Add KYC, PIN, airtime, data, purity memory

app.py

@@ -1,7 +1,10 @@
 import os
 from flask import Flask, jsonify
 from database import init_db, create_tables
-from endpoints import register, login, transfer, external_transfer, balance, history, alerts, lookup, jwt
+from endpoints import (register, login, transfer, external_transfer,
+    balance, history, alerts, lookup, set_pin, verify_pin,
+    kyc_upgrade, profile, buy_airtime, buy_data,
+    purity_memory, get_purity_memory, jwt)
 from flask_cors import CORS
 
 BASE_DIR = os.path.dirname(os.path.abspath(__file__))
@@ -24,6 +27,14 @@ app.add_url_rule("/balance", "balance", balance, methods=["GET"])
 app.add_url_rule("/history", "history", history, methods=["GET"])
 app.add_url_rule("/alerts", "alerts", alerts, methods=["GET"])
 app.add_url_rule("/lookup", "lookup", lookup, methods=["GET"])
+app.add_url_rule("/set-pin", "set_pin", set_pin, methods=["POST"])
+app.add_url_rule("/verify-pin", "verify_pin", verify_pin, methods=["POST"])
+app.add_url_rule("/kyc-upgrade", "kyc_upgrade", kyc_upgrade, methods=["POST"])
+app.add_url_rule("/profile", "profile", profile, methods=["GET"])
+app.add_url_rule("/buy-airtime", "buy_airtime", buy_airtime, methods=["POST"])
+app.add_url_rule("/buy-data", "buy_data", buy_data, methods=["POST"])
+app.add_url_rule("/purity-memory", "purity_memory", purity_memory, methods=["POST"])
+app.add_url_rule("/purity-memory", "get_purity_memory", get_purity_memory, methods=["GET"])
 
 @app.route("/health")
 def health():

dolor3v-frontend/src/components/PurityAI.css

@@ -95,3 +95,16 @@
 }
 
 .purity-hints span:hover { border-color: #7c3aed; color: #a78bfa; }
+
+.purity-response {
+  background: #130d24;
+  border: 1px solid #7c3aed44;
+  border-radius: 10px;
+  padding: 10px 16px;
+  color: #a78bfa;
+  font-size: 0.85rem;
+  font-style: italic;
+  text-align: center;
+  max-width: 300px;
+  animation: slideUp 0.3s ease;
+}

dolor3v-frontend/src/components/PurityAI.jsx

@@ -1,17 +1,19 @@
 import { useState, useRef } from "react";
+import API from "../api";
 import "./PurityAI.css";
 
 const ELEVEN_KEY = "sk_2d090a3d6c13a30f2a89c5913a30c3f83ac82ff99a46c9b8";
-const VOICE_ID = "EXAVITQu4vr4xnSDxMaL"; // Bella - warm female voice
+const VOICE_ID = "EXAVITQu4vr4xnSDxMaL";
 
-export default function PurityAI({ balance, onTransfer }) {
+export default function PurityAI({ balance, onTransfer, onExternalTransfer }) {
   const [active, setActive] = useState(false);
   const [status, setStatus] = useState("idle");
   const [transcript, setTranscript] = useState("");
-  const recog = useRef(null);
+  const [response, setResponse] = useState("");
 
   const speak = async (text) => {
     setStatus("speaking");
+    setResponse(text);
     try {
       const res = await fetch(`https://api.elevenlabs.io/v1/text-to-speech/${VOICE_ID}`, {
         method: "POST",
@@ -25,53 +27,74 @@ export default function PurityAI({ balance, onTransfer }) {
           voice_settings: { stability: 0.5, similarity_boost: 0.75 },
         }),
       });
+      if (!res.ok) throw new Error("ElevenLabs failed");
       const blob = await res.blob();
       const url = URL.createObjectURL(blob);
       const audio = new Audio(url);
       audio.onended = () => setStatus("idle");
-      audio.play();
+      await audio.play();
     } catch {
-      // fallback to browser TTS
       const u = new SpeechSynthesisUtterance(text);
-      u.rate = 0.95;
+      u.rate = 0.9; u.pitch = 1.1;
+      const voices = speechSynthesis.getVoices();
+      const female = voices.find(v => v.name.includes("Female") || v.name.includes("Samantha") || v.name.includes("Google UK English Female"));
+      if (female) u.voice = female;
       u.onend = () => setStatus("idle");
       speechSynthesis.speak(u);
     }
   };
 
