orion/app/routes/vendor_pages.py

# app/routes/vendor_pages.py
"""
Vendor HTML page routes using Jinja2 templates.

These routes serve HTML pages for vendor-facing interfaces.
Follows the same minimal server-side rendering pattern as admin routes.

All routes except /login require vendor authentication.
Authentication failures redirect to /vendor/{vendor_code}/login.

Routes:
- GET /vendor/{vendor_code}/             → Redirect to login or dashboard
- GET /vendor/{vendor_code}/login        → Vendor login page
- GET /vendor/{vendor_code}/dashboard    → Vendor dashboard
- GET /vendor/{vendor_code}/products     → Product management
- GET /vendor/{vendor_code}/orders       → Order management
- GET /vendor/{vendor_code}/customers    → Customer management
- GET /vendor/{vendor_code}/inventory    → Inventory management
- GET /vendor/{vendor_code}/marketplace  → Marketplace imports
- GET /vendor/{vendor_code}/team         → Team management
- GET /vendor/{vendor_code}/settings     → Vendor settings
"""

from fastapi import APIRouter, Request, Depends, Path
from fastapi.responses import HTMLResponse, RedirectResponse
from fastapi.templating import Jinja2Templates

from app.api.deps import get_current_vendor_user
from models.database.user import User

router = APIRouter()
templates = Jinja2Templates(directory="app/templates")


# ============================================================================
# PUBLIC ROUTES (No Authentication Required)
# ============================================================================

@router.get("/{vendor_code}", response_class=RedirectResponse, include_in_schema=False)
async def vendor_root_no_slash(vendor_code: str = Path(..., description="Vendor code")):
    """
    Redirect /vendor/{code} (no trailing slash) to login page.
    Handles requests without trailing slash.
    """
    return RedirectResponse(url=f"/vendor/{vendor_code}/login", status_code=302)


@router.get("/{vendor_code}/", response_class=RedirectResponse, include_in_schema=False)
async def vendor_root(vendor_code: str = Path(..., description="Vendor code")):
    """
    Redirect /vendor/{code}/ to login page.
    Simple approach - let login page handle authenticated redirects.
    """
    return RedirectResponse(url=f"/vendor/{vendor_code}/login", status_code=302)


@router.get("/{vendor_code}/login", response_class=HTMLResponse, include_in_schema=False)
async def vendor_login_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code")
):
    """
    Render vendor login page.
    No authentication required.

    JavaScript will:
    - Load vendor info via API
    - Handle login form submission
    - Redirect to dashboard on success
    """
    return templates.TemplateResponse(
        "vendor/login.html",
        {
            "request": request,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# AUTHENTICATED ROUTES (Vendor Users Only)
# ============================================================================

@router.get("/{vendor_code}/dashboard", response_class=HTMLResponse, include_in_schema=False)
async def vendor_dashboard_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render vendor dashboard.

    JavaScript will:
    - Load vendor info via API
    - Load dashboard stats via API
    - Load recent orders via API
    - Handle all interactivity
    """
    return templates.TemplateResponse(
        "vendor/admin/dashboard.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# PRODUCT MANAGEMENT
# ============================================================================

@router.get("/{vendor_code}/products", response_class=HTMLResponse, include_in_schema=False)
async def vendor_products_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render products management page.
    JavaScript loads product list via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/products.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# ORDER MANAGEMENT
# ============================================================================

@router.get("/{vendor_code}/orders", response_class=HTMLResponse, include_in_schema=False)
async def vendor_orders_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render orders management page.
    JavaScript loads order list via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/orders.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# CUSTOMER MANAGEMENT
# ============================================================================

@router.get("/{vendor_code}/customers", response_class=HTMLResponse, include_in_schema=False)
async def vendor_customers_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render customers management page.
    JavaScript loads customer list via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/customers.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# INVENTORY MANAGEMENT
# ============================================================================

@router.get("/{vendor_code}/inventory", response_class=HTMLResponse, include_in_schema=False)
async def vendor_inventory_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render inventory management page.
    JavaScript loads inventory data via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/inventory.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# MARKETPLACE IMPORTS
# ============================================================================

@router.get("/{vendor_code}/marketplace", response_class=HTMLResponse, include_in_schema=False)
async def vendor_marketplace_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render marketplace import page.
    JavaScript loads import jobs and products via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/marketplace.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# TEAM MANAGEMENT
# ============================================================================

@router.get("/{vendor_code}/team", response_class=HTMLResponse, include_in_schema=False)
async def vendor_team_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render team management page.
    JavaScript loads team members via API.
    """
    return templates.TemplateResponse(
        "vendor/admin/team.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# SETTINGS
# ============================================================================

@router.get("/{vendor_code}/settings", response_class=HTMLResponse, include_in_schema=False)
async def vendor_settings_page(
        request: Request,
        vendor_code: str = Path(..., description="Vendor code"),
        current_user: User = Depends(get_current_vendor_user)
):
    """
    Render vendor settings page.
    JavaScript loads settings via API.
    """
    return templates.TemplateResponse(
        "vendor/settings.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )