@dsh-electron/dsh-plugin-multi-root-workspace 0.1.10 → 0.1.12

package/lib/types/client/styles.d.ts

@@ -11,4 +11,4 @@
  * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/styles
  */
 /** The stylesheet text; every class is prefixed `mrfw-` to stay collision-free. */
-export declare const STYLES = "\n/* Sidebar footer row, mirroring the host ui-settings-general trigger: the row\n * wrapper overhangs each side by 2px (width calc(100% + 4px) against the\n * shell's 12px inline padding) so the icon's ink line lands at 18px from the\n * column edge \u2014 exactly where the Settings gear below sits. */\n.mrfw-triggerRow {\n  flex: none;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: calc(100% + 4px);\n  margin: 4px -2px;\n}\n\n.mrfw-triggerRow.mrfw-railRow {\n  width: 36px;\n  margin: 8px 0 10px;\n}\n\n.mrfw-trigger {\n  box-sizing: border-box;\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: auto;\n  height: 42px;\n  margin: 0;\n  padding: 0 10px 0 8px;\n  border: none;\n  border-radius: 12px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  text-align: left;\n  cursor: pointer;\n  overflow: hidden;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-trigger:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-triggerIcon {\n  flex: none;\n  display: inline-flex;\n}\n\n.mrfw-triggerLabel {\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n.mrfw-triggerRail {\n  flex: none;\n  width: 36px;\n  height: 36px;\n  margin: 0;\n  padding: 0;\n  gap: 0;\n  border-radius: 50%;\n  justify-content: center;\n}\n\n/* Icon-only launcher inside the upstream Files tab header. Upstream's\n   FilesBody renders .header as one flat flex row \u2014 PathLabel, then the\n   reload button, then the files.actions slot occupants \u2014 and each of those\n   children carries a stable data-files-* attribute on the flex item itself\n   (data-files-root on the pane, data-files-path, data-files-reload).\n   A registration order sorts only INSIDE the actions slot and can never\n   overtake the reload button, so the launcher is moved with the flex order\n   property instead: this wrapper is the slot's root element and therefore a\n   direct flex item of .header, and order: -1 puts it ahead of every\n   order-0 sibling while the :has() rule below keeps the path first. */\n.mrfw-fileLauncher {\n  order: -1;\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* Pin the upstream path label ahead of the launcher \u2014 but only while this\n   plugin is in the row: the :has() guard keeps a rule that names an\n   upstream element inert whenever the launcher is absent. The\n   :not([data-files-entry]) qualifier is load-bearing, not decorative:\n   upstream puts data-files-path on EVERY tree row too (the row's own\n   absolute path), so an unqualified selector would match the whole tree,\n   not just the header's PathLabel. Both selectors depend on upstream's DOM\n   shape, which is not part of the slot contract; if it changes, the rules\n   simply stop matching and the launcher falls back to its in-slot position \u2014\n   a silent degradation, never a broken header. */\n[data-files-root]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) {\n  order: -2;\n}\n\n/* The root switcher is the launcher's grown-up form on runtimes whose\n   files.actions owner carries absolutePath. It takes the path label's flex\n   position and stretch: order: -1 ahead of every order-0 sibling, and a\n   growing min-width:0 item so both the trigger label and the PathLabel\n   inside it can ellipsize instead of pushing the header controls out. */\n.mrfw-rootSwitcher {\n  order: -1;\n  flex: 1 1 auto;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  /* Same 4px the upstream .header puts between its own flex items, so the\n     takeover controls (reload, open-in-app fork) sit at the same offsets the\n     hidden native ones did \u2014 no drift between primary and additional state. */\n  gap: 4px;\n}\n\n/* While the switcher exists it hides the upstream path label \u2014 the\n   :has() guard again keeps the upstream-naming rule inert unless this\n   plugin is actually in the row. The switcher draws its own PathLabel of\n   the selected root next to the trigger (className mrfw-switcherPath, no\n   data-files-* attributes), so the header keeps a path in the same spot.\n   :not([data-files-entry]) is what confines this rule to the header:\n   every tree row carries data-files-path with its own path as the value,\n   and only the PathLabel carries it bare. Without the qualifier this\n   display:none would blank the entire native tree. */\n[data-files-root]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native tree body and its\n   reload hide: the reload refreshes the very tree that is no longer\n   visible, and the plugin's forked tree is portaled in as the body's sibling.\n   The header still offers a reload \u2014 the switcher's own .mrfw-switcherReload\n   calls the forked face's refresh. The native tree keeps watching in the\n   background, so switching back to the primary root restores it instantly. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-body],\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native open-in-app split\n   button hides too: its slot props carry the pane's primary root, so it\n   would always open the primary root no matter what the switcher selected.\n   The header gets the plugin's own fork of that same control instead (the\n   open-in-app directory), wired to the selected root.\n\n   The slot's render site is wrapped in the renderer's own anchor \u2014\n   <div data-slot=\"sidebar.right.tab.files.actions\" style=\"display:contents\">\n   \u2014 so the header's flex items inside it are the occupants themselves, and\n   the native item is the ui-primitives Menu anchor span wrapping the marked\n   .split. The first selector hides that occupant item through the data-slot\n   anchor: hiding only the inner control would leave the empty anchor span\n   as a zero-width flex item whose header gap pushes the fork 4px left of\n   the native position. The wrapper itself can never be the target \u2014 its\n   inline display:contents beats any stylesheet rule, and hiding it would\n   take the switcher with it. The second selector is the fallback for an\n   upstream that moves the attribute off the item. The fork survives both:\n   the only data-open-target inside .mrfw-rootSwitcher is its own\n   .mrfw-openSplit, which :not() excludes. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) {\n  display: none;\n}\n\n/* The trigger borrows the path label's look: quiet text with a folder\n   glyph, the hover of the neighboring header buttons, and the overflow\n   behavior PathLabel itself uses in a narrow header. It may shrink but\n   never grows \u2014 the PathLabel after it owns the free header space. */\n.mrfw-rootSwitchBtn {\n  flex: 0 1 auto;\n  min-width: 0;\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 28px;\n  margin: 0;\n  padding: 0 4px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: inherit;\n  line-height: 20px;\n  text-align: left;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-rootSwitchBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-rootSwitchBtn .mrfw-triggerIcon {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-rootSwitchLabel {\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootSwitchChevron {\n  margin-left: auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The selected root's full path sits between the trigger and the reload \u2014\n   the very PathLabel upstream draws there, so it brings its own grow,\n   left-clip and hover-title behavior; only the gutters are ours. The right\n   margin plus the container gap reproduces upstream's .path margin-right\n   12px + header gap 4px; the left gutter comes from the same container gap. */\n.mrfw-switcherPath {\n  margin: 0 12px 0 0;\n}\n\n/* The takeover's own reload, standing exactly where the hidden native one\n   did: the upstream .tool recipe verbatim (28px hit area, 15px glyph,\n   secondary voice, hover fills). It calls the forked face's refresh \u2014 an\n   in-place re-list, not a remount. */\n.mrfw-switcherReload {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: var(--dsw-radius-sm);\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  line-height: 1;\n  cursor: pointer;\n}\n\n.mrfw-switcherReload:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* \u2500\u2500 files-tree fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's FilesBody.module.css (ui-sidebar-files @\n   0.2.1-alpha.2) with local names mapped to mrfw-ft* so the rules cannot\n   collide with host DOM \u2014 and so the fork's own body (which must NOT carry\n   data-files-body) stays visible while the rules above hide the native one.