate (idempotency).
-  - catalog: `cpu_seconds` metric, product, and a `charge` with `included_quota` = quota,
-    `unit_batch=3600`, `price_per_unit=0.0075`, **`plan_id` NULL**.
-  - subscription: one **draft** `sale.order` per deployment, `is_subscription=True`,
-    `price_unit` = the cycle's NexaCloud price, `x_fc_shadow=True`, no confirm.
-  - shadow safety: imported subscription is `draft`/not `3_progress`; no `account.move`
-    is created; partner has no payment token.
-  - malformed rows land in `failed`/`skipped` without aborting the batch.
-  - `dry_run=True` writes nothing (counts only).
-- The `psycopg2` read path is verified manually against the real `nexacloud` DB once
-  access is granted (cannot be unit-tested against a foreign DB).
-
-## 9. Prerequisite (flagged, not blocking the build)
-
-Odoo on nexa (VM 315) needs network reachability + a **read-only credential** to the
-`nexacloud` Postgres (LXC 201), stored as `ir.config_parameter` `fusion_billing.nexacloud_dsn`.
-The build and all unit tests proceed with fixtures; only the live import run is blocked
-until this is granted.
-
-## 10. Out of scope (YAGNI / later chunks)
-
-- RAM / disk / bandwidth overage metrics (only if NexaCloud bills them — add as metrics).
-- The **flip** to live billing (confirm subs, attach tokens, set `charge.plan_id`).
-- Usage metering wiring (2b), control-loop webhooks (2c), reconciliation compute (2d).
-- Importing historical NexaCloud invoices / `usage_records` (2d reads NexaCloud actuals).
-- Add-ons (`deployment_addons`) as recurring lines — revisit if material.
-
-> **Flip-day note (carry into 2b):** the inbound `/usage` API resolves a subscription by
-> its **Odoo integer id** (`int(subscription_external_id)`), but imported shadow subs are
-> keyed by NexaCloud's UUID in `x_fc_nexacloud_subscription_id`. Before NexaCloud can push
-> usage (2b), decide how it learns the Odoo id (return the mapping from the importer, or
-> extend the usage API to also resolve by `x_fc_nexacloud_subscription_id`). Not a 2a bug
-> (2a is read-only), but it must be resolved before the flip.
-
-## 11. Verify at implementation (do NOT code from memory — CLAUDE rule #1)
-
-Confirm on odoo-trial Enterprise before relying on them:
-- A **draft** `sale.order` with `plan_id` + a `recurring_invoice=True` product line reports
-  `is_subscription=True` (so `fusion.billing.usage.subscription_id`'s domain accepts it).
-- `product.template.recurring_invoice` is the correct field name in this build.
-- `sale.subscription.plan` fields `billing_period_value` / `billing_period_unit` (used by
-  the core tests) are the right find-or-create keys.
-- `res.partner` country resolution field (`country_id`) and `vat` for `tax_id`.
-
-## 12. Success criteria
-
-- Running `_import_rows(fixture)` produces, per the mapping in §4, partners+links, a
-  `cpu_seconds`-based charge catalog (`plan_id` NULL), and one **draft** shadow subscription
-  per deployment with the correct flat `price_unit` — and re-running it changes nothing
-  (pure idempotency).
-- No `account.move` and no payment token exist for any imported partner after an import
-  (shadow safety, asserted in tests).
-- Full suite green on odoo-trial (`FCB_EXIT=0`); no `_sql_constraints`, no bare
-  `sale.subscription` model references.

docs/superpowers/specs/2026-05-27-nexacloud-invoice-ledger-design.md

@@ -1,158 +0,0 @@
-# NexaCloud → Odoo Invoice Ledger (Design)
-
-- **Date:** 2026-05-27
-- **Status:** Design approved (brainstorming) — pending written-spec review
-- **Module:** `fusion_centralize_billing` (Odoo 19 Enterprise; build/test on odoo-trial, run on `nexamain`)
-- **Supersedes (for NexaCloud):** the metered-billing direction (recompute charges from a CPU-seconds model). The dual-run proved that model captures ~6% of reality.
-
-## 1. Why this exists (the pivot)
-
-The dual-run reconciliation (2026-05-27) showed **94% of NexaCloud's revenue is billed
-outside** the per-deployment/CPU-metered model the engine was built for:
-
-| NexaCloud invoices | count | total |
-|---|---|---|
-| NOT linked to a `subscriptions` row (Hosting services, add-ons) | 22 | **$2,881.08** |
-| Linked to a `subscriptions` row (what the metered importer reads) | 7 | **$180.79** |
-
-NexaCloud bills via **Stripe** — service invoices (Odoo ERP Hosting / WordPress Hosting
-~$214.50/mo), **add-ons** (Daily Backup, WhatsApp, Forms Builder, White Label), and
-**Stripe proration** ("Remaining time on …"). That billing already works. **Re-implementing
-Stripe's proration + add-on logic in Odoo is the wrong move.** Instead, Odoo **ingests
-NexaCloud's actual invoices** and becomes the single **accounting system of record**
-(posted invoices + reconciled payments + HST), while NexaCloud/Stripe keep doing the billing.
-
-## 2. Goal & scope (locked in brainstorming)
-
-- **Full accounting SoR:** posted `account.move` customer invoices, **Stripe payments
-  reconciled** (invoices show paid, AR accurate), **HST** modelled.
-- **All history + ongoing.** Backfill every NexaCloud invoice, then a daily cron for new ones.
-- **Revenue split by service family** into distinct income accounts (P&L breakdown).
-- **Draft-first rollout:** first nexamain run creates drafts for review, then bulk-post.
-
-## 3. Architecture
-
-A new ingestion component in `fusion_centralize_billing`, mirroring the importer's
-read/write split (reuses the read-only DSN + the `account.link` partner mapping already
-set up on nexamain):
-
-- **`_read_nexacloud_invoices(since=None)`** — read-only `psycopg2`: `invoices` +
-  `invoice_items` (+ `users` for partner resolution), optionally since a date. Returns
-  plain row dicts. The only code touching NexaCloud.
-- **`_ingest_invoices(data, post=False)`** — pure Odoo: for each NexaCloud invoice,
-  upsert one `account.move` (`move_type='out_invoice'`) with lines, tax, and (if paid) a
-  reconciled payment. Idempotent on `x_fc_nexacloud_invoice_id`. Returns a summary. With
-  `post=False` invoices are left **draft**; a separate `_post_ingested(...)` bulk-posts
-  after review.
-- Trigger: an **`account.move`-creation wizard/action** + a daily `ir.cron` for ongoing.
-
-## 4. Data mapping
-
-### 4.1 Invoice → `account.move`
-- `move_type='out_invoice'`, `partner_id` = unified `res.partner` (resolve `invoice.user_id`
-  → `account.link` (service=nexacloud) → partner; create via the importer's resolver if missing),
-  `invoice_date` = NexaCloud invoice date, `ref` = `invoice_number`, `currency_id` = CAD.
-- New fields (x_fc_*) on `account.move`: `x_fc_nexacloud_invoice_id` (idempotency key, unique),
-  `x_fc_stripe_invoice_id`.
-
-### 4.2 `invoice_item` → `account.move.line` (one per item)
-- `name` = item description, `quantity`, `price_unit`, `account_id` = the **service-family
-  income account** (see 4.3).
-- **Tax:** derive the invoice's effective rate from `invoice.tax / invoice.subtotal`; map to
-  the matching Odoo `account.tax` — **HST 13%** when ≈13%, **no tax** when 0, else the closest
-  configured tax. Odoo's computed tax must equal NexaCloud's `invoice.tax` (assert in tests).
-
-### 4.3 Service-family → income account (keyword mapping, with fallback)
-| Family | Matches (description keywords) |
-|---|---|
-| **Hosting** | "Odoo ERP Hosting", "WordPress Website Hosting" |
-| **Managed plans** | "Managed", "Managed Odoo - Standard", "… - Managed" |
-| **Add-ons** | "Daily Backup Protection", "WhatsApp Business Messaging", "Forms Builder", "White Label Branding" |
-| **Proration** | "Remaining time on …" → resolve to the family of the named item |
-| **Other** (fallback) | anything unmatched → a generic NexaCloud income account (flagged in the summary for review) |
-
-Income-account codes come from the COA (`nexa_coa_setup`); confirm/create at implementation.
-
-### 4.4 Payment reconciliation
-- For invoices with `status='paid'` (or `amount_paid >= amount_due`): register an
-  `account.payment` via a **"NexaCloud Stripe" bank journal**, dated `paid_at`, amount
-  `amount_paid`, ref = `stripe_invoice_id`; reconcile it against the posted invoice so the
-  invoice shows **paid** and AR clears.
-- Open/unpaid invoices: post (or draft) without a payment → they sit in AR. Void invoices:
-  ingest as cancelled (or skip) — decide from the data at implementation.
-
-## 5. Idempotency & ongoing sync
-- Upsert on `x_fc_nexacloud_invoice_id` (a DB-unique field on `account.move`). Re-running
-  updates a still-draft move or skips a posted one (never duplicates, never silently mutates
-  a posted ledger entry — posted invoices that changed upstream are reported for manual review).
-- Daily `ir.cron` calls `_read_nexacloud_invoices(since=last_run)` → `_ingest_invoices(post=True)`
-  for go-forward invoices (configurable auto-post once trusted).
-
-## 6. Safety & rollout (touches the live ledger)
-1. Build + **TDD on odoo-trial** (fixture invoices → assert move totals, tax = source tax,
-   payment reconciled, idempotency, family→account mapping).
-2. **Dry-run** mode (read + report, write nothing) — like the importer.
-3. First **nexamain** run: ingest **all history as DRAFT**, report a summary (counts per
-   family, total $, unmatched-"Other" lines, tax mismatches). **You review a sample.**
-4. **Bulk-post** after approval. Then enable the daily cron.
-5. **Prune the obsolete metered shadow data** first: delete the 87 draft shadow
-   `sale.order`s (`x_fc_shadow=True`), the ~464 `NC-*` products, the NexaCloud charges, and
-   the reconciliation rows — they belong to the superseded recompute approach and would
-   confuse the ledger.
-
-## 7. Out of scope
-- The metered recompute engine's go-live (flip, control loop, usage push) — superseded for
-  NexaCloud. The engine code stays in the module (potential future metered service, e.g.
-  NexaMaps) but is inert.
-- NexaDesk / NexaMaps ledgers — separate (same ingestion pattern when needed).
-- Reproducing Stripe's billing logic — explicitly NOT done; we ingest its output.
-
-## 8. Verify at implementation (Odoo 19; never from memory)
-- `account.move` / `account.move.line` / `account.payment` field names + the post flow
-  (`action_post`) and payment register/reconcile API (read `account` + `account_accountant`
-  reference on odoo-trial).
-- The HST `account.tax` record + income accounts + a usable bank journal on `nexamain`
-  (from `nexa_coa_setup`); create the "NexaCloud Stripe" journal + family income accounts if absent.
-- Whether `invoice_items.amount` is pre-tax (expected: `invoice.subtotal = Σ items`; tax separate).
-
-## 9. Success criteria
-- A fixture NexaCloud invoice ingests to a posted `account.move` whose untaxed total, tax
-  (= source `invoice.tax`), and total match the source; a paid one is reconciled and shows paid.
-- Re-running ingests nothing new (idempotent).
-- Dry-run on nexamain reports the full backfill (counts per family, $ totals, unmatched lines)
-  with zero writes; the real run creates drafts; bulk-post on approval.
-- Full suite green on odoo-trial (`FCB_EXIT=0`).
-
-## 10. Backfill status + go-forward caveat (2026-05-27)
-
-- **Backfill done + verified on nexamain.** 23 customer invoices posted + payment-reconciled
-  ($3,403.46), 1 void deleted. NexaCloud's `created_at`/`status`/`paid_at` proved
-  **unreliable** (sync-stamped today; one void marked otherwise), so invoice + payment dates
-  and paid status were verified against the **source systems**:
-  - **Stripe** (14 invoices, `in_*` ids) — real `created` / `paid_at` via the Stripe API.
-  - **Lago** (9 `NEX-*` invoices, `lago:*` ids, billed pre-Stripe) — `issuing_date` +
-    `payment_status=succeeded` via the Lago API (`billing.nexasystems.ca/api/api/v1`, key in
-    Fusion-Chat; Lago host 192.168.1.117, double-hop ssh via supabase-prod).
-  Partner names came from the NexaCloud `company` field (not the user's full_name).
-- **GO-FORWARD: verified sync is LIVE (2026-05-27).** The verification used in the backfill
-  is now folded into the ingest path, and the daily cron is enabled:
-  - `_fc_verify(inv)` routes each invoice to its source by `stripe_invoice_id` prefix
-    (`in_` → Stripe REST `GET /v1/invoices/{id}`; `lago:` → Lago REST) and returns
-    `{invoice_date, void, draft, paid, paid_at, amount_paid}` taken from the SOURCE — or
-    `None` if it can't be determined/reached. Credentials live in `ir.config_parameter`:
-    `fusion_billing.stripe_api_key` (set, live), `fusion_billing.lago_api_url` /
-    `fusion_billing.lago_api_key` (optional; unset — no new Lago invoices expected).
-  - `_cron_sync_verified()` reads all NexaCloud invoices, skips ones already posted, then
-    for the rest: skips **void** and **draft** (not finalized at source), logs **unverified**
-    for retry next run, and ingests the rest with `_ingest_invoices(post=True, verified=…)`
-    so the move uses the source invoice_date (accounting date too) and a payment is
-    reconciled ONLY when the source confirms paid. Never acts on NexaCloud's raw fields.
-  - Cron `cron_fc_invoice_ledger` on nexamain: **active**, daily at 06:00 UTC. (A stale
-    pre-existing copy of this record still called the removed `_cron_ingest_recent`; because
-    the data file is `noupdate="1"` the upgrade didn't rewrite it, so its server-action code
-    + name were corrected once via SQL. Fresh installs get the right definition from the XML.)
-  - First live run (2026-05-27): 23 already-posted, 1 void + 2 Stripe drafts + 5 genuine
-    $0 invoices all correctly skipped, **0 new posted**, ledger intact at $3,403.46.
-  - Verification helpers are unit-tested without network (routing short-circuits when no
-    credentials are set; the cron is exercised with `_read_nexacloud_invoices` / `_fc_verify`
-    patched). Full suite green on odoo-trial (`FCB_EXIT=0`).

docs/superpowers/specs/2026-05-27-nexacloud-reconciliation-design.md

@@ -1,89 +0,0 @@
-# Sub-project #2d — NexaCloud Dual-Run Reconciliation (Design)
-
-- **Date:** 2026-05-27
-- **Status:** Design (proceeding straight to build — approach determined by parent spec §10)
-- **Module:** `fusion_centralize_billing` (Odoo 19 Enterprise; tested on odoo-trial)
-- **Parent:** Sub-project #2. Depends on **2a** (the importer creates the shadow subscriptions + the `cpu_seconds` charge catalog this reconciles against).
-- **Model already exists:** `fusion.billing.reconciliation` (`service_id`, `partner_id`, `period`, `odoo_amount`, `external_amount`, `delta`, `status` ∈ match/delta/resolved, `note`).
-
-## 1. Goal
-
-Prove, for ≥ 1 billing cycle, that Odoo's billing engine computes the **same charge** as
-NexaCloud already does — per subscription, per period — before any real billing is flipped.
-Read-only against NexaCloud; writes only `fusion.billing.reconciliation` rows in Odoo.
-
-## 2. What gets compared
-
-For each imported shadow subscription and period:
-
-- **`external_amount`** = NexaCloud's **actual** pre-tax charge for that subscription+period
-  (the NexaCloud invoice **subtotal**, i.e. flat plan + its own metered overage, before HST).
-- **`odoo_amount`** = what **Odoo would charge** for the same period:
-  `flat + overage`, where
-  - `flat` = the shadow subscription's plan-product line `price_unit` (the imported flat price), and
-  - `overage` = `charge._compute_billable(cpu_seconds)[1]` for the period's CPU usage, with
-    `cpu_seconds = Σ usage_records.cpu_hours × 3600` (the 2a unit convention).
-- **`delta`** = `odoo_amount − external_amount`.
-- **`status`** = `match` if `abs(delta) ≤ tolerance` (default $0.01, configurable), else `delta`.
-
-Comparing **pre-tax subtotals** keeps it apples-to-apples — HST is native Odoo and not what
-we're validating; the metered math + catalog mapping is.
-
-## 3. Architecture (mirrors 2a: pure compute split from the read)
-
-- **`_compute_reconciliation(flat_amount, charge, cpu_seconds, external_amount, tolerance)`**
-  → `(odoo_amount, delta, status)`. Pure, deterministic, unit-tested with fixtures. This is
-  the reconciliation core.
-- **`_reconcile_rows(rows, tolerance=0.01)`** — pure Odoo: for each input row
-  `{subscription_external_id, period, cpu_seconds, external_amount}`, resolve the shadow
-  `sale.order` (by `x_fc_nexacloud_subscription_id`), its `flat` (plan-line `price_unit`) and
-  its `charge` (by `x_fc_nexacloud_plan_id` → `charge.plan_code`), call
-  `_compute_reconciliation`, and **upsert** one `fusion.billing.reconciliation` row keyed by
-  `(service_id, partner_id, period)`. Returns a summary `{match, delta, skipped, failed}`.
-- **`_read_reconciliation_rows(period=None)`** — read-only `psycopg2` (reuses the 2a DSN):
-  per subscription+period, `Σ usage_records.cpu_hours` and the NexaCloud invoice **subtotal**.
-  Integration glue (validated manually, like 2a's reader); not unit-tested against a foreign DB.
-- **Trigger:** a button on the existing import wizard (**“Run Reconciliation”**) and a model
-  method suitable for an `ir.cron`. A non-zero `delta`/`failed` count is surfaced loudly
-  (banner + ERROR log), same as the importer.
-
-## 4. 2a amendment (small, required)
-
-Add **`x_fc_nexacloud_plan_id`** (`Char`) to `sale.order` and set it in the importer's
-`_import_subscription` (from `subscription.plan_id`). Reconciliation needs sub → plan → charge,
-and parsing it out of the product `default_code` would be fragile.
-
-## 5. Idempotency / re-runnability
-
-Reconciliation rows upsert on `(service_id, partner_id, period)`, so re-running a period
-updates its row rather than duplicating — the dual-run is run every cycle.
-
-## 6. Shadow-safety
-
-Reconciliation is pure measurement: it reads NexaCloud and writes only
-`fusion.billing.reconciliation`. It never touches subscriptions, invoices, payments, or the
-charge catalog, so the 2a shadow guarantees are untouched.
-
-## 7. Testing
-
-`TransactionCase` on odoo-trial with fixtures:
-- `_compute_reconciliation`: under-quota match; overage match; a real delta flips status to
-  `delta`; tolerance boundary.
-- `_reconcile_rows`: creates one recon row per subscription; `match` vs `delta` set correctly;
-  re-run upserts (no duplicate); a row for an unknown subscription/charge lands in
-  `skipped`/`failed`, not a crash.
-- amendment: importer sets `x_fc_nexacloud_plan_id`.
-
-## 8. Out of scope
-
-- The **flip** (set `charge.plan_id`, attach tokens, confirm subs) — happens once deltas are
-  within tolerance for ≥ 1 cycle; not automated here.
-- Reading NexaCloud RAM/disk/bandwidth (CPU is the only metered-overage metric in v1, per 2a).
-- A reconciliation dashboard/report view beyond the list of `fusion.billing.reconciliation`.
-
-## 9. Success criteria
-
-- For fixture data where Odoo's math equals NexaCloud's, every row is `match`; where it
-  diverges beyond tolerance, the row is `delta` with the correct signed `delta`.
-- Re-running a period upserts (no duplicate rows).
-- Full suite green on odoo-trial (`FCB_EXIT=0`).

