feat(fusion_claims): service-booking wizard live client search + address autocomplete

The wizard's dynamic fields were non-functional: the "Existing customer" box had
no search (no endpoint, no handler — the typed string was only sent on submit),
and address autocomplete never attached (google_address_autocomplete.js patches
FormController, which a client action is not).

Live client search:
- new jsonrpc endpoint /fusion_claims/service_booking/search_customers — searches
  res.partner (name/phone/email) and resolves a typed SO number to its partner.
- JS: debounced (250ms) onCustSearch -> .sb-cust-results dropdown; pickCustomer()
  sets state.partnerId + fills the contact, which action_book_from_wizard already
  consumes for cust_mode='existing'.
- FIELD-SAFE domain: res.partner has NO `mobile` field in Odoo 19 — referencing it
  raises ValueError and the swallowed exception made the search silently return
  nothing. Build the OR domain only over fields in Partner._fields. Smoke-tested on
  prod data ('25450'->1, '1 905-'->8).

Address autocomplete (wizard-local):
- component loads Google Places (key = ICP fusion_claims.google_maps_api_key, which
  IS configured on westin), attaches via useRef('root')+onMounted/onPatched to every
  input.sb-addr-input, writes street/city/lat/lng into reactive state. Fully guarded
  (per-input _sbAc, _addrStarted/_addrNoKey gate, .catch on both hooks) so a missing
  key degrades to manual entry and can never break render.

Verified: pyflakes clean, JS node --check, SCSS compiles, XML well-formed, dropdown
UI rendered against Bootstrap+compiled CSS. Documented in fusion_claims/CLAUDE.md §48.
Bump fusion_claims 19.0.9.6.0 -> 19.0.9.7.0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.gitignore

@@ -15,3 +15,4 @@ __pycache__/
 
 # Local-only diagnostic logs from test runs
 _test_*.log
+.superpowers/

CLAUDE.md

@@ -33,6 +33,10 @@
 
 15. **There is NO `sale.subscription` model in Odoo 19** (Enterprise `sale_subscription`). A subscription is a **`sale.order`** with `is_subscription=True`, `plan_id` → **`sale.subscription.plan`** (the recurrence), plus `subscription_state` / `next_invoice_date` / `recurring_monthly`. Any Many2one or relation that targets "a subscription" must point at `sale.order` (filter `domain=[('is_subscription','=',True)]`) — **not** `sale.subscription`, which does not exist and fails at install. The surviving `sale.subscription.*` records are only the plan + wizards/reports (`sale.subscription.plan`, `sale.subscription.report`, `sale.subscription.change.customer.wizard`, `sale.subscription.close.reason.wizard`). Verified on live `nexamain` (odoo-nexa, 19.0): `SELECT model FROM ir_model WHERE model LIKE 'sale.subscription%'`.
 
