@dsh-electron/dsh-plugin-multi-root-workspace 0.1.0

package/lib/scope.js

@@ -0,0 +1,143 @@
+import { canonicalPath } from "@deepseek-ai/dsh-sandbox";
+import { statSync } from "node:fs";
+import { Service } from "@deepseek-ai/cordis";
+//#region src/scope.ts
+/**
+* The multi-root workspace scope: the plugin's single home for the question
+* "which directories belong to this workspace".
+*
+* The primary root is never stored here — it is the session's immutable cwd as
+* resolved by the upstream `ctx.sandboxPolicy` service. This service owns the
+* additional roots, the canonical key that indexes them, and the one model-facing
+* statement of that topology, so every enforcing provider (fs fence,
+* kernel-sandbox dialects) and the prompt snapshot all resolve the same scope.
+*
+* The root table is still filled by the registry's own API (tests and smoke
+* scripts today; plugin storage in M3). Keeping the empty case on the same code
+* path as the populated one is deliberate — the pass-through safety net must
+* exercise the real provider wiring, not a stub that later gets replaced.
+*
+* @module @dsh-electron/dsh-plugin-multi-root-workspace/scope
+*/
+/**
+* Canonicalize and sanitize one root list against a primary root: drop the
+* primary itself, duplicates, missing/non-directory paths, and any root whose
+* current resolution no longer matches the directory it was registered for;
+* preserve registry order.
+*
+* The last rule is the security-relevant one. `canonicalPath` is `realpath`, so
+* a registered directory that has since been replaced by a symlink resolves to
+* a different directory — granting that would hand out a directory nobody
+* registered, on nothing more than a local replace. A registration whose
+* resolution moved is therefore withheld here (the registry reports it as
+* `redirected`), and it comes back only when the path resolves to the recorded
+* directory again.
+*
+* @param primaryRoot - the canonical primary root to exclude.
+* @param roots - candidate roots, in registry order.
+* @returns the sanitized additional roots.
+*/
+function sanitizeAdditionalRoots(primaryRoot, roots) {
+	const seen = /* @__PURE__ */ new Set([primaryRoot]);
+	const result = [];
+	for (const root of roots) {
+		const recorded = root.recordedPath;
+		if (typeof recorded !== "string" || recorded === "") continue;
+		const canonical = canonicalPath(root.path);
+		if (canonical !== recorded) continue;
+		try {
+			if (!statSync(canonical).isDirectory()) continue;
+		} catch {
+			continue;
+		}
+		if (seen.has(canonical)) continue;
+		seen.add(canonical);
+		result.push(canonical);
+	}
+	return result;
+}
+/**
+* The name of the runtime-context contribution that tells the model which extra
+* roots belong to this session's workspace.
+*/
+const MULTI_ROOT_CONTEXT_NAME = "multi-root:scope";
+/**
+* Render the workspace topology the model is told about. Only roots are listed
+* (never files), and the sentence states the two facts a denied write would
+* otherwise have to teach: that the additional roots are part of the SAME
+* workspace, and that the session cwd is unchanged (requirement §5, §8).
+* @param primaryRoot - the canonical session workspace root.
+* @param additionalRoots - canonical additional roots, in scope order.
+* @returns the stable topology sentence.
+*/
+function renderWorkspaceRootsContext(primaryRoot, additionalRoots) {
+	return `Current DSH workspace roots: ${JSON.stringify(additionalRoots)} are additional roots of this session's workspace. Under workspace-write they may be modified like the session workspace; the session cwd remains the primary root (${JSON.stringify(primaryRoot)}).`;
+}
+/**
+* The `ctx.multiRootScope` service. Providers ask it — never the filesystem —
+* what the current scope is, which is what keeps the fs fence and every kernel
+* dialect on one permission world (requirement §13).
