m

Sleeping

App Files Files Community

Eluza133 commited on Apr 21, 2025

Commit

d16c245

verified ·

1 Parent(s): 9ffda1d

Update app.py

Browse files

Files changed (1) hide show

app.py +569 -770

app.py CHANGED Viewed

@@ -1,5 +1,3 @@
-# --- START OF FILE app (8).py ---
 from flask import Flask, render_template_string, request, redirect, url_for, session, flash, send_file, jsonify
 from flask_caching import Cache
 import json
@@ -7,12 +5,13 @@ import os
 import logging
 import threading
 import time
-import uuid
 from datetime import datetime
-from huggingface_hub import HfApi, hf_hub_download, hf_hub_url
 from werkzeug.utils import secure_filename
 import requests
 from io import BytesIO
 app = Flask(__name__)
 app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey")
@@ -35,17 +34,8 @@ def load_data():
                 return {'users': {}, 'files': {}}
             data.setdefault('users', {})
             data.setdefault('files', {})
-            # Ensure each user has a files list
-            for user in data['users']:
-                data['users'][user].setdefault('files', [])
             logging.info("Data successfully loaded")
             return data
-    except FileNotFoundError:
-        logging.warning(f"{DATA_FILE} not found locally after download attempt. Initializing empty database.")
-        return {'users': {}, 'files': {}}
-    except json.JSONDecodeError:
-         logging.error(f"Error decoding JSON from {DATA_FILE}. Initializing empty database.")
-         return {'users': {}, 'files': {}}
     except Exception as e:
         logging.error(f"Error loading data: {e}")
         return {'users': {}, 'files': {}}
@@ -62,9 +52,6 @@ def save_data(data):
         raise
 def upload_db_to_hf():
-    if not HF_TOKEN_WRITE:
-        logging.warning("HF_TOKEN_WRITE not set. Skipping database upload to Hugging Face.")
-        return
     try:
         api = HfApi()
         api.upload_file(
@@ -80,12 +67,6 @@ def upload_db_to_hf():
         logging.error(f"Error uploading database: {e}")
 def download_db_from_hf():
-    if not HF_TOKEN_READ:
-        logging.warning("HF_TOKEN_READ not set. Skipping database download from Hugging Face.")
-        if not os.path.exists(DATA_FILE):
-            with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                json.dump({'users': {}, 'files': {}}, f)
-        return
     try:
         hf_hub_download(
             repo_id=REPO_ID,
@@ -93,101 +74,250 @@ def download_db_from_hf():
             repo_type="dataset",
             token=HF_TOKEN_READ,
             local_dir=".",
-            local_dir_use_symlinks=False,
-            force_download=True # Ensure we get the latest version
         )
         logging.info("Database downloaded from Hugging Face")
     except Exception as e:
         logging.error(f"Error downloading database: {e}")
         if not os.path.exists(DATA_FILE):
-             logging.info("Creating empty database file as download failed and file doesn't exist.")
-             with open(DATA_FILE, 'w', encoding='utf-8') as f:
                 json.dump({'users': {}, 'files': {}}, f)
 def periodic_backup():
     while True:
-        time.sleep(1800) # Sleep for 30 minutes
-        logging.info("Attempting periodic backup...")
-        try:
-            # No need to load data just for backup, save_data handles upload
-            # Ensure data is loaded once before first potential save
-            load_data() # Load to ensure cache is populated if needed elsewhere
-            # Directly trigger upload which uses the current file
-            upload_db_to_hf()
-        except Exception as e:
-            logging.error(f"Error during periodic backup: {e}")
 def get_file_type(filename):
-    filename_lower = filename.lower()
-    video_extensions = ('.mp4', '.mov', '.avi', '.webm', '.mkv', '.flv', '.wmv')
-    image_extensions = ('.jpg', '.jpeg', '.png', '.gif', '.bmp', '.tiff', '.webp', '.svg')
-    pdf_extensions = ('.pdf',)
-    text_extensions = ('.txt', '.md', '.log', '.csv', '.json', '.xml', '.html', '.css', '.js', '.py', '.java', '.c', '.cpp', '.h', '.hpp', '.sh', '.bat')
-    if filename_lower.endswith(video_extensions):
-        return 'video'
-    elif filename_lower.endswith(image_extensions):
-        return 'image'
-    elif filename_lower.endswith(pdf_extensions):
-        return 'pdf'
-    elif filename_lower.endswith(text_extensions):
-        return 'text'
     return 'other'
 BASE_STYLE = '''
 :root {
-    --primary: #ff4d6d; --secondary: #00ddeb; --accent: #8b5cf6;
-    --background-light: #f5f6fa; --background-dark: #1a1625;
-    --card-bg: rgba(255, 255, 255, 0.95); --card-bg-dark: rgba(40, 35, 60, 0.95);
-    --text-light: #2a1e5a; --text-dark: #e8e1ff;
-    --shadow: 0 10px 30px rgba(0, 0, 0, 0.2); --glass-bg: rgba(255, 255, 255, 0.15);
-    --transition: all 0.3s ease; --delete-color: #ff4444;
 }
 * { margin: 0; padding: 0; box-sizing: border-box; }
-body { font-family: 'Inter', sans-serif; background: var(--background-light); color: var(--text-light); line-height: 1.6; }
-body.dark { background: var(--background-dark); color: var(--text-dark); }
-.container { margin: 20px auto; max-width: 1200px; padding: 25px; background: var(--card-bg); border-radius: 20px; box-shadow: var(--shadow); }
-body.dark .container { background: var(--card-bg-dark); }
-h1 { font-size: 2em; font-weight: 800; text-align: center; margin-bottom: 25px; background: linear-gradient(135deg, var(--primary), var(--accent)); -webkit-background-clip: text; color: transparent; }
-h2 { font-size: 1.5em; margin-top: 30px; color: var(--text-light); }
-body.dark h2 { color: var(--text-dark); }
-input, textarea { width: 100%; padding: 14px; margin: 12px 0; border: none; border-radius: 14px; background: var(--glass-bg); color: var(--text-light); font-size: 1.1em; box-shadow: inset 0 3px 10px rgba(0, 0, 0, 0.1); }
-body.dark input, body.dark textarea { color: var(--text-dark); }
-input:focus, textarea:focus { outline: none; box-shadow: 0 0 0 4px var(--primary); }
-.btn { padding: 14px 28px; background: var(--primary); color: white; border: none; border-radius: 14px; cursor: pointer; font-size: 1.1em; font-weight: 600; transition: var(--transition); box-shadow: var(--shadow); display: inline-block; text-decoration: none; text-align: center;}
-.btn:hover { transform: scale(1.05); background: #e6415f; }
-.download-btn { background: var(--secondary); margin-top: 10px; }
-.download-btn:hover { background: #00b8c5; }
-.delete-btn { background: var(--delete-color); margin-top: 10px; }
-.delete-btn:hover { background: #cc3333; }
-.flash { padding: 10px; margin-bottom: 15px; border-radius: 8px; background-color: var(--glass-bg); color: var(--accent); text-align: center; }
-.file-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(250px, 1fr)); gap: 20px; margin-top: 20px; }
-.user-list { margin-top: 20px; }
-.user-item { padding: 15px; background: var(--card-bg); border-radius: 16px; margin-bottom: 10px; box-shadow: var(--shadow); transition: var(--transition); }
-body.dark .user-item { background: var(--card-bg-dark); }
-.user-item:hover { transform: translateY(-5px); }
-.user-item a { color: var(--primary); text-decoration: none; font-weight: 600; }
-.user-item a:hover { color: var(--accent); }
-.file-item { background: var(--card-bg); padding: 15px; border-radius: 16px; box-shadow: var(--shadow); text-align: center; transition: var(--transition); display: flex; flex-direction: column; justify-content: space-between; }
-body.dark .file-item { background: var(--card-bg-dark); }
-.file-item:hover { transform: translateY(-5px); }
-.file-preview-container { width: 100%; height: 200px; margin-bottom: 10px; display: flex; justify-content: center; align-items: center; overflow: hidden; background: rgba(0,0,0,0.05); border-radius: 10px; }
-.file-preview, .file-preview-embed { max-width: 100%; max-height: 100%; object-fit: cover; border-radius: 10px; cursor: pointer; }
-.file-preview-embed { width: 100%; height: 100%; border: none; }
-.file-item-info { margin-top: auto; } /* Pushes buttons down */
-.file-item p { font-size: 0.9em; margin: 5px 0; word-break: break-all; }
-.file-item .filename { font-weight: 600; }
-.file-item a { color: var(--primary); text-decoration: none; }
-.file-item a:hover { color: var(--accent); }
-.modal { display: none; position: fixed; top: 0; left: 0; width: 100%; height: 100%; background: rgba(0, 0, 0, 0.85); z-index: 2000; justify-content: center; align-items: center; padding: 10px; }
-.modal-content { position: relative; max-width: 95%; max-height: 95%; }
-.modal img, .modal video { display: block; width: 100%; height: 100%; max-width: 90vw; max-height: 90vh; object-fit: contain; border-radius: 10px; box-shadow: var(--shadow); }
-.modal-close { position: absolute; top: -30px; right: -20px; color: white; font-size: 30px; cursor: pointer; background: rgba(0,0,0,0.5); border-radius: 50%; width: 30px; height: 30px; display: flex; justify-content: center; align-items: center; line-height: 1; }
-#progress-container { width: 100%; background: var(--glass-bg); border-radius: 10px; margin: 15px 0; display: none; overflow: hidden; }
-#progress-bar { width: 0%; height: 20px; background: var(--primary); border-radius: 10px 0 0 10px; transition: width 0.3s ease; text-align: center; color: white; line-height: 20px; font-size: 0.8em; }
-@media (max-width: 768px) { .file-grid { grid-template-columns: repeat(auto-fill, minmax(200px, 1fr)); } }
-@media (max-width: 480px) { .file-grid { grid-template-columns: 1fr; } }
 '''
 @app.route('/register', methods=['GET', 'POST'])
@@ -196,39 +326,25 @@ def register():
         username = request.form.get('username')
         password = request.form.get('password')
-        if not username or not password:
-            flash('Имя пользователя и пароль обязательны!')
-            return redirect(url_for('register'))
-        # Basic validation
-        if not username.isalnum() or len(username) < 3:
-             flash('Имя пользователя должно быть не менее 3 символов и содержать только буквы и цифры.')
-             return redirect(url_for('register'))
-        if len(password) < 6:
-             flash('Пароль должен быть не менее 6 символов.')
