diff --git "a/app.py" "b/app.py"
--- "a/app.py"
+++ "b/app.py"
@@ -1,79 +1,81 @@
+# --- START OF FILE app (8).py ---
+
+from flask import Flask, render_template_string, request, redirect, url_for, session, flash, send_file, jsonify
+from flask_caching import Cache
 import json
-import logging
-import mimetypes
 import os
+import logging
 import threading
 import time
-import uuid
 from datetime import datetime
-from io import BytesIO
-
-import requests
-from flask import (Flask, flash, jsonify, redirect, render_template_string,
-                   request, send_file, session, url_for)
-from flask_caching import Cache
-from huggingface_hub import HfApi, hf_hub_download
+from huggingface_hub import HfApi, hf_hub_download, HfFileSystem
 from werkzeug.utils import secure_filename
+import requests
+from io import BytesIO
+import uuid
+from pathlib import Path
 
 app = Flask(__name__)
-app.secret_key = os.getenv("FLASK_SECRET_KEY", "a-very-secret-and-complex-key")
-DATA_FILE = 'cloudeng_data_v2.json'
-REPO_ID = "Eluza133/Z1e1u"
+app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey_change_me_please") # Changed default key
+DATA_FILE = 'cloudeng_data.json'
+REPO_ID = "Eluza133/Z1e1u" # Make sure this repo exists and you have access
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ") or HF_TOKEN_WRITE
-UPLOAD_FOLDER = 'temp_uploads'
-os.makedirs(UPLOAD_FOLDER, exist_ok=True)
+HF_FS = HfFileSystem(token=HF_TOKEN_READ) # Filesystem object for easier interaction
+
+# Basic check for necessary tokens
+if not HF_TOKEN_WRITE:
+    logging.warning("HF_TOKEN (write access) is not set. File/folder uploads and deletions will fail.")
+if not HF_TOKEN_READ:
+    logging.warning("HF_TOKEN_READ is not set. Falling back to HF_TOKEN. File/folder access might fail for private repos if HF_TOKEN is not set.")
+
 
 cache = Cache(app, config={'CACHE_TYPE': 'simple'})
 logging.basicConfig(level=logging.INFO)
 
-@cache.memoize(timeout=300)
+@cache.memoize(timeout=60) # Shorter cache timeout
 def load_data():
     try:
-        download_db_from_hf()
+        if HF_TOKEN_READ: # Only download if token exists
+            download_db_from_hf()
+        else:
+            logging.warning("HF_TOKEN_READ not available, skipping DB download from HF.")
+            if not os.path.exists(DATA_FILE):
+                 with open(DATA_FILE, 'w', encoding='utf-8') as f:
+                    json.dump({'users': {}, 'files': {}}, f) # Initialize if missing
+
         with open(DATA_FILE, 'r', encoding='utf-8') as file:
             data = json.load(file)
             if not isinstance(data, dict):
                 logging.warning("Data is not in dict format, initializing empty database")
-                return {'users': {}, 'files': {}}
+                return {'users': {}} # Simplified structure: only users, files are inferred from paths
             data.setdefault('users', {})
-            data.setdefault('files', {})
-            for user_data in data['users'].values():
-                user_data.setdefault('files', [])
-                user_data.setdefault('folders', [])
             logging.info("Data successfully loaded")
             return data
     except FileNotFoundError:
         logging.warning(f"{DATA_FILE} not found. Initializing empty database.")
-        return {'users': {}, 'files': {}}
-    except json.JSONDecodeError:
-        logging.error(f"Error decoding JSON from {DATA_FILE}. Initializing empty database.")
-        return {'users': {}, 'files': {}}
+        return {'users': {}}
     except Exception as e:
         logging.error(f"Error loading data: {e}")
-        return {'users': {}, 'files': {}}
+        return {'users': {}}
 
 def save_data(data):
     try:
-        # Ensure default structures exist before saving
-        data.setdefault('users', {})
-        data.setdefault('files', {}) # Keep top-level files if needed, or remove if unused
-        for user_data in data['users'].values():
-                user_data.setdefault('files', [])
-                user_data.setdefault('folders', [])
-
         with open(DATA_FILE, 'w', encoding='utf-8') as file:
             json.dump(data, file, ensure_ascii=False, indent=4)
-        upload_db_to_hf()
+        if HF_TOKEN_WRITE: # Only upload if token exists
+            upload_db_to_hf()
+        else:
+            logging.warning("HF_TOKEN_WRITE not available, skipping DB upload to HF.")
         cache.clear()
-        logging.info("Data saved and uploaded to HF")
+        logging.info("Data saved locally")
     except Exception as e:
         logging.error(f"Error saving data: {e}")
-        raise
+        # Do not raise here to avoid crashing on save errors, just log it.
 
 def upload_db_to_hf():
     if not HF_TOKEN_WRITE:
-        logging.warning("HF Write Token not set. Skipping database upload.")
+        logging.warning("Skipping HF DB upload: Write token not configured.")
         return
     try:
         api = HfApi()
@@ -87,15 +89,11 @@ def upload_db_to_hf():
         )
         logging.info("Database uploaded to Hugging Face")
     except Exception as e:
-        logging.error(f"Error uploading database: {e}")
+        logging.error(f"Error uploading database to HF: {e}")
 
 def download_db_from_hf():
     if not HF_TOKEN_READ:
-        logging.warning("HF Read Token not set. Skipping database download attempt.")
-        # If file doesn't exist locally, create an empty one
-        if not os.path.exists(DATA_FILE):
-             with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                json.dump({'users': {}, 'files': {}}, f)
+        logging.warning("Skipping HF DB download: Read token not configured.")
         return
     try:
         hf_hub_download(
@@ -105,382 +103,129 @@ def download_db_from_hf():
             token=HF_TOKEN_READ,
             local_dir=".",
             local_dir_use_symlinks=False,
-            force_download=True, # Force download to get latest version
-            resume_download=False # Start fresh
+            force_download=True # Force download to get the latest version
         )
         logging.info("Database downloaded from Hugging Face")
-    except Exception as e:
-        logging.error(f"Error downloading database: {e}")
+    except Exception as e: # More specific exceptions could be caught (e.g., hf_hub.utils.RepositoryNotFoundError)
+        logging.error(f"Error downloading database from HF: {e}. Checking if local file exists.")
         if not os.path.exists(DATA_FILE):
-            logging.warning(f"Creating empty {DATA_FILE} as download failed and file doesn't exist.")
+            logging.warning(f"{DATA_FILE} not found locally after download error. Initializing empty database.")
             with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                json.dump({'users': {}, 'files': {}}, f)
+                json.dump({'users': {}}, f)
 
 def periodic_backup():
+    if not HF_TOKEN_WRITE:
+        logging.warning("Periodic backup disabled: Write token not configured.")
+        return
     while True:
         time.sleep(1800) # Backup every 30 minutes
         logging.info("Starting periodic backup...")
-        upload_db_to_hf()
+        # It might be better to save data only if there were changes,
+        # but for simplicity, we just upload the current state.
+        if os.path.exists(DATA_FILE):
+             upload_db_to_hf()
+        else:
+             logging.warning("Skipping periodic backup: data file does not exist.")
+
 
 def get_file_type(filename):
-    ext = os.path.splitext(filename)[1].lower()
-    if ext in ('.mp4', '.mov', '.avi', '.webm', '.mkv', '.flv'):
+    filename_lower = filename.lower()
+    if filename_lower.endswith(('.mp4', '.mov', '.avi', '.webm', '.mkv')):
         return 'video'
-    elif ext in ('.jpg', '.jpeg', '.png', '.gif', '.bmp', '.webp', '.svg'):
+    elif filename_lower.endswith(('.jpg', '.jpeg', '.png', '.gif', '.bmp', '.webp', '.svg')):
         return 'image'
-    elif ext == '.pdf':
+    elif filename_lower.endswith('.pdf'):
         return 'pdf'
-    elif ext == '.txt':
+    elif filename_lower.endswith('.txt'):
         return 'text'
-    return 'other'
-
-def generate_unique_filename(original_filename):
-    _, ext = os.path.splitext(original_filename)
-    safe_base = secure_filename(os.path.splitext(original_filename)[0])
-    if not safe_base: # Handle cases like ".bashrc"
-        safe_base = "file"
-    unique_id = uuid.uuid4().hex[:8] # Shorter UUID part
-    return f"{safe_base}_{unique_id}{ext}"
-
-def get_folder_icon():
-    return '''<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor" class="w-16 h-16 mx-auto text-yellow-500">
-                <path d="M19.5 21a1.5 1.5 0 0 0 1.5-1.5v-5.379a1.5 1.5 0 0 0-.44-1.06L16.172 9H12a1.5 1.5 0 0 1-1.5-1.5V3a1.5 1.5 0 0 0-1.5-1.5H3.75A1.5 1.5 0 0 0 2.25 3v16.5A1.5 1.5 0 0 0 3.75 21h15.75Z" />
-                <path d="M21.375 12.75a1.5 1.5 0 0 0-1.5 1.5v5.25a1.5 1.5 0 0 1-1.5 1.5H3.75a1.5 1.5 0 0 1-1.5-1.5V3a1.5 1.5 0 0 1 1.5-1.5h5.25a1.5 1.5 0 0 1 1.5 1.5v4.5a1.5 1.5 0 0 0 1.5 1.5h5.379a1.5 1.5 0 0 1 1.06.44l3.94 3.94a1.5 1.5 0 0 1 .44 1.06v.379a1.5 1.5 0 0 0 1.5 1.5Z" />
-               </svg>'''
-
-def get_file_icon(file_type):
-    # Basic file icon, could be expanded with specific icons per type
-    return '''<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor" class="w-16 h-16 mx-auto text-gray-500">
-                 <path fill-rule="evenodd" d="M5.625 1.5c-1.036 0-1.875.84-1.875 1.875v17.25c0 1.035.84 1.875 1.875 1.875h12.75c1.035 0 1.875-.84 1.875-1.875V12.75A3.75 3.75 0 0 0 16.5 9h-1.875a1.875 1.875 0 0 1-1.875-1.875V5.25A3.75 3.75 0 0 0 9 1.5H5.625ZM7.5 15a.75.75 0 0 1 .75-.75h7.5a.75.75 0 0 1 0 1.5h-7.5A.75.75 0 0 1 7.5 15Zm.75 2.25a.75.75 0 0 0 0 1.5H12a.75.75 0 0 0 0-1.5H8.25Z" clip-rule="evenodd" />
-                 <path d="M12.971 1.816A5.23 5.23 0 0 1 14.25 1.5a.75.75 0 0 1 .75.75v2.25H16.5a.75.75 0 0 1 .75.75v.379a5.252 5.252 0 0 1-1.544 3.596L12.971 1.816Z" />
-                </svg>'''
+    # Add more types as needed
+    # elif filename_lower.endswith(('.doc', '.docx')):
+    #     return 'document'
+    else:
+        return 'other'
+
+def get_user_base_path(username):
+    return f"cloud_files/{username}"
+
+def get_hf_fs_path(username, current_path, filename=""):
+    # Ensure current_path is relative and clean
+    rel_path = Path(current_path.strip('/'))
+    base_repo_path = f"{REPO_ID}/datasets/{get_user_base_path(username)}"
+    full_fs_path = f"{base_repo_path}/{rel_path}/{filename}" if filename else f"{base_repo_path}/{rel_path}"
+    # Clean up potential double slashes, except for the protocol part if present (though HF paths don't use http://)
+    full_fs_path = full_fs_path.replace("//", "/")
+    return full_fs_path
+
+def get_hf_api_path(username, current_path, unique_filename):
+    # Path used for API operations like upload/delete
+    rel_path = Path(current_path.strip('/'))
+    api_path = Path(get_user_base_path(username)) / rel_path / unique_filename
+    return str(api_path).replace('\\', '/') # Ensure forward slashes
+
+def get_hf_resolve_url(api_path):
+    # Construct the URL for direct access/preview
+    # Ensure the path doesn't start with a slash if REPO_ID already has one
+    return f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{api_path}"
+
 