+16. **Renaming a module's technical name needs a DB rename, not just a folder rename.** The technical name is baked into the database: `ir_module_module.name`, every external ID in `ir_model_data.module`, each view's `ir_ui_view.key` prefix, and the `ir_module_module_dependency.name` rows of every module that depends on it. Rename only the folder + in-code references and Odoo treats the new name as a fresh uninstalled module — installing it **duplicates** groups/templates/menus and **orphans** all existing data. On every DB that already has it installed, run an in-place SQL rename (the 4 tables above) **before** `-u <newname>`; a fresh DB needs nothing. Reference script + full rationale: [`fusion_portal/rename_module.sql`](fusion_portal/rename_module.sql) (written for the `fusion_authorizer_portal` → `fusion_portal` rename). Also update cross-module `depends`, `inherit_id="<old>.view"`, `t-call`, `env.ref('<old>.xmlid')`, asset paths (`<old>/static/...`), and `from odoo.addons.<old>... import`.
+
+17. **`url_encode` (and werkzeug url helpers) are NOT available in the Odoo 19 `mail.template` QWeb render context.** Using `url_encode({...})` inside a template `body_html` (e.g. to build a fallback link) makes the template fail Odoo's save-time render validation **at install**, surfacing as the opaque `ParseError: ... Oops! We couldn't save your template due to an issue with this value: <the entire body html>` (the real `NameError` is hidden, and `--log-handler odoo.tools.convert:DEBUG` does NOT reveal it). Build URLs with plain string methods instead: `'https://…?q=' + (value or '').replace(' ', '+')`. Found installing `fusion_repairs` (post-visit NPS template). **That same opaque "issue with this value" error wraps ANY render failure in a mail.template body** — when you see it, suspect an undefined name / bad field reference in the template, not malformed XML.
+
 ## Card Styling — Copy Odoo's Kanban Pattern
 Don't rely on `var(--bs-border-color)` or `var(--bs-body-bg)` for card surfaces — they drift between themes/addons and often render **invisible**. Odoo's own kanban (`.o_kanban_record`) uses **explicit hex** values:
 ```css
@@ -94,7 +98,8 @@ Odoo content-hashes the compiled bundle URL (`/web/assets/<hash>/...`). When CSS
 
 ## Module-Specific Notes
 - **fusion_clock** — developed in **Claude Code** (no longer Cursor; no concurrent-editing conflicts). Changed a lot recently (NFC kiosk: tap-to-clock, enrollment + program-from-unknown-tap, manager page, sounds, screen lock, guided profile-photo capture, faster animations). Still read files fresh before editing rather than assuming the layout. Live on entech (`odoo-entech` / LXC 111 on `pve-worker5`).
-- **fusion_repairs** — read [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) before feature work. **Version `19.0.2.2.4`.** Bundles 1–11 shipped in repo (intake, portals, dashboard, pricing, flowcharts, parts/PO). **Not production-deployed** to Westin as of 2026-05-27. Local: `docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init`. Outstanding: RingCentral SMS, C2 history sidebar UI, office follow-up crons (config keys only), `tests/`, more flowchart content, sales-rep dashboard tile in `fusion_authorizer_portal`.
+- **fusion_repairs** — read [`fusion_repairs/cloud.md`](fusion_repairs/cloud.md) before feature work. **Version `19.0.2.3.0`** (Plan-1 maintenance foundation added 2026-06-02). **NOT Community-installable** — it transitively pulls in Enterprise `ai` + `knowledge` (`fusion_repairs → fusion_portal → fusion_claims → ai`; `fusion_portal → knowledge`), so it can NOT be installed or tested on local `odoo-modsdev` (Community) — the old `-d fusion-dev -u fusion_repairs` recipe does NOT work. **Test on Enterprise:** an isolated `westin-fr-test` DB on the `odoo-westin` host (clone of prod `westin-v19`; a fresh-DB clone install also needs a one-time orphaned-FK cleanup because prod has orphaned account/tax m2m rows). First-ever clean install surfaced + fixed 2 bugs (url_encode → rule 17; menu parent defined after its children) in commit `903ceb10`. **Not production-deployed** to Westin yet. **Test-runner gotchas on that prod-config container:** `--test-enable` SILENTLY SKIPS all tests without `--workers 0`; the conf's `log_level=warn` hides test output (add `--log-level=test`); the post_install phase also trips on a pre-existing module, so verify behaviour via `odoo shell` rather than the test runner. `mail_template_data.xml` is `noupdate=1` → template edits load on a FRESH install (the prod deploy) but NOT on `-u` of an already-installed DB. Outstanding: maintenance booking (Plan 2), visit log (Plan 3), backfill wizard (Plan 4), office follow-up crons (Plan 5), RingCentral SMS.
+- **fusion_portal** (formerly `fusion_authorizer_portal`) — authorizer/sales-rep portal; **ENTERPRISE-only** (depends `knowledge` → cannot run on local Community; verify on a westin clone, see *Westin Prod* below). **Assessment-visit flow LIVE on westin, v19.0.2.10.1.** A `fusion.assessment.visit` bundles the assessments from one home visit and, on completion (`action_complete_visit`), groups them by funding workflow (`x_fc_sale_type`) into ONE draft sale order per workflow (MoD/ADP/ODSP/WSIB/private/hardship/insurance) — never one combined SO, never one-per-item-within-a-funding. ADP devices group into one order (combination guard: ≤1 seated {wheelchair/powerchair/scooter} + ≤1 walker); accessibility items group per funding. Reps enter via the "Start a Visit" dashboard tile → `/my/visit/new`; the express/accessibility forms carry `?visit_id=` and defer SO creation to the visit. Renaming the technical name needs a DB rename — see [`fusion_portal/rename_module.sql`](fusion_portal/rename_module.sql).
 
 ## Workflow
 - Local dev: `docker exec odoo-modsdev-app odoo -d fusion-dev -u <module> --stop-after-init`
@@ -136,6 +141,19 @@ PGPASSWORD='a09e12e0995dc29446631fa458f3d4b3' psql -h 100.74.28.73 -p 5433 -U po
 - `fusionapps.code_snippets` — reference code
 - `fusionapps.quick_commands` — deployment and admin commands
 
+## Westin Prod — Deploy & Clone-Verify (fusion_portal et al.)
+
+Westin prod: host `odoo-westin`, app container `odoo-dev-app`, db container `odoo-dev-db`, DB `westin-v19` (user `odoo`, pw `DevSecure2025!`), addons `/opt/odoo/custom-addons` → `/mnt/extra-addons`, Enterprise `/mnt/enterprise-addons`, conf `/etc/odoo/odoo.conf`. ENTERPRISE env — modules depending on `knowledge` (fusion_portal → fusion_claims) cannot run on local Community, so verify on a clone before prod.
+
+**Clone-verify a change (prod-safe, isolated — prod files + live DB untouched):**
+1. Clone online: `docker exec -e PGPASSWORD='DevSecure2025!' odoo-dev-db sh -c 'dropdb -U odoo --if-exists westin-v19-visittest; createdb -U odoo -O odoo westin-v19-visittest && pg_dump -U odoo westin-v19 | psql -U odoo -q -d westin-v19-visittest'` (~2 min, ~152M -Fc).
+2. Stage the branch module into an isolated dir INSIDE the addons path: `/opt/odoo/custom-addons/_test/<module>`, then `-u <module> --stop-after-init --no-http --db_host db --db_port 5432 --db_user odoo --db_password 'DevSecure2025!' --addons-path=/usr/lib/python3/dist-packages/odoo/addons,/usr/lib/python3/dist-packages/addons,/mnt/extra-addons/_test,/mnt/enterprise-addons,/mnt/extra-addons`. The `/mnt/extra-addons/_test` prefix SHADOWS prod's copy (first matching path wins); deps load from the real `/mnt/extra-addons`.
+3. Smoke-test via `odoo shell -d westin-v19-visittest` (same addons-path); `env.cr.rollback()` at the end. To exercise email paths WITHOUT sending: `UPDATE ir_mail_server SET active=false;` AND in the shell `env['ir.mail_server'].__class__.send_email = lambda self, message, *a, **k: 'noop'` (`odoo shell` rejects `--smtp-server`).
+
+**THE ORPHANED-TAX-FK TRAP** (cost real diagnosis time): westin-v19 has ~3300 orphaned rows in `product_taxes_rel` + ~3300 in `product_supplier_taxes_rel` (`tax_id` → deleted `account_tax`), under FKs that are `convalidated=true` (taxes deleted via an FK-bypassing path; PG never re-checks a validated constraint). A plain `pg_dump | psql` clone can't recreate a *validating* FK over orphaned data → the FK is lost on the clone → Odoo `check_foreign_keys` tries to add it → `ForeignKeyViolation: Key (tax_id)=(N) is not present in account_tax` → "Failed to load registry". **Fix ON THE CLONE only:** `DELETE FROM <t> WHERE tax_id NOT IN (SELECT id FROM account_tax)` across every `%_rel` table with a tax column. **Prod `-u` is SAFE without touching the orphans** — prod's FK already exists, so Odoo skips it (it never re-validates a present FK); proven empirically by replicating FK-present+orphan on a clone and running `-u` (exit 0, orphan untouched). Owner is auditing the orphans — do NOT delete them on prod without sign-off.
+
+**Deploy:** backup (`docker exec ... pg_dump -Fc -U odoo westin-v19 > /opt/odoo/backups/<name>.dump` + `cp -r` the module dir to `/opt/odoo/backups/` — OUTSIDE the addons path, never a `*.bak` dir inside it) → `scp` branch to `/opt/odoo/staging/<module>` → swap into `/opt/odoo/custom-addons/<module>` → `-u <module>` → `DELETE FROM ir_attachment WHERE url LIKE '/web/assets/%'` → `docker restart odoo-dev-app`. **Gate the restart on `-u` exit 0**; on failure restore the dir backup and do NOT restart. When a feature branch predates main's other merges, merge to `main` **surgically** (temp worktree off `origin/main` + `git checkout <branch> -- <module>` → commit → fast-forward push) so you don't revert parallel sessions' work.
+
 ## Fusion Helpdesk — Customer Follow-up + Embedded Inbox (deployment + handoff)
 
 Two modules: **`fusion_helpdesk`** (client — runs on each client deployment, e.g. entech)
@@ -230,3 +248,41 @@ catches undefined names instantly.
   open the systray helpdesk dialog. The Mine/All toggle appears for the owner; "All" shows
   all 50 ENTECH tickets, "Mine" shows the count matching the owner's profile email.
   Tracebacks live in `/var/log/odoo/odoo-server.log` on entech (LXC 111 / pve-worker5).
+
+## Fusion Centralized Billing (`fusion_centralize_billing`) — engine + test harness
+
+Odoo (`odoo-nexa`, live DB `nexamain`) is being made the single billing brain for every
+NexaSystems app (NexaCloud, NexaDesk/Fusion-Chat, NexaMaps), **superseding Lago**. The
+module adds only the metering + integration layer (service registry, identity links,
+metric/charge catalog, aggregate-push usage engine, inbound Lago-shaped REST API at
+`/api/billing/v1/*`, outbound HMAC webhooks, dual-run reconciliation); all financial
+behaviour is native Odoo **Enterprise** (`sale_subscription` + `payment_stripe` +
+`account_accountant`). Design + rollout live in `docs/superpowers/specs/`
+(`2026-05-27-nexa-billing-centralized-design.md` = architecture;
+`2026-06-02-nexacloud-odoo-billing-cutover-design.md` = NexaCloud pilot: build → import →
+dual-run → gated flip) and `docs/superpowers/plans/`.
+
+**Testing it — NOT on local `odoo-modsdev` (community) and NEVER `-u` against live `nexamain`.**
+It needs Enterprise deps, so tests run on `odoo-nexa` in an **isolated throwaway container**
+against a **fresh** DB with the Canadian localization:
+```
+ssh odoo-nexa
+# fresh DB (inside odoo-nexa-db): dropdb --if-exists fcb_test; createdb fcb_test
+cp -a /opt/odoo/custom-addons /opt/odoo/custom-addons-staging   # edit/sync HERE, never the live module dir
+docker run --rm --network odoo_odoo-network \
+  -v /opt/odoo/custom-addons-staging:/mnt/extra-addons:ro -v /opt/odoo/enterprise-addons:/mnt/enterprise-addons:ro \
+  -v /opt/odoo/odoo.conf:/etc/odoo/odoo.conf:ro -v /opt/odoo/staging-data:/var/lib/odoo \
+  odoo-nexa:19 -c /etc/odoo/odoo.conf -d fcb_test --db_host=db --db_user=odoo \
+  --addons-path=/usr/lib/python3/dist-packages/odoo/addons,/mnt/extra-addons,/mnt/enterprise-addons \
+  --without-demo=all --test-enable --test-tags /fusion_centralize_billing \
+  -i l10n_ca,fusion_centralize_billing --stop-after-init --no-http
+```
+Iterate with `-u fusion_centralize_billing` (reuse fcb_test). Gotchas that cost hours:
+- **`l10n_ca` is required** — the ledger tests need a Canadian CoA + active CAD + 13% HST.
+- A **prod clone is the wrong base** — its existing rows collide with fixed-code test fixtures
+  (`nexacloud` service / `cpu_seconds` metric) across 5 test files.
+- odoo.conf sets `log_level=warn`, so **passing tests log nothing** — exit 0 alone does NOT
+  prove tests ran (a tag matching zero tests is also exit 0). Confirm execution with
+  `--log-handler=odoo.addons.fusion_centralize_billing.tests:INFO` (look for `Starting
+  <Class>.<method>`). The **exit code is authoritative** (1 on any failure).
+- Do **NOT** pass `--workers=0` (blanks captured stdout) or `--logfile=/dev/stdout` (errors out).

Work in Progress/fusion_quotations/__manifest__.py

@@ -28,7 +28,7 @@
         'website',
         'mail',
         'fusion_claims',
-        'fusion_authorizer_portal',
+        'fusion_portal',
     ],
     'data': [
         'security/security.xml',

docs/plans/fusion_maintenance_brainstorm.md

@@ -0,0 +1,194 @@
+# fusion_maintenance — Brainstorm & Handoff Brief
+
+> Status: **research/brainstorm only — no code, no final decisions.** Written from a
+> Claude Code *web* session that could **not** reach the private network (no Tailscale,
+> no docker daemon, Supabase KB unreachable). Resume from a **Tailscale-connected env**
+> (dev box or a host that can reach Westin production) and do the live inspection in
+> Step 0 **before** committing to the design.
+
+## Goal (user's words, paraphrased)
+Automated maintenance follow-ups for mobility/accessibility equipment we've sold, to turn
+service into **recurring revenue**. Reminder emails → client books maintenance → booking
+happens in **real time** and **lands in our calendar**. Leverage Odoo Enterprise's
+appointment system. Decide whether this lives in `fusion_repairs` or a new module — the
+result must be **seamless and production-ready**.
+
+## Decisions locked with the user (this session)
+- **Same DB**: `fusion_claims` + `fusion_repairs` run on one database → new module may depend on both.
+- **Enterprise `appointment` is available** → build real-time booking ON it (`appointment.type` /
+  `appointment.slot` / `calendar.event`), do **not** hand-roll a calendar.
+- **Public self-serve booking** → reminder email carries a token link to a no-login slot picker
+  (extend the existing `/repairs/maintenance/book/<token>` pattern). Elderly clients shouldn't log in.
+- **Target box for grounding = Westin production** (where `fusion_claims` runs day-to-day).
+
+## Key findings from repo exploration
+
+### `fusion_repairs` (v19.0.2.2.6) ALREADY has a maintenance engine — reuse it, don't fork
+- `fusion.repair.maintenance.contract`: interval, due/last-service dates, state machine.
+  Auto-spawned on SO confirm when `product.template.x_fc_maintenance_interval_months > 0`.
+- Daily reminder cron `cron_maintenance_due_reminders` → 30/7/1-day bands → branded email
+  `email_template_maintenance_due_reminder` with tokenized link `/repairs/maintenance/book/<token>`.
+- Booking controller: `controllers/portal_maintenance_booking.py` — **single date-confirm form,
+  NO slot availability, NO conflict check, NO calendar event.** ← this is the real gap.
+- Contract **roll-forward** on technician-task completion (`next_due_date += interval`).
+- `fusion.repair.service.plan.subscription`: pre-paid visit plans (recurring-revenue primitive).
+- Deps: `repair, maintenance, sale_management, stock, purchase, website, portal, fusion_tasks,
+  fusion_poynt, fusion_authorizer_portal`. ~8.3k LOC, 25+ models.
+
+### `fusion_claims` (v19.0.9.2.0) is the ideal trigger source
+- Claim container = `sale.order` (`x_fc_sale_type`: adp, odsp, wsib, insurance, march_of_dimes, …).
+- **Equipment unit** = `sale.order.line.x_fc_serial_number` + `product_id`.
+- **Equipment category** = `fusion.adp.device.code.device_type` (wheelchair, walker, hospital bed,
+  stair lift, porch lift, custom ramp, …) — matches the user's "sale groups".
+- **Schedule anchors**: `x_fc_adp_delivery_date`, `x_fc_service_start_date`; gate on `x_fc_adp_approved`.
+- Customer = `sale.order.partner_id`; prescriber = `x_fc_authorizer_id`.
+- Already depends on `calendar, fusion_tasks, ai, fusion_ringcentral`.
+
+## Proposed architecture (PENDING live verification)
+**New module `fusion_maintenance`** depending on `fusion_repairs`, `fusion_claims`, `appointment`.
+Reuses the existing contract/reminder/roll-forward engine; adds the 3 genuinely-missing pieces:
+
+1. **`fusion.maintenance.policy`** (ops-configurable, no code per category):
+   `device_type` → `interval_months`, reminder bands, `service_product_id` (priced visit),
+   `appointment_type_id`, required technician skill. Turns "stair lift = 6 mo, $X" into data.
+2. **Claims bridge** (daily cron): scan `fusion_claims` `sale.order.line` for delivered+approved
+   devices whose `device_type` matches an active policy → ensure a maintenance contract exists,
+   anchored at `delivery_date + interval`. Idempotent (key on serial / sale-line). Extend the
+   reused contract with `x_fc_source_claim_line_id`, `x_fc_device_type`, `x_fc_policy_id` so the
+   repairs path and claims path both feed **one** contract model.
+3. **Real-time booking on `appointment`**: token link → slot picker backed by `appointment.type`
+   (partner pre-resolved from token, no login). Slot pick → real `calendar.event` → hook spawns
+   `repair.order` + technician task, assigns by skill/zone, advances reminder band, rolls contract
+   forward.
+
+**Recurring revenue**: each policy carries `service_product_id` → booked visit drafts a priced
+SO/invoice; optional pre-paid annual plan via existing `service.plan.subscription`; optional
+door payment via existing `fusion_poynt`.
+
+## STEP 0 — run on Westin production FIRST (grounding before any decision)
+> Replace `APP`/`DB` with the real Westin container + database. CLAUDE.md rule #1: never code
+> from memory — read the real Enterprise `appointment` source before building the booking layer.
+
+```bash
+# RESOLVED 2026-06-02 — Westin Odoo prod migrated OFF Digital Ocean onto the on-prem Proxmox
+# cluster. Old DO IPs (152.42.146.204 / 178.128.229.92) are DEAD (:22 timeout). Live box:
+# host `odoo-westin` = 192.168.1.40 via the `supabase-prod` Tailscale jump (Windows OpenSSH
+# ProxyCommand → run `ssh odoo-westin ...` from PowerShell). App container `odoo-dev-app`
+# (odoo:19, Enterprise); DB container `odoo-dev-db`; DB `westin-v19`; user `odoo` (local-socket
+# trust inside odoo-dev-db). Enterprise addons → /mnt/enterprise-addons, custom → /mnt/extra-addons.
+#   SQL:      ssh odoo-westin 'docker exec odoo-dev-db  psql -U odoo -d westin-v19 -c "..."'
+#   FS read:  ssh odoo-westin 'docker exec odoo-dev-app sed -n 1,160p /mnt/enterprise-addons/...'
+APP=odoo-dev-app ; DB=westin-v19 ; DBC=odoo-dev-db
+
+# 1) Install matrix — confirm same-DB + Enterprise appointment present + versions
+docker exec "$APP" psql -U odoo -d "$DB" -c \
+"SELECT name,state,latest_version FROM ir_module_module \
+ WHERE name IN ('fusion_claims','fusion_repairs','fusion_maintenance','calendar','maintenance','repair') \
+    OR name LIKE 'appointment%' ORDER BY name;"
+
+# 2) Real device_type distribution (drives per-category policies)
+docker exec "$APP" psql -U odoo -d "$DB" -c \
+"SELECT device_type, count(*) FROM fusion_adp_device_code GROUP BY device_type ORDER BY 2 DESC;"
+
+# 3) Locate the Enterprise appointment source (read, don't guess the API)
+docker exec "$APP" bash -lc 'ls -d /mnt/enterprise-addons/appointment 2>/dev/null || \
+  find / -maxdepth 6 -type d -name appointment 2>/dev/null | grep -i addons | head'
+
+# 4) Appointment model surface to build booking on (adjust path from #3)
+docker exec "$APP" cat <appointment_path>/models/appointment_type.py | head -160
+docker exec "$APP" ls <appointment_path>/controllers/    # find the public booking controller
+
+# 5) How fusion_repairs maintenance contracts already look in live data
+docker exec "$APP" psql -U odoo -d "$DB" -c \
+"SELECT state, count(*) FROM fusion_repair_maintenance_contract GROUP BY state;"
+```
+
+## STEP 0 — RESULTS (ran 2026-06-02 against Westin prod `westin-v19`)
+> Grounding facts only — **no design decisions made**. These correct several assumptions above.
+
+**Connection (resolved):** host `odoo-westin` (192.168.1.40) via the `supabase-prod` Tailscale jump.
+App container `odoo-dev-app` (odoo:19, Enterprise), DB container `odoo-dev-db`, DB `westin-v19`,
+user `odoo`. Old Digital Ocean boxes are DEAD — Westin migrated on-prem.
+
+**1) Install matrix** — `appointment` **19.0.1.3 installed** (+ `appointment_account_payment`,
+`_crm`, `_hr`, `_microsoft_calendar`, `_sms`). All deps present: `calendar`, `maintenance`, `repair`,
+`sale_management`, `portal`, `website`, `resource`, `phone_validation`, `web_gantt`. `fusion_claims`
+**19.0.9.2.0 installed**. `fusion_repairs` and `fusion_maintenance` are **absent entirely** (no
+records). → a module depending on `appointment` installs cleanly; "reuse the fusion_repairs engine"
+means *deploy fusion_repairs to Westin first* (heavy) **or** own a lean contract model here. Note
+Odoo's native `maintenance` (CMMS) is installed — an under-considered third reuse option.
+
+**2) device_type** — 119 distinct values, but `fusion.adp.device.code` is the ADP billing-code
+**CATALOG** (`_order='device_type, device_code'`), so counts are catalog codes per type, **NOT units
+installed**. Top entries are seating COMPONENTS (Seat Cushion 564, Back Support 375, Headrest 193).
+The maintainable **equipment classes** ≈ wheelchairs (manual + power tilt), power bases, power
+scooters, wheeled walkers / walking frames, paediatric standing frames, specialty strollers (~6-8
+clean categories). → `device_type` can't be a 1:1 policy key (119 values, mostly parts); needs a
+grouping/whitelist. **Real install base sized on `sale.order.line`** (`x_fc_adp_device_type` [stored compute from
+product's `x_fc_adp_device_code_id.device_type`], `x_fc_serial_number`, `x_fc_adp_approved`; delivery
+dates `x_fc_adp_delivery_date` / `x_fc_service_start_date`) — **see the Install-base sizing block below.**
+
+**3) + 4) Enterprise appointment source** — `/mnt/enterprise-addons/appointment`. The no-login token
+slot-picker is **mostly NATIVE — don't hand-roll it**: public booking (`auth="public"`), invite
+tokens (`appointment.invite`, `/appointment/<id>?…invite_token`), live availability
+(`/appointment/<id>/update_available_slots`, jsonrpc/public), slot submit → real `calendar.event`
+(`/appointment/<id>/submit`), auto/manual staff+resource assignment, capacity, booked/cancelled mail
+templates. Model `appointment.type`; controller `controllers/appointment.py`. → the module mainly
+needs to: seed an `appointment.type` per category, drop a partner-bound invite link into the reminder
+email, and hook `calendar.event` create → spawn the service task + advance the contract.
+`appointment_account_payment` is installed → native pay-to-book is on the table for the revenue mechanic.
+
+**5) Maintenance-contract state** — `relation "fusion_repair_maintenance_contract" does not exist`
+→ confirms the fusion_repairs maintenance engine is **not** on Westin.
+
+**Headline correction:** Westin's ADP data has **zero** stair lifts / porch lifts / ramps / hospital
+beds — those belong to the fusion_repairs / EN-Tech (mobility) domain. Westin's recurring-revenue
+play is **wheelchairs / power bases / scooters / walkers / seating**. Open questions updated below.
+
+**Install-base sizing (ran 2026-06-02 — the REAL units, complementing #2's catalog counts).** Big tell:
+serial numbers are captured **~only on actual equipment** (every part/option/mod device_type shows 0
+serials), so `x_fc_serial_number` is already a de-facto "trackable unit" marker — convenient, because the
+bridge's idempotency key is the serial.
+
+- **Addressable base ≈ 138 serial-tracked units across ~136 customers** (all funders). By equipment
+  family (serial-tracked / of which delivered): **Walkers & walking frames 68 (55)**, **Wheelchairs 45
+  (40)**, **Power bases 7 (6)**, **Scooters 4 (3)**, plus **14 units with no ADP device_type** (likely
+  private-pay) and 1 misc.
+- **Funder split** (serial-tracked): adp 109, direct_private 13, adp_odsp 10, march_of_dimes 7;
+  wsib / insurance / standalone-odsp / rental / regular = **0 serials**. → an ADP-only gate
+  (`x_fc_adp_approved`) captures ~110 and **misses ~28** real units. The bridge should likely key on
+  **serial (funder-agnostic)**, not approval.
+- **Two data gaps the design must absorb:** (a) the 14 serial units with no ADP device_type can't be
+  classified by a device_type→policy map → need a product-level or manual category override; (b) non-ADP
+  units have no `x_fc_adp_delivery_date` → the contract anchor (`delivery_date + interval`) needs a
+  fallback (invoice/order date).
+- Deliveries span **2022-10 → 2026-05** (active program) — history to anchor intervals + a live pipeline.
+- Top serial-tracked device_types: Adult Wheeled Walker Type 3 (47), Adult Manual Dynamic Tilt Type 5
+  Wheelchair (23), Adult Lightweight Performance Type 3 (11), Adult Lightweight Standard Type 1 (10),
+  Adult Wheeled Walker Type 2 (9), Adult Power Base Type 3 (5), Power Scooter (3). (1 line ≈ 1 unit;
+  equipment device_types are 1 base line each.)
+
+## Open questions to resolve with the user (in the connected session)
+- **MVP cut**: which categories first? Sizing surfaces a real tension: **by volume** it's walkers (68) +
+  wheelchairs (45) ≈ 82% of the base, but rollators/walkers are mechanically low-service; **by
+  service-revenue-per-unit** the targets are the powered units (power bases 7 + scooters 4 + power
+  wheelchairs) — high maintenance value but only ~11–15 units today. Volume vs. margin — or phase it
+  (powered units first to prove the booking loop, then walkers/manual chairs for reach)?
+- **Revenue mechanic**: auto-draft a priced SO/invoice per booking, vs. pre-paid annual plan, vs.
+  pay-at-door via Poynt — which is the default?
+- **Technician assignment**: auto-assign by skill+zone at booking time, or leave dispatch manual
+  (fusion_tasks) and only reserve the calendar slot?
+- **Booking-portal strategy**: Step 0 shows Enterprise `appointment` already ships public,
+  token-based real-time booking (`appointment.invite` + `/appointment/<id>/...`, `auth="public"`).
+  Ride on that (generate an invite per reminder, partner pre-bound, no login) vs. a custom
+  `/maintenance/book/<token>` route? (The `/repairs/...` route is moot — fusion_repairs isn't on Westin.)
+
+## Applicable CLAUDE.md rules (don't relearn the hard way)
+- Rule #1: read reference files from the running instance before coding (esp. the appointment source).
+- Odoo 19: `res.users.group_ids` (not `groups_id`); `ir.cron` has no `numbercall`; declarative
+  `models.Constraint`/`models.Index`; HTTP routes `type="jsonrpc"`; OWL uses standalone `rpc()`.
+- No `sale.subscription` model exists — a subscription is a `sale.order` with `is_subscription=True`.
+- New fields use `x_fc_` prefix; Canadian English; `$` Monetary + `currency_id`.
+- Route attachment opens through `fusion_pdf_preview` (`att.action_fusion_preview(...)`).
+- Tests need `--http-port=0 --gevent-port=0`. Westin prod is Enterprise; local dev is Community
+  (so the appointment-dependent module can't be installed/tested on `odoo-modsdev-app`).

docs/superpowers/EXECUTE-technician-service-booking.md

@@ -0,0 +1,127 @@
+# KICKOFF BRIEF — Implement "Technician Service Booking & Auto-Quote" (hands-off)
+
+You are a fresh Claude Code session. **Implement this feature end-to-end, autonomously, from the
+plans below.** The design is already locked through brainstorming — **do NOT re-design or
+re-brainstorm.** Build it.
+
+---
+
+## 1. Mission
+
+Replace the raw `fusion.technician.task` booking modal with a polished **OWL "Book a Service"
+wizard** that: captures the client (incl. brand-new clients inline), books the technician task,
+prices the call-out from an **editable rate table**, and **auto-creates a draft repair Sale Order**
+— with correct, consistent timezone handling. Works in dark + light.
+
+## 2. Read these first, in order
+
+1. `K:\Github\Odoo-Modules\CLAUDE.md` (repo Odoo-19 rules) + the global `K:\Github\CLAUDE.md`.
+2. Spec: `docs/superpowers/specs/2026-06-03-technician-service-booking-design.md`
+3. **Plan 1** (do first): `docs/superpowers/plans/2026-06-03-service-rates-foundation-plan.md`
+4. **Plan 2** (do second): `docs/superpowers/plans/2026-06-03-service-booking-wizard-plan.md`
+5. UI source of truth (port its markup/CSS): `docs/superpowers/mockups/technician-booking-wizard.html`
+
+The plans are bite-sized (TDD, exact files, full code). They are the authority — follow them
+task-by-task. The spec/mockup are context.
+
+## 3. Method
+
+- Use the **`superpowers:subagent-driven-development`** skill (the plan headers require it). One
+  task at a time; write test → implement → verify → **commit per task** with the messages in the plan.
+- **Order: Plan 1 fully, then Plan 2** (Plan 2 consumes Plan 1's `fusion.service.rate`).
+- Before writing any model/view/OWL code, obey repo rule #1: **read the real reference from Docker
+  first** (`docker exec odoo-modsdev-app cat …` or, for the Enterprise classes, read the on-disk
+  source) — never code Odoo APIs from memory. The plans flag the specific signatures to confirm
+  (`_get_local_tz`, `_compute_datetimes`, `_calculate_travel_time`, real task field names like
+  `in_store`/`client_name`/`address_lat`, the `crm.tag` vs `sale.order` tag model).
+
+## 4. Branch
+
+```bash
+git -C K:\Github\Odoo-Modules checkout main
+git -C K:\Github\Odoo-Modules checkout -b claude/technician-service-booking
+```
+Create it **off `main`** — NOT off `claude/fusion-schedule-audit-fixes` (that branch has unrelated
+calendar-sync fixes). The spec/plans/mockup are already on disk under `docs/superpowers/`; keep them.
+
+## 5. Hard constraints (do not violate)
+
+- **Odoo 19 idioms** (from CLAUDE.md): declarative `models.Constraint` / `models.Index` (never
+  `_sql_constraints`); `group_ids` not `groups_id`; HTTP routes `type="jsonrpc"`; backend OWL uses
+  **standalone `rpc()`** from `@web/core/network/rpc` (not `useService("rpc")`), client action
+  `static props = ["*"]`; **dark mode** = branch on `$o-webclient-color-scheme` at SCSS compile
+  time and register the SCSS in **both** `web.assets_backend` **and** `web.assets_web_dark`; new
+  fields use the **`x_fc_`** prefix; **Canadian English**; any `message_post(body=…)` HTML wrapped
+  in `Markup()`.
+- **Enterprise-only:** `fusion_claims` pulls `ai` → it **cannot install on local Community
+  (`odoo-modsdev`)**. Do **not** attempt `-d modsdev -u fusion_claims`. (`fusion_tasks` alone may
+  install locally — the tz-fix test in Plan 2 Task 1 can be tried there; everything else is clone-only.)
+- **The design is LOCKED** — implement exactly §6 below; don't add scope or re-open decisions.
+
+## 6. Locked design (build exactly this)
+
+- **Time:** 12-hour **AM/PM** entry on the wizard (custom control — Odoo's native widget is 24h).
+  Fix the `fusion_tasks` tz bug: the `_inverse_datetime_*` methods must use `self._get_local_tz()`
+  (same resolver as `_compute_datetimes`), not `self.env.user.tz`.
+- **Client:** inline **new-client** (name / phone / email / address) on the page; **no forced SO**
+  (relax `fusion_claims` `_check_order_link` to a no-op); find-or-create the `res.partner` on save
+  (match by email then phone).
+- **View:** a **full OWL client action** wizard (complete design freedom), ported from the mockup,
+  dark + light.
+- **Pricing → SO:** pick service type → call-out fee → **auto draft repair `sale.order`** with the
+  call-out line **+ auto per-km line** for Rush/After-Hours (qty = `travel_distance_km × 2`,
+  $0.70/km). On-screen **estimate is UI-only** (labour/parts added later as actuals). Tag the SO
+  (`x_fc_is_service_repair` + a "Service Repair" tag).
+- **Rates are an editable table** — `fusion.service.rate` with a **Service Rates** menu. The card
+  only **seeds** it (`noupdate=1`). Pricing is read from this table, never hardcoded.
+- **Rate card seed:** Standard call $95 / Rush $120 / After-Hours $140; Lift & Elevating $160 /
+  **Rush $185** / **After-Hours $205** (the $185/$205 are *suggested* fills — seed them but they're
+  confirm-pending; leave a code comment). Labour: on-site $85, in-shop $75 (reuse existing `LABOR`
+  product), lift $110. Per-km $0.70 ×2-way. Delivery/setup: local $35 / outside $60 / rush $60+km /
+  lift-chair $120 / bed $120 / stairlift $300 / removal $300. **In-shop = no call-out, labour @ $75.**
+- **Module split:** the tz fix goes in **`fusion_tasks`**; everything else (rate model, products,
+  menu, resolver, SO builder, `action_book_from_wizard`, controller, OWL wizard, SCSS, entry point)
+  goes in **`fusion_claims`**.
+
+## 7. Verification (you probably can't reach the Enterprise clone — handle both cases)
+
+- **Always do (no Odoo needed):** after each Python file, run `python -m py_compile <file>` and
+  `python -m pyflakes <file>` (or `docker exec odoo-modsdev-app python3 -m pyflakes …`). **Fix every
+  warning you introduce.** This is your local gate.
+- **Full tests + smoke require a Westin Enterprise clone.** A one-command harness already exists:
+  `scripts/verify_service_booking.sh` (runs on the `odoo-westin` host: clones the DB, the
+  orphaned-tax-FK cleanup, stages the branch, `-u` + tests, PASS/FAIL; `--deploy` ships on green).
+  - If you have access to `odoo-westin`: push the branch, then run that script (verify-only first).
+  - If you do **not**: finish all code, ensure `py_compile`/`pyflakes` are clean, **commit the
+    branch task-by-task**, and clearly report **"clone-verification pending — run
+    `scripts/verify_service_booking.sh` on odoo-westin."** Do not fake a green test.
+- **Never deploy to prod yourself.** Leave `--deploy` to the human.
+
+## 8. Definition of done
+
+- [ ] Branch `claude/technician-service-booking` off `main`.
+- [ ] Plan 1 + Plan 2 implemented, **committed task-by-task** with the plans' commit messages.
+- [ ] `py_compile` + `pyflakes` clean on every touched `.py`.
+- [ ] OWL wizard renders the mockup layout in **both** light and dark bundles.
+- [ ] Either **clone-verified GREEN** via the script, **or** branch committed + verification
+      explicitly flagged pending (with the exact command to run).
+- [ ] A short final report: what was built, files changed, how to verify + deploy (`scripts/verify_service_booking.sh`),
+      and the one open business item (confirm Lift Rush/After-Hours $185/$205).
+
+## 9. Don't
+
+- Don't test on `odoo-modsdev` (Community — `fusion_claims` won't install).
+- Don't re-brainstorm or change the design in §6.
+- Don't hardcode prices (they live in `fusion.service.rate`).
+- Don't deploy to prod or run `--deploy` — hand that to the human.
+- Don't change the suggested $185/$205 silently — keep them, flag them confirm-pending.
+
+---
+
+### Optional: launch it headless
+
+```bash
+# from the repo root, on a machine with this checkout:
+claude -p "$(cat docs/superpowers/EXECUTE-technician-service-booking.md)" --permission-mode acceptEdits
+```
+…or just paste this file into a fresh Claude Code session and say "go".

docs/superpowers/mockups/technician-booking-wizard.html

@@ -0,0 +1,325 @@
+<!DOCTYPE html>
+<html lang="en" data-theme="light">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Book a Service — Mockup v2</title>
+<style>
+  :root, [data-theme="light"] {
+    --page:#eef0f3; --panel:#e6e9ed; --card:#ffffff; --border:#d8dadd;
+    --text:#1f2430; --muted:#6b7280; --faint:#9ca3af;
+    --field:#ffffff; --field-border:#cfd3d8; --field-focus:#3a8fb7;
+    --chip:#f1f4f7; --shadow:0 1px 3px rgba(16,24,40,.08),0 1px 2px rgba(16,24,40,.06);
+    --accent:#2e7aad; --accent-soft:#e8f2f8; --ok:#16a34a; --star:#f5b301; --money:#0f7d4e; --money-soft:#e7f6ee;
+  }
+  [data-theme="dark"] {
+    --page:#14161b; --panel:#1b1e24; --card:#22262d; --border:#343a42;
+    --text:#e7eaef; --muted:#9aa3af; --faint:#6b7480;
+    --field:#1a1d23; --field-border:#3a4049; --field-focus:#4aa3cf;
+    --chip:#2a2f37; --shadow:0 1px 3px rgba(0,0,0,.4);
+    --accent:#3a8fb7; --accent-soft:#19303d; --ok:#22c55e; --star:#f5b301; --money:#34d27f; --money-soft:#15281f;
+  }
+  * { box-sizing:border-box; }
+  body { margin:0; background:var(--page); color:var(--text);
+    font-family:'Inter','Helvetica Neue',Helvetica,Arial,system-ui,sans-serif; font-size:14px; }
+  .wrap { max-width:1000px; margin:24px auto; padding:0 18px; }
+  .dialog { background:var(--panel); border:1px solid var(--border); border-radius:16px;
+    box-shadow:0 12px 40px rgba(16,24,40,.16); overflow:hidden; }
+  .topbar { background:linear-gradient(135deg,#5ba848 0%,#3a8fb7 60%,#2e7aad 100%);
+    padding:17px 24px; display:flex; align-items:center; justify-content:space-between; color:#fff; }
+  .topbar h1 { font-size:19px; font-weight:700; margin:0; }
+  .topbar .sub { font-size:12.5px; opacity:.9; margin-top:2px; }
+  .theme-btn { background:rgba(255,255,255,.18); border:1px solid rgba(255,255,255,.35); color:#fff;
+    border-radius:20px; padding:6px 14px; font-size:12.5px; cursor:pointer; font-weight:600; }
+  .stepper { display:flex; gap:6px; padding:11px 24px; background:var(--panel); border-bottom:1px solid var(--border); flex-wrap:wrap; }
+  .step { font-size:11.5px; font-weight:600; color:var(--faint); padding:5px 13px; border-radius:20px; background:var(--chip); }
+  .step.active { color:#fff; background:linear-gradient(135deg,#3a8fb7,#2e7aad); }
+  .step.draft { margin-left:auto; color:var(--money); background:var(--money-soft); }
+
+  .body { padding:20px 24px 6px; }
+  .grid { display:grid; grid-template-columns:1fr 1fr; gap:16px; }
+  @media (max-width:780px){ .grid { grid-template-columns:1fr; } }
+  .card { background:var(--card); border:1px solid var(--border); border-radius:13px; padding:16px 17px; box-shadow:var(--shadow); }
+  .card.span2 { grid-column:1 / -1; }
+  .card h3 { margin:0 0 13px; font-size:11.5px; font-weight:700; letter-spacing:.7px; text-transform:uppercase;
+    color:var(--muted); display:flex; align-items:center; gap:7px; }
+  .card h3 .dot { width:7px; height:7px; border-radius:50%; background:linear-gradient(135deg,#5ba848,#2e7aad); }
+  .card h3 .tag { margin-left:auto; font-size:10px; font-weight:700; color:var(--money); background:var(--money-soft);
+    padding:2px 8px; border-radius:10px; letter-spacing:.3px; }
+
+  label.fl { display:block; font-size:12px; font-weight:600; color:var(--muted); margin:0 0 5px; }
+  .row { margin-bottom:12px; } .row:last-child { margin-bottom:0; }
+  .two { display:grid; grid-template-columns:1fr 1fr; gap:11px; }
+  .three { display:grid; grid-template-columns:1fr 1fr 1fr; gap:9px; }
+  input.f, select.f, textarea.f { width:100%; background:var(--field); color:var(--text); border:1px solid var(--field-border);
+    border-radius:9px; padding:9px 11px; font-size:13.5px; font-family:inherit; outline:none; transition:border .15s,box-shadow .15s; }
+  input.f:focus, select.f:focus, textarea.f:focus { border-color:var(--field-focus);
+    box-shadow:0 0 0 3px color-mix(in srgb, var(--field-focus) 22%, transparent); }
+  textarea.f { resize:vertical; min-height:56px; }
+  .hint { font-size:11px; color:var(--faint); margin-top:5px; }
+  .with-icon { position:relative; } .with-icon .pin { position:absolute; right:10px; top:50%; transform:translateY(-50%); color:#5ba848; font-size:16px; }
+
+  .seg { display:inline-flex; background:var(--chip); border:1px solid var(--border); border-radius:9px; padding:3px; gap:3px; }
+  .seg button { border:none; background:transparent; color:var(--muted); font-weight:600; font-size:12.5px; padding:6px 14px;
+    border-radius:7px; cursor:pointer; font-family:inherit; }
+  .seg button.on { background:var(--card); color:var(--accent); box-shadow:var(--shadow); }
+  .seg.full { display:flex; } .seg.full button { flex:1; }
+
+  .timepick { display:inline-flex; align-items:stretch; gap:7px; }
+  .timepick select.f { width:auto; padding-right:24px; }
+  .ampm { display:inline-flex; background:var(--chip); border:1px solid var(--border); border-radius:9px; padding:3px; }
+  .ampm button { border:none; background:transparent; color:var(--muted); font-weight:700; font-size:12px; padding:6px 12px; border-radius:7px; cursor:pointer; }
+  .ampm button.on { background:var(--accent); color:#fff; }
+  .endtime { font-size:13px; color:var(--muted); margin-top:7px; } .endtime b { color:var(--text); }
+  .avail { display:inline-flex; align-items:center; gap:6px; font-size:11.5px; font-weight:600; color:var(--ok);
+    background:color-mix(in srgb,var(--ok) 14%,transparent); padding:3px 9px; border-radius:20px; margin-top:6px; }
+
+  .opt { display:flex; align-items:center; justify-content:space-between; padding:9px 0; border-bottom:1px solid var(--border); }
+  .opt:last-child { border-bottom:none; }
+  .opt .lab { font-size:13.5px; font-weight:500; } .opt .lab small { display:block; color:var(--faint); font-weight:400; font-size:11.5px; }
+  .sw { width:42px; height:24px; border-radius:20px; background:var(--field-border); position:relative; cursor:pointer; transition:background .15s; flex-shrink:0; }
+  .sw::after { content:''; position:absolute; width:18px; height:18px; border-radius:50%; background:#fff; top:3px; left:3px; transition:left .15s; box-shadow:0 1px 2px rgba(0,0,0,.3); }
+  .sw.on { background:var(--ok); } .sw.on::after { left:21px; }
+
+  /* fee readout inside Service & Pricing */
+  .feeline { display:flex; align-items:center; justify-content:space-between; background:var(--money-soft);
+    border:1px solid color-mix(in srgb,var(--money) 35%,transparent); border-radius:10px; padding:11px 14px; margin-top:4px; }
+  .feeline .lbl { font-size:12.5px; font-weight:600; color:var(--text); }
+  .feeline .lbl small { display:block; color:var(--faint); font-weight:400; font-size:11px; }
+  .feeline .amt { font-size:20px; font-weight:800; color:var(--money); }
+
+  /* ESTIMATE strip */
+  .estimate { grid-column:1/-1; background:var(--money-soft); border:1px solid color-mix(in srgb,var(--money) 40%,transparent);
+    border-left:5px solid var(--money); border-radius:13px; padding:15px 18px; display:flex; align-items:center; gap:20px; flex-wrap:wrap; }
+  .estimate .breakdown { display:flex; gap:18px; flex-wrap:wrap; flex:1; }
+  .estimate .bk { } .estimate .bk .k { font-size:10.5px; text-transform:uppercase; letter-spacing:.5px; color:var(--faint); }
+  .estimate .bk .v { font-size:15px; font-weight:700; margin-top:1px; }
+  .estimate .total { text-align:right; }
+  .estimate .total .k { font-size:11px; text-transform:uppercase; letter-spacing:.5px; color:var(--money); font-weight:700; }
+  .estimate .total .v { font-size:27px; font-weight:800; color:var(--money); line-height:1; }
+  .estimate .total .note { font-size:11px; color:var(--faint); margin-top:3px; }
+
+  .foot { display:flex; align-items:center; justify-content:flex-end; gap:11px; padding:16px 24px; background:var(--panel); border-top:1px solid var(--border); }
+  .foot .spacer { margin-right:auto; font-size:12px; color:var(--faint); }
+  .btn { border:none; border-radius:10px; padding:11px 18px; font-size:13.5px; font-weight:600; cursor:pointer; font-family:inherit; }
+  .btn.ghost { background:transparent; color:var(--muted); border:1px solid var(--border); }
+  .btn.primary { color:#fff; background:linear-gradient(135deg,#5ba848,#2e7aad); box-shadow:0 3px 10px color-mix(in srgb,#2e7aad 40%,transparent); }
+  .hide { display:none !important; }
+  .note { max-width:1000px; margin:14px auto 40px; padding:0 18px; color:var(--muted); font-size:12.5px; }
+  .note code { background:var(--chip); padding:1px 6px; border-radius:5px; }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <div class="dialog">
+    <div class="topbar">
+      <div><h1>Book a Service</h1><div class="sub">Repair · delivery · pickup — captures the job and creates the priced repair order</div></div>
+      <button class="theme-btn" onclick="toggleTheme()">◐ Light / Dark</button>
+    </div>
+    <div class="stepper">
+      <span class="step active">Scheduled</span><span class="step">En Route</span>
+      <span class="step">In Progress</span><span class="step">Completed</span>
+      <span class="step draft">● Draft repair SO will be created</span>
+    </div>
+
+    <div class="body">
+      <div class="grid">
+        <!-- CUSTOMER -->
+        <div class="card">
+          <h3><span class="dot"></span>Customer</h3>
+          <div class="row">
+            <div class="seg full">
+              <button class="on" id="segExisting" onclick="custMode('existing')">Existing customer</button>
+              <button id="segNew" onclick="custMode('new')">New client</button>
+            </div>
+          </div>
+          <div id="custExisting">
+            <div class="row">
+              <label class="fl">Search by phone, name or SO</label>
+              <input class="f" placeholder="e.g. (416) 555-0142 …" value="(416) 555-0142 — Margaret Chen">
+              <div class="hint">Inbound call? Type the phone number — we match the contact &amp; their history.</div>
+            </div>
+          </div>
+          <div id="custNew" class="hide">
+            <div class="row two">
+              <div><label class="fl">Client name *</label><input class="f" placeholder="Full name"></div>
+              <div><label class="fl">Phone *</label><input class="f" placeholder="(416) 555-…"></div>
+            </div>
+            <div class="row"><label class="fl">Email</label><input class="f" type="email" placeholder="client@email.com"></div>
+            <div class="row"><label class="fl">Address</label>
+              <div class="with-icon"><input class="f" placeholder="Start typing an address…"><span class="pin">📍</span></div>
+            </div>
+            <div class="row three">
+              <div><label class="fl">Unit</label><input class="f" placeholder="#"></div>
+              <div><label class="fl">Buzz</label><input class="f" placeholder="—"></div>
+              <div><label class="fl">City</label><input class="f" placeholder="City"></div>
+            </div>
+            <div class="hint">Contact is created &amp; linked on save — all from this page.</div>
+          </div>
+        </div>
+
+        <!-- SERVICE & PRICING -->
+        <div class="card">
+          <h3><span class="dot"></span>Service &amp; Pricing<span class="tag">$ REVENUE</span></h3>
+          <div class="row two">
+            <div>
+              <label class="fl">Device being serviced</label>
+              <select class="f" id="device" onchange="onDevice()">
+                <option value="standard">Mobility Scooter</option>
+                <option value="standard">Powerchair</option>
+                <option value="standard">Wheelchair</option>
+                <option value="lift">Stairlift</option>
+                <option value="lift">Patient / Ceiling Lift</option>
+                <option value="standard">Lift Chair</option>
+                <option value="standard">Hospital Bed</option>
+                <option value="standard">Other</option>
+              </select>
+            </div>
+            <div>
+              <label class="fl">Issue / symptom</label>
+              <input class="f" placeholder="e.g. won't power on">
+            </div>
+          </div>
+          <div class="row" id="callTypeRow">
+            <label class="fl">Service call type</label>
+            <select class="f" id="callType" onchange="recalc()">
+              <option data-fee="95"  data-km="0">Standard Service Call — $95 (incl. 30 min labour)</option>
+              <option data-fee="160" data-km="0">Lift &amp; Elevating Service Call — $160 (incl. 30 min)</option>
+              <option data-fee="120" data-km="1">Rush Service Call — $120 + $0.70/km ×2-way</option>
+              <option data-fee="140" data-km="1">After-Hours Service Call — $140 + $0.70/km ×2-way</option>
+            </select>
+            <div class="hint">Auto-suggested from the device — change if needed.</div>
+          </div>
+          <div class="feeline" id="feeBox">
+            <div class="lbl">Call-out fee<small id="feeSub">Standard · includes 30 min labour</small></div>
+            <div class="amt" id="feeAmt">$95</div>
+          </div>
+          <div class="hint" id="inshopNote" style="display:none;">In-shop job — no call-out fee; labour billed at $75/hr.</div>
+        </div>
+
+        <!-- SCHEDULE -->
+        <div class="card">
+          <h3><span class="dot"></span>Schedule</h3>
+          <div class="row two">
+            <div><label class="fl">Date</label><input class="f" type="date" value="2026-06-03"></div>
+            <div><label class="fl">Duration</label>
+              <select class="f" id="dur" onchange="recalc();endTime()">
+                <option value="0.5">30 min</option><option value="1" selected>1 hour</option>
+                <option value="1.5">1.5 hours</option><option value="2">2 hours</option><option value="3">3 hours</option>
+              </select></div>
+          </div>
+          <div class="row">
+            <label class="fl">Start time</label>
+            <div class="timepick">
+              <select class="f" id="hh" onchange="endTime()"><option>9</option><option>10</option><option>11</option><option>12</option><option>1</option><option>2</option><option>3</option><option>4</option></select>
+              <select class="f" id="mm" onchange="endTime()"><option>:00</option><option>:15</option><option>:30</option><option>:45</option></select>
+              <div class="ampm"><button class="on" onclick="ampm(this)">AM</button><button onclick="ampm(this)">PM</button></div>
+            </div>
+            <div class="endtime">Ends at <b id="endlbl">10:00 AM</b> · your local time</div>
+          </div>
+          <div class="row">
+            <label class="fl">Technician</label>
+            <select class="f"><option>— Choose —</option><option selected>Dave Wilson</option><option>Priya Anand</option></select>
+            <span class="avail">● 3 open slots before 5:00 PM</span>
+          </div>
+        </div>
+
+        <!-- LOCATION -->
+        <div class="card">
+          <h3><span class="dot"></span>Location</h3>
+          <div class="opt" style="border:none; padding-top:0;">
+            <div class="lab">In-shop job<small>At the store — no call-out, labour @ $75/hr</small></div>
+            <div class="sw" id="inshopSw" onclick="toggleShop(this)"></div>
+          </div>
+          <div id="addrBlock">
+            <div class="row"><label class="fl">Job address</label>
+              <div class="with-icon"><input class="f" placeholder="Auto-fills from customer…" value="88 Bloor St E, Toronto"><span class="pin">📍</span></div>
+            </div>
+            <div class="row two">
+              <div><label class="fl">Unit / Suite</label><input class="f" placeholder="#"></div>
+              <div><label class="fl">Buzz code</label><input class="f" placeholder="—"></div>
+            </div>
+          </div>
+        </div>
+
+        <!-- JOB DETAILS -->
+        <div class="card span2">
+          <h3><span class="dot"></span>Job details</h3>
+          <div class="two">
+            <div class="row"><label class="fl">Work description</label><textarea class="f" placeholder="Symptom, what to check, history…"></textarea></div>
+            <div class="row"><label class="fl">Parts / materials to bring</label><textarea class="f" placeholder="Batteries, controller, casters…"></textarea></div>
+          </div>
+          <div class="opt"><div class="lab">Under manufacturer warranty<small>Parts not billed when covered</small></div><div class="sw" onclick="sw(this)"></div></div>
+          <div class="opt"><div class="lab">POD required<small>Capture proof of delivery on completion</small></div><div class="sw" onclick="sw(this)"></div></div>
+          <div class="opt"><div class="lab">Send client confirmation (email/SMS)<small>Booked · en-route · completed</small></div><div class="sw on" onclick="sw(this)"></div></div>
+          <div class="opt"><div class="lab">Request Google review after completion</div><div class="sw on" onclick="sw(this)"></div></div>
+        </div>
+
+        <!-- ESTIMATE -->
+        <div class="estimate">
+          <div class="breakdown">
+            <div class="bk"><div class="k">Call-out</div><div class="v" id="eCall">$95</div></div>
+            <div class="bk"><div class="k">Est. labour</div><div class="v" id="eLab">$85 · 1h</div></div>
+            <div class="bk" id="eKmBox" style="display:none;"><div class="k">Travel ($0.70/km ×2)</div><div class="v" id="eKm">$18</div></div>
+          </div>
+          <div class="total"><div class="k">Estimated total</div><div class="v" id="eTotal">$180</div>
+            <div class="note">+ parts as used · pre-tax · a draft SO is created</div></div>
+        </div>
+      </div>
+    </div>
+
+    <div class="foot">
+      <span class="spacer">Local time · America/Toronto · 13 km away</span>
+      <button class="btn ghost">Cancel</button>
+      <button class="btn primary">Book &amp; Create SO</button>
+    </div>
+  </div>
+</div>
+
+<div class="note">
+  Mockup v2 — demo-wired (theme, customer mode, device→call-type, in-shop, AM/PM, switches, live estimate).
+  Real build = an OWL client action; <b>Book &amp; Create SO</b> calls one server method that find-or-creates the
+  contact, creates the <code>fusion.technician.task</code> + a draft <code>sale.order</code> with the call-out line
+  (+ auto per-km for rush/after-hours, from the computed distance). Rate-card items are seeded as service products.
+  Toggle <b>◐</b> top-right for dark/light.
+</div>
+
+<script>
+  const DIST_2WAY = 26, KM_RATE = 0.70; // demo: 13km away, 2-way
+  let inshop=false, ap='AM';
+  function toggleTheme(){ const h=document.documentElement; h.dataset.theme=h.dataset.theme==='dark'?'light':'dark'; }
+  function custMode(m){ const ex=m==='existing';
+    segExisting.classList.toggle('on',ex); segNew.classList.toggle('on',!ex);
+    custExisting.classList.toggle('hide',!ex); custNew.classList.toggle('hide',ex); }
+  function onDevice(){ const cat=device.value; callType.selectedIndex = cat==='lift'?1:0; recalc(); }
+  function ampm(el){ [...el.parentNode.children].forEach(b=>b.classList.remove('on')); el.classList.add('on'); ap=el.textContent; endTime(); }
+  function sw(el){ el.classList.toggle('on'); }
+  function toggleShop(el){ el.classList.toggle('on'); inshop=el.classList.contains('on');
+    addrBlock.classList.toggle('hide',inshop); callTypeRow.classList.toggle('hide',inshop);
+    feeBox.classList.toggle('hide',inshop); inshopNote.style.display=inshop?'block':'none'; recalc(); }
+  function endTime(){ const h=+hh.value, m=+mm.value.replace(':',''), dur=+document.getElementById('dur').value;
+    let mins=((h%12)+(ap==='PM'?12:0))*60+m+dur*60;
+    let eh=Math.floor(mins/60)%24, em=mins%60; endlbl.textContent=(eh%12||12)+':'+String(em).padStart(2,'0')+' '+(eh>=12?'PM':'AM'); }
+  function money(n){ return '$'+n.toFixed(n%1?2:0); }
+  function recalc(){
+    const dur=+document.getElementById('dur').value;
+    const labRate = inshop?75:85;
+    let callout=0, km=0, sub='', kmFlag=false;
+    if(!inshop){ const o=callType.options[callType.selectedIndex];
+      callout=+o.dataset.fee; kmFlag=o.dataset.km==='1';
+      feeAmt.textContent=money(callout); feeSub.textContent=o.text.split('—')[0].trim()+(kmFlag?' · + travel':' · incl. 30 min labour');
+      if(kmFlag) km=DIST_2WAY*KM_RATE;
+    }
+    // labour: first 30 min included on standard/lift call (not rush/afterhours which are time-based but keep simple)
+    const incl = (!inshop && !kmFlag) ? 0.5 : 0;
+    const billLabHrs = Math.max(0, dur - incl);
+    const lab = billLabHrs*labRate;
+    eCall.textContent = inshop?'—':money(callout);
+    eLab.textContent = money(lab)+' · '+billLabHrs+'h @ $'+labRate;
+    eKmBox.style.display = kmFlag?'block':'none'; eKm.textContent=money(km);
+    eTotal.textContent = money(callout+lab+km);
+  }
+  endTime(); recalc();
+</script>
+</body>
+</html>

docs/superpowers/plans/2026-05-31-fusion-clock-statutory-break.md

@@ -0,0 +1,864 @@
+# Fusion Clock — Province-Aware Automatic Unpaid Break Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Make the unpaid meal break deduct automatically from worked hours on every path (portal, kiosk, NFC, cron, **and manual backend entry**), using a 2-tier per-province rule table (Ontario: 5h→30min, 10h→+30min), with no duplicated logic.
+
+**Architecture:** A new `fusion.clock.break.rule` table holds the per-province thresholds. `hr.employee._get_fclk_break_rule()` resolves an employee's rule from its company's province (global default fallback). `hr.attendance.x_fclk_break_minutes` becomes a single stored **computed** field — `statutory_break(worked_hours) + Σ penalty_minutes` — that recomputes on every save and replaces the four scattered write sites (controller `_apply_break_deduction` ×3 call sites, the auto-clock-out cron, and the penalty code's manual write).
+
+**Tech Stack:** Odoo 19, Python, QWeb/XML views, Odoo test framework (`TransactionCase`).
+
+**Spec:** `docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md`
+
+---
+
+## Dev environment & sync (READ FIRST — applies to every task)
+
+**Two working copies (per project memory `feedback_dual_path_fusion_clock`):**
+- **Git/source tree (edit + commit here):** `K:\Github\Odoo-Modules\fusion_clock`
+- **Docker/active tree (what the container loads):** `K:\Github\odoo-modsdev\addons\fusion_clock`
+
+Edit in the **git tree**, then **mirror to the Docker tree before every test run**:
+
+```powershell
+robocopy "K:\Github\Odoo-Modules\fusion_clock" "K:\Github\odoo-modsdev\addons\fusion_clock" /MIR /XD ".git" "__pycache__" /XF "*.pyc" /NFL /NDL /NJH /NJS; if ($LASTEXITCODE -lt 8) { "sync ok" } else { "sync FAILED" }
+```
+(robocopy exit codes < 8 = success.) **Preflight:** if `K:\Github\odoo-modsdev\addons\fusion_clock` does not exist, the dual-tree setup changed — STOP and confirm the active copy with the user before continuing.
+
+**Container/DB:** `odoo-modsdev-app` / db `modsdev` (per memory `reference_docker_env_names`).
+
+**Canonical commands** (note the ephemeral ports — `--test-enable` forces `http_spawn()` so 8069/8072 collide without them; per repo CLAUDE.md):
+
+- Run this module's tests:
+  ```bash
+  docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
+  ```
+- Plain upgrade (no tests):
+  ```bash
+  docker exec odoo-modsdev-app odoo -d modsdev -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -50
+  ```
+- Pyflakes a changed Python file (catches undefined names instantly):
+  ```bash
+  docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/<relpath>.py
+  ```
+
+**Commit:** only from the git tree (`git -C "K:/Github/Odoo-Modules" ...`). Per memory `feedback_always_push_to_main`, push after each commit on `main`.
+
+---
+
+## File Structure
+
+**Created:**
+- `fusion_clock/models/clock_break_rule.py` — the `fusion.clock.break.rule` model + tier engine + constraints.
+- `fusion_clock/data/clock_break_rule_data.xml` — seed Ontario rule (`is_default`).
+- `fusion_clock/views/clock_break_rule_views.xml` — list/form/action for the rule.
+- `fusion_clock/migrations/19.0.4.1.0/post-migrate.py` — drop retired param + recompute break.
+- `fusion_clock/tests/test_break_rules.py` — all new tests.
+
+**Modified:**
+- `fusion_clock/models/__init__.py` — import the new model.
+- `fusion_clock/models/hr_employee.py` — add `_get_fclk_break_rule()`.
+- `fusion_clock/models/hr_attendance.py` — `x_fclk_break_minutes` → stored compute; drop cron break-write.
+- `fusion_clock/controllers/clock_api.py` — delete `_apply_break_deduction`, its clock-out call, and the penalty break-write.
+- `fusion_clock/controllers/clock_kiosk.py` — delete the `_apply_break_deduction` call.
+- `fusion_clock/controllers/clock_nfc_kiosk.py` — delete the `_apply_break_deduction` call.
+- `fusion_clock/models/res_config_settings.py` — remove `fclk_break_threshold_hours`.
+- `fusion_clock/views/res_config_settings_views.xml` — remove threshold row; relabel default-break as scheduling-only; point to Break Rules.
+- `fusion_clock/data/ir_config_parameter_data.xml` — remove the `break_threshold_hours` seed record.
+- `fusion_clock/security/ir.model.access.csv` — manager access for the new model.
+- `fusion_clock/views/clock_menus.xml` — "Break Rules" config menu.
+- `fusion_clock/__manifest__.py` — version bump + new data/view files.
+- `fusion_clock/tests/__init__.py` — import the new test module.
+- `fusion_clock/tests/test_settings.py` — assert the retired field is gone.
+- `fusion_clock/CLAUDE.md` — model map, settings keys, break gotcha (Task 5).
+
+**Behaviour-change note (intentional, approved by spec §4.3):** today a *late-in* penalty written at clock-in (e.g. +15) is silently swallowed at clock-out because `_apply_break_deduction` does `max(break, current)`. The new compute makes **all** penalty minutes strictly additive (`statutory + Σ penalties`), so a late-in penalty on a long shift is no longer lost. Net hours for such shifts will be correctly lower than before.
+
+---
+
+## Task 1: New model `fusion.clock.break.rule`
+
+**Files:**
+- Create: `fusion_clock/models/clock_break_rule.py`
+- Create: `fusion_clock/data/clock_break_rule_data.xml`
+- Create: `fusion_clock/views/clock_break_rule_views.xml`
+- Create: `fusion_clock/tests/test_break_rules.py`
+- Modify: `fusion_clock/models/__init__.py`
+- Modify: `fusion_clock/tests/__init__.py`
+- Modify: `fusion_clock/security/ir.model.access.csv`
+- Modify: `fusion_clock/views/clock_menus.xml`
+- Modify: `fusion_clock/__manifest__.py`
+
+- [ ] **Step 1: Write the failing tests** — create `fusion_clock/tests/test_break_rules.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import datetime, timedelta
+from odoo.tests import tagged, TransactionCase
+from odoo.exceptions import ValidationError
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestBreakRules(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.auto_deduct_break', 'True')
+        cls.Rule = cls.env['fusion.clock.break.rule']
+        cls.default_rule = cls.Rule.search([('is_default', '=', True)], limit=1)
+        cls.employee = cls.env['hr.employee'].create({'name': 'FCLK Break Test'})
+
+    def _mk_att(self, hours):
+        check_in = datetime(2026, 1, 5, 9, 0, 0)
+        return self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': check_in,
+            'check_out': check_in + timedelta(hours=hours),
+        })
+
+    # ---- Task 1: tier engine + constraints ----
+    def test_break_minutes_for_tiers(self):
+        rule = self.Rule.create({
+            'name': 'Tier Test', 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.assertEqual(rule.break_minutes_for(4.99), 0.0)
+        self.assertEqual(rule.break_minutes_for(5.0), 30.0)
+        self.assertEqual(rule.break_minutes_for(9.99), 30.0)
+        self.assertEqual(rule.break_minutes_for(10.0), 60.0)
+        self.assertEqual(rule.break_minutes_for(12.0), 60.0)
+
+    def test_second_tier_must_exceed_first(self):
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Bad', 'is_default': False,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 5.0, 'break2_minutes': 30.0,
+            })
+
+    def test_single_default_enforced(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        with self.assertRaises(ValidationError):
+            self.Rule.create({
+                'name': 'Another Default', 'is_default': True, 'active': True,
+                'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+                'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+            })
+```
+
+  Append the import to `fusion_clock/tests/__init__.py` (add the line if not already present):
+
+```python
+from . import test_break_rules
+```
+
+- [ ] **Step 2: Create the model** — `fusion_clock/models/clock_break_rule.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+
+
+class FusionClockBreakRule(models.Model):
+    _name = 'fusion.clock.break.rule'
+    _description = 'Statutory Break Rule'
+    _order = 'sequence, name'
+
+    name = fields.Char(string='Name', required=True)
+    country_id = fields.Many2one('res.country', string='Country')
+    state_id = fields.Many2one(
+        'res.country.state',
+        string='Province / State',
+        help="Employees whose company is in this province use this rule.",
+    )
+    is_default = fields.Boolean(
+        string='Default Rule',
+        help="Used when an employee's company province matches no other rule. "
+             "Only one active rule may be the default.",
+    )
+    break1_after_hours = fields.Float(
+        string='First Break After (h)', default=5.0,
+        help="Worked hours at or above this trigger the first unpaid break.",
+    )
+    break1_minutes = fields.Float(
+        string='First Break (min)', default=30.0,
+        help="Length of the first unpaid break. 0 disables it.",
+    )
+    break2_after_hours = fields.Float(
+        string='Second Break After (h)', default=10.0,
+        help="Worked hours at or above this add the second unpaid break.",
+    )
+    break2_minutes = fields.Float(
+        string='Second Break (min)', default=30.0,
+        help="Length of the second unpaid break. 0 disables it.",
+    )
+    sequence = fields.Integer(default=10)
+    active = fields.Boolean(default=True)
+
+    def break_minutes_for(self, worked_hours):
+        """Total statutory unpaid break (minutes) for the given worked hours.
+
+        Tiers are inclusive (``>=``): a break applies when worked hours are
+        equal to or greater than the threshold. The second tier adds on top of
+        the first.
+        """
+        self.ensure_one()
+        worked = worked_hours or 0.0
+        total = 0.0
+        if self.break1_minutes and worked >= self.break1_after_hours:
+            total += self.break1_minutes
+        if self.break2_minutes and worked >= self.break2_after_hours:
+            total += self.break2_minutes
+        return total
+
+    @api.constrains('break1_after_hours', 'break1_minutes',
+                    'break2_after_hours', 'break2_minutes')
+    def _check_tiers(self):
+        for rule in self:
+            if min(rule.break1_after_hours, rule.break1_minutes,
+                   rule.break2_after_hours, rule.break2_minutes) < 0:
+                raise ValidationError(_("Break hours and minutes cannot be negative."))
+            if rule.break2_minutes and rule.break2_after_hours <= rule.break1_after_hours:
+                raise ValidationError(_(
+                    "The second break threshold (%(n2)s h) must be greater than "
+                    "the first (%(n1)s h).",
+                    n2=rule.break2_after_hours, n1=rule.break1_after_hours))
+
+    @api.constrains('is_default', 'active')
+    def _check_single_default(self):
+        for rule in self:
+            if rule.is_default and rule.active:
+                dupe = self.search([
+                    ('is_default', '=', True), ('active', '=', True),
+                    ('id', '!=', rule.id),
+                ], limit=1)
+                if dupe:
+                    raise ValidationError(_(
+                        "Only one active break rule can be the default "
+                        "(currently: %s).", dupe.name))
+```
+
+- [ ] **Step 3: Register the model** — add to `fusion_clock/models/__init__.py` after the `clock_penalty` import:
+
+```python
+from . import clock_break_rule
+```
+
+- [ ] **Step 4: Grant access** — append one row to `fusion_clock/security/ir.model.access.csv`:
+
+```
+access_fusion_clock_break_rule_manager,fusion.clock.break.rule.manager,model_fusion_clock_break_rule,group_fusion_clock_manager,1,1,1,1
+```
+
+(No user/portal grant needed — the resolver reads the table via `sudo()`.)
+
+- [ ] **Step 5: Seed the Ontario rule** — create `fusion_clock/data/clock_break_rule_data.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+    <record id="break_rule_ontario" model="fusion.clock.break.rule">
+        <field name="name">Ontario</field>
+        <field name="country_id" ref="base.ca"/>
+        <field name="state_id" ref="base.state_ca_on"/>
+        <field name="is_default" eval="True"/>
+        <field name="break1_after_hours">5.0</field>
+        <field name="break1_minutes">30.0</field>
+        <field name="break2_after_hours">10.0</field>
+        <field name="break2_minutes">30.0</field>
+    </record>
+</odoo>
+```
+
+- [ ] **Step 6: Views + action** — create `fusion_clock/views/clock_break_rule_views.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="view_fusion_clock_break_rule_list" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.list</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <list>
+                <field name="sequence" widget="handle"/>
+                <field name="name"/>
+                <field name="state_id"/>
+                <field name="country_id" optional="hide"/>
+                <field name="break1_after_hours" widget="float_time"/>
+                <field name="break1_minutes"/>
+                <field name="break2_after_hours" widget="float_time"/>
+                <field name="break2_minutes"/>
+                <field name="is_default"/>
+                <field name="active" widget="boolean_toggle"/>
+            </list>
+        </field>
+    </record>
+
+    <record id="view_fusion_clock_break_rule_form" model="ir.ui.view">
+        <field name="name">fusion.clock.break.rule.form</field>
+        <field name="model">fusion.clock.break.rule</field>
+        <field name="arch" type="xml">
+            <form>
+                <sheet>
+                    <widget name="web_ribbon" title="Archived" bg_color="text-bg-danger"
+                            invisible="active"/>
+                    <div class="oe_title">
+                        <h1><field name="name" placeholder="e.g. Ontario"/></h1>
+                    </div>
+                    <group>
+                        <group string="Jurisdiction">
+                            <field name="country_id"/>
+                            <field name="state_id"
+                                   domain="[('country_id', '=', country_id)]"/>
+                            <field name="is_default"/>
+                            <field name="active"/>
+                        </group>
+                        <group string="Unpaid Break Tiers">
+                            <label for="break1_after_hours" string="First break after"/>
+                            <div class="o_row">
+                                <field name="break1_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break1_minutes"/>
+                                <span>min</span>
+                            </div>
+                            <label for="break2_after_hours" string="Second break after"/>
+                            <div class="o_row">
+                                <field name="break2_after_hours" widget="float_time"/>
+                                <span>h  →</span>
+                                <field name="break2_minutes"/>
+                                <span>min</span>
+                            </div>
+                        </group>
+                    </group>
+                    <p class="text-muted">
+                        Breaks are unpaid and deducted from actual worked hours. A tier with
+                        0 minutes is disabled. Triggers are inclusive — a break applies when
+                        worked hours are equal to or above the threshold.
+                    </p>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_break_rule" model="ir.actions.act_window">
+        <field name="name">Break Rules</field>
+        <field name="res_model">fusion.clock.break.rule</field>
+        <field name="view_mode">list,form</field>
+        <field name="context">{'active_test': False}</field>
+        <field name="help" type="html">
+            <p class="o_view_nocontent_smiling_face">Create a statutory break rule</p>
+            <p>Define unpaid meal-break thresholds per province/country. Employees inherit
+               the rule matching their company's province, or the default rule.</p>
+        </field>
+    </record>
+</odoo>
+```
+
+- [ ] **Step 7: Add the menu** — in `fusion_clock/views/clock_menus.xml`, insert after the `menu_fusion_clock_locations_config` menuitem (the Locations config item) and before `menu_fusion_clock_nfc_enrollment`:
+
+```xml
+    <menuitem id="menu_fusion_clock_break_rules"
+              name="Break Rules"
+              parent="menu_fusion_clock_config"
+              action="action_fusion_clock_break_rule"
+              sequence="25"
+              groups="group_fusion_clock_manager"/>
+```
+
+- [ ] **Step 8: Wire the manifest** — in `fusion_clock/__manifest__.py`:
+
+  **Do NOT bump the version yet** — it stays `19.0.4.0.3` until Task 4, so the
+  `19.0.4.1.0` migration actually fires in dev (Odoo only runs a version's migration
+  when the installed version is *lower* than the manifest version).
+
+  Add the seed data file after `'data/ir_config_parameter_data.xml',`:
+```python
+        'data/clock_break_rule_data.xml',
+```
+  Add the view file after `'views/clock_schedule_views.xml',`:
+```python
+        'views/clock_break_rule_views.xml',
+```
+  (Data and view files reload on every `-u` regardless of the version number, so the
+  new model/menu install without a bump. No assets change in this plan, so the bump's
+  only purpose is the migration trigger — deferred to Task 4.)
+
+- [ ] **Step 9: Sync, upgrade, run tests**
+
+  Sync (see preamble), then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -100
+```
+  Expected: module upgrades cleanly; `test_break_minutes_for_tiers`, `test_second_tier_must_exceed_first`, `test_single_default_enforced` PASS. (Other tests in the class will error until Tasks 2–3 add their dependencies — that's expected if you scoped the run; otherwise the not-yet-added methods simply don't exist yet.)
+
+- [ ] **Step 10: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/clock_break_rule.py fusion_clock/models/__init__.py fusion_clock/data/clock_break_rule_data.xml fusion_clock/views/clock_break_rule_views.xml fusion_clock/views/clock_menus.xml fusion_clock/security/ir.model.access.csv fusion_clock/__manifest__.py fusion_clock/tests/test_break_rules.py fusion_clock/tests/__init__.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): add fusion.clock.break.rule per-province break table" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 2: Jurisdiction resolver on `hr.employee`
+
+**Files:**
+- Modify: `fusion_clock/models/hr_employee.py`
+- Modify: `fusion_clock/tests/test_break_rules.py`
+
+- [ ] **Step 1: Add the resolver tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
+
+```python
+    # ---- Task 2: jurisdiction resolver ----
+    def test_resolver_matches_company_province(self):
+        bc = self.env.ref('base.state_ca_bc')
+        bc_rule = self.Rule.create({
+            'name': 'British Columbia', 'state_id': bc.id, 'is_default': False,
+            'break1_after_hours': 5.0, 'break1_minutes': 30.0,
+            'break2_after_hours': 10.0, 'break2_minutes': 30.0,
+        })
+        self.employee.company_id.state_id = bc.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), bc_rule)
+
+    def test_resolver_falls_back_to_default(self):
+        self.assertTrue(self.default_rule, "seed default rule must exist")
+        alberta = self.env.ref('base.state_ca_ab')   # no rule for AB
+        self.employee.company_id.state_id = alberta.id
+        self.assertEqual(self.employee._get_fclk_break_rule(), self.default_rule)
+```
+
+- [ ] **Step 2: Run to verify they fail**
+
+  Sync, then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+  Expected: FAIL — `AttributeError: 'hr.employee' object has no attribute '_get_fclk_break_rule'`.
+
+- [ ] **Step 3: Implement the resolver** — in `fusion_clock/models/hr_employee.py`, add this method immediately after the `_get_fclk_break_minutes` method (after its `return float(...)` block, before `_get_fclk_scheduled_times`):
+
+```python
+    def _get_fclk_break_rule(self):
+        """Return the statutory break rule for this employee.
+
+        Resolution: company's province → matching rule; else the global default
+        rule; else an empty recordset (caller treats as zero break). Read via
+        sudo so the portal net-hours compute can resolve it without a direct ACL.
+        """
+        self.ensure_one()
+        Rule = self.env['fusion.clock.break.rule'].sudo()
+        rule = Rule.browse()
+        state = self.company_id.state_id
+        if state:
+            rule = Rule.search([('state_id', '=', state.id)], limit=1)
+        if not rule:
+            rule = Rule.search([('is_default', '=', True)], limit=1)
+        return rule
+```
+
+- [ ] **Step 4: Run to verify they pass**
+
+  Sync, then re-run the Step 2 command. Expected: `test_resolver_matches_company_province` and `test_resolver_falls_back_to_default` PASS.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_employee.py fusion_clock/tests/test_break_rules.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): resolve employee break rule from company province" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 3: `x_fclk_break_minutes` → stored compute; remove all manual writes
+
+This task is atomic: once the field is computed (no inverse), any remaining `write({'x_fclk_break_minutes': ...})` raises at runtime, so the field conversion and the removal of all four write sites must land together.
+
+**Files:**
+- Modify: `fusion_clock/models/hr_attendance.py`
+- Modify: `fusion_clock/controllers/clock_api.py`
+- Modify: `fusion_clock/controllers/clock_kiosk.py`
+- Modify: `fusion_clock/controllers/clock_nfc_kiosk.py`
+- Modify: `fusion_clock/tests/test_break_rules.py`
+
+- [ ] **Step 1: Add the attendance tests** — append these methods to `TestBreakRules` in `fusion_clock/tests/test_break_rules.py`:
+
+```python
+    # ---- Task 3: automatic deduction on every path ----
+    def test_manual_attendance_applies_statutory_break(self):
+        att = self._mk_att(6)                       # 6h >= 5 -> first break
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 5.5, places=2)
+
+    def test_manual_edit_extends_break(self):
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 30.0)
+        att.check_out = att.check_in + timedelta(hours=10)   # now >= 10
+        self.assertEqual(att.x_fclk_break_minutes, 60.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 9.0, places=2)
+
+    def test_under_first_threshold_no_break(self):
+        att = self._mk_att(4)                       # 4h < 5 -> nothing
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+        self.assertAlmostEqual(att.x_fclk_net_hours, 4.0, places=2)
+
+    def test_penalty_minutes_are_additive(self):
+        att = self._mk_att(6)                       # statutory 30
+        self.env['fusion.clock.penalty'].create({
+            'attendance_id': att.id,
+            'employee_id': self.employee.id,
+            'penalty_type': 'early_out',
+            'penalty_minutes': 15.0,
+            'date': att.check_in.date(),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 45.0)
+
+    def test_master_toggle_off_zero_statutory(self):
+        self.ICP.set_param('fusion_clock.auto_deduct_break', 'False')
+        att = self._mk_att(6)
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+
+    def test_open_attendance_zero_break(self):
+        att = self.env['hr.attendance'].create({
+            'employee_id': self.employee.id,
+            'check_in': datetime(2026, 1, 5, 9, 0, 0),
+        })
+        self.assertEqual(att.x_fclk_break_minutes, 0.0)
+```
+
+- [ ] **Step 2: Run to verify they fail**
+
+  Sync, then run the module tests. Expected: the new tests FAIL — e.g. `test_manual_attendance_applies_statutory_break` asserts 30 but gets 0 (no write override exists yet).
+
+- [ ] **Step 3: Convert the field to a stored compute** — in `fusion_clock/models/hr_attendance.py`, replace the field definition:
+
+  OLD:
+```python
+    x_fclk_break_minutes = fields.Float(
+        string='Break (min)',
+        default=0.0,
+        tracking=True,
+        help="Break duration in minutes to deduct from worked hours.",
+    )
+```
+  NEW:
+```python
+    x_fclk_break_minutes = fields.Float(
+        string='Break (min)',
+        compute='_compute_fclk_break_minutes',
+        store=True,
+        tracking=True,
+        help="Unpaid break deducted from worked hours: statutory break (per the "
+             "employee's province rule, from actual hours worked) plus any penalty "
+             "minutes. Computed automatically on every save.",
+    )
+```
+
+- [ ] **Step 4: Add the compute method** — in the same file, insert this method immediately before the `_compute_net_hours` method (just above its `@api.depends('worked_hours', 'x_fclk_break_minutes')` decorator):
+
+```python
+    @api.depends('worked_hours', 'check_out',
+                 'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
+    def _compute_fclk_break_minutes(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
+        for att in self:
+            statutory = 0.0
+            if auto and att.check_out and att.employee_id:
+                rule = att.employee_id._get_fclk_break_rule()
+                if rule:
+                    statutory = rule.break_minutes_for(att.worked_hours or 0.0)
+            penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
+            att.x_fclk_break_minutes = statutory + penalties
+```
+
+- [ ] **Step 5: Remove the cron's break write** — in the same file, inside `_cron_fusion_auto_clock_out`:
+
+  Remove the now-unused threshold read (the line near the top of the method):
+```python
+        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
+```
+  Remove the two now-unused locals in the per-attendance loop:
+```python
+            emp_tz = pytz.timezone(employee.tz or self.env.company.tz or 'UTC')
+            check_in_date = pytz.UTC.localize(check_in).astimezone(emp_tz).date()
+```
+  Remove the break-write block (the compute now applies the break when `check_out` is set):
+```python
+                    if (att.worked_hours or 0) >= threshold:
+                        att.sudo().write(
+                            {'x_fclk_break_minutes': employee._get_fclk_break_minutes(check_in_date)}
+                        )
+```
+  (Leave the surrounding `employee = att.employee_id` and `clock_out_time = effective_deadline` lines intact.)
+
+- [ ] **Step 6: Delete the controller helper and its call sites** — in `fusion_clock/controllers/clock_api.py`:
+
+  Delete the entire `_apply_break_deduction` method:
+```python
+    def _apply_break_deduction(self, attendance, employee):
+        """Apply automatic break deduction if configured."""
+        ICP = request.env['ir.config_parameter'].sudo()
+        if ICP.get_param('fusion_clock.auto_deduct_break', 'True') != 'True':
+            return
+
+        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
+        worked = attendance.worked_hours or 0.0
+
+        if worked >= threshold:
+            local_date = get_local_today(request.env, employee)
+            if attendance.check_in:
+                tz_name = (
+                    employee.resource_id.tz
+                    or (employee.user_id.partner_id.tz if employee.user_id else False)
+                    or employee.company_id.partner_id.tz
+                    or 'UTC'
+                )
+                local_date = pytz.UTC.localize(attendance.check_in).astimezone(pytz.timezone(tz_name)).date()
+            break_min = employee._get_fclk_break_minutes(local_date)
+            current = attendance.x_fclk_break_minutes or 0.0
+            # Set to whichever is higher: configured break or existing (penalty-inflated) value
+            new_val = max(break_min, current)
+            if new_val != current:
+                attendance.sudo().write({'x_fclk_break_minutes': new_val})
+
+```
+  Delete its clock-out call (in the CLOCK OUT branch):
+```python
+                # Apply break deduction
+                self._apply_break_deduction(attendance, employee)
+
+```
+  Delete the penalty break-write in `_check_and_create_penalty` (keep the penalty-record `create` above it and the activity log below it):
+```python
+            # Deduct penalty minutes from attendance (adds to break deduction)
+            current_break = attendance.x_fclk_break_minutes or 0.0
+            attendance.sudo().write({
+                'x_fclk_break_minutes': current_break + deduction,
+            })
+
+```
+
+- [ ] **Step 7: Delete the kiosk call sites**
+
+  In `fusion_clock/controllers/clock_kiosk.py`, delete the line:
+```python
+                api._apply_break_deduction(attendance, employee)
+```
+  In `fusion_clock/controllers/clock_nfc_kiosk.py`, delete the line:
+```python
+            api._apply_break_deduction(attendance, employee)
+```
+
+- [ ] **Step 8: Pyflakes the touched controllers/models** (catches a missed `pytz`/var reference instantly)
+
+```bash
+docker exec odoo-modsdev-app python3 -m pyflakes /mnt/extra-addons/fusion_clock/controllers/clock_api.py /mnt/extra-addons/fusion_clock/controllers/clock_kiosk.py /mnt/extra-addons/fusion_clock/controllers/clock_nfc_kiosk.py /mnt/extra-addons/fusion_clock/models/hr_attendance.py
+```
+  Expected: no output (clean). If it flags `pytz` as unused in `hr_attendance.py`, that's fine only if no other code uses it — verify before removing the import (the absence/overtime crons still use `pytz`, so leave the import).
+
+- [ ] **Step 9: Run to verify all Task 3 tests pass**
+
+  Sync, then run the module tests. Expected: all `test_manual_*`, `test_under_first_threshold_no_break`, `test_penalty_minutes_are_additive`, `test_master_toggle_off_zero_statutory`, `test_open_attendance_zero_break` PASS, and the existing NFC/kiosk/dashboard tests still PASS.
+
+- [ ] **Step 10: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/hr_attendance.py fusion_clock/controllers/clock_api.py fusion_clock/controllers/clock_kiosk.py fusion_clock/controllers/clock_nfc_kiosk.py fusion_clock/tests/test_break_rules.py
+git -C "K:/Github/Odoo-Modules" commit -m "feat(fusion_clock): auto-apply statutory break via one stored compute" -m "x_fclk_break_minutes is now statutory(worked_hours) + penalties, recomputed on every path including manual backend entry. Removes the four duplicated write sites (controller _apply_break_deduction + 3 call sites, auto-clock-out cron, penalty write)." -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 4: Retire `break_threshold_hours`; clean settings & migrate
+
+**Files:**
+- Modify: `fusion_clock/models/res_config_settings.py`
+- Modify: `fusion_clock/views/res_config_settings_views.xml`
+- Modify: `fusion_clock/data/ir_config_parameter_data.xml`
+- Create: `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`
+- Modify: `fusion_clock/tests/test_settings.py`
+
+- [ ] **Step 1: Add the dead-setting assertion** — in `fusion_clock/tests/test_settings.py`, add one line to `test_dead_settings_removed`:
+
+```python
+        self.assertNotIn('fclk_break_threshold_hours', fields)
+```
+
+- [ ] **Step 2: Remove the settings field** — in `fusion_clock/models/res_config_settings.py`, delete:
+
+```python
+    fclk_break_threshold_hours = fields.Float(
+        string='Break Threshold (hours)',
+        config_parameter='fusion_clock.break_threshold_hours',
+        default=4.0,
+        help="Only deduct break if shift is longer than this many hours.",
+    )
+```
+
+- [ ] **Step 3: Fix the settings view** — in `fusion_clock/views/res_config_settings_views.xml`, replace the whole `fclk_auto_break` setting block:
+
+  OLD:
+```xml
+                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
+                                 help="Automatically deduct unpaid break from worked hours on clock-out.">
+                            <field name="fclk_auto_deduct_break"/>
+                            <div class="content-group" invisible="not fclk_auto_deduct_break">
+                                <div class="row mt16">
+                                    <label for="fclk_default_break_minutes" string="Duration (min)" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_default_break_minutes"/>
+                                </div>
+                                <div class="row mt8">
+                                    <label for="fclk_break_threshold_hours" string="Min. Shift" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_break_threshold_hours" widget="float_time"/>
+                                </div>
+                            </div>
+                        </setting>
+```
+  NEW:
+```xml
+                        <setting id="fclk_auto_break" string="Auto-Deduct Break"
+                                 help="Automatically deduct the statutory unpaid break from worked hours. Break lengths and thresholds are configured per province under Configuration → Break Rules.">
+                            <field name="fclk_auto_deduct_break"/>
+                            <div class="content-group" invisible="not fclk_auto_deduct_break">
+                                <div class="row mt16">
+                                    <label for="fclk_default_break_minutes" string="Default scheduling break (min)" class="col-lg-5 o_light_label"/>
+                                    <field name="fclk_default_break_minutes"/>
+                                </div>
+                                <div class="text-muted small mt4">
+                                    Used as the default break when building shifts/schedules
+                                    (planned hours). Actual deductions follow the province Break Rules.
+                                </div>
+                            </div>
+                        </setting>
+```
+
+- [ ] **Step 4: Remove the seed param** — in `fusion_clock/data/ir_config_parameter_data.xml`, delete:
+
+```xml
+    <record id="config_break_threshold_hours" model="ir.config_parameter">
+        <field name="key">fusion_clock.break_threshold_hours</field>
+        <field name="value">4.0</field>
+    </record>
+```
+
+- [ ] **Step 5: Bump the version + create the migration**
+
+  First bump the manifest so the migration fires (installed `19.0.4.0.3` < manifest
+  `19.0.4.1.0`). In `fusion_clock/__manifest__.py`:
+```python
+    'version': '19.0.4.1.0',
+```
+  Then create `fusion_clock/migrations/19.0.4.1.0/post-migrate.py`:
+
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import api, SUPERUSER_ID
+
+
+def migrate(cr, version):
+    """Retire the single-threshold break param (superseded by per-rule
+    break1_after_hours), and force-recompute the now-computed break field so
+    existing closed attendances reflect the province rule + their penalties."""
+    cr.execute(
+        "DELETE FROM ir_config_parameter WHERE key = %s",
+        ('fusion_clock.break_threshold_hours',),
+    )
+    env = api.Environment(cr, SUPERUSER_ID, {})
+    Attendance = env['hr.attendance']
+    field = Attendance._fields['x_fclk_break_minutes']
+    closed = Attendance.search([('check_out', '!=', False)])
+    if closed:
+        env.add_to_compute(field, closed)
+        closed.flush_recordset(['x_fclk_break_minutes'])
+```
+
+- [ ] **Step 6: Sync, upgrade, run tests**
+
+  Sync, then run the module tests. Expected: module upgrades cleanly and the `19.0.4.1.0` migration executes (installed `19.0.4.0.3` < manifest `19.0.4.1.0`; modsdev shows the INFO line, nexa/entech run `log_level=warn`), `test_dead_settings_removed` PASS, full `fusion_clock` suite green.
+
+- [ ] **Step 7: Verify the param is gone and historical rows recomputed** (sanity)
+
+```bash
+docker exec odoo-modsdev-app odoo shell -d modsdev --no-http 2>/dev/null <<'PY'
+ICP = env['ir.config_parameter'].sudo()
+print('threshold param:', ICP.get_param('fusion_clock.break_threshold_hours', 'ABSENT'))
+print('default rule:', env['fusion.clock.break.rule'].search([('is_default','=',True)]).mapped('name'))
+PY
+```
+  Expected: `threshold param: ABSENT`; `default rule: ['Ontario']`.
+
+- [ ] **Step 8: Commit**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/migrations/19.0.4.1.0/post-migrate.py fusion_clock/tests/test_settings.py fusion_clock/__manifest__.py
+git -C "K:/Github/Odoo-Modules" commit -m "refactor(fusion_clock): retire break_threshold_hours; breaks now driven by Break Rules" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+---
+
+## Task 5: Full verification, docs, manual smoke
+
+**Files:**
+- Modify: `fusion_clock/CLAUDE.md`
+
+- [ ] **Step 1: Full test run (whole module)**
+
+  Sync, then:
+```bash
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -120
+```
+  Expected: all `fusion_clock` tests PASS, zero tracebacks. If anything fails, fix before continuing.
+
+- [ ] **Step 2: Manual smoke (manager UI)** at http://localhost:8082
+
+  - Configuration → **Break Rules** exists; the **Ontario** row shows 5h→30 / 10h→30, Default ticked.
+  - Attendances → create a manual attendance, check-in 09:00 check-out 15:00 (6h) → **Break = 30**, Net = 5.5h, with no clock action.
+  - Edit that record's check-out to 19:00 (10h) → **Break = 60**, Net = 9.0h.
+  - Create a 4h attendance → **Break = 0**.
+  - Settings → the old "Min. Shift" threshold field is gone; the Auto-Deduct Break help points to Break Rules.
+
+- [ ] **Step 3: Update the module CLAUDE.md** — in `fusion_clock/CLAUDE.md`:
+
+  - §4 Model Map: add a row — `fusion.clock.break.rule | models/clock_break_rule.py | Per-province statutory unpaid-break thresholds (2-tier).`
+  - §5 Clocking Flow: note that the break deduction is no longer a controller step — `x_fclk_break_minutes` is a stored compute (`statutory(worked_hours) + Σ penalties`) that fires on every path including manual backend entry; resolved rule via `hr.employee._get_fclk_break_rule()` (company province → default).
+  - §11 Settings Keys: remove `fusion_clock.break_threshold_hours`.
+  - §13 Gotchas: add — "Unpaid break is computed, not written: never `write({'x_fclk_break_minutes': ...})`; change the province rule (`fusion.clock.break.rule`) or `auto_deduct_break` instead. Penalty minutes are now strictly additive (the old `max()` that swallowed late-in penalties is gone)."
+  - Bump the version line in §1 to `19.0.4.1.0`.
+
+- [ ] **Step 4: Commit the docs**
+
+```bash
+git -C "K:/Github/Odoo-Modules" add fusion_clock/CLAUDE.md
+git -C "K:/Github/Odoo-Modules" commit -m "docs(fusion_clock): document province break rules + computed break field" -m "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>"
+git -C "K:/Github/Odoo-Modules" push
+```
+
+- [ ] **Step 5: Report** — summarize what changed, the behaviour-change note (penalties now additive), and that live deployment to entech (`odoo-entech`) is a separate step pending user sign-off.
+
+---
+
+## Self-Review (performed against the spec)
+
+**1. Spec coverage**
+- §4.1 model → Task 1. §4.2 resolver → Task 2. §4.3 stored compute → Task 3. §4.4 removals → Task 3 (writes) + Task 4 (setting/param/view). §4.5 UI/security/data → Task 1 (+ settings view in Task 4). §5 edge cases → tests in Tasks 1 & 3. §6 migration → Task 4. §7 tests → all six+ cases present across Tasks 1–3. §8 rollout → preamble + Task 5. ✓ No gaps.
+
+**2. Placeholder scan** — every step has full code/commands; no TBD/TODO/"similar to". ✓
+
+**3. Type/name consistency** — `break_minutes_for`, `_get_fclk_break_rule`, `_compute_fclk_break_minutes`, fields `break1_after_hours/break1_minutes/break2_after_hours/break2_minutes/is_default`, model `fusion.clock.break.rule`, access id `model_fusion_clock_break_rule`, action `action_fusion_clock_break_rule`, menu `menu_fusion_clock_break_rules` — all used identically across tasks. The compute folds `Σ penalty_minutes` (field `penalty_minutes` on `fusion.clock.penalty`, confirmed). ✓

docs/superpowers/plans/2026-06-02-accessibility-funding-selector.md

@@ -0,0 +1,43 @@
+# Accessibility Funding-Source Selector — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: superpowers:executing-plans (inline) — this is a 3-file change. Steps use `- [ ]` checkboxes.
+
+**Goal:** Let the rep mark an accessibility assessment's funding source (Private / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other) on the web form, so the generated sale order routes to the correct funding pipeline instead of always defaulting to private pay.
+
+**Architecture:** The model (`fusion.accessibility.assessment.x_fc_funding_source`) and the SO routing (`_create_draft_sale_order` → `sale_type_map` → `x_fc_sale_type`) already exist (the "2026-04 portal audit fix"). The only gaps: (1) the form has no funding field, (2) the save controller never reads `funding_source` from the POST, (3) `hardship` is missing from the selectable funding sources. The submit JS already serialises every named form field via `FormData`, so no JS change is needed.
+
+**Tech Stack:** Odoo 19, QWeb portal template, JSON-RPC controller. Module `fusion_portal` (worktree `K:\Github\Odoo-Modules-wt-portal`, branch `feat/assessment-visit`).
+
+**Verification constraint:** `fusion_portal` depends on Enterprise `knowledge`, so it can NOT be installed on the local Community Docker. Syntax-check with host Python; functional verification is on westin (or a clone): pick "March of Dimes" on a form → the draft SO gets `x_fc_sale_type='march_of_dimes'` and lands in the MOD pipeline.
+
+---
+
+### Task 1: Add Hardship to the funding source + route it
+
+**Files:** Modify `fusion_portal/models/accessibility_assessment.py` (selection ~:71-87, `sale_type_map` ~:771-779)
+
+- [ ] **Step 1:** Add `('hardship', 'Hardship Funding')` to the `x_fc_funding_source` selection list (after `'wsib'`).
+- [ ] **Step 2:** Add `'hardship': 'hardship',` to `sale_type_map` in `_create_draft_sale_order` (the target `x_fc_sale_type='hardship'` already exists in `fusion_claims` `sale_order.py:332`).
+- [ ] **Step 3:** `python -m py_compile fusion_portal/models/accessibility_assessment.py` → no error.
+- [ ] **Step 4:** Commit.
+
+### Task 2: Add the funding select to the shared client-info form
+
+**Files:** Modify `fusion_portal/views/portal_accessibility_templates.xml` (`accessibility_client_info_section`, ~:366-375)
+
+- [ ] **Step 1:** Add a new row with a `<select name="funding_source">` (options mirror the model selection; `direct_private` pre-selected so existing private behaviour is unchanged) right after the phone/email row, before the card closes.
+- [ ] **Step 2:** Validate XML well-formedness (`[xml]` parse).
+- [ ] **Step 3:** Commit.
+
+### Task 3: Capture funding_source in the save controller
+
+**Files:** Modify `fusion_portal/controllers/portal_main.py` (`accessibility_assessment_save` vals, ~:2498-2511)
+
+- [ ] **Step 1:** Add `'x_fc_funding_source': post.get('funding_source') or 'direct_private',` to the `vals` dict.
+- [ ] **Step 2:** `python -m pyflakes fusion_portal/controllers/portal_main.py` → no new undefined-name errors.
+- [ ] **Step 3:** Commit.
+
+### Task 4: Verify + ship
+
+- [ ] **Step 1:** Grep confirms `funding_source` flows form → controller → `x_fc_funding_source` → `sale_type_map`.
+- [ ] **Step 2:** Deploy to westin (backup → scp the 3 files → `-u fusion_portal` → cache-bust → restart) and confirm: open `/my/accessibility/stairlift/straight`, pick "March of Dimes", complete → the new SO shows `x_fc_sale_type = march_of_dimes` and appears in the MOD pipeline.

docs/superpowers/plans/2026-06-02-fusion-maintenance-foundation.md

@@ -0,0 +1,506 @@
+# fusion_maintenance Foundation — Implementation Plan (Plan 1 of 5)
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Confirming a sale of a maintainable product auto-creates a *priced* maintenance contract, and the due-reminder email shows the maintenance cost.
+
+**Architecture:** Extend `fusion_repairs`. A maintenance **policy** (enabled / interval / flat fee) lives on `fusion.repair.product.category`, with a per-product fee/interval override on `product.template`. We fix the dead `_spawn_maintenance_contracts()` (anchor on delivery date, capture serial + fee + provenance, dedup) and call it from the **existing** `action_confirm()` override. The branded reminder email gains a fee line.
+
+**Tech Stack:** Odoo 19 **Community**, Python, `TransactionCase`. Local dev: `docker odoo-modsdev-app`, DB `fusion-dev`.
+
+**Spec:** [`2026-06-02-fusion-maintenance-design.md`](../specs/2026-06-02-fusion-maintenance-design.md). This is **Plan 1 of 5**; see the Roadmap at the bottom for Plans 2–5 (booking, visit log, backfill, office crons) — each is written when reached because it needs its own live-source reads (spec §15).
+
+**Conventions (from CLAUDE.md):** new fields `x_fc_` prefix; Canadian English; Monetary = `$` + `currency_id`; declarative `models.Constraint` / `models.Index` (no `_sql_constraints`); `message_post` HTML wrapped in `Markup()`; `res.users` group field is `group_ids`.
+
+**Run tests:**
+```bash
+docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs \
+  -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+**Grounding (verified source, 2026-06-02):**
+- [`maintenance_contract.py`](../../../fusion_repairs/models/maintenance_contract.py) — contract model (fields end at `company_id`, line 81; `_booking_token_unique` constraint line 83); dead `_spawn_maintenance_contracts()` (line 198, anchors on `today`, dedups by partner/product/SO, no fee/serial/source).
+- [`repair_product_category.py`](../../../fusion_repairs/models/repair_product_category.py) — category model; `safety_critical`, `equipment_class`; `_code_unique` constraint line 56.
+- [`product_template.py`](../../../fusion_repairs/models/product_template.py) — `x_fc_repair_category_id` (line 11), `x_fc_maintenance_interval_months` (line 23, default 0).
+- [`repair_service_plan.py`](../../../fusion_repairs/models/repair_service_plan.py) — **existing** `action_confirm()` override (line 229) ending `return res` (line 250); wire the maintenance spawn here.
+
+---
+
+## File Structure
+
+- **Modify** `fusion_repairs/models/repair_product_category.py` — add maintenance-policy fields + `currency_id`.
+- **Modify** `fusion_repairs/models/product_template.py` — add `x_fc_maintenance_fee` override.
+- **Modify** `fusion_repairs/models/maintenance_contract.py` — add contract fields + indexes; add `_fc_maintenance_anchor_date`; rewrite `_spawn_maintenance_contracts`.
+- **Modify** `fusion_repairs/models/repair_service_plan.py` — call `self._spawn_maintenance_contracts()` inside `action_confirm`.
+- **Modify** `fusion_repairs/data/mail_template_data.xml` — add a fee row to the reminder template.
+- **Modify** `fusion_repairs/views/repair_product_category_views.xml` — expose the policy fields.
+- **Create** `fusion_repairs/tests/__init__.py`, `fusion_repairs/tests/test_maintenance_foundation.py`.
+- **Modify** `fusion_repairs/__manifest__.py` — bump `version` to `19.0.2.3.0`.
+
+> **Scope note:** the technician-skill field (`x_fc_maintenance_skill_id`) is deferred to **Plan 2 (booking)** because skill matching is a booking concern and the exact skills representation is an open item (spec §15). Plan 1 is enrollment + pricing only.
+
+---
+
+## Task 1: Maintenance policy fields on the equipment category
+
+**Files:**
+- Modify: `fusion_repairs/models/repair_product_category.py` (insert after `intake_template_id`, before `_code_unique` at line 56)
+- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
+
+- [ ] **Step 1: Create the tests package + write the failing test**
+
+Create `fusion_repairs/tests/__init__.py`:
+```python
+from . import test_maintenance_foundation
+```
+
+Create `fusion_repairs/tests/test_maintenance_foundation.py`:
+```python
+# -*- coding: utf-8 -*-
+from odoo.tests import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestMaintenanceFoundation(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.partner = cls.env['res.partner'].create({'name': 'Mrs. Test Client'})
+        cls.category = cls.env['fusion.repair.product.category'].create({
+            'name': 'Stair Lift', 'code': 'stairlift',
+            'equipment_class': 'lift_elevating', 'safety_critical': True,
+            'x_fc_maintenance_enabled': True,
+            'x_fc_maintenance_interval_months': 6,
+            'x_fc_maintenance_fee': 149.0,
+        })
+
+    def test_category_policy_fields_exist(self):
+        self.assertTrue(self.category.x_fc_maintenance_enabled)
+        self.assertEqual(self.category.x_fc_maintenance_interval_months, 6)
+        self.assertEqual(self.category.x_fc_maintenance_fee, 149.0)
+        self.assertTrue(self.category.currency_id)
+```
+
+- [ ] **Step 2: Run the test to verify it fails**
+
+Run:
+```bash
+docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -40
+```
+Expected: FAIL — `Invalid field 'x_fc_maintenance_enabled' on model 'fusion.repair.product.category'`.
+
+- [ ] **Step 3: Add the policy fields**
+
+In `repair_product_category.py`, insert before the `_code_unique = models.Constraint(...)` line:
+```python
+    # ── Maintenance policy (per equipment type) ──────────────────────────
+    x_fc_maintenance_enabled = fields.Boolean(
+        string='Offer Maintenance',
+        help='If set, units in this category are enrolled in recurring preventive '
+             'maintenance on sale (and via the backfill wizard).',
