From 5d800a71475c10aeb62b2f46f944424f86f90fd0 Mon Sep 17 00:00:00 2001
From: Adron Hall <adronhall@gmail.com>
Date: Fri, 31 Jul 2026 17:36:56 -0700
Subject: [PATCH] Add public share links and auth self-service
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Batch 5 of the parity build-out (branch feature/parity-v3). Builds clean in
Debug and Release.

Sharing:
- Public share links for Lists and Documents — create / list / revoke / copy
  the URL, gated to items you own. Shape verified live 2026-08-01
  (POST -> {token,url,role,expiresAt}, GET -> {shareLinks}, DELETE by token).

Auth self-service (login window):
- Register (email / username / password / display name), then auto-login
- Forgot password (reset-request), with a login/register mode toggle

Services: RegisterAsync, ForgotPasswordAsync, list + document share-link
create/list/delete, ShareLink model. See the-gaps.md for remaining post-v1
items (watcher/collaborator member management needs a second test account +
undocumented request bodies).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 InterlinedList/LoginWindow.xaml               | 55 ++++++++++++
 InterlinedList/LoginWindow.xaml.cs            | 18 +++-
 InterlinedList/Models/ShareLink.cs            | 19 ++++
 .../Services/InterlinedApiClient.Auth.cs      | 20 +++++
 .../Services/InterlinedApiClient.Documents.cs | 17 ++++
 .../Services/InterlinedApiClient.Lists.cs     | 18 ++++
 .../ViewModels/DocumentsViewModel.cs          | 80 ++++++++++++++++-
 InterlinedList/ViewModels/ListsViewModel.cs   | 67 +++++++++++++-
 InterlinedList/ViewModels/LoginViewModel.cs   | 76 ++++++++++++++++
 InterlinedList/Views/DocumentsView.xaml       | 81 +++++++++++++++++
 InterlinedList/Views/ListsView.xaml           | 90 +++++++++++++++++++
 the-gaps.md                                   | 21 +++++
 12 files changed, 557 insertions(+), 5 deletions(-)
 create mode 100644 InterlinedList/Models/ShareLink.cs
 create mode 100644 InterlinedList/Services/InterlinedApiClient.Auth.cs

diff --git a/InterlinedList/LoginWindow.xaml b/InterlinedList/LoginWindow.xaml
index 916a5c5..2031eb9 100644
--- a/InterlinedList/LoginWindow.xaml
+++ b/InterlinedList/LoginWindow.xaml
@@ -110,6 +110,26 @@
                              BorderThickness="1"
                              Foreground="{DynamicResource TextBrush}"/>
 
+                    <!-- Registration-only fields (toggled from code-behind) -->
+                    <StackPanel x:Name="RegisterFields" Visibility="Collapsed">
+                        <TextBlock Text="USERNAME"
+                                   FontSize="10" FontWeight="SemiBold"
+                                   Foreground="{DynamicResource TextMutedBrush}" Margin="0,0,0,4"/>
+                        <TextBox Text="{Binding Username, UpdateSourceTrigger=PropertyChanged}"
+                                 FontSize="13" Padding="8,6" Margin="0,0,0,14"
+                                 Background="{DynamicResource Surface2Brush}"
+                                 BorderBrush="{DynamicResource BorderBrush}" BorderThickness="1"
+                                 Foreground="{DynamicResource TextBrush}"/>
+                        <TextBlock Text="DISPLAY NAME (OPTIONAL)"
+                                   FontSize="10" FontWeight="SemiBold"
+                                   Foreground="{DynamicResource TextMutedBrush}" Margin="0,0,0,4"/>
+                        <TextBox Text="{Binding DisplayName, UpdateSourceTrigger=PropertyChanged}"
+                                 FontSize="13" Padding="8,6" Margin="0,0,0,14"
+                                 Background="{DynamicResource Surface2Brush}"
+                                 BorderBrush="{DynamicResource BorderBrush}" BorderThickness="1"
+                                 Foreground="{DynamicResource TextBrush}"/>
+                    </StackPanel>
+
                     <TextBlock Text="PASSWORD"
                                FontSize="10" FontWeight="SemiBold"
                                Foreground="{DynamicResource TextMutedBrush}"
@@ -139,6 +159,18 @@
                             HorizontalAlignment="Stretch"
                             Margin="0,10,0,0"/>
 
