diff --git a/.githooks/pre-commit b/.githooks/pre-commit
new file mode 100755
index 0000000..d3873f3
--- /dev/null
+++ b/.githooks/pre-commit
@@ -0,0 +1,19 @@
+#!/bin/sh
+# Mirrors the `fmt` job in .github/workflows/ci.yml so formatting
+# failures surface here instead of after a push.
+#
+# Enable with:  git config core.hooksPath .githooks
+# Bypass once with:  git commit --no-verify
+
+if ! command -v cargo >/dev/null 2>&1; then
+	echo "pre-commit: cargo not found, skipping fmt check" >&2
+	exit 0
+fi
+
+if ! cargo fmt --check; then
+	echo >&2
+	echo "pre-commit: formatting check failed (this is what CI's fmt job runs)." >&2
+	echo "  Fix with:  cargo fmt" >&2
+	echo "  Bypass with:  git commit --no-verify" >&2
+	exit 1
+fi
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 505f3b2..e544e8e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,39 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-08-22
+
+### Added
+- Redesigned desktop UI: new design tokens, component and screen stylesheets,
+  and a modular frontend split into `store`, `actions`, `api` and per-screen modules
+- Clean history: every run is recorded per item with its outcome and reclaimed
+  size, and is browsable from a new History screen
+- Disk usage reporting, so reclaimable space is shown as a share of the volume
+  the artifacts actually live on
+- Template-based tray icons for correct rendering in light and dark menu bars
+
+### Changed
+- Refreshed app icons and website assets
+- Reworked scanners across all ecosystems for more accurate sizing and staleness
+- Expanded configuration options for scan roots, ecosystems and thresholds
+
+## [0.1.2] - 2026-08-22
+
+### Fixed
+- GUI-launched apps no longer fail to spawn toolchains with
+  "IO error: No such file or directory (os error 2)". macOS `launchd` and Linux
+  desktop launchers hand the app a bare `PATH`; the real `PATH` is now restored
+  at startup from the user's login shell, so `cargo`, `go`, `npm`, `brew` and
+  `docker` are found
+
+## [0.1.1] - 2026-08-22
+
+### Fixed
+- Sentinel files such as `.env` in a project root no longer block commands like
+  `cargo clean` from running there. Working directories are now checked
+  separately from deletion targets — the command never deletes that directory,
+  while deleting it directly is still refused
+
 ## [0.1.0] - 2026-03-12
 
 ### Added
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 2746cf3..7497474 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -62,6 +62,18 @@ crates/
 3. Add the ecosystem variant to `Ecosystem` enum in `model.rs`
 4. Register it in `scanner/mod.rs` and `commands.rs`
 
+### Git Hooks
+
+Enable the repo's hooks once per clone:
+
+```bash
+git config core.hooksPath .githooks
+```
+
+The `pre-commit` hook runs `cargo fmt --check` — the same check as CI's `fmt`
+job — so formatting problems surface before you push. Bypass it for a single
+commit with `git commit --no-verify`.
+
 ## Code Style
 
 - Run `cargo fmt` before committing
diff --git a/Cargo.lock b/Cargo.lock
index 6efc22c..900b3e5 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -202,6 +202,12 @@ version = "1.5.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
 
+[[package]]
+name = "byteorder-lite"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495"
+
 [[package]]
 name = "bytes"
 version = "1.11.1"
@@ -576,21 +582,24 @@ dependencies = [
 
 [[package]]
 name = "deepclean-app"
-version = "0.1.0"
+version = "1.0.0"
 dependencies = [
+ "chrono",
  "deepclean-core",
+ "dirs",
  "serde",
  "serde_json",
  "tauri",
  "tauri-build",
- "tauri-plugin-shell",
+ "tauri-plugin-dialog",
+ "tempfile",
  "tokio",
  "uuid",
 ]
 
 [[package]]
 name = "deepclean-core"
-version = "0.1.0"
+version = "1.0.0"
 dependencies = [
  "async-trait",
  "bytesize",
@@ -814,15 +823,6 @@ version = "1.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
 
-[[package]]
-name = "encoding_rs"
-version = "0.8.35"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
-dependencies = [
- "cfg-if",
-]
-
 [[package]]
 name = "equivalent"
 version = "1.0.2"
@@ -1660,6 +1660,19 @@ dependencies = [
  "winapi-util",
 ]
 
+[[package]]
+name = "image"
+version = "0.25.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85ab80394333c02fe689eaf900ab500fbd0c2213da414687ebf995a65d5a6104"
+dependencies = [
+ "bytemuck",
+ "byteorder-lite",
+ "moxcms",
+ "num-traits",
+ "png 0.18.1",
+]
+
 [[package]]
 name = "indexmap"
 version = "1.9.3"
@@ -1708,25 +1721,6 @@ dependencies = [
  "serde",
 ]
 
-[[package]]
-name = "is-docker"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "928bae27f42bc99b60d9ac7334e3a21d10ad8f1835a4e12ec3ec0464765ed1b3"
-dependencies = [
- "once_cell",
-]
-
-[[package]]
-name = "is-wsl"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "173609498df190136aa7dea1a91db051746d339e18476eed5ca40521f02d7aa5"
-dependencies = [
- "is-docker",
- "once_cell",
-]
-
 [[package]]
 name = "itoa"
 version = "1.0.17"
@@ -2014,6 +2008,16 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
+[[package]]
+name = "moxcms"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb85c154ba489f01b25c0d36ae69a87e4a1c73a72631fc6c0eb6dde34a73e44b"
+dependencies = [
+ "num-traits",
+ "pxfm",
+]
+
 [[package]]
 name = "muda"
 version = "0.19.3"
@@ -2240,6 +2244,7 @@ checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
 dependencies = [
  "bitflags 2.11.0",
  "block2",
+ "libc",
  "objc2",
  "objc2-core-foundation",
 ]
@@ -2339,34 +2344,12 @@ version = "1.21.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 
-[[package]]
-name = "open"
-version = "5.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43bb73a7fa3799b198970490a51174027ba0d4ec504b03cd08caf513d40024bc"
-dependencies = [
- "dunce",
- "is-wsl",
- "libc",
- "pathdiff",
-]
-
 [[package]]
 name = "option-ext"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
 
-[[package]]
-name = "os_pipe"
-version = "1.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7d8fae84b431384b68627d0f9b3b1245fcf9f46f6c0e3dc902e9dce64edd1967"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
 [[package]]
 name = "pango"
 version = "0.18.3"
@@ -2415,12 +2398,6 @@ dependencies = [
  "windows-link 0.2.1",
 ]
 
-[[package]]
-name = "pathdiff"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df94ce210e5bc13cb6651479fa48d14f601d9858cfe0467f43ae157023b938d3"
-
 [[package]]
 name = "percent-encoding"
 version = "2.3.2"
@@ -2765,6 +2742,12 @@ dependencies = [
  "unicode-ident",
 ]
 
+[[package]]
+name = "pxfm"
+version = "0.1.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0c5ccf5294c6ccd63a74f1565028353830a9c2f5eb0c682c355c471726a6e3f"
+
 [[package]]
 name = "quick-xml"
 version = "0.38.4"
@@ -2985,6 +2968,30 @@ dependencies = [
  "web-sys",
 ]
 
+[[package]]
+name = "rfd"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a15ad77d9e70a92437d8f74c35d99b4e4691128df018833e99f90bcd36152672"
+dependencies = [
+ "block2",
+ "dispatch2",
+ "glib-sys",
+ "gobject-sys",
+ "gtk-sys",
+ "js-sys",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "raw-window-handle",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows-sys 0.60.2",
+]
+
 [[package]]
 name = "rustc-hash"
 version = "2.1.1"
@@ -3310,44 +3317,12 @@ dependencies = [
  "digest",
 ]
 
-[[package]]
-name = "shared_child"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e362d9935bc50f019969e2f9ecd66786612daae13e8f277be7bfb66e8bed3f7"
-dependencies = [
- "libc",
- "sigchld",
- "windows-sys 0.60.2",
-]
-
 [[package]]
 name = "shlex"
 version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
 
-[[package]]
-name = "sigchld"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47106eded3c154e70176fc83df9737335c94ce22f821c32d17ed1db1f83badb1"
-dependencies = [
- "libc",
- "os_pipe",
- "signal-hook",
-]
-
-[[package]]
-name = "signal-hook"
-version = "0.3.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
-dependencies = [
- "libc",
- "signal-hook-registry",
-]
-
 [[package]]
 name = "signal-hook-registry"
 version = "1.4.8"
@@ -3673,6 +3648,7 @@ dependencies = [
  "gtk",
  "heck 0.5.0",
  "http",
+ "image",
  "jni",
  "libc",
  "log",
@@ -3787,24 +3763,45 @@ dependencies = [
 ]
 
 [[package]]
-name = "tauri-plugin-shell"
-version = "2.3.5"
+name = "tauri-plugin-dialog"
+version = "2.7.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8457dbf9e2bab1edd8df22bb2c20857a59a9868e79cb3eac5ed639eec4d0c73b"
+checksum = "b2d3c1dbe38037e7f590cdf2492594d5ceebe031e7bc7e827509b22a999d2940"
 dependencies = [
- "encoding_rs",
  "log",
- "open",
- "os_pipe",
- "regex",
+ "raw-window-handle",
+ "rfd",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-plugin",
+ "tauri-plugin-fs",
+ "thiserror 2.0.19",
+ "url",
+]
+
+[[package]]
+name = "tauri-plugin-fs"
+version = "2.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7ecc274121aca0c036a2b42d1cbe83d368d348f54e0bb8a735c2b1548e8f371"
+dependencies = [
+ "anyhow",
+ "dunce",
+ "glob",
+ "log",
+ "objc2-foundation",
+ "percent-encoding",
  "schemars 0.8.22",
  "serde",
  "serde_json",
- "shared_child",
+ "serde_repr",
  "tauri",
  "tauri-plugin",
+ "tauri-utils",
  "thiserror 2.0.19",
- "tokio",
+ "toml 1.0.6+spec-1.1.0",
+ "url",
 ]
 
 [[package]]
@@ -4092,6 +4089,21 @@ dependencies = [
  "winnow 0.7.15",
 ]
 
+[[package]]
+name = "toml"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "399b1124a3c9e16766831c6bba21e50192572cdd98706ea114f9502509686ffc"
+dependencies = [
+ "indexmap 2.13.0",
+ "serde_core",
+ "serde_spanned 1.0.4",
+ "toml_datetime 1.0.0+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.15",
+]
+
 [[package]]
 name = "toml_datetime"
 version = "0.6.3"
diff --git a/README.md b/README.md
index e4d0017..a88ef0f 100644
--- a/README.md
+++ b/README.md
@@ -16,6 +16,11 @@ One scan, gigabytes back.
 
 [Download](https://github.com/eladbash/void/releases) · [Website](https://eladbash.github.io/void/) · [Contributing](CONTRIBUTING.md) · [Changelog](CHANGELOG.md)
 
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="docs/shot-dark.png">
+  <img src="docs/shot-light.png" alt="Void's results screen: build artifacts grouped by ecosystem, each row showing its full path, age, size and risk level." width="900">
+</picture>
+
 </div>
 
 ---
@@ -36,6 +41,9 @@ a risk level before you click it. Nothing is deleted without your say-so.
 - **Safety first** — blocked-path lists, sentinel-file detection, and Safe / Caution / Danger classification on every action
 - **Fast** — multi-threaded filesystem walker with concurrent analysis, built on Tokio and the `ignore` crate
 - **Staleness aware** — surfaces artifacts untouched for longer than your threshold (30 days by default), so you clean what you're not using
+- **Nothing runs unseen** — every item shows the exact command or deletion it will perform, and you
+  pick which one when an artifact offers several
+- **Keeps a record** — each clean is stored locally with the paths, commands and bytes recovered
 - **Lives in your menu bar** — quick-scan and open the dashboard without leaving your workflow
 - **Yours to configure** — scan roots, enabled ecosystems, staleness thresholds, and paths Void must never touch
 
@@ -93,18 +101,38 @@ cargo tauri build    # produce a release bundle
 
 Deleting files is easy to get wrong, so Void is deliberately conservative:
 
-- **Never-touch paths** — `~/Documents`, `~/Desktop`, `~/Pictures`, `~/Library/Keychains`,
+- **Never-touch paths** — `~/Documents`, `~/Desktop`, `~/Pictures`, `~/Library/Keychains` and
   `~/Library/Preferences`, plus anything named `.ssh`, `.gnupg`, `.aws`, `.config`, or `.env`
-  anywhere in the path.
+  anywhere in the path. `~/Downloads` is protected as a folder, though individual files inside it
+  can be cleaned — that is what the System scanner is for.
+- **Commands are checked too** — an action that shells out to `rm`, `osascript` or PowerShell has
+  its arguments scanned against the same protected paths, and discovered filenames are escaped
+  before they are ever embedded in a script.
 - **Sentinel detection** — a directory containing `.env`, `credentials`, `secrets.y(a)ml`,
   `id_rsa`, or `id_ed25519` is excluded from deletion outright.
 - **Risk escalation** — paths directly under `$HOME` and symlinks are automatically promoted to
   a higher risk level.
+- **Risk follows the action** — an artifact can offer several cleanups at different risk levels;
+  Void shows the risk of the one that will actually run, and asks you to type `delete` before
+  anything permanent.
 - **Your own blocklist** — add any path in settings and Void will refuse to touch it.
 - **Nothing is automatic** — Void never deletes anything you haven't explicitly selected.
 
 Found a safety gap? Please report it privately — see [SECURITY.md](SECURITY.md).
 
+## Configuration
+
+Settings and clean history are plain JSON, written atomically next to the bundle identifier:
+
+| Platform | Location |
+|----------|----------|
+| macOS | `~/Library/Application Support/com.void.app/` |
+| Linux | `~/.config/com.void.app/` |
+| Windows | `%APPDATA%\com.void.app\` |
+
+Both files are safe to edit or delete by hand — a missing or unparseable file falls back to
+defaults rather than blocking launch.
+
 ## Project layout
 
 ```
@@ -112,6 +140,7 @@ crates/
   deepclean-core/   scanning engine, safety checker, action executor
   deepclean-app/    Tauri 2 desktop app, system tray, frontend
 docs/               project website (GitHub Pages)
+design/             design system and screen specifications
 ```
 
 ## Contributing
diff --git a/crates/deepclean-app/Cargo.toml b/crates/deepclean-app/Cargo.toml
index 3a0eddb..ac55a0b 100644
--- a/crates/deepclean-app/Cargo.toml
+++ b/crates/deepclean-app/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "deepclean-app"
-version = "0.1.0"
+version = "1.0.0"
 edition = "2021"
 rust-version.workspace = true
 
@@ -10,8 +10,13 @@ serde = { workspace = true }
 serde_json = { workspace = true }
 tokio = { workspace = true }
 uuid = { workspace = true }
-tauri = { version = "2", features = ["tray-icon"] }
-tauri-plugin-shell = "2"
+tauri = { version = "2", features = ["tray-icon", "image-png"] }
+tauri-plugin-dialog = "2"
+chrono = { workspace = true }
+dirs = { workspace = true }
+
+[dev-dependencies]
+tempfile = "3"
 
