diff --git "a/app.py" "b/app.py"
--- "a/app.py"
+++ "b/app.py"
@@ -1,6 +1,4 @@
-# --- START OF FILE app (8).py ---
-
-from flask import Flask, render_template_string, request, redirect, url_for, session, flash, send_file, jsonify, Response
+from flask import Flask, render_template_string, request, redirect, url_for, session, flash, send_file, jsonify
 from flask_caching import Cache
 import json
 import os
@@ -8,181 +6,56 @@ import logging
 import threading
 import time
 from datetime import datetime
-from huggingface_hub import HfApi, hf_hub_download, HfFileSystem
-from huggingface_hub.utils import RepositoryNotFoundError, EntryNotFoundError
+from huggingface_hub import HfApi, hf_hub_download
 from werkzeug.utils import secure_filename
 import requests
 from io import BytesIO
 import uuid
-from pathlib import Path
 import mimetypes
+import PyPDF2
+from base64 import b64encode
 
 app = Flask(__name__)
-app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey_dev_12345") # Use a strong, environment-specific key in production
+app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey")
 DATA_FILE = 'cloudeng_data.json'
-REPO_ID = "Eluza133/Z1e1u" # Replace with your actual repo ID
+REPO_ID = "Eluza133/Z1e1u"
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ") or HF_TOKEN_WRITE
-HF_FS = HfFileSystem(token=HF_TOKEN_READ)
-
-
-# Ensure necessary tokens are set
-if not HF_TOKEN_WRITE:
-    print("CRITICAL: HF_TOKEN (write access) environment variable is not set. File uploads and deletions will fail.")
-if not HF_TOKEN_READ:
-    print("WARNING: HF_TOKEN_READ environment variable is not set. Falling back to HF_TOKEN. File downloads might fail for private repos if HF_TOKEN is not set.")
-
-cache = Cache(app, config={'CACHE_TYPE': 'simple', 'CACHE_DEFAULT_TIMEOUT': 60}) # Shorter cache for faster updates during dev/testing
-logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
-
-# --- Helper Functions ---
-
-def get_user_data_root(data, username):
-    user_data = data.setdefault('users', {}).get(username)
-    if not user_data:
-        return None
-    if 'root' not in user_data:
-        user_data['root'] = {"type": "folder", "name": "/", "children": {}}
-    return user_data['root']
-
-def get_node_by_path(root_node, path_str):
-    if not path_str or path_str == '/':
-        return root_node
-    parts = [p for p in path_str.strip('/').split('/') if p]
-    current_node = root_node
-    for part in parts:
-        if current_node['type'] != 'folder' or part not in current_node['children']:
-            return None
-        current_node = current_node['children'][part]
-    return current_node
-
-def get_parent_node(root_node, path_str):
-    if not path_str or path_str == '/':
-        return None, None # No parent for root
-    parts = [p for p in path_str.strip('/').split('/') if p]
-    if not parts:
-         return None, None
-    parent_path = '/' + '/'.join(parts[:-1])
-    parent_node = get_node_by_path(root_node, parent_path)
-    child_name = parts[-1]
-    return parent_node, child_name
 
+cache = Cache(app, config={'CACHE_TYPE': 'simple'})
+logging.basicConfig(level=logging.INFO)
 
-def generate_unique_filename(original_filename):
-    name, ext = os.path.splitext(original_filename)
-    # Limit name length to avoid issues, keep extension
-    safe_name = secure_filename(name)[:50] # Limit base name length
-    unique_id = uuid.uuid4().hex[:8]
-    return f"{safe_name}_{unique_id}{ext}"
-
-def get_preview_type(filename):
-    ext = Path(filename).suffix.lower()
-    if ext in ('.jpg', '.jpeg', '.png', '.gif', '.webp', '.bmp', '.svg'):
-        return 'image'
-    elif ext in ('.mp4', '.mov', '.avi', '.webm', '.ogv', '.mkv'):
-        return 'video'
-    elif ext == '.pdf':
-        return 'pdf'
-    elif ext == '.txt':
-        return 'text'
-    else:
-        # Add more types as needed (e.g., 'audio', 'document')
-        mime_type, _ = mimetypes.guess_type(filename)
-        if mime_type:
-            if mime_type.startswith('audio/'):
-                return 'audio' # Requires frontend player
-            # Can add more specific document checks here if desired
-        return 'other'
-
-
-# --- Data Handling ---
-
-@cache.memoize(timeout=60) # Cache for 1 minute
+@cache.memoize(timeout=300)
 def load_data():
     try:
-        if HF_TOKEN_READ:
-            logging.info(f"Attempting to download {DATA_FILE} from {REPO_ID}")
-            hf_hub_download(
-                repo_id=REPO_ID,
-                filename=DATA_FILE,
-                repo_type="dataset",
-                token=HF_TOKEN_READ,
-                local_dir=".",
-                local_dir_use_symlinks=False,
-                force_download=True, # Force download to get latest
-                etag_timeout=10 # Short timeout for checking updates
-            )
-            logging.info("Database downloaded successfully.")
-        else:
-            logging.warning("HF_TOKEN_READ not set, skipping download. Using local file if exists.")
-
-        if not os.path.exists(DATA_FILE):
-             logging.warning(f"{DATA_FILE} not found locally and could not be downloaded. Initializing empty database.")
-             return {'users': {}} # Only users key needed initially
-
+        download_db_from_hf()
         with open(DATA_FILE, 'r', encoding='utf-8') as file:
             data = json.load(file)
             if not isinstance(data, dict):
-                logging.warning("Data is not a dictionary, initializing empty database")
-                return {'users': {}}
-            data.setdefault('users', {}) # Ensure users key exists
-            # Initialize root for existing users if missing
-            for user_data in data['users'].values():
-                 if 'root' not in user_data:
-                      user_data['root'] = {"type": "folder", "name": "/", "children": {}}
-            logging.info("Data successfully loaded and validated.")
+                logging.warning("Data is not in dict format, initializing empty database")
+                return {'users': {}, 'files': {}, 'folders': {}}
+            data.setdefault('users', {})
+            data.setdefault('files', {})
+            data.setdefault('folders', {})
+            logging.info("Data successfully loaded")
             return data
-
-    except FileNotFoundError:
-        logging.warning(f"{DATA_FILE} not found. Initializing empty database.")
-        return {'users': {}}
-    except json.JSONDecodeError:
-        logging.error(f"Error decoding JSON from {DATA_FILE}. Returning empty database.")
-        # Consider backing up the corrupted file here
-        return {'users': {}}
-    except EntryNotFoundError:
-         logging.warning(f"{DATA_FILE} not found in HF repo {REPO_ID}. Initializing empty database.")
-         # Create a default empty file locally
-         with open(DATA_FILE, 'w', encoding='utf-8') as f:
-              json.dump({'users': {}}, f)
-         return {'users': {}}
-    except RepositoryNotFoundError:
-         logging.error(f"HF repository {REPO_ID} not found or access denied.")
-         # Create a default empty file locally if it doesn't exist
-         if not os.path.exists(DATA_FILE):
-             with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                  json.dump({'users': {}}, f)
-         # Try loading local file anyway
-         if os.path.exists(DATA_FILE):
-              try:
-                  with open(DATA_FILE, 'r', encoding='utf-8') as f:
-                      return json.load(f)
-              except Exception as e:
-                  logging.error(f"Error loading local fallback file: {e}")
-                  return {'users': {}}
-         else:
-              return {'users': {}}
-
     except Exception as e:
-        logging.error(f"Unexpected error loading data: {e}", exc_info=True)
-        # Attempt to return a safe default
-        return {'users': {}}
-
+        logging.error(f"Error loading data: {e}")
+        return {'users': {}, 'files': {}, 'folders': {}}
 
 def save_data(data):
-    if not HF_TOKEN_WRITE:
-        logging.error("Cannot save data: HF_TOKEN (write access) is not configured.")
-        # Optionally save locally anyway?
-        # with open(DATA_FILE, 'w', encoding='utf-8') as file:
-        #     json.dump(data, file, ensure_ascii=False, indent=4)
-        # logging.warning("Data saved locally ONLY due to missing write token.")
-        raise Exception("Hugging Face Write Token not configured.")
     try:
-        # Save locally first
         with open(DATA_FILE, 'w', encoding='utf-8') as file:
             json.dump(data, file, ensure_ascii=False, indent=4)
+        upload_db_to_hf()
+        cache.clear()
+        logging.info("Data saved and uploaded to HF")
+    except Exception as e:
+        logging.error(f"Error saving data: {e}")
+        raise
 
-        # Upload to HF Hub
+def upload_db_to_hf():
+    try:
         api = HfApi()
         api.upload_file(
             path_or_fileobj=DATA_FILE,
@@ -192,166 +65,303 @@ def save_data(data):
             token=HF_TOKEN_WRITE,
             commit_message=f"Backup {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}"
         )
-        cache.clear() # Clear cache after saving
-        logging.info("Data saved locally and uploaded to HF Hub.")
+        logging.info("Database uploaded to Hugging Face")
     except Exception as e:
-        logging.error(f"Error saving data: {e}", exc_info=True)
-        raise # Re-raise to indicate failure
-
+        logging.error(f"Error uploading database: {e}")
 
-def delete_hf_object(path_in_repo, is_folder=False):
-    if not HF_TOKEN_WRITE:
-        logging.error(f"Cannot delete HF object {path_in_repo}: Write token not configured.")
-        raise Exception("Hugging Face Write Token not configured.")
+def download_db_from_hf():
     try:
-        api = HfApi()
-        if is_folder:
-             logging.info(f"Attempting to delete folder: {path_in_repo} from {REPO_ID}")
-             # Note: delete_folder might require listing contents first depending on HF implementation details.
-             # Robust implementation might need to list and delete files individually if delete_folder fails.
-             api.delete_folder(
-                 folder_path=path_in_repo,
-                 repo_id=REPO_ID,
-                 repo_type="dataset",
-                 token=HF_TOKEN_WRITE,
-                 commit_message=f"Deleted folder {path_in_repo}",
-                 ignore_patterns=None # Ensure all contents are targeted
-             )
-             logging.info(f"Successfully deleted folder: {path_in_repo}")
-        else:
-             logging.info(f"Attempting to delete file: {path_in_repo} from {REPO_ID}")
-             api.delete_file(
-                 path_in_repo=path_in_repo,
-                 repo_id=REPO_ID,
-                 repo_type="dataset",
-                 token=HF_TOKEN_WRITE,
-                 commit_message=f"Deleted file {path_in_repo}"
-             )
-             logging.info(f"Successfully deleted file: {path_in_repo}")
-    except EntryNotFoundError:
-         logging.warning(f"Object {path_in_repo} not found on HF Hub during deletion attempt.")
-         # This is often okay, especially if DB and storage got out of sync.
+        hf_hub_download(
+            repo_id=REPO_ID,
+            filename=DATA_FILE,
+            repo_type="dataset",
+            token=HF_TOKEN_READ,
+            local_dir=".",
+            local_dir_use_symlinks=False
+        )
+        logging.info("Database downloaded from Hugging Face")
     except Exception as e:
-        logging.error(f"Error deleting HF object {path_in_repo}: {e}", exc_info=True)
-        raise # Re-raise to indicate potential failure
-
-
-# --- Background Backup (Removed as save_data now uploads) ---
-# def periodic_backup(): ... (no longer needed if save_data uploads)
-
+        logging.error(f"Error downloading database: {e}")
+        if not os.path.exists(DATA_FILE):
+            with open(DATA_FILE, 'w', encoding='utf-8') as f:
+                json.dump({'users': {}, 'files': {}, 'folders': {}}, f)
+
+def periodic_backup():
+    while True:
+        upload_db_to_hf()
+        time.sleep(1800)
+
+def get_file_type(filename):
+    mime_type, _ = mimetypes.guess_type(filename)
+    if mime_type:
+        if mime_type.startswith('video'):
+            return 'video'
+        elif mime_type.startswith('image'):
+            return 'image'
+        elif mime_type == 'application/pdf':
+            return 'pdf'
+        elif mime_type == 'text/plain':
+            return 'txt'
+    return 'other'
+
+def generate_unique_filename(filename):
+    unique_id = str(uuid.uuid4())
+    _, ext = os.path.splitext(filename)
+    return f"{unique_id}{ext}"
 
