Merge remote-tracking branch 'origin/main'

Author: medy17

ARCHITECTURE.md

@@ -109,12 +109,26 @@ src/
 │  ├─ state.js                # Tiny global store (imperative actions)
 │  ├─ i18n.js                 # i18next + detector setup
 │  │
+│  ├─ features/               # Domain-specific feature modules
+│  │  ├─ chat/                # Chat logic, UI, and event handling
+│  │  ├─ contact/             # Contact modal logic
+│  │  ├─ invite/              # QR generation, sharing logic
+│  │  ├─ settings/            # Settings persistence and UI generation
+│  │  ├─ theme/               # Dark mode logic
+│  │  └─ zip/                 # Zip modal logic (selection state)
+│  │
 │  ├─ network/
 │  │  ├─ websocket.js         # Signalling client (Render in prod)
 │  │  └─ webrtc.js            # Peer connection, data channel, screen share
 │  │
 │  ├─ transfer/
-│  │  ├─ fileHandler.js       # Queueing, worker IO, OPFS, UI integration
+│  │  ├─ fileHandler.js       # Facade: orchestrates sender, receiver, queue
+│  │  ├─ fileSender.js        # Worker management, upload throttling
+│  │  ├─ fileReceiver.js      # Incoming stream, memory/OPFS storage
+│  │  ├─ queueManager.js      # Drag-and-drop, file selection, queue state
+│  │  ├─ transferUI.js        # HTML generation for transfer items
+│  │  ├─ opfsHandler.js       # Origin Private File System operations
+│  │  ├─ etrCalculator.js     # Shared speed/time-remaining logic
 │  │  └─ zipHandler.js        # JSZip integration for “download all”
 │  │
 │  ├─ preview/
@@ -134,7 +148,7 @@ src/
 │  │  ├─ dom.js               # Centralised DOM element queries
 │  │  ├─ events.js            # All event listeners + drag‑and‑drop
 │  │  ├─ view.js              # Small “render” helpers (no framework)
-│  │  ├─ modals.js            # Modals, settings, theme/consent UX
+│  │  ├─ modals.js            # Orchestrator for modals (delegates to features/)
 │  │  ├─ onboarding.js        # Welcome/invite overlays & positioning
 │  │  └─ effects.js           # Animation quality controller (persists + applies)
 │  │
@@ -167,11 +181,11 @@ served as‑is by Vite.
 
 Where should new things go?
 
+- New feature slice: `js/features/newFeature/`.
 - New network logic: `js/network/`.
-- New transfer features: `js/transfer/`.
+- New transfer logic: `js/transfer/` (if core logic) or `js/features/` (if UI heavy).
 - New preview type: `js/preview/handlers/` plus `previewConfig.js` entry.
 - New UI behaviour: bind in `js/ui/events.js`, render helpers in `js/ui/view.js`.
-- New settings: `js/ui/modals.js` (UI), `js/ui/effects.js` (persistence/application).
 - Small pure helpers: `js/utils/`.
 - New CSS: follow the existing split (base/layout/components/utilities).
 
@@ -180,6 +194,9 @@ Where should new things go?
 
 - ES Modules everywhere; avoid globals. The only intentional global is
   `window.videoPlayer` for the self‑contained player in `public/video.js`.
+- **Feature Modules**: Logic that owns a specific UI domain (Chat, Settings, Invite)
+  lives in `js/features/`. These modules should export setup/teardown functions
+  used by the main `ui/` orchestrators.
 - Separate DOM concerns from logic:
     - `ui/dom.js` owns querying and exposes a stable `uiElements` map.
     - `ui/events.js` attaches listeners and calls actions/helpers.
@@ -255,45 +272,46 @@ WebRTC client (`js/network/webrtc.js`):
 
 ## 7) File transfers (worker + OPFS + flow control)
 
-Sender:
+The transfer logic is modularized under `js/transfer/`, with `fileHandler.js` acting as a facade to coordinate the specific modules.
+
+Sender (`js/transfer/fileSender.js`):
 
-- `fileHandler.startFileSend()`:
+- `startFileSend()`:
     - Spawns `sender.worker.js` to read the file in chunks (default 256 KB, user
       tunable).
     - Sends JSON metadata, then ArrayBuffers, then `"EOF"`.
     - Throttles on `getBufferedAmount()` against `HIGH_WATER_MARK`.
-    - Updates UI progress and an ETA based on moving‑average speed samples.
+    - Updates UI using `transferUI.js` and calculates ETA via `etrCalculator.js`.
 - Worker (`sender.worker.js`):
     - Reads slices with `FileReader`, transfers underlying buffers to main thread
       (zero‑copy), and posts `chunk` messages.
     - Self‑terminates on `done`.
 
