Delete app.py

app.py

@@ -1,2120 +0,0 @@
-#!/usr/bin/env python3
-# -*- coding: utf-8 -*-
-"""
-=============================================================================
- OPENCODE HOSTING PL.ATFORM v2 — один файл (app.py)
-=============================================================================
- Платформа хостинга opencode-чатов для клиентов на Hugging Face Space.
-
- НОВОЕ В v2:
-  * Нативный быстрый клиентский UI (/c/<env_id>): PWA-манифест, 100dvh,
-    инкрементальный рендер сообщений (poll с курсором, без перерисовки),
-    оптимистичная отправка, вибрация, lightbox для медиа, тёмная тема.
-  * МЕДИА: клиенты шлют ЛЮБЫЕ фото И видео (mp4/webm/mov/mkv, до 60 МБ);
-    всё сохраняется в HF-датасет; владелец скачивает через галерею
-    /admhosto/media/<env_id> (по файлу или всё zip-ом).
-  * WHATSAPP WEB КОННЕКТОР (Baileys, node-мост встроен в этот файл):
-    - QR-сканирование на странице среды;
-    - с ТЕЛЕФОНА кнопка соединения не даёт сканировать: показывает
-      требование открыть агента с компьютера и авторизоваться там;
-    - соединение одноразовое: creds сохраняются (локально + в датасете),
-      после рестарта Space переподключается само, повторно сканировать НЕ надо;
-    - разрыв соединения кнопкой (logout, creds удаляются везде);
-    - агент управляет WA по запросу: команды /wa ... в чате + авто-ответчик
-      (входящие WA → opencode-агент → ответ в WA).
-  * Хранение как в v1/примере: envs_data/<env>.json, chat_media/<env>/...,
-    снапшот oc_home+wa_creds → opencode_state.tar.gz в HF-датасете.
-
- ПЕРЕМЕННЫЕ ОКРУЖЕНИЯ (Space secrets):
-   REPO_ID, HF_TOKEN, HF_TOKEN_READ, ADMIN_PASSWORD,
-   OPENCODE_EFFORT (default "low"), DEFAULT_MODEL, DEFAULT_VISION_MODEL,
-   PORT/OPENCODE_PORT (7860), WA_ENABLED ("0" чтобы выключить WhatsApp)
-
- ТРЕБОВАНИЯ (requirements.txt):
-   flask
-   huggingface_hub
-   pillow
-   requests
-   qrcode
-   (node + npm-пакет @whiskeysockets/baileys — ставятся в Dockerfile)
-
- ПРИМЕР Dockerfile:
-   FROM python:3.11-slim
-   RUN apt-get update && apt-get install -y --no-install-recommends curl git nodejs npm \
-       && rm -rf /var/lib/apt/lists/*
-   RUN curl -fsSL https://opencode.ai/install | bash
-   WORKDIR /app
-   COPY requirements.txt .
-   RUN pip install --no-cache-dir -r requirements.txt
-   RUN npm install --no-audit --no-fund @whiskeysockets/baileys
-   COPY app.py .
-   EXPOSE 7860
-   CMD ["python", "app.py"]
-=============================================================================
-"""
-
-import os
-import io
-import re
-import sys
-import json
-import time
-import base64
-import atexit
-import shutil
-import signal
-import string
-import random
-import tarfile
-import tempfile
-import zipfile
-import subprocess
-import threading
-from uuid import uuid4
-from datetime import datetime, timedelta
-
-import requests
-from PIL import Image, ImageOps
-from flask import (Flask, request, redirect, url_for, flash, jsonify,
-                   session, send_from_directory, send_file, Response)
-from huggingface_hub import HfApi, hf_hub_download
-from huggingface_hub.utils import RepositoryNotFoundError, HfHubHTTPError
-
-try:
-    import qrcode as _qrcode
-except Exception:
-    _qrcode = None
-
-try:
-    from dotenv import load_dotenv
-    load_dotenv()
-except Exception:
-    pass
-
-# ---------------------------------------------------------------------------
-# Flask
-# ---------------------------------------------------------------------------
-app = Flask(__name__)
-app.secret_key = os.environ.get("SECRET_KEY", "opencode_hosting_platform_secret_key_123")
-app.config.update(
-    SESSION_COOKIE_SAMESITE='None',
-    SESSION_COOKIE_SECURE=True,
-    PERMANENT_SESSION_LIFETIME=timedelta(days=30),
-    TEMPLATES_AUTO_RELOAD=False,
-    JSON_SORT_KEYS=False,
-    MAX_CONTENT_LENGTH=60 * 1024 * 1024,  # видео до 60 МБ
-)
-app.jinja_env.auto_reload = False
-app.jinja_env.cache_size = 200
-
-_TEMPLATE_CACHE = {}
-
-
-def render_cached(template_string, **context):
-    tpl = _TEMPLATE_CACHE.get(id(template_string))
-    if tpl is None:
-        tpl = app.jinja_env.from_string(template_string)
-        _TEMPLATE_CACHE[id(template_string)] = tpl
-    app.update_template_context(context)
-    return tpl.render(context)
-
-
-def get_ts():
-    return (datetime.utcnow() + timedelta(hours=3)).strftime('%Y-%m-%d %H:%M:%S')
-
-
-MOBILE_UA_RE = re.compile(r'iPhone|iPod|Android|Mobile|Silk|Opera Mini|IEMobile|Windows Phone', re.I)
-TABLET_UA_RE = re.compile(r'iPad|Tablet|SM-T|Tab|Kindle', re.I)
-DESKTOP_UA_RE = re.compile(r'Windows NT|Macintosh|X11|Linux x86', re.I)
-
-
-def is_mobile_request():
-    ua = request.headers.get('User-Agent', '')
-    if DESKTOP_UA_RE.search(ua) and not re.search(r'iPhone|iPod|Android.*Mobile', ua):
-        return False
-    return bool(MOBILE_UA_RE.search(ua)) and not TABLET_UA_RE.search(ua)
-
-
-# ---------------------------------------------------------------------------
-# HF DATASET STORAGE (схема как в примере app (4).txt)
-# ---------------------------------------------------------------------------
-REPO_ID = os.getenv("REPO_ID", "Kgshop/openag")
-HF_TOKEN_WRITE = os.getenv("HF_TOKEN")
-HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
-
-DATA_DIR = 'envs_data'
-MEDIA_DIR = 'chat_media'
-OC_HOME = 'oc_home'
-WA_CREDS = 'wa_creds'
-OC_SNAPSHOT = 'opencode_state.tar.gz'
-
-for d in (DATA_DIR, MEDIA_DIR, OC_HOME, WA_CREDS):
-    os.makedirs(d, exist_ok=True)
-
-data_lock = threading.RLock()
-_dirty_lock = threading.Lock()
-_DIRTY_ENV_IDS = set()
-_sync_event = threading.Event()
-_state_dirty = threading.Event()
-
-
-def download_db_from_hf(filename, retries=3, delay=5):
-    if not REPO_ID:
-        return False
-    token_to_use = HF_TOKEN_READ if HF_TOKEN_READ else HF_TOKEN_WRITE
-    for attempt in range(retries + 1):
-        try:
-            hf_hub_download(
-                repo_id=REPO_ID, filename=filename, repo_type="dataset",
-                token=token_to_use, local_dir=".",
-                local_dir_use_symlinks=False, force_download=True,
-                resume_download=False,
-            )
-            return True
-        except RepositoryNotFoundError:
-            return False
-        except HfHubHTTPError as e:
-            resp = getattr(e, 'response', None)
-            if resp is not None and resp.status_code == 404:
-                return False
-        except Exception:
-            pass
-        if attempt < retries:
-            time.sleep(delay)
-    return False
-
-
-def upload_file_to_hf(local_path, repo_path, commit_msg=None):
-    if not (HF_TOKEN_WRITE and REPO_ID):
-        return False
-    try:
-        HfApi().upload_file(
-            path_or_fileobj=local_path, path_in_repo=repo_path,
-            repo_id=REPO_ID, repo_type="dataset", token=HF_TOKEN_WRITE,
-            commit_message=commit_msg or f"Sync {repo_path} {get_ts()}",
-        )
-        return True
-    except Exception:
-        return False
-
-
-def delete_file_in_hf(repo_path):
-    if not (HF_TOKEN_WRITE and REPO_ID):
-        return
-    try:
-        HfApi().delete_file(path_in_repo=repo_path, repo_id=REPO_ID,
-                            repo_type="dataset", token=HF_TOKEN_WRITE,
-                            commit_message=f"Delete {repo_path}")
-    except Exception:
-        pass
-
-
-_REMOTE_FILES_CACHE = {'files': None, 'ts': 0}
-
-
-def list_remote_env_ids(force=False):
-    if not REPO_ID:
-        return []
-    token = HF_TOKEN_READ or HF_TOKEN_WRITE
-    now = time.time()
-    if not force and _REMOTE_FILES_CACHE['files'] is not None and now - _REMOTE_FILES_CACHE['ts'] < 120:
-        return _REMOTE_FILES_CACHE['files']
-    try:
-        files = HfApi().list_repo_files(repo_id=REPO_ID, repo_type='dataset', token=token)
-        ids = [f[len(DATA_DIR) + 1:-5] for f in files
-               if f.startswith(DATA_DIR + '/') and f.endswith('.json')]
-        _REMOTE_FILES_CACHE['files'] = ids
-        _REMOTE_FILES_CACHE['ts'] = now
-        return ids
-    except Exception:
-        return _REMOTE_FILES_CACHE['files'] or []
-
-
-def _list_local_env_ids():
-    try:
-        return [fn[:-5] for fn in os.listdir(DATA_DIR)
-                if fn.endswith('.json') and not fn.startswith('_')]
-    except FileNotFoundError:
-        return []
-
-
-def list_all_env_ids():
-    ids = set(_list_local_env_ids())
-    ids.update(list_remote_env_ids())
-    return sorted(ids)
-
-
-# --- per-env JSON -----------------------------------------------------------
-_ENV_CACHE = {}
-
-
-def _env_file_path(env_id):
-    return os.path.join(DATA_DIR, f'{env_id}.json')
-
-
-def _default_env_struct(env_id):
-    return {
-        'id': env_id,
-        'settings': {
-            'name': f'Среда {env_id}',
-            'client_password_enabled': False,
-            'client_password': '',
-            'is_deleted': False,
-            'default_model': None,
-            'wa_auto_reply': False,
-            'wa_groups': False,
-            'wa_oc_sid': None,
-            'created_at': get_ts(),
-        },
-        'session_order': [],
-        'sessions': {},
-        'wa_log': [],
-    }
-
-
-def download_env_from_hf(env_id, retries=2, delay=2):
-    return download_db_from_hf(f'{DATA_DIR}/{env_id}.json', retries=retries, delay=delay)
-
-
-def upload_env_to_hf(env_id):
-    path = _env_file_path(env_id)
-    if os.path.exists(path):
-        upload_file_to_hf(path, f'{DATA_DIR}/{env_id}.json', f'Sync {env_id} {get_ts()}')
-
-
-def get_env_data(env_id):
-    with data_lock:
-        if env_id in _ENV_CACHE:
-            return _ENV_CACHE[env_id]
-    path = _env_file_path(env_id)
-    env_data = None
-    if os.path.exists(path):
-        try:
-            with open(path, 'r', encoding='utf-8') as f:
-                env_data = json.load(f)
-        except Exception:
-            env_data = None
-    if env_data is None:
-        if download_env_from_hf(env_id):
-            try:
-                with open(path, 'r', encoding='utf-8') as f:
-                    env_data = json.load(f)
-            except Exception:
-                env_data = None
-    if not isinstance(env_data, dict):
-        return None
-    base = _default_env_struct(env_id)
-    base.update(env_data)
-    base['settings'] = {**base['settings'], **(env_data.get('settings') or {})}
-    base.setdefault('sessions', {})
-    base.setdefault('session_order', [])
-    base.setdefault('wa_log', [])
-    with data_lock:
-        _ENV_CACHE[env_id] = base
-    return base
-
-
-def save_env_data(env_id, env_data):
-    path = _env_file_path(env_id)
-    with data_lock:
-        _ENV_CACHE[env_id] = env_data
-        fd, tmp = tempfile.mkstemp(dir=DATA_DIR, text=True)
-        try:
-            with os.fdopen(fd, 'w', encoding='utf-8') as f:
-                json.dump(env_data, f, ensure_ascii=False)
-            os.replace(tmp, path)
-        except Exception:
-            try:
-                os.remove(tmp)
-            except Exception:
-                pass
-    _queue_env_sync(env_id)
-
-
-def _queue_env_sync(env_id):
-    with _dirty_lock:
-        _DIRTY_ENV_IDS.add(env_id)
-    _sync_event.set()
-
-
-def _background_sync_worker():
-    while True:
-        _sync_event.wait()
-        time.sleep(2.5)
-        with _dirty_lock:
-            ids = list(_DIRTY_ENV_IDS)
-            _DIRTY_ENV_IDS.clear()
-        _sync_event.clear()
-        for env_id in ids:
-            try:
-                upload_env_to_hf(env_id)
-            except Exception:
-                pass
-        with _dirty_lock:
-            if _DIRTY_ENV_IDS:
-                _sync_event.set()
-
-
-def flush_dirty_envs():
-    with _dirty_lock:
-        ids = list(_DIRTY_ENV_IDS)
-        _DIRTY_ENV_IDS.clear()
-    _sync_event.clear()
-    for env_id in ids:
-        try:
-            upload_env_to_hf(env_id)
-        except Exception:
-            pass
-
-
-# --- медиа (фото + видео) -----------------------------------------------------
-VIDEO_EXT = {'video/mp4': 'mp4', 'video/webm': 'webm', 'video/quicktime': 'mov',
-             'video/mpeg': 'mpg', 'video/x-matroska': 'mkv', 'video/3gpp': '3gp'}
-IMAGE_EXT = {'image/jpeg': 'jpg', 'image/png': 'png', 'image/gif': 'gif', 'image/webp': 'webp'}
-
-
-def save_incoming_media(file_storage, env_id):
-    """Фото → WEBP-миниатюра через PIL; видео → как есть. Локально + в датасет."""
