vitepress-plugin-filelist 0.4.0 → 0.5.1

package/dist/client/browser/index.js

@@ -1,125 +1,15 @@
 import "../style.css";
-import { Fragment, computed, createCommentVNode, createElementBlock, createElementVNode, createTextVNode, createVNode, defineComponent, normalizeClass, normalizeStyle, onBeforeUnmount, onMounted, openBlock, ref, renderList, toDisplayString, unref, vModelSelect, vModelText, watch, withDirectives, withKeys } from "vue";
-// src/client/locales.ts
-const fileListLocales = {
-	"zh-CN": {
-		allFiles: "全部文件",
-		demoBadge: "演示数据",
-		filter: "筛选文件名",
-		refresh: "刷新",
-		batch: "下载 ZIP",
-		batchCount: "批量下载（{count}）",
-		batching: "打包中 {percent}%",
-		passwordPrompt: "该目录受密码保护：",
-		passwordPlaceholder: "输入目录密码",
-		open: "打开",
-		columnName: "文件名",
-		columnSize: "文件大小",
-		columnDate: "最后修改日期",
-		loading: "加载中…",
-		loadFailed: "加载失败：{message}",
-		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
-		corsHint: "可能是跨域或混合内容被拦截，检查 OpenList 的 cors 配置与页面协议。",
-		retry: "重试",
-		empty: "没有文件",
-		preview: "预览",
-		download: "下载",
-		loaded: "{count} 个已加载文件",
-		selected: "已选 {count} 项",
-		unloaded: "{count} 个目录未展开，未计入全选",
-		folderFailed: "打开文件夹失败：{message}",
-		demoDownload: "演示模式：接入 OpenList 后会下载「{name}」",
-		demoPreview: "演示模式：接入 OpenList 后可预览「{name}」",
-		demoBatch: "演示模式：将打包已勾选的 {count} 个文件",
-		downloadFailed: "下载失败：{message}",
-		previewFailed: "预览失败：{message}",
-		batchFailed: "打包失败：{message}",
-		defaultZip: "资源",
-		clear: "清除",
-		clearSelection: "取消选择",
-		totalSize: "共 {size}",
-		folderItems: "{count} 项",
-		sortBy: "排序",
-		selectAll: "全选",
-		selectItem: "选择 {name}",
-		expand: "展开 {name}",
-		collapse: "收起 {name}",
-		close: "关闭",
-		previous: "上一个",
-		next: "下一个",
-		rotate: "旋转",
-		actualSize: "原始大小",
-		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
-		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
-		previewTooLarge: "文件较大（{size}），请下载后查看",
-		textTruncated: "仅显示前 {size}，完整内容请下载"
-	},
-	"en-US": {
-		allFiles: "All files",
-		demoBadge: "Demo data",
-		filter: "Filter files",
-		refresh: "Refresh",
-		batch: "Download ZIP",
-		batchCount: "Download ZIP ({count})",
-		batching: "Zipping {percent}%",
-		passwordPrompt: "This folder is password protected:",
-		passwordPlaceholder: "Folder password",
-		open: "Open",
-		columnName: "Name",
-		columnSize: "Size",
-		columnDate: "Modified",
-		loading: "Loading…",
-		loadFailed: "Failed to load: {message}",
-		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
-		corsHint: "Possibly blocked by CORS or mixed content. Check OpenList cors settings and the page protocol.",
-		retry: "Retry",
-		empty: "No files",
-		preview: "Preview",
-		download: "Download",
-		loaded: "{count} loaded file(s)",
-		selected: "{count} selected",
-		unloaded: "{count} folder(s) not expanded, excluded from select-all",
-		folderFailed: "Failed to open folder: {message}",
-		demoDownload: "Demo mode: \"{name}\" will download once OpenList is connected.",
-		demoPreview: "Demo mode: \"{name}\" will preview once OpenList is connected.",
-		demoBatch: "Demo mode: {count} selected file(s) would be zipped.",
-		downloadFailed: "Download failed: {message}",
-		previewFailed: "Preview failed: {message}",
-		batchFailed: "Failed to create ZIP: {message}",
-		defaultZip: "resources",
-		clear: "Clear",
-		clearSelection: "Clear selection",
-		totalSize: "{size} total",
-		folderItems: "{count} items",
-		sortBy: "Sort",
-		selectAll: "Select all",
-		selectItem: "Select {name}",
-		expand: "Expand {name}",
-		collapse: "Collapse {name}",
-		close: "Close",
-		previous: "Previous",
-		next: "Next",
-		rotate: "Rotate",
-		actualSize: "Actual size",
-		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
-		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
-		previewTooLarge: "This file is large ({size}). Download it to view.",
-		textTruncated: "Showing the first {size} only. Download for the full file."
-	}
-};
-function formatLabel(template, values = {}) {
-	return template.replace(/\{(\w+)\}/g, (_, key) => values[key] === void 0 ? `{${key}}` : String(values[key]));
-}
-function resolveLabels(locale = "zh-CN", overrides) {
-	return {
-		...fileListLocales[locale] ?? fileListLocales["zh-CN"],
-		...overrides
-	};
-}
+import { Fragment, computed, createCommentVNode, createElementBlock, createElementVNode, createTextVNode, createVNode, defineComponent, nextTick, normalizeClass, normalizeStyle, onBeforeUnmount, onMounted, openBlock, ref, renderList, toDisplayString, unref, useId, vModelSelect, vModelText, watch, withDirectives, withKeys, withModifiers } from "vue";
 // src/client/utils.ts
 function joinPath(parent, name) {
 	return (parent.endsWith("/") ? parent : `${parent}/`) + name;
 }
+/** Whether `path` is `folder` itself or inside it (segment-wise, trailing slashes ignored). */
+function isWithin(path, folder) {
+	const p = path.replace(/\/+$/, "") || "/";
+	const f = folder.replace(/\/+$/, "") || "/";
+	return f === "/" || p === f || p.startsWith(`${f}/`);
+}
 function encodePath(path) {
 	return path.split("/").map(encodeURIComponent).join("/");
 }
@@ -158,8 +48,9 @@ function uniqueEntryName(name, used) {
 	used.add(candidate);
 	return candidate;
 }
+/** Human-readable size. `0` reads `0 B`; missing, negative or invalid sizes read `-`. */
 function formatSize(size) {
-	if (!size || !Number.isFinite(size)) return "-";
+	if (!Number.isFinite(size) || size < 0) return "-";
 	const units = [
 		"B",
 		"KB",
@@ -183,96 +74,106 @@ function formatDate(iso) {
 	const pad = (value) => String(value).padStart(2, "0");
 	return `${date.getFullYear()}/${pad(date.getMonth() + 1)}/${pad(date.getDate())}`;
 }
-function extOf(name) {
+/** Lower-case extension (letters and digits only), or `''`. */
+function extension(name) {
 	const match = name.match(/\.([a-z0-9]+)$/i);
-	return match ? match[1].toUpperCase() : "";
+	return match ? match[1].toLowerCase() : "";
+}
+/** Upper-case extension for the type badge, e.g. `PDF`. */
+function extOf(name) {
+	return extension(name).toUpperCase();
 }
-const FILE_KINDS = {};
-for (const [kind, exts] of Object.entries({
-	doc: [
+/**
+* One table for every known extension: the badge family (`FileKind`) and how
+* the preview dialog shows it (`PreviewKind`; Office and the like are `none`).
+*/
+const EXTENSIONS = [
+	[
+		"doc",
+		"text",
+		"txt md markdown"
+	],
+	[
 		"doc",
-		"docx",
-		"odt",
-		"rtf",
-		"txt",
-		"md",
-		"pages",
-		"wps"
+		"none",
+		"doc docx odt rtf pages wps"
+	],
+	[
+		"sheet",
+		"text",
+		"csv tsv"
+	],
+	[
+		"sheet",
+		"none",
+		"xls xlsx ods numbers et"
+	],
+	[
+		"slide",
+		"none",
+		"ppt pptx odp key dps"
 	],
-	sheet: [
-		"xls",
-		"xlsx",
-		"ods",
-		"csv",
-		"tsv",
-		"numbers",
-		"et"
+	[
+		"pdf",
+		"pdf",
+		"pdf"
 	],
-	slide: [
-		"ppt",
-		"pptx",
-		"odp",
-		"key",
-		"dps"
+	[
+		"image",
+		"image",
+		"png jpg jpeg gif webp svg bmp ico avif"
 	],
-	pdf: ["pdf"],
-	image: [
-		"png",
-		"jpg",
-		"jpeg",
-		"gif",
-		"webp",
-		"svg",
-		"bmp",
-		"ico",
-		"avif",
+	[
+		"image",
+		"none",
 		"heic"
 	],
-	media: [
-		"mp3",
-		"wav",
-		"flac",
-		"aac",
-		"ogg",
-		"m4a",
-		"mp4",
-		"webm",
-		"mov",
-		"mkv",
-		"avi"
+	[
+		"media",
+		"video",
+		"mp4 webm m4v mov ogv"
+	],
+	[
+		"media",
+		"audio",
+		"mp3 wav ogg oga m4a aac flac opus"
+	],
+	[
+		"media",
+		"none",
+		"mkv avi"
+	],
+	[
+		"archive",
+		"none",
+		"zip rar 7z tar gz tgz bz2 xz iso"
 	],
-	archive: [
-		"zip",
-		"rar",
-		"7z",
-		"tar",
-		"gz",
-		"tgz",
-		"bz2",
-		"xz",
-		"iso"
+	[
+		"code",
+		"text",
+		"js mjs cjs ts tsx jsx vue json html htm css scss less py java kt c h cpp hpp cs go rs rb php sh bat ps1 sql yml yaml xml toml ini conf properties"
 	],
-	code: [
-		"js",
-		"ts",
-		"json",
-		"html",
-		"css",
-		"py",
-		"java",
-		"c",
-		"cpp",
-		"go",
-		"rs",
-		"sh",
-		"yml",
-		"yaml",
-		"xml"
+	[
+		"other",
+		"text",
+		"log srt vtt ass lrc gitignore env"
 	]
-})) for (const ext of exts) FILE_KINDS[ext] = kind;
+];
+const BY_EXTENSION = /* @__PURE__ */ new Map();
+for (const [kind, preview, list] of EXTENSIONS) for (const ext of list.split(" ")) BY_EXTENSION.set(ext, {
+	kind,
+	preview
+});
 /** Rough file family, used to colour the type badge. */
 function fileKind(name) {
-	return FILE_KINDS[extOf(name).toLowerCase()] ?? "other";
+	return BY_EXTENSION.get(extension(name))?.kind ?? "other";
+}
+/**
+* How a file is shown in the preview dialog. Office documents and anything
+* else the browser cannot render are `none` (info + download).
+*/
+function previewKind(name) {
+	return BY_EXTENSION.get(extension(name))?.preview ?? "none";
 }
 /** Sum of the `size` of the given entries, ignoring missing or invalid sizes. */
 function totalSize(items) {
@@ -286,100 +187,6 @@ function compareNodes(a, b, key, ascending = true) {
 	else result = a.name.localeCompare(b.name, "zh-Hans-CN", { numeric: true });
 	return ascending ? result : -result;
 }
-const PREVIEW_EXTS = {
-	image: [
-		"png",
-		"jpg",
-		"jpeg",
-		"gif",
-		"webp",
-		"svg",
-		"bmp",
-		"ico",
-		"avif"
-	],
-	video: [
-		"mp4",
-		"webm",
-		"m4v",
-		"mov",
-		"ogv"
-	],
-	audio: [
-		"mp3",
-		"wav",
-		"ogg",
-		"oga",
-		"m4a",
-		"aac",
-		"flac",
-		"opus"
-	],
-	text: [
-		"txt",
-		"md",
-		"markdown",
-		"log",
-		"json",
-		"csv",
-		"tsv",
-		"xml",
-		"yml",
-		"yaml",
-		"toml",
-		"ini",
-		"conf",
-		"properties",
-		"js",
-		"mjs",
-		"cjs",
-		"ts",
-		"tsx",
-		"jsx",
-		"vue",
-		"css",
-		"scss",
-		"less",
-		"html",
-		"htm",
-		"py",
-		"java",
-		"kt",
-		"c",
-		"h",
-		"cpp",
-		"hpp",
-		"cs",
-		"go",
-		"rs",
-		"rb",
-		"php",
-		"sh",
-		"bat",
-		"ps1",
-		"sql",
-		"srt",
-		"vtt",
-		"ass",
-		"lrc",
-		"gitignore",
-		"env"
-	],
-	pdf: ["pdf"]
-};
-const PREVIEW_KINDS = {};
-for (const [kind, exts] of Object.entries(PREVIEW_EXTS)) for (const ext of exts) PREVIEW_KINDS[ext] = kind;
-function lowerExt(name) {
-	const dot = name.lastIndexOf(".");
-	return dot >= 0 ? name.slice(dot + 1).toLowerCase() : "";
-}
-/**
-* How a file is shown in the preview dialog. Office documents and anything
-* else the browser cannot render are `none` (info + download).
-*/
-function previewKind(name) {
-	return PREVIEW_KINDS[lowerExt(name)] ?? "none";
-}
 /**
 * Viewers from OpenList's public `iframe_previews` setting that match a file,
 * in the order OpenList lists them. Keys are comma-separated extensions or a
@@ -394,7 +201,7 @@ function iframePreviewsFor(name, setting) {
 		return [];
 	}
 	if (!parsed || typeof parsed !== "object") return [];
-	const ext = lowerExt(name);
+	const ext = extension(name);
 	const out = [];
 	for (const [key, viewers] of Object.entries(parsed)) {
 		let hit = false;
@@ -428,6 +235,579 @@ function applyUrlOps(placeholder, url) {
 function fillPreviewUrl(scheme, args) {
 	return scheme.replace(/\$name/g, args.name).replace(/\$[eb_]*durl/g, (placeholder) => applyUrlOps(placeholder, args.downloadUrl)).replace(/\$[eb_]*url/g, (placeholder) => applyUrlOps(placeholder, args.rawUrl));
 }
+// src/client/api.ts
+var ApiError = class extends Error {
+	code;
+	constructor(message, code) {
+		super(message);
+		this.code = code;
+	}
+};
+function errorText(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* OpenList has no dedicated code for a missing / wrong folder password; its
+* message says "password is incorrect or you have no permission".