 BASE_STYLE = '''
 :root {
-    --primary: #ff4d6d; /* Hot Pink */
-    --secondary: #00ddeb; /* Cyan */
-    --accent: #8b5cf6; /* Violet */
-    --success: #10b981; /* Emerald */
-    --warning: #f59e0b; /* Amber */
-    --danger: #ef4444; /* Red */
-    --info: #3b82f6; /* Blue */
-    --background-light: #f8fafc; /* Slate 50 */
-    --background-dark: #0f172a; /* Slate 900 */
-    --card-bg-light: #ffffff;
-    --card-bg-dark: #1e293b; /* Slate 800 */
-    --text-light: #334155; /* Slate 700 */
-    --text-dark: #e2e8f0; /* Slate 200 */
-    --border-light: #e2e8f0; /* Slate 200 */
-    --border-dark: #334155; /* Slate 700 */
-    --shadow-sm: 0 1px 2px 0 rgb(0 0 0 / 0.05);
-    --shadow: 0 4px 6px -1px rgb(0 0 0 / 0.1), 0 2px 4px -2px rgb(0 0 0 / 0.1);
-    --shadow-lg: 0 10px 15px -3px rgb(0 0 0 / 0.1), 0 4px 6px -4px rgb(0 0 0 / 0.1);
-    --radius-sm: 0.25rem;
-    --radius: 0.5rem;
-    --radius-lg: 0.75rem;
-    --transition: all 0.2s ease-in-out;
-}
-*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
-@import url('https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap');
-body {
-    font-family: 'Inter', sans-serif;
-    background-color: var(--background-light);
-    color: var(--text-light);
-    line-height: 1.6;
-    -webkit-font-smoothing: antialiased;
-    -moz-osx-font-smoothing: grayscale;
-}
-body.dark {
-    background-color: var(--background-dark);
-    color: var(--text-dark);
-}
-.container {
-    max-width: 1300px;
-    margin: 2rem auto;
-    padding: 1.5rem 2rem;
-}
-.card {
-    background-color: var(--card-bg-light);
-    border-radius: var(--radius-lg);
-    box-shadow: var(--shadow);
-    padding: 2rem;
-    margin-bottom: 1.5rem;
-}
-body.dark .card { background-color: var(--card-bg-dark); }
-h1 {
-    font-size: 2.25rem; /* 36px */
-    font-weight: 800;
-    text-align: center;
-    margin-bottom: 2rem;
-    background: linear-gradient(135deg, var(--primary), var(--accent));
-    -webkit-background-clip: text;
-    color: transparent;
-}
-h2 {
-    font-size: 1.5rem; /* 24px */
-    font-weight: 700;
-    margin-top: 2rem;
-    margin-bottom: 1rem;
-    border-bottom: 1px solid var(--border-light);
-    padding-bottom: 0.5rem;
-}
-body.dark h2 { color: var(--text-dark); border-bottom-color: var(--border-dark); }
-input[type="text"], input[type="password"], input[type="file"], textarea {
-    width: 100%;
-    padding: 0.75rem 1rem;
-    margin: 0.5rem 0 1rem 0;
-    border: 1px solid var(--border-light);
-    border-radius: var(--radius);
-    background-color: var(--background-light);
-    color: var(--text-light);
-    font-size: 1rem;
-    transition: var(--transition);
-}
-body.dark input[type="text"], body.dark input[type="password"], body.dark input[type="file"], body.dark textarea {
-    background-color: var(--background-dark);
-    color: var(--text-dark);
-    border-color: var(--border-dark);
-}
-input:focus, textarea:focus {
-    outline: none;
-    border-color: var(--primary);
-    box-shadow: 0 0 0 3px rgba(255, 77, 109, 0.3); /* primary with opacity */
-}
-input[type="file"] { padding: 0.5rem; }
-input::file-selector-button {
-    padding: 0.5rem 1rem;
-    border: none;
-    background-color: var(--accent);
-    color: white;
-    border-radius: var(--radius-sm);
-    cursor: pointer;
-    margin-right: 1rem;
-    transition: var(--transition);
-}
-input::file-selector-button:hover { background-color: #7c3aed; } /* Darker accent */
-.btn {
-    padding: 0.75rem 1.5rem;
-    border: none;
-    border-radius: var(--radius);
-    cursor: pointer;
-    font-size: 1rem;
-    font-weight: 600;
-    transition: var(--transition);
-    text-decoration: none;
-    display: inline-block;
-    text-align: center;
-    box-shadow: var(--shadow-sm);
-}
-.btn-primary { background-color: var(--primary); color: white; }
-.btn-primary:hover { background-color: #e6415f; transform: translateY(-2px); box-shadow: var(--shadow); }
-.btn-secondary { background-color: var(--secondary); color: var(--text-light); }
-.btn-secondary:hover { background-color: #00b8c5; transform: translateY(-2px); box-shadow: var(--shadow); }
-.btn-accent { background-color: var(--accent); color: white; }
-.btn-accent:hover { background-color: #7c3aed; transform: translateY(-2px); box-shadow: var(--shadow); }
-.btn-danger { background-color: var(--danger); color: white; }
-.btn-danger:hover { background-color: #dc2626; transform: translateY(-2px); box-shadow: var(--shadow); }
-.btn-sm { padding: 0.5rem 1rem; font-size: 0.875rem; }
-.flash {
-    padding: 1rem;
-    margin-bottom: 1rem;
-    border-radius: var(--radius);
-    text-align: center;
-    font-weight: 500;
-}
-.flash-success { background-color: #d1fae5; color: #065f46; } /* Green */
-.flash-error { background-color: #fee2e2; color: #991b1b; } /* Red */
-.flash-info { background-color: #dbeafe; color: #1e40af; } /* Blue */
-body.dark .flash-success { background-color: #059669; color: #d1fae5; }
-body.dark .flash-error { background-color: #b91c1c; color: #fee2e2; }
-body.dark .flash-info { background-color: #2563eb; color: #dbeafe; }
-
-.breadcrumb {
-    display: flex;
-    align-items: center;
-    margin-bottom: 1.5rem;
-    font-size: 0.9rem;
-    color: #64748b; /* Slate 500 */
-    background-color: var(--card-bg-light);
-    padding: 0.75rem 1.5rem;
-    border-radius: var(--radius);
-    box-shadow: var(--shadow-sm);
-}
-body.dark .breadcrumb { background-color: var(--card-bg-dark); color: #94a3b8; } /* Slate 400 */
-.breadcrumb a { color: var(--primary); text-decoration: none; font-weight: 500; }
-.breadcrumb a:hover { text-decoration: underline; }
-.breadcrumb span { margin: 0 0.5rem; }
-
-.file-grid {
-    display: grid;
-    grid-template-columns: repeat(auto-fill, minmax(180px, 1fr));
-    gap: 1.5rem;
-    margin-top: 1.5rem;
-}
-.grid-item {
-    background-color: var(--card-bg-light);
-    border-radius: var(--radius-lg);
-    padding: 1rem;
-    box-shadow: var(--shadow);
-    text-align: center;
-    transition: var(--transition);
-    position: relative;
-    overflow: hidden;
-    cursor: pointer;
-}
-body.dark .grid-item { background-color: var(--card-bg-dark); }
-.grid-item:hover { transform: translateY(-5px); box-shadow: var(--shadow-lg); }
-.grid-item-icon { margin-bottom: 0.5rem; }
-.grid-item-icon img, .grid-item-icon video {
-    width: 100%;
-    height: 120px;
-    object-fit: cover;
-    border-radius: var(--radius-sm);
-    background-color: #e2e8f0; /* Placeholder bg */
-}
-.grid-item-icon .file-placeholder-icon svg {
-    width: 64px; height: 64px; margin: 28px auto; /* Center vertically */
-    color: #94a3b8; /* Slate 400 */
-}
-body.dark .grid-item-icon .file-placeholder-icon svg { color: #64748b; } /* Slate 500 */
-.grid-item-name {
-    font-weight: 500;
-    font-size: 0.9rem;
-    margin-bottom: 0.5rem;
-    word-break: break-all; /* Prevent long names overflowing */
-    line-height: 1.3;
-    height: 2.6em; /* Limit to 2 lines */
-    overflow: hidden;
-    text-overflow: ellipsis;
-    display: -webkit-box;
-    -webkit-line-clamp: 2;
-    -webkit-box-orient: vertical;
-}
-.grid-item-actions {
-    margin-top: 0.75rem;
-    display: flex;
-    justify-content: center;
-    gap: 0.5rem;
-}
-.grid-item-actions .btn { padding: 0.3rem 0.6rem; font-size: 0.75rem; }
-
-.modal {
-    display: none;
-    position: fixed;
-    z-index: 1000;
-    left: 0; top: 0;
-    width: 100%; height: 100%;
-    overflow: auto;
-    background-color: rgba(0,0,0,0.85);
-    align-items: center;
-    justify-content: center;
-    padding: 20px;
-}
-.modal-content {
-    position: relative;
-    margin: auto;
-    padding: 0;
-    background-color: var(--card-bg-dark); /* Dark background for better contrast */
-    border-radius: var(--radius-lg);
-    max-width: 90vw;
-    max-height: 90vh;
-    display: flex;
-    justify-content: center;
-    align-items: center;
-    overflow: hidden;
-}
-.modal img, .modal video, .modal iframe, .modal pre {
-    max-width: 100%;
-    max-height: calc(90vh - 40px); /* Account for padding */
-    display: block;
-    object-fit: contain;
-    border-radius: var(--radius-sm);
-}
-.modal iframe { width: 80vw; height: 85vh; background-color: #fff; }
-.modal pre {
-    background-color: #f1f5f9; /* Light bg for text */
-    color: #1e293b;
-    padding: 1.5rem;
-    border-radius: var(--radius-sm);
-    white-space: pre-wrap;
-    word-wrap: break-word;
-    overflow: auto;
-    font-family: 'Courier New', Courier, monospace;
-    font-size: 0.9rem;
-    max-height: calc(90vh - 60px);
-}
-.modal-close {
-    position: absolute;
-    top: 15px;
-    right: 25px;
-    color: #f1f1f1;
-    font-size: 40px;
-    font-weight: bold;
-    transition: 0.3s;
-    cursor: pointer;
-    z-index: 1010;
-}
-.modal-close:hover, .modal-close:focus { color: #bbb; text-decoration: none; }
-
-#progress-container {
-    width: 100%;
-    background-color: var(--border-light);
-    border-radius: var(--radius);
-    margin: 1rem 0;
-    overflow: hidden;
-    display: none;
-}
-body.dark #progress-container { background-color: var(--border-dark); }
-#progress-bar {
-    width: 0%;
-    height: 15px;
-    background-color: var(--primary);
-    border-radius: var(--radius);
-    transition: width 0.4s ease;
-    text-align: center;
-    line-height: 15px;
-    color: white;
-    font-size: 0.75rem;
-}
-
-.user-list { margin-top: 1.5rem; }
-.user-item {
-    display: flex;
-    justify-content: space-between;
-    align-items: center;
-    padding: 1rem 1.5rem;
-    background-color: var(--card-bg-light);
-    border-radius: var(--radius);
-    margin-bottom: 1rem;
-    box-shadow: var(--shadow-sm);
-    transition: var(--transition);
-}
-body.dark .user-item { background-color: var(--card-bg-dark); }
-.user-item:hover { box-shadow: var(--shadow); }
-.user-item a { color: var(--primary); text-decoration: none; font-weight: 600; font-size: 1.1rem;}
-.user-item a:hover { color: var(--accent); }
-.user-item p { font-size: 0.9rem; color: #64748b; }
-body.dark .user-item p { color: #94a3b8; }
-.user-item .actions { display: flex; gap: 0.5rem; }
-
-@media (max-width: 768px) {
-    .file-grid { grid-template-columns: repeat(auto-fill, minmax(150px, 1fr)); gap: 1rem; }
-    .grid-item { padding: 0.75rem; }
-    .grid-item-icon img, .grid-item-icon video { height: 100px; }
-    .grid-item-icon .file-placeholder-icon svg { width: 48px; height: 48px; margin: 26px auto; }
-    h1 { font-size: 1.75rem; }
-    h2 { font-size: 1.25rem; }
-    .container { padding: 1rem; margin: 1rem auto; }
-    .card { padding: 1.5rem; }
-    .user-item { flex-direction: column; align-items: flex-start; gap: 0.5rem;}
-    .user-item .actions { margin-top: 0.5rem; }
-}
-@media (max-width: 480px) {
-    .file-grid { grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); gap: 0.75rem; }
-    .grid-item-name { font-size: 0.8rem; height: 2.4em; }
-    .btn { padding: 0.6rem 1.2rem; font-size: 0.9rem; }
-    .breadcrumb { font-size: 0.8rem; padding: 0.5rem 1rem; }
-    .modal-content { max-width: 95vw; }
+    --primary: #ff4d6d; --secondary: #00ddeb; --accent: #8b5cf6;
+    --background-light: #f5f6fa; --background-dark: #1a1625;
+    --card-bg: rgba(255, 255, 255, 0.95); --card-bg-dark: rgba(40, 35, 60, 0.95);
+    --text-light: #2a1e5a; --text-dark: #e8e1ff;
+    --shadow: 0 10px 30px rgba(0, 0, 0, 0.2); --glass-bg: rgba(255, 255, 255, 0.15);
+    --transition: all 0.3s ease; --delete-color: #ff4444; --folder-color: #ffc107;
 }
+* { margin: 0; padding: 0; box-sizing: border-box; }
+body { font-family: 'Inter', sans-serif; background: var(--background-light); color: var(--text-light); line-height: 1.6; }
+body.dark { background: var(--background-dark); color: var(--text-dark); }
+.container { margin: 20px auto; max-width: 1200px; padding: 25px; background: var(--card-bg); border-radius: 20px; box-shadow: var(--shadow); }
+body.dark .container { background: var(--card-bg-dark); }
+h1 { font-size: 2em; font-weight: 800; text-align: center; margin-bottom: 25px; background: linear-gradient(135deg, var(--primary), var(--accent)); -webkit-background-clip: text; color: transparent; }
+h2 { font-size: 1.5em; margin-top: 30px; margin-bottom: 15px; color: var(--text-light); }
+body.dark h2 { color: var(--text-dark); }
+input, textarea, select { width: 100%; padding: 14px; margin: 12px 0; border: none; border-radius: 14px; background: var(--glass-bg); color: var(--text-light); font-size: 1.1em; box-shadow: inset 0 3px 10px rgba(0, 0, 0, 0.1); }
+body.dark input, body.dark textarea, body.dark select { color: var(--text-dark); background: rgba(0,0,0,0.2); }
+input:focus, textarea:focus, select:focus { outline: none; box-shadow: 0 0 0 4px var(--primary); }
+.btn { padding: 14px 28px; background: var(--primary); color: white; border: none; border-radius: 14px; cursor: pointer; font-size: 1.1em; font-weight: 600; transition: var(--transition); box-shadow: var(--shadow); display: inline-block; text-decoration: none; text-align: center; }
+.btn:hover { transform: scale(1.05); background: #e6415f; }
+.btn-small { padding: 8px 16px; font-size: 0.9em; border-radius: 10px; }
+.download-btn { background: var(--secondary); margin-top: 10px; }
+.download-btn:hover { background: #00b8c5; }
+.delete-btn { background: var(--delete-color); margin-top: 10px; }
+.delete-btn:hover { background: #cc3333; }
+.flash { padding: 15px; margin-bottom: 15px; border-radius: 10px; text-align: center; }
+.flash.success { background-color: #d4edda; color: #155724; border: 1px solid #c3e6cb; }
+.flash.error { background-color: #f8d7da; color: #721c24; border: 1px solid #f5c6cb; }
+.flash.info { background-color: #d1ecf1; color: #0c5460; border: 1px solid #bee5eb; }
+.grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); gap: 20px; margin-top: 20px; }
+.item { background: var(--card-bg); padding: 15px; border-radius: 16px; box-shadow: var(--shadow); text-align: center; transition: var(--transition); position: relative; }
+body.dark .item { background: var(--card-bg-dark); }
+.item:hover { transform: translateY(-5px); }
+.item-preview { max-width: 100%; height: 150px; object-fit: cover; border-radius: 10px; margin-bottom: 10px; cursor: pointer; background-color: #eee; display: flex; align-items: center; justify-content: center; }
+body.dark .item-preview { background-color: #333; }
+.item-preview img, .item-preview video { max-width: 100%; max-height: 100%; border-radius: 10px; }
+.item-preview .file-icon { font-size: 4em; color: #aaa; } /* Placeholder for generic icons */
+.item p { font-size: 0.9em; margin: 5px 0; word-break: break-all; }
+.item a { color: var(--primary); text-decoration: none; }
+.item a:hover { color: var(--accent); }
+.folder-icon { font-size: 4em; color: var(--folder-color); line-height: 150px; } /* Specific style for folder icon */
+.item.folder { background: #fffacd; } /* Light yellow background for folders */
+body.dark .item.folder { background: #5f5b3a; }
+.item.folder a { color: #8b4513; font-weight: bold; text-decoration: none; display: block; }
+.modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0, 0, 0, 0.85); z-index: 2000; justify-content: center; align-items: center; padding: 20px; }
+.modal-content { max-width: 95%; max-height: 95%; background: white; padding: 10px; border-radius: 15px; overflow: hidden; }
+.modal-content iframe { width: 80vw; height: 80vh; border: none; }
+.modal img, .modal video { max-width: 100%; max-height: 90vh; object-fit: contain; border-radius: 10px; display: block; margin: auto; }
+.modal-close { position: absolute; top: 15px; right: 30px; font-size: 2em; color: white; cursor: pointer; z-index: 2010; }
+#progress-container { width: 100%; background: var(--glass-bg); border-radius: 10px; margin: 15px 0; display: none; }
+#progress-bar { width: 0%; height: 20px; background: var(--primary); border-radius: 10px; transition: width 0.3s ease; }
+.breadcrumbs { margin-bottom: 20px; font-size: 1.1em; }
+.breadcrumbs a { color: var(--accent); text-decoration: none; }
+.breadcrumbs span { margin: 0 5px; }
+#create-folder-section { margin-top: 20px; padding: 15px; background: var(--glass-bg); border-radius: 15px; }
+body.dark #create-folder-section { background: rgba(0,0,0,0.2); }
 '''
 
 @app.route('/register', methods=['GET', 'POST'])
@@ -492,12 +237,13 @@ def register():
         if not username or not password:
             flash('Имя пользователя и пароль обязательны!', 'error')
             return redirect(url_for('register'))
-
+        
         # Basic validation (add more robust checks as needed)
-        if len(username) < 3 or len(password) < 6:
-             flash('Имя пользователя должно быть не менее 3 символов, пароль - не менее 6.', 'error')
+        if not username.isalnum() or len(username) < 3:
+             flash('Имя пользователя должно быть не менее 3 символов и содержать только буквы и цифры.', 'error')
              return redirect(url_for('register'))
 
+
         data = load_data()
 
         if username in data['users']:
@@ -505,21 +251,31 @@ def register():
             return redirect(url_for('register'))
 
         data['users'][username] = {
-            'password': password, # Store password directly (INSECURE! Use hashing in production)
-            'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
-            'files': [],
-            'folders': [] # Initialize folders list
+            'password': password, # Consider hashing passwords in a real application
+            'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
+            # 'files' list is removed, file info inferred from HF repo
         }
         try:
             save_data(data)
             session['username'] = username
             flash('Регистрация прошла успешно!', 'success')
+            # Optionally create user's base folder on HF here, although it gets created on first upload too
+            # try:
+            #     user_base_fs_path = get_hf_fs_path(username, '') # Path to user's root dir
+            #     if HF_TOKEN_WRITE and not HF_FS.exists(user_base_fs_path):
+            #         HF_FS.mkdir(user_base_fs_path, create_parents=True)
+            #         logging.info(f"Created base directory for user {username} on HF.")
+            # except Exception as e:
+            #     logging.error(f"Could not create base directory for {username} on HF: {e}")
             return redirect(url_for('dashboard'))
         except Exception as e:
-             flash('Ошибка сохранения данных при регистрации.', 'error')
-             logging.error(f"Registration save error: {e}")
+             flash(f'Ошибка сохранения данных: {e}', 'error')
+             # Rollback user creation if save failed? Complex, maybe just log.
+             if username in data['users']:
+                 del data['users'][username] # Attempt rollback in memory
              return redirect(url_for('register'))
 