-             return redirect(url_for('register'))
         data = load_data()
         if username in data['users']:
             flash('Пользователь с таким именем уже существует!')
             return redirect(url_for('register'))
         data['users'][username] = {
-            'password': password, # Note: In production, hash passwords!
             'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
             'files': []
         }
-        try:
-            save_data(data)
-            session['username'] = username
-            flash('Регистрация прошла успешно!')
-            return redirect(url_for('dashboard'))
-        except Exception as e:
-             flash('Ошибка при сохранении данных. Попробуйте еще раз.')
-             logging.error(f"Error saving data during registration: {e}")
-             return redirect(url_for('register'))
     html = '''
 <!DOCTYPE html>
@@ -251,8 +367,8 @@ def register():
             {% endif %}
         {% endwith %}
         <form method="POST" id="register-form">
-            <input type="text" name="username" placeholder="Имя пользователя (только буквы и цифры, мин. 3)" required pattern="[a-zA-Z0-9]{3,}" title="Только буквы и цифры, минимум 3 символа">
-            <input type="password" name="password" placeholder="Пароль (минимум 6 символов)" required minlength="6">
             <button type="submit" class="btn">Зарегистрироваться</button>
         </form>
         <p style="margin-top: 20px;">Уже есть аккаунт? <a href="{{ url_for('login') }}">Войти</a></p>
@@ -269,17 +385,12 @@ def login():
         password = request.form.get('password')
         data = load_data()
-        # Note: Add password hashing and verification here in production
-        if username in data['users'] and data['users'][username].get('password') == password:
             session['username'] = username
             return jsonify({'status': 'success', 'redirect': url_for('dashboard')})
         else:
             return jsonify({'status': 'error', 'message': 'Неверное имя пользователя или пароль!'})
-    # If already logged in, redirect to dashboard
-    if 'username' in session:
-        return redirect(url_for('dashboard'))
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
@@ -294,10 +405,10 @@ def login():
     <div class="container">
         <h1>Zeus Cloud</h1>
         <div id="flash-messages">
-            {% with messages = get_flashed_messages(with_categories=true) %}
                 {% if messages %}
-                    {% for category, message in messages %}
-                        <div class="flash flash-{{ category }}">{{ message }}</div>
                     {% endfor %}
                 {% endif %}
             {% endwith %}
@@ -310,34 +421,27 @@ def login():
         <p style="margin-top: 20px;">Нет аккаунта? <a href="{{ url_for('register') }}">Зарегистрируйтесь</a></p>
     </div>
     <script>
-        // Auto-login attempt
         const savedCredentials = JSON.parse(localStorage.getItem('zeusCredentials'));
         if (savedCredentials) {
             fetch('/', {
                 method: 'POST',
-                headers: { 'Content-Type': 'application/x-www-form-urlencoded', },
                 body: `username=${encodeURIComponent(savedCredentials.username)}&password=${encodeURIComponent(savedCredentials.password)}`
             })
             .then(response => response.json())
             .then(data => {
                 if (data.status === 'success') {
                     window.location.href = data.redirect;
-                } else {
-                    // Clear invalid stored credentials
-                    localStorage.removeItem('zeusCredentials');
                 }
             })
             .catch(error => console.error('Ошибка автовхода:', error));
         }
-        // Manual login form submission
         document.getElementById('login-form').addEventListener('submit', function(e) {
             e.preventDefault();
             const formData = new FormData(this);
-            const submitButton = this.querySelector('button[type="submit"]');
-            submitButton.disabled = true;
-            submitButton.textContent = 'Вход...';
             fetch('/', {
                 method: 'POST',
                 body: formData
@@ -350,16 +454,11 @@ def login():
                     localStorage.setItem('zeusCredentials', JSON.stringify({ username, password }));
                     window.location.href = data.redirect;
                 } else {
-                    document.getElementById('flash-messages').innerHTML = `<div class="flash flash-error">${data.message}</div>`;
-                    submitButton.disabled = false;
-                    submitButton.textContent = 'Войти';
                 }
             })
             .catch(error => {
-                document.getElementById('flash-messages').innerHTML = `<div class="flash flash-error">Ошибка соединения! Попробуйте еще раз.</div>`;
-                submitButton.disabled = false;
-                submitButton.textContent = 'Войти';
-                console.error('Ошибка входа:', error);
             });
         });
     </script>
@@ -371,136 +470,64 @@ def login():
 @app.route('/dashboard', methods=['GET', 'POST'])
 def dashboard():
     if 'username' not in session:
-        flash('Пожалуйста, войдите в систему!', 'error')
         return redirect(url_for('login'))
     username = session['username']
     data = load_data()
     if username not in data['users']:
         session.pop('username', None)
-        flash('Пользователь не найден!', 'error')
         return redirect(url_for('login'))
-    if request.method == 'POST':
-        if not HF_TOKEN_WRITE:
-             flash('Загрузка невозможна: токен для записи на Hugging Face не настроен.', 'error')
-             return redirect(url_for('dashboard'))
         files = request.files.getlist('files')
-        if not files or all(not f.filename for f in files):
-             flash('Файлы для загрузки не выбраны.', 'warning')
-             return redirect(url_for('dashboard'))
-        if len(files) > 20:
-            flash('Максимум 20 файлов за раз!', 'warning')
-            # Consider returning a JSON response if the request came from JS/XHR
-            if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
-                 return jsonify({'status': 'error', 'message': 'Максимум 20 файлов за раз!'}), 400
             return redirect(url_for('dashboard'))
-        os.makedirs('uploads', exist_ok=True)
-        api = HfApi()
-        uploaded_file_infos = []
-        errors = []
-        for file in files:
-            if file and file.filename:
-                original_filename = file.filename
-                secure_original_filename = secure_filename(original_filename)
-                if not secure_original_filename: # Handle cases like '...'
-                    secure_original_filename = 'file'
-                unique_filename = f"{uuid.uuid4().hex}_{secure_original_filename}"
-                temp_path = os.path.join('uploads', unique_filename) # Use unique name for temp file too
-                hf_path = f"cloud_files/{username}/{unique_filename}"
-                try:
                     file.save(temp_path)
-                    api.upload_file(
-                        path_or_fileobj=temp_path,
-                        path_in_repo=hf_path,
-                        repo_id=REPO_ID,
-                        repo_type="dataset",
-                        token=HF_TOKEN_WRITE,
-                        commit_message=f"User {username} uploaded {original_filename}"
-                    )
-                    file_info = {
-                        'original_filename': original_filename, # Store original name for display
-                        'hf_path': hf_path, # Store the unique path on HF
-                        'type': get_file_type(original_filename),
-                        'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
-                        # Add size later if needed: 'size': os.path.getsize(temp_path)
-                    }
-                    # Ensure user exists and has 'files' list
-                    if username in data['users'] and isinstance(data['users'][username].get('files'), list):
-                         data['users'][username]['files'].append(file_info)
-                         uploaded_file_infos.append(original_filename)
-                    else:
-                         logging.error(f"User {username} or their file list not found/invalid during upload.")
-                         errors.append(f"Ошибка структуры данных для пользователя {username}")
-                except Exception as e:
-                    logging.error(f"Error uploading file {original_filename} for user {username}: {e}")
-                    errors.append(f"Ошибка загрузки файла: {original_filename}")
-                finally:
-                    if os.path.exists(temp_path):
-                        try:
-                            os.remove(temp_path)
-                        except Exception as e_rem:
-                            logging.error(f"Error removing temp file {temp_path}: {e_rem}")
-        if uploaded_file_infos or errors:
-             try:
-                 save_data(data)
-                 if uploaded_file_infos:
-                     flash(f"Успешно загружено: {', '.join(uploaded_file_infos)}", 'success')
-                 if errors:
-                     flash(f"Произошли ошибки: {'; '.join(errors)}", 'error')
-             except Exception as e:
-                 flash('Критическая ошибка при сохранении данных после загрузки!', 'error')
-                 logging.error(f"Error saving data after upload: {e}")
-        # For AJAX requests, return JSON status
-        if request.headers.get('X-Requested-With') == 'XMLHttpRequest':
-            if not errors:
-                 return jsonify({'status': 'success'})
-            else:
-                 # Return error even if some succeeded, let client reload to see changes/errors
-                 return jsonify({'status': 'error', 'message': '; '.join(errors)}), 500
-        return redirect(url_for('dashboard'))
-    # GET request part
-    user_data = data['users'].get(username, {})
-    user_files = sorted(user_data.get('files', []), key=lambda x: x.get('upload_date', ''), reverse=True)
-    # Generate HF URLs for previews
-    for file_info in user_files:
-        try:
-            # Use hf_hub_url for generating the correct URL (handles private repos if token is set)
-             # We need the non-download URL for previews like images/iframes
-            file_info['preview_url'] = hf_hub_url(
-                 repo_id=REPO_ID,
-                 filename=file_info['hf_path'],
-                 repo_type='dataset',
-                 revision='main' # or specific commit hash
-             )
-             # URL for modal (image/video) might need '?download=true' or token if private, handled by JS/direct link
-             file_info['modal_url'] = file_info['preview_url'] # Start with base url
-             # Add token parameter IF necessary and repo is private (complex logic, maybe simplify)
-             # Simplification: Assume public or token handled by browser session/cookies if needed
-             # OR pass token to JS if needed for fetch/modal
-             file_info['download_url'] = url_for('download_file', hf_path=file_info['hf_path'], original_filename=file_info['original_filename'])
-             file_info['delete_url'] = url_for('delete_file', hf_path=file_info['hf_path'])
-        except Exception as e:
-             logging.error(f"Error generating HF URL for {file_info.get('hf_path')}: {e}")
-             file_info['preview_url'] = '#'
-             file_info['modal_url'] = '#'
-             file_info['download_url'] = '#'
-             file_info['delete_url'] = '#'
     html = '''
 <!DOCTYPE html>
@@ -515,423 +542,270 @@ def dashboard():
 <body>
     <div class="container">
         <h1>Панель управления Zeus Cloud</h1>
-        <p style="text-align: center;">Пользователь: <strong>{{ username }}</strong></p>
-        <div id="flash-container">
-            {% with messages = get_flashed_messages(with_categories=true) %}
-                {% if messages %}
-                    {% for category, message in messages %}
-                        <div class="flash flash-{{ category }}">{{ message }}</div>
-                    {% endfor %}
-                {% endif %}
-            {% endwith %}
-        </div>
         <form id="upload-form" method="POST" enctype="multipart/form-data">
-            <input type="file" name="files" multiple required style="margin-bottom: 10px; display: block; background: transparent; box-shadow: none; padding: 10px; border: 1px dashed var(--accent); border-radius: 10px;">
-            <button type="submit" class="btn" id="upload-btn">Загрузить файлы (макс 20)</button>
         </form>
         <div id="progress-container">
-            <div id="progress-bar">0%</div>
         </div>
         <h2 style="margin-top: 30px;">Ваши файлы</h2>
-        <p style="text-align: center; margin-top: -5px; margin-bottom: 15px; color: var(--accent); font-size: 0.9em;">Ваши файлы под надежной защитой квантовой криптографии* <br><small style="font-size: 0.8em; color: gray;">(*маркетинговое заявление)</small></p>
         <div class="file-grid">
             {% for file in user_files %}
                 <div class="file-item">
-                    <div class="file-preview-container">
-                        {% if file['type'] == 'video' %}
-                            <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('{{ file.modal_url }}', true)">
-                                <source src="{{ file.preview_url }}" type="video/mp4"> {# Use basic URL for preview source #}
-                                Ваш браузер не поддерживает видео тег.