-  const handleCommand = (text) => {
+  const handleCommand = async (text) => {
     const lower = text.toLowerCase();
-    if (lower.includes("balance")) {
-      speak(`Your current balance is ${balance?.balance?.toLocaleString("en-NG")} Naira.`);
-    } else if (lower.includes("transfer") || lower.includes("send")) {
-      speak("Opening transfer screen for you.");
-      onTransfer();
-    } else if (lower.includes("hello") || lower.includes("hi")) {
-      speak("Hello! I'm Purity, your dolor3v banking assistant. I can check your balance or help you send money.");
+    if (lower.includes("balance") || lower.includes("how much")) {
+      const bal = balance?.balance?.toLocaleString("en-NG") ?? "unavailable";
+      speak(`Your available balance is ${bal} Naira.`);
+    } else if (lower.includes("send") || lower.includes("transfer") || lower.includes("pay")) {
+      speak("Opening the transfer screen for you right now.");
+      setTimeout(() => onTransfer && onTransfer(), 1500);
+    } else if (lower.includes("bank") || lower.includes("external") || lower.includes("moniepoint")) {
+      speak("Opening external bank transfer.");
+      setTimeout(() => onExternalTransfer && onExternalTransfer(), 1500);
+    } else if (lower.includes("hello") || lower.includes("hi") || lower.includes("hey")) {
+      speak(`Hello! I'm Purity, your dolor3v assistant. I can check your balance, help you send money, or transfer to other banks. What would you like to do?`);
+    } else if (lower.includes("account") || lower.includes("number")) {
+      speak(`Your account number is ${balance?.account_number ?? "unavailable"}.`);
     } else {
-      speak("I can help you check your balance or make a transfer. Just ask me!");
+      speak("I can help you check your balance, send money, or make a bank transfer. Just tell me what you need!");
     }
   };
 
   const startListening = () => {
     const SR = window.SpeechRecognition || window.webkitSpeechRecognition;
-    if (!SR) { speak("Voice recognition is not supported on this browser."); return; }
-    recog.current = new SR();
-    recog.current.lang = "en-US";
-    recog.current.onresult = (e) => {
+    if (!SR) {
+      speak("Voice recognition isn't available on this browser. Try Chrome.");
+      return;
+    }
+    const r = new SR();
+    r.lang = "en-US";
+    r.onstart = () => setStatus("listening");
+    r.onresult = (e) => {
       const text = e.results[0][0].transcript;
       setTranscript(text);
       handleCommand(text);
     };
-    recog.current.onerror = () => setStatus("idle");
-    recog.current.onend = () => setStatus("idle");
-    recog.current.start();
-    setStatus("listening");
+    r.onerror = () => { setStatus("idle"); speak("I didn't catch that. Please try again."); };
+    r.onend = () => { if (status === "listening") setStatus("idle"); };
+    r.start();
+  };
+
+  const handleTap = () => {
+    if (!active) {
+      setActive(true);
+      speak("Hi! I'm Purity, your dolor3v banking assistant. How can I help you today?");
+    } else {
+      startListening();
+    }
   };
 
   return (
     <div className="purity-wrap">
-      <div className={`purity-orb ${status}`} onClick={active ? startListening : () => { setActive(true); speak("Hi, I'm Purity! Tap the orb and ask me anything."); }}>
+      <div className={`purity-orb ${status}`} onClick={handleTap}>
         <div className="orb-ring" />
         <div className="orb-ring r2" />
         <div className="orb-core">
@@ -84,12 +107,18 @@ export default function PurityAI({ balance, onTransfer }) {
         {status === "listening" ? "Listening..." : status === "speaking" ? "Speaking..." : active ? "Tap to speak" : "Tap to wake up"}
       </p>
 
-      {transcript && <div className="purity-transcript">"{transcript}"</div>}
+      {transcript && (
+        <div className="purity-transcript">You: "{transcript}"</div>
+      )}
+      {response && (
+        <div className="purity-response">Purity: "{response}"</div>
+      )}
 
