#!/bin/sh
# Author : SiberMimar "Guray Avci" | Website: www.sibermimar.com.tr
cat <<'EOF'
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Montserrat:wght@300;500&display=swap" rel="stylesheet">
<style>
.sr-app,.sr-app *{box-sizing:border-box;font-family:'Montserrat',Arial,sans-serif}.sr-app{padding:20px;max-width:1500px;color:#0f172a}.sr-card{background:#fff;border:1px solid #e2e8f0;border-radius:18px;box-shadow:0 10px 24px rgba(15,23,42,.05)}.sr-header{display:flex;justify-content:space-between;align-items:center;gap:16px;flex-wrap:wrap;padding:18px 20px}.sr-brand{display:flex;align-items:center;gap:14px}.sr-brand img{width:64px;height:64px;object-fit:contain}.sr-title{margin:0;font-size:28px;font-weight:500}.sr-sub{margin:6px 0 0 0;color:#64748b;font-weight:300}.sr-chip{padding:8px 12px;border-radius:999px;background:#f8fafc;border:1px solid #e2e8f0;font-size:12px}.sr-tabs{display:flex;gap:8px;flex-wrap:wrap;padding:0 20px 20px}.sr-tabs button,.sr-tabs a,.sr-btn{padding:10px 14px;border-radius:999px;border:1px solid #d1d5db;background:#fff;color:#111827;text-decoration:none;cursor:pointer}.sr-tabs button.active{background:#111827;color:#fff}.sr-grid{display:grid;grid-template-columns:repeat(4,minmax(180px,1fr));gap:12px;padding:0 20px 20px}.sr-metric{padding:14px 16px}.sr-metric strong{display:block;font-size:28px;font-weight:500;margin-top:8px}.sr-panel{display:none;padding:0 20px 20px}.sr-panel.active{display:block}.sr-toolbar{display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap;margin-bottom:12px}.sr-search{padding:10px 12px;border:1px solid #d1d5db;border-radius:10px;min-width:260px}.sr-table-wrap{overflow:auto;border:1px solid #e2e8f0;border-radius:16px}.sr-table{width:100%;border-collapse:collapse;min-width:980px}.sr-table th,.sr-table td{padding:12px 14px;border-bottom:1px solid #e5e7eb;text-align:left;vertical-align:top}.sr-table th{font-weight:500;background:#f8fafc}.sr-actions{display:flex;gap:8px;flex-wrap:wrap}.sr-actions button{padding:8px 10px;border-radius:10px;border:1px solid #d1d5db;background:#fff;cursor:pointer}.sr-actions .danger{border-color:#fecaca;background:#fff1f2;color:#991b1b}.sr-msg{display:none;margin:0 20px 18px;padding:12px 14px;border-radius:12px}.sr-msg.ok{background:#ecfdf5;border:1px solid #a7f3d0;color:#065f46}.sr-msg.err{background:#fff1f2;border:1px solid #fecaca;color:#991b1b}.sr-modal{position:fixed;inset:0;background:rgba(15,23,42,.45);display:none;align-items:center;justify-content:center;padding:20px;z-index:9999}.sr-modal.open{display:flex}.sr-dialog{width:min(760px,100%);max-height:90vh;overflow:auto;padding:20px}.sr-form{display:grid;gap:12px}.sr-form label{display:grid;gap:6px;font-size:14px}.sr-form input,.sr-form select,.sr-form textarea{padding:10px 12px;border:1px solid #d1d5db;border-radius:10px}.sr-row{display:grid;grid-template-columns:1fr 1fr;gap:12px}.sr-check{display:flex !important;align-items:center;gap:8px;padding:10px 12px;border:1px solid #e2e8f0;border-radius:10px;cursor:pointer}.sr-check input{width:16px;height:16px}.sr-help{margin:0;color:#64748b;font-size:12px;line-height:1.5}.sr-footer{margin-top:18px;padding:14px 20px 18px;color:#64748b;border-top:1px solid #e2e8f0;font-size:12px;display:flex;justify-content:space-between;gap:12px;flex-wrap:wrap}.sr-footer a{color:#334155;text-decoration:none}.sr-empty{padding:18px;color:#64748b}.sr-steps{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:14px}.sr-step{padding:8px 12px;border-radius:999px;border:1px solid #d1d5db;background:#fff;font-size:12px}.sr-step.active{background:#111827;color:#fff;border-color:#111827}.sr-hidden{display:none !important}.sr-hierarchy{margin:0 0 16px;padding:14px;border:1px solid #cbd5e1;border-radius:14px;background:#f8fafc}.sr-hierarchy-note{margin:0 0 10px;color:#475569;font-size:12px}.sr-tree{margin:0;padding:0;list-style:none}.sr-tree ul{margin:8px 0 0 22px;padding-left:14px;border-left:1px solid #cbd5e1;list-style:none}.sr-tree-node{display:flex;align-items:center;justify-content:space-between;gap:10px;padding:10px 12px;border:1px solid #dbe3ed;border-radius:10px;background:#fff}.sr-tree-node[draggable="true"]{cursor:grab}.sr-tree-node.sr-drop-target{outline:2px dashed #2563eb;outline-offset:2px}.sr-tree-node.sr-admin-node{background:#172554;color:#fff;border-color:#172554}.sr-tree-meta{color:#64748b;font-size:12px}.sr-admin-node .sr-tree-meta{color:#dbeafe}
</style>
<div class="sr-app">
  <div class="sr-card">
    <div class="sr-header">
      <div class="sr-brand">
        <img src="/CMD_PLUGINS_ADMIN/SibeROOT/images/siberoot-logo-square.png" alt="SibeROOT">
        <div>
          <h1 class="sr-title">SibeROOT</h1>
          <p class="sr-sub">Hesap, bayi, paket ve yedek yönetimi</p>
        </div>
      </div>
      <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;">
        <span id="runtime-pill" class="sr-chip">Runtime hazırlanıyor...</span>
        <button id="reload-all" class="sr-btn" type="button">Yenile</button>
      </div>
    </div>
    <div id="message" class="sr-msg"></div>
    <div class="sr-grid">
