vitepress-plugin-filelist 0.4.0 → 0.5.0

package/dist/client/ssr/index.js

@@ -1,4 +1,4 @@
-import { computed, defineComponent, mergeProps, onBeforeUnmount, onMounted, ref, unref, useSSRContext, watch } from "vue";
+import { computed, defineComponent, mergeProps, nextTick, onBeforeUnmount, onMounted, reactive, ref, unref, useSSRContext, watch } from "vue";
 import { ssrIncludeBooleanAttr, ssrInterpolate, ssrLooseContain, ssrLooseEqual, ssrRenderAttr, ssrRenderAttrs, ssrRenderClass, ssrRenderComponent, ssrRenderList, ssrRenderStyle } from "vue/server-renderer";
 // src/client/locales.ts
 const fileListLocales = {
@@ -11,7 +11,7 @@ const fileListLocales = {
 		batchCount: "批量下载（{count}）",
 		batching: "打包中 {percent}%",
 		passwordPrompt: "该目录受密码保护：",
-		passwordPlaceholder: "输入目录密码",
+		passwordPlaceholder: "输入密码",
 		open: "打开",
 		columnName: "文件名",
 		columnSize: "文件大小",
@@ -19,7 +19,7 @@ const fileListLocales = {
 		loading: "加载中…",
 		loadFailed: "加载失败：{message}",
 		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
-		corsHint: "可能是跨域或混合内容被拦截，检查 OpenList 的 cors 配置与页面协议。",
+		corsHint: "可能是跨域或混合内容被拦截：检查 OpenList 的 cors.allow_origins（OpenList-Worker 为 ALLOW_URLS）与页面协议。",
 		retry: "重试",
 		empty: "没有文件",
 		preview: "预览",
@@ -52,7 +52,18 @@ const fileListLocales = {
 		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
 		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
 		previewTooLarge: "文件较大（{size}），请下载后查看",
-		textTruncated: "仅显示前 {size}，完整内容请下载"
+		textTruncated: "仅显示前 {size}，完整内容请下载",
+		refreshing: "刷新中",
+		refreshFailed: "刷新失败：{message}",
+		cancel: "取消",
+		passwordFor: "{name} 的密码",
+		passwordWrong: "密码不正确或无权访问",
+		passwordStale: "已保存的密码已失效，请重新输入",
+		rememberPassword: "在此标签页中记住（关闭标签页后失效）",
+		remembered: "已记住",
+		forgetPassword: "忘记",
+		unlockFolder: "输入 {name} 的密码",
+		networkHint: "可能被跨域拦截：请检查 OpenList 的 cors.allow_origins，或 OpenList-Worker 的 ALLOW_URLS。"
 	},
 	"en-US": {
 		allFiles: "All files",
@@ -71,7 +82,7 @@ const fileListLocales = {
 		loading: "Loading…",
 		loadFailed: "Failed to load: {message}",
 		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
-		corsHint: "Possibly blocked by CORS or mixed content. Check OpenList cors settings and the page protocol.",
+		corsHint: "Possibly blocked by CORS or mixed content. Check cors.allow_origins in OpenList (ALLOW_URLS in OpenList-Worker) and the page protocol.",
 		retry: "Retry",
 		empty: "No files",
 		preview: "Preview",
@@ -104,7 +115,18 @@ const fileListLocales = {
 		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
 		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
 		previewTooLarge: "This file is large ({size}). Download it to view.",
-		textTruncated: "Showing the first {size} only. Download for the full file."
+		textTruncated: "Showing the first {size} only. Download for the full file.",
+		refreshing: "Refreshing",
+		refreshFailed: "Refresh failed: {message}",
+		cancel: "Cancel",
+		passwordFor: "Password for {name}",
+		passwordWrong: "Wrong password or no permission",
+		passwordStale: "The saved password no longer works. Enter it again.",
+		rememberPassword: "Remember in this tab (cleared when the tab closes)",
+		remembered: "Remembered",
+		forgetPassword: "Forget",
+		unlockFolder: "Enter the password for {name}",
+		networkHint: "Possibly blocked by CORS: check cors.allow_origins in OpenList, or ALLOW_URLS in OpenList-Worker."
