@echo off
setlocal EnableExtensions
pushd "%~dp0"
title VimpulseHub v5 - Update and AppStore Server
color 0A

REM ============================================================
REM  VimpulseHub v5 Combined Server
REM  Update API:             8765
REM  Download / AppStore:    8766
REM
REM  Windows software lives in: apps\
REM  Android apps live in:    android\
REM ============================================================

set "HOST=10.0.0.30"
rem Set this to your DDNS hostname, for example hub.example-ddns.com
set "DDNS_HOST="
if not "%DDNS_HOST%"=="" (set "PUBLIC_HOST=%DDNS_HOST%") else (set "PUBLIC_HOST=%HOST%")
set "BIND_HOST=0.0.0.0"
set "API_PORT=8765"
set "WEB_PORT=8766"
set "SOFTWARE_ROOT=%~dp0apps"
set "ANDROID_ROOT=%~dp0android"
set "PLUGIN_ROOT=%~dp0plugins"
set "RUNTIME_DIR=%~dp0_vimpulse_runtime"
set "PY_FILE=%RUNTIME_DIR%\vimpulse_web.py"
set "HTML_FILE=%RUNTIME_DIR%\index.html"

cls
echo ============================================================
echo                 VimpulseHub v5 Server
echo ============================================================
echo.
echo Windows Software: apps\
echo Android Apps:     android\
echo.

REM ------------------------------------------------------------
REM Create Windows software folders.
REM ------------------------------------------------------------
if not exist "apps" mkdir "apps"
if not exist "plugins" mkdir "plugins"
if not exist "logs" mkdir "logs"
call :MakeSoftware "StoryCut"
call :MakeSoftware "StoryRealm Studio"
call :MakeSoftware "Vault"
call :MakeSoftware "GobhaInk"
call :MakeSoftware "cybervault"
call :MakeSoftware "vimpulsetechtoolkit"
call :MakeToolkitEdition "Pro"
call :MakeToolkitEdition "Business"
call :MakeSoftware "vimvnc"
call :MakeSoftware "vimpulsescamshield"
call :MakeSoftware "privatevaultnas"

REM ------------------------------------------------------------
REM Create Android app folders.
REM ------------------------------------------------------------
if not exist "android" mkdir "android"
if not exist "androidlogs" mkdir "androidlogs"
call :MakeAndroid "BroomMap"
call :MakeAndroid "EarnClearOntario"
call :MakeAndroid "FastLife"
call :MakeAndroid "GasCalculator"
call :MakeAndroid "EVCalculator"
call :MakeAndroid "InfiniteDispatch"
call :MakeAndroid "PersonalWheelOfFortune"
call :MakeAndroid "SideQuest"

echo Folder structure ready.
echo.

where python >nul 2>nul
if errorlevel 1 (
    where py >nul 2>nul
    if errorlevel 1 (
        echo ERROR: Python 3 was not found in PATH.
        echo Install Python 3 and enable "Add Python to PATH".
        echo.
        pause
        exit /b 1
    )
)

if not exist "%RUNTIME_DIR%" mkdir "%RUNTIME_DIR%"

REM ------------------------------------------------------------
REM Extract embedded Python and HTML from this BAT.
REM ------------------------------------------------------------
powershell -NoProfile -ExecutionPolicy Bypass -Command ^
  "$bat=[IO.File]::ReadAllText('%~f0');" ^
  "$pyStart=$bat.LastIndexOf(':__VIMPULSE_PY__');" ^
  "$htmlStart=$bat.LastIndexOf(':__VIMPULSE_HTML__');" ^
  "if($pyStart -lt 0 -or $htmlStart -lt 0 -or $htmlStart -le $pyStart){throw 'Embedded markers not found.'};" ^
  "$py=$bat.Substring($pyStart+':__VIMPULSE_PY__'.Length,$htmlStart-($pyStart+':__VIMPULSE_PY__'.Length)).Trim([char]13,[char]10);" ^
  "$html=$bat.Substring($htmlStart+':__VIMPULSE_HTML__'.Length).TrimStart([char]13,[char]10);" ^
  "[IO.File]::WriteAllText('%PY_FILE%',$py,(New-Object Text.UTF8Encoding($false)));" ^
  "[IO.File]::WriteAllText('%HTML_FILE%',$html,(New-Object Text.UTF8Encoding($false)))"

if errorlevel 1 (
    echo ERROR: Could not create runtime server files.
    pause
    exit /b 1
)

REM ------------------------------------------------------------
REM Check whether the GUI port is already in use.
REM ------------------------------------------------------------
netstat -ano | findstr /R /C:":%WEB_PORT% .*LISTENING" >nul 2>&1
if %ERRORLEVEL% EQU 0 (
    echo ERROR: Port %WEB_PORT% is already in use.
    echo Close the old VimpulseHub download server first.
    echo.
    netstat -ano | findstr /R /C:":%WEB_PORT% .*LISTENING"
    pause
    exit /b 1
)

REM ------------------------------------------------------------
REM Start the existing update API server once, if server.py exists.
REM This keeps the app/software update API on port 8765.
REM ------------------------------------------------------------
if exist "%~dp0server.py" (
    netstat -ano | findstr /R /C:":%API_PORT% .*LISTENING" >nul 2>&1
    if not %ERRORLEVEL% EQU 0 (
        echo Starting Update API on %HOST%:%API_PORT% ...
        start "Vimpulse Update API" /min cmd /c "pushd ""%~dp0"" && python server.py"
    ) else (
        echo Update API already running on port %API_PORT%.
    )
) else (
    echo WARNING: server.py was not found beside this BAT.
    echo The AppStore/download server will still work, but port %API_PORT% will not be started by this BAT.
)

echo.
echo ============================================================
echo VimpulseHub is starting
echo ============================================================
echo Internal AppStore:
echo   http://%PUBLIC_HOST%:%WEB_PORT%
echo.
echo Update API:
echo   http://%HOST%:%API_PORT%
echo.
echo Windows downloads map to:
echo   /software/  ^>  apps\
echo.
echo Android downloads map to:
echo   /android/   ^>  android\
echo.
echo Press CTRL+C to stop the AppStore/download server.
echo ============================================================
echo.

start "" powershell -NoProfile -WindowStyle Hidden -Command "Start-Sleep -Milliseconds 900; Start-Process 'http://%PUBLIC_HOST%:%WEB_PORT%/'"

where py >nul 2>&1
if %ERRORLEVEL% EQU 0 (
    py "%PY_FILE%" --bind-host "%BIND_HOST%" --public-host "%PUBLIC_HOST%" --port %WEB_PORT% --apps "%SOFTWARE_ROOT%" --android "%ANDROID_ROOT%" --plugins "%PLUGIN_ROOT%" --html "%HTML_FILE%" --api-port %API_PORT%
) else (
    python "%PY_FILE%" --bind-host "%BIND_HOST%" --public-host "%PUBLIC_HOST%" --port %WEB_PORT% --apps "%SOFTWARE_ROOT%" --android "%ANDROID_ROOT%" --plugins "%PLUGIN_ROOT%" --html "%HTML_FILE%" --api-port %API_PORT%
)

echo.
echo VimpulseHub server stopped.
pause
exit /b

:MakeToolkitEdition
if not exist "apps\vimpulsetechtoolkit\%~1" mkdir "apps\vimpulsetechtoolkit\%~1"
if not exist "apps\vimpulsetechtoolkit\%~1\updates" mkdir "apps\vimpulsetechtoolkit\%~1\updates"
if not exist "apps\vimpulsetechtoolkit\%~1\icon" mkdir "apps\vimpulsetechtoolkit\%~1\icon"
if not exist "apps\vimpulsetechtoolkit\%~1\screenshots" mkdir "apps\vimpulsetechtoolkit\%~1\screenshots"
exit /b

:MakeSoftware
if not exist "apps\%~1" mkdir "apps\%~1"
if not exist "apps\%~1\updates" mkdir "apps\%~1\updates"
if not exist "apps\%~1\icon" mkdir "apps\%~1\icon"
if not exist "apps\%~1\screenshots" mkdir "apps\%~1\screenshots"
exit /b

:MakeAndroid
if not exist "android\%~1" mkdir "android\%~1"
if not exist "android\%~1\updates" mkdir "android\%~1\updates"
if not exist "android\%~1\icon" mkdir "android\%~1\icon"
if not exist "android\%~1\screenshots" mkdir "android\%~1\screenshots"
exit /b

goto :eof

:__VIMPULSE_PY__
import argparse
import hashlib
import html as html_lib
import json
import secrets
import mimetypes
import os
import re
import subprocess
import tempfile
import time
import urllib.parse
import urllib.request
import zipfile
from datetime import datetime
from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
from http.cookies import SimpleCookie
from pathlib import Path

parser = argparse.ArgumentParser()
parser.add_argument('--bind-host', default='0.0.0.0')
parser.add_argument('--public-host', default='10.0.0.30')
parser.add_argument('--port', type=int, default=8766)
parser.add_argument('--apps', required=True)
parser.add_argument('--android', required=True)
parser.add_argument('--plugins', required=True)
parser.add_argument('--html', required=True)
parser.add_argument('--api-port', type=int, default=8765)
parser.add_argument('--seo-base-url', default='https://vimpulsehub.ca')
args = parser.parse_args()

SOFTWARE_ROOT = Path(args.apps).resolve()
ANDROID_ROOT = Path(args.android).resolve()
PLUGINS_ROOT = Path(args.plugins).resolve()
PLUGINS_ROOT.mkdir(parents=True, exist_ok=True)
HTML_FILE = Path(args.html).resolve()
ICON_CACHE = HTML_FILE.parent / 'icon_cache'
ICON_CACHE.mkdir(parents=True, exist_ok=True)
SITE_URL = f'http://{args.public_host}:{args.port}'
SEO_BASE_URL = args.seo_base_url.rstrip('/')
STATS_FILE = HTML_FILE.parent / 'download_stats.json'
USERS_FILE = HTML_FILE.parent / 'admin_users.json'
CACHE_FILE = HTML_FILE.parent / 'catalog_cache.json'
HASH_CACHE_FILE = HTML_FILE.parent / 'hash_cache.json'
SERVER_STARTED = time.time()
CATALOG_CACHE = {}
CATALOG_CACHE_SIGNATURE = {}
HASH_CACHE = {}
try:
    HASH_CACHE = json.loads(HASH_CACHE_FILE.read_text(encoding='utf-8')) if HASH_CACHE_FILE.exists() else {}
    if not isinstance(HASH_CACHE, dict):
        HASH_CACHE = {}
except Exception:
    HASH_CACHE = {}
DOWNLOAD_STATS = None
ADMIN_SESSIONS = {}
SESSION_TTL = 60 * 60 * 12
PASSWORD_ITERATIONS = 260000


PRETTY_SOFTWARE = {
    'storycut':'StoryCut', 'storyrealm studio':'StoryRealm Studio', 'storyrealmstudio':'StoryRealm Studio',
    'vault':'Vault', 'vimpulseautoclicker':'Vimpulse AutoClicker', 'vimpulse game auto clicker':'Vimpulse Game Auto Clicker',
    'gobhaink':'GobhaInk', 'vitaltrack':'VitalTrack', 'cybervault':'CyberVault', 'freshcore':'FreshCore',
    'rigcore':'RigCore', 'storagemedic':'StorageMedic', 'vimpulsetechtoolkit':'Vimpulse Tech Toolkit',
    'vimvnc':'VimVNC', 'vimpulsescamshield':'Vimpulse ScamShield'
}
DESC_SOFTWARE = {
    'storycut':'Video editing made simple.', 'storyrealm studio':'Creative story and media tools.',
    'storyrealmstudio':'Creative story and media tools.', 'vault':'Secure local file storage.',
    'gobhaink':'Document editing and writing tools.', 'vitaltrack':'Personal vital tracking tools.',
    'cybervault':'Portable encrypted USB vault.', 'freshcore':'System cleanup and maintenance.',
    'rigcore':'PC diagnostics and system information.', 'storagemedic':'Storage health and repair utilities.',
    'vimpulsetechtoolkit':'Advanced technician utilities.', 'vimvnc':'Simple, secure remote access.',
    'vimpulsescamshield':'Scam and remote-access protection tools.'
}
ICON_SOFTWARE = {
    'storycut':'▶', 'storyrealm studio':'✦', 'storyrealmstudio':'✦', 'vault':'◆', 'gobhaink':'✎',
    'vitaltrack':'♥', 'cybervault':'🔒', 'freshcore':'✦', 'rigcore':'⚙', 'storagemedic':'▣',
    'vimpulsetechtoolkit':'🔧', 'vimvnc':'▰', 'vimpulsescamshield':'🛡'
}

PRETTY_ANDROID = {
    'broommap':'BroomMap', 'earnclearontario':'EarnClear Ontario', 'fastlife':'FastLife',
    'gascalculator':'Gas Calculator', 'evcalculator':'EV Calculator', 'infinitedispatch':'Infinite Dispatch',
    'personalwheeloffortune':'Personal Wheel of Fortune', 'sidequest':'SideQuest'
}
DESC_ANDROID = {
    'broommap':'Android mapping and utility app.', 'earnclearontario':'ODSP earnings and benefit companion for Ontario.',
    'fastlife':'Fasting, meal and weight tracking.', 'gascalculator':'Fuel cost and trip calculator.',
    'evcalculator':'EV charging and trip calculator.', 'infinitedispatch':'Android dispatch utility.',
    'personalwheeloffortune':'Personal wheel and choice helper.', 'sidequest':'Android side-project and activity app.'
}
ICON_ANDROID = {
    'broommap':'⌖', 'earnclearontario':'$', 'fastlife':'◷', 'gascalculator':'⛽',
    'evcalculator':'⚡', 'infinitedispatch':'↗', 'personalwheeloffortune':'◉', 'sidequest':'★'
}

SOFTWARE_EXTS = {'.exe', '.msi', '.zip'}
ANDROID_EXTS = {'.apk', '.aab', '.zip'}
def is_plugin_file(path):
    return path.is_file() and path.name.lower() != 'info.txt' and not path.name.startswith('.')


