package main

import (
	"bufio"
	"context"
	"crypto/rand"
	"fmt"
	"html"
	"html/template"
	"io"
	"log"
	"net"
	"net/http"
	"net/url"
	"regexp"
	"sort"
	"strconv"
	"strings"
	"sync"
	"time"
)

type NewsgroupInfo struct {
	Name         string
	High         int
	Low          int
	Status       string
	ArticleCount int
}

type ArticleOverview struct {
	Number      int
	Subject     string
	From        string
	Date        string
	MessageID   string
	References  string
	ByteCount   int
	LineCount   int
}

type NNTPClient struct {
	conn           net.Conn
	reader         *bufio.Reader
	mutex          sync.Mutex
	lastUsed       time.Time
	isConnected    bool
	isConnecting   bool
	connectionChan chan struct{}
	backoffCount   int
	maxBackoff     time.Duration
	connectedServer string
	isOnionService  bool
}

type NewsServer struct {
	client        *NNTPClient
	groups        map[string]*NewsgroupInfo
	mutex         sync.RWMutex
	session       string
	features      map[string]bool
	downloadStatus struct {
		IsDownloading bool
		StartTime     time.Time
		LastError     string
		Completed     bool
		GroupCount    int
		mutex         sync.RWMutex
	}
}

func NewNNTPClient() *NNTPClient {
	return &NNTPClient{
		connectionChan: make(chan struct{}, 1),
		maxBackoff:     5 * time.Minute,
	}
}

func NewNewsServer() *NewsServer {
	sessionBytes := make([]byte, 8)
	rand.Read(sessionBytes)
	
	return &NewsServer{
		client:  NewNNTPClient(),
		groups:  make(map[string]*NewsgroupInfo),
		session: fmt.Sprintf("%x", sessionBytes),
		features: map[string]bool{
			"MODE_READER":    true,
			"XOVER":         true,
			"OVER":          true,
			"HDR":           true,
			"LIST_ACTIVE":   true,
			"LIST_NEWSGROUPS": true,
		},
	}
}

func (c *NNTPClient) connectInternal() error {
	proxyAddr := "127.0.0.1:9050"
	
	targetConfigs := []struct {
		addr        string
		isOnion     bool
		description string
	}{
		{
			addr:        "peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119",
			isOnion:     true,
			description: "Primary NNTP Onion Service",
		},
		{
			addr:        "news.tcpreset.net:119",
			isOnion:     false,
			description: "TCPReset NNTP Server (via Tor)",
		},
	}
	
	var lastErr error
	for i, config := range targetConfigs {
		log.Printf("🔗 Attempt %d/%d: %s - %s", i+1, len(targetConfigs), config.description, config.addr)

		var conn net.Conn
		var err error

		if config.isOnion {
			conn, err = c.connectViaSocks5(proxyAddr, config.addr)
		} else {
			conn, err = c.connectViaSocks5(proxyAddr, config.addr)
		}

		if err != nil {
			lastErr = fmt.Errorf("%s failed: %v", config.description, err)
			log.Printf("❌ %s", lastErr)
			continue
		}

		log.Printf("✅ Successfully connected to %s", config.description)
		c.conn = conn
		c.reader = bufio.NewReader(c.conn)
		c.isConnected = true
		c.lastUsed = time.Now()
		c.connectedServer = config.description
		c.isOnionService = config.isOnion

		log.Printf("📥 Reading NNTP welcome message from %s...", config.description)
		c.conn.SetReadDeadline(time.Now().Add(60 * time.Second))
		welcome, err := c.reader.ReadString('\n')
		c.conn.SetReadDeadline(time.Time{})
		
		if err != nil {
			c.isConnected = false
			lastErr = fmt.Errorf("failed to read welcome from %s: %v", config.description, err)
			log.Printf("❌ %s", lastErr)
			c.conn.Close()
			c.connectedServer = ""
			c.isOnionService = false
			continue
		}

		welcome = strings.TrimSpace(welcome)
		log.Printf("📥 Welcome received from %s: %s", config.description, welcome)

		log.Printf("📤 Sending MODE READER command to %s...", config.description)
		return c.modeReaderInternal()
	}
	
	return fmt.Errorf("failed to connect to any NNTP server, last error: %v", lastErr)
}

func (c *NNTPClient) connectViaSocks5(proxyAddr, targetAddr string) (net.Conn, error) {
	proxyConn, err := net.DialTimeout("tcp", proxyAddr, 30*time.Second)
	if err != nil {
		return nil, fmt.Errorf("failed to connect to Tor proxy: %v", err)
	}

	deadline := 60 * time.Second
	if strings.Contains(targetAddr, ".onion") {
		deadline = 180 * time.Second
	}
	
	proxyConn.SetDeadline(time.Now().Add(deadline))
	defer proxyConn.SetDeadline(time.Time{})

	log.Printf("🔄 Performing SOCKS5 handshake for %s...", targetAddr)
	if err := c.socks5Handshake(proxyConn, targetAddr); err != nil {
		proxyConn.Close()
		return nil, fmt.Errorf("SOCKS5 handshake failed: %v", err)
	}

	log.Printf("✅ SOCKS5 connection established to %s", targetAddr)
	return proxyConn, nil
}

func (c *NNTPClient) socks5Handshake(conn net.Conn, target string) error {
	log.Printf("🔄 SOCKS5: Starting authentication...")
	authReq := []byte{0x05, 0x01, 0x00}
	if _, err := conn.Write(authReq); err != nil {
		return fmt.Errorf("auth request failed: %v", err)
	}

	authResp := make([]byte, 2)
	if _, err := io.ReadFull(conn, authResp); err != nil {
		return fmt.Errorf("auth response read failed: %v", err)
	}

	if authResp[0] != 0x05 || authResp[1] != 0x00 {
		return fmt.Errorf("SOCKS5 authentication failed")
	}

	log.Printf("✅ SOCKS5: Authentication successful")

	parts := strings.Split(target, ":")
	host := parts[0]
	port, _ := strconv.Atoi(parts[1])

	log.Printf("🔄 SOCKS5: Connecting to %s (hostname length: %d)", target, len(host))
	req := []byte{0x05, 0x01, 0x00, 0x03}
	req = append(req, byte(len(host)))
	req = append(req, []byte(host)...)
	req = append(req, byte(port>>8), byte(port&0xff))

	if _, err := conn.Write(req); err != nil {
		return fmt.Errorf("connect request failed: %v", err)
	}

	log.Printf("🔄 SOCKS5: Waiting for connect response...")
	resp := make([]byte, 4)
	if _, err := io.ReadFull(conn, resp); err != nil {
		return fmt.Errorf("connect response read failed: %v", err)
	}

	if resp[0] != 0x05 {
		return fmt.Errorf("SOCKS5 version mismatch")
	}
	
	if resp[1] != 0x00 {
		errorMsg := map[byte]string{
			0x01: "general SOCKS server failure",
			0x02: "connection not allowed by ruleset", 
			0x03: "network unreachable",
			0x04: "host unreachable",
			0x05: "connection refused",
			0x06: "TTL expired",
			0x07: "command not supported",
			0x08: "address type not supported",
		}
		if msg, ok := errorMsg[resp[1]]; ok {
			return fmt.Errorf("SOCKS5 connect failed: %s (code %d)", msg, resp[1])
		}
		return fmt.Errorf("SOCKS5 connect failed: error code %d", resp[1])
	}

	switch resp[3] {
	case 0x01:
		addr := make([]byte, 6)
		io.ReadFull(conn, addr)
	case 0x03:
		domainLen := make([]byte, 1)
		io.ReadFull(conn, domainLen)
		domain := make([]byte, domainLen[0]+2)
		io.ReadFull(conn, domain)
	case 0x04:
		addr := make([]byte, 18)
		io.ReadFull(conn, addr)
	}

	return nil
}

func (c *NNTPClient) ensureConnected() error {
	c.mutex.Lock()
	defer c.mutex.Unlock()
	
	if !c.isConnected || c.conn == nil || time.Since(c.lastUsed) > 5*time.Minute {
		log.Printf("🔄 Connection check: reconnecting (connected=%v, lastUsed=%v ago)", 
			c.isConnected, time.Since(c.lastUsed))
		
		if c.conn != nil {
			c.conn.Close()
		}
		c.isConnected = false
		c.connectedServer = ""
		c.isOnionService = false
		
		if err := c.testOnionReachability(); err != nil {
			return fmt.Errorf("onion service unreachable: %v", err)
		}
		
		if err := c.connectInternal(); err != nil {
			return fmt.Errorf("failed to reconnect: %v", err)
		}
	}
	
	c.lastUsed = time.Now()
	return nil
}

func (c *NNTPClient) testOnionReachability() error {
	log.Printf("🧪 Testing NNTP server reachability...")
	
	proxyAddr := "127.0.0.1:9050"
	testConfigs := []struct {
		addr        string
		isOnion     bool
		description string
	}{
		{
			addr:        "peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119",
			isOnion:     true,
			description: "Primary NNTP Onion Service",
		},
		{
			addr:        "news.tcpreset.net:119",
			isOnion:     false,
			description: "TCPReset NNTP Server",
		},
	}
	
	for _, config := range testConfigs {
		log.Printf("🧪 Testing %s (%s)...", config.description, config.addr)
		
		proxyConn, err := net.DialTimeout("tcp", proxyAddr, 10*time.Second)
		if err != nil {
			log.Printf("⚠️ Tor proxy unreachable: %v", err)
			continue
		}
		defer proxyConn.Close()
		
		deadline := 30 * time.Second
		if config.isOnion {
			deadline = 60 * time.Second
		}
		proxyConn.SetDeadline(time.Now().Add(deadline))
		
		if err := c.quickSocks5Test(proxyConn, config.addr); err != nil {
			log.Printf("⚠️ %s failed: %v", config.description, err)
			continue
		}
		
		log.Printf("✅ %s appears reachable", config.description)
		return nil
	}
	
	return fmt.Errorf("no NNTP servers are reachable (tried onion service and public servers)")
}

func (c *NNTPClient) quickSocks5Test(conn net.Conn, target string) error {
	authReq := []byte{0x05, 0x01, 0x00}
	if _, err := conn.Write(authReq); err != nil {
		return fmt.Errorf("auth request failed: %v", err)
	}

	authResp := make([]byte, 2)
	if _, err := io.ReadFull(conn, authResp); err != nil {
		return fmt.Errorf("auth response read failed: %v", err)
	}

	if authResp[0] != 0x05 || authResp[1] != 0x00 {
		return fmt.Errorf("SOCKS5 authentication failed")
	}

	parts := strings.Split(target, ":")
	host := parts[0]
	port, _ := strconv.Atoi(parts[1])

	req := []byte{0x05, 0x01, 0x00, 0x03}
	req = append(req, byte(len(host)))
	req = append(req, []byte(host)...)
	req = append(req, byte(port>>8), byte(port&0xff))

	if _, err := conn.Write(req); err != nil {
		return fmt.Errorf("connect request failed: %v", err)
	}

	resp := make([]byte, 4)
	if _, err := io.ReadFull(conn, resp); err != nil {
		return fmt.Errorf("connect response read failed: %v", err)
	}

	if resp[0] != 0x05 {
		return fmt.Errorf("SOCKS5 version mismatch")
	}
	
	if resp[1] != 0x00 {
		errorMsg := map[byte]string{
			0x01: "general SOCKS server failure",
			0x02: "connection not allowed by ruleset", 
			0x03: "network unreachable",
			0x04: "host unreachable",
			0x05: "connection refused",
			0x06: "TTL expired",
			0x07: "command not supported",
			0x08: "address type not supported",
		}
		if msg, ok := errorMsg[resp[1]]; ok {
			return fmt.Errorf("SOCKS5 connect failed: %s", msg)
		}
		return fmt.Errorf("SOCKS5 connect failed: error code %d", resp[1])
	}