+                    <Button x:Name="BtnForgot"
+                            Content="Forgot password?"
+                            Click="BtnForgot_Click"
+                            Style="{StaticResource LinkBtnStyle}"
+                            Margin="0,14,0,0"/>
+
+                    <Button x:Name="BtnToggleMode"
+                            Content="{Binding ToggleModeText}"
+                            Click="BtnToggleMode_Click"
+                            Style="{StaticResource LinkBtnStyle}"
+                            Margin="0,10,0,0"/>
+
                 </StackPanel>
             </Border>
         </Grid>
@@ -215,6 +247,29 @@
             </Setter>
         </Style>
 
+        <!-- Text link (forgot password / toggle register) -->
+        <Style x:Key="LinkBtnStyle" TargetType="Button">
+            <Setter Property="Background" Value="Transparent"/>
+            <Setter Property="Foreground" Value="{DynamicResource LinkBrush}"/>
+            <Setter Property="BorderThickness" Value="0"/>
+            <Setter Property="Padding" Value="0"/>
+            <Setter Property="FontSize" Value="12"/>
+            <Setter Property="Cursor" Value="Hand"/>
+            <Setter Property="HorizontalAlignment" Value="Center"/>
+            <Setter Property="Template">
+                <Setter.Value>
+                    <ControlTemplate TargetType="Button">
+                        <ContentPresenter HorizontalAlignment="Center"/>
+                        <ControlTemplate.Triggers>
+                            <Trigger Property="IsMouseOver" Value="True">
+                                <Setter Property="TextBlock.TextDecorations" Value="Underline"/>
+                            </Trigger>
+                        </ControlTemplate.Triggers>
+                    </ControlTemplate>
+                </Setter.Value>
+            </Setter>
+        </Style>
+
     </Window.Resources>
 
 </Window>
diff --git a/InterlinedList/LoginWindow.xaml.cs b/InterlinedList/LoginWindow.xaml.cs
index dd5ca50..3fb2fd9 100644
--- a/InterlinedList/LoginWindow.xaml.cs
+++ b/InterlinedList/LoginWindow.xaml.cs
@@ -37,11 +37,23 @@ private async void PasswordInput_KeyDown(object sender, KeyEventArgs e)
 
     private async Task SubmitAsync()
     {
-        var succeeded = await _viewModel.LoginAsync(PasswordInput.Password);
+        var succeeded = _viewModel.IsRegisterMode
+            ? await _viewModel.RegisterAsync(PasswordInput.Password)
+            : await _viewModel.LoginAsync(PasswordInput.Password);
         if (succeeded)
             LoginSucceeded?.Invoke(this, EventArgs.Empty);
     }
 
+    private async void BtnForgot_Click(object sender, RoutedEventArgs e)
+        => await _viewModel.ForgotPasswordAsync();
+
+    private void BtnToggleMode_Click(object sender, RoutedEventArgs e)
+    {
+        _viewModel.IsRegisterMode = !_viewModel.IsRegisterMode;
+        RegisterFields.Visibility = _viewModel.IsRegisterMode ? Visibility.Visible : Visibility.Collapsed;
+        BtnLogin.Content = _viewModel.PrimaryButtonText;
+    }
+
     private void ViewModel_PropertyChanged(object? sender, PropertyChangedEventArgs e)
     {
         switch (e.PropertyName)
@@ -54,7 +66,9 @@ private void ViewModel_PropertyChanged(object? sender, PropertyChangedEventArgs
 