def safe_inside(root: Path, relative: str):
    relative = urllib.parse.unquote(relative).replace('\\', '/')
    candidate = (root / relative.lstrip('/')).resolve()
    try:
        candidate.relative_to(root)
        return candidate
    except ValueError:
        return None


def newest_file(folder: Path, extensions):
    files = []
    for p in folder.rglob('*'):
        if p.is_file() and p.suffix.lower() in extensions:
            files.append(p)
    return max(files, key=lambda p: p.stat().st_mtime, default=None)


def version_from_name(path: Path):
    m = re.search(r'(?i)(?:^|[^0-9])v?(\d+(?:\.\d+){1,3})(?:[^0-9]|$)', path.stem)
    return m.group(1) if m else 'Latest'


def size_text(n):
    if n >= 1024**3:
        return f'{n/1024**3:.2f} GB'
    if n >= 1024**2:
        return f'{n/1024**2:.1f} MB'
    return f'{max(1, round(n/1024))} KB'


def ensure_info_file(info_folder: Path, display_name: str, default_desc: str, platform: str):
    info_path = info_folder / 'info.txt'
    if not info_path.exists():
        template = (
            f'Name: {display_name}\n'
            f'Description: {default_desc}\n'
            f'Platform: {platform}\n'
            'Cost: Free\n\n'
            'About:\n'
            'Edit this info.txt file to add more information about this program or app.\n'
            'Set Cost to Free, $4.99, $9.99/month, etc.\n'
            'Everything in this file will be shown in VimpulseHub when View is clicked.\n'
        )
        try:
            info_path.write_text(template, encoding='utf-8')
        except OSError:
            pass
    try:
        text = info_path.read_text(encoding='utf-8', errors='replace')
        if not any(line.lower().startswith('cost:') for line in text.splitlines()):
            lines = text.splitlines()
            insert_at = next((i + 1 for i, line in enumerate(lines) if line.lower().startswith('platform:')), min(3, len(lines)))
            lines.insert(insert_at, 'Cost: Free')
            text = '\n'.join(lines).rstrip() + '\n'
            try:
                info_path.write_text(text, encoding='utf-8')
            except OSError:
                pass
        return text.strip()
    except OSError:
        return ''


def value_from_info(info_text: str, field: str, fallback: str = ''):
    prefix = field.lower() + ':'
    for line in info_text.splitlines():
        if line.lower().startswith(prefix):
            value = line.split(':', 1)[1].strip()
            if value:
                return value
    return fallback


def description_from_info(info_text: str, fallback: str):
    for line in info_text.splitlines():
        if line.lower().startswith('description:'):
            value = line.split(':', 1)[1].strip()
            if value:
                return value
    for line in info_text.splitlines():
        value = line.strip()
        if value and not value.lower().startswith(('name:', 'platform:', 'version:', 'about:')):
            return value
    return fallback


def about_from_info(info_text: str):
    lines = info_text.splitlines()
    collecting = False
    about_lines = []

    for line in lines:
        stripped = line.strip()

        if stripped.lower() == 'about:':
            collecting = True
            continue

        if collecting:
            about_lines.append(line)

    return '\n'.join(about_lines).strip()



def field_values_from_info(info_text: str, field: str):
    value = value_from_info(info_text, field, '')
    if not value:
        return []
    return [x.strip() for x in re.split(r'[,;|]', value) if x.strip()]


def requirements_from_info(info_text: str, kind: str):
    fields = [
        ('Minimum OS', value_from_info(info_text, 'Minimum OS', '')),
        ('Architecture', value_from_info(info_text, 'Architecture', '')),
        ('RAM', value_from_info(info_text, 'RAM', '')),
        ('Disk Space', value_from_info(info_text, 'Disk Space', '')),
        ('Requires Admin', value_from_info(info_text, 'Requires Admin', '')),
        ('Portable', value_from_info(info_text, 'Portable', '')),
    ]
    if kind == 'android':
        fields.append(('Minimum Android', value_from_info(info_text, 'Minimum Android', '')))
    return [{'label': label, 'value': value} for label, value in fields if value]


def read_optional_text(folder: Path, names):
    for name in names:
        p = folder / name
        if p.is_file():
            try:
                return p.read_text(encoding='utf-8', errors='replace').strip()
            except OSError:
                pass
    return ''


def screenshots_for(info_folder: Path, kind: str):
    root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT
    shot_dir = info_folder / 'screenshots'
    if not shot_dir.is_dir():
        return []
    out = []
    try:
        files = sorted(
            (p for p in shot_dir.iterdir()
             if p.is_file() and p.suffix.lower() in {'.png','.jpg','.jpeg','.webp','.gif'}),
            key=lambda p: p.name.lower()
        )
        for p in files[:12]:
            rel = p.relative_to(root).as_posix()
            out.append(f'/screenshot/{kind}/{urllib.parse.quote(rel, safe="/")}')
    except OSError:
        pass
    return out


def previous_releases(info_folder: Path, current_file: Path, kind: str, extensions):
    root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT
    releases = []
    try:
        files = [p for p in info_folder.rglob('*')
                 if p.is_file() and p.suffix.lower() in extensions and p.resolve() != current_file.resolve()]
        files.sort(key=lambda p: p.stat().st_mtime, reverse=True)
        for p in files[:10]:
            st = p.stat()
            rel = p.relative_to(root).as_posix()
            releases.append({
                'version': version_from_name(p),
                'filename': p.name,
                'size': size_text(st.st_size),
                'updated': datetime.fromtimestamp(st.st_mtime).strftime('%b %d, %Y'),
                'download': f'/{kind}/{urllib.parse.quote(rel, safe="/")}'
            })
    except OSError:
        pass
    return releases



def sha256_file(path: Path):
    key = str(path.resolve())
    try:
        st = path.stat()
        cached = HASH_CACHE.get(key)
        if cached and cached.get('size') == st.st_size and cached.get('mtime_ns') == st.st_mtime_ns:
            return cached.get('sha256', '')
    except OSError:
        return ''
    h=hashlib.sha256()
    try:
        with path.open('rb') as f:
            for chunk in iter(lambda:f.read(1024*1024),b''): h.update(chunk)
        digest = h.hexdigest()
        try:
            st = path.stat()
            HASH_CACHE[key] = {'size': st.st_size, 'mtime_ns': st.st_mtime_ns, 'sha256': digest}
            HASH_CACHE_FILE.write_text(json.dumps(HASH_CACHE, indent=2), encoding='utf-8')
        except OSError:
            pass
        return digest
    except OSError:
        return ''

def load_download_stats():
    global DOWNLOAD_STATS
    if DOWNLOAD_STATS is not None:
        return DOWNLOAD_STATS
    try:
        if STATS_FILE.exists():
            d=json.loads(STATS_FILE.read_text(encoding='utf-8'))
            DOWNLOAD_STATS = d if isinstance(d,dict) else {}
            return DOWNLOAD_STATS
    except Exception: pass
    DOWNLOAD_STATS = {}
    return DOWNLOAD_STATS

def save_download_stats(d):
    global DOWNLOAD_STATS
    DOWNLOAD_STATS = d
    try: STATS_FILE.write_text(json.dumps(d,indent=2),encoding='utf-8')
    except OSError: pass

def stat_key(kind,path):
    root=SOFTWARE_ROOT if kind=='software' else ANDROID_ROOT
    try: return kind+':'+path.relative_to(root).as_posix()
    except ValueError: return ''

def download_count_for(kind,path):
    return int(load_download_stats().get(stat_key(kind,path),{}).get('count',0))

def record_download(kind,path):
    key=stat_key(kind,path)
    if not key:return
    d=load_download_stats(); row=d.get(key,{})
    row.update({'count':int(row.get('count',0))+1,'filename':path.name,'kind':kind,'last_download':datetime.now().isoformat(timespec='seconds')})
    d[key]=row;save_download_stats(d)

def invalidate_catalog(kind=None):
    if kind:
        CATALOG_CACHE.pop(kind, None)
        CATALOG_CACHE_SIGNATURE.pop(kind, None)
    else:
        CATALOG_CACHE.clear()
        CATALOG_CACHE_SIGNATURE.clear()

def catalog_signature(root: Path):
    try:
        newest = max((p.stat().st_mtime_ns for p in root.rglob('*') if p.is_file()), default=0)
        count = sum(1 for p in root.rglob('*') if p.is_file())
        return (newest, count)
    except OSError:
        return (0, 0)

def load_users():
    try:
        if USERS_FILE.exists():
            data = json.loads(USERS_FILE.read_text(encoding='utf-8'))
            if isinstance(data, dict):
                return data
    except Exception:
        pass
    return {}


def save_users(users):
    try:
        tmp = USERS_FILE.with_suffix('.tmp')
        tmp.write_text(json.dumps(users, indent=2, ensure_ascii=False), encoding='utf-8')
        tmp.replace(USERS_FILE)
        return True
    except OSError:
        return False


def hash_password(password, salt_hex=None):
    salt = bytes.fromhex(salt_hex) if salt_hex else secrets.token_bytes(16)
    digest = hashlib.pbkdf2_hmac(
        'sha256',
        password.encode('utf-8'),
        salt,
        PASSWORD_ITERATIONS
    )
    return f'pbkdf2_sha256${PASSWORD_ITERATIONS}${salt.hex()}${digest.hex()}'


def verify_password(password, stored):
    try:
        scheme, iterations, salt_hex, expected_hex = stored.split('$', 3)
        if scheme != 'pbkdf2_sha256':
            return False
        digest = hashlib.pbkdf2_hmac(
            'sha256',
            password.encode('utf-8'),
            bytes.fromhex(salt_hex),
            int(iterations)
        ).hex()
        return secrets.compare_digest(digest, expected_hex)
    except Exception:
        return False


def clean_sessions():
    now = time.time()
    dead = [sid for sid, data in ADMIN_SESSIONS.items()
            if data.get('expires', 0) <= now]
    for sid in dead:
        ADMIN_SESSIONS.pop(sid, None)


def session_user(handler):
    clean_sessions()
    raw = handler.headers.get('Cookie', '')
    if not raw:
        return None
    cookie = SimpleCookie()
    try:
        cookie.load(raw)
    except Exception:
        return None
    morsel = cookie.get('vimpulse_admin')
    if not morsel:
        return None
    session = ADMIN_SESSIONS.get(morsel.value)
    if not session or session.get('expires', 0) <= time.time():
        return None

    users = load_users()
    user = users.get(session.get('username', ''))
    if not user or not user.get('enabled', True):
        return None

    session['expires'] = time.time() + SESSION_TTL
    return {
        'username': session.get('username', ''),
        'role': user.get('role', 'editor'),
        'enabled': True
    }


def create_session(username):
    sid = secrets.token_urlsafe(32)
    ADMIN_SESSIONS[sid] = {
        'username': username,
        'expires': time.time() + SESSION_TTL
    }
    return sid


def destroy_session(handler):
    raw = handler.headers.get('Cookie', '')
    cookie = SimpleCookie()
    try:
        cookie.load(raw)
        morsel = cookie.get('vimpulse_admin')
        if morsel:
            ADMIN_SESSIONS.pop(morsel.value, None)
    except Exception:
        pass


def session_cookie(sid):
    return f'vimpulse_admin={sid}; Path=/admin; HttpOnly; SameSite=Strict; Max-Age={SESSION_TTL}'


def clear_session_cookie():
    return 'vimpulse_admin=; Path=/admin; HttpOnly; SameSite=Strict; Max-Age=0'


def role_allowed(user, *roles):
    return bool(user and user.get('role') in roles)


def admin_folder(kind, name):
    return safe_inside(
        SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT if kind == 'android' else PLUGINS_ROOT,
        name
    ) if kind in ('software', 'android', 'plugins') else None


def esc_html(value):
    return html_lib.escape(str(value), quote=True)


def setup_html():
    return """<!doctype html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<title>VimpulseHub Admin Setup</title>
<style>
body{margin:0;font-family:Segoe UI,Arial,sans-serif;background:#061522;color:#eef7ff;min-height:100vh;display:grid;place-items:center}
.card{width:min(430px,calc(100% - 36px));background:#0d2436;border:1px solid #214b68;border-radius:12px;padding:26px;box-shadow:0 20px 70px #0008}
h1{margin-top:0}.muted{color:#9fc1da;line-height:1.5}label{display:block;margin:14px 0 6px;color:#b8d0e2;font-size:13px}
input{width:100%;box-sizing:border-box;padding:12px;border-radius:7px;border:1px solid #315a75;background:#071a29;color:white}
button{width:100%;margin-top:18px;padding:12px;border:0;border-radius:7px;background:#0789ff;color:#fff;font-weight:800;cursor:pointer}
#msg{margin-top:12px;color:#ffbf69}
</style></head><body><div class="card">
<h1>VimpulseHub Admin Setup</h1>
<p class="muted">Create the first administrator account. This only appears when no admin accounts exist yet.</p>
<label>Username</label><input id="u" autocomplete="username" value="admin">
<label>Password</label><input id="p" type="password" autocomplete="new-password">
<label>Confirm password</label><input id="p2" type="password" autocomplete="new-password">
<button onclick="setup()">Create Administrator</button><div id="msg"></div>
<script>
async function setup(){
 const username=u.value.trim(), password=p.value, confirm=p2.value;
 if(password!==confirm){msg.textContent='Passwords do not match.';return;}
 const r=await fetch('/admin/api/setup',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username,password})});
 const j=await r.json();msg.textContent=j.message||'';
 if(j.success) location.reload();
}
</script></div></body></html>"""