-# --- Base Styling (Keep as is) ---
 BASE_STYLE = '''
 :root {
-    --primary: #ff4d6d; --secondary: #00ddeb; --accent: #8b5cf6;
-    --background-light: #f5f6fa; --background-dark: #1a1625;
-    --card-bg: rgba(255, 255, 255, 0.95); --card-bg-dark: rgba(40, 35, 60, 0.95);
-    --text-light: #2a1e5a; --text-dark: #e8e1ff;
-    --shadow: 0 10px 30px rgba(0, 0, 0, 0.2); --glass-bg: rgba(255, 255, 255, 0.15);
-    --transition: all 0.3s ease; --delete-color: #ff4444; --folder-color: #ffb86c;
+    --primary: #ff4d6d;
+    --secondary: #00ddeb;
+    --accent: #8b5cf6;
+    --background-light: #f5f6fa;
+    --background-dark: #1a1625;
+    --card-bg: rgba(255, 255, 255, 0.95);
+    --card-bg-dark: rgba(40, 35, 60, 0.95);
+    --text-light: #2a1e5a;
+    --text-dark: #e8e1ff;
+    --shadow: 0 10px 30px rgba(0, 0, 0, 0.2);
+    --glass-bg: rgba(255, 255, 255, 0.15);
+    --transition: all 0.3s ease;
+    --delete-color: #ff4444;
 }
 * { margin: 0; padding: 0; box-sizing: border-box; }
-body { font-family: 'Inter', sans-serif; background: var(--background-light); color: var(--text-light); line-height: 1.6; }
-body.dark { background: var(--background-dark); color: var(--text-dark); }
-.container { margin: 20px auto; max-width: 1200px; padding: 25px; background: var(--card-bg); border-radius: 20px; box-shadow: var(--shadow); }
-body.dark .container { background: var(--card-bg-dark); }
-h1 { font-size: 2em; font-weight: 800; text-align: center; margin-bottom: 25px; background: linear-gradient(135deg, var(--primary), var(--accent)); -webkit-background-clip: text; color: transparent; }
-h2 { font-size: 1.5em; margin-top: 30px; color: var(--text-light); }
-body.dark h2 { color: var(--text-dark); }
-input, textarea { width: 100%; padding: 14px; margin: 12px 0; border: none; border-radius: 14px; background: var(--glass-bg); color: var(--text-light); font-size: 1.1em; box-shadow: inset 0 3px 10px rgba(0, 0, 0, 0.1); }
-body.dark input, body.dark textarea { color: var(--text-dark); }
-input:focus, textarea:focus { outline: none; box-shadow: 0 0 0 4px var(--primary); }
-.btn { padding: 10px 20px; background: var(--primary); color: white; border: none; border-radius: 10px; cursor: pointer; font-size: 1em; font-weight: 600; transition: var(--transition); box-shadow: var(--shadow); display: inline-block; text-decoration: none; margin: 5px; vertical-align: middle; }
-.btn:hover { transform: scale(1.05); background: #e6415f; }
-.download-btn { background: var(--secondary); }
-.download-btn:hover { background: #00b8c5; }
-.delete-btn { background: var(--delete-color); }
-.delete-btn:hover { background: #cc3333; }
-.folder-btn { background: var(--folder-color); }
-.folder-btn:hover { background: #e6a25a; }
-.flash { color: var(--secondary); text-align: center; margin-bottom: 15px; font-weight: bold; }
-.file-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); gap: 20px; margin-top: 20px; }
-.user-list { margin-top: 20px; }
-.user-item { padding: 15px; background: var(--card-bg); border-radius: 16px; margin-bottom: 10px; box-shadow: var(--shadow); transition: var(--transition); }
-body.dark .user-item { background: var(--card-bg-dark); }
-.user-item:hover { transform: translateY(-5px); }
-.user-item a { color: var(--primary); text-decoration: none; font-weight: 600; }
-.user-item a:hover { color: var(--accent); }
-@media (max-width: 768px) { .file-grid { grid-template-columns: repeat(auto-fill, minmax(150px, 1fr)); } }
-@media (max-width: 480px) { .file-grid { grid-template-columns: repeat(auto-fill, minmax(120px, 1fr)); } }
-.item-card { background: var(--card-bg); padding: 15px; border-radius: 16px; box-shadow: var(--shadow); text-align: center; transition: var(--transition); display: flex; flex-direction: column; justify-content: space-between; }
-body.dark .item-card { background: var(--card-bg-dark); }
-.item-card:hover { transform: translateY(-5px); }
-.item-preview { max-width: 100%; height: 150px; object-fit: cover; border-radius: 10px; margin-bottom: 10px; cursor: pointer; background-color: #eee; display: flex; align-items: center; justify-content: center; }
-body.dark .item-preview { background-color: #333; }
-.item-preview i { font-size: 4em; color: #aaa; } /* For folder/file icons */
-.item-card p { font-size: 0.9em; margin: 5px 0; word-break: break-all; }
-.item-card .actions { margin-top: 10px; }
-.item-card a, .item-card button { color: var(--primary); text-decoration: none; }
-.item-card a:hover, .item-card button:hover { color: var(--accent); }
-.modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0, 0, 0, 0.85); z-index: 2000; justify-content: center; align-items: center; }
-.modal-content { position: relative; max-width: 95%; max-height: 95%; background: #fff; padding: 10px; border-radius: 5px; overflow: hidden; }
-body.dark .modal-content { background: #222; }
-.modal-content img, .modal-content video, .modal-content iframe { display: block; max-width: 100%; max-height: calc(95vh - 40px); /* Account for padding/controls */ object-fit: contain; margin: auto; }
-.modal-content pre { max-width: 90vw; max-height: calc(95vh - 40px); overflow: auto; background: #eee; padding: 15px; border-radius: 5px; color: #333; font-family: monospace; white-space: pre-wrap; word-wrap: break-word; }
-body.dark .modal-content pre { background: #333; color: #eee; }
-.close-modal { position: absolute; top: 10px; right: 15px; font-size: 2em; color: #fff; cursor: pointer; text-shadow: 0 0 5px black; z-index: 2010; }
-#progress-container { width: 100%; background: var(--glass-bg); border-radius: 10px; margin: 15px 0; display: none; }
-#progress-bar { width: 0%; height: 20px; background: var(--primary); border-radius: 10px; transition: width 0.3s ease; text-align: center; color: white; line-height: 20px; }
-.breadcrumbs { margin-bottom: 20px; font-size: 1.1em; }
-.breadcrumbs a { color: var(--accent); text-decoration: none; }
-.breadcrumbs a:hover { text-decoration: underline; }
-.breadcrumbs span { margin: 0 5px; color: #aaa; }
-body.dark .breadcrumbs a { color: var(--secondary); }
-.form-inline { display: flex; align-items: center; margin-top: 15px; }
-.form-inline input[type="text"] { flex-grow: 1; margin: 0 10px 0 0; }
-.form-inline button { flex-shrink: 0; }
-.folder-icon { font-size: 4em; color: var(--folder-color); } /* Simple folder icon */
+body {
+    font-family: 'Inter', sans-serif;
+    background: var(--background-light);
+    color: var(--text-light);
+    line-height: 1.6;
+}
+body.dark {
+    background: var(--background-dark);
+    color: var(--text-dark);
+}
+.container {
+    margin: 20px auto;
+    max-width: 1200px;
+    padding: 25px;
+    background: var(--card-bg);
+    border-radius: 20px;
+    box-shadow: var(--shadow);
+}
+body.dark .container {
+    background: var(--card-bg-dark);
+}
+h1 {
+    font-size: 2em;
+    font-weight: 800;
+    text-align: center;
+    margin-bottom: 25px;
+    background: linear-gradient(135deg, var(--primary), var(--accent));
+    -webkit-background-clip: text;
+    color: transparent;
+}
+h2 {
+    font-size: 1.5em;
+    margin-top: 30px;
+    color: var(--text-light);
+}
+body.dark h2 {
+    color: var(--text-dark);
+}
+input, textarea {
+    width: 100%;
+    padding: 14px;
+    margin: 12px 0;
+    border: none;
+    border-radius: 14px;
+    background: var(--glass-bg);
+    color: var(--text-light);
+    font-size: 1.1em;
+    box-shadow: inset 0 3px 10px rgba(0, 0, 0, 0.1);
+}
+body.dark input, body.dark textarea {
+    color: var(--text-dark);
+}
+input:focus, textarea:focus {
+    outline: none;
+    box-shadow: 0 0 0 4px var(--primary);
+}
+.btn {
+    padding: 14px 28px;
+    background: var(--primary);
+    color: white;
+    border: none;
+    border-radius: 14px;
+    cursor: pointer;
+    font-size: 1.1em;
+    font-weight: 600;
+    transition: var(--transition);
+    box-shadow: var(--shadow);
+    display: inline-block;
+    text-decoration: none;
+}
+.btn:hover {
+    transform: scale(1.05);
+    background: #e6415f;
+}
+.download-btn {
+    background: var(--secondary);
+    margin-top: 10px;
+}
+.download-btn:hover {
+    background: #00b8c5;
+}
+.delete-btn {
+    background: var(--delete-color);
+    margin-top: 10px;
+}
+.delete-btn:hover {
+    background: #cc3333;
+}
+.flash {
+    color: var(--secondary);
+    text-align: center;
+    margin-bottom: 15px;
+}
+.file-grid {
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(250px, 1fr));
+    gap: 20px;
+    margin-top: 20px;
+}
+.folder-grid {
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(250px, 1fr));
+    gap: 20px;
+    margin-top: 20px;
+}
+.user-list {
+    margin-top: 20px;
+}
+.user-item {
+    padding: 15px;
+    background: var(--card-bg);
+    border-radius: 16px;
+    margin-bottom: 10px;
+    box-shadow: var(--shadow);
+    transition: var(--transition);
+}
+body.dark .user-item {
+    background: var(--card-bg-dark);
+}
+.user-item:hover {
+    transform: translateY(-5px);
+}
+.user-item a {
+    color: var(--primary);
+    text-decoration: none;
+    font-weight: 600;
+}
+.user-item a:hover {
+    color: var(--accent);
+}
+@media (max-width: 768px) {
+    .file-grid, .folder-grid {
+        grid-template-columns: repeat(2, 1fr);
+    }
+}
+@media (max-width: 480px) {
+    .file-grid, .folder-grid {
+        grid-template-columns: 1fr;
+    }
+}
+.file-item, .folder-item {
+    background: var(--card-bg);
+    padding: 15px;
+    border-radius: 16px;
+    box-shadow: var(--shadow);
+    text-align: center;
+    transition: var(--transition);
+}
+body.dark .file-item, body.dark .folder-item {
+    background: var(--card-bg-dark);
+}
+.file-item:hover, .folder-item:hover {
+    transform: translateY(-5px);
+}
+.file-preview {
+    max-width: 100%;
+    max-height: 200px;
+    object-fit: cover;
+    border-radius: 10px;
+    margin-bottom: 10px;
+    loading: lazy;
+}
+.file-item p, .folder-item p {
+    font-size: 0.9em;
+    margin: 5px 0;
+}
+.file-item a, .folder-item a {
+    color: var(--primary);
+    text-decoration: none;
+}
+.file-item a:hover, .folder-item a:hover {
+    color: var(--accent);
+}
+.modal {
+    display: none;
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    background: rgba(0, 0, 0, 0.85);
+    z-index: 2000;
+    justify-content: center;
+    align-items: center;
+}
+.modal img, .modal video, .modal iframe, .modal pre {
+    max-width: 95%;
+    max-height: 95%;
+    object-fit: contain;
+    border-radius: 20px;
+    box-shadow: var(--shadow);
+}
+#progress-container {
+    width: 100%;
+    background: var(--glass-bg);
+    border-radius: 10px;
+    margin: 15px 0;
+    display: none;
+}
+#progress-bar {
+    width: 0%;
+    height: 20px;
+    background: var(--primary);
+    border-radius: 10px;
+    transition: width 0.3s ease;
+}
 '''
 
-# --- Routes ---
-
 @app.route('/register', methods=['GET', 'POST'])
 def register():
     if request.method == 'POST':
         username = request.form.get('username')
         password = request.form.get('password')
-
-        if not username or not password:
-            flash('Имя пользователя и пароль обязательны!')
-            return redirect(url_for('register'))
-
-        # Basic validation (add more robust checks as needed)
-        if not username.isalnum() or len(username) < 3:
-            flash('Имя пользователя должно быть не менее 3 символов и содержать только буквы и цифры.')
-            return redirect(url_for('register'))
-
         data = load_data()
-
         if username in data['users']:
             flash('Пользователь с таким именем уже существует!')
             return redirect(url_for('register'))
-
+        if not username or not password:
+            flash('Имя пользователя и пароль обязательны!')
+            return redirect(url_for('register'))
         data['users'][username] = {
-            'password': password, # Store plaintext - BAD PRACTICE! Use hashing (e.g., werkzeug.security) in production.
+            'password': password,
             'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
-            'root': {"type": "folder", "name": "/", "children": {}} # Initialize root folder structure
+            'files': [],
+            'folders': []
         }
-        try:
-            save_data(data)
-            session['username'] = username
-            flash('Регистрация прошла успешно!')
-            return redirect(url_for('dashboard'))
-        except Exception as e:
-             flash(f'Ошибка сохранения данных: {e}')
-             return redirect(url_for('register'))
-
-
+        save_data(data)
+        session['username'] = username
+        flash('Регистрация прошла успешно!')
+        return redirect(url_for('dashboard'))
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 <head>
-    <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Регистрация - Zeus Cloud</title>
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
     <style>''' + BASE_STYLE + '''</style>
@@ -359,18 +369,23 @@ def register():
 <body>
     <div class="container">
         <h1>Регистрация в Zeus Cloud</h1>
-        {% with messages = get_flashed_messages() %}{% if messages %}
-            {% for message in messages %}<div class="flash">{{ message }}</div>{% endfor %}
-        {% endif %}{% endwith %}
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
         <form method="POST" id="register-form">
-            <input type="text" name="username" placeholder="Имя пользователя (только буквы и цифры, мин 3)" required pattern="[a-zA-Z0-9]{3,}">
-            <input type="password" name="password" placeholder="Пароль" required>
+            <input type="text" name="username" placeholder="Введите имя пользователя" required>
+            <input type="password" name="password" placeholder="Введите пароль" required>
             <button type="submit" class="btn">Зарегистрироваться</button>
         </form>
         <p style="margin-top: 20px;">Уже есть аккаунт? <a href="{{ url_for('login') }}">Войти</a></p>
     </div>
 </body>
-</html>'''
+</html>
+'''
     return render_template_string(html)
 