+*/
+var MultiRootScopeService = class extends Service {
+	/** Additional roots keyed by canonical primary root; empty until roots are registered. */
+	rootsByPrimary = /* @__PURE__ */ new Map();
+	constructor(ctx) {
+		super(ctx, "multiRootScope");
+		ctx.inject(["systemPrompt", "sandboxPolicy"], (scope) => {
+			scope.systemPrompt.context({
+				name: MULTI_ROOT_CONTEXT_NAME,
+				order: scope.systemPrompt.getContextOrder("SANDBOX_POLICY") + 1,
+				text: (assembly) => {
+					const session = assembly.agent?.session;
+					if (session === void 0) return "";
+					const policy = scope.sandboxPolicy.resolve({ session });
+					if (policy.mode !== "workspace-write") return "";
+					const resolved = this.resolve(policy);
+					if (resolved.additionalRoots.length === 0) return "";
+					return renderWorkspaceRootsContext(resolved.primaryRoot, resolved.additionalRoots);
+				}
+			});
+		});
+	}
+	/**
+	* Resolve the scope of one confined call.
+	* @param policy - the upstream policy whose workspace root is the primary root.
+	* @returns the canonical scope; `additionalRoots` is empty when none are registered.
+	*/
+	resolve(policy) {
+		const primaryRoot = canonicalPath(policy.workspaceRoot);
+		return {
+			primaryRoot,
+			additionalRoots: this.scopeOf(primaryRoot)
+		};
+	}
+	/**
+	* The additional roots registered for one canonical primary root.
+	* @param primaryRoot - canonical primary root (or any spelling thereof).
+	* @returns the canonical additional roots; empty when none are registered.
+	*/
+	scopeOf(primaryRoot) {
+		const registered = this.rootsByPrimary.get(canonicalPath(primaryRoot));
+		if (registered === void 0) return [];
+		return sanitizeAdditionalRoots(canonicalPath(primaryRoot), registered);
+	}
+	/**
+	* Replace the roots registered for one primary root.
+	*
+	* M1 uses this from tests and smoke scripts only; M3 feeds it from plugin
+	* storage. It is a plain setter so the transition swaps the data source
+	* without touching any provider.
+	* @param primaryRoot - canonical primary root to register roots under.
+	* @param roots - the additional roots, in display order.
+	*/
+	setAdditionalRoots(primaryRoot, roots) {
+		const key = canonicalPath(primaryRoot);
+		if (roots.length === 0) {
+			this.rootsByPrimary.delete(key);
+			return;
+		}
+		this.rootsByPrimary.set(key, [...roots]);
+	}
+};
+//#endregion
+export { MULTI_ROOT_CONTEXT_NAME, MultiRootScopeService, MultiRootScopeService as default, renderWorkspaceRootsContext, sanitizeAdditionalRoots };

package/lib/types/client/WorkspaceFoldersAction.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The Workspace Folders panel: one sidebar footer action that opens a dialog
+ * listing this session's workspace root and the additional roots registered for
+ * it, with the actions the milestone requires — Add (through the composed
+ * directory picker), Remove, Alias, Copy Path, Reveal, and reordering.
+ *
+ * Why a footer action and its own dialog, instead of a first-class panel: the
+ * slots that can host a full panel (`sidebar.panellist` + the keyed `main`
+ * panel) exist only in the pinned 0.1.5 surface, while `sidebar.footer.action`
+ * exists in both supported runtimes — and `sidebar.workspaces` is a single slot
+ * already owned by the workspace browser, so it cannot be extended in place.
+ *
+ * Styling is the host's, not this file's: the elements carry `mrfw-*` classes
+ * resolved by the stylesheet the client entry injects (`styles.ts`), and every
+ * color in that sheet is a host `--dsw-*` token, so the panel inherits the
+ * native look — sidebar trigger, modal card, capsule buttons — in both themes
+ * without naming a single color here (see ADR-0006).
