@brftech/filex-core 0.30.1 → 0.32.0

package/src/components/Toolbar.vue

@@ -15,6 +15,7 @@ import { computed, nextTick, onBeforeUnmount, onMounted, ref, watch } from 'vue'
 import type { ViewMode } from '../types/FileNode';
 import type { LocaleCode, ThemeMode } from '../types/ExplorerConfig';
 import ContextMenu, { type ContextAction } from './ContextMenu.vue';
+import ViewSwitcher from './ViewSwitcher.vue';
 import { useLocale } from '../composables/useLocale';
 
 export type SelectionMode = 'none' | 'single-file' | 'single-dir' | 'multi';
@@ -90,6 +91,26 @@ const props = defineProps<{
    * "power user tool", and gallery is the one nobody outside photos asks for.
    */
   viewModes?: ViewMode[];
+  /* === surucu:d1 — the Drive shell ==================================== */
+  /**
+   * Which header this is.
+   *
+   *   'classic' (default) — the row this toolbar has always been.
+   *   'drive'             — `uiProfile: 'drive'`: one search field across the
+   *                         width with its ⌘K/Ctrl+K hint, and the controls
+   *                         that belong to a *listing* rather than to the app
+   *                         (view switcher, details toggle) moved down onto the
+   *                         breadcrumb row, where the mockups put them.
+   *
+   * ⚠ Nothing is DELETED by 'drive'. Density, theme, the shortcut editor, the
+   * tour and both other view modes are all in the "⋯" menu this variant
+   * renders — the same list the narrow layout has used since bag:b4. A control
+   * that is on screen in one profile and unreachable in another is a capability
+   * split, not a preset.
+   */
+  shell?: 'classic' | 'drive';
+  /** Folder name for the drive field's placeholder ("Search in Photos"). */
+  scopeLabel?: string;
 }>();
 
 const emit = defineEmits<{
@@ -106,6 +127,8 @@ const emit = defineEmits<{
   (e: 'toggle-nav'): void /* gezinti:g1 */;
   (e: 'open-theme'): void /* wiring:c1 — tema galerisi */;
   (e: 'open-shortcut-settings'): void /* wiring:c2 */;
+  /* surucu:d1 — escalate this query into the command palette (⌘K/Ctrl+K). */
+  (e: 'open-palette', query: string): void;
 }>();
 
 // Density toggle — the toolbar owns the persisted preference; the parent
@@ -294,16 +317,14 @@ function offersView(v: ViewMode): boolean {
   return !props.viewModes || props.viewModes.includes(v);
 }
 
-const moreActions = computed<ContextAction[]>(() => {
+/* surucu:d1 — the tail of the "⋯" menu on its own: everything that is a
+ * SETTING of the explorer rather than an action on a file. The narrow layout
+ * shows it after the write/selection actions (unchanged); the drive header
+ * shows only this half, because in that layout the selection actions are
+ * already on screen as buttons and a menu that repeats them is a second door
+ * to the same room. */
+const utilityActions = computed<ContextAction[]>(() => {
   const list: ContextAction[] = [];
-  const writable =
-    !props.trashActive && !props.atVirtualRoot && props.canWrite !== false;
-  if (mode.value === 'none' && writable) {
-    list.push({ key: 'new-folder', label: t('toolbar.new_folder'), icon: '📁' });
-    if (props.pasteEnabled) list.push({ key: 'paste', label: t('ctx.paste'), icon: '📋' });
-  }
-  list.push(...toolbarItems.value);
-  if (list.length) list.push({ divider: true, key: 'bag-sep', label: '' });
   list.push({ key: 'refresh', label: t('toolbar.refresh'), icon: '↻' });
   list.push({
     key: 'density',
@@ -333,6 +354,62 @@ const moreActions = computed<ContextAction[]>(() => {
   return list;
 });
 
