Delete app.py

app.py

@@ -1,1398 +0,0 @@
-import os
-import hmac
-import hashlib
-import json
-from urllib.parse import unquote, parse_qsl, urlencode
-from flask import Flask, request, jsonify, Response, send_file
-from flask_caching import Cache
-import logging
-import threading
-import time
-from datetime import datetime
-from huggingface_hub import HfApi, hf_hub_download, utils as hf_utils
-from werkzeug.utils import secure_filename
-import requests
-from io import BytesIO
-import uuid
-from typing import Union, Optional # <-- Импорт добавлен
-
-# --- Configuration ---
-app = Flask(__name__)
-app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey_mini_app_unique")
-BOT_TOKEN = os.getenv('TELEGRAM_BOT_TOKEN', '6750208873:AAE2hvPlJ99dBdhGa_Brre0IIpUdOvXxHt4') # MUST be set
-DATA_FILE = 'cloudeng_mini_app_data.json'
-REPO_ID = "Eluza133/Z1e1u" # Same HF Repo
-HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
-HF_TOKEN_READ = os.getenv("HF_TOKEN_READ") or HF_TOKEN_WRITE
-UPLOAD_FOLDER = 'uploads_mini_app'
-os.makedirs(UPLOAD_FOLDER, exist_ok=True)
-
-# --- Caching and Logging ---
-cache = Cache(app, config={'CACHE_TYPE': 'simple'})
-logging.basicConfig(level=logging.INFO)
-
-# --- Constants ---
-AUTH_DATA_LIFETIME = 3600 # 1 hour validity for initData
-
-# --- Filesystem Utilities ---
-def find_node_by_id(filesystem, node_id):
-    if not filesystem or not isinstance(filesystem, dict):
-        return None, None
-    if filesystem.get('id') == node_id:
-        return filesystem, None
-
-    queue = [(filesystem, None)]
-    visited = {filesystem.get('id')}
-
-    while queue:
-        current_node, parent = queue.pop(0)
-        if current_node.get('type') == 'folder' and 'children' in current_node:
-            for child in current_node.get('children', []):
-                 child_id = child.get('id')
-                 if not child_id: continue # Skip nodes without id
-
-                 if child_id == node_id:
-                    return child, current_node
-                 if child_id not in visited and child.get('type') == 'folder':
-                    visited.add(child_id)
-                    queue.append((child, current_node))
-    return None, None
-
-def add_node(filesystem, parent_id, node_data):
-    parent_node, _ = find_node_by_id(filesystem, parent_id)
-    if parent_node and parent_node.get('type') == 'folder':
-        if 'children' not in parent_node:
-            parent_node['children'] = []
-        existing_ids = {child.get('id') for child in parent_node['children']}
-        if node_data.get('id') not in existing_ids:
-            parent_node['children'].append(node_data)
-            return True
-    return False
-
-def remove_node(filesystem, node_id):
-    node_to_remove, parent_node = find_node_by_id(filesystem, node_id)
-    if node_to_remove and parent_node and 'children' in parent_node:
-        original_length = len(parent_node['children'])
-        parent_node['children'] = [child for child in parent_node['children'] if child.get('id') != node_id]
-        return len(parent_node['children']) < original_length
-    if node_to_remove and node_id == filesystem.get('id'):
-        logging.warning("Attempted to remove root node directly.")
-        return False
-    return False
-
-def get_node_path_list(filesystem, node_id):
-    path_list = []
-    current_id = node_id
-    processed_ids = set()
-    while current_id and current_id not in processed_ids:
-        processed_ids.add(current_id)
-        node, parent = find_node_by_id(filesystem, current_id)
-        if not node:
-            break
-        path_list.append({
-            'id': node.get('id'),
-            'name': node.get('name', node.get('original_filename', 'Unknown'))
-        })
-        if not parent:
-             break
-        parent_id = parent.get('id')
-        if parent_id == current_id:
-             logging.error(f"Filesystem loop detected at node {current_id}")
-             break
-        current_id = parent_id
-    if not any(p['id'] == 'root' for p in path_list):
-        path_list.append({'id': 'root', 'name': 'Root'})
-    final_path = []
-    seen_ids = set()
-    for item in reversed(path_list):
-         if item['id'] not in seen_ids:
-              final_path.append(item)
-              seen_ids.add(item['id'])
-    return final_path
-
-def initialize_user_filesystem(user_data):
-    if 'filesystem' not in user_data or not isinstance(user_data['filesystem'], dict):
-        user_data['filesystem'] = {
-            "type": "folder",
-            "id": "root",
-            "name": "Root",
-            "children": []
-        }
-
-# --- Data Loading/Saving ---
-@cache.memoize(timeout=120)
-def load_data():
-    try:
-        download_db_from_hf()
-        with open(DATA_FILE, 'r', encoding='utf-8') as file:
-            data = json.load(file)
-            if not isinstance(data, dict):
-                logging.warning("Data file is not a dict, initializing empty.")
-                return {'users': {}}
-            data.setdefault('users', {})
-            for user_id, user_data in data['users'].items():
-                initialize_user_filesystem(user_data)
-            logging.info("Data loaded and filesystems checked/initialized.")
-            return data
-    except FileNotFoundError:
-        logging.warning(f"{DATA_FILE} not found locally. Initializing empty data.")
-        return {'users': {}}
-    except json.JSONDecodeError:
-        logging.error(f"Error decoding JSON from {DATA_FILE}. Returning empty data.")
-        return {'users': {}}
-    except Exception as e:
-        logging.error(f"Error loading data: {e}")
-        return {'users': {}}
-
-def save_data(data):
-    try:
-        with open(DATA_FILE, 'w', encoding='utf-8') as file:
-            json.dump(data, file, ensure_ascii=False, indent=4)
-        upload_db_to_hf()
-        cache.clear()
-        logging.info("Data saved locally and upload to HF initiated.")
-    except Exception as e:
-        logging.error(f"Error saving data: {e}")
-
-def upload_db_to_hf():
-    if not HF_TOKEN_WRITE:
-        logging.warning("HF_TOKEN_WRITE not set, skipping database upload.")
-        return
-    try:
-        api = HfApi()
-        api.upload_file(
-            path_or_fileobj=DATA_FILE,
-            path_in_repo=DATA_FILE,
-            repo_id=REPO_ID,
-            repo_type="dataset",
-            token=HF_TOKEN_WRITE,
-            commit_message=f"Backup MiniApp {datetime.now().strftime('%Y-%m-%d %H:%M:%S')}",
-            run_as_future=True
-        )
-        logging.info("Database upload to Hugging Face scheduled.")
-    except Exception as e:
-        logging.error(f"Error scheduling database upload: {e}")
-
-def download_db_from_hf():
-    if not HF_TOKEN_READ:
-        logging.warning("HF_TOKEN_READ not set, skipping database download.")
-        if not os.path.exists(DATA_FILE):
-             with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                 json.dump({'users': {}}, f)
-             logging.info(f"Created empty local database file: {DATA_FILE}")
-        return
-    try:
-        hf_hub_download(
-            repo_id=REPO_ID,
-            filename=DATA_FILE,
-            repo_type="dataset",
-            token=HF_TOKEN_READ,
-            local_dir=".",
-            local_dir_use_symlinks=False,
-            force_download=True,
-            etag_timeout=10
-        )
-        logging.info("Database downloaded from Hugging Face")
-    except hf_utils.RepositoryNotFoundError:
-         logging.error(f"Repository {REPO_ID} not found.")
-         if not os.path.exists(DATA_FILE):
-             with open(DATA_FILE, 'w', encoding='utf-8') as f: json.dump({'users': {}}, f)
-    except hf_utils.EntryNotFoundError:
-        logging.warning(f"{DATA_FILE} not found in repo {REPO_ID}. Using/Creating local.")
-        if not os.path.exists(DATA_FILE):
-            with open(DATA_FILE, 'w', encoding='utf-8') as f: json.dump({'users': {}}, f)
-    except requests.exceptions.ConnectionError as e:
-         logging.error(f"Connection error downloading DB from HF: {e}. Using local version if available.")
