diff --git a/.dockerignore b/.dockerignore
index 49b5caab..16024d5d 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -14,3 +14,21 @@ Dockerfile
# Exclude large demo assets not needed at runtime
assets/live-peview.gif
assets/*.gif
+
+# Never include connector secrets/configuration in build contexts
+self-hosted/private/
+
+**/node_modules/
+self-hosted/connector/test/
+
+self-hosted/dist/
+
+# Local deployment secrets
+.env
+**/.env
+
+# Never commit or bake connector profile/credential state into images
+**/profiles.sqlite*
+**/credential.key
+**/credentials.enc
+**/cloud-state/
diff --git a/.github/workflows/desktop-build.yml b/.github/workflows/desktop-build.yml
index 9700ad63..52d4998e 100644
--- a/.github/workflows/desktop-build.yml
+++ b/.github/workflows/desktop-build.yml
@@ -33,6 +33,8 @@ jobs:
cache: npm
- run: npm ci
- run: npm ci --prefix desktop-app
+ - name: Prepare Neutralino SDK for unit tests
+ run: node desktop-app/setup-binaries.js
- run: npm run build && npm run test:unit
- run: python3 tests/native/test_macos_load_commands.py
- uses: actions/cache@v4
diff --git a/.github/workflows/desktop-native-demo.yml b/.github/workflows/desktop-native-demo.yml
index 840a3880..6dcaf60d 100644
--- a/.github/workflows/desktop-native-demo.yml
+++ b/.github/workflows/desktop-native-demo.yml
@@ -41,6 +41,8 @@ jobs:
- run: npm ci
- run: npm ci --prefix desktop-app
- run: npm run build
+ - name: Prepare desktop dependencies
+ run: npm --prefix desktop-app run setup
- run: npm run test:unit
- run: node assets/i18n/audit-ui-locales.mjs
- name: Checkout pinned single-instance runtime
@@ -59,8 +61,6 @@ jobs:
cmake -S desktop-app/.native-runtime -B desktop-app/.native-runtime/build -G Ninja -DCMAKE_BUILD_TYPE=Release
if ($LASTEXITCODE -ne 0) { exit $LASTEXITCODE }
cmake --build desktop-app/.native-runtime/build --parallel 4
- - name: Prepare desktop dependencies
- run: npm --prefix desktop-app run setup
- name: Package isolated native demo
run: node desktop-app/build-native-demo.js
- name: Validate native rename with real Windows files
diff --git a/.gitignore b/.gitignore
index fc21f7c8..d1dc7cc2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -17,3 +17,22 @@ __pycache__/
# OS files
.DS_Store
Thumbs.db
+
+# Self-hosted connector credentials and local configuration
+self-hosted/private/
+
+# Local Docker transfer bundles
+self-hosted/dist/
+
+# Local deployment secrets
+.env
+**/.env
+
+# Isolated browser verification output
+test-results-copy-*/
+
+# Never commit or bake connector profile/credential state into images
+**/profiles.sqlite*
+**/credential.key
+**/credentials.enc
+**/cloud-state/
diff --git a/README.md b/README.md
index 5e4a3b16..340f6014 100644
--- a/README.md
+++ b/README.md
@@ -200,3 +200,7 @@ See the [contributing guide](CONTRIBUTING.md), [Code of Conduct](CODE_OF_CONDUCT
## License
Markdown Viewer is licensed under the [Apache License 2.0](LICENSE).
+
+## Experimental cloud connections
+
+This branch adds Nextcloud and generic WebDAV folder access for Windows desktop and optional personal or multi-user self-hosted web deployments. See the [cloud guide](docs/cloud-connections.md) for behavior, build/deployment instructions and security limits. The connector provides profile isolation, not operator-blind/E2EE hosting; review the deployment limits before Internet exposure.
diff --git a/cloud-copy.js b/cloud-copy.js
new file mode 100644
index 00000000..1cac3f40
--- /dev/null
+++ b/cloud-copy.js
@@ -0,0 +1,127 @@
+// Shared copy workflow: snapshot locally, create exclusively, never replay uncertain writes.
+(function(target){
+ 'use strict';
+ const model=target.MarkdownCloudModel;
+ const LIMITS=Object.freeze({files:500,folders:200,depth:20,totalBytes:50*1024*1024});
+ function segment(value){
+ if(typeof value!=='string' || !value || value!==value.trim() || /[\\/\u0000-\u001f\u007f:*?"<>|%]/.test(value) || /[. ]$/.test(value) || /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(value) || new TextEncoder().encode(value).length>200)throw new Error('Choose a portable name without path separators or reserved characters.');
+ return value;
+ }
+ // Propose a portable destination from a local display name, never from a remote URL.
+ // Manual destination input still passes the strict validator without substitution.
+ function suggestName(value,{file=false}={}){
+ let stem=String(value || '').trim();if(file)stem=stem.replace(/\.(md|markdown)$/i,'');
+ stem=stem.replace(/[\\/\u0000-\u001f\u007f:*?"<>|%]/g,'_').replace(/[. ]+$/,'');
+ if(!stem || stem==='.' || stem==='..')stem=file?'Untitled':'Folder';
+ if(/^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(stem))stem='_'+stem;
+ const characters=Array.from(stem),extension=file?'.md':'';
+ while(new TextEncoder().encode(characters.join('')+extension).length>160)characters.pop();
+ stem=characters.join('').replace(/[. ]+$/,'') || (file?'Untitled':'Folder');
+ return file?model.markdownName(stem+extension):segment(stem);
+ }
+ const key=parts=>parts.map(p=>p.normalize('NFC').toLowerCase()).join('/');
+ function validatePlan(input){
+ if(!input || !Array.isArray(input.files) || !Array.isArray(input.folders) || input.files.length>LIMITS.files || input.folders.length>LIMITS.folders)throw new Error('Copy a smaller folder (up to 500 files and 200 folders).');
+ const occupied=new Set(),directories=new Set(['']);let total=0;
+ const path=parts=>{if(!Array.isArray(parts) || !parts.length || parts.length>LIMITS.depth)throw new Error('Invalid or overly deep copy hierarchy.');return parts.map(segment);};
+ const folders=input.folders.map(path).sort((a,b)=>a.length-b.length);
+ for(const parts of folders){const name=key(parts);if(occupied.has(name) || !directories.has(key(parts.slice(0,-1))))throw new Error('Duplicate or missing parent folder.');occupied.add(name);directories.add(name);}
+ const files=input.files.map(file=>{
+ const parts=path(file.path),name=key(parts);
+ if(!/\.md$/.test(parts.at(-1)) || occupied.has(name) || !directories.has(key(parts.slice(0,-1))))throw new Error('Duplicate, non-Markdown or invalid copy destination.');occupied.add(name);
+ if(typeof file.content!=='string')throw new Error('A source draft could not be loaded. Nothing was copied.');
+ const bytes=new TextEncoder().encode(file.content).length;total+=bytes;
+ if(bytes>model.MAX_BYTES || total>LIMITS.totalBytes)throw new Error('Copy exceeds the 20 MiB file or 50 MiB total limit.');
+ return {path:parts,content:file.content};
+ });
+ if(!input.folder && (files.length!==1 || folders.length))throw new Error('Invalid file copy.');
+ return {folder:!!input.folder,files,folders,totalBytes:total};
+ }
+ async function execute({plan,client,parent,name,api,isConnected,cancelled=()=>false,progress=()=>{},saves}){
+ plan=validatePlan(plan);name=plan.folder?segment(name):model.markdownName(name);
+ const requireLive=()=>{api.assertCopyAllowed?.();if(cancelled())throw new Error('Copy stopped. Completed files remain on the server; remaining drafts were kept.');if(!isConnected(client))throw new Error('The account disconnected. Check the server before retrying; all local drafts were kept.');};
+ const root=plan.folder?client.folderRef(client.childRef(parent,name)):parent;
+ const ref=(parts,folder=false)=>{let result=root;for(const part of parts)result=client.childRef(client.folderRef(result),part);return folder?client.folderRef(result):result;};
+ const items=plan.files.map(file=>({file,href:plan.folder?ref(file.path):client.childRef(parent,name)}));
+ // Validate every destination and check local ownership before any draft or network mutation.
+ for(const item of items){client.validateFile(item.href);if(api.findRemote(client.source(item.href)))throw new Error('A local cloud draft already exists at the destination. Choose another name.');}
+ const directories=plan.folder?[root,...plan.folders.map(parts=>ref(parts,true))]:[];
+ directories.forEach(href=>client.validateRef(href));
+ let completed=0,createdFolders=0,attempted=false;const drafts=[];
+ try{
+ requireLive();
+ for(const item of items){
+ requireLive();
+ const digest=await model.digest(item.file.content);
+ const source=client.source(item.href,'',{savedDigest:'',attemptDigest:digest,status:'uncertain',creationPending:true});
+ item.source=source;item.id=await api.createRemoteDraft(item.file.content,client.fileName(item.href),source,{activate:false});drafts.push(item);saves.add(item.id);
+ }
+ // All recovery bodies are durable before the first MKCOL/PUT.
+ requireLive();
+ for(const folder of directories){requireLive();attempted=true;await client.createFolder(folder);createdFolders++;progress({completed,total:items.length,createdFolders});}
+ for(const item of items){
+ requireLive();attempted=true;
+ try{const remote=await client.create(item.href,item.file.content);await api.updateRemote(item.id,{...item.source,version:remote.version,savedDigest:item.source.attemptDigest,attemptDigest:undefined,creationPending:undefined,status:'saved',availability:'available'});}
+ catch(error){if(error.code==='CONFLICT')await api.detachRemote(item.id,item.source);throw error;}
+ completed++;progress({completed,total:items.length,createdFolders});
+ }
+ return {completed,createdFolders,root,firstId:items[0]?.id};
+ }catch(error){
+ // A refused new root grants no authority over an existing directory's contents.
+ if(!attempted || (plan.folder && createdFolders===0 && error.code==='CONFLICT'))for(const item of drafts)await api.detachRemote(item.id,item.source).catch(()=>{});
+ throw Object.assign(new Error(completed+' of '+items.length+' files copied; '+createdFolders+' folders created. '+error.message+' No automatic retry or cleanup was performed.'),{code:error.code,completed,createdFolders});
+ }finally{for(const item of drafts)saves.delete(item.id);api.statusChanged();}
+ }
+ function create(context){
+ const {api,saves}=context;let dialog,busy=false;
+ async function open(descriptor){
+ if(dialog || busy)throw new Error('Finish the current cloud copy first.');
+ const description=api.describeCopySource(descriptor),clients=context.clients().filter(client=>client.capabilities.create);
+ if(!clients.length){api.notify('Connect a cloud account, then choose Copy to cloud again.');context.connect();return;}
+ const modal=document.createElement('div');dialog=modal;modal.className='reset-modal-overlay modal-overlay';modal.id='cloud-copy-modal';modal.style.display='none';
+ modal.setAttribute('role','dialog');modal.setAttribute('aria-modal','true');modal.setAttribute('aria-hidden','true');modal.setAttribute('aria-labelledby','cloud-copy-title');
+ modal.innerHTML='
Copy to cloud
Copies the current workspace drafts, including unsaved edits. Originals stay unchanged. Linked folders are not rescanned; only their currently linked files are included. A folder copy creates a new folder and never merges into an existing one. Copies use .md; unsupported name characters become underscores and duplicate names receive a numbered suffix.
';
+ document.body.append(modal);
+ const select=modal.querySelector('select'),input=modal.querySelector('input'),list=modal.querySelector('.cloud-copy-folders'),status=modal.querySelector('.cloud-copy-status'),up=modal.querySelector('.cloud-copy-up'),confirm=modal.querySelector('.reset-modal-confirm'),cancel=modal.querySelector('.reset-modal-cancel');
+ modal.querySelector('.cloud-copy-source').textContent=description.label+' \u00b7 '+description.count+' Markdown file(s)';input.value=description.name;
+ clients.forEach((client,index)=>{const option=document.createElement('option');option.value=String(index);option.textContent=client.account.label+' \u00b7 '+client.account.detail+' \u00b7 '+decodeURIComponent(new URL(client.root).pathname);select.append(option);});
+ let client=clients[0],folder=client.root,epoch=0,stop=false,finished=false,result;
+ modal._confirmationCancel=()=>{stop=true;if(!busy){epoch++;modal.remove();dialog=undefined;}};
+ const close=()=>{if(busy){stop=true;status.textContent='Stopping after the current operation settles\u2026';return;}epoch++;api.closeDialog(modal);modal.remove();dialog=undefined;};
+ const live=()=>context.clients().includes(client);
+ async function browse(href){
+ const ticket=++epoch;const chosen=client;folder=chosen.folderRef(href);list.replaceChildren();confirm.disabled=true;up.disabled=true;status.textContent='Loading folders\u2026';
+ modal.querySelector('.cloud-copy-path').textContent=chosen.locationLabel(folder);
+ try{const entries=await chosen.list(folder);if(ticket!==epoch || dialog!==modal)return;if(!live())throw new Error('Reconnect the selected account.');
+ for(const entry of entries.filter(item=>item.directory)){const button=document.createElement('button');button.type='button';button.className='nextcloud-entry is-folder';const icon=document.createElement('i');icon.className='lucide lucide-folder';icon.setAttribute('aria-hidden','true');const label=document.createElement('span');label.textContent=entry.name;button.append(icon,label);button.addEventListener('click',()=>void browse(entry.ref));list.append(button);}
+ status.textContent='New files are created only if their names are free.';confirm.disabled=false;up.disabled=folder===chosen.root;
+ }catch(error){if(ticket===epoch)status.textContent=error.message;}
+ }
+ select.addEventListener('change',()=>{client=clients[Number(select.value)];void browse(client.root);});up.addEventListener('click',()=>void browse(client.upRef(folder)));
+ cancel.addEventListener('click',close);modal.querySelector('.modal-close-btn').addEventListener('click',close);
+ confirm.addEventListener('click',async()=>{
+ if(finished){try{if(result?.firstId && !description.folder)await api.activateRemote(client.source(planFileRef()));close();}catch(error){status.textContent=error.message;}return;}
+ if(busy || confirm.disabled)return;
+ let locked=false;
+ try{
+ const name=description.folder?segment(input.value):model.markdownName(input.value);
+ if(!live())throw new Error('Reconnect the selected account.');
+ busy=true;confirm.disabled=true;select.disabled=input.disabled=up.disabled=true;list.querySelectorAll('button').forEach(b=>b.disabled=true);cancel.textContent='Stop after current operation';cancel.focus();
+ api.beginSave();locked=true;
+ const plan=await api.captureCopySource(descriptor,description.signature);
+ result=await execute({plan,client,parent:folder,name,api,saves,isConnected:c=>context.clients().includes(c),cancelled:()=>stop,progress:p=>{status.textContent=p.completed+' of '+p.total+' files copied \u00b7 '+p.createdFolders+' folders created';}});
+ status.textContent='Copy complete. '+result.completed+' files copied. Originals remain unchanged.';api.notify(status.textContent);
+ finished=true;confirm.textContent=description.folder?'Done':'Open copy';confirm.disabled=false;
+
+ }catch(error){status.textContent=error.message;api.notify(error.message,true);finished=true;confirm.textContent='Done';confirm.disabled=false;result=undefined;}
+ finally{if(locked)api.endSave();busy=false;cancel.textContent='Close';api.statusChanged();context.refresh();if(modal.getAttribute('aria-hidden')==='true'){epoch++;modal.remove();dialog=undefined;}}
+ });
+ function planFileRef(){return client.childRef(folder,model.markdownName(input.value));}
+ // Closing via Escape/backdrop also stops future writes, but never abandons a live request.