+    )
+    x_fc_maintenance_interval_months = fields.Integer(
+        string='Maintenance Interval (Months)', default=6,
+        help='Default months between preventive maintenance visits for this category. '
+             'Overridden by the product field of the same name when that is > 0.',
+    )
+    currency_id = fields.Many2one(
+        'res.currency', string='Currency',
+        default=lambda self: self.env.company.currency_id,
+    )
+    x_fc_maintenance_fee = fields.Monetary(
+        string='Maintenance Fee', currency_field='currency_id',
+        help='Flat fee shown to the client for a maintenance visit of this equipment type.',
+    )
+    x_fc_maintenance_service_product_id = fields.Many2one(
+        'product.product', string='Maintenance Service Product',
+        help='Optional product used when drafting the priced visit line (Plan 2). '
+             'Falls back to a generic visit product.',
+    )
+```
+
+- [ ] **Step 4: Run the test to verify it passes**
+
+Run the same command as Step 2. Expected: `test_category_policy_fields_exist` PASS.
+
+- [ ] **Step 5: Commit**
+```bash
+git add fusion_repairs/models/repair_product_category.py fusion_repairs/tests/
+git commit -m "feat(fusion_repairs): maintenance policy fields on equipment category"
+```
+
+---
+
+## Task 2: Per-product fee override
+
+**Files:**
+- Modify: `fusion_repairs/models/product_template.py` (after `x_fc_maintenance_interval_months`, line 28)
+- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
+
+- [ ] **Step 1: Write the failing test** (append to the test class)
+```python
+    def test_product_fee_override_field_exists(self):
+        tmpl = self.env['product.template'].create({
+            'name': 'Handicare Freecurve Stairlift',
+            'x_fc_repair_category_id': self.category.id,
+            'x_fc_maintenance_fee': 199.0,
+        })
+        self.assertEqual(tmpl.x_fc_maintenance_fee, 199.0)
+```
+
+- [ ] **Step 2: Run to verify it fails**
+
+Run the test command. Expected: FAIL — `Invalid field 'x_fc_maintenance_fee' on model 'product.template'`.
+
+- [ ] **Step 3: Add the field**
+
+In `product_template.py`, after the `x_fc_maintenance_interval_months` field (line 28):
+```python
+    x_fc_maintenance_fee = fields.Monetary(
+        string='Maintenance Fee (override)', currency_field='currency_id',
+        help='Per-product override of the category maintenance fee. 0 = use the category fee.',
+    )
+```
+(`product.template` already provides `currency_id`.)
+
+- [ ] **Step 4: Run to verify it passes** — `test_product_fee_override_field_exists` PASS.
+
+- [ ] **Step 5: Commit**
+```bash
+git add fusion_repairs/models/product_template.py fusion_repairs/tests/test_maintenance_foundation.py
+git commit -m "feat(fusion_repairs): per-product maintenance fee override"
+```
+
+---
+
+## Task 3: Contract model extensions (fee, source, serial, policy)
+
+**Files:**
+- Modify: `fusion_repairs/models/maintenance_contract.py` (add fields after `company_id`, line 81; add indexes near `_booking_token_unique`, line 83)
+- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
+
+- [ ] **Step 1: Write the failing test**
+```python
+    def test_contract_extension_fields_exist(self):
+        c = self.env['fusion.repair.maintenance.contract'].create({
+            'partner_id': self.partner.id,
+            'product_id': self.env['product.product'].create({'name': 'Unit'}).id,
+            'next_due_date': '2026-12-01',
+            'x_fc_source': 'sale',
+            'x_fc_device_serial': 'SN-123',
+            'x_fc_maintenance_fee': 149.0,
+        })
+        self.assertEqual(c.x_fc_source, 'sale')
+        self.assertEqual(c.x_fc_device_serial, 'SN-123')
+        self.assertEqual(c.x_fc_maintenance_fee, 149.0)
+```
+
+- [ ] **Step 2: Run to verify it fails** — `Invalid field 'x_fc_source' ...`.
+
+- [ ] **Step 3: Add the fields + indexes**
+
+In `maintenance_contract.py`, after the `company_id` field (line 81), before `_booking_token_unique`:
+```python
+    currency_id = fields.Many2one(
+        'res.currency', default=lambda self: self.env.company.currency_id,
+    )
+    x_fc_maintenance_fee = fields.Monetary(
+        string='Maintenance Fee', currency_field='currency_id',
+        help='Flat fee shown to the client for this maintenance visit.',
+    )
+    x_fc_source = fields.Selection(
+        [('sale', 'New Sale'), ('backfill', 'Backfill'),
+         ('claims', 'Claims Bridge'), ('manual', 'Manual')],
+        string='Source', default='manual', index=True,
+    )
+    x_fc_source_sale_line_id = fields.Many2one(
+        'sale.order.line', string='Source Sale Line', index=True, copy=False,
+    )
+    x_fc_device_serial = fields.Char(string='Serial (text)', index=True, copy=False)
+    x_fc_policy_category_id = fields.Many2one(
+        'fusion.repair.product.category', string='Maintenance Policy',
+    )
+```
+(Idempotency is enforced in Python — Task 4 — to support the two-regime dedup in spec §6.2; the `index=True` above covers lookups.)
+
+- [ ] **Step 4: Run to verify it passes** — `test_contract_extension_fields_exist` PASS.
+
+- [ ] **Step 5: Commit**
+```bash
+git add fusion_repairs/models/maintenance_contract.py fusion_repairs/tests/test_maintenance_foundation.py
+git commit -m "feat(fusion_repairs): maintenance contract fee/source/serial/policy fields"
+```
+
+---
+
+## Task 4: Spawn priced contracts on sale confirm (fix the dead trigger + wire it)
+
+**Files:**
+- Modify: `fusion_repairs/models/maintenance_contract.py` (rewrite `_spawn_maintenance_contracts`, lines 198-227; add `_fc_maintenance_anchor_date` helper)
+- Modify: `fusion_repairs/models/repair_service_plan.py` (call it in `action_confirm`, before `return res` at line 250)
+- Test: `fusion_repairs/tests/test_maintenance_foundation.py`
+
+- [ ] **Step 1: Write the failing tests**
+```python
+    def _make_product(self, **kw):
+        vals = {'name': 'Stairlift Unit', 'type': 'consu',
+                'x_fc_repair_category_id': self.category.id}
+        vals.update(kw)
+        return self.env['product.product'].create(vals)
+
+    def _confirm_so(self, product, commitment='2026-01-10'):
+        so = self.env['sale.order'].create({
+            'partner_id': self.partner.id,
+            'commitment_date': commitment,
+            'order_line': [(0, 0, {'product_id': product.id, 'product_uom_qty': 1})],
+        })
+        so.action_confirm()
+        return so
+
+    def _contracts_for(self, so):
+        return self.env['fusion.repair.maintenance.contract'].search(
+            [('original_sale_order_id', '=', so.id)])
+
+    def test_no_contract_when_category_not_maintainable(self):
+        cat = self.env['fusion.repair.product.category'].create(
+            {'name': 'Cane', 'code': 'cane', 'x_fc_maintenance_enabled': False})
+        so = self._confirm_so(self._make_product(x_fc_repair_category_id=cat.id))
+        self.assertFalse(self._contracts_for(so))
+
+    def test_contract_created_via_category_policy(self):
+        so = self._confirm_so(self._make_product())
+        contracts = self._contracts_for(so)
+        self.assertEqual(len(contracts), 1)
+        c = contracts
+        self.assertEqual(c.interval_months, 6)
+        self.assertEqual(c.x_fc_maintenance_fee, 149.0)
+        self.assertEqual(c.x_fc_source, 'sale')
+        self.assertEqual(c.x_fc_policy_category_id, self.category)
+        # anchor = commitment_date + 6 months
+        self.assertEqual(str(c.next_due_date), '2026-07-10')
+
+    def test_product_override_beats_category(self):
+        p = self._make_product()
+        p.product_tmpl_id.x_fc_maintenance_interval_months = 3
+        p.product_tmpl_id.x_fc_maintenance_fee = 199.0
+        so = self._confirm_so(p)
+        c = self._contracts_for(so)
+        self.assertEqual(c.interval_months, 3)
+        self.assertEqual(c.x_fc_maintenance_fee, 199.0)
+
+    def test_idempotent_on_reconfirm(self):
+        p = self._make_product()
+        so = self._confirm_so(p)
+        so._spawn_maintenance_contracts()  # call again
+        self.assertEqual(len(self._contracts_for(so)), 1)
+```
+
+- [ ] **Step 2: Run to verify they fail** — contracts not created (trigger not wired) → assertions fail.
+
+- [ ] **Step 3: Rewrite `_spawn_maintenance_contracts` + add the anchor helper**
+
+Replace the body of `_spawn_maintenance_contracts` (lines 198-227) and add the helper, in the `SaleOrder` class of `maintenance_contract.py`:
+```python
+    def _fc_maintenance_anchor_date(self, line):
+        """Best-available delivery anchor: commitment_date -> date_order -> today.
+        (Non-ADP/lift units lack a delivery date; this fallback chain handles them.)"""
+        so = line.order_id
+        anchor = so.commitment_date or so.date_order
+        return fields.Date.to_date(anchor) if anchor else fields.Date.context_today(self)
+
+    def _spawn_maintenance_contracts(self):
+        """Create a priced maintenance contract per maintainable unit on a confirmed SO.
+        Policy = product interval override, else the product's category policy.
+        Idempotent: by serial when captured, else by source sale line."""
+        Contract = self.env['fusion.repair.maintenance.contract'].sudo()
+        for so in self:
+            if so.state not in ('sale', 'done'):
+                continue
+            for line in so.order_line:
+                product = line.product_id
+                if not product:
+                    continue
+                tmpl = product.product_tmpl_id
+                category = tmpl.x_fc_repair_category_id
+                product_interval = tmpl.x_fc_maintenance_interval_months or 0
+                cat_enabled = bool(category) and category.x_fc_maintenance_enabled
+                interval = product_interval or (
+                    category.x_fc_maintenance_interval_months if cat_enabled else 0)
+                if interval <= 0 or not (product_interval > 0 or cat_enabled):
+                    continue
+                fee = tmpl.x_fc_maintenance_fee or (
+                    category.x_fc_maintenance_fee if category else 0.0)
+                # Capture serial only if fusion_claims' line field is present.
+                serial = ''
+                if 'x_fc_serial_number' in line._fields:
+                    serial = (line.x_fc_serial_number or '').strip()
+                # Idempotency: serial regime vs source-line regime (spec §6.2).
+                if serial:
+                    dedup = [('state', '=', 'active'), ('x_fc_device_serial', '=', serial)]
+                else:
+                    dedup = [('state', '=', 'active'),
+                             ('x_fc_source_sale_line_id', '=', line.id)]
+                if Contract.search_count(dedup):
+                    continue
+                anchor = so._fc_maintenance_anchor_date(line)
+                # One contract per serialized unit; without a serial, per quantity.
+                count = 1 if serial else max(int(line.product_uom_qty or 1), 1)
+                for _i in range(count):
+                    Contract.create({
+                        'partner_id': so.partner_id.id,
+                        'product_id': product.id,
+                        'original_sale_order_id': so.id,
+                        'x_fc_source_sale_line_id': line.id,
+                        'x_fc_source': 'sale',
+                        'x_fc_device_serial': serial,
+                        'x_fc_policy_category_id': category.id if category else False,
+                        'interval_months': interval,
+                        'x_fc_maintenance_fee': fee,
+                        'next_due_date': anchor + relativedelta(months=interval),
+                        'state': 'active',
+                    })
+```
+
+- [ ] **Step 4: Wire it into the existing `action_confirm`**
+
+In `repair_service_plan.py`, in `action_confirm`, change line 249-250 from:
+```python
+        self._fc_spawn_labor_warranties()
+        return res
+```
+to:
+```python
+        self._fc_spawn_labor_warranties()
+        self._spawn_maintenance_contracts()
+        return res
+```
+
+- [ ] **Step 5: Run to verify the Task-4 tests pass** — all four PASS.
+
+- [ ] **Step 6: Commit**
+```bash
+git add fusion_repairs/models/maintenance_contract.py fusion_repairs/models/repair_service_plan.py fusion_repairs/tests/test_maintenance_foundation.py
+git commit -m "feat(fusion_repairs): spawn priced maintenance contracts on sale confirm"
+```
+
+---
+
+## Task 5: Show the fee in the reminder email
+
+**Files:**
+- Modify: `fusion_repairs/data/mail_template_data.xml` (the `email_template_maintenance_due_reminder` record)
+
+- [ ] **Step 1: Read the current template**
+
+Run:
+```bash
+docker exec odoo-modsdev-app sh -c "grep -n 'email_template_maintenance_due_reminder' /mnt/odoo-modules/fusion_repairs/data/mail_template_data.xml"
+```
+Then open that record's `<field name="body_html">` and find the equipment-name / due-date details table (the green-accent reminder).
+
+- [ ] **Step 2: Add a fee row to the details table**
+
+Inside the details table of the reminder body, after the "Next due" row, add (Canadian English, `$` + currency):
+```xml
+<tr t-if="object.x_fc_maintenance_fee">
+  <td style="opacity:0.6;width:35%;">Maintenance fee</td>
+  <td><span t-field="object.x_fc_maintenance_fee"
+            t-options='{"widget": "monetary", "display_currency": object.currency_id}'/>
+      <span style="opacity:0.6;"> + applicable tax</span></td>
+</tr>
+```
+
+- [ ] **Step 3: Upgrade + manually verify the rendered email**
+
+Run:
+```bash
+docker exec odoo-modsdev-app odoo -d fusion-dev -u fusion_repairs --stop-after-init
+```
+Then in odoo-shell render the template for a contract with a fee and confirm the fee line appears:
+```bash
+docker exec odoo-modsdev-app odoo shell -d fusion-dev --no-http <<'PY'
+c = env['fusion.repair.maintenance.contract'].search([('x_fc_maintenance_fee','>',0)], limit=1)
+tpl = env.ref('fusion_repairs.email_template_maintenance_due_reminder')
+print('FEE' if 'applicable tax' in tpl._render_field('body_html', c.ids)[c.id] else 'MISSING')
+PY
+```
+Expected: `FEE`.
+
+- [ ] **Step 4: Commit**
+```bash
+git add fusion_repairs/data/mail_template_data.xml
+git commit -m "feat(fusion_repairs): show maintenance fee in due-reminder email"
+```
+
+---
+
+## Task 6: Expose policy fields in the category form + bump version
+
+**Files:**
+- Modify: `fusion_repairs/views/repair_product_category_views.xml`
+- Modify: `fusion_repairs/__manifest__.py`
+
+- [ ] **Step 1: Read the category form view**
+
+Run:
+```bash
+docker exec odoo-modsdev-app sh -c "grep -n 'fusion.repair.product.category' /mnt/odoo-modules/fusion_repairs/views/repair_product_category_views.xml | head"
+```
+Locate the `<form>` for the category.
+
+- [ ] **Step 2: Add a Maintenance group to the form**
+
+Inside the category form sheet, add:
+```xml
+<group string="Maintenance Policy">
+    <field name="x_fc_maintenance_enabled"/>
+    <field name="x_fc_maintenance_interval_months"
+           invisible="not x_fc_maintenance_enabled"/>
+    <field name="x_fc_maintenance_fee"
+           invisible="not x_fc_maintenance_enabled"/>
+    <field name="x_fc_maintenance_service_product_id"
+           invisible="not x_fc_maintenance_enabled"/>
+    <field name="currency_id" invisible="1"/>
+</group>
+```
+
+- [ ] **Step 3: Bump the version**
+
+In `fusion_repairs/__manifest__.py`, change `'version': '19.0.2.2.6',` to `'version': '19.0.2.3.0',`.
+
+- [ ] **Step 4: Upgrade + run the full test module green**
+
+Run:
+```bash
+docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -40
+```
+Expected: all `TestMaintenanceFoundation` tests PASS, 0 failures, module loads.
+
+- [ ] **Step 5: Commit**
+```bash
+git add fusion_repairs/views/repair_product_category_views.xml fusion_repairs/__manifest__.py
+git commit -m "feat(fusion_repairs): category maintenance-policy UI + version 19.0.2.3.0"
+```
+
+---
+
+## Self-Review (against the spec)
+
+- **Spec §2 D2 (flat fee per type):** Tasks 1-2 (policy on category + product override), Task 4 (fee snapshot on contract), Task 5 (fee in email). ✓
+- **Spec §3.2 gap #1 (dead trigger):** Task 4 fixes + wires `_spawn_maintenance_contracts`. ✓
+- **Spec §3.2 gap #3 (no cost shown):** Task 5. ✓
+- **Spec §5.1 / §5.2 (policy + contract fields):** Tasks 1-3. ✓
+- **Spec §6.1 (new-sale path, delivery anchor, idempotent, serial when present):** Task 4 (`_fc_maintenance_anchor_date`, two-regime dedup, guarded serial capture). ✓
+- **Deferred to Plan 2:** `x_fc_maintenance_skill_id` (skills representation is §15 open item) — noted in File Structure.
+- **No placeholders:** every code step shows complete code; the two "read first" steps (Tasks 5-6) target XML whose exact surrounding markup must be read live before editing, and give the exact snippet to insert.
+- **Type consistency:** `x_fc_maintenance_fee` Monetary + `currency_id` used identically on category, product, contract; `_spawn_maintenance_contracts` / `_fc_maintenance_anchor_date` names consistent between maintenance_contract.py and the call site in repair_service_plan.py.
+
+---
+
+## Roadmap — Plans 2–5 (write each when reached; each needs its own live-source reads per spec §15)
+
+- **Plan 2 — Technician-aware booking** (the largest build): read `fusion_tasks/models/technician_task.py` `_find_next_available_slot` (line 544) / `_get_available_gaps` (line 664) signatures + working-hours source; add `x_fc_maintenance_skill_id` to the category and confirm the `res.users.x_fc_repair_skills` representation; replace the `<input type="date">` booking page with a real slot-picker controller; on confirm create a `fusion.technician.task` (`task_type='maintenance'`) + the maintenance `repair.order`; double-book guard; office "Book maintenance" action; per-cycle `booking_token` regen in `roll_next_due_date`. Delivers: real self-serve booking.
+- **Plan 3 — Maintenance visit log + checklist**: read the visit-report wizard + the inspection-certificate (M1) API; add `fusion.repair.maintenance.visit` + `fusion.repair.maintenance.checklist.line`; seed checklists per category; issue an inspection certificate for `safety_critical` categories. Delivers: queryable per-unit history + compliance proof.
+- **Plan 4 — Backfill wizard** (two-regime, spec §6.2): `fusion.repair.maintenance.backfill.wizard`; serial dedup for ADP wheelchairs (guarded `fusion_claims` read), partner+base-product+sale-line dedup for lifts with accessory-line exclusion; stagger; dry-run report → execute. Delivers: the existing install base enrolled.
+- **Plan 5 — Office follow-up crons**: `unbooked` + `overdue` crons gated on the existing `ir.config_parameter` toggles; per-row savepoint isolation. Delivers: staff nudges when clients don't self-serve.

docs/superpowers/plans/2026-06-02-nexacloud-cutover-01-odoo-cancel-endpoint.md

@@ -0,0 +1,298 @@
+# NexaCloud→Odoo Cutover — Plan 01: Odoo subscription-cancel endpoint
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Add the one inbound endpoint NexaCloud's deprovision path needs — cancel (close) a subscription — to `fusion_centralize_billing`, with the same auth model the other endpoints already use.
+
+**Architecture:** New `fusion.billing.service._api_cancel_subscription(external_ref)` resolves the subscription via the existing `_fc_resolve_subscription`, enforces the same "partner must be linked to this service" authorization as `_api_record_usage`, and closes it with Odoo 19's native `set_close()` (→ `subscription_state='6_churn'`). A `DELETE /api/billing/v1/subscriptions/<ref>` route wraps it.
+
+**Tech Stack:** Odoo 19 Enterprise (`sale_subscription`), Python, Odoo `TransactionCase` tests.
+
+**Spec:** [`2026-06-02-nexacloud-odoo-billing-cutover-design.md`](../specs/2026-06-02-nexacloud-odoo-billing-cutover-design.md) §4.1.3
+
+---
+
+## ⚠ Test harness (supersedes any `-d nexamain` command below)
+
+**NEVER run `-u` / `--test-enable` against the live `nexamain` DB.** Tests run in an **isolated throwaway container** against a dedicated DB, reading a **separate** addons copy so the live module is never touched:
+
+```
+# 1) edit files on branch feat/nexacloud-odoo-billing-cutover, then sync the changed
+#    module files to the staging addons copy on odoo-nexa:
+#      /opt/odoo/custom-addons-staging/fusion_centralize_billing/...
+# 2) run (ssh odoo-nexa):
+docker run --rm --network odoo_odoo-network \
+  -v /opt/odoo/custom-addons-staging:/mnt/extra-addons:ro \
+  -v /opt/odoo/enterprise-addons:/mnt/enterprise-addons:ro \
+  -v /opt/odoo/odoo.conf:/etc/odoo/odoo.conf:ro \
+  -v /opt/odoo/staging-data:/var/lib/odoo \
+  odoo-nexa:19 -c /etc/odoo/odoo.conf -d fcb_test \
+  --db_host=db --db_user=odoo \
+  --addons-path=/usr/lib/python3/dist-packages/odoo/addons,/mnt/extra-addons,/mnt/enterprise-addons \
+  --test-enable --test-tags /fusion_centralize_billing:TestSubscriptionCancel \
+  -u fusion_centralize_billing --stop-after-init --no-http
+```
+- `fcb_test` is a **fresh** install DB (not a prod clone). `nexamain_staging` is a prod clone kept for later integration/importer plans.
+- **Scope each step's run to the relevant test class** (`:TestSubscriptionCancel`, `:TestSubscriptionCancelHttp`). The wider suite is **not hermetic yet** (see Plan 00) — `test_invoice_ledger` needs a configured Canadian CoA/active CAD/HST; `test_usage`/`test_webhook` collide with cloned prod data. Don't gate this plan on those.
+- The per-step `Run:` blocks below that mention `-d nexamain` are **illustrative only — use this harness instead.**
+
+> **Prerequisite — Plan 00 (make the suite hermetic):** before green-baseline TDD, fix fixtures so the whole suite passes on `fcb_test`: `setUp` should get-or-create the `nexacloud`/`cpu_seconds` records (idempotent), and a test-setup helper must ensure an active CAD currency + a Canadian CoA + a 13% HST sale tax. Tracked as its own plan; recommended before Plan 01 execution.
+
+---
+
+## Increment plan sequence (this is Plan 01 of 6)
+
+Each is its own plan doc + its own working, testable deliverable. Order reflects dependencies:
+
+1. **Odoo: subscription-cancel endpoint** ← *this doc* (unblocked; no external decisions).
+2. **Odoo: NexaCloud charge catalog** — products + `sale.subscription.plan` (`NC-PLAN-*`) + `fusion.billing.charge` (cpu_seconds quota/overage). **Blocked on confirming real NexaCloud plan pricing/quotas** (open review Q#1) before it can be written placeholder-free.
+3. **Odoo: importer go-forward subscriptions** — extend `wizards/import_wizard.py` to create one shadow `sale.order` per active deployment with go-forward `next_invoice_date`; the safety test that asserts **no past-period invoice** is the centrepiece (guards against the 2026-05-27 Lago re-bill).
+4. **NexaCloud: adapter activation** — config (`odoo_billing_base_url`/`api_key`/staged enable), customer + subscription create/cancel calls, reconciliation-amount push.
+5. **NexaCloud: control-loop receiver** — activate `/billing/webhooks/central` HMAC verify → suspend/restore/deprovision via `network_isolation`/`throttle_checker`/`resource_manager`.
+6. **Dual-run + gated flip** — operational runbook: shadow ≥1 cycle, reconcile to cent, then the reversible flip flag.
+
+---
+
+## File structure (this plan)
+
+- Modify: `fusion_centralize_billing/models/service.py` — add `_api_cancel_subscription`.
+- Modify: `fusion_centralize_billing/controllers/api.py` — add `DELETE /subscriptions/<ref>`.
+- Create: `fusion_centralize_billing/tests/test_subscription_cancel.py` — service-method + authorization tests.
+- Modify: `fusion_centralize_billing/tests/__init__.py` — import the new test module.
+
+Run tests (from `K:\Github\CLAUDE.md` workflow, adapted to odoo-nexa):
+```
+ssh odoo-nexa "docker exec odoo-nexa-app odoo -d nexamain --test-enable --test-tags /fusion_centralize_billing -u fusion_centralize_billing --stop-after-init"
+```
+
+---
+
+### Task 1: `_api_cancel_subscription` service method
+
+**Files:**
+- Modify: `fusion_centralize_billing/models/service.py` (add method after `_api_create_subscription`, ~line 250)
+- Create: `fusion_centralize_billing/tests/test_subscription_cancel.py`
+- Modify: `fusion_centralize_billing/tests/__init__.py`
+
+- [ ] **Step 0: Verify the Odoo 19 close method (do NOT code from memory — per `K:\Github\CLAUDE.md`)**
+
+Run:
+```
+ssh odoo-nexa "docker exec odoo-nexa-app grep -nE 'def set_close|def set_open|6_churn' /mnt/enterprise-addons/sale_subscription/models/sale_order.py | head"
+```
+Expected: a `def set_close(self...)` exists and sets `subscription_state='6_churn'`. If the method name differs in this build, use the actual name in Step 3 and the assertion in Step 1.
+
+- [ ] **Step 1: Write the failing test**
+
+Create `fusion_centralize_billing/tests/test_subscription_cancel.py`:
+```python
+# -*- coding: utf-8 -*-
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestSubscriptionCancel(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        self.plan = self.env['sale.subscription.plan'].sudo().create(
+            {'name': 'Monthly', 'billing_period_value': 1, 'billing_period_unit': 'month'})
+        self.product = self.env['product.product'].sudo().create(
+            {'name': 'NexaCloud Plan', 'type': 'service',
+             'recurring_invoice': True, 'list_price': 49.0})
+        self.svc_a = self.env['fusion.billing.service'].sudo().create(
+            {'name': 'NexaCloud', 'code': 'nexacloud'})
+        self.svc_b = self.env['fusion.billing.service'].sudo().create(
+            {'name': 'Other', 'code': 'other'})
+        self.svc_a._api_upsert_customer({'external_id': 'user-1', 'name': 'Acme'})
+        res = self.svc_a._api_create_subscription({
+            'external_customer_id': 'user-1', 'plan_id': self.plan.id,
+            'lines': [{'product_id': self.product.id, 'quantity': 1}]})
+        self.sub = self.env['sale.order'].browse(res['subscription_id'])
+
+    def test_cancel_closes_subscription(self):
+        self.assertEqual(self.sub.subscription_state, '3_progress')
+        res = self.svc_a._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'ok')
+        self.assertEqual(self.sub.subscription_state, '6_churn')
+
+    def test_cancel_is_idempotent(self):
+        self.svc_a._api_cancel_subscription(str(self.sub.id))
+        res = self.svc_a._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'ok')
+        self.assertEqual(self.sub.subscription_state, '6_churn')
+
+    def test_cancel_unknown_subscription_rejected(self):
+        res = self.svc_a._api_cancel_subscription('999999999')
+        self.assertEqual(res['status'], 'error')
+        self.assertEqual(res['error'], 'unknown subscription')
+
+    def test_cancel_cross_service_rejected(self):
+        # svc_b is not linked to the customer that owns self.sub
+        res = self.svc_b._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'error')
+        self.assertEqual(res['error'], 'unknown subscription')
+        self.assertEqual(self.sub.subscription_state, '3_progress')
+
+    def test_cancel_missing_id_rejected(self):
+        res = self.svc_a._api_cancel_subscription('')
+        self.assertEqual(res['status'], 'error')
+```
+
+Append to `fusion_centralize_billing/tests/__init__.py`:
+```python
+from . import test_subscription_cancel
+```
+
+- [ ] **Step 2: Run the test to verify it fails**
+
+Run:
+```
+ssh odoo-nexa "docker exec odoo-nexa-app odoo -d nexamain --test-enable --test-tags /fusion_centralize_billing:TestSubscriptionCancel -u fusion_centralize_billing --stop-after-init"
+```
+Expected: FAIL — `AttributeError: 'fusion.billing.service' object has no attribute '_api_cancel_subscription'`.
+
+- [ ] **Step 3: Implement the method**
+
+In `fusion_centralize_billing/models/service.py`, add immediately after `_api_create_subscription`:
+```python
+    def _api_cancel_subscription(self, external_ref):
+        """Cancel (close) the subscription identified by ``external_ref``.
+
+        Authorization mirrors ``_api_record_usage``: the resolved sale.order must
+        exist, be a subscription, and belong to a customer THIS service is linked
+        to. Idempotent — closing an already-churned subscription returns ok.
+        Validation (C3): an empty ref returns a 4xx-shaped error, never raises.
+        """
+        self.ensure_one()
+        if external_ref in (None, ''):
+            return {'status': 'error', 'error': 'subscription id required'}
+        sub = self._fc_resolve_subscription(external_ref)
+        linked_partners = self.account_link_ids.mapped('partner_id')
+        if not sub.exists() or not sub.is_subscription \
+                or sub.partner_id not in linked_partners:
+            return {'status': 'error', 'error': 'unknown subscription'}
+        if sub.subscription_state != '6_churn':
+            sub.set_close()
+        return {'status': 'ok', 'subscription_id': sub.id,
+                'subscription_state': sub.subscription_state}
+```
+
+- [ ] **Step 4: Run the test to verify it passes**
+
+Run:
+```
+ssh odoo-nexa "docker exec odoo-nexa-app odoo -d nexamain --test-enable --test-tags /fusion_centralize_billing:TestSubscriptionCancel -u fusion_centralize_billing --stop-after-init"
+```
+Expected: PASS — 5 tests, 0 failures. (If `set_close()` was a different name in Step 0, use that name here and re-run.)
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_centralize_billing/models/service.py fusion_centralize_billing/tests/test_subscription_cancel.py fusion_centralize_billing/tests/__init__.py
+git commit -m "feat(billing): add _api_cancel_subscription (close sub, service-scoped authz)"
+```
+
+---
+
+### Task 2: `DELETE /subscriptions/<ref>` route
+
+**Files:**
+- Modify: `fusion_centralize_billing/controllers/api.py` (add route after `post_subscription`, ~line 95)
+- Modify: `fusion_centralize_billing/tests/test_subscription_cancel.py` (add an HTTP-layer test)
+
+- [ ] **Step 1: Write the failing test (HTTP layer)**
+
+Append to `tests/test_subscription_cancel.py` a class that exercises the route through Odoo's test client. Add the import at the top of the file:
+```python
+from odoo.tests import HttpCase
+```
+Then append:
+```python
+@tagged('post_install', '-at_install')
+class TestSubscriptionCancelHttp(HttpCase):
+
+    def setUp(self):
+        super().setUp()
+        self.plan = self.env['sale.subscription.plan'].sudo().create(
+            {'name': 'Monthly', 'billing_period_value': 1, 'billing_period_unit': 'month'})
+        self.product = self.env['product.product'].sudo().create(
+            {'name': 'NexaCloud Plan', 'type': 'service',
+             'recurring_invoice': True, 'list_price': 49.0})
+        self.svc = self.env['fusion.billing.service'].sudo().create(
+            {'name': 'NexaCloud', 'code': 'nexacloud'})
+        self.raw_key = self.svc.action_generate_api_key()
+        self.svc._api_upsert_customer({'external_id': 'user-1', 'name': 'Acme'})
+        res = self.svc._api_create_subscription({
+            'external_customer_id': 'user-1', 'plan_id': self.plan.id,
+            'lines': [{'product_id': self.product.id, 'quantity': 1}]})
+        self.sub_id = res['subscription_id']
+        self.env.cr.commit()
+        self.addCleanup(self._cleanup)
+
+    def _cleanup(self):
+        self.env['sale.order'].browse(self.sub_id).sudo().unlink()
+
+    def test_delete_requires_auth(self):
+        resp = self.url_open(
+            "/api/billing/v1/subscriptions/%s" % self.sub_id,
+            method='DELETE')
+        self.assertEqual(resp.status_code, 401)
+
+    def test_delete_cancels_with_valid_key(self):
+        resp = self.url_open(
+            "/api/billing/v1/subscriptions/%s" % self.sub_id,
+            method='DELETE',
+            headers={'Authorization': 'Bearer %s' % self.raw_key})
+        self.assertEqual(resp.status_code, 200)
+        self.assertEqual(resp.json()['subscription_state'], '6_churn')
+```
+
+- [ ] **Step 2: Run the test to verify it fails**
+
+Run:
+```
+ssh odoo-nexa "docker exec odoo-nexa-app odoo -d nexamain --test-enable --test-tags /fusion_centralize_billing:TestSubscriptionCancelHttp -u fusion_centralize_billing --stop-after-init"
+```
+Expected: FAIL — the DELETE route returns 404 (route not registered) so the assertions fail.
+
+- [ ] **Step 3: Implement the route**
+
+In `fusion_centralize_billing/controllers/api.py`, add after `post_subscription`:
+```python
+    @http.route(f"{API_BASE}/subscriptions/<sub_ref>", type="http", auth="none",
+                methods=["DELETE"], csrf=False)
+    def delete_subscription(self, sub_ref, **kw):
+        service = self._authenticate()
+        if not service:
+            return self._json({"error": "unauthorized"}, status=401)
+        result = service._api_cancel_subscription(sub_ref)
+        if result.get("status") == "error":
+            status = 404 if result.get("error") == "unknown subscription" else 400
+            return self._json(result, status=status)
+        return self._json(result)
+```
+
+- [ ] **Step 4: Run the test to verify it passes**
+
+Run:
+```
+ssh odoo-nexa "docker exec odoo-nexa-app odoo -d nexamain --test-enable --test-tags /fusion_centralize_billing:TestSubscriptionCancelHttp -u fusion_centralize_billing --stop-after-init"
+```
+Expected: PASS — 2 tests, 0 failures.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_centralize_billing/controllers/api.py fusion_centralize_billing/tests/test_subscription_cancel.py
+git commit -m "feat(billing): DELETE /api/billing/v1/subscriptions/<ref> cancel route"
+```
+
+---
+
+## Self-review
+
+- **Spec coverage:** §4.1.3 "add subscription cancel (`DELETE /subscriptions/:id`)" → Tasks 1+2. ✔
+- **Placeholder scan:** none — all code is concrete; Step 0 verifies the one Odoo-internal name (`set_close`) against the live container instead of assuming.
+- **Type consistency:** `_api_cancel_subscription` returns the same `{'status','subscription_id','subscription_state'}` shape as `_api_create_subscription`; error shape matches `_api_record_usage` (`{'status':'error','error':...}`); resolver reused (`_fc_resolve_subscription`) so cross-service rejection is identical to `/usage`. ✔
+- **Authorization parity:** cancel uses the exact `not sub.exists() or not sub.is_subscription or sub.partner_id not in linked_partners` guard as `_api_record_usage`. ✔

docs/superpowers/plans/2026-06-03-service-booking-wizard-plan.md

@@ -0,0 +1,737 @@
+# Service Booking Wizard + Auto-Quote — Implementation Plan (Plan 2 of 2)
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax.
+
+**Goal:** A polished OWL "Book a Service" wizard that captures the client (incl. new clients inline), books the technician task, prices the call-out from the Plan-1 rate table, and auto-creates a draft repair Sale Order — with a correct, consistent timezone conversion.
+
+**Architecture:** TZ fix in `fusion_tasks`; everything else in `fusion_claims` (it owns the SO + the `technician.task` SO-link + Plan 1's rates). A server method `action_book_from_wizard` does the work (contact + task + SO); an OWL client action is the UI and calls it through two `jsonrpc` controller routes. Pricing is read from `fusion.service.rate` (Plan 1) — never hardcoded.
+
+**Tech Stack:** Odoo 19 (ORM, `TransactionCase`), OWL (`@odoo/owl`, standalone `rpc` from `@web/core/network/rpc`, `registry.category("actions")`), SCSS branching on `$o-webclient-color-scheme`.
+
+**Depends on:** Plan 1 (`fusion.service.rate` + `get_callout`/`get_rate`). **Spec:** `…/specs/2026-06-03-technician-service-booking-design.md`. **Mockup (UI source of truth):** `…/mockups/technician-booking-wizard.html`.
+
+---
+
+## ⚠️ Testing reality
+
+`fusion_claims` is Enterprise-only → not installable on local Community. `TransactionCase` tests run on a **Westin Enterprise clone** (see Plan 1's testing note + repo `CLAUDE.md`). OWL UI has **no unit test** — verify by manual smoke on the clone browser. Pure-Python tasks (1–4) are TDD; the OWL task (5) is build-then-smoke.
+
+**Pre-flight (rule #1 — never code from memory):** before Tasks 1, 3, 4, read the real signatures:
+```bash
+docker exec odoo-dev-app sed -n '760,800p;975,1010p;2725,2775p' \
+  /mnt/extra-addons/fusion_tasks/models/technician_task.py
+```
+Confirm `_get_local_tz`, `_compute_datetimes`/inverses, `_calculate_travel_time(origin_lat, origin_lng)` (sets `travel_distance_km`), and `_quick_travel_time`.
+
+---
+
+## File structure
+
+| File | Responsibility |
+|---|---|
+| `fusion_tasks/models/technician_task.py` *(modify ~781-798)* | tz-consistent inverses |
+| `fusion_tasks/tests/test_task_tz.py` + `__init__.py` *(create)* | tz round-trip test |
+| `fusion_claims/models/technician_task.py` *(modify)* | relax `_check_order_link`; add `x_fc_service_call_type`; pricing resolver; SO builder; `action_book_from_wizard` |
+| `fusion_claims/models/sale_order.py` *(modify)* | `x_fc_is_service_repair` flag |
+| `fusion_claims/data/service_repair_data.xml` *(create)* | "Service Repair" CRM tag |
+| `fusion_claims/controllers/__init__.py` + `controllers/service_booking.py` *(create)* | `jsonrpc` refdata + submit routes |
+| `fusion_claims/__init__.py` *(modify)* | import controllers |
+| `fusion_claims/static/src/js/service_booking/service_booking.js` *(create)* | OWL client action |
+| `fusion_claims/static/src/xml/service_booking.xml` *(create)* | OWL template (ported from mockup) |
+| `fusion_claims/static/src/scss/_service_booking_tokens.scss` + `service_booking.scss` *(create)* | styles, dark/light |
+| `fusion_claims/views/service_booking_action.xml` *(create)* | `ir.actions.client` + menu |
+| `fusion_claims/__manifest__.py` *(modify)* | assets + data + version |
+| `fusion_claims/tests/test_service_booking.py` *(create)* | resolver, SO builder, booking method |
+
+---
+
+## Task 1: Timezone-consistent inverses (`fusion_tasks`)
+
+**Files:** Modify `fusion_tasks/models/technician_task.py`; create `fusion_tasks/tests/test_task_tz.py` (+ `tests/__init__.py` if absent).
+
+- [ ] **Step 1: Write the failing test**
+
+Create `fusion_tasks/tests/test_task_tz.py`:
+
+```python
+# -*- coding: utf-8 -*-
+from datetime import date
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestTaskTz(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.env.user.tz = 'America/Toronto'  # UTC-4 in summer
+        cls.task = cls.env['fusion.technician.task'].create({
+            'scheduled_date': date(2026, 6, 3),
+            'time_start': 9.0, 'time_end': 10.0,
+        })
+
+    def test_local_to_utc_compute(self):
+        # 9:00 local Toronto (DST, -4) -> 13:00 UTC stored
+        self.assertEqual(self.task.datetime_start.hour, 13)
+
+    def test_inverse_round_trips_with_same_tz(self):
+        # writing datetime_start back must recover the same local time_start
+        self.task.datetime_start = self.task.datetime_start  # force inverse
+        self.task.flush_recordset(['datetime_start'])
+        self.assertAlmostEqual(self.task.time_start, 9.0, places=2)
+```
+
+Register in `fusion_tasks/tests/__init__.py` (create if missing):
+
+```python
+from . import test_task_tz
+```
+
+If `fusion_tasks/tests/` doesn't exist, also add `'fusion_tasks/tests'` is auto-discovered — just ensure the `__init__.py` exists.
+
+- [ ] **Step 2: Run — verify it fails** (on the clone, `--test-tags /fusion_tasks.TestTaskTz`). Expected: `test_inverse_round_trips` FAILS if user.tz ≠ company-calendar tz, or passes spuriously if they're equal — set the company `resource_calendar_id.tz` to `America/Toronto` in `setUpClass` too if needed to expose the mismatch.
+
+- [ ] **Step 3: Fix the inverses**
+
+In `fusion_tasks/models/technician_task.py`, the two inverse methods currently use `pytz.timezone(self.env.user.tz or 'UTC')`. Change **both** to use the same resolver as `_compute_datetimes`:
+
+```python
+    def _inverse_datetime_start(self):
+        """When datetime_start changes (calendar drag), update date + time. Uses the
+        SAME tz resolver as _compute_datetimes so the round-trip is consistent."""
+        import pytz
+        user_tz = self._get_local_tz()
+        for task in self:
+            if task.datetime_start:
+                local_dt = pytz.utc.localize(task.datetime_start).astimezone(user_tz)
+                task.scheduled_date = local_dt.date()
+                task.time_start = local_dt.hour + local_dt.minute / 60.0
+
+    def _inverse_datetime_end(self):
+        import pytz
+        user_tz = self._get_local_tz()
+        for task in self:
+            if task.datetime_end:
+                local_dt = pytz.utc.localize(task.datetime_end).astimezone(user_tz)
+                task.time_end = local_dt.hour + local_dt.minute / 60.0
+```
+
+(Only the `user_tz = …` line changes in each — from `pytz.timezone(self.env.user.tz or 'UTC')` to `self._get_local_tz()`.)
+
+- [ ] **Step 4: Run — verify it passes** (`--test-tags /fusion_tasks.TestTaskTz`). Expected: PASS.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_tasks/models/technician_task.py fusion_tasks/tests/test_task_tz.py fusion_tasks/tests/__init__.py
+git commit -m "fix(fusion_tasks): make datetime inverses use the same tz resolver as compute"
+```
+
+---
+
+## Task 2: Relax SO constraint + repair-SO identity (`fusion_claims`)
+
+**Files:** Modify `fusion_claims/models/technician_task.py`, `fusion_claims/models/sale_order.py`; create `fusion_claims/data/service_repair_data.xml`; modify `__manifest__.py`; test in `fusion_claims/tests/test_service_booking.py`.
+
+- [ ] **Step 1: Write the failing test**
+
+Create `fusion_claims/tests/test_service_booking.py`:
+
+```python
+# -*- coding: utf-8 -*-
+from datetime import date
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestServiceBooking(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.Task = cls.env['fusion.technician.task']
+
+    def test_task_without_order_is_allowed(self):
+        # repair for a brand-new client: no SO/PO must NOT raise
+        t = self.Task.create({'task_type': 'repair', 'scheduled_date': date(2026, 6, 3)})
+        self.assertTrue(t.id)
+
+    def test_sale_order_has_service_repair_flag(self):
+        so = self.env['sale.order'].new({})
+        self.assertIn('x_fc_is_service_repair', so._fields)
+```
+
+Register in `fusion_claims/tests/__init__.py` (append): `from . import test_service_booking`.
+
+- [ ] **Step 2: Run — verify it fails** (`--test-tags /fusion_claims.TestServiceBooking`). Expected: `test_task_without_order_is_allowed` FAILS with the ValidationError from `_check_order_link`; `test_sale_order_has_service_repair_flag` FAILS (field missing).
+
+- [ ] **Step 3: Relax the constraint**
+
+In `fusion_claims/models/technician_task.py`, replace the body of `_check_order_link` so it no longer requires an order (the wizard auto-creates one; in-shop/walk-in legitimately have none):
+
+```python
+    @api.constrains('sale_order_id', 'purchase_order_id')
+    def _check_order_link(self):
+        # Relaxed 2026-06: service bookings auto-create their SO, and in-shop /
+        # walk-in tasks may have none. No order link is required anymore.
+        return
+```
+
+(Keep the method as a no-op rather than deleting it, so any external `super()`/override chains stay intact.)
+
+- [ ] **Step 4: Add the repair flag + tag**
+
+In `fusion_claims/models/sale_order.py`, add to the `sale.order` class:
+
+```python
+    x_fc_is_service_repair = fields.Boolean(
+        string='Service Repair', copy=False,
+        help='Auto-created from the technician service booking wizard.',
+    )
+```
+
+Create `fusion_claims/data/service_repair_data.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="1">
+        <record id="tag_service_repair" model="crm.tag">
+            <field name="name">Service Repair</field>
+        </record>
+    </data>
+</odoo>
+```
+
+Register it in `__manifest__.py` `data` (after the service-rate data from Plan 1):
+
+```python
+        'data/service_repair_data.xml',
+```
+
+> `crm.tag` requires the `sale_crm`/`crm` dependency. If `fusion_claims` doesn't pull `crm`, use `sale.order.tag` — verify which tag model exists: `docker exec odoo-dev-app odoo shell -d westin-v19-ratetest -c "print('crm.tag' in env, 'sale.order' in env)"`. Default to `crm.tag` (Westin has CRM); fall back to skipping the tag and relying on the boolean flag if neither is clean.
+
+- [ ] **Step 5: Run — verify it passes.** Expected: both tests PASS.
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add fusion_claims/models/technician_task.py fusion_claims/models/sale_order.py \
+        fusion_claims/data/service_repair_data.xml fusion_claims/__manifest__.py \
+        fusion_claims/tests/test_service_booking.py fusion_claims/tests/__init__.py
+git commit -m "feat(fusion_claims): allow order-less tasks + service-repair SO flag/tag"
+```
+
+---
+
+## Task 3: `x_fc_service_call_type` + pricing resolver + SO builder (`fusion_claims`)
+
+**Files:** Modify `fusion_claims/models/technician_task.py`; test in `test_service_booking.py`.
+
+- [ ] **Step 1: Write the failing test** (append to `TestServiceBooking`):
+
+```python
+    def test_resolve_service_lines_standard_rush(self):
+        Task = self.Task
+        lines = Task._resolve_service_lines('standard', 'rush', in_shop=False, distance_km=10.0)
+        # call-out $120 + per-km line qty 20 @ $0.70
+        callout = [l for l in lines if l['price_unit'] == 120.0]
+        per_km = [l for l in lines if l['name_is_km']]
+        self.assertTrue(callout)
+        self.assertEqual(per_km[0]['product_uom_qty'], 20.0)
+        self.assertEqual(per_km[0]['price_unit'], 0.70)
+
+    def test_resolve_service_lines_in_shop_empty_callout(self):
+        lines = self.Task._resolve_service_lines('standard', 'normal', in_shop=True, distance_km=5.0)
+        self.assertEqual(lines, [])
+
+    def test_build_service_so(self):
+        partner = self.env['res.partner'].create({'name': 'Walk-in Wanda'})
+        so = self.Task._build_service_so(partner, 'standard', 'normal', False, 0.0)
+        self.assertEqual(so.state, 'draft')
+        self.assertTrue(so.x_fc_is_service_repair)
+        self.assertEqual(so.partner_id, partner)
+        self.assertEqual(so.order_line[0].price_unit, 95.0)
+```
+
+- [ ] **Step 2: Run — verify it fails** (methods undefined).
+
+- [ ] **Step 3: Add the field + resolver + builder**
+
+In `fusion_claims/models/technician_task.py`, add the field to the class:
+
+```python
+    x_fc_service_call_type = fields.Char(
+        string='Service Call Type',
+        help='Rate code resolved by the booking wizard (e.g. callout_standard_rush).',
+    )
+```
+
+Add these methods (model methods; rely on Plan 1's `fusion.service.rate`):
+
+```python
+    @api.model
+    def _resolve_service_lines(self, category, timing, in_shop, distance_km):
+        """Return a list of sale.order.line vals dicts for a service booking,
+        priced from fusion.service.rate. Empty when in-shop (labour-only, added later)."""
+        Rate = self.env['fusion.service.rate']
+        lines = []
+        callout = Rate.get_callout(category, timing, in_shop=in_shop)
+        if not callout:
+            return lines
+        lines.append({
+            'product_id': callout.product_id.id,
+            'name': callout.name,
+            'product_uom_qty': 1.0,
+            'price_unit': callout.price,
+            'name_is_km': False,
+        })
+        if callout.adds_per_km and distance_km:
+            per_km = Rate.get_rate('per_km')
+            if per_km:
+                lines.append({
+                    'product_id': per_km.product_id.id,
+                    'name': '%s — %.1f km × 2-way' % (per_km.name, distance_km),
+                    'product_uom_qty': round(distance_km * 2.0, 1),
+                    'price_unit': per_km.price,
+                    'name_is_km': True,
+                })
+        return lines
+
+    @api.model
+    def _build_service_so(self, partner, category, timing, in_shop, distance_km):
+        """Create a draft repair sale.order with the resolved call-out (+per-km) lines."""
+        line_vals = self._resolve_service_lines(category, timing, in_shop, distance_km)
+        order_lines = [(0, 0, {k: v for k, v in l.items() if k != 'name_is_km'}) for l in line_vals]
+        so_vals = {
+            'partner_id': partner.id,
+            'x_fc_is_service_repair': True,
+            'order_line': order_lines,
+        }
+        tag = self.env.ref('fusion_claims.tag_service_repair', raise_if_not_found=False)
+        if tag and 'tag_ids' in self.env['sale.order']._fields:
+            so_vals['tag_ids'] = [(4, tag.id)]
+        return self.env['sale.order'].create(so_vals)
+```
+
+> The `name_is_km` key is a test-only marker stripped before create. If `sale.order` has no `tag_ids` (no CRM), the guard skips the tag.
+
+- [ ] **Step 4: Run — verify it passes.**
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_claims/models/technician_task.py fusion_claims/tests/test_service_booking.py
+git commit -m "feat(fusion_claims): service pricing resolver + draft-SO builder from rate table"
+```
+
+---
+
+## Task 4: `action_book_from_wizard` + controller routes (`fusion_claims`)
+
+**Files:** Modify `fusion_claims/models/technician_task.py`; create `fusion_claims/controllers/__init__.py`, `controllers/service_booking.py`; modify `fusion_claims/__init__.py`; test in `test_service_booking.py`.
+
+- [ ] **Step 1: Write the failing test** (append):
+
+```python
+    def test_action_book_creates_contact_task_and_so(self):
+        payload = {
+            'cust_mode': 'new',
+            'customer': {'name': 'Nina New', 'phone': '4165550199', 'email': 'nina@x.com',
+                         'street': '88 Bloor St E', 'city': 'Toronto'},
+            'category': 'standard', 'timing': 'normal', 'in_shop': False,
+            'device': 'scooter', 'issue': "won't power on",
+            'date': '2026-06-03', 'time_start': 9.0, 'duration_hr': 1.0,
+            'technician_id': False, 'description': 'check battery',
+        }
+        res = self.Task.action_book_from_wizard(payload)
+        self.assertTrue(res['task_id'] and res['order_id'])
+        task = self.Task.browse(res['task_id'])
+        self.assertEqual(task.sale_order_id.id, res['order_id'])
+        self.assertEqual(task.sale_order_id.order_line[0].price_unit, 95.0)
+        partner = self.env['res.partner'].search([('email', '=ilike', 'nina@x.com')], limit=1)
+        self.assertTrue(partner)
+```
+
+- [ ] **Step 2: Run — verify it fails.**
+
+- [ ] **Step 3: Implement `action_book_from_wizard`**
+
+Add to `fusion_claims/models/technician_task.py` (read the travel method first — pre-flight). Distance: create the task, run its travel calc to populate `travel_distance_km`, read it for the per-km line, then attach the SO:
+
+```python
+    @api.model
+    def action_book_from_wizard(self, payload):
+        """Single entry point for the OWL booking wizard:
+        resolve/create contact -> create task -> compute distance -> build SO -> link."""
+        Partner = self.env['res.partner']
+        # 1. contact
+        cust = payload.get('customer') or {}
+        if payload.get('cust_mode') == 'new':
+            partner = False
+            email = (cust.get('email') or '').strip()
+            phone = (cust.get('phone') or '').strip()
+            if email:
+                partner = Partner.search([('email', '=ilike', email)], limit=1)
+            if not partner and phone:
+                partner = Partner.search([('phone', '=', phone)], limit=1)
+            if not partner:
+                partner = Partner.create({
+                    'name': cust.get('name') or 'Walk-in',
+                    'phone': phone or False, 'email': email or False,
+                    'street': cust.get('street') or False, 'city': cust.get('city') or False,
+                })
+        else:
+            partner = Partner.browse(int(payload.get('partner_id'))) if payload.get('partner_id') else Partner
+
+        category = payload.get('category', 'standard')
+        timing = payload.get('timing', 'normal')
+        in_shop = bool(payload.get('in_shop'))
+
+        # 2. task
+        dur = float(payload.get('duration_hr') or 1.0)
+        t_start = float(payload.get('time_start') or 9.0)
+        task_vals = {
+            'task_type': 'repair',
+            'scheduled_date': payload.get('date'),
+            'time_start': t_start, 'time_end': t_start + dur, 'duration_hours': dur,
+            'in_store': in_shop,
+            'x_fc_service_call_type': '%s_%s' % (category, timing),
+            'description': payload.get('description') or payload.get('issue') or '',
+        }
+        if payload.get('technician_id'):
+            task_vals['technician_id'] = int(payload['technician_id'])
+        if partner:
+            task_vals['client_name'] = partner.name
+            task_vals['client_phone'] = partner.phone or False
+        task = self.create(task_vals)
+
+        # 3. distance (km) for per-km, if the rate adds it and the job has a location
+        distance_km = 0.0
+        callout = self.env['fusion.service.rate'].get_callout(category, timing, in_shop=in_shop)
+        if callout and callout.adds_per_km and not in_shop and task.address_lat and task.address_lng:
+            try:
+                task._calculate_travel_time(task.address_lat, task.address_lng)  # sets travel_distance_km
+                distance_km = task.travel_distance_km or 0.0
+            except Exception:
+                distance_km = 0.0
+
+        # 4. SO + link
+        order = self._build_service_so(partner, category, timing, in_shop, distance_km) if partner else False
+        if order:
+            task.sale_order_id = order.id
+        return {'task_id': task.id, 'order_id': order.id if order else False}
+```
+
+> Verify field names against the model during the pre-flight read: `in_store` vs `in_shop`, `client_name`/`client_phone`, `address_lat`/`address_lng`, `technician_id`. Adjust the vals keys to the real field names (the screenshot shows In-Store, Client Name/Phone, Task Address). If `_calculate_travel_time` needs a different origin, pass the shop/technician start coords instead.
+
+- [ ] **Step 4: Create the controller**
+
+Create `fusion_claims/controllers/__init__.py`:
+
+```python
+from . import service_booking
+```
+
+Create `fusion_claims/controllers/service_booking.py`:
+
+```python
+# -*- coding: utf-8 -*-
+from odoo import http
+from odoo.http import request
+
+
+class ServiceBookingController(http.Controller):
+
+    @http.route('/fusion_claims/service_booking/refdata', type='jsonrpc', auth='user')
+    def refdata(self, **kw):
+        env = request.env
+        techs = env['res.users'].search([('x_fc_is_field_staff', '=', True)]) \
+            if 'x_fc_is_field_staff' in env['res.users']._fields else env['res.users'].search([])
+        rates = env['fusion.service.rate'].search([('rate_kind', '=', 'callout'), ('active', '=', True)])
+        per_km = env['fusion.service.rate'].get_rate('per_km')
+        def labour(code):
+            r = env['fusion.service.rate'].get_rate(code)
+            return r.price if r else 0.0
+        return {
+            'technicians': [{'id': t.id, 'name': t.name} for t in techs],
+            'callout_rates': [{
+                'code': r.code, 'category': r.category, 'timing': r.timing,
+                'name': r.name, 'price': r.price, 'adds_per_km': r.adds_per_km,
+            } for r in rates],
+            'per_km': per_km.price if per_km else 0.70,
+            'labour': {'onsite': labour('labour_onsite'), 'inshop': labour('labour_inshop'),
+                       'lift': labour('labour_lift')},
+        }
+
+    @http.route('/fusion_claims/service_booking/submit', type='jsonrpc', auth='user')
+    def submit(self, payload=None, **kw):
+        try:
+            return request.env['fusion.technician.task'].action_book_from_wizard(payload or {})
+        except Exception as e:
+            return {'error': str(e)}
+```
+
+Modify `fusion_claims/__init__.py` (append):
+
+```python
+from . import controllers
+```
+
+- [ ] **Step 5: Run — verify it passes** (`--test-tags /fusion_claims.TestServiceBooking`). Also `pyflakes` the controller: `docker exec odoo-dev-app python3 -m pyflakes /mnt/extra-addons/fusion_claims/controllers/service_booking.py`.
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add fusion_claims/models/technician_task.py fusion_claims/controllers/ fusion_claims/__init__.py fusion_claims/tests/test_service_booking.py
+git commit -m "feat(fusion_claims): action_book_from_wizard + jsonrpc booking routes"
+```
+
+---
+
+## Task 5: OWL booking wizard + SCSS (`fusion_claims`)
+
+**Files:** create `static/src/js/service_booking/service_booking.js`, `static/src/xml/service_booking.xml`, `static/src/scss/_service_booking_tokens.scss`, `static/src/scss/service_booking.scss`; modify `__manifest__.py` (assets). **No unit test — manual smoke.**
+
+- [ ] **Step 1: Write the OWL component**
+
+Create `fusion_claims/static/src/js/service_booking/service_booking.js`:
+
+```javascript
+/** @odoo-module **/
+import { Component, useState, onWillStart } from "@odoo/owl";
+import { registry } from "@web/core/registry";
+import { rpc } from "@web/core/network/rpc";
+import { useService } from "@web/core/utils/hooks";
+
+export class ServiceBookingWizard extends Component {
+    static template = "fusion_claims.ServiceBookingWizard";
+    static props = ["*"];
+
+    setup() {
+        this.action = useService("action");
+        this.notification = useService("notification");
+        this.state = useState({
+            custMode: "existing", customer: {name:"",phone:"",email:"",street:"",unit:"",buzz:"",city:""},
+            partnerId: false, soSearch: "",
+            device: "standard", category: "standard", timing: "normal", inShop: false, issue: "",
+            date: "", hour: 9, minute: 0, ampm: "AM", durationHr: 1.0, technicianId: false,
+            warranty: false, pod: false, emailConfirm: true, googleReview: true,
+            description: "", materials: "",
+            technicians: [], calloutRates: [], perKm: 0.70,
+            labour: {onsite:85, inshop:75, lift:110}, distanceKm: 13, saving: false,
+        });
+        onWillStart(async () => {
+            const r = await rpc("/fusion_claims/service_booking/refdata", {});
+            Object.assign(this.state, {
+                technicians: r.technicians, calloutRates: r.callout_rates,
+                perKm: r.per_km, labour: r.labour,
+            });
+        });
+    }
+    get callout() {
+        if (this.state.inShop) return null;
+        return this.state.calloutRates.find(
+            r => r.category === this.state.category && r.timing === this.state.timing) || null;
+    }
+    get labourRate() {
+        if (this.state.inShop) return this.state.labour.inshop;
+        return this.state.category === "lift" ? this.state.labour.lift : this.state.labour.onsite;
+    }
+    get estimate() {
+        const c = this.callout;
+        const callout = c ? c.price : 0;
+        const incl = (c && !c.adds_per_km) ? 0.5 : 0;
+        const billHr = Math.max(0, this.state.durationHr - incl);
+        const labour = billHr * this.labourRate;
+        const km = (c && c.adds_per_km) ? this.state.distanceKm * 2 * this.state.perKm : 0;
+        return { callout, labour, billHr, km, total: callout + labour + km, addsKm: !!(c && c.adds_per_km) };
+    }
+    get endLabel() {
+        let h = (this.state.hour % 12) + (this.state.ampm === "PM" ? 12 : 0);
+        let m = h * 60 + this.state.minute + this.state.durationHr * 60;
+        let eh = Math.floor(m / 60) % 24, em = m % 60, ap = eh >= 12 ? "PM" : "AM";
+        return `${eh % 12 || 12}:${String(em).padStart(2, "0")} ${ap}`;
+    }
+    onDevice(ev) { this.state.device = ev.target.value; this.state.category = ev.target.value === "lift" ? "lift" : "standard"; }
+    setCust(m) { this.state.custMode = m; }
+    setTiming(t) { this.state.timing = t; }
+    setAmpm(v) { this.state.ampm = v; }
+    toggleInShop() { this.state.inShop = !this.state.inShop; }
+    _timeStartFloat() { return (this.state.hour % 12) + (this.state.ampm === "PM" ? 12 : 0) + this.state.minute / 60; }
+
+    async submit() {
+        if (this.state.saving) return;
+        const s = this.state;
+        if (s.custMode === "new" && (!s.customer.name || !s.customer.phone)) {
+            this.notification.add("Client name and phone are required.", { type: "danger" }); return;
+        }
+        s.saving = true;
+        const payload = {
+            cust_mode: s.custMode, customer: s.customer, partner_id: s.partnerId, so_search: s.soSearch,
+            category: s.category, timing: s.timing, in_shop: s.inShop, device: s.device, issue: s.issue,
+            date: s.date, time_start: this._timeStartFloat(), duration_hr: s.durationHr,
+            technician_id: s.technicianId, warranty: s.warranty, pod: s.pod,
+            email_confirm: s.emailConfirm, google_review: s.googleReview,
+            description: s.description, materials: s.materials,
+        };
+        try {
+            const res = await rpc("/fusion_claims/service_booking/submit", { payload });
+            if (res.error) { this.notification.add(res.error, { type: "danger" }); s.saving = false; return; }
+            this.notification.add("Service booked — draft repair SO created.", { type: "success" });
+            this.action.doAction({
+                type: "ir.actions.act_window", res_model: "fusion.technician.task",
+                res_id: res.task_id, views: [[false, "form"]], target: "current",
+            });
+        } catch (e) {
+            this.notification.add("Booking failed: " + (e.message || e), { type: "danger" });
+            s.saving = false;
+        }
+    }
+}
+registry.category("actions").add("fusion_claims.service_booking", ServiceBookingWizard);
+```
+
+- [ ] **Step 2: Write the OWL template** — port the mockup
+
+Create `fusion_claims/static/src/xml/service_booking.xml` with `<t t-name="fusion_claims.ServiceBookingWizard">`. **Port each section from the mockup** (`docs/superpowers/mockups/technician-booking-wizard.html`) converting static HTML → OWL bindings, per this exact mapping:
+
+| Mockup element | OWL binding |
+|---|---|
+| `class="theme-btn"` | *remove* — Odoo handles dark/light via the bundle (Step 4) |
+| Customer `Existing/New` seg buttons | `t-att-class="{on: state.custMode==='existing'}"` + `t-on-click="() => setCust('existing')"` |
+| New-client inputs | `t-model="state.customer.name"` etc. (name, phone, email, street, unit, buzz, city) |
+| `<select id="device">` | `t-on-change="onDevice"` (options: scooter/powerchair/wheelchair→standard, stairlift/lift→lift, …) |
+| `<select id="callType">` | render from `state.calloutRates` with `t-foreach`; bind selection to category+timing |
+| timing seg | `t-on-click` → `setTiming('normal'|'rush'|'afterhours')` |
+| `feeAmt` / `eCall`/`eLab`/`eKm`/`eTotal` | `t-esc="estimate.callout"` etc. (format with a `fmt(n)` helper or `t-out`) |
+| in-shop switch | `t-att-class="{on: state.inShop}"` + `t-on-click="toggleInShop"` |
+| AM/PM buttons | `t-on-click` → `setAmpm('AM'|'PM')`; hour/minute `t-model.number` |
+| `endlbl` | `t-esc="endLabel"` |
+| technician `<select>` | `t-foreach="state.technicians"` + `t-model.number="state.technicianId"` |
+| switches (warranty/pod/email/review) | `t-att-class="{on: state.warranty}"` + `t-on-click="() => state.warranty = !state.warranty"` |
+| footer `Book & Create SO` | `t-on-click="submit"` `t-att-disabled="state.saving"` |
+
+Keep the mockup's class names so the SCSS (Step 3) applies unchanged. Wrap the root in `<div class="o_service_booking">…</div>`.
+
+- [ ] **Step 3: Port the SCSS (dark/light)**
+
+Create `fusion_claims/static/src/scss/_service_booking_tokens.scss` — the mockup's `:root`/`[data-theme]` token values, converted to the repo's compile-time branch (per `CLAUDE.md` dark-mode rule):
+
+```scss
+$o-webclient-color-scheme: bright !default;
+
+$_page:#eef0f3; $_panel:#e6e9ed; $_card:#ffffff; $_border:#d8dadd; $_text:#1f2430;
+$_muted:#6b7280; $_field:#ffffff; $_money:#0f7d4e; $_money-soft:#e7f6ee; // …copy the rest from the mockup :root
+
+@if $o-webclient-color-scheme == dark {
+    $_page:#14161b !global; $_panel:#1b1e24 !global; $_card:#22262d !global; $_border:#343a42 !global;
+    $_text:#e7eaef !global; $_muted:#9aa3af !global; $_field:#1a1d23 !global;
+    $_money:#34d27f !global; $_money-soft:#15281f !global; // …copy the dark values from the mockup [data-theme="dark"]
+}
+
+.o_service_booking {
+    --sb-page:#{$_page}; --sb-panel:#{$_panel}; --sb-card:#{$_card}; --sb-border:#{$_border};
+    --sb-text:#{$_text}; --sb-muted:#{$_muted}; --sb-field:#{$_field};
+    --sb-money:#{$_money}; --sb-money-soft:#{$_money-soft}; /* …rest */
+}
+```
+
+Create `fusion_claims/static/src/scss/service_booking.scss` — the mockup's component CSS, scoped under `.o_service_booking` and using the `--sb-*` vars instead of the mockup's `--page` etc. (mechanical rename). Drop the `.theme-btn` rule.
+
+- [ ] **Step 4: Register assets** in `__manifest__.py`:
+
+```python
+    'assets': {
+        'web.assets_backend': [
+            # … existing entries …
+            'fusion_claims/static/src/scss/_service_booking_tokens.scss',
+            'fusion_claims/static/src/scss/service_booking.scss',
+            'fusion_claims/static/src/js/service_booking/service_booking.js',
+            'fusion_claims/static/src/xml/service_booking.xml',
+        ],
+        'web.assets_web_dark': [
+            # dark bundle recompiles the same tokens with the dark scheme
+            'fusion_claims/static/src/scss/_service_booking_tokens.scss',
+            'fusion_claims/static/src/scss/service_booking.scss',
+        ],
+    },
+```
+
+- [ ] **Step 5: Smoke (manual, on the clone)**
+
+`-u fusion_claims`, hard-refresh. Trigger the action (Task 6) → the wizard renders; toggle a user dark-mode profile to confirm the dark bundle; book a new client → task form opens, draft SO exists with the right call-out line.
+
+- [ ] **Step 6: Commit**
+
+```bash
+git add fusion_claims/static/ fusion_claims/__manifest__.py
+git commit -m "feat(fusion_claims): OWL service-booking wizard + dark/light SCSS"
+```
+
+---
+
+## Task 6: Entry point + version bump
+
+**Files:** create `fusion_claims/views/service_booking_action.xml`; modify `__manifest__.py`.
+
+- [ ] **Step 1: Create the client action + menu**
+
+Create `fusion_claims/views/service_booking_action.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="action_service_booking_wizard" model="ir.actions.client">
+        <field name="name">Book a Service</field>
+        <field name="tag">fusion_claims.service_booking</field>
+    </record>
+
+    <menuitem id="menu_service_booking"
+              name="Book a Service"
+              parent="PARENT_MENU_XMLID"
+              action="action_service_booking_wizard"
+              sequence="1"/>
+</odoo>
+```
+
+Use the same Field-Service menu parent identified in Plan 1 Task 4 Step 2 (e.g. the technician-task app menu). Register in `__manifest__.py` `data` after the views.
+
+- [ ] **Step 2: Bump version** in `__manifest__.py` (e.g. `19.0.9.3.0` → `19.0.9.4.0`).
+
+- [ ] **Step 3: Full upgrade + all tests** (clone): `--test-tags /fusion_claims,/fusion_tasks`. Expected: all PASS.
+
+- [ ] **Step 4: End-to-end smoke (clone browser)** — *Book a Service* menu → existing customer path (SO search prefill) and new-client path; confirm task + draft repair SO + correct call-out; rush/after-hours adds the per-km line; reschedule lands at the right local time (Task 1).
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_claims/views/service_booking_action.xml fusion_claims/__manifest__.py
+git commit -m "feat(fusion_claims): Book a Service entry point + version bump"
+```
+
+---
+
+## Self-Review (done while writing)
+
+- **Spec coverage:** tz fix §8 ✓ (T1); constraint relax §6.3 ✓ (T2); repair-SO flag/tag §6.3 ✓ (T2); resolver reads rate table §7 ✓ (T3); SO builder + per-km §7 ✓ (T3); `action_book_from_wizard` (contact→task→distance→SO) §5 ✓ (T4); OWL wizard + dark/light SCSS §5 ✓ (T5); entry point §11 ✓ (T6). Estimate-as-UI-only §9 ✓ (component `estimate` getter, not written to SO).
+- **Placeholders:** none for logic. Two deliberate lookups — the menu parent xmlid (T6/Plan-1) and the field-name verification in T4 (real "read the model first" per rule #1), both concrete actions, not vague TODOs. The template/SCSS port references the **mockup** (a complete existing artifact) with an explicit element→binding mapping — concrete, not "similar to".
+- **Type/name consistency:** `_resolve_service_lines(category, timing, in_shop, distance_km)` and `_build_service_so(partner, category, timing, in_shop, distance_km)` match across T3 tests, T4 caller, and the controller. Rate codes (`callout_standard_rush`, `per_km`, `labour_onsite/inshop/lift`) match Plan 1's seed. Controller routes `/fusion_claims/service_booking/{refdata,submit}` match the OWL `rpc()` calls. `action_book_from_wizard` return shape `{task_id, order_id}` matches the component's `res.task_id`.
+- **Flagged for execution:** verify real task field names in T4 (`in_store`/`client_name`/`address_lat`…) and the `crm.tag` vs `sale.order` tag model in T2 — both have explicit verify steps.
+
+---
+
+## Execution Handoff
+
+Both plans are written:
+- **Plan 1** — `…/plans/2026-06-03-service-rates-foundation-plan.md`
+- **Plan 2** — this file.
+
+**Order:** Plan 1 → Plan 2 (Plan 2 consumes Plan 1's rate table). First move the work to a dedicated branch: `git checkout -b claude/technician-service-booking` (off `main`, *not* the fusion_schedule-fix branch).
+
+Two execution options (per the writing-plans skill):
+1. **Subagent-Driven (recommended)** — a fresh subagent per task, reviewed between tasks. Best given the Enterprise-clone test loop.
+2. **Inline Execution** — execute tasks in this session with checkpoints.
+
+**Caveat:** verification requires the Westin Enterprise clone (no local Community install). Plan to run the test/smoke steps there.

docs/superpowers/plans/2026-06-03-service-rates-foundation-plan.md

@@ -0,0 +1,718 @@
+# Service Rates Foundation — Implementation Plan (Plan 1 of 2)
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Add an editable `fusion.service.rate` table (the Westin rate card, admin-managed from a **Service Rates** menu) that the booking wizard (Plan 2) will price from.
+
+**Architecture:** A new `fusion.service.rate` model in `fusion_claims` (owns SO + products). Each row holds an editable `price` and links to a `product.product` (for SO-line description/tax/account). Seeded once (`noupdate=1`) from the rate card; admins own it thereafter. Two resolver methods (`get_callout`, `get_rate`) are the read API for Plan 2.
+
+**Tech Stack:** Odoo 19 (Python ORM, declarative `models.Constraint`, XML data/views, `TransactionCase`).
+
+**Spec:** `docs/superpowers/specs/2026-06-03-technician-service-booking-design.md` (§3, §6.1).
+
+---
+
+## ⚠️ Testing reality (read before executing)
+
+`fusion_claims` is **Enterprise-only** (depends `ai`) → it **cannot install on local `odoo-modsdev` (Community)**. Tests here are real `TransactionCase` tests but they run on a **Westin Enterprise clone** (see the repo `CLAUDE.md` *Westin Prod — Clone-Verify* section). Canonical run on the clone host:
+
+```bash
+docker exec odoo-dev-app odoo -d westin-v19-ratetest --test-enable --test-tags /fusion_claims \
+  -u fusion_claims --stop-after-init --no-http --workers 0 --log-level=test \
+  --db_host db --db_user odoo --db_password 'DevSecure2025!' 2>&1 | tail -60
+```
+
+Where a step says "Run the test", it means *on the clone*. If the clone isn't available during a step, verify the logic via `odoo shell -d <clone>` instead and check the box once confirmed. **Do not** attempt `-d modsdev` (it can't install the module).
+
+---
+
+## File structure
+
+| File | Responsibility |
+|---|---|
+| `fusion_claims/models/service_rate.py` *(create)* | `fusion.service.rate` model: fields, unique-code constraint, `get_callout` / `get_rate` resolvers |
+| `fusion_claims/models/__init__.py` *(modify)* | import `service_rate` |
+| `fusion_claims/data/service_rate_products.xml` *(create)* | seed `product.product` service products (one per rate) — `noupdate=1` |
+| `fusion_claims/data/service_rate_data.xml` *(create)* | seed `fusion.service.rate` rows linking the products — `noupdate=1` |
+| `fusion_claims/views/service_rate_views.xml` *(create)* | list + form + action + **Service Rates** menu |
+| `fusion_claims/security/ir.model.access.csv` *(modify)* | ACL: read for users, full for system/managers |
+| `fusion_claims/__manifest__.py` *(modify)* | register the 3 new data/view files; bump version |
+| `fusion_claims/tests/test_service_rate.py` *(create)* | model + resolver + seed tests |
+| `fusion_claims/tests/__init__.py` *(modify)* | import the test |
+
+---
+
+## Task 1: `fusion.service.rate` model + resolvers
+
+**Files:**
+- Create: `fusion_claims/models/service_rate.py`
+- Modify: `fusion_claims/models/__init__.py`
+- Test: `fusion_claims/tests/test_service_rate.py`, `fusion_claims/tests/__init__.py`
+
+- [ ] **Step 1: Write the failing test**
+
+Create `fusion_claims/tests/test_service_rate.py`:
+
+```python
+# -*- coding: utf-8 -*-
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestServiceRate(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.Rate = cls.env['fusion.service.rate']
+        cls.product = cls.env['product.product'].create({
+            'name': 'Test Service Product', 'type': 'service',
+        })
+
+    def _make(self, **kw):
+        vals = dict(name='Rate', code='c1', rate_kind='callout', category='standard',
+                    timing='normal', product_id=self.product.id, price=95.0, unit='fixed')
+        vals.update(kw)
+        return self.Rate.create(vals)
+
+    def test_get_callout_matches_category_and_timing(self):
+        r = self._make(code='callout_standard_normal', category='standard', timing='normal', price=95.0)
+        self._make(code='callout_lift_normal', category='lift', timing='normal', price=160.0)
+        self.assertEqual(self.Rate.get_callout('standard', 'normal'), r)
+
+    def test_get_callout_in_shop_returns_empty(self):
+        self._make(code='callout_standard_normal_b')
+        self.assertFalse(self.Rate.get_callout('standard', 'normal', in_shop=True))
+
+    def test_get_rate_by_code(self):
+        r = self._make(code='per_km', rate_kind='travel', category='na', timing='na', unit='per_km', price=0.70)
+        self.assertEqual(self.Rate.get_rate('per_km'), r)
+
+    def test_code_must_be_unique(self):
+        self._make(code='dup')
+        with self.assertRaises(Exception):
+            self._make(code='dup')
+            self.env.flush_all()
+```
+
+Register it in `fusion_claims/tests/__init__.py` (append):
+
+```python
+from . import test_service_rate
+```
+
+- [ ] **Step 2: Run the test — verify it fails**
+
+Run (on the clone): the canonical command above with `--test-tags /fusion_claims.TestServiceRate`.
+Expected: FAIL — `KeyError: 'fusion.service.rate'` (model does not exist yet).
+
+- [ ] **Step 3: Create the model**
+
+Create `fusion_claims/models/service_rate.py`:
+
+```python
+# -*- coding: utf-8 -*-
+from odoo import api, fields, models
+
+
+class FusionServiceRate(models.Model):
+    _name = 'fusion.service.rate'
+    _description = 'Field Service Rate'
+    _order = 'sequence, rate_kind, category, timing'
+
+    name = fields.Char(string='Name', required=True)
+    code = fields.Char(
+        string='Code', required=True, index=True,
+        help='Stable code used by the booking engine, e.g. callout_standard_normal, per_km.',
+    )
+    rate_kind = fields.Selection([
+        ('callout', 'Service Call-out'),
+        ('labour', 'Labour'),
+        ('travel', 'Travel / per-km'),
+        ('delivery', 'Delivery / Pickup'),
+        ('other', 'Other'),
+    ], string='Kind', required=True, default='callout')
+    category = fields.Selection([
+        ('standard', 'Standard'),
+        ('lift', 'Lift & Elevating'),
+        ('na', 'N/A'),
+    ], string='Category', default='na')
+    timing = fields.Selection([
+        ('normal', 'Normal'),
+        ('rush', 'Rush'),
+        ('afterhours', 'After-Hours'),
+        ('na', 'N/A'),
+    ], string='Timing', default='na')
+    in_shop = fields.Boolean(string='In-Shop')
+    product_id = fields.Many2one(
+        'product.product', string='Invoice Product', required=True, ondelete='restrict',
+        help='Product used on the sale-order line (description, tax, income account).',
+    )
+    price = fields.Monetary(
+        string='Rate', required=True, currency_field='currency_id',
+        help='Editable price used on the SO line and the on-screen estimate.',
+    )
+    currency_id = fields.Many2one(
+        'res.currency', string='Currency',
+        default=lambda self: self.env.company.currency_id,
+    )
+    unit = fields.Selection([
+        ('fixed', 'Flat'),
+        ('per_hour', 'Per hour'),
+        ('per_km', 'Per km'),
+    ], string='Unit', required=True, default='fixed')
+    adds_per_km = fields.Boolean(
+        string='Adds per-km travel',
+        help='Call-outs billed as $X + per-km × 2-way (rush / after-hours).',
+    )
+    included_labour_min = fields.Integer(
+        string='Included labour (min)', default=0,
+        help='Free labour minutes bundled into a service call (e.g. 30).',
+    )
+    active = fields.Boolean(string='Active', default=True)
+    sequence = fields.Integer(string='Sequence', default=10)
+
+    _unique_code = models.Constraint(
+        'UNIQUE(code)',
+        'A service-rate code must be unique.',
+    )
+
+    @api.model
+    def get_callout(self, category, timing, in_shop=False):
+        """Active call-out rate for category+timing. Empty recordset when in-shop."""
+        if in_shop:
+            return self.browse()
+        return self.search([
+            ('rate_kind', '=', 'callout'),
+            ('category', '=', category),
+            ('timing', '=', timing),
+        ], limit=1)
+
+    @api.model
+    def get_rate(self, code):
+        """Active rate row by code (e.g. 'per_km', 'labour_onsite')."""
+        return self.search([('code', '=', code)], limit=1)
+```
+
+Add to `fusion_claims/models/__init__.py` (append a line near the other imports):
+
+```python
+from . import service_rate
+```
+
+- [ ] **Step 4: Run the test — verify it passes**
+
+Run (on the clone) with `--test-tags /fusion_claims.TestServiceRate`.
+Expected: PASS (4 tests). If `test_code_must_be_unique` errors instead of failing cleanly, the unique constraint is firing — that is the pass condition (it raises).
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_claims/models/service_rate.py fusion_claims/models/__init__.py \
+        fusion_claims/tests/test_service_rate.py fusion_claims/tests/__init__.py
+git commit -m "feat(fusion_claims): add fusion.service.rate model + resolvers"
+```
+
+---
+
+## Task 2: Seed the service-rate products
+
+**Files:**
+- Create: `fusion_claims/data/service_rate_products.xml`
+- Modify: `fusion_claims/__manifest__.py`
+
+Products back each rate row (SO line description/tax/account). UoM: hour for labour, unit for everything else (per-km uses `unit` with qty = km×2 — avoids a custom km UoM). Taxes are **not** set here (matches the existing `LABOR` product convention — taxes applied per-DB by an admin).
+
+- [ ] **Step 1: Create the product seed data**
+
+Create `fusion_claims/data/service_rate_products.xml`:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="1">
+        <!-- Call-outs (unit) -->
+        <record id="product_callout_standard_normal" model="product.template">
+            <field name="name">Service Call — Standard</field>
+            <field name="default_code">SVC-STD</field>
+            <field name="type">service</field>
+            <field name="list_price">95.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_standard_rush" model="product.template">
+            <field name="name">Service Call — Standard Rush</field>
+            <field name="default_code">SVC-STD-RUSH</field>
+            <field name="type">service</field>
+            <field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_standard_afterhours" model="product.template">
+            <field name="name">Service Call — Standard After-Hours</field>
+            <field name="default_code">SVC-STD-AH</field>
+            <field name="type">service</field>
+            <field name="list_price">140.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_normal" model="product.template">
+            <field name="name">Service Call — Lift &amp; Elevating</field>
+            <field name="default_code">SVC-LIFT</field>
+            <field name="type">service</field>
+            <field name="list_price">160.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_rush" model="product.template">
+            <field name="name">Service Call — Lift &amp; Elevating Rush</field>
+            <field name="default_code">SVC-LIFT-RUSH</field>
+            <field name="type">service</field>
+            <field name="list_price">185.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_afterhours" model="product.template">
+            <field name="name">Service Call — Lift &amp; Elevating After-Hours</field>
+            <field name="default_code">SVC-LIFT-AH</field>
+            <field name="type">service</field>
+            <field name="list_price">205.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Labour (hour) -->
+        <record id="product_labour_onsite" model="product.template">
+            <field name="name">Labour — On-Site</field>
+            <field name="default_code">LAB-ONSITE</field>
+            <field name="type">service</field>
+            <field name="list_price">85.00</field>
+            <field name="uom_id" ref="uom.product_uom_hour"/>
+            <field name="uom_po_id" ref="uom.product_uom_hour"/>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_labour_lift" model="product.template">
+            <field name="name">Labour — Lift &amp; Elevating</field>
+            <field name="default_code">LAB-LIFT</field>
+            <field name="type">service</field>
+            <field name="list_price">110.00</field>
+            <field name="uom_id" ref="uom.product_uom_hour"/>
+            <field name="uom_po_id" ref="uom.product_uom_hour"/>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Travel (unit; qty = km × 2) -->
+        <record id="product_per_km" model="product.template">
+            <field name="name">Travel — per km (2-way)</field>
+            <field name="default_code">SVC-KM</field>
+            <field name="type">service</field>
+            <field name="list_price">0.70</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Delivery / pickup (unit) -->
+        <record id="product_delivery_local" model="product.template">
+            <field name="name">Delivery / Pickup — Local</field>
+            <field name="default_code">DEL-LOCAL</field>
+            <field name="type">service</field><field name="list_price">35.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_delivery_outside" model="product.template">
+            <field name="name">Delivery / Pickup — Outside Local Area</field>
+            <field name="default_code">DEL-OUT</field>
+            <field name="type">service</field><field name="list_price">60.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_delivery_rush" model="product.template">
+            <field name="name">Rush Pickup / Delivery</field>
+            <field name="default_code">DEL-RUSH</field>
+            <field name="type">service</field><field name="list_price">60.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_liftchair" model="product.template">
+            <field name="name">Lift Chair — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-LIFTCHAIR</field>
+            <field name="type">service</field><field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_hospitalbed" model="product.template">
+            <field name="name">Hospital Bed — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-BED</field>
+            <field name="type">service</field><field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_stairlift" model="product.template">
+            <field name="name">Stairlift — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-STAIRLIFT</field>
+            <field name="type">service</field><field name="list_price">300.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_removal_stairlift" model="product.template">
+            <field name="name">Stairlift — Removal</field>
+            <field name="default_code">RMV-STAIRLIFT</field>
+            <field name="type">service</field><field name="list_price">300.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+    </data>
+</odoo>
+```
+
+- [ ] **Step 2: Register in the manifest**
+
+In `fusion_claims/__manifest__.py`, add to the `data` list **immediately after** `'data/product_labor_data.xml'`:
+
+```python
+        'data/service_rate_products.xml',
+```
+
+- [ ] **Step 3: Verify load (on the clone)**
+
+Run: `docker exec odoo-dev-app odoo -d westin-v19-ratetest -u fusion_claims --stop-after-init --no-http --workers 0 --db_host db --db_user odoo --db_password 'DevSecure2025!' 2>&1 | tail -20`
+Expected: no error; module upgraded. (No test yet — products are referenced by Task 3's data.)
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add fusion_claims/data/service_rate_products.xml fusion_claims/__manifest__.py
+git commit -m "feat(fusion_claims): seed service-rate products"
+```
+
+---
+
+## Task 3: Seed the rate rows
+
+**Files:**
+- Create: `fusion_claims/data/service_rate_data.xml`
+- Modify: `fusion_claims/__manifest__.py`
+- Test: `fusion_claims/tests/test_service_rate.py`
+
+`product.template` external IDs from Task 2 resolve to a `product.product` via `.product_variant_id`. In data XML, reference the variant with `ref="product_callout_standard_normal_product_template"`? No — simplest is to point `product_id` at the template's variant using the template's xmlid is not valid for a `product.product` m2o. Use a tiny Python step instead: a `post_init`-style noupdate is awkward for m2o-to-variant. **Approach:** reference the product *variant* created automatically. Odoo creates `product.product` for each template; its xmlid is `<template_xmlid>_product_variant`? It is **not** auto-created. So we set `product_id` by searching on `default_code` in a noupdate `function`. Keep it simple and deterministic:
+
+- [ ] **Step 1: Write the failing test (seed assertions)**
+
+Append to `fusion_claims/tests/test_service_rate.py`:
+
+```python
+    def test_seeded_callouts_exist(self):
+        # standard normal $95, lift after-hours $205 are the canonical seeds
+        std = self.env.ref('fusion_claims.rate_callout_standard_normal')
+        self.assertEqual(std.price, 95.0)
+        self.assertEqual(std.rate_kind, 'callout')
+        self.assertTrue(std.product_id)
+        lift_ah = self.env.ref('fusion_claims.rate_callout_lift_afterhours')
+        self.assertEqual(lift_ah.price, 205.0)
+        self.assertTrue(lift_ah.adds_per_km)
+
+    def test_seeded_per_km(self):
+        km = self.env['fusion.service.rate'].get_rate('per_km')
+        self.assertTrue(km)
+        self.assertEqual(km.unit, 'per_km')
+        self.assertEqual(km.price, 0.70)
+```
+
+- [ ] **Step 2: Run — verify it fails**
+
+Run with `--test-tags /fusion_claims.TestServiceRate`.
+Expected: FAIL — `ValueError: External ID not found: fusion_claims.rate_callout_standard_normal`.
+
+- [ ] **Step 3: Create the rate seed data**
+
+Create `fusion_claims/data/service_rate_data.xml`. Each rate's `product_id` is set with `eval` that resolves the template's variant at load time:
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="1">
+        <!-- CALL-OUTS -->
+        <record id="rate_callout_standard_normal" model="fusion.service.rate">
+            <field name="name">Standard Service Call</field>
+            <field name="code">callout_standard_normal</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">normal</field><field name="unit">fixed</field>
+            <field name="included_labour_min">30</field><field name="price">95.0</field>
+            <field name="product_id" ref="product_callout_standard_normal_product_variant"/>
+            <field name="sequence">10</field>
+        </record>
+        <record id="rate_callout_standard_rush" model="fusion.service.rate">
+            <field name="name">Rush Service Call (Standard)</field>
+            <field name="code">callout_standard_rush</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">rush</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">120.0</field>
+            <field name="product_id" ref="product_callout_standard_rush_product_variant"/>
+            <field name="sequence">11</field>
+        </record>
+        <record id="rate_callout_standard_afterhours" model="fusion.service.rate">
+            <field name="name">After-Hours Service Call (Standard)</field>
+            <field name="code">callout_standard_afterhours</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">afterhours</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">140.0</field>
+            <field name="product_id" ref="product_callout_standard_afterhours_product_variant"/>
+            <field name="sequence">12</field>
+        </record>
+        <record id="rate_callout_lift_normal" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating Service Call</field>
+            <field name="code">callout_lift_normal</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">normal</field><field name="unit">fixed</field>
+            <field name="included_labour_min">30</field><field name="price">160.0</field>
+            <field name="product_id" ref="product_callout_lift_normal_product_variant"/>
+            <field name="sequence">20</field>
+        </record>
+        <record id="rate_callout_lift_rush" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating Rush Call</field>
+            <field name="code">callout_lift_rush</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">rush</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">185.0</field>
+            <field name="product_id" ref="product_callout_lift_rush_product_variant"/>
+            <field name="sequence">21</field>
+        </record>
+        <record id="rate_callout_lift_afterhours" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating After-Hours Call</field>
+            <field name="code">callout_lift_afterhours</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">afterhours</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">205.0</field>
+            <field name="product_id" ref="product_callout_lift_afterhours_product_variant"/>
+            <field name="sequence">22</field>
+        </record>
+
+        <!-- LABOUR -->
+        <record id="rate_labour_onsite" model="fusion.service.rate">
+            <field name="name">Labour — On-Site</field><field name="code">labour_onsite</field>
+            <field name="rate_kind">labour</field><field name="category">standard</field>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">85.0</field>
+            <field name="product_id" ref="product_labour_onsite_product_variant"/><field name="sequence">30</field>
+        </record>
+        <record id="rate_labour_lift" model="fusion.service.rate">
+            <field name="name">Labour — Lift &amp; Elevating</field><field name="code">labour_lift</field>
+            <field name="rate_kind">labour</field><field name="category">lift</field>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">110.0</field>
+            <field name="product_id" ref="product_labour_lift_product_variant"/><field name="sequence">31</field>
+        </record>
+        <record id="rate_labour_inshop" model="fusion.service.rate">
+            <field name="name">Labour — In-Shop</field><field name="code">labour_inshop</field>
+            <field name="rate_kind">labour</field><field name="category">na</field><field name="in_shop" eval="True"/>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">75.0</field>
+            <field name="product_id" ref="product_labor_hourly_product_variant"/><field name="sequence">32</field>
+        </record>
+
+        <!-- TRAVEL -->
+        <record id="rate_per_km" model="fusion.service.rate">
+            <field name="name">Travel — per km (2-way)</field><field name="code">per_km</field>
+            <field name="rate_kind">travel</field><field name="category">na</field>
+            <field name="timing">na</field><field name="unit">per_km</field><field name="price">0.70</field>
+            <field name="product_id" ref="product_per_km_product_variant"/><field name="sequence">40</field>
+        </record>
+
+        <!-- DELIVERY / PICKUP -->
+        <record id="rate_delivery_local" model="fusion.service.rate">
+            <field name="name">Delivery / Pickup — Local</field><field name="code">delivery_local</field>
+            <field name="rate_kind">delivery</field><field name="category">na</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">35.0</field>
+            <field name="product_id" ref="product_delivery_local_product_variant"/><field name="sequence">50</field>
+        </record>
+        <record id="rate_delivery_outside" model="fusion.service.rate">
+            <field name="name">Delivery / Pickup — Outside Local Area</field><field name="code">delivery_outside</field>
+            <field name="rate_kind">delivery</field><field name="category">na</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">60.0</field>
+            <field name="product_id" ref="product_delivery_outside_product_variant"/><field name="sequence">51</field>
+        </record>
+        <record id="rate_setup_stairlift" model="fusion.service.rate">
+            <field name="name">Stairlift — Delivery &amp; Set-up</field><field name="code">setup_stairlift</field>
+            <field name="rate_kind">delivery</field><field name="category">lift</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">300.0</field>
+            <field name="product_id" ref="product_setup_stairlift_product_variant"/><field name="sequence">52</field>
+        </record>
+    </data>
+</odoo>
+```
+
+> **Note on `_product_variant` refs:** Odoo auto-creates the `product.product` for a single-variant `product.template` and assigns it the external ID `<template_xmlid>_product_variant`. This is the supported way to reference the variant from data XML. (The existing in-shop labour reuses `product_labor_hourly` from `product_labor_data.xml`, hence `product_labor_hourly_product_variant`.) If a `_product_variant` ref ever fails to resolve on your DB, the fallback is to set `product_id` via `eval="obj().env.ref('fusion_claims.product_xxx').product_variant_id.id"` — but try the `_product_variant` ref first.
+
+Register in `fusion_claims/__manifest__.py`, **immediately after** `'data/service_rate_products.xml'`:
+
+```python
+        'data/service_rate_data.xml',
+```
+
+- [ ] **Step 4: Run the test — verify it passes**
+
+Run with `--test-tags /fusion_claims.TestServiceRate` (the `-u fusion_claims` reload loads the seed first).
+Expected: PASS (all tests incl. `test_seeded_callouts_exist`, `test_seeded_per_km`).
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_claims/data/service_rate_data.xml fusion_claims/__manifest__.py fusion_claims/tests/test_service_rate.py
+git commit -m "feat(fusion_claims): seed service-rate rows from the rate card"
+```
+
+---
+
+## Task 4: Security ACL + Service Rates views & menu
+
+**Files:**
+- Modify: `fusion_claims/security/ir.model.access.csv`
+- Create: `fusion_claims/views/service_rate_views.xml`
+- Modify: `fusion_claims/__manifest__.py`
+
+- [ ] **Step 1: Add the ACL rows**
+
+Append to `fusion_claims/security/ir.model.access.csv`:
+
+```csv
+access_fusion_service_rate_user,fusion.service.rate.user,model_fusion_service_rate,base.group_user,1,0,0,0
+access_fusion_service_rate_manager,fusion.service.rate.manager,model_fusion_service_rate,base.group_system,1,1,1,1
+```
+
+(Users read rates — the wizard needs that; system/managers edit. If `fusion_claims` defines a sales-manager group, swap the second row's group for it during review.)
+
+- [ ] **Step 2: Find the parent menu**
+
+Run: `grep -n "menuitem" fusion_claims/views/*.xml fusion_tasks/views/*.xml | grep -i "id=" | head -40`
+Pick the appropriate Configuration/root menu for "Service Rates" (e.g. the fusion_claims app root or a Field-Service config menu). Record its full xmlid (e.g. `fusion_claims.menu_fusion_claims_config` or `sale.menu_sale_config`). Use it as `parent=` in Step 3.
+
+- [ ] **Step 3: Create the views**
+
+Create `fusion_claims/views/service_rate_views.xml` (replace `PARENT_MENU_XMLID` with the id found in Step 2):
+
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="fusion_service_rate_view_list" model="ir.ui.view">
+        <field name="name">fusion.service.rate.list</field>
+        <field name="model">fusion.service.rate</field>
+        <field name="arch" type="xml">
+            <list string="Service Rates" editable="bottom">
+                <field name="sequence" widget="handle"/>
+                <field name="name"/>
+                <field name="code"/>
+                <field name="rate_kind"/>
+                <field name="category"/>
+                <field name="timing"/>
+                <field name="in_shop"/>
+                <field name="unit"/>
+                <field name="price"/>
+                <field name="currency_id" column_invisible="1"/>
+                <field name="adds_per_km"/>
+                <field name="product_id"/>
+                <field name="active" widget="boolean_toggle"/>
+            </list>
+        </field>
+    </record>
+
+    <record id="fusion_service_rate_view_form" model="ir.ui.view">
+        <field name="name">fusion.service.rate.form</field>
+        <field name="model">fusion.service.rate</field>
+        <field name="arch" type="xml">
+            <form string="Service Rate">
+                <sheet>
+                    <div class="oe_title">
+                        <h1><field name="name" placeholder="e.g. Standard Service Call"/></h1>
+                    </div>
+                    <group>
+                        <group>
+                            <field name="code"/>
+                            <field name="rate_kind"/>
+                            <field name="category"/>
+                            <field name="timing"/>
+                            <field name="in_shop"/>
+                        </group>
+                        <group>
+                            <field name="price"/>
+                            <field name="currency_id" invisible="1"/>
+                            <field name="unit"/>
+                            <field name="adds_per_km"/>
+                            <field name="included_labour_min"/>
+                            <field name="product_id"/>
+                            <field name="active"/>
+                        </group>
+                    </group>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_service_rate" model="ir.actions.act_window">
+        <field name="name">Service Rates</field>
+        <field name="res_model">fusion.service.rate</field>
+        <field name="view_mode">list,form</field>
+        <field name="help" type="html">
+            <p class="o_view_nocontent_smiling_face">Define your field-service rate card</p>
+            <p>Call-out fees, labour, per-km and delivery charges used by the service booking wizard.</p>
+        </field>
+    </record>
+
+    <menuitem id="menu_fusion_service_rate"
+              name="Service Rates"
+              parent="PARENT_MENU_XMLID"
+              action="action_fusion_service_rate"
+              sequence="90"/>
+</odoo>
+```
+
+Register in `fusion_claims/__manifest__.py` `data` list, **after** `'views/res_config_settings_views.xml'` (or near the other views):
+
+```python
+        'views/service_rate_views.xml',
+```
+
+- [ ] **Step 4: Verify load + menu (on the clone)**
+
+Run the `-u fusion_claims --stop-after-init` command; expected: no error.
+Then in `odoo shell -d westin-v19-ratetest`: `env.ref('fusion_claims.action_fusion_service_rate')` resolves; `env['fusion.service.rate'].search_count([])` ≥ 14. `env.cr.rollback()`.
+
+- [ ] **Step 5: Commit**
+
+```bash
+git add fusion_claims/security/ir.model.access.csv fusion_claims/views/service_rate_views.xml fusion_claims/__manifest__.py
+git commit -m "feat(fusion_claims): Service Rates menu, list (inline-edit) + form + ACL"
+```
+
+---
+
+## Task 5: Version bump + final verify
+
+**Files:** Modify `fusion_claims/__manifest__.py`
+
+- [ ] **Step 1: Bump version**
+
+In `fusion_claims/__manifest__.py`, bump `'version'` (e.g. `19.0.9.2.0` → `19.0.9.3.0`).
+
+- [ ] **Step 2: Full upgrade + test run (on the clone)**
+
+Run the canonical test command (`--test-tags /fusion_claims.TestServiceRate`). Expected: all PASS, module upgraded, no warnings about the new data files.
+
+- [ ] **Step 3: Manual smoke (browser, on the clone)**
+
+Open *Service Rates* menu → confirm 14+ rows, prices editable inline, a new row can be added and saved. Toggle one `active` off and back.
+
+- [ ] **Step 4: Commit**
+
+```bash
+git add fusion_claims/__manifest__.py
+git commit -m "chore(fusion_claims): bump version for service-rate foundation"
+```
+
+---
+
+## Self-Review (done while writing)
+
+- **Spec coverage:** §6.1 model fields ✓ (Task 1), seed products ✓ (Task 2), seed rows incl. $185/$205 + per-km + labour + delivery ✓ (Task 3), Service Rates menu/views/ACL ✓ (Task 4), §3 values as seed ✓. Resolver API (`get_callout`/`get_rate`) ✓ (Task 1) — consumed by Plan 2.
+- **Placeholders:** none — every step has full code. The one deliberate lookup is the menu parent (Task 4 Step 2), which is a real "find the xmlid" action, not a vague TODO.
+- **Type/name consistency:** `get_callout(category, timing, in_shop)` and `get_rate(code)` signatures match the tests and the seed codes (`callout_standard_normal`, `per_km`, `labour_inshop` reusing `product_labor_hourly`). Rate `code`s match across data + tests.
+- **Gap noted for Plan 2:** the `_product_variant` external-ID convention (Task 3 note) — Plan 2's SO builder uses `rate.product_id` directly, so it's unaffected.
+
+---
+
+## Execution Handoff
+
+This is **Plan 1 of 2**. **Plan 2** (booking wizard: tz fix, constraint relax, pricing resolver consuming `get_callout`/`get_rate`, SO builder, `action_book_from_wizard`, OWL wizard + SCSS, entry point) will be written next and depends on this.
+
+Before executing: move this work to a dedicated branch (e.g. `claude/technician-service-booking`) — it's currently alongside the unrelated fusion_schedule fixes.

docs/superpowers/specs/2026-05-20-fusion-repairs-design.md

@@ -109,7 +109,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | T1 | **Open in Maps button on task** | 2 | `geo:` / Apple Maps URL; one-tap |
 | T2 | **AI pre-visit brief on mobile form** | 2 | Surfaces `x_fc_ai_summary` prominently; "What to bring" + safety flags |
 | T3 | Labour timer via fusion_clock | 3 | Tap Start/Pause; final time pre-fills visit report |
-| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_authorizer_portal`](fusion_authorizer_portal)) |
+| T4 | **Client signature on completion** | 2 | OWL signature pad on visit report wizard; attached to repair (pattern from [`fusion_portal`](fusion_portal)) |
 | T5 | "Found another issue" button | 2 | Spawn new repair from current visit, same partner, different equipment |
 | T6 | Parts replaced — serial capture | 3 | Scan/type replaced part serials; stores for OEM warranty + traceability |
 | T7 | No-show photo proof | 3 | "Client not home" → camera → photo attached → repair flagged + service-call fee added |
@@ -164,11 +164,11 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 | CL19 | **Voice input → AI transcription** | 4 | Client speaks the problem into mic, AI transcribes + classifies |
 | CL20 | **Resolution survey + Google review** | 2 | After "resolved" outcome, ask "save you time today?" + Google review CTA |
 
-### Sales rep portal (mirrors fusion_authorizer_portal pattern)
+### Sales rep portal (mirrors fusion_portal pattern)
 
 | ID | Feature | Phase | Notes |
 |----|---------|-------|-------|
-| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 11 |
+| S1 | **Sales rep web intake form** | 1 | `/my/repair/new` — same question flow as backend wizard, mobile-friendly. Reuses `is_sales_rep_portal` flag on `res.partner` from [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 11 |
 | S2 | Sales rep dashboard tile | 1 | Add "Service Calls" tile to `/my/sales-rep/dashboard` showing count of repairs they logged + recent 5 |
 | S3 | **My Service Calls** list page | 1 | `/my/repairs` — sales rep sees their submitted repairs, status, assigned tech, scheduled date |
 | S4 | View repair status from portal | 1 | `/my/repair/<id>` — read-only timeline, chatter for non-internal messages, ability to add a comment |
@@ -183,7 +183,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 
 **Routing namespace:** `/my/repair/*` (intake + my list) and a `/my/sales-rep/repairs` summary route added to the existing sales rep dashboard.
 
-**Record rule** (mirrors [`fusion_authorizer_portal/security/portal_security.xml`](fusion_authorizer_portal/security/portal_security.xml) line 129 pattern):
+**Record rule** (mirrors [`fusion_portal/security/portal_security.xml`](fusion_portal/security/portal_security.xml) line 129 pattern):
 
