v0.1: Public registration, plan system, user management, remove HF references

admin.html

@@ -379,12 +379,11 @@
       <table>
         <thead>
           <tr>
-            <th>DESIGNATION</th>
-            <th>COMMLINK (EMAIL)</th>
-            <th>NODES</th>
-            <th>CLEARANCE</th>
-            <th>ACCESS</th>
-            <th>DIRECTIVES</th>
+            <th>USERNAME</th>
+            <th>PLAN</th>
+            <th>CREATED</th>
+            <th>STATUS</th>
+            <th>ACTIONS</th>
           </tr>
         </thead>
         <tbody id="usersT"></tbody>
@@ -477,23 +476,30 @@
     function renderUsers(arr) {
       const t = document.getElementById('usersT'); t.innerHTML = '';
       arr.forEach(u => {
+        const planColor = u.plan === 'pro' ? 'var(--accent)' : u.plan === 'enterprise' ? 'var(--warning)' : 'var(--text-dim)';
         t.innerHTML += `
       <tr>
         <td style="font-weight:700">${u.username}</td>
-        <td style="color:var(--text-dim)">${u.email || '—'}</td>
-        <td style="font-family:var(--mono)">${u.servers}</td>
-        <td>${u.premium ? '<span class="tag ok">LVL 5 CLEARANCE</span>' : '<span class="tag">STANDARD</span>'}</td>
-        <td>${u.active ? '<span class="tag ok">GRANTED</span>' : '<span class="tag err">REVOKED</span>'}</td>
+        <td>
+          <select onchange="setPlan('${u.username}', this.value)" style="background:rgba(255,255,255,0.05);border:1px solid var(--border);color:var(--text);padding:6px 10px;border-radius:8px;font-size:12px;cursor:pointer">
+            <option value="free" ${u.plan === 'free' ? 'selected' : ''}>🟢 Free</option>
+            <option value="pro" ${u.plan === 'pro' ? 'selected' : ''}>🔵 Pro</option>
+            <option value="enterprise" ${u.plan === 'enterprise' ? 'selected' : ''}>🟡 Enterprise</option>
+          </select>
+        </td>
+        <td style="color:var(--text-dim);font-size:12px;font-family:var(--mono)">${u.created_at || '—'}</td>
+        <td>${u.active ? '<span class="tag ok">ACTIVE</span>' : '<span class="tag err">BANNED</span>'}</td>
         <td class="nav-actions">
-          <button class="btn ${u.active ? 'btn-danger' : ''}" onclick="setActive('${u.username}', ${u.active ? 'false' : 'true'})">${u.active ? 'REVOKE' : 'GRANT'}</button>
-          <button class="btn" onclick="setPremium('${u.username}', ${u.premium ? 'false' : 'true'})">${u.premium ? 'DEMOTE' : 'CLEARANCE LVL 5'}</button>
+          <button class="btn ${u.active ? 'btn-danger' : ''}" onclick="toggleActive('${u.username}')">${u.active ? 'BAN' : 'UNBAN'}</button>
+          <button class="btn btn-danger" style="opacity:0.6" onclick="deleteUser('${u.username}')">DELETE</button>
         </td>
       </tr>`;
       });
     }
 
-    async function setActive(u, act) { await fetch('/api/admin/user/update', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: u, active: act }) }); refreshUsers(); refreshStats(); }
-    async function setPremium(u, prm) { await fetch('/api/admin/user/update', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: u, premium: prm }) }); refreshUsers(); refreshStats(); }
+    async function toggleActive(u) { await fetch('/api/admin/user/toggle-active', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: u }) }); refreshUsers(); refreshStats(); }
+    async function setPlan(u, plan) { await fetch('/api/admin/user/set-plan', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: u, plan }) }); refreshUsers(); }
+    async function deleteUser(u) { if (!confirm(`DELETE USER '${u}'? This cannot be undone.`)) return; await fetch('/api/admin/user/delete', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ username: u }) }); refreshUsers(); refreshStats(); }
 
     function filterUsers() {
       const q = (document.getElementById('searchUser').value || '').toLowerCase();

app.py

@@ -168,14 +168,34 @@ def current_username():
     return (u.get("username") or "").strip()
 