+ api.openDialog(modal,select,close);
+ await browse(folder);
+ }
+ return {open};
+ }
+ target.MarkdownCloudCopy=Object.freeze({LIMITS,segment,suggestName,validatePlan,execute,create});
+})(globalThis);
diff --git a/cloud-model.js b/cloud-model.js
new file mode 100644
index 00000000..a887bac3
--- /dev/null
+++ b/cloud-model.js
@@ -0,0 +1,21 @@
+(function(target) {
+ 'use strict';
+ async function digest(content) {
+ const hash=await crypto.subtle.digest('SHA-256',new TextEncoder().encode(content));
+ return Array.from(new Uint8Array(hash),byte=>byte.toString(16).padStart(2,'0')).join('');
+ }
+ function equal(a,b) {
+ if(a===b)return true;
+ if(!a || !b || typeof a!=='object' || typeof b!=='object' || Array.isArray(a)!==Array.isArray(b))return false;
+ const keys=Object.keys(a);return keys.length===Object.keys(b).length && keys.every(key=>Object.prototype.hasOwnProperty.call(b,key) && equal(a[key],b[key]));
+ }
+ function markdownName(value) {
+ let name=String(value).trim();
+ if(!name || /[\\/\u0000-\u001f\u007f:*?"<>|]/.test(name) || name==='.' || name==='..')throw new Error('Enter a valid Markdown filename without path separators.');
+ if(/\.[^.]+$/.test(name) && !/\.md$/i.test(name))throw new Error('Only .md files can be created.');
+ name=/\.md$/i.test(name)?name.slice(0,-3)+'.md':name+'.md';
+ if(!name.slice(0,-3).trim() || /[. ]$/.test(name.slice(0,-3)) || /^(con|prn|aux|nul|com[1-9]|lpt[1-9])\.md$/i.test(name) || new TextEncoder().encode(name).byteLength>200)throw new Error('Choose a shorter, portable Markdown filename.');
+ return name;
+ }
+ target.MarkdownCloudModel=Object.freeze({MAX_BYTES:20*1024*1024,digest,equal,markdownName,isAccountId:id=>typeof id==='string' && /^[a-zA-Z0-9._-]{1,128}$/.test(id)});
+})(globalThis);
diff --git a/cloud-operations.js b/cloud-operations.js
new file mode 100644
index 00000000..54739fb7
--- /dev/null
+++ b/cloud-operations.js
@@ -0,0 +1,237 @@
+// Shared durable cloud workflows. File references and version tokens belong to the provider.
+(function(target) {
+ 'use strict';
+ target.MarkdownCloudOperations=Object.freeze({create(context) {
+ const {api,sessions,saves,uploading,reviewedVersions,sessionKey,clientFor,accountState,saveWorkspace,browse,message,refresh}=context;
+ const model=target.MarkdownCloudModel;
+ const providerLabel=client=>target.MarkdownCloudProviders.get(client.providerId).label;
+ function requireCapability(client,name){if(!client.capabilities[name])throw new Error('This cloud connection does not support this action. Your draft was kept.');}
+ async function newFile(client, folder) {
+ if (!client || sessions.get(sessionKey(client)) !== client || !context.workspace.enabled) throw new Error('Connect to this cloud account first.');
+ requireCapability(client,'create');
+ folder=client.folderRef(folder);
+ const name=await api.requestName({title:'New Markdown file',description:'Create in '+client.account.label+' · '+client.account.userLabel+' · '+client.locationLabel(folder),label:'Filename',value:'Untitled.md',confirmText:'Create',validate:value=>{try { model.markdownName(value);return ''; }catch(error){return error.message;}}});
+ if (name===null) return;
+ const filename=model.markdownName(name);
+ const href=client.childRef(folder,filename);
+ if (sessions.get(sessionKey(client)) !== client || !context.workspace.enabled) throw new Error('The account disconnected. Nothing was created.');
+ if (api.findRemote(client.source(href))) throw new Error('A local document already exists for this path. Open it or choose another name; nothing was overwritten.');
+ let locked=false, tabId, source;
+ try {
+ api.beginSave();locked=true;
+ source=client.source(href,'',{savedDigest:'',attemptDigest:await model.digest(''),status:'uncertain',creationPending:true});
+ tabId=await api.createRemoteDraft('',filename,source);
+ saves.add(tabId);
+ const remote=await client.create(href,'');
+ await api.updateRemote(tabId,{...source,version:remote.version,savedDigest:source.attemptDigest,attemptDigest:undefined,creationPending:undefined,status:'saved',availability:'available'});
+ if (context.activeClient===client) await browse(folder,client);
+ message('Created '+filename+' on '+providerLabel(client)+'.');
+ } catch(error) {
+ if (tabId && error.code==='CONFLICT') await api.detachRemote(tabId,source);
+ throw error;
+ } finally { if(tabId)saves.delete(tabId);if(locked)api.endSave();refresh();api.statusChanged(); }
+ }
+ async function newForDocument(tabId) {
+ const tab=await api.snapshot(tabId);
+ if (!tab?.remoteSource) return;
+ const source=tab.remoteSource;
+ await newFile(clientFor(source),clientFor(source).parentRef(source.fileRef));
+ }
+ async function deleteRemote(client,href,name,tabId) {
+ if (!client || sessions.get(sessionKey(client)) !== client) throw new Error('Connect to this cloud account first.');
+ requireCapability(client,'delete');
+ client.validateFile(href);
+ let locked=false, ownsSave=false, approved, intent;
+ try {
+ api.beginSave();locked=true;
+ tabId=tabId || api.findRemote(client.source(href));
+ const before=tabId ? await api.snapshot(tabId) : null;
+ if(before?.remoteSource && ['uncertain','conflict'].includes(before.remoteSource.status)) throw new Error('Check and resolve the server version before deleting. Your draft was kept.');
+ const remote=await client.read(href);
+ const version=await client.readVersion(href);
+ if (!client.isVersion(version) || !model.equal(version,remote.version) || (before?.remoteSource && !model.equal(before.remoteSource.version,version))) throw new Error('The server version changed or cannot be verified. Refresh and review it before deleting.');
+ const accepted=await api.confirm('Delete “'+name+'” from '+client.account.label+' ('+client.account.userLabel+')? The server file will be removed. A local recovery copy will be kept.',{title:'Delete from cloud?',confirmLabel:'Delete from cloud',cancelLabel:'Keep file',destructive:true,focusCancel:true,dedupeKey:'cloud-delete:'+href});
+ if (!accepted) {message('Deletion cancelled. Nothing was deleted.');return;}
+ if(sessions.get(sessionKey(client))!==client || !context.workspace.enabled) throw new Error('The account disconnected. Nothing was deleted.');
+ if(before) {
+ const latest=await api.snapshot(tabId);
+ if(!latest || latest.content!==before.content || JSON.stringify(latest.remoteSource)!==JSON.stringify(before.remoteSource)) throw new Error('The draft changed while confirmation was open. Nothing was deleted.');
+ approved=latest;
+ } else {
+ const source=client.source(href,version,{savedDigest:await model.digest(remote.content),status:'saved'});
+ tabId=await api.createRemoteDraft(remote.content,name,source);approved=await api.snapshot(tabId);
+ }
+ saves.add(tabId); ownsSave=true;
+ intent={...approved.remoteSource,status:'uncertain',deletePending:true};
+ await api.updateRemote(tabId,intent); // Exact durable draft/intent precedes DELETE.
+ try { await client.remove(href,version); }
+ catch(error) {
+ if(error.code==='CONFLICT') await api.updateRemote(tabId,{...approved.remoteSource,status:'conflict',deletePending:undefined});
+ throw error;
+ }
+ await api.detachRemote(tabId,intent);
+ reviewedVersions.delete(tabId);
+ if(context.activeClient===client && context.currentFolder) await browse(context.currentFolder,client);
+ message('Deleted from '+providerLabel(client)+'. Your local recovery copy was kept.');
+ } finally { if(ownsSave)saves.delete(tabId);if(locked)api.endSave();refresh();api.statusChanged(); }
+ }
+ async function remove(tabId) {
+ const tab=await api.snapshot(tabId);
+ if(!tab?.remoteSource)return;
+ const source=tab.remoteSource;
+ await deleteRemote(clientFor(source),source.fileRef,tab.title,tab.id);
+ }
+ async function save(tabId) {
+ if (saves.has(tabId)) return;
+ saves.add(tabId);
+ let tab;
+ let locked = false;
+ try {
+ api.beginSave();
+ locked = true;
+ tab = await api.snapshot(tabId);
+ if (!tab?.remoteSource) return;
+ let source = tab.remoteSource;
+ const client = clientFor(source);
+ requireCapability(client,'conditionalSave');
+ if (source.status === 'uncertain' || source.status === 'conflict') throw new Error('Check the server version before saving again. Your draft was kept.');
+ if(client.readOnlyReason?.(source))throw new Error(client.readOnlyReason(source));
+ const preference=accountState(await client.accountId());
+ let skipFuture=false;
+ const accepted = preference.skipSaveConfirmation === true || await api.confirm('Upload “' + tab.title + '” to ' + client.account.label + ' (' + client.account.userLabel + ')? This updates the cloud file only if its server version has not changed. Your local recovery draft is kept.', {
+ title:'Save to cloud?', confirmLabel:'Upload changes', cancelLabel:'Keep local draft', focusCancel:true, dedupeKey:'cloud-save:' + tab.id,
+ checkbox:{label: "Don't show again for this account",onChange:checked => { skipFuture=checked; }}
+ });
+ if (!accepted) { message('Upload cancelled. Your local draft was kept.'); return; }
+ if (skipFuture) { preference.skipSaveConfirmation=true; await saveWorkspace(); }
+ const approved = await api.snapshot(tabId);
+ if (!approved || approved.content !== tab.content || JSON.stringify(approved.remoteSource) !== JSON.stringify(tab.remoteSource)) throw new Error('The draft changed while confirmation was open. Nothing was uploaded. Save again to review the latest draft.');
+ if (!client.isVersion(source.version)) {
+ message('Checking the original file version…');
+ const original = await client.read(source.fileRef);
+ if (!client.isVersion(original.version)) throw new Error('The cloud server did not provide a usable file version. Your draft is safe locally; saving to the server is unavailable.');
+ if (await model.digest(original.content) !== source.savedDigest) {
+ await api.updateRemote(tabId, { ...source, status: 'conflict' });
+ throw new Error('The server file changed. Your draft was kept. Check the server version to compare them.');
+ }
+ source = { ...source, version: original.version };
+ await api.updateRemote(tabId, source);
+ }
+ if (new TextEncoder().encode(tab.content).byteLength > model.MAX_BYTES) throw new Error('The document exceeds the 20 MiB limit. Your draft was kept.');
+ const attemptDigest = await model.digest(tab.content);
+ // Persist the attempt before issuing PUT: a crash during upload must not enable blind retries.
+ await api.updateRemote(tabId, { ...source, status: 'uncertain', attemptDigest });
+ uploading.add(tabId); message('Saving to cloud…'); api.statusChanged();
+ let saved;
+ try { saved = await client.save(source.fileRef, source.version, tab.content); }
+ catch (error) {
+ await api.updateRemote(tabId, { ...source, attemptDigest, status: error.code === 'CONFLICT' ? 'conflict' : 'uncertain' });
+ throw error;
+ }
+ const finalState = await api.updateRemote(tabId, { ...source, version: saved.version, savedDigest: attemptDigest, creationPending:undefined, deletePending:undefined, status: 'saved', availability:'available' });
+ message(finalState === 'draft' ? 'Saved to '+providerLabel(client)+'; newer edits remain in your draft.' : 'Saved to '+providerLabel(client)+'.');
+ } catch (error) {
+ message(error.message, 'error');
+ if (context.isHidden()) api.notify(error.message, true);
+ } finally { uploading.delete(tabId); saves.delete(tabId); if (locked) api.endSave(); refresh(); api.statusChanged(); }
+ }
+ async function checkActive(tabId) {
+ const tab = await api.snapshot(tabId);
+ if (!tab?.remoteSource) { message('Select a cloud document first.'); return; }
+ if (saves.has(tab.id)) { message('Wait for the current Save to finish.'); return; }
+ saves.add(tab.id);
+ let locked = false;
+ try {
+ api.beginSave(); locked = true;
+ const source = tab.remoteSource;
+ let remote;
+ try { remote = await clientFor(source).read(source.fileRef); }
+ catch(error) {
+ if(source.deletePending && error.httpStatus===404) {
+ await api.detachRemote(tab.id,source);reviewedVersions.delete(tab.id);
+ message('Server deletion confirmed. Your local recovery copy was kept.');return;
+ }
+ throw error;
+ }
+ if(source.deletePending) {
+ reviewedVersions.set(tab.id,{href:source.fileRef,version:remote.version,digest:await model.digest(remote.content)});
+ await api.openComparison(remote.content,tab.title+' (cloud version)');
+ message('The file is still on the server. Deletion was not retried; review it before resolving this draft.');return;
+ }
+ const remoteDigest = await model.digest(remote.content);
+ if (source.status === 'uncertain' && remoteDigest === source.savedDigest && remoteDigest !== source.attemptDigest) {
+ reviewedVersions.set(tab.id, { href:source.fileRef, version:remote.version, digest:remoteDigest });
+ await api.openComparison(remote.content, tab.title + ' (cloud version)');
+ message('The previous upload is still unconfirmed. Review the server copy before choosing Resolve using my draft; nothing was retried.');
+ } else if (remoteDigest === source.savedDigest || remoteDigest === source.attemptDigest) {
+ await api.updateRemote(tab.id, { ...source, version: remote.version, savedDigest: remoteDigest, status: 'saved', attemptDigest: undefined, creationPending:undefined, availability:'available' });
+ message('Server version checked. Your current draft was kept.');
+ } else {
+ await api.updateRemote(tab.id, { ...source, status: 'conflict', availability:'available' });
+ await api.openComparison(remote.content, tab.title + ' (cloud version)');
+ reviewedVersions.set(tab.id, { href: source.fileRef, version: remote.version, digest: remoteDigest });
+ message('Server file changed. Its version opened as a separate local document; your draft was kept.');
+ }
+ } catch (error) { await markReadFailure(tab.id,error); throw error; }
+ finally { saves.delete(tab.id); if (locked) api.endSave(); refresh(); }
+ }
+ async function markReadFailure(tabId, error) {
+ if (!['HTTP','NETWORK','AUTH','NEXTCLOUD_CREDENTIALS','WEBDAV_CREDENTIALS'].includes(error.code)) return;
+ const latest = await api.snapshot(tabId);
+ if (latest?.remoteSource) await api.updateRemote(tabId, { ...latest.remoteSource, availability:error.httpStatus === 404 ? 'missing' : 'unavailable' });
+ }
+ async function reloadRemote(tabId) {
+ const tab = await api.snapshot(tabId);
+ if (!tab?.remoteSource || saves.has(tab.id)) return;
+ const source = tab.remoteSource;
+ const client = clientFor(source);
+ saves.add(tab.id);
+ let locked = false;
+ try {
+ api.beginSave(); locked = true;
+ const remote = await client.read(source.fileRef);
+ const dirty = await model.digest(tab.content) !== source.savedDigest;
+ if (dirty) {
+ const accepted = await api.confirm('Replace your local draft with the current cloud version? A recovery copy of this draft will be kept in Cloud Workspace.', {
+ title:'Reload cloud file?', confirmLabel:'Keep recovery & reload', cancelLabel:'Keep draft', destructive:true, focusCancel:true, dedupeKey:'cloud-reload:' + tab.id
+ });
+ if (!accepted) return;
+ }
+ const latest = await api.snapshot(tab.id);
+ if (!latest || latest.content !== tab.content || JSON.stringify(latest.remoteSource) !== JSON.stringify(source)) throw new Error('The draft changed while reload was pending. Nothing was replaced.');
+ const verified = await client.read(source.fileRef);
+ if (!model.equal(verified.version,remote.version) || verified.content !== remote.content) throw new Error('The server file changed while reload was pending. Nothing was replaced.');
+ if (dirty) await api.preserveDraft(tab.id, tab);
+ await api.replaceRemote(tab.id, tab, { ...verified, digest:await model.digest(verified.content) });
+ reviewedVersions.delete(tab.id);
+ message('Reloaded from '+providerLabel(client)+'.');
+ } catch (error) { await markReadFailure(tab.id,error); throw error; }
+ finally { saves.delete(tab.id); if (locked) api.endSave(); refresh(); }
+ }
+ async function resolveActive(tabId) {
+ const tab = await api.snapshot(tabId);
+ const reviewed = tab && reviewedVersions.get(tab.id);
+ if (!tab?.remoteSource || !reviewed || reviewed.href !== tab.remoteSource.fileRef) {
+ message('Check the server version first, review its copy, then select your original draft.');
+ return;
+ }
+ if (saves.has(tab.id)) return;
+ if (!clientFor(tab.remoteSource).isVersion(reviewed.version)) throw new Error('This server version cannot be safely overwritten: no usable version token.');
+ if (!(await api.confirm('Keep this draft for the next Save? It will replace the server version you just reviewed, provided that version has not changed again. Nothing is uploaded until you press Save.', {
+ title:'Resolve cloud conflict?', confirmLabel:'Keep my draft', cancelLabel:'Cancel', focusCancel:true, dedupeKey:'cloud-resolve:' + tab.id
+ }))) return;
+ const latest = await api.snapshot(tab.id);
+ if (!latest || latest.content !== tab.content || JSON.stringify(latest.remoteSource) !== JSON.stringify(tab.remoteSource)) throw new Error('The draft changed while confirmation was open. Review it again.');
+ if (saves.has(tab.id)) throw new Error('A Save started while confirmation was open. Check the server version again.');
+ saves.add(tab.id);
+ let locked = false;
+ try {
+ api.beginSave(); locked = true;
+ await api.updateRemote(tab.id, { ...tab.remoteSource, version: reviewed.version, savedDigest: reviewed.digest, attemptDigest: undefined, creationPending:undefined, deletePending:undefined, status: 'draft' });
+ reviewedVersions.delete(tab.id);
+ message('Your draft was kept. Next Save will update the reviewed server version if it is still unchanged.');
+ } finally { saves.delete(tab.id); if (locked) api.endSave(); refresh(); }
+ }
+ return Object.freeze({newFile,newForDocument,deleteRemote,remove,save,checkActive,reloadRemote,resolveActive});
+ }});
+})(globalThis);
diff --git a/cloud-platform.js b/cloud-platform.js
new file mode 100644
index 00000000..f4d9287e
--- /dev/null
+++ b/cloud-platform.js
@@ -0,0 +1,152 @@
+// Shared cloud protocol/UI depend only on this platform boundary.