             case nameof(LoginViewModel.IsBusy):
                 BtnLogin.IsEnabled = !_viewModel.IsBusy;
-                BtnLogin.Content = _viewModel.IsBusy ? "Logging in…" : "Log In";
+                BtnLogin.Content = _viewModel.IsBusy
+                    ? "Working…"
+                    : _viewModel.PrimaryButtonText;
                 break;
         }
     }
diff --git a/InterlinedList/Models/ShareLink.cs b/InterlinedList/Models/ShareLink.cs
new file mode 100644
index 0000000..ba33c80
--- /dev/null
+++ b/InterlinedList/Models/ShareLink.cs
@@ -0,0 +1,19 @@
+namespace InterlinedList.Models;
+
+/// <summary>
+/// A tokenized public share link for a list or document. Shape verified live
+/// 2026-08-01: POST returns { token, url, role, expiresAt }; GET adds
+/// createdAt / revokedAt. Revoke with DELETE …/share-links/{token}.
+/// </summary>
+public sealed class ShareLink
+{
+    public required string Token { get; init; }
+    public string? Url { get; init; }
+    public string? Role { get; init; }
+    public DateTimeOffset? ExpiresAt { get; init; }
+    public DateTimeOffset? CreatedAt { get; init; }
+    public DateTimeOffset? RevokedAt { get; init; }
+
+    public bool IsActive => RevokedAt is null;
+    public string RoleLabel => string.IsNullOrEmpty(Role) ? "viewer" : Role;
+}
diff --git a/InterlinedList/Services/InterlinedApiClient.Auth.cs b/InterlinedList/Services/InterlinedApiClient.Auth.cs
new file mode 100644
index 0000000..4838bf3
--- /dev/null
+++ b/InterlinedList/Services/InterlinedApiClient.Auth.cs
@@ -0,0 +1,20 @@
+using System.Net.Http;
+
+namespace InterlinedList.Services;
+
+/// <summary>
+/// Pre-login self-service: account registration and password reset. Both are
+/// public (no bearer). Request shapes verified against the OpenAPI spec
+/// 2026-08-01: register { email, username, password, displayName }, forgot
+/// { email }. Responses aren't parsed — on success the caller either logs in
+/// with the new credentials or tells the user to check their inbox.
+/// </summary>
+public sealed partial class InterlinedApiClient
+{
+    public Task RegisterAsync(string email, string username, string password, string? displayName, CancellationToken ct = default)
+        => SendVoidAsync(HttpMethod.Post, "api/auth/register",
+            new { email, username, password, displayName }, ct);
+
+    public Task ForgotPasswordAsync(string email, CancellationToken ct = default)
+        => SendVoidAsync(HttpMethod.Post, "api/auth/forgot-password", new { email }, ct);
+}
diff --git a/InterlinedList/Services/InterlinedApiClient.Documents.cs b/InterlinedList/Services/InterlinedApiClient.Documents.cs
index 6b83da8..d12454e 100644
--- a/InterlinedList/Services/InterlinedApiClient.Documents.cs
+++ b/InterlinedList/Services/InterlinedApiClient.Documents.cs
@@ -93,4 +93,21 @@ public Task DeleteDocumentFolderAsync(string id, CancellationToken ct = default)
     public Task CreateDocumentInFolderAsync(string folderId, string title, string content, CancellationToken ct = default)
         => SendVoidAsync(HttpMethod.Post, $"api/documents/folders/{folderId}/documents",
             new { title, content, isPublic = false }, ct);
+
+    // ── Share links (create a public read link for a document) ──────────────────
+    // Same shape as list share-links (verified live 2026-08-01).
+
+    public async Task<List<ShareLink>> GetDocumentShareLinksAsync(string documentId, CancellationToken ct = default)
+    {
+        var json = await GetElementAsync($"api/documents/{documentId}/share-links", ct);
+        return json.TryGetProperty("shareLinks", out var arr) && arr.ValueKind == JsonValueKind.Array
+            ? arr.Deserialize<List<ShareLink>>(JsonOptions) ?? new()
+            : new();
+    }
+
+    public Task<ShareLink> CreateDocumentShareLinkAsync(string documentId, CancellationToken ct = default)
+        => SendJsonAsync<ShareLink>(HttpMethod.Post, $"api/documents/{documentId}/share-links", new { }, ct);
+
+    public Task DeleteDocumentShareLinkAsync(string documentId, string token, CancellationToken ct = default)
+        => SendVoidAsync(HttpMethod.Delete, $"api/documents/{documentId}/share-links/{token}", null, ct);
 }
diff --git a/InterlinedList/Services/InterlinedApiClient.Lists.cs b/InterlinedList/Services/InterlinedApiClient.Lists.cs
index 05fd413..55edfb4 100644
--- a/InterlinedList/Services/InterlinedApiClient.Lists.cs
+++ b/InterlinedList/Services/InterlinedApiClient.Lists.cs
@@ -83,4 +83,22 @@ public async Task<List<WatchedList>> GetWatchingListsAsync(CancellationToken ct
             ? arr.Deserialize<List<WatchedList>>(JsonOptions) ?? new()
             : new();
     }
+
+    // ── Share links (create a public read link for a list) ──────────────────────
+    // Shape verified live 2026-08-01: GET → { shareLinks }, POST → the new link,
+    // DELETE …/{token} revokes it.
+
+    public async Task<List<ShareLink>> GetListShareLinksAsync(string listId, CancellationToken ct = default)
+    {
+        var json = await GetElementAsync($"api/lists/{listId}/share-links", ct);
+        return json.TryGetProperty("shareLinks", out var arr) && arr.ValueKind == JsonValueKind.Array
+            ? arr.Deserialize<List<ShareLink>>(JsonOptions) ?? new()
+            : new();
+    }
+
+    public Task<ShareLink> CreateListShareLinkAsync(string listId, CancellationToken ct = default)
+        => SendJsonAsync<ShareLink>(HttpMethod.Post, $"api/lists/{listId}/share-links", new { }, ct);
+
+    public Task DeleteListShareLinkAsync(string listId, string token, CancellationToken ct = default)
+        => SendVoidAsync(HttpMethod.Delete, $"api/lists/{listId}/share-links/{token}", null, ct);
 }
diff --git a/InterlinedList/ViewModels/DocumentsViewModel.cs b/InterlinedList/ViewModels/DocumentsViewModel.cs
index 4aa2c97..27ea094 100644
--- a/InterlinedList/ViewModels/DocumentsViewModel.cs
+++ b/InterlinedList/ViewModels/DocumentsViewModel.cs
@@ -14,6 +14,9 @@ public partial class DocumentsViewModel : ObservableObject
     public ObservableCollection<DocumentFolder> Folders { get; } = new();
     public ObservableCollection<DocumentTemplate> Templates { get; } = new();
 
