@brftech/filex-core 0.31.0 → 0.33.0

package/src/components/InspectorPanel.vue

@@ -24,7 +24,7 @@
  * The panel is mounted with v-if by the host — closed state leaves zero DOM.
  */
 import { computed, ref, watch } from 'vue';
-import type { FileApi, NodeVersion } from '../composables/useFileApi';
+import type { FileApi, Grant, NodeVersion } from '../composables/useFileApi';
 import type { FileNode, ShareInfo } from '../types/FileNode';
 import type { LocaleCode } from '../types/ExplorerConfig';
 import { useLocale } from '../composables/useLocale';
@@ -45,10 +45,28 @@ const props = defineProps<{
   narrow?: boolean;
   /** Authenticated thumbnail resolver (useThumbs.src). Optional. */
   thumbSrc?: (n: FileNode) => string | null;
+  /* === surucu:d1 — the Drive shell's details panel ===================== */
+  /**
+   * Split the panel into **Details** and **Activity** tabs, and draw the two
+   * sections the mockups add: who has access, and the share link with a
+   * "Create link" button. `uiProfile: 'drive'` turns it on; absent/false is
+   * the flat scroll of sections this panel has always been, with no extra
+   * request made.
+   *
+   * ⚠ "Activity" is version history + comments, and nothing else, because
+   * nothing else exists: there is no per-file activity endpoint. The audit log
+   * is admin-only, has no path filter, and stores an EMPTY `target_id` for
+   * every file action (auth/audit_middleware.go) — so "Ayşe renamed this on
+   * Tuesday" cannot be answered by this server, and a timeline that made it up
+   * would be worse than the two real feeds.
+   */
+  tabs?: boolean;
 }>();
 
 const emit = defineEmits<{
   (e: 'close'): void;
+  /** surucu:d1 — a share link was minted from the panel. */
+  (e: 'share-created', payload: { path: string; url: string }): void;
   (e: 'manage-permissions', node: FileNode): void;
   (e: 'toast', message: string): void;
   /** Fired after a successful restore/snapshot so the host can reload. */
@@ -239,6 +257,107 @@ async function takeSnapshot(): Promise<void> {
   }
 }
 
