#!/usr/bin/env python3 """ BNKFX Banking Platform - Localhost High-Performance Preview Server Serves the complete frontend, mobile-first customer banking app, and admin portal. """ import http.server import socketserver import os import re import json import urllib.parse import hashlib import time import random import email.parser import email.policy import base64 import html import secrets import mail_service import platform_settings_service html_lib = html def parse_request_body(post_data, content_type_header): data = {} if not post_data: return data content_type_header = content_type_header or "" if "multipart/form-data" in content_type_header: try: msg_bytes = f"Content-Type: {content_type_header}\r\n\r\n".encode("latin1") + post_data msg = email.parser.BytesParser(policy=email.policy.default).parsebytes(msg_bytes) for part in msg.iter_parts(): name = part.get_param("name", header="content-disposition") if not name: continue filename = part.get_filename() if filename: payload = part.get_payload(decode=True) or b"" if len(payload) > 0: ct = part.get_content_type() or "application/octet-stream" data[name] = payload data[f"{name}_filename"] = filename data[f"{name}_content_type"] = ct b64 = base64.b64encode(payload).decode("ascii") if name == "icon_file": data["icon_data"] = f"data:{ct};base64,{b64}" data["icon_mime"] = ct elif name == "qr_file": data["qr_data"] = f"data:{ct};base64,{b64}" else: try: val = part.get_content() except Exception: val = (part.get_payload(decode=True) or b"").decode("utf-8", errors="replace") if isinstance(val, str): val = val.strip() data[name] = val return data except Exception: pass if "application/json" in content_type_header: try: return json.loads(post_data.decode("utf-8")) except Exception: pass try: return dict(urllib.parse.parse_qsl(post_data.decode("utf-8", errors="replace"))) except Exception: return {} PORT = 8000 WORKSPACE = "/Users/elochukwu/Desktop/Bnkfx" PUBLIC_DIR = os.path.join(WORKSPACE, "public") APP_DIR = os.path.join(WORKSPACE, "app") VIEWS_DIR = os.path.join(APP_DIR, "Views") # Live Demo State for Full Localhost Interactivity STATE = { "user": { "id": 2, "first_name": "Elochukwu", "last_name": "Elom", "email": "elochukwu@bnkfx.com", "role": "customer", "country": "United States", "phone": "+1 (555) 234-5678", "address": "742 Evergreen Terrace, Springfield, IL", "status": "active", "email_verified_at": "2026-10-27 12:00:00", "kyc_status": "approved", "kyc_document_type": "Passport", "kyc_submitted_at": "2026-10-27 11:00:00", "kyc_reviewed_at": "2026-10-27 12:30:00", "kyc_rejection_reason": None, "suspended_reason": None, "suspended_at": None, "created_at": "2026-10-20 09:30:00" }, "admin": { "id": 1, "first_name": "Super", "last_name": "Admin", "email": "admin@bnkfx.com", "role": "super_admin", "status": "active" }, "impersonation": None, "users": [ { "id": 2, "first_name": "Elochukwu", "last_name": "Elom", "email": "elochukwu@bnkfx.com", "role": "customer", "country": "United States", "phone": "+1 (555) 234-5678", "address": "742 Evergreen Terrace, Springfield, IL", "status": "active", "email_verified_at": "2026-10-27 12:00:00", "kyc_status": "approved", "kyc_document_type": "Passport", "kyc_submitted_at": "2026-10-27 11:00:00", "kyc_reviewed_at": "2026-10-27 12:30:00", "kyc_rejection_reason": None, "suspended_reason": None, "suspended_at": None, "created_at": "2026-10-20 09:30:00" }, { "id": 3, "first_name": "Sarah", "last_name": "Connor", "email": "sarah@bnkfx.com", "role": "customer", "country": "United Kingdom", "phone": "+44 20 7946 0912", "address": "10 Downing Street, London", "status": "active", "email_verified_at": None, "kyc_status": "pending_review", "kyc_document_type": "Driver's License", "kyc_submitted_at": "2026-10-26 14:15:00", "kyc_reviewed_at": None, "kyc_rejection_reason": None, "suspended_reason": None, "suspended_at": None, "created_at": "2026-10-22 15:00:00" }, { "id": 4, "first_name": "Marcus", "last_name": "Vance", "email": "marcus.v@bnkfx.com", "role": "customer", "country": "Canada", "phone": "+1 (416) 555-0182", "address": "123 King St W, Toronto, ON", "status": "suspended", "email_verified_at": "2026-10-21 10:00:00", "kyc_status": "rejected", "kyc_document_type": "National ID", "kyc_submitted_at": "2026-10-23 08:30:00", "kyc_reviewed_at": "2026-10-23 11:00:00", "kyc_rejection_reason": "National ID card expired in 2024", "suspended_reason": "Multiple KYC verification failures and suspicious IP activity", "suspended_at": "2026-10-24 16:45:00", "created_at": "2026-10-21 08:00:00" } ], "payment_methods": [ { "id": 1, "name": "USD Coin (Solana)", "code": "USDC", "network": "SOL", "icon_url": "/assets/images/crypto/usdc.svg", "wallet_address": "7XawRvyqYmqG6XWnL2G73G5d5pQoM4wN7VnZkL8tC4mK", "min_deposit": 50.00, "max_deposit": 100000.00, "required_confirmations": 12, "processing_fee_pct": 0.00, "instructions": "Send only USDC via Solana network. Instant processing.", "status": "active", "sort_order": 1 }, { "id": 2, "name": "USD Coin (Ethereum ERC-20)", "code": "USDC", "network": "ERC20", "icon_url": "/assets/images/crypto/usdc.svg", "wallet_address": "0x4B20993Bc481177ec7E8f571ceCaE8A9e22C02db", "min_deposit": 50.00, "max_deposit": 100000.00, "required_confirmations": 12, "processing_fee_pct": 0.00, "instructions": "Send only ERC-20 USDC. Standard Ethereum network fees apply.", "status": "active", "sort_order": 2 }, { "id": 3, "name": "USD Coin (Tron TRC-20)", "code": "USDC", "network": "TRC20", "icon_url": "/assets/images/crypto/usdc.svg", "wallet_address": "TQn9Y2khEsLJW1ChVWFMSMeSTow5K3GW5B", "min_deposit": 50.00, "max_deposit": 100000.00, "required_confirmations": 19, "processing_fee_pct": 0.00, "instructions": "Send only TRC-20 USDC. Low cost network transfer.", "status": "active", "sort_order": 3 }, { "id": 4, "name": "Bitcoin (Native SegWit)", "code": "BTC", "network": "BTC", "icon_url": "/assets/images/crypto/btc.svg", "wallet_address": "bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh", "min_deposit": 100.00, "max_deposit": 250000.00, "required_confirmations": 3, "processing_fee_pct": 0.00, "instructions": "Send native Bitcoin (BTC). Requires 3 network confirmations.", "status": "active", "sort_order": 4 }, { "id": 5, "name": "Ethereum (ERC-20)", "code": "ETH", "network": "ERC20", "icon_url": "/assets/images/crypto/eth.svg", "wallet_address": "0x71C8360f3E4249a5b3a3C7b38d3568c07e0541C5", "min_deposit": 100.00, "max_deposit": 250000.00, "required_confirmations": 12, "processing_fee_pct": 0.00, "instructions": "Send native ETH to this official receiving address.", "status": "active", "sort_order": 5 } ], "wallet_address_history": [], "audit_logs": [], "accounts": [ { "id": 1, "user_id": 2, "account_number": "0515705231", "account_type": "Savings", "currency": "USD", "balance": 0.00, "status": "active" }, { "id": 2, "user_id": 2, "account_number": "8047291636", "currency": "USDC", "balance": 0.00, "status": "active" } ], "cards": [], "card_orders": [], "deposits": [], "transfers": [], "card_products": [ { "id": 1, "name": "Monveracu Obsidian Virtual", "slug": "monveracu-obsidian-virtual", "type": "virtual", "card_type": "virtual", "network": "Monveracu Pay", "design": "obsidian", "card_design": "obsidian", "fee": 0.00, "issuance_fee": 0.00, "min_balance_required": 0.00, "limit": 5000.00, "daily_limit": 5000.00, "monthly_limit": 25000.00, "description": "Zero issuance fee virtual card tailored for secure digital subscriptions and mobile payments.", "features": ["Instant Virtual Issuance", "Apple Pay & Google Pay", "Zero Foreign FX Fees", "Dynamic Security CVV"], "is_active": 1 }, { "id": 2, "name": "Monveracu Midnight Blue Platinum", "slug": "monveracu-midnight-blue-platinum", "type": "physical", "card_type": "physical", "network": "Monveracu Pay", "design": "midnight_blue", "card_design": "midnight_blue", "fee": 25.00, "issuance_fee": 25.00, "min_balance_required": 100.00, "limit": 15000.00, "daily_limit": 15000.00, "monthly_limit": 50000.00, "description": "High-durability contactless card with international ATM privileges and travel protection.", "features": ["Premium Touch NFC Chip", "Global ATM Withdrawals", "Contactless Payments", "Cardholder Travel Insurance"], "is_active": 1 }, { "id": 3, "name": "Monveracu Titanium Gold Edition", "slug": "monveracu-titanium-gold-edition", "type": "metal", "card_type": "metal", "network": "Monveracu Pay", "design": "titanium_gold", "card_design": "titanium_gold", "fee": 75.00, "issuance_fee": 75.00, "min_balance_required": 500.00, "limit": 50000.00, "daily_limit": 50000.00, "monthly_limit": 150000.00, "description": "Solid brushed stainless steel payment card engineered for executive limits and airport lounge access.", "features": ["18g Solid Stainless Steel Core", "Airport Lounge Access", "Dedicated Concierge", "1% Cashback on Global Purchases"], "is_active": 1 }, { "id": 4, "name": "Monveracu Crypto Black VIP", "slug": "monveracu-crypto-black-vip", "type": "crypto_black", "card_type": "crypto_black", "network": "Monveracu VIP", "design": "crypto_black", "card_design": "crypto_black", "fee": 150.00, "issuance_fee": 150.00, "min_balance_required": 1000.00, "limit": 100000.00, "daily_limit": 100000.00, "monthly_limit": 500000.00, "description": "Ultra-matte ceramic card with bespoke private banking benefits, 2% crypto rewards, and high liquidity caps.", "features": ["Ultra-Matte Black Ceramic Finish", "2% Crypto Cashback", "High Daily Spend Limit", "Bespoke Wealth Manager"], "is_active": 1 } ], "kyc_reminder_dismissed": False, "email_logs": [ { "id": 1, "user_id": 2, "recipient": "elochukwu@bnkfx.com", "subject": "Welcome to Alliance Bank — Your Account Details", "template": "welcome", "status": "sent", "created_at": "2026-10-20 09:30:00" }, { "id": 2, "user_id": 2, "recipient": "elochukwu@bnkfx.com", "subject": "Your Identity Verification Is Complete", "template": "kyc_approved", "status": "sent", "created_at": "2026-10-27 12:30:00" } ], "kyc_verifications": [ { "id": 1, "user_id": 3, "first_name": "Sarah", "last_name": "Connor", "email": "sarah@bnkfx.com", "account_number": "4910283746", "document_type": "Driver's License", "id_number": "DL-98234-UK", "document_path": "/storage/kyc/sample_license.jpg", "status": "pending_review", "notes": None, "rejection_reason": None, "submitted_at": "2026-10-26 14:15:00", "updated_at": "2026-10-26 14:15:00", "reviewed_by": None, "reviewed_at": None }, { "id": 2, "user_id": 4, "first_name": "Marcus", "last_name": "Vance", "email": "marcus.v@bnkfx.com", "account_number": "5819204812", "document_type": "National ID Card", "id_number": "ID-CAN-49102", "document_path": "/storage/kyc/sample_id.jpg", "status": "rejected", "notes": "Card expired", "rejection_reason": "National ID card expired in 2024", "submitted_at": "2026-10-23 08:30:00", "updated_at": "2026-10-23 11:00:00", "reviewed_by": 1, "reviewed_at": "2026-10-23 11:00:00" }, { "id": 3, "user_id": 2, "first_name": "Elochukwu", "last_name": "Elom", "email": "elochukwu@bnkfx.com", "account_number": "8047291635", "document_type": "Passport", "id_number": "USA-90123841", "document_path": "/storage/kyc/sample_passport.jpg", "status": "approved", "notes": "Verified passport bio-data and facial match.", "rejection_reason": None, "submitted_at": "2026-10-27 11:00:00", "updated_at": "2026-10-27 12:30:00", "reviewed_by": 1, "reviewed_at": "2026-10-27 12:30:00" } ], "investment_plans": [ { "id": 1, "name": "Starter Plan", "slug": "starter", "description": "Short duration, low commitment starter tier for new capital allocations.", "min_amount": 50.00, "max_amount": 99.00, "is_unlimited": False, "duration_hours": 48, "return_percentage": 20.00, "is_recommended": False, "status": "active", "display_order": 1 }, { "id": 2, "name": "Regular Plan", "slug": "regular", "description": "Standard institutional portfolio tier offering balanced yield and moderate term.", "min_amount": 100.00, "max_amount": 499.00, "is_unlimited": False, "duration_hours": 72, "return_percentage": 50.00, "is_recommended": False, "status": "active", "display_order": 2 }, { "id": 3, "name": "Pro Plan", "slug": "pro", "description": "Institutional growth tier featuring 100% contractual return across 96 hours.", "min_amount": 500.00, "max_amount": 4999.00, "is_unlimited": False, "duration_hours": 96, "return_percentage": 100.00, "is_recommended": True, "status": "active", "display_order": 3 }, { "id": 4, "name": "Premium Plan", "slug": "premium", "description": "Elite wealth management tier with unlimited allocation and 150% fixed yield.", "min_amount": 5000.00, "max_amount": None, "is_unlimited": True, "duration_hours": 120, "return_percentage": 150.00, "is_recommended": False, "status": "active", "display_order": 4 } ], "stocks": [ { "id": 1, "name": "Microsoft Corporation", "ticker": "MSFT", "category": "Technology", "short_description": "Global enterprise software, Azure cloud computing, and AI systems leader.", "default_plan_id": 3, "status": "active", "logo_url": "/assets/images/stocks/msft.svg", "display_order": 1, "notes": "Verified institutional asset" }, { "id": 2, "name": "Netflix, Inc.", "ticker": "NFLX", "category": "Entertainment", "short_description": "World leading subscription streaming entertainment service.", "default_plan_id": 2, "status": "active", "logo_url": "/assets/images/stocks/nflx.svg", "display_order": 2, "notes": "Verified institutional asset" }, { "id": 3, "name": "Apple Inc.", "ticker": "AAPL", "category": "Consumer Tech", "short_description": "Consumer technology hardware, iOS ecosystem, and digital services powerhouse.", "default_plan_id": 3, "status": "active", "logo_url": "/assets/images/stocks/aapl.svg", "display_order": 3, "notes": "Verified institutional asset" }, { "id": 4, "name": "NVIDIA Corporation", "ticker": "NVDA", "category": "Semiconductors", "short_description": "Pioneer in accelerated computing, GPU architecture, and AI datacenter hardware.", "default_plan_id": 4, "status": "active", "logo_url": "/assets/images/stocks/nvda.svg", "display_order": 4, "notes": "Verified institutional asset" }, { "id": 5, "name": "Amazon.com, Inc.", "ticker": "AMZN", "category": "E-Commerce", "short_description": "Global e-commerce marketplace, AWS cloud infrastructure, and logistics network.", "default_plan_id": 3, "status": "active", "logo_url": "/assets/images/stocks/amzn.svg", "display_order": 5, "notes": "Verified institutional asset" }, { "id": 6, "name": "Alphabet Inc.", "ticker": "GOOGL", "category": "Internet Services", "short_description": "Google search engine, YouTube video platform, Android OS, and cloud platform.", "default_plan_id": 2, "status": "active", "logo_url": "/assets/images/stocks/googl.svg", "display_order": 6, "notes": "Verified institutional asset" } ], "investments": [], "investment_redemptions": [], "email_settings": { "smtp_host": "smtp.mailgun.org", "smtp_port": 587, "smtp_username": "postmaster@bnkfx.com", "smtp_password": "encrypted_app_secret", "encryption": "tls", "from_name": "Alliance Bank Operations", "from_address": "notifications@bnkfx.com", "require_email_verification": True, "notify_welcome": True, "notify_transactions": True, "notify_security": True, "notify_password_reset": True, "notify_deposits": True, "notify_withdrawals": True, "notify_cards": True }, "password_resets": [], "email_verifications": [], "platform_settings": dict(platform_settings_service.DEFAULT_PLATFORM_SETTINGS) } def generate_svg_qr(data, size=180): hash_val = hashlib.sha256(data.encode('utf-8')).hexdigest() grid = 25 cell_size = size / grid svg = f'' svg += '' def draw_corner(sx, sy): nonlocal svg x = sx * cell_size y = sy * cell_size w = 7 * cell_size svg += f'' xi = (sx + 1) * cell_size yi = (sy + 1) * cell_size wi = 5 * cell_size svg += f'' xc = (sx + 2) * cell_size yc = (sy + 2) * cell_size wc = 3 * cell_size svg += f'' draw_corner(1, 1) draw_corner(17, 1) draw_corner(1, 17) for r in range(grid): for c in range(grid): if (r < 9 and c < 9) or (r < 9 and c > 15) or (r > 15 and c < 9): continue idx = (r * grid + c) % len(hash_val) val = int(hash_val[idx], 16) if r == 7 or c == 7: if (r + c) % 2 == 0: svg += f'' continue if val % 2 == 0: color = '#171A21' if val > 8 else '#246BFD' svg += f'' svg += '' return svg def build_app_layout(content, title="Monveracu Online Banking", current_path="/dashboard"): user = STATE["user"] initials = f"{user['first_name'][0]}{user['last_name'][0]}".upper() settings = platform_settings_service.get_platform_settings(STATE) brand_css = platform_settings_service.generate_brand_css(settings) platform_name = settings.get("platform_name", "Monveracu") short_name = settings.get("short_name", "Monveracu") page_title = title if title != "Monveracu Online Banking" else f"{platform_name} Online Banking" favicon_url = settings.get("favicon_url", "/assets/images/logo/favicon.ico") def nav_link(url, label, icon): active = (current_path == url or (url != "/dashboard" and current_path.startswith(url))) classes = "bg-[#246BFD]/10 text-[#246BFD] font-semibold border-l-4 border-[#246BFD]" if active else "text-[#9CA6BA] hover:text-[#F8FAFC] hover:bg-[#171A21]" return f''' {label} ''' def mobile_link(url, label, icon): active = (current_path == url or (url != "/dashboard" and current_path.startswith(url))) color = "text-[#246BFD] font-bold" if active else "text-[#737D90] hover:text-[#9CA6BA]" return f''' {label} ''' impersonation_banner = "" if STATE.get("impersonation"): imp = STATE["impersonation"] impersonation_banner = f'''
Support Mode Active: Logged in as {user['first_name']} {user['last_name']} ({user['email']}). Administrator: {imp.get('original_admin_email', 'admin@bnkfx.com')}. All actions are recorded.
Exit Support Mode
''' return f''' {page_title} {brand_css}
{impersonation_banner}
{short_name}
{initials}
{content}
''' def build_admin_layout(content, title="Monveracu Admin Portal", current_path="/admin"): settings = platform_settings_service.get_platform_settings(STATE) brand_css = platform_settings_service.generate_brand_css(settings) short_name = settings.get("short_name", "Monveracu") platform_name = settings.get("platform_name", "Monveracu") admin_title = title if title != "Monveracu Admin Portal" else f"{short_name} Admin Portal" favicon_url = settings.get("favicon_url", "/assets/images/logo/favicon.ico") def admin_link(url, label, icon): active = (current_path == url or (url != "/admin" and current_path.startswith(url))) classes = "bg-[#F05D6C]/10 text-[#F05D6C] font-semibold border-l-4 border-[#F05D6C]" if active else "text-[#9CA6BA] hover:text-white hover:bg-[#171A21]" return f''' {label} ''' return f''' {admin_title} {brand_css}

