@openviking/react 0.1.6 → 0.1.7

package/dist/l~0.js

@@ -1,16 +1,23 @@
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import { createElement, useCallback, useEffect, useId, useMemo, useRef, useState } from "react";
+import { createPortal } from "react-dom";
+import { CSSTransition } from "react-transition-group";
 import { FilePreview as file_preview_FilePreview } from "./3~0.js";
-import { Tooltip } from "./rt~0.js";
+import { button_Button } from "./e~0.js";
+import { FileTree as file_tree_FileTree, FileTreeToolbar } from "./n~0.js";
 import { getFileTypeColor, getFileTypeIcon, WikiBookIcon, ExperienceBoardIcon, WikiConflictBoardIcon, FolderIcon, WikiBoardIcon, resolveFileTypeIconKey } from "./k~0.js";
-import { FileBrowserEntries } from "./2~0.js";
-import { FileTree as file_tree_FileTree } from "./n~0.js";
+import { FileBrowserEntries, es2015, lockBodyScroll } from "./2~0.js";
+import { removereact } from "./4~0.js";
+import { useLocale, LocaleProvider } from "./28~0.js";
 import { resolveLocale } from "./nx~0.js";
-import { OV_PATHS } from "./ck~0.js";
-import { isOvClientError, useOvSignal, useOvClient } from "./ae~0.js";
-import { ExperienceDashboard } from "./f~0.js";
+import { usePortalTheme } from "./9~0.js";
+import { OV_PATHS, OV_PATH_BUILDERS } from "./ck~0.js";
+import { useOvSignal, useOvClient, isOvClientError, useOvIdentity } from "./ae~0.js";
+import { input_Input } from "./c7r~0.js";
+import { ExperienceDashboard } from "./fl~0.js";
 import { WikiDashboard } from "./fj~0.js";
-import { useLocale, LocaleProvider } from "./28~0.js";
+import { chevron_downreact } from "./s~0.js";
+import { checkreact } from "./0~0.js";
 function clampResizableWidth(width, min, max) {
     const rounded = Math.round(width);
     const lower = Math.max(min, rounded);
@@ -122,11 +129,11 @@ function DownloadIcon() {
         ]
     });
 }
-function FileBrowserDetail({ tabs, activeKey, locale, labels, footer, viewLabels, onActiveKeyChange }) {
+function FileBrowserDetail({ tabs, activeKey, locale, labels, footer, titleExtra, extraActions, viewLabels, onActiveKeyChange }) {
     return /*#__PURE__*/ jsx("div", {
         className: "ov-file-browser__detail",
         children: /*#__PURE__*/ jsx(file_preview_FilePreview, {
-            tabs: decorateTabs(tabs, viewLabels, footer),
+            tabs: decorateTabs(tabs, viewLabels, footer, titleExtra, extraActions),
             activeKey: activeKey ?? void 0,
             locale: locale,
             labels: labels,
@@ -134,7 +141,7 @@ function FileBrowserDetail({ tabs, activeKey, locale, labels, footer, viewLabels
         })
     });
 }
-function decorateTabs(tabs, viewLabels, footer) {
+function decorateTabs(tabs, viewLabels, footer, titleExtra, extraActions) {
     return tabs.map((tab)=>{
         if ('content' === tab.kind) return tab;
         return {
@@ -142,9 +149,16 @@ function decorateTabs(tabs, viewLabels, footer) {
             slots: {
                 ...tab.slots,
                 footer,
+                titleExtra: /*#__PURE__*/ jsxs(Fragment, {
+                    children: [
+                        tab.slots?.titleExtra,
+                        titleExtra
+                    ]
+                }),
                 actions: (actions)=>/*#__PURE__*/ jsxs("div", {
                         className: "ov-file-browser__detail-actions",
                         children: [
+                            extraActions,
                             actions.canSwitchView ? /*#__PURE__*/ jsxs("div", {
                                 className: "ov-file-browser__segmented",
                                 role: "group",
@@ -170,16 +184,22 @@ function decorateTabs(tabs, viewLabels, footer) {
                                 "aria-hidden": "true",
                                 className: "ov-file-browser__detail-sep"
                             }) : null,
-                            actions.canCopyContent ? /*#__PURE__*/ jsx("button", {
-                                type: "button",
+                            actions.canCopyContent ? /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "text",
+                                iconOnly: true,
+                                htmlType: "button",
                                 className: "ov-file-browser__detail-icon",
                                 "aria-label": viewLabels.copyContent,
                                 title: viewLabels.copyContent,
                                 onClick: ()=>void actions.copyContent(),
                                 children: /*#__PURE__*/ jsx(CopyIcon, {})
                             }) : null,
-                            actions.canDownload ? /*#__PURE__*/ jsx("button", {
-                                type: "button",
+                            actions.canDownload ? /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "text",
+                                iconOnly: true,
+                                htmlType: "button",
                                 className: "ov-file-browser__detail-icon",
                                 "aria-label": viewLabels.download,
                                 title: viewLabels.download,
@@ -223,8 +243,10 @@ function FileBrowserFailure({ message, detail, retryLabel, onRetry }) {
                 className: "ov-file-browser__failure-detail",
                 children: detail
             }) : null,
-            /*#__PURE__*/ jsx("button", {
-                type: "button",
+            /*#__PURE__*/ jsx(button_Button, {
+                size: "small",
+                type: "default",
+                htmlType: "button",
                 className: "ov-file-browser__failure-retry",
                 onClick: onRetry,
                 children: retryLabel
@@ -260,70 +282,20 @@ const dashboard_labels_dashboardLabels = (locale, labels)=>({
         ...'zh-CN' === locale ? zh : en,
         ...labels
     });
-const file_browser_icons_SIZE = 16;
-const strokeProps = {
-    width: file_browser_icons_SIZE,
-    height: file_browser_icons_SIZE,
-    viewBox: '0 0 48 48',
-    fill: 'none',
-    stroke: 'currentColor',
-    strokeWidth: 4,
-    'aria-hidden': true,
-    focusable: 'false'
-};
-function SearchIcon() {
-    return /*#__PURE__*/ jsx("svg", {
-        ...strokeProps,
-        children: /*#__PURE__*/ jsx("path", {
-            d: "M33.072 33.071c6.248-6.248 6.248-16.379 0-22.627-6.249-6.249-16.38-6.249-22.628 0-6.248 6.248-6.248 16.379 0 22.627 6.248 6.248 16.38 6.248 22.628 0Zm0 0 8.485 8.485"
-        })
-    });
-}
-function RefreshIcon() {
-    return /*#__PURE__*/ jsx("svg", {
-        ...strokeProps,
-        children: /*#__PURE__*/ jsx("path", {
-            d: "M38.837 18C36.463 12.136 30.715 8 24 8 15.163 8 8 15.163 8 24s7.163 16 16 16c7.455 0 13.72-5.1 15.496-12M40 8v10H30"
-        })
-    });
-}
-function FileBrowserToolbar({ searchId, query, refreshing, canRefresh, placeholder, refreshLabel, onQueryChange, onRefresh }) {
-    return /*#__PURE__*/ jsxs("div", {
+function FileBrowserToolbar({ refreshing, canRefresh, placeholder, refreshLabel, onSearch, onRefresh }) {
+    return /*#__PURE__*/ jsx(FileTreeToolbar, {
         className: "ov-file-browser__toolbar",
-        children: [
-            /*#__PURE__*/ jsxs("label", {
-                className: "ov-file-browser__search",
-                htmlFor: searchId,
-                children: [
-                    /*#__PURE__*/ jsx("span", {
-                        className: "ov-file-browser__search-icon",
-                        children: /*#__PURE__*/ jsx(SearchIcon, {})
-                    }),
-                    /*#__PURE__*/ jsx("input", {
-                        id: searchId,
-                        type: "search",
-                        className: "ov-file-browser__search-input",
-                        placeholder: placeholder,
-                        value: query,
-                        onChange: (event)=>onQueryChange(event.target.value)
-                    })
-                ]
-            }),
-            /*#__PURE__*/ jsx(Tooltip, {
-                content: refreshLabel,
-                children: /*#__PURE__*/ jsx("button", {
-                    type: "button",
-                    className: [
-                        'ov-file-browser__refresh',
-                        refreshing ? 'ov-file-browser__refresh--spinning' : ''
-                    ].filter(Boolean).join(' '),
-                    "aria-label": refreshLabel,
-                    disabled: !canRefresh,
-                    onClick: onRefresh,
-                    children: /*#__PURE__*/ jsx(RefreshIcon, {})
-                })
-            })
-        ]
+        search: true,
+        refresh: {
+            disabled: !canRefresh
+        },
+        refreshing: refreshing,
+        text: {
+            search: placeholder,
+            refresh: refreshLabel
+        },
+        onSearch: onSearch,
+        onRefresh: onRefresh
     });
 }
 function DashboardIndicator({ dashboard, locale, labels, onOpen }) {
@@ -361,7 +333,7 @@ function directoryIcon() {
         className: "ov-file-tree__file-type-icon"
     });
 }
-function FileBrowserTreePane({ entries, locale, dashboardLabels, searchId, browser, treeLabels, searchPlaceholder, refreshLabel, searchLoading, searchEmpty, searchErrorLabel, retryLabel }) {
+function FileBrowserTreePane({ entries, locale, dashboardLabels, onSearch, browser, treeLabels, searchPlaceholder, refreshLabel, retryLabel }) {
     return /*#__PURE__*/ jsxs(Fragment, {
         children: [
             /*#__PURE__*/ jsx(FileBrowserEntries, {
@@ -370,13 +342,11 @@ function FileBrowserTreePane({ entries, locale, dashboardLabels, searchId, brows
                 className: "ov-file-browser__entries"
             }),
             /*#__PURE__*/ jsx(FileBrowserToolbar, {
-                searchId: searchId,
-                query: browser.query,
+                onSearch: onSearch,
                 refreshing: browser.refreshing,
                 canRefresh: browser.isReady,
                 placeholder: searchPlaceholder,
                 refreshLabel: refreshLabel,
-                onQueryChange: browser.actions.setQuery,
                 onRefresh: ()=>void browser.actions.refresh()
             }),
             /*#__PURE__*/ jsxs("div", {
@@ -394,41 +364,23 @@ function FileBrowserTreePane({ entries, locale, dashboardLabels, searchId, brows
                                     browser.dashboardError.message
                                 ]
                             }),
-                            /*#__PURE__*/ jsx("button", {
-                                type: "button",
+                            /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "default",
+                                htmlType: "button",
                                 onClick: ()=>void browser.actions.refresh(),
                                 children: retryLabel
                             })
                         ]
                     }) : null,
                     /*#__PURE__*/ jsx(file_tree_FileTree, {
+                        search: false,
+                        refresh: false,
                         locale: locale,
                         rows: browser.rows,
                         selectedId: browser.selectedId,
                         isReady: browser.isReady,
                         labels: treeLabels,
-                        emptyFallback: browser.searching ? browser.searchError ? /*#__PURE__*/ jsxs("div", {
-                            className: "ov-file-browser__hint ov-file-browser__hint--error",
-                            children: [
-                                /*#__PURE__*/ jsx("p", {
-                                    className: "ov-file-browser__failure-title",
-                                    children: searchErrorLabel
-                                }),
-                                /*#__PURE__*/ jsx("p", {
-                                    className: "ov-file-browser__failure-detail",
-                                    children: browser.searchError.message
-                                }),
-                                /*#__PURE__*/ jsx("button", {
-                                    type: "button",
-                                    className: "ov-file-browser__retry",
-                                    onClick: ()=>void browser.actions.refresh(),
-                                    children: retryLabel
-                                })
-                            ]
-                        }) : /*#__PURE__*/ jsx("p", {
-                            className: "ov-file-browser__hint",
-                            children: browser.searchLoading ? searchLoading : searchEmpty
-                        }) : void 0,
                         renderRowIcon: (row)=>browser.dashboards.get(row.uri)?.isRoot ? /*#__PURE__*/ jsx(WikiBookIcon, {
                                 width: 14,
                                 height: 14
@@ -454,106 +406,138 @@ function FileBrowserTreePane({ entries, locale, dashboardLabels, searchId, brows
         ]
     });
 }
-const messages = {
-    formatCharacterCount: (count)=>`${count.toLocaleString('en-US')} ${1 === count ? 'character' : 'characters'}`,
-    empty: 'Select a file to preview',
-    error: 'Failed to load the directory',
-    retry: 'Retry',
-    refresh: 'Refresh',
-    searchPlaceholder: 'Search files ⌘+K...',
-    searchEmpty: 'No matching resources',
-    searchFailed: 'Failed to run the search',
-    loading: 'Loading…',
-    searchLoading: 'Searching…',
-    previewMode: 'Preview',
-    sourceMode: 'Source',
-    copyPath: 'Copy path',
-    copyContent: 'Copy content',
-    download: 'Download',
-    history: 'Version history',
-    viewSwitch: 'Switch view',
-    resizeTree: 'Resize the directory tree',
-    l0Summary: 'L0 Summary',
-    l1Overview: 'L1 Overview',
-    summaryEmpty: 'No summary generated yet',
-    summaryFailed: 'The summary could not be loaded.'