def login_html():
    return """<!doctype html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<title>VimpulseHub Admin Login</title>
<style>
body{margin:0;font-family:Segoe UI,Arial,sans-serif;background:#061522;color:#eef7ff;min-height:100vh;display:grid;place-items:center}
.card{width:min(410px,calc(100% - 36px));background:#0d2436;border:1px solid #214b68;border-radius:12px;padding:26px;box-shadow:0 20px 70px #0008}
h1{margin-top:0}.muted{color:#9fc1da}label{display:block;margin:14px 0 6px;color:#b8d0e2;font-size:13px}
input{width:100%;box-sizing:border-box;padding:12px;border-radius:7px;border:1px solid #315a75;background:#071a29;color:white}
button{width:100%;margin-top:18px;padding:12px;border:0;border-radius:7px;background:#0789ff;color:#fff;font-weight:800;cursor:pointer}
#msg{margin-top:12px;color:#ffbf69}
</style></head><body><div class="card">
<h1>VimpulseHub Admin</h1><p class="muted">Sign in to manage VimpulseHub.</p>
<label>Username</label><input id="u" autocomplete="username">
<label>Password</label><input id="p" type="password" autocomplete="current-password" onkeydown="if(event.key==='Enter')login()">
<button onclick="login()">Sign In</button><div id="msg"></div>
<script>
async function login(){
 const r=await fetch('/admin/api/login',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:u.value.trim(),password:p.value})});
 const j=await r.json();msg.textContent=j.message||'';
 if(j.success) location.reload();
}
</script></div></body></html>"""


def admin_html(user):
    is_admin = user.get('role') == 'admin'
    accounts = """
<div class="card wide">
<h2>Accounts</h2>
<div class="account-grid">
<div>
<label>New username</label><input id="newUser">
<label>Password</label><input id="newPass" type="password">
<label>Role</label><select id="newRole"><option value="editor">Editor / Worker</option><option value="admin">Administrator</option></select>
<button onclick="createUser()">Create Account</button>
</div>
<div>
<label>Reset username</label><input id="resetUser">
<label>New password</label><input id="resetPass" type="password">
<button onclick="resetPassword()">Reset Password</button>
</div>
</div>
<div id="users"></div>
</div>""" if is_admin else ""

    role_json = json.dumps(user.get('role', 'editor'))
    username_json = json.dumps(user.get('username', ''))

    return """<!doctype html>
<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
<title>VimpulseHub Admin</title>
<style>
body{font-family:Segoe UI,Arial,sans-serif;background:#061522;color:#eef7ff;margin:0;padding:28px}
.wrap{max-width:1150px;margin:auto}.top{display:flex;justify-content:space-between;gap:16px;align-items:center;flex-wrap:wrap}
.top h1{margin:0}.who{color:#9fc1da}.grid{display:grid;grid-template-columns:1fr 1fr;gap:18px;margin-top:22px}
.card{background:#0d2436;border:1px solid #214b68;border-radius:10px;padding:18px}.wide{margin-top:18px}
.account-grid{display:grid;grid-template-columns:1fr 1fr;gap:18px}
label{display:block;color:#9fc1da;margin:10px 0 5px;font-size:12px}
input,select,textarea{width:100%;box-sizing:border-box;padding:10px;border-radius:6px;border:1px solid #315a75;background:#071a29;color:white}
textarea{min-height:260px;resize:vertical}
button{margin-top:10px;padding:10px 14px;border:0;border-radius:6px;background:#0789ff;color:white;font-weight:700;cursor:pointer}
button.secondary{background:#173b55}button.danger{background:#b93434}button.warn{background:#a96c09}
table{width:100%;border-collapse:collapse;margin-top:14px}td,th{padding:8px;border-bottom:1px solid #24445a;text-align:left}
.badge{display:inline-block;padding:4px 8px;border-radius:999px;background:#173b55;color:#bfe5ff;font-size:12px}
.actions{display:flex;gap:6px;flex-wrap:wrap}.actions button{margin:0;padding:7px 10px}
#msg{margin-top:10px;color:#77d5ff;min-height:20px}
@media(max-width:760px){.grid,.account-grid{grid-template-columns:1fr}}
</style></head><body><div class="wrap">
<div class="top"><div><h1>VimpulseHub Admin</h1><div class="who">Signed in as <strong id="who"></strong> · <span id="roleBadge" class="badge"></span></div></div>
<div><button class="secondary" onclick="changeMyPassword()">Change My Password</button> <button class="danger" onclick="logout()">Log Out</button></div></div>

<div id="msg"></div>
<div class="grid">
<div class="card"><h2>Product Editor</h2>
<label>Library</label><select id="k"><option value="software">Software</option><option value="android">Android</option><option value="plugins">Plugins</option></select>
<label>Folder</label><input id="f" placeholder="cybervault">
<label>info.txt</label><div style="font-size:12px;color:#9fc1da;margin-bottom:6px">Multiple categories supported, for example: <code>Category: Editor, Word Processor</code></div><textarea id="i"></textarea>
<button onclick="loadInfo()">Load</button> <button onclick="saveInfo()">Save</button>
</div>

<div class="card"><h2>Create Product</h2>
<label>Folder</label><input id="nf" placeholder="NewProduct">
<label>Name</label><input id="nn" placeholder="New Product">
<label>Description</label><input id="nd" placeholder="Description">
<button onclick="createItem()">Create Product</button>

<h2 style="margin-top:26px">Upload New Release</h2>
<input id="uploadFile" type="file" accept="*/*" multiple>
<button onclick="uploadRelease()">Upload Release</button>
<h2 style="margin-top:26px">Product Screenshot</h2>
<input id="screenshotFile" type="file" accept="image/png,image/jpeg,image/webp,image/gif">
<button onclick="uploadScreenshot()">Upload Screenshot</button>

<h2 style="margin-top:26px">Download Statistics</h2>
<button class="secondary" onclick="stats()">Refresh Statistics</button>
</div>
</div>

<div class="card wide"><h2>Server Dashboard</h2><div id="dashboard" class="badge">Loading…</div></div>
<div class="card wide"><h2>Download Statistics</h2><div id="s"></div></div>
""" + accounts + """
</div>
<script>
const ROLE=""" + role_json + """;
const USERNAME=""" + username_json + """;
who.textContent=USERNAME;roleBadge.textContent=ROLE==='admin'?'Administrator':'Editor / Worker';

async function api(url,options={}){
 const r=await fetch(url,options);
 const j=await r.json().catch(()=>({success:false,message:'Invalid server response'}));
 if(r.status===401){location.reload();return j;}
 if(j.message)msg.textContent=j.message;
 return j;
}
async function loadInfo(){
 const j=await api('/admin/api/info?kind='+encodeURIComponent(k.value)+'&folder='+encodeURIComponent(f.value));
 if(j.success)i.value=j.info||'';
}
async function saveInfo(){
 await api('/admin/api/info',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({kind:k.value,folder:f.value,info:i.value})});
}
async function createItem(){
 const j=await api('/admin/api/create',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({kind:k.value,folder:nf.value,name:nn.value,description:nd.value})});
 if(j.success){f.value=nf.value;loadInfo();}
}
async function stats(){
 const j=await api('/admin/api/stats');
 const a=Object.values(j.stats||{}).sort((x,y)=>(y.count||0)-(x.count||0));
 s.innerHTML='<table><tr><th>File</th><th>Type</th><th>Downloads</th><th>Last</th></tr>'+
 a.map(x=>`<tr><td>${x.filename||''}</td><td>${x.kind||''}</td><td>${x.count||0}</td><td>${x.last_download||''}</td></tr>`).join('')+'</table>';
}
async function uploadRelease(){
  const files=[...uploadFile.files]; if(!files.length){msg.textContent='Choose one or more files first.';return;}
  const results=[]; for(const file of files){
   const url='/admin/api/upload?kind='+encodeURIComponent(k.value)+'&folder='+encodeURIComponent(f.value);
   const r=await fetch(url,{method:'POST',headers:{'X-Filename':file.name},body:file});
   results.push(await r.json().catch(()=>({success:false,message:'Invalid server response'})));
  }
  msg.textContent=results.every(x=>x.success)?files.length+' file(s) uploaded.':results.map(x=>x.message||'Upload failed.').join(' '); if(results.every(x=>x.success)){uploadFile.value='';}
}
async function uploadScreenshot(){
 const file=screenshotFile.files[0]; if(!file){msg.textContent='Choose a screenshot first.';return;}
 const url='/admin/api/upload?kind='+encodeURIComponent(k.value)+'&folder='+encodeURIComponent(f.value)+'&asset=screenshot';
 const r=await fetch(url,{method:'POST',headers:{'X-Filename':file.name},body:file});
 const j=await r.json().catch(()=>({success:false,message:'Invalid server response'}));
 msg.textContent=j.message||''; if(j.success){screenshotFile.value='';}
}
async function dashboardData(){
 const j=await api('/admin/api/dashboard'); if(!j.success)return;
 const a=j.analytics||{}; const mb=n=>Math.round((n||0)/1024/1024);
 dashboard.innerHTML='Uptime: '+Math.floor((j.uptime_seconds||0)/3600)+'h '+Math.floor(((j.uptime_seconds||0)%3600)/60)+'m · CPU threads: '+j.cpu_threads+' · Disk free: '+mb(j.disk_free_bytes)+' MB · Catalog: '+j.software_count+' software / '+j.android_count+' Android · Downloads: today '+a.today+' / 7 days '+a.week+' / month '+a.month+' / all-time '+a.all_time;
}
async function logout(){
 await api('/admin/api/logout',{method:'POST'});
 location.reload();
}
async function changeMyPassword(){
 const password=prompt('Enter your new password (minimum 8 characters):');
 if(!password)return;
 const j=await api('/admin/api/change-password',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({password})});
 if(j.success)alert('Password changed.');
}
async function loadUsers(){
 if(ROLE!=='admin')return;
 const j=await api('/admin/api/users');
 if(!j.success)return;
 users.innerHTML='<table><tr><th>Username</th><th>Role</th><th>Status</th><th>Actions</th></tr>'+
 j.users.map(x=>`<tr><td>${x.username}</td><td>${x.role}</td><td>${x.enabled?'Enabled':'Disabled'}</td><td><div class="actions"><button class="warn" onclick="toggleUser('${x.username}',${!x.enabled})">${x.enabled?'Disable':'Enable'}</button><button class="danger" onclick="deleteUser('${x.username}')">Delete</button></div></td></tr>`).join('')+'</table>';
}
async function createUser(){
 const j=await api('/admin/api/users/create',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:newUser.value.trim(),password:newPass.value,role:newRole.value})});
 if(j.success){newUser.value='';newPass.value='';loadUsers();}
}
async function toggleUser(username,enabled){
 const j=await api('/admin/api/users/toggle',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username,enabled})});
 if(j.success)loadUsers();
}
async function deleteUser(username){
 if(!confirm('Delete account '+username+'?'))return;
 const j=await api('/admin/api/users/delete',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username})});
 if(j.success)loadUsers();
}
async function resetPassword(){
 const j=await api('/admin/api/users/reset-password',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({username:resetUser.value.trim(),password:resetPass.value})});
 if(j.success){resetPass.value='';alert('Password reset.');}
}
stats();dashboardData();if(ROLE==='admin')loadUsers();
</script></body></html>"""


CUSTOM_ICON_EXTS = {'.png', '.jpg', '.jpeg', '.webp', '.gif', '.ico', '.bmp'}


def ensure_icon_folder(folder: Path):
    icon_dir = folder / 'icon'
    try:
        icon_dir.mkdir(parents=True, exist_ok=True)
    except OSError:
        pass
    return icon_dir


def custom_icon_file(folder: Path):
    icon_dir = ensure_icon_folder(folder)
    try:
        images = [p for p in icon_dir.iterdir() if p.is_file() and p.suffix.lower() in CUSTOM_ICON_EXTS]
    except OSError:
        return None
    if not images:
        return None
    # Only one image is needed. If more than one exists, use the newest one.
    return max(images, key=lambda p: p.stat().st_mtime)


def icon_url_for(file: Path, kind: str, icon_folder: Path = None):
    root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT
    custom = custom_icon_file(icon_folder or file.parent)
    if custom:
        rel = custom.relative_to(root).as_posix()
        return f'/custom-icon/{kind}/{urllib.parse.quote(rel, safe="/")}'
    suffix = file.suffix.lower()
    if kind == 'software' and suffix == '.exe':
        rel = file.relative_to(root).as_posix()
        return f'/asset-icon/software/{urllib.parse.quote(rel, safe="/")}'
    if kind == 'android' and suffix == '.apk':
        rel = file.relative_to(root).as_posix()
        return f'/asset-icon/android/{urllib.parse.quote(rel, safe="/")}'
    return ''


def windows_exe_icon_png(exe_path: Path):
    try:
        key = re.sub(r'[^A-Za-z0-9_.-]+', '_', str(exe_path.relative_to(SOFTWARE_ROOT)))
    except Exception:
        key = re.sub(r'[^A-Za-z0-9_.-]+', '_', exe_path.name)
    cache = ICON_CACHE / f'{key}.png'
    try:
        if cache.exists() and cache.stat().st_mtime >= exe_path.stat().st_mtime:
            return cache.read_bytes()
    except OSError:
        pass
    ps = (
        "Add-Type -AssemblyName System.Drawing;"
        "$src=$args[0];$out=$args[1];"
        "$ico=[System.Drawing.Icon]::ExtractAssociatedIcon($src);"
        "if($null -eq $ico){exit 2};"
        "$bmp=$ico.ToBitmap();"
        "$bmp.Save($out,[System.Drawing.Imaging.ImageFormat]::Png);"
        "$bmp.Dispose();$ico.Dispose();"
    )
    try:
        r = subprocess.run(
            ['powershell', '-NoProfile', '-NonInteractive', '-Command', ps, str(exe_path), str(cache)],
            stdout=subprocess.DEVNULL, stderr=subprocess.DEVNULL, timeout=12
        )
        if r.returncode == 0 and cache.exists():
            return cache.read_bytes()
    except Exception:
        pass
    return None


