Drive

Upload a file once, get back a share link anyone can open — the encryption key lives only in that link (after the #, which browsers never send to any server), so this server only ever stores ciphertext. No chat identity, no account needed to open a link — only to upload. Separate from /chat's file-share, which still exists for sending directly to a known contact.