@dsh-electron/dsh-plugin-multi-root-workspace 0.1.14 → 0.1.16

package/lib/types/client/files-tree/navigator.d.ts

@@ -0,0 +1,98 @@
+/**
+ * The document-preview navigator's additional-root retarget.
+ *
+ * Upstream's `sidebar.files.navigator` Factory (`ui-sidebar-files`, added at
+ * `0.2.2-alpha.3`) is the Folder-toggle tree the document preview draws
+ * beside its body. Its root is hard-wired to the session's `cwd` — the
+ * previewed file's absolute path is located against that root, so a file
+ * that lives under an additional root lands outside every tree it can draw:
+ * the navigator opens on the primary root, unexpanded and unmarked.
+ *
+ * The Factory itself cannot be retargeted — it is a registration upstream
+ * already owns, and its root is not an input. What CAN move is what its
+ * `aside[data-files-navigator]` draws: this occupant mounts in the preview
+ * header's `sidebar.right.tab.document.actions` seat (owner prop
+ * `absolutePath` — the previewed file's host path), watches the preview's
+ * `[data-textpreview-content]` row for the aside, and when the file sits
+ * under an available additional root it lends the aside's body area to the
+ * forked tree, the same takeover the Files page's root switcher performs.
+ * The aside itself — its width, its push/overlay/fill modes, its resize
+ * separator — stays native; only the tree inside is the fork's.
+ *
+ * Everything is keyed by the dockkit PANE id (`data-files-navigator` on the
+ * aside, `data-dockkit-pane` on the content section), never by the preview
+ * tab: upstream's navigator records live in `store.byPane`, and the pane
+ * survives what the tab does not — `replaceTab` mints a fresh tab id, so
+ * opening a file from the retargeted tree destroys the preview tab that
+ * opened it. The inject-side takeover map holds the pane-record memory
+ * (`expanded`/`scrollTop`/`revealed`) across that death; the component's
+ * own refs only ever carry the live copy.
+ *
+ * Three upstream behaviors are reproduced, not approximated:
+ *
+ * - **Hold lifetime.** The native navigator holds its pane tree only while
+ *   it is open (`hold(paneId, cwd)` gated on `state.open`): closing the
+ *   navigator closes the directory node — watches and listings end — while
+ *   the pane record keeps `expanded`/`scrollTop`/`revealed` for the next
+ *   open. Here the takeover `signal` is requested when the aside appears
+ *   and ended when it leaves. The saved snapshot is written into the
+ *   inject-side map continuously — the bucket's expansion set mirrors into
+ *   it, the forked body reports its live scroll offset, and a settled
+ *   reveal records its file — so no cleanup ordering ever decides what is
+ *   remembered. A dockkit pane has no stable element (a non-empty pane's
+ *   id rides on its selected tab's host, which `replaceTab` swaps out), so
+ *   the owner's death is checked by query: the pane lives while some
+ *   connected element still carries its id, and the watch that drops the
+ *   memory outlives every `end` because the body's cleanup always wins
+ *   the unmount race.
+ * - **Reveal.** The native navigator seeds `pane.revealing` with the drawn
+ *   file's address — unless `pane.revealed` already names it — and steps
+ *   the walk open (ancestors expanded one listing at a time, then the
+ *   file's row marked current and scrolled into view). The forked tree's
+ *   `reveal` prop drives the same sequence against the additional root,
+ *   with the saved `revealed` suppressing a repeat of a completed walk, so
+ *   collapsing a directory and reopening the navigator keeps the reader's
+ *   collapse exactly as upstream's pane record does.
+ * - **Replace-tab open.** The native navigator's `onOpen` is
+ *   `tab.actions.openResource(address, { replaceTab: true })` — the opened
+ *   file takes the preview's own tab. The forked tree's opens route through
+ *   `openFileIn`, which spells the same intent to `openResourceIn` as
+ *   `{ replaceTab: tabId }` against the preview's dockkit tab id.
+ *
+ * Every step degrades silently: no `[data-textpreview-url]` ancestor, no
+ * dockkit pane id, no `panel`, an address that is not a session file of
+ * THIS session, a file outside every available additional root (the
+ * primary root's own files included), or a fork that cannot render — each
+ * leaves the native navigator completely untouched. Where the upstream
+ * hooks do not exist (a runtime without this navigator), the marker span
+ * is the only trace the occupant leaves, and it draws nothing.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/files-tree/navigator
+ */
+import { type ReactNode } from 'react';
+import type { NativeTreeRenderer } from '../../compat/files-tree.ts';
+import type { PanelClient } from '../panel-client.ts';
+import { type FilesTreeSurface } from './adapter.tsx';
+/** What the registered document-actions occupant needs beyond the slot owner. */
+export interface NavigatorRetargetProps {
+    /** The previewed file's absolute host path — the slot owner's `absolutePath`. */
+    readonly absolutePath: string;
+    /** This preview's session — the composed session share; absent without one. */
+    readonly sessionId: string | undefined;
+    /** The channel client; absent when this composition has no host Connection. */
+    readonly panel: PanelClient | undefined;
+    /**
+     * The forked tree's shared props; the registration gates on it, so the
+     * occupant only renders where the fork can — the native navigator keeping
+     * its tree is the same behavior an upstream Files page without the fork
+     * would produce.
+     */
+    readonly filesTree: FilesTreeSurface;
+    readonly nativeTree?: NativeTreeRenderer | undefined;
+}
+/**
+ * The marker that lives in the preview header and, while the file it names
+ * sits under an additional root, lends the navigator aside to the forked
+ * tree. It draws nothing of its own.
+ */
+export declare function NavigatorRetarget(props: NavigatorRetargetProps): ReactNode;

package/lib/types/client/index.d.ts

@@ -25,6 +25,13 @@ declare module '@deepseek-ai/dsh-client-ui-slots' {
                 readonly absolutePath: string;
             };
         };
+        'sidebar.right.tab.document.actions': {
+            kind: 'list';
+            scope: 'session';
+            owner: {
+                readonly absolutePath: string;
+            };
+        };
     }
 }
 /** The footer-action cell this plugin owns. */

package/lib/types/client/locales.d.ts

@@ -21,6 +21,16 @@ export declare const zh: {
     'autoReview.loadFailed': string;
     'autoReview.restartRequired': string;
     'autoReview.settingsFailed': string;
+    'ops.compatibilityEnable': string;
+    'ops.experimental': string;
+    'ops.compatibilityHint': string;
+    'ops.settingsFailed': string;
+    'ops.confirmTitle': string;
+    'ops.confirmDescription': string;
+    'ops.confirmAcknowledge': string;
+    'ops.confirmCancel': string;
+    'ops.confirmClose': string;
+    'ops.confirmEnable': string;
     'skills.userOnly': string;
     'panel.skills': string;
     'panel.skillsEnabled': string;
@@ -65,6 +75,7 @@ export declare const zh: {
     'panel.copied': string;
     'panel.reveal': string;
     'panel.reRegister': string;
+    'panel.redirectedHint': string;
     'panel.moveUp': string;
     'panel.moveDown': string;
     'access.inherit': string;
@@ -100,7 +111,11 @@ export declare const zh: {
     'error.unavailable': string;
     'error.copy-failed': string;
     'error.session-not-found': string;
+    'error.session-not-live': string;
     'error.unsupported-path': string;
+    'error.protected-path': string;
+    'error.protected-boundary-unknown': string;
+    'error.revive-target-changed': string;
     'error.fallback': string;
 };
 /** The canonical key set. */
@@ -116,6 +131,16 @@ export declare const en: {
     'autoReview.loadFailed': string;
     'autoReview.restartRequired': string;
     'autoReview.settingsFailed': string;
+    'ops.compatibilityEnable': string;
+    'ops.experimental': string;
+    'ops.compatibilityHint': string;
+    'ops.settingsFailed': string;
+    'ops.confirmTitle': string;
+    'ops.confirmDescription': string;
+    'ops.confirmAcknowledge': string;
+    'ops.confirmCancel': string;
+    'ops.confirmClose': string;
+    'ops.confirmEnable': string;
     'skills.userOnly': string;
     'panel.skills': string;
     'panel.skillsEnabled': string;
@@ -160,6 +185,7 @@ export declare const en: {
     'panel.copied': string;
     'panel.reveal': string;
     'panel.reRegister': string;
+    'panel.redirectedHint': string;
     'panel.moveUp': string;
     'panel.moveDown': string;
     'access.inherit': string;
@@ -195,7 +221,11 @@ export declare const en: {
     'error.unavailable': string;
     'error.copy-failed': string;
     'error.session-not-found': string;
+    'error.session-not-live': string;
     'error.unsupported-path': string;
+    'error.protected-path': string;
+    'error.protected-boundary-unknown': string;
+    'error.revive-target-changed': string;
     'error.fallback': string;
 };
 declare module '@deepseek-ai/dsh-client-ui-slots' {