{title}

Ledger Synchronized
{content}
''' class ThreadedHTTPServer(socketserver.ThreadingMixIn, http.server.HTTPServer): daemon_threads = True allow_reuse_address = True class BnkfxHandler(http.server.SimpleHTTPRequestHandler): def translate_path(self, path): if path.startswith("/assets/"): rel_path = path[len("/assets/"):] return os.path.join(PUBLIC_DIR, "assets", rel_path) return super().translate_path(path) def do_POST(self): parsed = urllib.parse.urlparse(self.path) content_length = int(self.headers.get('Content-Length', 0)) post_data = self.rfile.read(content_length) content_type = self.headers.get('Content-Type', '') data = parse_request_body(post_data, content_type) # Check Admin Actions First import preview_admin if preview_admin.handle_admin_post(self, parsed, data, STATE): return # Maintenance Mode Check for non-admin mutations if platform_settings_service.is_maintenance_mode(STATE, user=STATE.get("user"), path=parsed.path): settings = platform_settings_service.get_platform_settings(STATE) self.send_response(503) self.send_header("Content-Type", "application/json; charset=utf-8") self.end_headers() self.wfile.write(json.dumps({ "success": False, "error": "Platform is currently undergoing scheduled maintenance. Financial operations are temporarily suspended.", "maintenance_mode": True, "message": settings.get("maintenance_mode_message") }).encode("utf-8")) return # 0. User Authentication Login if parsed.path == "/login": email_val = str(data.get("email", "")).lower().strip() # If admin, switch session to Super Admin and redirect to /admin if "admin" in email_val: admin_user = next((u for u in STATE.get("users", []) if u.get("role") in ["admin", "super_admin"]), None) if admin_user: STATE["user"] = admin_user self.send_response(302) self.send_header("Location", "/admin") self.end_headers() return elif email_val: matched_user = next((u for u in STATE.get("users", []) if u.get("email", "").lower() == email_val), None) if matched_user: STATE["user"] = matched_user self.send_response(302) self.send_header("Location", "/dashboard") self.end_headers() return # 0.05 User Language Preference if parsed.path == "/api/user/language": lang = str(data.get("language", "en")).lower().strip() if lang in ["en", "es", "fr", "pt"]: if STATE.get("user"): STATE["user"]["preferred_language"] = lang self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": True, "language": lang}).encode('utf-8')) return self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "Unsupported language"}).encode('utf-8')) return # 0. User Registration if parsed.path == "/register": cfg = platform_settings_service.get_platform_settings(STATE) if not cfg.get("allow_registrations", True): self.send_response(403) self.send_header("Content-Type", "application/json; charset=utf-8") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "New user registrations are currently disabled by the administrator."}).encode("utf-8")) return email_lower = data.get("email", "").lower().strip() first_name = data.get("first_name", "Abraham").strip() last_name = data.get("last_name", "Elom").strip() username = data.get("username", "abraham").strip() country = data.get("country", "United States").strip() account_type = data.get("account_type", "Checking Account").strip() if not email_lower or "@" not in email_lower: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"error": "A valid email address is required."}).encode('utf-8')) return # Prevent duplicate email registration existing = next((u for u in STATE.get("users", []) if u["email"].lower() == email_lower), None) if existing and existing["id"] != STATE["user"].get("id"): self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"error": "An account with this email address already exists."}).encode('utf-8')) return new_acc_num = "".join([str(random.randint(0, 9)) for _ in range(10)]) while any(a.get("account_number") == new_acc_num for a in STATE.get("accounts", [])): new_acc_num = "".join([str(random.randint(0, 9)) for _ in range(10)]) new_user_id = max([u["id"] for u in STATE.get("users", [])] + [10]) + 1 new_user = { "id": new_user_id, "first_name": first_name, "last_name": last_name, "username": username, "email": email_lower, "country": country, "phone": data.get("phone", "+1 555-0199"), "address": data.get("address", "742 Evergreen Terrace, Suite 100"), "status": "active", "kyc_status": "not_submitted", "email_verified_at": time.strftime("%Y-%m-%d %H:%M:%S"), "kyc_document_type": None, "kyc_submitted_at": None, "kyc_reviewed_at": None, "kyc_rejection_reason": None, "created_at": time.strftime("%Y-%m-%d %H:%M:%S") } STATE.setdefault("users", []).append(new_user) STATE["registered_user"] = new_user STATE["_last_welcome_resend"] = time.time() # Transactional Welcome Email Log welcome_email = { "id": len(STATE.get("email_logs", [])) + 1, "user_id": new_user_id, "recipient": email_lower, "subject": "Welcome to Alliance Bank — Your Account Details", "template": "welcome", "status": "sent", "metadata": { "account_number": new_acc_num, "account_type": account_type, "currency": "USD" }, "created_at": time.strftime("%Y-%m-%d %H:%M:%S") } STATE.setdefault("email_logs", []).append(welcome_email) try: os.makedirs(os.path.join(WORKSPACE, "storage", "logs"), exist_ok=True) with open(os.path.join(WORKSPACE, "storage", "logs", "mail.log"), "a") as mf: mf.write(f"[{time.strftime('%Y-%m-%d %H:%M:%S')}] [TEMPLATE: welcome] TO: {email_lower} | SUBJECT: Welcome to Alliance Bank — Your Account Details | ACC: {new_acc_num}\n") except Exception: pass STATE["registration_success"] = { "first_name": first_name, "last_name": last_name, "email": email_lower, "account_number": new_acc_num, "account_type": account_type, "currency": "USD", "email_sent": True } self.send_response(302) self.send_header("Location", "/register/success") self.end_headers() return # 0.1 Resend Welcome Email if parsed.path == "/register/resend-welcome": now = time.time() last_resend = STATE.get("_last_welcome_resend", 0) if now - last_resend < 60: self.send_response(429) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": False, "message": "A welcome email was recently dispatched. Please wait before requesting another.", "retry_after": int(60 - (now - last_resend)) }).encode('utf-8')) return STATE["_last_welcome_resend"] = now target_email = data.get("email") or STATE.get("registration_success", {}).get("email") or STATE["user"]["email"] STATE.setdefault("email_logs", []).append({ "id": len(STATE.get("email_logs", [])) + 1, "user_id": STATE["user"]["id"], "recipient": target_email, "subject": "Welcome to Alliance Bank — Your Account Details", "template": "welcome", "status": "sent", "created_at": time.strftime("%Y-%m-%d %H:%M:%S") }) self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": True, "message": "Welcome email resent successfully. Please check your inbox." }).encode('utf-8')) return # 0.11 Customer Forgot Password Request if parsed.path == "/forgot-password": cfg = platform_settings_service.get_platform_settings(STATE) if not cfg.get("allow_password_reset", True): self.send_response(403) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "Password resets are temporarily disabled by the administrator."}).encode('utf-8')) return email_val = str(data.get("email", "")).lower().strip() generic_response = { "success": True, "message": "If an account is associated with that email address, password reset instructions have been dispatched to your inbox." } if not email_val or "@" not in email_val: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "A valid email address is required."}).encode('utf-8')) return # Rate limiting check: max 1 per 30 seconds for same email now = time.time() resets = STATE.get("password_resets", []) recent = [r for r in resets if r.get("email") == email_val and (now - r.get("_timestamp", 0)) < 30] if recent: self.send_response(429) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": False, "error": "A password reset link was recently requested. Please check your inbox or wait before requesting another." }).encode('utf-8')) return user = next((u for u in STATE.get("users", []) if u.get("email", "").lower() == email_val), None) if user: token = secrets.token_urlsafe(32) reset_record = { "id": len(STATE.setdefault("password_resets", [])) + 1, "user_id": user["id"], "email": email_val, "token": token, "_timestamp": now, "expires_at": time.strftime("%Y-%m-%d %H:%M:%S", time.gmtime(now + 3600)), "used_at": None, "created_at": time.strftime("%Y-%m-%d %H:%M:%S") } STATE["password_resets"].append(reset_record) try: mail_service.send_notification_email( recipient=email_val, template="password_reset", context={ "first_name": user.get("first_name", "Customer"), "token": token }, user_id=user["id"], idempotency_key=f"pwd_reset_{token}", STATE=STATE ) except Exception: pass self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps(generic_response).encode('utf-8')) return # 0.12 Customer Reset Password Submission if parsed.path == "/reset-password": token = str(data.get("token", "")).strip() new_pass = str(data.get("password", "")) confirm_pass = str(data.get("password_confirmation", "")) if not token: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "A valid password reset token is required."}).encode('utf-8')) return if not new_pass or len(new_pass) < 8: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "Password must be at least 8 characters in length."}).encode('utf-8')) return if new_pass != confirm_pass: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": "Passwords do not match."}).encode('utf-8')) return reset_record = next((r for r in STATE.get("password_resets", []) if r.get("token") == token), None) now_str = time.strftime("%Y-%m-%d %H:%M:%S") if not reset_record or reset_record.get("used_at") is not None or reset_record.get("expires_at", "") < now_str: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": False, "error": "This password reset link is invalid or has expired. Please request a new link." }).encode('utf-8')) return reset_record["used_at"] = now_str target_user = next((u for u in STATE.get("users", []) if u.get("id") == reset_record.get("user_id")), None) if target_user: target_user["password"] = new_pass STATE.setdefault("audit_logs", []).append({ "action": "user_password_reset_completed", "user_id": target_user["id"], "created_at": now_str, "details": f"Password reset successfully executed for user {target_user['email']} via verified single-use token." }) try: mail_service.send_notification_email( recipient=target_user["email"], template="security_alert", context={ "first_name": target_user.get("first_name", "Customer"), "event_title": "Password Reset Successfully", "details": "Your Alliance Bank password has been updated. If you did not initiate this change, freeze your account immediately.", "ip_address": "127.0.0.1", "timestamp": time.strftime("%Y-%m-%d %H:%M:%S UTC") }, user_id=target_user["id"], idempotency_key=f"sec_alert_pwd_{token}", STATE=STATE ) except Exception: pass self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": True, "message": "Your password has been reset successfully. You may now sign in with your new credentials." }).encode('utf-8')) return # 0.13 Customer Resend Email Verification if parsed.path == "/resend-verification": email_val = str(data.get("email") or STATE.get("user", {}).get("email", "")).lower().strip() target_user = next((u for u in STATE.get("users", []) if u.get("email", "").lower() == email_val), None) or STATE.get("user") verif_token = secrets.token_urlsafe(32) STATE.setdefault("email_verifications", []).append({ "user_id": target_user.get("id", 2), "email": email_val, "token": verif_token, "expires_at": time.strftime("%Y-%m-%d %H:%M:%S", time.gmtime(time.time() + 86400)), "created_at": time.strftime("%Y-%m-%d %H:%M:%S") }) try: mail_service.send_notification_email( recipient=email_val, template="email_verification", context={ "first_name": target_user.get("first_name", "Customer"), "token": verif_token }, user_id=target_user.get("id", 2), idempotency_key=f"verif_resend_{verif_token}", STATE=STATE ) except Exception: pass self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({ "success": True, "message": f"Verification email dispatched to {email_val}. Please check your inbox." }).encode('utf-8')) return # 0.2 Customer KYC Submission if parsed.path == "/kyc": doc_type = data.get("document_type", "Passport") id_num = data.get("id_number", "VERIFIED-ID-99") notes = data.get("notes", "") new_sub_id = len(STATE.get("kyc_verifications", [])) + 1 new_sub = { "id": new_sub_id, "user_id": STATE["user"]["id"], "first_name": STATE["user"]["first_name"], "last_name": STATE["user"]["last_name"], "email": STATE["user"]["email"], "account_number": STATE["accounts"][0]["account_number"], "document_type": doc_type, "id_number": id_num, "document_path": f"/storage/kyc/kyc_{new_sub_id}.jpg", "status": "pending_review", "notes": notes, "rejection_reason": None, "submitted_at": time.strftime("%Y-%m-%d %H:%M:%S"), "updated_at": time.strftime("%Y-%m-%d %H:%M:%S"), "reviewed_by": None, "reviewed_at": None } STATE.setdefault("kyc_verifications", []).append(new_sub) STATE["user"]["kyc_status"] = "pending_review" STATE["user"]["kyc_document_type"] = doc_type STATE["user"]["kyc_submitted_at"] = new_sub["submitted_at"] match_user = next((u for u in STATE.get("users", []) if u["id"] == STATE["user"]["id"]), None) if match_user: match_user["kyc_status"] = "pending_review" match_user["kyc_document_type"] = doc_type match_user["kyc_submitted_at"] = new_sub["submitted_at"] STATE.setdefault("email_logs", []).append({ "id": len(STATE.get("email_logs", [])) + 1, "user_id": STATE["user"]["id"], "recipient": STATE["user"]["email"], "subject": "Identity Verification Documents Received — Alliance Bank", "template": "kyc_submitted", "status": "sent", "created_at": time.strftime("%Y-%m-%d %H:%M:%S") }) self.send_response(302) self.send_header("Location", "/kyc") self.end_headers() return # 0.3 Dismiss KYC Notice if parsed.path == "/kyc/dismiss-notice": STATE["kyc_reminder_dismissed"] = True self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": True}).encode('utf-8')) return # 1. Recipient Lookup API if parsed.path == "/transfers/find-recipient": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() query = data.get("query", "").strip() lookup_type = data.get("type", "email") if lookup_type == "email" and ("abraham" in query.lower() or "elochukwu" in query.lower() or query == STATE["user"]["email"]): res = {"success": False, "error": "You cannot transfer funds to yourself."} elif lookup_type == "account_number" and ("8047291635" in query or "0515705231" in query or STATE["accounts"][0]["account_number"] in query): res = {"success": False, "error": "You cannot transfer funds to your own account number."