{% extends "base.html" %}
{% block title %}File Manager{% endblock %}
{% block body %}
<div class="head file-head">
  <div>
    <small>FILES · {% if admin_mode %}ADMIN / HOSTING ACCOUNTS{% else %}YOUR HOSTING ACCOUNT{% endif %}</small>
    <h1>File Manager</h1>
    <p>Browse and manage hosting files with strict filesystem isolation.</p>
  </div>
  <div class="action-row">
    {% if admin_mode %}
    <form method="get" action="/admin/files" class="file-account-select"><select name="account_id" onchange="this.form.submit()">{% for a in accounts %}<option value="{{a.id}}" {% if account and a.id==account.id %}selected{% endif %}>{{a.username}}{% if a.domain %} · {{a.domain}}{% endif %}</option>{% endfor %}</select></form>
    {% endif %}
    <a class="ghost" href="{{'/admin/files' if admin_mode else '/user/files'}}?path={{parent|urlencode}}">↑ Parent</a>
  </div>
</div>

{% if error %}<div class="error">{{error}}</div>{% endif %}
{% if account %}
<section class="stats file-stats">
  <div class="card stat"><small>ACCOUNT</small><strong>{{account.username}}</strong><span>{{account.domain or 'Hosting account'}}</span></div>
  <div class="card stat"><small>ROOT</small><strong>/home/{{account.system_user or account.username}}</strong><span>Isolation boundary</span></div>
  <div class="card stat"><small>LOCATION</small><strong>{{current}}</strong><span>{{rows|length}} item(s)</span></div>
  <div class="card stat"><small>SECURITY</small><strong>ISOLATED</strong><span>No path traversal / symlink escape</span></div>
</section>

<section class="card file-toolbar-card">
  <form method="get" action="{{'/admin/files' if admin_mode else '/user/files'}}" class="file-search-form">
    {% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}
    <input type="hidden" name="path" value="{{current}}">
    <input name="q" value="{{query}}" placeholder="Search files and folders…">
    <button class="btn">Search</button>
    {% if query %}<a class="ghost" href="{{'/admin/files' if admin_mode else '/user/files'}}{% if admin_mode %}?account_id={{account.id}}&path={{current|urlencode}}{% else %}?path={{current|urlencode}}{% endif %}">Clear</a>{% endif %}
  </form>
  <div class="file-actions">
    <button class="soft" type="button" onclick="openModal('file-upload')">Upload</button>
    <button class="soft" type="button" onclick="openModal('file-create')">New file</button>
    <button class="soft" type="button" onclick="openModal('dir-create')">New folder</button>
    <button class="soft" type="button" onclick="openModal('file-copy')">Copy / Move</button>
    <button class="soft" type="button" onclick="openModal('file-zip')">ZIP / Extract</button>
    <button class="danger" type="button" onclick="submitSelected('delete')">Delete selected</button>
  </div>
</section>

<div class="file-breadcrumb card">
  <span>📁</span>
  <a href="{{'/admin/files' if admin_mode else '/user/files'}}{% if admin_mode %}?account_id={{account.id}}{% endif %}">/</a>
  {% if current != '.' %}{% set accum='' %}{% for part in current.split('/') %}{% set accum=(accum+'/'+part).strip('/') %}<span>/</span><a href="{{'/admin/files' if admin_mode else '/user/files'}}?{% if admin_mode %}account_id={{account.id}}&{% endif %}path={{accum|urlencode}}">{{part}}</a>{% endfor %}{% endif %}
</div>

