sandwitches 2.3.3__tar.gz → 2.4.0__tar.gz

{sandwitches-2.3.3 → sandwitches-2.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.3
 Name: sandwitches
-Version: 2.3.3
+Version: 2.4.0
 Summary: Add your description here
 Author: Martyn van Dijke
 Author-email: Martyn van Dijke <martijnvdijke600@gmail.com>

{sandwitches-2.3.3 → sandwitches-2.4.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "sandwitches"
-version = "2.3.3"
+version = "2.4.0"
 description = "Add your description here"
 readme = "README.md"
 authors = [

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/forms.py

@@ -138,7 +138,7 @@ class RecipeForm(forms.ModelForm):
             "instructions",
             "price",
             "is_highlighted",
-            "is_community_made",
+            "is_approved",
             "max_daily_orders",
         ]
         widgets = {

sandwitches-2.4.0/src/sandwitches/migrations/0012_rename_is_community_made_historicalrecipe_is_approved_and_more.py

@@ -0,0 +1,22 @@
+# Generated by Django 6.0.1 on 2026-01-25 10:53
+
+from django.db import migrations
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("sandwitches", "0011_alter_historicalrecipe_is_community_made_and_more"),
+    ]
+
+    operations = [
+        migrations.RenameField(
+            model_name="historicalrecipe",
+            old_name="is_community_made",
+            new_name="is_approved",
+        ),
+        migrations.RenameField(
+            model_name="recipe",
+            old_name="is_community_made",
+            new_name="is_approved",
+        ),
+    ]

sandwitches-2.4.0/src/sandwitches/migrations/0013_cartitem.py

@@ -0,0 +1,55 @@
+# Generated by Django 6.0.1 on 2026-01-25 11:12
+
+import django.db.models.deletion
+from django.conf import settings
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        (
+            "sandwitches",
+            "0012_rename_is_community_made_historicalrecipe_is_approved_and_more",
+        ),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="CartItem",
+            fields=[
+                (
+                    "id",
+                    models.BigAutoField(
+                        auto_created=True,
+                        primary_key=True,
+                        serialize=False,
+                        verbose_name="ID",
+                    ),
+                ),
+                ("quantity", models.PositiveIntegerField(default=1)),
+                ("created_at", models.DateTimeField(auto_now_add=True)),
+                ("updated_at", models.DateTimeField(auto_now=True)),
+                (
+                    "recipe",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="cart_items",
+                        to="sandwitches.recipe",
+                    ),
+                ),
+                (
+                    "user",
+                    models.ForeignKey(
+                        on_delete=django.db.models.deletion.CASCADE,
+                        related_name="cart_items",
+                        to=settings.AUTH_USER_MODEL,
+                    ),
+                ),
+            ],
+            options={
+                "verbose_name": "Cart Item",
+                "verbose_name_plural": "Cart Items",
+                "unique_together": {("user", "recipe")},
+            },
+        ),
+    ]

sandwitches-2.4.0/src/sandwitches/migrations/0014_ensure_groups_exist.py

@@ -0,0 +1,22 @@
+from django.db import migrations
+
+
+def create_groups(apps, schema_editor):
+    Group = apps.get_model("auth", "Group")
+    Group.objects.get_or_create(name="admin")
+    Group.objects.get_or_create(name="community")
+
+
+def remove_groups(apps, schema_editor):
+    Group = apps.get_model("auth", "Group")
+    Group.objects.filter(name__in=["admin", "community"]).delete()
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("sandwitches", "0013_cartitem"),
+    ]
+
+    operations = [
+        migrations.RunPython(create_groups, remove_groups),
+    ]

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/models.py

@@ -132,7 +132,7 @@ class Recipe(models.Model):
     )
     tags = models.ManyToManyField(Tag, blank=True, related_name="recipes")
     is_highlighted = models.BooleanField(default=False)
-    is_community_made = models.BooleanField(default=False)
+    is_approved = models.BooleanField(default=False)
     max_daily_orders = models.PositiveIntegerField(
         null=True, blank=True, verbose_name="Max daily orders"
     )
@@ -278,3 +278,29 @@ class Order(models.Model):
 
     def __str__(self):
         return f"Order #{self.pk} - {self.user} - {self.recipe}"
+
+
+class CartItem(models.Model):
+    user = models.ForeignKey(
+        settings.AUTH_USER_MODEL, related_name="cart_items", on_delete=models.CASCADE
+    )
+    recipe = models.ForeignKey(
+        Recipe, related_name="cart_items", on_delete=models.CASCADE
+    )
+    quantity = models.PositiveIntegerField(default=1)
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    class Meta:
+        unique_together = ("user", "recipe")
+        verbose_name = "Cart Item"
+        verbose_name_plural = "Cart Items"
+
+    def __str__(self):
+        return f"{self.user.username}'s cart: {self.recipe.title} (x{self.quantity})"
+
+    @property
+    def total_price(self):
+        if self.recipe.price:
+            return self.recipe.price * self.quantity
+        return 0

