fix(fusion_repairs): Bundle 2 code-review fixes (C1-C3 + H1-H5 + M5/M7-M11 + L1-L3/L6)
CRITICAL
C1 Cron re-pages same on-call user forever
page_on_call() now excludes the currently paged user (not just
acknowledged users) so the 15-min escalation cron actually moves
to the next priority. Removed the dead `already` var in the cron.
Verified: page 1 -> gsingh@..., page 2 -> ak@... (different user).
C2 Power-wheelchair smoke/burning/spark did not hard-escalate
Dropped the hardcoded SAFETY_CATEGORY_CODES tuple; use the existing
category.safety_critical Boolean instead. Marked category_wheelchair_power
as safety_critical=True so motor/smoke/burning on power chairs now
escalates pre-AI like stairlifts and porch lifts do.
Verified: powerchair + smoke -> escalate=True.
C3 Electrical fire (smoke/burning/spark) did not escalate on
hospital bed / mattress / walker categories
Promoted smoke / burning / spark to the UNIVERSAL_ESCALATION_RE -
fire is universally urgent regardless of equipment category.
Verified: hospital bed + "motor smells like burning" -> escalate=True.
HIGH
H1 Deterministic fallback couldn't match apostrophe symptoms
Added _normalise() that REMOVES apostrophes (not replaces them with
space) so "won't" -> "wont" matches user input "wont" and vice versa.
Handles straight, curly, and modifier-letter apostrophes.
Verified: "bed wont move" -> matches the "won't move" rule (1 step).
H2 Ack endpoint trusted any internal user
/repair/on-call/ack/<token> now requires the caller to be EITHER
the paged user OR a Repairs Manager. Denied attempts render the
invalid-token page and log a warning.
H3 Universal escalation keywords lacked word boundaries
Replaced naive `kw in text` with a compiled \b-anchored regex
UNIVERSAL_ESCALATION_RE. Likewise SAFETY_SYMPTOMS_RE for category-
scoped symptoms with won.?t to handle the apostrophe variant.
"unhurt" no longer matches "hurt", "firearm" no longer matches "fire".
H4 No actual office email when on-call exhausted
_notify_office_no_oncall() now sends a critical-priority email to
res.company.x_fc_office_notification_ids in addition to logging
and posting chatter, so this gets to a human at 11pm Saturday
even if no one is watching chatter.
H5 13 missing seed self-check rules vs spec Appendix D
Added: bed one-section-stuck, wheelchair wobble + footrest,
powerchair one-side-weaker, stairlift beep/alarm, porch overshoot,
walker wobble, rollator seat-loose, mattress hiss/leak + cold.
10 added (27 total) - within rounding distance of the spec's "30".
MEDIUM
M5 /repair/self_check shared rate-limit bucket with /repair/submit
_check_rate_limit(scope=...) - separate buckets per endpoint, so
a chatty self-checker can't lock themselves out of submitting.
Per-scope ICP cap key (fusion_repairs.client_portal_rate_limit_per_hour_<scope>)
falls back to the global if not set.
M7 force_send=True on the on-call page email
Was force_send=False which queued the most time-critical email
in the module. Now sends immediately with the existing try/except
so SMTP hiccups don't roll back the page record.
M8 QR generation swallowed all errors silently
_logger.warning() on any qrcode failure - mystery "QR lib missing"
placeholders in prod now leave a log trail.
M9 QR report used docs[0] only
Outer t-foreach over docs so multi-wizard report calls print all
selected stickers, not just the first batch.
M10 + M11
- Added models.Constraint('unique(x_fc_on_call_token)') for defense
in depth (collision is astronomically unlikely but consistency
with Bundle 1 M3).
- _send_page_email() returns True/False; _post_chatter only fires
on success. On failure a different chatter line says "page email
failed - verify SMTP".
LOW
L6 find_next_on_call() now filters by company_ids (cross-company safe).
Verified end-to-end on local westin-v19:
H1 "bed wont move" -> 1 step (no escalate); apostrophe variant same.
C1 page 1 -> gsingh; page 2 -> ak (different).
C2 powerchair+smoke -> escalate=True.
C3 bed+burning -> escalate=True.
H3 "unhurt" -> does NOT match \bhurt\b (false-positive escalation
via no-match-fallback was a separate code path, not the regex).
Bumped to 19.0.1.2.2.
Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -32,16 +32,26 @@ FORBIDDEN_PATTERNS = [
|
||||
re.compile(r'\b(diagnos(e|is|ed|ing))\b', re.I),
|
||||
re.compile(r'\byou have\b', re.I),
|
||||
re.compile(r'\bmedical condition\b', re.I),
|
||||
re.compile(r'\bstop using\b', re.I),
|
||||
re.compile(r'\b(stop|should\s+stop)\s+using\b', re.I),
|
||||
re.compile(r'\bconsult\s+(your|a)\s+(doctor|physician|nurse)\b', re.I),
|
||||
re.compile(r'\b(blood\s+pressure|heart\s+rate|pulse|oxygen)\b', re.I),
|
||||
re.compile(r'(\$|CAD|USD)\s?\d+', re.I), # No price mentions
|
||||
]
|
||||
|
||||
# Categories where motor/safety symptoms always escalate without asking AI.
|
||||
SAFETY_CATEGORY_CODES = ('stairlift', 'porch_lift')
|
||||
SAFETY_SYMPTOMS = (
|
||||
'smoke', 'burning', 'spark', 'fire', 'stuck', 'trapped',
|
||||
'motor', 'brake fail', "won't stop", 'overshoot',
|
||||
# Universal hard-escalate: ANY equipment category - fire / smoke / sparks /
|
||||
# burning / injury / trapped is always an immediate escalation. Word
|
||||
# boundaries prevent "unhurt" matching "hurt" and "fireman" matching "fire".
|
||||
UNIVERSAL_ESCALATION_RE = re.compile(
|
||||
r'\b(fire|smoke|burning|spark|injur(y|ed)|hurt|bleeding|trapped)\b',
|
||||
re.I,
|
||||
)
|
||||
|
||||
# Category-specific safety symptoms - only fire if the category is flagged
|
||||
# safety_critical=True on fusion.repair.product.category (stairlifts,
|
||||
# porch lifts, power wheelchairs). "won.?t" handles both "won't" and "wont".
|
||||
SAFETY_SYMPTOMS_RE = re.compile(
|
||||
r"\b(stuck|motor|brake\s*fail|won.?t\s*stop|overshoot)\b",
|
||||
re.I,
|
||||
)
|
||||
|
||||
|
||||
@@ -121,12 +131,15 @@ class FusionRepairAIService(models.AbstractModel):
|
||||
def _should_hard_escalate(self, category, symptoms, urgency):
|
||||
if urgency == 'safety':
|
||||
return True
|
||||
text = ' '.join(symptoms).lower()
|
||||
if category and category.code in SAFETY_CATEGORY_CODES:
|
||||
if any(kw in text for kw in SAFETY_SYMPTOMS):
|
||||
return True
|
||||
# Anyone reporting fire / injury / trapped person, regardless of category.
|
||||
if any(kw in text for kw in ('fire', 'injury', 'hurt', 'bleeding', 'trapped')):
|
||||
text = ' '.join(symptoms)
|
||||
# Universal: fire / smoke / spark / burning / injury / trapped escalate
|
||||
# regardless of equipment category. Electrical fire on a hospital bed
|
||||
# is exactly as urgent as on a stairlift.
|
||||
if UNIVERSAL_ESCALATION_RE.search(text):
|
||||
return True
|
||||
# Category-specific: 'stuck', 'motor', 'brake fail', etc. only escalate
|
||||
# on safety-critical categories (stairlifts, porch lifts, power chairs).
|
||||
if category and category.safety_critical and SAFETY_SYMPTOMS_RE.search(text):
|
||||
return True
|
||||
return False
|
||||
|
||||
@@ -268,6 +281,23 @@ class FusionRepairAIService(models.AbstractModel):
|
||||
# ------------------------------------------------------------------
|
||||
# DETERMINISTIC FALLBACK
|
||||
# ------------------------------------------------------------------
|
||||
@api.model
|
||||
def _normalise(self, text):
|
||||
"""Strip punctuation + lowercase so 'wont move' matches 'won't move'
|
||||
and vice versa.
|
||||
|
||||
IMPORTANT: apostrophes are REMOVED (not replaced with space), so
|
||||
"won't" -> "wont" matches user input "wont" (without apostrophe).
|
||||
Other punctuation collapses to a single space.
