@brftech/filex-core 0.42.0 → 0.42.2

package/src/components/SideNav.vue

@@ -242,6 +242,16 @@ const views = computed(() => {
 
 const writable = computed(() => props.canWrite !== false);
 
+/**
+ * The storage the listing is in is mounted read-only. Its "+ New" menu is not
+ * disabled but GONE: on a read-only mount there is no folder where any of
+ * its rows could ever work, and a disabled menu invites the question a menu
+ * cannot answer. The row itself says why — see the tag on it (issue #30).
+ */
+const activeReadOnly = computed(
+  () => !!props.activeStorage && props.storages.some((s) => s.name === props.activeStorage && s.readOnly === true),
+);
+
 /**
  * Which row reads as the one you are standing on.
  *
@@ -426,6 +436,7 @@ const toggleLabel = computed(() => t('sidenav.close'));
            stand here behind `v-if="!newMenu"` (Upload + New folder) is gone:
            both verbs are the first two rows of this menu. -->
       <button
+        v-if="!activeReadOnly"
         ref="newBtnEl"
         type="button"
         class="fe-sidenav__new"
@@ -693,6 +704,17 @@ const toggleLabel = computed(() => t('sidenav.close'));
                 :aria-label="t('sidenav.storage.shared')"
                 >{{ t('sidenav.storage.shared') }}</span
               >
+              <!-- A read-only mount says so on the row, where the user looks
+                   for it. The admin list had an "RO" badge; the people it
+                   applied to never saw one (issue #30). -->
+              <span
+                v-if="showLabels && s.readOnly"
+                class="fe-sidenav__tag"
+                role="img"
+                data-testid="sidenav-storage-readonly"
+                :aria-label="t('sidenav.storage.readOnly')"
+                >{{ t('sidenav.storage.readOnly') }}</span
+              >
             </button>
           </li>
         </ul>

package/src/components/TokensPanel.vue

@@ -30,6 +30,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { ApiToken } from '../types/Tokens';
 import { useLocale } from '../composables/useLocale';
 import { useTokens } from '../composables/useTokens';
+import { useScrolledX } from '../composables/useScrolledX';
 import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
@@ -61,6 +62,7 @@ const emit = defineEmits<{
 
 const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t, formatDate } = useLocale(locale);
+const { scrolledX, onScroll } = useScrolledX();
 
 const { tokens, loading, error, canMint, revealed, load, create, remove, dismiss } = useTokens(
   props.config,
@@ -288,28 +290,30 @@ function usedLabel(row: ApiToken): string {
     </div>
 
     <p v-if="loading" class="fe-s3keys__muted">…</p>
-    <table v-else-if="tokens.length" class="fe-s3keys__table">
-      <thead>
-        <tr>
-          <th>{{ t('conn.tokens.col.label') }}</th>
-          <th>{{ t('conn.tokens.col.scopes') }}</th>
-          <th>{{ t('conn.tokens.col.used') }}</th>
-          <th></th>
-        </tr>
-      </thead>
-      <tbody>
-        <tr v-for="row in tokens" :key="row.id">
-          <td>{{ row.label || '—' }}</td>
-          <td><code>{{ row.scopes }}</code></td>
-          <td>{{ usedLabel(row) }}</td>
-          <td class="fe-s3keys__actions">
-            <button class="fe-s3keys__link is-danger" :disabled="busy" @click="revoke(row)">
-              {{ confirming === row.id ? t('conn.tokens.confirm') : t('conn.tokens.revoke') }}
-            </button>
-          </td>
-        </tr>
-      </tbody>
-    </table>
+    <div v-else-if="tokens.length" class="fe-s3keys__scroll" :class="{ 'is-scrolled-x': scrolledX }" @scroll.passive="onScroll">
+      <table class="fe-s3keys__table">
+        <thead>
+          <tr>
+            <th>{{ t('conn.tokens.col.label') }}</th>
+            <th>{{ t('conn.tokens.col.scopes') }}</th>
+            <th>{{ t('conn.tokens.col.used') }}</th>
+            <th></th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr v-for="row in tokens" :key="row.id">
+            <td>{{ row.label || '—' }}</td>
+            <td><code>{{ row.scopes }}</code></td>
+            <td>{{ usedLabel(row) }}</td>
+            <td class="fe-s3keys__actions">
+              <button class="fe-s3keys__link is-danger" :disabled="busy" @click="revoke(row)">
+                {{ confirming === row.id ? t('conn.tokens.confirm') : t('conn.tokens.revoke') }}
+              </button>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
     <p v-else-if="canMint" class="fe-s3keys__muted">{{ t('conn.tokens.empty') }}</p>
 