+
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
@@ -527,72 +283,52 @@ def register():
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Регистрация - Zeus Cloud</title>
-    <style>{style}</style>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+    <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
-        <div class="card" style="max-width: 500px; margin: 4rem auto;">
-            <h1>Регистрация в Zeus Cloud</h1>
-            {% with messages = get_flashed_messages(with_categories=true) %}
-                {% if messages %}
-                    {% for category, message in messages %}
-                        <div class="flash flash-{{ category }}">{{ message }}</div>
-                    {% endfor %}
-                {% endif %}
-            {% endwith %}
-            <form method="POST" id="register-form">
-                <input type="text" name="username" placeholder="Введите имя пользователя" required minlength="3">
-                <input type="password" name="password" placeholder="Введите пароль" required minlength="6">
-                <button type="submit" class="btn btn-primary" style="width: 100%;">Зарегистрироваться</button>
-            </form>
-            <p style="margin-top: 1.5rem; text-align: center;">Уже есть аккаунт? <a href="{{ url_for('login') }}" style="color: var(--primary); font-weight: 600;">Войти</a></p>
-        </div>
+        <h1>Регистрация в Zeus Cloud</h1>
+        {% with messages = get_flashed_messages(with_categories=true) %}
+            {% if messages %}
+                {% for category, message in messages %}
+                    <div class="flash {{ category }}">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
+        <form method="POST" id="register-form">
+            <input type="text" name="username" placeholder="Имя пользователя (буквы и цифры, мин. 3)" required pattern="[a-zA-Z0-9]{3,}">
+            <input type="password" name="password" placeholder="Пароль" required>
+            <button type="submit" class="btn">Зарегистрироваться</button>
+        </form>
+        <p style="margin-top: 20px;">Уже есть аккаунт? <a href="{{ url_for('login') }}">Войти</a></p>
     </div>
 </body>
 </html>
 '''
-    return render_template_string(html, style=BASE_STYLE)
+    return render_template_string(html)
 
 @app.route('/', methods=['GET', 'POST'])
 def login():
     if request.method == 'POST':
-        content_type = request.headers.get('Content-Type')
-        if content_type == 'application/json':
-             req_data = request.get_json()
-             username = req_data.get('username')
-             password = req_data.get('password')
-             is_ajax = True
-        elif content_type == 'application/x-www-form-urlencoded':
-             username = request.form.get('username')
-             password = request.form.get('password')
-             is_ajax = True # Assume form submission via JS is AJAX
-        else: # Handle direct form submission without JS
-             username = request.form.get('username')
-             password = request.form.get('password')
-             is_ajax = False
-
-        if not username or not password:
-             if is_ajax:
-                 return jsonify({'status': 'error', 'message': 'Имя пользователя и пароль обязательны!'})
-             else:
-                 flash('Имя пользователя и пароль обязательны!', 'error')
-                 return redirect(url_for('login'))
-
+        username = request.form.get('username')
+        password = request.form.get('password')
         data = load_data()
 
-        if username in data['users'] and data['users'][username]['password'] == password: # Direct password check (INSECURE!)
+        # Use .get() for safer dictionary access
+        user_data = data.get('users', {}).get(username)
+
+        if user_data and user_data.get('password') == password: # Again, use hashed passwords ideally
             session['username'] = username
-            if is_ajax:
-                return jsonify({'status': 'success', 'redirect': url_for('dashboard')})
-            else:
-                flash('Вход выполнен успешно!', 'success')
-                return redirect(url_for('dashboard'))
+            # Check if localStorage save is requested (e.g., via a checkbox)
+            # For simplicity, always save on successful login for now
+            return jsonify({'status': 'success', 'redirect': url_for('dashboard')})
         else:
-            if is_ajax:
-                return jsonify({'status': 'error', 'message': 'Неверное имя пользователя или пароль!'})
-            else:
-                 flash('Неверное имя пользоват��ля или пароль!', 'error')
-                 return redirect(url_for('login'))
+            return jsonify({'status': 'error', 'message': 'Неверное имя пользователя или пароль!'})
+
+    # If already logged in (session exists), redirect to dashboard
+    if 'username' in session:
+        return redirect(url_for('dashboard'))
 
     html = '''
 <!DOCTYPE html>
@@ -601,190 +337,271 @@ def login():
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Вход - Zeus Cloud</title>
-    <style>{style}</style>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+    <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
-        <div class="card" style="max-width: 500px; margin: 4rem auto;">
-            <h1>Zeus Cloud</h1>
-            <div id="flash-messages">
-                {% with messages = get_flashed_messages(with_categories=true) %}
-                    {% if messages %}
-                        {% for category, message in messages %}
-                            <div class="flash flash-{{ category }}">{{ message }}</div>
-                        {% endfor %}
-                    {% endif %}
-                {% endwith %}
-            </div>
-            <form method="POST" id="login-form">
-                <input type="text" name="username" placeholder="Имя пользователя" required>
-                <input type="password" name="password" placeholder="Пароль" required>
-                <button type="submit" class="btn btn-primary" style="width: 100%;">Войти</button>
-            </form>
-            <p style="margin-top: 1.5rem; text-align: center;">Нет аккаунта? <a href="{{ url_for('register') }}" style="color: var(--primary); font-weight: 600;">Зарегистрируйтесь</a></p>
+        <h1>Zeus Cloud</h1>
+        <div id="flash-messages">
+             {% with messages = get_flashed_messages(with_categories=true) %}
+                 {% if messages %}
+                     {% for category, message in messages %}
+                         <div class="flash {{ category }}">{{ message }}</div>
+                     {% endfor %}
+                 {% endif %}
+             {% endwith %}
         </div>
+        <form method="POST" id="login-form">
+            <input type="text" name="username" placeholder="Имя пользователя" required>
+            <input type="password" name="password" placeholder="Пароль" required>
+            <button type="submit" class="btn">Войти</button>
+        </form>
+        <p style="margin-top: 20px;">Нет аккаунта? <a href="{{ url_for('register') }}">Зарегистрируйтесь</a></p>
     </div>
     <script>
-        const savedCredentials = JSON.parse(localStorage.getItem('zeusCredentials'));
-        if (savedCredentials) {
-            fetch('/', {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json', // Send as JSON
-                },
-                body: JSON.stringify(savedCredentials) // Send saved credentials
-            })
-            .then(response => response.json())
-            .then(data => {
-                if (data.status === 'success') {
-                    window.location.href = data.redirect;
-                } else {
-                    // Optional: Clear stored creds if they failed
-                    // localStorage.removeItem('zeusCredentials');
-                }
-            })
-            .catch(error => console.error('Ошибка автовхода:', error));
-        }
+        // Auto-login removed for simplicity and potential security concerns if credentials change
+        // const savedCredentials = JSON.parse(localStorage.getItem('zeusCredentials'));
+        // if (savedCredentials) { ... }
 
         document.getElementById('login-form').addEventListener('submit', function(e) {
             e.preventDefault();
             const formData = new FormData(this);
-            const data = Object.fromEntries(formData.entries()); // Convert FormData to object
-
             fetch('/', {
                 method: 'POST',
-                headers: {
-                    'Content-Type': 'application/json',
-                },
-                body: JSON.stringify(data)
+                body: formData
             })
             .then(response => response.json())
-            .then(result => {
+            .then(data => {
                 const flashContainer = document.getElementById('flash-messages');
                 flashContainer.innerHTML = ''; // Clear previous messages
-                if (result.status === 'success') {
-                    localStorage.setItem('zeusCredentials', JSON.stringify(data));
-                    window.location.href = result.redirect;
+                if (data.status === 'success') {
+                    // Optionally save credentials if a "remember me" box was checked
+                    // const username = formData.get('username');
+                    // const password = formData.get('password');
+                    // localStorage.setItem('zeusCredentials', JSON.stringify({ username, password }));
+                    window.location.href = data.redirect;
                 } else {
-                    flashContainer.innerHTML = `<div class="flash flash-error">${result.message}</div>`;
+                    flashContainer.innerHTML = `<div class="flash error">${data.message}</div>`;
                 }
             })
             .catch(error => {
-                console.error('Login error:', error);
-                document.getElementById('flash-messages').innerHTML = `<div class="flash flash-error">Ошибка соединения!</div>`;
+                console.error('Login Error:', error);
+                document.getElementById('flash-messages').innerHTML = `<div class="flash error">Ошибка соединения!</div>`;
             });
         });
     </script>
 </body>
 </html>
 '''
-    return render_template_string(html, style=BASE_STYLE)
+    return render_template_string(html)
 
-
-@app.route('/dashboard', methods=['GET', 'POST'])
-def dashboard():
+@app.route('/dashboard/', defaults={'current_path': ''})
+@app.route('/dashboard/<path:current_path>', methods=['GET', 'POST'])
+def dashboard(current_path):
     if 'username' not in session:
         flash('Пожалуйста, войдите в систему!', 'info')
         return redirect(url_for('login'))
 
     username = session['username']
-    data = load_data()
-    if username not in data['users']:
+    data = load_data() # Load user data, primarily for auth check
+    if username not in data.get('users', {}):
         session.pop('username', None)
         flash('Пользователь не найден!', 'error')
         return redirect(url_for('login'))
 
-    user_data = data['users'][username]
-    user_data.setdefault('files', [])
-    user_data.setdefault('folders', [])
-
-    current_path = request.args.get('path', '/')
-    if not current_path.startswith('/'): current_path = '/' + current_path
-    if not current_path.endswith('/'): current_path += '/'
-
+    # Normalize path: remove leading/trailing slashes for consistency internally
+    current_path = current_path.strip('/')
 
     if request.method == 'POST':
-        files = request.files.getlist('files')
-        target_path = request.form.get('current_path', '/')
-        if not target_path.startswith('/'): target_path = '/' + target_path
-        if not target_path.endswith('/'): target_path += '/'
+        action = request.form.get('action')
 
-        if not files or files[0].filename == '':
-             flash('Файлы для загрузки не выбраны.', 'warning')
-             return redirect(url_for('dashboard', path=target_path))
+        if action == 'upload':
+            if not HF_TOKEN_WRITE:
+                 flash('Ошибка: Загрузка невозможна, токен записи HF не настроен.', 'error')
+                 return redirect(url_for('dashboard', current_path=current_path))
 
-        if len(files) > 20:
-            flash('Максимум 20 файлов за раз!', 'warning')
-            return redirect(url_for('dashboard', path=target_path))
+            files = request.files.getlist('files')
+            if not files or all(f.filename == '' for f in files):
+                 flash('Файлы для загрузки не выбраны.', 'info')
+                 return redirect(url_for('dashboard', current_path=current_path))
 
-        api = HfApi(token=HF_TOKEN_WRITE)
-        uploaded_file_infos = []
+            # Limit simultaneous uploads if needed (example: max 20)
+            if len(files) > 20:
+                flash('Максимум 20 файлов за раз!', 'error')
+                return redirect(url_for('dashboard', current_path=current_path))
+
+            os.makedirs('uploads', exist_ok=True)
+            api = HfApi()
+            uploaded_count = 0
+            errors = []
 
-        try:
             for file in files:
-                if file:
-                    original_filename = file.filename
-                    unique_filename = generate_unique_filename(original_filename)
-                    temp_path = os.path.join(UPLOAD_FOLDER, f"{uuid.uuid4()}_{unique_filename}") # Unique temp name
+                if file and file.filename:
+                    original_filename = secure_filename(file.filename)
+                    unique_suffix = uuid.uuid4().hex[:8] # Shorter UUID part
+                    unique_filename = f"{original_filename}_{unique_suffix}" # Add UUID part, keep original extension
+                    
+                    # Ensure extension is preserved if original had one
+                    base, ext = os.path.splitext(original_filename)
+                    unique_filename = f"{base}_{unique_suffix}{ext}"
+
+
+                    temp_path = os.path.join('uploads', unique_filename) # Save temporarily with unique name
                     file.save(temp_path)
 
-                    hf_file_path = f"cloud_files/{username}{target_path.lstrip('/')}{unique_filename}"
-
-                    api.upload_file(
-                        path_or_fileobj=temp_path,
-                        path_in_repo=hf_file_path,
-                        repo_id=REPO_ID,
-                        repo_type="dataset",
-                        commit_message=f"Upload: {original_filename} for {username} to {target_path}"
-                    )
-
-                    file_info = {
-                        'original_filename': original_filename,
-                        'unique_filename': unique_filename, # Stored on HF
-                        'hf_path': hf_file_path, # Full path in HF repo
-                        'path_prefix': target_path, # Directory path within user's space
-                        'type': get_file_type(original_filename),
-                        'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-                    }
-                    uploaded_file_infos.append(file_info)
-
-                    if os.path.exists(temp_path):
-                        os.remove(temp_path)
-
-            user_data['files'].extend(uploaded_file_infos)
-            save_data(data)
-            flash(f'{len(uploaded_file_infos)} Файл(ов) успешно загружено!', 'success')
+                    # Construct the path within the HF dataset repository
+                    hf_api_path = get_hf_api_path(username, current_path, unique_filename)
+
+                    try:
+                        api.upload_file(
+                            path_or_fileobj=temp_path,
+                            path_in_repo=hf_api_path,
+                            repo_id=REPO_ID,
+                            repo_type="dataset",
+                            token=HF_TOKEN_WRITE,
+                            commit_message=f"User {username} uploaded {original_filename} to {current_path}"
+                        )
+                        uploaded_count += 1
+                        logging.info(f"Uploaded '{original_filename}' to {hf_api_path}")
+                    except Exception as e:
+                        errors.append(f"Не удалось загрузить {original_filename}: {e}")
+                        logging.error(f"Error uploading {original_filename} to {hf_api_path}: {e}")
+                    finally:
+                        if os.path.exists(temp_path):
+                            os.remove(temp_path) # Clean up temp file
+
+            if uploaded_count > 0:
+                flash(f'{uploaded_count} файл(ов) успешно загружено!', 'success')
+            if errors:
+                flash('Некоторые файлы не удалось загрузить:', 'error')
+                for error in errors:
+                    flash(error, 'error')
+            # No need to save_data() here as file metadata isn't stored in JSON anymore
+
+        elif action == 'create_folder':
+             if not HF_TOKEN_WRITE:
+                 flash('Ошибка: Создание папки невозможно, токен записи HF не настроен.', 'error')
+                 return redirect(url_for('dashboard', current_path=current_path))
+
+             folder_name = request.form.get('folder_name')
+             if not folder_name:
+                 flash('Имя папки не может быть пустым.', 'error')
+                 return redirect(url_for('dashboard', current_path=current_path))
+
+             safe_folder_name = secure_filename(folder_name)
+             if not safe_folder_name:
+                 flash('Недопустимое имя папки.', 'error')
+                 return redirect(url_for('dashboard', current_path=current_path))
+
+             # Create a placeholder file to make the directory visible in HF UI / listings
+             placeholder_filename = ".keep"
+             hf_api_path = get_hf_api_path(username, os.path.join(current_path, safe_folder_name).replace('\\','/'), placeholder_filename)
+
+             try:
+                 api = HfApi()
+                 # Upload an empty file (or fileobj)
+                 from io import BytesIO
+                 empty_file = BytesIO(b"")
+                 api.upload_file(
+                     path_or_fileobj=empty_file,
+                     path_in_repo=hf_api_path,
+                     repo_id=REPO_ID,
+                     repo_type="dataset",
+                     token=HF_TOKEN_WRITE,
+                     commit_message=f"User {username} created folder {safe_folder_name} in {current_path}"
+                 )
+                 flash(f'Папка "{safe_folder_name}" создана.', 'success')
+                 logging.info(f"Created folder '{safe_folder_name}' at {hf_api_path} for user {username}")
+             except Exception as e:
+                 flash(f'Не удалось создать папку "{safe_folder_name}": {e}', 'error')
+                 logging.error(f"Error creating folder {safe_folder_name} for {username}: {e}")
+
+        return redirect(url_for('dashboard', current_path=current_path))
+
+
+    # --- GET Request Logic ---
+    items = []
+    folders = []
+    files_list = []
+
+    if HF_TOKEN_READ: # Only list files if read token is available
+        try:
+            user_base_fs_path = f"datasets/{REPO_ID}/{get_user_base_path(username)}"
+            target_path_in_repo = os.path.join(user_base_fs_path, current_path).replace('\\', '/')
+
+            logging.info(f"Listing files for user {username} in HF path: {target_path_in_repo}")
+
+            # Check if the target path exists before listing
+            if not HF_FS.exists(target_path_in_repo):
+                 logging.warning(f"Path {target_path_in_repo} does not exist in HF repo.")
+                 # It might be the user's root, which is fine if empty
+                 if current_path != "": # If not root, maybe flash a message?
+                      flash(f"Папка '{current_path}' не найдена или пуста.", 'info')
+
+            else:
+                 # Use HfFileSystem.ls() which returns detailed info
+                 repo_items = HF_FS.ls(target_path_in_repo, detail=True)
+
+                 for item_info in repo_items:
+                    item_path = item_info['name'] # Full path like 'datasets/REPO_ID/cloud_files/user/folder/file.txt'
+                    item_name = Path(item_path).name # Just 'file.txt' or 'folder'
+
+                    # Skip the placeholder file used for folder creation
+                    if item_name == ".keep":
+                        continue
+
+                    relative_item_path = Path(item_path).relative_to(user_base_fs_path).as_posix() # 'folder/file.txt' or 'folder'
+
+                    item_type = item_info['type'] # 'file' or 'directory'
+
+                    if item_type == 'directory':
+                        folders.append({
+                            'name': item_name,
+                            'path': relative_item_path # Path relative to user's root
+                        })
+                    elif item_type == 'file':
+                        # Try to infer original filename if it follows the pattern name_uuid.ext
+                        original_name = item_name
+                        try:
+                             base, ext = os.path.splitext(item_name)
+                             if len(base) > 9 and base[-9] == '_': # check for _uuidpart
+                                 uuid_part = base[-8:]
+                                 if all(c in '0123456789abcdefABCDEF' for c in uuid_part):
+                                     original_name = base[:-9] + ext
+                        except Exception:
+                             pass # Keep item_name if parsing fails
+
+
+                        file_info = {
+                            'name': item_name, # The actual unique name on HF
+                            'original_name': original_name, # Best guess at original name
+                            'path': relative_item_path, # Path relative to user's root
+                            'hf_api_path': Path(get_user_base_path(username)) / relative_item_path, # Path for API calls from 'cloud_files/...'
+                            'type': get_file_type(original_name), # Guess type from original name
+                            'size': item_info.get('size', 0), # Size in bytes
+                            'url': get_hf_resolve_url(Path(get_user_base_path(username)) / relative_item_path) # Direct URL
+                            # 'upload_date': # HF FS ls doesn't easily provide modification time, skip for now
+                        }
+                        files_list.append(file_info)
 
