--[[
    Script Installer Header for Subaba.lua
    Original installer pattern by Asher Roland (FusionPixelStudio), Feb 2025
    Adapted for Subaba by Claude

    First run: copies this file into the correct Scripts/Utility/ folder.
    Subsequent runs: detects it's already installed and skips straight to the main script.
    Compatible with free DaVinci Resolve users (uses comp:AskUser, not UIManager).
]]--

local scriptsPath = app:MapPath("Scripts:")        -- Resolves to the correct OS path automatically, including the Support folder
local newPath = "Utility/Subaba.lua"               -- Where to install inside the Scripts folder
local installPath = scriptsPath .. newPath
local currentPath = arg[0]                         -- Path of THIS currently running file

-- Returns true if this script is already running from inside the Scripts folder
local function ScriptIsInstalled()
    local match = currentPath:find(scriptsPath, 1, true)
    return match ~= nil
end

local SCRIPT_INSTALLED = ScriptIsInstalled()

-- comp is only needed for the installer's AskUser dialogs; main script uses Resolve API + browser UI
local fu = fu or Fusion()
local comp = comp or (fu and fu.CurrentComp)
if not comp and not SCRIPT_INSTALLED then
    print("Please run Subaba with a Fusion Comp open (or a project loaded).")
    return
end

-- Popup dialog using comp:AskUser (works on free Resolve, unlike UIManager which was removed in 19.1)
local function askUser(customTitle, msg)
    if not comp then
        print("[Subaba] " .. customTitle .. (msg and (": " .. msg) or ""))
        return nil
    end
    local win = {}
    if msg then
        win[1] = { "Msg", "Text", Name = "Message: ", ReadOnly = true, Lines = 5, Wrap = true, Default = msg }
    else
        win[1] = { "Msg", "Text", Name = "Message: ", ReadOnly = true, Lines = 2, Wrap = true, Default = customTitle }
    end
    return comp:AskUser(customTitle, win)
end

-- Plain text file copy using standard Lua io (no bmd dependency for the copy itself)
local function CopyFile(source, target)
    local src = io.open(source, "r")
    if not src then
        print("Installer: Could not open source: " .. tostring(source))
        return false
    end
    local contents = src:read("*a")
    src:close()

    local dst = io.open(target, "w")
    if not dst then
        print("Installer: Could not open destination: " .. tostring(target))
        return false
    end
    dst:write(contents)
    dst:close()
    return true
end

-- Runs the install: copies this file to the Scripts/Utility/ folder
local function installScript()
    print("[Subaba Installer] Starting installation...")
    print("[Subaba Installer] Source:      " .. tostring(currentPath))
    print("[Subaba Installer] Destination: " .. tostring(installPath))

    if not bmd.fileexists(currentPath) then
        print("[Subaba Installer] ERROR: Cannot access source file.")
        askUser("ERROR", "Could not access current file location:\n" .. tostring(currentPath))
        return
    end

    print("[Subaba Installer] Copying file...")
    local ok = CopyFile(currentPath, installPath)
    if not ok then
        print("[Subaba Installer] ERROR: File copy failed.")
        askUser("ERROR", "Failed to copy Subaba to:\n" .. installPath .. "\n\nFrom:\n" .. currentPath)
        return
    end

    print("[Subaba Installer] Success! Installed to: " .. installPath)
    print("")
    print("  ███████╗██╗   ██╗██████╗  █████╗ ██████╗  █████╗ ")
    print("  ██╔════╝██║   ██║██╔══██╗██╔══██╗██╔══██╗██╔══██╗")
    print("  ███████╗██║   ██║██████╔╝███████║██████╔╝███████║")
    print("  ╚════██║██║   ██║██╔══██╗██╔══██║██╔══██╗██╔══██║")
    print("  ███████║╚██████╔╝██████╔╝██║  ██║██████╔╝██║  ██║")
    print("  ╚══════╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝╚═════╝ ╚═╝  ╚═╝")
    print("")
    print("  Installed! Restart DaVinci Resolve to use Subaba.")
    print("")
    askUser("Subaba Installed!",
        "Subaba was installed successfully.\n\n" ..
        "Location: " .. installPath .. "\n\n" ..
        "Please restart DaVinci Resolve.")
end

-- Only install if we're NOT already running from inside the Scripts folder
if not SCRIPT_INSTALLED then
    print("[Subaba Installer] Not installed yet — running installer.")
    installScript()
    -- Clean up installer variables before handing off to the main script
    fu = nil; comp = nil; installPath = nil; currentPath = nil
    newPath = nil; scriptsPath = nil; SCRIPT_INSTALLED = nil
    collectgarbage("collect")
    return  -- Stop here — user needs to restart Resolve before using Subaba properly
end

-- ============================================================
-- MAIN SUBABA SCRIPT STARTS BELOW
-- ============================================================

-- SubabaExport.lua
-- Unified DaVinci Resolve workflow:
-- - Browser UI (auth + subtitle settings + Subtitles/CUTS tabs)
-- - Audio export from selected timeline tracks
-- - Server-side SRT generation via https://sababa.onrender.com/api/generate-srt
-- - Subtitle import as Text+ clips (embedded import logic)

---@diagnostic disable: undefined-global

-- ============================================================
-- 1. Platform detection + temp paths
-- ============================================================
local sep = package.config:sub(1, 1)
local isWindows = (sep == "\\")
local tempDir = isWindows and (os.getenv("TEMP") or ".") or "/tmp"
local htmlPath = tempDir .. sep .. "subaba_export.html"
local settingsFile = tempDir .. sep .. "subaba_settings.json"
local launcherPath = tempDir .. sep .. "subaba_launch.html"
local serverScript = tempDir .. sep .. (isWindows and "subaba_server.ps1" or "subaba_server.pl")
local uploadScript = tempDir .. sep .. "subaba_upload.ps1"
local apiRawPath = tempDir .. sep .. "subaba_api_raw.txt"
local activePortFile = tempDir .. sep .. "subaba_active_port.txt"
-- Persistent settings file (caption language, maxWords, maxCharsPerLine) - lives next to the script
local persistSettingsDir = isWindows
    and ((os.getenv("APPDATA") or ".") .. "\\Blackmagic Design\\DaVinci Resolve\\Support\\Fusion\\Scripts\\Utility")
    or ((os.getenv("HOME") or ".") .. "/Library/Application Support/Blackmagic Design/DaVinci Resolve/Fusion/Scripts/Utility")
local persistentSettingsFile = persistSettingsDir .. sep .. "SubabaSettings.json"
-- Persistent auth session file (token, username, minutes) - survives port changes
local sessionFile = persistSettingsDir .. sep .. "SubabaSession.json"
-- Two fixed ports; each launch picks the one NOT used last time
local PORT_A = 19847
local PORT_B = 19848
-- PORT/stopFile/liveDataPath/readyFile are upvalues re-assigned in section 12
local PORT = PORT_A
local stopFile = tempDir .. sep .. "subaba_stop_" .. PORT
local liveDataPath = tempDir .. sep .. "subaba_live_" .. PORT .. ".json"
local readyFile = tempDir .. sep .. "subaba_ready_" .. PORT

local function busyWait(seconds)
    local t0 = os.clock()
    while os.clock() - t0 < seconds do end
end

local function fileExists(path)
    local f = io.open(path, "rb")
    if f then f:close(); return true end
    return false
end

local function readAll(path)
    local f = io.open(path, "rb")
    if not f then return nil end
    local v = f:read("*a")
    f:close()
    return v
end

local function writeAll(path, content)
    -- Atomic write: write to temp file then rename to avoid race conditions
    -- where readers (PowerShell server) see partial/mixed content
    local tmpPath = path .. ".tmp"
    local f = io.open(tmpPath, "wb")
    if not f then return false end
    f:write(content or "")
    f:flush()
    f:close()
    os.remove(path)
    os.rename(tmpPath, path)
    return true
end

-- Forward-declared; assigned after JSON is defined below
local loadPersistentSettings

local function savePersistentSettings(s)
    writeAll(persistentSettingsFile, jsonEncode(s))
    print("[SubabaExport] Saved persistent settings: " .. jsonEncode(s))
end

local function psQuote(s)
    s = tostring(s or "")
    return '"' .. s:gsub('"', '\\"') .. '"'
end

local function shQuote(s)
    s = tostring(s or "")
    return "'" .. s:gsub("'", "'\\''") .. "'"
end

local function toFileUrl(path)
    local p = tostring(path or "")
    if isWindows then
        p = p:gsub("\\", "/")
        if p:match("^[A-Za-z]:/") then
            return "file:///" .. p:gsub(" ", "%%20")
        end
        return "file://" .. p:gsub(" ", "%%20")
    end
    return "file://" .. p:gsub(" ", "%%20")
end

-- ============================================================
-- 2. FFI ShellExecute for zero-flash process launch (Windows)
-- ============================================================
local shellExecA
if isWindows then
    pcall(function()
        local ffi = require("ffi")
        pcall(function()
            ffi.cdef[[void* ShellExecuteA(void*,const char*,const char*,const char*,const char*,int);]]
        end)
        shellExecA = ffi.load("shell32").ShellExecuteA
    end)
end

-- ============================================================
-- 3. Resolve connection
-- ============================================================
local function getResolve()
    if resolve then return resolve end
    if Resolve then
        local r = Resolve()
        if r then return r end
    end
    return nil
end

local resolve = getResolve()
if not resolve then print("[SubabaExport] ERROR: No Resolve.") return end

local projectManager = resolve:GetProjectManager()
local project = projectManager:GetCurrentProject()
if not project then print("[SubabaExport] ERROR: No project.") return end

local timeline = project:GetCurrentTimeline()
if not timeline then print("[SubabaExport] ERROR: No timeline.") return end

local mediaPool = project:GetMediaPool()

-- ============================================================
-- 4. JSON helpers
-- ============================================================
local function jsonEscape(str)
    return tostring(str)
        :gsub('\\', '\\\\')
        :gsub('"', '\\"')
        :gsub('\n', '\\n')
        :gsub('\r', '\\r')
        :gsub('\t', '\\t')
end

local function jsonEncode(val)
    local t = type(val)
    if t == "nil" then return "null" end
    if t == "boolean" then return val and "true" or "false" end
    if t == "number" then return tostring(val) end
    if t == "string" then return '"' .. jsonEscape(val) .. '"' end
    if t == "table" then
        local isArray = true
        local idx = 1
        for k, _ in pairs(val) do
            if k ~= idx then isArray = false break end
            idx = idx + 1
        end
        local out = {}
        if isArray then
            for i = 1, #val do out[#out + 1] = jsonEncode(val[i]) end
            return "[" .. table.concat(out, ",") .. "]"
        end
        for k, v in pairs(val) do
            out[#out + 1] = jsonEncode(tostring(k)) .. ":" .. jsonEncode(v)
        end
        return "{" .. table.concat(out, ",") .. "}"
    end
    return "null"
end

local JSON = {}
function JSON.decode(str)
    local pos = 1

    local function skipWS()
        pos = str:find("[^ \t\r\n]", pos) or (#str + 1)
    end

    local parseValue

    local function parseString()
        pos = pos + 1
        local start = pos
        local parts = {}
        while pos <= #str do
            local c = str:sub(pos, pos)
            if c == '"' then
                pos = pos + 1
                return table.concat(parts) .. str:sub(start, pos - 2)
            elseif c == '\\' then
                parts[#parts + 1] = str:sub(start, pos - 1)
                pos = pos + 1
                local esc = str:sub(pos, pos)
                if esc == 'n' then parts[#parts + 1] = '\n'
                elseif esc == 'r' then parts[#parts + 1] = '\r'
                elseif esc == 't' then parts[#parts + 1] = '\t'
                elseif esc == '"' then parts[#parts + 1] = '"'
                elseif esc == '\\' then parts[#parts + 1] = '\\'
                elseif esc == '/' then parts[#parts + 1] = '/'
                elseif esc == 'u' then
                    -- Decode \uXXXX to UTF-8 bytes
                    local hex = str:sub(pos + 1, pos + 4)
                    local cp = tonumber(hex, 16) or 0
                    pos = pos + 4
                    -- Handle surrogate pairs (\uD800-\uDBFF followed by \uDC00-\uDFFF)
                    if cp >= 0xD800 and cp <= 0xDBFF and str:sub(pos + 1, pos + 2) == '\\u' then
                        local cp2 = tonumber(str:sub(pos + 3, pos + 6), 16) or 0
                        if cp2 >= 0xDC00 and cp2 <= 0xDFFF then
                            cp = 0x10000 + (cp - 0xD800) * 0x400 + (cp2 - 0xDC00)
                            pos = pos + 6
                        end
                    end
                    -- Encode code point as UTF-8
                    if cp < 0x80 then
                        parts[#parts + 1] = string.char(cp)
                    elseif cp < 0x800 then
                        parts[#parts + 1] = string.char(0xC0 + math.floor(cp/0x40), 0x80 + (cp%0x40))
                    elseif cp < 0x10000 then
                        parts[#parts + 1] = string.char(0xE0 + math.floor(cp/0x1000), 0x80 + math.floor((cp%0x1000)/0x40), 0x80 + (cp%0x40))
                    else
                        parts[#parts + 1] = string.char(0xF0 + math.floor(cp/0x40000), 0x80 + math.floor((cp%0x40000)/0x1000), 0x80 + math.floor((cp%0x1000)/0x40), 0x80 + (cp%0x40))
                    end
                else parts[#parts + 1] = esc end
                pos = pos + 1
                start = pos
            else
                pos = pos + 1
            end
        end
        error("Unterminated JSON string")
    end

    local function parseNumber()
        local start = pos
        while pos <= #str and str:sub(pos, pos):find("[%d%.eE%+%-]") do
            pos = pos + 1
        end
        local n = tonumber(str:sub(start, pos - 1))
        if n == nil then error("Invalid JSON number") end
        return n
    end

    local function parseArray()
        pos = pos + 1
        local arr = {}
        skipWS()
        if str:sub(pos, pos) == "]" then pos = pos + 1; return arr end
        while true do
            arr[#arr + 1] = parseValue()
            skipWS()
            local c = str:sub(pos, pos)
            if c == "]" then pos = pos + 1; return arr end
            if c ~= "," then error("Expected ',' in array") end
            pos = pos + 1
        end
    end

    local function parseObject()
        pos = pos + 1
        local obj = {}
        skipWS()
        if str:sub(pos, pos) == "}" then pos = pos + 1; return obj end
        while true do
            skipWS()
            if str:sub(pos, pos) ~= '"' then error("Expected object key") end
            local key = parseString()
            skipWS()
            if str:sub(pos, pos) ~= ":" then error("Expected ':'") end
            pos = pos + 1
            obj[key] = parseValue()
            skipWS()
            local c = str:sub(pos, pos)
            if c == "}" then pos = pos + 1; return obj end
            if c ~= "," then error("Expected ',' in object") end
            pos = pos + 1
        end
    end

    parseValue = function()
        skipWS()
        local c = str:sub(pos, pos)
        if c == '"' then return parseString() end
        if c == "{" then return parseObject() end
        if c == "[" then return parseArray() end
        if c == "t" then pos = pos + 4; return true end
        if c == "f" then pos = pos + 5; return false end
        if c == "n" then pos = pos + 4; return nil end
        if c:find("[%d%-]") then return parseNumber() end
        error("Unexpected JSON token at position " .. tostring(pos))
    end

    return parseValue()
end

-- Now that JSON is available, define loadPersistentSettings
loadPersistentSettings = function()
    local f = io.open(persistentSettingsFile, "rb")
    if not f then return {} end
    local c = f:read("*a"); f:close()
    local ok, obj = pcall(JSON.decode, c)
    return (ok and type(obj) == "table") and obj or {}
end

