Release 2.3.0

A share can now hold a private text (a password, a key, a short note)
with its files or on its own. The upload page's new "Private text" card
takes up to 100 KB; the browser encrypts the text and sends it through
the same chunk pipeline as a file, flagged is_text on share_files, so it
gets the share's password, expiry, download limit and cleanup.

The recipient sees the text only after pressing "Show text", which
counts as their download, so a messenger link preview cannot use up a
share limited to one download. The text is left out of the file list,
the ZIP and the file counts; the admin dashboard marks shares that hold
one with "Text".

The website gains a Private text feature card and a fifth phone
screenshot; every screenshot is retaken.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/Screenshots/ScreenshotsTest.php

@@ -115,13 +115,15 @@ test('desktop', function (string $theme) use ($files) {
     $upload = visit('/upload');
     $page = shotPage($upload, 'desktop', $theme);
     selectFiles($page, $files);
+    // Creating the share sends this text through the page's own upload before the share is created.
+    $page->type('[data-test="share-text"]', 'The signed contract is in the folder. Call me on +41 44 555 01 23 if anything is missing.');
     $page->click('label:has-text("Password protect")')
         ->click('[data-test="generate-password"]')
         ->wait(1)
         ->assertScript("document.querySelector('input[autocomplete=\"new-password\"]').value.length > 0");
     $page->type('input[wire\:model="maxDownloads"]', '5');
-    // The drop zone, the files and the options fill the window; typing left the page wherever it scrolled.
-    $page->script("document.activeElement?.blur(); window.scrollTo(0, document.querySelector('[data-test=drop-zone]').getBoundingClientRect().top + window.scrollY - 24)");
+    // The foot of the drop zone, the files, the text and the password fill the window; typing left the page wherever it scrolled.
+    $page->script("document.activeElement?.blur(); window.scrollTo(0, document.querySelector('[data-test=drop-zone]').getBoundingClientRect().bottom + window.scrollY - 80)");
     shoot($page, 'desktop', $theme, '01-upload');
 
     // Creating the share is what offers the password once more beside the link.
@@ -135,7 +137,7 @@ test('desktop', function (string $theme) use ($files) {
         ->assertScript("document.querySelector('[data-test=\"qr-code-dialog\"]').open");
     shoot($page, 'desktop', $theme, '03-qr-code', DemoData::CREATED_TOKEN);
 
-    // The dashboard shows the eight demo shares, as before.
+    // The dashboard shows the nine demo shares, as before.
     app(ShareService::class)->deleteShare(Share::query()->where('token', DemoData::CREATED_TOKEN)->firstOrFail());
 
     $download = visit(route('share.download', DemoData::DELIVERY_TOKEN, false));
@@ -172,4 +174,12 @@ test('phone', function (string $theme) use ($files) {
     $page->click('[data-test="show-qr-code"]')
         ->assertScript("document.querySelector('[data-test=\"qr-code-dialog\"]').open");
     shoot($page, 'phone', $theme, '04-qr-code');
+
+    // The text is fetched only when the recipient asks for it.
+    $text = visit(route('share.download', DemoData::TEXT_TOKEN, false));
+    $page = shotPage($text, 'phone', $theme);
+    $page->click('[data-test="show-text"]')
+        ->waitForText('maple-lantern-8127')
+        ->assertVisible('[data-test="shared-text"]');
+    shoot($page, 'phone', $theme, '05-private-text', DemoData::TEXT_TOKEN);
 })->with(['light', 'dark']);