package/lib/types/client/ops-settings.d.ts

@@ -0,0 +1,6 @@
+import type { SkillsForm } from '../compat/skills-client.ts';
+import type { Translate } from './WorkspaceFoldersAction.tsx';
+export declare function OpsCompatibilitySettingsCard({ form, t }: {
+    form: SkillsForm;
+    t: Translate;
+}): import("react").JSX.Element | null;

package/lib/types/client/skills-settings.d.ts

@@ -10,12 +10,13 @@ export declare function SkillsSettingsCard({ form, t }: CardProps): import("reac
 /**
  * The bundle's one `plugins.bundle.config` cell: every plugin-level switch the
  * package offers, in display order. Each row owns its own form and write path —
- * Skills through its settings namespace, Auto Review through the Plugin
+ * Skills and OPS through their settings namespaces, Auto Review through the Plugin
  * Manager's Loader-row enablement — so one cell never serializes their state.
  */
-export declare function BundleSettingsCard({ form, autoReviewForm, t }: {
+export declare function BundleSettingsCard({ form, autoReviewForm, opsForm, t }: {
     form?: SkillsForm | undefined;
     autoReviewForm?: AutoReviewForm | undefined;
+    opsForm?: SkillsForm | undefined;
     t: Translate;
 }): import("react").JSX.Element;
 export declare function installSkillsSettingsCard(ctx: Context, t: Translate): void;