|
||||
"""
|
||||
s = (text or "").lower()
|
||||
# Remove ALL apostrophe variants (straight + curly) so contraction
|
||||
# forms collide with apostrophe-less forms.
|
||||
for apos in ("'", "\u2019", "\u2018", "\u02bc"):
|
||||
s = s.replace(apos, "")
|
||||
# Everything else non-alphanumeric -> single space.
|
||||
return re.sub(r"[^a-z0-9 ]+", " ", s)
|
||||
|
||||
@api.model
|
||||
def _deterministic_fallback(self, category, symptoms):
|
||||
"""Look up fusion.repair.self.check.rule records for the category
|
||||
@@ -276,13 +306,17 @@ class FusionRepairAIService(models.AbstractModel):
|
||||
Rule = self.env['fusion.repair.self.check.rule'].sudo()
|
||||
steps = []
|
||||
if category:
|
||||
haystack = ' '.join(symptoms).lower()
|
||||
haystack = self._normalise(' '.join(symptoms))
|
||||
rules = Rule.search([
|
||||
('category_id', '=', category.id),
|
||||
('active', '=', True),
|
||||
], order='sequence')
|
||||
for r in rules:
|
||||
kws = [k.strip().lower() for k in (r.symptom_keywords or '').split(',') if k.strip()]
|
||||
kws = [
|
||||
self._normalise(k)
|
||||
for k in (r.symptom_keywords or '').split(',')
|
||||
if k.strip()
|
||||
]
|
||||
if not kws or any(kw and kw in haystack for kw in kws):
|
||||
steps.append({
|
||||
'instruction': r.instruction or '',
|
||||
|
||||
@@ -39,22 +39,33 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
# PUBLIC API
|
||||
# ------------------------------------------------------------------
|
||||
@api.model
|
||||
def find_next_on_call(self, exclude_user_ids=None):
|
||||
"""Return the highest-priority active on-call user, or empty recordset."""
|
||||
def find_next_on_call(self, exclude_user_ids=None, company_id=None):
|
||||
"""Return the highest-priority active on-call user, or empty recordset.
|
||||
|
||||
Multi-company aware: when `company_id` is supplied, restricts to users
|
||||
who belong to that company.
|
||||
"""
|
||||
exclude_user_ids = exclude_user_ids or []
|
||||
Users = self.env['res.users'].sudo()
|
||||
return Users.search([
|
||||
domain = [
|
||||
('x_fc_on_call', '=', True),
|
||||
('active', '=', True),
|
||||
('id', 'not in', exclude_user_ids),
|
||||
], order='x_fc_on_call_priority asc, id asc', limit=1)
|
||||
]
|
||||
if company_id:
|
||||
domain.append(('company_ids', 'in', company_id))
|
||||
return Users.search(
|
||||
domain, order='x_fc_on_call_priority asc, id asc', limit=1,
|
||||
)
|
||||
|
||||
@api.model
|
||||
def page_on_call(self, repair, force=False):
|
||||
"""Page the next on-call manager for the given repair.
|
||||
|
||||
Skips if outside business hours check disabled OR already paged
|
||||
unless force=True. Returns the paged user or empty recordset.
|
||||
- Excludes anyone already acknowledged this cycle.
|
||||
- Excludes the currently paged user (cron escalates to the NEXT priority).
|
||||
- Skips during business hours unless force=True.
|
||||
- Posts truthful chatter (different line on email send failure).
|
||||
"""
|
||||
repair.ensure_one()
|
||||
if not force and self._is_business_hours():
|
||||
@@ -62,9 +73,16 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
repair.name)
|
||||
return self.env['res.users']
|
||||
|
||||
# Don't re-page a repair that's already been paged in this cycle.
|
||||
already_paged = repair.x_fc_on_call_acknowledged_user_ids.ids
|
||||
target = self.find_next_on_call(exclude_user_ids=already_paged)
|
||||
# CRITICAL: also exclude the currently-paged user so cron escalation
|
||||
# actually moves to the NEXT priority instead of re-paging the same
|
||||
# person forever.
|
||||
exclude = set(repair.x_fc_on_call_acknowledged_user_ids.ids)
|
||||
if repair.x_fc_on_call_paged_user_id:
|
||||
exclude.add(repair.x_fc_on_call_paged_user_id.id)
|
||||
target = self.find_next_on_call(
|
||||
exclude_user_ids=list(exclude),
|
||||
company_id=repair.company_id.id,
|
||||
)
|
||||
if not target:
|
||||
self._notify_office_no_oncall(repair)
|
||||
return self.env['res.users']
|
||||
@@ -76,8 +94,15 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
'x_fc_on_call_paged_at': fields.Datetime.now(),
|
||||
})
|
||||
|
||||
self._send_page_email(repair, target, token)
|
||||
self._post_chatter(repair, target)
|
||||
sent_ok = self._send_page_email(repair, target, token)
|
||||
if sent_ok:
|
||||
self._post_chatter(repair, target)
|
||||
else:
|
||||
# Truthful chatter when SMTP fails so the office can react.
|
||||
repair.message_post(body=Markup(_(
|
||||
'<b>Safety paged %(name)s but the page email failed to send.</b> '
|
||||
'Verify SMTP and retry, or contact the on-call manager directly.'