 [build-dependencies]
 tauri-build = { version = "2", features = [] }
diff --git a/crates/deepclean-app/capabilities/default.json b/crates/deepclean-app/capabilities/default.json
index 93d4c26..01fa8bf 100644
--- a/crates/deepclean-app/capabilities/default.json
+++ b/crates/deepclean-app/capabilities/default.json
@@ -2,10 +2,12 @@
   "$schema": "https://raw.githubusercontent.com/nickkadutskyi/jb-tauri-plugin/main/crates/tauri-utils/schema.json",
   "identifier": "default",
   "description": "Capability for the main window",
-  "windows": ["main"],
+  "windows": [
+    "main"
+  ],
   "permissions": [
     "core:default",
     "core:event:default",
-    "shell:allow-open"
+    "dialog:allow-open"
   ]
 }
diff --git a/crates/deepclean-app/frontend/css/base.css b/crates/deepclean-app/frontend/css/base.css
new file mode 100644
index 0000000..426c9cb
--- /dev/null
+++ b/crates/deepclean-app/frontend/css/base.css
@@ -0,0 +1,106 @@
+/* ============================================================================
+   BASE — reset, native feel, type utilities.
+   ============================================================================ */
+
+*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }
+
+html {
+  -webkit-text-size-adjust: 100%;
+  font-family: var(--font-sans);
+  font-optical-sizing: auto;
+  font-synthesis: none;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+body {
+  font: 450 var(--t-body) var(--font-sans);
+  letter-spacing: -0.003em;
+  background: var(--surface-base);
+  color: var(--text-primary);
+  height: 100vh;
+  overflow: hidden;
+  user-select: none;
+  /* Rubber-banding on a desktop window reveals the void behind it. */
+  overscroll-behavior: none;
+  cursor: default;
+}
+
+/* Native apps do not put a hand cursor on buttons. It is the single loudest
+   "this is a web page" tell in a webview app. */
+button, .btn, .chip, [role="button"], .rail-btn, .seg button { cursor: default; }
+
+/* ...and anything genuinely selectable has to say so. */
+.path, .size, .error-plate, .cmdline, .pathplate, input, textarea {
+  user-select: text;
+  cursor: text;
+}
+
+* { -webkit-tap-highlight-color: transparent; -webkit-touch-callout: none; }
+
+:focus { outline: none; }
+:focus-visible {
+  outline: 2px solid var(--focus-ring);
+  outline-offset: 1px;
+  border-radius: inherit;
+}
+
+img, svg { display: block; }
+input, button, select, textarea {
+  font: inherit;
+  letter-spacing: inherit;
+  color: inherit;
+}
+ul, ol { list-style: none; }
+
+/* Chrome must never be drag-selected. */
+.rail, .cmdbar, .toolbar, .statusbar, .summary, .tablehead { user-select: none; }
+
+/* ── Type utilities ── */
+.t-metric-lg { font: 600 var(--t-metric-lg) var(--font-sans); letter-spacing: -0.022em; }
+.t-metric-md { font: 600 var(--t-metric-md) var(--font-sans); letter-spacing: -0.020em; }
+.t-metric-sm { font: 600 var(--t-metric-sm) var(--font-sans); letter-spacing: -0.015em; }
+.t-page-title { font: 600 var(--t-page-title) var(--font-sans); letter-spacing: -0.014em; }
+.t-section-title { font: 600 var(--t-section-title) var(--font-sans); letter-spacing: -0.003em; }
+.t-body { font: 450 var(--t-body) var(--font-sans); letter-spacing: -0.003em; }
+.t-body-strong { font: 560 var(--t-body) var(--font-sans); letter-spacing: -0.003em; }
+.t-body-sm { font: 450 var(--t-body-sm) var(--font-sans); }
+.t-label { font: 520 var(--t-label) var(--font-sans); letter-spacing: -0.002em; }
+.t-caption { font: 450 var(--t-caption) var(--font-sans); letter-spacing: 0.004em; }
+.t-overline {
+  font: 620 var(--t-micro) var(--font-sans);
+  letter-spacing: 0.075em;
+  text-transform: uppercase;
+}
+.t-mono-sm { font: 430 var(--t-mono-sm) var(--font-mono); letter-spacing: -0.006em; }
+.t-mono-xs { font: 430 var(--t-mono-xs) var(--font-mono); letter-spacing: -0.004em; }
+
+.mono, code, .path, .cmdline, .error-plate, .pathplate {
+  font-family: var(--font-mono);
+  font-variant-ligatures: none;
+  font-feature-settings: "calt" 0, "liga" 0, "zero" 1;
+}
+
+/* The `font:` shorthand resets numeric variants, so .tnum comes after. */
+.tnum { font-variant-numeric: tabular-nums lining-nums; }
+
+.dim { color: var(--text-tertiary); }
+.spacer { flex: 1; }
+.hidden { display: none !important; }
+.sr-only {
+  position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px;
+  overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0;
+}
+
+/* Windows and Linux get styled scrollbars; macOS overlay scrollbars are
+   already correct and should be left alone. */
+:root[data-platform="windows"] ::-webkit-scrollbar,
+:root[data-platform="linux"] ::-webkit-scrollbar { width: 10px; height: 10px; }
+:root[data-platform="windows"] ::-webkit-scrollbar-track,
+:root[data-platform="linux"] ::-webkit-scrollbar-track { background: transparent; }
+:root[data-platform="windows"] ::-webkit-scrollbar-thumb,
+:root[data-platform="linux"] ::-webkit-scrollbar-thumb {
+  background: var(--border-default);
+  border: 2px solid transparent;
+  background-clip: padding-box;
+  border-radius: var(--radius-full);
+}
diff --git a/crates/deepclean-app/frontend/css/components.css b/crates/deepclean-app/frontend/css/components.css
new file mode 100644
index 0000000..92052b7
--- /dev/null
+++ b/crates/deepclean-app/frontend/css/components.css
@@ -0,0 +1,362 @@
+/* ============================================================================
+   COMPONENTS
+   ============================================================================ */
+
+/* ── Icons ── */
+.icon {
+  width: 16px; height: 16px; flex: none; display: block;
+  fill: none; stroke: currentColor; stroke-width: 1.5;
+  stroke-linecap: round; stroke-linejoin: round;
+}
+.icon-sm { width: 14px; height: 14px; stroke-width: 1.6; }
+.icon-lg { width: 20px; height: 20px; stroke-width: 1.4; }
+.icon-xl { width: 24px; height: 24px; stroke-width: 1.35; }
+.icon [data-solid] { fill: currentColor; stroke: none; }
+
+/* ── Buttons ── */
+.btn {
+  display: inline-flex; align-items: center; justify-content: center; gap: 6px;
+  height: var(--ctl-h-md); padding: 0 11px;
+  border: 1px solid transparent; border-radius: var(--radius-sm);
+  font: 540 13px/1 var(--font-sans); letter-spacing: -0.004em;
+  white-space: nowrap; background: transparent; color: inherit;
+  transition: background-color var(--dur-2) var(--ease-out),
+              border-color var(--dur-2) var(--ease-out),
+              color var(--dur-2) var(--ease-out);
+}
+.btn:hover:not(:disabled) { transition-duration: var(--dur-1); }
+.btn:active:not(:disabled) { transform: scale(0.985); transition-duration: 60ms; }
+.btn .icon { width: 14px; height: 14px; }
+.btn:disabled { opacity: 0.45; pointer-events: none; }
+
+.btn-sm { height: var(--ctl-h-sm); padding: 0 8px; font-size: 12px; }
+.btn-lg { height: var(--ctl-h-lg); padding: 0 14px; }
+
+.btn-primary { background: var(--accent-bg); color: var(--accent-on-solid); box-shadow: var(--edge-highlight); }
+.btn-primary:hover:not(:disabled) { background: var(--accent-bg-hover); }
+.btn-primary:active:not(:disabled) { background: var(--accent-bg-active); }
+
+.btn-secondary { background: var(--surface-raised); color: var(--text-primary); border-color: var(--border-strong); }
+.btn-secondary:hover:not(:disabled) { background: var(--state-hover); }
+.btn-secondary:active:not(:disabled) { background: var(--state-active); }
+
+.btn-ghost { color: var(--text-secondary); }
+.btn-ghost:hover:not(:disabled) { background: var(--state-hover); color: var(--text-primary); }
+
+.btn-danger { background: var(--danger-solid); color: var(--danger-on-solid); box-shadow: var(--edge-highlight); }
+.btn-danger:hover:not(:disabled) { background: var(--danger-solid-hover); }
+
+.iconbtn {
+  width: var(--iconbtn); height: var(--iconbtn); padding: 0;
+  display: inline-flex; align-items: center; justify-content: center;
+  border: 1px solid transparent; border-radius: var(--radius-sm);
+  background: transparent; color: var(--text-tertiary);
+  transition: background-color var(--dur-2) var(--ease-out), color var(--dur-2) var(--ease-out);
+}
+.iconbtn:hover { background: var(--state-hover); color: var(--text-primary); }
+.iconbtn.is-active { background: var(--accent-subtle); color: var(--accent-text); }
+.iconbtn:disabled { opacity: 0.45; pointer-events: none; }
+
+.kbd {
+  display: inline-flex; align-items: center; height: 16px; padding: 0 4px; margin-left: 2px;
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-xs);
+  background: var(--surface-sunken); color: var(--text-tertiary);
+  font: 500 10px/1 var(--font-sans);
+}
+
+/* ── Checkbox ── */
+.cb {
+  width: var(--checkbox); height: var(--checkbox); flex: none;
+  display: flex; align-items: center; justify-content: center;
+  border: 1px solid var(--border-strong); border-radius: var(--radius-xs);
+  background: var(--surface-raised);
+  transition: background-color 90ms var(--ease-out), border-color 90ms var(--ease-out);
+}
+.cb .icon { width: 11px; height: 11px; stroke-width: 2.2; color: var(--accent-on-solid); opacity: 0; }
+.cb[aria-checked="true"], .cb[aria-checked="mixed"] {
+  background: var(--accent-bg); border-color: var(--accent-bg);
+}
+.cb[aria-checked="true"] .icon-check,
+.cb[aria-checked="mixed"] .icon-mixed { opacity: 1; }
+.cb[aria-checked="true"] .icon-mixed,
+.cb[aria-checked="false"] .icon-mixed,
+.cb[aria-checked="mixed"] .icon-check { display: none; }
+.cb.is-disabled { opacity: 0.4; pointer-events: none; }
+
+/* ── Radio ── */
+.radio {
+  width: 14px; height: 14px; flex: none; margin-top: 2px; border-radius: 50%;
+  border: 1px solid var(--border-strong); background: var(--surface-raised);
+}
+.radio.is-on { border: 4px solid var(--accent-bg); background: var(--surface-raised); }
+
+/* ── Toggle ── */
+.toggle {
+  width: 32px; height: 18px; flex: none; position: relative;
+  border-radius: var(--radius-full); background: var(--chart-track);
+  transition: background-color var(--dur-2) var(--ease-out);
+}
+.toggle i {
+  position: absolute; top: 2px; left: 2px; width: 14px; height: 14px;
+  border-radius: 50%; background: var(--surface-raised); box-shadow: var(--shadow-1);
+  transition: transform var(--dur-2) var(--ease-out);
+}
+.toggle.is-on { background: var(--accent-bg); }
+.toggle.is-on i { transform: translateX(14px); }
+
+/* ── Badges ──
+   Risk is never carried by color alone: each badge pairs a glyph, a shape and
+   the word. Safe is a full pill; caution and danger are squarer, and danger
+   adds a left rule. */
+.badge {
+  display: inline-flex; align-items: center; gap: 3px;
+  height: var(--badge-h); padding: 1px 5px 0;
+  border-radius: var(--radius-xs);
+  font: 600 10px/1 var(--font-sans); letter-spacing: 0.045em;
+  text-transform: uppercase; white-space: nowrap;
+}
+.badge .icon { width: 10px; height: 10px; stroke-width: 2; }
+.badge-safe {
+  border-radius: var(--radius-full); padding: 1px 7px 0;
+  background: var(--safe-bg-subtle); color: var(--safe-text);
+  box-shadow: inset 0 0 0 1px var(--safe-border);
+}
+.badge-caution {
+  background: var(--caution-bg-subtle); color: var(--caution-text);
+  box-shadow: inset 0 0 0 1px var(--caution-border);
+}
+.badge-danger {
+  background: var(--danger-bg-subtle); color: var(--danger-text);
+  box-shadow: inset 0 0 0 1px var(--danger-border);
+  border-left: 2px solid var(--danger-border-strong);
+}
+.badge-neutral {
+  background: var(--surface-sunken); color: var(--text-tertiary);
+  box-shadow: inset 0 0 0 1px var(--border-subtle);
+}
+
+.countpill {
+  display: inline-flex; align-items: center; justify-content: center;
+  height: 16px; min-width: 16px; padding: 0 5px;
+  border-radius: var(--radius-xs); background: var(--surface-sunken);
+  color: var(--text-tertiary); font: 520 10px/1 var(--font-sans);
+  font-variant-numeric: tabular-nums;
+}
+
+/* ── Chips ── */
+.chip {
+  display: inline-flex; align-items: center; gap: 6px;
+  height: var(--ctl-h-sm); padding: 0 9px;
+  border: 1px solid var(--border-default); border-radius: var(--radius-sm);
+  background: var(--surface-raised); color: var(--text-secondary);
+  font: 500 12px/1 var(--font-sans); white-space: nowrap;
+  transition: background-color var(--dur-2) var(--ease-out),
+              border-color var(--dur-2) var(--ease-out), color var(--dur-2) var(--ease-out);
+}
+.chip:hover { border-color: var(--border-strong); color: var(--text-primary); }
+.chip.is-active { background: var(--accent-subtle); border-color: var(--accent-border-strong); color: var(--accent-text); }
+.chip .icon { width: 13px; height: 13px; }
+.chip-quiet {
+  height: 18px; padding: 0 6px; font-size: 11px;
+  background: transparent; border-color: var(--border-subtle); color: var(--text-tertiary);
+}
+
+/* ── Inputs ── */
+.input {
+  height: var(--ctl-h-md); padding: 0 9px;
+  border: 1px solid var(--border-strong); border-radius: var(--radius-sm);
+  background: var(--surface-sunken); color: var(--text-primary);
+  font: 450 13px/1 var(--font-sans);
+}
+.input::placeholder { color: var(--text-disabled); }
+.input:focus-visible { border-color: var(--accent-border-strong); }
+
+.search {
+  display: flex; align-items: center; gap: 6px;
+  height: var(--ctl-h-sm); flex: 1; max-width: 320px; min-width: 120px;
+  padding: 0 9px; border: 1px solid var(--border-default);
+  border-radius: var(--radius-sm); background: var(--surface-sunken);
+  color: var(--text-tertiary);
+}
+.search input {
+  flex: 1; min-width: 0; border: 0; background: transparent; outline: none;
+  color: var(--text-primary); font: 450 12px/1 var(--font-sans);
+}
+.search input::placeholder { color: var(--text-disabled); }
+
+/* ── Segmented control ── */
+.seg {
+  display: inline-flex; height: var(--ctl-h-md); padding: 2px; gap: 2px;
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-sm);
+  background: var(--surface-sunken);
+}
+.seg button {
+  height: 100%; padding: 0 11px; border: 0; border-radius: 3px;
+  background: transparent; color: var(--text-tertiary);
+  font: 520 12px/1 var(--font-sans);
+}
+.seg button.is-on { background: var(--surface-raised); color: var(--text-primary); box-shadow: var(--shadow-1); }
+
+/* ── Size cell — four typographic tiers plus unknown ── */
+.size {
+  display: inline-flex; align-items: baseline; gap: 3px; justify-content: flex-end;
+  font-variant-numeric: tabular-nums lining-nums;
+}
+.size-num { font: 560 13px/18px var(--font-sans); letter-spacing: -0.003em; color: var(--text-primary); }
+.size-unit {
+  font: 500 10px/18px var(--font-sans); letter-spacing: 0.02em;
+  color: var(--text-tertiary); min-width: 16px; text-align: left;
+}
+.size[data-mag="xl"] .size-num { font-size: 15px; font-weight: 620; }
+.size[data-mag="lg"] .size-num { font-size: 14px; font-weight: 620; }
+.size[data-mag="sm"] .size-num { color: var(--text-secondary); font-weight: 450; }
+.size[data-mag="unknown"] .size-num {
+  font: italic 450 12px/18px var(--font-sans); color: var(--text-disabled);
+}
+
+/* ── Path with emphasis roles ── */
+.path {
+  font: 430 var(--t-mono-xs) var(--font-mono); letter-spacing: -0.004em;
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0;
+}
+.path .s-root, .path .s-dim { color: var(--text-tertiary); }
+.path .s-sep, .path .s-gap { color: var(--text-disabled); }
+.path .s-project { color: var(--text-secondary); font-weight: 560; }
+.path .s-leaf { color: var(--text-secondary); font-weight: 500; }
+
+/* ── Bars ── */
+.magbar { display: block; height: 4px; border-radius: 2px; background: var(--chart-track); overflow: hidden; }
+.magbar i { display: block; height: 100%; border-radius: 2px; background: var(--eco-accent); opacity: 0.85; }
+.sharebar { display: block; width: 100px; height: 6px; flex: none; border-radius: var(--radius-xs); background: var(--chart-track); overflow: hidden; }
+.sharebar i { display: block; height: 100%; border-radius: var(--radius-xs); background: var(--eco-accent); }
+.bigbar { flex: none; height: 8px; border-radius: var(--radius-xs); background: var(--chart-track); overflow: hidden; }
+.bigbar i { display: block; height: 100%; border-radius: var(--radius-xs); background: var(--accent-bg); transition: width var(--dur-4) linear; }
+
+.diskmeter { display: flex; height: 8px; border-radius: var(--radius-xs); background: var(--chart-track); overflow: hidden; }
+.diskmeter i { display: block; height: 100%; }
+.diskmeter .seg-used { background: var(--text-disabled); }
+.diskmeter .seg-recl { background: var(--accent-bg); }
+
+/* ── Progress ── */
+.progress { height: 2px; flex: none; background: var(--chart-track); overflow: hidden; position: relative; }
+.progress.is-indeterminate::after {
+  content: ''; position: absolute; inset-block: 0; left: 0; width: 32%;
+  background: var(--accent-bg); border-radius: 1px;
+  animation: prog-slide 1150ms var(--ease-standard) infinite;
+}
+@keyframes prog-slide {
+  0%   { transform: translateX(-105%) scaleX(0.55); }
+  55%  { transform: translateX(120%) scaleX(1); }
+  100% { transform: translateX(320%) scaleX(0.55); }
+}
+
+.spinring {
+  width: 12px; height: 12px; flex: none; border-radius: 50%;
+  border: 1.5px solid currentColor; border-right-color: transparent;
+  animation: void-spin 900ms linear infinite;
+}
+@keyframes void-spin { to { transform: rotate(360deg); } }
+
+/* ── Plates ── */
+.cmdline {
+  display: block; padding: 4px 6px;
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-xs);
+  background: var(--surface-inset); color: var(--text-code);
+  font: 430 var(--t-mono-xs) var(--font-mono); word-break: break-all;
+}
+.pathplate {
+  padding: 8px 10px; border: 1px solid var(--border-subtle);
+  border-radius: var(--radius-sm); background: var(--surface-inset);
+  color: var(--text-code); font: 430 var(--t-mono-xs) var(--font-mono);
+  word-break: break-all;
+}
+/* Machine text is always monospace, always selectable, never folded into a
+   sentence — it is the difference between a paraphrase and the real message. */
+.error-plate {
+  padding: 8px 10px; text-align: left;
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-sm);
+  background: var(--surface-inset); color: var(--text-secondary);
+  font: 430 var(--t-mono-xs) var(--font-mono);
+  max-width: 52ch; max-height: 96px; overflow: auto;
+  white-space: pre-wrap; overflow-wrap: anywhere;
+}
+
+.card {
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-md);
+  background: var(--surface-raised); padding: 12px;
+}
+
+/* ── Empty / error states ── */
+.state {
+  display: flex; flex-direction: column; align-items: center; text-align: center;
+  padding: 56px 24px;
+}
+.state .glyph { width: 24px; height: 24px; color: var(--text-disabled); stroke-width: 1.35; }
+.state .title { margin-top: 12px; font: 600 14px/20px var(--font-sans); letter-spacing: -0.008em; color: var(--text-primary); }
+.state .body {
+  margin-top: 4px; font: 450 13px/20px var(--font-sans);
+  color: var(--text-secondary); max-width: 44ch; text-wrap: pretty;
+}
+.state .actions { margin-top: 16px; display: flex; gap: 8px; }
+.state .hint { margin-top: 14px; font: 450 11px/14px var(--font-sans); color: var(--text-disabled); }
+.state[data-size="sm"] { padding: 28px 16px; }
+
+/* ── Banner ── */
+.banner {
+  height: 44px; flex: none; display: flex; align-items: center; gap: 10px;
+  padding: 0 var(--pad-window-x); border-bottom: 1px solid var(--border-subtle);
+  background: var(--caution-bg-subtle); color: var(--caution-text);
+}
+.banner .txt { flex: 1; color: var(--text-primary); font: 450 var(--t-body) var(--font-sans); }
+
+/* ── Skeleton ── */
+@keyframes skeleton-pulse { 0%, 100% { opacity: 1; } 50% { opacity: 0.42; } }
+.skeleton {
+  background: var(--skeleton-base); border-radius: var(--radius-xs);
+  animation: skeleton-pulse 1400ms cubic-bezier(0.4, 0, 0.6, 1) infinite;
+}
+
+/* ── Modal ── */
+.scrim {
+  position: absolute; inset: 0; z-index: 40;
+  display: flex; align-items: center; justify-content: center;
+  background: var(--surface-scrim);
+}
+.modal {
+  width: 560px; max-width: calc(100% - 48px); max-height: calc(100% - 48px);
+  display: flex; flex-direction: column;
+  background: var(--surface-overlay); border: 1px solid var(--border-default);
+  border-radius: var(--radius-lg); box-shadow: var(--shadow-3); overflow: hidden;
+}
+.modal-head { padding: 16px 20px; border-bottom: 1px solid var(--border-subtle); display: flex; align-items: flex-start; gap: 12px; }
+.modal-body { flex: 1; overflow-y: auto; padding: 16px 20px; }
+.modal-foot {
+  flex: none; padding: 14px 20px; border-top: 1px solid var(--border-subtle);
+  display: flex; align-items: center; gap: 10px; background: var(--surface-raised);
+}
+
+/* ── Popover ── */
+.popover {
+  position: absolute; z-index: 30; min-width: 260px;
+  background: var(--surface-overlay); border: 1px solid var(--border-default);
+  border-radius: var(--radius-md); box-shadow: var(--shadow-2); overflow: hidden;
+}
+.popover-row {
+  display: flex; align-items: center; gap: 8px; width: 100%;
+  padding: 7px 10px; border: 0; background: transparent;
+  color: var(--text-primary); font: 450 var(--t-body) var(--font-sans); text-align: left;
+}
+.popover-row:hover { background: var(--state-hover); }
+.popover-sect { padding: 8px 10px 4px; }
+.popover-foot { border-top: 1px solid var(--border-subtle); padding: 6px; }
+
+/* ── Toast — the only genuinely undoable action gets the only toast ── */
+.toast {
+  position: absolute; left: 16px; bottom: 40px; z-index: 50;
+  display: flex; align-items: center; gap: 12px;
+  min-width: 280px; padding: 10px 12px;
+  background: var(--surface-overlay); border: 1px solid var(--border-default);
+  border-radius: var(--radius-md); box-shadow: var(--shadow-2);
+  animation: toast-in var(--dur-4) var(--ease-out);
+}
+@keyframes toast-in { from { opacity: 0; transform: translateY(6px); } }
diff --git a/crates/deepclean-app/frontend/css/screens.css b/crates/deepclean-app/frontend/css/screens.css
new file mode 100644
index 0000000..0f16326
--- /dev/null
+++ b/crates/deepclean-app/frontend/css/screens.css
@@ -0,0 +1,338 @@
+/* ============================================================================
+   SHELL & SCREENS
+   ============================================================================ */
+
+.app { display: flex; height: 100vh; overflow: hidden; }
+
+/* ── Rail ──
+   56px of horizontal space is 6% at the 900px default; a top nav would spend
+   52px of vertical space, which is the scarce dimension in a 700px window. */
+.rail {
+  width: var(--rail-w); flex: none;
+  display: flex; flex-direction: column; align-items: center;
+  gap: 4px; padding: 12px 0 16px;
+  background: var(--surface-sunken); border-right: 1px solid var(--border-subtle);
+}
+.rail-mark { width: 24px; height: 24px; color: var(--accent-bg); margin-bottom: 20px; }
+.rail-mark.is-scanning { animation: void-spin 900ms linear infinite; }
+.rail-btn {
+  position: relative; width: 40px; height: 40px;
+  display: flex; align-items: center; justify-content: center;
+  border: 0; border-radius: var(--radius-sm);
+  background: transparent; color: var(--text-tertiary);
+  transition: background-color var(--dur-2) var(--ease-out), color var(--dur-2) var(--ease-out);
+}
+.rail-btn:hover { background: var(--state-hover); color: var(--text-secondary); }
+.rail-btn[aria-current="page"] {
+  background: var(--accent-subtle); color: var(--accent-text);
+  box-shadow: inset 2px 0 0 var(--accent-bg);
+}
+.rail-dot {
+  position: absolute; top: 7px; right: 7px; width: 6px; height: 6px;
+  border-radius: 50%; background: var(--accent-bg);
+  box-shadow: 0 0 0 2px var(--surface-sunken);
+}
+.rail-disk { width: 40px; display: flex; flex-direction: column; align-items: center; gap: 5px; color: var(--text-tertiary); }
+.rail-disk-bar {
+  width: 4px; height: 36px; border-radius: 2px; overflow: hidden;
+  background: var(--chart-track);
+  display: flex; flex-direction: column; justify-content: flex-end;
+}
+.rail-disk-bar i { display: block; width: 100%; flex: none; }
+.rail-disk-bar .recl { background: var(--accent-bg); }
+.rail-disk-bar .used { background: var(--text-disabled); }
+
+/* ── Screen frame ── */
+.screen { flex: 1; min-width: 0; display: flex; flex-direction: column; position: relative; }
+
+.cmdbar {
+  height: var(--header-h); flex: none;
+  display: flex; align-items: center; gap: 12px;
+  padding: 0 var(--pad-window-x);
+  border-bottom: 1px solid var(--border-subtle); background: var(--surface-base);
+}
+.cmdbar-titles { flex: 1; min-width: 0; }
+.cmdbar-titles .sub { color: var(--text-tertiary); margin-top: 1px; font-variant-numeric: tabular-nums; }
+.cmdbar-actions { display: flex; align-items: center; gap: 8px; flex: none; }
+
+/* ── Summary strip ── */
+.summary {
+  height: var(--summary-h); flex: none;
+  display: flex; align-items: center; gap: 20px;
+  padding: 0 var(--pad-window-x);
+  border-bottom: 1px solid var(--border-subtle); background: var(--surface-base);
+}
+.summary-headline { width: 250px; flex: none; }
+.summary-headline .metric { display: flex; align-items: baseline; gap: 4px; }
+.summary-headline .sub { color: var(--text-tertiary); margin-top: 2px; font-variant-numeric: tabular-nums; }
+.summary-disk { flex: 1; min-width: 0; }
+.summary-disk .legend {
+  margin-top: 6px; display: flex; gap: 12px; white-space: nowrap; overflow: hidden;
+  color: var(--text-tertiary); font-variant-numeric: tabular-nums;
+}
+.summary-disk .legend b { color: var(--text-secondary); font-weight: 560; }
+/* Reserved so selecting never shifts the layout under the cursor. */
+.summary-action { width: 240px; flex: none; display: flex; flex-direction: column; align-items: flex-end; gap: 4px; }
+.summary-action .selinfo { color: var(--text-secondary); font-variant-numeric: tabular-nums; }
+.summary-action .selinfo b { color: var(--text-primary); font-weight: 600; }
+
+/* Below the default window width the headline and the action button leave the
+   disk meter too little room to say anything useful, and it wraps. The rail
+   keeps showing disk usage, so the strip drops it rather than cramming it. */
+@media (max-width: 860px) {
+  .summary-headline { width: auto; flex: 1; }
+  .summary-disk { display: none; }
+}
+
+/* Clean-in-progress variant of the same strip. */
+.summary.is-progress { height: 78px; align-items: stretch; padding-block: 10px; }
+.summary.is-progress .prog { flex: 1; display: flex; flex-direction: column; justify-content: center; gap: 7px; }
+.summary.is-progress .prog-row { display: flex; align-items: baseline; gap: 12px; }
+
+/* Completion card. */
+.resultcard {
+  height: 96px; flex: none; display: flex; align-items: center; gap: 14px;
+  padding: 0 var(--pad-window-x);
+  border-bottom: 1px solid var(--border-subtle); background: var(--safe-bg-subtle);
+}
+.resultcard.has-failures { background: var(--caution-bg-subtle); }
+.resultcard .glyph { color: var(--safe-text); }
+.resultcard.has-failures .glyph { color: var(--caution-text); }
+.resultcard .link { color: var(--danger-text); text-decoration: underline; }
+
+/* ── Scanner ticker ── */
+.ticker {
+  height: 28px; flex: none; display: flex; align-items: center; gap: 14px;
+  padding: 0 var(--pad-window-x); overflow-x: auto; overflow-y: hidden;
+  border-bottom: 1px solid var(--border-subtle); background: var(--surface-sunken);
+  scrollbar-width: none;
+}
+.ticker::-webkit-scrollbar { display: none; }
+.ticker-item {
+  display: inline-flex; align-items: center; gap: 5px; white-space: nowrap;
+  color: var(--text-disabled); font: 500 11px/1 var(--font-sans);
+}
+.ticker-item.is-done { color: var(--text-secondary); }
+.ticker-item.is-running { color: var(--accent-text); }
+.ticker-item .icon { width: 12px; height: 12px; }
+
+/* ── Toolbar ── */
+.toolbar {
+  height: var(--toolbar-h); flex: none; display: flex; align-items: center; gap: 8px;
+  padding: 0 var(--pad-window-x);
+  border-bottom: 1px solid var(--border-subtle); background: var(--surface-base);
+}
+.toolbar-sep { width: 1px; height: 16px; background: var(--border-subtle); margin: 0 8px; }
+
+/* ── Table ── */
+.tablehead {
+  height: var(--colhead-h); flex: none; display: flex; align-items: center;
+  padding: 0 var(--pad-window-x); color: var(--text-tertiary);
+  border-bottom: 1px solid var(--border-subtle); background: var(--surface-base);
+}
+.col-stale { width: 56px; text-align: right; padding-right: 12px; flex: none; }
+.col-mag { width: 56px; padding-right: 12px; flex: none; }
+.col-size { width: 84px; flex: none; display: flex; justify-content: flex-end; padding-right: 8px; }
+.col-chev { width: 24px; flex: none; display: flex; align-items: center; justify-content: center; }
+
+.listwrap { flex: 1; min-height: 0; position: relative; background: var(--surface-base); }
+.list { height: 100%; overflow-y: auto; padding-bottom: 8px; }
+
+.group {
+  position: sticky; top: 0; z-index: 2;
+  height: var(--group-h); display: flex; align-items: center; gap: 10px;
+  padding: 0 var(--pad-window-x); margin-top: -1px;
+  background: var(--surface-sunken);
+  border-block: 1px solid var(--border-subtle);
+}
+.group .gname { color: var(--text-primary); }
+.group .gsize { width: 84px; flex: none; text-align: right; }
+.group-toggle {
+  display: flex; align-items: center; gap: 10px; flex: 1; min-width: 0;
+  border: 0; background: transparent; color: inherit; text-align: left;
+}
+
+.item {
+  position: relative; height: var(--row-h); overflow: hidden;
+  display: flex; align-items: center;
+  padding: 0 var(--pad-window-x);
+  background: var(--surface-base); border-bottom: 1px solid var(--border-subtle);
+  transition: background-color var(--dur-2) var(--ease-out);
+}
+.item:hover { background: var(--state-hover); }
+.item.is-selected { background: var(--state-selected); box-shadow: inset 2px 0 0 var(--state-selected-border); }
+.item.is-focused { box-shadow: inset 0 0 0 2px var(--focus-ring); }
+/* Per-row magnitude, drawn under the row rather than in a column. */
+.item::after {
+  content: ''; position: absolute; left: 0; bottom: 0; height: 2px;
+  width: calc(var(--size-ratio, 0) * 100%);
+  background: var(--eco-accent); opacity: 0.22;
+  border-radius: 0 1px 1px 0; pointer-events: none;
+}
+.item .cell-check { width: 22px; flex: none; display: flex; align-items: center; }
+/* Risk edge: zero-cost, always-present, reflects the *selected action*. */
+.riskedge { width: 4px; align-self: stretch; flex: none; margin-right: 8px; border-radius: 1px; }
+.riskedge.safe { background: transparent; }
+.riskedge.caution { background: var(--caution-solid); }
+.riskedge.danger { background: var(--danger-solid); }
+.item .cell-main { flex: 1; min-width: 0; display: flex; flex-direction: column; justify-content: center; gap: 1px; padding-right: 12px; }
+.item .line1, .item .line2 {
+  display: flex; align-items: center; gap: 8px;
+  min-width: 0; flex-wrap: nowrap; overflow: hidden;
+}
+/* Badges and chips keep their size; the text around them gives way. */
+.item .line1 > .badge, .item .line2 > .chip { flex: none; }
+.item .kindname {
+  color: var(--text-primary); font: 560 var(--t-body) var(--font-sans);
+  letter-spacing: -0.003em; white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.item .projname {
+  color: var(--text-tertiary); font: 450 var(--t-body) var(--font-sans);
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+  flex: 0 1 auto; min-width: 0;
+}
+/* Shrink order is expressed as differential flex-shrink rather than source
+   order: the short label that says *what* this is must survive long after the
+   64-character hash beside it has been ellipsed away. */
+.item .kindname { flex: 0 1 auto; flex-shrink: 1; }
+.item .projname { flex-shrink: 400; }
+
+/* The path is the item's identity, so it takes the leftover space and gives it
+   back last. */
+.item .line2 > .path { flex: 1 1 auto; min-width: 0; flex-shrink: 1; }
+/* "via cargo clean" is a hint, not the subject. Capped so it can never crowd
+   the path, and first to yield when space runs out. */
+.item .via {
+  color: var(--text-tertiary); white-space: nowrap;
+  overflow: hidden; text-overflow: ellipsis;
+  flex: 0 1 auto; min-width: 0; max-width: 45%; flex-shrink: 400;
+}
+.item .cell-stale { color: var(--text-tertiary); font-variant-numeric: tabular-nums; }
+.item .cell-stale.is-stale { color: var(--caution-text); }
+.item .cell-chev { color: var(--text-disabled); }
+.item:hover .cell-chev { color: var(--text-secondary); }
+
+/* Row states during a clean. */
+.item.is-queued { opacity: 0.55; }
+.item.is-active { background: var(--state-hover); box-shadow: inset 2px 0 0 var(--accent-bg); }
+.item.is-failed { background: var(--danger-bg-subtle); }
+
+[data-density="compact"] .item { height: var(--row-h-compact); }
+[data-density="compact"] .item .line1 .kindname { font-size: 12px; }
+
+/* ── Status bar ── */
+.statusbar {
+  height: var(--statusbar-h); flex: none; display: flex; align-items: center; gap: 12px;
+  padding: 0 var(--pad-window-x); white-space: nowrap; overflow: hidden;
+  border-top: 1px solid var(--border-subtle); background: var(--surface-sunken);
+  color: var(--text-tertiary); font-variant-numeric: tabular-nums;
+}
+.statusbar > * { flex: none; }
+.statusbar .issues { display: inline-flex; align-items: center; gap: 5px; color: var(--caution-text); border: 0; background: transparent; }
+
+/* ── Drawer ──
+   Below 1280 it overlays with a scrim so the table keeps the layout the user
+   already knows; at 1280+ it becomes an inline column. */
+.drawer {
+  width: var(--drawer-w); flex: none; display: flex; flex-direction: column;
+  background: var(--surface-raised); border-left: 1px solid var(--border-subtle);
+  overflow: hidden;
+  position: absolute; top: 0; right: 0; bottom: 0; z-index: 20;
+  box-shadow: var(--shadow-3);
+}
+.drawer-scrim { position: absolute; inset: 0; z-index: 19; background: var(--surface-scrim); }
+@media (min-width: 1280px) {
+  .drawer { position: static; box-shadow: none; }
+  .drawer-scrim { display: none; }
+  .app.has-drawer .screen { flex: 1; }
+}
+.app.has-drawer { position: relative; }
+.drawer-head { height: 44px; flex: none; display: flex; align-items: center; gap: 6px; padding: 0 12px 0 16px; border-bottom: 1px solid var(--border-subtle); }
+.drawer-body { flex: 1; overflow-y: auto; }
+.drawer-sect { padding: 14px 16px; border-bottom: 1px solid var(--border-subtle); }
+.drawer-sect:last-child { border-bottom: 0; }
+.drawer-sect .t-overline { color: var(--text-disabled); margin-bottom: 10px; }
+.drawer-foot { flex: none; padding: 12px 16px; border-top: 1px solid var(--border-subtle); display: flex; gap: 8px; }
+.facts { display: grid; grid-template-columns: 92px 1fr; row-gap: 6px; column-gap: 12px; align-items: baseline; }
+.facts dt { color: var(--text-tertiary); }
+.facts dd { color: var(--text-primary); font-variant-numeric: tabular-nums; word-break: break-all; }
+
+.action-opt { display: flex; gap: 10px; padding: 10px 0; border-bottom: 1px solid var(--border-subtle); text-align: left; width: 100%; background: transparent; border-left: 0; border-right: 0; border-top: 0; }
+.action-opt:last-child { border-bottom: 0; }
+.action-opt .body { flex: 1; min-width: 0; }
+.action-opt .row1 { display: flex; align-items: center; gap: 8px; margin-bottom: 2px; flex-wrap: wrap; }
+.action-opt .lbl { color: var(--text-primary); font: 540 var(--t-body) var(--font-sans); }
+.action-opt .desc { color: var(--text-tertiary); font: 450 var(--t-body-sm) var(--font-sans); margin-bottom: 4px; }
+.action-opt .outcome { margin-top: 4px; color: var(--text-disabled); font: 450 var(--t-caption) var(--font-sans); }
+.action-opt .outcome .recoverable { color: var(--safe-text); }
+
+.safety-line { display: flex; gap: 7px; align-items: flex-start; margin-bottom: 6px; color: var(--text-secondary); font: 450 var(--t-body-sm) var(--font-sans); }
+.safety-line .icon { width: 13px; height: 13px; margin-top: 1.5px; flex: none; }
+.safety-line.ok .icon { color: var(--safe-text); }
+.safety-line.warn, .safety-line.warn .icon { color: var(--caution-text); }
+
+/* ── Confirm modal ── */
+.effect-row { display: flex; align-items: center; gap: 10px; height: 32px; color: var(--text-primary); }
+.effect-row .icon { color: var(--text-tertiary); flex: none; }
+.effect-row .txt { flex: 1; }
+.effect-row .amt { color: var(--text-secondary); font-variant-numeric: tabular-nums; }
+/* The commit control must never sit below the fold, so the itemised list is
+   what scrolls. */
+.attn-card {
+  border: 1px solid var(--border-default); border-radius: var(--radius-sm);
+  background: var(--surface-inset); max-height: 200px; overflow-y: auto;
+}
+.attn-item { padding: 10px 12px; border-bottom: 1px solid var(--border-subtle); }
+.attn-item:last-child { border-bottom: 0; }
+.attn-item .row1 { display: flex; align-items: center; gap: 8px; margin-bottom: 3px; }
+.attn-item .row1 .lbl { flex: 1; color: var(--text-primary); font: 540 var(--t-body) var(--font-sans); }
+.attn-item .row1 .amt { color: var(--text-secondary); font-variant-numeric: tabular-nums; font-size: 12px; }
+
+/* ── Settings ── */
+.settings-nav { height: 44px; flex: none; display: flex; align-items: center; padding: 0 var(--pad-window-x); border-bottom: 1px solid var(--border-subtle); }
+.form { padding: 20px var(--pad-window-x); max-width: 560px; }
+.field { margin-bottom: 22px; }
+.field .help { color: var(--text-tertiary); margin-bottom: 8px; }
+.field .foot { color: var(--text-disabled); margin-top: 8px; max-width: 46ch; }
+.pathlist { border: 1px solid var(--border-subtle); border-radius: var(--radius-sm); background: var(--surface-inset); overflow: hidden; }
+.pathrow { height: 36px; display: flex; align-items: center; gap: 8px; padding: 0 10px; border-bottom: 1px solid var(--border-subtle); color: var(--text-primary); }
+.pathrow:last-child { border-bottom: 0; }
+.pathrow .p { flex: 1; min-width: 0; color: var(--text-secondary); font: 430 var(--t-mono-sm) var(--font-mono); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.pathrow.is-locked { color: var(--text-tertiary); opacity: 0.8; }
+.ecorow { height: 48px; display: flex; align-items: center; gap: 10px; padding: 0 10px; border-bottom: 1px solid var(--border-subtle); }
+.ecorow:last-child { border-bottom: 0; }
+.ecorow .nm { flex: 1; color: var(--text-primary); }
+.ecorow .stat { color: var(--text-tertiary); font-variant-numeric: tabular-nums; text-align: right; }
+.slider-row { display: flex; justify-content: space-between; align-items: baseline; }
+.slider { width: 100%; margin: 10px 0; accent-color: var(--accent-bg); }
+
+/* ── History ── */
+.stattiles { display: flex; gap: 10px; padding: 16px var(--pad-window-x) 0; }
+.stattile {
+  flex: 1; height: 72px; padding: 10px 12px;
+  border: 1px solid var(--border-subtle); border-radius: var(--radius-md);
+  background: var(--surface-raised);
+  display: flex; flex-direction: column; justify-content: space-between;
+}
+.stattile .k { color: var(--text-disabled); }
+.spark { display: flex; align-items: flex-end; gap: 3px; height: 64px; }
+/* Capped so a history of three runs does not render three giant slabs. */
+.spark i { flex: 1 1 0; max-width: 28px; min-height: 2px; border-radius: 1.5px 1.5px 0 0; background: var(--accent-bg); opacity: 0.75; }
+.spark i.hi { opacity: 1; }
+.hrow { height: 44px; display: flex; align-items: center; gap: 12px; padding: 0 var(--pad-window-x); border-bottom: 1px solid var(--border-subtle); background: var(--surface-base); }
+.hrow:hover { background: var(--state-hover); }
+.hrow .d { width: 150px; color: var(--text-primary); }
+.hrow .n { width: 60px; text-align: right; color: var(--text-secondary); font-variant-numeric: tabular-nums; }
+.hrow .f { width: 90px; text-align: right; color: var(--text-primary); font-weight: 560; font-variant-numeric: tabular-nums; }
+.hrow .r { flex: 1; padding-left: 16px; color: var(--text-tertiary); }
+.ok-text { color: var(--safe-text); }
+.fail-text { color: var(--danger-text); }
+
+/* ── Wordmark ── */
+.void-lockup { display: inline-flex; align-items: center; gap: 8px; }
+.void-mark { color: var(--accent-bg); flex: none; }
+.void-word {
+  font-family: var(--font-sans); font-size: 16px; font-weight: 600; line-height: 20px;
+  letter-spacing: -0.032em; color: var(--text-primary); margin-top: 1px;
+}
+.void-word .v { letter-spacing: -0.044em; }
diff --git a/crates/deepclean-app/frontend/css/tokens.css b/crates/deepclean-app/frontend/css/tokens.css
new file mode 100644
index 0000000..004c6d9
--- /dev/null
+++ b/crates/deepclean-app/frontend/css/tokens.css
@@ -0,0 +1,542 @@
+/* ============================================================================
+   VOID — COLOR SYSTEM v1
+   Neutral hue 254 / Accent hue 252, sampled from the app icon's glow.
+   Light = :root ; Dark = prefers-color-scheme AND [data-theme="dark"].
+   ============================================================================ */
+
+:root {
+  /* ---------- PRIMITIVE : NEUTRAL (OKLCH hue 254) ---------- */
+  --n-0: #FFFFFF;              /* oklch(1.000 0.000 254) */
+  --n-50: #FAFBFD;             /* oklch(0.988 0.003 254) */
+  --n-100: #F3F6F9;            /* oklch(0.972 0.005 254) */
+  --n-150: #E5E8ED;            /* oklch(0.930 0.007 254) */
+  --n-200: #D7DCE1;            /* oklch(0.892 0.009 254) */
+  --n-300: #C2C7CE;            /* oklch(0.828 0.011 254) */
+  --n-400: #A5ABB3;            /* oklch(0.740 0.013 254) */
+  --n-500: #868D95;            /* oklch(0.640 0.015 254) */
+  --n-600: #69717A;            /* oklch(0.545 0.017 254) */
+  --n-700: #515963;            /* oklch(0.462 0.019 254) */
+  --n-800: #363E48;            /* oklch(0.360 0.020 254) */
+  --n-850: #283039;            /* oklch(0.305 0.020 254) */
+  --n-900: #1C232C;            /* oklch(0.252 0.020 254) */
+  --n-950: #0F151D;            /* oklch(0.195 0.018 254) */
+  --n-975: #060B11;            /* oklch(0.148 0.016 254) */
+  --n-1000: #010306;           /* oklch(0.095 0.014 254) */
+
+  /* ---------- PRIMITIVE : GLOW  (accent, OKLCH hue 252) ---------- */
+  --glow-50: #EDF5FF;          /* oklch(0.968 0.016 252) */
+  --glow-100: #DBECFF;         /* oklch(0.935 0.032 252) */
+  --glow-200: #BEDCFF;         /* oklch(0.885 0.058 252) */
+  --glow-300: #95C7FF;         /* oklch(0.815 0.096 252) */
+  --glow-400: #6BB2FF;         /* oklch(0.748 0.133 252) */
+  --glow-500: #389BFF;         /* oklch(0.682 0.173 252) */
+  --glow-600: #007FE2;         /* oklch(0.592 0.177 252) */
+  --glow-700: #0064B5;         /* oklch(0.500 0.150 252) */
+  --glow-800: #004986;         /* oklch(0.402 0.121 252) */
+  --glow-900: #00315E;         /* oklch(0.312 0.094 252) */
+  --glow-950: #001E3E;         /* oklch(0.235 0.071 252) */
+
+  /* ---------- PRIMITIVE : SAFE (OKLCH hue 170) ---------- */
+  --safe-50: #E8FFF6;          /* oklch(0.980 0.026 170) */
+  --safe-100: #D0FCEB;         /* oklch(0.955 0.050 170) */
+  --safe-200: #77F8CF;         /* oklch(0.895 0.130 170) */
+  --safe-300: #6AECC4;         /* oklch(0.860 0.130 170) */
+  --safe-400: #54D8B1;         /* oklch(0.800 0.130 170) */
+  --safe-500: #39C39D;         /* oklch(0.735 0.130 170) */
+  --safe-600: #05AB86;         /* oklch(0.660 0.130 170) */
+  --safe-650: #009D7B;         /* oklch(0.620 0.123 170) */
+  --safe-700: #007D61;         /* oklch(0.525 0.104 170) */
+  --safe-800: #00634C;         /* oklch(0.445 0.088 170) */
+  --safe-900: #004332;         /* oklch(0.340 0.067 170) */
+  --safe-950: #002A1F;         /* oklch(0.255 0.051 170) */
+
+  /* ---------- PRIMITIVE : CAUTION (OKLCH hue 88) ---------- */
+  --caution-50: #FFF8E7;       /* oklch(0.980 0.023 88) */
+  --caution-100: #FFEFC8;      /* oklch(0.955 0.053 88) */
+  --caution-200: #FFD875;      /* oklch(0.895 0.125 88) */
+  --caution-300: #FEC92F;      /* oklch(0.860 0.165 88) */
+  --caution-400: #E9B600;      /* oklch(0.800 0.164 88) */
+  --caution-500: #D1A200;      /* oklch(0.735 0.150 88) */
+  --caution-600: #B58C00;      /* oklch(0.660 0.135 88) */
+  --caution-650: #A68000;      /* oklch(0.620 0.127 88) */
+  --caution-700: #846600;      /* oklch(0.525 0.107 88) */
+  --caution-800: #695000;      /* oklch(0.445 0.091 88) */
+  --caution-900: #473500;      /* oklch(0.340 0.070 88) */
+  --caution-950: #2D2100;      /* oklch(0.255 0.053 88) */
+
+  /* ---------- PRIMITIVE : DANGER (OKLCH hue 15) ---------- */
+  --danger-50: #FFF6F6;        /* oklch(0.980 0.010 15) */
+  --danger-100: #FFEAEB;       /* oklch(0.955 0.022 15) */
+  --danger-200: #FFCED1;       /* oklch(0.895 0.055 15) */
+  --danger-300: #FFBDC1;       /* oklch(0.860 0.076 15) */
+  --danger-400: #FF9EA6;       /* oklch(0.800 0.116 15) */
+  --danger-500: #FF7887;       /* oklch(0.735 0.164 15) */
+  --danger-600: #EF546C;       /* oklch(0.660 0.190 15) */
+  --danger-650: #E14660;       /* oklch(0.620 0.190 15) */
+  --danger-700: #BF2145;       /* oklch(0.525 0.190 15) */
+  --danger-800: #9E0032;       /* oklch(0.445 0.178 15) */
+  --danger-900: #6D0020;       /* oklch(0.340 0.136 15) */
+  --danger-950: #480012;       /* oklch(0.255 0.102 15) */
+
+  /* ============ SEMANTIC — LIGHT THEME ============ */
+  --surface-base: #FAFBFD;            
+  --surface-raised: #FFFFFF;          
+  --surface-sunken: #F3F6F9;          
+  --surface-overlay: #FFFFFF;         
+  --surface-inset: #E5E8ED;           
+  --surface-scrim: rgba(28, 35, 44, 0.45);
+
+  --border-subtle: #E5E8ED;            /* decorative hairline */
+  --border-default: #D7DCE1;           /* decorative separator */
+  --border-strong: #868D95;            /* >=3:1 — inputs, checkboxes, toggles */
+
+  --text-primary: #1C232C;            
+  --text-secondary: #515963;          
+  --text-tertiary: #69717A;           
+  --text-disabled: #A5ABB3;            /* WCAG 1.4.3 inactive-control exception */
+  --text-inverse: #FFFFFF;            
+  --text-on-accent: #FFFFFF;          
+  --text-code: #363E48;               
+  --text-link: #0064B5;               
+
+  --accent-bg: #0064B5;               
+  --accent-bg-hover: #004986;         
+  --accent-bg-active: #00315E;        
+  --accent-subtle: #EDF5FF;           
+  --accent-subtle-hover: #DBECFF;     
+  --accent-border: #BEDCFF;            /* decorative */
+  --accent-border-strong: #007FE2;     /* >=3:1 */
+  --accent-text: #0064B5;             
+  --accent-on-solid: #FFFFFF;         
+
+  --safe-text: #007D61;               
+  --safe-bg-subtle: #E8FFF6;          
+  --safe-bg-subtle-hover: #D0FCEB;    
+  --safe-border: #77F8CF;              /* decorative */
+  --safe-border-strong: #009D7B;       /* >=3:1 */
+  --safe-solid: #007D61;              
+  --safe-solid-hover: #00634C;        
+  --safe-solid-active: #004332;       
+  --safe-on-solid: #FFFFFF;           
+
+  --caution-text: #695000;            
+  --caution-bg-subtle: #FFF8E7;       
+  --caution-bg-subtle-hover: #FFEFC8; 
+  --caution-border: #FFD875;           /* decorative */
+  --caution-border-strong: #A68000;    /* >=3:1 */
+  --caution-solid: #695000;           
+  --caution-solid-hover: #473500;     
+  --caution-solid-active: #2D2100;    
+  --caution-on-solid: #FFFFFF;        
+
+  --danger-text: #6D0020;             
+  --danger-bg-subtle: #FFF6F6;        
+  --danger-bg-subtle-hover: #FFEAEB;  
+  --danger-border: #FFCED1;            /* decorative */
+  --danger-border-strong: #E14660;     /* >=3:1 */
+  --danger-solid: #BF2145;            
+  --danger-solid-hover: #9E0032;      
+  --danger-solid-active: #6D0020;     
+  --danger-on-solid: #FFFFFF;         
+
+  --success-text: #007D61;             /* alias of safe */
+  --success-bg-subtle: #E8FFF6;       
+  --success-solid: #007D61;           
+  --error-text: #6D0020;               /* alias of danger */
+  --error-bg-subtle: #FFF6F6;         
+  --error-solid: #BF2145;             
+  --warning-text: #695000;             /* alias of caution */
+  --warning-bg-subtle: #FFF8E7;       
+  --info-text: #0064B5;               
+  --info-bg-subtle: #EDF5FF;          
+
+  --state-hover: #F3F3F3;             
+  --state-active: #E8E9EA;            
+  --state-selected: #EDF5FF;          
+  --state-selected-hover: #DBECFF;    
+  --state-selected-border: #007FE2;   
+  --state-disabled-bg: #F3F6F9;       
+  --state-disabled-border: #D7DCE1;   
+  --state-disabled-text: #A5ABB3;     
+  --focus-ring: #007FE2;              
+  --focus-ring-offset: #FAFBFD;       
+  --skeleton-base: #E5E8ED;           
+  --skeleton-shine: #F3F6F9;          
+
+  --eco-rust: #BB5F00;                
+  --eco-java: #954D3F;                
+  --eco-homebrew: #777B18;            
+  --eco-node: #097200;                
+  --eco-go: #0095A1;                  
+  --eco-docker: #007397;              
+  --eco-python: #004E85;              
+  --eco-apple: #6D74D8;               
+  --eco-dotnet: #712DC3;              
+  --eco-jetbrains: #811288;           
+  --eco-system: #C63E86;              
+
+  --eco-rust-soft: #F7ECE0;           
+  --eco-java-soft: #F2EAE8;           
+  --eco-homebrew-soft: #EFEFE3;       
+  --eco-node-soft: #E1EEE0;           
+  --eco-go-soft: #E0F2F4;             
+  --eco-docker-soft: #E0EEF3;         
+  --eco-python-soft: #E0EAF0;         
+  --eco-apple-soft: #EDEEFA;          
+  --eco-dotnet-soft: #EEE6F8;         
+  --eco-jetbrains-soft: #F0E3F1;      
+  --eco-system-soft: #F8E8F0;         
+
+  --seq-1: #E5F2FF;                   
+  --seq-2: #C4E0FD;                   
+  --seq-3: #9AC7F8;                   
+  --seq-4: #67A9F0;                   
+  --seq-5: #2B86E4;                   
+  --seq-6: #0062BA;                   
+  --seq-7: #004085;                   
+  --chart-track: #E5E8ED;             
+  --chart-grid: #D7DCE1;              
+  --chart-axis: #C2C7CE;              
+  --chart-label: #69717A;             
+
+  --shadow-1: 0 1px 2px rgba(16,24,40,.06), 0 1px 3px rgba(16,24,40,.10);
+  --shadow-2: 0 4px 10px -3px rgba(16,24,40,.10), 0 2px 4px -2px rgba(16,24,40,.06);
+  --shadow-3: 0 16px 32px -8px rgba(16,24,40,.14), 0 4px 10px -4px rgba(16,24,40,.07);
+  --shadow-glow: 0 0 0 1px rgba(0,127,226,.28), 0 4px 16px -4px rgba(0,127,226,.28);
+  --shadow-focus: 0 0 0 2px #FAFBFD, 0 0 0 4px #007FE2;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) {
+    --surface-base: #060B11;            
+    --surface-raised: #0F151D;          
+    --surface-sunken: #010306;          
+    --surface-overlay: #1C232C;         
+    --surface-inset: #010306;           
+    --surface-scrim: rgba(1, 3, 6, 0.78);
+
+    --border-subtle: #1C232C;            /* decorative hairline */
+    --border-default: #283039;           /* decorative separator */
+    --border-strong: #69717A;            /* >=3:1 — inputs, checkboxes, toggles */
+
+    --text-primary: #F3F6F9;            
+    --text-secondary: #A5ABB3;          
+    --text-tertiary: #868D95;           
+    --text-disabled: #515963;            /* WCAG 1.4.3 inactive-control exception */
+    --text-inverse: #010306;            
+    --text-on-accent: #010306;          
+    --text-code: #D7DCE1;               
+    --text-link: #6BB2FF;               
+
+    --accent-bg: #389BFF;               
+    --accent-bg-hover: #6BB2FF;         
+    --accent-bg-active: #007FE2;        
+    --accent-subtle: #15283D;           
+    --accent-subtle-hover: #18324F;     
+    --accent-border: #1D436A;            /* decorative */
+    --accent-border-strong: #007FE2;     /* >=3:1 */
+    --accent-text: #6BB2FF;             
+    --accent-on-solid: #010306;         
+
+    --safe-text: #6AECC4;               
+    --safe-bg-subtle: #182A2E;          
+    --safe-bg-subtle-hover: #1C3334;    
+    --safe-border: #2C5A52;              /* decorative */
+    --safe-border-strong: #05AB86;       /* >=3:1 */
+    --safe-solid: #39C39D;              
+    --safe-solid-hover: #54D8B1;        
+    --safe-solid-active: #05AB86;       
+    --safe-on-solid: #010306;           
+
+    --caution-text: #E9B600;            
+    --caution-bg-subtle: #25251A;       
+    --caution-bg-subtle-hover: #2E2C19; 
+    --caution-border: #554914;           /* decorative */
+    --caution-border-strong: #B58C00;    /* >=3:1 */
+    --caution-solid: #E9B600;           
+    --caution-solid-hover: #FEC92F;     
+    --caution-solid-active: #D1A200;    
+    --caution-on-solid: #010306;        
+
+    --danger-text: #EF546C;             
+    --danger-bg-subtle: #251B25;        
+    --danger-bg-subtle-hover: #2E1E28;  
+    --danger-border: #572936;            /* decorative */
+    --danger-border-strong: #EF546C;     /* >=3:1 */
+    --danger-solid: #EF546C;            
+    --danger-solid-hover: #FF7887;      
+    --danger-solid-active: #E14660;     
+    --danger-on-solid: #010306;         
+
+    --success-text: #6AECC4;             /* alias of safe */
+    --success-bg-subtle: #182A2E;       
+    --success-solid: #39C39D;           
+    --error-text: #EF546C;               /* alias of danger */
+    --error-bg-subtle: #251B25;         
+    --error-solid: #EF546C;             
+    --warning-text: #E9B600;             /* alias of caution */
+    --warning-bg-subtle: #25251A;       
+    --info-text: #6BB2FF;               
+    --info-bg-subtle: #15283D;          
+
+    --state-hover: #1B2128;             
+    --state-active: #252A31;            
+    --state-selected: #15283D;          
+    --state-selected-hover: #18324F;    
+    --state-selected-border: #389BFF;   
+    --state-disabled-bg: #1C232C;       
+    --state-disabled-border: #283039;   
+    --state-disabled-text: #515963;     
+    --focus-ring: #6BB2FF;              
+    --focus-ring-offset: #060B11;       
+    --skeleton-base: #1C232C;           
+    --skeleton-shine: #283039;          
+
+    --eco-rust: #FF8505;                
+    --eco-java: #C37D6F;                
+    --eco-homebrew: #A0A645;            
+    --eco-node: #3AA831;                
+    --eco-go: #31C7D5;                  
+    --eco-docker: #009AC7;              
+    --eco-python: #2174B7;              
+    --eco-apple: #AAB4FF;               
+    --eco-dotnet: #A676F9;              
+    --eco-jetbrains: #A34AAA;           
+    --eco-system: #FF89C0;              
+
+    --eco-rust-soft: #352719;           
+    --eco-java-soft: #2C262A;           
+    --eco-homebrew-soft: #262C23;       
+    --eco-node-soft: #162D20;           
+    --eco-go-soft: #14313A;             
+    --eco-docker-soft: #0D2A38;         
+    --eco-python-soft: #122436;         
+    --eco-apple-soft: #282E41;          
+    --eco-dotnet-soft: #272540;         
+    --eco-jetbrains-soft: #271D34;      
+    --eco-system-soft: #352837;         
+
+    --seq-1: #17213D;                   
+    --seq-2: #233A6E;                   
+    --seq-3: #2959A2;                   
+    --seq-4: #2579D4;                   
+    --seq-5: #1C9DFD;                   
+    --seq-6: #6DC4FF;                   
+    --seq-7: #B7E6FF;                   
+    --chart-track: #1C232C;             
+    --chart-grid: #283039;              
+    --chart-axis: #515963;              
+    --chart-label: #868D95;             
+
+    --shadow-1: 0 1px 2px rgba(0,0,0,.72), inset 0 1px 0 rgba(255,255,255,.030);
+    --shadow-2: 0 6px 16px -6px rgba(0,0,0,.85), inset 0 1px 0 rgba(255,255,255,.040);
+    --shadow-3: 0 20px 44px -12px rgba(0,0,0,.92), inset 0 1px 0 rgba(255,255,255,.055);
+    --shadow-glow: 0 0 0 1px rgba(56,155,255,.32), 0 0 28px -6px rgba(56,155,255,.45);
+    --shadow-focus: 0 0 0 2px #060B11, 0 0 0 4px #6BB2FF;
+  }
+}
+
+:root[data-theme="dark"] {
+  --surface-base: #060B11;            
+  --surface-raised: #0F151D;          
+  --surface-sunken: #010306;          
+  --surface-overlay: #1C232C;         
+  --surface-inset: #010306;           
+  --surface-scrim: rgba(1, 3, 6, 0.78);
+
+  --border-subtle: #1C232C;            /* decorative hairline */
+  --border-default: #283039;           /* decorative separator */
+  --border-strong: #69717A;            /* >=3:1 — inputs, checkboxes, toggles */
+
+  --text-primary: #F3F6F9;            
+  --text-secondary: #A5ABB3;          
+  --text-tertiary: #868D95;           
+  --text-disabled: #515963;            /* WCAG 1.4.3 inactive-control exception */
+  --text-inverse: #010306;            
+  --text-on-accent: #010306;          
+  --text-code: #D7DCE1;               
+  --text-link: #6BB2FF;               
+
+  --accent-bg: #389BFF;               
+  --accent-bg-hover: #6BB2FF;         
+  --accent-bg-active: #007FE2;        
+  --accent-subtle: #15283D;           
+  --accent-subtle-hover: #18324F;     
+  --accent-border: #1D436A;            /* decorative */
+  --accent-border-strong: #007FE2;     /* >=3:1 */
+  --accent-text: #6BB2FF;             
+  --accent-on-solid: #010306;         
+
+  --safe-text: #6AECC4;               
+  --safe-bg-subtle: #182A2E;          
+  --safe-bg-subtle-hover: #1C3334;    
+  --safe-border: #2C5A52;              /* decorative */
+  --safe-border-strong: #05AB86;       /* >=3:1 */
+  --safe-solid: #39C39D;              
+  --safe-solid-hover: #54D8B1;        
+  --safe-solid-active: #05AB86;       
+  --safe-on-solid: #010306;           
+
+  --caution-text: #E9B600;            
+  --caution-bg-subtle: #25251A;       
+  --caution-bg-subtle-hover: #2E2C19; 
+  --caution-border: #554914;           /* decorative */
+  --caution-border-strong: #B58C00;    /* >=3:1 */
+  --caution-solid: #E9B600;           
+  --caution-solid-hover: #FEC92F;     
+  --caution-solid-active: #D1A200;    
+  --caution-on-solid: #010306;        
+
+  --danger-text: #EF546C;             
+  --danger-bg-subtle: #251B25;        
+  --danger-bg-subtle-hover: #2E1E28;  
+  --danger-border: #572936;            /* decorative */
+  --danger-border-strong: #EF546C;     /* >=3:1 */
+  --danger-solid: #EF546C;            
+  --danger-solid-hover: #FF7887;      
+  --danger-solid-active: #E14660;     
+  --danger-on-solid: #010306;         
+
+  --success-text: #6AECC4;             /* alias of safe */
+  --success-bg-subtle: #182A2E;       
+  --success-solid: #39C39D;           
+  --error-text: #EF546C;               /* alias of danger */
+  --error-bg-subtle: #251B25;         
+  --error-solid: #EF546C;             
+  --warning-text: #E9B600;             /* alias of caution */
+  --warning-bg-subtle: #25251A;       
+  --info-text: #6BB2FF;               
+  --info-bg-subtle: #15283D;          
+
+  --state-hover: #1B2128;             
+  --state-active: #252A31;            
+  --state-selected: #15283D;          
+  --state-selected-hover: #18324F;    
+  --state-selected-border: #389BFF;   
+  --state-disabled-bg: #1C232C;       
+  --state-disabled-border: #283039;   
+  --state-disabled-text: #515963;     
+  --focus-ring: #6BB2FF;              
+  --focus-ring-offset: #060B11;       
+  --skeleton-base: #1C232C;           
+  --skeleton-shine: #283039;          
+
+  --eco-rust: #FF8505;                
+  --eco-java: #C37D6F;                
+  --eco-homebrew: #A0A645;            
+  --eco-node: #3AA831;                
+  --eco-go: #31C7D5;                  
+  --eco-docker: #009AC7;              
+  --eco-python: #2174B7;              
+  --eco-apple: #AAB4FF;               
+  --eco-dotnet: #A676F9;              
+  --eco-jetbrains: #A34AAA;           
+  --eco-system: #FF89C0;              
+
+  --eco-rust-soft: #352719;           
+  --eco-java-soft: #2C262A;           
+  --eco-homebrew-soft: #262C23;       
+  --eco-node-soft: #162D20;           
+  --eco-go-soft: #14313A;             
+  --eco-docker-soft: #0D2A38;         
+  --eco-python-soft: #122436;         
+  --eco-apple-soft: #282E41;          
+  --eco-dotnet-soft: #272540;         
+  --eco-jetbrains-soft: #271D34;      
+  --eco-system-soft: #352837;         
+
+  --seq-1: #17213D;                   
+  --seq-2: #233A6E;                   
+  --seq-3: #2959A2;                   
+  --seq-4: #2579D4;                   
+  --seq-5: #1C9DFD;                   
+  --seq-6: #6DC4FF;                   
+  --seq-7: #B7E6FF;                   
+  --chart-track: #1C232C;             
+  --chart-grid: #283039;              
+  --chart-axis: #515963;              
+  --chart-label: #868D95;             
+
+  --shadow-1: 0 1px 2px rgba(0,0,0,.72), inset 0 1px 0 rgba(255,255,255,.030);
+  --shadow-2: 0 6px 16px -6px rgba(0,0,0,.85), inset 0 1px 0 rgba(255,255,255,.040);
+  --shadow-3: 0 20px 44px -12px rgba(0,0,0,.92), inset 0 1px 0 rgba(255,255,255,.055);
+  --shadow-glow: 0 0 0 1px rgba(56,155,255,.32), 0 0 28px -6px rgba(56,155,255,.45);
+  --shadow-focus: 0 0 0 2px #060B11, 0 0 0 4px #6BB2FF;
+}
+
+/* ============================================================================
+   NON-COLOR TOKENS — type, space, radius, motion, elevation.
+   ============================================================================ */
+
+:root {
+  /* Shipping app uses system faces only: the CSP forbids remote origins, and
+     a disk tool should not need the network to render. */
+  --font-sans: "Inter", -apple-system, BlinkMacSystemFont, "Segoe UI Variable Text",
+    "Segoe UI", "Noto Sans", Cantarell, Ubuntu, system-ui, sans-serif;
+  --font-mono: ui-monospace, "SF Mono", SFMono-Regular, "Cascadia Mono",
+    "Segoe UI Mono", "Roboto Mono", "DejaVu Sans Mono", Menlo, Consolas, monospace;
+
+  /* Space — base unit 4px */
+  --space-1: 4px;  --space-1-5: 6px; --space-2: 8px;  --space-2-5: 10px;
+  --space-3: 12px; --space-4: 16px;  --space-5: 20px; --space-6: 24px;
+  --space-8: 32px; --space-10: 40px; --space-12: 48px;
+
+  --pad-window-x: 16px;
+
+  /* Radius */
+  --radius-xs: 3px; --radius-sm: 5px; --radius-md: 7px;
+  --radius-lg: 10px; --radius-full: 999px;
+
+  /* Heights */
+  --row-h: 44px;
+  --row-h-compact: 32px;
+  --group-h: 36px;
+  --ctl-h-sm: 24px; --ctl-h-md: 30px; --ctl-h-lg: 36px;
+  --iconbtn: 28px;
+  --badge-h: 16px;
+  --header-h: 52px;
+  --toolbar-h: 40px;
+  --statusbar-h: 28px;
+  --colhead-h: 28px;
+  --summary-h: 64px;
+  --rail-w: 56px;
+  --drawer-w: 400px;
+  --checkbox: 14px;
+
+  /* Type scale */
+  --t-metric-lg: 32px/34px; --t-metric-md: 28px/30px; --t-metric-sm: 20px/24px;
+  --t-page-title: 18px/24px; --t-section-title: 13px/16px;
+  --t-body: 13px/18px; --t-body-sm: 12px/16px;
+  --t-label: 12px/16px; --t-caption: 11px/14px; --t-micro: 10px/12px;
+  --t-mono-sm: 12px/17px; --t-mono-xs: 11px/15px;
+
+  /* Motion */
+  --dur-1: 80ms; --dur-2: 120ms; --dur-3: 160ms; --dur-4: 220ms; --dur-5: 320ms;
+  --ease-out: cubic-bezier(0.16, 1, 0.30, 1);
+  --ease-in: cubic-bezier(0.40, 0, 1, 1);
+  --ease-standard: cubic-bezier(0.20, 0, 0, 1);
+  --ease-spring: cubic-bezier(0.34, 1.56, 0.64, 1);
+
+  --edge-highlight: none;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) {
+    /* On a near-black ground a drop shadow reads as nothing; a lit top edge
+       is what actually says "raised". */
+    --edge-highlight: inset 0 1px 0 rgb(255 255 255 / 0.055);
+  }
+}
+:root[data-theme="dark"] {
+  --edge-highlight: inset 0 1px 0 rgb(255 255 255 / 0.055);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  :root { --dur-1: 1ms; --dur-2: 1ms; --dur-3: 1ms; --dur-4: 1ms; --dur-5: 1ms; }
+  *, *::before, *::after {
+    animation-duration: 1ms !important;
+    animation-iteration-count: 1 !important;
+    transition-duration: 1ms !important;
+    scroll-behavior: auto !important;
+  }
+}
diff --git a/crates/deepclean-app/frontend/index.html b/crates/deepclean-app/frontend/index.html
index bba050d..a1e0c4c 100644
--- a/crates/deepclean-app/frontend/index.html
+++ b/crates/deepclean-app/frontend/index.html
@@ -4,773 +4,13 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Void</title>
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-    :root {
-      --bg: #0f1117;
-      --surface: #1a1d27;
-      --surface2: #242836;
-      --border: #2e3345;
-      --text: #e4e6f0;
-      --text-dim: #8b8fa3;
-      --accent: #6c8cff;
-      --accent-hover: #8ba4ff;
-      --safe: #4ade80;
-      --caution: #fbbf24;
-      --danger: #f87171;
-      --rust: #f97316;
-      --node: #22c55e;
-      --apple: #3b82f6;
-      --docker: #06b6d4;
-      --go: #8b5cf6;
-      --system: #ec4899;
-      --python: #3776ab;
-      --java: #e76f00;
-      --homebrew: #fbb040;
-      --jetbrains: #fe315d;
-      --dot_net: #512bd4;
-      --panel-width: 320px;
-    }
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", system-ui, sans-serif;
-      background: var(--bg);
-      color: var(--text);
-      min-height: 100vh;
-      overflow-x: hidden;
-    }
-
-    /* ---- Sticky header ---- */
-    header {
-      position: sticky;
-      top: 0;
-      z-index: 100;
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-      padding: 16px 24px;
-      border-bottom: 1px solid var(--border);
-      background: var(--surface);
-      backdrop-filter: blur(12px);
-    }
-    header h1 { font-size: 20px; font-weight: 600; letter-spacing: -0.3px; }
-    header .subtitle { color: var(--text-dim); font-size: 13px; margin-top: 2px; }
-    .actions { display: flex; gap: 10px; align-items: center; }
-    button {
-      padding: 8px 18px;
-      border: none;
-      border-radius: 8px;
-      font-size: 13px;
-      font-weight: 500;
-      cursor: pointer;
-      transition: all 0.15s;
-    }
-    .btn-primary { background: var(--accent); color: #fff; }
-    .btn-primary:hover { background: var(--accent-hover); }
-    .btn-primary:disabled { opacity: 0.5; cursor: not-allowed; }
-    .btn-danger {
-      background: rgba(248, 113, 113, 0.15);
-      color: var(--danger);
-      border: 1px solid rgba(248, 113, 113, 0.25);
-    }
-    .btn-danger:hover { background: rgba(248, 113, 113, 0.25); }
-    .btn-icon {
-      background: var(--surface2);
-      color: var(--text-dim);
-      border: 1px solid var(--border);
-      width: 36px;
-      height: 36px;
-      padding: 0;
-      display: flex;
-      align-items: center;
-      justify-content: center;
-      font-size: 18px;
-    }
-    .btn-icon:hover { border-color: var(--text-dim); color: var(--text); }
-    .btn-icon.active { border-color: var(--accent); color: var(--accent); }
-
-    .progress-bar {
-      position: sticky;
-      top: 65px;
-      z-index: 99;
-      height: 2px;
-      background: var(--border);
-      overflow: hidden;
-    }
-    .progress-bar.active::after {
-      content: '';
-      position: absolute;
-      height: 100%;
-      width: 30%;
-      background: var(--accent);
-      animation: slide 1.2s ease-in-out infinite;
-    }
-    @keyframes slide {
-      0% { left: -30%; }
-      100% { left: 100%; }
-    }
-
-    /* ---- Toolbar (filter + sort) ---- */
-    .toolbar {
-      position: sticky;
-      top: 67px;
-      z-index: 98;
-      display: flex;
-      gap: 8px;
-      padding: 10px 24px;
-      border-bottom: 1px solid var(--border);
-      background: var(--bg);
-      flex-wrap: wrap;
-      align-items: center;
-    }
-    .toolbar-separator {
-      width: 1px;
-      height: 20px;
-      background: var(--border);
-      margin: 0 4px;
-    }
-    .sort-label { font-size: 11px; color: var(--text-dim); margin-right: 2px; }
-    .chip {
-      padding: 4px 12px;
-      border-radius: 20px;
-      font-size: 12px;
-      background: var(--surface);
-      border: 1px solid var(--border);
-      color: var(--text-dim);
-      cursor: pointer;
-      transition: all 0.15s;
-      user-select: none;
-    }
-    .chip:hover { border-color: var(--text-dim); }
-    .chip.active {
-      background: rgba(108, 140, 255, 0.15);
-      border-color: var(--accent);
-      color: var(--accent);
-    }
-
-    /* ---- Main content area ---- */
-    .main-content {
-      display: flex;
-      min-height: calc(100vh - 67px);
-    }
-    .content-area {
-      flex: 1;
-      min-width: 0;
-    }
-
-    #status {
-      padding: 10px 24px;
-      font-size: 13px;
-      color: var(--text-dim);
-    }
-
-    .results { padding: 0 24px 24px; }
-    .item {
-      display: grid;
-      grid-template-columns: auto 1fr auto auto auto;
-      align-items: center;
-      gap: 14px;
-      padding: 10px 14px;
-      background: var(--surface);
-      border: 1px solid var(--border);
-      border-radius: 8px;
-      margin-bottom: 5px;
-      font-size: 13px;
-    }
-    .item:hover { border-color: var(--accent); }
-    .item input[type="checkbox"] { accent-color: var(--accent); width: 16px; height: 16px; }
-    .item .info { overflow: hidden; min-width: 0; }
-    .item .path {
-      font-family: "SF Mono", "Fira Code", monospace;
-      font-size: 12px;
-      color: var(--text);
-      overflow: hidden;
-      text-overflow: ellipsis;
-      white-space: nowrap;
-    }
-    .item .project { font-size: 11px; color: var(--text-dim); }
-
-    /* Path tooltip */
-    .tooltip {
-      position: fixed;
-      background: var(--surface2);
-      color: var(--text);
-      border: 1px solid var(--border);
-      border-radius: 6px;
-      padding: 6px 10px;
-      font-family: "SF Mono", "Fira Code", monospace;
-      font-size: 11px;
-      pointer-events: none;
-      z-index: 9999;
-      max-width: 500px;
-      word-break: break-all;
-      box-shadow: 0 4px 12px rgba(0,0,0,0.4);
-      opacity: 0;
-      transition: opacity 0.15s;
-    }
-    .tooltip.visible { opacity: 1; }
-    .item .size { font-weight: 600; white-space: nowrap; }
-    .risk-badge {
-      font-size: 10px;
-      padding: 2px 8px;
-      border-radius: 10px;
-      font-weight: 600;
-      text-transform: uppercase;
-    }
-    .risk-badge.safe { background: rgba(74, 222, 128, 0.12); color: var(--safe); }
-    .risk-badge.caution { background: rgba(251, 191, 36, 0.12); color: var(--caution); }
-    .risk-badge.danger { background: rgba(248, 113, 113, 0.12); color: var(--danger); }
-    .staleness { font-size: 11px; color: var(--text-dim); white-space: nowrap; }
-
-    .empty {
-      text-align: center;
-      padding: 60px 20px;
-      color: var(--text-dim);
-    }
-    .empty h2 { font-size: 18px; margin-bottom: 8px; color: var(--text); }
-
-    /* ---- Right side panel ---- */
-    .side-panel {
-      width: 0;
-      overflow: hidden;
-      border-left: 1px solid var(--border);
-      background: var(--surface);
-      transition: width 0.25s ease;
-      flex-shrink: 0;
-    }
-    .side-panel.open {
-      width: var(--panel-width);
-    }
-    .panel-inner {
-      width: var(--panel-width);
-      padding: 20px;
-      overflow-y: auto;
-      height: calc(100vh - 67px);
-      position: sticky;
-      top: 67px;
-    }
-    .panel-header {
-      display: flex;
-      align-items: center;
-      justify-content: space-between;
-      margin-bottom: 20px;
-    }
-    .panel-header h2 { font-size: 15px; font-weight: 600; }
-    .panel-close {
-      background: none;
-      border: none;
-      color: var(--text-dim);
-      font-size: 18px;
-      cursor: pointer;
-      padding: 4px;
-      line-height: 1;
-    }
-    .panel-close:hover { color: var(--text); }
-
-    /* Donut */
-    .donut-container {
-      position: relative;
-      width: 160px;
-      height: 160px;
-      margin: 0 auto 20px;
-    }
-    .donut-container svg { transform: rotate(-90deg); }
-    .donut-center {
-      position: absolute;
-      inset: 0;
-      display: flex;
-      flex-direction: column;
-      align-items: center;
-      justify-content: center;
-    }
-    .donut-center .total-size { font-size: 20px; font-weight: 700; }
-    .donut-center .total-label { font-size: 11px; color: var(--text-dim); margin-top: 2px; }
-
-    /* Bars */
-    .bar-chart { display: flex; flex-direction: column; gap: 8px; margin-bottom: 20px; }
-    .bar-row { display: flex; align-items: center; gap: 10px; }
-    .bar-label {
-      width: 60px;
-      font-size: 11px;
-      font-weight: 500;
-      text-align: right;
-      flex-shrink: 0;
-    }
-    .bar-track {
-      flex: 1;
-      height: 20px;
-      background: var(--surface2);
-      border-radius: 5px;
-      overflow: hidden;
-    }
-    .bar-fill {
-      height: 100%;
-      border-radius: 5px;
-      transition: width 0.5s ease;
-      min-width: 2px;
-    }
-    .bar-value {
-      width: 80px;
-      font-size: 11px;
-      color: var(--text-dim);
-      flex-shrink: 0;
-    }
-
-    /* Summary cards in panel */
-    .panel-cards {
-      display: grid;
-      grid-template-columns: 1fr 1fr;
-      gap: 8px;
-    }
-    .summary-card {
-      background: var(--surface2);
-      border: 1px solid var(--border);
-      border-radius: 8px;
-      padding: 12px;
-    }
-    .summary-card .label { font-size: 10px; color: var(--text-dim); text-transform: uppercase; letter-spacing: 0.5px; }
-    .summary-card .value { font-size: 18px; font-weight: 600; margin-top: 3px; }
-    .summary-card.full { grid-column: 1 / -1; }
-  </style>
+  <link rel="stylesheet" href="css/tokens.css">
+  <link rel="stylesheet" href="css/base.css">
+  <link rel="stylesheet" href="css/components.css">
+  <link rel="stylesheet" href="css/screens.css">
 </head>
 <body>
-  <header>
-    <div>
-      <h1>Void</h1>
-      <div class="subtitle">Developer disk space reclaimer</div>
-    </div>
-    <div class="actions">
-      <button class="btn-primary" id="scanBtn">Scan Now</button>
-      <button class="btn-danger" id="cleanBtn" style="display:none">Clean Selected</button>
-      <button class="btn-icon" id="panelToggle" title="Toggle stats panel">
-        <svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-          <rect x="3" y="3" width="7" height="7" rx="1"/><rect x="14" y="3" width="7" height="4" rx="1"/><rect x="14" y="10" width="7" height="11" rx="1"/><rect x="3" y="13" width="7" height="8" rx="1"/>
-        </svg>
-      </button>
-    </div>
-  </header>
-  <div class="progress-bar" id="progressBar"></div>
-
-  <div class="toolbar" id="toolbar" style="display:none">
-    <div class="chip active" data-filter="all">All</div>
-    <div class="chip" data-filter="rust">Rust</div>
-    <div class="chip" data-filter="node">Node.js</div>
-    <div class="chip" data-filter="apple">Apple</div>
-    <div class="chip" data-filter="docker">Docker</div>
-    <div class="chip" data-filter="go">Go</div>
-    <div class="chip" data-filter="system">System</div>
-    <div class="chip" data-filter="python">Python</div>
-    <div class="chip" data-filter="java">Java</div>
-    <div class="chip" data-filter="homebrew">Homebrew</div>
-    <div class="chip" data-filter="jet_brains">JetBrains</div>
-    <div class="chip" data-filter="dot_net">.NET</div>
-    <div class="toolbar-separator"></div>
-    <span class="sort-label">Sort:</span>
-    <div class="chip active" data-sort="size">Size</div>
-    <div class="chip" data-sort="last_changed">Last Changed</div>
-  </div>
-
-  <div class="main-content">
-    <div class="content-area">
-      <div id="status"></div>
-      <div class="results" id="results">
-        <div class="empty">
-          <h2>No scan results yet</h2>
-          <p>Click "Scan Now" to find cleanable artifacts on your system.</p>
-        </div>
-      </div>
-    </div>
-
-    <div class="side-panel" id="sidePanel">
-      <div class="panel-inner">
-        <div class="panel-header">
-          <h2>Stats</h2>
-          <button class="panel-close" id="panelClose">&times;</button>
-        </div>
-        <div id="panelDonut"></div>
-        <div id="panelBars" class="bar-chart"></div>
-        <div id="panelCards" class="panel-cards"></div>
-      </div>
-    </div>
-  </div>
-
-  <script>
-    const { invoke } = window.__TAURI__.core;
-    const { listen } = window.__TAURI__.event;
-
-    let items = [];
-    let selected = new Set();
-    let currentFilter = 'all';
-    let currentSort = 'size';
-    let scanning = false;
-    let panelOpen = false;
-
-    const ECO_COLORS = {
-      rust: '#f97316', node: '#22c55e', apple: '#3b82f6',
-      docker: '#06b6d4', go: '#8b5cf6', system: '#ec4899',
-      python: '#3776ab', java: '#e76f00', homebrew: '#fbb040',
-      jetbrains: '#fe315d', dot_net: '#512bd4'
-    };
-
-    window.__void_scan = startScan;
-
-    // ---- Button event listeners ----
-    document.getElementById('scanBtn').addEventListener('click', startScan);
-    document.getElementById('cleanBtn').addEventListener('click', executeClean);
-    document.getElementById('panelToggle').addEventListener('click', togglePanel);
-    document.getElementById('panelClose').addEventListener('click', togglePanel);
-
-    // ---- Filter & sort chip listeners ----
-    document.querySelectorAll('.chip[data-filter]').forEach(chip => {
-      chip.addEventListener('click', () => setFilter(chip.dataset.filter, chip));
-    });
-    document.querySelectorAll('.chip[data-sort]').forEach(chip => {
-      chip.addEventListener('click', () => setSort(chip.dataset.sort, chip));
-    });
-
-    // ---- Checkbox delegation (for dynamically rendered items) ----
-    document.getElementById('results').addEventListener('change', (e) => {
-      const cb = e.target.closest('input[type="checkbox"][data-item-id]');
-      if (cb) toggleSelect(cb.dataset.itemId, cb.checked);
-    });
-
-    function togglePanel() {
-      panelOpen = !panelOpen;
-      document.getElementById('sidePanel').classList.toggle('open', panelOpen);
-      document.getElementById('panelToggle').classList.toggle('active', panelOpen);
-      if (panelOpen && items.length > 0) updatePanel();
-    }
-
-    async function startScan() {
-      if (scanning) return;
-      scanning = true;
-      items = [];
-      selected.clear();
-      document.getElementById('scanBtn').disabled = true;
-      document.getElementById('scanBtn').textContent = 'Scanning...';
-      document.getElementById('cleanBtn').style.display = 'none';
-      document.getElementById('progressBar').classList.add('active');
-      document.getElementById('status').textContent = 'Starting scan...';
-      document.getElementById('results').innerHTML = '';
-      clearPanel();
-
-      try {
-        await invoke('start_scan');
-      } catch (e) {
-        document.getElementById('status').textContent = 'Error: ' + e;
-        scanning = false;
-        document.getElementById('scanBtn').disabled = false;
-        document.getElementById('scanBtn').textContent = 'Scan Now';
-        document.getElementById('progressBar').classList.remove('active');
-      }
-    }
-
-    listen('scan-event', (event) => {
-      const data = event.payload;
-      switch (data.type) {
-        case 'scanner_started': break;
-        case 'progress':
-          document.getElementById('status').textContent = data.message;
-          break;
-        case 'item_found':
-          items.push(data.item);
-          renderItems();
-          break;
-        case 'scan_complete':
-          scanning = false;
-          document.getElementById('scanBtn').disabled = false;
-          document.getElementById('scanBtn').textContent = 'Scan Now';
-          document.getElementById('progressBar').classList.remove('active');
-          updatePanel();
-          document.getElementById('status').textContent =
-            `Scan complete \u2014 found ${items.length} items` +
-            (data.summary.scan_duration_ms ? ` in ${(data.summary.scan_duration_ms / 1000).toFixed(1)}s` : '');
-          document.getElementById('toolbar').style.display = 'flex';
-          if (!panelOpen) togglePanel();
-          break;
-        case 'error':
-          console.error('Scan error:', data.message);
-          break;
-      }
-    });
-
-    listen('action-event', (event) => {
-      const data = event.payload;
-      switch (data.type) {
-        case 'started':
-          document.getElementById('status').textContent = `Cleaning: ${data.label}...`;
-          break;
-        case 'completed':
-          document.getElementById('status').textContent = `Cleaned ${formatBytes(data.bytes_freed)}`;
-          items = items.filter(i => i.id !== data.item_id);
-          selected.delete(data.item_id);
-          renderItems();
-          updatePanel();
-          break;
-        case 'failed':
-          document.getElementById('status').textContent = `Failed: ${data.error}`;
-          break;
-      }
-    });
-
-    function getEcoData() {
-      const ecosystems = {};
-      let totalBytes = 0;
-      for (const item of items) {
-        totalBytes += item.size_bytes;
-        const eco = item.ecosystem;
-        if (!ecosystems[eco]) ecosystems[eco] = { count: 0, bytes: 0 };
-        ecosystems[eco].count++;
-        ecosystems[eco].bytes += item.size_bytes;
-      }
-      return { ecosystems, totalBytes };
-    }
-
-    function clearPanel() {
-      document.getElementById('panelDonut').innerHTML = '';
-      document.getElementById('panelBars').innerHTML = '';
-      document.getElementById('panelCards').innerHTML = '';
-    }
-
-    function updatePanel() {
-      const { ecosystems, totalBytes } = getEcoData();
-
-      if (items.length === 0) {
-        clearPanel();
-        return;
-      }
-
-      const entries = Object.entries(ecosystems).sort((a, b) => b[1].bytes - a[1].bytes);
-      const maxBytes = entries.length > 0 ? entries[0][1].bytes : 1;
-
-      // Donut
-      const radius = 60;
-      const circumference = 2 * Math.PI * radius;
-      let offset = 0;
-      const segments = entries.map(([eco, data]) => {
-        const pct = totalBytes > 0 ? data.bytes / totalBytes : 0;
-        const len = pct * circumference;
-        const seg = `<circle cx="80" cy="80" r="${radius}" fill="none"
-          stroke="${ECO_COLORS[eco] || '#666'}" stroke-width="16"
-          stroke-dasharray="${len} ${circumference - len}"
-          stroke-dashoffset="${-offset}" />`;
-        offset += len;
-        return seg;
-      });
-
-      document.getElementById('panelDonut').innerHTML = `
-        <div class="donut-container">
-          <svg viewBox="0 0 160 160" width="160" height="160">
-            <circle cx="80" cy="80" r="${radius}" fill="none" stroke="var(--surface2)" stroke-width="16" />
-            ${segments.join('')}
-          </svg>
-          <div class="donut-center">
-            <div class="total-size">${formatBytes(totalBytes)}</div>
-            <div class="total-label">reclaimable</div>
-          </div>
-        </div>`;
-
-      // Bars
-      document.getElementById('panelBars').innerHTML = entries.map(([eco, data]) => {
-        const pct = maxBytes > 0 ? (data.bytes / maxBytes) * 100 : 0;
-        return `<div class="bar-row">
-          <div class="bar-label" style="color: ${ECO_COLORS[eco] || '#666'}">${ecoName(eco)}</div>
-          <div class="bar-track">
-            <div class="bar-fill" style="width: ${pct}%; background: ${ECO_COLORS[eco] || '#666'}; opacity: 0.8"></div>
-          </div>
-          <div class="bar-value">${formatBytes(data.bytes)} (${data.count})</div>
-        </div>`;
-      }).join('');
-
-      // Cards
-      document.getElementById('panelCards').innerHTML = `
-        <div class="summary-card full">
-          <div class="label">Total Reclaimable</div>
-          <div class="value">${formatBytes(totalBytes)}</div>
-        </div>
-        <div class="summary-card">
-          <div class="label">Items</div>
-          <div class="value">${items.length}</div>
-        </div>
-        <div class="summary-card">
-          <div class="label">Categories</div>
-          <div class="value">${entries.length}</div>
-        </div>
-        ${entries.map(([eco, data]) => `
-          <div class="summary-card">
-            <div class="label">${ecoName(eco)}</div>
-            <div class="value">${formatBytes(data.bytes)}</div>
-          </div>
-        `).join('')}
-      `;
-    }
-
-    function sortItems(arr) {
-      if (currentSort === 'last_changed') {
-        return arr.sort((a, b) => {
-          const aStale = a.days_stale ?? -1;
-          const bStale = b.days_stale ?? -1;
-          return bStale - aStale;
-        });
-      }
-      return arr.sort((a, b) => b.size_bytes - a.size_bytes);
-    }
-
-    function updateFilterChips() {
-      const ecosWithItems = new Set(items.map(i => i.ecosystem));
-      document.querySelectorAll('.chip[data-filter]').forEach(chip => {
-        const filter = chip.dataset.filter;
-        if (filter === 'all') return;
-        chip.style.display = ecosWithItems.has(filter) ? '' : 'none';
-      });
-      if (currentFilter !== 'all' && !ecosWithItems.has(currentFilter)) {
-        currentFilter = 'all';
-        document.querySelectorAll('.chip[data-filter]').forEach(c => c.classList.remove('active'));
-        document.querySelector('.chip[data-filter="all"]').classList.add('active');
-      }
-    }
-
-    function renderItems() {
-      updateFilterChips();
-      const filtered = currentFilter === 'all'
-        ? [...items]
-        : items.filter(i => i.ecosystem === currentFilter);
-
-      if (filtered.length === 0) {
-        document.getElementById('results').innerHTML = '<div class="empty"><p>No items match the current filter.</p></div>';
-        return;
-      }
-
-      sortItems(filtered);
-
-      document.getElementById('results').innerHTML = filtered.map(item => `
-        <div class="item">
-          <input type="checkbox" data-item-id="${item.id}" ${selected.has(item.id) ? 'checked' : ''}>
-          <div class="info">
-            <div class="path" data-fullpath="${escapeAttr(item.path)}">${shortenPath(item.path)}</div>
-            ${item.project_name ? `<div class="project">${escapeHtml(item.project_name)}</div>` : ''}
-          </div>
-          <div class="size">${item.size_display}</div>
-          <span class="risk-badge ${item.risk}">${item.risk}</span>
-          <span class="staleness">${item.days_stale != null ? item.days_stale + 'd ago' : ''}</span>
-        </div>
-      `).join('');
-
-      updateCleanBtn();
-    }
-
-    function updateCleanBtn() {
-      const btn = document.getElementById('cleanBtn');
-      if (selected.size === 0) {
-        btn.style.display = 'none';
-        return;
-      }
-      let totalBytes = 0;
-      for (const itemId of selected) {
-        const item = items.find(i => i.id === itemId);
-        if (item) totalBytes += item.size_bytes;
-      }
-      btn.style.display = 'inline-block';
-      btn.textContent = `Clean Selected (${formatBytes(totalBytes)})`;
-    }
-
-    function toggleSelect(id, checked) {
-      if (checked) selected.add(id);
-      else selected.delete(id);
-      renderItems();
-    }
-
-    function setFilter(filter, el) {
-      currentFilter = filter;
-      document.querySelectorAll('.chip[data-filter]').forEach(c => c.classList.remove('active'));
-      el.classList.add('active');
-      renderItems();
-    }
-
-    function setSort(sort, el) {
-      currentSort = sort;
-      document.querySelectorAll('.chip[data-sort]').forEach(c => c.classList.remove('active'));
-      el.classList.add('active');
-      renderItems();
-    }
-
-    async function executeClean() {
-      const selections = [];
-      for (const itemId of selected) {
-        const item = items.find(i => i.id === itemId);
-        if (item && item.available_actions.length > 0) {
-          selections.push({ item_id: itemId, action_id: item.available_actions[0].id });
-        }
-      }
-      if (selections.length === 0) return;
-      try {
-        await invoke('execute_clean', { request: { selections } });
-      } catch (e) {
-        document.getElementById('status').textContent = 'Error: ' + e;
-      }
-    }
-
-    function formatBytes(bytes) {
-      if (bytes === 0) return '0 B';
-      const k = 1000;
-      const sizes = ['B', 'KB', 'MB', 'GB', 'TB'];
-      const i = Math.floor(Math.log(bytes) / Math.log(k));
-      return (bytes / Math.pow(k, i)).toFixed(i > 0 ? 1 : 0) + ' ' + sizes[i];
-    }
-
-    function ecoName(eco) {
-      const names = { rust: 'Rust', node: 'Node.js', apple: 'Apple', docker: 'Docker', go: 'Go', system: 'System', python: 'Python', java: 'Java', homebrew: 'Homebrew', jet_brains: 'JetBrains', dot_net: '.NET' };
-      return names[eco] || eco;
-    }
-
-    function shortenPath(p) {
-      return p.replace(/^\/Users\/[^/]+/, '~');
-    }
-
-    function escapeAttr(s) {
-      return s.replace(/&/g,'&amp;').replace(/"/g,'&quot;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-    }
-
-    function escapeHtml(s) {
-      return s.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;');
-    }
-
-    // Tooltip
-    const tooltip = document.createElement('div');
-    tooltip.className = 'tooltip';
-    document.body.appendChild(tooltip);
-
-    let tooltipTimer = null;
-    document.addEventListener('mouseover', (e) => {
-      const pathEl = e.target.closest('.path[data-fullpath]');
-      if (!pathEl) return;
-      clearTimeout(tooltipTimer);
-      tooltipTimer = setTimeout(() => {
-        tooltip.textContent = pathEl.dataset.fullpath;
-        tooltip.classList.add('visible');
-        positionTooltip(pathEl);
-      }, 400);
-    });
-
-    document.addEventListener('mouseout', (e) => {
-      const pathEl = e.target.closest('.path[data-fullpath]');
-      if (pathEl) {
-        clearTimeout(tooltipTimer);
-        tooltip.classList.remove('visible');
-      }
-    });
-
-    function positionTooltip(anchor) {
-      const r = anchor.getBoundingClientRect();
-      tooltip.style.left = r.left + 'px';
-      tooltip.style.top = (r.bottom + 6) + 'px';
-      const tr = tooltip.getBoundingClientRect();
-      if (tr.right > window.innerWidth - 8) {
-        tooltip.style.left = Math.max(8, window.innerWidth - tr.width - 8) + 'px';
-      }
-      if (tr.bottom > window.innerHeight - 8) {
-        tooltip.style.top = (r.top - tr.height - 6) + 'px';
-      }
-    }
-  </script>
+  <div id="root" class="app"></div>
+  <script type="module" src="js/main.js"></script>
 </body>
 </html>
diff --git a/crates/deepclean-app/frontend/js/actions.js b/crates/deepclean-app/frontend/js/actions.js
new file mode 100644
index 0000000..7cb3ad2
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/actions.js
@@ -0,0 +1,244 @@
+/**
+ * Action selection and risk resolution.
+ *
+ * The central correctness fix in this design: `CleanableItem.risk` and
+ * `CleanAction.risk` are different fields and they disagree. `SimulatorDevices`
+ * is a Caution item holding a Danger action; `~/Downloads` is a Safe item
+ * holding `rm -rf`. The old UI displayed the item's risk and then silently ran
+ * `available_actions[0]`. Everything here works from the action that will
+ * actually run.
+ */
+
+const RISK_ORDER = { safe: 0, caution: 1, danger: 2 };
+
+export function riskRank(risk) {
+  return RISK_ORDER[risk] ?? 3;
+}
+
+/**
+ * Whether an action puts things in the Trash rather than destroying them.
+ *
+ * Exactly two methods in the whole product are recoverable, and they are both
+ * shell one-liners, so this is matched on the command text.
+ */
+export function isRecoverable(action) {
+  const m = action.method;
+  if (m.type !== 'command') return false;
+  const line = `${m.program} ${(m.args || []).join(' ')}`.toLowerCase();
+  return (
+    (line.includes('osascript') && line.includes('finder') && line.includes('delete')) ||
+    (line.includes('shell.application') && line.includes('namespace(10)'))
+  );
+}
+
+/**
+ * Pick the action that runs by default.
+ *
+ * Deterministic and stated, replacing `available_actions[0]`:
+ *   1. lowest risk           — keeps Trash over `rm -rf` for Downloads, and
+ *                              avoids the Caution simulator wipe
+ *   2. prefer Trash          — when the preference is on and risk ties
+ *   3. largest estimate      — for Rust this picks `Remove target/` over
+ *                              `cargo clean`, which is also the one that does
+ *                              not need cargo on PATH and the only one whose
+ *                              freed bytes are measurable
+ *   4. first listed
+ */
+export function defaultAction(item, preferTrash = true) {
+  const actions = item.available_actions || [];
+  if (!actions.length) return null;
+
+  return actions.reduce((best, candidate) => {
+    const a = riskRank(candidate.risk);
+    const b = riskRank(best.risk);
+    if (a !== b) return a < b ? candidate : best;
+
+    if (preferTrash) {
+      const ta = isRecoverable(candidate);
+      const tb = isRecoverable(best);
+      if (ta !== tb) return ta ? candidate : best;
+    }
+
+    const ea = candidate.estimated_savings_bytes || 0;
+    const eb = best.estimated_savings_bytes || 0;
+    if (ea !== eb) return ea > eb ? candidate : best;
+
+    return best;
+  }, actions[0]);
+}
+
+/** The action currently chosen for an item, honouring any manual override. */
+export function selectedAction(item, overrides, preferTrash = true) {
+  const overrideId = overrides.get(item.id);
+  if (overrideId) {
+    const found = (item.available_actions || []).find((a) => a.id === overrideId);
+    if (found) return found;
+  }
+  return defaultAction(item, preferTrash);
+}
+
+/** Risk to display for a row: the selected action's, never the item's. */
+export function effectiveRisk(item, overrides, preferTrash = true) {
+  const action = selectedAction(item, overrides, preferTrash);
+  return action ? action.risk : item.risk;
+}
+
+/**
+ * What the action physically does.
+ *
+ * For commands this is the literal command line. Void does not interpret what
+ * a command removes, so the command string is the only honest disclosure the
+ * user gets — which is exactly why it is shown rather than summarised.
+ */
+export function describeMethod(method) {
+  switch (method.type) {
+    case 'command': {
+      const line = [method.program, ...(method.args || [])].join(' ');
+      return { glyph: '▶', text: line, workingDir: method.working_dir || null };
+    }
+    case 'remove_dir':
+      return { glyph: '⌫', text: 'Delete directory recursively', workingDir: null };
+    case 'remove_file':
+      return { glyph: '⌫', text: 'Delete file', workingDir: null };
+    case 'docker_prune':
+      return { glyph: '▶', text: `docker ${method.prune_type} prune -f`, workingDir: null };
+    default:
+      return { glyph: '▶', text: 'Unknown action', workingDir: null };
+  }
+}
+
+/** Coarse grouping used by the confirmation dialog's "what will happen". */
+export function methodClass(method) {
+  if (method.type === 'remove_dir') return 'directories';
+  if (method.type === 'remove_file') return 'files';
+  return 'commands';
+}
+
+/**
+ * How much an action frees.
+ *
+ * `Frees unknown` rather than `0 B`: every npm/yarn/pnpm project-cache action,
+ * every Docker action and every per-project DerivedData action genuinely
+ * reports zero, and printing "0 B" would claim it frees nothing.
+ */
+export function outcomeText(action) {
+  const bytes = action.estimated_savings_bytes || 0;
+  const recoverable = isRecoverable(action);
+  return {
+    frees: bytes > 0 ? bytes : null,
+    recoverable,
+    note: recoverable ? 'Recoverable — moves to the Trash' : 'Not recoverable',
+  };
+}
+
+/**
+ * Safety claims that are true for a given method.
+ *
+ * `SafetyChecker` gates paths; for commands it now also scans arguments, but it
+ * still cannot know what an arbitrary command does internally. Saying so costs
+ * one line and is the difference between a tool a senior engineer trusts and
+ * one they don't.
+ */
+export function safetyLines(method) {
+  if (method.type === 'remove_dir' || method.type === 'remove_file') {
+    return [
+      { ok: true, text: 'Path is outside all protected locations' },
+      { ok: true, text: 'No credential files detected alongside it' },
+      { ok: true, text: 'Checked against your blocklist before deleting' },
+    ];
+  }
+  const lines = [];
+  if (method.type === 'command' && method.working_dir) {
+    lines.push({ ok: true, text: 'Working directory checked against protected paths' });
+  }
+  lines.push({ ok: true, text: 'Command arguments checked against protected paths' });
+  lines.push({
+    ok: false,
+    text: 'Void runs this command as-is; it does not inspect what the command deletes',
+  });
+  return lines;
+}
+
+/** Ecosystem display names, matching the backend's `display_name()`. */
+export const ECO_NAMES = {
+  rust: 'Rust',
+  node: 'Node.js',
+  apple: 'Apple / Xcode',
+  docker: 'Docker',
+  go: 'Go',
+  system: 'System',
+  python: 'Python',
+  java: 'Java / JVM',
+  homebrew: 'Homebrew',
+  jet_brains: 'JetBrains',
+  dot_net: '.NET',
+};
+
+export const ALL_ECOSYSTEMS = Object.keys(ECO_NAMES);
+
+/**
+ * A short label for what the artifact is, used as the row's primary name.
+ * Falls back to the path's last segment, because 15 kinds carry a synthetic
+ * `project_name` and several carry none at all.
+ */
+export function kindLabel(item) {
+  const KINDS = {
+    target_dir: 'target/',
+    cargo_registry: 'Cargo registry',
+    cargo_git_checkouts: 'Cargo git checkouts',
+    node_modules: 'node_modules/',
+    npm_cache: 'npm cache',
+    yarn_cache: 'Yarn cache',
+    pnpm_store: 'pnpm store',
+    derived_data: 'DerivedData/',
+    archives: 'Archives/',
+    device_support: 'Device support',
+    cocoa_pods_cache: 'CocoaPods cache',
+    swift_package_cache: 'Swift package cache',
+    dangling_images: 'Dangling images',
+    unused_images: 'Unused images',
+    build_cache: 'Build cache',
+    stopped_containers: 'Stopped containers',
+    unused_volumes: 'Unused volumes',
+    go_build_cache: 'Go build cache',
+    go_mod_cache: 'Go module cache',
+    go_test_cache: 'Go test cache',
+    downloads_dir: 'Downloads',
+    trash_bin: 'Trash',
+    system_logs: 'System logs',
+    pip_cache: 'pip cache',
+    pycache_dir: '__pycache__/',
+    venv_dir: '.venv/',
+    conda_cache: 'Conda cache',
+    gradle_cache: 'Gradle cache',
+    maven_repository: 'Maven repository',
+    gradle_build_dir: 'build/',
+    homebrew_cache: 'Homebrew cache',
+    jet_brains_cache: 'JetBrains cache',
+    nu_get_cache: 'NuGet cache',
+    dot_net_bin_obj: 'bin/ obj/',
+    simulator_devices: 'iOS Simulators',
+    simulator_caches: 'Simulator caches',
+  };
+  // A Downloads entry is a specific file the user recognises by name; the
+  // kind is the least useful thing to call it.
+  if (item.kind === 'downloads_dir') {
+    return String(item.path).replace(/\/$/, '').split('/').pop() || 'Downloads';
+  }
+  if (KINDS[item.kind]) return KINDS[item.kind];
+  const parts = String(item.path).replace(/\/$/, '').split('/');
+  return parts[parts.length - 1] || item.kind;
+}
+
+/**
+ * Secondary label, suppressed when it merely restates the kind.
+ * Several scanners set `project_name` to a synthetic label like
+ * "Trash (412 items)" or "Homebrew" rather than a real project.
+ */
+export function projectLabel(item) {
+  const name = item.project_name;
+  if (!name) return null;
+  const kind = kindLabel(item);
+  if (name === kind || name.startsWith(kind)) return null;
+  return name;
+}
diff --git a/crates/deepclean-app/frontend/js/api.js b/crates/deepclean-app/frontend/js/api.js
new file mode 100644
index 0000000..fd528f8
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/api.js
@@ -0,0 +1,21 @@
+/** Thin wrapper over the Tauri bridge, so screens never touch it directly. */
+
+const tauri = window.__TAURI__;
+export const invoke = tauri?.core?.invoke ?? (async () => { throw new Error('Tauri bridge unavailable'); });
+export const listen = tauri?.event?.listen ?? (async () => () => {});
+
+export const startScan = () => invoke('start_scan');
+export const executeClean = (selections) => invoke('execute_clean', { request: { selections } });
+export const cancelClean = () => invoke('cancel_clean');
+export const getConfig = () => invoke('get_config');
+export const updateConfig = (config) => invoke('update_config', { config });
+export const getConfigPath = () => invoke('get_config_path');
+export const revealItem = (itemId) => invoke('reveal_item', { itemId });
+export const getDiskUsage = () => invoke('get_disk_usage');
+export const getHistory = () => invoke('get_history');
+export const clearHistory = () => invoke('clear_history');
+export const takeStartupWarnings = () => invoke('take_startup_warnings');
+
+export const onScanEvent = (fn) => listen('scan-event', (e) => fn(e.payload));
+export const onActionEvent = (fn) => listen('action-event', (e) => fn(e.payload));
+export const onAppWarning = (fn) => listen('app-warning', (e) => fn(e.payload));
diff --git a/crates/deepclean-app/frontend/js/format.js b/crates/deepclean-app/frontend/js/format.js
new file mode 100644
index 0000000..f1047ae
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/format.js
@@ -0,0 +1,155 @@
+/**
+ * Number, size, path and time formatting.
+ *
+ * One formatter, used everywhere. The old UI had two that disagreed — Rust's
+ * `ByteSize` filled `size_display` for rows while JS used base 1000 for totals,
+ * so a row could read 1.5 GB while contributing 1.6 GB to the sum. Everything
+ * here derives from `size_bytes`; `size_display` is ignored.
+ */
+
+const UNITS = ['B', 'kB', 'MB', 'GB', 'TB', 'PB'];
+const numberFormat = new Intl.NumberFormat();
+
+/**
+ * Split a byte count into number and unit.
+ *
+ * Base 1000 with `kB`/`MB`/`GB` to match Finder's Get Info, which is the figure
+ * users compare against. Lowercase `k` is the correct SI prefix.
+ */
+export function splitBytes(bytes) {
+  if (bytes == null || !Number.isFinite(bytes) || bytes < 0) return { n: '—', u: '' };
+  if (bytes === 0) return { n: '0', u: 'B' };
+
+  let i = Math.min(Math.floor(Math.log10(bytes) / 3), UNITS.length - 1);
+  let v = bytes / Math.pow(1000, i);
+  // 999.97 kB should read as 1.0 MB, not 1000.0 kB.
+  if (v >= 999.95 && i < UNITS.length - 1) { i += 1; v = bytes / Math.pow(1000, i); }
+
+  // Keep the trailing .0 below 10: a consistent decimal position down a column
+  // matters more than brevity.
+  const decimals = i === 0 ? 0 : v < 100 ? 1 : 0;
+  return { n: v.toFixed(decimals), u: UNITS[i] };
+}
+
+/** Single-string form, for tooltips and clipboard. */
+export function formatBytes(bytes) {
+  const { n, u } = splitBytes(bytes);
+  return u ? `${n} ${u}` : n;
+}
+
+/** Magnitude tier driving the size cell's typographic weight. */
+export function magnitude(bytes) {
+  if (bytes == null || bytes === 0) return 'unknown';
+  if (bytes >= 1e10) return 'xl';
+  if (bytes >= 1e9) return 'lg';
+  if (bytes >= 1e8) return 'md';
+  return 'sm';
+}
+
+/** Size cell markup: two elements, never one string — a space is not tabular. */
+export function sizeCell(bytes) {
+  const mag = magnitude(bytes);
+  if (mag === 'unknown') {
+    return `<span class="size" data-mag="unknown"><span class="size-num">unknown</span></span>`;
+  }
+  const { n, u } = splitBytes(bytes);
+  return `<span class="size" data-mag="${mag}"><span class="size-num tnum">${n}</span><span class="size-unit">${u}</span></span>`;
+}
+
+/**
+ * Compact staleness for the 56px column: a sortable magnitude, not prose.
+ * Null renders as an em dash — an empty cell reads as a rendering bug.
+ */
+export function staleShort(days) {
+  if (days == null) return '—';
+  if (days === 0) return 'today';
+  if (days < 365) return `${days}d`;
+  return `${(days / 365).toFixed(1)}y`;
+}
+
+/** Verbose form for tooltips, where the user is deciding whether to delete. */
+export function staleLong(days, lastModified) {
+  if (days == null) return 'Modification time unavailable';
+  const rtf = new Intl.RelativeTimeFormat(undefined, { numeric: 'auto', style: 'long' });
+  let value, unit;
+  if (days < 30) { value = -days; unit = 'day'; }
+  else if (days < 365) { value = -Math.round(days / 30); unit = 'month'; }
+  else { value = -Math.round((days / 365) * 10) / 10; unit = 'year'; }
+
+  const relative = rtf.format(value, unit);
+  if (!lastModified) return relative;
+  const absolute = new Intl.DateTimeFormat(undefined, { dateStyle: 'medium' }).format(new Date(lastModified));
+  return `${relative} · ${absolute}`;
+}
+
+/** Exact counts always. Abbreviating in a tool that audits numbers is a lie. */
+export function count(n) {
+  return numberFormat.format(n);
+}
+
+export function percent(part, total) {
+  if (!total) return '0%';
+  const p = (part / total) * 100;
+  // A 40 MB ecosystem in a 30 GB scan rounds to 0%, which reads as "empty".
+  if (p > 0 && p < 1) return '<1%';
+  if (p > 99 && p < 100) return '>99%';
+  return `${Math.round(p)}%`;
+}
+
+export function duration(ms) {
+  if (ms < 1000) return `${Math.round(ms)}ms`;
+  if (ms < 60000) return `${(ms / 1000).toFixed(1)}s`;
+  const m = Math.floor(ms / 60000);
+  const s = Math.round((ms % 60000) / 1000);
+  return `${m}m ${String(s).padStart(2, '0')}s`;
+}
+
+export function relativeTime(iso) {
+  const then = new Date(iso).getTime();
+  const secs = Math.round((Date.now() - then) / 1000);
+  if (secs < 60) return 'just now';
+  if (secs < 3600) return `${Math.floor(secs / 60)}m ago`;
+  if (secs < 86400) return `${Math.floor(secs / 3600)}h ago`;
+  return new Intl.DateTimeFormat(undefined, { dateStyle: 'medium', timeStyle: 'short' }).format(then);
+}
+
+let HOME = '';
+export function setHome(path) { HOME = (path || '').replace(/\/$/, ''); }
+
+export function tildify(p) {
+  const n = String(p).replace(/\\/g, '/');
+  if (HOME && n.startsWith(HOME)) return `~${n.slice(HOME.length)}`;
+  return n.replace(/^\/(?:Users|home)\/[^/]+/, '~');
+}
+
+export function escapeHtml(s) {
+  return String(s).replace(/[&<>"']/g, (c) => (
+    { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]
+  ));
+}
+
+/**
+ * Render a path with four emphasis roles, so the meaningful segments read as
+ * names and the separators recede.
+ *
+ * The path is the item's identity — three `node_modules` rows are otherwise
+ * indistinguishable — so it lives permanently on the row, not behind a hover.
+ */
+export function pathHtml(fullPath, projectName) {
+  const p = tildify(fullPath);
+  const absolute = p.startsWith('/');
+  const segments = p.split('/').filter(Boolean);
+  if (!segments.length) return `<span class="path">${escapeHtml(p)}</span>`;
+
+  const leaf = segments.length - 1;
+  let project = projectName ? segments.lastIndexOf(projectName) : -1;
+  if (project === leaf) project = -1;
+
+  let out = absolute && segments[0] !== '~' ? '<span class="s-sep">/</span>' : '';
+  segments.forEach((seg, i) => {
+    const role = i === leaf ? 'leaf' : i === project ? 'project' : i === 0 ? 'root' : 'dim';
+    out += `<span class="s-${role}">${escapeHtml(seg)}</span>`;
+    if (i !== leaf) out += '<span class="s-sep">/</span>';
+  });
+  return `<span class="path" title="${escapeHtml(fullPath)}">${out}</span>`;
+}
diff --git a/crates/deepclean-app/frontend/js/icons.js b/crates/deepclean-app/frontend/js/icons.js
new file mode 100644
index 0000000..b33b280
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/icons.js
@@ -0,0 +1,74 @@
+/**
+ * Inline SVG sprite. 16x16 grid, 1.5 stroke, currentColor.
+ *
+ * Self-contained on purpose: the CSP forbids remote origins, and a disk tool
+ * should render identically with no network at all.
+ */
+
+const SPRITE = `
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false"><defs>
+<symbol id="i-scan" viewBox="0 0 16 16"><path d="M8 1.5a6.5 6.5 0 1 0 6.5 6.5"/><path d="M8 4.5a3.5 3.5 0 1 0 3.5 3.5"/><path d="M8 8 12.6 3.4"/><circle cx="8" cy="8" r=".95" data-solid/></symbol>
+<symbol id="i-stop" viewBox="0 0 16 16"><rect x="3.25" y="3.25" width="9.5" height="9.5" rx="1.75"/></symbol>
+<symbol id="i-trash" viewBox="0 0 16 16"><path d="M2.6 4.1h10.8"/><path d="M6.4 4.1V2.85a.85.85 0 0 1 .85-.85h1.5a.85.85 0 0 1 .85.85V4.1"/><path d="M12.4 4.1v8.55A1.35 1.35 0 0 1 11.05 14h-6.1A1.35 1.35 0 0 1 3.6 12.65V4.1"/><path d="M6.5 6.9v4.2M9.5 6.9v4.2"/></symbol>
+<symbol id="i-folder" viewBox="0 0 16 16"><path d="M2 4.35c0-.75.6-1.35 1.35-1.35h2.28c.42 0 .82.2 1.08.54l.83 1.09c.25.34.65.54 1.08.54h3.03c.75 0 1.35.6 1.35 1.35v5.13c0 .75-.6 1.35-1.35 1.35H3.35C2.6 13 2 12.4 2 11.65z"/></symbol>
+<symbol id="i-file" viewBox="0 0 16 16"><path d="M9.1 1.9H4.6a1.4 1.4 0 0 0-1.4 1.4v9.4A1.4 1.4 0 0 0 4.6 14.1h6.8a1.4 1.4 0 0 0 1.4-1.4V5.3z"/><path d="M9.1 1.9v2.4a1 1 0 0 0 1 1h2.7"/></symbol>
+<symbol id="i-warning" viewBox="0 0 16 16"><path d="M7.02 2.62a1.13 1.13 0 0 1 1.96 0l5.16 8.88c.44.76-.11 1.71-.98 1.71H2.84c-.87 0-1.42-.95-.98-1.71z"/><path d="M8 6.3v3.05"/><circle cx="8" cy="11.35" r=".78" data-solid/></symbol>
+<symbol id="i-shield-check" viewBox="0 0 16 16"><path d="M8 1.75 3.1 3.55v3.98c0 3.05 2.04 5.24 4.9 6.47 2.86-1.23 4.9-3.42 4.9-6.47V3.55z"/><path d="m5.95 7.85 1.45 1.45 2.85-2.85"/></symbol>
+<symbol id="i-clock" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.55V8l2.35 1.4"/></symbol>
+<symbol id="i-settings" viewBox="0 0 16 16"><path d="M13.3 4.7H7.4"/><path d="M9.3 11.3H3.3"/><circle cx="4.7" cy="4.7" r="2"/><circle cx="11.3" cy="11.3" r="2"/></symbol>
+<symbol id="i-chevron-right" viewBox="0 0 16 16"><path d="M6.25 3.5 10.75 8l-4.5 4.5"/></symbol>
+<symbol id="i-chevron-down" viewBox="0 0 16 16"><path d="M3.5 6.25 8 10.75l4.5-4.5"/></symbol>
+<symbol id="i-chevron-up" viewBox="0 0 16 16"><path d="M3.5 9.75 8 5.25l4.5 4.5"/></symbol>
+<symbol id="i-close" viewBox="0 0 16 16"><path d="M11.9 4.1 4.1 11.9M4.1 4.1l7.8 7.8"/></symbol>
+<symbol id="i-search" viewBox="0 0 16 16"><circle cx="7.2" cy="7.2" r="4.7"/><path d="m10.65 10.65 3 3"/></symbol>
+<symbol id="i-filter" viewBox="0 0 16 16"><path d="M2.5 3.5h11L9.2 8.6v4.32L6.8 14.1V8.6z"/></symbol>
+<symbol id="i-history" viewBox="0 0 16 16"><path d="M2.35 8a5.65 5.65 0 1 0 1.7-4.03"/><path d="M2.05 2.4v3h3"/><path d="M8 5.1V8l2.05 1.2"/></symbol>
+<symbol id="i-external-link" viewBox="0 0 16 16"><path d="M9.6 2.4h4v4"/><path d="M13.6 2.4 7.85 8.15"/><path d="M12.5 9.5v3a1.5 1.5 0 0 1-1.5 1.5H3.5A1.5 1.5 0 0 1 2 12.5V5a1.5 1.5 0 0 1 1.5-1.5h3"/></symbol>
+<symbol id="i-terminal" viewBox="0 0 16 16"><rect x="1.75" y="2.75" width="12.5" height="10.5" rx="1.9"/><path d="m4.85 6.3 1.85 1.9-1.85 1.9"/><path d="M8.7 10.35h2.65"/></symbol>
+<symbol id="i-hard-drive" viewBox="0 0 16 16"><rect x="1.75" y="4.25" width="12.5" height="7.5" rx="1.9"/><path d="M1.75 8.5h12.5"/><circle cx="11.7" cy="10.1" r=".8" data-solid/><path d="M4.15 10.1h3.1"/></symbol>
+<symbol id="i-check" viewBox="0 0 16 16"><path d="m3.4 8.4 3.05 3.05L12.6 5.3"/></symbol>
+<symbol id="i-minus" viewBox="0 0 16 16"><path d="M4 8h8"/></symbol>
+<symbol id="i-info" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 7.4v3.6"/><circle cx="8" cy="5.2" r=".8" data-solid/></symbol>
+<symbol id="i-more-horizontal" viewBox="0 0 16 16"><circle cx="3.4" cy="8" r="1.1" data-solid/><circle cx="8" cy="8" r="1.1" data-solid/><circle cx="12.6" cy="8" r="1.1" data-solid/></symbol>
+<symbol id="i-sidebar-toggle" viewBox="0 0 16 16"><rect x="1.75" y="2.75" width="12.5" height="10.5" rx="1.9"/><path d="M10 2.75v10.5"/></symbol>
+<symbol id="i-refresh" viewBox="0 0 16 16"><path d="M13.6 8a5.6 5.6 0 1 1-1.64-3.96"/><path d="M13.9 2.5v3h-3"/></symbol>
+<symbol id="i-copy" viewBox="0 0 16 16"><rect x="5.6" y="5.6" width="8.4" height="8.4" rx="1.6"/><path d="M11.1 5.6V3.6A1.6 1.6 0 0 0 9.5 2H3.6A1.6 1.6 0 0 0 2 3.6v5.9a1.6 1.6 0 0 0 1.6 1.6h2"/></symbol>
+<symbol id="i-plus" viewBox="0 0 16 16"><path d="M8 3.6v8.8M3.6 8h8.8"/></symbol>
+<symbol id="i-arrow-right" viewBox="0 0 16 16"><path d="M2.6 8h10.4M9.3 4.3 13 8l-3.7 3.7"/></symbol>
+<symbol id="i-lock" viewBox="0 0 16 16"><rect x="3.1" y="6.9" width="9.8" height="7.1" rx="1.7"/><path d="M5.4 6.9V4.9a2.6 2.6 0 0 1 5.2 0v2"/></symbol>
+<symbol id="i-alert-circle" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.9v3.6"/><circle cx="8" cy="11" r=".8" data-solid/></symbol>
+<symbol id="i-eco-rust" viewBox="0 0 16 16"><circle cx="8" cy="8" r="5.15"/><circle cx="8" cy="8" r="2.25"/><path d="M8 2.85V1.3M8 14.7v-1.55M13.15 8h1.55M1.3 8h1.55M11.65 4.35 12.75 3.25M3.25 12.75l1.1-1.1M11.65 11.65l1.1 1.1M3.25 3.25l1.1 1.1"/></symbol>
+<symbol id="i-eco-node" viewBox="0 0 16 16"><path d="M8 1.55 13.6 4.78v6.44L8 14.45 2.4 11.22V4.78z"/><path d="M6.2 6.3v3.05a1.35 1.35 0 0 1-2.05 1.16"/><path d="M11.85 6.9a2.6 2.6 0 0 0-1.55-.5c-.95 0-1.55.42-1.55 1.06 0 1.42 3.2.6 3.2 2.1 0 .68-.66 1.14-1.7 1.14a2.9 2.9 0 0 1-1.6-.48"/></symbol>
+<symbol id="i-eco-apple" viewBox="0 0 16 16"><path d="M8 4.85c-1.28-1.5-3.35-1.28-4.4.2-1.2 1.7-.63 4.45.95 6.35.63.75 1.4 1.5 2.25 1.2.5-.18.8-.5 1.2-.5s.7.32 1.2.5c.85.3 1.62-.45 2.25-1.2 1.58-1.9 2.15-4.65.95-6.35-1.05-1.48-3.12-1.7-4.4-.2z"/><path d="M8 4.85c.05-1.15.95-2.2 2.2-2.45"/></symbol>
+<symbol id="i-eco-docker" viewBox="0 0 16 16"><rect x="2.1" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="5.55" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="9" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="5.55" y="3.6" width="2.9" height="2.9" rx=".7"/><path d="M1.4 11.5c1.1 1.7 3.1 2.5 5.4 2.5 4 0 6.6-1.9 7.6-5.2"/></symbol>
+<symbol id="i-eco-go" viewBox="0 0 16 16"><path d="M1.2 6.3h3M.6 8h3.1M1.2 9.7h3"/><circle cx="9.9" cy="8" r="4.5"/><path d="M11.8 6.3a2.3 2.3 0 1 0 .35 2.55h-1.6"/></symbol>
+<symbol id="i-eco-system" viewBox="0 0 16 16"><rect x="4" y="4" width="8" height="8" rx="1.6"/><rect x="6.4" y="6.4" width="3.2" height="3.2" rx=".8"/><path d="M6.2 1.8v2.2M9.8 1.8v2.2M6.2 12v2.2M9.8 12v2.2M1.8 6.2h2.2M1.8 9.8h2.2M12 6.2h2.2M12 9.8h2.2"/></symbol>
+<symbol id="i-eco-python" viewBox="0 0 16 16"><path d="M4.4 3.3h4.1a2.35 2.35 0 0 1 0 4.7h-1a2.35 2.35 0 0 0 0 4.7h4.1"/><circle cx="5.35" cy="4.5" r=".62" data-solid/></symbol>
+<symbol id="i-eco-java" viewBox="0 0 16 16"><path d="M2.5 6.6h8.15v3.6a2.7 2.7 0 0 1-2.7 2.7H5.2a2.7 2.7 0 0 1-2.7-2.7z"/><path d="M10.65 7.5h1.15a1.75 1.75 0 0 1 0 3.5h-1.15"/><path d="M5.5 4.5c.65-.62.65-1.28 0-1.9M8.1 4.5c.65-.62.65-1.28 0-1.9"/></symbol>
+<symbol id="i-eco-homebrew" viewBox="0 0 16 16"><path d="M8 2.2c2.6 0 4.6 2 4.6 4.6 0 3.4-2.7 6.05-4.6 7.2C6.1 12.85 3.4 10.2 3.4 6.8 3.4 4.2 5.4 2.2 8 2.2z"/><path d="M8 5v6.6"/><path d="m5.6 6.5 2.4 1.85 2.4-1.85"/><path d="m5.8 9.2 2.2 1.7 2.2-1.7"/></symbol>
+<symbol id="i-eco-jet_brains" viewBox="0 0 16 16"><rect x="1.9" y="1.9" width="12.2" height="12.2" rx="2.3"/><path d="M4.4 11.9h4.3"/><path d="M9.5 4.5v3.35a1.75 1.75 0 0 1-3.4.55"/></symbol>
+<symbol id="i-eco-dot_net" viewBox="0 0 16 16"><circle cx="2.3" cy="12" r="1.15" data-solid/><path d="M5.6 12.5V3.5l5.6 9V3.5"/><path d="M12.9 3.5h1.6M13.7 3.5v9"/></symbol>
+</defs></svg>`;
+
+/** The brand mark: a ring with a gap. Also the scan indicator and tray glyph. */
+export const MARK = `<svg viewBox="0 0 20 20" width="20" height="20" aria-hidden="true">
+  <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5"
+    stroke-linecap="round" pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg>`;
+
+export function installSprite() {
+  document.body.insertAdjacentHTML('afterbegin', SPRITE);
+}
+
+/** Icon markup by id, e.g. icon('scan') or icon('trash', 'icon icon-sm'). */
+export function icon(id, cls = 'icon') {
+  return `<svg class="${cls}" aria-hidden="true"><use href="#i-${id}"/></svg>`;
+}
+
+/**
+ * Ecosystem glyph id. Keys match the backend's snake_case serialization —
+ * `jet_brains`, not `jetbrains`, which is what the old palette got wrong and
+ * why JetBrains rendered grey.
+ */
+export function ecoIcon(ecosystem, cls = 'icon icon-sm') {
+  return icon(`eco-${ecosystem}`, cls);
+}
diff --git a/crates/deepclean-app/frontend/js/main.js b/crates/deepclean-app/frontend/js/main.js
new file mode 100644
index 0000000..8a2263d
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/main.js
@@ -0,0 +1,698 @@
+import * as api from './api.js';
+import { icon, MARK } from './icons.js';
+import { setHome, escapeHtml, formatBytes, count } from './format.js';
+import {
+  store, visibleItems, selectionSummary, resetFilters, recordIssue, filtersActive,
+} from './store.js';
+import { selectedAction, effectiveRisk, ALL_ECOSYSTEMS, ECO_NAMES, kindLabel } from './actions.js';
+import { renderResults, groupsFor } from './screens/results.js';
+import { renderDrawer, renderConfirm, renderIssues, buildPlan } from './screens/panels.js';
+import { renderSettings } from './screens/settings.js';
+import { renderHistory } from './screens/history.js';
+import { installSprite } from './icons.js';
+
+const root = document.getElementById('root');
+
+/* ── Render ──────────────────────────────────────────────────────────── */
+
+function rail() {
+  const btn = (route, ico, label, key) => `
+    <button class="rail-btn" data-act="route" data-route="${route}"
+      ${store.route === route ? 'aria-current="page"' : ''} title="${label} (${key})" aria-label="${label}">
+      ${icon(ico, 'icon icon-lg')}
+      ${route === 'results' && store.items.length && store.route !== 'results' ? '<span class="rail-dot"></span>' : ''}
+    </button>`;
+
+  const disk = store.disk;
+  const reclaim = store.items.reduce((s, i) => s + (i.size_bytes || 0), 0);
+  const reclPct = disk?.total_bytes ? Math.min(100, (reclaim / disk.total_bytes) * 100) : 0;
+  const usedPct = disk?.total_bytes ? Math.min(100, (disk.used_bytes / disk.total_bytes) * 100) : 0;
+
+  return `<nav class="rail" aria-label="Sections">
+    <div class="rail-mark${store.scanning ? ' is-scanning' : ''}" aria-hidden="true">${MARK}</div>
+    ${btn('results', 'sidebar-toggle', 'Results', '⌘1')}
+    ${btn('history', 'history', 'History', '⌘2')}
+    ${btn('settings', 'settings', 'Settings', '⌘3')}
+    <span class="spacer"></span>
+    ${disk ? `<div class="rail-disk" title="${escapeHtml(formatBytes(disk.available_bytes))} free of ${escapeHtml(formatBytes(disk.total_bytes))}">
+      <span class="rail-disk-bar">
+        <i class="recl" style="height:${reclPct.toFixed(1)}%"></i>
+        <i class="used" style="height:${Math.max(0, usedPct - reclPct).toFixed(1)}%"></i>
+      </span>
+      <span class="t-overline tnum">${Math.round(usedPct)}%</span>
+    </div>` : ''}
+  </nav>`;
+}
+
+/* Scroll containers that must survive a re-render. Rendering replaces the
+   whole subtree, so without this a checkbox click would send the list back to
+   the top — the row you just ticked jumps out from under the cursor. */
+const SCROLLERS = ['#list', '.drawer-body', '.settings-scroll'];
+
+function captureScroll() {
+  const saved = new Map();
+  for (const sel of SCROLLERS) {
+    const el = root.querySelector(sel);
+    if (el && el.scrollTop) saved.set(sel, el.scrollTop);
+  }
+  return saved;
+}
+
+function restoreScroll(saved) {
+  for (const [sel, top] of saved) {
+    const el = root.querySelector(sel);
+    // A shorter list clamps this automatically.
+    if (el) el.scrollTop = top;
+  }
+}
+
+function render() {
+  const scroll = captureScroll();
+
+  const screen =
+    store.route === 'settings' ? renderSettings()
+    : store.route === 'history' ? renderHistory()
+    : renderResults();
+
+  const overlays =
+    (store.showConfirm ? renderConfirm(buildPlan()) : '') +
+    (store.showIssues ? renderIssues() : '') +
+    (store.toast ? toastHtml() : '');
+
+  root.className = `app${store.drawerId ? ' has-drawer' : ''}`;
+  root.innerHTML = `${rail()}<main class="screen">${screen}</main>${
+    store.route === 'results' && store.drawerId ? renderDrawer() : ''
+  }${overlays}`;
+
+  restoreScroll(scroll);
+
+  // Preserve the caret in the filter field across re-renders.
+  if (store.focusFilter) {
+    const input = document.getElementById('filterInput');
+    if (input) { input.focus(); input.setSelectionRange(input.value.length, input.value.length); }
+    store.focusFilter = false;
+  }
+}
+
+function toastHtml() {
+  return `<div class="toast">
+    <span class="t-body-sm" style="flex:1">${escapeHtml(store.toast.text)}</span>
+    ${store.toast.undo ? '<button class="btn btn-ghost btn-sm" data-act="undo-toast">Undo</button>' : ''}
+    <button class="iconbtn" style="width:22px;height:22px" data-act="dismiss-toast" aria-label="Dismiss">${icon('close', 'icon icon-sm')}</button>
+  </div>`;
+}
+
+/**
+ * Coalesced re-render.
+ *
+ * During a scan, items arrive faster than they can be read. The old UI rebuilt
+ * the entire list on every `item_found`, which is O(n^2) across a scan; this
+ * batches into an animation frame and caps the rate while streaming.
+ */
+let frame = 0;
+let lastPaint = 0;
+function scheduleRender() {
+  if (frame) return;
+  frame = requestAnimationFrame(() => {
+    frame = 0;
+    const now = performance.now();
+    if (store.scanning && now - lastPaint < 250) {
+      setTimeout(scheduleRender, 250 - (now - lastPaint));
+      return;
+    }
+    lastPaint = now;
+    render();
+  });
+}
+
+/** Send the list back to the top — for changes that replace what it contains. */
+function resetScroll() {
+  const el = root.querySelector('#list');
+  if (el) el.scrollTop = 0;
+}
+
+function toast(text, undo = null) {
+  store.toast = { text, undo };
+  scheduleRender();
+  clearTimeout(toast._t);
+  toast._t = setTimeout(() => { store.toast = null; scheduleRender(); }, 5000);
+}
+
+/* ── Config ──────────────────────────────────────────────────────────── */
+
+let saveTimer = 0;
+function saveConfig({ dirty = false } = {}) {
+  if (dirty) store.settingsDirty = true;
+  applyPreferences();
+  clearTimeout(saveTimer);
+  saveTimer = setTimeout(async () => {
+    try {
+      await api.updateConfig(store.config);
+      store.savedFlash = true;
+      scheduleRender();
+      setTimeout(() => { store.savedFlash = false; scheduleRender(); }, 1500);
+    } catch (err) {
+      toast(String(err));
+    }
+  }, 400);
+  scheduleRender();
+}
+
+function applyPreferences() {
+  const ui = store.config?.ui;
+  if (!ui) return;
+  const el = document.documentElement;
+  if (ui.theme === 'system') el.removeAttribute('data-theme');
+  else el.setAttribute('data-theme', ui.theme);
+  el.setAttribute('data-density', ui.density);
+}
+
+/* ── Scanning ────────────────────────────────────────────────────────── */
+
+async function startScan() {
+  if (store.scanning) return;
+  store.scanning = true;
+  store.hasScanned = true;
+  store.items = [];
+  store.selected.clear();
+  store.overrides.clear();
+  store.issues.clear();
+  store.deniedPaths.clear();
+  store.pathsScanned = 0;
+  store.lastResult = null;
+  store.clean = null;
+  store.scannerStatus = new Map(
+    (store.config?.enabled_ecosystems || ALL_ECOSYSTEMS).map((e) => [e, 'pending'])
+  );