} elif lookup_type == "email" and ("sarah" in query.lower() or query == "sarah@bnkfx.com" or "@" in query): res = { "success": True, "recipient": { "id": 3, "name": "Sarah Connor", "email": query if ("@" in query and "sarah" not in query.lower()) else "sarah@bnkfx.com", "account_id": 3, "account_number": "4910283746", "masked_account_number": "••••••3746", "currency": "USD", "status": "Eligible" } } elif lookup_type == "account_number" and ("4910283746" in query or "3746" in query or len(query.replace("-", "").replace(" ", "")) >= 8): clean_acc = query.replace("-", "").replace(" ", "") res = { "success": True, "recipient": { "id": 3, "name": "Sarah Connor", "email": "sarah@bnkfx.com", "account_id": 3, "account_number": clean_acc if len(clean_acc) >= 8 else "4910283746", "masked_account_number": f"••••••{clean_acc[-4:]}" if len(clean_acc) >= 4 else "••••••3746", "currency": "USD", "status": "Eligible" } } else: res = { "success": False, "error": "We couldn't find an eligible account with those details. (Hint: Try 'sarah@bnkfx.com' or '4910283746')" } self.wfile.write(json.dumps(res).encode('utf-8')) return # 2. Execute Transfer API if parsed.path == "/transfers/send": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() if STATE.get("user", {}).get("status") == "suspended": res = {"success": False, "error": f"Account suspended: {STATE['user'].get('suspended_reason', 'Compliance hold')}. Transfers are disabled."} self.wfile.write(json.dumps(res).encode('utf-8')) return amt = float(data.get("amount", 100)) if amt <= 0: res = {"success": False, "error": "Transfer amount must be greater than zero."} self.wfile.write(json.dumps(res).encode('utf-8')) return if amt > STATE["accounts"][0]["balance"]: res = {"success": False, "error": f"Insufficient available balance. You currently have ${STATE['accounts'][0]['balance']:.2f} USD."} self.wfile.write(json.dumps(res).encode('utf-8')) return ref = "TXN-20261027-" + hashlib.sha256(str(time.time()).encode()).hexdigest()[:8].upper() STATE["accounts"][0]["balance"] -= amt new_tx = { "ref": ref, "direction": "sent", "sender": f"{STATE['user']['first_name']} {STATE['user']['last_name']}", "sender_email": STATE['user']['email'], "sender_acc": STATE['accounts'][0]['account_number'], "recipient": "Sarah Connor", "recipient_email": "sarah@bnkfx.com", "recipient_acc": "4910283746", "amount": amt, "currency": "USD", "fee": 0.00, "total": amt, "status": "Completed", "date": "Just now" } STATE["transfers"].insert(0, new_tx) # Decoupled Non-blocking Notification Dispatch try: mail_service.send_notification_email( recipient=STATE["user"]["email"], template="transaction", context={ "role": "debit", "first_name": STATE["user"]["first_name"], "reference": ref, "amount": amt, "currency": "USD", "counterparty": "Sarah Connor", "type": "Internal Transfer Out", "timestamp": time.strftime("%Y-%m-%d %H:%M:%S UTC"), "balance": STATE["accounts"][0]["balance"] }, user_id=STATE["user"]["id"], idempotency_key=f"tx_debit_{ref}", STATE=STATE ) mail_service.send_notification_email( recipient="sarah@bnkfx.com", template="transaction", context={ "role": "credit", "first_name": "Sarah", "reference": ref, "amount": amt, "currency": "USD", "counterparty": f"{STATE['user']['first_name']} {STATE['user']['last_name']}", "type": "Internal Transfer In", "timestamp": time.strftime("%Y-%m-%d %H:%M:%S UTC"), "balance": None }, user_id=3, idempotency_key=f"tx_credit_{ref}", STATE=STATE ) except Exception: pass res = { "success": True, "transfer": { "reference": ref, "amount": amt, "currency": "USD", "status": "completed" } } self.wfile.write(json.dumps(res).encode('utf-8')) return # 3. Crypto Deposit API (Initiate) if parsed.path == "/deposits/initiate": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() if STATE.get("user", {}).get("status") == "suspended": res = {"success": False, "error": f"Account suspended: {STATE['user'].get('suspended_reason', 'Compliance hold')}. Deposits are disabled."} self.wfile.write(json.dumps(res).encode('utf-8')) return asset = str(data.get("asset", "USDC")).upper() net = str(data.get("network", "ERC20")).upper() amt = float(data.get("amount", 500)) matching_pm = None for pm in STATE.get("payment_methods", []): if pm.get("status") == "active" and str(pm.get("code", "")).upper() == asset: if str(pm.get("network", "")).upper() == net or (asset == "BTC" and str(pm.get("network", "")).upper() == "BTC") or (asset == "ETH" and str(pm.get("network", "")).upper() == "ERC20"): matching_pm = pm break if not matching_pm: res = {"success": False, "error": f"The deposit method for {asset} on {net} network is currently disabled or unavailable."} self.wfile.write(json.dumps(res).encode('utf-8')) return addr = matching_pm["wallet_address"] net_name = matching_pm["name"] confs = int(matching_pm.get("required_confirmations", 12)) min_dep = float(matching_pm.get("min_deposit", 50.0)) max_dep = float(matching_pm.get("max_deposit", 100000.0)) if amt < min_dep or amt > max_dep: res = {"success": False, "error": f"Deposit amount must be between ${min_dep:,.2f} and ${max_dep:,.2f} USD."} self.wfile.write(json.dumps(res).encode('utf-8')) return if asset == "BTC": rate = 68500.0 crypto_amt = round(amt / rate, 8) elif asset == "ETH": rate = 2650.0 crypto_amt = round(amt / rate, 6) else: rate = 1.0 crypto_amt = amt new_id = len(STATE["deposits"]) + 1 ref = "DEP-" + hashlib.sha256(str(time.time()).encode()).hexdigest()[:8].upper() new_dep = { "id": new_id, "reference": ref, "user_id": STATE["user"]["id"], "customer_name": f"{STATE['user']['first_name']} {STATE['user']['last_name']}", "customer_email": STATE["user"]["email"], "account_number": STATE["accounts"][0]["account_number"], "asset": asset, "network": net_name, "deposit_address": addr, "tx_hash": None, "amount": amt, "credited_amount": 0.0, "confirmations": 0, "required_confirmations": confs, "status": "awaiting_deposit", "created_at": "Just now" } STATE["deposits"].insert(0, new_dep) res = { "success": True, "data": { "deposit": new_dep, "reference": ref, "address": addr, "qr_svg": generate_svg_qr(addr, 200), "asset": asset, "network": net, "network_name": net_name, "required_confirmations": confs, "min_deposit": min_dep, "max_deposit": max_dep, "requested_amount": amt, "estimated_crypto_amount": crypto_amt, "exchange_rate": rate, "fee": 0.0, "estimated_account_credit": amt, "status": "awaiting_deposit", "date_initiated": "Just now" } } self.wfile.write(json.dumps(res).encode('utf-8')) return # 3.1. Customer Confirms Sent Funds (Transitions to pending_review, DOES NOT credit ledger) if parsed.path == "/deposits/confirm-sent": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() ref = data.get("reference") dep_id = data.get("deposit_id") dep = None if dep_id: dep = next((d for d in STATE["deposits"] if d["id"] == int(dep_id)), None) if not dep and ref: dep = next((d for d in STATE["deposits"] if d["reference"] == ref), None) if not dep and STATE["deposits"]: dep = STATE["deposits"][0] if dep: if dep["status"] in ["awaiting_deposit", "awaiting_payment"]: dep["status"] = "pending_review" tx_hash = data.get("tx_hash") if tx_hash: dep["tx_hash"] = tx_hash res = { "success": True, "status": dep["status"], "deposit": dep, "message": "Your deposit confirmation has been received. Your transaction is awaiting verification and review. Your account will be credited once the deposit has been verified and approved." } else: res = {"success": False, "error": "Deposit record not found."} self.wfile.write(json.dumps(res).encode('utf-8')) return # 3.2. Administrator Deposit Approval API if parsed.path.startswith("/admin/deposits/") and parsed.path.endswith("/approve"): parts = parsed.path.strip("/").split("/") dep_id = int(parts[2]) dep = next((d for d in STATE["deposits"] if d["id"] == dep_id), None) if dep and dep["status"] != "credited": amt = float(data.get("amount", dep["amount"])) STATE["accounts"][0]["balance"] += amt dep["status"] = "credited" dep["credited_amount"] = amt dep["tx_hash"] = data.get("tx_hash") or f"0x{hashlib.sha256(str(time.time()).encode()).hexdigest()}" # Decoupled Deposit Credited Notification try: target_user = STATE.get("user", {}) mail_service.send_notification_email( recipient=target_user.get("email", "customer@bnkfx.com"), template="deposit_update", context={ "status": "credited", "first_name": target_user.get("first_name", "Customer"), "reference": dep.get("reference", f"DEP-{dep_id}"), "amount": amt, "currency": dep.get("currency", "USD"), "network": dep.get("network", "Base"), "wallet_address": dep.get("wallet_address", ""), "tx_hash": dep.get("tx_hash", ""), "timestamp": time.strftime("%Y-%m-%d %H:%M:%S UTC") }, user_id=target_user.get("id", 2), idempotency_key=f"dep_credit_{dep_id}", STATE=STATE ) except Exception: pass res = {"success": True, "message": f"Deposit #{dep['reference']} credited ${amt:.2f} to customer account."} elif dep and dep["status"] == "credited": res = {"success": True, "already_credited": True, "message": "Deposit already credited."} else: res = {"success": False, "error": "Deposit not found."} self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps(res).encode('utf-8')) return # 3.3. Administrator Deposit Rejection API if parsed.path.startswith("/admin/deposits/") and parsed.path.endswith("/reject"): parts = parsed.path.strip("/").split("/") dep_id = int(parts[2]) dep = next((d for d in STATE["deposits"] if d["id"] == dep_id), None) if dep and dep["status"] != "credited": dep["status"] = "rejected" rej_reason = data.get("reason", "Administrative compliance review") dep["rejection_reason"] = rej_reason try: target_user = STATE.get("user", {}) mail_service.send_notification_email( recipient=target_user.get("email", "customer@bnkfx.com"), template="deposit_update", context={ "status": "rejected", "first_name": target_user.get("first_name", "Customer"), "reference": dep.get("reference", f"DEP-{dep_id}"), "amount": dep.get("amount", 0.0), "currency": dep.get("currency", "USD"), "network": dep.get("network", "Base"), "wallet_address": dep.get("wallet_address", ""), "reason": rej_reason, "timestamp": time.strftime("%Y-%m-%d %H:%M:%S UTC") }, user_id=target_user.get("id", 2), idempotency_key=f"dep_reject_{dep_id}", STATE=STATE ) except Exception: pass res = {"success": True, "message": f"Deposit #{dep['reference']} rejected."} elif dep and dep["status"] == "credited": res = {"success": False, "error": "Cannot reject an already credited deposit."} else: res = {"success": False, "error": "Deposit not found."} self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps(res).encode('utf-8')) return # 4. Simulate Credit API (Testing) if parsed.path == "/deposits/simulate-credit": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() amt = float(data.get("amount", 250)) STATE["accounts"][0]["balance"] += amt res = {"success": True, "message": f"Successfully credited ${amt:.2f} via double-entry ledger!"} self.wfile.write(json.dumps(res).encode('utf-8')) return # 4.8. Apply for Card API if parsed.path == "/cards/apply": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() if STATE.get("user", {}).get("status") == "suspended": res = {"success": False, "error": "Your account is suspended. Card applications are disabled."} self.wfile.write(json.dumps(res).encode('utf-8')) return prod_id = int(data.get("product_id", 1)) prod = next((p for p in STATE.get("card_products", []) if p["id"] == prod_id), None) if not prod or prod.get("is_active", 1) != 1: res = {"success": False, "error": "Selected card tier is currently unavailable."} self.wfile.write(json.dumps(res).encode('utf-8')) return user_bal = float(STATE["accounts"][0]["balance"]) fee = float(prod.get("issuance_fee", prod.get("fee", 0.0))) min_bal = float(prod.get("min_balance_required", 0.0)) if user_bal < min_bal: res = {"success": False, "error": f"Minimum balance requirement not met. This card tier requires at least ${min_bal:,.2f} in available funds (current: ${user_bal:,.2f})."} self.wfile.write(json.dumps(res).encode('utf-8')) return if user_bal < fee: res = {"success": False, "error": f"Insufficient available balance to cover the ${fee:,.2f} issuance fee (current: ${user_bal:,.2f})."} self.wfile.write(json.dumps(res).encode('utf-8')) return if fee > 0: STATE["accounts"][0]["balance"] -= fee STATE.setdefault("transactions", []).insert(0, { "id": len(STATE.get("transactions", [])) + 1, "type": "debit", "category": "card_issuance_fee", "amount": -fee, "currency": "USD", "status": "completed", "reference": f"FEE-CRD-{random.randint(10000, 99999)}", "description": f"Card Issuance Fee - {prod['name']}", "created_at": time.strftime("%Y-%m-%d %H:%M:%S") }) new_order_id = max([o["id"] for o in STATE.get("card_orders", [])] + [0]) + 1 order_ref = f"ORD-CRD-{random.randint(10000, 99999)}" user_name = f"{STATE.get('user', {}).get('first_name', 'Elochukwu')} {STATE.get('user', {}).get('last_name', 'Elom')}".strip() new_order = { "id": new_order_id, "reference": order_ref, "user_id": STATE.get("user", {}).get("id", 2), "user_name": user_name, "email": STATE.get("user", {}).get("email", "customer@bnkfx.com"), "product_id": prod["id"], "product_name": prod["name"], "card_type": prod.get("card_type", prod.get("type", "virtual")), "network": prod.get("network", "Monveracu Pay"), "card_design": prod.get("card_design", prod.get("design", "obsidian")), "payment_amount": fee, "min_balance_required": min_bal, "status": "pending", "rejection_reason": None, "created_at": time.strftime("%Y-%m-%d %H:%M:%S") } STATE.setdefault("card_orders", []).insert(0, new_order) res = { "success": True, "message": f"Application for {prod['name']} submitted successfully! It is now pending administrator review.", "order": new_order, "available_balance": STATE["accounts"][0]["balance"] } self.wfile.write(json.dumps(res).encode('utf-8')) return # 5. Purchase Card API if parsed.path == "/cards/purchase": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() if STATE.get("user", {}).get("status") == "suspended": res = {"success": False, "error": "Your account is suspended. Card issuance is disabled."} self.wfile.write(json.dumps(res).encode('utf-8')) return prod_id = int(data.get("product_id", 1)) prod = next((p for p in STATE["card_products"] if p["id"] == prod_id), STATE["card_products"][0]) if STATE["accounts"][0]["balance"] < prod["fee"]: res = {"success": False, "error": f"Insufficient USD balance. You need ${prod['fee']:.2f}."} else: STATE["accounts"][0]["balance"] -= prod["fee"] new_id = len(STATE["cards"]) + 1 last_4 = str(random.randint(1000, 9999)) holder_name = f"{STATE['user']['first_name']} {STATE['user']['last_name']}".upper() new_card = { "id": new_id, "name": prod["name"], "product_name": prod["name"], "type": prod.get("type", "virtual"), "card_type": prod.get("type", "virtual"), "network": prod.get("network", "Monveracu Pay"), "design": prod.get("design", "obsidian"), "card_design": prod.get("design", "obsidian"), "masked_number": f"•••• •••• •••• {last_4}", "card_number_masked": f"•••• •••• •••• {last_4}", "last_four": last_4, "exp": f"{random.randint(1, 12):02d}/31", "expiry_month": 10, "expiry_year": 2031, "holder": holder_name, "card_holder_name": holder_name, "status": "active", "daily_limit": prod["limit"], "spent_today": 0.0, "currency": "USD" } STATE["cards"].append(new_card) # Record completed order order_ref = f"ORD-CRD-{random.randint(10000, 99999)}" new_order = { "id": len(STATE.setdefault("card_orders", [])) + 1, "reference": order_ref, "user_id": STATE.get("user", {}).get("id", 2), "user_name": f"{STATE['user']['first_name']} {STATE['user']['last_name']}", "email": STATE["user"]["email"], "product_id": prod["id"], "product_name": prod["name"], "card_type": prod.get("type", "virtual"), "network": prod.get("network", "Monveracu Pay"), "card_design": prod.get("design", "obsidian"), "payment_amount": prod["fee"], "min_balance_required": prod.get("min_balance_required", 0.0), "status": "completed", "rejection_reason": None, "created_at": time.strftime("%Y-%m-%d %H:%M:%S") } STATE["card_orders"].insert(0, new_order) res = {"success": True, "message": f"Successfully purchased {prod['name']}! Card is active and ready to use.", "card": new_card} self.wfile.write(json.dumps(res).encode('utf-8')) return # 6. Toggle Card Freeze API if parsed.path == "/cards/toggle-freeze": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() card_id = int(data.get("card_id", 1)) card = next((c for c in STATE["cards"] if c["id"] == card_id), STATE["cards"][0]) card["status"] = "frozen" if card["status"] == "active" else "active" res = {"success": True, "status": card["status"], "message": f"{card['name']} is now {card['status']}."} self.wfile.write(json.dumps(res).encode('utf-8')) return # 7. Exchange Quote API if parsed.path == "/exchange/quote": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() amt = float(data.get("amount", 100)) from_curr = data.get("from_currency", "USD") to_curr = data.get("to_currency", "USDC") # Reasonable demo exchange rates rates = { ("USD", "USDC"): 1.0, ("USDC", "USD"): 1.0, ("USD", "EUR"): 0.92, ("EUR", "USD"): 1.087, ("USD", "BTC"): 0.0000147, ("BTC", "USD"): 68000.0, ("USD", "ETH"): 0.000384, ("ETH", "USD"): 2600.0, } rate = rates.get((from_curr, to_curr), 1.0) gross = amt * rate fee = gross * 0.005 net = gross - fee res = { "success": True, "quote": { "exchange_rate": rate, "gross_to_amount": gross, "fee_amount": fee, "net_to_amount": net } } self.wfile.write(json.dumps(res).encode('utf-8')) return # 8. Execute Exchange API if parsed.path == "/exchange/execute": self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() amt = float(data.get("amount", 100)) from_curr = data.get("from_currency", "USD") to_curr = data.get("to_currency", "USDC") if from_curr == "USD": if STATE["accounts"][0]["balance"] < amt: res = {"success": False, "error": f"Insufficient available USD balance."} else: STATE["accounts"][0]["balance"] -= amt STATE["accounts"][1]["balance"] += (amt * 0.995) res = {"success": True, "message": f"Successfully exchanged ${amt:.2f} USD to {(amt * 0.995):.2f} USDC!"} elif from_curr == "USDC": if STATE["accounts"][1]["balance"] < amt: res = {"success": False, "error": f"Insufficient available USDC balance."} else: STATE["accounts"][1]["balance"] -= amt STATE["accounts"][0]["balance"] += (amt * 0.995) res = {"success": True, "message": f"Successfully exchanged {amt:.2f} USDC to ${(amt * 0.995):.2f} USD!"} else: res = {"success": True, "message": f"Conversion from {from_curr} to {to_curr} processed via double-entry ledger!"} self.wfile.write(json.dumps(res).encode('utf-8')) return # 8. Create Investment API if parsed.path in ["/investments", "/investments/create"]: is_json = self.headers.get("Content-Type", "").startswith("application/json") or self.headers.get("X-Requested-With") == "XMLHttpRequest" if STATE.get("user", {}).get("status") == "suspended": err = "Account is suspended. Investment operations are disabled." if is_json: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": err}).encode('utf-8')) else: self.send_response(302) self.send_header("Location", "/investments?error=" + urllib.parse.quote(err)) self.end_headers() return try: stock_id = int(data.get("stock_id", 0)) plan_id = int(data.get("plan_id", 0)) amt = float(data.get("amount", 0)) acc_id = int(data.get("account_id") or STATE["accounts"][0]["id"]) except Exception: amt = 0.0 stock_id = 0 plan_id = 0 acc_id = 1 stock = next((s for s in STATE.get("stocks", []) if s["id"] == stock_id), None) plan = next((p for p in STATE.get("investment_plans", []) if p["id"] == plan_id), None) account = next((a for a in STATE.get("accounts", []) if a["id"] == acc_id), STATE["accounts"][0]) err = None if not stock or stock.get("status") != "active": err = "Selected stock opportunity is not active or invalid." elif not plan or plan.get("status") != "active": err = "Selected investment plan is invalid or inactive." elif amt <= 0: err = "Investment amount must be greater than zero." elif amt < plan.get("min_amount", 50.0): err = f"Minimum investment for {plan['name']} is ${plan['min_amount']:,.2f}." elif not (plan.get("is_unlimited") or plan.get("max_amount") is None) and amt > plan.get("max_amount", 100000.0): err = f"Maximum investment for {plan['name']} is ${plan['max_amount']:,.2f}." elif account["balance"] < amt: err = f"Insufficient available balance in {account['currency']} account. Current balance: ${account['balance']:,.2f}." if err: if is_json: self.send_response(400) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": err}).encode('utf-8')) else: self.send_response(302) self.send_header("Location", "/investments?error=" + urllib.parse.quote(err)) self.end_headers() return # Debit account balance atomically account["balance"] -= amt ret_pct = float(plan["return_percentage"]) profit = amt * (ret_pct / 100.0) expected_payout = amt + profit duration = int(plan["duration_hours"]) ref = "INV-" + hashlib.sha256(f"{time.time()}_{stock_id}_{amt}".encode()).hexdigest()[:8].upper() now_ts = time.time() now_str = time.strftime("%Y-%m-%d %H:%M:%S", time.localtime(now_ts)) maturity_str = time.strftime("%Y-%m-%d %H:%M:%S", time.localtime(now_ts + (duration * 3600))) new_inv = { "id": len(STATE.get("investments", [])) + 1, "user_id": STATE.get("user", {}).get("id", 2), "stock_id": stock["id"], "plan_id": plan["id"], "account_id": account["id"], "reference": ref, "stock_ticker": stock["ticker"], "stock_name": stock["name"], "stock_logo_url": stock.get("logo_url") or f"/assets/images/stocks/{stock['ticker'].lower()}.svg", "plan_name": plan["name"], "amount": amt, "return_percentage": ret_pct, "duration_hours": duration, "expected_payout": expected_payout, "started_at": now_str, "maturity_at": maturity_str, "status": "active", "created_at": now_str } STATE.setdefault("investments", []).append(new_inv) # Record in transfer ledger activity new_tx = { "type": "transfer", "direction": "sent", "title": f"Stock Investment: {stock['ticker']} ({plan['name']})", "amount": amt, "total": amt, "currency": "USD", "status": "Completed", "date": "Just now", "reference": ref } STATE.setdefault("transfers", []).insert(0, new_tx) if is_json: self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": True, "message": f"Successfully allocated ${amt:,.2f} into {stock['ticker']}.", "investment": new_inv}).encode('utf-8')) else: self.send_response(302) self.send_header("Location", "/investments") self.end_headers() return # 9. Redeem Investment API if parsed.path.startswith("/investments/") and parsed.path.endswith("/redeem"): parts = parsed.path.strip("/").split("/") inv_id = parts[1] inv = next((i for i in STATE.get("investments", []) if str(i["id"]) == str(inv_id) or i.get("reference") == inv_id), None) is_json = self.headers.get("Content-Type", "").startswith("application/json") or self.headers.get("X-Requested-With") == "XMLHttpRequest" if not inv: err = "Investment record not found." code = 404 elif inv.get("status") == "redeemed": err = "Investment has already been redeemed." code = 400 else: # Check maturity now_str = time.strftime("%Y-%m-%d %H:%M:%S") if inv.get("status") != "matured" and now_str < inv.get("maturity_at", "9999"): err = f"Investment has not reached maturity date yet. Matures at {inv.get('maturity_at')}." code = 400 else: err = None if err: if is_json: self.send_response(code) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": False, "error": err}).encode('utf-8')) else: self.send_response(302) self.send_header("Location", "/investments?error=" + urllib.parse.quote(err)) self.end_headers() return payout = float(inv.get("expected_payout", inv.get("amount", 0))) acc = next((a for a in STATE.get("accounts", []) if a["id"] == inv.get("account_id")), STATE["accounts"][0]) acc["balance"] += payout inv["status"] = "redeemed" inv["redeemed_at"] = time.strftime("%Y-%m-%d %H:%M:%S") redemption_rec = { "id": len(STATE.get("investment_redemptions", [])) + 1, "investment_id": inv["id"], "reference": inv.get("reference"), "principal_amount": inv.get("amount"), "profit_amount": payout - inv.get("amount"), "total_payout": payout, "redeemed_at": inv["redeemed_at"] } STATE.setdefault("investment_redemptions", []).append(redemption_rec) # Record credit in activity new_tx = { "type": "transfer", "direction": "received", "title": f"Maturity Proceeds: {inv['stock_ticker']}", "amount": payout, "total": payout, "currency": "USD", "status": "Completed", "date": "Just now", "reference": "RED-" + inv.get("reference", "") } STATE.setdefault("transfers", []).insert(0, new_tx) if is_json: self.send_response(200) self.send_header("Content-Type", "application/json") self.end_headers() self.wfile.write(json.dumps({"success": True, "message": f"Successfully redeemed ${payout:,.2f} USD.", "data": redemption_rec}).encode('utf-8')) else: self.send_response(302) self.send_header("Location", "/investments") self.end_headers() return # Fallback self.send_response(302) self.send_header("Location", "/dashboard") self.end_headers() def do_GET(self): parsed = urllib.parse.urlparse(self.path) path = parsed.path # User Language API if path == "/api/user/language": lang = STATE.get("user", {}).get("preferred_language", "en") self.send_response(200) self.send_header("Content-Type", "application/json; charset=utf-8") self.send_header("Access-Control-Allow-Origin", "*") self.end_headers() self.wfile.write(json.dumps({"language": lang}).encode('utf-8')) return # 1. Static Assets (CSS, JS, Fonts) if path.startswith("/assets/"): return super().do_GET() # Public Settings API (JSON) if path in ["/api/settings/public", "/settings/public"]: self.send_response(200) self.send_header("Content-Type", "application/json; charset=utf-8") self.send_header("Access-Control-Allow-Origin", "*") self.end_headers() pub = platform_settings_service.get_public_settings(STATE) self.wfile.write(json.dumps(pub, indent=2).encode('utf-8')) return # Maintenance Mode Interception if platform_settings_service.is_maintenance_mode(STATE, user=STATE.get("user"), path=path): settings = platform_settings_service.get_platform_settings(STATE) if path.startswith("/api/") or "application/json" in self.headers.get("Accept", ""): self.send_response(503) self.send_header("Content-Type", "application/json; charset=utf-8") self.end_headers() self.wfile.write(json.dumps({ "success": False, "error": "System is currently undergoing scheduled maintenance.", "maintenance_mode": True, "message": settings.get("maintenance_mode_message") }).encode("utf-8")) return else: self.send_response(503) self.send_header("Content-Type", "text/html; charset=utf-8") self.end_headers() self.wfile.write(platform_settings_service.render_maintenance_page(settings).encode("utf-8")) return if path == "/admin/impersonate/exit" or path.startswith("/admin/uploads/"): import preview_admin if preview_admin.handle_admin_get(self, parsed, path, STATE, build_admin_layout): return self.send_response(200) self.send_header("Content-Type", "text/html; charset=utf-8") self.end_headers() # 2. Public Landing Page ("Your Money. Your World.") if path == "/": view_path = os.path.join(VIEWS_DIR, "home", "index.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read().replace("", "") layout_path = os.path.join(VIEWS_DIR, "layouts", "main.php") with open(layout_path, 'r', encoding='utf-8') as f: layout = f.read() settings = platform_settings_service.get_platform_settings(STATE) brand_css = platform_settings_service.generate_brand_css(settings) platform_name = settings.get("platform_name", "Monveracu") html = layout.replace("", body) html = html.replace("", f"{platform_name} | Your Money. Your World.") html = html.replace("", brand_css) html = re.sub(r"<\?php.*?\?>", "", html, flags=re.DOTALL) html = re.sub(r"<\?=.*?\?>", "", html, flags=re.DOTALL) self.wfile.write(html.encode('utf-8')) return # 3. Authentication Pages (Login & Register) if path == "/login": view_path = os.path.join(VIEWS_DIR, "auth", "login.php") with open(view_path, 'r', encoding='utf-8') as f: html = f.read().replace("", "") settings = platform_settings_service.get_platform_settings(STATE) brand_css = platform_settings_service.generate_brand_css(settings) platform_name = settings.get("platform_name", "Alliance Bank") short_name = settings.get("short_name", "Alliance") html = html.replace("", platform_name) html = html.replace("", short_name) html = html.replace("", f"{platform_name} | Log In") html = html.replace("", brand_css) html = re.sub(r"<\?php.*?\?>", "", html, flags=re.DOTALL) html = re.sub(r"<\?=.*?\?>", "", html, flags=re.DOTALL) self.wfile.write(html.encode('utf-8')) return if path == "/register": view_path = os.path.join(VIEWS_DIR, "auth", "register.php") with open(view_path, 'r', encoding='utf-8') as f: html = f.read().replace("", "") html = re.sub(r"<\?php.*?\?>", "", html, flags=re.DOTALL) html = re.sub(r"<\?=.*?\?>", "", html, flags=re.DOTALL) self.wfile.write(html.encode('utf-8')) return # 3.1 Registration Success Page (Module 3) if path == "/register/success": reg = STATE.get("registration_success", {}) first_name = reg.get("first_name") or STATE["user"].get("first_name", "Customer") account_number = reg.get("account_number") or STATE["accounts"][0].get("account_number", "8047291635") account_type = reg.get("account_type") or STATE["accounts"][0].get("account_type", "Checking Account") currency = reg.get("currency", "USD") email = reg.get("email") or STATE["user"].get("email", "customer@bnkfx.com") html = f''' Welcome Aboard! | Alliance Bank
ALLIANCE BANK

