Initial commit: SKEEN Derma Experts - Sistema Integral de Gestión Clínica

- Frontend React (SKEEN Brand) con Vite, TypeScript, Tailwind
- Frontend Homenest (versión alternativa)
- Módulos Odoo 17 custom (citas, pacientes, monedero, pagos, ventas, inventario, whatsapp)
- WACRM fork (Next.js 16 + Supabase)
- Hermes + Bridge + Skills (Qwen3.6 via Nan Builders)
- Scripts de migración y operación
- Documentación extensiva en docs/

odoo-addons/skeen_whatsapp/models/frontend_user.py

@@ -0,0 +1,73 @@
+# -*- coding: utf-8 -*-
+
+from odoo import models, fields, api, _
+from odoo.exceptions import ValidationError
+
+try:
+    from werkzeug.security import check_password_hash, generate_password_hash
+except Exception:  # pragma: no cover
+    check_password_hash = None
+    generate_password_hash = None
+
+
+class SkeenFrontendUser(models.Model):
+    _name = 'skeen.frontend.user'
+    _description = 'Usuario del Frontend React'
+    _order = 'name, login'
+    _rec_name = 'name'
+
+    login = fields.Char(string='Usuario', required=True, index=True)
+    name = fields.Char(string='Nombre', required=True)
+    password_hash = fields.Char(string='Hash de contraseña', required=True)
+    role = fields.Selection([
+        ('admin', 'Administrador'),
+        ('recepcion', 'Recepción'),
+        ('medico', 'Médico'),
+        ('lectura', 'Solo lectura'),
+    ], string='Rol', default='recepcion', required=True)
+    active = fields.Boolean(string='Activo', default=True)
+    must_change_password = fields.Boolean(string='Debe cambiar contraseña', default=False)
+    last_login = fields.Datetime(string='Último acceso', readonly=True)
+    notes = fields.Text(string='Notas')
+
+    _sql_constraints = [
+        ('unique_login', 'unique(login)', 'El usuario ya existe.'),
+    ]
+
+    def set_password(self, plain):
+        self.ensure_one()
+        if not generate_password_hash:
+            raise ValidationError(_('Hash de contraseña no disponible'))
+        if not plain or len(plain) < 8:
+            raise ValidationError(_('La contraseña debe tener al menos 8 caracteres'))
+        self.password_hash = generate_password_hash(plain)
+
+    def check_password(self, plain):
+        self.ensure_one()
+        if not self.password_hash or not check_password_hash:
+            return False
+        try:
+            return check_password_hash(self.password_hash, plain or '')
+        except Exception:
+            return False
+
+    def role_rank(self):
+        """Jerarquía simple para permisos: mayor número = más acceso."""
+        self.ensure_one()
+        return {
+            'lectura': 10,
+            'medico': 50,
+            'recepcion': 50,
+            'admin': 100,
+        }.get(self.role, 0)
+
+    def to_public_dict(self):
+        self.ensure_one()
+        return {
+            'id': self.id,
+            'login': self.login,
+            'name': self.name,
+            'role': self.role,
+            'must_change_password': self.must_change_password,
+            'last_login': self.last_login.strftime('%Y-%m-%d %H:%M') if self.last_login else None,
+        }