	switch resp[3] {
	case 0x01:
		addr := make([]byte, 6)
		io.ReadFull(conn, addr)
	case 0x03:
		domainLen := make([]byte, 1)
		io.ReadFull(conn, domainLen)
		domain := make([]byte, domainLen[0]+2)
		io.ReadFull(conn, domain)
	case 0x04:
		addr := make([]byte, 18)
		io.ReadFull(conn, addr)
	}

	return nil
}

func (c *NNTPClient) modeReaderInternal() error {
	if err := c.sendCommand("MODE READER"); err != nil {
		return fmt.Errorf("failed to send MODE READER: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		return fmt.Errorf("failed to read MODE READER response: %v", err)
	}

	if !strings.HasPrefix(response, "200") && !strings.HasPrefix(response, "201") {
		return fmt.Errorf("MODE READER failed: %s", response)
	}

	log.Printf("✅ MODE READER successful: %s", response)
	return nil
}

func (c *NNTPClient) sendCommand(command string) error {
	if c.conn == nil {
		return fmt.Errorf("not connected")
	}

	log.Printf("📤 Sending: %s", command)
	_, err := c.conn.Write([]byte(command + "\r\n"))
	return err
}

func (c *NNTPClient) readResponse() (string, error) {
	if c.reader == nil {
		return "", fmt.Errorf("not connected")
	}

	response, err := c.reader.ReadString('\n')
	if err != nil {
		return "", err
	}

	response = strings.TrimSpace(response)
	log.Printf("📥 Received: %s", response)
	return response, nil
}

func (c *NNTPClient) HealthCheck() error {
	log.Printf("🧪 Performing NNTP health check...")
	c.mutex.Lock()
	defer c.mutex.Unlock()

	if !c.isConnected || c.conn == nil {
		return fmt.Errorf("connection is nil or not connected")
	}

	c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
	c.conn.SetReadDeadline(time.Now().Add(10 * time.Second))
	defer c.conn.SetWriteDeadline(time.Time{})
	defer c.conn.SetReadDeadline(time.Time{})

	// Try DATE command first (single line response, safer)
	log.Printf("📤 Health check: sending DATE command")
	if err := c.sendCommand("DATE"); err != nil {
		c.isConnected = false
		return fmt.Errorf("health check send failed: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		c.isConnected = false
		return fmt.Errorf("health check read failed: %v", err)
	}

	log.Printf("📥 Health check: received: %s", response)

	// DATE should return "111 YYYYMMDDhhmmss" - single line response
	if strings.HasPrefix(response, "111") {
		log.Printf("✅ Health check successful")
		return nil
	}

	// If DATE failed, try HELP but consume multiline response properly
	log.Printf("📤 Health check: DATE failed, trying HELP command")
	if err := c.sendCommand("HELP"); err != nil {
		c.isConnected = false
		return fmt.Errorf("health check HELP send failed: %v", err)
	}

	helpResponse, err := c.readResponse()
	if err != nil {
		c.isConnected = false
		return fmt.Errorf("health check HELP read failed: %v", err)
	}

	log.Printf("📥 Health check: HELP received: %s", helpResponse)

	// HELP command returns multiline response - consume all lines until "."
	if strings.HasPrefix(helpResponse, "100") {
		log.Printf("📥 Health check: reading multiline HELP response")
		for {
			line, err := c.reader.ReadString('\n')
			if err != nil {
				c.isConnected = false
				return fmt.Errorf("health check multiline read failed: %v", err)
			}
			
			line = strings.TrimSpace(line)
			log.Printf("📥 Health check help: %s", line)
			
			if line == "." {
				break
			}
		}
		log.Printf("✅ Health check successful")
		return nil
	}

	c.isConnected = false
	return fmt.Errorf("health check failed: unexpected response: %s", helpResponse)
}

func (c *NNTPClient) ListGroups() (map[string]*NewsgroupInfo, error) {
	log.Printf("Downloading active file with retry logic...")
	
	if err := c.ensureConnected(); err != nil {
		return nil, err
	}

	c.mutex.Lock()
	defer c.mutex.Unlock()

	log.Printf("📤 Requesting group list...")
	if err := c.sendCommand("LIST"); err != nil {
		return nil, fmt.Errorf("failed to send LIST command: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		return nil, fmt.Errorf("failed to read LIST response: %v", err)
	}

	if !strings.HasPrefix(response, "215") {
		return nil, fmt.Errorf("LIST command failed: %s", response)
	}

	log.Printf("📥 Reading group data...")
	groups := make(map[string]*NewsgroupInfo)
	lineCount := 0

	for {
		line, err := c.reader.ReadString('\n')
		if err != nil {
			return nil, fmt.Errorf("error reading group data: %v", err)
		}

		line = strings.TrimSpace(line)
		if line == "." {
			break
		}

		lineCount++
		if lineCount%1000 == 0 {
			log.Printf("📊 Processed %d groups...", lineCount)
		}

		parts := strings.Fields(line)
		if len(parts) >= 4 {
			high, _ := strconv.Atoi(parts[1])
			low, _ := strconv.Atoi(parts[2])
			
			groups[parts[0]] = &NewsgroupInfo{
				Name:   parts[0],
				High:   high,
				Low:    low,
				Status: parts[3],
			}
		}
	}

	log.Printf("✅ Successfully loaded %d newsgroups", len(groups))
	return groups, nil
}

func (c *NNTPClient) SelectGroup(groupName string) (int, int, int, error) {
	c.mutex.Lock()
	defer c.mutex.Unlock()

	if !c.isConnected || c.conn == nil {
		return 0, 0, 0, fmt.Errorf("not connected")
	}

	log.Printf("📤 Selecting group: %s", groupName)
	if err := c.sendCommand("GROUP " + groupName); err != nil {
		return 0, 0, 0, fmt.Errorf("failed to send GROUP command: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		return 0, 0, 0, fmt.Errorf("failed to read GROUP response: %v", err)
	}

	if !strings.HasPrefix(response, "211") {
		return 0, 0, 0, fmt.Errorf("GROUP command failed: %s", response)
	}

	// Parse response: 211 count low high group
	parts := strings.Fields(response)
	if len(parts) < 5 {
		return 0, 0, 0, fmt.Errorf("invalid GROUP response format: %s", response)
	}

	count, _ := strconv.Atoi(parts[1])
	low, _ := strconv.Atoi(parts[2])
	high, _ := strconv.Atoi(parts[3])

	log.Printf("✅ Group selected: %s (count=%d, range=%d-%d)", groupName, count, low, high)
	return count, low, high, nil
}

func (c *NNTPClient) GetArticleOverview(low, high int, maxArticles int) ([]*ArticleOverview, error) {
	c.mutex.Lock()
	defer c.mutex.Unlock()

	if !c.isConnected || c.conn == nil {
		return nil, fmt.Errorf("not connected")
	}

	// Limit range to prevent huge downloads
	if high-low+1 > maxArticles {
		low = high - maxArticles + 1
	}

	log.Printf("📤 Getting article overview for range %d-%d", low, high)
	if err := c.sendCommand(fmt.Sprintf("XOVER %d-%d", low, high)); err != nil {
		return nil, fmt.Errorf("failed to send XOVER command: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		return nil, fmt.Errorf("failed to read XOVER response: %v", err)
	}

	if !strings.HasPrefix(response, "224") {
		return nil, fmt.Errorf("XOVER command failed: %s", response)
	}

	var articles []*ArticleOverview
	log.Printf("📥 Reading article overview data...")

	for {
		line, err := c.reader.ReadString('\n')
		if err != nil {
			return nil, fmt.Errorf("error reading overview data: %v", err)
		}

		line = strings.TrimSpace(line)
		if line == "." {
			break
		}

		article := c.parseOverviewLine(line)
		if article != nil {
			articles = append(articles, article)
		}
	}

	log.Printf("✅ Retrieved %d article overviews", len(articles))
	return articles, nil
}

func (c *NNTPClient) parseOverviewLine(line string) *ArticleOverview {
	// XOVER format: number<tab>subject<tab>from<tab>date<tab>message-id<tab>references<tab>byte count<tab>line count
	parts := strings.Split(line, "\t")
	if len(parts) < 8 {
		return nil
	}

	number, _ := strconv.Atoi(parts[0])
	byteCount, _ := strconv.Atoi(parts[6])
	lineCount, _ := strconv.Atoi(parts[7])

	return &ArticleOverview{
		Number:     number,
		Subject:    parts[1],
		From:       parts[2],
		Date:       parts[3],
		MessageID:  parts[4],
		References: parts[5],
		ByteCount:  byteCount,
		LineCount:  lineCount,
	}
}

func (c *NNTPClient) GetArticle(groupName string, articleNumber int) (map[string]string, []string, error) {
	c.mutex.Lock()
	defer c.mutex.Unlock()

	if !c.isConnected || c.conn == nil {
		return nil, nil, fmt.Errorf("not connected")
	}

	log.Printf("📤 Getting article %d from group %s", articleNumber, groupName)
	if err := c.sendCommand(fmt.Sprintf("ARTICLE %d", articleNumber)); err != nil {
		return nil, nil, fmt.Errorf("failed to send ARTICLE command: %v", err)
	}

	response, err := c.readResponse()
	if err != nil {
		return nil, nil, fmt.Errorf("failed to read ARTICLE response: %v", err)
	}

	if !strings.HasPrefix(response, "220") {
		return nil, nil, fmt.Errorf("ARTICLE command failed: %s", response)
	}

	// Read article content
	headers := make(map[string]string)
	var body []string
	inHeaders := true
	
	log.Printf("📥 Reading article content...")
	for {
		line, err := c.reader.ReadString('\n')
		if err != nil {
			return nil, nil, fmt.Errorf("error reading article data: %v", err)
		}

		line = strings.TrimSuffix(line, "\r\n")
		line = strings.TrimSuffix(line, "\n")
		
		if line == "." {
			break
		}

		if inHeaders {
			if line == "" {
				inHeaders = false
				continue
			}
			
			// Parse header line
			if strings.Contains(line, ":") {
				parts := strings.SplitN(line, ":", 2)
				if len(parts) == 2 {
					key := strings.TrimSpace(parts[0])
					value := strings.TrimSpace(parts[1])
					
					// Handle multi-line headers
					if existing, exists := headers[key]; exists {
						headers[key] = existing + " " + value
					} else {
						headers[key] = value
					}
				}
			}
		} else {
			body = append(body, line)
		}
	}

	log.Printf("✅ Retrieved article %d: %d headers, %d body lines", articleNumber, len(headers), len(body))
	return headers, body, nil
}

func (c *NNTPClient) GetConnectionInfo() (string, bool) {
	c.mutex.Lock()
	defer c.mutex.Unlock()
	return c.connectedServer, c.isOnionService
}

func (c *NNTPClient) Close() error {
	c.mutex.Lock()
	defer c.mutex.Unlock()

	if c.conn != nil {
		log.Printf("📤 Sending: QUIT")
		c.sendCommand("QUIT")
		c.conn.Close()
		c.conn = nil
		c.reader = nil
	}
	c.isConnected = false
	c.connectedServer = ""
	c.isOnionService = false
	return nil
}

func (c *NNTPClient) disconnect() {
	if c.conn != nil {
		c.conn.Close()
	}
	c.conn = nil
	c.reader = nil
	c.isConnected = false
	c.connectedServer = ""
	c.isOnionService = false
}

func (s *NewsServer) GetHealthStatus() map[string]interface{} {
	s.mutex.RLock()
	defer s.mutex.RUnlock()

	status := map[string]interface{}{
		"session":       s.session,
		"timestamp":     time.Now().UTC().Format("2006-01-02 15:04:05 UTC"),
		"features":      s.features,
		"target":        "peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion",
		"fallback":      "news.tcpreset.net",
		"cached_groups": len(s.groups),
	}

	if connectedServer, isOnion := s.client.GetConnectionInfo(); connectedServer != "" {
		status["connected_server"] = connectedServer
		status["is_onion_service"] = isOnion
	}

	if err := s.testTorProxy(); err != nil {
		status["overall"] = "degraded"
		status["tor_proxy"] = "failed"
		status["tor_error"] = err.Error()
		status["nntp_status"] = "untested"
		status["message"] = "Tor proxy is not reachable - check if Tor is running"
		return status
	}
	
	status["tor_proxy"] = "ok"

	if err := s.client.HealthCheck(); err != nil {
		status["overall"] = "partial"
		status["nntp_status"] = "disconnected"
		status["nntp_error"] = err.Error()
		status["http_status"] = "ok"
		
		if strings.Contains(err.Error(), "TTL expired") {
			status["message"] = "Onion service appears to be down or unreachable"
		} else if strings.Contains(err.Error(), "connection reset") {
			status["message"] = "Connection to onion service was reset"
		} else if strings.Contains(err.Error(), "timeout") {
			status["message"] = "Connection to onion service timed out"
		} else {
			status["message"] = "HTTP server running, NNTP connection will retry automatically"
		}
	} else {
		status["overall"] = "healthy"
		status["nntp_status"] = "connected"
		status["http_status"] = "ok"
		status["message"] = "All systems operational"
	}

	return status
}

func (s *NewsServer) testTorProxy() error {
	log.Printf("🧪 Testing Tor proxy connectivity...")
	
