From 6789f0899a16c8b798279e31bc78c2f8ed8bc1ce Mon Sep 17 00:00:00 2001
From: Javier <javier@local>
Date: Fri, 23 Jan 2026 09:14:20 -0600
Subject: [PATCH] V1.0.0.5 - Refactor app.py: Split User, Session, and Admin
 logic into blueprints

---
 app.py                                        |  90 +-----------------
 .../admin_locations.cpython-313.pyc           | Bin 0 -> 3856 bytes
 blueprints/admin_locations.py                 |  89 +++++++++++++++++
 database/scanlook.db                          | Bin 9826304 -> 9826304 bytes
 4 files changed, 93 insertions(+), 86 deletions(-)
 create mode 100644 blueprints/__pycache__/admin_locations.cpython-313.pyc
 create mode 100644 blueprints/admin_locations.py

diff --git a/app.py b/app.py
index fa18fa6..be47068 100644
--- a/app.py
+++ b/app.py
@@ -16,11 +16,14 @@ from db import query_db, execute_db, get_db
 from blueprints.data_imports import data_imports_bp
 from blueprints.users import users_bp
 from blueprints.sessions import sessions_bp
-from utils import login_required, role_required
+from blueprints.admin_locations import admin_locations_bp
+from utils import login_required
 
+# Register Blueprints
 app.register_blueprint(data_imports_bp)
 app.register_blueprint(users_bp)
 app.register_blueprint(sessions_bp)
+app.register_blueprint(admin_locations_bp)
 
 # V1.0: Use environment variable for production, fallback to demo key for development
 app.secret_key = os.environ.get('SCANLOOK_SECRET_KEY', 'scanlook-demo-key-replace-for-production')
@@ -241,91 +244,6 @@ def complete_location(location_count_id):
     return jsonify({'success': True, 'message': 'Bin marked as complete'})
 
 
-@app.route('/location/<int:location_count_id>/reopen', methods=['POST'])
-@login_required
-def reopen_location(location_count_id):
-    """Reopen a completed location (admin/owner only)"""
-    # Check permissions
-    user = query_db('SELECT role FROM Users WHERE user_id = ?', [session['user_id']], one=True)
-    if not user or user['role'] not in ['owner', 'admin']:
-        return jsonify({'success': False, 'message': 'Permission denied'}), 403
-    
-    # Verify location exists
-    loc = query_db('SELECT * FROM LocationCounts WHERE location_count_id = ?', [location_count_id], one=True)
-    
-    if not loc:
-        return jsonify({'success': False, 'message': 'Location not found'})
-    
-    # Reopen the location
-    execute_db('''
-        UPDATE LocationCounts
-        SET status = 'in_progress', end_timestamp = NULL
-        WHERE location_count_id = ?
-    ''', [location_count_id])
-    
-    return jsonify({'success': True, 'message': 'Bin reopened for counting'})
-
-
-@app.route('/location/<int:location_count_id>/delete', methods=['POST'])
-@login_required
-def delete_location_count(location_count_id):
-    """Delete all counts for a location (soft delete)"""
-    # Verify ownership
-    loc = query_db('SELECT * FROM LocationCounts WHERE location_count_id = ?', [location_count_id], one=True)
-    
-    if not loc:
-        return jsonify({'success': False, 'message': 'Location not found'})
-    
-    if loc['counted_by'] != session['user_id'] and session['role'] not in ['owner', 'admin']:
-        return jsonify({'success': False, 'message': 'Permission denied'})
-    
-    # Soft delete all scan entries for this location
-    execute_db('''
-        UPDATE ScanEntries
-        SET is_deleted = 1
-        WHERE location_count_id = ?
-    ''', [location_count_id])
-    
-    # Delete the location count record
-    execute_db('''
-        DELETE FROM LocationCounts
-        WHERE location_count_id = ?
