Panel Files, Terminal and Passwords

The native Files page (/rust/files/, including the final slash) manages directories beneath the Panel home folder, streams uploads into writable locations, and provides a bounded disk-usage tree. The native Files browser is also available at /rust/files/browser. The Terminal opens an administrator-only service-account shell. Passwords stores each user's secrets encrypted and copies a selected secret only to the clipboard.

Upload a model into the library

Open Files (/rust/files/) as an administrator. Choose Models & templates or the Models location, which opens models within the home root. If the folder has not been created, use Create folder to create models in a writable location first.
In Upload file, select a local model file. Leave Allow replacing an existing file with the same name unchecked to avoid replacing any existing content.
Check Upload this file into the current home-rooted folder. and click Upload. The multipart upload is streamed through POST /api/files/upload; the browser does not send the model as an ordinary JSON form.
Open Files guided tasks (/rust/files/tasks). Enter the exact basename and click Verify uploaded model. The check reads GET /api/files/list for models through GET /api/ux/files/model-check, rejects directories and symbolic links, and displays whether a regular file exists. The registered files.upload-model guided task additionally checks the destination is unused through POST /api/ux/files/model-check before the upload and verifies presence afterward.
To reverse a newly uploaded file, find it in Files, type DELETE and use Delete entry. This is a permanent deletion, so review the selection first.

A home-root policy blocks traversal outside the permitted root, and the panel/ area is read-only. On a read-only appliance home, navigate to a writable data folder; the file manager does not bypass appliance restrictions. Upload is unavailable to non-administrators. The whole-system usage scan skips other mounts; a partial scan is an undercount.

Store and copy a secret

Open Passwords (/rust/passwords) and enter your account password in Re-enter your account password. Select Unlock. The encrypted store is scoped to the signed-in account.
In New entry, fill Title, Username, Secret, optional URL and Notes, then select Save encrypted entry. Leave confidential data out of the title and notes.
Select Copy secret next to the saved entry. A secure browser context is required for clipboard access; the secret is not displayed in the page or included in entry metadata.
Select Lock now when done. An idle session also locks automatically. Administrators cannot recover another user's store.

You can also choose Generate & copy (masked) after selecting Length (12–128), edit entry metadata with Update encrypted entry, or remove a record with Delete entry after typing DELETE to confirm. Deletion is permanent.

Terminal

Open Terminal (/rust/terminal) as an administrator. Use Open shell to start a service-account terminal, enter commands in the terminal screen, and Close shell to end the session. Commands are not run with arbitrary host privilege. Operators without administrator access see an access refusal, not a shell. The terminal client sends sequenced input and size updates through authenticated routes and reads output from an authenticated event stream (GET /api/terminal/output).

Control and route reference

Control	Tooltip	Routes
Browse folders	Opens a home-rooted folder without following links outside the permitted home.	GET /api/files/list
Quick locations	Opens a common folder, including the writable models library when available.	GET /api/files/list
Sort entries	Sorts visible folders and files by name, size or modification time.	GET /api/files/list
Filter entries	Filters displayed file names without changing or deleting files.	GET /api/files/list
Show hidden entries	Includes hidden names only when your role permits access to them.	GET /api/files/list
Refresh folder	Reloads the current folder and its size summary.	GET /api/files/list
Upload file	Streams a chosen file to the writable home folder; replacement needs a separate opt-in.	POST /api/files/upload
Create folder	Creates a folder below the writable home area; protected appliance files cannot be changed.	POST /api/files/mkdir
Rename entry	Renames one eligible entry; in-use and protected paths are blocked.	POST /api/files/rename
Delete entry	Permanently deletes selected eligible entries after typing DELETE; protected paths are blocked.	POST /api/files/delete
Copy or move	Copies or moves home-relative entries to a writable destination without crossing protected paths.	POST /api/files/paste
Select entries	Marks one or more file rows for a bulk download, copy, move or delete.	GET /api/files/list
Bulk actions	Downloads, copies, moves or deletes the selected entries; deletion requires confirmation.	GET /api/files/zip, POST /api/files/paste, POST /api/files/delete
Download entry	Downloads a file or a folder archive without changing the source.	GET /api/files/download, GET /api/files/zip
Disk usage scan	Scans on demand with time, depth and entry limits; a partial tree undercounts used space.	GET /api/files/usage-tree
Whole-system scan	Requests a bounded whole-system usage scan for an administrator; mounted volumes are skipped.	GET /api/files/usage-tree
Usage shortcuts	Scans models, uploads, backups or home without following links or other mounts.	GET /api/files/usage-tree
Verify model upload	Checks that a named ordinary file is present in the models library before use.	GET /api/ux/files/model-check, POST /api/ux/files/model-check
Remove uploaded model	Removes a newly uploaded model through the guarded delete route when its operator requests undo.	POST /api/files/delete
Open shell	Opens a shell as the Panel service account for an authenticated administrator.	POST /api/terminal/open
Terminal input	Sends ordered keystrokes to the active shell; commands run with service-account permissions.	POST /api/terminal/input
Resize terminal	Adjusts the active terminal rows and columns when the screen size changes.	POST /api/terminal/resize
Close shell	Closes the active shell session; running foreground commands may end.	POST /api/terminal/close
Store status	Shows whether your personal encrypted password store is unlocked without revealing secrets.	GET /api/passwords/status
Unlock store	Unlocks only your personal store using your account password; failed attempts may be rate-limited.	POST /api/passwords/unlock
Lock store	Locks your personal store immediately and stops access until you unlock it again.	POST /api/passwords/lock
Save encrypted entry	Encrypts a new entry in your personal store; keep the secret out of titles and notes.	POST /api/passwords/create
Update encrypted entry	Updates an entry; leaving the replacement secret blank keeps its existing secret.	POST /api/passwords/update
Copy secret	Copies the chosen secret to your clipboard without displaying it on the page.	POST /api/passwords/copy
Delete encrypted entry	Permanently deletes an encrypted entry after you type DELETE to confirm.	POST /api/passwords/delete
Generate password	Creates a 12–128 character secret, fills the masked new-entry field and copies it.	POST /api/passwords/generate

The Files forms post to the native /rust/files/manage/ handlers for Browse, Apply filter, Scan / refresh, Create, Rename, Delete, Paste, and Bulk actions. Those handlers call the same guarded file API routes as the old tab. A failed action reports rejection without treating the operation as completed. The /rust/files/upload form remains a streaming multipart upload, not a simulated JSON upload.

The guided task identifiers are files.upload-model (administrator only) and files.store-copy-secret (owner-scoped). Guided steps use the routes listed above; manual upload and clipboard steps require explicit operator completion. No remote command-line counterpart is added for these browser actions.

See Panel Models, Panel Network and Access, and Reference Guided Tasks.