+const en_US = {
+    closeLabel: 'Close dialog'
 };
-const en_US = messages;
-const zh_CN_messages = {
-    formatCharacterCount: (count)=>`${count.toLocaleString('zh-CN')} 个字符`,
-    empty: '选择一个文件查看内容',
-    error: '目录加载失败',
-    retry: '重试',
-    refresh: '刷新',
-    searchPlaceholder: '搜索文件 ⌘+K...',
-    searchEmpty: '没有匹配的资源',
-    searchFailed: '搜索失败',
-    loading: '加载中…',
-    searchLoading: '搜索中…',
-    previewMode: '预览',
-    sourceMode: '源码',
-    copyPath: '复制路径',
-    copyContent: '复制正文',
-    download: '下载',
-    history: '版本历史',
-    viewSwitch: '切换视图',
-    resizeTree: '调整目录树宽度',
-    l0Summary: 'L0 摘要',
-    l1Overview: 'L1 总览',
-    summaryEmpty: '暂无生成内容',
-    summaryFailed: '摘要加载失败。'
+const zh_CN = {
+    closeLabel: '关闭弹窗'
 };
-const zh_CN = zh_CN_messages;
-const LOCALES = {
-    'en-US': en_US,
-    'zh-CN': zh_CN
+const MOTION = {
+    appear: 'ov-modal--enter',
+    appearActive: 'ov-modal--enter-active',
+    enter: 'ov-modal--enter',
+    enterActive: 'ov-modal--enter-active',
+    exitActive: 'ov-modal--exit'
 };
-function resolveLabels(labels, locale) {
-    return {
-        ...resolveLocale(LOCALES, locale, labels),
-        tree: labels?.tree,
-        previewLabels: labels?.preview
-    };
-}
-function resolvePreviewLabels(text) {
-    return {
-        loading: text.loading,
-        copyPath: text.copyPath,
-        download: text.download,
-        ...text.previewLabels
-    };
-}
-function resolveSummaryLabels(locale, labels) {
-    const text = resolveLabels(labels, locale);
-    return {
-        l0: text.l0Summary,
-        l1: text.l1Overview,
-        failure: text.summaryFailed
-    };
-}
-function useContainerWidth() {
-    const ref = useRef(null);
-    const [width, setWidth] = useState(0);
+function Modal({ open, title, triggerRef, id, className, locale: localeProp, onClose, children, closeLabel }) {
+    const locale = useLocale(localeProp);
+    const text = resolveLocale({
+        'en-US': en_US,
+        'zh-CN': zh_CN
+    }, locale);
+    const label = closeLabel ?? text.closeLabel;
+    const generatedId = useId();
+    const panelRef = useRef(null);
+    const maskRef = useRef(null);
+    const [present, setPresent] = useState(open);
+    const [layer, setLayer] = useState(null);
+    usePortalTheme(Boolean(layer), triggerRef, layer);
     useEffect(()=>{
-        const element = ref.current;
-        if (!element) return;
-        const update = (next)=>setWidth((current)=>current === next ? current : next);
-        update(Math.round(element.getBoundingClientRect().width));
-        const observer = new ResizeObserver(([entry])=>{
-            if (entry) update(Math.round(entry.contentRect.width));
-        });
-        observer.observe(element);
-        return ()=>observer.disconnect();
-    }, []);
-    return {
-        ref,
-        width
-    };
+        if (layer) return lockBodyScroll(layer.ownerDocument.body);
+    }, [
+        layer
+    ]);
+    if ("u" < typeof document || !open && !present) return null;
+    return /*#__PURE__*/ createPortal(/*#__PURE__*/ jsxs("div", {
+        ref: setLayer,
+        role: "presentation",
+        lang: locale,
+        className: [
+            'ov-modal',
+            className
+        ].filter(Boolean).join(' '),
+        onKeyDown: (event)=>{
+            if ('Escape' !== event.key || event.defaultPrevented) return;
+            if (!(event.target instanceof Node) || !event.currentTarget.contains(event.target)) return;
+            event.preventDefault();
+            event.stopPropagation();
+            onClose?.();
+        },
+        children: [
+            /*#__PURE__*/ jsx(CSSTransition, {
+                nodeRef: maskRef,
+                in: open,
+                timeout: 300,
+                classNames: MOTION,
+                appear: true,
+                mountOnEnter: true,
+                unmountOnExit: true,
+                children: /*#__PURE__*/ jsx("button", {
+                    ref: maskRef,
+                    type: "button",
+                    className: "ov-modal__mask",
+                    "aria-label": label,
+                    "aria-hidden": "true",
+                    tabIndex: -1,
+                    onClick: onClose
+                })
+            }),
+            /*#__PURE__*/ jsx(CSSTransition, {
+                nodeRef: panelRef,
+                in: open,
+                timeout: 300,
+                classNames: MOTION,
+                appear: true,
+                mountOnEnter: true,
+                unmountOnExit: true,
+                onEnter: ()=>setPresent(true),
+                onExited: ()=>setPresent(false),
+                children: /*#__PURE__*/ jsx("div", {
+                    ref: panelRef,
+                    id: id ?? generatedId,
+                    role: "dialog",
+                    "aria-modal": "true",
+                    "aria-label": title,
+                    className: "ov-modal__panel",
+                    children: /*#__PURE__*/ jsxs(es2015, {
+                        className: "ov-modal__focus-lock",
+                        returnFocus: {
+                            preventScroll: true
+                        },
+                        crossFrame: false,
+                        children: [
+                            /*#__PURE__*/ jsx("button", {
+                                type: "button",
+                                className: "ov-modal__close",
+                                "aria-label": label,
+                                disabled: !onClose,
+                                onClick: onClose,
+                                children: /*#__PURE__*/ jsx(removereact, {
+                                    width: 16,
+                                    height: 16,
+                                    "aria-hidden": "true"
+                                })
+                            }),
+                            /*#__PURE__*/ jsx("div", {
+                                className: "ov-modal__body",
+                                children: children
+                            })
+                        ]
+                    })
+                })
+            })
+        ]
+    }), document.body);
 }
-function selectedRowId(uri, results) {
-    if (!uri || null === results) return uri;
-    const index = results.findIndex((entry)=>entry.uri === uri);
-    return index < 0 ? uri : `${uri}#${index}`;
+function mergeFindResult(result) {
+    const seen = new Set();
+    const entries = [];
+    for (const group of [
+        result?.memories,
+        result?.resources,
+        result?.skills
+    ])for (const item of group ?? []){
+        const uri = item?.uri;
+        if (!(!uri || seen.has(uri))) {
+            seen.add(uri);
+            entries.push({
+                uri,
+                isDir: false,
+                abstract: item.abstract?.trim() || void 0
+            });
+        }
+    }
+    return entries;
 }
 const emptyDir = ()=>({
         entries: [],
@@ -590,6 +574,9 @@ function toEntryRow(entry, depth, expanded, index, busy) {
         name: nameFromUri(entry.uri),
         type: isDir ? 'directory' : 'file',
         expanded: isDir ? expanded : void 0,
+        disabled: 'denied' === entry.access || void 0,
+        selectable: 'container' === entry.access ? false : void 0,
+        access: entry.access ?? ('read' === entry.permission ? 'read-only' : void 0),
         busy: busy || void 0
     };
 }
@@ -689,37 +676,302 @@ function flattenTree(uri, depth, dirs, expanded) {
 function isAbort(error) {
     return 'object' == typeof error && null !== error && 'AbortError' === error.name;
 }
-function toError(cause) {
-    return cause instanceof Error ? cause : new Error(String(cause));
-}
-async function readDirectory(client, uri, options) {
-    const read = (path)=>client.request({
-            method: 'GET',
-            path,
-            query: {
-                uri
+const toError = (cause)=>cause instanceof Error ? cause : new Error(String(cause));
+const LIMIT = 20;
+function useFsSearch({ client, query, targetUri, generation = 0, requestOptions }) {
+    const [results, setResults] = useState(null);
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState(null);
+    useEffect(()=>{
+        if (!client || !query) {
+            setResults(null);
+            setLoading(false);
+            setError(null);
+            return;
+        }
+        const controller = new AbortController();
+        setLoading(true);
+        setError(null);
+        client.request({
+            method: 'POST',
+            path: OV_PATHS.searchFind,
+            body: {
+                query,
+                target_uri: targetUri,
+                limit: LIMIT
             },
-            options
-        }).then((value)=>({
-                ok: true,
-                text: 'string' == typeof value ? value : ''
-            })).catch((cause)=>({
-                ok: false,
-                cause
-            }));
-    const [abstractResult, overviewResult] = await Promise.all([
-        read(OV_PATHS.contentAbstract),
-        read(OV_PATHS.contentOverview)
+            options: {
+                ...requestOptions,
+                signal: controller.signal
+            }
+        }).then((result)=>{
+            if (controller.signal.aborted) return;
+            setResults(mergeFindResult(result));
+            setLoading(false);
+        }, (cause)=>{
+            if (isAbort(cause) || controller.signal.aborted) return;
+            setResults([]);
+            setError(toError(cause));
+            setLoading(false);
+        });
+        return ()=>controller.abort();
+    }, [
+        client,
+        query,
+        targetUri,
+        generation,
+        requestOptions
     ]);
-    const aborted = [
-        abstractResult,
-        overviewResult
-    ].find((result)=>!result.ok && isAbort(result.cause));
-    if (aborted && !aborted.ok) throw aborted.cause;
-    if (!abstractResult.ok && !overviewResult.ok) throw abstractResult.cause;
-    const reason = (result)=>result.ok ? void 0 : result.cause instanceof Error ? result.cause.message : String(result.cause);
     return {
-        abstract: abstractResult.ok ? abstractResult.text : '',
+        results,
+        loading,
+        error
+    };
+}
+function FileBrowserSearch({ open, rootUri, triggerRef, locale, text, requestOptions, onClose }) {
+    const client = useOvClient();
+    const [draft, setDraft] = useState('');
+    const [request, setRequest] = useState({
+        query: '',
+        generation: 0
+    });
+    const search = useFsSearch({
+        client,
+        query: open ? request.query : '',
+        targetUri: rootUri,
+        generation: request.generation,
+        requestOptions
+    });
+    const close = ()=>{
+        setDraft('');
+        setRequest({
+            query: '',
+            generation: 0
+        });
+        onClose();
+    };
+    return /*#__PURE__*/ jsxs(Modal, {
+        open: open,
+        title: text.searchTitle,
+        locale: locale,
+        triggerRef: triggerRef,
+        className: "ov-file-browser-search",
+        onClose: close,
+        children: [
+            /*#__PURE__*/ jsx("h2", {
+                className: "ov-file-browser-search__title",
+                children: text.searchTitle
+            }),
+            /*#__PURE__*/ jsx("search", {
+                children: /*#__PURE__*/ jsxs("form", {
+                    className: "ov-file-browser-search__form",
+                    onSubmit: (event)=>{
+                        event.preventDefault();
+                        const query = draft.trim();
+                        if (!query || !client || search.loading) return;
+                        setRequest((current)=>({
+                                query,
+                                generation: current.generation + 1
+                            }));
+                    },
+                    children: [
+                        /*#__PURE__*/ jsx(input_Input, {
+                            "data-autofocus": true,
+                            required: true,
+                            type: "search",
+                            name: "query",
+                            "aria-label": text.searchTitle,
+                            placeholder: text.searchPlaceholder,
+                            value: draft,
+                            onChange: (event)=>setDraft(event.target.value)
+                        }),
+                        /*#__PURE__*/ jsx(button_Button, {
+                            type: "primary",
+                            htmlType: "submit",
+                            loading: search.loading,
