app.js

// Elements
const themeToggle = document.getElementById('themeToggle');
const sunIcon = document.getElementById('sunIcon');
const moonIcon = document.getElementById('moonIcon');
const uploadView = document.getElementById('uploadView');
const accessView = document.getElementById('accessView');
const uploadForm = document.getElementById('uploadForm');
const fileInput = document.getElementById('fileInput');
const dropzone = document.getElementById('dropzone');
const fileNameDisplay = document.getElementById('fileNameDisplay');
const uploadBtn = document.getElementById('uploadBtn');
const uploadError = document.getElementById('uploadError');
const uploadSuccess = document.getElementById('uploadSuccess');
const resultUrl = document.getElementById('resultUrl');
const resultPin = document.getElementById('resultPin');
const customUrlInput = document.getElementById('customUrl');
const resetBtn = document.getElementById('resetBtn');

const accessForm = document.getElementById('accessForm');
const pinInput = document.getElementById('pinInput');
const accessUrlDisplay = document.getElementById('accessUrlDisplay');
const accessError = document.getElementById('accessError');
const downloadBtn = document.getElementById('downloadBtn');
const nukeBtn = document.getElementById('nukeBtn');

let turnstileToken = null;
let currentFile = null;
const MAX_FILE_SIZE = 1 * 1024 * 1024; // 1MB
const HOSTNAME = window.location.hostname === 'localhost' || window.location.hostname === '127.0.0.1' ? window.location.host : 'temp-pdf.pages.dev';

// Theme toggling
function toggleTheme() {
    const isDark = document.body.classList.toggle('dark-mode');
    document.body.classList.toggle('light-mode', !isDark);
    sunIcon.classList.toggle('hidden', !isDark);
    moonIcon.classList.toggle('hidden', isDark);
    localStorage.setItem('theme', isDark ? 'dark' : 'light');
}

// Initialize theme
if (localStorage.getItem('theme') === 'dark' || (!localStorage.getItem('theme') && window.matchMedia('(prefers-color-scheme: dark)').matches)) {
    toggleTheme();
}
themeToggle.addEventListener('click', toggleTheme);

// Turnstile Callback
window.onTurnstileSuccess = function (token) {
    turnstileToken = token;
    validateUploadForm();
};

// Form Validation
function validateUploadForm() {
    const isFileValid = currentFile && currentFile.size <= MAX_FILE_SIZE;
    const isUrlValid = customUrlInput.value.trim().length > 0;
    // We only require turnstile token if there is one configured
    const isTokenValid = document.querySelector('.cf-turnstile') ? !!turnstileToken : true;

    uploadBtn.disabled = !(isFileValid && isUrlValid && isTokenValid);
}

// File Drag & Drop logic
dropzone.addEventListener('dragover', (e) => {
    e.preventDefault();
    dropzone.classList.add('dragover');
});
dropzone.addEventListener('dragleave', () => dropzone.classList.remove('dragover'));
dropzone.addEventListener('drop', (e) => {
    e.preventDefault();
    dropzone.classList.remove('dragover');
    if (e.dataTransfer.files.length) handleFileSelection(e.dataTransfer.files[0]);
});
fileInput.addEventListener('change', (e) => {
    if (e.target.files.length) handleFileSelection(e.target.files[0]);
});

function handleFileSelection(file) {
    if (file.size > MAX_FILE_SIZE) {
        showError(uploadError, "File exceeds 1MB limit.");
        currentFile = null;
        fileNameDisplay.textContent = "Click or drag a file to upload";
        dropzone.classList.remove('success');
        customUrlInput.parentElement.classList.remove('url-ready');
    } else if (!['application/pdf', 'text/plain'].includes(file.type)) {
        showError(uploadError, "Only PDF and TXT files are allowed.");
        currentFile = null;
        fileNameDisplay.textContent = "Click or drag a file to upload";
        dropzone.classList.remove('success');
        customUrlInput.parentElement.classList.remove('url-ready');
    } else {
        uploadError.textContent = "";
        currentFile = file;
        fileNameDisplay.textContent = file.name;
        dropzone.classList.add('success');
        customUrlInput.parentElement.classList.add('url-ready');
    }

    // Reset input so `change` event fires even if the same file is chosen again
    fileInput.value = '';

    validateUploadForm();
}

customUrlInput.addEventListener('input', validateUploadForm);

function showError(el, msg) {
    el.textContent = msg;
    setTimeout(() => el.textContent = "", 5000);
}

// Upload Submission
uploadForm.addEventListener('submit', async (e) => {
    e.preventDefault();
    if (uploadBtn.disabled) return;

    uploadBtn.disabled = true;
    uploadBtn.textContent = "Uploading...";
    uploadError.textContent = "";

    try {
        const formData = new FormData();
        formData.append('file', currentFile);
        formData.append('url', customUrlInput.value.trim());

        const selectedTtl = document.querySelector('input[name="ttl"]:checked').value;
        formData.append('ttl', selectedTtl);

        if (turnstileToken) formData.append('cf-turnstile-response', turnstileToken);

        const response = await fetch('/api/upload', {
            method: 'POST',
            body: formData
        });

        const data = await response.json();

        if (!response.ok) {
            throw new Error(data.error || 'Upload failed');
        }