-    try:
-        mime = (file_storage.mimetype or '').split(';')[0].strip().lower()
-        os.makedirs(os.path.join(MEDIA_DIR, env_id), exist_ok=True)
-        if mime in VIDEO_EXT or mime.startswith('video/'):
-            ext = VIDEO_EXT.get(mime, 'mp4')
-            filename = f'{uuid4().hex}.{ext}'
-            local = os.path.join(MEDIA_DIR, env_id, filename)
-            file_storage.save(local)
-            kind = 'video'
-        elif mime.startswith('image/') or mime == '':
-            img = Image.open(file_storage.stream)
-            img = ImageOps.exif_transpose(img)
-            if img.mode in ("RGBA", "P") and mime != 'image/gif':
-                img = img.convert("RGB")
-            img.thumbnail((1280, 1280), Image.Resampling.LANCZOS)
-            buf = io.BytesIO()
-            fmt = 'GIF' if mime == 'image/gif' else 'WEBP'
-            if fmt == 'GIF':
-                file_storage.stream.seek(0)
-                raw = file_storage.stream.read()
-            else:
-                img.save(buf, format='WEBP', quality=80, method=6)
-                raw = buf.getvalue()
-            filename = f'{uuid4().hex}.{"gif" if fmt == "GIF" else "webp"}'
-            with open(os.path.join(MEDIA_DIR, env_id, filename), 'wb') as f:
-                f.write(raw)
-            kind = 'image'
-        else:
-            return None, None
-        local = os.path.join(MEDIA_DIR, env_id, filename)
-        threading.Thread(target=upload_file_to_hf,
-                           args=(local, f'{MEDIA_DIR}/{env_id}/{filename}'),
-                           daemon=True).start()
-        return filename, kind
-    except Exception:
-        return None, None
-
-
-def ensure_media_local(env_id, filename):
-    local = os.path.join(MEDIA_DIR, env_id, filename)
-    if os.path.exists(local):
-        return local
-    if download_db_from_hf(f'{MEDIA_DIR}/{env_id}/{filename}', retries=2, delay=1):
-        if os.path.exists(local):
-            return local
-    return None
-
-
-def media_data_url(local):
-    mime = 'image/webp' if local.endswith('.webp') else 'image/jpeg'
-    with open(local, 'rb') as f:
-        raw = f.read()
-    return f'data:{mime};base64,' + base64.b64encode(raw).decode()
-
-
-MEDIA_NAME_RE = re.compile(r'^[0-9a-f]{32}\.(webp|gif|jpg|png|mp4|webm|mov|mpg|mkv|3gp)$')
-
-
-# --- снапшот состояния (opencode + wa creds) ---------------------------------
-def state_snapshot_make():
-    tmp = OC_SNAPSHOT + '.tmp'
-    try:
-        with tarfile.open(tmp, 'w:gz') as tar:
-            for d in (OC_HOME, WA_CREDS):
-                if os.path.isdir(d):
-                    tar.add(d, arcname=d,
-                            filter=lambda ti: None if ti.name.endswith(('.lock', '.tmp')) else ti)
-        os.replace(tmp, OC_SNAPSHOT)
-        return True
-    except Exception:
-        try:
-            os.remove(tmp)
-        except Exception:
-            pass
-        return False
-
-
-def state_snapshot_upload():
-    if os.path.exists(OC_SNAPSHOT):
-        return upload_file_to_hf(OC_SNAPSHOT, OC_SNAPSHOT, f'Sync state {get_ts()}')
-    return False
-
-
-def state_snapshot_restore():
-    if download_db_from_hf(OC_SNAPSHOT, retries=2, delay=3):
-        try:
-            with tarfile.open(OC_SNAPSHOT, 'r:gz') as tar:
-                tar.extractall('.')
-            return True
-        except Exception:
-            return False
-    return False
-
-
-def _state_snapshot_worker():
-    while True:
-        time.sleep(120)
-        if _state_dirty.is_set():
-            _state_dirty.clear()
-            try:
-                if state_snapshot_make():
-                    state_snapshot_upload()
-            except Exception:
-                pass
-
-
-def mark_state_dirty():
-    _state_dirty.set()
-
-
-# ---------------------------------------------------------------------------
-# OPENCODE
-# ---------------------------------------------------------------------------
-OC_HOST = '127.0.0.1'
-OC_PORT = str(os.environ.get("OPENCODE_INTERNAL_PORT", "4096"))
-OC_BASE = f'http://{OC_HOST}:{OC_PORT}'
-EFFORT = os.environ.get("OPENCODE_EFFORT", "low").strip().lower() or "low"
-OC_WORKDIR = 'oc_project'
-os.makedirs(OC_WORKDIR, exist_ok=True)
-
-oc_proc = None
-oc_lock = threading.Lock()
-
-KNOWN_DEEPSEEK_FREE = ['deepseek-v4.1-flash-free', 'deepseek-v4-flash-free',
-                       'deepseek-v4.1-flash', 'deepseek-v4-flash']
-
-MODELS_STATE = {'ready': False, 'all': [], 'default': None, 'vision': None, 'free': []}
-
-
-def write_opencode_config():
-    models_cfg = {}
-    for mid in KNOWN_DEEPSEEK_FREE:
-        entry = {"variants": {"low": {"reasoningEffort": "low"},
-                              "medium": {"reasoningEffort": "medium"},
-                              "high": {"reasoningEffort": "high"}}}
-        if EFFORT:
-            entry["options"] = {"reasoningEffort": EFFORT}
-        models_cfg[mid] = entry
-    cfg = {
-        "$schema": "https://opencode.ai/config.json",
-        "model": f"opencode/{KNOWN_DEEPSEEK_FREE[0]}",
-        "permission": {"*": "allow"},
-        "provider": {"opencode": {"models": models_cfg}},
-    }
-    extra = os.environ.get("OPENCODE_EXTRA_CONFIG")
-    if extra:
-        try:
-            cfg.update(json.loads(extra))
-        except Exception:
-            pass
-    with open(os.path.join(OC_WORKDIR, 'opencode.json'), 'w', encoding='utf-8') as f:
-        json.dump(cfg, f, ensure_ascii=False, indent=2)
-
-
-def find_opencode():
-    found = shutil.which("opencode")
-    if found:
-        return found
-    for c in (os.path.expanduser("~/.opencode/bin/opencode"),
-              "/root/.opencode/bin/opencode",
-              "/home/user/.opencode/bin/opencode"):
-        if os.path.isfile(c) and os.access(c, os.X_OK):
-            return c
-    return None
-
-
-def spawn_opencode():
-    global oc_proc
-    binary = find_opencode()
-    if not binary:
-        print("[space] WARNING: opencode binary not found", flush=True)
-        return None
-    write_opencode_config()
-    env = dict(os.environ)
-    env['XDG_DATA_HOME'] = os.path.abspath(os.path.join(OC_HOME, 'data'))
-    env['XDG_CONFIG_HOME'] = os.path.abspath(os.path.join(OC_HOME, 'config'))
-    cmd = [binary, "serve", "--hostname", OC_HOST, "--port", OC_PORT]
-    print(f"[space] starting: {' '.join(cmd)}", flush=True)
-    oc_proc = subprocess.Popen(cmd, cwd=os.path.abspath(OC_WORKDIR), env=env)
-    threading.Thread(target=wait_opencode_ready, daemon=True).start()
-    return oc_proc
-
-
-def oc_get(path, timeout=15):
-    try:
-        r = requests.get(OC_BASE + path, timeout=timeout)
-        if r.status_code == 200:
-            return r.json()
-    except Exception:
-        pass
-    return None
-
-
-def oc_post(path, payload=None, timeout=30):
-    try:
-        return requests.post(OC_BASE + path, json=payload or {}, timeout=timeout)
-    except Exception:
-        return None
-
-
-def wait_opencode_ready():
-    for _ in range(90):
-        if oc_get('/session') is not None:
-            print("[space] opencode serve is ready", flush=True)
-            refresh_models()
-            return True
-        time.sleep(2)
-    return False
-
-
-def refresh_models():
-    data = oc_get('/config/providers', timeout=20)
-    if not data:
-        return False
-    entries = []
-    for p in (data.get('providers') or []):
-        pid = p.get('id') or ''
-        models = p.get('models') or {}
-        items = models.items() if isinstance(models, dict) else [(m.get('id'), m) for m in models if isinstance(m, dict)]
-        for mid, m in items:
-            if not mid or not isinstance(m, dict):
-                continue
-            mods = (m.get('modalities') or {}).get('input') or ['text']
-            entries.append({'providerID': pid, 'modelID': mid, 'name': m.get('name') or mid,
-                            'free': ('free' in (m.get('name') or '').lower()) or mid.endswith('-free') or mid == 'big-pickle',
-                            'vision': 'image' in mods})
-    with oc_lock:
-        MODELS_STATE.update(all=entries, free=[e for e in entries if e['free']],
-                            default=pick_default_model(entries),
-                            vision=pick_vision_model(entries), ready=True)
-    return True
-
-
-def pick_default_model(entries):
-    forced = os.environ.get("DEFAULT_MODEL", "").strip()
-    if forced and '/' in forced:
-        pid, mid = forced.split('/', 1)
-        hit = next((e for e in entries if e['providerID'] == pid and e['modelID'] == mid), None)
-        if hit:
-            return hit
-    for want in KNOWN_DEEPSEEK_FREE:
-        hit = next((e for e in entries if e['modelID'] == want), None)
-        if hit:
-            return hit
-    hit = next((e for e in entries if e['free'] and 'deepseek' in e['name'].lower() and 'flash' in e['name'].lower()), None)
-    return hit or next((e for e in entries if e['free']), None) or (entries[0] if entries else None)
-
-
-def pick_vision_model(entries):
-    forced = os.environ.get("DEFAULT_VISION_MODEL", "").strip()
-    if forced and '/' in forced:
-        pid, mid = forced.split('/', 1)
-        hit = next((e for e in entries if e['providerID'] == pid and e['modelID'] == mid), None)
-        if hit:
-            return hit
-    return (next((e for e in entries if e['free'] and e['vision']), None)
-            or next((e for e in entries if e['vision']), None))
-
-
-def model_for_message(env_data, has_images):
-    with oc_lock:
-        default, vision = MODELS_STATE['default'], MODELS_STATE['vision']
-    chosen = (env_data or {}).get('settings', {}).get('default_model') or default
-    if not chosen:
-        return None, False
-    if has_images and not chosen.get('vision') and vision:
-        return vision, True
-    return chosen, False
-
-
-# ---------------------------------------------------------------------------
-# WHATSAPP: node-мост на Baileys (встроен в этот файл)
-# ---------------------------------------------------------------------------
-WA_ENABLED = os.environ.get("WA_ENABLED", "1") != "0"
-WA_PORT = str(os.environ.get("WA_INTERNAL_PORT", "4100"))
-WA_BASE = f'http://127.0.0.1:{WA_PORT}'
-WA_TOKEN = uuid4().hex
-wa_proc = None
-
-BRIDGE_JS = r"""
-// wa_bridge.js — WhatsApp Web bridge (Baileys). Управляется из app.py.