+  store.settingsDirty = false;
+  render();
+
+  try {
+    await api.startScan();
+  } catch (err) {
+    store.scanning = false;
+    recordIssue(String(err));
+    scheduleRender();
+  }
+}
+
+function onScanEvent(ev) {
+  switch (ev.type) {
+    case 'scanner_started':
+      store.scannerStatus.set(ev.ecosystem, 'running');
+      break;
+    case 'scanner_completed':
+      store.scannerStatus.set(ev.ecosystem, { done: ev.items_found });
+      break;
+    case 'progress':
+      store.pathsScanned = ev.paths_scanned;
+      break;
+    case 'item_found':
+      store.items.push(ev.item);
+      break;
+    case 'permission_denied':
+      store.deniedPaths.add(String(ev.path));
+      break;
+    case 'error':
+      recordIssue(ev.message);
+      break;
+    case 'scan_complete':
+      store.scanning = false;
+      store.scanDurationMs = ev.summary?.scan_duration_ms || 0;
+      store.lastScanAt = new Date().toISOString();
+      for (const [eco, status] of store.scannerStatus) {
+        if (status !== 'pending' && typeof status !== 'object') {
+          store.scannerStatus.set(eco, { done: store.items.filter((i) => i.ecosystem === eco).length });
+        }
+      }
+      refreshDisk();
+      break;
+  }
+  scheduleRender();
+}
+
+async function refreshDisk() {
+  try { store.disk = await api.getDiskUsage(); } catch { store.disk = null; }
+  scheduleRender();
+}
+
+/* ── Cleaning ────────────────────────────────────────────────────────── */
+
+async function runClean(entries) {
+  const selections = entries.map(({ item, action }) => ({ item_id: item.id, action_id: action.id }));
+  if (!selections.length) return;
+
+  store.showConfirm = false;
+  store.clean = {
+    total: selections.length,
+    completed: 0,
+    failed: 0,
+    bytes: 0,
+    current: null,
+    states: new Map(entries.map(({ item }) => [item.id, { state: 'queued' }])),
+    startedAt: Date.now(),
+  };
+  render();
+
+  try {
+    await api.executeClean(selections);
+  } catch (err) {
+    store.clean = null;
+    toast(String(err));
+    scheduleRender();
+  }
+}
+
+function onActionEvent(ev) {
+  const c = store.clean;
+  if (!c) return;
+
+  switch (ev.type) {
+    case 'started': {
+      c.current = ev.label;
+      for (const [id, s] of c.states) {
+        if (s.state === 'queued' && !s.claimed) { s.state = 'active'; s.claimed = true; break; }
+        if (id) continue;
+      }
+      break;
+    }
+    case 'completed': {
+      const id = ev.item_id;
+      c.completed += 1;
+      c.bytes += ev.bytes_freed > 0 ? ev.bytes_freed : ev.estimated_bytes;
+      c.states.set(id, { state: 'done', claimed: true });
+      // Drop cleaned items so the list reflects reality without a rescan.
+      store.items = store.items.filter((i) => i.id !== id);
+      store.selected.delete(id);
+      break;
+    }
+    case 'failed': {
+      const id = ev.item_id;
+      const item = store.items.find((i) => i.id === id);
+      c.failed += 1;
+      c.states.set(id, {
+        state: 'failed',
+        claimed: true,
+        error: ev.error,
+        // The single most likely real failure: a GUI-launched app has a bare
+        // PATH, so `cargo`/`npm`/`go` may not resolve. Offer the direct
+        // filesystem action instead of making the user hunt for it.
+        canFallback: /was not found in PATH/.test(ev.error)
+          && (item?.available_actions || []).some((a) => a.method.type === 'remove_dir'),
+      });
+      break;
+    }
+    case 'batch_complete': {
+      store.lastResult = {
+        total: ev.total,
+        succeeded: ev.succeeded,
+        failed: ev.failed,
+        bytes_freed: ev.bytes_freed,
+        estimated: ev.estimated,
+        cancelled: ev.cancelled,
+        duration_ms: Date.now() - c.startedAt,
+      };
+      store.clean = null;
+      refreshHistory();
+      refreshDisk();
+      break;
+    }
+  }
+  scheduleRender();
+}
+
+async function refreshHistory() {
+  try { store.history = await api.getHistory(); } catch { /* history is best-effort */ }
+  scheduleRender();
+}
+
+/* ── Interaction ─────────────────────────────────────────────────────── */
+
+function itemsInOrder() {
+  return groupsFor(visibleItems()).flatMap((g) => (store.collapsed.has(g.key) ? [] : g.items));
+}
+
+function toggleSelect(id) {
+  if (store.selected.has(id)) store.selected.delete(id);
+  else store.selected.add(id);
+  scheduleRender();
+}
+
+async function pickFolder() {
+  const dialog = window.__TAURI__?.dialog;
+  if (!dialog?.open) {
+    toast('Folder picker unavailable in this build.');
+    return null;
+  }
+  const picked = await dialog.open({ directory: true, multiple: false });
+  return typeof picked === 'string' ? picked : null;
+}
+
+const ACTIONS = {
+  route: (el) => { store.route = el.dataset.route; if (store.route === 'history') refreshHistory(); scheduleRender(); },
+  'goto-settings': () => { store.route = 'settings'; scheduleRender(); },
+  'goto-results': () => { store.route = 'results'; scheduleRender(); },
+  'goto-history': () => { store.route = 'history'; refreshHistory(); scheduleRender(); },
+
+  scan: () => startScan(),
+  'rescan-now': () => { store.route = 'results'; startScan(); },
+
+  toggle: (el) => toggleSelect(el.dataset.id),
+  open: (el) => { store.drawerId = el.dataset.id; scheduleRender(); },
+  'close-drawer': () => { store.drawerId = null; scheduleRender(); },
+
+  'prev-item': () => moveDrawer(-1),
+  'next-item': () => moveDrawer(1),
+
+  'toggle-group': (el) => {
+    const key = el.dataset.group;
+    const group = groupsFor(visibleItems()).find((g) => String(g.key) === key);
+    if (!group) return;
+    const all = group.items.every((i) => store.selected.has(i.id));
+    for (const i of group.items) {
+      if (all) store.selected.delete(i.id);
+      else store.selected.add(i.id);
+    }
+    scheduleRender();
+  },
+  collapse: (el) => {
+    const key = el.dataset.group;
+    if (store.collapsed.has(key)) store.collapsed.delete(key);
+    else store.collapsed.add(key);
+    scheduleRender();
+  },
+  'expand-all': () => {
+    const keys = groupsFor(visibleItems()).map((g) => String(g.key));
+    if (store.collapsed.size) store.collapsed.clear();
+    else keys.forEach((k) => store.collapsed.add(k));
+    scheduleRender();
+  },
+
+  'select-safe': () => {
+    for (const item of visibleItems()) {
+      if (effectiveRisk(item, store.overrides, store.config?.ui?.prefer_trash) === 'safe') {
+        store.selected.add(item.id);
+      }
+    }
+    scheduleRender();
+  },
+  'clear-filters': () => { resetFilters(); resetScroll(); scheduleRender(); },
+  'clear-search': () => { store.filter = ''; resetScroll(); scheduleRender(); },
+
+  review: () => { store.showConfirm = true; scheduleRender(); },
+  'close-confirm': () => { store.showConfirm = false; scheduleRender(); },
+  'do-clean': () => runClean(buildPlan().entries),
+  'clean-one': (el) => {
+    const item = store.items.find((i) => i.id === el.dataset.id);
+    const action = item && selectedAction(item, store.overrides, store.config?.ui?.prefer_trash);
+    if (item && action) { store.drawerId = null; runClean([{ item, action }]); }
+  },
+  'cancel-clean': async () => { await api.cancelClean(); toast('Stopping after the current item…'); },
+  'dismiss-result': () => { store.lastResult = null; scheduleRender(); },
+
+  'toggle-trash': () => {
+    store.config.ui.prefer_trash = !store.config.ui.prefer_trash;
+    saveConfig();
+  },
+
+  'choose-action': (el) => {
+    store.overrides.set(el.dataset.id, el.dataset.action);
+    scheduleRender();
+  },
+  actions: (el) => { store.drawerId = el.dataset.id; scheduleRender(); },
+  fallback: (el) => {
+    const item = store.items.find((i) => i.id === el.dataset.id);
+    const alt = (item?.available_actions || []).find((a) => a.method.type === 'remove_dir');
+    if (item && alt) {
+      store.overrides.set(item.id, alt.id);
+      runClean([{ item, action: alt }]);
+    }
+  },
+
+  'copy-path': (el) => {
+    const item = store.items.find((i) => i.id === el.dataset.id);
+    if (item) { navigator.clipboard?.writeText(String(item.path)); toast('Path copied'); }
+  },
+  reveal: async (el) => {
+    try {
+      await api.revealItem(el.dataset.id);
+    } catch (err) {
+      toast(String(err));
+    }
+  },
+  'exclude-path': (el) => {
+    const item = store.items.find((i) => i.id === el.dataset.id);
+    if (!item) return;
+    const before = [...store.config.blocked_paths];
+    store.config.blocked_paths.push(item.path);
+    store.items = store.items.filter((i) => i.id !== item.id);
+    store.selected.delete(item.id);
+    store.drawerId = null;
+    saveConfig();
+    toast(`${kindLabel(item)} excluded`, () => {
+      store.config.blocked_paths = before;
+      store.items.push(item);
+      saveConfig();
+    });
+  },
+  'undo-toast': () => {
+    store.toast?.undo?.();
+    store.toast = null;
+    scheduleRender();
+  },
+  'dismiss-toast': () => { store.toast = null; scheduleRender(); },
+
+  'show-issues': () => { store.showIssues = true; scheduleRender(); },
+  'close-issues': () => { store.showIssues = false; scheduleRender(); },
+  'dismiss-banner': () => { store.deniedPaths.clear(); scheduleRender(); },
+  'copy-issues': () => {
+    const text = [...store.deniedPaths, ...store.issues.keys()].join('\n');
+    navigator.clipboard?.writeText(text);
+    toast('Copied');
+  },
+
+  density: () => {
+    const ui = store.config.ui;
+    ui.density = ui.density === 'compact' ? 'comfortable' : 'compact';
+    saveConfig();
+  },
+  group: () => {
+    const order = ['ecosystem', 'project', 'risk'];
+    const ui = store.config.ui;
+    ui.grouping = order[(order.indexOf(ui.grouping) + 1) % order.length];
+    store.collapsed.clear();
+    resetScroll();
+    saveConfig();
+  },
+  sort: () => {
+    const order = ['size', 'stale', 'name', 'risk'];
+    store.sort = order[(order.indexOf(store.sort) + 1) % order.length];
+    resetScroll();
+    scheduleRender();
+  },
+  filters: () => {
+    // Cycles the one filter that matters most without a popover: large items.
+    store.largeOnly = !store.largeOnly;
+    scheduleRender();
+  },
+
+  'settings-section': (el) => { store.settingsSection = el.dataset.section; scheduleRender(); },
+  'toggle-eco': (el) => {
+    const eco = el.dataset.eco;
+    const list = store.config.enabled_ecosystems;
+    const i = list.indexOf(eco);
+    if (i >= 0) list.splice(i, 1); else list.push(eco);
+    saveConfig({ dirty: true });
+  },
+  'eco-all': () => { store.config.enabled_ecosystems = [...ALL_ECOSYSTEMS]; saveConfig({ dirty: true }); },
+  'eco-none': () => { store.config.enabled_ecosystems = []; saveConfig({ dirty: true }); },
+  'toggle-ui': (el) => {
+    const key = el.dataset.key;
+    store.config.ui[key] = !store.config.ui[key];
+    saveConfig();
+  },
+  'set-ui': (el) => {
+    store.config.ui[el.dataset.key] = el.dataset.value;
+    saveConfig();
+  },
+  'add-scan-root': async () => {
+    const dir = await pickFolder();
+    if (dir) { store.config.scan_roots.push(dir); saveConfig({ dirty: true }); }
+  },
+  'add-blocked': async () => {
+    const dir = await pickFolder();
+    if (dir) { store.config.blocked_paths.push(dir); saveConfig(); }
+  },
+  'remove-path': (el) => {
+    const list = el.dataset.list;
+    store.config[list].splice(Number(el.dataset.index), 1);
+    saveConfig({ dirty: list === 'scan_roots' });
+  },
+  'restore-performance': () => {
+    const cores = navigator.hardwareConcurrency || 8;
+    Object.assign(store.config, {
+      walker_threads: Math.max(1, Math.floor(cores / 2)),
+      max_concurrent_analyses: 8,
+      cpu_threshold_percent: 70,
+    });
+    saveConfig();
+  },
+
+  'open-run': (el) => { store.openRunId = el.dataset.run; scheduleRender(); },
+  'close-run': () => { store.openRunId = null; scheduleRender(); },
+  'clear-history': async () => {
+    await api.clearHistory();
+    await refreshHistory();
+    toast('History cleared');
+  },
+
+  overflow: () => toast('Rescan with ⌘R · settings with ⌘,'),
+};
+
+root.addEventListener('click', (e) => {
+  const el = e.target.closest('[data-act]');
+  if (!el) return;
+  // Clicking the backdrop closes; a click that merely bubbled up to it from
+  // inside the panel does not. Checking the scrim itself rather than "is this
+  // a close action" matters: an X button contains an icon, so the click lands
+  // on the <svg> and never equals the button.
+  if (el.classList.contains('scrim') && e.target !== el) return;
+  const fn = ACTIONS[el.dataset.act];
+  if (fn) { e.preventDefault(); fn(el); }
+});
+
+root.addEventListener('input', (e) => {
+  const t = e.target;
+  if (t.id === 'filterInput') {
+    store.filter = t.value;
+    store.focusFilter = true;
+    resetScroll();
+    scheduleRender();
+    return;
+  }
+  if (t.id === 'confirmInput') {
+    const btn = document.getElementById('confirmBtn');
+    if (btn) btn.disabled = t.value !== 'delete';
+    return;
+  }
+  const key = t.dataset.cfg;
+  if (key) {
+    store.config[key] = Number(t.value);
+    saveConfig({ dirty: key === 'staleness_threshold_days' ? false : true });
+  }
+});
+
+function moveDrawer(delta) {
+  const order = itemsInOrder();
+  const i = order.findIndex((x) => x.id === store.drawerId);
+  const next = order[i + delta];
+  if (next) { store.drawerId = next.id; scheduleRender(); }
+}
+
+document.addEventListener('keydown', (e) => {
+  const mod = e.metaKey || e.ctrlKey;
+  const typing = /^(INPUT|TEXTAREA)$/.test(e.target.tagName);
+
+  if (mod && e.key === '1') { store.route = 'results'; scheduleRender(); return e.preventDefault(); }
+  if (mod && e.key === '2') { store.route = 'history'; refreshHistory(); scheduleRender(); return e.preventDefault(); }
+  if ((mod && e.key === '3') || (mod && e.key === ',')) { store.route = 'settings'; scheduleRender(); return e.preventDefault(); }
+  if (mod && e.key.toLowerCase() === 'r') { startScan(); return e.preventDefault(); }
+
+  if (e.key === 'Escape') {
+    if (store.showConfirm) store.showConfirm = false;
+    else if (store.showIssues) store.showIssues = false;
+    else if (store.openRunId) store.openRunId = null;
+    else if (store.drawerId) store.drawerId = null;
+    else if (typing) { store.filter = ''; e.target.blur(); }
+    else if (store.selected.size) store.selected.clear();
+    scheduleRender();
+    return;
+  }
+
+  if (store.route !== 'results') return;
+
+  if (mod && e.key === 'Enter' && store.selected.size) { store.showConfirm = true; scheduleRender(); return e.preventDefault(); }
+  if ((mod && e.key.toLowerCase() === 'f') || (!typing && e.key === '/')) {
+    e.preventDefault();
+    store.focusFilter = true;
+    scheduleRender();
+    return;
+  }
+  if (typing) return;
+
+  if (mod && e.key.toLowerCase() === 'a') {
+    e.preventDefault();
+    if (e.altKey) ACTIONS['select-safe']();
+    else if (e.shiftKey) { store.selected.clear(); scheduleRender(); }
+    else { visibleItems().forEach((i) => store.selected.add(i.id)); scheduleRender(); }
+    return;
+  }
+  if (mod && e.key.toLowerCase() === 'd') { e.preventDefault(); return ACTIONS.density(); }
+  if (mod && e.shiftKey && e.key.toLowerCase() === 'e') { e.preventDefault(); return ACTIONS['expand-all'](); }
+
+  const order = itemsInOrder();
+  if (!order.length) return;
+  const i = order.findIndex((x) => x.id === store.focusedId);
+
+  if (e.key === 'ArrowDown') { e.preventDefault(); store.focusedId = order[Math.min(order.length - 1, i + 1)]?.id ?? order[0].id; }
+  else if (e.key === 'ArrowUp') { e.preventDefault(); store.focusedId = order[Math.max(0, i - 1)]?.id ?? order[0].id; }
+  else if (e.key === ' ' && store.focusedId) { e.preventDefault(); toggleSelect(store.focusedId); return; }
+  else if (e.key === 'Enter' && store.focusedId) { e.preventDefault(); store.drawerId = store.focusedId; }
+  else if (e.altKey && store.drawerId && e.key === 'ArrowDown') { e.preventDefault(); return moveDrawer(1); }
+  else if (e.altKey && store.drawerId && e.key === 'ArrowUp') { e.preventDefault(); return moveDrawer(-1); }
+  else return;
+
+  scheduleRender();
+  document.querySelector('.item.is-focused')?.scrollIntoView({ block: 'nearest' });
+});
+
+/* ── Boot ────────────────────────────────────────────────────────────── */
+
+async function boot() {
+  installSprite();
+
+  const platform = navigator.userAgent.includes('Mac') ? 'macos'
+    : navigator.userAgent.includes('Win') ? 'windows' : 'linux';
+  document.documentElement.setAttribute('data-platform', platform);
+
+  try {
+    store.config = await api.getConfig();
+  } catch {
+    // Render something usable even if the bridge is unavailable.
+    store.config = {
+      scan_roots: [], blocked_paths: [], enabled_ecosystems: [...ALL_ECOSYSTEMS],
+      staleness_threshold_days: 30, cpu_threshold_percent: 70,
+      walker_threads: 4, max_concurrent_analyses: 8,
+      ui: {
+        theme: 'system', density: 'comfortable', grouping: 'ecosystem',
+        confirm_before_cleaning: true, prefer_trash: true,
+        launch_at_login: false, show_menu_bar_icon: true,
+      },
+    };
+  }
+  applyPreferences();
+
+  const firstRoot = store.config.scan_roots?.[0];
+  if (firstRoot) setHome(String(firstRoot).replace(/\/$/, ''));
+
+  try { store.configPath = await api.getConfigPath(); } catch { store.configPath = null; }
+
+  render();
+
+  api.onScanEvent(onScanEvent);
+  api.onActionEvent(onActionEvent);
+  api.onAppWarning((msg) => toast(String(msg)));
+
+  refreshDisk();
+  refreshHistory();
+
+  try {
+    const warnings = await api.takeStartupWarnings();
+    if (warnings.length) toast(warnings[0]);
+  } catch { /* nothing to report */ }
+
+  // The tray's "Scan Now" reaches in through this hook.
+  window.__void_scan = startScan;
+}
+
+boot();
diff --git a/crates/deepclean-app/frontend/js/screens/history.js b/crates/deepclean-app/frontend/js/screens/history.js
new file mode 100644
index 0000000..1557a5f
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/screens/history.js
@@ -0,0 +1,128 @@
+import { icon } from '../icons.js';
+import { formatBytes, splitBytes, count, duration, escapeHtml } from '../format.js';
+import { store } from '../store.js';
+import { ECO_NAMES } from '../actions.js';
+
+/** Bytes a run freed, measured where possible and estimated where not. */
+function runBytes(run) {
+  return run.items.reduce((sum, i) => {
+    if (i.outcome !== 'succeeded') return sum;
+    return sum + (i.bytes_freed > 0 ? i.bytes_freed : i.estimated_bytes);
+  }, 0);
+}
+
+function runIsEstimated(run) {
+  return run.items.some((i) => i.outcome === 'succeeded' && i.bytes_freed === 0 && i.estimated_bytes > 0);
+}
+
+function tally(run) {
+  const ok = run.items.filter((i) => i.outcome === 'succeeded').length;
+  const failed = run.items.length - ok;
+  return { ok, failed };
+}
+
+function detail(run) {
+  return `<div class="scrim" data-act="close-run">
+    <div class="modal" style="width:640px" role="dialog" aria-label="Run detail">
+      <div class="modal-head">
+        <div style="flex:1">
+          <div class="t-page-title">${escapeHtml(new Date(run.started_at).toLocaleString())}</div>
+          <div class="t-body-sm dim tnum">${formatBytes(runBytes(run))} freed · ${count(run.items.length)} items · ${duration(run.duration_ms)}</div>
+        </div>
+        <button class="iconbtn" data-act="close-run" aria-label="Close">${icon('close')}</button>
+      </div>
+      <div class="modal-body">
+        ${run.items.map((i) => `<div class="attn-item" style="border-bottom:1px solid var(--border-subtle)">
+          <div class="row1">
+            ${i.outcome === 'succeeded'
+              ? `<span style="color:var(--safe-text);display:flex">${icon('check', 'icon icon-sm')}</span>`
+              : `<span style="color:var(--danger-text);display:flex">${icon('alert-circle', 'icon icon-sm')}</span>`}
+            <span class="lbl">${escapeHtml(i.action_label)}</span>
+            <span class="amt">${i.outcome === 'succeeded'
+              ? formatBytes(i.bytes_freed > 0 ? i.bytes_freed : i.estimated_bytes) : '—'}</span>
+          </div>
+          <div class="t-mono-xs dim">${escapeHtml(String(i.path))}</div>
+          <div class="cmdline" style="margin-top:4px">${escapeHtml(i.method_summary)}</div>
+          ${i.outcome === 'failed'
+            ? `<div class="error-plate" style="margin-top:6px;max-width:none">${escapeHtml(i.error)}</div>` : ''}
+        </div>`).join('')}
+      </div>
+      <div class="modal-foot">
+        <span class="spacer"></span>
+        <button class="btn btn-secondary" data-act="close-run">Close</button>
+      </div>
+    </div>
+  </div>`;
+}
+
+export function renderHistory() {
+  const h = store.history;
+  if (!h) return '<div class="state"><div class="title">Loading history…</div></div>';
+
+  const runs = h.runs || [];
+  const total = splitBytes(h.total_bytes);
+  const last30 = splitBytes(h.bytes_last_30_days);
+
+  // The only chart in the product, because reclaimed-over-time is the one
+  // thing here that is genuinely a time series.
+  const recent = runs.slice(0, 24).reverse();
+  const max = recent.reduce((m, r) => Math.max(m, runBytes(r)), 1);
+
+  const body = runs.length ? `
+    <div class="stattiles">
+      <div class="stattile"><span class="k t-overline">All time</span><span class="t-metric-sm tnum">${total.n} ${total.u}</span></div>
+      <div class="stattile"><span class="k t-overline">Last 30 days</span><span class="t-metric-sm tnum">${last30.n} ${last30.u}</span></div>
+      <div class="stattile"><span class="k t-overline">Runs</span><span class="t-metric-sm tnum">${count(h.run_count)}</span></div>
+    </div>
+    <div style="padding:20px var(--pad-window-x) 14px">
+      <div class="t-overline dim" style="margin-bottom:10px">Reclaimed per run</div>
+      <div class="spark">${recent.map((r) => {
+        const pct = Math.max(2, (runBytes(r) / max) * 100);
+        return `<i class="${pct > 70 ? 'hi' : ''}" style="height:${pct.toFixed(1)}%" title="${escapeHtml(formatBytes(runBytes(r)))}"></i>`;
+      }).join('')}</div>
+    </div>
+    <div class="tablehead">
+      <span class="t-caption" style="width:150px">Date</span>
+      <span class="t-caption" style="width:60px;text-align:right">Items</span>
+      <span class="t-caption" style="width:90px;text-align:right">Freed</span>
+      <span class="t-caption" style="flex:1;padding-left:16px">Result</span>
+      <span class="col-chev"></span>
+    </div>
+    <div class="listwrap"><div class="list">
+      ${runs.map((r) => {
+        const t = tally(r);
+        return `<div class="hrow" data-act="open-run" data-run="${r.id}">
+          <span class="d t-body">${escapeHtml(new Date(r.started_at).toLocaleString(undefined, { dateStyle: 'medium', timeStyle: 'short' }))}</span>
+          <span class="n t-body-sm">${count(r.items.length)}</span>
+          <span class="f t-body">${formatBytes(runBytes(r))}${runIsEstimated(r) ? '*' : ''}</span>
+          <span class="r t-body-sm">
+            <span class="ok-text">${count(t.ok)} ok</span>${t.failed ? ` · <span class="fail-text">${count(t.failed)} failed</span>` : ''}
+          </span>
+          <span class="col-chev dim">${icon('chevron-right', 'icon icon-sm')}</span>
+        </div>`;
+      }).join('')}
+    </div></div>`
+  : `<div class="listwrap"><div class="list"><div class="state">
+      ${icon('history', 'glyph icon icon-xl')}
+      <div class="title">No cleans yet</div>
+      <div class="body">Space you reclaim will show up here, with the exact command that freed it.</div>
+      <div class="actions"><button class="btn btn-secondary" data-act="goto-results">Go to results</button></div>
+    </div></div></div>`;
+
+  return `
+    <div class="cmdbar">
+      <div class="cmdbar-titles">
+        <div class="t-section-title" style="font-size:15px">History</div>
+        <div class="t-caption sub tnum">${count(h.run_count)} run${h.run_count === 1 ? '' : 's'} · ${formatBytes(h.total_bytes)} reclaimed</div>
+      </div>
+      <div class="cmdbar-actions">
+        ${runs.length ? `<button class="btn btn-ghost btn-sm" data-act="clear-history">Clear history</button>` : ''}
+      </div>
+    </div>
+    ${body}
+    <div class="statusbar t-caption">
+      <span>${runs.some(runIsEstimated) ? '* includes estimates — commands cannot report what they removed' : 'Kept locally, alongside your settings'}</span>
+      <span class="spacer"></span>
+    </div>
+    ${store.openRunId ? detail(runs.find((r) => r.id === store.openRunId) || { items: [], started_at: new Date().toISOString(), duration_ms: 0 }) : ''}`;
+}
diff --git a/crates/deepclean-app/frontend/js/screens/panels.js b/crates/deepclean-app/frontend/js/screens/panels.js
new file mode 100644
index 0000000..56095b8
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/screens/panels.js
@@ -0,0 +1,260 @@
+import { icon, ecoIcon } from '../icons.js';
+import { sizeCell, staleLong, formatBytes, escapeHtml, count, pathHtml } from '../format.js';
+import { store } from '../store.js';
+import {
+  selectedAction, describeMethod, outcomeText, safetyLines, kindLabel,
+  ECO_NAMES, isRecoverable, methodClass, riskRank, effectiveRisk, projectLabel,
+} from '../actions.js';
+
+/* ── Detail drawer ───────────────────────────────────────────────────── */
+
+function actionOption(item, action, chosen) {
+  const method = describeMethod(action.method);
+  const outcome = outcomeText(action);
+  const isDefault = chosen && !store.overrides.has(item.id);
+
+  return `<button class="action-opt" data-act="choose-action" data-id="${item.id}" data-action="${action.id}">
+    <span class="radio${chosen ? ' is-on' : ''}"></span>
+    <span class="body">
+      <span class="row1">
+        <span class="lbl">${escapeHtml(action.label)}</span>
+        ${action.risk !== 'safe'
+          ? `<span class="badge badge-${action.risk}">${icon(action.risk === 'danger' ? 'alert-circle' : 'warning')} ${action.risk}</span>`
+          : `<span class="badge badge-safe">${icon('check')} safe</span>`}
+        ${isDefault ? '<span class="badge badge-neutral">default</span>' : ''}
+      </span>
+      <span class="desc">${escapeHtml(action.description)}</span>
+      <span class="cmdline">${escapeHtml(method.glyph)} ${escapeHtml(method.text)}${
+        method.workingDir ? `<br>in ${escapeHtml(String(method.workingDir))}` : ''}</span>
+      <span class="outcome">Frees ${outcome.frees ? formatBytes(outcome.frees) : 'unknown'} ·
+        <span class="${outcome.recoverable ? 'recoverable' : ''}">${outcome.note}</span></span>
+    </span>
+  </button>`;
+}
+
+export function renderDrawer() {
+  const item = store.items.find((i) => i.id === store.drawerId);
+  if (!item) return '';
+
+  const chosen = selectedAction(item, store.overrides, store.config?.ui?.prefer_trash);
+  const actions = item.available_actions || [];
+  const method = chosen ? chosen.method : null;
+
+  return `<div class="drawer-scrim" data-act="close-drawer"></div>
+  <aside class="drawer" role="dialog" aria-label="Item detail">
+    <div class="drawer-head">
+      <button class="iconbtn" data-act="prev-item" title="Previous item (⌥↑)">${icon('chevron-up')}</button>
+      <button class="iconbtn" data-act="next-item" title="Next item (⌥↓)">${icon('chevron-down')}</button>
+      <span class="spacer"></span>
+      <button class="iconbtn" data-act="close-drawer" aria-label="Close">${icon('close')}</button>
+    </div>
+    <div class="drawer-body">
+      <div class="drawer-sect" style="padding-bottom:12px">
+        <div style="display:flex;align-items:center;gap:6px;color:var(--eco-${item.ecosystem})">
+          ${ecoIcon(item.ecosystem)}<span class="t-body-sm">${escapeHtml(ECO_NAMES[item.ecosystem] || item.ecosystem)}</span>
+        </div>
+        <div class="t-page-title" style="margin-top:4px">${escapeHtml(kindLabel(item))}</div>
+        ${projectLabel(item) ? `<div class="t-body-sm dim">${escapeHtml(projectLabel(item))}</div>` : ''}
+      </div>
+
+      <div class="drawer-sect">
+        <div class="pathplate">${escapeHtml(String(item.path))}</div>
+        <div style="display:flex;gap:8px;margin-top:8px">
+          <button class="btn btn-secondary btn-sm" data-act="copy-path" data-id="${item.id}">${icon('copy', 'icon icon-sm')}Copy</button>
+          <button class="btn btn-secondary btn-sm" data-act="reveal" data-id="${item.id}">${icon('external-link', 'icon icon-sm')}Reveal</button>
+        </div>
+      </div>
+
+      <div class="drawer-sect">
+        <dl class="facts t-body-sm">
+          <dt>Size</dt><dd>${item.size_bytes ? formatBytes(item.size_bytes) : 'unknown'}</dd>
+          <dt>Last modified</dt><dd>${escapeHtml(staleLong(item.days_stale, item.last_modified))}</dd>
+          <dt>Kind</dt><dd>${escapeHtml(item.kind)}</dd>
+          ${item.project_root ? `<dt>Project</dt><dd class="t-mono-sm">${escapeHtml(String(item.project_root))}</dd>` : ''}
+        </dl>
+      </div>
+
+      <div class="drawer-sect">
+        <div class="t-overline">Choose an action</div>
+        ${actions.length > 6 ? `<div class="t-caption dim" style="margin-bottom:8px">${count(actions.length)} actions available</div>` : ''}
+        <div style="${actions.length > 6 ? 'max-height:320px;overflow-y:auto' : ''}">
+          ${actions.map((a) => actionOption(item, a, chosen && a.id === chosen.id)).join('')
+            || '<div class="t-body-sm dim">No actions available for this item.</div>'}
+        </div>
+      </div>
+
+      ${method ? `<div class="drawer-sect">
+        <div class="t-overline">Safety</div>
+        ${safetyLines(method).map((l) => `<div class="safety-line ${l.ok ? 'ok' : 'warn'}">
+          ${icon(l.ok ? 'check' : 'warning')}<span>${escapeHtml(l.text)}</span></div>`).join('')}
+      </div>` : ''}
+    </div>
+    <div class="drawer-foot">
+      <button class="btn btn-secondary" style="flex:1" data-act="exclude-path" data-id="${item.id}">Exclude this path</button>
+      <button class="btn btn-primary" style="flex:1" data-act="clean-one" data-id="${item.id}">Clean this item</button>
+    </div>
+  </aside>`;
+}
+
+/* ── Pre-clean confirmation ──────────────────────────────────────────── */
+
+/** Everything the modal needs, derived from the current selection. */
+export function buildPlan() {
+  const preferTrash = store.config?.ui?.prefer_trash ?? true;
+  const entries = [];
+
+  for (const id of store.selected) {
+    const item = store.items.find((i) => i.id === id);
+    if (!item) continue;
+    const action = selectedAction(item, store.overrides, preferTrash);
+    if (!action) continue;
+    entries.push({ item, action });
+  }
+
+  const effects = { directories: 0, files: 0, commands: 0 };
+  const bytes = { directories: 0, files: 0, commands: 0 };
+  let trashed = 0;
+  let trashedBytes = 0;
+  let estimated = 0;
+  let hasDanger = false;
+
+  for (const { item, action } of entries) {
+    if (isRecoverable(action)) {
+      trashed += 1;
+      trashedBytes += item.size_bytes || 0;
+    } else {
+      const k = methodClass(action.method);
+      effects[k] += 1;
+      bytes[k] += item.size_bytes || 0;
+    }
+    estimated += item.size_bytes || 0;
+    if (action.risk === 'danger') hasDanger = true;
+  }
+
+  // Safe items are counted, never listed. Listing fifteen safe node_modules
+  // deletions trains people to scroll past the dialog.
+  const attention = entries
+    .filter(({ action }) => action.risk !== 'safe')
+    .sort((a, b) => riskRank(b.action.risk) - riskRank(a.action.risk));
+
+  return { entries, effects, bytes, trashed, trashedBytes, estimated, hasDanger, attention };
+}
+
+export function renderConfirm(plan) {
+  const rows = [];
+  if (plan.effects.directories) {
+    rows.push({ ico: 'trash', txt: `${count(plan.effects.directories)} director${plan.effects.directories === 1 ? 'y' : 'ies'} deleted permanently`, amt: plan.bytes.directories });
+  }
+  if (plan.effects.files) {
+    rows.push({ ico: 'file', txt: `${count(plan.effects.files)} file${plan.effects.files === 1 ? '' : 's'} deleted permanently`, amt: plan.bytes.files });
+  }
+  if (plan.effects.commands) {
+    rows.push({ ico: 'terminal', txt: `${count(plan.effects.commands)} command${plan.effects.commands === 1 ? '' : 's'} run`, amt: plan.bytes.commands });
+  }
+  if (plan.trashed) {
+    rows.push({ ico: 'refresh', txt: `${count(plan.trashed)} item${plan.trashed === 1 ? '' : 's'} moved to the Trash`, amt: plan.trashedBytes });
+  }
+
+  return `<div class="scrim" data-act="close-confirm">
+    <div class="modal" role="dialog" aria-modal="true" aria-label="Confirm clean">
+      <div class="modal-head">
+        <div style="flex:1">
+          <div class="t-page-title">Clean ${count(plan.entries.length)} item${plan.entries.length === 1 ? '' : 's'}</div>
+          <div class="t-body-sm dim tnum">${formatBytes(plan.estimated)} estimated</div>
+        </div>
+        <button class="iconbtn" data-act="close-confirm" aria-label="Close">${icon('close')}</button>
+      </div>
+
+      <div class="modal-body">
+        <div class="t-overline dim" style="margin-bottom:6px">What will happen</div>
+        ${rows.map((r) => `<div class="effect-row">
+          ${icon(r.ico)}<span class="txt t-body">${escapeHtml(r.txt)}</span>
+          <span class="amt t-body-sm tnum">${formatBytes(r.amt)}</span></div>`).join('')}
+
+        ${plan.attention.length ? `
+          <div class="t-overline" style="color:var(--caution-text);margin:20px 0 8px;display:flex;align-items:center;gap:6px">
+            ${icon('warning', 'icon icon-sm')} Needs your attention
+          </div>
+          <div class="attn-card">
+            ${plan.attention.map(({ item, action }) => {
+              const m = describeMethod(action.method);
+              return `<div class="attn-item">
+                <div class="row1">
+                  <span class="badge badge-${action.risk}">${icon(action.risk === 'danger' ? 'alert-circle' : 'warning')} ${action.risk}</span>
+                  <span class="lbl">${escapeHtml(action.label)}</span>
+                  <span class="amt">${item.size_bytes ? formatBytes(item.size_bytes) : 'unknown'}</span>
+                </div>
+                <div class="t-mono-xs dim">${escapeHtml(String(item.path))}</div>
+                ${action.method.type === 'command' || action.method.type === 'docker_prune'
+                  ? `<div class="cmdline" style="margin-top:4px">${escapeHtml(m.glyph)} ${escapeHtml(m.text)}</div>`
+                  : `<div class="t-body-sm dim" style="margin-top:3px">${escapeHtml(action.description)}</div>`}
+              </div>`;
+            }).join('')}
+          </div>` : ''}
+
+        <p class="t-body-sm dim" style="margin-top:16px">
+          Deletions and commands bypass the Trash and cannot be undone.</p>
+
+        ${plan.hasDanger ? `
+          <div style="margin-top:14px">
+            <div class="t-label" style="color:var(--text-primary);margin-bottom:6px">
+              Type <code class="t-mono-sm" style="color:var(--danger-text)">delete</code> to confirm</div>
+            <input class="input" id="confirmInput" style="width:220px;font-family:var(--font-mono)" spellcheck="false" autocomplete="off">
+          </div>` : ''}
+      </div>
+
+      <div class="modal-foot">
+        <span data-act="toggle-trash" style="display:flex;align-items:center;gap:8px">
+          <span class="cb" aria-checked="${store.config?.ui?.prefer_trash ? 'true' : 'false'}" role="checkbox">
+            ${icon('check', 'icon icon-check')}${icon('minus', 'icon icon-mixed')}</span>
+          <span class="t-body-sm" style="color:var(--text-secondary)">Prefer Trash where available</span>
+        </span>
+        <span class="spacer"></span>
+        <button class="btn btn-secondary" data-act="close-confirm">Cancel</button>
+        <button class="btn btn-danger" id="confirmBtn" data-act="do-clean" ${plan.hasDanger ? 'disabled' : ''}>
+          Clean ${count(plan.entries.length)} item${plan.entries.length === 1 ? '' : 's'}</button>
+      </div>
+    </div>
+  </div>`;
+}
+
+/* ── Issues sheet ────────────────────────────────────────────────────── */
+
+export function renderIssues() {
+  const entries = [...store.issues.entries()];
+  const denied = [...store.deniedPaths];
+
+  return `<div class="scrim" data-act="close-issues">
+    <div class="modal" style="width:520px" role="dialog" aria-label="Scan issues">
+      <div class="modal-head">
+        <div style="flex:1">
+          <div class="t-page-title">Scan issues</div>
+          <div class="t-body-sm dim">Problems Void hit while walking your disk.</div>
+        </div>
+        <button class="iconbtn" data-act="close-issues" aria-label="Close">${icon('close')}</button>
+      </div>
+      <div class="modal-body">
+        ${denied.length ? `
+          <div class="t-overline dim" style="margin-bottom:8px">Could not be read (${count(denied.length)})</div>
+          <p class="t-body-sm" style="color:var(--text-secondary);margin-bottom:10px">
+            Whatever these hold is missing from your results. On macOS, granting Full Disk Access
+            in System Settings → Privacy &amp; Security usually fixes it.</p>
+          <div class="error-plate" style="max-width:none;margin-bottom:16px">${denied.map(escapeHtml).join('\n')}</div>
+        ` : ''}
+        ${entries.length ? `
+          <div class="t-overline dim" style="margin-bottom:8px">Errors</div>
+          ${entries.map(([msg, n]) => `<div style="display:flex;gap:8px;align-items:flex-start;margin-bottom:8px">
+            <span class="t-mono-xs" style="flex:1;color:var(--text-secondary);word-break:break-all">${escapeHtml(msg)}</span>
+            ${n > 1 ? `<span class="countpill tnum">×${count(n)}</span>` : ''}
+          </div>`).join('')}
+        ` : ''}
+        ${!denied.length && !entries.length ? '<div class="t-body-sm dim">No issues recorded.</div>' : ''}
+      </div>
+      <div class="modal-foot">
+        <button class="btn btn-secondary btn-sm" data-act="copy-issues">Copy all</button>
+        <span class="spacer"></span>
+        <button class="btn btn-secondary" data-act="close-issues">Close</button>
+      </div>
+    </div>
+  </div>`;
+}
diff --git a/crates/deepclean-app/frontend/js/screens/results.js b/crates/deepclean-app/frontend/js/screens/results.js
new file mode 100644
index 0000000..e8b2f5f
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/screens/results.js
@@ -0,0 +1,408 @@
+import { icon, ecoIcon } from '../icons.js';
+import {
+  sizeCell, staleShort, pathHtml, count, percent, formatBytes,
+  escapeHtml, relativeTime, duration, splitBytes,
+} from '../format.js';
+import {
+  store, visibleItems, selectionSummary, totalBytes, filtersActive,
+  ecosystemsPresent, issueCount,
+} from '../store.js';
+import {
+  selectedAction, effectiveRisk, kindLabel, projectLabel, ECO_NAMES, riskRank, isRecoverable,
+} from '../actions.js';
+
+/* ── Shared bits ─────────────────────────────────────────────────────── */
+
+function checkbox(state) {
+  return `<span class="cb" aria-checked="${state}" role="checkbox" tabindex="-1">
+    ${icon('check', 'icon icon-check')}${icon('minus', 'icon icon-mixed')}</span>`;
+}
+
+/**
+ * Risk badge. Safe is deliberately silent: roughly 80% of real items are Safe,
+ * and a badge on 80% of rows is texture rather than signal. Absence is the
+ * encoding, and the risk edge still carries it.
+ */
+function riskBadge(risk) {
+  if (risk === 'caution') return `<span class="badge badge-caution">${icon('warning')} caution</span>`;
+  if (risk === 'danger') return `<span class="badge badge-danger">${icon('alert-circle')} danger</span>`;
+  return '';
+}
+
+function groupsFor(items) {
+  const mode = store.config?.ui?.grouping ?? 'ecosystem';
+  const buckets = new Map();
+
+  for (const item of items) {
+    let key, label;
+    if (mode === 'risk') {
+      key = effectiveRisk(item, store.overrides, store.config?.ui?.prefer_trash);
+      label = key.charAt(0).toUpperCase() + key.slice(1);
+    } else if (mode === 'project') {
+      key = item.project_root || '__global__';
+      label = item.project_root ? String(item.project_root).split('/').pop() : 'Global caches';
+    } else {
+      key = item.ecosystem;
+      label = ECO_NAMES[key] || key;
+    }
+    if (!buckets.has(key)) buckets.set(key, { key, label, items: [], bytes: 0, eco: item.ecosystem });
+    const b = buckets.get(key);
+    b.items.push(item);
+    b.bytes += item.size_bytes || 0;
+  }
+
+  const list = [...buckets.values()];
+  if (mode === 'risk') {
+    // Fixed severity order; Safe first because it is the bulk-select target.
+    list.sort((a, b) => riskRank(a.key) - riskRank(b.key));
+  } else {
+    list.sort((a, b) => b.bytes - a.bytes);
+  }
+
+  const maxBytes = list.reduce((m, g) => Math.max(m, g.bytes), 1);
+  for (const g of list) {
+    g.share = g.bytes / maxBytes;
+    sortItems(g.items);
+  }
+  return list;
+}
+
+function sortItems(items) {
+  const s = store.sort;
+  items.sort((a, b) => {
+    if (s === 'stale') return (b.days_stale ?? -1) - (a.days_stale ?? -1);
+    if (s === 'name') return kindLabel(a).localeCompare(kindLabel(b));
+    if (s === 'risk') {
+      return riskRank(effectiveRisk(b, store.overrides)) - riskRank(effectiveRisk(a, store.overrides));
+    }
+    return (b.size_bytes || 0) - (a.size_bytes || 0);
+  });
+}
+
+/* ── Rows ────────────────────────────────────────────────────────────── */
+
+function itemRow(item, groupMax) {
+  const risk = effectiveRisk(item, store.overrides, store.config?.ui?.prefer_trash);
+  const action = selectedAction(item, store.overrides, store.config?.ui?.prefer_trash);
+  const actionCount = (item.available_actions || []).length;
+  const selected = store.selected.has(item.id);
+  const threshold = store.config?.staleness_threshold_days ?? 30;
+  const isStale = item.days_stale != null && item.days_stale > threshold;
+
+  // Square-root scaling: with one 40 GB item beside thirty 200 MB ones, linear
+  // scaling renders thirty invisible slivers.
+  const ratio = item.size_bytes && groupMax ? Math.sqrt(item.size_bytes / groupMax) : 0.02;
+
+  const cleanState = store.clean?.states?.get(item.id);
+  const stateClass = cleanState ? ` is-${cleanState.state}` : '';
+
+  let leadCell;
+  if (cleanState?.state === 'active') leadCell = '<span class="spinring"></span>';
+  else if (cleanState?.state === 'queued') leadCell = '<span class="dim">◦</span>';
+  else if (cleanState?.state === 'failed') leadCell = `<span style="color:var(--danger-text);display:flex">${icon('alert-circle', 'icon icon-sm')}</span>`;
+  else if (cleanState?.state === 'done') leadCell = `<span style="color:var(--safe-text);display:flex">${icon('check', 'icon icon-sm')}</span>`;
+  else leadCell = checkbox(selected ? 'true' : 'false');
+
+  const line2 = cleanState?.state === 'failed'
+    ? `<span class="t-mono-xs" style="color:var(--danger-text)">${escapeHtml(cleanState.error || 'Failed')}</span>
+       ${cleanState.canFallback ? `<button class="chip chip-quiet" data-act="fallback" data-id="${item.id}">Use “Remove directory” instead ${icon('arrow-right', 'icon icon-sm')}</button>` : ''}`
+    : `${pathHtml(item.path, item.project_name)}
+       ${actionCount > 1
+        ? `<button class="chip chip-quiet" data-act="actions" data-id="${item.id}">${actionCount} actions ${icon('chevron-down', 'icon icon-sm')}</button>`
+        : action ? `<span class="t-caption via" title="${escapeHtml(action.label)}">via ${escapeHtml(action.label)}</span>` : ''}`;
+
+  return `<div class="item${selected ? ' is-selected' : ''}${store.focusedId === item.id ? ' is-focused' : ''}${stateClass}"
+      data-id="${item.id}" role="row" tabindex="-1"
+      style="--eco-accent:var(--eco-${item.ecosystem});--size-ratio:${ratio.toFixed(3)}">
+    <span class="cell-check" data-act="toggle" data-id="${item.id}">${leadCell}</span>
+    <span class="riskedge ${risk}"></span>
+    <span class="cell-main">
+      <span class="line1">
+        <span class="kindname">${escapeHtml(kindLabel(item))}</span>
+        ${projectLabel(item) ? `<span class="projname">· ${escapeHtml(projectLabel(item))}</span>` : ''}
+        ${riskBadge(risk)}
+      </span>
+      <span class="line2">${line2}</span>
+    </span>
+    <span class="cell-stale col-stale t-caption${isStale ? ' is-stale' : ''}">${staleShort(item.days_stale)}</span>
+    <span class="col-mag"><span class="magbar"><i style="width:${Math.max(3, ratio * 100).toFixed(1)}%"></i></span></span>
+    <span class="col-size">${sizeCell(item.size_bytes)}</span>
+    <span class="col-chev cell-chev" data-act="open" data-id="${item.id}">${icon('chevron-right', 'icon icon-sm')}</span>
+  </div>`;
+}
+
+function groupHeader(g) {
+  const collapsed = store.collapsed.has(g.key);
+  const all = g.items.every((i) => store.selected.has(i.id));
+  const some = g.items.some((i) => store.selected.has(i.id));
+  const state = all ? 'true' : some ? 'mixed' : 'false';
+
+  return `<div class="group" data-group="${escapeHtml(String(g.key))}">
+    <span data-act="toggle-group" data-group="${escapeHtml(String(g.key))}">${checkbox(state)}</span>
+    <button class="group-toggle" data-act="collapse" data-group="${escapeHtml(String(g.key))}">
+      <span class="dim" style="display:flex">${icon(collapsed ? 'chevron-right' : 'chevron-down', 'icon icon-sm')}</span>
+      <span style="color:var(--eco-${g.eco});display:flex">${ecoIcon(g.eco)}</span>
+      <span class="t-body-strong gname">${escapeHtml(g.label)}</span>
+      <span class="countpill tnum">${count(g.items.length)} item${g.items.length === 1 ? '' : 's'}</span>
+      <span class="spacer"></span>
+    </button>
+    <span class="sharebar" style="--eco-accent:var(--eco-${g.eco})"><i style="width:${(g.share * 100).toFixed(1)}%"></i></span>
+    <span class="gsize">${sizeCell(g.bytes)}</span>
+  </div>`;
+}
+
+/* ── Chrome ──────────────────────────────────────────────────────────── */
+
+function summaryStrip() {
+  if (store.clean) return cleanProgressStrip();
+  if (store.clean === null && store.lastResult) return resultCard();
+
+  const total = totalBytes();
+  const { n, u } = splitBytes(total);
+  const sel = selectionSummary();
+  const disk = store.disk;
+  const safeCount = store.items.filter(
+    (i) => effectiveRisk(i, store.overrides, store.config?.ui?.prefer_trash) === 'safe'
+  ).length;
+
+  const reclaimPct = disk?.total_bytes ? (total / disk.total_bytes) * 100 : 0;
+  const usedPct = disk?.total_bytes ? (disk.used_bytes / disk.total_bytes) * 100 : 0;
+
+  return `<div class="summary">
+    <div class="summary-headline">
+      <div class="metric">
+        <span class="t-metric-sm tnum">${n}</span>
+        <span class="t-body-sm dim">${u} reclaimable</span>
+      </div>
+      <div class="t-caption sub">${count(store.items.length)} items · ${ecosystemsPresent().length} ecosystems</div>
+    </div>
+    <div class="summary-disk">
+      ${disk ? `<div class="diskmeter">
+          <i class="seg-used" style="width:${Math.max(0, usedPct - reclaimPct).toFixed(1)}%"></i>
+          <i class="seg-recl" style="width:${reclaimPct.toFixed(1)}%"></i>
+        </div>
+        <div class="t-caption legend">
+          <span><b>${percent(total, disk.total_bytes)}</b> of your ${formatBytes(disk.total_bytes)} disk</span>
+          <span class="dim">${formatBytes(disk.available_bytes)} free</span>
+        </div>`
+      : '<div class="t-caption dim">Disk capacity unavailable</div>'}
+    </div>
+    <div class="summary-action">
+      ${sel.count
+        ? `<div class="t-caption selinfo"><b>${count(sel.count)} selected</b> · ${formatBytes(sel.bytes)}${sel.hidden ? ` <button class="chip chip-quiet" data-act="clear-filters">${sel.hidden} hidden</button>` : ''}</div>
+           <button class="btn btn-primary" data-act="review">Review &amp; Clean<span class="kbd">⌘↵</span></button>`
+        : `<button class="btn btn-ghost btn-sm" data-act="select-safe">Select all safe (${count(safeCount)}) ${icon('arrow-right', 'icon icon-sm')}</button>`}
+    </div>
+  </div>`;
+}
+
+function cleanProgressStrip() {
+  const c = store.clean;
+  const done = c.completed + c.failed;
+  const pct = c.total ? Math.round((done / c.total) * 100) : 0;
+  return `<div class="summary is-progress">
+    <div class="prog">
+      <div class="prog-row">
+        <span class="t-body-strong">Cleaning ${count(done + (c.current ? 1 : 0))} of ${count(c.total)}</span>
+        <span class="spacer"></span>
+        <span class="t-caption tnum dim">${pct}%</span>
+      </div>
+      <div class="bigbar"><i style="width:${pct}%"></i></div>
+      <div class="prog-row">
+        <span class="t-caption dim">${escapeHtml(c.current || 'Starting…')}</span>
+        <span class="spacer"></span>
+        <span class="t-caption tnum" style="color:var(--text-secondary)"><b>${formatBytes(c.bytes)}</b> freed so far</span>
+      </div>
+    </div>
+    <button class="btn btn-secondary" data-act="cancel-clean">${icon('stop')}Stop</button>
+  </div>`;
+}
+
+function resultCard() {
+  const r = store.lastResult;
+  const { n, u } = splitBytes(r.bytes_freed);
+  return `<div class="resultcard${r.failed ? ' has-failures' : ''}">
+    <span class="glyph">${icon(r.failed ? 'warning' : 'shield-check', 'icon icon-xl')}</span>
+    <div class="spacer" style="flex:1">
+      <div style="display:flex;align-items:baseline;gap:8px">
+        <span class="t-metric-sm">Reclaimed ${n} ${u}</span>
+        ${r.estimated ? `<span class="badge badge-neutral" title="Void cannot measure what cargo clean and similar commands remove. This figure uses each action's estimate.">estimated</span>` : ''}
+      </div>
+      <div class="t-body-sm tnum" style="color:var(--text-secondary);margin-top:3px">
+        ${count(r.succeeded)} of ${count(r.total)} cleaned${r.failed ? ` · <span class="link">${count(r.failed)} failed</span>` : ''} · ${duration(r.duration_ms)}${r.cancelled ? ' · stopped early' : ''}
+      </div>
+    </div>
+    <button class="btn btn-secondary" data-act="goto-history">View report</button>
+    <button class="btn btn-ghost" data-act="scan">Scan again</button>
+    <button class="iconbtn" data-act="dismiss-result" aria-label="Dismiss">${icon('close')}</button>
+  </div>`;
+}
+
+function ticker() {
+  if (!store.scanning) return '';
+  const entries = [...store.scannerStatus.entries()];
+  if (!entries.length) return '';
+  return `<div class="ticker">${entries.map(([eco, status]) => {
+    if (status === 'running') {
+      return `<span class="ticker-item is-running"><span class="spinring"></span>${ECO_NAMES[eco] || eco}…</span>`;
+    }
+    if (typeof status === 'object') {
+      return `<span class="ticker-item is-done">${icon('check', 'icon icon-sm')}${ECO_NAMES[eco] || eco} <span class="tnum">${status.done}</span></span>`;
+    }
+    return `<span class="ticker-item">○ ${ECO_NAMES[eco] || eco}</span>`;
+  }).join('')}</div>`;
+}
+
+function toolbar() {
+  const n = [store.ecoFilter.size, store.riskFilter.size, store.staleOnly ? 1 : 0, store.largeOnly ? 1 : 0]
+    .reduce((a, b) => a + b, 0);
+  const groupLabels = { ecosystem: 'Ecosystem', project: 'Project', risk: 'Risk' };
+  const sortLabels = { size: 'Size', stale: 'Last modified', name: 'Name', risk: 'Risk' };
+
+  return `<div class="toolbar">
+    <div class="search">${icon('search', 'icon icon-sm')}
+      <input id="filterInput" placeholder="Filter by path, project, or type" value="${escapeHtml(store.filter)}" spellcheck="false">
+      ${store.filter ? `<button class="iconbtn" style="width:18px;height:18px" data-act="clear-search" aria-label="Clear">${icon('close', 'icon icon-sm')}</button>` : ''}
+    </div>
+    <button class="chip${n ? ' is-active' : ''}" data-act="filters">${icon('filter')}Filters${n ? `<span class="countpill" style="margin-left:2px">${n}</span>` : ''}</button>
+    <div class="toolbar-sep"></div>
+    <button class="chip" data-act="group">Group: ${groupLabels[store.config?.ui?.grouping ?? 'ecosystem']} ${icon('chevron-down', 'icon icon-sm')}</button>
+    <button class="chip" data-act="sort">${sortLabels[store.sort]} ${icon('chevron-down', 'icon icon-sm')}</button>
+    <span class="spacer"></span>
+    <button class="iconbtn" data-act="density" title="Density (⌘D)">${icon('sidebar-toggle')}</button>
+    <button class="iconbtn" data-act="expand-all" title="Expand or collapse all (⌘⇧E)">${icon('chevron-down')}</button>
+  </div>`;
+}
+
+const TABLE_HEAD = `<div class="tablehead">
+  <span style="width:22px"></span><span style="width:12px"></span>
+  <span class="t-caption" style="flex:1">Name</span>
+  <span class="t-caption col-stale">Stale</span>
+  <span class="col-mag"></span>
+  <span class="t-caption col-size" style="justify-content:flex-end">Size</span>
+  <span class="col-chev"></span>
+</div>`;
+
+function emptyState() {
+  if (!store.hasScanned) {
+    const roots = (store.config?.scan_roots || []).map((r) => String(r)).join(', ') || '~/';
+    return `<div style="flex:1;display:flex;align-items:center;justify-content:center;padding:24px">
+      <div style="width:440px;text-align:center;display:flex;flex-direction:column;align-items:center">
+        <div style="color:var(--accent-bg);margin-bottom:24px">
+          <svg viewBox="0 0 20 20" width="64" height="64" aria-hidden="true">
+            <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5"
+              stroke-linecap="round" pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg>
+        </div>
+        <div class="t-page-title">Find what your builds left behind</div>
+        <p class="t-body" style="margin-top:8px;color:var(--text-secondary);max-width:380px">
+          Void walks your scan roots and reports every build artifact it finds, grouped by
+          ecosystem. Nothing is deleted until you pick it and confirm.</p>
+        <div class="card" style="width:100%;margin-top:24px;text-align:left;display:flex;align-items:center;gap:12px;padding:14px 16px">
+          ${icon('folder', 'icon icon-lg')}
+          <div style="flex:1;min-width:0">
+            <div class="t-label dim">Scan roots</div>
+            <div class="t-mono-sm" style="color:var(--text-primary);margin-top:2px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${escapeHtml(roots)}</div>
+            <div class="t-caption dim" style="margin-top:2px">${(store.config?.enabled_ecosystems || []).length} ecosystems enabled</div>
+          </div>
+          <button class="btn btn-ghost btn-sm" data-act="goto-settings">Change ${icon('chevron-right', 'icon icon-sm')}</button>
+        </div>
+        <button class="btn btn-primary btn-lg" style="width:240px;margin-top:16px" data-act="scan">Start first scan</button>
+        <div class="t-caption dim" style="margin-top:12px">Typically takes 30–90 seconds</div>
+      </div>
+    </div>`;
+  }
+
+  if (store.items.length === 0) {
+    return `<div class="state">
+      ${icon('shield-check', 'glyph icon icon-xl')}
+      <div class="title">Nothing to reclaim</div>
+      <div class="body">Void scanned ${count(store.pathsScanned)} paths and found no build artifacts.
+        On macOS this is more often a permissions problem than a clean machine.</div>
+      <div class="actions">
+        <button class="btn btn-secondary" data-act="goto-settings">Check scan roots</button>
+        <button class="btn btn-ghost" data-act="scan">Scan again</button>
+      </div>
+      <div class="hint">⌘R to rescan</div>
+    </div>`;
+  }
+
+  return `<div class="state" data-size="sm">
+    ${icon('filter', 'glyph icon icon-lg')}
+    <div class="title">No items match</div>
+    <div class="body">The scan found ${count(store.items.length)} items, none matching the current filters.</div>
+    <div class="actions"><button class="btn btn-ghost btn-sm" data-act="clear-filters">Clear filters</button></div>
+  </div>`;
+}
+
+/* ── Screen ──────────────────────────────────────────────────────────── */
+
+export function renderResults() {
+  const items = visibleItems();
+  const groups = groupsFor(items);
+  const showEmpty = !store.hasScanned || items.length === 0;
+
+  const sub = store.scanning
+    ? `Scanning · ${count(store.pathsScanned)} paths · ${count(store.items.length)} found`
+    : store.hasScanned
+      ? `${count(store.items.length)} items · scanned ${store.lastScanAt ? relativeTime(store.lastScanAt) : 'just now'}`
+      : 'Ready to scan';
+
+  const banner = store.hasScanned && store.deniedPaths.size && !store.scanning
+    ? `<div class="banner">${icon('lock')}
+        <span class="txt">Some folders couldn't be read, so what they hold is not listed here.</span>
+        <button class="btn btn-secondary btn-sm" data-act="show-issues">See which</button>
+        <button class="iconbtn" style="width:24px;height:24px" data-act="dismiss-banner" aria-label="Dismiss">${icon('close', 'icon icon-sm')}</button>
+      </div>`
+    : '';
+
+  const listBody = showEmpty
+    ? emptyState()
+    : groups.map((g) => {
+      const collapsed = store.collapsed.has(g.key);
+      const groupMax = g.items.reduce((m, i) => Math.max(m, i.size_bytes || 0), 1);
+      return groupHeader(g) + (collapsed ? '' : g.items.map((i) => itemRow(i, groupMax)).join(''));
+    }).join('');
+
+  return `
+    ${cmdbar(sub)}
+    ${store.scanning ? '<div class="progress is-indeterminate"></div>' : ''}
+    ${store.hasScanned || store.scanning ? summaryStrip() : ''}
+    ${banner}
+    ${ticker()}
+    ${store.hasScanned && !showEmpty ? toolbar() + TABLE_HEAD : ''}
+    <div class="listwrap"><div class="list" id="list" role="grid">${listBody}</div></div>
+    ${statusbar()}
+  `;
+}
+
+function cmdbar(sub) {
+  return `<div class="cmdbar">
+    <div class="cmdbar-titles">
+      <div class="t-section-title" style="font-size:15px">Results</div>
+      <div class="t-caption sub">${escapeHtml(sub)}</div>
+    </div>
+    <div class="cmdbar-actions">
+      ${store.scanning
+        ? `<button class="btn btn-primary" disabled><span class="spinring"></span>Scanning…</button>`
+        : `<button class="btn btn-primary" data-act="scan">${icon('scan')}Scan now</button>`}
+      <button class="iconbtn" data-act="overflow" aria-label="More">${icon('more-horizontal')}</button>
+    </div>
+  </div>`;
+}
+
+function statusbar() {
+  const issues = issueCount();
+  const left = store.scanning
+    ? `Walking · ${count(store.pathsScanned)} paths`
+    : store.hasScanned
+      ? `${count(store.pathsScanned)} paths · ${duration(store.scanDurationMs)}`
+      : 'Idle';
+  return `<div class="statusbar t-caption">
+    <span>${escapeHtml(left)}</span>
+    <span class="spacer"></span>
+    ${issues ? `<button class="issues" data-act="show-issues">${icon('warning', 'icon icon-sm')} ${count(issues)} issue${issues === 1 ? '' : 's'}</button>` : ''}
+    <span class="dim">${(store.config?.ui?.density ?? 'comfortable') === 'compact' ? 'Compact' : 'Comfortable'}</span>
+  </div>`;
+}
+
+export { groupsFor, riskBadge, checkbox };
diff --git a/crates/deepclean-app/frontend/js/screens/settings.js b/crates/deepclean-app/frontend/js/screens/settings.js
new file mode 100644
index 0000000..e733b9c
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/screens/settings.js
@@ -0,0 +1,212 @@
+import { icon, ecoIcon } from '../icons.js';
+import { escapeHtml, formatBytes, count } from '../format.js';
+import { store } from '../store.js';
+import { ALL_ECOSYSTEMS, ECO_NAMES } from '../actions.js';
+
+/**
+ * Paths hard-coded in `safety.rs`. Shown read-only because the user cannot
+ * change them and should know they exist — the alternative is a blocklist
+ * screen that quietly understates what Void refuses to touch.
+ */
+const PROTECTED = [
+  '~/Documents · ~/Desktop · ~/Downloads · ~/Pictures',
+  '~/Library/Keychains · ~/Library/Preferences',
+  '.ssh · .gnupg · .aws · .config · .gitconfig · .zshrc · .bashrc · .env · .Trash',
+];
+
+const SECTIONS = ['Scanning', 'Ecosystems', 'Safety', 'Performance', 'General', 'About'];
+
+function pathList(paths, removable, emptyText) {
+  if (!paths.length) return `<div class="pathlist"><div class="pathrow"><span class="p dim">${escapeHtml(emptyText)}</span></div></div>`;
+  return `<div class="pathlist">${paths.map((p, i) => `
+    <div class="pathrow">
+      ${icon('folder', 'icon icon-sm')}
+      <span class="p" title="${escapeHtml(String(p))}">${escapeHtml(String(p))}</span>
+      ${removable ? `<button class="iconbtn" style="width:22px;height:22px" data-act="remove-path" data-list="${removable}" data-index="${i}" aria-label="Remove">${icon('close', 'icon icon-sm')}</button>` : ''}
+    </div>`).join('')}</div>`;
+}
+
+function scanningSection(cfg) {
+  return `
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">Scan roots</div>
+      <div class="t-body-sm help">Directories Void walks. Defaults to your home folder.</div>
+      ${pathList(cfg.scan_roots, 'scan_roots', 'No scan roots — Void has nothing to walk.')}
+      <button class="btn btn-secondary btn-sm" style="margin-top:8px" data-act="add-scan-root">${icon('plus', 'icon icon-sm')}Add folder…</button>
+    </div>
+
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">Staleness</div>
+      <div class="t-body-sm help">Flag artifacts untouched for longer than</div>
+      <div style="display:flex;align-items:center;gap:8px">
+        <input class="input tnum" type="number" min="1" max="365" style="width:80px"
+          value="${cfg.staleness_threshold_days}" data-cfg="staleness_threshold_days">
+        <span class="t-body" style="color:var(--text-secondary)">days</span>
+      </div>
+      <div class="t-caption foot">
+        Affects the stale marker and the “Stale only” filter. It does not change what Void scans.
+      </div>
+    </div>`;
+}
+
+function ecosystemsSection(cfg) {
+  const enabled = new Set(cfg.enabled_ecosystems);
+  const stats = new Map();
+  for (const item of store.items) {
+    const s = stats.get(item.ecosystem) || { bytes: 0, n: 0 };
+    s.bytes += item.size_bytes || 0;
+    s.n += 1;
+    stats.set(item.ecosystem, s);
+  }
+  // Sorted by what they actually cost, so the expensive ones carry the numbers
+  // that justify the toggle.
+  const ordered = [...ALL_ECOSYSTEMS].sort(
+    (a, b) => (stats.get(b)?.bytes || 0) - (stats.get(a)?.bytes || 0)
+  );
+
+  return `
+    <div class="field">
+      <div style="display:flex;align-items:baseline;margin-bottom:8px">
+        <span class="t-overline dim">Ecosystems</span>
+        <span class="spacer"></span>
+        <button class="btn btn-ghost btn-sm" data-act="eco-all">Enable all</button>
+        <button class="btn btn-ghost btn-sm" data-act="eco-none">Disable all</button>
+      </div>
+      <div class="pathlist">
+        ${ordered.map((eco) => {
+          const s = stats.get(eco);
+          return `<div class="ecorow">
+            <span style="color:var(--eco-${eco});display:flex">${ecoIcon(eco, 'icon')}</span>
+            <span class="nm t-body">${escapeHtml(ECO_NAMES[eco])}</span>
+            <span class="stat t-caption">${s ? `${formatBytes(s.bytes)} · ${count(s.n)} item${s.n === 1 ? '' : 's'}` : 'no results yet'}</span>
+            <span class="toggle${enabled.has(eco) ? ' is-on' : ''}" role="switch"
+              aria-checked="${enabled.has(eco)}" data-act="toggle-eco" data-eco="${eco}"><i></i></span>
+          </div>`;
+        }).join('')}
+      </div>
+    </div>`;
+}
+
+function safetySection(cfg) {
+  return `
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">Always protected</div>
+      <div class="t-body-sm help">Void refuses to delete these, whatever else you configure.</div>
+      <div class="pathlist">
+        ${PROTECTED.map((p) => `<div class="pathrow is-locked">
+          ${icon('lock', 'icon icon-sm')}<span class="p">${escapeHtml(p)}</span></div>`).join('')}
+      </div>
+      <div class="t-caption foot">
+        Files inside Downloads, Documents, Desktop and Pictures can still be cleaned individually —
+        it is the folders themselves that are off limits.
+      </div>
+    </div>
+
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">Never touch these</div>
+      <div class="t-body-sm help">Your own additions. Anything inside them is left alone.</div>
+      ${pathList(cfg.blocked_paths, 'blocked_paths', 'Add a folder Void must leave alone.')}
+      <button class="btn btn-secondary btn-sm" style="margin-top:8px" data-act="add-blocked">${icon('plus', 'icon icon-sm')}Add folder…</button>
+    </div>`;
+}
+
+function performanceSection(cfg) {
+  const cores = navigator.hardwareConcurrency || 8;
+  const slider = (label, key, min, max, value, suffix) => `
+    <div class="field" style="margin-bottom:18px">
+      <div class="slider-row">
+        <span class="t-label">${escapeHtml(label)}</span>
+        <span class="t-caption tnum dim">${value}${escapeHtml(suffix)}</span>
+      </div>
+      <input class="slider" type="range" min="${min}" max="${max}" value="${value}" data-cfg="${key}">
+    </div>`;
+
+  return `
+    <div class="t-overline dim" style="margin-bottom:12px">Performance</div>
+    ${slider('Walker threads', 'walker_threads', 1, cores, cfg.walker_threads, ` of ${cores} cores`)}
+    ${slider('Max concurrent analyses', 'max_concurrent_analyses', 1, 32, cfg.max_concurrent_analyses, '')}
+    ${slider('CPU threshold', 'cpu_threshold_percent', 10, 100, cfg.cpu_threshold_percent, '%')}
+    <button class="btn btn-secondary btn-sm" data-act="restore-performance">Restore defaults</button>`;
+}
+
+function generalSection(cfg) {
+  const ui = cfg.ui;
+  const toggleRow = (label, help, key, on) => `
+    <div class="ecorow" style="height:auto;padding:12px 10px">
+      <span style="flex:1">
+        <span class="t-body" style="display:block;color:var(--text-primary)">${escapeHtml(label)}</span>
+        ${help ? `<span class="t-caption dim" style="display:block;margin-top:2px">${escapeHtml(help)}</span>` : ''}
+      </span>
+      <span class="toggle${on ? ' is-on' : ''}" role="switch" aria-checked="${on}" data-act="toggle-ui" data-key="${key}"><i></i></span>
+    </div>`;
+
+  const segRow = (label, key, options, value) => `
+    <div class="ecorow" style="height:auto;padding:12px 10px">
+      <span class="nm t-body">${escapeHtml(label)}</span>
+      <span class="seg">${options.map(([v, l]) =>
+        `<button class="${v === value ? 'is-on' : ''}" data-act="set-ui" data-key="${key}" data-value="${v}">${escapeHtml(l)}</button>`
+      ).join('')}</span>
+    </div>`;
+
+  return `
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">General</div>
+      <div class="pathlist">
+        ${segRow('Theme', 'theme', [['system', 'System'], ['light', 'Light'], ['dark', 'Dark']], ui.theme)}
+        ${segRow('Density', 'density', [['comfortable', 'Comfortable'], ['compact', 'Compact']], ui.density)}
+        ${segRow('Group by', 'grouping', [['ecosystem', 'Ecosystem'], ['project', 'Project'], ['risk', 'Risk']], ui.grouping)}
+        ${toggleRow('Confirm before cleaning', 'Turning this off skips the risk review entirely.', 'confirm_before_cleaning', ui.confirm_before_cleaning)}
+        ${toggleRow('Prefer Trash where available', 'Choose the recoverable action when an item offers one.', 'prefer_trash', ui.prefer_trash)}
+        ${toggleRow('Show menu bar icon', '', 'show_menu_bar_icon', ui.show_menu_bar_icon)}
+      </div>
+    </div>`;
+}
+
+function aboutSection() {
+  return `
+    <div class="field">
+      <div class="t-overline dim" style="margin-bottom:8px">About</div>
+      <dl class="facts t-body-sm">
+        <dt>Version</dt><dd>1.0.0</dd>
+        <dt>Settings file</dt><dd class="t-mono-sm">${escapeHtml(store.configPath || '—')}</dd>
+        <dt>License</dt><dd>MIT</dd>
+      </dl>
+    </div>`;
+}
+
+export function renderSettings() {
+  const cfg = store.config;
+  if (!cfg) return '<div class="state"><div class="title">Loading settings…</div></div>';
+
+  const active = store.settingsSection || 'Scanning';
+  const body = {
+    Scanning: scanningSection,
+    Ecosystems: ecosystemsSection,
+    Safety: safetySection,
+    Performance: performanceSection,
+    General: generalSection,
+    About: aboutSection,
+  }[active](cfg);
+
+  return `
+    <div class="cmdbar">
+      <div class="cmdbar-titles">
+        <div class="t-section-title" style="font-size:15px">Settings</div>
+        <div class="t-caption sub">${store.settingsDirty ? 'Changes apply to your next scan' : 'Saved to disk as you change them'}</div>
+      </div>
+      <div class="cmdbar-actions">
+        ${store.savedFlash ? `<span class="t-caption" style="color:var(--safe-text);display:flex;align-items:center;gap:4px">${icon('check', 'icon icon-sm')}Saved</span>` : ''}
+      </div>
+    </div>
+    <div class="settings-nav">
+      <div class="seg">${SECTIONS.map((s) =>
+        `<button class="${s === active ? 'is-on' : ''}" data-act="settings-section" data-section="${s}">${s}</button>`
+      ).join('')}</div>
+    </div>
+    <div class="settings-scroll" style="flex:1;overflow-y:auto"><div class="form">${body}</div></div>
+    ${store.settingsDirty ? `<div class="statusbar t-caption">
+      <span>Changes apply to your next scan.</span>
+      <button class="btn btn-ghost btn-sm" style="height:20px" data-act="rescan-now">Rescan now</button>
+      <span class="spacer"></span>
+    </div>` : ''}`;
+}
diff --git a/crates/deepclean-app/frontend/js/store.js b/crates/deepclean-app/frontend/js/store.js
new file mode 100644
index 0000000..43439b8
--- /dev/null
+++ b/crates/deepclean-app/frontend/js/store.js
@@ -0,0 +1,111 @@
+/** Central mutable state. Screens read it; events and user input write it. */
+
+export const store = {
+  route: 'results',
+
+  items: [],
+  /** item.id -> action.id, when the user overrides the default. */
+  overrides: new Map(),
+  /** Selected item ids. Independent of render state and of filtering. */
+  selected: new Set(),
+
+  scanning: false,
+  cleaning: false,
+  pathsScanned: 0,
+  scanDurationMs: 0,
+  lastScanAt: null,
+
+  /** ecosystem -> 'pending' | 'running' | { done: n } */
+  scannerStatus: new Map(),
+
+  /** Grouped, deduplicated scan problems: message -> count. */
+  issues: new Map(),
+  deniedPaths: new Set(),
+
+  filter: '',
+  ecoFilter: new Set(),
+  riskFilter: new Set(),
+  staleOnly: false,
+  largeOnly: false,
+  sort: 'size',
+  collapsed: new Set(),
+
+  focusedId: null,
+  drawerId: null,
+
+  config: null,
+  disk: null,
+  history: null,
+
+  /** Live clean progress. */
+  clean: null,
+
+  hasScanned: false,
+};
+
+/** Selection totals, computed from the authoritative item list. */
+export function selectionSummary() {
+  let bytes = 0;
+  let hidden = 0;
+  const visible = new Set(visibleItems().map((i) => i.id));
+  for (const id of store.selected) {
+    const item = store.items.find((i) => i.id === id);
+    if (!item) continue;
+    bytes += item.size_bytes || 0;
+    if (!visible.has(id)) hidden += 1;
+  }
+  return { count: store.selected.size, bytes, hidden };
+}
+
+export function totalBytes() {
+  return store.items.reduce((sum, i) => sum + (i.size_bytes || 0), 0);
+}
+
+export function ecosystemsPresent() {
+  return [...new Set(store.items.map((i) => i.ecosystem))];
+}
+
+/** Items surviving the current filters, in no particular order. */
+export function visibleItems() {
+  const q = store.filter.trim().toLowerCase();
+  const threshold = store.config?.staleness_threshold_days ?? 30;
+
+  return store.items.filter((item) => {
+    if (store.ecoFilter.size && !store.ecoFilter.has(item.ecosystem)) return false;
+    if (store.riskFilter.size && !store.riskFilter.has(item.risk)) return false;
+    if (store.staleOnly && !(item.days_stale != null && item.days_stale > threshold)) return false;
+    if (store.largeOnly && (item.size_bytes || 0) < 1e9) return false;
+    if (q) {
+      const hay = `${item.path} ${item.project_name || ''} ${item.kind}`.toLowerCase();
+      if (!hay.includes(q)) return false;
+    }
+    return true;
+  });
+}
+
+export function filtersActive() {
+  return (
+    store.ecoFilter.size > 0 ||
+    store.riskFilter.size > 0 ||
+    store.staleOnly ||
+    store.largeOnly
+  );
+}
+
+export function resetFilters() {
+  store.ecoFilter.clear();
+  store.riskFilter.clear();
+  store.staleOnly = false;
+  store.largeOnly = false;
+  store.filter = '';
+}
+
+export function recordIssue(message) {
+  store.issues.set(message, (store.issues.get(message) || 0) + 1);
+}
+
+export function issueCount() {
+  let n = 0;
+  for (const c of store.issues.values()) n += c;
+  return n;
+}
diff --git a/crates/deepclean-app/gen/schemas/acl-manifests.json b/crates/deepclean-app/gen/schemas/acl-manifests.json
index 86cdb1f..f2f210a 100644
--- a/crates/deepclean-app/gen/schemas/acl-manifests.json
+++ b/crates/deepclean-app/gen/schemas/acl-manifests.json
@@ -1 +1 @@
-{"core":{"default_permission":{"identifier":"default","description":"Default core plugins set.","permissions":["core:path:default","core:event:default","core:window:default","core:webview:default","core:app:default","core:image:default","core:resources:default","core:menu:default","core:tray:default"]},"permissions":{},"permission_sets":{},"global_scope_schema":null},"core:app":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-version","allow-name","allow-tauri-version","allow-identifier","allow-bundle-type","allow-register-listener","allow-remove-listener"]},"permissions":{"allow-app-hide":{"identifier":"allow-app-hide","description":"Enables the app_hide command without any pre-configured scope.","commands":{"allow":["app_hide"],"deny":[]}},"allow-app-show":{"identifier":"allow-app-show","description":"Enables the app_show command without any pre-configured scope.","commands":{"allow":["app_show"],"deny":[]}},"allow-bundle-type":{"identifier":"allow-bundle-type","description":"Enables the bundle_type command without any pre-configured scope.","commands":{"allow":["bundle_type"],"deny":[]}},"allow-default-window-icon":{"identifier":"allow-default-window-icon","description":"Enables the default_window_icon command without any pre-configured scope.","commands":{"allow":["default_window_icon"],"deny":[]}},"allow-fetch-data-store-identifiers":{"identifier":"allow-fetch-data-store-identifiers","description":"Enables the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":["fetch_data_store_identifiers"],"deny":[]}},"allow-identifier":{"identifier":"allow-identifier","description":"Enables the identifier command without any pre-configured scope.","commands":{"allow":["identifier"],"deny":[]}},"allow-name":{"identifier":"allow-name","description":"Enables the name command without any pre-configured scope.","commands":{"allow":["name"],"deny":[]}},"allow-register-listener":{"identifier":"allow-register-listener","description":"Enables the register_listener command without any pre-configured scope.","commands":{"allow":["register_listener"],"deny":[]}},"allow-remove-data-store":{"identifier":"allow-remove-data-store","description":"Enables the remove_data_store command without any pre-configured scope.","commands":{"allow":["remove_data_store"],"deny":[]}},"allow-remove-listener":{"identifier":"allow-remove-listener","description":"Enables the remove_listener command without any pre-configured scope.","commands":{"allow":["remove_listener"],"deny":[]}},"allow-set-app-theme":{"identifier":"allow-set-app-theme","description":"Enables the set_app_theme command without any pre-configured scope.","commands":{"allow":["set_app_theme"],"deny":[]}},"allow-set-dock-visibility":{"identifier":"allow-set-dock-visibility","description":"Enables the set_dock_visibility command without any pre-configured scope.","commands":{"allow":["set_dock_visibility"],"deny":[]}},"allow-tauri-version":{"identifier":"allow-tauri-version","description":"Enables the tauri_version command without any pre-configured scope.","commands":{"allow":["tauri_version"],"deny":[]}},"allow-version":{"identifier":"allow-version","description":"Enables the version command without any pre-configured scope.","commands":{"allow":["version"],"deny":[]}},"deny-app-hide":{"identifier":"deny-app-hide","description":"Denies the app_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["app_hide"]}},"deny-app-show":{"identifier":"deny-app-show","description":"Denies the app_show command without any pre-configured scope.","commands":{"allow":[],"deny":["app_show"]}},"deny-bundle-type":{"identifier":"deny-bundle-type","description":"Denies the bundle_type command without any pre-configured scope.","commands":{"allow":[],"deny":["bundle_type"]}},"deny-default-window-icon":{"identifier":"deny-default-window-icon","description":"Denies the default_window_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["default_window_icon"]}},"deny-fetch-data-store-identifiers":{"identifier":"deny-fetch-data-store-identifiers","description":"Denies the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":[],"deny":["fetch_data_store_identifiers"]}},"deny-identifier":{"identifier":"deny-identifier","description":"Denies the identifier command without any pre-configured scope.","commands":{"allow":[],"deny":["identifier"]}},"deny-name":{"identifier":"deny-name","description":"Denies the name command without any pre-configured scope.","commands":{"allow":[],"deny":["name"]}},"deny-register-listener":{"identifier":"deny-register-listener","description":"Denies the register_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["register_listener"]}},"deny-remove-data-store":{"identifier":"deny-remove-data-store","description":"Denies the remove_data_store command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_data_store"]}},"deny-remove-listener":{"identifier":"deny-remove-listener","description":"Denies the remove_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_listener"]}},"deny-set-app-theme":{"identifier":"deny-set-app-theme","description":"Denies the set_app_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_app_theme"]}},"deny-set-dock-visibility":{"identifier":"deny-set-dock-visibility","description":"Denies the set_dock_visibility command without any pre-configured scope.","commands":{"allow":[],"deny":["set_dock_visibility"]}},"deny-tauri-version":{"identifier":"deny-tauri-version","description":"Denies the tauri_version command without any pre-configured scope.","commands":{"allow":[],"deny":["tauri_version"]}},"deny-version":{"identifier":"deny-version","description":"Denies the version command without any pre-configured scope.","commands":{"allow":[],"deny":["version"]}}},"permission_sets":{},"global_scope_schema":null},"core:event":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-listen","allow-unlisten","allow-emit","allow-emit-to"]},"permissions":{"allow-emit":{"identifier":"allow-emit","description":"Enables the emit command without any pre-configured scope.","commands":{"allow":["emit"],"deny":[]}},"allow-emit-to":{"identifier":"allow-emit-to","description":"Enables the emit_to command without any pre-configured scope.","commands":{"allow":["emit_to"],"deny":[]}},"allow-listen":{"identifier":"allow-listen","description":"Enables the listen command without any pre-configured scope.","commands":{"allow":["listen"],"deny":[]}},"allow-unlisten":{"identifier":"allow-unlisten","description":"Enables the unlisten command without any pre-configured scope.","commands":{"allow":["unlisten"],"deny":[]}},"deny-emit":{"identifier":"deny-emit","description":"Denies the emit command without any pre-configured scope.","commands":{"allow":[],"deny":["emit"]}},"deny-emit-to":{"identifier":"deny-emit-to","description":"Denies the emit_to command without any pre-configured scope.","commands":{"allow":[],"deny":["emit_to"]}},"deny-listen":{"identifier":"deny-listen","description":"Denies the listen command without any pre-configured scope.","commands":{"allow":[],"deny":["listen"]}},"deny-unlisten":{"identifier":"deny-unlisten","description":"Denies the unlisten command without any pre-configured scope.","commands":{"allow":[],"deny":["unlisten"]}}},"permission_sets":{},"global_scope_schema":null},"core:image":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-from-bytes","allow-from-path","allow-rgba","allow-size"]},"permissions":{"allow-from-bytes":{"identifier":"allow-from-bytes","description":"Enables the from_bytes command without any pre-configured scope.","commands":{"allow":["from_bytes"],"deny":[]}},"allow-from-path":{"identifier":"allow-from-path","description":"Enables the from_path command without any pre-configured scope.","commands":{"allow":["from_path"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-rgba":{"identifier":"allow-rgba","description":"Enables the rgba command without any pre-configured scope.","commands":{"allow":["rgba"],"deny":[]}},"allow-size":{"identifier":"allow-size","description":"Enables the size command without any pre-configured scope.","commands":{"allow":["size"],"deny":[]}},"deny-from-bytes":{"identifier":"deny-from-bytes","description":"Denies the from_bytes command without any pre-configured scope.","commands":{"allow":[],"deny":["from_bytes"]}},"deny-from-path":{"identifier":"deny-from-path","description":"Denies the from_path command without any pre-configured scope.","commands":{"allow":[],"deny":["from_path"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-rgba":{"identifier":"deny-rgba","description":"Denies the rgba command without any pre-configured scope.","commands":{"allow":[],"deny":["rgba"]}},"deny-size":{"identifier":"deny-size","description":"Denies the size command without any pre-configured scope.","commands":{"allow":[],"deny":["size"]}}},"permission_sets":{},"global_scope_schema":null},"core:menu":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-append","allow-prepend","allow-insert","allow-remove","allow-remove-at","allow-items","allow-get","allow-popup","allow-create-default","allow-set-as-app-menu","allow-set-as-window-menu","allow-text","allow-set-text","allow-is-enabled","allow-set-enabled","allow-set-accelerator","allow-set-as-windows-menu-for-nsapp","allow-set-as-help-menu-for-nsapp","allow-is-checked","allow-set-checked","allow-set-icon"]},"permissions":{"allow-append":{"identifier":"allow-append","description":"Enables the append command without any pre-configured scope.","commands":{"allow":["append"],"deny":[]}},"allow-create-default":{"identifier":"allow-create-default","description":"Enables the create_default command without any pre-configured scope.","commands":{"allow":["create_default"],"deny":[]}},"allow-get":{"identifier":"allow-get","description":"Enables the get command without any pre-configured scope.","commands":{"allow":["get"],"deny":[]}},"allow-insert":{"identifier":"allow-insert","description":"Enables the insert command without any pre-configured scope.","commands":{"allow":["insert"],"deny":[]}},"allow-is-checked":{"identifier":"allow-is-checked","description":"Enables the is_checked command without any pre-configured scope.","commands":{"allow":["is_checked"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-items":{"identifier":"allow-items","description":"Enables the items command without any pre-configured scope.","commands":{"allow":["items"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-popup":{"identifier":"allow-popup","description":"Enables the popup command without any pre-configured scope.","commands":{"allow":["popup"],"deny":[]}},"allow-prepend":{"identifier":"allow-prepend","description":"Enables the prepend command without any pre-configured scope.","commands":{"allow":["prepend"],"deny":[]}},"allow-remove":{"identifier":"allow-remove","description":"Enables the remove command without any pre-configured scope.","commands":{"allow":["remove"],"deny":[]}},"allow-remove-at":{"identifier":"allow-remove-at","description":"Enables the remove_at command without any pre-configured scope.","commands":{"allow":["remove_at"],"deny":[]}},"allow-set-accelerator":{"identifier":"allow-set-accelerator","description":"Enables the set_accelerator command without any pre-configured scope.","commands":{"allow":["set_accelerator"],"deny":[]}},"allow-set-as-app-menu":{"identifier":"allow-set-as-app-menu","description":"Enables the set_as_app_menu command without any pre-configured scope.","commands":{"allow":["set_as_app_menu"],"deny":[]}},"allow-set-as-help-menu-for-nsapp":{"identifier":"allow-set-as-help-menu-for-nsapp","description":"Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_help_menu_for_nsapp"],"deny":[]}},"allow-set-as-window-menu":{"identifier":"allow-set-as-window-menu","description":"Enables the set_as_window_menu command without any pre-configured scope.","commands":{"allow":["set_as_window_menu"],"deny":[]}},"allow-set-as-windows-menu-for-nsapp":{"identifier":"allow-set-as-windows-menu-for-nsapp","description":"Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_windows_menu_for_nsapp"],"deny":[]}},"allow-set-checked":{"identifier":"allow-set-checked","description":"Enables the set_checked command without any pre-configured scope.","commands":{"allow":["set_checked"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-text":{"identifier":"allow-set-text","description":"Enables the set_text command without any pre-configured scope.","commands":{"allow":["set_text"],"deny":[]}},"allow-text":{"identifier":"allow-text","description":"Enables the text command without any pre-configured scope.","commands":{"allow":["text"],"deny":[]}},"deny-append":{"identifier":"deny-append","description":"Denies the append command without any pre-configured scope.","commands":{"allow":[],"deny":["append"]}},"deny-create-default":{"identifier":"deny-create-default","description":"Denies the create_default command without any pre-configured scope.","commands":{"allow":[],"deny":["create_default"]}},"deny-get":{"identifier":"deny-get","description":"Denies the get command without any pre-configured scope.","commands":{"allow":[],"deny":["get"]}},"deny-insert":{"identifier":"deny-insert","description":"Denies the insert command without any pre-configured scope.","commands":{"allow":[],"deny":["insert"]}},"deny-is-checked":{"identifier":"deny-is-checked","description":"Denies the is_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["is_checked"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-items":{"identifier":"deny-items","description":"Denies the items command without any pre-configured scope.","commands":{"allow":[],"deny":["items"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-popup":{"identifier":"deny-popup","description":"Denies the popup command without any pre-configured scope.","commands":{"allow":[],"deny":["popup"]}},"deny-prepend":{"identifier":"deny-prepend","description":"Denies the prepend command without any pre-configured scope.","commands":{"allow":[],"deny":["prepend"]}},"deny-remove":{"identifier":"deny-remove","description":"Denies the remove command without any pre-configured scope.","commands":{"allow":[],"deny":["remove"]}},"deny-remove-at":{"identifier":"deny-remove-at","description":"Denies the remove_at command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_at"]}},"deny-set-accelerator":{"identifier":"deny-set-accelerator","description":"Denies the set_accelerator command without any pre-configured scope.","commands":{"allow":[],"deny":["set_accelerator"]}},"deny-set-as-app-menu":{"identifier":"deny-set-as-app-menu","description":"Denies the set_as_app_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_app_menu"]}},"deny-set-as-help-menu-for-nsapp":{"identifier":"deny-set-as-help-menu-for-nsapp","description":"Denies the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_help_menu_for_nsapp"]}},"deny-set-as-window-menu":{"identifier":"deny-set-as-window-menu","description":"Denies the set_as_window_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_window_menu"]}},"deny-set-as-windows-menu-for-nsapp":{"identifier":"deny-set-as-windows-menu-for-nsapp","description":"Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_windows_menu_for_nsapp"]}},"deny-set-checked":{"identifier":"deny-set-checked","description":"Denies the set_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["set_checked"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-text":{"identifier":"deny-set-text","description":"Denies the set_text command without any pre-configured scope.","commands":{"allow":[],"deny":["set_text"]}},"deny-text":{"identifier":"deny-text","description":"Denies the text command without any pre-configured scope.","commands":{"allow":[],"deny":["text"]}}},"permission_sets":{},"global_scope_schema":null},"core:path":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-resolve-directory","allow-resolve","allow-normalize","allow-join","allow-dirname","allow-extname","allow-basename","allow-is-absolute"]},"permissions":{"allow-basename":{"identifier":"allow-basename","description":"Enables the basename command without any pre-configured scope.","commands":{"allow":["basename"],"deny":[]}},"allow-dirname":{"identifier":"allow-dirname","description":"Enables the dirname command without any pre-configured scope.","commands":{"allow":["dirname"],"deny":[]}},"allow-extname":{"identifier":"allow-extname","description":"Enables the extname command without any pre-configured scope.","commands":{"allow":["extname"],"deny":[]}},"allow-is-absolute":{"identifier":"allow-is-absolute","description":"Enables the is_absolute command without any pre-configured scope.","commands":{"allow":["is_absolute"],"deny":[]}},"allow-join":{"identifier":"allow-join","description":"Enables the join command without any pre-configured scope.","commands":{"allow":["join"],"deny":[]}},"allow-normalize":{"identifier":"allow-normalize","description":"Enables the normalize command without any pre-configured scope.","commands":{"allow":["normalize"],"deny":[]}},"allow-resolve":{"identifier":"allow-resolve","description":"Enables the resolve command without any pre-configured scope.","commands":{"allow":["resolve"],"deny":[]}},"allow-resolve-directory":{"identifier":"allow-resolve-directory","description":"Enables the resolve_directory command without any pre-configured scope.","commands":{"allow":["resolve_directory"],"deny":[]}},"deny-basename":{"identifier":"deny-basename","description":"Denies the basename command without any pre-configured scope.","commands":{"allow":[],"deny":["basename"]}},"deny-dirname":{"identifier":"deny-dirname","description":"Denies the dirname command without any pre-configured scope.","commands":{"allow":[],"deny":["dirname"]}},"deny-extname":{"identifier":"deny-extname","description":"Denies the extname command without any pre-configured scope.","commands":{"allow":[],"deny":["extname"]}},"deny-is-absolute":{"identifier":"deny-is-absolute","description":"Denies the is_absolute command without any pre-configured scope.","commands":{"allow":[],"deny":["is_absolute"]}},"deny-join":{"identifier":"deny-join","description":"Denies the join command without any pre-configured scope.","commands":{"allow":[],"deny":["join"]}},"deny-normalize":{"identifier":"deny-normalize","description":"Denies the normalize command without any pre-configured scope.","commands":{"allow":[],"deny":["normalize"]}},"deny-resolve":{"identifier":"deny-resolve","description":"Denies the resolve command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve"]}},"deny-resolve-directory":{"identifier":"deny-resolve-directory","description":"Denies the resolve_directory command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve_directory"]}}},"permission_sets":{},"global_scope_schema":null},"core:resources":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-close"]},"permissions":{"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}}},"permission_sets":{},"global_scope_schema":null},"core:tray":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-get-by-id","allow-remove-by-id","allow-set-icon","allow-set-menu","allow-set-tooltip","allow-set-title","allow-set-visible","allow-set-temp-dir-path","allow-set-icon-as-template","allow-set-show-menu-on-left-click"]},"permissions":{"allow-get-by-id":{"identifier":"allow-get-by-id","description":"Enables the get_by_id command without any pre-configured scope.","commands":{"allow":["get_by_id"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-remove-by-id":{"identifier":"allow-remove-by-id","description":"Enables the remove_by_id command without any pre-configured scope.","commands":{"allow":["remove_by_id"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-icon-as-template":{"identifier":"allow-set-icon-as-template","description":"Enables the set_icon_as_template command without any pre-configured scope.","commands":{"allow":["set_icon_as_template"],"deny":[]}},"allow-set-menu":{"identifier":"allow-set-menu","description":"Enables the set_menu command without any pre-configured scope.","commands":{"allow":["set_menu"],"deny":[]}},"allow-set-show-menu-on-left-click":{"identifier":"allow-set-show-menu-on-left-click","description":"Enables the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":["set_show_menu_on_left_click"],"deny":[]}},"allow-set-temp-dir-path":{"identifier":"allow-set-temp-dir-path","description":"Enables the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":["set_temp_dir_path"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-tooltip":{"identifier":"allow-set-tooltip","description":"Enables the set_tooltip command without any pre-configured scope.","commands":{"allow":["set_tooltip"],"deny":[]}},"allow-set-visible":{"identifier":"allow-set-visible","description":"Enables the set_visible command without any pre-configured scope.","commands":{"allow":["set_visible"],"deny":[]}},"deny-get-by-id":{"identifier":"deny-get-by-id","description":"Denies the get_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["get_by_id"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-remove-by-id":{"identifier":"deny-remove-by-id","description":"Denies the remove_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_by_id"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-icon-as-template":{"identifier":"deny-set-icon-as-template","description":"Denies the set_icon_as_template command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon_as_template"]}},"deny-set-menu":{"identifier":"deny-set-menu","description":"Denies the set_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_menu"]}},"deny-set-show-menu-on-left-click":{"identifier":"deny-set-show-menu-on-left-click","description":"Denies the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":[],"deny":["set_show_menu_on_left_click"]}},"deny-set-temp-dir-path":{"identifier":"deny-set-temp-dir-path","description":"Denies the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":[],"deny":["set_temp_dir_path"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-tooltip":{"identifier":"deny-set-tooltip","description":"Denies the set_tooltip command without any pre-configured scope.","commands":{"allow":[],"deny":["set_tooltip"]}},"deny-set-visible":{"identifier":"deny-set-visible","description":"Denies the set_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible"]}}},"permission_sets":{},"global_scope_schema":null},"core:webview":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-webviews","allow-webview-position","allow-webview-size","allow-internal-toggle-devtools"]},"permissions":{"allow-clear-all-browsing-data":{"identifier":"allow-clear-all-browsing-data","description":"Enables the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":["clear_all_browsing_data"],"deny":[]}},"allow-create-webview":{"identifier":"allow-create-webview","description":"Enables the create_webview command without any pre-configured scope.","commands":{"allow":["create_webview"],"deny":[]}},"allow-create-webview-window":{"identifier":"allow-create-webview-window","description":"Enables the create_webview_window command without any pre-configured scope.","commands":{"allow":["create_webview_window"],"deny":[]}},"allow-get-all-webviews":{"identifier":"allow-get-all-webviews","description":"Enables the get_all_webviews command without any pre-configured scope.","commands":{"allow":["get_all_webviews"],"deny":[]}},"allow-internal-toggle-devtools":{"identifier":"allow-internal-toggle-devtools","description":"Enables the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":["internal_toggle_devtools"],"deny":[]}},"allow-print":{"identifier":"allow-print","description":"Enables the print command without any pre-configured scope.","commands":{"allow":["print"],"deny":[]}},"allow-reparent":{"identifier":"allow-reparent","description":"Enables the reparent command without any pre-configured scope.","commands":{"allow":["reparent"],"deny":[]}},"allow-set-webview-auto-resize":{"identifier":"allow-set-webview-auto-resize","description":"Enables the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":["set_webview_auto_resize"],"deny":[]}},"allow-set-webview-background-color":{"identifier":"allow-set-webview-background-color","description":"Enables the set_webview_background_color command without any pre-configured scope.","commands":{"allow":["set_webview_background_color"],"deny":[]}},"allow-set-webview-focus":{"identifier":"allow-set-webview-focus","description":"Enables the set_webview_focus command without any pre-configured scope.","commands":{"allow":["set_webview_focus"],"deny":[]}},"allow-set-webview-position":{"identifier":"allow-set-webview-position","description":"Enables the set_webview_position command without any pre-configured scope.","commands":{"allow":["set_webview_position"],"deny":[]}},"allow-set-webview-size":{"identifier":"allow-set-webview-size","description":"Enables the set_webview_size command without any pre-configured scope.","commands":{"allow":["set_webview_size"],"deny":[]}},"allow-set-webview-zoom":{"identifier":"allow-set-webview-zoom","description":"Enables the set_webview_zoom command without any pre-configured scope.","commands":{"allow":["set_webview_zoom"],"deny":[]}},"allow-webview-close":{"identifier":"allow-webview-close","description":"Enables the webview_close command without any pre-configured scope.","commands":{"allow":["webview_close"],"deny":[]}},"allow-webview-hide":{"identifier":"allow-webview-hide","description":"Enables the webview_hide command without any pre-configured scope.","commands":{"allow":["webview_hide"],"deny":[]}},"allow-webview-position":{"identifier":"allow-webview-position","description":"Enables the webview_position command without any pre-configured scope.","commands":{"allow":["webview_position"],"deny":[]}},"allow-webview-show":{"identifier":"allow-webview-show","description":"Enables the webview_show command without any pre-configured scope.","commands":{"allow":["webview_show"],"deny":[]}},"allow-webview-size":{"identifier":"allow-webview-size","description":"Enables the webview_size command without any pre-configured scope.","commands":{"allow":["webview_size"],"deny":[]}},"deny-clear-all-browsing-data":{"identifier":"deny-clear-all-browsing-data","description":"Denies the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":[],"deny":["clear_all_browsing_data"]}},"deny-create-webview":{"identifier":"deny-create-webview","description":"Denies the create_webview command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview"]}},"deny-create-webview-window":{"identifier":"deny-create-webview-window","description":"Denies the create_webview_window command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview_window"]}},"deny-get-all-webviews":{"identifier":"deny-get-all-webviews","description":"Denies the get_all_webviews command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_webviews"]}},"deny-internal-toggle-devtools":{"identifier":"deny-internal-toggle-devtools","description":"Denies the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_devtools"]}},"deny-print":{"identifier":"deny-print","description":"Denies the print command without any pre-configured scope.","commands":{"allow":[],"deny":["print"]}},"deny-reparent":{"identifier":"deny-reparent","description":"Denies the reparent command without any pre-configured scope.","commands":{"allow":[],"deny":["reparent"]}},"deny-set-webview-auto-resize":{"identifier":"deny-set-webview-auto-resize","description":"Denies the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_auto_resize"]}},"deny-set-webview-background-color":{"identifier":"deny-set-webview-background-color","description":"Denies the set_webview_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_background_color"]}},"deny-set-webview-focus":{"identifier":"deny-set-webview-focus","description":"Denies the set_webview_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_focus"]}},"deny-set-webview-position":{"identifier":"deny-set-webview-position","description":"Denies the set_webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_position"]}},"deny-set-webview-size":{"identifier":"deny-set-webview-size","description":"Denies the set_webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_size"]}},"deny-set-webview-zoom":{"identifier":"deny-set-webview-zoom","description":"Denies the set_webview_zoom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_zoom"]}},"deny-webview-close":{"identifier":"deny-webview-close","description":"Denies the webview_close command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_close"]}},"deny-webview-hide":{"identifier":"deny-webview-hide","description":"Denies the webview_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_hide"]}},"deny-webview-position":{"identifier":"deny-webview-position","description":"Denies the webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_position"]}},"deny-webview-show":{"identifier":"deny-webview-show","description":"Denies the webview_show command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_show"]}},"deny-webview-size":{"identifier":"deny-webview-size","description":"Denies the webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_size"]}}},"permission_sets":{},"global_scope_schema":null},"core:window":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-windows","allow-scale-factor","allow-inner-position","allow-outer-position","allow-inner-size","allow-outer-size","allow-is-fullscreen","allow-is-minimized","allow-is-maximized","allow-is-focused","allow-is-decorated","allow-is-resizable","allow-is-maximizable","allow-is-minimizable","allow-is-closable","allow-is-visible","allow-is-enabled","allow-title","allow-current-monitor","allow-primary-monitor","allow-monitor-from-point","allow-available-monitors","allow-cursor-position","allow-theme","allow-is-always-on-top","allow-internal-toggle-maximize"]},"permissions":{"allow-available-monitors":{"identifier":"allow-available-monitors","description":"Enables the available_monitors command without any pre-configured scope.","commands":{"allow":["available_monitors"],"deny":[]}},"allow-center":{"identifier":"allow-center","description":"Enables the center command without any pre-configured scope.","commands":{"allow":["center"],"deny":[]}},"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"allow-create":{"identifier":"allow-create","description":"Enables the create command without any pre-configured scope.","commands":{"allow":["create"],"deny":[]}},"allow-current-monitor":{"identifier":"allow-current-monitor","description":"Enables the current_monitor command without any pre-configured scope.","commands":{"allow":["current_monitor"],"deny":[]}},"allow-cursor-position":{"identifier":"allow-cursor-position","description":"Enables the cursor_position command without any pre-configured scope.","commands":{"allow":["cursor_position"],"deny":[]}},"allow-destroy":{"identifier":"allow-destroy","description":"Enables the destroy command without any pre-configured scope.","commands":{"allow":["destroy"],"deny":[]}},"allow-get-all-windows":{"identifier":"allow-get-all-windows","description":"Enables the get_all_windows command without any pre-configured scope.","commands":{"allow":["get_all_windows"],"deny":[]}},"allow-hide":{"identifier":"allow-hide","description":"Enables the hide command without any pre-configured scope.","commands":{"allow":["hide"],"deny":[]}},"allow-inner-position":{"identifier":"allow-inner-position","description":"Enables the inner_position command without any pre-configured scope.","commands":{"allow":["inner_position"],"deny":[]}},"allow-inner-size":{"identifier":"allow-inner-size","description":"Enables the inner_size command without any pre-configured scope.","commands":{"allow":["inner_size"],"deny":[]}},"allow-internal-toggle-maximize":{"identifier":"allow-internal-toggle-maximize","description":"Enables the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":["internal_toggle_maximize"],"deny":[]}},"allow-is-always-on-top":{"identifier":"allow-is-always-on-top","description":"Enables the is_always_on_top command without any pre-configured scope.","commands":{"allow":["is_always_on_top"],"deny":[]}},"allow-is-closable":{"identifier":"allow-is-closable","description":"Enables the is_closable command without any pre-configured scope.","commands":{"allow":["is_closable"],"deny":[]}},"allow-is-decorated":{"identifier":"allow-is-decorated","description":"Enables the is_decorated command without any pre-configured scope.","commands":{"allow":["is_decorated"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-is-focused":{"identifier":"allow-is-focused","description":"Enables the is_focused command without any pre-configured scope.","commands":{"allow":["is_focused"],"deny":[]}},"allow-is-fullscreen":{"identifier":"allow-is-fullscreen","description":"Enables the is_fullscreen command without any pre-configured scope.","commands":{"allow":["is_fullscreen"],"deny":[]}},"allow-is-maximizable":{"identifier":"allow-is-maximizable","description":"Enables the is_maximizable command without any pre-configured scope.","commands":{"allow":["is_maximizable"],"deny":[]}},"allow-is-maximized":{"identifier":"allow-is-maximized","description":"Enables the is_maximized command without any pre-configured scope.","commands":{"allow":["is_maximized"],"deny":[]}},"allow-is-minimizable":{"identifier":"allow-is-minimizable","description":"Enables the is_minimizable command without any pre-configured scope.","commands":{"allow":["is_minimizable"],"deny":[]}},"allow-is-minimized":{"identifier":"allow-is-minimized","description":"Enables the is_minimized command without any pre-configured scope.","commands":{"allow":["is_minimized"],"deny":[]}},"allow-is-resizable":{"identifier":"allow-is-resizable","description":"Enables the is_resizable command without any pre-configured scope.","commands":{"allow":["is_resizable"],"deny":[]}},"allow-is-visible":{"identifier":"allow-is-visible","description":"Enables the is_visible command without any pre-configured scope.","commands":{"allow":["is_visible"],"deny":[]}},"allow-maximize":{"identifier":"allow-maximize","description":"Enables the maximize command without any pre-configured scope.","commands":{"allow":["maximize"],"deny":[]}},"allow-minimize":{"identifier":"allow-minimize","description":"Enables the minimize command without any pre-configured scope.","commands":{"allow":["minimize"],"deny":[]}},"allow-monitor-from-point":{"identifier":"allow-monitor-from-point","description":"Enables the monitor_from_point command without any pre-configured scope.","commands":{"allow":["monitor_from_point"],"deny":[]}},"allow-outer-position":{"identifier":"allow-outer-position","description":"Enables the outer_position command without any pre-configured scope.","commands":{"allow":["outer_position"],"deny":[]}},"allow-outer-size":{"identifier":"allow-outer-size","description":"Enables the outer_size command without any pre-configured scope.","commands":{"allow":["outer_size"],"deny":[]}},"allow-primary-monitor":{"identifier":"allow-primary-monitor","description":"Enables the primary_monitor command without any pre-configured scope.","commands":{"allow":["primary_monitor"],"deny":[]}},"allow-request-user-attention":{"identifier":"allow-request-user-attention","description":"Enables the request_user_attention command without any pre-configured scope.","commands":{"allow":["request_user_attention"],"deny":[]}},"allow-scale-factor":{"identifier":"allow-scale-factor","description":"Enables the scale_factor command without any pre-configured scope.","commands":{"allow":["scale_factor"],"deny":[]}},"allow-set-always-on-bottom":{"identifier":"allow-set-always-on-bottom","description":"Enables the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":["set_always_on_bottom"],"deny":[]}},"allow-set-always-on-top":{"identifier":"allow-set-always-on-top","description":"Enables the set_always_on_top command without any pre-configured scope.","commands":{"allow":["set_always_on_top"],"deny":[]}},"allow-set-background-color":{"identifier":"allow-set-background-color","description":"Enables the set_background_color command without any pre-configured scope.","commands":{"allow":["set_background_color"],"deny":[]}},"allow-set-badge-count":{"identifier":"allow-set-badge-count","description":"Enables the set_badge_count command without any pre-configured scope.","commands":{"allow":["set_badge_count"],"deny":[]}},"allow-set-badge-label":{"identifier":"allow-set-badge-label","description":"Enables the set_badge_label command without any pre-configured scope.","commands":{"allow":["set_badge_label"],"deny":[]}},"allow-set-closable":{"identifier":"allow-set-closable","description":"Enables the set_closable command without any pre-configured scope.","commands":{"allow":["set_closable"],"deny":[]}},"allow-set-content-protected":{"identifier":"allow-set-content-protected","description":"Enables the set_content_protected command without any pre-configured scope.","commands":{"allow":["set_content_protected"],"deny":[]}},"allow-set-cursor-grab":{"identifier":"allow-set-cursor-grab","description":"Enables the set_cursor_grab command without any pre-configured scope.","commands":{"allow":["set_cursor_grab"],"deny":[]}},"allow-set-cursor-icon":{"identifier":"allow-set-cursor-icon","description":"Enables the set_cursor_icon command without any pre-configured scope.","commands":{"allow":["set_cursor_icon"],"deny":[]}},"allow-set-cursor-position":{"identifier":"allow-set-cursor-position","description":"Enables the set_cursor_position command without any pre-configured scope.","commands":{"allow":["set_cursor_position"],"deny":[]}},"allow-set-cursor-visible":{"identifier":"allow-set-cursor-visible","description":"Enables the set_cursor_visible command without any pre-configured scope.","commands":{"allow":["set_cursor_visible"],"deny":[]}},"allow-set-decorations":{"identifier":"allow-set-decorations","description":"Enables the set_decorations command without any pre-configured scope.","commands":{"allow":["set_decorations"],"deny":[]}},"allow-set-effects":{"identifier":"allow-set-effects","description":"Enables the set_effects command without any pre-configured scope.","commands":{"allow":["set_effects"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-focus":{"identifier":"allow-set-focus","description":"Enables the set_focus command without any pre-configured scope.","commands":{"allow":["set_focus"],"deny":[]}},"allow-set-focusable":{"identifier":"allow-set-focusable","description":"Enables the set_focusable command without any pre-configured scope.","commands":{"allow":["set_focusable"],"deny":[]}},"allow-set-fullscreen":{"identifier":"allow-set-fullscreen","description":"Enables the set_fullscreen command without any pre-configured scope.","commands":{"allow":["set_fullscreen"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-ignore-cursor-events":{"identifier":"allow-set-ignore-cursor-events","description":"Enables the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":["set_ignore_cursor_events"],"deny":[]}},"allow-set-max-size":{"identifier":"allow-set-max-size","description":"Enables the set_max_size command without any pre-configured scope.","commands":{"allow":["set_max_size"],"deny":[]}},"allow-set-maximizable":{"identifier":"allow-set-maximizable","description":"Enables the set_maximizable command without any pre-configured scope.","commands":{"allow":["set_maximizable"],"deny":[]}},"allow-set-min-size":{"identifier":"allow-set-min-size","description":"Enables the set_min_size command without any pre-configured scope.","commands":{"allow":["set_min_size"],"deny":[]}},"allow-set-minimizable":{"identifier":"allow-set-minimizable","description":"Enables the set_minimizable command without any pre-configured scope.","commands":{"allow":["set_minimizable"],"deny":[]}},"allow-set-overlay-icon":{"identifier":"allow-set-overlay-icon","description":"Enables the set_overlay_icon command without any pre-configured scope.","commands":{"allow":["set_overlay_icon"],"deny":[]}},"allow-set-position":{"identifier":"allow-set-position","description":"Enables the set_position command without any pre-configured scope.","commands":{"allow":["set_position"],"deny":[]}},"allow-set-progress-bar":{"identifier":"allow-set-progress-bar","description":"Enables the set_progress_bar command without any pre-configured scope.","commands":{"allow":["set_progress_bar"],"deny":[]}},"allow-set-resizable":{"identifier":"allow-set-resizable","description":"Enables the set_resizable command without any pre-configured scope.","commands":{"allow":["set_resizable"],"deny":[]}},"allow-set-shadow":{"identifier":"allow-set-shadow","description":"Enables the set_shadow command without any pre-configured scope.","commands":{"allow":["set_shadow"],"deny":[]}},"allow-set-simple-fullscreen":{"identifier":"allow-set-simple-fullscreen","description":"Enables the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":["set_simple_fullscreen"],"deny":[]}},"allow-set-size":{"identifier":"allow-set-size","description":"Enables the set_size command without any pre-configured scope.","commands":{"allow":["set_size"],"deny":[]}},"allow-set-size-constraints":{"identifier":"allow-set-size-constraints","description":"Enables the set_size_constraints command without any pre-configured scope.","commands":{"allow":["set_size_constraints"],"deny":[]}},"allow-set-skip-taskbar":{"identifier":"allow-set-skip-taskbar","description":"Enables the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":["set_skip_taskbar"],"deny":[]}},"allow-set-theme":{"identifier":"allow-set-theme","description":"Enables the set_theme command without any pre-configured scope.","commands":{"allow":["set_theme"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-title-bar-style":{"identifier":"allow-set-title-bar-style","description":"Enables the set_title_bar_style command without any pre-configured scope.","commands":{"allow":["set_title_bar_style"],"deny":[]}},"allow-set-visible-on-all-workspaces":{"identifier":"allow-set-visible-on-all-workspaces","description":"Enables the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":["set_visible_on_all_workspaces"],"deny":[]}},"allow-show":{"identifier":"allow-show","description":"Enables the show command without any pre-configured scope.","commands":{"allow":["show"],"deny":[]}},"allow-start-dragging":{"identifier":"allow-start-dragging","description":"Enables the start_dragging command without any pre-configured scope.","commands":{"allow":["start_dragging"],"deny":[]}},"allow-start-resize-dragging":{"identifier":"allow-start-resize-dragging","description":"Enables the start_resize_dragging command without any pre-configured scope.","commands":{"allow":["start_resize_dragging"],"deny":[]}},"allow-theme":{"identifier":"allow-theme","description":"Enables the theme command without any pre-configured scope.","commands":{"allow":["theme"],"deny":[]}},"allow-title":{"identifier":"allow-title","description":"Enables the title command without any pre-configured scope.","commands":{"allow":["title"],"deny":[]}},"allow-toggle-maximize":{"identifier":"allow-toggle-maximize","description":"Enables the toggle_maximize command without any pre-configured scope.","commands":{"allow":["toggle_maximize"],"deny":[]}},"allow-unmaximize":{"identifier":"allow-unmaximize","description":"Enables the unmaximize command without any pre-configured scope.","commands":{"allow":["unmaximize"],"deny":[]}},"allow-unminimize":{"identifier":"allow-unminimize","description":"Enables the unminimize command without any pre-configured scope.","commands":{"allow":["unminimize"],"deny":[]}},"deny-available-monitors":{"identifier":"deny-available-monitors","description":"Denies the available_monitors command without any pre-configured scope.","commands":{"allow":[],"deny":["available_monitors"]}},"deny-center":{"identifier":"deny-center","description":"Denies the center command without any pre-configured scope.","commands":{"allow":[],"deny":["center"]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}},"deny-create":{"identifier":"deny-create","description":"Denies the create command without any pre-configured scope.","commands":{"allow":[],"deny":["create"]}},"deny-current-monitor":{"identifier":"deny-current-monitor","description":"Denies the current_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["current_monitor"]}},"deny-cursor-position":{"identifier":"deny-cursor-position","description":"Denies the cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["cursor_position"]}},"deny-destroy":{"identifier":"deny-destroy","description":"Denies the destroy command without any pre-configured scope.","commands":{"allow":[],"deny":["destroy"]}},"deny-get-all-windows":{"identifier":"deny-get-all-windows","description":"Denies the get_all_windows command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_windows"]}},"deny-hide":{"identifier":"deny-hide","description":"Denies the hide command without any pre-configured scope.","commands":{"allow":[],"deny":["hide"]}},"deny-inner-position":{"identifier":"deny-inner-position","description":"Denies the inner_position command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_position"]}},"deny-inner-size":{"identifier":"deny-inner-size","description":"Denies the inner_size command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_size"]}},"deny-internal-toggle-maximize":{"identifier":"deny-internal-toggle-maximize","description":"Denies the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_maximize"]}},"deny-is-always-on-top":{"identifier":"deny-is-always-on-top","description":"Denies the is_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["is_always_on_top"]}},"deny-is-closable":{"identifier":"deny-is-closable","description":"Denies the is_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_closable"]}},"deny-is-decorated":{"identifier":"deny-is-decorated","description":"Denies the is_decorated command without any pre-configured scope.","commands":{"allow":[],"deny":["is_decorated"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-is-focused":{"identifier":"deny-is-focused","description":"Denies the is_focused command without any pre-configured scope.","commands":{"allow":[],"deny":["is_focused"]}},"deny-is-fullscreen":{"identifier":"deny-is-fullscreen","description":"Denies the is_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["is_fullscreen"]}},"deny-is-maximizable":{"identifier":"deny-is-maximizable","description":"Denies the is_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximizable"]}},"deny-is-maximized":{"identifier":"deny-is-maximized","description":"Denies the is_maximized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximized"]}},"deny-is-minimizable":{"identifier":"deny-is-minimizable","description":"Denies the is_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimizable"]}},"deny-is-minimized":{"identifier":"deny-is-minimized","description":"Denies the is_minimized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimized"]}},"deny-is-resizable":{"identifier":"deny-is-resizable","description":"Denies the is_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_resizable"]}},"deny-is-visible":{"identifier":"deny-is-visible","description":"Denies the is_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["is_visible"]}},"deny-maximize":{"identifier":"deny-maximize","description":"Denies the maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["maximize"]}},"deny-minimize":{"identifier":"deny-minimize","description":"Denies the minimize command without any pre-configured scope.","commands":{"allow":[],"deny":["minimize"]}},"deny-monitor-from-point":{"identifier":"deny-monitor-from-point","description":"Denies the monitor_from_point command without any pre-configured scope.","commands":{"allow":[],"deny":["monitor_from_point"]}},"deny-outer-position":{"identifier":"deny-outer-position","description":"Denies the outer_position command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_position"]}},"deny-outer-size":{"identifier":"deny-outer-size","description":"Denies the outer_size command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_size"]}},"deny-primary-monitor":{"identifier":"deny-primary-monitor","description":"Denies the primary_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["primary_monitor"]}},"deny-request-user-attention":{"identifier":"deny-request-user-attention","description":"Denies the request_user_attention command without any pre-configured scope.","commands":{"allow":[],"deny":["request_user_attention"]}},"deny-scale-factor":{"identifier":"deny-scale-factor","description":"Denies the scale_factor command without any pre-configured scope.","commands":{"allow":[],"deny":["scale_factor"]}},"deny-set-always-on-bottom":{"identifier":"deny-set-always-on-bottom","description":"Denies the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_bottom"]}},"deny-set-always-on-top":{"identifier":"deny-set-always-on-top","description":"Denies the set_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_top"]}},"deny-set-background-color":{"identifier":"deny-set-background-color","description":"Denies the set_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_background_color"]}},"deny-set-badge-count":{"identifier":"deny-set-badge-count","description":"Denies the set_badge_count command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_count"]}},"deny-set-badge-label":{"identifier":"deny-set-badge-label","description":"Denies the set_badge_label command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_label"]}},"deny-set-closable":{"identifier":"deny-set-closable","description":"Denies the set_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_closable"]}},"deny-set-content-protected":{"identifier":"deny-set-content-protected","description":"Denies the set_content_protected command without any pre-configured scope.","commands":{"allow":[],"deny":["set_content_protected"]}},"deny-set-cursor-grab":{"identifier":"deny-set-cursor-grab","description":"Denies the set_cursor_grab command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_grab"]}},"deny-set-cursor-icon":{"identifier":"deny-set-cursor-icon","description":"Denies the set_cursor_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_icon"]}},"deny-set-cursor-position":{"identifier":"deny-set-cursor-position","description":"Denies the set_cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_position"]}},"deny-set-cursor-visible":{"identifier":"deny-set-cursor-visible","description":"Denies the set_cursor_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_visible"]}},"deny-set-decorations":{"identifier":"deny-set-decorations","description":"Denies the set_decorations command without any pre-configured scope.","commands":{"allow":[],"deny":["set_decorations"]}},"deny-set-effects":{"identifier":"deny-set-effects","description":"Denies the set_effects command without any pre-configured scope.","commands":{"allow":[],"deny":["set_effects"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-focus":{"identifier":"deny-set-focus","description":"Denies the set_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focus"]}},"deny-set-focusable":{"identifier":"deny-set-focusable","description":"Denies the set_focusable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focusable"]}},"deny-set-fullscreen":{"identifier":"deny-set-fullscreen","description":"Denies the set_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_fullscreen"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-ignore-cursor-events":{"identifier":"deny-set-ignore-cursor-events","description":"Denies the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":[],"deny":["set_ignore_cursor_events"]}},"deny-set-max-size":{"identifier":"deny-set-max-size","description":"Denies the set_max_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_max_size"]}},"deny-set-maximizable":{"identifier":"deny-set-maximizable","description":"Denies the set_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_maximizable"]}},"deny-set-min-size":{"identifier":"deny-set-min-size","description":"Denies the set_min_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_min_size"]}},"deny-set-minimizable":{"identifier":"deny-set-minimizable","description":"Denies the set_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_minimizable"]}},"deny-set-overlay-icon":{"identifier":"deny-set-overlay-icon","description":"Denies the set_overlay_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_overlay_icon"]}},"deny-set-position":{"identifier":"deny-set-position","description":"Denies the set_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_position"]}},"deny-set-progress-bar":{"identifier":"deny-set-progress-bar","description":"Denies the set_progress_bar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_progress_bar"]}},"deny-set-resizable":{"identifier":"deny-set-resizable","description":"Denies the set_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_resizable"]}},"deny-set-shadow":{"identifier":"deny-set-shadow","description":"Denies the set_shadow command without any pre-configured scope.","commands":{"allow":[],"deny":["set_shadow"]}},"deny-set-simple-fullscreen":{"identifier":"deny-set-simple-fullscreen","description":"Denies the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_simple_fullscreen"]}},"deny-set-size":{"identifier":"deny-set-size","description":"Denies the set_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size"]}},"deny-set-size-constraints":{"identifier":"deny-set-size-constraints","description":"Denies the set_size_constraints command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size_constraints"]}},"deny-set-skip-taskbar":{"identifier":"deny-set-skip-taskbar","description":"Denies the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_skip_taskbar"]}},"deny-set-theme":{"identifier":"deny-set-theme","description":"Denies the set_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_theme"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-title-bar-style":{"identifier":"deny-set-title-bar-style","description":"Denies the set_title_bar_style command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title_bar_style"]}},"deny-set-visible-on-all-workspaces":{"identifier":"deny-set-visible-on-all-workspaces","description":"Denies the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible_on_all_workspaces"]}},"deny-show":{"identifier":"deny-show","description":"Denies the show command without any pre-configured scope.","commands":{"allow":[],"deny":["show"]}},"deny-start-dragging":{"identifier":"deny-start-dragging","description":"Denies the start_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_dragging"]}},"deny-start-resize-dragging":{"identifier":"deny-start-resize-dragging","description":"Denies the start_resize_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_resize_dragging"]}},"deny-theme":{"identifier":"deny-theme","description":"Denies the theme command without any pre-configured scope.","commands":{"allow":[],"deny":["theme"]}},"deny-title":{"identifier":"deny-title","description":"Denies the title command without any pre-configured scope.","commands":{"allow":[],"deny":["title"]}},"deny-toggle-maximize":{"identifier":"deny-toggle-maximize","description":"Denies the toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["toggle_maximize"]}},"deny-unmaximize":{"identifier":"deny-unmaximize","description":"Denies the unmaximize command without any pre-configured scope.","commands":{"allow":[],"deny":["unmaximize"]}},"deny-unminimize":{"identifier":"deny-unminimize","description":"Denies the unminimize command without any pre-configured scope.","commands":{"allow":[],"deny":["unminimize"]}}},"permission_sets":{},"global_scope_schema":null},"shell":{"default_permission":{"identifier":"default","description":"This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n","permissions":["allow-open"]},"permissions":{"allow-execute":{"identifier":"allow-execute","description":"Enables the execute command without any pre-configured scope.","commands":{"allow":["execute"],"deny":[]}},"allow-kill":{"identifier":"allow-kill","description":"Enables the kill command without any pre-configured scope.","commands":{"allow":["kill"],"deny":[]}},"allow-open":{"identifier":"allow-open","description":"Enables the open command without any pre-configured scope.","commands":{"allow":["open"],"deny":[]}},"allow-spawn":{"identifier":"allow-spawn","description":"Enables the spawn command without any pre-configured scope.","commands":{"allow":["spawn"],"deny":[]}},"allow-stdin-write":{"identifier":"allow-stdin-write","description":"Enables the stdin_write command without any pre-configured scope.","commands":{"allow":["stdin_write"],"deny":[]}},"deny-execute":{"identifier":"deny-execute","description":"Denies the execute command without any pre-configured scope.","commands":{"allow":[],"deny":["execute"]}},"deny-kill":{"identifier":"deny-kill","description":"Denies the kill command without any pre-configured scope.","commands":{"allow":[],"deny":["kill"]}},"deny-open":{"identifier":"deny-open","description":"Denies the open command without any pre-configured scope.","commands":{"allow":[],"deny":["open"]}},"deny-spawn":{"identifier":"deny-spawn","description":"Denies the spawn command without any pre-configured scope.","commands":{"allow":[],"deny":["spawn"]}},"deny-stdin-write":{"identifier":"deny-stdin-write","description":"Denies the stdin_write command without any pre-configured scope.","commands":{"allow":[],"deny":["stdin_write"]}}},"permission_sets":{},"global_scope_schema":{"$schema":"http://json-schema.org/draft-07/schema#","anyOf":[{"additionalProperties":false,"properties":{"args":{"allOf":[{"$ref":"#/definitions/ShellScopeEntryAllowedArgs"}],"description":"The allowed arguments for the command execution."},"cmd":{"description":"The command name. It can start with a variable that resolves to a system base directory. The variables are: `$AUDIO`, `$CACHE`, `$CONFIG`, `$DATA`, `$LOCALDATA`, `$DESKTOP`, `$DOCUMENT`, `$DOWNLOAD`, `$EXE`, `$FONT`, `$HOME`, `$PICTURE`, `$PUBLIC`, `$RUNTIME`, `$TEMPLATE`, `$VIDEO`, `$RESOURCE`, `$LOG`, `$TEMP`, `$APPCONFIG`, `$APPDATA`, `$APPLOCALDATA`, `$APPCACHE`, `$APPLOG`.","type":"string"},"name":{"description":"The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.","type":"string"}},"required":["cmd","name"],"type":"object"},{"additionalProperties":false,"properties":{"args":{"allOf":[{"$ref":"#/definitions/ShellScopeEntryAllowedArgs"}],"description":"The allowed arguments for the command execution."},"name":{"description":"The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.","type":"string"},"sidecar":{"description":"If this command is a sidecar command.","type":"boolean"}},"required":["name","sidecar"],"type":"object"}],"definitions":{"ShellScopeEntryAllowedArg":{"anyOf":[{"description":"A non-configurable argument that is passed to the command in the order it was specified.","type":"string"},{"additionalProperties":false,"description":"A variable that is set while calling the command from the webview API.","properties":{"raw":{"default":false,"description":"Marks the validator as a raw regex, meaning the plugin should not make any modification at runtime.\n\nThis means the regex will not match on the entire string by default, which might be exploited if your regex allow unexpected input to be considered valid. When using this option, make sure your regex is correct.","type":"boolean"},"validator":{"description":"[regex] validator to require passed values to conform to an expected input.\n\nThis will require the argument value passed to this variable to match the `validator` regex before it will be executed.\n\nThe regex string is by default surrounded by `^...$` to match the full string. For example the `https?://\\w+` regex would be registered as `^https?://\\w+$`.\n\n[regex]: <https://docs.rs/regex/latest/regex/#syntax>","type":"string"}},"required":["validator"],"type":"object"}],"description":"A command argument allowed to be executed by the webview API."},"ShellScopeEntryAllowedArgs":{"anyOf":[{"description":"Use a simple boolean to allow all or disable all arguments to this command configuration.","type":"boolean"},{"description":"A specific set of [`ShellScopeEntryAllowedArg`] that are valid to call for the command configuration.","items":{"$ref":"#/definitions/ShellScopeEntryAllowedArg"},"type":"array"}],"description":"A set of command arguments allowed to be executed by the webview API.\n\nA value of `true` will allow any arguments to be passed to the command. `false` will disable all arguments. A list of [`ShellScopeEntryAllowedArg`] will set those arguments as the only valid arguments to be passed to the attached command configuration."}},"description":"Shell scope entry.","title":"ShellScopeEntry"}}}
