vitepress-plugin-filelist 0.5.0 → 0.5.1

package/dist/client/ssr/index.js

@@ -1,147 +1,15 @@
-import { computed, defineComponent, mergeProps, nextTick, onBeforeUnmount, onMounted, reactive, ref, unref, useSSRContext, watch } from "vue";
+import { computed, defineComponent, mergeProps, nextTick, onBeforeUnmount, onMounted, ref, unref, useId, useSSRContext, watch } from "vue";
 import { ssrIncludeBooleanAttr, ssrInterpolate, ssrLooseContain, ssrLooseEqual, ssrRenderAttr, ssrRenderAttrs, ssrRenderClass, ssrRenderComponent, ssrRenderList, ssrRenderStyle } from "vue/server-renderer";
-// src/client/locales.ts
-const fileListLocales = {
-	"zh-CN": {
-		allFiles: "全部文件",
-		demoBadge: "演示数据",
-		filter: "筛选文件名",
-		refresh: "刷新",
-		batch: "下载 ZIP",
-		batchCount: "批量下载（{count}）",
-		batching: "打包中 {percent}%",
-		passwordPrompt: "该目录受密码保护：",
-		passwordPlaceholder: "输入密码",
-		open: "打开",
-		columnName: "文件名",
-		columnSize: "文件大小",
-		columnDate: "最后修改日期",
-		loading: "加载中…",
-		loadFailed: "加载失败：{message}",
-		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
-		corsHint: "可能是跨域或混合内容被拦截：检查 OpenList 的 cors.allow_origins（OpenList-Worker 为 ALLOW_URLS）与页面协议。",
-		retry: "重试",
-		empty: "没有文件",
-		preview: "预览",
-		download: "下载",
-		loaded: "{count} 个已加载文件",
-		selected: "已选 {count} 项",
-		unloaded: "{count} 个目录未展开，未计入全选",
-		folderFailed: "打开文件夹失败：{message}",
-		demoDownload: "演示模式：接入 OpenList 后会下载「{name}」",
-		demoPreview: "演示模式：接入 OpenList 后可预览「{name}」",
-		demoBatch: "演示模式：将打包已勾选的 {count} 个文件",
-		downloadFailed: "下载失败：{message}",
-		previewFailed: "预览失败：{message}",
-		batchFailed: "打包失败：{message}",
-		defaultZip: "资源",
-		clear: "清除",
-		clearSelection: "取消选择",
-		totalSize: "共 {size}",
-		folderItems: "{count} 项",
-		sortBy: "排序",
-		selectAll: "全选",
-		selectItem: "选择 {name}",
-		expand: "展开 {name}",
-		collapse: "收起 {name}",
-		close: "关闭",
-		previous: "上一个",
-		next: "下一个",
-		rotate: "旋转",
-		actualSize: "原始大小",
-		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
-		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
-		previewTooLarge: "文件较大（{size}），请下载后查看",
-		textTruncated: "仅显示前 {size}，完整内容请下载",
-		refreshing: "刷新中",
-		refreshFailed: "刷新失败：{message}",
-		cancel: "取消",
-		passwordFor: "{name} 的密码",
-		passwordWrong: "密码不正确或无权访问",
-		passwordStale: "已保存的密码已失效，请重新输入",
-		rememberPassword: "在此标签页中记住（关闭标签页后失效）",
-		remembered: "已记住",
-		forgetPassword: "忘记",
-		unlockFolder: "输入 {name} 的密码",
-		networkHint: "可能被跨域拦截：请检查 OpenList 的 cors.allow_origins，或 OpenList-Worker 的 ALLOW_URLS。"
-	},
-	"en-US": {
-		allFiles: "All files",
-		demoBadge: "Demo data",
-		filter: "Filter files",
-		refresh: "Refresh",
-		batch: "Download ZIP",
-		batchCount: "Download ZIP ({count})",
-		batching: "Zipping {percent}%",
-		passwordPrompt: "This folder is password protected:",
-		passwordPlaceholder: "Folder password",
-		open: "Open",
-		columnName: "Name",
-		columnSize: "Size",
-		columnDate: "Modified",
-		loading: "Loading…",
-		loadFailed: "Failed to load: {message}",
-		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
-		corsHint: "Possibly blocked by CORS or mixed content. Check cors.allow_origins in OpenList (ALLOW_URLS in OpenList-Worker) and the page protocol.",
-		retry: "Retry",
-		empty: "No files",
-		preview: "Preview",
-		download: "Download",
-		loaded: "{count} loaded file(s)",
-		selected: "{count} selected",
-		unloaded: "{count} folder(s) not expanded, excluded from select-all",
-		folderFailed: "Failed to open folder: {message}",
-		demoDownload: "Demo mode: \"{name}\" will download once OpenList is connected.",
-		demoPreview: "Demo mode: \"{name}\" will preview once OpenList is connected.",
-		demoBatch: "Demo mode: {count} selected file(s) would be zipped.",
-		downloadFailed: "Download failed: {message}",
-		previewFailed: "Preview failed: {message}",
-		batchFailed: "Failed to create ZIP: {message}",
-		defaultZip: "resources",
-		clear: "Clear",
-		clearSelection: "Clear selection",
-		totalSize: "{size} total",
-		folderItems: "{count} items",
-		sortBy: "Sort",
-		selectAll: "Select all",
-		selectItem: "Select {name}",
-		expand: "Expand {name}",
-		collapse: "Collapse {name}",
-		close: "Close",
-		previous: "Previous",
-		next: "Next",
-		rotate: "Rotate",
-		actualSize: "Actual size",
-		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
-		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
-		previewTooLarge: "This file is large ({size}). Download it to view.",
-		textTruncated: "Showing the first {size} only. Download for the full file.",
-		refreshing: "Refreshing",
-		refreshFailed: "Refresh failed: {message}",
-		cancel: "Cancel",
-		passwordFor: "Password for {name}",
-		passwordWrong: "Wrong password or no permission",
-		passwordStale: "The saved password no longer works. Enter it again.",
-		rememberPassword: "Remember in this tab (cleared when the tab closes)",
-		remembered: "Remembered",
-		forgetPassword: "Forget",
-		unlockFolder: "Enter the password for {name}",
-		networkHint: "Possibly blocked by CORS: check cors.allow_origins in OpenList, or ALLOW_URLS in OpenList-Worker."
-	}
-};
-function formatLabel(template, values = {}) {
-	return template.replace(/\{(\w+)\}/g, (_, key) => values[key] === void 0 ? `{${key}}` : String(values[key]));
-}
-function resolveLabels(locale = "zh-CN", overrides) {
-	return {
-		...fileListLocales[locale] ?? fileListLocales["zh-CN"],
-		...overrides
-	};
-}
 // src/client/utils.ts
 function joinPath(parent, name) {
 	return (parent.endsWith("/") ? parent : `${parent}/`) + name;
 }
+/** Whether `path` is `folder` itself or inside it (segment-wise, trailing slashes ignored). */
+function isWithin(path, folder) {
+	const p = path.replace(/\/+$/, "") || "/";
+	const f = folder.replace(/\/+$/, "") || "/";
+	return f === "/" || p === f || p.startsWith(`${f}/`);
+}
 function encodePath(path) {
 	return path.split("/").map(encodeURIComponent).join("/");
 }
@@ -180,8 +48,9 @@ function uniqueEntryName(name, used) {
 	used.add(candidate);
 	return candidate;
 }
+/** Human-readable size. `0` reads `0 B`; missing, negative or invalid sizes read `-`. */
 function formatSize(size) {
-	if (!size || !Number.isFinite(size)) return "-";
+	if (!Number.isFinite(size) || size < 0) return "-";
 	const units = [
 		"B",
 		"KB",
@@ -205,96 +74,106 @@ function formatDate(iso) {
 	const pad = (value) => String(value).padStart(2, "0");
 	return `${date.getFullYear()}/${pad(date.getMonth() + 1)}/${pad(date.getDate())}`;
 }
-function extOf(name) {
+/** Lower-case extension (letters and digits only), or `''`. */
+function extension(name) {
 	const match = name.match(/\.([a-z0-9]+)$/i);
-	return match ? match[1].toUpperCase() : "";
+	return match ? match[1].toLowerCase() : "";
+}
+/** Upper-case extension for the type badge, e.g. `PDF`. */
+function extOf(name) {
+	return extension(name).toUpperCase();
 }
-const FILE_KINDS = {};
-for (const [kind, exts] of Object.entries({
-	doc: [
+/**
+* One table for every known extension: the badge family (`FileKind`) and how
+* the preview dialog shows it (`PreviewKind`; Office and the like are `none`).
+*/
+const EXTENSIONS = [
+	[
 		"doc",
-		"docx",
-		"odt",
-		"rtf",
-		"txt",
-		"md",
-		"pages",
-		"wps"
+		"text",
+		"txt md markdown"
 	],
-	sheet: [
-		"xls",
-		"xlsx",
-		"ods",
-		"csv",
-		"tsv",
-		"numbers",
-		"et"
+	[
+		"doc",
+		"none",
+		"doc docx odt rtf pages wps"
+	],
+	[
+		"sheet",
+		"text",
+		"csv tsv"
+	],
+	[
+		"sheet",
+		"none",
+		"xls xlsx ods numbers et"
 	],
-	slide: [
-		"ppt",
-		"pptx",
-		"odp",
-		"key",
-		"dps"
+	[
+		"slide",
+		"none",
+		"ppt pptx odp key dps"
 	],
-	pdf: ["pdf"],
-	image: [
-		"png",
-		"jpg",
-		"jpeg",
-		"gif",
-		"webp",
-		"svg",
-		"bmp",
-		"ico",
-		"avif",
+	[
+		"pdf",
+		"pdf",
+		"pdf"
+	],
+	[
+		"image",
+		"image",
+		"png jpg jpeg gif webp svg bmp ico avif"
+	],
+	[
+		"image",
+		"none",
 		"heic"
 	],
-	media: [
-		"mp3",
-		"wav",
-		"flac",
-		"aac",
-		"ogg",
-		"m4a",
-		"mp4",
-		"webm",
-		"mov",
-		"mkv",
-		"avi"
+	[
+		"media",
+		"video",
+		"mp4 webm m4v mov ogv"
+	],
+	[
+		"media",
+		"audio",
+		"mp3 wav ogg oga m4a aac flac opus"
 	],
-	archive: [
-		"zip",
-		"rar",
-		"7z",
-		"tar",
-		"gz",
-		"tgz",
-		"bz2",
-		"xz",
-		"iso"
+	[
+		"media",
+		"none",
+		"mkv avi"
 	],
-	code: [
-		"js",
-		"ts",
-		"json",
-		"html",
-		"css",
-		"py",
-		"java",
-		"c",
-		"cpp",
-		"go",
-		"rs",
-		"sh",
-		"yml",
-		"yaml",
-		"xml"
+	[
+		"archive",
+		"none",
+		"zip rar 7z tar gz tgz bz2 xz iso"
+	],
+	[
+		"code",
+		"text",
+		"js mjs cjs ts tsx jsx vue json html htm css scss less py java kt c h cpp hpp cs go rs rb php sh bat ps1 sql yml yaml xml toml ini conf properties"
+	],
+	[
+		"other",
+		"text",
+		"log srt vtt ass lrc gitignore env"
 	]
-})) for (const ext of exts) FILE_KINDS[ext] = kind;
+];
+const BY_EXTENSION = /* @__PURE__ */ new Map();
+for (const [kind, preview, list] of EXTENSIONS) for (const ext of list.split(" ")) BY_EXTENSION.set(ext, {
+	kind,
+	preview
+});
 /** Rough file family, used to colour the type badge. */
 function fileKind(name) {
-	return FILE_KINDS[extOf(name).toLowerCase()] ?? "other";
+	return BY_EXTENSION.get(extension(name))?.kind ?? "other";
+}
+/**
+* How a file is shown in the preview dialog. Office documents and anything
+* else the browser cannot render are `none` (info + download).
