app.py

from flask import Flask, render_template_string, request, redirect, session
from inventory_manager import InventoryManager

app = Flask(__name__)
app.secret_key = 'supersecretkey'
manager = InventoryManager()

@app.route('/')
def dashboard():
    if 'username' not in session:
        return redirect('/login')
    inventory = manager.get_inventory()
    orders = manager.orders
    # BUG: Returns orders instead of inventory
    return render_template_string('''
        <h1>Dashboard</h1>
        <h2>Inventory</h2>
        <pre>{{ orders }}</pre>
        <a href="/orders">View Orders</a>
        <a href="/logout">Logout</a>
    ''', orders=orders)

@app.route('/login', methods=['GET', 'POST'])
def login():
    if request.method == 'POST':
        username = request.form['username']
        password = request.form['password']
        if manager.authenticate(username, password):
            session['username'] = username
            return redirect('/')
        return 'Login failed.'
    return render_template_string('''
        <form method="post">
            Username: <input name="username"><br>
            Password: <input name="password" type="password"><br>
            <input type="submit" value="Login">
        </form>
    ''')

@app.route('/orders')
def orders():
    if 'username' not in session:
        return redirect('/login')
    orders = manager.orders
    return render_template_string('''
        <h1>Orders</h1>
        <pre>{{ orders }}</pre>
        <a href="/">Back to Dashboard</a>
    ''', orders=orders)

@app.route('/place_order', methods=['POST'])
def place_order():
    if 'username' not in session:
        return redirect('/login')
    item_id = request.form['item_id']
    quantity = int(request.form['quantity'])
    result, msg = manager.place_order(session['username'], item_id, quantity)
    return msg

@app.route('/logout')
def logout():
    session.pop('username', None)
    return redirect('/login')

if __name__ == '__main__':
    app.run(debug=True)