\n   The header-only rules (root/header/path/tool/status/statusLine/titleIcon)\n   belong to the upstream shell this fork drops and are not mapped. Fork sync\n   re-diffs the upstream file and re-applies the rename \u2014 see\n   src/client/files-tree/FORK.md. */\n\n/* The pane's own .root already supplies the flex column, color, and font;\n   the fork's body takes the same stretch item the hidden native body held,\n   including the workspace list's 2px scrollbar offset and stable gutter. */\n.mrfw-ftBody {\n  flex: 1 1 auto;\n  min-height: 0;\n  margin-right: 2px;\n  padding: 8px 0 8px 8px;\n  overflow: auto;\n  scrollbar-gutter: stable;\n}\n\n.mrfw-ftBody::-webkit-scrollbar-track {\n  margin: 2px;\n}\n\n.mrfw-ftLevel {\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.mrfw-ftLevel .mrfw-ftLevel {\n  padding-left: 18px;\n}\n\n.mrfw-ftItem {\n  margin: 0;\n  padding: 0;\n}\n\n/* Rows abut, so the hover fill is the whole row; the tree's air is this\n   inset, not a gap between rows. */\n.mrfw-ftRow {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 10px;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  background: transparent;\n  border: 0;\n  border-radius: var(--dsw-radius-md);\n  cursor: pointer;\n}\n\n.mrfw-ftRow:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* The folder glyph rides the tertiary ink, as the workspace tree's does. */\n.mrfw-ftIcon {\n  flex: 0 0 auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The type's coloured sheet at the folder glyph's 16px; its colour is its own. */\n.mrfw-ftFileIcon {\n  flex: 0 0 auto;\n}\n\n.mrfw-ftName {\n  min-width: 0;\n  overflow: hidden;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n}\n\n/* Neither a file nor a directory: shown so the directory is reported whole,\n   greyed so nobody tries to open it. */\n.mrfw-ftOther {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n\n.mrfw-ftOther:hover {\n  background: transparent;\n}\n\n.mrfw-ftNote {\n  margin: 0;\n  padding: 3px 10px;\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 12px;\n}\n\n/* \u2500\u2500 open-in-app fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's OpenTargetButton.module.css\n   (dsh-client-ui-open-in-app @ 0.2.1-alpha.2) with local names mapped to\n   mrfw-open* so the rules cannot collide with host DOM. Fork sync re-diffs\n   the upstream file and re-applies the rename \u2014 see\n   src/client/open-in-app/FORK.md. */\n\n/* Sized to sit in the document header's 24px control row beside its round\n   icon buttons: a hairline pill with a 12px label and a narrow chevron half. */\n.mrfw-openMenuAnchor {\n  display: inline-flex;\n  flex: none;\n  align-self: center;\n}\n\n.mrfw-openSplit {\n  display: inline-flex;\n  align-items: stretch;\n  box-sizing: border-box;\n  height: 24px;\n  overflow: hidden;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: var(--dsw-radius-sm);\n  font-family: var(--dsw-font-family);\n}\n\n.mrfw-openMain,\n.mrfw-openChevron {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  border: 0;\n  background: none;\n  color: var(--dsw-alias-label-primary);\n  font-size: 11px;\n  line-height: 16px;\n  white-space: nowrap;\n  cursor: pointer;\n}\n\n.mrfw-openMain {\n  gap: 4px;\n  padding: 3px 5px;\n}\n\n.mrfw-openChevron {\n  padding: 3px 4px 3px 3px;\n  border-left: 0.5px solid var(--dsw-alias-border-l4);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-openMain:hover:not(:disabled),\n.mrfw-openMain:focus-visible,\n.mrfw-openChevron:hover:not(:disabled),\n.mrfw-openChevron:focus-visible {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* Pending disables clicks without a restyle; only hover feedback pauses. */\n.mrfw-openMain:disabled,\n.mrfw-openChevron:disabled {\n  cursor: default;\n}\n\n.mrfw-openAppIcon {\n  object-fit: contain;\n}\n\n/* The unavailable preview emphasizes the same actions with a labeled button. */\n.mrfw-openSplit[data-size='large'] {\n  height: 36px;\n  border-radius: var(--dsw-radius-md);\n  border-color: var(--dsw-alias-border-l2);\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openMain {\n  gap: 6px;\n  padding: 6px 14px;\n  font-size: 14px;\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openChevron {\n  padding: 6px 10px;\n}\n\n.mrfw-openSkeleton { display: inline-block; flex: none; border-radius: var(--dsw-radius-xs); background: var(--dsw-alias-interactive-bg-hover); }\n\n.mrfw-overlay {\n  position: fixed;\n  inset: 0;\n  z-index: 1000;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n}\n\n.mrfw-mask {\n  position: absolute;\n  inset: 0;\n  background: var(--dsw-alias-bg-mask-1);\n  backdrop-filter: var(--dsw-mask-blur);\n}\n\n.mrfw-dialog {\n  position: relative;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  width: min(640px, 100%);\n  max-height: 100%;\n  overflow: hidden;\n  border: none;\n  border-radius: 24px;\n  background: var(--dsw-alias-bg-layer-2);\n  box-shadow: var(--dsw-elevation-prominent);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  outline: none;\n}\n\n.mrfw-header {\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 22px 14px 12px 24px;\n}\n\n.mrfw-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-close {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  cursor: pointer;\n  color: var(--dsw-alias-label-secondary);\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-close:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-body {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  overflow-y: auto;\n  padding: 0 24px 24px;\n}\n\n.mrfw-alert {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.mrfw-section {\n  display: flex;\n  flex-direction: column;\n}\n\n.mrfw-section + .mrfw-section {\n  margin-top: 8px;\n}\n\n.mrfw-sectionTitleRow {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  padding: 8px 0 4px;\n}\n\n.mrfw-sectionTitle {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-sectionNote {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-row {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n.mrfw-rowBare {\n  border-bottom: none;\n}\n\n/* A root entry's two lines: the display name on top, the absolute path under\n   it in the tertiary voice (the workspace rows recipe of the host sidebar). */\n/* Match upstream General Settings' DeveloperToolsRow layout. */\n.mrfw-skillsSettings {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 24px;\n  padding: 16px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n.mrfw-skillsSettingsText { min-width: 0; }\n.mrfw-skillsSettingsTitle { font-size: 14px; line-height: 20px; }\n.mrfw-skillsSettingsDescription {\n  margin-top: 4px;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  line-height: 18px;\n}\n.mrfw-rootText {\n  display: flex;\n  flex: 1 1 240px;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n/* Keep status tags and permission glyphs visible beside the alias, wrapping\n   onto another line when the dialog is narrow. */\n.mrfw-rootName {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n  min-width: 0;\n  font-size: 14px;\n  line-height: 20px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-rootNameText {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootPath {\n  font-family: var(--ds-font-family-code);\n  font-size: 12px;\n  line-height: 18px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The path doubles as the copy control: an unstyled button that keeps the\n   text recipe and makes the whole string clickable \u2014 the whole region, not\n   just the icon, copies on click. */\n.mrfw-pathCopy {\n  display: block;\n  width: 100%;\n  padding: 0;\n  border: 0;\n  background: transparent;\n  text-align: left;\n  cursor: pointer;\n}\n\n/* The trailing icon stays in flow but invisible until the path is hovered\n   or focused: appearing never re-wraps the text, and the icon inherits the\n   path's own tertiary ink. */\n.mrfw-pathCopyIcon {\n  display: inline-flex;\n  margin-left: 4px;\n  vertical-align: -2px;\n  opacity: 0;\n  transition: opacity var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-pathCopy:hover .mrfw-pathCopyIcon,\n.mrfw-pathCopy:focus-visible .mrfw-pathCopyIcon {\n  opacity: 1;\n}\n\n.mrfw-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-stateWarn {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.mrfw-btn {\n  display: inline-flex;\n  flex: none;\n  align-items: center;\n  justify-content: center;\n  gap: 4px;\n  height: 28px;\n  padding: 0 10px;\n  border: none;\n  border-radius: 14px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-btn[aria-busy='true'] {\n  cursor: wait;\n}\n\n.mrfw-btn:disabled {\n  cursor: not-allowed;\n  opacity: 0.4;\n}\n\n.mrfw-btnGhost:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnGhost:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n/* The solid destructive action of the capsule family: the upgrade confirm's\n   red button. state-error-primary is the error ink upstream also uses as a\n   fill (StateDot); the hover mixes in the host's primary label token to\n   follow its theme and contrast choices. Neither color is a guessed token:\n   an undefined var() would fall back\n   to transparent and white-out the whole button. */\n.mrfw-btnDanger {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnDanger:hover:not(:disabled) {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 85%, var(--dsw-alias-label-primary));\n}\n\n.mrfw-btnOutline {\n  border: 0.5px solid var(--dsw-alias-border-l3);\n  background: transparent;\n}\n\n.mrfw-btnOutline:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnPrimary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnPrimary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n\n/* One icon-only action: a square of the capsule family, meaning in title.\n   Declared after the .mrfw-btn family so its padding wins the cascade tie:\n   the capsule's 0 10px padding would otherwise squeeze the icon glyph. */\n.mrfw-iconBtn {\n  width: 28px;\n  padding: 0;\n  border-radius: 8px;\n}\n\n.mrfw-input {\n  flex: 1 1 220px;\n  min-width: 0;\n  height: 32px;\n  padding: 0 8px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  outline: none;\n  transition: border-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.mrfw-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.mrfw-inputInline {\n  flex: 1 1 auto;\n}\n\n.mrfw-accessSelect {\n  flex: 0 0 auto;\n}\n\n/* The access dropdown's capsule trigger: the Menu anchor wrapper is the flex\n   item, the button inside keeps the control row's 32px capsule recipe. */\n.mrfw-accessTrigger {\n  padding: 0 12px;\n}\n\n.mrfw-cwdTag {\n  flex: none;\n  padding: 0 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 11px;\n  line-height: 18px;\n}\n\n.mrfw-accessBadge {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n}\n\n.mrfw-accessBadge {\n  flex: none;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-aliasEditor {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n  flex-basis: 100%;\n}\n\n.mrfw-actions {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  margin-top: 16px;\n  padding-top: 16px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n/* One control row, one height: the capsule buttons match the 32px input. */\n.mrfw-actions .mrfw-btn {\n  height: 32px;\n  border-radius: 16px;\n}\n\n.mrfw-actions .mrfw-iconBtn {\n  width: 32px;\n}\n";