+*/
+function previewKind(name) {
+	return BY_EXTENSION.get(extension(name))?.preview ?? "none";
 }
 /** Sum of the `size` of the given entries, ignoring missing or invalid sizes. */
 function totalSize(items) {
@@ -308,100 +187,6 @@ function compareNodes(a, b, key, ascending = true) {
 	else result = a.name.localeCompare(b.name, "zh-Hans-CN", { numeric: true });
 	return ascending ? result : -result;
 }
-const PREVIEW_EXTS = {
-	image: [
-		"png",
-		"jpg",
-		"jpeg",
-		"gif",
-		"webp",
-		"svg",
-		"bmp",
-		"ico",
-		"avif"
-	],
-	video: [
-		"mp4",
-		"webm",
-		"m4v",
-		"mov",
-		"ogv"
-	],
-	audio: [
-		"mp3",
-		"wav",
-		"ogg",
-		"oga",
-		"m4a",
-		"aac",
-		"flac",
-		"opus"
-	],
-	text: [
-		"txt",
-		"md",
-		"markdown",
-		"log",
-		"json",
-		"csv",
-		"tsv",
-		"xml",
-		"yml",
-		"yaml",
-		"toml",
-		"ini",
-		"conf",
-		"properties",
-		"js",
-		"mjs",
-		"cjs",
-		"ts",
-		"tsx",
-		"jsx",
-		"vue",
-		"css",
-		"scss",
-		"less",
-		"html",
-		"htm",
-		"py",
-		"java",
-		"kt",
-		"c",
-		"h",
-		"cpp",
-		"hpp",
-		"cs",
-		"go",
-		"rs",
-		"rb",
-		"php",
-		"sh",
-		"bat",
-		"ps1",
-		"sql",
-		"srt",
-		"vtt",
-		"ass",
-		"lrc",
-		"gitignore",
-		"env"
-	],
-	pdf: ["pdf"]
-};
-const PREVIEW_KINDS = {};
-for (const [kind, exts] of Object.entries(PREVIEW_EXTS)) for (const ext of exts) PREVIEW_KINDS[ext] = kind;
-function lowerExt(name) {
-	const dot = name.lastIndexOf(".");
-	return dot >= 0 ? name.slice(dot + 1).toLowerCase() : "";
-}
-/**
-* How a file is shown in the preview dialog. Office documents and anything
-* else the browser cannot render are `none` (info + download).
-*/
-function previewKind(name) {
-	return PREVIEW_KINDS[lowerExt(name)] ?? "none";
-}
 /**
 * Viewers from OpenList's public `iframe_previews` setting that match a file,
 * in the order OpenList lists them. Keys are comma-separated extensions or a
@@ -416,7 +201,7 @@ function iframePreviewsFor(name, setting) {
 		return [];
 	}
 	if (!parsed || typeof parsed !== "object") return [];
-	const ext = lowerExt(name);
+	const ext = extension(name);
 	const out = [];
 	for (const [key, viewers] of Object.entries(parsed)) {
 		let hit = false;
@@ -434,21 +219,553 @@ function iframePreviewsFor(name, setting) {
 			scheme
 		});
 	}
-	return out;
-}
-function applyUrlOps(placeholder, url) {
-	const ops = placeholder.slice(1, placeholder.lastIndexOf("url")).replace(/d$/, "").match(/[eb]/g) ?? [];
-	let value = url;
-	for (const op of ops.reverse()) value = op === "e" ? encodeURIComponent(value) : btoa(String.fromCharCode(...new TextEncoder().encode(value)));
-	return value;
+	return out;
+}
+function applyUrlOps(placeholder, url) {
+	const ops = placeholder.slice(1, placeholder.lastIndexOf("url")).replace(/d$/, "").match(/[eb]/g) ?? [];
+	let value = url;
+	for (const op of ops.reverse()) value = op === "e" ? encodeURIComponent(value) : btoa(String.fromCharCode(...new TextEncoder().encode(value)));
+	return value;
+}
+/**
+* Fill an OpenList preview scheme: `$name`, `$url` (raw URL) and `$durl`
+* (signed download URL), each optionally prefixed with `e` (URI-encode) or
+* `b` (base64), e.g. `$e_url`, `$b_url`, `$e_durl`.
+*/
+function fillPreviewUrl(scheme, args) {
+	return scheme.replace(/\$name/g, args.name).replace(/\$[eb_]*durl/g, (placeholder) => applyUrlOps(placeholder, args.downloadUrl)).replace(/\$[eb_]*url/g, (placeholder) => applyUrlOps(placeholder, args.rawUrl));
+}
+// src/client/api.ts
+var ApiError = class extends Error {
+	code;
+	constructor(message, code) {
+		super(message);
+		this.code = code;
+	}
+};
+function errorText(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* OpenList has no dedicated code for a missing / wrong folder password; its
+* message says "password is incorrect or you have no permission".
+*/
+function isPasswordError(error) {
+	return /password|密码/i.test(errorText(error));
+}
+/** Browser-level fetch failures (Chrome, Firefox, Safari wording), usually CORS. */
+function isNetworkError(error) {
+	return /failed to fetch|networkerror|load failed|network request failed/i.test(errorText(error));
+}
+function createOpenListApi(base, token) {
+	const root = base.replace(/\/+$/, "");
+	const urls = /* @__PURE__ */ new Map();
+	async function request(apiPath, body) {
+		const response = await fetch(`${root}${apiPath}`, {
+			method: body === void 0 ? "GET" : "POST",
+			headers: {
+				...body === void 0 ? {} : { "Content-Type": "application/json" },
+				...token ? { Authorization: token } : {}
+			},
+			body: body === void 0 ? void 0 : JSON.stringify(body)
+		});
+		const payload = await response.json().catch(() => null);
+		if (!payload) throw new ApiError(`HTTP ${response.status}`, response.status);
+		if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
+		return payload.data;
+	}
+	function absoluteUrl(raw) {
+		if (!raw) return "";
+		if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) return raw;
+		const origin = root || (typeof window !== "undefined" ? window.location.origin : "");
+		try {
+			return new URL(raw, `${origin}/`).href;
+		} catch {
+			return raw;
+		}
+	}
+	const directUrl = (file) => `${root}/d${encodePath(file.path)}${file.sign ? `?sign=${encodeURIComponent(file.sign)}` : ""}`;
+	return {
+		async list(path, password) {
+			return (await request("/api/fs/list", {
+				path,
+				password,
+				page: 1,
+				per_page: 0,
+				refresh: false
+			}))?.content ?? [];
+		},
+		get: (path, password) => request("/api/fs/get", {
+			path,
+			password
+		}),
+		async settings() {
+			try {
+				const data = await request("/api/public/settings");
+				return {
+					title: data?.site_title || data?.title || "",
+					iframePreviews: data?.iframe_previews || ""
+				};
+			} catch {
+				return {
+					title: "",
+					iframePreviews: ""
+				};
+			}
+		},
+		async fileUrl(file, password) {
+			if (file.raw_url) return absoluteUrl(file.raw_url);
+			const cached = urls.get(file.path);
+			if (cached) return cached;
+			let url = "";
+			try {
+				url = absoluteUrl((await request("/api/fs/get", {
+					path: file.path,
+					password
+				}))?.raw_url ?? "");
+			} catch {}
+			url ||= directUrl(file);
+			urls.set(file.path, url);
+			return url;
+		},
+		directUrl,
+		clearCache(path) {
+			if (!path) urls.clear();
+			else for (const key of [...urls.keys()]) if (isWithin(key, path)) urls.delete(key);
+		}
+	};
+}
+// src/client/demo.ts
+/** Built-in sample data, used when no `base` is given. */
+const TREE = {
+	"/": [
+		{
+			name: "assignments",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "exams",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "materials",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "notes",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "slides",
+			size: 0,
+			is_dir: true,
+			modified: "2026-09-01T08:00:00+08:00"
+		},
+		{
+			name: "加密示例（密码 1234）",
+			size: 0,
+			is_dir: true,
+			modified: "2026-10-20T18:00:00+08:00"
+		}
+	],
+	"/assignments": [{
+		name: "线代作业参考答案",
+		size: 0,
+		is_dir: true,
+		modified: "2026-10-12T21:30:00+08:00"
+	}, {
+		name: "作业提交说明.pdf",
+		size: 186432,
+		is_dir: false,
+		modified: "2026-09-03T10:15:00+08:00"
+	}],
+	"/assignments/线代作业参考答案": [
+		{
+			name: "第1次作业参考答案.doc",
+			size: 412672,
+			is_dir: false,
+			modified: "2026-09-15T22:41:00+08:00"
+		},
+		{
+			name: "第2次作业参考答案.pdf",
+			size: 1048576,
+			is_dir: false,
+			modified: "2026-09-22T22:03:00+08:00"
+		},
+		{
+			name: "第3次作业参考答案.pdf",
+			size: 986112,
+			is_dir: false,
+			modified: "2026-09-29T21:57:00+08:00"
+		},
+		{
+			name: "第4次作业参考答案.pdf",
+			size: 1572864,
+			is_dir: false,
+			modified: "2026-10-13T22:10:00+08:00"
+		}
+	],
+	"/exams": [
+		{
+			name: "2023 期末试题和答案.pdf",
+			size: 2345678,
+			is_dir: false,
+			modified: "2025-01-18T09:20:00+08:00"
+		},
+		{
+			name: "2024 期中试题.pdf",
+			size: 1234567,
+			is_dir: false,
+			modified: "2025-11-02T14:08:00+08:00"
+		},
+		{
+			name: "代数与几何-多年合集-试题和答案.pdf",
+			size: 18874368,
+			is_dir: false,
+			modified: "2025-01-18T09:25:00+08:00"
+		}
+	],
+	"/materials": [
+		{
+			name: "线性代数及其应用（Lay 第5版）.pdf",
+			size: 48231424,
+			is_dir: false,
+			modified: "2024-07-29T16:44:00+08:00"
+		},
+		{
+			name: "Introduction to Linear Algebra（Strang）.pdf",
+			size: 36700160,
+			is_dir: false,
+			modified: "2024-07-29T16:50:00+08:00"
+		},
+		{
+			name: "疑难解答与习题指导.zip",
+			size: 9437184,
+			is_dir: false,
+			modified: "2024-08-05T11:12:00+08:00"
+		}
+	],
+	"/notes": [{
+		name: "线性代数笔记（106页）.pdf",
+		size: 12582912,
+		is_dir: false,
+		modified: "2025-06-30T20:31:00+08:00"
+	}, {
+		name: "期末复习提纲.docx",
+		size: 245760,
+		is_dir: false,
+		modified: "2026-01-05T19:02:00+08:00"
+	}],
+	"/加密示例（密码 1234）": [{
+		name: "期末答案（教师版）.pdf",
+		size: 2621440,
+		is_dir: false,
+		modified: "2026-10-20T18:00:00+08:00"
+	}, {
+		name: "成绩登记表.xlsx",
+		size: 48128,
+		is_dir: false,
+		modified: "2026-10-21T09:12:00+08:00"
+	}],
+	"/slides": [{
+		name: "第一章 行列式.pptx",
+		size: 3145728,
+		is_dir: false,
+		modified: "2026-09-08T13:26:00+08:00"
+	}, {
+		name: "第二章 矩阵.pptx",
+		size: 4194304,
+		is_dir: false,
+		modified: "2026-09-15T13:30:00+08:00"
+	}]
+};
+/** Demo-only folder passwords, so the demo can show the password flow. */
+const PASSWORDS = { "/加密示例（密码 1234）": "1234" };
+function guard(path, password) {
+	const lock = Object.entries(PASSWORDS).find(([folder]) => isWithin(path, folder));
+	if (lock && lock[1] !== password) throw new ApiError("password is incorrect or you have no permission", 403);
+}
+function parentOf(path) {