 	}
 };
 function formatLabel(template, values = {}) {
@@ -656,6 +678,70 @@ _sfc_main$1.setup = (props, ctx) => {
 	(ssrContext.modules || (ssrContext.modules = /* @__PURE__ */ new Set())).add("src/client/PreviewDialog.vue");
 	return _sfc_setup$1 ? _sfc_setup$1(props, ctx) : void 0;
 };
+// src/client/passwords.ts
+/**
+* Folder passwords remembered for the current browser tab.
+*
+* Stored in `sessionStorage`, so they live only in this tab and are gone when
+* it closes. Keyed by OpenList base URL, then by folder path; a remembered
+* folder also covers its sub-folders. Every access is guarded: private mode
+* or blocked storage simply means nothing is remembered.
+*/
+const PREFIX = "vitepress-plugin-filelist:passwords:";
+function store() {
+	try {
+		return typeof sessionStorage === "undefined" ? null : sessionStorage;
+	} catch {
+		return null;
+	}
+}
+function read(base) {
+	try {
+		const raw = store()?.getItem(PREFIX + base);
+		const parsed = raw ? JSON.parse(raw) : {};
+		return parsed && typeof parsed === "object" ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+function write(base, map) {
+	try {
+		const target = store();
+		if (!target) return;
+		if (Object.keys(map).length) target.setItem(PREFIX + base, JSON.stringify(map));
+		else target.removeItem(PREFIX + base);
+	} catch {}
+}
+function normalise(path) {
+	return path.replace(/\/+$/, "") || "/";
+}
+/** Whether `path` is `folder` itself or inside it. */
+function isWithin(path, folder) {
+	const p = normalise(path);
+	const f = normalise(folder);
+	return f === "/" || p === f || p.startsWith(`${f}/`);
+}
+/** The closest remembered folder at or above `path`, if any. */
+function findRememberedPassword(base, path) {
+	let best = null;
+	for (const [folder, password] of Object.entries(read(base))) {
+		if (typeof password !== "string" || !isWithin(path, folder)) continue;
+		if (!best || folder.length > best.path.length) best = {
+			path: folder,
+			password
+		};
+	}
+	return best;
+}
+function forgetFolderPassword(base, path) {
+	const map = read(base);
+	delete map[normalise(path)];
+	write(base, map);
+}
+/** Folders with a remembered password, for showing the "remembered" tag. */
+function rememberedFolders(base) {
+	return Object.keys(read(base));
+}
 // src/client/FileList.vue
 const _sfc_main = /*@__PURE__*/ defineComponent({
 	__name: "FileList",
@@ -671,6 +757,10 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		token: { default: "" },
 		password: { default: "" },
 		title: { default: "" },
+		rememberPassword: {
+			type: Boolean,
+			default: true
+		},
 		locale: { default: "zh-CN" },
 		labels: {}
 	},
@@ -689,12 +779,22 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		}
 		const demo = computed(() => !props.base);
 		const baseUrl = computed(() => props.base.replace(/\/+$/, ""));
-		const activePassword = ref(props.password);
+		const rootEl = ref();
 		const roots = ref([]);
 		const loadingRoot = ref(false);
 		const errorMsg = ref("");
-		const needsPassword = ref(false);
-		const passwordInput = ref("");
+		const refreshing = ref(false);
+		let refreshSeq = 0;
+		/** Single-path mode: the listed folder itself needs a password. */
+		const rootLock = reactive({
+			active: false,
+			input: "",
+			error: "",
+			remember: false,
+			busy: false
+		});
+		/** Password the visitor typed for the listed folder (single-path mode). */