package/lib/types/client/styles.d.ts

@@ -11,4 +11,4 @@
  * @module @dsh-electron/dsh-plugin-multi-root-workspace/client/styles
  */
 /** The stylesheet text; every class is prefixed `mrfw-` to stay collision-free. */
-export declare const STYLES = "\n/* Sidebar footer row, mirroring the host ui-settings-general trigger: the row\n * wrapper overhangs each side by 2px (width calc(100% + 4px) against the\n * shell's 12px inline padding) so the icon's ink line lands at 18px from the\n * column edge \u2014 exactly where the Settings gear below sits. */\n.mrfw-triggerRow {\n  flex: none;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: calc(100% + 4px);\n  margin: 4px -2px;\n}\n\n.mrfw-triggerRow.mrfw-railRow {\n  width: 36px;\n  margin: 8px 0 10px;\n}\n\n.mrfw-trigger {\n  box-sizing: border-box;\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: auto;\n  height: 42px;\n  margin: 0;\n  padding: 0 10px 0 8px;\n  border: none;\n  border-radius: 12px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  text-align: left;\n  cursor: pointer;\n  overflow: hidden;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-trigger:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-triggerIcon {\n  flex: none;\n  display: inline-flex;\n}\n\n.mrfw-triggerLabel {\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n.mrfw-triggerRail {\n  flex: none;\n  width: 36px;\n  height: 36px;\n  margin: 0;\n  padding: 0;\n  gap: 0;\n  border-radius: 50%;\n  justify-content: center;\n}\n\n/* Icon-only launcher inside the upstream Files tab header. Upstream's\n   FilesBody renders .header as one flat flex row \u2014 PathLabel, then the\n   reload button, then the files.actions slot occupants \u2014 and each of those\n   children carries a stable data-files-* attribute on the flex item itself\n   (data-files-root on the pane, data-files-path, data-files-reload).\n   A registration order sorts only INSIDE the actions slot and can never\n   overtake the reload button, so the launcher is moved with the flex order\n   property instead: this wrapper is the slot's root element and therefore a\n   direct flex item of .header, and order: -1 puts it ahead of every\n   order-0 sibling while the :has() rule below keeps the path first. */\n.mrfw-fileLauncher {\n  order: -1;\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* Pin the upstream path label ahead of the launcher \u2014 but only while this\n   plugin is in the row: the :has() guard keeps a rule that names an\n   upstream element inert whenever the launcher is absent. The\n   :not([data-files-entry]) qualifier is load-bearing, not decorative:\n   upstream puts data-files-path on EVERY tree row too (the row's own\n   absolute path), so an unqualified selector would match the whole tree,\n   not just the header's PathLabel. Both selectors depend on upstream's DOM\n   shape, which is not part of the slot contract; if it changes, the rules\n   simply stop matching and the launcher falls back to its in-slot position \u2014\n   a silent degradation, never a broken header. */\n[data-files-root]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) {\n  order: -2;\n}\n\n/* The root switcher is the launcher's grown-up form on runtimes whose\n   files.actions owner carries absolutePath. It takes the path label's flex\n   position and stretch: order: -1 ahead of every order-0 sibling, and a\n   growing min-width:0 item so both the trigger label and the PathLabel\n   inside it can ellipsize instead of pushing the header controls out. */\n.mrfw-rootSwitcher {\n  order: -1;\n  flex: 1 1 auto;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  /* Same 4px the upstream .header puts between its own flex items, so the\n     takeover controls (reload, open-in-app fork) sit at the same offsets the\n     hidden native ones did \u2014 no drift between primary and additional state. */\n  gap: 4px;\n}\n\n/* While the switcher exists it hides the upstream path label \u2014 the\n   :has() guard again keeps the upstream-naming rule inert unless this\n   plugin is actually in the row. The switcher draws its own PathLabel of\n   the selected root next to the trigger (className mrfw-switcherPath, no\n   data-files-* attributes), so the header keeps a path in the same spot.\n   :not([data-files-entry]) is what confines this rule to the header:\n   every tree row carries data-files-path with its own path as the value,\n   and only the PathLabel carries it bare. Without the qualifier this\n   display:none would blank the entire native tree. */\n[data-files-root]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native tree body and its\n   reload hide: the reload refreshes the very tree that is no longer\n   visible, and the plugin's forked tree is portaled in as the body's sibling.\n   The header still offers a reload \u2014 the switcher's own .mrfw-switcherReload\n   calls the forked face's refresh. The native tree keeps watching in the\n   background, so switching back to the primary root restores it instantly. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-body],\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] {\n  display: none;\n}\n\n/* Newer Files pages place the navigator beside the header instead of\n   wrapping both in data-files-root. Target the page without hiding the\n   portaled replacement or any of its rows. */\n[data-files-page]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) { order: -2; }\n[data-files-page]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) { display: none; }\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-content],\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] { display: none; }\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) { display: none; }\n\n/* While the switcher names an additional root, the native open-in-app split\n   button hides too: its slot props carry the pane's primary root, so it\n   would always open the primary root no matter what the switcher selected.\n   The header gets the plugin's own fork of that same control instead (the\n   open-in-app directory), wired to the selected root.\n\n   The slot's render site is wrapped in the renderer's own anchor \u2014\n   <div data-slot=\"sidebar.right.tab.files.actions\" style=\"display:contents\">\n   \u2014 so the header's flex items inside it are the occupants themselves, and\n   the native item is the ui-primitives Menu anchor span wrapping the marked\n   .split. The first selector hides that occupant item through the data-slot\n   anchor: hiding only the inner control would leave the empty anchor span\n   as a zero-width flex item whose header gap pushes the fork 4px left of\n   the native position. The wrapper itself can never be the target \u2014 its\n   inline display:contents beats any stylesheet rule, and hiding it would\n   take the switcher with it. The second selector is the fallback for an\n   upstream that moves the attribute off the item. The fork survives both:\n   the only data-open-target inside .mrfw-rootSwitcher is its own\n   .mrfw-openSplit, which :not() excludes. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) {\n  display: none;\n}\n\n/* The trigger borrows the path label's look: quiet text with a folder\n   glyph, the hover of the neighboring header buttons, and the overflow\n   behavior PathLabel itself uses in a narrow header. It may shrink but\n   never grows \u2014 the PathLabel after it owns the free header space. */\n.mrfw-rootSwitchBtn {\n  flex: 0 1 auto;\n  min-width: 0;\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 28px;\n  margin: 0;\n  padding: 0 4px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: inherit;\n  line-height: 20px;\n  text-align: left;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-rootSwitchBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-rootSwitchBtn .mrfw-triggerIcon {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-rootSwitchLabel {\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootSwitchChevron {\n  margin-left: auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The selected root's full path sits between the trigger and the reload \u2014\n   the very PathLabel upstream draws there, so it brings its own grow,\n   left-clip and hover-title behavior; only the gutters are ours. The right\n   margin plus the container gap reproduces upstream's .path margin-right\n   12px + header gap 4px; the left gutter comes from the same container gap. */\n.mrfw-switcherPath {\n  margin: 0 12px 0 0;\n}\n\n/* The takeover's own reload, standing exactly where the hidden native one\n   did: the upstream .tool recipe verbatim (28px hit area, 15px glyph,\n   secondary voice, hover fills). It calls the forked face's refresh \u2014 an\n   in-place re-list, not a remount. */\n.mrfw-switcherReload {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: var(--dsw-radius-sm);\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  line-height: 1;\n  cursor: pointer;\n}\n\n.mrfw-switcherReload:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* \u2500\u2500 files-tree fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's FilesBody.module.css (ui-sidebar-files @\n   0.2.2-alpha.2) with local names mapped to mrfw-ft* so the rules cannot\n   collide with host DOM \u2014 and so the fork's own body (which must NOT carry\n   data-files-body) stays visible while the rules above hide the native one.\n   The header-only rules (root/header/path/tool/status/statusLine/titleIcon)\n   belong to the upstream shell this fork drops and are not mapped. Fork sync\n   re-diffs the upstream file and re-applies the rename \u2014 see\n   src/client/files-tree/FORK.md. */\n\n/* The pane's own .root already supplies the flex column, color, and font;\n   the fork's body takes the same stretch item the hidden native body held,\n   including the workspace list's 2px scrollbar offset and stable gutter. */\n.mrfw-ftBody {\n  flex: 1 1 auto;\n  min-height: 0;\n  margin-right: 2px;\n  padding: 8px 0 8px 8px;\n  overflow: auto;\n  scrollbar-gutter: stable;\n}\n\n.mrfw-ftBody::-webkit-scrollbar-track {\n  margin: 2px;\n}\n\n.mrfw-ftLevel {\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.mrfw-ftLevel .mrfw-ftLevel {\n  padding-left: 18px;\n}\n\n.mrfw-ftItem {\n  margin: 0;\n  padding: 0;\n}\n\n/* Rows abut, so the hover fill is the whole row; the tree's air is this\n   inset, not a gap between rows. */\n.mrfw-ftRow {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 10px;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  background: transparent;\n  border: 0;\n  border-radius: var(--dsw-radius-md);\n  cursor: pointer;\n}\n\n@media (hover: hover) {\n  .mrfw-ftRow:hover {\n    background: var(--dsw-alias-interactive-bg-hover);\n  }\n}\n\n/* The folder glyph rides the tertiary ink, as the workspace tree's does. */\n.mrfw-ftIcon {\n  flex: 0 0 auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The type's coloured sheet at the folder glyph's 16px; its colour is its own. */\n.mrfw-ftFileIcon {\n  flex: 0 0 auto;\n}\n\n.mrfw-ftName {\n  min-width: 0;\n  overflow: hidden;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n}\n\n/* Neither a file