	conn, err := net.DialTimeout("tcp", "127.0.0.1:9050", 10*time.Second)
	if err != nil {
		return fmt.Errorf("Tor proxy not reachable: %v", err)
	}
	defer conn.Close()
	
	conn.SetDeadline(time.Now().Add(10 * time.Second))
	
	_, err = conn.Write([]byte{0x05, 0x01, 0x00})
	if err != nil {
		return fmt.Errorf("SOCKS5 handshake failed: %v", err)
	}
	
	resp := make([]byte, 2)
	_, err = io.ReadFull(conn, resp)
	if err != nil {
		return fmt.Errorf("SOCKS5 response failed: %v", err)
	}
	
	if resp[0] != 0x05 || resp[1] != 0x00 {
		return fmt.Errorf("SOCKS5 authentication failed: got %d,%d", resp[0], resp[1])
	}
	
	log.Printf("✅ Tor proxy is reachable and responding")
	return nil
}

func (s *NewsServer) downloadActiveFile() error {
	s.downloadStatus.mutex.Lock()
	s.downloadStatus.IsDownloading = true
	s.downloadStatus.StartTime = time.Now()
	s.downloadStatus.LastError = ""
	s.downloadStatus.Completed = false
	s.downloadStatus.mutex.Unlock()
	
	log.Printf("📥 Starting active file download with timeout...")
	
	ctx, cancel := context.WithTimeout(context.Background(), 5*time.Minute)
	defer cancel()
	
	resultChan := make(chan error, 1)
	
	go func() {
		groups, err := s.client.ListGroups()
		if err != nil {
			resultChan <- err
			return
		}

		s.mutex.Lock()
		s.groups = groups
		s.mutex.Unlock()
		
		s.downloadStatus.mutex.Lock()
		s.downloadStatus.GroupCount = len(groups)
		s.downloadStatus.mutex.Unlock()
		
		resultChan <- nil
	}()
	
	select {
	case err := <-resultChan:
		s.downloadStatus.mutex.Lock()
		s.downloadStatus.IsDownloading = false
		s.downloadStatus.mutex.Unlock()
		
		if err != nil {
			log.Printf("❌ Active file download failed: %v", err)
			s.downloadStatus.mutex.Lock()
			s.downloadStatus.LastError = err.Error()
			s.downloadStatus.mutex.Unlock()
			return err
		}
		log.Printf("✅ Active file download completed successfully")
		s.downloadStatus.mutex.Lock()
		s.downloadStatus.Completed = true
		s.downloadStatus.mutex.Unlock()
		return nil
	case <-ctx.Done():
		log.Printf("⏰ Active file download timed out after 5 minutes")
		s.downloadStatus.mutex.Lock()
		s.downloadStatus.IsDownloading = false
		s.downloadStatus.LastError = "Download timed out after 5 minutes"
		s.downloadStatus.mutex.Unlock()
		return fmt.Errorf("download timed out - onion service connection taking too long")
	}
}

func (s *NewsServer) handleDownloadStatus(w http.ResponseWriter, r *http.Request) {
	s.downloadStatus.mutex.RLock()
	isDownloading := s.downloadStatus.IsDownloading
	startTime := s.downloadStatus.StartTime
	lastError := s.downloadStatus.LastError
	completed := s.downloadStatus.Completed
	groupCount := s.downloadStatus.GroupCount
	s.downloadStatus.mutex.RUnlock()
	
	w.Header().Set("Content-Type", "application/json")
	
	status := map[string]interface{}{
		"is_downloading": isDownloading,
		"completed": completed,
		"group_count": groupCount,
		"timestamp": time.Now().Unix(),
	}
	
	if !startTime.IsZero() {
		status["start_time"] = startTime.Unix()
		status["elapsed_seconds"] = int(time.Since(startTime).Seconds())
	}
	
	if lastError != "" {
		status["last_error"] = lastError
	}
	
	if isDownloading {
		status["message"] = "Download in progress..."
	} else if completed {
		status["message"] = "Download completed successfully"
	} else if lastError != "" {
		status["message"] = "Download failed"
	} else {
		status["message"] = "No download in progress"
	}
	
	w.Write([]byte(fmt.Sprintf(`{
		"is_downloading": %t,
		"completed": %t,
		"group_count": %d,
		"message": "%s",
		"timestamp": %d
		%s
	}`, 
		isDownloading, 
		completed, 
		groupCount,
		status["message"],
		status["timestamp"],
		func() string {
			extras := ""
			if !startTime.IsZero() {
				extras += fmt.Sprintf(`,
		"elapsed_seconds": %d`, int(time.Since(startTime).Seconds()))
			}
			if lastError != "" {
				extras += fmt.Sprintf(`,
		"last_error": "%s"`, lastError)
			}
			return extras
		}(),
	)))
}

func (s *NewsServer) handleActive(w http.ResponseWriter, r *http.Request) {
	if r.URL.Query().Get("refresh") == "1" || r.Method == "POST" {
		log.Printf("📥 Active file download requested...")
		
		w.Header().Set("Content-Type", "text/html; charset=utf-8")
		processingHTML := `<!DOCTYPE html>
<html>
<head>
    <title>⏳ Downloading... - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #ffaa00; padding: 20px; }
        .container { max-width: 800px; margin: 0 auto; text-align: center; }
        .spinner { animation: spin 1s linear infinite; display: inline-block; font-size: 2em; }
        @keyframes spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } }
        .processing-box { background: #1a1a1a; padding: 30px; border-radius: 8px; border: 2px solid #ffaa00; margin: 20px 0; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .status-update { margin: 15px 0; padding: 10px; background: #2a1a00; border-radius: 4px; }
        .success { color: #00ff00; }
        .error { color: #ff8800; }
        .progress { margin: 10px 0; font-size: 0.9em; color: #888; }
    </style>
</head>
<body>
    <div class="container">
        <div class="processing-box">
            <h1><span class="spinner" id="spinner">🔄</span> <span id="status-title">Downloading Active File</span></h1>
            <p id="status-text"><strong>Connecting to NNTP server via Tor...</strong></p>
            <div class="status-update" id="status-details">
                <p>⏰ <strong>This may take 2-5 minutes</strong> due to onion service connection time</p>
                <p id="progress-text">🔍 Checking status...</p>
            </div>
            <p>
                <a href="/active" class="back-link">🔄 Check Progress</a> | 
                <a href="/" class="back-link">← Back to Home</a> | 
                <a href="/health" class="back-link">📊 Health Status</a>
            </p>
            <p class="progress"><em>Started at ` + time.Now().Format("15:04:05") + `</em></p>
        </div>
    </div>
    <script>
        let checkCount = 0;
        
        function updateStatus() {
            checkCount++;
            fetch('/download-status')
                .then(response => response.json())
                .then(data => {
                    const spinner = document.getElementById('spinner');
                    const statusTitle = document.getElementById('status-title');
                    const statusText = document.getElementById('status-text');
                    const progressText = document.getElementById('progress-text');
                    
                    if (data.completed) {
                        spinner.innerHTML = '✅';
                        spinner.className = 'success';
                        statusTitle.innerHTML = 'Download Completed!';
                        statusText.innerHTML = '<strong>Successfully downloaded ' + data.group_count + ' newsgroups</strong>';
                        progressText.innerHTML = '🎉 Redirecting to active groups page...';
                        setTimeout(() => { window.location.href = '/active'; }, 3000);
                    } else if (data.last_error) {
                        spinner.innerHTML = '❌';
                        spinner.className = 'error';
                        statusTitle.innerHTML = 'Download Failed';
                        statusText.innerHTML = '<strong>Error: ' + data.last_error + '</strong>';
                        progressText.innerHTML = '🔄 <a href="/active?refresh=1" style="color: #00aaff;">Try Again</a>';
                    } else if (data.is_downloading) {
                        statusText.innerHTML = '<strong>Download in progress...</strong>';
                        if (data.elapsed_seconds) {
                            progressText.innerHTML = '⏰ Running for ' + data.elapsed_seconds + ' seconds...';
                        }
                    } else {
                        progressText.innerHTML = '⏰ Waiting for download to start... (check ' + checkCount + ')';
                    }
                })
                .catch(error => {
                    console.log('Status check failed:', error);
                    document.getElementById('progress-text').innerHTML = '⚠️ Status check failed, will retry...';
                });
        }
        
        updateStatus();
        const interval = setInterval(updateStatus, 3000);
        
        setTimeout(() => {
            clearInterval(interval);
            document.getElementById('progress-text').innerHTML = '⏰ Status checking stopped - please refresh page manually';
        }, 10 * 60 * 1000);
    </script>
</body>
</html>`
		w.Write([]byte(processingHTML))
		
		go func() {
			log.Printf("🔄 Starting background active file download...")
			err := s.downloadActiveFile()
			if err != nil {
				log.Printf("❌ Background download failed: %v", err)
			} else {
				log.Printf("✅ Background download completed successfully")
			}
		}()
		
		return
	}

	s.mutex.RLock()
	groupCount := len(s.groups)
	s.mutex.RUnlock()

	w.Header().Set("Content-Type", "text/html; charset=utf-8")

	activeHTML := `<!DOCTYPE html>
<html>
<head>
    <title>📋 Active Groups - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 1000px; margin: 0 auto; }
        .header { margin-bottom: 20px; }
        .download-section { background: #1a1a1a; padding: 20px; border-radius: 8px; margin-bottom: 20px; }
        .download-button { background: #333; color: #00ff00; border: none; padding: 12px 20px; border-radius: 4px; cursor: pointer; }
        .download-button:hover { background: #555; }
        .group-list { background: #1a1a1a; padding: 20px; border-radius: 8px; }
        .group-item { padding: 8px; margin: 3px 0; background: #0a0a0a; border-radius: 3px; }
        .group-name { color: #00aaff; }
        .group-stats { color: #888; font-size: 0.9em; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .warning { background: #2a1a00; border: 1px solid #ffaa00; color: #ffaa00; padding: 15px; border-radius: 8px; margin-bottom: 20px; }
        .success { background: #002a1a; border: 1px solid #00aa00; color: #00aa00; padding: 15px; border-radius: 8px; margin-bottom: 20px; }
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <h1>📋 Active Newsgroups</h1>
            <p><a href="/" class="back-link">← Back to Home</a> | <a href="/health" class="back-link">📊 Health Status</a></p>
        </div>

        {{if eq .GroupCount 0}}
        <div class="warning">
            <h3>⚠️ No Groups Cached</h3>
            <p>No newsgroups are currently cached. You need to download the active file first.</p>
            <p><em>Note: This may take 2-5 minutes due to onion service connection time.</em></p>
        </div>
        {{else}}
        <div class="success">
            <h3>✅ Groups Loaded</h3>
            <p>Currently cached: <strong>{{.GroupCount}}</strong> newsgroups</p>
            <p>You can now browse groups or download a fresh list.</p>
        </div>
        {{end}}

