backpack-viewer 0.7.7 → 0.7.11

package/dist/extensions/share/src/index.js

@@ -1,200 +1,323 @@
-const E = "https://app.backpackontology.com", x = `${E}/.well-known/oauth-authorization-server`, _ = new Uint8Array([66, 80, 65, 75]), S = 1;
+const L = "https://app.backpackontology.com";
+let f = L, T = `${f}/.well-known/oauth-authorization-server`;
+const P = new Uint8Array([66, 80, 65, 75]), R = 1;
 let m = null;
-function I(e) {
-  e.registerTaskbarIcon({
+async function M(t) {
+  const e = await t.settings.get("relay_url");
+  e && (f = e, T = `${f}/.well-known/oauth-authorization-server`), t.registerTaskbarIcon({
     label: "Share",
     iconText: "↗",
     position: "bottom-center",
-    onClick: () => N(e)
+    onClick: () => $(t)
   });
 }
-function N(e) {
+function $(t) {
   if (m && m.isVisible()) {
     m.setVisible(!1);
     return;
   }
-  const t = e.getGraphName();
-  if (!t) return;
-  const n = document.createElement("div");
-  n.className = "share-panel-body", m ? (m.element.replaceChildren(), m.element.appendChild(n), m.setTitle(`Share "${t}"`), m.setVisible(!0), m.bringToFront()) : (n.textContent = "Loading...", m = e.mountPanel(n, {
-    title: `Share "${t}"`,
+  const e = t.getGraphName();
+  if (!e) return;
+  const a = document.createElement("div");
+  a.className = "share-panel-body", m ? (m.element.replaceChildren(), m.element.appendChild(a), m.setTitle(`Share "${e}"`), m.setVisible(!0), m.bringToFront()) : (a.textContent = "Loading...", m = t.mountPanel(a, {
+    title: `Share "${e}"`,
     defaultPosition: { left: Math.max(100, (window.innerWidth - 380) / 2), top: Math.max(80, (window.innerHeight - 400) / 2) },
     persistKey: "share-v2",
     showFullscreenButton: !1,
     onClose: () => {
       m = null;
     }
-  })), w(e, n);
+  })), C(t, a);
+}
+async function C(t, e) {
+  const a = await t.settings.get("relay_token");
+  e.replaceChildren(), a ? D(t, e, a) : I(t, e);
+}
+function I(t, e) {
+  const a = document.createElement("div");
+  a.className = "share-upsell";
+  const n = document.createElement("h4");
+  n.textContent = "Share this graph with anyone", a.appendChild(n);
+  const s = document.createElement("p");
+  s.textContent = "Encrypt your graph and get a shareable link. Recipients open it in their browser — no install needed.", a.appendChild(s);
+  const o = document.createElement("button");
+  o.className = "share-cta-btn", o.textContent = "Sign in to share", o.addEventListener("click", () => Y(t, e)), a.appendChild(o);
+  const r = document.createElement("button");
+  r.className = "share-token-link", r.textContent = "Or paste an API token", r.addEventListener("click", () => B(t, e)), a.appendChild(r);
+  const c = document.createElement("p");
+  c.className = "share-trust", c.textContent = "Free account. Your graph is encrypted before upload — we can’t read it.", a.appendChild(c), e.replaceChildren(a);
+}
+function B(t, e) {
+  const a = document.createElement("div");
+  a.className = "share-token-input";
+  const n = document.createElement("p");
+  n.textContent = "Paste your API token from your account settings:", a.appendChild(n);
+  const s = document.createElement("input");
+  s.type = "password", s.placeholder = "Token", s.className = "share-input", a.appendChild(s);
+  const o = document.createElement("div");
+  o.className = "share-btn-row";
+  const r = document.createElement("button");
+  r.className = "share-btn-primary", r.textContent = "Save", r.addEventListener("click", async () => {
+    const i = s.value.trim();
+    i && (await t.settings.set("relay_token", i), C(t, e));
+  }), o.appendChild(r);
+  const c = document.createElement("button");
+  c.className = "share-btn-secondary", c.textContent = "Back", c.addEventListener("click", () => C(t, e)), o.appendChild(c), a.appendChild(o), e.replaceChildren(a);
+}
+async function O(t) {
+  try {
+    const e = await fetch(`${f}/api/graphs`, {
+      headers: { Authorization: `Bearer ${t}` }
+    });
+    if (e.status === 401) return { graphs: [], error: "unauthorized" };
+    if (!e.ok) return { graphs: [], error: `status ${e.status}` };
+    const a = await e.json();