+		const rootPassword = ref("");
 		const keyword = ref("");
 		const selected = ref(/* @__PURE__ */ new Set());
 		const toast = ref("");
@@ -718,6 +818,85 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		function isPasswordError(error) {
 			return /password|密码/i.test(errorText(error));
 		}
+		function isNetworkError(error) {
+			return /failed to fetch|networkerror|load failed|network request failed/i.test(errorText(error));
+		}
+		/** A failure toast; browser network errors are usually CORS, so say where to look. */
+		function failureMessage(key, error) {
+			const message = t(key, { message: errorText(error) });
+			return isNetworkError(error) ? `${message} ${t("networkHint")}` : message;
+		}
+		/** Total size for display: an empty total reads `0 B`, not `-`. */
+		function formatTotal(bytes) {
+			return bytes > 0 ? formatSize(bytes) : "0 B";
+		}
+		const canRemember = computed(() => props.rememberPassword !== false);
+		const passwordScope = computed(() => baseUrl.value || "demo");
+		/** Passwords typed on this page (not necessarily remembered), so a refresh keeps folders open. */
+		const typedPasswords = /* @__PURE__ */ new Map();
+		function typedPasswordFor(path) {
+			let best = "";
+			let bestPath = "";
+			for (const [folder, password] of typedPasswords) if (isWithin(path, folder) && folder.length > bestPath.length) {
+				best = password;
+				bestPath = folder;
+			}
+			return best;
+		}
+		/** Folders with a remembered password (mirrors sessionStorage so the template reacts). */
+		const rememberedPaths = ref(/* @__PURE__ */ new Set());
+		function syncRemembered() {
+			rememberedPaths.value = new Set(canRemember.value ? rememberedFolders(passwordScope.value) : []);
+		}
+		function storedPassword(path) {
+			return canRemember.value ? findRememberedPassword(passwordScope.value, path) : null;
+		}
+		/**
+		* Password for an item: its own or inherited one first (site-configured or
+		* typed), then one remembered in this tab, then the component's `password`.
+		*/
+		function passwordFor(node) {
+			if (node.password) return { password: node.password };
+			const typed = typedPasswordFor(node.path);
+			if (typed) return { password: typed };
+			const stored = storedPassword(node.path);
+			if (stored) return {
+				password: stored.password,
+				rememberedAt: stored.path
+			};
+			return { password: props.password };
+		}
+		function rootPasswordFor() {
+			if (rootPassword.value) return { password: rootPassword.value };
+			const stored = storedPassword(props.path);
+			if (stored) return {
+				password: stored.password,
+				rememberedAt: stored.path
+			};
+			return { password: props.password };
+		}
+		/** A remembered password stopped working: drop it so we do not keep retrying it. */
+		function dropStale(path) {
+			if (!path) return false;
+			forgetFolderPassword(passwordScope.value, path);
+			syncRemembered();
+			return true;
+		}
+		function focusUnlock(path) {
+			nextTick(() => {
+				(rootEl.value?.querySelector(`input[data-unlock="${CSS.escape(path)}"]`))?.focus();
+			});
+		}
+		/** Show the same-row password input; `focus` only for user actions, never on page load. */
+		function startPrompt(node, focus) {
+			node.prompting = true;
+			if (focus) focusUnlock(node.path);
+		}
+		function unlockErrorText(error) {