+const moreActions = computed<ContextAction[]>(() => {
+  const list: ContextAction[] = [];
+  const writable =
+    !props.trashActive && !props.atVirtualRoot && props.canWrite !== false;
+  if (mode.value === 'none' && writable) {
+    list.push({ key: 'new-folder', label: t('toolbar.new_folder'), icon: '📁' });
+    if (props.pasteEnabled) list.push({ key: 'paste', label: t('ctx.paste'), icon: '📋' });
+  }
+  list.push(...toolbarItems.value);
+  if (list.length) list.push({ divider: true, key: 'bag-sep', label: '' });
+  list.push(...utilityActions.value);
+  return list;
+});
+
+/* === surucu:d1 — the drive header's search field ======================
+ * ONE field, and it is the one the toolbar already had: typing here sets
+ * `searchQuery`, which the explorer answers with
+ * `?action=search&filter=…` — a real search of the folder you are standing in,
+ * exactly as before.
+ *
+ * The ⌘K chip beside it is the ESCALATION, not a second box: it opens the
+ * command palette carrying whatever has been typed, and the palette is where
+ * "everywhere" lives (the global endpoint, saved searches, and the commands).
+ * That is why the hint can sit on this field honestly — Ctrl+K from here does
+ * what the hint says, and Ctrl+K from anywhere else still opens the palette
+ * as it has since cila:c.
+ */
+const macLike =
+  typeof navigator !== 'undefined' &&
+  /mac|iphone|ipad|ipod/i.test(navigator.platform || navigator.userAgent || '');
+const paletteCombo = computed(() => (macLike ? '⌘ K' : 'Ctrl K'));
+
+const drivePlaceholder = computed(() =>
+  props.scopeLabel
+    ? t('drive.search.placeholder', { scope: props.scopeLabel })
+    : t('drive.search.placeholder_all'),
+);
+
+/** ⌘/Ctrl+K typed INSIDE the field. The global shortcut handler ignores
+ *  keystrokes aimed at an input — which is correct, and it would otherwise
+ *  make the hint on this very field a lie. */
+function onSearchKeydown(ev: KeyboardEvent) {
+  if ((ev.ctrlKey || ev.metaKey) && (ev.key === 'k' || ev.key === 'K')) {
+    ev.preventDefault();
+    ev.stopPropagation();
+    emit('open-palette', localSearch.value);
+  }
+}
+
+/* surucu:d1 — the drive header renders the selection actions as buttons, so
+ * its "⋯" carries only the settings half; the narrow layout renders no action
+ * buttons at all and still needs the whole list. */
+const menuActions = computed<ContextAction[]>(() =>
+  props.shell === 'drive' && !props.narrow ? utilityActions.value : moreActions.value,
+);
+
 function openMore() {
   const r = moreBtnEl.value?.getBoundingClientRect();
   moreRef.value?.show({ clientX: r ? r.right : 0, clientY: r ? r.bottom + 4 : 0 }, []);
@@ -387,6 +464,7 @@ function onMoreSelect(a: ContextAction) {
     :class="{
       'fe-toolbar--narrow': narrow /* bag:b4 */,
       'fe-toolbar--searching': narrow && searchOpen /* bag:b4 */,
+      'fe-toolbar--drive': shell === 'drive' /* surucu:d1 */,
     }"
   >
     <!-- bag:b4 — wide layout, untouched; renders exactly as before when not narrow -->
@@ -433,8 +511,11 @@ function onMoreSelect(a: ContextAction) {
         <span class="fe-icon">↑</span>
       </button>
 
+      <!-- surucu:d1 — in the drive shell the panel's "+ New" menu is the one
+           primary action; a second New Folder button here would be a second
+           front door to the same modal. -->
       <button
-        v-if="mode === 'none' && !trashActive && !atVirtualRoot && canWrite !== false"
+        v-if="shell !== 'drive' && mode === 'none' && !trashActive && !atVirtualRoot && canWrite !== false"
         type="button"
         class="fe-btn fe-btn--primary"
         :title="t('toolbar.new_folder')"
@@ -502,8 +583,45 @@ function onMoreSelect(a: ContextAction) {
 
