@brftech/filex-core 0.42.0 → 0.42.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brftech/filex-core",
-  "version": "0.42.0",
+  "version": "0.42.2",
   "description": "filex core — Vue 3 source of truth for the filex file manager (FileExplorer + ConnectionsPanel SFCs, composables, types)",
   "type": "module",
   "main": "./dist/filex-core.umd.cjs",

package/src/FileExplorer.vue

@@ -161,6 +161,7 @@ import {
   injectTrashRow,
   hydrateTrashRow as hydrateTrashRowShared,
 } from './lib/listing';
+import { nodeRowToFileNode as nodeRowToFileNodePure } from './lib/nodeRow'; /* Recent / Starred / tag / Home rows — one shape, with `perm` + `read_only` */
 import { iconFamilyFor, isStorageRow } from './lib/fileIcons'; /* pane:p1 — the storage-row predicate's one home */
 import { actionIconSvg } from './lib/actionIcons'; /* inceleme:r1 — the drop overlay's mark, off the emoji font */
 import { setNodeStarred } from './lib/star';
@@ -332,6 +333,10 @@ const files = ref<FileNode[]>([]);
 // RBAC effective level for the current directory ('' = ACL not enforced on
 // this storage → no gating). Drives which write/manage actions are offered.
 const dirPerm = ref<string>('');
+/** The listed folder sits on a read-only storage (`read_only` on the index
+ *  response). Folded into permCanEdit so every write affordance — toolbar,
+ *  sidebar menu, context menu, drop zone, editor mode — reads the same fact. */
+const dirReadOnly = ref(false);
 // The dead deep-link state: set to the requested path when a listing came
 // back 404 (folder doesn't exist) or 403 (RBAC-hidden — rendered identically
 // on purpose so a denied folder doesn't reveal that it exists). '' = none.
@@ -995,19 +1000,42 @@ function onNodeTagsChanged() {
 }
 
 function onRecentOpen(entry: { id: number; storage_id?: number; path: string; name: string }) {
-  // RecentlyOpened emits the bare row — synthesize a FileNode shaped
-  // enough for openNode to route into the editor / preview.
-  const node = {
-    type: 'file',
-    path: entry.path,
-    basename: entry.name,
-    extension: (entry.name.split('.').pop() || '').toLowerCase(),
-    id: entry.id,
-  } as unknown as FileNode;
+  // RecentlyOpened emits the bare row. The same converter Recent / Starred /
+  // a tag / Home use gives openNode a row with its storage-qualified path AND
+  // its own `perm` + `read_only`, so the editor-vs-preview split reads the
+  // row's level, not the folder's. The bare synthesis stays as the fallback
+  // for a row the converter cannot address (no storage name at a
+  // multi-storage root) — it was the only shape until 2026-09-19.
+  const node =
+    nodeRowToFileNode(entry as unknown as Record<string, unknown>) ??
+    ({
+      type: 'file',
+      path: entry.path,
+      basename: entry.name,
+      extension: (entry.name.split('.').pop() || '').toLowerCase(),
+      id: entry.id,
+    } as unknown as FileNode);
   showRecents.value = false;
   openNode(node);
 }
 