+*/
+function isPasswordError(error) {
+	return /password|密码/i.test(errorText(error));
+}
+/** Browser-level fetch failures (Chrome, Firefox, Safari wording), usually CORS. */
+function isNetworkError(error) {
+	return /failed to fetch|networkerror|load failed|network request failed/i.test(errorText(error));
+}
+function createOpenListApi(base, token) {
+	const root = base.replace(/\/+$/, "");
+	const urls = /* @__PURE__ */ new Map();
+	async function request(apiPath, body) {
+		const response = await fetch(`${root}${apiPath}`, {
+			method: body === void 0 ? "GET" : "POST",
+			headers: {
+				...body === void 0 ? {} : { "Content-Type": "application/json" },
+				...token ? { Authorization: token } : {}
+			},
+			body: body === void 0 ? void 0 : JSON.stringify(body)
+		});
+		const payload = await response.json().catch(() => null);
+		if (!payload) throw new ApiError(`HTTP ${response.status}`, response.status);
+		if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
+		return payload.data;
+	}
+	function absoluteUrl(raw) {
+		if (!raw) return "";
+		if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) return raw;
+		const origin = root || (typeof window !== "undefined" ? window.location.origin : "");
+		try {
+			return new URL(raw, `${origin}/`).href;
+		} catch {
+			return raw;
+		}
+	}
+	const directUrl = (file) => `${root}/d${encodePath(file.path)}${file.sign ? `?sign=${encodeURIComponent(file.sign)}` : ""}`;
+	return {
+		async list(path, password) {
+			return (await request("/api/fs/list", {
+				path,
+				password,
+				page: 1,
+				per_page: 0,
+				refresh: false
+			}))?.content ?? [];
+		},
+		get: (path, password) => request("/api/fs/get", {
+			path,
+			password
+		}),
+		async settings() {
+			try {
+				const data = await request("/api/public/settings");
+				return {
+					title: data?.site_title || data?.title || "",
+					iframePreviews: data?.iframe_previews || ""
+				};
+			} catch {
+				return {
+					title: "",
+					iframePreviews: ""
+				};
+			}
+		},
+		async fileUrl(file, password) {
+			if (file.raw_url) return absoluteUrl(file.raw_url);
+			const cached = urls.get(file.path);
+			if (cached) return cached;
+			let url = "";
+			try {
+				url = absoluteUrl((await request("/api/fs/get", {
+					path: file.path,
+					password
+				}))?.raw_url ?? "");
+			} catch {}
+			url ||= directUrl(file);
+			urls.set(file.path, url);
+			return url;
+		},
+		directUrl,
+		clearCache(path) {
+			if (!path) urls.clear();
+			else for (const key of [...urls.keys()]) if (isWithin(key, path)) urls.delete(key);
+		}
+	};
+}
+// src/client/demo.ts
+/** Built-in sample data, used when no `base` is given. */
+const TREE = {
+	"/": [
+		{
+			name: "assignments",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "exams",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "materials",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "notes",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "slides",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "加密示例（密码 1234）",
+			size: 0,
+			is_dir: true,
+			modified: "2026-10-20T18:00:00+08:00"
+		}
+	],
+	"/assignments": [{
+		name: "线代作业参考答案",
+		size: 0,
+		is_dir: true,
+		modified: "2026-10-12T21:30:00+08:00"
+	}, {
+		name: "作业提交说明.pdf",
+		size: 186432,
+		is_dir: false,
+		modified: "2026-09-03T10:15:00+08:00"
+	}],
+	"/assignments/线代作业参考答案": [
+		{
+			name: "第1次作业参考答案.doc",
+			size: 412672,
+			is_dir: false,
+			modified: "2026-09-15T22:41:00+08:00"
+		},
+		{
+			name: "第2次作业参考答案.pdf",
+			size: 1048576,
+			is_dir: false,
+			modified: "2026-09-22T22:03:00+08:00"
+		},
+		{
+			name: "第3次作业参考答案.pdf",
+			size: 986112,
+			is_dir: false,
+			modified: "2026-09-29T21:57:00+08:00"
+		},
+		{
+			name: "第4次作业参考答案.pdf",
+			size: 1572864,
+			is_dir: false,
+			modified: "2026-10-13T22:10:00+08:00"
+		}
+	],
+	"/exams": [
+		{
+			name: "2023 期末试题和答案.pdf",
+			size: 2345678,
+			is_dir: false,
+			modified: "2025-01-18T09:20:00+08:00"
+		},
+		{
+			name: "2024 期中试题.pdf",
+			size: 1234567,
+			is_dir: false,
+			modified: "2025-11-02T14:08:00+08:00"
+		},
+		{
+			name: "代数与几何-多年合集-试题和答案.pdf",
+			size: 18874368,
+			is_dir: false,
+			modified: "2025-01-18T09:25:00+08:00"
+		}
+	],
+	"/materials": [
+		{
+			name: "线性代数及其应用（Lay 第5版）.pdf",
+			size: 48231424,
+			is_dir: false,
+			modified: "2024-07-29T16:44:00+08:00"
+		},
+		{
+			name: "Introduction to Linear Algebra（Strang）.pdf",
+			size: 36700160,
+			is_dir: false,
+			modified: "2024-07-29T16:50:00+08:00"
+		},
+		{
+			name: "疑难解答与习题指导.zip",
+			size: 9437184,
+			is_dir: false,
+			modified: "2024-08-05T11:12:00+08:00"
+		}
+	],
+	"/notes": [{
+		name: "线性代数笔记（106页）.pdf",
+		size: 12582912,
+		is_dir: false,
+		modified: "2025-06-30T20:31:00+08:00"
+	}, {
+		name: "期末复习提纲.docx",
+		size: 245760,
+		is_dir: false,
+		modified: "2026-01-05T19:02:00+08:00"
+	}],
+	"/加密示例（密码 1234）": [{
+		name: "期末答案（教师版）.pdf",
+		size: 2621440,
+		is_dir: false,
+		modified: "2026-10-20T18:00:00+08:00"
+	}, {
+		name: "成绩登记表.xlsx",
+		size: 48128,
+		is_dir: false,
+		modified: "2026-10-21T09:12:00+08:00"
+	}],
+	"/slides": [{
+		name: "第一章 行列式.pptx",
+		size: 3145728,
+		is_dir: false,
+		modified: "2026-09-08T13:26:00+08:00"
+	}, {
+		name: "第二章 矩阵.pptx",
+		size: 4194304,
+		is_dir: false,
+		modified: "2026-09-15T13:30:00+08:00"
+	}]
+};
+/** Demo-only folder passwords, so the demo can show the password flow. */
+const PASSWORDS = { "/加密示例（密码 1234）": "1234" };
+function guard(path, password) {
+	const lock = Object.entries(PASSWORDS).find(([folder]) => isWithin(path, folder));
+	if (lock && lock[1] !== password) throw new ApiError("password is incorrect or you have no permission", 403);
+}
+function parentOf(path) {
+	return path.slice(0, path.lastIndexOf("/")) || "/";
+}
+/** Demo OpenList: same API, no network; files have no URL. */
+function createDemoApi(delay = 220) {
+	return {
+		async list(path, password) {
+			await new Promise((resolve) => setTimeout(resolve, delay));
+			guard(path, password);
+			return TREE[path] ?? [];
+		},
+		async get(path, password) {
+			guard(path, password);
+			const name = path.split("/").filter(Boolean).pop() ?? "";
+			const item = (TREE[parentOf(path)] ?? []).find((entry) => entry.name === name);
+			if (!item) throw new ApiError("object not found", 404);
+			return item;
+		},
+		settings: async () => ({
+			title: "",
+			iframePreviews: ""
+		}),
+		fileUrl: async () => "",
+		directUrl: () => "",
+		clearCache: () => {}
+	};
+}
+// src/client/download.ts
+/** Open a file URL; OpenList serves `/p/` and `/d/` as attachments, so this downloads. */
+function openUrl(url) {
+	const anchor = document.createElement("a");
+	anchor.href = url;
+	anchor.target = "_blank";
+	anchor.rel = "noopener";
+	document.body.appendChild(anchor);
+	anchor.click();
+	anchor.remove();
+}
+function saveBlob(blob, name) {
+	const href = URL.createObjectURL(blob);
+	const anchor = document.createElement("a");
+	anchor.href = href;
+	anchor.download = name;
+	document.body.appendChild(anchor);
+	anchor.click();
+	anchor.remove();
+	setTimeout(() => URL.revokeObjectURL(href), 3e4);
+}
+/** File-system-safe ZIP name from a title. */
+function zipFileName(title) {
+	return `${title.replace(/[\\/:*?"<>|]/g, "_")}.zip`;
+}
+/**
+* Fetch files (three at a time) and pack them into one ZIP. `zipPath` is the
+* entry path; clashing names get ` (2)`, ` (3)`... `onProgress` goes 0–90 while
+* fetching; packing is the rest.
+*/
+async function zipFiles(files, urlOf, onProgress) {
+	const entries = {};
+	const used = /* @__PURE__ */ new Set();
+	const queue = [...files];
+	let done = 0;
+	const worker = async () => {
+		for (let file = queue.shift(); file; file = queue.shift()) {
+			const response = await fetch(await urlOf(file));
+			if (!response.ok) throw new Error(`${file.name}：HTTP ${response.status}`);
+			entries[uniqueEntryName(zipEntryName(file.zipPath), used)] = new Uint8Array(await response.arrayBuffer());
+			done += 1;
+			onProgress(Math.round(done / files.length * 90));
+		}
+	};
+	await Promise.all(Array.from({ length: Math.min(3, files.length) }, worker));
+	const { zip } = await import("fflate");
+	const data = await new Promise((resolve, reject) => {
+		zip(entries, (error, output) => error ? reject(error) : resolve(output));
+	});
+	onProgress(100);
+	return new Blob([data], { type: "application/zip" });
+}
+// src/client/icons.ts
+/** Stroke icons on a 24×24 grid, drawn by `Icon.vue`. */
+const ICONS = {
+	lock: {
+		stroke: 2.2,
+		paths: ["M7 11h10a2 2 0 0 1 2 2v6a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2v-6a2 2 0 0 1 2-2z", "M8 11V8a4 4 0 0 1 8 0v3"]
+	},
+	key: {
+		stroke: 2,
+		paths: [
+			"M4 15a4 4 0 1 0 8 0a4 4 0 1 0-8 0",
+			"m11 12 9-9",
+			"m17 6 3 3"
+		]
+	},
+	close: {
+		stroke: 2.2,
+		paths: ["M6 6l12 12", "M18 6 6 18"]
+	},
+	download: {
+		stroke: 2.2,
+		paths: [
+			"M12 3v12",
+			"m7 10 5 5 5-5",
+			"M5 21h14"
+		]
+	},
+	eye: {
+		stroke: 2,
+		paths: ["M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z", "M9 12a3 3 0 1 0 6 0a3 3 0 1 0-6 0"]
+	},
+	refresh: {
+		stroke: 2,
+		paths: ["M21 12a9 9 0 1 1-3-6.7", "M21 4v5h-5"]
+	},
+	search: {
+		stroke: 2,
+		paths: ["M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0", "m20 20-3.5-3.5"]
+	},
+	next: {
+		stroke: 2.2,
+		paths: ["m9 6 6 6-6 6"]
+	},
+	previous: {
+		stroke: 2.2,
+		paths: ["m15 6-6 6 6 6"]
+	},
+	zoomIn: {
+		stroke: 2,
+		paths: [
+			"M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0",
+			"m20 20-3.5-3.5",
+			"M11 8v6M8 11h6"
+		]
+	},
+	zoomOut: {
+		stroke: 2,
+		paths: [
+			"M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0",
+			"m20 20-3.5-3.5",
+			"M8 11h6"
+		]
+	}
+};
+// src/client/Icon.vue
+const _hoisted_1$2 = [
+	"width",
+	"height",
+	"stroke-width"
+];
+const _hoisted_2$2 = ["d"];
+const _sfc_main$2 = /*@__PURE__*/ defineComponent({
+	__name: "Icon",
+	props: {
+		name: {},
+		size: { default: 16 }
+	},
+	setup(__props) {
+		return (_ctx, _cache) => {
+			return openBlock(), createElementBlock("svg", {
+				viewBox: "0 0 24 24",
+				width: __props.size,
+				height: __props.size,
+				fill: "none",
+				stroke: "currentColor",
+				"stroke-width": unref(ICONS)[__props.name].stroke,
+				"stroke-linecap": "round",
+				"stroke-linejoin": "round",
+				"aria-hidden": "true"
+			}, [(openBlock(true), createElementBlock(Fragment, null, renderList(unref(ICONS)[__props.name].paths, (d) => {
+				return openBlock(), createElementBlock("path", {
+					key: d,
+					d
+				}, null, 8, _hoisted_2$2);
+			}), 128))], 8, _hoisted_1$2);
+		};
+	}
+});
+// src/client/locales.ts
+const fileListLocales = {
+	"zh-CN": {
+		allFiles: "全部文件",
+		demoBadge: "演示数据",
+		filter: "筛选文件名",
+		refresh: "刷新",
+		batch: "下载 ZIP",
+		batchCount: "批量下载（{count}）",
+		batching: "打包中 {percent}%",
+		passwordPrompt: "该目录受密码保护：",
+		passwordPlaceholder: "输入密码",
+		open: "打开",
+		columnName: "文件名",
+		columnSize: "文件大小",
+		columnDate: "最后修改日期",
+		loading: "加载中…",
+		loadFailed: "加载失败：{message}",
+		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
+		corsHint: "可能是跨域或混合内容被拦截：检查 OpenList 的 cors.allow_origins（OpenList-Worker 为 ALLOW_URLS）与页面协议。",
+		retry: "重试",
+		empty: "没有文件",
+		preview: "预览",
+		download: "下载",
+		loaded: "{count} 个已加载文件",
+		selected: "已选 {count} 项",
+		unloaded: "{count} 个目录未展开，未计入全选",
+		folderFailed: "打开文件夹失败：{message}",
+		demoDownload: "演示模式：接入 OpenList 后会下载「{name}」",
+		demoPreview: "演示模式：接入 OpenList 后可预览「{name}」",
+		demoBatch: "演示模式：将打包已勾选的 {count} 个文件",
+		downloadFailed: "下载失败：{message}",
+		previewFailed: "预览失败：{message}",
+		batchFailed: "打包失败：{message}",
+		defaultZip: "资源",
+		clear: "清除",
+		clearSelection: "取消选择",
+		totalSize: "共 {size}",
+		folderItems: "{count} 项",
+		sortBy: "排序",
+		selectAll: "全选",
+		selectItem: "选择 {name}",
+		expand: "展开 {name}",
+		collapse: "收起 {name}",
+		close: "关闭",
+		previous: "上一个",
+		next: "下一个",
+		rotate: "旋转",
+		actualSize: "原始大小",
+		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
+		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
+		previewTooLarge: "文件较大（{size}），请下载后查看",
+		textTruncated: "仅显示前 {size}，完整内容请下载",
+		refreshing: "刷新中",
+		refreshFailed: "刷新失败：{message}",
+		cancel: "取消",
+		passwordFor: "{name} 的密码",
+		passwordWrong: "密码不正确或无权访问",
+		passwordStale: "已保存的密码已失效，请重新输入",
+		rememberPassword: "在此标签页中记住（关闭标签页后失效）",
+		remembered: "已记住",
+		forgetPassword: "忘记",
+		unlockFolder: "输入 {name} 的密码",
+		networkHint: "可能被跨域拦截：请检查 OpenList 的 cors.allow_origins，或 OpenList-Worker 的 ALLOW_URLS。"
+	},
+	"en-US": {
+		allFiles: "All files",
+		demoBadge: "Demo data",
+		filter: "Filter files",
+		refresh: "Refresh",
+		batch: "Download ZIP",
+		batchCount: "Download ZIP ({count})",
+		batching: "Zipping {percent}%",
+		passwordPrompt: "This folder is password protected:",
+		passwordPlaceholder: "Folder password",
+		open: "Open",
+		columnName: "Name",
+		columnSize: "Size",
+		columnDate: "Modified",
+		loading: "Loading…",
+		loadFailed: "Failed to load: {message}",
+		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
+		corsHint: "Possibly blocked by CORS or mixed content. Check cors.allow_origins in OpenList (ALLOW_URLS in OpenList-Worker) and the page protocol.",
+		retry: "Retry",
+		empty: "No files",
+		preview: "Preview",
+		download: "Download",
+		loaded: "{count} loaded file(s)",
+		selected: "{count} selected",
+		unloaded: "{count} folder(s) not expanded, excluded from select-all",
+		folderFailed: "Failed to open folder: {message}",
+		demoDownload: "Demo mode: \"{name}\" will download once OpenList is connected.",
+		demoPreview: "Demo mode: \"{name}\" will preview once OpenList is connected.",
+		demoBatch: "Demo mode: {count} selected file(s) would be zipped.",
+		downloadFailed: "Download failed: {message}",
+		previewFailed: "Preview failed: {message}",
+		batchFailed: "Failed to create ZIP: {message}",
+		defaultZip: "resources",
+		clear: "Clear",
+		clearSelection: "Clear selection",
+		totalSize: "{size} total",
+		folderItems: "{count} items",
+		sortBy: "Sort",
+		selectAll: "Select all",
+		selectItem: "Select {name}",
+		expand: "Expand {name}",
+		collapse: "Collapse {name}",
+		close: "Close",
+		previous: "Previous",
+		next: "Next",
+		rotate: "Rotate",
+		actualSize: "Actual size",
+		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
+		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
+		previewTooLarge: "This file is large ({size}). Download it to view.",
+		textTruncated: "Showing the first {size} only. Download for the full file.",
+		refreshing: "Refreshing",
+		refreshFailed: "Refresh failed: {message}",
+		cancel: "Cancel",
+		passwordFor: "Password for {name}",
+		passwordWrong: "Wrong password or no permission",
+		passwordStale: "The saved password no longer works. Enter it again.",
+		rememberPassword: "Remember in this tab (cleared when the tab closes)",
+		remembered: "Remembered",
+		forgetPassword: "Forget",
+		unlockFolder: "Enter the password for {name}",
+		networkHint: "Possibly blocked by CORS: check cors.allow_origins in OpenList, or ALLOW_URLS in OpenList-Worker."