-                            </video>
-                        {% elif file['type'] == 'image' %}
-                             <img class="file-preview" src="{{ file.preview_url }}" alt="{{ file.original_filename }}" loading="lazy" onclick="openModal(this.src, false)">
-                        {% elif file['type'] == 'pdf' %}
-                             <iframe class="file-preview-embed" src="{{ file.preview_url }}" title="PDF Preview: {{ file.original_filename }}"></iframe>
-                        {% elif file['type'] == 'text' %}
-                             <iframe class="file-preview-embed" src="{{ file.preview_url }}" title="Text Preview: {{ file.original_filename }}"></iframe>
-                        {% else %}
-                             <p style="align-self: center; color: var(--accent);">Нет предпросмотра для {{ file.type }}</p>
-                        {% endif %}
-                    </div>
-                    <div class="file-item-info">
-                        <p class="filename" title="{{ file.original_filename }}">{{ file.original_filename | truncate(30, True) }}</p>
-                        <p style="font-size: 0.8em; color: grey;">{{ file.upload_date }}</p>
-                        <a href="{{ file.download_url }}" class="btn download-btn" style="font-size: 0.9em; padding: 8px 15px;">Скачать</a>
-                        <a href="{{ file.delete_url }}" class="btn delete-btn" style="font-size: 0.9em; padding: 8px 15px; margin-left: 5px;" onclick="return confirm('Вы уверены, что хотите удалить файл \\'{{ file.original_filename }}\\'?');">Удалить</a>
-                    </div>
                 </div>
             {% endfor %}
             {% if not user_files %}
-                <p style="grid-column: 1 / -1; text-align: center;">Вы еще не загрузили ни одного файла.</p>
             {% endif %}
         </div>
-        <div style="margin-top: 40px; padding: 20px; background: var(--glass-bg); border-radius: 15px;">
-            <h2>Добавить на главный экран</h2>
-            <p>Для быстрого доступа к Zeus Cloud, вы можете добавить это приложение на главный экран вашего телефона:</p>
-            <div style="display: flex; gap: 20px; margin-top: 15px; flex-wrap: wrap;">
-                <div style="flex: 1; min-width: 250px;">
-                    <h4>Android (Chrome):</h4>
-                    <ol style="padding-left: 20px; font-size: 0.9em;">
-                        <li>Откройте Zeus Cloud в браузере Chrome.</li>
-                        <li>Нажмите на меню (три точки).</li>
-                        <li>Выберите <strong>"Установить приложение"</strong> или <strong>"Добавить на главный экран"</strong>.</li>
-                        <li>Подтвердите добавление.</li>
-                    </ol>
-                </div>
-                <div style="flex: 1; min-width: 250px;">
-                    <h4>iOS (Safari):</h4>
-                     <ol style="padding-left: 20px; font-size: 0.9em;">
-                        <li>Откройте Zeus Cloud в браузере Safari.</li>
-                        <li>Нажмите кнопку <strong>"Поделиться"</strong> (квадрат со стрелкой).</li>
-                        <li>Прокрутите вниз и выберите <strong>"На экран «Домой»"</strong>.</li>
-                        <li>Нажмите <strong>"Добавить"</strong>.</li>
-                    </ol>
-                </div>
-            </div>
         </div>
-        <a href="{{ url_for('logout') }}" class="btn" style="margin-top: 30px; background: var(--accent);" id="logout-btn">Выйти</a>
     </div>
-    <div class="modal" id="mediaModal" onclick="closeModalOnClickOutside(event)">
-        <div class="modal-content">
-             <span class="modal-close" onclick="closeModal()">×</span>
-             <div id="modalBody"></div>
-         </div>
     </div>
     <script>
-        const HF_TOKEN_READ = "{{ HF_TOKEN_READ or '' }}"; // Pass token to JS if needed
-        function openModal(src, isVideo) {
             const modal = document.getElementById('mediaModal');
-            const modalBody = document.getElementById('modalBody');
-            let content = '';
-            // Note: For private repos, accessing direct URLs might require a token.
-            // This basic implementation assumes public access or browser-handled auth.
-            // For robust private repo access, fetch might be needed with Authorization header.
-            if (isVideo) {
-                 // Add controls and autoplay for user convenience
-                 content = `<video controls autoplay style="max-width: 90vw; max-height: 90vh; display: block; margin: auto;"><source src="${src}" type="video/mp4">Ваш браузер не поддерживает видео.</video>`;
             } else {
-                 content = `<img src="${src}" style="max-width: 90vw; max-height: 90vh; display: block; margin: auto;">`;
             }
-            modalBody.innerHTML = content;
             modal.style.display = 'flex';
         }
-        function closeModal() {
             const modal = document.getElementById('mediaModal');
-            const modalBody = document.getElementById('modalBody');
-            const video = modalBody.querySelector('video');
-            if (video) {
-                video.pause();
             }
-            modalBody.innerHTML = ''; // Clear content
-            modal.style.display = 'none';
         }
-         function closeModalOnClickOutside(event) {
-             const modal = document.getElementById('mediaModal');
-             if (event.target === modal) { // Close only if clicking the background overlay
-                 closeModal();
-             }
-         }
-        // Upload Progress Handling
         const form = document.getElementById('upload-form');
         const progressBar = document.getElementById('progress-bar');
         const progressContainer = document.getElementById('progress-container');
         const uploadBtn = document.getElementById('upload-btn');
-        const fileInput = form.querySelector('input[type="file"]');
-        const flashContainer = document.getElementById('flash-container');
         form.addEventListener('submit', function(e) {
             e.preventDefault();
-            flashContainer.innerHTML = ''; // Clear previous flashes
-            const files = fileInput.files;
             if (files.length === 0) {
-                 flashContainer.innerHTML = '<div class="flash flash-warning">Пожалуйста, выберите файлы для загрузки.</div>';
                  return;
             }
-             if (files.length > 20) {
-                 flashContainer.innerHTML = '<div class="flash flash-warning">Максимум 20 файлов за раз!</div>';
-                 return;
-             }
             const formData = new FormData(form);
             progressContainer.style.display = 'block';
             progressBar.style.width = '0%';
-            progressBar.textContent = '0%';
             uploadBtn.disabled = true;
-            uploadBtn.textContent = 'Загрузка...';
             const xhr = new XMLHttpRequest();
-            xhr.open('POST', '{{ url_for("dashboard") }}', true);
-            // Identify request as AJAX for backend
-            xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest');
             xhr.upload.onprogress = function(event) {
                 if (event.lengthComputable) {
-                    const percent = Math.round((event.loaded / event.total) * 100);
                     progressBar.style.width = percent + '%';
-                    progressBar.textContent = percent + '%';
                 }
             };
             xhr.onload = function() {
                 uploadBtn.disabled = false;
-                uploadBtn.textContent = 'Загрузить файлы (макс 20)';
                  progressContainer.style.display = 'none';
                  progressBar.style.width = '0%';
-                 progressBar.textContent = '0%';
-                if (xhr.status >= 200 && xhr.status < 300) {
-                     // Success or partial success, reload to show results and flashes
-                     window.location.reload();
-                 } else {
-                    // Handle errors shown from server or network errors
-                     let errorMsg = 'Ошибка загрузки!';
-                    try {
-                         const response = JSON.parse(xhr.responseText);
-                         if (response.message) {
-                             errorMsg = response.message;
-                         }
-                     } catch (e) { /* Ignore parsing error, use default message */ }
-                     flashContainer.innerHTML = `<div class="flash flash-error">${errorMsg}</div>`;
                  }
             };
             xhr.onerror = function() {
-                 uploadBtn.disabled = false;
-                 uploadBtn.textContent = 'Загрузить файлы (макс 20)';
-                 progressContainer.style.display = 'none';
-                 progressBar.style.width = '0%';
-                 progressBar.textContent = '0%';
-                 flashContainer.innerHTML = '<div class="flash flash-error">Ошибка сети при загрузке!</div>';
             };
             xhr.send(formData);
         });
-        // Logout clears local storage
         document.getElementById('logout-btn').addEventListener('click', function(e) {
             localStorage.removeItem('zeusCredentials');
-             // Allow the default link behavior to proceed to /logout
         });
     </script>
 </body>
 </html>
 '''
-    # Pass username, files, repo_id and token (if needed) to template
-    return render_template_string(html, username=username, user_files=user_files, repo_id=REPO_ID, HF_TOKEN_READ=HF_TOKEN_READ)
-@app.route('/download/<path:hf_path>/<original_filename>')
-def download_file(hf_path, original_filename):
     if 'username' not in session:
-        flash('��ожалуйста, войдите в систему!', 'error')
         return redirect(url_for('login'))
     username = session['username']
     data = load_data()
-    is_admin_request = request.referrer and 'admhosto' in request.referrer
-    # Permission check: User must own the file OR it's an admin request
-    if not is_admin_request:
-        if username not in data['users']:
-            session.pop('username', None)
-            flash('Пользователь не найден!', 'error')
-            return redirect(url_for('login'))
-        user_files = data['users'][username].get('files', [])
-        if not any(file.get('hf_path') == hf_path for file in user_files):
-            flash('У вас нет доступа к этому файлу или файл не найден!', 'error')
-            return redirect(url_for('dashboard'))
-    else: # Admin request check if user exists
-        owner_username = hf_path.split('/')[1] if '/' in hf_path else None
-        if owner_username not in data['users']:
-             flash(f'Владелец файла ({owner_username}) не найден!', 'error')
-             return redirect(url_for('admin_panel'))
-    # Generate the download URL (usually includes ?download=true)
-    # Using hf_hub_url might be safer if direct URL structure changes
     try:
-        # Get a URL that forces download
-        file_url = hf_hub_url(repo_id=REPO_ID, filename=hf_path, repo_type="dataset", revision="main")
-        # Append download=true if not already present (hf_hub_url might not add it)
-        file_url += "?download=true"
         api = HfApi()
         headers = {}
         if HF_TOKEN_READ:
             headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
-        # Use requests to stream the download
         response = requests.get(file_url, headers=headers, stream=True)
-        response.raise_for_status() # Check for HTTP errors (like 404 Not Found)
-        # Stream the content using send_file
         return send_file(
-            BytesIO(response.content), # Read content into memory (consider streaming for large files)
             as_attachment=True,
-            download_name=original_filename, # Use the original filename for the user
-            mimetype='application/octet-stream' # Generic mimetype
         )
     except requests.exceptions.RequestException as e:
-        logging.error(f"Error downloading file from HF ({hf_path}): {e}")
-        flash('Ошибка скачивания файла с сервера хранилища!', 'error')
     except Exception as e:
-        logging.error(f"Unexpected error during download ({hf_path}): {e}")
-        flash('Произошла непредвиденная ошибка при скачивании файла.', 'error')
-    # Redirect back based on where the request came from
-    if is_admin_request:
-         owner_username = hf_path.split('/')[1] if '/' in hf_path else None
-         if owner_username:
-             return redirect(url_for('admin_user_files', username=owner_username))
-         else:
-              return redirect(url_for('admin_panel')) # Fallback
-    else:
-         return redirect(url_for('dashboard'))
-@app.route('/delete/<path:hf_path>')
-def delete_file(hf_path):
     if 'username' not in session:
-        flash('Пожалуйста, войдите в систему!', 'error')
         return redirect(url_for('login'))
-    if not HF_TOKEN_WRITE:
-        flash('Удаление невозможна: токен для записи на Hugging Face не настроен.', 'error')
-        return redirect(url_for('dashboard'))
     username = session['username']
     data = load_data()
-    if username not in data['users'] or 'files' not in data['users'][username]:
         session.pop('username', None)
-        flash('Пользователь или его файлы не найдены!', 'error')
         return redirect(url_for('login'))
     user_files = data['users'][username]['files']
-    original_filename = "Неизвестный файл"
-    file_found_in_db = False
-    for file_info in user_files:
-        if file_info.get('hf_path') == hf_path:
-             original_filename = file_info.get('original_filename', original_filename)
-             file_found_in_db = True
-             break
-    if not file_found_in_db:
-        flash(f'Файл ({original_filename}) не найден в вашей базе данных!', 'warning')
-        # Optionally try deleting from HF anyway if out of sync? For now, just redirect.