 
-def get_user_limit(username: str) -> int:
-    if is_admin_session():
-        return 999999
+PLANS = {
+    "free": {"label": "Free", "max_bots": 1, "max_mem_mb": 256},
+    "pro": {"label": "Pro", "max_bots": 5, "max_mem_mb": 512},
+    "enterprise": {"label": "Enterprise", "max_bots": 50, "max_mem_mb": 1024},
+}
+
+
+def get_user_plan(username: str) -> dict:
     db = load_users()
     u = find_user(db, username)
     if not u:
-        return 1
-    return 5 if u.get("premium", False) else 1
+        return PLANS["free"]
+    plan_name = u.get("plan", "free")
+    return PLANS.get(plan_name, PLANS["free"])
+
+
+def get_user_limit(username: str) -> int:
+    if is_admin_session():
+        return 999999
+    plan = get_user_plan(username)
+    return plan["max_bots"]
+
+
+def get_user_mem_limit(username: str) -> int:
+    if is_admin_session():
+        return MAX_PROCESS_MEMORY_MB
+    plan = get_user_plan(username)
+    return plan["max_mem_mb"]
 
 
 def login_required(fn):
@@ -515,9 +535,120 @@ def api_login():
     return jsonify({"success": True, "is_admin": False})
 
 
-@app.route("/api/auth/create", methods=["POST"])
-def api_create():
-    return jsonify({"success": False, "message": "Registration disabled. Personal use only."}), 403
+@app.route("/api/auth/register", methods=["POST"])
+@rate_limited
+def api_register():
+    data = request.get_json(silent=True) or {}
+    username = (data.get("username") or "").strip()
+    password = data.get("password") or ""
+
+    if len(username) < 3 or len(username) > 20:
+        return jsonify({"success": False, "message": "Username must be 3-20 characters"}), 400
+    if not re.match(r'^[A-Za-z0-9_]+$', username):
+        return jsonify({"success": False, "message": "Username: letters, numbers, underscore only"}), 400
+    if len(password) < 6:
+        return jsonify({"success": False, "message": "Password must be at least 6 characters"}), 400
+    if username.lower() == ADMIN_USERNAME.lower():
+        return jsonify({"success": False, "message": "Username not available"}), 400
+
+    db = load_users()
+    if find_user(db, username):
+        return jsonify({"success": False, "message": "Username already taken"}), 409
+
+    new_user = {
+        "username": username,
+        "password_hash": generate_password_hash(password),
+        "active": True,
+        "plan": "free",
+        "created_at": time.strftime("%Y-%m-%d %H:%M:%S")
+    }
+    db.setdefault("users", []).append(new_user)
+    save_users(db)
+
+    session["user"] = {"username": username, "is_admin": False}
+    session.permanent = True
+    ensure_user_dirs(username)
+    logger.info(f"New user registered: {username}")
+    return jsonify({"success": True})
+
+
+@app.route("/api/user/profile")
+@login_required
+def api_user_profile():
+    username = current_username()
+    db = load_users()
+    u = find_user(db, username)
+    plan_name = "admin" if is_admin_session() else (u.get("plan", "free") if u else "free")
+    plan_info = PLANS.get(plan_name, PLANS["free"])
+    return jsonify({
+        "success": True,
+        "username": username,
+        "is_admin": is_admin_session(),
+        "plan": plan_name,
+        "plan_label": plan_info.get("label", plan_name.title()),
+        "max_bots": get_user_limit(username),
+        "max_mem_mb": get_user_mem_limit(username)
+    })
+
+
+@app.route("/api/admin/users")
+@admin_required
+def api_admin_users():
+    db = load_users()
+    users = []
+    for u in db.get("users", []):
+        users.append({
+            "username": u.get("username"),
+            "active": u.get("active", True),
+            "plan": u.get("plan", "free"),
+            "created_at": u.get("created_at", "unknown")
+        })
+    return jsonify({"success": True, "users": users})
+
+
+@app.route("/api/admin/user/set-plan", methods=["POST"])
+@admin_required
+def api_admin_set_plan():
+    data = request.get_json(silent=True) or {}
+    username = (data.get("username") or "").strip()
+    plan = (data.get("plan") or "free").strip()
+    if plan not in PLANS:
+        return jsonify({"success": False, "message": "Invalid plan"}), 400
+    db = load_users()
+    u = find_user(db, username)
+    if not u:
+        return jsonify({"success": False, "message": "User not found"}), 404
+    u["plan"] = plan
+    save_users(db)
+    return jsonify({"success": True})
+
+
+@app.route("/api/admin/user/toggle-active", methods=["POST"])
+@admin_required
+def api_admin_toggle_active():
+    data = request.get_json(silent=True) or {}
+    username = (data.get("username") or "").strip()
+    db = load_users()
+    u = find_user(db, username)
+    if not u:
+        return jsonify({"success": False, "message": "User not found"}), 404
+    u["active"] = not u.get("active", True)
+    save_users(db)
+    return jsonify({"success": True, "active": u["active"]})
+
+
+@app.route("/api/admin/user/delete", methods=["POST"])
+@admin_required
+def api_admin_delete_user():
+    data = request.get_json(silent=True) or {}
+    username = (data.get("username") or "").strip()
+    db = load_users()
+    u = find_user(db, username)
+    if not u:
+        return jsonify({"success": False, "message": "User not found"}), 404
+    db["users"] = [x for x in db.get("users", []) if (x.get("username") or "").strip().lower() != username.lower()]
+    save_users(db)
+    return jsonify({"success": True})
 