+	}
+};
+function formatLabel(template, values = {}) {
+	return template.replace(/\{(\w+)\}/g, (_, key) => values[key] === void 0 ? `{${key}}` : String(values[key]));
+}
+function resolveLabels(locale = "zh-CN", overrides) {
+	return {
+		...fileListLocales[locale] ?? fileListLocales["zh-CN"],
+		...overrides
+	};
+}
 // src/client/PreviewDialog.vue
 const _hoisted_1$1 = ["aria-label"];
 const _hoisted_2$1 = {
@@ -452,51 +832,33 @@ const _hoisted_13$1 = [
 	"aria-label",
 	"title"
 ];
-const _hoisted_14$1 = {
-	viewBox: "0 0 24 24",
-	width: "17",
-	height: "17",
-	fill: "none",
-	stroke: "currentColor",
-	"stroke-width": "2",
-	"stroke-linecap": "round",
-	"aria-hidden": "true"
-};
-const _hoisted_15$1 = {
-	key: 0,
-	d: "M11 8v6M8 11h6"
-};
-const _hoisted_16$1 = {
-	key: 1,
-	d: "M8 11h6"
-};
-const _hoisted_17$1 = { class: "fl-preview-tools fl-preview-actions" };
-const _hoisted_18$1 = ["aria-label", "title"];
-const _hoisted_19$1 = ["aria-label", "title"];
-const _hoisted_20$1 = ["data-mode"];
-const _hoisted_21$1 = {
+const _hoisted_14$1 = { class: "fl-preview-tools fl-preview-actions" };
+const _hoisted_15$1 = ["aria-label", "title"];
+const _hoisted_16$1 = ["aria-label", "title"];
+const _hoisted_17$1 = ["data-mode"];
+const _hoisted_18$1 = {
 	key: 0,
 	class: "fl-preview-status",
 	role: "status"
 };
-const _hoisted_22$1 = ["src", "alt"];
-const _hoisted_23$1 = ["src"];
-const _hoisted_24$1 = ["src"];
-const _hoisted_25$1 = {
+const _hoisted_19$1 = ["src", "alt"];
+const _hoisted_20$1 = ["src"];
+const _hoisted_21$1 = ["src"];
+const _hoisted_22$1 = {
 	key: 4,
 	class: "fl-preview-text"
 };
-const _hoisted_26$1 = {
+const _hoisted_23$1 = {
 	key: 0,
 	class: "fl-preview-note"
 };
-const _hoisted_27$1 = ["src", "title"];
-const _hoisted_28$1 = {
+const _hoisted_24$1 = ["src", "title"];
+const _hoisted_25$1 = {
 	key: 6,
 	class: "fl-preview-info"
 };
-const _hoisted_29$1 = ["data-kind"];
-const _hoisted_30$1 = { class: "fl-preview-message" };
+const _hoisted_26$1 = ["data-kind"];
+const _hoisted_27$1 = { class: "fl-preview-message" };
 const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 	__name: "PreviewDialog",
 	props: {
@@ -527,11 +889,12 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 	],
 	setup(__props, { emit: __emit }) {
 		/**
-		* PreviewDialog.vue —— 文件预览弹窗（原生 <dialog>，不跳转页面）
+		* File preview in a native <dialog>, without leaving the page.
 		*
-		* image / video / audio：原生标签；text：Range 读取前 maxTextBytes；
-		* pdf：OpenList `iframe_previews` 中的查看器，未配置时用浏览器自带阅读器（Blob）；
-		* 其它类型（含 Office）、失败、过大、演示模式：文件信息 + 下载。
+		* image / video / audio: native elements; text: the first `maxTextBytes`
+		* through a Range request; pdf: the first matching OpenList `iframe_previews`
+		* viewer, else the browser's reader through a Blob. Anything else (Office
+		* included), failures, oversized PDFs and demo mode: file info + download.
 		*/
 		const props = __props;
 		const emit = __emit;
@@ -715,17 +1078,10 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 						"aria-label": t("previous"),
 						title: t("previous"),
 						onClick: _cache[0] || (_cache[0] = ($event) => emit("prev"))
-					}, [..._cache[7] || (_cache[7] = [createElementVNode("svg", {
-						viewBox: "0 0 24 24",
-						width: "18",
-						height: "18",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2.2",
-						"stroke-linecap": "round",
-						"stroke-linejoin": "round",
-						"aria-hidden": "true"
-					}, [createElementVNode("path", { d: "m15 6-6 6 6 6" })], -1)])], 8, _hoisted_9$1),
+					}, [createVNode(_sfc_main$2, {
+						name: "previous",
+						size: 18
+					})], 8, _hoisted_9$1),
 					createElementVNode("span", _hoisted_10$1, toDisplayString(__props.position) + " / " + toDisplayString(__props.total), 1),
 					createElementVNode("button", {
 						class: "fl-preview-tool",
@@ -733,98 +1089,62 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 						"aria-label": t("next"),
 						title: t("next"),
 						onClick: _cache[1] || (_cache[1] = ($event) => emit("next"))
-					}, [..._cache[8] || (_cache[8] = [createElementVNode("svg", {
-						viewBox: "0 0 24 24",
-						width: "18",
-						height: "18",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2.2",
-						"stroke-linecap": "round",
-						"stroke-linejoin": "round",
-						"aria-hidden": "true"
-					}, [createElementVNode("path", { d: "m9 6 6 6-6 6" })], -1)])], 8, _hoisted_11$1)
+					}, [createVNode(_sfc_main$2, {
+						name: "next",
+						size: 18
+					})], 8, _hoisted_11$1)
 				], 64)) : createCommentVNode("v-if", true), mode.value === "image" && !busy.value ? (openBlock(), createElementBlock(Fragment, { key: 1 }, [createElementVNode("button", {
 					class: "fl-preview-tool fl-preview-rotate",
 					type: "button",
 					"aria-label": t("rotate"),
 					title: t("rotate"),
 					onClick: _cache[2] || (_cache[2] = ($event) => rotation.value = (rotation.value + 90) % 360)
-				}, [..._cache[9] || (_cache[9] = [createElementVNode("svg", {
-					viewBox: "0 0 24 24",
-					width: "17",
-					height: "17",
-					fill: "none",
-					stroke: "currentColor",
-					"stroke-width": "2",
-					"stroke-linecap": "round",
-					"stroke-linejoin": "round",
-					"aria-hidden": "true"
-				}, [createElementVNode("path", { d: "M21 12a9 9 0 1 1-3-6.7" }), createElementVNode("path", { d: "M21 4v5h-5" })], -1)])], 8, _hoisted_12$1), createElementVNode("button", {
+				}, [createVNode(_sfc_main$2, {
+					name: "refresh",
+					size: 17
+				})], 8, _hoisted_12$1), createElementVNode("button", {
 					class: "fl-preview-tool fl-preview-zoom",
 					type: "button",
 					"aria-pressed": actualSize.value,
 					"aria-label": t("actualSize"),
 					title: t("actualSize"),
 					onClick: _cache[3] || (_cache[3] = ($event) => actualSize.value = !actualSize.value)
-				}, [(openBlock(), createElementBlock("svg", _hoisted_14$1, [
-					_cache[10] || (_cache[10] = createElementVNode("circle", {
-						cx: "11",
-						cy: "11",
-						r: "7"
-					}, null, -1)),
-					_cache[11] || (_cache[11] = createElementVNode("path", { d: "m20 20-3.5-3.5" }, null, -1)),
-					!actualSize.value ? (openBlock(), createElementBlock("path", _hoisted_15$1)) : (openBlock(), createElementBlock("path", _hoisted_16$1))
-				]))], 8, _hoisted_13$1)], 64)) : createCommentVNode("v-if", true)])) : createCommentVNode("v-if", true),
-				createElementVNode("div", _hoisted_17$1, [!__props.demo ? (openBlock(), createElementBlock("button", {
+				}, [createVNode(_sfc_main$2, {
+					name: actualSize.value ? "zoomOut" : "zoomIn",
+					size: 17
+				}, null, 8, ["name"])], 8, _hoisted_13$1)], 64)) : createCommentVNode("v-if", true)])) : createCommentVNode("v-if", true),
+				createElementVNode("div", _hoisted_14$1, [!__props.demo ? (openBlock(), createElementBlock("button", {
 					key: 0,
 					class: "fl-preview-tool fl-preview-download",
 					type: "button",
 					"aria-label": t("download"),
 					title: t("download"),
 					onClick: _cache[4] || (_cache[4] = ($event) => emit("download"))
-				}, [..._cache[12] || (_cache[12] = [createElementVNode("svg", {
-					viewBox: "0 0 24 24",
-					width: "17",
-					height: "17",
-					fill: "none",
-					stroke: "currentColor",
-					"stroke-width": "2",
-					"stroke-linecap": "round",
-					"stroke-linejoin": "round",
-					"aria-hidden": "true"
-				}, [
-					createElementVNode("path", { d: "M12 3v12" }),
-					createElementVNode("path", { d: "m7 10 5 5 5-5" }),
-					createElementVNode("path", { d: "M5 21h14" })
-				], -1)])], 8, _hoisted_18$1)) : createCommentVNode("v-if", true), createElementVNode("button", {
+				}, [createVNode(_sfc_main$2, {
+					name: "download",
+					size: 17
+				})], 8, _hoisted_15$1)) : createCommentVNode("v-if", true), createElementVNode("button", {
 					class: "fl-preview-tool fl-preview-close",
 					type: "button",
 					autofocus: "",
 					"aria-label": t("close"),
 					title: t("close"),
 					onClick: _cache[5] || (_cache[5] = ($event) => emit("close"))
-				}, [..._cache[13] || (_cache[13] = [createElementVNode("svg", {
-					viewBox: "0 0 24 24",
-					width: "18",
-					height: "18",
-					fill: "none",
-					stroke: "currentColor",
-					"stroke-width": "2.2",
-					"stroke-linecap": "round",
-					"aria-hidden": "true"
-				}, [createElementVNode("path", { d: "M6 6l12 12" }), createElementVNode("path", { d: "M18 6 6 18" })], -1)])], 8, _hoisted_19$1)])
+				}, [createVNode(_sfc_main$2, {
+					name: "close",
+					size: 18
+				})], 8, _hoisted_16$1)])
 			]), createElementVNode("div", {
 				class: "fl-preview-body",
 				"data-mode": busy.value ? "loading" : mode.value
-			}, [busy.value ? (openBlock(), createElementBlock("div", _hoisted_21$1, toDisplayString(t("loading")), 1)) : mode.value === "image" ? (openBlock(), createElementBlock("img", {
+			}, [busy.value ? (openBlock(), createElementBlock("div", _hoisted_18$1, toDisplayString(t("loading")), 1)) : mode.value === "image" ? (openBlock(), createElementBlock("img", {
 				key: 1,
 				class: normalizeClass(["fl-preview-image", { "fl-preview-actual": actualSize.value }]),
 				src: __props.src,
 				alt: __props.file.name,
 				style: normalizeStyle({ transform: rotation.value ? `rotate(${rotation.value}deg)` : void 0 }),
 				onError: markFailed
-			}, null, 46, _hoisted_22$1)) : mode.value === "video" ? (openBlock(), createElementBlock("video", {
+			}, null, 46, _hoisted_19$1)) : mode.value === "video" ? (openBlock(), createElementBlock("video", {
 				key: 2,
 				class: "fl-preview-video",
 				src: __props.src,
@@ -832,189 +1152,421 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 				playsinline: "",
 				preload: "metadata",
 				onError: markFailed
-			}, null, 40, _hoisted_23$1)) : mode.value === "audio" ? (openBlock(), createElementBlock("audio", {
+			}, null, 40, _hoisted_20$1)) : mode.value === "audio" ? (openBlock(), createElementBlock("audio", {
 				key: 3,
 				class: "fl-preview-audio",
 				src: __props.src,
 				controls: "",
 				preload: "metadata",
 				onError: markFailed
-			}, null, 40, _hoisted_24$1)) : mode.value === "text" ? (openBlock(), createElementBlock("div", _hoisted_25$1, [truncated.value ? (openBlock(), createElementBlock("p", _hoisted_26$1, toDisplayString(t("textTruncated", { size: unref(formatSize)(__props.maxTextBytes) })), 1)) : createCommentVNode("v-if", true), createElementVNode("pre", null, toDisplayString(textContent.value), 1)])) : mode.value === "pdf" ? (openBlock(), createElementBlock("iframe", {
+			}, null, 40, _hoisted_21$1)) : mode.value === "text" ? (openBlock(), createElementBlock("div", _hoisted_22$1, [truncated.value ? (openBlock(), createElementBlock("p", _hoisted_23$1, toDisplayString(t("textTruncated", { size: unref(formatSize)(__props.maxTextBytes) })), 1)) : createCommentVNode("v-if", true), createElementVNode("pre", null, toDisplayString(textContent.value), 1)])) : mode.value === "pdf" ? (openBlock(), createElementBlock("iframe", {
 				key: 5,
 				class: "fl-preview-frame",
 				src: __props.viewer || blobUrl.value,
 				title: __props.file.name
-			}, null, 8, _hoisted_27$1)) : (openBlock(), createElementBlock("div", _hoisted_28$1, [
+			}, null, 8, _hoisted_24$1)) : (openBlock(), createElementBlock("div", _hoisted_25$1, [
 				createElementVNode("span", {
 					class: "fl-type fl-preview-badge",
 					"data-kind": unref(fileKind)(__props.file.name),
 					"aria-hidden": "true"
-				}, toDisplayString(unref(extOf)(__props.file.name) || "FILE"), 9, _hoisted_29$1),
-				createElementVNode("p", _hoisted_30$1, toDisplayString(infoMessage.value), 1),
+				}, toDisplayString(unref(extOf)(__props.file.name) || "FILE"), 9, _hoisted_26$1),
+				createElementVNode("p", _hoisted_27$1, toDisplayString(infoMessage.value), 1),
 				!__props.demo ? (openBlock(), createElementBlock("button", {
 					key: 0,
 					class: "fl-btn fl-btn-primary",
 					type: "button",
 					onClick: _cache[6] || (_cache[6] = ($event) => emit("download"))
-				}, [_cache[14] || (_cache[14] = createElementVNode("svg", {
-					viewBox: "0 0 24 24",
-					width: "15",
-					height: "15",
-					fill: "none",
-					stroke: "currentColor",
-					"stroke-width": "2.2",
-					"stroke-linecap": "round",
-					"stroke-linejoin": "round",
-					"aria-hidden": "true"
-				}, [
-					createElementVNode("path", { d: "M12 3v12" }),
-					createElementVNode("path", { d: "m7 10 5 5 5-5" }),
-					createElementVNode("path", { d: "M5 21h14" })
-				], -1)), createTextVNode(" " + toDisplayString(t("download")), 1)])) : createCommentVNode("v-if", true)
-			]))], 8, _hoisted_20$1)])) : createCommentVNode("v-if", true)], 40, _hoisted_1$1);
+				}, [createVNode(_sfc_main$2, {
+					name: "download",
+					size: 15
+				}), createTextVNode(" " + toDisplayString(t("download")), 1)])) : createCommentVNode("v-if", true)
+			]))], 8, _hoisted_17$1)])) : createCommentVNode("v-if", true)], 40, _hoisted_1$1);
 		};
 	}
 });
+// src/client/tree.ts
+function newLock(prompting = false, error = "") {
+	return {
+		prompting,
+		input: "",
+		error,
+		remember: false,
+		busy: false
+	};
+}
+function toNodes(items, parent, password) {
+	return items.map((item) => ({
+		...item,
+		path: joinPath(parent.path, item.name),
+		depth: parent.depth + 1,
+		expanded: false,
+		loaded: false,
+		loading: false,
+		children: [],
+		password,
+		zipPath: [...parent.zipPath, item.name]
+	}));
+}
+function sortTree(nodes, key, ascending) {
+	nodes.sort((a, b) => compareNodes(a, b, key, ascending));
+	for (const node of nodes) if (node.children.length) sortTree(node.children, key, ascending);
+}
+/** Loaded files at or under a node. */
+function descendantFiles(node) {
+	return node.is_dir ? node.children.flatMap(descendantFiles) : [node];
+}
+function expandedPathsOf(nodes, out = /* @__PURE__ */ new Set()) {
+	for (const node of nodes) if (node.is_dir && node.expanded) {
+		out.add(node.path);
+		expandedPathsOf(node.children, out);
+	}
+	return out;
+}
+/** Last path segment, for labels. */
+function sourceName(path) {
+	return path.split("/").filter(Boolean).pop() || path;
+}
+/** Loaded file count, size and selected count for every folder, in one pass. */
+function folderStats(roots, selected) {
+	const stats = /* @__PURE__ */ new Map();
+	const walk = (node) => {
+		if (!node.is_dir) return {
+			files: 1,
+			bytes: totalSize([node]),
+			selected: selected.has(node.path) ? 1 : 0
+		};
+		const total = {
+			files: 0,
+			bytes: 0,
+			selected: 0
+		};
+		for (const child of node.children) {
+			const part = walk(child);
+			total.files += part.files;
+			total.bytes += part.bytes;
+			total.selected += part.selected;
+		}
+		stats.set(node.path, total);
+		return total;
+	};
+	roots.forEach(walk);
+	return stats;
+}
+// src/client/passwords.ts
+/**
+* Folder passwords remembered for the current browser tab.