+                            disabled: !client,
+                            children: text.searchAction
+                        })
+                    ]
+                })
+            }),
+            /*#__PURE__*/ jsx("div", {
+                className: "ov-file-browser-search__results",
+                "aria-busy": search.loading,
+                children: search.loading ? /*#__PURE__*/ jsx("p", {
+                    role: "status",
+                    children: text.searchLoading
+                }) : search.error ? /*#__PURE__*/ jsxs("div", {
+                    role: "alert",
+                    className: "ov-file-browser-search__error",
+                    children: [
+                        /*#__PURE__*/ jsx("p", {
+                            children: text.searchFailed
+                        }),
+                        /*#__PURE__*/ jsx("p", {
+                            children: search.error.message
+                        })
+                    ]
+                }) : null === search.results ? /*#__PURE__*/ jsx("p", {
+                    role: "status",
+                    children: text.searchHint
+                }) : 0 === search.results.length ? /*#__PURE__*/ jsx("p", {
+                    role: "status",
+                    children: text.searchEmpty
+                }) : /*#__PURE__*/ jsx("ul", {
+                    className: "ov-file-browser-search__list",
+                    children: search.results.map((entry)=>/*#__PURE__*/ jsxs("li", {
+                            className: "ov-file-browser-search__result",
+                            children: [
+                                /*#__PURE__*/ jsx("span", {
+                                    className: "ov-file-browser-search__uri",
+                                    children: entry.uri
+                                }),
+                                entry.abstract ? /*#__PURE__*/ jsx("p", {
+                                    className: "ov-file-browser-search__summary",
+                                    children: entry.abstract
+                                }) : null
+                            ]
+                        }, entry.uri))
+                })
+            })
+        ]
+    });
+}
+const messages = {
+    formatCharacterCount: (count)=>`${count.toLocaleString('en-US')} ${1 === count ? 'character' : 'characters'}`,
+    accessDenied: 'You do not have permission to view this node.',
+    traverseOnly: 'This directory can only be expanded to reach accessible children.',
+    empty: 'Select a file to preview',
+    error: 'Failed to load the directory',
+    retry: 'Retry',
+    refresh: 'Refresh',
+    searchPlaceholder: 'Search files ⌘+K...',
+    searchTitle: 'Search files',
+    searchAction: 'Search',
+    searchHint: 'Enter a query to search.',
+    searchEmpty: 'No matching resources',
+    searchFailed: 'Failed to run the search',
+    loading: 'Loading…',
+    searchLoading: 'Searching…',
+    previewMode: 'Preview',
+    sourceMode: 'Source',
+    copyPath: 'Copy path',
+    copyContent: 'Copy content',
+    download: 'Download',
+    history: 'Version history',
+    viewSwitch: 'Switch view',
+    resizeTree: 'Resize the directory tree',
+    l0Summary: 'L0 Summary',
+    l1Overview: 'L1 Overview',
+    summaryEmpty: 'No summary generated yet',
+    summaryFailed: 'The summary could not be loaded.'
+};
+const locales_en_US = messages;
+const zh_CN_messages = {
+    formatCharacterCount: (count)=>`${count.toLocaleString('zh-CN')} 个字符`,
+    accessDenied: '无权查看此节点。',
+    traverseOnly: '此目录仅可展开以访问有权限的子节点。',
+    empty: '选择一个文件查看内容',
+    error: '目录加载失败',
+    retry: '重试',
+    refresh: '刷新',
+    searchPlaceholder: '搜索文件 ⌘+K...',
+    searchTitle: '搜索文件',
+    searchAction: '搜索',
+    searchHint: '输入关键词后搜索。',
+    searchEmpty: '没有匹配的资源',
+    searchFailed: '搜索失败',
+    loading: '加载中…',
+    searchLoading: '搜索中…',
+    previewMode: '预览',
+    sourceMode: '源码',
+    copyPath: '复制路径',
+    copyContent: '复制正文',
+    download: '下载',
+    history: '版本历史',
+    viewSwitch: '切换视图',
+    resizeTree: '调整目录树宽度',
+    l0Summary: 'L0 摘要',
+    l1Overview: 'L1 总览',
+    summaryEmpty: '暂无生成内容',
+    summaryFailed: '摘要加载失败。'
+};
+const locales_zh_CN = zh_CN_messages;
+const LOCALES = {
+    'en-US': locales_en_US,
+    'zh-CN': locales_zh_CN
+};
+function resolveLabels(labels, locale) {
+    return {
+        ...resolveLocale(LOCALES, locale, labels),
+        tree: labels?.tree,
+        previewLabels: labels?.preview
+    };
+}
+function resolvePreviewLabels(text) {
+    return {
+        loading: text.loading,
+        copyPath: text.copyPath,
+        download: text.download,
+        ...text.previewLabels
+    };
+}
+function resolveSummaryLabels(locale, labels) {
+    const text = resolveLabels(labels, locale);
+    return {
+        l0: text.l0Summary,
+        l1: text.l1Overview,
+        failure: text.summaryFailed
+    };
+}
+function useContainerWidth() {
+    const ref = useRef(null);
+    const [width, setWidth] = useState(0);
+    useEffect(()=>{
+        const element = ref.current;
+        if (!element) return;
+        const update = (next)=>setWidth((current)=>current === next ? current : next);
+        update(Math.round(element.getBoundingClientRect().width));
+        const observer = new ResizeObserver(([entry])=>{
+            if (entry) update(Math.round(entry.contentRect.width));
+        });
+        observer.observe(element);
+        return ()=>observer.disconnect();
+    }, []);
+    return {
+        ref,
+        width
+    };
+}
+async function readDirectory(client, uri, options) {
+    const read = (path)=>client.request({
+            method: 'GET',
+            path,
+            query: {
+                uri
+            },
+            options
+        }).then((value)=>({
+                ok: true,
+                text: 'string' == typeof value ? value : ''
+            })).catch((cause)=>({
+                ok: false,
+                cause
+            }));
+    const [abstractResult, overviewResult] = await Promise.all([
+        read(OV_PATHS.contentAbstract),
+        read(OV_PATHS.contentOverview)
+    ]);
+    const aborted = [
+        abstractResult,
+        overviewResult
+    ].find((result)=>!result.ok && isAbort(result.cause));
+    if (aborted && !aborted.ok) throw aborted.cause;
+    if (!abstractResult.ok && !overviewResult.ok) throw abstractResult.cause;
+    const reason = (result)=>result.ok ? void 0 : result.cause instanceof Error ? result.cause.message : String(result.cause);
+    return {
+        abstract: abstractResult.ok ? abstractResult.text : '',
         overview: overviewResult.ok ? overviewResult.text : '',
         abstractError: reason(abstractResult),
         overviewError: reason(overviewResult)
@@ -1093,77 +1345,6 @@ function loadingTab(uri, isDirectory) {
         }
     };
 }
-function mergeFindResult(result) {
-    const seen = new Set();
-    const entries = [];
-    for (const group of [
-        result?.memories,
-        result?.resources,
-        result?.skills
-    ])for (const item of group ?? []){
-        const uri = item?.uri;
-        if (!(!uri || seen.has(uri))) {
-            seen.add(uri);
-            entries.push({
-                uri,
-                isDir: false,
-                abstract: item.abstract?.trim() || void 0
-            });
-        }
-    }
-    return entries;
-}
-const LIMIT = 20;
-function useFsSearch({ client, query, targetUri, generation = 0, requestOptions }) {
-    const [results, setResults] = useState(null);
-    const [loading, setLoading] = useState(false);
-    const [error, setError] = useState(null);
-    useEffect(()=>{
-        if (!client || !query) {
-            setResults(null);
-            setLoading(false);
-            setError(null);
-            return;
-        }
-        const controller = new AbortController();
-        setLoading(true);
-        setError(null);
-        client.request({
-            method: 'POST',
-            path: OV_PATHS.searchFind,
-            body: {
-                query,
-                target_uri: targetUri,
-                limit: LIMIT
-            },
-            options: {
-                ...requestOptions,
-                signal: controller.signal
-            }
-        }).then((result)=>{
-            if (controller.signal.aborted) return;
-            setResults(mergeFindResult(result));
-            setLoading(false);
-        }, (cause)=>{
-            if (isAbort(cause) || controller.signal.aborted) return;
-            setResults([]);
-            setError(toError(cause));
-            setLoading(false);
-        });
-        return ()=>controller.abort();
-    }, [
-        client,
-        query,
-        targetUri,
-        generation,
-        requestOptions
-    ]);
-    return {
-        results,
-        loading,
-        error
-    };
-}
 const isHomeUri = (uri)=>'viking://~' === uri || uri.startsWith('viking://~/');
 async function readDashboardStat(client, uri, options) {
     const stat = await client.request({
@@ -1278,6 +1459,12 @@ function resolveDashboard(uri, rows, targets) {
         pendingConflicts: tagged ? 'has_conflict=true' === tagged : owner?.to === uri && void 0 !== owner.conflicts_num ? owner.conflicts_num > 0 : void 0
     };
 }
+function mergeDashboardTab(tabs, dashboard, blocked) {
+    return blocked ? null : dashboard ? [
+        ...tabs ?? [],
+        dashboard
+    ] : tabs;
+}
 async function readCompileTargets(client, rootUri, options) {
     rootUri = await resolveDashboardUri(client, rootUri, options);
     const targets = [];
@@ -1550,9 +1737,9 @@ function ExperienceDashboardPane({ uri, locale, requestOptions, refreshGeneratio
 const wiki_conflicts_prefix = '<!-- CONFLICTS_CONTENT';
 const manualResolutionBasis = '\u4eba\u5de5\u4fee\u590d';
 const timestamp = (value)=>'number' == typeof value && Number.isSafeInteger(value) && value >= 0 && Number.isFinite(new Date(1000 * value).getTime());
-const locateWikiConflict = (document, matchText)=>{
+const locateWikiConflict = (document1, matchText)=>{
     const mask = (value)=>value.replace(/[^\r\n]/g, ' ');
-    const body = document.replace(/^(?:\uFEFF)?---\r?\n[\s\S]*?\r?\n---(?:\r?\n|$)/, mask).replace(/<!--[\s\S]*?(?:-->|$)/g, mask);
+    const body = document1.replace(/^(?:\uFEFF)?---\r?\n[\s\S]*?\r?\n---(?:\r?\n|$)/, mask).replace(/<!--[\s\S]*?(?:-->|$)/g, mask);
     const start = matchText ? body.indexOf(matchText) : -1;
     if (start < 0) return {
         status: 'missing'
@@ -1564,7 +1751,7 @@ const locateWikiConflict = (document, matchText)=>{
         status: 'unique',
         start,
         end: start + matchText.length,
-        line: document.slice(0, start).split('\n').length
+        line: document1.slice(0, start).split('\n').length
     };
 };
 const parseWikiFileConflicts = (content)=>{
@@ -1576,7 +1763,7 @@ const parseWikiFileConflicts = (content)=>{
     if (!footer.endsWith('-->')) return {
         status: 'invalid'
     };
-    const document = content.slice(0, start);
+    const document1 = content.slice(0, start);
     const source = footer.slice(wiki_conflicts_prefix.length, -3).trim();
     let parsed;
     try {
@@ -1609,7 +1796,7 @@ const parseWikiFileConflicts = (content)=>{
             status: 'invalid'
         };
         const matchText = value.match_text;
-        const location = locateWikiConflict(document, matchText);
+        const location = locateWikiConflict(document1, matchText);
         records.push({
             id: JSON.stringify([
                 index,
@@ -1631,7 +1818,7 @@ const parseWikiFileConflicts = (content)=>{
     }
     return {
         status: 'available',
-        document,
+        document: document1,
         records
     };
 };
@@ -1757,7 +1944,7 @@ function useBrowserDashboards({ rows, metadataRows, uri, rootUri, generation, lo
             uri: target
         } : void 0;
     };
-    const dashboards = new Map(rows.filter((row)=>'entry' === row.kind).flatMap((row)=>{
+    const dashboards = new Map(rows.filter((row)=>'entry' === row.kind).filter((row)=>!row.disabled && false !== row.selectable).flatMap((row)=>{
         const dashboard = resolve(row.uri);
         return dashboard && (void 0 === dashboardKinds || dashboardKinds.includes(dashboard.kind)) ? [
             [
@@ -1849,10 +2036,17 @@ function useTreeMetadata(rootUri, dirs) {
     const metadataRows = useMemo(()=>Object.values(dirs).flatMap((dir)=>dir.entries.map((entry)=>toEntryRow(entry, 0, false))), [
         dirs
     ]);
+    const accessOf = useCallback((uri)=>{
+        const row = metadataRows.find((entry)=>entry.uri === uri);
+        return row?.access === 'denied' || row?.access === 'container' ? row.access : void 0;