+export declare const STYLES = "\n/* Sidebar footer row, mirroring the host ui-settings-general trigger: the row\n * wrapper overhangs each side by 2px (width calc(100% + 4px) against the\n * shell's 12px inline padding) so the icon's ink line lands at 18px from the\n * column edge \u2014 exactly where the Settings gear below sits. */\n.mrfw-triggerRow {\n  flex: none;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: calc(100% + 4px);\n  margin: 4px -2px;\n}\n\n.mrfw-triggerRow.mrfw-railRow {\n  width: 36px;\n  margin: 8px 0 10px;\n}\n\n.mrfw-trigger {\n  box-sizing: border-box;\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: auto;\n  height: 42px;\n  margin: 0;\n  padding: 0 10px 0 8px;\n  border: none;\n  border-radius: 12px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  text-align: left;\n  cursor: pointer;\n  overflow: hidden;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-trigger:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-triggerIcon {\n  flex: none;\n  display: inline-flex;\n}\n\n.mrfw-triggerLabel {\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n.mrfw-triggerRail {\n  flex: none;\n  width: 36px;\n  height: 36px;\n  margin: 0;\n  padding: 0;\n  gap: 0;\n  border-radius: 50%;\n  justify-content: center;\n}\n\n/* Icon-only launcher inside the upstream Files tab header. Upstream's\n   FilesBody renders .header as one flat flex row \u2014 PathLabel, then the\n   reload button, then the files.actions slot occupants \u2014 and each of those\n   children carries a stable data-files-* attribute on the flex item itself\n   (data-files-root on the pane, data-files-path, data-files-reload).\n   A registration order sorts only INSIDE the actions slot and can never\n   overtake the reload button, so the launcher is moved with the flex order\n   property instead: this wrapper is the slot's root element and therefore a\n   direct flex item of .header, and order: -1 puts it ahead of every\n   order-0 sibling while the :has() rule below keeps the path first. */\n.mrfw-fileLauncher {\n  order: -1;\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* Pin the upstream path label ahead of the launcher \u2014 but only while this\n   plugin is in the row: the :has() guard keeps a rule that names an\n   upstream element inert whenever the launcher is absent. The\n   :not([data-files-entry]) qualifier is load-bearing, not decorative:\n   upstream puts data-files-path on EVERY tree row too (the row's own\n   absolute path), so an unqualified selector would match the whole tree,\n   not just the header's PathLabel. Both selectors depend on upstream's DOM\n   shape, which is not part of the slot contract; if it changes, the rules\n   simply stop matching and the launcher falls back to its in-slot position \u2014\n   a silent degradation, never a broken header. */\n[data-files-root]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) {\n  order: -2;\n}\n\n/* The root switcher is the launcher's grown-up form on runtimes whose\n   files.actions owner carries absolutePath. It takes the path label's flex\n   position and stretch: order: -1 ahead of every order-0 sibling, and a\n   growing min-width:0 item so both the trigger label and the PathLabel\n   inside it can ellipsize instead of pushing the header controls out. */\n.mrfw-rootSwitcher {\n  order: -1;\n  flex: 1 1 auto;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  /* Same 4px the upstream .header puts between its own flex items, so the\n     takeover controls (reload, open-in-app fork) sit at the same offsets the\n     hidden native ones did \u2014 no drift between primary and additional state. */\n  gap: 4px;\n}\n\n/* While the switcher exists it hides the upstream path label \u2014 the\n   :has() guard again keeps the upstream-naming rule inert unless this\n   plugin is actually in the row. The switcher draws its own PathLabel of\n   the selected root next to the trigger (className mrfw-switcherPath, no\n   data-files-* attributes), so the header keeps a path in the same spot.\n   :not([data-files-entry]) is what confines this rule to the header:\n   every tree row carries data-files-path with its own path as the value,\n   and only the PathLabel carries it bare. Without the qualifier this\n   display:none would blank the entire native tree. */\n[data-files-root]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native tree body and its\n   reload hide: the reload refreshes the very tree that is no longer\n   visible, and the plugin's forked tree is portaled in as the body's sibling.\n   The header still offers a reload \u2014 the switcher's own .mrfw-switcherReload\n   calls the forked face's refresh. The native tree keeps watching in the\n   background, so switching back to the primary root restores it instantly. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-body],\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native open-in-app split\n   button hides too: its slot props carry the pane's primary root, so it\n   would always open the primary root no matter what the switcher selected.\n   The header gets the plugin's own fork of that same control instead (the\n   open-in-app directory), wired to the selected root.\n\n   The slot's render site is wrapped in the renderer's own anchor \u2014\n   <div data-slot=\"sidebar.right.tab.files.actions\" style=\"display:contents\">\n   \u2014 so the header's flex items inside it are the occupants themselves, and\n   the native item is the ui-primitives Menu anchor span wrapping the marked\n   .split. The first selector hides that occupant item through the data-slot\n   anchor: hiding only the inner control would leave the empty anchor span\n   as a zero-width flex item whose header gap pushes the fork 4px left of\n   the native position. The wrapper itself can never be the target \u2014 its\n   inline display:contents beats any stylesheet rule, and hiding it would\n   take the switcher with it. The second selector is the fallback for an\n   upstream that moves the attribute off the item. The fork survives both:\n   the only data-open-target inside .mrfw-rootSwitcher is its own\n   .mrfw-openSplit, which :not() excludes. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) {\n  display: none;\n}\n\n/* The trigger borrows the path label's look: quiet text with a folder\n   glyph, the hover of the neighboring header buttons, and the overflow\n   behavior PathLabel itself uses in a narrow header. It may shrink but\n   never grows \u2014 the PathLabel after it owns the free header space. */\n.mrfw-rootSwitchBtn {\n  flex: 0 1 auto;\n  min-width: 0;\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 28px;\n  margin: 0;\n  padding: 0 4px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: inherit;\n  line-height: 20px;\n  text-align: left;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-rootSwitchBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-rootSwitchBtn .mrfw-triggerIcon {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-rootSwitchLabel {\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootSwitchChevron {\n  margin-left: auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The selected root's full path sits between the trigger and the reload \u2014\n   the very PathLabel upstream draws there, so it brings its own grow,\n   left-clip and hover-title behavior; only the gutters are ours. The right\n   margin plus the container gap reproduces upstream's .path margin-right\n   12px + header gap 4px; the left gutter comes from the same container gap. */\n.mrfw-switcherPath {\n  margin: 0 12px 0 0;\n}\n\n/* The takeover's own reload, standing exactly where the hidden native one\n   did: the upstream .tool recipe verbatim (28px hit area, 15px glyph,\n   secondary voice, hover fills). It calls the forked face's refresh \u2014 an\n   in-place re-list, not a remount. */\n.mrfw-switcherReload {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: var(--dsw-radius-sm);\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  line-height: 1;\n  cursor: pointer;\n}\n\n.mrfw-switcherReload:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* \u2500\u2500 files-tree fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's FilesBody.module.css (ui-sidebar-files @\n   0.2.2-alpha.2) with local names mapped to mrfw-ft* so the rules cannot\n   collide with host DOM \u2014 and so the fork's own body (which must NOT carry\n   data-files-body) stays visible while the rules above hide the native one.