+*
+* Stored in `sessionStorage`, so they live only in this tab and are gone when
+* it closes. Keyed by OpenList base URL, then by folder path; a remembered
+* folder also covers its sub-folders. Every access is guarded: private mode
+* or blocked storage simply means nothing is remembered.
+*/
+const PREFIX = "vitepress-plugin-filelist:passwords:";
+function store() {
+	try {
+		return typeof sessionStorage === "undefined" ? null : sessionStorage;
+	} catch {
+		return null;
+	}
+}
+function read(base) {
+	try {
+		const raw = store()?.getItem(PREFIX + base);
+		const parsed = raw ? JSON.parse(raw) : {};
+		return parsed && typeof parsed === "object" ? parsed : {};
+	} catch {
+		return {};
+	}
+}
+function write(base, map) {
+	try {
+		const target = store();
+		if (!target) return;
+		if (Object.keys(map).length) target.setItem(PREFIX + base, JSON.stringify(map));
+		else target.removeItem(PREFIX + base);
+	} catch {}
+}
+function normalise(path) {
+	return path.replace(/\/+$/, "") || "/";
+}
+/** The closest remembered folder at or above `path`, if any. */
+function findRememberedPassword(base, path) {
+	let best = null;
+	for (const [folder, password] of Object.entries(read(base))) {
+		if (typeof password !== "string" || !isWithin(path, folder)) continue;
+		if (!best || folder.length > best.path.length) best = {
+			path: folder,
+			password
+		};
+	}
+	return best;
+}
+function rememberFolderPassword(base, path, password) {
+	write(base, {
+		...read(base),
+		[normalise(path)]: password
+	});
+}
+function forgetFolderPassword(base, path) {
+	const map = read(base);
+	delete map[normalise(path)];
+	write(base, map);
+}
+/** Folders with a remembered password, for showing the "remembered" tag. */
+function rememberedFolders(base) {
+	return Object.keys(read(base));
+}
+// src/client/usePasswords.ts
+/**
+* The one place that decides which folder password to send.
+*
+* Order: typed on this page for this exact folder → the item's own password
+* (site-configured, or inherited from the folder it was listed with) → typed
+* for an enclosing folder → remembered in this tab → the component default.
+*/
+function usePasswords(options) {
+	/** Typed on this page; not necessarily remembered. Survives refreshes. */
+	const typed = /* @__PURE__ */ new Map();
+	/** Remembered folders, mirrored from sessionStorage so templates react. */
+	const remembered = ref(/* @__PURE__ */ new Set());
+	function sync() {
+		remembered.value = new Set(options.enabled() ? rememberedFolders(options.scope()) : []);
+	}
+	function typedAbove(path) {
+		let best = "";
+		let bestFolder = "";
+		for (const [folder, password] of typed) if (isWithin(path, folder) && folder.length > bestFolder.length) {
+			best = password;
+			bestFolder = folder;
+		}
+		return best;
+	}
+	function resolve(path, own = "") {
+		const exact = typed.get(path);
+		if (exact) return { password: exact };
+		if (own) return { password: own };
+		const above = typedAbove(path);
+		if (above) return { password: above };
+		const stored = options.enabled() ? findRememberedPassword(options.scope(), path) : null;
+		if (stored) return {
+			password: stored.password,
+			rememberedAt: stored.path
+		};
+		return { password: options.fallback() };
+	}
+	/** A password worked: keep it for this page, and in this tab when asked. */
+	function accept(path, password, remember) {
+		typed.set(path, password);
+		if (remember && options.enabled()) {
+			rememberFolderPassword(options.scope(), path, password);
+			sync();
+		}
+	}
+	function forget(path) {
+		typed.delete(path);
+		forgetFolderPassword(options.scope(), path);
+		sync();
+	}
+	/** A remembered password stopped working: drop it. Returns whether one was dropped. */
+	function dropStale(rememberedAt) {
+		if (!rememberedAt) return false;
+		forgetFolderPassword(options.scope(), rememberedAt);
+		sync();
+		return true;
+	}
+	return {
+		remembered,
+		sync,
+		resolve,
+		accept,
+		forget,
+		dropStale
+	};
+}
 // src/client/FileList.vue
-const _hoisted_1 = { class: "fl-bar" };
-const _hoisted_2 = {
+const _hoisted_1 = ["aria-busy"];
+const _hoisted_2 = { class: "fl-bar" };
+const _hoisted_3 = {
 	key: 0,
 	class: "fl-selection",
 	role: "status"
 };
-const _hoisted_3 = { class: "fl-selection-count" };
-const _hoisted_4 = { class: "fl-selection-size" };
-const _hoisted_5 = {
+const _hoisted_4 = { class: "fl-selection-count" };
+const _hoisted_5 = { class: "fl-selection-size" };
+const _hoisted_6 = {
 	key: 1,
 	class: "fl-title"
 };
-const _hoisted_6 = { class: "fl-title-text" };
-const _hoisted_7 = {
+const _hoisted_7 = { class: "fl-title-text" };
+const _hoisted_8 = {
 	key: 0,
 	class: "fl-demo-badge"
 };
-const _hoisted_8 = ["aria-label", "title"];
-const _hoisted_9 = { class: "fl-clear-text" };
-const _hoisted_10 = { class: "fl-tools" };
-const _hoisted_11 = { class: "fl-search" };
-const _hoisted_12 = ["placeholder", "aria-label"];
-const _hoisted_13 = ["aria-label", "title"];
-const _hoisted_14 = ["disabled"];
-const _hoisted_15 = {
+const _hoisted_9 = ["aria-label", "title"];
+const _hoisted_10 = { class: "fl-clear-text" };
+const _hoisted_11 = { class: "fl-tools" };
+const _hoisted_12 = { class: "fl-search" };
+const _hoisted_13 = ["placeholder", "aria-label"];
+const _hoisted_14 = [
+	"disabled",
+	"aria-label",
+	"title"
+];
+const _hoisted_15 = ["disabled"];
+const _hoisted_16 = { class: "fl-row fl-head" };
+const _hoisted_17 = {
 	key: 0,
-	class: "fl-password"
+	class: "fl-progress",
+	"aria-hidden": "true"
 };
-const _hoisted_16 = ["placeholder", "aria-label"];
-const _hoisted_17 = { class: "fl-row fl-head" };
 const _hoisted_18 = { class: "fl-cell fl-cell-check" };
 const _hoisted_19 = [
 	"aria-label",
 	"checked",
 	".indeterminate"
 ];
-const _hoisted_20 = { class: "fl-cell fl-cell-name" };
-const _hoisted_21 = ["aria-sort"];
-const _hoisted_22 = {
+const _hoisted_20 = ["aria-sort", "onClick"];
+const _hoisted_21 = {
 	class: "fl-sort",
 	"aria-hidden": "true"
 };
-const _hoisted_23 = { class: "fl-cell fl-cell-size" };
+const _hoisted_22 = { class: "fl-cell fl-cell-op" };
+const _hoisted_23 = { class: "fl-sort-select" };
 const _hoisted_24 = {
-	class: "fl-sort",
-	"aria-hidden": "true"
-};
-const _hoisted_25 = { class: "fl-cell fl-cell-date" };
-const _hoisted_26 = {
-	class: "fl-sort",
-	"aria-hidden": "true"
-};
-const _hoisted_27 = { class: "fl-cell fl-cell-op" };
-const _hoisted_28 = { class: "fl-sort-select" };
-const _hoisted_29 = {
 	class: "fl-sort-current",
 	"aria-hidden": "true"
 };
-const _hoisted_30 = ["aria-label"];
-const _hoisted_31 = ["value"];
-const _hoisted_32 = {
-	key: 1,
+const _hoisted_25 = ["aria-label"];
+const _hoisted_26 = ["value"];
+const _hoisted_27 = {
+	key: 0,
 	class: "fl-status"
 };
-const _hoisted_33 = {
+const _hoisted_28 = ["for"];
+const _hoisted_29 = ["id"];
+const _hoisted_30 = { class: "fl-unlock" };
+const _hoisted_31 = [
+	"id",
+	"data-unlock",
+	"placeholder",
+	"aria-invalid",
+	"aria-describedby"
+];
+const _hoisted_32 = [
+	"aria-pressed",
+	"aria-label",
+	"title"
+];
+const _hoisted_33 = ["disabled"];
+const _hoisted_34 = {
 	key: 2,
 	class: "fl-status fl-error"
 };
-const _hoisted_34 = {
+const _hoisted_35 = {
 	key: 0,
 	class: "fl-hint"
 };
-const _hoisted_35 = {
+const _hoisted_36 = {
 	key: 1,
 	class: "fl-hint"
 };
-const _hoisted_36 = {
+const _hoisted_37 = {
 	key: 3,
 	class: "fl-status"
 };
-const _hoisted_37 = { class: "fl-cell fl-cell-check" };
-const _hoisted_38 = [
+const _hoisted_38 = { class: "fl-cell fl-cell-check" };
+const _hoisted_39 = [
+	"disabled",
 	"aria-label",
 	"checked",
 	".indeterminate",
 	"onChange"
 ];
-const _hoisted_39 = ["title"];
-const _hoisted_40 = [
+const _hoisted_40 = ["title"];
+const _hoisted_41 = [
+	"aria-label",
+	"title",
+	"onClick"
+];
+const _hoisted_42 = [
 	"aria-label",
 	"aria-expanded",
 	"onClick"
 ];
-const _hoisted_41 = {
-	key: 1,
+const _hoisted_43 = {
+	key: 2,
 	class: "fl-arrow-placeholder",
 	"aria-hidden": "true"
 };
-const _hoisted_42 = {
-	key: 2,
+const _hoisted_44 = {
+	key: 3,
 	class: "fl-folder-icon",
 	viewBox: "0 0 24 24",
 	width: "18",
 	height: "18",
 	"aria-hidden": "true"
 };
-const _hoisted_43 = ["data-kind"];
-const _hoisted_44 = { class: "fl-label" };
-const _hoisted_45 = ["onClick"];
-const _hoisted_46 = { class: "fl-meta" };
-const _hoisted_47 = {
-	key: 4,
+const _hoisted_45 = ["data-kind"];
+const _hoisted_46 = { class: "fl-label" };
+const _hoisted_47 = ["onClick"];
+const _hoisted_48 = { class: "fl-meta" };
+const _hoisted_49 = {
+	key: 5,
 	class: "fl-count"
 };
-const _hoisted_48 = {
-	key: 5,
+const _hoisted_50 = ["id"];
+const _hoisted_51 = [
+	"aria-label",
+	"title",
+	"onClick"
+];
+const _hoisted_52 = {
+	key: 8,
 	class: "fl-loading",
 	"aria-hidden": "true"
 };
-const _hoisted_49 = { class: "fl-cell fl-cell-size" };
-const _hoisted_50 = { class: "fl-cell fl-cell-date" };
-const _hoisted_51 = { class: "fl-cell fl-cell-op" };
-const _hoisted_52 = [
+const _hoisted_53 = ["onSubmit", "onKeydown"];
+const _hoisted_54 = [
+	"onUpdate:modelValue",
+	"data-unlock",
+	"placeholder",
+	"aria-label",
+	"aria-invalid",
+	"aria-describedby"
+];
+const _hoisted_55 = [
+	"aria-pressed",
+	"aria-label",
+	"title",
+	"onClick"
+];
+const _hoisted_56 = ["disabled"];
+const _hoisted_57 = [
+	"aria-label",
+	"title",
+	"onClick"
+];
+const _hoisted_58 = { class: "fl-cell fl-cell-size" };
+const _hoisted_59 = { class: "fl-cell fl-cell-date" };
+const _hoisted_60 = { class: "fl-cell fl-cell-op" };
+const _hoisted_61 = ["aria-label", "onClick"];
+const _hoisted_62 = [
 	"aria-label",
 	"aria-expanded",
 	"onClick"
 ];
-const _hoisted_53 = [
+const _hoisted_63 = [
 	"aria-label",
 	"title",
 	"onClick"
 ];
-const _hoisted_54 = [
+const _hoisted_64 = [
 	"aria-label",
 	"title",
 	"onClick"
 ];
-const _hoisted_55 = { class: "fl-foot" };
-const _hoisted_56 = {
+const _hoisted_65 = { class: "fl-foot" };
+const _hoisted_66 = {
 	key: 4,
 	class: "fl-toast",
 	role: "status"
@@ -1032,391 +1584,365 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		token: { default: "" },
 		password: { default: "" },
 		title: { default: "" },
+		rememberPassword: {
+			type: Boolean,
+			default: true
+		},
 		locale: { default: "zh-CN" },
 		labels: {}
 	},
 	setup(__props) {
 		/**
-		* FileList.vue —— VitePress 网盘文件列表（界面沿用 FileList，数据来自 OpenList）
-		*
-		* 用法：
-		*   <FileList base="https://pan.example.com" path="/课程资料" />
-		*   <FileList />  // 演示模式
+		* OpenList file browser: folder tree, batch ZIP, folder passwords and an
+		* in-page preview. OpenList access is in api.ts (demo.ts when `base` is empty),
+		* password choice in usePasswords.ts, tree helpers in tree.ts and downloads in
+		* download.ts; this component wires them to the UI.