-    except Exception as e:
-        logging.error(f"Error downloading database: {e}")
-        if not os.path.exists(DATA_FILE):
-            with open(DATA_FILE, 'w', encoding='utf-8') as f: json.dump({'users': {}}, f)
-
-# --- File Type Helper ---
-def get_file_type(filename):
-    if not filename or '.' not in filename: return 'other'
-    ext = filename.lower().split('.')[-1]
-    if ext in ['mp4', 'mov', 'avi', 'webm', 'mkv']: return 'video'
-    if ext in ['jpg', 'jpeg', 'png', 'gif', 'bmp', 'webp', 'svg']: return 'image'
-    if ext == 'pdf': return 'pdf'
-    if ext == 'txt': return 'text'
-    return 'other'
-
-# --- Telegram Validation ---
-# Use Optional[dict] which is equivalent to Union[dict, None]
-def check_telegram_authorization(auth_data: str, bot_token: str) -> Optional[dict]:
-    if not auth_data or not bot_token or bot_token == 'YOUR_BOT_TOKEN':
-        logging.warning("Validation skipped: Missing auth_data or valid BOT_TOKEN.")
-        return None
-    try:
-        parsed_data = dict(parse_qsl(unquote(auth_data)))
-        if "hash" not in parsed_data:
-            logging.error("Hash not found in auth data")
-            return None
-
-        telegram_hash = parsed_data.pop('hash')
-        auth_date_ts = int(parsed_data.get('auth_date', 0))
-        current_ts = int(time.time())
-
-        if abs(current_ts - auth_date_ts) > AUTH_DATA_LIFETIME:
-             logging.warning(f"Auth data expired (Auth: {auth_date_ts}, Now: {current_ts}, Diff: {current_ts - auth_date_ts})")
-             return None
-
-        data_check_string = "\n".join(sorted([f"{k}={v}" for k, v in parsed_data.items()]))
-        secret_key = hmac.new("WebAppData".encode(), bot_token.encode(), hashlib.sha256).digest()
-        calculated_hash = hmac.new(secret_key, data_check_string.encode(), hashlib.sha256).hexdigest()
-
-        if calculated_hash == telegram_hash:
-            user_data_str = parsed_data.get('user')
-            if user_data_str:
-                try:
-                    user_info = json.loads(user_data_str)
-                    if 'id' not in user_info:
-                         logging.error("Validated user data missing 'id'")
-                         return None
-                    return user_info # Success
-                except json.JSONDecodeError:
-                    logging.error("Failed to decode user JSON from auth data")
-                    return None
-            else:
-                logging.warning("No 'user' field in validated auth data")
-                return None # Require user field
-        else:
-            logging.warning("Hash mismatch during validation")
-            return None
-    except Exception as e:
-        logging.error(f"Exception during validation: {e}")
-        return None
-
-
-# --- HTML, CSS, JS Template ---
-HTML_TEMPLATE = """
-<!DOCTYPE html>
-<html lang="ru">
-<head>
-    <meta charset="UTF-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no">
-    <title>Zeus Cloud Mini App</title>
-    <script src="https://telegram.org/js/telegram-web-app.js"></script>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
-    <style>
-        :root {
-            --primary: #ff4d6d; --secondary: #00ddeb; --accent: #8b5cf6;
-            --tg-theme-bg-color: var(--tg-bg-color, #ffffff);
-            --tg-theme-text-color: var(--tg-text-color, #000000);
-            --tg-theme-hint-color: var(--tg-hint-color, #999999);
-            --tg-theme-link-color: var(--tg-link-color, #2481cc);
-            --tg-theme-button-color: var(--tg-button-color, #5288c1);
-            --tg-theme-button-text-color: var(--tg-button-text-color, #ffffff);
-            --tg-theme-secondary-bg-color: var(--tg-secondary-bg-color, #f1f1f1);
-            --tg-viewport-height: var(--tg-viewport-stable-height, 100vh);
-            --card-bg: var(--tg-theme-secondary-bg-color);
-            --text-light: var(--tg-theme-text-color);
-            --text-dark: var(--tg-theme-text-color); /* Simplified for TG theme */
-            --shadow: 0 4px 15px rgba(0, 0, 0, 0.1);
-            --glass-bg: rgba(128, 128, 128, 0.1);
-            --transition: all 0.2s ease-out;
-            --delete-color: #ff4444;
-            --folder-color: #ffc107;
-        }
-        html { box-sizing: border-box; }
-        *, *:before, *:after { box-sizing: inherit; }
-        body {
-            font-family: 'Inter', sans-serif;
-            background: var(--tg-theme-bg-color);
-            color: var(--text-light);
-            line-height: 1.5;
-            margin: 0;
-            padding: 15px;
-            min-height: var(--tg-viewport-height);
-            display: flex; flex-direction: column;
-            -webkit-font-smoothing: antialiased;
-            -moz-osx-font-smoothing: grayscale;
-        }
-        .container {
-             width: 100%;
-             max-width: 800px; /* Limit width on larger screens */
-             margin: 0 auto; /* Center container */
-             flex-grow: 1;
-             display: flex;
-             flex-direction: column;
-        }
-        #loading, #error-view { padding: 30px; text-align: center; font-size: 1.2em; }
-        #app-content { display: none; flex-grow: 1; flex-direction: column; }
-
-        h1 { font-size: 1.8em; font-weight: 800; text-align: center; margin-bottom: 15px; background: linear-gradient(135deg, var(--primary), var(--accent)); -webkit-background-clip: text; color: transparent; }
-        h2 { font-size: 1.3em; margin-top: 20px; margin-bottom: 10px; color: var(--text-light); border-bottom: 1px solid var(--tg-theme-hint-color); padding-bottom: 5px; }
-        p { margin-bottom: 10px; }
-        input[type=text], input[type=file] {
-             width: 100%; padding: 12px; margin: 8px 0; border: 1px solid var(--tg-theme-hint-color); border-radius: 10px; background: var(--tg-theme-bg-color); color: var(--text-light); font-size: 1em;
-             box-shadow: inset 0 1px 3px rgba(0, 0, 0, 0.05); transition: border-color 0.2s ease;
-        }
-        input[type=text]:focus { outline: none; border-color: var(--primary); }
-        input[type=file] { border: none; padding: 5px; }
-
-        .btn { padding: 12px 24px; background: var(--tg-theme-button-color); color: var(--tg-theme-button-text-color); border: none; border-radius: 12px; cursor: pointer; font-size: 1em; font-weight: 600; transition: var(--transition); box-shadow: 0 2px 5px rgba(0,0,0,0.1); display: inline-block; text-decoration: none; margin-top: 5px; margin-right: 5px; text-align: center; }
-        .btn:hover { opacity: 0.85; }
-        .btn:active { transform: scale(0.98); }
-        .btn[disabled] { background-color: var(--tg-theme-hint-color); cursor: not-allowed; opacity: 0.7; }
-        .download-btn { background: var(--secondary); color: black; }
-        .delete-btn { background: var(--delete-color); }
-        .folder-btn { background: var(--folder-color); color: black; }
-        .view-btn { background: var(--accent); }
-
-        .flash { color: var(--tg-theme-button-text-color); text-align: center; margin-bottom: 15px; padding: 10px; border-radius: 10px; font-weight: 500;}
-        .flash.success { background: #28a745; }
-        .flash.error { background: var(--delete-color); }
-
-        .file-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(130px, 1fr)); gap: 15px; margin-top: 15px; padding-bottom: 20px;}
-
-        .item { background: var(--card-bg); padding: 10px; border-radius: 12px; box-shadow: var(--shadow); text-align: center; transition: var(--transition); display: flex; flex-direction: column; justify-content: space-between; }
-        .item:hover { transform: translateY(-3px); box-shadow: 0 6px 20px rgba(0, 0, 0, 0.12); }