+	return path.slice(0, path.lastIndexOf("/")) || "/";
+}
+/** Demo OpenList: same API, no network; files have no URL. */
+function createDemoApi(delay = 220) {
+	return {
+		async list(path, password) {
+			await new Promise((resolve) => setTimeout(resolve, delay));
+			guard(path, password);
+			return TREE[path] ?? [];
+		},
+		async get(path, password) {
+			guard(path, password);
+			const name = path.split("/").filter(Boolean).pop() ?? "";
+			const item = (TREE[parentOf(path)] ?? []).find((entry) => entry.name === name);
+			if (!item) throw new ApiError("object not found", 404);
+			return item;
+		},
+		settings: async () => ({
+			title: "",
+			iframePreviews: ""
+		}),
+		fileUrl: async () => "",
+		directUrl: () => "",
+		clearCache: () => {}
+	};
+}
+// src/client/download.ts
+/** Open a file URL; OpenList serves `/p/` and `/d/` as attachments, so this downloads. */
+function openUrl(url) {
+	const anchor = document.createElement("a");
+	anchor.href = url;
+	anchor.target = "_blank";
+	anchor.rel = "noopener";
+	document.body.appendChild(anchor);
+	anchor.click();
+	anchor.remove();
+}
+// src/client/icons.ts
+/** Stroke icons on a 24×24 grid, drawn by `Icon.vue`. */
+const ICONS = {
+	lock: {
+		stroke: 2.2,
+		paths: ["M7 11h10a2 2 0 0 1 2 2v6a2 2 0 0 1-2 2H7a2 2 0 0 1-2-2v-6a2 2 0 0 1 2-2z", "M8 11V8a4 4 0 0 1 8 0v3"]
+	},
+	key: {
+		stroke: 2,
+		paths: [
+			"M4 15a4 4 0 1 0 8 0a4 4 0 1 0-8 0",
+			"m11 12 9-9",
+			"m17 6 3 3"
+		]
+	},
+	close: {
+		stroke: 2.2,
+		paths: ["M6 6l12 12", "M18 6 6 18"]
+	},
+	download: {
+		stroke: 2.2,
+		paths: [
+			"M12 3v12",
+			"m7 10 5 5 5-5",
+			"M5 21h14"
+		]
+	},
+	eye: {
+		stroke: 2,
+		paths: ["M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z", "M9 12a3 3 0 1 0 6 0a3 3 0 1 0-6 0"]
+	},
+	refresh: {
+		stroke: 2,
+		paths: ["M21 12a9 9 0 1 1-3-6.7", "M21 4v5h-5"]
+	},
+	search: {
+		stroke: 2,
+		paths: ["M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0", "m20 20-3.5-3.5"]
+	},
+	next: {
+		stroke: 2.2,
+		paths: ["m9 6 6 6-6 6"]
+	},
+	previous: {
+		stroke: 2.2,
+		paths: ["m15 6-6 6 6 6"]
+	},
+	zoomIn: {
+		stroke: 2,
+		paths: [
+			"M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0",
+			"m20 20-3.5-3.5",
+			"M11 8v6M8 11h6"
+		]
+	},
+	zoomOut: {
+		stroke: 2,
+		paths: [
+			"M4 11a7 7 0 1 0 14 0a7 7 0 1 0-14 0",
+			"m20 20-3.5-3.5",
+			"M8 11h6"
+		]
+	}
+};
+// src/client/Icon.vue
+const _sfc_main$2 = /*@__PURE__*/ defineComponent({
+	__name: "Icon",
+	__ssrInlineRender: true,
+	props: {
+		name: {},
+		size: { default: 16 }
+	},
+	setup(__props) {
+		return (_ctx, _push, _parent, _attrs) => {
+			_push(`<svg${ssrRenderAttrs(mergeProps({
+				viewBox: "0 0 24 24",
+				width: __props.size,
+				height: __props.size,
+				fill: "none",
+				stroke: "currentColor",
+				"stroke-width": unref(ICONS)[__props.name].stroke,
+				"stroke-linecap": "round",
+				"stroke-linejoin": "round",
+				"aria-hidden": "true"
+			}, _attrs))}><!--[-->`);
+			ssrRenderList(unref(ICONS)[__props.name].paths, (d) => {
+				_push(`<path${ssrRenderAttr("d", d)}></path>`);
+			});
+			_push(`<!--]--></svg>`);
+		};
+	}
+});
+const _sfc_setup$2 = _sfc_main$2.setup;
+_sfc_main$2.setup = (props, ctx) => {
+	const ssrContext = useSSRContext();
+	(ssrContext.modules || (ssrContext.modules = /* @__PURE__ */ new Set())).add("src/client/Icon.vue");
+	return _sfc_setup$2 ? _sfc_setup$2(props, ctx) : void 0;
+};
+// src/client/locales.ts
+const fileListLocales = {
+	"zh-CN": {
+		allFiles: "全部文件",
+		demoBadge: "演示数据",
+		filter: "筛选文件名",
+		refresh: "刷新",
+		batch: "下载 ZIP",
+		batchCount: "批量下载（{count}）",
+		batching: "打包中 {percent}%",
+		passwordPrompt: "该目录受密码保护：",
+		passwordPlaceholder: "输入密码",
+		open: "打开",
+		columnName: "文件名",
+		columnSize: "文件大小",
+		columnDate: "最后修改日期",
+		loading: "加载中…",
+		loadFailed: "加载失败：{message}",
+		guestHint: "在 OpenList 后台启用 guest，或给组件传一个只读 token。",
+		corsHint: "可能是跨域或混合内容被拦截：检查 OpenList 的 cors.allow_origins（OpenList-Worker 为 ALLOW_URLS）与页面协议。",
+		retry: "重试",
+		empty: "没有文件",
+		preview: "预览",
+		download: "下载",
+		loaded: "{count} 个已加载文件",
+		selected: "已选 {count} 项",
+		unloaded: "{count} 个目录未展开，未计入全选",
+		folderFailed: "打开文件夹失败：{message}",
+		demoDownload: "演示模式：接入 OpenList 后会下载「{name}」",
+		demoPreview: "演示模式：接入 OpenList 后可预览「{name}」",
+		demoBatch: "演示模式：将打包已勾选的 {count} 个文件",
+		downloadFailed: "下载失败：{message}",
+		previewFailed: "预览失败：{message}",
+		batchFailed: "打包失败：{message}",
+		defaultZip: "资源",
+		clear: "清除",
+		clearSelection: "取消选择",
+		totalSize: "共 {size}",
+		folderItems: "{count} 项",
+		sortBy: "排序",
+		selectAll: "全选",
+		selectItem: "选择 {name}",
+		expand: "展开 {name}",
+		collapse: "收起 {name}",
+		close: "关闭",
+		previous: "上一个",
+		next: "下一个",
+		rotate: "旋转",
+		actualSize: "原始大小",
+		previewUnsupported: "该类型暂不支持在线预览，可下载后查看",
+		previewUnavailable: "该文件无法在页面内预览，可下载后查看",
+		previewTooLarge: "文件较大（{size}），请下载后查看",
+		textTruncated: "仅显示前 {size}，完整内容请下载",
+		refreshing: "刷新中",
+		refreshFailed: "刷新失败：{message}",
+		cancel: "取消",
+		passwordFor: "{name} 的密码",
+		passwordWrong: "密码不正确或无权访问",
+		passwordStale: "已保存的密码已失效，请重新输入",
+		rememberPassword: "在此标签页中记住（关闭标签页后失效）",
+		remembered: "已记住",
+		forgetPassword: "忘记",
+		unlockFolder: "输入 {name} 的密码",
+		networkHint: "可能被跨域拦截：请检查 OpenList 的 cors.allow_origins，或 OpenList-Worker 的 ALLOW_URLS。"
+	},
+	"en-US": {
+		allFiles: "All files",
+		demoBadge: "Demo data",
+		filter: "Filter files",
+		refresh: "Refresh",
+		batch: "Download ZIP",
+		batchCount: "Download ZIP ({count})",
+		batching: "Zipping {percent}%",
+		passwordPrompt: "This folder is password protected:",
+		passwordPlaceholder: "Folder password",
+		open: "Open",
+		columnName: "Name",
+		columnSize: "Size",
+		columnDate: "Modified",
+		loading: "Loading…",
+		loadFailed: "Failed to load: {message}",
+		guestHint: "Enable the guest user in OpenList, or pass a read-only token.",
+		corsHint: "Possibly blocked by CORS or mixed content. Check cors.allow_origins in OpenList (ALLOW_URLS in OpenList-Worker) and the page protocol.",
+		retry: "Retry",
+		empty: "No files",
+		preview: "Preview",
+		download: "Download",
+		loaded: "{count} loaded file(s)",
+		selected: "{count} selected",
+		unloaded: "{count} folder(s) not expanded, excluded from select-all",
+		folderFailed: "Failed to open folder: {message}",
+		demoDownload: "Demo mode: \"{name}\" will download once OpenList is connected.",
+		demoPreview: "Demo mode: \"{name}\" will preview once OpenList is connected.",
+		demoBatch: "Demo mode: {count} selected file(s) would be zipped.",
+		downloadFailed: "Download failed: {message}",
+		previewFailed: "Preview failed: {message}",
+		batchFailed: "Failed to create ZIP: {message}",
+		defaultZip: "resources",
+		clear: "Clear",
+		clearSelection: "Clear selection",
+		totalSize: "{size} total",
+		folderItems: "{count} items",
+		sortBy: "Sort",
+		selectAll: "Select all",
+		selectItem: "Select {name}",
+		expand: "Expand {name}",
+		collapse: "Collapse {name}",
+		close: "Close",
+		previous: "Previous",
+		next: "Next",
+		rotate: "Rotate",
+		actualSize: "Actual size",
+		previewUnsupported: "This file type cannot be previewed here. Download it to view.",
+		previewUnavailable: "This file cannot be previewed in the page. Download it to view.",
+		previewTooLarge: "This file is large ({size}). Download it to view.",
+		textTruncated: "Showing the first {size} only. Download for the full file.",
+		refreshing: "Refreshing",
+		refreshFailed: "Refresh failed: {message}",
+		cancel: "Cancel",
+		passwordFor: "Password for {name}",
+		passwordWrong: "Wrong password or no permission",
+		passwordStale: "The saved password no longer works. Enter it again.",
+		rememberPassword: "Remember in this tab (cleared when the tab closes)",
+		remembered: "Remembered",
+		forgetPassword: "Forget",
+		unlockFolder: "Enter the password for {name}",
+		networkHint: "Possibly blocked by CORS: check cors.allow_origins in OpenList, or ALLOW_URLS in OpenList-Worker."
+	}
+};
+function formatLabel(template, values = {}) {
+	return template.replace(/\{(\w+)\}/g, (_, key) => values[key] === void 0 ? `{${key}}` : String(values[key]));
 }
-/**
-* Fill an OpenList preview scheme: `$name`, `$url` (raw URL) and `$durl`
-* (signed download URL), each optionally prefixed with `e` (URI-encode) or
-* `b` (base64), e.g. `$e_url`, `$b_url`, `$e_durl`.
-*/
-function fillPreviewUrl(scheme, args) {
-	return scheme.replace(/\$name/g, args.name).replace(/\$[eb_]*durl/g, (placeholder) => applyUrlOps(placeholder, args.downloadUrl)).replace(/\$[eb_]*url/g, (placeholder) => applyUrlOps(placeholder, args.rawUrl));
+function resolveLabels(locale = "zh-CN", overrides) {
+	return {
+		...fileListLocales[locale] ?? fileListLocales["zh-CN"],
+		...overrides
+	};
 }
 // src/client/PreviewDialog.vue
 const _sfc_main$1 = /*@__PURE__*/ defineComponent({
@@ -482,11 +799,12 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 	],
 	setup(__props, { emit: __emit }) {
 		/**
-		* PreviewDialog.vue —— 文件预览弹窗（原生 <dialog>，不跳转页面）
+		* File preview in a native <dialog>, without leaving the page.
 		*
-		* image / video / audio：原生标签；text：Range 读取前 maxTextBytes；
-		* pdf：OpenList `iframe_previews` 中的查看器，未配置时用浏览器自带阅读器（Blob）；
-		* 其它类型（含 Office）、失败、过大、演示模式：文件信息 + 下载。
+		* image / video / audio: native elements; text: the first `maxTextBytes`
+		* through a Range request; pdf: the first matching OpenList `iframe_previews`
+		* viewer, else the browser's reader through a Blob. Anything else (Office
+		* included), failures, oversized PDFs and demo mode: file info + download.