+    return { graphs: Array.isArray(a) ? a : [] };
+  } catch (e) {
+    return { graphs: [], error: e.message };
+  }
 }
-async function w(e, t) {
-  const n = await e.settings.get("relay_token");
-  t.replaceChildren(), n ? T(e, t, n) : A(e, t);
+async function D(t, e, a) {
+  const n = t.getGraphName(), s = document.createElement("div");
+  s.className = "share-loading", s.textContent = "Checking account…", e.replaceChildren(s);
+  const o = await O(a);
+  if (o.error === "unauthorized") {
+    await t.settings.remove("relay_token"), C(t, e);
+    return;
+  }
+  e.replaceChildren();
+  const r = o.graphs.find((c) => c.name === n);
+  r ? F(t, e, a, r) : V(t, e, a);
+}
+function F(t, e, a, n) {
+  const s = document.createElement("div");
+  s.className = "share-synced";
+  const o = document.createElement("h4");
+  if (o.textContent = "Synced to your account", s.appendChild(o), n.syncedAt) {
+    const d = document.createElement("p");
+    d.className = "share-note", d.textContent = `Last synced: ${new Date(n.syncedAt).toLocaleString()}`, s.appendChild(d);
+  }
+  const r = document.createElement("p");
+  r.className = "share-note", r.textContent = n.encrypted ? "Encrypted — server cannot read your data." : "Public — stored unencrypted.", s.appendChild(r);
+  const c = document.createElement("button");
+  c.className = "share-cta-btn", c.textContent = "Update & Share", c.addEventListener("click", async () => {
+    c.disabled = !0, c.textContent = n.encrypted ? "Encrypting…" : "Syncing…";
+    try {
+      await x(t, e, a, n.encrypted);
+    } catch (d) {
+      c.disabled = !1, c.textContent = "Update & Share", S(s), b(s, d.message);
+    }
+  }), s.appendChild(c);
+  const i = document.createElement("a");
+  i.href = f, i.target = "_blank", i.rel = "noopener", i.className = "share-token-link", i.textContent = "Open dashboard", s.appendChild(i), _(t, e, s);
 }
-function A(e, t) {
+function V(t, e, a) {
   const n = document.createElement("div");
-  n.className = "share-upsell", n.innerHTML = `
-    <h4>Share this graph with anyone</h4>
-    <p>Encrypt your graph and get a shareable link. Recipients open it in their browser — no install needed. Your data stays encrypted on our servers.</p>
-  `;
-  const a = document.createElement("button");
-  a.className = "share-cta-btn", a.textContent = "Sign in to share", a.addEventListener("click", () => v(e, t)), n.appendChild(a);
+  n.className = "share-form";
+  const s = document.createElement("p");
+  s.className = "share-description", s.textContent = "Your graph will be encrypted and synced to your Backpack account. You’ll get a shareable link.", n.appendChild(s);
   const o = document.createElement("button");
-  o.className = "share-token-link", o.textContent = "Or paste an API token", o.addEventListener("click", () => P(e, t)), n.appendChild(o);
+  o.className = "share-cta-btn", o.textContent = "Sync & Share", o.addEventListener("click", async () => {
+    o.disabled = !0, o.textContent = "Encrypting…";
+    try {
+      await x(t, e, a, !0);
+    } catch (c) {
+      o.disabled = !1, o.textContent = "Sync & Share";
+      const i = c.message;
+      if (i.includes("encrypted") && i.includes("limit")) {
+        z(t, e, a);
+        return;
+      }
+      S(n), b(n, i);
+    }
+  }), n.appendChild(o);
+  const r = document.createElement("p");
+  r.className = "share-trust", r.textContent = "Your first encrypted graph is free. Data is encrypted before upload — we can’t read it.", n.appendChild(r), _(t, e, n);
+}
+function z(t, e, a) {
+  const n = document.createElement("div");
+  n.className = "share-quota";
+  const s = document.createElement("h4");
+  s.textContent = "Encrypted limit reached", n.appendChild(s);
+  const o = document.createElement("p");
+  o.className = "share-description", o.textContent = "Your free account includes one encrypted graph, which is already in use.", n.appendChild(o);
+  const r = document.createElement("a");
+  r.href = `${f}/settings`, r.target = "_blank", r.rel = "noopener", r.className = "share-cta-btn share-btn-link", r.textContent = "Upgrade for unlimited encryption", n.appendChild(r);