docs/superpowers/specs/2026-05-27-owner-approval-flow-design.md

@@ -1,350 +0,0 @@
-# Owner Approval Flow — Design Spec
-
-**Date**: 2026-05-27
-**Author**: Gurpreet (with Claude)
-**Status**: Approved — ready for implementation plan
-**Touches**: `fusion_helpdesk` (client / entech), `fusion_helpdesk_central` (nexa)
-
-## Problem
-
-Some in-app feature requests and bug reports require sign-off from a real decision-maker at the client (the "owner" — the person paying the bill, not just an Odoo Manager-by-permission). Today this happens out-of-band via WhatsApp or phone, leaving no record on the ticket and forcing Gurpreet to remember who said what to whom.
-
-We need a structured way to loop the client's owner in on tickets that need approval, on-demand from the central support side, with a low-friction approve/reject flow for the owner and a transcript of the decision living on the ticket itself.
-
-## Goals
-
-- Central support (Gurpreet on nexa) decides *which* tickets need approval — never automatic.
-- Owner approves or rejects with **one click** from their email, no login required.
-- The approval decision is **publicly visible** on the ticket (per existing chatter / inbox plumbing) — both the originating employee and central support see who approved or rejected and any optional comment.
-- Owner contact lives in **entech settings** (source of truth) and stays automatically fresh on nexa via piggyback on every ticket submission.
-- An **AI summary** of the ticket goes in the approval email so the owner can decide in 30 seconds without reading the whole thread.
-- **Single-shot reminder** if no response in N days.
-- **Bulk engagement** when multiple requests need the same owner's sign-off in one batch.
-- **Reporting dashboard** so Gurpreet can spot stuck approvals at a glance.
-
-## Non-goals
-
-- Manager-tier approvals (rejected during brainstorming — "manager" by Odoo permission ≠ business-authority owner; only owner needed).
-- SLAs / hard deadlines on owner response.
-- Multi-step approval chains (one owner, one decision).
-- Owner-facing mobile app or portal beyond the approve / reject confirmation page — email + magic link is the entire UX.
-- Auto-progressing the ticket stage on approval — Gurpreet still manually completes the work.
-
-## Architecture
-
-### Module split
-
-| Module | Role | Touches |
-|---|---|---|
-| `fusion_helpdesk` (entech, client) | Lets the client configure their owner contact; sends contacts upstream on every ticket | 2 ICP settings, settings view, `/fusion_helpdesk/submit` payload |
-| `fusion_helpdesk_central` (nexa) | Owns the engagement flow end-to-end: storage, wizard, email, public portal, reminder cron, dashboard | New wizard model, ticket fields, mail template, public controllers, OpenAI client, reporting views |
-
-### Data model
-
-#### Entech (`fusion_helpdesk`)
-
-Two new `ir.config_parameter` keys exposed in **Settings → Fusion Helpdesk → Owner Approval**:
-
-- `fusion_helpdesk.owner_email` — Char
-- `fusion_helpdesk.owner_name` — Char
-
-`controllers/main.py::submit` piggybacks both keys on every ticket payload (alongside the existing identity keys). Both are optional — leaving them blank disables the Engage button on central for that client.
-
-#### Central (`fusion_helpdesk_central`)
-
-Extend existing `fusion.helpdesk.client.key` (one row per client deployment):
-
-| Field | Type | Purpose |
-|---|---|---|
-| `owner_email` | Char | Current owner contact for this client. Upserted on every incoming ticket from the submit payload. |
-| `owner_name` | Char | Display name for greeting / chatter attribution. |
-
-Extend `helpdesk.ticket`:
-
-| Field | Type | Purpose |
-|---|---|---|
-| `x_fc_engagement_state` | Selection (`none`/`pending`/`approved`/`rejected`) | Drives kanban badge + state pill on form. Default `none`. |
-| `x_fc_engagement_email` | Char | Snapshot of owner email reached for *this* engagement. Survives later edits to `client_key.owner_email`. |
-| `x_fc_engagement_name` | Char | Snapshot of owner name. |
-| `x_fc_engagement_token` | Char (UUID4) | Single-use token in the magic link. Cleared on confirm. |
-| `x_fc_engagement_sent_at` | Datetime | When the engagement email was first queued. |
-| `x_fc_engagement_reminded_at` | Datetime, nullable | When the single reminder went out. Set by cron. |
-| `x_fc_engagement_decided_at` | Datetime, nullable | When state transitioned to `approved`/`rejected`. Drives turnaround metric. |
-| `x_fc_ai_summary` | Text | The brief used in the email; editable in the wizard before send; read-only after. |
-| `x_fc_engagement_turnaround_hours` | Float, `store=True`, computed | `(decided_at - sent_at) / 3600`. Lets the pivot view aggregate. |
-
-New transient model `fusion.helpdesk.engagement.wizard` — see Engagement Wizard below.
-
-New `ir.config_parameter` keys (Helpdesk → Configuration):
-
-- `fusion_helpdesk_central.openai_api_key` — Char, system-only readable
-- `fusion_helpdesk_central.openai_model` — Char, default `gpt-4o-mini`
-- `fusion_helpdesk_central.engagement_reminder_days` — Integer, default `3`; `0` disables reminders
-
-## Engagement flow (single ticket)
-
-1. Support opens the ticket → clicks **`Request Owner Approval`** (header button; only rendered when `x_fc_client_label` is set and `client_key.owner_email` is configured).
-2. Wizard `fusion.helpdesk.engagement.wizard` opens:
-   - **AI Summary** textarea — auto-populated on `default_get` via one OpenAI call against `{ticket.name + html2plaintext(ticket.description) + each public chatter message}`. Editable.
-   - **Personal note** textarea — Gurpreet's own one-liner that prepends the email body.
-   - Read-only display of `owner_email` / `owner_name` resolved from `client_key`.
-   - **[Send]** button.
-3. On send:
-   - `token = uuid4().hex`
-   - Ticket fields written: `engagement_state='pending'`, `engagement_email`, `engagement_name`, `engagement_token`, `engagement_sent_at=now`, `ai_summary`
-   - Mail template `mail_template_engagement` rendered → queued (`mail.mail`, `auto_delete=True`)
-   - Wizard closes
-4. Owner receives email → reads → clicks **`Approve`** or **`Reject`** (two big buttons, each a `https://erp.nexasystems.ca/fusion_helpdesk/engagement/<token>/<decision>` URL).
-5. Public controller resolves the token → renders a small standalone QWeb page (not the heavy portal layout):
-   - Header strip with Nexa Systems branding
-   - Ticket title + one-line AI summary
-   - Optional comment textarea
-   - **[Confirm Approval]** / **[Confirm Rejection]** button
-   - If token invalid / used / wrong state → friendly "This link has already been used or is no longer valid" page
-6. On confirm:
-   - Resolve owner partner: find-or-create `res.partner` by email (reusing the existing `_resolve_author`-style pattern from customer replies)
-   - Post chatter message on ticket, attributed to that partner, subtype `mail.mt_comment` (public):
-     ```
-     ✓ Approved by {{ owner_name }}
-     <i>{{ comment }}</i>     ← only if comment provided
-     ```
-   - Write `engagement_state='approved'|'rejected'`, `engagement_token=False`, `engagement_decided_at=now`
-   - The chatter message propagates to the employee's My Tickets thread via the existing `_public_messages` filter, satisfying the "Fully visible" UX choice.
-   - Gurpreet receives the standard Odoo follower notification.
-7. Support sees the state pill flip from amber `⏳ Awaiting approval from Kris` to green `✓ Approved by Kris`, then progresses the ticket as normal.
-
-### Re-engagement
-
-If Gurpreet clicks **`Request Owner Approval`** on a ticket that's already `pending` / `approved` / `rejected`, the wizard opens normally; on send it overwrites the token, snapshot fields, summary, `sent_at`, and clears `reminded_at` and `decided_at`. State resets to `pending`. Old chatter messages from prior engagements stay as audit history. Old tokens are immediately dead (the token field has changed).
-
-### Token security
-
-UUID4 is 122 bits of entropy — sufficient against guessing. Tokens are single-use (cleared on confirm). No date-based expiry in v1 — keep it simple; if abuse appears, add a 14-day `engagement_sent_at` cutoff in the controller.
-
-## AI summary (OpenAI integration)
-
-- Model: `gpt-4o-mini` (configurable via ICP). ~$0.15/1M input tokens; one call per Engage click. ~$0.01/month at 10 engagements/week.
-- Transport: `urllib.request` against `https://api.openai.com/v1/chat/completions` — no new pip dependency.
-- Timeout: 15 seconds. On failure → summary field renders empty + soft banner "AI summary unavailable — write a quick brief manually." Wizard remains usable.
-- HTML stripping: `odoo.tools.mail.html2plaintext()` (built-in).
-- Token cap: assembled prompt truncated to 8000 characters (well below context window, bounds cost on tickets with 50+ messages).
-- Prompt is a Python constant (`fusion_helpdesk_central/utils.py::SUMMARY_PROMPT`) so it's editable in one place without UI churn. See Engagement Wizard for prompt text.
-- **Privacy**: ticket description + chatter goes to OpenAI. Document in client onboarding. Empty API key disables the auto-fill but keeps the wizard working with a manual summary.
-
-## Engagement Wizard (`fusion.helpdesk.engagement.wizard`)
-
-`models.TransientModel` with:
-
-- `ticket_id` Many2one (or `ticket_ids` for bulk — see below)
-- `personal_note` Char
-- `ai_summary` Text
-- `owner_email_display` Char (computed, readonly)
-- `owner_name_display` Char (computed, readonly)
-- `is_reminder` Boolean (set by cron, not by user)
-
-`default_get` triggers `_compute_ai_summary()` which:
-
-1. Reads ticket name, description (`html2plaintext`), and public messages
-2. Builds the prompt from `SUMMARY_PROMPT` template
-3. Truncates to 8000 chars
-4. POSTs to OpenAI, parses response, sets `ai_summary`
-5. Catches all exceptions → logs warning, sets `ai_summary=''`
-
-`action_send` performs all writes + queues mail and returns `{'type': 'ir.actions.act_window_close'}`.
-
-### Summary prompt (frozen Python constant)
-
-```
-You are summarising a customer support ticket for a busy executive
-who needs to decide whether to approve the work.
-
-Output rules:
-- 4–6 short bullet points, plain text (no markdown).
-- First bullet: the ask, in one sentence.
-- Second bullet: the business impact if approved.
-- Third bullet: the business impact if NOT approved (or "none material").
-- Optional bullets: cost / effort signals if any are mentioned.
-- Final bullet: open questions the approver should think about.
-- Do not invent facts. If the thread doesn't say, write "not stated".
-- No greetings, no sign-offs, no preamble.
-
-Ticket title: {name}
-Original report:
-{description_plain}
-
-Replies so far:
-{messages_plain}
-```
-
-## Email + magic links
-
-`mail.template` shipped in `fusion_helpdesk_central/data/mail_template_engagement.xml`.
-
-- **From**: outgoing mail server default
-- **Reply-To**: Gurpreet's email (`gs@nexasystems.ca`) — replies don't fall into the bot inbox
-- **To**: `x_fc_engagement_email`
-- **Subject**: `Action needed: please review request "{{ ticket.name }}"`
-- **Reminder subject** (when wizard's `is_reminder=True`, set by cron): `Reminder: still waiting on your approval — "{{ ticket.name }}"`
-- **Body**: branded HTML matching the existing ack template style; greeting uses `engagement_name`; includes personal note, summary, full description + chatter in a `<details>` collapsible, two big approve/reject buttons.
-
-### Public approval portal
-
-Routes (both `auth='public'`, `csrf=False`):
-
-- `GET /fusion_helpdesk/engagement/<token>/<string:decision>` — renders the confirmation page (or "no longer valid" page if token / state invalid). `decision` is validated against `('approve', 'reject')`.
-- `POST /fusion_helpdesk/engagement/<token>/<string:decision>` — accepts optional `comment` form field, performs the state transition + chatter post, renders a "Thanks — your decision is recorded" page.
-
-Token resolution helper `_resolve_engagement(token, decision)` returns the ticket or raises a friendly error if anything's off. Used by both GET and POST.
-
-## Bulk engagement
-
-Server action on `helpdesk.ticket` list view: **`Request Owner Approval (bulk)`**.
-
-### Validation (hard errors)
-
-- All selected tickets share the same `x_fc_client_label` — otherwise: "Cannot bulk-engage tickets across different deployments."
-- All selected tickets have `engagement_state in ('none', 'rejected')` — otherwise: "{n} of the selected tickets already have a pending or approved engagement. Engage them individually."
-- `client_key.owner_email` is configured for the deployment — otherwise the standard tooltip error.
-
-### Wizard
-
-Same `fusion.helpdesk.engagement.wizard` model gains a `ticket_ids` Many2many to `helpdesk.ticket` (single-ticket mode keeps using `ticket_id`; the wizard checks which is set and branches). Per-ticket AI summaries generated **in parallel** via `concurrent.futures.ThreadPoolExecutor(max_workers=5)` with a 30-second overall timeout. Each per-ticket summary is editable in its own row in the wizard view via a child transient model `fusion.helpdesk.engagement.wizard.line` (fields: `wizard_id`, `ticket_id`, `ai_summary`).
-
-### Email
-
-A single combined email with one card per ticket. Each card has its own `[Approve][Reject]` buttons, each pointing at that ticket's unique token. Owner can decide per-ticket, ignore some, come back to the same email later (links stay live until clicked or re-engaged).
-
-### Layout (rendered HTML)
-
-```
-Hi Kris,
-
-5 requests from ENTECH need your sign-off. Each can be approved or
-rejected independently — clicking a button on one card only acts on
-that card.
-
-──── Request 1 of 5 ──────────────────────────────
-"Drag and drop steps"
-• <summary bullets>
-[✓ Approve]  [✗ Reject]
-
-──── Request 2 of 5 ──────────────────────────────
-...
-```
-
-## Reminder cron
-
-`ir.cron`, daily at 09:00, sudo:
-
-```python
-N = int(ICP.get_param('fusion_helpdesk_central.engagement_reminder_days') or 3)
-if N <= 0:
-    return    # disabled
-cutoff = fields.Datetime.now() - timedelta(days=N)
-to_remind = self.env['helpdesk.ticket'].search([
-    ('x_fc_engagement_state', '=', 'pending'),
-    ('x_fc_engagement_sent_at', '<=', cutoff),
-    ('x_fc_engagement_reminded_at', '=', False),
-])
-for ticket in to_remind:
-    template.with_context(is_reminder=True).send_mail(
-        ticket.id, force_send=False)
-    ticket.x_fc_engagement_reminded_at = fields.Datetime.now()
-```
-
-**Single-shot by design** — no second reminder. If still no response after one nudge, the right action is human (call the owner), not another email.
-
-Same token, same magic links — the owner can click either the original or the reminder email.
-
-## Reporting dashboard
-
-Menu: **Helpdesk → Reporting → Owner Engagements** (new entry, after Tickets Analysis).
-
-Action opens four views over `helpdesk.ticket` filtered by `('x_fc_engagement_state', '!=', 'none')`:
-
-1. **Pivot** (default): rows = `x_fc_client_label`, columns = `x_fc_engagement_state`, measures = count + avg `x_fc_engagement_turnaround_hours`
-2. **Graph (bar)**: engagement count over time grouped by `x_fc_client_label`
-3. **List**: ticket_ref, client, owner name/email, state, sent_at, reminded_at, decided_at, turnaround_hours
-4. **Kanban (default group by state)**: at-a-glance count per state
-
-Filters: by client, by state, by date range. Canned filter "Pending > 7 days" highlights stuck approvals.
-
-No new model; everything is derived from `helpdesk.ticket`. The stored computed field `x_fc_engagement_turnaround_hours` makes the pivot fast on large datasets.
-
-## UI changes
-
-### Helpdesk ticket form (nexa)
-
-- New header button **`Request Owner Approval`** (visible iff `x_fc_client_label` set AND `client_key.owner_email` set; tooltip on disabled state explains why)
-- State pill right of the title:
-  - `none` → no pill
-  - `pending` → amber `⏳ Awaiting approval from {{ engagement_name }}`
-  - `approved` → green `✓ Approved by {{ engagement_name }}`
-  - `rejected` → red `✗ Rejected by {{ engagement_name }}`
-- New collapsible group **`Owner Engagement`** showing `ai_summary` (read-only after send), `engagement_email`, `engagement_name`, `engagement_sent_at`, `engagement_reminded_at`, `engagement_decided_at`, `engagement_turnaround_hours`
-
-### Helpdesk ticket kanban (nexa)
-
-Amber corner dot when `engagement_state == 'pending'` — surfaces blockers in the kanban view without opening each card.
-
-### Entech settings UI
-
-New section **Owner Approval** under existing Fusion Helpdesk group:
-
-- `Owner email` text input
-- `Owner name` text input
-- Help text: "Used when Nexa Systems support requests approval for a feature or bug fix that needs sign-off. Leave blank if your deployment doesn't require approvals."
-
-## Edge cases
-
-| Case | Behaviour |
-|---|---|
-| Owner contact not configured on entech | `Request Owner Approval` button disabled, tooltip: "Owner contact not configured for this client. Ask them to fill it in under Settings → Fusion Helpdesk." |
-| Token reused after first click | Friendly "This approval link has already been used or is no longer valid" page with a `mailto:support@nexasystems.ca` link. |
-| Owner gets re-engaged | New token replaces old; old immediately invalid. State resets to `pending`. Old chatter is preserved. `reminded_at` / `decided_at` cleared. |
-| OpenAI down / no API key | Wizard opens with empty summary + soft banner; you type your own brief, send normally. |
-| Owner replies to the email instead of clicking | Mail gateway treats it as a regular comment (existing flow). State stays `pending` until they click a magic link. |
-| Employee files a follow-up while owner is deciding | Reply lands in chatter normally; owner sees it next time they reload, but their engagement is tied to the snapshot AI summary (intentional — owner judges a stable artifact). |
-| Bulk action selects tickets across clients | Hard error before wizard opens. |
-| Bulk action selects tickets that already have pending engagements | Hard error specifying the count of disallowed tickets. |
-| Approved ticket needs to be "reversed" | No undo button. Re-engage with a fresh wizard → new summary → re-send. Audit chain stays in chatter. |
-
-## Tests
-
-Pure helpers in `fusion_helpdesk_central/utils.py` (new file):
-
-- `build_summary_prompt(ticket_dict, messages)` → str
-- `truncate_for_openai(prompt, max_chars=8000)` → str
-- `format_engagement_chatter(decision, owner_name, comment)` → Markup
-
-`fusion_helpdesk_central/tests/test_utils.py`:
-
-- Prompt structure (correct ordering, all fields present, empty-thread fallback)
-- Truncation (preserves the prefix and ticket title)
-- Chatter formatting (approve / reject / with-comment / without-comment)
-
-`fusion_helpdesk_central/tests/test_engagement.py`:
-
-- Token generation is unique per call
-- Wizard `action_send` writes all expected fields, queues mail, returns close action
-- Re-engagement clears the old token + decided_at + reminded_at, resets state to `pending`
-- Public controller rejects invalid / used / wrong-decision tokens with friendly error
-- Public controller `POST` confirms decision, posts chatter, writes state
-- State transitions are correctly one-way (approved → approved is no-op, approved → re-engaged → pending works)
-- Bulk wizard rejects mixed-client selection
-- Bulk wizard rejects already-pending tickets in selection
-- Reminder cron only acts on rows past cutoff and not already reminded
-- Computed `turnaround_hours` matches expected delta after decision
-
-OpenAI is mocked in tests — no live API calls in CI.
-
-## Versions
-
-- `fusion_helpdesk` → bump to `19.0.2.0.0` (minor feature, new settings)
-- `fusion_helpdesk_central` → bump to `19.0.2.0.0` (major feature, multiple new fields + wizard + controllers + cron + reporting)
-
-## Deployment order
-
-1. Deploy `fusion_helpdesk_central` first (it owns the storage, the wizard, the email template, the public routes, the cron, the reporting). It can sit dormant — no Engage button is reachable until `client_key.owner_email` is populated.
-2. Deploy `fusion_helpdesk` second (adds the entech settings + payload piggyback). First ticket filed after this deploy populates `client_key.owner_email` on central.
-3. Backfill: for any client that already has owner contact info known to Gurpreet (e.g., entech → kris@enplating.ca), edit the `client_key` row directly on nexa via the existing config UI. Or simply wait — the next ticket from that client will populate it.