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/WorkspaceFoldersAction
+ */
+import { type ReactNode } from 'react';
+import { type PanelClient } from './panel-client.ts';
+import type { Key } from './locales.ts';
+/** Translate one key of this plugin's namespace. */
+export type Translate = (key: Key, params?: Record<string, unknown>) => string;
+/** What the registered action receives from the plugin body. */
+export interface WorkspaceFoldersActionProps {
+    /** The channel client; absent when this composition has no host Connection. */
+    readonly panel: PanelClient | undefined;
+    /** Opens the composed directory picker, when one is composed. */
+    readonly pickDirectory: (() => Promise<string | null>) | undefined;
+    /** Bound translator for this plugin's namespace. */
+    readonly t: Translate;
+    /**
+     * The current session id, read when a request is built. A function rather
+     * than a value because the selection changes while the panel stays mounted.
+     */
+    readonly sessionId?: () => string | undefined;
+    /** Whether the sidebar renders wide content (`false` in the icon rail). */
+    readonly wide?: boolean;
+}
+/** The sidebar footer action plus the dialog it opens. */
+export declare function WorkspaceFoldersAction(props: WorkspaceFoldersActionProps): ReactNode;

package/lib/types/client/index.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Browser half of the multi-root workspace plugin.
+ *
+ * One contribution: a sidebar footer action that opens the Workspace Folders
+ * dialog. Everything it needs arrives through services the composition already
+ * provides — `slots` to contribute, `locale` for its copy, `connection` for the
+ * channel to the host half, and (optionally) `uiWorkspace` for the composed
+ * directory picker and the client Session Controller for the current session.
+ *
+ * `slots.inject` is the soft seam: the footer action is registered when a
+ * sidebar declares that slot and never otherwise, so a runtime whose sidebar
+ * surface differs simply shows no panel instead of failing the client graph.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client
+ */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import { type PanelClient } from './panel-client.ts';
+import { type Translate } from './WorkspaceFoldersAction.tsx';
+/** The footer-action cell this plugin owns. */
+export declare const SLOT_ID = "multi-root-folders";
+/** Services the client half needs before it may activate. */
+export declare const inject: string[];
+/**
+ * Register the panel.
+ * @param ctx - the client root context.
+ */
+export declare function apply(ctx: ClientContext): void;
+export type { PanelClient, Translate };

package/lib/types/client/locales.d.ts

@@ -0,0 +1,118 @@
+/**
+ * The panel's bilingual copy.
+ *
+ * Flat `Record<string, string>` dictionaries keyed by a bare key (never
+ * `ns.key`), `zh` as the canonical shape and `en` pinned to it by `satisfies`,
+ * so a missing translation is a type error and a divergence is caught by
+ * `tests/locale-parity.spec.ts` as well.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/locales
+ */
+/** The locale namespace this plugin owns. */
+export declare const NS = "multiRootWorkspace";
+/** Chinese copy (the canonical shape). */
+export declare const zh: {
+    'action.label': string;
+    'action.title': string;
+    'panel.title': string;
+    'panel.subtitle': string;
+    'panel.primary': string;
+    'panel.primaryNote': string;
+    'panel.additional': string;
+    'panel.empty': string;
+    'panel.emptyHint': string;
+    'panel.loading': string;
+    'panel.retry': string;
+    'panel.close': string;
+    'panel.add': string;
+    'panel.addManual': string;
+    'panel.addConfirm': string;
+    'panel.remove': string;
+    'panel.removeConfirm': string;
+    'panel.more': string;
+    'panel.rename': string;
+    'panel.aliasPlaceholder': string;
+    'panel.aliasSave': string;
+    'panel.aliasCancel': string;
+    'panel.copyPath': string;
+    'panel.copied': string;
+    'panel.reveal': string;
+    'panel.moveUp': string;
+    'panel.moveDown': string;
+    'state.available': string;
+    'state.missing': string;