+    // Public share links for the currently-open document (empty when none open).
+    public ObservableCollection<ShareLink> ShareLinks { get; } = new();
+
     [ObservableProperty]
     private bool isLoading;
 
@@ -112,11 +115,79 @@ private async Task CreateDocumentAsync()
     }
 
     [RelayCommand]
-    private void SelectDocument(DocumentSummary doc)
+    private async Task SelectDocumentAsync(DocumentSummary doc)
     {
         SelectedDocument = doc;
         EditTitle = doc.Title;
         EditContent = doc.Content;
+        await ReloadShareLinksAsync(doc.Id);
+    }
+
+    // Refresh ShareLinks from the server for the given document (read-after-write).
+    private async Task ReloadShareLinksAsync(string documentId)
+    {
+        try
+        {
+            var links = await _session.Api.GetDocumentShareLinksAsync(documentId);
+            ShareLinks.Clear();
+            foreach (var link in links)
+                ShareLinks.Add(link);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    private bool CanShareSelectedDocument() => SelectedDocument is not null;
+
+    [RelayCommand(CanExecute = nameof(CanShareSelectedDocument))]
+    private async Task CreateShareLinkAsync()
+    {
+        if (SelectedDocument is not { } doc) return;
+
+        try
+        {
+            await _session.Api.CreateDocumentShareLinkAsync(doc.Id);
+            ErrorMessage = null;
+            await ReloadShareLinksAsync(doc.Id);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    [RelayCommand]
+    private async Task RevokeShareLinkAsync(ShareLink link)
+    {
+        if (SelectedDocument is not { } doc) return;
+
+        try
+        {
+            await _session.Api.DeleteDocumentShareLinkAsync(doc.Id, link.Token);
+            ErrorMessage = null;
+            await ReloadShareLinksAsync(doc.Id);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    [RelayCommand]
+    private void CopyShareLink(ShareLink link)
+    {
+        if (string.IsNullOrEmpty(link.Url)) return;
+
+        try
+        {
+            System.Windows.Clipboard.SetText(link.Url);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
     }
 
     private bool CanSaveDocument() => SelectedDocument is not null;
@@ -149,6 +220,7 @@ private async Task DeleteDocumentAsync(DocumentSummary doc)
                 SelectedDocument = null;
                 EditTitle = "";
                 EditContent = "";
+                ShareLinks.Clear();
             }
             ErrorMessage = null;
             await LoadAsync();
@@ -291,7 +363,11 @@ private async Task SaveDocToFolderAsync()
 
     partial void OnNewDocTitleChanged(string value) => CreateDocumentCommand.NotifyCanExecuteChanged();
 
-    partial void OnSelectedDocumentChanged(DocumentSummary? value) => SaveDocumentCommand.NotifyCanExecuteChanged();
+    partial void OnSelectedDocumentChanged(DocumentSummary? value)
+    {
+        SaveDocumentCommand.NotifyCanExecuteChanged();
+        CreateShareLinkCommand.NotifyCanExecuteChanged();
+    }
 
     partial void OnNewFolderNameChanged(string value) => CreateFolderCommand.NotifyCanExecuteChanged();
 
diff --git a/InterlinedList/ViewModels/ListsViewModel.cs b/InterlinedList/ViewModels/ListsViewModel.cs
index 39a730f..c31dd76 100644
--- a/InterlinedList/ViewModels/ListsViewModel.cs
+++ b/InterlinedList/ViewModels/ListsViewModel.cs
@@ -16,6 +16,7 @@ public partial class ListsViewModel : ObservableObject
     public ObservableCollection<ListSummary> Lists { get; } = new();
     public ObservableCollection<ListDataRow> Rows { get; } = new();
     public ObservableCollection<WatchedList> SharedWithMe { get; } = new();
+    public ObservableCollection<ShareLink> ShareLinks { get; } = new();
 