-- ============================================================
-- 5. Timeline info + live state
-- ============================================================
local liveExportStatus = "idle"
local liveExportMsg = "Ready"
local liveLastPath = ""

local function getTimelineInfoTable()
    project = projectManager:GetCurrentProject()
    timeline = project and project:GetCurrentTimeline() or nil
    if not timeline then
        return {
            name = "No timeline",
            frameRate = 0,
            trackCount = 0,
            tracks = {},
            hasInOut = false,
            inOutLabel = "No timeline"
        }
    end

    local frameRate = tonumber(timeline:GetSetting("timelineFrameRate")) or 25
    local trackCount = timeline:GetTrackCount("audio") or 0
    local tracks = {}
    for i = 1, trackCount do
        local name = timeline:GetTrackName("audio", i)
        if not name or name == "" then name = "Track " .. tostring(i) end
        tracks[#tracks + 1] = { index = i, name = name }
    end

    local hasInOut = false
    local inOutLabel = "__NO_INOUT__"
    local ok, mio = pcall(function() return timeline:GetMarkInOut() end)
    if ok and mio then
        local mIn, mOut = nil, nil
        if mio["video"] then mIn = mio["video"]["in"]; mOut = mio["video"]["out"] end
        if (not mIn) and mio["audio"] then mIn = mio["audio"]["in"]; mOut = mio["audio"]["out"] end
        if mIn and mOut and mOut > mIn then
            hasInOut = true
            local dur = (mOut - mIn) / frameRate
            inOutLabel = string.format("In: %.2fs | Out: %.2fs | Dur: %.2fs", mIn / frameRate, mOut / frameRate, dur)
        end
    end

    return {
        name = timeline:GetName() or "Untitled",
        frameRate = frameRate,
        trackCount = trackCount,
        tracks = tracks,
        hasInOut = hasInOut,
        inOutLabel = inOutLabel
    }
end

local liveErrorType = ""
local liveApiMessage = ""

local function writeLiveData()
    local t = getTimelineInfoTable()
    local payload = {
        hasInOut = t.hasInOut,
        inOutLabel = t.inOutLabel,
        exportStatus = liveExportStatus,
        exportMsg = liveExportMsg,
        errorType = liveErrorType,
        apiMessage = liveApiMessage,
        lastPath = liveLastPath
    }
    writeAll(liveDataPath, jsonEncode(payload))
end

local function setLive(status, msg, errorType, apiMessage)
    liveExportStatus = status or liveExportStatus
    liveExportMsg = msg or liveExportMsg
    liveErrorType = errorType or ""
    liveApiMessage = apiMessage or ""
    writeLiveData()
end

-- ============================================================
-- 6. Subtitle import logic (embedded from ImportSubtitlesFromJSON)
-- ============================================================
-- Convert seconds to SRT timestamp format (HH:MM:SS,mmm)
local function secToSrtTime(s)
    local ms = math.floor((s % 1) * 1000)
    local ss = math.floor(s) % 60
    local mm = math.floor(s / 60) % 60
    local hh = math.floor(s / 3600)
    return string.format("%02d:%02d:%02d,%03d", hh, mm, ss, ms)
end

local function parseSrtTimestamp(ts)
    local h, m, s, ms = ts:match("(%d+):(%d+):(%d+),(%d+)")
    if not h then
        h, m, s, ms = ts:match("(%d+):(%d+):(%d+)%.(%d+)")
    end
    if not h then return nil end
    return tonumber(h) * 3600 + tonumber(m) * 60 + tonumber(s) + tonumber(ms) / 1000
end

local function unescapeUnicode(str)
    -- Convert \uXXXX or uXXXX sequences to UTF-8
    str = str:gsub("\\u(%x%x%x%x)", function(hex)
        local code = tonumber(hex, 16)
        if code < 128 then
            return string.char(code)
        elseif code < 2048 then
            return string.char(192 + math.floor(code / 64), 128 + (code % 64))
        elseif code < 65536 then
            return string.char(224 + math.floor(code / 4096), 128 + (math.floor(code / 64) % 64), 128 + (code % 64))
        end
        return ""
    end)
    -- Also handle without backslash (in case JSON parsing already removed it)
    str = str:gsub("u(%x%x%x%x)", function(hex)
        local code = tonumber(hex, 16)
        if code < 128 then
            return string.char(code)
        elseif code < 2048 then
            return string.char(192 + math.floor(code / 64), 128 + (code % 64))
        elseif code < 65536 then
            return string.char(224 + math.floor(code / 4096), 128 + (math.floor(code / 64) % 64), 128 + (code % 64))
        end
        return ""
    end)
    return str
end

local function normalizeSrtContent(srt)
    srt = tostring(srt or "")
    srt = unescapeUnicode(srt)
    srt = srt:gsub("\r\n", "\n"):gsub("\r", "\n")
    srt = srt:gsub("^%s*```[%w]*\n", "")
    srt = srt:gsub("\n```%s*$", "")
    return srt
end

local function parseSrtSegments(srt)
    local segments = {}
    srt = normalizeSrtContent(srt)

    local lines = {}
    for line in (srt .. "\n"):gmatch("(.-)\n") do
        lines[#lines + 1] = line
    end

    local i = 1
    while i <= #lines do
        local line = lines[i]
        if line:match("^%s*$") then
            i = i + 1
        else
            if line:match("^%d+%s*$") and i + 1 <= #lines then
                i = i + 1
                line = lines[i]
            end

            local t1, t2 = line:match("^(%d%d:%d%d:%d%d[,%.]%d%d%d)%s*%-%-%>%s*(%d%d:%d%d:%d%d[,%.]%d%d%d)")
            if t1 and t2 then
                local startSec = parseSrtTimestamp(t1)
                local endSec = parseSrtTimestamp(t2)
                i = i + 1
                local textParts = {}
                while i <= #lines and not lines[i]:match("^%s*$") do
                    textParts[#textParts + 1] = lines[i]
                    i = i + 1
                end
                local text = table.concat(textParts, " "):gsub("%s+", " "):gsub("^%s+", ""):gsub("%s+$", "")
                if startSec and endSec and endSec > startSec and text ~= "" then
                    segments[#segments + 1] = { start = startSec, ["end"] = endSec, text = text }
                end
            else
                i = i + 1
            end
        end
    end

    return segments
end

-- Count visible characters (not bytes) - Hebrew/Arabic are 2-byte UTF-8
local function utf8len(s)
    local len = 0
    for i = 1, #s do
        local b = s:byte(i)
        if b < 0x80 or b >= 0xC0 then len = len + 1 end  -- skip continuation bytes
    end
    return len
end

-- Wrap subtitle text to max chars per line (word-wrap, punctuation stays with word)
local function wrapText(text, maxChars)
    if not maxChars or maxChars <= 0 then return text end
    local words = {}
    for w in text:gmatch("%S+") do words[#words+1] = w end
    if #words == 0 then return text end
    local lines = {}
    local currentLine = ""
    local currentLen = 0
    for _, word in ipairs(words) do
        local wordLen = utf8len(word)
        if currentLine == "" then
            -- Always place first word on line, even if longer than maxChars
            currentLine = word
            currentLen = wordLen
        elseif currentLen + 1 + wordLen <= maxChars then
            currentLine = currentLine .. " " .. word
            currentLen = currentLen + 1 + wordLen
        else
            lines[#lines+1] = currentLine
            currentLine = word
            currentLen = wordLen
        end
    end
    if currentLine ~= "" then lines[#lines+1] = currentLine end
    return table.concat(lines, "\n")
end

local function importSegments(segments, maxCharsPerLine)
    project = projectManager:GetCurrentProject()
    timeline = project and project:GetCurrentTimeline() or nil
    mediaPool = project and project:GetMediaPool() or nil
    if not project or not timeline or not mediaPool then
        return { error = true, message = "No active timeline" }
    end
    if not segments or #segments == 0 then
        return { error = true, message = "No subtitle segments" }
    end

    resolve:OpenPage("edit")

    -- Build SRT content from segments and write to temp file
    print("[SubabaExport] maxCharsPerLine=" .. tostring(maxCharsPerLine) .. " segments=" .. #segments)
    local srtLines = {}
    for i, seg in ipairs(segments) do
        local wrapped = wrapText(tostring(seg.text or ""), maxCharsPerLine)
        if i == 1 then
            print("[SubabaExport] seg1 raw: " .. tostring(seg.text))
            print("[SubabaExport] seg1 wrap: " .. wrapped:gsub("\n", " | "))
        end
        srtLines[#srtLines+1] = tostring(i)
        srtLines[#srtLines+1] = secToSrtTime(seg.start) .. " --> " .. secToSrtTime(seg["end"])
        srtLines[#srtLines+1] = wrapped
        srtLines[#srtLines+1] = ""
    end
    -- Unique filename to avoid media pool caching a stale version
    local srtTempPath = tempDir .. sep .. "subaba_import_" .. os.time() .. ".srt"
    -- Binary mode: keep \n as-is (text mode converts \n to \r\n on Windows, breaking multi-line subtitles)
    local f = io.open(srtTempPath, "wb")
    if not f then return { error = true, message = "Cannot write temp SRT file" } end
    f:write(table.concat(srtLines, "\n"))
    f:close()
    print("[SubabaExport] SRT written: " .. srtTempPath)

    -- Fresh references to Resolve objects (required for reliable SRT import)
    local r = resolve or Resolve()
    local pm = r:GetProjectManager()
    local proj = pm:GetCurrentProject()
    local tl = proj:GetCurrentTimeline()
    local mp = proj:GetMediaPool()

    local clips = mp:ImportMedia({srtTempPath})
    if not clips or #clips == 0 then
        return { error = true, message = "Failed to import SRT into media pool" }
    end
    print("[SubabaExport] SRT imported to media pool (" .. #clips .. " clip(s))")

    tl:AddTrack("subtitle")
    local trackIndex = tl:GetTrackCount("subtitle")
    print("[SubabaExport] Subtitle track count: " .. trackIndex)

    local result = mp:AppendToTimeline({clips[1]})
    -- Do not delete SRT file here - Resolve reads it asynchronously after AppendToTimeline
    print("[SubabaExport] SRT kept: " .. srtTempPath)
    if not result or #result == 0 then
        return { error = true, message = "Failed to place SRT on subtitle track" }
    end
    print("[SubabaExport] AppendToTimeline placed " .. #result .. " item(s)")

    return { success = true, count = #segments, track = trackIndex }
end

-- ============================================================
-- 7. Audio export
-- ============================================================
local function exportAudio(settings)
    project = projectManager:GetCurrentProject()
    timeline = project and project:GetCurrentTimeline() or nil
    if not project or not timeline then
        return { error = true, message = "No timeline" }
    end
    if project:IsRenderingInProgress() then
        return { error = true, message = "Render already in progress" }
    end

    local frameRate = tonumber(timeline:GetSetting("timelineFrameRate")) or 25
    local startFrame = timeline:GetStartFrame() or 0
    local trackCount = timeline:GetTrackCount("audio") or 0

    local selected = {}
    for _, idx in ipairs(settings.tracks or {}) do selected[idx] = true end

    local origStates = {}
    for i = 1, trackCount do
        origStates[i] = timeline:GetIsTrackEnabled("audio", i)
        timeline:SetTrackEnable("audio", i, selected[i] == true)
    end

    local fileBase = "subaba_audio_" .. os.time()
    local rs = {
        TargetDir = tempDir,
        CustomName = fileBase,
        RenderMode = "Single clip",
        IsExportVideo = false,
        IsExportAudio = true,
        AudioBitDepth = 24,
        AudioSampleRate = 48000,
    }

    if settings.useInOut then
        local ok, mio = pcall(function() return timeline:GetMarkInOut() end)
        if ok and mio then
            local mIn, mOut = nil, nil
            if mio["video"] then mIn = mio["video"]["in"]; mOut = mio["video"]["out"] end
            if (not mIn) and mio["audio"] then mIn = mio["audio"]["in"]; mOut = mio["audio"]["out"] end
            if mIn and mOut and mOut > mIn then
                rs.MarkIn = mIn + startFrame
                rs.MarkOut = mOut + startFrame
            end
        end
    end

    resolve:OpenPage("deliver")
    project:LoadRenderPreset("Audio Only")
    project:SetRenderSettings(rs)
    local pid = project:AddRenderJob()
    if not pid then
        for i = 1, trackCount do timeline:SetTrackEnable("audio", i, origStates[i]) end
        resolve:OpenPage("edit")
        return { error = true, message = "Failed to create render job" }
    end

    project:StartRendering(pid)
    while project:IsRenderingInProgress() do busyWait(0.3) end

    local jobs = project:GetRenderJobList() or {}
    local last = jobs[#jobs] or {}
    local outPath = tostring(last["TargetDir"] or tempDir) .. sep .. tostring(last["OutputFilename"] or (fileBase .. ".mp3"))

    for i = 1, trackCount do timeline:SetTrackEnable("audio", i, origStates[i]) end
    resolve:OpenPage("edit")

    if not fileExists(outPath) then
        return { error = true, message = "Rendered file not found: " .. outPath }
    end

    return { success = true, path = outPath }
end

-- ============================================================
-- 8. Upload audio to Subaba API and get SRT
-- ============================================================
local function writeUploadScript()
    if not isWindows then return true end
    local script = [=[
param(
    [string]$AudioPath,
    [string]$AuthToken,
    [string]$MaxWords,
    [string]$StretchCaptions,
    [string]$IncludePunctuation,
    [string]$RawCaptionsOnly,
    [string]$Language,
    [string]$Version,
    [string]$OutFile
)
$ProgressPreference = 'SilentlyContinue'
try {
    $args = @(
        '-sS',
        '--ssl-no-revoke',
        '-X', 'POST',
        'https://sababa.onrender.com/api/generate-srt',
        '-w', "`n__STATUS__:%{http_code}",
        '-F', "auth_token=$AuthToken",
        '-F', "max_words_per_subtitle=$MaxWords",
        '-F', "stretch_captions=$StretchCaptions",
        '-F', "include_punctuation=$IncludePunctuation",
        '-F', "raw_captions_only=$RawCaptionsOnly",
        '-F', "thinking_budget_multiplier=0",
        '-F', "language=$Language",
        '-F', "version=$Version",
        '-F', "audio_file=@$AudioPath"
    )
    $raw = & curl.exe @args 2>&1 | Out-String
    [System.IO.File]::WriteAllText($OutFile, $raw, [System.Text.Encoding]::UTF8)
} catch {
    $msg = $_.Exception.Message
    $fallback = "{""message"":""" + ($msg -replace '"', '\\"') + """}`n__STATUS__:500"
    [System.IO.File]::WriteAllText($OutFile, $fallback, [System.Text.Encoding]::UTF8)
}
]=]
    return writeAll(uploadScript, script)
end

local function runApiRequest(audioPath, settings)
    os.remove(apiRawPath)

    local authToken = tostring(settings.authToken or "")
    local maxWords = tostring(math.floor(tonumber(settings.maxWords) or 10))
    local stretchCaptions = settings.stretchCaptions and "true" or "false"
    local includePunctuation = settings.removePunctuation and "false" or "true"
    local rawCaptionsOnly = settings.rawCaptionsOnly and "true" or "false"
    local language = tostring(settings.language or "he")
    local version = tostring(settings.version or "resolve-1.0.0")

    if isWindows then
        if not writeUploadScript() then
            return { error = true, message = "Cannot write upload script" }
        end
        local psParams = "-NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File " .. psQuote(uploadScript)
            .. " -AudioPath " .. psQuote(audioPath)
            .. " -AuthToken " .. psQuote(authToken)
            .. " -MaxWords " .. psQuote(maxWords)
            .. " -StretchCaptions " .. psQuote(stretchCaptions)
            .. " -IncludePunctuation " .. psQuote(includePunctuation)
            .. " -RawCaptionsOnly " .. psQuote(rawCaptionsOnly)
            .. " -Language " .. psQuote(language)
            .. " -Version " .. psQuote(version)
            .. " -OutFile " .. psQuote(apiRawPath)

        if shellExecA then
            shellExecA(nil, "open", "powershell.exe", psParams, nil, 0)
            -- Progress stages (seconds elapsed -> i18n key)
            local progressStages = {
                { t = 0,  msg = "stageUploading" },
                { t = 8,  msg = "stageTranscribing" },
                { t = 25, msg = "stageImproving" },
                { t = 60, msg = "stageAlmostDone" },
            }
            local stageIdx = 1
            local elapsed = 0
            local done = false
            for _ = 1, 108000 do -- up to ~6 hours at 0.2s polling
                if fileExists(apiRawPath) then
                    done = true
                    break
                end
                busyWait(0.2)
                elapsed = elapsed + 0.2
                -- Advance to next stage when threshold is reached
                while stageIdx < #progressStages and elapsed >= progressStages[stageIdx + 1].t do
                    stageIdx = stageIdx + 1
                    setLive("generating", progressStages[stageIdx].msg)
                end
            end
            if not done then
                return { error = true, message = "Timed out waiting for API upload script output", errorType = "timeout" }
            end
        else
            os.execute("powershell " .. psParams)
        end
    else
        local cmd = "curl -sS -X POST " .. shQuote("https://sababa.onrender.com/api/generate-srt")
            .. " -w " .. shQuote("\\n__STATUS__:%{http_code}")
            .. " -F " .. shQuote("auth_token=" .. authToken)
            .. " -F " .. shQuote("max_words_per_subtitle=" .. maxWords)
            .. " -F " .. shQuote("stretch_captions=" .. stretchCaptions)
            .. " -F " .. shQuote("include_punctuation=" .. includePunctuation)
            .. " -F " .. shQuote("raw_captions_only=" .. rawCaptionsOnly)
            .. " -F " .. shQuote("thinking_budget_multiplier=0")
            .. " -F " .. shQuote("language=" .. language)
            .. " -F " .. shQuote("version=" .. version)
            .. " -F " .. shQuote("audio_file=@" .. audioPath)
            .. " > " .. shQuote(apiRawPath) .. " 2>&1"
        os.execute(cmd)
    end

    local raw = readAll(apiRawPath)
    if not raw or raw == "" then
        return { error = true, message = "Empty API response" }
    end
    raw = raw:gsub("^\239\187\191", "")

    local markerStart, markerEnd, code = raw:find("__STATUS__:(%d%d%d)%s*$")
    local status = tonumber(code or "500")
    local body = raw
    if markerStart then
        body = raw:sub(1, markerStart - 1):gsub("%s+$", "")
    end
    body = body:gsub("^\239\187\191", "")

    local okJson, respObj = pcall(JSON.decode, body)
    if not okJson or type(respObj) ~= "table" then
        if status >= 200 and status < 300 then
            return { error = true, message = "Invalid JSON from API" }
        end
        return { error = true, message = "API error (" .. tostring(status) .. "): " .. body }
    end