         except Exception as e:
-            logging.error(f"File upload error for {username}: {e}")
-            flash(f'Ошибка при загрузке файлов: {e}', 'error')
-            # Clean up any partially saved temp files if error occurs mid-loop
-            for temp_path, _ in [(os.path.join(UPLOAD_FOLDER, f"{uuid.uuid4()}_{generate_unique_filename(f.filename)}"), f.filename) for f in files if f]:
-                 if os.path.exists(temp_path):
-                     try: os.remove(temp_path)
-                     except OSError: pass
-
-        return redirect(url_for('dashboard', path=target_path))
-
-
-    # Filter files and folders for the current path
-    current_files = sorted(
-        [f for f in user_data['files'] if f.get('path_prefix') == current_path],
-        key=lambda x: x.get('upload_date', ''), reverse=True
-    )
-    # Folders are represented simply by their paths ending in '/'
-    current_folders = sorted(
-        [f for f in user_data['folders'] if f.startswith(current_path) and f != current_path and f.count('/') == current_path.count('/')]
-    )
-
-    # Build breadcrumbs
-    breadcrumbs = []
-    path_parts = list(filter(None, current_path.split('/')))
-    temp_path = '/'
-    breadcrumbs.append({'name': 'Корень', 'path': '/'})
-    for i, part in enumerate(path_parts):
-        temp_path += part + '/'
-        breadcrumbs.append({'name': part, 'path': temp_path})
+            logging.error(f"Error listing files from HF for user {username} at path '{current_path}': {e}")
+            flash(f"Ошибка при получении списка файлов: {e}", 'error')
+
+    # Sort folders and files alphabetically
+    folders.sort(key=lambda x: x['name'].lower())
+    files_list.sort(key=lambda x: x['original_name'].lower())
+    items = folders + files_list
+
+    # Breadcrumbs
+    breadcrumbs = [{'name': 'Корень', 'path': ''}]
+    if current_path:
+        path_parts = Path(current_path).parts
+        cumulative_path = ''
+        for part in path_parts:
+            cumulative_path = os.path.join(cumulative_path, part).replace('\\', '/')
+            breadcrumbs.append({'name': part, 'path': cumulative_path})
 
 
     html = '''
@@ -794,208 +611,181 @@ def dashboard():
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Панель управления - Zeus Cloud</title>
-    <style>{style}</style>
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css"> <!-- Font Awesome for icons -->
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
+    <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
-        <h1>Zeus Cloud</h1>
-        <div style="display: flex; justify-content: space-between; align-items: center; margin-bottom: 1rem;">
-            <span>Пользователь: <strong>{{ username }}</strong></span>
-            <a href="{{ url_for('logout') }}" class="btn btn-secondary btn-sm" id="logout-btn"><i class="fas fa-sign-out-alt"></i> Выйти</a>
-        </div>
+        <h1><i class="fas fa-cloud"></i> Zeus Cloud</h1>
+        <p style="text-align: center; margin-bottom: 20px;">Пользователь: <strong>{{ username }}</strong></p>
 
         {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
                 {% for category, message in messages %}
-                    <div class="flash flash-{{ category }}">{{ message }}</div>
+                    <div class="flash {{ category }}">{{ message }}</div>
                 {% endfor %}
             {% endif %}
         {% endwith %}
 
-        <div class="card">
-             <h2>Загрузка файлов</h2>
-             <form id="upload-form" method="POST" enctype="multipart/form-data" action="{{ url_for('dashboard') }}">
-                 <input type="hidden" name="current_path" value="{{ current_path }}">
-                 <input type="file" name="files" multiple required>
-                 <button type="submit" class="btn btn-primary" id="upload-btn"><i class="fas fa-upload"></i> Загрузить</button>
-             </form>
-             <div id="progress-container"><div id="progress-bar"></div></div>
+        <div class="breadcrumbs">
+            {% for crumb in breadcrumbs %}
+                {% if loop.last %}
+                    <span>{{ crumb.name }}</span>
+                {% else %}
+                    <a href="{{ url_for('dashboard', current_path=crumb.path) }}">{{ crumb.name }}</a>
+                    <span>/</span>
+                {% endif %}
+            {% endfor %}
         </div>
 
-        <div class="card">
-             <h2>Создать папку</h2>
-             <form method="POST" action="{{ url_for('create_folder') }}" style="display: flex; gap: 1rem;">
-                 <input type="hidden" name="parent_path" value="{{ current_path }}">
-                 <input type="text" name="folder_name" placeholder="Имя новой папки" required pattern="^[a-zA-Z0-9_\\-]+$" title="Только буквы, цифры, _ и -" style="margin: 0; flex-grow: 1;">
-                 <button type="submit" class="btn btn-accent"><i class="fas fa-folder-plus"></i> Создать</button>
+        <h2>Действия</h2>
+         <form id="upload-form" method="POST" enctype="multipart/form-data" style="margin-bottom: 15px;">
+             <input type="hidden" name="action" value="upload">
+             <input type="file" name="files" multiple>
+             <button type="submit" class="btn" id="upload-btn"><i class="fas fa-upload"></i> Загрузить файлы</button>
+         </form>
+         <div id="progress-container"><div id="progress-bar"></div></div>
+
+         <div id="create-folder-section">
+             <form method="POST" style="display: flex; align-items: center; gap: 10px;">
+                 <input type="hidden" name="action" value="create_folder">
+                 <input type="text" name="folder_name" placeholder="Имя новой папки" required style="flex-grow: 1; margin: 0;">
+                 <button type="submit" class="btn btn-small" style="background-color: var(--accent);"><i class="fas fa-folder-plus"></i> Создать папку</button>
              </form>
-        </div>
-
+         </div>
 
-        <div class="card">
-            <h2>Содержимое: {{ current_path }}</h2>
-            <div class="breadcrumb">
-                {% for crumb in breadcrumbs %}
-                    {% if not loop.last %}
-                        <a href="{{ url_for('dashboard', path=crumb.path) }}">{{ crumb.name }}</a>
-                        <span>/</span>
-                    {% else %}
-                        <strong>{{ crumb.name }}</strong>
-                    {% endif %}
-                {% endfor %}
-            </div>
-
-            <div class="file-grid">
-                {# Display Folders #}
-                {% for folder_path in current_folders %}
-                    {% set folder_name = folder_path.strip('/').split('/')[-1] %}
-                    <a href="{{ url_for('dashboard', path=folder_path) }}" class="grid-item folder-item" style="text-decoration: none; color: inherit;">
-                        <div class="grid-item-icon">{folder_icon | safe}</div>
-                        <div class="grid-item-name" title="{{ folder_name }}">{{ folder_name }}</div>
-                        <div class="grid-item-actions">
-                             <form method="POST" action="{{ url_for('delete_folder', folder_path=folder_path) }}" onsubmit="return confirm('Удалить папку \'{{ folder_name }}\' и ВСЕ её содержимое? Это действие НЕОБРАТИМО!');" style="display: inline;">
-                                 <button type="submit" class="btn btn-danger btn-sm"><i class="fas fa-trash-alt"></i></button>
-                             </form>
-                        </div>
-                    </a>
-                {% endfor %}
 
-                {# Display Files #}
-                {% for file in current_files %}
-                    <div class="grid-item file-item" data-filename="{{ file.original_filename }}" data-filepath="{{ file.hf_path }}" data-filetype="{{ file.type }}">
-                        <div class="grid-item-icon">
-                            {% if file.type == 'image' %}
-                                <img src="{{ url_for('file_proxy', file_path=file.hf_path) }}" alt="{{ file.original_filename }}" loading="lazy" onerror="this.src='data:image/svg+xml;charset=UTF-8,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20viewBox%3D%220%200%2024%2024%22%20fill%3D%22currentColor%22%20class%3D%22w-16%20h-16%20mx-auto%20text-gray-400%22%3E%3Cpath%20fill-rule%3D%22evenodd%22%20d%3D%22M1.5%206a2.25%202.25%200%200%201%202.25-2.25h16.5A2.25%202.25%200%200%201%2022.5%206v12a2.25%202.25%200%200%201-2.25%202.25H3.75A2.25%202.25%200%200%201%201.5%2018V6ZM3%2016.06l4.47-4.47a.75.75%200%200%201%201.06%200l3.001%203.002%2C5.223-5.223a.75.75%200%200%201%201.06%200l.94.94V6a.75.75%200%200%200-.75-.75H3.75a.75.75%200%200%200-.75.75v10.06ZM12%209.75a1.5%201.5%200%201%201%203%200%201.5%201.5%200%200%201-3%200Z%22%20clip-rule%3D%22evenodd%22%20%2F%3E%3C%2Fsvg%3E'; this.onerror=null;" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'image')">
-                            {% elif file.type == 'video' %}
-                                <video preload="metadata" muted loading="lazy" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'video')" style="width: 100%; height: 120px; object-fit: cover; background: #000;">
-                                    <source src="{{ url_for('file_proxy', file_path=file.hf_path) }}#t=0.1" type="{{ mimetypes.guess_type(file.original_filename)[0] or 'video/mp4' }}"> Your browser does not support the video tag.
+        <h2>Содержимое папки: {{ current_path or 'Корень' }}</h2>
+        <p style="text-align: center; margin-top: 10px; color: var(--accent);">Ваши файлы под надежной защитой квантовой криптографии</p>
+        <div class="grid">
+            {% for item in items %}
+                {% if item.type == 'directory' %}
+                    <div class="item folder">
+                        <a href="{{ url_for('dashboard', current_path=item.path) }}">
+                           <div class="item-preview folder-icon"><i class="fas fa-folder"></i></div>
+                           <p>{{ item.name }}</p>
+                        </a>
+                        <form method="POST" action="{{ url_for('delete_item', item_path=item.path) }}" onsubmit="return confirm('Вы уверены, что хотите удалить папку {{ item.name }} и все ее содержимое?');" style="margin-top: 5px;">
+                             <button type="submit" class="btn delete-btn btn-small"><i class="fas fa-trash"></i> Удалить</button>
+                        </form>
+                    </div>
+                {% else %}
+                    <div class="item">
+                        <div class="item-preview" onclick="openModal('{{ item.url }}', '{{ item.type }}', '{{ item.original_name }}')">
+                            {% if item.type == 'image' %}
+                                <img src="{{ item.url }}" alt="{{ item.original_name }}" loading="lazy">
+                            {% elif item.type == 'video' %}
+                                <video preload="metadata" muted loading="lazy">
+                                    <source src="{{ item.url }}" type="video/mp4"> <!-- Adjust type based on actual video format if known -->
+                                    <i class="fas fa-film file-icon"></i>
                                 </video>
-                             {% elif file.type == 'pdf' %}
-                                 <div class="file-placeholder-icon" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'pdf')">
-                                     <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path d="M11.25 4.533A9.708 9.708 0 0 0 6 3a9.708 9.708 0 0 0-5.25 1.533v13.934A9.708 9.708 0 0 0 6 21a9.708 9.708 0 0 0 5.25-1.533V4.533Zm1.5 0v13.934A9.708 9.708 0 0 0 18 21a9.708 9.708 0 0 0 5.25-1.533V4.533A9.708 9.708 0 0 0 18 3a9.708 9.708 0 0 0-5.25 1.533Z"></path></svg>
-                                 </div>
-                             {% elif file.type == 'text' %}
-                                 <div class="file-placeholder-icon" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'text')">
-                                     <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path fill-rule="evenodd" d="M4.75 2.25A2.75 2.75 0 0 0 2 5v14a2.75 2.75 0 0 0 2.75 2.75h14.5A2.75 2.75 0 0 0 22 19V5a2.75 2.75 0 0 0-2.75-2.75H4.75ZM7 7.75h10a.75.75 0 0 1 0 1.5H7a.75.75 0 0 1 0-1.5Zm0 3h10a.75.75 0 0 1 0 1.5H7a.75.75 0 0 1 0-1.5Zm7 3H7a.75.75 0 0 0 0 1.5h7a.75.75 0 0 0 0-1.5Z" clip-rule="evenodd"></path></svg>
-                                 </div>
+                            {% elif item.type == 'pdf' %}
+                                <i class="fas fa-file-pdf file-icon" style="color: #dc3545;"></i>
+                            {% elif item.type == 'text' %}
+                                <i class="fas fa-file-alt file-icon" style="color: #6c757d;"></i>
                             {% else %}
-                                <div class="file-placeholder-icon">{file_icon | safe}</div>
+                                <i class="fas fa-file file-icon"></i>
                             {% endif %}
                         </div>
-                        <div class="grid-item-name" title="{{ file.original_filename }} ({{ file.upload_date }})">{{ file.original_filename }}</div>
-                        <div class="grid-item-actions">
-                            <a href="{{ url_for('download_file', file_path=file.hf_path) }}" class="btn btn-secondary btn-sm" title="Скачать"><i class="fas fa-download"></i></a>
-                            <form method="POST" action="{{ url_for('delete_file', file_path=file.hf_path) }}" onsubmit="return confirm('Вы уверены, что хотите удалить файл \'{{ file.original_filename }}\'?');" style="display: inline;">
-                                 <input type="hidden" name="current_path" value="{{ current_path }}">
-                                 <button type="submit" class="btn btn-danger btn-sm" title="Удалить"><i class="fas fa-trash-alt"></i></button>
-                            </form>
-                        </div>
+                        <p title="{{ item.original_name }} ({{ item.name }})">{{ item.original_name }}</p>
+                        <p style="font-size: 0.8em; color: #666;">{{ (item.size / 1024 / 1024) | round(2) }} MB</p>
+                        <a href="{{ url_for('download_file', hf_api_path=item.hf_api_path, download_name=item.original_name) }}" class="btn download-btn btn-small" download><i class="fas fa-download"></i> Скачать</a>
+                        <form method="POST" action="{{ url_for('delete_item', item_path=item.path) }}" onsubmit="return confirm('Вы уверены, что хотите удалить файл {{ item.original_name }}?');" style="display: inline-block; margin-left: 5px;">
+                            <button type="submit" class="btn delete-btn btn-small"><i class="fas fa-trash"></i> Удалить</button>
+                        </form>
                     </div>
-                {% endfor %}
-            </div>
-
-            {% if not current_files and not current_folders %}
-                <p style="text-align: center; margin-top: 2rem; color: #64748b;">Эта папка пуста.</p>
-            {% endif %}
+                {% endif %}
+            {% else %}
+                 <p>Эта папка пуста.</p>
+            {% endfor %}
         </div>
 
-         <div class="card">
-              <h2>Добавить на главный экран</h2>
-               <p style="font-size: 0.9rem; color: var(--text-light);">Для быстрого доступа к Zeus Cloud, вы можете добавить это приложение на главный э��ран вашего телефона:</p>
-               <div style="display: flex; gap: 2rem; margin-top: 1rem; flex-wrap: wrap;">
-                   <div style="flex: 1; min-width: 200px;">
-                       <h3 style="font-size: 1rem; margin-bottom: 0.5rem;">Android (Chrome):</h3>
-                       <ol style="font-size: 0.9rem; padding-left: 1.2rem;">
-                           <li>Нажмите меню <i class="fas fa-ellipsis-v"></i> (три точки).</li>
-                           <li>Выберите <strong>"Установить приложение"</strong> или <strong>"Добавить на главный экран"</strong>.</li>
-                           <li>Подтвердите добавление.</li>
-                       </ol>
-                   </div>
-                   <div style="flex: 1; min-width: 200px;">
-                       <h3 style="font-size: 1rem; margin-bottom: 0.5rem;">iOS (Safari):</h3>
-                       <ol style="font-size: 0.9rem; padding-left: 1.2rem;">
-                           <li>Нажмите кнопку <strong>"Поделиться"</strong> <i class="fas fa-share-square"></i>.</li>
-                           <li>Прокрутите вниз и выберите <strong>"На экран «Домой»"</strong>.</li>
-                           <li>Нажмите <strong>"Добавить"</strong>.</li>
-                       </ol>
-                   </div>
-               </div>
-         </div>
+        <h2 style="margin-top: 30px;">Добавить на главный экран</h2>
+         <p>Для быстрого доступа к Zeus Cloud, вы можете добавить это приложение на главный экран вашего телефона (инструкции для Chrome/Safari).</p>
+         <!-- PWA instructions omitted for brevity, but could be added -->
 
