import os import json import uuid from datetime import datetime from app.utils.time_utils import now_eastern from flask import (Blueprint, render_template, redirect, url_for, flash, request, current_app, jsonify) from flask_login import login_required, current_user from app import db from app.models.inspection import (Inspection, InspectionTemplate, ChecklistItem, InspectionResult) from app.models.facility import Facility, Area from app.models.issue import Issue from app.models.user import User from app.utils.forms import StartInspectionForm, IssueForm from app.utils.decorators import supervisor_required bp = Blueprint('inspections', __name__, url_prefix='/inspections') ALLOWED_EXTENSIONS = {'jpg', 'jpeg', 'png', 'gif'} INPUT_FIELD_TYPES = { 'text', 'textarea', 'number', 'date', 'email', 'checkbox', 'checkbox_group', 'radio', 'select', 'rating', 'signature', 'image', 'table' } def _save_photo(file_obj, subfolder='inspection_photos'): """Save an uploaded photo; return the relative path or None.""" if not file_obj or not file_obj.filename: return None ext = file_obj.filename.rsplit('.', 1)[-1].lower() if ext not in ALLOWED_EXTENSIONS: return None filename = f"{uuid.uuid4().hex}.{ext}" dest_dir = os.path.join(current_app.config['UPLOAD_FOLDER'], subfolder) os.makedirs(dest_dir, exist_ok=True) file_obj.save(os.path.join(dest_dir, filename)) return f"uploads/{subfolder}/{filename}" def _collect_form_responses(form_fields, existing_responses=None): """ Walk the submitted form data and collect responses keyed by field ID. Returns a dict: { field_id: value_or_list_or_path } Photo uploads are saved to disk; their path is stored as the value. existing_responses: previously saved form data (from inspection.notes). Used to preserve photo paths when no new file is uploaded on resubmit. """ if existing_responses is None: existing_responses = {} responses = {} for field in form_fields: fid = field['id'] ftype = field['type'] if ftype in ('label', 'section', 'button_submit', 'button_print', 'button_email'): continue # display-only, nothing to capture key = f"field_{fid}" if ftype == 'checkbox': responses[fid] = 'true' if request.form.get(key) else 'false' elif ftype == 'checkbox_group': responses[fid] = request.form.getlist(key) elif ftype == 'image': photo_file = request.files.get(key) path = _save_photo(photo_file, subfolder='inspection_photos') if path: # New file uploaded — use the new path responses[fid] = path else: # No new file — preserve the previously saved photo path. # JSON keys are always strings; try both str and original type. existing_path = ( existing_responses.get(str(fid)) or existing_responses.get(fid) or '' ) responses[fid] = existing_path elif ftype == 'table': cols = field.get('col_headers') or ['Column 1'] rows = int(field.get('table_rows') or 3) table_data = [] for r in range(rows): row_data = {} for c_idx, col in enumerate(cols): cell_key = f"{key}_r{r}_c{c_idx}" row_data[col] = request.form.get(cell_key, '') table_data.append(row_data) responses[fid] = table_data elif ftype == 'rating': responses[fid] = request.form.get(key, '0') else: # text, textarea, number, date, email, radio, select, signature responses[fid] = request.form.get(key, '') return responses def _compute_score_from_form(form_fields, responses): """ Derive an overall score from rating fields and checkbox pass/fail fields. Returns a float 0–100 or None if the form has no scoreable fields. """ scoreable = [f for f in form_fields if f['type'] in ('rating', 'checkbox', 'radio')] if not scoreable: return None total, earned = 0, 0 for field in scoreable: fid = field['id'] val = responses.get(fid, '') if field['type'] == 'rating': try: v = int(val) if v == 0: continue # 0 = not answered, skip entirely earned += v total += 5 except (ValueError, TypeError): pass # unparseable = not answered, skip elif field['type'] == 'checkbox': total += 1 if val == 'true': earned += 1 elif field['type'] == 'radio': # Options that look like pass/yes/ok score 1; fail/no/na score 0 total += 1 if val.lower() in ('pass', 'yes', 'ok', 'good', 'acceptable', 'compliant'): earned += 1 return round((earned / total) * 100, 2) if total else None def _validate_required(form_fields, responses): """Return a list of labels for required fields that have empty responses.""" missing = [] for field in form_fields: if not field.get('required'): continue ftype = field['type'] if ftype in ('label', 'section', 'button_submit', 'button_print', 'button_email'): continue val = responses.get(field['id']) empty = ( val is None or val == '' or val == 'false' or val == '0' or val == [] ) if empty: missing.append(field.get('label', 'Untitled field')) return missing # ── List ────────────────────────────────────────────────────────────────────── @bp.route('/') @login_required def index(): page = request.args.get('page', 1, type=int) q = Inspection.query.order_by(Inspection.inspection_date.desc()) if current_user.role == 'inspector': q = q.filter(Inspection.inspector_id == current_user.id) status_filter = request.args.get('status', '') facility_filter = request.args.get('facility_id', '') if status_filter: q = q.filter(Inspection.status == status_filter) if facility_filter.isdigit(): q = q.filter(Inspection.facility_id == int(facility_filter)) inspections = q.paginate(page=page, per_page=20, error_out=False) facilities = Facility.query.filter_by(active=True).order_by(Facility.name).all() return render_template('inspections/list.html', inspections=inspections, facilities=facilities, status_filter=status_filter, facility_filter=facility_filter) # ── Start ───────────────────────────────────────────────────────────────────── @bp.route('/start', methods=['GET', 'POST']) @login_required def start(): form = StartInspectionForm() templates = InspectionTemplate.query.order_by(InspectionTemplate.name).all() facilities = Facility.query.filter_by(active=True).order_by(Facility.name).all() form.template_id.choices = [(t.id, t.name) for t in templates] form.facility_id.choices = [(f.id, f.name) for f in facilities] selected_fid = form.facility_id.data or (facilities[0].id if facilities else None) areas = Area.query.filter_by(facility_id=selected_fid).order_by(Area.name).all() if selected_fid else [] form.area_id.choices = [(0, '— No specific area —')] + [(a.id, a.name) for a in areas] if form.validate_on_submit(): template = InspectionTemplate.query.get_or_404(form.template_id.data) # Guard: template must have a form built in the form editor if not template.get_form_schema(): flash('This template has no form fields yet. Please build the form in the template editor first.', 'warning') return redirect(url_for('inspections.start')) inspection = Inspection( template_id = template.id, facility_id = form.facility_id.data, area_id = form.area_id.data or None, inspector_id = current_user.id, inspection_date = now_eastern(), status = 'in_progress', notes = form.notes.data or None, ) db.session.add(inspection) db.session.commit() flash('Inspection started. Fill in the form below and submit when complete.', 'info') return redirect(url_for('inspections.execute', inspection_id=inspection.id)) return render_template('inspections/start.html', form=form, facilities=facilities) # ── AJAX: areas for a given facility ───────────────────────────────────────── @bp.route('/areas/') @login_required def areas_for_facility(facility_id): areas = Area.query.filter_by(facility_id=facility_id).order_by(Area.name).all() return jsonify([{'id': a.id, 'name': a.name} for a in areas]) # ── Execute — render and submit the template form ───────────────────────────── @bp.route('//execute', methods=['GET', 'POST']) @login_required def execute(inspection_id): inspection = Inspection.query.get_or_404(inspection_id) if current_user.role == 'inspector' and inspection.inspector_id != current_user.id: flash('Access denied.', 'danger') return redirect(url_for('inspections.index')) if inspection.status == 'completed': return redirect(url_for('inspections.view', inspection_id=inspection_id)) template = inspection.template form_fields = template.get_form_schema() # Sort fields by grid position (row then col) for logical reading order form_fields = sorted(form_fields, key=lambda f: (f.get('row', 0), f.get('col', 0))) # Load any previously saved draft responses saved_responses = {} if inspection.notes: try: parsed = json.loads(inspection.notes) if isinstance(parsed, dict) and '_form_data' in parsed: saved_responses = parsed['_form_data'] except (json.JSONDecodeError, TypeError): pass if request.method == 'POST': action = request.form.get('action', 'submit') # Collect all field responses from the submitted form. # Pass saved_responses so existing photo paths are preserved # when no new file is selected on this submission. responses = _collect_form_responses(form_fields, saved_responses) if action == 'submit': # Validate required fields missing = _validate_required(form_fields, responses) if missing: # Save draft so the inspector doesn't lose their work _save_draft(inspection, responses) flash( f'Please complete all required fields before submitting: ' f'{", ".join(missing[:5])}{"…" if len(missing) > 5 else ""}', 'warning' ) return redirect(url_for('inspections.execute', inspection_id=inspection_id)) # Compute score and mark complete score = _compute_score_from_form(form_fields, responses) inspection.overall_score = score inspection.status = 'completed' inspection.completed_at = now_eastern() # Persist the final form data alongside any inspector notes _save_responses(inspection, responses) db.session.commit() flash('Inspection submitted successfully!', 'success') return redirect(url_for('inspections.view', inspection_id=inspection_id)) else: # save draft _save_draft(inspection, responses) db.session.commit() flash('Draft saved. You can continue filling in the form later.', 'success') return redirect(url_for('inspections.execute', inspection_id=inspection_id)) return