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/admin/admin_base.html

@@ -56,6 +56,10 @@
             <i>restaurant</i>
             <span>{% trans "Recipes" %}</span>
         </a>
+        <a href="{% url 'admin_recipe_approval_list' %}" class="{% if request.resolver_match.url_name == 'admin_recipe_approval_list' %}active{% endif %}">
+            <i>how_to_reg</i>
+            <span>{% trans "Approvals" %}</span>
+        </a>
         <a href="{% url 'admin_user_list' %}" class="{% if request.resolver_match.url_name == 'admin_user_list' %}active{% endif %}">
             <i>people</i>
             <span>{% trans "Users" %}</span>

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/admin/dashboard.html

@@ -7,6 +7,7 @@
 {{ block.super }}
 <link href="{% static "dist/main.css" %}" rel="stylesheet">
 <script src="{% static "dist/main.js" %}" defer></script>
+<script src="https://cdn.jsdelivr.net/npm/chart.js"></script><!-- Chart.js TODO -->
 {% endblock %}
 
 {% block content %}

sandwitches-2.4.0/src/sandwitches/templates/admin/recipe_approval_list.html

@@ -0,0 +1,56 @@
+{% extends "admin/admin_base.html" %}
+{% load i18n %}
+
+{% block admin_title %}{% trans "Pending Approvals" %}{% endblock %}
+
+{% block content %}
+<div class="row align-center mb-2">
+    <h5 class="max bold">{% trans "Recipes Awaiting Approval" %}</h5>
+</div>
+
+<table class="border striped no-space">
+    <thead>
+        <tr>
+            <th class="min">{% trans "Image" %}</th>
+            <th class="max">{% trans "Title" %}</th>
+            <th>{% trans "Uploader" %}</th>
+            <th>{% trans "Created" %}</th>
+            <th class="right-align">{% trans "Actions" %}</th>
+        </tr>
+    </thead>
+    <tbody>
+        {% for recipe in recipes %}
+        <tr class="pointer" onclick="location.href='{% url 'admin_recipe_edit' recipe.pk %}'">
+            <td class="min">
+                {% if recipe.image %}
+                <img src="{{ recipe.image_thumbnail.url }}" class="admin-thumb round">
+                {% else %}
+                <div class="admin-thumb round gray1 middle-align center-align">
+                    <i class="extra">restaurant</i>
+                </div>
+                {% endif %}
+            </td>
+            <td class="max">
+                <b>{{ recipe.title }}</b>
+            </td>
+            <td>{{ recipe.uploaded_by.username|default:"-" }}</td>
+            <td>{{ recipe.created_at|date:"SHORT_DATETIME_FORMAT" }}</td>
+            <td class="right-align">
+                <a href="{% url 'admin_recipe_approve' recipe.pk %}" class="button tiny primary round" onclick="event.stopPropagation();">
+                    <i>check</i>
+                    <span>{% trans "Approve" %}</span>
+                </a>
+                <a href="{% url 'admin_recipe_edit' recipe.pk %}" class="button circle transparent" onclick="event.stopPropagation();" title="{% trans 'Edit' %}"><i>edit</i></a>
+                <a href="{% url 'admin_recipe_delete' recipe.pk %}" class="button circle transparent" onclick="event.stopPropagation();" title="{% trans 'Delete' %}"><i>delete</i></a>
+            </td>
+        </tr>
+        {% empty %}
+        <tr>
+            <td colspan="5" class="center-align padding">
+                {% trans "No recipes pending approval." %}
+            </td>
+        </tr>
+        {% endfor %}
+    </tbody>
+</table>
+{% endblock %}

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/admin/recipe_form.html

@@ -82,8 +82,8 @@
 
                 <div class="field middle-align mt-1">
                     <label class="checkbox">
-                        {{ form.is_community_made }}
-                        <span>{{ form.is_community_made.label }}</span>
+                        {{ form.is_approved }}
+                        <span>{{ form.is_approved.label }}</span>
                     </label>
                 </div>
             </article>