 		*/
 		const props = __props;
 		const text = computed(() => resolveLabels(props.locale, props.labels));
 		function t(key, values) {
 			return formatLabel(text.value[key], values);
 		}
+		/** Prefix for element ids, unique per component instance. */
+		const uid = useId();
 		const demo = computed(() => !props.base);
-		const baseUrl = computed(() => props.base.replace(/\/+$/, ""));
-		const activePassword = ref(props.password);
+		const api = computed(() => demo.value ? createDemoApi() : createOpenListApi(props.base, props.token));
+		const canRemember = computed(() => props.rememberPassword !== false);
+		const passwords = usePasswords({
+			scope: () => props.base.replace(/\/+$/, "") || "demo",
+			enabled: () => canRemember.value,
+			fallback: () => props.password
+		});
+		const remembered = passwords.remembered;
+		const rootEl = ref();
 		const roots = ref([]);
 		const loadingRoot = ref(false);
 		const errorMsg = ref("");
-		const needsPassword = ref(false);
-		const passwordInput = ref("");
+		const refreshing = ref(false);
+		let refreshSeq = 0;
+		/** Single-path mode: the listed folder itself needs a password. */
+		const rootLock = ref(null);
 		const keyword = ref("");
 		const selected = ref(/* @__PURE__ */ new Set());
 		const toast = ref("");
 		const sortKey = ref("name");
 		const sortAsc = ref(true);
 		const siteTitle = ref("");
-		/** OpenList's public `iframe_previews` setting (JSON text). */
 		const iframePreviews = ref("");
 		const batchBusy = ref(false);
 		const batchProgress = ref(0);
-		const downloadCache = /* @__PURE__ */ new Map();
 		let toastTimer;
-		function showToast(msg) {
-			toast.value = msg;
+		/** The folder listed in single-path mode, as the parent of the top rows. */
+		const listedFolder = computed(() => ({
+			path: props.path,
+			depth: -1,
+			zipPath: []
+		}));
+		function showToast(message) {
+			toast.value = message;
 			clearTimeout(toastTimer);
 			toastTimer = setTimeout(() => toast.value = "", 3200);
 		}
-		function errorText(error) {
-			return error instanceof Error ? error.message : String(error);
+		/** A failure toast; browser network errors are usually CORS, so say where to look. */
+		function failureMessage(key, error) {
+			const message = t(key, { message: errorText(error) });
+			return isNetworkError(error) ? `${message} ${t("corsHint")}` : message;
 		}
-		function isPasswordError(error) {
-			return /password|密码/i.test(errorText(error));
+		function sortNodes(nodes) {
+			sortTree(nodes, sortKey.value, sortAsc.value);
 		}
-		const DEMO_TREE = {
-			"/": [
-				{
-					name: "assignments",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "exams",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "materials",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "notes",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "slides",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				}
-			],
-			"/assignments": [{
-				name: "线代作业参考答案",
-				size: 0,
-				is_dir: true,
-				modified: "2026-10-12T21:30:00+08:00"
-			}, {
-				name: "作业提交说明.pdf",
-				size: 186432,
-				is_dir: false,
-				modified: "2026-09-03T10:15:00+08:00"
-			}],
-			"/assignments/线代作业参考答案": [
-				{
-					name: "第1次作业参考答案.doc",
-					size: 412672,
-					is_dir: false,
-					modified: "2026-09-15T22:41:00+08:00"
-				},
-				{
-					name: "第2次作业参考答案.pdf",
-					size: 1048576,
-					is_dir: false,
-					modified: "2026-09-22T22:03:00+08:00"
-				},
-				{
-					name: "第3次作业参考答案.pdf",
-					size: 986112,
-					is_dir: false,
-					modified: "2026-09-29T21:57:00+08:00"
-				},
-				{
-					name: "第4次作业参考答案.pdf",
-					size: 1572864,
-					is_dir: false,
-					modified: "2026-10-13T22:10:00+08:00"
-				}
-			],
-			"/exams": [
-				{
-					name: "2023 期末试题和答案.pdf",
-					size: 2345678,
-					is_dir: false,
-					modified: "2025-01-18T09:20:00+08:00"
-				},
-				{
-					name: "2024 期中试题.pdf",
-					size: 1234567,
-					is_dir: false,
-					modified: "2025-11-02T14:08:00+08:00"
-				},
-				{
-					name: "代数与几何-多年合集-试题和答案.pdf",
-					size: 18874368,
-					is_dir: false,
-					modified: "2025-01-18T09:25:00+08:00"
-				}
-			],
-			"/materials": [
-				{
-					name: "线性代数及其应用（Lay 第5版）.pdf",
-					size: 48231424,
-					is_dir: false,
-					modified: "2024-07-29T16:44:00+08:00"
-				},
-				{
-					name: "Introduction to Linear Algebra（Strang）.pdf",
-					size: 36700160,
-					is_dir: false,
-					modified: "2024-07-29T16:50:00+08:00"
-				},
-				{
-					name: "疑难解答与习题指导.zip",
-					size: 9437184,
-					is_dir: false,
-					modified: "2024-08-05T11:12:00+08:00"
-				}
-			],
-			"/notes": [{
-				name: "线性代数笔记（106页）.pdf",
-				size: 12582912,
-				is_dir: false,
-				modified: "2025-06-30T20:31:00+08:00"
-			}, {
-				name: "期末复习提纲.docx",
-				size: 245760,
-				is_dir: false,
-				modified: "2026-01-05T19:02:00+08:00"
-			}],
-			"/slides": [{
-				name: "第一章 行列式.pptx",
-				size: 3145728,
-				is_dir: false,
-				modified: "2026-09-08T13:26:00+08:00"
-			}, {
-				name: "第二章 矩阵.pptx",
-				size: 4194304,
-				is_dir: false,
-				modified: "2026-09-15T13:30:00+08:00"
-			}]
-		};
-		class ApiError extends Error {
-			code;
-			constructor(message, code) {
-				super(message);
-				this.code = code;
-			}
+		function focusUnlock(path) {
+			nextTick(() => {
+				rootEl.value?.querySelector(`input[data-unlock="${CSS.escape(path)}"]`)?.focus();
+			});
 		}
-		function authHeaders() {
-			return {
-				"Content-Type": "application/json",
-				...props.token ? { Authorization: props.token } : {}
-			};
+		/** Show a folder's same-row input; focus only on user actions, never on page load. */
+		function startPrompt(node, focus) {
+			node.lock ??= newLock();
+			node.lock.prompting = true;
+			if (focus) focusUnlock(node.path);
 		}
-		async function request(apiPath, body) {
-			const response = await fetch(`${baseUrl.value}${apiPath}`, {
-				method: body === void 0 ? "GET" : "POST",
-				headers: authHeaders(),
-				body: body === void 0 ? void 0 : JSON.stringify(body)
+		function cancelUnlock(lock) {
+			Object.assign(lock, {
+				prompting: false,
+				input: "",
+				error: ""
 			});
-			const payload = await response.json().catch(() => null);
-			if (!payload) throw new ApiError(`HTTP ${response.status}`, response.status);
-			if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
-			return payload.data;
-		}
-		async function listDir(path, password = activePassword.value) {
-			if (demo.value) {
-				await new Promise((resolve) => setTimeout(resolve, 220));
-				return DEMO_TREE[path] ?? [];
-			}
-			return (await request("/api/fs/list", {
-				path,
-				password,
-				page: 1,
-				per_page: 0,
-				refresh: false
-			}))?.content ?? [];
 		}
-		function absoluteUrl(raw) {
-			if (!raw) return "";
-			if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) return raw;
-			const root = baseUrl.value || (typeof window !== "undefined" ? window.location.origin : "");
-			try {
-				return new URL(raw, `${root}/`).href;
-			} catch {
-				return raw;
-			}
+		function unlockErrorText(error) {
+			if (error === "wrong") return t("passwordWrong");
+			if (error === "stale") return t("passwordStale");
+			return "";
 		}
-		async function resolveUrl(node) {
-			if (demo.value) return "";
-			if (node.raw_url) return absoluteUrl(node.raw_url);
-			const cached = downloadCache.get(node.path);
-			if (cached) return cached;
-			let url = "";
+		/**
+		* Try the typed password with `open`. On success keep it (and remember it in
+		* this tab when asked); on a wrong one clear the input and refocus it.
+		*/
+		async function tryUnlock(lock, path, open, failure) {
+			const password = lock.input;
+			if (!password || lock.busy) return false;
+			lock.busy = true;
 			try {
-				url = absoluteUrl((await request("/api/fs/get", {
-					path: node.path,
-					password: node.password || activePassword.value
-				}))?.raw_url ?? "");
-			} catch {
-				url = "";
+				await open(password);
+				passwords.accept(path, password, lock.remember);
+				return true;
+			} catch (error) {
+				if (isPasswordError(error)) {
+					Object.assign(lock, {
+						error: "wrong",
+						input: ""
+					});
+					focusUnlock(path);
+				} else showToast(failureMessage(failure, error));
+				return false;
+			} finally {
+				lock.busy = false;
 			}
-			if (!url) url = directUrl(node);
-			downloadCache.set(node.path, url);
-			return url;
-		}
-		/** OpenList's signed `/d/` download link for a file. */
-		function directUrl(node) {
-			return `${baseUrl.value}/d${encodePath(node.path)}${node.sign ? `?sign=${encodeURIComponent(node.sign)}` : ""}`;
 		}
-		async function loadSiteTitle() {
-			if (demo.value) return;
-			try {
-				const data = await request("/api/public/settings");
-				siteTitle.value = data?.site_title || data?.title || "";
-				iframePreviews.value = data?.iframe_previews || "";
-			} catch {
-				siteTitle.value = "";
-				iframePreviews.value = "";
-			}
+		async function submitUnlock(node) {
+			if (!node.lock) return;
+			if (await tryUnlock(node.lock, node.path, async (password) => {
+				if (node.unresolved) {
+					const data = await api.value.get(node.path, password);
+					const name = node.name;
+					Object.assign(node, data, {
+						name,
+						unresolved: false
+					});
+					node.zipPath = [node.is_dir ? name : data.name || node.zipPath[0]];
+				}
+				if (node.is_dir) {
+					await fetchChildren(node, password);
+					node.expanded = true;
+				}
+			}, "folderFailed")) node.lock = void 0;
 		}
-		function sortTree(nodes) {
-			nodes.sort((a, b) => compareNodes(a, b, sortKey.value, sortAsc.value));
-			for (const node of nodes) if (node.children.length) sortTree(node.children);
+		async function submitRootUnlock() {
+			if (!rootLock.value) return;
+			let nodes = [];
+			if (!await tryUnlock(rootLock.value, props.path, async (password) => {
+				nodes = await listRoot(password);
+			}, "loadFailed")) return;
+			roots.value = nodes;
+			rootLock.value = null;
+			selected.value = /* @__PURE__ */ new Set();
+			api.value.clearCache();
 		}
-		function toNodes(items, parent, depth, password = "", zipParent = []) {
-			return items.map((item) => ({
-				...item,
-				path: joinPath(parent, item.name),
-				depth,
+		/** Forget a remembered password: the folder folds up and asks again next time. */
+		function forgetPassword(node) {
+			passwords.forget(node.path);
+			Object.assign(node, {
 				expanded: false,
 				loaded: false,
-				loading: false,
 				children: [],
-				password,
-				zipPath: [...zipParent, item.name]
-			}));
-		}
-		function setSort(key) {
-			if (sortKey.value === key) sortAsc.value = !sortAsc.value;
-			else {
-				sortKey.value = key;
-				sortAsc.value = true;
-			}
-			resortAll();
+				lock: void 0
+			});
+			selected.value = new Set([...selected.value].filter((path) => !isWithin(path, node.path)));
+			api.value.clearCache(node.path);
 		}
-		function resortAll() {
-			if (props.sources.length) {
-				for (const root of roots.value) if (root.children.length) sortTree(root.children);
-			} else sortTree(roots.value);
+		async function fetchChildren(node, password) {
+			node.children = toNodes(await api.value.list(node.path, password), node, password);
+			sortNodes(node.children);
+			node.loaded = true;
 		}
-		function sourceName(path) {
-			const parts = path.split("/").filter(Boolean);
-			return parts[parts.length - 1] || path;
+		async function listRoot(password) {
+			const nodes = toNodes(await api.value.list(props.path, password), listedFolder.value, password);
+			sortNodes(nodes);
+			return nodes;
 		}
-		async function loadChildren(node) {
+		/**
+		* Load a folder's children. A password error locks the folder instead of
+		* toasting; `prompt` also shows its same-row input (and focuses it).
+		*/
+		async function loadChildren(node, prompt = false) {
 			if (node.loaded) return true;
+			if (node.lock) {
+				if (prompt) startPrompt(node, prompt === "focus");
+				return false;
+			}
 			node.loading = true;
+			const { password, rememberedAt } = passwords.resolve(node.path, node.password);
 			try {
-				node.children = toNodes(await listDir(node.path, node.password || activePassword.value), node.path, node.depth + 1, node.password, node.zipPath);
-				sortTree(node.children);
-				node.loaded = true;
+				await fetchChildren(node, password);
 				return true;
 			} catch (error) {
-				if (isPasswordError(error)) needsPassword.value = true;
-				showToast(t("folderFailed", { message: errorText(error) }));
+				if (isPasswordError(error)) {
+					node.expanded = false;
+					node.lock = newLock(false, passwords.dropStale(rememberedAt) ? "stale" : "");
+					if (prompt) startPrompt(node, prompt === "focus");
+				} else showToast(failureMessage("folderFailed", error));
 				return false;
 			} finally {
 				node.loading = false;
 			}
 		}
-		async function loadSourceRoot(source) {
+		/** When OpenList cannot tell us, guess from the name: a known file extension means a file. */
+		function looksLikeFile(path) {
+			const name = sourceName(path);
+			return fileKind(name) !== "other" || previewKind(name) !== "none";
+		}
+		async function loadSourceRoot(source, expanded) {
 			const path = source.path;
-			const password = source.password ?? "";
+			const own = source.password ?? "";
 			let item = {
 				name: sourceName(path),
 				size: 0,
-				is_dir: true,
+				is_dir: !looksLikeFile(path),
 				modified: ""
 			};
-			if (demo.value) {
-				if (/\/[^/]+\.[^/]+$/.test(path)) item = {
-					...item,
-					is_dir: false,
-					modified: "2026-09-01T08:00:00+08:00"
-				};
-			} else try {
-				const data = await request("/api/fs/get", {
-					path,
-					password: password || activePassword.value
-				});
+			let lock;
+			const { password, rememberedAt } = passwords.resolve(path, own);
+			try {
 				item = {
 					...item,
-					...data
+					...await api.value.get(path, password)
 				};
-			} catch {}
+			} catch (error) {
+				if (isPasswordError(error)) lock = newLock(expanded, passwords.dropStale(rememberedAt) ? "stale" : "");
+			}
 			const name = source.title || item.name || sourceName(path);
 			return {
 				...item,
 				name,
 				path,
 				depth: 0,
-				expanded: source.expanded ?? props.expanded,
+				expanded: expanded && !lock,
 				loaded: false,
 				loading: false,
 				children: [],
-				password,
+				password: own,
 				isRoot: true,
+				lock,
+				unresolved: !!lock,
 				zipPath: [item.is_dir ? name : item.name || sourceName(path)]
 			};
 		}
+		class RootLockedError extends Error {
+			rememberedAt;
+			constructor(rememberedAt) {
+				super("root locked");
+				this.rememberedAt = rememberedAt;
+			}
+		}
+		/**
+		* Build a fresh tree. `expandedPaths` re-opens those folders (refresh keeps
+		* what was open); without it the configured `expanded` defaults apply.