render_template('inspections/execute.html', inspection=inspection, form_fields=form_fields, saved_responses=saved_responses) def _save_responses(inspection, responses): """Persist final form responses into inspection.notes as JSON.""" existing = {} if inspection.notes: try: existing = json.loads(inspection.notes) except (json.JSONDecodeError, TypeError): existing = {'_inspector_notes': inspection.notes} existing['_form_data'] = responses inspection.notes = json.dumps(existing) def _save_draft(inspection, responses): """Save a draft of form responses — same storage as final, just status stays in_progress.""" _save_responses(inspection, responses) db.session.commit() # ── View ────────────────────────────────────────────────────────────────────── @bp.route('/') @login_required def view(inspection_id): inspection = Inspection.query.get_or_404(inspection_id) if current_user.role == 'inspector' and inspection.inspector_id != current_user.id: flash('Access denied.', 'danger') return redirect(url_for('inspections.index')) template = inspection.template form_fields = sorted(template.get_form_schema(), key=lambda f: (f.get('row', 0), f.get('col', 0))) # Decode saved responses form_data = {} if inspection.notes: try: parsed = json.loads(inspection.notes) if isinstance(parsed, dict): form_data = parsed.get('_form_data', {}) except (json.JSONDecodeError, TypeError): pass issues = inspection.issues.order_by(Issue.reported_at.desc()).all() return render_template('inspections/view.html', inspection=inspection, form_fields=form_fields, form_data=form_data, issues=issues) # ── Flag issue during inspection ────────────────────────────────────────────── @bp.route('//flag-issue', methods=['GET', 'POST']) @login_required def flag_issue(inspection_id): inspection = Inspection.query.get_or_404(inspection_id) if current_user.role == 'inspector' and inspection.inspector_id != current_user.id: flash('Access denied.', 'danger') return redirect(url_for('inspections.index')) form = IssueForm() areas = Area.query.filter_by(facility_id=inspection.facility_id).order_by(Area.name).all() staff = User.query.filter(User.role.in_(['supervisor', 'inspector'])).order_by(User.username).all() form.area_id.choices = [(a.id, a.name) for a in areas] form.assigned_to.choices = [(0, '— Unassigned —')] + [(u.id, u.username) for u in staff] if form.validate_on_submit(): photo_path = _save_photo(form.photo.data, subfolder='issue_photos') issue = Issue( inspection_id = inspection_id, area_id = form.area_id.data, severity = form.severity.data, description = form.description.data, photo_path = photo_path, status = 'open', assigned_to = form.assigned_to.data or None, reported_at = now_eastern(), ) db.session.add(issue) if form.severity.data in ('high', 'critical') and inspection.status != 'completed': inspection.status = 'flagged' db.session.commit() flash('Issue logged successfully.', 'success') return redirect(url_for('inspections.execute', inspection_id=inspection_id)) return render_template('inspections/flag_issue.html', form=form, inspection=inspection) # ── Delete ──────────────────────────────────────────────────────────────────── @bp.route('//delete', methods=['POST']) @login_required @supervisor_required def delete(inspection_id): inspection = Inspection.query.get_or_404(inspection_id) # Capture identifiers for the log before deletion insp_id = inspection.id insp_date = inspection.inspection_date.strftime('%Y-%m-%d %H:%M') facility_name = inspection.facility.name template_name = inspection.template.name inspector_name = inspection.inspector.username # ── Clean up uploaded photos from disk ──────────────────────────────── # Collect photo paths from form data (inspection_photos) and issues photo_paths = [] if inspection.notes: try: notes_data = json.loads(inspection.notes) form_data = notes_data.get('_form_data', {}) if isinstance(notes_data, dict) else {} for val in form_data.values(): if isinstance(val, str) and val.startswith('uploads/'): photo_paths.append(val) except (json.JSONDecodeError, TypeError): pass for issue in inspection.issues.all(): if issue.photo_path: photo_paths.append(issue.photo_path) # Delete the inspection record (cascade removes results and issues) db.session.delete(inspection) db.session.commit() # Remove photo files after successful DB commit for rel_path in photo_paths: abs_path = os.path.join(current_app.config['UPLOAD_FOLDER'], '..', 'static', rel_path) abs_path = os.path.normpath(abs_path) try: if os.path.isfile(abs_path): os.remove(abs_path) except OSError: pass # Non-fatal: log but don't block the response current_app.logger.info( 'INSPECTION DELETED | id=%s | facility="%s" | template="%s" | ' 'date=%s | inspector=%s | deleted_by=%s', insp_id, facility_name, template_name, insp_date, inspector_name, current_user.username ) flash( f'Inspection #{insp_id} ({template_name} — {facility_name}, {insp_date}) ' f'has been permanently deleted.', 'success' ) return redirect(url_for('inspections.index'))