vitepress-plugin-filelist 0.3.1 → 0.5.0

package/dist/client/ssr/index.js

@@ -1,5 +1,5 @@
-import { computed, defineComponent, mergeProps, onBeforeUnmount, onMounted, ref, unref, useSSRContext } from "vue";
-import { ssrIncludeBooleanAttr, ssrInterpolate, ssrLooseContain, ssrLooseEqual, ssrRenderAttr, ssrRenderAttrs, ssrRenderClass, ssrRenderList, ssrRenderStyle } from "vue/server-renderer";
+import { computed, defineComponent, mergeProps, nextTick, onBeforeUnmount, onMounted, reactive, ref, unref, useSSRContext, watch } from "vue";
+import { ssrIncludeBooleanAttr, ssrInterpolate, ssrLooseContain, ssrLooseEqual, ssrRenderAttr, ssrRenderAttrs, ssrRenderClass, ssrRenderComponent, ssrRenderList, ssrRenderStyle } from "vue/server-renderer";
 // src/client/locales.ts
 const fileListLocales = {
 	"zh-CN": {
@@ -11,7 +11,7 @@ const fileListLocales = {
 		batchCount: "批量下载（{count}）",
 		batching: "打包中 {percent}%",
 		passwordPrompt: "该目录受密码保护：",
-		passwordPlaceholder: "输入目录密码",
+		passwordPlaceholder: "输入密码",
 		open: "打开",
 		columnName: "文件名",
 		columnSize: "文件大小",
@@ -19,7 +19,7 @@ const fileListLocales = {
 		loading: "加载中…",
 		loadFailed: "加载失败：{message}",
 		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
-		corsHint: "可能是跨域或混合内容被拦截，检查 OpenList 的 cors 配置与页面协议。",
+		corsHint: "可能是跨域或混合内容被拦截：检查 OpenList 的 cors.allow_origins（OpenList-Worker 为 ALLOW_URLS）与页面协议。",
 		retry: "重试",
 		empty: "没有文件",
 		preview: "预览",
@@ -43,7 +43,27 @@ const fileListLocales = {
 		selectAll: "全选",
 		selectItem: "选择 {name}",
 		expand: "展开 {name}",
-		collapse: "收起 {name}"
+		collapse: "收起 {name}",
+		close: "关闭",
+		previous: "上一个",
+		next: "下一个",
+		rotate: "旋转",
+		actualSize: "原始大小",
+		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
+		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
+		previewTooLarge: "文件较大（{size}），请下载后查看",
+		textTruncated: "仅显示前 {size}，完整内容请下载",
+		refreshing: "刷新中",
+		refreshFailed: "刷新失败：{message}",
+		cancel: "取消",
+		passwordFor: "{name} 的密码",
+		passwordWrong: "密码不正确或无权访问",
+		passwordStale: "已保存的密码已失效，请重新输入",
+		rememberPassword: "在此标签页中记住（关闭标签页后失效）",
+		remembered: "已记住",
+		forgetPassword: "忘记",
+		unlockFolder: "输入 {name} 的密码",
+		networkHint: "可能被跨域拦截：请检查 OpenList 的 cors.allow_origins，或 OpenList-Worker 的 ALLOW_URLS。"
 	},
 	"en-US": {
 		allFiles: "All files",
@@ -62,7 +82,7 @@ const fileListLocales = {
 		loading: "Loading…",
 		loadFailed: "Failed to load: {message}",
 		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
-		corsHint: "Possibly blocked by CORS or mixed content. Check OpenList cors settings and the page protocol.",
+		corsHint: "Possibly blocked by CORS or mixed content. Check cors.allow_origins in OpenList (ALLOW_URLS in OpenList-Worker) and the page protocol.",
 		retry: "Retry",
 		empty: "No files",
 		preview: "Preview",
@@ -86,7 +106,27 @@ const fileListLocales = {
 		selectAll: "Select all",
 		selectItem: "Select {name}",
 		expand: "Expand {name}",
-		collapse: "Collapse {name}"
+		collapse: "Collapse {name}",
+		close: "Close",
+		previous: "Previous",
+		next: "Next",
+		rotate: "Rotate",
+		actualSize: "Actual size",
+		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
+		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
+		previewTooLarge: "This file is large ({size}). Download it to view.",
+		textTruncated: "Showing the first {size} only. Download for the full file.",
+		refreshing: "Refreshing",
+		refreshFailed: "Refresh failed: {message}",
+		cancel: "Cancel",
+		passwordFor: "Password for {name}",
+		passwordWrong: "Wrong password or no permission",
+		passwordStale: "The saved password no longer works. Enter it again.",
+		rememberPassword: "Remember in this tab (cleared when the tab closes)",
+		remembered: "Remembered",
+		forgetPassword: "Forget",
+		unlockFolder: "Enter the password for {name}",
+		networkHint: "Possibly blocked by CORS: check cors.allow_origins in OpenList, or ALLOW_URLS in OpenList-Worker."
 	}
 };
 function formatLabel(template, values = {}) {
@@ -268,6 +308,440 @@ function compareNodes(a, b, key, ascending = true) {
 	else result = a.name.localeCompare(b.name, "zh-Hans-CN", { numeric: true });
 	return ascending ? result : -result;
 }
+const PREVIEW_EXTS = {
+	image: [
+		"png",
+		"jpg",
+		"jpeg",
+		"gif",
+		"webp",
+		"svg",
+		"bmp",
+		"ico",
+		"avif"
+	],
+	video: [
+		"mp4",
+		"webm",
+		"m4v",
+		"mov",
+		"ogv"
+	],
+	audio: [
+		"mp3",
+		"wav",
+		"ogg",
+		"oga",
+		"m4a",
+		"aac",
+		"flac",
+		"opus"
+	],
+	text: [
+		"txt",
+		"md",
+		"markdown",
+		"log",
+		"json",
+		"csv",
+		"tsv",
+		"xml",
+		"yml",
+		"yaml",
+		"toml",
+		"ini",
+		"conf",
+		"properties",
+		"js",
+		"mjs",
+		"cjs",
+		"ts",
+		"tsx",
+		"jsx",
+		"vue",
+		"css",
+		"scss",
+		"less",
+		"html",
+		"htm",
+		"py",
+		"java",
+		"kt",
+		"c",
+		"h",
+		"cpp",
+		"hpp",
+		"cs",
+		"go",
+		"rs",
+		"rb",
+		"php",
+		"sh",
+		"bat",
+		"ps1",
+		"sql",
+		"srt",
+		"vtt",
+		"ass",
+		"lrc",
+		"gitignore",
+		"env"
+	],
+	pdf: ["pdf"]
+};
+const PREVIEW_KINDS = {};
+for (const [kind, exts] of Object.entries(PREVIEW_EXTS)) for (const ext of exts) PREVIEW_KINDS[ext] = kind;
+function lowerExt(name) {
+	const dot = name.lastIndexOf(".");
+	return dot >= 0 ? name.slice(dot + 1).toLowerCase() : "";
+}
+/**
+* How a file is shown in the preview dialog. Office documents and anything
+* else the browser cannot render are `none` (info + download).