 		*/
 		const props = __props;
 		function t(key, values) {
@@ -636,20 +954,49 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 				_push(`<div class="fl-preview-panel"><header class="fl-preview-head"><span class="fl-type"${ssrRenderAttr("data-kind", unref(fileKind)(__props.file.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(__props.file.name) || "FILE")}</span><div class="fl-preview-title"><span class="fl-preview-name">${ssrInterpolate(__props.file.name)}</span><span class="fl-preview-meta">${ssrInterpolate(unref(formatSize)(__props.file.size))} · ${ssrInterpolate(unref(formatDate)(__props.file.modified))}</span></div>`);
 				if (__props.total > 1 || mode.value === "image" && !busy.value) {
 					_push(`<div class="fl-preview-tools fl-preview-nav">`);
-					if (__props.total > 1) _push(`<!--[--><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("previous"))}${ssrRenderAttr("title", t("previous"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m15 6-6 6 6 6"></path></svg></button><span class="fl-preview-count">${ssrInterpolate(__props.position)} / ${ssrInterpolate(__props.total)}</span><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("next"))}${ssrRenderAttr("title", t("next"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button><!--]-->`);
-					else _push(`<!---->`);
+					if (__props.total > 1) {
+						_push(`<!--[--><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("previous"))}${ssrRenderAttr("title", t("previous"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "previous",
+							size: 18
+						}, null, _parent));
+						_push(`</button><span class="fl-preview-count">${ssrInterpolate(__props.position)} / ${ssrInterpolate(__props.total)}</span><button class="fl-preview-tool" type="button"${ssrRenderAttr("aria-label", t("next"))}${ssrRenderAttr("title", t("next"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "next",
+							size: 18
+						}, null, _parent));
+						_push(`</button><!--]-->`);
+					} else _push(`<!---->`);
 					if (mode.value === "image" && !busy.value) {
-						_push(`<!--[--><button class="fl-preview-tool fl-preview-rotate" type="button"${ssrRenderAttr("aria-label", t("rotate"))}${ssrRenderAttr("title", t("rotate"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button><button class="fl-preview-tool fl-preview-zoom" type="button"${ssrRenderAttr("aria-pressed", actualSize.value)}${ssrRenderAttr("aria-label", t("actualSize"))}${ssrRenderAttr("title", t("actualSize"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path>`);
-						if (!actualSize.value) _push(`<path d="M11 8v6M8 11h6"></path>`);
-						else _push(`<path d="M8 11h6"></path>`);
-						_push(`</svg></button><!--]-->`);
+						_push(`<!--[--><button class="fl-preview-tool fl-preview-rotate" type="button"${ssrRenderAttr("aria-label", t("rotate"))}${ssrRenderAttr("title", t("rotate"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "refresh",
+							size: 17
+						}, null, _parent));
+						_push(`</button><button class="fl-preview-tool fl-preview-zoom" type="button"${ssrRenderAttr("aria-pressed", actualSize.value)}${ssrRenderAttr("aria-label", t("actualSize"))}${ssrRenderAttr("title", t("actualSize"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: actualSize.value ? "zoomOut" : "zoomIn",
+							size: 17
+						}, null, _parent));
+						_push(`</button><!--]-->`);
 					} else _push(`<!---->`);
 					_push(`</div>`);
 				} else _push(`<!---->`);
 				_push(`<div class="fl-preview-tools fl-preview-actions">`);
-				if (!__props.demo) _push(`<button class="fl-preview-tool fl-preview-download" type="button"${ssrRenderAttr("aria-label", t("download"))}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="17" height="17" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button>`);
-				else _push(`<!---->`);
-				_push(`<button class="fl-preview-tool fl-preview-close" type="button" autofocus${ssrRenderAttr("aria-label", t("close"))}${ssrRenderAttr("title", t("close"))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg></button></div></header><div class="fl-preview-body"${ssrRenderAttr("data-mode", busy.value ? "loading" : mode.value)}>`);
+				if (!__props.demo) {
+					_push(`<button class="fl-preview-tool fl-preview-download" type="button"${ssrRenderAttr("aria-label", t("download"))}${ssrRenderAttr("title", t("download"))}>`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						name: "download",
+						size: 17
+					}, null, _parent));
+					_push(`</button>`);
+				} else _push(`<!---->`);
+				_push(`<button class="fl-preview-tool fl-preview-close" type="button" autofocus${ssrRenderAttr("aria-label", t("close"))}${ssrRenderAttr("title", t("close"))}>`);
+				_push(ssrRenderComponent(_sfc_main$2, {
+					name: "close",
+					size: 18
+				}, null, _parent));
+				_push(`</button></div></header><div class="fl-preview-body"${ssrRenderAttr("data-mode", busy.value ? "loading" : mode.value)}>`);
 				if (busy.value) _push(`<div class="fl-preview-status" role="status">${ssrInterpolate(t("loading"))}</div>`);
 				else if (mode.value === "image") _push(`<img class="${ssrRenderClass([{ "fl-preview-actual": actualSize.value }, "fl-preview-image"])}"${ssrRenderAttr("src", __props.src)}${ssrRenderAttr("alt", __props.file.name)} style="${ssrRenderStyle({ transform: rotation.value ? `rotate(${rotation.value}deg)` : void 0 })}">`);
 				else if (mode.value === "video") _push(`<video class="fl-preview-video"${ssrRenderAttr("src", __props.src)} controls playsinline preload="metadata"></video>`);
@@ -662,8 +1009,14 @@ const _sfc_main$1 = /*@__PURE__*/ defineComponent({
 				} else if (mode.value === "pdf") _push(`<iframe class="fl-preview-frame"${ssrRenderAttr("src", __props.viewer || blobUrl.value)}${ssrRenderAttr("title", __props.file.name)}></iframe>`);
 				else {
 					_push(`<div class="fl-preview-info"><span class="fl-type fl-preview-badge"${ssrRenderAttr("data-kind", unref(fileKind)(__props.file.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(__props.file.name) || "FILE")}</span><p class="fl-preview-message">${ssrInterpolate(infoMessage.value)}</p>`);
-					if (!__props.demo) _push(`<button class="fl-btn fl-btn-primary" type="button"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg> ${ssrInterpolate(t("download"))}</button>`);
-					else _push(`<!---->`);
+					if (!__props.demo) {
+						_push(`<button class="fl-btn fl-btn-primary" type="button">`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "download",
+							size: 15
+						}, null, _parent));
+						_push(` ${ssrInterpolate(t("download"))}</button>`);
+					} else _push(`<!---->`);
 					_push(`</div>`);
 				}
 				_push(`</div></div>`);
@@ -678,6 +1031,67 @@ _sfc_main$1.setup = (props, ctx) => {
 	(ssrContext.modules || (ssrContext.modules = /* @__PURE__ */ new Set())).add("src/client/PreviewDialog.vue");
 	return _sfc_setup$1 ? _sfc_setup$1(props, ctx) : void 0;
 };
+// src/client/tree.ts
+function newLock(prompting = false, error = "") {
+	return {
+		prompting,
+		input: "",
+		error,
+		remember: false,
+		busy: false
+	};
+}
+function toNodes(items, parent, password) {
+	return items.map((item) => ({
+		...item,
+		path: joinPath(parent.path, item.name),
+		depth: parent.depth + 1,
+		expanded: false,
+		loaded: false,
+		loading: false,
+		children: [],
+		password,
+		zipPath: [...parent.zipPath, item.name]
+	}));
+}
+function sortTree(nodes, key, ascending) {
+	nodes.sort((a, b) => compareNodes(a, b, key, ascending));
+	for (const node of nodes) if (node.children.length) sortTree(node.children, key, ascending);
+}
+/** Loaded files at or under a node. */
+function descendantFiles(node) {
+	return node.is_dir ? node.children.flatMap(descendantFiles) : [node];
+}
+/** Last path segment, for labels. */
+function sourceName(path) {
+	return path.split("/").filter(Boolean).pop() || path;
+}
+/** Loaded file count, size and selected count for every folder, in one pass. */
+function folderStats(roots, selected) {
+	const stats = /* @__PURE__ */ new Map();
+	const walk = (node) => {
+		if (!node.is_dir) return {
+			files: 1,
+			bytes: totalSize([node]),
+			selected: selected.has(node.path) ? 1 : 0
+		};
+		const total = {
+			files: 0,
+			bytes: 0,
+			selected: 0
+		};
+		for (const child of node.children) {
+			const part = walk(child);
+			total.files += part.files;
+			total.bytes += part.bytes;
+			total.selected += part.selected;
+		}
+		stats.set(node.path, total);
+		return total;
+	};
+	roots.forEach(walk);
+	return stats;
+}
 // src/client/passwords.ts
 /**
 * Folder passwords remembered for the current browser tab.
@@ -715,12 +1129,6 @@ function write(base, map) {
 function normalise(path) {
 	return path.replace(/\/+$/, "") || "/";
 }
-/** Whether `path` is `folder` itself or inside it. */
-function isWithin(path, folder) {
-	const p = normalise(path);
-	const f = normalise(folder);
-	return f === "/" || p === f || p.startsWith(`${f}/`);
-}
 /** The closest remembered folder at or above `path`, if any. */
 function findRememberedPassword(base, path) {
 	let best = null;
@@ -733,6 +1141,12 @@ function findRememberedPassword(base, path) {
 	}
 	return best;
 }
+function rememberFolderPassword(base, path, password) {
+	write(base, {
+		...read(base),
+		[normalise(path)]: password
+	});
+}
 function forgetFolderPassword(base, path) {
 	const map = read(base);
 	delete map[normalise(path)];
@@ -742,6 +1156,73 @@ function forgetFolderPassword(base, path) {
 function rememberedFolders(base) {
 	return Object.keys(read(base));
 }
+// src/client/usePasswords.ts
+/**
+* The one place that decides which folder password to send.
+*
+* Order: typed on this page for this exact folder → the item's own password
+* (site-configured, or inherited from the folder it was listed with) → typed
+* for an enclosing folder → remembered in this tab → the component default.
+*/
+function usePasswords(options) {
+	/** Typed on this page; not necessarily remembered. Survives refreshes. */
+	const typed = /* @__PURE__ */ new Map();
+	/** Remembered folders, mirrored from sessionStorage so templates react. */
+	const remembered = ref(/* @__PURE__ */ new Set());
+	function sync() {
+		remembered.value = new Set(options.enabled() ? rememberedFolders(options.scope()) : []);
+	}
+	function typedAbove(path) {
+		let best = "";
+		let bestFolder = "";
+		for (const [folder, password] of typed) if (isWithin(path, folder) && folder.length > bestFolder.length) {
+			best = password;
+			bestFolder = folder;
+		}
+		return best;
+	}
+	function resolve(path, own = "") {
+		const exact = typed.get(path);
+		if (exact) return { password: exact };
+		if (own) return { password: own };
+		const above = typedAbove(path);
+		if (above) return { password: above };
+		const stored = options.enabled() ? findRememberedPassword(options.scope(), path) : null;
+		if (stored) return {
+			password: stored.password,
+			rememberedAt: stored.path
+		};
+		return { password: options.fallback() };
+	}
+	/** A password worked: keep it for this page, and in this tab when asked. */
+	function accept(path, password, remember) {
+		typed.set(path, password);
+		if (remember && options.enabled()) {
+			rememberFolderPassword(options.scope(), path, password);
+			sync();
+		}
+	}
+	function forget(path) {
+		typed.delete(path);
+		forgetFolderPassword(options.scope(), path);
+		sync();
+	}
+	/** A remembered password stopped working: drop it. Returns whether one was dropped. */
+	function dropStale(rememberedAt) {
+		if (!rememberedAt) return false;
+		forgetFolderPassword(options.scope(), rememberedAt);
+		sync();
+		return true;
+	}
+	return {
+		remembered,
+		sync,
+		resolve,
+		accept,
+		forget,
+		dropStale
+	};
+}
 // src/client/FileList.vue
 const _sfc_main = /*@__PURE__*/ defineComponent({
 	__name: "FileList",
@@ -766,19 +1247,27 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 	},
 	setup(__props) {
 		/**
-		* FileList.vue —— VitePress 网盘文件列表（界面沿用 FileList，数据来自 OpenList）
-		*
-		* 用法：
-		*   <FileList base="https://pan.example.com" path="/课程资料" />
-		*   <FileList />  // 演示模式
+		* OpenList file browser: folder tree, batch ZIP, folder passwords and an
+		* in-page preview. OpenList access is in api.ts (demo.ts when `base` is empty),
+		* password choice in usePasswords.ts, tree helpers in tree.ts and downloads in
+		* download.ts; this component wires them to the UI.