\n   The header-only rules (root/header/path/tool/status/statusLine/titleIcon)\n   belong to the upstream shell this fork drops and are not mapped. Fork sync\n   re-diffs the upstream file and re-applies the rename \u2014 see\n   src/client/files-tree/FORK.md. */\n\n/* The pane's own .root already supplies the flex column, color, and font;\n   the fork's body takes the same stretch item the hidden native body held,\n   including the workspace list's 2px scrollbar offset and stable gutter. */\n.mrfw-ftBody {\n  flex: 1 1 auto;\n  min-height: 0;\n  margin-right: 2px;\n  padding: 8px 0 8px 8px;\n  overflow: auto;\n  scrollbar-gutter: stable;\n}\n\n.mrfw-ftBody::-webkit-scrollbar-track {\n  margin: 2px;\n}\n\n.mrfw-ftLevel {\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.mrfw-ftLevel .mrfw-ftLevel {\n  padding-left: 18px;\n}\n\n.mrfw-ftItem {\n  margin: 0;\n  padding: 0;\n}\n\n/* Rows abut, so the hover fill is the whole row; the tree's air is this\n   inset, not a gap between rows. */\n.mrfw-ftRow {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 10px;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  background: transparent;\n  border: 0;\n  border-radius: var(--dsw-radius-md);\n  cursor: pointer;\n}\n\n@media (hover: hover) {\n  .mrfw-ftRow:hover {\n    background: var(--dsw-alias-interactive-bg-hover);\n  }\n}\n\n/* The folder glyph rides the tertiary ink, as the workspace tree's does. */\n.mrfw-ftIcon {\n  flex: 0 0 auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The type's coloured sheet at the folder glyph's 16px; its colour is its own. */\n.mrfw-ftFileIcon {\n  flex: 0 0 auto;\n}\n\n.mrfw-ftName {\n  min-width: 0;\n  overflow: hidden;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n}\n\n/* Neither a file nor a directory: shown so the directory is reported whole,\n   greyed so nobody tries to open it. */\n.mrfw-ftOther {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n\n@media (hover: hover) {\n  .mrfw-ftOther:hover {\n    background: transparent;\n  }\n}\n\n.mrfw-ftNote {\n  margin: 0;\n  padding: 3px 10px;\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 12px;\n}\n\n/* \u2500\u2500 open-in-app fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's OpenTargetButton.module.css\n   (dsh-client-ui-open-in-app @ 0.2.1-alpha.2) with local names mapped to\n   mrfw-open* so the rules cannot collide with host DOM. Fork sync re-diffs\n   the upstream file and re-applies the rename \u2014 see\n   src/client/open-in-app/FORK.md. */\n\n/* Sized to sit in the document header's 24px control row beside its round\n   icon buttons: a hairline pill with a 12px label and a narrow chevron half. */\n.mrfw-openMenuAnchor {\n  display: inline-flex;\n  flex: none;\n  align-self: center;\n}\n\n.mrfw-openSplit {\n  display: inline-flex;\n  align-items: stretch;\n  box-sizing: border-box;\n  height: 24px;\n  overflow: hidden;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: var(--dsw-radius-sm);\n  font-family: var(--dsw-font-family);\n}\n\n.mrfw-openMain,\n.mrfw-openChevron {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  border: 0;\n  background: none;\n  color: var(--dsw-alias-label-primary);\n  font-size: 11px;\n  line-height: 16px;\n  white-space: nowrap;\n  cursor: pointer;\n}\n\n.mrfw-openMain {\n  gap: 4px;\n  padding: 3px 5px;\n}\n\n.mrfw-openChevron {\n  padding: 3px 4px 3px 3px;\n  border-left: 0.5px solid var(--dsw-alias-border-l4);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-openMain:hover:not(:disabled),\n.mrfw-openMain:focus-visible,\n.mrfw-openChevron:hover:not(:disabled),\n.mrfw-openChevron:focus-visible {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* Pending disables clicks without a restyle; only hover feedback pauses. */\n.mrfw-openMain:disabled,\n.mrfw-openChevron:disabled {\n  cursor: default;\n}\n\n.mrfw-openAppIcon {\n  object-fit: contain;\n}\n\n/* The unavailable preview emphasizes the same actions with a labeled button. */\n.mrfw-openSplit[data-size='large'] {\n  height: 36px;\n  border-radius: var(--dsw-radius-md);\n  border-color: var(--dsw-alias-border-l2);\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openMain {\n  gap: 6px;\n  padding: 6px 14px;\n  font-size: 14px;\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openChevron {\n  padding: 6px 10px;\n}\n\n.mrfw-openSkeleton { display: inline-block; flex: none; border-radius: var(--dsw-radius-xs); background: var(--dsw-alias-interactive-bg-hover); }\n\n.mrfw-overlay {\n  position: fixed;\n  inset: 0;\n  z-index: 1000;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n}\n\n.mrfw-mask {\n  position: absolute;\n  inset: 0;\n  background: var(--dsw-alias-bg-mask-1);\n  backdrop-filter: var(--dsw-mask-blur);\n}\n\n.mrfw-dialog {\n  position: relative;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  width: min(640px, 100%);\n  max-height: 100%;\n  overflow: hidden;\n  border: none;\n  border-radius: 24px;\n  background: var(--dsw-alias-bg-layer-2);\n  box-shadow: var(--dsw-elevation-prominent);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  outline: none;\n}\n\n.mrfw-header {\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 22px 14px 12px 24px;\n}\n\n.mrfw-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-close {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  cursor: pointer;\n  color: var(--dsw-alias-label-secondary);\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-close:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-body {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  overflow-y: auto;\n  padding: 0 24px 24px;\n}\n\n.mrfw-alert {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.mrfw-section {\n  display: flex;\n  flex-direction: column;\n}\n\n.mrfw-section + .mrfw-section {\n  margin-top: 8px;\n}\n\n.mrfw-sectionTitleRow {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  padding: 8px 0 4px;\n}\n\n.mrfw-sectionTitle {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-sectionNote {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-row {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n.mrfw-rowBare {\n  border-bottom: none;\n}\n\n/* A root entry's two lines: the display name on top, the absolute path under\n   it in the tertiary voice (the workspace rows recipe of the host sidebar). */\n/* Match upstream General Settings' DeveloperToolsRow layout. */\n.mrfw-skillsSettings {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 24px;\n  padding: 16px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n.mrfw-skillsSettingsText { min-width: 0; }\n.mrfw-skillsSettingsTitle { font-size: 14px; line-height: 20px; }\n.mrfw-skillsSettingsDescription {\n  margin-top: 4px;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  line-height: 18px;\n}\n.mrfw-rootText {\n  display: flex;\n  flex: 1 1 240px;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n/* Keep status tags and permission glyphs visible beside the alias, wrapping\n   onto another line when the dialog is narrow. */\n.mrfw-rootName {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n  min-width: 0;\n  font-size: 14px;\n  line-height: 20px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-rootNameText {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootPath {\n  font-family: var(--ds-font-family-code);\n  font-size: 12px;\n  line-height: 18px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The path doubles as the copy control: an unstyled button that keeps the\n   text recipe and makes the whole string clickable \u2014 the whole region, not\n   just the icon, copies on click. */\n.mrfw-pathCopy {\n  display: block;\n  width: 100%;\n  padding: 0;\n  border: 0;\n  background: transparent;\n  text-align: left;\n  cursor: pointer;\n}\n\n/* The trailing icon stays in flow but invisible until the path is hovered\n   or focused: appearing never re-wraps the text, and the icon inherits the\n   path's own tertiary ink. */\n.mrfw-pathCopyIcon {\n  display: inline-flex;\n  margin-left: 4px;\n  vertical-align: -2px;\n  opacity: 0;\n  transition: opacity var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-pathCopy:hover .mrfw-pathCopyIcon,\n.mrfw-pathCopy:focus-visible .mrfw-pathCopyIcon {\n  opacity: 1;\n}\n\n.mrfw-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-stateWarn {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.mrfw-btn {\n  display: inline-flex;\n  flex: none;\n  align-items: center;\n  justify-content: center;\n  gap: 4px;\n  height: 28px;\n  padding: 0 10px;\n  border: none;\n  border-radius: 14px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-btn[aria-busy='true'] {\n  cursor: wait;\n}\n\n.mrfw-btn:disabled {\n  cursor: not-allowed;\n  opacity: 0.4;\n}\n\n.mrfw-btnGhost:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnGhost:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n/* The solid destructive action of the capsule family: the upgrade confirm's\n   red button. state-error-primary is the error ink upstream also uses as a\n   fill (StateDot); the hover mixes in the host's primary label token to\n   follow its theme and contrast choices. Neither color is a guessed token:\n   an undefined var() would fall back\n   to transparent and white-out the whole button. */\n.mrfw-btnDanger {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnDanger:hover:not(:disabled) {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 85%, var(--dsw-alias-label-primary));\n}\n\n.mrfw-btnOutline {\n  border: 0.5px solid var(--dsw-alias-border-l3);\n  background: transparent;\n}\n\n.mrfw-btnOutline:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnPrimary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnPrimary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n\n/* One icon-only action: a square of the capsule family, meaning in title.\n   Declared after the .mrfw-btn family so its padding wins the cascade tie:\n   the capsule's 0 10px padding would otherwise squeeze the icon glyph. */\n.mrfw-iconBtn {\n  width: 28px;\n  padding: 0;\n  border-radius: 8px;\n}\n\n.mrfw-input {\n  flex: 1 1 220px;\n  min-width: 0;\n  height: 32px;\n  padding: 0 8px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  outline: none;\n  transition: border-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.mrfw-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.mrfw-inputInline {\n  flex: 1 1 auto;\n}\n\n.mrfw-accessSelect {\n  flex: 0 0 auto;\n}\n\n/* The access dropdown's capsule trigger: the Menu anchor wrapper is the flex\n   item, the button inside keeps the control row's 32px capsule recipe. */\n.mrfw-accessTrigger {\n  padding: 0 12px;\n}\n\n.mrfw-cwdTag {\n  flex: none;\n  padding: 0 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 11px;\n  line-height: 18px;\n}\n\n.mrfw-accessBadge {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n}\n\n.mrfw-accessBadge {\n  flex: none;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-aliasEditor {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n  flex-basis: 100%;\n}\n\n.mrfw-actions {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  margin-top: 16px;\n  padding-top: 16px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n/* One control row, one height: the capsule buttons match the 32px input. */\n.mrfw-actions .mrfw-btn {\n  height: 32px;\n  border-radius: 16px;\n}\n\n.mrfw-actions .mrfw-iconBtn {\n  width: 32px;\n}\n";