+        <a href="{{ url_for('logout') }}" class="btn" style="margin-top: 30px; background-color: var(--delete-color);" id="logout-btn"><i class="fas fa-sign-out-alt"></i> Выйти</a>
     </div>
 
-    <div id="mediaModal" class="modal">
+    <div class="modal" id="mediaModal">
         <span class="modal-close" onclick="closeModal()">×</span>
-        <div class="modal-content" id="modalContent"></div>
+        <div class="modal-content" id="modalContentContainer">
+             <div id="modalContent"></div>
+        </div>
     </div>
 
     <script>
-        const modal = document.getElementById('mediaModal');
-        const modalContent = document.getElementById('modalContent');
-
-        function openModal(src, type) {
+        function openModal(src, type, name) {
+            const modal = document.getElementById('mediaModal');
+            const modalContent = document.getElementById('modalContent');
             modalContent.innerHTML = ''; // Clear previous content
+
+            // Add auth token to URL if needed (especially for private repos)
+            const authToken = "{{ HF_TOKEN_READ if HF_TOKEN_READ else '' }}";
+            const url = new URL(src);
+            if (authToken) {
+                // Avoid adding token if already present (less likely with resolve URLs)
+                // url.searchParams.set('token', authToken); // This might not work for resolve URLs, direct fetch might need Authorization header
+            }
+            const finalSrc = url.toString() + '?download=true'; // Force download behavior for previews
+
+            // Use Authorization header for fetch-based previews if needed
+            const headers = {};
+            if (authToken) {
+                headers['Authorization'] = `Bearer ${authToken}`;
+            }
+
+
             if (type === 'image') {
-                const img = document.createElement('img');
-                img.src = src;
-                img.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить изображение.</p>';
-                modalContent.appendChild(img);
+                modalContent.innerHTML = `<img src="${finalSrc}" alt="${name}">`;
             } else if (type === 'video') {
-                const video = document.createElement('video');
-                video.src = src;
-                video.controls = true;
-                video.autoplay = true;
-                video.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить видео.</p>';
-                modalContent.appendChild(video);
+                modalContent.innerHTML = `<video controls autoplay style="max-width: 100%; max-height: 80vh;"><source src="${finalSrc}" type="video/mp4"></video>`; // Adjust type if needed
             } else if (type === 'pdf') {
-                const iframe = document.createElement('iframe');
-                iframe.src = src;
-                iframe.style.border = 'none';
-                iframe.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить PDF. Попробуйте <a href="'+src+'" target="_blank" style="color: #00ddeb;">скачать его</a>.</p>';
-                modalContent.appendChild(iframe);
+                modalContent.innerHTML = `<iframe src="${finalSrc}" title="${name}"></iframe>`;
             } else if (type === 'text') {
-                modalContent.innerHTML = '<p style="color: white; padding: 20px;">Загрузка текста...</p>';
-                fetch(src)
+                // Fetch text content and display in a pre tag for better control
+                fetch(finalSrc, { headers: headers })
                     .then(response => {
-                        if (!response.ok) { throw new Error(`HTTP error! status: ${response.status}`); }
+                        if (!response.ok) throw new Error('Network response was not ok');
                         return response.text();
                     })
                     .then(text => {
-                        const pre = document.createElement('pre');
-                        pre.textContent = text;
-                        modalContent.innerHTML = ''; // Clear loading message
-                        modalContent.appendChild(pre);
+                        modalContent.innerHTML = `<pre style="white-space: pre-wrap; word-wrap: break-word; max-height: 80vh; overflow-y: auto; background: #f8f8f8; padding: 10px; border-radius: 5px; color: #333;">${escapeHtml(text)}</pre>`;
                     })
                     .catch(error => {
-                        console.error('Error fetching text:', error);
-                        modalContent.innerHTML = '<p style="color: white; padding: 20px;">Не удалось загрузить текстовый файл.</p>';
-                    });
+                         console.error('Error fetching text content:', error);
+                         modalContent.innerHTML = '<p>Не удалось загрузить текстовое содержимое.</p>';
+                     });
+
+            } else {
+                modalContent.innerHTML = `<p>Предварительный просмотр для типа файла '${type}' не поддерживается. <a href="${finalSrc}" target="_blank">Скачать ${name}</a></p>`;
             }
             modal.style.display = 'flex';
         }
 
         function closeModal() {
+            const modal = document.getElementById('mediaModal');
             modal.style.display = 'none';
             const video = modal.querySelector('video');
             if (video) { video.pause(); }
              const iframe = modal.querySelector('iframe');
-             if (iframe) { iframe.src = 'about:blank'; } // Stop loading pdf/etc.
-            modalContent.innerHTML = ''; // Clear content
+             if (iframe) { iframe.src = 'about:blank'; } // Stop loading PDF etc.
+             document.getElementById('modalContent').innerHTML = ''; // Clear content
         }
+        
+        // Close modal if clicking outside the content area
+        document.getElementById('mediaModal').addEventListener('click', function(event) {
+             if (event.target === this) {
+                  closeModal();
+              }
+         });
+         
+         function escapeHtml(text) {
+             var map = { '&': '&', '<': '<', '>': '>', '"': '"', "'": ''' };
+             return text.replace(/[&<>"']/g, function(m) { return map[m]; });
+         }
 
-        // Close modal on background click
-        window.onclick = function(event) {
-            if (event.target === modal) {
-                closeModal();
-            }
-        }
-        // Close modal on Escape key
-         document.addEventListener('keydown', function(event) {
-            if (event.key === "Escape") {
-                closeModal();
-            }
-        });
 
         // Upload Progress
         const form = document.getElementById('upload-form');
@@ -1004,452 +794,254 @@ def dashboard():
         const uploadBtn = document.getElementById('upload-btn');
 
         form.addEventListener('submit', function(e) {
+            // Basic check if files are selected
             const files = form.querySelector('input[type="file"]').files;
-            if (files.length === 0) {
-                 alert('Пожалуйста, выберите файлы для загрузки.');
-                 e.preventDefault();
-                 return;
-            }
+             if (files.length === 0) {
+                 // Allow form submission for 0 files (maybe show flash msg), but don't show progress bar.
+                 // Or prevent submission entirely:
+                 // alert('Пожалуйста, выберите файлы для загрузки.');
+                 // e.preventDefault();
+                 // return;
+                 return; // Don't show progress if no files
+             }
+             
+             // Limit check (already done server-side, but good for UX)
              if (files.length > 20) {
-                alert('Максимум 20 файлов за раз!');
-                 e.preventDefault();
-                return;
-            }
+                  alert('Максимум 20 файлов за раз!');
+                  e.preventDefault();
+                  return;
+             }
+
 
-            // Use XMLHttpRequest for progress tracking (fetch doesn't support upload progress easily)
-            e.preventDefault();
-            const formData = new FormData(form);
             progressContainer.style.display = 'block';
             progressBar.style.width = '0%';
-            progressBar.textContent = '0%';
             uploadBtn.disabled = true;
             uploadBtn.innerHTML = '<i class="fas fa-spinner fa-spin"></i> Загрузка...';
 
+
+            // We can't easily track true progress with standard form submission.
+            // For real progress, use XMLHttpRequest or Fetch API with progress events.
+            // This basic implementation just shows the bar, it won't update accurately without XHR.
+            // Simulate progress for UX or rely on server response time.
+            // Let's remove the progress bar logic if we don't use XHR.
+            // Keeping the display:block/none and button disable for visual feedback.
+
+            // If implementing XHR:
+            /*
+            e.preventDefault(); // Prevent default form submission
+            const formData = new FormData(form);
             const xhr = new XMLHttpRequest();
-            xhr.open('POST', form.action, true); // Use form's action URL
+            xhr.open('POST', form.action, true);
 
             xhr.upload.onprogress = function(event) {
                 if (event.lengthComputable) {
                     const percent = Math.round((event.loaded / event.total) * 100);
                     progressBar.style.width = percent + '%';
-                    progressBar.textContent = percent + '%';
                 }
             };
 
             xhr.onload = function() {
                 uploadBtn.disabled = false;
-                uploadBtn.innerHTML = '<i class="fas fa-upload"></i> Загрузить';
+                uploadBtn.innerHTML = '<i class="fas fa-upload"></i> Загрузить файлы';
                 progressContainer.style.display = 'none';
                 progressBar.style.width = '0%';
-                 progressBar.textContent = '0%';
-
                 if (xhr.status >= 200 && xhr.status < 300) {
-                    // Success - Reload the page to show new files and flash messages
-                    // We parse the response to potentially get flash messages, but reload is simpler
-                    window.location.reload();
+                    // Success - redirect or update UI based on response
+                    // Since server redirects on success, we might not need this,
+                    // but could parse a JSON response instead.
+                    window.location.reload(); // Simple reload for now
                 } else {
-                    // Error - Display a generic error or parse response if server sends JSON error
-                    try {
-                         const errorData = JSON.parse(xhr.responseText);
-                         alert('Ошибка загрузки: ' + (errorData.message || 'Неизвестная ошибка'));
-                    } catch (parseError) {
-                        alert('Ошибка загрузки! Код: ' + xhr.status);
-                    }
+                    // Handle error - maybe show error message from response
+                     alert('Ошибка загрузки! Статус: ' + xhr.status);
                  }
             };
 
-            xhr.onerror = function() {
-                alert('Ошибка сети при загрузке!');
-                progressContainer.style.display = 'none';
-                progressBar.style.width = '0%';
-                 progressBar.textContent = '0%';
-                uploadBtn.disabled = false;
-                uploadBtn.innerHTML = '<i class="fas fa-upload"></i> Загрузить';
-            };
+             xhr.onerror = function() {
+                 alert('Ошибка сети при загрузке!');
+                 uploadBtn.disabled = false;
+                 uploadBtn.innerHTML = '<i class="fas fa-upload"></i> Загрузить файлы';
+                 progressContainer.style.display = 'none';
+                 progressBar.style.width = '0%';
+             };
 
             xhr.send(formData);
+            */
         });
 
+        // Logout - Clear potential localStorage item
         document.getElementById('logout-btn').addEventListener('click', function(e) {
-            localStorage.removeItem('zeusCredentials');
-            // Let the link proceed naturally to /logout
+            localStorage.removeItem('zeusCredentials'); // Clear saved creds if they exist
+            // The link will then navigate to /logout handled by Flask
         });
     </script>
 </body>
 </html>
 '''
-    hf_repo_url_base = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/"
-    return render_template_string(
-        html,
-        style=BASE_STYLE,
-        username=username,
-        current_path=current_path,
-        current_files=current_files,
-        current_folders=current_folders,
-        breadcrumbs=breadcrumbs,
-        repo_id=REPO_ID,
-        hf_repo_url_base=hf_repo_url_base,
-        folder_icon=get_folder_icon(),
-        file_icon=get_file_icon('other'), # Pass a generic icon
-        mimetypes=mimetypes # Pass mimetypes module to template
-    )
-
-@app.route('/create_folder', methods=['POST'])
-def create_folder():
-    if 'username' not in session:
-        return redirect(url_for('login'))
-
-    username = session['username']
-    parent_path = request.form.get('parent_path', '/')
-    folder_name = request.form.get('folder_name', '').strip()
+    # Pass necessary variables to the template
+    return render_template_string(html,
+                                  username=username,
+                                  items=items, # Combined list of folders and files
+                                  current_path=current_path,
+                                  breadcrumbs=breadcrumbs,
+                                  HF_TOKEN_READ=HF_TOKEN_READ) # Pass token for JS checks if needed
 
-    if not folder_name or not secure_filename(folder_name) == folder_name: # Basic validation
-        flash('Недопустимое имя папки. Используйте буквы, цифры, _ или -.', 'error')
-        return redirect(url_for('dashboard', path=parent_path))
 
-    if not parent_path.startswith('/'): parent_path = '/' + parent_path
-    if not parent_path.endswith('/'): parent_path += '/'
-
-    new_folder_path = os.path.join(parent_path, folder_name).replace('\\', '/') + '/' # Ensure unix paths and trailing slash
-
-    data = load_data()
-    user_data = data['users'][username]
-    user_data.setdefault('folders', [])
-
-    if new_folder_path in user_data['folders']:
-        flash(f'Папка "{folder_name}" уже существует в {parent_path}.', 'warning')
-    else:
-        user_data['folders'].append(new_folder_path)
-        try:
-            save_data(data)
-            flash(f'Папка "{folder_name}" успешно создана.', 'success')
-        except Exception as e:
-             flash('Ошибка сохранения данных при создании папки.', 'error')
-             logging.error(f"Folder creation save error: {e}")
-
-    return redirect(url_for('dashboard', path=parent_path)) # Redirect back to parent
-
-@app.route('/delete_folder', methods=['POST'])
-def delete_folder():
+@app.route('/download/<path:hf_api_path>/<download_name>')
+def download_file(hf_api_path, download_name):
     if 'username' not in session:
         flash('Пожалуйста, войдите в систему!', 'info')
         return redirect(url_for('login'))
 