       <div className="purity-hints">
-        <span onClick={() => handleCommand("check my balance")}>Check balance</span>
-        <span onClick={() => handleCommand("make a transfer")}>Send money</span>
-        <span onClick={() => handleCommand("hello")}>Say hi</span>
+        <span onClick={() => handleCommand("check my balance")}>💰 Balance</span>
+        <span onClick={() => handleCommand("send money")}>↑ Send</span>
+        <span onClick={() => handleCommand("transfer to bank")}>🏦 Bank</span>
+        <span onClick={() => handleCommand("hello")}>👋 Hi</span>
       </div>
     </div>
   );

dolor3v-frontend/src/pages/Dashboard.jsx

@@ -3,6 +3,8 @@ import API from "../api";
 import { AuthContext } from "../auth/AuthContext";
 import { useNavigate } from "react-router-dom";
 import PurityAI from "../components/PurityAI";
+import Transfer from "./Transfer";
+import ExternalTransfer from "./ExternalTransfer";
 import "./Dashboard.css";
 
 export default function Dashboard() {
@@ -10,11 +12,7 @@ export default function Dashboard() {
   const [history, setHistory] = useState([]);
   const [alerts, setAlerts] = useState([]);
   const [tab, setTab] = useState("home");
-  const [transfer, setTransfer] = useState({ recipient_account_number: "", amount: "" });
-  const [extTransfer, setExtTransfer] = useState({ bank_name: "", recipient_name: "", recipient_account: "", amount: "" });
-  const [msg, setMsg] = useState("");
-  const [loading, setLoading] = useState(false);
-  const { logout, accountNumber } = useContext(AuthContext);
+  const { logout } = useContext(AuthContext);
   const nav = useNavigate();
 
   useEffect(() => { load(); }, []);
@@ -32,37 +30,11 @@ export default function Dashboard() {
     } catch { nav("/"); }
   };
 
-  const doTransfer = async () => {
-    setLoading(true); setMsg("");
-    try {
-      const res = await API.post("/transfer", { ...transfer, amount: parseFloat(transfer.amount) });
-      setMsg(`✅ ${res.data.message} — Ref: ${res.data.reference}`);
-      load();
-    } catch (e) {
-      setMsg(`❌ ${e.response?.data?.message || "Transfer failed"}`);
-    }
-    setLoading(false);
-  };
-
-  const doExtTransfer = async () => {
-    setLoading(true); setMsg("");
-    try {
-      const res = await API.post("/external-transfer", { ...extTransfer, amount: parseFloat(extTransfer.amount) });
-      setMsg(`✅ ${res.data.message} — Ref: ${res.data.reference}`);
-      load();
-    } catch (e) {
-      setMsg(`❌ ${e.response?.data?.message || "Transfer failed"}`);
-    }
-    setLoading(false);
-  };
-
-  const handleLogout = () => { logout(); nav("/"); };
-
   return (
     <div className="db-bg">
       <div className="db-header">
         <div className="db-logo">dolor<span>3v</span></div>
-        <button className="db-logout" onClick={handleLogout}>Logout</button>
+        <button className="db-logout" onClick={() => { logout(); nav("/"); }}>Logout</button>
       </div>
 
       {tab === "home" && (
@@ -86,26 +58,33 @@ export default function Dashboard() {
 
           <div className="quick-actions">
             <button onClick={() => setTab("transfer")} className="qa-btn">
-              <span>↑</span> Send
+              <span>↑</span>Send
             </button>
             <button onClick={() => setTab("external")} className="qa-btn">
-              <span>🏦</span> Bank
+              <span>🏦</span>Banks
             </button>
             <button onClick={() => setTab("history")} className="qa-btn">
-              <span>≡</span> History
+              <span>≡</span>History
             </button>
             <button onClick={() => setTab("purity")} className="qa-btn purity-btn">
-              <span>🎙</span> Purity
+              <span>✦</span>Purity
             </button>
           </div>
 
           <h3 className="section-title">Recent Transactions</h3>
+          {history.length === 0 && (
+            <p style={{ color: "#334155", fontSize: "0.85rem", textAlign: "center", padding: "20px 0" }}>
+              No transactions yet
+            </p>
+          )}
           {history.slice(0, 5).map(t => (
             <div key={t.id} className={`txn-item ${t.type}`}>
               <div className="txn-left">
                 <span className="txn-icon">{t.type === "sent" ? "↑" : "↓"}</span>
                 <div>
-                  <p className="txn-ref">Ref: {t.reference}</p>
+                  <p className="txn-ref">
+                    {t.is_external ? `🏦 ${t.recipient.replace("EXT:", "").split(":")[0]}` : `To: ${t.recipient}`}
+                  </p>
                   <p className="txn-status">{t.status} • {new Date(t.timestamp).toLocaleDateString()}</p>
                 </div>
               </div>
@@ -116,60 +95,36 @@ export default function Dashboard() {
       )}
 