+(function(target) {
+ 'use strict';
+ const EXTENSION = 'com.markdownviewer.cloud';
+ const COMMAND = '"extensions/cloud/markdown-cloud.exe"';
+ function extension(native) {
+ const pending = new Map();
+ const disconnectListeners = new Set();
+ let starting, stopping, healthChecked = false, leased = false, idleTimer;
+ let failed = false, enabled = true, generation = 0;
+ const fail = (message, code = 'NETWORK') => Object.assign(new Error(message), { code });
+ const sleep = ms => new Promise(resolve => setTimeout(resolve, ms));
+ function scheduleIdle() {
+ clearTimeout(idleTimer);
+ if (!leased && !pending.size && healthChecked) idleTimer = setTimeout(() => void stop().catch(() => {}), 10000);
+ }
+ const ready = Promise.all([
+ native.events.on('cloudResponse', event => {
+ const reply = event.detail;
+ const item = pending.get(reply?.id);
+ if (!item) return;
+ pending.delete(reply.id); clearTimeout(item.timeout);
+ if (!item.timedOut) {
+ if (reply.error) item.reject(fail(reply.error.message || 'Cloud operation failed.', reply.error.code));
+ else item.resolve(reply.returnValue);
+ }
+ scheduleIdle();
+ }),
+ native.events.on('extClientDisconnect', event => {
+ if (event.detail !== EXTENSION && event.detail?.extensionId !== EXTENSION) return;
+ generation++; healthChecked = false; failed = false;
+ for (const item of pending.values()) { clearTimeout(item.timeout); item.reject(fail('The cloud connection service stopped. Your draft was kept.')); }
+ pending.clear(); clearTimeout(idleTimer);
+ if (!stopping) for (const listener of disconnectListeners) listener();
+ })
+ ]);
+ function send(operation, input = {}) {
+ if (failed || [...pending.values()].some(item => item.timedOut)) throw fail('A previous cloud operation is still settling. Wait before checking or saving again.');
+ if (pending.size >= 8) throw fail('Cloud service is busy. Try again shortly.', 'BUSY');
+ clearTimeout(idleTimer);
+ const id = crypto.randomUUID();
+ return new Promise((resolve, reject) => {
+ const item = { resolve, reject, timedOut:false };
+ item.timeout = setTimeout(() => {
+ // Keep the identity until native completion/disconnection: never let a
+ // caller reconcile or retry while a native operation might still run.
+ item.timedOut = true;
+ reject(fail('Cloud request timed out. Its outcome is unconfirmed; your local draft was kept.'));
+ }, 45000);
+ pending.set(id, item);
+ Promise.resolve().then(() => native.extensions.dispatch(EXTENSION, 'cloudRequest', { id, operation, input })).catch(() => {
+ clearTimeout(item.timeout); pending.delete(id);
+ reject(fail('Cloud extension is unavailable. Your local draft was kept.'));
+ });
+ });
+ }
+ async function ensureStarted() {
+ await ready;
+ if (!enabled) throw fail('Cloud connections are disabled.');
+ if (stopping) await stopping;
+ if (!enabled) throw fail('Cloud connections are disabled.');
+ if (failed || [...pending.values()].some(item => item.timedOut)) throw fail('A previous cloud operation is still settling. Wait before checking or saving again.');
+ if (starting) return starting;
+ starting = (async () => {
+ const epoch=generation;
+ // Explicit preflight avoids the SDK dispatch async-executor rejection gap.
+ let stats;
+ try { stats = await native.extensions.getStats(); }
+ catch (_) { throw fail('Cloud extension is unavailable. Your local draft was kept.'); }
+ if (!enabled) throw fail('Cloud connections are disabled.');
+ if (!stats?.loaded?.includes(EXTENSION)) throw fail('Cloud extension is not configured.');
+ if (!stats.connected.includes(EXTENSION)) {
+ healthChecked = false;
+ const token = target.NL_TOKEN || target.sessionStorage?.getItem('NL_TOKEN');
+ const port = Number(target.NL_PORT);
+ if (!token || !token.includes('.') || !Number.isInteger(port) || port < 1 || port > 65535 || !target.NL_PATH) throw fail('Cloud startup information is unavailable.');
+ // Only a fixed relative executable is passed to the shell. cwd is a
+ // separate native option; no URL, account, filename or token is an arg.
+ const child = await native.os.spawnProcess(COMMAND, { cwd: target.NL_PATH });
+ try {
+ await native.os.updateSpawnedProcess(child.id, 'stdIn', JSON.stringify({ nlPort:String(port), nlToken:token, nlConnectToken:token.split('.')[1], nlExtensionId:EXTENSION }));
+ await native.os.updateSpawnedProcess(child.id, 'stdInEnd');
+ } catch (_) {
+ await native.os.updateSpawnedProcess(child.id, 'stdInEnd').catch(() => {});
+ throw fail('Could not start the cloud helper. Check the extensions folder.');
+ }
+ const deadline = Date.now() + 5000;
+ do {
+ stats = await native.extensions.getStats();
+ if (stats.connected.includes(EXTENSION)) break;
+ await sleep(100);
+ } while (Date.now() < deadline);
+ if (!stats.connected.includes(EXTENSION)) throw fail('Cloud helper did not become ready. Check the extensions folder.');
+ }
+ if (!healthChecked) {
+ const capabilities = await send('capabilities');
+ if (capabilities?.version !== 5 || capabilities?.conditionalWrites !== true || capabilities?.requestDeadlineMs !== 35000 || !['nextcloud','webdav'].every(id=>capabilities?.providerIds?.includes(id))) {
+ failed = true; throw fail('Cloud helper is outdated. Replace the whole application package.');
+ }
+ if (epoch !== generation) throw fail('Cloud helper stopped while connecting. Try Reconnect.');
+ healthChecked = true;
+ }
+ })();
+ try { await starting; } finally { starting = undefined; }
+ }
+ async function call(operation, input = {}) {
+ await ensureStarted();
+ while (!healthChecked) await ensureStarted();
+ if (!enabled) throw fail('Cloud connections are disabled.');
+ return send(operation, input);
+ }
+ async function stop() {
+ await ready;
+ clearTimeout(idleTimer);
+ if (starting) await starting;
+ if (stopping) return stopping;
+ if (pending.size) throw fail('Wait for the current cloud operation to finish.');
+ stopping = (async () => {
+ const stats = await native.extensions.getStats();
+ if (!stats.connected.includes(EXTENSION)) { healthChecked=false; failed=false; clearTimeout(idleTimer); return; }
+ await send('shutdown');
+ const deadline=Date.now()+3000;
+ while (Date.now() { enabled=Boolean(value); if (!enabled) { leased=false; clearTimeout(idleTimer); } },
+ onDisconnect: listener => { disconnectListeners.add(listener); return () => disconnectListeners.delete(listener); },
+ keepAlive: active => { leased=Boolean(active); scheduleIdle(); },
+ stop,
+ request: async input => {
+ const response = await call('request', input);
+ if (response?.transportVersion !== 1 || typeof response.body !== 'string' || new TextEncoder().encode(response.body).byteLength > input.maxBytes) throw fail('Invalid or oversized cloud response.', 'SIZE');
+ return response;
+ },
+ storeAccount: account => call('accountStore', account),
+ listAccounts: () => call('accountList'),
+ forgetAccount: account => call('accountForget', account)
+ });
+ }
+ target.MarkdownCloudPlatform = Object.freeze({
+ extension,
+ available: () => Boolean(target.NL_OS === 'Windows' && target.Neutralino?.extensions?.dispatch && target.Neutralino?.events?.on),
+ create: () => extension(target.Neutralino)
+ });
+})(typeof globalThis !== 'undefined' ? globalThis : window);
diff --git a/cloud-providers.js b/cloud-providers.js
new file mode 100644
index 00000000..c22fa7ce
--- /dev/null
+++ b/cloud-providers.js
@@ -0,0 +1,38 @@
+(function(target) {
+ 'use strict';
+ // Only application-registered providers confer remote authority. Workspace or
+ // backup metadata cannot register code or enable an unknown provider.
+ const providers=new Map();
+ function get(id) {
+ const provider=providers.get(id);
+ if(!provider)throw new Error('This cloud provider is unavailable. The local draft remains available.');
+ return provider;
+ }
+ function forSource(source) {
+ if(!source || (source.providerId && source.provider && source.providerId!==source.provider))throw new Error('Invalid cloud provider identity.');
+ return get(source.providerId || source.provider);
+ }
+ function normalizeSource(source) { return forSource(source).normalizeSource(source); }
+ function sameFile(a,b) {
+ try {const x=normalizeSource(a),y=normalizeSource(b);return x.providerId===y.providerId && x.accountKey===y.accountKey && x.fileRef===y.fileRef;}catch(_){return false;}
+ }
+ function accountProvider(account) {
+ if(!account || (account.providerId && account.provider && account.providerId!==account.provider))throw new Error('Invalid cloud account provider.');
+ if(account.providerId || account.provider)return get(account.providerId || account.provider);
+ const legacy=[...providers.values()].filter(provider=>provider.legacyAccounts);
+ if(legacy.length!==1)throw new Error('Unknown legacy cloud account.');
+ return legacy[0];
+ }
+ target.MarkdownCloudProviders=Object.freeze({
+ register(provider) {
+ if(!provider || !/^[a-z][a-z0-9-]{0,63}$/.test(provider.id) || providers.has(provider.id))throw new Error('Invalid or duplicate cloud provider.');
+ for(const method of ['normalizeSource','serializeSource','recoveryIdentity','restore','connect'])if(typeof provider[method]!=='function')throw new Error('Incomplete cloud provider contract.');
+ providers.set(provider.id,Object.freeze(provider));
+ },
+ list:()=>[...providers.values()],get,forSource,accountProvider,normalizeSource,sameFile,
+ serializeSource:source=>forSource(source).serializeSource(source),
+ sessionKey:source=>normalizeSource(source).accountKey,
+ recoveryIdentity:source=>forSource(source).recoveryIdentity(source),
+ describe(source){try{return forSource(source).describeSource(source);}catch(_){return 'Unavailable cloud provider';}}
+ });
+})(globalThis);
diff --git a/cloud-workspace.js b/cloud-workspace.js
new file mode 100644
index 00000000..848cafea
--- /dev/null
+++ b/cloud-workspace.js
@@ -0,0 +1,615 @@
+// Shared cloud UI. Only non-secret source identity is passed to the editor.