\ No newline at end of file
+{"core":{"default_permission":{"identifier":"default","description":"Default core plugins set.","permissions":["core:path:default","core:event:default","core:window:default","core:webview:default","core:app:default","core:image:default","core:resources:default","core:menu:default","core:tray:default"]},"permissions":{},"permission_sets":{},"global_scope_schema":null},"core:app":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-version","allow-name","allow-tauri-version","allow-identifier","allow-bundle-type","allow-register-listener","allow-remove-listener","allow-supports-multiple-windows"]},"permissions":{"allow-app-hide":{"identifier":"allow-app-hide","description":"Enables the app_hide command without any pre-configured scope.","commands":{"allow":["app_hide"],"deny":[]}},"allow-app-show":{"identifier":"allow-app-show","description":"Enables the app_show command without any pre-configured scope.","commands":{"allow":["app_show"],"deny":[]}},"allow-bundle-type":{"identifier":"allow-bundle-type","description":"Enables the bundle_type command without any pre-configured scope.","commands":{"allow":["bundle_type"],"deny":[]}},"allow-default-window-icon":{"identifier":"allow-default-window-icon","description":"Enables the default_window_icon command without any pre-configured scope.","commands":{"allow":["default_window_icon"],"deny":[]}},"allow-fetch-data-store-identifiers":{"identifier":"allow-fetch-data-store-identifiers","description":"Enables the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":["fetch_data_store_identifiers"],"deny":[]}},"allow-identifier":{"identifier":"allow-identifier","description":"Enables the identifier command without any pre-configured scope.","commands":{"allow":["identifier"],"deny":[]}},"allow-name":{"identifier":"allow-name","description":"Enables the name command without any pre-configured scope.","commands":{"allow":["name"],"deny":[]}},"allow-register-listener":{"identifier":"allow-register-listener","description":"Enables the register_listener command without any pre-configured scope.","commands":{"allow":["register_listener"],"deny":[]}},"allow-remove-data-store":{"identifier":"allow-remove-data-store","description":"Enables the remove_data_store command without any pre-configured scope.","commands":{"allow":["remove_data_store"],"deny":[]}},"allow-remove-listener":{"identifier":"allow-remove-listener","description":"Enables the remove_listener command without any pre-configured scope.","commands":{"allow":["remove_listener"],"deny":[]}},"allow-set-app-theme":{"identifier":"allow-set-app-theme","description":"Enables the set_app_theme command without any pre-configured scope.","commands":{"allow":["set_app_theme"],"deny":[]}},"allow-set-dock-visibility":{"identifier":"allow-set-dock-visibility","description":"Enables the set_dock_visibility command without any pre-configured scope.","commands":{"allow":["set_dock_visibility"],"deny":[]}},"allow-supports-multiple-windows":{"identifier":"allow-supports-multiple-windows","description":"Enables the supports_multiple_windows command without any pre-configured scope.","commands":{"allow":["supports_multiple_windows"],"deny":[]}},"allow-tauri-version":{"identifier":"allow-tauri-version","description":"Enables the tauri_version command without any pre-configured scope.","commands":{"allow":["tauri_version"],"deny":[]}},"allow-version":{"identifier":"allow-version","description":"Enables the version command without any pre-configured scope.","commands":{"allow":["version"],"deny":[]}},"deny-app-hide":{"identifier":"deny-app-hide","description":"Denies the app_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["app_hide"]}},"deny-app-show":{"identifier":"deny-app-show","description":"Denies the app_show command without any pre-configured scope.","commands":{"allow":[],"deny":["app_show"]}},"deny-bundle-type":{"identifier":"deny-bundle-type","description":"Denies the bundle_type command without any pre-configured scope.","commands":{"allow":[],"deny":["bundle_type"]}},"deny-default-window-icon":{"identifier":"deny-default-window-icon","description":"Denies the default_window_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["default_window_icon"]}},"deny-fetch-data-store-identifiers":{"identifier":"deny-fetch-data-store-identifiers","description":"Denies the fetch_data_store_identifiers command without any pre-configured scope.","commands":{"allow":[],"deny":["fetch_data_store_identifiers"]}},"deny-identifier":{"identifier":"deny-identifier","description":"Denies the identifier command without any pre-configured scope.","commands":{"allow":[],"deny":["identifier"]}},"deny-name":{"identifier":"deny-name","description":"Denies the name command without any pre-configured scope.","commands":{"allow":[],"deny":["name"]}},"deny-register-listener":{"identifier":"deny-register-listener","description":"Denies the register_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["register_listener"]}},"deny-remove-data-store":{"identifier":"deny-remove-data-store","description":"Denies the remove_data_store command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_data_store"]}},"deny-remove-listener":{"identifier":"deny-remove-listener","description":"Denies the remove_listener command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_listener"]}},"deny-set-app-theme":{"identifier":"deny-set-app-theme","description":"Denies the set_app_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_app_theme"]}},"deny-set-dock-visibility":{"identifier":"deny-set-dock-visibility","description":"Denies the set_dock_visibility command without any pre-configured scope.","commands":{"allow":[],"deny":["set_dock_visibility"]}},"deny-supports-multiple-windows":{"identifier":"deny-supports-multiple-windows","description":"Denies the supports_multiple_windows command without any pre-configured scope.","commands":{"allow":[],"deny":["supports_multiple_windows"]}},"deny-tauri-version":{"identifier":"deny-tauri-version","description":"Denies the tauri_version command without any pre-configured scope.","commands":{"allow":[],"deny":["tauri_version"]}},"deny-version":{"identifier":"deny-version","description":"Denies the version command without any pre-configured scope.","commands":{"allow":[],"deny":["version"]}}},"permission_sets":{},"global_scope_schema":null},"core:event":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-listen","allow-unlisten","allow-emit","allow-emit-to"]},"permissions":{"allow-emit":{"identifier":"allow-emit","description":"Enables the emit command without any pre-configured scope.","commands":{"allow":["emit"],"deny":[]}},"allow-emit-to":{"identifier":"allow-emit-to","description":"Enables the emit_to command without any pre-configured scope.","commands":{"allow":["emit_to"],"deny":[]}},"allow-listen":{"identifier":"allow-listen","description":"Enables the listen command without any pre-configured scope.","commands":{"allow":["listen"],"deny":[]}},"allow-unlisten":{"identifier":"allow-unlisten","description":"Enables the unlisten command without any pre-configured scope.","commands":{"allow":["unlisten"],"deny":[]}},"deny-emit":{"identifier":"deny-emit","description":"Denies the emit command without any pre-configured scope.","commands":{"allow":[],"deny":["emit"]}},"deny-emit-to":{"identifier":"deny-emit-to","description":"Denies the emit_to command without any pre-configured scope.","commands":{"allow":[],"deny":["emit_to"]}},"deny-listen":{"identifier":"deny-listen","description":"Denies the listen command without any pre-configured scope.","commands":{"allow":[],"deny":["listen"]}},"deny-unlisten":{"identifier":"deny-unlisten","description":"Denies the unlisten command without any pre-configured scope.","commands":{"allow":[],"deny":["unlisten"]}}},"permission_sets":{},"global_scope_schema":null},"core:image":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-from-bytes","allow-from-path","allow-rgba","allow-size"]},"permissions":{"allow-from-bytes":{"identifier":"allow-from-bytes","description":"Enables the from_bytes command without any pre-configured scope.","commands":{"allow":["from_bytes"],"deny":[]}},"allow-from-path":{"identifier":"allow-from-path","description":"Enables the from_path command without any pre-configured scope.","commands":{"allow":["from_path"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-rgba":{"identifier":"allow-rgba","description":"Enables the rgba command without any pre-configured scope.","commands":{"allow":["rgba"],"deny":[]}},"allow-size":{"identifier":"allow-size","description":"Enables the size command without any pre-configured scope.","commands":{"allow":["size"],"deny":[]}},"deny-from-bytes":{"identifier":"deny-from-bytes","description":"Denies the from_bytes command without any pre-configured scope.","commands":{"allow":[],"deny":["from_bytes"]}},"deny-from-path":{"identifier":"deny-from-path","description":"Denies the from_path command without any pre-configured scope.","commands":{"allow":[],"deny":["from_path"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-rgba":{"identifier":"deny-rgba","description":"Denies the rgba command without any pre-configured scope.","commands":{"allow":[],"deny":["rgba"]}},"deny-size":{"identifier":"deny-size","description":"Denies the size command without any pre-configured scope.","commands":{"allow":[],"deny":["size"]}}},"permission_sets":{},"global_scope_schema":null},"core:menu":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-append","allow-prepend","allow-insert","allow-remove","allow-remove-at","allow-items","allow-get","allow-popup","allow-create-default","allow-set-as-app-menu","allow-set-as-window-menu","allow-text","allow-set-text","allow-is-enabled","allow-set-enabled","allow-set-accelerator","allow-set-as-windows-menu-for-nsapp","allow-set-as-help-menu-for-nsapp","allow-is-checked","allow-set-checked","allow-set-icon"]},"permissions":{"allow-append":{"identifier":"allow-append","description":"Enables the append command without any pre-configured scope.","commands":{"allow":["append"],"deny":[]}},"allow-create-default":{"identifier":"allow-create-default","description":"Enables the create_default command without any pre-configured scope.","commands":{"allow":["create_default"],"deny":[]}},"allow-get":{"identifier":"allow-get","description":"Enables the get command without any pre-configured scope.","commands":{"allow":["get"],"deny":[]}},"allow-insert":{"identifier":"allow-insert","description":"Enables the insert command without any pre-configured scope.","commands":{"allow":["insert"],"deny":[]}},"allow-is-checked":{"identifier":"allow-is-checked","description":"Enables the is_checked command without any pre-configured scope.","commands":{"allow":["is_checked"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-items":{"identifier":"allow-items","description":"Enables the items command without any pre-configured scope.","commands":{"allow":["items"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-popup":{"identifier":"allow-popup","description":"Enables the popup command without any pre-configured scope.","commands":{"allow":["popup"],"deny":[]}},"allow-prepend":{"identifier":"allow-prepend","description":"Enables the prepend command without any pre-configured scope.","commands":{"allow":["prepend"],"deny":[]}},"allow-remove":{"identifier":"allow-remove","description":"Enables the remove command without any pre-configured scope.","commands":{"allow":["remove"],"deny":[]}},"allow-remove-at":{"identifier":"allow-remove-at","description":"Enables the remove_at command without any pre-configured scope.","commands":{"allow":["remove_at"],"deny":[]}},"allow-set-accelerator":{"identifier":"allow-set-accelerator","description":"Enables the set_accelerator command without any pre-configured scope.","commands":{"allow":["set_accelerator"],"deny":[]}},"allow-set-as-app-menu":{"identifier":"allow-set-as-app-menu","description":"Enables the set_as_app_menu command without any pre-configured scope.","commands":{"allow":["set_as_app_menu"],"deny":[]}},"allow-set-as-help-menu-for-nsapp":{"identifier":"allow-set-as-help-menu-for-nsapp","description":"Enables the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_help_menu_for_nsapp"],"deny":[]}},"allow-set-as-window-menu":{"identifier":"allow-set-as-window-menu","description":"Enables the set_as_window_menu command without any pre-configured scope.","commands":{"allow":["set_as_window_menu"],"deny":[]}},"allow-set-as-windows-menu-for-nsapp":{"identifier":"allow-set-as-windows-menu-for-nsapp","description":"Enables the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":["set_as_windows_menu_for_nsapp"],"deny":[]}},"allow-set-checked":{"identifier":"allow-set-checked","description":"Enables the set_checked command without any pre-configured scope.","commands":{"allow":["set_checked"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-text":{"identifier":"allow-set-text","description":"Enables the set_text command without any pre-configured scope.","commands":{"allow":["set_text"],"deny":[]}},"allow-text":{"identifier":"allow-text","description":"Enables the text command without any pre-configured scope.","commands":{"allow":["text"],"deny":[]}},"deny-append":{"identifier":"deny-append","description":"Denies the append command without any pre-configured scope.","commands":{"allow":[],"deny":["append"]}},"deny-create-default":{"identifier":"deny-create-default","description":"Denies the create_default command without any pre-configured scope.","commands":{"allow":[],"deny":["create_default"]}},"deny-get":{"identifier":"deny-get","description":"Denies the get command without any pre-configured scope.","commands":{"allow":[],"deny":["get"]}},"deny-insert":{"identifier":"deny-insert","description":"Denies the insert command without any pre-configured scope.","commands":{"allow":[],"deny":["insert"]}},"deny-is-checked":{"identifier":"deny-is-checked","description":"Denies the is_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["is_checked"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-items":{"identifier":"deny-items","description":"Denies the items command without any pre-configured scope.","commands":{"allow":[],"deny":["items"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-popup":{"identifier":"deny-popup","description":"Denies the popup command without any pre-configured scope.","commands":{"allow":[],"deny":["popup"]}},"deny-prepend":{"identifier":"deny-prepend","description":"Denies the prepend command without any pre-configured scope.","commands":{"allow":[],"deny":["prepend"]}},"deny-remove":{"identifier":"deny-remove","description":"Denies the remove command without any pre-configured scope.","commands":{"allow":[],"deny":["remove"]}},"deny-remove-at":{"identifier":"deny-remove-at","description":"Denies the remove_at command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_at"]}},"deny-set-accelerator":{"identifier":"deny-set-accelerator","description":"Denies the set_accelerator command without any pre-configured scope.","commands":{"allow":[],"deny":["set_accelerator"]}},"deny-set-as-app-menu":{"identifier":"deny-set-as-app-menu","description":"Denies the set_as_app_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_app_menu"]}},"deny-set-as-help-menu-for-nsapp":{"identifier":"deny-set-as-help-menu-for-nsapp","description":"Denies the set_as_help_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_help_menu_for_nsapp"]}},"deny-set-as-window-menu":{"identifier":"deny-set-as-window-menu","description":"Denies the set_as_window_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_window_menu"]}},"deny-set-as-windows-menu-for-nsapp":{"identifier":"deny-set-as-windows-menu-for-nsapp","description":"Denies the set_as_windows_menu_for_nsapp command without any pre-configured scope.","commands":{"allow":[],"deny":["set_as_windows_menu_for_nsapp"]}},"deny-set-checked":{"identifier":"deny-set-checked","description":"Denies the set_checked command without any pre-configured scope.","commands":{"allow":[],"deny":["set_checked"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-text":{"identifier":"deny-set-text","description":"Denies the set_text command without any pre-configured scope.","commands":{"allow":[],"deny":["set_text"]}},"deny-text":{"identifier":"deny-text","description":"Denies the text command without any pre-configured scope.","commands":{"allow":[],"deny":["text"]}}},"permission_sets":{},"global_scope_schema":null},"core:path":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-resolve-directory","allow-resolve","allow-normalize","allow-join","allow-dirname","allow-extname","allow-basename","allow-is-absolute"]},"permissions":{"allow-basename":{"identifier":"allow-basename","description":"Enables the basename command without any pre-configured scope.","commands":{"allow":["basename"],"deny":[]}},"allow-dirname":{"identifier":"allow-dirname","description":"Enables the dirname command without any pre-configured scope.","commands":{"allow":["dirname"],"deny":[]}},"allow-extname":{"identifier":"allow-extname","description":"Enables the extname command without any pre-configured scope.","commands":{"allow":["extname"],"deny":[]}},"allow-is-absolute":{"identifier":"allow-is-absolute","description":"Enables the is_absolute command without any pre-configured scope.","commands":{"allow":["is_absolute"],"deny":[]}},"allow-join":{"identifier":"allow-join","description":"Enables the join command without any pre-configured scope.","commands":{"allow":["join"],"deny":[]}},"allow-normalize":{"identifier":"allow-normalize","description":"Enables the normalize command without any pre-configured scope.","commands":{"allow":["normalize"],"deny":[]}},"allow-resolve":{"identifier":"allow-resolve","description":"Enables the resolve command without any pre-configured scope.","commands":{"allow":["resolve"],"deny":[]}},"allow-resolve-directory":{"identifier":"allow-resolve-directory","description":"Enables the resolve_directory command without any pre-configured scope.","commands":{"allow":["resolve_directory"],"deny":[]}},"deny-basename":{"identifier":"deny-basename","description":"Denies the basename command without any pre-configured scope.","commands":{"allow":[],"deny":["basename"]}},"deny-dirname":{"identifier":"deny-dirname","description":"Denies the dirname command without any pre-configured scope.","commands":{"allow":[],"deny":["dirname"]}},"deny-extname":{"identifier":"deny-extname","description":"Denies the extname command without any pre-configured scope.","commands":{"allow":[],"deny":["extname"]}},"deny-is-absolute":{"identifier":"deny-is-absolute","description":"Denies the is_absolute command without any pre-configured scope.","commands":{"allow":[],"deny":["is_absolute"]}},"deny-join":{"identifier":"deny-join","description":"Denies the join command without any pre-configured scope.","commands":{"allow":[],"deny":["join"]}},"deny-normalize":{"identifier":"deny-normalize","description":"Denies the normalize command without any pre-configured scope.","commands":{"allow":[],"deny":["normalize"]}},"deny-resolve":{"identifier":"deny-resolve","description":"Denies the resolve command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve"]}},"deny-resolve-directory":{"identifier":"deny-resolve-directory","description":"Denies the resolve_directory command without any pre-configured scope.","commands":{"allow":[],"deny":["resolve_directory"]}}},"permission_sets":{},"global_scope_schema":null},"core:resources":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-close"]},"permissions":{"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}}},"permission_sets":{},"global_scope_schema":null},"core:tray":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin, which enables all commands.","permissions":["allow-new","allow-get-by-id","allow-remove-by-id","allow-set-icon","allow-set-menu","allow-set-tooltip","allow-set-title","allow-set-visible","allow-set-temp-dir-path","allow-set-icon-as-template","allow-set-icon-with-as-template","allow-set-show-menu-on-left-click"]},"permissions":{"allow-get-by-id":{"identifier":"allow-get-by-id","description":"Enables the get_by_id command without any pre-configured scope.","commands":{"allow":["get_by_id"],"deny":[]}},"allow-new":{"identifier":"allow-new","description":"Enables the new command without any pre-configured scope.","commands":{"allow":["new"],"deny":[]}},"allow-remove-by-id":{"identifier":"allow-remove-by-id","description":"Enables the remove_by_id command without any pre-configured scope.","commands":{"allow":["remove_by_id"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-icon-as-template":{"identifier":"allow-set-icon-as-template","description":"Enables the set_icon_as_template command without any pre-configured scope.","commands":{"allow":["set_icon_as_template"],"deny":[]}},"allow-set-icon-with-as-template":{"identifier":"allow-set-icon-with-as-template","description":"Enables the set_icon_with_as_template command without any pre-configured scope.","commands":{"allow":["set_icon_with_as_template"],"deny":[]}},"allow-set-menu":{"identifier":"allow-set-menu","description":"Enables the set_menu command without any pre-configured scope.","commands":{"allow":["set_menu"],"deny":[]}},"allow-set-show-menu-on-left-click":{"identifier":"allow-set-show-menu-on-left-click","description":"Enables the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":["set_show_menu_on_left_click"],"deny":[]}},"allow-set-temp-dir-path":{"identifier":"allow-set-temp-dir-path","description":"Enables the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":["set_temp_dir_path"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-tooltip":{"identifier":"allow-set-tooltip","description":"Enables the set_tooltip command without any pre-configured scope.","commands":{"allow":["set_tooltip"],"deny":[]}},"allow-set-visible":{"identifier":"allow-set-visible","description":"Enables the set_visible command without any pre-configured scope.","commands":{"allow":["set_visible"],"deny":[]}},"deny-get-by-id":{"identifier":"deny-get-by-id","description":"Denies the get_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["get_by_id"]}},"deny-new":{"identifier":"deny-new","description":"Denies the new command without any pre-configured scope.","commands":{"allow":[],"deny":["new"]}},"deny-remove-by-id":{"identifier":"deny-remove-by-id","description":"Denies the remove_by_id command without any pre-configured scope.","commands":{"allow":[],"deny":["remove_by_id"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-icon-as-template":{"identifier":"deny-set-icon-as-template","description":"Denies the set_icon_as_template command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon_as_template"]}},"deny-set-icon-with-as-template":{"identifier":"deny-set-icon-with-as-template","description":"Denies the set_icon_with_as_template command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon_with_as_template"]}},"deny-set-menu":{"identifier":"deny-set-menu","description":"Denies the set_menu command without any pre-configured scope.","commands":{"allow":[],"deny":["set_menu"]}},"deny-set-show-menu-on-left-click":{"identifier":"deny-set-show-menu-on-left-click","description":"Denies the set_show_menu_on_left_click command without any pre-configured scope.","commands":{"allow":[],"deny":["set_show_menu_on_left_click"]}},"deny-set-temp-dir-path":{"identifier":"deny-set-temp-dir-path","description":"Denies the set_temp_dir_path command without any pre-configured scope.","commands":{"allow":[],"deny":["set_temp_dir_path"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-tooltip":{"identifier":"deny-set-tooltip","description":"Denies the set_tooltip command without any pre-configured scope.","commands":{"allow":[],"deny":["set_tooltip"]}},"deny-set-visible":{"identifier":"deny-set-visible","description":"Denies the set_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible"]}}},"permission_sets":{},"global_scope_schema":null},"core:webview":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-webviews","allow-webview-position","allow-webview-size","allow-internal-toggle-devtools"]},"permissions":{"allow-clear-all-browsing-data":{"identifier":"allow-clear-all-browsing-data","description":"Enables the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":["clear_all_browsing_data"],"deny":[]}},"allow-create-webview":{"identifier":"allow-create-webview","description":"Enables the create_webview command without any pre-configured scope.","commands":{"allow":["create_webview"],"deny":[]}},"allow-create-webview-window":{"identifier":"allow-create-webview-window","description":"Enables the create_webview_window command without any pre-configured scope.","commands":{"allow":["create_webview_window"],"deny":[]}},"allow-get-all-webviews":{"identifier":"allow-get-all-webviews","description":"Enables the get_all_webviews command without any pre-configured scope.","commands":{"allow":["get_all_webviews"],"deny":[]}},"allow-internal-toggle-devtools":{"identifier":"allow-internal-toggle-devtools","description":"Enables the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":["internal_toggle_devtools"],"deny":[]}},"allow-print":{"identifier":"allow-print","description":"Enables the print command without any pre-configured scope.","commands":{"allow":["print"],"deny":[]}},"allow-reparent":{"identifier":"allow-reparent","description":"Enables the reparent command without any pre-configured scope.","commands":{"allow":["reparent"],"deny":[]}},"allow-set-webview-auto-resize":{"identifier":"allow-set-webview-auto-resize","description":"Enables the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":["set_webview_auto_resize"],"deny":[]}},"allow-set-webview-background-color":{"identifier":"allow-set-webview-background-color","description":"Enables the set_webview_background_color command without any pre-configured scope.","commands":{"allow":["set_webview_background_color"],"deny":[]}},"allow-set-webview-focus":{"identifier":"allow-set-webview-focus","description":"Enables the set_webview_focus command without any pre-configured scope.","commands":{"allow":["set_webview_focus"],"deny":[]}},"allow-set-webview-position":{"identifier":"allow-set-webview-position","description":"Enables the set_webview_position command without any pre-configured scope.","commands":{"allow":["set_webview_position"],"deny":[]}},"allow-set-webview-size":{"identifier":"allow-set-webview-size","description":"Enables the set_webview_size command without any pre-configured scope.","commands":{"allow":["set_webview_size"],"deny":[]}},"allow-set-webview-zoom":{"identifier":"allow-set-webview-zoom","description":"Enables the set_webview_zoom command without any pre-configured scope.","commands":{"allow":["set_webview_zoom"],"deny":[]}},"allow-webview-close":{"identifier":"allow-webview-close","description":"Enables the webview_close command without any pre-configured scope.","commands":{"allow":["webview_close"],"deny":[]}},"allow-webview-hide":{"identifier":"allow-webview-hide","description":"Enables the webview_hide command without any pre-configured scope.","commands":{"allow":["webview_hide"],"deny":[]}},"allow-webview-position":{"identifier":"allow-webview-position","description":"Enables the webview_position command without any pre-configured scope.","commands":{"allow":["webview_position"],"deny":[]}},"allow-webview-show":{"identifier":"allow-webview-show","description":"Enables the webview_show command without any pre-configured scope.","commands":{"allow":["webview_show"],"deny":[]}},"allow-webview-size":{"identifier":"allow-webview-size","description":"Enables the webview_size command without any pre-configured scope.","commands":{"allow":["webview_size"],"deny":[]}},"deny-clear-all-browsing-data":{"identifier":"deny-clear-all-browsing-data","description":"Denies the clear_all_browsing_data command without any pre-configured scope.","commands":{"allow":[],"deny":["clear_all_browsing_data"]}},"deny-create-webview":{"identifier":"deny-create-webview","description":"Denies the create_webview command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview"]}},"deny-create-webview-window":{"identifier":"deny-create-webview-window","description":"Denies the create_webview_window command without any pre-configured scope.","commands":{"allow":[],"deny":["create_webview_window"]}},"deny-get-all-webviews":{"identifier":"deny-get-all-webviews","description":"Denies the get_all_webviews command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_webviews"]}},"deny-internal-toggle-devtools":{"identifier":"deny-internal-toggle-devtools","description":"Denies the internal_toggle_devtools command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_devtools"]}},"deny-print":{"identifier":"deny-print","description":"Denies the print command without any pre-configured scope.","commands":{"allow":[],"deny":["print"]}},"deny-reparent":{"identifier":"deny-reparent","description":"Denies the reparent command without any pre-configured scope.","commands":{"allow":[],"deny":["reparent"]}},"deny-set-webview-auto-resize":{"identifier":"deny-set-webview-auto-resize","description":"Denies the set_webview_auto_resize command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_auto_resize"]}},"deny-set-webview-background-color":{"identifier":"deny-set-webview-background-color","description":"Denies the set_webview_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_background_color"]}},"deny-set-webview-focus":{"identifier":"deny-set-webview-focus","description":"Denies the set_webview_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_focus"]}},"deny-set-webview-position":{"identifier":"deny-set-webview-position","description":"Denies the set_webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_position"]}},"deny-set-webview-size":{"identifier":"deny-set-webview-size","description":"Denies the set_webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_size"]}},"deny-set-webview-zoom":{"identifier":"deny-set-webview-zoom","description":"Denies the set_webview_zoom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_webview_zoom"]}},"deny-webview-close":{"identifier":"deny-webview-close","description":"Denies the webview_close command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_close"]}},"deny-webview-hide":{"identifier":"deny-webview-hide","description":"Denies the webview_hide command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_hide"]}},"deny-webview-position":{"identifier":"deny-webview-position","description":"Denies the webview_position command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_position"]}},"deny-webview-show":{"identifier":"deny-webview-show","description":"Denies the webview_show command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_show"]}},"deny-webview-size":{"identifier":"deny-webview-size","description":"Denies the webview_size command without any pre-configured scope.","commands":{"allow":[],"deny":["webview_size"]}}},"permission_sets":{},"global_scope_schema":null},"core:window":{"default_permission":{"identifier":"default","description":"Default permissions for the plugin.","permissions":["allow-get-all-windows","allow-scale-factor","allow-inner-position","allow-outer-position","allow-inner-size","allow-outer-size","allow-is-fullscreen","allow-is-minimized","allow-is-maximized","allow-is-focused","allow-is-decorated","allow-is-resizable","allow-is-maximizable","allow-is-minimizable","allow-is-closable","allow-is-visible","allow-is-enabled","allow-title","allow-current-monitor","allow-primary-monitor","allow-monitor-from-point","allow-available-monitors","allow-cursor-position","allow-theme","allow-is-always-on-top","allow-activity-name","allow-scene-identifier","allow-internal-toggle-maximize"]},"permissions":{"allow-activity-name":{"identifier":"allow-activity-name","description":"Enables the activity_name command without any pre-configured scope.","commands":{"allow":["activity_name"],"deny":[]}},"allow-available-monitors":{"identifier":"allow-available-monitors","description":"Enables the available_monitors command without any pre-configured scope.","commands":{"allow":["available_monitors"],"deny":[]}},"allow-center":{"identifier":"allow-center","description":"Enables the center command without any pre-configured scope.","commands":{"allow":["center"],"deny":[]}},"allow-close":{"identifier":"allow-close","description":"Enables the close command without any pre-configured scope.","commands":{"allow":["close"],"deny":[]}},"allow-create":{"identifier":"allow-create","description":"Enables the create command without any pre-configured scope.","commands":{"allow":["create"],"deny":[]}},"allow-current-monitor":{"identifier":"allow-current-monitor","description":"Enables the current_monitor command without any pre-configured scope.","commands":{"allow":["current_monitor"],"deny":[]}},"allow-cursor-position":{"identifier":"allow-cursor-position","description":"Enables the cursor_position command without any pre-configured scope.","commands":{"allow":["cursor_position"],"deny":[]}},"allow-destroy":{"identifier":"allow-destroy","description":"Enables the destroy command without any pre-configured scope.","commands":{"allow":["destroy"],"deny":[]}},"allow-get-all-windows":{"identifier":"allow-get-all-windows","description":"Enables the get_all_windows command without any pre-configured scope.","commands":{"allow":["get_all_windows"],"deny":[]}},"allow-hide":{"identifier":"allow-hide","description":"Enables the hide command without any pre-configured scope.","commands":{"allow":["hide"],"deny":[]}},"allow-inner-position":{"identifier":"allow-inner-position","description":"Enables the inner_position command without any pre-configured scope.","commands":{"allow":["inner_position"],"deny":[]}},"allow-inner-size":{"identifier":"allow-inner-size","description":"Enables the inner_size command without any pre-configured scope.","commands":{"allow":["inner_size"],"deny":[]}},"allow-internal-toggle-maximize":{"identifier":"allow-internal-toggle-maximize","description":"Enables the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":["internal_toggle_maximize"],"deny":[]}},"allow-is-always-on-top":{"identifier":"allow-is-always-on-top","description":"Enables the is_always_on_top command without any pre-configured scope.","commands":{"allow":["is_always_on_top"],"deny":[]}},"allow-is-closable":{"identifier":"allow-is-closable","description":"Enables the is_closable command without any pre-configured scope.","commands":{"allow":["is_closable"],"deny":[]}},"allow-is-decorated":{"identifier":"allow-is-decorated","description":"Enables the is_decorated command without any pre-configured scope.","commands":{"allow":["is_decorated"],"deny":[]}},"allow-is-enabled":{"identifier":"allow-is-enabled","description":"Enables the is_enabled command without any pre-configured scope.","commands":{"allow":["is_enabled"],"deny":[]}},"allow-is-focused":{"identifier":"allow-is-focused","description":"Enables the is_focused command without any pre-configured scope.","commands":{"allow":["is_focused"],"deny":[]}},"allow-is-fullscreen":{"identifier":"allow-is-fullscreen","description":"Enables the is_fullscreen command without any pre-configured scope.","commands":{"allow":["is_fullscreen"],"deny":[]}},"allow-is-maximizable":{"identifier":"allow-is-maximizable","description":"Enables the is_maximizable command without any pre-configured scope.","commands":{"allow":["is_maximizable"],"deny":[]}},"allow-is-maximized":{"identifier":"allow-is-maximized","description":"Enables the is_maximized command without any pre-configured scope.","commands":{"allow":["is_maximized"],"deny":[]}},"allow-is-minimizable":{"identifier":"allow-is-minimizable","description":"Enables the is_minimizable command without any pre-configured scope.","commands":{"allow":["is_minimizable"],"deny":[]}},"allow-is-minimized":{"identifier":"allow-is-minimized","description":"Enables the is_minimized command without any pre-configured scope.","commands":{"allow":["is_minimized"],"deny":[]}},"allow-is-resizable":{"identifier":"allow-is-resizable","description":"Enables the is_resizable command without any pre-configured scope.","commands":{"allow":["is_resizable"],"deny":[]}},"allow-is-visible":{"identifier":"allow-is-visible","description":"Enables the is_visible command without any pre-configured scope.","commands":{"allow":["is_visible"],"deny":[]}},"allow-maximize":{"identifier":"allow-maximize","description":"Enables the maximize command without any pre-configured scope.","commands":{"allow":["maximize"],"deny":[]}},"allow-minimize":{"identifier":"allow-minimize","description":"Enables the minimize command without any pre-configured scope.","commands":{"allow":["minimize"],"deny":[]}},"allow-monitor-from-point":{"identifier":"allow-monitor-from-point","description":"Enables the monitor_from_point command without any pre-configured scope.","commands":{"allow":["monitor_from_point"],"deny":[]}},"allow-outer-position":{"identifier":"allow-outer-position","description":"Enables the outer_position command without any pre-configured scope.","commands":{"allow":["outer_position"],"deny":[]}},"allow-outer-size":{"identifier":"allow-outer-size","description":"Enables the outer_size command without any pre-configured scope.","commands":{"allow":["outer_size"],"deny":[]}},"allow-primary-monitor":{"identifier":"allow-primary-monitor","description":"Enables the primary_monitor command without any pre-configured scope.","commands":{"allow":["primary_monitor"],"deny":[]}},"allow-request-user-attention":{"identifier":"allow-request-user-attention","description":"Enables the request_user_attention command without any pre-configured scope.","commands":{"allow":["request_user_attention"],"deny":[]}},"allow-scale-factor":{"identifier":"allow-scale-factor","description":"Enables the scale_factor command without any pre-configured scope.","commands":{"allow":["scale_factor"],"deny":[]}},"allow-scene-identifier":{"identifier":"allow-scene-identifier","description":"Enables the scene_identifier command without any pre-configured scope.","commands":{"allow":["scene_identifier"],"deny":[]}},"allow-set-always-on-bottom":{"identifier":"allow-set-always-on-bottom","description":"Enables the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":["set_always_on_bottom"],"deny":[]}},"allow-set-always-on-top":{"identifier":"allow-set-always-on-top","description":"Enables the set_always_on_top command without any pre-configured scope.","commands":{"allow":["set_always_on_top"],"deny":[]}},"allow-set-background-color":{"identifier":"allow-set-background-color","description":"Enables the set_background_color command without any pre-configured scope.","commands":{"allow":["set_background_color"],"deny":[]}},"allow-set-badge-count":{"identifier":"allow-set-badge-count","description":"Enables the set_badge_count command without any pre-configured scope.","commands":{"allow":["set_badge_count"],"deny":[]}},"allow-set-badge-label":{"identifier":"allow-set-badge-label","description":"Enables the set_badge_label command without any pre-configured scope.","commands":{"allow":["set_badge_label"],"deny":[]}},"allow-set-closable":{"identifier":"allow-set-closable","description":"Enables the set_closable command without any pre-configured scope.","commands":{"allow":["set_closable"],"deny":[]}},"allow-set-content-protected":{"identifier":"allow-set-content-protected","description":"Enables the set_content_protected command without any pre-configured scope.","commands":{"allow":["set_content_protected"],"deny":[]}},"allow-set-cursor-grab":{"identifier":"allow-set-cursor-grab","description":"Enables the set_cursor_grab command without any pre-configured scope.","commands":{"allow":["set_cursor_grab"],"deny":[]}},"allow-set-cursor-icon":{"identifier":"allow-set-cursor-icon","description":"Enables the set_cursor_icon command without any pre-configured scope.","commands":{"allow":["set_cursor_icon"],"deny":[]}},"allow-set-cursor-position":{"identifier":"allow-set-cursor-position","description":"Enables the set_cursor_position command without any pre-configured scope.","commands":{"allow":["set_cursor_position"],"deny":[]}},"allow-set-cursor-visible":{"identifier":"allow-set-cursor-visible","description":"Enables the set_cursor_visible command without any pre-configured scope.","commands":{"allow":["set_cursor_visible"],"deny":[]}},"allow-set-decorations":{"identifier":"allow-set-decorations","description":"Enables the set_decorations command without any pre-configured scope.","commands":{"allow":["set_decorations"],"deny":[]}},"allow-set-effects":{"identifier":"allow-set-effects","description":"Enables the set_effects command without any pre-configured scope.","commands":{"allow":["set_effects"],"deny":[]}},"allow-set-enabled":{"identifier":"allow-set-enabled","description":"Enables the set_enabled command without any pre-configured scope.","commands":{"allow":["set_enabled"],"deny":[]}},"allow-set-focus":{"identifier":"allow-set-focus","description":"Enables the set_focus command without any pre-configured scope.","commands":{"allow":["set_focus"],"deny":[]}},"allow-set-focusable":{"identifier":"allow-set-focusable","description":"Enables the set_focusable command without any pre-configured scope.","commands":{"allow":["set_focusable"],"deny":[]}},"allow-set-fullscreen":{"identifier":"allow-set-fullscreen","description":"Enables the set_fullscreen command without any pre-configured scope.","commands":{"allow":["set_fullscreen"],"deny":[]}},"allow-set-icon":{"identifier":"allow-set-icon","description":"Enables the set_icon command without any pre-configured scope.","commands":{"allow":["set_icon"],"deny":[]}},"allow-set-ignore-cursor-events":{"identifier":"allow-set-ignore-cursor-events","description":"Enables the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":["set_ignore_cursor_events"],"deny":[]}},"allow-set-max-size":{"identifier":"allow-set-max-size","description":"Enables the set_max_size command without any pre-configured scope.","commands":{"allow":["set_max_size"],"deny":[]}},"allow-set-maximizable":{"identifier":"allow-set-maximizable","description":"Enables the set_maximizable command without any pre-configured scope.","commands":{"allow":["set_maximizable"],"deny":[]}},"allow-set-min-size":{"identifier":"allow-set-min-size","description":"Enables the set_min_size command without any pre-configured scope.","commands":{"allow":["set_min_size"],"deny":[]}},"allow-set-minimizable":{"identifier":"allow-set-minimizable","description":"Enables the set_minimizable command without any pre-configured scope.","commands":{"allow":["set_minimizable"],"deny":[]}},"allow-set-overlay-icon":{"identifier":"allow-set-overlay-icon","description":"Enables the set_overlay_icon command without any pre-configured scope.","commands":{"allow":["set_overlay_icon"],"deny":[]}},"allow-set-position":{"identifier":"allow-set-position","description":"Enables the set_position command without any pre-configured scope.","commands":{"allow":["set_position"],"deny":[]}},"allow-set-progress-bar":{"identifier":"allow-set-progress-bar","description":"Enables the set_progress_bar command without any pre-configured scope.","commands":{"allow":["set_progress_bar"],"deny":[]}},"allow-set-resizable":{"identifier":"allow-set-resizable","description":"Enables the set_resizable command without any pre-configured scope.","commands":{"allow":["set_resizable"],"deny":[]}},"allow-set-shadow":{"identifier":"allow-set-shadow","description":"Enables the set_shadow command without any pre-configured scope.","commands":{"allow":["set_shadow"],"deny":[]}},"allow-set-simple-fullscreen":{"identifier":"allow-set-simple-fullscreen","description":"Enables the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":["set_simple_fullscreen"],"deny":[]}},"allow-set-size":{"identifier":"allow-set-size","description":"Enables the set_size command without any pre-configured scope.","commands":{"allow":["set_size"],"deny":[]}},"allow-set-size-constraints":{"identifier":"allow-set-size-constraints","description":"Enables the set_size_constraints command without any pre-configured scope.","commands":{"allow":["set_size_constraints"],"deny":[]}},"allow-set-skip-taskbar":{"identifier":"allow-set-skip-taskbar","description":"Enables the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":["set_skip_taskbar"],"deny":[]}},"allow-set-theme":{"identifier":"allow-set-theme","description":"Enables the set_theme command without any pre-configured scope.","commands":{"allow":["set_theme"],"deny":[]}},"allow-set-title":{"identifier":"allow-set-title","description":"Enables the set_title command without any pre-configured scope.","commands":{"allow":["set_title"],"deny":[]}},"allow-set-title-bar-style":{"identifier":"allow-set-title-bar-style","description":"Enables the set_title_bar_style command without any pre-configured scope.","commands":{"allow":["set_title_bar_style"],"deny":[]}},"allow-set-visible-on-all-workspaces":{"identifier":"allow-set-visible-on-all-workspaces","description":"Enables the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":["set_visible_on_all_workspaces"],"deny":[]}},"allow-show":{"identifier":"allow-show","description":"Enables the show command without any pre-configured scope.","commands":{"allow":["show"],"deny":[]}},"allow-start-dragging":{"identifier":"allow-start-dragging","description":"Enables the start_dragging command without any pre-configured scope.","commands":{"allow":["start_dragging"],"deny":[]}},"allow-start-resize-dragging":{"identifier":"allow-start-resize-dragging","description":"Enables the start_resize_dragging command without any pre-configured scope.","commands":{"allow":["start_resize_dragging"],"deny":[]}},"allow-theme":{"identifier":"allow-theme","description":"Enables the theme command without any pre-configured scope.","commands":{"allow":["theme"],"deny":[]}},"allow-title":{"identifier":"allow-title","description":"Enables the title command without any pre-configured scope.","commands":{"allow":["title"],"deny":[]}},"allow-toggle-maximize":{"identifier":"allow-toggle-maximize","description":"Enables the toggle_maximize command without any pre-configured scope.","commands":{"allow":["toggle_maximize"],"deny":[]}},"allow-unmaximize":{"identifier":"allow-unmaximize","description":"Enables the unmaximize command without any pre-configured scope.","commands":{"allow":["unmaximize"],"deny":[]}},"allow-unminimize":{"identifier":"allow-unminimize","description":"Enables the unminimize command without any pre-configured scope.","commands":{"allow":["unminimize"],"deny":[]}},"deny-activity-name":{"identifier":"deny-activity-name","description":"Denies the activity_name command without any pre-configured scope.","commands":{"allow":[],"deny":["activity_name"]}},"deny-available-monitors":{"identifier":"deny-available-monitors","description":"Denies the available_monitors command without any pre-configured scope.","commands":{"allow":[],"deny":["available_monitors"]}},"deny-center":{"identifier":"deny-center","description":"Denies the center command without any pre-configured scope.","commands":{"allow":[],"deny":["center"]}},"deny-close":{"identifier":"deny-close","description":"Denies the close command without any pre-configured scope.","commands":{"allow":[],"deny":["close"]}},"deny-create":{"identifier":"deny-create","description":"Denies the create command without any pre-configured scope.","commands":{"allow":[],"deny":["create"]}},"deny-current-monitor":{"identifier":"deny-current-monitor","description":"Denies the current_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["current_monitor"]}},"deny-cursor-position":{"identifier":"deny-cursor-position","description":"Denies the cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["cursor_position"]}},"deny-destroy":{"identifier":"deny-destroy","description":"Denies the destroy command without any pre-configured scope.","commands":{"allow":[],"deny":["destroy"]}},"deny-get-all-windows":{"identifier":"deny-get-all-windows","description":"Denies the get_all_windows command without any pre-configured scope.","commands":{"allow":[],"deny":["get_all_windows"]}},"deny-hide":{"identifier":"deny-hide","description":"Denies the hide command without any pre-configured scope.","commands":{"allow":[],"deny":["hide"]}},"deny-inner-position":{"identifier":"deny-inner-position","description":"Denies the inner_position command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_position"]}},"deny-inner-size":{"identifier":"deny-inner-size","description":"Denies the inner_size command without any pre-configured scope.","commands":{"allow":[],"deny":["inner_size"]}},"deny-internal-toggle-maximize":{"identifier":"deny-internal-toggle-maximize","description":"Denies the internal_toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["internal_toggle_maximize"]}},"deny-is-always-on-top":{"identifier":"deny-is-always-on-top","description":"Denies the is_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["is_always_on_top"]}},"deny-is-closable":{"identifier":"deny-is-closable","description":"Denies the is_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_closable"]}},"deny-is-decorated":{"identifier":"deny-is-decorated","description":"Denies the is_decorated command without any pre-configured scope.","commands":{"allow":[],"deny":["is_decorated"]}},"deny-is-enabled":{"identifier":"deny-is-enabled","description":"Denies the is_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["is_enabled"]}},"deny-is-focused":{"identifier":"deny-is-focused","description":"Denies the is_focused command without any pre-configured scope.","commands":{"allow":[],"deny":["is_focused"]}},"deny-is-fullscreen":{"identifier":"deny-is-fullscreen","description":"Denies the is_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["is_fullscreen"]}},"deny-is-maximizable":{"identifier":"deny-is-maximizable","description":"Denies the is_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximizable"]}},"deny-is-maximized":{"identifier":"deny-is-maximized","description":"Denies the is_maximized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_maximized"]}},"deny-is-minimizable":{"identifier":"deny-is-minimizable","description":"Denies the is_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimizable"]}},"deny-is-minimized":{"identifier":"deny-is-minimized","description":"Denies the is_minimized command without any pre-configured scope.","commands":{"allow":[],"deny":["is_minimized"]}},"deny-is-resizable":{"identifier":"deny-is-resizable","description":"Denies the is_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["is_resizable"]}},"deny-is-visible":{"identifier":"deny-is-visible","description":"Denies the is_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["is_visible"]}},"deny-maximize":{"identifier":"deny-maximize","description":"Denies the maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["maximize"]}},"deny-minimize":{"identifier":"deny-minimize","description":"Denies the minimize command without any pre-configured scope.","commands":{"allow":[],"deny":["minimize"]}},"deny-monitor-from-point":{"identifier":"deny-monitor-from-point","description":"Denies the monitor_from_point command without any pre-configured scope.","commands":{"allow":[],"deny":["monitor_from_point"]}},"deny-outer-position":{"identifier":"deny-outer-position","description":"Denies the outer_position command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_position"]}},"deny-outer-size":{"identifier":"deny-outer-size","description":"Denies the outer_size command without any pre-configured scope.","commands":{"allow":[],"deny":["outer_size"]}},"deny-primary-monitor":{"identifier":"deny-primary-monitor","description":"Denies the primary_monitor command without any pre-configured scope.","commands":{"allow":[],"deny":["primary_monitor"]}},"deny-request-user-attention":{"identifier":"deny-request-user-attention","description":"Denies the request_user_attention command without any pre-configured scope.","commands":{"allow":[],"deny":["request_user_attention"]}},"deny-scale-factor":{"identifier":"deny-scale-factor","description":"Denies the scale_factor command without any pre-configured scope.","commands":{"allow":[],"deny":["scale_factor"]}},"deny-scene-identifier":{"identifier":"deny-scene-identifier","description":"Denies the scene_identifier command without any pre-configured scope.","commands":{"allow":[],"deny":["scene_identifier"]}},"deny-set-always-on-bottom":{"identifier":"deny-set-always-on-bottom","description":"Denies the set_always_on_bottom command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_bottom"]}},"deny-set-always-on-top":{"identifier":"deny-set-always-on-top","description":"Denies the set_always_on_top command without any pre-configured scope.","commands":{"allow":[],"deny":["set_always_on_top"]}},"deny-set-background-color":{"identifier":"deny-set-background-color","description":"Denies the set_background_color command without any pre-configured scope.","commands":{"allow":[],"deny":["set_background_color"]}},"deny-set-badge-count":{"identifier":"deny-set-badge-count","description":"Denies the set_badge_count command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_count"]}},"deny-set-badge-label":{"identifier":"deny-set-badge-label","description":"Denies the set_badge_label command without any pre-configured scope.","commands":{"allow":[],"deny":["set_badge_label"]}},"deny-set-closable":{"identifier":"deny-set-closable","description":"Denies the set_closable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_closable"]}},"deny-set-content-protected":{"identifier":"deny-set-content-protected","description":"Denies the set_content_protected command without any pre-configured scope.","commands":{"allow":[],"deny":["set_content_protected"]}},"deny-set-cursor-grab":{"identifier":"deny-set-cursor-grab","description":"Denies the set_cursor_grab command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_grab"]}},"deny-set-cursor-icon":{"identifier":"deny-set-cursor-icon","description":"Denies the set_cursor_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_icon"]}},"deny-set-cursor-position":{"identifier":"deny-set-cursor-position","description":"Denies the set_cursor_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_position"]}},"deny-set-cursor-visible":{"identifier":"deny-set-cursor-visible","description":"Denies the set_cursor_visible command without any pre-configured scope.","commands":{"allow":[],"deny":["set_cursor_visible"]}},"deny-set-decorations":{"identifier":"deny-set-decorations","description":"Denies the set_decorations command without any pre-configured scope.","commands":{"allow":[],"deny":["set_decorations"]}},"deny-set-effects":{"identifier":"deny-set-effects","description":"Denies the set_effects command without any pre-configured scope.","commands":{"allow":[],"deny":["set_effects"]}},"deny-set-enabled":{"identifier":"deny-set-enabled","description":"Denies the set_enabled command without any pre-configured scope.","commands":{"allow":[],"deny":["set_enabled"]}},"deny-set-focus":{"identifier":"deny-set-focus","description":"Denies the set_focus command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focus"]}},"deny-set-focusable":{"identifier":"deny-set-focusable","description":"Denies the set_focusable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_focusable"]}},"deny-set-fullscreen":{"identifier":"deny-set-fullscreen","description":"Denies the set_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_fullscreen"]}},"deny-set-icon":{"identifier":"deny-set-icon","description":"Denies the set_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_icon"]}},"deny-set-ignore-cursor-events":{"identifier":"deny-set-ignore-cursor-events","description":"Denies the set_ignore_cursor_events command without any pre-configured scope.","commands":{"allow":[],"deny":["set_ignore_cursor_events"]}},"deny-set-max-size":{"identifier":"deny-set-max-size","description":"Denies the set_max_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_max_size"]}},"deny-set-maximizable":{"identifier":"deny-set-maximizable","description":"Denies the set_maximizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_maximizable"]}},"deny-set-min-size":{"identifier":"deny-set-min-size","description":"Denies the set_min_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_min_size"]}},"deny-set-minimizable":{"identifier":"deny-set-minimizable","description":"Denies the set_minimizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_minimizable"]}},"deny-set-overlay-icon":{"identifier":"deny-set-overlay-icon","description":"Denies the set_overlay_icon command without any pre-configured scope.","commands":{"allow":[],"deny":["set_overlay_icon"]}},"deny-set-position":{"identifier":"deny-set-position","description":"Denies the set_position command without any pre-configured scope.","commands":{"allow":[],"deny":["set_position"]}},"deny-set-progress-bar":{"identifier":"deny-set-progress-bar","description":"Denies the set_progress_bar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_progress_bar"]}},"deny-set-resizable":{"identifier":"deny-set-resizable","description":"Denies the set_resizable command without any pre-configured scope.","commands":{"allow":[],"deny":["set_resizable"]}},"deny-set-shadow":{"identifier":"deny-set-shadow","description":"Denies the set_shadow command without any pre-configured scope.","commands":{"allow":[],"deny":["set_shadow"]}},"deny-set-simple-fullscreen":{"identifier":"deny-set-simple-fullscreen","description":"Denies the set_simple_fullscreen command without any pre-configured scope.","commands":{"allow":[],"deny":["set_simple_fullscreen"]}},"deny-set-size":{"identifier":"deny-set-size","description":"Denies the set_size command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size"]}},"deny-set-size-constraints":{"identifier":"deny-set-size-constraints","description":"Denies the set_size_constraints command without any pre-configured scope.","commands":{"allow":[],"deny":["set_size_constraints"]}},"deny-set-skip-taskbar":{"identifier":"deny-set-skip-taskbar","description":"Denies the set_skip_taskbar command without any pre-configured scope.","commands":{"allow":[],"deny":["set_skip_taskbar"]}},"deny-set-theme":{"identifier":"deny-set-theme","description":"Denies the set_theme command without any pre-configured scope.","commands":{"allow":[],"deny":["set_theme"]}},"deny-set-title":{"identifier":"deny-set-title","description":"Denies the set_title command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title"]}},"deny-set-title-bar-style":{"identifier":"deny-set-title-bar-style","description":"Denies the set_title_bar_style command without any pre-configured scope.","commands":{"allow":[],"deny":["set_title_bar_style"]}},"deny-set-visible-on-all-workspaces":{"identifier":"deny-set-visible-on-all-workspaces","description":"Denies the set_visible_on_all_workspaces command without any pre-configured scope.","commands":{"allow":[],"deny":["set_visible_on_all_workspaces"]}},"deny-show":{"identifier":"deny-show","description":"Denies the show command without any pre-configured scope.","commands":{"allow":[],"deny":["show"]}},"deny-start-dragging":{"identifier":"deny-start-dragging","description":"Denies the start_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_dragging"]}},"deny-start-resize-dragging":{"identifier":"deny-start-resize-dragging","description":"Denies the start_resize_dragging command without any pre-configured scope.","commands":{"allow":[],"deny":["start_resize_dragging"]}},"deny-theme":{"identifier":"deny-theme","description":"Denies the theme command without any pre-configured scope.","commands":{"allow":[],"deny":["theme"]}},"deny-title":{"identifier":"deny-title","description":"Denies the title command without any pre-configured scope.","commands":{"allow":[],"deny":["title"]}},"deny-toggle-maximize":{"identifier":"deny-toggle-maximize","description":"Denies the toggle_maximize command without any pre-configured scope.","commands":{"allow":[],"deny":["toggle_maximize"]}},"deny-unmaximize":{"identifier":"deny-unmaximize","description":"Denies the unmaximize command without any pre-configured scope.","commands":{"allow":[],"deny":["unmaximize"]}},"deny-unminimize":{"identifier":"deny-unminimize","description":"Denies the unminimize command without any pre-configured scope.","commands":{"allow":[],"deny":["unminimize"]}}},"permission_sets":{},"global_scope_schema":null},"dialog":{"default_permission":{"identifier":"default","description":"This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n","permissions":["allow-message","allow-save","allow-open"]},"permissions":{"allow-ask":{"identifier":"allow-ask","description":"Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)","commands":{"allow":["message"],"deny":[]}},"allow-confirm":{"identifier":"allow-confirm","description":"Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)","commands":{"allow":["message"],"deny":[]}},"allow-message":{"identifier":"allow-message","description":"Enables the message command without any pre-configured scope.","commands":{"allow":["message"],"deny":[]}},"allow-open":{"identifier":"allow-open","description":"Enables the open command without any pre-configured scope.","commands":{"allow":["open"],"deny":[]}},"allow-save":{"identifier":"allow-save","description":"Enables the save command without any pre-configured scope.","commands":{"allow":["save"],"deny":[]}},"deny-ask":{"identifier":"deny-ask","description":"Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)","commands":{"allow":[],"deny":["message"]}},"deny-confirm":{"identifier":"deny-confirm","description":"Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)","commands":{"allow":[],"deny":["message"]}},"deny-message":{"identifier":"deny-message","description":"Denies the message command without any pre-configured scope.","commands":{"allow":[],"deny":["message"]}},"deny-open":{"identifier":"deny-open","description":"Denies the open command without any pre-configured scope.","commands":{"allow":[],"deny":["open"]}},"deny-save":{"identifier":"deny-save","description":"Denies the save command without any pre-configured scope.","commands":{"allow":[],"deny":["save"]}}},"permission_sets":{},"global_scope_schema":null}}
\ No newline at end of file
diff --git a/crates/deepclean-app/gen/schemas/capabilities.json b/crates/deepclean-app/gen/schemas/capabilities.json
index 9db9d65..84f9a50 100644
--- a/crates/deepclean-app/gen/schemas/capabilities.json
+++ b/crates/deepclean-app/gen/schemas/capabilities.json
@@ -1 +1 @@
-{"default":{"identifier":"default","description":"Capability for the main window","local":true,"windows":["main"],"permissions":["core:default","core:event:default","shell:allow-open"]}}
\ No newline at end of file
+{"default":{"identifier":"default","description":"Capability for the main window","local":true,"windows":["main"],"permissions":["core:default","core:event:default","dialog:allow-open"]}}
\ No newline at end of file
diff --git a/crates/deepclean-app/gen/schemas/desktop-schema.json b/crates/deepclean-app/gen/schemas/desktop-schema.json
index f827fe1..24c9001 100644
--- a/crates/deepclean-app/gen/schemas/desktop-schema.json
+++ b/crates/deepclean-app/gen/schemas/desktop-schema.json
@@ -134,216 +134,6 @@
           "description": "Reference a permission or permission set by identifier and extends its scope.",
           "type": "object",
           "allOf": [
-            {
-              "if": {
-                "properties": {
-                  "identifier": {
-                    "anyOf": [
-                      {
-                        "description": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`",
-                        "type": "string",
-                        "const": "shell:default",
-                        "markdownDescription": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`"
-                      },
-                      {
-                        "description": "Enables the execute command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-execute",
-                        "markdownDescription": "Enables the execute command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the kill command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-kill",
-                        "markdownDescription": "Enables the kill command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the open command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-open",
-                        "markdownDescription": "Enables the open command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the spawn command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-spawn",
-                        "markdownDescription": "Enables the spawn command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the stdin_write command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-stdin-write",
-                        "markdownDescription": "Enables the stdin_write command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the execute command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-execute",
-                        "markdownDescription": "Denies the execute command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the kill command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-kill",
-                        "markdownDescription": "Denies the kill command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the open command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-open",
-                        "markdownDescription": "Denies the open command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the spawn command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-spawn",
-                        "markdownDescription": "Denies the spawn command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the stdin_write command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-stdin-write",
-                        "markdownDescription": "Denies the stdin_write command without any pre-configured scope."
-                      }
-                    ]
-                  }
-                }
-              },
-              "then": {
-                "properties": {
-                  "allow": {
-                    "items": {
-                      "title": "ShellScopeEntry",
-                      "description": "Shell scope entry.",
-                      "anyOf": [
-                        {
-                          "type": "object",
-                          "required": [
-                            "cmd",
-                            "name"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "cmd": {
-                              "description": "The command name. It can start with a variable that resolves to a system base directory. The variables are: `$AUDIO`, `$CACHE`, `$CONFIG`, `$DATA`, `$LOCALDATA`, `$DESKTOP`, `$DOCUMENT`, `$DOWNLOAD`, `$EXE`, `$FONT`, `$HOME`, `$PICTURE`, `$PUBLIC`, `$RUNTIME`, `$TEMPLATE`, `$VIDEO`, `$RESOURCE`, `$LOG`, `$TEMP`, `$APPCONFIG`, `$APPDATA`, `$APPLOCALDATA`, `$APPCACHE`, `$APPLOG`.",
-                              "type": "string"
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            }
-                          },
-                          "additionalProperties": false
-                        },
-                        {
-                          "type": "object",
-                          "required": [
-                            "name",
-                            "sidecar"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            },
-                            "sidecar": {
-                              "description": "If this command is a sidecar command.",
-                              "type": "boolean"
-                            }
-                          },
-                          "additionalProperties": false
-                        }
-                      ]
-                    }
-                  },
-                  "deny": {
-                    "items": {
-                      "title": "ShellScopeEntry",
-                      "description": "Shell scope entry.",
-                      "anyOf": [
-                        {
-                          "type": "object",
-                          "required": [
-                            "cmd",
-                            "name"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "cmd": {
-                              "description": "The command name. It can start with a variable that resolves to a system base directory. The variables are: `$AUDIO`, `$CACHE`, `$CONFIG`, `$DATA`, `$LOCALDATA`, `$DESKTOP`, `$DOCUMENT`, `$DOWNLOAD`, `$EXE`, `$FONT`, `$HOME`, `$PICTURE`, `$PUBLIC`, `$RUNTIME`, `$TEMPLATE`, `$VIDEO`, `$RESOURCE`, `$LOG`, `$TEMP`, `$APPCONFIG`, `$APPDATA`, `$APPLOCALDATA`, `$APPCACHE`, `$APPLOG`.",
-                              "type": "string"
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            }
-                          },
-                          "additionalProperties": false
-                        },
-                        {
-                          "type": "object",
-                          "required": [
-                            "name",
-                            "sidecar"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            },
-                            "sidecar": {
-                              "description": "If this command is a sidecar command.",
-                              "type": "boolean"
-                            }
-                          },
-                          "additionalProperties": false
-                        }
-                      ]
-                    }
-                  }
-                }
-              },
-              "properties": {
-                "identifier": {
-                  "description": "Identifier of the permission or permission set.",
-                  "allOf": [
-                    {
-                      "$ref": "#/definitions/Identifier"
-                    }
-                  ]
-                }
-              }
-            },
             {
               "properties": {
                 "identifier": {
@@ -393,10 +183,10 @@
           "markdownDescription": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`"
         },
         {
-          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`",
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`",
           "type": "string",
           "const": "core:app:default",
-          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`"
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`"
         },
         {
           "description": "Enables the app_hide command without any pre-configured scope.",
@@ -470,6 +260,12 @@
           "const": "core:app:allow-set-dock-visibility",
           "markdownDescription": "Enables the set_dock_visibility command without any pre-configured scope."
         },
+        {
+          "description": "Enables the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-supports-multiple-windows",
+          "markdownDescription": "Enables the supports_multiple_windows command without any pre-configured scope."
+        },
         {
           "description": "Enables the tauri_version command without any pre-configured scope.",
           "type": "string",
@@ -554,6 +350,12 @@
           "const": "core:app:deny-set-dock-visibility",
           "markdownDescription": "Denies the set_dock_visibility command without any pre-configured scope."
         },
+        {
+          "description": "Denies the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-supports-multiple-windows",
+          "markdownDescription": "Denies the supports_multiple_windows command without any pre-configured scope."
+        },
         {
           "description": "Denies the tauri_version command without any pre-configured scope.",
           "type": "string",
@@ -1077,10 +879,10 @@
           "markdownDescription": "Denies the close command without any pre-configured scope."
         },
         {
-          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`",
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`",
           "type": "string",
           "const": "core:tray:default",
-          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`"
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`"
         },
         {
           "description": "Enables the get_by_id command without any pre-configured scope.",
@@ -1112,6 +914,12 @@
           "const": "core:tray:allow-set-icon-as-template",
           "markdownDescription": "Enables the set_icon_as_template command without any pre-configured scope."
         },
+        {
+          "description": "Enables the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-with-as-template",
+          "markdownDescription": "Enables the set_icon_with_as_template command without any pre-configured scope."
+        },
         {
           "description": "Enables the set_menu command without any pre-configured scope.",
           "type": "string",
@@ -1178,6 +986,12 @@
           "const": "core:tray:deny-set-icon-as-template",
           "markdownDescription": "Denies the set_icon_as_template command without any pre-configured scope."
         },
+        {
+          "description": "Denies the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-with-as-template",
+          "markdownDescription": "Denies the set_icon_with_as_template command without any pre-configured scope."
+        },
         {
           "description": "Denies the set_menu command without any pre-configured scope.",
           "type": "string",
@@ -1437,10 +1251,16 @@
           "markdownDescription": "Denies the webview_size command without any pre-configured scope."
         },
         {
-          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-internal-toggle-maximize`",
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`",
           "type": "string",
           "const": "core:window:default",
-          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-internal-toggle-maximize`"
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`"
+        },
+        {
+          "description": "Enables the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-activity-name",
+          "markdownDescription": "Enables the activity_name command without any pre-configured scope."
         },
         {
           "description": "Enables the available_monitors command without any pre-configured scope.",
@@ -1634,6 +1454,12 @@
           "const": "core:window:allow-scale-factor",
           "markdownDescription": "Enables the scale_factor command without any pre-configured scope."
         },
+        {
+          "description": "Enables the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scene-identifier",
+          "markdownDescription": "Enables the scene_identifier command without any pre-configured scope."
+        },
         {
           "description": "Enables the set_always_on_bottom command without any pre-configured scope.",
           "type": "string",
@@ -1898,6 +1724,12 @@
           "const": "core:window:allow-unminimize",
           "markdownDescription": "Enables the unminimize command without any pre-configured scope."
         },
+        {
+          "description": "Denies the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-activity-name",
+          "markdownDescription": "Denies the activity_name command without any pre-configured scope."
+        },
         {
           "description": "Denies the available_monitors command without any pre-configured scope.",
           "type": "string",
@@ -2090,6 +1922,12 @@
           "const": "core:window:deny-scale-factor",
           "markdownDescription": "Denies the scale_factor command without any pre-configured scope."
         },
+        {
+          "description": "Denies the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scene-identifier",
+          "markdownDescription": "Denies the scene_identifier command without any pre-configured scope."
+        },
         {
           "description": "Denies the set_always_on_bottom command without any pre-configured scope.",
           "type": "string",
@@ -2355,70 +2193,70 @@
           "markdownDescription": "Denies the unminimize command without any pre-configured scope."
         },
         {
-          "description": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`",
+          "description": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-message`\n- `allow-save`\n- `allow-open`",
           "type": "string",
-          "const": "shell:default",
-          "markdownDescription": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`"
+          "const": "dialog:default",
+          "markdownDescription": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-message`\n- `allow-save`\n- `allow-open`"
         },
         {
-          "description": "Enables the execute command without any pre-configured scope.",
+          "description": "Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-execute",
-          "markdownDescription": "Enables the execute command without any pre-configured scope."
+          "const": "dialog:allow-ask",
+          "markdownDescription": "Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
         },
         {
-          "description": "Enables the kill command without any pre-configured scope.",
+          "description": "Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-kill",
-          "markdownDescription": "Enables the kill command without any pre-configured scope."
+          "const": "dialog:allow-confirm",
+          "markdownDescription": "Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
+        },
+        {
+          "description": "Enables the message command without any pre-configured scope.",
+          "type": "string",
+          "const": "dialog:allow-message",
+          "markdownDescription": "Enables the message command without any pre-configured scope."
         },
         {
           "description": "Enables the open command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:allow-open",
+          "const": "dialog:allow-open",
           "markdownDescription": "Enables the open command without any pre-configured scope."
         },
         {
-          "description": "Enables the spawn command without any pre-configured scope.",
+          "description": "Enables the save command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:allow-spawn",
-          "markdownDescription": "Enables the spawn command without any pre-configured scope."
+          "const": "dialog:allow-save",
+          "markdownDescription": "Enables the save command without any pre-configured scope."
         },
         {
-          "description": "Enables the stdin_write command without any pre-configured scope.",
+          "description": "Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-stdin-write",
-          "markdownDescription": "Enables the stdin_write command without any pre-configured scope."
+          "const": "dialog:deny-ask",
+          "markdownDescription": "Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
         },
         {
-          "description": "Denies the execute command without any pre-configured scope.",
+          "description": "Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:deny-execute",
-          "markdownDescription": "Denies the execute command without any pre-configured scope."
+          "const": "dialog:deny-confirm",
+          "markdownDescription": "Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
         },
         {
-          "description": "Denies the kill command without any pre-configured scope.",
+          "description": "Denies the message command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-kill",
-          "markdownDescription": "Denies the kill command without any pre-configured scope."
+          "const": "dialog:deny-message",
+          "markdownDescription": "Denies the message command without any pre-configured scope."
         },
         {
           "description": "Denies the open command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-open",
+          "const": "dialog:deny-open",
           "markdownDescription": "Denies the open command without any pre-configured scope."
         },
         {
-          "description": "Denies the spawn command without any pre-configured scope.",
-          "type": "string",
-          "const": "shell:deny-spawn",
-          "markdownDescription": "Denies the spawn command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the stdin_write command without any pre-configured scope.",
+          "description": "Denies the save command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-stdin-write",
-          "markdownDescription": "Denies the stdin_write command without any pre-configured scope."
+          "const": "dialog:deny-save",
+          "markdownDescription": "Denies the save command without any pre-configured scope."
         }
       ]
     },
@@ -2515,50 +2353,6 @@
           ]
         }
       ]
-    },
-    "ShellScopeEntryAllowedArg": {
-      "description": "A command argument allowed to be executed by the webview API.",
-      "anyOf": [
-        {
-          "description": "A non-configurable argument that is passed to the command in the order it was specified.",
-          "type": "string"
-        },
-        {
-          "description": "A variable that is set while calling the command from the webview API.",
-          "type": "object",
-          "required": [
-            "validator"
-          ],
-          "properties": {
-            "raw": {
-              "description": "Marks the validator as a raw regex, meaning the plugin should not make any modification at runtime.\n\nThis means the regex will not match on the entire string by default, which might be exploited if your regex allow unexpected input to be considered valid. When using this option, make sure your regex is correct.",
-              "default": false,
-              "type": "boolean"
-            },
-            "validator": {
-              "description": "[regex] validator to require passed values to conform to an expected input.\n\nThis will require the argument value passed to this variable to match the `validator` regex before it will be executed.\n\nThe regex string is by default surrounded by `^...$` to match the full string. For example the `https?://\\w+` regex would be registered as `^https?://\\w+$`.\n\n[regex]: <https://docs.rs/regex/latest/regex/#syntax>",
-              "type": "string"
-            }
-          },
-          "additionalProperties": false
-        }
-      ]
-    },
-    "ShellScopeEntryAllowedArgs": {
-      "description": "A set of command arguments allowed to be executed by the webview API.\n\nA value of `true` will allow any arguments to be passed to the command. `false` will disable all arguments. A list of [`ShellScopeEntryAllowedArg`] will set those arguments as the only valid arguments to be passed to the attached command configuration.",
-      "anyOf": [
-        {
-          "description": "Use a simple boolean to allow all or disable all arguments to this command configuration.",
-          "type": "boolean"
-        },
-        {
-          "description": "A specific set of [`ShellScopeEntryAllowedArg`] that are valid to call for the command configuration.",
-          "type": "array",
-          "items": {
-            "$ref": "#/definitions/ShellScopeEntryAllowedArg"
-          }
-        }
-      ]
     }
   }
 }
\ No newline at end of file
diff --git a/crates/deepclean-app/gen/schemas/macOS-schema.json b/crates/deepclean-app/gen/schemas/macOS-schema.json
index f827fe1..24c9001 100644
--- a/crates/deepclean-app/gen/schemas/macOS-schema.json
+++ b/crates/deepclean-app/gen/schemas/macOS-schema.json
@@ -134,216 +134,6 @@
           "description": "Reference a permission or permission set by identifier and extends its scope.",
           "type": "object",
           "allOf": [
-            {
-              "if": {
-                "properties": {
-                  "identifier": {
-                    "anyOf": [
-                      {
-                        "description": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`",
-                        "type": "string",
-                        "const": "shell:default",
-                        "markdownDescription": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`"
-                      },
-                      {
-                        "description": "Enables the execute command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-execute",
-                        "markdownDescription": "Enables the execute command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the kill command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-kill",
-                        "markdownDescription": "Enables the kill command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the open command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-open",
-                        "markdownDescription": "Enables the open command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the spawn command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-spawn",
-                        "markdownDescription": "Enables the spawn command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Enables the stdin_write command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:allow-stdin-write",
-                        "markdownDescription": "Enables the stdin_write command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the execute command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-execute",
-                        "markdownDescription": "Denies the execute command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the kill command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-kill",
-                        "markdownDescription": "Denies the kill command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the open command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-open",
-                        "markdownDescription": "Denies the open command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the spawn command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-spawn",
-                        "markdownDescription": "Denies the spawn command without any pre-configured scope."
-                      },
-                      {
-                        "description": "Denies the stdin_write command without any pre-configured scope.",
-                        "type": "string",
-                        "const": "shell:deny-stdin-write",
-                        "markdownDescription": "Denies the stdin_write command without any pre-configured scope."
-                      }
-                    ]
-                  }
-                }
-              },
-              "then": {
-                "properties": {
-                  "allow": {
-                    "items": {
-                      "title": "ShellScopeEntry",
-                      "description": "Shell scope entry.",
-                      "anyOf": [
-                        {
-                          "type": "object",
-                          "required": [
-                            "cmd",
-                            "name"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "cmd": {
-                              "description": "The command name. It can start with a variable that resolves to a system base directory. The variables are: `$AUDIO`, `$CACHE`, `$CONFIG`, `$DATA`, `$LOCALDATA`, `$DESKTOP`, `$DOCUMENT`, `$DOWNLOAD`, `$EXE`, `$FONT`, `$HOME`, `$PICTURE`, `$PUBLIC`, `$RUNTIME`, `$TEMPLATE`, `$VIDEO`, `$RESOURCE`, `$LOG`, `$TEMP`, `$APPCONFIG`, `$APPDATA`, `$APPLOCALDATA`, `$APPCACHE`, `$APPLOG`.",
-                              "type": "string"
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            }
-                          },
-                          "additionalProperties": false
-                        },
-                        {
-                          "type": "object",
-                          "required": [
-                            "name",
-                            "sidecar"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            },
-                            "sidecar": {
-                              "description": "If this command is a sidecar command.",
-                              "type": "boolean"
-                            }
-                          },
-                          "additionalProperties": false
-                        }
-                      ]
-                    }
-                  },
-                  "deny": {
-                    "items": {
-                      "title": "ShellScopeEntry",
-                      "description": "Shell scope entry.",
-                      "anyOf": [
-                        {
-                          "type": "object",
-                          "required": [
-                            "cmd",
-                            "name"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "cmd": {
-                              "description": "The command name. It can start with a variable that resolves to a system base directory. The variables are: `$AUDIO`, `$CACHE`, `$CONFIG`, `$DATA`, `$LOCALDATA`, `$DESKTOP`, `$DOCUMENT`, `$DOWNLOAD`, `$EXE`, `$FONT`, `$HOME`, `$PICTURE`, `$PUBLIC`, `$RUNTIME`, `$TEMPLATE`, `$VIDEO`, `$RESOURCE`, `$LOG`, `$TEMP`, `$APPCONFIG`, `$APPDATA`, `$APPLOCALDATA`, `$APPCACHE`, `$APPLOG`.",
-                              "type": "string"
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            }
-                          },
-                          "additionalProperties": false
-                        },
-                        {
-                          "type": "object",
-                          "required": [
-                            "name",
-                            "sidecar"
-                          ],
-                          "properties": {
-                            "args": {
-                              "description": "The allowed arguments for the command execution.",
-                              "allOf": [
-                                {
-                                  "$ref": "#/definitions/ShellScopeEntryAllowedArgs"
-                                }
-                              ]
-                            },
-                            "name": {
-                              "description": "The name for this allowed shell command configuration.\n\nThis name will be used inside of the webview API to call this command along with any specified arguments.",
-                              "type": "string"
-                            },
-                            "sidecar": {
-                              "description": "If this command is a sidecar command.",
-                              "type": "boolean"
-                            }
-                          },
-                          "additionalProperties": false
-                        }
-                      ]
-                    }
-                  }
-                }
-              },
-              "properties": {
-                "identifier": {
-                  "description": "Identifier of the permission or permission set.",
-                  "allOf": [
-                    {
-                      "$ref": "#/definitions/Identifier"
-                    }
-                  ]
-                }
-              }
-            },
             {
               "properties": {
                 "identifier": {
@@ -393,10 +183,10 @@
           "markdownDescription": "Default core plugins set.\n#### This default permission set includes:\n\n- `core:path:default`\n- `core:event:default`\n- `core:window:default`\n- `core:webview:default`\n- `core:app:default`\n- `core:image:default`\n- `core:resources:default`\n- `core:menu:default`\n- `core:tray:default`"
         },
         {
-          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`",
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`",
           "type": "string",
           "const": "core:app:default",
-          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`"
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-version`\n- `allow-name`\n- `allow-tauri-version`\n- `allow-identifier`\n- `allow-bundle-type`\n- `allow-register-listener`\n- `allow-remove-listener`\n- `allow-supports-multiple-windows`"
         },
         {
           "description": "Enables the app_hide command without any pre-configured scope.",
@@ -470,6 +260,12 @@
           "const": "core:app:allow-set-dock-visibility",
           "markdownDescription": "Enables the set_dock_visibility command without any pre-configured scope."
         },
+        {
+          "description": "Enables the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:allow-supports-multiple-windows",
+          "markdownDescription": "Enables the supports_multiple_windows command without any pre-configured scope."
+        },
         {
           "description": "Enables the tauri_version command without any pre-configured scope.",
           "type": "string",
@@ -554,6 +350,12 @@
           "const": "core:app:deny-set-dock-visibility",
           "markdownDescription": "Denies the set_dock_visibility command without any pre-configured scope."
         },
+        {
+          "description": "Denies the supports_multiple_windows command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:app:deny-supports-multiple-windows",
+          "markdownDescription": "Denies the supports_multiple_windows command without any pre-configured scope."
+        },
         {
           "description": "Denies the tauri_version command without any pre-configured scope.",
           "type": "string",
@@ -1077,10 +879,10 @@
           "markdownDescription": "Denies the close command without any pre-configured scope."
         },
         {
-          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`",
+          "description": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`",
           "type": "string",
           "const": "core:tray:default",
-          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-show-menu-on-left-click`"
+          "markdownDescription": "Default permissions for the plugin, which enables all commands.\n#### This default permission set includes:\n\n- `allow-new`\n- `allow-get-by-id`\n- `allow-remove-by-id`\n- `allow-set-icon`\n- `allow-set-menu`\n- `allow-set-tooltip`\n- `allow-set-title`\n- `allow-set-visible`\n- `allow-set-temp-dir-path`\n- `allow-set-icon-as-template`\n- `allow-set-icon-with-as-template`\n- `allow-set-show-menu-on-left-click`"
         },
         {
           "description": "Enables the get_by_id command without any pre-configured scope.",
@@ -1112,6 +914,12 @@
           "const": "core:tray:allow-set-icon-as-template",
           "markdownDescription": "Enables the set_icon_as_template command without any pre-configured scope."
         },
+        {
+          "description": "Enables the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:allow-set-icon-with-as-template",
+          "markdownDescription": "Enables the set_icon_with_as_template command without any pre-configured scope."
+        },
         {
           "description": "Enables the set_menu command without any pre-configured scope.",
           "type": "string",
@@ -1178,6 +986,12 @@
           "const": "core:tray:deny-set-icon-as-template",
           "markdownDescription": "Denies the set_icon_as_template command without any pre-configured scope."
         },
+        {
+          "description": "Denies the set_icon_with_as_template command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:tray:deny-set-icon-with-as-template",
+          "markdownDescription": "Denies the set_icon_with_as_template command without any pre-configured scope."
+        },
         {
           "description": "Denies the set_menu command without any pre-configured scope.",
           "type": "string",
@@ -1437,10 +1251,16 @@
           "markdownDescription": "Denies the webview_size command without any pre-configured scope."
         },
         {
-          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-internal-toggle-maximize`",
+          "description": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`",
           "type": "string",
           "const": "core:window:default",
-          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-internal-toggle-maximize`"
+          "markdownDescription": "Default permissions for the plugin.\n#### This default permission set includes:\n\n- `allow-get-all-windows`\n- `allow-scale-factor`\n- `allow-inner-position`\n- `allow-outer-position`\n- `allow-inner-size`\n- `allow-outer-size`\n- `allow-is-fullscreen`\n- `allow-is-minimized`\n- `allow-is-maximized`\n- `allow-is-focused`\n- `allow-is-decorated`\n- `allow-is-resizable`\n- `allow-is-maximizable`\n- `allow-is-minimizable`\n- `allow-is-closable`\n- `allow-is-visible`\n- `allow-is-enabled`\n- `allow-title`\n- `allow-current-monitor`\n- `allow-primary-monitor`\n- `allow-monitor-from-point`\n- `allow-available-monitors`\n- `allow-cursor-position`\n- `allow-theme`\n- `allow-is-always-on-top`\n- `allow-activity-name`\n- `allow-scene-identifier`\n- `allow-internal-toggle-maximize`"
+        },
+        {
+          "description": "Enables the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-activity-name",
+          "markdownDescription": "Enables the activity_name command without any pre-configured scope."
         },
         {
           "description": "Enables the available_monitors command without any pre-configured scope.",
@@ -1634,6 +1454,12 @@
           "const": "core:window:allow-scale-factor",
           "markdownDescription": "Enables the scale_factor command without any pre-configured scope."
         },
+        {
+          "description": "Enables the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:allow-scene-identifier",
+          "markdownDescription": "Enables the scene_identifier command without any pre-configured scope."
+        },
         {
           "description": "Enables the set_always_on_bottom command without any pre-configured scope.",
           "type": "string",
@@ -1898,6 +1724,12 @@
           "const": "core:window:allow-unminimize",
           "markdownDescription": "Enables the unminimize command without any pre-configured scope."
         },
+        {
+          "description": "Denies the activity_name command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-activity-name",
+          "markdownDescription": "Denies the activity_name command without any pre-configured scope."
+        },
         {
           "description": "Denies the available_monitors command without any pre-configured scope.",
           "type": "string",
@@ -2090,6 +1922,12 @@
           "const": "core:window:deny-scale-factor",
           "markdownDescription": "Denies the scale_factor command without any pre-configured scope."
         },
+        {
+          "description": "Denies the scene_identifier command without any pre-configured scope.",
+          "type": "string",
+          "const": "core:window:deny-scene-identifier",
+          "markdownDescription": "Denies the scene_identifier command without any pre-configured scope."
+        },
         {
           "description": "Denies the set_always_on_bottom command without any pre-configured scope.",
           "type": "string",
@@ -2355,70 +2193,70 @@
           "markdownDescription": "Denies the unminimize command without any pre-configured scope."
         },
         {
-          "description": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`",
+          "description": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-message`\n- `allow-save`\n- `allow-open`",
           "type": "string",
-          "const": "shell:default",
-          "markdownDescription": "This permission set configures which\nshell functionality is exposed by default.\n\n#### Granted Permissions\n\nIt allows to use the `open` functionality with a reasonable\nscope pre-configured. It will allow opening `http(s)://`,\n`tel:` and `mailto:` links.\n\n#### This default permission set includes:\n\n- `allow-open`"
+          "const": "dialog:default",
+          "markdownDescription": "This permission set configures the types of dialogs\navailable from the dialog plugin.\n\n#### Granted Permissions\n\nAll dialog types are enabled.\n\n\n\n#### This default permission set includes:\n\n- `allow-message`\n- `allow-save`\n- `allow-open`"
         },
         {
-          "description": "Enables the execute command without any pre-configured scope.",
+          "description": "Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-execute",
-          "markdownDescription": "Enables the execute command without any pre-configured scope."
+          "const": "dialog:allow-ask",
+          "markdownDescription": "Enables the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
         },
         {
-          "description": "Enables the kill command without any pre-configured scope.",
+          "description": "Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-kill",
-          "markdownDescription": "Enables the kill command without any pre-configured scope."
+          "const": "dialog:allow-confirm",
+          "markdownDescription": "Enables the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `allow-message` and will be removed in v3)"
+        },
+        {
+          "description": "Enables the message command without any pre-configured scope.",
+          "type": "string",
+          "const": "dialog:allow-message",
+          "markdownDescription": "Enables the message command without any pre-configured scope."
         },
         {
           "description": "Enables the open command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:allow-open",
+          "const": "dialog:allow-open",
           "markdownDescription": "Enables the open command without any pre-configured scope."
         },
         {
-          "description": "Enables the spawn command without any pre-configured scope.",
+          "description": "Enables the save command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:allow-spawn",
-          "markdownDescription": "Enables the spawn command without any pre-configured scope."
+          "const": "dialog:allow-save",
+          "markdownDescription": "Enables the save command without any pre-configured scope."
         },
         {
-          "description": "Enables the stdin_write command without any pre-configured scope.",
+          "description": "Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:allow-stdin-write",
-          "markdownDescription": "Enables the stdin_write command without any pre-configured scope."
+          "const": "dialog:deny-ask",
+          "markdownDescription": "Denies the ask command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
         },
         {
-          "description": "Denies the execute command without any pre-configured scope.",
+          "description": "Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)",
           "type": "string",
-          "const": "shell:deny-execute",
-          "markdownDescription": "Denies the execute command without any pre-configured scope."
+          "const": "dialog:deny-confirm",
+          "markdownDescription": "Denies the confirm command without any pre-configured scope. (**DEPRECATED**: This is now an alias to `deny-message` and will be removed in v3)"
         },
         {
-          "description": "Denies the kill command without any pre-configured scope.",
+          "description": "Denies the message command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-kill",
-          "markdownDescription": "Denies the kill command without any pre-configured scope."
+          "const": "dialog:deny-message",
+          "markdownDescription": "Denies the message command without any pre-configured scope."
         },
         {
           "description": "Denies the open command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-open",
+          "const": "dialog:deny-open",
           "markdownDescription": "Denies the open command without any pre-configured scope."
         },
         {
-          "description": "Denies the spawn command without any pre-configured scope.",
-          "type": "string",
-          "const": "shell:deny-spawn",
-          "markdownDescription": "Denies the spawn command without any pre-configured scope."
-        },
-        {
-          "description": "Denies the stdin_write command without any pre-configured scope.",
+          "description": "Denies the save command without any pre-configured scope.",
           "type": "string",
-          "const": "shell:deny-stdin-write",
-          "markdownDescription": "Denies the stdin_write command without any pre-configured scope."
+          "const": "dialog:deny-save",
+          "markdownDescription": "Denies the save command without any pre-configured scope."
         }
       ]
     },
@@ -2515,50 +2353,6 @@
           ]
         }
       ]
-    },
-    "ShellScopeEntryAllowedArg": {
-      "description": "A command argument allowed to be executed by the webview API.",
-      "anyOf": [
-        {
-          "description": "A non-configurable argument that is passed to the command in the order it was specified.",
-          "type": "string"
-        },
-        {
-          "description": "A variable that is set while calling the command from the webview API.",
-          "type": "object",
-          "required": [
-            "validator"
-          ],
-          "properties": {
-            "raw": {
-              "description": "Marks the validator as a raw regex, meaning the plugin should not make any modification at runtime.\n\nThis means the regex will not match on the entire string by default, which might be exploited if your regex allow unexpected input to be considered valid. When using this option, make sure your regex is correct.",
-              "default": false,
-              "type": "boolean"
-            },
-            "validator": {
-              "description": "[regex] validator to require passed values to conform to an expected input.\n\nThis will require the argument value passed to this variable to match the `validator` regex before it will be executed.\n\nThe regex string is by default surrounded by `^...$` to match the full string. For example the `https?://\\w+` regex would be registered as `^https?://\\w+$`.\n\n[regex]: <https://docs.rs/regex/latest/regex/#syntax>",
-              "type": "string"
-            }
-          },
-          "additionalProperties": false
-        }
-      ]
-    },
-    "ShellScopeEntryAllowedArgs": {
-      "description": "A set of command arguments allowed to be executed by the webview API.\n\nA value of `true` will allow any arguments to be passed to the command. `false` will disable all arguments. A list of [`ShellScopeEntryAllowedArg`] will set those arguments as the only valid arguments to be passed to the attached command configuration.",
-      "anyOf": [
-        {
-          "description": "Use a simple boolean to allow all or disable all arguments to this command configuration.",
-          "type": "boolean"
-        },
-        {
-          "description": "A specific set of [`ShellScopeEntryAllowedArg`] that are valid to call for the command configuration.",
-          "type": "array",
-          "items": {
-            "$ref": "#/definitions/ShellScopeEntryAllowedArg"
-          }
-        }
-      ]
     }
   }
 }
\ No newline at end of file
diff --git a/crates/deepclean-app/icons/128x128.png b/crates/deepclean-app/icons/128x128.png
index 9d8e07f..60e99fd 100644
Binary files a/crates/deepclean-app/icons/128x128.png and b/crates/deepclean-app/icons/128x128.png differ
diff --git a/crates/deepclean-app/icons/128x128@2x.png b/crates/deepclean-app/icons/128x128@2x.png
index 689e585..8c6d28b 100644
Binary files a/crates/deepclean-app/icons/128x128@2x.png and b/crates/deepclean-app/icons/128x128@2x.png differ
diff --git a/crates/deepclean-app/icons/32x32.png b/crates/deepclean-app/icons/32x32.png
index 5e240d4..3542d96 100644
Binary files a/crates/deepclean-app/icons/32x32.png and b/crates/deepclean-app/icons/32x32.png differ
diff --git a/crates/deepclean-app/icons/icon-master.png b/crates/deepclean-app/icons/icon-master.png
index 1e35ef4..dba8861 100644
Binary files a/crates/deepclean-app/icons/icon-master.png and b/crates/deepclean-app/icons/icon-master.png differ
diff --git a/crates/deepclean-app/icons/icon.icns b/crates/deepclean-app/icons/icon.icns
index 8f5f2f0..2ba700d 100644
Binary files a/crates/deepclean-app/icons/icon.icns and b/crates/deepclean-app/icons/icon.icns differ
diff --git a/crates/deepclean-app/icons/icon.ico b/crates/deepclean-app/icons/icon.ico
index 46de2c8..88b8c4a 100644
Binary files a/crates/deepclean-app/icons/icon.ico and b/crates/deepclean-app/icons/icon.ico differ
diff --git a/crates/deepclean-app/icons/icon.png b/crates/deepclean-app/icons/icon.png
index 0f86450..c0705c2 100644
Binary files a/crates/deepclean-app/icons/icon.png and b/crates/deepclean-app/icons/icon.png differ
diff --git a/crates/deepclean-app/icons/trayTemplate.png b/crates/deepclean-app/icons/trayTemplate.png
new file mode 100644
index 0000000..c7b8a60
Binary files /dev/null and b/crates/deepclean-app/icons/trayTemplate.png differ
diff --git a/crates/deepclean-app/icons/trayTemplate@2x.png b/crates/deepclean-app/icons/trayTemplate@2x.png
new file mode 100644
index 0000000..174dc97
Binary files /dev/null and b/crates/deepclean-app/icons/trayTemplate@2x.png differ
diff --git a/crates/deepclean-app/src/commands.rs b/crates/deepclean-app/src/commands.rs
index 5e7b437..f04534b 100644
--- a/crates/deepclean-app/src/commands.rs
+++ b/crates/deepclean-app/src/commands.rs
@@ -1,8 +1,12 @@
+use std::collections::HashMap;
+use std::path::Path;
 use std::sync::Arc;
 