 		*/
 		const props = __props;
 		const text = computed(() => resolveLabels(props.locale, props.labels));
 		function t(key, values) {
 			return formatLabel(text.value[key], values);
 		}
+		/** Prefix for element ids, unique per component instance. */
+		const uid = useId();
 		const demo = computed(() => !props.base);
-		const baseUrl = computed(() => props.base.replace(/\/+$/, ""));
+		const api = computed(() => demo.value ? createDemoApi() : createOpenListApi(props.base, props.token));
+		const canRemember = computed(() => props.rememberPassword !== false);
+		const passwords = usePasswords({
+			scope: () => props.base.replace(/\/+$/, "") || "demo",
+			enabled: () => canRemember.value,
+			fallback: () => props.password
+		});
+		const remembered = passwords.remembered;
 		const rootEl = ref();
 		const roots = ref([]);
 		const loadingRoot = ref(false);
@@ -786,110 +1275,45 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		const refreshing = ref(false);
 		let refreshSeq = 0;
 		/** Single-path mode: the listed folder itself needs a password. */
-		const rootLock = reactive({
-			active: false,
-			input: "",
-			error: "",
-			remember: false,
-			busy: false
-		});
-		/** Password the visitor typed for the listed folder (single-path mode). */
-		const rootPassword = ref("");
+		const rootLock = ref(null);
 		const keyword = ref("");
 		const selected = ref(/* @__PURE__ */ new Set());
 		const toast = ref("");
 		const sortKey = ref("name");
 		const sortAsc = ref(true);
 		const siteTitle = ref("");
-		/** OpenList's public `iframe_previews` setting (JSON text). */
 		const iframePreviews = ref("");
 		const batchBusy = ref(false);
 		const batchProgress = ref(0);
-		const downloadCache = /* @__PURE__ */ new Map();
 		let toastTimer;
-		function showToast(msg) {
-			toast.value = msg;
+		/** The folder listed in single-path mode, as the parent of the top rows. */
+		const listedFolder = computed(() => ({
+			path: props.path,
+			depth: -1,
+			zipPath: []
+		}));
+		function showToast(message) {
+			toast.value = message;
 			clearTimeout(toastTimer);
 			toastTimer = setTimeout(() => toast.value = "", 3200);
 		}
-		function errorText(error) {
-			return error instanceof Error ? error.message : String(error);
-		}
-		function isPasswordError(error) {
-			return /password|密码/i.test(errorText(error));
-		}
-		function isNetworkError(error) {
-			return /failed to fetch|networkerror|load failed|network request failed/i.test(errorText(error));
-		}
 		/** A failure toast; browser network errors are usually CORS, so say where to look. */
 		function failureMessage(key, error) {
 			const message = t(key, { message: errorText(error) });
-			return isNetworkError(error) ? `${message} ${t("networkHint")}` : message;
-		}
-		/** Total size for display: an empty total reads `0 B`, not `-`. */
-		function formatTotal(bytes) {
-			return bytes > 0 ? formatSize(bytes) : "0 B";
-		}
-		const canRemember = computed(() => props.rememberPassword !== false);
-		const passwordScope = computed(() => baseUrl.value || "demo");
-		/** Passwords typed on this page (not necessarily remembered), so a refresh keeps folders open. */
-		const typedPasswords = /* @__PURE__ */ new Map();
-		function typedPasswordFor(path) {
-			let best = "";
-			let bestPath = "";
-			for (const [folder, password] of typedPasswords) if (isWithin(path, folder) && folder.length > bestPath.length) {
-				best = password;
-				bestPath = folder;
-			}
-			return best;
-		}
-		/** Folders with a remembered password (mirrors sessionStorage so the template reacts). */
-		const rememberedPaths = ref(/* @__PURE__ */ new Set());
-		function syncRemembered() {
-			rememberedPaths.value = new Set(canRemember.value ? rememberedFolders(passwordScope.value) : []);
-		}
-		function storedPassword(path) {
-			return canRemember.value ? findRememberedPassword(passwordScope.value, path) : null;
-		}
-		/**
-		* Password for an item: its own or inherited one first (site-configured or
-		* typed), then one remembered in this tab, then the component's `password`.
-		*/
-		function passwordFor(node) {
-			if (node.password) return { password: node.password };
-			const typed = typedPasswordFor(node.path);
-			if (typed) return { password: typed };
-			const stored = storedPassword(node.path);
-			if (stored) return {
-				password: stored.password,
-				rememberedAt: stored.path
-			};
-			return { password: props.password };
+			return isNetworkError(error) ? `${message} ${t("corsHint")}` : message;
 		}
-		function rootPasswordFor() {
-			if (rootPassword.value) return { password: rootPassword.value };
-			const stored = storedPassword(props.path);
-			if (stored) return {
-				password: stored.password,
-				rememberedAt: stored.path
-			};
-			return { password: props.password };
-		}
-		/** A remembered password stopped working: drop it so we do not keep retrying it. */
-		function dropStale(path) {
-			if (!path) return false;
-			forgetFolderPassword(passwordScope.value, path);
-			syncRemembered();
-			return true;
+		function sortNodes(nodes) {
+			sortTree(nodes, sortKey.value, sortAsc.value);
 		}
 		function focusUnlock(path) {
 			nextTick(() => {
-				(rootEl.value?.querySelector(`input[data-unlock="${CSS.escape(path)}"]`))?.focus();
+				rootEl.value?.querySelector(`input[data-unlock="${CSS.escape(path)}"]`)?.focus();
 			});
 		}
-		/** Show the same-row password input; `focus` only for user actions, never on page load. */
+		/** Show a folder's same-row input; focus only on user actions, never on page load. */
 		function startPrompt(node, focus) {
-			node.prompting = true;
+			node.lock ??= newLock();
+			node.lock.prompting = true;
 			if (focus) focusUnlock(node.path);
 		}
 		function unlockErrorText(error) {
@@ -897,289 +1321,35 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			if (error === "stale") return t("passwordStale");
 			return "";
 		}
-		const DEMO_TREE = {
-			"/": [
-				{
-					name: "assignments",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "exams",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "materials",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "notes",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "slides",
-					size: 0,
-					is_dir: true,
-					modified: "2026-09-01T08:00:00+08:00"
-				},
-				{
-					name: "加密示例（密码 1234）",
-					size: 0,
-					is_dir: true,
-					modified: "2026-10-20T18:00:00+08:00"
-				}
-			],
-			"/assignments": [{
-				name: "线代作业参考答案",
-				size: 0,
-				is_dir: true,
-				modified: "2026-10-12T21:30:00+08:00"
-			}, {
-				name: "作业提交说明.pdf",
-				size: 186432,
-				is_dir: false,
-				modified: "2026-09-03T10:15:00+08:00"
-			}],
-			"/assignments/线代作业参考答案": [
-				{
-					name: "第1次作业参考答案.doc",
-					size: 412672,
-					is_dir: false,
-					modified: "2026-09-15T22:41:00+08:00"
-				},
-				{
-					name: "第2次作业参考答案.pdf",
-					size: 1048576,
-					is_dir: false,
-					modified: "2026-09-22T22:03:00+08:00"
-				},
-				{
-					name: "第3次作业参考答案.pdf",
-					size: 986112,
-					is_dir: false,
-					modified: "2026-09-29T21:57:00+08:00"
-				},
-				{
-					name: "第4次作业参考答案.pdf",
-					size: 1572864,
-					is_dir: false,
-					modified: "2026-10-13T22:10:00+08:00"
-				}
-			],
-			"/exams": [
-				{
-					name: "2023 期末试题和答案.pdf",
-					size: 2345678,
-					is_dir: false,
-					modified: "2025-01-18T09:20:00+08:00"
-				},
-				{
-					name: "2024 期中试题.pdf",
-					size: 1234567,
-					is_dir: false,
-					modified: "2025-11-02T14:08:00+08:00"
-				},
-				{
-					name: "代数与几何-多年合集-试题和答案.pdf",
-					size: 18874368,
-					is_dir: false,
-					modified: "2025-01-18T09:25:00+08:00"
-				}
-			],
-			"/materials": [
-				{
-					name: "线性代数及其应用（Lay 第5版）.pdf",
-					size: 48231424,
-					is_dir: false,
-					modified: "2024-07-29T16:44:00+08:00"
-				},
-				{
-					name: "Introduction to Linear Algebra（Strang）.pdf",
-					size: 36700160,
-					is_dir: false,
-					modified: "2024-07-29T16:50:00+08:00"
-				},
-				{
-					name: "疑难解答与习题指导.zip",
-					size: 9437184,
-					is_dir: false,
-					modified: "2024-08-05T11:12:00+08:00"
-				}
-			],
-			"/notes": [{
-				name: "线性代数笔记（106页）.pdf",
-				size: 12582912,
-				is_dir: false,
-				modified: "2025-06-30T20:31:00+08:00"
-			}, {
-				name: "期末复习提纲.docx",
-				size: 245760,
-				is_dir: false,
-				modified: "2026-01-05T19:02:00+08:00"
-			}],
-			"/加密示例（密码 1234）": [{
-				name: "期末答案（教师版）.pdf",
-				size: 2621440,
-				is_dir: false,
-				modified: "2026-10-20T18:00:00+08:00"
-			}, {
-				name: "成绩登记表.xlsx",
-				size: 48128,
-				is_dir: false,
-				modified: "2026-10-21T09:12:00+08:00"
-			}],
-			"/slides": [{
-				name: "第一章 行列式.pptx",
-				size: 3145728,
-				is_dir: false,
-				modified: "2026-09-08T13:26:00+08:00"
-			}, {
-				name: "第二章 矩阵.pptx",
-				size: 4194304,
-				is_dir: false,
-				modified: "2026-09-15T13:30:00+08:00"
-			}]
-		};
-		/** Demo-only folder passwords, so the demo can show the password flow. */
-		const DEMO_PASSWORDS = { "/加密示例（密码 1234）": "1234" };
-		class ApiError extends Error {
-			code;
-			constructor(message, code) {
-				super(message);
-				this.code = code;
-			}
-		}
-		/** JSON content type only when there is a body: a bare GET then needs no CORS preflight. */
-		function authHeaders(json) {
-			return {
-				...json ? { "Content-Type": "application/json" } : {},
-				...props.token ? { Authorization: props.token } : {}
-			};
-		}
-		async function request(apiPath, body) {
-			const response = await fetch(`${baseUrl.value}${apiPath}`, {
-				method: body === void 0 ? "GET" : "POST",
-				headers: authHeaders(body !== void 0),
-				body: body === void 0 ? void 0 : JSON.stringify(body)
-			});
-			const payload = await response.json().catch(() => null);
-			if (!payload) throw new ApiError(`HTTP ${response.status}`, response.status);
-			if (payload.code !== 200) throw new ApiError(payload.message || `HTTP ${response.status}`, payload.code ?? response.status);
-			return payload.data;
-		}
-		async function listDir(path, password) {
-			if (demo.value) {
-				await new Promise((resolve) => setTimeout(resolve, 220));
-				const guard = Object.entries(DEMO_PASSWORDS).find(([folder]) => isWithin(path, folder));
-				if (guard && guard[1] !== password) throw new ApiError("password is incorrect or you have no permission", 403);
-				return DEMO_TREE[path] ?? [];
-			}
-			return (await request("/api/fs/list", {
-				path,
-				password,
-				page: 1,
-				per_page: 0,
-				refresh: false
-			}))?.content ?? [];
-		}
-		function absoluteUrl(raw) {
-			if (!raw) return "";
-			if (/^[a-z][a-z0-9+.-]*:\/\//i.test(raw)) return raw;
-			const root = baseUrl.value || (typeof window !== "undefined" ? window.location.origin : "");
-			try {
-				return new URL(raw, `${root}/`).href;
-			} catch {
-				return raw;
-			}
-		}
-		async function resolveUrl(node) {
-			if (demo.value) return "";
-			if (node.raw_url) return absoluteUrl(node.raw_url);
-			const cached = downloadCache.get(node.path);
-			if (cached) return cached;
-			let url = "";
-			try {
-				url = absoluteUrl((await request("/api/fs/get", {
-					path: node.path,
-					password: passwordFor(node).password
-				}))?.raw_url ?? "");
-			} catch {
-				url = "";
-			}
-			if (!url) url = directUrl(node);
-			downloadCache.set(node.path, url);
-			return url;
-		}
-		/** OpenList's signed `/d/` download link for a file. */
-		function directUrl(node) {
-			return `${baseUrl.value}/d${encodePath(node.path)}${node.sign ? `?sign=${encodeURIComponent(node.sign)}` : ""}`;
-		}
-		async function loadSiteTitle() {
-			if (demo.value) return;
-			try {
-				const data = await request("/api/public/settings");
-				siteTitle.value = data?.site_title || data?.title || "";
-				iframePreviews.value = data?.iframe_previews || "";
-			} catch {
-				siteTitle.value = "";
-				iframePreviews.value = "";
-			}
-		}
-		function sortTree(nodes) {
-			nodes.sort((a, b) => compareNodes(a, b, sortKey.value, sortAsc.value));
-			for (const node of nodes) if (node.children.length) sortTree(node.children);
+		async function fetchChildren(node, password) {
+			node.children = toNodes(await api.value.list(node.path, password), node, password);
+			sortNodes(node.children);
+			node.loaded = true;
 		}
-		function toNodes(items, parent, depth, password = "", zipParent = []) {
-			return items.map((item) => ({
-				...item,
-				path: joinPath(parent, item.name),
-				depth,
-				expanded: false,
-				loaded: false,
-				loading: false,
-				children: [],
-				password,
-				zipPath: [...zipParent, item.name]
-			}));
-		}
-		function resortAll() {
-			if (props.sources.length) {
-				for (const root of roots.value) if (root.children.length) sortTree(root.children);
-			} else sortTree(roots.value);
-		}
-		function sourceName(path) {
-			const parts = path.split("/").filter(Boolean);
-			return parts[parts.length - 1] || path;
+		async function listRoot(password) {
+			const nodes = toNodes(await api.value.list(props.path, password), listedFolder.value, password);
+			sortNodes(nodes);
+			return nodes;
 		}
 		/**
-		* Load a folder's children. A password error marks the folder locked instead of
+		* Load a folder's children. A password error locks the folder instead of
 		* toasting; `prompt` also shows its same-row input (and focuses it).