nor a directory: shown so the directory is reported whole,\n   greyed so nobody tries to open it. */\n.mrfw-ftOther {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n\n@media (hover: hover) {\n  .mrfw-ftOther:hover {\n    background: transparent;\n  }\n}\n\n.mrfw-ftNote {\n  margin: 0;\n  padding: 3px 10px;\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 12px;\n}\n\n/* \u2500\u2500 open-in-app fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's OpenTargetButton.module.css\n   (dsh-client-ui-open-in-app @ 0.2.1-alpha.2) with local names mapped to\n   mrfw-open* so the rules cannot collide with host DOM. Fork sync re-diffs\n   the upstream file and re-applies the rename \u2014 see\n   src/client/open-in-app/FORK.md. */\n\n/* Sized to sit in the document header's 24px control row beside its round\n   icon buttons: a hairline pill with a 12px label and a narrow chevron half. */\n.mrfw-openMenuAnchor {\n  display: inline-flex;\n  flex: none;\n  align-self: center;\n}\n\n.mrfw-openSplit {\n  display: inline-flex;\n  align-items: stretch;\n  box-sizing: border-box;\n  height: 24px;\n  overflow: hidden;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: var(--dsw-radius-sm);\n  font-family: var(--dsw-font-family);\n}\n\n.mrfw-openMain,\n.mrfw-openChevron {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  border: 0;\n  background: none;\n  color: var(--dsw-alias-label-primary);\n  font-size: 11px;\n  line-height: 16px;\n  white-space: nowrap;\n  cursor: pointer;\n}\n\n.mrfw-openMain {\n  gap: 4px;\n  padding: 3px 5px;\n}\n\n.mrfw-openChevron {\n  padding: 3px 4px 3px 3px;\n  border-left: 0.5px solid var(--dsw-alias-border-l4);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-openMain:hover:not(:disabled),\n.mrfw-openMain:focus-visible,\n.mrfw-openChevron:hover:not(:disabled),\n.mrfw-openChevron:focus-visible {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* Pending disables clicks without a restyle; only hover feedback pauses. */\n.mrfw-openMain:disabled,\n.mrfw-openChevron:disabled {\n  cursor: default;\n}\n\n.mrfw-openAppIcon {\n  object-fit: contain;\n}\n\n/* The unavailable preview emphasizes the same actions with a labeled button. */\n.mrfw-openSplit[data-size='large'] {\n  height: 36px;\n  border-radius: var(--dsw-radius-md);\n  border-color: var(--dsw-alias-border-l2);\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openMain {\n  gap: 6px;\n  padding: 6px 14px;\n  font-size: 14px;\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openChevron {\n  padding: 6px 10px;\n}\n\n.mrfw-openSkeleton { display: inline-block; flex: none; border-radius: var(--dsw-radius-xs); background: var(--dsw-alias-interactive-bg-hover); }\n\n.mrfw-overlay {\n  position: fixed;\n  inset: 0;\n  z-index: 1000;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n}\n\n.mrfw-mask {\n  position: absolute;\n  inset: 0;\n  background: var(--dsw-alias-bg-mask-1);\n  backdrop-filter: var(--dsw-mask-blur);\n}\n\n.mrfw-dialog {\n  position: relative;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  width: min(640px, 100%);\n  max-height: 100%;\n  overflow: hidden;\n  border: none;\n  border-radius: 24px;\n  background: var(--dsw-alias-bg-layer-2);\n  box-shadow: var(--dsw-elevation-prominent);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  outline: none;\n}\n\n.mrfw-header {\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 22px 14px 12px 24px;\n}\n\n.mrfw-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-close {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  cursor: pointer;\n  color: var(--dsw-alias-label-secondary);\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-close:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-body {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  overflow-y: auto;\n  padding: 0 24px 24px;\n}\n\n.mrfw-alert {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.mrfw-section {\n  display: flex;\n  flex-direction: column;\n}\n\n.mrfw-section + .mrfw-section {\n  margin-top: 8px;\n}\n\n.mrfw-sectionTitleRow {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  padding: 8px 0 4px;\n}\n\n.mrfw-sectionTitle {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-sectionNote {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-row {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n.mrfw-rowBare {\n  border-bottom: none;\n}\n\n/* A root entry's two lines: the display name on top, the absolute path under\n   it in the tertiary voice (the workspace rows recipe of the host sidebar). */\n/* Match upstream General Settings' DeveloperToolsRow layout. */\n.mrfw-skillsSettings {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 24px;\n  padding: 16px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n.mrfw-skillsSettingsText { min-width: 0; }\n.mrfw-settingsTitleRow {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.mrfw-skillsSettingsTitle { font-size: 14px; line-height: 20px; }\n.mrfw-skillsSettingsDescription {\n  margin-top: 4px;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  line-height: 18px;\n}\n.mrfw-rootText {\n  display: flex;\n  flex: 1 1 240px;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n/* Keep status tags and permission glyphs visible beside the alias, wrapping\n   onto another line when the dialog is narrow. */\n.mrfw-rootName {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n  min-width: 0;\n  font-size: 14px;\n  line-height: 20px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-rootNameText {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootPath {\n  font-family: var(--ds-font-family-code);\n  font-size: 12px;\n  line-height: 18px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The path doubles as the copy control: an unstyled button that keeps the\n   text recipe and makes the whole string clickable \u2014 the whole region, not\n   just the icon, copies on click. */\n.mrfw-pathCopy {\n  display: block;\n  width: 100%;\n  padding: 0;\n  border: 0;\n  background: transparent;\n  text-align: left;\n  cursor: pointer;\n}\n\n/* The trailing icon stays in flow but invisible until the path is hovered\n   or focused: appearing never re-wraps the text, and the icon inherits the\n   path's own tertiary ink. */\n.mrfw-pathCopyIcon {\n  display: inline-flex;\n  margin-left: 4px;\n  vertical-align: -2px;\n  opacity: 0;\n  transition: opacity var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-pathCopy:hover .mrfw-pathCopyIcon,\n.mrfw-pathCopy:focus-visible .mrfw-pathCopyIcon {\n  opacity: 1;\n}\n\n.mrfw-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-stateWarn {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.mrfw-btn {\n  display: inline-flex;\n  flex: none;\n  align-items: center;\n  justify-content: center;\n  gap: 4px;\n  height: 28px;\n  padding: 0 10px;\n  border: none;\n  border-radius: 14px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-btn[aria-busy='true'] {\n  cursor: wait;\n}\n\n.mrfw-btn:disabled {\n  cursor: not-allowed;\n  opacity: 0.4;\n}\n\n.mrfw-btnGhost:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnGhost:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n/* The solid destructive action of the capsule family: the upgrade confirm's\n   red button. state-error-primary is the error ink upstream also uses as a\n   fill (StateDot); the hover mixes in the host's primary label token to\n   follow its theme and contrast choices. Neither color is a guessed token:\n   an undefined var() would fall back\n   to transparent and white-out the whole button. */\n.mrfw-btnDanger {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnDanger:hover:not(:disabled) {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 85%, var(--dsw-alias-label-primary));\n}\n\n.mrfw-btnOutline {\n  border: 0.5px solid var(--dsw-alias-border-l3);\n  background: transparent;\n}\n\n.mrfw-btnOutline:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnPrimary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnPrimary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n\n/* One icon-only action: a square of the capsule family, meaning in title.\n   Declared after the .mrfw-btn family so its padding wins the cascade tie:\n   the capsule's 0 10px padding would otherwise squeeze the icon glyph. */\n.mrfw-iconBtn {\n  width: 28px;\n  padding: 0;\n  border-radius: 8px;\n}\n\n.mrfw-input {\n  flex: 1 1 220px;\n  min-width: 0;\n  height: 32px;\n  padding: 0 8px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  outline: none;\n  transition: border-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.mrfw-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.mrfw-inputInline {\n  flex: 1 1 auto;\n}\n\n.mrfw-accessSelect {\n  flex: 0 0 auto;\n}\n\n/* The access dropdown's capsule trigger: the Menu anchor wrapper is the flex\n   item, the button inside keeps the control row's 32px capsule recipe. */\n.mrfw-accessTrigger {\n  padding: 0 12px;\n}\n\n.mrfw-cwdTag {\n  flex: none;\n  padding: 0 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 11px;\n  line-height: 18px;\n}\n\n.mrfw-accessBadge {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n}\n\n.mrfw-accessBadge {\n  flex: none;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-aliasEditor {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n  flex-basis: 100%;\n}\n\n.mrfw-actions {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  margin-top: 16px;\n  padding-top: 16px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n/* One control row, one height: the capsule buttons match the 32px input. */\n.mrfw-actions .mrfw-btn {\n  height: 32px;\n  border-radius: 16px;\n}\n\n.mrfw-actions .mrfw-iconBtn {\n  width: 32px;\n}\n";