     <!-- ⚠ Said next to the button rather than in a document nobody opens: a

package/src/composables/useScrolledX.ts

@@ -0,0 +1,21 @@
+import { ref } from 'vue';
+
+/**
+ * "Is this box scrolled sideways at all?" — the one fact a pinned column
+ * needs in order to draw its left divider only while something is actually
+ * sliding underneath it. A permanent divider would claim the column is
+ * floating when it is simply the last cell of a table that fits.
+ *
+ * Bind `onScroll` to the scroll container and `scrolledX` to its
+ * `is-scrolled-x` class; the stylesheet does the rest (base.css,
+ * `.fe-s3keys__scroll.is-scrolled-x`).
+ */
+export function useScrolledX() {
+  const scrolledX = ref(false);
+  function onScroll(ev: Event) {
+    const el = ev.currentTarget as HTMLElement | null;
+    const on = (el?.scrollLeft ?? 0) > 0;
+    if (on !== scrolledX.value) scrolledX.value = on;
+  }
+  return { scrolledX, onScroll };
+}

package/src/lib/nodeRow.ts

@@ -0,0 +1,106 @@
+/**
+ * nodeRow — the starred / recently-opened / tag endpoints answer with raw node
+ * rows (relative `path`, numeric `storage_id`, RFC3339 stamps), not the
+ * listing shape. This turns one row into the `FileNode` every view renders.
+ *
+ * Pure on purpose: the explorer wraps it with its own config, and the unit
+ * test pins the two facts the context menu depends on — `perm` and
+ * `read_only` — without mounting the component.
+ */
+import type { FileNode } from '../types';
+
+/** What the explorer knows about the install, as far as a row needs it. */
+export interface NodeRowContext {
+  /** `config.storages` — names, and the host's read-only flag per storage. */
+  storages: ReadonlyArray<{ name: string; readOnly?: boolean }>;
+  /** Multi-storage root mode: a row that cannot be addressed by storage name
+   *  is dropped rather than guessed into somebody else's drive. */
+  multiStorageRoot: boolean;
+}
+
+const PERM_LEVELS = new Set(['none', 'viewer', 'editor', 'owner']);
+
+/** tablo:t1 — an RFC3339 stamp from a node row as unix ms, or undefined. A
+ *  string we cannot parse is left undefined rather than turned into `NaN`,
+ *  which would print as "Invalid Date" and sort unpredictably. */
+export function rowMillis(v: unknown): number | undefined {
+  if (typeof v !== 'string' || !v) return undefined;
+  const ms = Date.parse(v);
+  return Number.isFinite(ms) ? ms : undefined;
+}
+
+/**
+ * The storage NAME is what a qualified path needs, and a node row does not
+ * carry the id-to-name mapping. The backend fills `storage` for exactly this
+ * (handlers/meta.go, `(*Meta).rows`); against an older server the only safe
+ * fallback is the single-storage case — guessing in a multi-storage install
+ * sends the user to a path in somebody else's drive.
+ */
+export function nodeRowToFileNode(
+  row: Record<string, unknown>,
+  ctx: NodeRowContext,
+): FileNode | null {
+  const rel = String(row?.path ?? '').replace(/^\/+/, '');
+  if (!rel) return null;
+  const configured = ctx.storages ?? [];
+  const storageName =
+    typeof row.storage === 'string' && row.storage