+/**
+ * Right-click on a row of the Recently-opened tray: the SAME menu a listing
+ * row gets (owner: "CONTEXT MENÜ HER YERDE AYNI OLMALI"). The tray's row is
+ * the raw node row the endpoint answers with, so it goes through
+ * `nodeRowToFileNode` like Recent / Starred / a tag / Home do and arrives
+ * with its own `perm` + `read_only`; `onContextTarget` then treats it like a
+ * Home card — a target outside this pane's listing. The tray closes first,
+ * as it does on open: it is a modal over the listing, and the verb the menu
+ * runs (Rename, Move to…) opens a dialog of its own.
+ */
+function onRecentContext(row: Record<string, unknown>, ev: MouseEvent) {
+  const node = nodeRowToFileNode(row);
+  if (!node) return;
+  showRecents.value = false;
+  void onContextTarget(node, ev);
+}
+
 // Resolution order for each external viewer: explicit config override → live
 // backend probe. The probe is the source of truth: an operator can flip the
 // service "on" but if last_check failed (state='error') we still hide the
@@ -1589,15 +1617,22 @@ function onToolbarSearch(v: string) {
  * searches what is on screen.
  */
 const driveScopeLabel = computed(() => {
-  /* gorunum:v3-shell — Home is not a place to search IN. Its three blocks are
-     an overview of everything, so "Search in Home" would name a scope that
-     does not exist; the placeholder falls back to the everywhere wording. */
-  if (navView.value === 'home') return '';
-  if (navView.value === 'tag') return navTag.value;
-  if (navView.value) return t(`sidenav.${navView.value}`);
-  const rel = currentPath.value.replace(/\/+$/, '');
-  const last = rel.split('/').filter(Boolean).pop();
-  return last || adapter.value || '';
+  /* ⚠ The field searches the WHOLE storage (`?action=search` filters by
+     storage id only — see handlers/manager.go vfSearch), and at the virtual
+     root every storage. Naming the open FOLDER here ("Search in Photos") was
+     a lie the user found: results came from the whole storage. The scope is
+     the storage; the folder-scoped box is FilterBar's "Filter in this
+     folder…". Home, the virtual root and the cross-storage views (Recent,
+     Starred, Shared, tags) have no single storage → the everywhere wording.
+     ⚠ `multiStorageRoot` is the MODE (the admin explorer is always in it), not
+     the place: inside a storage the scope is that storage. Gating on the mode
+     printed "Search all storages" on every admin folder (caught by
+     e2e/tests/107 on the v0.42.2 chain). */
+  if (navView.value || atVirtualRoot.value) return '';
+  const name = adapter.value;
+  if (!name) return '';
+  const st = (props.config.storages ?? []).find((s) => s.name === name);
+  return st?.label || name;
 });
 
 /**
@@ -1676,70 +1711,19 @@ async function loadQuota() {
 }
 
 /**
- * nodeRowToFileNode — the starred / recently-opened endpoints answer with raw
- * node rows (relative `path`, numeric `storage_id`), not the listing shape.
- *
- * The storage NAME is what a qualified path needs, and a node row does not
- * carry the id-to-name mapping. The backend fills `storage` for exactly this
- * (handlers/shared.go, attachStorageNames); against an older server the only
- * safe fallback is the single-storage case — guessing in a multi-storage
- * install sends the user to a path in somebody else's drive.
+ * nodeRowToFileNode — the starred / recently-opened / tag endpoints answer
+ * with raw node rows (relative `path`, numeric `storage_id`), not the listing
+ * shape. The conversion itself lives in `lib/nodeRow` (pure, unit-tested);
+ * this binds it to the explorer's config. Every view that lists such rows —
+ * Recent, Starred, a tag, the Home cards, the Recently-opened tray — goes
+ * through here, so they all carry the same `perm` + `read_only` the context
+ * menu gates its write verbs on.
  */
-/** tablo:t1 — an RFC3339 stamp from a node row as unix ms, or undefined. A
- *  string we cannot parse is left undefined rather than turned into `NaN`,
- *  which would print as "Invalid Date" and sort unpredictably. */
-function rowMillis(v: unknown): number | undefined {
-  if (typeof v !== 'string' || !v) return undefined;
-  const ms = Date.parse(v);
-  return Number.isFinite(ms) ? ms : undefined;
-}
-
 function nodeRowToFileNode(row: Record<string, unknown>): FileNode | null {
-  const rel = String(row?.path ?? '').replace(/^\/+/, '');
-  if (!rel) return null;
-  const configured = props.config.storages ?? [];
-  const storageName =
-    typeof row.storage === 'string' && row.storage
-      ? row.storage
-      : configured.length === 1
-        ? configured[0].name
-        : '';
-  if (multiStorageRoot.value && !storageName) return null;
-  const name = String(row.name ?? rel.split('/').pop() ?? '');
-  const isDir = row.type === 'dir';
-  const size = typeof row.size === 'number' ? row.size : 0;
-  const id = typeof row.id === 'number' ? row.id : undefined;
-  return {
-    type: isDir ? 'dir' : 'file',
-    id,
-    /* tablo:t1 — ⚠⚠ THE DATE. A node row carries `backend_mtime` (what the
-       storage says) and `db_mtime` (what our last scan recorded) as RFC3339
-       strings; `FileNode.last_modified` is unix MILLISECONDS. Nothing mapped
-       between the two, so every row from Recent, Starred and a tag view
-       arrived with no date at all — measured on Recent: eleven rows, eleven em
-       dashes in the Modified column, and a Modified column header you could
-       click that then sorted nothing. It also made the date grouping this view
-       is supposed to show impossible, because every row fell in the "No date"
-       bucket. Storage first: `backend_mtime` is the file's own truth and
-       `db_mtime` only says when we last looked at it. */
-    last_modified: rowMillis(row.backend_mtime) ?? rowMillis(row.db_mtime),
-    path: storageName ? `${storageName}://${rel}` : rel,
-    basename: name,
-    extension: isDir
-      ? ''
-      : name.includes('.')
-        ? (name.split('.').pop() || '').toLowerCase()
-        : '',
-    storage: storageName,
-    visibility: 'private',
-    size,
-    file_size: size,
-    mime_type: typeof row.mime === 'string' ? row.mime : '',
-    // Keyed by node id. A file with no rendered thumbnail 404s here and the
-    // view falls back to its icon — the contract the ordinary listing has too.
-    thumb_url: !isDir && id !== undefined ? `/api/files/thumb/${id}` : undefined,
-    extra_metadata: {},
-  } as unknown as FileNode;
+  return nodeRowToFileNodePure(row, {
+    storages: props.config.storages ?? [],
+    multiStorageRoot: multiStorageRoot.value,
+  });
 }
 