 
 def list_all_servers_for_admin():

index.html

@@ -701,7 +701,7 @@
         <img src="https://f.top4top.io/p_37210bgwm1.jpg" alt="Logo" class="brand-logo">
         <div class="brand-info">
           <span class="brand-name">الذئب الابيض</span>
-          <span class="brand-status" id="sysAddr">CONNECTING...</span>
+          <span class="brand-status">v0.1 · SECURE</span>
         </div>
       </div>
       <div class="nav-actions">
@@ -833,20 +833,7 @@
     function escapeHtml(s) { return (s || '').replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#039;"); }
     function escapeAttr(s) { return escapeHtml(s).replace(/\\/g, "\\\\"); }
 
-    async function loadPythonHost() {
-      const addr = document.getElementById('sysAddr');
-      try {
-        const r = await fetch('/servers');
-        if (r.redirected) { location.href = r.url; return; }
-        const d = await r.json();
-        const port = location.port || (location.protocol === 'https:' ? 443 : 80);
-        if (!d.servers || d.servers.length === 0) { addr.textContent = `${location.hostname}:${port}`; return; }
-        const key = d.servers[0].key || d.servers[0].folder;
-        const s = await fetch(`/server/stats/${encodeURIComponent(key)}`);
-        const sd = await s.json();
-        addr.textContent = `${sd.ip || location.hostname}:${port}`;
-      } catch (e) { addr.textContent = `${location.hostname}:EXT`; }
-    }
+
 
     async function loadServers() {
       const r = await fetch('/servers');
@@ -1012,7 +999,7 @@
       if (d.success) { closeM(); loadServers(); toast('Engine created', 'success'); } else toast(d.message, 'error');
     });
 
-    document.addEventListener('DOMContentLoaded', () => { loadServers(); loadPythonHost(); });
+    document.addEventListener('DOMContentLoaded', () => { loadServers(); });
     setInterval(() => { if (document.getElementById('homeView').style.display !== 'none') loadServers(); }, 10000);
 
     document.addEventListener('contextmenu', e => e.preventDefault());

login.html

@@ -18,6 +18,7 @@
       --text-muted: #8E8E93;
       --border: rgba(255, 255, 255, 0.08);
       --error: #FF453A;
+      --success: #32D74B;
     }
 
     * {
@@ -38,7 +39,6 @@
       position: relative;
     }
 
-    /* Animated background elements */
     body::before {
       content: '';
       position: absolute;
@@ -77,7 +77,7 @@
 