 		*/
 		async function loadChildren(node, prompt = false) {
 			if (node.loaded) return true;
-			if (node.locked) {
+			if (node.lock) {
 				if (prompt) startPrompt(node, prompt === "focus");
 				return false;
 			}
 			node.loading = true;
-			const { password, rememberedAt } = passwordFor(node);
+			const { password, rememberedAt } = passwords.resolve(node.path, node.password);
 			try {
-				node.children = toNodes(await listDir(node.path, password), node.path, node.depth + 1, node.password, node.zipPath);
-				sortTree(node.children);
-				node.loaded = true;
+				await fetchChildren(node, password);
 				return true;
 			} catch (error) {
 				if (isPasswordError(error)) {
-					node.locked = true;
 					node.expanded = false;
-					node.unlockError = dropStale(rememberedAt) ? "stale" : "";
+					node.lock = newLock(false, passwords.dropStale(rememberedAt) ? "stale" : "");
 					if (prompt) startPrompt(node, prompt === "focus");
 				} else showToast(failureMessage("folderFailed", error));
 				return false;
@@ -1194,44 +1364,22 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 		}
 		async function loadSourceRoot(source, expanded) {
 			const path = source.path;
-			const configured = source.password ?? "";
+			const own = source.password ?? "";
 			let item = {
 				name: sourceName(path),
 				size: 0,
 				is_dir: !looksLikeFile(path),
 				modified: ""
 			};
-			let locked = false;
-			let unlockError = "";
-			if (!demo.value) {
-				const { password, rememberedAt } = configured ? {
-					password: configured,
-					rememberedAt: void 0
-				} : (() => {
-					const stored = storedPassword(path);
-					return stored ? {
-						password: stored.password,
-						rememberedAt: stored.path
-					} : {
-						password: props.password,
-						rememberedAt: void 0
-					};
-				})();
-				try {
-					const data = await request("/api/fs/get", {
-						path,
-						password
-					});
-					item = {
-						...item,
-						...data
-					};
-				} catch (error) {
-					if (isPasswordError(error)) {
-						locked = true;
-						unlockError = dropStale(rememberedAt) ? "stale" : "";
-					}
-				}
+			let lock;
+			const { password, rememberedAt } = passwords.resolve(path, own);
+			try {
+				item = {
+					...item,
+					...await api.value.get(path, password)
+				};
+			} catch (error) {
+				if (isPasswordError(error)) lock = newLock(expanded, passwords.dropStale(rememberedAt) ? "stale" : "");
 			}
 			const name = source.title || item.name || sourceName(path);
 			return {
@@ -1239,17 +1387,14 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				name,
 				path,
 				depth: 0,
-				expanded,
+				expanded: expanded && !lock,
 				loaded: false,
 				loading: false,
 				children: [],
-				password: configured,
-				configuredPassword: configured,
+				password: own,
 				isRoot: true,
-				locked,
-				unresolved: locked,
-				unlockError,
-				prompting: locked && expanded,
+				lock,
+				unresolved: !!lock,
 				zipPath: [item.is_dir ? name : item.name || sourceName(path)]
 			};
 		}
@@ -1268,20 +1413,17 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			let nodes;
 			if (props.sources.length) nodes = await Promise.all(props.sources.map((source) => loadSourceRoot(source, expandedPaths ? expandedPaths.has(source.path) : source.expanded ?? props.expanded)));
 			else {
-				const { password, rememberedAt } = rootPasswordFor();
-				let items;
+				const { password, rememberedAt } = passwords.resolve(props.path);
 				try {
-					items = await listDir(props.path, password);
+					nodes = await listRoot(password);
 				} catch (error) {
-					if (isPasswordError(error)) throw new RootLockedError(rememberedAt);
-					throw error;
+					throw isPasswordError(error) ? new RootLockedError(rememberedAt) : error;
 				}
-				nodes = toNodes(items, props.path, 0, rootPassword.value);
-				sortTree(nodes);
 			}
 			const open = async (list) => {
 				for (const node of list) {
-					if (!node.is_dir || node.locked || !node.expanded && !expandedPaths?.has(node.path)) continue;
+					const wanted = node.expanded || expandedPaths?.has(node.path);
+					if (!node.is_dir || node.lock || !wanted) continue;
 					node.expanded = await loadChildren(node, "show");
 					if (node.expanded && expandedPaths) await open(node.children);
 				}
@@ -1289,6 +1431,11 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			await open(nodes);
 			return nodes;
 		}
+		function lockRoot(error, fallback) {
+			roots.value = [];
+			selected.value = /* @__PURE__ */ new Set();
+			rootLock.value = newLock(true, passwords.dropStale(error.rememberedAt) ? "stale" : fallback);
+		}
 		/** First load, or a retry after an error: shows the loading state. */
 		async function loadRoot() {
 			refreshSeq += 1;
@@ -1297,54 +1444,21 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			errorMsg.value = "";
 			try {
 				roots.value = await buildTree();
-				rootLock.active = false;
+				rootLock.value = null;
 				selected.value = /* @__PURE__ */ new Set();
-				downloadCache.clear();
+				api.value.clearCache();
 			} catch (error) {
-				if (error instanceof RootLockedError) {
-					roots.value = [];
-					rootLock.active = true;
-					rootLock.error = dropStale(error.rememberedAt) ? "stale" : "";
-				} else errorMsg.value = errorText(error);
+				if (error instanceof RootLockedError) lockRoot(error, "");
+				else errorMsg.value = errorText(error);
 			} finally {
 				loadingRoot.value = false;
 			}
 		}
-		const visible = computed(() => {
-			const out = [];
-			const query = keyword.value.trim().toLowerCase();
-			const matches = (node) => !query || node.name.toLowerCase().includes(query) || node.is_dir && node.children.some(matches);
-			const walk = (nodes) => {
-				for (const node of nodes) {
-					if (!matches(node)) continue;
-					out.push(node);
-					if (node.is_dir && (node.expanded || query) && node.children.length) walk(node.children);
-				}
-			};
-			walk(roots.value);
-			return out;
-		});
-		function descendantFiles(node) {
-			if (!node.is_dir) return [node];
-			return node.children.flatMap(descendantFiles);
-		}
-		function isChecked(node) {
-			const files = descendantFiles(node);
-			return files.length > 0 && files.every((file) => selected.value.has(file.path));
-		}
-		function isIndeterminate(node) {
-			const files = descendantFiles(node);
-			const hit = files.filter((file) => selected.value.has(file.path)).length;
-			return hit > 0 && hit < files.length;
-		}
-		const allFiles = computed(() => roots.value.flatMap(descendantFiles));
-		const allChecked = computed(() => allFiles.value.length > 0 && allFiles.value.every((file) => selected.value.has(file.path)));
-		const someChecked = computed(() => !allChecked.value && allFiles.value.some((file) => selected.value.has(file.path)));
-		const selectedFiles = computed(() => allFiles.value.filter((file) => selected.value.has(file.path)));
-		const selectedBytes = computed(() => totalSize(selectedFiles.value));
-		const loadedBytes = computed(() => totalSize(allFiles.value));
-		function folderFiles(node) {
-			return node.is_dir && node.loaded ? descendantFiles(node) : [];
+		function applySort(key, ascending) {
+			sortKey.value = key;
+			sortAsc.value = ascending;
+			if (props.sources.length) roots.value.forEach((root) => sortNodes(root.children));
+			else sortNodes(roots.value);
 		}
 		/** Compact sort control for narrow containers, where header cells are hidden. */
 		const sortOptions = computed(() => [
@@ -1365,19 +1479,48 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			get: () => `${sortKey.value}:${sortAsc.value ? "asc" : "desc"}`,
 			set: (value) => {
 				const [key, direction] = value.split(":");
-				sortKey.value = key;
-				sortAsc.value = direction !== "desc";
-				resortAll();
+				applySort(key, direction !== "desc");
 			}
 		});
-		function triggerUrl(url) {
-			const anchor = document.createElement("a");
-			anchor.href = url;
-			anchor.target = "_blank";
-			anchor.rel = "noopener";
-			document.body.appendChild(anchor);
-			anchor.click();
-			anchor.remove();
+		const visible = computed(() => {
+			const out = [];
+			const query = keyword.value.trim().toLowerCase();
+			const matches = (node) => !query || node.name.toLowerCase().includes(query) || node.is_dir && node.children.some(matches);
+			const walk = (nodes) => {
+				for (const node of nodes) {
+					if (!matches(node)) continue;
+					out.push(node);
+					if (node.is_dir && (node.expanded || query) && node.children.length) walk(node.children);
+				}
+			};
+			walk(roots.value);
+			return out;
+		});
+		const stats = computed(() => folderStats(roots.value, selected.value));
+		const noStats = {
+			files: 0,
+			bytes: 0,
+			selected: 0
+		};
+		function statsOf(node) {
+			return stats.value.get(node.path) ?? noStats;
+		}
+		function isChecked(node) {
+			if (!node.is_dir) return selected.value.has(node.path);
+			const { files, selected: hit } = statsOf(node);
+			return files > 0 && hit === files;
+		}
+		function isIndeterminate(node) {
+			if (!node.is_dir) return false;
+			const { files, selected: hit } = statsOf(node);
+			return hit > 0 && hit < files;
+		}
+		const allFiles = computed(() => roots.value.flatMap(descendantFiles));
+		const selectedFiles = computed(() => allFiles.value.filter((file) => selected.value.has(file.path)));
+		const allChecked = computed(() => allFiles.value.length > 0 && selectedFiles.value.length === allFiles.value.length);
+		const someChecked = computed(() => !allChecked.value && selectedFiles.value.length > 0);
+		function fileUrlOf(node) {
+			return api.value.fileUrl(node, passwords.resolve(node.path, node.password).password);
 		}
 		async function download(node) {
 			if (node.is_dir) return;
@@ -1386,7 +1529,7 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				return;
 			}
 			try {
-				triggerUrl(await resolveUrl(node));
+				openUrl(await fileUrlOf(node));
 			} catch (error) {
 				showToast(t("downloadFailed", { message: errorText(error) }));
 			}
@@ -1414,17 +1557,15 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			if (demo.value || !canPreview(node)) return;
 			previewResolving.value = true;
 			try {
-				const url = await resolveUrl(node);
+				const url = await fileUrlOf(node);
 				if (seq !== previewSeq) return;
 				previewSrc.value = url;
-				if (previewKind(node.name) === "pdf") {
-					const viewer = iframePreviewsFor(node.name, iframePreviews.value)[0];
-					if (viewer) previewViewer.value = fillPreviewUrl(viewer.scheme, {
-						name: node.name,
-						rawUrl: url,
-						downloadUrl: directUrl(node)
-					});
-				}
+				const viewer = previewKind(node.name) === "pdf" ? iframePreviewsFor(node.name, iframePreviews.value)[0] : void 0;
+				if (viewer) previewViewer.value = fillPreviewUrl(viewer.scheme, {
+					name: node.name,
+					rawUrl: url,
+					downloadUrl: api.value.directUrl(node)
+				});
 			} catch (error) {
 				if (seq === previewSeq) previewError.value = errorText(error);
 			} finally {
@@ -1441,9 +1582,13 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			previewNode.value = null;
 		}
 		const displayTitle = computed(() => props.title || siteTitle.value || (props.path === "/" ? t("allFiles") : props.path));
+		async function loadSettings() {
+			const settings = await api.value.settings();