+    }, [
+        metadataRows
+    ]);
     return {
         directoryUris,
         isKnownFile,
-        metadataRows
+        metadataRows,
+        accessOf
     };
 }
 const ids = new WeakMap();
@@ -2060,6 +2254,7 @@ function useFsTree({ client, rootUri, defaultExpandedUri, requestOptions }) {
                 }
             },
             toggleExpand: async (row)=>{
+                if (row.disabled) return;
                 const isOpen = expandedRef.current.has(row.uri);
                 setExpanded((prev)=>{
                     const next = new Set(prev);
@@ -2096,19 +2291,18 @@ function useFsTree({ client, rootUri, defaultExpandedUri, requestOptions }) {
         dirs,
         expanded
     ]);
-    const metadata = useTreeMetadata(rootUri, dirs);
     return {
         rows,
-        ...metadata,
+        ...useTreeMetadata(rootUri, dirs),
         isReady,
         error,
         ...state
     };
 }
-function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDashboard, dashboardLabels, controlled = false, summaryLabels, formatCharacterCount, defaultExpandedUri, currentUri, requestOptions, onUriChange }) {
+function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDashboard, dashboardLabels, controlled = false, summaryLabels, accessLabels, formatCharacterCount, defaultExpandedUri, currentUri, requestOptions, onUriChange }) {
     const locale = useLocale(localeProp);
+    const text = resolveLabels(accessLabels, locale);
     const client = useOvClient();
-    const [query, setQuery] = useState('');
     const [pendingUri, setPendingUri] = useState(currentUri);
     const [refreshing, setRefreshing] = useState(false);
     const [refreshGeneration, setRefreshGeneration] = useState(0);
@@ -2118,14 +2312,8 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
         defaultExpandedUri,
         requestOptions
     });
-    const search = useFsSearch({
-        client,
-        query,
-        targetUri: rootUri,
-        generation: refreshGeneration,
-        requestOptions
-    });
     const activeUri = controlled ? currentUri : pendingUri;
+    const blocked = tree.accessOf(activeUri);
     const resourceType = null === activeUri ? 'file' : tree.directoryUris.has(activeUri) ? 'directory' : tree.isKnownFile(activeUri) ? 'file' : 'unknown';
     const openTree = tree.open;
     const notifyUriChange = useRef(onUriChange);
@@ -2139,21 +2327,15 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
     ]);
     const preview = useFsPreview({
         client,
-        uri: activeUri,
+        uri: blocked ? null : activeUri,
         resourceType,
         labels: summaryLabels ?? resolveSummaryLabels(locale),
-        formatCharacterCount: formatCharacterCount ?? resolveLabels(void 0, locale).formatCharacterCount,
+        formatCharacterCount: formatCharacterCount ?? text.formatCharacterCount,
         openParent,
         generation: refreshGeneration,
         requestOptions
     });
-    const rows = useMemo(()=>{
-        if (null === search.results) return tree.rows;
-        return search.results.map((entry, index)=>toEntryRow(entry, 0, false, index));
-    }, [
-        search.results,
-        tree.rows
-    ]);
+    const rows = tree.rows;
     const openPath = tree.openPath;
     const openResource = useMemo(()=>async (uri)=>{
             setPendingUri(uri);
@@ -2167,7 +2349,7 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
     const boards = useBrowserDashboards({
         rows,
         metadataRows: tree.metadataRows,
-        uri: activeUri,
+        uri: blocked ? null : activeUri,
         rootUri,
         generation: refreshGeneration,
         locale,
@@ -2177,12 +2359,13 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
         renderDashboard,
         dashboardLabels
     });
-    const selectedId = selectedRowId(activeUri, search.results);
+    const selectedId = activeUri;
     const { open, toggleExpand, loadMore, retry, refresh } = tree;
     const { open: openDashboard, close: closeDashboard } = boards;
     const setActiveKey = preview.setActiveKey;
     const actions = useMemo(()=>({
             select: async (row)=>{
+                if (row.disabled || false === row.selectable) return;
                 closeDashboard();
                 setPendingUri(row.uri);
                 notifyUriChange.current(row.uri);
@@ -2213,8 +2396,7 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
                     closeDashboard();
                     setActiveKey(key);
                 }
-            },
-            setQuery
+            }
         }), [
         setActiveKey,
         open,
@@ -2226,52 +2408,1284 @@ function useFileBrowser({ rootUri, locale: localeProp, dashboardKinds, renderDas
         closeDashboard,
         activeUri
     ]);
+    const previewError = blocked ? new Error(text['denied' === blocked ? 'accessDenied' : 'traverseOnly']) : preview.error;
     return {
         rows,
         selectedId,
         currentUri: activeUri,
         isReady: tree.isReady,
-        error: tree.error ?? search.error ?? preview.error,
+        error: tree.error ?? previewError,
         treeError: tree.error,
-        previewError: preview.error,
-        searchError: search.error,
+        previewError,
         dashboards: boards.dashboards,
         dashboardError: boards.error,
-        previewTabs: boards.tab ? [
-            ...preview.tabs ?? [],
-            boards.tab
-        ] : preview.tabs,
+        previewTabs: mergeDashboardTab(preview.tabs, boards.tab, Boolean(blocked)),
         previewKey: boards.isOpen && activeUri ? dashboardKey(activeUri) : preview.activeKey,
         previewFooter: preview.footer,
-        query,
-        searching: null !== search.results,
-        searchLoading: search.loading,
         refreshing,
         actions
     };
 }
-function FileBrowser({ uri, defaultUri, rootUri = 'viking://', defaultExpandedUri, locale: localeProp, agentConnect, dashboardKinds, renderDashboard, onUriChange, onImportResources, renderImportResources, labels, requestOptions, className, style, ...rest }) {
-    const locale = useLocale(localeProp);
-    const [internalUri, setInternalUri] = useState(()=>defaultUri ?? null);
-    const [preferredTreeWidth, setPreferredTreeWidth] = useState(352);
-    const searchId = useId();
-    const isControlled = void 0 !== uri;
-    const currentUri = isControlled ? uri : internalUri;
-    const text = resolveLabels(labels, locale);
-    const { ref: layoutRef, width: layoutWidth } = useContainerWidth();
-    const treeMaxWidth = resolveTreeMaxWidth(layoutWidth);
-    const treeWidth = Math.min(preferredTreeWidth, treeMaxWidth);
-    const changeUri = useCallback((next)=>{
-        if (!isControlled) setInternalUri(next);
-        onUriChange?.(next);
-    }, [
-        isControlled,
-        onUriChange
-    ]);
-    const summaryLabels = useMemo(()=>({
-            l0: text.l0Summary,
-            l1: text.l1Overview,
-            failure: text.summaryFailed
+function AclPrincipalTabs({ type, text, onChange }) {
+    return /*#__PURE__*/ jsx("div", {
+        className: "ov-file-browser-acl__types",
+        role: "group",
+        "aria-label": text.addPrincipal,
+        children: [
+            'user',
+            'group'
+        ].map((value)=>/*#__PURE__*/ jsx(button_Button, {
+                size: "small",
+                type: type === value ? 'primary' : 'secondary',
+                "aria-pressed": type === value,
+                onClick: ()=>onChange(value),
+                children: 'user' === value ? text.users : text.groups
+            }, value))
+    });
+}
+const file_browser_icons_SIZE = 16;
+const strokeProps = {
+    width: file_browser_icons_SIZE,
+    height: file_browser_icons_SIZE,
+    viewBox: '0 0 48 48',
+    fill: 'none',
+    stroke: 'currentColor',
+    strokeWidth: 4,
+    'aria-hidden': true,
+    focusable: 'false'
+};
+function SearchIcon() {
+    return /*#__PURE__*/ jsx("svg", {
+        ...strokeProps,
+        children: /*#__PURE__*/ jsx("path", {
+            d: "M33.072 33.071c6.248-6.248 6.248-16.379 0-22.627-6.249-6.249-16.38-6.249-22.628 0-6.248 6.248-6.248 16.379 0 22.627 6.248 6.248 16.38 6.248 22.628 0Zm0 0 8.485 8.485"
+        })
+    });
+}
+const LEVELS = [
+    'read',
+    'write',
+    'manage'
+];
+const RANK = {
+    read: 1,
+    write: 2,
+    manage: 3
+};
+const isLevel = (value)=>LEVELS.includes(value);
+function isAclTarget(uri) {
+    if (!uri?.startsWith('viking://resources/')) return false;
+    const segments = uri.slice(19).split('/');
+    return segments.every((part)=>part && '.' !== part && '..' !== part);
+}
+function normalizeEntries(entries) {
+    const byPrincipal = new Map();
+    for (const entry of entries){
+        const principal = entry.principal.trim();
+        if (!/^(user|group):[^\s:]+$/.test(principal) || 'group:*' === principal || !isLevel(entry.level)) throw new TypeError('Invalid ACL entry');
+        const previous = byPrincipal.get(principal);
+        if (!previous || RANK[entry.level] > RANK[previous.level]) byPrincipal.set(principal, {
+            principal,
+            level: entry.level
+        });
+    }
+    return [
+        ...byPrincipal.values()
+    ].sort((a, b)=>a.principal.localeCompare(b.principal));
+}
+function parseReport(value, uri) {
+    const report = value;
+    if (!report || report.uri !== uri || ![
+        'none',
+        'inherit',
+        'restricted'
+    ].includes(report.acl_mode)) throw new TypeError('Invalid ACL report');
+    for (const key of [
+        'direct_entries',
+        'inherited_entries',
+        'effective_entries'
+    ])if (!Array.isArray(report[key])) throw new TypeError('Invalid ACL entries');
+    return {
+        uri,
+        acl_mode: report.acl_mode,
+        direct_entries: normalizeEntries(report.direct_entries),
+        inherited_entries: normalizeEntries(report.inherited_entries),
+        effective_entries: normalizeEntries(report.effective_entries)
+    };
+}
+function planChange(report, next) {
+    const parent = new Map(report.inherited_entries.map((entry)=>[
+            entry.principal,
+            entry
+        ]));
+    const target = new Map(next.map((entry)=>[
+            entry.principal,
+            entry
+        ]));
+    const retained = [
+        ...report.inherited_entries,
+        ...report.effective_entries
+    ].every((entry)=>{
+        const value = target.get(entry.principal);
+        return value && RANK[value.level] >= RANK[entry.level];
+    });
+    const entries = normalizeEntries(next);
+    if ('restricted' === report.acl_mode) return {
+        entries,
+        mode: 'restricted',
+        confirmation: false
+    };
+    if (!retained) return {
+        entries,
+        mode: 'restricted',
+        confirmation: true
+    };
+    return {
+        entries: entries.filter((entry)=>{
+            const inherited = parent.get(entry.principal);
+            return !inherited || RANK[entry.level] > RANK[inherited.level];
+        }),
+        mode: 'inherit',
+        confirmation: false
+    };
+}
+function restoreDiff(report) {
+    const inherited = new Map(report.inherited_entries.map((entry)=>[
+            entry.principal,
+            RANK[entry.level]
+        ]));
+    return report.direct_entries.filter((entry)=>Math.max(inherited.get(entry.principal) ?? 0, entry.principal.startsWith('user:') ? inherited.get('user:*') ?? 0 : 0) < RANK[entry.level]);
+}
+const acl_locales_en_US = {
+    title: 'Manage node permissions',
+    manage: 'Manage permissions',
+    read: 'Can read',
+    write: 'Can edit',
+    manageLevel: 'Can manage',
+    readDescription: 'Can view content, but cannot edit or manage permissions.',
+    writeDescription: 'Can view and edit content, but cannot manage permissions.',
+    manageDescription: 'Can manage the permissions of this node.',
+    effectivePermission: 'Current user’s effective permission',
+    addPrincipal: 'Add a User or Group',
+    search: 'Search users or groups',
+    users: 'User',
+    groups: 'Group',
+    allUsers: 'All users',
+    administrator: 'Account administrators',
+    administratorDescription: 'Administrators retain implicit management access.',
+    direct: 'Direct grant',
+    inherited: 'Inherited from parent',
+    remove: 'Remove permission',
+    add: 'Add',
+    cancel: 'Cancel',
+    confirm: 'Confirm',
+    close: 'Close permissions',
+    retry: 'Retry',
+    loadMore: 'Load more',
+    loading: 'Loading permissions…',
+    saving: 'Saving…',
+    saved: 'Permissions saved',
+    loadFailed: 'Could not load permissions',
+    saveFailed: 'Could not save permissions',
+    principalsFailed: 'Could not load users or groups',