+*/
+function previewKind(name) {
+	return PREVIEW_KINDS[lowerExt(name)] ?? "none";
+}
+/**
+* Viewers from OpenList's public `iframe_previews` setting that match a file,
+* in the order OpenList lists them. Keys are comma-separated extensions or a
+* `/regex/flags` tested against the extension, as in OpenList's frontend.
+*/
+function iframePreviewsFor(name, setting) {
+	if (!setting) return [];
+	let parsed;
+	try {
+		parsed = JSON.parse(setting);
+	} catch {
+		return [];
+	}
+	if (!parsed || typeof parsed !== "object") return [];
+	const ext = lowerExt(name);
+	const out = [];
+	for (const [key, viewers] of Object.entries(parsed)) {
+		let hit = false;
+		if (key.startsWith("/")) {
+			const end = key.lastIndexOf("/");
+			try {
+				hit = end > 0 && new RegExp(key.slice(1, end), key.slice(end + 1)).test(ext);
+			} catch {
+				hit = false;
+			}
+		} else hit = key.split(",").map((item) => item.trim().toLowerCase()).includes(ext);
+		if (!hit || !viewers || typeof viewers !== "object") continue;
+		for (const [label, scheme] of Object.entries(viewers)) if (typeof scheme === "string" && /^https?:\/\//i.test(scheme)) out.push({
+			label,
+			scheme
+		});
+	}
+	return out;
+}
+function applyUrlOps(placeholder, url) {
+	const ops = placeholder.slice(1, placeholder.lastIndexOf("url")).replace(/d$/, "").match(/[eb]/g) ?? [];
+	let value = url;
+	for (const op of ops.reverse()) value = op === "e" ? encodeURIComponent(value) : btoa(String.fromCharCode(...new TextEncoder().encode(value)));
+	return value;
+}
+/**
+* Fill an OpenList preview scheme: `$name`, `$url` (raw URL) and `$durl`
+* (signed download URL), each optionally prefixed with `e` (URI-encode) or
+* `b` (base64), e.g. `$e_url`, `$b_url`, `$e_durl`.
+*/
+function fillPreviewUrl(scheme, args) {
+	return scheme.replace(/\$name/g, args.name).replace(/\$[eb_]*durl/g, (placeholder) => applyUrlOps(placeholder, args.downloadUrl)).replace(/\$[eb_]*url/g, (placeholder) => applyUrlOps(placeholder, args.rawUrl));
+}
+// src/client/PreviewDialog.vue
+const _sfc_main$1 = /*@__PURE__*/ defineComponent({
+	__name: "PreviewDialog",
+	__ssrInlineRender: true,
+	props: {
+		open: { type: Boolean },
+		file: {},
+		labels: {},
+		src: { default: "" },
+		viewer: { default: "" },
+		resolving: {
+			type: Boolean,
+			default: false
+		},
+		error: { default: "" },
+		demo: {
+			type: Boolean,
+			default: false
+		},
+		position: { default: 0 },
+		total: { default: 0 },
+		maxTextBytes: { default: 1048576 },
+		maxPdfBytes: { default: 52428800 }
+	},
+	emits: [
+		"close",
+		"prev",
+		"next",
+		"download"
+	],
+	setup(__props, { emit: __emit }) {
+		/**
+		* PreviewDialog.vue —— 文件预览弹窗（原生 <dialog>，不跳转页面）
+		*
+		* image / video / audio：原生标签；text：Range 读取前 maxTextBytes；
+		* pdf：OpenList `iframe_previews` 中的查看器，未配置时用浏览器自带阅读器（Blob）；
+		* 其它类型（含 Office）、失败、过大、演示模式：文件信息 + 下载。
+		*/
+		const props = __props;
+		function t(key, values) {
+			return formatLabel(props.labels[key], values);
+		}
+		const dialog = ref();
+		const kind = computed(() => props.file ? previewKind(props.file.name) : "none");
+		const loadingBody = ref(false);
+		const bodyFailed = ref(false);
+		const textContent = ref("");
+		const truncated = ref(false);
+		const blobUrl = ref("");
+		const rotation = ref(0);
+		const actualSize = ref(false);
+		let controller;
+		let loadSeq = 0;
+		const tooLarge = computed(() => kind.value === "pdf" && !props.viewer && (props.file?.size ?? 0) > props.maxPdfBytes);
+		const mode = computed(() => {
+			if (props.demo) return "demo";
+			if (props.error || bodyFailed.value) return "failed";
+			if (kind.value === "none") return "unsupported";
+			if (tooLarge.value) return "tooLarge";
+			return kind.value;
+		});
+		const busy = computed(() => !props.demo && kind.value !== "none" && !props.error && !bodyFailed.value && (props.resolving || loadingBody.value || !props.src && !tooLarge.value));
+		const infoMessage = computed(() => {
+			const file = props.file;
+			if (!file) return "";
+			if (mode.value === "demo") return t("demoPreview", { name: file.name });
+			if (mode.value === "tooLarge") return t("previewTooLarge", { size: formatSize(file.size) });
+			if (mode.value === "failed") return t("previewUnavailable");
+			return t("previewUnsupported");
+		});
+		function revokeBlob() {
+			if (blobUrl.value) URL.revokeObjectURL(blobUrl.value);
+			blobUrl.value = "";
+		}
+		function resetBody() {
+			controller?.abort();
+			controller = void 0;
+			loadSeq += 1;
+			revokeBlob();
+			loadingBody.value = false;
+			bodyFailed.value = false;
+			textContent.value = "";
+			truncated.value = false;
+			rotation.value = 0;
+			actualSize.value = false;
+		}
+		async function readPrefix(response, limit) {
+			const reader = response.body?.getReader();
+			if (!reader) {
+				const all = new Uint8Array(await response.arrayBuffer());
+				return {
+					bytes: all.slice(0, limit),
+					more: all.length > limit
+				};
+			}
+			const chunks = [];
+			let length = 0;
+			let more = false;
+			while (true) {
+				const { done, value } = await reader.read();
+				if (done) break;
+				chunks.push(value);
+				length += value.length;
+				if (length >= limit) {
+					more = length > limit;
+					await reader.cancel().catch(() => {});
+					break;
+				}
+			}
+			const bytes = new Uint8Array(Math.min(length, limit));
+			let offset = 0;
+			for (const chunk of chunks) {
+				const part = chunk.subarray(0, bytes.length - offset);
+				bytes.set(part, offset);
+				offset += part.length;
+				if (offset >= bytes.length) break;
+			}
+			return {
+				bytes,
+				more
+			};
+		}
+		async function loadBody() {
+			resetBody();
+			const file = props.file;
+			if (!props.open || !file || props.demo || !props.src || props.error) return;
+			if (kind.value !== "text" && !(kind.value === "pdf" && !props.viewer && !tooLarge.value)) return;
+			const seq = loadSeq;
+			controller = new AbortController();
+			loadingBody.value = true;
+			try {
+				if (kind.value === "text") {
+					const limit = props.maxTextBytes;
+					const response = await fetch(props.src, {
+						headers: { Range: `bytes=0-${limit - 1}` },
+						signal: controller.signal
+					});
+					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					const { bytes, more } = await readPrefix(response, limit);
+					if (seq !== loadSeq) return;