 /** GET one of the view endpoints. Returns rows already in listing shape. */
@@ -1829,6 +1813,7 @@ async function loadNavView(kind: Exclude<NavView, ''>) {
     navTag.value = '';
     trashMode.value = false;
     e2eRoot.value = '';
+    forgetFolderPerm();
     selection.clear();
     files.value = [];
     dirname.value = NAV_VIEW_DIRNAME.home;
@@ -1862,6 +1847,7 @@ async function loadNavView(kind: Exclude<NavView, ''>) {
   navTag.value = '';
   trashMode.value = false;
   e2eRoot.value = '';
+  forgetFolderPerm();
   selection.clear();
   try {
     files.value = await fetchNavRows(kind);
@@ -1902,6 +1888,7 @@ async function loadTagView(tag: string) {
   navTag.value = name;
   trashMode.value = false;
   e2eRoot.value = '';
+  forgetFolderPerm();
   selection.clear();
   try {
     const rows = await fetchTaggedRows(name, {
@@ -2034,6 +2021,14 @@ function onInspectorManage(n: FileNode) {
 // (the pre-RBAC default). Otherwise 'editor'/'owner' may write; only 'owner'
 // manages permissions. Enforcement is server-side; this just shapes the menu.
 function permCanEdit(p: string | undefined): boolean {
+  // A read-only storage refuses every write on the server (403 "storage is
+  // read-only") whatever level the ACL grants — an owner of a read-only mount
+  // is an owner who cannot write. Say so here rather than after the click:
+  // until this line the toolbar offered New folder / Upload and the sidebar's
+  // "+ New" menu on a read-only mount, and the user found out from the error
+  // (issue #30). The level itself is left alone: 'owner' still opens the
+  // permissions panel, sharing a read-only file is still allowed.
+  if (dirReadOnly.value) return false;
   // undefined = ACL not enforced (dev / unwired) → full access. In production
   // the backend always sends a level; 'none'/'viewer' cannot write, only
   // 'editor'/'owner' can.
@@ -2042,11 +2037,83 @@ function permCanEdit(p: string | undefined): boolean {
 function permIsOwner(p: string | undefined): boolean {
   return p === 'owner';
 }
-// Effective perm for a selection: a single entry's own perm (falls back to the
-// directory perm), else the directory perm for multi-select / background.
-function selPerm(sel: FileNode[]): string {
-  if (sel.length === 1 && typeof sel[0]?.perm === 'string') return sel[0].perm as string;
-  return dirPerm.value;
+/* ⚠⚠ THE CONTEXT MENU MUST BE THE SAME EVERYWHERE (owner, 2026-09-19: "son
+ * kullanılanlar, ana sayfa gibi sayfalarda context menu eksik kalıyor.
+ * CONTEXT MENÜ HER YERDE AYNI OLMALI").
+ *
+ * `dirPerm` / `dirReadOnly` describe the FOLDER being listed, and only
+ * `load()` sets them. Recent, Starred, Shared, a tag view and Home list rows
+ * from every storage and have no folder — so whatever folder was open LAST
+ * answered for them. On the landing page that is no folder at all
+ * (`dirPerm === ''`), and `permCanEdit('')` is false, so the menu on a Home
+ * card or a Recent row came up without Rename / Delete / Move to / Share.
+ * After a writable folder had been visited the stale level said yes to
+ * everything, including rows on a read-only mount. Intermittent, therefore
+ * reported as "eksik kalıyor" rather than "yok".
+ *
+ * Three rules restore one menu:
+ *   1. entering a virtual view forgets the folder (`forgetFolderPerm`), so
+ *      nothing stale can leak into it;
+ *   2. a row answers for itself — its own `perm` (every listing carries it
+ *      now, `handlers/meta.go`) and its own storage's `read_only`;