-Receiver:
+Receiver (`js/transfer/fileReceiver.js`):
 
-- `fileHandler.handleDataChannelMessage()`:
-    - If metadata JSON: initialises receive state; possibly enables OPFS “safe
-      mode” if large and supported.
+- `handleDataChannelMessage()`:
+    - If metadata JSON: initialises receive state; delegates to `opfsHandler.js` if
+      "safe mode" is active (large file + supported browser).
     - If ArrayBuffer:
-        - Writes to OPFS writer if active, else pushes to memory.
-        - Tracks speed/ETA and updates UI.
+        - Writes via `opfsHandler` (if safe mode) or pushes to memory array.
+        - Tracks speed/ETA via `etrCalculator.js`.
     - On `"EOF"`:
         - Finalises writer (OPFS) or creates a `Blob` from parts.
         - Adds file to `store.receivedFiles`.
-        - Updates UI buttons (preview/save) with a brief “Complete!” animation.
+        - Updates UI actions (preview/save/complete).
         - Optional auto‑download if enabled and below a size threshold.
 
-OPFS safe mode:
+OPFS Safe Mode (`js/transfer/opfsHandler.js`):
 
-- Controlled by `localStorage('dropsilk-use-opfs-buffer')` and a size threshold
-  (`OPFS_THRESHOLD`).
-- Uses `navigator.storage.getDirectory()` to create a per‑file writer.
-- Cleans up stale OPFS entries on reset and between files.
+- Encapsulates all Origin Private File System operations.
+- `initOpfsForFile`: Get directory handle, remove stale files, create writer.
+- `writeOpfsChunk`: Writes stream directly to disk.
+- `finalizeOpfsFile`: Closes writer, returns File handle as Blob.
 
-Flow control:
+UI & Queue (`js/transfer/transferUI.js`, `js/transfer/queueManager.js`):
 
-- DataChannel backpressure:
-    - Only send chunks when `bufferedAmount <= HIGH_WATER_MARK`.
-    - React quickly to `onbufferedamountlow` by draining any queued chunks.
+- `transferUI.js` contains all HTML generation templates for queue items to keep logic files clean.
+- `queueManager.js` handles file selection, folder limits, and drag-and-drop reordering.
 
 
 ## 8) Preview subsystem
@@ -376,10 +394,9 @@ Security:
     - Small pure-ish functions that read from the store and mutate view state.
     - Manages queue expansion, metrics UI, panels, pulses, and stream views.
 - `ui/modals.js`:
-    - All modals (invite, zip, settings, donate, about/contact/terms/privacy/
-      security/FAQ, preview).
-    - Settings modal doubles as a host for preferences and “advanced” options.
-    - Updates theme, fonts, analytics consent, chunk size, OPFS mode, etc.
+    - Acts as an orchestrator for global modals (About, Donate, etc.).
+    - For complex modals (Settings, Zip, Invite), it delegates logic to the relevant
+      modules in `js/features/`.
 - `ui/onboarding.js`:
     - Welcome/Invite overlays; computes safe positions using VisualViewport and
       re‑positions on orientation/resize.
@@ -458,7 +475,11 @@ Security posture:
 - No files are uploaded except optional PPTX previews and then only to the
   configured UploadThing endpoint, with auto‑clean up (server‑side).
 - WebRTC data paths are end‑to‑end encrypted (DTLS/SRTP).
-- Signalling server receives only metadata and discards it after session ends.
+- Markdown is sanitised.
+- reCAPTCHA is loaded on demand only for the contact email.
+- QR scanner accepts only our URL schema; invalid scans are rejected.
+- Do not include secrets in the client; use `VITE_` prefix for safe public
+  env vars only.
 
 
 ## 14) Build system and environments
@@ -591,10 +612,10 @@ Add a new WebSocket message:
 
 Add a new setting:
 
-1. Add UI in `populateSettingsModal()` in `ui/modals.js`.
+1. Add UI in `populateSettingsModal()` in `js/features/settings/settingsUI.js`.
 2. Persist to `localStorage` (use a `dropsilk-*` key).
 3. If it affects performance/animations, wire it up in `js/ui/effects.js`.
-4. Apply in `saveSettingsPreferences()` and reflect in the UI.
+4. Apply in `js/features/settings/settingsData.js` and reflect in the UI.
 
 Add a new language:
 
@@ -610,7 +631,8 @@ Add a new language:
     - Create `xx.json`, minimally copying the shape from `en.json`.
     - Run `scripts/update-locales.js` to update imports/resources/options and to
       seed language names across JSONs.
-- In HTML, use `data-i18n` attributes; in code, `i18next.t('key', options)`.
+- In HTML, use `data-i18n` attributes; in code, `i18next.t(key, options)` or
+  `[data-i18n]` where possible.
 - For dynamic text (e.g., toasts) always use `i18next.t()`.
 