      <div class="sr-card sr-metric"><span>Toplam SibeROOT hesap</span><strong id="m-accounts">-</strong></div>
      <div class="sr-card sr-metric"><span>SibeROOT reseller</span><strong id="m-resellers">-</strong></div>
      <div class="sr-card sr-metric"><span>Sistem reseller</span><strong id="m-system-resellers">-</strong></div>
      <div class="sr-card sr-metric"><span>Paket</span><strong id="m-packages">-</strong></div>
    </div>
    <div class="sr-tabs">
      <button class="active" data-tab="accounts" type="button">SibeROOT Hesapları</button>
      <button data-tab="resellers" type="button">Bayiler</button>
      <button data-tab="packages" type="button">Paketler</button>
      <button data-tab="settings" type="button">Ayarlar</button>
      <button data-tab="audit" type="button">Audit</button>
      <a href="/CMD_PLUGINS_ADMIN/SibeROOT/backup.html">Yedek</a>
    </div>

    <section class="sr-panel active" data-panel="accounts">
      <div class="sr-hierarchy"><strong>SibeROOT bayi hiyerarşisi</strong><p class="sr-hierarchy-note">Bir reseller düğümünü başka bir SibeROOT reseller'a veya DirectAdmin admin köküne sürükleyip bırakın. Bu işlem yalnız SibeROOT mantıksal owner ilişkisini değiştirir; DirectAdmin native reseller sahibi admin olarak kalır.</p><div id="hierarchy-tree" class="sr-tree"></div></div>
      <div class="sr-toolbar">
        <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center;">
          <button id="open-create" class="sr-btn" type="button">Hesap / bayi oluştur</button>
          <input id="account-search" class="sr-search" placeholder="Kullanıcı, domain, paket ara">
        </div>
      </div>
      <div class="sr-table-wrap"><table class="sr-table"><thead><tr><th>Kullanıcı</th><th>Tür</th><th>Alan adı</th><th>Paket</th><th>Owner</th><th>Durum</th><th>İşlem</th></tr></thead><tbody id="accounts-body"><tr><td colspan="7" class="sr-empty">Yükleniyor...</td></tr></tbody></table></div>
    </section>

    <section class="sr-panel" data-panel="resellers">
      <div class="sr-toolbar"><div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;"><input id="reseller-search" class="sr-search" placeholder="Sistem reseller ara"></div></div>
      <div class="sr-table-wrap"><table class="sr-table"><thead><tr><th>Kullanıcı</th><th>E-posta</th><th>Domain</th><th>DA Paket</th><th>SibeROOT</th><th>İşlem</th></tr></thead><tbody id="resellers-body"><tr><td colspan="6" class="sr-empty">Yükleniyor...</td></tr></tbody></table></div>
    </section>

    <section class="sr-panel" data-panel="packages">
      <div class="sr-toolbar"><strong>Paketler</strong><div style="display:flex;gap:8px;flex-wrap:wrap;"><button id="open-create-package" class="sr-btn" type="button">Yeni paket</button><button id="sync-packages" class="sr-btn" type="button">DA paketlerini oku</button></div></div>
      <div class="sr-table-wrap"><table class="sr-table"><thead><tr><th>Kod</th><th>Ad</th><th>Tür</th><th>DA paketi</th><th>Hosting</th><th>Reseller</th><th>İşlem</th></tr></thead><tbody id="packages-body"><tr><td colspan="7" class="sr-empty">Yükleniyor...</td></tr></tbody></table></div>
    </section>

    <section class="sr-panel" data-panel="settings">
      <div class="sr-toolbar"><strong>Ayarlar</strong></div>
      <form id="settings-form" class="sr-form" style="max-width:920px;">
        <div class="sr-row">
          <label>Varsayılan dil<select name="default_language"><option value="tr_TR">Türkçe</option><option value="en_US">English</option></select></label>
          <label>Plugin çalıştırma kullanıcısı<input name="plugin_run_user"></label>
        </div>
        <div class="sr-row"><label>DA URL<input name="da_url"></label><label>DA API kullanıcı<input name="da_api_user"></label></div>
        <div class="sr-row"><label>API Login Key<input name="da_api_login_key" type="password" autocomplete="new-password" placeholder="Mevcut anahtarı değiştirmek için girin"></label><label>DA timeout (saniye)<input name="da_timeout_seconds" type="number" min="3" max="60"></label></div>
        <p class="sr-help">Anahtar yalnız plugin veritabanında saklanır ve ekranda tekrar gösterilmez. Bu süre okuma işlemleri içindir; canlı oluşturma ve silme işlemleri DirectAdmin sonucu doğrulanana kadar güvenli biçimde en az 60 saniye bekler.</p>
        <div class="sr-row">
          <label class="sr-check"><input name="da_verify_tls" type="checkbox" value="1"> TLS sertifikasını doğrula</label>
          <label class="sr-check"><input name="compatibility_strict_mode" type="checkbox" value="1"> Uyumluluk strict mode</label>
          <label class="sr-check"><input name="allow_reseller_create" type="checkbox" value="1"> SibeROOT alt bayi oluşturmayı etkinleştir</label>
          <label class="sr-check"><input name="directadmin_live_provisioning" type="checkbox" value="1"> Canlı DirectAdmin provisioning</label>
        </div>
        <div class="sr-row">
          <label>Maks. request byte<input name="max_request_bytes" type="number"></label>
          <label>Log limiti<input name="app_log_max_bytes" type="number"></label>