package/lib/types/compat/authority-storage.d.ts

@@ -0,0 +1,6 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { DomainSpec } from '@deepseek-ai/dsh-storage-domain';
+export declare function openAuthorityStorage<S extends DomainSpec>(ctx: Context, root: string, spec: S): Promise<{
+    table: <N extends keyof S["tables"] & string>(name: N) => import("@deepseek-ai/dsh-storage-domain").KvTable<import("@deepseek-ai/dsh-storage-domain").TableKeyOf<S, N>, import("@deepseek-ai/dsh-storage-domain").TableValueOf<S, N>>;
+    close(): Promise<void>;
+}>;

package/lib/types/compat/dsh-version.d.ts

@@ -28,7 +28,7 @@
  * the upgrade smoke passed on that exact version — a green CI run on an
  * unlisted release is evidence, not authorization (ADR-0009).
  */
-export declare const SUPPORTED_DSH_RELEASES: readonly ["0.1.5-rc.2", "0.1.6-alpha.1", "0.1.6-alpha.2", "0.1.7-alpha.1", "0.1.7-alpha.2", "0.1.7-rc.1", "0.1.7-rc.2", "0.2.0-rc.1", "0.2.0-rc.2", "0.2.1-alpha.1", "0.2.1-alpha.2", "0.2.1-alpha.3", "0.2.1-alpha.4", "0.2.1-alpha.5", "0.2.1-rc.1", "0.2.1-rc.2", "0.2.1-rc.3"];
+export declare const SUPPORTED_DSH_RELEASES: readonly ["0.1.5-rc.2", "0.1.6-alpha.1", "0.1.6-alpha.2", "0.1.7-alpha.1", "0.1.7-alpha.2", "0.1.7-rc.1", "0.1.7-rc.2", "0.2.0-rc.1", "0.2.0-rc.2", "0.2.1-alpha.1", "0.2.1-alpha.2", "0.2.1-alpha.3", "0.2.1-alpha.4", "0.2.1-alpha.5", "0.2.1-rc.1", "0.2.1-rc.2", "0.2.1-rc.3", "0.2.1-rc.4", "0.2.1-rc.5", "0.2.2-alpha.2"];
 /** One release this plugin claims to support. */
 export type SupportedDshRelease = typeof SUPPORTED_DSH_RELEASES[number];
 /**
@@ -42,7 +42,7 @@ export declare const REQUIRED_CORE_PACKAGES: readonly ["@deepseek-ai/dsh-fs", "@
  * Absence is fine; a version that DISAGREES with the required packages is not —
  * that is the mixed-installation failure this contract exists to catch.
  */
-export declare const OPTIONAL_CORE_PACKAGES: readonly ["@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-api-session-controller", "@deepseek-ai/dsh-session-query", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-working-directory", "@deepseek-ai/dsh-lsp", "@deepseek-ai/dsh-lsp-stdio", "@deepseek-ai/dsh-api-workspace-files", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-sandbox-windows-acl", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-client-connection", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt"];
+export declare const OPTIONAL_CORE_PACKAGES: readonly ["@deepseek-ai/dsh-storage-json", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-api-session-controller", "@deepseek-ai/dsh-session-query", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-working-directory", "@deepseek-ai/dsh-lsp", "@deepseek-ai/dsh-lsp-stdio", "@deepseek-ai/dsh-api-workspace-files", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-sandbox-windows-acl", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-client-connection", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt"];
 /**
  * The optional packages this plugin loads itself at run time, through dynamic
  * `import()`s inside this package's own modules. The copy this module resolves
@@ -50,7 +50,7 @@ export declare const OPTIONAL_CORE_PACKAGES: readonly ["@deepseek-ai/dsh-skill",
  * private copy inside this package's own tree genuinely loads, and a version
  * that disagrees with the host is a real mixed installation, not a phantom.
  */
-export declare const RUNTIME_OPTIONAL_PACKAGES: readonly ["@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-typert-protocol"];
+export declare const RUNTIME_OPTIONAL_PACKAGES: readonly ["@deepseek-ai/dsh-storage-json", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-typert-protocol"];
 /**
  * The optional packages this plugin consumes only as mounted host services or
  * ambient types — it never imports them, so a copy inside this package's own
@@ -79,7 +79,7 @@ export declare const HOST_SERVICE_PACKAGES: readonly ["@deepseek-ai/dsh-settings
  */
 export declare const RUNNER_ANCHORED_PACKAGES: readonly ["@deepseek-ai/dsh-sandbox-windows-acl"];
 /** Every package the contract inspects, required first. */
-export declare const CORE_PACKAGES: readonly ["@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-fs-local", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-local", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-storage-domain", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-api-session-controller", "@deepseek-ai/dsh-session-query", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-working-directory", "@deepseek-ai/dsh-lsp", "@deepseek-ai/dsh-lsp-stdio", "@deepseek-ai/dsh-api-workspace-files", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-sandbox-windows-acl", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-client-connection", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt"];
+export declare const CORE_PACKAGES: readonly ["@deepseek-ai/dsh-fs", "@deepseek-ai/dsh-fs-local", "@deepseek-ai/dsh-sandbox", "@deepseek-ai/dsh-sandbox-local", "@deepseek-ai/dsh-sandbox-policy", "@deepseek-ai/dsh-storage-domain", "@deepseek-ai/dsh-storage-json", "@deepseek-ai/dsh-skill", "@deepseek-ai/dsh-skill-filesystem", "@deepseek-ai/dsh-settings", "@deepseek-ai/dsh-api-session-controller", "@deepseek-ai/dsh-session-query", "@deepseek-ai/dsh-tools", "@deepseek-ai/dsh-working-directory", "@deepseek-ai/dsh-lsp", "@deepseek-ai/dsh-lsp-stdio", "@deepseek-ai/dsh-api-workspace-files", "@deepseek-ai/dsh-typert-protocol", "@deepseek-ai/dsh-sandbox-windows-acl", "@deepseek-ai/dsh-agent", "@deepseek-ai/dsh-agent-instructions", "@deepseek-ai/dsh-client-connection", "@deepseek-ai/dsh-commands", "@deepseek-ai/dsh-llm", "@deepseek-ai/dsh-session", "@deepseek-ai/dsh-subprocess", "@deepseek-ai/dsh-system-prompt"];
 /** How this plugin reacts to an installation it does not support. */
 export type CompatEnforcement = 'enforce' | 'warn';
 /** The environment variable that relaxes the gate. */