docs/superpowers/specs/2026-05-30-schedule-driven-attendance-design.md

@@ -1,247 +0,0 @@
-# Schedule-Driven Attendance Automation — Design
-
-**Date:** 2026-05-30
-**Module:** `fusion_clock`
-**Status:** Approved design → ready for implementation plan
-
-## Goal
-
-Drive every attendance automation (clock-in/out reminders, absence detection,
-late/early penalties, auto-clock-out) from each employee's **real schedule** —
-the team lead's **posted** planner entry first, then the employee's **recurring
-shift** — never the global 9–5 default. Employees who aren't scheduled get no
-reminders or absence flags. Overtime past the scheduled end is normal and is
-never cut off.
-
-## Problem & root cause
-
-The machinery already exists: `fusion.clock.shift` (recurring templates,
-assigned via `hr.employee.x_fclk_shift_id`), `fusion.clock.schedule` (dated
-per-employee entries built in the backend **shift planner** client action), and
-`hr.employee._get_fclk_day_plan(date)` which resolves per-day times. The crons
-already call these.
-
-The bug: in `_get_fclk_day_plan()`, when an employee has **no dated entry and no
-assigned shift**, it silently falls back to the **global 9–5 default with
-`is_off = False`**. So everyone is treated as a 9–5 worker, and the reminder /
-absence crons fire off that global time. The crons also **hardcode-skip Sat/Sun**
-(`weekday() >= 5`), which is wrong for a production floor that runs weekends.
-Net effect: reminders are not actually schedule-driven for anyone who isn't on a
-fixed weekday 9–5 — exactly the spurious-email problem reported.
-
-## Decisions (from brainstorming)
-
-1. **"Expected to work" source:** posted planner entry → else recurring shift
-   (if it covers that weekday) → else **not scheduled** (silent). The global
-   default never makes someone "expected."
-2. **Overtime:** time past the scheduled end is overtime and is never cut off.
-   Auto-clock-out fires **only** at a generous safety cap (forgot-to-clock-out).
-3. **Posting:** draft → post gate. Team leads build the week in draft;
-   automation ignores draft days. "Post" publishes the week and emails each
-   employee their shifts. Only posted entries drive automation.
-4. **Employee schedule view:** reuse the **existing "Today's Shift" card** on
-   `/my/clock` — no new portal view. (See Coordination.)
-
-## Non-goals / constraints
-
-- **No edits to the employee `/my` portal shell.** A concurrent session
-  ("Internal employee portal design", `fusion_plating`) owns `/my` + `/my/home`
-  routing and the `/my/clock` bottom-nav tabs (it is adding a Payslips tab).
-  This feature makes **zero** edits to `controllers/portal_clock.py` routing,
-  `views/portal_clock_templates.xml`, or `/my` routing. The existing "Today's
-  Shift" card already renders `today_schedule.get('label') or 'Not scheduled'`,
-  so once the resolver is schedule-driven the card updates itself. Employees get
-  their full posted week via the Post notification email. A dedicated "My
-  Schedule" nav tab, if ever wanted, belongs to the portal-shell session.
-- The backend **shift planner** client action (manager/team-lead facing) is
-  *not* the `/my` portal and **is** in scope to edit (Post button, draft/posted
-  visuals).
-- No change to how attendance hours / overtime are computed.
-
-## Architecture
-
-### 1. Schedule resolver — `hr.employee._get_fclk_day_plan(date)`
-
-Rewrite to return an explicit `scheduled` flag and a precise `source`, keeping
-all existing keys for backward compatibility (`is_off`, `label`, `hours`,
-`start_time`, `end_time`, `break_minutes`).
-
-Return shape:
-```python
-{
-  'scheduled': bool,            # is the employee expected to work this day?
-  'source': 'schedule' | 'shift' | 'none',
-  'is_off': bool,
-  'start_time': float, 'end_time': float, 'break_minutes': float,
-  'hours': float,
-  'label': str,                 # '' when not scheduled → card shows 'Not scheduled'
-  'schedule_id': int | False,
-}
-```
-
-Resolution order:
-1. **Posted planner entry** (`fusion.clock.schedule`, `state == 'posted'`) for
-   (employee, date) — *draft entries are ignored, treated as absent*:
-   - `is_off` → `scheduled=False`, `is_off=True`, `source='schedule'`, `hours=0`,
-     `label='OFF'`.
-   - else → `scheduled=True`, times from entry, `source='schedule'`.
-2. Else **recurring shift** `x_fclk_shift_id` **and** the shift covers
-   `date`'s weekday → `scheduled=True`, times from shift, `source='shift'`.
-3. Else → `scheduled=False`, `source='none'`, `is_off=False`, `label=''`,
-   `hours=0`. (Global default may fill `start_time`/`end_time` as a display
-   hint only; it never sets `scheduled=True`.)
-
-`_get_fclk_scheduled_times()` and `_get_fclk_break_minutes()` keep working off
-this structure unchanged.
-
-### 2. Data model changes
-
-- **`fusion.clock.schedule`**: add
-  - `state = Selection([('draft','Draft'),('posted','Posted')], default='draft')`
-  - `posted_date = Datetime`
-  - Automation reads only `state == 'posted'`.
-- **`fusion.clock.shift`**: add a weekday pattern —
-  `day_mon … day_sun = Boolean` (default Mon–Fri True, Sat–Sun False) plus a
-  helper `covers_weekday(date) -> bool`. This replaces the hardcoded weekend
-  skip and lets weekend shifts exist. (Judgment call: pattern lives on the
-  shared shift template, e.g. "Mon–Fri Day", "Sat–Sun Weekend"; unique patterns
-  → own template or a posted planner override.)
-
-### 3. Posting workflow
-
-- New jsonrpc route `POST /fusion_clock/shift_planner/post_week` in
-  `controllers/shift_planner.py`:
-  - Gate: manager OR team lead.
-  - Scope: managers → all in-scope employees for the viewed week; team leads →
-    their direct reports (`parent_id` == the team lead's employee). Reuse the
-    existing dashboard scoping helper.
-  - Set `state='posted'`, `posted_date=now` on those week entries.
-  - Queue **one email per affected employee** summarizing their posted shifts
-    for the week (reuse `_fclk_email_wrap`). Failures logged, never block the
-    post.
-- New planner entries default to `draft`. Re-posting after edits re-publishes
-  (and re-notifies, flagged as an update).
-- Planner client action (`static/src/js/fusion_clock_shift_planner.js` + its
-  template) gains a **Post** button and a draft-vs-posted visual cue. (Backend
-  client action — not the `/my` portal.)
-
-### 4. Reminder cron — `hr.attendance._cron_fusion_employee_reminders`
-
-- Remove the `weekday() >= 5` hardcode.
-- Per enabled employee: `plan = emp._get_fclk_day_plan(today)`; **if not
-  `plan['scheduled']` → skip** (silent).
-- Missed clock-in: if scheduled, not checked in, no attendance today, and
-  `now > scheduled_in + reminder_before_shift_minutes` → remind. Uses the
-  employee's real start, so a 14:00 shift is never pinged at 09:30.
-- Clock-out reminder: **reframed** (judgment call). Drop the "your shift ends at
-  X" nudge (noise when OT is the norm). Instead, if still checked in and
-  approaching the safety cap (`check_in + max_shift_hours -
-  reminder_before_end_minutes`), send "you're still clocked in — remember to
-  clock out."
-
-### 5. Absence cron — `hr.attendance._cron_fusion_check_absences`
-
-- Remove the `weekday() >= 5` hardcode.
-- Per enabled employee: `plan = emp._get_fclk_day_plan(yesterday)`; **only flag
-  absent if `plan['scheduled']`** AND no attendance AND no leave request AND no
-  global holiday. Off/unscheduled → never flagged.
-
-### 6. Auto-clock-out — `hr.attendance._cron_fusion_auto_clock_out`
-
-- Stop closing at `scheduled_out + grace`. Close **only** at the safety cap
-  `check_in + max_shift_hours`. Everything between the scheduled end and the cap
-  is captured as overtime by the existing fields.
-- Bump default `max_shift_hours` **12 → 16** (still configurable).
-- Keep `x_fclk_pending_reason=True`, break deduction, and office notify on
-  auto-close.
-
-### 7. Penalties — `controllers/clock_api.py::_check_and_create_penalty`
-
-- Skip when the day is not scheduled (`not plan['scheduled']`), in addition to
-  the existing posted-OFF skip. Late-in / early-out stay keyed off the resolved
-  scheduled start/end. Overtime is never penalized.
-
-### 8. Kiosk callers — `clock_kiosk.py`, `clock_nfc_kiosk.py`
-
-- The existing `is_scheduled_off = source == 'schedule' and is_off` checks keep
-  working for posted-OFF days. Extend the "unscheduled shift" log + penalty-skip
-  to also cover `source == 'none'` (clocked in on a day with no schedule) so a
-  not-scheduled clock-in is logged as `unscheduled_shift` and creates no penalty.
-
-### 9. Settings
-
-- `res_config_settings`: change `fclk_max_shift_hours` default 12 → 16 (and the
-  resolver/cron `get_param` fallback). Optionally surface the shift weekday
-  pattern on the shift form. No other new settings required.
-
-### 10. Frontend
-
-- **No file edits.** The existing "Today's Shift" card auto-reflects the new
-  resolver: scheduled → times + hours; posted OFF → "OFF"; not scheduled →
-  "Not scheduled" (already coded as `label or 'Not scheduled'`).
-
-## Data flow
-
-posted planner entry / recurring shift → `_get_fclk_day_plan(date)` →
-`scheduled` flag → consumed by: reminder cron, absence cron, penalty helper,
-kiosk unscheduled-log, and (read-only) the portal "Today's Shift" card. Posting
-flips `state` to `posted` (making entries visible to the resolver) and emails
-employees.
-
-## Error handling
-
-- Crons: wrap each employee's body in `with self.env.cr.savepoint():` so one bad
-  record can't abort the batch (savepoints, not `cr.commit()` — works in prod and
-  tests).
-- Posting: state writes + email queueing in one transaction; email creation in
-  try/except with logging so a bad address never blocks the post.
-- Notifications: `mail.mail` with `auto_delete=True`; send failures logged.
-
-## Testing (`tests/test_schedule_driven.py`, post_install)
-
-- **Resolver matrix:** posted-working / posted-off / draft-ignored /
-  recurring-covers-weekday / recurring-skips-weekday / nothing → not-scheduled.
-  Assert `scheduled`, times, and `label`.
-- **Reminder cron:** scheduled + late + no attendance → reminder; not scheduled →
-  none; 14:00 shift not pinged at 09:30; already clocked in → no clock-in
-  reminder.
-- **Absence cron:** scheduled no-show → absent logged; not scheduled → not
-  flagged; leave/holiday → not flagged.
-- **Auto-clock-out:** open past scheduled end but under cap → stays open; past
-  cap → closed + `x_fclk_pending_reason`.
-- **Posting:** draft entry → resolver `scheduled=False` (ignored by crons); post
-  → `state='posted'`, resolver picks it up, email queued; team lead can post only
-  direct reports.
-- **Penalties:** not-scheduled clock-in → no penalty; scheduled late → `late_in`.
-
-## Files expected to change (for the plan)
-
-- `models/hr_employee.py` — resolver refactor.
-- `models/clock_shift.py` — weekday booleans + `covers_weekday`.
-- `models/clock_schedule.py` — `state` + `posted_date`.
-- `models/hr_attendance.py` — reminders, absences, auto-clock-out + savepoints.
-- `controllers/clock_api.py` — penalty skip when not scheduled.
-- `controllers/clock_kiosk.py`, `controllers/clock_nfc_kiosk.py` — unscheduled
-  log/penalty for `source == 'none'`.
-- `controllers/shift_planner.py` — `post_week` route + scope + notifications;
-  default new entries to draft.
-- `static/src/js/fusion_clock_shift_planner.js` + planner template — Post button,
-  draft/posted visuals.
-- `models/res_config_settings.py` + `views/res_config_settings_views.xml` —
-  `max_shift_hours` default 16; optional weekday-pattern surfacing.
-- `views/clock_shift_views.xml` — weekday checkboxes on the shift form.
-- `views/clock_schedule_views.xml` — show `state`.
-- `tests/test_schedule_driven.py` (+ `tests/__init__.py`).
-- **Not touched:** `controllers/portal_clock.py` routing,
-  `views/portal_clock_templates.xml`, `/my` routing (owned by the concurrent
-  portal-shell session).
-
-## Coordination
-
-Concurrent session "Internal employee portal design" (`fusion_plating`) owns the
-employee `/my` portal shell: `/my` + `/my/home` redirect to the clock page and
-new bottom-nav tabs (Payslips). This feature is **backend-only on the frontend
-side** — it edits no `/my` portal files — so the two land without conflict
-regardless of order. Shared touchpoint to watch: both evolve the employee
-experience; if a "My Schedule" nav tab is desired, it is the portal-shell
-session's responsibility, fed by this feature's resolver.

docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md

@@ -1,256 +0,0 @@
-# Fusion Clock — Province-Aware Automatic Unpaid Break (2-tier)
-
-- **Date:** 2026-05-31
-- **Module:** `fusion_clock`
-- **Version bump:** `19.0.4.0.3` → `19.0.4.1.0`
-- **Status:** Approved design, pending implementation plan
-- **Author:** Claude Code (brainstormed with user)
-
-## 1. Problem
-
-Statutory unpaid meal breaks are jurisdiction-driven: a break is required after N1
-hours of work, and a second break after a higher N2 threshold. Ontario, for example:
-a 30-minute eating period after 5 hours of work, and (per the user's policy) another
-30 minutes after 10 hours. The deduction must be **automatic** and must apply on **every**
-way an attendance is recorded — including a manager manually adding or editing hours.
-
-### Audit of current behaviour (what exists today)
-
-The deduction field is `hr.attendance.x_fclk_break_minutes` (minutes). Net hours are
-`x_fclk_net_hours = worked_hours − x_fclk_break_minutes/60` (`models/hr_attendance.py:261`).
-
-Break minutes are written from **four** places, all implementing variations of one rule:
-
-1. `controllers/clock_api.py::_apply_break_deduction` (line 161) — on **clock-out**;
-   reused by the PIN kiosk (`controllers/clock_kiosk.py:158`) and NFC kiosk
-   (`controllers/clock_nfc_kiosk.py:381`). Logic: `if worked_hours >= break_threshold_hours`
-   (default **4.0h**) → set break to `employee._get_fclk_break_minutes()` (default **30**),
-   using `max(new, current)` so it doesn't wipe penalty minutes.
-2. Auto-clock-out cron (`models/hr_attendance.py:343`) — same single-threshold write.
-3. `controllers/clock_api.py::_check_and_create_penalty` (line 140) — **adds** penalty
-   minutes into the same `x_fclk_break_minutes` field.
-
-### Gaps vs. requirement
-
-1. **Single tier only** — one threshold (4h), one break (30m). No second break.
-2. **Not applied on manual entry** — there is **no `create`/`write` override** on
-   `hr.attendance`. A manager-created or manager-edited attendance gets break `= 0`.
-   This is the central gap.
-3. **No province/country awareness** — no jurisdiction field exists anywhere (location
-   has address/timezone but no province; company has none). Threshold + amount are flat
-   global config params.
-4. **First-break default is 4h, not 5h** (Ontario is 5h).
-
-## 2. Goals / Non-goals
-
-**Goals**
-- Statutory unpaid break applies automatically based on **actual worked hours**, on every
-  path (portal, systray, PIN kiosk, NFC kiosk, auto-clock-out cron, **and manual backend
-  create/edit**).
-- Two tiers: first break after N1 hours, second break adds after N2 hours. Trigger is
-  `worked_hours >= N` (inclusive; nothing under N1).
-- Rules are defined **per province/country** in a table; an employee resolves its rule
-  from its **company's province**, with a single global default fallback.
-- **Eliminate the duplicated deduction logic** — one calculator, called everywhere.
-
-**Non-goals (YAGNI)**
-- Per-employee break-rule override (resolver is structured so this is a cheap add later).
-- GPS/location-based jurisdiction detection.
-- More than two tiers (the table is 2-tier; a 3rd break would be a future schema change).
-- Changing the *planned* break concept used for scheduled-hours math.
-
-## 3. Locked decisions
-
-| # | Decision | Choice |
-|---|---|---|
-| 1 | Rule model | **Per-province table**, 2-tier (`fusion.clock.break.rule`) |
-| 2 | Jurisdiction source | **Company province** (`company_id.state_id`) + global default fallback |
-| 3 | Override behaviour | **Fully automatic** — idempotent stored compute, recomputes on every save |
-| 4 | Planned-vs-statute | **Statutory only** — the planned/scheduled break never affects the actual deduction |
-
-## 4. Design
-
-### 4.1 New model `fusion.clock.break.rule`
-
-`models/clock_break_rule.py`, `_name = 'fusion.clock.break.rule'`,
-`_description = 'Statutory Break Rule'`, `_order = 'sequence, name'`.
-
-| Field | Type | Default | Notes |
-|---|---|---|---|
-| `name` | Char (required) | — | e.g. "Ontario" |
-| `country_id` | Many2one `res.country` | — | scopes the province picker |
-| `state_id` | Many2one `res.country.state` | — | the province; `domain` on `country_id` |
-| `is_default` | Boolean | False | global fallback when no province matches |
-| `break1_after_hours` | Float | 5.0 | first break trigger N1 |
-| `break1_minutes` | Float | 30.0 | first break amount M1 (0 = disabled) |
-| `break2_after_hours` | Float | 10.0 | second break trigger N2 |
-| `break2_minutes` | Float | 30.0 | second break amount M2 (0 = disabled) |
-| `sequence` | Integer | 10 | |
-| `active` | Boolean | True | |
-
-**Constraints** (`models.Constraint`, per repo Odoo-19 rule 9):
-- `break1_after_hours >= 0`, `break2_after_hours >= 0`, minutes `>= 0`.
-- When `break2_minutes > 0`: `break2_after_hours > break1_after_hours`
-  (a misordered second tier is a config error).
-- (Soft) at most one `is_default = True` — enforced in a Python `@api.constrains`
-  rather than a partial unique index, to give a friendly message.
-
-**Method** — `break_minutes_for(self, worked_hours)`:
-```
-self.ensure_one()
-total = 0.0
-if self.break1_minutes and worked_hours >= self.break1_after_hours:
-    total += self.break1_minutes
-if self.break2_minutes and worked_hours >= self.break2_after_hours:
-    total += self.break2_minutes
-return total
-```
-`>=` is intentional and matches the requirement ("equal to or more than N1").
-
-**Seed** (`data/clock_break_rule_data.xml`, `noupdate="1"`): one row —
-`name="Ontario"`, `state_id=base.state_ca_on`, `is_default=True`,
-`break1_after_hours=5.0`, `break1_minutes=30.0`,
-`break2_after_hours=10.0`, `break2_minutes=30.0`.
-(Acting as both the Ontario match and the global fallback for this deployment.
-Other provinces can be added as rows.)
-
-### 4.2 Jurisdiction resolver — `hr.employee._get_fclk_break_rule()`
-
-```
-self.ensure_one()
-Rule = self.env['fusion.clock.break.rule'].sudo()
-state = self.company_id.state_id
-rule = Rule.browse()
-if state:
-    rule = Rule.search([('state_id', '=', state.id)], limit=1)
-if not rule:
-    rule = Rule.search([('is_default', '=', True)], limit=1)
-return rule   # may be empty recordset → caller treats as 0 break
-```
-`sudo()` so the portal net-hours compute (run as the employee) can read the rule table
-without a direct ACL grant. Resolver is a single method → adding a per-employee override
-(`x_fclk_break_rule_id`) later is a two-line change.
-
-### 4.3 `hr.attendance` — `x_fclk_break_minutes` becomes a stored compute
-
-The field changes from a plain editable Float to a **stored computed** field — this is the
-single calculator that replaces all four write sites.
-
-```python
-x_fclk_break_minutes = fields.Float(
-    string='Break (min)',
-    compute='_compute_fclk_break_minutes',
-    store=True,
-    tracking=True,
-    help="Unpaid break deducted from worked hours: statutory break (by province "
-         "rule, from actual hours worked) plus any penalty minutes.",
-)
-
-@api.depends('worked_hours', 'check_out',
-             'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
-def _compute_fclk_break_minutes(self):
-    ICP = self.env['ir.config_parameter'].sudo()
-    auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
-    for att in self:
-        statutory = 0.0
-        if auto and att.check_out and att.employee_id:
-            rule = att.employee_id._get_fclk_break_rule()
-            if rule:
-                statutory = rule.break_minutes_for(att.worked_hours or 0.0)
-        penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
-        att.x_fclk_break_minutes = statutory + penalties
-```
-
-Properties:
-- **Idempotent** — same hours + same penalties always yield the same value; no drift,
-  nothing to wipe.
-- **Fires on every path** — `worked_hours` recomputes whenever `check_in`/`check_out`
-  change, so portal, kiosk, NFC, cron, **and manual backend create/edit** all recompute
-  automatically. This is what fixes the manual-entry gap.
-- **Mid-shift = 0** — `check_out` empty → statutory 0 (penalties, if any, still counted).
-- **Master toggle preserved** — `auto_deduct_break` False → statutory 0 (penalties remain).
-- `_compute_net_hours` is unchanged (still `worked_hours − break/60`); it now depends on a
-  computed-stored field, which Odoo chains correctly.
-
-The attendance form's Break field becomes read-only (consistent with "fully automatic").
-`views/hr_attendance_views.xml` updated accordingly.
-
-### 4.4 Removals (the de-duplication)
-
-| Remove | File | Replaced by |
-|---|---|---|
-| `_apply_break_deduction` method + its 3 call sites | `controllers/clock_api.py:161`, `controllers/clock_kiosk.py:158`, `controllers/clock_nfc_kiosk.py:381` | the compute |
-| cron's `x_fclk_break_minutes` write | `models/hr_attendance.py:343-346` | the compute |
-| penalty's `current_break + deduction` write | `controllers/clock_api.py:140-144` | the compute's `Σ penalty_minutes` |
-| setting `fclk_break_threshold_hours` + `fusion_clock.break_threshold_hours` | `models/res_config_settings.py:39`, seed in `data/ir_config_parameter_data.xml` | per-rule `break1_after_hours` |
-
-**Kept and untouched:** `hr.employee._get_fclk_break_minutes()`, `fusion_clock.default_break_minutes`,
-`fusion.clock.shift.break_minutes`, `fusion.clock.schedule.break_minutes` — these are the
-**planned** break (used to compute scheduled `planned_hours`), a separate concept from the
-actual worked-hours deduction. Decision #4 keeps them out of the deduction path.
-
-**Kept:** the `auto_deduct_break` master toggle (now gates the statutory portion only).
-
-### 4.5 UI / security / data
-
-- **Menu:** *Fusion Clock → Configuration → Break Rules* (new `ir.actions.act_window` +
-  list/form views in `views/clock_break_rule_views.xml`), gated to
-  `group_fusion_clock_manager`. Add the menu item in `views/clock_menus.xml`.
-- **Security:** `security/ir.model.access.csv` — `fusion.clock.break.rule`: manager =
-  full CRUD; team-lead/user = read (or none — the resolver uses sudo, so no direct grant
-  is strictly required; grant manager full, no portal access).
-- **Manifest `data`:** add `data/clock_break_rule_data.xml` (after security, before crons)
-  and `views/clock_break_rule_views.xml` (with the other config views, before
-  `clock_menus.xml`). Bump `version` to `19.0.4.1.0`.
-
-## 5. Edge cases
-
-- **No rule resolvable** (no province match, no default) → statutory 0. The seeded default
-  prevents this in practice.
-- **Company has no `state_id`** → falls to the default rule.
-- **`break2_after_hours <= break1_after_hours`** → blocked by constraint.
-- **Penalty created after clock-out** → `x_fclk_penalty_ids` change retriggers the compute;
-  final break = statutory + penalty (preserves today's combined-field semantics, reported
-  as one "Break" number).
-- **Open attendance** (no checkout) → break 0; recomputed when it's closed.
-- **Worked hours exactly at a boundary** (5.0h, 10.0h) → tier fires (`>=`).
-
-## 6. Migration / upgrade
-
-- On upgrade, flipping `x_fclk_break_minutes` to `store=True compute` makes Odoo recompute
-  it for all existing rows. For closed attendances this re-derives break from
-  `worked_hours` + linked penalties using the seeded Ontario rule — which is the intended
-  corrected value. Any historical hand-edited break values are replaced (acceptable per
-  Decision #3, "fully automatic"). Call this out in the change log.
-- No `pre`/`post` migration script is required; the recompute is automatic. (If we later
-  want to *avoid* touching very old periods, a guarded post-migrate could pin them — out of
-  scope for now.)
-
-## 7. Testing (`tests/test_break_rules.py`, `@tagged('-at_install','post_install','fusion_clock')`)
-
-1. `break_minutes_for`: 4.99h→0, 5.0h→30, 9.99h→30, 10.0h→60.
-2. Resolver: company in Ontario → Ontario rule; company with unset/other province → default.
-3. **Manual backend create** of a closed attendance (check_in/out spanning 6h) → break 30,
-   net = worked − 0.5. **Manual edit** extending to 10h → break 60. (This is the headline
-   gap; assert it directly via `env['hr.attendance'].create(...)`, not via a controller.)
-4. Penalty additivity: 6h + one 15-min penalty record → break 45.
-5. Master toggle off (`auto_deduct_break=False`) → statutory 0 (penalty-only).
-6. Constraint: `break2_after_hours <= break1_after_hours` raises.
-
-Run (note ephemeral ports per repo CLAUDE.md):
-```
-docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock \
-    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
-```
-
-## 8. Rollout notes
-
-- **Dual-path write** during dev: edit files in **both** `K:\Github\odoo-modsdev\addons\fusion_clock`
-  (Docker-mounted, for tests) **and** `K:\Github\Odoo-Modules\fusion_clock` (git); commit
-  from the git path only. (Per project memory.)
-- Live target is **entech** (`odoo-entech`); deploy after local tests pass and user review.
-- Asset/version bump already covered by the manifest `version` change.
-
-## 9. Open questions
-
-None — all four design forks resolved (see §3).