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/admin/recipe_list.html

@@ -88,7 +88,7 @@
                 </div>
             </td>
             <td class="min center-align">
-                {% if recipe.is_community_made %}
+                {% if recipe.is_approved %}
                 <i class="primary-text">check_circle</i>
                 {% else %}
                 <a href="{% url 'admin_recipe_approve' recipe.pk %}" class="button tiny primary round" onclick="event.stopPropagation();">

sandwitches-2.4.0/src/sandwitches/templates/cart.html

@@ -0,0 +1,102 @@
+{% extends "base_beer.html" %}
+{% load i18n static %}
+
+{% block title %}{% trans "Your Cart" %}{% endblock %}
+
+{% block content %}
+<main class="responsive">
+    <div class="large-space"></div>
+    <div class="row align-center">
+        <i class="extra">shopping_cart</i>
+        <h4 class="max">{% trans "Your Shopping Cart" %}</h4>
+    </div>
+    <div class="space"></div>
+
+    {% if cart_items %}
+    <div class="grid">
+        <div class="s12 m8">
+            <div class="padding border round surface">
+                <table class="border striped no-space">
+                    <thead>
+                        <tr>
+                            <th class="min">{% trans "Item" %}</th>
+                            <th class="max">{% trans "Description" %}</th>
+                            <th class="min">{% trans "Quantity" %}</th>
+                            <th class="min">{% trans "Price" %}</th>
+                            <th class="min"></th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        {% for item in cart_items %}
+                        <tr>
+                            <td class="min">
+                                {% if item.recipe.image %}
+                                <img src="{{ item.recipe.image_thumbnail.url }}" class="circle small">
+                                {% else %}
+                                <i class="circle small gray1">restaurant</i>
+                                {% endif %}
+                            </td>
+                            <td class="max">
+                                <a href="{% url 'recipe_detail' item.recipe.slug %}" class="bold">{{ item.recipe.title }}</a>
+                            </td>
+                            <td class="min">
+                                <form action="{% url 'update_cart_quantity' item.pk %}" method="post" class="row no-space align-center">
+                                    {% csrf_token %}
+                                    <div class="field border round small no-margin" style="width: 80px;">
+                                        <input type="number" name="quantity" value="{{ item.quantity }}" min="1" onchange="this.form.submit()">
+                                    </div>
+                                </form>
+                            </td>
+                            <td class="min no-wrap">{{ item.total_price }} €</td>
+                            <td class="min">
+                                <a href="{% url 'remove_from_cart' item.pk %}" class="button circle transparent">
+                                    <i>delete</i>
+                                </a>
+                            </td>
+                        </tr>
+                        {% endfor %}
+                    </tbody>
+                </table>
+            </div>
+        </div>
+        <div class="s12 m4">
+            <article class="round padding border primary-container">
+                <h6 class="bold">{% trans "Summary" %}</h6>
+                <div class="row mt-1">
+                    <div class="max">{% trans "Subtotal" %}</div>
+                    <div class="bold">{{ total }} €</div>
+                </div>
+                <div class="divider mt-1 mb-1"></div>
+                <div class="row">
+                    <div class="max bold">{% trans "Total" %}</div>
+                    <div class="bold large-text">{{ total }} €</div>
+                </div>
+                <div class="space"></div>
+                <form action="{% url 'checkout_cart' %}" method="post">
+                    {% csrf_token %}
+                    <button type="submit" class="button primary round extend">
+                        <i>check</i>
+                        <span>{% trans "Checkout" %}</span>
+                    </button>
+                </form>
+            </article>
+            <div class="space"></div>
+            <a href="{% url 'index' %}" class="button transparent extend">
+                <i>arrow_back</i>
+                <span>{% trans "Continue Shopping" %}</span>
+            </a>
+        </div>
+    </div>
+    {% else %}
+    <div class="center-align padding">
+        <i class="extra gray-text">shopping_cart_off</i>
+        <h5 class="gray-text">{% trans "Your cart is empty." %}</h5>
+        <div class="space"></div>
+        <a href="{% url 'index' %}" class="button primary round">
+            <span>{% trans "Start Shopping" %}</span>
+        </a>
+    </div>
+    {% endif %}
+    <div class="large-space"></div>
+</main>
+{% endblock %}