 
@@ -631,8 +653,9 @@ Add a new language:
 If you’re unsure where something belongs:
 
 - Is it view code that touches the DOM? `ui/…`
+- Is it a feature slice (chat, settings)? `features/…`
 - Is it a network edge (signalling or peer)? `network/…`
 - Is it file transfer orchestration or IO? `transfer/…`
 - Is it a one‑off helper? `utils/…`
 - Is it a file preview? `preview/…`
-- Is it global app wiring? `app.js`
+- Is it global app wiring? `app.js`

README.md

@@ -6,13 +6,13 @@
     <br />
     <i>Instantly share files and screen, device-to-device. No cloud. No limits.</i>
   </p>
-  
+
   <p>
     <a href="https://dropsilk.xyz"><strong>Production Deployment »</strong></a> <br />
     <a href="https://dropsilk.vercel.app"><strong>Mirror »</strong></a> <br />
     <a href="https://github.com/medy17/DropSilk_Backend"><strong>Backend Code »</strong></a>
   </p>
-  
+
   <div>
     <img src="https://img.shields.io/github/license/medy17/dropsilk?style=for-the-badge" alt="License"/>
     <img src="https://img.shields.io/github/last-commit/medy17/dropsilk?style=for-the-badge" alt="Last Commit"/>
@@ -87,8 +87,8 @@ DropSilk is built on a few key architectural principles to ensure performance, p
 
 1.  **WebRTC for Peer-to-Peer Communication:** Instead of a traditional client-server upload/download model, DropSilk uses WebRTC. This creates a direct, encrypted connection between the two users' browsers. This means files never touch our server, dramatically enhancing privacy and speed, especially on a local network.
 2.  **Decoupled Signaling:** A lightweight WebSocket server acts as a "rendezvous" point. Its only job is to help two peers find each other and exchange the metadata needed to establish the direct WebRTC connection. Once the connection is made, the signaling server is no longer involved in the transfer itself.
-3.  **Non-Blocking File Processing with Web Workers:** Reading large files on the main browser thread can freeze the UI. DropSilk delegates all file reading and chunking to a dedicated Web Worker. The main thread simply sends the file object to the worker and receives ready-to-send chunks, ensuring the interface remains fluid and responsive at all times.
-4.  **OPFS for Stability (Safe Mode):** Browsers have memory limits. Attempting to buffer a multi-gigabyte file in RAM can cause the tab to crash. The "Safe Mode" feature leverages the **Origin Private File System (OPFS)** to stream incoming file chunks directly to disk instead of memory, making the application robust enough to handle massive files.
+3.  **Non-Blocking File Processing with Web Workers:** Reading large files on the main browser thread can freeze the UI. DropSilk delegates all file reading and chunking to a dedicated Web Worker. The main thread simply sends the file object to the worker and receives ready-to-send chunks, ensuring the interface remains fluid and responsive at all times. This logic is cleanly separated into dedicated modules like `fileSender.js` and `queueManager.js` for improved maintainability.
+4.  **OPFS for Stability (Safe Mode):** Browsers have memory limits. Attempting to buffer a multi-gigabyte file in RAM can cause the tab to crash. The "Safe Mode" feature leverages the **Origin Private File System (OPFS)** to stream incoming file chunks directly to disk instead of memory, making the application robust enough to handle massive files. This is managed by a dedicated `opfsHandler.js` module, which keeps the main receiving logic simple and focused on orchestration.
 5.  **Performance-First UI Rendering:** The application is engineered to feel fast, not just transfer files fast. Hidden UI elements with infinite animations (like loading spinners) are paused to prevent background CPU usage. All browser resources are hence dedicated to the user's current interaction for a smooth, lag-free experience.
 