 @app.route('/', methods=['GET', 'POST'])
@@ -379,25 +394,17 @@ def login():
         username = request.form.get('username')
         password = request.form.get('password')
         data = load_data()
-
-        # WARNING: Plain text password comparison - VERY INSECURE FOR PRODUCTION
-        if username in data.get('users', {}) and data['users'][username].get('password') == password:
+        if username in data['users'] and data['users'][username]['password'] == password:
             session['username'] = username
-            session['current_path'] = '/' # Reset path on login
-            # Auto-login feature relies on insecure localStorage storage. Use with caution.
             return jsonify({'status': 'success', 'redirect': url_for('dashboard')})
         else:
             return jsonify({'status': 'error', 'message': 'Неверное имя пользователя или пароль!'})
-
-    # If already logged in, redirect to dashboard
-    if 'username' in session:
-        return redirect(url_for('dashboard'))
-
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 <head>
-    <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Zeus Cloud</title>
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
     <style>''' + BASE_STYLE + '''</style>
@@ -406,868 +413,478 @@ def login():
     <div class="container">
         <h1>Zeus Cloud</h1>
         <div id="flash-messages">
-            {% with messages = get_flashed_messages(with_categories=True) %}{% if messages %}
-                {% for category, message in messages %}
-                    <div class="flash{% if category %} flash-{{ category }}{% endif %}">{{ message }}</div>
-                {% endfor %}
-            {% endif %}{% endwith %}
+            {% with messages = get_flashed_messages() %}
+                {% if messages %}
+                    {% for message in messages %}
+                        <div class="flash">{{ message }}</div>
+                    {% endfor %}
+                {% endif %}
+            {% endwith %}
         </div>
         <form method="POST" id="login-form">
-            <input type="text" name="username" placeholder="Имя пользователя" required>
-            <input type="password" name="password" placeholder="Пароль" required>
+            <input type="text" name="username" placeholder="Введите имя пользователя" required>
+            <input type="password" name="password" placeholder="Введите пароль" required>
             <button type="submit" class="btn">Войти</button>
         </form>
         <p style="margin-top: 20px;">Нет аккау��та? <a href="{{ url_for('register') }}">Зарегистрируйтесь</a></p>
     </div>
     <script>
-        // --- Auto Login Attempt ---
         const savedCredentials = JSON.parse(localStorage.getItem('zeusCredentials'));
-        if (savedCredentials && savedCredentials.username && savedCredentials.password) {
-            console.log("Attempting auto-login...");
+        if (savedCredentials) {
             fetch('/', {
                 method: 'POST',
-                headers: {'Content-Type': 'application/x-www-form-urlencoded',},
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
                 body: `username=${encodeURIComponent(savedCredentials.username)}&password=${encodeURIComponent(savedCredentials.password)}`
             })
             .then(response => response.json())
             .then(data => {
                 if (data.status === 'success') {
-                    console.log("Auto-login successful.");
                     window.location.href = data.redirect;
-                } else {
-                    console.log("Auto-login failed:", data.message);
-                    // Clear bad credentials to avoid loops
-                    localStorage.removeItem('zeusCredentials');
                 }
             })
-            .catch(error => console.error('Auto-login fetch error:', error));
+            .catch(error => console.error('Ошибка автовхода:', error));
         }
-
-        // --- Manual Login Form Submission ---
         document.getElementById('login-form').addEventListener('submit', function(e) {
             e.preventDefault();
             const formData = new FormData(this);
-            const username = formData.get('username');
-            const password = formData.get('password');
             fetch('/', {
                 method: 'POST',
                 body: formData
             })
             .then(response => response.json())
             .then(data => {
-                const flashDiv = document.getElementById('flash-messages');
-                flashDiv.innerHTML = ''; // Clear previous messages
                 if (data.status === 'success') {
-                    // Store credentials for potential auto-login (INSECURE)
+                    const username = formData.get('username');
+                    const password = formData.get('password');
                     localStorage.setItem('zeusCredentials', JSON.stringify({ username, password }));
                     window.location.href = data.redirect;
                 } else {
-                    flashDiv.innerHTML = `<div class="flash flash-error">${data.message}</div>`;
+                    document.getElementById('flash-messages').innerHTML = `<div class="flash">${data.message}</div>`;
                 }
             })
             .catch(error => {
-                console.error('Login fetch error:', error);
-                document.getElementById('flash-messages').innerHTML = `<div class="flash flash-error">Ошибка соединения!</div>`;
+                document.getElementById('flash-messages').innerHTML = `<div class="flash">Ошибка соединения!</div>`;
             });
         });
     </script>
 </body>
-</html>'''
+</html>
+'''
     return render_template_string(html)
 