+(function (target) {
+ 'use strict';
+ const providers=target.MarkdownCloudProviders, model=target.MarkdownCloudModel;
+ let operations,copyOperations;
+ const newFile=(...args)=>operations.newFile(...args);
+ const newForDocument=(...args)=>operations.newForDocument(...args);
+ const deleteRemote=(...args)=>operations.deleteRemote(...args);
+ const remove=(...args)=>operations.remove(...args);
+ const save=(...args)=>operations.save(...args);
+ const checkActive=(...args)=>operations.checkActive(...args);
+ const reloadRemote=(...args)=>operations.reloadRemote(...args);
+ const resolveActive=(...args)=>operations.resolveActive(...args);
+ let platform;
+ let api;
+ let panel;
+ let status;
+ let content;
+ let activeClient;
+ let currentFolder;
+ let pendingLogin;
+ let body;
+ let accountTools;
+ let entriesView;
+ let entriesData = [];
+ let entryClient;
+ let draftsView;
+ let documentRevision = '';
+ let accountList;
+ let settingsModal;
+ let setupContent;
+ let setupStatus;
+ let settingsSummary;
+ let visibilityToggle;
+ let enabledToggle;
+ let automaticToggle;
+ let connectionEpoch = 0;
+ let disclosure;
+ const uploading = new Set();
+ let workspace = { version: 1, accounts: [], activeId: '', enabled:false, autoConnect:true };
+ let workspaceWrites = Promise.resolve();
+ const accounts = new Map();
+ const WORKSPACE_KEY = 'markdownViewerCloudWorkspace';
+ let operation = 0;
+ const sessions = new Map();
+ const saves = new Set();
+ const reviewedVersions = new Map();
+ function secureAccountsAvailable() {
+ return Boolean(platform?.secureAccounts);
+ }
+ function accountState(id) {
+ let state = workspace.accounts.find(item => item.id === id);
+ if (!state) { state = { id, folders: [] }; workspace.accounts.push(state); }
+ return state;
+ }
+ async function saveWorkspace() {
+ const storage = platform.storage || target.Neutralino?.storage;
+ if (!storage?.setData) return;
+ const snapshot = JSON.stringify(workspace);
+ workspaceWrites = workspaceWrites.catch(() => {}).then(() => storage.setData(WORKSPACE_KEY, snapshot));
+ await workspaceWrites;
+ }
+ function tools() {
+ accountTools.replaceChildren(button('Add cloud account', () => connectForm(), 'plus', true));
+ const sort = button('Sort cloud files', () => api.showMenu(sort,'Sort cloud files',[
+ {id:'sort-asc',icon:'lucide-case-sensitive',label:'Name A–Z' + (workspace.sort !== 'desc' ? ' ✓' : ''),run:async () => { workspace.sort = 'asc'; await saveWorkspace(); renderDocuments(true); }},
+ {id:'sort-desc',icon:'lucide-case-sensitive',label:'Name Z–A' + (workspace.sort === 'desc' ? ' ✓' : ''),run:async () => { workspace.sort = 'desc'; await saveWorkspace(); renderDocuments(true); }}
+ ]),'list',true,true);
+ accountTools.append(sort);
+ if (!activeClient) return;
+ accountTools.append(button('Refresh', () => browse(currentFolder || activeClient.root), 'refresh-cw', true));
+ }
+ function updateVisibility() {
+ if (!panel) return;
+ const hasDrafts = draftsView && !draftsView.hidden;
+ panel.hidden = workspace.hidden === true || (!accounts.size && !hasDrafts);
+ if (visibilityToggle) visibilityToggle.checked = workspace.hidden !== true;
+ if (enabledToggle) enabledToggle.checked = workspace.enabled;
+ if (automaticToggle) automaticToggle.checked = workspace.autoConnect;
+ }
+ function applyExpansion() {
+ if (!body || !disclosure) return;
+ body.hidden = workspace.collapsed === true;
+ disclosure.setAttribute('aria-expanded',String(!body.hidden));
+ disclosure.querySelector('.lucide-chevron-down').classList.toggle('is-collapsed',body.hidden);
+ }
+ function renderAccounts() {
+ accountList.replaceChildren();
+ for (const profile of accounts.values()) {
+ const group = document.createElement('div');
+ group.className = 'cloud-account';
+ const state = accountState(profile.id);
+ const row = button(profile.client.account.label + ' (' + profile.client.account.userLabel + ')', () => activateAccount(profile), 'cloud-upload');
+ row.className = 'nextcloud-entry cloud-account-row' + (profile.client === activeClient ? ' is-active' : '');
+ row.title = profile.client.account.label + '\n' + profile.client.account.detail + (profile.remembered ? '\n' + (platform.rememberLabel || 'Remembered securely on this device') : '\nSession only');
+ row.replaceChildren(icon('cloud-upload'));
+ const copy = document.createElement('span'); copy.className = 'cloud-account-copy';
+ const name = document.createElement('span'); name.textContent = profile.client.account.label;
+ const detail = document.createElement('small'); detail.textContent = profile.client.account.detail;
+ copy.append(name,detail); row.append(copy);
+ const connected = sessions.has(sessionKey(profile));
+ const connection = document.createElement('span'); connection.className = 'cloud-connection-dot'; connection.dataset.connected = String(connected);
+ connection.title = connected ? 'Connected' : 'Offline · local drafts remain available'; connection.setAttribute('aria-label',connection.title); row.append(connection);
+ const actions = () => [
+ { id:'cloud-connect', icon:'lucide-refresh-cw', label:'Reconnect', run:() => activateAccount(profile) },
+ { id:'cloud-new', icon:'lucide-file-plus', label:'New Markdown file', disabled:!profile.client.capabilities.create || !sessions.has(sessionKey(profile)), run:() => newFile(profile.client,profile.client.root) },
+ { id:'cloud-forget', icon:'lucide-x', label:profile.remembered ? 'Forget account' : 'Disconnect', run:async () => { activeClient = profile.client; await disconnect(); } }
+ ];
+ contextMenu(row, profile.client.account.userLabel, actions);
+ const toggle = button((state.collapsed ? 'Expand ' : 'Collapse ') + profile.client.account.label, async () => {
+ state.collapsed = !state.collapsed; await saveWorkspace(); renderAccounts();
+ },state.collapsed ? 'chevron-right' : 'chevron-down',true);
+ toggle.setAttribute('aria-expanded', String(!state.collapsed));
+ const line = document.createElement('div'); line.className = 'cloud-account-heading';
+ const menu = button('Account options for ' + profile.client.account.userLabel, () => api.showMenu(menu,profile.client.account.userLabel,actions()),'ellipsis',true,true);
+ line.append(toggle,row,menu); group.append(line);
+ const locations = document.createElement('div');
+ locations.className = 'cloud-folders';
+ for (const folder of accountState(profile.id).folders) {
+ try { profile.client.validateRef(folder.href); } catch (_) { continue; }
+ const item = document.createElement('div');
+ item.className = 'cloud-folder-row';
+ const open = button(folder.name, () => activateAccount(profile, folder.href), 'folder');
+ open.className = 'nextcloud-entry is-folder';
+ open.title = profile.client.locationLabel(folder.href);
+ contextMenu(open, folder.name, () => [
+ { id:'open', icon:'lucide-folder-open', label:'Open', run:() => activateAccount(profile, folder.href) },
+ { id:'refresh', icon:'lucide-refresh-cw', label:'Refresh', run:() => activateAccount(profile, folder.href) },
+ { id:'cloud-new', icon:'lucide-file-plus', label:'New Markdown file', disabled:!profile.client.capabilities.create || !sessions.has(sessionKey(profile)), run:() => newFile(profile.client,folder.href) }
+ ]);
+ const remove = button('Remove folder ' + folder.name + ' from workspace', async () => {
+ const state = accountState(profile.id);
+ state.folders = state.folders.filter(value => value.href !== folder.href);
+ await saveWorkspace(); renderAccounts();
+ message('Folder removed from this workspace. Server files were not changed.');
+ }, 'x', true);
+ item.append(open, remove); locations.append(item);
+ }
+ const children = document.createElement('div'); children.className = 'cloud-account-children'; children.hidden = state.collapsed === true;
+ children.append(locations);
+ if (profile.client === activeClient) children.append(content);
+ group.append(children);
+ accountList.append(group);
+ }
+ updateVisibility();
+ }
+ function resetBrowser(){++operation;currentFolder=undefined;content.replaceChildren();entriesView=undefined;entriesData=[];entryClient=undefined;}
+ async function activateAccount(profile, href, keepCollapsed = false) {
+ if (pendingLogin || saves.size) throw new Error('Wait for the current connection or Save to finish.');
+ const epoch = ++connectionEpoch;
+ const client = profile.client;
+ if(activeClient!==client)resetBrowser();
+ activeClient = client;
+ if (!keepCollapsed) accountState(profile.id).collapsed = false;
+ workspace.activeId = profile.id;
+ tools(); renderAccounts();
+ try {
+ await client.identify();
+ if (epoch !== connectionEpoch || !workspace.enabled) return;
+ sessions.set(sessionKey(profile), client); platform.keepAlive(true);
+ let location = href || accountState(profile.id).lastFolder || client.root;
+ try { location = client.validateRef(location); } catch (_) { location = client.root; }
+ await browse(location, client);
+ } catch (error) {
+ if (epoch !== connectionEpoch) return;
+ sessions.delete(sessionKey(profile)); platform.keepAlive(sessions.size > 0);
+ renderAccounts();
+ message('Could not reconnect to ' + profile.client.account.userLabel + '. ' + error.message + ' Use Add cloud account to sign in again if access was revoked.', 'error');
+ }
+ }
+ async function pinFolder() {
+ const profile = [...accounts.values()].find(item => item.client === activeClient);
+ if (!profile || !currentFolder) return;
+ const state = accountState(profile.id);
+ if (!state.folders.some(folder => folder.href === currentFolder)) {
+ if (state.folders.length >= 50) throw new Error('This account already has 50 selected folders.');
+ const suffix = activeClient.locationLabel(currentFolder).replace(/\/$/, '');
+ state.folders.push({ href: currentFolder, name: suffix.split('/').pop() || 'Files' });
+ await saveWorkspace(); renderAccounts();
+ }
+ message('Folder added to Cloud Workspace.');
+ }
+ async function restoreWorkspace() {
+ try {
+ let hadSavedWorkspace=false;
+ const storage = platform.storage || target.Neutralino?.storage;
+ if (storage?.getData) {
+ try {
+ const saved = JSON.parse(await storage.getData(WORKSPACE_KEY));
+ if (saved.version === 1 && Array.isArray(saved.accounts)) {hadSavedWorkspace=true;workspace = {
+ version: 1, enabled: saved.enabled === true || (saved.enabled === undefined && saved.accounts.length > 0), autoConnect: saved.autoConnect !== false, activeId: String(saved.activeId || ''), hidden:saved.hidden === true, collapsed:saved.collapsed === true, sort:saved.sort === 'desc' ? 'desc' : 'asc', accounts: saved.accounts.slice(0, 20).filter(item => model.isAccountId(item.id)).map(item => ({
+ id: item.id, ...(item.providerId ? {providerId:item.providerId} : {}), lastFolder: typeof item.lastFolder === 'string' ? item.lastFolder : '',
+ collapsed:item.collapsed === true, skipSaveConfirmation:item.skipSaveConfirmation === true,
+ folders: (Array.isArray(item.folders) ? item.folders : []).slice(0,50).filter(folder => typeof folder.href === 'string' && typeof folder.name === 'string').map(folder => ({ href: folder.href, name: folder.name.slice(0,160) }))
+ }))
+ };
+ }
+ } catch (_) { /* No saved workspace yet. Credentials are never stored here. */ }
+ }
+ if(!hadSavedWorkspace && platform.canRestoreSession)workspace.enabled=true;
+ applyExpansion(); updateVisibility();
+ platform.setEnabled(workspace.enabled);
+ if (!workspace.enabled || !workspace.autoConnect || (!workspace.accounts.length && !platform.canRestoreSession)) return;
+ await loadRemembered();
+ } catch (error) { message(error.message, 'error'); }
+ }
+ async function loadRemembered(interactive=false) {
+ if (!workspace.enabled || (!secureAccountsAvailable() && !platform.canRestoreSession)) return;
+ const stored = await platform.listAccounts({interactive});
+ if (!workspace.enabled) return;
+ for (const account of stored.slice(0,20)) {
+ try {
+ const provider=providers.accountProvider(account);
+ const client=await provider.restore(account,platform);
+ accounts.set(account.id,{id:account.id,providerId:provider.id,client,remembered:account.remembered!==false});
+ } catch(error) { message(error.message,'error'); }
+ }
+ renderAccounts();
+ const selected = accounts.get(workspace.activeId) || accounts.values().next().value;
+ if (selected) { message('Reconnecting to cloud…'); await activateAccount(selected, undefined, true); }
+ else { platform.keepAlive(false); message(platform.canRestoreSession?'No cloud connections in this session.':'No remembered cloud accounts.'); }
+ }
+ async function setCloudEnabled(enabled) {
+ if (pendingLogin || saves.size) throw new Error('Wait for the current cloud operation to finish.');
+ if (!enabled) {
+ await api.flushDrafts();
+ platform.setEnabled(false);
+ try { await platform.stop(); } catch (error) { platform.setEnabled(workspace.enabled); throw error; }
+ ++connectionEpoch; ++operation;
+ for (const profile of accounts.values()) profile.client.disconnect();
+ sessions.clear(); accounts.clear(); activeClient = undefined;
+ platform.keepAlive(false);
+ content.replaceChildren(); entriesView=undefined; entriesData=[]; entryClient=undefined;
+ }
+ workspace.enabled = enabled; platform.setEnabled(enabled);
+ await saveWorkspace(); renderAccounts(); updateVisibility(); api.statusChanged();
+ message(enabled ? 'Cloud connections enabled. Connect or load a remembered account.' : 'Cloud connections disabled. Local drafts and remembered accounts were kept.');
+ }
+ function message(text, tone = 'info') {
+ if (status) { status.textContent = text; status.dataset.tone = tone; }
+ if (setupStatus) { setupStatus.textContent = text; setupStatus.dataset.tone = tone; }
+ refresh();
+ }
+ function icon(name) {
+ const element = document.createElement('i');
+ element.className = 'lucide lucide-' + name;
+ element.setAttribute('aria-hidden', 'true');
+ return element;
+ }
+ function button(label, action, iconName, iconOnly = false, opensMenu = false) {
+ const element = document.createElement('button');
+ element.type = 'button';
+ element.className = iconOnly ? 'nextcloud-icon-button' : 'nextcloud-button';
+ element.setAttribute('aria-label', label);
+ element.title = label;
+ if (iconName) element.append(icon(iconName));
+ if (!iconOnly) { const span = document.createElement('span'); span.textContent = label; element.append(span); }
+ if (opensMenu) element.setAttribute('aria-haspopup','menu');
+ element.addEventListener('click', event => {
+ if (opensMenu) event.stopPropagation();
+ void Promise.resolve().then(action).catch(error => message(error.message, 'error'));
+ });
+ return element;
+ }
+ function contextMenu(element, label, actions) {
+ element.addEventListener('contextmenu', event => api.showMenu(element, label, actions(), event));
+ element.addEventListener('keydown', event => {
+ if (event.key === 'ContextMenu' || (event.shiftKey && event.key === 'F10')) api.showMenu(element, label, actions(), event);
+ });
+ }
+ function renderDocuments(force = false) {
+ if (!panel) return;
+ const revision = api.revision() + JSON.stringify([[...reviewedVersions.keys()], [...sessions.keys()], [...uploading],workspace.sort]);
+ if (!force && revision === documentRevision) return;
+ if (!force && document.querySelector('.document-menu-dropdown.open')) return;
+ documentRevision = revision;
+ document.querySelectorAll('[data-cloud-panel-menu]').forEach(menu => menu.remove());
+ const visible = [];
+ if (entriesView && entriesView.isConnected) {
+ entriesView.replaceChildren();
+ const sortedEntries = entriesData.slice().sort((a,b) => Number(b.directory) - Number(a.directory) || (workspace.sort === 'desc' ? -1 : 1) * a.name.localeCompare(b.name,undefined,{numeric:true,sensitivity:'base'}));
+ for (const entry of sortedEntries) {
+ if (!entry.directory) {
+ visible.push(entryClient.source(entry.ref));
+ if (api.renderFile(entriesView, entryClient.source(entry.ref))) continue;
+ }
+ const open = async () => {
+ if (activeClient !== entryClient) return;
+ if (entry.directory) return browse(entryClient.folderRef(entry.ref));
+ if (await api.activateRemote(entryClient.source(entry.ref))) return;
+ const client = entryClient;
+ const ticket = operation;
+ message('Opening ' + entry.name + '…');
+ const snapshot = await client.read(entry.ref);
+ if (activeClient !== client || ticket !== operation) return;
+ await api.openRemote(snapshot.content, entry.name, client.source(entry.ref,snapshot.version,{savedDigest:await model.digest(snapshot.content),status:'saved'}));
+ message('');
+ };
+ const row = button(entry.name, open, entry.directory ? 'folder' : 'file-text');
+ row.className = 'nextcloud-entry' + (entry.directory ? ' is-folder' : '');
+ row.dataset.nextcloudHref = entry.ref; row.title = entry.name;
+ const client=entryClient;
+ contextMenu(row, entry.name, () => [
+ { id:'open', icon:entry.directory ? 'lucide-folder-open' : 'lucide-file-text', label:'Open', run:open },
+ ...(entry.directory ? [{id:'cloud-new',icon:'lucide-file-plus',label:'New Markdown file',disabled:!client.capabilities.create,run:() => newFile(client,entry.ref)}] :
