Files
Odoo-Modules/fusion_plating/fusion_plating/__manifest__.py
gsinghpal f07e1bcce1 fix(chatter): wrap HTML message_post bodies in Markup() — 4 sites
Four message_post calls were passing strings with HTML tags as
plain `body=_(...)` instead of `body=Markup(_(...))`. Odoo escapes
non-Markup strings, so the chatter rendered "<b>QA Review failed</b>"
as literal text instead of bolding it.

Original bug surfaced via the Contract Review (QA-005) flow:
  body: "&lt;b&gt;QA Review failed&lt;/b&gt; by Garry Singh. Awaiting
  client information.&lt;br/&gt;&lt;b&gt;Reason:&lt;/b&gt;&lt;br/&gt;
  &lt;div data-oe-version=\"2.0\"&gt;Need to get updated
  drawing...&lt;/div&gt;"

Audit scan turned up three more identical patterns:

  fusion_plating/models/fp_parent_numbered_mixin.py:118
     "Issued <strong>%s</strong> to ..."
  fusion_plating_jobs/models/sale_order.py:282
     "Confirmed quote <strong>%s</strong> as <strong>%s</strong>."
  fusion_plating_quality/models/fp_contract_review.py:430
     "<b>QA Review failed</b> by ... <b>Reason:</b><br/>%(reason)s"
  fusion_plating_quality/models/fp_contract_review.py:524
     "<b>QA Review completed</b> by ... <b>Special Instructions
      captured:</b><br/>%(notes)s"

Fixes:
- Wrapped each body=_(...) with Markup(_(...)) using the
  Markup(template) % values pattern (auto-escapes the substituted
  values; user-supplied free text stays safe).
- For Html-field substitutions (qa_failure_reason,
  special_instructions), explicitly wrapped the value in Markup()
  so already-formatted HTML editor content (with data-oe-version="2.0"
  wrapper divs) flows through without being re-escaped.
- Added `from markupsafe import Markup` to the two files that
  didn't already import it (mixin + contract_review).

Drift cleanup: pulled the 180-line newer fp_contract_review.py
from entech to the local repo (added action_qa_review_failed,
action_open_client_email_wizard, action_view_client_emails,
action_complete_after_info, awaiting_info state, qa_failure_reason
+ special_instructions Html fields, etc. that had been edited on
entech without being committed).

Tested by re-posting via odoo shell on review 10: body now stores
"<b>QA Review failed</b>..." with literal HTML tags instead of
the double-escaped "&lt;b&gt;..." entities. Old chatter records
with the bad escape stay as-is in the audit trail.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-13 08:41:39 -04:00