     [ObservableProperty]
     private bool isLoading;
@@ -116,6 +117,7 @@ private async Task DeleteListAsync(ListSummary list)
             {
                 SelectedList = null;
                 Rows.Clear();
+                ShareLinks.Clear();
             }
             await LoadListsAsync();
         }
@@ -151,6 +153,7 @@ private async Task SelectListAsync(ListSummary list)
         SelectedSharedList = null;
         SelectedList = list;
         await LoadRowsAsync(list.Id);
+        await LoadShareLinksAsync(list.Id);
     }
 
     [RelayCommand]
@@ -161,9 +164,65 @@ private async Task SelectSharedListAsync(WatchedList watched)
         SelectedSharedList = watched;
         EditingRow = null;
         EditRowJson = "";
+        ShareLinks.Clear();
         await LoadRowsAsync(watched.Id);
     }
 
+    private async Task LoadShareLinksAsync(string listId)
+    {
+        try
+        {
+            var links = await _session.Api.GetListShareLinksAsync(listId);
+
+            ShareLinks.Clear();
+            foreach (var link in links)
+                ShareLinks.Add(link);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    private bool CanManageShareLinks() => SelectedList is not null && !IsViewingShared;
+
+    [RelayCommand(CanExecute = nameof(CanManageShareLinks))]
+    private async Task CreateShareLinkAsync()
+    {
+        if (SelectedList is not { } list) return;
+        try
+        {
+            await _session.Api.CreateListShareLinkAsync(list.Id);
+            await LoadShareLinksAsync(list.Id);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    [RelayCommand]
+    private async Task RevokeShareLinkAsync(ShareLink link)
+    {
+        if (SelectedList is not { } list) return;
+        try
+        {
+            await _session.Api.DeleteListShareLinkAsync(list.Id, link.Token);
+            await LoadShareLinksAsync(list.Id);
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+    }
+
+    [RelayCommand]
+    private void CopyShareLink(ShareLink link)
+    {
+        if (string.IsNullOrEmpty(link.Url)) return;
+        System.Windows.Clipboard.SetText(link.Url);
+    }
+
     private async Task LoadRowsAsync(string listId)
     {
         IsLoadingRows = true;
@@ -282,7 +341,13 @@ private async Task DeleteRowAsync(ListDataRow row)
 
     partial void OnNewListTitleChanged(string value) => CreateListCommand.NotifyCanExecuteChanged();
 
-    partial void OnSelectedListChanged(ListSummary? value) => AddRowCommand.NotifyCanExecuteChanged();
+    partial void OnSelectedListChanged(ListSummary? value)
+    {
+        AddRowCommand.NotifyCanExecuteChanged();
+        CreateShareLinkCommand.NotifyCanExecuteChanged();
+    }
+
+    partial void OnIsViewingSharedChanged(bool value) => CreateShareLinkCommand.NotifyCanExecuteChanged();
 
     partial void OnNewRowJsonChanged(string value) => AddRowCommand.NotifyCanExecuteChanged();
 }
diff --git a/InterlinedList/ViewModels/LoginViewModel.cs b/InterlinedList/ViewModels/LoginViewModel.cs
index 2c03eb1..09d084b 100644
--- a/InterlinedList/ViewModels/LoginViewModel.cs
+++ b/InterlinedList/ViewModels/LoginViewModel.cs
@@ -10,17 +10,93 @@ public partial class LoginViewModel : ObservableObject
     [ObservableProperty]
     private string email = "";
 
+    [ObservableProperty]
+    private string username = "";
+
+    [ObservableProperty]
+    private string displayName = "";
+
     [ObservableProperty]
     private string? errorMessage;
 
     [ObservableProperty]
     private bool isBusy;
 