    -- Detect specific HTTP error types
    if status == 401 then
        return { error = true, message = tostring(respObj.message or "Unauthorized"), errorType = "auth" }
    end
    if status == 402 or status == 430 then
        return { error = true, message = tostring(respObj.message or "Not enough minutes"), errorType = "payment" }
    end
    if status < 200 or status >= 300 then
        return { error = true, message = tostring(respObj.message or ("API HTTP " .. tostring(status))), errorType = "server" }
    end

    local srt = tostring(respObj.srt_content or "")
    srt = normalizeSrtContent(srt)
    if srt == "" then
        return { error = true, message = tostring(respObj.message or "Empty SRT from API"), errorType = "server" }
    end

    return {
        success = true,
        srt = srt,
        message = tostring(respObj.message or ""),
        remaining = tonumber(respObj.remaining_minutes_seconds) or nil
    }
end

-- ============================================================
-- 9. Process export request end-to-end
-- ============================================================
local function processRequest(settings)
    if not settings then
        return { error = true, message = "Missing settings" }
    end
    if not settings.authToken or settings.authToken == "" then
        return { error = true, message = "Login required (auth token missing)" }
    end

    -- If no tracks specified, use all available tracks
    if not settings.tracks or #settings.tracks == 0 then
        local trackCount = timeline and timeline:GetTrackCount("audio") or 0
        settings.tracks = {}
        for i = 1, trackCount do
            settings.tracks[#settings.tracks + 1] = i
        end
    end

    setLive("exporting_audio", "Exporting audio from timeline...")
    local exp = exportAudio(settings)
    if exp.error then return exp end
    liveLastPath = exp.path

    -- Calculate in-point offset for subtitle positioning
    local inPointOffset = 0
    if settings.useInOut then
        local ok, mio = pcall(function() return timeline:GetMarkInOut() end)
        if ok and mio then
            local mIn = nil
            if mio["video"] then mIn = mio["video"]["in"] end
            if (not mIn) and mio["audio"] then mIn = mio["audio"]["in"] end
            if mIn then
                local frameRate = tonumber(timeline:GetSetting("timelineFrameRate")) or 25
                inPointOffset = mIn / frameRate
            end
        end
    end

    setLive("generating", "Uploading audio to server...")
    local api = runApiRequest(exp.path, settings)
    if api.error then return api end

    setLive("importing", "Importing subtitles to timeline...")
    local segments = parseSrtSegments(api.srt)
    if not segments or #segments == 0 then
        return { error = true, message = "Generated SRT has no valid subtitle segments" }
    end

    -- Offset segments by in-point
    if inPointOffset > 0 then
        for i, seg in ipairs(segments) do
            seg.start = seg.start + inPointOffset
            seg["end"] = seg["end"] + inPointOffset
        end
    end

    local imp = importSegments(segments, tonumber(settings.maxCharsPerLine) or 0)
    if imp.error then return imp end

    local msg = "Imported " .. tostring(imp.count or #segments) .. " subtitles"
    if api.remaining then
        msg = msg .. " | Remaining seconds: " .. tostring(math.floor(api.remaining))
    end
    return { success = true, message = msg, apiMessage = api.message or "", count = imp.count, track = imp.track }
end

-- ============================================================
-- 10. Local HTTP bridge script (PowerShell/Ruby)
-- ============================================================
local function writeServerScript()
    if isWindows then
        local ps = io.open(serverScript, "w")
        if not ps then return false end
        ps:write([=[
param($htmlFile, $settingsFile, $liveFile, $readyFile, $stopFile, $port, $persistFile, $sessionFile)
$l = [Net.HttpListener]::new()
$l.Prefixes.Add("http://localhost:${port}/")
try { $l.Start() } catch { exit 1 }
[IO.File]::WriteAllText($readyFile, "ready")

function Write-JsonResponse($resp, $statusCode, $jsonText) {
    $resp.StatusCode = $statusCode
    $resp.ContentType = "application/json; charset=utf-8"
    $bytes = [Text.Encoding]::UTF8.GetBytes($jsonText)
    $resp.OutputStream.Write($bytes, 0, $bytes.Length)
}

function Handle-AuthProxy($reqBody, $resp) {
    try {
        $obj = $reqBody | ConvertFrom-Json
    } catch {
        Write-JsonResponse $resp 400 '{"error":"Invalid JSON"}'
        return
    }

    $endpoint = [string]$obj.endpoint
    if ([string]::IsNullOrWhiteSpace($endpoint) -or -not $endpoint.StartsWith('/')) {
        Write-JsonResponse $resp 400 '{"error":"Invalid endpoint"}'
        return
    }

    $allowed = @('/api/login','/send-verification-code','/verify-code','/reset-password','/api/get-token-info')
    if ($allowed -notcontains $endpoint) {
        Write-JsonResponse $resp 400 '{"error":"Endpoint not allowed"}'
        return
    }

    $payloadJson = '{}'
    try {
        if ($null -ne $obj.payload) {
            $payloadJson = $obj.payload | ConvertTo-Json -Compress -Depth 10
        }
    } catch { }

    $target = "https://sababa.onrender.com$endpoint"

    try {
        $r = Invoke-WebRequest -Uri $target -Method POST -ContentType "application/json" -Body $payloadJson -UseBasicParsing -TimeoutSec 35
        $resp.StatusCode = [int]$r.StatusCode
        $ct = $r.Headers['Content-Type']
        if ([string]::IsNullOrWhiteSpace($ct)) { $ct = 'application/json; charset=utf-8' }
        $resp.ContentType = $ct
        $bytes = [Text.Encoding]::UTF8.GetBytes($r.Content)
        $resp.OutputStream.Write($bytes, 0, $bytes.Length)
    } catch {
        $webResp = $_.Exception.Response
        if ($webResp) {
            try {
                $resp.StatusCode = [int]$webResp.StatusCode
            } catch { $resp.StatusCode = 500 }
            $sr = New-Object IO.StreamReader($webResp.GetResponseStream())
            $errBody = $sr.ReadToEnd()
            $sr.Close()
            if ([string]::IsNullOrWhiteSpace($errBody)) { $errBody = '{"error":"Upstream error"}' }
            $resp.ContentType = 'application/json; charset=utf-8'
            $bytes = [Text.Encoding]::UTF8.GetBytes($errBody)
            $resp.OutputStream.Write($bytes, 0, $bytes.Length)
        } else {
            Write-JsonResponse $resp 500 ('{"error":"' + ($_.Exception.Message -replace '"', '\\"') + '"}')
        }
    }
}

while (-not (Test-Path $stopFile)) {
    $ar = $l.BeginGetContext($null, $null)
    while (-not $ar.AsyncWaitHandle.WaitOne(500)) {
        if (Test-Path $stopFile) { break }
    }
    if (Test-Path $stopFile) { break }

    try { $ctx = $l.EndGetContext($ar) } catch { continue }
    $req = $ctx.Request
    $resp = $ctx.Response
    $resp.AddHeader("Access-Control-Allow-Origin", "*")
    $u = $req.Url.AbsolutePath

    try {
        if ($req.HttpMethod -eq 'GET' -and $u -eq '/') {
            $b = [IO.File]::ReadAllBytes($htmlFile)
            $resp.ContentType = 'text/html; charset=utf-8'
            $resp.OutputStream.Write($b, 0, $b.Length)
        } elseif ($req.HttpMethod -eq 'GET' -and $u -eq '/live') {
            if (Test-Path $liveFile) {
                $b = [IO.File]::ReadAllBytes($liveFile)
                $resp.ContentType = 'application/json; charset=utf-8'
                $resp.OutputStream.Write($b, 0, $b.Length)
            } else {
                Write-JsonResponse $resp 200 '{"exportStatus":"idle","exportMsg":"Waiting"}'
            }
        } elseif ($req.HttpMethod -eq 'POST' -and $u -eq '/export') {
            $rd = [IO.StreamReader]::new($req.InputStream)
            [IO.File]::WriteAllText($settingsFile, $rd.ReadToEnd())
            Write-JsonResponse $resp 200 '{"ok":true}'
        } elseif ($req.HttpMethod -eq 'POST' -and $u -eq '/settings') {
            $rd = [IO.StreamReader]::new($req.InputStream)
            [IO.File]::WriteAllText($persistFile, $rd.ReadToEnd())
            Write-JsonResponse $resp 200 '{"ok":true}'
        } elseif ($req.HttpMethod -eq 'POST' -and $u -eq '/save-session') {
            # Persist auth session (token/username/minutes) to survive port changes
            $rd = [IO.StreamReader]::new($req.InputStream)
            [IO.File]::WriteAllText($sessionFile, $rd.ReadToEnd())
            Write-JsonResponse $resp 200 '{"ok":true}'
        } elseif ($req.HttpMethod -eq 'POST' -and $u -eq '/auth-proxy') {
            $rd = [IO.StreamReader]::new($req.InputStream)
            $body = $rd.ReadToEnd()
            Handle-AuthProxy $body $resp
        } else {
            Write-JsonResponse $resp 404 '{"error":"Not found"}'
        }
    } catch {
        Write-JsonResponse $resp 500 ('{"error":"' + ($_.Exception.Message -replace '"', '\\"') + '"}')
    }

    try { $resp.Close() } catch { }
}

$l.Stop()
if (Test-Path $stopFile) { Remove-Item $stopFile -Force }
if (Test-Path $readyFile) { Remove-Item $readyFile -Force }
]=])
        ps:close()
        return true
    else
        local rb = io.open(serverScript, "w")
        if not rb then return false end
        -- Perl server using only macOS core modules (IO::Socket::INET, IO::Select, JSON::PP)
        -- Replaces Ruby/WEBrick which is removed from stdlib in Ruby 3.0+ (Homebrew)
        rb:write([=[
#!/usr/bin/perl
use strict;
use warnings;
use IO::Socket::INET;
use IO::Select;
use JSON::PP;

my ($html_file, $settings_file, $live_file, $ready_file,
    $stop_file, $port, $persist_file, $session_file) = @ARGV;

# Bind TCP server on localhost
my $server = IO::Socket::INET->new(
    LocalAddr => '127.0.0.1', LocalPort => $port + 0,
    Proto => 'tcp', Reuse => 1, Listen => 10,
) or die "Cannot bind port $port: $!\n";

{ open my $fh, '>', $ready_file or die; print $fh 'ready'; close $fh; }

my $sel = IO::Select->new($server);

# Main loop: poll for connections, check stop file
while (!-e $stop_file) {
    my @ready = $sel->can_read(0.5);
    for my $sock (@ready) {
        next unless $sock == $server;
        my $client = $server->accept() or next;
        $client->autoflush(1);
        eval { handle_client($client) };
        eval { $client->close() };
    }
}

$server->close();
unlink $stop_file  if -e $stop_file;
unlink $ready_file if -e $ready_file;

sub shell_esc { my $s = shift; $s =~ s/'/'\\''/g; return "'$s'"; }

sub send_resp {
    my ($sock, $code, $ct, $body) = @_;
    my %st = (200=>'OK', 204=>'No Content', 400=>'Bad Request',
              404=>'Not Found', 405=>'Method Not Allowed', 500=>'Internal Server Error');
    print $sock "HTTP/1.1 $code " . ($st{$code}||'OK') . "\r\n"
              . "Content-Type: $ct\r\n"
              . "Access-Control-Allow-Origin: *\r\n"
              . "Content-Length: " . length($body) . "\r\n"
              . "Connection: close\r\n\r\n" . $body;
}

sub json_resp { send_resp($_[0], $_[1], 'application/json; charset=utf-8', $_[2]); }

sub handle_client {
    my ($sock) = @_;
    my $rl = <$sock>; return unless defined $rl;
    $rl =~ s/\r?\n//;
    my ($meth, $path) = $rl =~ /^(\w+)\s+(\S+)/ or return;

    # Read headers
    my %h;
    while (defined(my $ln = <$sock>)) {
        $ln =~ s/\r?\n//; last if $ln eq '';
        $h{lc $1} = $2 if $ln =~ /^([^:]+):\s*(.*)$/;
    }

    # CORS preflight
    if ($meth eq 'OPTIONS') {
        print $sock "HTTP/1.1 204 No Content\r\nAccess-Control-Allow-Origin: *\r\n"
                  . "Access-Control-Allow-Methods: GET, POST, OPTIONS\r\n"
                  . "Access-Control-Allow-Headers: Content-Type\r\n"
                  . "Content-Length: 0\r\nConnection: close\r\n\r\n";
        return;
    }

    # Read body if present
    my $body = '';
    read($sock, $body, $h{'content-length'}) if $h{'content-length'} && $h{'content-length'} > 0;

    # Route requests
    if ($meth eq 'GET' && $path eq '/') {
        open(my $fh, '<:raw', $html_file) or return json_resp($sock, 500, '{"error":"HTML unreadable"}');
        my $html = do { local $/; <$fh> }; close $fh;
        send_resp($sock, 200, 'text/html; charset=utf-8', $html);

    } elsif ($meth eq 'GET' && $path =~ m{^/live}) {
        my $d = '{"exportStatus":"idle","exportMsg":"Waiting"}';
        if (-e $live_file && open(my $fh, '<:raw', $live_file)) {
            $d = do { local $/; <$fh> }; close $fh;
        }
        json_resp($sock, 200, $d);

    } elsif ($meth eq 'POST' && $path eq '/export') {
        open(my $fh, '>', $settings_file) or return json_resp($sock, 500, '{"error":"Cannot save"}');
        print $fh $body; close $fh;
        json_resp($sock, 200, '{"ok":true}');

    } elsif ($meth eq 'POST' && $path eq '/save-session') {
        if (defined $session_file && $session_file ne '') {
            open(my $fh, '>', $session_file) or return json_resp($sock, 500, '{"error":"Cannot save"}');
            print $fh $body; close $fh;
        }
        json_resp($sock, 200, '{"ok":true}');

    } elsif ($meth eq 'POST' && $path eq '/settings') {
        if (defined $persist_file && $persist_file ne '') {
            open(my $fh, '>', $persist_file) or return json_resp($sock, 500, '{"error":"Cannot save"}');
            print $fh $body; close $fh;
        }
        json_resp($sock, 200, '{"ok":true}');

    } elsif ($meth eq 'POST' && $path eq '/auth-proxy') {
        my ($code, $rb) = auth_proxy($body);
        json_resp($sock, $code, $rb);