+    empty: 'No principals available to add',
+    noMatches: 'No matching principals',
+    restricted: 'This node does not inherit its parent’s permissions.',
+    restore: 'Restore inheritance',
+    stopTitle: 'Stop inheriting parent permissions?',
+    stopDescription: 'This node will stop inheriting parent permissions and use the grants shown here.',
+    restoreTitle: 'Restore parent permission inheritance?',
+    restoreDescription: 'Direct grants on this node will be cleared and parent permissions inherited again.',
+    restoreRemoved: 'These direct grants will no longer apply:',
+    readOnly: 'Permission changes are disabled by the host.'
+};
+const acl_locales_zh_CN = {
+    title: '管理节点权限',
+    manage: '管理权限',
+    read: '可阅读',
+    write: '可编辑',
+    manageLevel: '可管理',
+    readDescription: '可查看节点内容，不能编辑或管理节点权限。',
+    writeDescription: '可查看并编辑内容，不能管理节点权限。',
+    manageDescription: '可管理该节点的权限配置。',
+    effectivePermission: '当前 User 有效权限',
+    addPrincipal: '添加 User 或 Group',
+    search: '搜索用户或用户组',
+    users: 'User',
+    groups: 'Group',
+    allUsers: '全部 User',
+    administrator: '数据空间管理员',
+    administratorDescription: '管理员始终保留隐式管理权限。',
+    direct: '直接授权',
+    inherited: '从父级目录继承权限',
+    remove: '移除权限',
+    add: '添加',
+    cancel: '取消',
+    confirm: '确定',
+    close: '关闭权限管理',
+    retry: '重试',
+    loadMore: '加载更多',
+    loading: '正在加载权限…',
+    saving: '正在保存…',
+    saved: '权限已保存',
+    loadFailed: '权限加载失败',
+    saveFailed: '权限保存失败',
+    principalsFailed: '用户或用户组加载失败',
+    empty: '暂无可添加成员',
+    noMatches: '暂无匹配结果',
+    restricted: '当前节点不继承父目录的权限。',
+    restore: '恢复继承',
+    stopTitle: '停止继承上级权限？',
+    stopDescription: '确定后，此节点将不再继承父级目录的权限，并按当前设置的访问权限生效。',
+    restoreTitle: '恢复继承上级权限？',
+    restoreDescription: '将清空本节点的直接授权，重新跟随上级权限。',
+    restoreRemoved: '以下直接授权将不再生效：',
+    readOnly: '宿主已禁止修改权限。'
+};
+const aclLabels = (locale, labels)=>resolveLocale({
+        'en-US': acl_locales_en_US,
+        'zh-CN': acl_locales_zh_CN
+    }, locale, labels);
+const levelLabel = (level, text)=>'manage' === level ? text.manageLevel : text[level];
+function AclMenu({ level, text, name, disabled, onChange, onRemove }) {
+    const [open, setOpen] = useState(false);
+    const root = useRef(null);
+    const trigger = useRef(null);
+    const menu = useRef(null);
+    const id = useId();
+    const close = ()=>{
+        setOpen(false);
+        trigger.current?.focus();
+    };
+    useEffect(()=>{
+        if (!open) return;
+        menu.current?.querySelector('button')?.focus();
+        const outside = (event)=>{
+            if (event.target instanceof Node && !root.current?.contains(event.target)) setOpen(false);
+        };
+        document.addEventListener('pointerdown', outside);
+        return ()=>document.removeEventListener('pointerdown', outside);
+    }, [
+        open
+    ]);
+    return /*#__PURE__*/ jsxs("div", {
+        className: "ov-file-browser-acl__menu-anchor",
+        ref: root,
+        onBlur: (event)=>{
+            if (!event.currentTarget.contains(event.relatedTarget)) setOpen(false);
+        },
+        children: [
+            /*#__PURE__*/ jsxs("button", {
+                ref: trigger,
+                type: "button",
+                className: "ov-file-browser-acl__level",
+                "aria-label": `${name}: ${levelLabel(level, text)}`,
+                "aria-haspopup": "menu",
+                "aria-expanded": open,
+                "aria-controls": open ? id : void 0,
+                disabled: disabled,
+                onClick: ()=>setOpen(!open),
+                children: [
+                    levelLabel(level, text),
+                    /*#__PURE__*/ jsx(chevron_downreact, {
+                        "aria-hidden": "true",
+                        width: 12,
+                        height: 12
+                    })
+                ]
+            }),
+            open && !disabled ? /*#__PURE__*/ jsxs("div", {
+                id: id,
+                role: "menu",
+                tabIndex: -1,
+                "aria-label": name,
+                ref: menu,
+                className: "ov-file-browser-acl__menu",
+                onKeyDown: (event)=>{
+                    if ('Escape' === event.key) {
+                        event.preventDefault();
+                        event.stopPropagation();
+                        close();
+                    }
+                    const buttons = [
+                        ...event.currentTarget.querySelectorAll('button')
+                    ];
+                    const index = buttons.indexOf(document.activeElement);
+                    const last = buttons.length - 1;
+                    const next = 'ArrowDown' === event.key ? (index + 1) % buttons.length : 'ArrowUp' === event.key ? (index + last) % buttons.length : 'Home' === event.key ? 0 : 'End' === event.key ? last : -1;
+                    if (next >= 0) {
+                        event.preventDefault();
+                        buttons[next]?.focus();
+                    }
+                },
+                children: [
+                    LEVELS.map((value)=>/*#__PURE__*/ jsxs("button", {
+                            type: "button",
+                            role: "menuitemradio",
+                            "aria-checked": level === value,
+                            onClick: ()=>{
+                                close();
+                                if (value !== level) onChange(value);
+                            },
+                            children: [
+                                /*#__PURE__*/ jsx("span", {
+                                    className: "ov-file-browser-acl__check",
+                                    children: level === value ? /*#__PURE__*/ jsx(checkreact, {
+                                        width: 12,
+                                        height: 12,
+                                        "aria-hidden": "true"
+                                    }) : null
+                                }),
+                                levelLabel(value, text)
+                            ]
+                        }, value)),
+                    onRemove ? /*#__PURE__*/ jsx("button", {
+                        type: "button",
+                        role: "menuitem",
+                        className: "ov-file-browser-acl__remove",
+                        onClick: ()=>{
+                            close();
+                            onRemove();
+                        },
+                        children: text.remove
+                    }) : null
+                ]
+            }) : null
+        ]
+    });
+}
+function AclAvatar({ principal }) {
+    const [type, id] = principal.split(':');
+    return /*#__PURE__*/ jsx("span", {
+        "aria-hidden": "true",
+        className: "ov-file-browser-acl__avatar",
+        "data-group": 'group' === type || void 0,
+        children: 'group' === type ? 'G' : id?.charAt(0).toUpperCase()
+    });
+}
+function AclEntry({ entry, source, text, disabled, onChange, onRemove }) {
+    const name = 'user:*' === entry.principal ? text.allUsers : entry.principal.slice(entry.principal.indexOf(':') + 1);
+    return /*#__PURE__*/ jsxs("li", {
+        className: "ov-file-browser-acl__entry",
+        children: [
+            /*#__PURE__*/ jsx(AclAvatar, {
+                principal: entry.principal
+            }),
+            /*#__PURE__*/ jsxs("div", {
+                className: "ov-file-browser-acl__identity",
+                children: [
+                    /*#__PURE__*/ jsx("span", {
+                        className: "ov-file-browser-acl__name",
+                        children: name
+                    }),
+                    /*#__PURE__*/ jsx("span", {
+                        className: "ov-file-browser-acl__source",
+                        children: source
+                    })
+                ]
+            }),
+            /*#__PURE__*/ jsx(AclMenu, {
+                level: entry.level,
+                text: text,
+                name: entry.principal,
+                disabled: disabled,
+                onChange: onChange,
+                onRemove: onRemove
+            })
+        ]
+    });
+}
+function AclCandidate({ principal, level, text, onChange }) {
+    const name = 'user:*' === principal ? text.allUsers : principal.slice(principal.indexOf(':') + 1);
+    return /*#__PURE__*/ jsxs("div", {
+        className: "ov-file-browser-acl__candidate",
+        children: [
+            /*#__PURE__*/ jsxs("label", {
+                children: [
+                    /*#__PURE__*/ jsx("input", {
+                        type: "checkbox",
+                        checked: void 0 !== level,
+                        onChange: (event)=>onChange(event.target.checked ? 'read' : void 0)
+                    }),
+                    /*#__PURE__*/ jsx(AclAvatar, {
+                        principal: principal
+                    }),
+                    /*#__PURE__*/ jsx("span", {
+                        children: name
+                    })
+                ]
+            }),
+            /*#__PURE__*/ jsx(AclMenu, {
+                text: text,
+                name: principal,
+                level: level ?? 'read',
+                onChange: onChange
+            })
+        ]
+    });
+}
+const readAcl = async (client, uri, options)=>parseReport(await client.request({
+        method: 'GET',
+        path: OV_PATHS.acl,
+        query: {
+            uri
+        },
+        options
+    }), uri);
+async function readPermission(client, uri, options) {
+    const stat = await client.request({
+        method: 'GET',
+        path: OV_PATHS.fsStat,
+        query: {
+            uri
+        },
+        options
+    });
+    if (void 0 !== stat.permission) {
+        if (!isLevel(stat.permission)) throw new TypeError('Unknown resource permission');
+        return stat.permission;
+    }
+    try {
+        await readAcl(client, uri, options);
+        return 'manage';
+    } catch (error) {
+        if (isOvClientError(error) && 403 === error.statusCode) return;
+        throw error;
+    }
+}
+async function writeAcl(client, uri, options, change) {
+    const value = await client.request({
+        method: change ? 'PUT' : 'DELETE',
+        path: OV_PATHS.acl,
+        ...change ? {
+            body: {
+                uri,
+                acl_mode: change.mode,
+                entries: change.direct_entries
+            }
+        } : {
+            query: {
+                uri
+            }
+        },
+        options
+    });
+    return parseReport(value, uri);
+}
+async function identityValue(value) {
+    return ('function' == typeof value ? await value() : value)?.trim() ?? '';
+}
+async function listPrincipals(query, context, accountId) {
+    const account = await identityValue(accountId);
+    if (!account) throw new TypeError('Principal listing requires an account ID');
+    if ('group' === query.type) {
+        const groups = await context.client.request({
+            method: 'GET',
+            path: OV_PATH_BUILDERS.accountGroups(account),
+            options: context.requestOptions
+        });
+        return {
+            principals: groups.map((group)=>`group:${group.group_id}`),
+            hasMore: false
+        };
+    }
+    const result = await context.client.request({
+        method: 'GET',
+        path: OV_PATH_BUILDERS.accountUsers(account),
+        query: {
+            query: query.keyword,
+            page: query.page,
+            limit: 20,
+            include_summary: true,
+            include_credentials: false
+        },
+        options: context.requestOptions
+    });
+    return {
+        principals: result.users.map((user)=>`user:${user.user_id}`),
+        hasMore: 20 * query.page < result.total
+    };
+}
+function useAclPrincipals({ open, type, keyword, context, accountId, options }) {
+    const key = JSON.stringify([
+        type,
+        keyword,
+        open
+    ]);
+    const [paging, setPaging] = useState({
+        key,
+        page: 1
+    });
+    const page = paging.key === key ? paging.page : 1;
+    if (paging.key !== key) setPaging({
+        key,
+        page: 1
+    });
+    const [generation, setGeneration] = useState(0);
+    const [state, setState] = useState({
+        key: '',
+        items: [],
+        hasMore: false
+    });
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState();
+    const load = options?.listPrincipals;
+    useEffect(()=>{
+        if (!open) return;
+        const controller = new AbortController();
+        setLoading(true);
+        setError(void 0);
+        const timer = setTimeout(()=>{