+  const c = document.createElement("div");
+  c.className = "share-divider", n.appendChild(c);
   const i = document.createElement("p");
-  i.className = "share-trust", i.textContent = "Free account. Your graph is encrypted before upload — we can't read it.", n.appendChild(i), t.replaceChildren(n);
+  i.className = "share-description", i.textContent = "Or share as a public graph:", n.appendChild(i);
+  const d = document.createElement("p");
+  d.className = "share-warning", d.textContent = "Your graph data will be stored unencrypted and visible to the server and anyone with the link.", n.appendChild(d);
+  const l = document.createElement("label");
+  l.className = "share-toggle-row";
+  const u = document.createElement("input");
+  u.type = "checkbox", l.appendChild(u);
+  const p = document.createElement("span");
+  p.textContent = "I understand this graph will not be encrypted", l.appendChild(p), n.appendChild(l);
+  const h = document.createElement("button");
+  h.className = "share-btn-secondary", h.textContent = "Share as public graph", h.disabled = !0, u.addEventListener("change", () => {
+    h.disabled = !u.checked;
+  }), h.addEventListener("click", async () => {
+    h.disabled = !0, h.textContent = "Syncing…";
+    try {
+      await x(t, e, a, !1, "public");
+    } catch (w) {
+      h.disabled = !1, h.textContent = "Share as public graph", S(n), b(n, w.message);
+    }
+  }), n.appendChild(h), _(t, e, n);
 }
-function P(e, t) {
+function _(t, e, a) {
   const n = document.createElement("div");
-  n.className = "share-token-input";
+  n.className = "share-footer";
+  const s = document.createElement("button");
+  s.className = "share-token-link", s.textContent = "Sign out", s.addEventListener("click", async () => {
+    await t.settings.remove("relay_token"), C(t, e);
+  }), n.appendChild(s), a.appendChild(n), e.replaceChildren(a);
+}
+function S(t) {
+  for (const e of t.querySelectorAll(".share-error")) e.remove();
+}
+function b(t, e) {
   const a = document.createElement("p");
-  a.textContent = "Paste your API token from Backpack App settings:", n.appendChild(a);
-  const o = document.createElement("input");
-  o.type = "password", o.placeholder = "Token", o.className = "share-input", n.appendChild(o);
-  const i = document.createElement("div");
-  i.className = "share-btn-row";
-  const d = document.createElement("button");
-  d.className = "share-btn-primary", d.textContent = "Save", d.addEventListener("click", async () => {
-    const c = o.value.trim();
-    c && (await e.settings.set("relay_token", c), w(e, t));
-  }), i.appendChild(d);
-  const l = document.createElement("button");
-  l.className = "share-btn-secondary", l.textContent = "Back", l.addEventListener("click", () => w(e, t)), i.appendChild(l), n.appendChild(i), t.replaceChildren(n);
-}
-async function v(e, t) {
+  a.className = "share-error", a.textContent = e, t.appendChild(a);
+}
+async function Y(t, e) {
   try {
-    const a = await (await fetch(x)).json(), i = await (await fetch(a.registration_endpoint, { method: "POST" })).json(), d = B(), l = await $(d), c = window.location.origin + "/oauth/callback", r = crypto.randomUUID(), s = new URL(a.authorization_endpoint);
-    s.searchParams.set("client_id", i.client_id), s.searchParams.set("redirect_uri", c), s.searchParams.set("response_type", "code"), s.searchParams.set("code_challenge", l), s.searchParams.set("code_challenge_method", "S256"), s.searchParams.set("state", r), s.searchParams.has("scope") || s.searchParams.set("scope", "openid email profile offline_access"), sessionStorage.setItem("share_oauth_state", r);
-    const h = window.open(s.toString(), "backpack-share-auth", "width=500,height=700"), g = async (p) => {
-      var f;
-      if (((f = p.data) == null ? void 0 : f.type) !== "backpack-oauth-callback") return;
-      window.removeEventListener("message", g);
-      const { code: u, returnedState: k } = p.data;
-      if (k !== r) return;
-      const C = await (await fetch(a.token_endpoint, {
-        method: "POST",
-        headers: { "Content-Type": "application/x-www-form-urlencoded" },
