@brftech/filex-core 0.42.0 → 0.42.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brftech/filex-core",
-  "version": "0.42.0",
+  "version": "0.42.1",
   "description": "filex core — Vue 3 source of truth for the filex file manager (FileExplorer + ConnectionsPanel SFCs, composables, types)",
   "type": "module",
   "main": "./dist/filex-core.umd.cjs",

package/src/FileExplorer.vue

@@ -332,6 +332,10 @@ const files = ref<FileNode[]>([]);
 // RBAC effective level for the current directory ('' = ACL not enforced on
 // this storage → no gating). Drives which write/manage actions are offered.
 const dirPerm = ref<string>('');
+/** The listed folder sits on a read-only storage (`read_only` on the index
+ *  response). Folded into permCanEdit so every write affordance — toolbar,
+ *  sidebar menu, context menu, drop zone, editor mode — reads the same fact. */
+const dirReadOnly = ref(false);
 // The dead deep-link state: set to the requested path when a listing came
 // back 404 (folder doesn't exist) or 403 (RBAC-hidden — rendered identically
 // on purpose so a denied folder doesn't reveal that it exists). '' = none.
@@ -2034,6 +2038,14 @@ function onInspectorManage(n: FileNode) {
 // (the pre-RBAC default). Otherwise 'editor'/'owner' may write; only 'owner'
 // manages permissions. Enforcement is server-side; this just shapes the menu.
 function permCanEdit(p: string | undefined): boolean {
+  // A read-only storage refuses every write on the server (403 "storage is
+  // read-only") whatever level the ACL grants — an owner of a read-only mount
+  // is an owner who cannot write. Say so here rather than after the click:
+  // until this line the toolbar offered New folder / Upload and the sidebar's
+  // "+ New" menu on a read-only mount, and the user found out from the error
+  // (issue #30). The level itself is left alone: 'owner' still opens the
+  // permissions panel, sharing a read-only file is still allowed.
+  if (dirReadOnly.value) return false;
   // undefined = ACL not enforced (dev / unwired) → full access. In production
   // the backend always sends a level; 'none'/'viewer' cannot write, only
   // 'editor'/'owner' can.
@@ -2350,6 +2362,7 @@ async function load(path?: string) {
     adapter.value = resp.adapter;
     dirname.value = resp.dirname;
     dirPerm.value = (resp.perm as string) || '';
+    dirReadOnly.value = resp.read_only === true;
     /* wiring:e2 — backend tells us when this dir sits inside an encrypted
        subtree; '' resets on every plain folder. Drives the lock screen. */
     e2eRoot.value = typeof resp.e2e_root === 'string' ? resp.e2e_root : '';

package/src/components/HomeView.vue

@@ -144,9 +144,12 @@ const storageTile = fileIconTile({ type: 'dir', mime_type: 'inode/storage' });
  * with the wrong size line says something false.
  */
 function storageCaption(s: HomeStorage): string {
-  return typeof s.usedBytes === 'number' && s.usedBytes >= 0
-    ? t('drive.storage.used_unlimited', { used: formatSize(s.usedBytes) })
-    : t('conn.guide.storage');
+  const base =
+    typeof s.usedBytes === 'number' && s.usedBytes >= 0
+      ? t('drive.storage.used_unlimited', { used: formatSize(s.usedBytes) })
+      : t('conn.guide.storage');
+  // A read-only mount says so on its card too (issue #30).
+  return s.readOnly ? `${base} · ${t('sidenav.storage.readOnly')}` : base;
 }
 
 /**

package/src/components/SideNav.vue

@@ -242,6 +242,16 @@ const views = computed(() => {
 
 const writable = computed(() => props.canWrite !== false);
 
+/**
+ * The storage the listing is in is mounted read-only. Its "+ New" menu is not
+ * disabled but GONE: on a read-only mount there is no folder where any of
+ * its rows could ever work, and a disabled menu invites the question a menu
+ * cannot answer. The row itself says why — see the tag on it (issue #30).
+ */
+const activeReadOnly = computed(
+  () => !!props.activeStorage && props.storages.some((s) => s.name === props.activeStorage && s.readOnly === true),
+);
+
 /**
  * Which row reads as the one you are standing on.
  *
@@ -426,6 +436,7 @@ const toggleLabel = computed(() => t('sidenav.close'));
            stand here behind `v-if="!newMenu"` (Upload + New folder) is gone:
            both verbs are the first two rows of this menu. -->
       <button
+        v-if="!activeReadOnly"
         ref="newBtnEl"
         type="button"
         class="fe-sidenav__new"
@@ -693,6 +704,17 @@ const toggleLabel = computed(() => t('sidenav.close'));
                 :aria-label="t('sidenav.storage.shared')"
                 >{{ t('sidenav.storage.shared') }}</span
               >
+              <!-- A read-only mount says so on the row, where the user looks
+                   for it. The admin list had an "RO" badge; the people it
+                   applied to never saw one (issue #30). -->
+              <span
+                v-if="showLabels && s.readOnly"
+                class="fe-sidenav__tag"
+                role="img"
+                data-testid="sidenav-storage-readonly"
+                :aria-label="t('sidenav.storage.readOnly')"
+                >{{ t('sidenav.storage.readOnly') }}</span
+              >
             </button>
           </li>
         </ul>

package/src/locales/en.ts

@@ -1047,6 +1047,7 @@ export const en: Record<string, string> = {
   // "expand" would promise a width change to something that has no width.
   'sidenav.open': 'Open navigation',
   'sidenav.storage.shared': 'Shared',
+  'sidenav.storage.readOnly': 'Read-only',
   // ⚠ `toolbar.nav` is GONE, and nothing replaced it. It was the one label on
   // the panel's collapse control, first as the noun "Navigation" — which names
   // the panel and never says the button does anything to it, so the owner

package/src/locales/tr.ts

@@ -1047,6 +1047,7 @@ export const tr: Record<string, string> = {
   // genişliği büyütmeyi vaat ederdi.
   'sidenav.open': 'Gezintiyi aç',
   'sidenav.storage.shared': 'Paylaşılan',
+  'sidenav.storage.readOnly': 'Salt okunur',
   // ⚠ `toolbar.nav` KALDIRILDI, yerine bir şey konmadı — bkz. en.ts'teki not.
   // Paneli daraltan tek denetimin etiketiydi; önce "Gezinti" (panelin adı,
   // düğmenin ne yaptığını söylemiyor), sonra "Gezintiyi göster/gizle" (sabit