-    ''', [location_count_id])
-    
-    return jsonify({'success': True, 'message': 'Bin count deleted'})
-
-
-@app.route('/location/<int:location_count_id>/scans')
-@login_required
-def get_location_scans(location_count_id):
-    """Get all scans for a specific location (admin/owner only)"""
-    # Check permissions
-    user = query_db('SELECT role FROM Users WHERE user_id = ?', [session['user_id']], one=True)
-    if not user or user['role'] not in ['owner', 'admin']:
-        return jsonify({'success': False, 'message': 'Permission denied'}), 403
-    
-    try:
-        scans = query_db('''
-            SELECT 
-                se.*,
-                bic.system_bin as current_system_location,
-                bic.system_quantity as current_system_weight
-            FROM ScanEntries se
-            LEFT JOIN BaselineInventory_Current bic ON se.lot_number = bic.lot_number
-            WHERE se.location_count_id = ?
-            AND se.is_deleted = 0
-            ORDER BY se.scan_timestamp DESC
-        ''', [location_count_id])
-        
-        # Convert Row objects to dicts
-        scans_list = [dict(scan) for scan in scans] if scans else []
-        
-        return jsonify({'success': True, 'scans': scans_list})
-    
-    except Exception as e:
-        return jsonify({'success': False, 'message': str(e)})
-
-
 @app.route('/count/<int:session_id>/location/<int:location_count_id>')
 @login_required
 def count_location(session_id, location_count_id):
diff --git a/blueprints/__pycache__/admin_locations.cpython-313.pyc b/blueprints/__pycache__/admin_locations.cpython-313.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..3738e32f8650b9a56ede13a424e05da49ee94d40
GIT binary patch
literal 3856
zcmcInO>7&-6`uVQDUuQ`QL-%6wI{Ayi$*NDu$0=0q*M~ASkw;%Et#|xQDQ|d<xR+4
zd1e_$I{D~ZTeL2WAO~NSQ;McVE(MyP2OpOuiUf<aagd@wdMK1iC|dQ>H?v%dw52*g
z(E<2&e%^cY=Dqpe8}4^?g%Gs2engGmbRqOP8~9CWboT!So%={ds<4Ps0ufRo5mOS8
zFq;z><&;8{R0rwcV`(vv3X&j3IpG3Q<y_~u=;<M$Txe~;SAO(W6}4kjPy;u_Tu==T
zq4CC&|0R(V<T_jALdVE;ogfz;7rZTCzsNCi-J4zU?k^ZiTyi^S%T;}g7^dw8UZa+2
zl(yXf)hRVBGcLNp+f|)x=ZhO|NPkl=RBavlal!2_TbqWNC;IKGLG+><)ru7um#u<k
zgCyM<9`*a9lc0RUALR>H)wJ_Qae9>K)|PI%@@iVmfXYBcw{KZRT4-3$&(Hx>g5UmQ
zAotOFb4?Z28-7O+BNj^Vv82j3BvZ%=!!Tw|>qICks0v$GJ6;57?G!@me&mrFP=jjc
zi0FGv4ULHxTXzX(kMxRJ(brq-enLy6RSRec@a@^IT}*?2M{w)jlG@!a6_4(WtZ}Dc
z4HvA+R#~_8BKBQ}hq;qStvjYpuw|CF<A=j)aw$2N!Ne--cz!LtjI&fH6u){ixt7FL
z=!2{A6n@DKGzOVn!IdmicV#BCE4m8T=PF$J{9(_kPAUeEKQ8K~p%;NCK&yoUTnZK>
zO0`Y>i=Too53e_NzwB+j)QJ8Z3$bs5Z+$cH%$mbqpBI~!jY}X<+_@XVjh0<a%w&?-
z=kfG4SJh+&Q(LpE6jWV;Ten55O#*gZdLHX$F>f1Sq^(u9V0k6GwA2*zoN}x|oM&fn
z)-bVmEy3?4i$E0MD2BNimkGOygxwq>Gr}Sa`005{ohvg>yAmu=c6H%Q?)Ab%PR(TJ
z=X0xT=@bM^&8Y>=T(Yd!a~nPYY3>OSjcjeZQO}$vvIqv1Y;SrW$X#?0LXkeFZ~Auw
zj|OWqs`K59^MfDO!uh+2KZT<|9(&O7lS${&je6|HC(+Xn$DQ$;wSk3tH1%lCiKd-k
z`k(`aV@_<@S=F5MhI6Z23svsU{UzMpU|*;Wr0UT{C%6clN^}p&r-FMy6h7;8o;~Q4
zm2(FX6p1~sovVwr*it>b?8wXeU>N!;381L63w}J_{|Y+V@y?Mbs!}_`ITD$hc~fPU
zZIAGLk)c1pg0{|r#+w>s<B2<v3%=Gi-^u3H5YG|}->q81?OI##9eD!ZCnNtzp9sir
zvyve{!M%aCa@o6elwUxt1^(13*?>vrv^W_8V>2WQbe_OD5IGIR4e<-B7xNq21kQj+
z4<o&d^aI(+H^I=r7`ui^(<X*an@bE}2F-grvF!2f=F&4EbcD79WF`PHPf8~s`I*{!