+		*/
+		async function buildTree(expandedPaths) {
+			let nodes;
+			if (props.sources.length) nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source, expandedPaths ? expandedPaths.has(source.path) : source.expanded ?? props.expanded)));
+			else {
+				const { password, rememberedAt } = passwords.resolve(props.path);
+				try {
+					nodes = await listRoot(password);
+				} catch (error) {
+					throw isPasswordError(error) ? new RootLockedError(rememberedAt) : error;
+				}
+			}
+			const open = async (list) => {
+				for (const node of list) {
+					const wanted = node.expanded || expandedPaths?.has(node.path);
+					if (!node.is_dir || node.lock || !wanted) continue;
+					node.expanded = await loadChildren(node, "show");
+					if (node.expanded && expandedPaths) await open(node.children);
+				}
+			};
+			await open(nodes);
+			return nodes;
+		}
+		function lockRoot(error, fallback) {
+			roots.value = [];
+			selected.value = /* @__PURE__ */ new Set();
+			rootLock.value = newLock(true, passwords.dropStale(error.rememberedAt) ? "stale" : fallback);
+		}
+		/** First load, or a retry after an error: shows the loading state. */
 		async function loadRoot() {
+			refreshSeq += 1;
+			refreshing.value = false;
 			loadingRoot.value = true;
 			errorMsg.value = "";
-			needsPassword.value = false;
 			try {
-				if (props.sources.length) {
-					const nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source)));
-					roots.value = nodes;
-					for (const node of roots.value) if (node.is_dir && node.expanded) node.expanded = await loadChildren(node);
-					selected.value = /* @__PURE__ */ new Set();
-					downloadCache.clear();
-					return;
-				}
-				const items = await listDir(props.path);
-				roots.value = toNodes(items, props.path, 0, activePassword.value);
-				sortTree(roots.value);
+				roots.value = await buildTree();
+				rootLock.value = null;
 				selected.value = /* @__PURE__ */ new Set();
-				downloadCache.clear();
+				api.value.clearCache();
 			} catch (error) {
-				const message = errorText(error);
-				if (isPasswordError(error)) needsPassword.value = true;
-				else errorMsg.value = message;
+				if (error instanceof RootLockedError) lockRoot(error, "");
+				else errorMsg.value = errorText(error);
 			} finally {
 				loadingRoot.value = false;
 			}
 		}
+		/**
+		* Refresh keeps the old rows in place (dimmed) until the new tree is ready, then
+		* swaps it in. Open folders stay open; selected files that still exist stay selected.
+		*/
+		async function refresh() {
+			if (refreshing.value || loadingRoot.value) return;
+			if (!roots.value.length || errorMsg.value || rootLock.value) {
+				await loadRoot();
+				return;
+			}
+			const seq = ++refreshSeq;
+			refreshing.value = true;
+			try {
+				const fresh = await buildTree(expandedPathsOf(roots.value));
+				if (seq !== refreshSeq) return;
+				roots.value = fresh;
+				const existing = new Set(fresh.flatMap(descendantFiles).map((file) => file.path));
+				selected.value = new Set([...selected.value].filter((path) => existing.has(path)));
+				api.value.clearCache();
+			} catch (error) {
+				if (seq !== refreshSeq) return;
+				if (error instanceof RootLockedError) lockRoot(error, "wrong");
+				else showToast(failureMessage("refreshFailed", error));
+			} finally {
+				if (seq === refreshSeq) refreshing.value = false;
+			}
+		}
 		async function toggleExpand(node) {
+			if (node.lock) {
+				startPrompt(node, true);
+				return;
+			}
 			if (!node.is_dir) return;
 			if (node.expanded) {
 				node.expanded = false;
 				return;
 			}
-			if (!await loadChildren(node)) return;
-			node.expanded = true;
+			node.expanded = await loadChildren(node, "focus");
+		}
+		function applySort(key, ascending) {
+			sortKey.value = key;
+			sortAsc.value = ascending;
+			if (props.sources.length) roots.value.forEach((root) => sortNodes(root.children));
+			else sortNodes(roots.value);
+		}
+		function setSort(key) {
+			applySort(key, sortKey.value === key ? !sortAsc.value : true);
 		}
+		/** Compact sort control for narrow containers, where header cells are hidden. */
+		const sortOptions = computed(() => [
+			"name",
+			"size",
+			"modified"
+		].flatMap((key) => {
+			const label = t(key === "name" ? "columnName" : key === "size" ? "columnSize" : "columnDate");
+			return [{
+				value: `${key}:asc`,
+				label: `${label} ↑`
+			}, {
+				value: `${key}:desc`,
+				label: `${label} ↓`
+			}];
+		}));
+		const sortValue = computed({
+			get: () => `${sortKey.value}:${sortAsc.value ? "asc" : "desc"}`,
+			set: (value) => {
+				const [key, direction] = value.split(":");
+				applySort(key, direction !== "desc");
+			}
+		});
 		const visible = computed(() => {
 			const out = [];
 			const query = keyword.value.trim().toLowerCase();
@@ -1431,34 +1957,55 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			walk(roots.value);
 			return out;
 		});
-		function descendantFiles(node) {
-			if (!node.is_dir) return [node];
-			return node.children.flatMap(descendantFiles);
+		const stats = computed(() => folderStats(roots.value, selected.value));
+		const noStats = {
+			files: 0,
+			bytes: 0,
+			selected: 0
+		};
+		function statsOf(node) {
+			return stats.value.get(node.path) ?? noStats;
 		}
 		function isChecked(node) {
-			const files = descendantFiles(node);
-			return files.length > 0 && files.every((file) => selected.value.has(file.path));
+			if (!node.is_dir) return selected.value.has(node.path);
+			const { files, selected: hit } = statsOf(node);
+			return files > 0 && hit === files;
 		}
 		function isIndeterminate(node) {
-			const files = descendantFiles(node);
-			const hit = files.filter((file) => selected.value.has(file.path)).length;
-			return hit > 0 && hit < files.length;
+			if (!node.is_dir) return false;
+			const { files, selected: hit } = statsOf(node);
+			return hit > 0 && hit < files;
 		}
-		/** Load a directory and all of its sub-directories. */
+		/**
+		* Load a directory and all of its sub-directories. Stops at the first folder
+		* that needs a password and returns it, so nothing is silently left out.
+		*/
 		async function loadTree(node) {
-			if (!node.is_dir) return true;
-			if (!await loadChildren(node)) return false;
-			for (const child of node.children) if (child.is_dir && !await loadTree(child)) return false;
-			return true;
+			if (!node.is_dir) return { ok: true };
+			if (!await loadChildren(node)) return node.lock ? {
+				ok: false,
+				locked: node
+			} : { ok: false };
+			for (const child of node.children) {
+				if (!child.is_dir) continue;
+				const result = await loadTree(child);
+				if (!result.ok) {
+					node.expanded = true;
+					return result;
+				}
+			}
+			return { ok: true };
 		}
 		async function toggleCheck(node, event) {
 			const input = event?.target;
 			if (node.is_dir && !isChecked(node)) {
-				if (await loadTree(node)) node.expanded = true;
-				else {
+				const result = await loadTree(node);
+				if (!result.ok) {
+					if (result.locked) startPrompt(result.locked, true);
 					if (input) input.checked = isChecked(node);
 					return;
 				}
+				node.expanded = true;
 			}
 			const files = descendantFiles(node);
 			if (!files.length) {
@@ -1466,67 +2013,23 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				return;
 			}
 			const next = new Set(selected.value);
-			if (files.every((file) => next.has(file.path))) files.forEach((file) => next.delete(file.path));
-			else files.forEach((file) => next.add(file.path));
+			const adding = files.some((file) => !next.has(file.path));
+			for (const file of files) if (adding) next.add(file.path);
+			else next.delete(file.path);
 			selected.value = next;
 		}
 		const allFiles = computed(() => roots.value.flatMap(descendantFiles));
-		const allChecked = computed(() => allFiles.value.length > 0 && allFiles.value.every((file) => selected.value.has(file.path)));
-		const someChecked = computed(() => !allChecked.value && allFiles.value.some((file) => selected.value.has(file.path)));
 		const selectedFiles = computed(() => allFiles.value.filter((file) => selected.value.has(file.path)));
-		const selectedBytes = computed(() => totalSize(selectedFiles.value));
-		const loadedBytes = computed(() => totalSize(allFiles.value));
-		function clearSelection() {
-			selected.value = /* @__PURE__ */ new Set();
-		}
-		function folderFiles(node) {
-			return node.is_dir && node.loaded ? descendantFiles(node) : [];
-		}
-		/** Compact sort control for narrow containers, where header cells are hidden. */
-		const sortOptions = computed(() => [
-			"name",
-			"size",
-			"modified"
-		].flatMap((key) => {
-			const label = t(key === "name" ? "columnName" : key === "size" ? "columnSize" : "columnDate");
-			return [{
-				value: `${key}:asc`,
-				label: `${label} ↑`
-			}, {
-				value: `${key}:desc`,
-				label: `${label} ↓`
-			}];
-		}));
-		const sortValue = computed({
-			get: () => `${sortKey.value}:${sortAsc.value ? "asc" : "desc"}`,
-			set: (value) => {
-				const [key, direction] = value.split(":");
-				sortKey.value = key;
-				sortAsc.value = direction !== "desc";
-				resortAll();
-			}
-		});
+		const allChecked = computed(() => allFiles.value.length > 0 && selectedFiles.value.length === allFiles.value.length);
+		const someChecked = computed(() => !allChecked.value && selectedFiles.value.length > 0);
 		function toggleCheckAll() {
 			selected.value = allChecked.value ? /* @__PURE__ */ new Set() : new Set(allFiles.value.map((file) => file.path));
 		}
-		function triggerUrl(url) {
-			const anchor = document.createElement("a");
-			anchor.href = url;
-			anchor.target = "_blank";
-			anchor.rel = "noopener";
-			document.body.appendChild(anchor);
-			anchor.click();
-			anchor.remove();
+		function clearSelection() {
+			selected.value = /* @__PURE__ */ new Set();
 		}
-		function triggerBlob(blob, name) {
-			const href = URL.createObjectURL(blob);
-			const anchor = document.createElement("a");
-			anchor.href = href;
-			anchor.download = name;
-			document.body.appendChild(anchor);
-			anchor.click();
-			anchor.remove();
-			URL.revokeObjectURL(href);
+		function fileUrlOf(node) {
+			return api.value.fileUrl(node, passwords.resolve(node.path, node.password).password);
 		}
 		async function download(node) {
 			if (node.is_dir) return;
@@ -1535,11 +2038,29 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				return;
 			}
 			try {
-				triggerUrl(await resolveUrl(node));
+				openUrl(await fileUrlOf(node));
 			} catch (error) {
 				showToast(t("downloadFailed", { message: errorText(error) }));
 			}
 		}
+		async function batchDownload() {
+			const files = selectedFiles.value;
+			if (!files.length) return;
+			if (demo.value) {
+				showToast(t("demoBatch", { count: files.length }));
+				return;
+			}
+			batchBusy.value = true;
+			batchProgress.value = 0;
+			try {
+				saveBlob(await zipFiles(files, fileUrlOf, (percent) => batchProgress.value = percent), zipFileName(props.title || t("defaultZip")));
+				selected.value = /* @__PURE__ */ new Set();
+			} catch (error) {
+				showToast(t("batchFailed", { message: errorText(error) }));
+			} finally {
+				batchBusy.value = false;
+			}
+		}
 		/** Only types the dialog can actually render get a preview button. */
 		function canPreview(node) {
 			return !node.is_dir && previewKind(node.name) !== "none";
@@ -1563,17 +2084,15 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			if (demo.value || !canPreview(node)) return;
 			previewResolving.value = true;
 			try {
-				const url = await resolveUrl(node);
+				const url = await fileUrlOf(node);
 				if (seq !== previewSeq) return;
 				previewSrc.value = url;
-				if (previewKind(node.name) === "pdf") {
-					const viewer = iframePreviewsFor(node.name, iframePreviews.value)[0];
-					if (viewer) previewViewer.value = fillPreviewUrl(viewer.scheme, {
-						name: node.name,
-						rawUrl: url,
-						downloadUrl: directUrl(node)
-					});
-				}
+				const viewer = previewKind(node.name) === "pdf" ? iframePreviewsFor(node.name, iframePreviews.value)[0] : void 0;
+				if (viewer) previewViewer.value = fillPreviewUrl(viewer.scheme, {
+					name: node.name,
+					rawUrl: url,
+					downloadUrl: api.value.directUrl(node)
+				});
 			} catch (error) {
 				if (seq === previewSeq) previewError.value = errorText(error);
 			} finally {
@@ -1589,54 +2108,14 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			previewSeq += 1;
 			previewNode.value = null;
 		}
-		async function batchDownload() {
-			const files = allFiles.value.filter((file) => selected.value.has(file.path));
-			if (!files.length) return;
-			if (demo.value) {
-				showToast(t("demoBatch", { count: files.length }));
-				return;
-			}
-			batchBusy.value = true;
-			batchProgress.value = 0;
-			try {
-				const entries = {};
-				const usedNames = /* @__PURE__ */ new Set();
-				const queue = [...files];
-				let done = 0;
-				const worker = async () => {
-					while (queue.length) {
-						const file = queue.shift();
-						if (!file) break;
-						const response = await fetch(await resolveUrl(file));
-						if (!response.ok) throw new Error(`${file.name}：HTTP ${response.status}`);
-						entries[uniqueEntryName(zipEntryName(file.zipPath), usedNames)] = new Uint8Array(await response.arrayBuffer());
-						done += 1;
-						batchProgress.value = Math.round(done / files.length * 90);
-					}
-				};
-				await Promise.all(Array.from({ length: Math.min(3, files.length) }, () => worker()));
-				const { zip } = await import("fflate");
-				const data = await new Promise((resolve, reject) => {
-					zip(entries, (error, output) => error ? reject(error) : resolve(output));
-				});
-				batchProgress.value = 100;
-				triggerBlob(new Blob([data], { type: "application/zip" }), `${(props.title || t("defaultZip")).replace(/[\\/:*?"<>|]/g, "_")}.zip`);
-				selected.value = /* @__PURE__ */ new Set();
-			} catch (error) {
-				showToast(t("batchFailed", { message: errorText(error) }));
-			} finally {
-				batchBusy.value = false;
-			}
-		}
-		function submitPassword() {
-			activePassword.value = passwordInput.value;
-			downloadCache.clear();
-			loadRoot();
-		}
 		const displayTitle = computed(() => props.title || siteTitle.value || (props.path === "/" ? t("allFiles") : props.path));
+		async function loadSettings() {
+			const settings = await api.value.settings();
+			siteTitle.value = settings.title;
+			iframePreviews.value = settings.iframePreviews;
+		}
 		const stickyTop = ref(0);
 		function measureStickyTop() {
-			if (typeof document === "undefined") return;
 			let top = 0;
 			for (const el of document.querySelectorAll(".VPNav, .VPLocalNav")) {
 				const style = getComputedStyle(el);
@@ -1646,8 +2125,9 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			stickyTop.value = top;
 		}
 		onMounted(() => {
+			passwords.sync();
 			loadRoot();
-			loadSiteTitle();
+			loadSettings();
 			measureStickyTop();
 			window.addEventListener("resize", measureStickyTop, { passive: true });
 		});
@@ -1657,11 +2137,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		});