+ *   3. a multi-selection is as weak as its weakest row, because the server
+ *      refuses the whole batch on the one row the caller may not touch.
+ * What stays hidden in a virtual view is only what is structurally
+ * impossible there — New folder, Upload, Paste need a destination folder
+ * (`atVirtualRoot`).
+ */
+function forgetFolderPerm() {
+  dirPerm.value = '';
+  dirReadOnly.value = false;
+}
+/** A view whose rows span every storage: no folder is behind it. */
+const inVirtualView = computed(() => !!navView.value && navView.value !== 'trash');
+/** The row's own level; the folder's when the row has none. In a virtual view
+ *  a row without a level (a server older than `handlers/meta.go`'s `perm`)
+ *  is ungated — the server enforces, this only shapes the menu — rather than
+ *  gated by an empty folder level that would hide every write verb. */
+function rowPerm(n: FileNode): string | undefined {
+  if (typeof n.perm === 'string') return n.perm;
+  return inVirtualView.value ? undefined : dirPerm.value;
+}
+/** The row sits on a read-only storage: its own `read_only` (nav/tag rows),
+ *  else the host's storage list — a folder listing's rows carry no flag of
+ *  their own because `dirReadOnly` already answers for the whole folder. */
+function nodeReadOnly(n: FileNode): boolean {
+  if (n.read_only === true) return true;
+  const storage = typeof n.storage === 'string' ? n.storage : '';
+  if (!storage) return false;
+  return (props.config.storages ?? []).some((s) => s.name === storage && s.readOnly === true);
+}
+/** May the caller write THIS row — level and read-only mount folded together.
+ *  The one predicate behind the editor/preview split and the menu's write
+ *  verbs, so a Home card and a listing row cannot disagree. */
+function nodeCanEdit(n: FileNode): boolean {
+  return permCanEdit(rowPerm(n)) && !nodeReadOnly(n);
+}
+const PERM_RANK: Record<string, number> = { none: 0, viewer: 1, editor: 2, owner: 3 };
+// Effective perm for a selection: a single entry's own perm, the WEAKEST of a
+// multi-selection's own perms, else the directory perm (background / rows
+// that carry no level).
+function selPerm(sel: FileNode[]): string | undefined {
+  if (sel.length === 0) return dirPerm.value;
+  let weakest: string | undefined;
+  let ungated = false;
+  for (const n of sel) {
+    const p = rowPerm(n);
+    if (p === undefined) {
+      ungated = true;
+      continue;
+    }
+    if (weakest === undefined || (PERM_RANK[p] ?? 0) < (PERM_RANK[weakest] ?? 0)) weakest = p;
+  }
+  // An ungated row (no level, unwired ACL) never strengthens a selection
+  // that also holds a gated one; alone, it stays ungated.
+  return weakest ?? (ungated ? undefined : dirPerm.value);
+}
+/** Any row of the selection on a read-only storage → the selection is. */
+function selReadOnly(sel: FileNode[]): boolean {
+  return sel.some(nodeReadOnly);
 }
 // Can the current user write into the directory being viewed? Gates the
 // toolbar New Folder / Upload / Paste + drag-drop upload.
@@ -2350,6 +2417,7 @@ async function load(path?: string) {
     adapter.value = resp.adapter;
     dirname.value = resp.dirname;
     dirPerm.value = (resp.perm as string) || '';
+    dirReadOnly.value = resp.read_only === true;
     /* wiring:e2 — backend tells us when this dir sits inside an encrypted
        subtree; '' resets on every plain folder. Drives the lock screen. */
     e2eRoot.value = typeof resp.e2e_root === 'string' ? resp.e2e_root : '';