-const http = require('http');
-const fs = require('fs');
-const path = require('path');
-const crypto = require('crypto');
-const B = require('@whiskeysockets/baileys');
-const makeWASocket = B.default || B.makeWASocket;
-const { useMultiFileAuthState, fetchLatestBaileysVersion, DisconnectReason,
-        downloadMediaMessage, isJidGroup } = B;
-
-const PORT = parseInt(process.env.WA_PORT || '4100', 10);
-const TOKEN = process.env.WA_TOKEN || '';
-const CREDS = process.env.WA_CREDS_DIR || 'wa_creds';
-const MEDIA = process.env.WA_MEDIA_DIR || 'chat_media';
-const FLASK = process.env.WA_FLASK_URL || 'http://127.0.0.1:7860';
-const log = (...a) => console.log('[wa]', ...a);
-const S = {};
-
-fs.mkdirSync(CREDS, { recursive: true });
-fs.mkdirSync(MEDIA, { recursive: true });
-
-function mediaDir(env) { const d = path.join(MEDIA, env); fs.mkdirSync(d, { recursive: true }); return d; }
-function hasCreds(env) { return fs.existsSync(path.join(CREDS, env, 'creds.json')); }
-
-async function flaskEvent(env, type, payload) {
-  try {
-    await fetch(FLASK + '/wa/event', {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json', 'x-wa-token': TOKEN },
-      body: JSON.stringify({ env, type, payload }),
-    });
-  } catch (e) { log('flask event err:', e.message); }
-}
-
-async function saveWaMedia(env, m, msg) {
-  try {
-    const im = msg.imageMessage, vm = msg.videoMessage;
-    const node = im ? { ...m, message: { imageMessage: im } } : { ...m, message: { videoMessage: vm } };
-    const buf = await downloadMediaMessage(node, 'buffer', {});
-    const mime = (im ? im.mimetype : vm.mimetype) || '';
-    const ext = mime.includes('mp4') ? 'mp4' : mime.includes('webm') ? 'webm'
-              : mime.includes('gif') ? 'gif' : mime.includes('png') ? 'png'
-              : mime.includes('webp') ? 'webp' : (im ? 'jpg' : 'mp4');
-    const name = crypto.randomUUID().replace(/-/g, '') + '.' + ext;
-    fs.writeFileSync(path.join(mediaDir(env), name), buf);
-    return { name, kind: im ? 'image' : 'video' };
-  } catch (e) { log('media dl err:', e.message); return null; }
-}
-
-async function start(env) {
-  const cur = S[env];
-  if (cur && (cur.sock || cur.starting)) return { ok: true, already: true };
-  const st = S[env] = { sock: null, qr: null, status: 'connecting', info: null, history: [], starting: true };
-  try {
-    const authState = await useMultiFileAuthState(path.join(CREDS, env));
-    const state = authState.state || authState;
-    const saveCreds = authState.saveCreds || (async () => {});
-    let version;
-    try { version = (await fetchLatestBaileysVersion()).version; } catch (e) { version = undefined; }
-    const sock = makeWASocket({
-      version, auth: state, printQRInTerminal: false,
-      browser: ['OpenCode Hosting', 'Chrome', '120.0'],
-      syncFullHistory: false, markOnlineOnConnect: true,
-    });
-    st.sock = sock;
-    sock.ev.on('creds.update', saveCreds);
-    sock.ev.on('connection.update', (up) => {
-      if (up.qr) { st.qr = up.qr; st.status = 'qr'; flaskEvent(env, 'status', { status: 'qr' }); }
-      if (up.connection === 'open') {
-        st.qr = null; st.status = 'connected'; st.info = sock.user || null;
-        flaskEvent(env, 'status', { status: 'connected', info: st.info });
-      }
-      if (up.connection === 'close') {
-        const code = up.lastError && (up.lastError.output ? up.lastError.output.statusCode : up.lastError.message);
-        const loggedOut = code === 401 || code === DisconnectReason.loggedOut;
-        st.qr = null; st.status = loggedOut ? 'logged_out' : 'disconnected'; st.sock = null;
-        flaskEvent(env, 'status', { status: st.status });
-        if (loggedOut) { delete S[env]; }
-        else { setTimeout(() => { start(env).catch(() => {}); }, 5000); }
-      }
-    });
-    sock.ev.on('messages.upsert', async ({ messages, type }) => {
-      if (type !== 'notify') return;
-      for (const m of messages || []) {
-        try {
-          const msg = m.message || {};
-          const text = msg.conversation || (msg.extendedTextMessage && msg.extendedTextMessage.text)
-                    || (msg.imageMessage && msg.imageMessage.caption)
-                    || (msg.videoMessage && msg.videoMessage.caption) || '';
-          let media = null;
-          if (msg.imageMessage || msg.videoMessage) media = await saveWaMedia(env, m, msg);
-          const rec = {
-            id: m.key.id, jid: m.key.remoteJid || '', fromMe: !!m.key.fromMe,
-            pushName: m.pushName || '', text: text || (media ? '[' + media.kind + ']' : ''),
-            ts: Date.now(), group: isJidGroup(m.key.remoteJid || ''), media,
-          };
-          st.history.push(rec);
-          if (st.history.length > 300) st.history.shift();
-          flaskEvent(env, 'message', rec);
-        } catch (e) { log('upsert err:', e.message); }
-      }
-    });
-    st.starting = false;
-    return { ok: true };
-  } catch (e) {
-    st.starting = false; st.status = 'error'; st.error = String(e.message || e);
-    return { ok: false, error: st.error };
-  }
-}
-
-function normJid(x) {
-  x = String(x || '').trim();
-  if (x.includes('@')) return x;
-  return x.replace(/[^\d]/g, '') + '@s.whatsapp.net';
-}
-
-const server = http.createServer(async (req, res) => {
-  const u = new URL(req.url, 'http://x');
-  const send = (code, obj) => { res.writeHead(code, { 'Content-Type': 'application/json' }); res.end(JSON.stringify(obj)); };
-  if ((req.headers['x-wa-token'] || '') !== TOKEN) return send(401, { ok: false, error: 'auth' });
-  let body = {};
-  if (req.method === 'POST') {
-    body = await new Promise(r => { let d = ''; req.on('data', c => d += c); req.on('end', () => { try { r(JSON.parse(d || '{}')); } catch (e) { r({}); } }); });
-  }
-  const env = u.searchParams.get('env') || body.env || '';
-  const st = S[env];
-  try {
-    if (u.pathname === '/ping') return send(200, { ok: true });
-    if (u.pathname === '/envs') {
-      const dirs = fs.existsSync(CREDS) ? fs.readdirSync(CREDS).filter(d => hasCreds(d)) : [];
-      return send(200, { ok: true, envs: dirs.map(d => ({ env: d, status: (S[d] || {}).status || 'stored' })) });
-    }
-    if (u.pathname === '/status')
-      return send(200, { ok: true, status: st ? st.status : (hasCreds(env) ? 'stored' : 'none'),
-                         info: st ? st.info : null, hasCreds: hasCreds(env) });
-    if (u.pathname === '/qr') return send(200, { ok: true, qr: st ? st.qr : null });
-    if (u.pathname === '/history')
-      return send(200, { ok: true, history: st ? st.history.slice(-(parseInt(u.searchParams.get('limit') || '50', 10))) : [] });
-    if (u.pathname === '/start') { const r2 = await start(env); return send(200, r2); }
-    if (u.pathname === '/logout') {
-      if (st && st.sock) { try { await st.sock.logout(); } catch (e) {} }
-      delete S[env];
-      try { fs.rmSync(path.join(CREDS, env), { recursive: true, force: true }); } catch (e) {}
-      flaskEvent(env, 'status', { status: 'logged_out' });
-      return send(200, { ok: true });
-    }
-    if (u.pathname === '/send') {
-      if (!st || !st.sock || st.status !== 'connected') return send(200, { ok: false, error: 'not connected' });
-      const jid = normJid(body.jid || body.phone);
-      await st.sock.sendMessage(jid, { text: String(body.text || '') });
-      const rec = { id: 'out' + Date.now(), jid, fromMe: true, pushName: '', text: String(body.text || ''), ts: Date.now(), group: isJidGroup(jid), media: null };
-      st.history.push(rec);
-      return send(200, { ok: true, jid });
-    }
-    return send(404, { ok: false });
-  } catch (e) {
-    return send(200, { ok: false, error: String(e.message || e) });
-  }
-});
-server.listen(PORT, '127.0.0.1', () => log('bridge on', PORT));
-
-// авто-переподключение сред с сохранёнными creds (соединение одноразовое)
-try {
-  for (const d of fs.readdirSync(CREDS)) {
-    if (hasCreds(d)) { log('auto-start stored env', d); start(d).catch(() => {}); }
-  }
-} catch (e) {}
-"""
-
-
-def write_bridge():
-    path_ = os.path.join(os.path.dirname(os.path.abspath(__file__)), 'wa_bridge.js')
-    with open(path_, 'w', encoding='utf-8') as f:
-        f.write(BRIDGE_JS)
-    return path_
-
-
-def find_node():
-    return shutil.which('node')
-
-
-def wa_available():
-    return WA_ENABLED and bool(find_node())
-
-
-def spawn_wa_bridge():
-    global wa_proc
-    if not wa_available():
-        print("[space] WhatsApp bridge disabled (no node or WA_ENABLED=0)", flush=True)
-        return None
-    node_modules = os.path.dirname(os.path.abspath(__file__))
-    env = dict(os.environ)
-    env.update({
-        'WA_PORT': WA_PORT, 'WA_TOKEN': WA_TOKEN,
-        'WA_CREDS_DIR': os.path.abspath(WA_CREDS),
-        'WA_MEDIA_DIR': os.path.abspath(MEDIA_DIR),
-        'WA_FLASK_URL': f'http://127.0.0.1:{os.environ.get("OPENCODE_PORT", os.environ.get("PORT", "7860"))}',
-    })
-    cmd = [find_node(), write_bridge()]
-    print(f"[space] starting wa bridge: {' '.join(cmd)}", flush=True)
-    wa_proc = subprocess.Popen(cmd, cwd=node_modules, env=env)
-    return wa_proc
-
-
-def wb_get(path, timeout=8):
-    try:
-        r = requests.get(WA_BASE + path, headers={'x-wa-token': WA_TOKEN}, timeout=timeout)
-        if r.status_code == 200:
-            return r.json()
-    except Exception:
-        pass
-    return None
-
-
-def wb_post(path, payload=None, timeout=20):
-    try:
-        r = requests.post(WA_BASE + path, json=payload or {},
-                          headers={'x-wa-token': WA_TOKEN}, timeout=timeout)
-        if r.status_code == 200:
-            return r.json()
-    except Exception:
-        pass
-    return None
-
-
-def wa_status(env_id):
-    if not wa_available():
-        return {'status': 'disabled'}
-    d = wb_get(f'/status?env={env_id}')
-    if not d:
-        return {'status': 'bridge_offline'}
-    return d
-
-
-def wa_append_log(env_data, rec, cap=300):
-    log_ = env_data.setdefault('wa_log', [])
-    log_.append(rec)
-    if len(log_) > cap:
-        del log_[:len(log_) - cap]
-
-
-def wa_autoreply_thread(env_id, rec):
-    """Входящее WA → opencode-агент → ответ в WA."""
-    env_data = get_env_data(env_id)
-    if not env_data:
-        return
-    sid = env_data['settings'].get('wa_oc_sid')
-    if not sid or not env_data['sessions'].get(sid):
-        sid = uuid4().hex[:12]
-        env_data['sessions'][sid] = {'id': sid, 'title': 'WhatsApp авто-агент',
-                                     'created_at': get_ts(), 'oc_sid': None,
-                                     'saved_assistant_ids': [], 'messages': []}
-        env_data['session_order'].insert(0, sid)
-        env_data['settings']['wa_oc_sid'] = sid
-        save_env_data(env_id, env_data)
-    s = env_data['sessions'][sid]
-    if not s.get('oc_sid'):
-        r = oc_post('/session', {'title': 'WhatsApp агент'})
-        if r is None or r.status_code not in (200, 201):
-            return
-        s['oc_sid'] = (r.json() or {}).get('id')
-        if not s['oc_sid']:
-            return
-        save_env_data(env_id, env_data)
-    who = f"{rec.get('pushName') or 'Контакт'} ({rec.get('jid', '').split('@')[0]})"
-    prompt = (f"[WhatsApp] Входящее сообщение от {who}: «{rec.get('text', '')}». "
-              f"Ответь от имени владельца коротко и по делу; верни ТОЛЬКО текст ответа.")