 ```xml
 <record id="rule_repair_order_sales_rep_portal" model="ir.rule">
@@ -236,7 +236,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
     'website',                  # QWeb portal templates
     'fusion_tasks',             # technician tasks + fusion.email.builder.mixin
     'fusion_poynt',             # payment collection
-    'fusion_authorizer_portal', # sales rep portal flag + group + dashboard scaffold
+    'fusion_portal', # sales rep portal flag + group + dashboard scaffold
 ]
 # Phase 3 soft-add: 'appointment', 'fusion_schedule' for client self-booking
 # Phase 3 soft-add: 'fusion_clock' for tech labour timer (T3)
@@ -245,7 +245,7 @@ Every feature below has been accepted for inclusion (full scope). Phase assignme
 # Phase 3 soft-add: 'fusion_ringcentral' for SMS verify (CL12) + voicemail greeting (CL16) + caller-ID launch (Phase 4)
 # Phase 4 soft-add: 'fusion_shipping', 'fusion_canada_post' for mail-in repairs (M4)
 # Soft-call (no depend) at runtime: 'fusion.api.service' via try/except per fusion-api-integration rule
-# NOTE: fusion_authorizer_portal transitively pulls fusion_claims — accepted for portal reuse
+# NOTE: fusion_portal transitively pulls fusion_claims — accepted for portal reuse
 ```
 
 Before coding any Odoo 19 view/JS, read reference files from local OrbStack Docker per project rules.
@@ -712,7 +712,7 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 ---
 
-## Sales rep portal (Phase 1 — mirrors fusion_authorizer_portal)
+## Sales rep portal (Phase 1 — mirrors fusion_portal)
 
 **Goal:** A sales rep on the road takes a client call and submits a repair request from their phone — same intake flow as backend CS wizard, no Odoo login screen.
 
@@ -720,10 +720,10 @@ Themes adapt via project SCSS rules — no hardcoded colours per CLAUDE.md.
 
 | Option | Recommendation |
 |--------|----------------|
-| **Hard depend on `fusion_authorizer_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
+| **Hard depend on `fusion_portal`** | RECOMMENDED — reuses the existing `is_sales_rep_portal` flag, `group_sales_rep_portal`, sales rep dashboard scaffolding. Transitively pulls fusion_claims (already core in your stack). |
 | Soft depend (try/except + own fallback flag) | Possible but doubles the code: own `is_sales_rep_portal` mirror + own group. Only worth it if you ever want fusion_repairs standalone. |
 
-We go with hard depend. Add `fusion_authorizer_portal` to the manifest `depends` list.
+We go with hard depend. Add `fusion_portal` to the manifest `depends` list.
 
 ### Architecture
 
@@ -740,7 +740,7 @@ flowchart LR
 
 ### Controller layout ([`controllers/portal_sales_rep_repair.py`](fusion_repairs/controllers/portal_sales_rep_repair.py))
 
-Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_authorizer_portal/controllers/portal_assessment.py`](fusion_authorizer_portal/controllers/portal_assessment.py) line 25):
+Routes scoped to `is_sales_rep_portal` users (gate at controller top, pattern from [`fusion_portal/controllers/portal_assessment.py`](fusion_portal/controllers/portal_assessment.py) line 25):
 
 | Route | Type | Purpose |
 |-------|------|---------|
@@ -767,14 +767,14 @@ Avoids the trap of two intake flows drifting out of sync.
 
 ### Templates ([`views/portal_sales_rep_templates.xml`](fusion_repairs/views/portal_sales_rep_templates.xml))
 
-QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style:
+QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style:
 
 - `portal_repair_intake_form` — multi-step (accordion or stepper) with same 5 sections as backend wizard
 - `portal_repair_list` — card list with status badge, scheduled date, tech name
 - `portal_repair_detail` — timeline + chatter
 - `portal_repair_intake_thanks` — confirmation page with "Submit Another" button (common on multi-call days)
 
-Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_authorizer_portal/controllers/portal_main.py) line 85.
+Reuses portal gradient/header style via `portal_gradient` template variable already set by [`portal_main.home()`](fusion_portal/controllers/portal_main.py) line 85.
 
 ### JS ([`static/src/js/portal_repair_intake.js`](fusion_repairs/static/src/js/portal_repair_intake.js))
 
@@ -860,7 +860,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Reused (do NOT recreate):**
 - [`fusion_tasks.group_field_technician`](fusion_tasks/security/security.xml) — for technician access to `repair.order` (parallel to existing tech task rules). Same domain `('technician_id', '=', user.id)` adapted as `('x_fc_technician_task_ids.technician_id', '=', user.id)` on repair orders
-- [`fusion_authorizer_portal.group_sales_rep_portal`](fusion_authorizer_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
+- [`fusion_portal.group_sales_rep_portal`](fusion_portal/security/portal_security.xml) — for sales rep portal access (see Sales rep portal section)
 
 **New groups specific to fusion_repairs:**
 - `group_fusion_repairs_user` — CS intake, view repairs (implied by `base.group_user`)
@@ -896,7 +896,7 @@ Extend repair order form view with Intake tab (answers), Maintenance tab, and st
 
 **Sales rep portal (S1-S4, S6, S8):**
 - Portal controllers `/my/repair/new`, `/my/repairs`, `/my/repair/<id>`
-- Mobile-friendly QWeb templates following [`fusion_authorizer_portal/views/portal_assessment_express.xml`](fusion_authorizer_portal/views/portal_assessment_express.xml) style
+- Mobile-friendly QWeb templates following [`fusion_portal/views/portal_assessment_express.xml`](fusion_portal/views/portal_assessment_express.xml) style
 - Same intake question flow as backend (via shared service layer)
 - Mobile photo / camera capture
 - Client history sidebar exposed in portal form
@@ -1137,7 +1137,7 @@ After implementation, test on local dev only:
 | Backend wizard and sales rep portal drift apart | Both call the same `fusion.repair.intake.service.create_repair_orders(payload)` AbstractModel method; no duplicate business logic |
 | Sales rep accidentally sees other reps' repairs | Record rule `('x_fc_intake_user_id', '=', user.id)` scoped to `base.group_portal`; integration test asserts cross-rep isolation |
 | Portal form abandoned mid-flow on call drop | Save partial state to `localStorage` keyed by partner + timestamp; "Resume" prompt on `/my/repair/new` if recent draft exists |
-| fusion_authorizer_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_authorizer_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
+| fusion_portal install becomes mandatory | Documented in module description; if a deployment doesn't want fusion_portal, fall back to a `fusion_repairs_portal_lite` companion module that recreates only the `is_sales_rep_portal` flag |
 | **Public form spam / abuse** | reCAPTCHA v3 + honeypot + per-IP rate limit + per-phone rate limit + SMS verify before submit (Phase 2). Block ASN ranges via Odoo's `ir.rule` if needed |
 | **AI giving unsafe medical advice** | Strict system prompt + JSON schema validation + keyword filter (rejects "diagnose", "you have", "stop using"); falls back to deterministic rules on any malformed/unsafe output; legal disclaimer "this is not medical advice" shown on every AI step |
 | **AI cost runaway from public traffic** | Hard daily/monthly budget cap via `fusion.api.service`; CAPTCHA gates AI calls; cache results for identical symptom-category pairs; deterministic fallback never costs anything |

docs/superpowers/specs/2026-05-31-fusion-clock-statutory-break-design.md

@@ -0,0 +1,256 @@
+# Fusion Clock — Province-Aware Automatic Unpaid Break (2-tier)
+
+- **Date:** 2026-05-31
+- **Module:** `fusion_clock`
+- **Version bump:** `19.0.4.0.3` → `19.0.4.1.0`
+- **Status:** Approved design, pending implementation plan
+- **Author:** Claude Code (brainstormed with user)
+
+## 1. Problem
+
+Statutory unpaid meal breaks are jurisdiction-driven: a break is required after N1
+hours of work, and a second break after a higher N2 threshold. Ontario, for example:
+a 30-minute eating period after 5 hours of work, and (per the user's policy) another
+30 minutes after 10 hours. The deduction must be **automatic** and must apply on **every**
+way an attendance is recorded — including a manager manually adding or editing hours.
+
+### Audit of current behaviour (what exists today)
+
+The deduction field is `hr.attendance.x_fclk_break_minutes` (minutes). Net hours are
+`x_fclk_net_hours = worked_hours − x_fclk_break_minutes/60` (`models/hr_attendance.py:261`).
+
+Break minutes are written from **four** places, all implementing variations of one rule:
+
+1. `controllers/clock_api.py::_apply_break_deduction` (line 161) — on **clock-out**;
+   reused by the PIN kiosk (`controllers/clock_kiosk.py:158`) and NFC kiosk
+   (`controllers/clock_nfc_kiosk.py:381`). Logic: `if worked_hours >= break_threshold_hours`
+   (default **4.0h**) → set break to `employee._get_fclk_break_minutes()` (default **30**),
+   using `max(new, current)` so it doesn't wipe penalty minutes.
+2. Auto-clock-out cron (`models/hr_attendance.py:343`) — same single-threshold write.
+3. `controllers/clock_api.py::_check_and_create_penalty` (line 140) — **adds** penalty
+   minutes into the same `x_fclk_break_minutes` field.
+
+### Gaps vs. requirement
+
+1. **Single tier only** — one threshold (4h), one break (30m). No second break.
+2. **Not applied on manual entry** — there is **no `create`/`write` override** on
+   `hr.attendance`. A manager-created or manager-edited attendance gets break `= 0`.
+   This is the central gap.
+3. **No province/country awareness** — no jurisdiction field exists anywhere (location
+   has address/timezone but no province; company has none). Threshold + amount are flat
+   global config params.
+4. **First-break default is 4h, not 5h** (Ontario is 5h).
+
+## 2. Goals / Non-goals
+
+**Goals**
+- Statutory unpaid break applies automatically based on **actual worked hours**, on every
+  path (portal, systray, PIN kiosk, NFC kiosk, auto-clock-out cron, **and manual backend
+  create/edit**).
+- Two tiers: first break after N1 hours, second break adds after N2 hours. Trigger is
+  `worked_hours >= N` (inclusive; nothing under N1).
+- Rules are defined **per province/country** in a table; an employee resolves its rule
+  from its **company's province**, with a single global default fallback.
+- **Eliminate the duplicated deduction logic** — one calculator, called everywhere.
+
+**Non-goals (YAGNI)**
+- Per-employee break-rule override (resolver is structured so this is a cheap add later).
+- GPS/location-based jurisdiction detection.
+- More than two tiers (the table is 2-tier; a 3rd break would be a future schema change).
+- Changing the *planned* break concept used for scheduled-hours math.
+
+## 3. Locked decisions
+
+| # | Decision | Choice |
+|---|---|---|
+| 1 | Rule model | **Per-province table**, 2-tier (`fusion.clock.break.rule`) |
+| 2 | Jurisdiction source | **Company province** (`company_id.state_id`) + global default fallback |
+| 3 | Override behaviour | **Fully automatic** — idempotent stored compute, recomputes on every save |
+| 4 | Planned-vs-statute | **Statutory only** — the planned/scheduled break never affects the actual deduction |
+
+## 4. Design
+
+### 4.1 New model `fusion.clock.break.rule`
+
+`models/clock_break_rule.py`, `_name = 'fusion.clock.break.rule'`,
+`_description = 'Statutory Break Rule'`, `_order = 'sequence, name'`.
+
+| Field | Type | Default | Notes |
+|---|---|---|---|
+| `name` | Char (required) | — | e.g. "Ontario" |
+| `country_id` | Many2one `res.country` | — | scopes the province picker |
+| `state_id` | Many2one `res.country.state` | — | the province; `domain` on `country_id` |
+| `is_default` | Boolean | False | global fallback when no province matches |
+| `break1_after_hours` | Float | 5.0 | first break trigger N1 |
+| `break1_minutes` | Float | 30.0 | first break amount M1 (0 = disabled) |
+| `break2_after_hours` | Float | 10.0 | second break trigger N2 |
+| `break2_minutes` | Float | 30.0 | second break amount M2 (0 = disabled) |
+| `sequence` | Integer | 10 | |
+| `active` | Boolean | True | |
+
+**Constraints** (`models.Constraint`, per repo Odoo-19 rule 9):
+- `break1_after_hours >= 0`, `break2_after_hours >= 0`, minutes `>= 0`.
+- When `break2_minutes > 0`: `break2_after_hours > break1_after_hours`
+  (a misordered second tier is a config error).
+- (Soft) at most one `is_default = True` — enforced in a Python `@api.constrains`
+  rather than a partial unique index, to give a friendly message.
+
+**Method** — `break_minutes_for(self, worked_hours)`:
+```
+self.ensure_one()
+total = 0.0
+if self.break1_minutes and worked_hours >= self.break1_after_hours:
+    total += self.break1_minutes
+if self.break2_minutes and worked_hours >= self.break2_after_hours:
+    total += self.break2_minutes
+return total
+```
+`>=` is intentional and matches the requirement ("equal to or more than N1").
+
+**Seed** (`data/clock_break_rule_data.xml`, `noupdate="1"`): one row —
+`name="Ontario"`, `state_id=base.state_ca_on`, `is_default=True`,
+`break1_after_hours=5.0`, `break1_minutes=30.0`,
+`break2_after_hours=10.0`, `break2_minutes=30.0`.
+(Acting as both the Ontario match and the global fallback for this deployment.
+Other provinces can be added as rows.)
+
+### 4.2 Jurisdiction resolver — `hr.employee._get_fclk_break_rule()`
+
+```
+self.ensure_one()
+Rule = self.env['fusion.clock.break.rule'].sudo()
+state = self.company_id.state_id
+rule = Rule.browse()
+if state:
+    rule = Rule.search([('state_id', '=', state.id)], limit=1)
+if not rule:
+    rule = Rule.search([('is_default', '=', True)], limit=1)
+return rule   # may be empty recordset → caller treats as 0 break
+```
+`sudo()` so the portal net-hours compute (run as the employee) can read the rule table
+without a direct ACL grant. Resolver is a single method → adding a per-employee override
+(`x_fclk_break_rule_id`) later is a two-line change.
+
+### 4.3 `hr.attendance` — `x_fclk_break_minutes` becomes a stored compute
+
+The field changes from a plain editable Float to a **stored computed** field — this is the
+single calculator that replaces all four write sites.
+
+```python
+x_fclk_break_minutes = fields.Float(
+    string='Break (min)',
+    compute='_compute_fclk_break_minutes',
+    store=True,
+    tracking=True,
+    help="Unpaid break deducted from worked hours: statutory break (by province "
+         "rule, from actual hours worked) plus any penalty minutes.",
+)
+
+@api.depends('worked_hours', 'check_out',
+             'x_fclk_penalty_ids.penalty_minutes', 'employee_id')
+def _compute_fclk_break_minutes(self):
+    ICP = self.env['ir.config_parameter'].sudo()
+    auto = ICP.get_param('fusion_clock.auto_deduct_break', 'True') == 'True'
+    for att in self:
+        statutory = 0.0
+        if auto and att.check_out and att.employee_id:
+            rule = att.employee_id._get_fclk_break_rule()
+            if rule:
+                statutory = rule.break_minutes_for(att.worked_hours or 0.0)
+        penalties = sum(att.x_fclk_penalty_ids.mapped('penalty_minutes'))
+        att.x_fclk_break_minutes = statutory + penalties
+```
+
+Properties:
+- **Idempotent** — same hours + same penalties always yield the same value; no drift,
+  nothing to wipe.
+- **Fires on every path** — `worked_hours` recomputes whenever `check_in`/`check_out`
+  change, so portal, kiosk, NFC, cron, **and manual backend create/edit** all recompute
+  automatically. This is what fixes the manual-entry gap.
+- **Mid-shift = 0** — `check_out` empty → statutory 0 (penalties, if any, still counted).
+- **Master toggle preserved** — `auto_deduct_break` False → statutory 0 (penalties remain).
+- `_compute_net_hours` is unchanged (still `worked_hours − break/60`); it now depends on a
+  computed-stored field, which Odoo chains correctly.
+
+The attendance form's Break field becomes read-only (consistent with "fully automatic").
+`views/hr_attendance_views.xml` updated accordingly.
+
+### 4.4 Removals (the de-duplication)
+
+| Remove | File | Replaced by |
+|---|---|---|
+| `_apply_break_deduction` method + its 3 call sites | `controllers/clock_api.py:161`, `controllers/clock_kiosk.py:158`, `controllers/clock_nfc_kiosk.py:381` | the compute |
+| cron's `x_fclk_break_minutes` write | `models/hr_attendance.py:343-346` | the compute |
+| penalty's `current_break + deduction` write | `controllers/clock_api.py:140-144` | the compute's `Σ penalty_minutes` |
+| setting `fclk_break_threshold_hours` + `fusion_clock.break_threshold_hours` | `models/res_config_settings.py:39`, seed in `data/ir_config_parameter_data.xml` | per-rule `break1_after_hours` |
+
+**Kept and untouched:** `hr.employee._get_fclk_break_minutes()`, `fusion_clock.default_break_minutes`,
+`fusion.clock.shift.break_minutes`, `fusion.clock.schedule.break_minutes` — these are the
+**planned** break (used to compute scheduled `planned_hours`), a separate concept from the
+actual worked-hours deduction. Decision #4 keeps them out of the deduction path.
+
+**Kept:** the `auto_deduct_break` master toggle (now gates the statutory portion only).
+
+### 4.5 UI / security / data
+
+- **Menu:** *Fusion Clock → Configuration → Break Rules* (new `ir.actions.act_window` +
+  list/form views in `views/clock_break_rule_views.xml`), gated to
+  `group_fusion_clock_manager`. Add the menu item in `views/clock_menus.xml`.
+- **Security:** `security/ir.model.access.csv` — `fusion.clock.break.rule`: manager =
+  full CRUD; team-lead/user = read (or none — the resolver uses sudo, so no direct grant
+  is strictly required; grant manager full, no portal access).
+- **Manifest `data`:** add `data/clock_break_rule_data.xml` (after security, before crons)
+  and `views/clock_break_rule_views.xml` (with the other config views, before
+  `clock_menus.xml`). Bump `version` to `19.0.4.1.0`.
+
+## 5. Edge cases
+
+- **No rule resolvable** (no province match, no default) → statutory 0. The seeded default
+  prevents this in practice.
+- **Company has no `state_id`** → falls to the default rule.
+- **`break2_after_hours <= break1_after_hours`** → blocked by constraint.
+- **Penalty created after clock-out** → `x_fclk_penalty_ids` change retriggers the compute;
+  final break = statutory + penalty (preserves today's combined-field semantics, reported
+  as one "Break" number).
+- **Open attendance** (no checkout) → break 0; recomputed when it's closed.
+- **Worked hours exactly at a boundary** (5.0h, 10.0h) → tier fires (`>=`).
+
+## 6. Migration / upgrade
+
+- On upgrade, flipping `x_fclk_break_minutes` to `store=True compute` makes Odoo recompute
+  it for all existing rows. For closed attendances this re-derives break from
+  `worked_hours` + linked penalties using the seeded Ontario rule — which is the intended
+  corrected value. Any historical hand-edited break values are replaced (acceptable per
+  Decision #3, "fully automatic"). Call this out in the change log.
+- No `pre`/`post` migration script is required; the recompute is automatic. (If we later
+  want to *avoid* touching very old periods, a guarded post-migrate could pin them — out of
+  scope for now.)
+
+## 7. Testing (`tests/test_break_rules.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+
+1. `break_minutes_for`: 4.99h→0, 5.0h→30, 9.99h→30, 10.0h→60.
+2. Resolver: company in Ontario → Ontario rule; company with unset/other province → default.
+3. **Manual backend create** of a closed attendance (check_in/out spanning 6h) → break 30,
+   net = worked − 0.5. **Manual edit** extending to 10h → break 60. (This is the headline
+   gap; assert it directly via `env['hr.attendance'].create(...)`, not via a controller.)
+4. Penalty additivity: 6h + one 15-min penalty record → break 45.
+5. Master toggle off (`auto_deduct_break=False`) → statutory 0 (penalty-only).
+6. Constraint: `break2_after_hours <= break1_after_hours` raises.
+
+Run (note ephemeral ports per repo CLAUDE.md):
+```
+docker exec odoo-modsdev-app odoo -d modsdev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+## 8. Rollout notes
+
+- **Dual-path write** during dev: edit files in **both** `K:\Github\odoo-modsdev\addons\fusion_clock`
+  (Docker-mounted, for tests) **and** `K:\Github\Odoo-Modules\fusion_clock` (git); commit
+  from the git path only. (Per project memory.)
+- Live target is **entech** (`odoo-entech`); deploy after local tests pass and user review.
+- Asset/version bump already covered by the manifest `version` change.
+
+## 9. Open questions
+
+None — all four design forks resolved (see §3).

docs/superpowers/specs/2026-06-02-assessment-visit-funding-design.md

@@ -0,0 +1,164 @@
+# Assessment Visit — bundled, funding-routed assessments
+
+**Date:** 2026-06-02
+**Module:** `fusion_portal` (depends on `fusion_claims`, `fusion_tasks`); live on `odoo-westin` (DB `westin-v19`)
+**Status:** Draft for review
+**Author:** Brainstormed with Gurpreet (Fusion / Westin Healthcare)
+
+---
+
+## 1. Problem & goals
+
+A sales rep visits a client's home **with an occupational therapist (OT) and the client present for only 30–45 minutes**, and the OT's time is the scarcest resource. In that window the team often does more than one assessment — a wheelchair (ADP) plus, opportunistically, accessibility products the rep spots (a ramp at the front steps, a stair lift inside, a tub cutout, a patient lift for transfers). Today each assessment is a **separate, standalone web form** that re-collects the client's details and creates its own sale order, and the front-end forms give the rep **no way to mark a case's funding source** — so March-of-Dimes work silently defaults to private pay and never reaches the MOD pipeline.
+
+**Goals**
+
+1. **One visit, many assessments, entered once.** Bundle every assessment from one home visit; capture the client + funding details a single time.
+2. **Measurement-first.** Capture measurements while the OT is present; defer client/health-card data to after they leave; let the OT sign the ADP application on the spot.
+3. **Add as you go.** The rep adds an assessment/product the instant they spot it — repeatable, with a location tag (Front / Back / Inside).
+4. **Route by funding workflow.** On completion the visit emits **one sale order per funding workflow** (ADP, March of Dimes, ODSP, WSIB, private, …) — never one combined SO, and never a separate SO per item within the same funding.
+5. **Let the rep set funding at assessment time** (the real MOD "tracking" gap).
+6. **ADP multi-device** with valid-combination rules, including a new **mobility scooter** type and a **home-accessibility hard rule** for power mobility that feeds the accessibility upsell.
+
+**Non-goals (v1):** voice/dictated entry; rebuilding the measurement math; a new MOD/ADP claim model (the pipelines already exist — we reuse them).
+
+---
+
+## 2. Current state (verified against source)
+
+- **Two assessment models, already two separate SO lineages.** `fusion.assessment` (ADP: rollator/wheelchair/powerchair) and `fusion.accessibility.assessment` (the 7 lift/mod types) each have their own `_create_draft_sale_order` (`assessment.py:587`, `accessibility_assessment.py:751`), their own `x_fc_sale_type`, and their own state machine — ADP's 24-state `x_fc_adp_application_status` vs MOD's 16-state `x_fc_mod_status`. Each guards against a second SO (`accessibility_assessment.py:503-511`). SO back-links are **scalar** Many2one: `assessment_id`, `accessibility_assessment_id` (`fusion_portal/models/sale_order.py:37,48`).
+- **SOs are born with no order lines.** Specs become a **chatter HTML note** (`_format_assessment_html_table`, `accessibility_assessment.py:815`); a human prices the draft afterward. **No per-type product mapping exists.**
+- **Funding is modelled but not on the measurement forms.** `x_fc_funding_source` (required, default `direct_private`) on the accessibility model — values `march_of_dimes`, `odsp`, `wsib`, `insurance`, `direct_private`, `other` (`accessibility_assessment.py:71-87`) — is present on the public booking form but **absent from all 7 measurement forms**, so they default to private. Canonical billing type `sale.order.x_fc_sale_type` (`fusion_claims/models/sale_order.py:320`) carries the full set incl. `adp`, `adp_odsp`, `march_of_dimes`, etc.
+- **MOD tracking already exists** as `x_fc_mod_status` (16 states) + ~60 `x_fc_mod_*` fields (HVMP reference #, vendor code, drawings, PCA, POD, approved/payment amounts, dated audit trail) + MOD views + ~7 wizards + ~40 MOD/ODSP stage emails (`fusion_claims/models/sale_order.py:438,877`). An accessibility assessment funded `march_of_dimes` already lands its SO in this pipeline at `need_to_schedule`. **The gap is purely that the rep can't choose `march_of_dimes` on the form.**
+- **Emails** are mostly Python-built via the shared `fusion.email.builder.mixin._email_build` (`fusion_tasks/models/email_builder_mixin.py:8`), gated by `ir.config_parameter` `fusion_claims.enable_email_notifications`. Completion email fires from inside `_create_draft_sale_order` (`assessment.py:847`; `accessibility_assessment.py:624`). Stage emails (`_adp_send_stage_email`, `_mod_email_build`, `_odsp_email_build`) are keyed off the SO's funding type + status, so **they keep working per-SO unchanged**.
+- **Known bug:** backend ADP `action_complete()` sends the authorizer **two** completion emails (template pair at `assessment.py:494` + inline report via `:847`). Must consolidate before fanning out across a visit.
+
+---
+
+## 3. The design
+
+### 3.1 The Visit aggregate (only net-new model)
+
+`fusion.assessment.visit` — the hub for one home visit.
+
+- **Client/context, entered once:** `partner_id`, address fields, `visit_date`, `sales_rep_id`, `authorizer_id` (OT), `x_fc_funding_source`-style default, `state` (`measuring` → `client_pending` → `done`).
+- **Links to its assessments:** `adp_assessment_ids` (One2many → `fusion.assessment`) and `accessibility_assessment_ids` (One2many → `fusion.accessibility.assessment`). Each assessment gains `visit_id`.
+- **Links to its sale orders:** `sale_order_ids` (One2many → `sale.order`) — one per funding workflow it produced.
+- On the SO side, add `visit_id`. Each assessment already carries `sale_order_id` (Many2one — `accessibility_assessment.py:153`, `assessment.py:422`), so several same-funding assessments can already point at one SO; the redundant **scalar** `assessment_id` / `accessibility_assessment_id` on the SO (`fusion_portal/models/sale_order.py:37,48`) become **One2many** (or are dropped in favour of the `sale_order_id` reverse) so an SO no longer assumes a single source assessment.
+
+Client info moves to the Visit as the single source of truth; the per-assessment `client_name`-required gate is relaxed (the model keeps the field for back-compat / standalone use but the Visit flow fills it from `partner_id`).
+
+### 3.2 Add-as-you-go workspace (portal UX)
+
+A portal "visit workspace" (reps are portal users, tablet-first):
+
+- Always-present **"+ Add"** → pick a type + location tag (Front / Back / Inside / custom) → drop **straight into the existing measurement form** for that type. No client paperwork required to start.
+- Each added assessment is a **card** showing type, location, status (To measure / Measured / Signed), and — once priced — its amount.
+- **Measurement-first:** the forms render with client fields hidden/optional; a **deferred "Client + funding" step** is completed after the OT leaves and is shared by every item.
+- The **OT signs the ADP application (Page 11)** inline on the wheelchair/ADP item, on-site, independent of client demographics (reuse `portal_assessment_express` Page-11 section + signature pad).
+- Mockups (for reference, in repo `docs/mockups/` if committed): `fusion_portal_new_approach_mockup.html`.
+
+### 3.3 Multi-instance + location tags
+
+Any type can be added **more than once**, each its own assessment record with a **location label** ("Main stairs", "Basement", "Front porch"). Two stair lifts = two assessment records (→ two lines on the same funding SO; see §3.6). A **"Same as the previous"** action copies shared options so the rep only re-enters the differing measurements.
+
+### 3.4 Per-item funding selector — the MOD gap fix
+
+Expose `x_fc_funding_source` on **each accessibility assessment** in the flow: **Private Pay / March of Dimes / ODSP / WSIB / Hardship / Insurance / Other**. This one field drives the existing `sale_type_map` → `x_fc_sale_type` → correct pipeline (MOD 16-state tracker, ODSP, hardship, …). Defaults to the previous item's funding so an all-MOD visit isn't re-picked each time. **ADP/wheelchair items are fixed to ADP** (no picker). This is the minimal change that closes the "can't mark a case as March of Dimes" gap — no new tracking model.
+
+> **Patient lift** is an accessibility/equipment item that uses this same picker — funded by March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents), so its funding is chosen per case, not fixed.
+> **`sale_type_map` gap:** `x_fc_funding_source` currently lacks `hardship` while `x_fc_sale_type` already has it (`sale_order.py:320`) — add `hardship` to the picker + a `sale_type_map` entry (`accessibility_assessment.py:771`), and review the map so every offered funding routes to a real `x_fc_sale_type`.
+> **MOD funding cap** applies to MOD items — see Resolved decision 1 (§4).
+
+### 3.5 ADP multi-device + combinations + scooter + home-access rule
+
+**Multi-device ADP order.** Today one ADP device per order; the visit allows a **valid combination** of ADP devices for one client, all landing on the **one ADP SO**. Each ADP device is an item; the combination check runs across the visit's ADP items.
+
+**Device categories:** Walker/Rollator · Manual Wheelchair · Power Wheelchair · **Scooter (new)**.
+
+**Combination rules (confirmed):**
+
+| Combination | Allowed? |
+|---|---|
+| Any single device | ✓ |
+| Walker + Manual Wheelchair | ✓ |
+| Walker + Power Wheelchair | ✓ |
+| Walker + Scooter | ✓ |
+| Manual + Power Wheelchair | ✗ |
+| Power Wheelchair + Scooter | ✗ |
+| Manual Wheelchair + Scooter | ✗ |
+| Two walkers / any duplicate | ✗ |
+
+Rule in words: **at most one "seated-mobility" device** {manual wheelchair, power wheelchair, scooter}, **optionally one walker/rollator alongside, no duplicates.** Enforced when adding/saving an ADP device.
+
+**Scooter (new ADP type) fields:** `client_weight` (exists), scooter type, **maximum travel range**, and the home-accessibility check (below). Gets its own measurement section in the ADP form, mirroring the rollator/wheelchair/powerchair sections.
+
+**Power-mobility home-accessibility hard rule.** For **scooter and power wheelchair**, a required check: *"Is the home accessible enough for the device to be used **inside and outside** the home independently — no lifting, not left outside/in the garage?"* ADP will not fund power mobility a home can't accommodate. If the answer is **No**, the visit **flags an accessibility need** and prompts the rep to add an accessibility item (ramp / porch lift, typically March of Dimes) to remediate. This is the explicit bridge between the ADP power-mobility item and the accessibility/MOD upsell.
+
+> **The power-wheelchair form is already well-optimized — do NOT change its fields.** The *only* addition there is this home-accessibility warning. The new **scooter** type gets its own section (fields above); the manual-wheelchair and rollator sections are unchanged.
+
+### 3.6 Funding-workflow grouping → one SO per workflow
+
+On visit completion, group its assessments by **funding workflow** (`x_fc_sale_type`) and create **one SO per group**:
+
+- All `march_of_dimes` items (stair lift + porch lift + tub cutout, or two stair lifts) → **one MOD SO, multiple lines** (funding permitting).
+- All ADP devices (the valid combination) → **one ADP SO**.
+- Private / ODSP / WSIB / insurance → their own SO each.
+- A separate SO appears **only when the case type changes**, never per-item within a funding.
+
+Refactor the two per-model `_create_draft_sale_order` routines into a **shared, group-aware builder** that takes a set of same-funding assessments and produces one SO, branching on funding type to stamp the right starting status field (`x_fc_adp_application_status` for ADP, `x_fc_mod_status` for MOD, etc. — mirroring `assessment.py:600-622`) and the right links. **Reuse the existing MOD/ADP/ODSP pipelines unchanged.**
+
+### 3.7 Emails
+
+- Reuse `fusion.email.builder.mixin` and the existing per-funding stage emails (they're keyed off SO type + status, so per-SO they keep working).
+- **Move the completion send to per-SO** inside the new builder (not per-assessment), and **dedupe recipients**, so a 3-item visit doesn't emit 3–6 completion emails.
+- **Fix the existing duplicate** (authorizer gets two completion emails on backend ADP completion) as part of this.
+- Make `enable_email_notifications` gating consistent across the sends the visit touches.
+
+### 3.8 Reused vs net-new
+
+- **Reused, largely untouched:** the 7 accessibility measurement forms + their JS/Python calc; the ADP Express form + Page-11 signature; the MOD/ADP/ODSP pipelines, views, wizards, and stage emails; the email branding mixin.
+- **Net-new:** the `fusion.assessment.visit` model + workspace UI; per-item funding selector on the accessibility forms; the group-aware SO builder + link-cardinality change; ADP multi-device + combination validation; scooter type + fields; power-mobility home-access rule + cross-sell flag; completion-email consolidation.
+
+---
+
+## 4. Resolved decisions
+
+1. **MOD funding cap — documented rule, light-touch in v1.** March of Dimes covers **up to $15,000 per person, lifetime**, income-gated: if the client's income is **under** that year's threshold (the threshold changes annually), MOD funds the full $15k; if **over**, MOD may **deny or partially approve**. **v1:** surface this cap as a reminder on MOD items and capture an *"income under MOD threshold? (yes / no / unknown)"* flag so the rep can judge — **do not** auto-compute lifetime used-vs-remaining across the client's prior MOD orders (the SO's existing `x_fc_mod_*` approved/payment fields already record per-order amounts). **Future:** yearly-threshold config + automatic lifetime-remaining tracking + a hard warning.
+2. **No auto pricing / products in v1.** The visit creates a **draft** SO per funding workflow and appends each assessment's specs to that SO's chatter (today's pattern); **the sales rep builds the quotation lines manually.** One SO can hold many items. No per-assessment-type product mapping. (Auto-pricing is a future expansion.)
+3. **Patient-lift funding is chosen per case** via the funding picker — March of Dimes, **ODSP**, or **Hardship** (e.g. Toronto residents) all fund it; it is not fixed (see §3.4).
+4. **Power-wheelchair form unchanged** — already well-optimized; the only addition is the **home-accessibility warning** (device usable **inside and outside** the home). The home-access rule applies to **scooter (new type, new section) and power wheelchair (warning only)**.
+
+---
+
+## 5. Phasing
+
+- **Phase 1 — Funding correctness + visit backbone:** `fusion.assessment.visit`, link-cardinality change, **funding selector on the accessibility forms** (incl. Hardship; patient-lift routing), **MOD $15k-cap reminder + income-threshold flag** (informational), group-and-route to per-workflow **draft** SOs (specs to chatter, manual pricing) reusing existing pipelines, completion-email consolidation + duplicate fix. *(Delivers the MOD-routing fix and the multi-SO split.)*
+- **Phase 2 — ADP expansion:** multi-device ADP order + combination validation, **scooter** type + fields, power-mobility **home-access hard rule** + accessibility cross-sell prompt.
+- **Phase 3 — Seamless field UX:** the full add-as-you-go workspace, measurement-first deferral, location tags, "same as previous", OT on-site sign-off polish.
+- **Later:** product-line auto-pricing, MOD funding-cap tracking, voice/quick entry.
+
+---
+
+## 6. Risks (from investigation)
+
+- **Duplicate completion emails** already live on the ADP backend path — fix before fan-out (§3.7).
+- **Scalar back-links + double-SO guards** assume one SO per assessment; grouping breaks them — must move to `visit_id` / One2many and make the guard visit-aware.
+- **Inconsistent `enable_email_notifications`** — template sends ignore the kill-switch; don't route new traffic through templates without honoring it.
+- **Label drift** `x_fc_funding_source` vs `x_fc_sale_type` (`insurance`="Private Insurance" vs "Insurance"; `direct_private`="Private Pay (Direct)" vs "Direct/Private") — keys match so routing works; align labels in any shared UI.
+- **Unreachable funding types from accessibility:** `sale_type_map` (`accessibility_assessment.py:771`) covers 6 values; decide which funding types each assessment type may emit.
+
+---
+
+## 7. Files in scope
+
+- `fusion_portal/models/assessment.py` — ADP `_create_draft_sale_order` (:587), completion email (:847), multi-device + scooter + home-access.
+- `fusion_portal/models/accessibility_assessment.py` — accessibility `_create_draft_sale_order` (:751), `action_complete` (:493), completion email (:624), funding routing.
+- `fusion_portal/models/sale_order.py` — back-links (:37,:48) → `visit_id` / One2many.
+- `fusion_portal/models/visit.py` — **new** `fusion.assessment.visit`.
+- `fusion_portal/views/portal_accessibility_forms.xml` + `portal_assessment_express.xml` — funding selector, scooter section, home-access check; workspace shell.
+- `fusion_portal/controllers/portal_main.py` (`/my/accessibility/save` :2482) + `portal_assessment.py` — visit-aware save/group/route.
+- `fusion_claims/models/sale_order.py` — reuse `x_fc_sale_type` (:320), `x_fc_mod_status` (:438), stage emails (:6876,:9038,:10063); no pipeline rebuild.
+- `fusion_tasks/models/email_builder_mixin.py` — reuse for any new visit emails.
+
+**Deployment note:** `fusion_portal` is live on `odoo-westin` (`westin-v19`, container `odoo-dev-app`). Ship per the rename/deploy procedure (backup → code sync → `-u fusion_portal` → cache-bust → restart → verify).

docs/superpowers/specs/2026-06-02-fusion-maintenance-design.md

@@ -0,0 +1,298 @@
+# fusion_maintenance — Design Spec
+
+> Automated preventive‑maintenance follow‑ups + self‑serve real‑time booking for Westin
+> medical mobility equipment (stair lifts, porch lifts, lift chairs, wheelchairs, power
+> wheelchairs/scooters), to keep clients on schedule and turn service into recurring revenue.
+
+| | |
+|---|---|
+| **Status** | Design **approved** (brainstorm dialogue 2026‑06‑02). Ready for implementation plan. |
+| **Implemented by** | **Extending `fusion_repairs`** (no new module). Version bump. |
+| **Target instance** | Westin production — host `odoo-westin` (192.168.1.40), container `odoo-dev-app`, DB `westin-v19`. One company / one DB running `fusion_claims` (live) + `fusion_repairs` (to be deployed). |
+| **Relates to** | [`docs/plans/fusion_maintenance_brainstorm.md`](../../plans/fusion_maintenance_brainstorm.md) (brief + Step 0 + sizing), [`2026-05-20-fusion-repairs-design.md`](2026-05-20-fusion-repairs-design.md) (base module). |
+| **Next step** | `writing-plans` → implementation plan. **No code until the plan is written and this spec is reviewed.** |
+
+---
+
+## 1. Goal
+
+Westin sells/services mobility equipment that needs preventive maintenance every **1–6 months
+depending on the product**. Today there is no system keeping clients on schedule. We want:
+
+1. The system **automatically emails the client** when a unit is due for maintenance.
+2. The client can **book the visit themselves** (real‑time, self‑serve, no login) **or** call the
+   office and staff book it for them.
+3. The booking **lands in our scheduling/calendar** as a real technician job.
+4. The **technician accesses and updates the maintenance log** on the visit; the system keeps the
+   full history per unit.
+5. The **next maintenance is auto‑rescheduled** → recurring loop.
+6. The client is **told the cost** up front.
+7. Outcome: clients stay on track **and** Westin gains **recurring revenue**.
+8. Design/UX stays **consistent with `fusion_claims`** (branded emails, `x_fc_` naming, Canadian
+   English, `$`+`currency_id`).
+
+## 2. Locked decisions (from the brainstorm)
+
+| # | Decision | Choice | Why |
+|---|----------|--------|-----|
+| D1 | Separate module vs. part of `fusion_repairs` | **Build into `fusion_repairs`** | The maintenance engine already lives there (~90% built); a separate module would duplicate it. fusion_repairs already owns the equipment categories, `repair.order`, technician tasks, service plans, and the Westin rate card. |
+| D2 | Pricing / revenue model | **Flat fee per equipment type** | Transparent cost to show the client; recurring per‑visit revenue. Configured per equipment **category** with per‑product override. |
+| D3 | Enrollment scope | **New sales + backfill existing install base** | The recurring revenue and "keep clients on track" value is in the *existing* base, not just future sales. |
+| D4 | Booking engine | **Technician‑aware picker on `fusion_tasks`** (NOT Enterprise `appointment`) | Clients see only slots a qualified tech is genuinely free for (route/skill‑aware); booking creates the technician task directly — one scheduling world, no appointment↔task bridge. Bonus: **no Enterprise dependency → Community‑testable locally.** |
+
+## 3. Grounding (verified, not assumed)
+
+### 3.1 What `fusion_repairs` ALREADY has (reuse — do not rebuild)
+Source: [`fusion_repairs/models/maintenance_contract.py`](../../../fusion_repairs/models/maintenance_contract.py), [`technician_task.py`](../../../fusion_repairs/models/technician_task.py), [`repair_service_plan.py`](../../../fusion_repairs/models/repair_service_plan.py), `cloud.md`.
+
+- `fusion.repair.maintenance.contract` — partner/product/lot/original_SO, `interval_months`,
+  `last_service_date`, `next_due_date`, state machine (`draft/active/paused/cancelled`),
+  `booking_token` (unique), `last_reminder_band`, `booking_repair_id`. `roll_next_due_date()`
+  advances the cycle correctly via `relativedelta`.
+- Reminder cron `cron_send_due_reminders` — daily, **30/7/1‑day** bands, per‑band dedup, queued
+  branded email `email_template_maintenance_due_reminder` with the tokenized link.
+- Public booking controller `/repairs/maintenance/book/<token>` — `auth='public'`, token‑validated,
+  already‑booked guard, thanks page.
+- `create_repair_from_booking()` — spawns a `repair.order` (`x_fc_intake_source='client_portal'`),
+  links `x_fc_maintenance_contract_id`, dedups.
+- **Roll‑forward** on technician task completion ([`technician_task.py:88`](../../../fusion_repairs/models/technician_task.py:88)): when a `task_type='maintenance'` task → `status='completed'`, sets `last_service_date`, calls `roll_next_due_date()`, posts chatter. **This is the recurring loop.**
+- Pre‑paid **service‑plan subscriptions** (`fusion.repair.service.plan.subscription`) wired to
+  `sale.order.action_confirm()` + visit burn engine (revenue primitive; optional here).
+- **Rate card** (`fusion.repair.callout.rate`, standard vs `lift_elevating`), `repair.order.x_fc_quote_total`.
+- **Equipment category taxonomy** (`fusion.repair.product.category`): stairlift / porch_lift /
+  lift_chair flagged `equipment_class=lift_elevating`, `safety_critical=True`.
+- **Inspection certificate** (`fusion.repair.inspection.certificate`, M1 — Done): PDF + expiry cron.
+- Visit‑report wizard (signature, parts, labour timer).
+- `product.template.x_fc_maintenance_interval_months` (exists, [product_template.py:23](../../../fusion_repairs/models/product_template.py:23)).
+- `fusion_tasks` availability engine: [`_find_next_available_slot(tech_id, date, ...)`](../../../fusion_tasks/models/technician_task.py:544) and [`_get_available_gaps(tech_id, date, ...)`](../../../fusion_tasks/models/technician_task.py:664) — **route‑aware** (tech start address + geocoding + travel). Tech skills on `res.users.x_fc_repair_skills`.
+
+### 3.2 The 4 gaps this spec closes
+1. **Contract auto‑creation trigger is dead code** — `_spawn_maintenance_contracts()` is defined on
+   `sale.order` ([maintenance_contract.py:198](../../../fusion_repairs/models/maintenance_contract.py:198)) but **never called**. No `action_confirm` override invokes it → no contracts exist today.
+2. **No real booking** — the booking page is a bare `<input type="date">` ("a team member will call
+   to confirm"); no availability, no slots, no calendar/task. **This is the main new build.**
+3. **No cost shown to the client** anywhere (email or booking page).
+4. **No auto tech‑task creation, no structured maintenance log, no office‑follow‑up crons**
+   (`ir.config_parameter` toggles exist; no cron/Python).
+
+### 3.3 Install‑base sizing (Westin live, 2026‑06‑02)
+- Serial numbers are captured **~only on real equipment** (parts have 0 serials) → `x_fc_serial_number`
+  is a de‑facto "trackable unit" marker and the natural **idempotency key**.
+- ADP‑side base ≈ **138 serial‑tracked units / ~136 customers** (walkers 68, wheelchairs 45, power
+  bases 7, scooters 4, +14 no‑device‑type). Funders: adp 109, direct_private 13, adp_odsp 10,
+  march_of_dimes 7. Deliveries 2022‑10 → 2026‑05.
+- **Lifts (sized 2026‑06‑02; name‑based, approximate)** — a LARGE base in Westin's Odoo: stair lifts
+  ~254 customers (416 lines incl. accessories), porch/VPL ~30 customers (75 lines), lift chairs ~41
+  customers (47 lines) — real products (Access BDD, Handicare, Serenity VPL, Pride VivaLift). **But lift
+  serial coverage is ~0** (12/416 stairlift lines, 0 VPL, 2 lift‑chair). So the serial‑as‑unit‑key
+  approach that works for ADP wheelchairs **does NOT work for lifts** — lifts must be keyed by
+  (partner + base‑unit product + sale line), excluding accessory lines (curves, rails, remotes, charging
+  stations, rentals). This splits the backfill into two regimes (§6.2).
+- Two backfill data gaps: 14 units have no device_type (need product/manual category); non‑ADP units
+  lack `x_fc_adp_delivery_date` (need an invoice/order‑date fallback anchor).
+
+## 4. Architecture
+
+Extend `fusion_repairs`. No new module, no new top‑level dependency for the core flow (booking uses
+`fusion_tasks`, already a hard dep; pricing/Poynt already deps). The optional `fusion_claims` read
+for the wheelchair backfill is a **soft** dependency (guarded `if 'fusion.claims' model present`),
+so `fusion_repairs` still installs/test‑runs without `fusion_claims` on local dev.
+
+Reuse map: contract engine (extend), `fusion.technician.task` (booking target + availability +
+roll‑forward), `repair.order` (visit container/pricing/Poynt), inspection certificate (lift
+compliance), visit‑report wizard (extend with checklist), branded email pattern, rate card.
+
+## 5. Data model
+
+All new fields `x_fc_`, Canadian English labels, Monetary = `$` + `currency_id`.
+
+### 5.1 Maintenance policy — on `fusion.repair.product.category` ("per equipment type")
+- `x_fc_maintenance_enabled` (Boolean) — is this category maintainable?
+- `x_fc_maintenance_interval_months` (Integer) — default cadence (1–6+).
+- `x_fc_maintenance_fee` (Monetary, `currency_id`) — the **flat fee** shown to the client.
+- `x_fc_maintenance_skill_id` — the technician skill the booking matches on (maps to
+  `res.users.x_fc_repair_skills`). **If skills are already category‑based** (a tech's
+  `x_fc_repair_skills` are equipment categories), drop this field and simply match technicians whose
+  skills include *this* category — confirm the skills representation before modelling (§15).
+- `x_fc_maintenance_service_product_id` (M2O `product.product`, optional) — the service product used
+  when drafting the priced invoice/SO line; falls back to a generic "Maintenance visit" product.
+
+**Per‑product override:** `product.template.x_fc_maintenance_interval_months` (exists) +
+new `product.template.x_fc_maintenance_fee` (Monetary, optional). Resolution order at contract
+creation: product override → category policy.
+
+### 5.2 Extend `fusion.repair.maintenance.contract`
+- `x_fc_maintenance_fee` (Monetary) — resolved price snapshot, shown to client.
+- `x_fc_source` (Selection: `sale` / `backfill` / `claims` / `manual`).
+- `x_fc_source_sale_line_id` (M2O `sale.order.line`) — provenance + idempotency.
+- `x_fc_device_serial` (Char, indexed) — idempotency key (esp. for claims/backfill where no lot).
+- `x_fc_policy_category_id` (M2O `fusion.repair.product.category`).
+- Constraint: at most one **active** contract per `(x_fc_device_serial)` (or per source sale line
+  when serial absent) — declarative `models.Constraint` / partial `models.Index`.
+
+### 5.3 New `fusion.repair.maintenance.visit` (the log)
+A structured, queryable per‑visit record — *not* buried in chatter.
+- `contract_id` (M2O, required), `technician_task_id` (M2O `fusion.technician.task`),
+  `repair_order_id` (M2O `repair.order`, the container), `partner_id`, `product_id`, `lot_id`.
+- `visit_date`, `technician_id` (res.users), `state` (`scheduled/in_progress/done/no_show/cancelled`).
+- `checklist_line_ids` (O2M to `fusion.repair.maintenance.checklist.line`: label, result
+  `pass/fail/na`, note) — items seeded **per equipment category** (lift checklist ≠ wheelchair
+  checklist).
+- `findings` (Html, `Markup()`), `parts_note`, `x_fc_fee` (Monetary), `signature` (Binary),
+  `inspection_certificate_id` (M2O — set for `safety_critical` categories).
+- "log/history" view = the list of visits per contract/unit (smart button on contract + partner).
+
+## 6. Enrollment — two paths
+
+### 6.1 Path A — new sales (fix the dead trigger)
+Override `sale.order.action_confirm()` to call `_spawn_maintenance_contracts()` (reuse the existing
+method; fix + wire it). For each confirmed line whose product/category has
+`x_fc_maintenance_enabled` and a serial/lot:
+- Create one `active` contract per unit (respect quantity), `x_fc_source='sale'`,
+  `x_fc_source_sale_line_id` set, serial captured.
+- `next_due_date = (delivery/commitment date or date_order) + interval` (fallback chain handles
+  non‑ADP units lacking a delivery date).
+- Resolve + snapshot `x_fc_maintenance_fee`.
+- **Idempotent**: skip if an active contract already exists for the serial / sale line.
+
+### 6.2 Path B — backfill existing install base (one‑time wizard, idempotent)
+`fusion.repair.maintenance.backfill.wizard`:
+- **Scan** historical `sale.order.line` for products whose category/product is maintenance‑enabled and
+  were delivered. **Two unit‑identity regimes**, because lifts carry no serials (§3.3):
+  - **Serial‑tracked** (ADP wheelchairs/power chairs, via the `fusion_claims` serial/`device_type` data
+    — soft dep, guarded; map ADP `device_type` → maintenance category): require a serial, **dedup by serial**.
+  - **Non‑serial** (lifts — stair/porch/VPL/lift‑chair): do **NOT** require a serial. One contract per
+    **base‑unit line**, **dedup by (partner + maintainable product + source sale line)**. The per‑product
+    `x_fc_maintenance_enabled` flag is what includes base units and **excludes accessory lines** (curves,
+    rails, remotes, charging stations, rentals) — only the lift itself gets a contract, not its add‑ons.
+- **Stagger** the first `next_due_date` across a configurable window (e.g. spread overdue units over
+  N weeks) so years of equipment don't all email on day one.
+- **Dry‑run first**: produce a report (counts by category, # new vs already‑enrolled, # skipped for
+  missing serial/date, the stagger schedule). Nothing is created or emailed until the operator
+  approves and runs "Execute".
+- Anchor fallback for units with no delivery date: invoice date → order date → today.
+
+## 7. Booking flow (the main build)
+
+### 7.1 Client self‑serve (no login)
+1. Reminder email (existing branded template, **+ fee line added**) → tokenized link.
+2. Public slot‑picker page (extend the existing `/repairs/maintenance/book/<token>` route; replace
+   the date input). The page:
+   - Resolves the contract from the token; shows unit + **flat fee** ("$X + applicable tax").
+   - Computes candidate technicians = users whose `x_fc_repair_skills` include the policy's
+     `x_fc_maintenance_skill_id`.
+   - Calls `fusion_tasks` `_get_available_gaps` / `_find_next_available_slot` per candidate tech over
+     the next ~2–3 weeks, ranked by **proximity** to the client address → presents a short list of
+     real open slots (date + window + implied tech).
+3. Client picks a slot → POST confirm:
+   - **Re‑validate** the slot is still free (gap check) — if taken/expired, re‑render slots with a
+     gentle notice (prevents double‑booking).
+   - Create a `fusion.technician.task` (`task_type='maintenance'`) on that slot, **assigned to the
+     qualified tech** (auto‑assignment by availability+skill), linked to the contract.
+   - Spawn/link the maintenance‑type `repair.order` (container) + the `fusion.repair.maintenance.visit`
+     (state `scheduled`, checklist seeded from the category).
+   - Send the branded confirmation email (date/window/tech, fee, what to expect).
+   - Set `booking_repair_id` (dedup).
+4. **No‑slot fallback:** if no qualified tech/slot in range → show "request a callback" → create an
+   office activity. Never a dead end.
+
+### 7.2 Office books on the client's behalf
+- A **"Book maintenance"** action on the `fusion.repair.maintenance.contract` form opens the same
+  slot‑picker logic in the backend (office books while on the phone).
+- The existing dispatch board remains available for manual scheduling/override.
+
+### 7.3 Token security fix
+On `roll_next_due_date()`, **regenerate `booking_token`** (currently it is not regenerated, so an
+old link stays valid across cycles). Old token → friendly "link expired" page.
+
+## 8. Cost & revenue
+
+- The **flat fee** (`x_fc_maintenance_fee`) is shown in **both** the reminder email and the
+  slot‑picker page, Canadian English, `$` + tax note.
+- On booking, draft a priced line (SO/invoice) using `x_fc_maintenance_service_product_id` (or the
+  generic visit product) at the contract's fee. Payment options: **pay‑at‑door via `fusion_poynt`**
+  (existing `action_collect_payment` on the repair) or invoice after the visit.
+- Recurring revenue = one priced visit per cycle; the roll‑forward arms the next cycle automatically.
+  (Pre‑paid annual plan upsell via the existing subscription engine is out of v1 — §11.)
+
+## 9. Maintenance log & the recurring loop
+
+- The technician fills the visit via the **extended visit‑report wizard** (existing tool) — checklist
+  results, findings, parts, signature — which writes the `fusion.repair.maintenance.visit` record.
+- For `safety_critical` categories (lifts), completing the visit **issues an inspection certificate**
+  (reuse M1) and links it on the visit — the log doubles as compliance proof.
+- On task `status='completed'` → existing **roll‑forward**: `last_service_date=today`,
+  `next_due_date += interval`, reset `last_reminder_band`, **regenerate token**, visit → `done`.
+- Next cycle's reminder fires automatically when `next_due_date` re‑enters the 30‑day band.
+
+## 10. Office follow‑up crons (toggle‑gated, exist as config only today)
+- **Unbooked**: reminder sent, no booking after N days → office call activity on the contract.
+- **Overdue**: `next_due_date` passed with no completed visit in the cycle → escalation activity.
+- Driven by the existing `ir.config_parameter` toggles in `data/ir_config_parameter_data.xml`.
+- Per‑row **savepoint** isolation inside the cron loop (no `cr.commit()` in tests — CLAUDE.md #14).
+
+## 11. Out of scope (v1 — YAGNI)
+- SMS reminders / two‑way SMS booking (needs `fusion_ringcentral`).
+- Logged‑in `/my/equipment` client portal (X5).
+- Pre‑paid annual maintenance‑plan auto‑upsell at booking.
+- Full multi‑stop route optimization / batching (we use per‑tech availability + proximity ranking,
+  not a global optimizer).
+- ADP funder re‑billing of maintenance (maintenance is private‑pay flat fee in v1).
+
+## 12. Error handling & edge cases
+- **Double‑booking:** re‑validate the gap at confirm; lose the race → re‑show slots.
+- **Token:** per‑cycle regeneration; invalid/expired/already‑booked → friendly pages (exist, extend).
+- **No qualified tech / no slots:** callback fallback, not an error page.
+- **Backfill:** dry‑run + report; strict serial dedup; stagger; fallback anchor chain; never email on
+  dry‑run.
+- **Missing data:** units with no device_type/category → excluded from auto‑backfill, listed in the
+  report for manual enrollment.
+- **Audit on failure paths** (if any "booking failed" row is written in an `except`): use a separate
+  `self.env.registry.cursor()` so it survives rollback (CLAUDE.md audit rule).
+- **`message_post` HTML** bodies wrapped in `Markup()` (CLAUDE.md).
+
+## 13. Testing
+`fusion_repairs/tests/` (none exist today). Local dev is **Community** and — because we chose
+`fusion_tasks` over Enterprise `appointment` — the **entire feature is Community‑testable** on
+`odoo-modsdev`. `TransactionCase` coverage:
+- Contract spawn on `sale.order` confirm (enabled vs disabled category; quantity; idempotency).
+- Backfill wizard: **two‑regime dedup** (serial for wheelchairs; partner+product+line for lifts), accessory‑line exclusion, stagger, dry‑run produces no records, anchor fallback.
+- Booking: slot list comes from real gaps; confirm creates task+repair+visit; **double‑book guard**;
+  no‑slot fallback.
+- Roll‑forward on completion: dates advance, band reset, **token regenerated**, visit → done.
+- Crons: reminder bands; unbooked/overdue follow‑ups (savepoint isolation).
+- Run: `docker exec odoo-modsdev-app odoo -d fusion-dev --test-enable --test-tags /fusion_repairs -u fusion_repairs --stop-after-init --http-port=0 --gevent-port=0`.
+
+## 14. Deployment & configuration
+1. Land on local dev, full E2E + tests green.
+2. **Deploy `fusion_repairs` to Westin** (`odoo-westin` / `westin-v19`) — the accepted bigger lift
+   (first production deploy of fusion_repairs; verify rate‑card numbers, ACLs, asset bundles).
+3. **Configure** maintainable categories: `x_fc_maintenance_enabled`, interval, fee, skill, service
+   product — for lifts (stairlift/porch/lift chair) + power & manual wheelchairs.
+4. Ensure technicians have `x_fc_repair_skills` + start addresses (for availability/routing).
+5. Run the **backfill wizard dry‑run → review report → execute** (staggered).
+6. Watch the first reminder/booking cycle; confirm emails, slots, task creation, completion → roll.
+
+## 15. Open items to verify at implementation (rule #1 — read live source)
+- Exact representation of tech skills (`res.users.x_fc_repair_skills`) and how a category's required
+  skill maps to it (Selection vs M2O vs tag) — read fusion_repairs/fusion_tasks before modelling
+  `x_fc_maintenance_skill_id`.
+- Signatures of `_find_next_available_slot` / `_get_available_gaps` (params, return shape, working
+  hours source) and whether they already account for travel windows.
+- The visit‑report wizard's current fields/flow before extending it with the checklist.
+- The inspection‑certificate issue API (how M1 creates a certificate) for the lift link.
+- **Lift base sized** (§3.3): ~254 stairlift + ~30 porch/VPL + ~41 lift‑chair customers, but ~0 serials.
+  Still to verify: which exact products are **base units vs accessories** (so `x_fc_maintenance_enabled`
+  lands on base units only), plus the lift interval/fee per category. Lift products aren't yet tagged
+  with `fusion_repairs` categories on Westin (module not deployed there) — categorization is a deploy step.
+- `fusion_claims` device_type → maintenance‑category mapping table for the wheelchair backfill.
+
+## 16. Build sequence (for the implementation plan)
+1. **Policy + fee data model** (category fields, product override, contract extensions, constraints).
+2. **Path A trigger** (wire `_spawn_maintenance_contracts` into `action_confirm`, fee resolution, anchor fallback) + tests.
+3. **Cost in email** (add fee to the reminder template).
+4. **Technician‑aware booking** (slot‑picker page + controller on `fusion_tasks` availability; task/repair/visit creation; double‑book guard; office action; token regen) + tests — the largest unit.
+5. **Maintenance visit log + checklist** (model, per‑category seed, visit‑report‑wizard extension, inspection‑cert link) + tests.
+6. **Backfill wizard** (scan/dedup/stagger/dry‑run; fusion_claims soft bridge) + tests.
+7. **Office follow‑up crons** (unbooked/overdue) + tests.
+8. **Deploy + configure + backfill** on Westin.

docs/superpowers/specs/2026-06-02-nexacloud-odoo-billing-cutover-design.md

@@ -0,0 +1,101 @@
+# NexaCloud → Odoo Centralized Billing — Cutover (build-out · dual-run · gated flip)
+
+- **Date:** 2026-06-02
+- **Status:** Design approved — pending written-spec review
+- **Author:** Design session (Claude + Gurpreet)
+- **Parent spec:** [`2026-05-27-nexa-billing-centralized-design.md`](2026-05-27-nexa-billing-centralized-design.md) (architecture; this doc is its **phase #2** — the NexaCloud pilot)
+- **Repos:** `K:\Github\Odoo-Modules\fusion_centralize_billing` (engine) + `K:\Github\Nexa-Cloud` (the NexaCloud adapter)
+- **Hosts:** `odoo-nexa` (VM 315, Odoo 19 Enterprise, live DB `nexamain`); NexaCloud (LXC 102, app `192.168.1.250`, DB `192.168.1.50`)
+
+## 1. Goal
+
+Make Odoo (`fusion_centralize_billing` on `odoo-nexa`) the system of record for **NexaCloud** billing: build the engine pieces NexaCloud needs, import NexaCloud's active deployments as Odoo subscriptions, run Odoo in **shadow** alongside NexaCloud's existing Stripe billing for ≥1 cycle, reconcile to the cent, and then **flip** NexaCloud onto Odoo behind an explicit go/no-go gate. NexaCloud is the pilot; NexaDesk and NexaMaps follow in later increments. This does not touch Lago.
+
+## 2. Decisions locked (this session, 2026-06-02)
+
+1. **Sequence: NexaCloud first** (per parent spec), then NexaDesk, then NexaMaps.
+2. **Granularity: one Odoo subscription per NexaCloud deployment** (mirrors `nexacloud` `subscriptions.deployment_id`; the existing usage-push and `fusion.billing.reconciliation` code already key per deployment via `x_fc_nexacloud_subscription_id`).
+3. **Approach A: build → import → dual-run → gated flip**, all in this increment; the flip executes only after ≥1 green reconciliation cycle **and** explicit operator go-ahead.
+4. **Go-forward billing only.** The importer sets each subscription's `next_invoice_date` so Odoo bills only future periods. Past NexaCloud periods are **never re-issued** (this is the exact failure mode of the 2026-05-27 Lago incident — see `lago-doublecharge-incident-2026-06` memory).
+
+## 3. Current state (recon, 2026-06-02)
+
+Engine is **installed** on `nexamain` (`fusion_centralize_billing` v19.0.1.1.0; deps `sale_subscription`, `payment_stripe`, `account_accountant` installed). Runtime rows:
+
+| Table | Rows | Read |
+|---|---|---|
+| `fusion_billing_service` | 1 | only `nexacloud`; **`webhook_url` empty** |
+| `fusion_billing_account_link` | 7 | identities imported |
+| `fusion_billing_metric` | 1 | (cpu_seconds) |
+| `fusion_billing_charge` | **0** | no quota/overage pricing yet |
+| `fusion_billing_usage` | **0** | nothing ingested |
+| `fusion_billing_reconciliation` | **0** | dual-run never run |
+| `fusion_billing_webhook` | **0** | control loop never fired |
+| `sale_order` (`is_subscription`) | **0** | no subscriptions exist |
+
+Engine code status: `webhook.py` delivery engine (HMAC + backoff + dead-letter) is **complete** (its "TODO §8" header comment is stale); `usage.py` (idempotent upsert + pre-invoice rating cron + aggregation) and `reconciliation.py` (NexaCloud dual-run) are **complete**. `controllers/api.py` implements `/health`, `POST /customers`, `POST /usage`, `GET /plans`, `POST /subscriptions` only — the rest of parent-spec §7 is unimplemented (needed by NexaDesk, **not** NexaCloud).
+
+NexaCloud adapter is present but **INERT**: `config.py` `odoo_billing_enabled=False`, `odoo_billing_base_url`/`odoo_billing_api_key` empty; `usage_metering.py` pushes `cpu_seconds` only when enabled; `routers/odoo_billing.py` `/billing/webhooks/central` returns 404 when disabled; `services/odoo_billing_integration.py` is the (inert) receiver. Lago is paused (worker+clock stopped) and out of scope here.
+
+## 4. Scope
+
+### 4.1 Odoo side (`fusion_centralize_billing` + catalog data on `nexamain`)
+
+1. **Charge catalog (the main gap — currently 0).**
+   - NexaCloud plans/products → `product.template` + `sale.subscription.plan` (monthly), each tagged `plan_code` and a `product.default_code` of `NC-PLAN-<slug>` (reconciliation already filters plan lines on `default_code LIKE 'NC-PLAN-%'`).
+   - `cpu_seconds` metric (exists) → one `fusion.billing.charge` per plan: `included_quota` = the plan's bundled CPU-seconds, `price_per_unit`/`unit_batch` for overage derived from `usage_metering.HOURLY_RATES` (`cpu_per_core=$0.0075/core-hr` → per-cpu-second rate). Memory/disk are part of the flat plan today (not metered) — keep them flat unless a plan meters them.
+   - Throttle-removal fee and the CPU/RAM/disk/daily-backup **add-ons** → one-off invoice products / optional recurring add-on products tagged `NC-ADDON-<slug>`.
+   - HST: reuse native `account.tax` (13% ON); confirm the tax code matches what NexaCloud invoices apply today.
+2. **Run the importer** (`wizards/import_wizard.py`): read the `nexacloud` DB → ensure `res.partner` + `account.link` for each active customer (7 exist; backfill any missing), and create **one shadow `sale.order` (`is_subscription=True`) per active deployment**, setting `x_fc_nexacloud_subscription_id`, `x_fc_nexacloud_plan_id`, the `NC-PLAN-*` line, and **`next_invoice_date` = the deployment's next real billing date** (go-forward only). Subscriptions start in shadow (draft/not auto-charging).
+3. **Inbound API — add only what NexaCloud needs.** `POST /customers`, `POST /subscriptions`, `POST /usage`, `GET /plans` already exist. Add **subscription cancel** (`DELETE /subscriptions/:id` → terminate the `sale.order`) for NexaCloud's deprovision path. All other parent-spec §7 endpoints stay deferred to the NexaDesk increment.
+4. **Wire the control loop:** set the `nexacloud` `fusion.billing.service.webhook_url` → `https://api.vps.nexasystems.ca/api/v1/billing/webhooks/central`, and confirm `cron` schedules for `usage._cron_rate_open_periods` and `webhook._cron_dispatch` are enabled.
+
+### 4.2 NexaCloud side (`Nexa-Cloud` repo)
+
+4. **Configure + activate the adapter:** set `odoo_billing_base_url=https://erp.nexasystems.ca/api/billing/v1`, `odoo_billing_api_key=<nexacloud service key>`. Keep `odoo_billing_enabled` staged so usage push + the webhook receiver activate for shadow without yet disabling local Stripe.
+5. **Identity + subscription sync:** on deployment create / cancel, call Odoo `POST /customers` and `POST /subscriptions` / cancel (usage push already exists in `usage_metering.py`). Send a stable `external_id` (NexaCloud user id) and `subscription_external_id` (deployment/subscription id) — namespaced, to avoid the cross-app `external_id` collision noted in `nexa-billing-architecture`.
+6. **Reconciliation feed:** push NexaCloud's **actual** charged amount per (deployment, period) so `reconciliation._reconcile_rows` can diff Odoo-computed vs NexaCloud-actual. (Source: NexaCloud's own invoices/`usage_records`.)
+7. **Activate the control-loop receiver:** `routers/odoo_billing.py` `/billing/webhooks/central` → `services/odoo_billing_integration.py` maps `invoice.payment_failed`→suspend (existing `network_isolation`/`throttle_checker`/`resource_manager`), `invoice.payment_succeeded`/`subscription.reactivated`→restore, `subscription.terminated`→deprovision. Verify HMAC against the `nexacloud` service `webhook_secret`.
+
+### 4.3 Dual-run (shadow, ≥1 billing cycle)
+
+NexaCloud keeps charging via its own Stripe. Odoo computes **draft, uncharged** invoices from imported subscriptions + pushed `cpu_seconds`. `fusion.billing.reconciliation` upserts one row per `(service, deployment, period)` with `odoo_amount` vs `external_amount` and a cent-level `delta`. Operators investigate every `delta` row until a full cycle is `match` within tolerance (default $0.01).
+
+### 4.4 Gated flip (after ≥1 green cycle + explicit go)
+
+1. NexaCloud **stops its own Stripe charging** (disable the charge path in `billing_service.py` / scheduler `billing_payment` + invoice generation) and treats Odoo as SoR.
+2. Odoo subscriptions move from shadow → active; native subscription invoicing charges the **shared** Stripe account `acct_1ShlA9IkwUB1dVox` (saved cards carry over — no re-collection).
+3. Webhooks drive suspend/restore/deprovision. Past NexaCloud invoices remain archived (PDF/opening balance) — **not** re-issued.
+4. Rollback: re-enable NexaCloud local billing + set Odoo subs back to shadow (no data destroyed).
+
+## 5. Out of scope (YAGNI for this increment)
+
+- NexaDesk and NexaMaps adapters (later increments) and the inbound-API endpoints only they need (`/invoices` family, `/credit_notes`, `/catalog`, `/checkout_url`, `PUT /subscriptions` plan-change/upgrade).
+- Lago changes or decommission (Lago stays paused; its remediation is tracked separately).
+- Customer-portal redesign — use native Odoo portal as-is.
+- Metering memory/disk/bandwidth (stay flat unless a NexaCloud plan already meters them).
+
+## 6. Success criteria
+
+- A NexaCloud deployment is created as an Odoo subscription `sale.order` (`is_subscription=True`) via `POST /subscriptions`, resolving one `res.partner` through `account.link`.
+- `cpu_seconds` counters pushed to `/usage` aggregate (idempotent) into a **draft** invoice with quota → free, overage priced, HST applied — matching NexaCloud's own computed amount within $0.01.
+- A simulated `invoice.payment_failed` webhook reaches `/billing/webhooks/central` (valid HMAC) and triggers a NexaCloud suspend; `invoice.payment_succeeded` restores.
+- `fusion.billing.reconciliation` is `match` for **every** active deployment across ≥1 full cycle before any flip.
+- Re-sending the same usage counter (same `idempotency_key`) does **not** double-bill (constraint + upsert verified by test).
+- Post-flip: Odoo charges go-forward periods only; **zero** past-period re-issues.
+
+## 7. Risks & open items
+
+- **Re-billing regression (highest):** the importer MUST set `next_invoice_date` go-forward and must not finalize/charge historical periods. Add an explicit test asserting no invoice is generated for any period earlier than import time. (Direct mitigation of the 2026-05-27 Lago incident.)
+- **Odoo 19 correctness:** read live reference files from the container (`docker exec odoo-nexa-app cat …`) for `sale.order` subscription flow, `account.move`, `payment_stripe` before coding internals — never from memory (per `K:\Github\CLAUDE.md`).
+- **Idempotency:** `fusion.billing.usage` unique `(subscription, metric, idempotency_key)` already enforces it; the NexaCloud key is `nexacloud:cpu_seconds:<sub>:<period>` — keep it stable across retries.
+- **external_id namespacing:** NexaCloud must send namespaced ids so it can never collide with NexaDesk/NexaMaps in the shared Odoo identity space.
+- **Reconciliation source:** confirm where NexaCloud's "actual amount" comes from (its `invoices`/`usage_records`) and that it's net of the same HST basis Odoo uses.
+- **Flip switch safety:** disabling NexaCloud's local Stripe must be a single, reversible config flag, and the `billing_payment` scheduler job must be guarded so it can't charge once Odoo is SoR.
+- **Spec/branch target:** `Odoo-Modules` is on `feat/fusion-login-audit` with `-wt-portal`/`-wt-fm` worktrees; confirm the branch for engine changes; NexaCloud changes land on its own branch (note: pushing `Nexa-Cloud` `main` auto-deploys to prod).
+
+## 8. Test plan
+
+- Odoo unit tests (extend `fusion_centralize_billing/tests/`): catalog→charge mapping; usage aggregation + quota/overage; idempotent re-push; reconciliation match/delta; webhook HMAC sign/verify + backoff; **importer go-forward `next_invoice_date` assertion**.
+- NexaCloud tests: adapter customer/subscription calls; `/billing/webhooks/central` HMAC verify + suspend/restore/deprovision dispatch; reconciliation-amount push.
+- Dual-run acceptance: a full cycle of `match` reconciliation on real (or staged) deployments before the flip gate.

docs/superpowers/specs/2026-06-03-technician-service-booking-design.md

@@ -0,0 +1,172 @@
+# Technician Service Booking & Auto-Quote — Design Spec
+
+**Date:** 2026-06-03
+**Modules:** `fusion_tasks` (booking wizard, task, time/tz), `fusion_claims` (SO link, rate-card products, SO creation)
+**Status:** Draft for review
+**Mockup:** `docs/superpowers/mockups/technician-booking-wizard.html` (v2)
+
+---
+
+## 1. Problem & Goal
+
+Operators booking a technician service today use the raw `fusion.technician.task` form in a modal. Three problems:
+
+1. **Forced SO:** a hard constraint (`fusion_claims/models/technician_task.py:105 _check_order_link`) requires a Sale Order **or** Purchase Order for every task except `ltc_visit`. A repair for a brand-new client (no SO yet) is blocked.
+2. **Time fields:** Start/End use a 24-hour `float_time` widget while every other view shows 12-hour AM/PM; and the local→UTC conversion is inconsistent (`_compute_datetimes` resolves *company-calendar-tz → user-tz → UTC*, but `_inverse_datetime_*` uses *user-tz → UTC* only — they disagree, and fall back to UTC when unset).
+3. **No revenue capture at booking:** the booking creates a task but no priced order, even though every service call has a defined call-out fee.
+
+**Goal:** a fast, polished **"Book a Service"** wizard that, from one screen, (a) captures the client — including brand-new clients inline, (b) books the technician task, (c) prices the call-out from the rate card, and (d) auto-creates a **draft repair Sale Order**. Every service call becomes a revenue-tracked order. Works in dark + light.
+
+---
+
+## 2. Scope
+
+**In:** OWL booking wizard (complete design freedom); inline new-client create (name/phone/email/address); rate-card product catalog; service-type → call-out pricing; auto draft repair SO (call-out line + auto per-km); live on-screen estimate; 12-hour AM/PM time entry; timezone-conversion fix; relaxation of the SO constraint.
+
+**Out (phase 2):** deposit/payment capture; multi-technician labour auto-doubling; SMS gateway; maintenance/PM plans; full quote builder (estimated labour & parts written onto the SO at booking — for now the SO carries call-out + per-km only, labour/parts added as actuals).
+
+---
+
+## 3. Pricing model (Westin rate card)
+
+> These values only **seed** the editable `fusion.service.rate` table (§6.1). After install, admins
+> change any price and add new rate types from the **Service Rates** menu — nothing here is hardcoded,
+> and the wizard reflects edits live.
+
+### 3.1 Call-out fee matrix (the guaranteed charge; includes 30 min labour where noted)
+
+| Category | Normal | Rush (+km) | After-Hours (+km) |
+|---|---|---|---|
+| **Standard** | $95 | $120 | $140 |
+| **Lift & Elevating** | $160 | **$185** ◆ | **$205** ◆ |
+
+- ◆ **Suggested fills** (not on the printed card). Derived from the card's own surcharge deltas: Standard Rush = +$25, After-Hours = +$45 over base; same deltas applied to the Lift base ($160) → $185 / $205. *Owner to confirm.*
+- **Rush & After-Hours** add **$0.70/km × 2-way** (round trip), computed from the booking's travel distance.
+- **In-shop (any device):** no call-out fee; labour billed at $75/hr; no delivery.
+
+### 3.2 Labour (hourly, pro-rated in 30-min increments; per technician)
+- On-site (Standard): **$85/hr**
+- In-shop: **$75/hr** (already exists as product `LABOR`, default_code `LABOR`)
+- Lift & Elevating on-site: **$110/hr**
+
+### 3.3 Travel
+- Per-km surcharge: **$0.70/km × 2-way**
+
+### 3.4 Delivery / Pickup
+| Item | Price |
+|---|---|
+| Local (within Brampton) | $35 |
+| Outside local area | $60 |
+| Rush pickup/delivery | $60 + $0.70/km ×2-way |
+| Lift-chair delivery & set-up | $120 |
+| Hospital-bed delivery & set-up | $120 |
+| Stairlift delivery & set-up | $300 |
+| Stairlift removal | $300 |
+
+### 3.5 Footnote rules (from the card)
+- A Service Call is an appointment **outside** a Westin location, billed **once per request**, includes **30 min labour**; labour rates apply after.
+- Parts are **not** charged when covered under manufacturer warranty (→ "Under warranty" flag on the wizard).
+- Multiple technicians → labour applies **per technician** (phase-2 auto-double; for now informational).
+
+---
+
+## 4. UX — wizard layout
+
+Single page (no multi-step), grouped cards, brand-gradient header, dark/light. Sections (see mockup v2):
+
+- **Customer** — segmented `Existing customer | New client`. Existing = search by **phone / name / SO** → prefill. New = **name, phone, email, address (street/unit/buzz/city)** inline; contact find-or-created on save.
+- **Service & Pricing** — *device being serviced* (→ auto-suggests category: scooter/chair/bed → Standard; stairlift/lift → Lift & Elevating), *issue/symptom*, *service call type* (category × timing), and the resulting **call-out fee** readout.
+- **Schedule** — date, **12-hour AM/PM start picker**, duration → auto end ("Ends at 10:00 AM · local time"), technician + availability hint.
+- **Location** — **in-shop toggle** (drives pricing: no call-out, $75 labour, hides address), job address.
+- **Job details** — work description, parts to bring, **under-warranty** toggle, POD, send-confirmation, request-review.
+- **Estimate** (prominent strip) — *call-out + est. labour + per-km = total*; "a draft repair SO is created."
+- **Footer** — Cancel · **Book & Create SO**.
+
+Behaviours: device→category auto-suggest (overridable); in-shop flips pricing & hides address + call-out; live estimate recomputes on every change; AM/PM picker stores local float hours.
+
+---
+
+## 5. Architecture
+
+**Complete UI freedom without duplicating backend logic:**
+
+- **OWL client action** `fusion_tasks.service_booking` — renders the layout; loads reference data (technicians, device types, rate products, customer search) via standalone `rpc()` (`@web/core/network/rpc`). Registered in `registry.category("actions")`. Opened from a "Book a Service" button/menu/dashboard tile (`ir.actions.client`).
+- **One server method** `fusion.technician.task.action_book_from_wizard(payload)`:
+  1. Resolve customer — search `res.partner` by email then phone; create if new (name/phone/email/address). For "existing", use the chosen partner/SO's partner.
+  2. Compute **travel distance now** (Google Distance Matrix via the existing `_calculate_travel_time`/`_get_google_maps_api_key`) from the shop / previous task to the job — needed for the per-km line.
+  3. Create a **draft `sale.order`** tagged as a repair (see §6) with the **call-out product line** + an **auto per-km line** (qty = round(distance_km × 2), product = per-km $0.70) when the service type is Rush/After-Hours.
+  4. Create the `fusion.technician.task` linked to that SO (reuses existing model `create` + address-fill + travel-chain logic).
+  5. Return `{task_id, order_id}` so the client action can open the task or close.
+- **SCSS** `fusion_tasks/static/src/scss/_service_booking_tokens.scss` + `service_booking.scss`, branching on `$o-webclient-color-scheme` (per repo rule), registered in `web.assets_backend` **and** `web.assets_web_dark`. Three-layer contrast tokens (page → card → field), explicit hex.
+
+All validation/workflow/pricing stays server-side; the OWL component is presentation + a single submit call.
+
+---
+
+## 6. Data model changes
+
+### 6.1 New: editable rate table `fusion.service.rate` (the configurable pricing control)
+A dedicated model so admins manage **all** pricing from a **Service Rates** menu — no code to change a price or add a service type.
+
+**Fields:** `name`; `code` (unique, e.g. `callout_standard_normal`, `callout_lift_rush`, `labour_onsite`, `labour_lift`, `per_km`, `delivery_local`); `rate_kind` (callout / labour / travel / delivery / other); `category` (standard / lift / na); `timing` (normal / rush / afterhours / na); `in_shop` (bool); `product_id` (the `product.product` used on the SO line — for description, tax, income account); `price` (Monetary — the **editable source of truth**); `unit` (fixed / per_hour / per_km); `adds_per_km` (bool); `included_labour_min` (int, e.g. 30); `active`; `sequence`; `currency_id`.
+
+- **Seed** (`data/service_rate_data.xml`, `noupdate=1`): one row per §3 rate, each linked to a seeded `product.product` (type `service`, `sale_ok`, correct UoM — hour/km/unit, HST). `noupdate=1` means a later `-u` never overwrites admin price edits.
+- **Views/menu:** list + form under *Field Service → Configuration → Service Rates* (manager-only) — edit price, add/remove rows, toggle `active`.
+- **Products still exist** (SO lines + accounting need a product), but the **rate row's `price` is the source of truth** — the SO line takes `price_unit` from the rate, not the product's `list_price`. One place to edit.
+- The **wizard builds its service-type selector from the active `callout` rows**, so a new rate row appears in the wizard automatically.
+
+### 6.2 `fusion_tasks` — `fusion.technician.task`
+- Make `_compute_datetimes` and `_inverse_datetime_start/_end` use **one** tz resolver (`_get_local_tz()` everywhere) so compute and inverse agree; document that local float hours ↔ UTC datetime is the single source of truth.
+- Time entry stays `time_start`/`time_end` floats (local); the **AM/PM presentation lives in the OWL wizard**; the existing `time_start_display` (12h) already covers list/kanban/calendar.
+
+### 6.3 `fusion_claims` — `fusion.technician.task` + `sale.order`
+- **Relax** `_check_order_link`: no longer raise when there is no SO/PO — the wizard now auto-creates the SO, and in-shop/walk-in tasks may legitimately have none. (Keep the helper that auto-fills address from an SO when one *is* linked.)
+- Add `x_fc_service_call_type` (Selection: standard/lift × normal/rush/afterhours, + in_shop) on the task, set by the wizard, used to pick the call-out product and for reporting.
+- Add a **pricing resolver** that reads `fusion.service.rate`: `_get_callout_rate(category, timing, in_shop)` and `_get_rate(code)` (per-km, labour, delivery) + `_build_service_so(partner, rate, distance_km, ...)` that creates the SO + lines using each rate's `product_id` with `price_unit` taken from the rate row.
+- **Repair-SO identity:** boolean `x_fc_is_service_repair` on `sale.order` + an `crm.tag`/SO tag "Service Repair" so these orders are filterable; reuse the standard quotation flow.
+
+---
+
+## 7. Pricing engine
+
+- Reads the **`fusion.service.rate`** table (§6.1) — never hardcoded.
+- `_get_callout_rate(category, timing, in_shop)` → the matching active `callout` row (none if in-shop). Its `price` → the SO call-out line `price_unit`; its `product_id` → the line product.
+- **Per-km:** when the call-out row's `adds_per_km` is set, add a line from the `per_km` rate row, qty = `round(distance_km × 2)`, `price_unit` = that row's price.
+- **On-screen estimate (UI only, not written to SO):** `callout.price + max(0, duration − included_labour_min/60) × labour_rate + per-km`, where `labour_rate` is read from the `labour_*` rate rows (in-shop / on-site / lift).
+
+---
+
+## 8. Timezone fix (folds in the audit finding)
+
+Single resolver `_get_local_tz()` (company resource-calendar tz → user tz → UTC) used by **both** `_compute_datetimes` and the inverses, eliminating the compute/inverse mismatch and the silent UTC fallback. Booking writes local float hours; datetime_start/end (UTC) recompute consistently for the calendar/sync.
+
+---
+
+## 9. Open decisions (defaults chosen — confirm at review)
+
+| # | Decision | Default |
+|---|---|---|
+| 1 | Lift Rush / After-Hours call-out | **$185 / $205** (parallel surcharge) |
+| 2 | In-shop pricing | no call-out, labour @ $75/hr, no delivery |
+| 3 | Repair-SO identity | boolean `x_fc_is_service_repair` + SO tag "Service Repair" |
+| 4 | Estimate labour | on-screen guide only; SO = call-out + per-km; labour/parts as actuals |
+| 5 | Per-km distance basis | Distance Matrix, shop/previous-task → job, ×2-way |
+| 6 | Rate configurability | editable `fusion.service.rate` table + **Service Rates** menu; the card only seeds it, admin-owned thereafter |
+
+---
+
+## 10. Testing & rollout
+
+- Enterprise-only stack (these modules need `fusion_claims`/`fusion_portal` deps) → **verify on a Westin clone**, not local Community.
+- Seed products + taxes; smoke-test: new-client booking → contact + task + draft SO created with the right call-out (+ per-km on rush/after-hours); existing-customer booking; in-shop (no call-out); tz correctness on the task + calendar; dark + light bundles.
+
+---
+
+## 11. Build sequence (for the implementation plan)
+
+1. **`fusion.service.rate` model** + seeded rows + products + taxes + *Service Rates* menu/views.
+2. **TZ fix** + confirm AM/PM round-trips (time floats).
+3. **Constraint relax** + `x_fc_service_call_type` + pricing resolver + `_build_service_so` + `action_book_from_wizard` (server).
+4. **OWL wizard** client action + SCSS (dark/light).
+5. **Entry point** (button/menu/tile) + `ir.actions.client`.
+6. **Clone-verify** end-to-end.

fusion_authorizer_portal/graphify-out/GRAPH_REPORT.md

@@ -1,883 +0,0 @@
-# Graph Report - /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal  (2026-04-22)
-
-## Corpus Check
-- 33 files · ~40,589 words
-- Verdict: corpus is large enough that graph structure adds value.
-
-## Summary
-- 470 nodes · 550 edges · 123 communities detected
-- Extraction: 89% EXTRACTED · 11% INFERRED · 0% AMBIGUOUS · INFERRED: 60 edges (avg confidence: 0.76)
-- Token cost: 0 input · 0 output
-
-## Community Hubs (Navigation)
-- [[_COMMUNITY_Community 0|Community 0]]
-- [[_COMMUNITY_Community 1|Community 1]]
-- [[_COMMUNITY_Community 2|Community 2]]
-- [[_COMMUNITY_Community 3|Community 3]]
-- [[_COMMUNITY_Community 4|Community 4]]
-- [[_COMMUNITY_Community 5|Community 5]]
-- [[_COMMUNITY_Community 6|Community 6]]
-- [[_COMMUNITY_Community 7|Community 7]]
-- [[_COMMUNITY_Community 8|Community 8]]
-- [[_COMMUNITY_Community 9|Community 9]]
-- [[_COMMUNITY_Community 10|Community 10]]
-- [[_COMMUNITY_Community 11|Community 11]]
-- [[_COMMUNITY_Community 12|Community 12]]
-- [[_COMMUNITY_Community 13|Community 13]]
-- [[_COMMUNITY_Community 14|Community 14]]
-- [[_COMMUNITY_Community 15|Community 15]]
-- [[_COMMUNITY_Community 16|Community 16]]
-- [[_COMMUNITY_Community 17|Community 17]]
-- [[_COMMUNITY_Community 18|Community 18]]
-- [[_COMMUNITY_Community 19|Community 19]]
-- [[_COMMUNITY_Community 20|Community 20]]
-- [[_COMMUNITY_Community 21|Community 21]]
-- [[_COMMUNITY_Community 22|Community 22]]
-- [[_COMMUNITY_Community 23|Community 23]]
-- [[_COMMUNITY_Community 24|Community 24]]
-- [[_COMMUNITY_Community 25|Community 25]]
-- [[_COMMUNITY_Community 26|Community 26]]
-- [[_COMMUNITY_Community 27|Community 27]]
-- [[_COMMUNITY_Community 28|Community 28]]
-- [[_COMMUNITY_Community 29|Community 29]]
-- [[_COMMUNITY_Community 30|Community 30]]
-- [[_COMMUNITY_Community 31|Community 31]]
-- [[_COMMUNITY_Community 32|Community 32]]
-- [[_COMMUNITY_Community 33|Community 33]]
-- [[_COMMUNITY_Community 34|Community 34]]
-- [[_COMMUNITY_Community 35|Community 35]]
-- [[_COMMUNITY_Community 36|Community 36]]
-- [[_COMMUNITY_Community 37|Community 37]]
-- [[_COMMUNITY_Community 38|Community 38]]
-- [[_COMMUNITY_Community 39|Community 39]]
-- [[_COMMUNITY_Community 40|Community 40]]
-- [[_COMMUNITY_Community 41|Community 41]]
-- [[_COMMUNITY_Community 42|Community 42]]
-- [[_COMMUNITY_Community 43|Community 43]]
-- [[_COMMUNITY_Community 44|Community 44]]
-- [[_COMMUNITY_Community 45|Community 45]]
-- [[_COMMUNITY_Community 46|Community 46]]
-- [[_COMMUNITY_Community 47|Community 47]]
-- [[_COMMUNITY_Community 48|Community 48]]
-- [[_COMMUNITY_Community 49|Community 49]]
-- [[_COMMUNITY_Community 50|Community 50]]
-- [[_COMMUNITY_Community 51|Community 51]]
-- [[_COMMUNITY_Community 52|Community 52]]
-- [[_COMMUNITY_Community 53|Community 53]]
-- [[_COMMUNITY_Community 54|Community 54]]
-- [[_COMMUNITY_Community 55|Community 55]]
-- [[_COMMUNITY_Community 56|Community 56]]
-- [[_COMMUNITY_Community 57|Community 57]]
-- [[_COMMUNITY_Community 58|Community 58]]
-- [[_COMMUNITY_Community 59|Community 59]]
-- [[_COMMUNITY_Community 60|Community 60]]
-- [[_COMMUNITY_Community 61|Community 61]]
-- [[_COMMUNITY_Community 62|Community 62]]
-- [[_COMMUNITY_Community 63|Community 63]]
-- [[_COMMUNITY_Community 64|Community 64]]
-- [[_COMMUNITY_Community 65|Community 65]]
-- [[_COMMUNITY_Community 66|Community 66]]
-- [[_COMMUNITY_Community 67|Community 67]]
-- [[_COMMUNITY_Community 68|Community 68]]
-- [[_COMMUNITY_Community 69|Community 69]]
-- [[_COMMUNITY_Community 70|Community 70]]
-- [[_COMMUNITY_Community 71|Community 71]]
-- [[_COMMUNITY_Community 72|Community 72]]
-- [[_COMMUNITY_Community 73|Community 73]]
-- [[_COMMUNITY_Community 74|Community 74]]
-- [[_COMMUNITY_Community 75|Community 75]]
-- [[_COMMUNITY_Community 76|Community 76]]
-- [[_COMMUNITY_Community 77|Community 77]]
-- [[_COMMUNITY_Community 78|Community 78]]
-- [[_COMMUNITY_Community 79|Community 79]]
-- [[_COMMUNITY_Community 80|Community 80]]
-- [[_COMMUNITY_Community 81|Community 81]]
-- [[_COMMUNITY_Community 82|Community 82]]
-- [[_COMMUNITY_Community 83|Community 83]]
-- [[_COMMUNITY_Community 84|Community 84]]
-- [[_COMMUNITY_Community 85|Community 85]]
-- [[_COMMUNITY_Community 86|Community 86]]
-- [[_COMMUNITY_Community 87|Community 87]]
-- [[_COMMUNITY_Community 88|Community 88]]
-- [[_COMMUNITY_Community 89|Community 89]]
-- [[_COMMUNITY_Community 90|Community 90]]
-- [[_COMMUNITY_Community 91|Community 91]]
-- [[_COMMUNITY_Community 92|Community 92]]
-- [[_COMMUNITY_Community 93|Community 93]]
-- [[_COMMUNITY_Community 94|Community 94]]
-- [[_COMMUNITY_Community 95|Community 95]]
-- [[_COMMUNITY_Community 96|Community 96]]
-- [[_COMMUNITY_Community 97|Community 97]]
-- [[_COMMUNITY_Community 98|Community 98]]
-- [[_COMMUNITY_Community 99|Community 99]]
-- [[_COMMUNITY_Community 100|Community 100]]
-- [[_COMMUNITY_Community 101|Community 101]]
-- [[_COMMUNITY_Community 102|Community 102]]
-- [[_COMMUNITY_Community 103|Community 103]]
-- [[_COMMUNITY_Community 104|Community 104]]
-- [[_COMMUNITY_Community 105|Community 105]]
-- [[_COMMUNITY_Community 106|Community 106]]
-- [[_COMMUNITY_Community 107|Community 107]]
-- [[_COMMUNITY_Community 108|Community 108]]
-- [[_COMMUNITY_Community 109|Community 109]]
-- [[_COMMUNITY_Community 110|Community 110]]
-- [[_COMMUNITY_Community 111|Community 111]]
-- [[_COMMUNITY_Community 112|Community 112]]
-- [[_COMMUNITY_Community 113|Community 113]]
-- [[_COMMUNITY_Community 114|Community 114]]
-- [[_COMMUNITY_Community 115|Community 115]]
-- [[_COMMUNITY_Community 116|Community 116]]
-- [[_COMMUNITY_Community 117|Community 117]]
-- [[_COMMUNITY_Community 118|Community 118]]
-- [[_COMMUNITY_Community 119|Community 119]]
-- [[_COMMUNITY_Community 120|Community 120]]
-- [[_COMMUNITY_Community 121|Community 121]]
-- [[_COMMUNITY_Community 122|Community 122]]
-
-## God Nodes (most connected - your core abstractions)
-1. `create()` - 22 edges
-2. `FusionAssessment` - 20 edges
-3. `AuthorizerPortal` - 19 edges
-4. `ResPartner` - 16 edges
-5. `accessibility_assessment_save()` - 12 edges
-6. `FusionAccessibilityAssessment` - 11 edges
-7. `selectField()` - 11 edges
-8. `PDFTemplateFiller` - 10 edges
-9. `SaleOrder` - 10 edges
-10. `FusionPdfTemplate` - 9 edges
-
-## Surprising Connections (you probably didn't know these)
-- `create_field()` --calls--> `create()`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/pdf_editor.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/accessibility_assessment.py
-- `FusionPdfTemplatePreview` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `FusionPdfTemplateField` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `Generate PNG preview images from the PDF using poppler (pdftoppm).         Falls` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-- `Set template to active.` --uses--> `PDFTemplateFiller`  [INFERRED]
-  /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/pdf_template.py → /Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/pdf_filler.py
-
-## Communities
-
-### Community 0 - "Community 0"
-Cohesion: 0.05
-Nodes (29): accessibility_bathroom(), accessibility_ceiling_lift(), accessibility_ramp(), accessibility_stairlift_curved(), accessibility_stairlift_straight(), accessibility_tub_cutout(), accessibility_vpl(), home() (+21 more)
-
-### Community 1 - "Community 1"
-Cohesion: 0.06
-Nodes (20): Assign role-specific portal groups to a portal user based on contact checkboxes., Assign backend groups to an internal user based on contact checkboxes.         A, Grant portal access to this partner, or update permissions for existing users., Create a role-specific welcome Knowledge article for the new portal user., Send a professional portal invitation email to the partner.                  Gen, Resend portal invitation email to an existing portal user., Open the list of assigned sale orders, Open the list of assessments for this partner (+12 more)
-
-### Community 2 - "Community 2"
-Cohesion: 0.07
-Nodes (19): create(), FusionAssessment, Format assessment data as HTML table for chatter, Format wheelchair specifications for the sale order notes (legacy), Generate document records for signed pages, Send email notifications when assessment is completed, View related documents, View the created sale order (+11 more)
-
-### Community 3 - "Community 3"
-Cohesion: 0.08
-Nodes (15): create(), FusionAccessibilityAssessment, Complete the assessment and create a Sale Order.          2026-04 portal audit f, Add a tag to the sale order based on assessment type, Copy assessment photos to sale order chatter, Send email notification to office about assessment completion, Schedule a follow-up activity for the sales rep, Find or create a partner for the client (+7 more)
-
-### Community 4 - "Community 4"
-Cohesion: 0.08
-Nodes (20): Complete express assessment and create draft sale order (no signatures required), CustomerPortal, Ensure all module views are active after install/update.      Odoo silently deac, _reactivate_views(), AssessmentPortal, portal_assessment_express_edit(), portal_assessment_express_new(), portal_assessment_express_save() (+12 more)
-
-### Community 5 - "Community 5"
-Cohesion: 0.09
-Nodes (14): authorizer_cases_search(), sales_rep_cases_search(), get_authorizer_portal_cases(), get_sales_rep_portal_cases(), Open composer to send message to authorizer only, Send email when an authorizer is assigned to the order, View portal documents, Get data for portal display, excluding sensitive information (+6 more)
-
-### Community 6 - "Community 6"
-Cohesion: 0.12
-Nodes (14): preview_pdf(), _draw_field(), fill_template(), PDFTemplateFiller, Generic PDF template filler. Works with any template, any number of pages., create(), FusionPdfTemplate, FusionPdfTemplateField (+6 more)
-
-### Community 7 - "Community 7"
-Cohesion: 0.11
-Nodes (14): accessibility_assessment_save(), AuthorizerPortal, Portal controller for Authorizers (OTs/Therapists), Parse straight stair lift specific fields, Parse curved stair lift specific fields, Parse VPL specific fields, Parse ceiling lift specific fields, Parse ramp specific fields (+6 more)
-
-### Community 8 - "Community 8"
-Cohesion: 0.21
-Nodes (22): buildDataKeyOptions(), buildDataKeysSidebar(), init(), jsonrpc(), loadFields(), normalize(), onFieldDragStart(), renderFieldMarker() (+14 more)
-
-### Community 9 - "Community 9"
-Cohesion: 0.29
-Nodes (11): checkClockStatus(), ensureModal(), getLocation(), hideModal(), isTechnicianPortal(), logLocation(), showDeniedBanner(), showModal() (+3 more)
-
-### Community 10 - "Community 10"
-Cohesion: 0.18
-Nodes (3): ADPDocument, Download the document, Get the download URL for portal access
-
-### Community 11 - "Community 11"
-Cohesion: 0.2
-Nodes (5): create_field(), FusionPdfEditorController, Controller for the PDF field position visual editor., update_field(), upload_preview_image()
-
-### Community 12 - "Community 12"
-Cohesion: 0.38
-Nodes (4): page11_sign_form(), page11_sign_submit(), Page11PublicSignController, Look up and validate a signing request by token.
-
-### Community 13 - "Community 13"
-Cohesion: 0.4
-Nodes (1): migrate()
-
-### Community 14 - "Community 14"
-Cohesion: 0.5
-Nodes (1): AuthorizerComment
-
-### Community 15 - "Community 15"
-Cohesion: 0.83
-Nodes (3): _detectAndSaveTimezone(), _getCookie(), start()
-
-### Community 16 - "Community 16"
-Cohesion: 0.67
-Nodes (1): FusionLoanerCheckoutAssessment
-
-### Community 17 - "Community 17"
-Cohesion: 0.67
-Nodes (0): 
-
-### Community 18 - "Community 18"
-Cohesion: 1.0
-Nodes (2): registerPushSubscription(), urlBase64ToUint8Array()
-
-### Community 19 - "Community 19"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 20 - "Community 20"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 21 - "Community 21"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 22 - "Community 22"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 23 - "Community 23"
-Cohesion: 1.0
-Nodes (1): Fill a PDF template by overlaying text/checkmarks/signatures at configured posit
-
-### Community 24 - "Community 24"
-Cohesion: 1.0
-Nodes (1): Draw a single field onto the reportlab canvas.          Args:             c: rep
-
-### Community 25 - "Community 25"
-Cohesion: 1.0
-Nodes (1): Override create to generate reference number
-
-### Community 26 - "Community 26"
-Cohesion: 1.0
-Nodes (1): Get authorizer from x_fc_authorizer_id field
-
-### Community 27 - "Community 27"
-Cohesion: 1.0
-Nodes (1): Get cases for authorizer portal with optional search
-
-### Community 28 - "Community 28"
-Cohesion: 1.0
-Nodes (1): Get cases for sales rep portal with optional search
-
-### Community 29 - "Community 29"
-Cohesion: 1.0
-Nodes (1): Override create to handle revision numbering
-
-### Community 30 - "Community 30"
-Cohesion: 1.0
-Nodes (1): Get documents for a sale order, optionally filtered by type
-
-### Community 31 - "Community 31"
-Cohesion: 1.0
-Nodes (1): Get all revisions of a specific document type
-
-### Community 32 - "Community 32"
-Cohesion: 1.0
-Nodes (1): Override create to set author from current user if not provided
-
-### Community 33 - "Community 33"
-Cohesion: 1.0
-Nodes (1): Kanban group expansion — always show all 6 workflow states.
-
-### Community 34 - "Community 34"
-Cohesion: 1.0
-Nodes (1): Straight stair lift: (steps × nose_to_nose) + 13" top landing
-
-### Community 35 - "Community 35"
-Cohesion: 1.0
-Nodes (1): Use manual override if provided, otherwise use calculated
-
-### Community 36 - "Community 36"
-Cohesion: 1.0
-Nodes (1): Curved stair lift calculation:         - 12" per step         - 16" per curve
-
-### Community 37 - "Community 37"
-Cohesion: 1.0
-Nodes (1): Use manual override if provided, otherwise use calculated
-
-### Community 38 - "Community 38"
-Cohesion: 1.0
-Nodes (1): Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)
-
-### Community 39 - "Community 39"
-Cohesion: 1.0
-Nodes (1): Landing required every 30 feet (360 inches)
-
-### Community 40 - "Community 40"
-Cohesion: 1.0
-Nodes (1): Total length including landings (5 feet = 60 inches each)
-
-### Community 41 - "Community 41"
-Cohesion: 1.0
-Nodes (1): Compute portal access status based on user account and login history.
-
-### Community 42 - "Community 42"
-Cohesion: 1.0
-Nodes (1): Count sale orders where this partner is the authorizer
-
-### Community 43 - "Community 43"
-Cohesion: 1.0
-Nodes (1): Count assessments where this partner is involved
-
-### Community 44 - "Community 44"
-Cohesion: 1.0
-Nodes (1): Count sale orders assigned to this partner as delivery technician
-
-### Community 45 - "Community 45"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 46 - "Community 46"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 47 - "Community 47"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 48 - "Community 48"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 49 - "Community 49"
-Cohesion: 1.0
-Nodes (0): 
-
-### Community 50 - "Community 50"
-Cohesion: 1.0
-Nodes (1): Display the Page 11 signing form.
-
-### Community 51 - "Community 51"
-Cohesion: 1.0
-Nodes (1): Process the submitted Page 11 signature.
-
-### Community 52 - "Community 52"
-Cohesion: 1.0
-Nodes (1): Download the signed Page 11 PDF.
-
-### Community 53 - "Community 53"
-Cohesion: 1.0
-Nodes (1): Start a new assessment
-
-### Community 54 - "Community 54"
-Cohesion: 1.0
-Nodes (1): View/edit an assessment
-
-### Community 55 - "Community 55"
-Cohesion: 1.0
-Nodes (1): Save assessment data (create or update)
-
-### Community 56 - "Community 56"
-Cohesion: 1.0
-Nodes (1): Signature capture page
-
-### Community 57 - "Community 57"
-Cohesion: 1.0
-Nodes (1): Save a signature (AJAX)
-
-### Community 58 - "Community 58"
-Cohesion: 1.0
-Nodes (1): Complete the assessment
-
-### Community 59 - "Community 59"
-Cohesion: 1.0
-Nodes (1): Start a new express assessment (Page 1 - Equipment Selection)
-
-### Community 60 - "Community 60"
-Cohesion: 1.0
-Nodes (1): Continue/edit an express assessment
-
-### Community 61 - "Community 61"
-Cohesion: 1.0
-Nodes (1): Save express assessment data (create or update)
-
-### Community 62 - "Community 62"
-Cohesion: 1.0
-Nodes (1): Public page for booking an accessibility assessment.
-
-### Community 63 - "Community 63"
-Cohesion: 1.0
-Nodes (1): Process assessment booking form submission.
-
-### Community 64 - "Community 64"
-Cohesion: 1.0
-Nodes (1): Render the visual field editor for a PDF template.
-
-### Community 65 - "Community 65"
-Cohesion: 1.0
-Nodes (1): Return all fields for a template.
-
-### Community 66 - "Community 66"
-Cohesion: 1.0
-Nodes (1): Update a field's position or properties.
-
-### Community 67 - "Community 67"
-Cohesion: 1.0
-Nodes (1): Create a new field on a template.
-
-### Community 68 - "Community 68"
-Cohesion: 1.0
-Nodes (1): Delete a field from a template.
-
-### Community 69 - "Community 69"
-Cohesion: 1.0
-Nodes (1): Return the preview image URL for a specific page.
-
-### Community 70 - "Community 70"
-Cohesion: 1.0
-Nodes (1): Upload a preview image for a template page directly from the editor.
-
-### Community 71 - "Community 71"
-Cohesion: 1.0
-Nodes (1): Generate a preview filled PDF with sample data.
-
-### Community 72 - "Community 72"
-Cohesion: 1.0
-Nodes (1): Auto-save browser-detected timezone to the user profile if not already set.
-
-### Community 73 - "Community 73"
-Cohesion: 1.0
-Nodes (1): Override home to add ADP posting info for Fusion users
-
-### Community 74 - "Community 74"
-Cohesion: 1.0
-Nodes (1): Authorizer dashboard - simplified mobile-first view
-
-### Community 75 - "Community 75"
-Cohesion: 1.0
-Nodes (1): List of cases assigned to the authorizer
-
-### Community 76 - "Community 76"
-Cohesion: 1.0
-Nodes (1): AJAX search endpoint for real-time search
-
-### Community 77 - "Community 77"
-Cohesion: 1.0
-Nodes (1): Add a comment to a case - posts to sale order chatter and emails salesperson
-
-### Community 78 - "Community 78"
-Cohesion: 1.0
-Nodes (1): Upload a document for a case
-
-### Community 79 - "Community 79"
-Cohesion: 1.0
-Nodes (1): Download an attachment from sale order (original application, xml, proof of deli
-
-### Community 80 - "Community 80"
-Cohesion: 1.0
-Nodes (1): View an approval photo
-
-### Community 81 - "Community 81"
-Cohesion: 1.0
-Nodes (1): Sales rep dashboard with search and filters
-
-### Community 82 - "Community 82"
-Cohesion: 1.0
-Nodes (1): List of cases for the sales rep
-
-### Community 83 - "Community 83"
-Cohesion: 1.0
-Nodes (1): AJAX search endpoint for sales rep real-time search
-
-### Community 84 - "Community 84"
-Cohesion: 1.0
-Nodes (1): View a specific case for sales rep
-
-### Community 85 - "Community 85"
-Cohesion: 1.0
-Nodes (1): Add a comment to a case (sales rep) - posts to sale order chatter and emails aut
-
-### Community 86 - "Community 86"
-Cohesion: 1.0
-Nodes (1): List of funding claims for the client
-
-### Community 87 - "Community 87"
-Cohesion: 1.0
-Nodes (1): View a specific funding claim
-
-### Community 88 - "Community 88"
-Cohesion: 1.0
-Nodes (1): Download a document from a funding claim
-
-### Community 89 - "Community 89"
-Cohesion: 1.0
-Nodes (1): Download proof of delivery from a funding claim
-
-### Community 90 - "Community 90"
-Cohesion: 1.0
-Nodes (1): Technician dashboard - today's schedule with timeline.
-
-### Community 91 - "Community 91"
-Cohesion: 1.0
-Nodes (1): List of all tasks for the technician.
-
-### Community 92 - "Community 92"
-Cohesion: 1.0
-Nodes (1): View a specific technician task.
-
-### Community 93 - "Community 93"
-Cohesion: 1.0
-Nodes (1): Add notes (and optional photos) to a completed task.          :param notes: text
-
-### Community 94 - "Community 94"
-Cohesion: 1.0
-Nodes (1): Handle task status changes (start, complete, en_route, cancel).         Location
-
-### Community 95 - "Community 95"
-Cohesion: 1.0
-Nodes (1): Transcribe voice recording using OpenAI Whisper, translate to English.
-
-### Community 96 - "Community 96"
-Cohesion: 1.0
-Nodes (1): Use GPT to clean up and format raw notes text.
-
-### Community 97 - "Community 97"
-Cohesion: 1.0
-Nodes (1): Format transcription with GPT and complete the task.
-
-### Community 98 - "Community 98"
-Cohesion: 1.0
-Nodes (1): Next day preparation view.
-
-### Community 99 - "Community 99"
-Cohesion: 1.0
-Nodes (1): View schedule for a specific date.
-
-### Community 100 - "Community 100"
-Cohesion: 1.0
-Nodes (1): Admin map view showing latest technician locations using Google Maps.
-
-### Community 101 - "Community 101"
-Cohesion: 1.0
-Nodes (1): Log the technician's current GPS location.
-
-### Community 102 - "Community 102"
-Cohesion: 1.0
-Nodes (1): Check if the current technician is clocked in.          Returns {clocked_in: boo
-
-### Community 103 - "Community 103"
-Cohesion: 1.0
-Nodes (1): Save the technician's personal start location.
-
-### Community 104 - "Community 104"
-Cohesion: 1.0
-Nodes (1): Register a push notification subscription.
-
-### Community 105 - "Community 105"
-Cohesion: 1.0
-Nodes (1): Legacy: List of deliveries for the technician (redirects to tasks).
-
-### Community 106 - "Community 106"
-Cohesion: 1.0
-Nodes (1): View a specific delivery for technician (legacy, still works).
-
-### Community 107 - "Community 107"
-Cohesion: 1.0
-Nodes (1): POD signature capture page - accessible by technicians and sales reps
-
-### Community 108 - "Community 108"
-Cohesion: 1.0
-Nodes (1): Save POD signature via AJAX
-
-### Community 109 - "Community 109"
-Cohesion: 1.0
-Nodes (1): Task-level POD signature capture page (works for all tasks including shadow).
-
-### Community 110 - "Community 110"
-Cohesion: 1.0
-Nodes (1): Save POD signature directly on a task.
-
-### Community 111 - "Community 111"
-Cohesion: 1.0
-Nodes (1): Show the accessibility assessment type selector
-
-### Community 112 - "Community 112"
-Cohesion: 1.0
-Nodes (1): List all accessibility assessments for the current user (sales rep or authorizer
-
-### Community 113 - "Community 113"
-Cohesion: 1.0
-Nodes (1): Straight stair lift assessment form
-
-### Community 114 - "Community 114"
-Cohesion: 1.0
-Nodes (1): Curved stair lift assessment form
-
-### Community 115 - "Community 115"
-Cohesion: 1.0
-Nodes (1): Vertical Platform Lift assessment form
-
-### Community 116 - "Community 116"
-Cohesion: 1.0
-Nodes (1): Ceiling Lift assessment form
-
-### Community 117 - "Community 117"
-Cohesion: 1.0
-Nodes (1): Custom Ramp assessment form
-
-### Community 118 - "Community 118"
-Cohesion: 1.0
-Nodes (1): Bathroom Modification assessment form
-
-### Community 119 - "Community 119"
-Cohesion: 1.0
-Nodes (1): Tub Cutout assessment form
-
-### Community 120 - "Community 120"
-Cohesion: 1.0
-Nodes (1): Save an accessibility assessment and optionally create a Sale Order
-
-### Community 121 - "Community 121"
-Cohesion: 1.0
-Nodes (1): Render the rental pickup inspection form for the technician.
-
-### Community 122 - "Community 122"
-Cohesion: 1.0
-Nodes (1): Save the rental inspection results.
-
-## Knowledge Gaps
-- **177 isolated node(s):** `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`, `Draw a single field onto the reportlab canvas.          Args:             c: rep`, `Override create to generate reference number` (+172 more)
-  These have ≤1 connection - possible missing edges or undocumented components.
-- **Thin community `Community 19`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 20`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 21`** (1 nodes): `__init__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 22`** (1 nodes): `__manifest__.py`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 23`** (1 nodes): `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 24`** (1 nodes): `Draw a single field onto the reportlab canvas.          Args:             c: rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 25`** (1 nodes): `Override create to generate reference number`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 26`** (1 nodes): `Get authorizer from x_fc_authorizer_id field`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 27`** (1 nodes): `Get cases for authorizer portal with optional search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 28`** (1 nodes): `Get cases for sales rep portal with optional search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 29`** (1 nodes): `Override create to handle revision numbering`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 30`** (1 nodes): `Get documents for a sale order, optionally filtered by type`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 31`** (1 nodes): `Get all revisions of a specific document type`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 32`** (1 nodes): `Override create to set author from current user if not provided`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 33`** (1 nodes): `Kanban group expansion — always show all 6 workflow states.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 34`** (1 nodes): `Straight stair lift: (steps × nose_to_nose) + 13" top landing`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 35`** (1 nodes): `Use manual override if provided, otherwise use calculated`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 36`** (1 nodes): `Curved stair lift calculation:         - 12" per step         - 16" per curve`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 37`** (1 nodes): `Use manual override if provided, otherwise use calculated`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 38`** (1 nodes): `Ontario Building Code: 12 inches length per 1 inch height (1:12 ratio)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 39`** (1 nodes): `Landing required every 30 feet (360 inches)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 40`** (1 nodes): `Total length including landings (5 feet = 60 inches each)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 41`** (1 nodes): `Compute portal access status based on user account and login history.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 42`** (1 nodes): `Count sale orders where this partner is the authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 43`** (1 nodes): `Count assessments where this partner is involved`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 44`** (1 nodes): `Count sale orders assigned to this partner as delivery technician`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 45`** (1 nodes): `assessment_form.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 46`** (1 nodes): `technician_sw.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 47`** (1 nodes): `loaner_portal.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 48`** (1 nodes): `signature_pad.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 49`** (1 nodes): `portal_search.js`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 50`** (1 nodes): `Display the Page 11 signing form.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 51`** (1 nodes): `Process the submitted Page 11 signature.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 52`** (1 nodes): `Download the signed Page 11 PDF.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 53`** (1 nodes): `Start a new assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 54`** (1 nodes): `View/edit an assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 55`** (1 nodes): `Save assessment data (create or update)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 56`** (1 nodes): `Signature capture page`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 57`** (1 nodes): `Save a signature (AJAX)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 58`** (1 nodes): `Complete the assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 59`** (1 nodes): `Start a new express assessment (Page 1 - Equipment Selection)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 60`** (1 nodes): `Continue/edit an express assessment`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 61`** (1 nodes): `Save express assessment data (create or update)`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 62`** (1 nodes): `Public page for booking an accessibility assessment.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 63`** (1 nodes): `Process assessment booking form submission.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 64`** (1 nodes): `Render the visual field editor for a PDF template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 65`** (1 nodes): `Return all fields for a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 66`** (1 nodes): `Update a field's position or properties.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 67`** (1 nodes): `Create a new field on a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 68`** (1 nodes): `Delete a field from a template.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 69`** (1 nodes): `Return the preview image URL for a specific page.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 70`** (1 nodes): `Upload a preview image for a template page directly from the editor.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 71`** (1 nodes): `Generate a preview filled PDF with sample data.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 72`** (1 nodes): `Auto-save browser-detected timezone to the user profile if not already set.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 73`** (1 nodes): `Override home to add ADP posting info for Fusion users`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 74`** (1 nodes): `Authorizer dashboard - simplified mobile-first view`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 75`** (1 nodes): `List of cases assigned to the authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 76`** (1 nodes): `AJAX search endpoint for real-time search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 77`** (1 nodes): `Add a comment to a case - posts to sale order chatter and emails salesperson`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 78`** (1 nodes): `Upload a document for a case`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 79`** (1 nodes): `Download an attachment from sale order (original application, xml, proof of deli`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 80`** (1 nodes): `View an approval photo`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 81`** (1 nodes): `Sales rep dashboard with search and filters`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 82`** (1 nodes): `List of cases for the sales rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 83`** (1 nodes): `AJAX search endpoint for sales rep real-time search`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 84`** (1 nodes): `View a specific case for sales rep`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 85`** (1 nodes): `Add a comment to a case (sales rep) - posts to sale order chatter and emails aut`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 86`** (1 nodes): `List of funding claims for the client`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 87`** (1 nodes): `View a specific funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 88`** (1 nodes): `Download a document from a funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 89`** (1 nodes): `Download proof of delivery from a funding claim`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 90`** (1 nodes): `Technician dashboard - today's schedule with timeline.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 91`** (1 nodes): `List of all tasks for the technician.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 92`** (1 nodes): `View a specific technician task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 93`** (1 nodes): `Add notes (and optional photos) to a completed task.          :param notes: text`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 94`** (1 nodes): `Handle task status changes (start, complete, en_route, cancel).         Location`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 95`** (1 nodes): `Transcribe voice recording using OpenAI Whisper, translate to English.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 96`** (1 nodes): `Use GPT to clean up and format raw notes text.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 97`** (1 nodes): `Format transcription with GPT and complete the task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 98`** (1 nodes): `Next day preparation view.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 99`** (1 nodes): `View schedule for a specific date.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 100`** (1 nodes): `Admin map view showing latest technician locations using Google Maps.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 101`** (1 nodes): `Log the technician's current GPS location.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 102`** (1 nodes): `Check if the current technician is clocked in.          Returns {clocked_in: boo`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 103`** (1 nodes): `Save the technician's personal start location.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 104`** (1 nodes): `Register a push notification subscription.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 105`** (1 nodes): `Legacy: List of deliveries for the technician (redirects to tasks).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 106`** (1 nodes): `View a specific delivery for technician (legacy, still works).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 107`** (1 nodes): `POD signature capture page - accessible by technicians and sales reps`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 108`** (1 nodes): `Save POD signature via AJAX`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 109`** (1 nodes): `Task-level POD signature capture page (works for all tasks including shadow).`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 110`** (1 nodes): `Save POD signature directly on a task.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 111`** (1 nodes): `Show the accessibility assessment type selector`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 112`** (1 nodes): `List all accessibility assessments for the current user (sales rep or authorizer`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 113`** (1 nodes): `Straight stair lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 114`** (1 nodes): `Curved stair lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 115`** (1 nodes): `Vertical Platform Lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 116`** (1 nodes): `Ceiling Lift assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 117`** (1 nodes): `Custom Ramp assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 118`** (1 nodes): `Bathroom Modification assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 119`** (1 nodes): `Tub Cutout assessment form`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 120`** (1 nodes): `Save an accessibility assessment and optionally create a Sale Order`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 121`** (1 nodes): `Render the rental pickup inspection form for the technician.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-- **Thin community `Community 122`** (1 nodes): `Save the rental inspection results.`
-  Too small to be a meaningful cluster - may be noise or needs more connections extracted.
-
-## Suggested Questions
-_Questions this graph is uniquely positioned to answer:_
-
-- **Why does `create()` connect `Community 3` to `Community 0`, `Community 1`, `Community 4`, `Community 7`, `Community 11`?**
-  _High betweenness centrality (0.080) - this node is a cross-community bridge._
-- **Why does `FusionAssessment` connect `Community 2` to `Community 4`?**
-  _High betweenness centrality (0.059) - this node is a cross-community bridge._
-- **Why does `AuthorizerPortal` connect `Community 7` to `Community 0`, `Community 4`?**
-  _High betweenness centrality (0.047) - this node is a cross-community bridge._
-- **Are the 17 inferred relationships involving `create()` (e.g. with `._generate_tutorial_articles()` and `.action_grant_portal_access()`) actually correct?**
-  _`create()` has 17 INFERRED edges - model-reasoned connections that need verification._
-- **Are the 2 inferred relationships involving `accessibility_assessment_save()` (e.g. with `create()` and `.action_complete()`) actually correct?**
-  _`accessibility_assessment_save()` has 2 INFERRED edges - model-reasoned connections that need verification._
-- **What connects `Ensure all module views are active after install/update.      Odoo silently deac`, `Generic PDF template filler. Works with any template, any number of pages.`, `Fill a PDF template by overlaying text/checkmarks/signatures at configured posit` to the rest of the system?**
-  _177 weakly-connected nodes found - possible documentation gaps or missing edges._
-- **Should `Community 0` be split into smaller, more focused modules?**
-  _Cohesion score 0.05 - nodes in this community are weakly interconnected._

fusion_authorizer_portal/graphify-out/cache/046056455412ebee936412c1240a69f937f190344b64ec0454b6063195d45271.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "label": "authorizer_comment.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L1"}, {"id": "authorizer_comment_authorizercomment", "label": "AuthorizerComment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9"}, {"id": "authorizer_comment_compute_display_name", "label": "_compute_display_name()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70"}, {"id": "authorizer_comment_create", "label": "create()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78"}, {"id": "authorizer_comment_rationale_79", "label": "Override create to set author from current user if not provided", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_authorizercomment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_compute_display_name", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L70", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_authorizer_comment_py", "target": "authorizer_comment_create", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L78", "weight": 1.0}, {"source": "authorizer_comment_rationale_79", "target": "authorizer_comment_authorizercomment_create", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L79", "weight": 1.0}], "raw_calls": [{"caller_nid": "authorizer_comment_compute_display_name", "callee": "strftime", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L73"}, {"caller_nid": "authorizer_comment_compute_display_name", "callee": "_", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L75"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L81"}, {"caller_nid": "authorizer_comment_create", "callee": "get", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L83"}, {"caller_nid": "authorizer_comment_create", "callee": "super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/authorizer_comment.py", "source_location": "L85"}]}

fusion_authorizer_portal/graphify-out/cache/201bffcfb9df81c1c697f76723db3d2b55f70a670695aa4cffad72f1e543c31a.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_5_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.5.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/308a1a5138c86acd5683293941dccb2eddc57c55e2795de263eee8f7ceaf4785.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "label": "chatter_message_authorizer.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L1"}, {"id": "chatter_message_authorizer_setup", "label": "setup()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14"}, {"id": "chatter_message_authorizer_onclickmessageauthorizer", "label": "onClickMessageAuthorizer()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "patch", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "hooks", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_setup", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L14", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_chatter_message_authorizer_js", "target": "chatter_message_authorizer_onclickmessageauthorizer", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L20", "weight": 1.0}], "raw_calls": [{"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L16"}, {"caller_nid": "chatter_message_authorizer_setup", "callee": "useService", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L17"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "call", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L25"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "map", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "split", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L32"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "doAction", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L34"}, {"caller_nid": "chatter_message_authorizer_onclickmessageauthorizer", "callee": "warn", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/chatter_message_authorizer.js", "source_location": "L37"}]}

fusion_authorizer_portal/graphify-out/cache/344325bcf48b6dae6ea42a035e0cc7e4cec0dfedec2b4e2bd28faece240df747.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L6", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L10", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/__init__.py", "source_location": "L11", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3bd9ca6c402373c66eb4922b9d6ba658e2386a32cd63c119daea3714ef5ca4fa.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "label": "timezone_detect.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L1"}, {"id": "timezone_detect_start", "label": "start()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8"}, {"id": "timezone_detect_detectandsavetimezone", "label": "_detectAndSaveTimezone()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13"}, {"id": "timezone_detect_getcookie", "label": "_getCookie()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_start", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L8", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_detectandsavetimezone", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L13", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_timezone_detect_js", "target": "timezone_detect_getcookie", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L30", "weight": 1.0}, {"source": "timezone_detect_start", "target": "timezone_detect_detectandsavetimezone", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L10", "weight": 1.0}, {"source": "timezone_detect_detectandsavetimezone", "target": "timezone_detect_getcookie", "relation": "calls", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L22", "weight": 1.0}], "raw_calls": [{"caller_nid": "timezone_detect_start", "callee": "_super", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L9"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "resolvedOptions", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "DateTimeFormat", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L16"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "catch", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_detectandsavetimezone", "callee": "_rpc", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L27"}, {"caller_nid": "timezone_detect_getcookie", "callee": "match", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L31"}, {"caller_nid": "timezone_detect_getcookie", "callee": "decodeURIComponent", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/timezone_detect.js", "source_location": "L32"}]}

fusion_authorizer_portal/graphify-out/cache/3c8153d244043ce50d63f92e28c5047a85aa0403183feb9318309e281c3a3aee.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L5", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_controllers_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/controllers/__init__.py", "source_location": "L6", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/3cd6493213bae26920500259650a0498e68c60d6ba1969312a624edc63c9fd93.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L11", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_6_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L24", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L28"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchone", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L35"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L36"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L39"}, {"caller_nid": "end_migrate_migrate", "callee": "info", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L44"}, {"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L49"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L60"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L62"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.6.0/end-migrate.py", "source_location": "L64"}]}

fusion_authorizer_portal/graphify-out/cache/55625cb82706d37b738a37ae8c2666788e3e3bde08167936cd99f4a7b65dd586.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L1"}, {"id": "init_reactivate_views", "label": "_reactivate_views()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7"}, {"id": "init_rationale_8", "label": "Ensure all module views are active after install/update.      Odoo silently deac", "file_type": "rationale", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L4", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_init_py", "target": "init_reactivate_views", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L7", "weight": 1.0}, {"source": "init_rationale_8", "target": "init_reactivate_views", "relation": "rationale_for", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L8", "weight": 1.0}], "raw_calls": [{"caller_nid": "init_reactivate_views", "callee": "search", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "sudo", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L15"}, {"caller_nid": "init_reactivate_views", "callee": "write", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L20"}, {"caller_nid": "init_reactivate_views", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L21"}, {"caller_nid": "init_reactivate_views", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L26"}, {"caller_nid": "init_reactivate_views", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "getLogger", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L28"}, {"caller_nid": "init_reactivate_views", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__init__.py", "source_location": "L29"}]}

fusion_authorizer_portal/graphify-out/cache/5e06da4bd569ef8ff94d79611571501a0fe7ccc3d3d3a1355cafc7d83441e575.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_manifest_py", "label": "__manifest__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/__manifest__.py", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/66efd778b81d727e4df14662ff378f4d8c31bca05f87fa387c0760f7ecb8e0bf.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_signature_pad_js", "label": "signature_pad.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/signature_pad.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/82b54859e3cdc0d06aa234bd56e490b57a84237c34185a8293d42ea42e64f01c.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_assessment_form_js", "label": "assessment_form.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/assessment_form.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/8e18c26853be951ba743bc6bc1f889014ea593bbdb3f096de5307c4a29291298.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_4_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.4.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/a0b44e9d1d686feedbb45abc7155102474b444c2375e41ec4e884d331befcef4.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "label": "end-migrate.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L1"}, {"id": "end_migrate_migrate", "label": "migrate()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "logging", "relation": "imports", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L9", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_migrations_19_0_2_3_0_end_migrate_py", "target": "end_migrate_migrate", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L16", "weight": 1.0}], "raw_calls": [{"caller_nid": "end_migrate_migrate", "callee": "execute", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L20"}, {"caller_nid": "end_migrate_migrate", "callee": "fetchall", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L31"}, {"caller_nid": "end_migrate_migrate", "callee": "warning", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L33"}, {"caller_nid": "end_migrate_migrate", "callee": "len", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/migrations/19.0.2.3.0/end-migrate.py", "source_location": "L35"}]}

fusion_authorizer_portal/graphify-out/cache/adeb8dd4ce55111ffd86c41804940dc0bba334af2e7a1a4e2caa11d2a5fded3d.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_portal_search_js", "label": "portal_search.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/portal_search.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/bdab7c3bffb56f3c01889c19039dda8139704dae111032451eee29d4da1aba7e.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "label": "loaner_checkout.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L1"}, {"id": "loaner_checkout_fusionloanercheckoutassessment", "label": "FusionLoanerCheckoutAssessment", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6"}, {"id": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "label": ".action_view_assessment()", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "odoo", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L3", "weight": 1.0}, {"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_models_loaner_checkout_py", "target": "loaner_checkout_fusionloanercheckoutassessment", "relation": "contains", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L6", "weight": 1.0}, {"source": "loaner_checkout_fusionloanercheckoutassessment", "target": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "relation": "method", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L17", "weight": 1.0}], "raw_calls": [{"caller_nid": "loaner_checkout_fusionloanercheckoutassessment_action_view_assessment", "callee": "ensure_one", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/models/loaner_checkout.py", "source_location": "L18"}]}

fusion_authorizer_portal/graphify-out/cache/bdadca0a69fae44893e3cd9e9e3178034415564cc70f31d6353ea1a688d5e54e.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "label": "loaner_portal.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_loaner_portal_js", "target": "public_widget", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/loaner_portal.js", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/dee4a573c575f3c42bf1f4a7d900626dacaba915ece6630ef0274e624fc906f8.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_static_src_js_technician_sw_js", "label": "technician_sw.js", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/static/src/js/technician_sw.js", "source_location": "L1"}], "edges": [], "raw_calls": []}

fusion_authorizer_portal/graphify-out/cache/df42568b96706fa316a1cf512784acdf5b0014abc5fc1ff47f187baed68f0a1f.json

@@ -1 +0,0 @@
-{"nodes": [{"id": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "label": "__init__.py", "file_type": "code", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L1"}], "edges": [{"source": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "target": "users_gurpreet_github_odoo_modules_fusion_authorizer_portal_utils_init_py", "relation": "imports_from", "confidence": "EXTRACTED", "source_file": "/Users/gurpreet/Github/Odoo-Modules/fusion_authorizer_portal/utils/__init__.py", "source_location": "L3", "weight": 1.0}], "raw_calls": []}

fusion_centralize_billing/models/service.py

@@ -247,3 +247,24 @@ class FusionBillingService(models.Model):
         sub.action_confirm()
         return {'status': 'ok', 'subscription_id': sub.id,
                 'subscription_state': sub.subscription_state}
+
+    def _api_cancel_subscription(self, external_ref):
+        """Cancel (close) the subscription identified by ``external_ref``.
+
+        Authorization mirrors ``_api_record_usage``: the resolved sale.order must
+        exist, be a subscription, and belong to a customer THIS service is linked
+        to. Idempotent — closing an already-churned subscription returns ok.
+        Validation (C3): an empty ref returns a 4xx-shaped error, never raises.
+        """
+        self.ensure_one()
+        if external_ref in (None, ''):
+            return {'status': 'error', 'error': 'subscription id required'}
+        sub = self._fc_resolve_subscription(external_ref)
+        linked_partners = self.account_link_ids.mapped('partner_id')
+        if not sub.exists() or not sub.is_subscription \
+                or sub.partner_id not in linked_partners:
+            return {'status': 'error', 'error': 'unknown subscription'}
+        if sub.subscription_state != '6_churn':
+            sub.set_close()
+        return {'status': 'ok', 'subscription_id': sub.id,
+                'subscription_state': sub.subscription_state}

fusion_centralize_billing/tests/__init__.py

@@ -6,3 +6,4 @@ from . import test_webhook
 from . import test_importer
 from . import test_reconciliation
 from . import test_invoice_ledger
+from . import test_subscription_cancel

fusion_centralize_billing/tests/test_invoice_ledger.py

@@ -18,11 +18,26 @@ def _inv_fixture():
     }]
 
 
+def _fc_ensure_ca_billing_env(env):
+    """Prod (`nexamain`) is a fully-configured Canadian company; a bare test DB is not.
+    Give it the two things the ledger needs: an active CAD currency and a 13% sale tax
+    matching invoice.ledger.wizard._fc_tax_for (type_tax_use=sale, percent, amount=13)."""
+    cad = env.ref('base.CAD')
+    if not cad.active:
+        cad.sudo().write({'active': True})
+    Tax = env['account.tax'].sudo()
+    if not Tax.search([('type_tax_use', '=', 'sale'),
+                       ('amount_type', '=', 'percent'), ('amount', '=', 13.0)], limit=1):
+        Tax.create({'name': 'HST 13%', 'type_tax_use': 'sale',
+                    'amount_type': 'percent', 'amount': 13.0})
+
+
 @tagged('post_install', '-at_install')
 class TestLedgerFamily(TransactionCase):
 
     def setUp(self):
         super().setUp()
+        _fc_ensure_ca_billing_env(self.env)
         self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
 
     def test_family_classification(self):
@@ -47,6 +62,7 @@ class TestLedgerTax(TransactionCase):
 
     def setUp(self):
         super().setUp()
+        _fc_ensure_ca_billing_env(self.env)
         self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
 
     def test_tax_for_13pct_is_a_13_percent_sale_tax(self):
@@ -68,6 +84,7 @@ class TestLedgerIngest(TransactionCase):
 
     def setUp(self):
         super().setUp()
+        _fc_ensure_ca_billing_env(self.env)
         self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
         self.Move = self.env['account.move']
 
@@ -174,6 +191,7 @@ class TestLedgerVerifiedSync(TransactionCase):
 
     def setUp(self):
         super().setUp()
+        _fc_ensure_ca_billing_env(self.env)
         self.W = self.env['fusion.billing.invoice.ledger.wizard'].sudo()
         self.Move = self.env['account.move']
         ICP = self.env['ir.config_parameter'].sudo()

fusion_centralize_billing/tests/test_subscription_cancel.py

@@ -0,0 +1,54 @@
+# -*- coding: utf-8 -*-
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestSubscriptionCancel(TransactionCase):
+
+    def _service(self, code, name):
+        Svc = self.env['fusion.billing.service'].sudo()
+        return Svc.search([('code', '=', code)], limit=1) or Svc.create(
+            {'name': name, 'code': code})
+
+    def setUp(self):
+        super().setUp()
+        self.plan = self.env['sale.subscription.plan'].sudo().create(
+            {'name': 'Monthly', 'billing_period_value': 1, 'billing_period_unit': 'month'})
+        self.product = self.env['product.product'].sudo().create(
+            {'name': 'NexaCloud Plan', 'type': 'service',
+             'recurring_invoice': True, 'list_price': 49.0})
+        self.svc_a = self._service('nexacloud', 'NexaCloud')
+        self.svc_b = self._service('other_app', 'Other App')
+        self.svc_a._api_upsert_customer({'external_id': 'user-1', 'name': 'Acme'})
+        res = self.svc_a._api_create_subscription({
+            'external_customer_id': 'user-1', 'plan_id': self.plan.id,
+            'lines': [{'product_id': self.product.id, 'quantity': 1}]})
+        self.sub = self.env['sale.order'].browse(res['subscription_id'])
+
+    def test_cancel_closes_subscription(self):
+        self.assertEqual(self.sub.subscription_state, '3_progress')
+        res = self.svc_a._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'ok')
+        self.assertEqual(self.sub.subscription_state, '6_churn')
+
+    def test_cancel_is_idempotent(self):
+        self.svc_a._api_cancel_subscription(str(self.sub.id))
+        res = self.svc_a._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'ok')
+        self.assertEqual(self.sub.subscription_state, '6_churn')
+
+    def test_cancel_unknown_subscription_rejected(self):
+        res = self.svc_a._api_cancel_subscription('999999999')
+        self.assertEqual(res['status'], 'error')
+        self.assertEqual(res['error'], 'unknown subscription')
+
+    def test_cancel_cross_service_rejected(self):
+        # svc_b is not linked to the customer that owns self.sub
+        res = self.svc_b._api_cancel_subscription(str(self.sub.id))
+        self.assertEqual(res['status'], 'error')
+        self.assertEqual(res['error'], 'unknown subscription')
+        self.assertEqual(self.sub.subscription_state, '3_progress')
+
+    def test_cancel_missing_id_rejected(self):
+        res = self.svc_a._api_cancel_subscription('')
+        self.assertEqual(res['status'], 'error')

fusion_centralize_billing/tests/test_usage.py

@@ -9,7 +9,8 @@ class TestRatingCron(TransactionCase):
 
     def setUp(self):
         super().setUp()
-        self.metric = self.env['fusion.billing.metric'].sudo().create(
+        Metric = self.env['fusion.billing.metric'].sudo()
+        self.metric = Metric.search([('code', '=', 'cpu_seconds')], limit=1) or Metric.create(
             {'name': 'CPU seconds', 'code': 'cpu_seconds', 'aggregation': 'sum'})
         self.plan_a = self.env['sale.subscription.plan'].sudo().create(
             {'name': 'Plan A', 'billing_period_value': 1, 'billing_period_unit': 'month'})
@@ -67,7 +68,8 @@ class TestUsageIngestion(TransactionCase):
 
     def setUp(self):
         super().setUp()
-        self.metric = self.env['fusion.billing.metric'].sudo().create(
+        Metric = self.env['fusion.billing.metric'].sudo()
+        self.metric = Metric.search([('code', '=', 'cpu_seconds')], limit=1) or Metric.create(
             {'name': 'CPU seconds', 'code': 'cpu_seconds', 'aggregation': 'sum'})
         self.plan = self.env['sale.subscription.plan'].sudo().create(
             {'name': 'Monthly', 'billing_period_value': 1, 'billing_period_unit': 'month'})

fusion_centralize_billing/tests/test_webhook.py

@@ -13,11 +13,17 @@ class TestWebhookEngine(TransactionCase):
 
     def setUp(self):
         super().setUp()
-        self.service = self.env['fusion.billing.service'].sudo().create({
+        Service = self.env['fusion.billing.service'].sudo()
+        vals = {
             'name': 'NexaCloud', 'code': 'nexacloud',
             'webhook_url': 'https://api.vps.nexasystems.ca/billing/webhook',
             'webhook_secret': 'whsec_test',
-        })
+        }
+        self.service = Service.search([('code', '=', 'nexacloud')], limit=1)
+        if self.service:
+            self.service.write(vals)
+        else:
+            self.service = Service.create(vals)
         self.Webhook = self.env['fusion.billing.webhook'].sudo()
 
     def test_enqueue_signs_payload(self):

fusion_claims/CLAUDE.md

@@ -33,14 +33,14 @@ fusion_ringcentral, fusion_tasks
 
 `wizard/odsp_submit_to_odsp_wizard.py` calls into `fusion_faxes.send.fax.wizard` (the fax composer) and reads `partner.x_ff_fax_number` — **but `fusion_faxes` is NOT in `__manifest__.py.depends`**. The fax actions are guarded by `hasattr` checks so the wizard still loads if `fusion_faxes` is missing, but the "Send Fax" / "Send Email + Fax" buttons will fail at click-time. If you're moving this module to a new database, install `fusion_faxes` alongside it.
 
-### ⚠ Reverse-dependency: `fusion_authorizer_portal` always installed alongside
+### ⚠ Reverse-dependency: `fusion_portal` always installed alongside
 
-The dependency direction is **`fusion_authorizer_portal` → `fusion_claims`** (hard, declared in fusion_authorizer_portal's manifest), but fusion_claims uses APIs that only exist when fusion_authorizer_portal is installed:
+The dependency direction is **`fusion_portal` → `fusion_claims`** (hard, declared in fusion_portal's manifest), but fusion_claims uses APIs that only exist when fusion_portal is installed:
 
-- `sale.order._apply_pod_signature_to_approval_form` imports `PDFTemplateFiller` from `odoo.addons.fusion_authorizer_portal.utils.pdf_filler` — `ImportError` if missing.
-- `fusion.page11.sign.request` renders PDFs using `fusion.pdf.template` records — that **model lives in fusion_authorizer_portal**, not here.
-- The `/page11/sign/<token>` URL that the Page 11 wizard generates is handled by `fusion_authorizer_portal.controllers.portal_page11_sign` — without it the public signing flow is dead.
-- `page11_sign_request._generate_signed_pdf` references `fusion.assessment` records — that model also lives in fusion_authorizer_portal.
+- `sale.order._apply_pod_signature_to_approval_form` imports `PDFTemplateFiller` from `odoo.addons.fusion_portal.utils.pdf_filler` — `ImportError` if missing.
+- `fusion.page11.sign.request` renders PDFs using `fusion.pdf.template` records — that **model lives in fusion_portal**, not here.
+- The `/page11/sign/<token>` URL that the Page 11 wizard generates is handled by `fusion_portal.controllers.portal_page11_sign` — without it the public signing flow is dead.
+- `page11_sign_request._generate_signed_pdf` references `fusion.assessment` records — that model also lives in fusion_portal.
 
 In practice both modules are always installed together. See §29 for the full integration map.
 
@@ -861,7 +861,7 @@ Mirrors the MOD on_hold pattern. `x_fc_odsp_previous_status_before_hold` saves t
 | Method | Used when | Mechanism |
 |---|---|---|
 | `action_sign_sa_mobility_form` | Client signs the SA Mobility form directly (Page 2 client consent) | **Hard-coded coordinates**: writes printed name at `(180, h-180)` and `(72, h-560)`, date at `(350, h-560)`, signature image at `(72, h-540, 200×50px)`. Uses `reportlab.pdfgen.canvas` + `odoo.tools.pdf.PdfFileReader/Writer`. **Brittle** — if the gov PDF layout changes, the coordinates must be re-measured. |
-| `_apply_pod_signature_to_approval_form` | POD signature collected (auto-fired by `write` override when `x_fc_pod_signature` is set) | **PDFTemplateFiller** from `fusion_authorizer_portal` — reads field positions from the active `fusion.pdf.template` (category=`odsp`), uses per-case `x_fc_sa_signature_page`. Configurable via drag-and-drop visual editor, not code. Bypass via `skip_pod_signature_hook=True` context. |
+| `_apply_pod_signature_to_approval_form` | POD signature collected (auto-fired by `write` override when `x_fc_pod_signature` is set) | **PDFTemplateFiller** from `fusion_portal` — reads field positions from the active `fusion.pdf.template` (category=`odsp`), uses per-case `x_fc_sa_signature_page`. Configurable via drag-and-drop visual editor, not code. Bypass via `skip_pod_signature_hook=True` context. |
 
 The PDFTemplateFiller approach is the preferred path going forward — it survives gov form revisions because positions live in the database, not in Python code.
 
@@ -1588,7 +1588,7 @@ All user-facing text is **Canadian English** (per repo CLAUDE.md). All monetary
 
 74. **`odsp_sa_mobility_wizard._get_template_path()` uses raw `os.path`** instead of Odoo's `tools.misc.file_path`. If the module is ever deployed as a zip (rare in Odoo deployments but possible), this will fail. Migrate to `file_path('fusion_claims/static/src/pdf/sa_mobility_form_template.pdf')` if you ship this for multi-tenant.
 
-75. **PDF template field positions for ODSP signing live in `fusion.pdf.template` (category=odsp)** — managed via a drag-and-drop editor that lives in `fusion_authorizer_portal`. The OWL editor reads field positions per-page; `_apply_pod_signature_to_approval_form` consumes them. If the gov SA form layout changes, edit the template via the visual editor, not by changing Python coordinates.
+75. **PDF template field positions for ODSP signing live in `fusion.pdf.template` (category=odsp)** — managed via a drag-and-drop editor that lives in `fusion_portal`. The OWL editor reads field positions per-page; `_apply_pod_signature_to_approval_form` consumes them. If the gov SA form layout changes, edit the template via the visual editor, not by changing Python coordinates.
 
 76. **SA Mobility wizard limits rows**: 6 parts, 5 labour, 4 fees. The gov PDF only has that many slots. If the SO has more lines, the rest are silently dropped from the form fill (but still appear in the invoice). The wizard truncates via slicing in `default_get`.
 
@@ -1862,11 +1862,11 @@ This module is the **lower-level engine**. Two sibling modules layer on top of i
 
 The whole technician task → sale order coupling lives in `fusion_claims/models/technician_task.py:674` — and the calendar / map / scheduling logic stays in the base `fusion.technician.task` model in fusion_tasks.
 
-### 29.2 `fusion_authorizer_portal` (portal layer — undeclared but co-installed)
+### 29.2 `fusion_portal` (portal layer — undeclared but co-installed)
 
-fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `fusion_loaners_management` as hard deps. fusion_claims uses APIs that only exist when fusion_authorizer_portal is installed — see the dependency note at the top of §2.
+fusion_portal manifest declares `fusion_claims` + `fusion_tasks` + `fusion_loaners_management` as hard deps. fusion_claims uses APIs that only exist when fusion_portal is installed — see the dependency note at the top of §2.
 
-| Provided by fusion_authorizer_portal | Used by fusion_claims |
+| Provided by fusion_portal | Used by fusion_claims |
 |---|---|
 | `PDFTemplateFiller` class (`utils/pdf_filler.py`) | `sale.order._apply_pod_signature_to_approval_form` imports it. Same pattern as Odoo Enterprise Sign module — overlays text/checkmarks/signatures via reportlab Canvas + `mergePage()`. |
 | `fusion.pdf.template` model + `fusion.pdf.template.field` + `fusion.pdf.template.preview` | Drag-and-drop visual editor for placing fields on PDF preview images. Categories: `adp`, `mod`, `odsp`, `hardship`, `other`. fusion_claims searches for `(category='odsp', state='active')` for SA Mobility / OW signature overlays. The Page 11 wizard searches for `name ilike 'adp_page_11'` or `'page 11'`. |
@@ -1888,7 +1888,7 @@ fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `f
 - Renaming a field on `sale.order` likely affects portal templates (`portal_templates.xml`, `portal_assessment_express.xml`, `portal_accessibility_*.xml`) that reference it via QWeb.
 - Adding a new `x_fc_adp_application_status` value may need a portal-side handler in `portal_main.py` to render the new state.
 - The `fusion.pdf.template` schema (page-positioned fields) is the ground truth for ODSP signature placement — DON'T hard-code coordinates in fusion_claims when you could create a template field instead.
-- The `_reactivate_views` post-init hook on fusion_authorizer_portal exists specifically because the inheritance from this module's views is fragile — if you rename a field referenced by an xpath in fusion_authorizer_portal, that view goes dead and stays dead.
+- The `_reactivate_views` post-init hook on fusion_portal exists specifically because the inheritance from this module's views is fragile — if you rename a field referenced by an xpath in fusion_portal, that view goes dead and stays dead.
 
 ### 29.3 Other co-installed Nexa modules
 
@@ -1896,7 +1896,7 @@ fusion_authorizer_portal manifest declares `fusion_claims` + `fusion_tasks` + `f
 |---|---|---|
 | `fusion_ringcentral` | RingCentral softphone, click-to-dial widget, fax composer | Click-to-dial works on any phone field — no direct API calls from this module |
 | `fusion_faxes` | `fusion_faxes.send.fax.wizard` + `partner.x_ff_fax_number` | Hard-soft-dep: `odsp_submit_to_odsp_wizard` calls the fax wizard for ODSP submissions |
-| `fusion_loaners_management` | Loaner equipment lending | fusion_authorizer_portal depends on this; fusion_claims doesn't touch it directly |
+| `fusion_loaners_management` | Loaner equipment lending | fusion_portal depends on this; fusion_claims doesn't touch it directly |
 | `fusion_pdf_preview` | PDF preview client action + report intercept | Project CLAUDE.md says prefer this over `act_url`+`target=new` for attachments. fusion_claims still has legacy attachment buttons using the old pattern — see gotcha #12 |
 
 ## 30. Per-funder workflow state machines
@@ -2323,7 +2323,7 @@ Creates a `fusion.technician.location` record on the remote with `source='sync'`
 - `context['skip_travel_recalc']` — prevents the pull from triggering local recalculations.
 - Terminal-state tasks (`completed`, `cancelled`) — push side does write, but pull side does NOT update existing shadow records that are already terminal (defensive against late race conditions).
 
-## 33. `fusion.assessment` (OT assessment model — lives in `fusion_authorizer_portal`)
+## 33. `fusion.assessment` (OT assessment model — lives in `fusion_portal`)
 
 The 1,636-line model that captures an OT's assessment of a client + their equipment needs, then generates the draft sale order.
 
@@ -2395,7 +2395,7 @@ The model has `signature_page_11` + `signature_page_12` binary fields. `signatur
 
 `action_complete_express()` skips step 3 (signatures) entirely — used for the "express" assessment route from the sales-rep portal where the rep just needs to spec a wheelchair without doing the full ADP assessment.
 
-## 34. `fusion.accessibility.assessment` (MOD/accessibility assessment — lives in `fusion_authorizer_portal`)
+## 34. `fusion.accessibility.assessment` (MOD/accessibility assessment — lives in `fusion_portal`)
 
 The 966-line sibling for accessibility modifications (not ADP).
 
@@ -2466,7 +2466,7 @@ The model has hundreds of measurement fields, only some of which are visible per
 
 `stairlift_curved`, `vpl`, `ceiling_lift`, `ramp`, `bathroom`, `tub_cutout` each have their own set of fields.
 
-## 35. `fusion_authorizer_portal` controller routes — detailed
+## 35. `fusion_portal` controller routes — detailed
 
 Full per-route inventory from `portal_main.py` (2,827 lines), `portal_assessment.py` (1,238), `portal_page11_sign.py` (206), `pdf_editor.py` (218).
 
@@ -2816,7 +2816,7 @@ All filtered to `move_type in ['out_invoice', 'out_refund']` (customer invoices
 
 ACSD (Assistance to Children with Severe Disabilities) is a CLIENT TYPE, not a sale type. The menu has a dedicated ACSD entry that catches any sale type but with `client_type='ACS'`.
 
-## 40. `fusion_authorizer_portal.sale_order` extensions (266 lines)
+## 40. `fusion_portal.sale_order` extensions (266 lines)
 
 Adds 6 fields to `sale.order` + 5 methods:
 
@@ -2843,7 +2843,7 @@ JSON-RPC methods (called from portal JS):
 `_get_partner_address_display()` — formatted address string.
 `_get_product_lines_for_portal()` — product lines minus internal-only data.
 
-## 41. `fusion_authorizer_portal.res_partner` extensions (767 lines)
+## 41. `fusion_portal.res_partner` extensions (767 lines)
 
 Adds geolocation + portal access management:
 
@@ -3019,7 +3019,7 @@ ssh odoo-westin "docker exec odoo-dev-app odoo -d westin-v19 -u fusion_claims --
 ssh odoo-mobility "docker exec odoo-mobility-app odoo -d mobility -u fusion_claims --stop-after-init && docker restart odoo-mobility-app"
 ```
 
