@brftech/filex-core 0.42.1 → 0.42.2

package/src/composables/useScrolledX.ts

@@ -0,0 +1,21 @@
+import { ref } from 'vue';
+
+/**
+ * "Is this box scrolled sideways at all?" — the one fact a pinned column
+ * needs in order to draw its left divider only while something is actually
+ * sliding underneath it. A permanent divider would claim the column is
+ * floating when it is simply the last cell of a table that fits.
+ *
+ * Bind `onScroll` to the scroll container and `scrolledX` to its
+ * `is-scrolled-x` class; the stylesheet does the rest (base.css,
+ * `.fe-s3keys__scroll.is-scrolled-x`).
+ */
+export function useScrolledX() {
+  const scrolledX = ref(false);
+  function onScroll(ev: Event) {
+    const el = ev.currentTarget as HTMLElement | null;
+    const on = (el?.scrollLeft ?? 0) > 0;
+    if (on !== scrolledX.value) scrolledX.value = on;
+  }
+  return { scrolledX, onScroll };
+}

package/src/lib/nodeRow.ts

@@ -0,0 +1,106 @@
+/**
+ * nodeRow — the starred / recently-opened / tag endpoints answer with raw node
+ * rows (relative `path`, numeric `storage_id`, RFC3339 stamps), not the
+ * listing shape. This turns one row into the `FileNode` every view renders.
+ *
+ * Pure on purpose: the explorer wraps it with its own config, and the unit
+ * test pins the two facts the context menu depends on — `perm` and
+ * `read_only` — without mounting the component.
+ */
+import type { FileNode } from '../types';
+
+/** What the explorer knows about the install, as far as a row needs it. */
+export interface NodeRowContext {
+  /** `config.storages` — names, and the host's read-only flag per storage. */
+  storages: ReadonlyArray<{ name: string; readOnly?: boolean }>;
+  /** Multi-storage root mode: a row that cannot be addressed by storage name
+   *  is dropped rather than guessed into somebody else's drive. */
+  multiStorageRoot: boolean;
+}
+
+const PERM_LEVELS = new Set(['none', 'viewer', 'editor', 'owner']);
+
+/** tablo:t1 — an RFC3339 stamp from a node row as unix ms, or undefined. A
+ *  string we cannot parse is left undefined rather than turned into `NaN`,
+ *  which would print as "Invalid Date" and sort unpredictably. */
+export function rowMillis(v: unknown): number | undefined {
+  if (typeof v !== 'string' || !v) return undefined;
+  const ms = Date.parse(v);
+  return Number.isFinite(ms) ? ms : undefined;
+}
+
+/**
+ * The storage NAME is what a qualified path needs, and a node row does not
+ * carry the id-to-name mapping. The backend fills `storage` for exactly this
+ * (handlers/meta.go, `(*Meta).rows`); against an older server the only safe
+ * fallback is the single-storage case — guessing in a multi-storage install
+ * sends the user to a path in somebody else's drive.
+ */
+export function nodeRowToFileNode(
+  row: Record<string, unknown>,
+  ctx: NodeRowContext,
+): FileNode | null {
+  const rel = String(row?.path ?? '').replace(/^\/+/, '');
+  if (!rel) return null;
+  const configured = ctx.storages ?? [];
+  const storageName =
+    typeof row.storage === 'string' && row.storage
+      ? row.storage
+      : configured.length === 1
+        ? configured[0].name
+        : '';
+  if (ctx.multiStorageRoot && !storageName) return null;
+  const name = String(row.name ?? rel.split('/').pop() ?? '');
+  const isDir = row.type === 'dir';
+  const size = typeof row.size === 'number' ? row.size : 0;
+  const id = typeof row.id === 'number' ? row.id : undefined;
+  /* ⚠⚠ THE CONTEXT MENU MUST BE THE SAME EVERYWHERE (owner, 2026-09-19). The
+     menu gates Rename / Delete / Move to / Share on the row's own `perm` and
+     on the storage's `read_only` — a folder listing carries both, and until
+     these two lines a Recent / Starred / tag / Home row carried neither, so
+     the menu fell back to the folder opened LAST: nothing on the landing page
+     (every write verb gone), or a stale writable folder (every write verb
+     offered on a read-only mount). The row says for itself what may be done
+     to it, because in these views there is no folder to ask.
+     `read_only` prefers the server's word and falls back to the host's own
+     storage list for a server that predates the field. */
+  const perm =
+    typeof row.perm === 'string' && PERM_LEVELS.has(row.perm)
+      ? (row.perm as FileNode['perm'])
+      : undefined;
+  const hostReadOnly = configured.find((s) => s.name === storageName)?.readOnly === true;
+  const readOnly = typeof row.read_only === 'boolean' ? row.read_only : hostReadOnly;
+  return {
+    type: isDir ? 'dir' : 'file',
+    id,
+    /* tablo:t1 — ⚠⚠ THE DATE. A node row carries `backend_mtime` (what the
+       storage says) and `db_mtime` (what our last scan recorded) as RFC3339
+       strings; `FileNode.last_modified` is unix MILLISECONDS. Nothing mapped
+       between the two, so every row from Recent, Starred and a tag view
+       arrived with no date at all — measured on Recent: eleven rows, eleven em
+       dashes in the Modified column, and a Modified column header you could
+       click that then sorted nothing. It also made the date grouping this view
+       is supposed to show impossible, because every row fell in the "No date"
+       bucket. Storage first: `backend_mtime` is the file's own truth and
+       `db_mtime` only says when we last looked at it. */
+    last_modified: rowMillis(row.backend_mtime) ?? rowMillis(row.db_mtime),
+    path: storageName ? `${storageName}://${rel}` : rel,
+    basename: name,
+    extension: isDir
+      ? ''
+      : name.includes('.')
+        ? (name.split('.').pop() || '').toLowerCase()
+        : '',
+    storage: storageName,
+    visibility: 'private',
+    size,
+    file_size: size,
+    mime_type: typeof row.mime === 'string' ? row.mime : '',
+    ...(perm ? { perm } : {}),
+    read_only: readOnly,
+    // Keyed by node id. A file with no rendered thumbnail 404s here and the
+    // view falls back to its icon — the contract the ordinary listing has too.
+    thumb_url: !isDir && id !== undefined ? `/api/files/thumb/${id}` : undefined,
+    extra_metadata: {},
+  } as unknown as FileNode;
+}

