orion/app/api/v1/vendor/pages.py

# app/api/v1/vendor/pages.py
"""
Vendor HTML page routes using Jinja2 templates.

These routes serve HTML pages for vendor-facing interfaces.
Supports both path-based (/vendor/{vendor_code}/) and subdomain-based access.

All routes except /login require vendor authentication.
Authentication failures redirect to /vendor/{vendor_code}/login.

Routes:
- GET /vendor/{vendor_code}/             → Redirect to login or dashboard
- GET /vendor/{vendor_code}/login        → Vendor login page
- GET /vendor/{vendor_code}/dashboard    → Vendor dashboard
- GET /vendor/{vendor_code}/products     → Product management
- GET /vendor/{vendor_code}/orders       → Order management
- GET /vendor/{vendor_code}/customers    → Customer management
- GET /vendor/{vendor_code}/inventory    → Inventory management
- GET /vendor/{vendor_code}/marketplace  → Marketplace imports
- GET /vendor/{vendor_code}/team         → Team management
- GET /vendor/{vendor_code}/settings     → Vendor settings
"""

from fastapi import APIRouter, Request, Depends, Path
from fastapi.responses import HTMLResponse, RedirectResponse
from fastapi.templating import Jinja2Templates
from sqlalchemy.orm import Session

from app.api.deps import get_current_vendor_user, get_db
from models.database.user import User

router = APIRouter()
templates = Jinja2Templates(directory="app/templates")


# ============================================================================
# PUBLIC ROUTES (No Authentication Required)
# ============================================================================

@router.get("/vendor/{vendor_code}/", response_class=RedirectResponse, include_in_schema=False)
async def vendor_root(vendor_code: str = Path(..., description="Vendor code")):
    """
    Redirect /vendor/{code}/ to login page.
    """
    return RedirectResponse(url=f"/vendor/{vendor_code}/login", status_code=302)


@router.get("/vendor/{vendor_code}/login", response_class=HTMLResponse, include_in_schema=False)
async def vendor_login_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code")
):
    """
    Render vendor login page.
    No authentication required.
    """
    return templates.TemplateResponse(
        "vendor/login.html",
        {
            "request": request,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# AUTHENTICATED ROUTES (Vendor Users Only)
# ============================================================================

@router.get("/vendor/{vendor_code}/dashboard", response_class=HTMLResponse, include_in_schema=False)
async def vendor_dashboard_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render vendor dashboard.
    Shows sales metrics, recent orders, and quick actions.
    """
    return templates.TemplateResponse(
        "vendor/dashboard.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# PRODUCT MANAGEMENT
# ============================================================================

@router.get("/vendor/{vendor_code}/products", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/products", response_class=HTMLResponse, include_in_schema=False)
async def vendor_products_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render products management page.
    List, create, edit, and manage products.
    """
    return templates.TemplateResponse(
        "vendor/admin/products.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# ORDER MANAGEMENT
# ============================================================================

@router.get("/vendor/{vendor_code}/orders", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/orders", response_class=HTMLResponse, include_in_schema=False)
async def vendor_orders_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render orders management page.
    View and process orders.
    """
    return templates.TemplateResponse(
        "vendor/admin/orders.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# CUSTOMER MANAGEMENT
# ============================================================================

@router.get("/vendor/{vendor_code}/customers", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/customers", response_class=HTMLResponse, include_in_schema=False)
async def vendor_customers_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render customers management page.
    View and manage customer relationships.
    """
    return templates.TemplateResponse(
        "vendor/admin/customers.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# INVENTORY MANAGEMENT
# ============================================================================

@router.get("/vendor/{vendor_code}/inventory", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/inventory", response_class=HTMLResponse, include_in_schema=False)
async def vendor_inventory_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render inventory management page.
    Track and manage stock levels.
    """
    return templates.TemplateResponse(
        "vendor/admin/inventory.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# MARKETPLACE IMPORTS
# ============================================================================

@router.get("/vendor/{vendor_code}/marketplace", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/marketplace", response_class=HTMLResponse, include_in_schema=False)
async def vendor_marketplace_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render marketplace import page.
    Import products from external marketplaces.
    """
    return templates.TemplateResponse(
        "vendor/admin/marketplace.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# TEAM MANAGEMENT
# ============================================================================

@router.get("/vendor/{vendor_code}/team", response_class=HTMLResponse, include_in_schema=False)
@router.get("/vendor/{vendor_code}/admin/team", response_class=HTMLResponse, include_in_schema=False)
async def vendor_team_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render team management page.
    Manage vendor staff and permissions.
    """
    return templates.TemplateResponse(
        "vendor/admin/team.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# SETTINGS
# ============================================================================

@router.get("/vendor/{vendor_code}/settings", response_class=HTMLResponse, include_in_schema=False)
async def vendor_settings_page(
    request: Request,
    vendor_code: str = Path(..., description="Vendor code"),
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Render vendor settings page.
    Configure vendor preferences and integrations.
    """
    return templates.TemplateResponse(
        "vendor/settings.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": vendor_code,
        }
    )


# ============================================================================
# FALLBACK ROUTES (Query Parameter Based - For backward compatibility)
# ============================================================================

@router.get("/vendor/", response_class=RedirectResponse, include_in_schema=False)
async def vendor_fallback_root():
    """
    Redirect to main site if no vendor code in path.
    User should use /vendor/{code}/ format.
    """
    return RedirectResponse(url="/", status_code=302)


@router.get("/vendor/login", response_class=HTMLResponse, include_in_schema=False)
async def vendor_fallback_login(request: Request):
    """
    Fallback vendor login page (query parameter based).
    For backward compatibility - new code should use /vendor/{code}/login
    """
    return templates.TemplateResponse(
        "vendor/login.html",
        {
            "request": request,
            "vendor_code": None,  # Will be retrieved from query param or localStorage
        }
    )


@router.get("/vendor/dashboard", response_class=HTMLResponse, include_in_schema=False)
async def vendor_fallback_dashboard(
    request: Request,
    current_user: User = Depends(get_current_vendor_user),
    db: Session = Depends(get_db)
):
    """
    Fallback vendor dashboard (query parameter based).
    For backward compatibility - new code should use /vendor/{code}/dashboard
    """
    return templates.TemplateResponse(
        "vendor/dashboard.html",
        {
            "request": request,
            "user": current_user,
            "vendor_code": None,  # Will be retrieved from token or localStorage
        }
    )