-        .item-preview { width: 100%; height: 90px; object-fit: cover; border-radius: 8px; margin-bottom: 8px; cursor: pointer; display: block; background-color: rgba(128,128,128, 0.1); }
-        .item.folder .item-preview { object-fit: contain; font-size: 50px; color: var(--folder-color); line-height: 90px; text-decoration: none; }
-        .item p { font-size: 0.85em; margin: 4px 0; word-break: break-all; line-height: 1.3; height: 2.6em; overflow: hidden;} /* Show 2 lines */
-        .item p.filename { font-weight: 600; height: auto; max-height: 2.6em;} /* Allow filename more space */
-        .item p.details { font-size: 0.75em; color: var(--tg-theme-hint-color); height: auto; }
-        .item a { color: var(--tg-theme-link-color); text-decoration: none; }
-        .item a:hover { text-decoration: underline; }
-        .item-actions { margin-top: 8px; display: flex; flex-wrap: wrap; gap: 5px; justify-content: center; }
-        .item-actions .btn { font-size: 0.8em; padding: 4px 8px; }
-
-        .modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0, 0, 0, 0.8); z-index: 2000; justify-content: center; align-items: center; padding: 10px;}
-        .modal-content { width: 100%; height: 100%; background: var(--tg-theme-bg-color); padding: 10px; border-radius: 15px; overflow: hidden; position: relative; display: flex; flex-direction: column; }
-        .modal-body { flex-grow: 1; overflow: auto; display: flex; justify-content: center; align-items: center; }
-        .modal img, .modal video, .modal iframe, .modal pre { max-width: 100%; max-height: 95%; display: block; margin: auto; border-radius: 10px; }
-        .modal iframe { width: 100%; height: 100%; border: none; }
-        .modal pre { background: var(--tg-theme-secondary-bg-color); color: var(--text-light); padding: 15px; border-radius: 8px; white-space: pre-wrap; word-wrap: break-word; text-align: left; max-height: 95%; overflow-y: auto; width: 100%;}
-        .modal-close-btn { position: absolute; top: 15px; right: 15px; font-size: 24px; color: var(--tg-theme-hint-color); cursor: pointer; background: rgba(128,128,128,0.2); border-radius: 50%; width: 30px; height: 30px; line-height: 30px; text-align: center; z-index: 2001;}
-
-        #progress-container { width: 100%; background: var(--tg-theme-secondary-bg-color); border-radius: 10px; margin: 15px 0; display: none; position: relative; height: 20px; overflow: hidden; }
-        #progress-bar { width: 0%; height: 100%; background: var(--primary); border-radius: 10px; transition: width 0.3s ease; }
-        #progress-text { position: absolute; width: 100%; text-align: center; line-height: 20px; color: var(--tg-theme-button-text-color); font-size: 0.9em; font-weight: bold; text-shadow: 1px 1px 1px rgba(0,0,0,0.5); }
-
-        .breadcrumbs { margin-bottom: 15px; font-size: 1em; background: var(--card-bg); padding: 8px 12px; border-radius: 8px; box-shadow: var(--shadow); }
-        .breadcrumbs a { color: var(--tg-theme-link-color); text-decoration: none; font-weight: 500; }
-        .breadcrumbs a:hover { text-decoration: underline; }
-        .breadcrumbs span { margin: 0 5px; color: var(--tg-theme-hint-color); }
-        .breadcrumbs span.current-folder { font-weight: 600; color: var(--text-light);}
-
-        .folder-actions { margin-top: 10px; margin-bottom: 15px; display: flex; gap: 10px; align-items: center; flex-wrap: wrap; }
-        .folder-actions input[type=text] { width: auto; flex-grow: 1; margin: 0; min-width: 150px; }
-        .folder-actions .btn { margin: 0; flex-shrink: 0;}
-
-        #user-info-header { text-align: center; margin-bottom: 15px; font-size: 0.9em; color: var(--tg-theme-hint-color); }
-
-        @media (max-width: 480px) {
-            body { padding: 10px; }
-            .file-grid { grid-template-columns: repeat(auto-fill, minmax(110px, 1fr)); gap: 10px;}
-            .item-preview { height: 80px; }
-            .item.folder .item-preview { font-size: 40px; line-height: 80px; }
-            h1 { font-size: 1.6em; }
-            .btn { padding: 10px 18px; }
-            .item-actions .btn { padding: 3px 6px; }
-            .breadcrumbs { font-size: 0.9em; padding: 6px 10px; }
-        }
-    </style>
-</head>
-<body>
-    <div id="loading">Загрузка и проверка данных Telegram...</div>
-    <div id="error-view" style="display: none;"></div>
-    <div id="app-content" class="container">
-        <h1>Zeus Cloud</h1>
-        <div id="user-info-header"></div>
-        <div id="flash-container"></div>
-
-        <div class="breadcrumbs" id="breadcrumbs-container"></div>
-
-        <div class="folder-actions">
-            <input type="text" id="new-folder-name" placeholder="Имя новой папки" required>
-            <button id="create-folder-btn" class="btn folder-btn">Создать папку</button>
-        </div>
-
-        <form id="upload-form">
-            <input type="file" name="files" id="file-input" multiple required>
-            <button type="submit" class="btn" id="upload-btn">Загрузить файлы сюда</button>
-        </form>
-        <div id="progress-container"><div id="progress-bar"></div><div id="progress-text">0%</div></div>
-
-        <h2 id="current-folder-title">Содержимое папки</h2>
-        <div class="file-grid" id="file-grid-container">
-            <!-- Items will be loaded here -->
-        </div>
-    </div>
-
-    <div class="modal" id="mediaModal" onclick="closeModal(event)">
-        <div class="modal-content">
-             <span onclick="closeModalManual()" class="modal-close-btn">×</span>
-             <div class="modal-body" id="modalContent"></div>
-        </div>
-    </div>
-
-    <script>
-        const tg = window.Telegram.WebApp;
-        const loadingEl = document.getElementById('loading');
-        const errorViewEl = document.getElementById('error-view');
-        const appContentEl = document.getElementById('app-content');
-        const userInfoHeaderEl = document.getElementById('user-info-header');
-        const flashContainerEl = document.getElementById('flash-container');
-        const breadcrumbsContainerEl = document.getElementById('breadcrumbs-container');
-        const fileGridContainerEl = document.getElementById('file-grid-container');
-        const currentFolderTitleEl = document.getElementById('current-folder-title');
-        const uploadForm = document.getElementById('upload-form');
-        const fileInput = document.getElementById('file-input');
-        const uploadBtn = document.getElementById('upload-btn');
-        const progressContainer = document.getElementById('progress-container');
-        const progressBar = document.getElementById('progress-bar');
-        const progressText = document.getElementById('progress-text');
-        const newFolderInput = document.getElementById('new-folder-name');
-        const createFolderBtn = document.getElementById('create-folder-btn');
-
-        let currentFolderId = 'root';
-        let validatedInitData = null;
-        let currentUser = null;
-        let currentItems = [];
-
-        // --- API Communication ---
-        async function apiCall(endpoint, method = 'POST', body = {}) {
-            if (!validatedInitData) {
-                showError("Ошибка: Данные авторизации отсутствуют.");
-                throw new Error("Not authenticated");
-            }
-            body.initData = validatedInitData;
-
-            try {
-                const response = await fetch(endpoint, {
-                    method: method,
-                    headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify(body)
-                });
-                if (!response.ok) {
-                    let errorMsg = `HTTP error ${response.status}`;
-                    try {
-                        const errData = await response.json();
-                        errorMsg = errData.message || errorMsg;