+/* === surucu:d1 — tabs, people with access, the share-link row ==========
+ *
+ * The tab strip is presentation only: every section below is the same section,
+ * rendered under Details or under Activity. Nothing is fetched twice, and
+ * nothing new is fetched at all unless `tabs` is on.
+ */
+type InspectorTab = 'details' | 'activity';
+const tab = ref<InspectorTab>('details');
+
+/** People with access — `GET /api/files/permissions?path=…`.
+ *
+ * ⚠ Owner-gated on the server (handlers/grants.go `requireOwner`), so an
+ * editor or a viewer gets a 403 for a file they can perfectly well see. That
+ * is the server's call, not something to route around: the section hides,
+ * exactly the way the shares list already hides for the same class of caller.
+ * What it must NOT do is render an empty "People with access" and let the
+ * reader conclude that nobody has any.
+ */
+const peopleState = ref<SectionState>('hidden');
+const people = ref<Grant[]>([]);
+let peopleSeq = 0;
+
+async function loadPeople(): Promise<void> {
+  const seq = ++peopleSeq;
+  const node = single.value;
+  if (!props.tabs || !node) {
+    peopleState.value = 'hidden';
+    people.value = [];
+    return;
+  }
+  peopleState.value = 'loading';
+  try {
+    const r = await props.api.listPermissions(node.path);
+    if (seq !== peopleSeq) return;
+    // RBAC off on this storage → there are no grants, and a section reading
+    // "nobody" would misdescribe a drive where everyone can already read it.
+    if (!r.storage_rbac) {
+      peopleState.value = 'hidden';
+      people.value = [];
+      return;
+    }
+    people.value = [...(r.direct ?? []), ...(r.inherited ?? [])];
+    peopleState.value = 'ok';
+  } catch {
+    if (seq !== peopleSeq) return;
+    people.value = [];
+    peopleState.value = 'hidden';
+  }
+}
+
+function personName(g: Grant): string {
+  return g.user_display_name || g.user_email || `#${g.user_id}`;
+}
+
+function personInitial(g: Grant): string {
+  const n = personName(g).trim();
+  return n ? n[0].toUpperCase() : '?';
+}
+
+/** The share-link row: the first live link, or the Create button. */
+const primaryShare = computed(() => (shares.value.length ? shares.value[0] : null));
+const shareBusy = ref(false);
+
+async function createLink(): Promise<void> {
+  const node = single.value;
+  if (!node || shareBusy.value) return;
+  shareBusy.value = true;
+  try {
+    const r = await props.api.createShare({ path: node.path });
+    const url = r.share?.url ?? '';
+    // Re-read the list rather than push the response into it: the LIST
+    // endpoint is what a later copy or revoke acts on, and its `uuid` is the
+    // numeric id the DELETE route wants — not the token the create response
+    // carries under that name.
+    const { shares: list } = await props.api.listShares(node.path);
+    shares.value = Array.isArray(list) ? list : [];
+    sharesState.value = 'ok';
+    if (url) {
+      emit('share-created', { path: node.path, url });
+      await copyText(url);
+    }
+  } catch (err) {
+    emit('toast', (err as Error).message);
+  } finally {
+    shareBusy.value = false;
+  }
+}
+
+watch(
+  () => [props.nodes.map((n) => n.path).join('|'), props.tabs] as const,
+  () => void loadPeople(),
+  { immediate: true },
+);
+
+/* Versions and comments are the two real feeds; when a selection has neither,
+ * the Activity tab says so instead of showing two empty headings. */
+const activityUsable = computed(
+  () => versionsState.value !== 'hidden' || commentsState.value !== 'hidden',
+);
+/* === /surucu:d1 === */
+
 watch(
   () => props.nodes.map((n) => n.path).join(''),
   () => void refresh(),
@@ -372,9 +491,32 @@ watch(
       >×</button>
     </header>
 
+    <!-- surucu:d1 — Details / Activity. Rendered only in the drive shell; the
+         classic panel keeps its single flat scroll of sections. -->
+    <div v-if="tabs" class="fe-inspector__tabs" role="tablist" :aria-label="t('inspector.title')">
+      <button
+        type="button"
+        class="fe-inspector__tab"
+        :class="{ 'is-active': tab === 'details' }"
+        role="tab"
+        :aria-selected="tab === 'details'"
+        data-testid="inspector-tab-details"
+        @click="tab = 'details'"
+      >{{ t('inspector.tab.details') }}</button>
+      <button
+        type="button"
+        class="fe-inspector__tab"
+        :class="{ 'is-active': tab === 'activity' }"
+        role="tab"
+        :aria-selected="tab === 'activity'"
+        data-testid="inspector-tab-activity"
+        @click="tab = 'activity'"
+      >{{ t('inspector.tab.activity') }}</button>
+    </div>
+
     <div class="fe-inspector__scroll">
       <!-- ══ Genel ══ -->
-      <section class="fe-inspector__section">
+      <section v-if="!tabs || tab === 'details'" class="fe-inspector__section">
         <h3 class="fe-inspector__heading">{{ t('inspector.section.general') }}</h3>
 
         <!-- Multi selection → summary -->
@@ -457,7 +599,7 @@ watch(
 
       <!-- ══ Sürümler ══ -->
       <section
-        v-if="versionsState === 'ok' || versionsState === 'error'"
+        v-if="(versionsState === 'ok' || versionsState === 'error') && (!tabs || tab === 'activity')"
         class="fe-inspector__section"
       >
         <h3 class="fe-inspector__heading">{{ t('inspector.section.versions') }}</h3>
@@ -519,7 +661,21 @@ watch(
       </section>
 