 		return (_ctx, _cache) => {
 			return openBlock(), createElementBlock("div", {
-				class: normalizeClass(["fl-root", { "fl-selecting": selected.value.size > 0 }]),
-				style: normalizeStyle({ "--fl-sticky-top-auto": `${stickyTop.value}px` })
+				ref_key: "rootEl",
+				ref: rootEl,
+				class: normalizeClass(["fl-root", {
+					"fl-selecting": selected.value.size > 0,
+					"fl-refreshing": refreshing.value
+				}]),
+				style: normalizeStyle({ "--fl-sticky-top-auto": `${stickyTop.value}px` }),
+				"aria-busy": refreshing.value || loadingRoot.value
 			}, [
-				createElementVNode("div", _hoisted_1, [
-					selected.value.size ? (openBlock(), createElementBlock("div", _hoisted_2, [createElementVNode("span", _hoisted_3, toDisplayString(t("selected", { count: selected.value.size })), 1), createElementVNode("span", _hoisted_4, toDisplayString(t("totalSize", { size: unref(formatSize)(selectedBytes.value) })), 1)])) : (openBlock(), createElementBlock("div", _hoisted_5, [createElementVNode("span", _hoisted_6, toDisplayString(displayTitle.value), 1), demo.value ? (openBlock(), createElementBlock("span", _hoisted_7, toDisplayString(t("demoBadge")), 1)) : createCommentVNode("v-if", true)])),
+				createElementVNode("div", _hoisted_2, [
+					selected.value.size ? (openBlock(), createElementBlock("div", _hoisted_3, [createElementVNode("span", _hoisted_4, toDisplayString(t("selected", { count: selected.value.size })), 1), createElementVNode("span", _hoisted_5, toDisplayString(t("totalSize", { size: unref(formatSize)(unref(totalSize)(selectedFiles.value)) })), 1)])) : (openBlock(), createElementBlock("div", _hoisted_6, [createElementVNode("span", _hoisted_7, toDisplayString(displayTitle.value), 1), demo.value ? (openBlock(), createElementBlock("span", _hoisted_8, toDisplayString(t("demoBadge")), 1)) : createCommentVNode("v-if", true)])),
 					selected.value.size ? (openBlock(), createElementBlock("button", {
 						key: 2,
 						class: "fl-clear",
@@ -1669,90 +2155,43 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 						"aria-label": t("clearSelection"),
 						title: t("clearSelection"),
 						onClick: clearSelection
-					}, [_cache[9] || (_cache[9] = createElementVNode("svg", {
+					}, [createVNode(_sfc_main$2, {
 						class: "fl-clear-icon",
-						viewBox: "0 0 24 24",
-						width: "18",
-						height: "18",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2.2",
-						"stroke-linecap": "round",
-						"aria-hidden": "true"
-					}, [createElementVNode("path", { d: "M6 6l12 12" }), createElementVNode("path", { d: "M18 6 6 18" })], -1)), createElementVNode("span", _hoisted_9, toDisplayString(t("clear")), 1)], 8, _hoisted_8)) : createCommentVNode("v-if", true),
-					createElementVNode("div", _hoisted_10, [createElementVNode("label", _hoisted_11, [_cache[10] || (_cache[10] = createElementVNode("svg", {
-						viewBox: "0 0 24 24",
-						width: "15",
-						height: "15",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2",
-						"stroke-linecap": "round",
-						"aria-hidden": "true"
-					}, [createElementVNode("circle", {
-						cx: "11",
-						cy: "11",
-						r: "7"
-					}), createElementVNode("path", { d: "m20 20-3.5-3.5" })], -1)), withDirectives(createElementVNode("input", {
+						name: "close",
+						size: 18
+					}), createElementVNode("span", _hoisted_10, toDisplayString(t("clear")), 1)], 8, _hoisted_9)) : createCommentVNode("v-if", true),
+					createElementVNode("div", _hoisted_11, [createElementVNode("label", _hoisted_12, [createVNode(_sfc_main$2, {
+						name: "search",
+						size: 15
+					}), withDirectives(createElementVNode("input", {
 						"onUpdate:modelValue": _cache[0] || (_cache[0] = ($event) => keyword.value = $event),
 						type: "text",
 						placeholder: t("filter"),
 						"aria-label": t("filter")
-					}, null, 8, _hoisted_12), [[vModelText, keyword.value]])]), createElementVNode("button", {
-						class: "fl-icon-btn",
+					}, null, 8, _hoisted_13), [[vModelText, keyword.value]])]), createElementVNode("button", {
+						class: normalizeClass(["fl-icon-btn fl-refresh", { "fl-spinning": refreshing.value }]),
 						type: "button",
-						"aria-label": t("refresh"),
-						title: t("refresh"),
-						onClick: loadRoot
-					}, [..._cache[11] || (_cache[11] = [createElementVNode("svg", {
-						viewBox: "0 0 24 24",
-						width: "15",
-						height: "15",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2",
-						"stroke-linecap": "round",
-						"stroke-linejoin": "round",
-						"aria-hidden": "true"
-					}, [createElementVNode("path", { d: "M21 12a9 9 0 1 1-3-6.7" }), createElementVNode("path", { d: "M21 4v5h-5" })], -1)])], 8, _hoisted_13)]),
+						disabled: refreshing.value || loadingRoot.value,
+						"aria-label": refreshing.value ? t("refreshing") : t("refresh"),
+						title: refreshing.value ? t("refreshing") : t("refresh"),
+						onClick: refresh
+					}, [createVNode(_sfc_main$2, {
+						name: "refresh",
+						size: 15
+					})], 10, _hoisted_14)]),
 					selected.value.size ? (openBlock(), createElementBlock("button", {
 						key: 3,
 						class: "fl-btn fl-btn-primary",
 						type: "button",
 						disabled: batchBusy.value,
 						onClick: batchDownload
-					}, [_cache[12] || (_cache[12] = createElementVNode("svg", {
-						viewBox: "0 0 24 24",
-						width: "15",
-						height: "15",
-						fill: "none",
-						stroke: "currentColor",
-						"stroke-width": "2.2",
-						"stroke-linecap": "round",
-						"stroke-linejoin": "round",
-						"aria-hidden": "true"
-					}, [
-						createElementVNode("path", { d: "M12 3v12" }),
-						createElementVNode("path", { d: "m7 10 5 5 5-5" }),
-						createElementVNode("path", { d: "M5 21h14" })
-					], -1)), createTextVNode(" " + toDisplayString(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch")), 1)], 8, _hoisted_14)) : createCommentVNode("v-if", true)
+					}, [createVNode(_sfc_main$2, {
+						name: "download",
+						size: 15
+					}), createTextVNode(" " + toDisplayString(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch")), 1)], 8, _hoisted_15)) : createCommentVNode("v-if", true)
 				]),
-				needsPassword.value ? (openBlock(), createElementBlock("div", _hoisted_15, [
-					createElementVNode("span", null, toDisplayString(t("passwordPrompt")), 1),
-					withDirectives(createElementVNode("input", {
-						"onUpdate:modelValue": _cache[1] || (_cache[1] = ($event) => passwordInput.value = $event),
-						type: "password",
-						placeholder: t("passwordPlaceholder"),
-						"aria-label": t("passwordPlaceholder"),
-						onKeyup: withKeys(submitPassword, ["enter"])
-					}, null, 40, _hoisted_16), [[vModelText, passwordInput.value]]),
-					createElementVNode("button", {
-						class: "fl-btn fl-btn-primary",
-						type: "button",
-						onClick: submitPassword
-					}, toDisplayString(t("open")), 1)
-				])) : createCommentVNode("v-if", true),
-				createElementVNode("div", _hoisted_17, [
+				createElementVNode("div", _hoisted_16, [
+					refreshing.value ? (openBlock(), createElementBlock("span", _hoisted_17)) : createCommentVNode("v-if", true),
 					createElementVNode("label", _hoisted_18, [createElementVNode("input", {
 						type: "checkbox",
 						"aria-label": t("selectAll"),
@@ -1760,167 +2199,256 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 						".indeterminate": someChecked.value,
 						onChange: toggleCheckAll
 					}, null, 40, _hoisted_19)]),
-					createElementVNode("span", _hoisted_20, [createElementVNode("button", {
-						class: "fl-sort-btn",
-						type: "button",
-						"aria-sort": sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0,
-						onClick: _cache[2] || (_cache[2] = ($event) => setSort("name"))
-					}, [createTextVNode(toDisplayString(t("columnName")), 1), createElementVNode("span", _hoisted_22, toDisplayString(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : ""), 1)], 8, _hoisted_21)]),
-					createElementVNode("span", _hoisted_23, [createElementVNode("button", {
-						class: "fl-sort-btn",
-						type: "button",
-						onClick: _cache[3] || (_cache[3] = ($event) => setSort("size"))
-					}, [createTextVNode(toDisplayString(t("columnSize")), 1), createElementVNode("span", _hoisted_24, toDisplayString(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : ""), 1)])]),
-					createElementVNode("span", _hoisted_25, [createElementVNode("button", {
-						class: "fl-sort-btn",
-						type: "button",
-						onClick: _cache[4] || (_cache[4] = ($event) => setSort("modified"))
-					}, [createTextVNode(toDisplayString(t("columnDate")), 1), createElementVNode("span", _hoisted_26, toDisplayString(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : ""), 1)])]),
-					createElementVNode("span", _hoisted_27, [createElementVNode("label", _hoisted_28, [
+					(openBlock(), createElementBlock(Fragment, null, renderList([
+						"name",
+						"size",
+						"modified"
+					], (column) => {
+						return createElementVNode("span", {
+							key: column,
+							class: normalizeClass(["fl-cell", `fl-cell-${column === "modified" ? "date" : column}`])
+						}, [createElementVNode("button", {
+							class: "fl-sort-btn",
+							type: "button",
+							"aria-sort": sortKey.value === column ? sortAsc.value ? "ascending" : "descending" : void 0,
+							onClick: ($event) => setSort(column)
+						}, [createTextVNode(toDisplayString(t(column === "name" ? "columnName" : column === "size" ? "columnSize" : "columnDate")), 1), createElementVNode("span", _hoisted_21, toDisplayString(sortKey.value === column ? sortAsc.value ? "▲" : "▼" : ""), 1)], 8, _hoisted_20)], 2);
+					}), 64)),
+					createElementVNode("span", _hoisted_22, [createElementVNode("label", _hoisted_23, [
 						createElementVNode("span", null, toDisplayString(t("sortBy")), 1),
-						createElementVNode("span", _hoisted_29, toDisplayString(sortOptions.value.find((option) => option.value === sortValue.value)?.label), 1),
+						createElementVNode("span", _hoisted_24, toDisplayString(sortOptions.value.find((option) => option.value === sortValue.value)?.label), 1),
 						withDirectives(createElementVNode("select", {
-							"onUpdate:modelValue": _cache[5] || (_cache[5] = ($event) => sortValue.value = $event),
+							"onUpdate:modelValue": _cache[1] || (_cache[1] = ($event) => sortValue.value = $event),
 							"aria-label": t("sortBy")
 						}, [(openBlock(true), createElementBlock(Fragment, null, renderList(sortOptions.value, (option) => {
 							return openBlock(), createElementBlock("option", {
 								key: option.value,
 								value: option.value
-							}, toDisplayString(option.label), 9, _hoisted_31);
-						}), 128))], 8, _hoisted_30), [[vModelSelect, sortValue.value]])
+							}, toDisplayString(option.label), 9, _hoisted_26);
+						}), 128))], 8, _hoisted_25), [[vModelSelect, sortValue.value]])
 					])])
 				]),
-				loadingRoot.value ? (openBlock(), createElementBlock("div", _hoisted_32, toDisplayString(t("loading")), 1)) : errorMsg.value ? (openBlock(), createElementBlock("div", _hoisted_33, [
+				loadingRoot.value ? (openBlock(), createElementBlock("div", _hoisted_27, toDisplayString(t("loading")), 1)) : rootLock.value ? (openBlock(), createElementBlock("form", {
+					key: 1,
+					class: normalizeClass(["fl-unlock-root", { "fl-unlock-error": rootLock.value.error }]),
+					onSubmit: withModifiers(submitRootUnlock, ["prevent"])
+				}, [
+					createVNode(_sfc_main$2, {
+						class: "fl-unlock-lock",
+						name: "lock"
+					}),
+					createElementVNode("label", {
+						class: "fl-unlock-label",
+						for: `${unref(uid)}-root`
+					}, toDisplayString(t("passwordPrompt")), 9, _hoisted_28),
+					rootLock.value.error ? (openBlock(), createElementBlock("span", {
+						key: 0,
+						id: `${unref(uid)}-root-error`,
+						class: "fl-unlock-message",
+						role: "alert"
+					}, toDisplayString(unlockErrorText(rootLock.value.error)), 9, _hoisted_29)) : createCommentVNode("v-if", true),
+					createElementVNode("span", _hoisted_30, [
+						withDirectives(createElementVNode("input", {
+							id: `${unref(uid)}-root`,
+							"onUpdate:modelValue": _cache[2] || (_cache[2] = ($event) => rootLock.value.input = $event),
+							type: "password",
+							autocomplete: "off",
+							"data-unlock": __props.path,
+							placeholder: t("passwordPlaceholder"),
+							"aria-invalid": !!rootLock.value.error,
+							"aria-describedby": rootLock.value.error ? `${unref(uid)}-root-error` : void 0
+						}, null, 8, _hoisted_31), [[vModelText, rootLock.value.input]]),
+						canRemember.value ? (openBlock(), createElementBlock("button", {
+							key: 0,
+							class: "fl-unlock-remember",
+							type: "button",
+							"aria-pressed": rootLock.value.remember,
+							"aria-label": t("rememberPassword"),
+							title: t("rememberPassword"),
+							onClick: _cache[3] || (_cache[3] = ($event) => rootLock.value.remember = !rootLock.value.remember)
+						}, [createVNode(_sfc_main$2, { name: "key" })], 8, _hoisted_32)) : createCommentVNode("v-if", true),
+						createElementVNode("button", {
+							class: "fl-unlock-submit",
+							type: "submit",
+							disabled: rootLock.value.busy || !rootLock.value.input
+						}, toDisplayString(t("open")), 9, _hoisted_33)
+					])
+				], 34)) : errorMsg.value ? (openBlock(), createElementBlock("div", _hoisted_34, [
 					createTextVNode(toDisplayString(t("loadFailed", { message: errorMsg.value })) + " ", 1),
-					/guest/i.test(errorMsg.value) ? (openBlock(), createElementBlock("p", _hoisted_34, toDisplayString(t("guestHint")), 1)) : createCommentVNode("v-if", true),
-					/failed to fetch|networkerror/i.test(errorMsg.value) ? (openBlock(), createElementBlock("p", _hoisted_35, toDisplayString(t("corsHint")), 1)) : createCommentVNode("v-if", true),
+					/guest/i.test(errorMsg.value) ? (openBlock(), createElementBlock("p", _hoisted_35, toDisplayString(t("guestHint")), 1)) : createCommentVNode("v-if", true),
+					unref(isNetworkError)(errorMsg.value) ? (openBlock(), createElementBlock("p", _hoisted_36, toDisplayString(t("corsHint")), 1)) : createCommentVNode("v-if", true),
 					createElementVNode("button", {
 						class: "fl-btn",
 						type: "button",
 						onClick: loadRoot
 					}, toDisplayString(t("retry")), 1)
-				])) : visible.value.length === 0 ? (openBlock(), createElementBlock("div", _hoisted_36, toDisplayString(t("empty")), 1)) : createCommentVNode("v-if", true),
-				(openBlock(true), createElementBlock(Fragment, null, renderList(visible.value, (node) => {
+				])) : visible.value.length === 0 ? (openBlock(), createElementBlock("div", _hoisted_37, toDisplayString(t("empty")), 1)) : createCommentVNode("v-if", true),
+				(openBlock(true), createElementBlock(Fragment, null, renderList(visible.value, (node, index) => {
 					return openBlock(), createElementBlock("div", {
 						key: node.path,
 						class: normalizeClass(["fl-row", {
 							"fl-row-dir": node.is_dir,
 							"fl-row-root": node.isRoot,
-							"fl-row-selected": !node.is_dir && selected.value.has(node.path)
+							"fl-row-selected": !node.is_dir && selected.value.has(node.path),