         return redirect(url_for('dashboard'))
     try:
         api = HfApi()
         api.delete_file(
-            path_in_repo=hf_path,
             repo_id=REPO_ID,
             repo_type="dataset",
             token=HF_TOKEN_WRITE,
-            commit_message=f"User {username} deleted file {original_filename}"
         )
-        # Remove from database only after successful HF deletion
-        data['users'][username]['files'] = [f for f in user_files if f.get('hf_path') != hf_path]
         save_data(data)
-        flash(f'Файл "{original_filename}" успешно удален!', 'success')
-        logging.info(f"User {username} deleted file {hf_path}")
     except Exception as e:
-        # Check if file not found error means it was already deleted
-        if "404" in str(e) or "not found" in str(e).lower():
-             logging.warning(f"File {hf_path} not found on HF during delete attempt by {username}, possibly already deleted. Removing from DB.")
-             data['users'][username]['files'] = [f for f in user_files if f.get('hf_path') != hf_path]
-             try:
-                 save_data(data)
-                 flash(f'Файл "{original_filename}" не найден в хранилище, удален из списка.', 'warning')
-             except Exception as save_e:
-                  flash('Ошибка при обновлении базы данных после обнаружения отсутствующего файла.', 'error')
-                  logging.error(f"Error saving data after failed delete (file not found): {save_e}")
-        else:
-            logging.error(f"Error deleting file {hf_path} for user {username}: {e}")
-            flash(f'Ошибка при удалении файла "{original_filename}"!', 'error')
     return redirect(url_for('dashboard'))
 @app.route('/logout')
 def logout():
     session.pop('username', None)
-    flash('Вы успешно вышли из системы.', 'success')
-    # JS on login page handles localStorage clearing
     return redirect(url_for('login'))
-# --- Admin Routes ---
-# Simple password protection for admin routes (replace with proper auth)
-ADMIN_PASSWORD = os.getenv("ADMIN_PASSWORD", "adminpass123")
-def check_admin():
-    """Checks if admin is logged in via session."""
-    return session.get('is_admin')
-@app.route('/admhosto/login', methods=['GET', 'POST'])
-def admin_login():
-    if request.method == 'POST':
-        password = request.form.get('password')
-        if password == ADMIN_PASSWORD:
-            session['is_admin'] = True
-            flash('Успешный вход в админ-панель.', 'success')
-            return redirect(url_for('admin_panel'))
-        else:
-            flash('Неверный пароль администратора.', 'error')
-            return redirect(url_for('admin_login'))
-    if check_admin():
-         return redirect(url_for('admin_panel'))
-    html = f'''
-<!DOCTYPE html>
-<html lang="ru">
-<head>
-    <meta charset="UTF-8"><title>Вход в Админ-панель</title>
-    <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;800&display=swap" rel="stylesheet">
-    <style>{BASE_STYLE}</style>
-</head>
-<body>
-<div class="container">
-    <h1>Вход в Админ-панель</h1>
-    {% with messages = get_flashed_messages(with_categories=true) %}
-      {% if messages %}{% for category, message in messages %}
-      <div class="flash flash-{{ category }}">{{ message }}</div>
-      {% endfor %}{% endif %}
-    {% endwith %}
-    <form method="POST">
-        <input type="password" name="password" placeholder="Пароль администратора" required>
-        <button type="submit" class="btn">Войти</button>
-    </form>
-</div>
-</body></html>'''
-    return render_template_string(html)
-@app.route('/admhosto/logout')
-def admin_logout():
-    session.pop('is_admin', None)
-    flash('Вы вышли из админ-панели.', 'info')
-    return redirect(url_for('admin_login'))
 @app.route('/admhosto')
 def admin_panel():
-    if not check_admin():
-        return redirect(url_for('admin_login'))
     data = load_data()
-    users = data.get('users', {})
     html = '''
 <!DOCTYPE html>
@@ -946,32 +820,31 @@ def admin_panel():
 <body>
     <div class="container">
         <h1>Админ-панель Zeus Cloud</h1>
-         <a href="{{ url_for('admin_logout') }}" class="btn delete-btn" style="position: absolute; top: 30px; right: 30px; padding: 10px 15px; font-size: 0.9em;">Выйти</a>
-        {% with messages = get_flashed_messages(with_categories=true) %}
-          {% if messages %}<div style="margin-top: 15px;">
-              {% for category, message in messages %}
-                <div class="flash flash-{{ category }}">{{ message }}</div>
-              {% endfor %}
-          </div>{% endif %}
-        {% endwith %}
-        <h2>Список пользователей ({{ users | length }})</h2>
         <div class="user-list">
-            {% for username, user_data in users.items() | sort %}
                 <div class="user-item">
-                    <strong style="font-size: 1.1em;"><a href="{{ url_for('admin_user_files', username=username) }}">{{ username }}</a></strong>
-                    <p style="font-size: 0.85em; color: grey;">Дата регистрации: {{ user_data.get('created_at', 'N/A') }}</p>
-                    <p style="font-size: 0.85em; color: grey;">Количество файлов: {{ user_data.get('files', []) | length }}</p>
-                     <div style="margin-top: 10px;">
-                         <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline;" onsubmit="return confirm('Вы уверены, что хотите УДАЛИТЬ пользователя {{ username }} и ВСЕ его файлы? Это действие НЕОБРАТИМО!');">
-                             <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить пользователя</button>
-                         </form>
-                    </div>
                 </div>
             {% endfor %}
             {% if not users %}
                 <p>Пользователей пока нет.</p>
             {% endif %}
         </div>
     </div>
 </body>
 </html>
@@ -980,31 +853,13 @@ def admin_panel():
 @app.route('/admhosto/user/<username>')
 def admin_user_files(username):
-    if not check_admin():
-        return redirect(url_for('admin_login'))
     data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
         return redirect(url_for('admin_panel'))
     user_files = sorted(data['users'][username].get('files', []), key=lambda x: x.get('upload_date', ''), reverse=True)
-    # Generate HF URLs for previews
-    for file_info in user_files:
-         try:
-             file_info['preview_url'] = hf_hub_url(repo_id=REPO_ID, filename=file_info['hf_path'], repo_type='dataset')
-             file_info['modal_url'] = file_info['preview_url'] # Use same base URL
-             file_info['download_url'] = url_for('download_file', hf_path=file_info['hf_path'], original_filename=file_info['original_filename'])
-             file_info['admin_delete_url'] = url_for('admin_delete_file', username=username, hf_path=file_info['hf_path'])
-         except Exception as e:
-              logging.error(f"Admin: Error generating HF URL for {file_info.get('hf_path')}: {e}")
-              file_info['preview_url'] = '#'
-              file_info['modal_url'] = '#'
-              file_info['download_url'] = '#'
-              file_info['admin_delete_url'] = '#'
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
@@ -1017,237 +872,181 @@ def admin_user_files(username):
 </head>
 <body>
     <div class="container">
-        <a href="{{ url_for('admin_panel') }}" class="btn" style="position: absolute; top: 30px; left: 30px; padding: 10px 15px; font-size: 0.9em; background: var(--accent);">← Назад</a>
-         <a href="{{ url_for('admin_logout') }}" class="btn delete-btn" style="position: absolute; top: 30px; right: 30px; padding: 10px 15px; font-size: 0.9em;">Выйти</a>
         <h1>Файлы пользователя: {{ username }}</h1>
-        {% with messages = get_flashed_messages(with_categories=true) %}
             {% if messages %}
-                {% for category, message in messages %}
-                    <div class="flash flash-{{ category }}">{{ message }}</div>
                 {% endfor %}
             {% endif %}
         {% endwith %}
         <div class="file-grid">
             {% for file in user_files %}
                 <div class="file-item">
-                     <div class="file-preview-container">
-                        {% if file['type'] == 'video' %}
-                            <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('{{ file.modal_url }}', true)">
-                                <source src="{{ file.preview_url }}" type="video/mp4">
-                            </video>
-                        {% elif file['type'] == 'image' %}
-                            <img class="file-preview" src="{{ file.preview_url }}" alt="{{ file.original_filename }}" loading="lazy" onclick="openModal(this.src, false)">
-                         {% elif file['type'] == 'pdf' %}
-                             <iframe class="file-preview-embed" src="{{ file.preview_url }}" title="PDF Preview: {{ file.original_filename }}"></iframe>
-                        {% elif file['type'] == 'text' %}
-                             <iframe class="file-preview-embed" src="{{ file.preview_url }}" title="Text Preview: {{ file.original_filename }}"></iframe>
-                        {% else %}
-                            <p style="align-self: center; color: var(--accent);">Нет предпросмотра для {{ file.type }}</p>
-                        {% endif %}
-                    </div>
-                     <div class="file-item-info">
-                        <p class="filename" title="{{ file.original_filename }}">{{ file.original_filename | truncate(30, True) }}</p>
-                        <p style="font-size: 0.8em; color: grey;">{{ file.get('upload_date', 'N/A') }}</p>