-    seen = {m.get('info', {}).get('id') for m in (oc_get(f'/session/{s["oc_sid"]}/message') or [])}
-    r = oc_post(f'/session/{s["oc_sid"]}/prompt_async',
-                {'parts': [{'type': 'text', 'text': prompt}]})
-    if r is None or r.status_code not in (200, 204):
-        return
-    deadline = time.time() + 180
-    reply = None
-    while time.time() < deadline:
-        time.sleep(2)
-        for m in (oc_get(f'/session/{s["oc_sid"]}/message') or []):
-            info = m.get('info') or {}
-            mid = info.get('id')
-            if info.get('role') == 'assistant' and mid not in seen:
-                t = info.get('time') or {}
-                if t.get('completed') or info.get('error'):
-                    reply = ''.join(p.get('text', '') for p in (m.get('parts') or []) if p.get('type') == 'text')
-                    break
-        if reply is not None:
-            break
-    if reply and reply.strip():
-        wb_post('/send', {'env': env_id, 'jid': rec.get('jid'), 'text': reply.strip()[:4000]})
-        env_data = get_env_data(env_id)
-        if env_data:
-            wa_append_log(env_data, {'id': 'ar' + str(int(time.time())), 'jid': rec.get('jid'),
-                                     'fromMe': True, 'pushName': 'Агент', 'text': reply.strip()[:500],
-                                     'ts': int(time.time() * 1000), 'group': False, 'media': None})
-            save_env_data(env_id, env_data)
-
-
-# ---------------------------------------------------------------------------
-# Шаблоны
-# ---------------------------------------------------------------------------
-BASE_CSS = """
-:root{--bg:#0b0d10;--panel:#15181d;--panel2:#1c2026;--border:#2a2f37;--text:#e8eaed;
---muted:#9aa0a6;--accent:#4f9cf9;--green:#3ddc84;--red:#ea6060;--radius:14px;
---sab:env(safe-area-inset-bottom,0px)}
-*{box-sizing:border-box;margin:0;padding:0;-webkit-tap-highlight-color:transparent}
-html{height:100%}
-body{background:var(--bg);color:var(--text);font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,'Helvetica Neue',sans-serif;font-size:15px;line-height:1.45;height:100%}
-a{color:var(--accent);text-decoration:none}
-button{font-family:inherit}
-.wrap{max-width:960px;margin:0 auto;padding:16px}
-.card{background:var(--panel);border:1px solid var(--border);border-radius:var(--radius);padding:16px;margin-bottom:14px}
-h1{font-size:20px;margin-bottom:4px}h2{font-size:16px;margin-bottom:10px}
-.muted{color:var(--muted);font-size:13px}
-.badge{display:inline-block;background:var(--panel2);border:1px solid var(--border);border-radius:8px;padding:2px 8px;font-size:12px;color:var(--muted);margin-left:6px}
-.badge.free{color:#7ee2a8;border-color:#24513a}
-.btn{display:inline-block;background:var(--accent);color:#fff;border:none;border-radius:10px;padding:9px 14px;font-size:14px;cursor:pointer;touch-action:manipulation;user-select:none}
-.btn:active{transform:scale(.97)}
-.btn.sec{background:var(--panel2);color:var(--text);border:1px solid var(--border)}
-.btn.danger{background:#3a1d21;color:#ff9d9d;border:1px solid #5c2b30}
-.btn.small{padding:5px 10px;font-size:12px;border-radius:8px}
-.btn[disabled]{opacity:.5;pointer-events:none}
-input[type=text],input[type=password],textarea,select{width:100%;background:var(--panel2);border:1px solid var(--border);color:var(--text);border-radius:10px;padding:9px 12px;font-size:16px;font-family:inherit}
-table{width:100%;border-collapse:collapse;font-size:14px}
-th,td{padding:8px 6px;border-bottom:1px solid var(--border);text-align:left;vertical-align:top}
-.flash{padding:10px 12px;border-radius:10px;margin-bottom:10px;font-size:14px}
-.flash.success{background:#15301f;border:1px solid #2c5c3d;color:#8fe0ac}
-.flash.error{background:#3a1d21;border:1px solid #5c2b30;color:#ff9d9d}
-.row{display:flex;gap:8px;flex-wrap:wrap;align-items:center}
-.dot{width:9px;height:9px;border-radius:50%;display:inline-block;margin-right:6px}
-.dot.on{background:var(--green)}.dot.off{background:#666}.dot.qr{background:#f5c542}
-.mgrid{display:grid;grid-template-columns:repeat(auto-fill,minmax(140px,1fr));gap:10px}
-.mgrid .mi{background:var(--panel2);border:1px solid var(--border);border-radius:12px;overflow:hidden;position:relative}
-.mgrid .mi img,.mgrid .mi video{width:100%;height:120px;object-fit:cover;display:block}
-.mgrid .mi .mn{padding:6px 8px;font-size:11px;color:var(--muted);display:flex;justify-content:space-between;gap:6px;align-items:center}
-"""
-
-ADMHOSTO_TEMPLATE = """<!doctype html><html lang="ru"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1">
-<title>admhosto — админ-панель сред</title>
-<style>""" + BASE_CSS + """</style></head><body><div class="wrap">
-<h1>Админ-панель сред <span class="badge">/admhosto</span></h1>
-<p class="muted">Хранилище: HF dataset <b>{{ repo_id or 'НЕ ЗАДАН (REPO_ID)' }}</b> ·
-opencode: {{ 'online' if oc_ready else 'offline' }} · wa-bridge: {{ wa_state }} ·
-модель: <b>{{ default_model_name }}</b> ({{ effort }})</p>
-{% with messages = get_flashed_messages(with_categories=true) %}{% for cat, msg in messages %}
-<div class="flash {{ cat }}">{{ msg }}</div>{% endfor %}{% endwith %}
-
-<div class="card"><h2>Создать среду для клиента</h2>
- <form method="post" action="/admhosto/create" class="row">
-   <button class="btn" type="submit">+ Создать среду</button>
-   <span class="muted">ID — 6 цифр, клиент заходит по /c/&lt;id&gt;</span>
- </form></div>
-
-<div class="card"><h2>Активные среды ({{ active_envs|length }})</h2>
- {% if not active_envs %}<p class="muted">Пока нет ни ��дной среды.</p>{% endif %}
- <table><tr><th>ID / имя</th><th>Клиент</th><th>Пароль</th><th>WhatsApp</th><th>Медиа</th><th>Управление</th></tr>
- {% for e in active_envs %}<tr>
-  <td><b>{{ e.id }}</b><br><span class="muted">{{ e.name }}</span>
-    <form method="post" action="/admhosto/rename/{{ e.id }}" class="row" style="margin-top:6px">
-      <input type="text" name="name" value="{{ e.name }}"><button class="btn sec small">Имя</button></form></td>
-  <td><a href="/c/{{ e.id }}" target="_blank">/c/{{ e.id }}</a><br><span class="muted">{{ e.sessions_count }} сесс.</span></td>
-  <td>{% if e.pwd_enabled %}вкл<br><span class="muted">{{ e.password }}</span>{% else %}<span class="muted">выкл</span>{% endif %}
-    <form method="post" action="/admhosto/update_pwd/{{ e.id }}" class="row" style="margin-top:6px">
-      <input type="text" name="password" value="{{ e.password }}" placeholder="пароль">
-      <label class="muted"><input type="checkbox" name="pwd_enabled" {% if e.pwd_enabled %}checked{% endif %}></label>
-      <button class="btn sec small">Ок</button></form></td>
-  <td><span class="dot {{ 'on' if e.wa == 'connected' else ('qr' if e.wa == 'qr' else 'off') }}"></span>{{ e.wa }}
-    {% if e.wa == 'connected' %}<form method="post" action="/admhosto/wa_logout/{{ e.id }}" style="margin-top:6px">
-      <button class="btn danger small">Разорвать</button></form>{% endif %}</td>
-  <td><a class="btn sec small" href="/admhosto/media/{{ e.id }}">Галерея ({{ e.media_count }})</a></td>
-  <td><form method="post" action="/admhosto/clear_history/{{ e.id }}" style="margin-bottom:6px">
-      <button class="btn sec small" onclick="return confirm('Очистить историю чатов?')">Очистить</button></form>
-    <form method="post" action="/admhosto/delete/{{ e.id }}">
-      <button class="btn danger small" onclick="return confirm('В архив?')">В архив</button></form></td>
- </tr>{% endfor %}</table></div>
-
-{% if archived_envs %}<div class="card"><h2>Архив ({{ archived_envs|length }})</h2>
- <table>{% for e in archived_envs %}<tr><td><b>{{ e.id }}</b> <span class="muted">{{ e.name }}</span></td>
- <td><form method="post" action="/admhosto/restore/{{ e.id }}" style="display:inline"><button class="btn sec small">Восстановить</button></form>
- <form method="post" action="/admhosto/hard_delete/{{ e.id }}" style="display:inline" onsubmit="return confirm('Удалить НАВСЕГДА?')"><button class="btn danger small">Удалить</button></form></td></tr>{% endfor %}</table></div>{% endif %}
-
-<div class="card"><h2>Диагностика</h2><p class="muted">
- HF_TOKEN: {{ 'задан' if hf_write else 'НЕТ' }} · ADMIN_PASSWORD: {{ 'задан' if admin_pwd else 'нет' }} ·
- node: {{ 'есть' if node_ok else 'НЕТ (WA выключен)' }}<br>
- Бесплатные модели: {% for m in free_models %}{{ m.name }}{% if not loop.last %}, {% endif %}{% else %}<i>нет</i>{% endfor %}</p></div>
-</div></body></html>"""
-
-MEDIA_TEMPLATE = """<!doctype html><html lang="ru"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1">
-<title>Медиа среды {{ env_id }}</title><style>""" + BASE_CSS + """</style></head><body><div class="wrap">
-<h1>Медиа: среда {{ env_id }}</h1>
-<p class="muted"><a href="/admhosto">&larr; в админку</a> · файлов: {{ items|length }} ·
- <a class="btn sec small" href="/admhosto/media/{{ env_id }}/zip">Скачать всё (.zip)</a></p>
-{% if not items %}<p class="muted">Медиа пока нет.</p>{% endif %}
-<div class="mgrid">{% for it in items %}
- <div class="mi">
-  {% if it.kind == 'video' %}<video src="/files/{{ env_id }}/{{ it.name }}" preload="metadata" muted playsinline></video>
-  {% else %}<img src="/files/{{ env_id }}/{{ it.name }}" loading="lazy">{% endif %}
-  <div class="mn"><span>{{ it.size }}</span>
-   <a class="btn small" href="/files/{{ env_id }}/{{ it.name }}?download=1">Скачать</a></div>
- </div>{% endfor %}</div>
-</div></body></html>"""
-
-LOGIN_TEMPLATE = """<!doctype html><html lang="ru"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1"><title>Вход</title>
-<style>""" + BASE_CSS + """.box{max-width:360px;margin:14vh auto}</style></head><body><div class="wrap"><div class="box card">
-<h1>{{ title }}</h1><p class="muted" style="margin-bottom:12px">{{ subtitle }}</p>
-{% with messages = get_flashed_messages(with_categories=true) %}{% for cat, msg in messages %}
-<div class="flash {{ cat }}">{{ msg }}</div>{% endfor %}{% endwith %}
-<form method="post"><input type="password" name="password" placeholder="Пароль" autofocus>
-<div style="height:10px"></div><button class="btn" style="width:100%">Войти</button></form>
-</div></div></body></html>"""
-
-DEAD_TEMPLATE = """<!doctype html><html lang="ru"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1"><title>Недоступно</title>
-<style>""" + BASE_CSS + """</style></head><body><div class="wrap">
-<div class="card" style="max-width:420px;margin:18vh auto;text-align:center">
-<h1>{{ title }}</h1><p class="muted" style="margin-top:8px">{{ subtitle }}</p>
-</div></div></body></html>"""
-
-CHAT_TEMPLATE = """<!doctype html><html lang="ru"><head><meta charset="utf-8">
-<meta name="viewport" content="width=device-width,initial-scale=1,viewport-fit=cover,user-scalable=no">
-<meta name="theme-color" content="#0b0d10">
-<meta name="apple-mobile-web-app-capable" content="yes">
-<meta name="apple-mobile-web-app-status-bar-style" content="black-translucent">
-<link rel="manifest" href="/manifest.json">
-<link rel="apple-touch-icon" href="/icon.png"><link rel="icon" href="/icon.png">
-<title>{{ env_name }}</title>
-<style>""" + BASE_CSS + """
-html,body{height:100%;overscroll-behavior:none}
-body{display:flex;flex-direction:column;overflow:hidden;position:fixed;inset:0;width:100%}
-header{display:flex;align-items:center;gap:8px;padding:calc(8px + env(safe-area-inset-top,0px)) 12px 8px;background:var(--panel);border-bottom:1px solid var(--border);flex:none;user-select:none}
-header .title{font-weight:600;flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-#msgs{flex:1;overflow-y:auto;-webkit-overflow-scrolling:touch;padding:12px;display:flex;flex-direction:column;gap:8px;scroll-behavior:smooth;touch-action:pan-y}