       {tab === "transfer" && (
-        <div className="db-content">
-          <button className="back-btn" onClick={() => { setTab("home"); setMsg(""); }}>← Back</button>
-          <h2 className="page-title">Send Money</h2>
-          {msg && <div className={`result-msg ${msg.startsWith("✅") ? "ok" : "err"}`}>{msg}</div>}
-          <div className="form-group">
-            <label>Recipient Account</label>
-            <input placeholder="ACC1234567890" value={transfer.recipient_account_number}
-              onChange={e => setTransfer({ ...transfer, recipient_account_number: e.target.value })} />
-          </div>
-          <div className="form-group">
-            <label>Amount (₦)</label>
-            <input type="number" placeholder="0.00" value={transfer.amount}
-              onChange={e => setTransfer({ ...transfer, amount: e.target.value })} />
-          </div>
-          <button className="submit-btn" onClick={doTransfer} disabled={loading}>
-            {loading ? <span className="spinner" /> : "Send Money"}
-          </button>
-        </div>
+        <Transfer
+          onBack={() => setTab("home")}
+          onDone={() => { setTab("home"); load(); }}
+        />
       )}
 
       {tab === "external" && (
-        <div className="db-content">
-          <button className="back-btn" onClick={() => { setTab("home"); setMsg(""); }}>← Back</button>
-          <h2 className="page-title">External Bank Transfer</h2>
-          {msg && <div className={`result-msg ${msg.startsWith("✅") ? "ok" : "err"}`}>{msg}</div>}
-          {[
-            { key: "bank_name", label: "Bank Name", ph: "GTBank" },
-            { key: "recipient_name", label: "Recipient Name", ph: "John Doe" },
-            { key: "recipient_account", label: "Account Number", ph: "0123456789" },
-            { key: "amount", label: "Amount (₦)", ph: "0.00", type: "number" },
-          ].map(f => (
-            <div className="form-group" key={f.key}>
-              <label>{f.label}</label>
-              <input type={f.type || "text"} placeholder={f.ph}
-                value={extTransfer[f.key]}
-                onChange={e => setExtTransfer({ ...extTransfer, [f.key]: e.target.value })} />
-            </div>
-          ))}
-          <button className="submit-btn" onClick={doExtTransfer} disabled={loading}>
-            {loading ? <span className="spinner" /> : "Transfer"}
-          </button>
-        </div>
+        <ExternalTransfer
+          onBack={() => setTab("home")}
+          onDone={() => { setTab("home"); load(); }}
+        />
       )}
 
       {tab === "history" && (
         <div className="db-content">
           <button className="back-btn" onClick={() => setTab("home")}>← Back</button>
           <h2 className="page-title">Transaction History</h2>
+          {history.length === 0 && (
+            <p style={{ color: "#334155", textAlign: "center", padding: "40px 0" }}>No transactions yet</p>
+          )}
           {history.map(t => (
             <div key={t.id} className={`txn-item ${t.type}`}>
               <div className="txn-left">
                 <span className="txn-icon">{t.type === "sent" ? "↑" : "↓"}</span>
                 <div>
-                  <p className="txn-ref">{t.is_external ? `🏦 ${t.recipient}` : `Ref: ${t.reference}`}</p>
+                  <p className="txn-ref">
+                    {t.is_external
+                      ? `🏦 ${t.recipient.replace("EXT:", "").split(":").slice(0,2).join(" • ")}`
+                      : `Ref: ${t.reference}`}
+                  </p>
                   <p className="txn-status">{t.status} • {new Date(t.timestamp).toLocaleDateString()}</p>
                   <p className="txn-ai">{t.ai_review}</p>
                 </div>
@@ -183,7 +138,11 @@ export default function Dashboard() {
       {tab === "purity" && (
         <div className="db-content">
           <button className="back-btn" onClick={() => setTab("home")}>← Back</button>
-          <PurityAI balance={balance} onTransfer={() => setTab("transfer")} />
+          <PurityAI
+            balance={balance}
+            onTransfer={() => setTab("transfer")}
+            onExternalTransfer={() => setTab("external")}
+          />
         </div>
       )}
     </div>