+            const inherited = context.requestOptions.signal;
+            const signal = inherited ? AbortSignal.any([
+                controller.signal,
+                inherited
+            ]) : controller.signal;
+            const request = {
+                ...context,
+                requestOptions: {
+                    ...context.requestOptions,
+                    signal
+                }
+            };
+            const query = {
+                type,
+                keyword,
+                page
+            };
+            (load ? load(query, request) : listPrincipals(query, request, accountId)).then((result)=>{
+                if (signal.aborted) return;
+                setState((previous)=>({
+                        key,
+                        hasMore: result.hasMore,
+                        items: [
+                            ...new Set([
+                                ...page > 1 && previous.key === key ? previous.items : [],
+                                ...result.principals
+                            ])
+                        ]
+                    }));
+                setLoading(false);
+            }, (cause)=>{
+                if (!signal.aborted) {
+                    setError(toError(cause));
+                    setLoading(false);
+                }
+            });
+        }, 200);
+        return ()=>{
+            clearTimeout(timer);
+            controller.abort();
+        };
+    }, [
+        open,
+        type,
+        keyword,
+        key,
+        page,
+        generation,
+        context,
+        accountId,
+        load
+    ]);
+    return {
+        items: state.key === key ? state.items : [],
+        loading,
+        error,
+        hasMore: state.key === key && state.hasMore,
+        more: ()=>{
+            if (!loading) setPaging({
+                key,
+                page: page + 1
+            });
+        },
+        retry: ()=>setGeneration((value)=>value + 1)
+    };
+}
+function AclAddPrincipal({ entries, text, disabled, context, accountId, options, onAdd }) {
+    const [open, setOpen] = useState(false);
+    const [keyword, setKeyword] = useState('');
+    const [type, setType] = useState('user');
+    const [pending, setPending] = useState({});
+    const id = useId();
+    const directory = useAclPrincipals({
+        open: open && !disabled,
+        type,
+        keyword,
+        context,
+        accountId,
+        options
+    });
+    const existing = new Set(entries.map((entry)=>entry.principal));
+    const candidates = [
+        ...new Set([
+            ...'user' === type ? [
+                'user:*'
+            ] : [],
+            ...directory.items
+        ])
+    ].filter((principal)=>!existing.has(principal) && principal.startsWith(`${type}:`)).filter((principal)=>('user:*' === principal ? text.allUsers : principal.slice(principal.indexOf(':') + 1)).toLocaleLowerCase().includes(keyword.trim().toLocaleLowerCase()));
+    const reset = ()=>{
+        setOpen(false);
+        setKeyword('');
+        setPending({});
+    };
+    const selected = Object.entries(pending).filter(([principal])=>!existing.has(principal));
+    return /*#__PURE__*/ jsxs("div", {
+        className: "ov-file-browser-acl__add",
+        children: [
+            /*#__PURE__*/ jsx("label", {
+                htmlFor: id,
+                children: text.addPrincipal
+            }),
+            /*#__PURE__*/ jsx(input_Input, {
+                prefix: /*#__PURE__*/ jsx(SearchIcon, {}),
+                id: id,
+                type: "search",
+                role: "combobox",
+                "aria-haspopup": "dialog",
+                value: keyword,
+                placeholder: text.search,
+                disabled: disabled,
+                "aria-expanded": open && !disabled,
+                "aria-controls": open ? `${id}-options` : void 0,
+                onFocus: ()=>setOpen(true),
+                onChange: (event)=>{
+                    setKeyword(event.target.value);
+                    setOpen(true);
+                }
+            }),
+            open && !disabled ? /*#__PURE__*/ jsxs("div", {
+                id: `${id}-options`,
+                className: "ov-file-browser-acl__picker",
+                role: "dialog",
+                "aria-label": text.addPrincipal,
+                children: [
+                    /*#__PURE__*/ jsx(AclPrincipalTabs, {
+                        type: type,
+                        text: text,
+                        onChange: setType
+                    }),
+                    /*#__PURE__*/ jsxs("div", {
+                        className: "ov-file-browser-acl__candidates",
+                        "aria-busy": directory.loading,
+                        children: [
+                            candidates.map((principal)=>/*#__PURE__*/ jsx(AclCandidate, {
+                                    principal: principal,
+                                    level: pending[principal],
+                                    text: text,
+                                    onChange: (level)=>setPending((previous)=>{
+                                            const next = {
+                                                ...previous
+                                            };
+                                            if (level) next[principal] = level;
+                                            else delete next[principal];
+                                            return next;
+                                        })
+                                }, principal)),
+                            directory.loading || candidates.length || directory.error ? null : /*#__PURE__*/ jsx("p", {
+                                className: "ov-file-browser-acl__hint",
+                                children: keyword.trim() ? text.noMatches : text.empty
+                            })
+                        ]
+                    }),
+                    directory.error ? /*#__PURE__*/ jsxs("div", {
+                        className: "ov-file-browser-acl__failure",
+                        role: "alert",
+                        children: [
+                            /*#__PURE__*/ jsx("p", {
+                                children: text.principalsFailed
+                            }),
+                            /*#__PURE__*/ jsx("p", {
+                                children: directory.error.message
+                            }),
+                            /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "default",
+                                htmlType: "button",
+                                onClick: directory.retry,
+                                children: text.retry
+                            })
+                        ]
+                    }) : null,
+                    directory.loading ? /*#__PURE__*/ jsx("p", {
+                        className: "ov-file-browser-acl__hint",
+                        children: text.loading
+                    }) : null,
+                    directory.hasMore ? /*#__PURE__*/ jsx(button_Button, {
+                        size: "small",
+                        type: "default",
+                        htmlType: "button",
+                        className: "ov-file-browser-acl__more",
+                        long: true,
+                        disabled: directory.loading,
+                        onClick: directory.more,
+                        children: text.loadMore
+                    }) : null,
+                    /*#__PURE__*/ jsxs("div", {
+                        className: "ov-file-browser-acl__buttons",
+                        children: [
+                            /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "default",
+                                htmlType: "button",
+                                onClick: reset,
+                                children: text.cancel
+                            }),
+                            /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "primary",
+                                htmlType: "button",
+                                className: "ov-file-browser-acl__primary",
+                                disabled: !selected.length,
+                                onClick: ()=>{
+                                    onAdd(selected.map(([principal, level])=>({
+                                            principal,
+                                            level
+                                        })));
+                                    reset();
+                                },
+                                children: text.add
+                            })
+                        ]
+                    })
+                ]
+            }) : null
+        ]
+    });
+}
+function AclConfirmation({ model, text }) {
+    const cancel = useRef(null);
+    const titleId = useId();
+    const descriptionId = useId();
+    const restore = model.confirmation?.kind === 'restore';
+    const removed = restore && model.report ? restoreDiff(model.report) : [];
+    useEffect(()=>{
+        cancel.current?.focus();
+    }, []);
+    return /*#__PURE__*/ jsxs("section", {
+        className: "ov-file-browser-acl__confirmation",
+        "aria-labelledby": titleId,
+        "aria-describedby": descriptionId,
+        children: [
+            /*#__PURE__*/ jsx("h3", {
+                id: titleId,
+                children: restore ? text.restoreTitle : text.stopTitle
+            }),
+            /*#__PURE__*/ jsx("p", {
+                id: descriptionId,
+                children: restore ? text.restoreDescription : text.stopDescription
+            }),
+            removed.length ? /*#__PURE__*/ jsxs(Fragment, {
+                children: [
+                    /*#__PURE__*/ jsx("p", {
+                        children: text.restoreRemoved
+                    }),
+                    /*#__PURE__*/ jsx("ul", {
+                        children: removed.map((entry)=>/*#__PURE__*/ jsx("li", {
+                                children: entry.principal
+                            }, entry.principal))
+                    })
+                ]
+            }) : null,
+            /*#__PURE__*/ jsxs("div", {
+                className: "ov-file-browser-acl__buttons",
+                children: [
+                    /*#__PURE__*/ jsx(button_Button, {
+                        size: "small",
+                        type: "default",
+                        ref: cancel,
+                        htmlType: "button",
+                        disabled: 'saving' === model.phase,
+                        onClick: model.cancel,
+                        children: text.cancel
+                    }),
+                    /*#__PURE__*/ jsx(button_Button, {
+                        size: "small",
+                        type: "primary",
+                        htmlType: "button",
+                        className: "ov-file-browser-acl__primary",
+                        disabled: 'saving' === model.phase,
+                        onClick: model.confirm,
+                        children: 'saving' === model.phase ? text.saving : text.confirm
+                    })
+                ]
+            })
+        ]
+    });
+}
+function useAclReport({ uri, context, open, readOnly, onUpdated }) {
+    const [report, setReport] = useState();
+    const [confirmation, setConfirmation] = useState();
+    const [error, setError] = useState();
+    const [phase, setPhase] = useState('loading');
+    const [saved, setSaved] = useState(false);
+    const [generation, setGeneration] = useState(0);
+    const pending = useRef(false);
+    const lifetime = useRef(null);
+    useEffect(()=>{
+        if (!open) return;
+        const controller = new AbortController();
+        lifetime.current = controller;
+        pending.current = false;
+        setPhase('loading');
+        setReport(void 0);
+        setError(void 0);
+        setConfirmation(void 0);
+        setSaved(false);
+        const { client, requestOptions } = context;
+        const signal = requestOptions.signal ? AbortSignal.any([
+            controller.signal,
+            requestOptions.signal
+        ]) : controller.signal;
+        readAcl(client, uri, {
+            ...requestOptions,
+            signal
+        }).then((value)=>{
+            if (!signal.aborted) {
+                setReport(value);
+                setPhase('ready');
+            }
+        }, (cause)=>{
+            if (!signal.aborted) {
+                setError(toError(cause));
+                setPhase('ready');
+            }
+        });
+        return ()=>controller.abort();
+    }, [
+        uri,
+        open,