       <!-- ══ İzinler ══ -->
-      <section v-if="single && effectivePerm" class="fe-inspector__section">
+      <!-- ⚠ surucu:d1 — stands down when "People with access" is on screen. The
+           two say the same thing there (your own row is in the roster, with the
+           same level) and each carries its own button into the SAME modal —
+           two doors into one room, six lines apart. It stays for every other
+           case, which is exactly the case where People is hidden: RBAC off on
+           the storage, or the server refusing the grant list to a non-owner. -->
+      <section
+        v-if="
+          single &&
+          effectivePerm &&
+          (!tabs || tab === 'details') &&
+          !(tabs && peopleState === 'ok')
+        "
+        class="fe-inspector__section"
+      >
         <h3 class="fe-inspector__heading">{{ t('inspector.section.permissions') }}</h3>
         <div class="fe-inspector__permrow">
           <span
@@ -535,10 +691,62 @@ watch(
         </div>
       </section>
 
+      <!-- ══ surucu:d1 — People with access ══
+           Real grants from `GET /api/files/permissions`; hidden entirely when
+           the caller is not an owner (403) or the storage has RBAC off, rather
+           than drawn empty. -->
+      <section
+        v-if="tabs && tab === 'details' && peopleState === 'ok'"
+        class="fe-inspector__section"
+        data-testid="inspector-people"
+      >
+        <h3 class="fe-inspector__heading">{{ t('inspector.people') }}</h3>
+        <p v-if="people.length === 0" class="fe-inspector__empty">
+          {{ t('inspector.people.empty') }}
+        </p>
+        <ul v-else class="fe-inspector__people">
+          <li v-for="g in people" :key="`${g.id}-${g.user_id}`" class="fe-inspector__person">
+            <span class="fe-inspector__avatar" aria-hidden="true">{{ personInitial(g) }}</span>
+            <span class="fe-inspector__person-main">
+              <span class="fe-inspector__person-name" :title="g.user_email">{{ personName(g) }}</span>
+              <span class="fe-inspector__person-sub">
+                {{ permLabel(g.level) }}<template v-if="g.inherited"> · {{ t('inspector.people.inherited') }}</template>
+              </span>
+            </span>
+          </li>
+        </ul>
+        <button
+          v-if="canManagePerms && single"
+          type="button"
+          class="fe-btn fe-btn--sm"
+          @click="emit('manage-permissions', single)"
+        >{{ t('inspector.people.manage') }}</button>
+      </section>
+
       <!-- ══ Paylaşımlar ══ -->
-      <section v-if="sharesState === 'ok'" class="fe-inspector__section">
-        <h3 class="fe-inspector__heading">{{ t('inspector.section.shares') }}</h3>
-        <p v-if="shares.length === 0" class="fe-inspector__empty">
+      <section
+        v-if="sharesState === 'ok' && (!tabs || tab === 'details')"
+        class="fe-inspector__section"
+        data-testid="inspector-shares"
+      >
+        <h3 class="fe-inspector__heading">
+          {{ tabs ? t('inspector.link') : t('inspector.section.shares') }}
+        </h3>
+        <!-- surucu:d1 — the mockup's link row: what the state IS, and the one
+             button that changes it. Only when there is no link yet; the list
+             below is what an item that HAS links has always shown. -->
+        <div v-if="tabs && shares.length === 0" class="fe-inspector__linkrow">
+          <span class="fe-inspector__linkicon" aria-hidden="true">🔗</span>
+          <span class="fe-inspector__linknone">{{ t('inspector.link.none') }}</span>
+          <button
+            type="button"
+            class="fe-btn fe-btn--sm"
+            :disabled="shareBusy || !single"
+            data-testid="inspector-create-link"
+            @click="createLink"
+          >{{ t('inspector.link.create') }}</button>
+        </div>
+        <p v-else-if="shares.length === 0" class="fe-inspector__empty">
           {{ t('inspector.shares.empty') }}
         </p>
         <ul v-else class="fe-inspector__shares">
@@ -561,7 +769,7 @@ watch(
 