+ /\.md$/i.test(entry.name) ? [{id:'cloud-delete',icon:'lucide-trash-2',label:'Delete from cloud',danger:true,disabled:!client.capabilities.delete || Boolean(client.readOnlyReason?.(client.source(entry.ref,entry.version))),run:() => deleteRemote(client,entry.ref,entry.name)}] : [])
+ ]);
+ entriesView.append(row);
+ }
+ }
+ draftsView.replaceChildren();
+ const count = api.renderRecovery(draftsView, visible);
+ draftsView.hidden = count === 0;
+ if (count) {
+ const label = document.createElement('p'); label.className = 'document-tree-section-label'; label.textContent = 'Local cloud drafts';
+ draftsView.prepend(label);
+ }
+ updateVisibility();
+ }
+ function refresh() {
+ if (!panel) return;
+ renderDocuments();
+ const tab = api.currentRemote();
+ const source = tab?.remoteSource;
+ panel.querySelectorAll('[data-nextcloud-href]').forEach(row => {
+ const selected = Boolean(source && entryClient && activeClient===entryClient && providers.sameFile(source,entryClient.source(row.dataset.nextcloudHref)));
+ row.classList.toggle('is-active', selected);
+ if (selected) row.setAttribute('aria-current', 'page'); else row.removeAttribute('aria-current');
+ });
+ }
+ function mount() {
+ if (panel) { document.querySelector('#document-tree > .cloud-offline-section')?.remove(); document.getElementById('document-tree')?.append(panel); renderDocuments(true); refresh(); updateVisibility(); return true; }
+ return false;
+ }
+ function sessionKey(source) {
+ for(const profile of accounts.values()){if(source===profile || source===profile.client)return profile.client.account.key;}
+ return providers.sessionKey(source);
+ }
+ function clientFor(source) {
+ const client = sessions.get(sessionKey(source));
+ if (!client) throw new Error('Connect to this cloud account again. Your local draft is available.');
+ return client;
+ }
+ async function browse(href, client = activeClient) {
+ if (!client || client !== activeClient) return;
+ const ticket = ++operation;
+ message('Loading folder…');
+ const entries = await client.list(href);
+ if (ticket !== operation || activeClient !== client) return;
+ currentFolder = href;
+ const profile = [...accounts.values()].find(item => item.client === client);
+ if (profile) { accountState(profile.id).lastFolder = href; workspace.activeId = profile.id; await saveWorkspace(); }
+ if (ticket !== operation || activeClient !== client) return;
+ content.replaceChildren();
+ const account = document.createElement('div');
+ account.className = 'nextcloud-account';
+ const server = document.createElement('span');
+ server.textContent = client.account.label;
+ const user = document.createElement('span');
+ user.textContent = client.account.userLabel;
+ account.title = client.account.label + '\n' + client.account.detail;
+ account.append(icon('cloud-upload'), server, user);
+ content.append(account);
+ tools(); renderAccounts();
+ const navigation = document.createElement('div');
+ navigation.className = 'nextcloud-navigation';
+ const path = document.createElement('div');
+ path.className = 'nextcloud-path';
+ path.textContent = client.locationLabel(href);
+ path.title = path.textContent;
+ contextMenu(path,'Cloud folder',()=>[{id:'cloud-new',icon:'lucide-file-plus',label:'New Markdown file',disabled:!client.capabilities.create,run:()=>newFile(client,href)}]);
+ if (href !== client.root) {
+ navigation.append(button('Up', () => browse(client.upRef(href)), 'chevron-up', true));
+ }
+ navigation.append(path);
+ navigation.append(button('Add current folder to Cloud Workspace', pinFolder, 'folder-plus', true));
+ content.append(navigation);
+ entriesView = document.createElement('div'); entriesView.className = 'nextcloud-entries';
+ entriesData = entries; entryClient = client;
+ content.append(entriesView);
+ renderDocuments(true);
+ message(entries.length ? '' : 'No Markdown files or folders here.');
+ api.statusChanged();
+ }
+ async function disconnect() {
+ if (saves.size) throw new Error('Wait for the current Save to finish.');
+ await api.flushDrafts();
+ const profile = [...accounts.values()].find(item => item.client === activeClient);
+ if (profile?.remembered) {
+ if (!(await api.confirm('Forget this cloud account on this device? Saved access and folder shortcuts will be removed. Your local drafts and server files will be kept.', {
+ title:'Forget cloud account?', confirmLabel:'Forget account', cancelLabel:'Keep account', focusCancel:true, dedupeKey:'cloud-forget:' + profile.id
+ }))) return;
+ if (saves.size) throw new Error('A cloud operation started while confirmation was open. Try again.');
+ await platform.forgetAccount({ id: profile.id, providerId:profile.providerId });
+ }
+ if (profile && !profile.remembered && platform.releaseAccount) await platform.releaseAccount({id:profile.id,providerId:profile.providerId});
+ ++operation;
+ pendingLogin?.abort();
+ pendingLogin = undefined;
+ if (activeClient) {
+ sessions.delete(sessionKey(activeClient));
+ activeClient.disconnect();
+ }
+ activeClient = undefined;
+ if (profile) {
+ accounts.delete(profile.id);
+ workspace.accounts = workspace.accounts.filter(item => item.id !== profile.id);
+ if (workspace.activeId === profile.id) workspace.activeId = '';
+ await saveWorkspace();
+ }
+ renderAccounts();
+ content.replaceChildren(); entriesView = undefined; entriesData = []; entryClient = undefined;
+ refresh(); updateVisibility();
+ api.statusChanged();
+ platform.keepAlive(sessions.size > 0);
+ if (!accounts.size) { workspace.enabled=false; platform.setEnabled(false); await saveWorkspace(); await platform.stop(); updateVisibility(); }
+ message('Disconnected. Local drafts were kept. App access can be revoked in your cloud account settings.');
+ }
+ function connectForm(providerId) {
+ setupContent.replaceChildren(); settingsSummary.replaceChildren();
+ if (platform.logout) {
+ const notice=document.createElement('p');notice.className='nextcloud-note';notice.textContent=platform.accountNote;
+ settingsSummary.append(notice,button(platform.logoutLabel || 'Sign out of self-hosted connector',async()=>{await api.flushDrafts();await platform.logout();},'log-out'));
+ }
+ platform.renderProfileControls?.(settingsSummary);
+ for (const profile of accounts.values()) {
+ const summary = document.createElement('div'); summary.className = 'cloud-settings-account';
+ const title = document.createElement('strong'); title.textContent = profile.client.account.label;
+ const detail = document.createElement('p'); detail.className = 'nextcloud-note'; detail.textContent = profile.client.account.detail + (profile.remembered ? ' · ' + (platform.rememberLabel || 'Remembered on this device') : ' · Session only');
+ const open = button('Open files', async () => { workspace.hidden = false; workspace.collapsed = false; await saveWorkspace(); applyExpansion(); api.closeDialog(settingsModal); await activateAccount(profile); },'folder-open');
+ const forget = button(profile.remembered ? 'Forget account' : 'Disconnect', async () => { api.closeDialog(settingsModal); activeClient = profile.client; await disconnect(); },'power');
+ summary.append(title,detail,open,forget); settingsSummary.append(summary);
+ }
+ if (!accounts.size) settingsSummary.append(button('Load remembered accounts', async () => {
+ workspace.enabled=true; platform.setEnabled(true); await saveWorkspace(); updateVisibility(); await loadRemembered(true); connectForm();
+ },'refresh-cw'));
+ const form = document.createElement('form');
+ const available=providers.list();
+ const selector=document.createElement('select'); selector.id='cloud-provider';
+ const providerLabel=document.createElement('label');providerLabel.htmlFor=selector.id;providerLabel.textContent='Cloud provider'; selector.setAttribute('aria-label','Cloud provider');
+ for(const candidate of available){const option=document.createElement('option');option.value=candidate.id;option.textContent=candidate.label;selector.append(option);}
+ if(typeof providerId==='string' && available.some(item=>item.id===providerId))selector.value=providerId;
+ const provider=providers.get(selector.value);
+ selector.disabled=available.length===1;
+ const fields=document.createElement('div'); fields.className='cloud-connection-fields';
+ const inputs=new Map();
+ for(const field of provider.connectionFields){
+ const label=document.createElement('label');label.htmlFor=field.legacyId || 'cloud-'+field.id;label.textContent=field.label;
+ const input=document.createElement('input');input.id=label.htmlFor;input.type=field.type || 'text';input.required=field.required!==false;if(field.maxLength)input.maxLength=field.maxLength;input.placeholder=field.placeholder || '';input.autocomplete=field.autocomplete || 'off';
+ inputs.set(field.id,input);fields.append(label,input);
+ }
+ const input=[...inputs.values()].find(input=>input.required) || inputs.values().next().value;
+ const connect=document.createElement('button');connect.type='submit';connect.className='nextcloud-button nextcloud-primary';
+ connect.append(icon('cloud-upload'),document.createTextNode('Connect to '+provider.label));
+ selector.addEventListener('change',()=>{pendingLogin?.abort();pendingLogin=undefined;connectForm(selector.value);});
+ if (!target.MarkdownCloudPlatform?.available()) {
+ connect.disabled = true;
+ message('The cloud connection extension is unavailable.');
+ }
+ const cancel = button('Cancel connection', () => { if(pendingLogin?.finishing)return; ++operation; pendingLogin?.abort(); pendingLogin = undefined; connect.disabled = false; selector.disabled=available.length===1;for(const input of inputs.values())if(input.type==='password')input.value=''; message('Connection cancelled.'); });
+ const note = document.createElement('p');
+ note.className = 'nextcloud-note';
+ note.textContent = provider.connectionNote + ' Drafts are kept locally in Cloud Workspace; uploads require your confirmation.' +
+ (secureAccountsAvailable() ? ' ' + (platform.credentialNote || 'Remembered access is protected by Windows Credential Manager.') : '');
+ const rememberLabel = document.createElement('label');
+ rememberLabel.className = 'cloud-remember';
+ const remember = document.createElement('input');
+ remember.type = 'checkbox';
+ remember.id = 'nextcloud-remember';
+ remember.checked = secureAccountsAvailable() && platform.rememberDefault !== false;
+ remember.disabled = !secureAccountsAvailable();
+ rememberLabel.append(remember, document.createTextNode(platform.rememberLabel || 'Remember account on this device'));
+ if (!secureAccountsAvailable()) rememberLabel.title = platform.rememberUnavailable || 'Requires a platform adapter with secure credential storage.';
+ form.append(providerLabel, selector, fields, rememberLabel, connect, cancel, note);
+ cancel.hidden = true;
+ form.addEventListener('submit', async event => {
+ event.preventDefault();
+ if (pendingLogin) return;
+ const controller = new AbortController();
+ pendingLogin = controller;
+ connect.disabled = true; selector.disabled=true;
+ cancel.hidden = false;
+ message(provider.connectingMessage || 'Complete login in your browser…');
+ try {
+ workspace.enabled=true; platform.setEnabled(true); await saveWorkspace(); updateVisibility();
+ const client = await provider.connect(Object.fromEntries([...inputs].map(([id,input])=>[id,input.value])),platform,url=>platform.openBrowser ? platform.openBrowser(url) : target.Neutralino.os.open(url),controller.signal);
+ if (controller.signal.aborted) { client.disconnect(); return; }
+ // Authentication is complete. Finalizing secure storage cannot be undone
+ // by closing the dialog; Cancel is available only before this boundary.
+ controller.finishing=true;cancel.hidden=true;
+ for(const input of inputs.values())if(input.type==='password')input.value='';
+ message('Finishing connection…');
+ let id = await client.accountId();
+ let remembered = false;
+ let rememberError = '';
+ if (remember.checked) {
+ try {
+ await client.remember(account => platform.storeAccount(account));
+ remembered = true;
+ } catch (error) {
+ rememberError = 'Connected for this session, but the account could not be remembered. ' + error.message;
+ }
+ }
+ const previous = accounts.get(id);
+ if (previous?.remembered && !remember.checked) await (platform.forgetRememberedAccount || platform.forgetAccount)({ id, providerId:provider.id });
+ if (previous && previous.client !== client) previous.client.disconnect();
+ accounts.set(id, { id, providerId:provider.id, client, remembered });
+ accountState(id).providerId=provider.id;
+ workspace.activeId = id;
+ sessions.set(sessionKey(client), client); platform.keepAlive(true);
+ if(activeClient!==client)resetBrowser();
+ activeClient = client;
+ workspace.hidden = false; workspace.collapsed = false; applyExpansion();
+ await browse(accountState(id).lastFolder || client.root);
+ api.closeDialog(settingsModal);
+ if (rememberError) message(rememberError, 'error');
+ } catch (error) { if (!controller.signal.aborted) message(error.message, 'error'); }
+ finally {
+ if (pendingLogin === controller) pendingLogin = undefined;
+ connect.disabled = false; selector.disabled=available.length===1;
+ for(const input of inputs.values())if(input.type==='password')input.value='';
+ cancel.hidden = true;
+ }
+ });
+ setupContent.append(form);
+ api.openDialog(settingsModal,input,closeSettings);
+ }
+ function closeSettings() {
+ if(!pendingLogin?.finishing){++operation;pendingLogin?.abort();pendingLogin=undefined;}
+ setupContent?.querySelectorAll('input[type="password"]').forEach(input=>input.value='');
+ api.closeDialog(settingsModal);
+ }
+ function init(editorApi) {
+ if (panel || !target.MarkdownCloudPlatform?.available()) return;
+ api = editorApi;
+ platform = target.MarkdownCloudPlatform.create();
+ platform.bindIdentity?.({flush:api.flushIdentityDrafts || api.flushDrafts,preserve:api.preserveIdentityDrafts,isBusy:()=>Boolean(pendingLogin) || saves.size>0 || uploading.size>0});
+ platform.setEnabled(false);
+ operations=target.MarkdownCloudOperations.create({api,sessions,saves,uploading,reviewedVersions,sessionKey,clientFor,accountState,saveWorkspace,browse,message,refresh,
+ get activeClient(){return activeClient;},get currentFolder(){return currentFolder;},get workspace(){return workspace;},isHidden:()=>body.hidden || panel.offsetParent===null});
+ copyOperations=target.MarkdownCloudCopy.create({api,saves,clients:()=>workspace.enabled?[...sessions.values()]:[],connect:connectForm,refresh});
+ panel = document.createElement('section');
+ panel.id = 'nextcloud-panel';
+ panel.className = 'nextcloud-panel';
+ panel.setAttribute('aria-label', 'Cloud Workspace');
+ const heading = document.createElement('div');
+ heading.className = 'nextcloud-heading';
+ body = document.createElement('div');
+ body.id = 'nextcloud-body';
+ body.className = 'nextcloud-body';
+ disclosure = button('Cloud Workspace', async () => {
+ workspace.collapsed = !body.hidden; applyExpansion(); await saveWorkspace();
+ }, 'chevron-down');
+ disclosure.className = 'nextcloud-disclosure';
+ disclosure.setAttribute('aria-expanded', 'true');
+ disclosure.setAttribute('aria-controls', body.id);
+ disclosure.insertBefore(icon('cloud-upload'), disclosure.lastChild);
+ accountTools = document.createElement('div');
+ accountTools.className = 'nextcloud-tools';
+ heading.append(disclosure, accountTools);
+ contextMenu(heading, 'Cloud Workspace', () => [
+ { id:'add-account', icon:'lucide-plus', label:'Manage cloud connections', run:() => connectForm() },
+ ...(activeClient && sessions.has(sessionKey(activeClient)) ? [{id:'cloud-new',icon:'lucide-file-plus',label:'New Markdown file',disabled:!activeClient.capabilities.create,run:()=>newFile(activeClient,currentFolder || activeClient.root)}] : []),
+ { id:'hide-cloud', icon:'lucide-eye-off', label:'Hide from Explorer', run:async () => { workspace.hidden = true; await saveWorkspace(); updateVisibility(); api.notify('Cloud Workspace hidden. Show it again from Settings → Cloud connections.'); } }
+ ]);
+ status = document.createElement('div');
+ status.id = 'nextcloud-status';
+ status.setAttribute('role', 'status');
+ status.setAttribute('aria-live', 'polite');
+ content = document.createElement('div');
+ content.className = 'nextcloud-browser';
+ accountList = document.createElement('div');
+ accountList.className = 'cloud-accounts';
+ draftsView = document.createElement('div'); draftsView.className = 'cloud-local-drafts';
+ body.append(accountList, draftsView, status);
+ panel.append(heading, body);
+ panel.addEventListener('keydown', event => {
+ if (event.target.tagName === 'INPUT' && !event.ctrlKey && !event.metaKey) event.stopPropagation();
+ });
+ settingsModal = document.createElement('div'); settingsModal.id = 'cloud-settings-modal';
+ settingsModal.className = 'reset-modal-overlay modal-overlay'; settingsModal.style.display = 'none';
+ settingsModal.setAttribute('role','dialog'); settingsModal.setAttribute('aria-modal','true'); settingsModal.setAttribute('aria-hidden','true'); settingsModal.setAttribute('aria-labelledby','cloud-settings-title');
+ settingsModal.innerHTML = '
Cloud connections
Connect a cloud account to browse Markdown files and keep local recovery drafts.