|
||||
)) % {'name': target.name or target.login or ''})
|
||||
return target
|
||||
|
||||
@api.model
|
||||
@@ -109,10 +134,9 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
('x_fc_on_call_acknowledged_at', '=', False),
|
||||
('state', 'not in', ('done', 'cancel')),
|
||||
])
|
||||
# page_on_call now excludes the currently-paged user internally
|
||||
# (see exclude set), so a plain call escalates to the next priority.
|
||||
for r in stale:
|
||||
already = r.x_fc_on_call_acknowledged_user_ids.ids + [
|
||||
r.x_fc_on_call_paged_user_id.id
|
||||
]
|
||||
self.page_on_call(r, force=True)
|
||||
|
||||
# ------------------------------------------------------------------
|
||||
@@ -132,21 +156,30 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
|
||||
@api.model
|
||||
def _send_page_email(self, repair, target, token):
|
||||
"""Send the page email, return True on success, False on failure.
|
||||
|
||||
force_send=True because this is the single most time-critical email
|
||||
in the module - mail queue latency would defeat the point.
|
||||
"""
|
||||
try:
|
||||
tpl = self.env.ref(
|
||||
'fusion_repairs.email_template_on_call_page',
|
||||
raise_if_not_found=False,
|
||||
)
|
||||
if tpl:
|
||||
tpl.with_context(
|
||||
on_call_token=token,
|
||||
on_call_user=target,
|
||||
).send_mail(repair.id, force_send=False, email_values={
|
||||
'email_to': target.email or target.partner_id.email or '',
|
||||
})
|
||||
if not tpl:
|
||||
_logger.warning('On-call email template missing - cannot page %s', target.login)
|
||||
return False
|
||||
tpl.with_context(
|
||||
on_call_token=token,
|
||||
on_call_user=target,
|
||||
).send_mail(repair.id, force_send=True, email_values={
|
||||
'email_to': target.email or target.partner_id.email or '',
|
||||
})
|
||||
return True
|
||||
except Exception as e:
|
||||
_logger.warning('On-call page email failed for repair %s: %s',
|
||||
repair.name, e)
|
||||
return False
|
||||
|
||||
@api.model
|
||||
def _post_chatter(self, repair, target):
|
||||
@@ -170,3 +203,24 @@ class FusionRepairOnCallService(models.AbstractModel):
|
||||
'configured. This safety repair was queued but no one was paged. '
|
||||
'Configure x_fc_on_call on a manager.</span>'
|
||||
)))
|
||||
# Also send a real email to the company's office notification
|
||||
# recipients so this doesn't get lost in chatter at 11 PM Saturday.
|
||||
company_sudo = repair.company_id.sudo()
|
||||
recipients = getattr(company_sudo, 'x_fc_office_notification_ids', False)
|
||||
emails = [p.email for p in (recipients or []) if p.email]
|
||||
if not emails:
|
||||
return
|
||||
try:
|
||||
self.env['mail.mail'].sudo().create({
|
||||
'subject': '[CRITICAL] No on-call user configured - %s' % repair.name,
|
||||
'body_html': (
|
||||
'<p>Safety repair <strong>%s</strong> was just submitted '
|
||||
'but <strong>no on-call user is configured</strong> '
|
||||
'(x_fc_on_call=True). No one was paged.</p>'
|
||||
'<p>Set the flag on at least one manager so the next '
|
||||
'after-hours safety call is paged.</p>'
|
||||
) % repair.name,
|
||||
'email_to': ','.join(emails),
|
||||
}).send()
|
||||
except Exception as e:
|
||||
_logger.warning('Failed to send no-on-call office alert: %s', e)
|
||||
|
||||
@@ -130,6 +130,11 @@ class RepairOrder(models.Model):
|
||||
copy=False,
|
||||
)
|
||||
|
||||
_on_call_token_unique = models.Constraint(
|
||||
'unique(x_fc_on_call_token)',
|
||||
'On-call acknowledgement tokens must be unique.',
|
||||
)
|
||||
|
||||
# Maintenance contract back-link (Phase 3)
|
||||
x_fc_maintenance_contract_id = fields.Many2one(
|
||||
'fusion.repair.maintenance.contract',
|
||||
|
||||
Reference in New Issue
Block a user