docs/superpowers/specs/2026-06-02-assessment-visit-funding-design.md

@@ -1,164 +0,0 @@
-# Assessment Visit — bundled, funding-routed assessments
-
-**Date:** 2026-06-02
-**Module:** `fusion_portal` (depends on `fusion_claims`, `fusion_tasks`); live on `odoo-westin` (DB `westin-v19`)
-**Status:** Draft for review
-**Author:** Brainstormed with Gurpreet (Fusion / Westin Healthcare)
-
----
-
-## 1. Problem & goals
-
-A sales rep visits a client's home **with an occupational therapist (OT) and the client present for only 30–45 minutes**, and the OT's time is the scarcest resource. In that window the team often does more than one assessment — a wheelchair (ADP) plus, opportunistically, accessibility products the rep spots (a ramp at the front steps, a stair lift inside, a tub cutout, a patient lift for transfers). Today each assessment is a **separate, standalone web form** that re-collects the client's details and creates its own sale order, and the front-end forms give the rep **no way to mark a case's funding source** — so March-of-Dimes work silently defaults to private pay and never reaches the MOD pipeline.
-
-**Goals**
-
-1. **One visit, many assessments, entered once.** Bundle every assessment from one home visit; capture the client + funding details a single time.
-2. **Measurement-first.** Capture measurements while the OT is present; defer client/health-card data to after they leave; let the OT sign the ADP application on the spot.
-3. **Add as you go.** The rep adds an assessment/product the instant they spot it — repeatable, with a location tag (Front / Back / Inside).
-4. **Route by funding workflow.** On completion the visit emits **one sale order per funding workflow** (ADP, March of Dimes, ODSP, WSIB, private, …) — never one combined SO, and never a separate SO per item within the same funding.
-5. **Let the rep set funding at assessment time** (the real MOD "tracking" gap).
-6. **ADP multi-device** with valid-combination rules, including a new **mobility scooter** type and a **home-accessibility hard rule** for power mobility that feeds the accessibility upsell.
-
-**Non-goals (v1):** voice/dictated entry; rebuilding the measurement math; a new MOD/ADP claim model (the pipelines already exist — we reuse them).
-
----
-
-## 2. Current state (verified against source)
-
-- **Two assessment models, already two separate SO lineages.** `fusion.assessment` (ADP: rollator/wheelchair/powerchair) and `fusion.accessibility.assessment` (the 7 lift/mod types) each have their own `_create_draft_sale_order` (`assessment.py:587`, `accessibility_assessment.py:751`), their own `x_fc_sale_type`, and their own state machine — ADP's 24-state `x_fc_adp_application_status` vs MOD's 16-state `x_fc_mod_status`. Each guards against a second SO (`accessibility_assessment.py:503-511`). SO back-links are **scalar** Many2one: `assessment_id`, `accessibility_assessment_id` (`fusion_portal/models/sale_order.py:37,48`).
-- **SOs are born with no order lines.** Specs become a **chatter HTML note** (`_format_assessment_html_table`, `accessibility_assessment.py:815`); a human prices the draft afterward. **No per-type product mapping exists.**
-- **Funding is modelled but not on the measurement forms.** `x_fc_funding_source` (required, default `direct_private`) on the accessibility model — values `march_of_dimes`, `odsp`, `wsib`, `insurance`, `direct_private`, `other` (`accessibility_assessment.py:71-87`) — is present on the public booking form but **absent from all 7 measurement forms**, so they default to private. Canonical billing type `sale.order.x_fc_sale_type` (`fusion_claims/models/sale_order.py:320`) carries the full set incl. `adp`, `adp_odsp`, `march_of_dimes`, etc.
-- **MOD tracking already exists** as `x_fc_mod_status` (16 states) + ~60 `x_fc_mod_*` fields (HVMP reference #, vendor code, drawings, PCA, POD, approved/payment amounts, dated audit trail) + MOD views + ~7 wizards + ~40 MOD/ODSP stage emails (`fusion_claims/models/sale_order.py:438,877`). An accessibility assessment funded `march_of_dimes` already lands its SO in this pipeline at `need_to_schedule`. **The gap is purely that the rep can't choose `march_of_dimes` on the form.**
-- **Emails** are mostly Python-built via the shared `fusion.email.builder.mixin._email_build` (`fusion_tasks/models/email_builder_mixin.py:8`), gated by `ir.config_parameter` `fusion_claims.enable_email_notifications`. Completion email fires from inside `_create_draft_sale_order` (`assessment.py:847`; `accessibility_assessment.py:624`). Stage emails (`_adp_send_stage_email`, `_mod_email_build`, `_odsp_email_build`) are keyed off the SO's funding type + status, so **they keep working per-SO unchanged**.
-- **Known bug:** backend ADP `action_complete()` sends the authorizer **two** completion emails (template pair at `assessment.py:494` + inline report via `:847`). Must consolidate before fanning out across a visit.
-
----
-
-## 3. The design
-
-### 3.1 The Visit aggregate (only net-new model)
-
-`fusion.assessment.visit` — the hub for one home visit.
-
-- **Client/context, entered once:** `partner_id`, address fields, `visit_date`, `sales_rep_id`, `authorizer_id` (OT), `x_fc_funding_source`-style default, `state` (`measuring` → `client_pending` → `done`).
-- **Links to its assessments:** `adp_assessment_ids` (One2many → `fusion.assessment`) and `accessibility_assessment_ids` (One2many → `fusion.accessibility.assessment`). Each assessment gains `visit_id`.
-- **Links to its sale orders:** `sale_order_ids` (One2many → `sale.order`) — one per funding workflow it produced.
-- On the SO side, add `visit_id`. Each assessment already carries `sale_order_id` (Many2one — `accessibility_assessment.py:153`, `assessment.py:422`), so several same-funding assessments can already point at one SO; the redundant **scalar** `assessment_id` / `accessibility_assessment_id` on the SO (`fusion_portal/models/sale_order.py:37,48`) become **One2many** (or are dropped in favour of the `sale_order_id` reverse) so an SO no longer assumes a single source assessment.
-
-Client info moves to the Visit as the single source of truth; the per-assessment `client_name`-required gate is relaxed (the model keeps the field for back-compat / standalone use but the Visit flow fills it from `partner_id`).
-
-### 3.2 Add-as-you-go workspace (portal UX)
-
-A portal "visit workspace" (reps are portal users, tablet-first):
-
-- Always-present **"+ Add"** → pick a type + location tag (Front / Back / Inside / custom) → drop **straight into the existing measurement form** for that type. No client paperwork required to start.
-- Each added assessment is a **card** showing type, location, status (To measure / Measured / Signed), and — once priced — its amount.
-- **Measurement-first:** the forms render with client fields hidden/optional; a **deferred "Client + funding" step** is completed after the OT leaves and is shared by every item.
-- The **OT signs the ADP application (Page 11)** inline on the wheelchair/ADP item, on-site, independent of client demographics (reuse `portal_assessment_express` Page-11 section + signature pad).
-- Mockups (for reference, in repo `docs/mockups/` if committed): `fusion_portal_new_approach_mockup.html`.
-
-### 3.3 Multi-instance + location tags
-
-Any type can be added **more than once**, each its own assessment record with a **location label** ("Main stairs", "Basement", "Front porch"). Two stair lifts = two assessment records (→ two lines on the same funding SO; see §3.6). A **"Same as the previous"** action copies shared options so the rep only re-enters the differing measurements.
-
-### 3.4 Per-item funding selector — the MOD gap fix
-
-Expose `x_fc_funding_source` on **each accessibility assessment** in the flow: **Private Pay / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other**. This one field drives the existing `sale_type_map` → `x_fc_sale_type` → correct pipeline (MOD 16-state tracker, ODSP, hardship, …). Defaults to the previous item's funding so an all-MOD visit isn't re-picked each time. **ADP/wheelchair items are fixed to ADP** (no picker). This is the minimal change that closes the "can't mark a case as March of Dimes" gap — no new tracking model.
-
-> **Patient lift** is an accessibility/equipment item that uses this same picker — funded by March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents), so its funding is chosen per case, not fixed.
-> **`sale_type_map` gap:** `x_fc_funding_source` currently lacks `hardship` while `x_fc_sale_type` already has it (`sale_order.py:320`) — add `hardship` to the picker + a `sale_type_map` entry (`accessibility_assessment.py:771`), and review the map so every offered funding routes to a real `x_fc_sale_type`.
-> **MOD funding cap** applies to MOD items — see Resolved decision 1 (§4).
-
-### 3.5 ADP multi-device + combinations + scooter + home-access rule
-
-**Multi-device ADP order.** Today one ADP device per order; the visit allows a **valid combination** of ADP devices for one client, all landing on the **one ADP SO**. Each ADP device is an item; the combination check runs across the visit's ADP items.
-
-**Device categories:** Walker/Rollator · Manual Wheelchair · Power Wheelchair · **Scooter (new)**.
-
-**Combination rules (confirmed):**
-
-| Combination | Allowed? |
-|---|---|
-| Any single device | ✓ |
-| Walker + Manual Wheelchair | ✓ |
-| Walker + Power Wheelchair | ✓ |
-| Walker + Scooter | ✓ |
-| Manual + Power Wheelchair | ✗ |
-| Power Wheelchair + Scooter | ✗ |
-| Manual Wheelchair + Scooter | ✗ |
-| Two walkers / any duplicate | ✗ |
-
-Rule in words: **at most one "seated-mobility" device** {manual wheelchair, power wheelchair, scooter}, **optionally one walker/rollator alongside, no duplicates.** Enforced when adding/saving an ADP device.
-
-**Scooter (new ADP type) fields:** `client_weight` (exists), scooter type, **maximum travel range**, and the home-accessibility check (below). Gets its own measurement section in the ADP form, mirroring the rollator/wheelchair/powerchair sections.
-
-**Power-mobility home-accessibility hard rule.** For **scooter and power wheelchair**, a required check: *"Is the home accessible enough for the device to be used **inside and outside** the home independently — no lifting, not left outside/in the garage?"* ADP will not fund power mobility a home can't accommodate. If the answer is **No**, the visit **flags an accessibility need** and prompts the rep to add an accessibility item (ramp / porch lift, typically March of Dimes) to remediate. This is the explicit bridge between the ADP power-mobility item and the accessibility/MOD upsell.
-
-> **The power-wheelchair form is already well-optimized — do NOT change its fields.** The *only* addition there is this home-accessibility warning. The new **scooter** type gets its own section (fields above); the manual-wheelchair and rollator sections are unchanged.
-
-### 3.6 Funding-workflow grouping → one SO per workflow
-
-On visit completion, group its assessments by **funding workflow** (`x_fc_sale_type`) and create **one SO per group**:
-
-- All `march_of_dimes` items (stair lift + porch lift + tub cutout, or two stair lifts) → **one MOD SO, multiple lines** (funding permitting).
-- All ADP devices (the valid combination) → **one ADP SO**.
-- Private / ODSP / WSIB / insurance → their own SO each.
-- A separate SO appears **only when the case type changes**, never per-item within a funding.
-
-Refactor the two per-model `_create_draft_sale_order` routines into a **shared, group-aware builder** that takes a set of same-funding assessments and produces one SO, branching on funding type to stamp the right starting status field (`x_fc_adp_application_status` for ADP, `x_fc_mod_status` for MOD, etc. — mirroring `assessment.py:600-622`) and the right links. **Reuse the existing MOD/ADP/ODSP pipelines unchanged.**
-
-### 3.7 Emails
-
-- Reuse `fusion.email.builder.mixin` and the existing per-funding stage emails (they're keyed off SO type + status, so per-SO they keep working).
-- **Move the completion send to per-SO** inside the new builder (not per-assessment), and **dedupe recipients**, so a 3-item visit doesn't emit 3–6 completion emails.
-- **Fix the existing duplicate** (authorizer gets two completion emails on backend ADP completion) as part of this.
-- Make `enable_email_notifications` gating consistent across the sends the visit touches.
-
-### 3.8 Reused vs net-new
-
-- **Reused, largely untouched:** the 7 accessibility measurement forms + their JS/Python calc; the ADP Express form + Page-11 signature; the MOD/ADP/ODSP pipelines, views, wizards, and stage emails; the email branding mixin.
-- **Net-new:** the `fusion.assessment.visit` model + workspace UI; per-item funding selector on the accessibility forms; the group-aware SO builder + link-cardinality change; ADP multi-device + combination validation; scooter type + fields; power-mobility home-access rule + cross-sell flag; completion-email consolidation.
-
----
-
-## 4. Resolved decisions
-
-1. **MOD funding cap — documented rule, light-touch in v1.** March of Dimes covers **up to $15,000 per person, lifetime**, income-gated: if the client's income is **under** that year's threshold (the threshold changes annually), MOD funds the full $15k; if **over**, MOD may **deny or partially approve**. **v1:** surface this cap as a reminder on MOD items and capture an *"income under MOD threshold? (yes / no / unknown)"* flag so the rep can judge — **do not** auto-compute lifetime used-vs-remaining across the client's prior MOD orders (the SO's existing `x_fc_mod_*` approved/payment fields already record per-order amounts). **Future:** yearly-threshold config + automatic lifetime-remaining tracking + a hard warning.
-2. **No auto pricing / products in v1.** The visit creates a **draft** SO per funding workflow and appends each assessment's specs to that SO's chatter (today's pattern); **the sales rep builds the quotation lines manually.** One SO can hold many items. No per-assessment-type product mapping. (Auto-pricing is a future expansion.)
-3. **Patient-lift funding is chosen per case** via the funding picker — March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents) all fund it; it is not fixed (see §3.4).
-4. **Power-wheelchair form unchanged** — already well-optimized; the only addition is the **home-accessibility warning** (device usable **inside and outside** the home). The home-access rule applies to **scooter (new type, new section) and power wheelchair (warning only)**.
-
----
-
-## 5. Phasing
-
-- **Phase 1 — Funding correctness + visit backbone:** `fusion.assessment.visit`, link-cardinality change, **funding selector on the accessibility forms** (incl. Hardship; patient-lift routing), **MOD $15k-cap reminder + income-threshold flag** (informational), group-and-route to per-workflow **draft** SOs (specs to chatter, manual pricing) reusing existing pipelines, completion-email consolidation + duplicate fix. *(Delivers the MOD-routing fix and the multi-SO split.)*
-- **Phase 2 — ADP expansion:** multi-device ADP order + combination validation, **scooter** type + fields, power-mobility **home-access hard rule** + accessibility cross-sell prompt.
-- **Phase 3 — Seamless field UX:** the full add-as-you-go workspace, measurement-first deferral, location tags, "same as previous", OT on-site sign-off polish.
-- **Later:** product-line auto-pricing, MOD funding-cap tracking, voice/quick entry.
-
----
-
-## 6. Risks (from investigation)
-
-- **Duplicate completion emails** already live on the ADP backend path — fix before fan-out (§3.7).
-- **Scalar back-links + double-SO guards** assume one SO per assessment; grouping breaks them — must move to `visit_id` / One2many and make the guard visit-aware.
-- **Inconsistent `enable_email_notifications`** — template sends ignore the kill-switch; don't route new traffic through templates without honoring it.
-- **Label drift** `x_fc_funding_source` vs `x_fc_sale_type` (`insurance`="Private Insurance" vs "Insurance"; `direct_private`="Private Pay (Direct)" vs "Direct/Private") — keys match so routing works; align labels in any shared UI.
-- **Unreachable funding types from accessibility:** `sale_type_map` (`accessibility_assessment.py:771`) covers 6 values; decide which funding types each assessment type may emit.
-
----
-
-## 7. Files in scope
-
-- `fusion_portal/models/assessment.py` — ADP `_create_draft_sale_order` (:587), completion email (:847), multi-device + scooter + home-access.
-- `fusion_portal/models/accessibility_assessment.py` — accessibility `_create_draft_sale_order` (:751), `action_complete` (:493), completion email (:624), funding routing.
-- `fusion_portal/models/sale_order.py` — back-links (:37,:48) → `visit_id` / One2many.
-- `fusion_portal/models/visit.py` — **new** `fusion.assessment.visit`.
-- `fusion_portal/views/portal_accessibility_forms.xml` + `portal_assessment_express.xml` — funding selector, scooter section, home-access check; workspace shell.
-- `fusion_portal/controllers/portal_main.py` (`/my/accessibility/save` :2482) + `portal_assessment.py` — visit-aware save/group/route.
-- `fusion_claims/models/sale_order.py` — reuse `x_fc_sale_type` (:320), `x_fc_mod_status` (:438), stage emails (:6876,:9038,:10063); no pipeline rebuild.
-- `fusion_tasks/models/email_builder_mixin.py` — reuse for any new visit emails.
-
-**Deployment note:** `fusion_portal` is live on `odoo-westin` (`westin-v19`, container `odoo-dev-app`). Ship per the rename/deploy procedure (backup → code sync → `-u fusion_portal` → cache-bust → restart → verify).