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/components/navbar.html

@@ -15,6 +15,12 @@
   </button>
 
   {% if user.is_authenticated %}
+    <a href="{% url 'view_cart' %}" class="button circle transparent">
+        <i>shopping_cart</i>
+        {% if user.cart_items.exists %}
+        <badge class="red">{{ user.cart_items.count }}</badge>
+        {% endif %}
+    </a>
     <a href="{% url 'user_profile' %}">
       {% if user.avatar %}
       <img src="{{ user.avatar.url }}" class="circle">

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/components/recipe_header.html

@@ -37,11 +37,11 @@
     <i class="primary-text">euro_symbol</i>
     <h5 class="bold ml-1">{{ recipe.price }}</h5>
     {% if user.is_authenticated %}
-    <form action="{% url 'order_recipe' recipe.pk %}" method="post" class="ml-2">
+    <form action="{% url 'add_to_cart' recipe.pk %}" method="post" class="ml-2">
         {% csrf_token %}
         <button type="submit" class="button primary round">
-            <i>shopping_cart</i>
-            <span>{% trans "Order Now" %}</span>
+            <i>add_shopping_cart</i>
+            <span>{% trans "Add to Cart" %}</span>
         </button>
     </form>
     {% endif %}

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/templates/partials/recipe_list.html

@@ -72,11 +72,19 @@
          </div>
        </div>
 
-       <div class="padding pt-0">
-         <a href="{% url 'recipe_detail' recipe.slug %}" class="button fill round responsive">
-           <span>{% trans 'View Recipe' %}</span>
+       <div class="padding pt-0 row no-space">
+         <a href="{% url 'recipe_detail' recipe.slug %}" class="button fill round max">
+           <span>{% trans 'View' %}</span>
            <i class="suffix">arrow_forward</i>
          </a>
+         {% if user.is_authenticated and recipe.price %}
+         <form action="{% url 'add_to_cart' recipe.pk %}" method="post" class="ml-1">
+            {% csrf_token %}
+            <button type="submit" class="button circle primary" title="{% trans 'Add to Cart' %}">
+              <i>add_shopping_cart</i>
+            </button>
+         </form>
+         {% endif %}
        </div>
     </article>
   </div>

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/urls.py

@@ -39,6 +39,13 @@ urlpatterns = [
     path("api/", api.urls),
     path("media/<path:file_path>", views.media, name="media"),
     path("favorites/", views.favorites, name="favorites"),
+    path("cart/", views.view_cart, name="view_cart"),
+    path("cart/add/<int:pk>/", views.add_to_cart, name="add_to_cart"),
+    path("cart/remove/<int:pk>/", views.remove_from_cart, name="remove_from_cart"),
+    path(
+        "cart/update/<int:pk>/", views.update_cart_quantity, name="update_cart_quantity"
+    ),
+    path("cart/checkout/", views.checkout_cart, name="checkout_cart"),
     path("", views.index, name="index"),
     path("feeds/latest/", LatestRecipesFeed(), name="latest_recipes_feed"),
     path(
@@ -54,6 +61,11 @@ urlpatterns += i18n_patterns(
     path("recipes/<int:pk>/favorite/", views.toggle_favorite, name="toggle_favorite"),
     path("dashboard/", views.admin_dashboard, name="admin_dashboard"),
     path("dashboard/recipes/", views.admin_recipe_list, name="admin_recipe_list"),
+    path(
+        "dashboard/approvals/",
+        views.admin_recipe_approval_list,
+        name="admin_recipe_approval_list",
+    ),
     path("dashboard/recipes/add/", views.admin_recipe_add, name="admin_recipe_add"),
     path(
         "dashboard/recipes/<int:pk>/edit/",

{sandwitches-2.3.3 → sandwitches-2.4.0}/src/sandwitches/views.py

@@ -8,7 +8,7 @@ from django.contrib.auth import get_user_model
 from django.contrib.auth.decorators import login_required
 from django.contrib.admin.views.decorators import staff_member_required
 from django.utils.translation import gettext as _
-from .models import Recipe, Rating, Tag, Order
+from .models import Recipe, Rating, Tag, Order, CartItem
 from .forms import (
     RecipeForm,
     AdminSetupForm,
@@ -42,7 +42,7 @@ def community(request):
         if form.is_valid():
             recipe = form.save(commit=False)
             recipe.uploaded_by = request.user
-            recipe.is_community_made = True
+            recipe.is_approved = False
             recipe.save()
             form.save_m2m()
             messages.success(
@@ -53,16 +53,17 @@ def community(request):
     else:
         form = UserRecipeSubmissionForm()
 