-For multiple modules: `-u fusion_claims,fusion_tasks,fusion_authorizer_portal`.
+For multiple modules: `-u fusion_claims,fusion_tasks,fusion_portal`.
 
 ### 46.3 Database probes
 
@@ -3077,7 +3077,7 @@ After 9 rounds of deep diving, here's what CLAUDE.md covers vs the codebase:
 - Every cron job with cadence + logic
 - Every constraint method with regex + rule
 - Every special-character/edge-case behaviour I encountered
-- Every cross-module integration point with both sibling modules (fusion_tasks, fusion_authorizer_portal)
+- Every cross-module integration point with both sibling modules (fusion_tasks, fusion_portal)
 - Every PDF report's conditional sections + business logic
 - Every ICP setting (~60+)
 - Every gotcha (~83)
@@ -3103,4 +3103,73 @@ After 9 rounds of deep diving, here's what CLAUDE.md covers vs the codebase:
 - Build new reports following the established color/header/footer conventions
 - Add new gotchas in the right format
 - Understand the soft-dep on `fusion_faxes` + `fusion_pdf_preview`
-- Know the deployment fact that fusion_authorizer_portal is always co-installed
+- Know the deployment fact that fusion_portal is always co-installed
+
+## 47. Service Booking wizard — two CSS gotchas (client action, `static/src/scss/service_booking.scss` + `xml/service_booking.xml`)
+
+The OWL "Book a Service" wizard renders inside the Odoo **backend** (`web.assets_backend`),
+so the full Bootstrap 5 + Odoo stylesheet is live around it. Two non-obvious traps bit this
+wizard and were fixed in **v19.0.9.6.0** (a first, blind CSS pass in 19.0.9.5.0 did not fix
+the real cause — verify with a render, not by eye):
+
+1. **Never reuse Bootstrap layout class names inside a backend component — namespace them.**
+   The wizard originally used `row` / `card` / `grid` / `btn`. Scoping the rules under
+   `.o_service_booking` does **not** stop Bootstrap's *global* `.row{display:flex;
+   margin-left/right:calc(-.5*32px)}`, `.card{display:flex;flex-direction:column}`,
+   `.grid{grid-template-rows:…}`, `.btn{…}` from also applying (they win for any property
+   the scoped rule doesn't set). Measured live: every wizard `.row` computed
+   `display:flex; margin-left:-16px; margin-right:-16px` — the negative gutter pulled fields
+   to the card edges and flexed label+input pairs. **Fix:** all custom layout classes are
+   `sb-*` (`sb-row`/`sb-card`/`sb-grid`/`sb-btn`). Keep that prefix for any new wizard class
+   that could collide with Bootstrap (`col`, `container`, `form-*`, `badge`, …).
+
+2. **A nested `@media` block must come AFTER the base rule it overrides (equal specificity).**
+   SCSS preserves source order. The responsive `@media (max-width:560px){ .two,.three{
+   grid-template-columns:1fr } … }` was nested high in the file, *before* the base
+   `.two{grid-template-columns:1fr 1fr}` / `.three` / `.timepick` rules. Both selectors have
+   the same specificity, so the later base rule overrode the media query — it was **dead**,
+   and the inner field-grids never collapsed to one column on a phone (fields crammed 2–3
+   across). `matchMedia('(max-width:560px)')` returned true while the columns stayed 2-up —
+   the tell that it's a cascade-order bug, not a media-match bug. **Fix:** all responsive
+   `@media` overrides live at the **end** of the `.o_service_booking { … }` block.
+
+**How it was verified (do this, don't eyeball):** pull the live compiled bundle from prod
+(`env['ir.qweb']._get_asset_bundle('web.assets_backend').css()` returns `ir.attachment`
+record(s) in Odoo 19 — read `.raw`, not a string), render the wizard markup against it with
+the real web-client height/scroll chain (`html,body{height:100%}` → `.o_web_client` flex
+column → 46px navbar + `.o_action_manager{flex:1;min-height:0}` so the wizard's
+`height:100%;overflow:auto` scrolls) at 320/390/768/1280, and read computed
+`grid-template-columns` / `margin-left` / `display`. A standalone vanilla-Bootstrap repro is
+**not** faithful — it rendered fine and falsely cleared the bug.
+
+## 48. Service Booking wizard — dynamic fields (live client search + address autocomplete), v19.0.9.7.0
+
+The wizard is a **client action** (registered OWL component), not a form view, so two
+"type-ahead" features had to be built into the component itself:
+
+1. **Live client search** ("Existing customer" box). Endpoint
+   `/fusion_claims/service_booking/search_customers` (jsonrpc, auth=user) searches
+   `res.partner` and resolves a typed SO number to its partner; the JS debounces (250 ms),
+   shows a `.sb-cust-results` dropdown, and `pickCustomer()` sets `state.partnerId` + fills the
+   contact fields. The backend (`action_book_from_wizard`) already consumes `partner_id` for
+   `cust_mode='existing'`, so picking links the existing contact.
+   **GOTCHA (cost a near-miss): `res.partner` has NO `mobile` field in Odoo 19** — a domain
+   leaf `('mobile','ilike',q)` raises `ValueError: Invalid field res.partner.mobile`, and
+   because the controller's `except` swallows it the search silently returns nothing (looks
+   exactly like "search not working"). Build the OR domain only over fields present in
+   `Partner._fields` (`name`/`phone`/`email`); same for reading `p.mobile`. Verify any new
+   partner-field reference against `_fields` before shipping.
+
+2. **Address autocomplete.** `google_address_autocomplete.js` patches `FormController` only,
+   so it does **not** reach this client action. The component loads Google Places itself
+   (key from ICP `fusion_claims.google_maps_api_key`), attaches via `useRef('root')` +
+   `onMounted`/`onPatched` to every `input.sb-addr-input`, and writes
+   `street`/`city`/`lat`/`lng` straight into reactive `state` (no DOM hacks — we're inside the
+   component). Re-attach on patch is guarded by an `_sbAc` flag per input and an `_addrStarted`
+   /`_addrNoKey` gate so a missing key just degrades to manual entry and can never break render
+   (both lifecycle calls are `.catch(()=>{})`).
+
+**Verifying the search without a browser:** the endpoint logic is plain ORM — smoke it in an
+`odoo shell` against real data (`Partner.search(<built domain>, limit=8)`); a vanilla repro of
+the `.sb-cust-results` dropdown markup + compiled CSS confirms the UI. Address autocomplete
+needs the live key + Google Maps, so it can only be confirmed in a real browser session.