+					textContent.value = new TextDecoder("utf-8").decode(bytes);
+					truncated.value = more || file.size > limit;
+				} else {
+					const response = await fetch(props.src, { signal: controller.signal });
+					if (!response.ok) throw new Error(`HTTP ${response.status}`);
+					const buffer = await response.arrayBuffer();
+					if (seq !== loadSeq) return;
+					blobUrl.value = URL.createObjectURL(new Blob([buffer], { type: "application/pdf" }));
+				}
+			} catch {
+				if (seq === loadSeq && !controller?.signal.aborted) bodyFailed.value = true;
+			} finally {
+				if (seq === loadSeq) loadingBody.value = false;
+			}
+		}
+		watch(() => [
+			props.open,
+			props.file?.name,
+			props.src,
+			props.viewer,
+			props.error,
+			props.demo
+		], () => void loadBody(), { immediate: true });
+		watch(() => props.open, (open) => {
+			const el = dialog.value;
+			if (!el) return;
+			if (open && !el.open) {
+				if (typeof el.showModal === "function") el.showModal();
+				else el.setAttribute("open", "");
+			} else if (!open && el.open) {
+				if (typeof el.close === "function") el.close();
+				else el.removeAttribute("open");
+			}
+		}, { flush: "post" });
+		onBeforeUnmount(resetBody);
+		return (_ctx, _push, _parent, _attrs) => {
+			_push(`<dialog${ssrRenderAttrs(mergeProps({
+				ref_key: "dialog",
+				ref: dialog,
+				class: "fl-preview",
+				"aria-label": __props.file?.name
+			}, _attrs))}>`);
+			if (__props.open && __props.file) {
+				_push(`<div class="fl-preview-panel"><header class="fl-preview-head"><span class="fl-type"${ssrRenderAttr("data-kind", unref(fileKind)(__props.file.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(__props.file.name) || "FILE")}</span><div class="fl-preview-title"><span class="fl-preview-name">${ssrInterpolate(__props.file.name)}</span><span class="fl-preview-meta">${ssrInterpolate(unref(formatSize)(__props.file.size))} · ${ssrInterpolate(unref(formatDate)(__props.file.modified))}</span></div>`);
+				if (__props.total > 1 || mode.value === "image" && !busy.value) {
+					_push(`<div class="fl-preview-tools fl-preview-nav">`);
+					if (__props.total > 1) _push(`<!--[--><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("previous"))}${ssrRenderAttr("title", t("previous"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m15 6-6 6 6 6"></path></svg></button><span class="fl-preview-count">${ssrInterpolate(__props.position)} / ${ssrInterpolate(__props.total)}</span><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("next"))}${ssrRenderAttr("title", t("next"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button><!--]-->`);
+					else _push(`<!---->`);
+					if (mode.value === "image" && !busy.value) {
+						_push(`<!--[--><button class="fl-preview-tool fl-preview-rotate" type="button"${ssrRenderAttr("aria-label", t("rotate"))}${ssrRenderAttr("title", t("rotate"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button><button class="fl-preview-tool fl-preview-zoom" type="button"${ssrRenderAttr("aria-pressed", actualSize.value)}${ssrRenderAttr("aria-label", t("actualSize"))}${ssrRenderAttr("title", t("actualSize"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path>`);
+						if (!actualSize.value) _push(`<path d="M11 8v6M8 11h6"></path>`);
+						else _push(`<path d="M8 11h6"></path>`);
+						_push(`</svg></button><!--]-->`);
+					} else _push(`<!---->`);
+					_push(`</div>`);
+				} else _push(`<!---->`);
+				_push(`<div class="fl-preview-tools fl-preview-actions">`);
+				if (!__props.demo) _push(`<button class="fl-preview-tool fl-preview-download" type="button"${ssrRenderAttr("aria-label", t("download"))}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button>`);
+				else _push(`<!---->`);
+				_push(`<button class="fl-preview-tool fl-preview-close" type="button" autofocus${ssrRenderAttr("aria-label", t("close"))}${ssrRenderAttr("title", t("close"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg></button></div></header><div class="fl-preview-body"${ssrRenderAttr("data-mode", busy.value ? "loading" : mode.value)}>`);
+				if (busy.value) _push(`<div class="fl-preview-status" role="status">${ssrInterpolate(t("loading"))}</div>`);
+				else if (mode.value === "image") _push(`<img class="${ssrRenderClass([{ "fl-preview-actual": actualSize.value }, "fl-preview-image"])}"${ssrRenderAttr("src", __props.src)}${ssrRenderAttr("alt", __props.file.name)} style="${ssrRenderStyle({ transform: rotation.value ? `rotate(${rotation.value}deg)` : void 0 })}">`);
+				else if (mode.value === "video") _push(`<video class="fl-preview-video"${ssrRenderAttr("src", __props.src)} controls playsinline preload="metadata"></video>`);
+				else if (mode.value === "audio") _push(`<audio class="fl-preview-audio"${ssrRenderAttr("src", __props.src)} controls preload="metadata"></audio>`);
+				else if (mode.value === "text") {
+					_push(`<div class="fl-preview-text">`);
+					if (truncated.value) _push(`<p class="fl-preview-note">${ssrInterpolate(t("textTruncated", { size: unref(formatSize)(__props.maxTextBytes) }))}</p>`);
+					else _push(`<!---->`);
+					_push(`<pre>${ssrInterpolate(textContent.value)}</pre></div>`);
+				} else if (mode.value === "pdf") _push(`<iframe class="fl-preview-frame"${ssrRenderAttr("src", __props.viewer || blobUrl.value)}${ssrRenderAttr("title", __props.file.name)}></iframe>`);
+				else {
+					_push(`<div class="fl-preview-info"><span class="fl-type fl-preview-badge"${ssrRenderAttr("data-kind", unref(fileKind)(__props.file.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(__props.file.name) || "FILE")}</span><p class="fl-preview-message">${ssrInterpolate(infoMessage.value)}</p>`);
+					if (!__props.demo) _push(`<button class="fl-btn fl-btn-primary" type="button"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg> ${ssrInterpolate(t("download"))}</button>`);
+					else _push(`<!---->`);
+					_push(`</div>`);
+				}
+				_push(`</div></div>`);
+			} else _push(`<!---->`);
+			_push(`</dialog>`);
+		};
+	}
+});
+const _sfc_setup$1 = _sfc_main$1.setup;
+_sfc_main$1.setup = (props, ctx) => {
+	const ssrContext = useSSRContext();
+	(ssrContext.modules || (ssrContext.modules = /* @__PURE__ */ new Set())).add("src/client/PreviewDialog.vue");
+	return _sfc_setup$1 ? _sfc_setup$1(props, ctx) : void 0;
+};
+// src/client/passwords.ts
+/**
+* Folder passwords remembered for the current browser tab.