def android_apk_icon(apk_path: Path):
    try:
        with zipfile.ZipFile(apk_path, 'r') as z:
            names = z.namelist()
            candidates = []
            density_score = {
                'xxxhdpi': 700, 'xxhdpi': 600, 'xhdpi': 500, 'hdpi': 400,
                'mdpi': 300, 'nodpi': 250, 'anydpi': 100
            }
            for name in names:
                low = name.lower()
                if not low.startswith('res/'):
                    continue
                if not any(part in low for part in ('mipmap', 'drawable')):
                    continue
                if not low.endswith(('.png', '.webp', '.jpg', '.jpeg')):
                    continue
                base = Path(low).stem
                score = 0
                if 'ic_launcher' in base:
                    score += 1000
                elif base in ('icon', 'app_icon', 'launcher_icon') or base.endswith('_icon'):
                    score += 800
                elif 'launcher' in base or 'icon' in base:
                    score += 500
                else:
                    continue
                for d, pts in density_score.items():
                    if d in low:
                        score += pts
                        break
                try:
                    score += min(z.getinfo(name).file_size // 1024, 200)
                except Exception:
                    pass
                candidates.append((score, name))
            if not candidates:
                return None, None
            candidates.sort(reverse=True)
            name = candidates[0][1]
            data = z.read(name)
            ctype = mimetypes.guess_type(name)[0] or ('image/webp' if name.lower().endswith('.webp') else 'image/png')
            return data, ctype
    except Exception:
        return None, None

def item_for(folder: Path, file: Path, kind: str, display=None, desc=None, icon=None, info_folder=None):
    root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT
    rel = file.relative_to(root).as_posix()
    st = file.stat()
    display_name = display or folder.name.replace('_', ' ').replace('-', ' ')
    fallback_desc = desc or ('Vimpulse Windows software and utilities.' if kind == 'software' else 'Vimpulse Android application.')
    platform = 'Windows' if kind == 'software' else 'Android'
    info_dir = info_folder or folder
    info_text = ensure_info_file(info_dir, display_name, fallback_desc, platform)
    return {
        'name': display_name,
        'folder': folder.name,
        'description': description_from_info(info_text, fallback_desc),
        'cost': value_from_info(info_text, 'Cost', 'Free'),
        'purchase_url': value_from_info(info_text, 'PurchaseURL', ''),
        'about': about_from_info(info_text),
        'categories': field_values_from_info(info_text, 'Category') or ['Other'],
        'category': ', '.join(field_values_from_info(info_text, 'Category') or ['Other']),
        'tags': field_values_from_info(info_text, 'Tags'),
        'channel': value_from_info(info_text, 'Channel', 'Stable'),
        'status': value_from_info(info_text, 'Status', 'Available'),
        'featured': value_from_info(info_text, 'Featured', 'No').lower() in ('yes', 'true', '1'),
        'requirements': requirements_from_info(info_text, kind),
        'screenshots': screenshots_for(info_dir, kind),
        'changelog': read_optional_text(info_dir, ('changelog.txt', 'CHANGELOG.txt', 'Changelog.txt')),
        'previous_releases': previous_releases(info_dir, file, kind, SOFTWARE_EXTS if kind == 'software' else ANDROID_EXTS),
        'sha256': sha256_file(file),
        'downloads': download_count_for(kind, file),
        'info': info_text,
        'icon': icon or ('◆' if kind == 'software' else '⬢'),
        'icon_url': icon_url_for(file, kind, info_dir),
        'version': version_from_name(file),
        'download': f'/{kind}/{urllib.parse.quote(rel, safe="/")}',
        'share_url': f'/{"apps" if kind == "android" else "software"}/{urllib.parse.quote(folder.name, safe="")}',
        'size': size_text(st.st_size),
        'updated': datetime.fromtimestamp(st.st_mtime).strftime('%b %d, %Y'),
        'updated_iso': datetime.fromtimestamp(st.st_mtime).isoformat(timespec='seconds'),
        'filename': file.name,
        'platform': platform
    }


def build_catalog(kind):
    root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT
    signature = catalog_signature(root)
    if CATALOG_CACHE_SIGNATURE.get(kind) == signature and kind in CATALOG_CACHE:
        return CATALOG_CACHE[kind]
    exts = SOFTWARE_EXTS if kind == 'software' else ANDROID_EXTS
    pretty = PRETTY_SOFTWARE if kind == 'software' else PRETTY_ANDROID
    descs = DESC_SOFTWARE if kind == 'software' else DESC_ANDROID
    icons = ICON_SOFTWARE if kind == 'software' else ICON_ANDROID
    items = []
    if not root.exists():
        return items
    for folder in sorted((p for p in root.iterdir() if p.is_dir() and not p.name.startswith('_')), key=lambda p: p.name.lower()):
        key = folder.name.lower()
        ensure_icon_folder(folder)
        if kind == 'software' and key in ('vimpulsetechtoolkit', 'vimpulse tech toolkit'):
            for edition in ('Pro', 'Business'):
                ed = folder / edition
                if ed.exists():
                    ensure_icon_folder(ed)
                    f = newest_file(ed, exts)
                    if f:
                        items.append(item_for(folder, f, kind,
                            f'Vimpulse Tech Toolkit {edition}',
                            'Advanced tools for professionals.' if edition == 'Pro' else 'Business-ready technician tools.',
                            '🔧' if edition == 'Pro' else '▣',
                            info_folder=ed))
            if any(i['folder'] == folder.name for i in items):
                continue
        f = newest_file(folder, exts)
        if f:
            items.append(item_for(folder, f, kind, pretty.get(key), descs.get(key), icons.get(key)))
    items.sort(key=lambda item: (not item.get('featured', False), item.get('name', '').lower()))
    CATALOG_CACHE[kind] = items
    CATALOG_CACHE_SIGNATURE[kind] = signature
    return items


def build_plugin_catalog():
    groups = []
    if not PLUGINS_ROOT.exists():
        return groups
    for folder in sorted((p for p in PLUGINS_ROOT.iterdir() if p.is_dir() and not p.name.startswith('_')), key=lambda p: p.name.lower()):
        files = [p for p in folder.rglob('*') if is_plugin_file(p)]
        info = ensure_info_file(folder, folder.name.replace('_', ' ').replace('-', ' '), 'A folder of Vimpulse plugins.', 'Plugins')
        groups.append({'name': value_from_info(info, 'Name', folder.name), 'folder': folder.name,
                       'description': description_from_info(info, 'A folder of Vimpulse plugins.'),
                       'plugins': [{'name': p.name, 'size': size_text(p.stat().st_size),
                                    'download': '/plugin/' + urllib.parse.quote(folder.name, safe='') + '/' + urllib.parse.quote(p.relative_to(folder).as_posix(), safe='/')}
                                   for p in sorted(files, key=lambda p: p.name.lower())]})
    return groups

def analytics_summary():
    now = datetime.now()
    today = now.date()
    week_start = today.fromordinal(today.toordinal() - today.weekday())
    month_start = today.replace(day=1)
    summary = {'today': 0, 'week': 0, 'month': 0, 'all_time': 0, 'top': []}
    rows = []
    for key, row in load_download_stats().items():
        count = int(row.get('count', 0) or 0)
        summary['all_time'] += count
        stamp = str(row.get('last_download', ''))
        try:
            when = datetime.fromisoformat(stamp).date()
        except ValueError:
            when = None
        if when == today:
            summary['today'] += count
        if when and when >= week_start:
            summary['week'] += count
        if when and when >= month_start:
            summary['month'] += count
        rows.append({'key': key, 'filename': row.get('filename', ''), 'kind': row.get('kind', ''), 'count': count, 'last_download': stamp})
    summary['top'] = sorted(rows, key=lambda row: (-row['count'], row['filename'].lower()))[:10]
    return summary

def dashboard_data():
    try:
        disk = os.statvfs(str(SOFTWARE_ROOT))
        disk_total = disk.f_frsize * disk.f_blocks
        disk_free = disk.f_frsize * disk.f_bavail
    except (AttributeError, OSError):
        disk_total = disk_free = 0
    return {
        'uptime_seconds': max(0, int(time.time() - SERVER_STARTED)),
        'cpu_threads': os.cpu_count() or 1,
        'disk_total_bytes': disk_total,
        'disk_free_bytes': disk_free,
        'software_count': len(build_catalog('software')),
        'android_count': len(build_catalog('android')),
        'analytics': analytics_summary(),
    }


class Handler(BaseHTTPRequestHandler):
    server_version = 'VimpulseHub/2.6'

    def log_message(self, fmt, *vals):
        print(f'[{self.log_date_time_string()}] {self.address_string()} - {fmt % vals}')

    def send_bytes(self, data: bytes, ctype='application/octet-stream', status=200, filename=None, extra_headers=None):
        self.send_response(status)
        self.send_header('Content-Type', ctype)
        self.send_header('Content-Length', str(len(data)))
        self.send_header('Cache-Control', 'no-store')
        if filename:
            safe = filename.replace('"', '')
            self.send_header('Content-Disposition', f'attachment; filename="{safe}"')
        if extra_headers:
            for key, value in extra_headers.items():
                self.send_header(key, value)
        self.end_headers()
        if self.command != 'HEAD':
            self.wfile.write(data)

    def send_json(self, obj, status=200, extra_headers=None):
        self.send_bytes(
            json.dumps(obj, ensure_ascii=False).encode('utf-8'),
            'application/json; charset=utf-8',
            status,
            extra_headers=extra_headers
        )

    def serve_file(self, path: Path, download=False):
        if not path or not path.is_file():
            self.send_error(404, 'File not found')
            return
        ctype = mimetypes.guess_type(path.name)[0] or 'application/octet-stream'
        try:
            stat = path.stat()
            self.send_response(200)
            self.send_header('Content-Type', ctype)
            self.send_header('Content-Length', str(stat.st_size))
            self.send_header('Cache-Control', 'public, max-age=86400' if not download else 'private, max-age=3600')
            self.send_header('Last-Modified', datetime.fromtimestamp(stat.st_mtime).strftime('%a, %d %b %Y %H:%M:%S GMT'))
            if download:
                safe = path.name.replace('"', '')
                self.send_header('Content-Disposition', f'attachment; filename="{safe}"')
            self.end_headers()
            if self.command != 'HEAD':
                with path.open('rb') as handle:
                    for chunk in iter(lambda: handle.read(1024 * 1024), b''):
                        self.wfile.write(chunk)
        except (OSError, BrokenPipeError):
            return

    def serve_share_page(self, kind='home', item=None, share_mode=False):
        titles = {
            'home': 'VimpulseHub AppStore',
            'software': 'VimpulseHub Windows Software',
            'android': 'VimpulseHub Android Apps',
            'plugins': 'VimpulseHub Plugins',
            'status': 'VimpulseHub Server Status',
            'about': 'About VimpulseHub',
        }
        descriptions = {
            'home': 'Download the latest Vimpulse Windows software and Android apps from one hub.',
            'software': 'Browse and download the latest Vimpulse Windows software.',
            'android': 'Browse and download the latest Vimpulse Android apps.',
            'plugins': 'Browse plugin folders and download the plugins inside them.',
            'status': 'Current availability and service status for VimpulseHub.',
            'about': 'One front end with separate Windows software and Android app libraries.',
        }
        title = titles.get(kind, titles['home'])
        description = descriptions.get(kind, descriptions['home'])
        url_path = {'home': '/', 'software': '/software', 'android': '/apps', 'plugins': '/plugins', 'status': '/status', 'about': '/about'}.get(kind, '/')
        image_url = ''
        if item:
            title = f"{item['name']} | VimpulseHub"
            description = item['description']
            url_path = f"/apps/{urllib.parse.quote(item['folder'], safe='')}" if kind == 'android' else f"/software/{urllib.parse.quote(item['folder'], safe='')}"
            screenshot_choices = item.get('screenshots') or []
            if screenshot_choices:
                image_url = SEO_BASE_URL + secrets.choice(screenshot_choices)
            elif item.get('icon_url'):
                image_url = SEO_BASE_URL + item['icon_url']
        esc = lambda value: html_lib.escape(str(value), quote=True)
        canonical_url = SEO_BASE_URL + url_path
        structured = None
        if item:
            structured = {
                '@context': 'https://schema.org',
                '@type': 'MobileApplication' if kind == 'android' else 'SoftwareApplication',
                'name': item.get('name', ''),
                'description': item.get('description', ''),
                'applicationCategory': ', '.join(item.get('categories', [])),
                'operatingSystem': item.get('platform', ''),
                'softwareVersion': item.get('version', ''),
                'dateModified': item.get('updated_iso', ''),
                'url': canonical_url,
                'downloadUrl': SEO_BASE_URL + item.get('download', ''),
            }
            if image_url:
                structured['image'] = image_url
        meta = [
            f'<meta name="description" content="{esc(description)}">',
            f'<meta name="robots" content="index,follow,max-image-preview:large,max-snippet:-1,max-video-preview:-1">',
            f'<meta name="googlebot" content="index,follow">',
            f'<meta name="author" content="VimpulseHub">',
            f'<meta name="theme-color" content="#061522">',
            f'<link rel="canonical" href="{esc(canonical_url)}">',
            f'<meta property="og:type" content="{"product" if item else "website"}">',
            f'<meta property="og:site_name" content="VimpulseHub">',
            f'<meta property="og:title" content="{esc(title)}">',
            f'<meta property="og:description" content="{esc(description)}">',
            f'<meta property="og:url" content="{esc(canonical_url)}">',
            f'<meta property="og:locale" content="en_CA">',
            f'<meta property="og:updated_time" content="{esc(item.get("updated_iso", "")) if item else ""}">',
            f'<meta name="twitter:card" content="summary_large_image">',
            f'<meta name="twitter:title" content="{esc(title)}">',
            f'<meta name="twitter:description" content="{esc(description)}">',
            f'<meta name="twitter:url" content="{esc(canonical_url)}">',
        ]
        if item:
            meta.extend([
                f'<meta name="twitter:label1" content="Version">',
                f'<meta name="twitter:data1" content="{esc(item.get("version", "Latest"))}">',
                f'<meta name="twitter:label2" content="Platform">',
                f'<meta name="twitter:data2" content="{esc(item.get("platform", ""))}">',
            ])
        if image_url:
            meta.append(f'<meta property="og:image" content="{esc(image_url)}">')
            meta.append(f'<meta property="og:image:alt" content="{esc(title)}">')
            meta.append(f'<meta name="twitter:image" content="{esc(image_url)}">')
            meta.append(f'<meta name="twitter:image:alt" content="{esc(title)}">')
        if structured:
            meta.append(f'<script type="application/ld+json">{json.dumps(structured, ensure_ascii=False)}</script>')
            breadcrumb = {
                '@context': 'https://schema.org',
                '@type': 'BreadcrumbList',
                'itemListElement': [
                    {'@type': 'ListItem', 'position': 1, 'name': 'VimpulseHub', 'item': SEO_BASE_URL + '/'},
                    {'@type': 'ListItem', 'position': 2, 'name': 'Android Apps' if kind == 'android' else 'Software', 'item': SEO_BASE_URL + ('/apps' if kind == 'android' else '/software')},
                    {'@type': 'ListItem', 'position': 3, 'name': item.get('name', ''), 'item': canonical_url},
                ],
            }
            meta.append(f'<script type="application/ld+json">{json.dumps(breadcrumb, ensure_ascii=False)}</script>')
        data = HTML_FILE.read_text(encoding='utf-8')
        data = data.replace('<title>VimpulseHub AppStore</title>', f'<title>{esc(title)}</title>\n' + '\n'.join(meta), 1)
        self.send_bytes(data.encode('utf-8'), 'text/html; charset=utf-8')

    def do_HEAD(self):
        self.do_GET()

    def do_POST(self):
        parsed = urllib.parse.urlparse(self.path)
        path = parsed.path

        try:
            length = int(self.headers.get('Content-Length', '0'))
        except ValueError:
            length = 0

        def read_json():
            try:
                raw = self.rfile.read(length) if length else b'{}'
                return json.loads(raw.decode('utf-8'))
            except Exception:
                return None