+        generation,
+        context
+    ]);
+    async function save(change) {
+        const controller = lifetime.current;
+        if (pending.current || readOnly || !report || !controller || controller.signal.aborted) return;
+        pending.current = true;
+        setPhase('saving');
+        setError(void 0);
+        setSaved(false);
+        const { client, requestOptions } = context;
+        const signal = requestOptions.signal ? AbortSignal.any([
+            controller.signal,
+            requestOptions.signal
+        ]) : controller.signal;
+        try {
+            const value = await writeAcl(client, uri, {
+                ...requestOptions,
+                signal
+            }, change && {
+                direct_entries: change.entries,
+                mode: change.mode
+            });
+            if (signal.aborted) return;
+            setReport(value);
+            setConfirmation(void 0);
+            setSaved(true);
+            onUpdated(value);
+        } catch (cause) {
+            if (!signal.aborted) setError(toError(cause));
+        } finally{
+            if (!controller.signal.aborted && lifetime.current === controller) {
+                pending.current = false;
+                setPhase('ready');
+            }
+        }
+    }
+    function change(entries) {
+        if (!report || pending.current || readOnly) return;
+        const plan = planChange(report, normalizeEntries(entries));
+        setSaved(false);
+        setError(void 0);
+        if (plan.confirmation) setConfirmation({
+            kind: 'restrict',
+            entries: plan.entries
+        });
+        else save(plan);
+    }
+    return {
+        report,
+        confirmation,
+        error,
+        phase,
+        saved,
+        retry: ()=>setGeneration((value)=>value + 1),
+        change,
+        restore: ()=>{
+            if (!pending.current && !readOnly) setConfirmation({
+                kind: 'restore'
+            });
+        },
+        cancel: ()=>{
+            if (!pending.current) {
+                setConfirmation(void 0);
+                setError(void 0);
+            }
+        },
+        confirm: ()=>{
+            if (confirmation?.kind === 'restore') save();
+            else if (confirmation) save({
+                entries: confirmation.entries,
+                mode: 'restricted'
+            });
+        }
+    };
+}
+function AclModal({ uri, open, text, locale, context, triggerRef, accountId, options, onClose, onUpdated }) {
+    const id = useId();
+    const heading = useRef(null);
+    const model = useAclReport({
+        uri,
+        context,
+        open,
+        readOnly: Boolean(options?.readOnly),
+        onUpdated
+    });
+    const disabled = Boolean(options?.readOnly) || 'ready' !== model.phase;
+    const entries = model.report?.effective_entries ?? [];
+    const direct = new Map(model.report?.direct_entries.map((entry)=>[
+            entry.principal,
+            entry.level
+        ]));
+    const wasConfirming = useRef(false);
+    useEffect(()=>{
+        if (wasConfirming.current && !model.confirmation) heading.current?.focus();
+        wasConfirming.current = Boolean(model.confirmation);
+    }, [
+        model.confirmation
+    ]);
+    return /*#__PURE__*/ jsxs(Modal, {
+        id: id,
+        open: open,
+        title: text.title,
+        closeLabel: text.close,
+        triggerRef: triggerRef,
+        className: "ov-file-browser-acl",
+        locale: locale,
+        onClose: ()=>{
+            if ('saving' === model.phase) return;
+            if (model.confirmation) model.cancel();
+            else onClose();
+        },
+        children: [
+            /*#__PURE__*/ jsx("h2", {
+                ref: heading,
+                tabIndex: -1,
+                className: "ov-file-browser-acl__title",
+                children: text.title
+            }),
+            /*#__PURE__*/ jsx("p", {
+                className: "ov-file-browser-acl__uri",
+                children: uri
+            }),
+            model.error ? /*#__PURE__*/ jsxs("div", {
+                className: "ov-file-browser-acl__failure",
+                role: "alert",
+                children: [
+                    /*#__PURE__*/ jsx("p", {
+                        children: model.report ? text.saveFailed : text.loadFailed
+                    }),
+                    /*#__PURE__*/ jsx("p", {
+                        children: model.error.message
+                    }),
+                    model.report ? null : /*#__PURE__*/ jsx(button_Button, {
+                        size: "small",
+                        type: "default",
+                        htmlType: "button",
+                        onClick: model.retry,
+                        children: text.retry
+                    })
+                ]
+            }) : null,
+            /*#__PURE__*/ jsx("div", {
+                role: "status",
+                className: "ov-file-browser-acl__status",
+                children: 'saving' === model.phase ? text.saving : 'loading' === model.phase ? text.loading : model.saved ? text.saved : ''
+            }),
+            model.confirmation ? /*#__PURE__*/ jsx(AclConfirmation, {
+                model: model,
+                text: text
+            }) : model.report ? /*#__PURE__*/ jsxs(Fragment, {
+                children: [
+                    'restricted' === model.report.acl_mode ? /*#__PURE__*/ jsxs("div", {
+                        className: "ov-file-browser-acl__restricted",
+                        children: [
+                            /*#__PURE__*/ jsx("p", {
+                                children: text.restricted
+                            }),
+                            /*#__PURE__*/ jsx(button_Button, {
+                                size: "small",
+                                type: "default",
+                                htmlType: "button",
+                                disabled: disabled,
+                                onClick: model.restore,
+                                children: text.restore
+                            })
+                        ]
+                    }) : null,
+                    options?.readOnly ? /*#__PURE__*/ jsx("p", {
+                        className: "ov-file-browser-acl__hint",
+                        children: text.readOnly
+                    }) : null,
+                    /*#__PURE__*/ jsx(AclAddPrincipal, {
+                        entries: entries,
+                        text: text,
+                        disabled: disabled,
+                        context: context,
+                        accountId: accountId,
+                        options: options,
+                        onAdd: (added)=>model.change([
+                                ...entries,
+                                ...added
+                            ])
+                    }),
+                    /*#__PURE__*/ jsxs("ul", {
+                        className: "ov-file-browser-acl__entries",
+                        "aria-busy": 'saving' === model.phase,
+                        children: [
+                            /*#__PURE__*/ jsxs("li", {
+                                className: "ov-file-browser-acl__entry",
+                                children: [
+                                    /*#__PURE__*/ jsx("span", {
+                                        className: "ov-file-browser-acl__avatar",
+                                        "aria-hidden": "true",
+                                        children: "A"
+                                    }),
+                                    /*#__PURE__*/ jsxs("div", {
+                                        className: "ov-file-browser-acl__identity",
+                                        children: [
+                                            /*#__PURE__*/ jsx("span", {
+                                                className: "ov-file-browser-acl__name",
+                                                children: text.administrator
+                                            }),
+                                            /*#__PURE__*/ jsx("span", {
+                                                className: "ov-file-browser-acl__source",
+                                                children: text.administratorDescription
+                                            })
+                                        ]
+                                    }),
+                                    /*#__PURE__*/ jsx("span", {
+                                        className: "ov-file-browser-acl__fixed",
+                                        children: levelLabel('manage', text)
+                                    })
+                                ]
+                            }),
+                            entries.map((entry)=>/*#__PURE__*/ jsx(AclEntry, {
+                                    entry: entry,
+                                    text: text,
+                                    disabled: disabled,
+                                    source: direct.get(entry.principal) === entry.level ? text.direct : text.inherited,
+                                    onChange: (level)=>model.change(entries.map((item)=>item.principal === entry.principal ? {
+                                                ...item,
+                                                level
+                                            } : item)),
+                                    onRemove: ()=>model.change(entries.filter((item)=>item.principal !== entry.principal))
+                                }, entry.principal))
+                        ]
+                    })
+                ]
+            }) : null
+        ]
+    });
+}
+function AclTag({ level, text, onManage }) {
+    const [open, setOpen] = useState(false);
+    const id = useId();
+    const description = 'read' === level ? text.readDescription : 'write' === level ? text.writeDescription : text.manageDescription;
+    return /*#__PURE__*/ jsxs("div", {
+        className: "ov-file-browser-acl__tag-anchor",
+        onBlur: (event)=>{
+            if (!event.currentTarget.contains(event.relatedTarget)) setOpen(false);
+        },
+        children: [
+            /*#__PURE__*/ jsx("button", {
+                onKeyDown: (event)=>{
+                    if ('Escape' === event.key) {
+                        event.preventDefault();
+                        setOpen(false);
+                    }
+                },
+                type: "button",
+                className: "ov-file-browser-acl__tag",
+                "aria-expanded": open,
+                "aria-controls": open ? id : void 0,
+                onClick: ()=>setOpen(!open),
+                children: levelLabel(level, text)
+            }),
+            open ? /*#__PURE__*/ jsxs("div", {
+                id: id,
+                className: "ov-file-browser-acl__tag-detail",
+                children: [
+                    /*#__PURE__*/ jsx("p", {
+                        children: description
+                    }),
+                    /*#__PURE__*/ jsxs("p", {
+                        className: "ov-file-browser-acl__source",
+                        children: [
+                            text.effectivePermission,
+                            ": ",
+                            levelLabel(level, text)
+                        ]
+                    }),
+                    'manage' === level ? /*#__PURE__*/ jsx(button_Button, {
+                        size: "small",
+                        type: "default",
+                        htmlType: "button",
+                        onClick: ()=>{
+                            setOpen(false);
+                            onManage();
+                        },
+                        children: text.manage
+                    }) : null
+                ]
+            }) : null
+        ]
+    });
+}
+function useFileBrowserAcl({ uri, acl, locale, labels, requestOptions, refresh }) {
+    const client = useOvClient();
+    const identity = useOvIdentity(requestOptions);
+    const inheritedSignal = useOvSignal();
+    const signal = requestOptions?.signal ?? inheritedSignal;
+    const options = 'object' == typeof acl ? acl : void 0;
+    const key = scopeKeyOf(client, requestOptions, uri ?? void 0);
+    const [permission, setPermission] = useState();
+    const [opened, setOpened] = useState();
+    const [generation, setGeneration] = useState(0);
+    const triggerRef = useRef(null);
+    const { baseURL, apiKey, accountId, userId, resourceId } = requestOptions ?? {};
+    const context = useMemo(()=>client ? {
+            client,
+            requestOptions: {
+                baseURL,