+*
+* Stored in `sessionStorage`, so they live only in this tab and are gone when
+* it closes. Keyed by OpenList base URL, then by folder path; a remembered
+* folder also covers its sub-folders. Every access is guarded: private mode
+* or blocked storage simply means nothing is remembered.
+*/
+const PREFIX = "vitepress-plugin-filelist:passwords:";
+function store() {
+	try {
+		return typeof sessionStorage === "undefined" ? null : sessionStorage;
+	} catch {
+		return null;
+	}
+}
+function read(base) {
+	try {
+		const raw = store()?.getItem(PREFIX + base);
+		const parsed = raw ? JSON.parse(raw) : {};
+		return parsed && typeof parsed === "object" ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+function write(base, map) {
+	try {
+		const target = store();
+		if (!target) return;
+		if (Object.keys(map).length) target.setItem(PREFIX + base, JSON.stringify(map));
+		else target.removeItem(PREFIX + base);
+	} catch {}
+}
+function normalise(path) {
+	return path.replace(/\/+$/, "") || "/";
+}
+/** Whether `path` is `folder` itself or inside it. */
+function isWithin(path, folder) {
+	const p = normalise(path);
+	const f = normalise(folder);
+	return f === "/" || p === f || p.startsWith(`${f}/`);
+}
+/** The closest remembered folder at or above `path`, if any. */
+function findRememberedPassword(base, path) {
+	let best = null;
+	for (const [folder, password] of Object.entries(read(base))) {
+		if (typeof password !== "string" || !isWithin(path, folder)) continue;
+		if (!best || folder.length > best.path.length) best = {
+			path: folder,
+			password
+		};
+	}
+	return best;
+}
+function forgetFolderPassword(base, path) {
+	const map = read(base);
+	delete map[normalise(path)];
+	write(base, map);
+}
+/** Folders with a remembered password, for showing the "remembered" tag. */
+function rememberedFolders(base) {
+	return Object.keys(read(base));
+}
 // src/client/FileList.vue
 const _sfc_main = /*@__PURE__*/ defineComponent({
 	__name: "FileList",
@@ -283,6 +757,10 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		token: { default: "" },
 		password: { default: "" },
 		title: { default: "" },
+		rememberPassword: {
+			type: Boolean,
+			default: true
+		},
 		locale: { default: "zh-CN" },
 		labels: {}
 	},
@@ -301,18 +779,30 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		}
 		const demo = computed(() => !props.base);
 		const baseUrl = computed(() => props.base.replace(/\/+$/, ""));
-		const activePassword = ref(props.password);
+		const rootEl = ref();
 		const roots = ref([]);
 		const loadingRoot = ref(false);
 		const errorMsg = ref("");
-		const needsPassword = ref(false);
-		const passwordInput = ref("");
+		const refreshing = ref(false);
+		let refreshSeq = 0;
+		/** Single-path mode: the listed folder itself needs a password. */
+		const rootLock = reactive({
+			active: false,
+			input: "",
+			error: "",
+			remember: false,
+			busy: false
+		});
+		/** Password the visitor typed for the listed folder (single-path mode). */
+		const rootPassword = ref("");
 		const keyword = ref("");
 		const selected = ref(/* @__PURE__ */ new Set());
 		const toast = ref("");
 		const sortKey = ref("name");
 		const sortAsc = ref(true);
 		const siteTitle = ref("");
+		/** OpenList's public `iframe_previews` setting (JSON text). */
+		const iframePreviews = ref("");
 		const batchBusy = ref(false);
 		const batchProgress = ref(0);
 		const downloadCache = /* @__PURE__ */ new Map();
@@ -328,6 +818,85 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		function isPasswordError(error) {
 			return /password|密码/i.test(errorText(error));
 		}
+		function isNetworkError(error) {
+			return /failed to fetch|networkerror|load failed|network request failed/i.test(errorText(error));
+		}
+		/** A failure toast; browser network errors are usually CORS, so say where to look. */
+		function failureMessage(key, error) {
+			const message = t(key, { message: errorText(error) });
+			return isNetworkError(error) ? `${message} ${t("networkHint")}` : message;
+		}
+		/** Total size for display: an empty total reads `0 B`, not `-`. */
+		function formatTotal(bytes) {
+			return bytes > 0 ? formatSize(bytes) : "0 B";
+		}
+		const canRemember = computed(() => props.rememberPassword !== false);
+		const passwordScope = computed(() => baseUrl.value || "demo");
+		/** Passwords typed on this page (not necessarily remembered), so a refresh keeps folders open. */
+		const typedPasswords = /* @__PURE__ */ new Map();
+		function typedPasswordFor(path) {
+			let best = "";
+			let bestPath = "";
+			for (const [folder, password] of typedPasswords) if (isWithin(path, folder) && folder.length > bestPath.length) {
+				best = password;
+				bestPath = folder;
+			}
+			return best;
+		}
+		/** Folders with a remembered password (mirrors sessionStorage so the template reacts). */
+		const rememberedPaths = ref(/* @__PURE__ */ new Set());
+		function syncRemembered() {
+			rememberedPaths.value = new Set(canRemember.value ? rememberedFolders(passwordScope.value) : []);
+		}
+		function storedPassword(path) {
+			return canRemember.value ? findRememberedPassword(passwordScope.value, path) : null;
+		}
+		/**
+		* Password for an item: its own or inherited one first (site-configured or
+		* typed), then one remembered in this tab, then the component's `password`.