endpoints.py

@@ -1,13 +1,20 @@
 from flask import request, jsonify
-from models import db, User, Transaction, Alert
+from models import db, User, Transaction, Alert, PurityMemory
 from flask_jwt_extended import JWTManager, jwt_required, create_access_token, get_jwt_identity
 from werkzeug.security import generate_password_hash, check_password_hash
-from datetime import datetime
 from ai_review import ai_review_transaction
+from datetime import datetime
 import random, string, uuid
 
 jwt = JWTManager()
 
+TIER_LIMITS = {
+    0: {"daily": 0, "max_balance": 0, "label": "Unverified"},
+    1: {"daily": 50000, "max_balance": 300000, "label": "Tier 1 - NIN"},
+    2: {"daily": 200000, "max_balance": 500000, "label": "Tier 2 - NIN+BVN"},
+    3: {"daily": 5000000, "max_balance": float('inf'), "label": "Tier 3 - Full KYC"},
+}
+
 def generate_account_number():
     while True:
         number = "ACC" + "".join(random.choices(string.digits, k=10))
@@ -15,8 +22,7 @@ def generate_account_number():
             return number
 
 def create_alert(account_number, message):
-    alert = Alert(account_number=account_number, message=message)
-    db.session.add(alert)
+    db.session.add(Alert(account_number=account_number, message=message))
 
 def register():
     data = request.get_json()
@@ -27,10 +33,11 @@ def register():
         email=data["email"],
         password=generate_password_hash(data["password"]),
         account_number=generate_account_number(),
+        phone=data.get("phone", ""),
     )
     db.session.add(user)
     db.session.commit()
-    create_alert(user.account_number, f"Welcome to dolor3v, {user.name}! Your account {user.account_number} is ready.")
+    create_alert(user.account_number, f"Welcome to dolor3v, {user.name}! Complete KYC to unlock transfers.")
     db.session.commit()
     return jsonify({"message": "User registered successfully", "account_number": user.account_number})
 
@@ -40,19 +47,110 @@ def login():
     if not user or not check_password_hash(user.password, data["password"]):
         return jsonify({"message": "Invalid credentials"}), 401
     access_token = create_access_token(identity=user.account_number)
-    return jsonify({"access_token": access_token, "account_number": user.account_number})
+    return jsonify({
+        "access_token": access_token,
+        "account_number": user.account_number,
+        "name": user.name,
+        "tier": user.tier,
+    })
+
+@jwt_required()
+def set_pin():
+    data = request.get_json()
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+    pin = data.get("pin", "")
+    if len(pin) != 4 or not pin.isdigit():
+        return jsonify({"message": "PIN must be 4 digits"}), 400
+    user.pin = generate_password_hash(pin)
+    db.session.commit()
+    return jsonify({"message": "PIN set successfully"})
+
+@jwt_required()
+def verify_pin():
+    data = request.get_json()
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+    if not user.pin:
+        return jsonify({"valid": False, "message": "No PIN set"}), 400
+    valid = check_password_hash(user.pin, data.get("pin", ""))
+    return jsonify({"valid": valid})
+
+@jwt_required()
+def kyc_upgrade():
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+    data = request.get_json()
+    tier = data.get("tier", 1)
+
+    if tier == 1:
+        if not data.get("nin"):
+            return jsonify({"message": "NIN required for Tier 1"}), 400
+        user.nin = data["nin"]
+        user.tier = 1
+        user.daily_limit = 50000
+        user.max_balance = 300000
+        create_alert(acc, "KYC Tier 1 approved! Daily limit: ₦50,000")
+
+    elif tier == 2:
+        if not data.get("bvn"):
+            return jsonify({"message": "BVN required for Tier 2"}), 400
+        user.bvn = data["bvn"]
+        user.tier = 2
+        user.daily_limit = 200000
+        user.max_balance = 500000
+        create_alert(acc, "KYC Tier 2 approved! Daily limit: ₦200,000")
+
+    elif tier == 3:
+        user.tier = 3
+        user.daily_limit = 5000000
+        user.max_balance = float('inf')
+        create_alert(acc, "KYC Tier 3 approved! Daily limit: ₦5,000,000. Unlimited balance.")
+
+    db.session.commit()
+    return jsonify({"message": f"Tier {tier} upgrade successful", "tier": user.tier})
+
+@jwt_required()
+def profile():
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+    limits = TIER_LIMITS.get(user.tier, TIER_LIMITS[0])
+    return jsonify({
+        "name": user.name,
+        "email": user.email,
+        "phone": user.phone,
+        "account_number": user.account_number,
+        "tier": user.tier,
+        "tier_label": limits["label"],
+        "daily_limit": limits["daily"],
+        "max_balance": limits["max_balance"] if limits["max_balance"] != float('inf') else -1,
+        "balance": user.balance,
+        "pin_set": user.pin is not None,
+    })
 