        </div>
        <div class="sr-row">
          <label>Oturum saklama günü<input name="session_retention_days" type="number"></label>
          <label>Audit saklama günü<input name="audit_retention_days" type="number"></label>
        </div>
        <div style="display:flex;gap:10px;flex-wrap:wrap;"><button class="sr-btn" type="submit">Ayarları kaydet</button><button class="sr-btn" type="button" id="validate-da">DA API doğrula</button><button class="sr-btn" type="button" id="run-maintenance">Bakım çalıştır</button></div>
      </form>
    </section>

    <section class="sr-panel" data-panel="audit">
      <div class="sr-toolbar"><strong>Audit kayıtları</strong></div>
      <div class="sr-table-wrap"><table class="sr-table"><thead><tr><th>Tarih</th><th>Aktör</th><th>İşlem</th><th>Hedef</th><th>Sonuç</th></tr></thead><tbody id="audit-body"><tr><td colspan="5" class="sr-empty">Yükleniyor...</td></tr></tbody></table></div>
    </section>

    <div class="sr-footer"><span>SiberMimar</span><a href="https://www.sibermimar.com.tr" target="_blank" rel="noopener">www.sibermimar.com.tr</a></div>
  </div>
</div>

<div id="wizard-modal" class="sr-modal"><div class="sr-card sr-dialog">
  <div style="display:flex;justify-content:space-between;align-items:center;gap:12px;"><h2 style="margin:0;font-weight:500;">Hesap / bayi oluştur</h2><button type="button" class="sr-btn" data-close-modal="wizard-modal">Kapat</button></div>
  <div class="sr-steps"><span class="sr-step active" id="w-step-1">1. Seçim</span><span class="sr-step" id="w-step-2">2. Bilgiler</span></div>
  <div id="wizard-step-1">
    <div class="sr-row">
      <label style="cursor:pointer;border:1px solid #e2e8f0;border-radius:14px;padding:14px;"><input type="radio" name="wizard_mode" value="existing" checked> Mevcut reseller hesabını SibeROOT'a bağla</label>
      <label style="cursor:pointer;border:1px solid #e2e8f0;border-radius:14px;padding:14px;"><input type="radio" name="wizard_mode" value="root_reseller"> Yeni kök bayi oluştur</label>
      <label style="cursor:pointer;border:1px solid #e2e8f0;border-radius:14px;padding:14px;"><input type="radio" name="wizard_mode" value="child_reseller"> Bir SibeROOT bayi altında bayi oluştur</label>
      <label style="cursor:pointer;border:1px solid #e2e8f0;border-radius:14px;padding:14px;"><input type="radio" name="wizard_mode" value="hosting"> Bir bayi altında hosting hesabı oluştur</label>
    </div>
    <div style="margin-top:14px;"><button id="wizard-next" class="sr-btn" type="button">Devam</button></div>
  </div>
  <form id="wizard-form" class="sr-form sr-hidden">
    <div id="wizard-existing">
      <label>Mevcut reseller<select name="existing_username" id="wizard-existing-username"></select></label>
      <label>SibeROOT paketi<select name="existing_package" id="wizard-existing-package"></select></label>
    </div>
    <div id="wizard-new" class="sr-hidden">
      <p id="wizard-new-help" class="sr-help"></p>
      <div class="sr-row">
        <label>Kullanıcı adı<input name="username"></label>
        <label>E-posta<input name="email"></label>
      </div>
      <div class="sr-row">
        <label>Alan adı<input name="primary_domain"></label>
        <label>Paket<select name="package_code" id="wizard-new-package"></select></label>
      </div>
      <div id="wizard-owner-row" class="sr-hidden"><label>Üst SibeROOT bayi<select name="owner_reseller" id="wizard-owner-reseller"></select></label></div>
      <div class="sr-row">
        <label>Şifre<input name="password" type="password"></label>
        <label>Not<input name="note"></label>
      </div>
    </div>
    <div style="display:flex;gap:10px;flex-wrap:wrap;"><button class="sr-btn" type="submit">Tamamla</button><button class="sr-btn" type="button" id="wizard-back">Geri</button></div>
  </form>
</div></div>

<div id="edit-modal" class="sr-modal"><div class="sr-card sr-dialog">
  <div style="display:flex;justify-content:space-between;align-items:center;gap:12px;"><h2 style="margin:0;font-weight:500;">Hesap düzenle</h2><button type="button" class="sr-btn" data-close-modal="edit-modal">Kapat</button></div>
  <form id="edit-form" class="sr-form" style="margin-top:12px;">
    <input type="hidden" name="username"><input type="hidden" name="account_type"><input type="hidden" name="owner_reseller">
    <div class="sr-row">
      <label>E-posta<input name="email"></label>
      <label>Alan adı<input name="primary_domain"></label>
    </div>
    <div class="sr-row">
      <label>Paket<select name="package_code" id="edit-package"></select></label>
      <label>Durum<select name="status"><option value="active">active</option><option value="suspended">suspended</option></select></label>
    </div>
    <label>Not<textarea name="note" rows="3"></textarea></label>
    <p class="sr-help">Canlı oluşturulmuş hesaplerde DirectAdmin alan adı, paket ve durum değişiklikleri DirectAdmin panelinden yapılır. Bu ekrandaki not yalnız SibeROOT kaydı içindir.</p>