@@ -3121,7 +3189,7 @@ function openNode(n: FileNode) {
   const ext = (n.extension || '').toLowerCase();
   // RBAC: viewers (no edit on this item) always get the read-only preview
   // modal — never the editable surface. This is the "view vs edit" split.
-  previewMode.value = permCanEdit((n.perm as string) ?? dirPerm.value)
+  previewMode.value = nodeCanEdit(n)
     ? previewModeForExt(ext)
     : 'view';
   previewTarget.value = n;
@@ -3223,7 +3291,7 @@ function openNodeInNewTab(n: FileNode) {
   }
   // RBAC: a viewer (no edit on this item) can't use the editable "Aç"
   // surface — drop to the read-only in-page preview instead.
-  if (!permCanEdit((n.perm as string) ?? dirPerm.value)) {
+  if (!nodeCanEdit(n)) {
     previewNode(n);
     return;
   }
@@ -3650,7 +3718,10 @@ function selectionActionList(sel: FileNode[]): ContextAction[] {
   // RBAC: gate mutating actions when the caller lacks edit on the target. The
   // "İzinler" (permissions) action shows only for owners on RBAC-on storages.
   const p = selPerm(sel);
-  const w = permCanEdit(p); // may write here
+  // May write to the selection: the weakest row's level, and no row on a
+  // read-only mount — `selReadOnly` is what `dirReadOnly` cannot answer in a
+  // view whose rows come from several storages (Recent, Starred, a tag, Home).
+  const w = permCanEdit(p) && !selReadOnly(sel);
   // Unified "Paylaş / İzinler" popup: public share link (editor+) + per-user
   // permissions (owner-only, decided inside the modal).
   // Unified "Paylaş / İzinler" popup carries the public share link, per-user
@@ -3703,7 +3774,10 @@ function selectionActionList(sel: FileNode[]): ContextAction[] {
        They borrow the clipboard verbs' marks, which is what they are. */
     { key: 'move-to', label: t('ctx.move_to'), icon: 'cut', hidden: !any || !w, disabled: !any },
     { key: 'copy-to', label: t('ctx.copy_to'), icon: 'copy', hidden: !any, disabled: !any },
-    { key: 'paste', label: t('ctx.paste'), hidden: !w, disabled: !clipboard.value.mode },
+    /* Paste needs a destination folder; a virtual view (Recent / Starred /
+       Shared / a tag / Home) has none, so it is the one write verb the row
+       menu does not carry there — every per-row verb above and below does. */
+    { key: 'paste', label: t('ctx.paste'), hidden: !w || atVirtualRoot.value, disabled: !clipboard.value.mode },
     { divider: true, key: 'sep-meta', label: '', hidden: !singleHasId && !canStar },
     /* yildiz:s1 — "star must be an action, like a tag" (owner, v0.30.0).
        Beside Tags on purpose: they are the same kind of verb, and this is the
@@ -4108,7 +4182,7 @@ async function onDocumentCreated(file: { path: string; name: string; ext: string
   previewTarget.value = node;
   // ⚠ NOT previewModeForExt: that sends office types to 'view', which is right
   // for a peek at somebody else's file and wrong for the one you just made.
-  previewMode.value = permCanEdit((node.perm as string) ?? dirPerm.value) ? 'edit' : 'view';
+  previewMode.value = nodeCanEdit(node) ? 'edit' : 'view';
   showPreview.value = true;
   emit('file-opened', { path: node.path, basename: node.basename });
   void markRecent(node);
@@ -7281,6 +7355,7 @@ function closeRecoveryKey() {
             :limit="20"
             :refresh-key="recentRefreshKey"
             @open="onRecentOpen"
+            @context="onRecentContext"
             @error="(msg: string) => emit('error', { message: msg, context: { op: 'recents' } })"
           />
         </div>