+export declare const STYLES = "\n/* Sidebar footer row, mirroring the host ui-settings-general trigger: the row\n * wrapper overhangs each side by 2px (width calc(100% + 4px) against the\n * shell's 12px inline padding) so the icon's ink line lands at 18px from the\n * column edge \u2014 exactly where the Settings gear below sits. */\n.mrfw-triggerRow {\n  flex: none;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: calc(100% + 4px);\n  margin: 4px -2px;\n}\n\n.mrfw-triggerRow.mrfw-railRow {\n  width: 36px;\n  margin: 8px 0 10px;\n}\n\n.mrfw-trigger {\n  box-sizing: border-box;\n  flex: 1;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  gap: 8px;\n  width: auto;\n  height: 42px;\n  margin: 0;\n  padding: 0 10px 0 8px;\n  border: none;\n  border-radius: 12px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  text-align: left;\n  cursor: pointer;\n  overflow: hidden;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-trigger:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-triggerIcon {\n  flex: none;\n  display: inline-flex;\n}\n\n.mrfw-triggerLabel {\n  overflow: hidden;\n  white-space: nowrap;\n}\n\n.mrfw-triggerRail {\n  flex: none;\n  width: 36px;\n  height: 36px;\n  margin: 0;\n  padding: 0;\n  gap: 0;\n  border-radius: 50%;\n  justify-content: center;\n}\n\n/* Icon-only launcher inside the upstream Files tab header. Upstream's\n   FilesBody renders .header as one flat flex row \u2014 PathLabel, then the\n   reload button, then the files.actions slot occupants \u2014 and each of those\n   children carries a stable data-files-* attribute on the flex item itself\n   (data-files-root on the pane, data-files-path, data-files-reload).\n   A registration order sorts only INSIDE the actions slot and can never\n   overtake the reload button, so the launcher is moved with the flex order\n   property instead: this wrapper is the slot's root element and therefore a\n   direct flex item of .header, and order: -1 puts it ahead of every\n   order-0 sibling while the :has() rule below keeps the path first. */\n.mrfw-fileLauncher {\n  order: -1;\n  flex: none;\n  display: flex;\n  align-items: center;\n}\n\n/* Pin the upstream path label ahead of the launcher \u2014 but only while this\n   plugin is in the row: the :has() guard keeps a rule that names an\n   upstream element inert whenever the launcher is absent. The\n   :not([data-files-entry]) qualifier is load-bearing, not decorative:\n   upstream puts data-files-path on EVERY tree row too (the row's own\n   absolute path), so an unqualified selector would match the whole tree,\n   not just the header's PathLabel. Both selectors depend on upstream's DOM\n   shape, which is not part of the slot contract; if it changes, the rules\n   simply stop matching and the launcher falls back to its in-slot position \u2014\n   a silent degradation, never a broken header. */\n[data-files-root]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) {\n  order: -2;\n}\n\n/* The root switcher is the launcher's grown-up form on runtimes whose\n   files.actions owner carries absolutePath. It takes the path label's flex\n   position and stretch: order: -1 ahead of every order-0 sibling, and a\n   growing min-width:0 item so both the trigger label and the PathLabel\n   inside it can ellipsize instead of pushing the header controls out. */\n.mrfw-rootSwitcher {\n  order: -1;\n  flex: 1 1 auto;\n  min-width: 0;\n  display: flex;\n  align-items: center;\n  /* Same 4px the upstream .header puts between its own flex items, so the\n     takeover controls (reload, open-in-app fork) sit at the same offsets the\n     hidden native ones did \u2014 no drift between primary and additional state. */\n  gap: 4px;\n}\n\n/* While the switcher exists it hides the upstream path label \u2014 the\n   :has() guard again keeps the upstream-naming rule inert unless this\n   plugin is actually in the row. The switcher draws its own PathLabel of\n   the selected root next to the trigger (className mrfw-switcherPath, no\n   data-files-* attributes), so the header keeps a path in the same spot.\n   :not([data-files-entry]) is what confines this rule to the header:\n   every tree row carries data-files-path with its own path as the value,\n   and only the PathLabel carries it bare. Without the qualifier this\n   display:none would blank the entire native tree. */\n[data-files-root]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) {\n  display: none;\n}\n\n/* While the switcher names an additional root, the native tree body and its\n   reload hide: the reload refreshes the very tree that is no longer\n   visible, and the plugin's forked tree is portaled in as the body's sibling.\n   The header still offers a reload \u2014 the switcher's own .mrfw-switcherReload\n   calls the forked face's refresh. The native tree keeps watching in the\n   background, so switching back to the primary root restores it instantly. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-body],\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] {\n  display: none;\n}\n\n/* Newer Files pages place the navigator beside the header instead of\n   wrapping both in data-files-root. Target the page without hiding the\n   portaled replacement or any of its rows. */\n[data-files-page]:has(.mrfw-fileLauncher) [data-files-path]:not([data-files-entry]) { order: -2; }\n[data-files-page]:has(.mrfw-rootSwitcher) [data-files-path]:not([data-files-entry]) { display: none; }\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-content],\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-files-reload] { display: none; }\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-page]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) { display: none; }\n\n/* While the switcher names an additional root, the native open-in-app split\n   button hides too: its slot props carry the pane's primary root, so it\n   would always open the primary root no matter what the switcher selected.\n   The header gets the plugin's own fork of that same control instead (the\n   open-in-app directory), wired to the selected root.\n\n   The slot's render site is wrapped in the renderer's own anchor \u2014\n   <div data-slot=\"sidebar.right.tab.files.actions\" style=\"display:contents\">\n   \u2014 so the header's flex items inside it are the occupants themselves, and\n   the native item is the ui-primitives Menu anchor span wrapping the marked\n   .split. The first selector hides that occupant item through the data-slot\n   anchor: hiding only the inner control would leave the empty anchor span\n   as a zero-width flex item whose header gap pushes the fork 4px left of\n   the native position. The wrapper itself can never be the target \u2014 its\n   inline display:contents beats any stylesheet rule, and hiding it would\n   take the switcher with it. The second selector is the fallback for an\n   upstream that moves the attribute off the item. The fork survives both:\n   the only data-open-target inside .mrfw-rootSwitcher is its own\n   .mrfw-openSplit, which :not() excludes. */\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-slot=\"sidebar.right.tab.files.actions\"] > *:has([data-open-target=\"directory\"]:not(.mrfw-openSplit)),\n[data-files-root]:has(.mrfw-rootSwitcher[data-root-kind=\"additional\"]) [data-open-target=\"directory\"]:not(.mrfw-openSplit) {\n  display: none;\n}\n\n/* The trigger borrows the path label's look: quiet text with a folder\n   glyph, the hover of the neighboring header buttons, and the overflow\n   behavior PathLabel itself uses in a narrow header. It may shrink but\n   never grows \u2014 the PathLabel after it owns the free header space. */\n.mrfw-rootSwitchBtn {\n  flex: 0 1 auto;\n  min-width: 0;\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n  height: 28px;\n  margin: 0;\n  padding: 0 4px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: inherit;\n  line-height: 20px;\n  text-align: left;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-rootSwitchBtn:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-rootSwitchBtn .mrfw-triggerIcon {\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-rootSwitchLabel {\n  min-width: 0;\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootSwitchChevron {\n  margin-left: auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The selected root's full path sits between the trigger and the reload \u2014\n   the very PathLabel upstream draws there, so it brings its own grow,\n   left-clip and hover-title behavior; only the gutters are ours. The right\n   margin plus the container gap reproduces upstream's .path margin-right\n   12px + header gap 4px; the left gutter comes from the same container gap. */\n.mrfw-switcherPath {\n  margin: 0 12px 0 0;\n}\n\n/* The takeover's own reload, standing exactly where the hidden native one\n   did: the upstream .tool recipe verbatim (28px hit area, 15px glyph,\n   secondary voice, hover fills). It calls the forked face's refresh \u2014 an\n   in-place re-list, not a remount. */\n.mrfw-switcherReload {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  padding: 6px;\n  border: none;\n  border-radius: var(--dsw-radius-sm);\n  background: transparent;\n  color: var(--dsw-alias-label-secondary);\n  line-height: 1;\n  cursor: pointer;\n}\n\n.mrfw-switcherReload:hover {\n  color: var(--dsw-alias-label-primary);\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* The document preview's navigator aside, while the retarget holds it: the\n   native body hides (it lists the session's primary root regardless of the\n   previewed file), and the forked tree \u2014 portaled in as the aside's sibling\n   child \u2014 takes the same stretch item in the aside's column flex, right\n   down to the body's own padding and 2px scrollbar offset. The aside's\n   chrome is untouched: width, push/overlay/fill modes, and the resize\n   separator all stay native. The marker attribute is set only while a\n   takeover actually holds the aside, so a navigator we never matched \u2014 or\n   one whose plugin sheet is gone \u2014 renders exactly as upstream drew it. */\naside[data-mrfw-navigator] > [data-files-body] {\n  display: none;\n}\n\n/* The reveal's current row, the fork's spelling of upstream's .current:\n   the interactive-active fill, kept under hover exactly as the native\n   tree's current row keeps it. */\n.mrfw-ftRow[data-files-current],\n.mrfw-ftRow[data-files-current]:hover {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n/* \u2500\u2500 files-tree fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's FilesBody.module.css (ui-sidebar-files @\n   0.2.2-alpha.2) with local names mapped to mrfw-ft* so the rules cannot\n   collide with host DOM \u2014 and so the fork's own body (which must NOT carry\n   data-files-body) stays visible while the rules above hide the native one.\n   The header-only rules (root/header/path/tool/status/statusLine/titleIcon)\n   belong to the upstream shell this fork drops and are not mapped. Fork sync\n   re-diffs the upstream file and re-applies the rename \u2014 see\n   src/client/files-tree/FORK.md. */\n\n/* The pane's own .root already supplies the flex column, color, and font;\n   the fork's body takes the same stretch item the hidden native body held,\n   including the workspace list's 2px scrollbar offset and stable gutter. */\n.mrfw-ftBody {\n  flex: 1 1 auto;\n  min-height: 0;\n  margin-right: 2px;\n  padding: 8px 0 8px 8px;\n  overflow: auto;\n  scrollbar-gutter: stable;\n}\n\n.mrfw-ftBody::-webkit-scrollbar-track {\n  margin: 2px;\n}\n\n.mrfw-ftLevel {\n  margin: 0;\n  padding: 0;\n  list-style: none;\n}\n\n.mrfw-ftLevel .mrfw-ftLevel {\n  padding-left: 18px;\n}\n\n.mrfw-ftItem {\n  margin: 0;\n  padding: 0;\n}\n\n/* Rows abut, so the hover fill is the whole row; the tree's air is this\n   inset, not a gap between rows. */\n.mrfw-ftRow {\n  display: flex;\n  gap: 6px;\n  align-items: center;\n  width: 100%;\n  min-width: 0;\n  padding: 5px 10px;\n  color: inherit;\n  font: inherit;\n  text-align: left;\n  background: transparent;\n  border: 0;\n  border-radius: var(--dsw-radius-md);\n  cursor: pointer;\n}\n\n@media (hover: hover) {\n  .mrfw-ftRow:hover {\n    background: var(--dsw-alias-interactive-bg-hover);\n  }\n}\n\n/* The folder glyph rides the tertiary ink, as the workspace tree's does. */\n.mrfw-ftIcon {\n  flex: 0 0 auto;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The type's coloured sheet at the folder glyph's 16px; its colour is its own. */\n.mrfw-ftFileIcon {\n  flex: 0 0 auto;\n}\n\n.mrfw-ftName {\n  min-width: 0;\n  overflow: hidden;\n  