        # First-run setup is only available while there are no accounts.
        if path == '/admin/api/setup':
            users = load_users()
            if users:
                self.send_json({'success': False, 'message': 'Setup is already complete.'}, 403)
                return
            data = read_json()
            if data is None:
                self.send_json({'success': False, 'message': 'Invalid request.'}, 400)
                return
            username = str(data.get('username', '')).strip()
            password = str(data.get('password', ''))
            if not re.fullmatch(r'[A-Za-z0-9_.-]{3,40}', username):
                self.send_json({'success': False, 'message': 'Username must be 3-40 letters, numbers, dots, dashes, or underscores.'}, 400)
                return
            if len(password) < 8:
                self.send_json({'success': False, 'message': 'Password must be at least 8 characters.'}, 400)
                return
            users[username] = {
                'password_hash': hash_password(password),
                'role': 'admin',
                'enabled': True,
                'created': datetime.now().isoformat(timespec='seconds')
            }
            if not save_users(users):
                self.send_json({'success': False, 'message': 'Could not save account database.'}, 500)
                return
            sid = create_session(username)
            self.send_json(
                {'success': True, 'message': 'Administrator created.'},
                extra_headers={'Set-Cookie': session_cookie(sid)}
            )
            return

        if path == '/admin/api/login':
            data = read_json()
            if data is None:
                self.send_json({'success': False, 'message': 'Invalid request.'}, 400)
                return
            username = str(data.get('username', '')).strip()
            password = str(data.get('password', ''))
            users = load_users()
            account = users.get(username)
            if not account or not account.get('enabled', True) or not verify_password(password, account.get('password_hash', '')):
                time.sleep(0.25)
                self.send_json({'success': False, 'message': 'Invalid username or password.'}, 401)
                return
            sid = create_session(username)
            self.send_json(
                {'success': True, 'message': 'Signed in.'},
                extra_headers={'Set-Cookie': session_cookie(sid)}
            )
            return

        if path == '/admin/api/logout':
            destroy_session(self)
            self.send_json(
                {'success': True, 'message': 'Signed out.'},
                extra_headers={'Set-Cookie': clear_session_cookie()}
            )
            return

        user = session_user(self)
        if not user:
            self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
            return

        if path == '/admin/api/upload':
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Permission denied.'}, 403)
                return
            query = urllib.parse.parse_qs(parsed.query)
            kind = query.get('kind', [''])[0]
            folder = admin_folder(kind, query.get('folder', [''])[0])
            filename = Path(urllib.parse.unquote(self.headers.get('X-Filename', ''))).name
            asset = urllib.parse.parse_qs(parsed.query).get('asset', [''])[0].lower()
            if asset == 'screenshot':
                allowed = CUSTOM_ICON_EXTS
                valid_upload = kind in ('software', 'android') and bool(filename) and Path(filename).suffix.lower() in allowed
            else:
                allowed = SOFTWARE_EXTS if kind == 'software' else ANDROID_EXTS if kind == 'android' else None if kind == 'plugins' else set()
                plugin_upload = kind == 'plugins' and bool(filename) and filename.lower() != 'info.txt' and not filename.startswith('.')
                valid_upload = plugin_upload if kind == 'plugins' else bool(filename) and Path(filename).suffix.lower() in allowed
            if not folder or not folder.is_dir() or not valid_upload:
                self.send_json({'success': False, 'message': 'Invalid upload target or file type.'}, 400)
                return
            target_dir = folder / 'screenshots' if asset == 'screenshot' else folder if kind == 'plugins' else folder / 'updates'
            target_dir.mkdir(parents=True, exist_ok=True)
            target = target_dir / filename
            temp_path = None
            try:
                remaining = int(self.headers.get('Content-Length', '0'))
                with tempfile.NamedTemporaryFile(delete=False, dir=str(target_dir), prefix='.upload-', suffix='.tmp') as temp:
                    temp_path = Path(temp.name)
                    while remaining > 0:
                        chunk = self.rfile.read(min(1024 * 1024, remaining))
                        if not chunk:
                            break
                        temp.write(chunk)
                        remaining -= len(chunk)
                temp_path.replace(target)
                invalidate_catalog(kind)
                self.send_json({'success': True, 'message': f'{filename} uploaded.'})
            except OSError:
                try:
                    if temp_path:
                        temp_path.unlink(missing_ok=True)
                except Exception:
                    pass
                self.send_json({'success': False, 'message': 'Upload could not be saved.'}, 500)
            return

        if path == '/admin/api/change-password':
            data = read_json()
            if data is None:
                self.send_json({'success': False, 'message': 'Invalid request.'}, 400)
                return
            password = str(data.get('password', ''))
            if len(password) < 8:
                self.send_json({'success': False, 'message': 'Password must be at least 8 characters.'}, 400)
                return
            users = load_users()
            account = users.get(user['username'])
            if not account:
                self.send_json({'success': False, 'message': 'Account not found.'}, 404)
                return
            account['password_hash'] = hash_password(password)
            users[user['username']] = account
            save_users(users)
            self.send_json({'success': True, 'message': 'Password changed.'})
            return

        if path in ('/admin/api/info', '/admin/api/create'):
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Permission denied.'}, 403)
                return
            data = read_json()
            if data is None:
                self.send_json({'success': False, 'message': 'Invalid request.'}, 400)
                return
            kind = data.get('kind', '')
            folder_name = str(data.get('folder', '')).strip()

            if path == '/admin/api/create':
                if kind not in ('software', 'android', 'plugins'):
                    self.send_json({'success': False, 'message': 'Invalid library.'}, 400)
                    return
                if not re.fullmatch(r'[A-Za-z0-9 _.-]{1,80}', folder_name):
                    self.send_json({'success': False, 'message': 'Invalid folder name.'}, 400)
                    return
                root = SOFTWARE_ROOT if kind == 'software' else ANDROID_ROOT if kind == 'android' else PLUGINS_ROOT
                folder = (root / folder_name).resolve()
                try:
                    folder.relative_to(root)
                except ValueError:
                    self.send_json({'success': False, 'message': 'Invalid folder.'}, 400)
                    return
                folder.mkdir(parents=True, exist_ok=True)
                for sub in (() if kind == 'plugins' else ('updates', 'icon', 'screenshots')):
                    (folder / sub).mkdir(exist_ok=True)
                platform = 'Plugins' if kind == 'plugins' else 'Windows' if kind == 'software' else 'Android'
                display = str(data.get('name', '')).strip() or folder_name
                desc = str(data.get('description', '')).strip() or 'Vimpulse application.'
                info = (
                    f'Name: {display}\n'
                    f'Description: {desc}\n'
                    f'Platform: {platform}\n'
                    'Cost: Free\n'
                    f'Category: {"Plugins" if kind == "plugins" else "Other"}\n'
                    'Tags:\n'
                    'Channel: Stable\n'
                    'Status: Available\n'
                    'Featured: No\n'
                    'PurchaseURL:\n\n'
                    'About:\n'
                )
                (folder / 'info.txt').write_text(info, encoding='utf-8')
                self.send_json({'success': True, 'message': 'Product created.'})
                return

            folder = admin_folder(kind, folder_name)
            if not folder or not folder.is_dir():
                self.send_json({'success': False, 'message': 'Product not found.'}, 404)
                return
            (folder / 'info.txt').write_text(str(data.get('info', '')), encoding='utf-8')
            self.send_json({'success': True, 'message': 'info.txt saved.'})
            return

        # Account management: administrators only.
        if path.startswith('/admin/api/users/'):
            if not role_allowed(user, 'admin'):
                self.send_json({'success': False, 'message': 'Administrator permission required.'}, 403)
                return
            data = read_json()
            if data is None:
                self.send_json({'success': False, 'message': 'Invalid request.'}, 400)
                return
            users = load_users()

            if path == '/admin/api/users/create':
                username = str(data.get('username', '')).strip()
                password = str(data.get('password', ''))
                role = str(data.get('role', 'editor')).strip().lower()
                if not re.fullmatch(r'[A-Za-z0-9_.-]{3,40}', username):
                    self.send_json({'success': False, 'message': 'Invalid username.'}, 400)
                    return
                if username in users:
                    self.send_json({'success': False, 'message': 'That username already exists.'}, 409)
                    return
                if len(password) < 8:
                    self.send_json({'success': False, 'message': 'Password must be at least 8 characters.'}, 400)
                    return
                if role not in ('admin', 'editor'):
                    role = 'editor'
                users[username] = {
                    'password_hash': hash_password(password),
                    'role': role,
                    'enabled': True,
                    'created': datetime.now().isoformat(timespec='seconds')
                }
                save_users(users)
                self.send_json({'success': True, 'message': f'Account {username} created.'})
                return

            target = str(data.get('username', '')).strip()
            account = users.get(target)
            if not account:
                self.send_json({'success': False, 'message': 'Account not found.'}, 404)
                return

            if path == '/admin/api/users/reset-password':
                password = str(data.get('password', ''))
                if len(password) < 8:
                    self.send_json({'success': False, 'message': 'Password must be at least 8 characters.'}, 400)
                    return
                account['password_hash'] = hash_password(password)
                users[target] = account
                save_users(users)
                self.send_json({'success': True, 'message': f'Password reset for {target}.'})
                return

            if target == user['username']:
                self.send_json({'success': False, 'message': 'You cannot disable or delete the account you are currently using.'}, 400)
                return

            if path == '/admin/api/users/toggle':
                enabled = bool(data.get('enabled', True))
                if account.get('role') == 'admin' and not enabled:
                    enabled_admins = sum(
                        1 for u in users.values()
                        if u.get('role') == 'admin' and u.get('enabled', True)
                    )
                    if enabled_admins <= 1:
                        self.send_json({'success': False, 'message': 'You cannot disable the last enabled administrator.'}, 400)
                        return
                account['enabled'] = enabled
                users[target] = account
                save_users(users)
                self.send_json({'success': True, 'message': f'Account {target} updated.'})
                return

            if path == '/admin/api/users/delete':
                if account.get('role') == 'admin':
                    admins = sum(1 for u in users.values() if u.get('role') == 'admin')
                    if admins <= 1:
                        self.send_json({'success': False, 'message': 'You cannot delete the last administrator.'}, 400)
                        return
                users.pop(target, None)
                save_users(users)
                for sid, sess in list(ADMIN_SESSIONS.items()):
                    if sess.get('username') == target:
                        ADMIN_SESSIONS.pop(sid, None)
                self.send_json({'success': True, 'message': f'Account {target} deleted.'})
                return

        self.send_json({'success': False, 'message': 'Endpoint not found.'}, 404)

    def do_GET(self):
        parsed = urllib.parse.urlparse(self.path)
        path = parsed.path
        if path in ('/admin', '/admin/'):
            users = load_users()
            if not users:
                self.send_bytes(setup_html().encode('utf-8'), 'text/html; charset=utf-8')
                return
            user = session_user(self)
            if not user:
                self.send_bytes(login_html().encode('utf-8'), 'text/html; charset=utf-8')
                return
            self.send_bytes(admin_html(user).encode('utf-8'), 'text/html; charset=utf-8')
            return

        if path == '/admin/api/me':
            user = session_user(self)
            if not user:
                self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
                return
            self.send_json({'success': True, 'user': user})
            return

        if path == '/admin/api/stats':
            user = session_user(self)
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
                return
            self.send_json({'success': True, 'stats': load_download_stats()})
            return

        if path == '/admin/api/analytics':
            user = session_user(self)
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
                return
            self.send_json({'success': True, **analytics_summary()})
            return

        if path == '/admin/api/dashboard':
            user = session_user(self)
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
                return
            self.send_json({'success': True, **dashboard_data()})
            return

        if path == '/admin/api/info':
            user = session_user(self)
            if not role_allowed(user, 'admin', 'editor'):
                self.send_json({'success': False, 'message': 'Please sign in.'}, 401)
                return
            q = urllib.parse.parse_qs(parsed.query)
            kind = q.get('kind', [''])[0]
            folder = admin_folder(kind, q.get('folder', [''])[0])
            if not folder or not folder.is_dir():
                self.send_json({'success': False, 'message': 'Product not found.'}, 404)
                return
            p = folder / 'info.txt'
            self.send_json({
                'success': True,
                'message': 'Loaded.',
                'info': p.read_text(encoding='utf-8', errors='replace') if p.exists() else ''
            })
            return