-                    } catch (e) { /* Ignore if error body is not JSON */ }
-                    throw new Error(errorMsg);
-                }
-                return await response.json();
-            } catch (error) {
-                console.error(`API call to ${endpoint} failed:`, error);
-                showFlash(`Ошибка сети или сервера: ${error.message}`, 'error');
-                throw error;
-            }
-        }
-
-        // --- UI Rendering ---
-        function showLoadingScreen() {
-            loadingEl.style.display = 'block';
-            errorViewEl.style.display = 'none';
-            appContentEl.style.display = 'none';
-        }
-
-        function showError(message) {
-            loadingEl.style.display = 'none';
-            errorViewEl.innerHTML = `<h2>Ошибка</h2><p>${message}</p><button class='btn' onclick='window.location.reload()'>Перезагрузить</button>`;
-            errorViewEl.style.display = 'block';
-            appContentEl.style.display = 'none';
-            if (tg.HapticFeedback) tg.HapticFeedback.notificationOccurred('error');
-        }
-
-        function showAppContent() {
-            loadingEl.style.display = 'none';
-            errorViewEl.style.display = 'none';
-            appContentEl.style.display = 'flex'; // Use flex for container layout
-        }
-
-        function showFlash(message, type = 'success') {
-             const flashDiv = document.createElement('div');
-             flashDiv.className = `flash ${type}`;
-             flashDiv.textContent = message;
-             flashContainerEl.innerHTML = ''; // Clear previous messages
-             flashContainerEl.appendChild(flashDiv);
-             setTimeout(() => {
-                 if (flashDiv.parentNode === flashContainerEl) {
-                      flashContainerEl.removeChild(flashDiv);
-                 }
-             }, 5000);
-             if (tg.HapticFeedback) tg.HapticFeedback.notificationOccurred(type);
-        }
-
-        function renderBreadcrumbs(breadcrumbs) {
-            breadcrumbsContainerEl.innerHTML = '';
-            breadcrumbs.forEach((crumb, index) => {
-                if (index > 0) {
-                    breadcrumbsContainerEl.appendChild(document.createTextNode(' / '));
-                }
-                if (index === breadcrumbs.length - 1) {
-                     const span = document.createElement('span');
-                     span.className = 'current-folder';
-                     span.textContent = crumb.name;
-                     breadcrumbsContainerEl.appendChild(span);
-                     currentFolderTitleEl.textContent = `Содержимое: ${crumb.name}`;
-                } else {
-                    const link = document.createElement('a');
-                    link.href = '#';
-                    link.textContent = crumb.name;
-                    link.onclick = (e) => { e.preventDefault(); loadFolderContent(crumb.id); };
-                    breadcrumbsContainerEl.appendChild(link);
-                }
-            });
-        }
-
-        function renderItems(items) {
-            fileGridContainerEl.innerHTML = ''; // Clear previous items
-            if (!items || items.length === 0) {
-                 fileGridContainerEl.innerHTML = '<p>Эта папка пуста.</p>';
-                 return;
-            }
-            items.forEach(item => {
-                const itemDiv = document.createElement('div');
-                itemDiv.className = `item ${item.type}`;
-                let previewHtml = '';
-                let actionsHtml = '';
-                let filenameDisplay = item.original_filename || item.name || 'Unnamed';
-                const maxLen = 25;
-                let truncatedFilename = filenameDisplay.length > maxLen
-                    ? filenameDisplay.substring(0, maxLen - 3) + '...'
-                    : filenameDisplay;
-
-                if (item.type === 'folder') {
-                    previewHtml = `<a href="#" class="item-preview" title="Перейти в папку ${item.name}" onclick="event.preventDefault(); loadFolderContent('${item.id}')">📁</a>`;
-                    actionsHtml = `
-                        <button class="btn folder-btn" onclick="loadFolderContent('${item.id}')">Открыть</button>
-                        <button class="btn delete-btn" onclick="deleteFolder('${item.id}', '${item.name}')">Удалить</button>
-                    `;
-                    truncatedFilename = item.name;
-                } else if (item.type === 'file') {
-                    const previewable = ['image', 'video', 'pdf', 'text'].includes(item.file_type);
-                    const dlUrl = `/download/${item.id}`;
-                    let viewFuncCall = '';
-
-                    if (item.file_type === 'image') {
-                         previewHtml = `<img class="item-preview" src="/preview_thumb/${item.id}" alt="${filenameDisplay}" loading="lazy" onerror="this.style.display='none'" onclick="openModal('/download/${item.id}', 'image', '${item.id}')">`;
-                         viewFuncCall = `openModal('/download/${item.id}', 'image', '${item.id}')`;
-                     } else if (item.file_type === 'video') {
-                         previewHtml = `<div class="item-preview" style="font-size: 50px; line-height: 90px; color: var(--accent);" onclick="openModal('/download/${item.id}', 'video', '${item.id}')">▶️</div>`;
-                         viewFuncCall = `openModal('/download/${item.id}', 'video', '${item.id}')`;
-                     } else if (item.file_type === 'pdf') {
-                         previewHtml = `<div class="item-preview" style="font-size: 50px; line-height: 90px; color: var(--accent);" onclick="openModal('/download/${item.id}', 'pdf', '${item.id}')">📄</div>`;
-                         viewFuncCall = `openModal('/download/${item.id}', 'pdf', '${item.id}')`;
-                     } else if (item.file_type === 'text') {
-                         previewHtml = `<div class="item-preview" style="font-size: 50px; line-height: 90px; color: var(--secondary);" onclick="openModal('/get_text_content/${item.id}', 'text', '${item.id}')">📝</div>`;
-                         viewFuncCall = `openModal('/get_text_content/${item.id}', 'text', '${item.id}')`;
-                     } else {
-                        previewHtml = '<div class="item-preview" style="font-size: 50px; line-height: 90px; color: #aaa;">❓</div>';
-                    }
-
-                    actionsHtml = `<a href="${dlUrl}" class="btn download-btn" target="_blank" rel="noopener noreferrer">Скачать</a>`;
-                    if (previewable) {
-                        actionsHtml += `<button class="btn view-btn" onclick="${viewFuncCall}">Просмотр</button>`;
-                    }
-                    actionsHtml += `<button class="btn delete-btn" onclick="deleteFile('${item.id}', '${filenameDisplay}')">Удалить</button>`;
-                }
-
-                itemDiv.innerHTML = `
-                    ${previewHtml}
-                    <p class="filename" title="${filenameDisplay}">${truncatedFilename}</p>
-                    ${item.upload_date ? `<p class="details">${item.upload_date.split(' ')[0]}</p>` : ''}
-                    <div class="item-actions">${actionsHtml}</div>
-                `;
-                fileGridContainerEl.appendChild(itemDiv);
-            });
-        }
-
-        // --- Modal Logic ---
-        async function openModal(srcOrUrl, type, itemId) {
-            const modal = document.getElementById('mediaModal');
-            const modalContent = document.getElementById('modalContent');
-            modalContent.innerHTML = '<p>Загрузка...</p>';
-            modal.style.display = 'flex';
-
-            try {
-                if (type === 'pdf') {
-                     // Check if running inside Telegram, if so, maybe open externally?