        <div class="download-section">
            <h3>📡 Download Active File</h3>
            <p>Current groups in cache: <strong>{{.GroupCount}}</strong></p>
            <form method="post" onsubmit="this.querySelector('button').innerHTML='⏳ Starting...'; this.querySelector('button').disabled=true;">
                <button type="submit" class="download-button">🔄 START DOWNLOAD</button>
            </form>
            <p><em>This will download the complete list of available newsgroups from the server.</em></p>
            <p><strong>⏰ Please be patient:</strong> Onion service connections can take 2-5 minutes. The page will show progress.</p>
        </div>

        {{if .HasGroups}}
        <div class="group-list">
            <h3>📊 Available Groups (showing first 100)</h3>
            {{range .Groups}}
            <div class="group-item">
                <div class="group-name">
                    <a href="/group/{{.Name}}" style="color: #00aaff; text-decoration: none;">{{.Name}}</a>
                </div>
                <div class="group-stats">Range: {{.Low}}-{{.High}} ({{.Status}})</div>
            </div>
            {{end}}
        </div>
        {{end}}
    </div>
</body>
</html>`

	var displayGroups []*NewsgroupInfo
	if groupCount > 0 {
		s.mutex.RLock()
		for _, group := range s.groups {
			if len(displayGroups) >= 100 {
				break
			}
			displayGroups = append(displayGroups, group)
		}
		s.mutex.RUnlock()

		sort.Slice(displayGroups, func(i, j int) bool {
			return displayGroups[i].Name < displayGroups[j].Name
		})
	}

	tmpl, _ := template.New("active").Parse(activeHTML)
	data := map[string]interface{}{
		"GroupCount": groupCount,
		"Groups":     displayGroups,
		"HasGroups":  len(displayGroups) > 0,
	}
	tmpl.Execute(w, data)
}

func (s *NewsServer) handleHealth(w http.ResponseWriter, r *http.Request) {
	status := s.GetHealthStatus()
	
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	
	healthHTML := `<!DOCTYPE html>
<html>
<head>
    <title>📊 System Health - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 40px; }
        .status-ok { color: #00ff00; }
        .status-warn { color: #ffaa00; }
        .status-error { color: #ff0000; }
        .status-degraded { color: #ffaa00; }
        .status-partial { color: #ffaa00; }
        .status-connected { color: #00ff00; }
        .status-disconnected { color: #ff8800; }
        .status-failed { color: #ff0000; }
        .container { max-width: 800px; margin: 0 auto; }
        .status-item { margin: 10px 0; padding: 10px; background: #1a1a1a; border-radius: 5px; }
        .diagnostic-section { background: #2a2a1a; padding: 15px; border-radius: 5px; margin: 20px 0; }
        .diagnostic-test { margin: 8px 0; padding: 8px; background: #1a1a1a; border-radius: 3px; font-size: 0.9em; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .test-button { background: #333; color: #00ff00; border: none; padding: 8px 16px; border-radius: 4px; cursor: pointer; margin: 5px; }
        .test-button:hover { background: #555; }
    </style>
</head>
<body>
    <div class="container">
        <h1>📊 System Health Status</h1>
        
        <div class="status-item">
            <strong>Overall Status:</strong> 
            <span class="status-{{.OverallClass}}">{{.Overall}}</span>
        </div>
        
        {{if .TorProxy}}
        <div class="status-item">
            <strong>Tor Proxy:</strong> 
            <span class="status-{{.TorProxyClass}}">{{.TorProxy}}</span>
            {{if .TorError}}
            <br><small style="color: #ff8800;">{{.TorError}}</small>
            {{end}}
        </div>
        {{end}}
        
        <div class="status-item">
            <strong>NNTP Connection:</strong> 
            <span class="status-{{.NNTPClass}}">{{.NNTPStatus}}</span>
            {{if .NNTPError}}
            <br><small style="color: #ff8800;">{{.NNTPError}}</small>
            {{end}}
        </div>
        
        <div class="status-item">
            <strong>Target Server:</strong> {{.Target}}
            <br><strong>Fallback Server:</strong> {{.Fallback}} (via Tor)
            {{if .ConnectedServer}}
            <br><strong>Currently Connected:</strong> {{.ConnectedServer}} 
            {{if .IsOnionService}}(🧅 Onion Service){{else}}(🌐 Via Tor){{end}}
            {{end}}
        </div>
        
        <div class="status-item">
            <strong>Cached Groups:</strong> {{.CachedGroups}}
        </div>
        
        <div class="status-item">
            <strong>Timestamp:</strong> {{.Timestamp}}
        </div>
        
        <div class="status-item">
            <strong>Session:</strong> {{.Session}}
        </div>
        
        {{if .Message}}
        <div class="status-item">
            <strong>Status:</strong> {{.Message}}
        </div>
        {{end}}
        
        <div class="diagnostic-section">
            <h3>🔧 Diagnostic Tools</h3>
            <p>Manual tests you can run to troubleshoot connectivity:</p>
            
            <div class="diagnostic-test">
                <strong>1. Test Tor connectivity (v3 onion):</strong><br>
                <code>curl --socks5 127.0.0.1:9050 http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion</code>
            </div>
            
            <div class="diagnostic-test">
                <strong>2a. Test primary onion service:</strong><br>
                <code>timeout 120 curl --socks5 127.0.0.1:9050 -v telnet://peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119</code>
            </div>
            
            <div class="diagnostic-test">
                <strong>2b. Test fallback NNTP server:</strong><br>
                <code>timeout 60 curl --socks5 127.0.0.1:9050 -v telnet://news.tcpreset.net:119</code>
            </div>
            
            <div class="diagnostic-test">
                <strong>3. Check Tor service:</strong><br>
                <code>systemctl status tor</code> or <code>ps aux | grep tor</code>
            </div>
            
            <div class="diagnostic-test">
                <strong>4. Check Tor logs:</strong><br>
                <code>journalctl -u tor -f</code> or <code>tail -f /var/log/tor/tor.log</code>
            </div>
            
            <p style="margin-top: 15px;"><em>If Tor proxy test fails, Tor is not running or configured correctly.</em></p>
            <p><em>If onion service test fails, the target service may be down.</em></p>
            <p><em>Try the <a href="/test-onion" class="back-link">Interactive Test Page</a> for detailed diagnostics.</em></p>
        </div>
        
        <div class="status-item">
            <strong>Features:</strong>
            <ul>
                <li>✅ Auto-reconnect enabled</li>
                <li>✅ MODE READER support</li>
                <li>✅ Health monitoring</li>
                <li>✅ Connection retry logic</li>
                <li>✅ Broken pipe recovery</li>
                <li>✅ Diagnostic testing</li>
            </ul>
        </div>
        
        <p><a href="/" class="back-link">← Back to Home</a> | <a href="/active" class="back-link">Active Groups</a></p>
    </div>
    
    <script>
        setTimeout(function() {
            window.location.reload();
        }, 30000);
    </script>
</body>
</html>`

	tmpl, _ := template.New("health").Parse(healthHTML)
	
	data := map[string]interface{}{
		"Overall":         status["overall"],
		"OverallClass":    strings.ToLower(fmt.Sprintf("%v", status["overall"])),
		"NNTPStatus":      status["nntp_status"],
		"NNTPClass":       strings.ToLower(fmt.Sprintf("%v", status["nntp_status"])),
		"Target":          status["target"],
		"Fallback":        status["fallback"],
		"CachedGroups":    status["cached_groups"],
		"Timestamp":       status["timestamp"],
		"Session":         status["session"],
		"Message":         status["message"],
	}
	
	if connectedServer, exists := status["connected_server"]; exists {
		data["ConnectedServer"] = connectedServer
	}
	if isOnionService, exists := status["is_onion_service"]; exists {
		data["IsOnionService"] = isOnionService
	}
	
	if torProxy, exists := status["tor_proxy"]; exists {
		data["TorProxy"] = torProxy
		data["TorProxyClass"] = strings.ToLower(fmt.Sprintf("%v", torProxy))
	}
	
	if nntpError, exists := status["nntp_error"]; exists {
		data["NNTPError"] = nntpError
	}
	
	if torError, exists := status["tor_error"]; exists {
		data["TorError"] = torError
	}
	
	tmpl.Execute(w, data)
}

func (s *NewsServer) handleTestOnion(w http.ResponseWriter, r *http.Request) {
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	
	testHTML := `<!DOCTYPE html>
<html>
<head>
    <title>🧪 Onion Service Test - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 800px; margin: 0 auto; }
        .test-box { background: #1a1a1a; padding: 20px; border-radius: 8px; margin: 20px 0; border: 1px solid #333; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .test-button { background: #333; color: #00ff00; border: none; padding: 12px 20px; border-radius: 4px; cursor: pointer; margin: 5px; }
        .test-button:hover { background: #555; }
        .result { margin: 15px 0; padding: 15px; border-radius: 5px; }
        .result-success { background: #002a1a; border: 1px solid #00aa00; color: #00aa00; }
        .result-error { background: #2a1a1a; border: 1px solid #aa0000; color: #aa0000; }
        .result-info { background: #1a2a2a; border: 1px solid #0088aa; color: #0088aa; }
        .spinner { animation: spin 1s linear infinite; display: inline-block; }
        @keyframes spin { 0% { transform: rotate(0deg); } 100% { transform: rotate(360deg); } }
        .test-progress { display: none; }
        pre { background: #0a0a0a; padding: 10px; border-radius: 3px; overflow-x: auto; }
    </style>
</head>
<body>
    <div class="container">
        <h1>🧪 Onion Service Connectivity Test</h1>
        <p><a href="/" class="back-link">← Back to Home</a> | <a href="/health" class="back-link">Health Status</a></p>
        
        <div class="test-box">
            <h3>🔍 Manual Connectivity Tests</h3>
            <p>These tests help diagnose onion service connectivity issues:</p>
            
            <button onclick="testTorProxy()" class="test-button">🌐 Test Tor Proxy</button>
            <button onclick="testDuckDuckGo()" class="test-button">🦆 Test DuckDuckGo Onion</button>
            <button onclick="testNNTPOnion()" class="test-button">📡 Test NNTP Onion Service</button>
            
            <div id="test-results"></div>
        </div>
        
        <div class="test-box">
            <h3>📊 Known Working Test Services (v3 Onion Addresses)</h3>
            <p>These onion services should work if your Tor is configured correctly:</p>
            <ul>
                <li><strong>DuckDuckGo:</strong> <code>duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion</code></li>
                <li><strong>Facebook:</strong> <code>facebookwkhpilnemxj7asaniu7vnjjbiltxjqhye3mhbshg7kx5tfyd.onion</code></li>
                <li><strong>ProPublica:</strong> <code>p53lf57qovyuvwsc6xnrppddxpr23otqjafwze2xypdgc3gvhxoylvvid.onion</code></li>
            </ul>
            <p><em>⚠️ These are v3 onion addresses (56 characters) - v2 addresses (16 chars) are deprecated since 2021</em></p>
        </div>
        
        <div class="test-box">
            <h3>🎯 Target Servers</h3>
            <p><strong>Primary target:</strong> <code>peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119</code></p>
            <p><strong>Fallback server:</strong> <code>news.tcpreset.net:119</code> via Tor (anonymous access)</p>
            <p><strong>Connection method:</strong> All connections routed through Tor SOCKS5 proxy</p>
            
            <div style="margin-top: 15px; padding: 10px; background: #1a2a1a; border-radius: 5px;">
                <strong>ℹ️ Connection priority:</strong>
                <ol style="margin: 10px 0 0 20px;">
                    <li>First tries the onion service for maximum anonymity</li>
                    <li>If onion service fails, falls back to <code>news.tcpreset.net</code> via Tor</li>
                    <li>All traffic is encrypted and routed through Tor network</li>
                    <li>Your IP address is hidden from NNTP servers</li>
                </ol>
            </div>
            
            <div style="margin-top: 15px; padding: 10px; background: #2a1a00; border-radius: 5px;">
                <strong>⚠️ Common issues:</strong>
                <ul style="margin: 10px 0 0 20px;">
                    <li>Onion service temporarily offline (TTL expired)</li>
                    <li>Network connectivity issues</li>
                    <li>Tor circuit building problems</li>
                    <li>Fallback server configuration/access issues</li>
                </ul>
            </div>
        </div>
        