docs/superpowers/specs/2026-06-02-fusion-maintenance-design.md

@@ -1,298 +0,0 @@
-# fusion_maintenance — Design Spec
-
-> Automated preventive‑maintenance follow‑ups + self‑serve real‑time booking for Westin
-> medical mobility equipment (stair lifts, porch lifts, lift chairs, wheelchairs, power
-> wheelchairs/scooters), to keep clients on schedule and turn service into recurring revenue.
-
-| | |
-|---|---|
-| **Status** | Design **approved** (brainstorm dialogue 2026‑06‑02). Ready for implementation plan. |
-| **Implemented by** | **Extending `fusion_repairs`** (no new module). Version bump. |
-| **Target instance** | Westin production — host `odoo-westin` (192.168.1.40), container `odoo-dev-app`, DB `westin-v19`. One company / one DB running `fusion_claims` (live) + `fusion_repairs` (to be deployed). |
-| **Relates to** | [`docs/plans/fusion_maintenance_brainstorm.md`](../../plans/fusion_maintenance_brainstorm.md) (brief + Step 0 + sizing), [`2026-05-20-fusion-repairs-design.md`](2026-05-20-fusion-repairs-design.md) (base module). |
-| **Next step** | `writing-plans` → implementation plan. **No code until the plan is written and this spec is reviewed.** |
-
----
-
-## 1. Goal
-
-Westin sells/services mobility equipment that needs preventive maintenance every **1–6 months
-depending on the product**. Today there is no system keeping clients on schedule. We want:
-
-1. The system **automatically emails the client** when a unit is due for maintenance.
-2. The client can **book the visit themselves** (real‑time, self‑serve, no login) **or** call the
-   office and staff book it for them.
-3. The booking **lands in our scheduling/calendar** as a real technician job.
-4. The **technician accesses and updates the maintenance log** on the visit; the system keeps the
-   full history per unit.
-5. The **next maintenance is auto‑rescheduled** → recurring loop.
-6. The client is **told the cost** up front.
-7. Outcome: clients stay on track **and** Westin gains **recurring revenue**.
-8. Design/UX stays **consistent with `fusion_claims`** (branded emails, `x_fc_` naming, Canadian
-   English, `$`+`currency_id`).
-
-## 2. Locked decisions (from the brainstorm)
-
-| # | Decision | Choice | Why |
-|---|----------|--------|-----|
-| D1 | Separate module vs. part of `fusion_repairs` | **Build into `fusion_repairs`** | The maintenance engine already lives there (~90% built); a separate module would duplicate it. fusion_repairs already owns the equipment categories, `repair.order`, technician tasks, service plans, and the Westin rate card. |
-| D2 | Pricing / revenue model | **Flat fee per equipment type** | Transparent cost to show the client; recurring per‑visit revenue. Configured per equipment **category** with per‑product override. |
-| D3 | Enrollment scope | **New sales + backfill existing install base** | The recurring revenue and "keep clients on track" value is in the *existing* base, not just future sales. |
-| D4 | Booking engine | **Technician‑aware picker on `fusion_tasks`** (NOT Enterprise `appointment`) | Clients see only slots a qualified tech is genuinely free for (route/skill‑aware); booking creates the technician task directly — one scheduling world, no appointment↔task bridge. Bonus: **no Enterprise dependency → Community‑testable locally.** |
-
-## 3. Grounding (verified, not assumed)
-
-### 3.1 What `fusion_repairs` ALREADY has (reuse — do not rebuild)
-Source: [`fusion_repairs/models/maintenance_contract.py`](../../../fusion_repairs/models/maintenance_contract.py), [`technician_task.py`](../../../fusion_repairs/models/technician_task.py), [`repair_service_plan.py`](../../../fusion_repairs/models/repair_service_plan.py), `cloud.md`.
-
-- `fusion.repair.maintenance.contract` — partner/product/lot/original_SO, `interval_months`,
-  `last_service_date`, `next_due_date`, state machine (`draft/active/paused/cancelled`),
-  `booking_token` (unique), `last_reminder_band`, `booking_repair_id`. `roll_next_due_date()`
-  advances the cycle correctly via `relativedelta`.
-- Reminder cron `cron_send_due_reminders` — daily, **30/7/1‑day** bands, per‑band dedup, queued
-  branded email `email_template_maintenance_due_reminder` with the tokenized link.
-- Public booking controller `/repairs/maintenance/book/<token>` — `auth='public'`, token‑validated,
-  already‑booked guard, thanks page.
-- `create_repair_from_booking()` — spawns a `repair.order` (`x_fc_intake_source='client_portal'`),
-  links `x_fc_maintenance_contract_id`, dedups.
-- **Roll‑forward** on technician task completion ([`technician_task.py:88`](../../../fusion_repairs/models/technician_task.py:88)): when a `task_type='maintenance'` task → `status='completed'`, sets `last_service_date`, calls `roll_next_due_date()`, posts chatter. **This is the recurring loop.**
-- Pre‑paid **service‑plan subscriptions** (`fusion.repair.service.plan.subscription`) wired to
-  `sale.order.action_confirm()` + visit burn engine (revenue primitive; optional here).
-- **Rate card** (`fusion.repair.callout.rate`, standard vs `lift_elevating`), `repair.order.x_fc_quote_total`.
-- **Equipment category taxonomy** (`fusion.repair.product.category`): stairlift / porch_lift /
-  lift_chair flagged `equipment_class=lift_elevating`, `safety_critical=True`.
-- **Inspection certificate** (`fusion.repair.inspection.certificate`, M1 — Done): PDF + expiry cron.
-- Visit‑report wizard (signature, parts, labour timer).
-- `product.template.x_fc_maintenance_interval_months` (exists, [product_template.py:23](../../../fusion_repairs/models/product_template.py:23)).
-- `fusion_tasks` availability engine: [`_find_next_available_slot(tech_id, date, ...)`](../../../fusion_tasks/models/technician_task.py:544) and [`_get_available_gaps(tech_id, date, ...)`](../../../fusion_tasks/models/technician_task.py:664) — **route‑aware** (tech start address + geocoding + travel). Tech skills on `res.users.x_fc_repair_skills`.
-
-### 3.2 The 4 gaps this spec closes
-1. **Contract auto‑creation trigger is dead code** — `_spawn_maintenance_contracts()` is defined on
-   `sale.order` ([maintenance_contract.py:198](../../../fusion_repairs/models/maintenance_contract.py:198)) but **never called**. No `action_confirm` override invokes it → no contracts exist today.
-2. **No real booking** — the booking page is a bare `<input type="date">` ("a team member will call
-   to confirm"); no availability, no slots, no calendar/task. **This is the main new build.**
-3. **No cost shown to the client** anywhere (email or booking page).
-4. **No auto tech‑task creation, no structured maintenance log, no office‑follow‑up crons**
-   (`ir.config_parameter` toggles exist; no cron/Python).
-
-### 3.3 Install‑base sizing (Westin live, 2026‑06‑02)
-- Serial numbers are captured **~only on real equipment** (parts have 0 serials) → `x_fc_serial_number`
-  is a de‑facto "trackable unit" marker and the natural **idempotency key**.
-- ADP‑side base ≈ **138 serial‑tracked units / ~136 customers** (walkers 68, wheelchairs 45, power
-  bases 7, scooters 4, +14 no‑device‑type). Funders: adp 109, direct_private 13, adp_odsp 10,
-  march_of_dimes 7. Deliveries 2022‑10 → 2026‑05.
-- **Lifts (sized 2026‑06‑02; name‑based, approximate)** — a LARGE base in Westin's Odoo: stair lifts
-  ~254 customers (416 lines incl. accessories), porch/VPL ~30 customers (75 lines), lift chairs ~41
-  customers (47 lines) — real products (Access BDD, Handicare, Serenity VPL, Pride VivaLift). **But lift
-  serial coverage is ~0** (12/416 stairlift lines, 0 VPL, 2 lift‑chair). So the serial‑as‑unit‑key
-  approach that works for ADP wheelchairs **does NOT work for lifts** — lifts must be keyed by
-  (partner + base‑unit product + sale line), excluding accessory lines (curves, rails, remotes, charging
-  stations, rentals). This splits the backfill into two regimes (§6.2).
-- Two backfill data gaps: 14 units have no device_type (need product/manual category); non‑ADP units
-  lack `x_fc_adp_delivery_date` (need an invoice/order‑date fallback anchor).
-
-## 4. Architecture
-
-Extend `fusion_repairs`. No new module, no new top‑level dependency for the core flow (booking uses
-`fusion_tasks`, already a hard dep; pricing/Poynt already deps). The optional `fusion_claims` read
-for the wheelchair backfill is a **soft** dependency (guarded `if 'fusion.claims' model present`),
-so `fusion_repairs` still installs/test‑runs without `fusion_claims` on local dev.
-
-Reuse map: contract engine (extend), `fusion.technician.task` (booking target + availability +
-roll‑forward), `repair.order` (visit container/pricing/Poynt), inspection certificate (lift
-compliance), visit‑report wizard (extend with checklist), branded email pattern, rate card.
-
-## 5. Data model
-
-All new fields `x_fc_`, Canadian English labels, Monetary = `$` + `currency_id`.
-
-### 5.1 Maintenance policy — on `fusion.repair.product.category` ("per equipment type")
-- `x_fc_maintenance_enabled` (Boolean) — is this category maintainable?
-- `x_fc_maintenance_interval_months` (Integer) — default cadence (1–6+).
-- `x_fc_maintenance_fee` (Monetary, `currency_id`) — the **flat fee** shown to the client.
-- `x_fc_maintenance_skill_id` — the technician skill the booking matches on (maps to
-  `res.users.x_fc_repair_skills`). **If skills are already category‑based** (a tech's
-  `x_fc_repair_skills` are equipment categories), drop this field and simply match technicians whose
-  skills include *this* category — confirm the skills representation before modelling (§15).
-- `x_fc_maintenance_service_product_id` (M2O `product.product`, optional) — the service product used
-  when drafting the priced invoice/SO line; falls back to a generic "Maintenance visit" product.
-
-**Per‑product override:** `product.template.x_fc_maintenance_interval_months` (exists) +
-new `product.template.x_fc_maintenance_fee` (Monetary, optional). Resolution order at contract
-creation: product override → category policy.
-
-### 5.2 Extend `fusion.repair.maintenance.contract`
-- `x_fc_maintenance_fee` (Monetary) — resolved price snapshot, shown to client.
-- `x_fc_source` (Selection: `sale` / `backfill` / `claims` / `manual`).
-- `x_fc_source_sale_line_id` (M2O `sale.order.line`) — provenance + idempotency.
-- `x_fc_device_serial` (Char, indexed) — idempotency key (esp. for claims/backfill where no lot).
-- `x_fc_policy_category_id` (M2O `fusion.repair.product.category`).
-- Constraint: at most one **active** contract per `(x_fc_device_serial)` (or per source sale line
-  when serial absent) — declarative `models.Constraint` / partial `models.Index`.
-
-### 5.3 New `fusion.repair.maintenance.visit` (the log)
-A structured, queryable per‑visit record — *not* buried in chatter.
-- `contract_id` (M2O, required), `technician_task_id` (M2O `fusion.technician.task`),
-  `repair_order_id` (M2O `repair.order`, the container), `partner_id`, `product_id`, `lot_id`.
-- `visit_date`, `technician_id` (res.users), `state` (`scheduled/in_progress/done/no_show/cancelled`).
-- `checklist_line_ids` (O2M to `fusion.repair.maintenance.checklist.line`: label, result
-  `pass/fail/na`, note) — items seeded **per equipment category** (lift checklist ≠ wheelchair
-  checklist).
-- `findings` (Html, `Markup()`), `parts_note`, `x_fc_fee` (Monetary), `signature` (Binary),
-  `inspection_certificate_id` (M2O — set for `safety_critical` categories).
-- "log/history" view = the list of visits per contract/unit (smart button on contract + partner).
-
-## 6. Enrollment — two paths
-
-### 6.1 Path A — new sales (fix the dead trigger)
-Override `sale.order.action_confirm()` to call `_spawn_maintenance_contracts()` (reuse the existing
-method; fix + wire it). For each confirmed line whose product/category has
-`x_fc_maintenance_enabled` and a serial/lot:
-- Create one `active` contract per unit (respect quantity), `x_fc_source='sale'`,
-  `x_fc_source_sale_line_id` set, serial captured.
-- `next_due_date = (delivery/commitment date or date_order) + interval` (fallback chain handles
-  non‑ADP units lacking a delivery date).
-- Resolve + snapshot `x_fc_maintenance_fee`.
-- **Idempotent**: skip if an active contract already exists for the serial / sale line.
-
-### 6.2 Path B — backfill existing install base (one‑time wizard, idempotent)
-`fusion.repair.maintenance.backfill.wizard`:
-- **Scan** historical `sale.order.line` for products whose category/product is maintenance‑enabled and
-  were delivered. **Two unit‑identity regimes**, because lifts carry no serials (§3.3):
-  - **Serial‑tracked** (ADP wheelchairs/power chairs, via the `fusion_claims` serial/`device_type` data
-    — soft dep, guarded; map ADP `device_type` → maintenance category): require a serial, **dedup by serial**.
-  - **Non‑serial** (lifts — stair/porch/VPL/lift‑chair): do **NOT** require a serial. One contract per
-    **base‑unit line**, **dedup by (partner + maintainable product + source sale line)**. The per‑product
-    `x_fc_maintenance_enabled` flag is what includes base units and **excludes accessory lines** (curves,
-    rails, remotes, charging stations, rentals) — only the lift itself gets a contract, not its add‑ons.
-- **Stagger** the first `next_due_date` across a configurable window (e.g. spread overdue units over
-  N weeks) so years of equipment don't all email on day one.
-- **Dry‑run first**: produce a report (counts by category, # new vs already‑enrolled, # skipped for
-  missing serial/date, the stagger schedule). Nothing is created or emailed until the operator
-  approves and runs "Execute".
-- Anchor fallback for units with no delivery date: invoice date → order date → today.
-
-## 7. Booking flow (the main build)
-
-### 7.1 Client self‑serve (no login)
-1. Reminder email (existing branded template, **+ fee line added**) → tokenized link.
-2. Public slot‑picker page (extend the existing `/repairs/maintenance/book/<token>` route; replace
-   the date input). The page:
-   - Resolves the contract from the token; shows unit + **flat fee** ("$X + applicable tax").
-   - Computes candidate technicians = users whose `x_fc_repair_skills` include the policy's
-     `x_fc_maintenance_skill_id`.
-   - Calls `fusion_tasks` `_get_available_gaps` / `_find_next_available_slot` per candidate tech over
-     the next ~2–3 weeks, ranked by **proximity** to the client address → presents a short list of
-     real open slots (date + window + implied tech).
-3. Client picks a slot → POST confirm:
-   - **Re‑validate** the slot is still free (gap check) — if taken/expired, re‑render slots with a
-     gentle notice (prevents double‑booking).
-   - Create a `fusion.technician.task` (`task_type='maintenance'`) on that slot, **assigned to the
-     qualified tech** (auto‑assignment by availability+skill), linked to the contract.
-   - Spawn/link the maintenance‑type `repair.order` (container) + the `fusion.repair.maintenance.visit`
-     (state `scheduled`, checklist seeded from the category).
-   - Send the branded confirmation email (date/window/tech, fee, what to expect).
-   - Set `booking_repair_id` (dedup).
-4. **No‑slot fallback:** if no qualified tech/slot in range → show "request a callback" → create an
-   office activity. Never a dead end.
-
-### 7.2 Office books on the client's behalf
-- A **"Book maintenance"** action on the `fusion.repair.maintenance.contract` form opens the same
-  slot‑picker logic in the backend (office books while on the phone).
-- The existing dispatch board remains available for manual scheduling/override.
-
-### 7.3 Token security fix
-On `roll_next_due_date()`, **regenerate `booking_token`** (currently it is not regenerated, so an
-old link stays valid across cycles). Old token → friendly "link expired" page.
-
-## 8. Cost & revenue
-
-- The **flat fee** (`x_fc_maintenance_fee`) is shown in **both** the reminder email and the
-  slot‑picker page, Canadian English, `$` + tax note.
-- On booking, draft a priced line (SO/invoice) using `x_fc_maintenance_service_product_id` (or the
-  generic visit product) at the contract's fee. Payment options: **pay‑at‑door via `fusion_poynt`**
-  (existing `action_collect_payment` on the repair) or invoice after the visit.
-- Recurring revenue = one priced visit per cycle; the roll‑forward arms the next cycle automatically.
-  (Pre‑paid annual plan upsell via the existing subscription engine is out of v1 — §11.)
-
-## 9. Maintenance log & the recurring loop
-
-- The technician fills the visit via the **extended visit‑report wizard** (existing tool) — checklist
-  results, findings, parts, signature — which writes the `fusion.repair.maintenance.visit` record.
-- For `safety_critical` categories (lifts), completing the visit **issues an inspection certificate**
-  (reuse M1) and links it on the visit — the log doubles as compliance proof.
-- On task `status='completed'` → existing **roll‑forward**: `last_service_date=today`,
-  `next_due_date += interval`, reset `last_reminder_band`, **regenerate token**, visit → `done`.
-- Next cycle's reminder fires automatically when `next_due_date` re‑enters the 30‑day band.
-
-## 10. Office follow‑up crons (toggle‑gated, exist as config only today)
-- **Unbooked**: reminder sent, no booking after N days → office call activity on the contract.
-- **Overdue**: `next_due_date` passed with no completed visit in the cycle → escalation activity.
-- Driven by the existing `ir.config_parameter` toggles in `data/ir_config_parameter_data.xml`.
-- Per‑row **savepoint** isolation inside the cron loop (no `cr.commit()` in tests — CLAUDE.md #14).
-
-## 11. Out of scope (v1 — YAGNI)
-- SMS reminders / two‑way SMS booking (needs `fusion_ringcentral`).
-- Logged‑in `/my/equipment` client portal (X5).
-- Pre‑paid annual maintenance‑plan auto‑upsell at booking.
-- Full multi‑stop route optimization / batching (we use per‑tech availability + proximity ranking,
-  not a global optimizer).
-- ADP funder re‑billing of maintenance (maintenance is private‑pay flat fee in v1).
-
-## 12. Error handling & edge cases
-- **Double‑booking:** re‑validate the gap at confirm; lose the race → re‑show slots.
-- **Token:** per‑cycle regeneration; invalid/expired/already‑booked → friendly pages (exist, extend).
-- **No qualified tech / no slots:** callback fallback, not an error page.
-- **Backfill:** dry‑run + report; strict serial dedup; stagger; fallback anchor chain; never email on
-  dry‑run.
-- **Missing data:** units with no device_type/category → excluded from auto‑backfill, listed in the
-  report for manual enrollment.
-- **Audit on failure paths** (if any "booking failed" row is written in an `except`): use a separate
-  `self.env.registry.cursor()` so it survives rollback (CLAUDE.md audit rule).
-- **`message_post` HTML** bodies wrapped in `Markup()` (CLAUDE.md).
-
-## 13. Testing
-`fusion_repairs/tests/` (none exist today). Local dev is **Community** and — because we chose
-`fusion_tasks` over Enterprise `appointment` — the **entire feature is Community‑testable** on
-`odoo-modsdev`. `TransactionCase` coverage:
-- Contract spawn on `sale.order` confirm (enabled vs disabled category; quantity; idempotency).
-- Backfill wizard: **two‑regime dedup** (serial for wheelchairs; partner+product+line for lifts), accessory‑line exclusion, stagger, dry‑run produces no records, anchor fallback.
-- Booking: slot list comes from real gaps; confirm creates task+repair+visit; **double‑book guard**;
-  no‑slot fallback.
-- Roll‑forward on completion: dates advance, band reset, **token regenerated**, visit → done.
-- Crons: reminder bands; unbooked/overdue follow‑ups (savepoint isolation).
-- Run: `docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0`.
-
-## 14. Deployment & configuration
-1. Land on local dev, full E2E + tests green.
-2. **Deploy `fusion_repairs` to Westin** (`odoo-westin` / `westin-v19`) — the accepted bigger lift
-   (first production deploy of fusion_repairs; verify rate‑card numbers, ACLs, asset bundles).
-3. **Configure** maintainable categories: `x_fc_maintenance_enabled`, interval, fee, skill, service
-   product — for lifts (stairlift/porch/lift chair) + power & manual wheelchairs.
-4. Ensure technicians have `x_fc_repair_skills` + start addresses (for availability/routing).
-5. Run the **backfill wizard dry‑run → review report → execute** (staggered).
-6. Watch the first reminder/booking cycle; confirm emails, slots, task creation, completion → roll.
-
-## 15. Open items to verify at implementation (rule #1 — read live source)
-- Exact representation of tech skills (`res.users.x_fc_repair_skills`) and how a category's required
-  skill maps to it (Selection vs M2O vs tag) — read fusion_repairs/fusion_tasks before modelling
-  `x_fc_maintenance_skill_id`.
-- Signatures of `_find_next_available_slot` / `_get_available_gaps` (params, return shape, working
-  hours source) and whether they already account for travel windows.
-- The visit‑report wizard's current fields/flow before extending it with the checklist.
-- The inspection‑certificate issue API (how M1 creates a certificate) for the lift link.
-- **Lift base sized** (§3.3): ~254 stairlift + ~30 porch/VPL + ~41 lift‑chair customers, but ~0 serials.
-  Still to verify: which exact products are **base units vs accessories** (so `x_fc_maintenance_enabled`
-  lands on base units only), plus the lift interval/fee per category. Lift products aren't yet tagged
-  with `fusion_repairs` categories on Westin (module not deployed there) — categorization is a deploy step.
-- `fusion_claims` device_type → maintenance‑category mapping table for the wheelchair backfill.
-
-## 16. Build sequence (for the implementation plan)
-1. **Policy + fee data model** (category fields, product override, contract extensions, constraints).
-2. **Path A trigger** (wire `_spawn_maintenance_contracts` into `action_confirm`, fee resolution, anchor fallback) + tests.
-3. **Cost in email** (add fee to the reminder template).
-4. **Technician‑aware booking** (slot‑picker page + controller on `fusion_tasks` availability; task/repair/visit creation; double‑book guard; office action; token regen) + tests — the largest unit.
-5. **Maintenance visit log + checklist** (model, per‑category seed, visit‑report‑wizard extension, inspection‑cert link) + tests.
-6. **Backfill wizard** (scan/dedup/stagger/dry‑run; fusion_claims soft bridge) + tests.
-7. **Office follow‑up crons** (unbooked/overdue) + tests.
-8. **Deploy + configure + backfill** on Westin.

fusion_authorizer_portal/README.md

@@ -79,7 +79,7 @@ This module integrates with the `fusion_claims` module to provide a seamless wor
 
 1. **Copy the module** to your Odoo addons directory:
    ```bash
-   cp -r fusion_portal /path/to/odoo/custom-addons/
+   cp -r fusion_authorizer_portal /path/to/odoo/custom-addons/
    ```
 
 2. **Update the apps list** in Odoo:
@@ -627,14 +627,14 @@ Enable debug logging for this module:
 
 ```python
 import logging
-_logger = logging.getLogger('fusion_portal')
+_logger = logging.getLogger('fusion_authorizer_portal')
 _logger.setLevel(logging.DEBUG)
 ```
 
 Or in Odoo configuration:
 ```ini
 [options]
-log_handler = fusion_portal:DEBUG
+log_handler = fusion_authorizer_portal:DEBUG
 ```
 