-                        <a href="{{ file.download_url }}" class="btn download-btn" style="font-size: 0.9em; padding: 8px 15px;">Скачать</a>
-                        <form method="POST" action="{{ file.admin_delete_url }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить файл \\'{{ file.original_filename }}\\' пользователя {{ username }}?');">
-                              <button type="submit" class="btn delete-btn" style="padding: 8px 15px; font-size: 0.9em;">Удалить</button>
-                        </form>
-                    </div>
                 </div>
             {% endfor %}
             {% if not user_files %}
-                <p style="grid-column: 1 / -1; text-align: center;">У этого пользователя пока нет файлов.</p>
             {% endif %}
         </div>
     </div>
-    <div class="modal" id="mediaModal" onclick="closeModalOnClickOutside(event)">
-         <div class="modal-content">
-             <span class="modal-close" onclick="closeModal()">×</span>
-             <div id="modalBody"></div>
-         </div>
     </div>
      <script>
-        // Re-use modal functions from dashboard
-        function openModal(src, isVideo) {
             const modal = document.getElementById('mediaModal');
-            const modalBody = document.getElementById('modalBody');
-            let content = '';
-            if (isVideo) {
-                 content = `<video controls autoplay style="max-width: 90vw; max-height: 90vh; display: block; margin: auto;"><source src="${src}" type="video/mp4">Видео не поддерживается.</video>`;
             } else {
-                 content = `<img src="${src}" style="max-width: 90vw; max-height: 90vh; display: block; margin: auto;">`;
             }
-            modalBody.innerHTML = content;
             modal.style.display = 'flex';
         }
-        function closeModal() {
             const modal = document.getElementById('mediaModal');
-            const modalBody = document.getElementById('modalBody');
-            const video = modalBody.querySelector('video');
-            if (video) { video.pause(); }
-            modalBody.innerHTML = '';
-            modal.style.display = 'none';
         }
-         function closeModalOnClickOutside(event) {
-             if (event.target === document.getElementById('mediaModal')) { closeModal(); }
-         }
     </script>
 </body>
 </html>
 '''
-    return render_template_string(html, username=username, user_files=user_files, repo_id=REPO_ID)
 @app.route('/admhosto/delete_user/<username>', methods=['POST'])
 def admin_delete_user(username):
-    if not check_admin():
-         flash('Требуется авторизация администратора.', 'error')
-         return redirect(url_for('admin_login'))
-    if not HF_TOKEN_WRITE:
-         flash('Удаление невозможно: токен для записи на Hugging Face не настроен.', 'error')
-         return redirect(url_for('admin_panel'))
     data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
         return redirect(url_for('admin_panel'))
     user_files_to_delete = data['users'][username].get('files', [])
-    hf_paths_to_delete = [file['hf_path'] for file in user_files_to_delete if 'hf_path' in file]
-    folder_path = f"cloud_files/{username}"
     try:
         api = HfApi()
-        deleted_hf = False
-        # Try deleting the whole folder first (more efficient)
-        try:
-            logging.info(f"Admin attempting to delete folder: {folder_path}")
-            api.delete_folder(
-                 folder_path=folder_path,
-                 repo_id=REPO_ID,
-                 repo_type="dataset",
-                 token=HF_TOKEN_WRITE,
-                 commit_message=f"Admin deleted folder for user {username}"
-            )
-            logging.info(f"Admin successfully deleted folder {folder_path}")
-            deleted_hf = True
-        except Exception as folder_del_err:
-             logging.warning(f"Admin failed to delete folder {folder_path} ({folder_del_err}). Attempting individual file deletion.")
-             # Fallback: delete files individually if folder deletion fails or isn't supported well
-             if hf_paths_to_delete:
-                  delete_results = api.delete_files(
-                      paths_in_repo=hf_paths_to_delete,
-                      repo_id=REPO_ID,
-                      repo_type="dataset",
-                      token=HF_TOKEN_WRITE,
-                      commit_message=f"Admin deleted files for user {username}",
-                      # Consider adding ignore_patterns=None, ignore_regex=None if needed
-                  )
-                  # Note: delete_files might not raise errors for non-existent files, just logs them.
-                  # We assume success if no exception is raised here.
-                  logging.info(f"Admin deleted individual files for user {username}. Results (may vary): {delete_results}")
-                  deleted_hf = True # Assume deletion attempted/succeeded for DB removal
-        # Delete user from database AFTER attempting HF deletion
         del data['users'][username]
         save_data(data)
-        flash(f'Пользователь "{username}" и его файлы (попытка удаления из хранилища) успешно удалены из базы данных!', 'success')
-        logging.info(f"Admin deleted user {username} entry from database.")
     except Exception as e:
-        logging.error(f"Error during admin deletion of user {username}: {e}")
-        flash(f'Произошла ошибка при удалении пользователя "{username}"!', 'error')
     return redirect(url_for('admin_panel'))
-@app.route('/admhosto/delete_file/<username>/<path:hf_path>', methods=['POST'])
-def admin_delete_file(username, hf_path):
-    if not check_admin():
-         flash('Требуется авторизация администратора.', 'error')
-         return redirect(url_for('admin_login'))
-    if not HF_TOKEN_WRITE:
-         flash('Удаление невозможно: токен для записи на Hugging Face не настроен.', 'error')
-         return redirect(url_for('admin_user_files', username=username))
-    data = load_data()
-    if username not in data.get('users', {}):
-        flash(f'Пользователь "{username}" не найден!', 'error')
-        return redirect(url_for('admin_panel'))
-    user_files = data['users'][username].get('files', [])
-    original_filename = "Неизвестный файл"
-    file_found_in_db = False
-    for file_info in user_files:
-        if file_info.get('hf_path') == hf_path:
-             original_filename = file_info.get('original_filename', original_filename)
-             file_found_in_db = True
-             break
-    if not file_found_in_db:
-        flash(f'Файл ({original_filename}) не найден в базе данных пользователя "{username}"!', 'warning')
-        # Proceed with HF deletion attempt anyway in case DB is out of sync
-    try:
-        api = HfApi()
-        api.delete_file(
-            path_in_repo=hf_path,
-            repo_id=REPO_ID,
-            repo_type="dataset",
-            token=HF_TOKEN_WRITE,
-            commit_message=f"Admin deleted file {original_filename} for user {username}"
-        )
-        # Remove from DB after successful HF deletion (or if it wasn't in DB initially)
-        data['users'][username]['files'] = [f for f in user_files if f.get('hf_path') != hf_path]
-        save_data(data)
-        flash(f'Файл "{original_filename}" пользователя "{username}" успешно удален!', 'success')
-        logging.info(f"Admin deleted file {hf_path} for user {username}")
-    except Exception as e:
-         # Check if file not found error means it was already deleted
-         if "404" in str(e) or "not found" in str(e).lower():
-             logging.warning(f"Admin: File {hf_path} not found on HF during delete attempt for {username}. Removing from DB.")
-             data['users'][username]['files'] = [f for f in user_files if f.get('hf_path') != hf_path]
-             try:
-                 save_data(data)
-                 flash(f'Файл "{original_filename}" не найден в хранилище, удален из списка пользователя "{username}".', 'warning')
-             except Exception as save_e:
-                  flash('Ошибка при обновлении базы данных после обнаружения отсутствующего файла.', 'error')
-                  logging.error(f"Admin: Error saving data after failed delete (file not found): {save_e}")
-         else:
-             logging.error(f"Admin error deleting file {hf_path} for user {username}: {e}")
-             flash(f'Ошибка при удалении файла "{original_filename}" пользователя "{username}"!', 'error')
-    return redirect(url_for('admin_user_files', username=username))
 if __name__ == '__main__':
     if not HF_TOKEN_WRITE:
         logging.warning("HF_TOKEN (write access) is not set. File uploads and deletions will fail.")
     if not HF_TOKEN_READ:
-        logging.warning("HF_TOKEN_READ is not set. Falling back to HF_TOKEN (if set). File downloads/previews might fail for private repos if HF_TOKEN is also not set.")
-    if not os.getenv("ADMIN_PASSWORD"):
-         logging.warning("ADMIN_PASSWORD environment variable not set. Using default weak password 'adminpass123'.")
-    # Initial data load and potential download from HF
-    logging.info("Performing initial data load...")
-    load_data()
-    logging.info("Initial data load complete.")
-    # Start periodic backup only if write token is available
     if HF_TOKEN_WRITE:
-        backup_thread = threading.Thread(target=periodic_backup, daemon=True)
-        backup_thread.start()
-        logging.info("Periodic backup thread started.")
     else:
         logging.warning("Periodic backup disabled because HF_TOKEN (write access) is not set.")