    } else {
        json_resp($sock, 404, '{"error":"Not found"}');
    }
}

sub auth_proxy {
    my ($body) = @_;
    my $req = eval { decode_json($body) };
    return (400, '{"error":"Invalid JSON"}') if $@ || ref($req) ne 'HASH';

    my $ep = $req->{endpoint} // '';
    my %ok = map { $_ => 1 } ('/api/login', '/send-verification-code', '/verify-code',
                                '/reset-password', '/api/get-token-info');
    return (400, '{"error":"Endpoint not allowed"}') unless $ep =~ m{^/} && $ok{$ep};

    my $pay = encode_json($req->{payload} // {});
    my ($ti, $to) = ("/tmp/subaba_prx_in_$$.json", "/tmp/subaba_prx_out_$$.txt");
    { open(my $fh, '>', $ti) or return (500, '{"error":"tmp write failed"}'); print $fh $pay; close $fh; }

    my $url = "https://sababa.onrender.com$ep";
    system("curl -sS -X POST " . shell_esc($url)
         . " -H 'Content-Type: application/json'"
         . " --data-binary " . shell_esc("\@$ti")
         . " -w '\\n__STATUS__:%{http_code}'"
         . " > " . shell_esc($to) . " 2>/dev/null");
    unlink $ti;

    open(my $fh, '<:raw', $to) or do { unlink $to; return (500, '{"error":"no curl output"}') };
    my $raw = do { local $/; <$fh> }; close $fh; unlink $to;

    return (int($2), $1) if $raw =~ /\A(.*)\n__STATUS__:(\d+)\s*\z/s;
    return (500, '{"error":"curl parse error"}');
}
]=])
        rb:close()
        return true
    end
end

local function startServer()
    os.remove(stopFile)
    os.remove(readyFile)
    if not writeServerScript() then
        print("[SubabaExport] ERROR: Cannot write server script.")
        return false
    end

    if isWindows then
        local psParams = '-NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File '
            .. '"' .. serverScript .. '" '
            .. '"' .. htmlPath .. '" '
            .. '"' .. settingsFile .. '" '
            .. '"' .. liveDataPath .. '" '
            .. '"' .. readyFile .. '" '
            .. '"' .. stopFile .. '" '
            .. PORT .. ' '
            .. '"' .. persistentSettingsFile .. '" '
            .. '"' .. sessionFile .. '"'

        if shellExecA then
            shellExecA(nil, "open", "powershell.exe", psParams, nil, 0)
        else
            os.execute('start "" /b powershell ' .. psParams)
        end
    else
        -- Use system Perl (/usr/bin/perl) with shQuote for safe path handling
        os.execute('/usr/bin/perl ' .. shQuote(serverScript)
            .. ' ' .. shQuote(htmlPath)
            .. ' ' .. shQuote(settingsFile)
            .. ' ' .. shQuote(liveDataPath)
            .. ' ' .. shQuote(readyFile)
            .. ' ' .. shQuote(stopFile)
            .. ' ' .. PORT
            .. ' ' .. shQuote(persistentSettingsFile)
            .. ' ' .. shQuote(sessionFile)
            .. ' > /dev/null 2>&1 &')
    end

    for _ = 1, 30 do
        if fileExists(readyFile) then
            os.remove(readyFile)
            return true
        end
        busyWait(0.5)
    end
    print("[SubabaExport] WARNING: Server startup timeout.")
    return true
end

local function stopServer()
    local sf = io.open(stopFile, "w")
    if sf then sf:write("stop"); sf:close() end
    busyWait(1)
end

local function writeLauncherPage()
    local target = "http://localhost:" .. PORT .. "/"
    local launcherHtml = ([==[
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>Subaba</title>
<style>
body{margin:0;background:#161b22;color:#e7edf5;font-family:Segoe UI,Arial,sans-serif;display:flex;align-items:center;justify-content:center;height:100vh}
.box{padding:16px 20px;border:1px solid #3a4451;border-radius:10px;background:#202733;max-width:360px;text-align:center}
.msg{font-size:15px;line-height:1.5}
</style>
</head>
<body>
<div class="box">
  <div class="msg">פותח את Subaba...</div>
</div>
<script>
(function(){
  var target = "{{TARGET_URL}}";
  var attempts = 0;
  var maxAttempts = 300; // 30s
  function checkServer(){
    fetch(target + "live?ts=" + Date.now(), { cache: "no-store" })
      .then(function(){
        // Open via window.open so the new tab can call window.close() later
        var w = window.open(target, '_blank');
        if(w){
          document.body.innerHTML = '<div class="box"><div class="msg">Subaba is open in a new tab.</div></div>';
        } else {
          window.location.replace(target);
        }
      })
      .catch(function(){
        attempts += 1;
        if (attempts >= maxAttempts) {
          window.location.href = target;
          return;
        }
        setTimeout(checkServer, 100);
      });
  }
  checkServer();
})();
</script>
</body>
</html>
]==]):gsub("{{TARGET_URL}}", target)

    return writeAll(launcherPath, launcherHtml)
end

local function openBrowser(targetUrl)
    local url = targetUrl or ("http://localhost:" .. PORT)
    if isWindows then
        if shellExecA then
            shellExecA(nil, "open", url, "", nil, 1)
        else
            os.execute('start "" "' .. url .. '"')
        end
    else
        os.execute('open "' .. url .. '"')
    end
end

-- ============================================================
-- 11. HTML UI
-- ============================================================
local HTML_TEMPLATE = [==[
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width,initial-scale=1">
<title>כתוביות</title>
<style>
:root {
  --royal-blue: #1070FF;
  --royal-blue-darker: #0058cc;
  --royal-blue-lighter: #69a1ff;
  --gold: #FFC107;
  --gold-darker: #dda700;
  --dark-gray: #1e2228;
  --medium-gray: #2a2f37;
  --light-gray: #d1d5db;
  --lighter-gray: #f1f3f5;
  --white: #ffffff;
  --border-color: #404650;
  --shadow-color: rgba(0, 0, 0, 0.5);
  --focus-shadow: rgba(16, 112, 255, 0.4);
}

* { box-sizing: border-box; }

html {
  height: 100%;
  overflow: hidden;
}

body {
  margin: 0;
  padding: 0;
  font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, Cantarell, "Open Sans", "Helvetica Neue", sans-serif;
  background: linear-gradient(180deg, var(--dark-gray) 0%, #2c313a 100%);
  color: var(--light-gray);
  height: 100vh;
  width: 100%;
  font-size: clamp(15px, 2vw + 0.5vh, 18px);
  line-height: 1.6;
  display: flex;
  align-items: center;
  justify-content: center;
  overflow-y: auto;
  direction: rtl;
}

::-webkit-scrollbar { width: 12px; height: 12px; }
::-webkit-scrollbar-track { background: var(--dark-gray); border-radius: 6px; }
::-webkit-scrollbar-thumb { background: var(--royal-blue-lighter); border-radius: 6px; border: 2px solid var(--dark-gray); }
::-webkit-scrollbar-thumb:hover { background: var(--royal-blue); }

.container {
  display: flex;
  flex-direction: column;
  width: clamp(380px, 90vw, 800px);
  max-height: 94vh;
  overflow-y: auto;
  margin: 1vh auto;
  padding: clamp(12px, 2.5vw, 20px);
  background-color: var(--medium-gray);
  border-radius: 14px;
  box-shadow: 0 8px 25px var(--shadow-color);
  border: 1px solid var(--border-color);
  position: relative;
}

.header {
  margin-bottom: clamp(8px, 2vh, 18px);
  text-align: center;
  border-bottom: 1px solid var(--royal-blue-lighter);
  padding-bottom: clamp(18px, 3.5vh, 28px);
  flex-shrink: 0;
}

.header h1 {
  font-size: clamp(28px, 5vw, 36px);
  margin: 0;
  padding: 0;
  font-weight: 700;
}

.tl {
  margin-top: 10px;
  margin-bottom: 12px;
  padding: 10px 14px;
  border: 1px solid var(--border-color);
  border-radius: 10px;
  font-size: 15px;
  text-align: center;
  background: var(--dark-gray);
}

.block {
  margin-top: 14px;
  border: 1px solid var(--border-color);
  border-radius: 12px;
  padding: 18px;
  background: var(--dark-gray);
}

.block h3 {
  margin: 0 0 14px;
  font-size: 18px;
  color: var(--royal-blue-lighter);
}

label {
  display: block;
  margin-bottom: 8px;
  font-size: 15px;
  color: var(--lighter-gray);
  font-weight: 500;
}

input[type=text],
input[type=email],
input[type=password],
input[type=number],
select {
  width: 100%;
  padding: 14px;
  border-radius: 8px;
  border: 1px solid var(--border-color);
  background: #171b21;
  color: var(--lighter-gray);
  outline: none;
  font-size: 16px;
  transition: all 0.2s ease;
}

input:focus, select:focus {
  border-color: var(--royal-blue);
  box-shadow: 0 0 0 3px var(--focus-shadow);
}

.inline {
  display: flex;
  align-items: center;
  gap: 10px;
  margin: 12px 0;
}

.inline label {
  margin: 0;
  font-size: 15px;
  color: var(--light-gray);
  cursor: pointer;
}

.row {
  display: flex;
  gap: 14px;
  flex-wrap: wrap;
}

.col {
  flex: 1 1 220px;
}

.authTabs {
  display: flex;
  gap: 8px;
  margin-bottom: 18px;
}

.tab-button {
  flex: 1;
  border: 1px solid var(--border-color);
  background: linear-gradient(180deg, var(--medium-gray) 0%, var(--dark-gray) 100%);
  color: var(--light-gray);
  padding: 14px 20px;
  border-radius: 8px;
  cursor: pointer;
  font-weight: 600;
  font-size: 16px;
  transition: all 0.3s ease;
  position: relative;
}

.tab-button:hover {
  background: linear-gradient(180deg, var(--royal-blue-lighter) 0%, var(--royal-blue) 100%);
  color: var(--white);
  transform: translateY(-2px);
}

.tab-button.active {
  color: var(--white);
  border-color: var(--royal-blue-lighter);
  background: linear-gradient(180deg, var(--royal-blue) 0%, var(--royal-blue-darker) 100%);
  box-shadow: inset 0 2px 4px rgba(0, 0, 0, 0.2);
}

.tab-button.active::after {
  content: '';
  position: absolute;
  bottom: -1px;
  left: 0;
  right: 0;
  height: 3px;
  background: var(--gold);
  border-radius: 0 0 3px 3px;
}

.authPane { display: none; }
.authPane.active { display: block; }

.tabs {
  display: flex;
  gap: 8px;
  margin: 14px 0 10px;
}

.tab-content { display: none; }
.tab-content.active { display: block; }

.btn {
  width: 100%;
  padding: 16px;
  border: none;
  border-radius: 10px;
  cursor: pointer;
  font-weight: 700;
  font-size: 17px;
  color: var(--dark-gray);
  background: linear-gradient(90deg, var(--gold-darker) 0%, var(--gold) 100%);
  transition: all 0.3s ease;
  position: relative;
}

.btn:hover {
  transform: translateY(-2px);
  box-shadow: 0 6px 16px rgba(255, 193, 7, 0.4);
}

.btn:disabled {
  opacity: 0.5;
  cursor: not-allowed;
  transform: none;
}

.btn.loading {
  color: transparent;
}

.btn.loading::after {
  content: '';
  position: absolute;
  width: 22px;
  height: 22px;
  top: 50%;
  left: 50%;
  margin: -11px 0 0 -11px;
  border: 3px solid var(--dark-gray);
  border-top-color: transparent;
  border-radius: 50%;
  animation: spin 0.8s linear infinite;
}

@keyframes spin {
  to { transform: rotate(360deg); }
}

.btn.secondary {
  background: transparent;
  color: var(--light-gray);
  border: 1px solid var(--border-color);
}

.btn.secondary:hover {
  background: rgba(16, 112, 255, 0.15);
  border-color: var(--royal-blue-lighter);
}

.auth-google-divider {
  display: flex;
  align-items: center;
  gap: 12px;
  margin: 16px 0;
  color: #6b7280;
  font-size: 13px;
}

.auth-google-divider::before,
.auth-google-divider::after {
  content: '';
  flex: 1;
  height: 1px;
  background: var(--border-color);
}

.auth-google-button {
  width: 100%;
  padding: 11px 16px;
  background: #131314;
  color: #e3e3e3;
  border: 1px solid #747775;
  border-radius: 20px;
  font-size: 14px;
  font-weight: 500;
  font-family: 'Segoe UI', Roboto, system-ui, sans-serif;
  cursor: pointer;
  display: flex;
  align-items: center;
  justify-content: center;
  gap: 10px;
  transition: background 200ms ease, border-color 200ms ease, box-shadow 200ms ease;
  letter-spacing: 0.01em;
  margin-bottom: 8px;
}

.auth-google-button:hover {
  background: #1f1f21;
  border-color: #8e918f;
  box-shadow: 0 1px 3px rgba(0,0,0,0.3);
}

.auth-google-button:active {
  background: #28292a;
}

.auth-google-button svg {
  width: 18px;
  height: 18px;
  flex-shrink: 0;
}

.badge {
  display: inline-block;
  padding: 6px 14px;
  border: 1px solid var(--border-color);
  border-radius: 999px;
  font-size: 14px;
  color: var(--lighter-gray);
  background: var(--dark-gray);
}

.status {
  margin-top: 14px;
  min-height: 22px;
  font-size: 15px;
  text-align: center;
  padding: 10px;
  border-radius: 8px;
}

.status.ok { color: #72d4b7; background: rgba(114, 212, 183, 0.12); }
.status.err { color: #ff6b6b; background: rgba(255, 107, 107, 0.12); }
.status.info { color: var(--royal-blue-lighter); background: rgba(16, 112, 255, 0.12); }

.logs {
  margin-top: 16px;
  border: 1px solid var(--border-color);
  border-radius: 10px;
  background: #10151c;
  padding: 12px;
}

.logs.hiddenLogs { display: none; }

#logsView {
  width: 100%;
  height: 180px;
  background: #0f141b;
  color: #c8d8e8;
  border: 1px solid #2f3d4f;
  border-radius: 8px;
  padding: 10px;
  font: 13px/1.4 Consolas, monospace;
  resize: vertical;
  outline: none;
}

.hidden { display: none !important; }
.muted { font-size: 14px; color: var(--light-gray); }

.bottomEmail {
  margin-top: 18px;
  text-align: center;
  font-size: 14px;
  color: var(--light-gray);
}

.bottomEmail a { color: var(--light-gray); text-decoration: none; }
.bottomEmail a:hover { color: var(--royal-blue-lighter); }

.settings-btn {
  position: absolute;
  top: 14px;
  left: 14px;
  background: transparent;
  border: 1px solid var(--border-color);
  color: var(--light-gray);
  border-radius: 8px;
  padding: 8px 14px;
  font-size: 18px;
  cursor: pointer;
  z-index: 100;
  transition: all 0.2s ease;
}

.settings-btn:hover {
  background: rgba(16, 112, 255, 0.15);
  border-color: var(--royal-blue-lighter);
}

.settings-menu {
  position: absolute;
  top: 50px;
  left: 14px;
  background: var(--dark-gray);
  border: 1px solid var(--border-color);
  border-radius: 10px;
  padding: 8px;
  z-index: 200;
  min-width: 200px;
  box-shadow: 0 6px 20px rgba(0,0,0,0.4);
}

.settings-menu button {
  display: block;
  width: 100%;
  padding: 12px 16px;
  background: transparent;
  border: none;
  color: var(--light-gray);
  font-size: 15px;
  text-align: right;
  cursor: pointer;
  border-radius: 6px;
  transition: all 0.2s ease;
}

.settings-menu button:hover {
  background: rgba(16, 112, 255, 0.15);
  color: var(--white);
}

.lang-switch-top {
  position: absolute;
  top: 14px;
  right: 14px;
  display: flex;
  gap: 6px;
  z-index: 100;
}

.lang-btn {
  border: 1px solid var(--border-color);
  background: transparent;
  color: var(--light-gray);
  border-radius: 6px;
  padding: 6px 12px;
  font-size: 14px;
  cursor: pointer;
  transition: all 0.2s ease;
}

.lang-btn:hover {
  background: rgba(16, 112, 255, 0.1);
  border-color: var(--royal-blue-lighter);
}

.lang-btn.active {
  color: var(--white);
  border-color: var(--royal-blue-lighter);
  background: rgba(16, 112, 255, 0.2);
}