-    # Community recipes = non-staff uploaded
-    recipes = Recipe.objects.filter(is_community_made=True).prefetch_related(  # ty:ignore[unresolved-attribute]
-        "favorited_by"
-    )
+    # Community recipes = uploaded by users in 'community' group
+    recipes = Recipe.objects.filter(  # ty:ignore[unresolved-attribute]
+        uploaded_by__groups__name="community"
+    ).prefetch_related("favorited_by")
 
-    if not request.user.is_staff:
+    if not (request.user.is_staff or request.user.groups.filter(name="admin").exists()):
         # Regular users only see approved community recipes or their own
-        recipes = recipes.filter(
-            Q(is_community_made=True) | Q(uploaded_by=request.user)
-        )
+        recipes = recipes.filter(Q(is_approved=True) | Q(uploaded_by=request.user))
+    else:
+        # Admins see all community recipes
+        pass
 
     recipes = recipes.order_by("-created_at")
 
@@ -155,7 +156,7 @@ def admin_dashboard(request):
     order_counts = [d["count"] for d in order_data]
 
     pending_recipes = Recipe.objects.filter(  # ty:ignore[unresolved-attribute]
-        uploaded_by__is_staff=False, uploaded_by__is_superuser=False
+        is_approved=False, uploaded_by__groups__name="community"
     ).order_by("-created_at")
     context = {
         "recipe_count": recipe_count,
@@ -220,6 +221,21 @@ def admin_recipe_list(request):
     )
 
 
+@staff_member_required
+def admin_recipe_approval_list(request):
+    recipes = Recipe.objects.filter(  # ty:ignore[unresolved-attribute]
+        is_approved=False, uploaded_by__groups__name="community"
+    ).order_by("-created_at")
+    return render(
+        request,
+        "admin/recipe_approval_list.html",
+        {
+            "recipes": recipes,
+            "version": sandwitches_version,
+        },
+    )
+
+
 @staff_member_required
 def admin_recipe_add(request):
     if request.method == "POST":
@@ -266,11 +282,14 @@ def admin_recipe_edit(request, pk):
 @staff_member_required
 def admin_recipe_approve(request, pk):
     recipe = get_object_or_404(Recipe, pk=pk)
-    recipe.is_community_made = True
+    recipe.is_approved = True
     recipe.save()
     messages.success(
         request, _("Recipe '%(title)s' approved.") % {"title": recipe.title}
     )
+    referer = request.META.get("HTTP_REFERER")
+    if referer and "dashboard/approvals" in referer:
+        return redirect("admin_recipe_approval_list")
     return redirect("admin_recipe_list")
 
 
@@ -494,10 +513,19 @@ def admin_order_list(request):
 def recipe_detail(request, slug):
     recipe = get_object_or_404(Recipe, slug=slug)
 
-    if not recipe.is_community_made:
+    # If it's a community recipe, it must be approved or viewed by staff/owner
+    is_community = (
+        recipe.uploaded_by
+        and recipe.uploaded_by.groups.filter(name="community").exists()
+    )
+    if is_community and not recipe.is_approved:
         if not (
             request.user.is_authenticated
-            and (request.user.is_staff or recipe.uploaded_by == request.user)
+            and (
+                request.user.is_staff
+                or recipe.uploaded_by == request.user
+                or request.user.groups.filter(name="admin").exists()
+            )
         ):
             raise Http404("Recipe not found or pending approval.")
 
@@ -668,8 +696,8 @@ def index(request):
 
     recipes = Recipe.objects.all().prefetch_related("favorited_by")  # ty:ignore[unresolved-attribute]
 
-    # Only show "normal" recipes (uploaded by staff or no uploader)
-    recipes = recipes.filter(Q(is_community_made=False))
+    # Only show recipes from people in the admin group
+    recipes = recipes.filter(uploaded_by__groups__name="admin")
 