-use serde::Deserialize;
+use serde::{Deserialize, Serialize};
 use tauri::{AppHandle, Emitter, Manager, State};
 
+use deepclean_core::disk::DiskUsage;
+use deepclean_core::history::{CleanRun, History, RunItem, RunOutcome};
 use deepclean_core::model::*;
 use deepclean_core::scanner::apple::AppleScanner;
 use deepclean_core::scanner::docker::DockerScanner;
@@ -21,36 +25,33 @@ use crate::state::AppState;
 
 #[tauri::command]
 pub async fn start_scan(app: AppHandle, state: State<'_, AppState>) -> Result<(), String> {
-    {
-        let mut scanning = state.is_scanning.lock().unwrap();
-        if *scanning {
-            return Err("Scan already in progress".into());
-        }
-        *scanning = true;
+    if !state.begin_scan() {
+        return Err("Scan already in progress".into());
     }
 
-    // Clear previous results
-    state.scan_results.lock().unwrap().clear();
-
-    let config = state.config.lock().unwrap().clone();
-
-    // Build scanners based on enabled ecosystems
-    let mut scanners: Vec<Arc<dyn EcosystemScanner>> = vec![];
-    for eco in &config.enabled_ecosystems {
-        match eco {
-            Ecosystem::Rust => scanners.push(Arc::new(RustScanner)),
-            Ecosystem::Node => scanners.push(Arc::new(NodeScanner)),
-            Ecosystem::Apple => scanners.push(Arc::new(AppleScanner)),
-            Ecosystem::Docker => scanners.push(Arc::new(DockerScanner)),
-            Ecosystem::Go => scanners.push(Arc::new(GoScanner)),
-            Ecosystem::System => scanners.push(Arc::new(SystemScanner)),
-            Ecosystem::Python => scanners.push(Arc::new(PythonScanner)),
-            Ecosystem::Java => scanners.push(Arc::new(JavaScanner)),
-            Ecosystem::Homebrew => scanners.push(Arc::new(HomebrewScanner)),
-            Ecosystem::JetBrains => scanners.push(Arc::new(JetBrainsScanner)),
-            Ecosystem::DotNet => scanners.push(Arc::new(DotNetScanner)),
-        }
-    }
+    state.results().clear();
+
+    let config = state.config().clone();
+
+    let scanners: Vec<Arc<dyn EcosystemScanner>> = config
+        .enabled_ecosystems
+        .iter()
+        .map(|eco| -> Arc<dyn EcosystemScanner> {
+            match eco {
+                Ecosystem::Rust => Arc::new(RustScanner),
+                Ecosystem::Node => Arc::new(NodeScanner),
+                Ecosystem::Apple => Arc::new(AppleScanner),
+                Ecosystem::Docker => Arc::new(DockerScanner),
+                Ecosystem::Go => Arc::new(GoScanner),
+                Ecosystem::System => Arc::new(SystemScanner),
+                Ecosystem::Python => Arc::new(PythonScanner),
+                Ecosystem::Java => Arc::new(JavaScanner),
+                Ecosystem::Homebrew => Arc::new(HomebrewScanner),
+                Ecosystem::JetBrains => Arc::new(JetBrainsScanner),
+                Ecosystem::DotNet => Arc::new(DotNetScanner),
+            }
+        })
+        .collect();
 
     let orchestrator = ScanOrchestrator::new(scanners, config);
     let mut rx = orchestrator.start_scan();
@@ -63,19 +64,26 @@ pub async fn start_scan(app: AppHandle, state: State<'_, AppState>) -> Result<()
                 ScanEvent::ItemFound { item } => {
                     // Store result
                     if let Some(handle) = app_clone.try_state::<AppState>() {
-                        handle.scan_results.lock().unwrap().push(item.clone());
+                        handle.results().push(item.clone());
                     }
                 }
                 ScanEvent::ScanComplete { summary } => {
                     if let Some(handle) = app_clone.try_state::<AppState>() {
-                        *handle.scan_summary.lock().unwrap() = summary.clone();
-                        *handle.is_scanning.lock().unwrap() = false;
+                        *handle.summary() = summary.clone();
                     }
                 }
                 _ => {}
             }
             let _ = app_clone.emit("scan-event", &event);
         }
+
+        // Released here rather than in the ScanComplete arm: if the orchestrator
+        // task dies or the channel closes without a final event, that arm never
+        // runs and the latch would stay set for the life of the process,
+        // refusing every later scan.
+        if let Some(handle) = app_clone.try_state::<AppState>() {
+            handle.finish_scan();
+        }
     });
 
     Ok(())
@@ -87,7 +95,7 @@ pub async fn get_scan_results(
     ecosystem: Option<Ecosystem>,
     min_risk: Option<RiskLevel>,
 ) -> Result<Vec<CleanableItem>, String> {
-    let results = state.scan_results.lock().unwrap();
+    let results = state.results();
     let filtered: Vec<CleanableItem> = results
         .iter()
         .filter(|item| {
@@ -125,33 +133,110 @@ pub async fn execute_clean(
     state: State<'_, AppState>,
     request: CleanRequest,
 ) -> Result<(), String> {
-    let results = state.scan_results.lock().unwrap();
-
-    // Resolve selections to (item, action) pairs
-    let mut pairs = vec![];
-    for sel in &request.selections {
-        if let Some(item) = results.iter().find(|i| i.id == sel.item_id) {
-            if let Some(action) = item
-                .available_actions
-                .iter()
-                .find(|a| a.id == sel.action_id)
-            {
-                pairs.push((item.clone(), action.clone()));
-            }
-        }
-    }
-    drop(results);
+    let pairs: Vec<(CleanableItem, CleanAction)> = {
+        let results = state.results();
+        request
+            .selections
+            .iter()
+            .filter_map(|sel| {
+                let item = results.iter().find(|i| i.id == sel.item_id)?;
+                let action = item
+                    .available_actions
+                    .iter()
+                    .find(|a| a.id == sel.action_id)?;
+                Some((item.clone(), action.clone()))
+            })
+            .collect()
+    };
 
     if pairs.is_empty() {
         return Err("No valid selections".into());
     }
 
+    // A fresh batch clears any cancellation left over from the previous one.
+    state.reset_cancel();
+    let cancel = state.cancel_flag();
+
+    // Everything needed to write the history record, captured before the
+    // batch consumes the pairs.
+    let pending: HashMap<uuid::Uuid, PendingRecord> = pairs
+        .iter()
+        .map(|(item, action)| {
+            (
+                item.id,
+                PendingRecord {
+                    path: item.path.clone(),
+                    ecosystem: item.ecosystem,
+                    action_label: action.label.clone(),
+                    method_summary: describe_method(&action.method),
+                    estimated_bytes: action.estimated_savings_bytes,
+                },
+            )
+        })
+        .collect();
+
     let executor = state.create_executor();
-    let mut rx = executor.execute_batch(pairs);
+    let mut rx = executor.execute_batch_with_cancel(pairs, cancel);
 
     let app_clone = app.clone();
     tokio::spawn(async move {
+        let started_at = chrono::Utc::now();
+        let start = std::time::Instant::now();
+        let mut recorded: Vec<RunItem> = Vec::new();
+
         while let Some(event) = rx.recv().await {
+            match &event {
+                ActionEvent::Completed {
+                    item_id,
+                    bytes_freed,
+                    estimated_bytes,
+                    ..
+                } => {
+                    // Drop it from the authoritative list too, or a second
+                    // clean could re-select something already gone.
+                    if let Some(handle) = app_clone.try_state::<AppState>() {
+                        handle.results().retain(|i| i.id != *item_id);
+                    }
+                    if let Some(p) = pending.get(item_id) {
+                        recorded.push(p.to_run_item(
+                            *bytes_freed,
+                            *estimated_bytes,
+                            RunOutcome::Succeeded,
+                        ));
+                    }
+                }
+                ActionEvent::Failed { item_id, error, .. } => {
+                    if let Some(p) = pending.get(item_id) {
+                        recorded.push(p.to_run_item(
+                            0,
+                            0,
+                            RunOutcome::Failed {
+                                error: error.clone(),
+                            },
+                        ));
+                    }
+                }
+                ActionEvent::BatchComplete { .. } => {
+                    if !recorded.is_empty() {
+                        if let Some(handle) = app_clone.try_state::<AppState>() {
+                            let run = CleanRun {
+                                id: uuid::Uuid::new_v4(),
+                                started_at,
+                                duration_ms: start.elapsed().as_millis() as u64,
+                                items: std::mem::take(&mut recorded),
+                            };
+                            handle.history().push(run);
+                            if let Err(err) = handle.persist_history() {
+                                let _ = app_clone.emit("app-warning", &err);
+                            }
+                        }
+                    }
+                    if let Some(handle) = app_clone.try_state::<AppState>() {
+                        handle.reset_cancel();
+                    }
+                }
+                _ => {}
+            }
             let _ = app_clone.emit("action-event", &event);
         }
     });
@@ -159,9 +244,126 @@ pub async fn execute_clean(
     Ok(())
 }
 
+/// Details of a queued item, held so a history record can be written when its
+/// terminal event arrives.
+struct PendingRecord {
+    path: std::path::PathBuf,
+    ecosystem: Ecosystem,
+    action_label: String,
+    method_summary: String,
+    estimated_bytes: u64,
+}
+
+impl PendingRecord {
+    fn to_run_item(&self, bytes_freed: u64, estimated: u64, result: RunOutcome) -> RunItem {
+        RunItem {
+            path: self.path.clone(),
+            ecosystem: self.ecosystem,
+            action_label: self.action_label.clone(),
+            method_summary: self.method_summary.clone(),
+            bytes_freed,
+            // The event carries the estimate for completions; failures get the
+            // action's own figure, which is what was at stake.
+            estimated_bytes: if estimated > 0 {
+                estimated
+            } else {
+                self.estimated_bytes
+            },
+            result,
+        }
+    }
+}
+
+/// Human-readable summary of what an action method actually does.
+///
+/// For commands this is the literal command line — the only honest disclosure
+/// available, since Void does not interpret what a command removes.
+fn describe_method(method: &ActionMethod) -> String {
+    match method {
+        ActionMethod::Command {
+            program,
+            args,
+            working_dir,
+        } => {
+            let line = std::iter::once(program.as_str())
+                .chain(args.iter().map(String::as_str))
+                .collect::<Vec<_>>()
+                .join(" ");
+            match working_dir {
+                Some(dir) => format!("{line} (in {})", dir.display()),
+                None => line,
+            }
+        }
+        ActionMethod::RemoveDir { .. } => "Delete directory recursively".into(),
+        ActionMethod::RemoveFile { .. } => "Delete file".into(),
+        ActionMethod::DockerPrune { prune_type } => format!("docker {prune_type} prune -f"),
+    }
+}
+
+/// Stop the running clean batch before its next item.
+///
+/// Cancellation never interrupts an action already in flight — a half-finished
+/// `rm -rf` would leave the user worse off than letting it complete.
+#[tauri::command]
+pub async fn cancel_clean(state: State<'_, AppState>) -> Result<(), String> {
+    state.request_cancel();
+    Ok(())
+}
+
+/// Capacity of the volume holding the first scan root.
+#[tauri::command]
+pub async fn get_disk_usage(state: State<'_, AppState>) -> Result<Option<DiskUsage>, String> {
+    let root = state
+        .config()
+        .scan_roots
+        .first()
+        .cloned()
+        .or_else(dirs::home_dir);
+
+    Ok(match root {
+        Some(path) => deepclean_core::disk::usage_for_path(&path),
+        None => None,
+    })
+}
+
+/// Aggregated view of past clean runs, shaped for the History screen.
+#[derive(Serialize)]
+pub struct HistoryView {
+    pub runs: Vec<CleanRun>,
+    pub total_bytes: u64,
+    pub bytes_last_30_days: u64,
+    pub run_count: usize,
+}
+
+#[tauri::command]
+pub async fn get_history(state: State<'_, AppState>) -> Result<HistoryView, String> {
+    let history = state.history();
+    Ok(HistoryView {
+        runs: history.runs.clone(),
+        total_bytes: history.total_bytes(),
+        bytes_last_30_days: history.bytes_since(30),
+        run_count: history.runs.len(),
+    })
+}
+
+#[tauri::command]
+pub async fn clear_history(state: State<'_, AppState>) -> Result<(), String> {
+    *state.history() = History::default();
+    state.persist_history()
+}
+
+/// Problems encountered while loading persisted state at startup.
+///
+/// Drained on read: they describe the launch that just happened, and repeating
+/// them on every poll would be noise.
+#[tauri::command]
+pub async fn take_startup_warnings(state: State<'_, AppState>) -> Result<Vec<String>, String> {
+    Ok(state.take_startup_warnings())
+}
+
 #[tauri::command]
 pub async fn get_summary(state: State<'_, AppState>) -> Result<ScanSummary, String> {
-    let summary = state.scan_summary.lock().unwrap().clone();
+    let summary = state.summary().clone();
     Ok(summary)
 }
 
@@ -169,7 +371,7 @@ pub async fn get_summary(state: State<'_, AppState>) -> Result<ScanSummary, Stri
 pub async fn get_config(
     state: State<'_, AppState>,
 ) -> Result<deepclean_core::config::AppConfig, String> {
-    let config = state.config.lock().unwrap().clone();
+    let config = state.config().clone();
     Ok(config)
 }
 
@@ -178,6 +380,82 @@ pub async fn update_config(
     state: State<'_, AppState>,
     config: deepclean_core::config::AppConfig,
 ) -> Result<(), String> {
-    *state.config.lock().unwrap() = config;
+    // The config file is hand-editable and its path is deliberately exposed,
+    // so the UI's slider bounds are not a guarantee. Zero concurrency would
+    // wedge every future scan on an empty semaphore.
+    let config = config.sanitized();
+    *state.config() = config;
+    // Persist immediately. Settings that silently reset on relaunch are worse
+    // than no settings screen at all.
+    state.persist_config()
+}
+
+/// Show an item in the system file manager.
+///
+/// Takes the item's id rather than a path: the path is resolved from Void's own
+/// scan results, so nothing the frontend sends can point the file manager at an
+/// arbitrary location.
+///
+/// This *reveals* rather than opens. `shell.open` on a file hands it to its
+/// default application — clicking Reveal on a downloaded `.xip` would launch
+/// the installer instead of showing it.
+#[tauri::command]
+pub async fn reveal_item(state: State<'_, AppState>, item_id: uuid::Uuid) -> Result<(), String> {
+    let path = state
+        .results()
+        .iter()
+        .find(|i| i.id == item_id)
+        .map(|i| i.path.clone())
+        .ok_or_else(|| "That item is no longer in the scan results.".to_string())?;
+
+    // A cleaned item is gone; showing where it used to live still helps.
+    let target = if path.exists() {
+        path.clone()
+    } else {
+        path.parent()
+            .filter(|p| p.exists())
+            .map(Path::to_path_buf)
+            .ok_or_else(|| format!("{} no longer exists.", path.display()))?
+    };
+
+    reveal_path(&target).map_err(|err| format!("Could not open the file manager: {err}"))
+}
+
+/// Platform-specific reveal. Arguments are passed as argv, never through a
+/// shell, so a path with spaces or quotes needs no escaping.
+fn reveal_path(target: &Path) -> std::io::Result<()> {
+    #[cfg(target_os = "macos")]
+    {
+        // -R selects the item in Finder rather than opening it.
+        std::process::Command::new("open")
+            .arg("-R")
+            .arg(target)
+            .spawn()?;
+    }
+    #[cfg(target_os = "windows")]
+    {
+        // explorer.exe exits non-zero even on success, so the status is not
+        // checked; `/select,` must be one argument joined to the path.
+        let mut arg = std::ffi::OsString::from("/select,");
+        arg.push(target);
+        std::process::Command::new("explorer").arg(arg).spawn()?;
+    }
+    #[cfg(all(unix, not(target_os = "macos")))]
+    {
+        // No portable "select the file" on Linux; open the containing folder.
+        let dir = if target.is_dir() {
+            target
+        } else {
+            target.parent().unwrap_or(target)
+        };
+        std::process::Command::new("xdg-open").arg(dir).spawn()?;
+    }
     Ok(())
 }
+
+/// Where settings are stored, so the About screen can show it and the user can
+/// find the file.
+#[tauri::command]
+pub async fn get_config_path(state: State<'_, AppState>) -> Result<String, String> {
+    Ok(state.config_path().display().to_string())
+}
diff --git a/crates/deepclean-app/src/lib.rs b/crates/deepclean-app/src/lib.rs
index 1f5dfaa..cea4d2a 100644
--- a/crates/deepclean-app/src/lib.rs
+++ b/crates/deepclean-app/src/lib.rs
@@ -2,6 +2,8 @@ mod commands;
 mod state;
 mod tray;
 
+use tauri::Manager;
+
 use state::AppState;
 
 #[cfg_attr(mobile, tauri::mobile_entry_point)]
@@ -10,21 +12,45 @@ pub fn run() {
     // scanner or clean action tries to shell out to cargo/go/npm/brew/docker.
     deepclean_core::path_env::restore_login_shell_path();
 
-    tauri::Builder::default()
-        .plugin(tauri_plugin_shell::init())
-        .manage(AppState::new())
+    let result = tauri::Builder::default()
+        .plugin(tauri_plugin_dialog::init())
         .invoke_handler(tauri::generate_handler![
             commands::start_scan,
             commands::get_scan_results,
             commands::execute_clean,
+            commands::cancel_clean,
             commands::get_summary,
             commands::get_config,
             commands::update_config,
+            commands::get_config_path,
+            commands::reveal_item,
+            commands::get_disk_usage,
+            commands::get_history,
+            commands::clear_history,
+            commands::take_startup_warnings,
         ])
         .setup(|app| {
+            // Settings live beside the bundle identifier, so the path resolver
+            // owns the platform conventions rather than this crate:
+            //   macOS   ~/Library/Application Support/com.void.app/
+            //   Linux   ~/.config/com.void.app/
+            //   Windows %APPDATA%\com.void.app\
+            let config_dir = app.path().app_config_dir().unwrap_or_else(|_| {
+                dirs::config_dir()
+                    .unwrap_or_else(std::env::temp_dir)
+                    .join("com.void.app")
+            });
+            app.manage(AppState::load_from(config_dir));
+
             tray::setup_tray(app)?;
             Ok(())
         })
-        .run(tauri::generate_context!())
-        .expect("error while running Void");
+        .run(tauri::generate_context!());
+
+    // The entry point is the one place with no caller to hand an error to, so
+    // this reports and exits rather than unwinding with a bare panic message.
+    if let Err(err) = result {
+        eprintln!("Void could not start: {err}");
+        std::process::exit(1);
+    }
 }
diff --git a/crates/deepclean-app/src/state.rs b/crates/deepclean-app/src/state.rs
index 7b66c15..b1603b5 100644
--- a/crates/deepclean-app/src/state.rs
+++ b/crates/deepclean-app/src/state.rs
@@ -1,31 +1,244 @@
-use std::sync::Mutex;
+use std::path::{Path, PathBuf};
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::sync::{Arc, Mutex, MutexGuard, PoisonError};
 
 use deepclean_core::action::ActionExecutor;
 use deepclean_core::config::AppConfig;
+use deepclean_core::history::History;
 use deepclean_core::model::{CleanableItem, ScanSummary};
 use deepclean_core::safety::SafetyChecker;
 
 /// Application state managed by Tauri.
+///
+/// Fields are private and reached through the accessors below. That is not
+/// ceremony: it is what keeps the lock-poisoning policy in one place instead of
+/// spread across every command as `.lock().unwrap()`.
 pub struct AppState {
-    pub scan_results: Mutex<Vec<CleanableItem>>,
-    pub scan_summary: Mutex<ScanSummary>,
-    pub is_scanning: Mutex<bool>,
-    pub config: Mutex<AppConfig>,
+    scan_results: Mutex<Vec<CleanableItem>>,
+    scan_summary: Mutex<ScanSummary>,
+    is_scanning: Mutex<bool>,
+    config: Mutex<AppConfig>,
+    history: Mutex<History>,
+
+    /// Where config and history are written. Resolved once at startup from the
+    /// Tauri path resolver so the rest of the app never has to know the
+    /// platform conventions.
+    config_path: PathBuf,
+    history_path: PathBuf,
+
+    /// Set to stop the running clean batch before its next item.
+    cancel_clean: Arc<AtomicBool>,
+
+    /// Problems encountered while loading state at startup, surfaced to the UI
+    /// rather than silently swallowed.
+    startup_warnings: Mutex<Vec<String>>,
+}
+
+/// Take a lock, recovering rather than panicking if it was poisoned.
+///
+/// Poisoning means some other thread panicked while holding the lock. None of
+/// the state behind these mutexes is a multi-step invariant — each is a plain
+/// `Vec`, `bool` or config struct that is fully written under a single lock —
+/// so the data is still structurally sound. Propagating the panic instead would
+/// turn one failure into a permanently unusable window, where every subsequent
+/// scan, clean and settings write panics in turn. Recovering keeps the app
+/// answering.
+fn guard<T>(mutex: &Mutex<T>) -> MutexGuard<'_, T> {
+    mutex.lock().unwrap_or_else(PoisonError::into_inner)
 }
 
 impl AppState {
-    pub fn new() -> Self {
+    /// Load persisted state from `config_dir`, falling back to defaults.
+    pub fn load_from(config_dir: PathBuf) -> Self {
+        let config_path = config_dir.join(AppConfig::FILE_NAME);
+        let history_path = config_dir.join(History::FILE_NAME);
+
+        let (config, config_err) = AppConfig::load(&config_path);
+        let (history, history_err) = History::load(&history_path);
+
+        let warnings = [
+            config_err.map(|err| format!("Settings reset to defaults — {err}")),
+            history_err.map(|err| format!("Clean history could not be read — {err}")),
+        ]
+        .into_iter()
+        .flatten()
+        .collect();
+
         Self {
             scan_results: Mutex::new(Vec::new()),
             scan_summary: Mutex::new(ScanSummary::default()),
             is_scanning: Mutex::new(false),
-            config: Mutex::new(AppConfig::default()),
+            config: Mutex::new(config),
+            history: Mutex::new(history),
+            config_path,
+            history_path,
+            cancel_clean: Arc::new(AtomicBool::new(false)),
+            startup_warnings: Mutex::new(warnings),
+        }
+    }
+
+    pub fn results(&self) -> MutexGuard<'_, Vec<CleanableItem>> {
+        guard(&self.scan_results)
+    }
+
+    pub fn summary(&self) -> MutexGuard<'_, ScanSummary> {
+        guard(&self.scan_summary)
+    }
+
+    pub fn config(&self) -> MutexGuard<'_, AppConfig> {
+        guard(&self.config)
+    }
+
+    pub fn history(&self) -> MutexGuard<'_, History> {
+        guard(&self.history)
+    }
+
+    pub fn config_path(&self) -> &Path {
+        &self.config_path
+    }
+
+    /// Claim the scanning slot. Returns `false` when a scan is already running.
+    ///
+    /// Test-and-set behind one lock, so two rapid triggers — the button and the
+    /// tray, say — cannot both start a scan.
+    pub fn begin_scan(&self) -> bool {
+        let mut scanning = guard(&self.is_scanning);
+        if *scanning {
+            return false;
         }
+        *scanning = true;
+        true
+    }
+
+    pub fn finish_scan(&self) {
+        *guard(&self.is_scanning) = false;
+    }
+
+    /// Cancellation flag for the running clean batch.
+    pub fn cancel_flag(&self) -> Arc<AtomicBool> {
+        Arc::clone(&self.cancel_clean)
+    }
+
+    pub fn request_cancel(&self) {
+        self.cancel_clean.store(true, Ordering::Relaxed);
+    }
+
+    pub fn reset_cancel(&self) {
+        self.cancel_clean.store(false, Ordering::Relaxed);
+    }
+
+    /// Startup problems, drained on read: they describe the launch that just
+    /// happened, and repeating them on every poll would be noise.
+    pub fn take_startup_warnings(&self) -> Vec<String> {
+        std::mem::take(&mut *guard(&self.startup_warnings))
     }
 
     pub fn create_executor(&self) -> ActionExecutor {
-        let config = self.config.lock().unwrap();
-        let safety = SafetyChecker::new(config.blocked_paths.clone());
-        ActionExecutor::new(safety)
+        let blocked = self.config().blocked_paths.clone();
+        ActionExecutor::new(SafetyChecker::new(blocked))
+    }
+
+    /// Write the current config to disk.
+    pub fn persist_config(&self) -> Result<(), String> {
+        let config = self.config().clone();
+        config
+            .save(&self.config_path)
+            .map_err(|err| format!("Could not save settings: {err}"))
+    }
+
+    /// Write the current history to disk.
+    pub fn persist_history(&self) -> Result<(), String> {
+        let history = self.history().clone();
+        history
+            .save(&self.history_path)
+            .map_err(|err| format!("Could not save clean history: {err}"))
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn loads_defaults_in_an_empty_directory() {
+        let tmp = tempfile::tempdir().unwrap();
+        let state = AppState::load_from(tmp.path().to_path_buf());
+
+        assert!(state.take_startup_warnings().is_empty());
+        assert_eq!(state.config().staleness_threshold_days, 30);
+        assert!(state.history().runs.is_empty());
+    }
+
+    #[test]
+    fn persists_and_reloads_config() {
+        let tmp = tempfile::tempdir().unwrap();
+        let dir = tmp.path().to_path_buf();
+
+        let state = AppState::load_from(dir.clone());
+        state.config().staleness_threshold_days = 120;
+        state.persist_config().unwrap();
+
+        let reloaded = AppState::load_from(dir);
+        assert_eq!(reloaded.config().staleness_threshold_days, 120);
+    }
+
+    #[test]
+    fn corrupt_config_warns_instead_of_failing_to_start() {
+        let tmp = tempfile::tempdir().unwrap();
+        std::fs::write(tmp.path().join(AppConfig::FILE_NAME), "{ broken").unwrap();
+
+        let state = AppState::load_from(tmp.path().to_path_buf());
+
+        let warnings = state.take_startup_warnings();
+        assert_eq!(warnings.len(), 1, "expected one warning: {warnings:?}");
+        assert!(warnings[0].contains("Settings reset to defaults"));
+        assert_eq!(state.config().staleness_threshold_days, 30);
+    }
+
+    #[test]
+    fn startup_warnings_are_reported_once() {
+        let tmp = tempfile::tempdir().unwrap();
+        std::fs::write(tmp.path().join(AppConfig::FILE_NAME), "nonsense").unwrap();
+
+        let state = AppState::load_from(tmp.path().to_path_buf());
+        assert_eq!(state.take_startup_warnings().len(), 1);
+        assert!(
+            state.take_startup_warnings().is_empty(),
+            "warnings must drain so they are not repeated on every poll"
+        );
+    }
+
+    #[test]
+    fn only_one_scan_can_claim_the_slot() {
+        let tmp = tempfile::tempdir().unwrap();
+        let state = AppState::load_from(tmp.path().to_path_buf());
+
+        assert!(state.begin_scan(), "first caller should win");
+        assert!(!state.begin_scan(), "second caller must be refused");
+
+        state.finish_scan();
+        assert!(
+            state.begin_scan(),
+            "slot should be reusable after finishing"
+        );
+    }
+
+    #[test]
+    fn a_poisoned_lock_does_not_take_the_app_down() {
+        // One panicking thread must not make every later command panic too.
+        let tmp = tempfile::tempdir().unwrap();
+        let state = Arc::new(AppState::load_from(tmp.path().to_path_buf()));
+
+        let poisoner = Arc::clone(&state);
+        let _ = std::thread::spawn(move || {
+            let _held = poisoner.config();
+            panic!("poison the config lock");
+        })
+        .join();
+
+        // The lock is now poisoned; the accessor must still hand back the data.
+        assert_eq!(state.config().staleness_threshold_days, 30);
+        state.config().staleness_threshold_days = 45;
+        assert_eq!(state.config().staleness_threshold_days, 45);
     }
 }
diff --git a/crates/deepclean-app/src/tray.rs b/crates/deepclean-app/src/tray.rs
index f8976ab..b6ab2d8 100644
--- a/crates/deepclean-app/src/tray.rs
+++ b/crates/deepclean-app/src/tray.rs
@@ -14,12 +14,19 @@ pub fn setup_tray(app: &App) -> Result<(), Box<dyn std::error::Error>> {
         .items(&[&scan_now, &open_dashboard, &separator, &quit])
         .build()?;
 
-    TrayIconBuilder::new()
-        .icon(
+    // macOS menu-bar icons must be template images: pure black plus alpha, so
+    // the system can tint them for a light or dark menu bar and invert them
+    // when clicked. The full-colour app icon does neither.
+    let icon = tauri::image::Image::from_bytes(include_bytes!("../icons/trayTemplate@2x.png"))
+        .unwrap_or_else(|_| {
             app.default_window_icon()
                 .cloned()
-                .unwrap_or_else(|| tauri::image::Image::new(&[], 0, 0)),
-        )
+                .unwrap_or_else(|| tauri::image::Image::new(&[], 0, 0))
+        });
+
+    TrayIconBuilder::new()
+        .icon(icon)
+        .icon_as_template(true)
         .menu(&menu)
         .tooltip("Void")
         .on_menu_event(move |app, event| match event.id().as_ref() {
diff --git a/crates/deepclean-app/tauri.conf.json b/crates/deepclean-app/tauri.conf.json
index d566832..87c4e68 100644
--- a/crates/deepclean-app/tauri.conf.json
+++ b/crates/deepclean-app/tauri.conf.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/tauri-apps/tauri/dev/crates/tauri-utils/schema.json",
   "productName": "Void",
-  "version": "0.1.0",
+  "version": "1.0.0",
   "identifier": "com.void.app",
   "build": {
     "frontendDist": "frontend"
@@ -14,7 +14,9 @@
         "width": 900,
         "height": 700,
         "resizable": true,
-        "fullscreen": false
+        "fullscreen": false,
+        "minWidth": 720,
+        "minHeight": 560
       }
     ],
     "security": {
diff --git a/crates/deepclean-core/Cargo.toml b/crates/deepclean-core/Cargo.toml
index 8221e14..13a18ad 100644
--- a/crates/deepclean-core/Cargo.toml
+++ b/crates/deepclean-core/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "deepclean-core"
-version = "0.1.0"
+version = "1.0.0"
 edition = "2021"
 rust-version.workspace = true
 
diff --git a/crates/deepclean-core/src/action/mod.rs b/crates/deepclean-core/src/action/mod.rs
index 4427f6a..e58548b 100644
--- a/crates/deepclean-core/src/action/mod.rs
+++ b/crates/deepclean-core/src/action/mod.rs
@@ -1,4 +1,6 @@
 use std::path::Path;
+use std::sync::atomic::{AtomicBool, Ordering};
+use std::sync::Arc;
 
 use tokio::sync::mpsc;
 use tracing::{error, info, warn};
@@ -20,20 +22,48 @@ impl ActionExecutor {
 
     /// Execute a batch of (item, action) pairs, returning a channel of events.
     ///
-    /// Spawns a background tokio task that processes each pair sequentially,
-    /// checking safety before execution and sending progress events through the channel.
+    /// Processes pairs sequentially, checking safety before each. A failure
+    /// does not stop the batch — the remaining items still run, and the
+    /// terminal [`ActionEvent::BatchComplete`] reports the tally.
     pub fn execute_batch(
         self,
         items: Vec<(CleanableItem, CleanAction)>,
+    ) -> mpsc::Receiver<ActionEvent> {
+        self.execute_batch_with_cancel(items, Arc::new(AtomicBool::new(false)))
+    }
+
+    /// As [`Self::execute_batch`], but stops before the next item when
+    /// `cancel` is set.
+    ///
+    /// Cancellation is checked between items, never mid-action: interrupting a
+    /// half-finished `rm -rf` would leave the user worse off than letting it
+    /// finish.
+    pub fn execute_batch_with_cancel(
+        self,
+        items: Vec<(CleanableItem, CleanAction)>,
+        cancel: Arc<AtomicBool>,
     ) -> mpsc::Receiver<ActionEvent> {
         let (tx, rx) = mpsc::channel(64);
 
         tokio::spawn(async move {
+            let total = items.len();
+            let mut succeeded = 0usize;
+            let mut failed = 0usize;
+            let mut bytes_freed = 0u64;
+            let mut estimated = false;
+            let mut cancelled = false;
+
             for (item, action) in items {
+                if cancel.load(Ordering::Relaxed) {
+                    cancelled = true;
+                    info!("Batch cancelled before item {}", item.path.display());
+                    break;
+                }
+
                 let item_id = item.id;
                 let action_id = action.id;
+                let estimate = action.estimated_savings_bytes;
 
-                // Send Started event
                 let _ = tx
                     .send(ActionEvent::Started {
                         item_id,
@@ -50,6 +80,7 @@ impl ActionExecutor {
                         "Action blocked by safety checker: {}",
                         err
                     );
+                    failed += 1;
                     let _ = tx
                         .send(ActionEvent::Failed {
                             item_id,
@@ -60,20 +91,31 @@ impl ActionExecutor {
                     continue;
                 }
 
-                // Execute the action
                 match self.execute_action(&action.method).await {
-                    Ok(bytes_freed) => {
+                    Ok(measured) => {
                         info!(
                             item_id = %item_id,
                             action_id = %action_id,
-                            bytes_freed,
+                            bytes_freed = measured,
                             "Action completed successfully"
                         );
+                        succeeded += 1;
+                        // Commands and Docker prunes cannot observe what they
+                        // removed, so their estimate is the only figure there is.
+                        if measured > 0 {
+                            bytes_freed += measured;
+                        } else {
+                            bytes_freed += estimate;
+                            if estimate > 0 {
+                                estimated = true;
+                            }
+                        }
                         let _ = tx
                             .send(ActionEvent::Completed {
                                 item_id,
                                 action_id,
-                                bytes_freed,
+                                bytes_freed: measured,
+                                estimated_bytes: estimate,
                             })
                             .await;
                     }
@@ -84,6 +126,7 @@ impl ActionExecutor {
                             "Action failed: {}",
                             err
                         );
+                        failed += 1;
                         let _ = tx
                             .send(ActionEvent::Failed {
                                 item_id,
@@ -94,6 +137,17 @@ impl ActionExecutor {
                     }
                 }
             }
+
+            let _ = tx
+                .send(ActionEvent::BatchComplete {
+                    total,
+                    succeeded,
+                    failed,
+                    bytes_freed,
+                    estimated,
+                    cancelled,
+                })
+                .await;
         });
 
         rx
@@ -112,12 +166,22 @@ impl ActionExecutor {
                     return Err(ActionError::PathBlocked(path.display().to_string()));
                 }
             }
-            ActionMethod::Command { working_dir, .. } => {
+            ActionMethod::Command {
+                program,
+                args,
+                working_dir,
+            } => {
                 if let Some(dir) = working_dir {
                     if !self.safety.is_workdir_allowed(dir) {
                         return Err(ActionError::PathBlocked(dir.display().to_string()));
                     }
                 }
+                // The command's arguments are where the deleting actually
+                // happens; checking only the working directory left `rm -rf`
+                // and the `osascript` trash one-liner ungated.
+                self.safety
+                    .is_command_allowed(program, args, working_dir.as_deref())
+                    .map_err(ActionError::PathBlocked)?;
             }
             ActionMethod::DockerPrune { .. } => {
                 // Docker prune doesn't operate on filesystem paths directly
@@ -224,6 +288,28 @@ mod tests {
         }
     }
 
+    /// Drain the terminal batch event and assert its tally.
+    async fn expect_batch_complete(
+        rx: &mut mpsc::Receiver<ActionEvent>,
+        succeeded: usize,
+        failed: usize,
+        bytes: u64,
+    ) {
+        match rx.recv().await.expect("expected a BatchComplete event") {
+            ActionEvent::BatchComplete {
+                succeeded: s,
+                failed: f,
+                bytes_freed,
+                ..
+            } => {
+                assert_eq!(s, succeeded, "succeeded count");
+                assert_eq!(f, failed, "failed count");
+                assert_eq!(bytes_freed, bytes, "bytes freed");
+            }
+            other => panic!("Expected BatchComplete, got: {other:?}"),
+        }
+    }
+
     /// Helper to build a CleanAction with a given method.
     fn test_action(method: ActionMethod) -> CleanAction {
         CleanAction {
@@ -263,7 +349,17 @@ mod tests {
             other => panic!("Expected Failed event, got: {other:?}"),
         }
 
-        // Channel should be closed
+        // ...then the terminal batch event, then close.
+        let event = rx.recv().await.unwrap();
+        assert!(matches!(
+            event,
+            ActionEvent::BatchComplete {
+                total: 1,
+                succeeded: 0,
+                failed: 1,
+                ..
+            }
+        ));
         assert!(rx.recv().await.is_none());
     }
 
@@ -299,6 +395,7 @@ mod tests {
         // Directory should be gone
         assert!(!target.exists());
 
+        expect_batch_complete(&mut rx, 1, 0, 1024 + 2048).await;
         assert!(rx.recv().await.is_none());
     }
 
@@ -330,6 +427,7 @@ mod tests {
         // File should be gone
         assert!(!file.exists());
 
+        expect_batch_complete(&mut rx, 1, 0, 4096).await;
         assert!(rx.recv().await.is_none());
     }
 
@@ -465,4 +563,319 @@ mod tests {
         assert!(!file1.exists());
         assert!(!file2.exists());
     }
+
+    #[tokio::test]
+    async fn command_success_reports_estimate_since_nothing_is_measurable() {
+        // `cargo clean` frees real space but returns zero bytes. The estimate
+        // is the only figure available, and the batch must say so.
+        let tmp = tempfile::tempdir().unwrap();
+
+        let executor = ActionExecutor::new(SafetyChecker::new(vec![]));
+        let item = test_item(tmp.path().to_path_buf());
+        let action = CleanAction {
+            estimated_savings_bytes: 3_800_000_000,
+            ..test_action(ActionMethod::Command {
+                program: "true".into(),
+                args: vec![],
+                working_dir: Some(tmp.path().to_path_buf()),
+            })
+        };
+
+        let mut rx = executor.execute_batch(vec![(item, action)]);
+
+        assert!(matches!(
+            rx.recv().await.unwrap(),
+            ActionEvent::Started { .. }
+        ));
+        match rx.recv().await.unwrap() {
+            ActionEvent::Completed {
+                bytes_freed,
+                estimated_bytes,
+                ..
+            } => {
+                assert_eq!(bytes_freed, 0, "a command cannot measure what it removed");
+                assert_eq!(estimated_bytes, 3_800_000_000);
+            }
+            other => panic!("Expected Completed, got: {other:?}"),
+        }
+        match rx.recv().await.unwrap() {
+            ActionEvent::BatchComplete {
+                bytes_freed,
+                estimated,
+                ..
+            } => {
+                assert_eq!(bytes_freed, 3_800_000_000);
+                assert!(estimated, "total must be flagged as an estimate");
+            }
+            other => panic!("Expected BatchComplete, got: {other:?}"),
+        }
+    }
+
+    #[tokio::test]
+    async fn measured_bytes_are_not_flagged_as_estimated() {
+        let tmp = tempfile::tempdir().unwrap();
+        let file = tmp.path().join("f.dat");
+        std::fs::write(&file, vec![0u8; 512]).unwrap();
+
+        let executor = ActionExecutor::new(SafetyChecker::new(vec![]));
+        let item = test_item(file.clone());
+        let action = CleanAction {
+            estimated_savings_bytes: 999_999,
+            ..test_action(ActionMethod::RemoveFile { path: file })
+        };
+
+        let mut rx = executor.execute_batch(vec![(item, action)]);
+        let _ = rx.recv().await;
+        let _ = rx.recv().await;
+        match rx.recv().await.unwrap() {
+            ActionEvent::BatchComplete {
+                bytes_freed,
+                estimated,
+                ..
+            } => {
+                assert_eq!(bytes_freed, 512, "measurement beats estimate");
+                assert!(!estimated);
+            }
+            other => panic!("Expected BatchComplete, got: {other:?}"),
+        }
+    }
+
+    #[tokio::test]
+    async fn cancelling_stops_before_the_next_item() {
+        let tmp = tempfile::tempdir().unwrap();
+        let mut pairs = vec![];
+        for i in 0..5 {
+            let f = tmp.path().join(format!("f{i}.dat"));
+            std::fs::write(&f, vec![0u8; 10]).unwrap();
+            pairs.push((
+                test_item(f.clone()),
+                test_action(ActionMethod::RemoveFile { path: f }),
+            ));
+        }
+
+        // Already cancelled: nothing should run at all.
+        let cancel = Arc::new(AtomicBool::new(true));
+        let executor = ActionExecutor::new(SafetyChecker::new(vec![]));
+        let mut rx = executor.execute_batch_with_cancel(pairs, cancel);
+
+        match rx.recv().await.unwrap() {
+            ActionEvent::BatchComplete {
+                total,
+                succeeded,
+                failed,
+                cancelled,
+                ..
+            } => {
+                assert_eq!(total, 5);
+                assert_eq!(succeeded, 0);
+                assert_eq!(failed, 0);
+                assert!(cancelled, "batch must report that it was cancelled");
+            }
+            other => panic!("Expected BatchComplete, got: {other:?}"),
+        }
+        assert!(rx.recv().await.is_none());
+    }
+
+    #[tokio::test]
+    async fn failure_does_not_stop_the_rest_of_the_batch() {
+        let tmp = tempfile::tempdir().unwrap();
+        let good = tmp.path().join("good.dat");
+        std::fs::write(&good, vec![0u8; 64]).unwrap();
+        let missing = tmp.path().join("does-not-exist.dat");
+
+        let executor = ActionExecutor::new(SafetyChecker::new(vec![]));
+        let pairs = vec![
+            (
+                test_item(missing.clone()),
+                test_action(ActionMethod::RemoveFile { path: missing }),
+            ),
+            (
+                test_item(good.clone()),
+                test_action(ActionMethod::RemoveFile { path: good.clone() }),
+            ),
+        ];
+
+        let mut rx = executor.execute_batch(pairs);
+        let mut last = None;
+        while let Some(event) = rx.recv().await {
+            last = Some(event);
+        }
+
+        match last.unwrap() {
+            ActionEvent::BatchComplete {
+                total,
+                succeeded,
+                failed,
+                ..
+            } => {
+                assert_eq!(total, 2);
+                assert_eq!(succeeded, 1, "the good item must still run");
+                assert_eq!(failed, 1);
+            }
+            other => panic!("Expected BatchComplete last, got: {other:?}"),
+        }
+        assert!(!good.exists(), "the second item should have been removed");
+    }
+
+    #[tokio::test]
+    async fn blocks_a_command_targeting_a_protected_path() {
+        // `rm -rf ~/.ssh` previously bypassed the safety checker entirely,
+        // because only the working directory was ever inspected.
+        let home = dirs::home_dir().unwrap();
+        let tmp = tempfile::tempdir().unwrap();
+
+        let executor = ActionExecutor::new(SafetyChecker::new(vec![]));
+        let item = test_item(tmp.path().to_path_buf());
+        let action = test_action(ActionMethod::Command {
+            program: "rm".into(),
+            args: vec![
+                "-rf".into(),
+                home.join(".ssh").to_string_lossy().to_string(),
+            ],
+            working_dir: Some(tmp.path().to_path_buf()),
+        });
+
+        let mut rx = executor.execute_batch(vec![(item, action)]);
+        assert!(matches!(
+            rx.recv().await.unwrap(),
+            ActionEvent::Started { .. }
+        ));
+        match rx.recv().await.unwrap() {
+            ActionEvent::Failed { error, .. } => {
+                assert!(
+                    error.contains("protected path"),
+                    "Expected a protected-path block, got: {error}"
+                );
+            }
+            other => panic!("Expected Failed, got: {other:?}"),
+        }
+    }
+
+    #[tokio::test]
+    async fn allows_a_command_targeting_a_file_inside_downloads() {
+        // Cleaning an entry inside ~/Downloads is the System scanner's whole
+        // purpose; only the directory itself is off limits.
+        let home = dirs::home_dir().unwrap();
+        let checker = SafetyChecker::new(vec![]);
+
+        assert!(
+            checker
+                .is_command_allowed(
+                    "rm",
+                    &[
+                        "-rf".into(),
+                        home.join("Downloads/xcode_14.3.xip")
+                            .to_string_lossy()
+                            .to_string(),
+                    ],
+                    None
+                )
+                .is_ok(),
+            "a file inside Downloads must be cleanable"
+        );
+
+        assert!(
+            checker
+                .is_command_allowed(
+                    "rm",
+                    &[
+                        "-rf".into(),
+                        home.join("Downloads").to_string_lossy().to_string(),
+                    ],
+                    None
+                )
+                .is_err(),
+            "the Downloads directory itself must never be removed"
+        );
+    }
+
+    #[tokio::test]
+    async fn blocks_a_path_embedded_in_a_quoted_script_argument() {
+        // The trash action passes its path inside an osascript string.
+        let home = dirs::home_dir().unwrap();
+        let checker = SafetyChecker::new(vec![]);
+
+        let arg = format!(
+            "tell application \"Finder\" to delete POSIX file \"{}\"",
+            home.join(".gnupg").display()
+        );
+        assert!(
+            checker
+                .is_command_allowed("osascript", &["-e".into(), arg], None)
+                .is_err(),
+            "a protected path inside a script string must still be caught"
+        );
+    }
+
+    #[tokio::test]
+    async fn documents_desktop_and_pictures_are_blocked_all_the_way_down() {
+        // Only Downloads has a scanner that cleans its contents. The other
+        // protected containers must be refused for the whole subtree, not just
+        // at the folder itself.
+        let home = dirs::home_dir().unwrap();
+        let checker = SafetyChecker::new(vec![]);
+
+        for folder in ["Documents", "Desktop", "Pictures"] {
+            let inside = home.join(folder).join("something.zip");
+            assert!(
+                checker
+                    .is_command_allowed(
+                        "rm",
+                        &["-rf".into(), inside.to_string_lossy().to_string()],
+                        None
+                    )
+                    .is_err(),
+                "a command reaching into ~/{folder} must be refused"
+            );
+        }
+    }
+
+    #[tokio::test]
+    async fn a_relative_argument_is_resolved_against_the_working_directory() {
+        // `rm -rf Documents` run from home is the same act as the absolute
+        // form, and must be refused the same way.
+        let home = dirs::home_dir().unwrap();
+        let checker = SafetyChecker::new(vec![]);
+
+        if home.join("Documents").exists() {
+            assert!(
+                checker
+                    .is_command_allowed("rm", &["-rf".into(), "Documents".into()], Some(&home))
+                    .is_err(),
+                "a relative path into a protected folder must be refused"
+            );
+        }
+
+        // A subcommand that happens to look like a word is not a path.
+        assert!(
+            checker
+                .is_command_allowed("cargo", &["clean".into()], Some(&home))
+                .is_ok(),
+            "ordinary subcommands must not be blocked by the relative-path check"
+        );
+    }
+
+    #[tokio::test]
+    async fn ordinary_command_arguments_are_not_mistaken_for_paths() {
+        let checker = SafetyChecker::new(vec![]);
+        for (program, args) in [
+            ("cargo", vec!["clean".to_string()]),
+            ("go", vec!["clean".into(), "-modcache".into()]),
+            (
+                "npm",
+                vec!["cache".into(), "clean".into(), "--force".into()],
+            ),
+            ("brew", vec!["cleanup".into()]),
+            ("docker", vec!["system".into(), "prune".into(), "-f".into()]),
+            (
+                "xcrun",
+                vec!["simctl".into(), "delete".into(), "unavailable".into()],
+            ),
+        ] {
+            assert!(
+                checker.is_command_allowed(program, &args, None).is_ok(),
+                "{program} {args:?} should not be blocked"
+            );
+        }
+    }
 }
diff --git a/crates/deepclean-core/src/config.rs b/crates/deepclean-core/src/config.rs
index 976266a..ccda2b0 100644
--- a/crates/deepclean-core/src/config.rs
+++ b/crates/deepclean-core/src/config.rs
@@ -1,11 +1,73 @@
-use std::path::PathBuf;
+use std::path::{Path, PathBuf};
 
 use serde::{Deserialize, Serialize};
 
 use crate::model::Ecosystem;
 