        <div class="test-box">
            <h3>📡 NNTP Protocol Information</h3>
            <p><strong>Protocol type:</strong> NNTP Client (newsreader) - <strong>READ-ONLY</strong></p>
            <p><strong>Commands used:</strong></p>
            <ul style="margin: 10px 0 0 20px; font-family: monospace; font-size: 0.9em;">
                <li><code>MODE READER</code> - Enter reader mode</li>
                <li><code>LIST</code> - Get newsgroup list</li>
                <li><code>GROUP &lt;name&gt;</code> - Select newsgroup</li>
                <li><code>XOVER &lt;range&gt;</code> - Get article overview</li>
                <li><code>ARTICLE &lt;id&gt;</code> - Retrieve article</li>
                <li><code>DATE</code>/<code>HELP</code> - Health check</li>
                <li><code>QUIT</code> - Close connection</li>
            </ul>
            <p><strong>NOT used:</strong> <code>IHAVE</code>, <code>POST</code>, <code>TAKETHIS</code> (server-to-server/posting commands)</p>
            
            <div style="margin-top: 15px; padding: 10px; background: #1a2a1a; border-radius: 5px;">
                <strong>ℹ️ Technical details:</strong>
                <ul style="margin: 10px 0 0 20px;">
                    <li>This is a <strong>newsreader client</strong>, not an NNTP server</li>
                    <li>Read-only access - no posting capabilities</li>
                    <li>Uses standard RFC 3977 NNTP commands</li>
                    <li>All traffic routed through SOCKS5 (Tor)</li>
                </ul>
            </div>
        </div>
        
        <div class="test-box">
            <h3>🔧 Command Line Tests</h3>
            <p>You can also test manually from command line:</p>
            <pre># Test Tor connectivity
curl --socks5 127.0.0.1:9050 http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion

# Test NNTP onion service
timeout 120 curl --socks5 127.0.0.1:9050 -v \\
  telnet://peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119

# Test fallback server (anonymous access)
timeout 60 curl --socks5 127.0.0.1:9050 -v \\
  telnet://news.tcpreset.net:119</pre>
        </div>
        
        <div class="test-box">
            <h3>💡 Troubleshooting Tips</h3>
            <ul>
                <li>If Tor proxy test fails: Tor is not running or misconfigured</li>
                <li>If DuckDuckGo test fails: Network/Tor circuit issues</li>
                <li>If NNTP onion test fails: The specific NNTP service may be down</li>
                <li>Try again in a few minutes - onion services can be slow/unreliable</li>
                <li>Check Tor logs: <code>journalctl -u tor -f</code></li>
            </ul>
        </div>
    </div>
    
    <script>
        function showResult(type, message) {
            const resultsDiv = document.getElementById('test-results');
            const resultClass = type === 'success' ? 'result-success' : 
                               type === 'error' ? 'result-error' : 'result-info';
            resultsDiv.innerHTML += '<div class="result ' + resultClass + '">' + message + '</div>';
        }
        
        function showProgress(message) {
            const resultsDiv = document.getElementById('test-results');
            resultsDiv.innerHTML += '<div class="result result-info"><span class="spinner">🔄</span> ' + message + '</div>';
        }
        
        async function testTorProxy() {
            showProgress('Testing Tor proxy connectivity...');
            try {
                const response = await fetch('/health');
                const text = await response.text();
                if (text.includes('status-ok') || text.includes('Tor Proxy')) {
                    showResult('success', '✅ Tor proxy appears to be working');
                } else {
                    showResult('error', '❌ Tor proxy test inconclusive');
                }
            } catch (error) {
                showResult('error', '❌ Could not test Tor proxy: ' + error.message);
            }
        }
        
        async function testDuckDuckGo() {
            showProgress('Testing DuckDuckGo onion service (this may take 30-60 seconds)...');
            showResult('info', '💡 Manual test required - run: curl --socks5 127.0.0.1:9050 http://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion');
            showResult('info', '⚠️ Note: This is the current v3 onion address (v2 addresses are deprecated since 2021)');
        }
        
        async function testNNTPOnion() {
            showProgress('Testing NNTP onion service (this may take 2-3 minutes)...');
            try {
                const response = await fetch('/download-status');
                const data = await response.json();
                showResult('info', '📊 Current NNTP status: ' + data.message);
            } catch (error) {
                showResult('error', '❌ Could not check NNTP status: ' + error.message);
            }
            
            showResult('info', '💡 For full test, try downloading the active file from the main page');
        }
    </script>
</body>
</html>`
	
	w.Write([]byte(testHTML))
}

func (s *NewsServer) handleHome(w http.ResponseWriter, r *http.Request) {
	s.mutex.RLock()
	groupCount := len(s.groups)
	s.mutex.RUnlock()
	
	connectionStatus := "unknown"
	torStatus := "unknown"
	
	if err := s.testTorProxy(); err != nil {
		torStatus = "failed"
		connectionStatus = "tor-proxy-failed"
	} else {
		torStatus = "ok"
		if err := s.client.HealthCheck(); err != nil {
			connectionStatus = "nntp-disconnected"
		} else {
			connectionStatus = "connected"
		}
	}

	w.Header().Set("Content-Type", "text/html; charset=utf-8")

	homeHTML := `<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <title>🧅 Onion Newsreader</title>
    <style>
        * { margin: 0; padding: 0; box-sizing: border-box; }
        body { 
            font-family: 'Monaco', 'Menlo', 'Ubuntu Mono', monospace; 
            background: #0a0a0a; 
            color: #00ff00; 
            line-height: 1.6;
        }
        .container { max-width: 1200px; margin: 0 auto; padding: 20px; }
        .header { 
            background: #1a1a1a; 
            padding: 20px; 
            border-radius: 8px; 
            margin-bottom: 20px;
            border: 1px solid #333;
        }
        .header h1 { color: #00ff00; margin-bottom: 10px; }
        .header p { color: #888; }
        .status { 
            background: #1a1a1a; 
            padding: 15px; 
            border-radius: 8px; 
            margin-bottom: 20px;
            border: 1px solid #333;
        }
        .search-box { 
            background: #1a1a1a; 
            padding: 20px; 
            border-radius: 8px; 
            margin-bottom: 20px;
            border: 1px solid #333;
        }
        .search-box input { 
            width: 100%; 
            padding: 12px; 
            background: #0a0a0a; 
            border: 1px solid #333; 
            color: #00ff00; 
            border-radius: 4px;
            font-family: monospace;
        }
        .search-box button { 
            padding: 12px 20px; 
            background: #333; 
            border: none; 
            color: #00ff00; 
            border-radius: 4px; 
            cursor: pointer; 
            margin-top: 10px;
            font-family: monospace;
        }
        .search-box button:hover { background: #555; }
        .actions { 
            display: grid; 
            grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); 
            gap: 15px; 
            margin-bottom: 20px;
        }
        .action-card { 
            background: #1a1a1a; 
            padding: 20px; 
            border-radius: 8px; 
            border: 1px solid #333;
            text-align: center;
        }
        .action-card a { 
            color: #00aaff; 
            text-decoration: none; 
            font-weight: bold;
        }
        .action-card a:hover { color: #00ff00; }
        .footer { 
            text-align: center; 
            color: #666; 
            margin-top: 40px; 
            padding: 20px;
        }
        .status-good { color: #00ff00; }
        .status-warn { color: #ffaa00; }
        .status-error { color: #ff0000; }
        .status-unknown { color: #888; }
        .alert { padding: 15px; border-radius: 8px; margin-bottom: 20px; }
        .alert-error { background: #2a1a1a; border: 1px solid #ff8800; color: #ff8800; }
        .alert-warning { background: #2a2a1a; border: 1px solid #ffaa00; color: #ffaa00; }
        .alert-info { background: #1a2a2a; border: 1px solid #00aaff; color: #00aaff; }
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <h1>🧅 Onion Newsreader</h1>
            <p>Anonymous NNTP Client via Tor • Secure Newsgroup Access</p>
        </div>

        {{if eq .ConnectionStatus "tor-proxy-failed"}}
        <div class="alert alert-error">
            <h3>❌ Tor Connection Failed</h3>
            <p>Cannot connect to Tor proxy at 127.0.0.1:9050</p>
            <p>Please ensure Tor is installed and running: <code>systemctl start tor</code></p>
        </div>
        {{else if eq .ConnectionStatus "nntp-disconnected"}}
        <div class="alert alert-warning">
            <h3>⚠️ NNTP Services Unreachable</h3>
            <p>Tor proxy is working but neither the onion service nor fallback server are reachable.</p>
            <p><strong>Primary target:</strong> <code>peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion</code></p>
            <p><strong>Fallback server:</strong> <code>news.tcpreset.net</code> via Tor (anonymous access)</p>
            <p>This may be temporary - services might be down or experiencing high load.</p>
            <p><a href="/test-onion" style="color: #00aaff;">🧪 Run diagnostic tests</a> to troubleshoot.</p>
        </div>
        {{else if eq .ConnectionStatus "connected"}}
        <div class="alert alert-info">
            <h3>✅ All Systems Operational</h3>
            <p>Tor proxy and NNTP service are both reachable.</p>
        </div>
        {{end}}

        <div class="status">
            <h3>📊 Status</h3>
            <p>📡 Primary: <code>peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion</code></p>
            <p>🔄 Fallback: <code>news.tcpreset.net</code> via Tor (anonymous access)</p>
            <p>🌐 Tor Proxy: <span class="status-{{.TorStatusClass}}">{{.TorStatus}}</span></p>
            <p>📡 NNTP: <span class="status-{{.ConnectionStatusClass}}">{{.ConnectionStatus}}</span></p>
            <p>📊 Cached Groups: <span class="status-good">{{.GroupCount}}</span></p>
            <p>🔗 Session: <code>{{.Session}}</code></p>
            <p>⚡ <a href="/health" style="color: #00aaff;">Detailed Health Check</a></p>
        </div>

        {{if ne .ConnectionStatus "tor-proxy-failed"}}
        <div class="search-box">
            <h3>🔍 Search Newsgroups</h3>
            <form action="/search" method="get">
                <input type="text" name="q" placeholder="Search newsgroups (e.g., comp.*, alt.*, *.linux.*)" required>
                <button type="submit">Search Groups</button>
            </form>
        </div>

        <div class="actions">
            <div class="action-card">
                <h4>📋 Browse Groups</h4>
                <p><a href="/active">View All Groups</a></p>
                <p>Browse available newsgroups</p>
            </div>

            <div class="action-card">
                <h4>🔄 Refresh</h4>
                <p><a href="/active?refresh=1">Refresh Group List</a></p>
                <p>Update newsgroup cache</p>
            </div>

            <div class="action-card">
                <h4>📊 System Info</h4>
                <p><a href="/health">Health Status</a></p>
                <p>Connection and system status</p>
            </div>
            
            <div class="action-card">
                <h4>🧪 Diagnostics</h4>
                <p><a href="/test-onion">Test Onion Services</a></p>
                <p>Connectivity troubleshooting</p>
            </div>

            <div class="action-card">
                <h4>🔍 Quick Search</h4>
                <p><a href="/search?q=comp.*">comp.*</a> | <a href="/search?q=alt.*">alt.*</a></p>
                <p><a href="/search?q=*linux*">*linux*</a> | <a href="/search?q=sci.*">sci.*</a></p>
                <p>Popular newsgroup categories</p>
            </div>
        </div>
        {{else}}
        <div class="alert alert-error">
            <h3>🔧 Troubleshooting Steps</h3>
            <ol>
                <li>Install Tor: <code>apt-get install tor</code></li>
                <li>Start Tor service: <code>systemctl start tor</code></li>
                <li>Enable Tor service: <code>systemctl enable tor</code></li>
                <li>Check Tor status: <code>systemctl status tor</code></li>
                <li>Refresh this page after fixing Tor</li>
            </ol>
        </div>
        {{end}}