-        body: new URLSearchParams({ grant_type: "authorization_code", code: u, redirect_uri: c, client_id: i.client_id, code_verifier: d }).toString()
-      })).json();
-      await e.settings.set("relay_token", C.access_token), w(e, t);
+    const n = await (await fetch(T)).json(), o = await (await fetch(n.registration_endpoint, { method: "POST" })).json(), r = K(), c = await H(r), i = window.location.origin + "/oauth/callback", d = crypto.randomUUID(), l = new URL(n.authorization_endpoint);
+    l.searchParams.set("client_id", o.client_id), l.searchParams.set("redirect_uri", i), l.searchParams.set("response_type", "code"), l.searchParams.set("code_challenge", c), l.searchParams.set("code_challenge_method", "S256"), l.searchParams.set("state", d), l.searchParams.has("scope") || l.searchParams.set("scope", "openid email profile offline_access"), sessionStorage.setItem("share_oauth_state", d), sessionStorage.setItem("share_oauth_token_endpoint", n.token_endpoint), sessionStorage.setItem("share_oauth_client_id", o.client_id), sessionStorage.setItem("share_oauth_code_verifier", r), sessionStorage.setItem("share_oauth_redirect_uri", i);
+    const u = window.open(l.toString(), "backpack-share-auth", "width=500,height=700"), p = async (h) => {
+      var k;
+      if (((k = h.data) == null ? void 0 : k.type) !== "backpack-oauth-callback") return;
+      window.removeEventListener("message", p);
+      const { code: w, returnedState: E } = h.data;
+      if (E === d) {
+        G();
+        try {
+          const g = await (await fetch(n.token_endpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({ grant_type: "authorization_code", code: w, redirect_uri: i, client_id: o.client_id, code_verifier: r }).toString()
+          })).json();
+          if (!g.access_token) {
+            b(e, "Token exchange failed: no access token returned.");
+            return;
+          }
+          await t.settings.set("relay_token", g.access_token), C(t, e);
+        } catch (y) {
+          b(e, `Token exchange failed: ${y.message}`);
+        }
+      }
     };
-    if (window.addEventListener("message", g), !h || h.closed) {
-      const p = document.createElement("p");
-      p.className = "share-error", p.textContent = "Popup blocked. ";
-      const u = document.createElement("a");
-      u.href = s.toString(), u.target = "_blank", u.textContent = "Click here to sign in", p.appendChild(u), t.appendChild(p);
-    }
-  } catch (n) {
-    const a = document.createElement("p");
-    a.className = "share-error", a.textContent = `Auth failed: ${n.message}`, t.appendChild(a);
+    window.addEventListener("message", p), (!u || u.closed) && (window.location.href = l.toString());
+  } catch (a) {
+    b(e, `Auth failed: ${a.message}`);
   }
 }
-function T(e, t, n) {
-  const a = document.createElement("div");
-  a.className = "share-form";
-  const o = document.createElement("label");
-  o.className = "share-toggle-row";
-  const i = document.createElement("input");
-  i.type = "checkbox", i.checked = !0, o.appendChild(i);
-  const d = document.createElement("span");
-  d.textContent = "Encrypt (recommended)", o.appendChild(d), a.appendChild(o);
-  const l = document.createElement("div");
-  l.className = "share-pass-row";
-  const c = document.createElement("input");
-  c.type = "password", c.placeholder = "Passphrase (optional)", c.className = "share-input", l.appendChild(c), a.appendChild(l);
-  const r = document.createElement("button");
-  r.className = "share-btn-primary", r.textContent = "Share", r.addEventListener("click", async () => {
-    r.disabled = !0, r.textContent = "Encrypting...";
+async function x(t, e, a, n, s = "private") {
+  const o = t.getGraph(), r = t.getGraphName();
+  if (!o || !r) throw new Error("No graph loaded");
+  const c = new TextEncoder().encode(JSON.stringify(o));
+  let i, d, l = "";
+  if (n) {
+    const y = await import("../index-B8_hkT8R.js"), g = await y.generateX25519Identity(), U = await y.identityToRecipient(g), N = new y.Encrypter();
+    N.addRecipient(U), i = await N.encrypt(c), d = "age-v1", l = btoa(g).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  } else
+    i = c, d = "plaintext";