+/// How the results list is grouped.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Default)]
+#[serde(rename_all = "snake_case")]
+pub enum Grouping {
+    #[default]
+    Ecosystem,
+    Project,
+    Risk,
+}
+
+/// Row density in the results list.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Default)]
+#[serde(rename_all = "snake_case")]
+pub enum Density {
+    #[default]
+    Comfortable,
+    Compact,
+}
+
+/// Which color theme to render.
+#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, Default)]
+#[serde(rename_all = "snake_case")]
+pub enum Theme {
+    #[default]
+    System,
+    Light,
+    Dark,
+}
+
+/// Presentation preferences. These never affect what a scan finds.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(default)]
+pub struct UiPrefs {
+    pub theme: Theme,
+    pub density: Density,
+    pub grouping: Grouping,
+    /// Show the pre-clean review dialog. Turning this off skips the risk review.
+    pub confirm_before_cleaning: bool,
+    /// When an item offers both a Trash action and a permanent one, pick the Trash action.
+    pub prefer_trash: bool,
+    pub launch_at_login: bool,
+    pub show_menu_bar_icon: bool,
+}
+
+impl Default for UiPrefs {
+    fn default() -> Self {
+        Self {
+            theme: Theme::default(),
+            density: Density::default(),
+            grouping: Grouping::default(),
+            confirm_before_cleaning: true,
+            prefer_trash: true,
+            launch_at_login: false,
+            show_menu_bar_icon: true,
+        }
+    }
+}
+
 /// Application configuration.
+///
+/// `#[serde(default)]` is load-bearing: it lets a config written by an older
+/// build gain new fields without failing to parse.
 #[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(default)]
 pub struct AppConfig {
     /// Root directories to scan for projects.
     pub scan_roots: Vec<PathBuf>,
@@ -13,7 +75,10 @@ pub struct AppConfig {
     pub blocked_paths: Vec<PathBuf>,
     /// Which ecosystems to scan.
     pub enabled_ecosystems: Vec<Ecosystem>,
-    /// Days since last modification before an artifact is considered stale.
+    /// Days since last modification before an artifact is *displayed* as stale.
+    ///
+    /// This is a presentation threshold only — it does not change what a scan
+    /// walks or what it returns.
     pub staleness_threshold_days: u64,
     /// Max CPU usage percentage for background scanning.
     pub cpu_threshold_percent: u8,
@@ -21,6 +86,8 @@ pub struct AppConfig {
     pub walker_threads: usize,
     /// Max concurrent analysis tasks.
     pub max_concurrent_analyses: usize,
+    /// Presentation preferences.
+    pub ui: UiPrefs,
 }
 
 impl Default for AppConfig {
@@ -31,7 +98,7 @@ impl Default for AppConfig {
             .unwrap_or(4);
 
         Self {
-            scan_roots: vec![home.clone()],
+            scan_roots: vec![home],
             blocked_paths: Vec::new(),
             enabled_ecosystems: vec![
                 Ecosystem::Rust,
@@ -50,6 +117,231 @@ impl Default for AppConfig {
             cpu_threshold_percent: 70,
             walker_threads: (cpus / 2).max(1),
             max_concurrent_analyses: 8,
+            ui: UiPrefs::default(),
+        }
+    }
+}
+
+impl AppConfig {
+    /// Read config from `path`.
+    ///
+    /// A missing or unreadable file yields defaults. So does a corrupt one —
+    /// failing to launch because a JSON file got truncated would be a worse
+    /// outcome than losing preferences, so the error is returned alongside the
+    /// defaults for the caller to log rather than propagated.
+    pub fn load(path: &Path) -> (Self, Option<String>) {
+        let raw = match std::fs::read_to_string(path) {
+            Ok(raw) => raw,
+            Err(err) if err.kind() == std::io::ErrorKind::NotFound => {
+                return (Self::default(), None)
+            }
+            Err(err) => {
+                return (
+                    Self::default(),
+                    Some(format!("could not read {}: {err}", path.display())),
+                )
+            }
+        };
+
+        match serde_json::from_str::<Self>(&raw) {
+            Ok(config) => (config.sanitized(), None),
+            Err(err) => (
+                Self::default(),
+                Some(format!("could not parse {}: {err}", path.display())),
+            ),
+        }
+    }
+
+    /// Write config to `path`, creating parent directories as needed.
+    ///
+    /// Writes to a sibling temp file and renames, so a crash mid-write leaves
+    /// the previous config intact rather than a half-written one.
+    pub fn save(&self, path: &Path) -> std::io::Result<()> {
+        if let Some(parent) = path.parent() {
+            std::fs::create_dir_all(parent)?;
+        }
+
+        let json = serde_json::to_string_pretty(self)
+            .map_err(|err| std::io::Error::new(std::io::ErrorKind::InvalidData, err))?;
+
+        let tmp = path.with_extension("json.tmp");
+        std::fs::write(&tmp, json)?;
+        std::fs::rename(&tmp, path)?;
+        Ok(())
+    }
+
+    /// Clamp values that would break a scan rather than merely tune it.
+    ///
+    /// The config file is plain JSON that users are invited to edit, so these
+    /// are enforced on the way in rather than trusted from the UI. Zero
+    /// concurrency in particular is not "slow" — it is a permanent deadlock on
+    /// an empty semaphore.
+    #[must_use]
+    pub fn sanitized(mut self) -> Self {
+        self.max_concurrent_analyses = self.max_concurrent_analyses.max(1);
+        self.walker_threads = self.walker_threads.max(1);
+        self.staleness_threshold_days = self.staleness_threshold_days.max(1);
+        self.cpu_threshold_percent = self.cpu_threshold_percent.clamp(1, 100);
+        self
+    }
+
+    /// Config file name within the app config directory.
+    pub const FILE_NAME: &'static str = "config.json";
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn missing_file_yields_defaults_without_error() {
+        let tmp = tempfile::tempdir().unwrap();
+        let (config, err) = AppConfig::load(&tmp.path().join("nope.json"));
+        assert!(err.is_none());
+        assert_eq!(config.staleness_threshold_days, 30);
+    }
+
+    #[test]
+    fn round_trips_through_disk() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+
+        let config = AppConfig {
+            staleness_threshold_days: 90,
+            blocked_paths: vec![PathBuf::from("/keep/this")],
+            ui: UiPrefs {
+                density: Density::Compact,
+                ..UiPrefs::default()
+            },
+            ..AppConfig::default()
+        };
+        config.save(&path).unwrap();
+
+        let (loaded, err) = AppConfig::load(&path);
+        assert!(err.is_none());
+        assert_eq!(loaded.staleness_threshold_days, 90);
+        assert_eq!(loaded.blocked_paths, vec![PathBuf::from("/keep/this")]);
+        assert_eq!(loaded.ui.density, Density::Compact);
+    }
+
+    #[test]
+    fn save_creates_missing_parent_directories() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("nested/deeper/config.json");
+        AppConfig::default().save(&path).unwrap();
+        assert!(path.exists());
+    }
+
+    #[test]
+    fn partial_config_fills_missing_fields_from_defaults() {
+        // A config written before a field existed must still load.
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+        std::fs::write(&path, r#"{"staleness_threshold_days": 7}"#).unwrap();
+
+        let (config, err) = AppConfig::load(&path);
+        assert!(err.is_none(), "partial config should parse: {err:?}");
+        assert_eq!(config.staleness_threshold_days, 7);
+        assert_eq!(config.max_concurrent_analyses, 8);
+        assert!(config.ui.confirm_before_cleaning);
+        assert_eq!(config.enabled_ecosystems.len(), 11);
+    }
+
+    #[test]
+    fn corrupt_config_falls_back_to_defaults_and_reports() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+        std::fs::write(&path, "{ this is not json").unwrap();
+
+        let (config, err) = AppConfig::load(&path);
+        assert!(err.is_some(), "corrupt config should report a problem");
+        assert_eq!(config.staleness_threshold_days, 30);
+    }
+
+    #[test]
+    fn save_leaves_no_temp_file_behind() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+        AppConfig::default().save(&path).unwrap();
+
+        let leftovers: Vec<_> = std::fs::read_dir(tmp.path())
+            .unwrap()
+            .flatten()
+            .map(|e| e.file_name().to_string_lossy().into_owned())
+            .filter(|n| n.ends_with(".tmp"))
+            .collect();
+        assert!(leftovers.is_empty(), "found temp files: {leftovers:?}");
+    }
+
+    #[test]
+    fn overwriting_preserves_previous_on_parse_of_new() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+
+        AppConfig {
+            staleness_threshold_days: 10,
+            ..AppConfig::default()
+        }
+        .save(&path)
+        .unwrap();
+
+        AppConfig {
+            staleness_threshold_days: 20,
+            ..AppConfig::default()
+        }
+        .save(&path)
+        .unwrap();
+
+        let (loaded, _) = AppConfig::load(&path);
+        assert_eq!(loaded.staleness_threshold_days, 20);
+    }
+
+    #[test]
+    fn sanitizing_rejects_values_that_would_wedge_a_scan() {
+        // Zero permits makes every acquire pend forever, which would hang the
+        // scan rather than slow it.
+        let config = AppConfig {
+            max_concurrent_analyses: 0,
+            walker_threads: 0,
+            staleness_threshold_days: 0,
+            cpu_threshold_percent: 0,
+            ..AppConfig::default()
+        }
+        .sanitized();
+
+        assert_eq!(config.max_concurrent_analyses, 1);
+        assert_eq!(config.walker_threads, 1);
+        assert_eq!(config.staleness_threshold_days, 1);
+        assert_eq!(config.cpu_threshold_percent, 1);
+    }
+
+    #[test]
+    fn a_hand_edited_zero_is_clamped_on_load() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("config.json");
+        std::fs::write(&path, r#"{"max_concurrent_analyses": 0}"#).unwrap();
+
+        let (config, err) = AppConfig::load(&path);
+        assert!(err.is_none());
+        assert_eq!(
+            config.max_concurrent_analyses, 1,
+            "a config edited by hand must not be able to deadlock the scanner"
+        );
+    }
+
+    #[test]
+    fn sanitizing_leaves_sensible_values_alone() {
+        let config = AppConfig {
+            max_concurrent_analyses: 8,
+            walker_threads: 4,
+            staleness_threshold_days: 30,
+            cpu_threshold_percent: 70,
+            ..AppConfig::default()
         }
+        .sanitized();
+        assert_eq!(config.max_concurrent_analyses, 8);
+        assert_eq!(config.walker_threads, 4);
+        assert_eq!(config.staleness_threshold_days, 30);
+        assert_eq!(config.cpu_threshold_percent, 70);
     }
 }
diff --git a/crates/deepclean-core/src/disk.rs b/crates/deepclean-core/src/disk.rs
new file mode 100644
index 0000000..6059064
--- /dev/null
+++ b/crates/deepclean-core/src/disk.rs
@@ -0,0 +1,77 @@
+use std::path::Path;
+
+use serde::{Deserialize, Serialize};
+use sysinfo::Disks;
+
+/// Capacity of the volume holding a given path.
+///
+/// The results screen shows reclaimable space as a share of the disk, which is
+/// a far better motivator than a raw byte count — but only if the disk is the
+/// one the artifacts actually live on.
+#[derive(Debug, Clone, Copy, Default, Serialize, Deserialize)]
+pub struct DiskUsage {
+    pub total_bytes: u64,
+    pub available_bytes: u64,
+    pub used_bytes: u64,
+}
+
+/// Report usage for the volume containing `path`.
+///
+/// Picks the mount point with the longest match, so `/Volumes/Work/x` reports
+/// the external volume rather than `/`. Returns `None` when no mount point
+/// matches, which the UI renders as an absent meter rather than zeros.
+pub fn usage_for_path(path: &Path) -> Option<DiskUsage> {
+    let disks = Disks::new_with_refreshed_list();
+
+    let best = disks
+        .list()
+        .iter()
+        .filter(|disk| path.starts_with(disk.mount_point()))
+        .max_by_key(|disk| disk.mount_point().as_os_str().len())?;
+
+    let total = best.total_space();
+    let available = best.available_space();
+
+    Some(DiskUsage {
+        total_bytes: total,
+        available_bytes: available,
+        used_bytes: total.saturating_sub(available),
+    })
+}
+
+/// Report usage for the volume holding the user's home directory.
+pub fn usage_for_home() -> Option<DiskUsage> {
+    let home = dirs::home_dir()?;
+    usage_for_path(&home)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn home_volume_reports_plausible_numbers() {
+        let Some(usage) = usage_for_home() else {
+            // A sandbox with no enumerable mounts is a legitimate outcome.
+            return;
+        };
+        assert!(usage.total_bytes > 0, "total capacity should be positive");
+        assert!(
+            usage.available_bytes <= usage.total_bytes,
+            "available ({}) must not exceed total ({})",
+            usage.available_bytes,
+            usage.total_bytes
+        );
+        assert_eq!(
+            usage.used_bytes,
+            usage.total_bytes - usage.available_bytes,
+            "used must be the difference"
+        );
+    }
+
+    #[test]
+    fn unmatched_path_reports_nothing() {
+        // A path under no mount point must not silently report a zeroed disk.
+        assert!(usage_for_path(Path::new("relative/not/absolute")).is_none());
+    }
+}
diff --git a/crates/deepclean-core/src/history.rs b/crates/deepclean-core/src/history.rs
new file mode 100644
index 0000000..e3ce51e
--- /dev/null
+++ b/crates/deepclean-core/src/history.rs
@@ -0,0 +1,274 @@
+use std::path::{Path, PathBuf};
+
+use chrono::{DateTime, Utc};
+use serde::{Deserialize, Serialize};
+use uuid::Uuid;
+
+use crate::model::Ecosystem;
+
+/// How a single item in a clean run turned out.
+#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
+#[serde(tag = "outcome", rename_all = "snake_case")]
+pub enum RunOutcome {
+    Succeeded,
+    Failed { error: String },
+}
+
+/// One item acted on during a clean run.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct RunItem {
+    pub path: PathBuf,
+    pub ecosystem: Ecosystem,
+    pub action_label: String,
+    /// The literal command, or a description of the filesystem operation.
+    pub method_summary: String,
+    /// Bytes the executor actually measured. Zero for commands and Docker prunes,
+    /// which cannot report what they removed.
+    pub bytes_freed: u64,
+    /// The action's own estimate, used when `bytes_freed` is unavailable.
+    pub estimated_bytes: u64,
+    #[serde(flatten)]
+    pub result: RunOutcome,
+}
+
+impl RunItem {
+    /// Best available figure for how much this item freed.
+    ///
+    /// Prefers the measured value; falls back to the estimate for methods that
+    /// return zero on success.
+    pub fn effective_bytes(&self) -> u64 {
+        match self.result {
+            RunOutcome::Succeeded => {
+                if self.bytes_freed > 0 {
+                    self.bytes_freed
+                } else {
+                    self.estimated_bytes
+                }
+            }
+            RunOutcome::Failed { .. } => 0,
+        }
+    }
+
+    /// Whether this item's contribution is an estimate rather than a measurement.
+    pub fn is_estimated(&self) -> bool {
+        matches!(self.result, RunOutcome::Succeeded)
+            && self.bytes_freed == 0
+            && self.estimated_bytes > 0
+    }
+}
+
+/// A completed clean run.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct CleanRun {
+    pub id: Uuid,
+    pub started_at: DateTime<Utc>,
+    pub duration_ms: u64,
+    pub items: Vec<RunItem>,
+}
+
+impl CleanRun {
+    pub fn total(&self) -> usize {
+        self.items.len()
+    }
+
+    pub fn succeeded(&self) -> usize {
+        self.items
+            .iter()
+            .filter(|i| matches!(i.result, RunOutcome::Succeeded))
+            .count()
+    }
+
+    pub fn failed(&self) -> usize {
+        self.items
+            .iter()
+            .filter(|i| matches!(i.result, RunOutcome::Failed { .. }))
+            .count()
+    }
+
+    /// Total freed, measured where possible and estimated otherwise.
+    pub fn bytes_freed(&self) -> u64 {
+        self.items.iter().map(RunItem::effective_bytes).sum()
+    }
+
+    /// True when any contributing item could only be estimated, which means the
+    /// run total must be presented as an estimate.
+    pub fn is_estimated(&self) -> bool {
+        self.items.iter().any(RunItem::is_estimated)
+    }
+}
+
+/// Persisted list of clean runs, newest first.
+#[derive(Debug, Clone, Default, Serialize, Deserialize)]
+#[serde(default)]
+pub struct History {
+    pub runs: Vec<CleanRun>,
+}
+
+impl History {
+    pub const FILE_NAME: &'static str = "history.json";
+
+    /// Keep the file bounded. At one run per day this is roughly two years.
+    pub const MAX_RUNS: usize = 500;
+
+    /// Read history from `path`. A missing file is an empty history, not an error.
+    pub fn load(path: &Path) -> (Self, Option<String>) {
+        let raw = match std::fs::read_to_string(path) {
+            Ok(raw) => raw,
+            Err(err) if err.kind() == std::io::ErrorKind::NotFound => {
+                return (Self::default(), None)
+            }
+            Err(err) => {
+                return (
+                    Self::default(),
+                    Some(format!("could not read {}: {err}", path.display())),
+                )
+            }
+        };
+
+        match serde_json::from_str(&raw) {
+            Ok(history) => (history, None),
+            Err(err) => (
+                Self::default(),
+                Some(format!("could not parse {}: {err}", path.display())),
+            ),
+        }
+    }
+
+    /// Write history to `path` via a temp file and rename.
+    pub fn save(&self, path: &Path) -> std::io::Result<()> {
+        if let Some(parent) = path.parent() {
+            std::fs::create_dir_all(parent)?;
+        }
+
+        let json = serde_json::to_string_pretty(self)
+            .map_err(|err| std::io::Error::new(std::io::ErrorKind::InvalidData, err))?;
+
+        let tmp = path.with_extension("json.tmp");
+        std::fs::write(&tmp, json)?;
+        std::fs::rename(&tmp, path)?;
+        Ok(())
+    }
+
+    /// Prepend a run and trim to `MAX_RUNS`.
+    pub fn push(&mut self, run: CleanRun) {
+        self.runs.insert(0, run);
+        self.runs.truncate(Self::MAX_RUNS);
+    }
+
+    /// Total reclaimed across every recorded run.
+    pub fn total_bytes(&self) -> u64 {
+        self.runs.iter().map(CleanRun::bytes_freed).sum()
+    }
+
+    /// Total reclaimed in runs started within the last `days`.
+    pub fn bytes_since(&self, days: i64) -> u64 {
+        let cutoff = Utc::now() - chrono::Duration::days(days);
+        self.runs
+            .iter()
+            .filter(|r| r.started_at >= cutoff)
+            .map(CleanRun::bytes_freed)
+            .sum()
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn item(bytes: u64, estimated: u64, ok: bool) -> RunItem {
+        RunItem {
+            path: PathBuf::from("/tmp/x"),
+            ecosystem: Ecosystem::Rust,
+            action_label: "Remove target/".into(),
+            method_summary: "Delete directory recursively".into(),
+            bytes_freed: bytes,
+            estimated_bytes: estimated,
+            result: if ok {
+                RunOutcome::Succeeded
+            } else {
+                RunOutcome::Failed {
+                    error: "boom".into(),
+                }
+            },
+        }
+    }
+
+    fn run(items: Vec<RunItem>) -> CleanRun {
+        CleanRun {
+            id: Uuid::new_v4(),
+            started_at: Utc::now(),
+            duration_ms: 1000,
+            items,
+        }
+    }
+
+    #[test]
+    fn missing_history_is_empty_not_an_error() {
+        let tmp = tempfile::tempdir().unwrap();
+        let (history, err) = History::load(&tmp.path().join("nope.json"));
+        assert!(err.is_none());
+        assert!(history.runs.is_empty());
+    }
+
+    #[test]
+    fn round_trips_through_disk() {
+        let tmp = tempfile::tempdir().unwrap();
+        let path = tmp.path().join("history.json");
+
+        let mut history = History::default();
+        history.push(run(vec![item(4096, 0, true)]));
+        history.save(&path).unwrap();
+
+        let (loaded, err) = History::load(&path);
+        assert!(err.is_none());
+        assert_eq!(loaded.runs.len(), 1);
+        assert_eq!(loaded.runs[0].bytes_freed(), 4096);
+    }
+
+    #[test]
+    fn falls_back_to_estimate_when_nothing_was_measured() {
+        // `cargo clean` and `docker prune` always report zero bytes freed.
+        let r = run(vec![item(0, 3_800_000_000, true)]);
+        assert_eq!(r.bytes_freed(), 3_800_000_000);
+        assert!(r.is_estimated(), "total must be flagged as an estimate");
+    }
+
+    #[test]
+    fn prefers_measurement_over_estimate() {
+        let r = run(vec![item(4096, 999_999, true)]);
+        assert_eq!(r.bytes_freed(), 4096);
+        assert!(!r.is_estimated());
+    }
+
+    #[test]
+    fn failed_items_contribute_nothing() {
+        let r = run(vec![item(4096, 0, true), item(8192, 1024, false)]);
+        assert_eq!(r.bytes_freed(), 4096);
+        assert_eq!(r.succeeded(), 1);
+        assert_eq!(r.failed(), 1);
+        assert_eq!(r.total(), 2);
+    }
+
+    #[test]
+    fn newest_run_is_first_and_list_is_bounded() {
+        let mut history = History::default();
+        for _ in 0..(History::MAX_RUNS + 25) {
+            history.push(run(vec![item(1, 0, true)]));
+        }
+        assert_eq!(history.runs.len(), History::MAX_RUNS);
+    }
+
+    #[test]
+    fn bytes_since_excludes_older_runs() {
+        let mut history = History::default();
+
+        let mut old = run(vec![item(1000, 0, true)]);
+        old.started_at = Utc::now() - chrono::Duration::days(90);
+        history.push(old);
+
+        history.push(run(vec![item(500, 0, true)]));
+
+        assert_eq!(history.total_bytes(), 1500);
+        assert_eq!(history.bytes_since(30), 500);
+    }
+}
diff --git a/crates/deepclean-core/src/lib.rs b/crates/deepclean-core/src/lib.rs
index f24d7b7..31ea3e8 100644
--- a/crates/deepclean-core/src/lib.rs
+++ b/crates/deepclean-core/src/lib.rs
@@ -1,6 +1,8 @@
 pub mod action;
 pub mod config;
+pub mod disk;
 pub mod error;
+pub mod history;
 pub mod model;
 pub mod path_env;
 pub mod safety;
diff --git a/crates/deepclean-core/src/model.rs b/crates/deepclean-core/src/model.rs
index 6307f4b..306c5dd 100644
--- a/crates/deepclean-core/src/model.rs
+++ b/crates/deepclean-core/src/model.rs
@@ -174,6 +174,14 @@ pub enum ScanEvent {
     Error {
         message: String,
     },
+    /// A directory could not be read.
+    ///
+    /// Without this the failure mode is invisible absence: an unreadable
+    /// directory computes a size of zero and gets dropped from the results,
+    /// so the user sees nothing and is told nothing.
+    PermissionDenied {
+        path: PathBuf,
+    },
 }
 
 /// Events emitted during action execution.
@@ -188,13 +196,34 @@ pub enum ActionEvent {
     Completed {
         item_id: Uuid,
         action_id: Uuid,
+        /// What the executor measured. Always zero for `Command` and
+        /// `DockerPrune`, which cannot observe what they removed.
         bytes_freed: u64,
+        /// The action's own estimate, carried so the UI can report an honest
+        /// total without re-deriving it from the item list.
+        estimated_bytes: u64,
     },
     Failed {
         item_id: Uuid,
         action_id: Uuid,
         error: String,
     },
+    /// Terminal event for a batch.
+    ///
+    /// The channel closing is not a usable completion signal — the frontend
+    /// would have to count `Started` against terminal events to know it is
+    /// done.
+    BatchComplete {
+        total: usize,
+        succeeded: usize,
+        failed: usize,
+        /// Measured where possible, estimated where not.
+        bytes_freed: u64,
+        /// True when any contributing action could only be estimated.
+        estimated: bool,
+        /// True when the batch stopped early because it was cancelled.
+        cancelled: bool,
+    },
 }
 
 /// Summary of a completed scan.
diff --git a/crates/deepclean-core/src/safety.rs b/crates/deepclean-core/src/safety.rs
index 2f33f52..b5869e6 100644
--- a/crates/deepclean-core/src/safety.rs
+++ b/crates/deepclean-core/src/safety.rs
@@ -98,6 +98,122 @@ impl SafetyChecker {
         true
     }
 
+    /// Paths that must never be touched, whether directly or via a command.
+    ///
+    /// Distinct from [`Self::home_blocked_paths`]: those also cover directories
+    /// whose *contents* Void legitimately cleans (`~/Downloads`), whereas
+    /// nothing under these may be written to at all.
+    fn absolutely_protected(&self) -> Vec<PathBuf> {
+        vec![
+            self.home.join("Library/Keychains"),
+            self.home.join("Library/Preferences"),
+        ]
+    }
+
+    /// The one protected container whose *contents* Void legitimately cleans.
+    ///
+    /// The System scanner exists to clear old installers out of `~/Downloads`.
+    /// Nothing comparable applies to Documents, Desktop or Pictures, so those
+    /// stay blocked all the way down.
+    fn cleanable_container(&self) -> PathBuf {
+        self.home.join("Downloads")
+    }
+
+    /// Check a single command argument that resolves to a filesystem path.
+    ///
+    /// Narrower than [`Self::is_path_allowed`] in exactly one place: an entry
+    /// *inside* `~/Downloads` may be acted on, though the folder itself may
+    /// not. Every other protected location is refused for the whole subtree.
+    fn is_command_path_allowed(&self, raw: &str, working_dir: Option<&Path>) -> bool {
+        let expanded = if let Some(rest) = raw.strip_prefix("~/") {
+            self.home.join(rest)
+        } else {
+            let candidate = PathBuf::from(raw);
+            if candidate.is_absolute() {
+                candidate
+            } else {
+                // A relative argument means nothing without the directory the
+                // command runs in — `rm -rf Downloads` is only dangerous once
+                // resolved. Checked only when it names something real, so
+                // ordinary subcommands are not mistaken for paths.
+                match working_dir.map(|dir| dir.join(&candidate)) {
+                    Some(joined) if joined.exists() => joined,
+                    _ => return true,
+                }
+            }
+        };
+
+        let canonical = expanded.canonicalize().unwrap_or(expanded);
+        let cleanable = self.cleanable_container();
+
+        for protected in self.home_blocked_paths() {
+            if protected == cleanable {
+                // The folder itself, never; its entries, yes.
+                if canonical == protected {
+                    return false;
+                }
+            } else if canonical.starts_with(&protected) {
+                return false;
+            }
+        }
+
+        // The home directory itself is never a valid target.
+        if canonical == self.home || canonical == Path::new("/") {
+            return false;
+        }
+
+        for protected in self.absolutely_protected() {
+            if canonical.starts_with(&protected) {
+                return false;
+            }
+        }
+
+        for component in canonical.components() {
+            let name = component.as_os_str().to_string_lossy();
+            if self.blocked_names.contains(&name.as_ref()) {
+                return false;
+            }
+        }
+
+        for blocked in &self.extra_blocked {
+            let blocked_canonical = blocked.canonicalize().unwrap_or_else(|_| blocked.clone());
+            if canonical.starts_with(&blocked_canonical) {
+                return false;
+            }
+        }
+
+        true
+    }
+
+    /// Validate every path-like argument of a command before running it.
+    ///
+    /// `ActionMethod::Command` previously bypassed safety entirely — only its
+    /// working directory was checked — so `rm -rf` and the `osascript` trash
+    /// one-liner could reach any path at all. Arguments are scanned for
+    /// absolute and `~`-relative paths, including ones embedded in quoted
+    /// script strings.
+    pub fn is_command_allowed(
+        &self,
+        program: &str,
+        args: &[String],
+        working_dir: Option<&Path>,
+    ) -> Result<(), String> {
+        for arg in args {
+            for token in arg.split(['"', '\'', ' ', '\t', '\n', '(', ')', ',']) {
+                let token = token.trim_end_matches(['.', ';', ':']);
+                if token.is_empty() {
+                    continue;
+                }
+                if !self.is_command_path_allowed(token, working_dir) {
+                    return Err(format!(
+                        "`{program}` was blocked from operating on a protected path: {token}"
+                    ));
+                }
+            }
+        }
+        Ok(())
+    }
+
     /// Upgrade risk for paths directly under home or symlinks.
     pub fn validate_risk(
         &self,
@@ -106,21 +222,15 @@ impl SafetyChecker {
     ) -> crate::model::RiskLevel {
         use crate::model::RiskLevel;
 
-        let mut risk = base_risk;
-
-        // Paths directly under home are more dangerous
-        if let Some(parent) = path.parent() {
-            if parent == self.home {
-                risk = risk.max(RiskLevel::Caution);
-            }
-        }
+        // A path directly under home, or a symlink, is worth a second look.
+        let directly_under_home = path.parent() == Some(self.home.as_path());
+        let suspicious = directly_under_home || path.is_symlink();
 
-        // Symlinks are suspicious
-        if path.is_symlink() {
-            risk = risk.max(RiskLevel::Caution);
+        if suspicious {
+            base_risk.max(RiskLevel::Caution)
+        } else {
+            base_risk
         }
-
-        risk
     }
 
     /// Check if a directory contains any sentinel files (shallow check).
diff --git a/crates/deepclean-core/src/scanner/apple.rs b/crates/deepclean-core/src/scanner/apple.rs
index e4fd78a..74c0c5d 100644
--- a/crates/deepclean-core/src/scanner/apple.rs
+++ b/crates/deepclean-core/src/scanner/apple.rs
@@ -67,63 +67,17 @@ impl EcosystemScanner for AppleScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            // Xcode DerivedData
-            let derived_data = home.join("Library/Developer/Xcode/DerivedData");
-            if derived_data.is_dir() {
-                locs.push(derived_data);
-            }
-
-            // Xcode Archives
-            let archives = home.join("Library/Developer/Xcode/Archives");
-            if archives.is_dir() {
-                locs.push(archives);
-            }
-
-            // iOS DeviceSupport
-            let device_support = home.join("Library/Developer/Xcode/iOS DeviceSupport");
-            if device_support.is_dir() {
-                locs.push(device_support);
-            }
-
-            // watchOS DeviceSupport
-            let watch_support = home.join("Library/Developer/Xcode/watchOS DeviceSupport");
-            if watch_support.is_dir() {
-                locs.push(watch_support);
-            }
-
-            // tvOS DeviceSupport
-            let tvos_support = home.join("Library/Developer/Xcode/tvOS DeviceSupport");
-            if tvos_support.is_dir() {
-                locs.push(tvos_support);
-            }
-
-            // iOS Simulator Devices
-            let sim_devices = home.join("Library/Developer/CoreSimulator/Devices");
-            if sim_devices.is_dir() {
-                locs.push(sim_devices);
-            }
-
-            // iOS Simulator Caches
-            let sim_caches = home.join("Library/Developer/CoreSimulator/Caches");
-            if sim_caches.is_dir() {
-                locs.push(sim_caches);
-            }
-
-            // CocoaPods cache
-            let cocoapods = home.join("Library/Caches/CocoaPods");
-            if cocoapods.is_dir() {
-                locs.push(cocoapods);
-            }
-
-            // Swift Package Manager global cache
-            let spm_cache = home.join("Library/org.swift.swiftpm");
-            if spm_cache.is_dir() {
-                locs.push(spm_cache);
-            }
-        }
-        locs
+        super::existing_home_dirs([
+            "Library/Developer/Xcode/DerivedData",
+            "Library/Developer/Xcode/Archives",
+            "Library/Developer/Xcode/iOS DeviceSupport",
+            "Library/Developer/Xcode/watchOS DeviceSupport",
+            "Library/Developer/Xcode/tvOS DeviceSupport",
+            "Library/Developer/CoreSimulator/Devices",
+            "Library/Developer/CoreSimulator/Caches",
+            "Library/Caches/CocoaPods",
+            "Library/org.swift.swiftpm", // Swift Package Manager
+        ])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/docker.rs b/crates/deepclean-core/src/scanner/docker.rs
index 0e23283..dc8d941 100644
--- a/crates/deepclean-core/src/scanner/docker.rs
+++ b/crates/deepclean-core/src/scanner/docker.rs
@@ -253,26 +253,33 @@ fn count_unused_images() -> Option<usize> {
     }
 
     // Resolve image names to IDs by inspecting each used image
-    let mut used_ids: std::collections::HashSet<String> = std::collections::HashSet::new();
-    for image_ref in String::from_utf8_lossy(&used_output.stdout).lines() {
-        let image_ref = image_ref.trim();
-        if image_ref.is_empty() {
-            continue;
-        }
-        // Try to get the short ID for this image reference
-        if let Ok(output) = Command::new("docker")
-            .args(["inspect", "--format", "{{.Id}}", image_ref])
-            .output()
-        {
-            if output.status.success() {
-                let full_id = String::from_utf8_lossy(&output.stdout).trim().to_string();
-                // The short ID from `docker images -q` is the first 12 chars after "sha256:"
-                let short_id = full_id.strip_prefix("sha256:").unwrap_or(&full_id);
-                let short_id = &short_id[..short_id.len().min(12)];
-                used_ids.insert(short_id.to_string());
+    let used_ids: std::collections::HashSet<String> = String::from_utf8_lossy(&used_output.stdout)
+        .lines()
+        .map(str::trim)
+        .filter(|image_ref| !image_ref.is_empty())
+        .filter_map(|image_ref| {
+            let output = Command::new("docker")
+                .args(["inspect", "--format", "{{.Id}}", image_ref])
+                .output()
+                .ok()?;
+            if !output.status.success() {
+                return None;
             }
-        }
-    }
+            let full_id = String::from_utf8_lossy(&output.stdout).trim().to_string();
+            // The short ID from `docker images -q` is the first 12 characters
+            // after "sha256:" — characters, not bytes. Lossy decoding of
+            // unexpected output emits multi-byte U+FFFD, and a byte slice can
+            // land mid-character and panic.
+            Some(
+                full_id
+                    .strip_prefix("sha256:")
+                    .unwrap_or(&full_id)
+                    .chars()
+                    .take(12)
+                    .collect(),
+            )
+        })
+        .collect();
 
     let unused = all_ids
         .iter()
diff --git a/crates/deepclean-core/src/scanner/dotnet.rs b/crates/deepclean-core/src/scanner/dotnet.rs
index bd838ac..86b04bf 100644
--- a/crates/deepclean-core/src/scanner/dotnet.rs
+++ b/crates/deepclean-core/src/scanner/dotnet.rs
@@ -55,14 +55,7 @@ impl EcosystemScanner for DotNetScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            let nuget = home.join(".nuget/packages");
-            if nuget.is_dir() {
-                locs.push(nuget);
-            }
-        }
-        locs
+        super::existing_home_dirs([".nuget/packages"])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/homebrew.rs b/crates/deepclean-core/src/scanner/homebrew.rs
index 172b2a2..9d74ee5 100644
--- a/crates/deepclean-core/src/scanner/homebrew.rs
+++ b/crates/deepclean-core/src/scanner/homebrew.rs
@@ -83,14 +83,7 @@ impl EcosystemScanner for HomebrewScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            let cache = home.join("Library/Caches/Homebrew");
-            if cache.is_dir() {
-                locs.push(cache);
-            }
-        }
-        locs
+        super::existing_home_dirs(["Library/Caches/Homebrew"])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/java.rs b/crates/deepclean-core/src/scanner/java.rs
index 7a1f539..ca604d5 100644
--- a/crates/deepclean-core/src/scanner/java.rs
+++ b/crates/deepclean-core/src/scanner/java.rs
@@ -58,21 +58,10 @@ impl EcosystemScanner for JavaScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            // Gradle dependency cache
-            let gradle_caches = home.join(".gradle/caches");
-            if gradle_caches.is_dir() {
-                locs.push(gradle_caches);
-            }
-
-            // Maven local repository
-            let maven_repo = home.join(".m2/repository");
-            if maven_repo.is_dir() {
-                locs.push(maven_repo);
-            }
-        }
-        locs
+        super::existing_home_dirs([
+            ".gradle/caches", // Gradle dependency cache
+            ".m2/repository", // Maven local repository
+        ])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/mod.rs b/crates/deepclean-core/src/scanner/mod.rs
index 09e8eca..c5c7e5a 100644
--- a/crates/deepclean-core/src/scanner/mod.rs
+++ b/crates/deepclean-core/src/scanner/mod.rs
@@ -10,8 +10,9 @@ pub mod python;
 pub mod rust;
 pub mod system;
 
+use std::collections::HashSet;
 use std::path::{Path, PathBuf};
-use std::sync::Arc;
+use std::sync::{Arc, Mutex, PoisonError};
 
 use async_trait::async_trait;
 use ignore::WalkBuilder;
@@ -40,6 +41,26 @@ pub trait EcosystemScanner: Send + Sync {
     }
 }
 
+/// Resolve fixed locations under the user's home directory, keeping the ones
+/// that exist.
+///
+/// Seven scanners were each hand-rolling this same loop; the shape is always
+/// "a known list of paths relative to home, minus the ones not installed".
+pub fn existing_home_dirs<I, S>(relative: I) -> Vec<PathBuf>
+where
+    I: IntoIterator<Item = S>,
+    S: AsRef<Path>,
+{
+    let Some(home) = dirs::home_dir() else {
+        return Vec::new();
+    };
+    relative
+        .into_iter()
+        .map(|rel| home.join(rel))
+        .filter(|path| path.is_dir())
+        .collect()
+}
+
 /// Orchestrates scanning across all ecosystems.
 pub struct ScanOrchestrator {
     scanners: Vec<Arc<dyn EcosystemScanner>>,
@@ -57,7 +78,9 @@ impl ScanOrchestrator {
 
         tokio::spawn(async move {
             let start = std::time::Instant::now();
-            let semaphore = Arc::new(Semaphore::new(self.config.max_concurrent_analyses));
+            // `.max(1)`: a semaphore with zero permits never returns Err from
+            // acquire, it pends forever — the scan would hang, not fail.
+            let semaphore = Arc::new(Semaphore::new(self.config.max_concurrent_analyses.max(1)));
 
             // Notify scanners starting
             for scanner in &self.scanners {
@@ -78,12 +101,26 @@ impl ScanOrchestrator {
                 let sem = semaphore.clone();
                 let tx = tx.clone();
                 let handle = tokio::spawn(async move {
-                    let _permit = sem.acquire().await.unwrap();
+                    // Acquire fails only if the semaphore is closed, which
+                    // happens when the orchestrator is being torn down. There
+                    // is nothing useful to analyze at that point.
+                    let Ok(_permit) = sem.acquire().await else {
+                        return;
+                    };
                     match scanner.analyze(&path).await {
                         Ok(Some(item)) => {
                             let _ = tx.send(ScanEvent::ItemFound { item }).await;
                         }
-                        Ok(None) => {}
+                        Ok(None) => {
+                            // A directory Void cannot read computes a size of
+                            // zero and is dropped as "nothing here". Tell the
+                            // difference before it vanishes silently.
+                            if is_permission_denied(&path) {
+                                let _ = tx
+                                    .send(ScanEvent::PermissionDenied { path: path.clone() })
+                                    .await;
+                            }
+                        }
                         Err(e) => {
                             warn!("Analysis error for {}: {}", path.display(), e);
                             let _ = tx
@@ -104,12 +141,20 @@ impl ScanOrchestrator {
                     let sem = semaphore.clone();
                     let tx = tx.clone();
                     let handle = tokio::spawn(async move {
-                        let _permit = sem.acquire().await.unwrap();
+                        let Ok(_permit) = sem.acquire().await else {
+                            return;
+                        };
                         match scanner.analyze(&loc).await {
                             Ok(Some(item)) => {
                                 let _ = tx.send(ScanEvent::ItemFound { item }).await;
                             }
-                            Ok(None) => {}
+                            Ok(None) => {
+                                if is_permission_denied(&loc) {
+                                    let _ = tx
+                                        .send(ScanEvent::PermissionDenied { path: loc.clone() })
+                                        .await;
+                                }
+                            }
                             Err(e) => {
                                 warn!("Global analysis error for {}: {}", loc.display(), e);
                             }
@@ -151,6 +196,9 @@ impl ScanOrchestrator {
             let mut candidates: Vec<(Arc<dyn EcosystemScanner>, PathBuf)> = vec![];
             let candidates_mutex = std::sync::Mutex::new(&mut candidates);
             let paths_scanned = std::sync::atomic::AtomicU64::new(0);
+            // One event per unreadable directory would be thousands on a Mac
+            // without Full Disk Access; report distinct locations, bounded.
+            let denied_seen: Mutex<HashSet<PathBuf>> = Mutex::new(HashSet::new());
 
             for root in &config.scan_roots {
                 if !root.is_dir() {
@@ -173,13 +221,17 @@ impl ScanOrchestrator {
                     let scanners = &scanners;
                     let candidates_mutex = &candidates_mutex;
                     let paths_scanned = &paths_scanned;
+                    let denied_seen = &denied_seen;
                     let tx = &tx;
                     let enabled = enabled.clone();
 
                     Box::new(move |entry| {
                         let entry = match entry {
                             Ok(e) => e,
-                            Err(_) => return ignore::WalkState::Continue,
+                            Err(err) => {
+                                report_walk_error(&err, denied_seen, tx);
+                                return ignore::WalkState::Continue;
+                            }
                         };
 
                         let count =
@@ -207,9 +259,10 @@ impl ScanOrchestrator {
                                 && scanner.is_candidate(file_name, path)
                             {
                                 debug!("Found candidate: {}", path.display());
-                                if let Ok(mut cands) = candidates_mutex.lock() {
-                                    cands.push((scanner.clone(), path.to_path_buf()));
-                                }
+                                let mut cands = candidates_mutex
+                                    .lock()
+                                    .unwrap_or_else(std::sync::PoisonError::into_inner);
+                                cands.push((scanner.clone(), path.to_path_buf()));
                                 // Don't descend into candidate directories
                                 return ignore::WalkState::Skip;
                             }
@@ -227,11 +280,111 @@ impl ScanOrchestrator {
     }
 }
 
+/// Maximum distinct unreadable directories reported per scan.
+///
+/// A Mac without Full Disk Access denies thousands of paths; the user needs to
+/// know it happened and roughly where, not a transcript.
+const MAX_DENIED_REPORTS: usize = 40;
+
+/// Whether a path exists but cannot be read.
+///
+/// Distinguishes "empty, nothing to clean" from "invisible because Void was
+/// refused access", which otherwise look identical: both yield a size of zero.
+fn is_permission_denied(path: &Path) -> bool {
+    match std::fs::read_dir(path) {
+        Err(err) => err.kind() == std::io::ErrorKind::PermissionDenied && path.exists(),
+        Ok(_) => false,
+    }
+}
+
+/// Dig the offending path out of a walker error.
+///
+/// `ignore::Error` nests: the path lives in a `WithPath` wrapper that may sit
+/// under `WithDepth` or `WithLineNumber`.
+fn walk_error_path(err: &ignore::Error) -> Option<&Path> {
+    match err {
+        ignore::Error::WithPath { path, .. } => Some(path.as_path()),
+        ignore::Error::WithDepth { err, .. } | ignore::Error::WithLineNumber { err, .. } => {
+            walk_error_path(err)
+        }
+        _ => None,
+    }
+}
+
+/// Surface a walker error as a permission event, deduplicated and bounded.
+fn report_walk_error(
+    err: &ignore::Error,
+    seen: &Mutex<HashSet<PathBuf>>,
+    tx: &mpsc::Sender<ScanEvent>,
+) {
+    let Some(io_err) = err.io_error() else {
+        return;
+    };
+    if io_err.kind() != std::io::ErrorKind::PermissionDenied {
+        return;
+    }
+    let Some(path) = walk_error_path(err) else {
+        return;
+    };
+
+    // `ignore` reports a directory-open failure against the unreadable
+    // directory itself, so this is already the right path. Walking up to the
+    // parent would name a directory that read just fine.
+    let dir = path.to_path_buf();
+
+    {
+        let mut seen = seen.lock().unwrap_or_else(PoisonError::into_inner);
+        if seen.len() >= MAX_DENIED_REPORTS || !seen.insert(dir.clone()) {
+            return;
+        }
+    }
+
+    let _ = tx.blocking_send(ScanEvent::PermissionDenied { path: dir });
+}
+
 #[cfg(test)]
 mod tests {
     use super::*;
     use crate::scanner::rust::RustScanner;
 
+    #[test]
+    fn empty_readable_directory_is_not_permission_denied() {
+        let tmp = tempfile::tempdir().unwrap();
+        assert!(!is_permission_denied(tmp.path()));
+    }
+
+    #[test]
+    fn missing_directory_is_not_permission_denied() {
+        let tmp = tempfile::tempdir().unwrap();
+        assert!(!is_permission_denied(&tmp.path().join("nope")));
+    }
+
+    #[cfg(unix)]
+    #[test]
+    fn unreadable_directory_is_reported_rather_than_looking_empty() {
+        use std::os::unix::fs::PermissionsExt;
+
+        let tmp = tempfile::tempdir().unwrap();
+        let locked = tmp.path().join("locked");
+        std::fs::create_dir(&locked).unwrap();
+        std::fs::write(locked.join("secret.bin"), vec![0u8; 1024]).unwrap();
+        std::fs::set_permissions(&locked, std::fs::Permissions::from_mode(0o000)).unwrap();
+
+        let denied = is_permission_denied(&locked);
+        // Root reads anything, so the distinction cannot be tested there.
+        let is_root = std::fs::read_dir(&locked).is_ok();
+
+        // Restore so the tempdir can clean itself up.
+        std::fs::set_permissions(&locked, std::fs::Permissions::from_mode(0o755)).unwrap();
+
+        if !is_root {
+            assert!(
+                denied,
+                "an unreadable directory must be distinguishable from an empty one"
+            );
+        }
+    }
+
     #[tokio::test]
     async fn orchestrator_finds_rust_target() {
         // Set up a fake project tree
diff --git a/crates/deepclean-core/src/scanner/node.rs b/crates/deepclean-core/src/scanner/node.rs
index 5744edc..3820d1a 100644
--- a/crates/deepclean-core/src/scanner/node.rs
+++ b/crates/deepclean-core/src/scanner/node.rs
@@ -171,37 +171,13 @@ impl EcosystemScanner for NodeScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            // npm cache
-            let npm_cache = home.join(".npm/_cacache");
-            if npm_cache.is_dir() {
-                locs.push(npm_cache);
-            }
-
-            // Yarn cache (v1 default location)
-            let yarn_cache = home.join(".cache/yarn");
-            if yarn_cache.is_dir() {
-                locs.push(yarn_cache);
-            }
-            // macOS Yarn cache location
-            let yarn_cache_mac = home.join("Library/Caches/Yarn");
-            if yarn_cache_mac.is_dir() {
-                locs.push(yarn_cache_mac);
-            }
-
-            // pnpm store
-            let pnpm_store = home.join(".local/share/pnpm/store");
-            if pnpm_store.is_dir() {
-                locs.push(pnpm_store);
-            }
-            // macOS pnpm store location
-            let pnpm_store_mac = home.join("Library/pnpm/store");
-            if pnpm_store_mac.is_dir() {
-                locs.push(pnpm_store_mac);
-            }
-        }
-        locs
+        super::existing_home_dirs([
+            ".npm/_cacache",           // npm
+            ".cache/yarn",             // Yarn v1
+            "Library/Caches/Yarn",     // Yarn, macOS
+            ".local/share/pnpm/store", // pnpm
+            "Library/pnpm/store",      // pnpm, macOS
+        ])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/python.rs b/crates/deepclean-core/src/scanner/python.rs
index 15a3398..46d228f 100644
--- a/crates/deepclean-core/src/scanner/python.rs
+++ b/crates/deepclean-core/src/scanner/python.rs
@@ -59,27 +59,11 @@ impl EcosystemScanner for PythonScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            // pip cache (Linux default)
-            let pip_cache = home.join(".cache/pip");
-            if pip_cache.is_dir() {
-                locs.push(pip_cache);
-            }
-
-            // pip cache (macOS alternative)
-            let pip_cache_mac = home.join("Library/Caches/pip");
-            if pip_cache_mac.is_dir() {
-                locs.push(pip_cache_mac);
-            }
-
-            // Conda package cache
-            let conda_pkgs = home.join(".conda/pkgs");
-            if conda_pkgs.is_dir() {
-                locs.push(conda_pkgs);
-            }
-        }
-        locs
+        super::existing_home_dirs([
+            ".cache/pip",         // pip, Linux default
+            "Library/Caches/pip", // pip, macOS
+            ".conda/pkgs",        // Conda packages
+        ])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/rust.rs b/crates/deepclean-core/src/scanner/rust.rs
index bcb88f4..07776cb 100644
--- a/crates/deepclean-core/src/scanner/rust.rs
+++ b/crates/deepclean-core/src/scanner/rust.rs
@@ -33,7 +33,12 @@ impl EcosystemScanner for RustScanner {
             return Ok(None);
         }
 
-        let parent = path.parent().unwrap();
+        // `parent()` is None only at a filesystem root, which cannot be a
+        // build artifact — but this walks arbitrary user paths, so it returns
+        // rather than panicking.
+        let Some(parent) = path.parent() else {
+            return Ok(None);
+        };
         let project_name = parent
             .file_name()
             .map(|n| n.to_string_lossy().to_string())
@@ -105,18 +110,7 @@ impl EcosystemScanner for RustScanner {
     }
 
     fn global_locations(&self) -> Vec<PathBuf> {
-        let mut locs = vec![];
-        if let Some(home) = dirs::home_dir() {
-            let registry = home.join(".cargo/registry");
-            if registry.is_dir() {
-                locs.push(registry);
-            }
-            let git = home.join(".cargo/git");
-            if git.is_dir() {
-                locs.push(git);
-            }
-        }
-        locs
+        super::existing_home_dirs([".cargo/registry", ".cargo/git"])
     }
 }
 
diff --git a/crates/deepclean-core/src/scanner/system.rs b/crates/deepclean-core/src/scanner/system.rs
index 0d63071..e28296f 100644
--- a/crates/deepclean-core/src/scanner/system.rs
+++ b/crates/deepclean-core/src/scanner/system.rs
@@ -10,6 +10,24 @@ use crate::model::*;
 use crate::scanner::EcosystemScanner;
 use crate::staleness;
 
+/// Escape a path for embedding in an AppleScript string literal.
+///
+/// The Trash actions interpolate a discovered filename into an `osascript`
+/// program. macOS permits `"` and `\` in filenames, so an unescaped name can
+/// close the string and append arbitrary AppleScript — from a file the user
+/// merely downloaded.
+fn applescript_literal(path: &Path) -> String {
+    path.to_string_lossy()
+        .replace('\\', "\\\\")
+        .replace('"', "\\\"")
+}
+
+/// Escape a path for a PowerShell single-quoted string, where the only
+/// metacharacter is the quote itself and it is doubled to escape.
+fn powershell_literal(path: &Path) -> String {
+    path.to_string_lossy().replace('\'', "''")
+}
+
 pub struct SystemScanner;
 
 #[async_trait]
@@ -149,7 +167,7 @@ async fn analyze_download_entry(path: &Path) -> Result<Option<CleanableItem>, Sc
                     "-e".into(),
                     format!(
                         "tell application \"Finder\" to delete POSIX file \"{}\"",
-                        path.to_string_lossy()
+                        applescript_literal(path)
                     ),
                 ],
                 working_dir: None,
@@ -169,7 +187,7 @@ async fn analyze_download_entry(path: &Path) -> Result<Option<CleanableItem>, Sc
                     "-Command".into(),
                     format!(
                         "$shell = New-Object -ComObject Shell.Application; $shell.Namespace(10).MoveHere('{}')",
-                        path.to_string_lossy()
+                        powershell_literal(path)
                     ),
                 ],
                 working_dir: None,
@@ -198,7 +216,7 @@ async fn analyze_download_entry(path: &Path) -> Result<Option<CleanableItem>, Sc
                     vec![
                         "-NoProfile".into(),
                         "-Command".into(),
-                        format!("Remove-Item '{}' -Recurse -Force", path.to_string_lossy()),
+                        format!("Remove-Item '{}' -Recurse -Force", powershell_literal(path)),
                     ]
                 },
                 working_dir: None,
@@ -224,7 +242,7 @@ async fn analyze_download_entry(path: &Path) -> Result<Option<CleanableItem>, Sc
                     vec![
                         "-NoProfile".into(),
                         "-Command".into(),
-                        format!("Remove-Item '{}' -Force", path.to_string_lossy()),
+                        format!("Remove-Item '{}' -Force", powershell_literal(path)),
                     ]
                 },
                 working_dir: None,
@@ -256,13 +274,12 @@ async fn analyze_trash(path: &Path) -> Result<Option<CleanableItem>, ScanError>
         return Ok(None);
     }
 
-    let mut size_bytes = staleness::compute_dir_size(path).await;
-
-    // Fallback: on macOS, ignore walker may fail on .Trash due to permissions.
-    // Use `du` as a fallback to get the size.
-    if size_bytes == 0 {
-        size_bytes = du_fallback_size(path).await;
-    }
+    // On macOS the walker can be refused access to .Trash, which reads as a
+    // size of zero; `du` gets there when it does.
+    let size_bytes = match staleness::compute_dir_size(path).await {
+        0 => du_fallback_size(path).await,
+        measured => measured,
+    };
 
     let actions = if cfg!(target_os = "macos") {
         vec![CleanAction {
@@ -326,7 +343,7 @@ async fn du_fallback_size(path: &Path) -> u64 {
                     "-Command",
                     &format!(
                         "(Get-ChildItem -Recurse -Force '{}' -ErrorAction SilentlyContinue | Measure-Object -Property Length -Sum).Sum",
-                        path.to_string_lossy()
+                        powershell_literal(path.as_ref())
                     ),
                 ])
                 .output()
@@ -474,4 +491,59 @@ mod tests {
         let result = analyze_download_entry(&file).await.unwrap();
         assert!(result.is_none());
     }
+
+    /// Every `"` in the escaped output must be backslash-escaped, so none of
+    /// them can terminate the surrounding AppleScript string literal.
+    fn quotes_are_all_escaped(s: &str) -> bool {
+        let bytes = s.as_bytes();
+        bytes.iter().enumerate().all(|(i, &c)| {
+            if c != b'"' {
+                return true;
+            }
+            // Count the backslashes immediately before it; an odd run escapes.
+            let backslashes = bytes[..i].iter().rev().take_while(|&&b| b == b'\\').count();
+            backslashes % 2 == 1
+        })
+    }
+
+    #[test]
+    fn applescript_literal_neutralises_a_quote_in_a_filename() {
+        // macOS allows `"` in filenames. Unescaped, this would close the
+        // string and append arbitrary AppleScript — from a file the user only
+        // downloaded.
+        let evil = PathBuf::from(r#"/Users/dev/Downloads/x" & (do shell script "id") & ""#);
+        let escaped = applescript_literal(&evil);
+
+        assert!(
+            quotes_are_all_escaped(&escaped),
+            "a quote survived unescaped: {escaped}"
+        );
+        assert!(
+            escaped.contains("do shell script"),
+            "the text is preserved, only neutralised: {escaped}"
+        );
+    }
+
+    #[test]
+    fn applescript_literal_escapes_backslashes_before_quotes() {
+        // A trailing backslash must not end up escaping the closing quote.
+        let p = PathBuf::from(r#"/tmp/a\"#);
+        let escaped = applescript_literal(&p);
+        assert_eq!(escaped, r"/tmp/a\\");
+        let script = format!("\"{escaped}\"");
+        assert!(quotes_are_all_escaped(&script[1..script.len() - 1]));
+    }
+
+    #[test]
+    fn powershell_literal_doubles_single_quotes() {
+        // In a PowerShell single-quoted string a doubled quote is a literal
+        // quote, so the payload cannot break out.
+        let evil = PathBuf::from("/tmp/x'; rm -rf ~; '");
+        let escaped = powershell_literal(&evil);
+
+        assert_eq!(escaped, "/tmp/x''; rm -rf ~; ''");
+        for run in escaped.split(|c| c != '\'').filter(|r| !r.is_empty()) {
+            assert_eq!(run.len() % 2, 0, "an odd run of quotes escapes: {escaped}");
+        }
+    }
 }
diff --git a/crates/deepclean-core/src/staleness.rs b/crates/deepclean-core/src/staleness.rs
index e1b838c..f2ca95f 100644
--- a/crates/deepclean-core/src/staleness.rs
+++ b/crates/deepclean-core/src/staleness.rs
@@ -4,19 +4,11 @@ use chrono::{DateTime, Utc};
 
 /// Find the most recent modification time in a directory (shallow scan).
 pub fn most_recent_modification(path: &Path) -> Option<DateTime<Utc>> {
-    let entries = std::fs::read_dir(path).ok()?;
-    let mut newest: Option<std::time::SystemTime> = None;
-
-    for entry in entries.flatten() {
-        if let Ok(meta) = entry.metadata() {
-            if let Ok(modified) = meta.modified() {
-                newest = Some(match newest {
-                    Some(current) => current.max(modified),
-                    None => modified,
-                });
-            }
-        }
-    }
+    let newest = std::fs::read_dir(path)
+        .ok()?
+        .flatten()
+        .filter_map(|entry| entry.metadata().ok()?.modified().ok())
+        .max();
 
     newest.map(DateTime::<Utc>::from)
 }
@@ -37,23 +29,18 @@ pub async fn compute_dir_size(path: &Path) -> u64 {
 }
 
 fn compute_dir_size_sync(path: &Path) -> u64 {
-    let mut total = 0u64;
-    let walker = ignore::WalkBuilder::new(path)
+    ignore::WalkBuilder::new(path)
         .hidden(false)
         .ignore(false)
         .git_ignore(false)
         .git_global(false)
         .git_exclude(false)
-        .build();
-
-    for entry in walker.flatten() {
-        if entry.file_type().is_some_and(|ft| ft.is_file()) {
-            if let Ok(meta) = entry.metadata() {
-                total += meta.len();
-            }
-        }
-    }
-    total
+        .build()
+        .flatten()
+        .filter(|entry| entry.file_type().is_some_and(|ft| ft.is_file()))
+        .filter_map(|entry| entry.metadata().ok())
+        .map(|meta| meta.len())
+        .sum()
 }
 