+			if (error === "wrong") return t("passwordWrong");
+			if (error === "stale") return t("passwordStale");
+			return "";
+		}
 		const DEMO_TREE = {
 			"/": [
 				{
@@ -749,6 +928,12 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 					size: 0,
 					is_dir: true,
 					modified: "2026-09-01T08:00:00+08:00"
+				},
+				{
+					name: "加密示例（密码 1234）",
+					size: 0,
+					is_dir: true,
+					modified: "2026-10-20T18:00:00+08:00"
 				}
 			],
 			"/assignments": [{
@@ -839,6 +1024,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				is_dir: false,
 				modified: "2026-01-05T19:02:00+08:00"
 			}],
+			"/加密示例（密码 1234）": [{
+				name: "期末答案（教师版）.pdf",
+				size: 2621440,
+				is_dir: false,
+				modified: "2026-10-20T18:00:00+08:00"
+			}, {
+				name: "成绩登记表.xlsx",
+				size: 48128,
+				is_dir: false,
+				modified: "2026-10-21T09:12:00+08:00"
+			}],
 			"/slides": [{
 				name: "第一章 行列式.pptx",
 				size: 3145728,
@@ -851,6 +1047,8 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				modified: "2026-09-15T13:30:00+08:00"
 			}]
 		};
+		/** Demo-only folder passwords, so the demo can show the password flow. */
+		const DEMO_PASSWORDS = { "/加密示例（密码 1234）": "1234" };
 		class ApiError extends Error {
 			code;
 			constructor(message, code) {
@@ -858,16 +1056,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				this.code = code;
 			}
 		}
-		function authHeaders() {
+		/** JSON content type only when there is a body: a bare GET then needs no CORS preflight. */
+		function authHeaders(json) {
 			return {
-				"Content-Type": "application/json",
+				...json ? { "Content-Type": "application/json" } : {},
 				...props.token ? { Authorization: props.token } : {}
 			};
 		}
 		async function request(apiPath, body) {
 			const response = await fetch(`${baseUrl.value}${apiPath}`, {
 				method: body === void 0 ? "GET" : "POST",
-				headers: authHeaders(),
+				headers: authHeaders(body !== void 0),
 				body: body === void 0 ? void 0 : JSON.stringify(body)
 			});
 			const payload = await response.json().catch(() => null);
@@ -875,9 +1074,11 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
 			return payload.data;
 		}
-		async function listDir(path, password = activePassword.value) {
+		async function listDir(path, password) {
 			if (demo.value) {
 				await new Promise((resolve) => setTimeout(resolve, 220));
+				const guard = Object.entries(DEMO_PASSWORDS).find(([folder]) => isWithin(path, folder));
+				if (guard && guard[1] !== password) throw new ApiError("password is incorrect or you have no permission", 403);
 				return DEMO_TREE[path] ?? [];
 			}
 			return (await request("/api/fs/list", {
@@ -907,7 +1108,7 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			try {
 				url = absoluteUrl((await request("/api/fs/get", {
 					path: node.path,
-					password: node.password || activePassword.value
+					password: passwordFor(node).password
 				}))?.raw_url ?? "");
 			} catch {
 				url = "";
@@ -957,84 +1158,154 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			const parts = path.split("/").filter(Boolean);
 			return parts[parts.length - 1] || path;
 		}
-		async function loadChildren(node) {
+		/**
+		* Load a folder's children. A password error marks the folder locked instead of
+		* toasting; `prompt` also shows its same-row input (and focuses it).