.popup-overlay {
  position: fixed;
  top: 0; left: 0; right: 0; bottom: 0;
  background: rgba(0,0,0,0.7);
  display: none;
  align-items: center;
  justify-content: center;
  z-index: 1000;
}

.popup-overlay.show { display: flex; }

.popup-content {
  background: var(--medium-gray);
  border: 1px solid var(--border-color);
  border-radius: 14px;
  padding: 24px;
  max-width: 340px;
  width: 90%;
  text-align: center;
}

.popup-content h3 {
  margin: 0 0 20px;
  font-size: 20px;
  color: var(--royal-blue-lighter);
}

.popup-close {
  position: absolute;
  top: 10px;
  left: 14px;
  font-size: 22px;
  cursor: pointer;
  color: var(--light-gray);
  opacity: 0.7;
  transition: opacity 0.2s;
}

.popup-close:hover { opacity: 1; }

.popup-content { position: relative; }

.language-grid {
  display: flex;
  gap: 14px;
  justify-content: center;
  margin-bottom: 20px;
}

.language-card {
  flex: 1;
  padding: 20px;
  background: var(--dark-gray);
  border: 2px solid var(--border-color);
  border-radius: 10px;
  cursor: pointer;
  transition: all 0.2s ease;
}

.language-card:hover {
  border-color: var(--royal-blue-lighter);
}

.language-card.selected {
  border-color: var(--royal-blue);
  background: rgba(16, 112, 255, 0.15);
}

.language-card .lang-code {
  display: block;
  font-size: 22px;
  font-weight: 700;
  color: var(--white);
}

.language-card .lang-name {
  display: block;
  font-size: 16px;
  color: var(--light-gray);
  margin-top: 6px;
}

.drop-zone {
  border: 2px dashed var(--border-color);
  border-radius: 12px;
  padding: 30px 20px;
  text-align: center;
  margin-top: 14px;
  transition: all 0.2s ease;
}

.drop-zone.dragover {
  border-color: var(--royal-blue);
  background: rgba(16, 112, 255, 0.1);
}

.drop-zone-text {
  color: var(--light-gray);
  font-size: 15px;
}

.drop-zone-hint {
  color: var(--light-gray);
  font-size: 13px;
  margin-top: 8px;
  opacity: 0.7;
}
</style>
</head>
<body>
<div class="container">
  <button class="settings-btn" id="settingsBtn" title="Settings">&#9881;</button>
  <div class="settings-menu hidden" id="settingsMenu">
    <button id="importSrtBtn">importSrt</button>
    <button id="toggleLogsBtn">toggleLogs</button>
    <button id="changeLangBtn">changeLang</button>
    <button id="logoutSettingsBtn">logout</button>
  </div>

  <div class="lang-switch-top">
    <button class="lang-btn" id="uiLangHe">עב</button>
    <button class="lang-btn" id="uiLangAr">ع</button>
  </div>

  <div class="header">
    <h1 id="pageTitle">כתוביות</h1>
    <div class="muted" id="metaText">DaVinci Resolve</div>
  </div>

  <div class="tl" id="timelineInfo">טוען מידע טיימליין...</div>

  <div id="authSection" class="block">
    <div class="authTabs">
      <button class="tab-button active" id="authLoginTab">התחברות</button>
      <button class="tab-button" id="authSignupTab">הרשמה</button>
    </div>

    <div id="loginPane" class="authPane active">
      <button type="button" class="auth-google-button" id="googleSignInButton">
        <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.1z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" fill="#EA4335"/></svg>
        <span id="googleSignInText">התחבר עם Google</span>
      </button>
      <div class="auth-google-divider" id="loginDivider"><span id="loginDividerText">או התחבר עם אימייל</span></div>
      <div class="row">
        <div class="col">
          <label id="loginEmailLabel">אימייל</label>
          <input type="email" id="loginEmail" placeholder="your@email.com">
        </div>
        <div class="col">
          <label id="loginPasswordLabel">סיסמה</label>
          <input type="password" id="loginPassword" placeholder="********">
        </div>
      </div>
      <div style="margin-top:14px">
        <button class="btn" id="loginBtn">התחברות</button>
      </div>
    </div>

    <div id="signupPane" class="authPane">
      <button type="button" class="auth-google-button" id="googleSignUpButton">
        <svg viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92a5.06 5.06 0 0 1-2.2 3.32v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.10z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" fill="#EA4335"/></svg>
        <span id="googleSignUpText">הרשם עם Google</span>
      </button>
      <div class="auth-google-divider" id="signupDivider"><span id="signupDividerText">או הרשם עם אימייל</span></div>
      <div class="row">
        <div class="col">
          <label id="signupUsernameLabel">שם משתמש</label>
          <input type="text" id="signupUsername" placeholder="שם משתמש">
        </div>
        <div class="col">
          <label id="signupEmailLabel">אימייל</label>
          <input type="email" id="signupEmail" placeholder="your@email.com">
        </div>
      </div>
      <div class="row" style="margin-top:10px">
        <div class="col">
          <label id="signupPasswordLabel">סיסמה</label>
          <input type="password" id="signupPassword" placeholder="********">
        </div>
        <div class="col">
          <label id="signupPassword2Label">אימות סיסמה</label>
          <input type="password" id="signupPassword2" placeholder="********">
        </div>
      </div>
      <div class="inline" style="margin-top:14px">
        <input type="checkbox" id="signupTos">
        <label for="signupTos" id="signupTosLabel">אני מסכים/ה לתנאים ולפרטיות</label>
      </div>
      <div style="margin-top:14px">
        <button class="btn" id="signupBtn">שליחת קוד אימות</button>
      </div>
    </div>

    <div id="verifyPane" class="hidden" style="margin-top:14px">
      <div class="muted" id="verifyMsg">הזינו את קוד האימות שנשלח לאימייל שלכם.</div>
      <div class="row" style="margin-top:12px">
        <div class="col">
          <label id="verifyCodeLabel">קוד אימות</label>
          <input type="text" id="verifyCode" maxlength="6" placeholder="123456">
        </div>
        <div class="col" style="display:flex;align-items:flex-end;gap:8px">
          <button class="btn secondary" id="resendCodeBtn" style="padding:14px">שלח שוב</button>
          <button class="btn" id="verifyBtn">אימות</button>
        </div>
      </div>
    </div>

  </div>

  <div id="deviceCodeSection" class="hidden" style="direction:rtl">
    <div style="display:flex;justify-content:flex-end;margin-bottom:8px">
      <a href="#" id="backFromDeviceCode" style="color:var(--light-gray);text-decoration:none;font-size:20px;padding:4px 8px;opacity:0.7;transition:opacity 200ms" onmouseover="this.style.opacity='1'" onmouseout="this.style.opacity='0.7'">→</a>
    </div>

    <div id="googleOpenedBubble" class="hidden" style="background:rgba(16,112,255,0.1);border:1px solid rgba(16,112,255,0.3);border-radius:10px;padding:12px 16px;margin-bottom:14px;text-align:center">
      <span style="color:#7eb3ff;font-size:13px" id="googleOpenedBubbleText">🌐 נפתח בדפדפן – אנא עבור לדפדפן שלך</span>
    </div>

    <div style="background:rgba(255,255,255,0.05);border:1px solid var(--border-color);border-radius:10px;padding:12px 16px;margin-bottom:16px">
      <div style="color:var(--light-gray);font-size:13px;line-height:1.8" id="deviceCodeInstructions">
        <div id="deviceCodeInstr1">1. התחבר לחשבון Google שלך</div>
        <div id="deviceCodeInstr2">2. העתק את קוד המכשיר והדבק אותו כאן</div>
      </div>
    </div>

    <div style="text-align:center">
      <input type="text" id="deviceCodeInput" placeholder="הכנס קוד כאן" style="margin-bottom:10px;width:80%;max-width:300px;padding:10px;border-radius:5px;border:1px solid var(--border-color);background-color:var(--medium-gray);color:var(--light-gray)"/>
      <button id="sendDeviceCodeButton" class="btn" style="padding:10px 20px">כניסה</button>
    </div>
  </div>

  <div id="mainSection" class="hidden">
    <div class="block" style="display:flex;justify-content:space-between;align-items:center;gap:10px;flex-wrap:wrap">
      <div>
        <span class="badge" id="userBadge">לא מחובר</span>
      </div>
    </div>

    <div class="tabs">
      <button class="tab-button active" id="catsTabBtn">כתוביות</button>
      <button class="tab-button" id="cutsTabBtn">קאטים</button>
    </div>

    <div id="catsTab" class="tab-content active">
      <div class="block">
        <h3 id="transcriptionTitle">אפשרויות תמלול</h3>

        <label id="maxWordsLabel">מקסימום מילים לכתובית</label>
        <input type="number" id="maxWords" min="1" max="20" value="10">

        <div class="inline" style="margin-top:14px">
          <input type="checkbox" id="maxCharsEnabled" onchange="toggleMaxChars()">
          <label for="maxCharsEnabled" id="maxCharsLabel">מקסימום תווים לשורה</label>
        </div>
        <input type="number" id="maxCharsPerLine" min="1" max="200" value="30" disabled style="opacity:0.4">

        <div class="inline">
          <input type="checkbox" id="stretchCaptions" checked>
          <label for="stretchCaptions" id="stretchCaptionsLabel">מתיחת כתוביות</label>
        </div>

        <div class="inline">
          <input type="checkbox" id="removePunctuation">
          <label for="removePunctuation" id="removePunctuationLabel">הסר סימני פיסוק</label>
        </div>

        <label style="margin-top:14px" id="languageLabel">שפה</label>
        <select id="language">
          <option value="he">עברית</option>
          <option value="ar">العربية</option>
        </select>
      </div>

      <div class="block">
        <h3 id="rangeTitle">טווח ייצוא</h3>
        <div class="inline">
          <input type="radio" name="rng" id="rangeFull" checked>
          <label for="rangeFull" id="rangeFullLabel">כל הטיימליין</label>
        </div>
        <div class="inline">
          <input type="radio" name="rng" id="rangeInOut">
          <label for="rangeInOut" id="rangeInOutLabel">נקודות In/Out</label>
        </div>
        <div class="muted" id="inoutLabel" style="margin-top:8px">בודק נקודות In/Out...</div>
      </div>

      <div class="block">
        <button class="btn" id="createBtn">צור כתוביות</button>
        <div class="status info" id="statusText">מוכן</div>
      </div>
    </div>

    <div id="cutsTab" class="tab-content">
      <div class="block" style="text-align:center">
        <h3 style="color:var(--gold)" id="cutsTitle">קאטים</h3>
        <div id="cutsNotAvail">לא זמין ב-DaVinci Resolve, פנו לתמיכה</div>
      </div>
    </div>
  </div>

  <div class="logs" id="logsSection">
    <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:10px">
      <div class="muted" id="logsLabel">לוגים</div>
      <div style="display:flex;gap:10px;align-items:center">
        <button class="btn secondary" id="copyLogsBtn" style="padding:6px 12px;font-size:13px">copyLogs</button>
        <span class="badge" id="liveBadge">idle</span>
      </div>
    </div>
    <textarea id="logsView" readonly></textarea>
  </div>

  <div class="bottomEmail">
    <a href="mailto:SababaContactUs@gmail.com">SababaContactUs@gmail.com</a>
  </div>
</div>

<div class="popup-overlay" id="langPopup">
  <div class="popup-content">
    <h3 id="langPopupTitle">selectLanguage</h3>
    <div class="language-grid">
      <div class="language-card" data-lang="he">
        <span class="lang-code">HE</span>
        <span class="lang-name">עברית</span>
      </div>
      <div class="language-card" data-lang="ar">
        <span class="lang-code">AR</span>
        <span class="lang-name">العربية</span>
      </div>
    </div>
    <button class="btn" id="langContinueBtn" disabled>continue</button>
  </div>
</div>

<div class="popup-overlay" id="dropPopup">
  <div class="popup-content">
    <h3 id="dropPopupTitle">importSrt</h3>
    <div class="drop-zone" id="dropZone">
      <div class="drop-zone-text" id="dropZoneText">dragSrtHere</div>
      <div class="drop-zone-hint" id="dropZoneHint">orClickSelect</div>
    </div>
    <input type="file" id="srtFileInput" accept=".srt" style="display:none">
    <button class="btn secondary" id="closeDropBtn" style="margin-top:14px">close</button>
  </div>
</div>

<!-- Generic message popup -->
<div class="popup-overlay" id="msgPopup">
  <div class="popup-content">
    <span class="popup-close" id="msgPopupClose">&times;</span>
    <p id="msgPopupText" style="margin:16px 0;font-size:16px;line-height:1.6"></p>
    <button class="btn secondary" id="msgPopupBtn">close</button>
  </div>
</div>

<!-- Non-closeable session-disabled overlay (shown if window.close() is blocked) -->
<div id="sessionDisabledOverlay" style="display:none;position:fixed;top:0;left:0;right:0;bottom:0;background:rgba(0,0,0,0.92);z-index:9999;align-items:center;justify-content:center;">
  <div style="background:#1e1e2e;border:1px solid #444;border-radius:14px;padding:32px 28px;max-width:340px;width:90%;text-align:center;">
    <p style="margin:0;font-size:16px;line-height:1.7;color:#ccc;">Session disabled.<br>Open the script again using<br><strong style="color:#fff;">Workspace &rarr; Scripts &rarr; Subaba</strong></p>
  </div>
</div>

<script>
var DATA = {{TIMELINE_DATA}};
var SAVED_SESSION = {{SAVED_SESSION}};  // Injected from persistent file
var SAVED = {{SAVED_SETTINGS}};         // Persisted caption settings (language, maxWords, maxCharsPerLine)
var EXPORTING = false;
var VERIFY_STATE = null;
var POLL_TIMER = null;
var UI_LANG = 'he';
var LOGS_VISIBLE = false;