       <!-- ══ calisma:d3 — Yorumlar ══ -->
       <section
-        v-if="commentsState === 'ok' || commentsState === 'error'"
+        v-if="(commentsState === 'ok' || commentsState === 'error') && (!tabs || tab === 'activity')"
         class="fe-inspector__section"
       >
         <h3 class="fe-inspector__heading">
@@ -620,6 +828,21 @@ watch(
         </template>
       </section>
       <!-- ══ /calisma:d3 ══ -->
+
+      <!-- surucu:d1 — the Activity tab with nothing behind it. It says which
+           two feeds fill it, because there is no third one to wait for: this
+           server keeps no per-file audit trail (target_id is empty for every
+           file action, and the log is admin-only). -->
+      <section
+        v-if="tabs && tab === 'activity' && !activityUsable"
+        class="fe-inspector__section"
+        data-testid="inspector-activity-empty"
+      >
+        <p class="fe-inspector__empty">
+          {{ single ? t('inspector.activity.empty') : t('inspector.activity.select') }}
+        </p>
+        <p v-if="single" class="fe-inspector__hint">{{ t('inspector.activity.hint') }}</p>
+      </section>
     </div>
   </aside>
 </template>

package/src/components/ListView.vue

@@ -33,6 +33,15 @@ const props = defineProps<{
   /** Set of node IDs flagged starred by the user — render an inline
    *  filled star indicator and let the user toggle it from the row. */
   starredIds?: Set<number>;
+  /**
+   * Offer the star affordance at all. Follows the Starred view: when the panel
+   * leaves that view out — a shared app token has no single person behind it,
+   * so "your starred files" is one list shown to strangers — offering to star
+   * something is offering to write into that same shared list. Owner's call,
+   * 2026-09-05, verbatim (translated from Turkish): "if the starred place is
+   * not visible, then star/unstar should not be visible either".
+   */
+  starEnabled?: boolean;
   /** Backend base URL + auth header builder forwarded to StarButton
    *  so it can POST /api/files/manager/star on click. Optional —
    *  embedders without auth wire-up pass nothing and the star column
@@ -145,7 +154,7 @@ function cancelPress() {
 function specialEmojiFor(n: FileNode): string | null {
   if (n.basename === '.trash') return '🗑';
   if (n.mime_type === 'inode/storage') return '💾';
-  if (n.type === 'dir' && n.e2e === true) return '🔒'; /* wiring:e2 — şifreli klasör rozeti */
+  if (n.type === 'dir' && n.e2e === true) return '🔒'; /* wiring:e2 — encrypted-folder badge */
   return null;
 }
 
@@ -375,7 +384,7 @@ const segments = computed<Segment[]>(() => {
         tabindex="0"
         :aria-selected="isSelected(n) ? 'true' : 'false'"
         :aria-label="nodeDisplayName(n) /* wiring:c4 */"
-        :data-fe-path="n.path /* wiring:d1 — orta-tık yeni sekme delegasyonu */"
+        :data-fe-path="n.path /* wiring:d1 — middle-click open-in-new-tab delegation */"
         draggable="true"
         @click="onRowClick(n, $event)"
         @dblclick="onRowDbl(n)"
@@ -390,7 +399,7 @@ const segments = computed<Segment[]>(() => {
       >
         <div class="fe-list__col fe-list__col--star" role="gridcell" @click.stop>
           <StarButton
-            v-if="typeof n.id === 'number' && n.type === 'file'"
+            v-if="starEnabled !== false && typeof n.id === 'number' && n.type === 'file'"
             :starred="!!starredIds?.has(n.id)"
             :node-id="n.id"
             :api-base="apiBase"

package/src/components/NFSExportsPanel.vue

@@ -17,6 +17,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { NFSExport } from '../types/NFSExports';
 import { useLocale } from '../composables/useLocale';
 import { useNFSExports } from '../composables/useNFSExports';
+import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
   config: ExplorerConfig;
@@ -28,7 +29,7 @@ const emit = defineEmits<{
   (e: 'active', v: { host: string; port: number; enabled: boolean; path?: string; readOnly: boolean }): void;
 }>();
 