    <div style="display:flex;gap:10px;flex-wrap:wrap;"><button class="sr-btn" type="submit">Kaydet</button><button class="sr-btn" type="button" data-close-modal="edit-modal">Vazgeç</button></div>
  </form>
</div></div>

<div id="package-modal" class="sr-modal"><div class="sr-card sr-dialog">
  <div style="display:flex;justify-content:space-between;align-items:center;gap:12px;"><h2 style="margin:0;font-weight:500;">Paket eşlemesi</h2><button type="button" class="sr-btn" data-close-modal="package-modal">Kapat</button></div>
  <form id="package-form" class="sr-form" style="margin-top:12px;">
    <div class="sr-row"><label>Paket kodu<input name="code" pattern="[a-z0-9][a-z0-9-]{1,63}" required></label><label>Ad<input name="name" required></label></div>
    <div class="sr-row"><label>Tür<select name="package_type"><option value="hosting">hosting</option><option value="reseller">reseller</option><option value="hybrid">hybrid</option></select></label></div>
    <label>DirectAdmin paketi<input name="da_native_package" list="da-package-options" placeholder="Önce DA paketlerini okuyun"></label>
    <datalist id="da-package-options"></datalist>
    <div class="sr-row"><label>Hosting hesap limiti<input name="max_hosting_accounts" type="number" min="0"></label><label>Alt bayi limiti<input name="max_reseller_accounts" type="number" min="0"></label></div>
    <div class="sr-row"><label class="sr-check"><input name="allow_user_move" type="checkbox" value="1"> Kullanıcı taşıma</label><label class="sr-check"><input name="allow_password_reset" type="checkbox" value="1"> Şifre sıfırlama</label><label class="sr-check"><input name="allow_suspend" type="checkbox" value="1"> Askıya alma</label></div>
    <div style="display:flex;gap:10px;flex-wrap:wrap;"><button class="sr-btn" type="submit">Paket eşlemesini kaydet</button><button class="sr-btn" type="button" data-close-modal="package-modal">Vazgeç</button></div>
  </form>
</div></div>

<script>
(() => {
  const apiUrl = '/CMD_PLUGINS_ADMIN/SibeROOT/api.raw';
  const state = {csrfToken:'', transportKey:null, transportLimit:3072, accounts:[], packages:[], systemResellers:[], resellerHierarchy:[], logs:[], settings:[], cachedDaPackages:{user:[],reseller:[]}, summary:{}};
  const qs=(s,r=document)=>r.querySelector(s); const qsa=(s,r=document)=>Array.from(r.querySelectorAll(s));
  const msg=qs('#message');
  const escapeHtml=(v)=>String(v??'').replace(/[&<>"']/g,(m)=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[m]));
  function showMessage(type,text){msg.className='sr-msg '+(type==='error'?'err':'ok');msg.textContent=text;msg.style.display='block';}
  function clearMessage(){msg.style.display='none';msg.textContent='';}
  function setRuntime(text, bad=false){const el=qs('#runtime-pill');el.textContent=text;el.style.background=bad?'#fff1f2':'#f8fafc';el.style.borderColor=bad?'#fecaca':'#e2e8f0';el.style.color=bad?'#991b1b':'#0f172a';}
  function decodeApiResponse(text){if(!text||!text.trim()) throw new Error('Boş yanıt alındı.');try{return JSON.parse(text);}catch(e){const start=text.indexOf('{');if(start>-1){try{return JSON.parse(text.slice(start));}catch(e2){throw new Error('Geçersiz JSON yanıtı: '+text.slice(0,240));}}throw new Error('Geçersiz JSON yanıtı: '+text.slice(0,240));}}
  function acceptCsrf(data){const token=(data&&data.data&&data.data.csrf_token)||(data&&data.meta&&data.meta.csrf_token)||'';if(token) state.csrfToken=token;}
  async function ensureCsrf(){if(state.csrfToken) return state.csrfToken;const url=new URL(apiUrl,window.location.origin);url.searchParams.set('action','csrf_token');const response=await fetch(url.toString(),{method:'GET',credentials:'same-origin'});const data=decodeApiResponse(await response.text());acceptCsrf(data);if(!data.success||!state.csrfToken) throw new Error(data.message||'Güvenlik doğrulaması alınamadı.');return state.csrfToken;}
  function bytesToBase64Url(bytes){let binary='';for(const value of bytes)binary+=String.fromCharCode(value);return btoa(binary).replace(/\+/g,'-').replace(/\//g,'_').replace(/=+$/,'');}
  function pemToBytes(pem){const encoded=pem.replace(/-----BEGIN PUBLIC KEY-----|-----END PUBLIC KEY-----|\s/g,'');const binary=atob(encoded);return Uint8Array.from(binary,char=>char.charCodeAt(0));}
  async function ensureTransportKey(){if(state.transportKey)return state.transportKey;if(!window.crypto||!window.crypto.subtle||!window.TextEncoder)throw new Error('Tarayıcı güvenli istek taşımasını desteklemiyor.');const response=await api('transport_public_key',{},'GET');const data=response.data||{};state.transportLimit=Math.min(Number(data.max_plaintext_bytes)||3072,3072);state.transportKey=await window.crypto.subtle.importKey('spki',pemToBytes(data.public_key_pem),{name:'RSA-OAEP',hash:'SHA-256'},false,['encrypt']);return state.transportKey;}
  async function encryptTransportPayload(payload){const key=await ensureTransportKey();const plain=new TextEncoder().encode(JSON.stringify(payload||{}));if(plain.length>state.transportLimit)throw new Error('İşlem verisi güvenli taşıma sınırını aşıyor.');const chunks=[];for(let offset=0;offset<plain.length;offset+=150){const encrypted=await window.crypto.subtle.encrypt({name:'RSA-OAEP'},key,plain.slice(offset,offset+150));chunks.push(bytesToBase64Url(new Uint8Array(encrypted)));}return chunks.join('.');}