var I18N = {
  he: {
    meta: 'DaVinci Resolve - כתוביות',
    loadingTimeline: 'טוען מידע טיימליין...',
    login: 'התחברות',
    signup: 'הרשמה',
    email: 'אימייל',
    password: 'סיסמה',
    username: 'שם משתמש',
    confirmPassword: 'אימות סיסמה',
    tos: 'אני מסכים/ה לתנאים ולפרטיות',
    sendCode: 'שליחת קוד אימות',
    verifyMsg: 'הזינו את קוד האימות שנשלח לאימייל שלכם.',
    verifyCode: 'קוד אימות',
    resend: 'שלח שוב',
    verify: 'אימות',
    googleSignIn: 'התחבר עם Google',
    googleSignUp: 'הרשם עם Google',
    loginDivider: 'או התחבר עם אימייל',
    signupDivider: 'או הרשם עם אימייל',
    googleOpenedBubble: '🌐 נפתח בדפדפן – אנא עבור לדפדפן שלך',
    deviceCodeInstr1: '1. התחבר לחשבון Google שלך',
    deviceCodeInstr2: '2. העתק את קוד המכשיר והדבק אותו כאן',
    notLoggedIn: 'לא מחובר',
    logout: 'התנתק',
    subtitlesTab: 'כתוביות',
    cutsTab: 'קאטים',
    transcriptionOptions: 'אפשרויות תמלול',
    maxWords: 'מקסימום מילים לכתובית',
    maxCharsPerLine: 'מקסימום תווים לשורה',
    stretch: 'מתיחת כתוביות',
    removePunctuation: 'הסר סימני פיסוק',
    language: 'שפה',
    exportRange: 'טווח ייצוא',
    fullTimeline: 'כל הטיימליין',
    inOutPoints: 'נקודות In/Out',
    noInOutSet: 'לא הוגדרו נקודות In/Out',
    checkInOut: 'בודק נקודות In/Out...',
    createCaptions: 'צור כתוביות',
    ready: 'מוכן',
    cutsUnavailable: 'לא זמין ב-DaVinci Resolve, פנו לתמיכה',
    logs: 'לוגים',
    timelineFormat: '{name} | {tracks} ערוצים | {fps} FPS',
    secsShort: 'שנ׳',
    loggedInPrefix: 'מחובר',
    enterValidEmail: 'יש להזין אימייל תקין',
    enterPassword: 'יש להזין סיסמה',
    loggingIn: 'מתחבר...',
    loginFailed: 'ההתחברות נכשלה',
    loginSuccess: 'התחברת בהצלחה',
    networkLogin: 'שגיאת רשת בזמן התחברות',
    enterUsername: 'יש להזין שם משתמש',
    passwordMin: 'הסיסמה חייבת להכיל לפחות 8 תווים',
    passwordsNoMatch: 'הסיסמאות אינן תואמות',
    acceptTos: 'יש לאשר תנאים ופרטיות',
    sendingCode: 'שולח קוד אימות...',
    signupFailed: 'ההרשמה נכשלה',
    verificationSent: 'קוד אימות נשלח',
    networkSignup: 'שגיאת רשת בזמן הרשמה',
    noVerifyFlow: 'לא נמצא תהליך אימות פעיל',
    enterCode6: 'יש להזין קוד בן 6 ספרות',
    verifying: 'מאמת...',
    invalidCode: 'קוד שגוי או פג תוקף',
    accountCreated: 'החשבון נוצר והתחברת',
    missingToken: 'האימות הצליח אך לא התקבל טוקן',
    networkVerify: 'שגיאת רשת בזמן אימות',
    resendingCode: 'שולח קוד מחדש...',
    resendFailed: 'שליחה מחדש נכשלה',
    resentSuccess: 'קוד אימות נשלח שוב',
    networkResend: 'שגיאת רשת בשליחה מחדש',
    loginFirst: 'יש להתחבר קודם',
    noInOutPoints: 'אין נקודות In/Out מוגדרות בטיימליין',
    requestSent: 'הבקשה נשלחה ל-Resolve...',
    submitFailed: 'שליחת הבקשה נכשלה',
    connectionFailed: 'החיבור נכשל',
    exportingAudio: 'מייצא אודיו...',
    uploadingAudio: 'מעלה אודיו לשרת...',
    generatingCaptions: 'יוצר כתוביות...',
    stageUploading: 'מעלה אודיו לשרת...',
    stageTranscribing: 'מתמלל שמע...',
    stageImproving: 'משפר כתוביות...',
    stageAlmostDone: 'כמעט מוכן...',
    importingSubtitles: 'מייבא כתוביות לטיימליין...',
    done: 'הושלם',
    failed: 'נכשל',
    sessionEnded: 'הסשן הסתיים',
    loggedOut: 'התנתקת',
    selectLanguage: 'בחר שפה',
    toggleLogsShow: 'הצג לוגים',
    toggleLogsHide: 'הסתר לוגים',
    importSrt: 'ייבוא כתוביות',
    dragSrtHere: 'גרור קובץ SRT לכאן',
    orClickSelect: 'או לחץ לבחירת קובץ',
    close: 'סגור',
    srtImported: 'קובץ SRT יובא בהצלחה',
    srtImportFailed: 'ייבוא הקובץ נכשל',
    notEnoughMinutes: 'אין מספיק דקות ליצירת הכתוביות.',
    sessionDisconnected: 'החיבור נותק. אנא התחבר מחדש.',
    captionsTimeout: 'תהליך יצירת הכתוביות ארך זמן רב מדי ובוטל. נסה שוב, או עם קטע קצר יותר.',
    errorServer: 'שגיאת שרת: ',
    upgradeLink: 'https://sababa.onrender.com/checkout',
    upgradeText: 'שדרג תוכנית',
    continue: 'המשך',
    changeLang: 'שפה / Language',
    copyLogs: 'העתק לוגים',
    logsCopied: 'לוגים הועתקו ללוח'
  },
  ar: {
    meta: 'DaVinci Resolve - ترجمات',
    loadingTimeline: 'جاري تحميل معلومات الخط الزمني...',
    login: 'تسجيل الدخول',
    signup: 'إنشاء حساب',
    email: 'البريد الإلكتروني',
    password: 'كلمة المرور',
    username: 'اسم المستخدم',
    confirmPassword: 'تأكيد كلمة المرور',
    tos: 'أوافق على الشروط والخصوصية',
    sendCode: 'إرسال رمز التحقق',
    verifyMsg: 'أدخل رمز التحقق المرسل إلى بريدك الإلكتروني.',
    verifyCode: 'رمز التحقق',
    resend: 'إعادة الإرسال',
    verify: 'تحقق',
    googleSignIn: 'تسجيل الدخول باستخدام Google',
    googleSignUp: 'إنشاء حساب باستخدام Google',
    loginDivider: 'أو سجل الدخول بالبريد الإلكتروني',
    signupDivider: 'أو قم بالتسجيل بالبريد الإلكتروني',
    googleOpenedBubble: '🌐 تم الفتح في المتصفح - يرجى الانتقال إلى متصفحك',
    deviceCodeInstr1: '1. سجل الدخول إلى حساب Google الخاص بك',
    deviceCodeInstr2: '2. انسخ رمز الجهاز والصقه هنا',
    notLoggedIn: 'غير مسجل',
    logout: 'تسجيل الخروج',
    subtitlesTab: 'الترجمات',
    cutsTab: 'القص',
    transcriptionOptions: 'خيارات التفريغ',
    maxWords: 'الحد الأقصى للكلمات لكل سطر',
    maxCharsPerLine: 'الحد الأقصى للأحرف لكل سطر',
    stretch: 'تمديد الترجمة',
    removePunctuation: 'إزالة علامات الترقيم',
    language: 'اللغة',
    exportRange: 'نطاق التصدير',
    fullTimeline: 'كامل الخط الزمني',
    inOutPoints: 'نقاط In/Out',
    noInOutSet: 'لم يتم تعيين نقاط In/Out',
    checkInOut: 'جاري فحص نقاط In/Out...',
    createCaptions: 'إنشاء ترجمات',
    ready: 'جاهز',
    cutsUnavailable: 'غير متاح في DaVinci Resolve، تواصل مع الدعم',
    logs: 'السجلات',
    timelineFormat: '{name} | {tracks} مسارات | {fps} FPS',
    secsShort: 'ث',
    loggedInPrefix: 'تم تسجيل الدخول',
    enterValidEmail: 'أدخل بريدًا إلكترونيًا صالحًا',
    enterPassword: 'أدخل كلمة المرور',
    loggingIn: 'جاري تسجيل الدخول...',
    loginFailed: 'فشل تسجيل الدخول',
    loginSuccess: 'تم تسجيل الدخول بنجاح',
    networkLogin: 'خطأ شبكة أثناء تسجيل الدخول',
    enterUsername: 'أدخل اسم المستخدم',
    passwordMin: 'يجب أن تكون كلمة المرور 8 أحرف على الأقل',
    passwordsNoMatch: 'كلمتا المرور غير متطابقتين',
    acceptTos: 'يجب الموافقة على الشروط والخصوصية',
    sendingCode: 'جاري إرسال رمز التحقق...',
    signupFailed: 'فشل إنشاء الحساب',
    verificationSent: 'تم إرسال رمز التحقق',
    networkSignup: 'خطأ شبكة أثناء إنشاء الحساب',
    noVerifyFlow: 'لا يوجد تدفق تحقق نشط',
    enterCode6: 'أدخل رمزًا مكونًا من 6 أرقام',
    verifying: 'جاري التحقق...',
    invalidCode: 'رمز غير صالح أو منتهي الصلاحية',
    accountCreated: 'تم إنشاء الحساب وتسجيل الدخول',
    missingToken: 'تم التحقق ولكن لا يوجد رمز مصادقة',
    networkVerify: 'خطأ شبكة أثناء التحقق',
    resendingCode: 'جاري إعادة إرسال الرمز...',
    resendFailed: 'فشلت إعادة الإرسال',
    resentSuccess: 'تم إرسال الرمز مرة أخرى',
    networkResend: 'خطأ شبكة أثناء إعادة الإرسال',
    loginFirst: 'يرجى تسجيل الدخول أولاً',
    noInOutPoints: 'لا توجد نقاط In/Out محددة في الخط الزمني',
    requestSent: 'تم إرسال الطلب إلى Resolve...',
    submitFailed: 'فشل إرسال الطلب',
    connectionFailed: 'فشل الاتصال',
    exportingAudio: 'جاري تصدير الصوت...',
    uploadingAudio: 'جاري رفع الصوت إلى الخادم...',
    generatingCaptions: 'جاري إنشاء الترجمات...',
    stageUploading: 'جاري رفع الصوت...',
    stageTranscribing: 'جاري نسخ الصوت...',
    stageImproving: 'جاري تحسين الترجمات...',
    stageAlmostDone: 'على وشك الانتهاء...',
    importingSubtitles: 'جاري استيراد الترجمات إلى الخط الزمني...',
    done: 'تم',
    failed: 'فشل',
    sessionEnded: 'انتهت الجلسة',
    loggedOut: 'تم تسجيل الخروج',
    selectLanguage: 'اختر اللغة',
    toggleLogsShow: 'إظهار السجلات',
    toggleLogsHide: 'إخفاء السجلات',
    importSrt: 'استيراد الترجمات',
    dragSrtHere: 'اسحب ملف SRT هنا',
    orClickSelect: 'أو انقر لتحديد ملف',
    close: 'إغلاق',
    srtImported: 'تم استيراد ملف SRT بنجاح',
    srtImportFailed: 'فشل استيراد الملف',
    notEnoughMinutes: 'لا توجد دقائق كافية لإنشاء الترجمات.',
    sessionDisconnected: 'تم قطع الاتصال. يرجى تسجيل الدخول مرة أخرى.',
    captionsTimeout: 'استغرقت عملية إنشاء الترجمات وقتا طويلا وتم إلغاؤها. حاول مرة أخرى أو مع مقطع أقصر.',
    errorServer: 'خطأ في الخادم: ',
    upgradeLink: 'https://sababa.onrender.com/checkout',
    upgradeText: 'ترقية الخطة',
    continue: 'متابعة',
    changeLang: 'اللغة / Language',
    copyLogs: 'نسخ السجلات',
    logsCopied: 'تم نسخ السجلات'
  }
};

function esc(v){return String(v==null?'':v).replace(/[&<>"']/g,function(c){return {'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c];});}
function el(id){return document.getElementById(id);}
function t(key){
  var langMap = I18N[UI_LANG] || I18N.he;
  return langMap[key] || I18N.he[key] || key;
}

function setUiLang(lang){
  UI_LANG = (lang === 'ar') ? 'ar' : 'he';
  localStorage.setItem('subaba_ui_lang', UI_LANG);
  logLine('UI language changed', { language: UI_LANG });
  saveSettings();
  applyTranslations();
  updateTimelineUI();
  updateSessionUI();
}

function applyTranslations(){
  el('uiLangHe').classList.toggle('active', UI_LANG === 'he');
  el('uiLangAr').classList.toggle('active', UI_LANG === 'ar');
  document.documentElement.lang = UI_LANG;
  document.title = t('subtitlesTab');

  var ids = {
    pageTitle: 'subtitlesTab',
    metaText: 'meta',
    authLoginTab: 'login',
    authSignupTab: 'signup',
    loginEmailLabel: 'email',
    loginPasswordLabel: 'password',
    loginBtn: 'login',
    signupUsernameLabel: 'username',
    signupEmailLabel: 'email',
    signupPasswordLabel: 'password',
    signupPassword2Label: 'confirmPassword',
    signupTosLabel: 'tos',
    signupBtn: 'sendCode',
    verifyMsg: 'verifyMsg',
    verifyCodeLabel: 'verifyCode',
    resendCodeBtn: 'resend',
    verifyBtn: 'verify',
    googleSignInText: 'googleSignIn',
    googleSignUpText: 'googleSignUp',
    loginDividerText: 'loginDivider',
    signupDividerText: 'signupDivider',
    googleOpenedBubbleText: 'googleOpenedBubble',
    deviceCodeInstr1: 'deviceCodeInstr1',
    deviceCodeInstr2: 'deviceCodeInstr2',
    catsTabBtn: 'subtitlesTab',
    cutsTabBtn: 'cutsTab',
    transcriptionTitle: 'transcriptionOptions',
    maxWordsLabel: 'maxWords',
    maxCharsLabel: 'maxCharsPerLine',
    stretchCaptionsLabel: 'stretch',
    removePunctuationLabel: 'removePunctuation',
    languageLabel: 'language',
    rangeTitle: 'exportRange',
    rangeFullLabel: 'fullTimeline',
    rangeInOutLabel: 'inOutPoints',
    createBtn: 'createCaptions',
    cutsTitle: 'cutsTab',
    cutsNotAvail: 'cutsUnavailable',
    logsLabel: 'logs',
    importSrtBtn: 'importSrt',
    changeLangBtn: 'changeLang',
    logoutSettingsBtn: 'logout',
    langPopupTitle: 'selectLanguage',
    langContinueBtn: 'continue',
    dropPopupTitle: 'importSrt',
    dropZoneText: 'dragSrtHere',
    dropZoneHint: 'orClickSelect',
    closeDropBtn: 'close',
    msgPopupBtn: 'close',
    copyLogsBtn: 'copyLogs'
  };
  for (var id in ids){
    if (el(id)) el(id).textContent = t(ids[id]);
  }

  // Update toggle logs button text based on current state
  if (el('toggleLogsBtn')) {
    el('toggleLogsBtn').textContent = LOGS_VISIBLE ? t('toggleLogsHide') : t('toggleLogsShow');
  }

  if (el('statusText') && (!el('statusText').textContent || el('statusText').textContent === 'Ready' || el('statusText').textContent === 'מוכן' || el('statusText').textContent === 'جاهز')) {
    el('statusText').textContent = t('ready');
  }
  if (el('inoutLabel') && (!el('inoutLabel').textContent || el('inoutLabel').textContent.indexOf('Checking') === 0 || el('inoutLabel').textContent.indexOf('בודק') === 0 || el('inoutLabel').textContent.indexOf('جاري') === 0)) {
    el('inoutLabel').textContent = t('checkInOut');
  }
  if (el('timelineInfo') && (!el('timelineInfo').textContent || el('timelineInfo').textContent.indexOf('טוען') === 0 || el('timelineInfo').textContent.indexOf('جاري') === 0)) {
    updateTimelineUI();
  }
}

function nowTime(){
  var d=new Date();
  return d.toLocaleTimeString();
}

function logLine(msg,obj){
  var line='['+nowTime()+'] '+msg;
  if(obj!==undefined){
    try{ line += ' ' + JSON.stringify(obj); }catch(e){}
  }
  var box=el('logsView');
  if(box){
    box.value += (box.value ? '\n' : '') + line;
    box.scrollTop = box.scrollHeight;
  }
}

function setStatus(msg,kind){
  var s=el('statusText');
  s.textContent=msg;
  s.className='status '+(kind||'info');
}

function updateTimelineUI(){
  var fmt = t('timelineFormat');
  el('timelineInfo').textContent = fmt
    .replace('{name}', DATA.name)
    .replace('{tracks}', DATA.trackCount)
    .replace('{fps}', DATA.frameRate);
}

function toggleMaxChars(){
  var enabled = el('maxCharsEnabled').checked;
  el('maxCharsPerLine').disabled = !enabled;
  el('maxCharsPerLine').style.opacity = enabled ? '1' : '0.4';
}

function switchMainTab(tab){
  el('catsTabBtn').classList.toggle('active',tab==='cats');
  el('cutsTabBtn').classList.toggle('active',tab==='cuts');
  el('catsTab').classList.toggle('active',tab==='cats');
  el('cutsTab').classList.toggle('active',tab==='cuts');
  logLine('Main tab switched', { tab: tab });
}

function switchAuthTab(tab){
  el('authLoginTab').classList.toggle('active',tab==='login');
  el('authSignupTab').classList.toggle('active',tab==='signup');
  el('loginPane').classList.toggle('active',tab==='login');
  el('signupPane').classList.toggle('active',tab==='signup');
  logLine('Auth tab switched', { tab: tab });
}

function validateEmail(email){
  return /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(email);
}

// --- Popup system ---
function showPopup(msg){
  el('msgPopupText').textContent = msg;
  el('msgPopup').classList.add('show');
  logLine('Popup shown', { message: msg });
}

function hidePopup(){
  el('msgPopup').classList.remove('show');
}

function showSessionDisabled(){
  // Disable every button on the page so the UI is inert
  document.querySelectorAll('button').forEach(function(b){ b.disabled = true; });
  // Show the non-closeable overlay
  var ov = document.getElementById('sessionDisabledOverlay');
  if(ov){ ov.style.display = 'flex'; }
  logLine('Session disabled overlay shown');
}