fusion_claims/__init__.py

@@ -7,6 +7,7 @@ import logging
 
 from . import models
 from . import wizard
+from . import controllers
 
 _logger = logging.getLogger(__name__)
 

fusion_claims/__manifest__.py

@@ -5,7 +5,7 @@
 
 {
     'name': 'Fusion Claims',
-    'version': '19.0.9.2.0',
+    'version': '19.0.9.7.0',
     'category': 'Sales',
     'summary': 'Complete ADP Claims Management with Dashboard, Sales Integration, Billing Automation, and Two-Stage Verification.',
     'description': """
@@ -98,9 +98,13 @@
         'data/ir_cron_data.xml',
         'data/ir_actions_server_data.xml',
         'data/product_labor_data.xml',
+        'data/service_rate_products.xml',
+        'data/service_rate_data.xml',
         'wizard/status_change_reason_wizard_views.xml',
         'views/res_company_views.xml',
         'views/res_config_settings_views.xml',
+        'views/service_rate_views.xml',
+        'views/service_booking_action.xml',
         'views/sale_order_views.xml',
         'views/account_move_views.xml',
         'views/account_journal_views.xml',
@@ -181,12 +185,20 @@
             # Dashboard OWL countdown widget
             'fusion_claims/static/src/js/fc_posting_countdown.js',
             'fusion_claims/static/src/xml/fc_posting_countdown.xml',
+            # Service Booking wizard (client action): tokens MUST load before
+            # the component scss so the --sb-* vars resolve.
+            'fusion_claims/static/src/scss/_service_booking_tokens.scss',
+            'fusion_claims/static/src/scss/service_booking.scss',
+            'fusion_claims/static/src/js/service_booking/service_booking.js',
+            'fusion_claims/static/src/xml/service_booking.xml',
         ],
         'web.assets_web_dark': [
             # Dark bundle recompiles the same SCSS with the dark
             # $o-webclient-color-scheme default so tokens branch correctly.
             'fusion_claims/static/src/scss/_fc_dashboard_tokens.scss',
             'fusion_claims/static/src/scss/fc_dashboard.scss',
+            'fusion_claims/static/src/scss/_service_booking_tokens.scss',
+            'fusion_claims/static/src/scss/service_booking.scss',
         ],
     },
     'images': ['static/description/icon.png'],

fusion_claims/controllers/__init__.py

@@ -0,0 +1 @@
+from . import service_booking

fusion_claims/controllers/service_booking.py

@@ -0,0 +1,76 @@
+# -*- coding: utf-8 -*-
+from odoo import http
+from odoo.http import request
+
+
+class ServiceBookingController(http.Controller):
+
+    @http.route('/fusion_claims/service_booking/refdata', type='jsonrpc', auth='user')
+    def refdata(self, **kw):
+        env = request.env
+        Users = env['res.users']
+        techs = Users.search([('x_fc_is_field_staff', '=', True)]) \
+            if 'x_fc_is_field_staff' in Users._fields else Users.search([])
+        Rate = env['fusion.service.rate']
+        rates = Rate.search([('rate_kind', '=', 'callout'), ('active', '=', True)])
+        per_km = Rate.get_rate('per_km')
+
+        def labour(code):
+            r = Rate.get_rate(code)
+            return r.price if r else 0.0
+
+        return {
+            'technicians': [{'id': t.id, 'name': t.name} for t in techs],
+            'callout_rates': [{
+                'code': r.code, 'category': r.category, 'timing': r.timing,
+                'name': r.name, 'price': r.price, 'adds_per_km': r.adds_per_km,
+            } for r in rates],
+            'per_km': per_km.price if per_km else 0.70,
+            'labour': {'onsite': labour('labour_onsite'), 'inshop': labour('labour_inshop'),
+                       'lift': labour('labour_lift')},
+        }
+
+    @http.route('/fusion_claims/service_booking/search_customers', type='jsonrpc', auth='user')
+    def search_customers(self, query=None, **kw):
+        """Live customer lookup for the booking wizard's 'Existing customer' box.
+        Matches res.partner by name / phone / mobile / email, and also resolves a
+        typed sale-order reference to its customer. Returns up to 8 light dicts."""
+        q = (query or '').strip()
+        if len(q) < 2:
+            return {'results': []}
+        env = request.env
+        Partner = env['res.partner'].sudo()
+        # Build the OR domain only over fields that actually exist on this DB —
+        # res.partner.mobile is NOT present in Odoo 19, so referencing it raises
+        # ValueError and the whole lookup silently returns nothing.
+        has_mobile = 'mobile' in Partner._fields
+        search_fields = [f for f in ('name', 'phone', 'email', 'mobile')
+                         if f in Partner._fields]
+        leaves = [(f, 'ilike', q) for f in search_fields]
+        domain = leaves[:1]
+        for leaf in leaves[1:]:
+            domain = ['|'] + domain + [leaf]
+        partners = Partner.search(domain, limit=8, order='write_date desc')
+        # also resolve an SO number -> its partner (the hint promises "name or SO")
+        if len(q) >= 3 and len(partners) < 8 and 'sale.order' in env:
+            sos = env['sale.order'].sudo().search([('name', 'ilike', q)], limit=5)
+            partners = (partners | sos.mapped('partner_id'))[:8]
+        results = []
+        for p in partners:
+            phone = p.phone or (p.mobile if has_mobile else '') or ''
+            results.append({
+                'id': p.id,
+                'name': p.name or '',
+                'phone': phone,
+                'email': p.email or '',
+                'street': p.street or '',
+                'city': p.city or '',
+            })
+        return {'results': results}
+
+    @http.route('/fusion_claims/service_booking/submit', type='jsonrpc', auth='user')
+    def submit(self, payload=None, **kw):
+        try:
+            return request.env['fusion.technician.task'].action_book_from_wizard(payload or {})
+        except Exception as e:
+            return {'error': str(e)}

fusion_claims/data/service_rate_data.xml

@@ -0,0 +1,108 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="1">
+        <!-- CALL-OUTS -->
+        <record id="rate_callout_standard_normal" model="fusion.service.rate">
+            <field name="name">Standard Service Call</field>
+            <field name="code">callout_standard_normal</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">normal</field><field name="unit">fixed</field>
+            <field name="included_labour_min">30</field><field name="price">95.0</field>
+            <field name="product_id" ref="product_callout_standard_normal"/>
+            <field name="sequence">10</field>
+        </record>
+        <record id="rate_callout_standard_rush" model="fusion.service.rate">
+            <field name="name">Rush Service Call (Standard)</field>
+            <field name="code">callout_standard_rush</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">rush</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">120.0</field>
+            <field name="product_id" ref="product_callout_standard_rush"/>
+            <field name="sequence">11</field>
+        </record>
+        <record id="rate_callout_standard_afterhours" model="fusion.service.rate">
+            <field name="name">After-Hours Service Call (Standard)</field>
+            <field name="code">callout_standard_afterhours</field>
+            <field name="rate_kind">callout</field><field name="category">standard</field>
+            <field name="timing">afterhours</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">140.0</field>
+            <field name="product_id" ref="product_callout_standard_afterhours"/>
+            <field name="sequence">12</field>
+        </record>
+        <record id="rate_callout_lift_normal" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating Service Call</field>
+            <field name="code">callout_lift_normal</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">normal</field><field name="unit">fixed</field>
+            <field name="included_labour_min">30</field><field name="price">160.0</field>
+            <field name="product_id" ref="product_callout_lift_normal"/>
+            <field name="sequence">20</field>
+        </record>
+        <record id="rate_callout_lift_rush" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating Rush Call</field>
+            <field name="code">callout_lift_rush</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">rush</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">185.0</field>
+            <field name="product_id" ref="product_callout_lift_rush"/>
+            <field name="sequence">21</field>
+        </record>
+        <record id="rate_callout_lift_afterhours" model="fusion.service.rate">
+            <field name="name">Lift &amp; Elevating After-Hours Call</field>
+            <field name="code">callout_lift_afterhours</field>
+            <field name="rate_kind">callout</field><field name="category">lift</field>
+            <field name="timing">afterhours</field><field name="unit">fixed</field>
+            <field name="adds_per_km" eval="True"/><field name="price">205.0</field>
+            <field name="product_id" ref="product_callout_lift_afterhours"/>
+            <field name="sequence">22</field>
+        </record>
+
+        <!-- LABOUR -->
+        <record id="rate_labour_onsite" model="fusion.service.rate">
+            <field name="name">Labour — On-Site</field><field name="code">labour_onsite</field>
+            <field name="rate_kind">labour</field><field name="category">standard</field>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">85.0</field>
+            <field name="product_id" ref="product_labour_onsite"/><field name="sequence">30</field>
+        </record>
+        <record id="rate_labour_lift" model="fusion.service.rate">
+            <field name="name">Labour — Lift &amp; Elevating</field><field name="code">labour_lift</field>
+            <field name="rate_kind">labour</field><field name="category">lift</field>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">110.0</field>
+            <field name="product_id" ref="product_labour_lift"/><field name="sequence">31</field>
+        </record>
+        <record id="rate_labour_inshop" model="fusion.service.rate">
+            <field name="name">Labour — In-Shop</field><field name="code">labour_inshop</field>
+            <field name="rate_kind">labour</field><field name="category">na</field><field name="in_shop" eval="True"/>
+            <field name="timing">na</field><field name="unit">per_hour</field><field name="price">75.0</field>
+            <field name="product_id" ref="product_labour_inshop"/><field name="sequence">32</field>
+        </record>
+
+        <!-- TRAVEL -->
+        <record id="rate_per_km" model="fusion.service.rate">
+            <field name="name">Travel — per km (2-way)</field><field name="code">per_km</field>
+            <field name="rate_kind">travel</field><field name="category">na</field>
+            <field name="timing">na</field><field name="unit">per_km</field><field name="price">0.70</field>
+            <field name="product_id" ref="product_per_km"/><field name="sequence">40</field>
+        </record>
+
+        <!-- DELIVERY / PICKUP -->
+        <record id="rate_delivery_local" model="fusion.service.rate">
+            <field name="name">Delivery / Pickup — Local</field><field name="code">delivery_local</field>
+            <field name="rate_kind">delivery</field><field name="category">na</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">35.0</field>
+            <field name="product_id" ref="product_delivery_local"/><field name="sequence">50</field>
+        </record>
+        <record id="rate_delivery_outside" model="fusion.service.rate">
+            <field name="name">Delivery / Pickup — Outside Local Area</field><field name="code">delivery_outside</field>
+            <field name="rate_kind">delivery</field><field name="category">na</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">60.0</field>
+            <field name="product_id" ref="product_delivery_outside"/><field name="sequence">51</field>
+        </record>
+        <record id="rate_setup_stairlift" model="fusion.service.rate">
+            <field name="name">Stairlift — Delivery &amp; Set-up</field><field name="code">setup_stairlift</field>
+            <field name="rate_kind">delivery</field><field name="category">lift</field><field name="timing">na</field>
+            <field name="unit">fixed</field><field name="price">300.0</field>
+            <field name="product_id" ref="product_setup_stairlift"/><field name="sequence">52</field>
+        </record>
+    </data>
+</odoo>

fusion_claims/data/service_rate_products.xml

@@ -0,0 +1,138 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <data noupdate="1">
+        <!-- Call-outs (unit) -->
+        <record id="product_callout_standard_normal" model="product.product">
+            <field name="name">Service Call — Standard</field>
+            <field name="default_code">SVC-STD</field>
+            <field name="type">service</field>
+            <field name="list_price">95.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_standard_rush" model="product.product">
+            <field name="name">Service Call — Standard Rush</field>
+            <field name="default_code">SVC-STD-RUSH</field>
+            <field name="type">service</field>
+            <field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_standard_afterhours" model="product.product">
+            <field name="name">Service Call — Standard After-Hours</field>
+            <field name="default_code">SVC-STD-AH</field>
+            <field name="type">service</field>
+            <field name="list_price">140.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_normal" model="product.product">
+            <field name="name">Service Call — Lift &amp; Elevating</field>
+            <field name="default_code">SVC-LIFT</field>
+            <field name="type">service</field>
+            <field name="list_price">160.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_rush" model="product.product">
+            <field name="name">Service Call — Lift &amp; Elevating Rush</field>
+            <field name="default_code">SVC-LIFT-RUSH</field>
+            <field name="type">service</field>
+            <field name="list_price">185.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_callout_lift_afterhours" model="product.product">
+            <field name="name">Service Call — Lift &amp; Elevating After-Hours</field>
+            <field name="default_code">SVC-LIFT-AH</field>
+            <field name="type">service</field>
+            <field name="list_price">205.00</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Labour (hour) -->
+        <record id="product_labour_onsite" model="product.product">
+            <field name="name">Labour — On-Site</field>
+            <field name="default_code">LAB-ONSITE</field>
+            <field name="type">service</field>
+            <field name="list_price">85.00</field>
+            <field name="uom_id" ref="uom.product_uom_hour"/>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_labour_lift" model="product.product">
+            <field name="name">Labour — Lift &amp; Elevating</field>
+            <field name="default_code">LAB-LIFT</field>
+            <field name="type">service</field>
+            <field name="list_price">110.00</field>
+            <field name="uom_id" ref="uom.product_uom_hour"/>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <record id="product_labour_inshop" model="product.product">
+            <field name="name">Labour — In-Shop</field>
+            <field name="default_code">LAB-INSHOP</field>
+            <field name="type">service</field>
+            <field name="list_price">75.00</field>
+            <field name="uom_id" ref="uom.product_uom_hour"/>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Travel (unit; qty = km x 2) -->
+        <record id="product_per_km" model="product.product">
+            <field name="name">Travel — per km (2-way)</field>
+            <field name="default_code">SVC-KM</field>
+            <field name="type">service</field>
+            <field name="list_price">0.70</field>
+            <field name="sale_ok" eval="True"/>
+            <field name="purchase_ok" eval="False"/>
+        </record>
+
+        <!-- Delivery / pickup (unit) -->
+        <record id="product_delivery_local" model="product.product">
+            <field name="name">Delivery / Pickup — Local</field>
+            <field name="default_code">DEL-LOCAL</field>
+            <field name="type">service</field><field name="list_price">35.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_delivery_outside" model="product.product">
+            <field name="name">Delivery / Pickup — Outside Local Area</field>
+            <field name="default_code">DEL-OUT</field>
+            <field name="type">service</field><field name="list_price">60.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_delivery_rush" model="product.product">
+            <field name="name">Rush Pickup / Delivery</field>
+            <field name="default_code">DEL-RUSH</field>
+            <field name="type">service</field><field name="list_price">60.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_liftchair" model="product.product">
+            <field name="name">Lift Chair — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-LIFTCHAIR</field>
+            <field name="type">service</field><field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_hospitalbed" model="product.product">
+            <field name="name">Hospital Bed — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-BED</field>
+            <field name="type">service</field><field name="list_price">120.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_setup_stairlift" model="product.product">
+            <field name="name">Stairlift — Delivery &amp; Set-up</field>
+            <field name="default_code">SETUP-STAIRLIFT</field>
+            <field name="type">service</field><field name="list_price">300.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+        <record id="product_removal_stairlift" model="product.product">
+            <field name="name">Stairlift — Removal</field>
+            <field name="default_code">RMV-STAIRLIFT</field>
+            <field name="type">service</field><field name="list_price">300.00</field>
+            <field name="sale_ok" eval="True"/><field name="purchase_ok" eval="False"/>
+        </record>
+    </data>
+</odoo>

fusion_claims/models/__init__.py

@@ -26,4 +26,5 @@ from . import ai_agent_ext
 from . import dashboard
 from . import res_partner
 from . import technician_task
-from . import page11_sign_request
+from . import page11_sign_request
+from . import service_rate

fusion_claims/models/sale_order.py

@@ -338,6 +338,11 @@ class SaleOrder(models.Model):
         help='Type of sale for billing purposes. This field determines the workflow and billing rules.',
     )
     
+    x_fc_is_service_repair = fields.Boolean(
+        string='Service Repair', copy=False,
+        help='Auto-created from the technician service booking wizard.',
+    )
+
     x_fc_sale_type_locked = fields.Boolean(
         string='Sale Type Locked',
         compute='_compute_sale_type_locked',
@@ -1709,7 +1714,7 @@ class SaleOrder(models.Model):
             return
 
         import base64
-        from odoo.addons.fusion_authorizer_portal.utils.pdf_filler import PDFTemplateFiller
+        from odoo.addons.fusion_portal.utils.pdf_filler import PDFTemplateFiller
 
         tpl = self.env['fusion.pdf.template'].search([
             ('category', '=', 'odsp'), ('state', '=', 'active'),

fusion_claims/models/service_rate.py

@@ -0,0 +1,81 @@
+# -*- coding: utf-8 -*-
+from odoo import api, fields, models
+
+
+class FusionServiceRate(models.Model):
+    _name = 'fusion.service.rate'
+    _description = 'Field Service Rate'
+    _order = 'sequence, rate_kind, category, timing'
+
+    name = fields.Char(string='Name', required=True)
+    code = fields.Char(
+        string='Code', required=True, index=True,
+        help='Stable code used by the booking engine, e.g. callout_standard_normal, per_km.',
+    )
+    rate_kind = fields.Selection([
+        ('callout', 'Service Call-out'),
+        ('labour', 'Labour'),
+        ('travel', 'Travel / per-km'),
+        ('delivery', 'Delivery / Pickup'),
+        ('other', 'Other'),
+    ], string='Kind', required=True, default='callout')
+    category = fields.Selection([
+        ('standard', 'Standard'),
+        ('lift', 'Lift & Elevating'),
+        ('na', 'N/A'),
+    ], string='Category', default='na')
+    timing = fields.Selection([
+        ('normal', 'Normal'),
+        ('rush', 'Rush'),
+        ('afterhours', 'After-Hours'),
+        ('na', 'N/A'),
+    ], string='Timing', default='na')
+    in_shop = fields.Boolean(string='In-Shop')
+    product_id = fields.Many2one(
+        'product.product', string='Invoice Product', required=True, ondelete='restrict',
+        help='Product used on the sale-order line (description, tax, income account).',
+    )
+    price = fields.Monetary(
+        string='Rate', required=True, currency_field='currency_id',
+        help='Editable price used on the SO line and the on-screen estimate.',
+    )
+    currency_id = fields.Many2one(
+        'res.currency', string='Currency',
+        default=lambda self: self.env.company.currency_id,
+    )
+    unit = fields.Selection([
+        ('fixed', 'Flat'),
+        ('per_hour', 'Per hour'),
+        ('per_km', 'Per km'),
+    ], string='Unit', required=True, default='fixed')
+    adds_per_km = fields.Boolean(
+        string='Adds per-km travel',
+        help='Call-outs billed as $X + per-km \xd7 2-way (rush / after-hours).',
+    )
+    included_labour_min = fields.Integer(
+        string='Included labour (min)', default=0,
+        help='Free labour minutes bundled into a service call (e.g. 30).',
+    )
+    active = fields.Boolean(string='Active', default=True)
+    sequence = fields.Integer(string='Sequence', default=10)
+
+    _unique_code = models.Constraint(
+        'UNIQUE(code)',
+        'A service-rate code must be unique.',
+    )
+
+    @api.model
+    def get_callout(self, category, timing, in_shop=False):
+        """Active call-out rate for category+timing. Empty recordset when in-shop."""
+        if in_shop:
+            return self.browse()
+        return self.search([
+            ('rate_kind', '=', 'callout'),
+            ('category', '=', category),
+            ('timing', '=', timing),
+        ], limit=1)
+
+    @api.model
+    def get_rate(self, code):
+        """Active rate row by code (e.g. 'per_km', 'labour_onsite')."""
+        return self.search([('code', '=', code)], limit=1)

fusion_claims/models/technician_task.py

@@ -9,7 +9,7 @@ features to the base fusion.technician.task model.
 """
 
 from odoo import models, fields, api, _
-from odoo.exceptions import UserError, ValidationError
+from odoo.exceptions import UserError
 from markupsafe import Markup
 import logging
 
@@ -72,6 +72,15 @@ class FusionTechnicianTaskClaims(models.Model):
         default=False,
     )
 
+    # ------------------------------------------------------------------
+    # SERVICE BOOKING FIELDS
+    # ------------------------------------------------------------------
+
+    x_fc_service_call_type = fields.Char(
+        string='Service Call Type',
+        help='Rate code resolved by the booking wizard (e.g. callout_standard_rush).',
+    )
+
     # ------------------------------------------------------------------
     # ONCHANGES
     # ------------------------------------------------------------------
@@ -104,15 +113,9 @@ class FusionTechnicianTaskClaims(models.Model):
 
     @api.constrains('sale_order_id', 'purchase_order_id')
     def _check_order_link(self):
-        for task in self:
-            if task.x_fc_sync_source:
-                continue
-            if task.task_type == 'ltc_visit':
-                continue
-            if not task.sale_order_id and not task.purchase_order_id:
-                raise ValidationError(_(
-                    "A task must be linked to either a Sale Order (Case) or a Purchase Order."
-                ))
+        # Relaxed 2026-06: service bookings auto-create their SO, and in-shop /
+        # walk-in tasks may legitimately have none. No order link is required anymore.
+        return
 
     # ------------------------------------------------------------------
     # HOOK OVERRIDES
@@ -395,6 +398,166 @@ class FusionTechnicianTaskClaims(models.Model):
                     order.name, e,
                 )
 
+    # ------------------------------------------------------------------
+    # SERVICE BOOKING HELPERS
+    # ------------------------------------------------------------------
+
+    @api.model
+    def _resolve_service_lines(self, category, timing, in_shop, distance_km):
+        """Return a list of sale.order.line vals dicts for a service booking,
+        priced from fusion.service.rate. Empty when in-shop (labour-only, added later)."""
+        Rate = self.env['fusion.service.rate']
+        lines = []
+        callout = Rate.get_callout(category, timing, in_shop=in_shop)
+        if not callout:
+            return lines
+        lines.append({
+            'product_id': callout.product_id.id,
+            'name': callout.name,
+            'product_uom_qty': 1.0,
+            'price_unit': callout.price,
+            'name_is_km': False,
+        })
+        if callout.adds_per_km and distance_km:
+            per_km = Rate.get_rate('per_km')
+            if per_km:
+                lines.append({
+                    'product_id': per_km.product_id.id,
+                    'name': '%s — %.1f km \xd7 2-way' % (per_km.name, distance_km),
+                    'product_uom_qty': round(distance_km * 2.0, 1),
+                    'price_unit': per_km.price,
+                    'name_is_km': True,
+                })
+        return lines
+
+    @api.model
+    def _build_service_so(self, partner, category, timing, in_shop, distance_km):
+        """Create a draft repair sale.order with the resolved call-out (+per-km) lines.
+
+        Repair-SO identity is the x_fc_is_service_repair boolean (no crm.tag: fusion_claims
+        has no crm dependency). x_fc_sale_type is intentionally left blank — a service repair
+        is not one of the ADP/ODSP funder workflows, and the draft is editable afterwards.
+        """
+        line_vals = self._resolve_service_lines(category, timing, in_shop, distance_km)
+        order_lines = [(0, 0, {k: v for k, v in l.items() if k != 'name_is_km'}) for l in line_vals]
+        so_vals = {
+            'partner_id': partner.id,
+            'x_fc_is_service_repair': True,
+            'order_line': order_lines,
+        }
+        return self.env['sale.order'].create(so_vals)
+
+    def _service_travel_origin(self):
+        """Return (lat, lng) of the technician's day-start location, to be used
+        as the ORIGIN for the per-km travel calculation. NEVER returns the job's
+        own address (that would give origin == destination == 0 km).
+
+        Fallback chain (all read-only — no geocoding API calls here):
+          1. The technician's personal start address cached coords
+             (res.users.partner_id.x_fc_start_address_lat/_lng — populated when
+             the start address is saved, see fusion_tasks/models/res_partner.py).
+          2. The company HQ start address cached coords, keyed off the
+             ``fusion_claims.technician_start_address`` ICP and cached by
+             fusion_tasks under ``fusion_tasks.hq_coords:<address>``.
+          3. (0.0, 0.0) — the correct graceful fallback. _calculate_travel_time
+             guards on a falsy origin and simply returns False (→ no per-km line).
+
+        Geocoding is deliberately NOT performed here: a freshly typed new-client
+        job address usually has no geocoded destination anyway, so distance is
+        expected to be 0 in v1. We only avoid passing a WRONG origin.
+        """
+        self.ensure_one()
+        tech = self.technician_id
+        if tech:
+            partner = tech.partner_id
+            if partner and partner.x_fc_start_address_lat and partner.x_fc_start_address_lng:
+                return partner.x_fc_start_address_lat, partner.x_fc_start_address_lng
+
+        ICP = self.env['ir.config_parameter'].sudo()
+        hq_addr = (ICP.get_param('fusion_claims.technician_start_address', '') or '').strip()
+        if hq_addr:
+            cached = ICP.get_param('fusion_tasks.hq_coords:%s' % hq_addr, '')
+            if cached and ',' in cached:
+                try:
+                    lat_s, lng_s = cached.split(',', 1)
+                    return float(lat_s), float(lng_s)
+                except (ValueError, TypeError):
+                    pass
+        return 0.0, 0.0
+
+    @api.model
+    def action_book_from_wizard(self, payload):
+        """Single entry point for the OWL booking wizard:
+        resolve/create contact -> create task -> compute distance -> build SO -> link.
+        Returns {'task_id', 'order_id'}."""
+        Partner = self.env['res.partner']
+        cust = payload.get('customer') or {}
+
+        # 1. contact: new -> find-or-create (match email then phone); existing -> chosen partner
+        if payload.get('cust_mode') == 'new':
+            partner = False
+            email = (cust.get('email') or '').strip()
+            phone = (cust.get('phone') or '').strip()
+            if email:
+                partner = Partner.search([('email', '=ilike', email)], limit=1)
+            if not partner and phone:
+                partner = Partner.search([('phone', '=', phone)], limit=1)
+            if not partner:
+                partner = Partner.create({
+                    'name': cust.get('name') or 'Walk-in',
+                    'phone': phone or False, 'email': email or False,
+                    'street': cust.get('street') or False, 'city': cust.get('city') or False,
+                })
+        else:
+            partner = Partner.browse(int(payload['partner_id'])) if payload.get('partner_id') else Partner
+
+        category = payload.get('category', 'standard')
+        timing = payload.get('timing', 'normal')
+        in_shop = bool(payload.get('in_shop'))
+
+        # technician_id is REQUIRED on a task
+        technician_id = payload.get('technician_id')
+        if not technician_id:
+            raise UserError(_("Please choose a technician for this service booking."))
+        technician_id = int(technician_id)
+
+        # 2. task
+        dur = float(payload.get('duration_hr') or 1.0)
+        t_start = float(payload.get('time_start') or 9.0)
+        task_vals = {
+            'task_type': 'repair',
+            'technician_id': technician_id,
+            'scheduled_date': payload.get('date'),
+            'time_start': t_start,
+            'time_end': t_start + dur,
+            'duration_hours': dur,
+            'is_in_store': in_shop,
+            'x_fc_service_call_type': '%s_%s' % (category, timing),
+            'description': payload.get('description') or payload.get('issue') or _('Service booking'),
+        }
+        if partner:
+            task_vals['partner_id'] = partner.id
+        task = self.create(task_vals)
+
+        # 3. per-km distance: only when the rate adds it AND we have a real origin + a
+        #    geocoded job destination. Origin is the technician's start, never the job.
+        distance_km = 0.0
+        callout = self.env['fusion.service.rate'].get_callout(category, timing, in_shop=in_shop)
+        if callout and callout.adds_per_km and not in_shop and task.address_lat and task.address_lng:
+            origin_lat, origin_lng = task._service_travel_origin()
+            if origin_lat and origin_lng:
+                try:
+                    task._calculate_travel_time(origin_lat, origin_lng)  # sets travel_distance_km
+                    distance_km = task.travel_distance_km or 0.0
+                except Exception:
+                    distance_km = 0.0
+
+        # 4. draft repair SO + link back to the task
+        order = self._build_service_so(partner, category, timing, in_shop, distance_km) if partner else False
+        if order:
+            task.sale_order_id = order.id
+        return {'task_id': task.id, 'order_id': order.id if order else False}
+
     # ------------------------------------------------------------------
     # VIEW ACTIONS
     # ------------------------------------------------------------------

fusion_claims/security/ir.model.access.csv

@@ -63,4 +63,6 @@ access_fusion_page11_sign_request_manager,fusion.page11.sign.request.manager,mod
 access_fusion_page11_sign_request_public,fusion.page11.sign.request.public,model_fusion_page11_sign_request,base.group_public,1,0,0,0
 access_fusion_send_page11_wizard_user,fusion_claims.send.page11.wizard.user,model_fusion_claims_send_page11_wizard,sales_team.group_sale_salesman,1,1,1,1
 access_fusion_send_page11_wizard_manager,fusion_claims.send.page11.wizard.manager,model_fusion_claims_send_page11_wizard,sales_team.group_sale_manager,1,1,1,1
-access_fusion_adp_import_wizard_user,fusion_claims.adp.import.wizard.user,model_fusion_claims_adp_import_wizard,account.group_account_invoice,1,1,1,1
+access_fusion_adp_import_wizard_user,fusion_claims.adp.import.wizard.user,model_fusion_claims_adp_import_wizard,account.group_account_invoice,1,1,1,1
+access_fusion_service_rate_user,fusion.service.rate.user,model_fusion_service_rate,base.group_user,1,0,0,0
+access_fusion_service_rate_admin,fusion.service.rate.admin,model_fusion_service_rate,base.group_system,1,1,1,1

fusion_claims/static/src/js/service_booking/service_booking.js

@@ -0,0 +1,208 @@
+/** @odoo-module **/
+import { Component, useState, onWillStart, onMounted, onPatched, useRef } from "@odoo/owl";
+import { registry } from "@web/core/registry";
+import { rpc } from "@web/core/network/rpc";
+import { useService } from "@web/core/utils/hooks";
+
+export class ServiceBookingWizard extends Component {
+    static template = "fusion_claims.ServiceBookingWizard";
+    static props = ["*"];
+
+    setup() {
+        this.action = useService("action");
+        this.notification = useService("notification");
+        this.orm = useService("orm");
+        this.rootRef = useRef("root");
+        this.state = useState({
+            custMode: "existing",
+            customer: { name: "", phone: "", email: "", street: "", unit: "", buzz: "", city: "", lat: 0, lng: 0 },
+            partnerId: false, soSearch: "", custResults: [], custSearching: false,
+            device: "standard", category: "standard", timing: "normal", inShop: false, issue: "",
+            date: "", hour: 9, minute: 0, ampm: "AM", durationHr: 1.0, technicianId: false,
+            warranty: false, pod: false, emailConfirm: true, googleReview: true,
+            description: "", materials: "",
+            technicians: [], calloutRates: [], perKm: 0.70,
+            labour: { onsite: 85, inshop: 75, lift: 110 }, distanceKm: 13, saving: false,
+        });
+        onWillStart(async () => {
+            const r = await rpc("/fusion_claims/service_booking/refdata", {});
+            Object.assign(this.state, {
+                technicians: r.technicians || [],
+                calloutRates: r.callout_rates || [],
+                perKm: r.per_km ?? 0.70,
+                labour: r.labour || this.state.labour,
+            });
+        });
+        // Address autocomplete attaches after the DOM exists and re-attaches when
+        // OWL re-renders (e.g. switching to "New client" reveals a second address
+        // input). Fully guarded — a missing Maps key just means manual entry.
+        onMounted(() => { this._initAddrAutocomplete().catch(() => {}); });
+        onPatched(() => { this._initAddrAutocomplete().catch(() => {}); });
+    }
+
+    // ---- live customer search (Existing customer box) ----
+    onCustSearch(ev) {
+        const q = ev.target.value || "";
+        this.state.soSearch = q;
+        this.state.partnerId = false;           // typing again unlinks any picked contact
+        clearTimeout(this._custTimer);
+        const term = q.trim();
+        if (term.length < 2) { this.state.custResults = []; this.state.custSearching = false; return; }
+        this.state.custSearching = true;
+        this._custTimer = setTimeout(async () => {
+            try {
+                const r = await rpc("/fusion_claims/service_booking/search_customers", { query: term });
+                this.state.custResults = r.results || [];
+            } catch (e) {
+                this.state.custResults = [];
+            }
+            this.state.custSearching = false;
+        }, 250);
+    }
+    pickCustomer(c) {
+        this.state.partnerId = c.id;
+        this.state.customer.name = c.name || "";
+        this.state.customer.phone = c.phone || "";
+        this.state.customer.email = c.email || "";
+        this.state.customer.street = c.street || "";
+        this.state.customer.city = c.city || "";
+        this.state.custResults = [];
+        this.state.soSearch = c.name + (c.phone ? ` · ${c.phone}` : "");
+    }
+
+    // ---- Google Places address autocomplete (wizard-local; the FormController
+    //      patch in google_address_autocomplete.js does NOT reach a client action) ----
+    async _getMapsKey() {
+        try {
+            return await this.orm.call("ir.config_parameter", "get_param", ["fusion_claims.google_maps_api_key"]);
+        } catch (e) {
+            return null;
+        }
+    }
+    _loadMaps(key) {
+        if (window.google?.maps?.places) return Promise.resolve();
+        if (window._sbMapsLoading) return window._sbMapsLoading;
+        window._sbMapsLoading = new Promise((resolve, reject) => {
+            window._sbMapsReady = () => resolve();
+            const s = document.createElement("script");
+            s.src = `https://maps.googleapis.com/maps/api/js?key=${encodeURIComponent(key)}&libraries=places&callback=_sbMapsReady`;
+            s.async = true; s.defer = true; s.onerror = reject;
+            document.head.appendChild(s);
+        });
+        return window._sbMapsLoading;
+    }
+    async _initAddrAutocomplete() {
+        const root = this.rootRef.el;
+        if (!root) return;
+        if (!this._addrStarted) {
+            if (!root.querySelector("input.sb-addr-input")) return;   // nothing to bind yet
+            this._addrStarted = true;
+            const key = await this._getMapsKey();
+            if (!key) { this._addrNoKey = true; return; }
+            try { await this._loadMaps(key); } catch (e) { return; }
+        }
+        if (this._addrNoKey || !window.google?.maps?.places) return;
+        // re-query after the await: OWL may have swapped inputs during loading
+        root.querySelectorAll("input.sb-addr-input").forEach((inp) => {
+            if (inp._sbAc) return;
+            inp._sbAc = true;
+            try {
+                const ac = new google.maps.places.Autocomplete(inp, {
+                    componentRestrictions: { country: "ca" },
+                    types: ["address"],
+                    fields: ["address_components", "formatted_address", "geometry"],
+                });
+                ac.addListener("place_changed", () => {
+                    const place = ac.getPlace();
+                    if (!place || !place.address_components) return;
+                    let city = "";
+                    for (const c of place.address_components) {
+                        if (c.types.includes("locality")) city = c.long_name;
+                        else if (c.types.includes("sublocality_level_1") && !city) city = c.long_name;
+                    }
+                    this.state.customer.street = place.formatted_address || inp.value;
+                    if (city) this.state.customer.city = city;
+                    if (place.geometry && place.geometry.location) {
+                        this.state.customer.lat = place.geometry.location.lat();
+                        this.state.customer.lng = place.geometry.location.lng();
+                    }
+                });
+            } catch (e) {
+                inp._sbAc = false;   // allow a later retry if construction failed
+            }
+        });
+    }
+    get callout() {
+        if (this.state.inShop) return null;
+        return this.state.calloutRates.find(
+            r => r.category === this.state.category && r.timing === this.state.timing) || null;
+    }
+    get labourRate() {
+        if (this.state.inShop) return this.state.labour.inshop;
+        return this.state.category === "lift" ? this.state.labour.lift : this.state.labour.onsite;
+    }
+    get estimate() {
+        const c = this.callout;
+        const callout = c ? c.price : 0;
+        const incl = (c && !c.adds_per_km) ? 0.5 : 0;
+        const billHr = Math.max(0, this.state.durationHr - incl);
+        const labour = billHr * this.labourRate;
+        const km = (c && c.adds_per_km) ? this.state.distanceKm * 2 * this.state.perKm : 0;
+        return { callout, labour, billHr, km, total: callout + labour + km, addsKm: !!(c && c.adds_per_km) };
+    }
+    get endLabel() {
+        let h = (this.state.hour % 12) + (this.state.ampm === "PM" ? 12 : 0);
+        let m = h * 60 + this.state.minute + this.state.durationHr * 60;
+        let eh = Math.floor(m / 60) % 24, em = m % 60, ap = eh >= 12 ? "PM" : "AM";
+        return `${eh % 12 || 12}:${String(em).padStart(2, "0")} ${ap}`;
+    }
+    fmt(n) { return (n || 0).toFixed(2); }
+    onDevice(ev) {
+        this.state.device = ev.target.value;
+        this.state.category = ev.target.value === "lift" ? "lift" : "standard";
+    }
+    onCallType(ev) {
+        const r = this.state.calloutRates.find(x => x.code === ev.target.value);
+        if (r) { this.state.category = r.category; this.state.timing = r.timing; }
+    }
+    setCust(m) { this.state.custMode = m; }
+    setAmpm(v) { this.state.ampm = v; }
+
+    toggleInShop() { this.state.inShop = !this.state.inShop; }
+    _timeStartFloat() { return (this.state.hour % 12) + (this.state.ampm === "PM" ? 12 : 0) + this.state.minute / 60; }
+
+    async submit() {
+        if (this.state.saving) return;
+        const s = this.state;
+        if (s.custMode === "new" && (!s.customer.name || !s.customer.phone)) {
+            this.notification.add("Client name and phone are required.", { type: "danger" });
+            return;
+        }
+        if (!s.technicianId) {
+            this.notification.add("Please choose a technician.", { type: "danger" });
+            return;
+        }
+        s.saving = true;
+        const payload = {
+            cust_mode: s.custMode, customer: s.customer, partner_id: s.partnerId, so_search: s.soSearch,
+            category: s.category, timing: s.timing, in_shop: s.inShop, device: s.device, issue: s.issue,
+            date: s.date, time_start: this._timeStartFloat(), duration_hr: s.durationHr,
+            technician_id: s.technicianId, warranty: s.warranty, pod: s.pod,
+            email_confirm: s.emailConfirm, google_review: s.googleReview,
+            description: s.description, materials: s.materials,
+        };
+        try {
+            const res = await rpc("/fusion_claims/service_booking/submit", { payload });
+            if (res.error) { this.notification.add(res.error, { type: "danger" }); s.saving = false; return; }
+            this.notification.add("Service booked — draft repair SO created.", { type: "success" });
+            this.action.doAction({
+                type: "ir.actions.act_window", res_model: "fusion.technician.task",
+                res_id: res.task_id, views: [[false, "form"]], target: "current",
+            });
+        } catch (e) {
+            this.notification.add("Booking failed: " + (e.message || e), { type: "danger" });
+            s.saving = false;
+        }
+    }
+}
+registry.category("actions").add("fusion_claims.service_booking", ServiceBookingWizard);

fusion_claims/static/src/scss/_service_booking_tokens.scss

@@ -0,0 +1,73 @@
+// Fusion Claims — Service Booking wizard design tokens.
+//
+// Per the repo dark-mode rule (CLAUDE.md "Dark Mode — Branch on
+// $o-webclient-color-scheme at SCSS Compile Time"): this file is compiled into
+// BOTH web.assets_backend (bright) and web.assets_web_dark (dark). We branch at
+// COMPILE TIME on $o-webclient-color-scheme and emit one --sb-* CSS custom
+// property per token, scoped to .o_service_booking. Do NOT use .o_dark_mode /
+// [data-bs-theme] / prefers-color-scheme — none fire reliably in Odoo 19.
+//
+// Values are copied verbatim from the mockup's :root (light) and
+// [data-theme="dark"] (dark) blocks — technician-booking-wizard.html.
+
+$o-webclient-color-scheme: bright !default;
+
+// --- light values (mockup :root / [data-theme="light"]) ---
+$_page:         #eef0f3;
+$_panel:        #e6e9ed;
+$_card:         #ffffff;
+$_border:       #d8dadd;
+$_text:         #1f2430;
+$_muted:        #6b7280;
+$_faint:        #9ca3af;
+$_field:        #ffffff;
+$_field-border: #cfd3d8;
+$_field-focus:  #3a8fb7;
+$_chip:         #f1f4f7;
+$_accent:       #2e7aad;
+$_accent-soft:  #e8f2f8;
+$_ok:           #16a34a;
+$_star:         #f5b301;
+$_money:        #0f7d4e;
+$_money-soft:   #e7f6ee;
+
+@if $o-webclient-color-scheme == dark {
+    // --- dark values (mockup [data-theme="dark"]) ---
+    $_page:         #14161b !global;
+    $_panel:        #1b1e24 !global;
+    $_card:         #22262d !global;
+    $_border:       #343a42 !global;
+    $_text:         #e7eaef !global;
+    $_muted:        #9aa3af !global;
+    $_faint:        #6b7480 !global;
+    $_field:        #1a1d23 !global;
+    $_field-border: #3a4049 !global;
+    $_field-focus:  #4aa3cf !global;
+    $_chip:         #2a2f37 !global;
+    $_accent:       #3a8fb7 !global;
+    $_accent-soft:  #19303d !global;
+    $_ok:           #22c55e !global;
+    $_star:         #f5b301 !global;
+    $_money:        #34d27f !global;
+    $_money-soft:   #15281f !global;
+}
+
+.o_service_booking {
+    --sb-page:         #{$_page};
+    --sb-panel:        #{$_panel};
+    --sb-card:         #{$_card};
+    --sb-border:       #{$_border};
+    --sb-text:         #{$_text};
+    --sb-muted:        #{$_muted};
+    --sb-faint:        #{$_faint};
+    --sb-field:        #{$_field};
+    --sb-field-border: #{$_field-border};
+    --sb-field-focus:  #{$_field-focus};
+    --sb-chip:         #{$_chip};
+    --sb-accent:       #{$_accent};
+    --sb-accent-soft:  #{$_accent-soft};
+    --sb-ok:           #{$_ok};
+    --sb-star:         #{$_star};
+    --sb-money:        #{$_money};
+    --sb-money-soft:   #{$_money-soft};
+}

fusion_claims/static/src/scss/service_booking.scss

@@ -0,0 +1,329 @@
+// Fusion Claims — Service Booking wizard component styles.
+//
+// Ported from the mockup (technician-booking-wizard.html) scoped under
+// .o_service_booking. The mockup's CSS custom properties (--page, --card, …)
+// are renamed mechanically to the --sb-* tokens emitted by
+// _service_booking_tokens.scss (which MUST load first in the bundle). The
+// manual .theme-btn dark toggle is dropped — Odoo serves the dark bundle.
+//
+// Surfaces use the explicit-hex tokens (three-layer contrast: page -> card ->
+// field), never var(--bs-*). color-mix() is used only in standalone
+// background / box-shadow properties — never inside a border shorthand (the
+// Odoo 19 SCSS compiler silently drops color-mix in border shorthands).
+
+.o_service_booking {
+    background: var(--sb-page);
+    color: var(--sb-text);
+    font-family: 'Inter', 'Helvetica Neue', Helvetica, Arial, system-ui, sans-serif;
+    font-size: 14px;
+    // Fill the action area and scroll INTERNALLY. min-height let the root grow
+    // to its content height so the (clipping) action container never scrolled;
+    // height:100% caps it so overflow:auto engages on small screens.
+    height: 100%;
+    overflow: auto;
+
+    * { box-sizing: border-box; }
+
+    .wrap { max-width: 1000px; margin: 24px auto; padding: 0 18px; }
+
+    .dialog {
+        background: var(--sb-panel);
+        border: 1px solid var(--sb-border);
+        border-radius: 16px;
+        box-shadow: 0 12px 40px rgba(16, 24, 40, .16);
+        overflow: hidden;
+    }
+
+    .topbar {
+        background: linear-gradient(135deg, #5ba848 0%, #3a8fb7 60%, #2e7aad 100%);
+        padding: 17px 24px;
+        display: flex;
+        align-items: center;
+        justify-content: space-between;
+        color: #fff;
+
+        h1 { font-size: 19px; font-weight: 700; margin: 0; }
+        .sub { font-size: 12.5px; opacity: .9; margin-top: 2px; }
+    }
+
+    .stepper {
+        display: flex;
+        gap: 6px;
+        padding: 11px 24px;
+        background: var(--sb-panel);
+        border-bottom: 1px solid var(--sb-border);
+        flex-wrap: wrap;
+    }
+    .step {
+        font-size: 11.5px;
+        font-weight: 600;
+        color: var(--sb-faint);
+        padding: 5px 13px;
+        border-radius: 20px;
+        background: var(--sb-chip);
+    }
+    .step.active { color: #fff; background: linear-gradient(135deg, #3a8fb7, #2e7aad); }
+    .step.draft { margin-left: auto; color: var(--sb-money); background: var(--sb-money-soft); }
+
+    .body { padding: 20px 24px 6px; }
+    .sb-grid { display: grid; grid-template-columns: 1fr 1fr; gap: 16px; }
+
+    .sb-card {
+        background: var(--sb-card);
+        border: 1px solid var(--sb-border);
+        border-radius: 13px;
+        padding: 16px 17px;
+        box-shadow: 0 1px 3px rgba(16, 24, 40, .08), 0 1px 2px rgba(16, 24, 40, .06);
+    }
+    .sb-card.span2 { grid-column: 1 / -1; }
+    .sb-card h3 {
+        margin: 0 0 13px;
+        font-size: 11.5px;
+        font-weight: 700;
+        letter-spacing: .7px;
+        text-transform: uppercase;
+        color: var(--sb-muted);
+        display: flex;
+        align-items: center;
+        gap: 7px;
+    }
+    .sb-card h3 .dot { width: 7px; height: 7px; border-radius: 50%; background: linear-gradient(135deg, #5ba848, #2e7aad); }
+    .sb-card h3 .tag {
+        margin-left: auto;
+        font-size: 10px;
+        font-weight: 700;
+        color: var(--sb-money);
+        background: var(--sb-money-soft);
+        padding: 2px 8px;
+        border-radius: 10px;
+        letter-spacing: .3px;
+    }
+
+    label.fl { display: block; font-size: 12px; font-weight: 600; color: var(--sb-muted); margin: 0 0 5px; }
+    .sb-row { margin-bottom: 12px; }
+    .sb-row:last-child { margin-bottom: 0; }
+    .two { display: grid; grid-template-columns: 1fr 1fr; gap: 11px; }
+    .three { display: grid; grid-template-columns: 1fr 1fr 1fr; gap: 9px; }
+
+    input.f, select.f, textarea.f {
+        width: 100%;
+        background: var(--sb-field);
+        color: var(--sb-text);
+        border: 1px solid var(--sb-field-border);
+        border-radius: 9px;
+        // !important so Odoo's backend input normalisation can't strip the
+        // field padding inside a client action.
+        padding: 10px 12px !important;
+        font-size: 13.5px;
+        line-height: 1.4;
+        font-family: inherit;
+        outline: none;
+        transition: border .15s, box-shadow .15s;
+    }
+    input.f:focus, select.f:focus, textarea.f:focus {
+        border-color: var(--sb-field-focus);
+        box-shadow: 0 0 0 3px color-mix(in srgb, var(--sb-field-focus) 22%, transparent);
+    }
+    textarea.f { resize: vertical; min-height: 56px; }
+
+    .hint { font-size: 11px; color: var(--sb-faint); margin-top: 5px; }
+    .with-icon { position: relative; }
+    .with-icon .pin { position: absolute; right: 10px; top: 50%; transform: translateY(-50%); color: #5ba848; font-size: 16px; }
+
+    // live customer-search results dropdown
+    .sb-cust-search { position: relative; }
+    .sb-cust-results {
+        position: absolute;
+        left: 0; right: 0; top: 100%;
+        margin-top: 4px;
+        z-index: 30;
+        background: var(--sb-card);
+        border: 1px solid var(--sb-border);
+        border-radius: 9px;
+        box-shadow: 0 8px 24px rgba(16, 24, 40, .16);
+        max-height: 260px;
+        overflow-y: auto;
+    }
+    .sb-cust-loading { padding: 10px 12px; font-size: 12.5px; color: var(--sb-faint); }
+    .sb-cust-item { padding: 9px 12px; cursor: pointer; border-bottom: 1px solid var(--sb-border); }
+    .sb-cust-item:last-child { border-bottom: none; }
+    .sb-cust-item:hover { background: var(--sb-chip); }
+    .sb-cust-name { font-size: 13.5px; font-weight: 600; color: var(--sb-text); }
+    .sb-cust-meta { font-size: 11.5px; color: var(--sb-faint); margin-top: 1px; }
+    .sb-cust-linked { color: var(--sb-ok); font-weight: 600; }
+
+    .seg {
+        display: inline-flex;
+        background: var(--sb-chip);
+        border: 1px solid var(--sb-border);
+        border-radius: 9px;
+        padding: 3px;
+        gap: 3px;
+    }
+    .seg button {
+        border: none;
+        background: transparent;
+        color: var(--sb-muted);
+        font-weight: 600;
+        font-size: 12.5px;
+        padding: 6px 14px;
+        border-radius: 7px;
+        cursor: pointer;
+        font-family: inherit;
+    }
+    .seg button.on { background: var(--sb-card); color: var(--sb-accent); box-shadow: 0 1px 3px rgba(16, 24, 40, .08), 0 1px 2px rgba(16, 24, 40, .06); }
+    .seg.full { display: flex; }
+    .seg.full button { flex: 1; }
+
+    .timepick { display: inline-flex; align-items: stretch; gap: 7px; }
+    .timepick select.f { width: auto; padding-right: 24px; }
+    .ampm { display: inline-flex; background: var(--sb-chip); border: 1px solid var(--sb-border); border-radius: 9px; padding: 3px; }
+    .ampm button {
+        border: none;
+        background: transparent;
+        color: var(--sb-muted);
+        font-weight: 700;
+        font-size: 12px;
+        padding: 6px 12px;
+        border-radius: 7px;
+        cursor: pointer;
+        font-family: inherit;
+    }
+    .ampm button.on { background: var(--sb-accent); color: #fff; }
+    .endtime { font-size: 13px; color: var(--sb-muted); margin-top: 7px; }
+    .endtime b { color: var(--sb-text); }
+
+    .avail {
+        display: inline-flex;
+        align-items: center;
+        gap: 6px;
+        font-size: 11.5px;
+        font-weight: 600;
+        color: var(--sb-ok);
+        background: color-mix(in srgb, var(--sb-ok) 14%, transparent);
+        padding: 3px 9px;
+        border-radius: 20px;
+        margin-top: 6px;
+    }
+
+    .opt {
+        display: flex;
+        align-items: center;
+        justify-content: space-between;
+        padding: 9px 0;
+        border-bottom: 1px solid var(--sb-border);
+    }
+    .opt:last-child { border-bottom: none; }
+    .opt .lab { font-size: 13.5px; font-weight: 500; }
+    .opt .lab small { display: block; color: var(--sb-faint); font-weight: 400; font-size: 11.5px; }
+
+    .sw {
+        width: 42px;
+        height: 24px;
+        border-radius: 20px;
+        background: var(--sb-field-border);
+        position: relative;
+        cursor: pointer;
+        transition: background .15s;
+        flex-shrink: 0;
+    }
+    .sw::after {
+        content: '';
+        position: absolute;
+        width: 18px;
+        height: 18px;
+        border-radius: 50%;
+        background: #fff;
+        top: 3px;
+        left: 3px;
+        transition: left .15s;
+        box-shadow: 0 1px 2px rgba(0, 0, 0, .3);
+    }
+    .sw.on { background: var(--sb-ok); }
+    .sw.on::after { left: 21px; }
+
+    // fee readout inside Service & Pricing
+    .feeline {
+        display: flex;
+        align-items: center;
+        justify-content: space-between;
+        background: var(--sb-money-soft);
+        border: 1px solid var(--sb-border);
+        border-radius: 10px;
+        padding: 11px 14px;
+        margin-top: 4px;
+    }
+    .feeline .lbl { font-size: 12.5px; font-weight: 600; color: var(--sb-text); }
+    .feeline .lbl small { display: block; color: var(--sb-faint); font-weight: 400; font-size: 11px; }
+    .feeline .amt { font-size: 20px; font-weight: 800; color: var(--sb-money); }
+
+    // ESTIMATE strip
+    .estimate {
+        grid-column: 1 / -1;
+        background: var(--sb-money-soft);
+        border: 1px solid var(--sb-border);
+        border-left: 5px solid var(--sb-money);
+        border-radius: 13px;
+        padding: 15px 18px;
+        display: flex;
+        align-items: center;
+        gap: 20px;
+        flex-wrap: wrap;
+    }
+    .estimate .breakdown { display: flex; gap: 18px; flex-wrap: wrap; flex: 1; }
+    .estimate .bk .k { font-size: 10.5px; text-transform: uppercase; letter-spacing: .5px; color: var(--sb-faint); }
+    .estimate .bk .v { font-size: 15px; font-weight: 700; margin-top: 1px; }
+    .estimate .total { text-align: right; }
+    .estimate .total .k { font-size: 11px; text-transform: uppercase; letter-spacing: .5px; color: var(--sb-money); font-weight: 700; }
+    .estimate .total .v { font-size: 27px; font-weight: 800; color: var(--sb-money); line-height: 1; }
+    .estimate .total .note { font-size: 11px; color: var(--sb-faint); margin-top: 3px; }
+
+    .foot {
+        display: flex;
+        align-items: center;
+        justify-content: flex-end;
+        gap: 11px;
+        padding: 16px 24px;
+        background: var(--sb-panel);
+        border-top: 1px solid var(--sb-border);
+    }
+    .foot .spacer { margin-right: auto; font-size: 12px; color: var(--sb-faint); }
+
+    .sb-btn {
+        border: none;
+        border-radius: 10px;
+        padding: 11px 18px;
+        font-size: 13.5px;
+        font-weight: 600;
+        cursor: pointer;
+        font-family: inherit;
+    }
+    .sb-btn.ghost { background: transparent; color: var(--sb-muted); border: 1px solid var(--sb-border); }
+    .sb-btn.primary {
+        color: #fff;
+        background: linear-gradient(135deg, #5ba848, #2e7aad);
+        box-shadow: 0 3px 10px color-mix(in srgb, #2e7aad 40%, transparent);
+    }
+    .sb-btn[disabled] { opacity: .6; cursor: not-allowed; }
+
+    .hide { display: none !important; }
+
+    // Responsive overrides — MUST come AFTER the base layout rules above. These
+    // selectors (.two/.three/.timepick/.sb-grid/.foot/…) have the same specificity
+    // as their base rules, so the cascade only lets the media query win when it is
+    // emitted later in the source. Previously this block sat right after .sb-grid
+    // (BEFORE the base .two/.three/.timepick rules), so the later base rules
+    // overrode it and the inner field-grids never collapsed to one column on a
+    // phone — fields crammed side-by-side. Keep these last.
+    @media (max-width: 780px) {
+        .sb-grid { grid-template-columns: 1fr; }
+    }
+    @media (max-width: 560px) {
+        .wrap { margin: 12px auto; padding: 0 10px; }
+        .body { padding: 14px 16px 4px; }
+        .topbar { padding: 14px 16px; }
+        .foot { padding: 14px 16px; flex-wrap: wrap; }
+        .two, .three { grid-template-columns: 1fr; }
+        .timepick { flex-wrap: wrap; }
+    }
+}

fusion_claims/static/src/xml/service_booking.xml

@@ -0,0 +1,220 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<templates xml:space="preserve">
+
+    <t t-name="fusion_claims.ServiceBookingWizard" owl="1">
+        <div class="o_service_booking" t-ref="root">
+            <div class="wrap">
+                <div class="dialog">
+                    <div class="topbar">
+                        <div>
+                            <h1>Book a Service</h1>
+                            <div class="sub">Repair · delivery · pickup — captures the job and creates the priced repair order</div>
+                        </div>
+                    </div>
+                    <div class="stepper">
+                        <span class="step active">Scheduled</span>
+                        <span class="step">En Route</span>
+                        <span class="step">In Progress</span>
+                        <span class="step">Completed</span>
+                        <span class="step draft">● Draft repair SO will be created</span>
+                    </div>
+
+                    <div class="body">
+                        <div class="sb-grid">
+                            <!-- CUSTOMER -->
+                            <div class="sb-card">
+                                <h3><span class="dot"></span>Customer</h3>
+                                <div class="sb-row">
+                                    <div class="seg full">
+                                        <button t-att-class="{ on: state.custMode === 'existing' }"
+                                                t-on-click="() => this.setCust('existing')">Existing customer</button>
+                                        <button t-att-class="{ on: state.custMode === 'new' }"
+                                                t-on-click="() => this.setCust('new')">New client</button>
+                                    </div>
+                                </div>
+                                <div t-if="state.custMode === 'existing'">
+                                    <div class="sb-row sb-cust-search">
+                                        <label class="fl">Search by phone, name or SO</label>
+                                        <input class="f" t-att-value="state.soSearch" t-on-input="onCustSearch"
+                                               placeholder="e.g. (416) 555-0142 …" autocomplete="off"/>
+                                        <div class="hint" t-if="!state.partnerId">Inbound call? Type the phone number — we match the contact &amp; their history.</div>
+                                        <div class="hint sb-cust-linked" t-if="state.partnerId">✓ Linked to existing contact — booking will use it.</div>
+                                        <div class="sb-cust-results" t-if="state.custSearching or state.custResults.length">
+                                            <div class="sb-cust-loading" t-if="state.custSearching">Searching…</div>
+                                            <t t-else="">
+                                                <div class="sb-cust-item" t-foreach="state.custResults" t-as="c" t-key="c.id"
+                                                     t-on-click="() => this.pickCustomer(c)">
+                                                    <div class="sb-cust-name"><t t-esc="c.name"/></div>
+                                                    <div class="sb-cust-meta"><t t-esc="c.phone"/><t t-if="c.phone and c.city"> · </t><t t-esc="c.city"/></div>
+                                                </div>
+                                            </t>
+                                        </div>
+                                    </div>
+                                </div>
+                                <div t-if="state.custMode === 'new'">
+                                    <div class="sb-row two">
+                                        <div><label class="fl">Client name *</label><input class="f" t-model="state.customer.name" placeholder="Full name"/></div>
+                                        <div><label class="fl">Phone *</label><input class="f" t-model="state.customer.phone" placeholder="(416) 555-…"/></div>
+                                    </div>
+                                    <div class="sb-row"><label class="fl">Email</label><input class="f" type="email" t-model="state.customer.email" placeholder="client@email.com"/></div>
+                                    <div class="sb-row"><label class="fl">Address</label>
+                                        <div class="with-icon"><input class="f sb-addr-input" t-model="state.customer.street" placeholder="Start typing an address…"/><span class="pin">📍</span></div>
+                                    </div>
+                                    <div class="sb-row three">
+                                        <div><label class="fl">Unit</label><input class="f" t-model="state.customer.unit" placeholder="#"/></div>
+                                        <div><label class="fl">Buzz</label><input class="f" t-model="state.customer.buzz" placeholder="—"/></div>
+                                        <div><label class="fl">City</label><input class="f" t-model="state.customer.city" placeholder="City"/></div>
+                                    </div>
+                                    <div class="hint">Contact is created &amp; linked on save — all from this page.</div>
+                                </div>
+                            </div>
+
+                            <!-- SERVICE & PRICING -->
+                            <div class="sb-card">
+                                <h3><span class="dot"></span>Service &amp; Pricing<span class="tag">$ REVENUE</span></h3>
+                                <div class="sb-row two">
+                                    <div>
+                                        <label class="fl">Device being serviced</label>
+                                        <select class="f" t-on-change="onDevice">
+                                            <option value="standard">Mobility Scooter</option>
+                                            <option value="standard">Powerchair</option>
+                                            <option value="standard">Wheelchair</option>
+                                            <option value="lift">Stairlift</option>
+                                            <option value="lift">Patient / Ceiling Lift</option>
+                                            <option value="standard">Lift Chair</option>
+                                            <option value="standard">Hospital Bed</option>
+                                            <option value="standard">Other</option>
+                                        </select>
+                                    </div>
+                                    <div>
+                                        <label class="fl">Issue / symptom</label>
+                                        <input class="f" t-model="state.issue" placeholder="e.g. won't power on"/>
+                                    </div>
+                                </div>
+                                <div class="sb-row" t-if="!state.inShop">
+                                    <label class="fl">Service call type</label>
+                                    <select class="f"
+                                            t-on-change="onCallType">
+                                        <t t-foreach="state.calloutRates" t-as="r" t-key="r.code">
+                                            <option t-att-value="r.code"
+                                                    t-att-selected="state.category === r.category and state.timing === r.timing">
+                                                <t t-esc="r.name"/> — $<t t-esc="fmt(r.price)"/><t t-if="r.adds_per_km"> + $<t t-esc="fmt(state.perKm)"/>/km ×2-way</t>
+                                            </option>
+                                        </t>
+                                    </select>
+                                    <div class="hint">Auto-suggested from the device — change if needed.</div>
+                                </div>
+                                <div class="feeline" t-if="!state.inShop and callout">
+                                    <div class="lbl">Call-out fee<small><t t-esc="callout.name"/><t t-if="callout.adds_per_km"> · + travel</t><t t-else=""> · includes 30 min labour</t></small></div>
+                                    <div class="amt">$<t t-esc="fmt(callout.price)"/></div>
+                                </div>
+                                <div class="hint" t-if="state.inShop">In-shop job — no call-out fee; labour billed at $<t t-esc="fmt(state.labour.inshop)"/>/hr.</div>
+                            </div>
+
+                            <!-- SCHEDULE -->
+                            <div class="sb-card">
+                                <h3><span class="dot"></span>Schedule</h3>
+                                <div class="sb-row two">
+                                    <div><label class="fl">Date</label><input class="f" type="date" t-model="state.date"/></div>
+                                    <div><label class="fl">Duration</label>
+                                        <select class="f" t-model.number="state.durationHr">
+                                            <option value="0.5">30 min</option>
+                                            <option value="1">1 hour</option>
+                                            <option value="1.5">1.5 hours</option>
+                                            <option value="2">2 hours</option>
+                                            <option value="3">3 hours</option>
+                                        </select>
+                                    </div>
+                                </div>
+                                <div class="sb-row">
+                                    <label class="fl">Start time</label>
+                                    <div class="timepick">
+                                        <select class="f" t-model.number="state.hour">
+                                            <option value="9">9</option>
+                                            <option value="10">10</option>
+                                            <option value="11">11</option>
+                                            <option value="12">12</option>
+                                            <option value="1">1</option>
+                                            <option value="2">2</option>
+                                            <option value="3">3</option>
+                                            <option value="4">4</option>
+                                        </select>
+                                        <select class="f" t-model.number="state.minute">
+                                            <option value="0">:00</option>
+                                            <option value="15">:15</option>
+                                            <option value="30">:30</option>
+                                            <option value="45">:45</option>
+                                        </select>
+                                        <div class="ampm">
+                                            <button t-att-class="{ on: state.ampm === 'AM' }" t-on-click="() => this.setAmpm('AM')">AM</button>
+                                            <button t-att-class="{ on: state.ampm === 'PM' }" t-on-click="() => this.setAmpm('PM')">PM</button>
+                                        </div>
+                                    </div>
+                                    <div class="endtime">Ends at <b><t t-esc="endLabel"/></b> · your local time</div>
+                                </div>
+                                <div class="sb-row">
+                                    <label class="fl">Technician</label>
+                                    <select class="f" t-model.number="state.technicianId">
+                                        <option value="">— Choose —</option>
+                                        <t t-foreach="state.technicians" t-as="t" t-key="t.id">
+                                            <option t-att-value="t.id"><t t-esc="t.name"/></option>
+                                        </t>
+                                    </select>
+                                </div>
+                            </div>
+
+                            <!-- LOCATION -->
+                            <div class="sb-card">
+                                <h3><span class="dot"></span>Location</h3>
+                                <div class="opt" style="border:none; padding-top:0;">
+                                    <div class="lab">In-shop job<small>At the store — no call-out, labour @ $<t t-esc="fmt(state.labour.inshop)"/>/hr</small></div>
+                                    <div class="sw" t-att-class="{ on: state.inShop }" t-on-click="toggleInShop"></div>
+                                </div>
+                                <div t-if="!state.inShop">
+                                    <div class="sb-row"><label class="fl">Job address</label>
+                                        <div class="with-icon"><input class="f sb-addr-input" t-model="state.customer.street" placeholder="Auto-fills from customer…"/><span class="pin">📍</span></div>
+                                    </div>
+                                    <div class="sb-row two">
+                                        <div><label class="fl">Unit / Suite</label><input class="f" t-model="state.customer.unit" placeholder="#"/></div>
+                                        <div><label class="fl">Buzz code</label><input class="f" t-model="state.customer.buzz" placeholder="—"/></div>
+                                    </div>
+                                </div>
+                            </div>
+
+                            <!-- JOB DETAILS -->
+                            <div class="sb-card span2">
+                                <h3><span class="dot"></span>Job details</h3>
+                                <div class="two">
+                                    <div class="sb-row"><label class="fl">Work description</label><textarea class="f" t-model="state.description" placeholder="Symptom, what to check, history…"></textarea></div>
+                                    <div class="sb-row"><label class="fl">Parts / materials to bring</label><textarea class="f" t-model="state.materials" placeholder="Batteries, controller, casters…"></textarea></div>
+                                </div>
+                                <div class="opt"><div class="lab">Under manufacturer warranty<small>Parts not billed when covered</small></div><div class="sw" t-att-class="{ on: state.warranty }" t-on-click="() => state.warranty = !state.warranty"></div></div>
+                                <div class="opt"><div class="lab">POD required<small>Capture proof of delivery on completion</small></div><div class="sw" t-att-class="{ on: state.pod }" t-on-click="() => state.pod = !state.pod"></div></div>
+                                <div class="opt"><div class="lab">Send client confirmation (email/SMS)<small>Booked · en-route · completed</small></div><div class="sw" t-att-class="{ on: state.emailConfirm }" t-on-click="() => state.emailConfirm = !state.emailConfirm"></div></div>
+                                <div class="opt"><div class="lab">Request Google review after completion</div><div class="sw" t-att-class="{ on: state.googleReview }" t-on-click="() => state.googleReview = !state.googleReview"></div></div>
+                            </div>
+
+                            <!-- ESTIMATE -->
+                            <div class="estimate">
+                                <div class="breakdown">
+                                    <div class="bk"><div class="k">Call-out</div><div class="v"><t t-if="state.inShop">—</t><t t-else="">$<t t-esc="fmt(estimate.callout)"/></t></div></div>
+                                    <div class="bk"><div class="k">Est. labour</div><div class="v">$<t t-esc="fmt(estimate.labour)"/> · <t t-esc="estimate.billHr"/>h @ $<t t-esc="fmt(labourRate)"/></div></div>
+                                    <div class="bk" t-if="estimate.addsKm"><div class="k">Travel ($<t t-esc="fmt(state.perKm)"/>/km ×2)</div><div class="v">$<t t-esc="fmt(estimate.km)"/></div></div>
+                                </div>
+                                <div class="total"><div class="k">Estimated total</div><div class="v">$<t t-esc="fmt(estimate.total)"/></div>
+                                    <div class="note">+ parts as used · pre-tax · a draft SO is created</div></div>
+                            </div>
+                        </div>
+                    </div>
+
+                    <div class="foot">
+                        <span class="spacer">Local time · America/Toronto · <t t-esc="state.distanceKm"/> km away</span>
+                        <button class="sb-btn ghost" t-on-click="() => this.action.doAction({ type: 'ir.actions.act_window_close' })">Cancel</button>
+                        <button class="sb-btn primary" t-on-click="submit" t-att-disabled="state.saving">Book &amp; Create SO</button>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </t>
+
+</templates>