     <div class="fe-toolbar__spacer" />
 
-    <div class="fe-toolbar__search-group">
-      <div class="fe-search">
+    <div class="fe-toolbar__search-group" :class="{ 'fe-toolbar__search-group--drive': shell === 'drive' }">
+      <!-- surucu:d1 — the drive shell's one search field: wide, in the header,
+           with the ⌘K chip that opens the palette carrying this query. -->
+      <div v-if="shell === 'drive'" class="fe-drivesearch" data-testid="drive-search">
+        <svg
+          class="fe-ficon fe-drivesearch__glass"
+          viewBox="0 0 24 24"
+          fill="none"
+          stroke="currentColor"
+          stroke-width="1.9"
+          stroke-linecap="round"
+          aria-hidden="true"
+          focusable="false"
+        >
+          <circle cx="11" cy="11" r="6.5" />
+          <path d="M16 16l4.5 4.5" />
+        </svg>
+        <input
+          ref="searchEl"
+          type="search"
+          class="fe-drivesearch__input"
+          :placeholder="drivePlaceholder"
+          :value="localSearch"
+          :aria-label="t('toolbar.search')"
+          @input="onSearchInput"
+          @keydown="onSearchKeydown"
+        />
+        <button
+          type="button"
+          class="fe-drivesearch__kbd"
+          :title="t('drive.search.hint_title', { combo: paletteCombo })"
+          :aria-label="t('drive.search.hint_title', { combo: paletteCombo })"
+          data-testid="drive-search-palette"
+          @click="emit('open-palette', localSearch)"
+        >
+          {{ paletteCombo }}
+        </button>
+      </div>
+      <div v-else class="fe-search">
         <input
           ref="searchEl"
           type="search"
@@ -515,7 +633,7 @@ function onMoreSelect(a: ContextAction) {
         />
       </div>
       <button
-        v-if="!atVirtualRoot && canWrite !== false"
+        v-if="shell !== 'drive' && !atVirtualRoot && canWrite !== false"
         type="button"
         class="fe-btn fe-btn--icon-only"
         :title="t('toolbar.upload')"
@@ -533,9 +651,26 @@ function onMoreSelect(a: ContextAction) {
       >
         <span class="fe-icon" aria-hidden="true">↻</span>
       </button>
+      <!-- surucu:d1 — density, theme, the shortcut editor, the tour and the
+           other view modes. Everything the drive header does not draw is one
+           click away here; nothing is removed from the build. -->
+      <button
+        v-if="shell === 'drive'"
+        ref="moreBtnEl"
+        type="button"
+        class="fe-btn fe-btn--icon-only"
+        :title="t('toolbar.more')"
+        :aria-label="t('toolbar.more')"
+        aria-haspopup="menu"
+        data-testid="drive-more"
+        @click="openMore"
+      >
+        <span class="fe-icon" aria-hidden="true">⋯</span>
+      </button>
     </div>
 
     <button
+      v-if="shell !== 'drive'"
       type="button"
       class="fe-btn fe-btn--icon-only fe-toolbar__density"
       :class="{ 'is-active': density === 'compact' }"
@@ -573,8 +708,11 @@ function onMoreSelect(a: ContextAction) {
       </svg>
     </button>
 
-    <!-- koru:k1 — inspector (details panel) toggle -->
+    <!-- koru:k1 — inspector (details panel) toggle.
+         surucu:d1 — the drive shell renders it on the breadcrumb row instead,
+         beside the view switcher, where both belong to the listing. -->
     <button
+      v-if="shell !== 'drive'"
       type="button"
       class="fe-btn fe-btn--icon-only fe-toolbar__inspector"
       :class="{ 'is-active': inspectorOpen }"
@@ -601,6 +739,7 @@ function onMoreSelect(a: ContextAction) {
 
     <!-- wiring:c1 — tema galerisi (palet ikonu) -->
     <button
+      v-if="shell !== 'drive'"
       type="button"
       class="fe-btn fe-btn--icon-only fe-toolbar__theme"
       :title="t('theme.menu')"
@@ -626,49 +765,96 @@ function onMoreSelect(a: ContextAction) {
     </button>
     <!-- /wiring:c1 -->
 