z7$EtP8s{$hK;#(YXyiZ?$ys*Bb3iDo3mB90@NxUSLp0&zWg&8rvA~bM4TOW}E27|W
zAarlC7C7_v%MTZ7XGiLRk@vpy{tLf&$w}qv*K+L`bAqXpK-0~!BmtHHe;i8z39tlM
z=2)7m#S-;!(vg$oIWTbN(zA;xg*djCPUaVO<@Q%0RkuUw|5rNCJyksY(r31mPYr^V
z6=UcXiHf5Tuo$`tm(`SxV3n2plDsM|L&*+9xTt7KX<-zZa!Uc1va%X!1w0i!&JubK
ztq0-!yakX3o-~yf$-sKpU(G81Zmk8Giszwxo63xGvGFYlB{U_SM<pTNy>tC#-R5ZJ
zu5W;qZs`T1WE5IZ`&7{;@DN2DogRLVFgnjc%8^V4fk}G{Lf6C|6cXGhxNUQ6p6Vl)
zpMPq0!zhf<ZEEY4{00C?qqtBdM2GiRW7aQT|5fyMRf8I6ZyzInM>jTa*=_rBytiZ(
zFs*HUDLJ3Psr14Mp4F&cHcWlNd;?6f;F&q+S%<-HoL*svDqD8mtX4MQ!866CTPE7H
zdYOa^crVbl=SCar%u0f3ZcA`i+c?r|iR2od{XS!3!EJd_B$Db}lQ%9B_TG0DegjtG
z@E3tamS-iFpIo_U6l}LM`DQ`iV$Wh%qBa3Go~ypjc)!Kjn7kX}TJmLs+OD8eriw+@
z&t$!ux_y+!I4`*ZJX7$azXtL@zXkT>m@@szsWW>hG!)tELs9H>;r;$l&xL!+KZelt
zsoiY7|Jpm*hnb%hAB_F{wcYIR`>*}>!oAR+;b}4U?&aFRR6RQF1gHP?cLkju`{zLr
zMf&%V07}{0<308Lo?pIF8<?y|r~VL}`uCm$D~EIxO#juHnF;hkSO3ho{K17@)*n|G
zoe0f-Q~FRoJ&UCehXmHg3ec5!)KyAljlND;g7e;E%<HaL-0)(+lAo(oZKF&HO9E~%
zpEtFNp3l3zPrS178(XeIEck1~-&VXfaL?`{o_)PS5}d49#cElfChUJ3z!K4SfWRRH
z;Zt;_hOT^yzVSzdKkGl|oWJ_+aJ~OU2lYM{Vjl^EHDS;hN<4bw(Jcph!mA$((J#e5
zVMW-Nka&ub?+JS{o7fvcV&6#;XN3872{y6!LW{&)T}W`{L&9`ZcT)ILhA}_Oe*kEI
BqXGZ`

literal 0
HcmV?d00001

diff --git a/blueprints/admin_locations.py b/blueprints/admin_locations.py
new file mode 100644
index 0000000..5a96514
--- /dev/null
+++ b/blueprints/admin_locations.py
@@ -0,0 +1,89 @@
+from flask import Blueprint, jsonify, session
+from db import query_db, execute_db
+from utils import login_required
+
+admin_locations_bp = Blueprint('admin_locations', __name__)
+
+@admin_locations_bp.route('/location/<int:location_count_id>/reopen', methods=['POST'])
+@login_required
+def reopen_location(location_count_id):
+    """Reopen a completed location (admin/owner only)"""
+    # Check permissions
+    user = query_db('SELECT role FROM Users WHERE user_id = ?', [session['user_id']], one=True)
+    if not user or user['role'] not in ['owner', 'admin']:
+        return jsonify({'success': False, 'message': 'Permission denied'}), 403
+    
+    # Verify location exists
+    loc = query_db('SELECT * FROM LocationCounts WHERE location_count_id = ?', [location_count_id], one=True)
+    
+    if not loc:
+        return jsonify({'success': False, 'message': 'Location not found'})