+		*/
+		function passwordFor(node) {
+			if (node.password) return { password: node.password };
+			const typed = typedPasswordFor(node.path);
+			if (typed) return { password: typed };
+			const stored = storedPassword(node.path);
+			if (stored) return {
+				password: stored.password,
+				rememberedAt: stored.path
+			};
+			return { password: props.password };
+		}
+		function rootPasswordFor() {
+			if (rootPassword.value) return { password: rootPassword.value };
+			const stored = storedPassword(props.path);
+			if (stored) return {
+				password: stored.password,
+				rememberedAt: stored.path
+			};
+			return { password: props.password };
+		}
+		/** A remembered password stopped working: drop it so we do not keep retrying it. */
+		function dropStale(path) {
+			if (!path) return false;
+			forgetFolderPassword(passwordScope.value, path);
+			syncRemembered();
+			return true;
+		}
+		function focusUnlock(path) {
+			nextTick(() => {
+				(rootEl.value?.querySelector(`input[data-unlock="${CSS.escape(path)}"]`))?.focus();
+			});
+		}
+		/** Show the same-row password input; `focus` only for user actions, never on page load. */
+		function startPrompt(node, focus) {
+			node.prompting = true;
+			if (focus) focusUnlock(node.path);
+		}
+		function unlockErrorText(error) {
+			if (error === "wrong") return t("passwordWrong");
+			if (error === "stale") return t("passwordStale");
+			return "";
+		}
 		const DEMO_TREE = {
 			"/": [
 				{
@@ -359,6 +928,12 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 					size: 0,
 					is_dir: true,
 					modified: "2026-09-01T08:00:00+08:00"
+				},
+				{
+					name: "加密示例（密码 1234）",
+					size: 0,
+					is_dir: true,
+					modified: "2026-10-20T18:00:00+08:00"
 				}
 			],
 			"/assignments": [{
@@ -449,6 +1024,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				is_dir: false,
 				modified: "2026-01-05T19:02:00+08:00"
 			}],
+			"/加密示例（密码 1234）": [{
+				name: "期末答案（教师版）.pdf",
+				size: 2621440,
+				is_dir: false,
+				modified: "2026-10-20T18:00:00+08:00"
+			}, {
+				name: "成绩登记表.xlsx",
+				size: 48128,
+				is_dir: false,
+				modified: "2026-10-21T09:12:00+08:00"
+			}],
 			"/slides": [{
 				name: "第一章 行列式.pptx",
 				size: 3145728,
@@ -461,6 +1047,8 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				modified: "2026-09-15T13:30:00+08:00"
 			}]
 		};
+		/** Demo-only folder passwords, so the demo can show the password flow. */
+		const DEMO_PASSWORDS = { "/加密示例（密码 1234）": "1234" };
 		class ApiError extends Error {
 			code;
 			constructor(message, code) {
@@ -468,16 +1056,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				this.code = code;
 			}
 		}
-		function authHeaders() {
+		/** JSON content type only when there is a body: a bare GET then needs no CORS preflight. */
+		function authHeaders(json) {
 			return {
-				"Content-Type": "application/json",
+				...json ? { "Content-Type": "application/json" } : {},
 				...props.token ? { Authorization: props.token } : {}
 			};
 		}
 		async function request(apiPath, body) {
 			const response = await fetch(`${baseUrl.value}${apiPath}`, {
 				method: body === void 0 ? "GET" : "POST",
-				headers: authHeaders(),
+				headers: authHeaders(body !== void 0),
 				body: body === void 0 ? void 0 : JSON.stringify(body)
 			});
 			const payload = await response.json().catch(() => null);
@@ -485,9 +1074,11 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
 			return payload.data;
 		}
-		async function listDir(path, password = activePassword.value) {
+		async function listDir(path, password) {
 			if (demo.value) {
 				await new Promise((resolve) => setTimeout(resolve, 220));
+				const guard = Object.entries(DEMO_PASSWORDS).find(([folder]) => isWithin(path, folder));
+				if (guard && guard[1] !== password) throw new ApiError("password is incorrect or you have no permission", 403);
 				return DEMO_TREE[path] ?? [];
 			}
 			return (await request("/api/fs/list", {
@@ -498,13 +1089,47 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				refresh: false
 			}))?.content ?? [];
 		}
+		function absoluteUrl(raw) {
+			if (!raw) return "";
+			if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) return raw;
+			const root = baseUrl.value || (typeof window !== "undefined" ? window.location.origin : "");
+			try {
+				return new URL(raw, `${root}/`).href;
+			} catch {
+				return raw;
+			}
+		}
+		async function resolveUrl(node) {
+			if (demo.value) return "";
+			if (node.raw_url) return absoluteUrl(node.raw_url);
+			const cached = downloadCache.get(node.path);
+			if (cached) return cached;
+			let url = "";
+			try {
+				url = absoluteUrl((await request("/api/fs/get", {
+					path: node.path,
+					password: passwordFor(node).password
+				}))?.raw_url ?? "");
+			} catch {
+				url = "";
+			}
+			if (!url) url = directUrl(node);
+			downloadCache.set(node.path, url);
+			return url;
+		}
+		/** OpenList's signed `/d/` download link for a file. */
+		function directUrl(node) {
+			return `${baseUrl.value}/d${encodePath(node.path)}${node.sign ? `?sign=${encodeURIComponent(node.sign)}` : ""}`;
+		}
 		async function loadSiteTitle() {
 			if (demo.value) return;
 			try {
 				const data = await request("/api/public/settings");
 				siteTitle.value = data?.site_title || data?.title || "";
+				iframePreviews.value = data?.iframe_previews || "";
 			} catch {
 				siteTitle.value = "";
+				iframePreviews.value = "";
 			}
 		}
 		function sortTree(nodes) {
@@ -533,84 +1158,154 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			const parts = path.split("/").filter(Boolean);
 			return parts[parts.length - 1] || path;
 		}
-		async function loadChildren(node) {
+		/**
+		* Load a folder's children. A password error marks the folder locked instead of
+		* toasting; `prompt` also shows its same-row input (and focuses it).
