Version 0.50.0

The share sheet keeps your own record of who you shared a file with, and tells you when it disagrees with the list the server returns.

The list of people a file is shared with was built entirely from the server's answer, so there was nothing on your side to check it against: a row that was left out looked exactly like a file you never shared, and access removed looked the same whether or not anything was removed. Now every share writes the recipient's address into your own encrypted file list — the one place the server stores but can neither read nor edit — and the two records are compared each time the sheet opens. Two disagreements are shown, each with what it could mean including the innocent readings: an address your record names that the list does not, and an address you removed access for that the list still names. A row your record says nothing about is not called a fabrication, because shares made before this existed have no record; and an operator determined to keep serving a file can still do so, which is what removing access has never been able to reach.

Fixed alert boxes that split into narrow columns when they carried more than one line.

The alert box was built for one sentence beside a dismiss button, so a longer one laid its parts out side by side instead of stacking them. At 320px with the text size raised by half, a 29-character address ended up two characters wide. Alerts that carry more than one line now stack.