        // Show Success
        uploadForm.classList.add('hidden');
        uploadSuccess.classList.remove('hidden');
        resultUrl.textContent = `${HOSTNAME}/${data.url}`;
        resultPin.textContent = data.pin;

    } catch (err) {
        showError(uploadError, err.message);
        uploadBtn.disabled = false;
        uploadBtn.textContent = "Upload File";
    }
});

function resetUpload() {
    currentFile = null;
    fileNameDisplay.textContent = "Click or drag a file to upload";
    dropzone.classList.remove('success');
    customUrlInput.parentElement.classList.remove('url-ready');
    customUrlInput.value = "";
    turnstileToken = null;
    if (window.turnstile) turnstile.reset();
    uploadForm.classList.remove('hidden');
    uploadSuccess.classList.add('hidden');
    uploadBtn.disabled = true;
    uploadBtn.textContent = "Upload File";
}

resetBtn.addEventListener('click', resetUpload);

// Routing logic
async function checkRoute() {
    const path = window.location.pathname.substring(1).split('/')[0];

    if (path && path !== "api" && path !== "index.html") {
        // We are on a custom URL
        uploadView.classList.add('hidden');
        accessView.classList.remove('hidden');
        accessUrlDisplay.textContent = path;

        // Check if URL actually exists
        try {
            const res = await fetch(`/api/check/${path}`);
            if (res.status === 404) {
                accessSubtitle.textContent = "File not found or expired.";
                accessForm.classList.add('hidden');
            }
        } catch (e) { /* ignore network errors here, let user try pin */ }
    }
}

checkRoute();

// Access & Download Logic
accessForm.addEventListener('submit', async (e) => {
    e.preventDefault();
    downloadBtn.disabled = true;
    accessError.textContent = "";

    const url = accessUrlDisplay.textContent;
    const pin = pinInput.value;

    if (pin.length !== 2) {
        showError(accessError, "Enter 2-digit PIN.");
        downloadBtn.disabled = false;
        return;
    }

    try {
        downloadBtn.textContent = "Verifying...";

        // Step 1: Synchronously open a blank window (critical for Safari popup blocker)
        // This must remain in the same execution cycle as the button click event
        const newWindow = window.open('', '_blank');

        // Step 2: Verify PIN via secure POST and get a one-time token
        const res = await fetch(`/api/verify/${url}`, {
            method: 'POST',
            headers: { 'Content-Type': 'application/json' },
            body: JSON.stringify({ pin })
        });

        const data = await res.json();

        if (!res.ok) {
            // Close the blank window if verification fails
            if (newWindow) newWindow.close();
            throw new Error(data.error || "Access Denied");
        }

        // Step 3: Use the pre-opened window to navigate to the file
        // Adding download=1 will hint the browser (especially iOS Safari) to download the file directly on mobile
        const isMobile = /Android|webOS|iPhone|iPad|iPod|BlackBerry|IEMobile|Opera Mini/i.test(navigator.userAgent);
        const downloadUrl = `/api/get/${url}?token=${data.token}${isMobile ? '&download=1' : ''}`;

        downloadBtn.textContent = "Opening...";

        if (newWindow) {
            newWindow.location.href = downloadUrl;
        } else {
            // Fallback if the popup blocker somehow still blocked it (e.g. strict settings)
            window.location.href = downloadUrl;
        }

        setTimeout(() => {
            downloadBtn.textContent = "Download / View";
            downloadBtn.disabled = false;
        }, 2000);

    } catch (err) {
        pinInput.classList.remove('pin-error');
        void pinInput.offsetWidth; // trigger reflow
        pinInput.classList.add('pin-error');
        showError(accessError, err.message);
        downloadBtn.disabled = false;
        downloadBtn.textContent = "Download / View";
    }
});

nukeBtn.addEventListener('click', async () => {
    const url = accessUrlDisplay.textContent;
    const pin = pinInput.value;

    if (pin.length !== 2) {
        showError(accessError, "Enter PIN to delete.");
        return;
    }

    if (!confirm("Are you sure you want to instantly delete this file?")) return;

    nukeBtn.disabled = true;
    nukeBtn.textContent = "Deleting...";

    try {
        const res = await fetch(`/api/delete/${url}`, {
            method: 'DELETE',
            headers: { 'Content-Type': 'application/json' },
            body: JSON.stringify({ pin })
        });

        if (!res.ok) {
            const data = await res.json();
            throw new Error(data.error || "Failed to delete");
        }

        accessSubtitle.textContent = "File has been deleted.";
        accessForm.classList.add('hidden');

    } catch (err) {
        pinInput.classList.remove('pin-error');
        void pinInput.offsetWidth; // trigger reflow
        pinInput.classList.add('pin-error');
        showError(accessError, err.message);
        nukeBtn.disabled = false;
        nukeBtn.textContent = "Delete Now";
    }
});