package/src/locales/en.ts

@@ -983,7 +983,7 @@ export const en: Record<string, string> = {
   'storages.fields.share': 'Share',
   'storages.fields.domain': 'Domain / workgroup',
   'storages.fields.dialTimeout': 'Connect timeout (seconds)',
-  'storages.fieldHelp.disablePresign': 'Turn on when the store rejects SDK-signed URLs (Ceph RGW / some Hetzner setups answer SignatureDoesNotMatch); uploads then stream through the backend.',
+  'storages.fieldHelp.disablePresign': 'On by default: uploads and the downloads behind public share links stream through filex, so the bucket endpoint never has to be reachable from a browser (a LAN-only MinIO just works). Turn it off only when the endpoint is reachable from your users\' browsers (AWS, a public MinIO) and you want them to talk to the bucket directly — faster for very large files, and the store must accept SDK-signed URLs (Ceph RGW / some Hetzner setups answer SignatureDoesNotMatch).',
   'storages.fieldHelp.endpoint': 'Leave empty for AWS S3. Any S3-compatible store needs its endpoint.',
   'storages.fieldHelp.hostKey': 'A single public key in authorized_keys / known_hosts line form.',
   'storages.fieldHelp.insecureSkipHostKey': 'Accepts any host key. Only for throwaway hosts.',
@@ -1122,8 +1122,13 @@ export const en: Record<string, string> = {
   'newdoc.create': 'Create',
   'newdoc.creating': 'Creating…',
   'newdoc.cancel': 'Cancel',
+  // ⚠ The top search field searches the WHOLE storage (and every storage at
+  // the root) — never only the open folder. The scope named here is therefore
+  // the storage, not the folder; "Filter in this folder…" (FilterBar) is the
+  // folder-scoped one. It used to say "Search in Photos" for a folder called
+  // Photos, which was a lie (2026-09-19).
   'drive.search.placeholder': 'Search in {scope}',
-  'drive.search.placeholder_all': 'Search your files',
+  'drive.search.placeholder_all': 'Search all storages',
   'drive.search.hint_title': 'Search everywhere and run commands ({combo})',
   'drive.storage.used': '{used} of {total} used',
   'drive.storage.used_unlimited': '{used} used',