package/lib/types/compat/open-in-app-device.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Compatibility adapter for `isMobileDevice` from
+ * `@deepseek-ai/dsh-client-ui-primitives`.
+ *
+ * ```text
+ * 0.1.5-rc.2 through 0.2.1-rc.5   no `isMobileDevice` export
+ * 0.2.2-alpha.2 +                 `isMobileDevice` exported
+ * ```
+ *
+ * The open-in-app fork's verbatim `open-toast.tsx` spells the detector as a
+ * primitives import — a name absent before `0.2.2-alpha.2` — so the lookup
+ * is by export name, not by release string (the `client-icons.ts` pattern).
+ * An older runtime falls back to upstream's identical detection: mobile
+ * userAgent, or a touch-capable MacIntel platform, memoized like upstream's.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/compat/open-in-app-device
+ */
+/**
+ * Resolve the installed release's `isMobileDevice`, or the identical local
+ * fallback on releases that predate the export.
+ * @returns the mobile-device verdict.
+ */
+export declare function isMobileDevice(): boolean;

package/lib/types/compat/process-entrypoints.d.ts

@@ -29,3 +29,5 @@ export declare function shellEntrypoints(shell: object): readonly ProcessEntrypo
  * @returns the present entries — a structural probe only.
  */
 export declare function ptcEntrypoints(runtime: object): readonly ProcessEntrypoint[];
+/** Async public entries can acquire admission before calling their implementation. */
+export declare function isAsyncProcessEntry(entry: unknown): boolean;

package/lib/types/compat/process-profile.d.ts

@@ -0,0 +1,3 @@
+export declare function hasConfinedProfile(argv: readonly string[]): boolean;
+/** Agent PTYs are re-confined after their own fresh admission, never replayed. */
+export declare function originalProcessArgv(argv: readonly string[]): readonly string[];

package/lib/types/compat/sandbox-confine.d.ts

@@ -58,3 +58,5 @@ export declare function mapConfined<T>(value: UpstreamConfined, map: (confined:
  * @returns the widened result, in the shape the installed release uses.
  */
 export declare function widenConfined(base: ConfineCall, widen: (confined: ConfinedArgv) => ConfinedArgv, argv: readonly string[], policy: SandboxPolicy, signal?: AbortSignal): UpstreamConfined;
+/** Public consumer call with the installed provider's arity and return shape. */
+export declare function confineInstalled(provider: Pick<LocalSandboxProvider, 'confine'>, argv: readonly string[], policy: SandboxPolicy, signal?: AbortSignal): ConfinedArgv | Promise<ConfinedArgv>;

package/lib/types/fs.d.ts

@@ -64,6 +64,8 @@ export declare class MultiRootFileSystem extends LocalFileSystem {
     editText(target: FsTarget, edit: FsEditRequest, expected?: {
         version: FsVersion;
     }, signal?: AbortSignal, sandboxPolicy?: SandboxExecutionPolicy): Promise<FsEditOutcome>;
+    /** The provider must also work without the gated registry (ADR-0009). */
+    private withOperation;
     /**
      * The writable roots of one confined call: the upstream derivation (primary
      * root plus the platform temp areas, canonical and deduplicated — empty
@@ -104,7 +106,8 @@ export declare class MultiRootFileSystem extends LocalFileSystem {
      * to primary-root-only writes (no shared temp or additional-root grants)
      * until the authority returns.
      * @param target - the resolved target about to be mutated.
-     * @param sandboxPolicy - the per-call policy; omit for the deployment fallback.
+     * @param policy - the per-call policy captured before admission.
+     * @param scope - the admission snapshot shared by every fence check.
      * @returns the fresh canonical target the mutation must use.
      */
     private checkedTarget;

package/lib/types/instructions.d.ts

@@ -1,50 +1,3 @@
-/**
- * `multi-root-instructions`: the additional roots' own instruction files, made
- * visible to the model.
- *
- * Upstream `agent-instructions` discovers instruction files by walking UP from
- * the session cwd (plus the one user-global file). In a multi-root workspace
- * that walk never reaches an additional root, so `repo-b/AGENTS.md` is
- * invisible to a model that is nevertheless allowed to write `repo-b`. This row
- * closes exactly that gap, and nothing else: the primary root's chain — nested
- * files included — and the user-global file stay upstream's business.
- *
- * Four deliberate choices:
- *
- * 1. **Not a system-prompt contribution.** Instruction text is
- *    producer-supplied context, not system authority, so it enters as a
- *    user-role message tagged `form: 'instructions'`. Through session format 3
- *    the source kind is `plugin`; format 4 retired that shared kind, so the
- *    adapter persists this plugin's own (`multi-root-workspace`). It is also
- *    the only channel that is logged, and model-visible content must be logged.
- * 2. **Injected from `agent/pre-step`, not a session lifecycle event.**
- *    `pre-step` is an awaited waterfall, so discovery, reading and rendering all
- *    complete BEFORE the step it feeds — deterministically, on the first step.
- *    A synchronous prompt callback could not await them, and an emit-mode
- *    lifecycle listener would race the first step. It is also the one hook whose
- *    shape is identical across every supported release, which keeps the
- *    instruction feature out of the compatibility matrix (ADR-0009).
- * 3. **Discovery is pinned to the root.** `projectRoot` is the additional root,
- *    so the walk can never leave it, and every candidate is then required to be
- *    canonically INSIDE that root. That is what keeps `$DSH_HOME/AGENTS.md`, the
- *    primary root's `AGENTS.md`, and any ancestor's file from being injected a
- *    second time by this plugin.
- * 4. **Nested files are driven by the session's own tool activity.** A
- *    subdirectory's `AGENTS.md` only matters once the session has worked in that
- *    subdirectory, so the directories worth examining are derived from the
- *    session's persisted events: `tool/call` and `tool/result` are paired, and a
- *    successful `read`/`write`/`edit` makes the path from the root down to the
- *    touched file's directory relevant (ADR-0010). A file that disappears is
- *    retracted explicitly, because the text it contributed earlier is still in
- *    the conversation and silence does not withdraw it.
- *
- * The byte budget is shared: `maxBytes` bounds the WHOLE additional-root
- * snapshot, not each root, because ten roots must not quietly cost ten budgets
- * of context. Roots consume it in scope order. Retractions are exempt, because a
- * truncated withdrawal is worse than a slightly over-budget message.
- *
- * @module @dsh-electron/dsh-plugin-multi-root-workspace/instructions
- */
 import { Context } from '@deepseek-ai/cordis';
 import type { Agent } from '@deepseek-ai/dsh-agent';
 declare module '@deepseek-ai/cordis' {