  async function api(action,payload={},method='POST'){
    const url=new URL(apiUrl, window.location.origin);url.searchParams.set('action',action);if(method==='GET'){Object.entries(payload||{}).forEach(([k,v])=>{if(v!==undefined&&v!==null&&v!=='')url.searchParams.set(k,v);});}
    const opts={method,credentials:'same-origin',headers:{}};
    if(method==='POST'){const token=await ensureCsrf();const encryptedPayload=await encryptTransportPayload(payload);url.searchParams.set('csrf_token',token);url.searchParams.set('enc_payload',encryptedPayload);}
    const resp=await fetch(url.toString(),opts);const text=await resp.text();
    const data=decodeApiResponse(text);acceptCsrf(data);
    if(!data.success) throw new Error(data.message||'İşlem başarısız');
    return data;
  }
  function switchTab(name){qsa('.sr-panel').forEach(p=>p.classList.toggle('active',p.dataset.panel===name));qsa('.sr-tabs button[data-tab]').forEach(b=>b.classList.toggle('active',b.dataset.tab===name));}
  qsa('.sr-tabs button[data-tab]').forEach(btn=>btn.addEventListener('click',()=>switchTab(btn.dataset.tab)));
  function packagesFor(type){const packageType=type==='user'?'hosting':type;return state.packages.filter(p=>p.package_type===packageType||p.package_type==='hybrid');}
  function optionHtml(packages){return packages.map(p=>`<option value=\"${escapeHtml(p.code)}\">${escapeHtml(p.code)} — ${escapeHtml(p.name)}</option>`).join('');}
  function fillPackageOptions(){qs('#wizard-existing-package').innerHTML=optionHtml(packagesFor('reseller'));qs('#edit-package').innerHTML=optionHtml(state.packages);updateWizardPackages();const names=[...(state.cachedDaPackages.user||[]),...(state.cachedDaPackages.reseller||[])].map(p=>p.package_name);qs('#da-package-options').innerHTML=[...new Set(names)].map(name=>`<option value=\"${escapeHtml(name)}\"></option>`).join('');}
  function fillResellerOptions(){const existing=state.systemResellers.filter(r=>!r.is_siberoot).map(r=>`<option value=\"${escapeHtml(r.username)}\">${escapeHtml(r.username)}${r.domain?` — ${escapeHtml(r.domain)}`:''}</option>`).join('');qs('#wizard-existing-username').innerHTML=existing||'<option value=\"\">Uygun reseller bulunamadı</option>';const owners=state.accounts.filter(r=>r.da_account_type==='reseller').map(r=>`<option value=\"${escapeHtml(r.da_username)}\">${escapeHtml(r.da_username)} — ${escapeHtml(r.primary_domain||r.email||'')}</option>`).join('');qs('#wizard-owner-reseller').innerHTML=owners||'<option value=\"\">Önce bir SibeROOT bayi oluşturun</option>';}
  function metricValue(summary,key,fallback){return Object.prototype.hasOwnProperty.call(summary,key)?summary[key]:fallback;}
  function renderMetrics(){const summary=state.summary||{};qs('#m-accounts').textContent=metricValue(summary,'total_accounts',state.accounts.length);qs('#m-resellers').textContent=metricValue(summary,'total_resellers',state.accounts.filter(a=>a.da_account_type==='reseller').length);qs('#m-system-resellers').textContent=state.systemResellers.length;qs('#m-packages').textContent=metricValue(summary,'total_packages',state.packages.length);}
  function renderResellerHierarchy(){const host=qs('#hierarchy-tree');const rows=state.resellerHierarchy||[];const byOwner={};rows.forEach(row=>{const owner=row.owner_reseller||'admin';(byOwner[owner]||(byOwner[owner]=[])).push(row)});const renderChildren=(owner,path=new Set())=>(byOwner[owner]||[]).map(row=>{const username=row.da_username;if(path.has(username))return `<li><div class="sr-tree-node">${escapeHtml(username)} <span class="sr-tree-meta">Döngü algılandı</span></div></li>`;const next=new Set(path);next.add(username);const children=renderChildren(username,next);return `<li><div class="sr-tree-node" draggable="true" data-reseller-source="${escapeHtml(username)}" data-drop-owner="${escapeHtml(username)}"><span><strong>${escapeHtml(username)}</strong> <span class="sr-tree-meta">${escapeHtml(row.primary_domain||row.email||'')}</span></span><span class="sr-tree-meta">${escapeHtml(row.package_code)} · ${escapeHtml(row.direct_reseller_count||0)} alt bayi</span></div>${children?`<ul>${children}</ul>`:''}</li>`}).join('');const roots=renderChildren('admin');host.innerHTML=`<ul><li><div class="sr-tree-node sr-admin-node" data-drop-owner="admin"><span><strong>admin</strong> <span class="sr-tree-meta">DirectAdmin admin kökü</span></span><span class="sr-tree-meta">Bırakma hedefi</span></div>${roots?`<ul>${roots}</ul>`:'<ul><li class="sr-empty">SibeROOT reseller kaydı yok.</li></ul>'}</li></ul>`;qsa('[data-reseller-source]',host).forEach(node=>node.addEventListener('dragstart',event=>{event.dataTransfer.effectAllowed='move';event.dataTransfer.setData('text/plain',node.dataset.resellerSource)}));qsa('[data-drop-owner]',host).forEach(node=>{node.addEventListener('dragover',event=>{event.preventDefault();event.dataTransfer.dropEffect='move';node.classList.add('sr-drop-target')});node.addEventListener('dragleave',()=>node.classList.remove('sr-drop-target'));node.addEventListener('drop',async event=>{event.preventDefault();node.classList.remove('sr-drop-target');const username=event.dataTransfer.getData('text/plain');const owner=node.dataset.dropOwner;if(!username||username===owner)return;if(!confirm(`${username} reseller hesabı ${owner} owner altına aktarılsın mı?`))return;try{await api('transfer_reseller_owner',{username,owner_reseller:owner});showMessage('ok','SibeROOT bayi hiyerarşisi güncellendi.');await loadAll()}catch(err){showMessage('error',err.message)}})})}