-@app.route('/dashboard')
-def dashboard():
+@app.route('/dashboard', methods=['GET', 'POST'])
+@app.route('/dashboard/<path:folder_path>', methods=['GET', 'POST'])
+def dashboard(folder_path=''):
     if 'username' not in session:
         flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
-
     username = session['username']
     data = load_data()
-    user_data = data['users'].get(username)
-
-    if not user_data:
+    if username not in data['users']:
         session.pop('username', None)
-        session.pop('current_path', None)
         flash('Пользователь не найден!')
         return redirect(url_for('login'))
-
-    # Normalize and validate path
-    req_path = request.args.get('path', '/')
-    if not req_path.startswith('/'):
-        req_path = '/' + req_path
-    # Basic path cleaning (consider more robust validation)
-    current_path = '/' + '/'.join(p for p in req_path.strip('/').split('/') if p and p != '..')
-    session['current_path'] = current_path # Store cleaned path in session
-
-    user_root = get_user_data_root(data, username) # Ensures root exists
-    current_node = get_node_by_path(user_root, current_path)
-
-    if current_node is None or current_node['type'] != 'folder':
-        flash('Указанный путь не найден или не является папкой.')
-        # Redirect to last valid path or root
-        last_valid_path = session.get('current_path', '/')
-        if last_valid_path == current_path: # Avoid redirect loop if root is somehow invalid
-            last_valid_path = '/'
-            session['current_path'] = '/'
-        return redirect(url_for('dashboard', path=last_valid_path))
-
-    items = sorted(current_node['children'].values(), key=lambda x: (x['type'] != 'folder', x.get('original_filename', x['name']).lower()))
-
-    # --- Breadcrumbs ---
-    breadcrumbs = []
-    path_parts = [p for p in current_path.strip('/').split('/') if p]
-    cumulative_path = '/'
-    breadcrumbs.append({'name': 'Корень', 'path': '/'})
-    for i, part in enumerate(path_parts):
-        cumulative_path += part + ('/' if i < len(path_parts) - 1 else '')
-        breadcrumbs.append({'name': part, 'path': url_for('dashboard', path=cumulative_path)})
-
+    current_folder = folder_path if folder_path else 'root'
+    user_folders = [f for f in data['users'][username].get('folders', []) if f['parent'] == current_folder]
+    user_files = [f for f in data['users'][username].get('files', []) if f['folder'] == current_folder]
+    user_folders = sorted(user_folders, key=lambda x: x['name'])
+    user_files = sorted(user_files, key=lambda x: x['upload_date'], reverse=True)
+    if request.method == 'POST':
+        if 'create_folder' in request.form:
+            folder_name = request.form.get('folder_name')
+            if not folder_name:
+                flash('Имя папки обязательно!')
+                return redirect(url_for('dashboard', folder_path=folder_path))
+            folder_id = str(uuid.uuid4())
+            folder_path_full = f"{current_folder}/{folder_name}" if current_folder != 'root' else folder_name
+            data['users'][username].setdefault('folders', []).append({
+                'id': folder_id,
+                'name': folder_name,
+                'parent': current_folder,
+                'path': folder_path_full,
+                'created_at",
+                "created_at": datetime.now().strftime('%Y-%m-%d %H:%M:%S')
+            })
+            save_data(data)
+            flash('Папка успешно создана!')
+            return redirect(url_for('dashboard', folder_path=folder_path))
+        files = request.files.getlist('files')
+        if files and len(files) > 20:
+            flash('Максимум 20 файлов за раз!')
+            return redirect(url_for('dashboard', folder_path=folder_path))
+        if files:
+            os.makedirs('uploads', exist_ok=True)
+            api = HfApi()
+            temp_files = []
+            for file in files:
+                if file and file.filename:
+                    original_filename = secure_filename(file.filename)
+                    unique_filename = generate_unique_filename(original_filename)
+                    temp_path = os.path.join('uploads', unique_filename)
+                    file.save(temp_path)
+                    temp_files.append((temp_path, unique_filename, original_filename))
+            for temp_path, unique_filename, original_filename in temp_files:
+                file_path = f"cloud_files/{username}/{unique_filename}"
+                api.upload_file(
+                    path_or_fileobj=temp_path,
+                    path_in_repo=file_path,
+                    repo_id=REPO_ID,
+                    repo_type="dataset",
+                    token=HF_TOKEN_WRITE,
+                    commit_message=f"Uploaded file for {username}"
+                )
+                file_info = {
+                    'filename': original_filename,
+                    'unique_filename': unique_filename,
+                    'path': file_path,
+                    'type': get_file_type(original_filename),
+                    'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
+                    'folder': current_folder
+                }
+                data['users'][username]['files'].append(file_info)
+                if os.path.exists(temp_path):
+                    os.remove(temp_path)
+            save_data(data)
+            flash('Файлы успешно загружены!')
+        return redirect(url_for('dashboard', folder_path=folder_path))
+    parent_folder = 'root' if current_folder == 'root' else '/'.join(current_folder.split('/')[:-1])
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 <head>
-    <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Панель управления - Zeus Cloud</title>
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
-    <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
     <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
         <h1>Панель управления Zeus Cloud</h1>
-        <p>Пользователь: {{ username }} | <a href="{{ url_for('logout') }}" id="logout-btn">Выйти</a></p>
-
-        {% with messages = get_flashed_messages(with_categories=True) %}{% if messages %}
-            {% for category, message in messages %}
-                <div class="flash flash-{{ category }}">{{ message }}</div>
-            {% endfor %}
-        {% endif %}{% endwith %}
-
-        <!-- Breadcrumbs -->
-        <div class="breadcrumbs">
-            {% for crumb in breadcrumbs %}
-                {% if not loop.last %}
-                    <a href="{{ crumb.path }}">{{ crumb.name }}</a><span>/</span>
-                {% else %}
-                    <strong>{{ crumb.name }}</strong>
-                {% endif %}
-            {% endfor %}
-        </div>
-
-        <!-- Create Folder Form -->
-        <form method="POST" action="{{ url_for('create_folder') }}" class="form-inline">
-            <input type="hidden" name="current_path" value="{{ current_path }}">
-            <input type="text" name="folder_name" placeholder="Имя новой папки" required pattern="[a-zA-Z0-9_ -]+">
-            <button type="submit" class="btn folder-btn">Создать папку</button>
+        <p>Пользователь: {{ username }}</p>
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
+        <h2>Текущая папка: {{ current_folder }}</h2>
+        {% if current_folder != 'root' %}
+            <a href="{{ url_for('dashboard', folder_path=parent_folder) }}" class="btn">Назад</a>
+        {% endif %}
+        <form method="POST" id="create-folder-form">
+            <input type="text" name="folder_name" placeholder="Имя новой папки" required>
+            <button type="submit" name="create_folder" class="btn">Создать папку</button>
         </form>
-
-        <!-- Upload Form -->
-        <form id="upload-form" method="POST" action="{{ url_for('upload_files') }}" enctype="multipart/form-data" style="margin-top: 15px;">
-            <input type="hidden" name="current_path" value="{{ current_path }}">
+        <form id="upload-form" method="POST" enctype="multipart/form-data">
             <input type="file" name="files" multiple required>
             <button type="submit" class="btn" id="upload-btn">Загрузить файлы</button>
         </form>
         <div id="progress-container">
-            <div id="progress-bar">0%</div>
+            <div id="progress-bar"></div>
         </div>
-
-        <h2 style="margin-top: 30px;">Содержимое: {{ current_path }}</h2>
+        <h2 style="margin-top: 30px;">Папки</h2>
+        <div class="folder-grid">
+            {% for folder in user_folders %}
+                <div class="folder-item">
+                    <a href="{{ url_for('dashboard', folder_path=folder['path']) }}">{{ folder['name'] }}</a>
+                    <p>{{ folder['created_at'] }}</p>
+                    <a href="{{ url_for('delete_folder', folder_id=folder['id']) }}" class="btn delete-btn" onclick="return confirm('Вы уверены, что хотите удалить папку {{ folder['name'] }} и все её содержимое?');">Удалить</a>
+                </div>
+            {% endfor %}
+            {% if not user_folders %}
+                <p>Папок пока нет.</p>
+            {% endif %}
+        </div>
+        <h2 style="margin-top: 30px;">Файлы</h2>
+        <p style="text-align: center; margin-top: 10px; color: var(--accent);">Ваши файлы под надежной защитой квантовой криптографии</p>
         <div class="file-grid">
-            {% for item in items %}
-            <div class="item-card">
-                {% if item.type == 'folder' %}
-                    <a href="{{ url_for('dashboard', path=current_path.rstrip('/') + '/' + item.name) }}" class="item-preview folder-icon" title="Открыть папку {{ item.name }}">
-                         <i class="fas fa-folder"></i>
-                    </a>
-                    <p><strong>{{ item.name }}</strong></p>
-                    <div class="actions">
-                         <a href="{{ url_for('dashboard', path=current_path.rstrip('/') + '/' + item.name) }}" class="btn folder-btn" style="font-size: 0.9em;">Открыть</a>
-                         <form method="POST" action="{{ url_for('delete_item', item_path=current_path.rstrip('/') + '/' + item.name) }}" style="display: inline;" onsubmit="return confirm('Удалить папку {{ item.name }} и все ее содержимое?');">
-                             <button type="submit" class="btn delete-btn" style="font-size: 0.9em;">Удалить</button>
-                         </form>
-                    </div>
-                {% else %} {# item.type == 'file' #}
-                    {% set preview_type = item.preview_type %}
-                    {% set hf_path = item.storage_path %}
-                    {% set download_url = url_for('download_file', file_storage_path=hf_path.replace('/', '--'), original_filename=item.original_filename) %}
-                    {% set view_url = url_for('view_file', file_storage_path=hf_path.replace('/', '--')) %}
-                    {% set raw_hf_url = "https://huggingface.co/datasets/" + repo_id + "/resolve/main/" + hf_path %}
-
-                    <div class="item-preview" onclick="openModal('{{ raw_hf_url }}', '{{ preview_type }}', '{{ view_url if preview_type == 'text' }}')" title="Предпросмотр {{ item.original_filename }}">
-                        {% if preview_type == 'image' %}
-                            <img src="{{ raw_hf_url }}?download=true" alt="{{ item.original_filename }}" loading="lazy" style="width:100%; height:100%; object-fit: cover;">
-                        {% elif preview_type == 'video' %}
-                            <video preload="metadata" muted style="width:100%; height:100%; object-fit: cover;">
-                                <source src="{{ raw_hf_url }}#t=0.5" type="{{ item.mime_type or 'video/mp4' }}"> <!-- #t=0.5 for thumbnail -->
-                            </video>
-                         {% elif preview_type == 'pdf' %}
-                             <i class="fas fa-file-pdf" style="font-size: 4em; color: #e74c3c;"></i>
-                         {% elif preview_type == 'text' %}
-                             <i class="fas fa-file-alt" style="font-size: 4em; color: #3498db;"></i>
-                         {% elif preview_type == 'audio' %}
-                             <i class="fas fa-file-audio" style="font-size: 4em; color: #9b59b6;"></i>
-                         {% else %}
-                             <i class="fas fa-file" style="font-size: 4em; color: #95a5a6;"></i>
-                         {% endif %}
-                    </div>
-                    <p title="{{ item.original_filename }}">{{ item.original_filename | truncate(25, True) }}</p>
-                    <p style="font-size: 0.8em; color: #888;">{{ item.upload_date }}</p>
-                    <div class="actions">
-                         <a href="{{ download_url }}" class="btn download-btn" style="font-size: 0.9em;">Скачать</a>
-                         <form method="POST" action="{{ url_for('delete_item', item_path=current_path.rstrip('/') + '/' + item.name) }}" style="display: inline;" onsubmit="return confirm('Удалить файл {{ item.original_filename }}?');">
-                              <button type="submit" class="btn delete-btn" style="font-size: 0.9em;">Удалить</button>
-                         </form>
-                    </div>
-                {% endif %}
-            </div>
+            {% for file in user_files %}
+                <div class="file-item">
+                    {% if file['type'] == 'video' %}
+                        <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}', true)">
+                            <source src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" type="video/mp4">
+                        </video>
+                    {% elif file['type'] == 'image' %}
+                        <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
+                    {% elif file['type'] == 'pdf' %}
+                        <iframe class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}#toolbar=0" loading="lazy" onclick="openModal(this.src, false, true)"></iframe>
+                    {% elif file['type'] == 'txt' %}
+                        {% set content = get_text_file_content(file['path']) %}
+                        <pre class="file-preview" style="text-align: left; overflow: auto;" onclick="openModal('data:text/plain;base64,{{ content }}', false, false, true)">{{ content | b64decode | truncate(200) }}</pre>
+                    {% else %}
+                        <p>{{ file['filename'] }}</p>
+                    {% endif %}
+                    <p>{{ file['upload_date'] }}</p>
+                    <a href="{{ url_for('download_file', unique_filename=file['unique_filename'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
+                    <a href="{{ url_for('delete_file', unique_filename=file['unique_filename']) }}" class="btn delete-btn" onclick="return confirm('Вы уверены, что хотите удалить файл {{ file['filename'] }}?');">Удалить</a>
+                </div>
             {% endfor %}
-            {% if not items %}
-                <p>Эта папка пуста.</p>
+            {% if not user_files %}
+                <p>Файлов пока нет.</p>
             {% endif %}
         </div>
-
-        <div style="margin-top: 40px; padding: 15px; background: var(--glass-bg); border-radius: 15px;">
-            <h2 style="margin-top: 0;">Добавить на главный экран</h2>
-            <p>Для быстрого доступа добавьте Zeus Cloud на главный экра�� телефона (Android/Chrome: Меню -> Добавить на главный экран; iOS/Safari: Поделиться -> На экран «Домой»).</p>
+        <h2 style="margin-top: 30px;">Добавить на главный экран</h2>
+        <p>Для быстрого доступа к Zeus Cloud, вы можете добавить это приложение на главный экран вашего телефона:</p>
+        <div style="margin-top: 10px;">
+            <h3>Для пользователей Android:</h3>
+            <ol>
+                <li>Откройте Zeus Cloud в браузере Chrome.</li>
+                <li>Нажмите на меню браузера (обычно три точки вверху справа).</li>
+                <li>Выберите <strong>"Добавить на главный экран"</strong>.</li>
+                <li>Подтвердите добавление, и иконка приложения появится на вашем главном экране.</li>
+            </ol>
         </div>
-    </div>
-
-    <!-- Modal Structure -->
-    <div class="modal" id="mediaModal" onclick="closeModalIfBackground(event)">
-        <span class="close-modal" onclick="closeModal()">×</span>
-        <div class="modal-content" id="modalContentContainer">
-             <div id="modalContent"></div>
+        <div style="margin-top: 10px;">
+            <h3>Для пользователей iOS (iPhone/iPad):</h3>
+            <ol>
+                <li>Откройте Zeus Cloud в браузере Safari.</li>
+                <li>Нажмите кнопку <strong>"Поделиться"</strong> (квадрат со стрелкой вверх) в нижней части экрана.</li>
+                <li>Прокрутите список опций вниз и выберите <strong>"Добавить на экран «Домой»"</strong>.</li>
+                <li>В правом верхнем углу нажмите <strong>"Добавить"</strong>. Иконка приложения появится на вашем главном экране.</li>
+            </ol>
         </div>
+        <a href="{{ url_for('logout') }}" class="btn" style="margin-top: 20px;" id="logout-btn">Выйти</a>
+    </div>
+    <div class="modal" id="mediaModal" onclick="closeModal(event)">
+        <div id="modalContent"></div>
     </div>
-
     <script>
-        const repoId = "{{ repo_id }}";
-        const hfTokenRead = "{{ HF_TOKEN_READ or '' }}"; // Pass token if needed for direct access
-
-        function getDirectUrl(rawHfUrl) {
-            let url = new URL(rawHfUrl);
-            url.searchParams.set('download', 'true'); // Ensure download param for direct access
-            // Add token header via fetch if needed, or query param if simpler (less secure)
-            // For simplicity here, we assume public repo or token not needed directly in URL
-            // If using fetch: headers: { 'Authorization': `Bearer ${hfTokenRead}` }
-            return url.toString();
-        }
-
-        function openModal(rawHfUrl, previewType, textViewUrl) {
+        function openModal(src, isVideo, isIframe = false, isText = false) {
             const modal = document.getElementById('mediaModal');
             const modalContent = document.getElementById('modalContent');
-            modalContent.innerHTML = ''; // Clear previous content
-
-            const directUrl = getDirectUrl(rawHfUrl);
-
-            if (previewType === 'image') {
-                modalContent.innerHTML = `<img src="${directUrl}" alt="Preview">`;
-            } else if (previewType === 'video') {
-                modalContent.innerHTML = `<video controls autoplay style="max-width: 100%; max-height: 85vh;"><source src="${directUrl}" type="video/mp4">Your browser does not support the video tag.</video>`;
-            } else if (previewType === 'pdf') {
-                 modalContent.innerHTML = `<iframe src="${directUrl}" style="width: 90vw; height: 85vh; border: none;" title="PDF Preview"></iframe>`;
-            } else if (previewType === 'text') {
-                fetch(textViewUrl) // Fetch text content from our server route
-                    .then(response => {
-                        if (!response.ok) throw new Error(`HTTP error! status: ${response.status}`);
-                        return response.text();
-                    })
+            if (isVideo) {
+                modalContent.innerHTML = `<video controls autoplay><source src="${src}" type="video/mp4"></video>`;
+            } else if (isIframe) {
+                modalContent.innerHTML = `<iframe src="${src}" style="width: 95%; height: 95%;"></iframe>`;
+            } else if (isText) {
+                fetch(src)
+                    .then(response => response.text())
                     .then(text => {
-                        modalContent.innerHTML = `<pre>${escapeHtml(text)}</pre>`;
-                    })
-                    .catch(error => {
-                        console.error("Error fetching text content:", error);
-                        modalContent.innerHTML = `<p style='color: red;'>Не удалось загрузить текстовое содержимое: ${error.message}</p>`;
+                        modalContent.innerHTML = `<pre style="text-align: left; overflow: auto; max-width: 95%; max-height: 95%;">${text}</pre>`;
                     });
-            } else if (previewType === 'audio') {
-                // Basic audio player
-                modalContent.innerHTML = `<audio controls autoplay style="width: 100%;"><source src="${directUrl}">Your browser does not support the audio element.</audio>`;
-            }
-            else {
-                // Fallback for other types or failed previews
-                modalContent.innerHTML = '<p>Предпросмотр для этого типа файла недоступен.</p>';
+            } else {
+                modalContent.innerHTML = `<img src="${src}">`;
             }
             modal.style.display = 'flex';
         }
-
-        function closeModal() {
+        function closeModal(event) {
             const modal = document.getElementById('mediaModal');
-            const modalContent = document.getElementById('modalContent');
-            modal.style.display = 'none';
-            // Stop any media playing
-            const video = modalContent.querySelector('video');
-            if (video) video.pause();
-            const audio = modalContent.querySelector('audio');
-            if (audio) audio.pause();
-            modalContent.innerHTML = ''; // Clear content
-        }
-
-        function closeModalIfBackground(event) {
-             if (event.target === document.getElementById('mediaModal')) {
-                 closeModal();
-             }
-        }
-
-        // Utility to escape HTML for displaying text content safely
-        function escapeHtml(unsafe) {
-            if (!unsafe) return '';
-            return unsafe
-                 .replace(/&/g, "&")
-                 .replace(/</g, "<")
-                 .replace(/>/g, ">")
-                 .replace(/"/g, """)
-                 .replace(/'/g, "'");
+            if (event.target === modal) {
+                modal.style.display = 'none';
+                const video = modal.querySelector('video');
+                if (video) {
+                    video.pause();
+                }
+                modalContent.innerHTML = '';
+            }
         }
-
-
-        // --- Upload Progress ---
         const form = document.getElementById('upload-form');
         const progressBar = document.getElementById('progress-bar');
         const progressContainer = document.getElementById('progress-container');
         const uploadBtn = document.getElementById('upload-btn');
-
         form.addEventListener('submit', function(e) {
             e.preventDefault();
             const files = form.querySelector('input[type="file"]').files;
+            if (files.length > 20) {
+                alert('Максимум 20 файлов за раз!');
+                return;
+            }
             if (files.length === 0) {
-                 alert('Пожалуйста, выберите файлы для загрузки.');
-                 return;
+                alert('Пожалуйста, выберите файлы для загрузки.');
+                return;
             }
-             if (files.length > 20) { // Example limit
-                 alert('Максимум 20 файлов за одну загрузку.');
-                 return;
-             }
-
-
             const formData = new FormData(form);
             progressContainer.style.display = 'block';
             progressBar.style.width = '0%';
-            progressBar.textContent = '0%';
             uploadBtn.disabled = true;
-
             const xhr = new XMLHttpRequest();
-            // Use the correct action URL from the form
-            xhr.open('POST', form.action, true);
-
+            xhr.open('POST', '/dashboard{{ current_folder != 'root' ? '/' + current_folder : '' }}', true);
             xhr.upload.onprogress = function(event) {
                 if (event.lengthComputable) {
-                    const percent = Math.round((event.loaded / event.total) * 100);
+                    const percent = (event.loaded / event.total) * 100;
                     progressBar.style.width = percent + '%';
-                    progressBar.textContent = percent + '%';
                 }
             };
-
             xhr.onload = function() {
                 uploadBtn.disabled = false;
                 progressContainer.style.display = 'none';
                 progressBar.style.width = '0%';
-                progressBar.textContent = '0%';
-                if (xhr.status >= 200 && xhr.status < 300) {
-                    // Success - redirect or update UI dynamically
-                    // Check response for redirect URL or messages
-                    try {
-                        const response = JSON.parse(xhr.responseText);
-                        if (response.status === 'success') {
-                             window.location.href = response.redirect || window.location.href; // Redirect to specified path or reload current
-                        } else {
-                            alert('Ошибка загрузки: ' + response.message);
-                        }
-                    } catch (e) {
-                        // If response wasn't JSON, maybe just reload
-                        window.location.reload();
-                    }
+                if (xhr.status === 200) {
+                    location.reload();
                 } else {
-                     // Handle server-side errors reported in response
-                     let errorMsg = 'Ошибка загрузки!';
-                     try {
-                         const response = JSON.parse(xhr.responseText);
-                         if(response.message) errorMsg = response.message;
-                     } catch(e) {/* ignore json parse error */}
-                     alert(errorMsg + ` (Статус: ${xhr.status})`);
-                 }
+                    alert('Ошибка загрузки!');
+                }
             };
-
             xhr.onerror = function() {
-                alert('Ошибка сети при загрузке!');
+                alert('Ошибка соединения!');
                 progressContainer.style.display = 'none';
                 progressBar.style.width = '0%';
-                 progressBar.textContent = '0%';
                 uploadBtn.disabled = false;
             };
-
             xhr.send(formData);
         });
-
-        // --- Logout ---
         document.getElementById('logout-btn').addEventListener('click', function(e) {
             e.preventDefault();
-            localStorage.removeItem('zeusCredentials'); // Clear stored credentials on logout
-            window.location.href = this.href; // Proceed to logout route
+            localStorage.removeItem('zeusCredentials');
+            window.location.href = '/logout';
         });
     </script>
 </body>
-</html>'''
-    return render_template_string(html, username=username, items=items, current_path=current_path, breadcrumbs=breadcrumbs, repo_id=REPO_ID, HF_TOKEN_READ=HF_TOKEN_READ)
-
-
-@app.route('/upload_files', methods=['POST'])
-def upload_files():
-    if 'username' not in session:
-        return jsonify({'status': 'error', 'message': 'Требуется аутентификация'}), 401
-
-    username = session['username']
-    current_path_str = request.form.get('current_path', '/')
-    files = request.files.getlist('files')
-
-    if not files or all(not f.filename for f in files):
-        return jsonify({'status': 'error', 'message': 'Файлы не выбраны.'}), 400
-
-    if len(files) > 20: # Consistent limit check
-         return jsonify({'status': 'error', 'message': 'Максимум 20 файлов за раз.'}), 400
-
-    data = load_data()
-    user_root = get_user_data_root(data, username)
-    current_folder_node = get_node_by_path(user_root, current_path_str)
-
-    if not current_folder_node or current_folder_node['type'] != 'folder':
-        return jsonify({'status': 'error', 'message': 'Недопустимый путь для загрузки.'}), 400
-
-    uploads_dir = Path('uploads') / username / current_path_str.strip('/')
-    uploads_dir.mkdir(parents=True, exist_ok=True)
-    api = HfApi()
-    upload_success = True
-    error_messages = []
-    uploaded_files_info = []
-
-    for file in files:
-        if file and file.filename:
-            original_filename = secure_filename(file.filename) # Clean original name for display
-            if not original_filename:
-                error_messages.append(f"Пропущено: Недопустимое имя файла у одного из файлов.")
-                continue # Skip files with invalid names after securing
-
-            storage_filename = generate_unique_filename(original_filename)
-            # Construct HF path: base/username/current_folder_structure/unique_filename.ext
-            hf_relative_path = Path(current_path_str.strip('/')) / storage_filename
-            hf_full_path = f"cloud_files/{username}/{hf_relative_path.as_posix()}" # Use forward slashes for HF
-
-            temp_path = uploads_dir / storage_filename # Save with unique name locally too
-            try:
-                file.save(temp_path)
-
-                api.upload_file(
-                    path_or_fileobj=str(temp_path),
-                    path_in_repo=hf_full_path,
-                    repo_id=REPO_ID,
-                    repo_type="dataset",
-                    token=HF_TOKEN_WRITE,
-                    commit_message=f"User {username} uploaded {original_filename} to {current_path_str}"
-                )
-
-                file_info = {
-                    'type': 'file',
-                    'name': storage_filename, # Use unique name as key in JSON children
-                    'original_filename': original_filename,
-                    'storage_path': hf_full_path, # Store the full HF path
-                    'preview_type': get_preview_type(original_filename),
-                    'mime_type': mimetypes.guess_type(original_filename)[0] or 'application/octet-stream',
-                    'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-                    # Add size if needed: 'size': temp_path.stat().st_size
-                }
-                uploaded_files_info.append(file_info)
-                logging.info(f"Successfully uploaded '{original_filename}' as '{storage_filename}' to {hf_full_path}")
-
-            except Exception as e:
-                upload_success = False
-                error_messages.append(f"Ошибка при загрузке {original_filename}: {e}")
-                logging.error(f"Failed to upload {original_filename} for {username}: {e}", exc_info=True)
-            finally:
-                # Clean up temp file regardless of success
-                if temp_path.exists():
-                    try:
-                        temp_path.unlink()
-                    except OSError as e:
-                        logging.error(f"Error removing temp file {temp_path}: {e}")
-
-    # Update data structure only if uploads occurred
-    if uploaded_files_info:
-         for file_info in uploaded_files_info:
-              # Check for name collision (should be rare with UUIDs)
-              if file_info['name'] in current_folder_node['children']:
-                   # Handle collision - maybe add another suffix or log error
-                   logging.warning(f"Filename collision detected for {file_info['name']} in {current_path_str}. Overwriting/Skipping.")
-              current_folder_node['children'][file_info['name']] = file_info
-         try:
-            save_data(data)
-         except Exception as e:
-            upload_success = False
-            error_messages.append(f"Критическая ошибка: Не удалось сохранить информацию о загруженных файлах: {e}")
-
+</html>
+'''
+    return render_template_string(html, username=username, user_files=user_files, user_folders=user_folders, repo_id=REPO_ID, current_folder=current_folder, parent_folder=parent_folder)
 