 ---
@@ -671,7 +671,7 @@ log_handler = fusion_portal:DEBUG
 ## File Structure
 
 ```
-fusion_portal/
+fusion_authorizer_portal/
 ├── __init__.py
 ├── __manifest__.py
 ├── README.md

fusion_authorizer_portal/__init__.py

@@ -13,14 +13,14 @@ def _reactivate_views(env):
     This hook prevents that from silently breaking the portal.
     """
     views = env['ir.ui.view'].sudo().search([
-        ('key', 'like', 'fusion_portal.%'),
+        ('key', 'like', 'fusion_authorizer_portal.%'),
         ('active', '=', False),
     ])
     if views:
         views.write({'active': True})
         env.cr.execute("""
             SELECT key FROM ir_ui_view
-            WHERE key LIKE 'fusion_portal.%%'
+            WHERE key LIKE 'fusion_authorizer_portal.%%'
               AND id = ANY(%s)
         """, [views.ids])
         keys = [r[0] for r in env.cr.fetchall()]

fusion_authorizer_portal/__manifest__.py

@@ -82,20 +82,20 @@ This module provides external portal access for:
     ],
     'assets': {
         'web.assets_backend': [
-            'fusion_portal/static/src/xml/chatter_message_authorizer.xml',
-            'fusion_portal/static/src/js/chatter_message_authorizer.js',
+            'fusion_authorizer_portal/static/src/xml/chatter_message_authorizer.xml',
+            'fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js',
         ],
         'web.assets_frontend': [
-            'fusion_portal/static/src/css/portal_style.css',
-            'fusion_portal/static/src/css/technician_portal.css',
-            'fusion_portal/static/src/js/portal_search.js',
-            'fusion_portal/static/src/js/assessment_form.js',
-            'fusion_portal/static/src/js/signature_pad.js',
+            'fusion_authorizer_portal/static/src/css/portal_style.css',
+            'fusion_authorizer_portal/static/src/css/technician_portal.css',
+            'fusion_authorizer_portal/static/src/js/portal_search.js',
+            'fusion_authorizer_portal/static/src/js/assessment_form.js',
+            'fusion_authorizer_portal/static/src/js/signature_pad.js',
 
-            'fusion_portal/static/src/js/pdf_field_editor.js',
-            'fusion_portal/static/src/js/technician_push.js',
-            'fusion_portal/static/src/js/technician_location.js',
-            'fusion_portal/static/src/js/timezone_detect.js',
+            'fusion_authorizer_portal/static/src/js/pdf_field_editor.js',
+            'fusion_authorizer_portal/static/src/js/technician_push.js',
+            'fusion_authorizer_portal/static/src/js/technician_location.js',
+            'fusion_authorizer_portal/static/src/js/timezone_detect.js',
         ],
     },
     'images': ['static/description/icon.png'],

fusion_authorizer_portal/controllers/pdf_editor.py

@@ -38,7 +38,7 @@ class FusionPdfEditorController(http.Controller):
             'text_align',
         ])
 
-        return request.render('fusion_portal.portal_pdf_field_editor', {
+        return request.render('fusion_authorizer_portal.portal_pdf_field_editor', {
             'template': template,
             'fields': fields,
             'preview_url': preview_url,

fusion_authorizer_portal/controllers/portal_assessment.py

@@ -91,7 +91,7 @@ class AssessmentPortal(CustomerPortal):
             'page_name': 'assessments',
         }
         
-        return request.render('fusion_portal.portal_assessments', values)
+        return request.render('fusion_authorizer_portal.portal_assessments', values)
 
     @http.route('/my/assessment/new', type='http', auth='user', website=True)
     def portal_assessment_new(self, **kw):
@@ -116,7 +116,7 @@ class AssessmentPortal(CustomerPortal):
             'page_name': 'assessment_new',
         }
         
-        return request.render('fusion_portal.portal_assessment_form', values)
+        return request.render('fusion_authorizer_portal.portal_assessment_form', values)
 
     @http.route('/my/assessment/<int:assessment_id>', type='http', auth='user', website=True)
     def portal_assessment_view(self, assessment_id, **kw):
@@ -166,7 +166,7 @@ class AssessmentPortal(CustomerPortal):
             'photos': photos,
         }
         
-        return request.render('fusion_portal.portal_assessment_form', values)
+        return request.render('fusion_authorizer_portal.portal_assessment_form', values)
 
     @http.route('/my/assessment/save', type='http', auth='user', website=True, methods=['POST'], csrf=True)
     def portal_assessment_save(self, assessment_id=None, **kw):
@@ -312,7 +312,7 @@ class AssessmentPortal(CustomerPortal):
             'page_name': 'assessment_signatures',
         }
         
-        return request.render('fusion_portal.portal_assessment_signatures', values)
+        return request.render('fusion_authorizer_portal.portal_assessment_signatures', values)
 
     @http.route('/my/assessment/<int:assessment_id>/save_signature', type='jsonrpc', auth='user')
     def portal_save_signature(self, assessment_id, signature_type='', signature_data='', signer_name='', **kw):
@@ -461,7 +461,7 @@ class AssessmentPortal(CustomerPortal):
             'google_maps_api_key': google_maps_api_key,
         }
         
-        return request.render('fusion_portal.portal_assessment_express', values)
+        return request.render('fusion_authorizer_portal.portal_assessment_express', values)
 
     @http.route('/my/assessment/express/<int:assessment_id>', type='http', auth='user', website=True)
     def portal_assessment_express_edit(self, assessment_id, page=1, **kw):
@@ -528,7 +528,7 @@ class AssessmentPortal(CustomerPortal):
             'google_maps_api_key': google_maps_api_key,
         }
         
-        return request.render('fusion_portal.portal_assessment_express', values)
+        return request.render('fusion_authorizer_portal.portal_assessment_express', values)
 
     @http.route('/my/assessment/express/save', type='http', auth='user', website=True, methods=['POST'], csrf=True)
     def portal_assessment_express_save(self, **kw):
@@ -1050,7 +1050,7 @@ class AssessmentPortal(CustomerPortal):
             'success': kw.get('success'),
             'error': kw.get('error'),
         }
-        return request.render('fusion_portal.portal_book_assessment', values)
+        return request.render('fusion_authorizer_portal.portal_book_assessment', values)
 
     @http.route('/book-assessment/submit', type='http', auth='public', website=True, methods=['POST'], csrf=True)
     def portal_book_assessment_submit(self, **kw):

fusion_authorizer_portal/controllers/portal_main.py

@@ -286,7 +286,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'authorizer_dashboard',
         }
         
-        return request.render('fusion_portal.portal_authorizer_dashboard', values)
+        return request.render('fusion_authorizer_portal.portal_authorizer_dashboard', values)
 
     @http.route(['/my/authorizer/cases', '/my/authorizer/cases/page/<int:page>'], type='http', auth='user', website=True)
     def authorizer_cases(self, page=1, search='', sortby='date', sale_type='', **kw):
@@ -364,7 +364,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'authorizer_cases',
         }
         
-        return request.render('fusion_portal.portal_authorizer_cases', values)
+        return request.render('fusion_authorizer_portal.portal_authorizer_cases', values)
 
     @http.route('/my/authorizer/cases/search', type='jsonrpc', auth='user')
     def authorizer_cases_search(self, query='', **kw):
@@ -455,7 +455,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'authorizer_case_detail',
         }
         
-        return request.render('fusion_portal.portal_authorizer_case_detail', values)
+        return request.render('fusion_authorizer_portal.portal_authorizer_case_detail', values)
 
     @http.route('/my/authorizer/case/<int:order_id>/comment', type='http', auth='user', website=True, methods=['POST'])
     def authorizer_add_comment(self, order_id, comment='', **kw):
@@ -758,7 +758,7 @@ class AuthorizerPortal(CustomerPortal):
             'status_filter': status,
         }
         values.update(self._get_clock_status_data())
-        return request.render('fusion_portal.portal_sales_dashboard', values)
+        return request.render('fusion_authorizer_portal.portal_sales_dashboard', values)
 
     @http.route(['/my/sales/cases', '/my/sales/cases/page/<int:page>'], type='http', auth='user', website=True)
     def sales_rep_cases(self, page=1, search='', sortby='date', **kw):
@@ -818,7 +818,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'sales_cases',
         }
         
-        return request.render('fusion_portal.portal_sales_cases', values)
+        return request.render('fusion_authorizer_portal.portal_sales_cases', values)
 
     @http.route('/my/sales/cases/search', type='jsonrpc', auth='user')
     def sales_rep_cases_search(self, query='', **kw):
@@ -910,7 +910,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'sales_case_detail',
         }
         
-        return request.render('fusion_portal.portal_sales_case_detail', values)
+        return request.render('fusion_authorizer_portal.portal_sales_case_detail', values)
 
     @http.route('/my/sales/case/<int:order_id>/comment', type='http', auth='user', website=True, methods=['POST'])
     def sales_rep_add_comment(self, order_id, comment='', **kw):
@@ -1018,7 +1018,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'funding_claims',
         }
         
-        return request.render('fusion_portal.portal_client_claims', values)
+        return request.render('fusion_authorizer_portal.portal_client_claims', values)
 
     @http.route('/my/funding-claims/<int:order_id>', type='http', auth='user', website=True)
     def client_funding_claim_detail(self, order_id, **kw):
@@ -1055,7 +1055,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'funding_claim_detail',
         }
         
-        return request.render('fusion_portal.portal_client_claim_detail', values)
+        return request.render('fusion_authorizer_portal.portal_client_claim_detail', values)
 
     @http.route('/my/funding-claims/<int:order_id>/document/<int:doc_id>/download', type='http', auth='user')
     def client_download_document(self, order_id, doc_id, **kw):
@@ -1269,7 +1269,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'technician_dashboard',
         }
         values.update(clock_data)
-        return request.render('fusion_portal.portal_technician_dashboard', values)
+        return request.render('fusion_authorizer_portal.portal_technician_dashboard', values)
 
     @http.route(['/my/technician/tasks', '/my/technician/tasks/page/<int:page>'], type='http', auth='user', website=True)
     def technician_tasks(self, page=1, search='', filter_status='all', filter_date='', **kw):
@@ -1323,7 +1323,7 @@ class AuthorizerPortal(CustomerPortal):
             'filter_date': filter_date,
             'page_name': 'technician_tasks',
         }
-        return request.render('fusion_portal.portal_technician_tasks', values)
+        return request.render('fusion_authorizer_portal.portal_technician_tasks', values)
 
     @http.route('/my/technician/task/<int:task_id>', type='http', auth='user', website=True)
     def technician_task_detail(self, task_id, **kw):
@@ -1382,7 +1382,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'technician_task_detail',
             'earlier_incomplete': earlier_incomplete,
         }
-        return request.render('fusion_portal.portal_technician_task_detail', values)
+        return request.render('fusion_authorizer_portal.portal_technician_task_detail', values)
 
     @http.route('/my/technician/task/<int:task_id>/add-notes', type='json', auth='user', website=True)
     def technician_task_add_notes(self, task_id, notes, photos=None, **kw):
@@ -1866,7 +1866,7 @@ class AuthorizerPortal(CustomerPortal):
             'all_equipment': all_equipment,
             'page_name': 'technician_tomorrow',
         }
-        return request.render('fusion_portal.portal_technician_tomorrow', values)
+        return request.render('fusion_authorizer_portal.portal_technician_tomorrow', values)
 
     @http.route('/my/technician/schedule/<string:date>', type='http', auth='user', website=True)
     def technician_schedule_date(self, date, **kw):
@@ -1898,7 +1898,7 @@ class AuthorizerPortal(CustomerPortal):
             'total_travel': total_travel,
             'page_name': 'technician_schedule',
         }
-        return request.render('fusion_portal.portal_technician_schedule_date', values)
+        return request.render('fusion_authorizer_portal.portal_technician_schedule_date', values)
 
     @http.route('/my/technician/admin/map', type='http', auth='user', website=True)
     def technician_location_map(self, **kw):
@@ -1916,7 +1916,7 @@ class AuthorizerPortal(CustomerPortal):
             'locations': locations,
             'google_maps_api_key': api_key,
         }
-        return request.render('fusion_portal.portal_technician_map', values)
+        return request.render('fusion_authorizer_portal.portal_technician_map', values)
 
     @http.route('/my/technician/location/log', type='json', auth='user', website=True)
     def technician_location_log(self, latitude, longitude, accuracy=None, **kw):
@@ -2000,7 +2000,7 @@ class AuthorizerPortal(CustomerPortal):
             'order': order,
             'page_name': 'technician_delivery_detail',
         }
-        return request.render('fusion_portal.portal_technician_delivery_detail_legacy', values)
+        return request.render('fusion_authorizer_portal.portal_technician_delivery_detail_legacy', values)
 
     # ==================== POD SIGNATURE CAPTURE ====================
 
@@ -2068,7 +2068,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'pod_signature',
         }
         
-        return request.render('fusion_portal.portal_pod_signature', values)
+        return request.render('fusion_authorizer_portal.portal_pod_signature', values)
 
     @http.route('/my/pod/<int:order_id>/sign', type='json', auth='user', methods=['POST'])
     def pod_save_signature(self, order_id, client_name, signature_data, signature_date=None, **kw):
@@ -2246,7 +2246,7 @@ class AuthorizerPortal(CustomerPortal):
             'has_existing_signature': bool(task.pod_signature),
             'page_name': 'task_pod_signature',
         }
-        return request.render('fusion_portal.portal_task_pod_signature', values)
+        return request.render('fusion_authorizer_portal.portal_task_pod_signature', values)
 
     @http.route('/my/technician/task/<int:task_id>/pod/sign', type='json', auth='user', methods=['POST'])
     def task_pod_save_signature(self, task_id, client_name, signature_data, signature_date=None, **kw):
@@ -2366,7 +2366,7 @@ class AuthorizerPortal(CustomerPortal):
             'page_name': 'accessibility_selector',
             'google_maps_api_key': google_maps_api_key,
         }
-        return request.render('fusion_portal.portal_accessibility_selector', values)
+        return request.render('fusion_authorizer_portal.portal_accessibility_selector', values)
     
     @http.route('/my/accessibility/list', type='http', auth='user', website=True)
     def accessibility_assessment_list(self, page=1, **kw):
@@ -2407,7 +2407,7 @@ class AuthorizerPortal(CustomerPortal):
             'assessments': assessments,
             'pager': pager,
         }
-        return request.render('fusion_portal.portal_accessibility_list', values)
+        return request.render('fusion_authorizer_portal.portal_accessibility_list', values)
     
     @http.route('/my/accessibility/stairlift/straight', type='http', auth='user', website=True)
     def accessibility_stairlift_straight(self, **kw):
@@ -2467,16 +2467,16 @@ class AuthorizerPortal(CustomerPortal):
         
         # Route to specific template based on type
         template_map = {
-            'stairlift_straight': 'fusion_portal.portal_accessibility_stairlift_straight',
-            'stairlift_curved': 'fusion_portal.portal_accessibility_stairlift_curved',
-            'vpl': 'fusion_portal.portal_accessibility_vpl',
-            'ceiling_lift': 'fusion_portal.portal_accessibility_ceiling',
-            'ramp': 'fusion_portal.portal_accessibility_ramp',
-            'bathroom': 'fusion_portal.portal_accessibility_bathroom',
-            'tub_cutout': 'fusion_portal.portal_accessibility_tub_cutout',
+            'stairlift_straight': 'fusion_authorizer_portal.portal_accessibility_stairlift_straight',
+            'stairlift_curved': 'fusion_authorizer_portal.portal_accessibility_stairlift_curved',
+            'vpl': 'fusion_authorizer_portal.portal_accessibility_vpl',
+            'ceiling_lift': 'fusion_authorizer_portal.portal_accessibility_ceiling',
+            'ramp': 'fusion_authorizer_portal.portal_accessibility_ramp',
+            'bathroom': 'fusion_authorizer_portal.portal_accessibility_bathroom',
+            'tub_cutout': 'fusion_authorizer_portal.portal_accessibility_tub_cutout',
         }
         
-        template = template_map.get(assessment_type, 'fusion_portal.portal_accessibility_selector')
+        template = template_map.get(assessment_type, 'fusion_authorizer_portal.portal_accessibility_selector')
         return request.render(template, values)
     
     @http.route('/my/accessibility/save', type='json', auth='user', methods=['POST'], csrf=True)
@@ -2493,14 +2493,7 @@ class AuthorizerPortal(CustomerPortal):
             assessment_type = post.get('assessment_type')
             if not assessment_type:
                 return {'success': False, 'error': 'Assessment type is required'}
-
-            # Funding source drives the downstream sale-order workflow; coerce
-            # anything unexpected to private pay (mirrors /book-assessment).
-            _funding_keys = dict(Assessment._fields['x_fc_funding_source'].selection)
-            funding_source = post.get('funding_source') or 'direct_private'
-            if funding_source not in _funding_keys:
-                funding_source = 'direct_private'
-
+            
             # Build assessment values
             vals = {
                 'assessment_type': assessment_type,
@@ -2514,7 +2507,6 @@ class AuthorizerPortal(CustomerPortal):
                 'client_address_postal': post.get('client_address_postal', '').strip(),
                 'client_phone': post.get('client_phone', '').strip(),
                 'client_email': post.get('client_email', '').strip(),
-                'x_fc_funding_source': funding_source,
                 'notes': post.get('notes', '').strip(),
             }
             

fusion_authorizer_portal/controllers/portal_page11_sign.py

@@ -41,18 +41,18 @@ class Page11PublicSignController(http.Controller):
 
         if status == 'not_found':
             return request.render(
-                'fusion_portal.portal_page11_sign_invalid', {}
+                'fusion_authorizer_portal.portal_page11_sign_invalid', {}
             )
 
         if status in ('expired', 'cancelled'):
             return request.render(
-                'fusion_portal.portal_page11_sign_expired',
+                'fusion_authorizer_portal.portal_page11_sign_expired',
                 {'sign_request': sign_req},
             )
 
         if status == 'already_signed':
             return request.render(
-                'fusion_portal.portal_page11_sign_success',
+                'fusion_authorizer_portal.portal_page11_sign_success',
                 {'sign_request': sign_req, 'token': token},
             )
 
@@ -100,7 +100,7 @@ class Page11PublicSignController(http.Controller):
             'client_health_card_version': client_health_card_version,
         }
         return request.render(
-            'fusion_portal.portal_page11_public_sign', values,
+            'fusion_authorizer_portal.portal_page11_public_sign', values,
         )
 
     @http.route('/page11/sign/<string:token>/submit', type='http',
@@ -177,7 +177,7 @@ class Page11PublicSignController(http.Controller):
             _logger.error("Sale order update failed for sign request %s: %s", sign_req.id, e)
 
         return request.render(
-            'fusion_portal.portal_page11_sign_success',
+            'fusion_authorizer_portal.portal_page11_sign_success',
             {'sign_request': sign_req, 'token': token},
         )
 

fusion_authorizer_portal/graphify-out/GRAPH_REPORT.md

@@ -0,0 +1,883 @@
+# Graph Report - /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal  (2026-04-22)
+
+## Corpus Check
+- 33 files · ~40,589 words
+- Verdict: corpus is large enough that graph structure adds value.
+
+## Summary
+- 470 nodes · 550 edges · 123 communities detected
+- Extraction: 89% EXTRACTED · 11% INFERRED · 0% AMBIGUOUS · INFERRED: 60 edges (avg confidence: 0.76)
+- Token cost: 0 input · 0 output
+
+## Community Hubs (Navigation)
+- [[_COMMUNITY_Community 0|Community 0]]
+- [[_COMMUNITY_Community 1|Community 1]]
+- [[_COMMUNITY_Community 2|Community 2]]
+- [[_COMMUNITY_Community 3|Community 3]]
+- [[_COMMUNITY_Community 4|Community 4]]
+- [[_COMMUNITY_Community 5|Community 5]]
+- [[_COMMUNITY_Community 6|Community 6]]
+- [[_COMMUNITY_Community 7|Community 7]]
+- [[_COMMUNITY_Community 8|Community 8]]
+- [[_COMMUNITY_Community 9|Community 9]]
+- [[_COMMUNITY_Community 10|Community 10]]
+- [[_COMMUNITY_Community 11|Community 11]]
+- [[_COMMUNITY_Community 12|Community 12]]
+- [[_COMMUNITY_Community 13|Community 13]]
+- [[_COMMUNITY_Community 14|Community 14]]
+- [[_COMMUNITY_Community 15|Community 15]]
+- [[_COMMUNITY_Community 16|Community 16]]
+- [[_COMMUNITY_Community 17|Community 17]]
+- [[_COMMUNITY_Community 18|Community 18]]
+- [[_COMMUNITY_Community 19|Community 19]]
+- [[_COMMUNITY_Community 20|Community 20]]
+- [[_COMMUNITY_Community 21|Community 21]]
+- [[_COMMUNITY_Community 22|Community 22]]
+- [[_COMMUNITY_Community 23|Community 23]]
+- [[_COMMUNITY_Community 24|Community 24]]
+- [[_COMMUNITY_Community 25|Community 25]]
+- [[_COMMUNITY_Community 26|Community 26]]
+- [[_COMMUNITY_Community 27|Community 27]]
+- [[_COMMUNITY_Community 28|Community 28]]
+- [[_COMMUNITY_Community 29|Community 29]]
+- [[_COMMUNITY_Community 30|Community 30]]
+- [[_COMMUNITY_Community 31|Community 31]]
+- [[_COMMUNITY_Community 32|Community 32]]
+- [[_COMMUNITY_Community 33|Community 33]]
+- [[_COMMUNITY_Community 34|Community 34]]
+- [[_COMMUNITY_Community 35|Community 35]]
+- [[_COMMUNITY_Community 36|Community 36]]
+- [[_COMMUNITY_Community 37|Community 37]]
+- [[_COMMUNITY_Community 38|Community 38]]
+- [[_COMMUNITY_Community 39|Community 39]]
+- [[_COMMUNITY_Community 40|Community 40]]
+- [[_COMMUNITY_Community 41|Community 41]]
+- [[_COMMUNITY_Community 42|Community 42]]
+- [[_COMMUNITY_Community 43|Community 43]]
+- [[_COMMUNITY_Community 44|Community 44]]
+- [[_COMMUNITY_Community 45|Community 45]]
+- [[_COMMUNITY_Community 46|Community 46]]
+- [[_COMMUNITY_Community 47|Community 47]]
+- [[_COMMUNITY_Community 48|Community 48]]
+- [[_COMMUNITY_Community 49|Community 49]]
+- [[_COMMUNITY_Community 50|Community 50]]
+- [[_COMMUNITY_Community 51|Community 51]]
+- [[_COMMUNITY_Community 52|Community 52]]
+- [[_COMMUNITY_Community 53|Community 53]]
+- [[_COMMUNITY_Community 54|Community 54]]
+- [[_COMMUNITY_Community 55|Community 55]]
+- [[_COMMUNITY_Community 56|Community 56]]
+- [[_COMMUNITY_Community 57|Community 57]]
+- [[_COMMUNITY_Community 58|Community 58]]
+- [[_COMMUNITY_Community 59|Community 59]]
+- [[_COMMUNITY_Community 60|Community 60]]
+- [[_COMMUNITY_Community 61|Community 61]]
+- [[_COMMUNITY_Community 62|Community 62]]
+- [[_COMMUNITY_Community 63|Community 63]]
+- [[_COMMUNITY_Community 64|Community 64]]
+- [[_COMMUNITY_Community 65|Community 65]]
+- [[_COMMUNITY_Community 66|Community 66]]
+- [[_COMMUNITY_Community 67|Community 67]]
+- [[_COMMUNITY_Community 68|Community 68]]
+- [[_COMMUNITY_Community 69|Community 69]]
+- [[_COMMUNITY_Community 70|Community 70]]
+- [[_COMMUNITY_Community 71|Community 71]]
+- [[_COMMUNITY_Community 72|Community 72]]
+- [[_COMMUNITY_Community 73|Community 73]]
+- [[_COMMUNITY_Community 74|Community 74]]
+- [[_COMMUNITY_Community 75|Community 75]]
+- [[_COMMUNITY_Community 76|Community 76]]
+- [[_COMMUNITY_Community 77|Community 77]]
+- [[_COMMUNITY_Community 78|Community 78]]
+- [[_COMMUNITY_Community 79|Community 79]]
+- [[_COMMUNITY_Community 80|Community 80]]
+- [[_COMMUNITY_Community 81|Community 81]]
+- [[_COMMUNITY_Community 82|Community 82]]
+- [[_COMMUNITY_Community 83|Community 83]]
+- [[_COMMUNITY_Community 84|Community 84]]
+- [[_COMMUNITY_Community 85|Community 85]]
+- [[_COMMUNITY_Community 86|Community 86]]
+- [[_COMMUNITY_Community 87|Community 87]]
+- [[_COMMUNITY_Community 88|Community 88]]
+- [[_COMMUNITY_Community 89|Community 89]]
+- [[_COMMUNITY_Community 90|Community 90]]
+- [[_COMMUNITY_Community 91|Community 91]]
+- [[_COMMUNITY_Community 92|Community 92]]
+- [[_COMMUNITY_Community 93|Community 93]]
+- [[_COMMUNITY_Community 94|Community 94]]
+- [[_COMMUNITY_Community 95|Community 95]]
+- [[_COMMUNITY_Community 96|Community 96]]
+- [[_COMMUNITY_Community 97|Community 97]]
+- [[_COMMUNITY_Community 98|Community 98]]
+- [[_COMMUNITY_Community 99|Community 99]]
+- [[_COMMUNITY_Community 100|Community 100]]
+- [[_COMMUNITY_Community 101|Community 101]]
+- [[_COMMUNITY_Community 102|Community 102]]
+- [[_COMMUNITY_Community 103|Community 103]]
+- [[_COMMUNITY_Community 104|Community 104]]
+- [[_COMMUNITY_Community 105|Community 105]]
+- [[_COMMUNITY_Community 106|Community 106]]
+- [[_COMMUNITY_Community 107|Community 107]]
+- [[_COMMUNITY_Community 108|Community 108]]
+- [[_COMMUNITY_Community 109|Community 109]]
+- [[_COMMUNITY_Community 110|Community 110]]
+- [[_COMMUNITY_Community 111|Community 111]]
+- [[_COMMUNITY_Community 112|Community 112]]
+- [[_COMMUNITY_Community 113|Community 113]]
+- [[_COMMUNITY_Community 114|Community 114]]
+- [[_COMMUNITY_Community 115|Community 115]]
+- [[_COMMUNITY_Community 116|Community 116]]
+- [[_COMMUNITY_Community 117|Community 117]]
+- [[_COMMUNITY_Community 118|Community 118]]
+- [[_COMMUNITY_Community 119|Community 119]]
+- [[_COMMUNITY_Community 120|Community 120]]
+- [[_COMMUNITY_Community 121|Community 121]]
+- [[_COMMUNITY_Community 122|Community 122]]
+
+## God Nodes (most connected - your core abstractions)
+1. `create()` - 22 edges
+2. `FusionAssessment` - 20 edges
+3. `AuthorizerPortal` - 19 edges
+4. `ResPartner` - 16 edges