';
+ document.body.append(settingsModal);
+ setupContent = settingsModal.querySelector('.cloud-setup-content'); setupStatus = settingsModal.querySelector('.cloud-setup-status'); settingsSummary = settingsModal.querySelector('.cloud-settings-accounts');
+ enabledToggle = settingsModal.querySelector('#cloud-enabled');
+ automaticToggle = settingsModal.querySelector('#cloud-auto-connect');
+ enabledToggle.addEventListener('change', () => {
+ enabledToggle.disabled=true;
+ void setCloudEnabled(enabledToggle.checked).catch(error => message(error.message,'error')).finally(() => { enabledToggle.disabled=false; updateVisibility(); });
+ });
+ automaticToggle.addEventListener('change', () => { workspace.autoConnect=automaticToggle.checked; void saveWorkspace().catch(error => message(error.message,'error')); });
+ visibilityToggle = settingsModal.querySelector('#cloud-sidebar-visible'); visibilityToggle.checked = true;
+ visibilityToggle.addEventListener('change', () => { workspace.hidden = !visibilityToggle.checked; void saveWorkspace().catch(error => message(error.message,'error')); updateVisibility(); });
+ settingsModal.querySelectorAll('.modal-close-btn,.reset-modal-cancel').forEach(control => control.addEventListener('click', closeSettings));
+ const settingsButton = document.getElementById('cloud-connections-button');
+ if (settingsButton) { settingsButton.hidden = false; settingsButton.addEventListener('click',connectForm); }
+ mount(); tools();
+ platform.onDisconnect(() => {
+ ++connectionEpoch; ++operation; sessions.clear(); platform.keepAlive(false);
+ renderAccounts(); api.statusChanged();
+ message('Cloud connection service stopped. Local drafts were kept; use Reconnect to continue.', 'error');
+ });
+ void restoreWorkspace();
+ }
+ function can(source,capability){try {const client=clientFor(source);if(capability==='delete')client.validateFile(providers.normalizeSource(source).fileRef);if(['delete','conditionalSave'].includes(capability) && client.readOnlyReason?.(providers.normalizeSource(source)))return false;return Boolean(client.capabilities[capability]);}catch(_){return false;}}
+ function report(operation) { return (...args) => void Promise.resolve().then(() => operation(...args)).catch(error => message(error.message, 'error')); }
+ target.MarkdownCloudUI = Object.freeze({ init, save, mount, refresh, newForDocument:report(newForDocument), remove:report(remove),
+ copyLocal:descriptor=>Promise.resolve().then(()=>copyOperations.open(descriptor)).catch(error=>{message(error.message,'error');api.notify(error.message,true);}),
+ check:report(checkActive), resolve:report(resolveActive), reload:report(reloadRemote),
+ readOnlyReason:source=>{try{return clientFor(source).readOnlyReason?.(providers.normalizeSource(source)) || '';}catch(_){return '';}},
+ canDelete:source=>can(source,'delete'), canCreate:source=>can(source,'create'), canSave:source=>can(source,'conditionalSave'),
+ canResolve: id => reviewedVersions.has(id), isBusy:id => saves.has(id), isUploading:id => uploading.has(id),
+ canAccess: source => can(source,'read'), available:() => Boolean(panel) });
+})(globalThis);
diff --git a/desktop-app/.gitignore b/desktop-app/.gitignore
index 5ffd532d..ce796fa2 100644
--- a/desktop-app/.gitignore
+++ b/desktop-app/.gitignore
@@ -34,3 +34,6 @@ resources/js/desktop-runtime-features.js
# Custom runtime source is separate from neu-managed .tmp downloads
/.native-runtime/
/.macos-runtime/
+# Native cloud extension build outputs
+/cloud-extension/build/
+/extensions/cloud/*.exe
diff --git a/desktop-app/build-cloud-extension.js b/desktop-app/build-cloud-extension.js
new file mode 100644
index 00000000..ba109221
--- /dev/null
+++ b/desktop-app/build-cloud-extension.js
@@ -0,0 +1,12 @@
+// Build the standalone Windows adapter; no Neutralino source checkout is required.
+const fs = require('node:fs');
+const path = require('node:path');
+const {spawnSync} = require('node:child_process');
+if(process.platform !== 'win32') throw new Error('The current credential adapter targets Windows.');
+const root=__dirname;
+const result=spawnSync('cmd.exe',['/d','/c',path.join(root,'cloud-extension/build-windows.cmd')],{stdio:'inherit',windowsHide:true});
+if(result.status!==0)throw new Error('Cloud extension build failed.');
+const binary=path.join(root,'cloud-extension/build/markdown-cloud.exe');
+fs.mkdirSync(path.join(root,'extensions/cloud'),{recursive:true});
+fs.copyFileSync(binary,path.join(root,'extensions/cloud/markdown-cloud.exe'));
+console.log('Cloud extension built and copied to extensions/cloud.');
diff --git a/desktop-app/build-cloud-windows.js b/desktop-app/build-cloud-windows.js
new file mode 100644
index 00000000..1f22c4a6
--- /dev/null
+++ b/desktop-app/build-cloud-windows.js
@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+// Uses the official pinned Neutralino release. No custom runtime is required.
+const fs = require('node:fs');
+const path = require('node:path');
+const {spawnSync} = require('node:child_process');
+if (process.platform !== 'win32') throw new Error('The cloud credential adapter currently supports Windows only.');
+for (const [script, ...args] of [['setup-binaries.js'], ['prepare.js'], ['build-cloud-extension.js'], ['build-standalone.js', 'win_x64']]) {
+ const result = spawnSync(process.execPath, [path.join(__dirname, script), ...args], {cwd:__dirname, stdio:'inherit', windowsHide:true});
+ if (result.error) throw result.error;
+ if (result.status !== 0) process.exit(result.status || 1);
+}
+const destination = path.join(__dirname, 'dist/markdown-viewer/extensions/cloud');
+fs.mkdirSync(destination, {recursive:true});
+fs.copyFileSync(path.join(__dirname,'extensions/cloud/markdown-cloud.exe'), path.join(destination,'markdown-cloud.exe'));
+fs.copyFileSync(path.join(__dirname,'cloud-extension/vendor/LICENSE.json'), path.join(destination,'LICENSE.json'));
+console.log('Keep the extensions directory alongside markdown-viewer-win_x64.exe when distributing this build.');
diff --git a/desktop-app/cloud-extension/CMakeLists.txt b/desktop-app/cloud-extension/CMakeLists.txt
new file mode 100644
index 00000000..c0233e23
--- /dev/null
+++ b/desktop-app/cloud-extension/CMakeLists.txt
@@ -0,0 +1,14 @@
+cmake_minimum_required(VERSION 3.16)
+project(MarkdownViewerCloudExtension LANGUAGES CXX)
+if(NOT WIN32)
+ message(FATAL_ERROR "This first adapter preserves the existing Windows credential backend. Other platforms need a keychain adapter.")
+endif()
+set(CMAKE_MSVC_RUNTIME_LIBRARY "MultiThreaded$<$:Debug>")
+add_executable(markdown-cloud WIN32 main.cpp providers.cpp credentials.cpp webdav-credentials.cpp)
+target_compile_features(markdown-cloud PRIVATE cxx_std_17)
+target_compile_definitions(markdown-cloud PRIVATE UNICODE _UNICODE WIN32_LEAN_AND_MEAN NOMINMAX)
+target_link_libraries(markdown-cloud PRIVATE winhttp advapi32)
+if(MSVC)
+ target_compile_options(markdown-cloud PRIVATE /W4 /EHsc /utf-8)
+ target_link_options(markdown-cloud PRIVATE /ENTRY:mainCRTStartup)
+endif()
diff --git a/desktop-app/cloud-extension/README.md b/desktop-app/cloud-extension/README.md
new file mode 100644
index 00000000..f1727df8
--- /dev/null
+++ b/desktop-app/cloud-extension/README.md
@@ -0,0 +1,11 @@
+# Cloud extension (Windows)
+
+This application-owned helper uses official Neutralino extension APIs. The cloud branch requires no modified Neutralino source or binary. The runtime is pinned to 6.10.0 because its command allowlist enforcement is required for on-demand launch.
+
+Run `npm run build:cloud` from `desktop-app` on Windows with Node 22–26, Visual Studio C++ tools, CMake and Ninja installed. Visual Studio is discovered with vswhere, or an existing developer shell is used. The build downloads the official pinned runtime, prepares offline resources, compiles the helper and packages the Windows app. Distribute the complete `desktop-app/dist/markdown-viewer` directory: the helper must remain at `extensions/cloud/markdown-cloud.exe` beside the main executable. The end user needs no Node or C++ installation. Standalone helper build: `node desktop-app/build-cloud-extension.js`.
+
+The extension ID has no startup command. The app launches the fixed helper path only when cloud is used, passes authenticated IPC bootstrap over stdin, and stops the helper on shutdown, disable or idle. The helper monitors IPC and the real parent process handle. It exposes bounded cloud operations, never a shell or listening proxy. TLS verification remains enabled; redirects, implicit Windows auth and automatic cookies are disabled.
+
+Nextcloud and generic WebDAV have separate validated credential namespaces in Windows Credential Manager. Remembering is optional; stored passwords never return to browser JavaScript. Conditional existing-file writes/deletes require a strong ETag; creation is create-only. The helper also validates mutation headers and destinations. Timeouts cannot silently retry an uncertain write. Local recovery remains separate from Vault.
+
+Trusted application JavaScript and the operating-system account remain security boundaries. An extension is not a sandbox against compromised application code. macOS/Linux cloud credential adapters are not implemented; their ordinary editor builds remain available. See [cloud connections](../../docs/cloud-connections.md) and the [self-hosted guide](../../self-hosted/README.md).
diff --git a/desktop-app/cloud-extension/build-windows.cmd b/desktop-app/cloud-extension/build-windows.cmd
new file mode 100644
index 00000000..c77c0ca6
--- /dev/null
+++ b/desktop-app/cloud-extension/build-windows.cmd
@@ -0,0 +1,16 @@
+@echo off
+setlocal
+if defined VSCMD_VER goto build
+set "VSWHERE=%ProgramFiles(x86)%\Microsoft Visual Studio\Installer\vswhere.exe"
+if not exist "%VSWHERE%" (
+ echo Install Visual Studio C++ build tools, CMake and Ninja, or use a C++ developer shell.
+ exit /b 1
+)
+for /f "usebackq tokens=*" %%i in (`"%VSWHERE%" -latest -products * -requires Microsoft.VisualStudio.Component.VC.Tools.x86.x64 -property installationPath`) do set "CLOUD_VS=%%i"
+if not defined CLOUD_VS exit /b 1
+call "%CLOUD_VS%\VC\Auxiliary\Build\vcvars64.bat" >nul
+if errorlevel 1 exit /b 1
+:build
+cmake -S "%~dp0." -B "%~dp0build" -G Ninja -DCMAKE_BUILD_TYPE=Release
+if errorlevel 1 exit /b 1
+cmake --build "%~dp0build" --parallel 2
diff --git a/desktop-app/cloud-extension/credentials.cpp b/desktop-app/cloud-extension/credentials.cpp
new file mode 100644
index 00000000..f3a3ea8b
--- /dev/null
+++ b/desktop-app/cloud-extension/credentials.cpp
@@ -0,0 +1,130 @@
+#include "credentials.h"
+#include
+#include
+#include
+#include
+#ifdef _WIN32
+#include
+#include
+#endif
+using json = nlohmann::json;
+namespace nextcloud_credentials {
+static const std::wstring prefix = L"MarkdownViewer.Nextcloud.v1/";
+static bool validId(const std::string& id) { return std::regex_match(id, std::regex("[a-f0-9]{64}")); }
+static bool text(const json& a, const char* field, size_t maximum) {
+ return a.contains(field) && a[field].is_string() && !a[field].get_ref().empty() &&
+ a[field].get_ref().size() <= maximum && a[field].get_ref().find('\0') == std::string::npos;
+}
+static bool valid(const json& a) {
+ if(!a.is_object() || !text(a,"id",64) || !validId(a["id"]) || !text(a,"server",2048) ||
+ !text(a,"userId",512) || !text(a,"loginName",512) || !text(a,"appPassword",4096)) return false;
+ const std::string server = a["server"];
+ if(!std::regex_match(server, std::regex(R"((https://[^/@?#\\\s]+|http://(127\.0\.0\.1|localhost)(:[0-9]+)?)(/[^?#\\\s]*)?)")) || server.back() == '/') return false;
+ const std::string user = a["userId"];
+ return user != "." && user != ".." && user.find_first_of("/\\\r\n") == std::string::npos && a["loginName"].get().find(':') == std::string::npos;
+}
+static json metadata(const json& a) { return {{"id",a["id"]},{"server",a["server"]},{"userId",a["userId"]}}; }
+static json error(const char* message) { return {{"error", {{"code","NEXTCLOUD_CREDENTIALS"},{"message",message}}}}; }
+static std::wstring target(const std::string& id) { return prefix + std::wstring(id.begin(), id.end()); }
+bool read(const std::string& id, json& account) {
+#ifdef _WIN32
+ if(!validId(id)) return false;
+ PCREDENTIALW credential = nullptr;
+ if(!CredReadW(target(id).c_str(), CRED_TYPE_GENERIC, 0, &credential)) return false;
+ try {
+ account = json::parse(credential->CredentialBlob, credential->CredentialBlob + credential->CredentialBlobSize);
+ } catch(...) { CredFree(credential); return false; }
+ CredFree(credential);
+ return valid(account) && account["id"] == id;
+#else
+ return false;
+#endif
+}
+static std::string encode(const std::string& value) {
+ std::ostringstream out;
+ for(unsigned char c: value) {
+ if((c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z') || (c >= '0' && c <= '9') || c == '-' || c == '_' || c == '.' || c == '~' || c == '!' || c == '\'' || c == '(' || c == ')' || c == '*') out << c;
+ else out << '%' << std::uppercase << std::hex << std::setw(2) << std::setfill('0') << static_cast(c);
+ }
+ return out.str();
+}
+bool permits(const json& a, const std::string& url, const std::string& method) {
+ const std::string server = a["server"];
+ if(method == "GET" && url == server + "/ocs/v2.php/cloud/user?format=json") return true;
+ const std::string root = server + "/remote.php/dav/files/" + encode(a["userId"]) + "/";
+ // Native URL scope supplements JS validation. Never forward stored credentials
+ // to another origin, user-info URL, account root, redirect, or traversal path.
+ if(url.rfind(root,0) != 0 || (method != "GET" && method != "PUT" && method != "PROPFIND" && method != "DELETE" && method != "MKCOL")) return false;
+ auto suffix = url.substr(root.size());
+ if(method=="MKCOL" && (suffix.empty() || suffix.back()!='/'))return false;
+ if(suffix.find_first_of("?#\\\r\n") != std::string::npos) return false;
+ std::string decoded;
+ for(size_t i=0; i= suffix.size() || !std::isxdigit(static_cast(suffix[i+1])) || !std::isxdigit(static_cast(suffix[i+2]))) return false;
+ const char c = static_cast(std::stoi(suffix.substr(i+1,2),nullptr,16));
+ if(c == '/' || c == '\\' || static_cast(c) < 32) return false;
+ decoded += c; i += 2;
+ } else decoded += suffix[i];
+ }
+ if(method=="MKCOL" && decoded.find('%')!=std::string::npos)return false;
+ if(method=="DELETE") {
+ std::string lower=decoded;
+ for(char& c:lower) if(c>='A' && c<='Z') c+='a'-'A';
+ if(lower.size()<=3 || lower.substr(lower.size()-3)!=".md") return false;
+ }
+ std::istringstream parts(decoded); std::string part;
+ while(std::getline(parts,part,'/')) if(part == "." || part == "..") return false;
+ return true;
+}
+namespace controllers {
+json store(const json& input) {
+#ifdef _WIN32
+ if(!valid(input)) return error("Invalid Nextcloud account.");
+ const json account = {{"id",input["id"]},{"server",input["server"]},{"userId",input["userId"]},{"loginName",input["loginName"]},{"appPassword",input["appPassword"]}};
+ auto serialized = account.dump();
+ if(serialized.size() > CRED_MAX_CREDENTIAL_BLOB_SIZE) return error("The account exceeds the Windows credential size limit.");
+ std::wstring name = target(account["id"]);
+ CREDENTIALW credential = {};
+ credential.Type = CRED_TYPE_GENERIC;
+ credential.TargetName = name.data();
+ credential.CredentialBlobSize = static_cast(serialized.size());
+ credential.CredentialBlob = reinterpret_cast(serialized.data());
+ credential.Persist = CRED_PERSIST_LOCAL_MACHINE;
+ const bool ok = CredWriteW(&credential,0);
+ SecureZeroMemory(serialized.data(),serialized.size());
+ if(!ok) return error("Windows could not securely remember this Nextcloud account.");
+ return {{"success",true},{"returnValue",metadata(account)}};
+#else
+ return error("Secure Nextcloud accounts are available on Windows only.");
+#endif
+}
+json list(const json&) {
+ json result = json::array();
+#ifdef _WIN32
+ DWORD count = 0; PCREDENTIALW* credentials = nullptr;
+ if(!CredEnumerateW((prefix + L"*").c_str(),0,&count,&credentials)) {
+ if(GetLastError() == ERROR_NOT_FOUND) return {{"success",true},{"returnValue",result}};
+ return error("Windows could not read remembered Nextcloud accounts.");
+ }
+ for(DWORD i=0; iCredentialBlob,credentials[i]->CredentialBlob + credentials[i]->CredentialBlobSize);
+ if(valid(account) && target(account["id"]) == credentials[i]->TargetName) result.push_back(metadata(account));
+ } catch(...) { }
+ }
+ CredFree(credentials);
+#endif
+ return {{"success",true},{"returnValue",result}};
+}
+json forget(const json& input) {
+#ifdef _WIN32
+ if(!text(input,"id",64) || !validId(input["id"])) return error("Invalid Nextcloud account ID.");
+ if(!CredDeleteW(target(input["id"]).c_str(),CRED_TYPE_GENERIC,0) && GetLastError() != ERROR_NOT_FOUND) return error("Windows could not forget this account.");
+ return {{"success",true},{"returnValue",true}};
+#else
+ return error("Secure Nextcloud accounts are available on Windows only.");
+#endif
+}
+}
+}
diff --git a/desktop-app/cloud-extension/credentials.h b/desktop-app/cloud-extension/credentials.h
new file mode 100644
index 00000000..6accb453
--- /dev/null
+++ b/desktop-app/cloud-extension/credentials.h
@@ -0,0 +1,12 @@
+#pragma once
+#include "vendor/json.hpp"
+#include
+namespace nextcloud_credentials {
+bool read(const std::string&, nlohmann::json&);
+bool permits(const nlohmann::json&, const std::string&, const std::string&);
+namespace controllers {
+nlohmann::json store(const nlohmann::json&);
+nlohmann::json list(const nlohmann::json&);
+nlohmann::json forget(const nlohmann::json&);
+}
+}
diff --git a/desktop-app/cloud-extension/main.cpp b/desktop-app/cloud-extension/main.cpp
new file mode 100644
index 00000000..c15ead2a
--- /dev/null
+++ b/desktop-app/cloud-extension/main.cpp
@@ -0,0 +1,299 @@
+// Windows adapter for the documented Neutralino extension protocol.