-    # Use waitress or gunicorn in production instead of Flask's built-in server
-    # Example using Flask's server for development:
-    app.run(debug=False, host='0.0.0.0', port=int(os.getenv("PORT", 7860)))
-# --- END OF FILE app (8).py ---

 from flask import Flask, render_template_string, request, redirect, url_for, session, flash, send_file, jsonify
 from flask_caching import Cache
 import json
 import logging
 import threading
 import time
 from datetime import datetime
+from huggingface_hub import HfApi, hf_hub_download
 from werkzeug.utils import secure_filename
 import requests
 from io import BytesIO
+import uuid
+import mimetypes
 app = Flask(__name__)
 app.secret_key = os.getenv("FLASK_SECRET_KEY", "supersecretkey")
                 return {'users': {}, 'files': {}}
             data.setdefault('users', {})
             data.setdefault('files', {})
             logging.info("Data successfully loaded")
             return data
     except Exception as e:
         logging.error(f"Error loading data: {e}")
         return {'users': {}, 'files': {}}
         raise
 def upload_db_to_hf():
     try:
         api = HfApi()
         api.upload_file(
         logging.error(f"Error uploading database: {e}")
 def download_db_from_hf():
     try:
         hf_hub_download(
             repo_id=REPO_ID,
             repo_type="dataset",
             token=HF_TOKEN_READ,
             local_dir=".",
+            local_dir_use_symlinks=False
         )
         logging.info("Database downloaded from Hugging Face")
     except Exception as e:
         logging.error(f"Error downloading database: {e}")
         if not os.path.exists(DATA_FILE):
+            with open(DATA_FILE, 'w', encoding='utf-8') as f:
                 json.dump({'users': {}, 'files': {}}, f)
 def periodic_backup():
     while True:
+        upload_db_to_hf()
+        time.sleep(1800)
 def get_file_type(filename):
+    mime_type, _ = mimetypes.guess_type(filename)
+    if mime_type:
+        if mime_type.startswith('image'):
+            return 'image'
+        elif mime_type.startswith('video'):
+            return 'video'
+        elif mime_type == 'application/pdf':
+            return 'pdf'
+        elif mime_type == 'text/plain':
+            return 'text'
     return 'other'
 BASE_STYLE = '''
 :root {
+    --primary: #ff4d6d;
+    --secondary: #00ddeb;
+    --accent: #8b5cf6;
+    --background-light: #f5f6fa;
+    --background-dark: #1a1625;
+    --card-bg: rgba(255, 255, 255, 0.95);
+    --card-bg-dark: rgba(40, 35, 60, 0.95);
+    --text-light: #2a1e5a;
+    --text-dark: #e8e1ff;
+    --shadow: 0 10px 30px rgba(0, 0, 0, 0.2);
+    --glass-bg: rgba(255, 255, 255, 0.15);
+    --transition: all 0.3s ease;
+    --delete-color: #ff4444;
 }
 * { margin: 0; padding: 0; box-sizing: border-box; }
+body {
+    font-family: 'Inter', sans-serif;
+    background: var(--background-light);
+    color: var(--text-light);
+    line-height: 1.6;
+}
+body.dark {
+    background: var(--background-dark);
+    color: var(--text-dark);
+}
+.container {
+    margin: 20px auto;
+    max-width: 1200px;
+    padding: 25px;
+    background: var(--card-bg);
+    border-radius: 20px;
+    box-shadow: var(--shadow);
+}
+body.dark .container {
+    background: var(--card-bg-dark);
+}
+h1 {
+    font-size: 2em;
+    font-weight: 800;
+    text-align: center;
+    margin-bottom: 25px;
+    background: linear-gradient(135deg, var(--primary), var(--accent));
+    -webkit-background-clip: text;
+    color: transparent;
+}
+h2 {
+    font-size: 1.5em;
+    margin-top: 30px;
+    color: var(--text-light);
+}
+body.dark h2 {
+    color: var(--text-dark);
+}
+input, textarea {
+    width: 100%;
+    padding: 14px;
+    margin: 12px 0;
+    border: none;
+    border-radius: 14px;
+    background: var(--glass-bg);
+    color: var(--text-light);
+    font-size: 1.1em;
+    box-shadow: inset 0 3px 10px rgba(0, 0, 0, 0.1);
+}
+body.dark input, body.dark textarea {
+    color: var(--text-dark);
+}
+input:focus, textarea:focus {
+    outline: none;
+    box-shadow: 0 0 0 4px var(--primary);
+}
+.btn {
+    padding: 14px 28px;
+    background: var(--primary);
+    color: white;
+    border: none;
+    border-radius: 14px;
+    cursor: pointer;
+    font-size: 1.1em;
+    font-weight: 600;
+    transition: var(--transition);
+    box-shadow: var(--shadow);
+    display: inline-block;
+    text-decoration: none;
+}
+.btn:hover {
+    transform: scale(1.05);
+    background: #e6415f;
+}
+.download-btn {
+    background: var(--secondary);
+    margin-top: 10px;
+}
+.download-btn:hover {
+    background: #00b8c5;
+}
+.delete-btn {
+    background: var(--delete-color);
+    margin-top: 10px;
+}
+.delete-btn:hover {
+    background: #cc3333;
+}
+.flash {
+    color: var(--secondary);
+    text-align: center;
+    margin-bottom: 15px;
+}
+.file-grid {
+    display: grid;
+    grid-template-columns: repeat(auto-fill, minmax(250px, 1fr));
+    gap: 20px;
+    margin-top: 20px;
+}
+.user-list {
+    margin-top: 20px;
+}
+.user-item {
+    padding: 15px;
+    background: var(--card-bg);
+    border-radius: 16px;
+    margin-bottom: 10px;
+    box-shadow: var(--shadow);
+    transition: var(--transition);
+}
+body.dark .user-item {
+    background: var(--card-bg-dark);
+}
+.user-item:hover {
+    transform: translateY(-5px);
+}
+.user-item a {
+    color: var(--primary);
+    text-decoration: none;
+    font-weight: 600;
+}
+.user-item a:hover {
+    color: var(--accent);
+}
+@media (max-width: 768px) {
+    .file-grid {
+        grid-template-columns: repeat(2, 1fr);
+    }
+}
+@media (max-width: 480px) {
+    .file-grid {
+        grid-template-columns: 1fr;
+    }
+}
+.file-item {
+    background: var(--card-bg);
+    padding: 15px;
+    border-radius: 16px;
+    box-shadow: var(--shadow);
+    text-align: center;
+    transition: var(--transition);
+}
+body.dark .file-item {
+    background: var(--card-bg-dark);
+}
+.file-item:hover {
+    transform: translateY(-5px);
+}
+.file-preview {
+    max-width: 100%;
+    max-height: 200px;
+    object-fit: cover;
+    border-radius: 10px;
+    margin-bottom: 10px;
+    loading: lazy;
+}
+.file-item p {
+    font-size: 0.9em;
+    margin: 5px 0;
+}
+.file-item a {
+    color: var(--primary);
+    text-decoration: none;
+}
+.file-item a:hover {
+    color: var(--accent);
+}
+.modal {
+    display: none;
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100%;
+    height: 100%;
+    background: rgba(0, 0, 0, 0.85);
+    z-index: 2000;
+    justify-content: center;
+    align-items: center;
+}
+.modal img, .modal video, .modal iframe, .modal pre {
+    max-width: 95%;
+    max-height: 95%;
+    object-fit: contain;
+    border-radius: 20px;
+    box-shadow: var(--shadow);
+}
+#progress-container {
+    width: 100%;
+    background: var(--glass-bg);
+    border-radius: 10px;
+    margin: 15px 0;
+    display: none;
+}
+#progress-bar {
+    width: 0%;
+    height: 20px;
+    background: var(--primary);
+    border-radius: 10px;
+    transition: width 0.3s ease;
+}
 '''
 @app.route('/register', methods=['GET', 'POST'])
         username = request.form.get('username')
         password = request.form.get('password')
         data = load_data()
         if username in data['users']:
             flash('Пользователь с таким именем уже существует!')
             return redirect(url_for('register'))
+        if not username or not password:
+            flash('Имя пользователя и пароль обязательны!')
+            return redirect(url_for('register'))
         data['users'][username] = {
+            'password': password,
             'created_at': datetime.now().strftime('%Y-%m-%d %H:%M:%S'),
             'files': []
         }
+        save_data(data)
+        session['username'] = username
+        flash('Регистрация прошла успешно!')
+        return redirect(url_for('dashboard'))
     html = '''
 <!DOCTYPE html>
             {% endif %}
         {% endwith %}
         <form method="POST" id="register-form">
+            <input type="text" name="username" placeholder="Введите имя пользователя" required>
+            <input type="password" name="password" placeholder="Введите пароль" required>
             <button type="submit" class="btn">Зарегистрироваться</button>
         </form>
         <p style="margin-top: 20px;">Уже есть аккаунт? <a href="{{ url_for('login') }}">Войти</a></p>
         password = request.form.get('password')
         data = load_data()
+        if username in data['users'] and data['users'][username]['password'] == password:
             session['username'] = username
             return jsonify({'status': 'success', 'redirect': url_for('dashboard')})
         else:
             return jsonify({'status': 'error', 'message': 'Неверное имя пользователя или пароль!'})
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
     <div class="container">
         <h1>Zeus Cloud</h1>
         <div id="flash-messages">
+            {% with messages = get_flashed_messages() %}
                 {% if messages %}
+                    {% for message in messages %}
+                        <div class="flash">{{ message }}</div>
                     {% endfor %}
                 {% endif %}
             {% endwith %}
         <p style="margin-top: 20px;">Нет аккаунта? <a href="{{ url_for('register') }}">Зарегистрируйтесь</a></p>
     </div>
     <script>
         const savedCredentials = JSON.parse(localStorage.getItem('zeusCredentials'));
         if (savedCredentials) {
             fetch('/', {
                 method: 'POST',
+                headers: {
+                    'Content-Type': 'application/x-www-form-urlencoded',
+                },
                 body: `username=${encodeURIComponent(savedCredentials.username)}&password=${encodeURIComponent(savedCredentials.password)}`
             })
             .then(response => response.json())
             .then(data => {
                 if (data.status === 'success') {
                     window.location.href = data.redirect;
                 }
             })
             .catch(error => console.error('Ошибка автовхода:', error));
         }
         document.getElementById('login-form').addEventListener('submit', function(e) {
             e.preventDefault();
             const formData = new FormData(this);
             fetch('/', {
                 method: 'POST',
                 body: formData
                     localStorage.setItem('zeusCredentials', JSON.stringify({ username, password }));
                     window.location.href = data.redirect;
                 } else {
+                    document.getElementById('flash-messages').innerHTML = `<div class="flash">${data.message}</div>`;
                 }
             })
             .catch(error => {
+                document.getElementById('flash-messages').innerHTML = `<div class="flash">Ошибка соединения!</div>`;
             });
         });
     </script>
 @app.route('/dashboard', methods=['GET', 'POST'])
 def dashboard():
     if 'username' not in session:
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
     username = session['username']
     data = load_data()
     if username not in data['users']:
         session.pop('username', None)
+        flash('Пользователь не найден!')
         return redirect(url_for('login'))
+    user_files = sorted(data['users'][username]['files'], key=lambda x: x['upload_date'], reverse=True)
+    if request.method == 'POST':
         files = request.files.getlist('files')
+        if files and len(files) > 20:
+            flash('Максимум 20 файлов за раз!')
             return redirect(url_for('dashboard'))
+        if files:
+            os.makedirs('uploads', exist_ok=True)
+            api = HfApi()
+            temp_files = []
+            for file in files:
+                if file and file.filename:
+                    original_filename = secure_filename(file.filename)
+                    unique_filename = f"{uuid.uuid4()}{os.path.splitext(original_filename)[1]}"
+                    temp_path = os.path.join('uploads', unique_filename)
                     file.save(temp_path)
+                    temp_files.append((temp_path, unique_filename, original_filename))
+            for temp_path, unique_filename, original_filename in temp_files:
+                file_path = f"cloud_files/{username}/{unique_filename}"
+                api.upload_file(
+                    path_or_fileobj=temp_path,
+                    path_in_repo=file_path,
+                    repo_id=REPO_ID,
+                    repo_type="dataset",
+                    token=HF_TOKEN_WRITE,
+                    commit_message=f"Uploaded file for {username}"
+                )
+                file_info = {
+                    'filename': original_filename,
+                    'unique_filename': unique_filename,
+                    'path': file_path,
+                    'type': get_file_type(unique_filename),
+                    'upload_date': datetime.now().strftime('%Y-%m-%d %H:%M:%S')
+                }
+                data['users'][username]['files'].append(file_info)
+                if os.path.exists(temp_path):
+                    os.remove(temp_path)
+            save_data(data)
+            flash('Файлы успешно загружены!')