+  const u = await j(r, i, d, o), p = `${f}/api/graphs/${encodeURIComponent(r)}/sync${s === "public" ? "?visibility=public" : ""}`, h = await v(a, p, {
+    method: "PUT",
+    headers: { "Content-Type": "application/octet-stream" },
+    body: u
+  });
+  if (!h.ok) {
+    if (h.status === 401)
+      throw await t.settings.remove("relay_token"), C(t, e), new Error("Session expired. Please sign in again.");
+    let y = `Sync failed (${h.status})`;
     try {
-      await L(e, t, n, i.checked, c.value.trim());
-    } catch (g) {
-      r.disabled = !1, r.textContent = "Share";
-      const p = document.createElement("p");
-      p.className = "share-error", p.textContent = g.message, a.appendChild(p);
+      const g = await h.json();
+      g.error && (y = g.error);
+    } catch {
     }
-  }), a.appendChild(r);
-  const s = document.createElement("p");
-  s.className = "share-note", s.textContent = "Recipients open the link in their browser. No install needed.", a.appendChild(s);
-  const h = document.createElement("button");
-  h.className = "share-token-link", h.textContent = "Sign out", h.addEventListener("click", async () => {
-    await e.settings.remove("relay_token"), w(e, t);
-  }), a.appendChild(h), t.replaceChildren(a);
-}
-async function L(e, t, n, a, o) {
-  const i = e.getGraph(), d = e.getGraphName();
-  if (!i || !d) throw new Error("No graph loaded");
-  const l = new TextEncoder().encode(JSON.stringify(i));
-  let c, r, s = "";
-  if (a) {
-    const y = await import("../index-B-LFGJqd.js"), C = await y.generateX25519Identity(), f = await y.identityToRecipient(C), b = new y.Encrypter();
-    b.addRecipient(f), c = await b.encrypt(l), r = "age-v1", s = btoa(C).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-  } else
-    c = l, r = "plaintext";
-  const h = await U(d, c, r), g = {
-    "Content-Type": "application/octet-stream",
-    Authorization: `Bearer ${n}`
-  };
-  o && (g["X-Passphrase"] = o);
-  const p = await fetch(`${E}/v1/share`, {
-    method: "POST",
-    headers: g,
-    body: h
+    throw new Error(y);
+  }
+  const w = await v(a, `${f}/api/graphs/${encodeURIComponent(r)}/share`, {
+    method: "POST"
   });
-  if (!p.ok) {
-    const y = await p.text().catch(() => "");
-    throw p.status === 401 ? (await e.settings.remove("relay_token"), w(e, t), new Error("Session expired. Please sign in again.")) : new Error(`Upload failed: ${y}`);
+  if (!w.ok) {
+    A(e, null, n, void 0);
+    return;
   }
-  const u = await p.json(), k = s ? `${u.url}#k=${s}` : u.url;
-  R(t, k, a, u.expires_at);
-}
-async function U(e, t, n) {
-  const a = new ArrayBuffer(t.byteLength);
-  new Uint8Array(a).set(t);
-  const o = await crypto.subtle.digest("SHA-256", a), i = "sha256:" + Array.from(new Uint8Array(o)).map((h) => h.toString(16).padStart(2, "0")).join(""), d = JSON.stringify({
-    format: n,
+  const E = await w.json(), k = l ? `${E.url}#k=${l}` : E.url;
+  A(e, k, n, E.expires_at);
+}
+async function v(t, e, a = {}) {
+  const n = new Headers(a.headers);
+  return n.set("Authorization", `Bearer ${t}`), fetch(e, { ...a, headers: n });
+}
+async function j(t, e, a, n) {
+  const s = new Uint8Array(e).buffer, o = await crypto.subtle.digest("SHA-256", s), r = "sha256:" + Array.from(new Uint8Array(o)).map((h) => h.toString(16).padStart(2, "0")).join(""), c = /* @__PURE__ */ new Set();
+  for (const h of n.nodes) c.add(h.type);
+  const i = JSON.stringify({
+    format: a,
     created_at: (/* @__PURE__ */ new Date()).toISOString(),
-    backpack_name: e,
+    backpack_name: t,
     graph_count: 1,
-    checksum: i
-  }), l = new TextEncoder().encode(d), c = new ArrayBuffer(4);
-  new DataView(c).setUint32(0, l.length, !1);
-  const r = new Uint8Array(9 + l.length + t.length);
-  let s = 0;
-  return r.set(_, s), s += 4, r[s] = S, s += 1, r.set(new Uint8Array(c), s), s += 4, r.set(l, s), s += l.length, r.set(t, s), r;
-}
-function R(e, t, n, a) {
-  const o = document.createElement("div");
-  o.className = "share-success";
-  const i = document.createElement("h4");
-  i.textContent = "Shared!", o.appendChild(i);
-  const d = document.createElement("div");
-  d.className = "share-link-row";
