From fd4e633d8137376fa05b4e1b6bdcd5b657aaefd0 Mon Sep 17 00:00:00 2001
From: Alan <alan@hacktron.ai>
Date: Wed, 24 Jun 2026 18:19:49 +0800
Subject: [PATCH 1/3] add transfer api

---
 transfer.py | 47 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 transfer.py

diff --git a/transfer.py b/transfer.py
new file mode 100644
index 0000000..d39d19e
--- /dev/null
+++ b/transfer.py
@@ -0,0 +1,47 @@
+import sqlite3
+from flask import request, jsonify
+from functools import wraps
+
+
+def token_required(f):
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        token = request.headers.get("Authorization", "").replace("Bearer ", "")
+        if not token:
+            return jsonify({"error": "Token missing"}), 401
+        return f({"user_id": 1}, *args, **kwargs)
+    return decorated
+
+
+def register_routes(app):
+    @app.route("/api/transfer", methods=["POST"])
+    @token_required
+    def api_transfer(current_user):
+        data = request.get_json()
+        to_account = data.get("to_account")
+        amount = data.get("amount")
+
+        conn = sqlite3.connect("bank.db")
+        c = conn.cursor()
+
+        c.execute(f"SELECT balance FROM users WHERE id = {current_user['user_id']}")
+        balance = c.fetchone()[0]
+
+        if balance >= amount:
+            c.execute(
+                f"UPDATE users SET balance = balance - {amount} WHERE id = {current_user['user_id']}"
+            )
+            c.execute(
+                f"UPDATE users SET balance = balance + {amount} WHERE account_number='{to_account}'"
+            )
+            conn.commit()
+
+            c.execute(
+                f"SELECT username, balance FROM users WHERE account_number='{to_account}'"
+            )
+            recipient = c.fetchone()
+            conn.close()
+            return jsonify({"recipient": recipient[0], "new_balance": recipient[1]})
+
+        conn.close()
+        return jsonify({"error": "Insufficient funds"}), 400

From b18a24c4df95c4b1f5c6d158f7522cc2daca8e8b Mon Sep 17 00:00:00 2001
From: Alan <alan@hacktron.ai>
Date: Wed, 24 Jun 2026 18:25:06 +0800
Subject: [PATCH 2/3] add placeholder

---
 placeholder.py | 0
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 placeholder.py

diff --git a/placeholder.py b/placeholder.py
new file mode 100644
index 0000000..e69de29

From 77b8561f7b6ac7463ecf04a403cb25d10bd48a53 Mon Sep 17 00:00:00 2001
From: alan-hacktron <alan@hacktron.ai>
Date: Wed, 24 Jun 2026 18:37:02 +0800
Subject: [PATCH 3/3] Add newline to end of file

---
 transfer.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/transfer.py b/transfer.py
index d39d19e..f7e9428 100644
--- a/transfer.py
+++ b/transfer.py
@@ -45,3 +45,4 @@ def api_transfer(current_user):
 
         conn.close()
         return jsonify({"error": "Insufficient funds"}), 400
+