-                     // Or use a viewer that works well in iframe like PDF.js (more complex setup)
-                     // Using Google Docs viewer as a common fallback:
-                     modalContent.innerHTML = `<iframe src="https://docs.google.com/gview?url=${encodeURIComponent(window.location.origin + srcOrUrl)}&embedded=true" title="Просмотр PDF"></iframe>`;
-                } else if (type === 'image') {
-                    modalContent.innerHTML = `<img src="${srcOrUrl}" alt="Просмотр изображения">`;
-                } else if (type === 'video') {
-                    modalContent.innerHTML = `<video controls autoplay style='max-width: 100%; max-height: 100%;'><source src="${srcOrUrl}">Ваш браузер не поддерживает видео.</video>`;
-                } else if (type === 'text') {
-                    const response = await fetch(srcOrUrl); // Use the dedicated text route
-                    if (!response.ok) throw new Error(`Ошибка загрузки текста: ${response.statusText}`);
-                    const text = await response.text();
-                    const escapedText = text.replace(/</g, "<").replace(/>/g, ">"); // Basic escaping
-                    modalContent.innerHTML = `<pre>${escapedText}</pre>`;
-                } else {
-                    modalContent.innerHTML = '<p>Предпросмотр для этого типа файла не поддерживается.</p>';
-                }
-            } catch (error) {
-                console.error("Error loading modal content:", error);
-                modalContent.innerHTML = `<p>Не удалось загрузить содержимое для предпросмотра. ${error.message}</p>`;
-                 if (tg.HapticFeedback) tg.HapticFeedback.notificationOccurred('error');
-            }
-        }
-
-        function closeModal(event) {
-            const modal = document.getElementById('mediaModal');
-            if (event.target === modal) {
-                closeModalManual();
-            }
-        }
-
-        function closeModalManual() {
-            const modal = document.getElementById('mediaModal');
-            modal.style.display = 'none';
-            const video = modal.querySelector('video');
-            if (video) { video.pause(); video.src = ''; }
-            const iframe = modal.querySelector('iframe');
-            if (iframe) iframe.src = 'about:blank';
-            document.getElementById('modalContent').innerHTML = '';
-        }
-
-        // --- Folder Operations ---
-        async function loadFolderContent(folderId) {
-            currentFolderId = folderId;
-            console.log(`Loading folder: ${folderId}`);
-            try {
-                const data = await apiCall('/get_dashboard_data', 'POST', { folder_id: folderId });
-                if (data.status === 'ok') {
-                     currentItems = data.items || [];
-                     renderBreadcrumbs(data.breadcrumbs || [{'id': 'root', 'name': 'Root'}]);
-                     renderItems(currentItems.sort((a, b) => (a.type !== 'folder') - (b.type !== 'folder') || (a.name || a.original_filename || '').localeCompare(b.name || b.original_filename || '')));
-                } else {
-                    showFlash(data.message || 'Не удалось загрузить содержимое папки.', 'error');
-                }
-            } catch (error) {
-                // Error already handled by apiCall
-            }
-        }
-
-        async function handleCreateFolder() {
-            const folderName = newFolderInput.value.trim();
-            if (!folderName) {
-                showFlash('Введите имя папки.', 'error');
-                return;
-            }
-             if (!/^[a-zA-Z0-9 _\-]+$/.test(folderName)) {
-                showFlash('Имя папки может содержать буквы, цифры, пробелы, тире и подчеркивания.', 'error');
-                 return;
-             }
-
-            createFolderBtn.disabled = true;
-            createFolderBtn.textContent = 'Создание...';
-
-            try {
-                const data = await apiCall('/create_folder', 'POST', {
-                    parent_folder_id: currentFolderId,
-                    folder_name: folderName
-                });
-                if (data.status === 'ok') {
-                    showFlash(`Папка "${folderName}" создана.`);
-                    newFolderInput.value = '';
-                    loadFolderContent(currentFolderId); // Refresh content
-                } else {
-                    showFlash(data.message || 'Не удалось создать папку.', 'error');
-                }
-            } catch (error) {
-                 // Error handled by apiCall
-            } finally {
-                 createFolderBtn.disabled = false;
-                 createFolderBtn.textContent = 'Создать папку';
-            }
-        }
-
-        async function deleteFolder(folderId, folderName) {
-            // Check if folder is empty client-side (optional optimization)
-            // const folderIsEmpty = !currentItems.some(item => item.parent_id === folderId);
-            // if (!folderIsEmpty) { showFlash('Папку можно удалить только если она пуста (клиентская проверка).', 'error'); return; }
-
-            tg.showConfirm(`Вы уверены, что хотите удалить папку "${folderName}"? Папку можно удалить только если она пуста.`, async (confirmed) => {
-                if (confirmed) {
-                    try {
-                         const data = await apiCall(`/delete_folder/${folderId}`, 'POST', { current_folder_id: currentFolderId });
-                         if (data.status === 'ok') {
-                             showFlash(`Папка "${folderName}" удалена.`);
-                             loadFolderContent(currentFolderId); // Refresh
-                         } else {
-                             showFlash(data.message || 'Не удалось удалить папку.', 'error');
-                         }
-                     } catch (error) {
-                          // Error handled by apiCall
-                     }
-                }
-            });
-        }
-
-         async function deleteFile(fileId, fileName) {
-             tg.showConfirm(`Вы уверены, что хотите удалить файл "${fileName}"?`, async (confirmed) => {
-                 if (confirmed) {
-                     try {
-                         const data = await apiCall(`/delete_file/${fileId}`, 'POST', { current_folder_id: currentFolderId });
-                         if (data.status === 'ok') {
-                             showFlash(`Файл "${fileName}" удален.`);
-                             loadFolderContent(currentFolderId); // Refresh
-                         } else {
-                             showFlash(data.message || 'Не удалось удалить файл.', 'error');
-                         }
-                     } catch (error) {
-                          // Error handled by apiCall
-                     }
-                 }
-             });
-        }
-
-        // --- File Upload ---
-        function handleFileUpload(event) {
-             event.preventDefault();
-             const files = fileInput.files;
-             if (files.length === 0) {
-                 showFlash('Выберите файлы для загрузки.', 'error');
-                 return;
-             }
-              if (files.length > 20) {
-                  showFlash('Максимум 20 файлов за раз!', 'error');
-                  return;
-              }
-
-             progressContainer.style.display = 'block';
-             progressBar.style.width = '0%';
-             progressText.textContent = '0%';
-             uploadBtn.disabled = true;
-             uploadBtn.textContent = 'Загрузка...';
-
-             const formData = new FormData();
-             for (let i = 0; i < files.length; i++) {
-                 formData.append('files', files[i]);
-             }
-             formData.append('current_folder_id', currentFolderId);
-             formData.append('initData', validatedInitData);
-
-             const xhr = new XMLHttpRequest();
-
-             xhr.upload.addEventListener('progress', function(event) {
-                 if (event.lengthComputable) {
-                     const percentComplete = Math.round((event.loaded / event.total) * 100);
-                     progressBar.style.width = percentComplete + '%';
-                     progressText.textContent = percentComplete + '%';
-                 }
-             });
-
-             xhr.addEventListener('load', function() {
-                 uploadBtn.disabled = false;
-                 uploadBtn.textContent = 'Загрузить файлы сюда';
-                 progressContainer.style.display = 'none';
-                 fileInput.value = '';
-
-                 if (xhr.status >= 200 && xhr.status < 300) {
-                     try {
-                         const data = JSON.parse(xhr.responseText);
-                         if (data.status === 'ok') {
-                              showFlash(data.message || `${files.length} файл(ов) загружено.`);
-                              loadFolderContent(currentFolderId); // Refresh
-                         } else {
-                              showFlash(data.message || 'Ошибка при обработке загрузки на сервере.', 'error');
-                         }
-                     } catch (e) {
-                         showFlash('Некорректный ответ от сервера после загрузки.', 'error');
-                     }
-                 } else {
-                      showFlash(`Ошибка загрузки: ${xhr.statusText || xhr.status}`, 'error');
-                 }
-             });
-
-             xhr.addEventListener('error', function() {
-                 showFlash('Ошибка сети во время загрузки.', 'error');
-                 uploadBtn.disabled = false;
-                 uploadBtn.textContent = 'Загрузить файлы сюда';
-                 progressContainer.style.display = 'none';
-             });
-
-             xhr.addEventListener('abort', function() {
-                 showFlash('Загрузка отменена.', 'error');
-                 uploadBtn.disabled = false;
-                 uploadBtn.textContent = 'Загрузить файлы сюда';
-                 progressContainer.style.display = 'none';
-             });
-
-             xhr.open('POST', '/upload', true);
-             xhr.send(formData);
-        }
-
-
-        // --- Initialization ---
-        function initializeApp() {
-            tg.ready();
-            tg.expand();
-            document.body.style.backgroundColor = tg.themeParams.bg_color || '#ffffff';
-            tg.setHeaderColor(tg.themeParams.secondary_bg_color || '#f1f1f1');
-
-            if (!tg.initData) {
-                 showError("Ошибка: Не удалось получить данные авторизации Telegram (initData). Попробуйте перезапустить Mini App.");
-                 return;
-            }
-            validatedInitData = tg.initData;
-
-             fetch('/validate_init_data', {
-                 method: 'POST',
-                 headers: { 'Content-Type': 'application/json' },
-                 body: JSON.stringify({ initData: validatedInitData })
-             })
-             .then(response => response.json())
-             .then(data => {
-                 if (data.status === 'ok' && data.user) {
-                     currentUser = data.user;
-                     userInfoHeaderEl.textContent = `User: ${currentUser.first_name || ''} ${currentUser.last_name || ''} (@${currentUser.username || currentUser.id})`;
-                     showAppContent();
-                     loadFolderContent('root');
-                 } else {
-                     throw new Error(data.message || 'Не удалось верифицировать пользователя.');
-                 }
-             })
-             .catch(error => {
-                 console.error("Validation failed:", error);
-                 showError(`Ошибка авторизации: ${error.message}. Попробуйте перезапустить.`);
-                 validatedInitData = null;
-             });
-
-            uploadForm.addEventListener('submit', handleFileUpload);
-            createFolderBtn.addEventListener('click', handleCreateFolder);
-
-            // Optional: Back button handling
-            // tg.BackButton.onClick(() => {
-            //    const currentPath = getPathFromBreadcrumbs(); // Need function to get path array
-            //    if (currentPath.length > 1) {
-            //        const parentFolder = currentPath[currentPath.length - 2];
-            //        loadFolderContent(parentFolder.id);
-            //    } else {
-            //        // Optionally close app or do nothing at root
-            //    }
-            // });
-             // Show/hide back button based on current folder depth
-        }
-
-        // --- Start the App ---
-        initializeApp();
-
-    </script>
-</body>
-</html>
-"""
-
-
-# --- Flask Routes ---
-
-@app.route('/')
-def index():
-    """ Serves the main Mini App HTML shell. """
-    return Response(HTML_TEMPLATE, mimetype='text/html')
-
-@app.route('/validate_init_data', methods=['POST'])
-def validate_init_data():
-    """ Validates Telegram initData and ensures user exists in DB. """
-    data = request.get_json()
-    if not data or 'initData' not in data:
-        return jsonify({"status": "error", "message": "Missing initData"}), 400
-
-    init_data = data['initData']
-    user_info = check_telegram_authorization(init_data, BOT_TOKEN)
-
-    if user_info and 'id' in user_info:
-        tg_user_id = str(user_info['id'])
-        db_data = load_data()
-        users = db_data.setdefault('users', {})
-
-        if tg_user_id not in users:
-            logging.info(f"New user detected: {tg_user_id}. Initializing filesystem.")