package/src/components/HomeView.vue

@@ -144,9 +144,12 @@ const storageTile = fileIconTile({ type: 'dir', mime_type: 'inode/storage' });
  * with the wrong size line says something false.
  */
 function storageCaption(s: HomeStorage): string {
-  return typeof s.usedBytes === 'number' && s.usedBytes >= 0
-    ? t('drive.storage.used_unlimited', { used: formatSize(s.usedBytes) })
-    : t('conn.guide.storage');
+  const base =
+    typeof s.usedBytes === 'number' && s.usedBytes >= 0
+      ? t('drive.storage.used_unlimited', { used: formatSize(s.usedBytes) })
+      : t('conn.guide.storage');
+  // A read-only mount says so on its card too (issue #30).
+  return s.readOnly ? `${base} · ${t('sidenav.storage.readOnly')}` : base;
 }
 
 /**

package/src/components/RecentlyOpened.vue

@@ -13,6 +13,10 @@ interface RecentNode {
   name: string;
   mime?: string;
   last_opened?: string;
+  /** The raw row carries more (`storage`, `perm`, `read_only`, `type`,
+   *  the mtimes…) — the explorer turns it into a FileNode for the context
+   *  menu with the same converter Recent / Starred / a tag view use. */
+  [k: string]: unknown;
 }
 
 const props = defineProps<{
@@ -30,6 +34,11 @@ const props = defineProps<{
 
 const emit = defineEmits<{
   (e: 'open', node: RecentNode): void;
+  /** Right-click on a row. The tray does not build a menu of its own — the
+   *  explorer opens the ONE menu every listing row gets (owner: "CONTEXT
+   *  MENÜ HER YERDE AYNI OLMALI"), so a file here offers exactly what the
+   *  same file offers in its folder. */
+  (e: 'context', node: RecentNode, ev: MouseEvent): void;
   (e: 'error', message: string): void;
 }>();
 
@@ -101,8 +110,13 @@ watch(() => props.refreshKey, load);
     </header>
 
     <ul v-if="items.length">
-      <li v-for="n in items" :key="n.id">
-        <button type="button" @click="emit('open', n)" class="filex-recent-item">
+      <li v-for="n in items" :key="n.id" data-testid="recent-tray-item" :data-fe-path="n.path">
+        <button
+          type="button"
+          class="filex-recent-item"
+          @click="emit('open', n)"
+          @contextmenu.prevent="emit('context', n, $event)"
+        >
           <span class="filex-recent-name">{{ n.name }}</span>
           <span class="filex-recent-meta">{{ fmtTime(n.last_opened) }}</span>
         </button>

package/src/components/S3KeysPanel.vue

@@ -22,6 +22,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { S3AccessKey } from '../types/S3Keys';
 import { useLocale } from '../composables/useLocale';
 import { useS3Keys } from '../composables/useS3Keys';
+import { useScrolledX } from '../composables/useScrolledX';
 import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
@@ -37,6 +38,7 @@ const emit = defineEmits<{
 
 const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t, formatDate } = useLocale(locale);
+const { scrolledX, onScroll } = useScrolledX();
 
 const {
   keys,
@@ -231,33 +233,35 @@ function scopeOf(k: S3AccessKey): string {
 