package/lib/types/registry-operation.d.ts

@@ -0,0 +1,31 @@
+import type { SandboxMode } from '@deepseek-ai/dsh-sandbox';
+import type { FilesystemScope } from './scope.ts';
+export type RegistryOperationKind = 'fs-write' | 'fs-edit' | 'process' | 'pty' | 'lsp' | 'files' | 'instructions' | 'skills';
+export declare function currentRegistryOperation(proof: object): RegistryOperation | undefined;
+export interface RegistryOperationIdentity {
+    readonly operationId: string;
+    readonly kind: RegistryOperationKind;
+    readonly mode: SandboxMode | undefined;
+    readonly primaryRoot: string;
+    /** Absent when the registry cannot grant additional authority. */
+    readonly authorityEpoch: string | undefined;
+    /** Effective publication revision, meaningful only within this epoch. */
+    readonly revision: number;
+}
+export interface RegistryOperation {
+    readonly identity: RegistryOperationIdentity;
+    /** Only readable during this operation's callback. */
+    readonly scope: FilesystemScope;
+}
+/** Capture by value: neither later publication nor a caller can mutate admission. */
+export declare function freezeOperationScope(scope: FilesystemScope): FilesystemScope;
+/** Execute outside the authority queue; completion also expires async descendants. */
+export declare function runRegistryOperation<T>(scope: FilesystemScope, kind: RegistryOperationKind, authorityEpoch: string | undefined, revision: number, body: (operation: RegistryOperation) => T | Promise<T>, proof?: object, mode?: SandboxMode): Promise<T>;
+/** Optional Registry seam for public consumers; the legacy composition stays exact. */
+export declare function withRegistryRead<T>(ctx: import('@deepseek-ai/cordis').Context, primary: string, kind: RegistryOperationKind, body: () => T | Promise<T>): Promise<T>;
+export declare function withRegistryAdmission<T>(ctx: import('@deepseek-ai/cordis').Context, policy: import('@deepseek-ai/dsh-sandbox').SandboxExecutionPolicy, kind: RegistryOperationKind, body: () => T | Promise<T>): Promise<T>;
+/** Preserve a legacy synchronous entry while granting only the safe primary-root fallback. */
+export declare function runPrimaryOperation<T>(scope: FilesystemScope, mode: SandboxMode, proof: object, body: () => T): T;
+/** Only profiles produced within this exact admission can reach a sync spawn. */
+export declare function rememberOperationProfile(proof: object, argv: readonly string[], capped: boolean): void;
+export declare function operationPermitsProfile(proof: object, argv: readonly string[], capped: boolean): boolean;

package/lib/types/registry.d.ts

@@ -22,8 +22,8 @@
  *   only when the operator removes it (or when the store is repaired). Storage
  *   that cannot be parsed at all is backed up and skipped by the domain layer,
  *   with a warning.
- * - **Mutations are serialized per primary root.** Every mutation runs its
- *   whole read → validate → persist sequence inside one queue per key. The
+ * - **Mutations and fs admissions are serialized store-wide.** Every mutation
+ *   runs its whole read → validate → persist sequence inside the store queue. The
  *   storage domain serializes individual `put()`/`delete()` calls, which is not
  *   enough: two concurrent `add()` calls would both read the same snapshot and
  *   the later write would drop the earlier one, and a removal racing an add
@@ -45,7 +45,10 @@
  */
 import { Context, Service } from '@deepseek-ai/cordis';
 import type { SandboxExecutionPolicy } from '@deepseek-ai/dsh-sandbox';
+import type { RegistryOperation, RegistryOperationKind } from './registry-operation.ts';
 import { type AdditionalRootId, type RegisteredRoot, type RootAccess, type RootRef, type RootStatus } from './roots.ts';
+/** Operator/test capability diagnostics; never bypasses peer authentication. */
+export { nativeHostAvailability } from './authority/native.ts';
 /** The domain name; also the store file stem (`$DSH_HOME/storages/<name>.json`). */
 export declare const DOMAIN_NAME = "multi_root_workspace";
 /** The single table name inside the domain. */
@@ -76,6 +79,9 @@ export type RegistryAuthorityState = {
     readonly kind: 'active';
 } | {
     readonly kind: 'contended';
+} | {
+    readonly kind: 'follower';
+    readonly epoch: string;
 } | {
     readonly kind: 'storage-failed';
     readonly reason: string;
@@ -92,6 +98,8 @@ export type RegistryAuthorityState = {
 export interface Config {
     /** Absolute path of the store-wide kernel lock file. */
     readonly leasePath?: string;
+    /** Explicit medium binding for the multi-Host authority service. */
+    readonly sharedStorageRoot?: string;
     /**
      * Cap on STORED additional-root records per primary root (every state
      * counts, including withheld and unusable ones, so the count is stable and
@@ -191,6 +199,16 @@ export declare class MultiRootRegistry extends Service {
     static inject: string[];
     /** Absolute lock path; absent means the row was composed without `leasePath`. */
     private readonly leasePath;
+    private readonly sharedStorageRoot;
+    private readonly authorityStorageContext;
+    private medium;
+    private server;
+    private client;
+    private connectionFailure;
+    private connectionGeneration;
+    private remoteProjectionReady;
+    private readonly remoteRevisions;
+    private readonly operationProof;
     /** Whether this process currently owns the store. */
     private authorityState;
     /** Held kernel lease; present once acquire succeeded, including after a failed open. */
@@ -203,8 +221,12 @@ export declare class MultiRootRegistry extends Service {
     private readonly cache;
     /** Signature of the last published grant per key, so a no-op refresh stays a no-op. */
     private readonly published;
-    /** One promise chain per canonical primary root: mutations never interleave. */
+    /** Pending store-ordered work, grouped by primary for teardown accounting. */
     private readonly chains;
+    /** Admissions and mutations share one order, including across primary roots. */
+    private operationChain;
+    private operationEpoch;
+    private operationRevision;
     /** Store-wide queue for lease acquire / open / release. */
     private authorityChain;
     /** Change listeners, keyed by their own disposer identity. */
@@ -245,6 +267,9 @@ export declare class MultiRootRegistry extends Service {
      * Whether this process is the Registry Authority for the store-wide medium.
      * Tests and diagnostics read this; surfaces use {@link unavailable}.
      */
+    get epoch(): string | undefined;
+    get shared(): boolean;
+    get available(): boolean;
     get authority(): RegistryAuthorityState;
     /**
      * The configured cap on stored additional-root records per primary root.
@@ -289,6 +314,13 @@ export declare class MultiRootRegistry extends Service {
      * @returns the refreshed status list.
      */
     refresh(primaryRoot: string): Promise<readonly RootStatus[]>;
+    /**
+     * Admit one fs invocation in the same order as mutations, then run its I/O
+     * OUTSIDE the queue. Revocation does not wait for already-admitted work.
+     * Shared followers obtain the same ordered snapshot through attested IPC.
+     */
+    withOperation<T>(policy: SandboxExecutionPolicy, kind: RegistryOperationKind, body: (operation: RegistryOperation) => T | Promise<T>): Promise<T>;
+    withPrimaryOperation<T>(policy: SandboxExecutionPolicy, body: () => T): T;
     /**
      * Registers one additional root.
      * @param primaryRoot - the session workspace root the root belongs to.
@@ -419,8 +451,8 @@ export declare class MultiRootRegistry extends Service {
      */
     private persist;
     /**
-     * Run one job for one primary root after every job already queued for that
-     * root. The whole read → validate → write sequence belongs inside the job:
+     * Run one job after every store job already queued. The whole
+     * read → validate → write sequence belongs inside the job:
      * the storage domain serializes individual writes, so without this the loser
      * of a race reads a snapshot that is already stale and writes it back.
      */
@@ -446,6 +478,15 @@ export declare class MultiRootRegistry extends Service {
      */
     private readonly metadataPublished;
     private publish;
+    private projectRoots;
+    private snapshotOf;
+    private captureSnapshot;
+    private notifyShared;
+    private applySnapshot;
+    private remoteUnavailable;
+    private remoteSnapshot;
+    private remote;
+    private dispatchShared;
     /**
      * The open table.
      * @returns the live table.
@@ -494,7 +535,7 @@ export declare class MultiRootRegistry extends Service {
      */
     private releaseAuthority;
     /**
-     * Wait until no per-primary-root mutation is queued or running.
+     * Wait until no store work is queued or running (operation I/O is outside).
      *
      * One pass is enough, and only because the authority state has already been
      * flipped: no further mutation can be admitted (it would fail in

package/lib/types/scope.d.ts

@@ -208,6 +208,7 @@ export declare class MultiRootScopeService extends Service {
     /** Additional roots keyed by canonical primary root; empty until roots are registered. */
     private readonly rootsByPrimary;
     private readonly listeners;
+    private admissionProof;
     /**
      * The registry-authority fact the registry row publishes. Defaults to
      * `available`: a composition without a registry row can never have
@@ -244,6 +245,15 @@ export declare class MultiRootScopeService extends Service {
      * @param policy - the upstream policy whose workspace root is the primary root.
      * @returns the canonical scope; `additionalRoots` is empty when none are registered.
      */
+    requireAdmission(proof: object): void;
+    rememberProfile(argv: readonly string[]): void;
+    permitsProfile(argv: readonly string[]): boolean;
+    get admissionRequired(): boolean;
+    admissionPathsValid(): boolean;
+    hasAdmission(): boolean;
+    /** Trusted display/review projection, never an execution permit. */
+    snapshot(policy: SandboxExecutionPolicy): FilesystemScope;
+    resolveSnapshot(policy: SandboxExecutionPolicy, roots: readonly AdditionalWorkspaceRoot[], available: boolean): FilesystemScope;
     resolve(policy: SandboxExecutionPolicy): FilesystemScope;
     /** Read-only pending-dispatch projection. Does not mint an ALS execution grant. */
     previewForTool(policy: SandboxExecutionPolicy, toolName: string): FilesystemScope;
@@ -307,6 +317,8 @@ export declare class MultiRootScopeService extends Service {
      * (before acquisition, on contention or storage failure, at teardown) and
      * `available` only once its stored records have been published. Nothing
      * else may call it, and it never touches the root table.
+     * Only transitions notify: a failed refresh may republish `unavailable`,
+     * and notifying on that no-op would re-arm Skills clients' refresh loop.
      * @param available - whether this process holds the registry authority.
      */
     setRegistryAuthority(available: boolean): void;