 ### Project Structure
@@ -112,6 +112,7 @@ The following is a list of most of the important files and folders.
               <summary>scripts/</summary>
               <ul>
                 <li>update-locales.js</li>
+                <li>generate-version.js</li>
               </ul>
             </details>
           </li>
@@ -178,6 +179,19 @@ The following is a list of most of the important files and folders.
                   <details>
                     <summary>js/</summary>
                     <ul>
+                      <li>
+                        <details>
+                          <summary>features/</summary>
+                          <ul>
+                            <li>chat/</li>
+                            <li>contact/</li>
+                            <li>invite/</li>
+                            <li>settings/</li>
+                            <li>theme/</li>
+                            <li>zip/</li>
+                          </ul>
+                        </details>
+                      </li>
                       <li>
                         <details>
                           <summary>network/</summary>
@@ -201,7 +215,13 @@ The following is a list of most of the important files and folders.
                         <details>
                           <summary>transfer/</summary>
                           <ul>
+                            <li>etrCalculator.js</li>
                             <li>fileHandler.js</li>
+                            <li>fileReceiver.js</li>
+                            <li>fileSender.js</li>
+                            <li>opfsHandler.js</li>
+                            <li>queueManager.js</li>
+                            <li>transferUI.js</li>
                             <li>zipHandler.js</li>
                           </ul>
                         </details>
@@ -211,10 +231,12 @@ The following is a list of most of the important files and folders.
                           <summary>ui/</summary>
                           <ul>
                             <li>dom.js</li>
+                            <li>drawer.js</li>
                             <li>effects.js</li>
                             <li>events.js</li>
                             <li>modals.js</li>
                             <li>onboarding.js</li>
+                            <li>streaming.js</li>
                             <li>view.js</li>
                           </ul>
                         </details>
@@ -225,6 +247,7 @@ The following is a list of most of the important files and folders.
                           <ul>
                             <li>audioManager.js</li>
                             <li>helpers.js</li>
+                            <li>security.js</li>
                             <li>toast.js</li>
                             <li>uploadHelper.js</li>
                           </ul>
@@ -234,6 +257,7 @@ The following is a list of most of the important files and folders.
                       <li>config.js</li>
                       <li>i18n.js</li>
                       <li>state.js</li>
+                      <li>version.gen.js</li>
                     </ul>
                   </details>
                 </li>
@@ -262,6 +286,7 @@ The following is a list of most of the important files and folders.
                             <li>audio.css</li>
                             <li>boarding.css</li>
                             <li>buttons.css</li>
+                            <li>chat.css</li>
                             <li>connections.css</li>
                             <li>dashboard.css</li>
                             <li>docx.css</li>
@@ -303,6 +328,22 @@ The following is a list of most of the important files and folders.
                     </ul>
                   </details>
                 </li>
+                <li>
+                  <details>
+                    <summary>locales/</summary>
+                    <ul>
+                      <li>en.json</li>
+                      <li>es.json</li>
+                      <li>fr.json</li>
+                      <li>it.json</li>
+                      <li>ja.json</li>
+                      <li>ms.json</li>
+                      <li>pt.json</li>
+                      <li>sw.json</li>
+                      <li>zh.json</li>
+                    </ul>
+                  </details>
+                </li>
               </ul>
             </details>
           </li>
@@ -370,17 +411,17 @@ Open your browser and navigate to `http://localhost:5173` (or the address provid
 When the user clicks “View Email” in the Contact modal, the app renders a reCAPTCHA challenge and, on success, exchanges the token with the backend to retrieve the email address.
 
 - Env vars:
-  - `VITE_RECAPTCHA_SITE_KEY` must be set at build time (Vite only injects `VITE_*` variables).
-  - `VITE_API_BASE_URL` must be a full URL (include `http://` or `https://`).
+    - `VITE_RECAPTCHA_SITE_KEY` must be set at build time (Vite only injects `VITE_*` variables).
+    - `VITE_API_BASE_URL` must be a full URL (include `http://` or `https://`).
 - Client request:
-  - `POST ${VITE_API_BASE_URL}/request-email`
-  - Headers: `Content-Type: application/json`, `Accept: application/json`
-  - Body: `{"token":"<recaptcha_token_from_client>"}`
-  - No credentials/cookies.
+    - `POST ${VITE_API_BASE_URL}/request-email`
+    - Headers: `Content-Type: application/json`, `Accept: application/json`
+    - Body: `{"token":"<recaptcha_token_from_client>"}`
+    - No credentials/cookies.
 - Backend response contract:
-  - Success 200: `{"email":"you@domain.com"}`
-  - Failure 4xx/5xx: `{"error":"<string_reason>"}`
-    - Possible values currently: `reCAPTCHA token is required`, `recaptcha_failed`, `server_not_configured`, `internal_error`.
+    - Success 200: `{"email":"you@domain.com"}`
+    - Failure 4xx/5xx: `{"error":"<string_reason>"}`
+        - Possible values currently: `reCAPTCHA token is required`, `recaptcha_failed`, `server_not_configured`, `internal_error`.
 - CORS: the backend should allow your dev/staging/production origins for `POST` with `Content-Type`.
 
 ## License
@@ -391,4 +432,4 @@ This project is licensed under the **GPLv3**. See the `LICENSE` file for more in
 
 Thanks to Jihah in particular for her contribution in adding coherent ms-MY support.
 
-Ahmed - [GitHub](https://github.com/medy17)
+Ahmed - [GitHub](https://github.com/medy17)