-    # Cleanup empty temp folders if necessary (optional)
+def get_text_file_content(file_path):
     try:
-        if uploads_dir.exists() and not any(uploads_dir.iterdir()):
-            uploads_dir.rmdir()
-        # Clean parent dirs if they become empty? More complex logic needed.
-    except OSError as e:
-        logging.warning(f"Could not clean up temporary directory {uploads_dir}: {e}")
-
-
-    if not upload_success:
-         flash('Некоторые файлы не удалось загрузить. ' + ' '.join(error_messages), 'error')
-    elif error_messages: # Uploads happened but with non-critical issues
-         flash('Файлы загружены, но были проблемы: ' + ' '.join(error_messages), 'warning')
-    else:
-         flash('Файлы успешно загружены!', 'success')
-
-    # Return JSON for XHR request, redirect URL tells JS where to go
-    redirect_url = url_for('dashboard', path=current_path_str)
-    if upload_success:
-         return jsonify({'status': 'success', 'message': 'Загрузка завершена.', 'redirect': redirect_url})
-    else:
-         # Even if saving failed, try to redirect back
-         return jsonify({'status': 'partial_error', 'message': 'Ошибка во время загрузки или сохранения. ' + ' '.join(error_messages), 'redirect': redirect_url}), 500
-
+        file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}?download=true"
+        headers = {}
+        if HF_TOKEN_READ:
+            headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
+        response = requests.get(file_url, headers=headers)
+        response.raise_for_status()
+        content = response.text
+        return b64encode(content.encode('utf-8')).decode('utf-8')
+    except Exception as e:
+        logging.error(f"Error fetching text file content: {e}")
+        return b64encode("Ошибка загрузки содержимого файла.".encode('utf-8')).decode('utf-8')
 
-@app.route('/create_folder', methods=['POST'])
-def create_folder():
+@app.route('/download/<unique_filename>/<filename>')
+def download_file(unique_filename, filename):
     if 'username' not in session:
-        flash('Требуется аутентификация', 'error')
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
-
     username = session['username']
-    current_path_str = request.form.get('current_path', '/')
-    new_folder_name = request.form.get('folder_name', '').strip()
-
-    # Basic validation
-    if not new_folder_name:
-        flash('Имя папки не может быть пустым.', 'error')
-        return redirect(url_for('dashboard', path=current_path_str))
-    # More robust validation - avoid slashes, '..', etc.
-    if '/' in new_folder_name or new_folder_name == '.' or new_folder_name == '..':
-        flash('Недопустимое имя папки.', 'error')
-        return redirect(url_for('dashboard', path=current_path_str))
-    # Use secure_filename logic or a stricter pattern
-    safe_folder_name = secure_filename(new_folder_name)
-    if not safe_folder_name or safe_folder_name != new_folder_name: # Check if secure_filename changed it significantly
-        flash(f'Имя папки было изменено на "{safe_folder_name}" из-за недопустимых символов.', 'warning')
-        # Decide whether to proceed with safe_folder_name or reject
-        # For now, let's reject if it was changed, forcing user to use valid chars
-        if safe_folder_name != new_folder_name:
-             flash('Пожалуйста, используйте только буквы, цифры, пробелы, дефисы и подчеркивания для имени папки.', 'error')
-             return redirect(url_for('dashboard', path=current_path_str))
-
-
     data = load_data()
-    user_root = get_user_data_root(data, username)
-    parent_node = get_node_by_path(user_root, current_path_str)
-
-    if not parent_node or parent_node['type'] != 'folder':
-        flash('Недопустимый родительский путь.', 'error')
-        return redirect(url_for('dashboard', path='/')) # Redirect to root safely
-
-    if safe_folder_name in parent_node['children']:
-        flash(f'Папка или файл с именем "{safe_folder_name}" уже существует.', 'error')
-        return redirect(url_for('dashboard', path=current_path_str))
-
-    parent_node['children'][safe_folder_name] = {
-        "type": "folder",
-        "name": safe_folder_name,
-        "children": {}
-    }
-
+    if username not in data['users']:
+        session.pop('username', None)
+        flash('Пользователь не найден!')
+        return redirect(url_for('login'))
+    user_files = data['users'][username]['files']
+    file_info = next((file for file in user_files if file['unique_filename'] == unique_filename), None)
+    if not file_info:
+        is_admin_route = request.referrer and 'admhosto' in request.referrer
+        if not is_admin_route:
+            flash('У вас нет доступа к этому файлу!')
+            return redirect(url_for('dashboard'))
+    file_path = file_info['path'] if file_info else f"cloud_files/{username}/{unique_filename}"
+    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}?download=true"
     try:
-        save_data(data)
-        flash(f'Папка "{safe_folder_name}" успешно создана.', 'success')
+        api = HfApi()
+        headers = {}
+        if HF_TOKEN_READ:
+            headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
+        response = requests.get(file_url, headers=headers, stream=True)
+        response.raise_for_status()
+        file_content = BytesIO(response.content)
+        return send_file(
+            file_content,
+            as_attachment=True,
+            download_name=filename,
+            mimetype='application/octet-stream'
+        )
+    except requests.exceptions.RequestException as e:
+        logging.error(f"Error downloading file from HF: {e}")
+        flash('Ошибка скачивания файла!')
+        if request.referrer and 'admhosto' in request.referrer:
+            return redirect(url_for('admin_user_files', username=username))
+        else:
+            return redirect(url_for('dashboard'))
     except Exception as e:
-        flash(f'Ошибка при создании папки: {e}', 'error')
-
-    return redirect(url_for('dashboard', path=current_path_str))
-
+        logging.error(f"Unexpected error during download: {e}")
+        flash('Произошла непредвиденная ошибка при скачивании файла.')
+        if request.referrer and 'admhosto' in request.referrer:
+            return redirect(url_for('admin_user_files', username=username))
+        else:
+            return redirect(url_for('dashboard'))
 
-@app.route('/delete_item/<path:item_path>', methods=['POST'])
-def delete_item(item_path):
+@app.route('/delete/<unique_filename>')
+def delete_file(unique_filename):
     if 'username' not in session:
-        flash('Требуется аутентификация', 'error')
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
-
     username = session['username']
-    # Normalize path
-    full_item_path = '/' + item_path.strip('/')
-
     data = load_data()
-    user_root = get_user_data_root(data, username)
-
-    parent_node, item_name = get_parent_node(user_root, full_item_path)
-
-    if parent_node is None or item_name not in parent_node['children']:
-        flash('Элемент не найден.', 'error')
-         # Redirect to where the user likely was
-        parent_redirect_path = '/'.join(full_item_path.split('/')[:-1]) or '/'
-        return redirect(url_for('dashboard', path=parent_redirect_path))
-
-
-    item_to_delete = parent_node['children'][item_name]
-    item_type = item_to_delete['type']
-
+    if username not in data['users']:
+        session.pop('username', None)
+        flash('Пользователь не найден!')
+        return redirect(url_for('login'))
+    user_files = data['users'][username]['files']
+    file_to_delete = next((file for file in user_files if file['unique_filename'] == unique_filename), None)
+    if not file_to_delete:
+        flash('Файл не найден!')
+        return redirect(url_for('dashboard'))
     try:
-        if item_type == 'file':
-            hf_storage_path = item_to_delete.get('storage_path')
-            if hf_storage_path:
-                delete_hf_object(hf_storage_path, is_folder=False)
-            else:
-                 logging.warning(f"No storage_path found for file item {item_name} in {full_item_path}. Cannot delete from HF.")
-        elif item_type == 'folder':
-            # Construct the base HF path for the folder
-            hf_folder_base_path = f"cloud_files/{username}/{full_item_path.strip('/')}"
-            # Recursively delete contents (from HF and DB) before removing folder entry
-            # Simple approach: Use HF's delete_folder if available and reliable
-            try:
-                 delete_hf_object(hf_folder_base_path, is_folder=True)
-                 # If delete_folder succeeds, we assume HF content is gone.
-                 # If it fails or partially deletes, the DB might become inconsistent.
-            except Exception as hf_del_err:
-                 # If folder deletion fails, maybe try deleting known files individually? Complex.
-                 # For now, log the error and proceed with DB deletion, potentially leaving orphans on HF.
-                 logging.error(f"Failed to delete folder {hf_folder_base_path} from HF Hub: {hf_del_err}. DB entry will still be removed.")
-                 flash(f'Ошибка при удалении папки {item_name} из облака, но запись будет удалена.', 'warning')
-
-        # Remove from JSON structure
-        del parent_node['children'][item_name]
+        api = HfApi()
+        api.delete_file(
+            path_in_repo=file_to_delete['path'],
+            repo_id=REPO_ID,
+            repo_type="dataset",
+            token=HF_TOKEN_WRITE,
+            commit_message=f"Deleted file {file_to_delete['path']} for {username}"
+        )
+        data['users'][username]['files'] = [f for f in user_files if f['unique_filename'] != unique_filename]
         save_data(data)
-        flash(f'{ "Файл" if item_type == "file" else "Папка" } "{item_name}" успешно удален(а).', 'success')
-
+        flash('Файл успешно удален!')
     except Exception as e:
-        flash(f'Ошибка при удалении "{item_name}": {e}', 'error')
-        logging.error(f"Error deleting item {full_item_path} for user {username}: {e}", exc_info=True)
-
-    # Redirect to the parent folder after deletion
-    parent_redirect_path = '/'.join(full_item_path.split('/')[:-1]) or '/'
-    return redirect(url_for('dashboard', path=parent_redirect_path))
-
+        logging.error(f"Error deleting file: {e}")
+        flash('Ошибка удаления файла!')
+    return redirect(url_for('dashboard', folder_path=file_to_delete['folder']))
 