  function renderAccounts(filter=''){const tbody=qs('#accounts-body');const term=filter.trim().toLowerCase();const rows=state.accounts.filter(r=>!term||[r.da_username,r.email,r.primary_domain,r.package_code].join(' ').toLowerCase().includes(term));if(!rows.length){tbody.innerHTML='<tr><td colspan="7" class="sr-empty">Kayıt bulunamadı.</td></tr>';return;}tbody.innerHTML=rows.map(r=>{const provider=r.provider_status||'local_only';const managed=provider==='provisioned'||provider==='linked_existing';const edit=`<button data-edit="${escapeHtml(r.da_username)}">${managed?'Not düzenle':'Düzenle'}</button>`;const remove=provider==='linked_existing'?'':`<button data-delete="${escapeHtml(r.da_username)}" class="danger">Sil</button>`;const detach=r.da_account_type==='reseller'&&provider==='linked_existing'?`<button data-detach="${escapeHtml(r.da_username)}">SibeROOT bağını kaldır</button>`:'';return `<tr><td><strong>${escapeHtml(r.da_username)}</strong><br><span style="color:#64748b;">${escapeHtml(r.email||'')}</span></td><td>${escapeHtml(r.da_account_type)}</td><td>${escapeHtml(r.primary_domain||'')}</td><td>${escapeHtml(r.package_code||'')}</td><td>${escapeHtml(r.owner_reseller||'')}</td><td>${escapeHtml(r.status||'')}<br><span style="color:#64748b;font-size:12px;">${escapeHtml(provider)}</span></td><td><div class="sr-actions">${edit}${remove}${detach}</div></td></tr>`;}).join('');qsa('[data-edit]',tbody).forEach(b=>b.addEventListener('click',()=>openEdit(b.dataset.edit)));qsa('[data-delete]',tbody).forEach(b=>b.addEventListener('click',()=>deleteAccount(b.dataset.delete)));qsa('[data-detach]',tbody).forEach(b=>b.addEventListener('click',()=>detachAccount(b.dataset.detach)));}
  function renderSystemResellers(filter=''){const tbody=qs('#resellers-body');const term=filter.trim().toLowerCase();const rows=state.systemResellers.filter(r=>!term||[r.username,r.email,r.domain,r.package].join(' ').toLowerCase().includes(term)); if(!rows.length){tbody.innerHTML='<tr><td colspan="6" class="sr-empty">Reseller bulunamadı.</td></tr>';return;} tbody.innerHTML=rows.map(r=>`<tr><td><strong>${escapeHtml(r.username)}</strong></td><td>${escapeHtml(r.email||'')}</td><td>${escapeHtml(r.domain||'')}</td><td>${escapeHtml(r.package||'')}</td><td>${r.is_siberoot?'<span style="color:#065f46;">SibeROOT</span>':'-'}</td><td><div class="sr-actions">${r.is_siberoot?`<button data-edit-linked="${escapeHtml(r.username)}">Düzenle</button>`:`<button data-attach="${escapeHtml(r.username)}">SibeROOT Yap</button>`}</div></td></tr>`).join(''); qsa('[data-attach]',tbody).forEach(b=>b.addEventListener('click',()=>openWizard('existing',b.dataset.attach))); qsa('[data-edit-linked]',tbody).forEach(b=>b.addEventListener('click',()=>openEdit(b.dataset.editLinked)));}
  function renderPackages(){const tbody=qs('#packages-body');tbody.innerHTML=state.packages.length?state.packages.map(p=>{const remove=p.code.startsWith('default-')?'':`<button data-package-delete="${escapeHtml(p.code)}" class="danger">Sil</button>`;return `<tr><td><strong>${escapeHtml(p.code)}</strong></td><td>${escapeHtml(p.name)}</td><td>${escapeHtml(p.package_type)}</td><td>${escapeHtml(p.da_native_package||'Eşlenmemiş')}</td><td>${escapeHtml(p.max_hosting_accounts)}</td><td>${escapeHtml(p.max_reseller_accounts)}</td><td><div class="sr-actions"><button data-package-edit="${escapeHtml(p.code)}">Eşle / düzenle</button>${remove}</div></td></tr>`;}).join(''):'<tr><td colspan="7" class="sr-empty">Paket bulunamadı.</td></tr>';qsa('[data-package-edit]',tbody).forEach(b=>b.addEventListener('click',()=>openPackageEdit(b.dataset.packageEdit)));qsa('[data-package-delete]',tbody).forEach(b=>b.addEventListener('click',()=>deletePackage(b.dataset.packageDelete)));}
  function renderLogs(){const tbody=qs('#audit-body'); tbody.innerHTML=state.logs.length?state.logs.map(l=>`<tr><td>${escapeHtml(l.created_at)}</td><td>${escapeHtml(l.actor_username)} (${escapeHtml(l.actor_role)})</td><td>${escapeHtml(l.action_code)}</td><td>${escapeHtml(l.target_type)}: ${escapeHtml(l.target_ref)}</td><td>${escapeHtml(l.result)}</td></tr>`).join(''):'<tr><td colspan="5" class="sr-empty">Log bulunamadı.</td></tr>';}
  function renderSettings(){const map=Object.fromEntries(state.settings.map(s=>[s.setting_key,s.setting_value]));const f=qs('#settings-form');['default_language','plugin_run_user','da_url','da_api_user','da_timeout_seconds','max_request_bytes','app_log_max_bytes','session_retention_days','audit_retention_days'].forEach(k=>{if(f.elements[k])f.elements[k].value=map[k]||'';});['da_verify_tls','compatibility_strict_mode','allow_reseller_create','directadmin_live_provisioning'].forEach(k=>{if(f.elements[k])f.elements[k].checked=String(map[k]||'').toLowerCase()==='true';});f.elements.da_api_login_key.value='';}