+      ? row.storage
+      : configured.length === 1
+        ? configured[0].name
+        : '';
+  if (ctx.multiStorageRoot && !storageName) return null;
+  const name = String(row.name ?? rel.split('/').pop() ?? '');
+  const isDir = row.type === 'dir';
+  const size = typeof row.size === 'number' ? row.size : 0;
+  const id = typeof row.id === 'number' ? row.id : undefined;
+  /* ⚠⚠ THE CONTEXT MENU MUST BE THE SAME EVERYWHERE (owner, 2026-09-19). The
+     menu gates Rename / Delete / Move to / Share on the row's own `perm` and
+     on the storage's `read_only` — a folder listing carries both, and until
+     these two lines a Recent / Starred / tag / Home row carried neither, so
+     the menu fell back to the folder opened LAST: nothing on the landing page
+     (every write verb gone), or a stale writable folder (every write verb
+     offered on a read-only mount). The row says for itself what may be done
+     to it, because in these views there is no folder to ask.
+     `read_only` prefers the server's word and falls back to the host's own
+     storage list for a server that predates the field. */
+  const perm =
+    typeof row.perm === 'string' && PERM_LEVELS.has(row.perm)
+      ? (row.perm as FileNode['perm'])
+      : undefined;
+  const hostReadOnly = configured.find((s) => s.name === storageName)?.readOnly === true;
+  const readOnly = typeof row.read_only === 'boolean' ? row.read_only : hostReadOnly;
+  return {
+    type: isDir ? 'dir' : 'file',
+    id,
+    /* tablo:t1 — ⚠⚠ THE DATE. A node row carries `backend_mtime` (what the
+       storage says) and `db_mtime` (what our last scan recorded) as RFC3339
+       strings; `FileNode.last_modified` is unix MILLISECONDS. Nothing mapped
+       between the two, so every row from Recent, Starred and a tag view
+       arrived with no date at all — measured on Recent: eleven rows, eleven em
+       dashes in the Modified column, and a Modified column header you could
+       click that then sorted nothing. It also made the date grouping this view
+       is supposed to show impossible, because every row fell in the "No date"
+       bucket. Storage first: `backend_mtime` is the file's own truth and
+       `db_mtime` only says when we last looked at it. */
+    last_modified: rowMillis(row.backend_mtime) ?? rowMillis(row.db_mtime),
+    path: storageName ? `${storageName}://${rel}` : rel,
+    basename: name,
+    extension: isDir
+      ? ''
+      : name.includes('.')
+        ? (name.split('.').pop() || '').toLowerCase()
+        : '',
+    storage: storageName,
+    visibility: 'private',
+    size,
+    file_size: size,
+    mime_type: typeof row.mime === 'string' ? row.mime : '',
+    ...(perm ? { perm } : {}),
+    read_only: readOnly,
+    // Keyed by node id. A file with no rendered thumbnail 404s here and the
+    // view falls back to its icon — the contract the ordinary listing has too.
+    thumb_url: !isDir && id !== undefined ? `/api/files/thumb/${id}` : undefined,
+    extra_metadata: {},
+  } as unknown as FileNode;
+}