     username = session['username']
-    folder_path_to_delete = request.form.get('folder_path')
-
-    if not folder_path_to_delete or not folder_path_to_delete.startswith('/') or not folder_path_to_delete.endswith('/'):
-        flash('Некорректный путь к папке.', 'error')
-        return redirect(request.referrer or url_for('dashboard'))
-
-    data = load_data()
-    user_data = data['users'][username]
-    user_data.setdefault('files', [])
-    user_data.setdefault('folders', [])
-
-    if folder_path_to_delete not in user_data['folders'] and folder_path_to_delete != '/':
-         # Check if it's an implicitly created folder (contains files but not in 'folders' list)
-         has_files = any(f.get('path_prefix', '').startswith(folder_path_to_delete) for f in user_data['files'])
-         if not has_files:
-             flash('Папка не найдена или уже удалена.', 'warning')
-             # Determine redirect path (parent folder)
-             parent_path = '/'.join(folder_path_to_delete.strip('/').split('/')[:-1])
-             parent_path = '/' + parent_path + '/' if parent_path else '/'
-             return redirect(url_for('dashboard', path=parent_path))
-         # If it has files, proceed with deletion logic even if not in folders list
-
-    # Find all files and subfolders within the target folder
-    files_in_folder = [f for f in user_data['files'] if f.get('path_prefix', '').startswith(folder_path_to_delete)]
-    subfolders_in_folder = [f for f in user_data['folders'] if f.startswith(folder_path_to_delete) and f != folder_path_to_delete]
-
-    hf_paths_to_delete = [f['hf_path'] for f in files_in_folder]
-    # Note: We don't explicitly delete folders on HF Hub, just the files within.
-
-    try:
-        api = HfApi(token=HF_TOKEN_WRITE)
-        if hf_paths_to_delete:
-            # HF API might have limitations on bulk delete, delete one by one or batch if possible
-            logging.info(f"Attempting to delete {len(hf_paths_to_delete)} files in folder {folder_path_to_delete} for {username}")
-            deleted_count = 0
-            for hf_path in hf_paths_to_delete:
-                try:
-                    api.delete_file(path_in_repo=hf_path, repo_id=REPO_ID, repo_type="dataset")
-                    deleted_count += 1
-                except Exception as file_delete_error:
-                    # Log error but continue trying to delete others
-                    logging.warning(f"Failed to delete file {hf_path} during folder delete: {file_delete_error}")
-            logging.info(f"Successfully deleted {deleted_count} files from HF.")
-
-
-        # Remove files and folders from user data
-        user_data['files'] = [f for f in user_data['files'] if not f.get('path_prefix', '').startswith(folder_path_to_delete)]
-        user_data['folders'] = [f for f in user_data['folders'] if not f.startswith(folder_path_to_delete)] # Removes target and all subfolders
-
-        save_data(data)
-        flash(f'Папка "{folder_path_to_delete.strip("/").split("/")[-1]}" и её содержимое удалены.', 'success')
-
-    except Exception as e:
-        logging.error(f"Error deleting folder {folder_path_to_delete} for {username}: {e}")
-        flash(f'Ошибка при удалении папки: {e}', 'error')
-
-    # Determine redirect path (parent folder)
-    parent_path = '/'.join(folder_path_to_delete.strip('/').split('/')[:-1])
-    parent_path = '/' + parent_path + '/' if parent_path else '/'
-    return redirect(url_for('dashboard', path=parent_path))
-
-
-# Proxy route for serving files with auth token if needed
-@app.route('/file_proxy/<path:file_path>')
-def file_proxy(file_path):
-    if 'username' not in session:
-         # Allow access from admin panel view even if user isn't logged in
-         # A better check would involve admin session/role
+    # Basic check: does the path start with the user's expected base directory?
+    # This is a weak security check, proper ACLs would be better.
+    expected_base = get_user_base_path(username)
+    if not str(hf_api_path).startswith(expected_base):
+         # Check if it's an admin trying to download (e.g., from admin panel)
+         # A more robust way would be checking an admin session flag.
          is_admin_referrer = request.referrer and 'admhosto' in request.referrer
          if not is_admin_referrer:
-             return "Unauthorized", 401
-
-    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}"
-    headers = {}
-    if HF_TOKEN_READ:
-        headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
-
-    try:
-        response = requests.get(file_url, headers=headers, stream=True, timeout=30) # Add timeout
-        response.raise_for_status()
-
-        # Determine content type
-        content_type = response.headers.get('Content-Type', mimetypes.guess_type(file_path)[0] or 'application/octet-stream')
-
-        # Create a Flask response to stream the content
-        def generate():
-            for chunk in response.iter_content(chunk_size=8192):
-                yield chunk
-
-        # For PDF, force inline display if possible
-        headers_out = {'Content-Type': content_type}
-        if content_type == 'application/pdf':
-             # Extract filename for Content-Disposition
-             filename = os.path.basename(file_path)
-             headers_out['Content-Disposition'] = f'inline; filename="{filename}"'
-
-        # For video/audio, enable range requests (partial content)
-        if content_type.startswith('video/') or content_type.startswith('audio/'):
-             headers_out['Accept-Ranges'] = 'bytes'
-             # Basic handling for Range requests (can be improved)
-             range_header = request.headers.get('Range', None)
-             if range_header:
-                 try:
-                     size = int(response.headers.get('Content-Length', 0))
-                     byte1, byte2 = 0, None
-                     m = re.match(r'bytes=(\d+)-(\d*)', range_header)
-                     if m:
-                         byte1 = int(m.group(1))
-                         if m.group(2):
-                             byte2 = int(m.group(2))
-                     if size > 0 and byte1 < size:
-                          # Adjust byte2 if necessary
-                          if byte2 is None or byte2 >= size:
-                              byte2 = size - 1
-                          length = byte2 - byte1 + 1
-                          # Re-fetch the specific range - more complex with requests stream
-                          # Simpler approach: return 206 but stream the whole thing (less efficient but works for seeking)
-                          # A proper implementation requires seeking in the stream or making a new ranged request.
-                          # For now, let's return 206 status but might not perfectly handle all range scenarios.
-                          status_code = 206
-                          headers_out['Content-Range'] = f'bytes {byte1}-{byte2}/{size}'
-                          headers_out['Content-Length'] = str(length)
-                          # This requires adjusting the generator to yield only the requested range.
-                          # Simplified: Return 200 OK and let browser handle seeking if possible.
-                          status_code = 200 # Revert to 200 for simplicity here
-                          del headers_out['Content-Range'] # Remove incorrect header if sending full content
-                          del headers_out['Content-Length'] # Let Flask handle length for full stream
-                 except (ValueError, IndexError, TypeError, AttributeError) as range_error:
-                      logging.warning(f"Range header parsing error: {range_error}")
-                      status_code = 200 # Fallback to 200
-             else:
-                  status_code = 200
-        else:
-             status_code = 200
-
-
-        return app.response_class(generate(), headers=headers_out, mimetype=content_type, status=status_code)
-
-    except requests.exceptions.RequestException as e:
-        logging.error(f"Error proxying file {file_path}: {e}")
-        # Return a placeholder or error image/message
-        return f"Error fetching file: {e}", 502 # Bad Gateway
-    except Exception as e:
-        logging.error(f"Unexpected error in file proxy for {file_path}: {e}")
-        return "Internal server error", 500
-
+             flash('Ошибка: Несанкционированный доступ к файлу.', 'error')
+             logging.warning(f"User {username} attempted unauthorized download of {hf_api_path}")
+             return redirect(url_for('dashboard'))
+         # If admin referrer, proceed (assuming admin has rights)
+         else:
+             logging.info(f"Admin initiated download of {hf_api_path} (original user path)")
 
-@app.route('/download/<path:file_path>')
-def download_file(file_path):
-    is_admin_referrer = request.referrer and 'admhosto' in request.referrer
-    if 'username' not in session and not is_admin_referrer:
-        flash('Пожалуйста, войдите в систему!', 'info')
-        return redirect(url_for('login'))
 
-    # Determine original filename for download prompt
-    # This requires looking up the file_path in the database
-    data = load_data()
-    original_filename = os.path.basename(file_path) # Fallback
-    found = False
-    requesting_user = session.get('username')
-
-    user_to_check = None
-    if is_admin_referrer:
-         # Try to extract username from path for admin downloads
-         try:
-             parts = file_path.split('/')
-             if len(parts) > 2 and parts[0] == 'cloud_files':
-                  user_to_check = parts[1]
-         except IndexError:
-             pass
-    elif requesting_user:
-        user_to_check = requesting_user
-
-
-    if user_to_check and user_to_check in data['users']:
-         user_files = data['users'][user_to_check].get('files', [])
-         for f in user_files:
-             if f.get('hf_path') == file_path:
-                 original_filename = f.get('original_filename', original_filename)
-                 # Basic permission check: User must own the file OR it's an admin downloading
-                 if requesting_user == user_to_check or is_admin_referrer:
-                      found = True
-                      break
-                 else:
-                     flash('У вас нет доступа к этому файлу!', 'error')
-                     return redirect(url_for('dashboard'))
-
-    if not found and not is_admin_referrer: # Allow admin download even if file metadata missing
-         flash('Файл не найден или у вас нет доступа.', 'error')
-         # Redirect back to appropriate dashboard/admin page
-         if is_admin_referrer and user_to_check:
-              return redirect(url_for('admin_user_files', username=user_to_check))
-         elif requesting_user:
-              return redirect(url_for('dashboard'))
-         else:
-              return redirect(url_for('login'))
+    if not HF_TOKEN_READ:
+         flash('Ошибка: Скачивание невозможно, токен чтения HF не настроен.', 'error')
+         return redirect(request.referrer or url_for('dashboard'))
 
 
-    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}?download=true"
-    headers = {}
-    if HF_TOKEN_READ:
-        headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
+    file_url = get_hf_resolve_url(hf_api_path) + "?download=true"
 
     try:
-        response = requests.get(file_url, headers=headers, stream=True, timeout=60)
+        headers = {}
+        if HF_TOKEN_READ:
+            headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
+
+        response = requests.get(file_url, headers=headers, stream=True)
         response.raise_for_status()
 
-        file_content = BytesIO(response.content)
+        # Stream the download
         return send_file(
-            file_content,
+            BytesIO(response.content), # Read content into memory (consider streaming for large files)
             as_attachment=True,
-            download_name=original_filename, # Use original name for download prompt
-            mimetype=response.headers.get('Content-Type', 'application/octet-stream')
+            download_name=download_name, # Use the original filename for the user
+            mimetype='application/octet-stream' # Generic mimetype
         )
+
     except requests.exceptions.RequestException as e:
-        logging.error(f"Error downloading file from HF ({file_path}): {e}")
-        flash(f'Ошибка скачивания файла: {e}', 'error')
+        logging.error(f"Error downloading file {hf_api_path} from HF: {e}")
+        status_code = e.response.status_code if e.response is not None else 'N/A'
+        if status_code == 404:
+            flash(f'Ошибка: Файл "{download_name}" не найден на сервере.', 'error')
+        else:
+             flash(f'Ошибка скачивания файла "{download_name}" (код: {status_code}).', 'error')
+        # Redirect back to where they came from (dashboard or admin page)
+        return redirect(request.referrer or url_for('dashboard'))
     except Exception as e:
-        logging.error(f"Unexpected error during download ({file_path}): {e}")
+        logging.error(f"Unexpected error during download of {hf_api_path}: {e}")
         flash('Произошла непредвиденная ошибка при скачивании файла.', 'error')
-
-    # Redirect back if download fails
-    referer = request.referrer
-    if referer:
-        return redirect(referer)
-    elif is_admin_referrer and user_to_check:
-         return redirect(url_for('admin_user_files', username=user_to_check))
-    elif requesting_user:
-         return redirect(url_for('dashboard'))
-    else:
-         return redirect(url_for('login'))
+        return redirect(request.referrer or url_for('dashboard'))
 
 
-@app.route('/delete_file/<path:file_path>', methods=['POST'])
-def delete_file(file_path):
+@app.route('/delete/<path:item_path>', methods=['POST'])
+def delete_item(item_path):
     if 'username' not in session:
         flash('Пожалуйста, войдите в систему!', 'info')
         return redirect(url_for('login'))
 
     username = session['username']
-    current_path_redirect = request.form.get('current_path', '/') # Get path for redirect
+    # Path received is relative to user's root, e.g., "folder/file.txt" or "folder"
 
-    data = load_data()
-    if username not in data['users']:
-        session.pop('username', None)
-        flash('Пользователь не найден!', 'error')
-        return redirect(url_for('login'))
-
-    user_files = data['users'][username].get('files', [])
-    original_file_list = list(user_files) # Copy for modification
-    file_to_delete_index = -1
-
-    for i, file in enumerate(original_file_list):
-        if file.get('hf_path') == file_path:
-            file_to_delete_index = i
-            break
-
-    if file_to_delete_index == -1:
-        flash('Файл не найден в вашей базе данных!', 'warning')
-        # Attempt deletion from HF anyway in case of desync? Or just redirect?
-        # Let's try deleting from HF anyway
-        # return redirect(url_for('dashboard', path=current_path_redirect))
+    if not HF_TOKEN_WRITE:
+         flash('Ошибка: Удаление невозможно, токен записи HF не настроен.', 'error')
+         # Determine the parent path to redirect back correctly
+         parent_path = str(Path(item_path).parent)
+         if parent_path == '.': parent_path = ''
+         return redirect(url_for('dashboard', current_path=parent_path))
+
+    # Construct the full path for HF API/FS operations
+    full_hf_api_path = str(Path(get_user_base_path(username)) / item_path).replace('\\','/') # e.g., cloud_files/user/folder/file.txt
+    item_name = Path(item_path).name
+    is_folder = False
+    full_fs_path = f"datasets/{REPO_ID}/{full_hf_api_path}" # Path for HF_FS
 
     try:
-        api = HfApi(token=HF_TOKEN_WRITE)
-        api.delete_file(
-            path_in_repo=file_path,
-            repo_id=REPO_ID,
-            repo_type="dataset",
-            commit_message=f"User delete: {file_path} for {username}"
-        )
-        logging.info(f"Successfully deleted file {file_path} from HF for user {username}")
-
-        # Remove from data only if found
-        if file_to_delete_index != -1:
-            del original_file_list[file_to_delete_index]
-            data['users'][username]['files'] = original_file_list
-            save_data(data)
-            flash('Файл успешно удален!', 'success')
+        if HF_FS.exists(full_fs_path):
+            is_folder = HF_FS.isdir(full_fs_path)
         else:
-            flash('Файл удален с хранилища (не найден в базе).', 'info')
+            # Item might have been deleted already, or path is wrong
+            flash(f'Элемент "{item_name}" не найден для удаления.', 'warning')
+            parent_path = str(Path(item_path).parent)
+            if parent_path == '.': parent_path = ''
+            return redirect(url_for('dashboard', current_path=parent_path))
 
+        api = HfApi()
+        if is_folder:
+            # Delete folder recursively
+            api.delete_folder(
+                folder_path=full_hf_api_path,
+                repo_id=REPO_ID,
+                repo_type="dataset",
+                token=HF_TOKEN_WRITE,
+                commit_message=f"User {username} deleted folder {item_name}"
+            )
+            flash(f'Папка "{item_name}" и ее содержимое удалены.', 'success')
+            logging.info(f"User {username} deleted folder {full_hf_api_path}")
+        else:
+            # Delete a single file
+            api.delete_file(
+                path_in_repo=full_hf_api_path,
+                repo_id=REPO_ID,
+                repo_type="dataset",
+                token=HF_TOKEN_WRITE,
+                commit_message=f"User {username} deleted file {item_name}"
+            )
+            flash(f'Файл "{item_name}" удален.', 'success')
+            logging.info(f"User {username} deleted file {full_hf_api_path}")
+
+        # Clear cache to reflect changes immediately
+        cache.clear()
 
     except Exception as e:
-         # Handle case where file might already be deleted on HF (e.g., HTTP 404 or specific API error)
-         # The exact error depends on the huggingface_hub library version and API response.
-         # For now, log the error and inform the user.
-        logging.error(f"Error deleting file {file_path} for {username}: {e}")
-        # If file was found in DB but failed to delete on HF, keep it in DB?
-        # Or remove from DB anyway if deletion likely succeeded despite error? Risky.
-        # Let's keep it in DB if HF deletion fails explicitly.
-        flash(f'Ошибка удаления файла: {e}', 'error')
+        item_type_str = "папку" if is_folder else "файл"
+        logging.error(f"Error deleting {item_type_str} {full_hf_api_path} for user {username}: {e}")
+        flash(f'Ошибка при удалении {item_type_str} "{item_name}": {e}', 'error')
 
+    # Redirect back to the parent folder
+    parent_path = str(Path(item_path).parent)
+    if parent_path == '.': parent_path = '' # Handle root case
+    return redirect(url_for('dashboard', current_path=parent_path))
 
-    return redirect(url_for('dashboard', path=current_path_redirect))
 
 @app.route('/logout')
 def logout():
     session.pop('username', None)
-    flash('Вы успешно вышли из системы.', 'success')
-    # Client-side JS should handle localStorage removal on login page load or logout click
+    flash('Вы вышли из системы.', 'info')
+    # JavaScript on login page handles localStorage cleanup
     return redirect(url_for('login'))
 
 
 # --- Admin Routes ---
-# WARNING: These routes lack proper admin authentication/authorization.
-# Implement robust checks (e.g., separate admin login, role check) in production.
+# WARNING: These routes lack proper admin authentication.
+# Add a check (e.g., session variable, password) before allowing access.
+def check_admin():
+     # Replace with actual admin check logic
+     # For now, assumes anyone accessing /admhosto is admin
+     # return session.get('is_admin') == True
+     return True
 
 @app.route('/admhosto')
 def admin_panel():
-    # TODO: Add admin authentication check here
+    if not check_admin():
+        flash('Доступ запрещен.', 'error')
+        return redirect(url_for('login'))
+
     data = load_data()
     users = data.get('users', {})
-    sorted_users = dict(sorted(users.items()))
 
     html = '''
 <!DOCTYPE html>
@@ -1458,8 +1050,9 @@ def admin_panel():
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Админ-панель - Zeus Cloud</title>
-    <style>{style}</style>
-     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
+    <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
@@ -1467,69 +1060,109 @@ def admin_panel():
         {% with messages = get_flashed_messages(with_categories=true) %}
           {% if messages %}
             {% for category, message in messages %}
-              <div class="flash flash-{{ category }}">{{ message }}</div>
+              <div class="flash {{ category }}">{{ message }}</div>
             {% endfor %}
           {% endif %}
         {% endwith %}
-
-        <div class="card">
-            <h2>Список пользователей ({{ users | length }})</h2>
-            <div class="user-list">
-                {% for username, user_data in users.items() %}
-                    <div class="user-item">
-                        <div>
-                             <a href="{{ url_for('admin_user_files', username=username) }}">{{ username }}</a>
-                             <p>Дата регистрации: {{ user_data.get('created_at', 'N/A') }} | Файлов: {{ user_data.get('files', []) | length }} | Папок: {{ user_data.get('folders', []) | length }} </p>
-                        </div>
-                         <div class="actions">
-                             <a href="{{ url_for('admin_user_files', username=username) }}" class="btn btn-secondary btn-sm" title="Просмотреть файлы"><i class="fas fa-eye"></i></a>
-                             <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline;" onsubmit="return confirm('ВНИМАНИЕ! Вы уверены, что хотите удалить пользователя {{ username }} и ВСЕ его файлы? Это действие НЕОБРАТИМО!');">
-                                 <button type="submit" class="btn btn-danger btn-sm" title="Удалить пользователя"><i class="fas fa-user-times"></i></button>
-                             </form>
-                        </div>
-                    </div>
-                {% else %}
-                    <p style="text-align: center; color: #64748b;">Пользователей пока нет.</p>
-                {% endfor %}
-            </div>
+        <h2>Список пользователей</h2>
+        <div class="user-list">
+            {% for username, user_data in users.items() %}
+                <div class="user-item" style="border: 1px solid #eee; padding: 15px; margin-bottom: 10px; border-radius: 8px;">
+                    <p><strong>{{ username }}</strong></p>
+                    <p style="font-size: 0.9em; color: #555;">Дата регистрации: {{ user_data.get('created_at', 'N/A') }}</p>
+                    <a href="{{ url_for('admin_user_files', username=username) }}" class="btn btn-small" style="background-color: var(--secondary); margin-top: 5px;"><i class="fas fa-folder-open"></i> Файлы</a>
+                     <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline; margin-left: 10px;" onsubmit="return confirm('Вы уверены, что хотите удалить пользователя {{ username }} и ВСЕ его файлы? Это действие необратимо!');">
+                         <button type="submit" class="btn delete-btn btn-small" style="margin-top: 5px;"><i class="fas fa-user-slash"></i> Удалить пользователя</button>
+                     </form>
+                </div>
+            {% else %}
+                <p>Пользователей пока нет.</p>
+            {% endfor %}
         </div>
     </div>
 </body>
 </html>
 '''
-    return render_template_string(html, style=BASE_STYLE, users=sorted_users)
+    return render_template_string(html, users=users)
+
+@app.route('/admhosto/user/<username>/', defaults={'current_path': ''})
+@app.route('/admhosto/user/<username>/<path:current_path>')
+def admin_user_files(username, current_path):
+    if not check_admin():
+        flash('Доступ запрещен.', 'error')
+        return redirect(url_for('login'))
 