     .container {
       width: 100%;
-      max-width: 400px;
+      max-width: 420px;
       padding: 20px;
       position: relative;
       z-index: 10;
@@ -169,8 +169,50 @@
       letter-spacing: 0.1em;
     }
 
+    .tabs {
+      display: flex;
+      gap: 4px;
+      margin-bottom: 28px;
+      background: rgba(255, 255, 255, 0.05);
+      border-radius: 14px;
+      padding: 4px;
+    }
+
+    .tab {
+      flex: 1;
+      padding: 12px;
+      border: none;
+      background: transparent;
+      color: var(--text-muted);
+      font-size: 14px;
+      font-weight: 700;
+      cursor: pointer;
+      border-radius: 12px;
+      transition: all 0.3s;
+      font-family: 'Plus Jakarta Sans', sans-serif;
+      letter-spacing: 0.05em;
+    }
+
+    .tab.active {
+      background: var(--primary);
+      color: white;
+      box-shadow: 0 4px 15px rgba(10, 132, 255, 0.3);
+    }
+
+    .tab:hover:not(.active) {
+      color: var(--text);
+    }
+
+    .form-section {
+      display: none;
+    }
+
+    .form-section.active {
+      display: block;
+    }
+
     .input-group {
-      margin-bottom: 16px;
+      margin-bottom: 14px;
       position: relative;
     }
 
@@ -223,8 +265,18 @@
       transform: translateY(0);
     }
 
+    .btn-secondary {
+      background: rgba(255, 255, 255, 0.08);
+      margin-top: 8px;
+    }
+
+    .btn-secondary:hover {
+      background: rgba(255, 255, 255, 0.15);
+      box-shadow: none;
+    }
+
     .msg {
-      margin-top: 24px;
+      margin-top: 20px;
       font-size: 13px;
       font-weight: 500;
       min-height: 20px;
@@ -232,14 +284,13 @@
     }
 
     .footer {
-      margin-top: 40px;
+      margin-top: 36px;
       color: rgba(255, 255, 255, 0.2);
       font-size: 11px;
       font-family: 'JetBrains Mono', monospace;
       letter-spacing: 0.05em;
     }
 
-    /* Fancy Loading bar */
     .loading-bar {
       position: absolute;
       bottom: 0;
@@ -260,6 +311,42 @@
         transform: translateX(100%);
       }
     }
+
+    .plans-info {
+      margin-top: 16px;
+      text-align: left;
+    }
+
+    .plan-row {
+      display: flex;
+      justify-content: space-between;
+      align-items: center;
+      padding: 10px 14px;
+      border-radius: 12px;
+      margin-bottom: 6px;
+      background: rgba(255, 255, 255, 0.03);
+      border: 1px solid var(--border);
+      font-size: 13px;
+    }
+
+    .plan-name {
+      font-weight: 700;
+      color: var(--text);
+    }
+
+    .plan-detail {
+      color: var(--text-muted);
+      font-family: 'JetBrains Mono', monospace;
+      font-size: 11px;
+    }
+
+    .plan-free {
+      border-color: rgba(50, 215, 75, 0.3);
+    }
+
+    .plan-pro {
+      border-color: rgba(10, 132, 255, 0.3);
+    }
   </style>
 </head>
 
@@ -271,93 +358,153 @@
         <img src="https://f.top4top.io/p_37210bgwm1.jpg" alt="Logo" class="logo-img">
       </div>
       <h1>الذئب الابيض</h1>
-      <div class="subtitle">System Authentication</div>
+      <div class="subtitle">Bot Hosting Platform</div>
 