        if path == '/admin/api/users':
            user = session_user(self)
            if not role_allowed(user, 'admin'):
                self.send_json({'success': False, 'message': 'Administrator permission required.'}, 403)
                return
            users = load_users()
            result = []
            for username, account in sorted(users.items(), key=lambda x: x[0].lower()):
                result.append({
                    'username': username,
                    'role': account.get('role', 'editor'),
                    'enabled': account.get('enabled', True),
                    'created': account.get('created', '')
                })
            self.send_json({'success': True, 'users': result})
            return
        if path == '/robots.txt':
            body = (
                'User-agent: *\n'
                'Allow: /\n'
                'Disallow: /admin\n'
                'Disallow: /catalog/\n'
                'Disallow: /metadata/\n'
                f'Sitemap: {SEO_BASE_URL}/sitemap.xml\n'
            )
            self.send_bytes(body.encode('utf-8'), 'text/plain; charset=utf-8')
            return
        if path == '/sitemap.xml':
            urls = [('/', None), ('/software', None), ('/apps', None), ('/status', None), ('/about', None)]
            for kind in ('software', 'android'):
                route = 'apps' if kind == 'android' else 'software'
                for row in build_catalog(kind):
                    urls.append((f'/{route}/{urllib.parse.quote(row.get("folder", ""), safe="")}', row.get('updated_iso', '')))
            entries = []
            for route, modified in urls:
                lastmod = f'<lastmod>{html_lib.escape(modified)}</lastmod>' if modified else ''
                entries.append(f'<url><loc>{html_lib.escape(SEO_BASE_URL + route)}</loc>{lastmod}</url>')
            xml = '<?xml version="1.0" encoding="UTF-8"?>' + '<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">' + ''.join(entries) + '</urlset>'
            self.send_bytes(xml.encode('utf-8'), 'application/xml; charset=utf-8')
            return
        # The single-page UI uses real, bookmarkable routes. Keep the
        # download paths (/software/<file> and /android/<file>) below.
        if path in ('/', '/index.html', '/home'):
            self.serve_share_page('home')
            return
        if path in ('/software', '/software/'):
            self.serve_share_page('software')
            return
        if path in ('/apps', '/apps/', '/app', '/app/'):
            self.serve_share_page('android')
            return
        if path in ('/plugins', '/plugins/'):
            self.serve_share_page('plugins')
            return
        if path in ('/status', '/status/'):
            self.serve_share_page('status')
            return
        if path in ('/about', '/about/'):
            self.serve_share_page('about')
            return
        if path.startswith('/share/software/') or path.startswith('/share/apps/'):
            share_kind = 'software' if path.startswith('/share/software/') else 'android'
            prefix = '/share/software/' if share_kind == 'software' else '/share/apps/'
            folder_name = urllib.parse.unquote(path[len(prefix):]).strip('/')
            catalog_kind = share_kind
            item = next((a for a in build_catalog(catalog_kind) if a['folder'].casefold() == folder_name.casefold()), None)
            if item:
                self.serve_share_page(catalog_kind, item, share_mode=True)
                return
            self.send_error(404, 'Share page item not found')
            return
        if path.startswith('/app/') or path.startswith('/apps/'):
            folder_name = urllib.parse.unquote(path.split('/', 2)[2]).strip('/')
            item = next((a for a in build_catalog('android') if a['folder'].lower() == folder_name.lower()), None)
            if item:
                self.serve_share_page('android', item)
                return
            self.send_error(404, 'App not found')
            return
        if path.startswith('/software/'):
            folder_name = urllib.parse.unquote(path[len('/software/'):]).strip('/')
            item = next((a for a in build_catalog('software') if a['folder'].casefold() == folder_name.casefold()), None)
            if item:
                self.serve_share_page('software', item)
                return
        if path.startswith('/software/item/'):
            folder_name = urllib.parse.unquote(path[len('/software/item/'):]).strip('/')
            item = next((a for a in build_catalog('software') if a['folder'].lower() == folder_name.lower()), None)
            if item:
                self.serve_share_page('software', item)
                return
            self.send_error(404, 'Software item not found')
            return
        if path == '/catalog/software':
            self.send_json(build_catalog('software'))
            return
        if path == '/catalog/android':
            self.send_json(build_catalog('android'))
            return
        if path == '/catalog/plugins':
            self.send_json(build_plugin_catalog())
            return
        if path.startswith('/metadata/'):
            requested = urllib.parse.unquote(path[len('/metadata/'):]).strip('/')
            for kind in ('software', 'android'):
                item = next((row for row in build_catalog(kind) if row.get('folder', '').casefold() == requested.casefold()), None)
                if item:
                    self.send_json({key: item.get(key) for key in ('name', 'version', 'sha256', 'size', 'updated', 'download', 'filename', 'platform', 'channel', 'status')})
                    return
            self.send_error(404, 'Metadata not found')
            return
        if path == '/health':
            self.send_json({'success': True, 'service': 'VimpulseHub Download Server', 'status': 'online', 'port': args.port})
            return
        if path == '/api-status':
            target_port = 8765
            probes = [('99.232.137.208', 'External'), ('10.0.0.30', 'LAN')]
            for target_host, source in probes:
                started = time.perf_counter()
                try:
                    with urllib.request.urlopen(f'http://{target_host}:{target_port}/health', timeout=3) as response:
                        reachable = 200 <= response.status < 500
                    if reachable:
                        self.send_json({'success': True, 'reachable': True, 'source': source, 'port': target_port, 'latency_ms': round((time.perf_counter() - started) * 1000)})
                        return
                except Exception:
                    continue
            self.send_json({'success': False, 'reachable': False, 'source': None, 'port': target_port, 'latency_ms': None})
            return
        if path.startswith('/screenshot/software/'):
            target = safe_inside(SOFTWARE_ROOT, path[len('/screenshot/software/'):])
            if target and target.is_file() and target.suffix.lower() in CUSTOM_ICON_EXTS and 'screenshots' in [p.lower() for p in target.parts]:
                self.serve_file(target)
                return
            self.send_error(404, 'Screenshot not found')
            return
        if path.startswith('/screenshot/android/'):
            target = safe_inside(ANDROID_ROOT, path[len('/screenshot/android/'):])
            if target and target.is_file() and target.suffix.lower() in CUSTOM_ICON_EXTS and 'screenshots' in [p.lower() for p in target.parts]:
                self.serve_file(target)
                return
            self.send_error(404, 'Screenshot not found')
            return
        if path.startswith('/custom-icon/software/'):
            target = safe_inside(SOFTWARE_ROOT, path[len('/custom-icon/software/'):])
            if target and target.is_file() and target.suffix.lower() in CUSTOM_ICON_EXTS and target.parent.name.lower() == 'icon':
                self.serve_file(target)
                return
            self.send_error(404, 'Custom icon not found')
            return
        if path.startswith('/custom-icon/android/'):
            target = safe_inside(ANDROID_ROOT, path[len('/custom-icon/android/'):])
            if target and target.is_file() and target.suffix.lower() in CUSTOM_ICON_EXTS and target.parent.name.lower() == 'icon':
                self.serve_file(target)
                return
            self.send_error(404, 'Custom icon not found')
            return
        if path.startswith('/asset-icon/software/'):
            target = safe_inside(SOFTWARE_ROOT, path[len('/asset-icon/software/'):])
            if target and target.is_file() and target.suffix.lower() == '.exe':
                data = windows_exe_icon_png(target)
                if data:
                    self.send_bytes(data, 'image/png')
                    return
            self.send_error(404, 'Icon not found')
            return
        if path.startswith('/asset-icon/android/'):
            target = safe_inside(ANDROID_ROOT, path[len('/asset-icon/android/'):])
            if target and target.is_file() and target.suffix.lower() == '.apk':
                data, ctype = android_apk_icon(target)
                if data:
                    self.send_bytes(data, ctype or 'image/png')
                    return
            self.send_error(404, 'Icon not found')
            return
        if path.startswith('/software/'):
            target = safe_inside(SOFTWARE_ROOT, path[len('/software/'):])
            if target and target.is_file(): record_download('software',target)
            self.serve_file(target, download=True)
            return
        if path.startswith('/android/'):
            target = safe_inside(ANDROID_ROOT, path[len('/android/'):])
            if target and target.is_file(): record_download('android',target)
            self.serve_file(target, download=True)
            return
        if path.startswith('/plugin/'):
            relative = path[len('/plugin/'):]
            parts = relative.split('/', 1)
            if len(parts) == 2:
                target = safe_inside(PLUGINS_ROOT, urllib.parse.unquote(parts[0]) + '/' + urllib.parse.unquote(parts[1]))
                if target and is_plugin_file(target):
                    self.serve_file(target, download=True)
                    return
            self.send_error(404, 'Plugin not found')
            return
        self.send_error(404, 'Not found')


server = ThreadingHTTPServer((args.bind_host, args.port), Handler)
print(f'VimpulseHub AppStore running at http://{args.public_host}:{args.port}/')
print(f'Windows software: {SOFTWARE_ROOT}')
print(f'Android apps: {ANDROID_ROOT}')
print(f'ADMIN URL: {SITE_URL}/admin')
try:
    server.serve_forever()
except KeyboardInterrupt:
    pass
finally:
    server.server_close()

