lots of changes

plugins/transfer/routes.py

@@ -0,0 +1,152 @@
+from datetime import datetime
+from flask import Blueprint, request, redirect, url_for, flash, render_template
+from flask_login import login_required, current_user
+
+from plugins.plant.models import db, Plant, PlantOwnershipLog
+from plugins.transfer.models import TransferRequest
+from plugins.auth.models import User
+
+bp = Blueprint('transfer', __name__, template_folder='templates', url_prefix='/transfer')
+
+@bp.route('/request/<int:plant_id>', methods=['GET', 'POST'])
+@login_required
+def request_transfer(plant_id):
+    plant = Plant.query.get_or_404(plant_id)
+
+    if plant.owner_id == current_user.id:
+        seller = current_user
+        if request.method == 'POST':
+            buyer_id = request.form.get('buyer_id', type=int)
+            buyer = User.query.get(buyer_id)
+            if not buyer or buyer.id == seller.id:
+                flash("Please select a valid buyer.", "error")
+                return redirect(request.url)
+
+            tr = TransferRequest(
+                plant_id=plant.id,
+                seller_id=seller.id,
+                buyer_id=buyer.id,
+                status='pending',
+                seller_message=request.form.get('seller_message', '').strip()
+            )
+            db.session.add(tr)
+            db.session.commit()
+            flash("Transfer request sent to buyer. Waiting for their approval.", "info")
+            return redirect(url_for('plant.view', plant_id=plant.id))
+
+        all_users = User.query.filter(User.id != seller.id).all()
+        return render_template(
+            'transfer/request_transfer.html',
+            plant=plant,
+            all_users=all_users
+        )
+
+    else:
+        buyer = current_user
+        if request.method == 'POST':
+            seller_id = request.form.get('seller_id', type=int)
+            seller = User.query.get(seller_id)
+            if not seller or seller.id != plant.owner_id:
+                flash("Please select the correct seller (current owner).", "error")
+                return redirect(request.url)
+
+            tr = TransferRequest(
+                plant_id=plant.id,
+                seller_id=seller.id,
+                buyer_id=buyer.id,
+                status='pending',
+                buyer_message=request.form.get('buyer_message', '').strip()
+            )
+            db.session.add(tr)
+            db.session.commit()
+            flash("Transfer request sent to seller. Waiting for their approval.", "info")
+            return redirect(url_for('plant.view', plant_id=plant.id))
+
+        return render_template(
+            'transfer/request_transfer.html',
+            plant=plant,
+            all_users=[User.query.get(plant.owner_id)]
+        )
+
+@bp.route('/incoming', methods=['GET'])
+@login_required
+def incoming_requests():
+    pending = TransferRequest.query.filter_by(
+        buyer_id=current_user.id,
+        status='pending'
+    ).all()
+    return render_template('transfer/incoming.html', pending=pending)
+
+@bp.route('/approve/<int:request_id>', methods=['POST'])
+@login_required
+def approve_request(request_id):
+    tr = TransferRequest.query.get_or_404(request_id)
+    if current_user.id not in (tr.seller_id, tr.buyer_id):
+        flash("You’re not authorized to approve this transfer.", "error")
+        return redirect(url_for('transfer.incoming_requests'))
+
+    if current_user.id == tr.buyer_id:
+        tr.status = 'buyer_approved'
+        tr.buyer_message = request.form.get('message', tr.buyer_message)
+    else:
+        tr.status = 'seller_approved'
+        tr.seller_message = request.form.get('message', tr.seller_message)
+
+    tr.updated_at = datetime.utcnow()
+    db.session.commit()
+    flash("You have approved the transfer. Waiting on the other party.", "info")
+    return redirect(url_for('transfer.incoming_requests'))
+
+@bp.route('/finalize/<int:request_id>', methods=['POST'])
+@login_required
+def finalize_request(request_id):
+    tr = TransferRequest.query.get_or_404(request_id)
+
+    buyer_approved = (
+        TransferRequest.query
+        .filter_by(id=tr.id, buyer_id=tr.buyer_id, status='buyer_approved')
+        .first() is not None
+    )
+    seller_approved = (
+        TransferRequest.query
+        .filter_by(id=tr.id, seller_id=tr.seller_id, status='seller_approved')
+        .first() is not None
+    )
+
+    if not (buyer_approved and seller_approved):
+        flash("Both parties must approve before finalizing.", "error")
+        return redirect(url_for('transfer.incoming_requests'))
+
+    new_log = PlantOwnershipLog(
+        plant_id=tr.plant_id,
+        user_id=tr.buyer_id,
+        date_acquired=datetime.utcnow(),
+        transferred=True,
+        is_verified=True
+    )
+    db.session.add(new_log)
+
+    plant = Plant.query.get(tr.plant_id)
+    plant.owner_id = tr.buyer_id
+
+    tr.status = 'complete'
+    tr.updated_at = datetime.utcnow()
+
+    db.session.commit()
+    flash("Transfer finalized—ownership updated.", "success")
+    return redirect(url_for('plant.view', plant_id=tr.plant_id))
+
+@bp.route('/reject/<int:request_id>', methods=['POST'])
+@login_required
+def reject_request(request_id):
+    tr = TransferRequest.query.get_or_404(request_id)
+
+    if current_user.id not in (tr.seller_id, tr.buyer_id):
+        flash("You’re not authorized to reject this transfer.", "error")
+        return redirect(url_for('transfer.incoming_requests'))
+
+    tr.status = 'rejected'
+    tr.updated_at = datetime.utcnow()
+    db.session.commit()
+    flash("Transfer request has been rejected.", "warning")
+    return redirect(url_for('transfer.incoming_requests'))