157 lines
6.4 KiB
Python

# -*- coding: utf-8 -*-
# Copyright 2026 Nexa Systems Inc.
# License OPL-1 (Odoo Proprietary License v1.0)
# Part of the Fusion Plating product family.
{
'name': 'Fusion Plating',
'version': '19.0.18.15.16',
'category': 'Manufacturing/Plating',
'summary': 'Core plating / metal finishing ERP: facilities, processes, tanks, baths, jobs, operators.',
'description': """
Fusion Plating — Core
=====================
Part of the Fusion Plating product family by Nexa Systems Inc.
Fusion Plating is a configurable, multi-tenant capable ERP for plating and metal
finishing shops. This core module provides the process-agnostic foundation that
every shop needs regardless of size, process mix, jurisdiction, or industry.
The core ships intentionally empty of region-specific or process-specific
content — that comes from add-on modules:
* fusion_plating_process_en — Electroless nickel plating
* fusion_plating_process_chrome — Chrome coating (hex or trivalent)
* fusion_plating_process_anodize — Aluminum anodizing (Type II, III)
* fusion_plating_process_black_oxide — Black oxidizing
* fusion_plating_quality — QMS (NCR, CAPA, calibration, CoC, doc control)
* fusion_plating_compliance — Generic compliance framework
* fusion_plating_compliance_on — Ontario regulatory pack
* fusion_plating_compliance_tor — Toronto Ch. 681 municipal pack
* fusion_plating_safety — SDS, WHMIS/TDG training, JHSC, exposure
* fusion_plating_shopfloor — Tablet operator stations, QR scanning
* fusion_plating_portal — Customer portal
* fusion_plating_aerospace — AS9100 + Nadcap AC7108 pack
* fusion_plating_nuclear — CSA N299, CNSC, NQA-1 pack
* fusion_plating_cgp — Controlled Goods Program pack
* fusion_plating_logistics — Pickup & delivery
* fusion_plating_culture — Values / fundamentals framework
Core concepts
-------------
* Facility — a physical site with its own tanks, operators, compliance profile
* Process Type — extensible taxonomy of finishing processes
* Work Center — production line or station within a facility
* Tank — physical vessel with QR code and state
* Bath — the chemistry currently in a tank, with its own lifecycle
* Bath Log — daily chemistry readings with pass/fail vs target
* KPI — configurable headline metrics per shop
* Delegation Inbox — single pane of "things waiting for someone"
Design principles
-----------------
1. No client-specific strings in core.
2. No region-specific data in core.
3. No process-specific chemistry in core.
4. Works on both Odoo Community and Enterprise editions.
5. Theme-aware: respects user light/dark mode preference.
6. Multi-facility, multi-company, multi-currency capable.
Copyright (c) 2026 Nexa Systems Inc. All rights reserved.
""",
'author': 'Nexa Systems Inc.',
'website': 'https://www.nexasystems.ca',
'maintainer': 'Nexa Systems Inc.',
'support': 'support@nexasystems.ca',
'license': 'OPL-1',
'price': 0.00,
'currency': 'CAD',
'depends': [
'base',
'mail',
'contacts',
'product',
'stock',
'sale_management',
'purchase',
'hr',
'uom',
],
'data': [
'security/fp_security.xml',
'security/ir.model.access.csv',
'data/fp_landing_data.xml',
'data/fp_sequence_data.xml',
'data/fp_job_sequences.xml',
'data/fp_numbering_sequences.xml',
'data/fp_process_category_data.xml',
# fp_menu.xml MUST load early — defines menu_fp_root, menu_fp_config,
# menu_fp_compliance_hub, plus the 7 Phase-2 Configuration sub-folder
# buckets. Every other view file (in this module and downstream)
# that creates a child menu under those buckets references them
# by xmlid, which has to already exist at parse time.
'views/fp_menu.xml',
'views/fp_process_type_views.xml',
'views/fp_work_center_views.xml',
'views/fp_tank_views.xml',
'views/fp_bath_log_views.xml',
'views/fp_facility_views.xml',
'views/fp_bath_views.xml',
'views/fp_process_node_views.xml',
# Sub 14b — fp.step.kind catalog. MUST load before
# fp_step_template_data.xml (templates reference kinds via
# kind_id) AND before fp_step_template_views.xml (the form
# references the kind action menu).
'views/fp_step_kind_views.xml',
'data/fp_step_kind_data.xml',
'views/fp_step_template_views.xml',
'views/fp_rack_tag_views.xml',
'views/fp_job_step_move_views.xml',
'views/fp_job_step_timelog_views.xml',
'views/fp_rack_views.xml',
'views/fp_bath_replenishment_views.xml',
'views/fp_operator_certification_views.xml',
'views/res_config_settings_views.xml',
'views/fp_landing_views.xml',
'views/fp_work_centre_views.xml',
'views/fp_job_views.xml',
'views/fp_job_step_views.xml',
'views/fp_jobs_menu.xml',
'data/fp_work_role_data.xml',
'views/fp_work_role_views.xml',
'data/fp_recipe_enp_alum_basic.xml',
'data/fp_recipe_enp_steel_basic.xml',
'data/fp_recipe_enp_sp.xml',
'data/fp_recipe_general_processing.xml',
'data/fp_recipe_anodize.xml',
'data/fp_recipe_chem_conversion.xml',
'data/fp_step_template_data.xml',
],
'post_init_hook': 'post_init_hook',
'assets': {
'web.assets_backend': [
'fusion_plating/static/src/scss/fusion_plating.scss',
'fusion_plating/static/src/scss/recipe_tree_editor.scss',
'fusion_plating/static/src/scss/fp_chatter_dark.scss',
'fusion_plating/static/src/scss/simple_recipe_editor.scss',
# Sub 14b — visual icon picker for fp.step.kind etc.
'fusion_plating/static/src/scss/fp_icon_picker.scss',
'fusion_plating/static/src/xml/recipe_tree_editor.xml',
'fusion_plating/static/src/xml/simple_recipe_editor.xml',
'fusion_plating/static/src/xml/fp_icon_picker.xml',
'fusion_plating/static/src/js/recipe_tree_editor.js',
'fusion_plating/static/src/js/simple_recipe_editor.js',
'fusion_plating/static/src/js/fp_icon_picker.js',
],
},
'demo': [
'data/fp_demo_data.xml',
'data/fp_demo_recipe_data.xml',
],
'images': ['static/description/icon.png'],
'installable': True,
'auto_install': False,
'application': True,
}