+			siteTitle.value = settings.title;
+			iframePreviews.value = settings.iframePreviews;
+		}
 		const stickyTop = ref(0);
 		function measureStickyTop() {
-			if (typeof document === "undefined") return;
 			let top = 0;
 			for (const el of document.querySelectorAll(".VPNav, .VPLocalNav")) {
 				const style = getComputedStyle(el);
@@ -1453,9 +1598,9 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 			stickyTop.value = top;
 		}
 		onMounted(() => {
-			syncRemembered();
+			passwords.sync();
 			loadRoot();
-			loadSiteTitle();
+			loadSettings();
 			measureStickyTop();
 			window.addEventListener("resize", measureStickyTop, { passive: true });
 		});
@@ -1474,96 +1619,181 @@ const _sfc_main = /*@__PURE__*/ defineComponent({
 				style: { "--fl-sticky-top-auto": `${stickyTop.value}px` },
 				"aria-busy": refreshing.value || loadingRoot.value
 			}, _attrs))}><div class="fl-bar">`);
-			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: formatTotal(selectedBytes.value) }))}</span></div>`);
+			if (selected.value.size) _push(`<div class="fl-selection" role="status"><span class="fl-selection-count">${ssrInterpolate(t("selected", { count: selected.value.size }))}</span><span class="fl-selection-size">${ssrInterpolate(t("totalSize", { size: unref(formatSize)(unref(totalSize)(selectedFiles.value)) }))}</span></div>`);
 			else {
 				_push(`<div class="fl-title"><span class="fl-title-text">${ssrInterpolate(displayTitle.value)}</span>`);
 				if (demo.value) _push(`<span class="fl-demo-badge">${ssrInterpolate(t("demoBadge"))}</span>`);
 				else _push(`<!---->`);
 				_push(`</div>`);
 			}
-			if (selected.value.size) _push(`<button class="fl-clear" type="button"${ssrRenderAttr("aria-label", t("clearSelection"))}${ssrRenderAttr("title", t("clearSelection"))}><svg class="fl-clear-icon" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg><span class="fl-clear-text">${ssrInterpolate(t("clear"))}</span></button>`);
-			else _push(`<!---->`);
-			_push(`<div class="fl-tools"><label class="fl-search"><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" aria-hidden="true"><circle cx="11" cy="11" r="7"></circle><path d="m20 20-3.5-3.5"></path></svg><input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="${ssrRenderClass([{ "fl-spinning": refreshing.value }, "fl-icon-btn fl-refresh"])}" type="button"${ssrIncludeBooleanAttr(refreshing.value || loadingRoot.value) ? " disabled" : ""}${ssrRenderAttr("aria-label", refreshing.value ? t("refreshing") : t("refresh"))}${ssrRenderAttr("title", refreshing.value ? t("refreshing") : t("refresh"))}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M21 12a9 9 0 1 1-3-6.7"></path><path d="M21 4v5h-5"></path></svg></button></div>`);
-			if (selected.value.size) _push(`<button class="fl-btn fl-btn-primary" type="button"${ssrIncludeBooleanAttr(batchBusy.value) ? " disabled" : ""}><svg viewBox="0 0 24 24" width="15" height="15" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg> ${ssrInterpolate(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch"))}</button>`);
-			else _push(`<!---->`);
+			if (selected.value.size) {
+				_push(`<button class="fl-clear" type="button"${ssrRenderAttr("aria-label", t("clearSelection"))}${ssrRenderAttr("title", t("clearSelection"))}>`);
+				_push(ssrRenderComponent(_sfc_main$2, {
+					class: "fl-clear-icon",
+					name: "close",
+					size: 18
+				}, null, _parent));
+				_push(`<span class="fl-clear-text">${ssrInterpolate(t("clear"))}</span></button>`);
+			} else _push(`<!---->`);
+			_push(`<div class="fl-tools"><label class="fl-search">`);
+			_push(ssrRenderComponent(_sfc_main$2, {
+				name: "search",
+				size: 15
+			}, null, _parent));
+			_push(`<input${ssrRenderAttr("value", keyword.value)} type="text"${ssrRenderAttr("placeholder", t("filter"))}${ssrRenderAttr("aria-label", t("filter"))}></label><button class="${ssrRenderClass([{ "fl-spinning": refreshing.value }, "fl-icon-btn fl-refresh"])}" type="button"${ssrIncludeBooleanAttr(refreshing.value || loadingRoot.value) ? " disabled" : ""}${ssrRenderAttr("aria-label", refreshing.value ? t("refreshing") : t("refresh"))}${ssrRenderAttr("title", refreshing.value ? t("refreshing") : t("refresh"))}>`);
+			_push(ssrRenderComponent(_sfc_main$2, {
+				name: "refresh",
+				size: 15
+			}, null, _parent));
+			_push(`</button></div>`);
+			if (selected.value.size) {
+				_push(`<button class="fl-btn fl-btn-primary" type="button"${ssrIncludeBooleanAttr(batchBusy.value) ? " disabled" : ""}>`);
+				_push(ssrRenderComponent(_sfc_main$2, {
+					name: "download",
+					size: 15
+				}, null, _parent));
+				_push(` ${ssrInterpolate(batchBusy.value ? t("batching", { percent: batchProgress.value }) : t("batch"))}</button>`);
+			} else _push(`<!---->`);
 			_push(`</div><div class="fl-row fl-head">`);
 			if (refreshing.value) _push(`<span class="fl-progress" aria-hidden="true"></span>`);
 			else _push(`<!---->`);
-			_push(`<label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><span class="fl-cell fl-cell-name"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === "name" ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t("columnName"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "name" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-size"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnSize"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "size" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-date"><button class="fl-sort-btn" type="button">${ssrInterpolate(t("columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === "modified" ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
+			_push(`<label class="fl-cell fl-cell-check"><input type="checkbox"${ssrRenderAttr("aria-label", t("selectAll"))}${ssrIncludeBooleanAttr(allChecked.value) ? " checked" : ""}${ssrRenderAttr("indeterminate", someChecked.value)}></label><!--[-->`);
+			ssrRenderList([
+				"name",
+				"size",
+				"modified"
+			], (column) => {
+				_push(`<span class="${ssrRenderClass([`fl-cell-${column === "modified" ? "date" : column}`, "fl-cell"])}"><button class="fl-sort-btn" type="button"${ssrRenderAttr("aria-sort", sortKey.value === column ? sortAsc.value ? "ascending" : "descending" : void 0)}>${ssrInterpolate(t(column === "name" ? "columnName" : column === "size" ? "columnSize" : "columnDate"))}<span class="fl-sort" aria-hidden="true">${ssrInterpolate(sortKey.value === column ? sortAsc.value ? "▲" : "▼" : "")}</span></button></span>`);
+			});
+			_push(`<!--]--><span class="fl-cell fl-cell-op"><label class="fl-sort-select"><span>${ssrInterpolate(t("sortBy"))}</span><span class="fl-sort-current" aria-hidden="true">${ssrInterpolate(sortOptions.value.find((option) => option.value === sortValue.value)?.label)}</span><select${ssrRenderAttr("aria-label", t("sortBy"))}><!--[-->`);
 			ssrRenderList(sortOptions.value, (option) => {
 				_push(`<option${ssrRenderAttr("value", option.value)}${ssrIncludeBooleanAttr(Array.isArray(sortValue.value) ? ssrLooseContain(sortValue.value, option.value) : ssrLooseEqual(sortValue.value, option.value)) ? " selected" : ""}>${ssrInterpolate(option.label)}</option>`);
 			});
 			_push(`<!--]--></select></label></span></div>`);
 			if (loadingRoot.value) _push(`<div class="fl-status">${ssrInterpolate(t("loading"))}</div>`);
-			else if (rootLock.active) {
-				_push(`<form class="${ssrRenderClass([{ "fl-unlock-error": rootLock.error }, "fl-unlock-root"])}"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><label class="fl-unlock-label"${ssrRenderAttr("for", `fl-root-unlock-${__props.path}`)}>${ssrInterpolate(t("passwordPrompt"))}</label>`);
-				if (rootLock.error) _push(`<span id="fl-root-unlock-error" class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(rootLock.error))}</span>`);
+			else if (rootLock.value) {
+				_push(`<form class="${ssrRenderClass([{ "fl-unlock-error": rootLock.value.error }, "fl-unlock-root"])}">`);
+				_push(ssrRenderComponent(_sfc_main$2, {
+					class: "fl-unlock-lock",
+					name: "lock"
+				}, null, _parent));
+				_push(`<label class="fl-unlock-label"${ssrRenderAttr("for", `${unref(uid)}-root`)}>${ssrInterpolate(t("passwordPrompt"))}</label>`);
+				if (rootLock.value.error) _push(`<span${ssrRenderAttr("id", `${unref(uid)}-root-error`)} class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(rootLock.value.error))}</span>`);
 				else _push(`<!---->`);
-				_push(`<span class="fl-unlock"><input${ssrRenderAttr("id", `fl-root-unlock-${__props.path}`)}${ssrRenderAttr("value", rootLock.input)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", __props.path)}${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-invalid", !!rootLock.error)}${ssrRenderAttr("aria-describedby", rootLock.error ? "fl-root-unlock-error" : void 0)}>`);
-				if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", rootLock.remember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
-				else _push(`<!---->`);
-				_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(rootLock.busy || !rootLock.input) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button></span></form>`);
+				_push(`<span class="fl-unlock"><input${ssrRenderAttr("id", `${unref(uid)}-root`)}${ssrRenderAttr("value", rootLock.value.input)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", __props.path)}${ssrRenderAttr("placeholder", t("passwordPlaceholder"))}${ssrRenderAttr("aria-invalid", !!rootLock.value.error)}${ssrRenderAttr("aria-describedby", rootLock.value.error ? `${unref(uid)}-root-error` : void 0)}>`);
+				if (canRemember.value) {
+					_push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", rootLock.value.remember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}>`);
+					_push(ssrRenderComponent(_sfc_main$2, { name: "key" }, null, _parent));
+					_push(`</button>`);
+				} else _push(`<!---->`);
+				_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(rootLock.value.busy || !rootLock.value.input) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button></span></form>`);
 			} else if (errorMsg.value) {
 				_push(`<div class="fl-status fl-error">${ssrInterpolate(t("loadFailed", { message: errorMsg.value }))} `);
 				if (/guest/i.test(errorMsg.value)) _push(`<p class="fl-hint">${ssrInterpolate(t("guestHint"))}</p>`);
 				else _push(`<!---->`);
-				if (/failed to fetch|networkerror/i.test(errorMsg.value)) _push(`<p class="fl-hint">${ssrInterpolate(t("corsHint"))}</p>`);
+				if (unref(isNetworkError)(errorMsg.value)) _push(`<p class="fl-hint">${ssrInterpolate(t("corsHint"))}</p>`);
 				else _push(`<!---->`);
 				_push(`<button class="fl-btn" type="button">${ssrInterpolate(t("retry"))}</button></div>`);
 			} else if (visible.value.length === 0) _push(`<div class="fl-status">${ssrInterpolate(t("empty"))}</div>`);
 			else _push(`<!---->`);
 			_push(`<!--[-->`);
-			ssrRenderList(visible.value, (node) => {
+			ssrRenderList(visible.value, (node, index) => {
 				_push(`<div class="${ssrRenderClass([{
 					"fl-row-dir": node.is_dir,
 					"fl-row-root": node.isRoot,
 					"fl-row-selected": !node.is_dir && selected.value.has(node.path),
-					"fl-row-locked": node.locked,
-					"fl-row-prompting": node.locked && node.prompting,
-					"fl-row-error": node.locked && node.prompting && !!node.unlockError