white-space: nowrap;\n  text-overflow: ellipsis;\n}\n\n/* Neither a file nor a directory: shown so the directory is reported whole,\n   greyed so nobody tries to open it. */\n.mrfw-ftOther {\n  color: var(--dsw-alias-label-tertiary);\n  cursor: default;\n}\n\n@media (hover: hover) {\n  .mrfw-ftOther:hover {\n    background: transparent;\n  }\n}\n\n.mrfw-ftNote {\n  margin: 0;\n  padding: 3px 10px;\n  color: var(--dsw-alias-label-tertiary);\n  font-size: 12px;\n}\n\n/* \u2500\u2500 open-in-app fork (verbatim rules, renamed classes) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n   Copied from upstream's OpenTargetButton.module.css\n   (dsh-client-ui-open-in-app @ 0.2.1-alpha.2) with local names mapped to\n   mrfw-open* so the rules cannot collide with host DOM. Fork sync re-diffs\n   the upstream file and re-applies the rename \u2014 see\n   src/client/open-in-app/FORK.md. */\n\n/* Sized to sit in the document header's 24px control row beside its round\n   icon buttons: a hairline pill with a 12px label and a narrow chevron half. */\n.mrfw-openMenuAnchor {\n  display: inline-flex;\n  flex: none;\n  align-self: center;\n}\n\n.mrfw-openSplit {\n  display: inline-flex;\n  align-items: stretch;\n  box-sizing: border-box;\n  height: 24px;\n  overflow: hidden;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: var(--dsw-radius-sm);\n  font-family: var(--dsw-font-family);\n}\n\n.mrfw-openMain,\n.mrfw-openChevron {\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  border: 0;\n  background: none;\n  color: var(--dsw-alias-label-primary);\n  font-size: 11px;\n  line-height: 16px;\n  white-space: nowrap;\n  cursor: pointer;\n}\n\n.mrfw-openMain {\n  gap: 4px;\n  padding: 3px 5px;\n}\n\n.mrfw-openChevron {\n  padding: 3px 4px 3px 3px;\n  border-left: 0.5px solid var(--dsw-alias-border-l4);\n  color: var(--dsw-alias-label-secondary);\n}\n\n.mrfw-openMain:hover:not(:disabled),\n.mrfw-openMain:focus-visible,\n.mrfw-openChevron:hover:not(:disabled),\n.mrfw-openChevron:focus-visible {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n/* Pending disables clicks without a restyle; only hover feedback pauses. */\n.mrfw-openMain:disabled,\n.mrfw-openChevron:disabled {\n  cursor: default;\n}\n\n.mrfw-openAppIcon {\n  object-fit: contain;\n}\n\n/* The unavailable preview emphasizes the same actions with a labeled button. */\n.mrfw-openSplit[data-size='large'] {\n  height: 36px;\n  border-radius: var(--dsw-radius-md);\n  border-color: var(--dsw-alias-border-l2);\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openMain {\n  gap: 6px;\n  padding: 6px 14px;\n  font-size: 14px;\n}\n\n.mrfw-openSplit[data-size='large'] .mrfw-openChevron {\n  padding: 6px 10px;\n}\n\n.mrfw-openSkeleton { display: inline-block; flex: none; border-radius: var(--dsw-radius-xs); background: var(--dsw-alias-interactive-bg-hover); }\n\n.mrfw-overlay {\n  position: fixed;\n  inset: 0;\n  z-index: 1000;\n  display: flex;\n  align-items: center;\n  justify-content: center;\n  padding: 24px;\n}\n\n.mrfw-mask {\n  position: absolute;\n  inset: 0;\n  background: var(--dsw-alias-bg-mask-1);\n  backdrop-filter: var(--dsw-mask-blur);\n}\n\n.mrfw-dialog {\n  position: relative;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  width: min(640px, 100%);\n  max-height: 100%;\n  overflow: hidden;\n  border: none;\n  border-radius: 24px;\n  background: var(--dsw-alias-bg-layer-2);\n  box-shadow: var(--dsw-elevation-prominent);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  outline: none;\n}\n\n.mrfw-header {\n  flex: none;\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 8px;\n  padding: 22px 14px 12px 24px;\n}\n\n.mrfw-title {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-close {\n  flex: none;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  width: 28px;\n  height: 28px;\n  border: none;\n  border-radius: 8px;\n  background: transparent;\n  cursor: pointer;\n  color: var(--dsw-alias-label-secondary);\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-close:hover {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-body {\n  display: flex;\n  flex-direction: column;\n  min-height: 0;\n  overflow-y: auto;\n  padding: 0 24px 24px;\n}\n\n.mrfw-alert {\n  margin: 0 0 8px;\n  font-size: 14px;\n  line-height: 22px;\n  color: var(--dsw-alias-state-error-primary);\n}\n\n.mrfw-section {\n  display: flex;\n  flex-direction: column;\n}\n\n.mrfw-section + .mrfw-section {\n  margin-top: 8px;\n}\n\n.mrfw-sectionTitleRow {\n  display: flex;\n  align-items: baseline;\n  gap: 8px;\n  padding: 8px 0 4px;\n}\n\n.mrfw-sectionTitle {\n  font-size: 14px;\n  line-height: 22px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-sectionNote {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-row {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  padding: 12px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n.mrfw-rowBare {\n  border-bottom: none;\n}\n\n/* A root entry's two lines: the display name on top, the absolute path under\n   it in the tertiary voice (the workspace rows recipe of the host sidebar). */\n/* Match upstream General Settings' DeveloperToolsRow layout. */\n.mrfw-skillsSettings {\n  display: flex;\n  align-items: center;\n  justify-content: space-between;\n  gap: 24px;\n  padding: 16px 0;\n  border-bottom: 0.5px solid var(--dsw-alias-border-l2);\n}\n.mrfw-skillsSettingsText { min-width: 0; }\n.mrfw-settingsTitleRow {\n  display: flex;\n  align-items: center;\n  gap: 8px;\n}\n.mrfw-skillsSettingsTitle { font-size: 14px; line-height: 20px; }\n.mrfw-skillsSettingsDescription {\n  margin-top: 4px;\n  color: var(--dsw-alias-label-secondary);\n  font-size: 12px;\n  line-height: 18px;\n}\n.mrfw-rootText {\n  display: flex;\n  flex: 1 1 240px;\n  flex-direction: column;\n  gap: 2px;\n  min-width: 0;\n}\n\n/* Keep status tags and permission glyphs visible beside the alias, wrapping\n   onto another line when the dialog is narrow. */\n.mrfw-rootName {\n  display: flex;\n  align-items: center;\n  flex-wrap: wrap;\n  gap: 6px;\n  min-width: 0;\n  font-size: 14px;\n  line-height: 20px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-primary);\n}\n\n.mrfw-rootNameText {\n  overflow: hidden;\n  text-overflow: ellipsis;\n  white-space: nowrap;\n}\n\n.mrfw-rootPath {\n  font-family: var(--ds-font-family-code);\n  font-size: 12px;\n  line-height: 18px;\n  word-break: break-all;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n/* The path doubles as the copy control: an unstyled button that keeps the\n   text recipe and makes the whole string clickable \u2014 the whole region, not\n   just the icon, copies on click. */\n.mrfw-pathCopy {\n  display: block;\n  width: 100%;\n  padding: 0;\n  border: 0;\n  background: transparent;\n  text-align: left;\n  cursor: pointer;\n}\n\n/* The trailing icon stays in flow but invisible until the path is hovered\n   or focused: appearing never re-wraps the text, and the icon inherits the\n   path's own tertiary ink. */\n.mrfw-pathCopyIcon {\n  display: inline-flex;\n  margin-left: 4px;\n  vertical-align: -2px;\n  opacity: 0;\n  transition: opacity var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-pathCopy:hover .mrfw-pathCopyIcon,\n.mrfw-pathCopy:focus-visible .mrfw-pathCopyIcon {\n  opacity: 1;\n}\n\n.mrfw-note {\n  margin: 0;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-stateWarn {\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-state-warn-primary);\n}\n\n.mrfw-btn {\n  display: inline-flex;\n  flex: none;\n  align-items: center;\n  justify-content: center;\n  gap: 4px;\n  height: 28px;\n  padding: 0 10px;\n  border: none;\n  border-radius: 14px;\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n  transition: background-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-btn[aria-busy='true'] {\n  cursor: wait;\n}\n\n.mrfw-btn:disabled {\n  cursor: not-allowed;\n  opacity: 0.4;\n}\n\n.mrfw-btnGhost:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnGhost:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active);\n}\n\n/* The solid destructive action of the capsule family: the upgrade confirm's\n   red button. state-error-primary is the error ink upstream also uses as a\n   fill (StateDot); the hover mixes in the host's primary label token to\n   follow its theme and contrast choices. Neither color is a guessed token:\n   an undefined var() would fall back\n   to transparent and white-out the whole button. */\n.mrfw-btnDanger {\n  background: var(--dsw-alias-state-error-primary);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnDanger:hover:not(:disabled) {\n  background: color-mix(in srgb, var(--dsw-alias-state-error-primary) 85%, var(--dsw-alias-label-primary));\n}\n\n.mrfw-btnOutline {\n  border: 0.5px solid var(--dsw-alias-border-l3);\n  background: transparent;\n}\n\n.mrfw-btnOutline:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover);\n}\n\n.mrfw-btnPrimary {\n  background: var(--dsw-alias-button-primary-fill);\n  color: var(--dsw-alias-label-primary-foreground);\n}\n\n.mrfw-btnPrimary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover);\n}\n\n/* One icon-only action: a square of the capsule family, meaning in title.\n   Declared after the .mrfw-btn family so its padding wins the cascade tie:\n   the capsule's 0 10px padding would otherwise squeeze the icon glyph. */\n.mrfw-iconBtn {\n  width: 28px;\n  padding: 0;\n  border-radius: 8px;\n}\n\n.mrfw-input {\n  flex: 1 1 220px;\n  min-width: 0;\n  height: 32px;\n  padding: 0 8px;\n  border: 0.5px solid var(--dsw-alias-border-l4);\n  border-radius: 8px;\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font-family: inherit;\n  font-size: 14px;\n  line-height: 22px;\n  outline: none;\n  transition: border-color var(--ds-transition-duration-fast) var(--ds-ease-in-out);\n}\n\n.mrfw-input:focus {\n  border-color: var(--dsw-alias-brand-primary);\n}\n\n.mrfw-input::placeholder {\n  color: var(--dsw-alias-label-dimmed);\n}\n\n.mrfw-inputInline {\n  flex: 1 1 auto;\n}\n\n.mrfw-accessSelect {\n  flex: 0 0 auto;\n}\n\n/* The access dropdown's capsule trigger: the Menu anchor wrapper is the flex\n   item, the button inside keeps the control row's 32px capsule recipe. */\n.mrfw-accessTrigger {\n  padding: 0 12px;\n}\n\n.mrfw-cwdTag {\n  flex: none;\n  padding: 0 6px;\n  border-radius: 4px;\n  background: var(--dsw-alias-interactive-bg-hover);\n  color: var(--dsw-alias-label-secondary);\n  font-size: 11px;\n  line-height: 18px;\n}\n\n.mrfw-accessBadge {\n  display: inline-flex;\n  align-items: center;\n  gap: 4px;\n}\n\n.mrfw-accessBadge {\n  flex: none;\n  font-size: 12px;\n  line-height: 18px;\n  color: var(--dsw-alias-label-tertiary);\n}\n\n.mrfw-aliasEditor {\n  display: flex;\n  flex-wrap: wrap;\n  gap: 8px;\n  flex-basis: 100%;\n}\n\n.mrfw-actions {\n  display: flex;\n  flex-wrap: wrap;\n  align-items: center;\n  gap: 8px;\n  margin-top: 16px;\n  padding-top: 16px;\n  border-top: 0.5px solid var(--dsw-alias-border-l2);\n}\n\n/* One control row, one height: the capsule buttons match the 32px input. */\n.mrfw-actions .mrfw-btn {\n  height: 32px;\n  border-radius: 16px;\n}\n\n.mrfw-actions .mrfw-iconBtn {\n  width: 32px;\n}\n";