     <!-- ── the keys ─────────────────────────────────────────────── -->
     <p v-if="loading" class="fe-s3keys__muted">…</p>
-    <table v-else-if="keys.length" class="fe-s3keys__table">
-      <thead>
-        <tr>
-          <th>{{ t('conn.s3keys.col.label') }}</th>
-          <th>{{ t('conn.s3keys.col.key') }}</th>
-          <th>{{ t('conn.s3keys.col.scope') }}</th>
-          <th>{{ t('conn.s3keys.col.lastUsed') }}</th>
-          <th></th>
-        </tr>
-      </thead>
-      <tbody>
-        <tr v-for="k in keys" :key="k.id" :class="{ 'is-off': !!k.disabled_at }">
-          <td>{{ k.label || t('conn.s3keys.noLabel') }}</td>
-          <td><code>{{ k.access_key_id }}</code></td>
-          <td>{{ scopeOf(k) }}</td>
-          <td>{{ k.last_used_at ? shortDate(k.last_used_at) : t('conn.s3keys.neverUsed') }}</td>
-          <td class="fe-s3keys__actions">
-            <button class="fe-s3keys__link" :disabled="busy" @click="toggle(k)">
-              {{ k.disabled_at ? t('conn.s3keys.enable') : t('conn.s3keys.disable') }}
-            </button>
-            <button class="fe-s3keys__link is-danger" :disabled="busy" @click="revoke(k)">
-              {{ confirmRevoke === k.id ? t('conn.s3keys.confirm') : t('conn.s3keys.revoke') }}
-            </button>
-          </td>
-        </tr>
-      </tbody>
-    </table>
+    <div v-else-if="keys.length" class="fe-s3keys__scroll" :class="{ 'is-scrolled-x': scrolledX }" @scroll.passive="onScroll">
+      <table class="fe-s3keys__table">
+        <thead>
+          <tr>
+            <th>{{ t('conn.s3keys.col.label') }}</th>
+            <th>{{ t('conn.s3keys.col.key') }}</th>
+            <th>{{ t('conn.s3keys.col.scope') }}</th>
+            <th>{{ t('conn.s3keys.col.lastUsed') }}</th>
+            <th></th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr v-for="k in keys" :key="k.id" :class="{ 'is-off': !!k.disabled_at }">
+            <td>{{ k.label || t('conn.s3keys.noLabel') }}</td>
+            <td><code>{{ k.access_key_id }}</code></td>
+            <td>{{ scopeOf(k) }}</td>
+            <td>{{ k.last_used_at ? shortDate(k.last_used_at) : t('conn.s3keys.neverUsed') }}</td>
+            <td class="fe-s3keys__actions">
+              <button class="fe-s3keys__link" :disabled="busy" @click="toggle(k)">
+                {{ k.disabled_at ? t('conn.s3keys.enable') : t('conn.s3keys.disable') }}
+              </button>
+              <button class="fe-s3keys__link is-danger" :disabled="busy" @click="revoke(k)">
+                {{ confirmRevoke === k.id ? t('conn.s3keys.confirm') : t('conn.s3keys.revoke') }}
+              </button>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
     <p v-else-if="canMint" class="fe-s3keys__muted">{{ t('conn.s3keys.empty') }}</p>
   </section>
 </template>
@@ -389,4 +393,6 @@ function scopeOf(k: S3AccessKey): string {
   white-space: nowrap;
   text-align: right;
 }
+/* Its pinning (sticky right, ground, scroll divider) is in styles/base.css
+   next to the list view's `.fe-list__col--menu`, so the two stay one model. */
 </style>

