orion/app/routes/admin_pages.py

# app/routes/admin_pages.py
"""
Admin HTML page routes using Jinja2 templates.

These routes return rendered HTML pages (response_class=HTMLResponse).
Separate from admin API routes which return JSON data.

All routes require admin authentication except /login.
Authentication failures redirect to /admin/login.

Routes:
- GET /              → Redirect to /admin/login
- GET /login         → Admin login page (no auth)
- GET /dashboard     → Admin dashboard (auth required)
- GET /vendors       → Vendor list page (auth required)
- GET /vendors/create → Create vendor form (auth required)
- GET /vendors/{vendor_code} → Vendor details (auth required)
- GET /vendors/{vendor_code}/edit → Edit vendor form (auth required)
- GET /vendors/{vendor_code}/domains → Vendor domains management (auth required)
- GET /vendors/{vendor_code}/theme → Vendor theme editor (auth required)
- GET /users         → User management page (auth required)
- GET /imports       → Import history page (auth required)
- GET /settings      → Settings page (auth required)
- GET /platform-homepage → Platform homepage manager (auth required)
- GET /content-pages → Content pages list (auth required)
- GET /content-pages/create → Create content page (auth required)
- GET /content-pages/{page_id}/edit → Edit content page (auth required)
- GET /code-quality → Code quality dashboard (auth required)
- GET /code-quality/violations → Violations list (auth required)
- GET /code-quality/violations/{violation_id} → Violation details (auth required)
"""

from fastapi import APIRouter, Depends, Path, Request
from fastapi.responses import HTMLResponse, RedirectResponse
from fastapi.templating import Jinja2Templates
from sqlalchemy.orm import Session

from app.api.deps import (
    get_current_admin_from_cookie_or_header,
    get_current_admin_optional,
    get_db,
)
from models.database.user import User

router = APIRouter()
templates = Jinja2Templates(directory="app/templates")


# ============================================================================
# PUBLIC ROUTES (No Authentication Required)
# ============================================================================


@router.get("/", response_class=RedirectResponse, include_in_schema=False)
async def admin_root(
    current_user: User | None = Depends(get_current_admin_optional),
):
    """
    Redirect /admin/ based on authentication status.

    - Authenticated admin users → /admin/dashboard
    - Unauthenticated users → /admin/login
    """
    if current_user:
        # User is already logged in as admin, redirect to dashboard
        return RedirectResponse(url="/admin/dashboard", status_code=302)

    return RedirectResponse(url="/admin/login", status_code=302)


@router.get("/login", response_class=HTMLResponse, include_in_schema=False)
async def admin_login_page(
    request: Request, current_user: User | None = Depends(get_current_admin_optional)
):
    """
    Render admin login page.

    If user is already authenticated as admin, redirect to dashboard.
    Otherwise, show login form.
    """
    if current_user:
        # User is already logged in as admin, redirect to dashboard
        return RedirectResponse(url="/admin/dashboard", status_code=302)

    return templates.TemplateResponse("admin/login.html", {"request": request})


# ============================================================================
# AUTHENTICATED ROUTES (Admin Only)
# ============================================================================


@router.get("/dashboard", response_class=HTMLResponse, include_in_schema=False)
async def admin_dashboard_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render admin dashboard page.
    Shows platform statistics and recent activity.
    """
    return templates.TemplateResponse(
        "admin/dashboard.html",
        {
            "request": request,
            "user": current_user,
        },
    )


# ============================================================================
# VENDOR MANAGEMENT ROUTES
# ============================================================================


@router.get("/vendors", response_class=HTMLResponse, include_in_schema=False)
async def admin_vendors_list_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendors management page.
    Shows list of all vendors with stats.
    """
    return templates.TemplateResponse(
        "admin/vendors.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get("/vendors/create", response_class=HTMLResponse, include_in_schema=False)
async def admin_vendor_create_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendor creation form.
    """
    return templates.TemplateResponse(
        "admin/vendor-create.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get(
    "/vendors/{vendor_code}", response_class=HTMLResponse, include_in_schema=False
)
async def admin_vendor_detail_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendor detail page.
    Shows full vendor information.
    """
    return templates.TemplateResponse(
        "admin/vendor-detail.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        },
    )


@router.get(
    "/vendors/{vendor_code}/edit", response_class=HTMLResponse, include_in_schema=False
)
async def admin_vendor_edit_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendor edit form.
    """
    return templates.TemplateResponse(
        "admin/vendor-edit.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        },
    )


# ============================================================================
# VENDOR DOMAINS ROUTES
# ============================================================================


@router.get(
    "/vendors/{vendor_code}/domains",
    response_class=HTMLResponse,
    include_in_schema=False,
)
async def admin_vendor_domains_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendor domains management page.
    Shows custom domains, verification status, and DNS configuration.
    """
    return templates.TemplateResponse(
        "admin/vendor-domains.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        },
    )


# ============================================================================
# VENDOR THEMES ROUTES
# ============================================================================


@router.get(
    "/vendors/{vendor_code}/theme", response_class=HTMLResponse, include_in_schema=False
)
async def admin_vendor_theme_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendor theme customization page.
    Allows admins to customize colors, fonts, layout, and branding.
    """
    return templates.TemplateResponse(
        "admin/vendor-theme.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        },
    )


# ============================================================================
# USER MANAGEMENT ROUTES
# ============================================================================