+    
+    # Reopen the location
+    execute_db('''
+        UPDATE LocationCounts
+        SET status = 'in_progress', end_timestamp = NULL
+        WHERE location_count_id = ?
+    ''', [location_count_id])
+    
+    return jsonify({'success': True, 'message': 'Bin reopened for counting'})
+
+
+@admin_locations_bp.route('/location/<int:location_count_id>/delete', methods=['POST'])
+@login_required
+def delete_location_count(location_count_id):
+    """Delete all counts for a location (soft delete)"""
+    # Verify ownership
+    loc = query_db('SELECT * FROM LocationCounts WHERE location_count_id = ?', [location_count_id], one=True)
+    
+    if not loc:
+        return jsonify({'success': False, 'message': 'Location not found'})
+    
+    if loc['counted_by'] != session['user_id'] and session['role'] not in ['owner', 'admin']:
+        return jsonify({'success': False, 'message': 'Permission denied'})
+    
+    # Soft delete all scan entries for this location
+    execute_db('''
+        UPDATE ScanEntries
+        SET is_deleted = 1
+        WHERE location_count_id = ?
+    ''', [location_count_id])
+    
+    # Delete the location count record
+    execute_db('''
+        DELETE FROM LocationCounts
+        WHERE location_count_id = ?
+    ''', [location_count_id])
+    
+    return jsonify({'success': True, 'message': 'Bin count deleted'})
+
+
+@admin_locations_bp.route('/location/<int:location_count_id>/scans')
+@login_required
+def get_location_scans(location_count_id):
+    """Get all scans for a specific location (admin/owner only)"""
+    # Check permissions
+    user = query_db('SELECT role FROM Users WHERE user_id = ?', [session['user_id']], one=True)
+    if not user or user['role'] not in ['owner', 'admin']:
+        return jsonify({'success': False, 'message': 'Permission denied'}), 403
+    
+    try:
+        scans = query_db('''
+            SELECT 
+                se.*,
+                bic.system_bin as current_system_location,
+                bic.system_quantity as current_system_weight
+            FROM ScanEntries se
+            LEFT JOIN BaselineInventory_Current bic ON se.lot_number = bic.lot_number
+            WHERE se.location_count_id = ?