+    'state.redirected': string;
+    'state.invalid': string;
+    'error.not-absolute': string;
+    'error.missing': string;
+    'error.not-a-directory': string;
+    'error.equals-primary': string;
+    'error.primary-overlap': string;
+    'error.duplicate': string;
+    'error.nested': string;
+    'error.invalid-alias': string;
+    'error.not-found': string;
+    'error.invalid-ref': string;
+    'error.storage-unavailable': string;
+    'error.reveal-unavailable': string;
+    'error.unavailable': string;
+    'error.copy-failed': string;
+    'error.fallback': string;
+};
+/** The canonical key set. */
+export type Key = keyof typeof zh;
+/** English copy, pinned to the Chinese key set. */
+export declare const en: {
+    'action.label': string;
+    'action.title': string;
+    'panel.title': string;
+    'panel.subtitle': string;
+    'panel.primary': string;
+    'panel.primaryNote': string;
+    'panel.additional': string;
+    'panel.empty': string;
+    'panel.emptyHint': string;
+    'panel.loading': string;
+    'panel.retry': string;
+    'panel.close': string;
+    'panel.add': string;
+    'panel.addManual': string;
+    'panel.addConfirm': string;
+    'panel.remove': string;
+    'panel.removeConfirm': string;
+    'panel.more': string;
+    'panel.rename': string;
+    'panel.aliasPlaceholder': string;
+    'panel.aliasSave': string;
+    'panel.aliasCancel': string;
+    'panel.copyPath': string;
+    'panel.copied': string;
+    'panel.reveal': string;
+    'panel.moveUp': string;
+    'panel.moveDown': string;
+    'state.available': string;
+    'state.missing': string;
+    'state.redirected': string;
+    'state.invalid': string;
+    'error.not-absolute': string;
+    'error.missing': string;
+    'error.not-a-directory': string;
+    'error.equals-primary': string;
+    'error.primary-overlap': string;
+    'error.duplicate': string;
+    'error.nested': string;
+    'error.invalid-alias': string;
+    'error.not-found': string;
+    'error.invalid-ref': string;
+    'error.storage-unavailable': string;
+    'error.reveal-unavailable': string;
+    'error.unavailable': string;
+    'error.copy-failed': string;
+    'error.fallback': string;
+};
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** This plugin's panel copy. */
+        multiRootWorkspace: Key;
+    }
+}

package/lib/types/client/panel-client.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The panel's own client for the Connection RPC channel.
+ *
+ * The browser half cannot use a Typert Remote namespace: contract generation
+ * is workspace-shaped and the client assembly's contribution list belongs to
+ * the shipped composition, so an out-of-tree plugin has no supported way to
+ * mount one (see docs/decisions/ADR-0005 and the M3 plan). What IS public and
+ * present in both supported runtimes is the generic Connection channel the
+ * shipped sibling plugin already uses: the host registers
+ * `connection.rpc.handle(PANEL_CHANNEL, …)` and this module calls it.
+ *
+ * The call is typed by {@link PanelResponseMap}: the endpoint decides the
+ * request shape AND the response type, so a caller cannot decode one endpoint's
+ * answer as another's. The response is additionally parsed at the boundary,
+ * because the type is a promise about the host while the value on the wire is
+ * whatever the host actually sent.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/panel-client
+ */
+import type { ConnectionHandle } from '@deepseek-ai/dsh-client-connection/client';
+import { type PanelEndpoint, type PanelRequest, type PanelResponseMap } from '../contract.ts';
+import { type Key } from './locales.ts';
+/** A failure the panel renders from its `code`. */
+export declare class PanelError extends Error {
+    readonly code: string;
+    /**
+     * @param code - stable code from the root vocabulary, or a transport code.
+     * @param message - the host's fallback text.
+     */
+    constructor(code: string, message: string);
+}
+/**
+ * The copy key for one failure code, with a safe fallback for codes this build
+ * does not know (a newer host, or a transport failure).
+ * @param code - the failure code.
+ * @returns the locale key to render.