+                apiKey,
+                accountId,
+                userId,
+                resourceId,
+                signal
+            }
+        } : void 0, [
+        client,
+        baseURL,
+        apiKey,
+        accountId,
+        userId,
+        resourceId,
+        signal
+    ]);
+    const enabled = Boolean(acl) && Boolean(client) && isAclTarget(uri);
+    const resolver = options?.resolvePermission;
+    useEffect(()=>{
+        if (!enabled || !uri || !context) return;
+        const controller = new AbortController();
+        const composed = signal ? AbortSignal.any([
+            controller.signal,
+            signal
+        ]) : controller.signal;
+        const request = {
+            ...context,
+            requestOptions: {
+                ...context.requestOptions,
+                signal: composed
+            }
+        };
+        const load = resolver ? resolver(uri, request) : readPermission(request.client, uri, request.requestOptions);
+        load.then((level)=>{
+            if (!composed.aborted) setPermission({
+                key,
+                level
+            });
+        }, ()=>{
+            if (!composed.aborted) setPermission({
+                key,
+                error: true
+            });
+        });
+        return ()=>controller.abort();
+    }, [
+        enabled,
+        key,
+        uri,
+        resolver,
+        signal,
+        generation,
+        context
+    ]);
+    const level = enabled && permission?.key === key ? permission.level : void 0;
+    const text = aclLabels(locale, labels);
+    return {
+        titleExtra: enabled && permission?.key === key && permission.error ? /*#__PURE__*/ jsxs("span", {
+            className: "ov-file-browser-acl__lookup-error",
+            role: "status",
+            children: [
+                text.loadFailed,
+                /*#__PURE__*/ jsx(button_Button, {
+                    size: "small",
+                    type: "default",
+                    htmlType: "button",
+                    onClick: ()=>setGeneration((value)=>value + 1),
+                    children: text.retry
+                })
+            ]
+        }) : level ? /*#__PURE__*/ jsx(AclTag, {
+            level: level,
+            text: text,
+            onManage: ()=>setOpened(key)
+        }) : null,
+        actions: 'manage' === level ? /*#__PURE__*/ jsx(button_Button, {
+            size: "small",
+            type: "default",
+            ref: triggerRef,
+            htmlType: "button",
+            className: "ov-file-browser-acl__manage",
+            onClick: ()=>setOpened(key),
+            children: text.manage
+        }) : null,
+        drawer: enabled && uri && context && 'manage' === level ? /*#__PURE__*/ jsx(AclModal, {
+            uri: uri,
+            open: opened === key,
+            text: text,
+            locale: locale,
+            triggerRef: triggerRef,
+            context: context,
+            accountId: identity.accountId,
+            options: options,
+            onClose: ()=>setOpened(void 0),
+            onUpdated: (report)=>{
+                setGeneration((value)=>value + 1);
+                refresh();
+                try {
+                    options?.onChange?.(report);
+                } catch  {
+                    return;
+                }
+            }
+        }, key) : null
+    };
+}
+function FileBrowser({ uri, defaultUri, rootUri = 'viking://', defaultExpandedUri, locale: localeProp, agentConnect, dashboardKinds, renderDashboard, acl, onUriChange, onImportResources, renderImportResources, labels, requestOptions, className, style, ...rest }) {
+    const locale = useLocale(localeProp);
+    const [searchOpen, setSearchOpen] = useState(false);
+    const [internalUri, setInternalUri] = useState(()=>defaultUri ?? null);
+    const [preferredTreeWidth, setPreferredTreeWidth] = useState(352);
+    const isControlled = void 0 !== uri;
+    const currentUri = isControlled ? uri : internalUri;
+    const text = resolveLabels(labels, locale);
+    const { ref: layoutRef, width: layoutWidth } = useContainerWidth();
+    const treeMaxWidth = resolveTreeMaxWidth(layoutWidth);
+    const treeWidth = Math.min(preferredTreeWidth, treeMaxWidth);
+    const changeUri = useCallback((next)=>{
+        if (!isControlled) setInternalUri(next);
+        onUriChange?.(next);
+    }, [
+        isControlled,
+        onUriChange
+    ]);
+    const summaryLabels = useMemo(()=>({
+            l0: text.l0Summary,
+            l1: text.l1Overview,
+            failure: text.summaryFailed
         }), [
         text.l0Summary,
         text.l1Overview,
@@ -2290,86 +3704,109 @@ function FileBrowser({ uri, defaultUri, rootUri = 'viking://', defaultExpandedUr
         controlled: isControlled,
         summaryLabels,
         formatCharacterCount: text.formatCharacterCount,
+        accessLabels: {
+            accessDenied: text.accessDenied,
+            traverseOnly: text.traverseOnly
+        },
         defaultExpandedUri,
         currentUri,
         requestOptions,
         onUriChange: changeUri
     });
-    return /*#__PURE__*/ jsx(LocaleProvider, {
+    const permissions = useFileBrowserAcl({
+        uri: browser.currentUri,
+        acl,
+        locale,
+        labels: labels?.acl,
+        requestOptions,
+        refresh: browser.actions.refresh
+    });
+    return /*#__PURE__*/ jsxs(LocaleProvider, {
         locale: locale,
-        children: /*#__PURE__*/ jsxs("div", {
-            ...rest,
-            ref: layoutRef,
-            className: [
-                'ov-file-browser',
-                className
-            ].filter(Boolean).join(' '),
-            style: {
-                ...style,
-                '--ov-file-browser-tree-width': `${treeWidth}px`
-            },
-            children: [
-                /*#__PURE__*/ jsx("div", {
-                    className: "ov-file-browser__tree",
-                    children: /*#__PURE__*/ jsx(FileBrowserTreePane, {
-                        entries: {
-                            agentConnect,
-                            onImportResources,
-                            renderImportResources,
-                            labels: labels?.entries
-                        },
-                        searchId: searchId,
-                        browser: browser,
-                        treeLabels: text.tree,
+        children: [
+            /*#__PURE__*/ jsxs("div", {
+                ...rest,
+                ref: layoutRef,
+                className: [
+                    'ov-file-browser',
+                    className
+                ].filter(Boolean).join(' '),
+                style: {
+                    ...style,
+                    '--ov-file-browser-tree-width': `${treeWidth}px`
+                },
+                children: [
+                    /*#__PURE__*/ jsx("div", {
+                        className: "ov-file-browser__tree",
+                        children: /*#__PURE__*/ jsx(FileBrowserTreePane, {
+                            entries: {
+                                agentConnect,
+                                onImportResources,
+                                renderImportResources,
+                                labels: labels?.entries
+                            },
+                            onSearch: ()=>setSearchOpen(true),
+                            browser: browser,
+                            treeLabels: text.tree,
+                            locale: locale,
+                            dashboardLabels: labels?.dashboard,
+                            searchPlaceholder: text.searchPlaceholder,
+                            refreshLabel: text.refresh,
+                            retryLabel: text.retry
+                        })
+                    }),
+                    /*#__PURE__*/ jsx(ResizableHandle, {
+                        label: text.resizeTree,
+                        min: 200,
+                        max: treeMaxWidth,
+                        value: treeWidth,
+                        onResize: setPreferredTreeWidth,
+                        className: "ov-file-browser__resizer"
+                    }),
+                    browser.previewTabs && browser.previewTabs.length > 0 ? /*#__PURE__*/ jsx(FileBrowserDetail, {
+                        tabs: browser.previewTabs,
+                        activeKey: browser.previewKey,
                         locale: locale,
-                        dashboardLabels: labels?.dashboard,
-                        searchPlaceholder: text.searchPlaceholder,
-                        refreshLabel: text.refresh,
-                        searchLoading: text.searchLoading,
-                        searchEmpty: text.searchEmpty,
-                        searchErrorLabel: text.searchFailed,
-                        retryLabel: text.retry
-                    })
-                }),
-                /*#__PURE__*/ jsx(ResizableHandle, {
-                    label: text.resizeTree,
-                    min: 200,
-                    max: treeMaxWidth,
-                    value: treeWidth,
-                    onResize: setPreferredTreeWidth,
-                    className: "ov-file-browser__resizer"
-                }),
-                browser.previewTabs && browser.previewTabs.length > 0 ? /*#__PURE__*/ jsx(FileBrowserDetail, {
-                    tabs: browser.previewTabs,
-                    activeKey: browser.previewKey,
-                    locale: locale,
-                    labels: previewLabels,
-                    footer: browser.previewFooter,
-                    viewLabels: {
-                        preview: text.previewMode,
-                        source: text.sourceMode,
-                        copyPath: text.copyPath,
-                        copyContent: text.copyContent,
-                        download: text.download,
-                        viewSwitch: text.viewSwitch
-                    },
-                    onActiveKeyChange: browser.actions.setPreviewKey
-                }) : browser.currentUri && browser.previewError ? /*#__PURE__*/ jsx("div", {
-                    className: "ov-file-browser__detail",
-                    children: /*#__PURE__*/ jsx(FileBrowserFailure, {
-                        message: text.error,
-                        detail: browser.previewError.message,
-                        retryLabel: text.retry,
-                        onRetry: ()=>void browser.actions.refresh()
-                    })
-                }) : /*#__PURE__*/ jsx("div", {
-                    className: "ov-file-browser__detail",
-                    children: /*#__PURE__*/ jsx(FileBrowserEmpty, {
-                        label: text.empty
+                        labels: previewLabels,
+                        footer: browser.previewFooter,
+                        titleExtra: permissions.titleExtra,
+                        extraActions: permissions.actions,
+                        viewLabels: {
+                            preview: text.previewMode,
+                            source: text.sourceMode,
+                            copyPath: text.copyPath,
+                            copyContent: text.copyContent,
+                            download: text.download,
+                            viewSwitch: text.viewSwitch
+                        },
+                        onActiveKeyChange: browser.actions.setPreviewKey
+                    }) : browser.currentUri && browser.previewError ? /*#__PURE__*/ jsx("div", {
+                        className: "ov-file-browser__detail",
+                        children: /*#__PURE__*/ jsx(FileBrowserFailure, {
+                            message: text.error,
+                            detail: browser.previewError.message,
+                            retryLabel: text.retry,
+                            onRetry: ()=>void browser.actions.refresh()
+                        })
+                    }) : /*#__PURE__*/ jsx("div", {
+                        className: "ov-file-browser__detail",
+                        children: /*#__PURE__*/ jsx(FileBrowserEmpty, {
+                            label: text.empty
+                        })
                     })
-                })
-            ]
-        })
+                ]
+            }),
+            permissions.drawer,
+            /*#__PURE__*/ jsx(FileBrowserSearch, {
+                open: searchOpen,
+                locale: locale,
+                rootUri: rootUri,
+                triggerRef: layoutRef,
+                text: text,
+                requestOptions: requestOptions,
+                onClose: ()=>setSearchOpen(false)
+            })
+        ]
     });
 }
 export { FileBrowser };