-.msg{max-width:84%;padding:8px 12px;border-radius:16px;font-size:15px;white-space:pre-wrap;word-break:break-word;contain:layout paint;animation:pop .16s ease-out}
-@keyframes pop{from{opacity:0;transform:translateY(6px)}to{opacity:1;transform:none}}
-.msg.user{align-self:flex-end;background:#1f3a5f;border:1px solid #2c5288;border-bottom-right-radius:5px}
-.msg.ai{align-self:flex-start;background:var(--panel);border:1px solid var(--border);border-bottom-left-radius:5px}
-.msg.err{align-self:flex-start;background:#3a1d21;border:1px solid #5c2b30;color:#ff9d9d}
-.msg .meta{display:block;font-size:10.5px;color:var(--muted);margin-top:5px;user-select:none}
-.msg img.ph,.msg video.ph{display:block;max-width:230px;max-height:230px;border-radius:12px;margin:5px 0;cursor:zoom-in;border:1px solid var(--border);background:#000}
-#composer{padding:8px 10px calc(8px + var(--sab));background:var(--panel);border-top:1px solid var(--border);flex:none;user-select:none}
-#previews{display:flex;gap:6px;flex-wrap:wrap;margin-bottom:6px}
-#previews:empty{display:none}
-#previews .pv{position:relative}
-#previews img,#previews video{width:50px;height:50px;object-fit:cover;border-radius:9px;border:1px solid var(--border)}
-#previews button{position:absolute;top:-7px;right:-7px;background:var(--red);color:#fff;border:none;border-radius:50%;width:19px;height:19px;font-size:11px;line-height:1;cursor:pointer}
-#inputrow{display:flex;gap:7px;align-items:flex-end}
-#text{flex:1;max-height:130px;font-size:16px;padding:10px 12px;border-radius:20px}
-.iconbtn{background:var(--panel2);border:1px solid var(--border);color:var(--text);border-radius:50%;width:42px;height:42px;font-size:18px;cursor:pointer;flex:none;touch-action:manipulation}
-.iconbtn:active{transform:scale(.94)}
-.iconbtn.send{background:var(--accent);border-color:var(--accent)}
-#drawer{position:fixed;inset:0;background:rgba(0,0,0,.55);opacity:0;pointer-events:none;transition:opacity .18s;z-index:30}
-#drawer.open{opacity:1;pointer-events:auto}
-#drawer .panel{position:absolute;left:0;top:0;bottom:0;width:min(330px,88%);background:var(--panel);border-right:1px solid var(--border);padding:calc(12px + env(safe-area-inset-top,0px)) 14px calc(12px + var(--sab));overflow-y:auto;transform:translateX(-100%);transition:transform .2s cubic-bezier(.2,.8,.2,1)}
-#drawer.open .panel{transform:none}
-.sitem{padding:9px 10px;border-radius:10px;cursor:pointer;display:flex;gap:8px;align-items:center;border:1px solid transparent;user-select:none}
-.sitem.active{background:var(--panel2);border-color:var(--border)}
-.sitem .t{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:14px}
-.sec-h{font-size:12px;text-transform:uppercase;letter-spacing:.06em;color:var(--muted);margin:14px 0 8px}
-#lightbox{position:fixed;inset:0;background:rgba(0,0,0,.92);display:none;z-index:40;flex-direction:column;align-items:center;justify-content:center;gap:12px;padding:16px}
-#lightbox.open{display:flex}
-#lightbox img,#lightbox video{max-width:96%;max-height:80%;border-radius:10px}
-.caret{display:inline-block;width:7px;height:14px;background:var(--muted);animation:bl 1s steps(2) infinite;vertical-align:-2px}
-@keyframes bl{50%{opacity:0}}
-#qrbox img{width:220px;height:220px;background:#fff;border-radius:12px;padding:8px;image-rendering:pixelated}
-</style></head><body>
-<header>
- <button class="iconbtn" id="btnDrawer" aria-label="Меню">&#9776;</button>
- <div class="title">{{ env_name }}</div>
- <span class="badge free" id="modelBadge">{{ model_name }}</span>
- <span class="badge">{{ effort }}</span>
- <span class="badge" id="waBadge" style="display:none"></span>
- {% if pwd_enabled %}<a class="iconbtn" style="text-align:center;line-height:40px" href="/c/{{ env_id }}/logout">&#8629;</a>{% endif %}
-</header>
-
-<div id="drawer"><div class="panel">
- <div class="row" style="margin-bottom:8px">
-  <button class="btn" id="btnNew" style="flex:1">+ Новый чат</button>
-  <button class="iconbtn" id="btnClose">&#10005;</button></div>
- <div class="sec-h">Сессии</div><div id="slist"></div>
- <div class="sec-h">WhatsApp <span id="waDot" class="dot off"></span><span id="waStatus" class="muted">…</span></div>
- <div id="waPanel"></div>
-</div></div>
-
-<div id="msgs"></div>
-
-<div id="composer">
- <div id="previews"></div>
- <div id="inputrow">
-  <input type="file" id="file" accept="image/*,video/*" multiple hidden>
-  <button class="iconbtn" id="btnAttach" aria-label="Медиа">&#128247;</button>
-  <textarea id="text" rows="1" placeholder="Сообщение…" enterkeyhint="send"></textarea>
-  <button class="iconbtn send" id="btnSend" aria-label="Отправить">&#10148;</button>
- </div></div>
-
-<div id="lightbox"><div id="lbMedia"></div>
- <div class="row"><a class="btn" id="lbDl" href="#" download>Скачать</a>
- <button class="btn sec" id="lbClose">Закрыть</button></div></div>
-
-<script>
-var ENV_ID = {{ env_id | tojson }};
-var IS_MOBILE = {{ is_mobile | tojson }};
-var sessions = [], curSid = null, pending = [], busy = false, cursor = 0, pollT = null;
-var $ = function(i){ return document.getElementById(i); };
-var msgsEl = $('msgs');
-
-function esc(s){ var d = document.createElement('div'); d.textContent = s == null ? '' : String(s); return d.innerHTML; }
-function api(p, o){ o = o || {}; return fetch('/c/' + ENV_ID + '/api' + p, o).then(function(r){ return r.json(); }); }
-function vibrate(ms){ if (navigator.vibrate) try { navigator.vibrate(ms); } catch(e){} }
-
-function mediaEl(name, kind, big){
-  var url = '/files/' + ENV_ID + '/' + encodeURIComponent(name);
-  var el;
-  if (kind === 'video'){ el = document.createElement('video'); el.className = 'ph'; el.controls = true; el.playsInline = true; el.preload = 'metadata'; el.src = url; }
-  else { el = document.createElement('img'); el.className = 'ph'; el.loading = 'lazy'; el.decoding = 'async'; el.src = url; }
-  el.onclick = function(){ openLightbox(name, kind); };
-  return el;
-}
-function openLightbox(name, kind){
-  var lb = $('lightbox'), box = $('lbMedia'); box.innerHTML = '';
-  var url = '/files/' + ENV_ID + '/' + encodeURIComponent(name);
-  var el = mediaEl(name, kind, true); el.style.cursor = 'default'; el.onclick = null;
-  if (kind === 'video'){ el.controls = true; }
-  box.appendChild(el);
-  $('lbDl').href = url + '?download=1'; $('lbDl').setAttribute('download', name);
-  lb.classList.add('open');
-}
-$('lbClose').onclick = function(){ $('lightbox').classList.remove('open'); $('lbMedia').innerHTML = ''; };
-
-function appendMsg(m){
-  var d = document.createElement('div');
-  d.className = 'msg ' + (m.error ? 'err' : (m.role === 'user' ? 'user' : 'ai'));
-  (m.media || []).forEach(function(md){ d.appendChild(mediaEl(md.n, md.k)); });
-  if (m.text){ var t = document.createElement('span'); t.textContent = m.text; d.appendChild(t); }
-  if (m.model || m.ts){ var meta = document.createElement('span'); meta.className = 'meta';
-    meta.textContent = (m.model || '') + (m.switched ? ' · фото-режим' : '') + (m.ts ? ' · ' + m.ts.slice(11, 16) : '');
-    d.appendChild(meta); }
-  msgsEl.appendChild(d);
-  return d;
-}
-function scrollBottom(){ msgsEl.scrollTop = msgsEl.scrollHeight; }
-
-var liveEl = null;
-function setLive(live){
-  if (!live || (!live.text && !live.busy)){ if (liveEl){ liveEl.remove(); liveEl = null; } return; }
-  if (!liveEl){ liveEl = document.createElement('div'); liveEl.className = 'msg ai'; msgsEl.appendChild(liveEl); }
-  liveEl.textContent = live.text || '';
-  if (live.busy){ var c = document.createElement('span'); c.className = 'caret'; liveEl.appendChild(c); }
-  scrollBottom();
-}
-function refresh(){
-  if (!curSid){ setLive(null); schedule(4000); return; }
-  api('/sessions/' + curSid + '/poll?after=' + cursor).then(function(d){
-    if (!d.ok){ schedule(5000); return; }
-    (d.messages || []).forEach(function(m){ appendMsg(m); cursor++; });
-    if (d.messages && d.messages.length) scrollBottom();
-    busy = !!d.busy;
-    setLive(d.live);
-    if (d.model_name) $('modelBadge').textContent = d.model_name;
-    schedule(busy || d.live ? 1400 : 3500);
-  }).catch(function(){ schedule(5000); });
-}
-function schedule(ms){ if (pollT) clearTimeout(pollT); pollT = setTimeout(refresh, ms); }
-
-function loadSessions(cb){
-  api('/sessions').then(function(d){
-    sessions = d.sessions || [];
-    if (curSid && !sessions.some(function(s){ return s.id === curSid; })){ curSid = null; cursor = 0; msgsEl.innerHTML = ''; }
-    if (!curSid && sessions.length){ curSid = sessions[0].id; cursor = 0; msgsEl.innerHTML = ''; }
-    renderSessions(); refresh(); if (cb) cb();
-  });
-}
-function renderSessions(){
-  var el = $('slist'); el.innerHTML = '';
-  sessions.forEach(function(s){
-    var d = document.createElement('div');
-    d.className = 'sitem' + (s.id === curSid ? ' active' : '');
-    var t = document.createElement('span'); t.className = 't'; t.textContent = s.title;
-    var x = document.createElement('button'); x.className = 'btn danger small'; x.textContent = '✕';
-    x.onclick = function(ev){ ev.stopPropagation(); if (confirm('Удалить сессию?')) api('/sessions/' + s.id + '/delete', {method:'POST'}).then(loadSessions); };
-    d.onclick = function(){ curSid = s.id; cursor = 0; msgsEl.innerHTML = ''; $('drawer').classList.remove('open'); renderSessions(); refresh(); };
-    d.appendChild(t); d.appendChild(x); el.appendChild(d);
-  });
-  if (!sessions.length) el.innerHTML = '<p class="muted">Нет сессий.</p>';
-}
-function sendMsg(){
-  var text = $('text').value.trim();
-  if (!text && !pending.length) return;
-  var media = pending.slice();
-  $('text').value = ''; $('text').style.height = 'auto'; pending = []; renderPreviews();
-  var node = appendMsg({role:'user', text:text, media:media, ts:new Date().toISOString().slice(0,16).replace('T',' ')});
-  scrollBottom(); vibrate(12);
-  busy = true;
-  api('/sessions/' + (curSid || 'new') + '/send', {method:'POST', headers:{'Content-Type':'application/json'},
-      body: JSON.stringify({text:text, media:media, session_id:curSid})}).then(function(d){
-    if (!d.ok){ appendMsg({role:'assistant', text:d.error || 'Ошибка отправки', error:true}); busy = false; schedule(2500); return; }
-    if (d.session_id !== curSid){ curSid = d.session_id; cursor = 0; msgsEl.innerHTML = ''; loadSessions(); }
-    else schedule(1200);
-  });
-}
-function renderPreviews(){
-  var el = $('previews'); el.innerHTML = '';
-  pending.forEach(function(md, i){
-    var w = document.createElement('div'); w.className = 'pv';
-    var el2 = mediaEl(md.n, md.k); el2.onclick = null; el2.style.cursor = 'default';
-    if (md.k === 'video') el2.controls = false;
-    var x = document.createElement('button'); x.textContent = '✕';
-    x.onclick = function(){ pending.splice(i, 1); renderPreviews(); };
-    w.appendChild(el2); w.appendChild(x); el.appendChild(w);
-  });
-}
-function uploadFiles(files){
-  Array.prototype.slice.call(files).forEach(function(f){
-    var fd = new FormData(); fd.append('file', f);
-    api('/upload', {method:'POST', body: fd}).then(function(d){
-      if (d.ok){ pending.push({n:d.filename, k:d.kind}); renderPreviews(); }
-      else alert(d.error || 'Ошибка загрузки');
-    });
-  });
-}
-$('btnSend').onclick = sendMsg;
-$('text').addEventListener('keydown', function(e){ if (e.key === 'Enter' && !e.shiftKey){ e.preventDefault(); sendMsg(); } });
-$('text').addEventListener('input', function(){ this.style.height = 'auto'; this.style.height = Math.min(this.scrollHeight, 130) + 'px'; });