+		*/
+		async function loadChildren(node, prompt = false) {
 			if (node.loaded) return true;
+			if (node.locked) {
+				if (prompt) startPrompt(node, prompt === "focus");
+				return false;
+			}
 			node.loading = true;
+			const { password, rememberedAt } = passwordFor(node);
 			try {
-				node.children = toNodes(await listDir(node.path, node.password || activePassword.value), node.path, node.depth + 1, node.password, node.zipPath);
+				node.children = toNodes(await listDir(node.path, password), node.path, node.depth + 1, node.password, node.zipPath);
 				sortTree(node.children);
 				node.loaded = true;
 				return true;
 			} catch (error) {
-				if (isPasswordError(error)) needsPassword.value = true;
-				showToast(t("folderFailed", { message: errorText(error) }));
+				if (isPasswordError(error)) {
+					node.locked = true;
+					node.expanded = false;
+					node.unlockError = dropStale(rememberedAt) ? "stale" : "";
+					if (prompt) startPrompt(node, prompt === "focus");
+				} else showToast(failureMessage("folderFailed", error));
 				return false;
 			} finally {
 				node.loading = false;
 			}
 		}
-		async function loadSourceRoot(source) {
+		/** When OpenList cannot tell us, guess from the name: a known file extension means a file. */
+		function looksLikeFile(path) {
+			const name = sourceName(path);
+			return fileKind(name) !== "other" || previewKind(name) !== "none";
+		}
+		async function loadSourceRoot(source, expanded) {
 			const path = source.path;
-			const password = source.password ?? "";
+			const configured = source.password ?? "";
 			let item = {
 				name: sourceName(path),
 				size: 0,
-				is_dir: true,
+				is_dir: !looksLikeFile(path),
 				modified: ""
 			};
-			if (demo.value) {
-				if (/\/[^/]+\.[^/]+$/.test(path)) item = {
-					...item,
-					is_dir: false,
-					modified: "2026-09-01T08:00:00+08:00"
-				};
-			} else try {
-				const data = await request("/api/fs/get", {
-					path,
-					password: password || activePassword.value
-				});
-				item = {
-					...item,
-					...data
-				};
-			} catch {}
+			let locked = false;
+			let unlockError = "";
+			if (!demo.value) {
+				const { password, rememberedAt } = configured ? {
+					password: configured,
+					rememberedAt: void 0
+				} : (() => {
+					const stored = storedPassword(path);
+					return stored ? {
+						password: stored.password,
+						rememberedAt: stored.path
+					} : {
+						password: props.password,
+						rememberedAt: void 0
+					};
+				})();
+				try {
+					const data = await request("/api/fs/get", {
+						path,
+						password
+					});
+					item = {
+						...item,
+						...data
+					};
+				} catch (error) {
+					if (isPasswordError(error)) {
+						locked = true;
+						unlockError = dropStale(rememberedAt) ? "stale" : "";
+					}
+				}
+			}
 			const name = source.title || item.name || sourceName(path);
 			return {
 				...item,
 				name,
 				path,
 				depth: 0,
-				expanded: source.expanded ?? props.expanded,
+				expanded,
 				loaded: false,
 				loading: false,
 				children: [],
-				password,
+				password: configured,
+				configuredPassword: configured,
 				isRoot: true,
+				locked,
+				unresolved: locked,
+				unlockError,
+				prompting: locked && expanded,
 				zipPath: [item.is_dir ? name : item.name || sourceName(path)]
 			};
 		}
+		class RootLockedError extends Error {
+			rememberedAt;
+			constructor(rememberedAt) {
+				super("root locked");
+				this.rememberedAt = rememberedAt;
+			}
+		}
+		/**
+		* Build a fresh tree. `expandedPaths` re-opens those folders (refresh keeps
+		* what was open); without it the configured `expanded` defaults apply.
+		*/
+		async function buildTree(expandedPaths) {
+			let nodes;
+			if (props.sources.length) nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source, expandedPaths ? expandedPaths.has(source.path) : source.expanded ?? props.expanded)));
+			else {
+				const { password, rememberedAt } = rootPasswordFor();
+				let items;
+				try {
+					items = await listDir(props.path, password);
+				} catch (error) {
+					if (isPasswordError(error)) throw new RootLockedError(rememberedAt);
+					throw error;
+				}
+				nodes = toNodes(items, props.path, 0, rootPassword.value);
+				sortTree(nodes);
+			}
+			const open = async (list) => {
+				for (const node of list) {
+					if (!node.is_dir || node.locked || !node.expanded && !expandedPaths?.has(node.path)) continue;
+					node.expanded = await loadChildren(node, "show");
+					if (node.expanded && expandedPaths) await open(node.children);
+				}
+			};
+			await open(nodes);
+			return nodes;
+		}
+		/** First load, or a retry after an error: shows the loading state. */
 		async function loadRoot() {
+			refreshSeq += 1;
+			refreshing.value = false;
 			loadingRoot.value = true;
 			errorMsg.value = "";
-			needsPassword.value = false;
 			try {
-				if (props.sources.length) {
-					const nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source)));
-					roots.value = nodes;
-					for (const node of roots.value) if (node.is_dir && node.expanded) node.expanded = await loadChildren(node);
-					selected.value = /* @__PURE__ */ new Set();
-					downloadCache.clear();
-					return;
-				}
-				const items = await listDir(props.path);
-				roots.value = toNodes(items, props.path, 0, activePassword.value);
-				sortTree(roots.value);
+				roots.value = await buildTree();
+				rootLock.active = false;
 				selected.value = /* @__PURE__ */ new Set();
 				downloadCache.clear();
 			} catch (error) {
-				const message = errorText(error);
-				if (isPasswordError(error)) needsPassword.value = true;
-				else errorMsg.value = message;
+				if (error instanceof RootLockedError) {
+					roots.value = [];
+					rootLock.active = true;
+					rootLock.error = dropStale(error.rememberedAt) ? "stale" : "";
+				} else errorMsg.value = errorText(error);
 			} finally {
 				loadingRoot.value = false;
 			}
@@ -675,9 +1370,75 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				resortAll();
 			}
 		});
-		const previewable = /\.(?:pdf|png|jpe?g|gif|webp|svg|txt|md|json|mp3|wav|mp4|webm|mov)$/i;
+		function triggerUrl(url) {
+			const anchor = document.createElement("a");
+			anchor.href = url;
+			anchor.target = "_blank";
+			anchor.rel = "noopener";
+			document.body.appendChild(anchor);
+			anchor.click();
+			anchor.remove();
+		}
+		async function download(node) {
+			if (node.is_dir) return;
+			if (demo.value) {
+				showToast(t("demoDownload", { name: node.name }));
+				return;
+			}
+			try {
+				triggerUrl(await resolveUrl(node));
+			} catch (error) {
+				showToast(t("downloadFailed", { message: errorText(error) }));
+			}
+		}
+		/** Only types the dialog can actually render get a preview button. */
 		function canPreview(node) {
-			return !node.is_dir && previewable.test(node.name);
+			return !node.is_dir && previewKind(node.name) !== "none";
+		}
+		const previewNode = ref(null);
+		const previewSrc = ref("");
+		const previewViewer = ref("");
+		const previewResolving = ref(false);
+		const previewError = ref("");
+		let previewSeq = 0;
+		/** Previewable files in the order they are listed, for ← / →. */
+		const previewList = computed(() => visible.value.filter(canPreview));
+		const previewPosition = computed(() => previewNode.value ? previewList.value.indexOf(previewNode.value) + 1 : 0);
+		async function preview(node) {
+			const seq = ++previewSeq;