  async function loadAll(){clearMessage();setRuntime('Runtime yükleniyor...');try{const response=await api('dashboard',{page:1,per_page:100,audit_page:1,audit_per_page:25},'GET');const data=response.data||{};state.accounts=data.accounts||[];state.settings=data.settings||[];state.packages=data.packages||[];state.systemResellers=data.system_resellers||[];state.logs=data.logs||[];state.cachedDaPackages=data.cached_da_packages||{user:[],reseller:[]};state.summary=data.summary||{};fillPackageOptions();fillResellerOptions();renderMetrics();renderAccounts(qs('#account-search').value||'');renderSystemResellers(qs('#reseller-search').value||'');renderPackages();renderLogs();renderSettings();setRuntime('Runtime hazır');}catch(err){setRuntime('Runtime hatası',true);showMessage('error',err.message);}}
  const baseLoadAll=loadAll;
  loadAll=async function(){await baseLoadAll();try{const response=await api('list_reseller_hierarchy',{},'GET');state.resellerHierarchy=response.data?.reseller_hierarchy||[];renderResellerHierarchy();}catch(err){showMessage('error',err.message);}};
  function openModal(id){qs('#'+id).classList.add('open');}
  function closeModal(id){qs('#'+id).classList.remove('open');}
  qsa('[data-close-modal]').forEach(b=>b.addEventListener('click',()=>closeModal(b.dataset.closeModal)));
  function selectedWizardMode(){return (qsa('input[name="wizard_mode"]').find(r=>r.checked)||{}).value||'existing';}
  function wizardAccountType(mode=selectedWizardMode()){return mode==='hosting'?'user':'reseller';}
  function updateWizardPackages(){const mode=selectedWizardMode();const select=qs('#wizard-new-package');if(select)select.innerHTML=optionHtml(packagesFor(wizardAccountType(mode)));}
  function openWizard(mode='existing', username=''){qs('#wizard-step-1').classList.remove('sr-hidden');qs('#wizard-form').classList.add('sr-hidden');qsa('input[name="wizard_mode"]').forEach(r=>r.checked=(r.value===mode));if(username)qs('#wizard-existing-username').value=username;updateWizardMode();openModal('wizard-modal');}
  function updateWizardMode(){const mode=selectedWizardMode();const isExisting=mode==='existing';const needsOwner=mode==='child_reseller'||mode==='hosting';qs('#wizard-existing').classList.toggle('sr-hidden',!isExisting);qs('#wizard-new').classList.toggle('sr-hidden',isExisting);qs('#wizard-owner-row').classList.toggle('sr-hidden',!needsOwner);const help={root_reseller:'Kök bayi DirectAdmin üzerinde admin tarafından oluşturulur.',child_reseller:'Alt bayi SibeROOT hiyerarşisinde seçilen bayi altında izlenir; DirectAdmin’de bayi oluşturma işlemi admin yetkisiyle yapılır.',hosting:'Hosting hesabı seçilen bayi adına DirectAdmin API “login-as” akışıyla oluşturulur.'};qs('#wizard-new-help').textContent=help[mode]||'';updateWizardPackages();}
  qsa('input[name="wizard_mode"]').forEach(r=>r.addEventListener('change',updateWizardMode));
  qs('#wizard-next').addEventListener('click',()=>{updateWizardMode();qs('#wizard-step-1').classList.add('sr-hidden');qs('#wizard-form').classList.remove('sr-hidden');qs('#w-step-1').classList.remove('active');qs('#w-step-2').classList.add('active');});
  qs('#wizard-back').addEventListener('click',()=>{qs('#wizard-step-1').classList.remove('sr-hidden');qs('#wizard-form').classList.add('sr-hidden');qs('#w-step-1').classList.add('active');qs('#w-step-2').classList.remove('active');});
  qs('#open-create').addEventListener('click',()=>openWizard('existing'));
  qs('#wizard-form').addEventListener('submit',async(e)=>{e.preventDefault();const mode=selectedWizardMode();try{if(mode==='existing'){await api('attach_existing_reseller',{username:qs('#wizard-existing-username').value,package_code:qs('#wizard-existing-package').value,note:'Admin panelden bağlandı'});showMessage('ok','Mevcut reseller SibeROOT olarak bağlandı.');}else{const fd=new FormData(e.currentTarget);const accountType=wizardAccountType(mode);const owner=mode==='root_reseller'?'admin':fd.get('owner_reseller');const response=await api('create_account',{username:fd.get('username'),email:fd.get('email'),account_type:accountType,primary_domain:fd.get('primary_domain'),status:'active',package_code:fd.get('package_code'),owner_reseller:owner,password:fd.get('password'),note:fd.get('note')});showMessage('ok',(response.message||'Hesap oluşturuldu.')+' ('+(response.data.provider_status||'local_only')+')');}closeModal('wizard-modal');await loadAll();}catch(err){showMessage('error',err.message);}});