-  const l = document.createElement("input");
-  l.type = "text", l.readOnly = !0, l.value = t, l.className = "share-link-input", d.appendChild(l);
-  const c = document.createElement("button");
-  if (c.className = "share-btn-primary", c.textContent = "Copy", c.addEventListener("click", () => {
-    navigator.clipboard.writeText(t), c.textContent = "Copied!", setTimeout(() => {
-      c.textContent = "Copy";
-    }, 2e3);
-  }), d.appendChild(c), o.appendChild(d), n) {
-    const r = document.createElement("p");
-    r.className = "share-note", r.textContent = "The decryption key is in the link. Anyone with the full link can view. The server cannot read your data.", o.appendChild(r);
+    checksum: r,
+    node_count: n.nodes.length,
+    edge_count: n.edges.length,
+    node_types: Array.from(c)
+  }), d = new TextEncoder().encode(i), l = new ArrayBuffer(4);
+  new DataView(l).setUint32(0, d.length, !1);
+  const u = new Uint8Array(9 + d.length + e.length);
+  let p = 0;
+  return u.set(P, p), p += 4, u[p] = R, p += 1, u.set(new Uint8Array(l), p), p += 4, u.set(d, p), p += d.length, u.set(e, p), u;
+}
+function A(t, e, a, n) {
+  const s = document.createElement("div");
+  s.className = "share-success";
+  const o = document.createElement("h4");
+  if (o.textContent = e ? "Synced & shared!" : "Synced!", s.appendChild(o), e) {
+    const r = document.createElement("div");
+    r.className = "share-link-row";
+    const c = document.createElement("input");
+    c.type = "text", c.readOnly = !0, c.value = e, c.className = "share-link-input", r.appendChild(c);
+    const i = document.createElement("button");
+    i.className = "share-btn-primary", i.textContent = "Copy", i.addEventListener("click", () => {
+      navigator.clipboard.writeText(e).then(() => {
+        i.textContent = "Copied!", setTimeout(() => {
+          i.textContent = "Copy";
+        }, 2e3);
+      }).catch(() => {
+        i.textContent = "Failed", setTimeout(() => {
+          i.textContent = "Copy";
+        }, 2e3);
+      });
+    }), r.appendChild(i), s.appendChild(r);
   }
   if (a) {
     const r = document.createElement("p");
-    r.className = "share-note", r.textContent = `Expires: ${new Date(a).toLocaleDateString()}`, o.appendChild(r);
+    r.className = "share-note", r.textContent = "The decryption key is embedded in the link. Share the complete link — if the #k= part is removed, recipients won’t be able to decrypt. The server cannot read your data.", s.appendChild(r);
+  } else {
+    const r = document.createElement("p");
+    r.className = "share-note", r.textContent = "This graph is stored unencrypted. Anyone with the link can view it.", s.appendChild(r);
   }
-  e.replaceChildren(o);
+  if (n) {
+    const r = document.createElement("p");
+    r.className = "share-note", r.textContent = `Expires: ${new Date(n).toLocaleDateString()}`, s.appendChild(r);
+  }
+  t.replaceChildren(s);
+}
+function G() {
+  sessionStorage.removeItem("share_oauth_state"), sessionStorage.removeItem("share_oauth_token_endpoint"), sessionStorage.removeItem("share_oauth_client_id"), sessionStorage.removeItem("share_oauth_code_verifier"), sessionStorage.removeItem("share_oauth_redirect_uri");
 }
-function B() {
-  const e = new Uint8Array(32);
-  return crypto.getRandomValues(e), btoa(String.fromCharCode(...e)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+function K() {
+  const t = new Uint8Array(32);
+  return crypto.getRandomValues(t), btoa(String.fromCharCode(...t)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
-async function $(e) {
-  const t = new TextEncoder().encode(e), n = new ArrayBuffer(t.byteLength);
-  new Uint8Array(n).set(t);
-  const a = await crypto.subtle.digest("SHA-256", n);
-  return btoa(String.fromCharCode(...new Uint8Array(a))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+async function H(t) {
+  const e = new TextEncoder().encode(t), a = new Uint8Array(e).buffer, n = await crypto.subtle.digest("SHA-256", a);
+  return btoa(String.fromCharCode(...new Uint8Array(n))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 export {
-  I as activate
+  M as activate
 };