package/src/locales/en.ts

@@ -983,7 +983,7 @@ export const en: Record<string, string> = {
   'storages.fields.share': 'Share',
   'storages.fields.domain': 'Domain / workgroup',
   'storages.fields.dialTimeout': 'Connect timeout (seconds)',
-  'storages.fieldHelp.disablePresign': 'Turn on when the store rejects SDK-signed URLs (Ceph RGW / some Hetzner setups answer SignatureDoesNotMatch); uploads then stream through the backend.',
+  'storages.fieldHelp.disablePresign': 'On by default: uploads and the downloads behind public share links stream through filex, so the bucket endpoint never has to be reachable from a browser (a LAN-only MinIO just works). Turn it off only when the endpoint is reachable from your users\' browsers (AWS, a public MinIO) and you want them to talk to the bucket directly — faster for very large files, and the store must accept SDK-signed URLs (Ceph RGW / some Hetzner setups answer SignatureDoesNotMatch).',
   'storages.fieldHelp.endpoint': 'Leave empty for AWS S3. Any S3-compatible store needs its endpoint.',
   'storages.fieldHelp.hostKey': 'A single public key in authorized_keys / known_hosts line form.',
   'storages.fieldHelp.insecureSkipHostKey': 'Accepts any host key. Only for throwaway hosts.',
@@ -1047,6 +1047,7 @@ export const en: Record<string, string> = {
   // "expand" would promise a width change to something that has no width.
   'sidenav.open': 'Open navigation',
   'sidenav.storage.shared': 'Shared',
+  'sidenav.storage.readOnly': 'Read-only',
   // ⚠ `toolbar.nav` is GONE, and nothing replaced it. It was the one label on
   // the panel's collapse control, first as the noun "Navigation" — which names
   // the panel and never says the button does anything to it, so the owner
@@ -1121,8 +1122,13 @@ export const en: Record<string, string> = {
   'newdoc.create': 'Create',
   'newdoc.creating': 'Creating…',
   'newdoc.cancel': 'Cancel',
+  // ⚠ The top search field searches the WHOLE storage (and every storage at
+  // the root) — never only the open folder. The scope named here is therefore
+  // the storage, not the folder; "Filter in this folder…" (FilterBar) is the
+  // folder-scoped one. It used to say "Search in Photos" for a folder called
+  // Photos, which was a lie (2026-09-19).
   'drive.search.placeholder': 'Search in {scope}',
-  'drive.search.placeholder_all': 'Search your files',
+  'drive.search.placeholder_all': 'Search all storages',
   'drive.search.hint_title': 'Search everywhere and run commands ({combo})',
   'drive.storage.used': '{used} of {total} used',
   'drive.storage.used_unlimited': '{used} used',

package/src/locales/tr.ts

@@ -983,7 +983,7 @@ export const tr: Record<string, string> = {
   'storages.fields.share': 'Paylaşım',
   'storages.fields.domain': 'Etki alanı / çalışma grubu',
   'storages.fields.dialTimeout': 'Bağlanma zaman aşımı (saniye)',
-  'storages.fieldHelp.disablePresign': 'Depo, SDK\'nın imzaladığı URL\'leri reddediyorsa açın (Ceph RGW / bazı Hetzner kurulumları SignatureDoesNotMatch döner); yüklemeler o zaman arka uç üzerinden akar.',
+  'storages.fieldHelp.disablePresign': 'Varsayılan olarak açık: yüklemeler ve herkese açık paylaşım bağlantılarındaki indirmeler filex üzerinden akar; kova endpoint\'inin tarayıcıdan erişilebilir olması gerekmez (yalnız yerel ağdaki MinIO doğrudan çalışır). Yalnızca endpoint kullanıcıların tarayıcısından erişilebiliyorsa (AWS, herkese açık MinIO) ve tarayıcının kovayla doğrudan konuşmasını istiyorsanız kapatın — çok büyük dosyalarda daha hızlıdır, ama depo SDK\'nın imzaladığı URL\'leri kabul etmelidir (Ceph RGW / bazı Hetzner kurulumları SignatureDoesNotMatch döner).',
   'storages.fieldHelp.endpoint': 'AWS S3 için boş bırakın. S3 uyumlu diğer tüm depolar kendi endpoint\'ini ister.',
   'storages.fieldHelp.hostKey': 'authorized_keys / known_hosts satır biçiminde tek bir açık anahtar.',
   'storages.fieldHelp.insecureSkipHostKey': 'Her sunucu anahtarını kabul eder. Yalnızca geçici sunucular için.',
@@ -1047,6 +1047,7 @@ export const tr: Record<string, string> = {
   // genişliği büyütmeyi vaat ederdi.
   'sidenav.open': 'Gezintiyi aç',
   'sidenav.storage.shared': 'Paylaşılan',
+  'sidenav.storage.readOnly': 'Salt okunur',
   // ⚠ `toolbar.nav` KALDIRILDI, yerine bir şey konmadı — bkz. en.ts'teki not.
   // Paneli daraltan tek denetimin etiketiydi; önce "Gezinti" (panelin adı,
   // düğmenin ne yaptığını söylemiyor), sonra "Gezintiyi göster/gizle" (sabit
@@ -1119,8 +1120,8 @@ export const tr: Record<string, string> = {
   'newdoc.create': 'Oluştur',
   'newdoc.creating': 'Oluşturuluyor…',
   'newdoc.cancel': 'Vazgeç',
-  'drive.search.placeholder': '{scope} içinde ara',
-  'drive.search.placeholder_all': 'Dosyalarında ara',
+  'drive.search.placeholder': '{scope} deposunda ara',
+  'drive.search.placeholder_all': 'Tüm depolarda ara',
   'drive.search.hint_title': 'Her yerde ara ve komut çalıştır ({combo})',
   'drive.storage.used': '{total} alanın {used} kadarı dolu',
   'drive.storage.used_unlimited': '{used} kullanılıyor',