-            users[tg_user_id] = {
-                'user_info': user_info,
-                'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-            }
-            initialize_user_filesystem(users[tg_user_id])
-            try:
-                save_data(db_data)
-            except Exception as e:
-                 logging.error(f"Failed to save data for new user {tg_user_id}: {e}")
-                 return jsonify({"status": "error", "message": "Ошибка сохранения данных нового пользователя."}), 500
-        elif 'user_info' not in users[tg_user_id] or users[tg_user_id]['user_info'].get('username') != user_info.get('username'): # Update user info if missing or changed
-            users[tg_user_id]['user_info'] = user_info
-            try:
-                save_data(db_data)
-            except Exception as e:
-                logging.warning(f"Failed to update user_info for {tg_user_id}: {e}")
-
-        if 'filesystem' not in users[tg_user_id]:
-             initialize_user_filesystem(users[tg_user_id])
-             try:
-                 save_data(db_data)
-             except Exception as e:
-                 logging.warning(f"Failed to initialize filesystem for existing user {tg_user_id}: {e}")
-
-        return jsonify({"status": "ok", "user": user_info})
-    else:
-        logging.warning(f"Validation failed for initData: {init_data[:100]}...")
-        return jsonify({"status": "error", "message": "Недействительные данные авторизации."}), 403
-
-
-@app.route('/get_dashboard_data', methods=['POST'])
-def get_dashboard_data():
-    """ Returns folder content and breadcrumbs for the validated user. """
-    data = request.get_json()
-    if not data or 'initData' not in data or 'folder_id' not in data:
-        return jsonify({"status": "error", "message": "Неполный запрос"}), 400
-
-    user_info = check_telegram_authorization(data['initData'], BOT_TOKEN)
-    if not user_info or 'id' not in user_info:
-        return jsonify({"status": "error", "message": "Не авторизован"}), 403
-
-    tg_user_id = str(user_info['id'])
-    folder_id = data['folder_id']
-    db_data = load_data()
-    user_data = db_data.get('users', {}).get(tg_user_id)
-
-    if not user_data or 'filesystem' not in user_data:
-         logging.error(f"User data or filesystem missing for validated user {tg_user_id}")
-         return jsonify({"status": "error", "message": "Ошибка данных пользователя"}), 500
-
-    current_folder, _ = find_node_by_id(user_data['filesystem'], folder_id)
-
-    if not current_folder or current_folder.get('type') != 'folder':
-        logging.warning(f"Folder {folder_id} not found for user {tg_user_id}. Defaulting to root.")
-        folder_id = 'root'
-        current_folder, _ = find_node_by_id(user_data['filesystem'], folder_id)
-        if not current_folder:
-             logging.error(f"CRITICAL: Root folder not found for user {tg_user_id}")
-             return jsonify({"status": "error", "message": "Критическая ошибка: Корневая папка отсутствует"}), 500
-
-    items_in_folder = current_folder.get('children', [])
-    breadcrumbs = get_node_path_list(user_data['filesystem'], folder_id)
-
-    current_folder_info = {
-        'id': current_folder.get('id'),
-        'name': current_folder.get('name', 'Root')
-    }
-
-    return jsonify({
-        "status": "ok",
-        "items": items_in_folder,
-        "breadcrumbs": breadcrumbs,
-        "current_folder": current_folder_info
-    })
-
-
-@app.route('/upload', methods=['POST'])
-def upload_files():
-    """ Handles file uploads for the validated user. """
-    init_data = request.form.get('initData')
-    current_folder_id = request.form.get('current_folder_id', 'root')
-    files = request.files.getlist('files')
-
-    user_info = check_telegram_authorization(init_data, BOT_TOKEN)
-    if not user_info or 'id' not in user_info:
-        return jsonify({"status": "error", "message": "Не авторизован"}), 403
-
-    tg_user_id = str(user_info['id'])
-
-    if not HF_TOKEN_WRITE:
-        return jsonify({'status': 'error', 'message': 'Загрузка невозможна: токен HF не настроен.'}), 500
-
-    if not files or all(not f.filename for f in files):
-        return jsonify({'status': 'error', 'message': 'Файлы для загрузки не выбраны.'}), 400
-
-    if len(files) > 20:
-         return jsonify({'status': 'error', 'message': 'Максимум 20 файлов за раз!'}), 400
-
-    db_data = load_data()
-    user_data = db_data.get('users', {}).get(tg_user_id)
-    if not user_data or 'filesystem' not in user_data:
-         return jsonify({"status": "error", "message": "Ошибка данных пользователя"}), 500
-
-    target_folder_node, _ = find_node_by_id(user_data['filesystem'], current_folder_id)
-    if not target_folder_node or target_folder_node.get('type') != 'folder':
-         return jsonify({'status': 'error', 'message': 'Целевая папка не найдена!'}), 404
-
-    api = HfApi()
-    uploaded_count = 0
-    errors = []
-    needs_save = False
-
-    for file in files:
-        if file and file.filename:
-            original_filename = secure_filename(file.filename)
-            name_part, ext_part = os.path.splitext(original_filename)
-            unique_suffix = uuid.uuid4().hex[:8]
-            unique_filename = f"{name_part}_{unique_suffix}{ext_part}"
-            file_id = uuid.uuid4().hex
-
-            hf_path = f"cloud_files/{tg_user_id}/{current_folder_id}/{unique_filename}"
-            temp_path = os.path.join(UPLOAD_FOLDER, f"{file_id}_{unique_filename}")
-
-            try:
-                file.save(temp_path)
-                api.upload_file(
-                    path_or_fileobj=temp_path, path_in_repo=hf_path,
-                    repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE,
-                    commit_message=f"User {tg_user_id} uploaded {original_filename} to {current_folder_id}"
-                )
-
-                file_info = {
-                    'type': 'file', 'id': file_id,
-                    'original_filename': original_filename, 'unique_filename': unique_filename,
-                    'path': hf_path, 'file_type': get_file_type(original_filename),
-                    'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-                }
-
-                if add_node(user_data['filesystem'], current_folder_id, file_info):
-                    uploaded_count += 1
-                    needs_save = True
-                else:
-                    errors.append(f"Ошибка добавления метаданных для {original_filename}.")