-      <div class="input-group">
-        <input id="u" placeholder="Designation (Username)" autocomplete="username">
+      <div class="tabs">
+        <button class="tab active" onclick="switchTab('login')">LOGIN</button>
+        <button class="tab" onclick="switchTab('register')">REGISTER</button>
       </div>
-      <div class="input-group">
-        <input id="p" placeholder="Passcode" type="password" autocomplete="current-password">
+
+      <!-- LOGIN -->
+      <div class="form-section active" id="loginForm">
+        <div class="input-group">
+          <input id="lu" placeholder="Username" autocomplete="username">
+        </div>
+        <div class="input-group">
+          <input id="lp" placeholder="Password" type="password" autocomplete="current-password">
+        </div>
+        <button class="btn" onclick="doLogin()">
+          <span id="loginBtnText">AUTHENTICATE</span>
+          <div class="loading-bar" id="loginLoad"></div>
+        </button>
       </div>
 
-      <button class="btn" onclick="doLogin()">
-        <span id="btnText">AUTHENTICATE</span>
-        <div class="loading-bar" id="loadBar"></div>
-      </button>
+      <!-- REGISTER -->
+      <div class="form-section" id="registerForm">
+        <div class="input-group">
+          <input id="ru" placeholder="Choose a username" autocomplete="off" minlength="3" maxlength="20">
+        </div>
+        <div class="input-group">
+          <input id="rp" placeholder="Create a password" type="password" autocomplete="new-password" minlength="6">
+        </div>
+        <div class="input-group">
+          <input id="rp2" placeholder="Confirm password" type="password" autocomplete="new-password">
+        </div>
+        <button class="btn" onclick="doRegister()">
+          <span id="regBtnText">CREATE ACCOUNT</span>
+          <div class="loading-bar" id="regLoad"></div>
+        </button>
+        <div class="plans-info">
+          <div class="plan-row plan-free">
+            <span class="plan-name">🟢 Free</span>
+            <span class="plan-detail">1 BOT · 256MB RAM</span>
+          </div>
+          <div class="plan-row plan-pro">
+            <span class="plan-name">🔵 Pro</span>
+            <span class="plan-detail">5 BOTS · 512MB RAM</span>
+          </div>
+        </div>
+      </div>
 
       <div class="msg" id="m"></div>
 
       <div class="footer">
-        © 2026 WHITE WOLF PROTOCOL [v2.4.0]<br>
+        © 2026 WHITE WOLF PROTOCOL [v0.1]<br>
         PROTECTED BY @j49_c
       </div>
     </div>
   </div>
 
   <script>
+    function switchTab(tab) {
+      document.querySelectorAll('.tab').forEach((t, i) => { t.classList.toggle('active', (tab === 'login' ? i === 0 : i === 1)); });
+      document.getElementById('loginForm').classList.toggle('active', tab === 'login');
+      document.getElementById('registerForm').classList.toggle('active', tab === 'register');
+      document.getElementById('m').textContent = '';
+    }
+
     async function doLogin() {
       const m = document.getElementById('m');
-      const lb = document.getElementById('loadBar');
-      const bt = document.getElementById('btnText');
-
-      m.textContent = '';
-      lb.style.display = 'block';
-      bt.textContent = 'CONNECTING...';
+      const lb = document.getElementById('loginLoad');
+      const bt = document.getElementById('loginBtnText');
+      m.textContent = ''; lb.style.display = 'block'; bt.textContent = 'CONNECTING...';
 
-      const username = document.getElementById('u').value.trim();
-      const password = document.getElementById('p').value;
+      const username = document.getElementById('lu').value.trim();
+      const password = document.getElementById('lp').value;
 