+    [ObservableProperty]
+    [NotifyPropertyChangedFor(nameof(PrimaryButtonText))]
+    [NotifyPropertyChangedFor(nameof(ToggleModeText))]
+    private bool isRegisterMode;
+
+    public string PrimaryButtonText => IsRegisterMode ? "Create account" : "Log In";
+    public string ToggleModeText => IsRegisterMode ? "Have an account? Log in" : "Create an account";
+
     public LoginViewModel(SessionService session)
     {
         _session = session;
     }
 
+    /// <summary>Register, then attempt an immediate login. Returns true only if the login succeeds.</summary>
+    public async Task<bool> RegisterAsync(string password)
+    {
+        if (string.IsNullOrWhiteSpace(Email) || string.IsNullOrWhiteSpace(Username) || string.IsNullOrWhiteSpace(password))
+        {
+            ErrorMessage = "Enter an email, username, and password.";
+            return false;
+        }
+
+        IsBusy = true;
+        ErrorMessage = null;
+        try
+        {
+            await _session.Api.RegisterAsync(Email.Trim(), Username.Trim(), password,
+                string.IsNullOrWhiteSpace(DisplayName) ? null : DisplayName.Trim());
+            try
+            {
+                await _session.LoginAsync(Email.Trim(), password);
+                return true;
+            }
+            catch (InterlinedApiException)
+            {
+                ErrorMessage = "Account created. Verify your email, then log in.";
+                IsRegisterMode = false;
+                return false;
+            }
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+            return false;
+        }
+        finally
+        {
+            IsBusy = false;
+        }
+    }
+
+    public async Task ForgotPasswordAsync()
+    {
+        if (string.IsNullOrWhiteSpace(Email))
+        {
+            ErrorMessage = "Enter your email above first.";
+            return;
+        }
+
+        IsBusy = true;
+        try
+        {
+            await _session.Api.ForgotPasswordAsync(Email.Trim());
+            ErrorMessage = "If that email has an account, a reset link is on its way.";
+        }
+        catch (InterlinedApiException ex)
+        {
+            ErrorMessage = ex.Message;
+        }
+        finally
+        {
+            IsBusy = false;
+        }
+    }
+
     // Password isn't an [ObservableProperty]: PasswordBox.Password can't be safely
     // data-bound in WPF, so the code-behind passes the plaintext value in directly.
     public async Task<bool> LoginAsync(string password)
diff --git a/InterlinedList/Views/DocumentsView.xaml b/InterlinedList/Views/DocumentsView.xaml
index 89c55a0..5880ce1 100644
--- a/InterlinedList/Views/DocumentsView.xaml
+++ b/InterlinedList/Views/DocumentsView.xaml
@@ -101,6 +101,16 @@
                 </DataTrigger>
             </Style.Triggers>
         </Style>
+
+        <!-- Share panel: visible only when a document IS selected -->
+        <Style x:Key="SharePanelStyle" TargetType="Border">
+            <Setter Property="Visibility" Value="Visible"/>
+            <Style.Triggers>
+                <DataTrigger Binding="{Binding SelectedDocument}" Value="{x:Null}">
+                    <Setter Property="Visibility" Value="Collapsed"/>
+                </DataTrigger>
+            </Style.Triggers>
+        </Style>
     </UserControl.Resources>
 
     <Grid>
@@ -369,6 +379,7 @@
                 <RowDefinition Height="Auto"/>
                 <RowDefinition Height="*"/>
                 <RowDefinition Height="Auto"/>
+                <RowDefinition Height="Auto"/>
             </Grid.RowDefinitions>
 