package/src/components/SSHKeysPanel.vue

@@ -18,6 +18,7 @@ import type { ExplorerConfig, LocaleCode } from '../types/ExplorerConfig';
 import type { FTPSFacts, SSHPublicKey } from '../types/SSHKeys';
 import { useLocale } from '../composables/useLocale';
 import { useSSHKeys } from '../composables/useSSHKeys';
+import { useScrolledX } from '../composables/useScrolledX';
 import { resolveLocale } from '../locales/resolve';
 
 const props = defineProps<{
@@ -50,6 +51,7 @@ const emit = defineEmits<{
 
 const locale = computed<LocaleCode>(() => resolveLocale(props.config.locale));
 const { t, formatDate } = useLocale(locale);
+const { scrolledX, onScroll } = useScrolledX();
 
 const { keys, connection, loading, error, canAdd, hasUsableKey, load, add, setDisabled, remove } =
   useSSHKeys(props.config);
@@ -171,31 +173,33 @@ function fingerprintOf(k: SSHPublicKey): string {
     </div>
 
     <p v-if="loading" class="fe-s3keys__muted">…</p>
-    <table v-else-if="keys.length" class="fe-s3keys__table">
-      <thead>
-        <tr>
-          <th>{{ t('conn.sshkeys.col.name') }}</th>
-          <th>{{ t('conn.sshkeys.col.fingerprint') }}</th>
-          <th>{{ t('conn.sshkeys.col.lastUsed') }}</th>
-          <th></th>
-        </tr>
-      </thead>
-      <tbody>
-        <tr v-for="k in keys" :key="k.id" :class="{ 'is-off': !!k.disabled_at }">
-          <td>{{ k.name || t('conn.sshkeys.noName') }}</td>
-          <td><code>{{ fingerprintOf(k) }}</code></td>
-          <td>{{ k.last_used_at ? shortDate(k.last_used_at) : t('conn.sshkeys.neverUsed') }}</td>
-          <td class="fe-s3keys__actions">
-            <button class="fe-s3keys__link" :disabled="busy" @click="toggle(k)">
-              {{ k.disabled_at ? t('conn.sshkeys.enable') : t('conn.sshkeys.disable') }}
-            </button>
-            <button class="fe-s3keys__link is-danger" :disabled="busy" @click="drop(k)">
-              {{ confirmRemove === k.id ? t('conn.sshkeys.confirm') : t('conn.sshkeys.remove') }}
-            </button>
-          </td>
-        </tr>
-      </tbody>
-    </table>
+    <div v-else-if="keys.length" class="fe-s3keys__scroll" :class="{ 'is-scrolled-x': scrolledX }" @scroll.passive="onScroll">
+      <table class="fe-s3keys__table">
+        <thead>
+          <tr>
+            <th>{{ t('conn.sshkeys.col.name') }}</th>
+            <th>{{ t('conn.sshkeys.col.fingerprint') }}</th>
+            <th>{{ t('conn.sshkeys.col.lastUsed') }}</th>
+            <th></th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr v-for="k in keys" :key="k.id" :class="{ 'is-off': !!k.disabled_at }">
+            <td>{{ k.name || t('conn.sshkeys.noName') }}</td>
+            <td><code>{{ fingerprintOf(k) }}</code></td>
+            <td>{{ k.last_used_at ? shortDate(k.last_used_at) : t('conn.sshkeys.neverUsed') }}</td>
+            <td class="fe-s3keys__actions">
+              <button class="fe-s3keys__link" :disabled="busy" @click="toggle(k)">
+                {{ k.disabled_at ? t('conn.sshkeys.enable') : t('conn.sshkeys.disable') }}
+              </button>
+              <button class="fe-s3keys__link is-danger" :disabled="busy" @click="drop(k)">
+                {{ confirmRemove === k.id ? t('conn.sshkeys.confirm') : t('conn.sshkeys.remove') }}
+              </button>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
     <p v-else-if="canAdd" class="fe-s3keys__muted">{{ t('conn.sshkeys.empty') }}</p>
   </section>
 </template>