+5. `accessibility_assessment_save()` - 12 edges
+6. `FusionAccessibilityAssessment` - 11 edges
+7. `selectField()` - 11 edges
+8. `PDFTemplateFiller` - 10 edges
+9. `SaleOrder` - 10 edges
+10. `FusionPdfTemplate` - 9 edges
+
+## Surprising Connections (you probably didn't know these)
+- `create_field()` --calls--> `create()`  [INFERRED]
+  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/pdf_editor.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/accessibility_assessment.py
+- `FusionPdfTemplatePreview` --uses--> `PDFTemplateFiller`  [INFERRED]
+  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
+- `FusionPdfTemplateField` --uses--> `PDFTemplateFiller`  [INFERRED]
+  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
+- `Generate PNG preview images from the PDF using poppler (pdftoppm).         Falls` --uses--> `PDFTemplateFiller`  [INFERRED]
+  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
+- `Set template to active.` --uses--> `PDFTemplateFiller`  [INFERRED]
+  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
+
+## Communities
+
+### Community 0 - "Community 0"
+Cohesion: 0.05
+Nodes (29): accessibility_bathroom(), accessibility_ceiling_lift(), accessibility_ramp(), accessibility_stairlift_curved(), accessibility_stairlift_straight(), accessibility_tub_cutout(), accessibility_vpl(), home() (+21 more)
+
+### Community 1 - "Community 1"
+Cohesion: 0.06
+Nodes (20): Assign role-specific portal groups to a portal user based on contact checkboxes., Assign backend groups to an internal user based on contact checkboxes.         A, Grant portal access to this partner, or update permissions for existing users., Create a role-specific welcome Knowledge article for the new portal user., Send a professional portal invitation email to the partner.                  Gen, Resend portal invitation email to an existing portal user., Open the list of assigned sale orders, Open the list of assessments for this partner (+12 more)
+
+### Community 2 - "Community 2"
+Cohesion: 0.07
+Nodes (19): create(), FusionAssessment, Format assessment data as HTML table for chatter, Format wheelchair specifications for the sale order notes (legacy), Generate document records for signed pages, Send email notifications when assessment is completed, View related documents, View the created sale order (+11 more)
+
+### Community 3 - "Community 3"
+Cohesion: 0.08
+Nodes (15): create(), FusionAccessibilityAssessment, Complete the assessment and create a Sale Order.          2026-04 portal audit f, Add a tag to the sale order based on assessment type, Copy assessment photos to sale order chatter, Send email notification to office about assessment completion, Schedule a follow-up activity for the sales rep, Find or create a partner for the client (+7 more)
+
+### Community 4 - "Community 4"
+Cohesion: 0.08
+Nodes (20): Complete express assessment and create draft sale order (no signatures required), CustomerPortal, Ensure all module views are active after install/update.      Odoo silently deac, _reactivate_views(), AssessmentPortal, portal_assessment_express_edit(), portal_assessment_express_new(), portal_assessment_express_save() (+12 more)
+
+### Community 5 - "Community 5"
+Cohesion: 0.09
+Nodes (14): authorizer_cases_search(), sales_rep_cases_search(), get_authorizer_portal_cases(), get_sales_rep_portal_cases(), Open composer to send message to authorizer only, Send email when an authorizer is assigned to the order, View portal documents, Get data for portal display, excluding sensitive information (+6 more)
+
+### Community 6 - "Community 6"
+Cohesion: 0.12
+Nodes (14): preview_pdf(), _draw_field(), fill_template(), PDFTemplateFiller, Generic PDF template filler. Works with any template, any number of pages., create(), FusionPdfTemplate, FusionPdfTemplateField (+6 more)
+
+### Community 7 - "Community 7"
+Cohesion: 0.11
+Nodes (14): accessibility_assessment_save(), AuthorizerPortal, Portal controller for Authorizers (OTs/Therapists), Parse straight stair lift specific fields, Parse curved stair lift specific fields, Parse VPL specific fields, Parse ceiling lift specific fields, Parse ramp specific fields (+6 more)
+
+### Community 8 - "Community 8"
+Cohesion: 0.21
+Nodes (22): buildDataKeyOptions(), buildDataKeysSidebar(), init(), jsonrpc(), loadFields(), normalize(), onFieldDragStart(), renderFieldMarker() (+14 more)
+
+### Community 9 - "Community 9"
+Cohesion: 0.29
+Nodes (11): checkClockStatus(), ensureModal(), getLocation(), hideModal(), isTechnicianPortal(), logLocation(), showDeniedBanner(), showModal() (+3 more)
+
+### Community 10 - "Community 10"
+Cohesion: 0.18
+Nodes (3): ADPDocument, Download the document, Get the download URL for portal access
+
+### Community 11 - "Community 11"
+Cohesion: 0.2
+Nodes (5): create_field(), FusionPdfEditorController, Controller for the PDF field position visual editor., update_field(), upload_preview_image()
+
+### Community 12 - "Community 12"
+Cohesion: 0.38
+Nodes (4): page11_sign_form(), page11_sign_submit(), Page11PublicSignController, Look up and validate a signing request by token.
+
+### Community 13 - "Community 13"
+Cohesion: 0.4
+Nodes (1): migrate()
+
+### Community 14 - "Community 14"
+Cohesion: 0.5
+Nodes (1): AuthorizerComment
+
+### Community 15 - "Community 15"
+Cohesion: 0.83
+Nodes (3): _detectAndSaveTimezone(), _getCookie(), start()
+
+### Community 16 - "Community 16"
+Cohesion: 0.67
+Nodes (1): FusionLoanerCheckoutAssessment
+
+### Community 17 - "Community 17"
+Cohesion: 0.67
+Nodes (0): 
+
+### Community 18 - "Community 18"
+Cohesion: 1.0
+Nodes (2): registerPushSubscription(), urlBase64ToUint8Array()
+
+### Community 19 - "Community 19"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 20 - "Community 20"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 21 - "Community 21"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 22 - "Community 22"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 23 - "Community 23"
+Cohesion: 1.0
+Nodes (1): Fill a PDF template by overlaying text/checkmarks/signatures at configured posit
+
+### Community 24 - "Community 24"
+Cohesion: 1.0
+Nodes (1): Draw a single field onto the reportlab canvas.          Args:             c: rep
+
+### Community 25 - "Community 25"
+Cohesion: 1.0
+Nodes (1): Override create to generate reference number
+
+### Community 26 - "Community 26"
+Cohesion: 1.0
+Nodes (1): Get authorizer from x_fc_authorizer_id field
+
+### Community 27 - "Community 27"
+Cohesion: 1.0
+Nodes (1): Get cases for authorizer portal with optional search
+
+### Community 28 - "Community 28"
+Cohesion: 1.0
+Nodes (1): Get cases for sales rep portal with optional search
+
+### Community 29 - "Community 29"
+Cohesion: 1.0
+Nodes (1): Override create to handle revision numbering
+
+### Community 30 - "Community 30"
+Cohesion: 1.0
+Nodes (1): Get documents for a sale order, optionally filtered by type
+
+### Community 31 - "Community 31"
+Cohesion: 1.0
+Nodes (1): Get all revisions of a specific document type
+
+### Community 32 - "Community 32"
+Cohesion: 1.0
+Nodes (1): Override create to set author from current user if not provided
+
+### Community 33 - "Community 33"
+Cohesion: 1.0
+Nodes (1): Kanban group expansion — always show all 6 workflow states.
+
+### Community 34 - "Community 34"
+Cohesion: 1.0
+Nodes (1): Straight stair lift: (steps × nose_to_nose) + 13" top landing
+
+### Community 35 - "Community 35"
+Cohesion: 1.0
+Nodes (1): Use manual override if provided, otherwise use calculated
+
+### Community 36 - "Community 36"
+Cohesion: 1.0
+Nodes (1): Curved stair lift calculation:         - 12" per step         - 16" per curve
+
+### Community 37 - "Community 37"
+Cohesion: 1.0
+Nodes (1): Use manual override if provided, otherwise use calculated
+
+### Community 38 - "Community 38"
+Cohesion: 1.0
+Nodes (1): Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)
+
+### Community 39 - "Community 39"
+Cohesion: 1.0
+Nodes (1): Landing required every 30 feet (360 inches)
+
+### Community 40 - "Community 40"
+Cohesion: 1.0
+Nodes (1): Total length including landings (5 feet = 60 inches each)
+
+### Community 41 - "Community 41"
+Cohesion: 1.0
+Nodes (1): Compute portal access status based on user account and login history.
+
+### Community 42 - "Community 42"
+Cohesion: 1.0
+Nodes (1): Count sale orders where this partner is the authorizer
+
+### Community 43 - "Community 43"
+Cohesion: 1.0
+Nodes (1): Count assessments where this partner is involved
+
+### Community 44 - "Community 44"
+Cohesion: 1.0
+Nodes (1): Count sale orders assigned to this partner as delivery technician
+
+### Community 45 - "Community 45"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 46 - "Community 46"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 47 - "Community 47"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 48 - "Community 48"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 49 - "Community 49"
+Cohesion: 1.0
+Nodes (0): 
+
+### Community 50 - "Community 50"
+Cohesion: 1.0
+Nodes (1): Display the Page 11 signing form.
+
+### Community 51 - "Community 51"
+Cohesion: 1.0
+Nodes (1): Process the submitted Page 11 signature.
+
+### Community 52 - "Community 52"
+Cohesion: 1.0
+Nodes (1): Download the signed Page 11 PDF.
+
+### Community 53 - "Community 53"
+Cohesion: 1.0
+Nodes (1): Start a new assessment
+
+### Community 54 - "Community 54"
+Cohesion: 1.0
+Nodes (1): View/edit an assessment
+
+### Community 55 - "Community 55"
+Cohesion: 1.0
+Nodes (1): Save assessment data (create or update)
+
+### Community 56 - "Community 56"
+Cohesion: 1.0
+Nodes (1): Signature capture page
+
+### Community 57 - "Community 57"
+Cohesion: 1.0
+Nodes (1): Save a signature (AJAX)
+
+### Community 58 - "Community 58"
+Cohesion: 1.0
+Nodes (1): Complete the assessment
+
+### Community 59 - "Community 59"
+Cohesion: 1.0
+Nodes (1): Start a new express assessment (Page 1 - Equipment Selection)
+
+### Community 60 - "Community 60"
+Cohesion: 1.0
+Nodes (1): Continue/edit an express assessment
+
+### Community 61 - "Community 61"
+Cohesion: 1.0
+Nodes (1): Save express assessment data (create or update)
+
+### Community 62 - "Community 62"
+Cohesion: 1.0
+Nodes (1): Public page for booking an accessibility assessment.
+
+### Community 63 - "Community 63"
+Cohesion: 1.0
+Nodes (1): Process assessment booking form submission.
+
+### Community 64 - "Community 64"
+Cohesion: 1.0
+Nodes (1): Render the visual field editor for a PDF template.
+
+### Community 65 - "Community 65"
+Cohesion: 1.0
+Nodes (1): Return all fields for a template.
+
+### Community 66 - "Community 66"
+Cohesion: 1.0
+Nodes (1): Update a field's position or properties.
+
+### Community 67 - "Community 67"
+Cohesion: 1.0
+Nodes (1): Create a new field on a template.
+
+### Community 68 - "Community 68"
+Cohesion: 1.0
+Nodes (1): Delete a field from a template.
+
+### Community 69 - "Community 69"
+Cohesion: 1.0
+Nodes (1): Return the preview image URL for a specific page.
+
+### Community 70 - "Community 70"
+Cohesion: 1.0
+Nodes (1): Upload a preview image for a template page directly from the editor.
+
+### Community 71 - "Community 71"
+Cohesion: 1.0
+Nodes (1): Generate a preview filled PDF with sample data.
+
+### Community 72 - "Community 72"
+Cohesion: 1.0
+Nodes (1): Auto-save browser-detected timezone to the user profile if not already set.
+
+### Community 73 - "Community 73"
+Cohesion: 1.0
+Nodes (1): Override home to add ADP posting info for Fusion users
+
+### Community 74 - "Community 74"
+Cohesion: 1.0
+Nodes (1): Authorizer dashboard - simplified mobile-first view
+
+### Community 75 - "Community 75"
+Cohesion: 1.0
+Nodes (1): List of cases assigned to the authorizer
+
+### Community 76 - "Community 76"
+Cohesion: 1.0
+Nodes (1): AJAX search endpoint for real-time search
+
+### Community 77 - "Community 77"
+Cohesion: 1.0
+Nodes (1): Add a comment to a case - posts to sale order chatter and emails salesperson
+
+### Community 78 - "Community 78"
+Cohesion: 1.0
+Nodes (1): Upload a document for a case
+
+### Community 79 - "Community 79"
+Cohesion: 1.0
+Nodes (1): Download an attachment from sale order (original application, xml, proof of deli
+
+### Community 80 - "Community 80"
+Cohesion: 1.0
+Nodes (1): View an approval photo
+
+### Community 81 - "Community 81"
+Cohesion: 1.0
+Nodes (1): Sales rep dashboard with search and filters
+
+### Community 82 - "Community 82"
+Cohesion: 1.0
+Nodes (1): List of cases for the sales rep
+
+### Community 83 - "Community 83"
+Cohesion: 1.0
+Nodes (1): AJAX search endpoint for sales rep real-time search
+
+### Community 84 - "Community 84"
+Cohesion: 1.0
+Nodes (1): View a specific case for sales rep
+
+### Community 85 - "Community 85"
+Cohesion: 1.0
+Nodes (1): Add a comment to a case (sales rep) - posts to sale order chatter and emails aut
+
+### Community 86 - "Community 86"
+Cohesion: 1.0
+Nodes (1): List of funding claims for the client
+
+### Community 87 - "Community 87"
+Cohesion: 1.0
+Nodes (1): View a specific funding claim
+
+### Community 88 - "Community 88"
+Cohesion: 1.0
+Nodes (1): Download a document from a funding claim
+
+### Community 89 - "Community 89"
+Cohesion: 1.0
+Nodes (1): Download proof of delivery from a funding claim
+
+### Community 90 - "Community 90"
+Cohesion: 1.0
+Nodes (1): Technician dashboard - today's schedule with timeline.
+
+### Community 91 - "Community 91"
+Cohesion: 1.0
+Nodes (1): List of all tasks for the technician.
+
+### Community 92 - "Community 92"
+Cohesion: 1.0
+Nodes (1): View a specific technician task.
+
+### Community 93 - "Community 93"
+Cohesion: 1.0
+Nodes (1): Add notes (and optional photos) to a completed task.          :param notes: text
+
+### Community 94 - "Community 94"
+Cohesion: 1.0
+Nodes (1): Handle task status changes (start, complete, en_route, cancel).         Location
+
+### Community 95 - "Community 95"
+Cohesion: 1.0
+Nodes (1): Transcribe voice recording using OpenAI Whisper, translate to English.
+
+### Community 96 - "Community 96"
+Cohesion: 1.0
+Nodes (1): Use GPT to clean up and format raw notes text.
+
+### Community 97 - "Community 97"
+Cohesion: 1.0
+Nodes (1): Format transcription with GPT and complete the task.
+
+### Community 98 - "Community 98"
+Cohesion: 1.0
+Nodes (1): Next day preparation view.
+
+### Community 99 - "Community 99"
+Cohesion: 1.0
+Nodes (1): View schedule for a specific date.
+
+### Community 100 - "Community 100"
+Cohesion: 1.0
+Nodes (1): Admin map view showing latest technician locations using Google Maps.
+
+### Community 101 - "Community 101"
+Cohesion: 1.0
+Nodes (1): Log the technician's current GPS location.
+
+### Community 102 - "Community 102"
+Cohesion: 1.0
+Nodes (1): Check if the current technician is clocked in.          Returns {clocked_in: boo
+
+### Community 103 - "Community 103"
+Cohesion: 1.0
+Nodes (1): Save the technician's personal start location.
+
+### Community 104 - "Community 104"
+Cohesion: 1.0
+Nodes (1): Register a push notification subscription.
+
+### Community 105 - "Community 105"
+Cohesion: 1.0
+Nodes (1): Legacy: List of deliveries for the technician (redirects to tasks).
+
+### Community 106 - "Community 106"
+Cohesion: 1.0
+Nodes (1): View a specific delivery for technician (legacy, still works).
+
+### Community 107 - "Community 107"
+Cohesion: 1.0
+Nodes (1): POD signature capture page - accessible by technicians and sales reps
+
+### Community 108 - "Community 108"
+Cohesion: 1.0
+Nodes (1): Save POD signature via AJAX
+
+### Community 109 - "Community 109"
+Cohesion: 1.0
+Nodes (1): Task-level POD signature capture page (works for all tasks including shadow).
+
+### Community 110 - "Community 110"
+Cohesion: 1.0
+Nodes (1): Save POD signature directly on a task.
+
+### Community 111 - "Community 111"
+Cohesion: 1.0
+Nodes (1): Show the accessibility assessment type selector
+
+### Community 112 - "Community 112"
+Cohesion: 1.0
+Nodes (1): List all accessibility assessments for the current user (sales rep or authorizer
+
+### Community 113 - "Community 113"
+Cohesion: 1.0
+Nodes (1): Straight stair lift assessment form
+
+### Community 114 - "Community 114"
+Cohesion: 1.0
+Nodes (1): Curved stair lift assessment form
+
+### Community 115 - "Community 115"
+Cohesion: 1.0
+Nodes (1): Vertical Platform Lift assessment form
+
+### Community 116 - "Community 116"
+Cohesion: 1.0
+Nodes (1): Ceiling Lift assessment form
+
+### Community 117 - "Community 117"
+Cohesion: 1.0
+Nodes (1): Custom Ramp assessment form
+
+### Community 118 - "Community 118"
+Cohesion: 1.0
+Nodes (1): Bathroom Modification assessment form
+
+### Community 119 - "Community 119"
+Cohesion: 1.0
+Nodes (1): Tub Cutout assessment form
+
+### Community 120 - "Community 120"
+Cohesion: 1.0
+Nodes (1): Save an accessibility assessment and optionally create a Sale Order
+
+### Community 121 - "Community 121"
+Cohesion: 1.0
+Nodes (1): Render the rental pickup inspection form for the technician.
+
+### Community 122 - "Community 122"
+Cohesion: 1.0
+Nodes (1): Save the rental inspection results.
+
+## Knowledge Gaps
+- **177 isolated node(s):** `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`, `Draw a single field onto the reportlab canvas.          Args:             c: rep`, `Override create to generate reference number` (+172 more)
+  These have ≤1 connection - possible missing edges or undocumented components.
+- **Thin community `Community 19`** (1 nodes): `__init__.py`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 20`** (1 nodes): `__init__.py`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 21`** (1 nodes): `__init__.py`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 22`** (1 nodes): `__manifest__.py`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 23`** (1 nodes): `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 24`** (1 nodes): `Draw a single field onto the reportlab canvas.          Args:             c: rep`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 25`** (1 nodes): `Override create to generate reference number`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 26`** (1 nodes): `Get authorizer from x_fc_authorizer_id field`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 27`** (1 nodes): `Get cases for authorizer portal with optional search`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 28`** (1 nodes): `Get cases for sales rep portal with optional search`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 29`** (1 nodes): `Override create to handle revision numbering`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 30`** (1 nodes): `Get documents for a sale order, optionally filtered by type`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 31`** (1 nodes): `Get all revisions of a specific document type`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 32`** (1 nodes): `Override create to set author from current user if not provided`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 33`** (1 nodes): `Kanban group expansion — always show all 6 workflow states.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 34`** (1 nodes): `Straight stair lift: (steps × nose_to_nose) + 13" top landing`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 35`** (1 nodes): `Use manual override if provided, otherwise use calculated`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 36`** (1 nodes): `Curved stair lift calculation:         - 12" per step         - 16" per curve`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 37`** (1 nodes): `Use manual override if provided, otherwise use calculated`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 38`** (1 nodes): `Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 39`** (1 nodes): `Landing required every 30 feet (360 inches)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 40`** (1 nodes): `Total length including landings (5 feet = 60 inches each)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 41`** (1 nodes): `Compute portal access status based on user account and login history.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 42`** (1 nodes): `Count sale orders where this partner is the authorizer`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 43`** (1 nodes): `Count assessments where this partner is involved`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 44`** (1 nodes): `Count sale orders assigned to this partner as delivery technician`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 45`** (1 nodes): `assessment_form.js`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 46`** (1 nodes): `technician_sw.js`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 47`** (1 nodes): `loaner_portal.js`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 48`** (1 nodes): `signature_pad.js`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 49`** (1 nodes): `portal_search.js`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 50`** (1 nodes): `Display the Page 11 signing form.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 51`** (1 nodes): `Process the submitted Page 11 signature.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 52`** (1 nodes): `Download the signed Page 11 PDF.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 53`** (1 nodes): `Start a new assessment`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 54`** (1 nodes): `View/edit an assessment`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 55`** (1 nodes): `Save assessment data (create or update)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 56`** (1 nodes): `Signature capture page`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 57`** (1 nodes): `Save a signature (AJAX)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 58`** (1 nodes): `Complete the assessment`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 59`** (1 nodes): `Start a new express assessment (Page 1 - Equipment Selection)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 60`** (1 nodes): `Continue/edit an express assessment`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 61`** (1 nodes): `Save express assessment data (create or update)`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 62`** (1 nodes): `Public page for booking an accessibility assessment.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 63`** (1 nodes): `Process assessment booking form submission.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 64`** (1 nodes): `Render the visual field editor for a PDF template.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 65`** (1 nodes): `Return all fields for a template.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 66`** (1 nodes): `Update a field's position or properties.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 67`** (1 nodes): `Create a new field on a template.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 68`** (1 nodes): `Delete a field from a template.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 69`** (1 nodes): `Return the preview image URL for a specific page.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 70`** (1 nodes): `Upload a preview image for a template page directly from the editor.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 71`** (1 nodes): `Generate a preview filled PDF with sample data.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 72`** (1 nodes): `Auto-save browser-detected timezone to the user profile if not already set.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 73`** (1 nodes): `Override home to add ADP posting info for Fusion users`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 74`** (1 nodes): `Authorizer dashboard - simplified mobile-first view`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 75`** (1 nodes): `List of cases assigned to the authorizer`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 76`** (1 nodes): `AJAX search endpoint for real-time search`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 77`** (1 nodes): `Add a comment to a case - posts to sale order chatter and emails salesperson`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 78`** (1 nodes): `Upload a document for a case`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 79`** (1 nodes): `Download an attachment from sale order (original application, xml, proof of deli`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 80`** (1 nodes): `View an approval photo`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 81`** (1 nodes): `Sales rep dashboard with search and filters`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 82`** (1 nodes): `List of cases for the sales rep`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 83`** (1 nodes): `AJAX search endpoint for sales rep real-time search`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 84`** (1 nodes): `View a specific case for sales rep`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 85`** (1 nodes): `Add a comment to a case (sales rep) - posts to sale order chatter and emails aut`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 86`** (1 nodes): `List of funding claims for the client`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 87`** (1 nodes): `View a specific funding claim`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 88`** (1 nodes): `Download a document from a funding claim`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 89`** (1 nodes): `Download proof of delivery from a funding claim`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 90`** (1 nodes): `Technician dashboard - today's schedule with timeline.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 91`** (1 nodes): `List of all tasks for the technician.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 92`** (1 nodes): `View a specific technician task.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 93`** (1 nodes): `Add notes (and optional photos) to a completed task.          :param notes: text`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 94`** (1 nodes): `Handle task status changes (start, complete, en_route, cancel).         Location`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 95`** (1 nodes): `Transcribe voice recording using OpenAI Whisper, translate to English.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 96`** (1 nodes): `Use GPT to clean up and format raw notes text.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 97`** (1 nodes): `Format transcription with GPT and complete the task.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 98`** (1 nodes): `Next day preparation view.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 99`** (1 nodes): `View schedule for a specific date.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 100`** (1 nodes): `Admin map view showing latest technician locations using Google Maps.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 101`** (1 nodes): `Log the technician's current GPS location.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 102`** (1 nodes): `Check if the current technician is clocked in.          Returns {clocked_in: boo`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 103`** (1 nodes): `Save the technician's personal start location.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 104`** (1 nodes): `Register a push notification subscription.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 105`** (1 nodes): `Legacy: List of deliveries for the technician (redirects to tasks).`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 106`** (1 nodes): `View a specific delivery for technician (legacy, still works).`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 107`** (1 nodes): `POD signature capture page - accessible by technicians and sales reps`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 108`** (1 nodes): `Save POD signature via AJAX`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 109`** (1 nodes): `Task-level POD signature capture page (works for all tasks including shadow).`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 110`** (1 nodes): `Save POD signature directly on a task.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 111`** (1 nodes): `Show the accessibility assessment type selector`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 112`** (1 nodes): `List all accessibility assessments for the current user (sales rep or authorizer`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 113`** (1 nodes): `Straight stair lift assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 114`** (1 nodes): `Curved stair lift assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 115`** (1 nodes): `Vertical Platform Lift assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 116`** (1 nodes): `Ceiling Lift assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 117`** (1 nodes): `Custom Ramp assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 118`** (1 nodes): `Bathroom Modification assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 119`** (1 nodes): `Tub Cutout assessment form`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 120`** (1 nodes): `Save an accessibility assessment and optionally create a Sale Order`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 121`** (1 nodes): `Render the rental pickup inspection form for the technician.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+- **Thin community `Community 122`** (1 nodes): `Save the rental inspection results.`