-@app.route('/download/<file_storage_path>/<original_filename>')
-def download_file(file_storage_path, original_filename):
+@app.route('/delete_folder/<folder_id>')
+def delete_folder(folder_id):
     if 'username' not in session:
-        flash('Требуется аутентификация', 'error')
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
-
-    username = session['username']
-    # Decode the path back (replace '--' with '/')
-    hf_path = file_storage_path.replace('--', '/')
-
-    # Security check: Ensure the file actually belongs to the logged-in user
-    # This requires traversing the JSON structure to find the file by storage_path
-    data = load_data()
-    user_root = get_user_data_root(data, username)
-
-    def find_file_by_storage_path(node, target_path):
-        if node.get('type') == 'file' and node.get('storage_path') == target_path:
-            return node
-        if node.get('type') == 'folder':
-            for child in node.get('children', {}).values():
-                found = find_file_by_storage_path(child, target_path)
-                if found:
-                    return found
-        return None
-
-    file_node = find_file_by_storage_path(user_root, hf_path)
-
-    is_admin_request = request.referrer and 'admhosto' in request.referrer # Basic check
-
-    if not file_node and not is_admin_request: # Allow admin download without strict check here
-         flash('Файл не найден или у вас нет доступа.', 'error')
-         # Determine redirect path carefully
-         current_folder = session.get('current_path', '/')
-         return redirect(url_for('dashboard', path=current_folder))
-    elif not file_node and is_admin_request:
-         # Admin is trying to download, maybe file exists on HF but not DB? Allow attempt.
-         logging.warning(f"Admin attempting download of {hf_path} which is not in user {username}'s DB structure.")
-         # We proceed, but the file node info is missing
-
-
-    # Use HfFileSystem for potentially more robust download handling
-    try:
-         logging.info(f"Attempting download of HF file: {hf_path}")
-         # Construct the full dataset path for HfFileSystem
-         fs_path = f"datasets/{REPO_ID}/{hf_path}"
-
-         if not HF_FS.exists(fs_path):
-              logging.error(f"File not found on Hugging Face: {fs_path}")
-              flash('Файл не найден в облачном хранилище.', 'error')
-              # Redirect back appropriately
-              if is_admin_request:
-                  # Extract target user from path if possible
-                  target_user = hf_path.split('/')[1] if hf_path.startswith('cloud_files/') else 'unknown'
-                  return redirect(url_for('admin_user_files', username=target_user))
-              else:
-                   return redirect(url_for('dashboard', path=session.get('current_path', '/')))
-
-         # Get file content using HfFileSystem
-         with HF_FS.open(fs_path, 'rb') as f:
-              file_content = BytesIO(f.read())
-
-         # Determine mime type for correct content-type header
-         mime_type = mimetypes.guess_type(original_filename)[0] or 'application/octet-stream'
-
-         logging.info(f"Sending file {original_filename} ({mime_type})")
-         return send_file(
-             file_content,
-             mimetype=mime_type,
-             as_attachment=True,
-             download_name=original_filename # Use the original filename for the user
-         )
-
-    except EntryNotFoundError:
-         logging.error(f"File not found on Hugging Face via HfFileSystem: {fs_path}")
-         flash('Файл не найден в облачном хранилище.', 'error')
-    except Exception as e:
-        logging.error(f"Error downloading file {hf_path} from HF: {e}", exc_info=True)
-        flash('Ошибка скачивания файла!', 'error')
-
-    # Redirect back appropriately on error
-    if is_admin_request:
-         target_user = hf_path.split('/')[1] if hf_path.startswith('cloud_files/') else 'unknown'
-         return redirect(url_for('admin_user_files', username=target_user))
-    else:
-         return redirect(url_for('dashboard', path=session.get('current_path', '/')))
-
-
-@app.route('/view_text/<file_storage_path>')
-def view_file(file_storage_path):
-    # Similar checks as download_file for authentication and ownership
-    if 'username' not in session:
-        return Response("Требуется аутентификация", status=401, mimetype='text/plain')
-
     username = session['username']
-    hf_path = file_storage_path.replace('--', '/')
-
     data = load_data()
-    user_root = get_user_data_root(data, username)
-    def find_file_by_storage_path(node, target_path):
-         if node.get('type') == 'file' and node.get('storage_path') == target_path:
-             return node
-         if node.get('type') == 'folder':
-             for child in node.get('children', {}).values():
-                 found = find_file_by_storage_path(child, target_path)
-                 if found: return found
-         return None
-
-    file_node = find_file_by_storage_path(user_root, hf_path)
-    is_admin_request = request.referrer and 'admhosto' in request.referrer
-
-    if not file_node and not is_admin_request:
-        return Response("Файл не найден или доступ запрещен", status=404, mimetype='text/plain')
-
-    # Check if it's actually a text file based on stored info or filename
-    is_text = False
-    if file_node:
-        is_text = file_node.get('preview_type') == 'text'
-    else: # Admin might be viewing file not in DB, guess from path
-         is_text = get_preview_type(hf_path) == 'text'
-
-    if not is_text:
-         return Response("Файл не является текстовым", status=400, mimetype='text/plain')
-
+    if username not in data['users']:
+        session.pop('username', None)
+        flash('Пользователь не найден!')
+        return redirect(url_for('login'))
+    user_folders = data['users'][username].get('folders', [])
+    folder_to_delete = next((folder for folder in user_folders if folder['id'] == folder_id), None)
+    if not folder_to_delete:
+        flash('Папка не найдена!')
+        return redirect(url_for('dashboard'))
     try:
-        fs_path = f"datasets/{REPO_ID}/{hf_path}"
-        if not HF_FS.exists(fs_path):
-             return Response("Файл не найден в хранилище", status=404, mimetype='text/plain')
-
-        # Read text content, try common encodings
-        content = None
-        encodings_to_try = ['utf-8', 'cp1251', 'iso-8859-1']
-        for enc in encodings_to_try:
-            try:
-                with HF_FS.open(fs_path, 'r', encoding=enc) as f:
-                    content = f.read()
-                logging.info(f"Successfully read {fs_path} with encoding {enc}")
-                break # Stop if successfully read
-            except UnicodeDecodeError:
-                logging.warning(f"Failed to decode {fs_path} with {enc}, trying next.")
-            except Exception as read_err: # Catch other potential errors during read
-                 logging.error(f"Error reading file {fs_path} with {enc}: {read_err}")
-                 # Don't break here, maybe another encoding works or we need the outer exception
-
-        if content is None:
-             # If all decodings fail, try reading as bytes and decoding lossily
-             try:
-                 with HF_FS.open(fs_path, 'rb') as f:
-                     content_bytes = f.read()
-                 content = content_bytes.decode('utf-8', errors='replace')
-                 logging.warning(f"Read {fs_path} with lossy decoding after encoding errors.")
-             except Exception as byte_read_err:
-                 logging.error(f"Failed to read {fs_path} even as bytes: {byte_read_err}")
-                 return Response(f"Не удалось прочитать файл: {byte_read_err}", status=500, mimetype='text/plain')
-
-        # Limit content size to prevent browser freeze for huge files
-        MAX_VIEW_SIZE = 1 * 1024 * 1024 # 1 MB limit for viewing
-        if len(content) > MAX_VIEW_SIZE:
-            content = content[:MAX_VIEW_SIZE] + "\n\n[Содержимое файла обрезано из-за большого размера]"
-
-        return Response(content, mimetype='text/plain; charset=utf-8')
-
-    except EntryNotFoundError:
-         return Response("Файл не найден в хранилище (ENF)", status=404, mimetype='text/plain')
+        api = HfApi()
+        files_to_delete = [f for f in data['users'][username]['files'] if f['folder'].startswith(folder_to_delete['path'])]
+        for file in files_to_delete:
+            api.delete_file(
+                path_in_repo=file['path'],
+                repo_id=REPO_ID,
+                repo_type="dataset",
+                token=HF_TOKEN_WRITE,
+                commit_message=f"Deleted file {file['path']} for {username} during folder deletion"
+            )
+        data['users'][username]['files'] = [f for f in data['users'][username]['files'] if not f['folder'].startswith(folder_to_delete['path'])]
+        data['users'][username]['folders'] = [f for f in user_folders if f['id'] != folder_id]
+        save_data(data)
+        flash('Папка и все её содержимое успешно удалены!')
     except Exception as e:
-        logging.error(f"Error viewing text file {hf_path}: {e}", exc_info=True)
-        return Response(f"Ошибка при чтении файла: {e}", status=500, mimetype='text/plain')
-
+        logging.error(f"Error deleting folder: {e}")
+        flash('Ошибка удаления папки!')
+    return redirect(url_for('dashboard', folder_path=folder_to_delete['parent']))
 
 @app.route('/logout')
 def logout():
     session.pop('username', None)
-    session.pop('current_path', None) # Clear path on logout
-    flash('Вы успешно вышли из системы.', 'success')
-    # Client-side JS should handle localStorage.removeItem('zeusCredentials')
     return redirect(url_for('login'))
 
-
-# --- Admin Routes ---
-
-# Basic Admin Auth (replace with proper mechanism)
-def check_admin():
-    # Example: Check if username is 'admin' (highly insecure)
-    # Or check a specific session flag set during admin login
-    # return session.get('is_admin', False)
-    # For now, just check if the logged-in user is 'admin'
-    return session.get('username') == 'admin' # Replace 'admin' with your actual admin username
-
-
 @app.route('/admhosto')
 def admin_panel():
-    if not check_admin(): # Protect admin panel
-         flash('Доступ запрещен.', 'error')
-         return redirect(url_for('login'))
-
     data = load_data()
-    users = data.get('users', {})
-
-    # Calculate total files per user (traversing the tree)
-    user_stats = {}
-    for username, user_data in users.items():
-        count = 0
-        def count_files(node):
-            nonlocal count
-            if node.get('type') == 'file':
-                count += 1
-            elif node.get('type') == 'folder':
-                for child in node.get('children', {}).values():
-                    count_files(child)
-
-        root = user_data.get('root')
-        if root: count_files(root)
-        user_stats[username] = {
-            'created_at': user_data.get('created_at', 'N/A'),
-            'file_count': count
-        }
-
-
+    users = data['users']
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 <head>
-    <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Админ-панель - Zeus Cloud</title>
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
     <style>''' + BASE_STYLE + '''</style>
@@ -1275,288 +892,384 @@ def admin_panel():
 <body>
     <div class="container">
         <h1>Админ-панель Zeus Cloud</h1>
-        <p><a href="{{ url_for('dashboard') }}">Перейти к пользовательской панели</a> | <a href="{{ url_for('logout') }}">Выйти</a></p>
-         {% with messages = get_flashed_messages(with_categories=True) %}{% if messages %}
-            {% for category, message in messages %}
-                <div class="flash flash-{{ category }}">{{ message }}</div>
-            {% endfor %}
-        {% endif %}{% endwith %}
         <h2>Список пользователей</h2>
         <div class="user-list">
-            {% for username, stats in user_stats.items() %}
+            {% for username, user_data in users.items() %}
                 <div class="user-item">
-                    <a href="{{ url_for('admin_user_files', username=username) }}"><strong>{{ username }}</strong></a>
-                    <p>Дата регистрации: {{ stats.created_at }}</p>
-                    <p>Количество файлов: {{ stats.file_count }}</p>
-                     <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline; margin-left: 10px;" onsubmit="return confirm('Вы уверены, что хотите удалить пользователя {{ username }} и ВСЕ его файлы? Это действие необратимо!');">
-                         <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить пользователя</button>
-                     </form>
+                    <a href="{{ url_for('admin_user_files', username=username) }}">{{ username }}</a>
+                    <p>Дата регистрации: {{ user_data.get('created_at', 'N/A') }}</p>
+                    <p>Количество файлов: {{ user_data.get('files', []) | length }}</p>
+                    <p>Количество папок: {{ user_data.get('folders', []) | length }}</p>
+                    <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline; margin-left: 10px;" onsubmit="return confirm('Вы уверены, что хотите удалить пользователя {{ username }} и все его файлы и папки? Это действие необратимо!');">
+                        <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                    </form>
                 </div>
-            {% else %}
-                <p>Пользователей пока нет.</p>
             {% endfor %}
+            {% if not users %}
+                <p>Пользователей пока нет.</p>
+            {% endif %}
         </div>
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                <div style="margin-top: 20px;">
+                    {% for message in messages %}
+                        <div class="flash">{{ message }}</div>
+                    {% endfor %}
+                </div>
+            {% endif %}
+        {% endwith %}
     </div>
 </body>
-</html>'''
-    return render_template_string(html, user_stats=user_stats)
-
+</html>
+'''
+    return render_template_string(html, users=users)
 