       try {
         const r = await fetch('/api/auth/login', {
-          method: 'POST',
-          headers: { 'Content-Type': 'application/json' },
+          method: 'POST', headers: { 'Content-Type': 'application/json' },
           body: JSON.stringify({ username, password })
         });
-        const d = await r.json().catch(() => ({ success: false, message: 'Encryption mismatch' }));
-
+        const d = await r.json().catch(() => ({ success: false, message: 'Connection error' }));
         if (!r.ok || !d.success) {
           m.style.color = "var(--error)";
-          m.textContent = (d.message || 'Verification Failed').toUpperCase();
-          lb.style.display = 'none';
-          bt.textContent = 'AUTHENTICATE';
+          m.textContent = (d.message || 'Authentication Failed').toUpperCase();
+          lb.style.display = 'none'; bt.textContent = 'AUTHENTICATE';
           return;
         }
-
-        m.style.color = "#32D74B";
-        m.textContent = 'ACCESS GRANTED. INITIALIZING...';
+        m.style.color = "var(--success)";
+        m.textContent = 'ACCESS GRANTED';
         bt.textContent = 'INITIALIZING...';
+        setTimeout(() => { window.location.href = d.is_admin ? './admin' : './'; }, 600);
+      } catch (e) {
+        m.style.color = "var(--error)"; m.textContent = "CONNECTION ERROR";
+        lb.style.display = 'none'; bt.textContent = 'RETRY';
+      }
+    }
+
+    async function doRegister() {
+      const m = document.getElementById('m');
+      const lb = document.getElementById('regLoad');
+      const bt = document.getElementById('regBtnText');
+      m.textContent = '';
+
+      const username = document.getElementById('ru').value.trim();
+      const password = document.getElementById('rp').value;
+      const password2 = document.getElementById('rp2').value;
+
+      if (username.length < 3) { m.style.color = "var(--error)"; m.textContent = "USERNAME MIN 3 CHARACTERS"; return; }
+      if (password.length < 6) { m.style.color = "var(--error)"; m.textContent = "PASSWORD MIN 6 CHARACTERS"; return; }
+      if (password !== password2) { m.style.color = "var(--error)"; m.textContent = "PASSWORDS DO NOT MATCH"; return; }
 
-        setTimeout(() => {
-          window.location.href = d.is_admin ? './admin' : './';
-        }, 800);
+      lb.style.display = 'block'; bt.textContent = 'CREATING...';
+
+      try {
+        const r = await fetch('/api/auth/register', {
+          method: 'POST', headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ username, password })
+        });
+        const d = await r.json().catch(() => ({ success: false, message: 'Connection error' }));
+        if (!r.ok || !d.success) {
+          m.style.color = "var(--error)";
+          m.textContent = (d.message || 'Registration Failed').toUpperCase();
+          lb.style.display = 'none'; bt.textContent = 'CREATE ACCOUNT';
+          return;
+        }
+        m.style.color = "var(--success)";
+        m.textContent = 'ACCOUNT CREATED. REDIRECTING...';
+        bt.textContent = 'SUCCESS';
+        setTimeout(() => { window.location.href = './'; }, 600);
       } catch (e) {
-        m.style.color = "var(--error)";
-        m.textContent = "UPLINK ERROR";
-        lb.style.display = 'none';
-        bt.textContent = 'RETRY';
+        m.style.color = "var(--error)"; m.textContent = "CONNECTION ERROR";
+        lb.style.display = 'none'; bt.textContent = 'RETRY';
       }
     }
 
-    // --- SECURITY PROTOCOL: ANTI-INSPECTION ---
     document.addEventListener('contextmenu', e => e.preventDefault());
     document.onkeydown = function (e) {
-      if (e.keyCode == 123) return false; // F12
+      if (e.keyCode == 123) return false;
       if (e.ctrlKey && e.shiftKey && (e.keyCode == 'I'.charCodeAt(0) || e.keyCode == 'J'.charCodeAt(0) || e.keyCode == 'C'.charCodeAt(0))) return false;
-      if (e.ctrlKey && e.keyCode == 'U'.charCodeAt(0)) return false; // View Source
+      if (e.ctrlKey && e.keyCode == 'U'.charCodeAt(0)) return false;
     };
+    setInterval(() => { const s = performance.now(); debugger; if (performance.now() - s > 100) window.location.href = "about:blank"; }, 500);
 
-    // Debugger trap to hinder devtools
-    setInterval(() => {
-      const start = performance.now();
-      debugger;
-      if (performance.now() - start > 100) {
-        window.location.href = "about:blank";
-      }
-    }, 500);
-
-    // Hit enter to login
     document.addEventListener('keypress', (e) => {
-      if (e.key === 'Enter') doLogin();
+      if (e.key === 'Enter') {
+        if (document.getElementById('loginForm').classList.contains('active')) doLogin();
+        else doRegister();
+      }
     });
   </script>
 </body>