package/lib/types/command.d.ts

@@ -1,6 +1,6 @@
 /**
- * The user-facing surface: the `/workspace-folders` command and the panel's
- * RPC channel.
+ * The user-facing surface: the `/workspace-folders` command, its `/add-dirs`
+ * alias for adding a root, and the panel's RPC channel.
  *
  * They share one module because they are one thing — the operator-facing edge
  * over `ctx.multiRootRegistry`. The command serves the text surfaces (the
@@ -81,7 +81,7 @@ export declare function apply(ctx: Context, config?: CommandConfig): void;
  *
  * @param ctx - the host context that may carry `sessions`.
  * @param sessionId - the id the panel sent; already required by the wire schema.
- * @returns the canonical cwd of that session.
+ * @returns the session's cwd spelling, verbatim — the Registry key.
  * @throws {RootValidationError} `session-not-found` when the service is absent,
  *   the id does not name a live session, or that session has no cwd.
  */

package/lib/types/compat/files-tree.d.ts

@@ -27,10 +27,17 @@ export type NativeTreeRenderer = (name: string, input: object, options: {
     fallback: unknown;
 }) => unknown;
 export declare function nativeTreeRenderer(value: unknown): NativeTreeRenderer | undefined;
+/** The revealed file's identity, forwarded as the factory's `current`/`currentRef` inputs. */
+export interface NativeTreeCurrent {
+    /** The current row's tree key — the factory marks it `.current` + `aria-current`. */
+    readonly path: string;
+    /** Optional callback ref for the current row's button — the reveal's scroll target. */
+    readonly ref?: ((row: unknown) => void) | undefined;
+}
 /** The factory consumes absolute, slash-separated keys and already-localized errors. */
 export declare function nativeTreeInput<F>(state: {
     readonly root: string;
     readonly levels: Readonly<Record<string, Level<F>>>;
     readonly expanded: readonly string[];
-}, failureLine: (failure: F) => string, toggle: (parent: string, path: string) => void, open: (path: string) => void): object;
+}, failureLine: (failure: F) => string, toggle: (parent: string, path: string) => void, open: (path: string) => void, current?: NativeTreeCurrent | undefined): object;
 export {};

package/lib/types/compat/forge-entrypoints.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Compatibility adapter: which foreign-service entries the process fence can
+ * admit.
+ *
+ * The upstream experimental forge bundle composes `ctx.sandbox.confine` +
+ * `ctx.subprocess.spawn` on its own code paths — the panel's Git reads and the
+ * worktree service's creation/restore commands — bypassing every wrapped
+ * executor seam the admission already reaches. The fence therefore wraps each
+ * reachable async public entry with an ordered admission of its own. Which
+ * services and keys exist is a per-release shape: the verified baseline here
+ * is `@deepseek-ai/dsh-experimental-forge-bundle@0.2.2-rc.1` (which pins
+ * `dsh-experimental-worktree` and `dsh-experimental-client-ui-forge` at the
+ * same version), and the `follow`/`changeRequestStates` async generators are
+ * deliberately absent — a generator cannot hold a synchronous admission, so
+ * its detached work falls back to the minted-profile ledger.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/compat/forge-entrypoints
+ */
+import type { Session } from '@deepseek-ai/dsh-session';
+/** One foreign service whose public entries spawn confined processes. */
+export interface ForeignProcessService {
+    readonly service: string;
+    readonly keys: readonly string[];
+}
+/**
+ * The forge-bundle service entries an admission can wrap, in this order.
+ * `worktrees.create`/`restore` take an `Agent` (the session rides on
+ * `agent.session`); every listed `forgePanel` entry takes the `Session` as
+ * its first argument. Entries not listed — background inspections, the
+ * isolated `forge-worktree` instance inside the panel's mount group — stay
+ * ledger-covered.
+ */
+export declare const FORGE_PROCESS_SERVICES: readonly ForeignProcessService[];
+/**
+ * Read the session a foreign-service entry resolves its policy from — the
+ * first argument alone: a `Session`, or an `Agent`-shaped value carrying one.
+ * The probe is deliberately structural and narrow (`id` + `header`): it is a
+ * trust boundary over the upstream type, not a full validation — anything
+ * else runs unadmitted rather than let `sandboxPolicy.resolve` read fields a
+ * foreign argument lacks.
+ * @param first - the wrapped call's first argument.
+ * @returns the session, or `undefined` for a call that does not carry one.
+ */
+export declare function sessionOf(first: unknown): Session | undefined;

package/lib/types/compat/instruction-activity.d.ts

@@ -9,9 +9,40 @@ export type FileActivity = {
     failed: boolean;
 };
 export declare function ptcFileActivity(event: unknown): FileActivity | undefined;
+export declare function stableOpsJson(value: unknown): string;
+export declare const opsActivityEvidenceKey: (kind: "native" | "ptc", id: string, name: string, args: unknown) => string;
+export interface OpsActivityEvidence {
+    readonly targets: readonly OpsFileTarget[];
+    readonly complete: boolean;
+}
 /** Rebuild read-only discovery candidates from successful durable activity after resume. */
-export declare function replayedInstructionTargets(events: readonly unknown[], origin: string | undefined): readonly string[];
+export declare function replayedInstructionTargets(events: readonly unknown[], origin: string | undefined, liveOpsEvidence?: ReadonlyMap<string, OpsActivityEvidence>, pendingExec?: {
+    readonly callId: string;
+    readonly name: string;
+    readonly arguments: unknown;
+    readonly parent?: unknown;
+}, options?: {
+    readonly opsCompatibility?: boolean;
+}): readonly string[];
 /** fs tools whose success touches the file at their `file_path` argument. */
 export declare const FILE_TOUCH_TOOL_NAMES: Record<string, true>;
 /** One explicit fs-tool target, shared with live touch capture. */
 export declare function touchedPathOfToolCall(name: string, argumentsJson: string): string | undefined;
+export interface OpsFileActivityInput {
+    name: string;
+    args: unknown;
+    cwd: string | undefined;
+    finalValue: unknown;
+    observedPaths: readonly string[];
+    isError?: boolean;
+}
+export interface OpsFileTarget {
+    path: string;
+    kind: 'read' | 'write' | 'remove';
+}
+export interface OpsFileActivity {
+    targets: readonly OpsFileTarget[];
+    complete: boolean;
+}
+export declare function normalizeOpsFileActivity(input: OpsFileActivityInput): OpsFileActivity;
+export declare function pendingInstructionTargets(name: string, args: unknown): readonly string[];