-$('btnAttach').onclick = function(){ $('file').click(); };
-$('file').onchange = function(){ uploadFiles(this.files); this.value = ''; };
-$('btnDrawer').onclick = function(){ $('drawer').classList.add('open'); waRefresh(); };
-$('btnClose').onclick = function(){ $('drawer').classList.remove('open'); };
-$('drawer').onclick = function(e){ if (e.target === this) this.classList.remove('open'); };
-$('btnNew').onclick = function(){ api('/sessions/new', {method:'POST'}).then(function(d){ curSid = d.session_id; cursor = 0; msgsEl.innerHTML = ''; $('drawer').classList.remove('open'); loadSessions(); }); };
-
-/* ---------------- WhatsApp panel ---------------- */
-var waTimer = null;
-function waBadge(status){
-  var b = $('waBadge'), dot = $('waDot'), st = $('waStatus');
-  var map = {connected:['on','WA подключён'], qr:['qr','WA: QR готов'], connecting:['qr','WA: подключение'], stored:['off','WA: сохранён'], disconnected:['off','WA: отключён'], logged_out:['off','WA: выход'], disabled:['off',''], bridge_offline:['off','WA: мост офлайн']};
-  var m = map[status] || ['off', status || ''];
-  dot.className = 'dot ' + m[0]; st.textContent = m[1];
-  if (status === 'connected'){ b.style.display = ''; b.textContent = 'WA'; } else b.style.display = 'none';
-}
-function waRefresh(){
-  api('/wa/status').then(function(d){
-    waBadge(d.status);
-    renderWaPanel(d);
-  }).catch(function(){});
-}
-function renderWaPanel(d){
-  var p = $('waPanel'); p.innerHTML = '';
-  if (d.status === 'disabled' || d.status === 'bridge_offline'){
-    p.innerHTML = '<p class="muted">WhatsApp-коннектор выключен на сервере.</p>'; return;
-  }
-  if (d.status === 'connected'){
-    var num = (d.info && (d.info.id || '')) ? String(d.info.id).split(':')[0] : '';
-    p.innerHTML = '<p class="muted" style="margin-bottom:8px">Подключён: <b>' + esc(d.info && d.info.name || '') + '</b> +' + esc(num) + '<br>Повторно сканировать не нужно — соединение привязано к среде.</p>' +
-      '<label class="muted row" style="margin-bottom:6px"><input type="checkbox" id="waAr" ' + (d.auto_reply ? 'checked' : '') + '> авто-ответчик агента</label>' +
-      '<div class="row" style="margin-bottom:8px"><input type="text" id="waTo" placeholder="+7777... или jid" style="flex:1"><button class="btn small" id="waSendBtn">Отправить в WA</button></div>' +
-      '<textarea id="waText" rows="2" placeholder="Текст сообщения в WhatsApp"></textarea>' +
-      '<div class="row" style="margin-top:8px"><button class="btn sec small" id="waHist">История WA</button>' +
-      '<button class="btn danger small" id="waOut">Разорвать соединение</button></div><div id="waHistBox"></div>';
-    $('waAr').onchange = function(){ api('/wa/settings', {method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify({auto_reply:this.checked})}); };
-    $('waSendBtn').onclick = function(){ api('/wa/send', {method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify({to:$('waTo').value, text:$('waText').value})}).then(function(r){ if(!r.ok) alert(r.error||'Ошибка'); else { $('waText').value=''; vibrate(12); } }); };
-    $('waOut').onclick = function(){ if (confirm('Разорвать соединение с WhatsApp?')) api('/wa/logout', {method:'POST'}).then(waRefresh); };
-    $('waHist').onclick = function(){ api('/wa/history').then(function(h){ var box = $('waHistBox');
-      box.innerHTML = '<div class="sec-h">Последние сообщения</div>' + (h.history || []).slice(-15).reverse().map(function(r){
-        return '<p class="muted" style="margin-bottom:4px">' + (r.fromMe ? '➤' : '◀') + ' <b>' + esc(r.pushName || r.jid.split('@')[0]) + ':</b> ' + esc((r.text || '').slice(0, 80)) + '</p>'; }).join(''); }); };
-    return;
-  }
-  if (IS_MOBILE){
-    p.innerHTML = '<div class="card" style="margin:0;background:#2a2413;border-color:#5c4a1e"><p style="font-size:13px">📵 <b>Авторизация WhatsApp возможна только с компьютера.</b><br><span class="muted">Откройте эту среду на компьютере (десктоп-браузер), нажмите «Подключить WhatsApp» и отсканируйте QR телефоном. С телефона соединение не создаётся.</span></p></div>';
-    return;
-  }
-  p.innerHTML = '<div class="row"><button class="btn" id="waConn">Подключить WhatsApp</button></div>' +
-    '<div id="qrbox" style="margin-top:10px"></div><p class="muted" style="margin-top:8px">QR появится здесь; отсканируйте его телефоном: WhatsApp → Настройки → Связанные устройства. Соединение одноразовое и привязывается к среде.</p>';
-  $('waConn').onclick = function(){ api('/wa/start', {method:'POST'}).then(waLoop); };
-  if (d.status === 'qr') waLoop();
-}
-function waLoop(){
-  if (waTimer) clearInterval(waTimer);
-  var tries = 0;
-  waTimer = setInterval(function(){
-    tries++;
-    api('/wa/status').then(function(d){
-      waBadge(d.status);
-      if (d.status === 'connected' || d.status === 'logged_out'){ clearInterval(waTimer); waTimer = null; renderWaPanel(d); return; }
-      if (d.status === 'qr'){
-        api('/wa/qr.png?r=' + tries).then(function(){ }).catch(function(){});
-        var box = $('qrbox');
-        if (box){ box.innerHTML = '<img src="/c/' + ENV_ID + '/api/wa/qr.png?r=' + tries + '" alt="QR WhatsApp">'; }
-      }
-      if (tries > 150){ clearInterval(waTimer); waTimer = null; }
-    });
-  }, 2500);
-}
-setInterval(function(){ if (!$('drawer').classList.contains('open')) api('/wa/status').then(function(d){ waBadge(d.status); }).catch(function(){}); }, 15000);
-loadSessions(); waRefresh();
-</script></body></html>"""
-
-
-# ---------------------------------------------------------------------------
-# Админ /admhosto
-# ---------------------------------------------------------------------------
-def admin_auth_ok():
-    pwd = os.environ.get("ADMIN_PASSWORD", "").strip()
-    if not pwd:
-        return True
-    return bool(session.get('adm_auth'))
-
-
-@app.route('/')
-def index():
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/healthz')
-def healthz():
-    with oc_lock:
-        st = {'oc_ready': MODELS_STATE['ready'], 'default_model': (MODELS_STATE['default'] or {}).get('name')}
-    st.update({'repo': REPO_ID, 'wa': wa_available(), 'ts': get_ts()})
-    return jsonify(st)
-
-
-@app.route('/manifest.json')
-def manifest():
-    return jsonify({
-        'name': 'OpenCode Hosting', 'short_name': 'Chat',
-        'start_url': '/', 'display': 'standalone',
-        'background_color': '#0b0d10', 'theme_color': '#0b0d10',
-        'icons': [{'src': '/icon.png', 'sizes': '512x512', 'type': 'image/png'}],
-    })
-
-
-_ICON_CACHE = {}
-
-
-@app.route('/icon.png')
-def icon_png():
-    if 'png' not in _ICON_CACHE:
-        img = Image.new('RGB', (512, 512), (15, 18, 23))
-        d = Image.Draw(img) if hasattr(Image, 'Draw') else None
-        try:
-            from PIL import ImageDraw
-            dr = ImageDraw.Draw(img)
-            dr.rounded_rectangle([96, 120, 416, 340], radius=60, fill=(79, 156, 249))
-            dr.polygon([(150, 330), (150, 410), (240, 330)], fill=(79, 156, 249))
-            dr.ellipse([170, 200, 210, 240], fill=(255, 255, 255))
-            dr.ellipse([236, 200, 276, 240], fill=(255, 255, 255))
-            dr.ellipse([302, 200, 342, 240], fill=(255, 255, 255))
-        except Exception:
-            pass
-        buf = io.BytesIO()
-        img.save(buf, format='PNG')
-        _ICON_CACHE['png'] = buf.getvalue()
-    return Response(_ICON_CACHE['png'], mimetype='image/png')
-
-
-@app.route('/admhosto/login', methods=['GET', 'POST'])
-def adm_login():
-    if not os.environ.get("ADMIN_PASSWORD", "").strip():
-        return redirect(url_for('admhosto'))
-    if request.method == 'POST':
-        if request.form.get('password', '') == os.environ.get("ADMIN_PASSWORD", "").strip():
-            session.permanent = True
-            session['adm_auth'] = True
-            return redirect(url_for('admhosto'))
-        flash('Неверный пароль', 'error')
-    return render_cached(LOGIN_TEMPLATE, title='Вход в админ-панель', subtitle='/admhosto')
-
-
-@app.route('/admhosto/logout')
-def adm_logout():
-    session.pop('adm_auth', None)
-    return redirect(url_for('adm_login'))
-
-
-def _media_count(env_id):
-    d = os.path.join(MEDIA_DIR, env_id)
-    try:
-        return len([f for f in os.listdir(d) if MEDIA_NAME_RE.match(f)])
-    except OSError:
-        return 0
-
-
-@app.route('/admhosto', methods=['GET'])
-def admhosto():
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    active_envs, archived_envs = [], []
-    for env_id in list_all_env_ids():
-        env_data = get_env_data(env_id)
-        if not env_data:
-            continue
-        s = env_data.get('settings', {})
-        info = {'id': env_id, 'name': s.get('name', f'Среда {env_id}'),
-                'pwd_enabled': s.get('client_password_enabled', False),
-                'password': s.get('client_password', ''),
-                'sessions_count': len(env_data.get('sessions', {})),
-                'media_count': _media_count(env_id),
-                'wa': (wa_status(env_id) or {}).get('status', 'none')}
-        (archived_envs if s.get('is_deleted') else active_envs).append(info)
-    with oc_lock:
-        default_name = (MODELS_STATE['default'] or {}).get('name') or 'DeepSeek V4.1 Flash Free'
-        free_models = MODELS_STATE['free']
-    return render_cached(ADMHOSTO_TEMPLATE, active_envs=active_envs, archived_envs=archived_envs,
-                         repo_id=REPO_ID, hf_write=bool(HF_TOKEN_WRITE),
-                         admin_pwd=bool(os.environ.get("ADMIN_PASSWORD", "").strip()),
-                         oc_ready=MODELS_STATE['ready'], default_model_name=default_name,
-                         effort=EFFORT, free_models=free_models, node_ok=bool(find_node()),
-                         wa_state=('включён' if wa_available() else 'выключен'))
-
-
-@app.route('/admhosto/create', methods=['POST'])
-def create_environment():
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    existing = set(list_all_env_ids())
-    while True:
-        new_id = ''.join(random.choices(string.digits, k=6))
-        if new_id not in existing:
-            break
-    save_env_data(new_id, _default_env_struct(new_id))
-    _REMOTE_FILES_CACHE['ts'] = 0
-    flash(f'Среда {new_id} создана. Ссылка: /c/{new_id}', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/rename/<env_id>', methods=['POST'])
-def rename_environment(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    env_data = get_env_data(env_id)
-    if env_data:
-        env_data['settings']['name'] = request.form.get('name', '').strip() or f'Среда {env_id}'
-        save_env_data(env_id, env_data)
-        flash('Имя обновлено.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/update_pwd/<env_id>', methods=['POST'])
-def update_env_pwd(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    env_data = get_env_data(env_id)
-    if env_data:
-        env_data['settings']['client_password_enabled'] = 'pwd_enabled' in request.form
-        env_data['settings']['client_password'] = request.form.get('password', '').strip()
-        save_env_data(env_id, env_data)
-        flash('Пароль клиента обновлён.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/clear_history/<env_id>', methods=['POST'])
-def clear_history(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    env_data = get_env_data(env_id)
-    if env_data:
-        for s in env_data.get('sessions', {}).values():
-            if s.get('oc_sid'):
-                try:
-                    requests.delete(f'{OC_BASE}/session/{s["oc_sid"]}', timeout=10)
-                except Exception:
-                    pass