package/dist/extensions/share/style.css

@@ -5,12 +5,16 @@
   min-width: 300px;
 }
 
-.share-upsell h4 {
+.share-upsell h4,
+.share-synced h4,
+.share-quota h4,
+.share-success h4 {
   margin: 0 0 8px;
   font-size: 15px;
 }
 
-.share-upsell p {
+.share-upsell p,
+.share-description {
   margin: 0 0 12px;
   color: var(--text-muted);
   line-height: 1.5;
@@ -28,12 +32,20 @@
   font-weight: 600;
   cursor: pointer;
   margin-bottom: 8px;
+  text-align: center;
+  text-decoration: none;
+  box-sizing: border-box;
 }
 
 .share-cta-btn:hover {
   opacity: 0.9;
 }
 
+.share-cta-btn:disabled {
+  opacity: 0.5;
+  cursor: default;
+}
+
 .share-token-link {
   background: none;
   border: none;
@@ -68,6 +80,10 @@
   margin-top: 8px;
 }
 
+.share-btn-row-stack {
+  flex-direction: column;
+}
+
 .share-btn-primary {
   padding: 8px 16px;
   background: var(--accent);
@@ -91,6 +107,18 @@
   border-radius: 4px;
   font-size: 13px;
   cursor: pointer;
+  text-align: center;
+  text-decoration: none;
+}
+
+.share-btn-secondary:disabled {
+  opacity: 0.5;
+  cursor: default;
+}
+
+.share-btn-link {
+  display: block;
+  text-decoration: none;
 }
 
 .share-toggle-row {
@@ -101,10 +129,6 @@
   cursor: pointer;
 }
 
-.share-pass-row {
-  margin-bottom: 12px;
-}
-
 .share-form {
   display: flex;
   flex-direction: column;
@@ -123,8 +147,14 @@
   margin-top: 8px;
 }
 
+.share-warning {
+  color: var(--warning, #d69e2e);
+  font-size: 12px;
+  margin: 0 0 8px;
+  line-height: 1.4;
+}
+
 .share-success h4 {
-  margin: 0 0 12px;
   color: var(--text);
 }
 
@@ -149,3 +179,25 @@
   margin: 0 0 8px;
   color: var(--text-muted);
 }
+
+.share-loading {
+  color: var(--text-muted);
+  font-size: 13px;
+  padding: 8px 0;
+}
+
+.share-footer {
+  margin-top: 16px;
+  padding-top: 8px;
+  border-top: 1px solid var(--border);
+}
+
+.share-divider {
+  height: 1px;
+  background: var(--border);
+  margin: 16px 0;
+}
+
+.share-hidden {
+  display: none;
+}