Welcome Aboard!

Hello {first_name}, your account has been created successfully. Your account details have been sent to your registered email address.

Assigned Bank Account
Active & Provisioned
{account_number}
Account Type {account_type}
Primary Currency {currency} (US Dollar)

Check Your Inbox

We've sent a welcome email containing your account details and information about getting started to {email}. If you don't see it, please check your spam or junk folder.

Delivery dispatched to mail service
Log In to Your Account
Alliance Bank accounts are held with our FDIC-insured custodial partners. Never share your security credentials.
''' self.wfile.write(html.encode('utf-8')) return # 3.12 Customer Forgot Password Page if path == "/forgot-password": html = f''' Forgot Password | Alliance Bank
ALLIANCE BANK

Reset your password

Enter your registered email address and we'll dispatch a secure recovery link.

Back to Sign In
''' self.wfile.write(html.encode('utf-8')) return # 3.13 Customer Reset Password Page if path == "/reset-password": query = urllib.parse.parse_qs(parsed.query) token = query.get("token", [""])[0] # Validate token in STATE["password_resets"] now_str = time.strftime("%Y-%m-%d %H:%M:%S") reset_record = next((r for r in STATE.get("password_resets", []) if r.get("token") == token), None) is_valid = bool(reset_record and reset_record.get("used_at") is None and reset_record.get("expires_at", "") >= now_str) if not is_valid: # Invalid or Expired Token View html = f''' Invalid Reset Link | Alliance Bank
ALLIANCE BANK

Reset Link Invalid or Expired

This password reset link is invalid, has already been used, or has expired after the 60-minute security window.

Request a New Reset Link
Back to Sign In
''' self.wfile.write(html.encode('utf-8')) return # Valid Token: Render Create New Password Form html = f''' Create New Password | Alliance Bank
ALLIANCE BANK

Create New Password

Choose a strong, unique password to protect your account.

Minimum 8 characters
Never reuse passwords from other sites
''' self.wfile.write(html.encode('utf-8')) return # 3.14 Customer Email Verification Route if path == "/verify-email": query = urllib.parse.parse_qs(parsed.query) token = query.get("token", [""])[0] verif = next((v for v in STATE.get("email_verifications", []) if v.get("token") == token), None) if verif: # Mark verified now_str = time.strftime("%Y-%m-%d %H:%M:%S") verif["verified_at"] = now_str target_user = next((u for u in STATE.get("users", []) if u.get("id") == verif.get("user_id")), None) or STATE.get("user") if target_user: target_user["email_verified_at"] = now_str html = f''' Email Verified | Alliance Bank
ALLIANCE BANK

Email Verified Successfully

Thank you! Your email address has been verified. Your account limits and access levels are now unlocked.

Continue to Dashboard
''' else: html = f''' Invalid Verification Link | Alliance Bank
ALLIANCE BANK

Verification Link Expired or Invalid

This verification link has expired or has already been used. You can request a fresh verification link from your profile.

Return to Dashboard
''' self.wfile.write(html.encode('utf-8')) return # 3.2 Customer KYC Page (Module 7) if path == "/kyc": user_rec = STATE.get("user", {}) kyc_status = user_rec.get("kyc_status", "not_submitted") doc_type = user_rec.get("kyc_document_type", "Passport") rejection_reason = user_rec.get("kyc_rejection_reason", "Document image was unclear or expired.") kyc_notes = user_rec.get("kyc_notes", "Please provide additional documentation.") status_badge = { "approved": ' Verified Customer', "pending_review": ' Pending Review', "under_review": ' Under Review', "rejected": ' Needs Attention', "additional_info_required": 'Action Required' }.get(kyc_status, 'Not Submitted') status_content = "" if kyc_status == "approved": status_content = f'''

Identity Verification Complete

Your identity has been fully verified and approved by Alliance Bank compliance. You now have unrestricted access to institutional transfer limits, international wire transactions, and payment card ordering.

Verified Document: {doc_type} • Status: Approved & Verified
''' elif kyc_status in ["pending_review", "under_review"]: st_title = "Identity Verification Under Review" if kyc_status == "under_review" else "Verification Submitted — Awaiting Review" status_content = f'''

{st_title}

Submitted on {user_rec.get("kyc_submitted_at", "Just now")}

Your identity documents have been submitted successfully and are awaiting review. You can continue using the permitted features of your account while we review your submission. Compliance reviews typically complete within 15–30 minutes during standard business hours.

Document: {doc_type}
In Queue for Compliance Review
Status: {'Under Review' if kyc_status == 'under_review' else 'Awaiting Review'}
''' elif kyc_status in ["rejected", "additional_info_required"]: alert_class = "bg-rose-500/10 border-rose-500/30 text-rose-400" if kyc_status == "rejected" else "bg-orange-500/10 border-orange-500/30 text-orange-400" alert_title = "Identity Verification Requires Attention" if kyc_status == "rejected" else "Additional Information Required" alert_msg = rejection_reason if kyc_status == "rejected" else kyc_notes status_content = f'''

{alert_title}

Feedback from compliance officer

Compliance Reason:
{alert_msg}
''' form_content = "" if kyc_status != "approved" and kyc_status not in ["pending_review", "under_review"]: form_content = f'''

Submit Identity Documents

Please ensure your document is valid, unexpired, and clearly legible without glare.

Sample document auto-selected for submission
Supported formats: JPG, PNG, PDF (Max 5 MB)
''' body = f'''
Compliance & Safety • Tier 2 Verification

Identity Verification

Submit government-issued identification to unlock institutional limits and card ordering.

{status_badge}
{status_content} {form_content}
''' html = build_app_layout(body, "Identity Verification (KYC) | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 4. Customer Banking Dashboard if path == "/dashboard": user_rec = STATE.get("user", {}) first_name = user_rec.get("first_name", "Elochukwu") account_number = STATE["accounts"][0].get("account_number", "0515705231") account_type = STATE["accounts"][0].get("account_type", "Savings") kyc_status = user_rec.get("kyc_status", "approved") kyc_dismissed = STATE.get("kyc_reminder_dismissed", False) kyc_banner_html = "" if kyc_status == "not_submitted" and not kyc_dismissed: kyc_banner_html = '''

Verify Your Identity Recommended

Complete identity verification to help secure your account and unlock features that may require verification.

Verify Now
''' elif kyc_status == "pending_review": kyc_banner_html = '''

Identity Verification In Progress — Awaiting Review

Your identity documents have been submitted and are currently in queue for review by our compliance team.

View Status
''' elif kyc_status == "under_review": kyc_banner_html = '''

Identity Verification Under Review

A compliance officer is currently reviewing your identity documents. This typically takes 15–30 minutes.

View Status
''' elif kyc_status == "additional_info_required": notes_msg = user_rec.get("kyc_notes", "Please provide additional identity documentation.") kyc_banner_html = f'''

Additional Information Required

{notes_msg}

Provide Information
''' elif kyc_status == "rejected": reason_msg = user_rec.get("kyc_rejection_reason", "Document could not be verified.") kyc_banner_html = f'''

Identity Verification Requires Attention

Reason: {reason_msg}

Resubmit Documents
''' verified_badge_html = ''' Verified''' if kyc_status == "approved" else "" usd_bal = STATE["accounts"][0]["balance"] usdc_bal = STATE["accounts"][1]["balance"] total_bal = usd_bal book_bal = total_bal int_part = f"{int(total_bal):,}" dec_part = f"{total_bal % 1:.2f}"[2:] # Generate dynamic transaction rows (from both transfers and deposits) all_activity = [] for t in STATE.get("transfers", []): is_sender = (t["direction"] == "sent") all_activity.append({ "date": t.get("date", "Today"), "title": f"Sent to {t['recipient']}" if is_sender else f"Received from {t['sender']}", "ref": t["ref"], "amount": t["amount"], "sign": "-" if is_sender else "+", "color": "text-red-400 bg-red-500/10" if is_sender else "text-emerald-400 bg-emerald-500/10", "amt_color": "text-red-400" if is_sender else "text-emerald-400", "icon": "fa-arrow-up" if is_sender else "fa-arrow-down", "status": "Completed Transaction", "link": f"/transfers/receipt/{t['ref']}" }) for d in STATE.get("deposits", []): st = str(d.get("status", "pending")).lower() is_credited = (st == "credited") is_pending = st in ["pending_review", "confirming", "pending_confirmation", "awaiting_deposit", "awaiting_payment"] st_label = "Credited" if is_credited else ("Pending Review" if st == "pending_review" else ("Awaiting Deposit" if "awaiting" in st else st.title())) dep_asset = d.get('asset') or d.get('currency') or 'USD' dep_ref = d.get('reference') or f"DEP-{d.get('id', '000')}" dep_amt = d.get('amount', 0.0) all_activity.append({ "date": d.get("created_at", "Just now"), "title": f"Crypto Deposit ({dep_asset})", "ref": dep_ref, "amount": dep_amt, "sign": "+", "color": "text-emerald-400 bg-emerald-500/10" if is_credited else ("text-amber-400 bg-amber-500/10" if is_pending else "text-red-400 bg-red-500/10"), "amt_color": "text-emerald-400" if is_credited else ("text-amber-400" if is_pending else "text-gray-400"), "icon": "fa-arrow-down-long", "status": st_label, "link": "/deposits" }) tx_rows = "" for a in all_activity: tx_rows += f'''

{a['title']}

{a['date']} • Ref: {a['ref']}

{a['sign']}${a['amount']:.2f}
{a['status']}
''' if not tx_rows: tx_section_html = '''

No account activity yet.

Your deposits, transfers, and card transactions will appear here.