+        return redirect(url_for('dashboard'))
     html = '''
 <!DOCTYPE html>
 <body>
     <div class="container">
         <h1>Панель управления Zeus Cloud</h1>
+        <p>Пользователь: {{ username }}</p>
+        {% with messages = get_flashed_messages() %}
+            {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
+                {% endfor %}
+            {% endif %}
+        {% endwith %}
         <form id="upload-form" method="POST" enctype="multipart/form-data">
+            <input type="file" name="files" multiple required>
+            <button type="submit" class="btn" id="upload-btn">Загрузить файлы</button>
         </form>
         <div id="progress-container">
+            <div id="progress-bar"></div>
         </div>
         <h2 style="margin-top: 30px;">Ваши файлы</h2>
+        <p style="text-align: center; margin-top: 10px; color: var(--accent);">Ваши файлы под надежной защитой квантовой криптографии</p>
         <div class="file-grid">
             {% for file in user_files %}
                 <div class="file-item">
+                    {% if file['type'] == 'video' %}
+                        <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}', true)">
+                            <source src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" type="video/mp4">
+                        </video>
+                    {% elif file['type'] == 'image' %}
+                        <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
+                    {% elif file['type'] == 'pdf' %}
+                        <iframe class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}#toolbar=0" loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}', 'pdf')"></iframe>
+                    {% elif file['type'] == 'text' %}
+                        <p class="file-preview" style="overflow: auto; white-space: pre-wrap;" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}', 'text')">Text file</p>
+                    {% else %}
+                        <p>{{ file['filename'] }}</p>
+                    {% endif %}
+                    <p>{{ file['filename'] }}</p>
+                    <p>{{ file['upload_date'] }}</p>
+                    <a href="{{ url_for('download_file', file_path=file['path'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
+                    <a href="{{ url_for('delete_file', file_path=file['path']) }}" class="btn delete-btn" onclick="return confirm('Вы уверены, что хотите удалить этот файл?');">Удалить</a>
                 </div>
             {% endfor %}
             {% if not user_files %}
+                <p>Вы еще не загрузили ни одного файла.</p>
             {% endif %}
         </div>
+        <h2 style="margin-top: 30px;">Добавить на главный экран</h2>
+        <p>Для быстрого доступа к Zeus Cloud, вы можете добавить это приложение на главный экран вашего телефона:</p>
+        <div style="margin-top: 10px;">
+            <h3>Для пользователей Android:</h3>
+            <ol>
+                <li>Откройте Zeus Cloud в браузере Chrome.</li>
+                <li>Нажмите на меню браузера (обычно три точки вверху справа).</li>
+                <li>Выберите <strong>"Добавить на главный экран"</strong>.</li>
+                <li>Подтвердите добавление, и иконка приложения появится на вашем главном экране.</li>
+            </ol>
         </div>
+        <div style="margin-top: 10px;">
+            <h3>Для пользователей iOS (iPhone/iPad):</h3>
+            <ol>
+                <li>Откройте Zeus Cloud в браузере Safari.</li>
+                <li>Нажмите кнопку <strong>"Поделиться"</strong> (квадрат со стрелкой вверх) в нижней части экрана.</li>
+                <li>Прокрутите список опций вниз и выберите <strong>"Добавить на экран «Домой»"</strong>.</li>
+                <li>В правом верхнем углу нажмите <strong>"Добавить"</strong>. Иконка приложения появится на вашем главном экране.</li>
+            </ol>
+        </div>
+        <a href="{{ url_for('logout') }}" class="btn" style="margin-top: 20px;" id="logout-btn">Выйти</a>
     </div>
+    <div class="modal" id="mediaModal" onclick="closeModal(event)">
+        <div id="modalContent"></div>
     </div>
     <script>
+        async function openModal(src, type) {
             const modal = document.getElementById('mediaModal');
+            const modalContent = document.getElementById('modalContent');
+            if (type === true) {
+                modalContent.innerHTML = `<video controls autoplay><source src="${src}" type="video/mp4"></video>`;
+            } else if (type === 'pdf') {
+                modalContent.innerHTML = `<iframe src="${src}#toolbar=0" style="width: 95%; height: 95vh;"></iframe>`;
+            } else if (type === 'text') {
+                try {
+                    const response = await fetch(src);
+                    const text = await response.text();
+                    modalContent.innerHTML = `<pre style="white-space: pre-wrap; overflow: auto;">${text}</pre>`;
+                } catch (e) {
+                    modalContent.innerHTML = `<p>Ошибка загрузки текстового файла</p>`;
+                }
             } else {
+                modalContent.innerHTML = `<img src="${src}">`;
             }
             modal.style.display = 'flex';
         }
+        function closeModal(event) {
             const modal = document.getElementById('mediaModal');
+            if (event.target === modal) {
+                 modal.style.display = 'none';
+                 const video = modal.querySelector('video');
+                 if (video) {
+                    video.pause();
+                 }
+                 modalContent.innerHTML = '';
             }
         }
         const form = document.getElementById('upload-form');
         const progressBar = document.getElementById('progress-bar');
         const progressContainer = document.getElementById('progress-container');
         const uploadBtn = document.getElementById('upload-btn');
         form.addEventListener('submit', function(e) {
             e.preventDefault();
+            const files = form.querySelector('input[type="file"]').files;
+            if (files.length > 20) {
+                alert('Максимум 20 файлов за раз!');
+                return;
+            }
             if (files.length === 0) {
+                 alert('Пожалуйста, выберите файлы для загрузки.');
                  return;
             }
             const formData = new FormData(form);
             progressContainer.style.display = 'block';
             progressBar.style.width = '0%';
             uploadBtn.disabled = true;
             const xhr = new XMLHttpRequest();
+            xhr.open('POST', '/dashboard', true);
             xhr.upload.onprogress = function(event) {
                 if (event.lengthComputable) {
+                    const percent = (event.loaded / event.total) * 100;
                     progressBar.style.width = percent + '%';
                 }
             };
             xhr.onload = function() {
                 uploadBtn.disabled = false;
                  progressContainer.style.display = 'none';
                  progressBar.style.width = '0%';
+                if (xhr.status === 200) {
+                    location.reload();
+                } else {
+                    alert('Ошибка загрузки!');
                  }
             };
             xhr.onerror = function() {
+                alert('Ошибка соединения!');
+                progressContainer.style.display = 'none';
+                progressBar.style.width = '0%';
+                uploadBtn.disabled = false;
             };
             xhr.send(formData);
         });
         document.getElementById('logout-btn').addEventListener('click', function(e) {
+            e.preventDefault();
             localStorage.removeItem('zeusCredentials');
+            window.location.href = '/logout';
         });
     </script>
 </body>
 </html>
 '''
+    return render_template_string(html, username=username, user_files=user_files, repo_id=REPO_ID)
+@app.route('/download/<path:file_path>/<filename>')
+def download_file(file_path, filename):
     if 'username' not in session:
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
     username = session['username']
     data = load_data()
+    if username not in data['users']:
+        session.pop('username', None)
+        flash('Пользователь не найден!')
+        return redirect(url_for('login'))
+    user_files = data['users'][username]['files']
+    if not any(file['path'] == file_path for file in user_files):
+         is_admin_route = request.referrer and 'admhosto' in request.referrer
+         if not is_admin_route:
+             flash('У вас нет доступа к этому файлу!')
+             return redirect(url_for('dashboard'))
+    file_url = f"https://huggingface.co/datasets/{REPO_ID}/resolve/main/{file_path}?download=true"
     try:
         api = HfApi()
         headers = {}
         if HF_TOKEN_READ:
             headers["authorization"] = f"Bearer {HF_TOKEN_READ}"
         response = requests.get(file_url, headers=headers, stream=True)
+        response.raise_for_status()
+        file_content = BytesIO(response.content)
         return send_file(
+            file_content,
             as_attachment=True,
+            download_name=filename,
+            mimetype='application/octet-stream'
         )
     except requests.exceptions.RequestException as e:
+        logging.error(f"Error downloading file from HF: {e}")
+        flash('Ошибка скачивания файла!')
+        if request.referrer and 'admhosto' in request.referrer:
+             return redirect(url_for('admin_user_files', username=file_path.split('/')[1]))
+        else:
+             return redirect(url_for('dashboard'))
     except Exception as e:
+        logging.error(f"Unexpected error during download: {e}")
+        flash('Произошла непредвиденная ошибка при скачивании файла.')