-    <div class="fe-toolbar__view" role="tablist" :aria-label="t('toolbar.view_label') /* wiring:c4 — was hardcoded EN */">
-      <button
-        type="button"
-        v-if="offersView('list')"
-        class="fe-btn fe-btn--icon-only"
-        :class="{ 'is-active': viewMode === 'list' }"
-        role="tab"
-        :aria-selected="viewMode === 'list'"
-        :title="t('toolbar.view.list')"
-        :aria-label="t('toolbar.view.list') /* wiring:c4 */"
-        @click="emit('update:viewMode', 'list')"
-      >
-        <span class="fe-icon" aria-hidden="true">☰</span>
-      </button>
+    <ViewSwitcher
+      v-if="shell !== 'drive'"
+      :view-mode="viewMode"
+      :locale="locale"
+      :modes="viewModes"
+      @update:view-mode="emit('update:viewMode', $event)"
+    />
+    </template>
+
+    <!-- surucu:d1 — narrow DRIVE layout: [☰] [ search ] [⋯].
+         The classic narrow row hides search behind a magnifier, which is the
+         right trade when the row also carries Up / Upload / actions. This shell
+         does not: "+ New" lives in the drawer, upload has the floating button
+         at this width already, and the whole point of the profile is that the
+         search field is the thing you see. So the field keeps the row, and only
+         the ⌘K chip goes (CSS) — a phone cannot press it, and the palette stays
+         in the "⋯" menu. -->
+    <template v-else-if="shell === 'drive'">
       <button
+        v-if="navEnabled !== false"
         type="button"
-        v-if="offersView('grid')"
-        class="fe-btn fe-btn--icon-only"
-        :class="{ 'is-active': viewMode === 'grid' }"
-        role="tab"
-        :aria-selected="viewMode === 'grid'"
-        :title="t('toolbar.view.grid')"
-        :aria-label="t('toolbar.view.grid') /* wiring:c4 */"
-        @click="emit('update:viewMode', 'grid')"
+        class="fe-btn fe-btn--icon-only fe-toolbar__nav"
+        :class="{ 'is-active': navOpen }"
+        :aria-pressed="!!navOpen"
+        :title="t('toolbar.nav')"
+        :aria-label="t('toolbar.nav')"
+        data-testid="toolbar-nav"
+        @click="emit('toggle-nav')"
       >
-        <span class="fe-icon" aria-hidden="true">▦</span>
+        <svg
+          class="fe-ficon"
+          viewBox="0 0 24 24"
+          fill="none"
+          stroke="currentColor"
+          stroke-width="1.8"
+          stroke-linecap="round"
+          aria-hidden="true"
+          focusable="false"
+        >
+          <rect x="3.5" y="4.5" width="17" height="15" rx="2" />
+          <path d="M9.5 4.5v15" />
+        </svg>
       </button>
-      <!-- wiring:d2 — üçüncü görünüm: galeri -->
+      <div class="fe-drivesearch" data-testid="drive-search">
+        <svg
+          class="fe-ficon fe-drivesearch__glass"
+          viewBox="0 0 24 24"
+          fill="none"
+          stroke="currentColor"
+          stroke-width="1.9"
+          stroke-linecap="round"
+          aria-hidden="true"
+          focusable="false"
+        >
+          <circle cx="11" cy="11" r="6.5" />
+          <path d="M16 16l4.5 4.5" />
+        </svg>
+        <input
+          ref="searchEl"
+          type="search"
+          class="fe-drivesearch__input"
+          :placeholder="drivePlaceholder"
+          :value="localSearch"
+          :aria-label="t('toolbar.search')"
+          @input="onSearchInput"
+          @keydown="onSearchKeydown"
+        />
+        <button
+          type="button"
+          class="fe-drivesearch__kbd"
+          :title="t('drive.search.hint_title', { combo: paletteCombo })"
+          :aria-label="t('drive.search.hint_title', { combo: paletteCombo })"
+          data-testid="drive-search-palette"
+          @click="emit('open-palette', localSearch)"
+        >
+          {{ paletteCombo }}
+        </button>
+      </div>
       <button
+        ref="moreBtnEl"
         type="button"
-        v-if="offersView('gallery')"
         class="fe-btn fe-btn--icon-only"
-        :class="{ 'is-active': viewMode === 'gallery' }"
-        role="tab"
-        :aria-selected="viewMode === 'gallery'"
-        :title="t('toolbar.view.gallery')"
-        :aria-label="t('toolbar.view.gallery')"
-        @click="emit('update:viewMode', 'gallery')"
+        :title="t('toolbar.more')"
+        :aria-label="t('toolbar.more')"
+        aria-haspopup="menu"
+        data-testid="drive-more"
+        @click="openMore"
       >
-        <span class="fe-icon" aria-hidden="true">▣</span>
+        <span class="fe-icon">⋯</span>
       </button>
-      <!-- /wiring:d2 -->
-    </div>
     </template>
 