''' else: tx_section_html = f'''
{tx_rows}
''' # Generate dynamic cards carousel cards_list = STATE.get("cards", []) has_multiple_cards = len(cards_list) > 1 cards_html = "" dots_html = "" for idx, c in enumerate(cards_list): c_id = c["id"] c_name = c.get("product_name") or c.get("name", "Monveracu Card") c_status = str(c.get("status", "active")).lower() is_frozen = (c_status == "frozen") is_pending = (c_status == "pending") badge_style = "bg-[#261E0F] text-amber-400 border-amber-500/30" if is_frozen else ("bg-[#0F1E29] text-blue-400 border-blue-500/30" if is_pending else "bg-[#0F291E] text-emerald-400 border-emerald-500/30") design = c.get("card_design") or c.get("design", "obsidian") c_network = '''
MONVERACU
''' if design == "midnight_blue": c_bg = "bg-gradient-to-br from-[#101D38] via-[#0E172B] to-[#0A0F1A]" c_border = "border-[#1E3A6E]" c_sheen = "bg-blue-400/10" elif design == "titanium_gold": c_bg = "bg-gradient-to-br from-[#262015] via-[#1C170F] to-[#110E0A]" c_border = "border-[#59441E]" c_sheen = "bg-amber-400/10" elif design == "crypto_black": c_bg = "bg-gradient-to-br from-[#121418] via-[#0C0D10] to-[#050607]" c_border = "border-[#3A404E]" c_sheen = "bg-cyan-400/10" else: # obsidian c_bg = "bg-gradient-to-br from-[#1C2028] via-[#15181F] to-[#0E1015]" c_border = "border-[#2B303C]" c_sheen = "bg-white/5" last_four = c.get("last_four") or str(c.get("masked_number", "4829"))[-4:] holder = str(c.get("card_holder_name") or c.get("holder", "ELOCHUKWU ELOM")).upper() exp_date = c.get("exp") or f"{c.get('expiry_month', 12):02d}/{str(c.get('expiry_year', 2029))[-2:]}" c_json = json.dumps(c).replace("'", "'") slide_class = "w-[88%] sm:w-[420px] shrink-0 snap-center" if has_multiple_cards else "w-full max-w-lg mx-auto sm:mx-0" cards_html += f'''

{c_name}

{c_status.upper()}
••••  ••••  ••••  {last_four}
{holder}
Exp: {exp_date}
{c_network}
''' dot_class = "bg-[#246BFD] w-5" if idx == 0 else "bg-gray-600 w-2 hover:bg-gray-400" dots_html += f'''''' # Generate Stock Investment Cards for Dashboard stock_cards_html = "" active_stocks = [s for s in STATE.get("stocks", []) if s.get("status") == "active"] for stk in active_stocks: plan_id = stk.get("default_plan_id", 3) plan = next((p for p in STATE.get("investment_plans", []) if p["id"] == plan_id), None) if not plan and STATE.get("investment_plans"): plan = STATE["investment_plans"][0] plan_name = plan["name"] if plan else "Pro Plan" min_amt = plan["min_amount"] if plan else 500.0 max_amt = plan.get("max_amount") is_unlimited = plan.get("is_unlimited", False) or (max_amt is None) duration = plan["duration_hours"] if plan else 96 return_pct = plan["return_percentage"] if plan else 100.0 limits_str = f"${min_amt:,.0f} - Unlimited" if (is_unlimited or max_amt is None) else f"${min_amt:,.0f} - ${max_amt:,.0f}" stock_cards_html += f'''
{stk['ticker']}

{stk['ticker']}

STOCK

{stk['name']}

Active

{stk.get('short_description', '')}

Investment Product {plan_name}
Allocation Range {limits_str}
Duration {duration} hours
Contractual Return +{return_pct:g}%
''' dash_plans_opts = "" for p in STATE.get("investment_plans", []): if p.get("status") == "active": m_val = f"{p['max_amount']}" if p.get("max_amount") is not None else "" unl = "1" if p.get("is_unlimited") or p.get("max_amount") is None else "0" dash_plans_opts += f'''''' dash_acc_opts = "" for acc in STATE.get("accounts", []): dash_acc_opts += f'''''' card_counter_html = f'''1 of {len(cards_list)}''' if has_multiple_cards else "" carousel_controls_html = '''''' if has_multiple_cards else "" if cards_list: cards_section_content = f'''
{cards_html}
{f'
{dots_html}
' if has_multiple_cards else ''}
''' else: cards_section_content = '''

You don't have any payment cards yet

Instant virtual cards and platinum metal payment cards are available in our marketplace.

Get a Card
''' body = f'''
{kyc_banner_html}

Hello, {first_name}! {verified_badge_html}

{account_type}
$ {int_part}.{dec_part}
Book balance ${book_bal:,.2f}
Fund account Transfer Transactions Cards

Explore Investment Opportunities

Institutional
Explore All Stocks →

PAYMENT CARDS

{card_counter_html}
{carousel_controls_html} Card Marketplace
{cards_section_content}

Recent Transactions

Transaction History
{tx_section_html}
''' html = build_app_layout(body, "Dashboard | Monveracu Online Banking", path) self.wfile.write(html.encode('utf-8')) return # 5. Accounts Page if path == "/accounts": usd_bal = STATE["accounts"][0]["balance"] usdc_bal = STATE["accounts"][1]["balance"] body = f'''

Accounts & Balances

Review currency balances backed by double-entry ledger entries.

Fund Account
USD

US Dollars

Acc: 8047291635

Verified
Ledger Balance
${usd_bal:.2f}
Send
USDC

USD Coin

Acc: 8047291636

Verified
Ledger Balance
{usdc_bal:.2f} USDC
Convert
''' html = build_app_layout(body, "My Accounts | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 6. Send Money Page if path == "/transfers/send": view_path = os.path.join(VIEWS_DIR, "transfers", "send.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() body = body.replace("", str(STATE["accounts"][0]["balance"])) body = body.replace("", f"${STATE['accounts'][0]['balance']:.2f}") body = body.replace("", "0.0") body = body.replace("", "0.00") body = body.replace("", "preview_token") body = re.sub(r"<\?php.*?\?>", "", body, flags=re.DOTALL) body = re.sub(r"<\?=.*?\?>", "", body, flags=re.DOTALL) html = build_app_layout(body, "Send Money | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 7. Receive Money Page if path == "/transfers/receive": user = STATE["user"] qr_svg = generate_svg_qr("8047291635", 180) body = f'''

Receive Money

Share your account number or registered email with another platform user to receive funds instantly.

{qr_svg}

{user['first_name']} {user['last_name']}

Verified Platform Account

Platform Account Number
8047291635
Registered Email Address
{user['email']}
''' html = build_app_layout(body, "Receive Money | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 8. Transfer Receipt if path.startswith("/transfers/receipt/"): ref = path.split("/")[-1] tx = next((t for t in STATE["transfers"] if t["ref"] == ref), STATE["transfers"][0]) body = f'''

TRANSFER SUCCESSFUL

${tx['amount']:.2f} {tx['currency']}

You sent funds to {tx['recipient']}

Reference: {tx['ref']}
Date: {tx['date']}
Sender: {tx['sender']}
Recipient Account: ••••••3746
Total Debit: ${tx['total']:.2f}
Send Another Transfer Back to Dashboard
''' html = build_app_layout(body, f"Receipt {ref} | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 9. Deposits (Fund Account) if path == "/deposits": acc_bal = STATE["accounts"][0]["balance"] acc_num = STATE["accounts"][0]["account_number"] acc_type = STATE["accounts"][0].get("account_type", "Checking Account") acc_curr = STATE["accounts"][0]["currency"] rates_dict = { "USDC": 1.00, "BTC": 68500.00, "ETH": 2650.00, "SOL": 178.50 } assets_dict = {} for pm in STATE.get("payment_methods", []): if pm.get("status") != "active": continue code = str(pm.get("code", "USDC")).upper() if code not in assets_dict: clean_name = pm.get("name", code).split(" (")[0] assets_dict[code] = { "name": clean_name if clean_name else code, "symbol": code, "decimals": 8 if code == "BTC" else (18 if code == "ETH" else 6), "min_deposit": float(pm.get("min_deposit", 50.0)), "max_deposit": float(pm.get("max_deposit", 100000.0)), "exchange_rate": rates_dict.get(code, 1.0), "icon_url": pm.get("icon_url", f"/assets/images/crypto/{code.lower()}.svg"), "networks": [] } assets_dict[code]["networks"].append({ "id": str(pm.get("network", "ERC20")).upper(), "name": pm.get("name", f"{code} ({pm.get('network')})"), "required_confirmations": int(pm.get("required_confirmations", 12)), "estimated_time": pm.get("processing_time") or "3 - 8 mins", "default_address": pm.get("wallet_address", ""), "min_deposit": float(pm.get("min_deposit", 50.0)), "max_deposit": float(pm.get("max_deposit", 100000.0)), "instructions": pm.get("instructions", ""), "method_id": pm.get("id") }) if not assets_dict: assets_dict = { "USDC": { "name": "USD Coin", "symbol": "USDC", "decimals": 6, "min_deposit": 50.0, "max_deposit": 100000.0, "networks": [] } } dep_rows = "" for d in STATE.get("deposits", []): st = d["status"].lower() is_credited = (st == "credited") is_pending = st in ["pending_review", "confirming", "pending_confirmation", "approved"] is_rejected = st in ["rejected", "failed"] badge_class = "bg-[#0F291E] text-emerald-400 border border-emerald-500/30" if is_credited else ("bg-[#261E0F] text-amber-400 border border-amber-500/30" if is_pending else ("bg-[#291212] text-red-400 border border-red-500/30" if is_rejected else "bg-[#0F1E29] text-blue-400 border border-blue-500/30")) status_label = "Credited" if is_credited else ("Pending Review" if st == "pending_review" else ("Awaiting Deposit" if "awaiting" in st else st.replace("_", " ").title())) dep_rows += f'''
${d['amount']:,.2f} USD ({d['asset']} • {d['network']})
{d['reference']} • {d['created_at']}
{status_label}
''' view_path = os.path.join(VIEWS_DIR, "deposits", "index.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() # Substitute PHP tags with live variables body = body.replace("", f"{acc_bal:,.2f}") body = body.replace("", acc_num) body = body.replace("", acc_type) body = body.replace("", acc_curr) body = body.replace("", json.dumps(assets_dict)) body = body.replace("", json.dumps(rates_dict)) body = body.replace("", "preview_token") # Replace the recent deposits PHP foreach block with pre-rendered rows or empty state if dep_rows: recent_dep_html = f'
{dep_rows}
' else: recent_dep_html = '''

No deposit records yet.

Fund your account above to post your first ledger deposit credit.

''' body = re.sub( r'<\?php if \(!empty\(\$recentDeposits\)\): \?>.*?<\?php endif; \?>', recent_dep_html, body, flags=re.DOTALL ) # Strip any remaining PHP tags cleanly body = re.sub(r'<\?php.*?\?>', '', body, flags=re.DOTALL) body = re.sub(r'<\?=.*?\?>', '', body, flags=re.DOTALL) html = build_app_layout(body, "Fund Account | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 10. Cards Marketplace & Virtual Cards Hub if path == "/cards": usd_bal = float(STATE["accounts"][0]["balance"]) my_cards = STATE.get("cards", []) my_orders = STATE.get("card_orders", []) active_cards_count = len([c for c in my_cards if c.get("status") == "active"]) pending_count = sum(1 for o in my_orders if o.get("status") in ["pending", "processing"]) total_card_limit = sum(float(c.get("daily_limit", 5000.0)) for c in my_cards if c.get("status") == "active") # 1. Active Cards Grid my_cards_html = "" if my_cards: cards_list_html = "" for my_card in my_cards: c_id = my_card["id"] c_st = my_card.get("status", "active") is_active = (c_st == "active") freeze_text = "Freeze Card" if is_active else "Unfreeze Card" btn_bg = "bg-[#1F2430] hover:bg-amber-500/20 text-gray-300 hover:text-amber-400 border border-[#292E38]" if is_active else "bg-emerald-500/20 hover:bg-emerald-500/30 text-emerald-400 border border-emerald-500/30" c_design = my_card.get("card_design", my_card.get("design", "obsidian")) if c_design == "midnight_blue": bg_front = "from-[#0B2545] via-[#133E7C] to-[#1E3A8A]" bg_back = "from-[#081B33] via-[#0E2D5A] to-[#162C66]" elif c_design == "titanium_gold": bg_front = "from-[#3A2207] via-[#854D0E] to-[#D97706]" bg_back = "from-[#2A1805] via-[#5F370A] to-[#92400E]" elif c_design == "crypto_black": bg_front = "from-[#000000] via-[#111827] to-[#1F2937]" bg_back = "from-[#050505] via-[#0A0D14] to-[#151922]" else: bg_front = "from-[#0F1318] via-[#161B22] to-[#21262D]" bg_back = "from-[#0A0D10] via-[#10141A] to-[#171B22]" c_network = my_card.get("network", "Monveracu Pay") c_json = html_lib.escape(json.dumps(my_card), quote=True) cards_list_html += f'''
{my_card.get('name', 'Monveracu Card')} MONVERACU
{my_card.get('masked_number', '•••• •••• •••• 0000')}
Cardholder
{my_card.get('holder', 'Elochukwu Elom')}
Expires
{my_card.get('exp', '10/31')}
{'● Active' if is_active else '○ Frozen'}
••• CVV
MONVERACU

This virtual card is issued for verified online purchases and contactless transactions. Authorised use only.

Monveracu Secured Tap card to flip back
Daily Limit ${float(my_card.get('daily_limit', 5000)):,.2f}
Spend Today ${float(my_card.get('spent_today', 0.0)):,.2f}
''' my_cards_html = f'
{cards_list_html}
' else: my_cards_html = '''

No active cards yet

Select a card from our marketplace catalog below to apply for your primary payment card.

Browse Card Catalog
''' # 2. Applications Table HTML app_rows_html = "" for o in my_orders: o_st = str(o.get("status", "pending")).lower() is_p = o_st in ["pending", "processing"] is_appr = o_st in ["completed", "approved", "active"] is_rej = (o_st == "rejected") o_fee = float(o.get("payment_amount", 0.0)) o_ref = o.get("reference", f"ORD-CRD-{o['id']}") if is_p: st_badge = ' Pending Review' elif is_appr: st_badge = ' Approved & Issued' elif is_rej: rej_msg = html_lib.escape(str(o.get("rejection_reason", "Compliance criteria not met"))) st_badge = f'''
Rejected (Fee Refunded)

"{rej_msg}"

''' else: st_badge = f'{o_st}' app_rows_html += f''' {o_ref} {o.get('product_name', 'Virtual Card')} {f'${o_fee:.2f}' if o_fee > 0 else 'Free ($0.00)'} {o.get('created_at', time.strftime('%Y-%m-%d %H:%M'))} {st_badge} ''' # 3. Available Catalog Cards with 3D Flip Visuals catalog_items_html = "" active_prods = [p for p in STATE["card_products"] if p.get("is_active", 1) == 1] for p in active_prods: p_fee = float(p.get("fee", p.get("issuance_fee", 0.0))) p_min_bal = float(p.get("min_balance_required", 0.0)) p_daily_lim = float(p.get("limit", p.get("daily_limit", 5000.0))) p_monthly_lim = float(p.get("monthly_limit", 25000.0)) p_design = p.get("design", p.get("card_design", "obsidian")) if p_design == "midnight_blue": bg_front = "from-[#0B2545] via-[#133E7C] to-[#1E3A8A]" bg_back = "from-[#081B33] via-[#0E2D5A] to-[#162C66]" elif p_design == "titanium_gold": bg_front = "from-[#3A2207] via-[#854D0E] to-[#D97706]" bg_back = "from-[#2A1805] via-[#5F370A] to-[#92400E]" elif p_design == "crypto_black": bg_front = "from-[#000000] via-[#111827] to-[#1F2937]" bg_back = "from-[#050505] via-[#0A0D14] to-[#151922]" else: bg_front = "from-[#0F1318] via-[#161B22] to-[#21262D]" bg_back = "from-[#0A0D10] via-[#10141A] to-[#171B22]" price_tag = "Free" if p_fee == 0.0 else f"${p_fee:,.2f}" features_li = "".join([f'
  • {feat}
    • ' for feat in p.get("features", [])[:4]]) can_apply = (usd_bal >= p_fee) and (usd_bal >= p_min_bal) p_json_str = html_lib.escape(json.dumps(p), quote=True) catalog_items_html += f'''
    {p['name']} MONVERACU
    •••• •••• •••• 0000
    Card Tier {p.get('type', 'virtual').upper()}
    {p.get('design', 'obsidian').upper()}
    ••• CVV
    MONVERACU

    Virtual spending card powered by Monveracu core ledger.

