const fragment = location.hash.slice(1);
if (!fragment) {
showError('No decryption key found in URL.');
} else try {
setStatus('Deriving key\u2026');
const rawKeyBytes = decodeKey(fragment);
const id = await hashKey(rawKeyBytes);
const key = await crypto.subtle.importKey(
'raw', rawKeyBytes, { name: 'AES-GCM' }, false, ['decrypt']
);
setProgress('Loading metadata\u2026', 0, 1);
const metadataResponse = await fetch('/download/' + id + '/metadata');
if (metadataResponse.status === 410) {
showError('This file has expired or reached its download limit.');
} else if (!metadataResponse.ok) {
showError(`Download failed (${metadataResponse.status}).`);
} else {
const metadata = await metadataResponse.json();
const filename = metadata.name || 'download';
const chunkCount = metadata.chunkCount || 1;
const chunks = [];
for (let index = 0; index < chunkCount; index++) {
setProgress(`Downloading chunk ${index + 1} of ${chunkCount}\u2026`, index, chunkCount);
const chunkResponse = await fetch('/download/' + id + '/chunk/' + index);
if (chunkResponse.status === 410) {
throw new Error('This file has expired or reached its download limit.');
}
if (!chunkResponse.ok) {
throw new Error(`Chunk download failed (${chunkResponse.status})`);
}
setProgress(`Decrypting chunk ${index + 1} of ${chunkCount}\u2026`, index + 0.5, chunkCount);
const plaintextChunk = await decryptChunk(await chunkResponse.arrayBuffer(), key);
chunks.push(new Uint8Array(plaintextChunk));
setProgress(`Downloaded ${index + 1} of ${chunkCount} chunks`, index + 1, chunkCount);
}
const completeResponse = await fetch('/download/' + id + '/complete', { method: 'POST' });
if (!completeResponse.ok && completeResponse.status !== 404 && completeResponse.status !== 410) {
throw new Error(`Download completion failed (${completeResponse.status})`);
}
setProgress('Preparing preview\u2026', chunkCount, chunkCount);
const plaintext = combineChunks(chunks);
showPreview(filename, plaintext);
}
} catch (err) {
showError(err.message);
}
function setStatus(msg) {
const el = htmx.find('#download-status');
if (el) el.textContent = msg;
}
function setProgress(msg, completed, total) {
setStatus(msg);
const percent = Math.round((completed / total) * 100);
const bar = htmx.find('#download-progress');
if (!bar) return;
bar.style.width = `${percent}%`;
bar.textContent = `${percent}%`;
bar.setAttribute('aria-valuenow', String(percent));
}
function escapeHtml(str) {
return str.replace(/&/g, '&').replace(//g, '>').replace(/"/g, '"');
}
function getMimeType(filename) {
const ext = filename.split('.').pop().toLowerCase();
const types = {
jpg: 'image/jpeg', jpeg: 'image/jpeg', png: 'image/png', gif: 'image/gif',
webp: 'image/webp', svg: 'image/svg+xml', bmp: 'image/bmp', ico: 'image/x-icon',
mp4: 'video/mp4', webm: 'video/webm', ogv: 'video/ogg', mov: 'video/quicktime',
mp3: 'audio/mpeg', wav: 'audio/wav', ogg: 'audio/ogg', flac: 'audio/flac',
aac: 'audio/aac', m4a: 'audio/mp4',
txt: 'text/plain', md: 'text/plain', csv: 'text/csv', log: 'text/plain',
json: 'application/json', xml: 'text/xml',
js: 'text/plain', ts: 'text/plain', py: 'text/plain', java: 'text/plain',
c: 'text/plain', cpp: 'text/plain', h: 'text/plain', sh: 'text/plain',
yaml: 'text/plain', yml: 'text/plain', toml: 'text/plain', ini: 'text/plain',
pdf: 'application/pdf',
};
return types[ext] || 'application/octet-stream';
}
function combineChunks(chunks) {
const size = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
const combined = new Uint8Array(size);
let offset = 0;
for (const chunk of chunks) {
combined.set(chunk, offset);
offset += chunk.byteLength;
}
return combined.buffer;
}
function showPreview(filename, plaintext) {
const mimeType = getMimeType(filename);
const blob = new Blob([plaintext], { type: mimeType });
const url = URL.createObjectURL(blob);
window.addEventListener('unload', () => URL.revokeObjectURL(url));
const name = escapeHtml(filename);
const downloadBtn = ``;
let previewHtml;
if (mimeType.startsWith('image/')) {
previewHtml = `
${escapeHtml(preview)}
${downloadBtn}`;
} else {
previewHtml = `