             <Border Grid.Row="0"
@@ -411,6 +422,76 @@
                            Foreground="{DynamicResource TextMutedBrush}"
                            Margin="0,8,0,0"/>
             </StackPanel>
+
+            <!-- ── Share panel: public read links for the open document ── -->
+            <Border Grid.Row="4"
+                    Style="{StaticResource SharePanelStyle}"
+                    Background="{DynamicResource SurfaceBrush}"
+                    BorderBrush="{DynamicResource BorderBrush}"
+                    BorderThickness="1"
+                    CornerRadius="4"
+                    Margin="20,0,20,20"
+                    Padding="16,12">
+                <StackPanel>
+                    <DockPanel Margin="0,0,0,8">
+                        <TextBlock DockPanel.Dock="Left"
+                                   Text="Share"
+                                   FontSize="14" FontWeight="SemiBold"
+                                   Foreground="{DynamicResource TextBrush}"
+                                   VerticalAlignment="Center"/>
+                        <Button Content="Create share link"
+                                Command="{Binding CreateShareLinkCommand}"
+                                HorizontalAlignment="Right"
+                                Style="{StaticResource PrimaryBtnStyle}"/>
+                    </DockPanel>
+
+                    <TextBlock Text="Anyone with a link below can read this document."
+                               FontSize="11"
+                               Foreground="{DynamicResource TextMutedBrush}"
+                               TextWrapping="Wrap"
+                               Margin="0,0,0,8"/>
+
+                    <ItemsControl ItemsSource="{Binding ShareLinks}">
+                        <ItemsControl.ItemTemplate>
+                            <DataTemplate DataType="{x:Type models:ShareLink}">
+                                <Border Margin="0,0,0,8"
+                                        Background="{DynamicResource Surface2Brush}"
+                                        BorderBrush="{DynamicResource BorderBrush}"
+                                        BorderThickness="1"
+                                        CornerRadius="4"
+                                        Padding="10,8">
+                                    <StackPanel>
+                                        <TextBlock Text="{Binding Url}"
+                                                   FontSize="12"
+                                                   FontFamily="JetBrains Mono, Consolas"
+                                                   Foreground="{DynamicResource TextMutedBrush}"
+                                                   TextWrapping="Wrap"
+                                                   Margin="0,0,0,6"/>
+                                        <DockPanel>
+                                            <TextBlock DockPanel.Dock="Left"
+                                                       Text="{Binding RoleLabel}"
+                                                       FontSize="11" FontWeight="SemiBold"
+                                                       Foreground="{DynamicResource TextMutedBrush}"
+                                                       VerticalAlignment="Center"/>
+                                            <StackPanel Orientation="Horizontal"
+                                                        HorizontalAlignment="Right">
+                                                <Button Content="Copy"
+                                                        Command="{Binding DataContext.CopyShareLinkCommand, RelativeSource={RelativeSource AncestorType=UserControl}}"
+                                                        CommandParameter="{Binding}"
+                                                        Style="{StaticResource SmallBtnStyle}"/>
+                                                <Button Content="Revoke"
+                                                        Command="{Binding DataContext.RevokeShareLinkCommand, RelativeSource={RelativeSource AncestorType=UserControl}}"
+                                                        CommandParameter="{Binding}"
+                                                        Style="{StaticResource SmallBtnStyle}"/>
+                                            </StackPanel>
+                                        </DockPanel>
+                                    </StackPanel>
+                                </Border>
+                            </DataTemplate>
+                        </ItemsControl.ItemTemplate>
+                    </ItemsControl>
+                </StackPanel>
+            </Border>
         </Grid>
     </Grid>
 </UserControl>
diff --git a/InterlinedList/Views/ListsView.xaml b/InterlinedList/Views/ListsView.xaml
index 3528f01..18665f2 100644
--- a/InterlinedList/Views/ListsView.xaml
+++ b/InterlinedList/Views/ListsView.xaml
@@ -345,6 +345,96 @@
                           HorizontalScrollBarVisibility="Disabled"
                           Padding="20,12">
                 <StackPanel>
+                    <!-- Share links (own lists only) -->
+                    <Border Margin="0,0,0,12"
+                            Background="{DynamicResource Surface2Brush}"
+                            BorderBrush="{DynamicResource BorderBrush}"
+                            BorderThickness="1"
+                            CornerRadius="4"
+                            Padding="12,10">
+                        <Border.Style>
+                            <Style TargetType="Border">
+                                <Setter Property="Visibility"
+                                        Value="{Binding SelectedList, Converter={StaticResource InverseNullToVisibility}}"/>
+                                <Style.Triggers>
+                                    <DataTrigger Binding="{Binding IsViewingShared}" Value="True">
+                                        <Setter Property="Visibility" Value="Collapsed"/>
+                                    </DataTrigger>
+                                </Style.Triggers>
+                            </Style>
+                        </Border.Style>
+                        <StackPanel>
+                            <DockPanel Margin="0,0,0,8">
+                                <Button DockPanel.Dock="Right"
+                                        Content="Create share link"
+                                        Command="{Binding CreateShareLinkCommand}"