+		*/
+		async function loadChildren(node, prompt = false) {
 			if (node.loaded) return true;
+			if (node.locked) {
+				if (prompt) startPrompt(node, prompt === "focus");
+				return false;
+			}
 			node.loading = true;
+			const { password, rememberedAt } = passwordFor(node);
 			try {
-				node.children = toNodes(await listDir(node.path, node.password || activePassword.value), node.path, node.depth + 1, node.password, node.zipPath);
+				node.children = toNodes(await listDir(node.path, password), node.path, node.depth + 1, node.password, node.zipPath);
 				sortTree(node.children);
 				node.loaded = true;
 				return true;
 			} catch (error) {
-				if (isPasswordError(error)) needsPassword.value = true;
-				showToast(t("folderFailed", { message: errorText(error) }));
+				if (isPasswordError(error)) {
+					node.locked = true;
+					node.expanded = false;
+					node.unlockError = dropStale(rememberedAt) ? "stale" : "";
+					if (prompt) startPrompt(node, prompt === "focus");
+				} else showToast(failureMessage("folderFailed", error));
 				return false;
 			} finally {
 				node.loading = false;
 			}
 		}
-		async function loadSourceRoot(source) {
+		/** When OpenList cannot tell us, guess from the name: a known file extension means a file. */
+		function looksLikeFile(path) {
+			const name = sourceName(path);
+			return fileKind(name) !== "other" || previewKind(name) !== "none";
+		}
+		async function loadSourceRoot(source, expanded) {
 			const path = source.path;
-			const password = source.password ?? "";
+			const configured = source.password ?? "";
 			let item = {
 				name: sourceName(path),
 				size: 0,
-				is_dir: true,
+				is_dir: !looksLikeFile(path),
 				modified: ""
 			};
-			if (demo.value) {
-				if (/\/[^/]+\.[^/]+$/.test(path)) item = {
-					...item,
-					is_dir: false,
-					modified: "2026-09-01T08:00:00+08:00"
-				};
-			} else try {
-				const data = await request("/api/fs/get", {
-					path,
-					password: password || activePassword.value
-				});
-				item = {
-					...item,
-					...data
-				};
-			} catch {}
+			let locked = false;
+			let unlockError = "";
+			if (!demo.value) {
+				const { password, rememberedAt } = configured ? {
+					password: configured,
+					rememberedAt: void 0
+				} : (() => {
+					const stored = storedPassword(path);
+					return stored ? {
+						password: stored.password,
+						rememberedAt: stored.path
+					} : {
+						password: props.password,
+						rememberedAt: void 0
+					};
+				})();
+				try {
+					const data = await request("/api/fs/get", {
+						path,
+						password
+					});
+					item = {
+						...item,
+						...data
+					};
+				} catch (error) {
+					if (isPasswordError(error)) {
+						locked = true;
+						unlockError = dropStale(rememberedAt) ? "stale" : "";
+					}
+				}
+			}
 			const name = source.title || item.name || sourceName(path);
 			return {
 				...item,
 				name,
 				path,
 				depth: 0,
-				expanded: source.expanded ?? props.expanded,
+				expanded,
 				loaded: false,
 				loading: false,
 				children: [],
-				password,
+				password: configured,
+				configuredPassword: configured,
 				isRoot: true,
+				locked,
+				unresolved: locked,
+				unlockError,
+				prompting: locked && expanded,
 				zipPath: [item.is_dir ? name : item.name || sourceName(path)]
 			};
 		}
+		class RootLockedError extends Error {
+			rememberedAt;
+			constructor(rememberedAt) {
+				super("root locked");
+				this.rememberedAt = rememberedAt;
+			}
+		}
+		/**
+		* Build a fresh tree. `expandedPaths` re-opens those folders (refresh keeps
+		* what was open); without it the configured `expanded` defaults apply.
+		*/
+		async function buildTree(expandedPaths) {
+			let nodes;
+			if (props.sources.length) nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source, expandedPaths ? expandedPaths.has(source.path) : source.expanded ?? props.expanded)));
+			else {
+				const { password, rememberedAt } = rootPasswordFor();
+				let items;
+				try {
+					items = await listDir(props.path, password);
+				} catch (error) {
+					if (isPasswordError(error)) throw new RootLockedError(rememberedAt);
+					throw error;
+				}
+				nodes = toNodes(items, props.path, 0, rootPassword.value);
+				sortTree(nodes);
+			}
+			const open = async (list) => {
+				for (const node of list) {
+					if (!node.is_dir || node.locked || !node.expanded && !expandedPaths?.has(node.path)) continue;
+					node.expanded = await loadChildren(node, "show");
+					if (node.expanded && expandedPaths) await open(node.children);