package/src/styles/base.css

@@ -10449,6 +10449,30 @@ filex-explorer {
   box-shadow: -1px 0 0 0 var(--fe-border);
 }
 
+/* The key/token tables in the connection panels (S3KeysPanel, SSHKeysPanel
+   and TokensPanel share `.fe-s3keys__*`) follow the same model as the list
+   view above: the table is as wide as its content and the panel scrolls
+   sideways, the actions cell rides the right edge over the columns sliding
+   under it, carrying the panel's own ground (`--fe-bg-elev`, what
+   `.fe-s3keys` paints), and its divider appears only while something is
+   scrolled underneath (`useScrolledX` flips the class). One rule here rather
+   than three copies in the panels, so they cannot drift apart. */
+.fe-s3keys__scroll {
+  overflow-x: auto;
+}
+.fe-s3keys__scroll .fe-s3keys__table {
+  min-width: max-content;
+}
+.fe-s3keys__table .fe-s3keys__actions {
+  position: sticky;
+  right: 0;
+  z-index: 1;
+  background: var(--fe-bg-elev);
+}
+.fe-s3keys__scroll.is-scrolled-x .fe-s3keys__actions {
+  box-shadow: -1px 0 0 0 var(--fe-border);
+}
+
 /* The date headings travel with the horizontal scroll rather than sliding off
    the left edge — they are `max-content` wide so sticky has somewhere to move
    them to (a full-width block has none). */

package/src/types/FileNode.ts

@@ -42,6 +42,14 @@ export interface FileNode {
    *  projectFileNodes emits it when a storage has RBAC on). '' / undefined =
    *  ACL not enforced. Used to gate edit/manage affordances client-side. */
   perm?: 'none' | 'viewer' | 'editor' | 'owner';
+  /** The row sits on a read-only storage. Carried by the rows that come from
+   *  OUTSIDE a folder listing — Recent, Starred, a tag view, the Home cards,
+   *  the Recently-opened tray (`handlers/meta.go`) — because there the
+   *  listing-level `read_only` has no folder to describe. A folder listing's
+   *  rows leave it unset; `dirReadOnly` answers for the whole folder. Folded
+   *  into the write gate with `perm`, so the context menu is the same in
+   *  every view. */
+  read_only?: boolean;
   /* wiring:e2 — dir rows: true when the folder is E2E-encrypted (carries a
    * `.filex-e2e.json` marker). Drives the 🔒 badge in the listings. */
   e2e?: boolean;