        <div class="footer">
            <p>🔒 All connections are routed through Tor for maximum anonymity</p>
            <p>🧅 Primary: Onion service • 🔄 Fallback: news.tcpreset.net via Tor (anonymous)</p>
            <p>✍️ Posting URL: <code>http://itcxzfm2h36hfj6j7qxksyfm4ipp3co4rkl62sgge7hp6u77lbretiyd.onion:8880/</code></p>
        </div>
    </div>
</body>
</html>`

	tmpl, _ := template.New("home").Parse(homeHTML)
	
	torStatusClass := "unknown"
	connectionStatusClass := "unknown"
	
	switch torStatus {
	case "ok":
		torStatusClass = "good"
	case "failed":
		torStatusClass = "error"
	}
	
	switch connectionStatus {
	case "connected":
		connectionStatusClass = "good"
	case "nntp-disconnected":
		connectionStatusClass = "warn"
	case "tor-proxy-failed":
		connectionStatusClass = "error"
	}
	
	data := map[string]interface{}{
		"GroupCount":             groupCount,
		"Session":                s.session,
		"ConnectionStatus":       connectionStatus,
		"ConnectionStatusClass":  connectionStatusClass,
		"TorStatus":             torStatus,
		"TorStatusClass":        torStatusClass,
	}
	tmpl.Execute(w, data)
}

func (s *NewsServer) handleSearch(w http.ResponseWriter, r *http.Request) {
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	
	query := strings.TrimSpace(r.URL.Query().Get("q"))
	
	if query == "" {
		// Show search form
		searchFormHTML := `<!DOCTYPE html>
<html>
<head>
    <title>🔍 Search Newsgroups - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 800px; margin: 0 auto; }
        .search-box { background: #1a1a1a; padding: 20px; border-radius: 8px; margin: 20px 0; border: 1px solid #333; }
        .search-box input { width: 100%; padding: 12px; background: #0a0a0a; border: 1px solid #333; color: #00ff00; border-radius: 4px; font-family: monospace; }
        .search-box button { padding: 12px 20px; background: #333; border: none; color: #00ff00; border-radius: 4px; cursor: pointer; margin-top: 10px; font-family: monospace; }
        .search-box button:hover { background: #555; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .examples { background: #1a1a1a; padding: 15px; border-radius: 8px; margin: 20px 0; border: 1px solid #333; }
        .examples ul { margin: 10px 0 0 20px; }
        .examples li { margin: 5px 0; }
        .examples code { background: #0a0a0a; padding: 2px 4px; border-radius: 2px; }
    </style>
</head>
<body>
    <div class="container">
        <h1>🔍 Search Newsgroups</h1>
        <p><a href="/" class="back-link">← Back to Home</a></p>
        
        <div class="search-box">
            <h3>Enter Search Query</h3>
            <form action="/search" method="get">
                <input type="text" name="q" placeholder="Search newsgroups (e.g., comp.*, alt.*, *.linux.*)" autofocus>
                <button type="submit">🔍 Search</button>
            </form>
        </div>
        
        <div class="examples">
            <h3>📝 Search Examples</h3>
            <ul>
                <li><code>comp.*</code> - All computer-related groups</li>
                <li><code>alt.*</code> - All alternative groups</li>
                <li><code>*.linux.*</code> - All Linux-related groups</li>
                <li><code>rec.sport.*</code> - All recreation sport groups</li>
                <li><code>*security*</code> - All groups containing "security"</li>
                <li><code>news.*</code> - All news groups</li>
                <li><code>sci.*</code> - All science groups</li>
                <li><code>soc.*</code> - All social groups</li>
            </ul>
            <p><strong>Wildcards:</strong> Use <code>*</code> to match any characters</p>
            <p><strong>Case:</strong> Search is case-insensitive</p>
        </div>
    </div>
</body>
</html>`
		w.Write([]byte(searchFormHTML))
		return
	}
	
	// Perform search
	s.mutex.RLock()
	allGroups := s.groups
	groupCount := len(allGroups)
	s.mutex.RUnlock()
	
	if groupCount == 0 {
		noGroupsHTML := `<!DOCTYPE html>
<html>
<head>
    <title>🔍 Search Results - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 800px; margin: 0 auto; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .warning { background: #2a1a00; border: 1px solid #ffaa00; color: #ffaa00; padding: 15px; border-radius: 8px; margin: 20px 0; }
    </style>
</head>
<body>
    <div class="container">
        <h1>🔍 Search Results</h1>
        <p><a href="/" class="back-link">← Back to Home</a> | <a href="/search" class="back-link">🔍 New Search</a></p>
        
        <div class="warning">
            <h3>⚠️ No Groups Available</h3>
            <p>No newsgroups are currently cached. You need to download the active file first.</p>
            <p><a href="/active?refresh=1" style="color: #00aaff;">📥 Download Active File</a></p>
        </div>
    </div>
</body>
</html>`
		w.Write([]byte(noGroupsHTML))
		return
	}
	
	// Convert search pattern to regex
	pattern := strings.ToLower(query)
	pattern = strings.ReplaceAll(pattern, ".", "\\.")
	pattern = strings.ReplaceAll(pattern, "*", ".*")
	pattern = "^" + pattern + "$"
	
	log.Printf("🔍 Searching for pattern: %s (regex: %s)", query, pattern)
	
	var matches []*NewsgroupInfo
	for _, group := range allGroups {
		if matched, _ := regexp.MatchString(pattern, strings.ToLower(group.Name)); matched {
			matches = append(matches, group)
		}
	}
	
	// Sort results
	sort.Slice(matches, func(i, j int) bool {
		return matches[i].Name < matches[j].Name
	})
	
	// Limit results to prevent huge pages
	maxResults := 500
	truncated := false
	if len(matches) > maxResults {
		matches = matches[:maxResults]
		truncated = true
	}
	
	log.Printf("🔍 Search completed: %d matches for '%s'", len(matches), query)
	
	searchResultsHTML := `<!DOCTYPE html>
<html>
<head>
    <title>🔍 Search Results - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 1000px; margin: 0 auto; }
        .search-header { background: #1a1a1a; padding: 20px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .search-box { margin: 15px 0; }
        .search-box input { width: 70%; padding: 8px; background: #0a0a0a; border: 1px solid #333; color: #00ff00; border-radius: 4px; font-family: monospace; }
        .search-box button { padding: 8px 16px; background: #333; border: none; color: #00ff00; border-radius: 4px; cursor: pointer; margin-left: 10px; }
        .search-box button:hover { background: #555; }
        .results-summary { background: #1a1a1a; padding: 15px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .group-list { background: #1a1a1a; padding: 20px; border-radius: 8px; border: 1px solid #333; }
        .group-item { padding: 8px; margin: 3px 0; background: #0a0a0a; border-radius: 3px; }
        .group-name { color: #00aaff; }
        .group-stats { color: #888; font-size: 0.9em; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .warning { background: #2a1a00; border: 1px solid #ffaa00; color: #ffaa00; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .info { background: #1a2a2a; border: 1px solid #0088aa; color: #0088aa; padding: 15px; border-radius: 8px; margin: 20px 0; }
    </style>
</head>
<body>
    <div class="container">
        <div class="search-header">
            <h1>🔍 Search Results</h1>
            <p><a href="/" class="back-link">← Back to Home</a> | <a href="/search" class="back-link">🔍 New Search</a> | <a href="/active" class="back-link">📋 All Groups</a></p>
            
            <div class="search-box">
                <form action="/search" method="get">
                    <input type="text" name="q" value="{{.Query}}" placeholder="Search newsgroups...">
                    <button type="submit">🔍 Search</button>
                </form>
            </div>
        </div>

        <div class="results-summary">
            <h3>📊 Search Results</h3>
            <p><strong>Query:</strong> <code>{{.Query}}</code></p>
            <p><strong>Matches:</strong> {{.MatchCount}} out of {{.TotalGroups}} total groups</p>
            {{if .Truncated}}
            <p><strong>⚠️ Results limited to first {{.MaxResults}} matches - try a more specific search</strong></p>
            {{end}}
        </div>

        {{if eq .MatchCount 0}}
        <div class="info">
            <h3>ℹ️ No Matches Found</h3>
            <p>No newsgroups match your search pattern: <code>{{.Query}}</code></p>
            <p><strong>Tips:</strong></p>
            <ul>
                <li>Try using wildcards: <code>comp.*</code>, <code>*linux*</code>, <code>alt.*</code></li>
                <li>Check spelling and case (search is case-insensitive)</li>
                <li>Use broader patterns: <code>*security*</code> instead of <code>comp.security.*</code></li>
            </ul>
        </div>
        {{else}}
        <div class="group-list">
            <h3>📋 Matching Groups</h3>
            {{range .Groups}}
            <div class="group-item">
                <div class="group-name">
                    <a href="/group/{{.Name}}" style="color: #00aaff; text-decoration: none;">{{.Name}}</a>
                </div>
                <div class="group-stats">Range: {{.Low}}-{{.High}} ({{.Status}}) • Articles: {{.ArticleCount}}</div>
            </div>
            {{end}}
        </div>
        {{end}}
    </div>
</body>
</html>`

	tmpl, _ := template.New("search").Parse(searchResultsHTML)
	
	// Calculate article counts for display
	for _, group := range matches {
		if group.High > group.Low {
			group.ArticleCount = group.High - group.Low + 1
		} else {
			group.ArticleCount = 0
		}
	}
	
	data := map[string]interface{}{
		"Query":       query,
		"Groups":      matches,
		"MatchCount":  len(matches),
		"TotalGroups": groupCount,
		"Truncated":   truncated,
		"MaxResults":  maxResults,
	}
	tmpl.Execute(w, data)
}

func (s *NewsServer) handleGroup(w http.ResponseWriter, r *http.Request) {
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	
	// Extract group name from URL path
	path := strings.TrimPrefix(r.URL.Path, "/group/")
	if path == "" {
		http.Redirect(w, r, "/active", http.StatusSeeOther)
		return
	}
	
	groupName := path
	log.Printf("🔍 Viewing group: %s", groupName)
	
	// Check if group exists in cache
	s.mutex.RLock()
	groupInfo, exists := s.groups[groupName]
	s.mutex.RUnlock()
	
	if !exists {
		notFoundHTML := `<!DOCTYPE html>
<html>
<head>
    <title>❌ Group Not Found - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 800px; margin: 0 auto; }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .error { background: #2a1a1a; border: 1px solid #aa0000; color: #aa0000; padding: 15px; border-radius: 8px; margin: 20px 0; }
    </style>
</head>
<body>
    <div class="container">
        <h1>❌ Newsgroup Not Found</h1>
        <p><a href="/" class="back-link">← Back to Home</a> | <a href="/active" class="back-link">📋 All Groups</a></p>
        
        <div class="error">
            <h3>Group Not Available</h3>
            <p>The newsgroup <strong>` + groupName + `</strong> was not found in the cached group list.</p>
            <p>This could mean:</p>
            <ul>
                <li>The group name is misspelled</li>
                <li>The group doesn't exist on this server</li>
                <li>The active file cache needs to be refreshed</li>
            </ul>
            <p><a href="/active?refresh=1" style="color: #00aaff;">🔄 Refresh Group Cache</a></p>
        </div>
    </div>
</body>
</html>`
		w.Write([]byte(notFoundHTML))
		return
	}
	