package/src/locales/tr.ts

@@ -983,7 +983,7 @@ export const tr: Record<string, string> = {
   'storages.fields.share': 'Paylaşım',
   'storages.fields.domain': 'Etki alanı / çalışma grubu',
   'storages.fields.dialTimeout': 'Bağlanma zaman aşımı (saniye)',
-  'storages.fieldHelp.disablePresign': 'Depo, SDK\'nın imzaladığı URL\'leri reddediyorsa açın (Ceph RGW / bazı Hetzner kurulumları SignatureDoesNotMatch döner); yüklemeler o zaman arka uç üzerinden akar.',
+  'storages.fieldHelp.disablePresign': 'Varsayılan olarak açık: yüklemeler ve herkese açık paylaşım bağlantılarındaki indirmeler filex üzerinden akar; kova endpoint\'inin tarayıcıdan erişilebilir olması gerekmez (yalnız yerel ağdaki MinIO doğrudan çalışır). Yalnızca endpoint kullanıcıların tarayıcısından erişilebiliyorsa (AWS, herkese açık MinIO) ve tarayıcının kovayla doğrudan konuşmasını istiyorsanız kapatın — çok büyük dosyalarda daha hızlıdır, ama depo SDK\'nın imzaladığı URL\'leri kabul etmelidir (Ceph RGW / bazı Hetzner kurulumları SignatureDoesNotMatch döner).',
   'storages.fieldHelp.endpoint': 'AWS S3 için boş bırakın. S3 uyumlu diğer tüm depolar kendi endpoint\'ini ister.',
   'storages.fieldHelp.hostKey': 'authorized_keys / known_hosts satır biçiminde tek bir açık anahtar.',
   'storages.fieldHelp.insecureSkipHostKey': 'Her sunucu anahtarını kabul eder. Yalnızca geçici sunucular için.',
@@ -1120,8 +1120,8 @@ export const tr: Record<string, string> = {
   'newdoc.create': 'Oluştur',
   'newdoc.creating': 'Oluşturuluyor…',
   'newdoc.cancel': 'Vazgeç',
-  'drive.search.placeholder': '{scope} içinde ara',
-  'drive.search.placeholder_all': 'Dosyalarında ara',
+  'drive.search.placeholder': '{scope} deposunda ara',
+  'drive.search.placeholder_all': 'Tüm depolarda ara',
   'drive.search.hint_title': 'Her yerde ara ve komut çalıştır ({combo})',
   'drive.storage.used': '{total} alanın {used} kadarı dolu',
   'drive.storage.used_unlimited': '{used} kullanılıyor',

package/src/styles/base.css

@@ -10449,6 +10449,30 @@ filex-explorer {
   box-shadow: -1px 0 0 0 var(--fe-border);
 }
 
+/* The key/token tables in the connection panels (S3KeysPanel, SSHKeysPanel
+   and TokensPanel share `.fe-s3keys__*`) follow the same model as the list
+   view above: the table is as wide as its content and the panel scrolls
+   sideways, the actions cell rides the right edge over the columns sliding
+   under it, carrying the panel's own ground (`--fe-bg-elev`, what
+   `.fe-s3keys` paints), and its divider appears only while something is
+   scrolled underneath (`useScrolledX` flips the class). One rule here rather
+   than three copies in the panels, so they cannot drift apart. */
+.fe-s3keys__scroll {
+  overflow-x: auto;
+}
+.fe-s3keys__scroll .fe-s3keys__table {
+  min-width: max-content;
+}
+.fe-s3keys__table .fe-s3keys__actions {
+  position: sticky;
+  right: 0;
+  z-index: 1;
+  background: var(--fe-bg-elev);
+}
+.fe-s3keys__scroll.is-scrolled-x .fe-s3keys__actions {
+  box-shadow: -1px 0 0 0 var(--fe-border);
+}
+
 /* The date headings travel with the horizontal scroll rather than sliding off
    the left edge — they are `max-content` wide so sticky has somewhere to move
    them to (a full-width block has none). */

package/src/types/FileNode.ts

@@ -42,6 +42,14 @@ export interface FileNode {
    *  projectFileNodes emits it when a storage has RBAC on). '' / undefined =
    *  ACL not enforced. Used to gate edit/manage affordances client-side. */
   perm?: 'none' | 'viewer' | 'editor' | 'owner';
+  /** The row sits on a read-only storage. Carried by the rows that come from
+   *  OUTSIDE a folder listing — Recent, Starred, a tag view, the Home cards,
+   *  the Recently-opened tray (`handlers/meta.go`) — because there the
+   *  listing-level `read_only` has no folder to describe. A folder listing's
+   *  rows leave it unset; `dirReadOnly` answers for the whole folder. Folded
+   *  into the write gate with `perm`, so the context menu is the same in
+   *  every view. */
+  read_only?: boolean;
   /* wiring:e2 — dir rows: true when the folder is E2E-encrypted (carries a
    * `.filex-e2e.json` marker). Drives the 🔒 badge in the listings. */
   e2e?: boolean;