// --- Invalid token handler (mirrors CEP handleInvalidToken) ---
function handleInvalidToken(){
  clearSession();
  EXPORTING = false;
  setButtonLoading(el('createBtn'), false);
  updateCreateButtonState();
  updateSessionUI();

  // Auto-show login tab
  el('authSection').classList.remove('hidden');
  el('mainSection').classList.add('hidden');
  switchAuthTab('login');

  showPopup(t('sessionDisconnected'));
  logLine('Session invalidated - token expired or revoked');
}

function updateCreateButtonState(){
  if(EXPORTING){
    el('createBtn').disabled = true;
    return;
  }

  var useInOut = el('rangeInOut').checked;
  var hasInOut = DATA.hasInOut || false;

  if(useInOut && !hasInOut){
    el('createBtn').disabled = true;
  } else {
    el('createBtn').disabled = false;
  }
}

function setButtonLoading(btn, loading){
  if(loading){
    btn.classList.add('loading');
    btn.disabled = true;
  } else {
    btn.classList.remove('loading');
    btn.disabled = false;
  }
}

function addClickFeedback(btn){
  btn.addEventListener('click', function(){
    btn.style.transform = 'scale(0.96)';
    setTimeout(function(){
      btn.style.transform = '';
    }, 100);
  });
}

async function authProxy(endpoint,payload){
  var res = await fetch('/auth-proxy', {
    method:'POST',
    headers:{'Content-Type':'application/json'},
    body: JSON.stringify({endpoint:endpoint,payload:payload||{}})
  });

  var text = await res.text();
  var data = null;
  try{ data = JSON.parse(text); }catch(e){}
  return { ok:res.ok, status:res.status, data:data, text:text };
}

// In-memory session state (no localStorage for auth)
var SESSION = {token:'', username:'', seconds:0};

function saveSession(token, username, seconds){
  SESSION.token = token || '';
  SESSION.username = username || '';
  SESSION.seconds = seconds || 0;
  // Persist to file so token survives script restarts
  fetch('/save-session', {
    method:'POST', headers:{'Content-Type':'application/json'},
    body: JSON.stringify(SESSION)
  }).catch(function(){});
}

function clearSession(){
  SESSION.token = '';
  SESSION.username = '';
  SESSION.seconds = 0;
  // Clear persistent session file
  fetch('/save-session', {
    method:'POST', headers:{'Content-Type':'application/json'},
    body: JSON.stringify(SESSION)
  }).catch(function(){});
}

function formatMinutes(seconds) {
  var mins = Math.floor(seconds / 60);
  var secs = seconds % 60;
  if (mins >= 60) {
    var hours = Math.floor(mins / 60);
    mins = mins % 60;
    return hours + ':' + String(mins).padStart(2, '0') + ':' + String(secs).padStart(2, '0');
  }
  return mins + ':' + String(secs).padStart(2, '0');
}

function updateSessionUI(){
  var token = SESSION.token;
  var username = SESSION.username || '';
  var seconds = SESSION.seconds || 0;

  if(token){
    el('authSection').classList.add('hidden');
    el('deviceCodeSection').classList.add('hidden');
    el('mainSection').classList.remove('hidden');
    el('userBadge').textContent = username
      ? (username + ' | ' + formatMinutes(seconds))
      : (t('loggedInPrefix') + ' | ' + formatMinutes(seconds));
  } else {
    el('authSection').classList.remove('hidden');
    el('deviceCodeSection').classList.add('hidden');
    el('mainSection').classList.add('hidden');
    el('userBadge').textContent = t('notLoggedIn');
  }
}

async function doLogin(){
  var email = el('loginEmail').value.trim().toLowerCase();
  var password = el('loginPassword').value;

  if(!email || !validateEmail(email)){ setStatus(t('enterValidEmail'),'err'); return; }
  if(!password){ setStatus(t('enterPassword'),'err'); return; }

  setStatus(t('loggingIn'),'info');
  logLine('Login requested', { email: email });
  setButtonLoading(el('loginBtn'), true);

  try {
    var r = await authProxy('/api/login', { email: email, password: password });
    setButtonLoading(el('loginBtn'), false);
    if(!r.ok || !r.data || !r.data.success){
      setStatus((r.data && (r.data.message||r.data.error)) || t('loginFailed'),'err');
      logLine('Login failed', { status: r.status, body: r.data || r.text });
      return;
    }

    var user = r.data.user || {};
    saveSession(r.data.token, user.username || '', user.remaining_seconds || 0);
    updateSessionUI();
    setStatus(t('loginSuccess'),'ok');
    logLine('Login successful', { username: user.username || '' });
  } catch(err){
    setButtonLoading(el('loginBtn'), false);
    setStatus(t('networkLogin'),'err');
    logLine('Login exception', { error: String(err) });
  }
}

async function doSignup(){
  var username = el('signupUsername').value.trim();
  var email = el('signupEmail').value.trim().toLowerCase();
  var password = el('signupPassword').value;
  var confirm = el('signupPassword2').value;
  var tos = el('signupTos').checked;

  if(!username){ setStatus(t('enterUsername'),'err'); return; }
  if(!email || !validateEmail(email)){ setStatus(t('enterValidEmail'),'err'); return; }
  if(!password || password.length < 8){ setStatus(t('passwordMin'),'err'); return; }
  if(password !== confirm){ setStatus(t('passwordsNoMatch'),'err'); return; }
  if(!tos){ setStatus(t('acceptTos'),'err'); return; }

  setStatus(t('sendingCode'),'info');
  logLine('Signup requested', { username: username, email: email });
  setButtonLoading(el('signupBtn'), true);

  try {
    var r = await authProxy('/send-verification-code', {
      email: email,
      type: 'signup',
      username: username,
      password: password
    });

    setButtonLoading(el('signupBtn'), false);
    if(!r.ok){
      setStatus((r.data && (r.data.error||r.data.message)) || t('signupFailed'),'err');
      logLine('Signup failed', { status: r.status, body: r.data || r.text });
      return;
    }

    VERIFY_STATE = {
      email: email,
      type: 'signup',
      username: username,
      password: password
    };

    el('verifyPane').classList.remove('hidden');
    el('verifyMsg').textContent = t('verificationSent') + ': ' + email;
    setStatus(t('verificationSent'),'ok');
    logLine('Signup verification sent');
  } catch(err){
    setButtonLoading(el('signupBtn'), false);
    setStatus(t('networkSignup'),'err');
    logLine('Signup exception', { error: String(err) });
  }
}

async function doVerify(){
  if(!VERIFY_STATE){ setStatus(t('noVerifyFlow'),'err'); return; }
  var code = el('verifyCode').value.trim();
  if(!/^\d{6}$/.test(code)){ setStatus(t('enterCode6'),'err'); return; }

  setStatus(t('verifying'),'info');
  logLine('Verify requested');
  setButtonLoading(el('verifyBtn'), true);

  try {
    var r = await authProxy('/verify-code', {
      email: VERIFY_STATE.email,
      type: VERIFY_STATE.type,
      code: code
    });

    setButtonLoading(el('verifyBtn'), false);
    if(!r.ok){
      setStatus((r.data && (r.data.error||r.data.message)) || t('invalidCode'),'err');
      logLine('Verify failed', { status:r.status, body:r.data||r.text });
      return;
    }

    if(r.data && r.data.auth_token){
      saveSession(r.data.auth_token, r.data.username || VERIFY_STATE.username || '', r.data.minutes_left || 0);
      updateSessionUI();
      el('verifyPane').classList.add('hidden');
      VERIFY_STATE = null;
      setStatus(t('accountCreated'),'ok');
      logLine('Verify successful');
    } else {
      setStatus(t('missingToken'),'err');
      logLine('Verify missing token', r.data || {});
    }
  } catch(err){
    setButtonLoading(el('verifyBtn'), false);
    setStatus(t('networkVerify'),'err');
    logLine('Verify exception', { error:String(err) });
  }
}

async function resendCode(){
  if(!VERIFY_STATE){ setStatus(t('noVerifyFlow'),'err'); return; }
  setStatus(t('resendingCode'),'info');
  setButtonLoading(el('resendCodeBtn'), true);
  try{
    var p = {
      email: VERIFY_STATE.email,
      type: VERIFY_STATE.type
    };
    if(VERIFY_STATE.type === 'signup'){
      p.username = VERIFY_STATE.username;
      p.password = VERIFY_STATE.password;
    }
    var r = await authProxy('/send-verification-code', p);
    setButtonLoading(el('resendCodeBtn'), false);
    if(!r.ok){
      setStatus((r.data && (r.data.error||r.data.message)) || t('resendFailed'),'err');
      logLine('Resend failed', { status:r.status, body:r.data||r.text });
      return;
    }
    setStatus(t('resentSuccess'),'ok');
    logLine('Verification code resent');
  }catch(err){
    setButtonLoading(el('resendCodeBtn'), false);
    setStatus(t('networkResend'),'err');
    logLine('Resend exception',{error:String(err)});
  }
}

async function doDeviceCodeLogin(deviceCode){
  setStatus(t('loggingIn'),'info');
  setButtonLoading(el('sendDeviceCodeButton'), true);
  logLine('Device code login requested', { code: deviceCode });

  try {
    var r = await authProxy('/api/get-token-info', { device_code: deviceCode });
    setButtonLoading(el('sendDeviceCodeButton'), false);

    if(!r.ok || !r.data || !r.data.auth_token){
      var errMsg = (r.data && (r.data.error || r.data.message)) || t('invalidLogin');
      setStatus(errMsg,'err');
      logLine('Device code login failed', { status:r.status, body:r.data||r.text });
      return;
    }

    saveSession(r.data.auth_token, r.data.username || '', r.data.user_account_minutes_remaining || 0);
    updateSessionUI();
    el('deviceCodeSection').classList.add('hidden');
    el('deviceCodeInput').value = '';
    el('googleOpenedBubble').classList.add('hidden');
    setStatus(t('loginSuccess'),'ok');
    logLine('Device code login successful', { username: r.data.username || '' });
  } catch(err){
    setButtonLoading(el('sendDeviceCodeButton'), false);
    setStatus(t('networkLogin'),'err');
    logLine('Device code login exception', { error:String(err) });
  }
}

function toggleLogs(){
  LOGS_VISIBLE = !LOGS_VISIBLE;
  el('logsSection').classList.toggle('hiddenLogs', !LOGS_VISIBLE);
  localStorage.setItem('subaba_logs_visible', LOGS_VISIBLE ? '1' : '0');
  if (el('toggleLogsBtn')) {
    el('toggleLogsBtn').textContent = LOGS_VISIBLE ? t('toggleLogsHide') : t('toggleLogsShow');
  }
  logLine('Logs visibility toggled', { visible: LOGS_VISIBLE });
}

function copyLogs(){
  var logs = el('logsView').value;
  if(!logs){
    setStatus(t('logs') + ': empty', 'info');
    return;
  }
  navigator.clipboard.writeText(logs).then(function(){
    setStatus(t('logsCopied'), 'ok');
    logLine('Logs copied to clipboard');
  }).catch(function(err){
    setStatus('Failed to copy', 'err');
    logLine('Copy logs failed', { error: String(err) });
  });
}

function showLangPopup(){
  el('langPopup').classList.add('show');
  var cards = el('langPopup').querySelectorAll('.language-card');
  cards.forEach(function(c){
    c.classList.toggle('selected', c.getAttribute('data-lang') === UI_LANG);
  });
  el('langContinueBtn').disabled = false;
  logLine('Language selection popup opened');
}

function hideLangPopup(){
  el('langPopup').classList.remove('show');
  logLine('Language selection popup closed');
}

function selectLangCard(card){
  var cards = el('langPopup').querySelectorAll('.language-card');
  cards.forEach(function(c){ c.classList.remove('selected'); });
  card.classList.add('selected');
  el('langContinueBtn').disabled = false;
  logLine('Language card selected', { lang: card.getAttribute('data-lang') });
}

function applySelectedLang(){
  var selected = el('langPopup').querySelector('.language-card.selected');
  if(selected){
    setUiLang(selected.getAttribute('data-lang'));
    hideLangPopup();
  }
}

function showDropPopup(){
  el('dropPopup').classList.add('show');
  logLine('SRT import popup opened');
}

function hideDropPopup(){
  el('dropPopup').classList.remove('show');
  logLine('SRT import popup closed');
}

function handleSrtFile(file){
  logLine('SRT file selected', { name: file.name, size: file.size });
  setStatus(t('srtImported'),'ok');
  hideDropPopup();
}

function setupDragDrop(){
  var zone = el('dropZone');
  var input = el('srtFileInput');
  
  zone.addEventListener('click', function(){ input.click(); });
  
  input.addEventListener('change', function(e){
    if(e.target.files.length > 0){
      handleSrtFile(e.target.files[0]);
    }
  });
  
  zone.addEventListener('dragover', function(e){
    e.preventDefault();
    zone.classList.add('dragover');
  });
  
  zone.addEventListener('dragleave', function(){
    zone.classList.remove('dragover');
  });
  
  zone.addEventListener('drop', function(e){
    e.preventDefault();
    zone.classList.remove('dragover');
    if(e.dataTransfer.files.length > 0){
      handleSrtFile(e.dataTransfer.files[0]);
    }
  });
}

async function doExport(){
  if(EXPORTING) return;

  // Set EXPORTING and disable button IMMEDIATELY to prevent double-clicks
  EXPORTING = true;
  el('createBtn').disabled = true;
  setButtonLoading(el('createBtn'), true);

  var token = SESSION.token;
  if(!token){
    setStatus(t('loginFirst'),'err');
    updateSessionUI();
    EXPORTING = false;
    setButtonLoading(el('createBtn'), false);
    updateCreateButtonState();
    return;
  }

  var useInOut = !!el('rangeInOut').checked;
  if(useInOut && !DATA.hasInOut){
    setStatus(t('noInOutPoints'),'err');
    EXPORTING = false;
    setButtonLoading(el('createBtn'), false);
    updateCreateButtonState();
    return;
  }

  var maxWords = parseInt(el('maxWords').value,10);
  if(!maxWords || maxWords < 1) maxWords = 10;

  // 0 = disabled (no wrapping)
  var maxCharsPerLine = el('maxCharsEnabled').checked ? (parseInt(el('maxCharsPerLine').value, 10) || 0) : 0;

  var allTracks = [];
  for(var i = 0; i < DATA.trackCount; i++){
    allTracks.push(i + 1);
  }

  var payload = {
    authToken: token,
    useInOut: useInOut,
    tracks: allTracks,
    maxWords: maxWords,
    maxCharsPerLine: maxCharsPerLine,
    stretchCaptions: !!el('stretchCaptions').checked,
    removePunctuation: !!el('removePunctuation').checked,
    rawCaptionsOnly: false,
    language: el('language').value || UI_LANG,
    version: 'resolve-1.0.0'
  };

  try {
    setStatus(t('requestSent'),'info');
    var sanitizedPayload = Object.assign({}, payload, { authToken: '[REDACTED]' });
    logLine('Export requested', sanitizedPayload);

    var res = await fetch('/export', {
      method:'POST',
      headers:{'Content-Type':'application/json'},
      body: JSON.stringify(payload)
    });

    if(!res.ok){
      EXPORTING = false;
      setButtonLoading(el('createBtn'), false);
      updateCreateButtonState();
      setStatus(t('submitFailed'),'err');
      showPopup(t('submitFailed'));
      logLine('Export submit failed', { status: res.status });
      return;
    }
  } catch(err){
    EXPORTING = false;
    setButtonLoading(el('createBtn'), false);
    updateCreateButtonState();
    setStatus(t('connectionFailed'),'err');
    showPopup(t('connectionFailed'));
    logLine('Export exception', { error: String(err) });
  }
}

function mapLiveStatus(s,m){
  if(s==='idle') return { text: t('ready'), kind: 'info', busy:false };
  if(s==='exporting_audio') return { text: t('exportingAudio'), kind: 'info', busy:true };
  if(s==='uploading') return { text: t('uploadingAudio'), kind: 'info', busy:true };
  if(s==='generating') return { text: t(m) || t('generatingCaptions'), kind: 'info', busy:true };
  if(s==='importing') return { text: t('importingSubtitles'), kind: 'info', busy:true };
  if(s==='success') return { text: m || t('done'), kind: 'ok', busy:false };
  if(s==='error') return { text: m || t('failed'), kind: 'err', busy:false };
  if(s==='closed') return { text: t('sessionEnded'), kind: 'err', busy:false };
  return { text: m || s, kind: 'info', busy:false };
}

async function pollLive(){
  try {
    var r = await fetch('/live');
    if(!r.ok) return;
    var text = await r.text();
    var d;
    try { d = JSON.parse(text); } catch(e) { return; } // skip if file was mid-write

    if(typeof d.hasInOut !== 'undefined'){
      DATA.hasInOut = d.hasInOut;
      var label = d.inOutLabel || '';
      if(label === '__NO_INOUT__'){
        label = t('noInOutSet');
      }
      el('inoutLabel').textContent = label;
      updateCreateButtonState();
    }

    if(d.exportStatus){
      el('liveBadge').textContent = d.exportStatus;
      var st = mapLiveStatus(d.exportStatus, d.exportMsg || '');
      setStatus(st.text, st.kind);

      var prevStatus = window.__lastStatus || 'idle';
      var wasTerminal = (prevStatus === 'success' || prevStatus === 'error' || prevStatus === 'closed');

      if(st.busy){
        EXPORTING = true;
        setButtonLoading(el('createBtn'), true);
      } else if(d.exportStatus === 'success' || d.exportStatus === 'error' || d.exportStatus === 'closed'){
        // Terminal states - re-enable button
        EXPORTING = false;
        setButtonLoading(el('createBtn'), false);
        updateCreateButtonState();
      } else if(d.exportStatus === 'idle' && wasTerminal){
        // Transitioning from terminal state to idle - re-enable button
        EXPORTING = false;
        setButtonLoading(el('createBtn'), false);
        updateCreateButtonState();
      }