-            s.update(messages=[], saved_assistant_ids=[], oc_sid=None)
-        env_data['wa_log'] = []
-        save_env_data(env_id, env_data)
-        mark_state_dirty()
-        flash('История очищена.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/delete/<env_id>', methods=['POST'])
-def delete_environment(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    env_data = get_env_data(env_id)
-    if env_data:
-        env_data['settings']['is_deleted'] = True
-        save_env_data(env_id, env_data)
-        flash('Среда в архиве.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/restore/<env_id>', methods=['POST'])
-def restore_environment(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    env_data = get_env_data(env_id)
-    if env_data:
-        env_data['settings']['is_deleted'] = False
-        save_env_data(env_id, env_data)
-        flash('Среда восстановлена.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/hard_delete/<env_id>', methods=['POST'])
-def hard_delete_environment(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    path = _env_file_path(env_id)
-    with data_lock:
-        _ENV_CACHE.pop(env_id, None)
-    try:
-        if os.path.exists(path):
-            os.remove(path)
-    except Exception:
-        pass
-    delete_file_in_hf(f'{DATA_DIR}/{env_id}.json')
-    try:
-        if HF_TOKEN_WRITE and REPO_ID:
-            HfApi().delete_folder(folder_path=f'{MEDIA_DIR}/{env_id}', repo_id=REPO_ID,
-                                  repo_type='dataset', token=HF_TOKEN_WRITE,
-                                  commit_message=f'Delete media {env_id}')
-    except Exception:
-        pass
-    wb_post('/logout', {'env': env_id})
-    _REMOTE_FILES_CACHE['ts'] = 0
-    flash('Среда удалена навсегда.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/wa_logout/<env_id>', methods=['POST'])
-def adm_wa_logout(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    wb_post('/logout', {'env': env_id})
-    mark_state_dirty()
-    flash(f'WhatsApp среды {env_id} отключён.', 'success')
-    return redirect(url_for('admhosto'))
-
-
-@app.route('/admhosto/media/<env_id>')
-def media_gallery(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    d = os.path.join(MEDIA_DIR, env_id)
-    items = []
-    try:
-        for f in sorted(os.listdir(d), key=lambda x: os.path.getmtime(os.path.join(d, x)), reverse=True):
-            if not MEDIA_NAME_RE.match(f):
-                continue
-            sz = os.path.getsize(os.path.join(d, f))
-            items.append({'name': f, 'kind': 'video' if f.rsplit('.', 1)[-1] in ('mp4', 'webm', 'mov', 'mpg', 'mkv', '3gp') else 'image',
-                          'size': f'{sz / 1024 / 1024:.1f} MB' if sz > 1024 * 1024 else f'{sz // 1024} KB'})
-    except OSError:
-        pass
-    return render_cached(MEDIA_TEMPLATE, env_id=env_id, items=items)
-
-
-@app.route('/admhosto/media/<env_id>/zip')
-def media_zip(env_id):
-    if not admin_auth_ok():
-        return redirect(url_for('adm_login'))
-    d = os.path.join(MEDIA_DIR, env_id)
-    buf = io.BytesIO()
-    with zipfile.ZipFile(buf, 'w', zipfile.ZIP_STORED) as z:
-        try:
-            for f in os.listdir(d):
-                if MEDIA_NAME_RE.match(f):
-                    z.write(os.path.join(d, f), arcname=f)
-        except OSError:
-            pass
-    buf.seek(0)
-    return send_file(buf, mimetype='application/zip', as_attachment=True,
-                     download_name=f'media_{env_id}.zip')
-
-
-# ---------------------------------------------------------------------------
-# Файлы медиа
-# ---------------------------------------------------------------------------
-@app.route('/files/<env_id>/<filename>')
-def serve_file(env_id, filename):
-    filename = os.path.basename(filename)
-    if not MEDIA_NAME_RE.match(filename):
-        return Response('bad name', status=400)
-    local = ensure_media_local(env_id, filename)
-    if not local:
-        return Response('not found', status=404)
-    resp = send_from_directory(os.path.join(MEDIA_DIR, env_id), filename,
-                               max_age=60 * 60 * 24 * 30)
-    if request.args.get('download'):
-        resp.headers['Content-Disposition'] = f'attachment; filename="{filename}"'
-    return resp
-
-
-# ---------------------------------------------------------------------------
-# Клиент /c/<env_id>
-# ---------------------------------------------------------------------------
-def client_auth_ok(env_id, env_data):
-    s = env_data.get('settings', {})
-    if not s.get('client_password_enabled'):
-        return True
-    return bool(session.get(f'client_auth_{env_id}'))
-
-
-@app.route('/c/<env_id>')
-def client_chat(env_id):
-    env_data = get_env_data(env_id)
-    if not env_data:
-        return render_cached(DEAD_TEMPLATE, title='Среда не найдена', subtitle='Проверьте ссылку.'), 404
-    if env_data['settings'].get('is_deleted'):
-        return render_cached(DEAD_TEMPLATE, title='Среда отключена', subtitle='Обратитесь к администратору.'), 403
-    if not client_auth_ok(env_id, env_data):
-        return redirect(url_for('client_login', env_id=env_id))
-    with oc_lock:
-        default = MODELS_STATE['default']
-    model_name = (env_data['settings'].get('default_model') or default or {}).get('name') or 'DeepSeek V4.1 Flash Free'
-    return render_cached(CHAT_TEMPLATE, env_id=env_id,
-                         env_name=env_data['settings'].get('name', f'Среда {env_id}'),
-                         model_name=model_name, effort=EFFORT,
-                         pwd_enabled=bool(env_data['settings'].get('client_password_enabled')),
-                         is_mobile=is_mobile_request())
-
-
-@app.route('/c/<env_id>/login', methods=['GET', 'POST'])
-def client_login(env_id):
-    env_data = get_env_data(env_id)
-    if not env_data or env_data['settings'].get('is_deleted'):
-        return render_cached(DEAD_TEMPLATE, title='Среда недоступна', subtitle=''), 404
-    if request.method == 'POST':
-        if request.form.get('password', '') == env_data['settings'].get('client_password', ''):
-            session.permanent = True
-            session[f'client_auth_{env_id}'] = True
-            return redirect(url_for('client_chat', env_id=env_id))
-        flash('Неверный пароль', 'error')
-    return render_cached(LOGIN_TEMPLATE, title=env_data['settings'].get('name', env_id),
-                         subtitle='Пароль доступа к среде')
-
-
-@app.route('/c/<env_id>/logout')
-def client_logout(env_id):
-    session.pop(f'client_auth_{env_id}', None)
-    return redirect(url_for('client_login', env_id=env_id))
-
-
-def _client_guard(env_id):
-    env_data = get_env_data(env_id)
-    if not env_data or env_data['settings'].get('is_deleted'):
-        return None, jsonify({'ok': False, 'error': 'Среда недоступна'})
-    if not client_auth_ok(env_id, env_data):
-        return None, jsonify({'ok': False, 'error': 'Нет доступа'})
-    return env_data, None
-
-
-@app.route('/c/<env_id>/api/sessions')
-def api_sessions(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    out = [{'id': sid, 'title': env_data['sessions'][sid].get('title', 'Чат'),
-            'created_at': env_data['sessions'][sid].get('created_at', '')}
-           for sid in env_data.get('session_order', []) if sid in env_data['sessions']]
-    return jsonify({'ok': True, 'sessions': out})
-
-
-@app.route('/c/<env_id>/api/sessions/new', methods=['POST'])
-def api_new_session(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    sid = uuid4().hex[:12]
-    env_data['sessions'][sid] = {'id': sid, 'title': f'Чат {len(env_data["sessions"]) + 1}',
-                                 'created_at': get_ts(), 'oc_sid': None,
-                                 'saved_assistant_ids': [], 'messages': []}
-    env_data['session_order'].insert(0, sid)
-    save_env_data(env_id, env_data)
-    return jsonify({'ok': True, 'session_id': sid})
-
-
-@app.route('/c/<env_id>/api/sessions/<sid>/delete', methods=['POST'])
-def api_delete_session(env_id, sid):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    s = env_data['sessions'].pop(sid, None)
-    if s and s.get('oc_sid'):
-        try:
-            requests.delete(f'{OC_BASE}/session/{s["oc_sid"]}', timeout=10)
-        except Exception:
-            pass
-    if sid in env_data.get('session_order', []):
-        env_data['session_order'].remove(sid)
-    if env_data['settings'].get('wa_oc_sid') == sid:
-        env_data['settings']['wa_oc_sid'] = None
-    save_env_data(env_id, env_data)
-    mark_state_dirty()
-    return jsonify({'ok': True})
-
-
-@app.route('/c/<env_id>/api/upload', methods=['POST'])
-def api_upload(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    f = request.files.get('file') or request.files.get('photo')
-    if not f:
-        return jsonify({'ok': False, 'error': 'Нет файла'})
-    name, kind = save_incoming_media(f, env_id)
-    if not name:
-        return jsonify({'ok': False, 'error': 'Не удалось обработать файл (фото/видео?)'})
-    return jsonify({'ok': True, 'filename': name, 'kind': kind, 'url': f'/files/{env_id}/{name}'})
-
-
-# --- команды /wa в чате -------------------------------------------------------
-def wa_command(env_id, env_data, text):
-    """Возвращает текст ответа ассистента или None, если это не команда."""
-    if not text.startswith('/wa'):
-        return None
-    parts = text.split(None, 2)
-    cmd = (parts[1] if len(parts) > 1 else 'status').lower()
-    if not wa_available():
-        return '⚠️ WhatsApp-коннектор выключен на сервере.'
-    st = wa_status(env_id) or {}
-    status = st.get('status')
-    if cmd in ('status', 'статус'):
-        if status == 'connected':
-            info = st.get('info') or {}
-            return f'✅ WhatsApp подключён: {info.get("name", "")} +{str(info.get("id", "")).split(":")[0]}. Соединение привязано к среде.'
-        return f'WhatsApp: {status}. Подключить — кнопкой в меню (только с компьютера).'
-    if cmd == 'send':
-        if status != 'connected':
-            return '⚠️ WhatsApp не подключён к этой среде.'
-        rest = parts[2] if len(parts) > 2 else ''
-        m = re.split(r'\s+', rest, maxsplit=1)
-        if len(m) < 2 or not m[0]:
-            return 'Формат: /wa send +77777777777 текст сообщения'
-        r = wb_post('/send', {'env': env_id, 'jid': m[0], 'text': m[1]})
-        if r and r.get('ok'):
-            wa_append_log(env_data, {'id': 'cmd' + str(int(time.time())), 'jid': m[0], 'fromMe': True,
-                                     'pushName': 'Вы (через агента)', 'text': m[1][:500],
-                                     'ts': int(time.time() * 1000), 'group': False, 'media': None})
-            save_env_data(env_id, env_data)
-            return f'📨 Отправлено в WhatsApp: {m[0]}'
-        return f'⚠️ Ошибка отправки: {(r or {}).get("error", "мост не отвечает")}'
-    if cmd in ('last', 'history'):
-        n = 10
-        lines = env_data.get('wa_log', [])[-n:]
-        if not lines:
-            return 'История WhatsApp пуста.'
-        return '\n'.join(f'{"➤" if l.get("fromMe") else "◀"} {l.get("pushName") or l.get("jid", "").split("@")[0]}: {(l.get("text") or "")[:120]}' for l in reversed(lines))
-    if cmd in ('disconnect', 'logout'):
-        wb_post('/logout', {'env': env_id})
-        mark_state_dirty()
-        return '🔌 Соединение с WhatsApp разорвано, creds удалены.'
-    if cmd in ('connect', 'start'):
-        if is_mobile_request():
-            return '📵 Подключение WhatsApp с телефона невозможно: откройте среду на компьютере и авторизуйтесь там (QR).'