:__VIMPULSE_HTML__
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>VimpulseHub AppStore</title>
<style>
:root{--navy:#03111f;--navy2:#061a2c;--panel:#0d2032;--panel2:#10283d;--line:#1e4666;--blue:#0789ff;--cyan:#37c9ff;--white:#f7fbff;--muted:#a7bbce;--ink:#0a1421;--paper:#f4f7fb;--green:#12c96d;--shadow:0 14px 42px rgba(0,0,0,.22)}
*{box-sizing:border-box}html{scroll-behavior:smooth}body{margin:0;font-family:Segoe UI,Inter,Arial,sans-serif;background:#101b24;color:var(--white)}button,input{font:inherit}a{text-decoration:none;color:inherit}.shell{min-height:100vh}
.topbar{position:sticky;top:0;z-index:50;height:72px;display:flex;align-items:center;justify-content:space-between;padding:0 5.2vw;background:rgba(2,15,28,.96);border-bottom:1px solid rgba(74,154,211,.2);backdrop-filter:blur(14px)}
.brand{display:flex;align-items:center;gap:13px;cursor:pointer}.vmark{width:34px;height:34px;position:relative;transform:skew(-12deg);background:linear-gradient(145deg,#6bd8ff 0 24%,#118eff 24% 62%,#0059c9 62%);clip-path:polygon(0 0,36% 0,50% 56%,79% 0,100% 0,60% 100%,36% 100%)}
.brandword{font-size:27px;font-weight:800;font-style:italic;letter-spacing:-1.1px}.brandword small{display:block;font-size:8px;letter-spacing:3.1px;font-style:normal;font-weight:600;color:#c8d9e8;margin-top:-2px}.nav{display:flex;gap:34px;font-size:14px}.nav a{color:#e5eef6;cursor:pointer}.nav a:hover{color:var(--cyan)}.page{display:none}.page.active{display:block}
.hero{min-height:535px;position:relative;overflow:hidden;padding:72px 5.2vw 56px;background:radial-gradient(circle at 82% 46%,rgba(0,128,255,.34),transparent 20%),linear-gradient(120deg,#04111e 0%,#031425 53%,#001d3c 100%)}
.wave,.wave:before,.wave:after{position:absolute;content:"";display:block;border-radius:50%;width:760px;height:150px;right:-70px;top:210px;border-top:2px solid rgba(31,163,255,.72);transform:rotate(-9deg);filter:drop-shadow(0 0 13px #0079ff)}.wave:before{width:670px;height:110px;right:34px;top:-25px;opacity:.65}.wave:after{width:580px;height:90px;right:74px;top:22px;opacity:.4}
.hero-inner{position:relative;z-index:2;max-width:660px}.hero h1{font-size:58px;line-height:1.03;margin:0 0 20px;letter-spacing:-2px}.hero p{font-size:20px;line-height:1.55;color:#e0ebf5;max-width:620px}.actions{display:flex;gap:15px;margin-top:30px;flex-wrap:wrap}.btn{border:1px solid #148fff;border-radius:6px;padding:14px 22px;background:#0789ff;color:white;font-weight:700;cursor:pointer}.btn.secondary{background:rgba(2,14,25,.5);border-color:#4fb8ff}.btn:hover{filter:brightness(1.08)}.tagline{position:absolute;right:7vw;top:300px;z-index:2;text-align:right;color:#57d0ff;font-size:19px;letter-spacing:3px;font-weight:800}
.features{background:#041321;border-top:1px solid #17354d;border-bottom:1px solid #17354d;display:grid;grid-template-columns:repeat(4,1fr);padding:34px 5.2vw}.feature{text-align:center;padding:8px 24px;border-right:1px solid #17354d}.feature:last-child{border-right:0}.feature .ico{font-size:34px;color:#0d90ff;margin-bottom:12px}.feature strong{display:block;font-size:17px}.feature span{display:block;margin-top:7px;color:#b6c7d5;font-size:14px}
.catalog-page{background:var(--paper);color:var(--ink);min-height:calc(100vh - 72px);padding:38px 5.2vw 80px}.soft-head{display:flex;gap:30px;align-items:flex-start;justify-content:space-between;margin-bottom:28px}.soft-head h2{font-size:31px;margin:0 0 6px}.soft-head p{margin:0;color:#5a6b7c}.search{display:flex;align-items:center;background:white;border:1px solid #ccd7e2;border-radius:7px;min-width:270px;overflow:hidden}.search input{border:0;outline:0;padding:11px 13px;width:100%;background:transparent}.search b{padding:10px 14px;border-left:1px solid #d6dfe8}.grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:22px}.card{background:white;border:1px solid #dce4eb;border-radius:8px;padding:22px;box-shadow:0 3px 11px rgba(40,60,80,.06);min-height:190px}.card-top{display:flex;gap:16px;align-items:flex-start}.appicon{flex:0 0 54px;width:54px;height:54px;border-radius:12px;display:flex;align-items:center;justify-content:center;font-size:27px;color:white;background:linear-gradient(145deg,#7848ff,#b95cff);overflow:hidden}.appicon img{width:100%;height:100%;object-fit:contain;background:transparent}.card:nth-child(3n+2) .appicon{background:linear-gradient(145deg,#05b95d,#24d07b)}.card:nth-child(3n+3) .appicon{background:linear-gradient(145deg,#1686ff,#006ce1)}.card:nth-child(4n) .appicon{background:linear-gradient(145deg,#ff9c13,#ff6d00)}.card h3{margin:2px 0 5px;font-size:18px}.card p{margin:0;color:#66788a;font-size:14px;line-height:1.4}.version{margin-top:10px;font-size:14px;font-weight:800}.card-actions{display:flex;align-items:center;gap:13px;margin-top:19px;flex-wrap:wrap}.dl{background:#087ff1;color:white;border:0;border-radius:5px;padding:10px 14px;font-weight:700;cursor:pointer}.linkbtn{border:0;background:transparent;color:#0576e7;font-weight:600;cursor:pointer}.empty{text-align:center;padding:52px 20px;color:#607284}
.viewbtn{background:#087ff1;color:white;border:0;border-radius:5px;padding:10px 18px;font-weight:700;cursor:pointer}.viewbtn:hover{filter:brightness(1.08)}.modal-backdrop{display:none;position:fixed;inset:0;z-index:1000;background:rgba(0,8,18,.76);backdrop-filter:blur(7px);padding:24px;overflow:auto}.modal-backdrop.open{display:flex;align-items:center;justify-content:center}.modal{width:min(760px,100%);max-height:calc(100vh - 48px);overflow:auto;background:#f8fbff;color:#0a1421;border:1px solid #cddbe8;border-radius:12px;box-shadow:0 24px 70px rgba(0,0,0,.45)}.modal-head{display:flex;align-items:flex-start;justify-content:space-between;gap:20px;padding:24px 26px 18px;border-bottom:1px solid #dce6ee}.modal-title{display:flex;gap:16px;align-items:center}.modal-title .appicon{flex-basis:58px;height:58px}.modal-title h2{margin:0 0 5px;font-size:25px}.modal-title p{margin:0;color:#66788a}.modal-close{border:0;background:transparent;font-size:30px;line-height:1;cursor:pointer;color:#51687b;padding:0 4px}.modal-body{padding:24px 26px}.details{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:10px 18px;margin-bottom:22px}.detail{background:#edf4fa;border:1px solid #d9e5ee;border-radius:7px;padding:11px 13px}.detail small{display:block;color:#6a7e8f;margin-bottom:3px}.detail strong{word-break:break-word}.info-box{white-space:pre-wrap;overflow-wrap:anywhere;background:#0b1d2d;color:#dcecf8;border-radius:8px;padding:18px;line-height:1.6;min-height:130px;border:1px solid #1e4563}.modal-actions{display:flex;align-items:center;justify-content:space-between;gap:15px;margin-top:22px;flex-wrap:wrap}.download-main{background:#087ff1;color:white;border:0;border-radius:6px;padding:12px 20px;font-weight:800;cursor:pointer}.download-main:hover{filter:brightness(1.08)}.backbtn{border:1px solid #b8c9d8;background:white;color:#27445c;border-radius:6px;padding:11px 17px;font-weight:700;cursor:pointer}.dark-page{background:linear-gradient(130deg,#03111e,#031827);min-height:calc(100vh - 72px);padding:42px 5.2vw 80px}.panel{border:1px solid #22435b;background:linear-gradient(145deg,#0b1c2c,#0b2133);border-radius:8px;padding:22px;box-shadow:var(--shadow)}.status-title h2{font-size:32px;margin:0 0 8px}.status-title p{margin:0;color:#bac8d5}.okbox{display:flex;gap:15px;align-items:center;margin-top:26px}.dot{width:23px;height:23px;border-radius:50%;background:var(--green);box-shadow:0 0 14px rgba(18,201,109,.45)}.okbox strong{font-size:19px}.okbox small{display:block;color:#b9cad8;margin-top:4px}.status-table{margin-top:17px;padding:0}.status-row{display:grid;grid-template-columns:1.6fr .8fr 1fr;gap:15px;padding:17px 20px;border-bottom:1px solid #1e3b50;align-items:center}.status-row:last-child{border-bottom:0}.online{color:#dce8f2}.online:before{content:"";display:inline-block;width:9px;height:9px;background:var(--green);border-radius:50%;margin-right:9px}.response{text-align:right;color:#a9bed0;font-size:13px}.about{max-width:870px}.footer{padding:22px 5.2vw;color:#7f98aa;background:#020d16;border-top:1px solid #16364d;font-size:13px}.mobile-menu{display:none}
@media(max-width:980px){.grid{grid-template-columns:repeat(2,minmax(0,1fr))}.tagline{display:none}.hero h1{font-size:48px}}@media(max-width:720px){.topbar{height:64px;padding:0 18px}.brandword{font-size:22px}.brandword small{font-size:6.5px;letter-spacing:2.2px}.nav{display:none;position:absolute;right:15px;top:58px;background:#061727;border:1px solid #21415a;border-radius:7px;padding:10px;width:170px}.nav.open{display:flex;flex-direction:column;gap:0}.nav a{padding:12px}.mobile-menu{display:block;border:0;background:transparent;color:white;font-size:26px}.hero{padding:58px 22px 42px;min-height:510px}.hero h1{font-size:40px}.hero p{font-size:17px}.features{grid-template-columns:1fr 1fr;padding:18px}.feature{border-right:0;border-bottom:1px solid #17354d;padding:20px 12px}.soft-head{flex-direction:column}.search{width:100%;min-width:0}.catalog-page,.dark-page{padding-left:20px;padding-right:20px}.grid{grid-template-columns:1fr}.status-row{grid-template-columns:1fr auto}.response{grid-column:1/-1;text-align:left}}
.filterbar{display:flex;gap:10px;flex-wrap:wrap;margin:-10px 0 24px}.filterchip{border:1px solid #c8d7e4;background:#fff;color:#29445b;border-radius:999px;padding:8px 13px;font-weight:700;cursor:pointer}.filterchip.active{background:#087ff1;color:#fff;border-color:#087ff1}.section-title{font-size:17px;margin:22px 0 10px}.shot-grid{display:grid;grid-template-columns:repeat(3,1fr);gap:10px}.shot-grid img{width:100%;aspect-ratio:16/10;object-fit:cover;border:1px solid #d6e2eb;border-radius:8px;cursor:pointer;background:#eaf1f7}.req-grid{display:grid;grid-template-columns:repeat(2,minmax(0,1fr));gap:9px}.req-card{background:#edf4fa;border:1px solid #d9e5ee;border-radius:7px;padding:10px 12px}.req-card small{display:block;color:#6a7e8f}.req-card strong{display:block;margin-top:3px}.changebox{white-space:pre-wrap;overflow-wrap:anywhere;background:#0b1d2d;color:#dcecf8;border-radius:8px;padding:16px;line-height:1.55;border:1px solid #1e4563}.release-row{display:grid;grid-template-columns:1fr auto auto;gap:12px;align-items:center;padding:10px 0;border-bottom:1px solid #dce6ee}.release-row:last-child{border-bottom:0}.release-row button{border:0;background:#087ff1;color:#fff;border-radius:5px;padding:8px 11px;font-weight:700;cursor:pointer}.catbadge{display:inline-block;margin-top:7px;padding:4px 8px;border-radius:999px;background:#e7f2ff;color:#0871d4;font-size:12px;font-weight:800}@media(max-width:720px){.shot-grid{grid-template-columns:1fr 1fr}.req-grid{grid-template-columns:1fr}.release-row{grid-template-columns:1fr auto}.release-row span:nth-child(2){display:none}}
.home-sections{padding:36px 5.2vw;display:grid;grid-template-columns:1fr 1fr;gap:28px}.home-sections h2{font-size:24px;color:#e4f2ff}.home-sections .card h3,.grid .card h3{color:#17324b}.home-sections .card .version,.grid .card .version{color:#244c70}.product-link{color:#17324b;text-decoration:none}.product-link:hover{text-decoration:underline}@media(max-width:720px){.home-sections{grid-template-columns:1fr;padding:24px 20px}}
</style>
</head>
<body>
<div class="shell">
<header class="topbar">
  <div class="brand" onclick="showPage('home')"><div class="vmark"></div><div class="brandword">Vimpulse<small>APPSTORE & UPDATE SERVER</small></div></div>
  <button class="mobile-menu" onclick="document.querySelector('.nav').classList.toggle('open')">☰</button>
  <nav class="nav">
    <a onclick="showPage('home')">Home</a>
    <a href="https://vimpulseinc.ca">VimpulseInc</a>
     <a onclick="showPage('software')">Software</a>
     <a onclick="showPage('app')">App</a>
     <a onclick="showPage('plugins')">Plugins</a>
     <a onclick="showPage('status')">Status</a>
    <a href="https://dealbuddy.vimpulsehub.ca">DealBuddy</a>
    <a onclick="showPage('about')">About</a>
  </nav>
</header>

<section id="home" class="page active">
  <div class="hero"><div class="wave"></div><div class="hero-inner">
    <h1>VimpulseHub<br>AppStore</h1>
    <p>Download the latest Vimpulse Windows software and Android apps from one server while keeping both libraries separate.</p>
    <div class="actions"> <button class="btn secondary" onclick="window.location.href='https://vimpulseinc.gumroad.com'">Licensing</button><button class="btn" onclick="showPage('software')">↓ &nbsp;Browse Software</button><button class="btn secondary" onclick="showPage('app')">Browse Android Apps</button></div>
  </div><div class="tagline">SOFTWARE + APPS.<br>ONE HUB.</div></div>
  <div class="features"><div class="feature"><div class="ico">▣</div><strong>Windows Software</strong><span></span></div><div class="feature"><div class="ico">⬢</div><strong>Android Apps</strong><span></span></div><div class="feature"><div class="ico">♢</div><strong>Separate Libraries</strong><span>No folder mixing</span></div><div class="feature"><div class="ico">⚙</div><strong>Update API</strong><span></span></div></div>
  <div class="home-sections"><div><h2>Featured Products</h2><div id="featuredGrid" class="grid"></div></div><div><h2>New &amp; Updated</h2><div id="recentGrid" class="grid"></div></div></div>
</section>

<section id="software" class="page catalog-page"><div class="soft-head"><div><h2>All Vimpulse Software</h2><p> <b></b>.</p></div><div class="search"><input id="softwareSearch" placeholder="Search software..." oninput="renderCatalog('software')"><b>⌕</b></div></div><div id="softwareFilters" class="filterbar"></div><div id="softwareGrid" class="grid"></div></section>

<section id="app" class="page catalog-page"><div class="soft-head"><div><h2>Vimpulse Android Apps</h2></p></div><div class="search"><input id="androidSearch" placeholder="Search Android apps..." oninput="renderCatalog('android')"><b>⌕</b></div></div><div id="androidFilters" class="filterbar"></div><div id="androidGrid" class="grid"></div></section>

<section id="plugins" class="page catalog-page"><div class="soft-head"><div><h2>Vimpulse Plugins</h2><p>Plugin folders can contain multiple downloadable plugins.</p></div><div class="search"><input id="pluginSearch" placeholder="Search plugins..." oninput="renderPluginCatalog()"><b>⌕</b></div></div><div id="pluginGrid" class="grid"></div></section>

<section id="status" class="page dark-page"><div class="status-title"><h2>Server Status</h2><p>Current status for VimpulseHub.</p></div><div class="panel okbox"><div class="dot"></div><div><strong>Download Server Online</strong><small>This page is being served from port 8766.</small></div></div><div class="panel status-table"><div class="status-row"><strong>Update API (Port <span id="apiPort"></span>)</strong><span id="apiState">Checking…</span><span class="response" id="apiTime">Waiting for response</span></div><div class="status-row"><strong>AppStore / Download Server</strong><span class="online">Online</span><span class="response">Port 8766</span></div><div class="status-row"><strong>Windows Software</strong><span class="online">Online</span><span class="response" id="softwareCount">Loading</span></div><div class="status-row"><strong>Android Apps</strong><span class="online">Online</span><span class="response" id="androidCount">Loading</span></div></div></section>

<section id="about" class="page dark-page"><div class="about"><div class="status-title"><h2>About VimpulseHub</h2><p>One front end, two separate download libraries.</p></div><div class="panel" style="margin-top:25px;line-height:1.7;color:#c9d8e3"><p>A growing library of applications designed to make everyday tasks simpler, faster, and more efficient. Our apps are built with a focus on practical solutions, clean design, and reliability. Whether you're looking for productivity tools, utilities, calculators, or community-focused software, our goal is to create software that people actually enjoy using. Every application is developed with performance, ease of use, and continuous improvement in mind. As we grow, you'll find new apps, feature updates, and innovative projects added regularly.</p><p>What You'll Find Productivity tools, Utility applications, Smart calculators, Community-focused apps.</p>
<p>Why Choose Vimpulse Applications/Apps? Modern and intuitive interfaces, Fast and lightweight performance, Regular updates and new features, Some Cross-platform projects (Android, IOS, EXE, MacOS, Linux), Built by people who use the software they create We're committed to building software that solves real problems while remaining accessible to everyone. Whether you're trying one of our newest beta releases or using one of our established tools, we appreciate your support and feedback as we continue to expand the Vimpulse ecosystem. Thank you for being part of the Vimpulse INC community.</p></div></div></section>