     <!-- bag:b4 — narrow layout: [↑?] ... [🔍] [⬆] [⋯], search expands full-width -->
@@ -778,7 +964,7 @@ function onMoreSelect(a: ContextAction) {
         :locale="locale"
         :theme="theme || 'auto'"
         :sheet="coarse"
-        :actions="moreActions"
+        :actions="menuActions"
         @select="onMoreSelect"
       />
     </template>

package/src/components/ViewSwitcher.vue

@@ -0,0 +1,81 @@
+<script setup lang="ts">
+/**
+ * ViewSwitcher — the list / grid / gallery toggle.
+ *
+ * Lifted out of Toolbar.vue unchanged (same classes, same glyphs, same
+ * `role="tablist"` semantics) because the `drive` profile puts it on the
+ * breadcrumb row instead of in the header, and two copies of a switcher is
+ * how the two rows end up offering different modes. One component, mounted
+ * in whichever row the profile asks for.
+ *
+ * `modes` absent = all three, so every embedder that predates `uiProfile`
+ * keeps the switcher it had.
+ *
+ * ⚠ No `<style>` block — package CSS lives in `styles/base.css` (a scoped
+ * block's `data-v` hash does not match in the web-component build).
+ */
+import { useLocale } from '../composables/useLocale';
+import type { LocaleCode } from '../types/ExplorerConfig';
+import type { ViewMode } from '../types/FileNode';
+
+const props = defineProps<{
+  viewMode: ViewMode;
+  locale: LocaleCode;
+  modes?: ViewMode[];
+}>();
+
+const emit = defineEmits<{ (e: 'update:viewMode', v: ViewMode): void }>();
+
+const { t } = useLocale(() => props.locale);
+
+function offers(v: ViewMode): boolean {
+  return !props.modes || props.modes.includes(v);
+}
+</script>
+
+<template>
+  <div class="fe-toolbar__view" role="tablist" :aria-label="t('toolbar.view_label')">
+    <button
+      v-if="offers('list')"
+      type="button"
+      class="fe-btn fe-btn--icon-only"
+      :class="{ 'is-active': viewMode === 'list' }"
+      role="tab"
+      :aria-selected="viewMode === 'list'"
+      :title="t('toolbar.view.list')"
+      :aria-label="t('toolbar.view.list')"
+      data-testid="view-list"
+      @click="emit('update:viewMode', 'list')"
+    >
+      <span class="fe-icon" aria-hidden="true">☰</span>
+    </button>
+    <button
+      v-if="offers('grid')"
+      type="button"
+      class="fe-btn fe-btn--icon-only"
+      :class="{ 'is-active': viewMode === 'grid' }"
+      role="tab"
+      :aria-selected="viewMode === 'grid'"
+      :title="t('toolbar.view.grid')"
+      :aria-label="t('toolbar.view.grid')"
+      data-testid="view-grid"
+      @click="emit('update:viewMode', 'grid')"
+    >
+      <span class="fe-icon" aria-hidden="true">▦</span>
+    </button>
+    <button
+      v-if="offers('gallery')"
+      type="button"
+      class="fe-btn fe-btn--icon-only"
+      :class="{ 'is-active': viewMode === 'gallery' }"
+      role="tab"
+      :aria-selected="viewMode === 'gallery'"
+      :title="t('toolbar.view.gallery')"
+      :aria-label="t('toolbar.view.gallery')"
+      data-testid="view-gallery"
+      @click="emit('update:viewMode', 'gallery')"
+    >
+      <span class="fe-icon" aria-hidden="true">▣</span>
+    </button>
+  </div>
+</template>