      // Handle specific error types with popups (only show once per error)
      // ONLY show popups for errors that came from API requests (have errorType set)
      if(d.exportStatus === 'error' && window.__lastStatus !== 'error'){
        var eType = d.errorType || '';
        if(eType === 'auth'){
          // 401 - invalid token from API, force re-login
          handleInvalidToken();
        } else if(eType === 'payment'){
          // 402/430 - not enough minutes from API
          showPopup(t('notEnoughMinutes'));
        } else if(eType === 'timeout'){
          // API timeout
          showPopup(t('captionsTimeout'));
        } else if(eType === 'server' && d.exportMsg){
          // Server error from API - show the message
          showPopup(t('errorServer') + d.exportMsg);
        }
        // If errorType is empty, it's a validation error - don't show popup, just status text
      }

      // Show API message from successful response (e.g. server announcements)
      if(d.exportStatus === 'success' && d.apiMessage && d.apiMessage.trim() !== '' && window.__lastStatus !== 'success'){
        showPopup(d.apiMessage);
      }

      if(window.__lastStatus !== d.exportStatus || window.__lastMsg !== d.exportMsg){
        window.__lastStatus = d.exportStatus;
        window.__lastMsg = d.exportMsg;
        logLine('Live update', { status:d.exportStatus, msg:d.exportMsg || '', errorType:d.errorType || '' });
      }

      if(d.exportStatus === 'closed'){
        clearInterval(POLL_TIMER);
        logLine('Session closed - attempting window.close()');
        window.close();
        // Fallback: if window.close() was blocked by the browser, disable UI and show overlay
        setTimeout(function(){
          logLine('window.close() blocked - showing session disabled overlay');
          showSessionDisabled();
        }, 500);
      }
    }
  } catch(err){
    logLine('Live poll error', { error:String(err) });
  }
}

function saveSettings(){
  // Fire-and-forget: persist caption settings to Lua-side file (survives port alternation)
  var s = {
    uiLang: UI_LANG,
    language: el('language').value,
    maxWords: parseInt(el('maxWords').value, 10) || 10,
    maxCharsEnabled: !!el('maxCharsEnabled').checked,
    maxCharsPerLine: parseInt(el('maxCharsPerLine').value, 10) || 30
  };
  fetch('/settings', { method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(s) })
    .catch(function(){});
  logLine('Settings saved', s);
}

function wireEvents(){
  el('settingsBtn').addEventListener('click', function(e){
    e.stopPropagation();
    var isOpening = el('settingsMenu').classList.contains('hidden');
    el('settingsMenu').classList.toggle('hidden');
    if(isOpening) logLine('Settings menu opened');
  });

  document.addEventListener('click', function(e){
    if(!el('settingsMenu').contains(e.target) && e.target !== el('settingsBtn')){
      var wasOpen = !el('settingsMenu').classList.contains('hidden');
      el('settingsMenu').classList.add('hidden');
      if(wasOpen) logLine('Settings menu closed');
    }
  });

  el('importSrtBtn').addEventListener('click', function(){
    el('settingsMenu').classList.add('hidden');
    logLine('Import SRT clicked from settings');
    showDropPopup();
  });

  el('toggleLogsBtn').addEventListener('click', function(){
    el('settingsMenu').classList.add('hidden');
    toggleLogs();
  });

  el('changeLangBtn').addEventListener('click', function(){
    el('settingsMenu').classList.add('hidden');
    logLine('Change language clicked from settings');
    showLangPopup();
  });

  el('logoutSettingsBtn').addEventListener('click', function(){
    el('settingsMenu').classList.add('hidden');
    clearSession();
    updateSessionUI();
    setStatus(t('loggedOut'),'info');
    logLine('User logged out');
  });

  var langCards = el('langPopup').querySelectorAll('.language-card');
  langCards.forEach(function(card){
    card.addEventListener('click', function(){ selectLangCard(card); });
  });
  
  el('langContinueBtn').addEventListener('click', applySelectedLang);
  el('closeDropBtn').addEventListener('click', hideDropPopup);

  // Generic message popup close handlers
  el('msgPopupClose').addEventListener('click', hidePopup);
  el('msgPopupBtn').addEventListener('click', hidePopup);

  el('authLoginTab').onclick = function(){ switchAuthTab('login'); };
  el('authSignupTab').onclick = function(){ switchAuthTab('signup'); };

  el('catsTabBtn').onclick = function(){ switchMainTab('cats'); };
  el('cutsTabBtn').onclick = function(){ switchMainTab('cuts'); };

  el('rangeFull').onchange = function(){
    logLine('Range selection changed', { range: 'full' });
    updateCreateButtonState();
  };
  el('rangeInOut').onchange = function(){
    logLine('Range selection changed', { range: 'in/out' });
    updateCreateButtonState();
  };

  // Persist settings on change
  el('language').addEventListener('change', saveSettings);
  el('maxWords').addEventListener('change', saveSettings);
  el('maxCharsEnabled').addEventListener('change', saveSettings);
  el('maxCharsPerLine').addEventListener('change', saveSettings);

  el('loginBtn').onclick = doLogin;
  el('signupBtn').onclick = doSignup;
  el('verifyBtn').onclick = doVerify;
  el('resendCodeBtn').onclick = resendCode;

  // Google Sign-In buttons
  el('googleSignInButton').onclick = function(e){
    e.preventDefault();
    window.open('https://sababa.onrender.com/auth/google-signin', '_blank');
    el('authSection').classList.add('hidden');
    el('deviceCodeSection').classList.remove('hidden');
    el('googleOpenedBubble').classList.remove('hidden');
  };
  el('googleSignUpButton').onclick = function(e){
    e.preventDefault();
    window.open('https://sababa.onrender.com/auth/google-signin', '_blank');
    el('authSection').classList.add('hidden');
    el('deviceCodeSection').classList.remove('hidden');
    el('googleOpenedBubble').classList.remove('hidden');
  };

  // Device code handlers
  el('backFromDeviceCode').onclick = function(e){
    e.preventDefault();
    el('deviceCodeSection').classList.add('hidden');
    el('deviceCodeInput').value = '';
    el('googleOpenedBubble').classList.add('hidden');
    el('authSection').classList.remove('hidden');
  };
  el('sendDeviceCodeButton').onclick = function(e){
    e.preventDefault();
    var code = el('deviceCodeInput').value.trim();
    if(!code){ alert('נא להזין קוד מכשיר'); return; }
    doDeviceCodeLogin(code);
  };

  el('createBtn').onclick = doExport;

  el('uiLangHe').onclick = function(){ setUiLang('he'); };
  el('uiLangAr').onclick = function(){ setUiLang('ar'); };

  el('copyLogsBtn').onclick = copyLogs;
}

function init(){
  // Restore auth session from persistent file if localStorage is empty (port changed)
  if(SAVED_SESSION && SAVED_SESSION.token && !localStorage.getItem('subabaAuthToken')){
    localStorage.setItem('subabaAuthToken', SAVED_SESSION.token);
    localStorage.setItem('subabaLoggedInUsername', SAVED_SESSION.username || '');
    localStorage.setItem('subabaLoggedInMinutes', String(SAVED_SESSION.seconds || 0));
    logLine('Restored session from persistent file', { username: SAVED_SESSION.username || '' });
  }

  var savedLang = localStorage.getItem('subaba_ui_lang');
  if(savedLang) UI_LANG = savedLang;

  var savedLogs = localStorage.getItem('subaba_logs_visible');
  LOGS_VISIBLE = savedLogs === '1';
  el('logsSection').classList.toggle('hiddenLogs', !LOGS_VISIBLE);
  
  setupDragDrop();
  addClickFeedback(el('loginBtn'));
  addClickFeedback(el('signupBtn'));
  addClickFeedback(el('verifyBtn'));
  addClickFeedback(el('googleSignInButton'));
  addClickFeedback(el('googleSignUpButton'));
  addClickFeedback(el('sendDeviceCodeButton'));
  addClickFeedback(el('createBtn'));

  // Restore Lua-persisted settings (reliable across port alternation)
  if(SAVED.uiLang){ UI_LANG = SAVED.uiLang; }
  el('language').value = SAVED.language || UI_LANG;
  if(typeof SAVED.maxWords === 'number'){ el('maxWords').value = SAVED.maxWords; }
  if(typeof SAVED.maxCharsEnabled === 'boolean'){
    el('maxCharsEnabled').checked = SAVED.maxCharsEnabled;
    toggleMaxChars();
  }
  if(typeof SAVED.maxCharsPerLine === 'number' && SAVED.maxCharsEnabled){
    el('maxCharsPerLine').value = SAVED.maxCharsPerLine;
  }

  applyTranslations();
  updateTimelineUI();
  updateSessionUI();
  wireEvents();
  updateCreateButtonState();
  setStatus(t('ready'),'info');
  logLine('UI ready', { timeline: DATA.name, tracks: DATA.trackCount, fps: DATA.frameRate });

  POLL_TIMER = setInterval(pollLive, 1500);
  pollLive();
}

init();
</script>
</body>
</html>

]==]

-- ============================================================
-- 12. Main
-- ============================================================

-- Alternate between PORT_A and PORT_B each run.
-- The old server on altPort gets a non-blocking stop signal and dies concurrently.
do
    local lastPort = PORT_A
    local f = io.open(activePortFile, "rb")
    if f then local v = f:read("*a"); f:close(); lastPort = tonumber(v) or PORT_A end
    PORT     = (lastPort == PORT_A) and PORT_B or PORT_A
    local altPort = lastPort
    stopFile    = tempDir .. sep .. "subaba_stop_" .. PORT
    liveDataPath = tempDir .. sep .. "subaba_live_" .. PORT .. ".json"
    readyFile   = tempDir .. sep .. "subaba_ready_" .. PORT
    writeAll(activePortFile, tostring(PORT))
    print("[SubabaExport] Port " .. PORT .. " (prev=" .. altPort .. ")")
    -- Signal old server to stop (non-blocking; it checks its own stop file)
    local altStopFile = tempDir .. sep .. "subaba_stop_" .. altPort
    local sf = io.open(altStopFile, "w")
    if sf then sf:write("stop"); sf:close() end
end

os.remove(settingsFile)
os.remove(stopFile)
os.remove(readyFile)
os.remove(launcherPath)
os.remove(apiRawPath)

local timelineInfoJson = jsonEncode(getTimelineInfoTable())
-- Load persisted auth session (token/username/minutes) from previous run
local savedSession = readAll(sessionFile) or "null"
if savedSession == "" then savedSession = "null" end
print("[SubabaExport] Loaded saved session: " .. (savedSession ~= "null" and "yes" or "none"))
-- Load persisted caption settings (language, maxWords, maxCharsPerLine)
local savedSettingsJson = jsonEncode(loadPersistentSettings())
print("[SubabaExport] Loaded saved settings: " .. savedSettingsJson)

local html = HTML_TEMPLATE
    :gsub("{{TIMELINE_DATA}}", timelineInfoJson)
    :gsub("{{SAVED_SESSION}}", savedSession)
    :gsub("{{SAVED_SETTINGS}}", savedSettingsJson)
    :gsub("{{PORT_A}}", tostring(PORT_A))
    :gsub("{{PORT_B}}", tostring(PORT_B))
if not writeAll(htmlPath, html) then
    print("[SubabaExport] ERROR: Cannot write HTML")
    return
end

-- Clear any leftover state from previous session
liveExportStatus = "idle"
liveExportMsg = "Ready"
liveErrorType = ""
liveApiMessage = ""
writeLiveData()

local openedLauncher = false
if writeLauncherPage() then
    local launcherUrl = toFileUrl(launcherPath)
    openBrowser(launcherUrl)
    openedLauncher = true
    print("[SubabaExport] Launcher opened at " .. launcherUrl)
else
    print("[SubabaExport] WARNING: Could not write launcher page; using direct open.")
end

if not startServer() then
    print("[SubabaExport] ERROR: Failed to start local server")
    return
end

if not openedLauncher then
    openBrowser()
end
print("[SubabaExport] Browser target ready at http://localhost:" .. PORT)

local pollCount = 0
local maxPolls = 54000 -- about 3 hours
local isProcessing = false
local lastProcessedContent = ""
local lastRequestTime = nil  -- set after each completed request
local INACTIVITY_TIMEOUT = 1200  -- seconds; auto-shutdown after last request completes (20 min)

while pollCount < maxPolls do
    if pollCount % 10 == 0 then
        writeLiveData()
    end

    if not isProcessing then
        local sf = io.open(settingsFile, "rb")
        if sf then
            local content = sf:read("*a")
            sf:close()

            -- Delete file immediately and set lock BEFORE processing
            os.remove(settingsFile)

            -- Check if this is the same content we just processed (prevent duplicates)
            if content and content ~= "" and content ~= lastProcessedContent then
                lastProcessedContent = content
                local ok, settings = pcall(JSON.decode, content)
                if not ok or type(settings) ~= "table" then
                    setLive("error", "Invalid settings JSON from UI")
                    isProcessing = false
                else
                    isProcessing = true
                    print("[SubabaExport] Processing export request...")
                    local result = processRequest(settings)
                    if result.error then
                        print("[SubabaExport] FAILED: " .. tostring(result.message) .. " | errorType: " .. tostring(result.errorType or "none"))
                        setLive("error", tostring(result.message), tostring(result.errorType or ""))
                        busyWait(1)
                        -- Clear error state after showing it once
                        liveExportStatus = "idle"
                        liveExportMsg = "Ready"
                        liveErrorType = ""
                        liveApiMessage = ""
                    else
                        print("[SubabaExport] SUCCESS: " .. tostring(result.message))
                        setLive("success", tostring(result.message), "", tostring(result.apiMessage or ""))
                        busyWait(3)
                        setLive("idle", "Ready")
                    end
                    isProcessing = false
                    lastRequestTime = os.time()  -- start inactivity countdown
                end
            end
        end
    end

    -- Auto-shutdown 1 minute after last completed request
    if lastRequestTime and (os.time() - lastRequestTime) >= INACTIVITY_TIMEOUT then
        print("[SubabaExport] Inactivity timeout (" .. INACTIVITY_TIMEOUT .. "s) - closing")
        break
    end

    busyWait(0.2)
    pollCount = pollCount + 1
end

setLive("closed", "Session ended")
busyWait(3)  -- browser polls every 1500ms, wait >2x to ensure it receives "closed" and calls window.close()

stopServer()
os.remove(htmlPath)
os.remove(liveDataPath)
os.remove(settingsFile)
os.remove(serverScript)
os.remove(uploadScript)
os.remove(launcherPath)
os.remove(apiRawPath)
os.remove(activePortFile)  -- cleared so next run starts fresh on PORT_A

print("[SubabaExport] Session ended. Temp files cleaned.")