	// Try to get articles for this group
	var articles []*ArticleOverview
	var articleCount, low, high int
	var connectionError string
	
	if err := s.client.ensureConnected(); err != nil {
		connectionError = fmt.Sprintf("Connection failed: %v", err)
	} else {
		var err error
		articleCount, low, high, err = s.client.SelectGroup(groupName)
		if err != nil {
			connectionError = fmt.Sprintf("Failed to select group: %v", err)
		} else {
			maxArticles := 100  // Limit to prevent huge pages
			articles, err = s.client.GetArticleOverview(low, high, maxArticles)
			if err != nil {
				connectionError = fmt.Sprintf("Failed to get articles: %v", err)
			}
		}
	}
	
	groupHTML := `<!DOCTYPE html>
<html>
<head>
    <title>📰 {{.GroupName}} - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: monospace; background: #0a0a0a; color: #00ff00; padding: 20px; }
        .container { max-width: 1200px; margin: 0 auto; }
        .header { background: #1a1a1a; padding: 20px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .group-info { background: #1a1a1a; padding: 15px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .article-list { background: #1a1a1a; padding: 20px; border-radius: 8px; border: 1px solid #333; }
        .article-item { 
            padding: 12px; 
            margin: 5px 0; 
            background: #0a0a0a; 
            border-radius: 3px; 
            border-left: 3px solid #333; 
        }
        .article-item:hover { 
            background: #1a1a0a; 
            border-left-color: #ffaa00; 
        }
        .article-subject { 
            color: #00aaff; 
            font-weight: bold; 
            margin-bottom: 5px; 
        }
        .article-meta { 
            color: #888; 
            font-size: 0.9em; 
        }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .error { background: #2a1a1a; border: 1px solid #aa0000; color: #aa0000; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .warning { background: #2a1a00; border: 1px solid #ffaa00; color: #ffaa00; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .info { background: #1a2a2a; border: 1px solid #0088aa; color: #0088aa; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .refresh-btn { background: #333; color: #00ff00; border: none; padding: 8px 16px; border-radius: 4px; cursor: pointer; margin: 10px 5px; }
        .refresh-btn:hover { background: #555; }
        .pagination { text-align: center; margin: 20px 0; }
        .stats { display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 10px; }
        .stat-item { background: #0a0a0a; padding: 10px; border-radius: 4px; text-align: center; }
        .posting-section { background: #1a1a1a; padding: 20px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; text-align: center; }
        .post-button { 
            display: inline-block; 
            background: #2a4a2a; 
            color: #00ff00; 
            text-decoration: none; 
            padding: 12px 24px; 
            border-radius: 6px; 
            font-weight: bold; 
            margin: 10px 0; 
            border: 2px solid #00aa00;
            transition: all 0.3s ease;
        }
        .post-button:hover { 
            background: #3a6a3a; 
            border-color: #00ff00; 
            box-shadow: 0 0 10px rgba(0, 255, 0, 0.3);
        }
        .posting-note { 
            font-size: 0.9em; 
            color: #888; 
            margin-top: 15px; 
            text-align: left; 
            background: #0a0a0a; 
            padding: 10px; 
            border-radius: 4px; 
            border-left: 3px solid #ffaa00;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <h1>📰 {{.GroupName}}</h1>
            <p><a href="/" class="back-link">← Back to Home</a> | 
               <a href="/active" class="back-link">📋 All Groups</a> | 
               <a href="/search?q={{.GroupPattern}}" class="back-link">🔍 Similar Groups</a></p>
        </div>

        <div class="group-info">
            <h3>📊 Group Information</h3>
            <div class="stats">
                <div class="stat-item">
                    <strong>📝 Cached Range:</strong><br>{{.CachedLow}} - {{.CachedHigh}}
                </div>
                <div class="stat-item">
                    <strong>📊 Cached Count:</strong><br>{{.CachedCount}}
                </div>
                {{if .LiveStats}}
                <div class="stat-item">
                    <strong>📡 Live Range:</strong><br>{{.LiveLow}} - {{.LiveHigh}}
                </div>
                <div class="stat-item">
                    <strong>🔢 Live Count:</strong><br>{{.LiveCount}}
                </div>
                {{end}}
                <div class="stat-item">
                    <strong>📋 Status:</strong><br>{{.Status}}
                </div>
            </div>
        </div>

        <div class="posting-section">
            <h3>✍️ Post to Newsgroup</h3>
            <p>Create a new post in <strong>{{.GroupName}}</strong></p>
            <a href="http://itcxzfm2h36hfj6j7qxksyfm4ipp3co4rkl62sgge7hp6u77lbretiyd.onion:8880/?newsgroups={{.EncodedGroupName}}" target="_blank" class="post-button">
                📝 CREATE NEW POST
            </a>
            <p class="posting-note">
                <strong>⚠️ Posting Requirements:</strong><br>
                • Use <strong>Tor Browser</strong> or configure SOCKS5 proxy (127.0.0.1:9050)<br>
                • Link opens in new tab to posting service<br>
                • Anonymous posting available on news.tcpreset.net
            </p>
        </div>

        {{if .ConnectionError}}
        <div class="error">
            <h3>❌ Connection Error</h3>
            <p>{{.ConnectionError}}</p>
            <p>Showing cached information only. <a href="/health" style="color: #00aaff;">Check system health</a></p>
        </div>
        {{end}}

        {{if .Articles}}
        <div class="article-list">
            <h3>📰 Recent Articles {{if .TruncatedView}}(showing last {{.MaxArticles}}){{end}}</h3>
            
            {{range .Articles}}
            <div class="article-item">
                <div class="article-subject">
                    <a href="/article/{{$.GroupName}}/{{.Number}}" style="color: #00aaff; text-decoration: none;">
                        {{.Subject}}
                    </a>
                </div>
                <div class="article-meta">
                    <strong>From:</strong> {{.From}} | 
                    <strong>Date:</strong> {{.Date}} | 
                    <strong>Article:</strong> {{.Number}} | 
                    <strong>Size:</strong> {{.ByteCount}} bytes ({{.LineCount}} lines)
                </div>
            </div>
            {{end}}
            
            {{if .TruncatedView}}
            <div class="info">
                <p><strong>ℹ️ Note:</strong> Only showing the most recent {{.MaxArticles}} articles to prevent slow loading.</p>
                <p>Use a dedicated newsreader client for full group browsing and threading.</p>
            </div>
            {{end}}
        </div>
        {{else if not .ConnectionError}}
        <div class="warning">
            <h3>⚠️ No Articles Available</h3>
            <p>This group appears to be empty or articles couldn't be retrieved.</p>
            <p>This could be normal for:</p>
            <ul>
                <li>Newly created groups</li>
                <li>Low-traffic groups</li>
                <li>Groups with expired articles</li>
            </ul>
            <button onclick="window.location.reload()" class="refresh-btn">🔄 Refresh</button>
        </div>
        {{end}}

        <div class="info">
            <h3>💡 Navigation Tips</h3>
            <ul>
                <li><strong>Click article subjects</strong> to read full articles</li>
                <li><strong>Use browser back</strong> to return to this group view</li>
                <li><strong>Search for similar groups</strong> using the pattern above</li>
                <li><strong>Recent articles shown first</strong> (newest at top)</li>
            </ul>
        </div>
    </div>
</body>
</html>`

	tmpl, _ := template.New("group").Parse(groupHTML)
	
	// Reverse articles to show newest first
	for i := len(articles)/2 - 1; i >= 0; i-- {
		opp := len(articles) - 1 - i
		articles[i], articles[opp] = articles[opp], articles[i]
	}
	
	// Generate search pattern for similar groups
	groupPattern := ""
	if strings.Contains(groupName, ".") {
		parts := strings.Split(groupName, ".")
		if len(parts) > 1 {
			groupPattern = parts[0] + ".*"
		}
	}
	
	data := map[string]interface{}{
		"GroupName":         groupName,
		"GroupPattern":      groupPattern,
		"CachedLow":         groupInfo.Low,
		"CachedHigh":        groupInfo.High, 
		"CachedCount":       groupInfo.High - groupInfo.Low + 1,
		"Status":            groupInfo.Status,
		"Articles":          articles,
		"ConnectionError":   connectionError,
		"LiveStats":         connectionError == "",
		"MaxArticles":       100,
		"TruncatedView":     len(articles) >= 100,
		"EncodedGroupName":  url.QueryEscape(groupName),
	}
	
	if connectionError == "" {
		data["LiveLow"] = low
		data["LiveHigh"] = high
		data["LiveCount"] = articleCount
	}
	
	tmpl.Execute(w, data)
}

func (s *NewsServer) handleArticle(w http.ResponseWriter, r *http.Request) {
	w.Header().Set("Content-Type", "text/html; charset=utf-8")
	
	// Extract group name and article number from URL path
	path := strings.TrimPrefix(r.URL.Path, "/article/")
	parts := strings.Split(path, "/")
	
	if len(parts) != 2 {
		http.Redirect(w, r, "/", http.StatusSeeOther)
		return
	}
	
	groupName := parts[0]
	articleNumber, err := strconv.Atoi(parts[1])
	if err != nil {
		http.Redirect(w, r, "/group/"+groupName, http.StatusSeeOther)
		return
	}
	
	log.Printf("📰 Reading article %d from group %s", articleNumber, groupName)
	
	// Ensure we're connected and select the group first
	var headers map[string]string
	var body []string
	var connectionError string
	
	if err := s.client.ensureConnected(); err != nil {
		connectionError = fmt.Sprintf("Connection failed: %v", err)
	} else {
		// Select group first
		_, _, _, err := s.client.SelectGroup(groupName)
		if err != nil {
			connectionError = fmt.Sprintf("Failed to select group: %v", err)
		} else {
			// Get the article
			headers, body, err = s.client.GetArticle(groupName, articleNumber)
			if err != nil {
				connectionError = fmt.Sprintf("Failed to get article: %v", err)
			}
		}
	}
	
	articleHTML := `<!DOCTYPE html>
<html>
<head>
    <title>📰 Article {{.ArticleNumber}} - {{.GroupName}} - Onion Newsreader</title>
    <meta charset="utf-8">
    <style>
        body { font-family: 'Monaco', 'Menlo', 'Ubuntu Mono', monospace; background: #0a0a0a; color: #00ff00; padding: 20px; line-height: 1.4; }
        .container { max-width: 1000px; margin: 0 auto; }
        .header { background: #1a1a1a; padding: 20px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .article-headers { background: #1a1a1a; padding: 15px; border-radius: 8px; margin-bottom: 20px; border: 1px solid #333; }
        .article-body { background: #1a1a1a; padding: 20px; border-radius: 8px; border: 1px solid #333; }
        .header-item { margin: 5px 0; padding: 5px; background: #0a0a0a; border-radius: 3px; }
        .header-label { color: #ffaa00; font-weight: bold; }
        .header-value { color: #00aaff; word-break: break-word; }
        .body-content { 
            color: #cccccc; 
            white-space: pre-wrap; 
            font-family: 'Monaco', 'Menlo', 'Ubuntu Mono', monospace; 
            background: #0a0a0a; 
            padding: 15px; 
            border-radius: 5px; 
            border: 1px solid #333;
            overflow-x: auto;
            line-height: 1.4;
            word-wrap: break-word;
        }
        .back-link { color: #00aaff; text-decoration: none; }
        .back-link:hover { color: #00ff00; }
        .error { background: #2a1a1a; border: 1px solid #aa0000; color: #aa0000; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .warning { background: #2a1a00; border: 1px solid #ffaa00; color: #ffaa00; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .info { background: #1a2a2a; border: 1px solid #0088aa; color: #0088aa; padding: 15px; border-radius: 8px; margin: 20px 0; }
        .article-meta { display: grid; grid-template-columns: repeat(auto-fit, minmax(300px, 1fr)); gap: 10px; }
        .subject-highlight { font-size: 1.1em; color: #00ff00; font-weight: bold; }
        .quoted-text { 
            color: #888888; 
            font-style: italic;
            border-left: 2px solid #666;
            padding-left: 8px;
            margin-left: 4px;
            display: block;
        }
        .signature { 
            color: #666666; 
            border-top: 1px solid #333; 
            margin-top: 10px; 
            padding-top: 10px; 
            font-size: 0.9em;
            display: block;
        }
        .url-link {
            color: #00aaff;
            text-decoration: underline;
        }
        .reply-section { 
            background: #1a1a1a; 
            padding: 20px; 
            border-radius: 8px; 
            margin-bottom: 20px; 
            border: 1px solid #333; 
            text-align: center; 
        }
        .reply-button { 
            display: inline-block; 
            background: #2a2a4a; 
            color: #00aaff; 
            text-decoration: none; 
            padding: 12px 24px; 
            border-radius: 6px; 
            font-weight: bold; 
            margin: 10px 0; 
            border: 2px solid #0088aa;
            transition: all 0.3s ease;
        }
        .reply-button:hover { 
            background: #3a3a6a; 
            border-color: #00aaff; 
            box-shadow: 0 0 10px rgba(0, 170, 255, 0.3);
        }
        .reply-note { 
            font-size: 0.9em; 
            color: #888; 
            margin-top: 15px; 
            text-align: left; 
            background: #0a0a0a; 
            padding: 10px; 
            border-radius: 4px; 
            border-left: 3px solid #00aaff;
        }
    </style>
</head>
<body>
    <div class="container">
        <div class="header">
            <h1>📰 Article {{.ArticleNumber}}</h1>
            <p><a href="/" class="back-link">← Back to Home</a> | 
               <a href="/group/{{.GroupName}}" class="back-link">← Back to {{.GroupName}}</a> | 
               <a href="/active" class="back-link">📋 All Groups</a></p>
        </div>