-@app.route('/admhosto/user/<username>')
-def admin_user_files(username):
-    # TODO: Add admin authentication check here
     data = load_data()
     if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
+        flash(f'Пользователь {username} не найден!', 'error')
         return redirect(url_for('admin_panel'))
 
-    user_data = data['users'][username]
-    user_data.setdefault('files', [])
-    user_data.setdefault('folders', [])
-
-    current_path = request.args.get('path', '/')
-    if not current_path.startswith('/'): current_path = '/' + current_path
-    if not current_path.endswith('/'): current_path += '/'
-
-    current_files = sorted(
-        [f for f in user_data['files'] if f.get('path_prefix') == current_path],
-        key=lambda x: x.get('upload_date', ''), reverse=True
-    )
-    current_folders = sorted(
-        [f for f in user_data['folders'] if f.startswith(current_path) and f != current_path and f.count('/') == current_path.count('/')]
-    )
-
-    breadcrumbs = []
-    path_parts = list(filter(None, current_path.split('/')))
-    temp_path = '/'
-    breadcrumbs.append({'name': 'Корень', 'path': '/'})
-    for i, part in enumerate(path_parts):
-        temp_path += part + '/'
-        breadcrumbs.append({'name': part, 'path': temp_path})
+    current_path = current_path.strip('/')
+    items = []
+    folders = []
+    files_list = []
+
+    if HF_TOKEN_READ:
+        try:
+            user_base_fs_path = f"datasets/{REPO_ID}/{get_user_base_path(username)}"
+            target_path_in_repo = os.path.join(user_base_fs_path, current_path).replace('\\', '/')
+
+            if HF_FS.exists(target_path_in_repo):
+                 repo_items = HF_FS.ls(target_path_in_repo, detail=True)
+                 for item_info in repo_items:
+                    item_path = item_info['name']
+                    item_name = Path(item_path).name
+                    if item_name == ".keep": continue
+
+                    relative_item_path = Path(item_path).relative_to(user_base_fs_path).as_posix()
+                    item_type = item_info['type']
+
+                    if item_type == 'directory':
+                        folders.append({
+                            'name': item_name,
+                            'path': relative_item_path,
+                            'type': 'directory' # Explicitly add type for template
+                        })
+                    elif item_type == 'file':
+                        original_name = item_name
+                        try:
+                             base, ext = os.path.splitext(item_name)
+                             if len(base) > 9 and base[-9] == '_':
+                                 uuid_part = base[-8:]
+                                 if all(c in '0123456789abcdefABCDEF' for c in uuid_part):
+                                     original_name = base[:-9] + ext
+                        except Exception: pass
+
+                        hf_api_path_for_file = Path(get_user_base_path(username)) / relative_item_path # Correct path for download/delete links
+
+                        file_info = {
+                            'name': item_name,
+                            'original_name': original_name,
+                            'path': relative_item_path,
+                            'hf_api_path': hf_api_path_for_file, # Path for download/delete links
+                            'type': get_file_type(original_name),
+                            'size': item_info.get('size', 0),
+                            'url': get_hf_resolve_url(hf_api_path_for_file)
+                        }
+                        files_list.append(file_info)
+            else:
+                 flash(f"Папка '{current_path}' для пользователя {username} не найдена или пуста.", 'info')
+
+        except Exception as e:
+            logging.error(f"[Admin] Error listing files for {username} at '{current_path}': {e}")
+            flash(f"Ошибка при получении списка файлов для {username}: {e}", 'error')
+
+    folders.sort(key=lambda x: x['name'].lower())
+    files_list.sort(key=lambda x: x['original_name'].lower())
+    items = folders + files_list
+
+    breadcrumbs = [{'name': 'Корень', 'path': ''}]
+    if current_path:
+        path_parts = Path(current_path).parts
+        cumulative_path = ''
+        for part in path_parts:
+            cumulative_path = os.path.join(cumulative_path, part).replace('\\', '/')
+            breadcrumbs.append({'name': part, 'path': cumulative_path})
 
     html = '''
 <!DOCTYPE html>
@@ -1537,327 +1170,233 @@ def admin_user_files(username):
 <head>
     <meta charset="UTF-8">
     <meta name="viewport" content="width=device-width, initial-scale=1.0">
-    <title>Файлы пользователя {{ username }} - Админ</title>
-    <style>{style}</style>
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0/css/all.min.css">
+    <title>Файлы пользователя {{ username }} - Zeus Cloud</title>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
+    <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
-        <div style="display: flex; justify-content: space-between; align-items: center;">
-             <h1><i class="fas fa-folder-open"></i> Файлы: {{ username }}</h1>
-             <a href="{{ url_for('admin_panel') }}" class="btn btn-secondary"><i class="fas fa-arrow-left"></i> Назад к пользователям</a>
-        </div>
+        <h1><i class="fas fa-folder-open"></i> Файлы пользователя: {{ username }}</h1>
+        <p><a href="{{ url_for('admin_panel') }}">« Назад к списку пользователей</a></p>
 
         {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
                 {% for category, message in messages %}
-                    <div class="flash flash-{{ category }}">{{ message }}</div>
+                    <div class="flash {{ category }}">{{ message }}</div>
                 {% endfor %}
             {% endif %}
         {% endwith %}
 
-        <div class="card">
-             <h2>Содержимое: {{ current_path }}</h2>
-              <div class="breadcrumb">
-                {% for crumb in breadcrumbs %}
-                    {% if not loop.last %}
-                        <a href="{{ url_for('admin_user_files', username=username, path=crumb.path) }}">{{ crumb.name }}</a>
-                        <span>/</span>
-                    {% else %}
-                        <strong>{{ crumb.name }}</strong>
-                    {% endif %}
-                {% endfor %}
-            </div>
-
-             <div class="file-grid">
-                 {# Folders #}
-                 {% for folder_path in current_folders %}
-                    {% set folder_name = folder_path.strip('/').split('/')[-1] %}
-                     <a href="{{ url_for('admin_user_files', username=username, path=folder_path) }}" class="grid-item folder-item" style="text-decoration: none; color: inherit;">
-                        <div class="grid-item-icon">{folder_icon | safe}</div>
-                        <div class="grid-item-name" title="{{ folder_name }}">{{ folder_name }}</div>
-                        <div class="grid-item-actions">
-                             <form method="POST" action="{{ url_for('admin_delete_folder', username=username, folder_path=folder_path) }}" onsubmit="return confirm('Удалить папку \'{{ folder_name }}\' и ВСЕ её содержимое для пользователя {{ username }}?');" style="display: inline;">
-                                 <button type="submit" class="btn btn-danger btn-sm" title="Удалить папку"><i class="fas fa-trash-alt"></i></button>
-                             </form>
-                        </div>
-                    </a>
-                 {% endfor %}
-
-                 {# Files #}
-                 {% for file in current_files %}
-                    <div class="grid-item file-item" data-filename="{{ file.original_filename }}" data-filepath="{{ file.hf_path }}" data-filetype="{{ file.type }}">
-                         <div class="grid-item-icon">
-                            {% if file.type == 'image' %}
-                                <img src="{{ url_for('file_proxy', file_path=file.hf_path) }}" alt="{{ file.original_filename }}" loading="lazy" onerror="this.style.display='none'; this.nextElementSibling.style.display='block';" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'image')">
-                                <div class="file-placeholder-icon" style="display: none;">{file_icon | safe}</div> {# Fallback icon #}
-                            {% elif file.type == 'video' %}
-                                 <video preload="metadata" muted loading="lazy" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'video')" style="width: 100%; height: 120px; object-fit: cover; background: #000; cursor: pointer;">
-                                    <source src="{{ url_for('file_proxy', file_path=file.hf_path) }}#t=0.1" type="{{ mimetypes.guess_type(file.original_filename)[0] or 'video/mp4' }}">
-                                </video>
-                             {% elif file.type == 'pdf' %}
-                                 <div class="file-placeholder-icon" style="cursor: pointer;" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'pdf')">
-                                      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path d="M11.25 4.533A9.708 9.708 0 0 0 6 3a9.708 9.708 0 0 0-5.25 1.533v13.934A9.708 9.708 0 0 0 6 21a9.708 9.708 0 0 0 5.25-1.533V4.533Zm1.5 0v13.934A9.708 9.708 0 0 0 18 21a9.708 9.708 0 0 0 5.25-1.533V4.533A9.708 9.708 0 0 0 18 3a9.708 9.708 0 0 0-5.25 1.533Z"></path></svg>
-                                 </div>
-                             {% elif file.type == 'text' %}
-                                 <div class="file-placeholder-icon" style="cursor: pointer;" onclick="openModal('{{ url_for('file_proxy', file_path=file.hf_path) }}', 'text')">
-                                      <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="currentColor"><path fill-rule="evenodd" d="M4.75 2.25A2.75 2.75 0 0 0 2 5v14a2.75 2.75 0 0 0 2.75 2.75h14.5A2.75 2.75 0 0 0 22 19V5a2.75 2.75 0 0 0-2.75-2.75H4.75ZM7 7.75h10a.75.75 0 0 1 0 1.5H7a.75.75 0 0 1 0-1.5Zm0 3h10a.75.75 0 0 1 0 1.5H7a.75.75 0 0 1 0-1.5Zm7 3H7a.75.75 0 0 0 0 1.5h7a.75.75 0 0 0 0-1.5Z" clip-rule="evenodd"></path></svg>
-                                 </div>
-                            {% else %}
-                                <div class="file-placeholder-icon">{file_icon | safe}</div>
-                            {% endif %}
-                        </div>
-                        <div class="grid-item-name" title="{{ file.original_filename }} ({{ file.upload_date }})">{{ file.original_filename }}</div>
-                        <div class="grid-item-actions">
-                             <a href="{{ url_for('download_file', file_path=file.hf_path) }}" class="btn btn-secondary btn-sm" title="Скачать"><i class="fas fa-download"></i></a>
-                             <form method="POST" action="{{ url_for('admin_delete_file', username=username, file_path=file.hf_path) }}" onsubmit="return confirm('Удалить файл \'{{ file.original_filename }}\' для пользователя {{ username }}?');" style="display: inline;">
-                                 <input type="hidden" name="current_path" value="{{ current_path }}">
-                                 <button type="submit" class="btn btn-danger btn-sm" title="Удалить файл"><i class="fas fa-trash-alt"></i></button>
-                             </form>
-                        </div>
-                    </div>
-                 {% endfor %}
-             </div>
-            {% if not current_files and not current_folders %}
-                <p style="text-align: center; margin-top: 2rem; color: #64748b;">Папка пуста.</p>
-            {% endif %}
-        </div>
-    </div>
+         <div class="breadcrumbs">
+             {% for crumb in breadcrumbs %}
+                 {% if loop.last %}
+                     <span>{{ crumb.name }}</span>
+                 {% else %}
+                     <a href="{{ url_for('admin_user_files', username=username, current_path=crumb.path) }}">{{ crumb.name }}</a>
+                     <span>/</span>
+                 {% endif %}
+             {% endfor %}
+         </div>
 
-    <div id="mediaModal" class="modal">
-        <span class="modal-close" onclick="closeModal()">×</span>
-        <div class="modal-content" id="modalContent"></div>
+        <h2>Содержимое папки: {{ current_path or 'Корень' }}</h2>
+        <div class="grid">
+             {% for item in items %}
+                 {% if item.type == 'directory' %}
+                     <div class="item folder">
+                         <a href="{{ url_for('admin_user_files', username=username, current_path=item.path) }}">
+                            <div class="item-preview folder-icon"><i class="fas fa-folder"></i></div>
+                            <p>{{ item.name }}</p>
+                         </a>
+                         <form method="POST" action="{{ url_for('admin_delete_item', username=username, item_path=item.path) }}" onsubmit="return confirm('Удалить папку {{ item.name }} и все ее содержимое?');" style="margin-top: 5px;">
+                              <button type="submit" class="btn delete-btn btn-small"><i class="fas fa-trash"></i> Удалить</button>
+                         </form>
+                     </div>
+                 {% else %}
+                     <div class="item">
+                          <div class="item-preview" onclick="openModal('{{ item.url }}', '{{ item.type }}', '{{ item.original_name }}')">
+                             {% if item.type == 'image' %} <img src="{{ item.url }}" alt="{{ item.original_name }}" loading="lazy">
+                             {% elif item.type == 'video' %} <video preload="metadata" muted loading="lazy"><source src="{{ item.url }}"><i class="fas fa-film file-icon"></i></video>
+                             {% elif item.type == 'pdf' %} <i class="fas fa-file-pdf file-icon" style="color: #dc3545;"></i>
+                             {% elif item.type == 'text' %} <i class="fas fa-file-alt file-icon" style="color: #6c757d;"></i>
+                             {% else %} <i class="fas fa-file file-icon"></i> {% endif %}
+                         </div>
+                         <p title="{{ item.original_name }} ({{ item.name }})">{{ item.original_name }}</p>
+                         <p style="font-size: 0.8em; color: #666;">{{ (item.size / 1024 / 1024) | round(2) }} MB</p>
+                         <a href="{{ url_for('download_file', hf_api_path=item.hf_api_path, download_name=item.original_name) }}" class="btn download-btn btn-small" download><i class="fas fa-download"></i> Скачать</a>
+                         <form method="POST" action="{{ url_for('admin_delete_item', username=username, item_path=item.path) }}" onsubmit="return confirm('Удалить файл {{ item.original_name }}?');" style="display: inline-block; margin-left: 5px;">
+                              <button type="submit" class="btn delete-btn btn-small"><i class="fas fa-trash"></i> Удалить</button>
+                         </form>
+                     </div>
+                 {% endif %}
+             {% else %}
+                  <p>Эта папка пуста.</p>
+             {% endfor %}
+        </div>
     </div>
 