+				}
+			};
+			await open(nodes);
+			return nodes;
+		}
+		/** First load, or a retry after an error: shows the loading state. */
 		async function loadRoot() {
+			refreshSeq += 1;
+			refreshing.value = false;
 			loadingRoot.value = true;
 			errorMsg.value = "";
-			needsPassword.value = false;
 			try {
-				if (props.sources.length) {
-					const nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source)));
-					roots.value = nodes;
-					for (const node of roots.value) if (node.is_dir && node.expanded) node.expanded = await loadChildren(node);
-					selected.value = /* @__PURE__ */ new Set();
-					downloadCache.clear();
-					return;
-				}
-				const items = await listDir(props.path);
-				roots.value = toNodes(items, props.path, 0, activePassword.value);
-				sortTree(roots.value);
+				roots.value = await buildTree();
+				rootLock.active = false;
 				selected.value = /* @__PURE__ */ new Set();
 				downloadCache.clear();
 			} catch (error) {
-				const message = errorText(error);
-				if (isPasswordError(error)) needsPassword.value = true;
-				else errorMsg.value = message;
+				if (error instanceof RootLockedError) {
+					roots.value = [];
+					rootLock.active = true;
+					rootLock.error = dropStale(error.rememberedAt) ? "stale" : "";
+				} else errorMsg.value = errorText(error);
 			} finally {
 				loadingRoot.value = false;
 			}
@@ -1182,6 +1453,7 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			stickyTop.value = top;
 		}
 		onMounted(() => {
+			syncRemembered();
 			loadRoot();
 			loadSiteTitle();
 			measureStickyTop();
@@ -1193,10 +1465,16 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		});
 		return (_ctx, _push, _parent, _attrs) => {
 			_push(`<div${ssrRenderAttrs(mergeProps({
-				class: ["fl-root", { "fl-selecting": selected.value.size > 0 }],
-				style: { "--fl-sticky-top-auto": `${stickyTop.value}px` }
+				ref_key: "rootEl",
+				ref: rootEl,
+				class: ["fl-root", {
+					"fl-selecting": selected.value.size > 0,
+					"fl-refreshing": refreshing.value
+				}],
+				style: { "--fl-sticky-top-auto": `${stickyTop.value}px` },
+				"aria-busy": refreshing.value || loadingRoot.value
 			}, _attrs))}><div class="fl-bar">`);
-			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: unref(formatSize)(selectedBytes.value) }))}</span></div>`);
+			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: formatTotal(selectedBytes.value) }))}</span></div>`);
 			else {
 				_push(`<div class="fl-title"><span class="fl-title-text">${ssrInterpolate(displayTitle.value)}</span>`);
 				if (demo.value) _push(`<span class="fl-demo-badge">${ssrInterpolate(t("demoBadge"))}</span>`);
@@ -1205,19 +1483,27 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			}
 			if (selected.value.size) _push(`<button class="fl-clear" type="button"${ssrRenderAttr("aria-label", t("clearSelection"))}${ssrRenderAttr("title", t("clearSelection"))}><svg class="fl-clear-icon" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg><span class="fl-clear-text">${ssrInterpolate(t("clear"))}</span></button>`);
 			else _push(`<!---->`);
-			_push(`<div class="fl-tools"><label class="fl-search"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path></svg><input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="fl-icon-btn" type="button"${ssrRenderAttr("aria-label", t("refresh"))}${ssrRenderAttr("title", t("refresh"))}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button></div>`);
+			_push(`<div class="fl-tools"><label class="fl-search"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path></svg><input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="${ssrRenderClass([{ "fl-spinning": refreshing.value }, "fl-icon-btn fl-refresh"])}" type="button"${ssrIncludeBooleanAttr(refreshing.value || loadingRoot.value) ? " disabled" : ""}${ssrRenderAttr("aria-label", refreshing.value ? t("refreshing") : t("refresh"))}${ssrRenderAttr("title", refreshing.value ? t("refreshing") : t("refresh"))}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button></div>`);
 			if (selected.value.size) _push(`<button class="fl-btn fl-btn-primary" type="button"${ssrIncludeBooleanAttr(batchBusy.value) ? " disabled" : ""}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg> ${ssrInterpolate(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch"))}</button>`);
 			else _push(`<!---->`);
-			_push(`</div>`);