 @jwt_required()
 def transfer():
     data = request.get_json()
     sender_acc = get_jwt_identity()
     sender = User.query.filter_by(account_number=sender_acc).first()
+
+    if sender.tier == 0:
+        return jsonify({"message": "Complete KYC to make transfers"}), 403
+    if not sender.pin:
+        return jsonify({"message": "Set a PIN before making transfers"}), 403
+    if not check_password_hash(sender.pin, data.get("pin", "")):
+        return jsonify({"message": "Invalid PIN"}), 401
+
     recipient = User.query.filter_by(account_number=data["recipient_account_number"]).first()
     if not sender or not recipient:
         return jsonify({"message": "Invalid account numbers"}), 404
     if sender.account_number == recipient.account_number:
         return jsonify({"message": "Cannot transfer to same account"}), 400
+
     amount = float(data["amount"])
+    limit = TIER_LIMITS[sender.tier]["daily"]
+    if amount > limit:
+        return jsonify({"message": f"Amount exceeds your daily limit of ₦{limit:,.0f}"}), 400
     if sender.balance < amount:
         return jsonify({"message": "Insufficient funds"}), 400
 
@@ -66,15 +164,12 @@ def transfer():
     t = Transaction(
         sender_account_number=sender.account_number,
         recipient_account_number=recipient.account_number,
-        amount=amount,
-        status=status,
-        is_external=False,
-        reference=str(uuid.uuid4())[:8].upper(),
-        ai_review=reason,
+        amount=amount, status=status, is_external=False,
+        reference=str(uuid.uuid4())[:8].upper(), ai_review=reason,
     )
     db.session.add(t)
-    create_alert(sender.account_number, f"Transfer of {amount} to {recipient.account_number} — {status}. Ref: {t.reference}")
-    create_alert(recipient.account_number, f"You received {amount} from {sender.account_number}. Ref: {t.reference}")
+    create_alert(sender.account_number, f"Debit: ₦{amount:,.0f} to {recipient.name}. Ref: {t.reference}")
+    create_alert(recipient.account_number, f"Credit: ₦{amount:,.0f} from {sender.name}. Ref: {t.reference}")
     db.session.commit()
     return jsonify({"message": f"Transfer {status}", "reference": t.reference, "ai_review": reason})
 
@@ -83,15 +178,23 @@ def external_transfer():
     data = request.get_json()
     sender_acc = get_jwt_identity()
     sender = User.query.filter_by(account_number=sender_acc).first()
-    if not sender:
-        return jsonify({"message": "User not found"}), 404
+
+    if sender.tier == 0:
+        return jsonify({"message": "Complete KYC to make transfers"}), 403
+    if not sender.pin:
+        return jsonify({"message": "Set a PIN before making transfers"}), 403
+    if not check_password_hash(sender.pin, data.get("pin", "")):
+        return jsonify({"message": "Invalid PIN"}), 401
+
     amount = float(data["amount"])
+    limit = TIER_LIMITS[sender.tier]["daily"]
+    if amount > limit:
+        return jsonify({"message": f"Exceeds daily limit of ₦{limit:,.0f}"}), 400
     if sender.balance < amount:
         return jsonify({"message": "Insufficient funds"}), 400
 
     bank_name = data.get("bank_name", "External Bank")
     recipient_name = data.get("recipient_name", "Unknown")
-
     decision, reason = ai_review_transaction(sender, recipient_name, amount, True)
     status = "pending" if decision == "hold" else "processing"
 
