OpenConstructionERP Files

OpenConstructionERP v5.0.0

First release to land community-contributor work directly on main. Welcome @Mourdi59 and @rjohny55 to the contributors list (AUTHORS.md).

Highlights

• BIM viewer — fixed three independent bugs that left the viewer blank or misleading after a successful CAD conversion: COLLADA <ns0:> namespace serialisation, defence-in-depth regex tolerance, and degraded model status handling. (#159 by @Mourdi59)
• AI providers — Kimi (Moonshot AI), Ollama, vLLM added as first-class providers. Ollama / vLLM accept a custom Server URL for on-prem deployments. Alembic v3141_ai_kimi_api_key for the new encrypted-secret column. (#161 by @rjohny55)
• Concurrency safety — defensive guards in the slow-query SQLAlchemy listener (conn.info.pop on closed connections) and the module-presence probe (InFailedSQLTransactionError from concurrent shared-session probes). (#161 by @rjohny55)
• FieldReport activity rollup — fixed an AttributeError waiting in the dashboard rollup: FieldReport has no title column. Replaced with coalesce(work_performed, report_type). (#161 by @rjohny55)
• Qdrant snapshot restore — switched to multipart upload via qdrant_snapshot_loader so app-container snapshots reach a separate Qdrant container; client.recover_snapshot() only accepts URIs the Qdrant server itself can fetch. (#161 by @rjohny55)
• Sign-up password strength — minimum length (8 chars) + at least one letter + at least one digit. Backend FastAPI validation arrays now flattened in the UI banner. Sign-up only — existing users keep their passwords. (#161 by @rjohny55)
• Marketing site — removed the duplicate "All modules · same as the in-app menu" grid; the "One install. The whole construction stack." overview now stands alone. Fixed 513 i18n strings × 20 locales that had HTML entities (&, ·, ’, …) rendering literally as text instead of as their proper Unicode characters.

Bundled from v4.12.0 deep-audit wave

• R7 security pattern revival in CRM (orphan tests restored), QMS (QMSAuditLog model + alembic v3140), EAC (tenant-scoped + magic-byte + Decimal-string).
• QuickEstimatePage accessibility — all 10 deferred a11y findings closed (4 P1 + 6 P2).
• QA screenshot harness parameterized for locale / theme / viewport / route-limit; new axe-sweep.spec.ts for accessibility scans.

Known follow-ups (tracked in task list)

• P0 Arabic locale renders blank on authenticated routes — needs investigation of RTL boot path.
• P0 88 axe-critical violations (76 button-name + 10 select-name + 2 aria-required-children) across 23 routes.
• P1 BOQ TOTAL VALUE NaN in some currency pairs (#157).
• P1 Authenticated / should redirect to /projects not marketing landing.
• P1 Dark theme leaks — yellow demo banner + /boq light surface.
• P1 863 color-contrast WCAG-AA violations.

Three hunks from [#161] were held back for follow-up discussion (Docker-only SQLITE_URL, CREATE TABLE schema duplication, urllib→requests vs project-wide httpx).

Full diff

https://github.com/DataDrivenConstruction/OpenConstructionERP/compare/v4.12.0...v5.0.0

Thanks

@Mourdi59, @rjohny55, @skolodi (issue reports), and every contributor on https://github.com/datadrivenconstruction/OpenConstructionERP/graphs/contributors.