+							"fl-row-locked": !!node.lock,
+							"fl-row-prompting": node.lock?.prompting,
+							"fl-row-error": node.lock?.prompting && !!node.lock.error
 						}]),
 						style: normalizeStyle({ "--fl-depth": node.depth })
 					}, [
-						createElementVNode("label", _hoisted_37, [createElementVNode("input", {
+						createElementVNode("label", _hoisted_38, [createElementVNode("input", {
 							type: "checkbox",
+							disabled: !!node.lock,
 							"aria-label": t("selectItem", { name: node.name }),
 							checked: isChecked(node),
 							".indeterminate": isIndeterminate(node),
 							onChange: ($event) => toggleCheck(node, $event)
-						}, null, 40, _hoisted_38)]),
+						}, null, 40, _hoisted_39)]),
 						createElementVNode("span", {
 							class: "fl-cell fl-cell-name",
 							title: node.isRoot ? node.path : void 0
 						}, [
-							_cache[15] || (_cache[15] = createElementVNode("span", {
+							_cache[8] || (_cache[8] = createElementVNode("span", {
 								class: "fl-indent",
 								"aria-hidden": "true"
 							}, null, -1)),
-							node.is_dir ? (openBlock(), createElementBlock("button", {
+							node.lock ? (openBlock(), createElementBlock("button", {
 								key: 0,
+								class: "fl-arrow fl-lock",
+								type: "button",
+								"aria-label": t("unlockFolder", { name: node.name }),
+								title: t("unlockFolder", { name: node.name }),
+								onClick: ($event) => toggleExpand(node)
+							}, [createVNode(_sfc_main$2, {
+								name: "lock",
+								size: 14
+							})], 8, _hoisted_41)) : node.is_dir ? (openBlock(), createElementBlock("button", {
+								key: 1,
 								class: normalizeClass(["fl-arrow", { "fl-arrow-open": node.expanded }]),
 								type: "button",
 								"aria-label": t(node.expanded ? "collapse" : "expand", { name: node.name }),
 								"aria-expanded": node.expanded,
 								onClick: ($event) => toggleExpand(node)
-							}, [..._cache[13] || (_cache[13] = [createElementVNode("svg", {
-								viewBox: "0 0 24 24",
-								width: "14",
-								height: "14",
-								fill: "none",
-								stroke: "currentColor",
-								"stroke-width": "2.4",
-								"stroke-linecap": "round",
-								"stroke-linejoin": "round",
-								"aria-hidden": "true"
-							}, [createElementVNode("path", { d: "m9 6 6 6-6 6" })], -1)])], 10, _hoisted_40)) : (openBlock(), createElementBlock("span", _hoisted_41)),
-							node.is_dir ? (openBlock(), createElementBlock("svg", _hoisted_42, [..._cache[14] || (_cache[14] = [createElementVNode("path", { d: "M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" }, null, -1)])])) : (openBlock(), createElementBlock("span", {
-								key: 3,
+							}, [createVNode(_sfc_main$2, {
+								name: "next",
+								size: 14
+							})], 10, _hoisted_42)) : (openBlock(), createElementBlock("span", _hoisted_43)),
+							node.is_dir ? (openBlock(), createElementBlock("svg", _hoisted_44, [..._cache[7] || (_cache[7] = [createElementVNode("path", { d: "M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z" }, null, -1)])])) : (openBlock(), createElementBlock("span", {
+								key: 4,
 								class: "fl-type",
 								"data-kind": unref(fileKind)(node.name),
 								"aria-hidden": "true"
-							}, toDisplayString(unref(extOf)(node.name) || "FILE"), 9, _hoisted_43)),
-							createElementVNode("span", _hoisted_44, [createElementVNode("span", {
+							}, toDisplayString(unref(extOf)(node.name) || "FILE"), 9, _hoisted_45)),
+							createElementVNode("span", _hoisted_46, [createElementVNode("span", {
 								class: normalizeClass(["fl-name", { "fl-name-dir": node.is_dir }]),
-								onClick: ($event) => node.is_dir ? toggleExpand(node) : download(node)
-							}, toDisplayString(node.name), 11, _hoisted_45), createElementVNode("span", _hoisted_46, [node.is_dir ? (openBlock(), createElementBlock(Fragment, { key: 0 }, [node.loaded ? (openBlock(), createElementBlock(Fragment, { key: 0 }, [createTextVNode(toDisplayString(t("folderItems", { count: folderFiles(node).length })) + " · " + toDisplayString(unref(formatSize)(unref(totalSize)(folderFiles(node)))), 1)], 64)) : createCommentVNode("v-if", true)], 64)) : (openBlock(), createElementBlock(Fragment, { key: 1 }, [createTextVNode(toDisplayString(unref(formatSize)(node.size)) + " · " + toDisplayString(unref(formatDate)(node.modified)), 1)], 64))])]),
-							node.is_dir && node.loaded ? (openBlock(), createElementBlock("span", _hoisted_47, toDisplayString(t("folderItems", { count: folderFiles(node).length })), 1)) : createCommentVNode("v-if", true),
-							node.loading ? (openBlock(), createElementBlock("span", _hoisted_48, "…")) : createCommentVNode("v-if", true)
-						], 8, _hoisted_39),
-						createElementVNode("span", _hoisted_49, toDisplayString(node.is_dir ? "—" : unref(formatSize)(node.size)), 1),
-						createElementVNode("span", _hoisted_50, toDisplayString(unref(formatDate)(node.modified)), 1),
-						createElementVNode("span", _hoisted_51, [node.is_dir ? (openBlock(), createElementBlock("button", {
-							key: 0,
-							class: normalizeClass(["fl-action fl-arrow-end", { "fl-arrow-open": node.expanded }]),
-							type: "button",
-							"aria-label": t(node.expanded ? "collapse" : "expand", { name: node.name }),
-							"aria-expanded": node.expanded,
-							onClick: ($event) => toggleExpand(node)
-						}, [..._cache[16] || (_cache[16] = [createElementVNode("svg", {
-							viewBox: "0 0 24 24",
-							width: "18",
-							height: "18",
-							fill: "none",
-							stroke: "currentColor",
-							"stroke-width": "2.2",
-							"stroke-linecap": "round",
-							"stroke-linejoin": "round",
-							"aria-hidden": "true"
-						}, [createElementVNode("path", { d: "m9 6 6 6-6 6" })], -1)])], 10, _hoisted_52)) : (openBlock(), createElementBlock(Fragment, { key: 1 }, [canPreview(node) ? (openBlock(), createElementBlock("button", {
+								onClick: ($event) => node.lock || node.is_dir ? toggleExpand(node) : download(node)
+							}, toDisplayString(node.name), 11, _hoisted_47), createElementVNode("span", _hoisted_48, [!node.is_dir ? (openBlock(), createElementBlock(Fragment, { key: 0 }, [createTextVNode(toDisplayString(unref(formatSize)(node.size)) + " · " + toDisplayString(unref(formatDate)(node.modified)), 1)], 64)) : node.loaded ? (openBlock(), createElementBlock(Fragment, { key: 1 }, [createTextVNode(toDisplayString(t("folderItems", { count: statsOf(node).files })) + " · " + toDisplayString(unref(formatSize)(statsOf(node).bytes)), 1)], 64)) : createCommentVNode("v-if", true)])]),
+							node.is_dir && node.loaded ? (openBlock(), createElementBlock("span", _hoisted_49, toDisplayString(t("folderItems", { count: statsOf(node).files })), 1)) : createCommentVNode("v-if", true),
+							node.lock?.prompting && node.lock.error ? (openBlock(), createElementBlock("span", {
+								key: 6,
+								id: `${unref(uid)}-error-${index}`,
+								class: "fl-unlock-message",
+								role: "alert"
+							}, toDisplayString(unlockErrorText(node.lock.error)), 9, _hoisted_50)) : createCommentVNode("v-if", true),
+							!node.lock && unref(remembered).has(node.path) ? (openBlock(), createElementBlock("button", {
+								key: 7,
+								class: "fl-remembered",
+								type: "button",
+								"aria-label": `${t("forgetPassword")} ${node.name}`,
+								title: t("forgetPassword"),
+								onClick: ($event) => forgetPassword(node)
+							}, [createVNode(_sfc_main$2, {
+								name: "key",
+								size: 11
+							}), createTextVNode(" " + toDisplayString(t("remembered")) + " · " + toDisplayString(t("forgetPassword")), 1)], 8, _hoisted_51)) : createCommentVNode("v-if", true),
+							node.loading ? (openBlock(), createElementBlock("span", _hoisted_52, "…")) : createCommentVNode("v-if", true)
+						], 8, _hoisted_40),
+						node.lock?.prompting ? (openBlock(), createElementBlock("form", {
 							key: 0,
-							class: "fl-action fl-download",
-							type: "button",
-							"aria-label": `${t("preview")} ${node.name}`,
-							title: t("preview"),
-							onClick: ($event) => preview(node)
-						}, [..._cache[17] || (_cache[17] = [createElementVNode("svg", {
-							viewBox: "0 0 24 24",
-							width: "16",
-							height: "16",
-							fill: "none",
-							stroke: "currentColor",
-							"stroke-width": "2",
-							"stroke-linecap": "round",
-							"stroke-linejoin": "round",
-							"aria-hidden": "true"
-						}, [createElementVNode("path", { d: "M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z" }), createElementVNode("circle", {
-							cx: "12",
-							cy: "12",
-							r: "3"
-						})], -1)])], 8, _hoisted_53)) : createCommentVNode("v-if", true), createElementVNode("button", {
-							class: "fl-action fl-download",
-							type: "button",
-							"aria-label": `${t("download")} ${node.name}`,
-							title: t("download"),
-							onClick: ($event) => download(node)
-						}, [..._cache[18] || (_cache[18] = [createElementVNode("svg", {
-							viewBox: "0 0 24 24",
-							width: "16",
-							height: "16",
-							fill: "none",
-							stroke: "currentColor",
-							"stroke-width": "2",
-							"stroke-linecap": "round",
-							"stroke-linejoin": "round",
-							"aria-hidden": "true"
+							class: "fl-unlock fl-unlock-row",
+							onSubmit: withModifiers(($event) => submitUnlock(node), ["prevent"]),
+							onKeydown: withKeys(withModifiers(($event) => cancelUnlock(node.lock), ["prevent"]), ["esc"])
 						}, [
-							createElementVNode("path", { d: "M12 3v12" }),
-							createElementVNode("path", { d: "m7 10 5 5 5-5" }),
-							createElementVNode("path", { d: "M5 21h14" })
-						], -1)])], 8, _hoisted_54)], 64))])
+							createVNode(_sfc_main$2, {
+								class: "fl-unlock-lock",
+								name: "lock",
+								size: 18
+							}),
+							withDirectives(createElementVNode("input", {
+								"onUpdate:modelValue": ($event) => node.lock.input = $event,
+								type: "password",
+								autocomplete: "off",
+								"data-unlock": node.path,
+								placeholder: node.lock.error ? unlockErrorText(node.lock.error) : t("passwordPlaceholder"),
+								"aria-label": t("passwordFor", { name: node.name }),
+								"aria-invalid": !!node.lock.error,
+								"aria-describedby": node.lock.error ? `${unref(uid)}-error-${index}` : void 0
+							}, null, 8, _hoisted_54), [[vModelText, node.lock.input]]),
+							canRemember.value ? (openBlock(), createElementBlock("button", {
+								key: 0,
+								class: "fl-unlock-remember",
+								type: "button",
+								"aria-pressed": node.lock.remember,
+								"aria-label": t("rememberPassword"),
+								title: t("rememberPassword"),
+								onClick: ($event) => node.lock.remember = !node.lock.remember
+							}, [createVNode(_sfc_main$2, { name: "key" })], 8, _hoisted_55)) : createCommentVNode("v-if", true),
+							createElementVNode("button", {
+								class: "fl-unlock-submit",
+								type: "submit",
+								disabled: node.lock.busy || !node.lock.input
+							}, toDisplayString(t("open")), 9, _hoisted_56),
+							createElementVNode("button", {
+								class: "fl-unlock-cancel",
+								type: "button",
+								"aria-label": t("cancel"),
+								title: t("cancel"),
+								onClick: ($event) => cancelUnlock(node.lock)
+							}, [createVNode(_sfc_main$2, {
+								name: "close",
+								size: 14
+							})], 8, _hoisted_57)
+						], 40, _hoisted_53)) : (openBlock(), createElementBlock(Fragment, { key: 1 }, [
+							createElementVNode("span", _hoisted_58, toDisplayString(node.is_dir ? "—" : unref(formatSize)(node.size)), 1),
+							createElementVNode("span", _hoisted_59, toDisplayString(unref(formatDate)(node.modified)), 1),
+							createElementVNode("span", _hoisted_60, [node.lock ? (openBlock(), createElementBlock("button", {
+								key: 0,
+								class: "fl-action fl-arrow-end fl-lock",
+								type: "button",
+								"aria-label": t("unlockFolder", { name: node.name }),
+								onClick: ($event) => toggleExpand(node)
+							}, [createVNode(_sfc_main$2, {
+								name: "lock",
+								size: 18
+							})], 8, _hoisted_61)) : node.is_dir ? (openBlock(), createElementBlock("button", {
+								key: 1,
+								class: normalizeClass(["fl-action fl-arrow-end", { "fl-arrow-open": node.expanded }]),
+								type: "button",
+								"aria-label": t(node.expanded ? "collapse" : "expand", { name: node.name }),
+								"aria-expanded": node.expanded,
+								onClick: ($event) => toggleExpand(node)
+							}, [createVNode(_sfc_main$2, {
+								name: "next",
+								size: 18
+							})], 10, _hoisted_62)) : (openBlock(), createElementBlock(Fragment, { key: 2 }, [canPreview(node) ? (openBlock(), createElementBlock("button", {
+								key: 0,
+								class: "fl-action fl-preview-btn",
+								type: "button",
+								"aria-label": `${t("preview")} ${node.name}`,
+								title: t("preview"),
+								onClick: ($event) => preview(node)
+							}, [createVNode(_sfc_main$2, { name: "eye" })], 8, _hoisted_63)) : createCommentVNode("v-if", true), createElementVNode("button", {
+								class: "fl-action fl-download",
+								type: "button",
+								"aria-label": `${t("download")} ${node.name}`,
+								title: t("download"),
+								onClick: ($event) => download(node)
+							}, [createVNode(_sfc_main$2, { name: "download" })], 8, _hoisted_64)], 64))])
+						], 64))
 					], 6);
 				}), 128)),
-				createElementVNode("div", _hoisted_55, [createElementVNode("span", null, toDisplayString(t("loaded", { count: allFiles.value.length })) + " · " + toDisplayString(t("totalSize", { size: unref(formatSize)(loadedBytes.value) })), 1)]),
-				toast.value ? (openBlock(), createElementBlock("div", _hoisted_56, toDisplayString(toast.value), 1)) : createCommentVNode("v-if", true),
+				createElementVNode("div", _hoisted_65, [createElementVNode("span", null, toDisplayString(t("loaded", { count: allFiles.value.length })) + " · " + toDisplayString(t("totalSize", { size: unref(formatSize)(unref(totalSize)(allFiles.value)) })), 1)]),
+				toast.value ? (openBlock(), createElementBlock("div", _hoisted_66, toDisplayString(toast.value), 1)) : createCommentVNode("v-if", true),
 				createVNode(_sfc_main$1, {
 					open: !!previewNode.value,
 					file: previewNode.value,
@@ -1933,9 +2461,9 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 					position: previewPosition.value,
 					total: previewPosition.value ? previewList.value.length : 0,
 					onClose: closePreview,
-					onPrev: _cache[6] || (_cache[6] = ($event) => stepPreview(-1)),
-					onNext: _cache[7] || (_cache[7] = ($event) => stepPreview(1)),
-					onDownload: _cache[8] || (_cache[8] = ($event) => previewNode.value && download(previewNode.value))
+					onPrev: _cache[4] || (_cache[4] = ($event) => stepPreview(-1)),
+					onNext: _cache[5] || (_cache[5] = ($event) => stepPreview(1)),
+					onDownload: _cache[6] || (_cache[6] = ($event) => previewNode.value && download(previewNode.value))
 				}, null, 8, [
 					"open",
 					"file",
@@ -1948,7 +2476,7 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 					"position",
 					"total"
 				])
-			], 6);
+			], 14, _hoisted_1);
 		};
 	}
 });