package/lib/types/skills/catalog.d.ts

@@ -7,6 +7,7 @@ export declare const SKILLS_PROVIDER = "multi-root-workspace";
 export declare function internalSkillName(primary: string, rootId: string, skillName: string): string;
 export interface LocatedSkill {
     readonly primary: string;
+    readonly authorityEpoch?: string | undefined;
     readonly rootId: string;
     readonly aliasId: string;
     readonly candidate: SkillCandidate;
@@ -27,8 +28,10 @@ export declare class AdditionalSkillCatalog {
     current(primary: string, id: string): RootStatus | undefined;
     private withReader;
     list(primary: string, options: SkillLookupOptions): Promise<SkillCandidate[]>;
+    private listAdmitted;
     /** Locators are created here and are not accepted from a client path or object. */
     load(primary: string, entry: SkillCandidate, options: SkillLookupOptions, user: boolean): Promise<SkillDefinition | undefined>;
+    private loadAdmitted;
     admissionValid(definition: SkillDefinition): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/lib/types/skills/pool.d.ts

@@ -10,7 +10,7 @@ export declare class SkillReaderPool {
     constructor(invalidate: () => void, capacity?: number, intervalMs?: number);
     get size(): number;
     get roots(): readonly string[];
-    use<T>(key: string, create: (signal: AbortSignal) => Promise<Reader | undefined>, run: (reader: Reader | undefined) => Promise<T>, signal?: AbortSignal): Promise<T>;
+    use<T>(root: string, create: (signal: AbortSignal) => Promise<Reader | undefined>, run: (reader: Reader | undefined) => Promise<T>, signal?: AbortSignal, identity?: string): Promise<T>;
     poll(): Promise<void>;
     dispose(): Promise<void>;
     private closeEntry;

package/lib/workspace-files.js

@@ -1,4 +1,5 @@
 import { t as wrapMethod } from "./method-wrapper-CFY3p3j2.js";
+import { c as withRegistryRead } from "./registry-operation-C2ZV3Jhw.js";
 import { l as isCanonicallyUnder } from "./roots-Ca_W1S9n.js";
 import { t as routeWorkspacePath } from "./workspace-routing-YPxaQ4V3.js";
 import { posix, resolve, win32 } from "node:path";
@@ -78,19 +79,35 @@ function apply(ctx) {
 				return original.call(this, routed.request, routed.path, relativePath, signal);
 			})) : void 0;
 			const restoreWatch = adaptPathWatch(service, (originalChanges) => async function* (request, path, signal) {
-				if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) {
-					yield* originalChanges.call(this, request, path, signal);
+				const check = async () => {
+					if (await withRegistryRead(scope, request.workspaceRoot, "files", () => routeRead(scope, request, path, signal)) === "deny") throw await outside(path);
+				};
+				if (scope.get("multiRootRegistry")?.shared) await check();
+				if (scope.multiRootScope.snapshot({
+					workspaceRoot: request.workspaceRoot,
+					mode: "read-only"
+				}).additionalRoots.length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) {
+					for await (const frame of originalChanges.call(this, request, path, signal)) {
+						if (scope.get("multiRootRegistry")?.shared) await check();
+						yield frame;
+					}
 					return;
 				}
-				const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+				const route = await withRegistryRead(scope, request.workspaceRoot, "files", () => routeWorkspacePath(scope, request.workspaceRoot, path, signal));
 				if (route === void 0 || route.workspaceRoot === route.primaryRoot) {
 					if (underWithheldRoot(scope, request.workspaceRoot, path)) throw await outside(path);
-					yield* originalChanges.call(this, request, path, signal);
+					for await (const frame of originalChanges.call(this, request, path, signal)) {
+						if (scope.get("multiRootRegistry")?.shared) await check();
+						yield frame;
+					}
 					return;
 				}
 				const lifetime = new AbortController();
 				const unsubscribe = scope.multiRootScope.subscribe(() => {
-					if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) lifetime.abort(/* @__PURE__ */ new Error("the additional root was revoked"));
+					if (!scope.multiRootScope.snapshot({
+						workspaceRoot: route.primaryRoot,
+						mode: "read-only"
+					}).additionalRoots.includes(route.workspaceRoot)) lifetime.abort(/* @__PURE__ */ new Error("the additional root was revoked"));
 				});
 				try {
 					for await (const frame of originalChanges.call(this, {
@@ -101,14 +118,35 @@ function apply(ctx) {
 						lifetime.signal,
 						rowLifetime.signal
 					]))) {
-						if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+						await withRegistryRead(scope, route.primaryRoot, "files", async () => {
+							if (!scope.multiRootScope.scopeOf(route.primaryRoot).includes(route.workspaceRoot)) throw await outside(path);
+						});
 						yield frame;
 					}
 				} finally {
 					unsubscribe();
 				}
 			});
+			const admissionRestores = [];
+			{
+				const methods = service;
+				for (const key of [
+					"list",
+					"stat",
+					"read",
+					"readBytes",
+					"readAll",
+					"readRelated"
+				]) {
+					if (typeof methods[key] !== "function") continue;
+					admissionRestores.push(wrapMethod(methods, key, (original) => async function(...args) {
+						const request = args[0];
+						return withRegistryRead(scope, request.workspaceRoot, "files", () => original.apply(this, args));
+					}));
+				}
+			}
 			return () => {
+				for (const restore of admissionRestores.reverse()) restore();
 				rowLifetime.abort(/* @__PURE__ */ new Error("multi-root workspace-files routing unloaded"));
 				restoreList();
 				restoreStat();
@@ -134,6 +172,16 @@ function apply(ctx) {
 * root, genuinely unrelated paths) keeps upstream's default read access.
 */
 async function routeRead(scope, request, path, signal) {
+	if (scope.get("multiRootRegistry")?.shared && scope.multiRootScope.resolve({
+		workspaceRoot: request.workspaceRoot,
+		mode: "read-only"
+	}).authority === "unavailable") {
+		const route = await routeWorkspacePath(scope, request.workspaceRoot, path, signal);
+		return route !== void 0 && route.workspaceRoot === route.primaryRoot ? {
+			request,
+			path: route.absolutePath
+		} : "deny";
+	}
 	if (scope.multiRootScope.scopeOf(request.workspaceRoot).length === 0 && registeredRoots(scope, request.workspaceRoot).length === 0) return {
 		request,
 		path
@@ -187,12 +235,20 @@ function underWithheldRoot(scope, primaryRoot, path) {
 * file, so the granted base must not reach back into a dead grant.
 */
 async function relatedTailWithheld(scope, primaryRoot, base, tail, signal) {
-	if (registeredRoots(scope, primaryRoot).length === 0) return void 0;
+	const unknown = scope.get("multiRootRegistry")?.shared && scope.multiRootScope.resolve({
+		workspaceRoot: primaryRoot,
+		mode: "read-only"
+	}).authority === "unavailable";
+	if (registeredRoots(scope, primaryRoot).length === 0 && !unknown) return void 0;
 	const targetBase = await scope.fs.resolve(base.path, {
 		cwd: base.request.workspaceRoot,
 		signal
 	});
 	const target = resolveRelatedWorkspacePath(scope.fs.processPath(targetBase), tail);
+	if (unknown && await routeRead(scope, {
+		...base.request,
+		workspaceRoot: primaryRoot
+	}, target, signal) === "deny") return target;
 	return underWithheldRoot(scope, primaryRoot, target) ? target : void 0;
 }
 async function outside(path) {