+ */
+export declare function errorKeyOf(code: string): Key;
+/** The panel's callable face, injected into its component. */
+export interface PanelClient {
+    /**
+     * Call one endpoint.
+     * @param endpoint - the endpoint name; it also selects the response type.
+     * @param payload - the request fields for that endpoint (the endpoint name
+     *   travels as the RPC method, so it is not repeated in the payload).
+     * @returns the host's value, in the shape the endpoint promises.
+     * @throws {PanelError} when the host answered with a failure, or with a value
+     *   that is not what this endpoint promises.
+     */
+    call<E extends PanelEndpoint>(endpoint: E, payload: PanelRequest): Promise<PanelResponseMap[E]>;
+}
+/**
+ * Build the panel client over a Connection handle.
+ * @param connection - the client Connection service.
+ * @returns the client, with every transport failure normalized to a `PanelError`.
+ */
+export declare function createPanelClient(connection: ConnectionHandle): PanelClient;
+/** The current session id, when the composed client can name one. */
+export declare function currentSessionIdOf(sessions: unknown): string | undefined;

package/lib/types/client/styles.d.ts

@@ -0,0 +1,14 @@
+/**
+ * The plugin's one stylesheet, injected into the document by the client entry.
+ *
+ * The host ships its design tokens as CSS custom properties on `body`
+ * (`--dsw-alias-*` semantics, `--dsw-elevation-*` shadows, `--ds-*` motion and
+ * code-font tokens), so this sheet names no color of its own: light and dark
+ * theme follow the host automatically. The recipes mirror the native surfaces
+ * this UI sits beside — the sidebar footer trigger, the Modal primitive, and
+ * the capsule Button (ADR-0006 records the decision).
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/styles
+ */
+/** The stylesheet text; every class is prefixed `mrfw-` to stay collision-free. */
+export declare const STYLES = "\n/* Sidebar footer row, mirroring the host ui-settings-general trigger: the row\n * wrapper overhangs each side by 2px (width calc(100% + 4px) against the\n * shell's 12px inline padding) so the icon's ink line lands at 18px from the\n * column edge \u2014 exactly where the Settings gear below sits. */\n.mrfw-triggerRow {\n  flex: none;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: calc(100% + 4px);\n  margin: 4px -2px;\n}\n\n.mrfw-triggerRow.mrfw-railRow {\n  width: 36px;\n  margin: 8px 0 10px;\n}\n\n.mrfw-trigger {\n  box-sizing: border-box;\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: auto;\n  height: 42px;\n  margin: 0;\n  padding: 0 10px 0 8px;\n  border: none;\n  border-radius: 12px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  text-align: left;\n  cursor: pointer;\n  overflow: hidden;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-trigger:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-triggerIcon {\n  flex: none;\n  display: inline-flex;\n}\n\n.mrfw-triggerLabel {\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n.mrfw-triggerRail {\n  flex: none;\n  width: 36px;\n  height: 36px;\n  margin: 0;\n  padding: 0;\n  gap: 0;\n  border-radius: 50%;\n  justify-content: center;\n}\n\n.mrfw-overlay {\n  position: fixed;\n  inset: 0;\n  z-index: 1000;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n}\n\n.mrfw-mask {\n  position: absolute;\n  inset: 0;\n  background: var(--dsw-alias-bg-mask-1);\n  backdrop-filter: var(--dsw-mask-blur);\n}\n\n.mrfw-dialog {\n  position: relative;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  width: min(640px, 100%);\n  max-height: 100%;\n  overflow: hidden;\n  border: none;\n  border-radius: 24px;\n  background: var(--dsw-alias-bg-layer-2);\n  box-shadow: var(--dsw-elevation-prominent);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  outline: none;\n}\n\n.mrfw-header {\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 22px 14px 12px 24px;\n}\n\n.mrfw-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-close {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  cursor: pointer;\n  color: var(--dsw-alias-label-secondary);\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-close:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-body {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  overflow-y: auto;\n  padding: 0 24px 24px;\n}\n\n.mrfw-description {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-alert {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.mrfw-section {\n  display: flex;\n  flex-direction: column;\n}\n\n.mrfw-section + .mrfw-section {\n  margin-top: 8px;\n}\n\n.mrfw-sectionTitleRow {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  padding: 8px 0 4px;\n}\n\n.mrfw-sectionTitle {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-sectionNote {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-row {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n.mrfw-rowBare {\n  border-bottom: none;\n}\n\n/* A root entry's two lines: the display name on top, the absolute path under\n   it in the tertiary voice (the workspace rows recipe of the host sidebar). */\n.mrfw-rootText {\n  display: flex;\n  flex: 1 1 240px;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n.mrfw-rootName {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n  font-size: 14px;\n  line-height: 20px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-rootPath {\n  font-family: var(--ds-font-family-code);\n  font-size: 12px;\n  line-height: 18px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-stateWarn {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.mrfw-btn {\n  display: inline-flex;\n  flex: none;\n  align-items: center;\n  justify-content: center;\n  gap: 4px;\n  height: 28px;\n  padding: 0 10px;\n  border: none;\n  border-radius: 14px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-btn:disabled {\n  cursor: not-allowed;\n  opacity: 0.4;\n}\n\n.mrfw-btnGhost:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnGhost:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n.mrfw-btnDanger:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover-danger);\n}\n\n.mrfw-btnOutline {\n  border: 0.5px solid var(--dsw-alias-border-l3);\n  background: transparent;\n}\n\n.mrfw-btnOutline:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnPrimary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnPrimary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n\n/* One icon-only action: a square of the capsule family, meaning in title.\n   Declared after the .mrfw-btn family so its padding wins the cascade tie:\n   the capsule's 0 10px padding would otherwise squeeze the icon glyph. */\n.mrfw-iconBtn {\n  width: 28px;\n  padding: 0;\n  border-radius: 8px;\n}\n\n.mrfw-input {\n  flex: 1 1 220px;\n  min-width: 0;\n  height: 32px;\n  padding: 0 8px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  outline: none;\n  transition: border-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.mrfw-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.mrfw-inputInline {\n  flex: 1 1 auto;\n}\n\n.mrfw-aliasEditor {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n  flex-basis: 100%;\n}\n\n.mrfw-actions {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  margin-top: 16px;\n  padding-top: 16px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n/* One control row, one height: the capsule buttons match the 32px input. */\n.mrfw-actions .mrfw-btn {\n  height: 32px;\n  border-radius: 16px;\n}\n\n.mrfw-actions .mrfw-iconBtn {\n  width: 32px;\n}\n";

package/lib/types/command.d.ts

@@ -0,0 +1,66 @@
+/**
+ * The user-facing surface: the `/workspace-folders` command and the panel's
+ * RPC channel.
+ *
+ * They share one module because they are one thing — the operator-facing edge
+ * over `ctx.multiRootRegistry`. The command serves the text surfaces (the
+ * composer, headless diagnostics) and the channel serves the browser panel;
+ * both resolve the same canonical workspace root, call the same registry, and
+ * report the same `RootValidationCode` values.
+ *
+ * Both are also the two places a READ happens, so both go through the same
+ * revalidation entry point: `registry.refresh()` re-stats every registered
+ * directory, re-resolves it against the directory it was granted for, and
+ * republishes the scope BEFORE the list is rendered. Listing is therefore
+ * enough to notice that a directory disappeared (and enough to bring a
+ * restored one back) — which is what the panel's "Retry" button and the
+ * command's `list` both promise.
+ *
+ * Both halves are SOFT: the command registers only where a command registry is
+ * composed, and the channel only where a host Connection and web server exist
+ * (web), so a headless profile mounts this row with zero effect on the
+ * providers.
+ *
+ * The command's own text is English: a host-side command handler has no active
+ * locale to consult (the browser owns locale state). The panel is bilingual.