     # Filtering
     q = request.GET.get("q")
@@ -743,6 +771,8 @@ def setup(request):
     First-time setup page: create initial superuser if none exists.
     Visible only while there are no superusers in the DB.
     """
+    from django.contrib.auth.models import Group
+
     # do not allow access if a superuser already exists
     if User.objects.filter(is_superuser=True).exists():
         return redirect("index")
@@ -751,6 +781,12 @@ def setup(request):
         form = AdminSetupForm(request.POST)
         if form.is_valid():
             user = form.save()
+
+            # Ensure groups exist and add user to admin group
+            admin_group, created = Group.objects.get_or_create(name="admin")
+            Group.objects.get_or_create(name="community")
+            user.groups.add(admin_group)
+
             user.backend = "django.contrib.auth.backends.ModelBackend"
             login(request, user)
             messages.success(request, _("Admin account created and signed in."))
@@ -765,10 +801,17 @@ def signup(request):
     """
     User signup page: create new regular user accounts.
     """
+    from django.contrib.auth.models import Group
+
     if request.method == "POST":
         form = UserSignupForm(request.POST, request.FILES)
         if form.is_valid():
             user = form.save()
+
+            # Add user to community group
+            community_group, created = Group.objects.get_or_create(name="community")
+            user.groups.add(community_group)
+
             # log in the newly created user
             user.backend = "django.contrib.auth.backends.ModelBackend"
             login(request, user)
@@ -818,3 +861,102 @@ def user_profile(request):
     return render(
         request, "profile.html", {"form": form, "version": sandwitches_version}
     )
+
+
+@login_required
+def view_cart(request):
+    cart_items = CartItem.objects.filter(user=request.user).select_related("recipe")  # ty:ignore[unresolved-attribute]
+    total = sum(item.total_price for item in cart_items)
+    return render(
+        request,
+        "cart.html",
+        {
+            "cart_items": cart_items,
+            "total": total,
+            "version": sandwitches_version,
+        },
+    )
+
+
+@login_required
+def add_to_cart(request, pk):
+    recipe = get_object_or_404(Recipe, pk=pk)
+    if not recipe.price:
+        messages.error(request, _("This recipe cannot be ordered (no price set)."))
+        return redirect("recipe_detail", slug=recipe.slug)
+
+    cart_item, created = CartItem.objects.get_or_create(  # ty:ignore[unresolved-attribute]
+        user=request.user, recipe=recipe
+    )
+    if not created:
+        cart_item.quantity += 1
+        cart_item.save()
+
+    messages.success(
+        request, _("Added %(title)s to your cart.") % {"title": recipe.title}
+    )
+    return redirect("view_cart")
+
+
+@login_required
+def remove_from_cart(request, pk):
+    cart_item = get_object_or_404(CartItem, pk=pk, user=request.user)
+    cart_item.delete()
+    messages.success(request, _("Removed from cart."))
+    return redirect("view_cart")
+
+
+@login_required
+def update_cart_quantity(request, pk):
+    if request.method == "POST":
+        cart_item = get_object_or_404(CartItem, pk=pk, user=request.user)
+        try:
+            quantity = int(request.POST.get("quantity", 1))
+            if quantity > 0:
+                cart_item.quantity = quantity
+                cart_item.save()
+            else:
+                cart_item.delete()
+        except ValueError:
+            pass
+    return redirect("view_cart")
+
+
+@login_required
+def checkout_cart(request):
+    cart_items = CartItem.objects.filter(user=request.user)  # ty:ignore[unresolved-attribute]
+    if not cart_items.exists():
+        messages.error(request, _("Your cart is empty."))
+        return redirect("view_cart")
+
+    created_orders = []  # noqa: F841
+    errors = []
+
+    # We use a transaction to ensure either all orders are created or none if something goes wrong
+    from django.db import transaction
+
+    try:
+        with transaction.atomic():
+            for item in cart_items:
+                # Create Order for each recipe in cart (quantity times?)
+                # Current Order model doesn't have quantity, so we create multiple orders or update Order model.
+                # For now, let's create 'quantity' number of orders as per current schema
+                # OR we could update Order model to support quantity.
+                # Let's see if Order has quantity. (Checked: it does not).
+                for i in range(item.quantity):
+                    try:
+                        Order.objects.create(user=request.user, recipe=item.recipe)  # ty:ignore[unresolved-attribute]
+                    except (ValidationError, ValueError) as e:
+                        errors.append(f"{item.recipe.title}: {str(e)}")
+                        raise e  # Trigger rollback
+
+            cart_items.delete()
+            messages.success(request, _("Orders submitted successfully!"))
+            return redirect("user_profile")
+    except Exception:
+        if errors:
+            for error in errors:
+                messages.error(request, error)
+        else:
+            messages.error(request, _("An error occurred during checkout."))
+        return redirect("view_cart")