  function openEdit(username){const row=state.accounts.find(r=>r.da_username===username);if(!row)return;const f=qs('#edit-form');const managed=row.provider_status==='provisioned'||row.provider_status==='linked_existing';f.elements.username.value=row.da_username;f.elements.account_type.value=row.da_account_type;f.elements.owner_reseller.value=row.owner_reseller;f.elements.email.value=row.email||'';f.elements.primary_domain.value=row.primary_domain||'';f.elements.package_code.value=row.package_code||'';f.elements.status.value=row.status||'active';f.elements.note.value=row.note||'';['email','primary_domain','package_code','status'].forEach(k=>f.elements[k].disabled=managed);openModal('edit-modal');}
  qs('#edit-form').addEventListener('submit',async(e)=>{e.preventDefault();const f=e.currentTarget;try{await api('update_account',{username:f.elements.username.value,email:f.elements.email.value,primary_domain:f.elements.primary_domain.value,account_type:f.elements.account_type.value,status:f.elements.status.value,package_code:f.elements.package_code.value,owner_reseller:f.elements.owner_reseller.value,note:f.elements.note.value});closeModal('edit-modal');showMessage('ok','Hesap kaydı güncellendi.');await loadAll();}catch(err){showMessage('error',err.message);}});
  async function deleteAccount(username){const row=state.accounts.find(item=>item.da_username===username);const isLive=row&&row.provider_status==='provisioned';const prompt=isLive?`${username} DirectAdmin hesabı ve SibeROOT kaydı kalıcı olarak silinsin mi?`:`${username} SibeROOT kaydı silinsin mi?`;if(!confirm(prompt))return;try{await api('delete_account',{username});showMessage('ok',username+' silindi.');await loadAll();}catch(err){showMessage('error',err.message);}}
  async function detachAccount(username){if(!confirm(username+' normal reseller düzenine dönüştürülsün mü?')) return; try{await api('detach_siberoot',{username});showMessage('ok',username+' normal reseller düzenine döndürüldü.');await loadAll();}catch(err){showMessage('error',err.message);}}
  let packageFormMode='update';
  function openPackageEdit(code){const row=state.packages.find(p=>p.code===code);if(!row)return;const f=qs('#package-form');packageFormMode='update';f.reset();['code','name','package_type','da_native_package','max_hosting_accounts','max_reseller_accounts'].forEach(k=>f.elements[k].value=row[k]??'');f.elements.code.readOnly=true;['allow_user_move','allow_password_reset','allow_suspend'].forEach(k=>f.elements[k].checked=String(row[k]??'').toLowerCase()==='1'||String(row[k]??'').toLowerCase()==='true');openModal('package-modal');}
  function openPackageCreate(){const f=qs('#package-form');packageFormMode='create';f.reset();f.elements.code.readOnly=false;f.elements.package_type.value='hosting';f.elements.max_hosting_accounts.value='0';f.elements.max_reseller_accounts.value='0';f.elements.allow_user_move.checked=false;f.elements.allow_password_reset.checked=true;f.elements.allow_suspend.checked=true;openModal('package-modal');}
  qs('#package-form').addEventListener('submit',async(e)=>{e.preventDefault();const f=e.currentTarget;const payload={};for(const [key,value] of new FormData(f).entries())payload[key]=value;['allow_user_move','allow_password_reset','allow_suspend'].forEach(k=>{if(!f.elements[k].checked)payload[k]='0';});try{await api(packageFormMode==='create'?'create_package':'update_package',payload);closeModal('package-modal');showMessage('ok',packageFormMode==='create'?'Paket oluşturuldu.':'Paket eşlemesi kaydedildi.');await loadAll();}catch(err){showMessage('error',err.message);}});
  async function deletePackage(code){if(!confirm(code+' paketi silinsin mi?'))return;try{await api('delete_package',{code});showMessage('ok',code+' paketi silindi.');await loadAll();}catch(err){showMessage('error',err.message);}}
  qs('#account-search').addEventListener('input',e=>renderAccounts(e.target.value));
  qs('#reseller-search').addEventListener('input',e=>renderSystemResellers(e.target.value));
  qs('#reload-all').addEventListener('click',loadAll);
  qs('#open-create-package').addEventListener('click',openPackageCreate);
  qs('#run-maintenance').addEventListener('click',async()=>{try{const r=await api('run_maintenance',{});showMessage('ok',r.message||'Bakım tamamlandı.');await loadAll();}catch(err){showMessage('error',err.message);}});
  qs('#validate-da').addEventListener('click',async()=>{try{const r=await api('validate_da_api',{});showMessage('ok',r.message||'DirectAdmin API doğrulandı.');}catch(err){showMessage('error',err.message);}});
  qs('#sync-packages').addEventListener('click',async()=>{try{await api('sync_da_packages',{package_type:'reseller'});await api('sync_da_packages',{package_type:'user'});showMessage('ok','DirectAdmin paketleri okundu.');await loadAll();}catch(err){showMessage('error',err.message);}});
  qs('#settings-form').addEventListener('submit',async(e)=>{e.preventDefault();const f=e.currentTarget;const payload={};for(const [k,v] of new FormData(f).entries())payload[k]=v;['da_verify_tls','compatibility_strict_mode','allow_reseller_create','directadmin_live_provisioning'].forEach(k=>{if(!f.elements[k].checked)payload[k]='0';});try{const r=await api('update_settings',payload);state.settings=r.data.settings||state.settings;renderSettings();showMessage('ok','Ayarlar kaydedildi.');}catch(err){showMessage('error',err.message);}});
  loadAll();
})();
</script>
EOF
exit 0