    Click to flip Monveracu 3D Secure

    {p['name']}

    {price_tag}
    Daily Limit: ${p_daily_lim:,.0f} {f'• Min Bal: ${p_min_bal:,.0f}' if p_min_bal > 0 else ''}
      {features_li}
    ''' body = f'''
    Dashboard Virtual Cards

    Virtual Cards & Marketplace

    Manage your virtual cards, track applications, and access your card details securely.

    Apply for Card
    Active Cards
    {active_cards_count}

    Issued and ready for use

    Pending Applications
    {pending_count}

    Awaiting administrator review

    Total Card Limit
    ${total_card_limit:,.2f}

    Combined daily limit

    Available Balance
    ${usd_bal:,.2f}

    USD available balance

    Enterprise-Grade Cards

    Virtual Cards Made Easy

    Apply for virtual cards for eligible online payments, subscription management, and other supported spending needs. Manage your card applications, review spending limits, and access issued card details directly from your dashboard.

    Secure Payments

    Use separate virtual cards for eligible transactions without exposing your primary card details unnecessarily.

    Global Acceptance

    Use supported virtual cards with online merchants and digital terminals worldwide for everyday subscriptions and transactions.

    Spending Controls

    Review your card spending limits and manage instant freeze/unfreeze controls from your dashboard.

    Digital Issuance

    Track your application and access card details once your card has been approved and successfully issued.

    Apply Now How It Works

    Your Cards & Applications

    View your active virtual cards and review application progress.

    {my_cards_html}

    Card Marketplace Catalog

    Select an approved card tier designed for your spending requirements.

    Available USD: ${usd_bal:,.2f}
    {catalog_items_html if catalog_items_html else '
    No cards currently active in the marketplace.
    '}

    How Virtual Cards Work

    Three simple steps to obtain and manage enterprise-grade virtual cards.

    01

    Select Your Tier & Apply

    Choose the card tier matching your daily spend limit and required network features. Submit your application directly from your dashboard.

    02

    Administrator Compliance Review

    Your application is reviewed by our operations team against account verification criteria. Once verified, credentials are generated and issued.

    03

    Spend Online & Manage Controls

    Use your card details with merchants, point-of-sale systems, and subscriptions. Freeze or unfreeze your card instantly whenever needed.

    ''' html = build_app_layout(body, "Cards & Marketplace | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 10.5. Customer Investments Hub if path.startswith("/investments"): # Update matured investments now_str = time.strftime("%Y-%m-%d %H:%M:%S") for inv in STATE.get("investments", []): if inv.get("status") == "active" and inv.get("maturity_at") and now_str >= inv.get("maturity_at"): inv["status"] = "matured" # Check single investment view parts = path.strip("/").split("/") if len(parts) == 2 and parts[1].isdigit(): inv_id = int(parts[1]) inv = next((i for i in STATE.get("investments", []) if i["id"] == inv_id), None) if not inv: self.send_response(302) self.send_header("Location", "/investments") self.end_headers() return st = inv.get("status", "active") badge_class = "bg-emerald-500/10 text-emerald-400 border-emerald-500/20" if st == "matured" else ("bg-purple-500/10 text-purple-400 border-purple-500/20" if st == "redeemed" else "bg-blue-500/10 text-blue-400 border-blue-500/20") status_banner = "" if st == "active": status_banner = f'''
    Investment Growth in Progress
    Funds locked until maturity date: {inv.get('maturity_at')}
    Maturity Status
    Active Cycle
    ''' elif st == "matured": status_banner = f'''
    Investment Cycle Complete!
    Principal and guaranteed contractual returns are ready for instant redemption.
    ''' else: status_banner = f'''
    Investment Redeemed
    Total proceeds of ${float(inv.get('expected_payout', 0)):,.2f} USD were credited to your account balance.
    ''' body = f'''
    Back to All Investments
    {inv['stock_ticker']}

    {inv.get('stock_name')}

    {inv.get('stock_ticker')}

    Position Reference: {inv.get('reference')}

    {st.upper()}
    Allocated Capital
    ${float(inv.get('amount', 0)):,.2f}
    Contractual Yield
    +{float(inv.get('return_percentage', 0)):g}%
    Expected Payout
    ${float(inv.get('expected_payout', 0)):,.2f}
    Lock Duration
    {inv.get('duration_hours')} Hours
    {status_banner}

    Immutable Contract Terms

    Plan Tier: {inv.get('plan_name')}
    Started At: {inv.get('started_at')}
    Maturity At: {inv.get('maturity_at')}
    Settlement Status: {st.upper()}
    ''' html = build_app_layout(body, f"Investment {inv.get('reference')} | Monveracu", "/investments") self.wfile.write(html.encode('utf-8')) return # Main Hub View stocks = [s for s in STATE.get("stocks", []) if s.get("status") == "active"] plans = [p for p in STATE.get("investment_plans", []) if p.get("status") == "active"] investments = STATE.get("investments", []) total_invested = sum(float(i.get("amount", 0)) for i in investments if i.get("status") == "active") total_matured = sum(float(i.get("expected_payout", 0)) for i in investments if i.get("status") == "matured") total_redeemed = sum(float(i.get("expected_payout", 0)) for i in investments if i.get("status") == "redeemed") usd_bal = STATE["accounts"][0]["balance"] # Stock catalog grid HTML catalog_cards_html = "" for stk in stocks: plan_id = stk.get("default_plan_id", 3) plan = next((p for p in plans if p["id"] == plan_id), None) or (plans[0] if plans else None) plan_name = plan["name"] if plan else "Pro Plan" min_amt = plan["min_amount"] if plan else 500.0 max_amt = plan.get("max_amount") is_unlimited = plan.get("is_unlimited", False) or (max_amt is None) duration = plan["duration_hours"] if plan else 96 return_pct = plan["return_percentage"] if plan else 100.0 limits_str = f"${min_amt:,.0f} - Unlimited" if (is_unlimited or max_amt is None) else f"${min_amt:,.0f} - ${max_amt:,.0f}" catalog_cards_html += f'''
    {stk['ticker']}

    {stk['ticker']}

    STOCK

    {stk['name']}

    Active

    {stk.get('short_description', '')}

    Investment Plan {plan_name}
    Allocation Range {limits_str}
    Lock Duration {duration} hours
    Contractual Return +{return_pct:g}%
    ''' # Portfolio table rows portfolio_rows_html = "" for inv in investments: st = inv.get("status", "active") is_matured = (st == "matured") is_redeemed = (st == "redeemed") badge_class = "bg-emerald-500/10 text-emerald-400 border border-emerald-500/20" if is_matured else ("bg-purple-500/10 text-purple-400 border border-purple-500/20" if is_redeemed else "bg-blue-500/10 text-blue-400 border border-blue-500/20") action_html = f'''
    ''' if is_matured else (f'Credited' if is_redeemed else f'''View Details''') portfolio_rows_html += f''' {inv.get('reference')}
    {inv.get('stock_ticker')} · {inv.get('stock_name')}
    {inv.get('plan_name')} ({inv.get('duration_hours')}h)
    ${float(inv.get('amount', 0)):,.2f} +{float(inv.get('return_percentage', 0)):g}% ${float(inv.get('expected_payout', 0)):,.2f} {inv.get('maturity_at')} {st.upper()} {action_html} ''' plans_opts = "".join([f'' for p in plans]) acc_opts = "".join([f'' for a in STATE["accounts"]]) body = f'''

    Investments & Opportunities

    High Yield

    Explore institutional-grade stock opportunities with guaranteed contractual returns.

    Available USD: ${usd_bal:,.2f}
    Active Capital
    ${total_invested:,.2f}
    Currently locked in growth cycles
    Ready to Redeem
    ${total_matured:,.2f}
    Matured principal + contractual yield
    Total Redeemed
    ${total_redeemed:,.2f}
    Total credited back to your balance
    {catalog_cards_html if catalog_cards_html else '
    No opportunities available.
    '}
    ''' html = build_app_layout(body, "Investments & Opportunities | Monveracu", "/investments") self.wfile.write(html.encode('utf-8')) return # 11. Currency Exchange (Convert) if path == "/exchange": view_path = os.path.join(VIEWS_DIR, "exchange", "index.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() body = re.sub(r"<\?php.*?\?>", "", body, flags=re.DOTALL) body = re.sub(r"<\?=.*?\?>", "", body, flags=re.DOTALL) html = build_app_layout(body, "Currency Exchange | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 12. Activity & Transactions if path == "/activity/export": csv_lines = ["Reference,Date,Type,Counterparty,Amount,Currency,Status"] for t in STATE["transfers"]: is_sender = (t["direction"] == "sent") cparty = t['recipient'] if is_sender else t['sender'] ttype = "Debit (Sent)" if is_sender else "Credit (Received)" csv_lines.append(f"{t['ref']},{t['date']},{ttype},{cparty},{t['amount']},{t['currency']},{t['status']}") csv_data = "\n".join(csv_lines) self.send_response(200) self.send_header("Content-Type", "text/csv") self.send_header("Content-Disposition", "attachment; filename=bnkfx_transactions.csv") self.end_headers() self.wfile.write(csv_data.encode('utf-8')) return if path == "/activity": all_activity = [] for t in STATE.get("transfers", []): is_sender = (t["direction"] == "sent") all_activity.append({ "date": t.get("date", "Today"), "title": f"Money Sent to {t['recipient']}" if is_sender else f"Money Received from {t['sender']}", "ref": t["ref"], "amount": t["amount"], "sign": "-" if is_sender else "+", "color": "text-red-400 bg-red-500/10" if is_sender else "text-emerald-400 bg-emerald-500/10", "amt_color": "text-red-400" if is_sender else "text-emerald-400", "icon": "fa-arrow-up" if is_sender else "fa-arrow-down", "status": t["status"], "link": f"/transfers/receipt/{t['ref']}" }) for d in STATE.get("deposits", []): st = str(d.get("status", "pending")).lower() is_credited = (st == "credited") is_pending = st in ["pending_review", "confirming", "pending_confirmation", "awaiting_deposit", "awaiting_payment"] st_label = "Credited" if is_credited else ("Pending Review" if st == "pending_review" else ("Awaiting Deposit" if "awaiting" in st else st.title())) dep_asset = d.get('asset') or d.get('currency') or 'USD' dep_ref = d.get('reference') or f"DEP-{d.get('id', '000')}" dep_amt = d.get('amount', 0.0) all_activity.append({ "date": d.get("created_at", "Just now"), "title": f"Crypto Deposit ({dep_asset})", "ref": dep_ref, "amount": dep_amt, "sign": "+", "color": "text-emerald-400 bg-emerald-500/10" if is_credited else ("text-amber-400 bg-amber-500/10" if is_pending else "text-red-400 bg-red-500/10"), "amt_color": "text-emerald-400" if is_credited else ("text-amber-400" if is_pending else "text-gray-400"), "icon": "fa-arrow-down-long", "status": st_label, "link": "/deposits" }) tx_rows = "" for a in all_activity: tx_rows += f'''

    {a['title']}

    {a['ref']} • {a['date']}
    {a['sign']}${a['amount']:.2f} USD
    {a['status']}
    ''' if tx_rows: activity_content = f'''
    {tx_rows}
    ''' else: activity_content = '''

    No account activity yet.

    Your verified deposits, transfers, and card transactions will appear here.

    ''' body = f'''

    Account Activity

    Review all verified transactions, deposits, and account movements.

    Export CSV
    {activity_content}
    ''' html = build_app_layout(body, "Account Activity | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 13. Notifications if path == "/notifications": view_path = os.path.join(VIEWS_DIR, "notifications", "index.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() body = re.sub(r"<\?php.*?\?>", "", body, flags=re.DOTALL) body = re.sub(r"<\?=.*?\?>", "", body, flags=re.DOTALL) html = build_app_layout(body, "Notifications | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 14. Profile & Security if path == "/profile": user = STATE["user"] body = f'''

    Profile & Security Settings

    Manage your identity information, authentication credentials, and security controls.

    Personal Information

    First Name:
    {user['first_name']}
    Last Name:
    {user['last_name']}
    Registered Email Address:
    {user['email']}

    Security & Two-Factor Authentication

    Two-Factor Authentication (2FA)

    Protect high-value internal transfers and card operations

    Enabled
    ''' html = build_app_layout(body, "Profile & Security | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 15. Support if path == "/support": view_path = os.path.join(VIEWS_DIR, "support", "index.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() body = re.sub(r"<\?php.*?\?>", "", body, flags=re.DOTALL) body = re.sub(r"<\?=.*?\?>", "", body, flags=re.DOTALL) html = build_app_layout(body, "Customer Support | Monveracu", path) self.wfile.write(html.encode('utf-8')) return # 16. Legal if path in ["/terms", "/privacy", "/risk"]: sub = path.strip("/") view_path = os.path.join(VIEWS_DIR, "legal", f"{sub}.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read() legal_cfg = platform_settings_service.get_platform_settings(STATE).get("legal", {}) legal_key_map = {"terms": "terms_of_service", "privacy": "privacy_policy", "risk": "risk_disclosure"} if sub in legal_key_map and legal_cfg.get(legal_key_map[sub]): custom_legal = f"""

    {html_lib.escape(legal_cfg[legal_key_map[sub]])}

    """ body = re.sub(r'
    .*?
    ', custom_legal, body, flags=re.DOTALL) or body layout_path = os.path.join(VIEWS_DIR, "layouts", "main.php") with open(layout_path, 'r', encoding='utf-8') as f: layout = f.read() platform_name = platform_settings_service.get_platform_settings(STATE).get("platform_name", "Monveracu") html_out = layout.replace("", body).replace("", f"{sub.capitalize()} | {platform_name}") html_out = re.sub(r"<\?php.*?\?>", "", html_out, flags=re.DOTALL) html_out = re.sub(r"<\?=.*?\?>", "", html_out, flags=re.DOTALL) self.wfile.write(html_out.encode('utf-8')) return # 17. Administrator Portal Dashboard & Subsections if path.startswith("/admin"): import preview_admin if preview_admin.handle_admin_get(self, parsed, path, STATE, build_admin_layout): return if path == "/admin/login": view_path = os.path.join(VIEWS_DIR, "admin", "login.php") with open(view_path, 'r', encoding='utf-8') as f: body = f.read().replace("", "") layout_path = os.path.join(VIEWS_DIR, "layouts", "auth.php") with open(layout_path, 'r', encoding='utf-8') as f: layout = f.read() html = layout.replace("", body).replace("", "Admin Portal Login | Monveracu") html = re.sub(r"<\?php.*?\?>", "", html, flags=re.DOTALL) html = re.sub(r"<\?=.*?\?>", "", html, flags=re.DOTALL) self.wfile.write(html.encode('utf-8')) return if path == "/admin/users": body = f'''

    Customer Account Management

    Search, monitor and manage registered banking customers.