 @app.route('/admhosto/user/<username>')
 def admin_user_files(username):
-    if not check_admin():
-        flash('Доступ запрещен.', 'error')
-        return redirect(url_for('login'))
-
     data = load_data()
-    user_data = data.get('users', {}).get(username)
-
-    if not user_data:
-        flash(f'Пользователь "{username}" не найден.', 'error')
+    if username not in data['users']:
+        flash('Пользователь не найден!')
         return redirect(url_for('admin_panel'))
-
-    # Flatten the file structure for display
-    all_files = []
-    def collect_files(node, current_path):
-        if node.get('type') == 'file':
-            file_info = node.copy()
-            file_info['display_path'] = current_path + '/' + node.get('original_filename', node['name']) if current_path != '/' else '/' + node.get('original_filename', node['name'])
-            all_files.append(file_info)
-        elif node.get('type') == 'folder':
-             folder_path = current_path + '/' + node['name'] if current_path != '/' else '/' + node['name']
-             # Optionally add folder info to display if needed
-             for child_name, child_node in node.get('children', {}).items():
-                 collect_files(child_node, folder_path)
-
-    root = user_data.get('root')
-    if root:
-        collect_files(root, '/') # Start traversal from root
-
-    # Sort files, perhaps by path or upload date
-    sorted_files = sorted(all_files, key=lambda x: x.get('storage_path', '').lower())
-
+    user_folders = sorted(data['users'][username].get('folders', []), key=lambda x: x.get('name', ''))
+    user_files = sorted(data['users'][username].get('files', []), key=lambda x: x.get('upload_date', ''), reverse=True)
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 <head>
-    <meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
     <title>Файлы пользователя {{ username }} - Zeus Cloud</title>
     <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
-     <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css">
     <style>''' + BASE_STYLE + '''</style>
 </head>
 <body>
     <div class="container">
-        <h1>Файлы пользователя: {{ username }}</h1>
-        <p><a href="{{ url_for('admin_panel') }}">Назад к списку пользователей</a></p>
-        {% with messages = get_flashed_messages(with_categories=True) %}{% if messages %}
-            {% for category, message in messages %}
-                <div class="flash flash-{{ category }}">{{ message }}</div>
+        <h1>Пользователь: {{ username }}</h1>
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
+        <h2>Папки</h2>
+        <div class="folder-grid">
+            {% for folder in user_folders %}
+                <div class="folder-item">
+                    <a href="{{ url_for('admin_user_folder', username=username, folder_path=folder['path']) }}">{{ folder['name'] }}</a>
+                    <p>{{ folder['created_at'] }}</p>
+                    <form method="POST" action="{{ url_for('admin_delete_folder', username=username, folder_id=folder['id']) }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить папку {{ folder['name'] }} и все её содержимое?');">
+                        <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                    </form>
+                </div>
             {% endfor %}
-        {% endif %}{% endwith %}
-
+            {% if not user_folders %}
+                <p>Папок пока нет.</p>
+            {% endif %}
+        </div>
+        <h2>Файлы</h2>
         <div class="file-grid">
-            {% for file in files %}
-                <div class="item-card">
-                    {% set preview_type = file.preview_type %}
-                    {% set hf_path = file.storage_path %}
-                    {% set download_url = url_for('download_file', file_storage_path=hf_path.replace('/', '--'), original_filename=file.original_filename) %}
-                    {% set view_url = url_for('view_file', file_storage_path=hf_path.replace('/', '--')) %}
-                    {% set raw_hf_url = "https://huggingface.co/datasets/" + repo_id + "/resolve/main/" + hf_path %}
-
-                     <div class="item-preview" onclick="openModal('{{ raw_hf_url }}', '{{ preview_type }}', '{{ view_url if preview_type == 'text' }}')" title="Предпросмотр {{ file.original_filename }}">
-                         {% if preview_type == 'image' %}<img src="{{ raw_hf_url }}?download=true" alt="{{ file.original_filename }}" loading="lazy" style="width:100%; height:100%; object-fit: cover;">
-                         {% elif preview_type == 'video' %}<video preload="metadata" muted style="width:100%; height:100%; object-fit: cover;"><source src="{{ raw_hf_url }}#t=0.5" type="{{ file.mime_type or 'video/mp4' }}"></video>
-                         {% elif preview_type == 'pdf' %}<i class="fas fa-file-pdf" style="font-size: 4em; color: #e74c3c;"></i>
-                         {% elif preview_type == 'text' %}<i class="fas fa-file-alt" style="font-size: 4em; color: #3498db;"></i>
-                         {% elif preview_type == 'audio' %}<i class="fas fa-file-audio" style="font-size: 4em; color: #9b59b6;"></i>
-                         {% else %}<i class="fas fa-file" style="font-size: 4em; color: #95a5a6;"></i>{% endif %}
-                     </div>
-                     <p title="{{ file.original_filename }}"><strong>{{ file.original_filename | truncate(25, True) }}</strong></p>
-                     <p style="font-size: 0.8em; color: #888;" title="{{ file.storage_path }}">{{ file.display_path | truncate(40, True) }}</p>
-                     <p style="font-size: 0.8em; color: #888;">{{ file.upload_date }}</p>
-                     <div class="actions">
-                          <a href="{{ download_url }}" class="btn download-btn" style="font-size: 0.9em;">Скачать</a>
-                          <form method="POST" action="{{ url_for('admin_delete_file', username=username, file_storage_path=hf_path.replace('/', '--')) }}" style="display: inline;" onsubmit="return confirm('Удалить файл {{ file.original_filename }}?');">
-                              <button type="submit" class="btn delete-btn" style="font-size: 0.9em;">Удалить</button>
-                          </form>
-                     </div>
+            {% for file in user_files %}
+                <div class="file-item">
+                    {% if file.get('type') == 'video' %}
+                        <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true', true)">
+                            <source src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" type="video/mp4">
+                        </video>
+                    {% elif file.get('type') == 'image' %}
+                        <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
+                    {% elif file.get('type') == 'pdf' %}
+                        <iframe class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true#toolbar=0" loading="lazy" onclick="openModal(this.src, false, true)"></iframe>
+                    {% elif file.get('type') == 'txt' %}
+                        {% set content = get_text_file_content(file['path']) %}
+                        <pre class="file-preview" style="text-align: left; overflow: auto;" onclick="openModal('data:text/plain;base64,{{ content }}', false, false, true)">{{ content | b64decode | truncate(200) }}</pre>
+                    {% else %}
+                        <p>{{ file.get('filename', 'N/A') }}</p>
+                    {% endif %}
+                    <p>{{ file.get('upload_date', 'N/A') }}</p>
+                    <p>Папка: {{ file.get('folder', 'root') }}</p>
+                    <a href="{{ url_for('download_file', unique_filename=file['unique_filename'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
+                    <form method="POST" action="{{ url_for('admin_delete_file', username=username, unique_filename=file['unique_filename']) }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить файл {{ file['filename'] }}?');">
+                        <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                    </form>
                 </div>
-            {% else %}
-                <p>У этого пользователя нет файлов.</p>
             {% endfor %}
+            {% if not user_files %}
+                <p>Файлов пока нет.</p>
+            {% endif %}
         </div>
+        <a href="{{ url_for('admin_panel') }}" class="btn" style="margin-top: 20px;">Назад к списку пользователей</a>
     </div>
-
-     <!-- Modal Structure (same as dashboard) -->
-     <div class="modal" id="mediaModal" onclick="closeModalIfBackground(event)">
-         <span class="close-modal" onclick="closeModal()">×</span>
-         <div class="modal-content" id="modalContentContainer"><div id="modalContent"></div></div>
-     </div>
-     <script>
-         // Modal JS functions (openModal, closeModal, closeModalIfBackground, escapeHtml, getDirectUrl) - same as dashboard
-        const repoId = "{{ repo_id }}";
-        const hfTokenRead = "{{ HF_TOKEN_READ or '' }}";
-
-        function getDirectUrl(rawHfUrl) { /* ... copy from dashboard ... */
-            let url = new URL(rawHfUrl);
-            url.searchParams.set('download', 'true');
-            return url.toString();
-        }
-        function openModal(rawHfUrl, previewType, textViewUrl) { /* ... copy from dashboard ... */
+    <div class="modal" id="mediaModal" onclick="closeModal(event)">
+        <div id="modalContent"></div>
+    </div>
+    <script>
+        function openModal(src, isVideo, isIframe = false, isText = false) {
             const modal = document.getElementById('mediaModal');
             const modalContent = document.getElementById('modalContent');
-            modalContent.innerHTML = '';
-            const directUrl = getDirectUrl(rawHfUrl);
-            if (previewType === 'image') modalContent.innerHTML = `<img src="${directUrl}" alt="Preview">`;
-            else if (previewType === 'video') modalContent.innerHTML = `<video controls autoplay style="max-width: 100%; max-height: 85vh;"><source src="${directUrl}" type="video/mp4">Your browser does not support the video tag.</video>`;
-            else if (previewType === 'pdf') modalContent.innerHTML = `<iframe src="${directUrl}" style="width: 90vw; height: 85vh; border: none;" title="PDF Preview"></iframe>`;
-            else if (previewType === 'text') {
-                fetch(textViewUrl).then(response => { if (!response.ok) throw new Error(`HTTP ${response.status}`); return response.text(); }).then(text => { modalContent.innerHTML = `<pre>${escapeHtml(text)}</pre>`; }).catch(error => { console.error("Err fetch text:", error); modalContent.innerHTML = `<p style='color: red;'>Load error: ${error.message}</p>`; });
-            } else if (previewType === 'audio') modalContent.innerHTML = `<audio controls autoplay style="width: 100%;"><source src="${directUrl}">No audio support.</audio>`;
-            else modalContent.innerHTML = '<p>Preview not available.</p>';
+            const tokenParam = "{{ os.getenv('HF_TOKEN_READ') or os.getenv('HF_TOKEN') }}" ? `?token={{ os.getenv('HF_TOKEN_READ') or os.getenv('HF_TOKEN') }}` : "";
+            const finalSrc = src.includes('?download=true') ? src.replace('?download=true', `?download=true${tokenParam}`) : src + tokenParam;
+            if (isVideo) {
+                modalContent.innerHTML = `<video controls autoplay style='max-width: 95%; max-height: 95vh;'><source src="${finalSrc}" type="video/mp4"></video>`;
+            } else if (isIframe) {
+                modalContent.innerHTML = `<iframe src="${finalSrc}" style="width: 95%; height: 95%;"></iframe>`;
+            } else if (isText) {
+                fetch(finalSrc)
+                    .then(response => response.text())
+                    .then(text => {
+                        modalContent.innerHTML = `<pre style="text-align: left; overflow: auto; max-width: 95%; max-height: 95%;">${text}</pre>`;
+                    });
+            } else {
+                modalContent.innerHTML = `<img src="${finalSrc}" style='max-width: 95%; max-height: 95vh;'>`;
+            }
             modal.style.display = 'flex';
         }
-        function closeModal() { /* ... copy from dashboard ... */
-             const modal = document.getElementById('mediaModal'); const modalContent = document.getElementById('modalContent'); modal.style.display = 'none'; const video = modalContent.querySelector('video'); if (video) video.pause(); const audio = modalContent.querySelector('audio'); if (audio) audio.pause(); modalContent.innerHTML = '';
+        function closeModal(event) {
+            const modal = document.getElementById('mediaModal');
+            if (event.target === modal) {
+                modal.style.display = 'none';
+                const video = modal.querySelector('video');
+                if (video) {
+                    video.pause();
+                }
+                document.getElementById('modalContent').innerHTML = '';
+            }
         }
-        function closeModalIfBackground(event) { /* ... copy from dashboard ... */
-            if (event.target === document.getElementById('mediaModal')) closeModal();
+    </script>
+</body>
+</html>
+'''
+    return render_template_string(html, username=username, user_files=user_files, user_folders=user_folders, repo_id=REPO_ID, os=os)
+
+@app.route('/admhosto/user/<username>/<path:folder_path>')
+def admin_user_folder(username, folder_path):
+    data = load_data()
+    if username not in data['users']:
+        flash('Пользователь не найден!')
+        return redirect(url_for('admin_panel'))
+    current_folder = folder_path
+    user_folders = [f for f in data['users'][username].get('folders', []) if f['parent'] == current_folder]
+    user_files = [f for f in data['users'][username].get('files', []) if f['folder'] == current_folder]
+    user_folders = sorted(user_folders, key=lambda x: x['name'])
+    user_files = sorted(user_files, key=lambda x: x.get('upload_date', ''), reverse=True)
+    parent_folder = 'root' if current_folder == 'root' else '/'.join(current_folder.split('/')[:-1])
+    html = '''
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Папка {{ current_folder }} пользователя {{ username }} - Zeus Cloud</title>
+    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
+    <style>''' + BASE_STYLE + '''</style>
+</head>
+<body>
+    <div class="container">
+        <h1>Папка: {{ current_folder }} (Пользователь: {{ username }})</h1>
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
+        <a href="{{ url_for('admin_user_files', username=username) if current_folder == 'root' else url_for('admin_user_folder', username=username, folder_path=parent_folder) }}" class="btn">Назад</a>
+        <h2>Папки</h2>
+        <div class="folder-grid">
+            {% for folder in user_folders %}
+                <div class="folder-item">
+                    <a href="{{ url_for('admin_user_folder', username=username, folder_path=folder['path']) }}">{{ folder['name'] }}</a>
+                    <p>{{ folder['created_at'] }}</p>
+                    <form method="POST" action="{{ url_for('admin_delete_folder', username=username, folder_id=folder['id']) }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить папку {{ folder['name'] }} и все её содержимое?');">
+                        <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                    </form>
+                </div>
+            {% endfor %}
+            {% if not user_folders %}
+                <p>Папок пока нет.</p>
+            {% endif %}
+        </div>
+        <h2>Файлы</h2>
+        <div class="file-grid">
+            {% for file in user_files %}
+                <div class="file-item">
+                    {% if file.get('type') == 'video' %}
+                        <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true', true)">
+                            <source src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" type="video/mp4">
+                        </video>
+                    {% elif file.get('type') == 'image' %}
+                        <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
+                    {% elif file.get('type') == 'pdf' %}
+                        <iframe class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true#toolbar=0" loading="lazy" onclick="openModal(this.src, false, true)"></iframe>
+                    {% elif file.get('type') == 'txt' %}
+                        {% set content = get_text_file_content(file['path']) %}
+                        <pre class="file-preview" style="text-align: left; overflow: auto;" onclick="openModal('data:text/plain;base64,{{ content }}', false, false, true)">{{ content | b64decode | truncate(200) }}</pre>
+                    {% else %}
+                        <p>{{ file.get('filename', 'N/A') }}</p>
+                    {% endif %}
+                    <p>{{ file.get('upload_date', 'N/A') }}</p>
+                    <a href="{{ url_for('download_file', unique_filename=file['unique_filename'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
+                    <form method="POST" action="{{ url_for('admin_delete_file', username=username, unique_filename=file['unique_filename']) }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить файл {{ file['filename'] }}?');">
+                        <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                    </form>
+                </div>
+            {% endfor %}
+            {% if not user_files %}
+                <p>Файлов пока нет.</p>
+            {% endif %}
+        </div>
+        <a href="{{ url_for('admin_panel') }}" class="btn" style="margin-top: 20px;">Назад к списку пользователей</a>
+    </div>
+    <div class="modal" id="mediaModal" onclick="closeModal(event)">
+        <div id="modalContent"></div>
+    </div>
+    <script>
+        function openModal(src, isVideo, isIframe = false, isText = false) {
+            const modal = document.getElementById('mediaModal');
+            const modalContent = document.getElementById('modalContent');
+            const tokenParam = "{{ os.getenv('HF_TOKEN_READ') or os.getenv('HF_TOKEN') }}" ? `?token={{ os.getenv('HF_TOKEN_READ') or os.getenv('HF_TOKEN') }}` : "";
+            const finalSrc = src.includes('?download=true') ? src.replace('?download=true', `?download=true${tokenParam}`) : src + tokenParam;
+            if (isVideo) {
+                modalContent.innerHTML = `<video controls autoplay style='max-width: 95%; max-height: 95vh;'><source src="${finalSrc}" type="video/mp4"></video>`;
+            } else if (isIframe) {
+                modalContent.innerHTML = `<iframe src="${finalSrc}" style="width: 95%; height: 95%;"></iframe>`;
+            } else if (isText) {
+                fetch(finalSrc)
+                    .then(response => response.text())
+                    .then(text => {
+                        modalContent.innerHTML = `<pre style="text-align: left; overflow: auto; max-width: 95%; max-height: 95%;">${text}</pre>`;
+                    });
+            } else {
+                modalContent.innerHTML = `<img src="${finalSrc}" style='max-width: 95%; max-height: 95vh;'>`;
+            }
+            modal.style.display = 'flex';
         }
-        function escapeHtml(unsafe) { /* ... copy from dashboard ... */
-             if (!unsafe) return ''; return unsafe.replace(/&/g, "&").replace(/</g, "<").replace(/>/g, ">").replace(/"/g, """).replace(/'/g, "'");
+        function closeModal(event) {
+            const modal = document.getElementById('mediaModal');
+            if (event.target === modal) {
+                modal.style.display = 'none';
+                const video = modal.querySelector('video');
+                if (video) {
+                    video.pause();
+                }
+                document.getElementById('modalContent').innerHTML = '';
+            }
         }
-     </script>
+    </script>
 </body>
-</html>'''
-    return render_template_string(html, username=username, files=sorted_files, repo_id=REPO_ID, HF_TOKEN_READ=HF_TOKEN_READ)
-
+</html>
+'''
+    return render_template_string(html, username=username, user_files=user_files, user_folders=user_folders, repo_id=REPO_ID, current_folder=current_folder, parent_folder=parent_folder, os=os)
 