        {{if not .ConnectionError}}
        <div class="reply-section">
            <h3>💬 Reply to this Article</h3>
            <p>Reply to article by <strong>{{.From}}</strong> in <strong>{{.GroupName}}</strong></p>
            <a href="http://itcxzfm2h36hfj6j7qxksyfm4ipp3co4rkl62sgge7hp6u77lbretiyd.onion:8880/" target="_blank" class="reply-button">
                💬 OPEN POSTING SERVICE
            </a>
            <p class="reply-note">
                <strong>ℹ️ For Your Reply:</strong><br>
                {{if .Subject}}• <strong>Subject:</strong> {{.Subject}}<br>{{end}}
                {{if .MessageID}}• <strong>References:</strong> {{.MessageID}}<br>{{end}}
                • <strong>Newsgroups:</strong> {{.GroupName}}<br>
                • <strong>Original Author:</strong> {{.From}}<br>
                • Use <strong>Tor Browser</strong> to access posting service
            </p>
        </div>
        {{end}}

        {{if .ConnectionError}}
        <div class="error">
            <h3>❌ Connection Error</h3>
            <p>{{.ConnectionError}}</p>
            <p><a href="/health" style="color: #00aaff;">Check system health</a> | 
               <a href="/group/{{.GroupName}}" style="color: #00aaff;">Back to group</a></p>
        </div>
        {{else}}
        
        <div class="article-headers">
            <h3>📋 Article Headers</h3>
            <div class="article-meta">
                {{if .Subject}}
                <div class="header-item">
                    <span class="header-label">Subject:</span><br>
                    <span class="subject-highlight">{{.Subject}}</span>
                </div>
                {{end}}
                
                {{if .From}}
                <div class="header-item">
                    <span class="header-label">From:</span><br>
                    <span class="header-value">{{.From}}</span>
                </div>
                {{end}}
                
                {{if .Date}}
                <div class="header-item">
                    <span class="header-label">Date:</span><br>
                    <span class="header-value">{{.Date}}</span>
                </div>
                {{end}}
                
                {{if .MessageID}}
                <div class="header-item">
                    <span class="header-label">Message-ID:</span><br>
                    <span class="header-value">{{.MessageID}}</span>
                </div>
                {{end}}
                
                {{if .Newsgroups}}
                <div class="header-item">
                    <span class="header-label">Newsgroups:</span><br>
                    <span class="header-value">{{.Newsgroups}}</span>
                </div>
                {{end}}
                
                {{if .References}}
                <div class="header-item">
                    <span class="header-label">References:</span><br>
                    <span class="header-value" style="font-size: 0.8em; word-break: break-all;">{{.References}}</span>
                </div>
                {{end}}
            </div>
            
            {{if .AllHeaders}}
            <details style="margin-top: 15px;">
                <summary style="color: #ffaa00; cursor: pointer;">🔍 Show All Headers</summary>
                <div style="margin-top: 10px; background: #0a0a0a; padding: 10px; border-radius: 5px;">
                    {{range $key, $value := .AllHeaders}}
                    <div style="margin: 2px 0; font-size: 0.9em;">
                        <strong style="color: #ffaa00;">{{$key}}:</strong> 
                        <span style="color: #cccccc; word-break: break-word;">{{$value}}</span>
                    </div>
                    {{end}}
                </div>
            </details>
            {{end}}
        </div>

        <div class="article-body">
            <h3>📄 Article Content</h3>
            {{if .Body}}
            <div class="body-content">{{.Body}}</div>
            {{else}}
            <div class="warning">
                <p>⚠️ Article body is empty or could not be retrieved.</p>
            </div>
            {{end}}
        </div>
        
        <div class="info">
            <h3>💡 Navigation Tips</h3>
            <ul>
                <li><strong>Use browser back button</strong> to return to group view</li>
                <li><strong>References header</strong> shows message threading</li>
                <li><strong>Message-ID</strong> is unique identifier for this article</li>
                <li><strong>Quoted text</strong> appears dimmed and indented</li>
                <li><strong>Signatures</strong> appear separated and dimmed</li>
            </ul>
        </div>
        
        {{end}}
    </div>
</body>
</html>`

	tmpl, _ := template.New("article").Parse(articleHTML)
	
	// Process body for better display with proper HTML escaping
	var bodyHTML template.HTML
	var quotedBody string // For reply functionality
	if len(body) > 0 {
		bodyText := strings.Join(body, "\n")
		
		// Create quoted version for replies (add > to each line)
		quotedLines := strings.Split(bodyText, "\n")
		for i, line := range quotedLines {
			quotedLines[i] = "> " + line
		}
		quotedBody = strings.Join(quotedLines, "\n")
		
		// Prima escape tutto l'HTML per sicurezza
		bodyText = html.EscapeString(bodyText)
		
		// Poi aggiungi styling per quotes e signature
		lines := strings.Split(bodyText, "\n")
		inSignature := false
		
		for i, line := range lines {
			trimmedLine := strings.TrimSpace(line)
			
			// Detect signature start (-- line)
			if trimmedLine == "--" && !inSignature {
				inSignature = true
				lines[i] = `<div class="signature">` + line
				continue
			}
			
			// Se siamo in signature, continua lo styling
			if inSignature {
				if i == len(lines)-1 {
					lines[i] = line + `</div>` // Chiudi signature alla fine
				}
				continue
			}
			
			// Quote detection (linee che iniziano con >)
			if strings.HasPrefix(trimmedLine, "&gt;") {
				lines[i] = `<div class="quoted-text">` + line + `</div>`
			}
			
			// URL detection semplice
			if strings.Contains(line, "http://") || strings.Contains(line, "https://") || strings.Contains(line, "ftp://") {
				// Non implementiamo link cliccabili per sicurezza, ma evidenziamo
				lines[i] = strings.ReplaceAll(line, "http://", `<span class="url-link">http://`) 
				lines[i] = strings.ReplaceAll(lines[i], "https://", `<span class="url-link">https://`)
				lines[i] = strings.ReplaceAll(lines[i], "ftp://", `<span class="url-link">ftp://`)
				// Chiudi span alla fine della linea se contiene URL
				if strings.Contains(lines[i], `<span class="url-link">`) {
					lines[i] += `</span>`
				}
			}
		}
		
		// Se signature non è stata chiusa, chiudila
		if inSignature && !strings.Contains(lines[len(lines)-1], "</div>") {
			lines[len(lines)-1] += `</div>`
		}
		
		processedBody := strings.Join(lines, "\n")
		
		// Marca come HTML sicuro
		bodyHTML = template.HTML(processedBody)
	}
	
	data := map[string]interface{}{
		"GroupName":         groupName,
		"ArticleNumber":     articleNumber,
		"ConnectionError":   connectionError,
		"Body":             bodyHTML,  // Usa bodyHTML invece di bodyText
		"AllHeaders":       headers,
		"EncodedGroupName": url.QueryEscape(groupName),
		"QuotedBody":       quotedBody,
	}
	
	// Extract common headers for easy access and URL encode them
	if headers != nil {
		if subject, ok := headers["Subject"]; ok {
			data["Subject"] = subject
			// Add "Re: " if not already present for reply functionality
			replySubject := subject
			// Check if subject already starts with "Re:" (case insensitive, handle spaces)
			subjectLower := strings.ToLower(strings.TrimSpace(subject))
			if !strings.HasPrefix(subjectLower, "re:") {
				replySubject = "Re: " + subject
			}
			data["EncodedSubject"] = url.QueryEscape(replySubject)
		}
		if from, ok := headers["From"]; ok {
			data["From"] = from
		}
		if date, ok := headers["Date"]; ok {
			data["Date"] = date
		}
		if msgID, ok := headers["Message-ID"]; ok {
			data["MessageID"] = msgID
			// Ensure Message-ID has proper < > format for References
			properMsgID := msgID
			if !strings.HasPrefix(msgID, "<") {
				properMsgID = "<" + msgID
			}
			if !strings.HasSuffix(properMsgID, ">") {
				properMsgID = properMsgID + ">"
			}
			data["EncodedMessageID"] = url.QueryEscape(properMsgID)
		}
		if newsgroups, ok := headers["Newsgroups"]; ok {
			data["Newsgroups"] = newsgroups
		}
		if references, ok := headers["References"]; ok {
			data["References"] = references
		}
	}
	
	// Prepare quoted content for reply
	if quotedBody != "" && headers != nil {
		if from, ok := headers["From"]; ok {
			if date, ok := headers["Date"]; ok {
				quotedContent := fmt.Sprintf("On %s, %s wrote:\n\n%s", date, from, quotedBody)
				data["EncodedQuotedContent"] = url.QueryEscape(quotedContent)
			}
		}
	}
	
	tmpl.Execute(w, data)
}

func main() {
	log.Printf("📝 Logging initialized - writing to stdout and %s", "/var/log/onion-newsreader/onion-newsreader.log")
	log.Printf("🧅 Onion Newsreader starting...")

	server := NewNewsServer()
	defer server.client.Close()

	log.Printf("🚀 Starting Onion Newsreader HTTP server...")

	http.HandleFunc("/", server.handleHome)
	http.HandleFunc("/health", server.handleHealth)
	http.HandleFunc("/test-onion", server.handleTestOnion)
	http.HandleFunc("/search", server.handleSearch)
	http.HandleFunc("/active", server.handleActive)
	http.HandleFunc("/download-status", server.handleDownloadStatus)
	http.HandleFunc("/group/", server.handleGroup)
	http.HandleFunc("/article/", server.handleArticle)

	log.Printf("✅ HTTP server initialization complete")
	log.Printf("🔄 Starting background NNTP connection routine...")

	go func() {
		for {
			time.Sleep(10 * time.Second)
			log.Printf("🔄 Attempting NNTP connection...")
			if err := server.client.ensureConnected(); err != nil {
				log.Printf("⚠️ NNTP connection failed: %v", err)
				log.Printf("⏰ Retrying NNTP connection in 120 seconds...")
				time.Sleep(2 * time.Minute)
			} else {
				log.Printf("✅ NNTP connection established successfully")
				break
			}
		}
	}()

	log.Printf("🚀 Starting HTTP server on 127.0.0.1:8080")
	log.Printf("📡 Target NNTP: peannyjkqwqfynd24p6dszvtchkq7hfkwymi5by5y332wmosy5dwfaqd.onion:119")
	log.Printf("🔄 Fallback NNTP: news.tcpreset.net:119 (anonymous access)")
	log.Printf("✍️ Posting URL: http://itcxzfm2h36hfj6j7qxksyfm4ipp3co4rkl62sgge7hp6u77lbretiyd.onion:8880/")
	log.Printf("🔒 Stealth mode: true")
	log.Printf("💬 Support contact: info@tcpreset.net")
	log.Printf("🌐 Web interface ready - NNTP connection will be established in background")

	if err := http.ListenAndServe("127.0.0.1:8080", nil); err != nil {
		log.Fatalf("❌ HTTP server failed: %v", err)
	}
}