+  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
+
+## Suggested Questions
+_Questions this graph is uniquely positioned to answer:_
+
+- **Why does `create()` connect `Community 3` to `Community 0`, `Community 1`, `Community 4`, `Community 7`, `Community 11`?**
+  _High betweenness centrality (0.080) - this node is a cross-community bridge._
+- **Why does `FusionAssessment` connect `Community 2` to `Community 4`?**
+  _High betweenness centrality (0.059) - this node is a cross-community bridge._
+- **Why does `AuthorizerPortal` connect `Community 7` to `Community 0`, `Community 4`?**
+  _High betweenness centrality (0.047) - this node is a cross-community bridge._
+- **Are the 17 inferred relationships involving `create()` (e.g. with `._generate_tutorial_articles()` and `.action_grant_portal_access()`) actually correct?**
+  _`create()` has 17 INFERRED edges - model-reasoned connections that need verification._
+- **Are the 2 inferred relationships involving `accessibility_assessment_save()` (e.g. with `create()` and `.action_complete()`) actually correct?**
+  _`accessibility_assessment_save()` has 2 INFERRED edges - model-reasoned connections that need verification._
+- **What connects `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit` to the rest of the system?**
+  _177 weakly-connected nodes found - possible documentation gaps or missing edges._
+- **Should `Community 0` be split into smaller, more focused modules?**
+  _Cohesion score 0.05 - nodes in this community are weakly interconnected._

fusion_authorizer_portal/graphify-out/cache/046056455412ebee936412c1240a69f937f190344b64ec0454b6063195d45271.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "label": "authorizer_comment.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L1"}, {"id": "authorizer_comment_authorizercomment", "label": "AuthorizerComment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9"}, {"id": "authorizer_comment_compute_display_name", "label": "_compute_display_name()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70"}, {"id": "authorizer_comment_create", "label": "create()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78"}, {"id": "authorizer_comment_rationale_79", "label": "Override create to set author from current user if not provided", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_authorizercomment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_compute_display_name", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_create", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78", "weight": 1.0}, {"source": "authorizer_comment_rationale_79", "target": "authorizer_comment_authorizercomment_create", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79", "weight": 1.0}], "raw_calls": [{"caller_nid": "authorizer_comment_compute_display_name", "callee": "strftime", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L73"}, {"caller_nid": "authorizer_comment_compute_display_name", "callee": "_", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L75"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L81"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L83"}, {"caller_nid": "authorizer_comment_create", "callee": "super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L85"}]}

fusion_authorizer_portal/graphify-out/cache/201bffcfb9df81c1c697f76723db3d2b55f70a670695aa4cffad72f1e543c31a.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/308a1a5138c86acd5683293941dccb2eddc57c55e2795de263eee8f7ceaf4785.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "label": "chatter_message_authorizer.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L1"}, {"id": "chatter_message_authorizer_setup", "label": "setup()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14"}, {"id": "chatter_message_authorizer_onclickmessageauthorizer", "label": "onClickMessageAuthorizer()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "patch", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "hooks", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_setup", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_onclickmessageauthorizer", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20", "weight": 1.0}], "raw_calls": [{"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L16"}, {"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L17"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "call", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L25"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "map", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "split", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "doAction", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L34"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "warn", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L37"}]}

fusion_authorizer_portal/graphify-out/cache/344325bcf48b6dae6ea42a035e0cc7e4cec0dfedec2b4e2bd28faece240df747.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L6", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L11", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3bd9ca6c402373c66eb4922b9d6ba658e2386a32cd63c119daea3714ef5ca4fa.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "label": "timezone_detect.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L1"}, {"id": "timezone_detect_start", "label": "start()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8"}, {"id": "timezone_detect_detectandsavetimezone", "label": "_detectAndSaveTimezone()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13"}, {"id": "timezone_detect_getcookie", "label": "_getCookie()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_start", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_detectandsavetimezone", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_getcookie", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30", "weight": 1.0}, {"source": "timezone_detect_start", "target": "timezone_detect_detectandsavetimezone", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L10", "weight": 1.0}, {"source": "timezone_detect_detectandsavetimezone", "target": "timezone_detect_getcookie", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L22", "weight": 1.0}], "raw_calls": [{"caller_nid": "timezone_detect_start", "callee": "_super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L9"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "resolvedOptions", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "DateTimeFormat", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "catch", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "_rpc", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_getcookie", "callee": "match", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L31"}, {"caller_nid": "timezone_detect_getcookie", "callee": "decodeURIComponent", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L32"}]}

fusion_authorizer_portal/graphify-out/cache/3c8153d244043ce50d63f92e28c5047a85aa0403183feb9318309e281c3a3aee.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L6", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3cd6493213bae26920500259650a0498e68c60d6ba1969312a624edc63c9fd93.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L28"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchone", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L35"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L36"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L39"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L44"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L49"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L60"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L62"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L64"}]}

fusion_authorizer_portal/graphify-out/cache/55625cb82706d37b738a37ae8c2666788e3e3bde08167936cd99f4a7b65dd586.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L1"}, {"id": "init_reactivate_views", "label": "_reactivate_views()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7"}, {"id": "init_rationale_8", "label": "Ensure all module views are active after install/update.      Odoo silently deac", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "init_reactivate_views", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "init_rationale_8", "target": "init_reactivate_views", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8", "weight": 1.0}], "raw_calls": [{"caller_nid": "init_reactivate_views", "callee": "search", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "sudo", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "write", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L20"}, {"caller_nid": "init_reactivate_views", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L21"}, {"caller_nid": "init_reactivate_views", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L26"}, {"caller_nid": "init_reactivate_views", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "getLogger", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L29"}]}

fusion_authorizer_portal/graphify-out/cache/5e06da4bd569ef8ff94d79611571501a0fe7ccc3d3d3a1355cafc7d83441e575.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_manifest_py", "label": "__manifest__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__manifest__.py", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/66efd778b81d727e4df14662ff378f4d8c31bca05f87fa387c0760f7ecb8e0bf.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_signature_pad_js", "label": "signature_pad.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/signature_pad.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/82b54859e3cdc0d06aa234bd56e490b57a84237c34185a8293d42ea42e64f01c.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_assessment_form_js", "label": "assessment_form.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/assessment_form.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/8e18c26853be951ba743bc6bc1f889014ea593bbdb3f096de5307c4a29291298.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/a0b44e9d1d686feedbb45abc7155102474b444c2375e41ec4e884d331befcef4.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/adeb8dd4ce55111ffd86c41804940dc0bba334af2e7a1a4e2caa11d2a5fded3d.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_portal_search_js", "label": "portal_search.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/portal_search.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/bdab7c3bffb56f3c01889c19039dda8139704dae111032451eee29d4da1aba7e.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "label": "loaner_checkout.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L1"}, {"id": "loaner_checkout_fusionloanercheckoutassessment", "label": "FusionLoanerCheckoutAssessment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6"}, {"id": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "label": ".action_view_assessment()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "loaner_checkout_fusionloanercheckoutassessment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6", "weight": 1.0}, {"source": "loaner_checkout_fusionloanercheckoutassessment", "target": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "relation": "method", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17", "weight": 1.0}], "raw_calls": [{"caller_nid": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "callee": "ensure_one", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L18"}]}

fusion_authorizer_portal/graphify-out/cache/bdadca0a69fae44893e3cd9e9e3178034415564cc70f31d6353ea1a688d5e54e.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "label": "loaner_portal.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/dee4a573c575f3c42bf1f4a7d900626dacaba915ece6630ef0274e624fc906f8.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_technician_sw_js", "label": "technician_sw.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/technician_sw.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/df42568b96706fa316a1cf512784acdf5b0014abc5fc1ff47f187baed68f0a1f.json

@@ -0,0 +1 @@
+{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py

@@ -10,7 +10,7 @@ import logging
 
 _logger = logging.getLogger(__name__)
 
-MODULE = 'fusion_portal'
+MODULE = 'fusion_authorizer_portal'
 
 
 def migrate(cr, version):

fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py

@@ -10,7 +10,7 @@ import logging
 
 _logger = logging.getLogger(__name__)
 
-MODULE = 'fusion_portal'
+MODULE = 'fusion_authorizer_portal'
 
 
 def migrate(cr, version):

fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py

@@ -10,7 +10,7 @@ import logging
 
 _logger = logging.getLogger(__name__)
 
-MODULE = 'fusion_portal'
+MODULE = 'fusion_authorizer_portal'
 
 
 def migrate(cr, version):

fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py

@@ -12,7 +12,7 @@ import logging
 
 _logger = logging.getLogger(__name__)
 
-MODULE = 'fusion_portal'
+MODULE = 'fusion_authorizer_portal'
 
 MOVED_XMLIDS = [
     'portal_schedule_page',

fusion_authorizer_portal/models/accessibility_assessment.py

@@ -73,7 +73,6 @@ class FusionAccessibilityAssessment(models.Model):
             ('march_of_dimes', 'March of Dimes'),
             ('odsp', 'ODSP'),
             ('wsib', 'WSIB'),
-            ('hardship', 'Hardship Funding'),
             ('insurance', 'Private Insurance'),
             ('direct_private', 'Private Pay (Direct)'),
             ('other', 'Other'),
@@ -773,7 +772,6 @@ class FusionAccessibilityAssessment(models.Model):
             'march_of_dimes': 'march_of_dimes',
             'odsp': 'odsp',
             'wsib': 'wsib',
-            'hardship': 'hardship',
             'insurance': 'insurance',
             'direct_private': 'direct_private',
             'other': 'other',
@@ -787,7 +785,7 @@ class FusionAccessibilityAssessment(models.Model):
             'origin': f'Accessibility: {self.reference} ({type_label})',
             'x_fc_sale_type': sale_type,
             # Back-reference so the sale order knows which accessibility
-            # assessment spawned it (see field definition in fusion_portal/models/sale_order.py).
+            # assessment spawned it (see field definition in fusion_authorizer_portal/models/sale_order.py).
             'accessibility_assessment_id': self.id,
         }
 

fusion_authorizer_portal/models/assessment.py

@@ -1458,7 +1458,7 @@ class FusionAssessment(models.Model):
         # Send to authorizer
         if self.authorizer_id and self.authorizer_id.email:
             try:
-                template = self.env.ref('fusion_portal.mail_template_assessment_complete_authorizer', raise_if_not_found=False)
+                template = self.env.ref('fusion_authorizer_portal.mail_template_assessment_complete_authorizer', raise_if_not_found=False)
                 if template:
                     template.send_mail(self.id, force_send=True)
                     _logger.info(f"Sent assessment completion email to authorizer {self.authorizer_id.email}")
@@ -1468,7 +1468,7 @@ class FusionAssessment(models.Model):
         # Send to client
         if self.client_email:
             try:
-                template = self.env.ref('fusion_portal.mail_template_assessment_complete_client', raise_if_not_found=False)
+                template = self.env.ref('fusion_authorizer_portal.mail_template_assessment_complete_client', raise_if_not_found=False)
                 if template:
                     template.send_mail(self.id, force_send=True)
                     _logger.info(f"Sent assessment completion email to client {self.client_email}")

fusion_authorizer_portal/models/res_partner.py

@@ -137,15 +137,15 @@ class ResPartner(models.Model):
         """Assign role-specific portal groups to a portal user based on contact checkboxes."""
         groups_to_add = []
         if self.is_technician_portal:
-            g = self.env.ref('fusion_portal.group_technician_portal', raise_if_not_found=False)
+            g = self.env.ref('fusion_authorizer_portal.group_technician_portal', raise_if_not_found=False)
             if g and g not in portal_user.group_ids:
                 groups_to_add.append((4, g.id))
         if self.is_authorizer:
-            g = self.env.ref('fusion_portal.group_authorizer_portal', raise_if_not_found=False)
+            g = self.env.ref('fusion_authorizer_portal.group_authorizer_portal', raise_if_not_found=False)
             if g and g not in portal_user.group_ids:
                 groups_to_add.append((4, g.id))
         if self.is_sales_rep_portal:
-            g = self.env.ref('fusion_portal.group_sales_rep_portal', raise_if_not_found=False)
+            g = self.env.ref('fusion_authorizer_portal.group_sales_rep_portal', raise_if_not_found=False)
             if g and g not in portal_user.group_ids:
                 groups_to_add.append((4, g.id))
         if groups_to_add:
@@ -367,23 +367,23 @@ class ResPartner(models.Model):
         
         # Determine role and template
         if self.is_technician_portal:
-            template_xmlid = 'fusion_portal.welcome_article_technician'
+            template_xmlid = 'fusion_authorizer_portal.welcome_article_technician'
             icon = '🔧'
             title = f"Welcome {self.name} - Technician Portal"
         elif self.is_authorizer:
-            template_xmlid = 'fusion_portal.welcome_article_authorizer'
+            template_xmlid = 'fusion_authorizer_portal.welcome_article_authorizer'
             icon = '📋'
             title = f"Welcome {self.name} - Authorizer Portal"
         elif self.is_sales_rep_portal:
-            template_xmlid = 'fusion_portal.welcome_article_sales_rep'
+            template_xmlid = 'fusion_authorizer_portal.welcome_article_sales_rep'
             icon = '💼'
             title = f"Welcome {self.name} - Sales Portal"
         elif self.is_client_portal:
-            template_xmlid = 'fusion_portal.welcome_article_client'
+            template_xmlid = 'fusion_authorizer_portal.welcome_article_client'
             icon = '👤'
             title = f"Welcome {self.name}"
         else:
-            template_xmlid = 'fusion_portal.welcome_article_client'
+            template_xmlid = 'fusion_authorizer_portal.welcome_article_client'
             icon = '👋'
             title = f"Welcome {self.name}"
         

fusion_authorizer_portal/models/res_users.py

@@ -85,7 +85,7 @@ class ResUsers(models.Model):
 
             try:
                 body = self.env['ir.qweb']._render(
-                    'fusion_portal.welcome_article_internal',
+                    'fusion_authorizer_portal.welcome_article_internal',
                     render_ctx,
                     minimal_qcontext=True,
                     raise_if_not_found=False,

fusion_authorizer_portal/models/sale_order.py

@@ -133,7 +133,7 @@ class SaleOrder(models.Model):
             return
         
         try:
-            template = self.env.ref('fusion_portal.mail_template_case_assigned', raise_if_not_found=False)
+            template = self.env.ref('fusion_authorizer_portal.mail_template_case_assigned', raise_if_not_found=False)
             if template:
                 template.send_mail(self.id, force_send=False)
                 _logger.info(f"Sent case assignment notification to {self.x_fc_authorizer_id.email} for {self.name}")

fusion_authorizer_portal/static/src/css/portal_style.css

@@ -862,82 +862,3 @@
         padding: 14px 18px;
     }
 }
-
-/* ============================================================= */
-/* Accessibility Assessment selector — modern photo cards        */
-/* Per-card colour is set inline via --fp-acc-accent / --fp-acc-fg */
-/* ============================================================= */
-.fp-acc-card {
-    display: flex;
-    flex-direction: column;
-    color: inherit;
-    background-color: #ffffff;
-    border: 1px solid #e6e8eb;
-    border-radius: 14px;
-    overflow: hidden;
-    transition: transform .18s ease, box-shadow .18s ease;
-}
-.fp-acc-card:hover,
-.fp-acc-card:focus {
-    color: inherit;
-    transform: translateY(-4px);
-    box-shadow: 0 14px 30px rgba(16, 24, 40, .15) !important;
-}
-.fp-acc-thumb {
-    position: relative;
-    aspect-ratio: 3 / 2;
-    overflow: hidden;
-    background-color: #f1f3f5;
-}
-.fp-acc-thumb img {
-    width: 100%;
-    height: 100%;
-    object-fit: cover;
-    display: block;
-    transition: transform .4s ease;
-}
-.fp-acc-card:hover .fp-acc-thumb img {
-    transform: scale(1.06);
-}
-.fp-acc-thumb::after {
-    content: "";
-    position: absolute;
-    left: 0;
-    right: 0;
-    bottom: 0;
-    height: 4px;
-    background-color: var(--fp-acc-accent, #0d6efd);
-}
-.fp-acc-card .card-body {
-    display: flex;
-    flex-direction: column;
-    flex: 1 1 auto;
-    padding: 1rem 1.15rem 1.2rem;
-    text-align: center;
-}
-.fp-acc-title {
-    font-weight: 600;
-    color: #1a1d21;
-    margin-bottom: .4rem;
-}
-.fp-acc-card .card-text {
-    flex: 1 1 auto;
-}
-.fp-acc-btn {
-    display: inline-flex;
-    align-items: center;
-    gap: .45rem;
-    align-self: center;
-    margin-top: .85rem;
-    padding: .5rem 1rem;
-    font-weight: 600;
-    font-size: .9rem;
-    line-height: 1;
-    border-radius: 8px;
-    color: var(--fp-acc-fg, #ffffff);
-    background-color: var(--fp-acc-accent, #0d6efd);
-    transition: filter .15s ease;
-}
-.fp-acc-card:hover .fp-acc-btn {
-    filter: brightness(.92);
-}

fusion_authorizer_portal/static/src/js/assessment_form.js

@@ -2,7 +2,7 @@
  * Fusion Authorizer Portal - Assessment Form
  */
 
-odoo.define('fusion_portal.assessment_form', function (require) {
+odoo.define('fusion_authorizer_portal.assessment_form', function (require) {
     'use strict';
     
     var publicWidget = require('web.public.widget');

fusion_authorizer_portal/static/src/js/portal_search.js

@@ -2,7 +2,7 @@
  * Fusion Authorizer Portal - Real-time Search
  */
 
-odoo.define('fusion_portal.portal_search', function (require) {
+odoo.define('fusion_authorizer_portal.portal_search', function (require) {
     'use strict';
     
     var publicWidget = require('web.public.widget');

fusion_authorizer_portal/static/src/js/signature_pad.js

@@ -3,7 +3,7 @@
  * Touch-enabled digital signature capture
  */
 
-odoo.define('fusion_portal.signature_pad', function (require) {
+odoo.define('fusion_authorizer_portal.signature_pad', function (require) {
     'use strict';
     
     var publicWidget = require('web.public.widget');

fusion_authorizer_portal/static/src/js/technician_push.js

@@ -35,7 +35,7 @@
         try {
             // Register service worker
             var registration = await navigator.serviceWorker.register(
-                '/fusion_portal/static/src/js/technician_sw.js',
+                '/fusion_authorizer_portal/static/src/js/technician_sw.js',
                 {scope: '/my/technician/'}
             );
 

fusion_authorizer_portal/static/src/js/technician_sw.js

@@ -15,8 +15,8 @@ self.addEventListener('push', function(event) {
 
     var options = {
         body: data.body || '',
-        icon: '/fusion_portal/static/description/icon.png',
-        badge: '/fusion_portal/static/description/icon.png',
+        icon: '/fusion_authorizer_portal/static/description/icon.png',
+        badge: '/fusion_authorizer_portal/static/description/icon.png',
         tag: 'tech-task-' + (data.task_id || 'general'),
         renotify: true,
         data: {