 #[cfg(test)]
diff --git a/design/void-design-v1.html b/design/void-design-v1.html
new file mode 100644
index 0000000..d3746ad
--- /dev/null
+++ b/design/void-design-v1.html
@@ -0,0 +1,2875 @@
+<title>Void Design v1</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400..700&family=Geist+Mono:wght@400..600&display=swap">
+
+<style>
+/* ══════════════════════════════════════════════════════════════════════
+   VOID DESIGN SYSTEM v1
+   Foundation tokens: type, space, radius, motion, elevation.
+   Color tokens live in the PALETTE block below.
+   ══════════════════════════════════════════════════════════════════════ */
+
+*,*::before,*::after{box-sizing:border-box}
+
+:root{
+  --font-sans:"Inter var","Inter",-apple-system,BlinkMacSystemFont,"Segoe UI Variable Text","Segoe UI","Noto Sans",Cantarell,Ubuntu,system-ui,sans-serif;
+  --font-mono:"Geist Mono",ui-monospace,"SF Mono",SFMono-Regular,"Cascadia Mono","Segoe UI Mono","Roboto Mono","DejaVu Sans Mono",Menlo,Consolas,monospace;
+  --font-brand:var(--font-sans);
+
+  /* ── Space ── */
+  --space-0:0px;--space-px:1px;--space-0-5:2px;--space-1:4px;--space-1-5:6px;
+  --space-2:8px;--space-2-5:10px;--space-3:12px;--space-3-5:14px;--space-4:16px;
+  --space-5:20px;--space-6:24px;--space-7:28px;--space-8:32px;--space-10:40px;
+  --space-12:48px;--space-16:64px;--space-20:80px;
+
+  --gap-icon-text:6px;--gap-icon-text-lg:8px;--gap-inline:8px;--gap-group:12px;
+  --gap-stack:4px;--gap-section:20px;
+  --pad-window-x:16px;--pad-panel:16px;--pad-card:12px;
+
+  /* ── Radius ── */
+  --radius-none:0px;--radius-xs:3px;--radius-sm:5px;--radius-md:7px;
+  --radius-lg:10px;--radius-xl:14px;--radius-full:999px;
+
+  /* ── Borders ── */
+  --border-w:1px;--border-w-accent:2px;--focus-ring-w:2px;--focus-ring-offset:1px;
+
+  /* ── Heights ── */
+  --row-h-compact:32px;--row-h-comfortable:44px;--row-h-group-header:28px;
+  --row-inset-x-compact:10px;--row-inset-x-comfortable:12px;
+  --ctl-h-sm:24px;--ctl-h-md:30px;--ctl-h-lg:36px;
+  --btn-pad-sm:8px;--btn-pad-md:11px;--btn-pad-lg:14px;
+  --iconbtn-sm:24px;--iconbtn-md:28px;--iconbtn-lg:32px;
+  --input-h-sm:24px;--input-h-md:30px;--input-h-lg:36px;
+  --input-pad-x:9px;
+  --chip-h:24px;--chip-pad-x:9px;--chip-h-sm:20px;--chip-pad-x-sm:7px;
+  --badge-h:16px;--badge-pad-x:5px;--badge-h-lg:18px;--badge-pad-x-lg:6px;
+  --countpill-h:16px;--countpill-pad-x:5px;--dot:6px;
+  --header-h:52px;--toolbar-h:40px;--statusbar-h:28px;
+  --sidebar-item-h:28px;--rail-w:56px;--rail-w-wide:216px;
+  --panel-w:288px;--drawer-w:400px;
+  --progressbar-h:2px;--tab-h:30px;--menuitem-h:26px;
+  --checkbox-size:14px;
+
+  /* ── Type scale ── */
+  --t-display-size:44px;--t-display-lh:44px;--t-display-ls:-0.030em;--t-display-w:620;
+  --t-title-size:24px;--t-title-lh:30px;--t-title-ls:-0.021em;--t-title-w:620;
+  --t-metric-xl-size:44px;--t-metric-xl-lh:46px;--t-metric-xl-ls:-0.030em;--t-metric-xl-w:620;
+  --t-metric-lg-size:32px;--t-metric-lg-lh:34px;--t-metric-lg-ls:-0.022em;--t-metric-lg-w:600;
+  --t-metric-md-size:28px;--t-metric-md-lh:30px;--t-metric-md-ls:-0.020em;--t-metric-md-w:600;
+  --t-metric-sm-size:20px;--t-metric-sm-lh:24px;--t-metric-sm-ls:-0.015em;--t-metric-sm-w:600;
+  --t-metric-xs-size:16px;--t-metric-xs-lh:20px;--t-metric-xs-ls:-0.011em;--t-metric-xs-w:590;
+  --t-page-title-size:18px;--t-page-title-lh:24px;--t-page-title-ls:-0.014em;--t-page-title-w:600;
+  --t-section-title-size:13px;--t-section-title-lh:16px;--t-section-title-ls:-0.003em;--t-section-title-w:600;
+  --t-overline-size:10px;--t-overline-lh:12px;--t-overline-ls:0.075em;--t-overline-w:620;
+  --t-colhead-size:11px;--t-colhead-lh:14px;--t-colhead-ls:0.020em;--t-colhead-w:550;
+  --t-body-size:13px;--t-body-lh:18px;--t-body-ls:-0.003em;--t-body-w:450;
+  --t-body-strong-size:13px;--t-body-strong-lh:18px;--t-body-strong-ls:-0.003em;--t-body-strong-w:560;
+  --t-body-lg-size:14px;--t-body-lg-lh:20px;--t-body-lg-ls:-0.006em;--t-body-lg-w:450;
+  --t-body-sm-size:12px;--t-body-sm-lh:16px;--t-body-sm-ls:0em;--t-body-sm-w:450;
+  --t-prose-size:13px;--t-prose-lh:20px;--t-prose-ls:-0.003em;--t-prose-w:450;
+  --t-label-size:12px;--t-label-lh:16px;--t-label-ls:-0.002em;--t-label-w:520;
+  --t-label-lg-size:13px;--t-label-lg-lh:16px;--t-label-lg-ls:-0.004em;--t-label-lg-w:540;
+  --t-caption-size:11px;--t-caption-lh:14px;--t-caption-ls:0.004em;--t-caption-w:450;
+  --t-micro-size:10px;--t-micro-lh:12px;--t-micro-ls:0.045em;--t-micro-w:600;
+  --t-mono-md-size:13px;--t-mono-md-lh:18px;--t-mono-md-ls:-0.008em;--t-mono-md-w:430;
+  --t-mono-sm-size:12px;--t-mono-sm-lh:17px;--t-mono-sm-ls:-0.006em;--t-mono-sm-w:430;
+  --t-mono-xs-size:11px;--t-mono-xs-lh:15px;--t-mono-xs-ls:-0.004em;--t-mono-xs-w:430;
+
+  /* ── Motion ── */
+  --dur-0:0ms;--dur-1:80ms;--dur-2:120ms;--dur-3:160ms;--dur-4:220ms;--dur-5:320ms;--dur-6:480ms;
+  --dur-loop-progress:1150ms;--dur-loop-spin:900ms;--dur-loop-skeleton:1400ms;
+  --ease-out:cubic-bezier(0.16,1.00,0.30,1.00);
+  --ease-out-quart:cubic-bezier(0.25,1.00,0.50,1.00);
+  --ease-in:cubic-bezier(0.40,0.00,1.00,1.00);
+  --ease-in-out:cubic-bezier(0.65,0.00,0.35,1.00);
+  --ease-standard:cubic-bezier(0.20,0.00,0.00,1.00);
+  --ease-spring:cubic-bezier(0.34,1.56,0.64,1.00);
+  --ease-linear:linear;
+}
+
+@media (prefers-reduced-motion:reduce){
+  :root{--dur-1:1ms;--dur-2:1ms;--dur-3:1ms;--dur-4:1ms;--dur-5:1ms;--dur-6:1ms;--ease-spring:var(--ease-out)}
+  *,*::before,*::after{animation-duration:1ms!important;animation-iteration-count:1!important;transition-duration:1ms!important;scroll-behavior:auto!important}
+}
+
+/* ── Type utilities ── */
+.t-display{font:var(--t-display-w) var(--t-display-size)/var(--t-display-lh) var(--font-brand);letter-spacing:var(--t-display-ls)}
+.t-title{font:var(--t-title-w) var(--t-title-size)/var(--t-title-lh) var(--font-sans);letter-spacing:var(--t-title-ls)}
+.t-metric-xl{font:var(--t-metric-xl-w) var(--t-metric-xl-size)/var(--t-metric-xl-lh) var(--font-sans);letter-spacing:var(--t-metric-xl-ls);font-variant-numeric:tabular-nums lining-nums}
+.t-metric-lg{font:var(--t-metric-lg-w) var(--t-metric-lg-size)/var(--t-metric-lg-lh) var(--font-sans);letter-spacing:var(--t-metric-lg-ls);font-variant-numeric:tabular-nums lining-nums}
+.t-metric-md{font:var(--t-metric-md-w) var(--t-metric-md-size)/var(--t-metric-md-lh) var(--font-sans);letter-spacing:var(--t-metric-md-ls);font-variant-numeric:tabular-nums lining-nums}
+.t-metric-sm{font:var(--t-metric-sm-w) var(--t-metric-sm-size)/var(--t-metric-sm-lh) var(--font-sans);letter-spacing:var(--t-metric-sm-ls);font-variant-numeric:tabular-nums lining-nums}
+.t-metric-xs{font:var(--t-metric-xs-w) var(--t-metric-xs-size)/var(--t-metric-xs-lh) var(--font-sans);letter-spacing:var(--t-metric-xs-ls);font-variant-numeric:tabular-nums lining-nums}
+.t-page-title{font:var(--t-page-title-w) var(--t-page-title-size)/var(--t-page-title-lh) var(--font-sans);letter-spacing:var(--t-page-title-ls)}
+.t-section-title{font:var(--t-section-title-w) var(--t-section-title-size)/var(--t-section-title-lh) var(--font-sans);letter-spacing:var(--t-section-title-ls)}
+.t-overline{font:var(--t-overline-w) var(--t-overline-size)/var(--t-overline-lh) var(--font-sans);letter-spacing:var(--t-overline-ls);text-transform:uppercase}
+.t-colhead{font:var(--t-colhead-w) var(--t-colhead-size)/var(--t-colhead-lh) var(--font-sans);letter-spacing:var(--t-colhead-ls)}
+.t-body{font:var(--t-body-w) var(--t-body-size)/var(--t-body-lh) var(--font-sans);letter-spacing:var(--t-body-ls)}
+.t-body-strong{font:var(--t-body-strong-w) var(--t-body-strong-size)/var(--t-body-strong-lh) var(--font-sans);letter-spacing:var(--t-body-strong-ls)}
+.t-body-lg{font:var(--t-body-lg-w) var(--t-body-lg-size)/var(--t-body-lg-lh) var(--font-sans);letter-spacing:var(--t-body-lg-ls)}
+.t-body-sm{font:var(--t-body-sm-w) var(--t-body-sm-size)/var(--t-body-sm-lh) var(--font-sans);letter-spacing:var(--t-body-sm-ls)}
+.t-prose{font:var(--t-prose-w) var(--t-prose-size)/var(--t-prose-lh) var(--font-sans);letter-spacing:var(--t-prose-ls);text-wrap:pretty;max-width:52ch}
+.t-label{font:var(--t-label-w) var(--t-label-size)/var(--t-label-lh) var(--font-sans);letter-spacing:var(--t-label-ls)}
+.t-label-lg{font:var(--t-label-lg-w) var(--t-label-lg-size)/var(--t-label-lg-lh) var(--font-sans);letter-spacing:var(--t-label-lg-ls)}
+.t-caption{font:var(--t-caption-w) var(--t-caption-size)/var(--t-caption-lh) var(--font-sans);letter-spacing:var(--t-caption-ls)}
+.t-micro{font:var(--t-micro-w) var(--t-micro-size)/var(--t-micro-lh) var(--font-sans);letter-spacing:var(--t-micro-ls);text-transform:uppercase}
+.t-mono-md{font:var(--t-mono-md-w) var(--t-mono-md-size)/var(--t-mono-md-lh) var(--font-mono);letter-spacing:var(--t-mono-md-ls)}
+.t-mono-sm{font:var(--t-mono-sm-w) var(--t-mono-sm-size)/var(--t-mono-sm-lh) var(--font-mono);letter-spacing:var(--t-mono-sm-ls)}
+.t-mono-xs{font:var(--t-mono-xs-w) var(--t-mono-xs-size)/var(--t-mono-xs-lh) var(--font-mono);letter-spacing:var(--t-mono-xs-ls)}
+.tnum{font-variant-numeric:tabular-nums lining-nums;font-feature-settings:"tnum" 1,"lnum" 1}
+</style>
+
+<style>
+/* ══════════════════════════════════════════════════════════════════════
+   APP COMPONENTS — all color via semantic tokens.
+   Tokens are scoped to .app[data-theme] so both themes render side by side
+   in this review document. In the shipping app they go on :root with the
+   prefers-color-scheme pattern (see the Palette section).
+   ══════════════════════════════════════════════════════════════════════ */
+
+.app{
+  font-family:var(--font-sans);font-optical-sizing:auto;font-synthesis:none;
+  font-feature-settings:"cv08" 1,"cv11" 1,"ss03" 1;
+  background:var(--surface-base);color:var(--text-primary);
+  user-select:none;-webkit-tap-highlight-color:transparent;
+  width:900px;height:700px;display:flex;flex-direction:column;overflow:hidden;
+  border-radius:var(--radius-lg);position:relative;
+  box-shadow:var(--elev-4);
+}
+.app.is-wide{width:1440px}
+.app *{box-sizing:border-box}
+.app button,.app .btn,.app .chip,.app [role=button]{cursor:default}
+.app .path,.app .size,.app .error-plate,.app .t-prose{user-select:text}
+.app :focus{outline:none}
+.app .is-focused{outline:var(--focus-ring-w) solid var(--focus-ring);outline-offset:var(--focus-ring-offset);border-radius:inherit}
+.app svg{display:block}
+.app .mono,.app code,.app .path{font-family:var(--font-mono);font-variant-ligatures:none;font-feature-settings:"calt" 0,"liga" 0,"zero" 1}
+
+/* ── Icons ── */
+.icon{width:16px;height:16px;flex:none;display:block;fill:none;stroke:currentColor;stroke-width:1.5;stroke-linecap:round;stroke-linejoin:round}
+.icon-sm{width:14px;height:14px;stroke-width:1.6}
+.icon-lg{width:20px;height:20px;stroke-width:1.4}
+.icon-xl{width:24px;height:24px;stroke-width:1.35}
+.icon [data-solid]{fill:currentColor;stroke:none}
+
+/* ══════ RAIL ══════ */
+.rail{width:var(--rail-w);flex:none;background:var(--surface-sunken);border-right:1px solid var(--border-subtle);
+  display:flex;flex-direction:column;align-items:center;padding:12px 0 16px;gap:4px}
+.rail-mark{width:24px;height:24px;color:var(--accent);margin-bottom:20px}
+.rail-btn{width:40px;height:40px;border:0;background:transparent;color:var(--text-tertiary);
+  border-radius:var(--radius-sm);display:flex;align-items:center;justify-content:center;position:relative;
+  transition:background-color var(--dur-2) var(--ease-out),color var(--dur-2) var(--ease-out)}
+.rail-btn:hover{background:var(--surface-hover);color:var(--text-secondary)}
+.rail-btn[aria-current=page]{background:var(--accent-subtle);color:var(--accent-text);box-shadow:inset 2px 0 0 var(--accent)}
+.rail-badge{position:absolute;top:7px;right:7px;width:6px;height:6px;padding:0;border-radius:var(--radius-full);
+  background:var(--accent);font-size:0;text-indent:-999px;overflow:hidden;
+  box-shadow:0 0 0 2px var(--surface-sunken)}
+.rail-spacer{flex:1}
+.rail-disk{width:40px;display:flex;flex-direction:column;align-items:center;gap:5px;color:var(--text-tertiary)}
+.rail-disk-bar{width:4px;height:36px;border-radius:2px;background:var(--track);overflow:hidden;
+  display:flex;flex-direction:column;justify-content:flex-end}
+.rail-disk-used,.rail-disk-recl{display:block;width:100%;flex:none}
+.rail-disk-used{background:var(--text-quaternary)}
+.rail-disk-recl{background:var(--accent)}
+
+/* ══════ COMMAND BAR ══════ */
+.cmdbar{height:var(--header-h);flex:none;display:flex;align-items:center;gap:12px;
+  padding:0 var(--pad-window-x);border-bottom:1px solid var(--border-subtle);background:var(--surface-base)}
+.cmdbar-titles{flex:1;min-width:0}
+.cmdbar-title{color:var(--text-primary)}
+.cmdbar-sub{color:var(--text-tertiary);margin-top:1px;font-variant-numeric:tabular-nums lining-nums}
+.cmdbar-actions{display:flex;align-items:center;gap:8px;flex:none}
+
+/* ══════ BUTTONS ══════ */
+.btn{display:inline-flex;align-items:center;justify-content:center;gap:var(--gap-icon-text);
+  height:var(--ctl-h-md);padding:0 var(--btn-pad-md);border-radius:var(--radius-sm);border:1px solid transparent;
+  font:540 13px/1 var(--font-sans);letter-spacing:-0.004em;white-space:nowrap;
+  transition:background-color var(--dur-2) var(--ease-out),border-color var(--dur-2) var(--ease-out),color var(--dur-2) var(--ease-out),box-shadow var(--dur-2) var(--ease-out)}
+.btn:hover{transition-duration:var(--dur-1)}
+.btn:active{transform:scale(.985);transition-duration:60ms}
+.btn .icon{width:14px;height:14px}
+.btn-sm{height:var(--ctl-h-sm);padding:0 var(--btn-pad-sm);font-size:12px}
+.btn-lg{height:var(--ctl-h-lg);padding:0 var(--btn-pad-lg);font-size:13px}
+.btn-primary{background:var(--accent);color:var(--accent-on);box-shadow:var(--edge-highlight)}
+.btn-primary:hover{background:var(--accent-hover)}
+.btn-secondary{background:var(--surface-raised);color:var(--text-primary);border-color:var(--border-default)}
+.btn-secondary:hover{background:var(--surface-hover);border-color:var(--border-strong)}
+.btn-ghost{background:transparent;color:var(--text-secondary)}
+.btn-ghost:hover{background:var(--surface-hover);color:var(--text-primary)}
+.btn-danger{background:var(--danger-solid);color:var(--danger-on);box-shadow:var(--edge-highlight)}
+.btn-danger:hover{background:var(--danger-solid-hover)}
+.btn[disabled],.btn.is-disabled{opacity:.45;pointer-events:none}
+.iconbtn{width:var(--iconbtn-md);height:var(--iconbtn-md);padding:0;display:inline-flex;align-items:center;justify-content:center;
+  border-radius:var(--radius-sm);border:1px solid transparent;background:transparent;color:var(--text-tertiary);
+  transition:background-color var(--dur-2) var(--ease-out),color var(--dur-2) var(--ease-out)}
+.iconbtn:hover{background:var(--surface-hover);color:var(--text-primary)}
+.iconbtn.is-active{background:var(--accent-subtle);color:var(--accent-text)}
+.kbd{display:inline-flex;align-items:center;height:16px;padding:0 4px;margin-left:2px;border-radius:var(--radius-xs);
+  background:var(--kbd-bg);color:var(--kbd-text);font:500 10px/1 var(--font-sans);border:1px solid var(--border-subtle)}
+
+/* ══════ BADGES / CHIPS / PILLS ══════ */
+.badge{display:inline-flex;align-items:center;gap:3px;height:var(--badge-h);padding:1px var(--badge-pad-x) 0;
+  border-radius:var(--radius-xs);font:600 10px/1 var(--font-sans);letter-spacing:.045em;text-transform:uppercase;white-space:nowrap}
+.badge::after{content:'';display:inline-block;width:.045em}
+.badge-caution{background:var(--caution-bg);color:var(--caution-text);box-shadow:inset 0 0 0 1px var(--caution-border)}
+.badge-danger{background:var(--danger-bg);color:var(--danger-text);box-shadow:inset 0 0 0 1px var(--danger-border)}
+.badge-safe{background:var(--safe-bg);color:var(--safe-text);box-shadow:inset 0 0 0 1px var(--safe-border)}
+.badge-neutral{background:var(--surface-raised);color:var(--text-tertiary);box-shadow:inset 0 0 0 1px var(--border-subtle)}
+.badge-accent{background:var(--accent-subtle);color:var(--accent-text)}
+.countpill{display:inline-flex;align-items:center;justify-content:center;height:var(--countpill-h);min-width:16px;
+  padding:0 var(--countpill-pad-x);border-radius:var(--radius-xs);background:var(--surface-raised);
+  color:var(--text-tertiary);font:520 10px/1 var(--font-sans);font-variant-numeric:tabular-nums}
+.chip{display:inline-flex;align-items:center;gap:var(--gap-icon-text);height:var(--chip-h);padding:0 var(--chip-pad-x);
+  border-radius:var(--radius-sm);border:1px solid var(--border-default);background:var(--surface-raised);
+  color:var(--text-secondary);font:500 12px/1 var(--font-sans);white-space:nowrap;
+  transition:background-color var(--dur-2) var(--ease-out),border-color var(--dur-2) var(--ease-out),color var(--dur-2) var(--ease-out)}
+.chip:hover{border-color:var(--border-strong);color:var(--text-primary)}
+.chip.is-active{background:var(--accent-subtle);border-color:var(--accent-border);color:var(--accent-text)}
+.chip .icon{width:13px;height:13px}
+.dot{width:var(--dot);height:var(--dot);border-radius:var(--radius-full);flex:none;background:var(--eco-accent)}
+.dot-lg{width:8px;height:8px}
+
+/* ══════ SUMMARY STRIP ══════ */
+.summary{height:64px;flex:none;display:flex;align-items:center;gap:20px;padding:0 var(--pad-window-x);
+  border-bottom:1px solid var(--border-subtle);background:var(--surface-base)}
+.summary-headline{width:250px;flex:none}
+.summary-headline .metric{color:var(--text-primary);display:flex;align-items:baseline;gap:4px}
+.summary-headline .sub{color:var(--text-tertiary);margin-top:2px;font-variant-numeric:tabular-nums}
+.summary-disk{flex:1;min-width:0}
+.diskmeter{height:8px;border-radius:var(--radius-xs);background:var(--track);overflow:hidden;display:flex}
+.diskmeter .seg-used{background:var(--text-quaternary)}
+.diskmeter .seg-recl{background:var(--accent)}
+.diskmeter .seg-free{background:transparent}
+.summary-disk .legend{margin-top:6px;color:var(--text-tertiary);display:flex;gap:12px;font-variant-numeric:tabular-nums}
+.summary-disk .legend b{color:var(--text-secondary);font-weight:560}
+.summary-action{width:240px;flex:none;display:flex;flex-direction:column;align-items:flex-end;gap:4px}
+.summary-action .selinfo{color:var(--text-secondary);font-variant-numeric:tabular-nums}
+.summary-action .selinfo b{color:var(--text-primary);font-weight:600}
+
+/* ══════ TOOLBAR ══════ */
+.toolbar{height:var(--toolbar-h);flex:none;display:flex;align-items:center;gap:8px;padding:0 var(--pad-window-x);
+  border-bottom:1px solid var(--border-subtle);background:var(--surface-base)}
+.toolbar-sep{width:1px;height:16px;background:var(--border-subtle);margin:0 var(--space-2)}
+.search{display:flex;align-items:center;gap:6px;height:var(--input-h-sm);flex:1;max-width:320px;
+  padding:0 9px;border-radius:var(--radius-sm);border:1px solid var(--border-default);background:var(--surface-sunken);color:var(--text-tertiary)}
+.search input{border:0;background:transparent;outline:none;color:var(--text-primary);font:450 12px/1 var(--font-sans);flex:1;min-width:0}
+.search input::placeholder{color:var(--text-quaternary)}
+.token{display:inline-flex;align-items:center;gap:4px;height:18px;padding:0 5px;border-radius:var(--radius-xs);
+  background:var(--accent-subtle);color:var(--accent-text);font:520 11px/1 var(--font-sans);white-space:nowrap}
+.token .x{opacity:.6}
+
+/* ══════ TABLE ══════ */
+.tablehead{height:28px;flex:none;display:flex;align-items:center;padding:0 var(--pad-window-x);
+  border-bottom:1px solid var(--border-subtle);background:var(--surface-base);color:var(--text-tertiary)}
+.listwrap{flex:1;min-height:0;overflow:hidden;position:relative;background:var(--surface-base)}
+.list{height:100%;overflow-y:auto;padding-bottom:8px}
+
+.group-header{height:36px;display:flex;align-items:center;gap:10px;padding:0 var(--pad-window-x);
+  background:var(--surface-sunken);border-block:1px solid var(--border-subtle);margin-top:-1px;
+  position:sticky;top:0;z-index:2}
+.group-header .gname{color:var(--text-primary);font-weight:600}
+.group-header .gshare{width:100px;height:6px;border-radius:var(--radius-xs);background:var(--track);overflow:hidden;flex:none}
+.group-header .gshare i{display:block;height:100%;background:var(--eco-accent);border-radius:var(--radius-xs)}
+.group-header .gsize{width:84px;text-align:right;flex:none;color:var(--text-primary);font-weight:600;font-variant-numeric:tabular-nums}
+.group-header .spacer{flex:1}
+
+.item{display:flex;align-items:flex-start;gap:0;height:var(--row-h-comfortable);padding:0 var(--pad-window-x);
+  position:relative;border-bottom:1px solid var(--border-subtle);background:var(--surface-base);
+  transition:background-color var(--dur-2) var(--ease-out)}
+.item:hover{background:var(--surface-hover)}
+.item.is-selected{background:var(--selected-bg);box-shadow:inset 2px 0 0 var(--accent)}
+.item.is-focused{box-shadow:inset 0 0 0 2px var(--focus-ring)}
+.item::after{content:'';position:absolute;left:0;bottom:0;height:2px;width:calc(var(--size-ratio,0)*100%);
+  background:var(--eco-accent);opacity:.22;border-radius:0 1px 1px 0;pointer-events:none}
+.item-inner{display:flex;align-items:center;gap:0;width:100%;height:100%}
+.riskedge{width:4px;align-self:stretch;flex:none;margin-right:8px;border-radius:1px}
+.riskedge.safe{background:transparent}
+.riskedge.caution{background:var(--caution-solid)}
+.riskedge.danger{background:var(--danger-solid)}
+.item .cell-check{width:22px;flex:none;display:flex;align-items:center}
+.item .cell-main{flex:1;min-width:0;display:flex;flex-direction:column;justify-content:center;gap:1px;padding-right:12px}
+.item .line1{display:flex;align-items:center;gap:8px;min-width:0}
+.item .kindname{color:var(--text-primary);font:560 13px/18px var(--font-sans);letter-spacing:-0.003em;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}
+.item .projname{color:var(--text-tertiary);font:450 13px/18px var(--font-sans);white-space:nowrap}
+.item .line2{display:flex;align-items:center;gap:8px;min-width:0}
+.item .cell-stale{width:56px;flex:none;text-align:right;padding-right:12px;color:var(--text-tertiary);font-variant-numeric:tabular-nums}
+.item .cell-stale.is-stale{color:var(--caution-text)}
+.item .cell-mag{width:56px;flex:none;padding-right:12px}
+.magbar{display:block;height:4px;border-radius:2px;background:var(--track);overflow:hidden}
+.magbar i{display:block;height:100%;background:var(--eco-accent);border-radius:2px;opacity:.85}
+.item .cell-size{width:84px;flex:none;display:flex;justify-content:flex-end;padding-right:8px}
+.item .cell-chev{width:24px;flex:none;display:flex;align-items:center;justify-content:center;color:var(--text-quaternary)}
+.item:hover .cell-chev{color:var(--text-secondary)}
+
+.path{font:430 11px/15px var(--font-mono);letter-spacing:-.004em;white-space:nowrap;overflow:hidden;text-overflow:ellipsis;min-width:0}
+.path .s-root,.path .s-dim{color:var(--text-tertiary)}
+.path .s-sep,.path .s-gap{color:var(--text-quaternary)}
+.path .s-project{color:var(--text-secondary);font-weight:560}
+.path .s-leaf{color:var(--text-secondary);font-weight:500}
+
+.size{display:inline-flex;align-items:baseline;gap:3px;justify-content:flex-end;font-variant-numeric:tabular-nums lining-nums}
+.size-num{font:560 13px/18px var(--font-sans);letter-spacing:-.003em;color:var(--text-primary)}
+.size-unit{font:500 10px/18px var(--font-sans);letter-spacing:.02em;color:var(--text-tertiary);min-width:16px;text-align:left}
+.size[data-mag=xl] .size-num{font-size:15px;font-weight:620}
+.size[data-mag=lg] .size-num{font-size:14px;font-weight:620}
+.size[data-mag=sm] .size-num{color:var(--text-secondary);font-weight:450}
+.size[data-mag=unknown] .size-num{font:italic 450 12px/18px var(--font-sans);color:var(--text-quaternary)}
+
+/* ── checkbox ── */
+.cb{width:var(--checkbox-size);height:var(--checkbox-size);border-radius:var(--radius-xs);
+  border:1px solid var(--border-strong);background:var(--surface-base);display:flex;align-items:center;justify-content:center;flex:none;
+  transition:background-color 90ms var(--ease-out),border-color 90ms var(--ease-out)}
+.cb .icon{width:11px;height:11px;stroke-width:2.2;color:var(--accent-on);opacity:0}
+.cb[aria-checked=true]{background:var(--accent);border-color:var(--accent)}
+.cb[aria-checked=true] .icon{opacity:1}
+.cb[aria-checked=mixed]{background:var(--accent);border-color:var(--accent)}
+.cb[aria-checked=mixed] .icon{opacity:1}
+.cb.is-disabled{opacity:.4}
+
+/* ══════ STATUS BAR ══════ */
+.statusbar{height:var(--statusbar-h);flex:none;display:flex;align-items:center;gap:12px;padding:0 var(--pad-window-x);
+  border-top:1px solid var(--border-subtle);background:var(--surface-sunken);color:var(--text-tertiary);
+  font-variant-numeric:tabular-nums;white-space:nowrap;overflow:hidden}
+.statusbar>*{flex:none}
+.statusbar .spacer{flex:1}
+.statusbar .issues{display:inline-flex;align-items:center;gap:5px;color:var(--caution-text)}
+
+/* ══════ PROGRESS ══════ */
+.progress{height:var(--progressbar-h);background:var(--track);overflow:hidden;position:relative;flex:none}
+.progress-indeterminate::after{content:'';position:absolute;inset-block:0;left:0;width:32%;
+  background:var(--accent);border-radius:1px;animation:prog-slide var(--dur-loop-progress) var(--ease-standard) infinite}
+@keyframes prog-slide{0%{transform:translateX(-105%) scaleX(.55)}55%{transform:translateX(120%) scaleX(1)}100%{transform:translateX(320%) scaleX(.55)}}
+.progress-determinate>i{display:block;height:100%;background:var(--accent);width:calc(var(--pct)*1%);transition:width var(--dur-4) var(--ease-linear)}
+.bigbar{flex:none;height:8px;border-radius:var(--radius-xs);background:var(--track);overflow:hidden}
+.bigbar>i{display:block;height:100%;background:var(--accent);border-radius:var(--radius-xs);width:calc(var(--pct)*1%)}
+
+/* ══════ SCANNER TICKER ══════ */
+.ticker{height:28px;flex:none;display:flex;align-items:center;gap:14px;padding:0 var(--pad-window-x);
+  border-bottom:1px solid var(--border-subtle);background:var(--surface-sunken);overflow:hidden}
+.ticker-item{display:inline-flex;align-items:center;gap:5px;white-space:nowrap;color:var(--text-quaternary);font:500 11px/1 var(--font-sans)}
+.ticker-item.is-done{color:var(--text-secondary)}
+.ticker-item.is-running{color:var(--accent-text)}
+.ticker-item .icon{width:12px;height:12px}
+.spinring{width:12px;height:12px;flex:none;border-radius:50%;border:1.5px solid var(--accent);border-right-color:transparent;
+  animation:void-spin var(--dur-loop-spin) linear infinite}
+@keyframes void-spin{to{transform:rotate(360deg)}}
+
+/* ══════ DRAWER ══════ */
+.drawer{width:var(--drawer-w);flex:none;border-left:1px solid var(--border-subtle);background:var(--surface-raised);
+  display:flex;flex-direction:column;overflow:hidden}
+/* <1280: overlay + scrim. >=1280 it becomes an inline column instead. */
+.drawer.is-overlay{position:absolute;top:0;right:0;bottom:0;z-index:15;box-shadow:var(--shadow-3)}
+.drawer-scrim{position:absolute;inset:0;z-index:14;background:var(--surface-scrim)}
+.drawer-head{height:44px;flex:none;display:flex;align-items:center;gap:6px;padding:0 12px 0 16px;border-bottom:1px solid var(--border-subtle)}
+.drawer-body{flex:1;overflow-y:auto}
+.drawer-sect{padding:14px 16px;border-bottom:1px solid var(--border-subtle)}
+.drawer-sect .t-overline{color:var(--text-quaternary);margin-bottom:10px}
+.drawer-foot{flex:none;padding:12px 16px;border-top:1px solid var(--border-subtle);display:flex;gap:8px;background:var(--surface-raised)}
+.facts{display:grid;grid-template-columns:88px 1fr;row-gap:6px;column-gap:12px;align-items:baseline}
+.facts dt{color:var(--text-tertiary)}
+.facts dd{color:var(--text-primary);margin:0;font-variant-numeric:tabular-nums}
+.pathplate{padding:8px 10px;border-radius:var(--radius-sm);border:1px solid var(--border-subtle);background:var(--surface-sunken);
+  font:430 11px/16px var(--font-mono);color:var(--text-secondary);word-break:break-all;white-space:normal;user-select:text}
+.action-opt{display:flex;gap:10px;padding:10px 0;border-bottom:1px solid var(--border-subtle)}
+.action-opt:last-child{border-bottom:0}
+.radio{width:14px;height:14px;border-radius:50%;border:1px solid var(--border-strong);flex:none;margin-top:2px;
+  display:flex;align-items:center;justify-content:center;background:var(--surface-base)}
+.radio.is-on{border-color:var(--accent);border-width:4px;background:var(--surface-base)}
+.action-opt .body{flex:1;min-width:0}
+.action-opt .row1{display:flex;align-items:center;gap:8px;margin-bottom:2px}
+.action-opt .lbl{color:var(--text-primary);font:540 13px/18px var(--font-sans)}
+.action-opt .desc{color:var(--text-tertiary);font:450 12px/16px var(--font-sans);margin-bottom:4px}
+.cmdline{display:flex;align-items:flex-start;gap:6px;font:430 11px/16px var(--font-mono);color:var(--text-secondary);
+  background:var(--surface-sunken);border:1px solid var(--border-subtle);border-radius:var(--radius-xs);padding:4px 6px;word-break:break-all}
+.cmdline .glyph{color:var(--text-quaternary);flex:none}
+.outcome{margin-top:4px;color:var(--text-quaternary);font:450 11px/14px var(--font-sans)}
+.outcome .recoverable{color:var(--safe-text)}
+.safety-line{display:flex;gap:7px;align-items:flex-start;margin-bottom:6px;color:var(--text-secondary);font:450 12px/16px var(--font-sans)}
+.safety-line .icon{width:13px;height:13px;margin-top:1.5px;flex:none}
+.safety-line.ok .icon{color:var(--safe-text)}
+.safety-line.warn{color:var(--caution-text)}
+.safety-line.warn .icon{color:var(--caution-text)}
+
+/* ══════ MODAL ══════ */
+.scrim{position:absolute;inset:0;background:var(--scrim);display:flex;align-items:center;justify-content:center;z-index:20;border-radius:var(--radius-lg)}
+.modal{width:560px;max-height:600px;display:flex;flex-direction:column;background:var(--surface-overlay);
+  border:1px solid var(--border-subtle);border-radius:var(--radius-lg);box-shadow:var(--elev-4);overflow:hidden}
+.modal-head{padding:16px 20px;border-bottom:1px solid var(--border-subtle);display:flex;align-items:flex-start;gap:12px}
+.modal-head .h{flex:1}
+.modal-head .sub{color:var(--text-tertiary);margin-top:2px;font-variant-numeric:tabular-nums}
+.modal-body{flex:1;overflow-y:auto;padding:16px 20px}
+.modal-foot{padding:14px 20px;border-top:1px solid var(--border-subtle);display:flex;align-items:center;gap:10px;background:var(--surface-raised)}
+.modal-foot .spacer{flex:1}
+.effect-row{display:flex;align-items:center;gap:10px;height:32px;color:var(--text-primary)}
+.effect-row .icon{width:15px;height:15px;color:var(--text-tertiary);flex:none}
+.effect-row .txt{flex:1}
+.effect-row .amt{font-variant-numeric:tabular-nums;color:var(--text-secondary)}
+.attn-card{border:1px solid var(--border-default);border-radius:var(--radius-sm);background:var(--surface-sunken);max-height:158px;overflow-y:auto}
+.attn-item{padding:10px 12px;border-bottom:1px solid var(--border-subtle)}
+.attn-item:last-child{border-bottom:0}
+.attn-item .row1{display:flex;align-items:center;gap:8px;margin-bottom:3px}
+.attn-item .row1 .lbl{color:var(--text-primary);font:540 13px/18px var(--font-sans);flex:1}
+.attn-item .row1 .amt{font-variant-numeric:tabular-nums;color:var(--text-secondary);font-size:12px}
+.confirm-input{height:var(--input-h-lg);width:220px;padding:0 10px;border-radius:var(--radius-sm);
+  border:1px solid var(--border-strong);background:var(--surface-sunken);color:var(--text-primary);
+  font:430 13px/1 var(--font-mono);outline:none}
+.confirm-input::placeholder{color:var(--text-quaternary)}
+
+/* ══════ EMPTY / BANNER / PLATES ══════ */
+.state{display:flex;flex-direction:column;align-items:center;text-align:center;padding:56px 24px;user-select:none}
+.state .glyph{width:24px;height:24px;color:var(--text-quaternary);stroke-width:1.35}
+.state .title{margin-top:12px;font:600 14px/20px var(--font-sans);letter-spacing:-.008em;color:var(--text-primary)}
+.state .body{margin-top:4px;font:450 13px/20px var(--font-sans);letter-spacing:-.003em;color:var(--text-secondary);max-width:44ch;text-wrap:pretty}
+.state .actions{margin-top:16px;display:flex;gap:8px}
+.state .hint{margin-top:14px;font:450 11px/14px var(--font-sans);letter-spacing:.004em;color:var(--text-quaternary)}
+.state[data-size=sm]{padding:28px 16px}
+.error-plate{margin-top:12px;padding:8px 10px;text-align:left;border:1px solid var(--border-subtle);border-radius:var(--radius-sm);
+  background:var(--surface-sunken);font:430 11px/16px var(--font-mono);letter-spacing:-.004em;color:var(--text-secondary);
+  max-width:52ch;user-select:text;white-space:pre-wrap;overflow-wrap:anywhere}
+.banner{height:44px;flex:none;display:flex;align-items:center;gap:10px;padding:0 var(--pad-window-x);
+  border-bottom:1px solid var(--border-subtle);background:var(--caution-bg);color:var(--caution-text)}
+.banner.info{background:var(--accent-subtle);color:var(--accent-text)}
+.banner .txt{flex:1;color:var(--text-primary);font:450 13px/18px var(--font-sans)}
+.card{border:1px solid var(--border-subtle);border-radius:var(--radius-md);background:var(--surface-raised);padding:var(--pad-card)}
+
+/* ══════ SETTINGS ══════ */
+.seg{display:inline-flex;height:var(--ctl-h-md);padding:2px;border-radius:var(--radius-sm);background:var(--surface-sunken);border:1px solid var(--border-subtle);gap:2px}
+.seg button{height:100%;padding:0 11px;border:0;border-radius:3px;background:transparent;color:var(--text-tertiary);
+  font:520 12px/1 var(--font-sans);display:inline-flex;align-items:center;gap:6px}
+.seg button.is-on{background:var(--surface-raised);color:var(--text-primary);box-shadow:var(--elev-1)}
+.form{padding:20px var(--pad-window-x);max-width:560px}
+.field{margin-bottom:22px}
+.field .lbl{color:var(--text-primary);margin-bottom:2px}
+.field .help{color:var(--text-tertiary);margin-bottom:8px}
+.pathlist{border:1px solid var(--border-subtle);border-radius:var(--radius-sm);overflow:hidden;background:var(--surface-sunken)}
+.pathrow{height:36px;display:flex;align-items:center;gap:8px;padding:0 10px;border-bottom:1px solid var(--border-subtle);color:var(--text-primary)}
+.pathrow:last-child{border-bottom:0}
+.pathrow .p{flex:1;font:430 12px/1 var(--font-mono);color:var(--text-secondary)}
+.pathrow.is-locked{color:var(--text-tertiary)}
+.toggle{width:32px;height:18px;border-radius:var(--radius-full);background:var(--track);position:relative;flex:none;
+  transition:background-color var(--dur-2) var(--ease-out)}
+.toggle i{position:absolute;top:2px;left:2px;width:14px;height:14px;border-radius:50%;background:var(--toggle-knob);
+  transition:transform var(--dur-2) var(--ease-out);box-shadow:var(--elev-1)}
+.toggle.is-on{background:var(--accent)}
+.toggle.is-on i{transform:translateX(14px)}
+.ecorow{height:48px;display:flex;align-items:center;gap:10px;padding:0 10px;border-bottom:1px solid var(--border-subtle)}
+.ecorow:last-child{border-bottom:0}
+.ecorow .nm{flex:1;color:var(--text-primary)}
+.ecorow .stat{color:var(--text-tertiary);font-variant-numeric:tabular-nums;text-align:right}
+.slider{height:4px;border-radius:2px;background:var(--track);position:relative;margin:10px 0}
+.slider i{display:block;height:100%;border-radius:2px;background:var(--accent);width:calc(var(--pct)*1%)}
+.slider b{position:absolute;top:50%;left:calc(var(--pct)*1%);width:14px;height:14px;margin:-7px 0 0 -7px;border-radius:50%;
+  background:var(--toggle-knob);box-shadow:var(--elev-2),0 0 0 1px var(--border-strong)}
+.settings-nav{width:180px;flex:none;border-right:1px solid var(--border-subtle);padding:12px 8px;background:var(--surface-sunken)}
+.settings-nav a{display:flex;align-items:center;height:var(--sidebar-item-h);padding:0 10px;border-radius:var(--radius-sm);
+  color:var(--text-secondary);text-decoration:none;font:500 13px/1 var(--font-sans);margin-bottom:2px}
+.settings-nav a.is-on{background:var(--accent-subtle);color:var(--accent-text);font-weight:560}
+
+/* ══════ HISTORY ══════ */
+.stattile{flex:1;height:72px;border:1px solid var(--border-subtle);border-radius:var(--radius-md);background:var(--surface-raised);
+  padding:10px 12px;display:flex;flex-direction:column;justify-content:space-between}
+.stattile .k{color:var(--text-quaternary)}
+.stattile .v{color:var(--text-primary)}
+.spark{display:flex;align-items:flex-end;gap:3px;height:64px}
+.spark i{flex:1;background:var(--accent);border-radius:1.5px 1.5px 0 0;opacity:.75;min-height:2px}
+.spark i.hi{opacity:1}
+.hrow{height:44px;display:flex;align-items:center;gap:12px;padding:0 var(--pad-window-x);border-bottom:1px solid var(--border-subtle);
+  background:var(--surface-base)}
+.hrow:hover{background:var(--surface-hover)}
+.hrow .d{width:150px;color:var(--text-primary)}
+.hrow .n{width:60px;text-align:right;color:var(--text-secondary);font-variant-numeric:tabular-nums}
+.hrow .f{width:90px;text-align:right;color:var(--text-primary);font-weight:560;font-variant-numeric:tabular-nums}
+.hrow .r{flex:1;color:var(--text-tertiary);padding-left:16px}
+
+/* ══════ POPOVER / TRAY ══════ */
+.popover{width:280px;background:var(--surface-overlay);border:1px solid var(--border-subtle);border-radius:var(--radius-md);
+  box-shadow:var(--elev-3);overflow:hidden}
+.pop-item{display:flex;align-items:center;gap:10px;height:44px;padding:0 12px;border-bottom:1px solid var(--border-subtle)}
+.pop-item:last-child{border-bottom:0}
+.tray{width:320px;background:var(--surface-overlay);border:1px solid var(--border-subtle);border-radius:var(--radius-lg);
+  box-shadow:var(--elev-4);overflow:hidden;font-family:var(--font-sans);color:var(--text-primary)}
+.tray-head{height:40px;display:flex;align-items:center;gap:8px;padding:0 12px;border-bottom:1px solid var(--border-subtle)}
+.tray-sect{padding:12px}
+.tray-eco{height:28px;display:flex;align-items:center;gap:8px}
+.tray-eco .nm{flex:1;color:var(--text-secondary);font:450 12px/1 var(--font-sans)}
+.tray-eco .ct{color:var(--text-quaternary);font:450 11px/1 var(--font-sans);font-variant-numeric:tabular-nums}
+.tray-eco .sz{width:64px;text-align:right;color:var(--text-primary);font:560 12px/1 var(--font-sans);font-variant-numeric:tabular-nums}
+
+/* ══════ WORDMARK ══════ */
+.void-lockup{display:inline-flex;align-items:center;gap:8px;user-select:none}
+.void-mark{color:var(--accent);flex:none}
+.void-word{font-family:var(--font-brand);font-size:16px;font-weight:600;line-height:20px;letter-spacing:-.032em;
+  color:var(--text-primary);margin-top:1px}
+.void-word .v{letter-spacing:-.044em}
+
+/* ══════ SKELETON ══════ */
+@keyframes skeleton-pulse{0%,100%{opacity:1}50%{opacity:.42}}
+.skeleton{background:var(--surface-raised);border-radius:var(--radius-xs);animation:skeleton-pulse var(--dur-loop-skeleton) cubic-bezier(.4,0,.6,1) infinite}
+</style>
+
+<style>
+/* ══════════════════════════════════════════════════════════════════════
+   REVIEW DOCUMENT CHROME — the page that presents the design.
+   Deliberately neutral so the app mockups carry all the color.
+   ══════════════════════════════════════════════════════════════════════ */
+
+:root{
+  --doc-bg:#08090c;--doc-panel:#0e1014;--doc-line:#1c1f26;--doc-line-2:#2a2e38;
+  --doc-fg:#e8eaf0;--doc-fg-2:#9aa1b2;--doc-fg-3:#646c7e;--doc-accent:#4d8dff;
+  --doc-measure:#3d4557;
+}
+@media (prefers-color-scheme:light){
+  :root:not([data-doc="dark"]){
+    --doc-bg:#f7f8fa;--doc-panel:#ffffff;--doc-line:#e4e7ec;--doc-line-2:#cfd4dd;
+    --doc-fg:#14161c;--doc-fg-2:#565e70;--doc-fg-3:#8b93a5;--doc-accent:#1f6feb;
+    --doc-measure:#b3bac7;
+  }
+}
+:root[data-doc="light"]{
+  --doc-bg:#f7f8fa;--doc-panel:#ffffff;--doc-line:#e4e7ec;--doc-line-2:#cfd4dd;
+  --doc-fg:#14161c;--doc-fg-2:#565e70;--doc-fg-3:#8b93a5;--doc-accent:#1f6feb;
+  --doc-measure:#b3bac7;
+}
+
+body{margin:0;background:var(--doc-bg);color:var(--doc-fg);
+  font-family:var(--font-sans);font-optical-sizing:auto;
+  -webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}
+
+.doc{max-width:1560px;margin:0 auto;padding:0 40px 160px}
+
+/* ── Masthead ── */
+.masthead{padding:88px 0 56px;border-bottom:1px solid var(--doc-line)}
+.masthead .eyebrow{font:620 10px/12px var(--font-sans);letter-spacing:.14em;text-transform:uppercase;color:var(--doc-fg-3)}
+.masthead h1{margin:20px 0 0;font:620 56px/56px var(--font-sans);letter-spacing:-.035em}
+.masthead .lede{margin:18px 0 0;max-width:62ch;font:450 16px/26px var(--font-sans);letter-spacing:-.006em;color:var(--doc-fg-2)}
+.masthead .meta{margin-top:32px;display:flex;flex-wrap:wrap;gap:0;border:1px solid var(--doc-line);border-radius:8px;overflow:hidden}
+.masthead .meta div{padding:12px 18px;border-right:1px solid var(--doc-line);flex:1;min-width:150px}
+.masthead .meta div:last-child{border-right:0}
+.masthead .meta dt{font:620 9px/12px var(--font-sans);letter-spacing:.12em;text-transform:uppercase;color:var(--doc-fg-3)}
+.masthead .meta dd{margin:5px 0 0;font:500 13px/18px var(--font-sans);color:var(--doc-fg)}
+
+/* ── Section structure ── */
+.sect{padding-top:88px}
+.sect-head{display:flex;align-items:baseline;gap:16px;padding-bottom:6px;border-bottom:1px solid var(--doc-line-2)}
+.sect-num{font:430 12px/1 var(--font-mono);color:var(--doc-fg-3);letter-spacing:.04em;flex:none;width:34px}
+.sect-head h2{margin:0;font:600 26px/32px var(--font-sans);letter-spacing:-.022em;flex:1}
+.sect-head .tag{font:430 11px/1 var(--font-mono);color:var(--doc-fg-3)}
+.sect-intro{margin:18px 0 0 50px;max-width:70ch;font:450 14px/23px var(--font-sans);letter-spacing:-.004em;color:var(--doc-fg-2)}
+.sect-intro strong{color:var(--doc-fg);font-weight:560}
+.sect-intro code{font:430 12.5px/1 var(--font-mono);background:var(--doc-panel);border:1px solid var(--doc-line);
+  border-radius:3px;padding:1px 4px;color:var(--doc-fg)}
+.sub{margin:56px 0 0 50px}
+.sub h3{margin:0 0 6px;font:600 16px/22px var(--font-sans);letter-spacing:-.012em}
+.sub p{margin:0;max-width:70ch;font:450 13.5px/22px var(--font-sans);color:var(--doc-fg-2)}
+.sub p code,.note code{font:430 12px/1 var(--font-mono);background:var(--doc-panel);border:1px solid var(--doc-line);border-radius:3px;padding:1px 4px;color:var(--doc-fg)}
+
+/* ── Screen presentation ── */
+.screens{margin-top:32px;display:flex;flex-direction:column;gap:80px}
+.screen{display:grid;grid-template-columns:1fr;gap:24px}
+.screen-head{display:flex;align-items:baseline;gap:12px;flex-wrap:wrap}
+.screen-id{font:430 11px/1 var(--font-mono);color:var(--doc-accent);letter-spacing:.06em;
+  border:1px solid var(--doc-line-2);border-radius:3px;padding:4px 7px}
+.screen-head h4{margin:0;font:600 18px/24px var(--font-sans);letter-spacing:-.014em}
+.screen-head .dims{font:430 11px/1 var(--font-mono);color:var(--doc-fg-3);margin-left:auto}
+.screen-note{max-width:78ch;font:450 13.5px/22px var(--font-sans);color:var(--doc-fg-2)}
+.screen-note strong{color:var(--doc-fg);font-weight:560}
+.screen-note code{font:430 12px/1 var(--font-mono);background:var(--doc-panel);border:1px solid var(--doc-line);border-radius:3px;padding:1px 4px;color:var(--doc-fg)}
+
+.pair{display:flex;gap:32px;flex-wrap:wrap;align-items:flex-start}
+.pane{display:flex;flex-direction:column;gap:10px}
+.pane-label{display:flex;align-items:center;gap:8px;font:620 9px/12px var(--font-sans);letter-spacing:.12em;
+  text-transform:uppercase;color:var(--doc-fg-3)}
+.pane-label::before{content:'';width:8px;height:8px;border-radius:2px;background:var(--pl);border:1px solid var(--doc-line-2)}
+.pane-label.dark{--pl:#0b0d11}
+.pane-label.light{--pl:#ffffff}
+.frame{position:relative}
+
+/* window chrome */
+.oschrome{border-radius:var(--radius-lg);overflow:hidden;box-shadow:0 24px 64px -20px rgb(0 0 0/.55),0 0 0 1px rgb(255 255 255/.06)}
+:root[data-doc=light] .oschrome,
+:root:not([data-doc=dark]) .oschrome{box-shadow:0 24px 64px -22px rgb(16 18 27/.28),0 0 0 1px rgb(16 18 27/.10)}
+@media (prefers-color-scheme:dark){:root:not([data-doc=light]) .oschrome{box-shadow:0 24px 64px -20px rgb(0 0 0/.55),0 0 0 1px rgb(255 255 255/.06)}}
+.titlebar{height:28px;display:flex;align-items:center;padding:0 12px;gap:8px;
+  background:var(--surface-sunken);border-bottom:1px solid var(--border-subtle)}
+.tl{display:flex;gap:7px}
+.tl i{width:11px;height:11px;border-radius:50%;display:block}
+.tl i:nth-child(1){background:#ff5f57}.tl i:nth-child(2){background:#febc2e}.tl i:nth-child(3){background:#28c840}
+.titlebar .tt{flex:1;text-align:center;font:500 11px/1 var(--font-sans);color:var(--text-tertiary);
+  margin-right:46px;letter-spacing:-.002em}
+
+/* measure annotations */
+.measured{position:relative}
+.measure{position:absolute;display:flex;align-items:center;justify-content:center;pointer-events:none;
+  font:430 9.5px/1 var(--font-mono);color:var(--doc-measure);letter-spacing:.02em;z-index:5}
+.measure-v{width:16px;flex-direction:column}
+.measure-v::before{content:'';position:absolute;left:50%;top:0;bottom:0;width:1px;background:var(--doc-measure);opacity:.5}
+.measure-v span{background:var(--doc-bg);padding:3px 0;position:relative;writing-mode:vertical-rl}
+.measure-h{height:16px}
+.measure-h::before{content:'';position:absolute;top:50%;left:0;right:0;height:1px;background:var(--doc-measure);opacity:.5}
+.measure-h span{background:var(--doc-bg);padding:0 5px;position:relative}
+
+/* callouts */
+.callouts{list-style:none;margin:0;padding:0;display:flex;flex-direction:column;gap:9px}
+.callouts li{display:flex;gap:10px;font:450 12.5px/19px var(--font-sans);color:var(--doc-fg-2);max-width:60ch}
+.callouts b{flex:none;width:18px;height:18px;border-radius:50%;background:var(--doc-panel);border:1px solid var(--doc-line-2);
+  color:var(--doc-fg);font:600 10px/16px var(--font-sans);text-align:center}
+.callouts strong{color:var(--doc-fg);font-weight:560}
+.callouts code{font:430 11.5px/1 var(--font-mono);background:var(--doc-panel);border:1px solid var(--doc-line);border-radius:3px;padding:1px 4px;color:var(--doc-fg)}
+
+/* ── Spec tables ── */
+.spec{width:100%;border-collapse:collapse;margin-top:16px;font:450 12.5px/18px var(--font-sans)}
+.spec th{text-align:left;padding:8px 12px;border-bottom:1px solid var(--doc-line-2);color:var(--doc-fg-3);
+  font:620 9px/12px var(--font-sans);letter-spacing:.1em;text-transform:uppercase;white-space:nowrap;vertical-align:bottom}
+.spec td{padding:9px 12px;border-bottom:1px solid var(--doc-line);color:var(--doc-fg-2);vertical-align:top}
+.spec tr:hover td{background:var(--doc-panel)}
+.spec td:first-child{color:var(--doc-fg);font-weight:520}
+.spec code,.spec .m{font:430 11.5px/16px var(--font-mono);color:var(--doc-fg)}
+.spec .num{font-variant-numeric:tabular-nums;text-align:right;white-space:nowrap}
+.spec .ok{color:#2ea043}.spec .bad{color:#e5534b}
+:root[data-doc=light] .spec .ok,:root:not([data-doc=dark]) .spec .ok{color:#1a7f37}
+:root[data-doc=light] .spec .bad,:root:not([data-doc=dark]) .spec .bad{color:#cf222e}
+@media (prefers-color-scheme:dark){
+  :root:not([data-doc=light]) .spec .ok{color:#2ea043}
+  :root:not([data-doc=light]) .spec .bad{color:#e5534b}
+}
+
+/* ── Notes ── */
+.note{margin-top:20px;padding:14px 16px 14px 18px;border-left:2px solid var(--doc-line-2);
+  background:var(--doc-panel);border-radius:0 6px 6px 0;font:450 13px/21px var(--font-sans);color:var(--doc-fg-2);max-width:76ch}
+.note strong{color:var(--doc-fg);font-weight:560}
+.note.warn{border-left-color:#d29922}
+.note.bug{border-left-color:#e5534b}
+
+/* ── Swatches ── */
+.swatches{display:grid;grid-template-columns:repeat(auto-fill,minmax(132px,1fr));gap:10px;margin-top:18px}
+.sw{border:1px solid var(--doc-line);border-radius:7px;overflow:hidden;background:var(--doc-panel)}
+.sw .chip-c{height:56px;display:block}
+.sw .meta{padding:8px 9px}
+.sw .nm{font:520 11px/14px var(--font-sans);color:var(--doc-fg);word-break:break-all}
+.sw .hex{font:430 10.5px/14px var(--font-mono);color:var(--doc-fg-3);text-transform:uppercase;margin-top:2px}
+.ramp{display:flex;border-radius:6px;overflow:hidden;border:1px solid var(--doc-line);margin-top:8px}
+.ramp i{flex:1;height:44px;position:relative}
+.ramp i span{position:absolute;inset:auto 0 3px;text-align:center;font:430 8.5px/1 var(--font-mono);opacity:.75}
+
+/* ── Component gallery ── */
+.gallery{margin-top:20px;border:1px solid var(--doc-line);border-radius:10px;overflow:hidden}
+.gal-row{display:grid;grid-template-columns:190px 1fr;border-bottom:1px solid var(--doc-line)}
+.gal-row:last-child{border-bottom:0}
+.gal-k{padding:16px;border-right:1px solid var(--doc-line);background:var(--doc-panel)}
+.gal-k .n{font:560 13px/18px var(--font-sans);color:var(--doc-fg)}
+.gal-k .d{margin-top:3px;font:450 11.5px/16px var(--font-sans);color:var(--doc-fg-3)}
+.gal-v{padding:18px 16px;display:flex;flex-wrap:wrap;gap:14px;align-items:center}
+.gal-v.stack{flex-direction:column;align-items:stretch}
+.gal-v.stack>*{width:100%}
+.gal-state{display:flex;flex-direction:column;gap:7px;align-items:flex-start}
+.gal-state .lb{font:430 9.5px/1 var(--font-mono);color:var(--doc-fg-3);letter-spacing:.03em}
+
+/* ── Type specimen ── */
+.typerow{display:grid;grid-template-columns:150px 1fr 200px;gap:20px;align-items:baseline;
+  padding:14px 0;border-bottom:1px solid var(--doc-line)}
+.typerow .role{font:430 11px/16px var(--font-mono);color:var(--doc-accent)}
+.typerow .metrics{font:430 10.5px/16px var(--font-mono);color:var(--doc-fg-3);text-align:right;white-space:nowrap}
+
+/* ── TOC ── */
+.toc{margin-top:40px;display:grid;grid-template-columns:repeat(auto-fill,minmax(230px,1fr));gap:0;
+  border:1px solid var(--doc-line);border-radius:8px;overflow:hidden}
+.toc a{display:flex;gap:12px;align-items:baseline;padding:13px 16px;text-decoration:none;color:var(--doc-fg-2);
+  border-right:1px solid var(--doc-line);border-bottom:1px solid var(--doc-line);
+  font:450 13px/18px var(--font-sans);transition:background .12s,color .12s}
+.toc a:hover{background:var(--doc-panel);color:var(--doc-fg)}
+.toc a i{font:430 10.5px/18px var(--font-mono);color:var(--doc-fg-3);font-style:normal;flex:none}
+
+/* ── Doc toolbar ── */
+.doctools{position:fixed;bottom:16px;right:16px;z-index:100;display:flex;gap:6px;padding:6px;
+  background:var(--doc-panel);border:1px solid var(--doc-line-2);border-radius:9px;
+  box-shadow:0 8px 24px -8px rgb(0 0 0/.4);backdrop-filter:blur(12px)}
+.doctools button{height:28px;padding:0 11px;border:1px solid transparent;border-radius:6px;background:transparent;
+  color:var(--doc-fg-2);font:520 11.5px/1 var(--font-sans);cursor:pointer;display:inline-flex;align-items:center;gap:6px}
+.doctools button:hover{background:var(--doc-bg);color:var(--doc-fg)}
+.doctools button.on{background:var(--doc-accent);color:#fff}
+
+@media (max-width:1100px){
+  .doc{padding:0 20px 120px}
+  .masthead h1{font-size:40px;line-height:42px}
+  .sect-intro,.sub{margin-left:0}
+  .gal-row{grid-template-columns:1fr}
+  .gal-k{border-right:0;border-bottom:1px solid var(--doc-line)}
+  .typerow{grid-template-columns:1fr;gap:6px}
+  .typerow .metrics{text-align:left}
+}
+</style>
+
+<!-- ═══════════════ ICON SPRITE ═══════════════ -->
+<svg width="0" height="0" style="position:absolute" aria-hidden="true" focusable="false" shape-rendering="geometricPrecision"><defs>
+<symbol id="i-scan" viewBox="0 0 16 16"><path d="M8 1.5a6.5 6.5 0 1 0 6.5 6.5"/><path d="M8 4.5a3.5 3.5 0 1 0 3.5 3.5"/><path d="M8 8 12.6 3.4"/><circle cx="8" cy="8" r=".95" data-solid/></symbol>
+<symbol id="i-stop" viewBox="0 0 16 16"><rect x="3.25" y="3.25" width="9.5" height="9.5" rx="1.75"/></symbol>
+<symbol id="i-trash" viewBox="0 0 16 16"><path d="M2.6 4.1h10.8"/><path d="M6.4 4.1V2.85a.85.85 0 0 1 .85-.85h1.5a.85.85 0 0 1 .85.85V4.1"/><path d="M12.4 4.1v8.55A1.35 1.35 0 0 1 11.05 14h-6.1A1.35 1.35 0 0 1 3.6 12.65V4.1"/><path d="M6.5 6.9v4.2M9.5 6.9v4.2"/></symbol>
+<symbol id="i-folder" viewBox="0 0 16 16"><path d="M2 4.35c0-.75.6-1.35 1.35-1.35h2.28c.42 0 .82.2 1.08.54l.83 1.09c.25.34.65.54 1.08.54h3.03c.75 0 1.35.6 1.35 1.35v5.13c0 .75-.6 1.35-1.35 1.35H3.35C2.6 13 2 12.4 2 11.65z"/></symbol>
+<symbol id="i-folder-open" viewBox="0 0 16 16"><path d="M2 11.65V4.35c0-.75.6-1.35 1.35-1.35h2.28c.42 0 .82.2 1.08.54l.83 1.09c.25.34.65.54 1.08.54h3.03c.75 0 1.35.6 1.35 1.35v.98"/><path d="M2 11.65 3.53 7.4a1.35 1.35 0 0 1 1.27-.9h9.05c.93 0 1.58.92 1.27 1.8l-1.2 3.4a1.35 1.35 0 0 1-1.27.9H3.35C2.6 13 2 12.4 2 11.65z"/></symbol>
+<symbol id="i-file" viewBox="0 0 16 16"><path d="M9.1 1.9H4.6a1.4 1.4 0 0 0-1.4 1.4v9.4A1.4 1.4 0 0 0 4.6 14.1h6.8a1.4 1.4 0 0 0 1.4-1.4V5.3z"/><path d="M9.1 1.9v2.4a1 1 0 0 0 1 1h2.7"/></symbol>
+<symbol id="i-warning" viewBox="0 0 16 16"><path d="M7.02 2.62a1.13 1.13 0 0 1 1.96 0l5.16 8.88c.44.76-.11 1.71-.98 1.71H2.84c-.87 0-1.42-.95-.98-1.71z"/><path d="M8 6.3v3.05"/><circle cx="8" cy="11.35" r=".78" data-solid/></symbol>
+<symbol id="i-shield-check" viewBox="0 0 16 16"><path d="M8 1.75 3.1 3.55v3.98c0 3.05 2.04 5.24 4.9 6.47 2.86-1.23 4.9-3.42 4.9-6.47V3.55z"/><path d="m5.95 7.85 1.45 1.45 2.85-2.85"/></symbol>
+<symbol id="i-clock" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.55V8l2.35 1.4"/></symbol>
+<symbol id="i-settings" viewBox="0 0 16 16"><path d="M13.3 4.7H7.4"/><path d="M9.3 11.3H3.3"/><circle cx="4.7" cy="4.7" r="2"/><circle cx="11.3" cy="11.3" r="2"/></symbol>
+<symbol id="i-chevron-right" viewBox="0 0 16 16"><path d="M6.25 3.5 10.75 8l-4.5 4.5"/></symbol>
+<symbol id="i-chevron-left" viewBox="0 0 16 16"><path d="M9.75 3.5 5.25 8l4.5 4.5"/></symbol>
+<symbol id="i-chevron-down" viewBox="0 0 16 16"><path d="M3.5 6.25 8 10.75l4.5-4.5"/></symbol>
+<symbol id="i-chevron-up" viewBox="0 0 16 16"><path d="M3.5 9.75 8 5.25l4.5 4.5"/></symbol>
+<symbol id="i-close" viewBox="0 0 16 16"><path d="M11.9 4.1 4.1 11.9M4.1 4.1l7.8 7.8"/></symbol>
+<symbol id="i-search" viewBox="0 0 16 16"><circle cx="7.2" cy="7.2" r="4.7"/><path d="m10.65 10.65 3 3"/></symbol>
+<symbol id="i-filter" viewBox="0 0 16 16"><path d="M2.5 3.5h11L9.2 8.6v4.32L6.8 14.1V8.6z"/></symbol>
+<symbol id="i-sort-desc" viewBox="0 0 16 16"><path d="M2.6 4h10.8M2.6 8h6.6M2.6 12h3.2"/></symbol>
+<symbol id="i-sort-asc" viewBox="0 0 16 16"><path d="M2.6 4h3.2M2.6 8h6.6M2.6 12h10.8"/></symbol>
+<symbol id="i-history" viewBox="0 0 16 16"><path d="M2.35 8a5.65 5.65 0 1 0 1.7-4.03"/><path d="M2.05 2.4v3h3"/><path d="M8 5.1V8l2.05 1.2"/></symbol>
+<symbol id="i-external-link" viewBox="0 0 16 16"><path d="M9.6 2.4h4v4"/><path d="M13.6 2.4 7.85 8.15"/><path d="M12.5 9.5v3a1.5 1.5 0 0 1-1.5 1.5H3.5A1.5 1.5 0 0 1 2 12.5V5a1.5 1.5 0 0 1 1.5-1.5h3"/></symbol>
+<symbol id="i-terminal" viewBox="0 0 16 16"><rect x="1.75" y="2.75" width="12.5" height="10.5" rx="1.9"/><path d="m4.85 6.3 1.85 1.9-1.85 1.9"/><path d="M8.7 10.35h2.65"/></symbol>
+<symbol id="i-hard-drive" viewBox="0 0 16 16"><rect x="1.75" y="4.25" width="12.5" height="7.5" rx="1.9"/><path d="M1.75 8.5h12.5"/><circle cx="11.7" cy="10.1" r=".8" data-solid/><path d="M4.15 10.1h3.1"/></symbol>
+<symbol id="i-check" viewBox="0 0 16 16"><path d="m3.4 8.4 3.05 3.05L12.6 5.3"/></symbol>
+<symbol id="i-minus" viewBox="0 0 16 16"><path d="M4 8h8"/></symbol>
+<symbol id="i-info" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 7.4v3.6"/><circle cx="8" cy="5.2" r=".8" data-solid/></symbol>
+<symbol id="i-more-horizontal" viewBox="0 0 16 16"><circle cx="3.4" cy="8" r="1.1" data-solid/><circle cx="8" cy="8" r="1.1" data-solid/><circle cx="12.6" cy="8" r="1.1" data-solid/></symbol>
+<symbol id="i-sidebar-toggle" viewBox="0 0 16 16"><rect x="1.75" y="2.75" width="12.5" height="10.5" rx="1.9"/><path d="M10 2.75v10.5"/></symbol>
+<symbol id="i-refresh" viewBox="0 0 16 16"><path d="M13.6 8a5.6 5.6 0 1 1-1.64-3.96"/><path d="M13.9 2.5v3h-3"/></symbol>
+<symbol id="i-copy" viewBox="0 0 16 16"><rect x="5.6" y="5.6" width="8.4" height="8.4" rx="1.6"/><path d="M11.1 5.6V3.6A1.6 1.6 0 0 0 9.5 2H3.6A1.6 1.6 0 0 0 2 3.6v5.9a1.6 1.6 0 0 0 1.6 1.6h2"/></symbol>
+<symbol id="i-eye" viewBox="0 0 16 16"><path d="M.9 8S3.5 3.4 8 3.4 15.1 8 15.1 8 12.5 12.6 8 12.6.9 8 .9 8z"/><circle cx="8" cy="8" r="2.1"/></symbol>
+<symbol id="i-plus" viewBox="0 0 16 16"><path d="M8 3.6v8.8M3.6 8h8.8"/></symbol>
+<symbol id="i-arrow-right" viewBox="0 0 16 16"><path d="M2.6 8h10.4M9.3 4.3 13 8l-3.7 3.7"/></symbol>
+<symbol id="i-arrow-up-right" viewBox="0 0 16 16"><path d="M4.3 11.7 11.7 4.3M5.5 4.3h6.2v6.2"/></symbol>
+<symbol id="i-lock" viewBox="0 0 16 16"><rect x="3.1" y="6.9" width="9.8" height="7.1" rx="1.7"/><path d="M5.4 6.9V4.9a2.6 2.6 0 0 1 5.2 0v2"/></symbol>
+<symbol id="i-alert-circle" viewBox="0 0 16 16"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.9v3.6"/><circle cx="8" cy="11" r=".8" data-solid/></symbol>
+<symbol id="i-eco-rust" viewBox="0 0 16 16"><circle cx="8" cy="8" r="5.15"/><circle cx="8" cy="8" r="2.25"/><path d="M8 2.85V1.3M8 14.7v-1.55M13.15 8h1.55M1.3 8h1.55M11.65 4.35 12.75 3.25M3.25 12.75l1.1-1.1M11.65 11.65l1.1 1.1M3.25 3.25l1.1 1.1"/></symbol>
+<symbol id="i-eco-node" viewBox="0 0 16 16"><path d="M8 1.55 13.6 4.78v6.44L8 14.45 2.4 11.22V4.78z"/><path d="M6.2 6.3v3.05a1.35 1.35 0 0 1-2.05 1.16"/><path d="M11.85 6.9a2.6 2.6 0 0 0-1.55-.5c-.95 0-1.55.42-1.55 1.06 0 1.42 3.2.6 3.2 2.1 0 .68-.66 1.14-1.7 1.14a2.9 2.9 0 0 1-1.6-.48"/></symbol>
+<symbol id="i-eco-apple" viewBox="0 0 16 16"><path d="M8 4.85c-1.28-1.5-3.35-1.28-4.4.2-1.2 1.7-.63 4.45.95 6.35.63.75 1.4 1.5 2.25 1.2.5-.18.8-.5 1.2-.5s.7.32 1.2.5c.85.3 1.62-.45 2.25-1.2 1.58-1.9 2.15-4.65.95-6.35-1.05-1.48-3.12-1.7-4.4-.2z"/><path d="M8 4.85c.05-1.15.95-2.2 2.2-2.45"/></symbol>
+<symbol id="i-eco-docker" viewBox="0 0 16 16"><rect x="2.1" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="5.55" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="9" y="6.9" width="2.9" height="2.9" rx=".7"/><rect x="5.55" y="3.6" width="2.9" height="2.9" rx=".7"/><path d="M1.4 11.5c1.1 1.7 3.1 2.5 5.4 2.5 4 0 6.6-1.9 7.6-5.2"/></symbol>
+<symbol id="i-eco-go" viewBox="0 0 16 16"><path d="M1.2 6.3h3M.6 8h3.1M1.2 9.7h3"/><circle cx="9.9" cy="8" r="4.5"/><path d="M11.8 6.3a2.3 2.3 0 1 0 .35 2.55h-1.6"/></symbol>
+<symbol id="i-eco-system" viewBox="0 0 16 16"><rect x="4" y="4" width="8" height="8" rx="1.6"/><rect x="6.4" y="6.4" width="3.2" height="3.2" rx=".8"/><path d="M6.2 1.8v2.2M9.8 1.8v2.2M6.2 12v2.2M9.8 12v2.2M1.8 6.2h2.2M1.8 9.8h2.2M12 6.2h2.2M12 9.8h2.2"/></symbol>
+<symbol id="i-eco-python" viewBox="0 0 16 16"><path d="M4.4 3.3h4.1a2.35 2.35 0 0 1 0 4.7h-1a2.35 2.35 0 0 0 0 4.7h4.1"/><circle cx="5.35" cy="4.5" r=".62" data-solid/></symbol>
+<symbol id="i-eco-java" viewBox="0 0 16 16"><path d="M2.5 6.6h8.15v3.6a2.7 2.7 0 0 1-2.7 2.7H5.2a2.7 2.7 0 0 1-2.7-2.7z"/><path d="M10.65 7.5h1.15a1.75 1.75 0 0 1 0 3.5h-1.15"/><path d="M5.5 4.5c.65-.62.65-1.28 0-1.9M8.1 4.5c.65-.62.65-1.28 0-1.9"/></symbol>
+<symbol id="i-eco-homebrew" viewBox="0 0 16 16"><path d="M8 2.2c2.6 0 4.6 2 4.6 4.6 0 3.4-2.7 6.05-4.6 7.2C6.1 12.85 3.4 10.2 3.4 6.8 3.4 4.2 5.4 2.2 8 2.2z"/><path d="M8 5v6.6"/><path d="m5.6 6.5 2.4 1.85 2.4-1.85"/><path d="m5.8 9.2 2.2 1.7 2.2-1.7"/></symbol>
+<symbol id="i-eco-jetbrains" viewBox="0 0 16 16"><rect x="1.9" y="1.9" width="12.2" height="12.2" rx="2.3"/><path d="M4.4 11.9h4.3"/><path d="M9.5 4.5v3.35a1.75 1.75 0 0 1-3.4.55"/></symbol>
+<symbol id="i-eco-dotnet" viewBox="0 0 16 16"><circle cx="2.3" cy="12" r="1.15" data-solid/><path d="M5.6 12.5V3.5l5.6 9V3.5"/><path d="M12.9 3.5h1.6M13.7 3.5v9"/></symbol>
+</defs></svg>
+
+<div class="doctools">
+  <button id="tDark" class="on">Dark doc</button>
+  <button id="tLight">Light doc</button>
+</div>
+
+<div class="doc">
+
+<header class="masthead">
+  <div class="eyebrow">Design proposal · v1 · for review</div>
+  <h1>Void</h1>
+  <p class="lede">A complete visual and interaction redesign of Void — the desktop tool that finds and reclaims
+  developer build artifacts. Every screen, both themes, specified down to the token. Nothing here has been
+  built into the app yet; this document exists to be argued with.</p>
+  <dl class="meta">
+    <div><dt>Surface</dt><dd>Tauri desktop · 900×700 default</dd></div>
+    <div><dt>Platforms</dt><dd>macOS · Windows · Linux</dd></div>
+    <div><dt>Themes</dt><dd>Light and dark, fully specified</dd></div>
+    <div><dt>Screens</dt><dd>11 states · 1 tray popover</dd></div>
+    <div><dt>Status</dt><dd>Proposal — not implemented</dd></div>
+  </dl>
+</header>
+
+<nav class="toc">
+  <a href="#s1"><i>01</i>Direction</a>
+  <a href="#s2"><i>02</i>Color</a>
+  <a href="#s3"><i>03</i>Typography</a>
+  <a href="#s4"><i>04</i>Layout &amp; shell</a>
+  <a href="#s5"><i>05</i>Screens</a>
+  <a href="#s6"><i>06</i>Components</a>
+  <a href="#s7"><i>07</i>Motion &amp; depth</a>
+  <a href="#s8"><i>08</i>What this changes</a>
+</nav>
+
+<!-- ═════════════════════════ 01 DIRECTION ═════════════════════════ -->
+<section class="sect" id="s1">
+  <div class="sect-head"><span class="sect-num">01</span><h2>Direction</h2><span class="tag">the argument</span></div>
+  <p class="sect-intro">Void deletes things. That single fact should decide every design choice in it, and in the
+  current UI it decides none of them. The redesign is organised around three moves, each of which fixes something
+  that is presently wrong rather than merely plain.</p>
+
+  <div class="sub">
+    <h3>One — the statistics dissolve into the list</h3>
+    <p>Today a 320&nbsp;px panel holds a nine-segment donut, a bar chart, and a stack of cards that print the same
+    numbers three times, and it auto-opens the moment a scan completes — shoving aside the results the user just
+    waited for. The panel is deleted. Group headers become the bar chart, typographic weight becomes the size
+    hierarchy, and a disk meter answers the question the donut never did: <em>how much of my disk is this?</em>
+    Every statistic survives; none of them cost the list any width.</p>
+  </div>
+
+  <div class="sub">
+    <h3>Two — risk belongs to the action, not the item</h3>
+    <p>This is a correctness fix disguised as a design change. <code>CleanableItem.risk</code> and
+    <code>CleanAction.risk</code> are different fields, and they disagree: <code>SimulatorDevices</code> is a
+    <em>Caution</em> item holding a <em>Danger</em> action, and <code>~/Downloads</code> is a <em>Safe</em> item
+    holding <code>rm -rf</code>. The current UI shows the item's risk and then silently runs
+    <code>available_actions[0]</code>. The redesign shows the risk of the action that will actually run, and makes
+    that action visible and changeable on every row.</p>
+  </div>
+
+  <div class="sub">
+    <h3>Three — confirmation friction scales with real risk</h3>
+    <p>A dialog that looks the same whether you are deleting <code>node_modules</code> or emptying your Maven
+    repository trains people to click through it. An all-safe batch gets a 280&nbsp;px modal and one click. A batch
+    containing Caution actions gets each one itemised with its literal command. A batch containing a Danger action
+    requires typing <code>delete</code>. The friction is the signal.</p>
+  </div>
+
+  <div class="note">
+    <strong>A constraint worth stating.</strong> Everything drawn here is buildable against the existing Rust
+    backend except nine items, listed in §08. Four of them — persisting <code>AppConfig</code>, a batch-complete
+    event, a cancellation token, and a disk-usage command — are small. The History screen and honest
+    permission-denied reporting are not. Screens that depend on missing backend work are marked
+    <em>needs backend</em> so nothing here reads as shippable when it isn't.
+  </div>
+</section>
+
+<style>
+.screen-body{display:grid;grid-template-columns:900px minmax(280px,1fr);gap:34px;align-items:start;margin-top:22px}
+.screen-stack{display:flex;flex-direction:column;gap:20px}
+@media (max-width:1340px){.screen-body{grid-template-columns:1fr}}
+@media (max-width:980px){.app{zoom:.72}.tray{zoom:.9}}
+.screen-aside{position:sticky;top:24px;display:flex;flex-direction:column;gap:18px}
+.aside-block h5{margin:0 0 9px;font:620 9px/12px var(--font-sans);letter-spacing:.12em;text-transform:uppercase;color:var(--doc-fg-3)}
+.needs-backend{display:inline-flex;align-items:center;gap:5px;height:20px;padding:0 7px;border-radius:4px;
+  background:rgb(210 153 34/.14);color:#d29922;font:600 9.5px/1 var(--font-sans);letter-spacing:.06em;text-transform:uppercase}
+</style>
+
+<!-- ═════════════════════════ 05 SCREENS ═════════════════════════ -->
+<section class="sect" id="s5">
+  <div class="sect-head"><span class="sect-num">05</span><h2>Screens</h2><span class="tag">11 states · both themes</span></div>
+  <p class="sect-intro">Every screen at its true size — 900×700, the app's default window. Each is shown in dark
+  first, then light directly beneath it, rendered from the same markup so the two can't drift apart. The notes
+  beside each screen explain the decisions that aren't self-evident.</p>
+
+  <div class="screens">
+
+    <!-- ── 5a ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5a</span><h4>First run</h4><span class="dims">900 × 700 · content max 440</span></div>
+      <p class="screen-note">The most common first-run failure isn't confusion about the button — it's scanning the
+      wrong root, or on macOS being unable to read it. So the scan root is stated <strong>before</strong> the first
+      scan, with a one-click route to change it. That turns a baffling empty result into a fix, and quietly teaches
+      that roots are configurable at all.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="firstrun"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="firstrun"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>The <strong>mark is the scan indicator</strong> — a ring with a gap at 45°. The same shape spins during a scan and sits in the tray. One shape, three jobs.</span></li>
+          <li><b>2</b><span>The scan-root card is <strong>440×64</strong> with an inline <code>Change ›</code> that deep-links to Settings → Scanning.</span></li>
+          <li><b>3</b><span>On macOS without Full Disk Access a notice card is inserted above it. Without that, <code>~/Library</code> caches are silently <em>absent</em> — permission-denied directories compute size 0 and get dropped from results entirely.</span></li>
+          <li><b>4</b><span>Copy states what happens and what doesn't: <em>"Nothing is deleted until you pick it and confirm."</em> An empty screen is an invitation, not a label.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5b ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5b</span><h4>Scanning</h4><span class="dims">streaming · no separate screen</span></div>
+      <p class="screen-note">There is no dedicated scanning screen. Results stream into the real table as
+      <code>ItemFound</code> arrives — a separate progress screen would throw away the only user-visible benefit of
+      the streaming architecture. What's added is a <strong>per-scanner ticker</strong>, which is the honest answer
+      to "is it stuck?" when eleven scanners run concurrently and one of them is slow.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="scanning"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="scanning"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Progress is <strong>indeterminate</strong> and stays that way. Total path count is unknowable up front; a fake determinate bar would be a lie.</span></li>
+          <li><b>2</b><span>The ticker shows three states per ecosystem — pending, running, <code>✓ n</code> done. Driven straight off <code>ScannerStarted</code> / <code>ScannerCompleted</code>.</span></li>
+          <li><b>3</b><span><strong>Group order freezes during the scan.</strong> Groups appear in arrival order and re-sort once, at <code>ScanComplete</code>. Re-sorting per event produces an unreadable jumping list.</span></li>
+          <li><b>4</b><span>Selection is disabled mid-scan — a later event can supersede an item you've already ticked.</span></li>
+          <li><b>5</b><span>The headline counts up live. This is the best moment in the product; it gets the animation budget.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5c ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5c</span><h4>Results — the core screen</h4><span class="dims">900 × 700 · 52+64+40+28+492+24</span></div>
+      <p class="screen-note">Grouped by ecosystem because that maps to <em>why the bytes exist and what it costs to
+      get them back</em> — nobody minds losing <code>node_modules</code>; everybody minds re-downloading Maven. Four
+      devices make size scannable without reading a number: groups sorted by total, rows sorted by size, a
+      per-group magnitude bar, and typographic tiering so gigabyte rows visually rise out of the list.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="results"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="results"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Group headers carry a <strong>100×6 share bar</strong> — that is the entire deleted bar chart, relocated to where it's actionable and costing zero width.</span></li>
+          <li><b>2</b><span><strong>No “Safe” badge.</strong> ~80% of real items are Safe; a badge on 80% of rows is texture, not signal. Safe is the absence of a badge plus a transparent risk edge.</span></li>
+          <li><b>3</b><span>The 4px <strong>risk edge</strong> shows the risk of the <em>selected action</em>, not <code>item.risk</code>.</span></li>
+          <li><b>4</b><span>The full path lives permanently on line 2. Today it's behind a 400ms hover tooltip — a path you must hover cannot be scanned or trusted.</span></li>
+          <li><b>5</b><span><code>[n actions ▾]</code> exposes what will actually run, and its popover footer offers <em>“apply to all n items in this group”</em> — the difference between choosing once and choosing 42 times.</span></li>
+          <li><b>6</b><span>Magnitude bars use <code>sqrt(size / group max)</code>. Linear scaling renders thirty 200 MB rows as invisible slivers next to one 40 GB outlier.</span></li>
+          <li><b>7</b><span>Docker reports <code>size_display: "unknown"</code> and no mtime — it renders as italic <em>unknown</em> and <code>—</code>, never <code>0 B</code> and <code>0d</code>.</span></li>
+          <li><b>8</b><span>The disk meter answers “how much of my disk is this?”. <code>23% of your 1 TB disk</code> motivates better than a raw byte count.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5d ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5d</span><h4>Pre-clean confirmation</h4><span class="dims">modal 560 wide · max 600 tall</span></div>
+      <p class="screen-note">Leads with <strong>method, not risk</strong> — what physically happens is what determines
+      recoverability, and <code>rm -rf</code> is a fact where a risk label is a scanner's opinion. Safe items are
+      counted, never listed; only Caution and Danger get individual rows. With no Caution or Danger in the batch the
+      whole attention section disappears and the modal is ~280px tall.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="confirm"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="confirm"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>The <strong>literal command</strong> is shown for every Command and DockerPrune action. <code>SafetyChecker</code> never inspects command arguments — this string is the only real disclosure the user gets.</span></li>
+          <li><b>2</b><span>Type-to-confirm appears <em>only</em> when a Danger action is in the batch. The word is <code>delete</code>, lowercase, unlocalized.</span></li>
+          <li><b>3</b><span><strong>“Prefer Trash where available”</strong> is checked by default and lives next to the commit button, because it is the one control that can turn a Danger batch into a Safe one. Toggling it re-computes the modal live.</span></li>
+          <li><b>4</b><span>The button names the count — <code>Clean 18 items</code>. Never “OK”, never “Confirm”.</span></li>
+          <li><b>5</b><span>Initial focus is <em>Cancel</em>, or the confirm field when present. Never the destructive button.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5e ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5e</span><h4>Cleaning</h4><span class="dims">in place · determinate</span></div>
+      <p class="screen-note">The modal closes and the user returns to the table, because that's where the objects
+      being acted on live. <code>execute_batch</code> is a strictly sequential loop, so this is a
+      <strong>queue</strong>, not parallel bars — one active, the rest waiting — and the progress is genuinely
+      determinate. Failures don't stop the batch, so failed rows stay put while successful ones collapse away; by
+      the end the table has filtered itself down to exactly what didn't work.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="cleaning"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="cleaning"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span><strong>No Stop button.</strong> There is no cancellation token in <code>execute_batch</code>. A Stop button that doesn't stop is worse than none — this needs backend work first.</span></li>
+          <li><b>2</b><span>The failed row keeps its place, tinted, with the raw error in monospace and a <code>Retry</code>. Machine text is always monospace, always selectable, never folded into a sentence.</span></li>
+          <li><b>3</b><span><code>cargo: not found in PATH</code> is the most likely real failure, so it gets a contextual fix chip that swaps to the item's <code>RemoveDir</code> action and re-queues it.</span></li>
+          <li><b>4</b><span>“freed so far” uses <code>bytes_freed</code> where it's non-zero and <code>estimated_savings_bytes</code> otherwise — Command and DockerPrune always report zero.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5f ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5f</span><h4>Completion</h4><span class="dims">96px result card</span></div>
+      <p class="screen-note">The payoff. The headline number carries an <strong>“estimated”</strong> qualifier
+      whenever a Command or DockerPrune action contributed, because those return <code>bytes_freed: 0</code> on
+      success and the figure is genuinely an estimate. Auto-dismisses after 12 seconds only when nothing failed.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="complete"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="complete"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Unqualified totals would be wrong. The tooltip says so plainly: <em>Void can't measure what <code>cargo clean</code> removes.</em></span></li>
+          <li><b>2</b><span><code>3 failed</code> is a link that scrolls to and flashes the surviving failed rows.</span></li>
+          <li><b>3</b><span>The rail's disk meter animates to its new value over 600ms. This is the one place worth spending motion.</span></li>
+          <li><b>4</b><span>There is <strong>no batch-complete event</strong> in the backend — the frontend detects completion by counting <code>Started</code> against terminal events. Worth adding.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5g ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5g</span><h4>Item detail drawer</h4><span class="dims">400 wide · overlay &lt;1280, inline ≥1280</span></div>
+      <p class="screen-note">The screen the current app has no equivalent of. Opening it does <strong>not</strong>
+      change selection — inspecting and choosing are separate acts. Its centre is the action radio list, where every
+      option shows its label, its verbatim description, the literal command or method, what it frees, and whether it
+      is recoverable. Only two actions in the entire product are recoverable, and the drawer says which.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="drawer"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="drawer"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Changing the selected action immediately updates the row's risk edge and badge, because risk is a property of the action.</span></li>
+          <li><b>2</b><span><code>Frees unknown</code> — never <code>0 B</code>. Every npm/yarn/pnpm project-cache action, every Docker action, and every per-project DerivedData action reports <code>estimated_savings_bytes: 0</code>.</span></li>
+          <li><b>3</b><span>The Safety section only claims what's true for the <em>selected</em> method. For a Command it says plainly: <em>Void runs this command as-is; it does not inspect what the command deletes.</em></span></li>
+          <li><b>4</b><span>Apple DerivedData emits one action per Xcode project — often dozens. Above six actions the list gets a filter field and scrolls.</span></li>
+          <li><b>5</b><span><code>Exclude this path</code> appends to <code>blocked_paths</code> and is the only genuinely undoable action in Void — so it's the only place a toast is warranted.</span></li>
+          <li><b>6</b><span><kbd>⌥↑</kbd>/<kbd>⌥↓</kbd> move between items with the drawer open. That's the review loop.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5h ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5h</span><h4>Settings</h4><span class="dims">segmented nav &lt;1024 · form max 560</span><span class="needs-backend">Needs backend</span></div>
+      <p class="screen-note">There is no settings UI today at all, while <code>scan_roots</code> and
+      <code>blocked_paths</code> determine what a scan can even see. Every <code>AppConfig</code> field is accounted
+      for. Two things are told truthfully rather than flatteringly: the staleness threshold is labelled as a display
+      filter because <strong>no backend code reads it</strong>, and the hard-coded protected paths are shown as a
+      read-only list above the user's own blocklist.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="settings"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="settings"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Saves on change, debounced 400ms. No Save button. <em>But</em> <code>update_config</code> only mutates an in-memory mutex — settings silently reset on relaunch until that's fixed.</span></li>
+          <li><b>2</b><span>Ecosystem rows are sorted by descending last-scan bytes, so the expensive ones sit on top and carry the numbers that justify the toggle.</span></li>
+          <li><b>3</b><span>Protected paths come verbatim from <code>safety.rs</code>. Header: <em>“Void refuses to delete these, always.”</em></span></li>
+          <li><b>4</b><span>Changing anything under Scanning or Ecosystems shows a persistent <em>“Changes apply to your next scan · Rescan now”</em> notice.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5i ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5i</span><h4>History</h4><span class="dims">3 tiles · 1 chart · run list</span><span class="needs-backend">Needs backend</span></div>
+      <p class="screen-note">The retention hook: <em>“I've reclaimed 340 GB this year.”</em> It is also the only
+      place a failed clean can be inspected after the fact. This holds the <strong>only chart in the entire
+      application</strong>, because reclaimed-over-time is the one thing here that is genuinely a time series — the
+      donut it replaces was a nine-segment pie, the least readable form for that data.</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="history"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="history"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Requires persisting a run record per batch — the largest backend addition this design asks for.</span></li>
+          <li><b>2</b><span>Expanding a run shows per-item path, action label, exact command, bytes freed, and the full error for failures, each with <code>Retry</code>.</span></li>
+          <li><b>3</b><span>Counts are exact and tabular everywhere. <code>1.2k</code> in a tool where the number is the thing being audited is a lie for no gain.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5j ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5j</span><h4>Menu bar popover</h4><span class="dims">320 wide · 320–420 tall</span></div>
+      <p class="screen-note">Read-only, plus two verbs. <strong>You cannot clean from here</strong> — cleaning from a
+      320px popover with no room for the risk review is precisely the affordance that gets someone's
+      <code>~/.m2</code> deleted by accident. Four ecosystems, no scroll: popovers that scroll are windows in
+      disguise.</p>
+      <div class="screen-body" style="grid-template-columns:auto minmax(280px,1fr)">
+        <div class="screen-stack" style="flex-direction:row;gap:40px;flex-wrap:wrap">
+          <div class="pane"><div class="pane-label dark">Dark</div><div class="tray app" data-theme="dark" data-screen="tray" style="width:320px;height:auto;display:block;box-shadow:none"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div><div class="tray app" data-theme="light" data-screen="tray" style="width:320px;height:auto;display:block;box-shadow:none"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Replaces the current tray's <em>Scan Now</em> / <em>Open Dashboard</em> menu items. <em>Quit</em> moves to right-click.</span></li>
+          <li><b>2</b><span>The tray icon must be a <strong>macOS template image</strong> — pure black plus alpha at 22×22 and 44×44. <code>tray.rs</code> currently passes the full-colour app icon, which won't theme or invert in the menu bar.</span></li>
+          <li><b>3</b><span>Docker shows <code>unknown</code>, not <code>0 B</code>.</span></li>
+          <li><b>4</b><span>Don't animate the tray icon — it wakes the app, defeats App Nap, and burns battery. A static half-arc says “working” perfectly well.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+    <!-- ── 5k ── -->
+    <article class="screen">
+      <div class="screen-head"><span class="screen-id">5k</span><h4>Error &amp; permission states</h4><span class="dims">banner 44 · issues sheet 480</span></div>
+      <p class="screen-note">Today <code>ScanEvent::Error</code> goes to <code>console.error</code> and vanishes.
+      A scan can emit dozens, so they get a status-bar chip and a sheet — never a modal, never a toast each. The
+      permission banner is the important one: because unreadable directories are dropped rather than reported, the
+      failure mode is <strong>invisible absence</strong>, and absence with no explanation reads as “this tool
+      doesn't work.”</p>
+      <div class="screen-body">
+        <div class="screen-stack">
+          <div class="pane"><div class="pane-label dark">Dark</div>
+            <div class="oschrome app" data-theme="dark" data-screen="errors"></div></div>
+          <div class="pane"><div class="pane-label light">Light</div>
+            <div class="oschrome app" data-theme="light" data-screen="errors"></div></div>
+        </div>
+        <aside class="screen-aside"><div class="aside-block"><h5>Notes</h5><ul class="callouts">
+          <li><b>1</b><span>Identical messages group with a <code>×N</code> multiplier rather than repeating.</span></li>
+          <li><b>2</b><span>“Nothing to clean” routes to <strong>Check scan roots</strong> first, not to a retry — it's almost always a wrong-root or permissions problem.</span></li>
+          <li><b>3</b><span>A filter matching nothing is an inline 120px state, not a full-page one. A 56px empty state punched into a filtered list is a jarring hole.</span></li>
+          <li><b>4</b><span>Errors don't apologise and are never vague. The raw string sits in a monospace plate, selectable, so it can be pasted into an issue.</span></li>
+        </ul></div></aside>
+      </div>
+    </article>
+
+  </div>
+</section>
+
+<script>
+/* ══════════════════════════════════════════════════════════════════════
+   SCREEN RENDERER
+   One template per screen, mounted into every [data-screen] node.
+   Dark and light twins render from identical markup.
+   ══════════════════════════════════════════════════════════════════════ */
+
+const I = (id, cls = 'icon') => `<svg class="${cls}" aria-hidden="true"><use href="#i-${id}"/></svg>`;
+const CB = (s) => `<span class="cb" aria-checked="${s}">${s === 'mixed' ? I('minus') : I('check')}</span>`;
+const nf = new Intl.NumberFormat('en-US');
+
+function fmt(bytes){
+  if (bytes == null) return {n:'—', u:''};
+  if (bytes === 0) return {n:'0', u:'B'};
+  const U = ['B','kB','MB','GB','TB'];
+  let i = Math.min(Math.floor(Math.log10(bytes)/3), U.length-1);
+  let v = bytes / Math.pow(1000, i);
+  if (v >= 999.95 && i < U.length-1){ i++; v = bytes/Math.pow(1000,i); }
+  return {n: v.toFixed(i===0 ? 0 : v<10 ? 1 : v<100 ? 1 : 0), u: U[i]};
+}
+function magOf(b){ return b == null ? 'unknown' : b >= 1e10 ? 'xl' : b >= 1e9 ? 'lg' : b >= 1e8 ? 'md' : 'sm'; }
+function Size(bytes){
+  if (bytes == null) return `<span class="size" data-mag="unknown"><span class="size-num">unknown</span></span>`;
+  const {n,u} = fmt(bytes);
+  return `<span class="size" data-mag="${magOf(bytes)}"><span class="size-num tnum">${n}</span><span class="size-unit">${u}</span></span>`;
+}
+/* Path with the four emphasis roles. */
+function Path(p, project){
+  const abs = p.startsWith('/');
+  const segs = p.split('/').filter(Boolean);
+  const leaf = segs.length - 1;
+  let pi = project ? segs.lastIndexOf(project) : -1;
+  if (pi === leaf) pi = -1;
+  let out = abs && segs[0] !== '~' ? `<span class="s-sep">/</span>` : '';
+  segs.forEach((s, i) => {
+    const r = i === leaf ? 'leaf' : i === pi ? 'project' : i === 0 ? 'root' : 'dim';
+    out += `<span class="s-${r}">${s}</span>` + (i !== leaf ? `<span class="s-sep">/</span>` : '');
+  });
+  return `<span class="path">${out}</span>`;
+}
+const stale = d => d == null ? '—' : d === 0 ? 'today' : d < 365 ? d + 'd' : (d/365).toFixed(1) + 'y';
+
+/* ── Canonical dataset — real scanner output, not invented ── */
+const ECO = {
+  node:{n:'Node.js', k:'node'}, apple:{n:'Apple / Xcode', k:'apple'}, rust:{n:'Rust', k:'rust'},
+  java:{n:'Java / JVM', k:'java'}, go:{n:'Go', k:'go'}, docker:{n:'Docker', k:'docker'},
+  system:{n:'System', k:'system'}, homebrew:{n:'Homebrew', k:'homebrew'},
+  python:{n:'Python', k:'python'}, jet_brains:{n:'JetBrains', k:'jetbrains'}, dot_net:{n:'.NET', k:'dotnet'}
+};
+
+const GROUPS = [
+  { eco:'node', bytes:58.2e9, count:94, items:[
+    { kind:'node_modules/', proj:'void-web', path:'~/git/void-web/node_modules', d:12, b:4.1e9, risk:'safe', acts:2, sel:false },
+    { kind:'node_modules/', proj:'dashboard', path:'~/git/dashboard/node_modules', d:48, b:3.2e9, risk:'safe', acts:2, sel:false },
+    { kind:'npm cache', proj:null, path:'~/.npm', d:48, b:2.4e9, risk:'safe', acts:1, sel:true }
+  ]},
+  { eco:'apple', bytes:31.0e9, count:18, items:[
+    { kind:'iOS Simulators', proj:null, path:'~/Library/Developer/CoreSimulator/Devices', d:18, b:22.1e9, risk:'caution', acts:2, sel:true, note:'holds a Danger action' },
+    { kind:'DerivedData/', proj:'MyApp', path:'~/Library/Developer/Xcode/DerivedData', d:3, b:8.4e9, risk:'safe', acts:14, sel:false },
+    { kind:'Archives/', proj:null, path:'~/Library/Developer/Xcode/Archives', d:210, b:6.2e9, risk:'caution', acts:1, sel:false }
+  ]},
+  { eco:'rust', bytes:22.4e9, count:42, items:[
+    { kind:'target/', proj:'void', path:'~/git/void/target', d:2, b:3.8e9, risk:'safe', acts:3, sel:true }