<div id="viewModal" class="modal-backdrop" onclick="if(event.target===this)closeView()">
  <div class="modal" role="dialog" aria-modal="true" aria-labelledby="viewName">
    <div class="modal-head">
      <div class="modal-title"><div id="viewIcon" class="appicon">◆</div><div><h2 id="viewName">Program</h2><p id="viewSummary"></p></div></div>
      <button class="modal-close" onclick="closeView()" aria-label="Close">×</button>
    </div>
    <div class="modal-body">
      <div class="details">
        <div class="detail"><small>Version</small><strong id="viewVersion"></strong></div>
        <div class="detail"><small>Cost</small><strong id="viewCost"></strong></div>
        <div class="detail"><small>Platform</small><strong id="viewPlatform"></strong></div>
        <div class="detail"><small>File</small><strong id="viewFilename"></strong></div>
        <div class="detail"><small>Size / Updated</small><strong id="viewFileMeta"></strong></div>
      </div>
      <div id="viewInfo" class="info-box"></div>
      <div id="screenshotsSection" style="display:none"><h3 class="section-title">Screenshots</h3><div id="viewScreenshots" class="shot-grid"></div></div>
      <div id="requirementsSection" style="display:none"><h3 class="section-title">System Requirements</h3><div id="viewRequirements" class="req-grid"></div></div>
      <div id="changelogSection" style="display:none"><h3 class="section-title">What's New</h3><div id="viewChangelog" class="changebox"></div></div>
      <div id="releasesSection" style="display:none"><h3 class="section-title">Previous Releases</h3><div id="viewReleases"></div></div><div class="securitybox"><div class="verified">✓ SHA-256 Verified Download</div><small>SHA-256 checksum</small><div class="hashrow"><code id="viewHash"></code><button class="copyhash" onclick="navigator.clipboard.writeText(document.getElementById('viewHash').textContent)">Copy</button></div><small style="margin-top:9px">Downloads: <strong id="viewDownloads">0</strong></small></div>
      <div class="modal-actions">
        <button class="backbtn" onclick="closeView()">← Back</button>
        <div style="display:flex;gap:10px;flex-wrap:wrap">
          <button id="viewPurchase" class="download-main" style="display:none;background:#ff90e8;color:#111">Buy on Gumroad</button>
          <button id="viewDownload" class="download-main">↓ Download</button>
        </div>
      </div>
    </div>
  </div>
</div>

<footer class="footer">Vimpulse Software Update Server · <a href="https://discord.gg/WGn48wHrbG" target="_blank" rel="noopener noreferrer" style="color:#37c9ff;font-weight:700">SupportDiscordServer</a></footer>
</div>
<script>
let softwareApps=[];let androidApps=[];let pluginGroups=[];let selectedCategory={software:'All',android:'All'};
const pageRoutes={home:'/',software:'/software',app:'/apps',plugins:'/plugins',status:'/status',about:'/about'};
function pageFromPath(){const path=window.location.pathname.replace(/\/+$/,'')||'/';if(path==='/')return 'home';if(path==='/plugins'||path.startsWith('/plugin/'))return 'plugins';if(path==='/apps'||path==='/app'||path.startsWith('/apps/')||path.startsWith('/app/'))return 'app';if(path==='/software'||path.startsWith('/software/'))return 'software';if(path==='/status')return 'status';if(path==='/about')return 'about';return 'home';}
function isProductPath(){const path=window.location.pathname.replace(/\/+$/,'');return path.startsWith('/software/')||path.startsWith('/apps/')||path.startsWith('/app/');}
function showPage(id,replace=false){document.querySelectorAll('.page').forEach(x=>x.classList.remove('active'));document.getElementById(id)?.classList.add('active');document.querySelector('.nav')?.classList.remove('open');if(pageRoutes[id]){const url=pageRoutes[id];if(replace&&!isProductPath())history.replaceState({page:id},'',url);else if(!replace&&window.location.pathname!==url)history.pushState({page:id},'',url);}window.scrollTo({top:0,behavior:'smooth'});}
window.addEventListener('popstate',()=>showPage(pageFromPath(),true));
function escapeHtml(s){return String(s??'').replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));}
function sharePath(kind,a){return a.share_url||(kind==='android'?'/apps/':'/software/')+encodeURIComponent(a.folder||a.name||'item');}
function platformSharePath(kind,a){return '/share/'+(kind==='android'?'apps/':'software/')+encodeURIComponent(a.folder||a.name||'item');}
function iconMarkup(a){const fallback=escapeHtml(a.icon||'◆');return a.icon_url?`<img src="${a.icon_url}" alt="" onerror="this.parentElement.textContent='${fallback}'">`:fallback;}
function renderFilters(kind){
    const list=kind==='software'?softwareApps:androidApps;
    const id=kind==='software'?'softwareFilters':'androidFilters';
    const box=document.getElementById(id);if(!box)return;
    const cats=['All',...Array.from(new Set(list.flatMap(a=>(a.categories&&a.categories.length)?a.categories:[a.category||'Other']))).sort((a,b)=>a.localeCompare(b))];
    if(!cats.includes(selectedCategory[kind]))selectedCategory[kind]='All';
    box.innerHTML=cats.map(c=>`<button class="filterchip ${selectedCategory[kind]===c?'active':''}" onclick="selectedCategory['${kind}']='${escapeHtml(c)}';renderCatalog('${kind}')">${escapeHtml(c)}</button>`).join('');
}
function renderCatalog(kind){
    const list=kind==='software'?softwareApps:androidApps;
    const q=(document.getElementById(kind==='software'?'softwareSearch':'androidSearch')?.value||'').toLowerCase().trim();
    renderFilters(kind);
    const shown=list.filter(a=>{
        const itemCategories=(a.categories&&a.categories.length)?a.categories:[a.category||'Other'];
        const categoryOK=selectedCategory[kind]==='All'||itemCategories.includes(selectedCategory[kind]);
        const hay=(a.name+' '+a.description+' '+a.folder+' '+(a.cost||'')+' '+itemCategories.join(' ')+' '+((a.tags||[]).join(' '))).toLowerCase();
        return categoryOK&&hay.includes(q);
    });
    const grid=document.getElementById(kind==='software'?'softwareGrid':'androidGrid');
    if(!shown.length){grid.innerHTML='<div class="empty" style="grid-column:1/-1">No matching items found.</div>';return;}
    grid.innerHTML=shown.map(a=>{
        const idx=list.indexOf(a);
        const url=sharePath(kind,a);
        return `<div class="card"><div class="card-top"><div class="appicon">${iconMarkup(a)}</div><div><h3><a class="product-link" href="${escapeHtml(url)}">${escapeHtml(a.name)}</a></h3><p>${escapeHtml(a.description)}</p>${((a.categories&&a.categories.length)?a.categories:[a.category||'Other']).map(c=>`<span class="catbadge">${escapeHtml(c)}</span>`).join(' ')}<div class="version">Version ${escapeHtml(a.version||'Latest')}</div><div style="margin-top:5px;font-size:14px;font-weight:800;color:#0a6fdc">Cost: ${escapeHtml(a.cost||'Free')}</div></div></div><div class="card-actions"><button class="viewbtn" onclick="openView('${kind}',${idx})">View</button><a class="linkbtn" href="${escapeHtml(platformSharePath(kind,a))}">Open share page</a><span style="color:#607284;font-size:13px">${escapeHtml(a.size)} · ${escapeHtml(a.platform)}</span></div></div>`;
    }).join('');
}
function renderHomeSections(){
    const all=[...softwareApps,...androidApps];
    const featured=all.filter(a=>a.featured).slice(0,6);
    const recent=[...all].sort((a,b)=>String(b.updated||'').localeCompare(String(a.updated||''))).slice(0,6);
    const card=a=>`<div class="card"><div class="card-top"><div class="appicon">${iconMarkup(a)}</div><div><h3><a class="product-link" href="${escapeHtml(sharePath(a.platform==='Android'?'android':'software',a))}">${escapeHtml(a.name)}</a></h3><p>${escapeHtml(a.description)}</p><div class="version">${escapeHtml(a.version||'Latest')} · ${escapeHtml(a.platform||'')}</div></div></div></div>`;
    document.getElementById('featuredGrid').innerHTML=featured.length?featured.map(card).join(''):'<div class="empty">No featured products yet.</div>';
    document.getElementById('recentGrid').innerHTML=recent.length?recent.map(card).join(''):'<div class="empty">No releases yet.</div>';
}
function renderPluginCatalog(){
 const q=(document.getElementById('pluginSearch')?.value||'').toLowerCase().trim();
 const grid=document.getElementById('pluginGrid'); if(!grid)return;
 const shown=pluginGroups.filter(g=>(g.name+' '+g.folder+' '+g.description+' '+g.plugins.map(p=>p.name).join(' ')).toLowerCase().includes(q));
 grid.innerHTML=shown.length?shown.map(g=>`<div class="card"><div class="card-top"><div class="appicon">⚙</div><div><h3>${escapeHtml(g.name)}</h3><p>${escapeHtml(g.description)}</p><div class="version">${g.plugins.length} plugin(s)</div></div></div><div class="plugin-list">${g.plugins.map(p=>`<div style="display:flex;justify-content:space-between;gap:12px;align-items:center;padding:9px 0;border-top:1px solid #d9e5ee"><span>${escapeHtml(p.name)} <small style="color:#607284">${escapeHtml(p.size)}</small></span><a class="linkbtn" href="${escapeHtml(p.download)}">Download</a></div>`).join('')}</div></div>`).join(''):'<div class="empty" style="grid-column:1/-1">No plugins found.</div>';
}
function openView(kind,index){
    const list=kind==='software'?softwareApps:androidApps;
    const a=list[index];
    if(!a)return;
    const shareUrl=sharePath(kind,a);
    if(window.location.pathname!==shareUrl)history.pushState({product:true},'',shareUrl);

    document.getElementById('viewIcon').innerHTML=iconMarkup(a);
    document.getElementById('viewName').textContent=a.name||'Program';
    document.getElementById('viewSummary').textContent=a.description||'';
    document.getElementById('viewVersion').textContent=a.version||'Latest';
    document.getElementById('viewCost').textContent=a.cost||'Free';
    document.getElementById('viewPlatform').textContent=a.platform||'';
    document.getElementById('viewFilename').textContent=a.filename||'';
    document.getElementById('viewFileMeta').textContent=(a.size||'')+' · '+(a.updated||'');
    document.getElementById('viewHash').textContent=a.sha256||'Unavailable';
    document.getElementById('viewDownloads').textContent=String(a.downloads||0);

    const aboutBox=document.getElementById('viewInfo');
    if(a.about && a.about.trim()){
        aboutBox.textContent=a.about.trim();
        aboutBox.style.display='block';
    }else{
        aboutBox.textContent='';
        aboutBox.style.display='none';
    }

    const shots=a.screenshots||[];
    const shotsSec=document.getElementById('screenshotsSection');
    document.getElementById('viewScreenshots').innerHTML=shots.map(u=>`<a href="${u}" target="_blank" rel="noopener"><img src="${u}" alt="Screenshot"></a>`).join('');
    shotsSec.style.display=shots.length?'block':'none';

    const reqs=a.requirements||[];
    const reqSec=document.getElementById('requirementsSection');
    document.getElementById('viewRequirements').innerHTML=reqs.map(r=>`<div class="req-card"><small>${escapeHtml(r.label)}</small><strong>${escapeHtml(r.value)}</strong></div>`).join('');
    reqSec.style.display=reqs.length?'block':'none';

    const change=String(a.changelog||'').trim();
    document.getElementById('viewChangelog').textContent=change;
    document.getElementById('changelogSection').style.display=change?'block':'none';

    const releases=a.previous_releases||[];
    document.getElementById('viewReleases').innerHTML=releases.map(r=>`<div class="release-row"><div><strong>Version ${escapeHtml(r.version||'Previous')}</strong><div style="font-size:12px;color:#66788a">${escapeHtml(r.filename)}</div></div><span>${escapeHtml(r.size)} · ${escapeHtml(r.updated)}</span><button onclick="location.href='${r.download}'">Download</button></div>`).join('');
    document.getElementById('releasesSection').style.display=releases.length?'block':'none';

    const downloadButton=document.getElementById('viewDownload');
    const purchaseButton=document.getElementById('viewPurchase');

    downloadButton.onclick=()=>{location.href=a.download;};

    const cost=String(a.cost||'Free').trim().toLowerCase();
    const purchaseUrl=String(a.purchase_url||'').trim();
    const isFree=(cost==='free'||cost==='$0'||cost==='$0.00'||cost==='0'||cost==='0.00');

    if(!isFree && purchaseUrl){
        purchaseButton.style.display='inline-block';
        purchaseButton.onclick=()=>{window.open(purchaseUrl,'_blank','noopener,noreferrer');};
        downloadButton.style.display='none';
    }else{
        purchaseButton.style.display='none';
        purchaseButton.onclick=null;
        downloadButton.style.display='inline-block';
    }

    document.getElementById('viewModal').classList.add('open');
    document.body.style.overflow='hidden';
}
function closeView(){document.getElementById('viewModal').classList.remove('open');document.body.style.overflow='';}
document.addEventListener('keydown',e=>{if(e.key==='Escape')closeView();});
async function loadCatalogs(){try{softwareApps=await (await fetch('/catalog/software',{cache:'default'})).json();}catch(e){softwareApps=[];}try{androidApps=await (await fetch('/catalog/android',{cache:'default'})).json();}catch(e){androidApps=[];}try{pluginGroups=await (await fetch('/catalog/plugins',{cache:'default'})).json();}catch(e){pluginGroups=[];}document.getElementById('softwareCount').textContent=softwareApps.length+' available';document.getElementById('androidCount').textContent=androidApps.length+' available';renderCatalog('software');renderCatalog('android');renderPluginCatalog();renderHomeSections();const path=window.location.pathname.replace(/\/+$/,'');const kind=path.startsWith('/apps/')||path.startsWith('/app/')?'android':path.startsWith('/software/')?'software':'';if(kind){const folder=decodeURIComponent(path.split('/').pop());const list=kind==='android'?androidApps:softwareApps;const item=list.find(a=>String(a.folder||'').toLowerCase()===folder.toLowerCase());if(item)openView(kind,list.indexOf(item));}}
async function checkApi(){const port='8765';document.getElementById('apiPort').textContent=port;const state=document.getElementById('apiState');const time=document.getElementById('apiTime');try{const result=await (await fetch('/api-status',{cache:'no-store'})).json();if(result.reachable){state.className='online';state.textContent=result.source==='LAN'?'Online (LAN)':'Online';time.textContent='Response: '+result.latency_ms+' ms';}else{state.style.color='#ffb54a';state.textContent='Unavailable';time.textContent='Update API could not be reached';}}catch(e){state.style.color='#ffb54a';state.textContent='Unavailable';time.textContent='Update API could not be reached';}}
showPage(pageFromPath(),true);loadCatalogs();checkApi();
</script>
</body>
</html>