 @app.route('/admhosto/delete_user/<username>', methods=['POST'])
 def admin_delete_user(username):
-    if not check_admin():
-        flash('Доступ запрещен.', 'error')
-        return redirect(url_for('login'))
-
     data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
+    if username not in data['users']:
+        flash('Пользователь не найден!')
         return redirect(url_for('admin_panel'))
-
-    # Path to the user's entire folder on HF Hub
-    hf_user_folder_path = f"cloud_files/{username}"
-
+    user_files_to_delete = data['users'][username].get('files', [])
+    user_folders_to_delete = data['users'][username].get('folders', [])
     try:
-        # 1. Attempt to delete the entire user folder from HF Hub
-        logging.info(f"Admin initiated deletion of user {username}. Attempting to delete HF folder: {hf_user_folder_path}")
-        delete_hf_object(hf_user_folder_path, is_folder=True)
-        logging.info(f"Successfully deleted HF folder {hf_user_folder_path} (or it didn't exist).")
-
-        # 2. Delete the user from the local data structure
+        api = HfApi()
+        paths_to_delete = [file['path'] for file in user_files_to_delete]
+        if paths_to_delete:
+            try:
+                api.delete_folder(
+                    folder_path=f"cloud_files/{username}",
+                    repo_id=REPO_ID,
+                    repo_type="dataset",
+                    token=HF_TOKEN_WRITE,
+                    commit_message=f"Deleted all files for user {username} by admin"
+                )
+                logging.info(f"Successfully deleted folder for user {username}")
+            except Exception as folder_delete_error:
+                logging.warning(f"Could not delete folder for {username}, attempting individual file deletion: {folder_delete_error}")
+                for file_path in paths_to_delete:
+                    try:
+                        api.delete_file(
+                            path_in_repo=file_path,
+                            repo_id=REPO_ID,
+                            repo_type="dataset",
+                            token=HF_TOKEN_WRITE
+                        )
+                    except Exception as file_delete_error:
+                        logging.error(f"Error deleting file {file_path} for user {username}: {file_delete_error}")
         del data['users'][username]
-
-        # 3. Save the updated data structure
         save_data(data)
-
-        flash(f'Пользователь {username} и все его файлы успешно удалены!', 'success')
-        logging.info(f"Admin successfully deleted user {username} and their data.")
-
+        flash(f'Пользователь {username} и его файлы и папки успешно удалены!')
+        logging.info(f"Admin deleted user {username} and their files and folders.")
     except Exception as e:
-        logging.error(f"Error deleting user {username}: {e}", exc_info=True)
-        flash(f'Ошибка при удалении пользователя {username}: {e}. Возможно, некоторые файлы остались в хранилище.', 'error')
-        # Data might be partially inconsistent if HF deletion failed but DB update is attempted or fails
-
+        logging.error(f"Error deleting user {username}: {e}")
+        flash(f'Ошибка при удалении пользователя {username}!')
     return redirect(url_for('admin_panel'))
 
-
-@app.route('/admhosto/delete_file/<username>/<file_storage_path>', methods=['POST'])
-def admin_delete_file(username, file_storage_path):
-    if not check_admin():
-        flash('Доступ запрещен.', 'error')
-        return redirect(url_for('login'))
-
-    hf_path = file_storage_path.replace('--', '/') # Decode path
-
+@app.route('/admhosto/delete_file/<username>/<unique_filename>', methods=['POST'])
+def admin_delete_file(username, unique_filename):
     data = load_data()
-    user_data = data.get('users', {}).get(username)
-
-    if not user_data:
-        flash(f'Пользователь "{username}" не найден!', 'error')
-        return redirect(url_for('admin_panel')) # Or maybe admin_user_files if appropriate
-
-    # Find the file in the JSON structure to remove it
-    parent_node = None
-    item_name = None
-    target_node = None
-
-    def find_and_get_parent(node, target_hf_path, current_node_name=None, parent=None):
-        nonlocal parent_node, item_name, target_node
-        if target_node: return # Stop searching if found
-
-        if node.get('type') == 'file' and node.get('storage_path') == target_hf_path:
-            parent_node = parent
-            item_name = current_node_name
-            target_node = node
-            return
-        if node.get('type') == 'folder':
-            for child_key, child_node in node.get('children', {}).items():
-                 find_and_get_parent(child_node, target_hf_path, current_node_name=child_key, parent=node)
-
-
-    user_root = user_data.get('root')
-    if user_root: find_and_get_parent(user_root, hf_path) # Search the tree
-
+    if username not in data['users']:
+        flash('Пользователь не найден!')
+        return redirect(url_for('admin_panel'))
+    user_files = data['users'][username].get('files', [])
+    file_to_delete = next((f for f in user_files if f['unique_filename'] == unique_filename), None)
+    if not file_to_delete:
+        flash('Файл не найден!')
+        return redirect(url_for('admin_user_files', username=username))
     try:
-        # 1. Attempt to delete the file from HF Hub
-        logging.info(f"Admin initiated deletion of file {hf_path} for user {username}.")
-        delete_hf_object(hf_path, is_folder=False)
-        logging.info(f"Successfully deleted HF file {hf_path} (or it didn't exist).")
-
-        # 2. Remove the file from the local data structure if found
-        if parent_node and item_name and item_name in parent_node.get('children', {}):
-             del parent_node['children'][item_name]
-             logging.info(f"Removed file entry {item_name} from user {username}'s data.")
-             # 3. Save the updated data
-             save_data(data)
-             flash(f'Файл {target_node.get("original_filename", item_name)} успешно удален!', 'success')
-        elif target_node is None:
-             flash('Файл удален из облака, но не найден в структуре данных пользователя (возможно, была рассинхронизация).', 'warning')
-             logging.warning(f"Admin deleted file {hf_path} from HF, but it was not found in user {username}'s DB structure.")
-             # No save needed if DB wasn't changed
-        else:
-             # This case should ideally not happen if find_and_get_parent worked correctly
-             flash('Файл удален из облака, но произошла ошибка при обновлении структуры данных.', 'error')
-             logging.error(f"Inconsistency after deleting {hf_path}: Found node but not parent/item_name correctly.")
-             # Avoid saving potentially corrupted data state? Or save anyway? Cautious approach: don't save.
-
-
+        api = HfApi()
+        api.delete_file(
+            path_in_repo=file_to_delete['path'],
+            repo_id=REPO_ID,
+            repo_type="dataset",
+            token=HF_TOKEN_WRITE,
+            commit_message=f"Admin deleted file {file_to_delete['path']} for user {username}"
+        )
+        data['users'][username]['files'] = [f for f in user_files if f['unique_filename'] != unique_filename]
+        save_data(data)
+        flash('Файл успешно удален!')
+        logging.info(f"Admin deleted file {unique_filename} for user {username}")
     except Exception as e:
-        logging.error(f"Error deleting file {hf_path} for user {username} by admin: {e}", exc_info=True)
-        flash(f'Ошибка при удалении файла: {e}', 'error')
-
+        logging.error(f"Error deleting file {unique_filename} by admin: {e}")
+        flash('Ошибка удаления файла!')
     return redirect(url_for('admin_user_files', username=username))
 
-
-# --- App Initialization ---
+@app.route('/admhosto/delete_folder/<username>/<folder_id>', methods=['POST'])
+def admin_delete_folder(username, folder_id):
+    data = load_data()
+    if username not in data['users']:
+        flash('Пользователь не найден!')
+        return redirect(url_for('admin_panel'))
+    user_folders = data['users'][username].get('folders', [])
+    folder_to_delete = next((folder for folder in user_folders if folder['id'] == folder_id), None)
+    if not folder_to_delete:
+        flash('Папка не найдена!')
+        return redirect(url_for('admin_user_files', username=username))
+    try:
+        api = HfApi()
+        files_to_delete = [f for f in data['users'][username]['files'] if f['folder'].startswith(folder_to_delete['path'])]
+        for file in files_to_delete:
+            api.delete_file(
+                path_in_repo=file['path'],
+                repo_id=REPO_ID,
+                repo_type="dataset",
+                token=HF_TOKEN_WRITE,
+                commit_message=f"Deleted file {file['path']} for {username} during folder deletion"
+            )
+        data['users'][username]['files'] = [f for f in data['users'][username]['files'] if not f['folder'].startswith(folder_to_delete['path'])]
+        data['users'][username]['folders'] = [f for f in user_folders if f['id'] != folder_id]
+        save_data(data)
+        flash('Папка и все её содержимое успешно удалены!')
+        logging.info(f"Admin deleted folder {folder_to_delete['name']} for user {username}")
+    except Exception as e:
+        logging.error(f"Error deleting folder {folder_id} by admin: {e}")
+        flash('Ошибка удаления папки!')
+    return redirect(url_for('admin_user_files', username=username))
 
 if __name__ == '__main__':
-    # Check for essential tokens again at runtime start
     if not HF_TOKEN_WRITE:
-        logging.critical("Missing HF_TOKEN (write). Uploads/Deletes WILL FAIL.")
+        logging.warning("HF_TOKEN (write access) is not set. File uploads and deletions will fail.")
     if not HF_TOKEN_READ:
-        logging.warning("Missing HF_TOKEN_READ. Using HF_TOKEN for reads. Downloads may fail for private repos if HF_TOKEN is also missing/invalid.")
-
-    # Ensure upload directory exists (though it's per-user now)
-    Path("uploads").mkdir(exist_ok=True)
-
-    # Initial data load check
-    logging.info("Performing initial data load...")
-    initial_data = load_data()
-    logging.info(f"Initial load complete. Found {len(initial_data.get('users', {}))} user(s).")
-
-    # Run the Flask app
-    # Set debug=False for production
-    # Use a production-ready WSGI server like Gunicorn or Waitress instead of Flask's built-in server for deployment
-    app.run(debug=False, host='0.0.0.0', port=7860)
-
-# --- END OF FILE app (8).py ---
\ No newline at end of file
+        logging.warning("HF_TOKEN_READ is not set. Falling back to HF_TOKEN. File downloads might fail for private repos if HF_TOKEN is not set.")
+    if HF_TOKEN_WRITE:
+        threading.Thread(target=periodic_backup, daemon=True).start()
+    else:
+        logging.warning("Periodic backup disabled because HF_TOKEN (write access) is not set.")
+    app.run(debug=False, host='0.0.0.0', port=7860)
\ No newline at end of file