fusion_claims/tests/__init__.py

@@ -3,3 +3,5 @@
 from . import test_signed_pages_gate
 from . import test_application_received_wizard
 from . import test_dashboard
+from . import test_service_rate
+from . import test_service_booking

fusion_claims/tests/test_service_booking.py

@@ -0,0 +1,75 @@
+# -*- coding: utf-8 -*-
+from datetime import date, timedelta
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestServiceBooking(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.Task = cls.env['fusion.technician.task']
+        # technician_id is required on a task (domain x_fc_is_field_staff=True).
+        cls.tech = cls.env['res.users'].create({
+            'name': 'Service Booking Tech',
+            'login': 'svcbook_tech',
+            'x_fc_is_field_staff': True,
+        })
+
+    def test_task_without_order_is_allowed(self):
+        # No SO/PO must NOT raise after the relax. description is required and a
+        # non-in-store task needs an address, so set both here to isolate the test
+        # to the order-link relaxation (not those unrelated base constraints).
+        t = self.Task.create({
+            'task_type': 'repair',
+            'technician_id': self.tech.id,
+            'scheduled_date': date.today() + timedelta(days=7),
+            'description': 'Test repair',
+            'is_in_store': True,
+        })
+        self.assertTrue(t.id)
+
+    def test_sale_order_has_service_repair_flag(self):
+        so = self.env['sale.order'].new({})
+        self.assertIn('x_fc_is_service_repair', so._fields)
+
+    def test_resolve_service_lines_standard_rush(self):
+        Task = self.Task
+        lines = Task._resolve_service_lines('standard', 'rush', in_shop=False, distance_km=10.0)
+        # call-out $120 + per-km line qty 20 @ $0.70
+        callout = [l for l in lines if l['price_unit'] == 120.0]
+        per_km = [l for l in lines if l['name_is_km']]
+        self.assertTrue(callout)
+        self.assertEqual(per_km[0]['product_uom_qty'], 20.0)
+        self.assertEqual(per_km[0]['price_unit'], 0.70)
+
+    def test_resolve_service_lines_in_shop_empty_callout(self):
+        lines = self.Task._resolve_service_lines('standard', 'normal', in_shop=True, distance_km=5.0)
+        self.assertEqual(lines, [])
+
+    def test_build_service_so(self):
+        partner = self.env['res.partner'].create({'name': 'Walk-in Wanda'})
+        so = self.Task._build_service_so(partner, 'standard', 'normal', False, 0.0)
+        self.assertEqual(so.state, 'draft')
+        self.assertTrue(so.x_fc_is_service_repair)
+        self.assertEqual(so.partner_id, partner)
+        self.assertEqual(so.order_line[0].price_unit, 95.0)
+
+    def test_action_book_creates_contact_task_and_so(self):
+        payload = {
+            'cust_mode': 'new',
+            'customer': {'name': 'Nina New', 'phone': '4165550199', 'email': 'nina@x.com',
+                         'street': '88 Bloor St E', 'city': 'Toronto'},
+            'category': 'standard', 'timing': 'normal', 'in_shop': False,
+            'device': 'scooter', 'issue': "won't power on",
+            'date': (date.today() + timedelta(days=7)).strftime('%Y-%m-%d'), 'time_start': 9.0, 'duration_hr': 1.0,
+            'technician_id': self.tech.id, 'description': 'check battery',
+        }
+        res = self.Task.action_book_from_wizard(payload)
+        self.assertTrue(res['task_id'] and res['order_id'])
+        task = self.Task.browse(res['task_id'])
+        self.assertEqual(task.sale_order_id.id, res['order_id'])
+        self.assertEqual(task.sale_order_id.order_line[0].price_unit, 95.0)
+        partner = self.env['res.partner'].search([('email', '=ilike', 'nina@x.com')], limit=1)
+        self.assertTrue(partner)

fusion_claims/tests/test_service_rate.py

@@ -0,0 +1,60 @@
+# -*- coding: utf-8 -*-
+from odoo.tests.common import TransactionCase, tagged
+
+
+@tagged('post_install', '-at_install')
+class TestServiceRate(TransactionCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.Rate = cls.env['fusion.service.rate']
+        cls.product = cls.env['product.product'].create({
+            'name': 'Test Service Product', 'type': 'service',
+        })
+
+    def _make(self, **kw):
+        vals = dict(name='Rate', code='c1', rate_kind='callout', category='standard',
+                    timing='normal', product_id=self.product.id, price=95.0, unit='fixed')
+        vals.update(kw)
+        return self.Rate.create(vals)
+
+    def test_get_callout_matches_category_and_timing(self):
+        # Assert against the real seed (codes are unique, so creating colliding
+        # standard/normal rows would violate the UNIQUE(code) constraint).
+        r = self.Rate.get_callout('standard', 'normal')
+        self.assertTrue(r)
+        self.assertEqual(r.code, 'callout_standard_normal')
+        self.assertEqual(r.rate_kind, 'callout')
+
+    def test_get_callout_in_shop_returns_empty(self):
+        self._make(code='callout_standard_normal_b')
+        self.assertFalse(self.Rate.get_callout('standard', 'normal', in_shop=True))
+
+    def test_get_rate_by_code(self):
+        # 'per_km' is a seeded code; the resolver returns that row.
+        r = self.Rate.get_rate('per_km')
+        self.assertTrue(r)
+        self.assertEqual(r.unit, 'per_km')
+
+    def test_code_must_be_unique(self):
+        self._make(code='dup')
+        with self.assertRaises(Exception):
+            self._make(code='dup')
+            self.env.flush_all()
+
+    def test_seeded_callouts_exist(self):
+        # standard normal $95, lift after-hours $205 are the canonical seeds
+        std = self.env.ref('fusion_claims.rate_callout_standard_normal')
+        self.assertEqual(std.price, 95.0)
+        self.assertEqual(std.rate_kind, 'callout')
+        self.assertTrue(std.product_id)
+        lift_ah = self.env.ref('fusion_claims.rate_callout_lift_afterhours')
+        self.assertEqual(lift_ah.price, 205.0)
+        self.assertTrue(lift_ah.adds_per_km)
+
+    def test_seeded_per_km(self):
+        km = self.env['fusion.service.rate'].get_rate('per_km')
+        self.assertTrue(km)
+        self.assertEqual(km.unit, 'per_km')
+        self.assertEqual(km.price, 0.70)

fusion_claims/views/service_booking_action.xml

@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Copyright 2024-2026 Nexa Systems Inc.
+    License OPL-1 (Odoo Proprietary License v1.0)
+    Part of the Fusion Claim Assistant product family.
+-->
+<odoo>
+    <record id="action_service_booking_wizard" model="ir.actions.client">
+        <field name="name">Book a Service</field>
+        <field name="tag">fusion_claims.service_booking</field>
+    </record>
+
+    <menuitem id="menu_service_booking"
+              name="Book a Service"
+              parent="fusion_tasks.menu_field_service_root"
+              action="action_service_booking_wizard"
+              sequence="1"/>
+</odoo>

fusion_claims/views/service_rate_views.xml

@@ -0,0 +1,101 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Copyright 2024-2025 Nexa Systems Inc.
+    License OPL-1 (Odoo Proprietary License v1.0)
+    Part of the Fusion Claim Assistant product family.
+-->
+<odoo>
+    <!-- ===================================================================== -->
+    <!-- SERVICE RATE: List View (inline-edit enabled)                         -->
+    <!-- ===================================================================== -->
+    <record id="view_fusion_service_rate_list" model="ir.ui.view">
+        <field name="name">fusion.service.rate.list</field>
+        <field name="model">fusion.service.rate</field>
+        <field name="arch" type="xml">
+            <list string="Service Rates" editable="top"
+                  default_order="sequence, rate_kind, category, timing">
+                <field name="sequence" widget="handle"/>
+                <field name="name"/>
+                <field name="code"/>
+                <field name="rate_kind" string="Kind"/>
+                <field name="category"/>
+                <field name="timing"/>
+                <field name="unit"/>
+                <field name="price" string="Rate"/>
+                <field name="currency_id" column_invisible="True"/>
+                <field name="adds_per_km" string="+ km"/>
+                <field name="included_labour_min" string="Incl. Labour (min)"/>
+                <field name="in_shop" string="In-Shop"/>
+                <field name="product_id" string="Invoice Product"/>
+                <field name="active" column_invisible="True"/>
+            </list>
+        </field>
+    </record>
+
+    <!-- ===================================================================== -->
+    <!-- SERVICE RATE: Form View                                               -->
+    <!-- ===================================================================== -->
+    <record id="view_fusion_service_rate_form" model="ir.ui.view">
+        <field name="name">fusion.service.rate.form</field>
+        <field name="model">fusion.service.rate</field>
+        <field name="arch" type="xml">
+            <form string="Service Rate">
+                <sheet>
+                    <div class="oe_title">
+                        <h1><field name="name" placeholder="Rate name…"/></h1>
+                    </div>
+                    <group>
+                        <group string="Identification">
+                            <field name="code"/>
+                            <field name="rate_kind" string="Kind"/>
+                            <field name="category"/>
+                            <field name="timing"/>
+                            <field name="in_shop"/>
+                            <field name="active"/>
+                            <field name="sequence"/>
+                        </group>
+                        <group string="Pricing">
+                            <field name="price" string="Rate"/>
+                            <field name="currency_id"/>
+                            <field name="unit"/>
+                            <field name="adds_per_km"/>
+                            <field name="included_labour_min"/>
+                        </group>
+                    </group>
+                    <group string="Invoice Product">
+                        <field name="product_id" string="Product" colspan="2"/>
+                    </group>
+                </sheet>
+            </form>
+        </field>
+    </record>
+
+    <!-- ===================================================================== -->
+    <!-- SERVICE RATE: Action                                                  -->
+    <!-- ===================================================================== -->
+    <record id="action_fusion_service_rate" model="ir.actions.act_window">
+        <field name="name">Service Rates</field>
+        <field name="res_model">fusion.service.rate</field>
+        <field name="view_mode">list,form</field>
+        <field name="context">{'active_test': False}</field>
+        <field name="help" type="html">
+            <p class="o_view_nocontent_smiling_face">
+                No service rates found.
+            </p>
+            <p>
+                Add rates used for booking service calls, labour, travel, and delivery.
+            </p>
+        </field>
+    </record>
+
+    <!-- ===================================================================== -->
+    <!-- SERVICE RATE: Menu item under Technician Configuration               -->
+    <!-- ===================================================================== -->
+    <menuitem id="menu_fusion_service_rate"
+              name="Service Rates"
+              parent="fusion_tasks.menu_technician_config"
+              action="action_fusion_service_rate"
+              sequence="50"
+              groups="base.group_system"/>
+
+</odoo>

fusion_clock/CLAUDE.md

@@ -5,7 +5,7 @@
 ## 1. What This Module Is
 
 - **Name**: Fusion Clock.
-- **Version**: `19.0.3.3.0`.
+- **Version**: `19.0.4.1.0`.
 - **Category**: Human Resources/Attendances.
 - **License**: OPL-1, Nexa Systems Inc.
 - **Purpose**: complete time and attendance app built on Odoo `hr.attendance`.
@@ -68,6 +68,7 @@ Custom models:
 | `fusion.clock.leave.request` | `models/clock_leave_request.py` | Portal leave requests, auto-approved but office-notified. |
 | `fusion.clock.correction` | `models/clock_correction.py` | Timesheet correction requests with approve/reject workflow. |
 | `fusion.clock.report` | `models/clock_report.py` | Employee or batch pay-period report with PDF/CSV export and email send. |
+| `fusion.clock.break.rule` | `models/clock_break_rule.py` | Per-province statutory unpaid-break thresholds (2-tier: first break after N1 h, second after N2 h). |
 | `fusion.clock.nfc.enrollment.wizard` | `wizard/clock_nfc_enrollment_wizard.py` | Backend NFC card enrolment/reassignment wizard. |
 
 Inherited models:
@@ -101,7 +102,7 @@ Clock-out flow:
 1. Verify location again.
 2. Call `_attendance_action_change()`.
 3. Write out-distance.
-4. Apply break deduction when configured.
+4. Break is deducted automatically — `x_fclk_break_minutes` is a stored compute (see §13), not an explicit controller step.
 5. Create `early_out` penalty when outside grace.
 6. Log `clock_out`.
 7. Log overtime if computed overtime is positive.
@@ -110,16 +111,23 @@ Location verification uses GPS when coordinates are available and geocoded locat
 
 ## 6. Kiosk And NFC
 
-Classic kiosk:
+PIN kiosk (opt-in alternative to NFC; v19.0.4.0.0+):
 
-- Page: `/fusion_clock/kiosk`
+- Page: `/fusion_clock/kiosk` — polished photo-tile → PIN flow (logo, brand-hue
+  gradient, live clock), matching the NFC kiosk style; built as an Odoo 19
+  Interaction (`#pin_kiosk_root`, `static/src/js/fusion_clock_kiosk.js`,
+  `static/src/scss/pin_kiosk.scss`, brand-hue var `--pk-h`).
 - JSON routes:
-  - `/fusion_clock/kiosk/search`
-  - `/fusion_clock/kiosk/verify_pin`
-  - `/fusion_clock/kiosk/clock`
-- Requires `fusion_clock.group_fusion_clock_manager`.
-- Controlled by `fusion_clock.enable_kiosk` and `fusion_clock.kiosk_pin_required`.
-- Uses `hr.employee.x_fclk_kiosk_pin`.
+  - `/fusion_clock/kiosk/search` (grid rows: +`avatar_url`, +`has_pin`; also used by the NFC kiosk's employee_search — keep additive)
+  - `/fusion_clock/kiosk/verify_pin` (returns `needs_setup` when the employee has no PIN)
+  - `/fusion_clock/kiosk/set_pin` (first-use PIN creation, 4–6 digits)
+  - `/fusion_clock/kiosk/clock` (uses the company kiosk location, no GPS geofence; optional master-gated selfie)
+- Requires `group_fusion_clock_manager` or `group_fusion_clock_kiosk_app`; has its own app icon.
+- Opt-in via `fusion_clock.enable_kiosk`. PIN is ALWAYS required (the old
+  `kiosk_pin_required` setting was removed). Selfie capture is gated by the
+  master `fusion_clock.enable_photo_verification`. Kiosk location =
+  `res.company.x_fclk_nfc_kiosk_location_id` (shared with the NFC kiosk).
+- Uses `hr.employee.x_fclk_kiosk_pin` (manager-editable; created on first tap otherwise).
 
 NFC kiosk:
 
@@ -245,16 +253,13 @@ fusion_clock.default_clock_in_time
 fusion_clock.default_clock_out_time
 fusion_clock.default_break_minutes
 fusion_clock.auto_deduct_break
-fusion_clock.break_threshold_hours
 fusion_clock.enable_auto_clockout
-fusion_clock.grace_period_minutes
 fusion_clock.max_shift_hours
 fusion_clock.enable_penalties
 fusion_clock.penalty_grace_minutes
 fusion_clock.penalty_deduction_minutes
 fusion_clock.enable_overtime
 fusion_clock.daily_overtime_threshold
-fusion_clock.weekly_overtime_threshold
 fusion_clock.office_user_id
 fusion_clock.very_late_threshold_minutes
 fusion_clock.max_monthly_absences
@@ -266,7 +271,6 @@ fusion_clock.enable_ip_fallback
 fusion_clock.enable_photo_verification
 fusion_clock.google_maps_api_key
 fusion_clock.enable_kiosk
-fusion_clock.kiosk_pin_required
 fusion_clock.enable_correction_requests
 fusion_clock.enable_sounds
 fusion_clock.pay_period_type
@@ -323,10 +327,12 @@ All new JSON endpoints must use `type="jsonrpc"`, not deprecated `type="json"`.
 
 - Always use local-day helpers for date domains. UTC midnight boundaries will break attendance totals around timezone offsets.
 - `hr.employee._get_fclk_scheduled_times(date)` returns naive UTC datetimes suitable for Odoo comparisons.
-- Break deduction is stored as minutes in `hr.attendance.x_fclk_break_minutes`; penalties add to that same field.
-- `x_fclk_net_hours` is computed from Odoo `worked_hours` minus break minutes.
-- Daily overtime currently compares net hours to employee scheduled hours or daily threshold; weekly threshold is configured but not used in `hr.attendance._compute_overtime_hours()`.
-- `fusion_clock.enable_ip_fallback` exists in settings, but server-side `_verify_location()` attempts IP whitelist matching whenever a client IP is present.
+- **`hr.attendance.x_fclk_break_minutes` is a stored COMPUTE, not a writable field** (`_compute_fclk_break_minutes`): statutory break (per the employee's province `fusion.clock.break.rule`, from actual `worked_hours`, 2-tier — first break after N1 h, second after N2 h, inclusive `>=`) **plus** Σ penalty minutes. It recomputes on every path incl. manual backend create/edit, which is what makes the break auto-apply on manually-entered hours. NEVER `write()` it — change the province rule or toggle `fusion_clock.auto_deduct_break` instead. Penalty minutes are now strictly additive (the old controller `max()` that could swallow a late clock-in penalty is gone). Rule resolved via `hr.employee._get_fclk_break_rule()` (company `state_id` → matching rule → global `is_default` rule). The retired `break_threshold_hours` setting is superseded by per-rule `break1_after_hours`.
+- `x_fclk_net_hours` is computed from Odoo `worked_hours` minus break minutes. **Gotcha: `worked_hours` itself subtracts the resource-calendar lunch interval for NON-flexible employees** (Odoo core `hr.attendance._get_worked_hours_in_range`), so the statutory tiers run on lunch-excluded hours; flexible / no-calendar employees get the raw check_in→check_out span. Tests that need a deterministic span give the employee a `flexible_hours` calendar.
+- **Migration recompute gotcha**: recomputing ONE stored computed field via `env.add_to_compute(field, recs) + recs.flush_recordset([field])` does NOT cascade to fields that depend on it. The `19.0.4.1.0` post-migrate recomputes `x_fclk_break_minutes`, `x_fclk_net_hours` AND `x_fclk_overtime_hours` (in that dependency order, flushing each) — recomputing only the break left historical `net_hours` stale (caught on the entech deploy 2026-06-01).
+- Daily overtime compares net hours to the employee's scheduled hours or the daily threshold. (The old `weekly_overtime_threshold` and `grace_period_minutes` settings were removed 2026-05-31 — they were defined/shown but never consumed.)
+- `fusion_clock.enable_ip_fallback` is honoured: `_verify_location()` only attempts IP-whitelist matching when the toggle is on (default on).
+- **All fusion_clock Boolean settings are persisted explicitly** (`'True'`/`'False'`) via the `_FCLK_BOOL_PARAMS` loop in `res.config.settings.get_values/set_values`, NOT via `config_parameter=`. Reason: a `config_parameter` Boolean can't be turned OFF (Odoo deletes the param row on a falsy value, so `get_param` returns the default and the feature stays on). When adding a new Boolean setting, add it to `_FCLK_BOOL_PARAMS` with its default; don't use `config_parameter=`.
 - NFC kiosk needs a company-level `x_fclk_nfc_kiosk_location_id`; without it taps return `no_location_configured`.
 - Kiosk routes are authenticated (`auth='user'`) and manager-gated; wall tablets need a manager-authorised kiosk user.
 - Portal report download manually streams the PDF binary rather than using `fusion_pdf_preview`.

fusion_clock/__manifest__.py

@@ -5,7 +5,7 @@
 
 {
     'name': 'Fusion Clock',
-    'version': '19.0.3.14.0',
+    'version': '19.0.4.2.0',
     'category': 'Human Resources/Attendances',
     'summary': 'Complete Employee T&A with Geofencing, Shifts, Penalties, Overtime, Kiosk, Dashboard & Payroll Export',
     'description': """
@@ -52,6 +52,7 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'security/ir.model.access.csv',
         # Data
         'data/ir_config_parameter_data.xml',
+        'data/clock_break_rule_data.xml',
         'data/ir_cron_data.xml',
         # Reports (must load before mail templates that reference them)
         'report/clock_report_template.xml',
@@ -71,8 +72,10 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'views/clock_dashboard_views.xml',
         'views/hr_employee_views.xml',
         'views/clock_schedule_views.xml',
+        'views/clock_break_rule_views.xml',
         # Wizards (must load before clock_menus.xml since menu references wizard action)
         'wizard/clock_nfc_enrollment_views.xml',
+        'wizard/clock_period_picker_views.xml',
         'views/clock_menus.xml',
         # Views - Portal
         'views/portal_clock_templates.xml',
@@ -86,6 +89,7 @@ Integrates natively with Odoo's hr.attendance module for full payroll compatibil
         'web.assets_frontend': [
             'fusion_clock/static/src/css/portal_clock.css',
             'fusion_clock/static/src/scss/nfc_kiosk.scss',
+            'fusion_clock/static/src/scss/pin_kiosk.scss',
             'fusion_clock/static/src/js/fusion_clock_portal.js',
             'fusion_clock/static/src/js/fusion_clock_kiosk.js',
             'fusion_clock/static/src/js/fusion_clock_nfc_kiosk.js',

fusion_clock/controllers/clock_api.py

@@ -5,7 +5,6 @@
 import base64
 import math
 import logging
-import pytz
 from datetime import datetime, timedelta
 from odoo import http, fields, _
 from odoo.http import request
@@ -74,9 +73,11 @@ class FusionClockAPI(http.Controller):
                 if dist < nearest_distance:
                     nearest_distance = dist
 
-        # IP fallback -- try when GPS is unavailable OR GPS is outside all geofences
+        # IP fallback -- only when enabled (default on); try when GPS is
+        # unavailable OR GPS is outside all geofences.
         ICP = request.env['ir.config_parameter'].sudo()
-        if client_ip:
+        ip_fallback_enabled = ICP.get_param('fusion_clock.enable_ip_fallback', 'True') == 'True'
+        if client_ip and ip_fallback_enabled:
             for loc in locations:
                 if loc.check_ip_whitelist(client_ip):
                     return loc, 0, None, 'ip'
@@ -135,12 +136,6 @@ class FusionClockAPI(http.Controller):
                 'date': actual_dt.date() if isinstance(actual_dt, datetime) else get_local_today(request.env, employee),
             })
 
-            # Deduct penalty minutes from attendance (adds to break deduction)
-            current_break = attendance.x_fclk_break_minutes or 0.0
-            attendance.sudo().write({
-                'x_fclk_break_minutes': current_break + deduction,
-            })
-
             # Log penalty
             log_type = 'late_clock_in' if penalty_type == 'late_in' else 'early_clock_out'
             request.env['fusion.clock.activity.log'].sudo().create({
@@ -156,32 +151,6 @@ class FusionClockAPI(http.Controller):
             if penalty_type == 'late_in':
                 employee.sudo().write({'x_fclk_ontime_streak': 0})
 
-    def _apply_break_deduction(self, attendance, employee):
-        """Apply automatic break deduction if configured."""
-        ICP = request.env['ir.config_parameter'].sudo()
-        if ICP.get_param('fusion_clock.auto_deduct_break', 'True') != 'True':
-            return
-
-        threshold = float(ICP.get_param('fusion_clock.break_threshold_hours', '4.0'))
-        worked = attendance.worked_hours or 0.0
-
-        if worked >= threshold:
-            local_date = get_local_today(request.env, employee)
-            if attendance.check_in:
-                tz_name = (
-                    employee.resource_id.tz
-                    or (employee.user_id.partner_id.tz if employee.user_id else False)
-                    or employee.company_id.partner_id.tz
-                    or 'UTC'
-                )
-                local_date = pytz.UTC.localize(attendance.check_in).astimezone(pytz.timezone(tz_name)).date()
-            break_min = employee._get_fclk_break_minutes(local_date)
-            current = attendance.x_fclk_break_minutes or 0.0
-            # Set to whichever is higher: configured break or existing (penalty-inflated) value
-            new_val = max(break_min, current)
-            if new_val != current:
-                attendance.sudo().write({'x_fclk_break_minutes': new_val})
-
     def _log_activity(self, employee, log_type, description, attendance=None,
                       location=None, latitude=0, longitude=0, distance=0, source='portal'):
         """Create an activity log entry."""
@@ -306,8 +275,11 @@ class FusionClockAPI(http.Controller):
                     'x_fclk_clock_source': source,
                 }
 
-                # Photo verification
-                if photo and location.require_photo:
+                # Photo verification — only when the global toggle is on (master);
+                # per-location require_photo refines it from there.
+                enable_photo = request.env['ir.config_parameter'].sudo().get_param(
+                    'fusion_clock.enable_photo_verification', 'False') == 'True'
+                if photo and enable_photo and location.require_photo:
                     try:
                         write_vals['x_fclk_checkin_photo'] = photo
                     except Exception:
@@ -315,6 +287,11 @@ class FusionClockAPI(http.Controller):
 
                 attendance.sudo().write(write_vals)
 
+                # A successful clock-in resolves any pending missed-clock-out flag,
+                # so the employee is never nagged once they are back on the clock.
+                if employee.x_fclk_pending_reason:
+                    employee.sudo().write({'x_fclk_pending_reason': False})
+
                 # Log clock-in
                 self._log_activity(
                     employee, 'clock_in',
@@ -400,9 +377,6 @@ class FusionClockAPI(http.Controller):
                     'x_fclk_out_distance': round(distance, 1),
                 })
 
-                # Apply break deduction
-                self._apply_break_deduction(attendance, employee)
-
                 # Check for early clock-out penalty
                 if not is_scheduled_off:
                     _, scheduled_out = self._get_scheduled_times(employee, today)
@@ -573,7 +547,10 @@ class FusionClockAPI(http.Controller):
             'is_checked_in': is_checked_in,
             'employee_name': employee.name,
             'enable_clock': employee.x_fclk_enable_clock,
-            'pending_reason': employee.x_fclk_pending_reason,
+            # Only nag when there is genuinely something to explain: a flag set,
+            # the employee NOT currently on the clock, and not attendance-exempt.
+            'pending_reason': (employee.x_fclk_pending_reason and not is_checked_in
+                               and not employee._fclk_is_attendance_exempt()),
             'ontime_streak': employee.x_fclk_ontime_streak,
         }
         local_today = get_local_today(request.env, employee)
@@ -759,7 +736,8 @@ class FusionClockAPI(http.Controller):
             'is_checked_in': is_checked_in,
             'check_in': check_in,
             'location_name': location_name,
-            'pending_reason': employee.x_fclk_pending_reason,
+            'pending_reason': (employee.x_fclk_pending_reason and not is_checked_in
+                               and not employee._fclk_is_attendance_exempt()),
             'today_hours': today_hours,
             'week_hours': week_hours,
             'overtime_week': round(employee.x_fclk_overtime_this_week or 0, 2),

fusion_clock/controllers/clock_kiosk.py

@@ -17,11 +17,11 @@ def _is_kiosk_operator(user):
 
 
 class FusionClockKiosk(http.Controller):
-    """Kiosk mode controller for shared-device clock-in/out."""
+    """PIN kiosk — shared-device clock-in/out: tap your photo, enter a PIN."""
 
     @http.route('/fusion_clock/kiosk', type='http', auth='user', website=True)
     def kiosk_page(self, **kw):
-        """Kiosk clock-in/out page for shared tablets."""
+        """Polished PIN kiosk page for shared tablets."""
         user = request.env.user
         if not _is_kiosk_operator(user):
             return request.redirect('/my')
@@ -30,74 +30,95 @@ class FusionClockKiosk(http.Controller):
         if ICP.get_param('fusion_clock.enable_kiosk', 'False') != 'True':
             return request.redirect('/my')
 
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
         values = {
-            'pin_required': ICP.get_param('fusion_clock.kiosk_pin_required', 'True') == 'True',
             'page_name': 'kiosk',
+            'company_name': company.name,
+            'company_logo_url': '/web/image/res.company/%s/logo' % company.id if company.logo else '',
+            'location_name': location.name if location else 'No location configured',
+            'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
+            'photo_required': ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True',
         }
         return request.render('fusion_clock.kiosk_page', values)
 
     @http.route('/fusion_clock/kiosk/search', type='jsonrpc', auth='user', methods=['POST'])
     def kiosk_search(self, query='', **kw):
-        """Search employees for kiosk identification."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+        """Employees for the kiosk grid. Also used by the NFC kiosk's
+        employee_search — keep the return shape additive."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
         employees = request.env['hr.employee'].sudo().search([
             ('x_fclk_enable_clock', '=', True),
             ('name', 'ilike', query),
-        ], limit=20)
-
-        return {
-            'employees': [{
+        ], limit=200, order='name')
+        rows = []
+        for emp in employees:
+            unique = emp.write_date.strftime('%Y%m%d%H%M%S') if emp.write_date else ''
+            rows.append({
                 'id': emp.id,
                 'name': emp.name,
                 'department': emp.department_id.name or '',
                 'is_checked_in': emp.attendance_state == 'checked_in',
                 'card_uid': emp.x_fclk_nfc_card_uid or '',
-            } for emp in employees],
-        }
+                'has_pin': bool(emp.x_fclk_kiosk_pin),
+                'avatar_url': '/web/image/hr.employee.public/%s/avatar_128?unique=%s' % (emp.id, unique),
+            })
+        return {'employees': rows}
 
     @http.route('/fusion_clock/kiosk/verify_pin', type='jsonrpc', auth='user', methods=['POST'])
     def kiosk_verify_pin(self, employee_id=0, pin='', **kw):
-        """Verify employee PIN for kiosk mode."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+        """Verify a PIN. Employees with no PIN return needs_setup."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
-        employee = request.env['hr.employee'].sudo().browse(employee_id)
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
         if not employee.exists():
-            return {'error': 'Employee not found.'}
+            return {'error': 'not_found'}
+        if not employee.x_fclk_kiosk_pin:
+            return {'needs_setup': True, 'employee_name': employee.name}
+        if employee.x_fclk_kiosk_pin != pin:
+            return {'error': 'invalid_pin'}
+        return {'success': True, 'employee_name': employee.name,
+                'is_checked_in': employee.attendance_state == 'checked_in'}
 
-        if employee.x_fclk_kiosk_pin and employee.x_fclk_kiosk_pin != pin:
-            return {'error': 'Invalid PIN.'}
-
-        return {
-            'success': True,
-            'employee_name': employee.name,
-            'is_checked_in': employee.attendance_state == 'checked_in',
-        }
+    @http.route('/fusion_clock/kiosk/set_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_set_pin(self, employee_id=0, pin='', **kw):
+        """First-use PIN creation. Rejects if the employee already has one."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+        if employee.x_fclk_kiosk_pin:
+            return {'error': 'already_set'}
+        pin = (pin or '').strip()
+        if not (pin.isdigit() and 4 <= len(pin) <= 6):
+            return {'error': 'bad_pin'}
+        employee.write({'x_fclk_kiosk_pin': pin})
+        return {'success': True, 'employee_name': employee.name}
 
     @http.route('/fusion_clock/kiosk/clock', type='jsonrpc', auth='user', methods=['POST'])
-    def kiosk_clock(self, employee_id=0, latitude=0, longitude=0, **kw):
-        """Perform clock action from kiosk on behalf of an employee."""
-        user = request.env.user
-        if not _is_kiosk_operator(user):
+    def kiosk_clock(self, employee_id=0, photo_b64='', **kw):
+        """Clock the employee in/out from the shared kiosk. Fixed wall device:
+        uses the company kiosk location, no per-clock GPS geofence."""
+        if not _is_kiosk_operator(request.env.user):
             return {'error': 'Access denied.'}
-
-        employee = request.env['hr.employee'].sudo().browse(employee_id)
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
         if not employee.exists() or not employee.x_fclk_enable_clock:
-            return {'error': 'Employee not found or clock not enabled.'}
+            return {'error': 'not_found'}
 
-        from .clock_api import FusionClockAPI, haversine_distance
+        ICP = request.env['ir.config_parameter'].sudo()
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        if not location:
+            return {'error': 'no_location_configured'}
+
+        from .clock_api import FusionClockAPI
+        from .clock_nfc_kiosk import _strip_data_url_prefix
         api = FusionClockAPI()
 
-        location, distance, err, method = api._verify_location(latitude, longitude, employee)
-        if not location:
-            return {
-                'error': api._location_error_message(err, distance),
-                'allowed': False,
-            }
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
 
         is_checked_in = employee.attendance_state == 'checked_in'
         now = fields.Datetime.now()
@@ -105,75 +126,48 @@ class FusionClockKiosk(http.Controller):
         day_plan = employee._get_fclk_day_plan(today)
         is_scheduled_off = not day_plan.get('scheduled')
 
-        geo_info = {
-            'latitude': latitude,
-            'longitude': longitude,
-            'browser': 'kiosk',
-            'ip_address': request.httprequest.remote_addr or '',
-        }
-
+        geo_info = {'latitude': 0, 'longitude': 0, 'browser': 'kiosk',
+                    'ip_address': request.httprequest.remote_addr or ''}
         try:
             attendance = employee.sudo()._attendance_action_change(geo_info)
-
             if not is_checked_in:
                 attendance.sudo().write({
                     'x_fclk_location_id': location.id,
-                    'x_fclk_in_distance': round(distance, 1),
+                    'x_fclk_in_distance': 0.0,
                     'x_fclk_clock_source': 'kiosk',
+                    'x_fclk_check_in_photo': photo_bytes if photo_bytes else False,
                 })
-
-                api._log_activity(
-                    employee, 'clock_in',
-                    f"Kiosk clock-in at {location.name}",
-                    attendance=attendance, location=location,
-                    latitude=latitude, longitude=longitude, distance=distance,
-                    source='kiosk',
-                )
-
+                # Back on the clock -> clear any stale missed-clock-out flag.
+                if employee.x_fclk_pending_reason:
+                    employee.sudo().write({'x_fclk_pending_reason': False})
+                api._log_activity(employee, 'clock_in', f"Kiosk clock-in at {location.name}",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
                 if is_scheduled_off:
-                    api._log_activity(
-                        employee, 'unscheduled_shift',
-                        f"Kiosk clock-in on an unscheduled day at {location.name}",
-                        attendance=attendance, location=location,
-                        latitude=latitude, longitude=longitude, distance=distance,
-                        source='kiosk',
-                    )
+                    api._log_activity(employee, 'unscheduled_shift',
+                                      f"Kiosk clock-in on an unscheduled day at {location.name}",
+                                      attendance=attendance, location=location,
+                                      latitude=0, longitude=0, distance=0, source='kiosk')
                 else:
                     scheduled_in, _ = api._get_scheduled_times(employee, today)
                     api._check_and_create_penalty(employee, attendance, 'late_in', scheduled_in, now)
-
-                return {
-                    'success': True,
-                    'action': 'clock_in',
-                    'employee_name': employee.name,
-                    'message': f'{employee.name} clocked in at {location.name}',
-                }
+                return {'success': True, 'action': 'clock_in', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked in at {location.name}', 'worked_hours': 0.0}
             else:
                 attendance.sudo().write({
-                    'x_fclk_out_distance': round(distance, 1),
+                    'x_fclk_out_distance': 0.0,
+                    'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
                 })
-                api._apply_break_deduction(attendance, employee)
-
                 if not is_scheduled_off:
                     _, scheduled_out = api._get_scheduled_times(employee, today)
                     api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)
-
-                api._log_activity(
-                    employee, 'clock_out',
-                    f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
-                    attendance=attendance, location=location,
-                    latitude=latitude, longitude=longitude, distance=distance,
-                    source='kiosk',
-                )
-
-                return {
-                    'success': True,
-                    'action': 'clock_out',
-                    'employee_name': employee.name,
-                    'message': f'{employee.name} clocked out from {location.name}',
-                    'net_hours': round(attendance.x_fclk_net_hours or 0, 2),
-                }
-
+                api._log_activity(employee, 'clock_out',
+                                  f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                return {'success': True, 'action': 'clock_out', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked out from {location.name}',
+                        'net_hours': round(attendance.x_fclk_net_hours or 0, 2)}
         except Exception as e:
-            _logger.error("Fusion Clock kiosk error: %s", str(e))
+            _logger.error("Fusion Clock PIN kiosk error: %s", str(e))
             return {'error': str(e)}

fusion_clock/controllers/clock_nfc_kiosk.py

@@ -91,7 +91,8 @@ class FusionClockNfcKiosk(http.Controller):
             'company_logo_url': company_logo_url,
             'location_name': location.name if location else 'No location configured',
             'location_configured': bool(location),
-            'photo_required': ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True',
+            'photo_required': (ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+                               and ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'),
             'debug_enabled': ICP.get_param('fusion_clock.nfc_kiosk_debug', 'False') == 'True',
             'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
         }
@@ -289,10 +290,12 @@ class FusionClockNfcKiosk(http.Controller):
         if _is_debounced(normalized):
             return {'error': 'debounce'}
 
-        photo_required = ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'
+        # Master switch: no photo capture/storage when global Photo Verification is off.
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_required = photo_enabled and ICP.get_param('fusion_clock.nfc_photo_required', 'True') == 'True'
         if photo_required and not photo_b64:
             return {'error': 'photo_required', 'message': 'Camera unavailable. Ask IT to check the kiosk.'}
-        photo_bytes = _strip_data_url_prefix(photo_b64) if photo_b64 else b''
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
 
         company = request.env.company.sudo()
         location = company.x_fclk_nfc_kiosk_location_id
@@ -342,6 +345,9 @@ class FusionClockNfcKiosk(http.Controller):
                 'x_fclk_clock_source': 'nfc_kiosk',
                 'x_fclk_check_in_photo': photo_bytes if photo_bytes else False,
             })
+            # Back on the clock -> clear any stale missed-clock-out flag.
+            if employee.x_fclk_pending_reason:
+                employee.sudo().write({'x_fclk_pending_reason': False})
             api._log_activity(
                 employee, 'clock_in',
                 f"NFC kiosk clock-in at {location.name}",
@@ -375,7 +381,6 @@ class FusionClockNfcKiosk(http.Controller):
                 'x_fclk_out_distance': 0.0,
                 'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
             })
-            api._apply_break_deduction(attendance, employee)
             if not is_scheduled_off:
                 _, scheduled_out = api._get_scheduled_times(employee, today)
                 api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)

fusion_clock/data/clock_break_rule_data.xml

@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+    <record id="break_rule_ontario" model="fusion.clock.break.rule">
+        <field name="name">Ontario</field>
+        <field name="country_id" ref="base.ca"/>
+        <field name="state_id" ref="base.state_ca_on"/>
+        <field name="is_default" eval="True"/>
+        <field name="break1_after_hours">5.0</field>
+        <field name="break1_minutes">30.0</field>
+        <field name="break2_after_hours">10.0</field>
+        <field name="break2_minutes">30.0</field>
+    </record>
+</odoo>

fusion_clock/data/ir_config_parameter_data.xml

@@ -20,16 +20,8 @@
         <field name="key">fusion_clock.auto_deduct_break</field>
         <field name="value">True</field>
     </record>
-    <record id="config_break_threshold_hours" model="ir.config_parameter">
-        <field name="key">fusion_clock.break_threshold_hours</field>
-        <field name="value">4.0</field>
-    </record>
 
-    <!-- Grace Period & Auto Clock-Out -->
-    <record id="config_grace_period_minutes" model="ir.config_parameter">
-        <field name="key">fusion_clock.grace_period_minutes</field>
-        <field name="value">15</field>
-    </record>
+    <!-- Auto Clock-Out -->
     <record id="config_enable_auto_clockout" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_auto_clockout</field>
         <field name="value">True</field>
@@ -92,15 +84,11 @@
         <field name="key">fusion_clock.daily_overtime_threshold</field>
         <field name="value">8.0</field>
     </record>
-    <record id="config_weekly_overtime_threshold" model="ir.config_parameter">
-        <field name="key">fusion_clock.weekly_overtime_threshold</field>
-        <field name="value">40.0</field>
-    </record>
 
     <!-- Location & Verification -->
     <record id="config_enable_ip_fallback" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_ip_fallback</field>
-        <field name="value">False</field>
+        <field name="value">True</field>
     </record>
     <record id="config_enable_photo_verification" model="ir.config_parameter">
         <field name="key">fusion_clock.enable_photo_verification</field>
@@ -112,10 +100,6 @@
         <field name="key">fusion_clock.enable_kiosk</field>
         <field name="value">False</field>
     </record>
-    <record id="config_kiosk_pin_required" model="ir.config_parameter">
-        <field name="key">fusion_clock.kiosk_pin_required</field>
-        <field name="value">True</field>
-    </record>
 
     <!-- Corrections -->
     <record id="config_enable_corrections" model="ir.config_parameter">

fusion_clock/docs/superpowers/plans/2026-05-31-biweekly-attendance-filter.md

@@ -0,0 +1,642 @@
+# Bi-Weekly Attendance Filter — Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Let operators scope the All Attendances list to a pay period — one-click Current/Previous/Next Pay-Period filters plus a "Bi-Weekly Period" picker — reusing the module's existing Pay Period setting and date math.
+
+**Architecture:** Extract the existing period math into one pure helper (`models/pay_period.py`) shared by the report, three search-method computed booleans on `hr.attendance` (→ search-view filters), and a transient picker wizard (→ menu item + dashboard tile). The window follows the configured Frequency (bi-weekly by default).
+
+**Tech Stack:** Odoo 19, Python (pure helper + ORM search methods + TransientModel), QWeb search/wizard views, OWL dashboard tile, `TransactionCase` tests.
+
+**Reference (read first):** spec `fusion_clock/docs/superpowers/specs/2026-05-31-biweekly-attendance-filter-design.md`; repo-root `CLAUDE.md` + `fusion_clock/CLAUDE.md`.
+
+**Test command** (substitute `odoo-modsdev-app` if that's your dev container):
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+**Commit discipline (shared working tree):** stage explicit paths, verify `git diff --cached --name-only`, then `git commit --only -- <paths>`. Never `git add -A`. Don't stage `.pyc`/`.DS_Store`. Push to **both** `origin` and `gitea` at the end.
+
+**File structure:**
+- `models/pay_period.py` (new) — pure date math: `compute_pay_period`, `period_length_days`, `current_prev_next`.
+- `models/hr_attendance.py` — 3 computed booleans + search methods (filter backing).
+- `models/clock_report.py` — `_calculate_current_period` delegates to the helper.
+- `wizard/clock_period_picker_wizard.py` (new) — transient picker.
+- `wizard/clock_period_picker_views.xml` (new) — picker form + action.
+- `views/hr_attendance_views.xml` — 3 filters in the existing search view.
+- `views/clock_menus.xml` — "Bi-Weekly Period" menu item.
+- `views/res_config_settings_views.xml` — clarify Anchor Date help.
+- `static/src/js|xml/fusion_clock_dashboard.*` — dashboard tile.
+- `tests/test_pay_period.py` (new).
+
+---
+
+## Task 1: Shared period-math helper + report delegation
+
+**Files:**
+- Create: `fusion_clock/models/pay_period.py`
+- Create: `fusion_clock/tests/test_pay_period.py`
+- Modify: `fusion_clock/models/__init__.py`, `fusion_clock/tests/__init__.py`, `fusion_clock/models/clock_report.py`
+
+- [ ] **Step 1: Register the new test module**
+
+In `fusion_clock/tests/__init__.py` add at the end:
+```python
+from . import test_pay_period
+```
+
+- [ ] **Step 2: Write the failing math test**
+
+Create `fusion_clock/tests/test_pay_period.py`:
+```python
+# -*- coding: utf-8 -*-
+from datetime import date
+from odoo.tests import tagged, TransactionCase
+from odoo.addons.fusion_clock.models.pay_period import (
+    compute_pay_period, period_length_days, current_prev_next,
+)
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodMath(TransactionCase):
+
+    def test_biweekly_window_is_14_days(self):
+        # anchor Mon 2026-05-04; a date inside the 2nd period
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 31))
+        self.assertEqual((e - s).days, 13)
+
+    def test_weekly_window_is_7_days(self):
+        s, e = compute_pay_period('weekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(s, date(2026, 5, 18))
+        self.assertEqual(e, date(2026, 5, 24))
+
+    def test_reference_before_anchor(self):
+        # 2026-04-20 is one biweekly period BEFORE the anchor
+        s, e = compute_pay_period('biweekly', '2026-05-04', date(2026, 4, 25))
+        self.assertEqual(s, date(2026, 4, 20))
+        self.assertEqual(e, date(2026, 5, 3))
+
+    def test_monthly_window(self):
+        s, e = compute_pay_period('monthly', '', date(2026, 2, 10))
+        self.assertEqual(s, date(2026, 2, 1))
+        self.assertEqual(e, date(2026, 2, 28))
+
+    def test_semi_monthly_window(self):
+        s1, e1 = compute_pay_period('semi_monthly', '', date(2026, 3, 10))
+        self.assertEqual((s1, e1), (date(2026, 3, 1), date(2026, 3, 15)))
+        s2, e2 = compute_pay_period('semi_monthly', '', date(2026, 3, 20))
+        self.assertEqual((s2, e2), (date(2026, 3, 16), date(2026, 3, 31)))
+
+    def test_period_length_days(self):
+        self.assertEqual(period_length_days('weekly'), 7)
+        self.assertEqual(period_length_days('biweekly'), 14)
+        self.assertIsNone(period_length_days('monthly'))
+
+    def test_current_prev_next_are_contiguous(self):
+        w = current_prev_next('biweekly', '2026-05-04', date(2026, 5, 20))
+        self.assertEqual(w['current'], (date(2026, 5, 18), date(2026, 5, 31)))
+        self.assertEqual(w['previous'][1], w['current'][0] - __import__('datetime').timedelta(days=1))
+        self.assertEqual(w['next'][0], w['current'][1] + __import__('datetime').timedelta(days=1))
+```
+
+- [ ] **Step 3: Run the test, verify it FAILS**
+
+Run the test command. Expected: import error / FAIL — `fusion_clock.models.pay_period` does not exist.
+
+- [ ] **Step 4: Create the helper**
+
+Create `fusion_clock/models/pay_period.py`:
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+"""Pay-period date math shared by reports, attendance filters and the period
+picker. Pure functions (no ORM) so they unit-test trivially and never drift
+between callers."""
+
+from datetime import date, timedelta
+
+
+def period_length_days(frequency):
+    """Fixed window length for grid frequencies; None for calendar-based ones."""
+    return {'weekly': 7, 'biweekly': 14}.get(frequency)
+
+
+def compute_pay_period(frequency, anchor_str, reference_date):
+    """Return (start_date, end_date) for the period containing reference_date.
+
+    ``anchor_str`` is a 'YYYY-MM-DD' string or falsy (falls back to
+    first-of-month). Mirrors the original
+    fusion.clock.report._calculate_current_period logic, including floor
+    division so dates before the anchor resolve to the correct earlier period.
+    """
+    if anchor_str:
+        try:
+            anchor = date.fromisoformat(anchor_str)
+        except (ValueError, TypeError):
+            anchor = reference_date.replace(day=1)
+    else:
+        anchor = reference_date.replace(day=1)
+
+    if frequency == 'weekly':
+        period_num = (reference_date - anchor).days // 7
+        start = anchor + timedelta(days=period_num * 7)
+        end = start + timedelta(days=6)
+    elif frequency == 'semi_monthly':
+        if reference_date.day <= 15:
+            start = reference_date.replace(day=1)
+            end = reference_date.replace(day=15)
+        else:
+            start = reference_date.replace(day=16)
+            next_month = reference_date.replace(day=28) + timedelta(days=4)
+            end = next_month - timedelta(days=next_month.day)
+    elif frequency == 'monthly':
+        start = reference_date.replace(day=1)
+        next_month = reference_date.replace(day=28) + timedelta(days=4)
+        end = next_month - timedelta(days=next_month.day)
+    else:  # 'biweekly' and default
+        period_num = (reference_date - anchor).days // 14
+        start = anchor + timedelta(days=period_num * 14)
+        end = start + timedelta(days=13)
+    return start, end
+
+
+def current_prev_next(frequency, anchor_str, today):
+    """Return {'current','previous','next'} (start,end) windows. Previous/next
+    are derived by stepping the reference date one day outside the current
+    window, which works for grid AND calendar frequencies."""
+    cur = compute_pay_period(frequency, anchor_str, today)
+    prev = compute_pay_period(frequency, anchor_str, cur[0] - timedelta(days=1))
+    nxt = compute_pay_period(frequency, anchor_str, cur[1] + timedelta(days=1))
+    return {'current': cur, 'previous': prev, 'next': nxt}
+```
+
+In `fusion_clock/models/__init__.py`, add as the FIRST import (before the model files that use it):
+```python
+from . import pay_period
+```
+
+- [ ] **Step 5: Run the math test, verify it PASSES**
+
+Run the test command. Expected: all `TestPayPeriodMath` tests PASS.
+
+- [ ] **Step 6: Delegate the report method to the helper**
+
+In `fusion_clock/models/clock_report.py`, replace the entire body of `_calculate_current_period` (the method starting at `def _calculate_current_period(self, schedule_type, period_start_str, reference_date):` through its `return period_start, period_end`) with:
+```python
+    def _calculate_current_period(self, schedule_type, period_start_str, reference_date):
+        """Calculate the period start/end dates based on schedule type.
+
+        Delegates to the shared pure helper so reports, the attendance period
+        filters and the picker wizard all use one implementation.
+        """
+        from .pay_period import compute_pay_period
+        return compute_pay_period(schedule_type, period_start_str, reference_date)
+```
+
+- [ ] **Step 7: Upgrade to confirm the delegation loads cleanly**
+
+Run: `docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20`
+Expected: no traceback; module loads.
+
+- [ ] **Step 8: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/pay_period.py fusion_clock/models/__init__.py fusion_clock/models/clock_report.py fusion_clock/tests/test_pay_period.py fusion_clock/tests/__init__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/pay_period.py fusion_clock/models/__init__.py fusion_clock/models/clock_report.py fusion_clock/tests/test_pay_period.py fusion_clock/tests/__init__.py \
+    -m "refactor(fusion_clock): extract pay-period math to shared helper"
+```
+(Append the `Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>` trailer.)
+
+---
+
+## Task 2: Period filters on the attendance list
+
+**Files:**
+- Modify: `fusion_clock/models/hr_attendance.py`, `fusion_clock/views/hr_attendance_views.xml`, `fusion_clock/tests/test_pay_period.py`
+
+- [ ] **Step 1: Write the failing filter test**
+
+Append to `fusion_clock/tests/test_pay_period.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPayPeriodFilters(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        from datetime import timedelta
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        # Make TODAY the first day of the current bi-weekly window.
+        from odoo.addons.fusion_clock.models.tz_utils import get_local_today
+        self.today = get_local_today(self.env)
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', str(self.today))
+        self.emp = self.env['hr.employee'].create({'name': 'Filter Fred'})
+        Att = self.env['hr.attendance']
+        # current period: today .. today+13  -> attendance at 10:00 "now-ish"
+        self.att_current = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': fields.Datetime.now(),
+            'check_out': fields.Datetime.now(),
+        })
+        # previous period: today-14 .. today-1 -> attendance 8 days ago
+        eight_ago = fields.Datetime.now() - timedelta(days=8)
+        self.att_prev = Att.create({
+            'employee_id': self.emp.id,
+            'check_in': eight_ago,
+            'check_out': eight_ago,
+        })
+
+    def test_current_filter_returns_only_current(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_current_period', '=', True),
+        ])
+        self.assertIn(self.att_current, res)
+        self.assertNotIn(self.att_prev, res)
+
+    def test_previous_filter_returns_only_previous(self):
+        res = self.env['hr.attendance'].search([
+            ('employee_id', '=', self.emp.id),
+            ('x_fclk_in_previous_period', '=', True),
+        ])
+        self.assertIn(self.att_prev, res)
+        self.assertNotIn(self.att_current, res)
+```
+(`fields` is already imported at the top of the file from Task 1? No — add `from odoo import fields` to the test file's imports.)
+
+In the test file imports (top), ensure:
+```python
+from odoo import fields
+```
+
+- [ ] **Step 2: Run the test, verify it FAILS**
+
+Run the test command. Expected: FAIL — `Invalid field 'x_fclk_in_current_period' in leaf ...` (field doesn't exist yet).
+
+- [ ] **Step 3: Add the computed fields + search methods**
+
+In `fusion_clock/models/hr_attendance.py`, add to the imports near the top (the file already imports `get_local_today, get_local_day_boundaries` from `.tz_utils`):
+```python
+from .pay_period import current_prev_next
+```
+Then add these fields and methods inside the `hr.attendance` model class (place them after the existing `x_fclk_*` field declarations):
+```python
+    x_fclk_in_current_period = fields.Boolean(
+        string='In Current Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_current_period')
+    x_fclk_in_previous_period = fields.Boolean(
+        string='In Previous Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_previous_period')
+    x_fclk_in_next_period = fields.Boolean(
+        string='In Next Pay Period',
+        compute='_compute_fclk_period_flags', search='_search_fclk_in_next_period')
+
+    def _compute_fclk_period_flags(self):
+        # Display-only; filtering happens entirely in the search methods.
+        for att in self:
+            att.x_fclk_in_current_period = False
+            att.x_fclk_in_previous_period = False
+            att.x_fclk_in_next_period = False
+
+    def _fclk_period_domain(self, which):
+        """check_in domain for the named pay-period window ('current' /
+        'previous' / 'next'), computed from the configured frequency + anchor."""
+        ICP = self.env['ir.config_parameter'].sudo()
+        frequency = ICP.get_param('fusion_clock.pay_period_type', 'biweekly')
+        anchor = ICP.get_param('fusion_clock.pay_period_start', '')
+        start, end = current_prev_next(frequency, anchor, get_local_today(self.env))[which]
+        start_utc, _dummy = get_local_day_boundaries(self.env, start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, end)
+        return ['&',
+                ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                ('check_in', '<', fields.Datetime.to_string(end_excl_utc))]
+
+    def _search_fclk_in_current_period(self, operator, value):
+        return self._fclk_period_domain('current')
+
+    def _search_fclk_in_previous_period(self, operator, value):
+        return self._fclk_period_domain('previous')
+
+    def _search_fclk_in_next_period(self, operator, value):
+        return self._fclk_period_domain('next')
+```
+
+- [ ] **Step 4: Run the test, verify it PASSES**
+
+Run the test command. Expected: `TestPayPeriodFilters` tests PASS.
+
+- [ ] **Step 5: Add the filters to the search view**
+
+In `fusion_clock/views/hr_attendance_views.xml`, inside `view_hr_attendance_search_fusion_clock`, replace:
+```xml
+                <filter name="fclk_has_overtime" string="Has Overtime" domain="[('x_fclk_is_overtime', '=', True)]"/>
+                <separator/>
+                <filter name="group_location" string="Location" context="{'group_by': 'x_fclk_location_id'}"/>
+```
+with:
+```xml
+                <filter name="fclk_has_overtime" string="Has Overtime" domain="[('x_fclk_is_overtime', '=', True)]"/>
+                <separator/>
+                <filter name="fclk_period_current" string="Current Pay Period" domain="[('x_fclk_in_current_period', '=', True)]"/>
+                <filter name="fclk_period_previous" string="Previous Pay Period" domain="[('x_fclk_in_previous_period', '=', True)]"/>
+                <filter name="fclk_period_next" string="Next Pay Period" domain="[('x_fclk_in_next_period', '=', True)]"/>
+                <separator/>
+                <filter name="group_location" string="Location" context="{'group_by': 'x_fclk_location_id'}"/>
+```
+
+- [ ] **Step 6: Upgrade to confirm the view parses**
+
+Run: `docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20`
+Expected: no ParseError.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/hr_attendance.py fusion_clock/views/hr_attendance_views.xml fusion_clock/tests/test_pay_period.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/hr_attendance.py fusion_clock/views/hr_attendance_views.xml fusion_clock/tests/test_pay_period.py \
+    -m "feat(fusion_clock): Current/Previous/Next Pay Period attendance filters"
+```
+
+---
+
+## Task 3: "Bi-Weekly Period" picker wizard + menu
+
+**Files:**
+- Create: `fusion_clock/wizard/clock_period_picker_wizard.py`, `fusion_clock/wizard/clock_period_picker_views.xml`
+- Modify: `fusion_clock/wizard/__init__.py`, `fusion_clock/__manifest__.py`, `fusion_clock/views/clock_menus.xml`, `fusion_clock/tests/test_pay_period.py`
+
+- [ ] **Step 1: Write the failing wizard test**
+
+Append to `fusion_clock/tests/test_pay_period.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPeriodPickerWizard(TransactionCase):
+
+    def setUp(self):
+        super().setUp()
+        from odoo.addons.fusion_clock.models.tz_utils import get_local_today
+        self.ICP = self.env['ir.config_parameter'].sudo()
+        self.ICP.set_param('fusion_clock.pay_period_type', 'biweekly')
+        self.ICP.set_param('fusion_clock.pay_period_start', '2026-05-04')
+        self.today = get_local_today(self.env)
+
+    def test_default_start_is_current_period_start(self):
+        from odoo.addons.fusion_clock.models.pay_period import current_prev_next
+        wiz = self.env['fusion.clock.period.picker'].create({})
+        expected_start = current_prev_next('biweekly', '2026-05-04', self.today)['current'][0]
+        self.assertEqual(wiz.date_start, expected_start)
+
+    def test_onchange_autofills_two_weeks(self):
+        from datetime import date, timedelta
+        wiz = self.env['fusion.clock.period.picker'].new({'date_start': date(2026, 6, 1)})
+        wiz._onchange_date_start()
+        self.assertEqual(wiz.date_end, date(2026, 6, 1) + timedelta(days=13))
+
+    def test_action_apply_returns_attendance_domain(self):
+        from datetime import date
+        wiz = self.env['fusion.clock.period.picker'].create({
+            'date_start': date(2026, 6, 1), 'date_end': date(2026, 6, 14),
+        })
+        act = wiz.action_apply()
+        self.assertEqual(act['res_model'], 'hr.attendance')
+        self.assertEqual(act['view_mode'], 'list,form')
+        leaves = [l for l in act['domain'] if isinstance(l, tuple)]
+        self.assertTrue(any(l[0] == 'check_in' and l[1] == '>=' for l in leaves))
+        self.assertTrue(any(l[0] == 'check_in' and l[1] == '<' for l in leaves))
+```
+
+- [ ] **Step 2: Run the test, verify it FAILS**
+
+Run the test command. Expected: FAIL — model `fusion.clock.period.picker` does not exist.
+
+- [ ] **Step 3: Create the wizard model**
+
+Create `fusion_clock/wizard/clock_period_picker_wizard.py`:
+```python
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from datetime import timedelta
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+from ..models.pay_period import compute_pay_period, period_length_days, current_prev_next
+from ..models.tz_utils import get_local_today, get_local_day_boundaries
+
+
+class FusionClockPeriodPicker(models.TransientModel):
+    """Pick a pay-period window and open the attendance list filtered to it.
+
+    Defaults to the current pay period. Changing the start auto-fills the end
+    to one pay period later (two weeks by default); the end stays editable so a
+    fully custom range can be entered too.
+    """
+    _name = 'fusion.clock.period.picker'
+    _description = 'Bi-Weekly Period Picker'
+
+    date_start = fields.Date(string='Period Start', required=True,
+                             default=lambda self: self._fclk_default_window()[0])
+    date_end = fields.Date(string='Period End', required=True,
+                           default=lambda self: self._fclk_default_window()[1])
+
+    def _fclk_config(self):
+        ICP = self.env['ir.config_parameter'].sudo()
+        return (ICP.get_param('fusion_clock.pay_period_type', 'biweekly'),
+                ICP.get_param('fusion_clock.pay_period_start', ''))
+
+    def _fclk_default_window(self):
+        frequency, anchor = self._fclk_config()
+        return current_prev_next(frequency, anchor, get_local_today(self.env))['current']
+
+    @api.onchange('date_start')
+    def _onchange_date_start(self):
+        if not self.date_start:
+            return
+        frequency, anchor = self._fclk_config()
+        length = period_length_days(frequency)
+        if length:
+            self.date_end = self.date_start + timedelta(days=length - 1)
+        else:
+            self.date_end = compute_pay_period(frequency, anchor, self.date_start)[1]
+
+    @api.constrains('date_start', 'date_end')
+    def _check_dates(self):
+        for rec in self:
+            if rec.date_start and rec.date_end and rec.date_end < rec.date_start:
+                raise ValidationError(_("Period end cannot be before period start."))
+
+    def action_apply(self):
+        self.ensure_one()
+        start_utc, _dummy = get_local_day_boundaries(self.env, self.date_start)
+        _dummy2, end_excl_utc = get_local_day_boundaries(self.env, self.date_end)
+        return {
+            'type': 'ir.actions.act_window',
+            'name': _("Attendances · %s – %s") % (self.date_start, self.date_end),
+            'res_model': 'hr.attendance',
+            'view_mode': 'list,form',
+            'domain': ['&',
+                       ('check_in', '>=', fields.Datetime.to_string(start_utc)),
+                       ('check_in', '<', fields.Datetime.to_string(end_excl_utc))],
+            'target': 'current',
+        }
+```
+
+In `fusion_clock/wizard/__init__.py`, add:
+```python
+from . import clock_period_picker_wizard
+```
+
+- [ ] **Step 4: Create the wizard view + action**
+
+Create `fusion_clock/wizard/clock_period_picker_views.xml`:
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+
+    <record id="view_fusion_clock_period_picker_form" model="ir.ui.view">
+        <field name="name">fusion.clock.period.picker.form</field>
+        <field name="model">fusion.clock.period.picker</field>
+        <field name="arch" type="xml">
+            <form string="Bi-Weekly Period">
+                <sheet>
+                    <div class="alert alert-info" role="alert">
+                        Pick the period start — the end auto-fills to one pay period later
+                        (two weeks by default). Adjust either date, then click
+                        <b>View Attendances</b>.
+                    </div>
+                    <group>
+                        <field name="date_start"/>
+                        <field name="date_end"/>
+                    </group>
+                </sheet>
+                <footer>
+                    <button name="action_apply" string="View Attendances" type="object" class="btn-primary"/>
+                    <button special="cancel" string="Cancel" class="btn-secondary"/>
+                </footer>
+            </form>
+        </field>
+    </record>
+
+    <record id="action_fusion_clock_period_picker" model="ir.actions.act_window">
+        <field name="name">Bi-Weekly Period</field>
+        <field name="res_model">fusion.clock.period.picker</field>
+        <field name="view_mode">form</field>
+        <field name="view_id" ref="view_fusion_clock_period_picker_form"/>
+        <field name="target">new</field>
+    </record>
+
+</odoo>
+```
+
+In `fusion_clock/__manifest__.py`, in the `data` list add this line immediately AFTER `'wizard/clock_nfc_enrollment_views.xml',` (it must load before `views/clock_menus.xml`, which references the action):
+```python
+        'wizard/clock_period_picker_views.xml',
+```
+
+- [ ] **Step 5: Add the menu item**
+
+In `fusion_clock/views/clock_menus.xml`, add after the `menu_fusion_clock_attendance_list` menuitem (the "All Attendances" item, sequence 10):
+```xml
+    <menuitem id="menu_fusion_clock_biweekly_period"
+              name="Bi-Weekly Period"
+              parent="menu_fusion_clock_attendance"
+              action="action_fusion_clock_period_picker"
+              sequence="15"
+              groups="group_fusion_clock_manager,group_fusion_clock_team_lead"/>
+```
+
+- [ ] **Step 6: Run the wizard test, verify it PASSES**
+
+Run the test command. Expected: `TestPeriodPickerWizard` tests PASS, and the upgrade (triggered by `-u`) loads the new view + menu with no ParseError.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/wizard/clock_period_picker_wizard.py fusion_clock/wizard/clock_period_picker_views.xml fusion_clock/wizard/__init__.py fusion_clock/__manifest__.py fusion_clock/views/clock_menus.xml fusion_clock/tests/test_pay_period.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/wizard/clock_period_picker_wizard.py fusion_clock/wizard/clock_period_picker_views.xml fusion_clock/wizard/__init__.py fusion_clock/__manifest__.py fusion_clock/views/clock_menus.xml fusion_clock/tests/test_pay_period.py \
+    -m "feat(fusion_clock): Bi-Weekly Period picker wizard + Attendance menu item"
+```
+
+---
+
+## Task 4: Dashboard tile, settings label, version bump, full verify
+
+**Files:**
+- Modify: `fusion_clock/static/src/js/fusion_clock_dashboard.js`, `fusion_clock/static/src/xml/fusion_clock_dashboard.xml`, `fusion_clock/views/res_config_settings_views.xml`, `fusion_clock/__manifest__.py`
+
+- [ ] **Step 1: Add the dashboard action handler**
+
+In `fusion_clock/static/src/js/fusion_clock_dashboard.js`, add this method next to the other `onView*` handlers:
+```javascript
+    onViewBiweekly() { this.action.doAction("fusion_clock.action_fusion_clock_period_picker"); }
+```
+
+- [ ] **Step 2: Add the dashboard tile**
+
+In `fusion_clock/static/src/xml/fusion_clock_dashboard.xml`, inside the Quick Actions `<t t-if="state.team">` block, add after the Activity Logs tile:
+```xml
+                                <span class="fclk-dash-act" t-on-click="onViewBiweekly">🗓 Bi-Weekly Period</span>
+```
+
+- [ ] **Step 3: Clarify the Anchor Date setting help**
+
+In `fusion_clock/views/res_config_settings_views.xml`, replace the Pay Period setting's `help` attribute:
+```xml
+                        <setting id="fclk_pay_period" string="Pay Period Schedule"
+                                 help="Defines how often attendance reports are generated and the start/end dates of each reporting period.">
+```
+with:
+```xml
+                        <setting id="fclk_pay_period" string="Pay Period Schedule"
+                                 help="Defines how often attendance reports are generated and the start/end dates of each period. The Anchor Date is the pay-period start used by both the reports AND the Bi-Weekly Period filter/picker on the Attendances list.">
+```
+
+- [ ] **Step 4: Bump the manifest version**
+
+In `fusion_clock/__manifest__.py`, change the `version` string to `19.0.3.15.0`.
+
+- [ ] **Step 5: Full upgrade + run the whole suite**
+
+Run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+Expected: upgrade succeeds; all `test_pay_period` classes pass; existing tests still pass; `0 failed, 0 error`.
+
+- [ ] **Step 6: Manual browser smoke (local)**
+
+http://localhost:8082 → Fusion Clock → Attendance → **All Attendances**: open Filters, confirm **Current / Previous / Next Pay Period** appear and each narrows the list. Then Attendance → **Bi-Weekly Period**: the dialog opens with the current period pre-filled; change the start and confirm the end jumps +2 weeks; **View Attendances** opens the list scoped to that window. On the dashboard (as manager), the **🗓 Bi-Weekly Period** tile opens the same dialog.
+
+- [ ] **Step 7: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/js/fusion_clock_dashboard.js fusion_clock/static/src/xml/fusion_clock_dashboard.xml fusion_clock/views/res_config_settings_views.xml fusion_clock/__manifest__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/js/fusion_clock_dashboard.js fusion_clock/static/src/xml/fusion_clock_dashboard.xml fusion_clock/views/res_config_settings_views.xml fusion_clock/__manifest__.py \
+    -m "feat(fusion_clock): dashboard Bi-Weekly Period tile + settings note; bump 19.0.3.15.0"
+```
+
+- [ ] **Step 8: Push both remotes + deploy entech**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git log origin/main..HEAD --oneline
+git push origin main && git push gitea main
+```
+Then deploy to entech (whole module dir): tar (exclude `.superpowers`/`__pycache__`/`*.pyc`/`.DS_Store`) → `scp` to pve-worker5 → `pct push 111` → extract into `/mnt/extra-addons/custom` → `chown -R odoo:odoo` → upgrade as the `odoo` user (`systemctl stop odoo; runuser -u odoo -- /usr/bin/odoo --config /etc/odoo/odoo.conf -d admin -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 --logfile=/tmp/up.log; systemctl start odoo`). Verify `web/login` → 200 and `ir.module.module` version == `19.0.3.15.0`. Hard-refresh.
+
+---
+
+## Self-Review (completed inline)
+
+- **Spec coverage:** §3A shared helper → Task 1; §3B filters → Task 2; §3C wizard → Task 3; §3D menu → Task 3, dashboard tile → Task 4; §3E settings note → Task 4; §6 tests → Tasks 1–3 + Task 4 full run; §9 deploy → Task 4 Step 8.
+- **Placeholder scan:** none — every code step has complete code; commands have expected output.
+- **Type/name consistency:** helper API (`compute_pay_period`, `period_length_days`, `current_prev_next` returning `{'current','previous','next'}`) is identical across Task 1 (definition + math test), Task 2 (`_fclk_period_domain` uses `current_prev_next(...)[which]`), and Task 3 (wizard uses all three). Field names `x_fclk_in_current_period` / `_previous_period` / `_next_period` match between the model (Task 2), the filters (Task 2), and the search-method names. Action xmlid `action_fusion_clock_period_picker` matches between the wizard view (Task 3), the menu (Task 3), and the dashboard handler (Task 4). `get_local_day_boundaries` end value used as the exclusive upper bound consistently.
+- **Scope:** single focused feature; one plan.