+ * That split is recorded in the M3 plan and the requirements as a known limit.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/command
+ */
+import { Context } from '@deepseek-ai/cordis';
+import { type RootStatus } from './roots.ts';
+/** Services this row needs before it may activate. */
+export declare const inject: string[];
+/** The command name, without the leading slash. */
+export declare const COMMAND_NAME = "workspace-folders";
+/** One parsed command line. */
+export interface FoldersCommand {
+    /** The subcommand; `list` when the line named none. */
+    readonly verb: 'list' | 'add' | 'remove' | 'alias' | 'reveal' | 'help';
+    /** Everything after the verb, verbatim (paths may contain spaces). */
+    readonly rest: string;
+}
+/**
+ * Parse the text that follows `/workspace-folders`.
+ * @param rawInput - the verbatim `rawInput` of the command invocation.
+ * @returns the subcommand and its remaining text.
+ * @throws {RootValidationError} `invalid-ref` for an unknown subcommand.
+ */
+export declare function parseFoldersCommand(rawInput: string): FoldersCommand;
+/**
+ * Render the roots report the command returns. Additional roots are numbered
+ * from 1, which is the numbering every other subcommand accepts; the workspace
+ * root is never numbered because it cannot be removed.
+ * @param primaryRoot - the canonical workspace root.
+ * @param statuses - the registry's status list.
+ * @param unavailable - the store failure, when the registry could not read it.
+ * @returns the report text.
+ */
+export declare function renderRootsReport(primaryRoot: string, statuses: readonly RootStatus[], unavailable?: string): string;
+/**
+ * Register the command and, where a host Connection exists, the panel channel.
+ * @param ctx - the host context carrying `commands`, `sandboxPolicy`, and the registry.
+ */
+export declare function apply(ctx: Context): void;
+/** The per-platform argv that reveals one directory in the OS file manager. */
+export declare function revealArgv(platform: NodeJS.Platform, path: string): readonly string[];

package/lib/types/containment.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Path-containment mechanics for the multi-root filesystem fence.
+ *
+ * This is a local implementation of the upstream helper
+ * `isPathUnder` from `@deepseek-ai/dsh-fs-sandbox` (source path
+ * `packages/fs/fs-sandbox/src/containment.ts`, verified byte-identical between
+ * dsh `0.1.2-rc.1` and `0.1.5-rc.2` at master `c291e7961a`).
+ *
+ * Why a copy instead of an import: the published package ships only
+ * `lib/index.js` and `lib/types/**\/*.d.ts`, so `exports["./src/*"]` resolves to
+ * files that do not exist in an installed tree (deep imports succeed only where
+ * the package directory happens to be a symlink into a source checkout). The
+ * coupling policy — entry-point imports only — is recorded in
+ * `docs/decisions/ADR-0002-upstream-coupling-policy.md`; behavioral equality
+ * with the upstream fence is pinned by the differential suite in
+ * `tests/fs-parity.spec.ts`.
+ *
+ * Canonical spellings take the fast lexical path; filesystem identity supplies
+ * the conservative fallback for alias-equivalent roots such as Windows 8.3
+ * names and casing.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/containment
+ */
+/**
+ * Determine whether a canonical target is a writable root or lies beneath it.
+ * The lexical fast path handles normal canonical spellings. When spellings
+ * differ, walk the target's existing ancestors and compare filesystem identity
+ * with the root; this recognizes Windows long-name/8.3 aliases and casing
+ * without weakening containment to a textual approximation.
+ * @param path - canonical target key, which may end in a missing suffix.
+ * @param root - canonical writable root.
+ * @param caseSensitive - whether lexical comparison preserves case; defaults
+ *   to the host filesystem convention used by supported platforms.
+ * @returns whether the target is the root or a descendant of it.
+ */
+export declare function isPathUnder(path: string, root: string, caseSensitive?: boolean): Promise<boolean>;