package/src/composables/useFileApi.ts

@@ -77,6 +77,14 @@ export interface Grant {
   inherited?: boolean;
 }
 
+/** surucu:d1 — `GET /api/files/quota/me` (quota.Snapshot). */
+export interface QuotaSnapshot {
+  used_bytes: number;
+  quota_bytes: number;
+  percent_used: number;
+  unlimited: boolean;
+}
+
 export interface PermissionsResponse {
   path: string;
   storage_rbac: boolean;
@@ -226,6 +234,9 @@ export function resolveEndpoints(config: ExplorerConfig): EndpointMap {
     // filex trash: list soft-deleted nodes + restore one by node id.
     trashList: derive(config.trashList, '/api/files/manager/trash'),
     trashRestore: derive(config.trashRestore, '/api/files/manager/restore'),
+    /* wiring:e2 — escrow proof-of-possession, then the owner is told. */
+    e2eEscrowChallenge: derive(config.e2eEscrowChallenge, '/api/files/e2e/escrow/challenge'),
+    e2eEscrowUsed: derive(config.e2eEscrowUsed, '/api/files/e2e/escrow/used'),
   };
 }
 
@@ -454,6 +465,31 @@ export function useFileApi(config: ExplorerConfig) {
     return Array.isArray(data?.results) ? data.results : [];
   }
 
+  /* === surucu:d1 — the signed-in person's storage line ==================
+   * `GET /api/files/quota/me` → `{used_bytes, quota_bytes, percent_used,
+   * unlimited}` (internal/quota/service.go `Snapshot`). Derived from the
+   * manager endpoint the same way permissions and search are, so a proxy that
+   * forwards /api/files/* keeps working.
+   *
+   * ⚠ PER-USER, never per-storage: usage is `SUM(nodes.size) WHERE owner_id=me`
+   * and there is no per-provider quota. Anything labelling this figure with a
+   * drive's name is describing a number the server did not send.
+   *
+   * ⚠ Returns null rather than throwing on ANY failure — a server without the
+   * route (404), an app token with no person behind it (403) or an older build
+   * must leave the panel exactly as it was, not put an error where a status
+   * line goes.
+   */
+  async function quotaMe(): Promise<QuotaSnapshot | null> {
+    const base = endpoints.manager.replace(/\/manager(\?.*)?$/, '/quota/me');
+    try {
+      const q = await jsonFetch<QuotaSnapshot>(base);
+      return q && typeof q.used_bytes === 'number' ? q : null;
+    } catch {
+      return null;
+    }
+  }
+
   async function subfolders(path: string): Promise<{ folders: FileNode[] }> {
     return jsonFetch<{ folders: FileNode[] }>(managerUrl('subfolders', { path }));
   }
@@ -624,11 +660,22 @@ export function useFileApi(config: ExplorerConfig) {
    */
   async function fetchBlob(
     path: string,
+    opts: { fresh?: boolean } = {},
   ): Promise<{ url: string; blob: Blob; mime: string }> {
     const headers = await authHeaders();
     const res = await fetch(previewUrl(path), {
       headers,
       credentials: credentialsMode(),
+      // ⚠ The preview endpoint answers `Cache-Control: private, max-age=60`,
+      // which is right for the thing it was built for — a viewer re-opening
+      // an image — and wrong for anything the client treats as CONTROL data.
+      // `.filex-e2e.json` is control data: after the client rewrites it
+      // (recovery upgrade, escrow slot, escrow refusal) the next read inside
+      // that minute came back PRE-write, so the folder looked un-upgraded
+      // and the question filex had just been answered was asked again.
+      // Measured 2026-09-05 in a real browser: decline the escrow offer,
+      // reopen the folder, and the offer was back.
+      cache: opts.fresh ? 'no-store' : 'default',
     });
     if (!res.ok) {
       const text = await res.text().catch(() => '');
@@ -687,6 +734,38 @@ export function useFileApi(config: ExplorerConfig) {
     return jsonFetch<Capabilities>(endpoints.capabilities);
   }
 