+			previewNode.value = node;
+			previewSrc.value = "";
+			previewViewer.value = "";
+			previewError.value = "";
+			previewResolving.value = false;
+			if (demo.value || !canPreview(node)) return;
+			previewResolving.value = true;
+			try {
+				const url = await resolveUrl(node);
+				if (seq !== previewSeq) return;
+				previewSrc.value = url;
+				if (previewKind(node.name) === "pdf") {
+					const viewer = iframePreviewsFor(node.name, iframePreviews.value)[0];
+					if (viewer) previewViewer.value = fillPreviewUrl(viewer.scheme, {
+						name: node.name,
+						rawUrl: url,
+						downloadUrl: directUrl(node)
+					});
+				}
+			} catch (error) {
+				if (seq === previewSeq) previewError.value = errorText(error);
+			} finally {
+				if (seq === previewSeq) previewResolving.value = false;
+			}
+		}
+		function stepPreview(delta) {
+			const list = previewList.value;
+			if (!list.length) return;
+			preview(list[((previewNode.value ? list.indexOf(previewNode.value) : -1) + delta + list.length) % list.length]);
+		}
+		function closePreview() {
+			previewSeq += 1;
+			previewNode.value = null;
 		}
 		const displayTitle = computed(() => props.title || siteTitle.value || (props.path === "/" ? t("allFiles") : props.path));
 		const stickyTop = ref(0);
@@ -692,6 +1453,7 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			stickyTop.value = top;
 		}
 		onMounted(() => {
+			syncRemembered();
 			loadRoot();
 			loadSiteTitle();
 			measureStickyTop();
@@ -703,10 +1465,16 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		});
 		return (_ctx, _push, _parent, _attrs) => {
 			_push(`<div${ssrRenderAttrs(mergeProps({
-				class: ["fl-root", { "fl-selecting": selected.value.size > 0 }],
-				style: { "--fl-sticky-top-auto": `${stickyTop.value}px` }
+				ref_key: "rootEl",
+				ref: rootEl,
+				class: ["fl-root", {
+					"fl-selecting": selected.value.size > 0,
+					"fl-refreshing": refreshing.value
+				}],
+				style: { "--fl-sticky-top-auto": `${stickyTop.value}px` },
+				"aria-busy": refreshing.value || loadingRoot.value
 			}, _attrs))}><div class="fl-bar">`);
-			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: unref(formatSize)(selectedBytes.value) }))}</span></div>`);
+			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: formatTotal(selectedBytes.value) }))}</span></div>`);
 			else {
 				_push(`<div class="fl-title"><span class="fl-title-text">${ssrInterpolate(displayTitle.value)}</span>`);
 				if (demo.value) _push(`<span class="fl-demo-badge">${ssrInterpolate(t("demoBadge"))}</span>`);
@@ -715,19 +1483,27 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			}
 			if (selected.value.size) _push(`<button class="fl-clear" type="button"${ssrRenderAttr("aria-label", t("clearSelection"))}${ssrRenderAttr("title", t("clearSelection"))}><svg class="fl-clear-icon" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg><span class="fl-clear-text">${ssrInterpolate(t("clear"))}</span></button>`);
 			else _push(`<!---->`);
-			_push(`<div class="fl-tools"><label class="fl-search"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path></svg><input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="fl-icon-btn" type="button"${ssrRenderAttr("aria-label", t("refresh"))}${ssrRenderAttr("title", t("refresh"))}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button></div>`);
+			_push(`<div class="fl-tools"><label class="fl-search"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path></svg><input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="${ssrRenderClass([{ "fl-spinning": refreshing.value }, "fl-icon-btn fl-refresh"])}" type="button"${ssrIncludeBooleanAttr(refreshing.value || loadingRoot.value) ? " disabled" : ""}${ssrRenderAttr("aria-label", refreshing.value ? t("refreshing") : t("refresh"))}${ssrRenderAttr("title", refreshing.value ? t("refreshing") : t("refresh"))}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button></div>`);
 			if (selected.value.size) _push(`<button class="fl-btn fl-btn-primary" type="button"${ssrIncludeBooleanAttr(batchBusy.value) ? " disabled" : ""}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg> ${ssrInterpolate(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch"))}</button>`);
 			else _push(`<!---->`);
-			_push(`</div>`);
-			if (needsPassword.value) _push(`<div class="fl-password"><span>${ssrInterpolate(t("passwordPrompt"))}</span><input${ssrRenderAttr("value", passwordInput.value)} type="password"${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordPlaceholder"))}><button class="fl-btn fl-btn-primary" type="button">${ssrInterpolate(t("open"))}</button></div>`);
+			_push(`</div><div class="fl-row fl-head">`);
+			if (refreshing.value) _push(`<span class="fl-progress" aria-hidden="true"></span>`);
 			else _push(`<!---->`);
-			_push(`<div class="fl-row fl-head"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><span class="fl-cell fl-cell-name"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t("columnName"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-size"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnSize"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-date"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
+			_push(`<label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><span class="fl-cell fl-cell-name"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t("columnName"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-size"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnSize"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-date"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
 			ssrRenderList(sortOptions.value, (option) => {
 				_push(`<option${ssrRenderAttr("value", option.value)}${ssrIncludeBooleanAttr(Array.isArray(sortValue.value) ? ssrLooseContain(sortValue.value, option.value) : ssrLooseEqual(sortValue.value, option.value)) ? " selected" : ""}>${ssrInterpolate(option.label)}</option>`);
 			});
 			_push(`<!--]--></select></label></span></div>`);
 			if (loadingRoot.value) _push(`<div class="fl-status">${ssrInterpolate(t("loading"))}</div>`);
-			else if (errorMsg.value) {
+			else if (rootLock.active) {
+				_push(`<form class="${ssrRenderClass([{ "fl-unlock-error": rootLock.error }, "fl-unlock-root"])}"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><label class="fl-unlock-label"${ssrRenderAttr("for", `fl-root-unlock-${__props.path}`)}>${ssrInterpolate(t("passwordPrompt"))}</label>`);
+				if (rootLock.error) _push(`<span id="fl-root-unlock-error" class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(rootLock.error))}</span>`);
+				else _push(`<!---->`);
+				_push(`<span class="fl-unlock"><input${ssrRenderAttr("id", `fl-root-unlock-${__props.path}`)}${ssrRenderAttr("value", rootLock.input)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", __props.path)}${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-invalid", !!rootLock.error)}${ssrRenderAttr("aria-describedby", rootLock.error ? "fl-root-unlock-error" : void 0)}>`);
+				if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", rootLock.remember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
+				else _push(`<!---->`);
+				_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(rootLock.busy || !rootLock.input) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button></span></form>`);
+			} else if (errorMsg.value) {
 				_push(`<div class="fl-status fl-error">${ssrInterpolate(t("loadFailed", { message: errorMsg.value }))} `);