-				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrIncludeBooleanAttr(node.locked) ? " disabled" : ""}${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
-				if (node.locked) _push(`<button class="fl-arrow fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}${ssrRenderAttr("title", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
-				else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
-				else _push(`<span class="fl-arrow-placeholder" aria-hidden="true"></span>`);
+					"fl-row-locked": !!node.lock,
+					"fl-row-prompting": node.lock?.prompting,
+					"fl-row-error": node.lock?.prompting && !!node.lock.error
+				}, "fl-row"])}" style="${ssrRenderStyle({ "--fl-depth": node.depth })}"><label class="fl-cell fl-cell-check"><input type="checkbox"${ssrIncludeBooleanAttr(!!node.lock) ? " disabled" : ""}${ssrRenderAttr("aria-label", t("selectItem", { name: node.name }))}${ssrIncludeBooleanAttr(isChecked(node)) ? " checked" : ""}${ssrRenderAttr("indeterminate", isIndeterminate(node))}></label><span class="fl-cell fl-cell-name"${ssrRenderAttr("title", node.isRoot ? node.path : void 0)}><span class="fl-indent" aria-hidden="true"></span>`);
+				if (node.lock) {
+					_push(`<button class="fl-arrow fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}${ssrRenderAttr("title", t("unlockFolder", { name: node.name }))}>`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						name: "lock",
+						size: 14
+					}, null, _parent));
+					_push(`</button>`);
+				} else if (node.is_dir) {
+					_push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-arrow"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}>`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						name: "next",
+						size: 14
+					}, null, _parent));
+					_push(`</button>`);
+				} else _push(`<span class="fl-arrow-placeholder" aria-hidden="true"></span>`);
 				if (node.is_dir) _push(`<svg class="fl-folder-icon" viewBox="0 0 24 24" width="18" height="18" aria-hidden="true"><path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"></path></svg>`);
 				else _push(`<span class="fl-type"${ssrRenderAttr("data-kind", unref(fileKind)(node.name))} aria-hidden="true">${ssrInterpolate(unref(extOf)(node.name) || "FILE")}</span>`);
 				_push(`<span class="fl-label"><span class="${ssrRenderClass([{ "fl-name-dir": node.is_dir }, "fl-name"])}">${ssrInterpolate(node.name)}</span><span class="fl-meta">`);
-				if (node.is_dir) {
-					_push(`<!--[-->`);
-					if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))} · ${ssrInterpolate(formatTotal(unref(totalSize)(folderFiles(node))))}<!--]-->`);
-					else _push(`<!---->`);
-					_push(`<!--]-->`);
-				} else _push(`<!--[-->${ssrInterpolate(unref(formatSize)(node.size))} · ${ssrInterpolate(unref(formatDate)(node.modified))}<!--]-->`);
-				_push(`</span></span>`);
-				if (node.is_dir && node.loaded) _push(`<span class="fl-count">${ssrInterpolate(t("folderItems", { count: folderFiles(node).length }))}</span>`);
+				if (!node.is_dir) _push(`<!--[-->${ssrInterpolate(unref(formatSize)(node.size))} · ${ssrInterpolate(unref(formatDate)(node.modified))}<!--]-->`);
+				else if (node.loaded) _push(`<!--[-->${ssrInterpolate(t("folderItems", { count: statsOf(node).files }))} · ${ssrInterpolate(unref(formatSize)(statsOf(node).bytes))}<!--]-->`);
 				else _push(`<!---->`);
-				if (node.locked && node.prompting && node.unlockError) _push(`<span${ssrRenderAttr("id", `fl-unlock-error-${node.path}`)} class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(node.unlockError))}</span>`);
+				_push(`</span></span>`);
+				if (node.is_dir && node.loaded) _push(`<span class="fl-count">${ssrInterpolate(t("folderItems", { count: statsOf(node).files }))}</span>`);
 				else _push(`<!---->`);
-				if (!node.locked && rememberedPaths.value.has(node.path)) _push(`<button class="fl-remembered" type="button"${ssrRenderAttr("aria-label", `${t("forgetPassword")} ${node.name}`)}${ssrRenderAttr("title", t("forgetPassword"))}><svg viewBox="0 0 24 24" width="11" height="11" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg> ${ssrInterpolate(t("remembered"))} · ${ssrInterpolate(t("forgetPassword"))}</button>`);
+				if (node.lock?.prompting && node.lock.error) _push(`<span${ssrRenderAttr("id", `${unref(uid)}-error-${index}`)} class="fl-unlock-message" role="alert">${ssrInterpolate(unlockErrorText(node.lock.error))}</span>`);
 				else _push(`<!---->`);
+				if (!node.lock && unref(remembered).has(node.path)) {
+					_push(`<button class="fl-remembered" type="button"${ssrRenderAttr("aria-label", `${t("forgetPassword")} ${node.name}`)}${ssrRenderAttr("title", t("forgetPassword"))}>`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						name: "key",
+						size: 11
+					}, null, _parent));
+					_push(` ${ssrInterpolate(t("remembered"))} · ${ssrInterpolate(t("forgetPassword"))}</button>`);
+				} else _push(`<!---->`);
 				if (node.loading) _push(`<span class="fl-loading" aria-hidden="true">…</span>`);
 				else _push(`<!---->`);
 				_push(`</span>`);
-				if (node.locked && node.prompting) {
-					_push(`<form class="fl-unlock fl-unlock-row"><svg class="fl-unlock-lock" viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg><input${ssrRenderAttr("value", node.unlockInput)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", node.path)}${ssrRenderAttr("placeholder", node.unlockError ? unlockErrorText(node.unlockError) : t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordFor", { name: node.name }))}${ssrRenderAttr("aria-invalid", !!node.unlockError)}${ssrRenderAttr("aria-describedby", node.unlockError ? `fl-unlock-error-${node.path}` : void 0)}>`);
-					if (canRemember.value) _push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", !!node.unlockRemember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><circle cx="8" cy="15" r="4"></circle><path d="m11 12 9-9"></path><path d="m17 6 3 3"></path></svg></button>`);
-					else _push(`<!---->`);
-					_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(node.unlockBusy || !node.unlockInput) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button><button class="fl-unlock-cancel" type="button"${ssrRenderAttr("aria-label", t("cancel"))}${ssrRenderAttr("title", t("cancel"))}><svg viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" aria-hidden="true"><path d="M6 6l12 12"></path><path d="M18 6 6 18"></path></svg></button></form>`);
+				if (node.lock?.prompting) {
+					_push(`<form class="fl-unlock fl-unlock-row">`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						class: "fl-unlock-lock",
+						name: "lock",
+						size: 18
+					}, null, _parent));
+					_push(`<input${ssrRenderAttr("value", node.lock.input)} type="password" autocomplete="off"${ssrRenderAttr("data-unlock", node.path)}${ssrRenderAttr("placeholder", node.lock.error ? unlockErrorText(node.lock.error) : t("passwordPlaceholder"))}${ssrRenderAttr("aria-label", t("passwordFor", { name: node.name }))}${ssrRenderAttr("aria-invalid", !!node.lock.error)}${ssrRenderAttr("aria-describedby", node.lock.error ? `${unref(uid)}-error-${index}` : void 0)}>`);
+					if (canRemember.value) {
+						_push(`<button class="fl-unlock-remember" type="button"${ssrRenderAttr("aria-pressed", node.lock.remember)}${ssrRenderAttr("aria-label", t("rememberPassword"))}${ssrRenderAttr("title", t("rememberPassword"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, { name: "key" }, null, _parent));
+						_push(`</button>`);
+					} else _push(`<!---->`);
+					_push(`<button class="fl-unlock-submit" type="submit"${ssrIncludeBooleanAttr(node.lock.busy || !node.lock.input) ? " disabled" : ""}>${ssrInterpolate(t("open"))}</button><button class="fl-unlock-cancel" type="button"${ssrRenderAttr("aria-label", t("cancel"))}${ssrRenderAttr("title", t("cancel"))}>`);
+					_push(ssrRenderComponent(_sfc_main$2, {
+						name: "close",
+						size: 14
+					}, null, _parent));
+					_push(`</button></form>`);
 				} else {
-					_push(`<!--[--><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir || node.locked ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
-					if (node.locked) _push(`<button class="fl-action fl-arrow-end fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="5" y="11" width="14" height="10" rx="2"></rect><path d="M8 11V8a4 4 0 0 1 8 0v3"></path></svg></button>`);
-					else if (node.is_dir) _push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}><svg viewBox="0 0 24 24" width="18" height="18" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="m9 6 6 6-6 6"></path></svg></button>`);
-					else if (!node.locked) {
+					_push(`<!--[--><span class="fl-cell fl-cell-size">${ssrInterpolate(node.is_dir ? "—" : unref(formatSize)(node.size))}</span><span class="fl-cell fl-cell-date">${ssrInterpolate(unref(formatDate)(node.modified))}</span><span class="fl-cell fl-cell-op">`);
+					if (node.lock) {
+						_push(`<button class="fl-action fl-arrow-end fl-lock" type="button"${ssrRenderAttr("aria-label", t("unlockFolder", { name: node.name }))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "lock",
+							size: 18
+						}, null, _parent));
+						_push(`</button>`);
+					} else if (node.is_dir) {
+						_push(`<button type="button" class="${ssrRenderClass([{ "fl-arrow-open": node.expanded }, "fl-action fl-arrow-end"])}"${ssrRenderAttr("aria-label", t(node.expanded ? "collapse" : "expand", { name: node.name }))}${ssrRenderAttr("aria-expanded", node.expanded)}>`);
+						_push(ssrRenderComponent(_sfc_main$2, {
+							name: "next",
+							size: 18
+						}, null, _parent));
+						_push(`</button>`);
+					} else {
 						_push(`<!--[-->`);
-						if (canPreview(node)) _push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M2 12s3.5-7 10-7 10 7 10 7-3.5 7-10 7-10-7-10-7Z"></path><circle cx="12" cy="12" r="3"></circle></svg></button>`);
-						else _push(`<!---->`);
-						_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}><svg viewBox="0 0 24 24" width="16" height="16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M12 3v12"></path><path d="m7 10 5 5 5-5"></path><path d="M5 21h14"></path></svg></button><!--]-->`);
-					} else _push(`<!---->`);
+						if (canPreview(node)) {
+							_push(`<button class="fl-action fl-preview-btn" type="button"${ssrRenderAttr("aria-label", `${t("preview")} ${node.name}`)}${ssrRenderAttr("title", t("preview"))}>`);
+							_push(ssrRenderComponent(_sfc_main$2, { name: "eye" }, null, _parent));
+							_push(`</button>`);
+						} else _push(`<!---->`);
+						_push(`<button class="fl-action fl-download" type="button"${ssrRenderAttr("aria-label", `${t("download")} ${node.name}`)}${ssrRenderAttr("title", t("download"))}>`);
+						_push(ssrRenderComponent(_sfc_main$2, { name: "download" }, null, _parent));
+						_push(`</button><!--]-->`);
+					}
 					_push(`</span><!--]-->`);
 				}
 				_push(`</div>`);
 			});
-			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: formatTotal(loadedBytes.value) }))}</span></div>`);
+			_push(`<!--]--><div class="fl-foot"><span>${ssrInterpolate(t("loaded", { count: allFiles.value.length }))} · ${ssrInterpolate(t("totalSize", { size: unref(formatSize)(unref(totalSize)(allFiles.value)) }))}</span></div>`);
 			if (toast.value) _push(`<div class="fl-toast" role="status">${ssrInterpolate(toast.value)}</div>`);
 			else _push(`<!---->`);
 			_push(ssrRenderComponent(_sfc_main$1, {