@router.get("/users", response_class=HTMLResponse, include_in_schema=False)
async def admin_users_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render users management page.
    Shows list of all platform users.
    """
    return templates.TemplateResponse(
        "admin/users.html",
        {
            "request": request,
            "user": current_user,
        },
    )


# ============================================================================
# IMPORT MANAGEMENT ROUTES
# ============================================================================


@router.get("/imports", response_class=HTMLResponse, include_in_schema=False)
async def admin_imports_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render imports management page.
    Shows import history and status.
    """
    return templates.TemplateResponse(
        "admin/imports.html",
        {
            "request": request,
            "user": current_user,
        },
    )


# ============================================================================
# SETTINGS ROUTES
# ============================================================================


@router.get("/settings", response_class=HTMLResponse, include_in_schema=False)
async def admin_settings_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render admin settings page.
    Platform configuration and preferences.
    """
    return templates.TemplateResponse(
        "admin/settings.html",
        {
            "request": request,
            "user": current_user,
        },
    )


# ============================================================================
# CONTENT MANAGEMENT SYSTEM (CMS) ROUTES
# ============================================================================


@router.get("/platform-homepage", response_class=HTMLResponse, include_in_schema=False)
async def admin_platform_homepage_manager(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render platform homepage manager.
    Allows editing the main platform homepage with template selection.
    """
    return templates.TemplateResponse(
        "admin/platform-homepage.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get("/content-pages", response_class=HTMLResponse, include_in_schema=False)
async def admin_content_pages_list(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render content pages list.
    Shows all platform defaults and vendor overrides with filtering.
    """
    return templates.TemplateResponse(
        "admin/content-pages.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get(
    "/content-pages/create", response_class=HTMLResponse, include_in_schema=False
)
async def admin_content_page_create(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render create content page form.
    Allows creating new platform defaults or vendor-specific pages.
    """
    return templates.TemplateResponse(
        "admin/content-page-edit.html",
        {
            "request": request,
            "user": current_user,
            "page_id": None,  # Indicates this is a create operation
        },
    )


@router.get(
    "/content-pages/{page_id}/edit",
    response_class=HTMLResponse,
    include_in_schema=False,
)
async def admin_content_page_edit(
    request: Request,
    page_id: int = Path(..., description="Content page ID"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render edit content page form.
    Allows editing existing platform or vendor content pages.
    """
    return templates.TemplateResponse(
        "admin/content-page-edit.html",
        {
            "request": request,
            "user": current_user,
            "page_id": page_id,
        },
    )


# ============================================================================
# DEVELOPER TOOLS - COMPONENTS & TESTING
# ============================================================================


@router.get("/components", response_class=HTMLResponse, include_in_schema=False)
async def admin_components_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render UI components library page.
    Reference for all available UI components.
    """
    return templates.TemplateResponse(
        "admin/components.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get("/icons", response_class=HTMLResponse, include_in_schema=False)
async def admin_icons_page(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render icons browser page.
    Browse and search all available icons.
    """
    return templates.TemplateResponse(
        "admin/icons.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get("/testing", response_class=HTMLResponse, include_in_schema=False)
async def admin_testing_hub(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render testing hub page.
    Central hub for all test suites and QA tools.
    """
    return templates.TemplateResponse(
        "admin/testing-hub.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get("/test/auth-flow", response_class=HTMLResponse, include_in_schema=False)
async def admin_test_auth_flow(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render authentication flow testing page.
    Tests login, logout, token expiration, and protected routes.
    """
    return templates.TemplateResponse(
        "admin/test-auth-flow.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get(
    "/test/vendors-users-migration",
    response_class=HTMLResponse,
    include_in_schema=False,
)
async def admin_test_vendors_users_migration(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render vendors and users migration testing page.
    Tests CRUD operations, data migration, and form validation.
    """
    return templates.TemplateResponse(
        "admin/test-vendors-users-migration.html",
        {
            "request": request,
            "user": current_user,
        },
    )


# ============================================================================
# CODE QUALITY & ARCHITECTURE ROUTES
# ============================================================================


@router.get("/code-quality", response_class=HTMLResponse, include_in_schema=False)
async def admin_code_quality_dashboard(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render code quality dashboard.
    Shows architecture violations, trends, and technical debt score.
    """
    return templates.TemplateResponse(
        "admin/code-quality-dashboard.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get(
    "/code-quality/violations", response_class=HTMLResponse, include_in_schema=False
)
async def admin_code_quality_violations(
    request: Request,
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render violations list page.
    Shows all violations with filtering and sorting options.
    """
    return templates.TemplateResponse(
        "admin/code-quality-violations.html",
        {
            "request": request,
            "user": current_user,
        },
    )


@router.get(
    "/code-quality/violations/{violation_id}",
    response_class=HTMLResponse,
    include_in_schema=False,
)
async def admin_code_quality_violation_detail(
    request: Request,
    violation_id: int = Path(..., description="Violation ID"),
    current_user: User = Depends(get_current_admin_from_cookie_or_header),
    db: Session = Depends(get_db),
):
    """
    Render violation detail page.
    Shows violation details, code context, assignments, and comments.
    """
    return templates.TemplateResponse(
        "admin/code-quality-violation-detail.html",
        {
            "request": request,
            "user": current_user,
            "violation_id": violation_id,
        },
    )