 				if (/guest/i.test(errorMsg.value)) _push(`<p class="fl-hint">${ssrInterpolate(t("guestHint"))}</p>`);
 				else _push(`<!---->`);
@@ -741,37 +1517,71 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				_push(`<div class="${ssrRenderClass([{
 					"fl-row-dir": node.is_dir,
 					"fl-row-root": node.isRoot,
-					"fl-row-selected": !node.is_dir && selected.value.has(node.path)
-				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
-				if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
+					"fl-row-selected": !node.is_dir && selected.value.has(node.path),
+					"fl-row-locked": node.locked,
+					"fl-row-prompting": node.locked && node.prompting,
+					"fl-row-error": node.locked && node.prompting && !!node.unlockError
+				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrIncludeBooleanAttr(node.locked) ? " disabled" : ""}${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
+				if (node.locked) _push(`<button class="fl-arrow fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}${ssrRenderAttr("title", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
+				else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
 				else _push(`<span class="fl-arrow-placeholder" aria-hidden="true"></span>`);
 				if (node.is_dir) _push(`<svg class="fl-folder-icon" viewBox="0 0 24 24" width="18" height="18" aria-hidden="true"><path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path></svg>`);
 				else _push(`<span class="fl-type"${ssrRenderAttr("data-kind", unref(fileKind)(node.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(node.name) || "FILE")}</span>`);
 				_push(`<span class="fl-label"><span class="${ssrRenderClass([{ "fl-name-dir": node.is_dir }, "fl-name"])}">${ssrInterpolate(node.name)}</span><span class="fl-meta">`);
 				if (node.is_dir) {
 					_push(`<!--[-->`);
-					if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))} · ${ssrInterpolate(unref(formatSize)(unref(totalSize)(folderFiles(node))))}<!--]-->`);
+					if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))} · ${ssrInterpolate(formatTotal(unref(totalSize)(folderFiles(node))))}<!--]-->`);
 					else _push(`<!---->`);
 					_push(`<!--]-->`);
 				} else _push(`<!--[-->${ssrInterpolate(unref(formatSize)(node.size))} · ${ssrInterpolate(unref(formatDate)(node.modified))}<!--]-->`);
 				_push(`</span></span>`);
 				if (node.is_dir && node.loaded) _push(`<span class="fl-count">${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))}</span>`);
 				else _push(`<!---->`);
+				if (node.locked && node.prompting && node.unlockError) _push(`<span${ssrRenderAttr("id", `fl-unlock-error-${node.path}`)} class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(node.unlockError))}</span>`);
+				else _push(`<!---->`);
+				if (!node.locked && rememberedPaths.value.has(node.path)) _push(`<button class="fl-remembered" type="button"${ssrRenderAttr("aria-label", `${t("forgetPassword")} ${node.name}`)}${ssrRenderAttr("title", t("forgetPassword"))}><svg viewBox="0 0 24 24" width="11" height="11" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg> ${ssrInterpolate(t("remembered"))} · ${ssrInterpolate(t("forgetPassword"))}</button>`);
+				else _push(`<!---->`);
 				if (node.loading) _push(`<span class="fl-loading" aria-hidden="true">…</span>`);
 				else _push(`<!---->`);
-				_push(`</span><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
-				if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
-				else {
-					_push(`<!--[-->`);
-					if (canPreview(node)) _push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"></path><circle cx="12" cy="12" r="3"></circle></svg></button>`);
+				_push(`</span>`);
+				if (node.locked && node.prompting) {
+					_push(`<form class="fl-unlock fl-unlock-row"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><input${ssrRenderAttr("value", node.unlockInput)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", node.path)}${ssrRenderAttr("placeholder", node.unlockError ? unlockErrorText(node.unlockError) : t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordFor", { name: node.name }))}${ssrRenderAttr("aria-invalid", !!node.unlockError)}${ssrRenderAttr("aria-describedby", node.unlockError ? `fl-unlock-error-${node.path}` : void 0)}>`);
+					if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", !!node.unlockRemember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
 					else _push(`<!---->`);
-					_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button><!--]-->`);
+					_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(node.unlockBusy || !node.unlockInput) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button><button class="fl-unlock-cancel" type="button"${ssrRenderAttr("aria-label", t("cancel"))}${ssrRenderAttr("title", t("cancel"))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg></button></form>`);
+				} else {
+					_push(`<!--[--><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir || node.locked ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
+					if (node.locked) _push(`<button class="fl-action fl-arrow-end fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
+					else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
+					else if (!node.locked) {
+						_push(`<!--[-->`);
+						if (canPreview(node)) _push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"></path><circle cx="12" cy="12" r="3"></circle></svg></button>`);
+						else _push(`<!---->`);
+						_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button><!--]-->`);
+					} else _push(`<!---->`);
+					_push(`</span><!--]-->`);
 				}
-				_push(`</span></div>`);
+				_push(`</div>`);
 			});
-			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: unref(formatSize)(loadedBytes.value) }))}</span></div>`);
+			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: formatTotal(loadedBytes.value) }))}</span></div>`);
 			if (toast.value) _push(`<div class="fl-toast" role="status">${ssrInterpolate(toast.value)}</div>`);
 			else _push(`<!---->`);
+			_push(ssrRenderComponent(_sfc_main$1, {
+				open: !!previewNode.value,
+				file: previewNode.value,
+				labels: text.value,
+				src: previewSrc.value,
+				viewer: previewViewer.value,
+				resolving: previewResolving.value,
+				error: previewError.value,
+				demo: demo.value,
+				position: previewPosition.value,
+				total: previewPosition.value ? previewList.value.length : 0,
+				onClose: closePreview,
+				onPrev: ($event) => stepPreview(-1),
+				onNext: ($event) => stepPreview(1),
+				onDownload: ($event) => previewNode.value && download(previewNode.value)
+			}, null, _parent));
 			_push(`</div>`);
 		};
 	}
@@ -803,4 +1613,4 @@ function enhanceAppWithFileList({ app }) {
 	if (!app._context.components.FileList) app.component("FileList", _sfc_main);
 	if (!app._context.components.VPFileList) app.component("VPFileList", _sfc_main);
 }
-export { _sfc_main as FileList, _sfc_main as VPFileList, compareNodes, encodePath, enhanceAppWithFileList, extOf, fileKind, fileListLocales, formatDate, formatLabel, formatSize, joinPath, resolveLabels, totalSize, uniqueEntryName, zipEntryName, zipSegment };
+export { _sfc_main as FileList, _sfc_main as VPFileList, compareNodes, encodePath, enhanceAppWithFileList, extOf, fileKind, fileListLocales, fillPreviewUrl, formatDate, formatLabel, formatSize, iframePreviewsFor, joinPath, previewKind, resolveLabels, totalSize, uniqueEntryName, zipEntryName, zipSegment };