fusion_clock/docs/superpowers/plans/2026-05-31-pin-kiosk.md

@@ -0,0 +1,940 @@
+# PIN Kiosk Implementation Plan
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** Ship a polished, opt-in PIN kiosk (photo-tile → PIN → optional selfie → clock) matching the NFC kiosk's premium dark/glass/brand-gradient style, gated by the existing `enable_kiosk` setting.
+
+**Architecture:** Rework the existing `controllers/clock_kiosk.py` (4 routes + 1 new), rebuild `views/kiosk_templates.xml`, rewrite `static/src/js/fusion_clock_kiosk.js` as an Odoo-19 Interaction with a small state machine, and add a new `static/src/scss/pin_kiosk.scss` that mirrors `nfc_kiosk.scss` (scoped to `#pin_kiosk_root`, brand hue in `--pk-h`). Reuse the master photo gate, `hr.employee.public` avatars, and the company kiosk location.
+
+**Tech Stack:** Odoo 19 HTTP controllers (`type='jsonrpc'` / `type='http'`), `@web/public/interaction` Interaction, SCSS (frontend bundle), `HttpCase`/`TransactionCase` tests.
+
+**Reference (read first):** spec `fusion_clock/docs/superpowers/specs/2026-05-31-pin-kiosk-design.md`; mirror sources `static/src/scss/nfc_kiosk.scss` and `static/src/js/fusion_clock_nfc_kiosk.js` (hue extraction lines ~60-117, photo capture); repo `CLAUDE.md` + `fusion_clock/CLAUDE.md` (Interaction rule, scoped-SCSS rule).
+
+**Test command** (substitute `odoo-modsdev-app` if that's your dev container):
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+
+**Commit discipline (shared tree):** stage explicit paths, verify `git diff --cached --name-only`, `git commit --only -- <paths>`, never `git add -A`, no `.pyc`/`.DS_Store`. Push **origin + gitea** at the end. Append `Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>` to messages.
+
+**File structure:**
+- `controllers/clock_kiosk.py` — rework `kiosk_search` (+avatar/has_pin), `kiosk_verify_pin` (→ needs_setup), new `kiosk_set_pin`, rework `kiosk_clock` (kiosk location + photo).
+- `static/src/scss/pin_kiosk.scss` (new) — kiosk styling, scoped to `#pin_kiosk_root`.
+- `views/kiosk_templates.xml` — rebuilt root + chrome + `#pin_state_container`.
+- `static/src/js/fusion_clock_kiosk.js` — Interaction state machine.
+- `models/res_config_settings.py`, `views/res_config_settings_views.xml`, `data/ir_config_parameter_data.xml` — drop `kiosk_pin_required`.
+- `models/res_company.py` — relabel kiosk-location field string.
+- `views/clock_menus.xml` — PIN kiosk app icon.
+- `__manifest__.py` — register scss + version bump.
+- `tests/test_clock_kiosk.py` (new).
+
+---
+
+## Task 1: Backend — employee list (+avatar/has_pin), verify_pin (needs_setup), set_pin
+
+**Files:**
+- Modify: `controllers/clock_kiosk.py`
+- Create: `tests/test_clock_kiosk.py`
+- Modify: `tests/__init__.py`
+
+- [ ] **Step 1: Register the test module** — add to `fusion_clock/tests/__init__.py`:
+```python
+from . import test_clock_kiosk
+```
+
+- [ ] **Step 2: Write the failing tests** — create `fusion_clock/tests/test_clock_kiosk.py`:
+```python
+# -*- coding: utf-8 -*-
+import json
+from odoo.tests.common import HttpCase, tagged
+
+
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskIdentity(HttpCase):
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Kiosk Op', 'login': 'pin-kiosk-op', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.withpin = cls.env['hr.employee'].create({
+            'name': 'Pat WithPin', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+        cls.nopin = cls.env['hr.employee'].create({
+            'name': 'Nora NoPin', 'x_fclk_enable_clock': True,
+        })
+
+    def _call(self, route, params):
+        self.authenticate('pin-kiosk-op', 'kioskpass123')
+        resp = self.url_open(route, data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call', 'params': params,
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def test_search_returns_avatar_and_has_pin(self):
+        res = self._call('/fusion_clock/kiosk/search', {'query': ''})
+        rows = {e['name']: e for e in res['employees']}
+        self.assertIn('Pat WithPin', rows)
+        self.assertTrue(rows['Pat WithPin']['has_pin'])
+        self.assertFalse(rows['Nora NoPin']['has_pin'])
+        self.assertIn('/web/image/hr.employee.public/', rows['Pat WithPin']['avatar_url'])
+
+    def test_verify_pin_correct(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '1234'})
+        self.assertTrue(res.get('success'))
+
+    def test_verify_pin_incorrect(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.withpin.id, 'pin': '9999'})
+        self.assertEqual(res.get('error'), 'invalid_pin')
+
+    def test_verify_pin_needs_setup(self):
+        res = self._call('/fusion_clock/kiosk/verify_pin', {'employee_id': self.nopin.id, 'pin': ''})
+        self.assertTrue(res.get('needs_setup'))
+
+    def test_set_pin_success_then_required(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '4321'})
+        self.assertTrue(res.get('success'))
+        self.assertEqual(self.nopin.x_fclk_kiosk_pin, '4321')
+        # already set → reject
+        res2 = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.nopin.id, 'pin': '0000'})
+        self.assertEqual(res2.get('error'), 'already_set')
+
+    def test_set_pin_rejects_bad_format(self):
+        res = self._call('/fusion_clock/kiosk/set_pin', {'employee_id': self.withpin.id, 'pin': '12'})
+        self.assertEqual(res.get('error'), 'bad_pin')
+```
+
+- [ ] **Step 3: Run the tests, verify they FAIL** — run the test command. Expected: FAIL (`search` lacks `has_pin`/`avatar_url`; `verify_pin` has no `needs_setup`; `set_pin` route 404).
+
+- [ ] **Step 4: Implement** — in `controllers/clock_kiosk.py`, replace `kiosk_search` and `kiosk_verify_pin` and add `kiosk_set_pin`:
+```python
+    @http.route('/fusion_clock/kiosk/search', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_search(self, query='', **kw):
+        """Employees for the kiosk grid. Also used by the NFC kiosk's
+        employee_search — keep the return shape additive."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employees = request.env['hr.employee'].sudo().search([
+            ('x_fclk_enable_clock', '=', True),
+            ('name', 'ilike', query),
+        ], limit=200, order='name')
+        rows = []
+        for emp in employees:
+            unique = emp.write_date.strftime('%Y%m%d%H%M%S') if emp.write_date else ''
+            rows.append({
+                'id': emp.id,
+                'name': emp.name,
+                'department': emp.department_id.name or '',
+                'is_checked_in': emp.attendance_state == 'checked_in',
+                'card_uid': emp.x_fclk_nfc_card_uid or '',
+                'has_pin': bool(emp.x_fclk_kiosk_pin),
+                'avatar_url': '/web/image/hr.employee.public/%s/avatar_128?unique=%s' % (emp.id, unique),
+            })
+        return {'employees': rows}
+
+    @http.route('/fusion_clock/kiosk/verify_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_verify_pin(self, employee_id=0, pin='', **kw):
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists():
+            return {'error': 'not_found'}
+        if not employee.x_fclk_kiosk_pin:
+            return {'needs_setup': True, 'employee_name': employee.name}
+        if employee.x_fclk_kiosk_pin != pin:
+            return {'error': 'invalid_pin'}
+        return {'success': True, 'employee_name': employee.name,
+                'is_checked_in': employee.attendance_state == 'checked_in'}
+
+    @http.route('/fusion_clock/kiosk/set_pin', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_set_pin(self, employee_id=0, pin='', **kw):
+        """First-use PIN creation. Rejects if the employee already has one."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+        if employee.x_fclk_kiosk_pin:
+            return {'error': 'already_set'}
+        pin = (pin or '').strip()
+        if not (pin.isdigit() and 4 <= len(pin) <= 6):
+            return {'error': 'bad_pin'}
+        employee.write({'x_fclk_kiosk_pin': pin})
+        return {'success': True, 'employee_name': employee.name}
+```
+
+- [ ] **Step 5: Run the tests, verify they PASS** — run the test command. Expected: `TestPinKioskIdentity` passes.
+
+- [ ] **Step 6: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py fusion_clock/tests/__init__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py fusion_clock/tests/__init__.py \
+    -m "feat(fusion_clock): PIN kiosk identity endpoints (grid list, verify, first-use set_pin)"
+```
+
+---
+
+## Task 2: Backend — clock with kiosk location + photo gating
+
+**Files:**
+- Modify: `controllers/clock_kiosk.py` (rework `kiosk_clock`)
+- Modify: `tests/test_clock_kiosk.py`
+
+- [ ] **Step 1: Write the failing tests** — append to `test_clock_kiosk.py`:
+```python
+@tagged('-at_install', 'post_install', 'fusion_clock')
+class TestPinKioskClock(HttpCase):
+
+    PNG = ('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwC'
+           'AAAAC0lEQVR42mNkYAAAAAYAAjCB0C8AAAAASUVORK5CYII=')
+
+    @classmethod
+    def setUpClass(cls):
+        super().setUpClass()
+        cls.ICP = cls.env['ir.config_parameter'].sudo()
+        cls.ICP.set_param('fusion_clock.enable_kiosk', 'True')
+        cls.location = cls.env['fusion.clock.location'].create({
+            'name': 'PIN Plant 2', 'latitude': 43.65, 'longitude': -79.38, 'radius': 100,
+        })
+        cls.env.company.x_fclk_nfc_kiosk_location_id = cls.location.id
+        cls.env['res.users'].create({
+            'name': 'PIN Op2', 'login': 'pin-op2', 'password': 'kioskpass123',
+            'group_ids': [(4, cls.env.ref('fusion_clock.group_fusion_clock_manager').id)],
+        })
+        cls.emp = cls.env['hr.employee'].create({
+            'name': 'Quinn Clock', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234',
+        })
+
+    def _clock(self, photo_b64=''):
+        self.authenticate('pin-op2', 'kioskpass123')
+        resp = self.url_open('/fusion_clock/kiosk/clock', data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call',
+            'params': {'employee_id': self.emp.id, 'photo_b64': photo_b64},
+        }), headers={'Content-Type': 'application/json'})
+        return resp.json().get('result', {})
+
+    def _latest(self):
+        return self.env['hr.attendance'].search(
+            [('employee_id', '=', self.emp.id)], order='check_in desc', limit=1)
+
+    def test_clock_in_uses_kiosk_location(self):
+        res = self._clock()
+        self.assertTrue(res.get('success'))
+        self.assertEqual(res.get('action'), 'clock_in')
+        att = self._latest()
+        self.assertEqual(att.x_fclk_clock_source, 'kiosk')
+        self.assertEqual(att.x_fclk_location_id, self.location)
+
+    def test_photo_stored_only_when_master_on(self):
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'False')
+        self._clock(self.PNG)
+        self.assertFalse(self._latest().x_fclk_check_in_photo)
+        # new employee for an ON run (avoid debounce/clocked-in state)
+        emp2 = self.env['hr.employee'].create({
+            'name': 'Quinn Two', 'x_fclk_enable_clock': True, 'x_fclk_kiosk_pin': '1234'})
+        self.ICP.set_param('fusion_clock.enable_photo_verification', 'True')
+        self.authenticate('pin-op2', 'kioskpass123')
+        self.url_open('/fusion_clock/kiosk/clock', data=json.dumps({
+            'jsonrpc': '2.0', 'method': 'call',
+            'params': {'employee_id': emp2.id, 'photo_b64': self.PNG}}),
+            headers={'Content-Type': 'application/json'})
+        att2 = self.env['hr.attendance'].search([('employee_id', '=', emp2.id)], limit=1)
+        self.assertTrue(att2.x_fclk_check_in_photo)
+
+    def test_no_location_configured(self):
+        self.env.company.x_fclk_nfc_kiosk_location_id = False
+        res = self._clock()
+        self.assertEqual(res.get('error'), 'no_location_configured')
+```
+
+- [ ] **Step 2: Run the tests, verify they FAIL** — run the test command. Expected: FAIL (current `kiosk_clock` uses `_verify_location` GPS, takes no `photo_b64`, no `no_location_configured`).
+
+- [ ] **Step 3: Implement** — in `controllers/clock_kiosk.py`, replace the whole `kiosk_clock` method with:
+```python
+    @http.route('/fusion_clock/kiosk/clock', type='jsonrpc', auth='user', methods=['POST'])
+    def kiosk_clock(self, employee_id=0, photo_b64='', **kw):
+        """Clock the employee in/out from the shared kiosk. Fixed wall device:
+        uses the company kiosk location, no per-clock GPS geofence."""
+        if not _is_kiosk_operator(request.env.user):
+            return {'error': 'Access denied.'}
+        employee = request.env['hr.employee'].sudo().browse(int(employee_id))
+        if not employee.exists() or not employee.x_fclk_enable_clock:
+            return {'error': 'not_found'}
+
+        ICP = request.env['ir.config_parameter'].sudo()
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        if not location:
+            return {'error': 'no_location_configured'}
+
+        from .clock_api import FusionClockAPI
+        from .clock_nfc_kiosk import _strip_data_url_prefix
+        api = FusionClockAPI()
+
+        photo_enabled = ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True'
+        photo_bytes = _strip_data_url_prefix(photo_b64) if (photo_enabled and photo_b64) else b''
+
+        is_checked_in = employee.attendance_state == 'checked_in'
+        now = fields.Datetime.now()
+        today = get_local_today(request.env, employee)
+        day_plan = employee._get_fclk_day_plan(today)
+        is_scheduled_off = not day_plan.get('scheduled')
+
+        geo_info = {'latitude': 0, 'longitude': 0, 'browser': 'kiosk',
+                    'ip_address': request.httprequest.remote_addr or ''}
+        try:
+            attendance = employee.sudo()._attendance_action_change(geo_info)
+            if not is_checked_in:
+                attendance.sudo().write({
+                    'x_fclk_location_id': location.id,
+                    'x_fclk_in_distance': 0.0,
+                    'x_fclk_clock_source': 'kiosk',
+                    'x_fclk_check_in_photo': photo_bytes if photo_bytes else False,
+                })
+                api._log_activity(employee, 'clock_in', f"Kiosk clock-in at {location.name}",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                if is_scheduled_off:
+                    api._log_activity(employee, 'unscheduled_shift',
+                                      f"Kiosk clock-in on an unscheduled day at {location.name}",
+                                      attendance=attendance, location=location,
+                                      latitude=0, longitude=0, distance=0, source='kiosk')
+                else:
+                    scheduled_in, _ = api._get_scheduled_times(employee, today)
+                    api._check_and_create_penalty(employee, attendance, 'late_in', scheduled_in, now)
+                return {'success': True, 'action': 'clock_in', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked in at {location.name}', 'worked_hours': 0.0}
+            else:
+                attendance.sudo().write({
+                    'x_fclk_out_distance': 0.0,
+                    'x_fclk_check_out_photo': photo_bytes if photo_bytes else False,
+                })
+                api._apply_break_deduction(attendance, employee)
+                if not is_scheduled_off:
+                    _, scheduled_out = api._get_scheduled_times(employee, today)
+                    api._check_and_create_penalty(employee, attendance, 'early_out', scheduled_out, now)
+                api._log_activity(employee, 'clock_out',
+                                  f"Kiosk clock-out from {location.name}. Net: {attendance.x_fclk_net_hours:.1f}h",
+                                  attendance=attendance, location=location,
+                                  latitude=0, longitude=0, distance=0, source='kiosk')
+                return {'success': True, 'action': 'clock_out', 'employee_name': employee.name,
+                        'message': f'{employee.name} clocked out from {location.name}',
+                        'net_hours': round(attendance.x_fclk_net_hours or 0, 2)}
+        except Exception as e:
+            _logger.error("Fusion Clock PIN kiosk error: %s", str(e))
+            return {'error': str(e)}
+```
+Confirm `_strip_data_url_prefix` exists in `controllers/clock_nfc_kiosk.py` (it does — used by the NFC tap). Confirm `kiosk_page` already imports `fields` and `get_local_today` at module top (it does).
+
+- [ ] **Step 4: Run the tests, verify they PASS** — run the test command. Expected: `TestPinKioskClock` passes.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/controllers/clock_kiosk.py fusion_clock/tests/test_clock_kiosk.py \
+    -m "feat(fusion_clock): PIN kiosk clock — kiosk location + master-gated selfie"
+```
+
+---
+
+## Task 3: Settings cleanup, company relabel, app icon
+
+**Files:**
+- Modify: `models/res_config_settings.py`, `views/res_config_settings_views.xml`, `data/ir_config_parameter_data.xml`, `models/res_company.py`, `views/clock_menus.xml`
+
+- [ ] **Step 1: Drop `kiosk_pin_required`** (PIN always required now):
+  - `models/res_config_settings.py`: delete the `fclk_kiosk_pin_required = fields.Boolean(...)` field block AND its line in `_FCLK_BOOL_PARAMS` (`('fclk_kiosk_pin_required', 'fusion_clock.kiosk_pin_required', True),`).
+  - `views/res_config_settings_views.xml`: delete the `<field name="fclk_kiosk_pin_required"/>` and its surrounding `<setting>`/row.
+  - `data/ir_config_parameter_data.xml`: delete the `config_kiosk_pin_required` record.
+
+- [ ] **Step 2: Relabel the kiosk location** — in `models/res_company.py`, change the field string/help (it now serves NFC + PIN):
+```python
+    x_fclk_nfc_kiosk_location_id = fields.Many2one(
+        'fusion.clock.location',
+        string='Kiosk Location',
+        help="Clock location bound to the on-site kiosk (NFC and PIN) for this company.",
+    )
+```
+
+- [ ] **Step 3: Add the PIN Kiosk app icon** — in `views/clock_menus.xml`, after the NFC kiosk app block, add:
+```xml
+    <record id="action_fusion_clock_kiosk_pin" model="ir.actions.act_url">
+        <field name="name">Fusion Clock PIN Kiosk</field>
+        <field name="url">/fusion_clock/kiosk</field>
+        <field name="target">self</field>
+    </record>
+
+    <menuitem id="menu_fusion_clock_kiosk_pin_app_root"
+              name="Fusion Clock PIN Kiosk"
+              web_icon="fusion_clock,static/description/icon.png"
+              action="action_fusion_clock_kiosk_pin"
+              sequence="47"
+              groups="group_fusion_clock_kiosk_app"/>
+```
+
+- [ ] **Step 4: Apply + verify** — run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -20
+```
+Expected: no ParseError / no `Invalid field` for `fclk_kiosk_pin_required`.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/models/res_company.py fusion_clock/views/clock_menus.xml
+git diff --cached --name-only
+git commit --only -- fusion_clock/models/res_config_settings.py fusion_clock/views/res_config_settings_views.xml fusion_clock/data/ir_config_parameter_data.xml fusion_clock/models/res_company.py fusion_clock/views/clock_menus.xml \
+    -m "feat(fusion_clock): drop kiosk_pin_required, relabel kiosk location, add PIN kiosk app icon"
+```
+
+---
+
+## Task 4: SCSS — `pin_kiosk.scss` (mirror the NFC kiosk)
+
+**Files:**
+- Create: `static/src/scss/pin_kiosk.scss`
+- Modify: `__manifest__.py` (register in `web.assets_frontend`)
+
+- [ ] **Step 1: Create `static/src/scss/pin_kiosk.scss`** — mirror `nfc_kiosk.scss` exactly for the shared chrome, **but** scope every rule under `:has(#pin_kiosk_root)` / `.pin-kiosk`, rename the hue var to `--pk-h`, and replace the NFC idle/icon section with the **grid + tiles**. Full file:
+
+```scss
+// PIN Clock Kiosk — premium glass + animated mesh, always-dark.
+// Mirrors nfc_kiosk.scss; scoped under :has(#pin_kiosk_root) so it never leaks.
+// Brand hue --pk-h is set by JS from the company logo's dominant color.
+:root {
+    --pk-h: 168;
+    --pk-bg: #0b0d10;
+    --pk-text: #ffffff;
+    --pk-text-muted: #9ba3ad;
+    --pk-success: #18a957;
+    --pk-error: #d9374e;
+}
+html:has(#pin_kiosk_root) {
+    overflow: hidden; height: 100%;
+    body { overflow: hidden; height: 100%; margin: 0; padding: 0;
+        background: var(--pk-bg) !important; color: var(--pk-text);
+        font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif; }
+    .o_main_navbar, header, footer, .o_header_standard, .o_footer { display: none !important; }
+}
+.pin-kiosk {
+    position: fixed; inset: 0; width: 100vw; height: 100vh;
+    display: flex; flex-direction: column; align-items: center; justify-content: flex-start;
+    padding: 1.25rem 2rem 2rem; box-sizing: border-box; user-select: none;
+    -webkit-tap-highlight-color: transparent; overflow: hidden; background: var(--pk-bg);
+
+    &::before { content: ""; position: absolute; inset: -15%;
+        background:
+            radial-gradient(circle at 20% 30%, hsla(var(--pk-h), 75%, 40%, 0.55) 0%, transparent 45%),
+            radial-gradient(circle at 80% 20%, hsla(calc(var(--pk-h) + 40), 65%, 35%, 0.50) 0%, transparent 50%),
+            radial-gradient(circle at 70% 75%, hsla(calc(var(--pk-h) - 25), 70%, 35%, 0.45) 0%, transparent 55%),
+            radial-gradient(circle at 15% 85%, hsla(calc(var(--pk-h) + 80), 60%, 30%, 0.40) 0%, transparent 50%);
+        filter: blur(60px) saturate(140%); animation: pk-mesh 28s ease-in-out infinite alternate; z-index: 0; }
+    &::after { content: ""; position: absolute; inset: 0;
+        background: radial-gradient(ellipse at center, transparent 55%, rgba(0,0,0,0.45) 100%); z-index: 1; pointer-events: none; }
+    > * { position: relative; z-index: 2; }
+}
+@keyframes pk-mesh {
+    0% { transform: translate(0,0) rotate(0) scale(1); }
+    50% { transform: translate(3%,-2%) rotate(2deg) scale(1.05); }
+    100% { transform: translate(-3%,3%) rotate(-1deg) scale(0.98); }
+}
+
+// Header chrome
+.pin-kiosk__logo { max-height: 56px; max-width: 240px; object-fit: contain;
+    background: rgba(255,255,255,0.95); padding: 0.55rem 1rem; border-radius: 0.9rem;
+    border: 2px solid hsla(var(--pk-h), 85%, 72%, 0.95);
+    box-shadow: 0 8px 28px rgba(0,0,0,0.4), 0 0 26px hsla(var(--pk-h), 90%, 60%, 0.5); }
+.pin-kiosk__clock { margin-top: 0.5rem; font-size: 2.1rem; font-weight: 300; font-variant-numeric: tabular-nums;
+    letter-spacing: -0.02em; text-shadow: 0 2px 12px rgba(0,0,0,0.4);
+    .ampm { font-size: 0.9rem; font-weight: 500; color: var(--pk-text-muted); margin-left: 0.3rem; } }
+.pin-kiosk__date { font-size: 0.8rem; color: var(--pk-text-muted); text-transform: uppercase; letter-spacing: 0.06em; margin-top: 0.1rem; }
+
+// Search
+.pin-kiosk__search { margin: 1rem 0 0.85rem; width: min(440px, 92%);
+    background: rgba(255,255,255,0.06); border: 1px solid rgba(255,255,255,0.12); border-radius: 999px;
+    padding: 0.7rem 1.2rem; color: var(--pk-text); font-size: 1rem; outline: none;
+    &::placeholder { color: var(--pk-text-muted); }
+    &:focus { border-color: hsl(var(--pk-h), 80%, 55%); } }
+
+// Tile grid
+.pin-kiosk__grid { flex: 1; min-height: 0; overflow-y: auto; width: 100%; max-width: 1100px;
+    display: grid; grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); gap: 0.85rem; align-content: start; padding-bottom: 1rem; }
+.pin-kiosk__tile { display: flex; flex-direction: column; align-items: center; gap: 0.5rem; padding: 0.85rem 0.4rem;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); border-radius: 1rem;
+    box-shadow: 0 8px 24px rgba(0,0,0,0.25); cursor: pointer; transition: transform 120ms ease, background 150ms ease;
+    &:hover, &:active { background: rgba(255,255,255,0.1); transform: translateY(-2px); } }
+.pin-kiosk__tile-av { width: 60px; height: 60px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.25rem; font-weight: 700; color: #fff;
+    border: 2px solid rgba(255,255,255,0.25); box-shadow: 0 6px 16px rgba(0,0,0,0.35); }
+.pin-kiosk__tile-nm { font-size: 0.8rem; text-align: center; line-height: 1.15; color: #e7ebf0; max-width: 100px; }
+
+// Bottom chrome
+.pin-kiosk__location { position: absolute; bottom: 1.5rem; left: 1.5rem; font-size: 0.85rem; color: var(--pk-text-muted);
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); padding: 0.5rem 1rem; border-radius: 999px; }
+.pin-kiosk__settings { position: absolute; bottom: 1.5rem; right: 1.5rem; width: 2.75rem; height: 2.75rem; border-radius: 50%;
+    background: rgba(255,255,255,0.05); border: 1px solid rgba(255,255,255,0.09); color: var(--pk-text-muted);
+    display: flex; align-items: center; justify-content: center; font-size: 1.2rem; cursor: pointer; }
+
+// Glass overlay (PIN pad / setup / result), centered
+.pin-kiosk__overlay { position: fixed; inset: 0; z-index: 1000; display: flex; align-items: center; justify-content: center;
+    background: rgba(0,0,0,0.55); backdrop-filter: blur(6px); padding: 2rem; animation: pk-fade 200ms ease-out; }
+@keyframes pk-fade { from { opacity: 0; } to { opacity: 1; } }
+%pk-glass { background: rgba(255,255,255,0.06); backdrop-filter: blur(24px) saturate(160%);
+    border: 1px solid rgba(255,255,255,0.12); box-shadow: 0 20px 60px rgba(0,0,0,0.5); border-radius: 1.5rem; }
+.pin-kiosk__panel { @extend %pk-glass; padding: 1.75rem 2rem; width: min(360px, 90%);
+    display: flex; flex-direction: column; align-items: center; gap: 0.75rem; }
+.pin-kiosk__av { width: 64px; height: 64px; border-radius: 50%; background-size: cover; background-position: center;
+    display: flex; align-items: center; justify-content: center; font-size: 1.4rem; font-weight: 700; color: #fff;
+    background-color: hsl(var(--pk-h), 60%, 45%); border: 2px solid rgba(255,255,255,0.25); }
+.pin-kiosk__name { font-size: 1.25rem; font-weight: 600; }
+.pin-kiosk__sub { font-size: 0.85rem; color: var(--pk-text-muted); margin-top: -0.3rem; }
+.pin-kiosk__dots { display: flex; gap: 0.85rem; margin: 0.5rem 0; }
+.pin-kiosk__dot { width: 0.85rem; height: 0.85rem; border-radius: 50%; border: 2px solid hsla(var(--pk-h),80%,70%,0.8);
+    &.on { background: hsl(var(--pk-h),80%,65%); border-color: hsl(var(--pk-h),80%,65%); } }
+.pin-kiosk__pad { display: grid; grid-template-columns: repeat(3, 4rem); gap: 0.6rem; }
+.pin-kiosk__key { height: 3.25rem; border-radius: 0.85rem; background: rgba(255,255,255,0.06);
+    border: 1px solid rgba(255,255,255,0.12); color: var(--pk-text); font-size: 1.4rem; font-weight: 300; cursor: pointer;
+    display: flex; align-items: center; justify-content: center;
+    &:active { transform: scale(0.95); background: rgba(255,255,255,0.14); }
+    &.ok { background: hsl(var(--pk-h),80%,45%); border-color: transparent; } }
+.pin-kiosk__cancel { margin-top: 0.3rem; color: var(--pk-text-muted); font-size: 0.85rem; cursor: pointer; background: none; border: none; }
+.pin-kiosk__err { min-height: 1.1rem; color: var(--pk-error); font-size: 0.9rem; }
+.pin-kiosk__panel.shake { animation: pk-shake 350ms ease-in-out; }
+@keyframes pk-shake { 0%,100%{transform:translateX(0)} 20%{transform:translateX(-10px)} 40%{transform:translateX(10px)} 60%{transform:translateX(-6px)} 80%{transform:translateX(6px)} }
+
+// Result card
+.pin-kiosk__result { @extend %pk-glass; padding: 2.25rem 3rem; display: flex; flex-direction: column; align-items: center;
+    gap: 0.6rem; text-align: center; width: min(420px, 90%);
+    border-color: rgba(24,169,87,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 80px rgba(24,169,87,0.35);
+    &--error { border-color: rgba(217,55,78,0.55); box-shadow: 0 20px 60px rgba(0,0,0,0.5), 0 0 60px rgba(217,55,78,0.3); } }
+.pin-kiosk__check { width: 74px; height: 74px; border-radius: 50%; background: rgba(24,169,87,0.18);
+    border: 2px solid rgba(24,169,87,0.6); display: flex; align-items: center; justify-content: center; font-size: 2rem; color: #34d399; }
+.pin-kiosk__result .name { font-size: 1.6rem; font-weight: 600; }
+.pin-kiosk__result .action { font-size: 1.2rem; color: #34d399; font-weight: 500; }
+.pin-kiosk__result .meta { font-size: 0.9rem; color: var(--pk-text-muted); }
+
+// Photo capture (reuse the NFC oval-guide pattern)
+.pin-kiosk__photo { @extend %pk-glass; padding: 1.5rem; width: min(540px,86%); text-align: center;
+    .stage { position: relative; aspect-ratio: 3/4; height: 56vh; max-height: 480px; margin: 0 auto; border-radius: 1rem; overflow: hidden; background: #000; }
+    video, img { position: absolute; inset: 0; width: 100%; height: 100%; object-fit: cover; }
+    video { transform: scaleX(-1); }
+    .guide { position: absolute; top: 47%; left: 50%; width: 64%; aspect-ratio: 3/4; transform: translate(-50%,-50%);
+        border: 3px dashed rgba(255,255,255,0.92); border-radius: 50%; box-shadow: 0 0 0 9999px rgba(0,0,0,0.5); }
+    .countdown { position: absolute; top: 47%; left: 50%; transform: translate(-50%,-50%); font-size: 5rem; font-weight: 200; color: #fff; text-shadow: 0 2px 24px rgba(0,0,0,0.85); } }
+
+@media (prefers-reduced-motion: reduce) {
+    .pin-kiosk::before, .pin-kiosk__panel.shake, .pin-kiosk__result { animation: none; }
+}
+```
+
+- [ ] **Step 2: Register in the manifest** — in `__manifest__.py` `web.assets_frontend`, add after `nfc_kiosk.scss`:
+```python
+            'fusion_clock/static/src/scss/pin_kiosk.scss',
+```
+
+- [ ] **Step 3: Force-compile to verify the SCSS is valid** — run:
+```bash
+docker exec odoo-dev-app odoo shell -d fusion-dev --no-http 2>/dev/null <<'PY'
+env['ir.qweb']._get_asset_bundle('web.assets_frontend').css()
+print('FRONTEND BUNDLE OK')
+PY
+```
+Expected: `FRONTEND BUNDLE OK`, no Sass error. (If `min()`/mixed-unit or `@extend` errors appear, fix before moving on.)
+
+- [ ] **Step 4: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/scss/pin_kiosk.scss fusion_clock/__manifest__.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/scss/pin_kiosk.scss fusion_clock/__manifest__.py \
+    -m "feat(fusion_clock): PIN kiosk SCSS (glass + brand-gradient, scoped)"
+```
+
+---
+
+## Task 5: Template — rebuild `views/kiosk_templates.xml`
+
+**Files:**
+- Modify: `views/kiosk_templates.xml`
+- Modify: `controllers/clock_kiosk.py` (`kiosk_page` context)
+
+- [ ] **Step 1: Update `kiosk_page` context** — in `controllers/clock_kiosk.py`, replace the `values = {...}` in `kiosk_page` with:
+```python
+        company = request.env.company.sudo()
+        location = company.x_fclk_nfc_kiosk_location_id
+        values = {
+            'page_name': 'kiosk',
+            'company_name': company.name,
+            'company_logo_url': '/web/image/res.company/%s/logo' % company.id if company.logo else '',
+            'location_name': location.name if location else 'No location configured',
+            'sounds_enabled': ICP.get_param('fusion_clock.enable_sounds', 'True') == 'True',
+            'photo_required': ICP.get_param('fusion_clock.enable_photo_verification', 'False') == 'True',
+        }
+```
+
+- [ ] **Step 2: Replace `views/kiosk_templates.xml`** with:
+```xml
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <template id="kiosk_page" name="Fusion Clock PIN Kiosk">
+        <t t-call="web.frontend_layout">
+            <t t-set="no_header" t-value="True"/>
+            <t t-set="no_footer" t-value="True"/>
+            <div id="pin_kiosk_root" class="pin-kiosk"
+                 t-att-data-logo-url="company_logo_url"
+                 t-att-data-location="location_name"
+                 t-att-data-sounds="'1' if sounds_enabled else '0'"
+                 t-att-data-photo="'1' if photo_required else '0'">
+                <img t-if="company_logo_url" id="pin_kiosk_logo" class="pin-kiosk__logo" t-att-src="company_logo_url" alt="Logo"/>
+                <div class="pin-kiosk__clock" id="pin_kiosk_clock"></div>
+                <div class="pin-kiosk__date" id="pin_kiosk_date"></div>
+                <input type="text" class="pin-kiosk__search" id="pin_kiosk_search" placeholder="Search your name…" autocomplete="off"/>
+                <div class="pin-kiosk__grid" id="pin_kiosk_grid"></div>
+                <div class="pin-kiosk__location" t-esc="location_name"/>
+                <div class="pin-kiosk__settings" id="pin_kiosk_settings">⚙</div>
+                <div id="pin_state_container"></div>
+            </div>
+        </t>
+    </template>
+</odoo>
+```
+
+- [ ] **Step 3: Apply + verify the template loads** — run:
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev -u fusion_clock --stop-after-init 2>&1 | tail -15
+```
+Expected: no ParseError on `fusion_clock.kiosk_page`.
+
+- [ ] **Step 4: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/views/kiosk_templates.xml fusion_clock/controllers/clock_kiosk.py
+git diff --cached --name-only
+git commit --only -- fusion_clock/views/kiosk_templates.xml fusion_clock/controllers/clock_kiosk.py \
+    -m "feat(fusion_clock): PIN kiosk template (logo, clock, search, grid, state container)"
+```
+
+---
+
+## Task 6: JS — rewrite `fusion_clock_kiosk.js` as an Interaction
+
+**Files:**
+- Modify: `static/src/js/fusion_clock_kiosk.js`
+
+- [ ] **Step 1: Replace the file** with an Odoo-19 Interaction. Full implementation:
+
+```javascript
+/** @odoo-module **/
+import { Interaction } from "@web/public/interaction";
+import { registry } from "@web/core/registry";
+import { rpc } from "@web/core/network/rpc";
+
+export class PinKiosk extends Interaction {
+    static selector = "#pin_kiosk_root";
+
+    setup() {
+        this.root = this.el;
+        this.grid = this.el.querySelector("#pin_kiosk_grid");
+        this.searchEl = this.el.querySelector("#pin_kiosk_search");
+        this.stage = this.el.querySelector("#pin_state_container");
+        this.photoRequired = this.el.dataset.photo === "1";
+        this.soundsOn = this.el.dataset.sounds === "1";
+        this.employees = [];
+        this.filtered = [];
+    }
+
+    async willStart() {
+        const res = await rpc("/fusion_clock/kiosk/search", { query: "" });
+        this.employees = res.employees || [];
+        this.filtered = this.employees;
+    }
+
+    start() {
+        this.initBrandHue();
+        this.startClock();
+        this.renderGrid();
+        this.searchEl.addEventListener("input", () => this.onSearch());
+    }
+
+    // ---- brand hue (mirrors fusion_clock_nfc_kiosk.js) ----
+    rgbToHue(r, g, b) {
+        r /= 255; g /= 255; b /= 255;
+        const mx = Math.max(r, g, b), mn = Math.min(r, g, b), d = mx - mn;
+        if (d === 0) return null;
+        let h = mx === r ? ((g - b) / d) % 6 : mx === g ? (b - r) / d + 2 : (r - g) / d + 4;
+        h = Math.round(h * 60); if (h < 0) h += 360; return h;
+    }
+    extractHue(img) {
+        try {
+            const w = img.naturalWidth, h = img.naturalHeight; if (!w || !h) return null;
+            const c = document.createElement("canvas"); c.width = w; c.height = h;
+            const ctx = c.getContext("2d"); ctx.drawImage(img, 0, 0);
+            const data = ctx.getImageData(0, 0, w, h).data;
+            let rs = 0, gs = 0, bs = 0, n = 0;
+            for (let i = 0; i < data.length; i += 4) {
+                const r = data[i], g = data[i+1], b = data[i+2], a = data[i+3];
+                if (a < 128) continue;
+                if (Math.max(r,g,b) - Math.min(r,g,b) < 25) continue;
+                rs += r; gs += g; bs += b; n++;
+            }
+            if (n < 20) return null;
+            return this.rgbToHue(Math.round(rs/n), Math.round(gs/n), Math.round(bs/n));
+        } catch (e) { return null; }
+    }
+    initBrandHue() {
+        const img = this.el.querySelector("#pin_kiosk_logo");
+        if (!img) return;
+        const apply = () => { const hue = this.extractHue(img); if (hue != null) document.documentElement.style.setProperty("--pk-h", String(hue)); };
+        if (img.complete) apply(); else img.addEventListener("load", apply);
+    }
+
+    // ---- clock ----
+    startClock() {
+        const tick = () => {
+            const d = new Date();
+            let h = d.getHours(); const m = String(d.getMinutes()).padStart(2, "0");
+            const ap = h >= 12 ? "PM" : "AM"; h = h % 12 || 12;
+            this.el.querySelector("#pin_kiosk_clock").innerHTML = `${h}:${m}<span class="ampm">${ap}</span>`;
+            this.el.querySelector("#pin_kiosk_date").textContent =
+                d.toLocaleDateString(undefined, { weekday: "long", month: "long", day: "numeric" });
+        };
+        tick(); this._clockTimer = setInterval(tick, 1000);
+    }
+
+    // ---- grid ----
+    initials(name) { return (name||"").split(" ").filter(Boolean).slice(0,2).map(p=>p[0].toUpperCase()).join(""); }
+    onSearch() {
+        const q = this.searchEl.value.trim().toLowerCase();
+        this.filtered = q ? this.employees.filter(e => e.name.toLowerCase().includes(q)) : this.employees;
+        this.renderGrid();
+    }
+    renderGrid() {
+        this.grid.innerHTML = "";
+        for (const emp of this.filtered) {
+            const tile = document.createElement("div");
+            tile.className = "pin-kiosk__tile";
+            const av = document.createElement("div");
+            av.className = "pin-kiosk__tile-av";
+            if (emp.avatar_url) av.style.backgroundImage = `url(${emp.avatar_url})`;
+            av.textContent = emp.avatar_url ? "" : this.initials(emp.name);
+            const nm = document.createElement("div");
+            nm.className = "pin-kiosk__tile-nm"; nm.textContent = emp.name;
+            tile.append(av, nm);
+            tile.addEventListener("click", () => this.onTile(emp));
+            this.grid.appendChild(tile);
+        }
+    }
+
+    // ---- PIN / setup overlay ----
+    onTile(emp) {
+        this.current = emp; this.pinBuf = ""; this.attempts = 0;
+        if (emp.has_pin) this.showPin(emp, "Enter your PIN", false);
+        else this.showPin(emp, "Create a PIN", true);   // first-use
+    }
+    showPin(emp, sub, isSetup, confirming) {
+        this.stage.innerHTML = "";
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const panel = document.createElement("div"); panel.className = "pin-kiosk__panel";
+        panel.innerHTML = `
+            <div class="pin-kiosk__av">${emp.avatar_url ? "" : this.initials(emp.name)}</div>
+            <div class="pin-kiosk__name">${emp.name}</div>
+            <div class="pin-kiosk__sub">${confirming ? "Re-enter to confirm" : sub}</div>
+            <div class="pin-kiosk__dots"></div>
+            <div class="pin-kiosk__err"></div>
+            <div class="pin-kiosk__pad"></div>
+            <button class="pin-kiosk__cancel">✕ Cancel</button>`;
+        if (emp.avatar_url) panel.querySelector(".pin-kiosk__av").style.backgroundImage = `url(${emp.avatar_url})`;
+        const pad = panel.querySelector(".pin-kiosk__pad");
+        const keys = ["1","2","3","4","5","6","7","8","9","⌫","0","✓"];
+        for (const k of keys) {
+            const b = document.createElement("button");
+            b.className = "pin-kiosk__key" + (k === "✓" ? " ok" : "");
+            b.textContent = k;
+            b.addEventListener("click", () => this.onKey(k, emp, isSetup, confirming));
+            pad.appendChild(b);
+        }
+        panel.querySelector(".pin-kiosk__cancel").addEventListener("click", () => this.reset());
+        ov.appendChild(panel); this.stage.appendChild(ov);
+        this._panel = panel; this.renderDots();
+    }
+    renderDots() {
+        const dots = this._panel.querySelector(".pin-kiosk__dots"); dots.innerHTML = "";
+        const len = Math.max(4, this.pinBuf.length);
+        for (let i = 0; i < len; i++) {
+            const d = document.createElement("span");
+            d.className = "pin-kiosk__dot" + (i < this.pinBuf.length ? " on" : "");
+            dots.appendChild(d);
+        }
+    }
+    err(msg) {
+        const e = this._panel.querySelector(".pin-kiosk__err"); e.textContent = msg;
+        this._panel.classList.add("shake"); setTimeout(() => this._panel.classList.remove("shake"), 360);
+    }
+    onKey(k, emp, isSetup, confirming) {
+        if (k === "⌫") { this.pinBuf = this.pinBuf.slice(0, -1); this.renderDots(); return; }
+        if (k === "✓") { this.submitPin(emp, isSetup, confirming); return; }
+        if (this.pinBuf.length < 6) { this.pinBuf += k; this.renderDots(); }
+        if (this.pinBuf.length >= 4 && !isSetup) { /* allow ✓; no auto-submit */ }
+    }
+    async submitPin(emp, isSetup, confirming) {
+        const pin = this.pinBuf;
+        if (pin.length < 4) return this.err("PIN must be at least 4 digits");
+        if (isSetup && !confirming) {                 // first entry of new PIN → confirm
+            this._newPin = pin; this.pinBuf = "";
+            return this.showPin(emp, "Create a PIN", true, true);
+        }
+        if (isSetup && confirming) {
+            if (pin !== this._newPin) { this.pinBuf = ""; this.renderDots(); return this.err("PINs didn't match"); }
+            const r = await rpc("/fusion_clock/kiosk/set_pin", { employee_id: emp.id, pin });
+            if (r.error) return this.err("Couldn't save PIN");
+            return this.afterPin(emp);
+        }
+        const v = await rpc("/fusion_clock/kiosk/verify_pin", { employee_id: emp.id, pin });
+        if (v.success) return this.afterPin(emp);
+        this.attempts++; this.pinBuf = ""; this.renderDots();
+        if (this.attempts >= 3) return this.reset();
+        this.err("Wrong PIN — try again");
+    }
+
+    // ---- photo (optional) then clock ----
+    async afterPin(emp) {
+        let photo = "";
+        if (this.photoRequired) {
+            try { photo = await this.capturePhoto(emp); } catch (e) { photo = ""; }
+        }
+        const r = await rpc("/fusion_clock/kiosk/clock", { employee_id: emp.id, photo_b64: photo });
+        this.showResult(emp, r);
+    }
+    showResult(emp, r) {
+        this.stage.innerHTML = "";
+        const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+        const card = document.createElement("div");
+        if (r && r.success) {
+            card.className = "pin-kiosk__result";
+            const act = r.action === "clock_out" ? "Clocked Out" : "Clocked In";
+            card.innerHTML = `<div class="pin-kiosk__check">✓</div>
+                <div class="name">${emp.name}</div><div class="action">${act}</div>
+                <div class="meta">${r.message || ""}</div>`;
+            if (this.soundsOn) this.beep();
+        } else {
+            card.className = "pin-kiosk__result pin-kiosk__result--error";
+            card.innerHTML = `<div class="pin-kiosk__check" style="color:#f87171;background:rgba(217,55,78,.18);border-color:rgba(217,55,78,.6)">!</div>
+                <div class="name">${emp.name}</div><div class="action" style="color:#f87171">Couldn't clock</div>
+                <div class="meta">${(r && r.error) || "Try again"}</div>`;
+        }
+        ov.appendChild(card); this.stage.appendChild(ov);
+        setTimeout(() => this.reset(), 3000);
+    }
+    beep() { try { const a = new (window.AudioContext || window.webkitAudioContext)(); const o = a.createOscillator(); o.frequency.value = 880; o.connect(a.destination); o.start(); o.stop(a.currentTime + 0.12); } catch (e) {} }
+
+    // ---- camera capture (mirrors the NFC kiosk; oval guide + 3s countdown) ----
+    capturePhoto(emp) {
+        return new Promise(async (resolve, reject) => {
+            let stream;
+            try { stream = await navigator.mediaDevices.getUserMedia({ video: { facingMode: "user" } }); }
+            catch (e) { return reject(e); }
+            this.stage.innerHTML = "";
+            const ov = document.createElement("div"); ov.className = "pin-kiosk__overlay";
+            const panel = document.createElement("div"); panel.className = "pin-kiosk__photo";
+            panel.innerHTML = `<h2>${emp.name}</h2>
+                <div class="stage"><video autoplay playsinline></video><div class="guide"></div><div class="countdown"></div></div>`;
+            ov.appendChild(panel); this.stage.appendChild(ov);
+            const video = panel.querySelector("video"); video.srcObject = stream;
+            const cd = panel.querySelector(".countdown");
+            let n = 3; cd.textContent = n;
+            const timer = setInterval(() => {
+                n--; if (n > 0) { cd.textContent = n; return; }
+                clearInterval(timer);
+                const c = document.createElement("canvas"); c.width = video.videoWidth; c.height = video.videoHeight;
+                c.getContext("2d").drawImage(video, 0, 0);
+                stream.getTracks().forEach(t => t.stop());
+                resolve(c.toDataURL("image/jpeg", 0.8));
+            }, 1000);
+        });
+    }
+
+    reset() {
+        this.stage.innerHTML = ""; this.pinBuf = ""; this.current = null; this._newPin = null;
+        this.searchEl.value = ""; this.filtered = this.employees; this.renderGrid();
+        // refresh checked-in state in the background
+        rpc("/fusion_clock/kiosk/search", { query: "" }).then(res => { this.employees = res.employees || []; });
+    }
+    destroy() { if (this._clockTimer) clearInterval(this._clockTimer); }
+}
+
+registry.category("public.interactions").add("fusion_clock.pin_kiosk", PinKiosk);
+```
+
+- [ ] **Step 2: Syntax-check** — run:
+```bash
+docker exec odoo-dev-app node --check /mnt/extra-addons/custom/fusion_clock/static/src/js/fusion_clock_kiosk.js 2>&1 | tail -3 || echo "(node unavailable — rely on browser load in Task 7)"
+```
+Expected: no syntax error.
+
+- [ ] **Step 3: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/static/src/js/fusion_clock_kiosk.js
+git diff --cached --name-only
+git commit --only -- fusion_clock/static/src/js/fusion_clock_kiosk.js \
+    -m "feat(fusion_clock): PIN kiosk Interaction (grid, PIN/setup, photo, clock)"
+```
+
+---
+
+## Task 7: Version bump, full upgrade + tests, manual smoke, deploy
+
+**Files:**
+- Modify: `__manifest__.py` (version), `fusion_clock/CLAUDE.md`
+
+- [ ] **Step 1: Bump version** — `__manifest__.py` version → `19.0.4.0.0` (new feature).
+
+- [ ] **Step 2: Update module docs** — in `fusion_clock/CLAUDE.md`: in the kiosk section note the classic kiosk is now the polished PIN kiosk (photo-tile → PIN → optional selfie, brand-gradient, app icon, opt-in via `enable_kiosk`); remove `fusion_clock.kiosk_pin_required` from the §11 settings-keys list.
+
+- [ ] **Step 3: Full upgrade + run the suite**
+```bash
+docker exec odoo-dev-app odoo -d fusion-dev --test-enable --test-tags /fusion_clock \
+    -u fusion_clock --stop-after-init --http-port=0 --gevent-port=0 2>&1 | tail -60
+```
+Expected: upgrade succeeds; `test_clock_kiosk` passes; existing tests still pass; `0 failed, 0 error`.
+
+- [ ] **Step 4: Manual browser smoke (local)** — http://localhost:8082: as a manager, set `enable_kiosk` ON + a Kiosk Location, open `/fusion_clock/kiosk`. Confirm: logo pill + brand gradient + live clock; the photo-tile grid; search filters; tapping a tile opens the PIN pad; a no-PIN employee gets the create+confirm flow; correct PIN → (selfie if Photo Verification ON) → success card → auto-return; wrong PIN shakes. Toggle Photo Verification and confirm the selfie step appears/disappears.
+
+- [ ] **Step 5: Commit**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git add -- fusion_clock/__manifest__.py fusion_clock/CLAUDE.md
+git diff --cached --name-only
+git commit --only -- fusion_clock/__manifest__.py fusion_clock/CLAUDE.md \
+    -m "chore(fusion_clock): bump 19.0.4.0.0 (PIN kiosk) + docs"
+```
+
+- [ ] **Step 6: Push both remotes + deploy entech**
+```bash
+cd /Users/gurpreet/Github/Odoo-Modules
+git log origin/main..HEAD --oneline
+git push origin main && git push gitea main
+```
+Then deploy the whole `fusion_clock` dir to entech (tar excluding `.superpowers`/`__pycache__`/`*.pyc`/`.DS_Store` → scp pve-worker5 → pct push 111 → extract → chown odoo:odoo → upgrade as `odoo` user with `--http-port=0 --gevent-port=0`). Verify web/login → 200, version `19.0.4.0.0`, and (read-only) the `/fusion_clock/kiosk` page renders for the operator. Hard-refresh the tablet. (entech can keep using the NFC kiosk; the PIN kiosk is opt-in via `enable_kiosk` + the PIN Kiosk app icon.)
+
+---
+
+## Self-Review (completed inline)
+
+- **Spec coverage:** §3.1 flow → Tasks 5/6; §3.2 style → Task 4; §3.3 backend (search/verify/set_pin/clock) → Tasks 1–2; §3.4 JS Interaction → Task 6; §3.5 template → Task 5; §3.6 settings/menu/location/PIN → Task 3 (+ company relabel); photo master-gate → Task 2; tests → Tasks 1–2 + Task 7; deploy → Task 7.
+- **Placeholder scan:** none — complete code for backend/tests/config/template/JS/SCSS; commands have expected output.
+- **Type/name consistency:** routes `/fusion_clock/kiosk/{search,verify_pin,set_pin,clock}` match between controller (Tasks 1–2), JS `rpc(...)` calls (Task 6), and tests. Return keys (`employees[].{has_pin,avatar_url}`, `needs_setup`, `invalid_pin`, `already_set`, `bad_pin`, `no_location_configured`, `success/action/message/net_hours`) consistent across controller, JS, tests. DOM ids (`#pin_kiosk_root`, `#pin_kiosk_grid`, `#pin_kiosk_search`, `#pin_state_container`, `#pin_kiosk_logo`, `#pin_kiosk_clock`, `#pin_kiosk_date`) match between template (Task 5), JS (Task 6), and SCSS scoping (Task 4). `--pk-h` used in SCSS + set in JS. `x_fclk_nfc_kiosk_location_id` used consistently as the kiosk location.
+- **Scope:** single feature; one plan.

fusion_clock/docs/superpowers/specs/2026-05-31-biweekly-attendance-filter-design.md

@@ -0,0 +1,105 @@
+# Fusion Clock — Bi-Weekly Attendance Filter Design
+
+**Date:** 2026-05-31
+**Module:** `fusion_clock`
+**Status:** Approved (brainstorming) — ready for implementation plan
+
+---
+
+## 1. Problem
+
+Operators reviewing **All Attendances** have no quick way to scope the list to a pay period. In Canada most payroll runs **bi-weekly**, so the common need is "show me this two-week pay period's attendances" (and step to the previous/next, or jump to an arbitrary period). The module already computes bi-weekly windows for its reports and already has the configuration — but none of it is exposed as a filter on the attendance list.
+
+## 2. Existing state (reused, not rebuilt)
+
+- **Period math already exists:** `fusion.clock.report._calculate_current_period(frequency, anchor_str, reference_date) → (start, end)` (`models/clock_report.py:457`). Handles `weekly` (7d), `biweekly` (14d), `semi_monthly`, `monthly`; uses floor division so dates *before* the anchor resolve correctly; anchor defaults to first-of-month when unset.
+- **Setting already exists:** Settings → Fusion Clock → Pay Period: **Frequency** (`fusion_clock.pay_period_type`, default `biweekly`) + **Anchor Date** (`fusion_clock.pay_period_start`, `YYYY-MM-DD`). Decision (brainstorming): **reuse this as the single source of truth** — no new setting.
+- **Attendance search view already inherited:** `view_hr_attendance_search_fusion_clock` (`views/hr_attendance_views.xml`) inherits `hr_attendance.hr_attendance_view_filter` and already adds custom filters — the natural home for the new period filters.
+- **TZ helpers:** `get_local_day_boundaries(env, date[, employee])` and `get_local_today(env)` in `models/tz_utils.py`.
+
+Decisions from brainstorming: reuse the Pay Period setting; provide **both** quick filters and a picker; the window **follows the Frequency setting** (one pay period; 2 weeks by default).
+
+## 3. Design
+
+### A. Shared period math (DRY)
+Extract the body of `_calculate_current_period` into a reusable, model-free helper so reports, filters, and the wizard share one implementation and never drift.
+
+`models/pay_period.py` (new):
+```python
+def compute_pay_period(frequency, anchor_str, reference_date) -> (date, date)
+    # identical logic to _calculate_current_period; pure function
+def period_length_days(frequency) -> int | None
+    # 7 for 'weekly', 14 for 'biweekly'/default, None for calendar-based (semi_monthly/monthly)
+def current_prev_next(frequency, anchor_str, today) -> dict
+    # {'current': (s,e), 'previous': (s,e), 'next': (s,e)} where
+    # previous = compute_pay_period(..., current_start - 1 day),
+    # next     = compute_pay_period(..., current_end   + 1 day)   # works for ALL frequencies
+```
+`fusion.clock.report._calculate_current_period` becomes a thin delegator to `compute_pay_period` (no behaviour change).
+
+### B. Quick filters on the attendance list
+On `hr.attendance`, three **non-stored computed Boolean** fields, each with a `search` method (the compute returns `False` — display only; the search method does the work):
+- `x_fclk_in_current_period`, `x_fclk_in_previous_period`, `x_fclk_in_next_period`
+
+Each `_search_*(operator, value)`:
+1. Read `pay_period_type` + `pay_period_start` via `ICP.sudo().get_param`.
+2. Compute the window with `current_prev_next(...)` keyed on `get_local_today(env)`.
+3. Convert the date window to UTC bounds with `get_local_day_boundaries` (start → 00:00 local, end → next-day 00:00 / inclusive end-of-day).
+4. Return `['&', ('check_in', '>=', start_utc), ('check_in', '<', end_excl_utc)]`.
+
+Add three filters to `view_hr_attendance_search_fusion_clock`:
+```xml
+<filter name="fclk_period_current"  string="Current Pay Period"  domain="[('x_fclk_in_current_period','=',True)]"/>
+<filter name="fclk_period_previous" string="Previous Pay Period" domain="[('x_fclk_in_previous_period','=',True)]"/>
+<filter name="fclk_period_next"     string="Next Pay Period"     domain="[('x_fclk_in_next_period','=',True)]"/>
+```
+
+### C. "Pick Pay Period" wizard
+`wizard/clock_period_picker_wizard.py` (new) — transient `fusion.clock.period.picker`:
+- `date_start` (Date, required) — default = current period start (`current_prev_next(...)['current'][0]`).
+- `date_end` (Date, required) — default = current period end; **editable**.
+- `@api.onchange('date_start')`: if `period_length_days(freq)` is not None → `date_end = date_start + length - 1`; else (calendar frequencies) → `date_end = compute_pay_period(freq, anchor, date_start)[1]`. (User can still override `date_end` → covers "set both, or just the start and auto-calc".)
+- `action_apply()` returns an `ir.actions.act_window`:
+  ```python
+  return {
+      'type': 'ir.actions.act_window', 'name': f"Attendances · {date_start} – {date_end}",
+      'res_model': 'hr.attendance', 'view_mode': 'list,form',
+      'domain': ['&', ('check_in','>=', start_utc), ('check_in','<', end_excl_utc)],
+      'target': 'current',
+  }
+  ```
+  (`start_utc`/`end_excl_utc` from `get_local_day_boundaries` on `date_start` / `date_end`.)
+
+`wizard/clock_period_picker_views.xml` (new): a small form (date_start, date_end, **Apply** + **Cancel**) and an `ir.actions.act_window` opening it as a dialog (`target="new"`).
+
+### D. Entry points
+- **Menu:** `views/clock_menus.xml` — add **Fusion Clock → Attendance → Bi-Weekly Period** (`sequence` after All Attendances), `groups="group_fusion_clock_manager,group_fusion_clock_team_lead"`, action = the picker wizard.
+- **Dashboard tile:** add an **onViewBiweekly()** handler (opens the picker wizard act_window) and a "🗓 Bi-Weekly Period" tile in the dashboard Quick Actions, inside the existing `t-if="state.team"` block (so only leads/managers see it).
+
+### E. Settings
+No new setting. Clarify the Anchor Date help/label in `res_config_settings_views.xml` to note it is the bi-weekly week-start used by **both** the reports and the attendance period filter.
+
+## 4. Permissions
+Filters, menu, and dashboard tile are gated to **manager + team-lead** (the attendance list itself is already gated to them in `clock_menus.xml`). Search methods read `ir.config_parameter` via `sudo()` (config only — no employee data). The returned domains run through Odoo's normal ACL/record rules, so a team-lead still sees only their own reports' attendance rows. No new data exposure.
+
+## 5. Edge cases
+- **No anchor set** → `compute_pay_period` falls back to first-of-month (existing behaviour); filters and picker still resolve a sane window. The picker pre-fills `date_start` with the computed current start so it is never blank.
+- **Frequency = semi_monthly / monthly** → window follows it; previous/next via `current_start − 1` / `current_end + 1` handles calendar stepping; picker auto-end uses the calendar period end containing the chosen start.
+- **TZ / DST** → date windows convert through `get_local_day_boundaries`, so a UTC `check_in` is matched against local pay-period days; end is exclusive next-day-00:00 to include the whole last day.
+- **date_end before date_start** in the picker → `@api.constrains` raises a friendly `ValidationError`.
+
+## 6. Testing (`tests/test_pay_period.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+- `compute_pay_period` for weekly / biweekly / semi_monthly / monthly, including a reference date **before** the anchor (negative offset) and exact boundary days.
+- `current_prev_next` returns contiguous, non-overlapping windows for biweekly (prev_end + 1 day == current_start, current_end + 1 == next_start).
+- Create attendances spanning two bi-weekly periods; assert the **Current** search filter returns only current-period rows and **Previous** only previous-period rows.
+- Wizard: default `date_start` == current period start; `onchange` sets `date_end = start + 13` for biweekly; `action_apply` returns an act_window whose domain bounds equal the local-day UTC boundaries of the chosen window.
+
+## 7. Out of scope (YAGNI)
+Custom OWL toolbar dropdown on the list (native Filters menu + wizard instead); per-employee differing pay periods; editing the anchor from the picker; saving favourite/named periods; touching the gantt view.
+
+## 8. Files touched
+- New: `models/pay_period.py`, `wizard/clock_period_picker_wizard.py`, `wizard/clock_period_picker_views.xml`, `tests/test_pay_period.py`
+- Modify: `models/__init__.py`, `models/clock_report.py` (delegate), `models/hr_attendance.py` (3 fields + search methods), `wizard/__init__.py`, `views/hr_attendance_views.xml` (3 filters), `views/clock_menus.xml` (menu item), `views/res_config_settings_views.xml` (label text), `static/src/js/fusion_clock_dashboard.js` + `static/src/xml/fusion_clock_dashboard.xml` (tile), `__manifest__.py` (data entry for the wizard view + version bump)
+
+## 9. Deployment
+Local test on the dev container (when available), then the standard entech path: bump version, `git commit --only` the explicit paths, push **origin + gitea**, upgrade entech (`pct exec 111`, native `odoo.service`, DB `admin`, `--http-port=0 --gevent-port=0`), verify web 200 + installed version, hard-refresh.

fusion_clock/docs/superpowers/specs/2026-05-31-pin-kiosk-design.md

@@ -0,0 +1,85 @@
+# Fusion Clock — PIN Kiosk Design
+
+**Date:** 2026-05-31
+**Module:** `fusion_clock`
+**Status:** Approved (brainstorming) — ready for implementation plan
+
+---
+
+## 1. Problem / goal
+
+The module has a premium **NFC kiosk** but only a bare-Bootstrap **classic PIN kiosk** (`/fusion_clock/kiosk`) with no logo, gradient, or polish, reachable only by direct URL. We want a properly designed, **opt-in PIN kiosk** as an additional feature for clients who want simple PIN entry instead of NFC — matching the NFC kiosk's look and quality. This makes the existing `enable_kiosk` setting meaningful (it becomes this feature's on/off).
+
+## 2. Decisions (from brainstorming)
+
+- **Flow:** photo-tile grid (with search) → tap your tile → enter PIN → clock. (Not PIN-as-identifier; not name-search.)
+- **PIN always required.** Drop the `kiosk_pin_required` toggle.
+- **Set PIN on first use:** an employee with no PIN is walked through creating + confirming one on first tap.
+- **Selfie respects the global Photo Verification master toggle** (`enable_photo_verification`): ON → guided selfie after PIN; OFF → none.
+- **Style:** always-dark glass + brand-hue mesh gradient, logo pill, live clock/date — matching the NFC kiosk.
+
+## 3. Design
+
+### 3.1 Screens / flow
+1. **Grid** (`#pin_kiosk_root`): company logo pill (top-centre), live clock + date, a search box, and a responsive grid of employee **photo tiles** (avatar + name) over the animated brand-tinted mesh gradient. Bottom chrome: location pill (left), operator ⚙ + lock (right).
+2. **Tap a tile** → **PIN pad**: glass panel with the person's avatar + name, masked PIN dots, a big touch numpad (`⌫ 0 ✓`), Cancel.
+   - If the employee **has no PIN** → **first-use setup**: "Create a PIN" → enter → "Re-enter to confirm" → saved, then proceed to clock.
+   - Wrong PIN → shake + clear + retry (max 3 attempts, then back to grid).
+3. **Selfie** (only if `enable_photo_verification` master is ON) → guided capture with the oval face-guide + countdown (reuse the NFC kiosk's capture).
+4. **Result**: green-glow success card (avatar, name, "Clocked In/Out", time · location), auto-returns to the grid after ~3 s. Error → red shake card.
+
+### 3.2 Style
+New `static/src/scss/pin_kiosk.scss`, **scoped to `:has(#pin_kiosk_root)`** (never leaks to other pages — same discipline as `nfc_kiosk.scss`). Mirrors the NFC kiosk's tokens/patterns: dark page, animated mesh `::before`, vignette `::after`, frosted logo pill, clock/date, `%glass` panels, numpad, result card (success/error), photo panel + oval guide, reduced-motion fallback. Brand hue in its **own** CSS var `--pk-h` (don't collide with `--nfc-h`); deliberately a parallel file, not shared, to avoid coupling the two kiosks.
+
+### 3.3 Backend — rework `controllers/clock_kiosk.py`
+All routes `auth='user'`, gated by `_is_kiosk_operator` (Clock Manager **or** Kiosk Operator group — unchanged). Page additionally gated by `enable_kiosk`.
+
+- **`GET /fusion_clock/kiosk`** — render the new template. Context: `company_name`, `company_logo_url` (for display + hue extraction), `location_name`, `sounds_enabled`, `photo_required` (= `enable_photo_verification` master). Redirect to `/my` if `enable_kiosk` off or not an operator (as today).
+- **`POST /fusion_clock/kiosk/search`** (extend the existing — keep the name; the NFC kiosk's `employee_search` delegates to it) — add `avatar_url` (via `hr.employee.public`, `?unique=write_date` cache-buster) and `has_pin` (bool) to each row, alongside the current `id/name/department/is_checked_in/card_uid`.
+- **`POST /fusion_clock/kiosk/verify_pin`** (rework) — if `not employee.x_fclk_kiosk_pin` → `{'needs_setup': True}`; else compare and return `{'success': True, ...}` or `{'error': 'invalid_pin'}`.
+- **`POST /fusion_clock/kiosk/set_pin`** (NEW) — first-use: validate a 4-digit numeric PIN, reject if the employee already has one (`already_set`), else write `x_fclk_kiosk_pin` (sudo) and return success.
+- **`POST /fusion_clock/kiosk/clock`** (rework) — accept `photo_b64`. Use the **configured kiosk location** (`company.x_fclk_nfc_kiosk_location_id`) — a fixed wall device, so NO per-clock GPS geofence (matches the NFC kiosk); return `no_location_configured` if unset. Clock via `_attendance_action_change`; write source `'kiosk'`, location, logs, penalties (as today). If `enable_photo_verification` master ON and `photo_b64` present → store on `x_fclk_check_in_photo` (in) / `x_fclk_check_out_photo` (out), stripping the data-URL prefix. Unscheduled-day → `unscheduled_shift` log (as today). Module-level tap debounce (~5 s, like NFC).
+
+### 3.4 Frontend — rewrite `static/src/js/fusion_clock_kiosk.js`
+Rebuild as a proper Odoo-19 **Interaction** (`@web/public/interaction`, registered in `registry.category("public.interactions")`) — not the old IIFE. State machine: `grid → pin | setup → (photo) → result → grid`. Reuse the NFC kiosk's **dominant-hue extraction** (set `--pk-h` from the logo) and **guided photo capture** (camera + oval guide + countdown) — replicate those helpers cleanly in this file (parallel, not imported, to keep the two kiosks decoupled). Search filters the tile grid client-side; tile tap loads the PIN/setup panel; numpad drives the dots; success plays a sound if `sounds_enabled`.
+
+### 3.5 Template — rebuild `views/kiosk_templates.xml`
+Root `<div id="pin_kiosk_root" class="pin-kiosk">` inside `web.frontend_layout` (no header/footer), carrying `data-*` for `company_logo_url`, `location_name`, `sounds_enabled`, `photo_required`. Contains the logo pill, clock/date, search, a grid container, and a JS-driven `#pin_state_container` (mirroring the NFC `#nfc_state_container`).
+
+### 3.6 Access, settings, menu
+- **Operator account:** runs as the shared **Kiosk Operator** (`group_fusion_clock_kiosk_app`) or a manager — same as NFC. Screen lock + operator ⚙ for parity.
+- **App icon:** add a **"Fusion Clock PIN Kiosk"** `ir.actions.act_url` → `/fusion_clock/kiosk` + a `menuitem` gated to `group_fusion_clock_kiosk_app` (parallel to the NFC app icon). Clients enable `enable_kiosk` and point the tablet at it.
+- **Settings:** `enable_kiosk` is the on/off (kept). **Remove `kiosk_pin_required`** (field + view row + seed + `_FCLK_BOOL_PARAMS` entry) — PIN is always required. The **kiosk location** reuses `res.company.x_fclk_nfc_kiosk_location_id`; relabel its field string to **"Kiosk Location"** (it now serves NFC + PIN) and note in help it applies to both.
+- **PIN storage:** existing `hr.employee.x_fclk_kiosk_pin` (Char, 4-digit, manager-editable, server-verified). Kept plaintext to match the existing field and keep it simple; hashing noted as optional future hardening (it's a low-stakes attribution PIN, manager-only field, never sent to other clients).
+
+## 4. Reuse / dependencies
+- Keep `FusionClockKiosk.kiosk_search` working — the NFC kiosk's `employee_search` delegates to it (`clock_nfc_kiosk.py:409`).
+- Reuse (replicate) the NFC kiosk's hue extraction (`extractDominantHue`/`applyBrandHue`) and photo capture.
+- Reuse `hr.employee.public` for avatars (kiosk operator can't read `hr.employee` images — established for the NFC kiosk).
+- Reuse the master photo gate added in `19.0.3.16.1`.
+
+## 5. Edge cases
+- **No PIN** → first-use setup (enter + confirm; `set_pin`).
+- **Wrong PIN** → shake + retry, max 3 → back to grid.
+- **Employee not clock-enabled** → not listed; defensive re-check in `clock`.
+- **No kiosk location configured** → `no_location_configured` message.
+- **Photo master OFF** → skip the selfie step entirely; clock directly.
+- **Unscheduled day** → `unscheduled_shift` activity log (parity with NFC).
+- **Double-tap** → debounced.
+
+## 6. Testing (`tests/test_clock_kiosk.py`, `@tagged('-at_install','post_install','fusion_clock')`)
+- `search` returns `avatar_url` + `has_pin`; only clock-enabled employees.
+- `verify_pin`: correct PIN → success; wrong → `invalid_pin`; no PIN → `needs_setup`.
+- `set_pin`: sets a 4-digit PIN; rejects non-numeric / wrong length; rejects when one already exists (`already_set`).
+- `clock`: clock-in then clock-out (source `'kiosk'`, kiosk location); photo stored only when master ON and `photo_b64` present, not when OFF; `no_location_configured` when unset.
+- Page redirects when `enable_kiosk` off / non-operator.
+
+## 7. Out of scope (YAGNI)
+Offline mode; switching locations on one device; PIN hashing (noted as future); removing or changing the NFC kiosk; multi-company kiosk selection.
+
+## 8. Files touched
+- Modify: `controllers/clock_kiosk.py`, `views/kiosk_templates.xml`, `static/src/js/fusion_clock_kiosk.js`, `models/res_config_settings.py` (drop `kiosk_pin_required`), `views/res_config_settings_views.xml` (drop row, relabel location), `data/ir_config_parameter_data.xml` (drop seed), `models/res_company.py` (relabel field string), `views/clock_menus.xml` (PIN kiosk app icon), `__manifest__.py` (register `pin_kiosk.scss` + version bump), `fusion_clock/CLAUDE.md` (kiosk section + settings keys).
+- Create: `static/src/scss/pin_kiosk.scss`, `tests/test_clock_kiosk.py`.
+
+## 9. Deployment
+Local test on the dev container, then the standard entech path: bump version, `git commit --only` explicit paths, push **origin + gitea**, upgrade entech, verify web 200 + version + (read-only) the page renders for the operator. Bump version so the new SCSS/JS bundle rebuilds; hard-refresh the tablet.

fusion_clock/migrations/19.0.4.1.0/post-migrate.py

@@ -0,0 +1,26 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+
+from odoo import api, SUPERUSER_ID
+
+
+def migrate(cr, version):
+    """Retire the single-threshold break param (superseded by per-rule
+    break1_after_hours), and force-recompute the now-computed break field so
+    existing closed attendances reflect the province rule + their penalties."""
+    cr.execute(
+        "DELETE FROM ir_config_parameter WHERE key = %s",
+        ('fusion_clock.break_threshold_hours',),
+    )
+    env = api.Environment(cr, SUPERUSER_ID, {})
+    Attendance = env['hr.attendance']
+    closed = Attendance.search([('check_out', '!=', False)])
+    if closed:
+        # Recompute the break AND everything that derives from it, in dependency
+        # order (break -> net hours -> overtime). Recomputing break alone leaves
+        # stored x_fclk_net_hours / x_fclk_overtime_hours stale, because
+        # add_to_compute + flush of one field does not cascade to its dependents.
+        for fname in ('x_fclk_break_minutes', 'x_fclk_net_hours', 'x_fclk_overtime_hours'):
+            env.add_to_compute(Attendance._fields[fname], closed)
+            closed.flush_recordset([fname])

fusion_clock/migrations/19.0.4.2.0/post-migrate.py

@@ -0,0 +1,25 @@
+# -*- coding: utf-8 -*-
+# Copyright 2026 Nexa Systems Inc.
+# License OPL-1 (Odoo Proprietary License v1.0)
+"""One-time reset of stale missed-clock-out flags on upgrade to 19.0.4.1.0.
+
+Background: x_fclk_pending_reason was set by the absence + auto-clock-out crons
+but only cleared by the systray reason dialog -- never by the kiosk / NFC clock
+paths that staff actually use. During the kiosk rollout the absence cron flagged
+essentially the whole company (hundreds of "absent" logs), and those flags then
+nagged everyone forever, even while currently clocked in.
+
+This release clears the flag on every clock-in (all paths), stops absences from
+setting it at all, and exempts owners. The flags already on record are stale
+artifacts of the rollout, so wipe them once here; correct ones re-appear only
+for a genuine forgotten clock-out from now on.
+"""
+
+
+def migrate(cr, version):
+    if not version:
+        return
+    cr.execute(
+        "UPDATE hr_employee SET x_fclk_pending_reason = false "
+        "WHERE x_fclk_pending_reason = true"
+    )

fusion_clock/models/__init__.py

@@ -1,9 +1,11 @@
 # -*- coding: utf-8 -*-
 
+from . import pay_period
 from . import clock_location
 from . import hr_attendance
 from . import hr_employee
 from . import clock_penalty
+from . import clock_break_rule
 from . import clock_report
 from . import res_config_settings
 from . import clock_activity_log