<section class="card file-list-card">
  <form id="bulk-file-form" method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}" enctype="multipart/form-data">
    <input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<input type="hidden" name="operation" id="bulk-operation">
    <div class="file-table-wrap"><table class="file-table"><thead><tr><th class="check-col"><input type="checkbox" onchange="toggleAllFiles(this)"></th><th>NAME</th><th>TYPE</th><th>SIZE</th><th>PERMISSIONS</th><th>OWNER</th><th>MODIFIED</th><th>ACTIONS</th></tr></thead>
    <tbody>
      {% for f in rows %}
      <tr>
        <td><input type="checkbox" name="selected" value="{{f.path}}" data-file-check></td>
        <td class="file-name-cell">{% if f.kind=='blocked-link' %}<span class="file-icon blocked">!</span><span>{{f.name}}</span>{% elif f.is_dir %}<a class="file-icon-link" href="{{'/admin/files' if admin_mode else '/user/files'}}?{% if admin_mode %}account_id={{account.id}}&{% endif %}path={{f.path|urlencode}}"><span class="file-icon folder">DIR</span><b>{{f.name}}</b></a>{% else %}<span class="file-icon">FILE</span><b>{{f.name}}</b>{% endif %}{% if f.target %}<small class="muted">→ {{f.target}}</small>{% endif %}</td>
        <td>{{f.kind}}</td><td>{{f.size_human}}</td><td><code>{{f.mode}} · {{f.octal}}</code></td><td>{{f.owner}}:{{f.group}}</td><td>{{f.modified}}</td>
        <td><div class="action-row file-row-actions">
          {% if f.kind=='file' %}<a class="soft" href="{{'/admin/files/download' if admin_mode else '/user/files/download'}}?path={{f.path|urlencode}}{% if admin_mode %}&account_id={{account.id}}{% endif %}">Download</a><a class="soft" href="{{'/admin/files/editor' if admin_mode else '/user/files/editor'}}?path={{f.path|urlencode}}{% if admin_mode %}&account_id={{account.id}}{% endif %}">Edit</a>{% endif %}
          {% if f.kind=='file' and f.name.lower().endswith('.zip') %}<button type="button" class="soft" onclick="extractOne('{{f.path|e}}')">Extract</button>{% endif %}
          {% if f.kind!='blocked-link' %}<button type="button" class="ghost" onclick="renameOne('{{f.path|e}}','{{f.name|e}}')">Rename</button><button type="button" class="ghost" onclick="chmodOne('{{f.path|e}}','{{f.octal}}')">Permissions</button><button type="button" class="ghost" onclick="chownOne('{{f.path|e}}','{{f.owner}}','{{f.group}}')">Owner</button>{% endif %}
        </div></td>
      </tr>
      {% else %}<tr><td colspan="8" class="empty"><div class="bigicon">FM</div><h2>{% if query %}No matches{% else %}This folder is empty{% endif %}</h2><p>Use Upload, New file or New folder to get started.</p></td></tr>{% endfor %}
    </tbody></table></div>
  </form>
</section>

<div class="file-note"><b>Isolation:</b> {% if admin_mode %}Admin access is limited by the selected hosting account root. {% endif %}User access is hard-bounded to its own <code>/home/&lt;account&gt;</code> tree; traversal and external symlinks are blocked.</div>

{% else %}
<section class="card empty"><div class="bigicon">FM</div><h2>No hosting account available</h2><p>Create a hosting account first. The File Manager never exposes the server filesystem root.</p></section>
{% endif %}

<div class="modal-backdrop" id="file-upload" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>Upload file</h2><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}" enctype="multipart/form-data"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="operation" value="upload"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<label>File<input type="file" name="file" required></label><button class="btn">Upload</button></form></div></div>
<div class="modal-backdrop" id="file-create" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>New file</h2><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="operation" value="create"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<label>Filename<input name="name" placeholder="index.php" required></label><button class="btn">Create file</button></form></div></div>
<div class="modal-backdrop" id="dir-create" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>New folder</h2><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="operation" value="mkdir"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<label>Folder name<input name="name" placeholder="assets" required></label><button class="btn">Create folder</button></form></div></div>
<div class="modal-backdrop" id="file-copy" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>Copy / Move</h2><p class="muted">Select exactly one item, then enter the destination relative to the hosting root.</p><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}" id="copy-move-form"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<input type="hidden" name="operation" id="copy-move-op"><input type="hidden" name="selected" id="copy-move-source"><label>Destination<input name="destination" placeholder="public_html/app/index.php" required></label><div class="action-row"><button type="button" class="soft" onclick="copyMove('copy')">Copy</button><button type="button" class="btn" onclick="copyMove('move')">Move</button></div></form></div></div>
<div class="modal-backdrop" id="file-zip" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2>ZIP / Extract</h2><p class="muted">Select one or more items for ZIP, or one ZIP file for extraction.</p><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}" id="zip-form"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<input type="hidden" name="operation" id="zip-op"><input type="hidden" name="selected" id="zip-source"><label>Archive name (ZIP only)<input name="archive_name" value="archive.zip"></label><label>Extract destination<input name="destination" value="{{current}}"></label><div class="action-row"><button type="button" class="soft" onclick="zipSelected()">Create ZIP</button><button type="button" class="btn" onclick="extractSelected()">Extract ZIP</button></div></form></div></div>
<div class="modal-backdrop" id="file-edit-meta" hidden><div class="modal-card"><button class="modal-close" data-modal-close>×</button><h2 id="meta-title">File settings</h2><form method="post" action="{{'/admin/files/action' if admin_mode else '/user/files/action'}}" id="meta-form"><input type="hidden" name="csrf_token" value="{{csrf_token}}"><input type="hidden" name="path" value="{{current}}">{% if admin_mode %}<input type="hidden" name="account_id" value="{{account.id}}">{% endif %}<input type="hidden" name="operation" id="meta-op"><input type="hidden" name="source" id="meta-source"><label id="meta-name-label">Value<input name="new_name" id="meta-name"></label><label>Permissions (octal)<input name="mode" id="meta-mode" placeholder="0644"></label><label>Owner<select name="owner" id="meta-owner">{% for o in owner_choices %}<option value="{{o}}">{{o}}</option>{% endfor %}</select></label><label>Group<select name="group" id="meta-group">{% for g in group_choices %}<option value="{{g}}">{{g}}</option>{% endfor %}</select></label><button class="btn">Save</button></form></div></div>