-			if (needsPassword.value) _push(`<div class="fl-password"><span>${ssrInterpolate(t("passwordPrompt"))}</span><input${ssrRenderAttr("value", passwordInput.value)} type="password"${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordPlaceholder"))}><button class="fl-btn fl-btn-primary" type="button">${ssrInterpolate(t("open"))}</button></div>`);
+			_push(`</div><div class="fl-row fl-head">`);
+			if (refreshing.value) _push(`<span class="fl-progress" aria-hidden="true"></span>`);
 			else _push(`<!---->`);
-			_push(`<div class="fl-row fl-head"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><span class="fl-cell fl-cell-name"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t("columnName"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-size"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnSize"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-date"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
+			_push(`<label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><span class="fl-cell fl-cell-name"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t("columnName"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-size"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnSize"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-date"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
 			ssrRenderList(sortOptions.value, (option) => {
 				_push(`<option${ssrRenderAttr("value", option.value)}${ssrIncludeBooleanAttr(Array.isArray(sortValue.value) ? ssrLooseContain(sortValue.value, option.value) : ssrLooseEqual(sortValue.value, option.value)) ? " selected" : ""}>${ssrInterpolate(option.label)}</option>`);
 			});
 			_push(`<!--]--></select></label></span></div>`);
 			if (loadingRoot.value) _push(`<div class="fl-status">${ssrInterpolate(t("loading"))}</div>`);
-			else if (errorMsg.value) {
+			else if (rootLock.active) {
+				_push(`<form class="${ssrRenderClass([{ "fl-unlock-error": rootLock.error }, "fl-unlock-root"])}"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><label class="fl-unlock-label"${ssrRenderAttr("for", `fl-root-unlock-${__props.path}`)}>${ssrInterpolate(t("passwordPrompt"))}</label>`);
+				if (rootLock.error) _push(`<span id="fl-root-unlock-error" class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(rootLock.error))}</span>`);
+				else _push(`<!---->`);
+				_push(`<span class="fl-unlock"><input${ssrRenderAttr("id", `fl-root-unlock-${__props.path}`)}${ssrRenderAttr("value", rootLock.input)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", __props.path)}${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-invalid", !!rootLock.error)}${ssrRenderAttr("aria-describedby", rootLock.error ? "fl-root-unlock-error" : void 0)}>`);
+				if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", rootLock.remember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
+				else _push(`<!---->`);
+				_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(rootLock.busy || !rootLock.input) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button></span></form>`);
+			} else if (errorMsg.value) {
 				_push(`<div class="fl-status fl-error">${ssrInterpolate(t("loadFailed", { message: errorMsg.value }))} `);
 				if (/guest/i.test(errorMsg.value)) _push(`<p class="fl-hint">${ssrInterpolate(t("guestHint"))}</p>`);
 				else _push(`<!---->`);
@@ -1231,35 +1517,53 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				_push(`<div class="${ssrRenderClass([{
 					"fl-row-dir": node.is_dir,
 					"fl-row-root": node.isRoot,
-					"fl-row-selected": !node.is_dir && selected.value.has(node.path)
-				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
-				if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
+					"fl-row-selected": !node.is_dir && selected.value.has(node.path),
+					"fl-row-locked": node.locked,
+					"fl-row-prompting": node.locked && node.prompting,
+					"fl-row-error": node.locked && node.prompting && !!node.unlockError
+				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrIncludeBooleanAttr(node.locked) ? " disabled" : ""}${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
+				if (node.locked) _push(`<button class="fl-arrow fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}${ssrRenderAttr("title", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
+				else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
 				else _push(`<span class="fl-arrow-placeholder" aria-hidden="true"></span>`);
 				if (node.is_dir) _push(`<svg class="fl-folder-icon" viewBox="0 0 24 24" width="18" height="18" aria-hidden="true"><path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path></svg>`);