+                                        Style="{StaticResource PrimaryBtnStyle}"/>
+                                <TextBlock Text="Public share links"
+                                           FontSize="13" FontWeight="SemiBold"
+                                           Foreground="{DynamicResource TextBrush}"
+                                           VerticalAlignment="Center"/>
+                            </DockPanel>
+
+                            <TextBlock Text="No share links yet. Create one to share this list read-only."
+                                       FontSize="11"
+                                       Foreground="{DynamicResource TextMutedBrush}"
+                                       TextWrapping="Wrap">
+                                <TextBlock.Style>
+                                    <Style TargetType="TextBlock">
+                                        <Setter Property="Visibility" Value="Collapsed"/>
+                                        <Style.Triggers>
+                                            <DataTrigger Binding="{Binding ShareLinks.Count}" Value="0">
+                                                <Setter Property="Visibility" Value="Visible"/>
+                                            </DataTrigger>
+                                        </Style.Triggers>
+                                    </Style>
+                                </TextBlock.Style>
+                            </TextBlock>
+
+                            <ItemsControl ItemsSource="{Binding ShareLinks}">
+                                <ItemsControl.ItemTemplate>
+                                    <DataTemplate DataType="{x:Type models:ShareLink}">
+                                        <Border Margin="0,0,0,6"
+                                                Background="{DynamicResource Surface3Brush}"
+                                                BorderBrush="{DynamicResource BorderBrush}"
+                                                BorderThickness="1"
+                                                CornerRadius="3"
+                                                Padding="10,8">
+                                            <DockPanel>
+                                                <StackPanel DockPanel.Dock="Right" Orientation="Horizontal"
+                                                            VerticalAlignment="Top" Margin="8,0,0,0">
+                                                    <Button Content="Copy"
+                                                            Command="{Binding DataContext.CopyShareLinkCommand, RelativeSource={RelativeSource AncestorType=UserControl}}"
+                                                            CommandParameter="{Binding}"
+                                                            Style="{StaticResource RowActionBtnStyle}"/>
+                                                    <Button Content="Revoke"
+                                                            Command="{Binding DataContext.RevokeShareLinkCommand, RelativeSource={RelativeSource AncestorType=UserControl}}"
+                                                            CommandParameter="{Binding}"
+                                                            Style="{StaticResource RowActionBtnStyle}"/>
+                                                </StackPanel>
+                                                <StackPanel>
+                                                    <TextBox Text="{Binding Url, Mode=OneWay}"
+                                                             IsReadOnly="True"
+                                                             BorderThickness="0"
+                                                             Background="Transparent"
+                                                             Foreground="{DynamicResource TextMutedBrush}"
+                                                             FontSize="11"
+                                                             FontFamily="JetBrains Mono, Consolas"
+                                                             TextWrapping="Wrap"
+                                                             Padding="0"/>
+                                                    <TextBlock Text="{Binding RoleLabel}"
+                                                               FontSize="11"
+                                                               Foreground="{DynamicResource TextMutedBrush}"
+                                                               Margin="0,2,0,0"/>
+                                                </StackPanel>
+                                            </DockPanel>
+                                        </Border>
+                                    </DataTemplate>
+                                </ItemsControl.ItemTemplate>
+                            </ItemsControl>
+                        </StackPanel>
+                    </Border>
+
                     <ItemsControl ItemsSource="{Binding Rows}">
                         <ItemsControl.ItemTemplate>
                             <DataTemplate DataType="{x:Type models:ListDataRow}">
diff --git a/the-gaps.md b/the-gaps.md
index 120cc5e..baad0d8 100644
--- a/the-gaps.md
+++ b/the-gaps.md
@@ -141,6 +141,27 @@ register/forgot-password, account-deletion UI, DM inbox-folder view.
 
 ---
 
+## Progress — Session 5 (2026-08-01) — sharing + auth self-service
+
+Live-verified share-link shape (POST → `{token,url,role,expiresAt}`, GET →
+`{shareLinks:[…]}`, DELETE by token; created+deleted a real test link). App
+builds clean in Debug + Release.
+
+**Shipped this session:**
+- ✅ **Public share links** for **Lists** and **Documents** — create / list /
+  revoke / copy-URL, gated to items you own.
+- ✅ **Auth self-service** — **Register** (email/username/password/display name)
+  and **Forgot password** in the login window (mode toggle + reset request).
+- Services: `RegisterAsync`, `ForgotPasswordAsync`, list + document share-link
+  create/list/delete, `ShareLink` model.
+
+**Remaining post-v1:** watcher/collaborator *member* management (undocumented
+request bodies + empty data — needs a second account), Materialize, GitHub
+(needs GitHub linked), billing handoff, account-deletion UI, DM inbox-folder,
+mutual-follows display, per-list schema/columns.
+
+---
+
 ## 1. Parity snapshot by domain
 
 | Domain (product's name) | Web/API has | App has today | Status |