+// No Neutralino headers, custom controllers, or runtime source are required.
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include
+#include "providers.h"
+using json = nlohmann::json;
+static constexpr size_t LIMIT = 20 * 1024 * 1024;
+static constexpr size_t IPC_LIMIT = 128 * 1024 * 1024;
+struct Handle {
+ HINTERNET value = nullptr;
+ explicit Handle(HINTERNET h = nullptr): value(h) {}
+ ~Handle() { if(value) WinHttpCloseHandle(value); }
+ Handle(const Handle&) = delete;
+ operator HINTERNET() const { return value; }
+};
+static void require(bool condition) { if(!condition) throw std::runtime_error("Cloud operation refused or unavailable."); }
+static std::wstring wide(const std::string& value) {
+ if(value.empty()) return {};
+ int length = MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS, value.data(), (int)value.size(), nullptr, 0);
+ require(length > 0);
+ std::wstring result(length, L'\0');
+ require(MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS, value.data(), (int)value.size(), result.data(), length) == length);
+ return result;
+}
+static std::string utf8(const std::wstring& value) {
+ if(value.empty()) return {};
+ int length = WideCharToMultiByte(CP_UTF8, WC_ERR_INVALID_CHARS, value.data(), (int)value.size(), nullptr, 0, nullptr, nullptr);
+ require(length > 0);
+ std::string result(length, '\0');
+ require(WideCharToMultiByte(CP_UTF8, WC_ERR_INVALID_CHARS, value.data(), (int)value.size(), result.data(), length, nullptr, nullptr) == length);
+ return result;
+}
+static bool clean(const std::string& value) {
+ for(unsigned char c:value) if(c < 32 || c == 127) return false;
+ return true;
+}
+static std::string lower(std::string value) {
+ for(char& c:value) if(c >= 'A' && c <= 'Z') c += 'a'-'A';
+ return value;
+}
+static std::string basic(const std::string& value) {
+ static const char* table="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+ std::string result;
+ for(size_t i=0;i>2]; result += table[((a&3)<<4)|(b>>4)];
+ result += i+1>6)]:'=';
+ result += i+2 buffer;
+ std::chrono::steady_clock::time_point deadline;
+ static void CALLBACK callback(HINTERNET, DWORD_PTR context, DWORD status, LPVOID info, DWORD count) {
+ auto* self=reinterpret_cast(context);
+ if(!self)return;
+ std::lock_guard guard(self->mutex);
+ if(status==WINHTTP_CALLBACK_STATUS_HANDLE_CLOSING)self->closed=true;
+ else if(status==WINHTTP_CALLBACK_STATUS_REQUEST_ERROR)self->error=static_cast(info)->dwError;
+ else if(status==WINHTTP_CALLBACK_STATUS_SENDREQUEST_COMPLETE || status==WINHTTP_CALLBACK_STATUS_HEADERS_AVAILABLE || status==WINHTTP_CALLBACK_STATUS_READ_COMPLETE) {
+ self->status=status;self->length=count;
+ }
+ self->changed.notify_all();
+ }
+ AsyncRequest(HINTERNET connection,const std::wstring& method,const std::wstring& path,bool secure,std::chrono::steady_clock::time_point end):deadline(end) {
+ handle=WinHttpOpenRequest(connection,method.c_str(),path.c_str(),nullptr,WINHTTP_NO_REFERER,WINHTTP_DEFAULT_ACCEPT_TYPES,secure?WINHTTP_FLAG_SECURE:0);
+ require(handle);
+ DWORD_PTR context=reinterpret_cast(this);
+ if(!WinHttpSetOption(handle,WINHTTP_OPTION_CONTEXT_VALUE,&context,sizeof(context)) ||
+ WinHttpSetStatusCallback(handle,callback,WINHTTP_CALLBACK_FLAG_ALL_COMPLETIONS|WINHTTP_CALLBACK_FLAG_HANDLES,0)==WINHTTP_INVALID_STATUS_CALLBACK) {
+ WinHttpCloseHandle(handle);handle=nullptr;require(false);
+ }
+ }
+ ~AsyncRequest() {
+ if(!handle)return;
+ WinHttpCloseHandle(handle);handle=nullptr;
+ std::unique_lock guard(mutex);
+ changed.wait(guard,[&]{return closed;});
+ }
+ operator HINTERNET() const {return handle;}
+ void prepare() {
+ require(std::chrono::steady_clock::now() guard(mutex);status=error=length=0;
+ }
+ DWORD wait(BOOL result,DWORD expected) {
+ require(result || GetLastError()==ERROR_IO_PENDING);
+ std::unique_lock guard(mutex);
+ require(changed.wait_until(guard,deadline,[&]{return error || status==expected;}));
+ require(!error && std::chrono::steady_clock::now()=100 && timeout<=35000);
+ const auto deadline=std::chrono::steady_clock::now()+std::chrono::milliseconds(timeout);
+ const std::string url=input.at("url").get(), method=input.at("method").get();
+ cloud_providers::validateRequest(input,url,method);
+ require(url.size() <= 8192 && clean(url) && url.find_first_of("\\#") == std::string::npos);
+ require(method=="GET" || method=="POST" || method=="PUT" || method=="PROPFIND" || method=="OPTIONS" || method=="DELETE" || method=="MKCOL");
+ require(input.contains("maxBytes") && input["maxBytes"].is_number_integer());
+ const auto maximum=input["maxBytes"].get(); require(maximum>0 && maximum<=LIMIT);
+ const auto wurl=wide(url); URL_COMPONENTS parts{};parts.dwStructSize=sizeof(parts);
+ parts.dwHostNameLength=parts.dwUrlPathLength=parts.dwExtraInfoLength=parts.dwUserNameLength=parts.dwPasswordLength=(DWORD)-1;
+ require(WinHttpCrackUrl(wurl.c_str(), (DWORD)wurl.size(), 0, &parts));
+ std::wstring host(parts.lpszHostName,parts.dwHostNameLength);
+ require(parts.dwUserNameLength==0 && parts.dwPasswordLength==0);
+ require(parts.nScheme==INTERNET_SCHEME_HTTPS || (parts.nScheme==INTERNET_SCHEME_HTTP && (host==L"localhost" || host==L"127.0.0.1" || host==L"[::1]" || host==L"::1")));
+ std::wstring path=parts.dwUrlPathLength?std::wstring(parts.lpszUrlPath,parts.dwUrlPathLength):L"/";
+ if(parts.dwExtraInfoLength) path.append(parts.lpszExtraInfo,parts.dwExtraInfoLength);
+ json auth=input.value("auth", json::object());
+ json account;
+ if(auth.contains("credentialId")) {
+ require(auth.size()==1 && auth["credentialId"].is_string());
+ if(!cloud_providers::authorize(input,url,method,account))
+ return {{"error",{{"code",input.value("providerId",std::string("nextcloud"))=="webdav"?"WEBDAV_CREDENTIALS":"NEXTCLOUD_CREDENTIALS"},{"message","Remembered access is unavailable for this account."}}}};
+ auth=std::move(account);
+ }
+ const std::string body=input.value("body",std::string());require(body.size()<=LIMIT);
+ auto headers=input.value("headers",json::object()); require(headers.is_object() && headers.size()<=32);
+ const std::string contentType=input.value("contentType",std::string("application/json"));require(clean(contentType) && contentType.size()<=256);
+ std::string headerText=method=="MKCOL" ? "" : "Content-Type: "+contentType+"\r\n";
+ std::set headerNames;
+ bool conditional=false, createOnly=false;
+ for(auto it=headers.begin();it!=headers.end();++it) {
+ const auto name=it.key(), value=it.value().get(), key=lower(name);
+ require(!name.empty() && name.find_first_not_of("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_")==std::string::npos && clean(value) && value.size()<=8192);
+ require(key!="authorization" && key!="proxy-authorization" && key!="host" && key!="content-length" && key!="transfer-encoding" && key!="connection" && key!="cookie" && key!="content-type");
+ require(headerNames.insert(key).second);
+ if(key=="if-match") {
+ require(value.size()>2 && value.front()=='"' && value.back()=='"' && value.substr(1,value.size()-2).find('"')==std::string::npos);
+ conditional=true;
+ }
+ if(key=="if-none-match") { require(value=="*"); createOnly=true; }
+ headerText+=name+": "+value+"\r\n";
+ }
+ if(method=="PUT") require(conditional != createOnly);
+ if(method=="DELETE") require(conditional && !createOnly && body.empty());
+ if(method=="MKCOL") require(createOnly && !conditional && body.empty() && parts.dwExtraInfoLength==0 && !path.empty() && path.back()==L'/');
+ if((createOnly && method!="MKCOL") || method=="DELETE") {
+ const auto targetPath=lower(utf8(path));
+ require(parts.dwExtraInfoLength==0 && targetPath.size()>3 && targetPath.substr(targetPath.size()-3)==".md");
+ }
+ if(!auth.empty()) {
+ const auto username=auth.at("username").get(), password=auth.at("password").get();
+ require(!username.empty() && username.size()<=512 && username.find(':')==std::string::npos && clean(username) && !password.empty() && password.size()<=4096 && clean(password));
+ headerText+="Authorization: Basic "+basic(username+":"+password)+"\r\n";
+ }
+ Handle session(WinHttpOpen(L"MarkdownViewerCloud/1",WINHTTP_ACCESS_TYPE_DEFAULT_PROXY,WINHTTP_NO_PROXY_NAME,WINHTTP_NO_PROXY_BYPASS,WINHTTP_FLAG_ASYNC)); require(session.value);
+ require(WinHttpSetTimeouts(session,35000,35000,35000,35000));
+ Handle connection(WinHttpConnect(session,host.c_str(),parts.nPort,0));require(connection.value);
+ const auto wheaders=wide(headerText);
+ AsyncRequest operation(connection,wide(method),path,parts.nScheme==INTERNET_SCHEME_HTTPS,deadline);
+ DWORD redirectPolicy=WINHTTP_OPTION_REDIRECT_POLICY_NEVER;
+ require(WinHttpSetOption(operation,WINHTTP_OPTION_REDIRECT_POLICY,&redirectPolicy,sizeof(redirectPolicy)));
+ DWORD disabled=WINHTTP_DISABLE_COOKIES|WINHTTP_DISABLE_AUTHENTICATION;
+ require(WinHttpSetOption(operation,WINHTTP_OPTION_DISABLE_FEATURE,&disabled,sizeof(disabled)));
+ operation.prepare();
+ operation.wait(WinHttpSendRequest(operation,wheaders.c_str(),(DWORD)wheaders.size(),body.empty()?WINHTTP_NO_REQUEST_DATA:(LPVOID)body.data(),(DWORD)body.size(),(DWORD)body.size(),reinterpret_cast(&operation)),WINHTTP_CALLBACK_STATUS_SENDREQUEST_COMPLETE);
+ operation.prepare();
+ operation.wait(WinHttpReceiveResponse(operation,nullptr),WINHTTP_CALLBACK_STATUS_HEADERS_AVAILABLE);
+ DWORD status=0,size=sizeof(status);
+ require(WinHttpQueryHeaders(operation,WINHTTP_QUERY_STATUS_CODE|WINHTTP_QUERY_FLAG_NUMBER,WINHTTP_HEADER_NAME_BY_INDEX,&status,&size,WINHTTP_NO_HEADER_INDEX));
+ DWORD headerSize=0;
+ WinHttpQueryHeaders(operation,WINHTTP_QUERY_RAW_HEADERS_CRLF,WINHTTP_HEADER_NAME_BY_INDEX,nullptr,&headerSize,WINHTTP_NO_HEADER_INDEX);
+ require(headerSize>0 && headerSize<=256*1024);
+ std::vector raw(headerSize/sizeof(wchar_t)+1);
+ require(WinHttpQueryHeaders(operation,WINHTTP_QUERY_RAW_HEADERS_CRLF,WINHTTP_HEADER_NAME_BY_INDEX,raw.data(),&headerSize,WINHTTP_NO_HEADER_INDEX));
+ const auto responseHeaders=utf8(raw.data());json pairs=json::array();
+ size_t start=responseHeaders.find("\r\n");
+ while(start!=std::string::npos) {
+ start+=2;const auto end=responseHeaders.find("\r\n",start);if(end==std::string::npos || end==start) break;
+ const auto colon=responseHeaders.find(':',start);
+ if(colon!=std::string::npos && colon();
+ const auto input=call.value("input",json::object());
+ if(operation=="request") return request(input);
+ if(operation=="accountStore" || operation=="accountList" || operation=="accountForget") return cloud_providers::accounts(operation,input);
+ if(operation=="capabilities") return {{"returnValue",{{"version",5},{"providerIds",json::array({"nextcloud","webdav"})},{"secureAccounts",true},{"conditionalWrites",true},{"requestDeadlineMs",35000}}}};
+ throw std::runtime_error("Unsupported cloud operation.");
+}
+int main() {
+ try {
+ // Neutralino sends bootstrap JSON through stdin; never persist or log it.
+ std::string bootstrap;char character;
+ while(std::cin.get(character)) {if(character=='\n')break;require(bootstrap.size()<16384);bootstrap+=character;}
+ auto config=json::parse(bootstrap);
+ require(config.at("nlExtensionId")=="com.markdownviewer.cloud");
+ const auto port=std::stoi(config.at("nlPort").get());require(port>0 && port<=65535);
+ const auto token=config.at("nlToken").get(), connectToken=config.at("nlConnectToken").get();
+ require(clean(connectToken) && connectToken.find_first_not_of("abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_")==std::string::npos);
+ Handle session(WinHttpOpen(L"MarkdownViewerExtension/1",WINHTTP_ACCESS_TYPE_NO_PROXY,WINHTTP_NO_PROXY_NAME,WINHTTP_NO_PROXY_BYPASS,0));require(session.value);
+ Handle connection(WinHttpConnect(session,L"127.0.0.1",(INTERNET_PORT)port,0));require(connection.value);
+ const auto path=wide("/?extensionId=com.markdownviewer.cloud&connectToken="+connectToken);
+ Handle upgrade(WinHttpOpenRequest(connection,L"GET",path.c_str(),nullptr,WINHTTP_NO_REFERER,WINHTTP_DEFAULT_ACCEPT_TYPES,0));require(upgrade.value);
+ require(WinHttpSetOption(upgrade,WINHTTP_OPTION_UPGRADE_TO_WEB_SOCKET,nullptr,0));
+ require(WinHttpSendRequest(upgrade,WINHTTP_NO_ADDITIONAL_HEADERS,0,WINHTTP_NO_REQUEST_DATA,0,0,0) && WinHttpReceiveResponse(upgrade,nullptr));
+ Handle socket(WinHttpWebSocketCompleteUpgrade(upgrade,0));require(socket.value);
+ // An inherited socket can survive its original server process on Windows.
+ // Obtain the actual runtime PID over authenticated IPC, not the cmd.exe
+ // launcher parent, and hold a process handle so PID reuse cannot fool us.