-const locale = computed<LocaleCode>(() => props.config.locale ?? 'tr');
+const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t } = useLocale(locale);
 
 const {

package/src/components/PendingOpsTray.vue

@@ -5,7 +5,7 @@
  * Historically a bottom-left toast list for queued copy/move/delete. Since
  * the unified operations center it renders NOTHING: it reconciles the
  * usePendingOps rows into the shared useOperations store; OperationsCenter
- * draws them. Terminal-state lingering ("bitti" flash → history) and sticky
+ * draws them. Terminal-state lingering ("done" flash → history) and sticky
  * errors are handled by the store — note usePendingOps sweeps terminal rows
  * after its RETAIN window, which the store treats as "move to history"
  * (errors stay pinned until the user dismisses them).

package/src/components/PresenceBar.vue

@@ -11,6 +11,7 @@ import type { PresenceUser } from '../lib/realtime';
 import type { LocaleCode } from '../types/ExplorerConfig';
 import { useLocale } from '../composables/useLocale';
 import PresenceAvatar from './PresenceAvatar.vue';
+import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
   users: PresenceUser[];
@@ -18,7 +19,7 @@ const props = defineProps<{
   locale?: LocaleCode;
 }>();
 
-const { t } = useLocale(() => props.locale ?? 'tr');
+const { t } = useLocale(() => resolveLocale(props.locale));
 
 const others = computed(() =>
   (props.users ?? []).filter((u) => props.selfId == null || u.id !== props.selfId),
@@ -87,7 +88,7 @@ function label(u: PresenceUser): string {
         <span v-if="others.length > 5" class="fx-presence-more">+{{ others.length - 5 }}</span>
       </div>
       <span class="fx-presence-text" :title="others.map(label).join(', ')">
-        {{ others.length === 1 ? others[0].name : `${others.length} kişi` }}
+        {{ others.length === 1 ? others[0].name : t('presence.others', { n: others.length }) }}
         <template v-if="others.length === 1 && others[0].file">
           · <span class="fx-presence-file">{{ others[0].file }}</span>
         </template>

package/src/components/S3KeysPanel.vue

@@ -22,6 +22,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { S3AccessKey } from '../types/S3Keys';
 import { useLocale } from '../composables/useLocale';
 import { useS3Keys } from '../composables/useS3Keys';
+import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
   config: ExplorerConfig;
@@ -34,7 +35,7 @@ const emit = defineEmits<{
   (e: 'active', v: { accessKeyID: string; secret?: string; endpoint: string; pathStyle: boolean }): void;
 }>();
 
-const locale = computed<LocaleCode>(() => props.config.locale ?? 'tr');
+const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t } = useLocale(locale);
 
 const {

package/src/components/SSHKeysPanel.vue

@@ -18,6 +18,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { FTPSFacts, SSHPublicKey } from '../types/SSHKeys';
 import { useLocale } from '../composables/useLocale';
 import { useSSHKeys } from '../composables/useSSHKeys';
+import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
   config: ExplorerConfig;
@@ -47,7 +48,7 @@ const emit = defineEmits<{
   }): void;
 }>();
 
-const locale = computed<LocaleCode>(() => props.config.locale ?? 'tr');
+const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t } = useLocale(locale);
 
 const { keys, connection, loading, error, canAdd, hasUsableKey, load, add, setDisabled, remove } =

package/src/components/SecondaryPane.vue

@@ -1,6 +1,6 @@
 <script setup lang="ts">
 /**
- * SecondaryPane — wiring:d1 split görünümün sağ (ikincil) paneli.
+ * SecondaryPane — wiring:d1 the right-hand (secondary) pane of the split view.
  *
  * Deliberately LIGHT: its own path + its own listing — fetched through
  * the SAME FileApi instance the host already constructed (`api.index`,
@@ -64,6 +64,13 @@ const props = defineProps<{
   /** ui-fix — mirror the main panel's virtual `.trash` row at storage root
    *  so both split panes list identical rows (no row-offset). Defaults on. */
   trashVisible?: boolean;
+  /**
+   * The navigation panel is already offering Trash, so neither pane draws the
+   * virtual row. Passed down rather than worked out here: the panel belongs to
+   * the host explorer, and a pane that guessed at it is how the two halves of a
+   * split end up listing different rows.
+   */
+  navOffersTrash?: boolean;
 }>();
 