-        wb_post('/start', {'env': env_id})
-        return '⏳ Запускаю подключение: откройте меню среды НА КОМПЬЮТЕРЕ и отсканируйте QR.'
-    return 'Команды: /wa status · /wa send <номер> <текст> · /wa last · /wa disconnect · /wa connect'
-
-
-@app.route('/c/<env_id>/api/sessions/<sid>/send', methods=['POST'])
-def api_send(env_id, sid):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    payload = request.get_json(silent=True) or {}
-    text = (payload.get('text') or '').strip()
-    media_in = payload.get('media') or payload.get('photos') or []
-    media = []
-    for md in media_in:
-        if isinstance(md, dict):
-            n, k = md.get('n'), md.get('k')
-        else:
-            n, k = md, 'image'
-        if n and MEDIA_NAME_RE.match(n):
-            media.append({'n': n, 'k': k if k in ('image', 'video') else 'image'})
-    media = media[:8]
-    if not text and not media:
-        return jsonify({'ok': False, 'error': 'Пустое сообщение'})
-
-    s = env_data['sessions'].get(sid)
-    if not s:
-        sid = uuid4().hex[:12]
-        s = {'id': sid, 'title': (text[:40] or f'Чат {len(env_data["sessions"]) + 1}'),
-             'created_at': get_ts(), 'oc_sid': None, 'saved_assistant_ids': [], 'messages': []}
-        env_data['sessions'][sid] = s
-        env_data['session_order'].insert(0, sid)
-
-    # команды WhatsApp обрабатываются локально, без модели
-    wa_reply = wa_command(env_id, env_data, text)
-    if wa_reply is not None:
-        s['messages'].append({'role': 'user', 'text': text, 'media': media, 'ts': get_ts(), 'model': ''})
-        s['messages'].append({'role': 'assistant', 'text': wa_reply, 'media': [], 'ts': get_ts(), 'model': 'WhatsApp'})
-        if len(s['messages']) == 2 and (s.get('title') or '').startswith('Чат '):
-            s['title'] = text[:40] or s['title']
-        save_env_data(env_id, env_data)
-        return jsonify({'ok': True, 'session_id': sid})
-
-    if not s.get('oc_sid'):
-        r = oc_post('/session', {'title': s.get('title', 'chat')[:60]})
-        if r is None or r.status_code not in (200, 201):
-            return jsonify({'ok': False, 'error': 'opencode не отвечает (см. /admhosto)'})
-        s['oc_sid'] = (r.json() or {}).get('id')
-        if not s['oc_sid']:
-            return jsonify({'ok': False, 'error': 'opencode не создал сессию'})
-        mark_state_dirty()
-
-    images = [m for m in media if m['k'] == 'image']
-    videos = [m for m in media if m['k'] == 'video']
-    model, switched = model_for_message(env_data, bool(images))
-    if not model:
-        return jsonify({'ok': False, 'error': 'Модель не настроена: opencode offline'})
-
-    parts = []
-    note = ''
-    if videos:
-        note = f'[Пользователь прикрепил видео: {len(videos)} шт. — оно сохранено в галерее среды, модель его не видит.] '
-    if text or note:
-        parts.append({'type': 'text', 'text': note + text})
-    for m in images[:4]:
-        local = ensure_media_local(env_id, m['n'])
-        if local:
-            parts.append({'type': 'file', 'mime': 'image/webp', 'filename': m['n'],
-                          'url': media_data_url(local)})
-
-    r = oc_post(f'/session/{s["oc_sid"]}/prompt_async',
-                {'model': {'providerID': model['providerID'], 'modelID': model['modelID']}, 'parts': parts})
-    if r is None or r.status_code not in (200, 204):
-        return jsonify({'ok': False, 'error': 'opencode отклонил сообщение'})
-
-    s['messages'].append({'role': 'user', 'text': text, 'media': media, 'ts': get_ts(),
-                          'model': model['name'], 'switched': switched})
-    if len(s['messages']) == 1 and (s.get('title') or '').startswith('Чат '):
-        s['title'] = text[:40] or s['title']
-    save_env_data(env_id, env_data)
-    return jsonify({'ok': True, 'session_id': sid})
-
-
-def _oc_message_text(m):
-    return ''.join(p.get('text', '') for p in ((m or {}).get('parts') or []) if p.get('type') == 'text')
-
-
-def _oc_message_done(m):
-    info = (m or {}).get('info') or {}
-    t = info.get('time') or {}
-    return bool(t.get('completed') or t.get('finished')) or info.get('error') is not None
-
-
-@app.route('/c/<env_id>/api/sessions/<sid>/poll')
-def api_poll(env_id, sid):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    s = env_data['sessions'].get(sid)
-    if not s:
-        return jsonify({'ok': False, 'error': 'Сессия не найдена'})
-    after = max(0, min(int(request.args.get('after', 0) or 0), len(s['messages'])))
-    live, busy = None, False
-    oc_sid = s.get('oc_sid')
-    if oc_sid:
-        status = oc_get('/session/status') or {}
-        busy = ((status.get(oc_sid) or {}).get('type') == 'busy')
-        msgs = oc_get(f'/session/{oc_sid}/message') or []
-        changed = False
-        for m in msgs:
-            info = m.get('info') or {}
-            if info.get('role') != 'assistant':
-                continue
-            mid = info.get('id')
-            if not mid or mid in s.get('saved_assistant_ids', []):
-                continue
-            if _oc_message_done(m):
-                err_obj = info.get('error')
-                err_text = (err_obj.get('message') if isinstance(err_obj, dict) else str(err_obj)) if err_obj else None
-                s.setdefault('saved_assistant_ids', []).append(mid)
-                s['messages'].append({'role': 'assistant', 'text': _oc_message_text(m), 'media': [],
-                                      'ts': get_ts(), 'error': err_text,
-                                      'model': f"{info.get('providerID', '')}/{info.get('modelID', '')}".strip('/')})
-                changed = True
-        if changed:
-            save_env_data(env_id, env_data)
-            mark_state_dirty()
-        if busy and msgs and (msgs[-1].get('info') or {}).get('role') == 'assistant' and not _oc_message_done(msgs[-1]):
-            live = {'text': _oc_message_text(msgs[-1]), 'busy': True}
-    with oc_lock:
-        default_name = (MODELS_STATE['default'] or {}).get('name')
-    return jsonify({'ok': True, 'messages': s['messages'][after:], 'cursor': len(s['messages']),
-                    'live': live, 'busy': busy, 'model_name': default_name})
-
-
-# --- WhatsApp API клиента -----------------------------------------------------
-@app.route('/c/<env_id>/api/wa/status')
-def api_wa_status(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    d = wa_status(env_id) or {'status': 'disabled'}
-    d['ok'] = True
-    d['auto_reply'] = bool(env_data['settings'].get('wa_auto_reply'))
-    d['is_mobile'] = is_mobile_request()
-    return jsonify(d)
-
-
-@app.route('/c/<env_id>/api/wa/start', methods=['POST'])
-def api_wa_start(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    if is_mobile_request():
-        return jsonify({'ok': False, 'mobile': True,
-                        'error': '📵 Авторизация WhatsApp возможна только с компьютера. '
-                                 'Откройте среду на компьютере и отсканируйте QR там.'})
-    if not wa_available():
-        return jsonify({'ok': False, 'error': 'WhatsApp-коннектор выключен'})
-    r = wb_post('/start', {'env': env_id})
-    return jsonify(r or {'ok': False, 'error': 'мост не отвечает'})
-
-
-@app.route('/c/<env_id>/api/wa/qr')
-def api_wa_qr(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    d = wb_get(f'/qr?env={env_id}')
-    return jsonify({'ok': True, 'qr': (d or {}).get('qr')})
-
-
-@app.route('/c/<env_id>/api/wa/qr.png')
-def api_wa_qr_png(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    d = wb_get(f'/qr?env={env_id}')
-    qr = (d or {}).get('qr')
-    if not qr:
-        return Response('', status=204)
-    if not _qrcode:
-        return Response(qr, mimetype='text/plain')
-    img = _qrcode.make(qr)
-    buf = io.BytesIO()
-    img.save(buf, format='PNG')
-    return Response(buf.getvalue(), mimetype='image/png',
-                    headers={'Cache-Control': 'no-store'})
-
-
-@app.route('/c/<env_id>/api/wa/logout', methods=['POST'])
-def api_wa_logout(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    wb_post('/logout', {'env': env_id})
-    mark_state_dirty()
-    return jsonify({'ok': True})
-
-
-@app.route('/c/<env_id>/api/wa/send', methods=['POST'])
-def api_wa_send(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    p = request.get_json(silent=True) or {}
-    r = wb_post('/send', {'env': env_id, 'jid': p.get('to'), 'text': p.get('text', '')})
-    return jsonify(r or {'ok': False, 'error': 'мост не отвечает'})
-
-
-@app.route('/c/<env_id>/api/wa/history')
-def api_wa_history(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    d = wb_get(f'/history?env={env_id}&limit=60')
-    hist = (d or {}).get('history')
-    if hist is None:
-        hist = env_data.get('wa_log', [])[-60:]
-    return jsonify({'ok': True, 'history': hist})
-
-
-@app.route('/c/<env_id>/api/wa/settings', methods=['POST'])
-def api_wa_settings(env_id):
-    env_data, err = _client_guard(env_id)
-    if err:
-        return err
-    p = request.get_json(silent=True) or {}
-    if 'auto_reply' in p:
-        env_data['settings']['wa_auto_reply'] = bool(p['auto_reply'])
-    if 'groups' in p:
-        env_data['settings']['wa_groups'] = bool(p['groups'])
-    save_env_data(env_id, env_data)
-    return jsonify({'ok': True})
-
-
-# --- события от WA-моста -------------------------------------------------------
-@app.route('/wa/event', methods=['POST'])
-def wa_event():
-    if request.headers.get('x-wa-token') != WA_TOKEN:
-        return jsonify({'ok': False}), 401
-    p = request.get_json(silent=True) or {}
-    env_id, etype, rec = p.get('env'), p.get('type'), p.get('payload') or {}
-    env_data = get_env_data(env_id)
-    if not env_data:
-        return jsonify({'ok': True})
-    if etype == 'status':
-        if rec.get('status') in ('connected', 'logged_out'):
-            mark_state_dirty()
-        return jsonify({'ok': True})
-    if etype == 'message':
-        wa_append_log(env_data, rec)
-        if rec.get('media'):
-            local = os.path.join(MEDIA_DIR, env_id, rec['media']['name'])
-            if os.path.exists(local):
-                threading.Thread(target=upload_file_to_hf,
-                                 args=(local, f'{MEDIA_DIR}/{env_id}/{rec["media"]["name"]}'),
-                                 daemon=True).start()
-        save_env_data(env_id, env_data)
-        if (not rec.get('fromMe') and env_data['settings'].get('wa_auto_reply')
-                and (not rec.get('group') or env_data['settings'].get('wa_groups'))):
-            threading.Thread(target=wa_autoreply_thread, args=(env_id, rec), daemon=True).start()
-    return jsonify({'ok': True})
-
-
-# ---------------------------------------------------------------------------
-# Entrypoint
-# ---------------------------------------------------------------------------
-def _shutdown():
-    try:
-        flush_dirty_envs()
-    except Exception:
-        pass
-    try:
-        if state_snapshot_make():
-            state_snapshot_upload()
-    except Exception:
-        pass
-    global oc_proc, wa_proc
-    for p in (wa_proc, oc_proc):
-        if p and p.poll() is None:
-            try:
-                p.terminate()
-                p.wait(timeout=8)
-            except Exception:
-                try:
-                    p.kill()
-                except Exception:
-                    pass
-
-
-def main():
-    atexit.register(_shutdown)
-    threading.Thread(target=_background_sync_worker, daemon=True).start()
-    threading.Thread(target=_state_snapshot_worker, daemon=True).start()
-
-    if REPO_ID:
-        print("[space] restoring state from dataset...", flush=True)
-        state_snapshot_restore()
-
-    spawn_opencode()
-    spawn_wa_bridge()
-
-    def forward(signum, _frame):
-        _shutdown()
-        sys.exit(0)
-
-    signal.signal(signal.SIGTERM, forward)
-    signal.signal(signal.SIGINT, forward)
-
-    host = os.environ.get("OPENCODE_HOST", "0.0.0.0")
-    port = int(os.environ.get("OPENCODE_PORT", os.environ.get("PORT", "7860")))
-    print(f"[space] flask on {host}:{port}", flush=True)
-    app.run(host=host, port=port, threaded=True, debug=False, use_reloader=False)
-
-
-if __name__ == '__main__':
-    main()