package/lib/types/compat/ops-confirmation.d.ts

@@ -0,0 +1,17 @@
+/** Keep the optional host confirmation component behind a structural probe. */
+import type { ComponentType } from 'react';
+export interface OpsConfirmationProps {
+    open: boolean;
+    title: string;
+    description: string;
+    acknowledgeLabel: string;
+    cancelLabel: string;
+    closeLabel: string;
+    confirmLabel: string;
+    acknowledged: boolean;
+    disabled?: boolean;
+    onAcknowledgedChange(value: boolean): void;
+    onCancel(): void;
+    onConfirm(): void;
+}
+export declare function opsRiskConfirmation(): ComponentType<OpsConfirmationProps> | undefined;

package/lib/types/compat/ops-settings.d.ts

@@ -0,0 +1,11 @@
+import type { Context, Fiber } from '@deepseek-ai/cordis';
+export declare const OPS_SETTINGS_ID = "multi-root-ops-compatibility";
+/** Product availability policy, independent of structural Settings adaptation. */
+export declare function opsCompatibilityRelease(release: string | undefined): boolean;
+/** Unsupported hosts retain the config input but expose no editable live field. */
+export declare function opsCompatibilityField<S>(schema: S): S;
+export declare function installOpsCompatibilitySettings(ctx: Context, initial: () => unknown, changed: () => void): {
+    read(): unknown;
+    fiber: Fiber;
+};
+export declare function opsCompatibilityToken(ctx: Context): object | undefined;

package/lib/types/compat/ops-tools.d.ts

@@ -0,0 +1,25 @@
+import type { Context } from '@deepseek-ai/cordis';
+import type { MultiRootScopeService } from '../scope.ts';
+import type { ToolCaller } from './tool-context.ts';
+export declare const OPS_TOOL_PREFIX = "ops_";
+export declare const OPS_EXEC_NAMES: readonly string[];
+export type OpsToolKind = 'exec' | 'publish' | 'unknown' | 'other';
+export declare function classifyOpsTool(name: string): OpsToolKind;
+export interface OpsProtectionState {
+    owner: object | undefined;
+    entered: number;
+    readonly drainWaiters: Set<() => void>;
+}
+export declare function withOpsSpawnPermit<T>(state: OpsProtectionState, body: () => T): T;
+export declare function opsSpawnPermitted(state: OpsProtectionState): boolean;
+export declare function createOpsProtectionState(): OpsProtectionState;
+export declare function claimOpsProtection(state: OpsProtectionState): object;
+export declare function revokeOpsProtection(state: OpsProtectionState, token: object): void;
+export declare function opsProtectionReady(state: OpsProtectionState): boolean;
+export declare function assertOpsProtectionReady(state: OpsProtectionState): void;
+export declare function assertOpsProtectionOwner(state: OpsProtectionState, token: object): void;
+export declare function enterOpsProtection(state: OpsProtectionState): object;
+export declare function leaveOpsProtection(state: OpsProtectionState): void;
+export declare function drainOpsProtection(state: OpsProtectionState): Promise<void>;
+export declare function assertOpsPosixCacheAdmission(deniedRoots: readonly string[]): void;
+export declare function opsDispatchBarrier(ctx: Context, scope: MultiRootScopeService, exec: ToolCaller): string | undefined;

package/lib/types/compat/session-existence.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Compatibility adapter for "does this session exist in durable storage".
+ *
+ * The panel session anchor (ADR-0008) is a live Session in this process's
+ * `SessionStore`. A persisted session owned by another Host — or one still
+ * mid-resume — never enters that store, so `resolvePanelPrimaryRoot` and the
+ * `rootsViewOf` re-check both answer `session-not-found`. That code is true
+ * but diagnostically wrong when the session exists: the panel copy asked the
+ * user to open a session already on screen.
+ *
+ * `sessionPersistence.stat(id)` is the cheapest probe of the durable fact:
+ * it reads only the session header — never the event log, never the
+ * cross-process write lease — and reports `undefined` for an absent id.
+ * This module isolates the probe because the fact's meaning differs by
+ * outcome:
+ *
+ * - snapshot returned → the session exists (writer-held elsewhere, still
+ *   resuming, or needing a format migration — `stat` reports the header in
+ *   every one of those states): reclassify as `session-not-live`;
+ * - `undefined` → the session does not exist in this backend: keep
+ *   `session-not-found`;
+ * - service or `stat` absent (a composition without persistence, or a
+ *   runtime whose backend does not name it) → `false`: the probe cannot
+ *   prove existence, so the caller keeps the code it already had;
+ * - `stat` throws → `false`, same conservatism. One imprecision survives:
+ *   a session that exists but whose header cannot be read (corrupt durable
+ *   state, a broken backend) is reported as not-found rather than not-live —
+ *   identical to the pre-probe behavior, and preferable to claiming
+ *   existence the probe failed to prove.
+ *
+ * @module @dsh-electron/dsh-plugin-multi-root-workspace/compat/session-existence
+ */
+import type { Context } from '@deepseek-ai/cordis';
+/**
+ * Whether `sessionId` exists in the mounted persistence backend.
+ * @param ctx - the plugin fiber context; optional services read via `ctx.get`.
+ * @param sessionId - the panel request's session id.
+ * @param signal - the request's cancellation, forwarded when the backend takes options.
+ * @returns `true` only when a snapshot proves the session exists.
+ */
+export declare function persistedSessionExists(ctx: Context, sessionId: string, signal?: AbortSignal): Promise<boolean>;

package/lib/types/compat/skills-client.d.ts

@@ -16,6 +16,7 @@ export interface SkillsForm {
         value: boolean;
     }[], revision?: number): Promise<boolean>;
 }
+export declare function bindSettingsForm(ctx: Context, entryId: string): SkillsForm | undefined;
 export declare function bindSkillsForm(ctx: Context): SkillsForm | undefined;
 export declare function clientInject(ctx: Context, services: string[], callback: (scope: Context) => void | (() => void)): void;
 export interface NamespaceRule {

package/lib/types/compat/tool-context.d.ts

@@ -5,5 +5,9 @@ export interface ToolCaller {
     readonly agent?: Agent;
     readonly callId: string;
     readonly name: string;
+    readonly arguments?: unknown;
+    readonly signal?: AbortSignal;
+    readonly parent?: unknown;
+    readonly token?: object;
 }
 export declare function aroundTool(ctx: Context, listener: (exec: ToolCaller, next: () => Promise<unknown>) => Promise<unknown>): void;

package/lib/types/compat.d.ts

@@ -57,8 +57,8 @@ export declare class DshCompatUnsupportedError extends Error {
  * `./compat/` detect the shape they need STRUCTURALLY — whether a return value
  * is a thenable, which export name a module carries — because a structural
  * probe also survives upstream reshaping something within one release, while a
- * version comparison does not. The release string here is for the gate and for
- * diagnostics.
+ * version comparison does not. The release string here is for installation and
+ * feature-availability gates (such as the OPS 0.2.* policy), and diagnostics.
  */
 export declare class MultiRootCompatService extends Service {
     /** The verdict this composition started under. */

package/lib/types/instructions.d.ts

@@ -4,7 +4,12 @@ declare module '@deepseek-ai/cordis' {
     interface Context {
         multiRootInstructions: {
             knownRoots(session: object): readonly string[];
-            snapshot(agent: Agent, roots: readonly string[], target: string | undefined, signal: AbortSignal): Promise<readonly CurrentRootInstruction[]>;
+            snapshot(agent: Agent, roots: readonly string[], target: string | readonly string[] | undefined, signal: AbortSignal, pending?: {
+                readonly callId: string;
+                readonly name: string;
+                readonly arguments: unknown;
+                readonly parent?: unknown;
+            }): Promise<readonly CurrentRootInstruction[]>;
         };
     }
 }