-     <script>
-        // Re-use the same modal script as dashboard
-        const modal = document.getElementById('mediaModal');
-        const modalContent = document.getElementById('modalContent');
-
-        function openModal(src, type) {
-            modalContent.innerHTML = ''; // Clear previous content
-            if (type === 'image') {
-                const img = document.createElement('img');
-                img.src = src;
-                img.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить изображение.</p>';
-                modalContent.appendChild(img);
-            } else if (type === 'video') {
-                const video = document.createElement('video');
-                video.src = src;
-                video.controls = true;
-                video.autoplay = true;
-                video.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить вид��о.</p>';
-                modalContent.appendChild(video);
-            } else if (type === 'pdf') {
-                const iframe = document.createElement('iframe');
-                iframe.src = src;
-                iframe.style.border = 'none';
-                iframe.onerror = () => modalContent.innerHTML = '<p style="color: white;">Не удалось загрузить PDF. Попробуйте <a href="'+src+'" target="_blank" style="color: #00ddeb;">скачать его</a>.</p>';
-                modalContent.appendChild(iframe);
-            } else if (type === 'text') {
-                modalContent.innerHTML = '<p style="color: white; padding: 20px;">Загрузка текста...</p>';
-                fetch(src)
-                    .then(response => {
-                        if (!response.ok) { throw new Error(`HTTP error! status: ${response.status}`); }
-                        return response.text();
-                    })
-                    .then(text => {
-                        const pre = document.createElement('pre');
-                        pre.textContent = text;
-                        modalContent.innerHTML = ''; // Clear loading message
-                        modalContent.appendChild(pre);
-                    })
-                    .catch(error => {
-                        console.error('Error fetching text:', error);
-                        modalContent.innerHTML = '<p style="color: white; padding: 20px;">Не удалось загрузить текстовый файл.</p>';
-                    });
-            }
-            modal.style.display = 'flex';
-        }
-
-        function closeModal() {
-            modal.style.display = 'none';
-            const video = modal.querySelector('video');
-            if (video) { video.pause(); }
-            const iframe = modal.querySelector('iframe');
-            if (iframe) { iframe.src = 'about:blank'; }
-            modalContent.innerHTML = ''; // Clear content
-        }
-        window.onclick = function(event) { if (event.target === modal) { closeModal(); } }
-        document.addEventListener('keydown', function(event) { if (event.key === "Escape") { closeModal(); } });
+     <div class="modal" id="mediaModal">
+         <span class="modal-close" onclick="closeModal()">×</span>
+         <div class="modal-content" id="modalContentContainer">
+              <div id="modalContent"></div>
+         </div>
+     </div>
+    <script>
+        // Re-use modal functions from dashboard - ensure they are defined globally or included here
+         function openModal(src, type, name) {
+             const modal = document.getElementById('mediaModal');
+             const modalContent = document.getElementById('modalContent');
+             modalContent.innerHTML = '';
+             const authToken = "{{ HF_TOKEN_READ if HF_TOKEN_READ else '' }}";
+             const url = new URL(src);
+             const finalSrc = url.toString() + '?download=true';
+             const headers = {}; if (authToken) { headers['Authorization'] = `Bearer ${authToken}`; }
+
+             if (type === 'image') { modalContent.innerHTML = `<img src="${finalSrc}" alt="${name}">`; }
+             else if (type === 'video') { modalContent.innerHTML = `<video controls autoplay style="max-width: 100%; max-height: 80vh;"><source src="${finalSrc}"></video>`; }
+             else if (type === 'pdf') { modalContent.innerHTML = `<iframe src="${finalSrc}" title="${name}"></iframe>`; }
+             else if (type === 'text') {
+                 fetch(finalSrc, { headers: headers }) .then(response => response.ok ? response.text() : Promise.reject('Network error'))
+                     .then(text => { modalContent.innerHTML = `<pre style="white-space: pre-wrap; word-wrap: break-word; max-height: 80vh; overflow-y: auto; background: #f8f8f8; padding: 10px; border-radius: 5px; color: #333;">${escapeHtml(text)}</pre>`; })
+                     .catch(error => { console.error('Error fetching text:', error); modalContent.innerHTML = '<p>Не удалось загрузить текст.</p>'; });
+             } else { modalContent.innerHTML = `<p>Предпросмотр недоступен. <a href="${finalSrc}" target="_blank">Скачать ${name}</a></p>`; }
+             modal.style.display = 'flex';
+         }
+         function closeModal() { /* ... same as dashboard ... */
+             const modal = document.getElementById('mediaModal'); modal.style.display = 'none';
+             const video = modal.querySelector('video'); if (video) { video.pause(); }
+             const iframe = modal.querySelector('iframe'); if (iframe) { iframe.src = 'about:blank'; }
+             document.getElementById('modalContent').innerHTML = '';
+         }
+         document.getElementById('mediaModal').addEventListener('click', function(event) { if (event.target === this) { closeModal(); } });
+         function escapeHtml(text) { var map = { '&': '&', '<': '<', '>': '>', '"': '"', "'": ''' }; return text.replace(/[&<>"']/g, function(m) { return map[m]; }); }
     </script>
 </body>
 </html>
 '''
-    return render_template_string(
-         html,
-         style=BASE_STYLE,
-         username=username,
-         current_path=current_path,
-         current_files=current_files,
-         current_folders=current_folders,
-         breadcrumbs=breadcrumbs,
-         repo_id=REPO_ID,
-         folder_icon=get_folder_icon(),
-         file_icon=get_file_icon('other'),
-         mimetypes=mimetypes
-     )
+    return render_template_string(html, username=username, items=items, current_path=current_path, breadcrumbs=breadcrumbs, HF_TOKEN_READ=HF_TOKEN_READ)
+
 
 @app.route('/admhosto/delete_user/<username>', methods=['POST'])
 def admin_delete_user(username):
-    # TODO: Add admin authentication check here
-    data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
-        return redirect(url_for('admin_panel'))
-
-    user_data = data['users'][username]
-    files_to_delete = user_data.get('files', [])
-    hf_paths_to_delete = [f['hf_path'] for f in files_to_delete]
-
-    # It's safer and often sufficient to delete individual files listed in the DB.
-    # Deleting the entire folder might remove files not tracked in the DB if inconsistencies exist.
-    try:
-        api = HfApi(token=HF_TOKEN_WRITE)
-        deleted_count = 0
-        logging.info(f"Admin attempting to delete {len(hf_paths_to_delete)} files for user {username}")
-        if hf_paths_to_delete:
-             for hf_path in hf_paths_to_delete:
-                 try:
-                     api.delete_file(path_in_repo=hf_path, repo_id=REPO_ID, repo_type="dataset")
-                     deleted_count += 1
-                 except Exception as file_delete_error:
-                     logging.warning(f"Admin failed to delete file {hf_path} during user delete for {username}: {file_delete_error}")
-
-        logging.info(f"Admin deleted {deleted_count} files from HF for user {username}.")
-
-        # Delete user from database
-        del data['users'][username]
-        save_data(data)
-        flash(f'Пользователь {username} и его файлы ({deleted_count}) успешно удалены!', 'success')
-        logging.info(f"Admin deleted user {username} and their file records.")
-
-    except Exception as e:
-        logging.error(f"Error deleting user {username} by admin: {e}")
-        flash(f'Ошибка при удалении пользователя {username}: {e}', 'error')
-
-    return redirect(url_for('admin_panel'))
+    if not check_admin():
+        flash('Доступ запрещен.', 'error')
+        return redirect(url_for('login'))
 
-@app.route('/admhosto/delete_folder/<username>/<path:folder_path>', methods=['POST'])
-def admin_delete_folder(username, folder_path):
-    # TODO: Add admin authentication check here
-    if not folder_path.startswith('/'): folder_path = '/' + folder_path
-    if not folder_path.endswith('/'): folder_path += '/'
+    if not HF_TOKEN_WRITE:
+         flash('Ошибка: Удаление пользователя невозможно, токен записи HF не настроен.', 'error')
+         return redirect(url_for('admin_panel'))
 
     data = load_data()
     if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
+        flash(f'Пользователь {username} не найден!', 'error')
         return redirect(url_for('admin_panel'))
 
-    user_data = data['users'][username]
-    user_data.setdefault('files', [])
-    user_data.setdefault('folders', [])
-
-    # Find all files and subfolders within the target folder for this specific user
-    files_in_folder = [f for f in user_data['files'] if f.get('path_prefix', '').startswith(folder_path)]
-    subfolders_in_folder = [f for f in user_data['folders'] if f.startswith(folder_path) and f != folder_path] # Exclude self
-    hf_paths_to_delete = [f['hf_path'] for f in files_in_folder]
+    # Path to the user's entire directory on HF Hub
+    user_folder_api_path = get_user_base_path(username) # e.g., "cloud_files/testuser"
 
     try:
-        api = HfApi(token=HF_TOKEN_WRITE)
-        deleted_count = 0
-        logging.info(f"Admin attempting to delete {len(hf_paths_to_delete)} files in folder {folder_path} for user {username}")
-        if hf_paths_to_delete:
-            for hf_path in hf_paths_to_delete:
-                try:
-                    api.delete_file(path_in_repo=hf_path, repo_id=REPO_ID, repo_type="dataset")
-                    deleted_count += 1
-                except Exception as file_delete_error:
-                    logging.warning(f"Admin failed to delete file {hf_path} during folder delete: {file_delete_error}")
-        logging.info(f"Admin deleted {deleted_count} files from HF in folder {folder_path} for {username}.")
-
-        # Remove files and folders from user data
-        user_data['files'] = [f for f in user_data['files'] if not f.get('path_prefix', '').startswith(folder_path)]
-        user_data['folders'] = [f for f in user_data['folders'] if not f.startswith(folder_path)] # Removes target and subfolders
-
-        save_data(data)
-        folder_name = folder_path.strip('/').split('/')[-1]
-        flash(f'Папка "{folder_name}" и её содержимое ({deleted_count} файлов) удалены для пользователя {username}.', 'success')
-
-    except Exception as e:
-        logging.error(f"Admin error deleting folder {folder_path} for {username}: {e}")
-        flash(f'Ошибка при удалении папки: {e}', 'error')
-
-    # Determine redirect path (parent folder within admin view)
-    parent_path = '/'.join(folder_path.strip('/').split('/')[:-1])
-    parent_path = '/' + parent_path + '/' if parent_path else '/'
-    return redirect(url_for('admin_user_files', username=username, path=parent_path))
+        api = HfApi()
+        # Attempt to delete the user's entire folder on HF Hub
+        try:
+             logging.info(f"Admin attempting to delete HF folder: {user_folder_api_path}")
+             api.delete_folder(
+                 folder_path=user_folder_api_path,
+                 repo_id=REPO_ID,
+                 repo_type="dataset",
+                 token=HF_TOKEN_WRITE,
+                 commit_message=f"Admin deleted all files for user {username}"
+             )
+             logging.info(f"Successfully deleted HF folder for user {username}")
+        except Exception as folder_delete_error:
+             # Log error but proceed to delete user from DB anyway
+             # It might be the folder was already empty/deleted, or another issue.
+             logging.error(f"Error deleting HF folder {user_folder_api_path} for user {username}: {folder_delete_error}. User DB entry will still be removed.")
+             # Optionally flash a warning about potential orphaned files if deletion failed badly.
+             # flash(f'Предупреждение: Не удалось полностью очистить файлы пользователя {username} на HF. {folder_delete_error}', 'warning')
+
+
+        # Delete the user from the local database
+        del data['users'][username]
+        save_data(data) # Save changes to local JSON and potentially upload to HF
 
+        flash(f'Пользователь {username} и его файлы (попытка удаления) успешно удалены из системы.', 'success')
+        logging.info(f"Admin deleted user {username} from database.")
+        cache.clear() # Clear cache
 
-@app.route('/admhosto/delete_file/<username>/<path:file_path>', methods=['POST'])
-def admin_delete_file(username, file_path):
-    # TODO: Add admin authentication check here
-    current_path_redirect = request.form.get('current_path', '/') # Get path for redirect
+    except Exception as e:
+        logging.error(f"Error during admin deletion of user {username}: {e}")
+        flash(f'Произошла ошибка при удалении пользователя {username}: {e}', 'error')
 
-    data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
-        return redirect(url_for('admin_panel'))
+    return redirect(url_for('admin_panel'))
 
-    user_files = data['users'][username].get('files', [])
-    original_file_list = list(user_files)
-    file_to_delete_index = -1
-    original_filename = os.path.basename(file_path) # Fallback name
 
-    for i, file in enumerate(original_file_list):
-        if file.get('hf_path') == file_path:
-            file_to_delete_index = i
-            original_filename = file.get('original_filename', original_filename)
-            break
+@app.route('/admhosto/delete_item/<username>/<path:item_path>', methods=['POST'])
+def admin_delete_item(username, item_path):
+     if not check_admin():
+         flash('Доступ запрещен.', 'error')
+         return redirect(url_for('login'))
 
-    # We proceed with deletion even if not found in DB, assuming admin wants it gone from HF
-    if file_to_delete_index == -1:
-         flash(f'Файл "{original_filename}" не найден в базе данных пользователя, но будет предпринята попытка удаления из хранилища.', 'warning')
+     if not HF_TOKEN_WRITE:
+         flash('Ошибка: Удаление невозможно, токен записи HF не настроен.', 'error')
+         parent_path = str(Path(item_path).parent)
+         if parent_path == '.': parent_path = ''
+         return redirect(url_for('admin_user_files', username=username, current_path=parent_path))
+
+     # Construct the full path for HF API/FS operations
+     full_hf_api_path = str(Path(get_user_base_path(username)) / item_path).replace('\\','/')
+     item_name = Path(item_path).name
+     is_folder = False
+     full_fs_path = f"datasets/{REPO_ID}/{full_hf_api_path}"
+
+     try:
+         if HF_FS.exists(full_fs_path):
+             is_folder = HF_FS.isdir(full_fs_path)
+         else:
+             flash(f'Элемент "{item_name}" не найден для удаления.', 'warning')
+             parent_path = str(Path(item_path).parent); parent_path = '' if parent_path == '.' else parent_path
+             return redirect(url_for('admin_user_files', username=username, current_path=parent_path))
+
+         api = HfApi()
+         item_type_str = "папка" if is_folder else "файл"
+         if is_folder:
+             api.delete_folder(
+                 folder_path=full_hf_api_path, repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE,
+                 commit_message=f"Admin deleted folder {item_name} for user {username}"
+             )
+         else:
+             api.delete_file(
+                 path_in_repo=full_hf_api_path, repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE,
+                 commit_message=f"Admin deleted file {item_name} for user {username}"
+             )
 
-    try:
-        api = HfApi(token=HF_TOKEN_WRITE)
-        api.delete_file(
-            path_in_repo=file_path,
-            repo_id=REPO_ID,
-            repo_type="dataset",
-            commit_message=f"Admin delete: {file_path} for {username}"
-        )
-        logging.info(f"Admin successfully deleted file {file_path} from HF for user {username}")
+         flash(f'{item_type_str.capitalize()} "{item_name}" успешно удален(а).', 'success')
+         logging.info(f"Admin deleted {item_type_str} {full_hf_api_path} for user {username}")
+         cache.clear()
 
-        if file_to_delete_index != -1:
-            del original_file_list[file_to_delete_index]
-            data['users'][username]['files'] = original_file_list
-            save_data(data)
-            flash(f'Файл "{original_filename}" успешно удален!', 'success')
-        else:
-             # If it wasn't in the DB, no save_data needed, just confirm HF deletion attempt
-             flash(f'Файл "{original_filename}" удален из хранилища (или уже отсутствовал).', 'info')
+     except Exception as e:
+         item_type_str = "папку" if is_folder else "файл"
+         logging.error(f"[Admin] Error deleting {item_type_str} {full_hf_api_path} for user {username}: {e}")
+         flash(f'Ошибка при удалении {item_type_str} "{item_name}": {e}', 'error')
 
-    except Exception as e:
-        logging.error(f"Admin error deleting file {file_path} for {username}: {e}")
-        flash(f'Ошибка удаления файла "{original_filename}": {e}', 'error')
+     parent_path = str(Path(item_path).parent); parent_path = '' if parent_path == '.' else parent_path
+     return redirect(url_for('admin_user_files', username=username, current_path=parent_path))
 
-    return redirect(url_for('admin_user_files', username=username, path=current_path_redirect))
 
 if __name__ == '__main__':
-    if not HF_TOKEN_WRITE:
-        logging.warning("!!! HF_TOKEN (write access) is NOT set. File/folder uploads, deletions, and DB backups will FAIL. !!!")
-    if not HF_TOKEN_READ:
-        logging.warning("!!! HF_TOKEN_READ is not set. Falling back to HF_TOKEN. File downloads/previews might fail for private repos if HF_TOKEN is also not set. !!!")
+    # Initial data load/check on startup
+    load_data()
 
+    # Start periodic backup thread only if write token is present
     if HF_TOKEN_WRITE:
-        threading.Thread(target=periodic_backup, daemon=True).start()
+        backup_thread = threading.Thread(target=periodic_backup, daemon=True)
+        backup_thread.start()
     else:
-        logging.warning("Periodic database backup disabled because HF_TOKEN (write access) is not set.")
+        logging.warning("Periodic backup thread not started: Write token missing.")
 
-    # Initial data load/download
-    load_data()
+    # Run Flask app
+    # Use waitress or gunicorn for production instead of Flask's built-in server
+    port = int(os.environ.get("PORT", 7860))
+    app.run(debug=False, host='0.0.0.0', port=port)
 
-    # Use Gunicorn or Waitress in production instead of app.run(debug=True)
-    # Example: gunicorn --bind 0.0.0.0:7860 app:app
-    app.run(host='0.0.0.0', port=7860, debug=False) # Set debug=False for production
\ No newline at end of file
+# --- END OF FILE app (8).py ---
\ No newline at end of file