@@ -102,44 +205,102 @@ def external_transfer():
     t = Transaction(
         sender_account_number=sender.account_number,
         recipient_account_number=f"EXT:{bank_name}:{data.get('recipient_account')}",
-        amount=amount,
-        status=status,
-        is_external=True,
-        reference=ref,
-        ai_review=reason,
+        amount=amount, status=status, is_external=True,
+        reference=ref, ai_review=reason,
     )
     db.session.add(t)
-    create_alert(sender.account_number, f"External transfer of {amount} to {recipient_name} at {bank_name} — {status}. Ref: {ref}")
+    create_alert(sender.account_number, f"External transfer: ₦{amount:,.0f} to {recipient_name} @ {bank_name}. Ref: {ref}")
     db.session.commit()
-    return jsonify({"message": f"External transfer {status}", "reference": ref, "ai_review": reason})
+    return jsonify({"message": f"Transfer {status}", "reference": ref, "ai_review": reason})
+
+@jwt_required()
+def buy_airtime():
+    data = request.get_json()
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+
+    if not user.pin or not check_password_hash(user.pin, data.get("pin", "")):
+        return jsonify({"message": "Invalid PIN"}), 401
+
+    amount = float(data["amount"])
+    phone = data.get("phone")
+    network = data.get("network", "MTN")
+
+    if user.balance < amount:
+        return jsonify({"message": "Insufficient funds"}), 400
+
+    user.balance -= amount
+    ref = "AIR" + str(uuid.uuid4())[:6].upper()
+    t = Transaction(
+        sender_account_number=user.account_number,
+        recipient_account_number=f"AIRTIME:{network}:{phone}",
+        amount=amount, status="completed", is_external=True,
+        reference=ref, ai_review="Airtime purchase",
+        transaction_type="airtime",
+    )
+    db.session.add(t)
+    create_alert(user.account_number, f"Airtime: ₦{amount:,.0f} {network} sent to {phone}. Ref: {ref}")
+    db.session.commit()
+    return jsonify({"message": f"₦{amount:,.0f} {network} airtime sent to {phone}", "reference": ref})
+
+@jwt_required()
+def buy_data():
+    data = request.get_json()
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
+
+    if not user.pin or not check_password_hash(user.pin, data.get("pin", "")):
+        return jsonify({"message": "Invalid PIN"}), 401
+
+    amount = float(data["amount"])
+    phone = data.get("phone")
+    network = data.get("network", "MTN")
+    plan = data.get("plan", "1GB")
+
+    if user.balance < amount:
+        return jsonify({"message": "Insufficient funds"}), 400
+
+    user.balance -= amount
+    ref = "DATA" + str(uuid.uuid4())[:6].upper()
+    t = Transaction(
+        sender_account_number=user.account_number,
+        recipient_account_number=f"DATA:{network}:{phone}",
+        amount=amount, status="completed", is_external=True,
+        reference=ref, ai_review="Data purchase",
+        transaction_type="data",
+    )
+    db.session.add(t)
+    create_alert(user.account_number, f"Data: {plan} {network} sent to {phone}. Ref: {ref}")
+    db.session.commit()
+    return jsonify({"message": f"{plan} {network} data sent to {phone}", "reference": ref})
 
 @jwt_required()
 def balance():
-    account_number = get_jwt_identity()
-    user = User.query.filter_by(account_number=account_number).first()
+    acc = get_jwt_identity()
+    user = User.query.filter_by(account_number=acc).first()
     if not user:
         return jsonify({"message": "Invalid account number"}), 404
-    return jsonify({"balance": user.balance, "account_number": user.account_number})
+    return jsonify({"balance": user.balance, "account_number": user.account_number, "name": user.name})
 
 @jwt_required()
 def history():
-    account_number = get_jwt_identity()
+    acc = get_jwt_identity()
     txns = Transaction.query.filter(
-        (Transaction.sender_account_number == account_number) |
-        (Transaction.recipient_account_number == account_number)
+        (Transaction.sender_account_number == acc) |
+        (Transaction.recipient_account_number == acc)
     ).order_by(Transaction.timestamp.desc()).all()
-
     result = []
     for t in txns:
         result.append({
             "id": t.id,
-            "type": "sent" if t.sender_account_number == account_number else "received",
+            "type": "sent" if t.sender_account_number == acc else "received",
             "amount": t.amount,
             "sender": t.sender_account_number,
             "recipient": t.recipient_account_number,
             "status": t.status,
             "reference": t.reference,
             "is_external": t.is_external,
+            "transaction_type": t.transaction_type,
             "ai_review": t.ai_review,
             "timestamp": t.timestamp.isoformat(),
         })
@@ -147,9 +308,8 @@ def history():
 