+        if request.referrer and 'admhosto' in request.referrer:
+             return redirect(url_for('admin_user_files', username=file_path.split('/')[1]))
+        else:
+             return redirect(url_for('dashboard'))
+@app.route('/delete/<path:file_path>')
+def delete_file(file_path):
     if 'username' not in session:
+        flash('Пожалуйста, войдите в систему!')
         return redirect(url_for('login'))
     username = session['username']
     data = load_data()
+    if username not in data['users']:
         session.pop('username', None)
+        flash('Пользователь не найден!')
         return redirect(url_for('login'))
     user_files = data['users'][username]['files']
+    file_to_delete = next((file for file in user_files if file['path'] == file_path), None)
+    if not file_to_delete:
+        flash('Файл не найден!')
         return redirect(url_for('dashboard'))
     try:
         api = HfApi()
         api.delete_file(
+            path_in_repo=file_path,
             repo_id=REPO_ID,
             repo_type="dataset",
             token=HF_TOKEN_WRITE,
+            commit_message=f"Deleted file {file_path} for {username}"
         )
+        data['users'][username]['files'] = [f for f in user_files if f['path'] != file_path]
         save_data(data)
+        flash('Файл успешно удален!')
     except Exception as e:
+        logging.error(f"Error deleting file: {e}")
+        flash('Ошибка удаления файла!')
     return redirect(url_for('dashboard'))
 @app.route('/logout')
 def logout():
     session.pop('username', None)
     return redirect(url_for('login'))
 @app.route('/admhosto')
 def admin_panel():
     data = load_data()
+    users = data['users']
     html = '''
 <!DOCTYPE html>
 <body>
     <div class="container">
         <h1>Админ-панель Zeus Cloud</h1>
+        <h2>Список пользователей</h2>
         <div class="user-list">
+            {% for username, user_data in users.items() %}
                 <div class="user-item">
+                    <a href="{{ url_for('admin_user_files', username=username) }}">{{ username }}</a>
+                    <p>Дата регистрации: {{ user_data.get('created_at', 'N/A') }}</p>
+                    <p>Количество файлов: {{ user_data.get('files', []) | length }}</p>
+                     <form method="POST" action="{{ url_for('admin_delete_user', username=username) }}" style="display: inline; margin-left: 10px;" onsubmit="return confirm('Вы уверены, что хотите удалить пользователя {{ username }} и все его файлы? Это действие необратимо!');">
+                         <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                     </form>
                 </div>
             {% endfor %}
             {% if not users %}
                 <p>Пользователей пока нет.</p>
             {% endif %}
         </div>
+        {% with messages = get_flashed_messages() %}
+          {% if messages %}
+            <div style="margin-top: 20px;">
+              {% for message in messages %}
+                <div class="flash">{{ message }}</div>
+              {% endfor %}
+            </div>
+          {% endif %}
+        {% endwith %}
     </div>
 </body>
 </html>
 @app.route('/admhosto/user/<username>')
 def admin_user_files(username):
     data = load_data()
+    if username not in data['users']:
+        flash('Пользователь не найден!')
         return redirect(url_for('admin_panel'))
     user_files = sorted(data['users'][username].get('files', []), key=lambda x: x.get('upload_date', ''), reverse=True)
     html = '''
 <!DOCTYPE html>
 <html lang="ru">
 </head>
 <body>
     <div class="container">
         <h1>Файлы пользователя: {{ username }}</h1>
+        {% with messages = get_flashed_messages() %}
             {% if messages %}
+                {% for message in messages %}
+                    <div class="flash">{{ message }}</div>
                 {% endfor %}
             {% endif %}
         {% endwith %}
         <div class="file-grid">
             {% for file in user_files %}
                 <div class="file-item">
+                    {% if file.get('type') == 'video' %}
+                        <video class="file-preview" preload="metadata" muted loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true', true)">
+                             <source src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" type="video/mp4">
+                        </video>
+                    {% elif file.get('type') == 'image' %}
+                        <img class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true" alt="{{ file['filename'] }}" loading="lazy" onclick="openModal(this.src, false)">
+                    {% elif file.get('type') == 'pdf' %}
+                        <iframe class="file-preview" src="https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true#toolbar=0" loading="lazy" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true', 'pdf')"></iframe>
+                    {% elif file.get('type') == 'text' %}
+                        <p class="file-preview" style="overflow: auto; white-space: pre-wrap;" onclick="openModal('https://huggingface.co/datasets/{{ repo_id }}/resolve/main/{{ file['path'] }}?download=true', 'text')">Text file</p>
+                    {% else %}
+                        <p>{{ file.get('filename', 'N/A') }}</p>
+                    {% endif %}
+                    <p>{{ file.get('filename', 'N/A') }}</p>
+                    <p>{{ file.get('upload_date', 'N/A') }}</p>
+                    <a href="{{ url_for('download_file', file_path=file['path'], filename=file['filename']) }}" class="btn download-btn">Скачать</a>
+                     <form method="POST" action="{{ url_for('admin_delete_file', username=username, file_path=file['path']) }}" style="display: inline; margin-left: 5px;" onsubmit="return confirm('Вы уверены, что хотите удалить этот файл?');">
+                          <button type="submit" class="btn delete-btn" style="padding: 5px 10px; font-size: 0.9em;">Удалить</button>
+                     </form>
                 </div>
             {% endfor %}
             {% if not user_files %}
+                <p>У этого пользователя пока нет файлов.</p>
             {% endif %}
         </div>
+        <a href="{{ url_for('admin_panel') }}" class="btn" style="margin-top: 20px;">Назад к списку пользователей</a>
     </div>
+    <div class="modal" id="mediaModal" onclick="closeModal(event)">
+        <div id="modalContent"></div>
     </div>
      <script>
+        async function openModal(src, type) {
             const modal = document.getElementById('mediaModal');
+            const modalContent = document.getElementById('modalContent');
+            const tokenParam = HF_TOKEN_READ ? `?token=${HF_TOKEN_READ}` : "";
+            let finalSrc = src;
+            if (!finalSrc.includes('?download=true')) {
+                finalSrc = finalSrc.includes('?') ? finalSrc.replace('?', '?download=true&') : finalSrc + '?download=true';
+            }
+            finalSrc += tokenParam;
+            if (type === true) {
+                modalContent.innerHTML = `<video controls autoplay style='max-width: 95%; max-height: 95vh;'><source src="${finalSrc}" type="video/mp4"></video>`;
+            } else if (type === 'pdf') {
+                modalContent.innerHTML = `<iframe src="${finalSrc}#toolbar=0" style="width: 95%; height: 95vh;"></iframe>`;
+            } else if (type === 'text') {
+                try {
+                    const response = await fetch(finalSrc);
+                    const text = await response.text();
+                    modalContent.innerHTML = `<pre style="white-space: pre-wrap; overflow: auto;">${text}</pre>`;
+                } catch (e) {
+                    modalContent.innerHTML = `<p>Ошибка загрузки текстового файла</p>`;
+                }
             } else {
+                modalContent.innerHTML = `<img src="${finalSrc}" style='max-width: 95%; max-height: 95vh;'>`;
             }
             modal.style.display = 'flex';
         }
+         function closeModal(event) {
             const modal = document.getElementById('mediaModal');
+             if (event.target === modal) {
+                 modal.style.display = 'none';
+                 const video = modal.querySelector('video');
+                 if (video) {
+                    video.pause();
+                 }
+                 document.getElementById('modalContent').innerHTML = '';
+            }
         }
+        const HF_TOKEN_READ = "{{ os.getenv('HF_TOKEN_READ') or os.getenv('HF_TOKEN') }}";
     </script>
 </body>
 </html>
 '''
+    return render_template_string(html, username=username, user_files=user_files, repo_id=REPO_ID, os=os)
 @app.route('/admhosto/delete_user/<username>', methods=['POST'])
 def admin_delete_user(username):
     data = load_data()
+    if username not in data['users']:
+        flash('Пользователь не найден!')
         return redirect(url_for('admin_panel'))
     user_files_to_delete = data['users'][username].get('files', [])
     try:
         api = HfApi()
+        paths_to_delete = [file['path'] for file in user_files_to_delete]
+        if paths_to_delete:
+             try:
+                 api.delete_folder(
+                     folder_path=f"cloud_files/{username}",
+                     repo_id=REPO_ID,
+                     repo_type="dataset",
+                     token=HF_TOKEN_WRITE,
+                     commit_message=f"Deleted all files for user {username} by admin"
+                 )
+                 logging.info(f"Successfully deleted folder for user {username}")
+             except Exception as folder_delete_error:
+                 logging.warning(f"Could not delete folder for {username}, attempting individual file deletion: {folder_delete_error}")
+                 for file_path in paths_to_delete:
+                     try:
+                         api.delete_file(
+                            path_in_repo=file_path,
+                            repo_id=REPO_ID,
+                            repo_type="dataset",
+                            token=HF_TOKEN_WRITE
+                         )
+                     except Exception as file_delete_error:
+                          logging.error(f"Error deleting file {file_path} for user {username}: {file_delete_error}")
         del data['users'][username]
         save_data(data)
+        flash(f'Пользователь {username} и его файлы успешно удалены!')
+        logging.info(f"Admin deleted user {username} and their files.")
     except Exception as e:
+        logging.error(f"Error deleting user {username}: {e}")
+        flash(f'Ошибка при удалении пользователя {username}!')
     return redirect(url_for('admin_panel'))
+@app.route('/admhosto/delete_file/<username>/<path:file_path>', methods=['POST'])
+def admin_delete_file(username, file_path):
+     data = load_data()
+     if username not in data['users']:
+         flash('Пользователь не найден!')
+         return redirect(url_for('admin_panel'))
+     user_files = data['users'][username].get('files', [])
+     file_exists_in_db = any(f['path'] == file_path for f in user_files)
+     if not file_exists_in_db:
+         flash('Файл не найден в базе данных пользователя!')
+     try:
+         api = HfApi()
+         api.delete_file(
+             path_in_repo=file_path,
+             repo_id=REPO_ID,
+             repo_type="dataset",
+             token=HF_TOKEN_WRITE,
+             commit_message=f"Admin deleted file {file_path} for user {username}"
+         )
+         data['users'][username]['files'] = [f for f in user_files if f['path'] != file_path]
+         save_data(data)
+         flash('Файл успешно удален!')
+         logging.info(f"Admin deleted file {file_path} for user {username}")
+     except Exception as e:
+         logging.error(f"Error deleting file {file_path} by admin: {e}")
+         flash('Ошибка удаления файла!')
+     return redirect(url_for('admin_user_files', username=username))
 if __name__ == '__main__':
     if not HF_TOKEN_WRITE:
         logging.warning("HF_TOKEN (write access) is not set. File uploads and deletions will fail.")
     if not HF_TOKEN_READ:
+        logging.warning("HF_TOKEN_READ is not set. Falling back to HF_TOKEN. File downloads might fail for private repos if HF_TOKEN is not set.")
     if HF_TOKEN_WRITE:
+        threading.Thread(target=periodic_backup, daemon=True).start()
     else:
         logging.warning("Periodic backup disabled because HF_TOKEN (write access) is not set.")
+    app.run(debug=False, host='0.0.0.0', port=7860)