+  /* wiring:e2 — escrow use is announced, not merely performed.
+   *
+   * Ask the server for a nonce sealed to the escrow public key; only the
+   * holder of the private half can read it back. Returning it is what earns
+   * the notification to the folder's owner — a bare "I used escrow" POST
+   * would be a string anyone could send.
+   *
+   * ⚠ This is an announcement, not a gate. An operator holding the private
+   * key can decrypt the folder offline with a script and never come here.
+   * docs/E2E-ENCRYPTION.md says so plainly and must keep saying so. */
+  async function e2eEscrowChallenge(
+    path: string,
+  ): Promise<{ id: string; challenge: string; kid: string }> {
+    if (!endpoints.e2eEscrowChallenge) throw new Error('e2e escrow endpoint not configured');
+    return jsonFetch(endpoints.e2eEscrowChallenge, {
+      method: 'POST',
+      body: JSON.stringify({ path }),
+    });
+  }
+
+  async function e2eEscrowUsed(payload: {
+    path: string;
+    id: string;
+    nonce: string;
+  }): Promise<{ ok: boolean; notified: boolean }> {
+    if (!endpoints.e2eEscrowUsed) throw new Error('e2e escrow endpoint not configured');
+    return jsonFetch(endpoints.e2eEscrowUsed, {
+      method: 'POST',
+      body: JSON.stringify(payload),
+    });
+  }
+
   async function createShare(payload: {
     path: string;
     password?: boolean;
@@ -850,6 +929,7 @@ export function useFileApi(config: ExplorerConfig) {
     index,
     search,
     globalSearch /* bul:s3 */,
+    quotaMe /* surucu:d1 */,
     subfolders,
     newFolder,
     rename,
@@ -869,6 +949,9 @@ export function useFileApi(config: ExplorerConfig) {
     // Peripheral
     limits,
     capabilities,
+    /* wiring:e2 */
+    e2eEscrowChallenge,
+    e2eEscrowUsed,
     createShare,
     listShares,
     revokeShare,

package/src/composables/useKeyboardShortcuts.ts

@@ -38,6 +38,8 @@ export interface ShortcutHandlers {
   onShowHelp?: () => void; // ? (Shift+/ on most layouts)
   onToggleInspector?: () => void; // i (koru:k1 details panel)
   onToggleHidden?: () => void; // Ctrl+Shift+. — dot-file visibility
+  /* yildiz:s1 */
+  onStar?: () => void; // S — star / unstar the selection
   onQuickLook?: () => void; // Space (wiring:c2 quick-look overlay)
   /* wiring:d1 — tab strip actions */
   onTabNew?: () => void; // Ctrl+T
@@ -87,6 +89,10 @@ export const SHORTCUT_ACTIONS: ShortcutActionDef[] = [
   { id: 'inspector', defaultCombo: 'I', labelKey: 'shortcuts.inspector', groupKey: 'shortcuts.group.nav' } /* koru:k1 */,
   { id: 'help', defaultCombo: '?', labelKey: 'shortcuts.help', groupKey: 'shortcuts.group.nav' },
   { id: 'toggle-hidden', defaultCombo: 'Ctrl+Shift+.', labelKey: 'shortcuts.toggle_hidden', groupKey: 'shortcuts.group.nav' },
+  /* yildiz:s1 — starring is an action, so it belongs where the other verbs
+   * are. A bare letter like the inspector's `I`; the handler ignores events
+   * from form controls, so it never eats a keystroke meant for a filename. */
+  { id: 'star', defaultCombo: 'S', labelKey: 'shortcuts.star', groupKey: 'shortcuts.group.file' },
   // Selection
   { id: 'select-all', defaultCombo: 'Ctrl+A', labelKey: 'shortcuts.select_all', groupKey: 'shortcuts.group.selection' },
   // File operations
@@ -115,6 +121,7 @@ const HANDLER_KEY: Record<string, keyof ShortcutHandlers> = {
   close: 'onClose',
   inspector: 'onToggleInspector',
   'toggle-hidden': 'onToggleHidden',
+  star: 'onStar' /* yildiz:s1 */,
   help: 'onShowHelp',
   'select-all': 'onSelectAll',
   rename: 'onRename',