 const emit = defineEmits<{
@@ -72,11 +79,12 @@ const emit = defineEmits<{
   (e: 'close'): void;
   (e: 'open-tab', path: string): void;
   (e: 'transfer', p: { sources: string[]; targetWire: string; originWire?: string }): void;
-  /* ui-fix — yan panelde sağ-tık: menü ana bileşende (FileExplorer) açılır.
-   * node=null → boş alana sağ-tık (seçimsiz, yalnız Yapıştır). */
+  /* ui-fix — right-click inside the side pane: the menu is opened by the main
+   * component (FileExplorer). node=null → right-click on empty space (nothing
+   * selected, so "Paste" only). */
   (e: 'context', node: FileNode | null, ev: MouseEvent): void;
-  /* ui-fix — çöp kutusu satırı açıldığında: trash görünümü ana panele aittir
-   * (geri yükleme aksiyonlarıyla), host loadTrash() ile açar. */
+  /* ui-fix — when the trash row is opened: the trash view belongs to the main
+   * panel (it carries the restore actions), so the host opens it via loadTrash(). */
   (e: 'open-trash'): void;
 }>();
 
@@ -114,7 +122,14 @@ async function loadPane(target?: string): Promise<void> {
     // Same internal-entry filter + virtual `.trash` row as the main panel
     // (shared helpers → both split panes list identical rows, no offset).
     files.value = filterListing(resp.files);
-    if (injectTrashRow(files.value, resp.adapter, resp.dirname, props.trashVisible !== false)) {
+    if (
+      injectTrashRow(files.value, resp.adapter, resp.dirname, props.trashVisible !== false, {
+        // ⚠ The panel is a sibling of BOTH panes. If it is offering Trash, this
+        // pane must drop the row too — otherwise the duplication is not removed,
+        // it just moves to the right-hand half of a split.
+        navOffersTrash: props.navOffersTrash,
+      })
+    ) {
       void hydrateTrashRow(files.value, resp.adapter, props.api);
     }
     path.value = props.toUser(resp.dirname);
@@ -130,7 +145,7 @@ async function loadPane(target?: string): Promise<void> {
 void loadPane(props.initialPath ?? '');
 
 // ------------------------------------------------------------------
-// Breadcrumb (kırıntı)
+// Breadcrumb
 // ------------------------------------------------------------------
 
 interface Crumb {
@@ -190,12 +205,12 @@ function onViewContext(n: FileNode, ev: MouseEvent) {
   emit('context', n, ev);
 }
 
-/* ui-fix — boş alana (arka plan) sağ-tık: seçimsiz menü (yalnız Yapıştır)
- * → boş klasöre / mevcut klasöre dosya yapıştırma. Satır menüsü stopProp
- * ettiğinden bu yalnız gerçek boş alanda tetiklenir. */
+/* ui-fix — right-click on empty space (the background): a selection-less menu
+ * ("Paste" only) → pasting files into an empty / into the current folder. The
+ * row menu calls stopProp, so this only fires on genuinely empty space. */
 function onBgContext(ev: MouseEvent) {
   ev.preventDefault();
-  ev.stopPropagation(); // FileExplorer kökündeki canvas menüsüne bubble etmesin
+  ev.stopPropagation(); // don't bubble into the canvas menu on the FileExplorer root
   emit('activate');
   selected.value = new Set();
   emit('context', null, ev);
@@ -385,8 +400,8 @@ defineExpose({ reload, goUp, selectAll, openSelected, selectedNodes, getPath });
       <div v-else-if="files.length === 0" class="fe-split__state">
         {{ t('empty.folder') }}
       </div>
-      <!-- ui-fix — aynı görünüm bileşenleri (list/grid/gallery), pane'in
-           kendi viewMode'uyla; eski düz fe-split__list kalktı. -->
+      <!-- ui-fix — the same view components (list/grid/gallery), driven by the
+           pane's own viewMode; the old flat fe-split__list is gone. -->
       <ListView
         v-else-if="(viewMode ?? 'list') === 'list'"
         :files="files"