+            AND se.is_deleted = 0
+            ORDER BY se.scan_timestamp DESC
+        ''', [location_count_id])
+        
+        # Convert Row objects to dicts
+        scans_list = [dict(scan) for scan in scans] if scans else []
+        
+        return jsonify({'success': True, 'scans': scans_list})
+    
+    except Exception as e:
+        return jsonify({'success': False, 'message': str(e)})
\ No newline at end of file
diff --git a/database/scanlook.db b/database/scanlook.db
index 5795be98ee5c8504a09ca417c414bb5849e0890a..72e0bcb391d60c8a655bcbc1e2e58b87f635b427 100644
GIT binary patch
delta 1141
zcmaLTNl#Nz7{>8?u}E9E_kaq@T&;=<=xuKqtYR6&83932QK6Qq)lw=gASjcfh$A?}
zg)!j^m}rP}VUYL<bmxkQAHanh5;w+w4K|Gn7r)J$^E~H0XJqk<VFZ)ea^+M`ja>P*
z-Q|)^Gt(}&mMKY+Nm-CYk(g6|s_(>rI;J+N7G)tawK%F6Bh!<C?nHC7k}S#TvaaVp
zZ5_(VvupO!V$D`;*DbaZr_JuvZJw^qpx+zzb~GAi76xC*RaNF_#6(1vjfNH?v6L1~
zIULTC(%2|gR30muc|W}G%{tL1nM6~f_#s}4m*SiFBql_Y_#j?1TJqOKrWZ$lB}I4K
zlH^D;$X40l3$z8hyDoNnLm}nQBr$HH^4e6{5W7NoG47HNqzZ$aA2&6Re|5=7zzP_U
zh?Pi!5hg^>B_jn2R0yOZ4XdykYmkl%ti?KHA`98bK`!!;4-3{~L*%Q=x+$1pO8K0i
z7K(ahR(+^6sNcm$B`xK1B<qcJHf7jlGE3G1lP*b_>CLrG%?`~{Y-u=np~vrU3ts9E
z`8;la+%IcoPQA>jIozJGuh(1W_5~`86j+xFyrJ-Nfv4Z&_qKVudII5p;-yYqi^b(Y
zq+!n5kx-qQONY)9(bE-4ah-pcs;T*3r&cz;G;hU5Y{F&~U<<Zl8wyc`Vr<6_Xt2Q!
z9S)SB6w%Id?1U4$up1TF0~ab$g=*AbFKV$5`*8pVaR`TT1a&xydNiOB$Iygk9LEW?
z;3Q7rG+J>6XK@Z~Xonl;;XwzyxPXhe1RpNr3jF9q09^>;D!LIu7(M7kAFiPv1GtVG
t7{m~UF@jOt#4U{BHtt{?cQJu`xQ_>Th(~ygNlf7hp5j?#Y5uuc`wgH1_p$&0

delta 935
zcmZY2+f$5j9LMqJw|3h@J<qSGbkyn*QL)Fc4l5<))RxG(q9lh(A(pfeD~Z-&_QIIi
zf51%5j@FE+{sfmUOv)eN!c8-7jCXDrX1=eR&wS_e2`zjwhA^Hhe386L;hSvn`$bYb
z=5KXm%b;Ra=M-5gr?ns2J2|QiYxSC4ol8U(hEz);Hr_R5iq8$a5fzG}q=_QoR&-&p
z7#bU#4qLJ!GOSC1uo#<M4i{Hm=5Us|9CoMI=kfTw<(*y4J-yu>z3qK{@ehO56Is+)
zWxJ5y<y-k$ew82Pi0qd$GFophNKeEThJKotR*TJ^G^5ak>8}F$U!wg^jDLQjVZW$J
z{WlHI`vnYG1|v*Jf*BTAVM8)fphAO0D$=kVE0B&1WMU<<kc}MVA`kgkg#y^I8ik2@
zzh2annWP2`T8XSvr?fFOpnX$5C)e77iJS?2DkU0<>uNMMshfl``ei~dj=ql+R*A+$
zU|Mf8nCtR&tJ|$ay)*i@@ZzkFH7LSbtV1!@V*^T1iZX1(COF`P3vPJeML9NO3%0_C
zrH$>_ft~PU7b>tDm8ilVRAVn{P>X%oj{`V}L#RUl^=QChG~x)3q6x=v94BxRr*Il)
z(2N$e;w;Xg4edCO4qQMdF5(g{;|jXajUHS@FZyr|*Kq^=xQSZ`;x_JJ0CzEn5QcCM
k_c4qIc!)3_VFZsciYFMuQ#`{sB6yA$c$rw7ePwg}0vvP6H~;_u