-                    logging.error(f"Failed add_node for {file_id} to {current_folder_id} for {tg_user_id}")
-                    try:
-                         api.delete_file(path_in_repo=hf_path, repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE)
-                    except Exception as del_err:
-                         logging.error(f"Failed deleting orphaned HF file {hf_path}: {del_err}")
-
-            except Exception as e:
-                logging.error(f"Upload error for {original_filename} ({tg_user_id}): {e}")
-                errors.append(f"Ошибка загрузки {original_filename}: {e}")
-            finally:
-                if os.path.exists(temp_path):
-                    try: os.remove(temp_path)
-                    except OSError as e: logging.error(f"Error removing temp file {temp_path}: {e}")
-
-    if needs_save:
-        try:
-            save_data(db_data)
-        except Exception as e:
-             logging.error(f"Error saving DB after upload for {tg_user_id}: {e}")
-             errors.append("Ошибка сохранения метаданных после загрузки.")
-
-    final_message = f"{uploaded_count} файл(ов) загружено."
-    if errors:
-        final_message += " Ошибки: " + "; ".join(errors)
-
-    return jsonify({
-        "status": "ok" if not errors else "error",
-        "message": final_message
-    })
-
-
-@app.route('/create_folder', methods=['POST'])
-def create_folder():
-    """ Creates a new folder for the validated user. """
-    data = request.get_json()
-    if not data or 'initData' not in data or 'parent_folder_id' not in data or 'folder_name' not in data:
-         return jsonify({"status": "error", "message": "Неполный запрос"}), 400
-
-    user_info = check_telegram_authorization(data['initData'], BOT_TOKEN)
-    if not user_info or 'id' not in user_info:
-        return jsonify({"status": "error", "message": "Не авторизован"}), 403
-
-    tg_user_id = str(user_info['id'])
-    parent_folder_id = data['parent_folder_id']
-    folder_name = data['folder_name'].strip()
-
-    if not folder_name:
-        return jsonify({'status': 'error', 'message': 'Имя папки не может быть пустым!'}), 400
-    # Relaxed validation - check disallowed chars instead? Let's keep simpler for now.
-    if not folder_name.replace(' ', '').replace('-', '').replace('_', '').isalnum():
-         if '/' in folder_name or '\\' in folder_name or ':' in folder_name: # Basic check
-             return jsonify({'status': 'error', 'message': 'Имя папки содержит недопустимые символы.'}), 400
-         # Allow broader names if basic check passes
-         logging.warning(f"Folder name '{folder_name}' contains non-alphanumeric/space/dash/underscore characters, but allowing.")
-
-
-    db_data = load_data()
-    user_data = db_data.get('users', {}).get(tg_user_id)
-    if not user_data or 'filesystem' not in user_data:
-         return jsonify({"status": "error", "message": "Ошибка данных пользователя"}), 500
-
-    folder_id = uuid.uuid4().hex
-    folder_data = {
-        'type': 'folder', 'id': folder_id,
-        'name': folder_name, 'children': []
-    }
-
-    if add_node(user_data['filesystem'], parent_folder_id, folder_data):
-        try:
-            save_data(db_data)
-            return jsonify({'status': 'ok', 'message': f'Папка "{folder_name}" создана.'})
-        except Exception as e:
-            logging.error(f"Create folder save error ({tg_user_id}): {e}")
-            return jsonify({'status': 'error', 'message': 'Ошибка сохранения данных.'}), 500
-    else:
-        return jsonify({'status': 'error', 'message': 'Не удалось найти родительскую папку или добавить узел.'}), 400
-
-
-@app.route('/download/<file_id>')
-def download_file_route(file_id):
-    """ Serves the file for download. NO AUTH HERE. """
-    db_data = load_data()
-    file_node = None
-    owner_user_id = None
-
-    for user_id, user_data in db_data.get('users', {}).items():
-         if 'filesystem' in user_data:
-             node, _ = find_node_by_id(user_data['filesystem'], file_id)
-             if node and node.get('type') == 'file':
-                 file_node = node
-                 owner_user_id = user_id
-                 break
-
-    if not file_node:
-         return Response("Файл не найден", status=404)
-
-    hf_path = file_node.get('path')
-    original_filename = file_node.get('original_filename', f'{file_id}_download')
-
-    if not hf_path:
-        logging.error(f"Missing HF path for file ID {file_id} (owner: {owner_user_id})")
-        return Response("Ошибка: Путь к файлу не найден", status=500)
-
-    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{hf_path}?download=true"
-
-    try:
-        headers = {}
-        if HF_TOKEN_READ:
-            headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
-
-        response = requests.get(file_url, headers=headers, stream=True, timeout=30)
-        response.raise_for_status()
-
-        # Use Content-Disposition header for filename
-        encoded_filename = urlencode({'filename': original_filename})[9:] # Crude but often works
-        # A more robust way involves RFC 6266 encoding, but keep it simple
-        disposition = f"attachment; filename=\"{original_filename}\"; filename*=UTF-8''{encoded_filename}"
-
-        return Response(response.iter_content(chunk_size=8192),
-                        mimetype=response.headers.get('Content-Type', 'application/octet-stream'),
-                        headers={"Content-Disposition": disposition})
-
-    except requests.exceptions.RequestException as e:
-        logging.error(f"Error downloading file from HF ({hf_path}, owner: {owner_user_id}): {e}")
-        status_code = e.response.status_code if e.response is not None else 502
-        return Response(f"Ошибка скачивания файла ({status_code})", status=status_code)
-    except Exception as e:
-        logging.error(f"Unexpected error during download ({hf_path}, owner: {owner_user_id}): {e}")
-        return Response("Внутренняя ошибка сервера при скачивании", status=500)
-
-
-@app.route('/delete_file/<file_id>', methods=['POST'])
-def delete_file_route(file_id):
-    """ Deletes a file for the validated user. """
-    data = request.get_json()
-    if not data or 'initData' not in data or 'current_folder_id' not in data:
-        return jsonify({"status": "error", "message": "Неполный запрос"}), 400
-
-    user_info = check_telegram_authorization(data['initData'], BOT_TOKEN)
-    if not user_info or 'id' not in user_info:
-        return jsonify({"status": "error", "message": "Не авторизован"}), 403
-
-    tg_user_id = str(user_info['id'])
-
-    if not HF_TOKEN_WRITE:
-        return jsonify({'status': 'error', 'message': 'Удаление невозможно: токен HF не настроен.'}), 500
-
-    db_data = load_data()
-    user_data = db_data.get('users', {}).get(tg_user_id)
-    if not user_data or 'filesystem' not in user_data:
-        return jsonify({"status": "error", "message": "Ошибка данных пользователя"}), 500
-
-    file_node, parent_node = find_node_by_id(user_data['filesystem'], file_id)
-
-    if not file_node or file_node.get('type') != 'file' or not parent_node:
-        return jsonify({'status': 'error', 'message': 'Файл не найден или не может быть удален.'}), 404
-
-    hf_path = file_node.get('path')
-    original_filename = file_node.get('original_filename', 'файл')
-    needs_save = False
-
-    if hf_path:
-        try:
-            api = HfApi()
-            api.delete_file(
-                path_in_repo=hf_path, repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE,
-                commit_message=f"User {tg_user_id} deleted {original_filename}"
-            )
-            logging.info(f"Deleted file {hf_path} from HF Hub for user {tg_user_id}")
-        except hf_utils.EntryNotFoundError:
-            logging.warning(f"File {hf_path} not found on HF Hub for delete attempt ({tg_user_id}).")