    Customer Country Role USD Balance Status
    Abraham Elom
    abraham@bnkfx.com
    		 United States Customer ${STATE['accounts'][0]['balance']:.2f} Active
    Sarah Connor
    sarah@bnkfx.com
    		 United Kingdom Customer $950.00 Active
    ''' html = build_admin_layout(body, "Customer Accounts | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return if path == "/admin/transfers": qs = urllib.parse.parse_qs(urllib.parse.urlparse(self.path).query) type_filter = qs.get("type", ["all"])[0].lower() # Build unified transaction list from all sources unified = [] for t in STATE.get("transfers", []): is_adj = t.get("direction") in ["credit", "debit"] tx_type = "adjustment" if is_adj else "transfer" if type_filter not in ["all", tx_type]: continue is_credit = t.get("direction") in ["received", "credit"] unified.append({ "ref": t["ref"], "type": "Admin Adjustment" if is_adj else "Internal Transfer", "type_badge": "bg-purple-500/10 text-purple-400 border-purple-500/20" if is_adj else "bg-blue-500/10 text-blue-400 border-blue-500/20", "from": t.get("sender_email", t.get("sender", "N/A")), "to": t.get("recipient_email", t.get("recipient", "N/A")), "amount": float(t["amount"]), "fee": float(t.get("fee", 0)), "is_credit": is_credit, "status": t.get("status", "Completed"), "date": t.get("date", "N/A"), }) for d in STATE.get("deposits", []): if type_filter not in ["all", "deposit"]: continue st = d.get("status", "").lower() st_label = "Credited" if st == "credited" else ("Pending" if "pending" in st or "awaiting" in st else st.replace("_", " ").title()) unified.append({ "ref": d["reference"], "type": "Crypto Deposit", "type_badge": "bg-emerald-500/10 text-emerald-400 border-emerald-500/20", "from": f"{d['asset']} ({d['network']})", "to": d.get("customer_email", STATE.get("user", {}).get("email", "customer")), "amount": float(d["amount"]), "fee": 0.0, "is_credit": True, "status": st_label, "date": d.get("created_at", "N/A"), }) # Stats total_count = len(unified) transfer_count = sum(1 for u in unified if u["type"] == "Internal Transfer") deposit_count = sum(1 for u in unified if u["type"] == "Crypto Deposit") adjustment_count = sum(1 for u in unified if u["type"] == "Admin Adjustment") tx_rows = "" for u in unified: amt_color = "text-emerald-400" if u["is_credit"] else "text-red-400" sign = "+" if u["is_credit"] else "-" st_lower = u["status"].lower() if st_lower in ["completed", "credited"]: st_badge_cls = "bg-emerald-500/10 text-emerald-400" elif "pending" in st_lower or "awaiting" in st_lower: st_badge_cls = "bg-amber-500/10 text-amber-400" elif st_lower in ["rejected", "failed"]: st_badge_cls = "bg-red-500/10 text-red-400" else: st_badge_cls = "bg-gray-500/10 text-gray-400" tx_rows += f''' {u['ref']} {u['type']} {u['from']} {u['to']} {sign}${u['amount']:,.2f} ${u['fee']:.2f} {u['status']} {u['date']} ''' if not tx_rows: tx_rows = 'No transactions recorded yet.' active_cls = lambda t: "bg-[#246BFD] text-white" if type_filter == t else "bg-[#171A21] text-[#9CA6BA] hover:text-white border border-[#292E38]" body = f'''

    Transfer Management

    Unified view of all platform financial movements — transfers, deposits, and admin adjustments.

    Export CSV
    All ({total_count}) Transfers ({transfer_count}) Deposits ({deposit_count}) Adjustments ({adjustment_count})
    {tx_rows}
    Reference Type From To Amount Fee Status Date
    ''' html = build_admin_layout(body, "Transfer Management | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return if path == "/admin/deposits": deposits_list = STATE.get("deposits", []) awaiting_count = sum(1 for d in deposits_list if d.get("status") in ["pending_review", "pending_confirmation", "awaiting_deposit", "awaiting_payment"]) credited_count = sum(1 for d in deposits_list if d.get("status") == "credited") rejected_count = sum(1 for d in deposits_list if d.get("status") in ["rejected", "failed"]) total_volume = sum(d.get("credited_amount", 0.0) for d in deposits_list if d.get("status") == "credited") dep_table_rows = "" for d in deposits_list: st = d["status"].lower() is_credited = (st == "credited") is_pending = st in ["pending_review", "confirming", "pending_confirmation", "approved"] is_rejected = st in ["rejected", "failed"] badge_class = "bg-emerald-500/10 text-emerald-400 border border-emerald-500/20" if is_credited else ("bg-amber-500/10 text-amber-400 border border-amber-500/20" if is_pending else ("bg-red-500/10 text-red-400 border border-red-500/20" if is_rejected else "bg-blue-500/10 text-blue-400 border border-blue-500/20")) status_label = "Credited" if is_credited else ("Pending Review" if st == "pending_review" else ("Awaiting Deposit" if "awaiting" in st else st.replace("_", " ").title())) dep_table_rows += f''' {d['reference']}
    {d.get('customer_name', 'Elochukwu Elom')}
    {d.get('customer_email', 'elochukwu@bnkfx.com')}
    {d['asset']} ({d['network']}) ${d['amount']:,.2f} USD {d.get('confirmations', 0)} / {d.get('required_confirmations', 12)} {status_label} Review ''' if not dep_table_rows: dep_table_rows = '''

    No deposit records found.

    Deposit requests submitted by customers will appear here for review.

    ''' body = f'''

    Cryptocurrency Deposits

    Monitor blockchain confirmations and review deposit funding requests.

    Awaiting Review
    {awaiting_count}

    Deposits requiring manual verification

    Credited
    {credited_count}

    Posted ledger credits

    Rejected
    {rejected_count}

    Denied or invalid transfers

    Total Volume
    ${total_volume:,.2f}

    Total credited vault balance

    {dep_table_rows}
    Reference Customer Asset & Network Amount Confirmations Status Actions
    ''' html = build_admin_layout(body, "Cryptocurrency Deposits | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return if path.startswith("/admin/deposits/"): dep_id = int(path.split("/")[-1]) dep = next((d for d in STATE.get("deposits", []) if d["id"] == dep_id), STATE["deposits"][0]) st = dep["status"].lower() is_credited = (st == "credited") badge_class = "bg-emerald-500/10 text-emerald-400 border border-emerald-500/20" if is_credited else "bg-amber-500/10 text-amber-400 border border-amber-500/20" status_label = "Credited" if is_credited else ("Pending Review" if st == "pending_review" else ("Awaiting Deposit" if "awaiting" in st else st.replace("_", " ").title())) admin_action_html = f'''

    Manual Credit Verification & Approval

    Authorizing this action will immediately execute a double-entry ledger debit on the Platform Vault Asset account and credit the customer's liability account with full audit logging.

    ''' if not is_credited else f'''
    This deposit has been verified, approved, and posted to the customer ledger balance.
    ''' body = f'''
    Back to Deposits

    {dep['reference']}

    Customer: {dep.get('customer_name', 'Elochukwu Elom')} ({dep.get('customer_email', 'elochukwu@bnkfx.com')})

    {status_label}

    Deposit Parameters

    Cryptocurrency: {dep['asset']}
    Network: {dep['network']}
    Deposit Address: {dep['deposit_address']}
    Transaction Hash: {dep.get('tx_hash') or 'Pending detection'}
    Deposit Amount (USD): ${dep['amount']:,.2f} USD
    Credited Amount: ${dep['credited_amount']:,.2f} USD
    Confirmations: {dep.get('confirmations', 0)} / {dep.get('required_confirmations', 12)}
    {admin_action_html}
    ''' html = build_admin_layout(body, f"Deposit {dep['reference']} | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return if path == "/admin/cards": import preview_admin if preview_admin.handle_admin_get(self, parsed, path, STATE, build_admin_layout): return if path == "/admin/reports": body = f'''

    Ledger Reconciliation Report

    Authoritative mathematical reconciliation of all platform debits and credits.

    Ledger 100% Balanced
    USD Currency Pool
    Total Debits: 2,100.0000
    Total Credits: 2,100.0000
    Difference: 0.00000000
    USDC Currency Pool
    Total Debits: 750.0000
    Total Credits: 750.0000
    Difference: 0.00000000
    ''' html = build_admin_layout(body, "Ledger Reconciliation | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return if path == "/admin/audit": body = f'''

    System Security Audit Logs

    Immutable audit trail of administrator and customer actions.

    Timestamp Actor Action IP Address
    2026-10-27 22:30:12 admin@bnkfx.com admin_login 127.0.0.1
    2026-10-27 20:15:00 abraham@bnkfx.com transfer_completed 127.0.0.1
    ''' html = build_admin_layout(body, "Security Audit Logs | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return # Default Admin Dashboard — All statistics calculated from STATE num_users = len(STATE.get("users", [])) active_users = sum(1 for u in STATE.get("users", []) if u.get("status") == "active") suspended_users = sum(1 for u in STATE.get("users", []) if u.get("status") == "suspended") # Total customer liabilities = sum of ALL account balances total_liabilities = sum(a["balance"] for a in STATE.get("accounts", [])) # Platform fees collected from transfers total_fees = sum(float(t.get("fee", 0)) for t in STATE.get("transfers", [])) # Deposit analytics all_deposits = STATE.get("deposits", []) credited_deposits = [d for d in all_deposits if d.get("status", "").lower() == "credited"] pending_deposits = [d for d in all_deposits if d.get("status", "").lower() in ["pending_review", "confirming", "pending_confirmation", "awaiting_deposit", "awaiting_payment"]] rejected_deposits = [d for d in all_deposits if d.get("status", "").lower() in ["rejected", "failed"]] total_credited_vol = sum(float(d.get("credited_amount", d.get("amount", 0))) for d in credited_deposits) total_pending_vol = sum(float(d.get("amount", 0)) for d in pending_deposits) # Transfer analytics — separate user P2P from admin adjustments all_transfers = STATE.get("transfers", []) p2p_sent = [t for t in all_transfers if t.get("direction") == "sent"] admin_adjustments = [t for t in all_transfers if t.get("direction") in ["credit", "debit"]] admin_credits = sum(float(t["amount"]) for t in admin_adjustments if t.get("direction") == "credit") admin_debits = sum(float(t["amount"]) for t in admin_adjustments if t.get("direction") == "debit") transfer_volume = sum(float(t["amount"]) for t in p2p_sent) # Total transactions total_tx_count = len(all_transfers) + len(all_deposits) # Build recent activity rows dynamically recent_items = [] for t in all_transfers: is_adj = t.get("direction") in ["credit", "debit"] recent_items.append({ "ref": t["ref"], "type": "Adjustment" if is_adj else "Transfer", "type_color": "bg-purple-500/10 text-purple-400" if is_adj else "bg-blue-500/10 text-blue-400", "from": t.get("sender_email", t.get("sender", "N/A")), "to": t.get("recipient_email", t.get("recipient", "N/A")), "amount": float(t["amount"]), "is_credit": t.get("direction") in ["received", "credit"], "status": t.get("status", "Completed"), "date": t.get("date", "N/A") }) for d in all_deposits: st = d.get("status", "").lower() st_label = "Credited" if st == "credited" else ("Pending" if "pending" in st or "awaiting" in st else st.replace("_", " ").title()) st_color = "bg-emerald-500/10 text-emerald-400" if st == "credited" else ("bg-amber-500/10 text-amber-400" if "pending" in st or "awaiting" in st else "bg-red-500/10 text-red-400") recent_items.append({ "ref": d["reference"], "type": "Deposit", "type_color": "bg-emerald-500/10 text-emerald-400", "from": d.get("customer_email", d.get("asset", "Crypto")), "to": "Platform", "amount": float(d["amount"]), "is_credit": True, "status": st_label, "status_color": st_color, "date": d.get("created_at", "N/A") }) recent_tx_rows = "" for item in recent_items[:8]: amt_color = "text-emerald-400" if item["is_credit"] else "text-red-400" sign = "+" if item["is_credit"] else "-" s_color = item.get("status_color", "bg-emerald-500/10 text-emerald-400") recent_tx_rows += f''' {item['ref']} {item['type']} {item['from']} {item['to']} {sign}${item['amount']:,.2f} {item['status']} ''' if not recent_tx_rows: recent_tx_rows = 'No platform activity recorded yet. Transactions will appear here as users deposit and transfer funds.' body = f'''

    Administrator Overview

    All statistics are calculated from real platform records in real time.

    Registered Customers
    {num_users}
    {active_users} Active{f' · {suspended_users} Suspended' if suspended_users else ''}
    Customer Liabilities (USD)
    ${total_liabilities:,.2f}
    Sum of all account balances
    Credited Deposits
    ${total_credited_vol:,.2f}
    {len(credited_deposits)} verified{f' · {len(pending_deposits)} pending' if pending_deposits else ''}{f' · {len(rejected_deposits)} rejected' if rejected_deposits else ''}
    Total Transactions
    {total_tx_count}
    {len(all_transfers)} transfers · {len(all_deposits)} deposits
    Pending Deposits
    {len(pending_deposits)}
    ${total_pending_vol:,.2f} awaiting verification
    Transfer Volume
    ${transfer_volume:,.2f}
    {len(p2p_sent)} completed P2P transfers
    Admin Adjustments
    {len(admin_adjustments)}
    +${admin_credits:,.2f} · -${admin_debits:,.2f}
    Platform Revenue (Fees)
    ${total_fees:,.2f}
    Separated from liabilities

    Recent Platform Activity

    View All Transactions
    {recent_tx_rows}
    Reference Type From To Amount Status
    ''' html = build_admin_layout(body, "Administrator Overview | Monveracu Admin", path) self.wfile.write(html.encode('utf-8')) return # 18. Default 404 self.wfile.write(b"

    404 Not Found

    Return to Dashboard

    ") def start(): # Bind to 0.0.0.0 so both localhost, 127.0.0.1, and browser IPv6 work without hindrance server_address = ("0.0.0.0", PORT) with ThreadedHTTPServer(server_address, BnkfxHandler) as httpd: print("==================================================================") print(f" BNKFX BANKING PLATFORM - LOCALHOST SERVER ACTIVE ") print("==================================================================") print(f" [+] Local Server URL: http://localhost:{PORT}") print(f" [+] Customer Dashboard: http://localhost:{PORT}/dashboard") print(f" [+] Administrator Portal: http://localhost:{PORT}/admin") print("==================================================================") httpd.serve_forever() if __name__ == "__main__": start()