+ const std::string hostRequest=json({{"id","cloudHostProcess"},{"method","app.getProcessId"},{"accessToken",token},{"data",json::object()}}).dump();
+ require(WinHttpWebSocketSend(socket,WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE,(PVOID)hostRequest.data(),(DWORD)hostRequest.size())==NO_ERROR);
+ bool monitoringHost=false;
+ std::mutex sendMutex;std::atomic active{0};std::atomic sequence{0};
+ std::string message;char buffer[16384];
+ for(;;) {
+ DWORD received=0;WINHTTP_WEB_SOCKET_BUFFER_TYPE type;
+ if(WinHttpWebSocketReceive(socket,buffer,sizeof(buffer),&received,&type)!=NO_ERROR || type==WINHTTP_WEB_SOCKET_CLOSE_BUFFER_TYPE) std::exit(0);
+ require(type==WINHTTP_WEB_SOCKET_UTF8_FRAGMENT_BUFFER_TYPE || type==WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE);
+ require(message.size()+received<=IPC_LIMIT);message.append(buffer,received);
+ if(type!=WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE) continue;
+ auto envelope=json::parse(message);message.clear();
+ if(envelope.value("id",std::string())=="cloudHostProcess") {
+ require(!monitoringHost);
+ const auto& response=envelope.at("data");
+ require(response.value("success",false) && response.contains("returnValue") && response["returnValue"].is_number_integer());
+ const auto pid=response["returnValue"].get();
+ require(pid>0 && pid<=MAXDWORD && pid!=GetCurrentProcessId());
+ HANDLE hostProcess=OpenProcess(SYNCHRONIZE,FALSE,(DWORD)pid);
+ if(!hostProcess) std::exit(0); // Host already gone: never become an orphan.
+ monitoringHost=true;
+ std::thread([hostProcess] {
+ const auto result=WaitForSingleObject(hostProcess,INFINITE);
+ CloseHandle(hostProcess);
+ // No logging, credential deletion or remote request on termination.
+ std::exit(result==WAIT_OBJECT_0?0:1);
+ }).detach();
+ continue;
+ }
+ if(envelope.value("event",std::string())!="cloudRequest") continue;
+ const auto call=envelope.at("data");
+ const auto id=call.at("id").get();require(id.size()<=100 && clean(id));
+ // Bound concurrent native work; errors never include request URLs, bodies or credentials.
+ if(active.load()>=8 || (call.value("operation",std::string())=="shutdown" && active.load()!=0)) {
+ json reply={{"id",id},{"error",{{"code","BUSY"},{"message","Cloud service is busy. Try again shortly."}}}};
+ const auto wire=json({{"id",std::to_string(++sequence)},{"method","app.broadcast"},{"accessToken",token},{"data",{{"event","cloudResponse"},{"data",reply}}}}).dump();
+ std::lock_guard guard(sendMutex);
+ require(WinHttpWebSocketSend(socket,WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE,(PVOID)wire.data(),(DWORD)wire.size())==NO_ERROR);
+ continue;
+ }
+ if(call.value("operation",std::string())=="shutdown") {
+ require(active.load()==0);
+ const auto wire=json({{"id",std::to_string(++sequence)},{"method","app.broadcast"},{"accessToken",token},{"data",{{"event","cloudResponse"},{"data",{{"id",id},{"returnValue",true}}}}}}).dump();
+ {std::lock_guard guard(sendMutex);WinHttpWebSocketSend(socket,WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE,(PVOID)wire.data(),(DWORD)wire.size());}
+ std::exit(0);
+ }
+ ++active;
+ std::thread([&,call,id] {
+ json reply;
+ try { reply=dispatch(call); }
+ catch(...) {reply={{"error",{{"code","CLOUD_EXTENSION"},{"message","Cloud operation failed. Your local draft was kept."}}}};}
+ reply["id"]=id;
+ json outgoing={{"id",std::to_string(++sequence)},{"method","app.broadcast"},{"accessToken",token},{"data",{{"event","cloudResponse"},{"data",reply}}}};
+ const auto wire=outgoing.dump();
+ --active;
+ {std::lock_guard guard(sendMutex);if(WinHttpWebSocketSend(socket,WINHTTP_WEB_SOCKET_UTF8_MESSAGE_BUFFER_TYPE,(PVOID)wire.data(),(DWORD)wire.size())!=NO_ERROR) std::exit(0);}
+ }).detach();
+ }
+ } catch(...) { return 1; }
+}
diff --git a/desktop-app/cloud-extension/providers.cpp b/desktop-app/cloud-extension/providers.cpp
new file mode 100644
index 00000000..64a816ce
--- /dev/null
+++ b/desktop-app/cloud-extension/providers.cpp
@@ -0,0 +1,57 @@
+// Registered credential policies. User metadata cannot register a provider.
+#include "providers.h"
+#include "credentials.h"
+#include "webdav-credentials.h"
+#include
+namespace cloud_providers {
+using json=nlohmann::json;
+void validate(const json& input) {
+ if(!input.is_object() || (input.contains("providerId") && (!input["providerId"].is_string() || (input["providerId"]!="nextcloud" && input["providerId"]!="webdav"))))
+ throw std::runtime_error("Unsupported cloud provider. Local drafts were kept.");
+}
+void validateRequest(const json& input,const std::string& url,const std::string& method) {
+ validate(input);
+ if(input.value("providerId",std::string("nextcloud"))=="webdav" && (!input.contains("root") || !input["root"].is_string() || !webdav_credentials::permits(input["root"],url,method)))
+ throw std::runtime_error("The request is outside this WebDAV connection.");
+}
+bool authorize(const json& input, const std::string& url, const std::string& method, json& account) {
+ validate(input);
+ const auto& auth=input.at("auth");
+ json record;
+ if(input.value("providerId",std::string("nextcloud"))=="webdav") {
+ if(!webdav_credentials::read(auth.at("credentialId"),record) || input.value("root",std::string())!=record["root"] || !webdav_credentials::permits(record["root"],url,method))return false;
+ } else if(!nextcloud_credentials::read(auth.at("credentialId"),record) || !nextcloud_credentials::permits(record,url,method))return false;
+ // Translate the provider-specific vault record at this boundary only.
+ account={{"username",record["loginName"]},{"password",record["appPassword"]}};
+ return true;
+}
+static json tagged(json result) {
+ if(result.contains("returnValue")) {
+ auto& value=result["returnValue"];
+ if(value.is_array())for(auto& item:value)item["providerId"]="nextcloud";
+ else if(value.is_object())value["providerId"]="nextcloud";
+ }
+ return result;
+}
+json accounts(const std::string& operation,const json& input) {
+ validate(input);
+ const auto provider=input.value("providerId",std::string("nextcloud"));
+ if(provider=="webdav") {
+ if(operation=="accountStore")return webdav_credentials::controllers::store(input);
+ if(operation=="accountList")return webdav_credentials::controllers::list(input);
+ if(operation=="accountForget")return webdav_credentials::controllers::forget(input);
+ }
+ if(operation=="accountList" && !input.contains("providerId")) {
+ auto nextcloud=tagged(nextcloud_credentials::controllers::list(input));
+ auto webdav=webdav_credentials::controllers::list(input);
+ if(nextcloud.contains("error"))return nextcloud;
+ if(webdav.contains("error"))return webdav;
+ for(const auto& account:webdav["returnValue"])nextcloud["returnValue"].push_back(account);
+ return nextcloud;
+ }
+ if(operation=="accountStore")return tagged(nextcloud_credentials::controllers::store(input));
+ if(operation=="accountList")return tagged(nextcloud_credentials::controllers::list(input));
+ if(operation=="accountForget")return nextcloud_credentials::controllers::forget(input);
+ throw std::runtime_error("Unsupported cloud account operation.");
+}
+}
diff --git a/desktop-app/cloud-extension/providers.h b/desktop-app/cloud-extension/providers.h
new file mode 100644
index 00000000..edcc82e6
--- /dev/null
+++ b/desktop-app/cloud-extension/providers.h
@@ -0,0 +1,10 @@
+#pragma once
+#include "vendor/json.hpp"
+#include
+namespace cloud_providers {
+// Missing provider IDs are accepted only for the legacy Nextcloud IPC contract.
+void validate(const nlohmann::json&);
+void validateRequest(const nlohmann::json&,const std::string&,const std::string&);
+bool authorize(const nlohmann::json&, const std::string&, const std::string&, nlohmann::json&);
+nlohmann::json accounts(const std::string&, const nlohmann::json&);
+}
diff --git a/desktop-app/cloud-extension/vendor/LICENSE.json b/desktop-app/cloud-extension/vendor/LICENSE.json
new file mode 100644
index 00000000..70c6af65
--- /dev/null
+++ b/desktop-app/cloud-extension/vendor/LICENSE.json
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2013-2022 Niels Lohmann
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/desktop-app/cloud-extension/vendor/json.hpp b/desktop-app/cloud-extension/vendor/json.hpp
new file mode 100644
index 00000000..4d1a37ad
--- /dev/null
+++ b/desktop-app/cloud-extension/vendor/json.hpp
@@ -0,0 +1,24596 @@
+// __ _____ _____ _____
+// __| | __| | | | JSON for Modern C++
+// | | |__ | | | | | | version 3.11.2
+// |_____|_____|_____|_|___| https://github.com/nlohmann/json
+//
+// SPDX-FileCopyrightText: 2013-2022 Niels Lohmann
+// SPDX-License-Identifier: MIT
+
+/****************************************************************************\
+ * Note on documentation: The source files contain links to the online *
+ * documentation of the public API at https://json.nlohmann.me. This URL *
+ * contains the most recent documentation and should also be applicable to *
+ * previous versions; documentation for deprecated functions is not *
+ * removed, but marked deprecated. See "Generate documentation" section in *
+ * file docs/README.md. *
+\****************************************************************************/
+
+#ifndef INCLUDE_NLOHMANN_JSON_HPP_
+#define INCLUDE_NLOHMANN_JSON_HPP_
+
+#include // all_of, find, for_each
+#include // nullptr_t, ptrdiff_t, size_t
+#include // hash, less
+#include // initializer_list
+#ifndef JSON_NO_IO
+ #include // istream, ostream
+#endif // JSON_NO_IO
+#include // random_access_iterator_tag
+#include // unique_ptr
+#include // accumulate
+#include // string, stoi, to_string
+#include // declval, forward, move, pair, swap
+#include // vector
+
+// #include
+// __ _____ _____ _____
+// __| | __| | | | JSON for Modern C++
+// | | |__ | | | | | | version 3.11.2
+// |_____|_____|_____|_|___| https://github.com/nlohmann/json
+//
+// SPDX-FileCopyrightText: 2013-2022 Niels Lohmann
+// SPDX-License-Identifier: MIT
+
+
+
+#include
+
+// #include
+// __ _____ _____ _____
+// __| | __| | | | JSON for Modern C++
+// | | |__ | | | | | | version 3.11.2
+// |_____|_____|_____|_|___| https://github.com/nlohmann/json
+//
+// SPDX-FileCopyrightText: 2013-2022 Niels Lohmann
+// SPDX-License-Identifier: MIT
+
+
+
+// This file contains all macro definitions affecting or depending on the ABI
+
+#ifndef JSON_SKIP_LIBRARY_VERSION_CHECK
+ #if defined(NLOHMANN_JSON_VERSION_MAJOR) && defined(NLOHMANN_JSON_VERSION_MINOR) && defined(NLOHMANN_JSON_VERSION_PATCH)
+ #if NLOHMANN_JSON_VERSION_MAJOR != 3 || NLOHMANN_JSON_VERSION_MINOR != 11 || NLOHMANN_JSON_VERSION_PATCH != 2
+ #warning "Already included a different version of the library!"
+ #endif
+ #endif
+#endif
+
+#define NLOHMANN_JSON_VERSION_MAJOR 3 // NOLINT(modernize-macro-to-enum)
+#define NLOHMANN_JSON_VERSION_MINOR 11 // NOLINT(modernize-macro-to-enum)
+#define NLOHMANN_JSON_VERSION_PATCH 2 // NOLINT(modernize-macro-to-enum)
+
+#ifndef JSON_DIAGNOSTICS
+ #define JSON_DIAGNOSTICS 0
+#endif
+
+#ifndef JSON_USE_LEGACY_DISCARDED_VALUE_COMPARISON
+ #define JSON_USE_LEGACY_DISCARDED_VALUE_COMPARISON 0
+#endif
+
+#if JSON_DIAGNOSTICS
+ #define NLOHMANN_JSON_ABI_TAG_DIAGNOSTICS _diag
+#else
+ #define NLOHMANN_JSON_ABI_TAG_DIAGNOSTICS
+#endif
+
+#if JSON_USE_LEGACY_DISCARDED_VALUE_COMPARISON
+ #define NLOHMANN_JSON_ABI_TAG_LEGACY_DISCARDED_VALUE_COMPARISON _ldvcmp
+#else
+ #define NLOHMANN_JSON_ABI_TAG_LEGACY_DISCARDED_VALUE_COMPARISON
+#endif
+
+#ifndef NLOHMANN_JSON_NAMESPACE_NO_VERSION
+ #define NLOHMANN_JSON_NAMESPACE_NO_VERSION 0
+#endif
+
+// Construct the namespace ABI tags component
+#define NLOHMANN_JSON_ABI_TAGS_CONCAT_EX(a, b) json_abi ## a ## b
+#define NLOHMANN_JSON_ABI_TAGS_CONCAT(a, b) \
+ NLOHMANN_JSON_ABI_TAGS_CONCAT_EX(a, b)
+
+#define NLOHMANN_JSON_ABI_TAGS \
+ NLOHMANN_JSON_ABI_TAGS_CONCAT( \
+ NLOHMANN_JSON_ABI_TAG_DIAGNOSTICS, \
+ NLOHMANN_JSON_ABI_TAG_LEGACY_DISCARDED_VALUE_COMPARISON)
+
+// Construct the namespace version component
+#define NLOHMANN_JSON_NAMESPACE_VERSION_CONCAT_EX(major, minor, patch) \
+ _v ## major ## _ ## minor ## _ ## patch
+#define NLOHMANN_JSON_NAMESPACE_VERSION_CONCAT(major, minor, patch) \
+ NLOHMANN_JSON_NAMESPACE_VERSION_CONCAT_EX(major, minor, patch)
+
+#if NLOHMANN_JSON_NAMESPACE_NO_VERSION
+#define NLOHMANN_JSON_NAMESPACE_VERSION
+#else
+#define NLOHMANN_JSON_NAMESPACE_VERSION \
+ NLOHMANN_JSON_NAMESPACE_VERSION_CONCAT(NLOHMANN_JSON_VERSION_MAJOR, \
+ NLOHMANN_JSON_VERSION_MINOR, \
+ NLOHMANN_JSON_VERSION_PATCH)
+#endif
+
+// Combine namespace components
+#define NLOHMANN_JSON_NAMESPACE_CONCAT_EX(a, b) a ## b
+#define NLOHMANN_JSON_NAMESPACE_CONCAT(a, b) \
+ NLOHMANN_JSON_NAMESPACE_CONCAT_EX(a, b)
+
+#ifndef NLOHMANN_JSON_NAMESPACE
+#define NLOHMANN_JSON_NAMESPACE \
+ nlohmann::NLOHMANN_JSON_NAMESPACE_CONCAT( \
+ NLOHMANN_JSON_ABI_TAGS, \
+ NLOHMANN_JSON_NAMESPACE_VERSION)
+#endif
+
+#ifndef NLOHMANN_JSON_NAMESPACE_BEGIN
+#define NLOHMANN_JSON_NAMESPACE_BEGIN \
+ namespace nlohmann \
+ { \
+ inline namespace NLOHMANN_JSON_NAMESPACE_CONCAT( \
+ NLOHMANN_JSON_ABI_TAGS, \
+ NLOHMANN_JSON_NAMESPACE_VERSION) \
+ {
+#endif
+
+#ifndef NLOHMANN_JSON_NAMESPACE_END
+#define NLOHMANN_JSON_NAMESPACE_END \
+ } /* namespace (inline namespace) NOLINT(readability/namespace) */ \
+ } // namespace nlohmann
+#endif
+
+// #include
+// __ _____ _____ _____
+// __| | __| | | | JSON for Modern C++
+// | | |__ | | | | | | version 3.11.2
+// |_____|_____|_____|_|___| https://github.com/nlohmann/json
+//
+// SPDX-FileCopyrightText: 2013-2022 Niels Lohmann
+// SPDX-License-Identifier: MIT
+
+
+
+#include // transform
+#include // array
+#include // forward_list
+#include // inserter, front_inserter, end
+#include