<script>
function selectedFiles(){return Array.from(document.querySelectorAll('[data-file-check]:checked')).map(x=>x.value)}
function toggleAllFiles(x){document.querySelectorAll('[data-file-check]').forEach(c=>c.checked=x.checked)}
function submitSelected(op){let s=selectedFiles();if(!s.length){alert('Select at least one item.');return}document.getElementById('bulk-operation').value=op;document.getElementById('bulk-file-form').submit()}
function renameOne(path,name){openModal('file-edit-meta');document.getElementById('meta-op').value='rename';document.getElementById('meta-source').value=path;document.getElementById('meta-name-label').style.display='grid';document.getElementById('meta-name-label').firstChild.textContent='New name';document.getElementById('meta-name').value=name;document.getElementById('meta-mode').parentElement.style.display='none';document.getElementById('meta-owner').parentElement.style.display='none';document.getElementById('meta-group').parentElement.style.display='none';document.getElementById('meta-title').textContent='Rename'}
function chmodOne(path,mode){openModal('file-edit-meta');document.getElementById('meta-op').value='chmod';document.getElementById('meta-source').value=path;document.getElementById('meta-name-label').style.display='none';document.getElementById('meta-mode').parentElement.style.display='grid';document.getElementById('meta-owner').parentElement.style.display='none';document.getElementById('meta-group').parentElement.style.display='none';document.getElementById('meta-mode').value=mode;document.getElementById('meta-title').textContent='Permissions'}
function chownOne(path,owner,group){openModal('file-edit-meta');document.getElementById('meta-op').value='chown';document.getElementById('meta-source').value=path;document.getElementById('meta-name-label').style.display='none';document.getElementById('meta-mode').parentElement.style.display='none';document.getElementById('meta-owner').parentElement.style.display='grid';document.getElementById('meta-group').parentElement.style.display='grid';document.getElementById('meta-owner').value=owner;document.getElementById('meta-group').value=group;document.getElementById('meta-title').textContent='Ownership'}
function copyMove(op){let s=selectedFiles();if(s.length!==1){alert('Select exactly one item first.');return}document.getElementById('copy-move-op').value=op;document.getElementById('copy-move-source').value=s[0];document.getElementById('copy-move-form').submit()}
function zipSelected(){let s=selectedFiles();if(!s.length){alert('Select at least one item.');return}document.getElementById('zip-op').value='zip';let f=document.getElementById('zip-form');f.querySelectorAll('input[name=selected]').forEach(x=>x.remove());s.forEach(v=>{let i=document.createElement('input');i.type='hidden';i.name='selected';i.value=v;f.appendChild(i)});f.submit()}
function extractSelected(){let s=selectedFiles();if(s.length!==1){alert('Select exactly one ZIP file.');return}document.getElementById('zip-op').value='extract';document.getElementById('zip-source').value=s[0];document.getElementById('zip-form').submit()}
function extractOne(path){openModal('file-zip');document.getElementById('zip-op').value='extract';let f=document.getElementById('zip-form');f.querySelectorAll('input[name=selected]').forEach(x=>x.remove());let i=document.createElement('input');i.type='hidden';i.name='selected';i.value=path;f.appendChild(i)}
</script>
{% endblock %}