 @jwt_required()
 def alerts():
-    account_number = get_jwt_identity()
-    unread = Alert.query.filter_by(account_number=account_number, read=False)\
-        .order_by(Alert.timestamp.desc()).all()
+    acc = get_jwt_identity()
+    unread = Alert.query.filter_by(account_number=acc, read=False).order_by(Alert.timestamp.desc()).all()
     result = [{"id": a.id, "message": a.message, "timestamp": a.timestamp.isoformat()} for a in unread]
     for a in unread:
         a.read = True
@@ -158,8 +318,23 @@ def alerts():
 
 @jwt_required()
 def lookup():
-    account_number = request.args.get("account_number")
-    user = User.query.filter_by(account_number=account_number).first()
+    acc_num = request.args.get("account_number")
+    user = User.query.filter_by(account_number=acc_num).first()
     if not user:
         return jsonify({"message": "Account not found"}), 404
     return jsonify({"name": user.name, "account_number": user.account_number, "bank": "dolor3v"})
+
+@jwt_required()
+def purity_memory():
+    acc = get_jwt_identity()
+    data = request.get_json()
+    mem = PurityMemory(account_number=acc, memory=data.get("memory", ""))
+    db.session.add(mem)
+    db.session.commit()
+    return jsonify({"message": "Memory saved"})
+
+@jwt_required()
+def get_purity_memory():
+    acc = get_jwt_identity()
+    mems = PurityMemory.query.filter_by(account_number=acc).order_by(PurityMemory.timestamp.desc()).limit(20).all()
+    return jsonify({"memories": [m.memory for m in mems]})

models.py

@@ -7,9 +7,21 @@ class User(db.Model):
     id = db.Column(db.Integer, primary_key=True)
     name = db.Column(db.String(100), nullable=False)
     email = db.Column(db.String(100), nullable=False, unique=True)
-    password = db.Column(db.String(100), nullable=False)
+    password = db.Column(db.String(200), nullable=False)
     account_number = db.Column(db.String(20), nullable=False, unique=True)
     balance = db.Column(db.Float, nullable=False, default=0.0)
+    phone = db.Column(db.String(20), nullable=True)
+    pin = db.Column(db.String(200), nullable=True)
+    tier = db.Column(db.Integer, default=0)
+    # KYC fields
+    nin = db.Column(db.String(20), nullable=True)
+    bvn = db.Column(db.String(20), nullable=True)
+    id_card_url = db.Column(db.String(200), nullable=True)
+    nepa_bill_url = db.Column(db.String(200), nullable=True)
+    kyc_status = db.Column(db.String(20), default="none")
+    daily_limit = db.Column(db.Float, default=0.0)
+    max_balance = db.Column(db.Float, default=200000.0)
+    created_at = db.Column(db.DateTime, default=datetime.utcnow)
 
 class Transaction(db.Model):
     id = db.Column(db.Integer, primary_key=True)
@@ -20,6 +32,7 @@ class Transaction(db.Model):
     is_external = db.Column(db.Boolean, default=False)
     reference = db.Column(db.String(50), nullable=True)
     ai_review = db.Column(db.String(500), nullable=True)
+    transaction_type = db.Column(db.String(20), default="transfer")
     timestamp = db.Column(db.DateTime, default=datetime.utcnow)
 
 class Alert(db.Model):
@@ -28,3 +41,9 @@ class Alert(db.Model):
     message = db.Column(db.String(500), nullable=False)
     read = db.Column(db.Boolean, default=False)
     timestamp = db.Column(db.DateTime, default=datetime.utcnow)
+
+class PurityMemory(db.Model):
+    id = db.Column(db.Integer, primary_key=True)
+    account_number = db.Column(db.String(20), nullable=False)
+    memory = db.Column(db.Text, nullable=False)
+    timestamp = db.Column(db.DateTime, default=datetime.utcnow)