-        except Exception as e:
-            logging.error(f"Error deleting file from HF Hub ({hf_path}, {tg_user_id}): {e}")
-            # Don't stop here, still try to remove from DB
-            # return jsonify({'status': 'error', 'message': f'Ошибка удаления файла с сервера: {e}'}), 500
-
-    if remove_node(user_data['filesystem'], file_id):
-        needs_save = True
-        logging.info(f"Removed file node {file_id} from DB for user {tg_user_id}")
-    else:
-        logging.error(f"Failed to remove file node {file_id} from DB structure for {tg_user_id} after HF delete.")
-
-    if needs_save:
-        try:
-            save_data(db_data)
-            return jsonify({'status': 'ok', 'message': f'Файл {original_filename} удален.'})
-        except Exception as e:
-            logging.error(f"Delete file DB save error ({tg_user_id}): {e}")
-            return jsonify({'status': 'error', 'message': 'Файл удален с сервера, но ошибка сохранения базы данных.'}), 500
-    else:
-         return jsonify({'status': 'error', 'message': 'Файл не найден в базе данных для удаления.'}), 404
-
-
-@app.route('/delete_folder/<folder_id>', methods=['POST'])
-def delete_folder_route(folder_id):
-    """ Deletes an empty folder for the validated user. """
-    if folder_id == 'root':
-         return jsonify({'status': 'error', 'message': 'Нельзя удалить корневую папку!'}), 400
-
-    data = request.get_json()
-    if not data or 'initData' not in data or 'current_folder_id' not in data:
-         return jsonify({"status": "error", "message": "Неполный запрос"}), 400
-
-    user_info = check_telegram_authorization(data['initData'], BOT_TOKEN)
-    if not user_info or 'id' not in user_info:
-        return jsonify({"status": "error", "message": "Не авторизован"}), 403
-
-    tg_user_id = str(user_info['id'])
-
-    db_data = load_data()
-    user_data = db_data.get('users', {}).get(tg_user_id)
-    if not user_data or 'filesystem' not in user_data:
-        return jsonify({"status": "error", "message": "Ошибка данных пользователя"}), 500
-
-    folder_node, parent_node = find_node_by_id(user_data['filesystem'], folder_id)
-
-    if not folder_node or folder_node.get('type') != 'folder' or not parent_node:
-        return jsonify({'status': 'error', 'message': 'Папка не найдена или не может быть удалена.'}), 404
-
-    folder_name = folder_node.get('name', 'папка')
-
-    if folder_node.get('children'):
-        return jsonify({'status': 'error', 'message': f'Папку "{folder_name}" можно удалить только если она пуста.'}), 400
-
-    if remove_node(user_data['filesystem'], folder_id):
-        try:
-            save_data(db_data)
-            return jsonify({'status': 'ok', 'message': f'Папка "{folder_name}" удалена.'})
-        except Exception as e:
-            logging.error(f"Delete folder save error ({tg_user_id}): {e}")
-            return jsonify({'status': 'error', 'message': 'Ошибка сохранения базы данных после удаления папки.'}), 500
-    else:
-        logging.error(f"Failed to remove empty folder node {folder_id} from DB for {tg_user_id}")
-        return jsonify({'status': 'error', 'message': 'Не удалось удалить папку из базы данных.'}), 500
-
-
-@app.route('/get_text_content/<file_id>')
-def get_text_content_route(file_id):
-    """ Serves text file content. NO AUTH HERE. """
-    db_data = load_data()
-    file_node = None
-    owner_user_id = None
-
-    for user_id, user_data in db_data.get('users', {}).items():
-         if 'filesystem' in user_data:
-             node, _ = find_node_by_id(user_data['filesystem'], file_id)
-             if node and node.get('type') == 'file' and node.get('file_type') == 'text':
-                 file_node = node
-                 owner_user_id = user_id
-                 break
-
-    if not file_node:
-        return Response("Текстовый файл не найден", status=404)
-
-    hf_path = file_node.get('path')
-    if not hf_path:
-        return Response("Ошибка: путь к файлу отсутствует", status=500)
-
-    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{hf_path}?download=true"
-
-    try:
-        headers = {}
-        if HF_TOKEN_READ:
-            headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
-
-        response = requests.get(file_url, headers=headers, timeout=15)
-        response.raise_for_status()
-
-        max_preview_size = 1 * 1024 * 1024 # 1 MB
-        if len(response.content) > max_preview_size:
-             return Response("Файл слишком большой для предпросмотра (>1MB).", status=413)
-
-        text_content = None
-        encodings_to_try = ['utf-8', 'cp1251', 'latin-1']
-        for enc in encodings_to_try:
-             try:
-                 text_content = response.content.decode(enc)
-                 break
-             except UnicodeDecodeError:
-                 continue
-
-        if text_content is None:
-             return Response("Не удалось определить кодировку файла.", status=500)
-
-        return Response(text_content, mimetype='text/plain; charset=utf-8')
-
-    except requests.exceptions.RequestException as e:
-        logging.error(f"Error fetching text content from HF ({hf_path}, owner {owner_user_id}): {e}")
-        status_code = e.response.status_code if e.response is not None else 502
-        return Response(f"Ошибка загрузки содержимого ({status_code})", status=status_code)
-    except Exception as e:
-        logging.error(f"Unexpected error fetching text content ({hf_path}, owner {owner_user_id}): {e}")
-        return Response("Внутренняя ошибка сервера", status=500)
-
-
-@app.route('/preview_thumb/<file_id>')
-def preview_thumb_route(file_id):
-    """ Serves image previews. NO AUTH HERE. """
-    db_data = load_data()
-    file_node = None
-    owner_user_id = None
-
-    for user_id, user_data in db_data.get('users', {}).items():
-        if 'filesystem' in user_data:
-            node, _ = find_node_by_id(user_data['filesystem'], file_id)
-            if node and node.get('type') == 'file' and node.get('file_type') == 'image':
-                 file_node = node
-                 owner_user_id = user_id
-                 break
-
-    if not file_node: return Response("Изображение не найдено", status=404)
-    hf_path = file_node.get('path')
-    if not hf_path: return Response("Путь к файлу не найден", status=500)
-
-    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{hf_path}"
-
-    try:
-        headers = {}
-        if HF_TOKEN_READ: headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
-        response = requests.get(file_url, headers=headers, stream=True, timeout=20)
-        response.raise_for_status()
-        # Return directly, let browser handle image rendering
-        return Response(response.iter_content(chunk_size=8192), mimetype=response.headers.get('Content-Type', 'image/jpeg'))
-    except requests.exceptions.RequestException as e:
-        logging.error(f"Error fetching preview from HF ({hf_path}, owner: {owner_user_id}): {e}")
-        status_code = e.response.status_code if e.response is not None else 502
-        return Response(f"Ошибка загрузки превью ({status_code})", status=status_code)
-    except Exception as e:
-        logging.error(f"Unexpected error during preview ({hf_path}, owner: {owner_user_id}): {e}")
-        return Response("Внутренняя ошибка сервера при загрузке превью", status=500)
-
-
-# --- Main Execution ---
-if __name__ == '__main__':
-    if BOT_TOKEN == 'YOUR_BOT_TOKEN':
-        logging.critical("\n" + "*"*60 +
-                         "\n CRITICAL: TELEGRAM_BOT_TOKEN is not set or is 'YOUR_BOT_TOKEN'. " +
-                         "\n Telegram authentication WILL FAIL. Set the environment variable." +
-                         "\n" + "*"*60)
-    if not HF_TOKEN_WRITE:
-        logging.warning("HF_TOKEN (write access) is not set. File uploads, deletions will fail.")
-    if not HF_TOKEN_READ:
-        logging.warning("HF_TOKEN_READ is not set. File downloads/previews might fail for private repos.")
-
-    logging.info("Performing initial database download...")
-    download_db_from_hf()
-    logging.info("Initial download attempt complete.")
-
-    app.run(debug=False, host='0.0.0.0', port=7860)