 				else _push(`<span class="fl-type"${ssrRenderAttr("data-kind", unref(fileKind)(node.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(node.name) || "FILE")}</span>`);
 				_push(`<span class="fl-label"><span class="${ssrRenderClass([{ "fl-name-dir": node.is_dir }, "fl-name"])}">${ssrInterpolate(node.name)}</span><span class="fl-meta">`);
 				if (node.is_dir) {
 					_push(`<!--[-->`);
-					if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))} · ${ssrInterpolate(unref(formatSize)(unref(totalSize)(folderFiles(node))))}<!--]-->`);
+					if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))} · ${ssrInterpolate(formatTotal(unref(totalSize)(folderFiles(node))))}<!--]-->`);
 					else _push(`<!---->`);
 					_push(`<!--]-->`);
 				} else _push(`<!--[-->${ssrInterpolate(unref(formatSize)(node.size))} · ${ssrInterpolate(unref(formatDate)(node.modified))}<!--]-->`);
 				_push(`</span></span>`);
 				if (node.is_dir && node.loaded) _push(`<span class="fl-count">${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))}</span>`);
 				else _push(`<!---->`);
+				if (node.locked && node.prompting && node.unlockError) _push(`<span${ssrRenderAttr("id", `fl-unlock-error-${node.path}`)} class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(node.unlockError))}</span>`);
+				else _push(`<!---->`);
+				if (!node.locked && rememberedPaths.value.has(node.path)) _push(`<button class="fl-remembered" type="button"${ssrRenderAttr("aria-label", `${t("forgetPassword")} ${node.name}`)}${ssrRenderAttr("title", t("forgetPassword"))}><svg viewBox="0 0 24 24" width="11" height="11" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg> ${ssrInterpolate(t("remembered"))} · ${ssrInterpolate(t("forgetPassword"))}</button>`);
+				else _push(`<!---->`);
 				if (node.loading) _push(`<span class="fl-loading" aria-hidden="true">…</span>`);
 				else _push(`<!---->`);
-				_push(`</span><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
-				if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
-				else {
-					_push(`<!--[-->`);
-					if (canPreview(node)) _push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"></path><circle cx="12" cy="12" r="3"></circle></svg></button>`);
+				_push(`</span>`);
+				if (node.locked && node.prompting) {
+					_push(`<form class="fl-unlock fl-unlock-row"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><input${ssrRenderAttr("value", node.unlockInput)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", node.path)}${ssrRenderAttr("placeholder", node.unlockError ? unlockErrorText(node.unlockError) : t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordFor", { name: node.name }))}${ssrRenderAttr("aria-invalid", !!node.unlockError)}${ssrRenderAttr("aria-describedby", node.unlockError ? `fl-unlock-error-${node.path}` : void 0)}>`);
+					if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", !!node.unlockRemember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
 					else _push(`<!---->`);
-					_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button><!--]-->`);
+					_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(node.unlockBusy || !node.unlockInput) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button><button class="fl-unlock-cancel" type="button"${ssrRenderAttr("aria-label", t("cancel"))}${ssrRenderAttr("title", t("cancel"))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg></button></form>`);
+				} else {
+					_push(`<!--[--><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir || node.locked ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
+					if (node.locked) _push(`<button class="fl-action fl-arrow-end fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
+					else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
+					else if (!node.locked) {
+						_push(`<!--[-->`);
+						if (canPreview(node)) _push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"></path><circle cx="12" cy="12" r="3"></circle></svg></button>`);
+						else _push(`<!---->`);
+						_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button><!--]-->`);
+					} else _push(`<!---->`);
+					_push(`</span><!--]-->`);
 				}
-				_push(`</span></div>`);
+				_push(`</div>`);
 			});
-			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: unref(formatSize)(loadedBytes.value) }))}</span></div>`);
+			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: formatTotal(loadedBytes.value) }))}</span></div>`);
 			if (toast.value) _push(`<div class="fl-toast" role="status">${ssrInterpolate(toast.value)}</div>`);
 			else _push(`<!---->`);
 			_push(ssrRenderComponent(_sfc_main$1, {