+  ]},
+  { eco:'system', bytes:22.3e9, count:9, items:[
+    { kind:'Trash', proj:null, path:'~/.Trash', d:null, b:14.2e9, risk:'caution', acts:1, sel:false },
+    { kind:'xcode_14.3.xip', proj:null, path:'~/Downloads/xcode_14.3.xip', d:340, b:8.1e9, risk:'safe', acts:2, sel:false, note:'Safe default guarding rm -rf' }
+  ]},
+  { eco:'go', bytes:11.3e9, count:3, items:[
+    { kind:'Go module cache', proj:null, path:'~/go/pkg/mod', d:31, b:11.3e9, risk:'caution', acts:2, sel:false }
+  ]},
+  { eco:'java', bytes:8.9e9, count:6, items:[
+    { kind:'Maven repository', proj:null, path:'~/.m2/repository', d:92, b:8.9e9, risk:'caution', acts:1, sel:true }
+  ]},
+  { eco:'docker', bytes:null, count:1, items:[
+    { kind:'Docker build cache', proj:null, path:'/var/run/docker.sock', d:null, b:null, risk:'caution', acts:5, sel:false }
+  ]},
+  { eco:'homebrew', bytes:3.1e9, count:11, items:[
+    { kind:'Homebrew cache', proj:null, path:'~/Library/Caches/Homebrew', d:21, b:3.1e9, risk:'safe', acts:2, sel:false }
+  ]}
+];
+const MAXGROUP = 58.2e9;
+
+/* ── Shared chrome ── */
+function Titlebar(t){
+  return `<div class="titlebar"><div class="tl"><i></i><i></i><i></i></div><div class="tt">${t}</div></div>`;
+}
+const MARK = `<svg class="void-mark" viewBox="0 0 20 20" width="20" height="20" aria-hidden="true">
+  <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round"
+    pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg>`;
+
+function Rail(active, badge, spin){
+  const b = (id, icon, label, n) => `<button class="rail-btn" ${active===id?'aria-current="page"':''} title="${label}">
+    ${I(icon)}${n?`<span class="rail-badge">${n}</span>`:''}</button>`;
+  return `<div class="rail">
+    <div class="rail-mark" ${spin?'style="animation:void-spin 900ms linear infinite"':''}>${MARK}</div>
+    ${b('results','sidebar-toggle','Results (⌘1)', badge)}
+    ${b('history','history','History (⌘2)')}
+    ${b('settings','settings','Settings (⌘3)')}
+    <div class="rail-spacer"></div>
+    <div class="rail-disk" title="512 GB free of 1 TB">
+      <div class="rail-disk-bar"><i class="rail-disk-recl" style="height:14%"></i><i class="rail-disk-used" style="height:49%"></i></div>
+      <span class="t-micro tnum">23%</span>
+    </div>
+  </div>`;
+}
+
+function Cmdbar(title, sub, actions){
+  return `<div class="cmdbar">
+    <div class="cmdbar-titles">
+      <div class="t-section-title cmdbar-title" style="font-size:15px">${title}</div>
+      <div class="t-caption cmdbar-sub">${sub}</div>
+    </div>
+    <div class="cmdbar-actions">${actions}</div>
+  </div>`;
+}
+
+function Summary(opts){
+  const {headline='142.6', unit='GB', sub='384 items · 9 ecosystems', selN=0, selBytes=0} = opts;
+  const s = fmt(selBytes);
+  return `<div class="summary">
+    <div class="summary-headline">
+      <div class="metric"><span class="t-metric-sm">${headline}</span><span class="t-body-sm" style="color:var(--text-tertiary)">${unit} reclaimable</span></div>
+      <div class="t-caption sub">${sub}</div>
+    </div>
+    <div class="summary-disk">
+      <div class="diskmeter"><i class="seg-used" style="width:49%"></i><i class="seg-recl" style="width:14%"></i></div>
+      <div class="t-caption legend">
+        <span><b>23%</b> of your 1 TB disk</span><span style="color:var(--text-quaternary)">512 GB free</span>
+      </div>
+    </div>
+    <div class="summary-action">
+      ${selN ? `<div class="t-caption selinfo"><b>${selN} selected</b> · ${s.n} ${s.u}</div>
+        <button class="btn btn-primary">Review &amp; Clean<span class="kbd">⌘↵</span></button>`
+      : `<button class="btn btn-ghost btn-sm">Select all safe (312) ${I('arrow-right','icon icon-sm')}</button>`}
+    </div>
+  </div>`;
+}
+
+function Toolbar(tokens){
+  return `<div class="toolbar">
+    <div class="search">${I('search','icon icon-sm')}
+      ${tokens || `<input placeholder="Filter by path, project, or type" readonly>`}
+    </div>
+    <button class="chip">${I('filter')}Filters<span class="countpill" style="margin-left:2px">2</span></button>
+    <div class="toolbar-sep"></div>
+    <button class="chip">Group: Ecosystem ${I('chevron-down','icon icon-sm')}</button>
+    <button class="chip">Size ${I('chevron-down','icon icon-sm')}</button>
+    <div style="flex:1"></div>
+    <button class="iconbtn" title="Density (⌘D)">${I('sidebar-toggle')}</button>
+    <button class="iconbtn" title="Expand all (⌘⇧E)">${I('chevron-down')}</button>
+  </div>`;
+}
+
+const TableHead = () => `<div class="tablehead">
+  <span style="width:22px"></span><span style="width:12px"></span>
+  <span class="t-colhead" style="flex:1">Name</span>
+  <span class="t-colhead" style="width:56px;text-align:right;padding-right:12px">Stale</span>
+  <span style="width:56px;padding-right:12px"></span>
+  <span class="t-colhead" style="width:84px;text-align:right;padding-right:8px">Size</span>
+  <span style="width:24px"></span></div>`;
+
+function Group(g, open = true){
+  const e = ECO[g.eco];
+  const pct = g.bytes ? (g.bytes / MAXGROUP) * 100 : 4;
+  const sz = g.bytes == null ? `<span class="size" data-mag="unknown"><span class="size-num">unknown</span></span>` : Size(g.bytes);
+  return `<div class="group-header" style="--eco-accent:var(--eco-${e.k})">
+    ${CB(g.items.some(i=>i.sel) ? (g.items.every(i=>i.sel)?'true':'mixed') : 'false')}
+    <span style="color:var(--text-tertiary);display:flex">${I(open?'chevron-down':'chevron-right','icon icon-sm')}</span>
+    <span style="color:var(--eco-accent);display:flex">${I('eco-'+e.k,'icon icon-sm')}</span>
+    <span class="t-body-strong gname">${e.n}</span>
+    <span class="countpill tnum">${g.count} items</span>
+    <span class="spacer"></span>
+    <span class="gshare"><i style="width:${pct}%"></i></span>
+    <span class="gsize">${sz}</span>
+  </div>`;
+}
+
+function Item(it, eco, opt = {}){
+  const e = ECO[eco];
+  const ratio = it.b ? Math.sqrt(it.b / 22.1e9) : 0.02;
+  const badge = it.risk === 'safe' ? '' : `<span class="badge badge-${it.risk}">${it.risk}</span>`;
+  const acts = it.acts > 1
+    ? `<span class="chip" style="height:18px;padding:0 6px;font-size:11px;background:transparent;border-color:var(--border-subtle);color:var(--text-quaternary)">${it.acts} actions ${I('chevron-down','icon icon-sm')}</span>`
+    : '';
+  return `<div class="item ${it.sel?'is-selected':''} ${opt.focus?'is-focused':''}"
+      style="--eco-accent:var(--eco-${e.k});--size-ratio:${ratio.toFixed(3)}">
+    <div class="item-inner">
+      <span class="cell-check">${CB(it.sel ? 'true' : 'false')}</span>
+      <span class="riskedge ${it.risk}"></span>
+      <span class="cell-main">
+        <span class="line1">
+          <span class="kindname">${it.kind}</span>
+          ${it.proj ? `<span class="projname">· ${it.proj}</span>` : ''}
+          ${badge}
+        </span>
+        <span class="line2">${Path(it.path, it.proj)}${acts}</span>
+      </span>
+      <span class="cell-stale t-caption ${it.d != null && it.d > 30 ? 'is-stale' : ''}">${stale(it.d)}</span>
+      <span class="cell-mag"><span class="magbar"><i style="width:${Math.max(3, ratio*100)}%"></i></span></span>
+      <span class="cell-size">${Size(it.b)}</span>
+      <span class="cell-chev">${I('chevron-right','icon icon-sm')}</span>
+    </div>
+  </div>`;
+}
+
+function StatusBar(left, issues){
+  return `<div class="statusbar t-caption">
+    <span>${left}</span><span class="spacer"></span>
+    ${issues ? `<span class="issues">${I('warning','icon icon-sm')} ${issues} issues</span>` : ''}
+    <span style="color:var(--text-quaternary)">Comfortable</span>
+  </div>`;
+}
+
+const AllGroups = () => GROUPS.map(g => Group(g) + g.items.map(i => Item(i, g.eco)).join('')).join('');
+</script>
+
+<script>
+/* ══════════════════ SCREEN TEMPLATES ══════════════════ */
+const S = {};
+
+S.firstrun = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('results')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','Ready to scan',`<button class="btn btn-primary">${I('scan')}Scan now</button>
+      <button class="iconbtn">${I('more-horizontal')}</button>`)}
+    <div style="flex:1;display:flex;align-items:center;justify-content:center;padding:24px">
+      <div style="width:440px;text-align:center;display:flex;flex-direction:column;align-items:center">
+        <div style="color:var(--accent);margin-bottom:24px"><svg viewBox="0 0 20 20" width="64" height="64" aria-hidden="true">
+          <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round"
+          pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg></div>
+        <div class="t-page-title">Find what your builds left behind</div>
+        <p class="t-prose" style="margin:8px 0 0;color:var(--text-secondary);max-width:380px">
+          Void walks your scan roots and reports every build artifact it finds, grouped by ecosystem.
+          Nothing is deleted until you pick it and confirm.</p>
+        <div class="card" style="width:100%;margin-top:24px;text-align:left;display:flex;align-items:center;gap:12px;padding:14px 16px">
+          ${I('folder','icon icon-lg')}
+          <div style="flex:1">
+            <div class="t-label" style="color:var(--text-tertiary)">Scan roots</div>
+            <div class="t-mono-sm" style="color:var(--text-primary);margin-top:2px">~/</div>
+            <div class="t-caption" style="color:var(--text-tertiary);margin-top:2px">11 ecosystems enabled</div>
+          </div>
+          <button class="btn btn-ghost btn-sm">Change ${I('chevron-right','icon icon-sm')}</button>
+        </div>
+        <button class="btn btn-primary btn-lg" style="width:240px;margin-top:16px">Start first scan</button>
+        <div class="t-caption" style="color:var(--text-quaternary);margin-top:12px">Typically takes 30–90 seconds</div>
+      </div>
+    </div>
+    ${StatusBar('Idle')}
+  </div></div>`;
+
+S.scanning = () => {
+  const done = [['rust',12],['node',41],['go',3],['homebrew',7]];
+  const run = ['apple','docker'], pend = ['python','java','jet_brains','dot_net','system'];
+  const tick = done.map(([k,n])=>`<span class="ticker-item is-done">${I('check','icon icon-sm')}${ECO[k].n} <span class="tnum">${n}</span></span>`).join('')
+    + run.map(k=>`<span class="ticker-item is-running"><span class="spinring"></span>${ECO[k].n}…</span>`).join('')
+    + pend.map(k=>`<span class="ticker-item">○ ${ECO[k].n}</span>`).join('');
+  const partial = GROUPS.slice(0,3).map(g => Group(g) + g.items.map(i => Item(i,g.eco)).join('')).join('');
+  const skel = Array.from({length:2},(_,i)=>`<div class="item" style="align-items:center">
+      <div class="item-inner"><span class="cell-check"><span class="skeleton" style="width:14px;height:14px"></span></span>
+      <span class="riskedge safe"></span>
+      <span class="cell-main"><span class="skeleton" style="height:15px;width:${[62,45][i]}%;margin-bottom:3px"></span>
+      <span class="skeleton" style="height:13px;width:${[80,58][i]}%"></span></span>
+      <span class="cell-size"><span class="skeleton" style="height:16px;width:48px"></span></span>
+      <span style="width:24px"></span></div></div>`).join('');
+  return `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('results', null, true)}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','Scanning · 128,431 paths · 42 found',
+      `<button class="btn btn-primary is-disabled"><span class="spinring" style="border-color:currentColor;border-right-color:transparent"></span>Scanning…</button>
+       <button class="iconbtn">${I('more-horizontal')}</button>`)}
+    <div class="progress progress-indeterminate"></div>
+    ${Summary({headline:'91.6', sub:'42 items · 4 ecosystems so far'})}
+    <div class="ticker">${tick}</div>
+    ${TableHead()}
+    <div class="listwrap"><div class="list">${partial}${skel}</div></div>
+    ${StatusBar('Walking ~/Library/Developer · 128,431 paths')}
+  </div></div>`;
+};
+
+S.results = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('results','384')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','384 items · scanned 2m ago',
+      `<button class="btn btn-primary">${I('scan')}Scan now</button><button class="iconbtn">${I('more-horizontal')}</button>`)}
+    ${Summary({selN:18, selBytes:41.2e9})}
+    ${Toolbar()}
+    ${TableHead()}
+    <div class="listwrap"><div class="list">${AllGroups()}</div></div>
+    ${StatusBar('128,431 paths · 42.1s', 3)}
+  </div></div>`;
+
+S.confirm = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0;position:relative">${Rail('results','384')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','384 items · scanned 2m ago',`<button class="btn btn-primary">${I('scan')}Scan now</button>`)}
+    ${Summary({selN:18, selBytes:41.2e9})}
+    ${Toolbar()}${TableHead()}
+    <div class="listwrap"><div class="list">${AllGroups()}</div></div>
+    ${StatusBar('128,431 paths · 42.1s', 3)}
+  </div>
+  <div class="scrim"><div class="modal">
+    <div class="modal-head"><div class="h">
+      <div class="t-page-title">Clean 18 items</div>
+      <div class="t-body-sm sub">41.2 GB estimated</div></div>
+      <button class="iconbtn">${I('close')}</button></div>
+    <div class="modal-body">
+      <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:6px">What will happen</div>
+      <div class="effect-row">${I('trash')}<span class="txt t-body">12 directories deleted permanently</span><span class="amt t-body-sm tnum">32.1 GB</span></div>
+      <div class="effect-row">${I('terminal')}<span class="txt t-body">4 commands run</span><span class="amt t-body-sm tnum">6.7 GB</span></div>
+      <div class="effect-row">${I('refresh')}<span class="txt t-body">2 items moved to the Trash</span><span class="amt t-body-sm tnum">2.4 GB</span></div>
+
+      <div class="t-overline" style="color:var(--caution-text);margin:20px 0 8px;display:flex;align-items:center;gap:6px">
+        ${I('warning','icon icon-sm')} Needs your attention</div>
+      <div class="attn-card">
+        <div class="attn-item"><div class="row1"><span class="badge badge-caution">caution</span>
+          <span class="lbl">Remove Maven repository</span><span class="amt tnum">8.9 GB</span></div>
+          <div class="t-mono-xs" style="color:var(--text-tertiary)">~/.m2/repository</div>
+          <div class="t-body-sm" style="color:var(--text-tertiary);margin-top:3px">Dependencies will re-download.</div></div>
+        <div class="attn-item"><div class="row1"><span class="badge badge-caution">caution</span>
+          <span class="lbl">Empty Trash</span><span class="amt tnum">14.2 GB</span></div>
+          <div class="cmdline" style="margin-top:4px"><span class="glyph">▶</span>osascript -e 'tell application "Finder" to empty the trash'</div></div>
+        <div class="attn-item"><div class="row1"><span class="badge badge-danger">danger</span>
+          <span class="lbl">Delete permanently</span><span class="amt tnum">8.1 GB</span></div>
+          <div class="t-mono-xs" style="color:var(--text-tertiary)">~/Downloads/xcode_14.3.xip</div>
+          <div class="cmdline" style="margin-top:4px"><span class="glyph">⌫</span>rm -rf ~/Downloads/xcode_14.3.xip</div></div>
+      </div>
+
+      <p class="t-body-sm" style="color:var(--text-tertiary);margin:16px 0 0">
+        Deletions and commands bypass the Trash and cannot be undone.</p>
+      <div style="margin-top:14px">
+        <div class="t-label" style="color:var(--text-primary);margin-bottom:6px">Type <code class="t-mono-sm" style="color:var(--danger-text)">delete</code> to confirm</div>
+        <input class="confirm-input" placeholder="" readonly></div>
+    </div>
+    <div class="modal-foot">
+      <span class="cb" aria-checked="true">${I('check')}</span>
+      <span class="t-body-sm" style="color:var(--text-secondary)">Prefer Trash where available</span>
+      <span class="spacer"></span>
+      <button class="btn btn-secondary">Cancel</button>
+      <button class="btn btn-danger is-disabled">Clean 18 items</button>
+    </div>
+  </div></div>
+</div>`;
+
+S.cleaning = () => {
+  const queued = (it, eco, state) => {
+    const e = ECO[eco];
+    let mark = `<span style="color:var(--text-quaternary);font:430 12px/1 var(--font-mono)">◦</span>`;
+    if (state === 'active') mark = `<span class="spinring"></span>`;
+    if (state === 'fail') mark = `<span style="color:var(--danger-text);display:flex">${I('alert-circle','icon icon-sm')}</span>`;
+    const dim = state === 'queued' ? 'opacity:.55' : '';
+    return `<div class="item" style="--eco-accent:var(--eco-${e.k});--size-ratio:0;${dim};
+        ${state==='active'?'background:var(--surface-hover);box-shadow:inset 2px 0 0 var(--accent)':''}
+        ${state==='fail'?'background:var(--danger-bg)':''}">
+      <div class="item-inner">
+        <span class="cell-check">${mark}</span><span class="riskedge ${it.risk}"></span>
+        <span class="cell-main">
+          <span class="line1"><span class="kindname">${it.kind}</span>${it.proj?`<span class="projname">· ${it.proj}</span>`:''}
+          ${state==='fail'?'<span class="badge badge-danger">failed</span>':''}</span>
+          <span class="line2">${state==='fail'
+            ? `<span class="t-mono-xs" style="color:var(--danger-text)">Command failed: \`cargo\` was not found in PATH</span>
+               <span class="chip" style="height:18px;padding:0 6px;font-size:11px">Use “Remove target/” instead ${I('arrow-right','icon icon-sm')}</span>`
+            : Path(it.path, it.proj)}</span>
+        </span>
+        <span class="cell-stale t-caption">${state==='active'?'running':''}</span>
+        <span class="cell-mag"></span>
+        <span class="cell-size">${Size(it.b)}</span>
+        <span class="cell-chev"></span>
+      </div></div>`;
+  };
+  const g = GROUPS[0], a = GROUPS[1];
+  return `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('results','384')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','Cleaning 18 items','<button class="btn btn-primary is-disabled">Cleaning…</button>')}
+    <div class="summary" style="align-items:stretch;padding-top:10px;padding-bottom:10px;height:78px">
+      <div style="flex:1;display:flex;flex-direction:column;justify-content:center;gap:7px">
+        <div style="display:flex;align-items:baseline;gap:12px">
+          <span class="t-body-strong">Cleaning 7 of 18</span>
+          <span class="t-caption tnum" style="color:var(--text-tertiary);margin-left:auto">39%</span>
+        </div>
+        <div class="bigbar" style="--pct:39"><i></i></div>
+        <div style="display:flex;gap:12px">
+          <span class="t-caption" style="color:var(--text-tertiary)">Remove node_modules/ · ~/git/dashboard</span>
+          <span class="t-caption tnum" style="color:var(--text-secondary);margin-left:auto"><b>12.4 GB</b> freed so far</span>
+        </div>
+      </div>
+    </div>
+    ${TableHead()}
+    <div class="listwrap"><div class="list">
+      ${Group(g)}
+      ${queued(g.items[0], 'node', 'done')}
+      ${queued(g.items[1], 'node', 'active')}
+      ${queued(g.items[2], 'node', 'queued')}
+      ${Group(GROUPS[2])}
+      ${queued(GROUPS[2].items[0], 'rust', 'fail')}
+      ${Group(a)}
+      ${queued(a.items[0], 'apple', 'queued')}
+      ${queued(a.items[2], 'apple', 'queued')}
+    </div></div>
+    ${StatusBar('Sequential batch · failures do not stop the queue', 3)}
+  </div></div>`;
+};
+
+S.complete = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('results','369')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','369 items · cleaned just now',
+      `<button class="btn btn-primary">${I('scan')}Scan now</button><button class="iconbtn">${I('more-horizontal')}</button>`)}
+    <div style="height:96px;flex:none;display:flex;align-items:center;gap:14px;padding:0 var(--pad-window-x);
+      border-bottom:1px solid var(--border-subtle);background:var(--safe-bg)">
+      <span style="color:var(--safe-text);display:flex">${I('shield-check','icon icon-xl')}</span>
+      <div style="flex:1">
+        <div style="display:flex;align-items:baseline;gap:8px">
+          <span class="t-metric-sm" style="color:var(--text-primary)">Reclaimed 38.4 GB</span>
+          <span class="badge badge-neutral" title="Void can't measure what cargo clean and similar commands remove.">estimated</span>
+        </div>
+        <div class="t-body-sm tnum" style="color:var(--text-secondary);margin-top:3px">
+          15 of 18 cleaned · <span style="color:var(--danger-text);text-decoration:underline">3 failed</span> · 24 seconds</div>
+      </div>
+      <button class="btn btn-secondary">View report</button>
+      <button class="btn btn-ghost">Scan again</button>
+      <button class="iconbtn">${I('close')}</button>
+    </div>
+    ${Toolbar()}${TableHead()}
+    <div class="listwrap"><div class="list">${GROUPS.slice(1,5).map(g=>Group(g)+g.items.map(i=>Item(i,g.eco)).join('')).join('')}</div></div>
+    ${StatusBar('Last clean 24s · 3 failed', 3)}
+  </div></div>`;
+
+S.drawer = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0;position:relative">${Rail('results','384')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','384 items · scanned 2m ago',`<button class="btn btn-primary">${I('scan')}Scan now</button>`)}
+    ${Summary({selN:18, selBytes:41.2e9})}
+    ${TableHead()}
+    <div class="listwrap"><div class="list">
+      ${Group(GROUPS[0])}
+      ${Item({...GROUPS[0].items[0], sel:false}, 'node', {focus:true})}
+      ${GROUPS[0].items.slice(1).map(i=>Item(i,'node')).join('')}
+      ${Group(GROUPS[1])}
+      ${GROUPS[1].items.map(i=>Item(i,'apple')).join('')}
+    </div></div>
+    ${StatusBar('128,431 paths · 42.1s', 3)}
+  </div>
+  <div class="drawer-scrim"></div>
+  <div class="drawer is-overlay">
+    <div class="drawer-head">
+      <button class="iconbtn" title="Previous item (⌥↑)">${I('chevron-up')}</button>
+      <button class="iconbtn" title="Next item (⌥↓)">${I('chevron-down')}</button>
+      <div style="flex:1"></div><button class="iconbtn">${I('close')}</button>
+    </div>
+    <div class="drawer-body">
+      <div class="drawer-sect" style="padding-bottom:12px">
+        <div style="display:flex;align-items:center;gap:6px;color:var(--eco-node)">
+          ${I('eco-node','icon icon-sm')}<span class="t-body-sm">Node.js</span></div>
+        <div class="t-page-title" style="margin-top:4px">node_modules/</div>
+        <div class="t-body-sm" style="color:var(--text-tertiary)">void-web</div>
+      </div>
+      <div class="drawer-sect">
+        <div class="pathplate">~/git/void-web/node_modules</div>
+        <div style="display:flex;gap:8px;margin-top:8px">
+          <button class="btn btn-secondary btn-sm">${I('copy','icon icon-sm')}Copy</button>
+          <button class="btn btn-secondary btn-sm">${I('external-link','icon icon-sm')}Reveal</button></div>
+      </div>
+      <div class="drawer-sect">
+        <dl class="facts t-body-sm">
+          <dt>Size</dt><dd>4.1 GB</dd>
+          <dt>Last modified</dt><dd>12 days ago · Aug 10, 2026</dd>
+          <dt>Kind</dt><dd>node_modules</dd>
+          <dt>Project</dt><dd class="t-mono-sm">~/git/void-web</dd>
+        </dl>
+      </div>
+      <div class="drawer-sect">
+        <div class="t-overline">Choose an action</div>
+        <div class="action-opt">
+          <span class="radio is-on"></span>
+          <div class="body">
+            <div class="row1"><span class="lbl">Remove node_modules/</span>
+              <span class="badge badge-safe">safe</span>
+              <span class="badge badge-neutral">default</span></div>
+            <div class="desc">Delete the entire node_modules directory</div>
+            <div class="cmdline"><span class="glyph">⌫</span>Delete directory recursively</div>
+            <div class="outcome">Frees 4.1 GB · Not recoverable</div>
+          </div>
+        </div>
+        <div class="action-opt">
+          <span class="radio"></span>
+          <div class="body">
+            <div class="row1"><span class="lbl">npm cache clean</span><span class="badge badge-safe">safe</span></div>
+            <div class="desc">Run npm cache clean --force to clear the npm cache</div>
+            <div class="cmdline"><span class="glyph">▶</span>npm cache clean --force<br>in ~/git/void-web</div>
+            <div class="outcome">Frees unknown · Not recoverable</div>
+          </div>
+        </div>
+      </div>
+      <div class="drawer-sect" style="border-bottom:0">
+        <div class="t-overline">Safety</div>
+        <div class="safety-line ok">${I('check')}<span>Path is outside all protected locations</span></div>
+        <div class="safety-line ok">${I('check')}<span>No credential files detected in this folder</span></div>
+        <div class="safety-line ok">${I('check')}<span>Checked against your blocklist before deleting</span></div>
+      </div>
+    </div>
+    <div class="drawer-foot">
+      <button class="btn btn-secondary" style="flex:1">Exclude this path</button>
+      <button class="btn btn-primary" style="flex:1">Clean this item</button>
+    </div>
+  </div>
+</div>`;
+</script>
+
+<script>
+S.settings = () => {
+  const ecos = [['node','58.2 GB · 94 items',1],['apple','31.0 GB · 18 items',1],['rust','22.4 GB · 42 items',1],
+    ['docker','unknown · 1 item',1],['dot_net','not detected',0]];
+  return `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('settings')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Settings','Changes apply to your next scan',
+      `<span class="t-caption" style="color:var(--safe-text)">${I('check','icon icon-sm')} Saved</span>`)}
+    <div style="height:44px;flex:none;display:flex;align-items:center;padding:0 var(--pad-window-x);
+      border-bottom:1px solid var(--border-subtle)">
+      <div class="seg">
+        <button class="is-on">Scanning</button><button>Ecosystems</button><button>Safety</button>
+        <button>Performance</button><button>General</button><button>About</button>
+      </div>
+    </div>
+    <div style="flex:1;overflow-y:auto">
+      <div class="form">
+        <div class="field">
+          <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:8px">Scan roots</div>
+          <div class="t-body-sm help">Directories Void walks. Defaults to your home folder.</div>
+          <div class="pathlist">
+            <div class="pathrow">${I('folder','icon icon-sm')}<span class="p">~/</span><button class="iconbtn" style="width:22px;height:22px">${I('close','icon icon-sm')}</button></div>
+            <div class="pathrow">${I('folder','icon icon-sm')}<span class="p">/Volumes/Work</span><button class="iconbtn" style="width:22px;height:22px">${I('close','icon icon-sm')}</button></div>
+          </div>
+          <button class="btn btn-secondary btn-sm" style="margin-top:8px">${I('plus','icon icon-sm')}Add folder…</button>
+        </div>
+
+        <div class="field">
+          <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:8px">Staleness</div>
+          <div class="t-body-sm help">Flag artifacts untouched for longer than</div>
+          <div style="display:flex;align-items:center;gap:8px">
+            <span style="display:inline-flex;align-items:center;height:30px;width:64px;padding:0 9px;border-radius:var(--radius-sm);
+              border:1px solid var(--border-strong);background:var(--surface-sunken)" class="t-body tnum">30</span>
+            <span class="t-body" style="color:var(--text-secondary)">days</span>
+          </div>
+          <div class="t-caption" style="color:var(--text-quaternary);margin-top:8px;max-width:46ch">
+            Affects the stale badge and the “Stale only” filter. Does not change what Void scans.</div>
+        </div>
+
+        <div class="field">
+          <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:8px">Ecosystems</div>
+          <div class="pathlist">
+            ${ecos.map(([k,stat,on])=>`<div class="ecorow">
+              <span style="color:var(--eco-${ECO[k].k});display:flex">${I('eco-'+ECO[k].k)}</span>
+              <span class="nm t-body">${ECO[k].n}</span>
+              <span class="stat t-caption" ${!on?'style="color:var(--text-quaternary)"':''}>${stat}</span>
+              <span class="toggle ${on?'is-on':''}"><i></i></span></div>`).join('')}
+          </div>
+        </div>
+
+        <div class="field">
+          <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:8px">Safety</div>
+          <div class="t-body-sm help">Void refuses to delete these, always. Read-only.</div>
+          <div class="pathlist" style="opacity:.72">
+            <div class="pathrow is-locked">${I('lock','icon icon-sm')}<span class="p">~/Documents · ~/Desktop · ~/Downloads · ~/Pictures</span></div>
+            <div class="pathrow is-locked">${I('lock','icon icon-sm')}<span class="p">~/Library/Keychains · ~/Library/Preferences</span></div>
+            <div class="pathrow is-locked">${I('lock','icon icon-sm')}<span class="p">.ssh .gnupg .aws .config .env .Trash</span></div>
+          </div>
+        </div>
+
+        <div class="field">
+          <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:8px">Performance</div>
+          <div style="display:flex;justify-content:space-between"><span class="t-label">Walker threads</span>
+            <span class="t-caption tnum" style="color:var(--text-tertiary)">8 of 16 cores</span></div>
+          <div class="slider" style="--pct:50"><i></i><b></b></div>
+          <div style="display:flex;justify-content:space-between;margin-top:14px"><span class="t-label">Max concurrent analyses</span>
+            <span class="t-caption tnum" style="color:var(--text-tertiary)">8</span></div>
+          <div class="slider" style="--pct:25"><i></i><b></b></div>
+          <div style="display:flex;justify-content:space-between;margin-top:14px"><span class="t-label">CPU threshold</span>
+            <span class="t-caption tnum" style="color:var(--text-tertiary)">70%</span></div>
+          <div class="slider" style="--pct:70"><i></i><b></b></div>
+        </div>
+      </div>
+    </div>
+    <div class="statusbar t-caption">
+      <span>Changes apply to your next scan.</span>
+      <button class="btn btn-ghost btn-sm" style="height:20px">Rescan now</button>
+      <span class="spacer"></span>
+      <span style="color:var(--caution-text)">${I('warning','icon icon-sm')} Not persisted yet</span>
+    </div>
+  </div></div>`;
+};
+
+S.history = () => {
+  const bars = [22,54,38,96,14,18,66,31,12,44,78,20,35,100];
+  return `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0">${Rail('history')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('History','14 runs · 340.2 GB reclaimed',`<button class="iconbtn">${I('more-horizontal')}</button>`)}
+    <div style="padding:16px var(--pad-window-x) 0;display:flex;gap:10px">
+      <div class="stattile"><span class="k t-overline">All time</span><span class="v t-metric-sm">340.2 GB</span></div>
+      <div class="stattile"><span class="k t-overline">Last 30 days</span><span class="v t-metric-sm">38.4 GB</span></div>
+      <div class="stattile"><span class="k t-overline">Runs</span><span class="v t-metric-sm">14</span></div>
+    </div>
+    <div style="padding:20px var(--pad-window-x) 14px">
+      <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:10px">Reclaimed per run</div>
+      <div class="spark">${bars.map((h,i)=>`<i class="${h>70?'hi':''}" style="height:${h}%"></i>`).join('')}</div>
+      <div style="display:flex;justify-content:space-between;margin-top:6px" class="t-caption">
+        <span style="color:var(--text-quaternary)">Jun</span><span style="color:var(--text-quaternary)">Jul</span><span style="color:var(--text-quaternary)">Aug</span></div>
+    </div>
+    <div class="tablehead">
+      <span class="t-colhead" style="width:150px">Date</span>
+      <span class="t-colhead" style="width:60px;text-align:right">Items</span>
+      <span class="t-colhead" style="width:90px;text-align:right">Freed</span>
+      <span class="t-colhead" style="flex:1;padding-left:16px">Result</span>
+      <span style="width:24px"></span></div>
+    <div class="listwrap"><div class="list">
+      ${[['Today, 14:22','18','38.4 GB','<span style="color:var(--safe-text)">15 ok</span> · <span style="color:var(--danger-text)">3 failed</span>'],
+         ['Aug 14, 09:01','6','12.1 GB','<span style="color:var(--safe-text)">6 ok</span>'],
+         ['Aug 02, 18:40','31','64.8 GB','<span style="color:var(--safe-text)">31 ok</span>'],
+         ['Jul 28, 11:15','12','21.7 GB','<span style="color:var(--safe-text)">12 ok</span>'],
+         ['Jul 09, 20:03','44','96.2 GB','<span style="color:var(--safe-text)">42 ok</span> · <span style="color:var(--danger-text)">2 failed</span>']]
+        .map(([d,n,f,r])=>`<div class="hrow">
+          <span class="d t-body">${d}</span><span class="n t-body-sm">${n}</span>
+          <span class="f t-body">${f}</span><span class="r t-body-sm">${r}</span>
+          <span style="width:24px;color:var(--text-quaternary);display:flex;justify-content:center">${I('chevron-right','icon icon-sm')}</span>
+        </div>`).join('')}
+    </div></div>
+    ${StatusBar('Retained for 12 months')}
+  </div></div>`;
+};
+
+S.tray = () => `
+  <div class="tray-head">
+    <div class="void-lockup"><span class="void-mark">${MARK}</span>
+      <span class="void-word"><span class="v">V</span>oid</span></div>
+    <div style="flex:1"></div>
+    <button class="iconbtn" style="width:24px;height:24px">${I('settings','icon icon-sm')}</button>
+  </div>
+  <div style="padding:18px 16px 14px;text-align:center">
+    <div class="t-metric-md" style="color:var(--text-primary)">142.6 GB</div>
+    <div class="t-body-sm" style="color:var(--text-tertiary);margin-top:2px">reclaimable</div>
+    <div class="diskmeter" style="margin-top:14px"><i class="seg-used" style="width:49%"></i><i class="seg-recl" style="width:14%"></i></div>
+    <div class="t-caption tnum" style="color:var(--text-quaternary);margin-top:6px;text-align:left">512 GB free of 1 TB</div>
+  </div>
+  <div class="tray-sect" style="border-top:1px solid var(--border-subtle);padding-top:10px">
+    <div class="t-overline" style="color:var(--text-quaternary);margin-bottom:4px">Top ecosystems</div>
+    ${[['node','94 items','58.2 GB'],['apple','18 items','31.0 GB'],['rust','42 items','22.4 GB'],['docker','1 item','unknown']]
+      .map(([k,c,s])=>`<div class="tray-eco">
+        <span style="color:var(--eco-${ECO[k].k});display:flex">${I('eco-'+ECO[k].k,'icon icon-sm')}</span>
+        <span class="nm">${ECO[k].n}</span><span class="ct">${c}</span>
+        <span class="sz" ${s==='unknown'?'style="font-style:italic;color:var(--text-quaternary);font-weight:450"':''}>${s}</span></div>`).join('')}
+  </div>
+  <div style="padding:0 12px 12px;display:flex;flex-direction:column;gap:6px">
+    <button class="btn btn-primary btn-lg" style="width:100%">${I('scan')}Scan now</button>
+    <button class="btn btn-secondary btn-lg" style="width:100%">Open Void<span class="kbd">⌘⇧V</span></button>
+  </div>
+  <div style="height:28px;display:flex;align-items:center;padding:0 12px;border-top:1px solid var(--border-subtle)">
+    <span class="t-caption" style="color:var(--text-quaternary)">Last scan 2m ago</span></div>`;
+
+S.errors = () => `${Titlebar('Void')}
+<div style="display:flex;flex:1;min-height:0;position:relative">${Rail('results','0')}
+  <div style="flex:1;display:flex;flex-direction:column;min-width:0">
+    ${Cmdbar('Results','Scan finished · nothing found',`<button class="btn btn-primary">${I('scan')}Scan now</button>`)}
+    <div class="banner">${I('lock')}<span class="txt">Some folders couldn't be read. Xcode and Library caches may be missing.</span>
+      <button class="btn btn-secondary btn-sm">Grant Full Disk Access</button>
+      <button class="iconbtn" style="width:24px;height:24px">${I('close','icon icon-sm')}</button></div>
+    <div class="listwrap"><div class="list" style="display:flex;flex-direction:column">
+      <div class="state">
+        ${I('shield-check','glyph icon icon-xl')}
+        <div class="title">Nothing to reclaim</div>
+        <div class="body">Void scanned 128,431 paths in <span class="t-mono-sm">~/</span> and found no build artifacts.
+          On macOS this is usually a permissions problem rather than a clean machine.</div>
+        <div class="actions"><button class="btn btn-secondary">Check scan roots</button>
+          <button class="btn btn-ghost">Scan again</button></div>
+        <div class="hint">⌘R to rescan</div>
+      </div>
+    </div></div>
+    <div class="statusbar t-caption">
+      <span>128,431 paths · 6.2s</span><span class="spacer"></span>
+      <span class="issues">${I('warning','icon icon-sm')} 3 issues</span>
+      <span style="color:var(--text-quaternary)">Comfortable</span></div>
+  </div>
+  <!-- issues sheet -->
+  <div style="position:absolute;right:16px;bottom:34px;width:420px;z-index:10" class="popover">
+    <div style="padding:10px 12px;border-bottom:1px solid var(--border-subtle);display:flex;align-items:center;gap:8px">
+      <span class="t-section-title">Scan issues</span><span class="countpill tnum">3</span>
+      <div style="flex:1"></div><button class="iconbtn" style="width:22px;height:22px">${I('close','icon icon-sm')}</button></div>
+    <div style="padding:8px 12px;display:flex;flex-direction:column;gap:8px">
+      ${[['Permission denied: ~/Library/Containers','×214'],
+         ['IO error: No such file or directory (os error 2)','×2'],
+         ['docker: daemon not running','']]
+        .map(([m,n])=>`<div style="display:flex;gap:8px;align-items:flex-start">
+          <span class="t-mono-xs" style="color:var(--text-secondary);flex:1;word-break:break-all">${m}</span>
+          ${n?`<span class="countpill tnum">${n}</span>`:''}</div>`).join('')}
+    </div>
+    <div style="padding:8px 12px;border-top:1px solid var(--border-subtle);display:flex;gap:8px">
+      <button class="btn btn-secondary btn-sm">Copy all</button>
+      <button class="btn btn-ghost btn-sm">Open logs</button></div>
+  </div>
+</div>`;
+
+/* ── Mount ── */
+document.querySelectorAll('[data-screen]').forEach(el => {
+  const fn = S[el.dataset.screen];
+  if (fn) el.innerHTML = fn();
+});
+
+/* ── Doc theme toggle ── */
+const root = document.documentElement;
+const bD = document.getElementById('tDark'), bL = document.getElementById('tLight');
+function setDoc(t){ root.dataset.doc = t; bD.classList.toggle('on', t === 'dark'); bL.classList.toggle('on', t === 'light'); }
+bD.onclick = () => setDoc('dark'); bL.onclick = () => setDoc('light');
+setDoc(matchMedia('(prefers-color-scheme: light)').matches ? 'light' : 'dark');
+</script>
+
+<style>
+/* ══════════════════════════════════════════════════════════════════════
+   VOID COLOR SYSTEM v1
+   Neutral hue 254 / accent hue 252, both sampled from the app icon's glow.
+   Scoped to .app here so both themes render side by side in this document.
+   In the shipping app these go on :root — see the note in section 02.
+   ══════════════════════════════════════════════════════════════════════ */
+.app, .app[data-theme="light"] {
+  /* ---------- PRIMITIVE : NEUTRAL (OKLCH hue 254) ---------- */
+  --n-0: #FFFFFF;              /* oklch(1.000 0.000 254) */
+  --n-50: #FAFBFD;             /* oklch(0.988 0.003 254) */
+  --n-100: #F3F6F9;            /* oklch(0.972 0.005 254) */
+  --n-150: #E5E8ED;            /* oklch(0.930 0.007 254) */
+  --n-200: #D7DCE1;            /* oklch(0.892 0.009 254) */
+  --n-300: #C2C7CE;            /* oklch(0.828 0.011 254) */
+  --n-400: #A5ABB3;            /* oklch(0.740 0.013 254) */
+  --n-500: #868D95;            /* oklch(0.640 0.015 254) */
+  --n-600: #69717A;            /* oklch(0.545 0.017 254) */
+  --n-700: #515963;            /* oklch(0.462 0.019 254) */
+  --n-800: #363E48;            /* oklch(0.360 0.020 254) */
+  --n-850: #283039;            /* oklch(0.305 0.020 254) */
+  --n-900: #1C232C;            /* oklch(0.252 0.020 254) */
+  --n-950: #0F151D;            /* oklch(0.195 0.018 254) */
+  --n-975: #060B11;            /* oklch(0.148 0.016 254) */
+  --n-1000: #010306;           /* oklch(0.095 0.014 254) */
+
+  /* ---------- PRIMITIVE : GLOW  (accent, OKLCH hue 252) ---------- */
+  --glow-50: #EDF5FF;          /* oklch(0.968 0.016 252) */
+  --glow-100: #DBECFF;         /* oklch(0.935 0.032 252) */
+  --glow-200: #BEDCFF;         /* oklch(0.885 0.058 252) */
+  --glow-300: #95C7FF;         /* oklch(0.815 0.096 252) */
+  --glow-400: #6BB2FF;         /* oklch(0.748 0.133 252) */
+  --glow-500: #389BFF;         /* oklch(0.682 0.173 252) */
+  --glow-600: #007FE2;         /* oklch(0.592 0.177 252) */
+  --glow-700: #0064B5;         /* oklch(0.500 0.150 252) */
+  --glow-800: #004986;         /* oklch(0.402 0.121 252) */
+  --glow-900: #00315E;         /* oklch(0.312 0.094 252) */
+  --glow-950: #001E3E;         /* oklch(0.235 0.071 252) */
+
+  /* ---------- PRIMITIVE : SAFE (OKLCH hue 170) ---------- */
+  --safe-50: #E8FFF6;          /* oklch(0.980 0.026 170) */
+  --safe-100: #D0FCEB;         /* oklch(0.955 0.050 170) */
+  --safe-200: #77F8CF;         /* oklch(0.895 0.130 170) */
+  --safe-300: #6AECC4;         /* oklch(0.860 0.130 170) */
+  --safe-400: #54D8B1;         /* oklch(0.800 0.130 170) */
+  --safe-500: #39C39D;         /* oklch(0.735 0.130 170) */
+  --safe-600: #05AB86;         /* oklch(0.660 0.130 170) */
+  --safe-650: #009D7B;         /* oklch(0.620 0.123 170) */
+  --safe-700: #007D61;         /* oklch(0.525 0.104 170) */
+  --safe-800: #00634C;         /* oklch(0.445 0.088 170) */
+  --safe-900: #004332;         /* oklch(0.340 0.067 170) */
+  --safe-950: #002A1F;         /* oklch(0.255 0.051 170) */
+
+  /* ---------- PRIMITIVE : CAUTION (OKLCH hue 88) ---------- */
+  --caution-50: #FFF8E7;       /* oklch(0.980 0.023 88) */
+  --caution-100: #FFEFC8;      /* oklch(0.955 0.053 88) */
+  --caution-200: #FFD875;      /* oklch(0.895 0.125 88) */
+  --caution-300: #FEC92F;      /* oklch(0.860 0.165 88) */
+  --caution-400: #E9B600;      /* oklch(0.800 0.164 88) */
+  --caution-500: #D1A200;      /* oklch(0.735 0.150 88) */
+  --caution-600: #B58C00;      /* oklch(0.660 0.135 88) */
+  --caution-650: #A68000;      /* oklch(0.620 0.127 88) */
+  --caution-700: #846600;      /* oklch(0.525 0.107 88) */
+  --caution-800: #695000;      /* oklch(0.445 0.091 88) */
+  --caution-900: #473500;      /* oklch(0.340 0.070 88) */
+  --caution-950: #2D2100;      /* oklch(0.255 0.053 88) */
+
+  /* ---------- PRIMITIVE : DANGER (OKLCH hue 15) ---------- */
+  --danger-50: #FFF6F6;        /* oklch(0.980 0.010 15) */
+  --danger-100: #FFEAEB;       /* oklch(0.955 0.022 15) */
+  --danger-200: #FFCED1;       /* oklch(0.895 0.055 15) */
+  --danger-300: #FFBDC1;       /* oklch(0.860 0.076 15) */
+  --danger-400: #FF9EA6;       /* oklch(0.800 0.116 15) */
+  --danger-500: #FF7887;       /* oklch(0.735 0.164 15) */
+  --danger-600: #EF546C;       /* oklch(0.660 0.190 15) */
+  --danger-650: #E14660;       /* oklch(0.620 0.190 15) */
+  --danger-700: #BF2145;       /* oklch(0.525 0.190 15) */
+  --danger-800: #9E0032;       /* oklch(0.445 0.178 15) */
+  --danger-900: #6D0020;       /* oklch(0.340 0.136 15) */
+  --danger-950: #480012;       /* oklch(0.255 0.102 15) */
+
+  /* ============ SEMANTIC — LIGHT THEME ============ */
+  --surface-base: #FAFBFD;            
+  --surface-raised: #FFFFFF;          
+  --surface-sunken: #F3F6F9;          
+  --surface-overlay: #FFFFFF;         
+  --surface-inset: #E5E8ED;           
+  --surface-scrim: rgba(28, 35, 44, 0.45);
+
+  --border-subtle: #E5E8ED;            /* decorative hairline */
+  --border-default: #D7DCE1;           /* decorative separator */
+  --border-strong: #868D95;            /* >=3:1 — inputs, checkboxes, toggles */
+
+  --text-primary: #1C232C;            
+  --text-secondary: #515963;          
+  --text-tertiary: #69717A;           
+  --text-disabled: #A5ABB3;            /* WCAG 1.4.3 inactive-control exception */
+  --text-inverse: #FFFFFF;            
+  --text-on-accent: #FFFFFF;          
+  --text-code: #363E48;               
+  --text-link: #0064B5;               
+
+  --accent-bg: #0064B5;               
+  --accent-bg-hover: #004986;         
+  --accent-bg-active: #00315E;        
+  --accent-subtle: #EDF5FF;           
+  --accent-subtle-hover: #DBECFF;     
+  --accent-border: #BEDCFF;            /* decorative */
+  --accent-border-strong: #007FE2;     /* >=3:1 */
+  --accent-text: #0064B5;             
+  --accent-on-solid: #FFFFFF;         
+
+  --safe-text: #007D61;               
+  --safe-bg-subtle: #E8FFF6;          
+  --safe-bg-subtle-hover: #D0FCEB;    
+  --safe-border: #77F8CF;              /* decorative */
+  --safe-border-strong: #009D7B;       /* >=3:1 */
+  --safe-solid: #007D61;              
+  --safe-solid-hover: #00634C;        
+  --safe-solid-active: #004332;       
+  --safe-on-solid: #FFFFFF;           
+
+  --caution-text: #695000;            
+  --caution-bg-subtle: #FFF8E7;       
+  --caution-bg-subtle-hover: #FFEFC8; 
+  --caution-border: #FFD875;           /* decorative */
+  --caution-border-strong: #A68000;    /* >=3:1 */
+  --caution-solid: #695000;           
+  --caution-solid-hover: #473500;     
+  --caution-solid-active: #2D2100;    
+  --caution-on-solid: #FFFFFF;        
+
+  --danger-text: #6D0020;             
+  --danger-bg-subtle: #FFF6F6;        
+  --danger-bg-subtle-hover: #FFEAEB;  
+  --danger-border: #FFCED1;            /* decorative */
+  --danger-border-strong: #E14660;     /* >=3:1 */
+  --danger-solid: #BF2145;            
+  --danger-solid-hover: #9E0032;      
+  --danger-solid-active: #6D0020;     
+  --danger-on-solid: #FFFFFF;         
+
+  --success-text: #007D61;             /* alias of safe */
+  --success-bg-subtle: #E8FFF6;       
+  --success-solid: #007D61;           
+  --error-text: #6D0020;               /* alias of danger */
+  --error-bg-subtle: #FFF6F6;         
+  --error-solid: #BF2145;             
+  --warning-text: #695000;             /* alias of caution */
+  --warning-bg-subtle: #FFF8E7;       
+  --info-text: #0064B5;               
+  --info-bg-subtle: #EDF5FF;          
+
+  --state-hover: #F3F3F3;             
+  --state-active: #E8E9EA;            
+  --state-selected: #EDF5FF;          
+  --state-selected-hover: #DBECFF;    
+  --state-selected-border: #007FE2;   
+  --state-disabled-bg: #F3F6F9;       
+  --state-disabled-border: #D7DCE1;   
+  --state-disabled-text: #A5ABB3;     
+  --focus-ring: #007FE2;              
+  --focus-ring-offset: #FAFBFD;       
+  --skeleton-base: #E5E8ED;           
+  --skeleton-shine: #F3F6F9;          
+
+  --eco-rust: #BB5F00;                
+  --eco-java: #954D3F;                
+  --eco-homebrew: #777B18;            
+  --eco-node: #097200;                
+  --eco-go: #0095A1;                  
+  --eco-docker: #007397;              
+  --eco-python: #004E85;              
+  --eco-apple: #6D74D8;               
+  --eco-dotnet: #712DC3;              
+  --eco-jetbrains: #811288;           
+  --eco-system: #C63E86;              
+
+  --eco-rust-soft: #F7ECE0;           
+  --eco-java-soft: #F2EAE8;           
+  --eco-homebrew-soft: #EFEFE3;       
+  --eco-node-soft: #E1EEE0;           
+  --eco-go-soft: #E0F2F4;             
+  --eco-docker-soft: #E0EEF3;         
+  --eco-python-soft: #E0EAF0;         
+  --eco-apple-soft: #EDEEFA;          
+  --eco-dotnet-soft: #EEE6F8;         
+  --eco-jetbrains-soft: #F0E3F1;      
+  --eco-system-soft: #F8E8F0;         
+
+  --seq-1: #E5F2FF;                   
+  --seq-2: #C4E0FD;                   
+  --seq-3: #9AC7F8;                   
+  --seq-4: #67A9F0;                   
+  --seq-5: #2B86E4;                   
+  --seq-6: #0062BA;                   
+  --seq-7: #004085;                   
+  --chart-track: #E5E8ED;             
+  --chart-grid: #D7DCE1;              
+  --chart-axis: #C2C7CE;              
+  --chart-label: #69717A;             
+
+  --shadow-1: 0 1px 2px rgba(16,24,40,.06), 0 1px 3px rgba(16,24,40,.10);
+  --shadow-2: 0 4px 10px -3px rgba(16,24,40,.10), 0 2px 4px -2px rgba(16,24,40,.06);
+  --shadow-3: 0 16px 32px -8px rgba(16,24,40,.14), 0 4px 10px -4px rgba(16,24,40,.07);
+  --shadow-glow: 0 0 0 1px rgba(0,127,226,.28), 0 4px 16px -4px rgba(0,127,226,.28);
+  --shadow-focus: 0 0 0 2px #FAFBFD, 0 0 0 4px #007FE2;
+}
+
+.app[data-theme="dark"] {
+  --surface-base: #060B11;            
+  --surface-raised: #0F151D;          
+  --surface-sunken: #010306;          
+  --surface-overlay: #1C232C;         
+  --surface-inset: #010306;           
+  --surface-scrim: rgba(1, 3, 6, 0.78);
+
+  --border-subtle: #1C232C;            /* decorative hairline */
+  --border-default: #283039;           /* decorative separator */
+  --border-strong: #69717A;            /* >=3:1 — inputs, checkboxes, toggles */
+
+  --text-primary: #F3F6F9;            
+  --text-secondary: #A5ABB3;          
+  --text-tertiary: #868D95;           
+  --text-disabled: #515963;            /* WCAG 1.4.3 inactive-control exception */
+  --text-inverse: #010306;            
+  --text-on-accent: #010306;          
+  --text-code: #D7DCE1;               
+  --text-link: #6BB2FF;               
+
+  --accent-bg: #389BFF;               
+  --accent-bg-hover: #6BB2FF;         
+  --accent-bg-active: #007FE2;        
+  --accent-subtle: #15283D;           
+  --accent-subtle-hover: #18324F;     
+  --accent-border: #1D436A;            /* decorative */
+  --accent-border-strong: #007FE2;     /* >=3:1 */
+  --accent-text: #6BB2FF;             
+  --accent-on-solid: #010306;         
+
+  --safe-text: #6AECC4;               
+  --safe-bg-subtle: #182A2E;          
+  --safe-bg-subtle-hover: #1C3334;    
+  --safe-border: #2C5A52;              /* decorative */
+  --safe-border-strong: #05AB86;       /* >=3:1 */
+  --safe-solid: #39C39D;              
+  --safe-solid-hover: #54D8B1;        
+  --safe-solid-active: #05AB86;       
+  --safe-on-solid: #010306;           
+
+  --caution-text: #E9B600;            
+  --caution-bg-subtle: #25251A;       
+  --caution-bg-subtle-hover: #2E2C19; 
+  --caution-border: #554914;           /* decorative */
+  --caution-border-strong: #B58C00;    /* >=3:1 */
+  --caution-solid: #E9B600;           
+  --caution-solid-hover: #FEC92F;     
+  --caution-solid-active: #D1A200;    
+  --caution-on-solid: #010306;        
+
+  --danger-text: #EF546C;             
+  --danger-bg-subtle: #251B25;        
+  --danger-bg-subtle-hover: #2E1E28;  
+  --danger-border: #572936;            /* decorative */
+  --danger-border-strong: #EF546C;     /* >=3:1 */
+  --danger-solid: #EF546C;            
+  --danger-solid-hover: #FF7887;      
+  --danger-solid-active: #E14660;     
+  --danger-on-solid: #010306;         
+
+  --success-text: #6AECC4;             /* alias of safe */
+  --success-bg-subtle: #182A2E;       
+  --success-solid: #39C39D;           
+  --error-text: #EF546C;               /* alias of danger */
+  --error-bg-subtle: #251B25;         
+  --error-solid: #EF546C;             
+  --warning-text: #E9B600;             /* alias of caution */
+  --warning-bg-subtle: #25251A;       
+  --info-text: #6BB2FF;               
+  --info-bg-subtle: #15283D;          
+
+  --state-hover: #1B2128;             
+  --state-active: #252A31;            
+  --state-selected: #15283D;          
+  --state-selected-hover: #18324F;    
+  --state-selected-border: #389BFF;   
+  --state-disabled-bg: #1C232C;       
+  --state-disabled-border: #283039;   
+  --state-disabled-text: #515963;     
+  --focus-ring: #6BB2FF;              
+  --focus-ring-offset: #060B11;       
+  --skeleton-base: #1C232C;           
+  --skeleton-shine: #283039;          
+
+  --eco-rust: #FF8505;                
+  --eco-java: #C37D6F;                
+  --eco-homebrew: #A0A645;            
+  --eco-node: #3AA831;                
+  --eco-go: #31C7D5;                  
+  --eco-docker: #009AC7;              
+  --eco-python: #2174B7;              
+  --eco-apple: #AAB4FF;               
+  --eco-dotnet: #A676F9;              
+  --eco-jetbrains: #A34AAA;           
+  --eco-system: #FF89C0;              
+
+  --eco-rust-soft: #352719;           
+  --eco-java-soft: #2C262A;           
+  --eco-homebrew-soft: #262C23;       
+  --eco-node-soft: #162D20;           
+  --eco-go-soft: #14313A;             
+  --eco-docker-soft: #0D2A38;         
+  --eco-python-soft: #122436;         
+  --eco-apple-soft: #282E41;          
+  --eco-dotnet-soft: #272540;         
+  --eco-jetbrains-soft: #271D34;      
+  --eco-system-soft: #352837;         
+
+  --seq-1: #17213D;                   
+  --seq-2: #233A6E;                   
+  --seq-3: #2959A2;                   
+  --seq-4: #2579D4;                   
+  --seq-5: #1C9DFD;                   
+  --seq-6: #6DC4FF;                   
+  --seq-7: #B7E6FF;                   
+  --chart-track: #1C232C;             
+  --chart-grid: #283039;              
+  --chart-axis: #515963;              
+  --chart-label: #868D95;             
+
+  --shadow-1: 0 1px 2px rgba(0,0,0,.72), inset 0 1px 0 rgba(255,255,255,.030);
+  --shadow-2: 0 6px 16px -6px rgba(0,0,0,.85), inset 0 1px 0 rgba(255,255,255,.040);
+  --shadow-3: 0 20px 44px -12px rgba(0,0,0,.92), inset 0 1px 0 rgba(255,255,255,.055);
+  --shadow-glow: 0 0 0 1px rgba(56,155,255,.32), 0 0 28px -6px rgba(56,155,255,.45);
+  --shadow-focus: 0 0 0 2px #060B11, 0 0 0 4px #6BB2FF;
+}
+</style>
+
+<style>
+/* ── Bridge: component-CSS aliases onto the color system's semantic names ── */
+.app{
+  --accent:var(--accent-bg);
+  --accent-hover:var(--accent-bg-hover);
+  --accent-on:var(--accent-on-solid);
+  --surface-hover:var(--state-hover);
+  --selected-bg:var(--state-selected);
+  --text-quaternary:var(--text-disabled);
+  --track:var(--chart-track);
+  --scrim:var(--surface-scrim);
+  --safe-bg:var(--safe-bg-subtle);
+  --caution-bg:var(--caution-bg-subtle);
+  --danger-bg:var(--danger-bg-subtle);
+  --danger-on:var(--danger-on-solid);
+  --kbd-bg:var(--surface-sunken);
+  --kbd-text:var(--text-tertiary);
+  --toggle-knob:#fff;
+  --edge-highlight:none;
+  --elev-1:var(--shadow-1);
+  --elev-2:var(--shadow-2);
+  --elev-3:var(--shadow-2);
+  --elev-4:var(--shadow-3);
+  --elev-5:var(--shadow-3);
+}
+.app[data-theme="dark"]{
+  --edge-highlight:inset 0 1px 0 rgb(255 255 255 / .055);
+  --toggle-knob:#F3F6F9;
+}
+/* --focus-ring-offset is a color in the palette and a length in the space scale;
+   the outline offset is written literally to avoid the collision. */
+.app .is-focused{outline:2px solid var(--focus-ring);outline-offset:1px}
+</style>
+
+<style>
+/* Sections are appended out of order; the flex order restores the reading sequence. */
+.doc{display:flex;flex-direction:column}
+.masthead{order:0}.toc{order:1}
+#s1{order:2}#s2{order:3}#s3{order:4}#s4{order:5}#s5{order:6}#s6{order:7}#s7{order:8}#s8{order:9}
+.tokgrid{display:grid;grid-template-columns:repeat(auto-fill,minmax(230px,1fr));gap:8px;margin-top:14px}
+.tok{display:flex;align-items:center;gap:10px;padding:7px 9px;border:1px solid var(--doc-line);border-radius:6px;background:var(--doc-panel)}
+.tok .sw2{width:26px;height:26px;border-radius:5px;flex:none;box-shadow:inset 0 0 0 1px rgb(128 128 128/.22)}
+.tok .tx{min-width:0;flex:1}
+.tok .nm2{font:430 10.5px/14px var(--font-mono);color:var(--doc-fg);word-break:break-all}
+.tok .hx{font:430 10px/13px var(--font-mono);color:var(--doc-fg-3);text-transform:uppercase}
+.themecols{display:grid;grid-template-columns:1fr 1fr;gap:28px;margin-top:18px}
+@media(max-width:900px){.themecols{grid-template-columns:1fr}}
+.themecols h6{margin:0 0 4px;font:620 9px/12px var(--font-sans);letter-spacing:.12em;text-transform:uppercase;color:var(--doc-fg-3)}
+.ecotable td .ed{display:inline-block;width:12px;height:12px;border-radius:3px;vertical-align:-2px;margin-right:7px;
+  box-shadow:inset 0 0 0 1px rgb(128 128 128/.25)}
+</style>
+
+<!-- ═════════════════════════ 02 COLOR ═════════════════════════ -->
+<section class="sect" id="s2">
+  <div class="sect-head"><span class="sect-num">02</span><h2>Color</h2><span class="tag">141 pairings · 0 failures</span></div>
+  <p class="sect-intro">The app icon is a pure-black field with a luminous azure V. The current CSS contradicts its
+  own icon — every neutral sits at hue 270–277 (violet-navy) while the icon glows at hue 253, and the background
+  is a murky dark rather than a void. The new palette is derived from that glow: <strong>neutral hue 254, accent
+  hue 252</strong>, on a ground of <code>#010306</code>.</p>
+
+  <div class="sub">
+    <h3>What was measured wrong</h3>
+    <p>These aren't taste judgements. Each row is a computed number against the current palette.</p>
+    <table class="spec">
+      <thead><tr><th>Problem</th><th>Pair</th><th class="num">Measured</th><th class="num">Needed</th></tr></thead>
+      <tbody>
+        <tr><td>Deuteranopes can't tell Safe from Danger</td><td><code>#4ade80</code> → <code>#f87171</code></td><td class="num bad">ΔE 8.2</td><td class="num">&gt; 15</td></tr>
+        <tr><td>Rust and Java are the same color</td><td><code>#f97316</code> / <code>#e76f00</code></td><td class="num bad">ΔE 3.6</td><td class="num">&gt; 10</td></tr>
+        <tr><td>Caution collides with Homebrew</td><td><code>#fbbf24</code> / <code>#fbb040</code></td><td class="num bad">ΔE 4.3</td><td class="num">&gt; 10</td></tr>
+        <tr><td>Safe collides with Node</td><td><code>#4ade80</code> / <code>#22c55e</code></td><td class="num bad">ΔE 7.9</td><td class="num">&gt; 10</td></tr>
+        <tr><td>Primary button label fails AA</td><td>white on <code>#6c8cff</code></td><td class="num bad">3.07:1</td><td class="num">4.5:1</td></tr>
+        <tr><td>Borders are effectively invisible</td><td><code>#2e3345</code> on <code>#0f1117</code></td><td class="num bad">1.51:1</td><td class="num">3:1</td></tr>
+      </tbody>
+    </table>
+    <div class="note bug"><strong>The root cause is structural, not aesthetic.</strong> Eleven categorical hues and
+    three signal hues were placed on the same wheel, at the same chroma, with no lightness strategy. Collisions were
+    inevitable. The fix is a rule, not a repaint: <em>signal</em> colors and <em>data</em> colors are two registers
+    that never mix — different chroma bands, different geometry, and reserved hue arcs around each risk color.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Risk — the one distinction that must never fail</h3>
+    <p><strong>Safe is jade (hue 170), not green.</strong> That frees pure green for Node.js, and more importantly a
+    jade keeps blue-channel energy — which is exactly what survives red-green dichromacy. Moving Safe from hue 150
+    to 170 lifted worst-case colorblind separation from 13.0 to 16.9.</p>
+    <div id="riskSwatches"></div>
+    <table class="spec">
+      <thead><tr><th>Simulated vision</th><th>Safe</th><th>Caution</th><th>Danger</th><th class="num">min ΔE</th></tr></thead>
+      <tbody>
+        <tr><td>Normal</td><td><code>#6AECC4</code></td><td><code>#E9B600</code></td><td><code>#EF546C</code></td><td class="num ok">20.3</td></tr>
+        <tr><td>Deuteranopia</td><td><code>#D1D1C6</code></td><td><code>#C7C700</code></td><td><code>#989866</code></td><td class="num ok">16.9</td></tr>
+        <tr><td>Protanopia</td><td><code>#E2E2C4</code></td><td><code>#BDBD05</code></td><td><code>#74746D</code></td><td class="num ok">18.4</td></tr>
+        <tr><td>Tritanopia</td><td><code>#6AECCE</code></td><td><code>#E9B641</code></td><td><code>#EF546D</code></td><td class="num ok">19.9</td></tr>
+      </tbody>
+    </table>
+    <div class="note warn"><strong>Color is never allowed to carry the signal alone.</strong> Safe↔Danger improves
+    from ΔE 8.2 to 19.8, but the light theme's worst case is still 10.8 — dark chromatic text compresses toward
+    brown under dichromacy. So every risk mark carries three channels: a glyph (<span class="badge badge-safe" style="--safe-bg-subtle:transparent">✓</span> check /
+    triangle / octagon), a shape (Safe is a full pill; Caution and Danger are squarer, and Danger adds a 2px left
+    rule), and the word itself. Never a bare colored dot.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Ecosystems — eleven categories that don't fight</h3>
+    <p>Brand hues were used as seeds, then positions were solved to maximise worst-case pairwise separation while
+    honouring reserved arcs around the three risk hues. Lightness is a deliberate <strong>alternating ladder</strong>,
+    not a constant — eleven equal-lightness categoricals caps worst-case separation at ΔE 3.2, because hue alone
+    cannot carry eleven levels.</p>
+    <table class="spec ecotable">
+      <thead><tr><th>Ecosystem</th><th>Dark</th><th class="num">L</th><th>Light</th><th class="num">L</th><th>Relationship to brand</th></tr></thead>
+      <tbody id="ecoRows"></tbody>
+    </table>
+    <table class="spec">
+      <thead><tr><th>Worst-case separation</th><th class="num">Current</th><th class="num">New</th><th>Verdict</th></tr></thead>
+      <tbody>
+        <tr><td>Ecosystem ↔ ecosystem (dark)</td><td class="num bad">3.6</td><td class="num ok">10.6</td><td>2.9× better</td></tr>
+        <tr><td>Ecosystem ↔ risk (dark)</td><td class="num bad">4.3</td><td class="num ok">10.7</td><td>no collision below 10</td></tr>
+        <tr><td>Safe ↔ Danger, deuteranopia</td><td class="num bad">8.2</td><td class="num ok">19.8</td><td>2.4× better</td></tr>
+      </tbody>
+    </table>
+    <div class="note"><strong>Where color honestly runs out.</strong> Under protanopia the worst ecosystem pair falls
+    to ΔE 2.1 (dark) and 0.7 (light). No eleven-category palette survives dichromacy on hue alone — the wheel
+    collapses to one axis. That is why every ecosystem mark in this design is paired with its name, why the donut is
+    gone, and why the sequential size scale is single-hue with a monotonic lightness ramp: size is the most-scanned
+    quantity in the app, so it had to stay readable under all three CVD types.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Tokens</h3>
+    <p>Every value below is read live from the stylesheet in this page, so what you see is exactly what ships.
+    Light on bare <code>:root</code>; dark under both <code>@media (prefers-color-scheme: dark)</code> and
+    <code>:root[data-theme="dark"]</code>, so the manual toggle wins in both directions.</p>
+    <div class="themecols">
+      <div><h6>Dark</h6><div class="tokgrid" id="tokDark"></div></div>
+      <div><h6>Light</h6><div class="tokgrid" id="tokLight"></div></div>
+    </div>
+  </div>
+
+  <div class="sub">
+    <h3>Contrast — the numbers, not the claim</h3>
+    <table class="spec">
+      <thead><tr><th>Pairing</th><th class="num">Dark</th><th class="num">Light</th><th class="num">Required</th></tr></thead>
+      <tbody>
+        <tr><td>text-primary on surface-base</td><td class="num ok">18.20</td><td class="num ok">15.29</td><td class="num">4.5</td></tr>
+        <tr><td>text-secondary on surface-base</td><td class="num ok">8.53</td><td class="num ok">6.85</td><td class="num">4.5</td></tr>
+        <tr><td>text-tertiary on surface-base</td><td class="num ok">5.88</td><td class="num ok">4.78</td><td class="num">4.5</td></tr>
+        <tr><td>border-strong on surface-base</td><td class="num ok">3.99</td><td class="num ok">3.24</td><td class="num">3</td></tr>
+        <tr><td>on-accent on accent-bg</td><td class="num ok">7.18</td><td class="num ok">6.02</td><td class="num">4.5</td></tr>
+        <tr><td>safe-text on surface-base</td><td class="num ok">13.55</td><td class="num ok">4.94</td><td class="num">4.5</td></tr>
+        <tr><td>caution-text on surface-base</td><td class="num ok">10.49</td><td class="num ok">7.38</td><td class="num">4.5</td></tr>
+        <tr><td>danger-text on surface-base</td><td class="num ok">5.79</td><td class="num ok">12.14</td><td class="num">4.5</td></tr>
+        <tr><td>focus-ring on surface-base</td><td class="num ok">8.87</td><td class="num ok">3.84</td><td class="num">3</td></tr>
+        <tr><td>worst ecosystem dot on surface-base</td><td class="num ok">3.87</td><td class="num ok">3.49</td><td class="num">3</td></tr>
+      </tbody>
+    </table>
+    <p style="margin-top:14px">Two deliberate sub-threshold values, both permitted: <code>--text-disabled</code>
+    under the WCAG 1.4.3 inactive-control exception, and the decorative <code>--*-border</code> hairlines, which are
+    never a component's sole indicator — <code>--*-border-strong</code> exists for that and clears 3:1 everywhere.</p>
+    <div class="note"><strong>The dark primary button is inverted on purpose.</strong> It is luminous azure with
+    near-black text (7.18:1), not white on blue — which is what the current palette does, and measures 2.88:1. This
+    is the icon's glow applied literally: light on a void, not a colored rectangle.</div>
+  </div>
+</section>
+
+<!-- ═════════════════════════ 03 TYPOGRAPHY ═════════════════════════ -->
+<section class="sect" id="s3">
+  <div class="sect-head"><span class="sect-num">03</span><h2>Typography</h2><span class="tag">23 roles · 2 faces</span></div>
+  <p class="sect-intro">Two faces, not three. <strong>Inter</strong> variable with the optical-size axis (14–32)
+  gives display-optical treatment without a third download, so no separate display face is warranted;
+  <strong>Geist Mono</strong> carries paths, commands, sizes and counts. The base size is <strong>13px</strong> and
+  the scale is quantised to whole pixels below 20px — a modular ratio produces sub-pixel sizes in the 10–18px band
+  where 95% of this UI lives, and those render soft. Hierarchy comes from weight and line-height instead: three
+  distinct roles at 13px, three at 11px.</p>
+
+  <div class="sub">
+    <h3>Scale</h3>
+    <div id="typeSpec"></div>
+  </div>
+
+  <div class="sub">
+    <h3>Numbers are the content</h3>
+    <p>This is a tool for auditing quantities, so numerals get more care than the prose does.</p>
+    <table class="spec">
+      <thead><tr><th>Rule</th><th>Why</th></tr></thead>
+      <tbody>
+        <tr><td><code>tabular-nums</code> at 10 mandatory sites</td><td>Size column, staleness, metrics, bar values, the Clean button total, progress %, scan duration, filter counts, status counts. Proportional digits make a column of sizes unscannable.</td></tr>
+        <tr><td>Size is <strong>two elements</strong>, never one string</td><td><code>&lt;span class="size-num"&gt;1.4&lt;/span&gt;&lt;span class="size-unit"&gt;GB&lt;/span&gt;</code> with a 3px flex gap and a 16px unit gutter. A space character isn't tabular and breaks decimal alignment.</td></tr>
+        <tr><td>Four typographic size tiers</td><td>≥10 GB at 15px/620, 1–10 GB at 14px/620, 100 MB–1 GB at 13px/560, &lt;100 MB dimmed. Gigabyte rows visually rise out of the list — the cheapest possible size hierarchy.</td></tr>
+        <tr><td>Base 1000, units <code>B / kB / MB / GB</code></td><td>Matches Finder's Get Info, which is the number users compare against. Lowercase <code>k</code> is the correct SI prefix; <code>KB</code> on a base-1000 scale is wrong and developers notice.</td></tr>
+        <tr><td>Keep the trailing <code>.0</code> below 10</td><td><code>2.0 GB</code>, not <code>2 GB</code>. In a column a consistent decimal position beats brevity.</td></tr>
+        <tr><td>Exact counts, never <code>1.2k</code></td><td>Abbreviating in a tool where the number <em>is</em> the audit is a lie for no gain. The one exception is the tray tooltip, which the OS truncates hard.</td></tr>
+        <tr><td>Two time registers</td><td>Rows get <code>94d</code> — a sortable magnitude in a 56px column. Tooltips get <code>3 months ago · Feb 14, 2026</code>, because that's when the user is deciding whether to delete. Never “recently”.</td></tr>
+        <tr><td>Every nullable number has an em-dash state</td><td>Three exist: <code>days_stale</code>, <code>last_modified</code>, <code>project_name</code>. An empty cell reads as a rendering bug; <code>—</code> reads as “not applicable”.</td></tr>
+      </tbody>
+    </table>
+    <div class="note bug"><strong>Two byte formatters currently disagree.</strong> Rust fills
+    <code>size_display</code> via <code>ByteSize</code> (base 1024) and the row renders that; the donut, cards, bars
+    and Clean button use the JS <code>formatBytes()</code> (base 1000). A 1.5 GiB item shows <code>1.5 GB</code> in
+    its row and contributes <code>1.6 GB</code> to the total. Pick one — the JS one, from <code>size_bytes</code> —
+    and ignore <code>size_display</code> entirely.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Paths</h3>
+    <p>A path is the item's identity — three <code>node_modules/</code> rows are indistinguishable without it — so
+    it lives permanently on line 2 rather than behind a hover tooltip. Because it's monospace, truncation is
+    <strong>arithmetic, not measurement</strong>: measure the character advance once, compute a budget, then grow
+    segments outward from the leaf. Four emphasis roles inside one string, with the separators as the dimmest
+    element so the names read as names.</p>
+    <div id="pathSpec"></div>
+  </div>
+
+  <div class="sub">
+    <h3>Wordmark</h3>
+    <p>The mark is a ring with a gap at 45° — an event horizon — and it is <em>also</em> the scan indicator and the
+    tray glyph. One shape doing three jobs is what makes a small app feel designed rather than decorated. Sentence
+    case, because caps would make it a product category and sentence case makes it a name.</p>
+    <div id="markSpec"></div>
+    <div class="note"><strong>Delete the header subtitle.</strong> “Developer disk space reclaimer” sits under the
+    wordmark on every launch, explaining the app to someone who already opened it. That slot is worth live state:
+    <code>384 items · scanned 2m ago</code>, or <code>Scanning ~/Developer · 1,204 dirs</code>.</div>
+  </div>
+</section>
+
+<!-- ═════════════════════════ 04 LAYOUT & SHELL ═════════════════════════ -->
+<section class="sect" id="s4">
+  <div class="sect-head"><span class="sect-num">04</span><h2>Layout &amp; shell</h2><span class="tag">rail + command bar</span></div>
+  <p class="sect-intro">Void has three destinations and one dominant surface. A top nav would spend 52px of
+  <em>vertical</em> space — the scarcest resource in a 700px-tall window — on three links. A left rail spends 56px
+  of horizontal space, which is 6% at 900px and 4% at 1440px. Vertical space buys list rows; horizontal space is
+  comparatively abundant. The rail wins.</p>
+
+  <div class="sub">
+    <h3>Responsive behaviour</h3>
+    <table class="spec">
+      <thead><tr><th>Breakpoint</th><th>Rail</th><th class="num">Gutter</th><th>Drawer</th><th>Density</th></tr></thead>
+      <tbody>
+        <tr><td>S · 720–1023 <em>(incl. the 900 default)</em></td><td>56 icon</td><td class="num">16</td><td>overlay 400 + scrim</td><td>comfortable 44</td></tr>
+        <tr><td>M · 1024–1279</td><td>56 icon</td><td class="num">20</td><td>overlay 400 + scrim</td><td>comfortable 44</td></tr>
+        <tr><td>L · 1280–1679</td><td>216 labelled</td><td class="num">24</td><td><strong>inline 400</strong>, pushes the table</td><td>comfortable 44</td></tr>
+        <tr><td>XL · 1680+</td><td>216 labelled</td><td class="num">32</td><td>inline 440</td><td>compact 32, path in its own column</td></tr>
+      </tbody>
+    </table>
+    <div class="note"><strong>A deliberate coincidence.</strong> Table width at 900px with no drawer is 844; at
+    1440px with the drawer open it is 824. Within 20px, so the column widths are identical across both. Someone who
+    opens the drawer on a large display sees the list they already know, not a reflow.
+    <br><br>The window also needs <code>minWidth: 720, minHeight: 560</code> — it currently has no minimum, and the
+    design does not survive below that.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Vertical budget at 900 × 700</h3>
+    <p><code>52</code> command bar <code>+ 64</code> summary <code>+ 40</code> toolbar <code>+ 28</code> column
+    heads <code>+ 492</code> list viewport <code>+ 24</code> status bar <code>= 700</code>. That is ten rows visible
+    at comfortable density, fifteen at compact. When the list scrolls past 24px the summary strip condenses from 64
+    to 36 and reflows to one line — returning 28px, over half a row, on a screen where every row counts.</p>
+  </div>
+
+  <div class="sub">
+    <h3>Keyboard</h3>
+    <p>Fully operable without a mouse. The list is a <strong>single composite tab stop</strong> with a roving
+    tabindex — 384 individually tabbable rows would make the keyboard unusable.</p>
+    <table class="spec">
+      <thead><tr><th>Key</th><th>Action</th><th>Key</th><th>Action</th></tr></thead>
+      <tbody>
+        <tr><td><code>⌘1 / ⌘2 / ⌘3</code></td><td>Results / History / Settings</td><td><code>↑ ↓</code></td><td>Move row focus</td></tr>
+        <tr><td><code>⌘R</code></td><td>Scan now</td><td><code>→ ←</code></td><td>Expand / collapse group</td></tr>
+        <tr><td><code>⌘F</code> or <code>/</code></td><td>Focus filter</td><td><code>Space</code></td><td>Toggle selection</td></tr>
+        <tr><td><code>⌘A</code></td><td>Select all visible</td><td><code>⇧↑ ⇧↓</code></td><td>Extend selection</td></tr>
+        <tr><td><code>⌥⌘A</code></td><td>Select all safe</td><td><code>Enter</code></td><td>Open drawer</td></tr>
+        <tr><td><code>⌘↵</code></td><td>Review &amp; Clean</td><td><code>⌥↑ ⌥↓</code></td><td>Prev / next item in drawer</td></tr>
+        <tr><td><code>⌘C</code></td><td>Copy path</td><td><code>⌘⇧C</code></td><td>Copy the exact command</td></tr>
+        <tr><td><code>⌘\</code></td><td>Toggle drawer</td><td><code>⌘⇧E</code></td><td>Expand / collapse all</td></tr>
+      </tbody>
+    </table>
+    <p style="margin-top:14px"><code>Esc</code> is contextual: in the filter it clears and blurs; in the drawer it
+    closes; with a selection it deselects; otherwise nothing. Focus always returns to its origin when a drawer or
+    modal closes, and the modal's initial focus is <em>Cancel</em> — never the destructive button.</p>
+  </div>
+</section>
+
+<!-- ═════════════════════════ 06 COMPONENTS ═════════════════════════ -->
+<section class="sect" id="s6">
+  <div class="sect-head"><span class="sect-num">06</span><h2>Components</h2><span class="tag">live · every state</span></div>
+  <p class="sect-intro">Every component used by two or more screens, in every state that has to be designed. These
+  are live elements rendered from the same CSS the mockups use — not pictures of components.</p>
+  <div class="themecols" style="grid-template-columns:1fr;gap:44px">
+    <div><h6>Dark</h6><div class="app" data-theme="dark" data-gallery style="width:100%;height:auto;display:block;border-radius:10px;box-shadow:none;border:1px solid var(--border-subtle)"></div></div>
+    <div><h6>Light</h6><div class="app" data-theme="light" data-gallery style="width:100%;height:auto;display:block;border-radius:10px;box-shadow:none;border:1px solid var(--border-subtle)"></div></div>
+  </div>
+</section>
+
+<!-- ═════════════════════════ 07 MOTION & DEPTH ═════════════════════════ -->
+<section class="sect" id="s7">
+  <div class="sect-head"><span class="sect-num">07</span><h2>Motion &amp; depth</h2><span class="tag">mostly restraint</span></div>
+  <p class="sect-intro">This is a tool people open many times a day, so the interesting part of the motion spec is
+  the list of things that must <strong>not</strong> animate. The streaming scan is the hard case: rows arrive
+  faster than they can be read, and every instinct to make that feel alive makes it harder to use.</p>
+
+  <div class="sub">
+    <h3>Tokens</h3>
+    <table class="spec">
+      <thead><tr><th>Token</th><th class="num">Value</th><th>Applies to</th></tr></thead>
+      <tbody>
+        <tr><td><code>--dur-1</code></td><td class="num">80ms</td><td>Hover in, press</td></tr>
+        <tr><td><code>--dur-2</code></td><td class="num">120ms</td><td>Hover out, checkbox fill, small state</td></tr>
+        <tr><td><code>--dur-3</code></td><td class="num">160ms</td><td>Chips, tooltip fade, streamed row entrance</td></tr>
+        <tr><td><code>--dur-4</code></td><td class="num">220ms</td><td>Drawer, row collapse, toast</td></tr>
+        <tr><td><code>--dur-5</code></td><td class="num">320ms</td><td>Modal, sheet</td></tr>
+        <tr><td><code>--dur-6</code></td><td class="num">480ms</td><td>Number count-down on completion</td></tr>
+        <tr><td><code>--ease-out</code></td><td class="m">cubic-bezier(.16, 1, .30, 1)</td><td>The default for everything entering</td></tr>
+        <tr><td><code>--ease-standard</code></td><td class="m">cubic-bezier(.20, 0, 0, 1)</td><td>The indeterminate progress sweep</td></tr>
+        <tr><td><code>--ease-spring</code></td><td class="m">cubic-bezier(.34, 1.56, .64, 1)</td><td><strong>The success check, and nothing else</strong></td></tr>
+        <tr><td><code>--ease-linear</code></td><td class="m">linear</td><td>Determinate progress and the spinner only — easing there misrepresents rate</td></tr>
+      </tbody>
+    </table>
+  </div>
+
+  <div class="sub">
+    <h3>Streaming rows — the crux</h3>
+    <table class="spec">
+      <thead><tr><th>Rule</th><th>Reason</th></tr></thead>
+      <tbody>
+        <tr><td>Coalesce arrivals into one <code>requestAnimationFrame</code> batch and <strong>append a DocumentFragment</strong></td><td>The current code rebuilds the whole list's <code>innerHTML</code> on every <code>item_found</code> — O(n²) across a scan.</td></tr>
+        <tr><td>Opacity only. No transform, no stagger.</td><td>Movement on rows arriving several per frame reads as jitter, not life.</td></tr>
+        <tr><td>Skip the entrance animation above 8 rows per frame</td><td>A rate governor. Below the threshold it feels responsive; above it, it would be strobing.</td></tr>
+        <tr><td>Freeze sort during the scan; re-sort once at <code>ScanComplete</code></td><td>Re-sorting per event produces a list that physically cannot be read.</td></tr>
+        <tr><td>Never auto-scroll — show a <code>↓ N new</code> pill</td><td>Yanking the viewport away from what someone is reading is the rudest thing a streaming list can do.</td></tr>
+        <tr><td>Throttle chart redraws to ≤4/s during a scan</td><td>Prefer none at all.</td></tr>
+      </tbody>
+    </table>
+    <div class="note"><strong>Must not animate:</strong> list reordering or FLIP transitions · row insertion with
+    translate or stagger · filter and sort switching (swap instantly) · counts and status text during scanning ·
+    focus rings · theme switching · app launch, so a tray click to a visible window is zero-animation ·
+    disabled→enabled · global <code>scroll-behavior: smooth</code> · tooltip position · hover states during momentum
+    scroll · the tray icon · and the scan ring's dash offset while it rotates, because two loops at different
+    periods produce a visible beat frequency.</div>
+  </div>
+
+  <div class="sub">
+    <h3>Depth</h3>
+    <p>Shadows are for things that <strong>float</strong>; borders are for things that <strong>sit</strong>. Almost
+    everything in this design sits: rows, cards, panels, the toolbar, the summary strip and every control are
+    elevation zero, separated by a 1px border. Only menus, popovers, tooltips and modals float.</p>
+    <p style="margin-top:10px">In dark theme a drop shadow on a near-black ground conveys nothing, so elevation is
+    carried by three things instead: a step up the surface ramp, a 1px outer ring, and an
+    <code>inset 0 1px 0 rgb(255 255 255 / .055)</code> lit top edge. That top edge is what actually reads as
+    “raised”.</p>
+    <div id="depthSpec"></div>
+  </div>
+</section>
+
+<!-- ═════════════════════════ 08 WHAT THIS CHANGES ═════════════════════════ -->
+<section class="sect" id="s8">
+  <div class="sect-head"><span class="sect-num">08</span><h2>What this changes</h2><span class="tag">cuts · bugs · backend</span></div>
+  <p class="sect-intro">A design proposal that only adds is not a proposal, it's a wish list. Here is what gets
+  removed, what turned out to be broken while the design was being worked out, and what the backend has to grow
+  before parts of this can ship.</p>
+
+  <div class="sub">
+    <h3>Cut</h3>
+    <table class="spec">
+      <thead><tr><th>Removed</th><th>Why</th></tr></thead>
+      <tbody>
+        <tr><td>The donut chart</td><td>Nine-plus segments in a 160px circle. Ordered group headers with share bars say the same thing more legibly, in less space, and are clickable.</td></tr>
+        <tr><td>The 320px stats panel and its toggle</td><td>It competed with the list for the one dimension the list needs, and auto-opened on scan completion — shoving aside the results the user just waited for.</td></tr>
+        <tr><td>The per-ecosystem bar chart</td><td>Becomes the 100×6 share bar in each group header.</td></tr>
+        <tr><td>The duplicated summary cards</td><td>The same numbers appeared three times inside one 320px panel. “Categories: 9” is not information.</td></tr>
+        <tr><td>The 13-chip filter row</td><td>Single-select, no counts, no size context, wrapped to two lines below ~880px, and cost 40px of vertical space permanently. One filter field plus one Filters popover replaces it — and that popover is multi-select with counts.</td></tr>
+        <tr><td>The “Safe” badge</td><td>~80% of rows. A badge on 80% of rows is texture, not signal.</td></tr>
+        <tr><td>Silent <code>available_actions[0]</code></td><td>The core safety defect. Replaced by an explicit rule — lowest risk, then prefer Trash, then largest estimate — that is visible and changeable per row.</td></tr>
+        <tr><td>Hover-tooltip-only paths</td><td>A path you must hover cannot be scanned or trusted. It moves to line 2 permanently; the tooltip survives only for the truncated case.</td></tr>
+        <tr><td>The header subtitle</td><td>Marketing copy in a bar the user sees a thousand times. Replaced by live state.</td></tr>
+      </tbody>
+    </table>
+  </div>
+
+  <div class="sub">
+    <h3>Bugs found while designing this</h3>
+    <p>These are in the shipping code today and are independent of whether the redesign happens.</p>
+    <table class="spec">
+      <thead><tr><th>Bug</th><th>Where</th><th>Effect</th></tr></thead>
+      <tbody>
+        <tr><td>Ecosystem key mismatch</td><td><code>index.html</code> <code>ECO_COLORS</code></td><td>Keyed <code>jetbrains</code>, but the backend serialises <code>jet_brains</code>. <strong>JetBrains renders grey</strong> in the donut and bars right now.</td></tr>
+        <tr><td>Two disagreeing byte formatters</td><td>Rust <code>ByteSize</code> vs JS <code>formatBytes</code></td><td>A row and the total it feeds can differ — <code>1.5 GB</code> in the row, <code>1.6 GB</code> in the sum.</td></tr>
+        <tr><td>Full re-render per streamed item</td><td><code>renderItems()</code></td><td>Rebuilds the entire list's <code>innerHTML</code> on every <code>item_found</code>. O(n²) over a scan of hundreds of items.</td></tr>
+        <tr><td>Risk shown is the item's, not the action's</td><td><code>index.html</code> row render</td><td><code>SimulatorDevices</code> displays <em>Caution</em> while holding a <em>Danger</em> action; <code>~/Downloads</code> displays <em>Safe</em> while holding <code>rm -rf</code>.</td></tr>
+        <tr><td>Tray icon is not a template image</td><td><code>tray.rs</code></td><td>Passes the full-colour app icon, so it won't theme to a light or dark menu bar and won't invert on click. Needs a black+alpha 22×22 / 44×44 asset and <code>.icon_as_template(true)</code>.</td></tr>
+        <tr><td>Permission-denied directories are dropped</td><td>every scanner</td><td>A directory that computes size 0 is discarded with no error. Without Full Disk Access your DerivedData simply doesn't exist, and nothing says why.</td></tr>
+        <tr><td><code>Command</code> args are never safety-checked</td><td><code>action/mod.rs</code>, <code>safety.rs</code></td><td><code>SafetyChecker</code> only gates <code>RemoveDir</code>/<code>RemoveFile</code>. <code>rm -rf ~/Downloads/…</code> and the <code>osascript</code> trash command bypass it entirely — including on paths that are supposedly hard-blocked.</td></tr>
+        <tr><td><code>~/.cargo/registry</code> mislabelled</td><td><code>scanner/rust.rs</code></td><td>Returned as <code>kind: TargetDir</code> with a <em>Safe</em> action labelled “Remove target/” whose path is the global cargo registry. The label and the risk are both wrong for what it does.</td></tr>
+        <tr><td><code>staleness_threshold_days</code> is never read</td><td><code>config.rs</code> + all scanners</td><td>The setting exists and does nothing. The design labels it honestly as a display filter rather than pretending.</td></tr>
+      </tbody>
+    </table>
+  </div>
+
+  <div class="sub">
+    <h3>Backend work this design needs</h3>
+    <table class="spec">
+      <thead><tr><th>Needed</th><th>Blocks</th><th class="num">Size</th></tr></thead>
+      <tbody>
+        <tr><td><code>get_disk_usage()</code> via <code>sysinfo</code></td><td>The disk meter in the summary strip, rail and tray. <code>sysinfo</code> is already a dependency.</td><td class="num">S</td></tr>
+        <tr><td>Persist <code>AppConfig</code> on <code>update_config</code></td><td>All of Settings. It currently mutates an in-memory mutex only, so every setting resets on relaunch — which makes the whole screen a lie.</td><td class="num">S</td></tr>
+        <tr><td><code>BatchComplete</code> event</td><td>The completion card. There is no batch-complete signal; the channel just closes and the frontend has to count.</td><td class="num">S</td></tr>
+        <tr><td>Cancellation token in <code>execute_batch</code></td><td>The Stop button — which is why this design doesn't draw one. Trivial given the loop is already sequential.</td><td class="num">S</td></tr>
+        <tr><td><code>estimated_savings_bytes</code> in the <code>Completed</code> event</td><td>Honest “reclaimed” totals. <code>Command</code> and <code>DockerPrune</code> always report <code>bytes_freed: 0</code>.</td><td class="num">S</td></tr>
+        <tr><td>Distinguishable permission-denied errors</td><td>The permission banner. Right now the failure is invisible absence, which is the worst failure mode in the product.</td><td class="num">M</td></tr>
+        <tr><td>Clean-history persistence</td><td>The entire History screen.</td><td class="num">M</td></tr>
+        <tr><td>Safety-check <code>Command</code> arguments</td><td>Nothing visual — but it's the security gap above.</td><td class="num">M</td></tr>
+        <tr><td><code>minWidth: 720, minHeight: 560</code></td><td>The layout below 720px. One line of <code>tauri.conf.json</code>.</td><td class="num">XS</td></tr>
+      </tbody>
+    </table>
+  </div>
+
+  <div class="sub">
+    <h3>Where to start</h3>
+    <p>If only one thing ships from this document, it should be <strong>risk-follows-the-action</strong> plus the
+    per-row action picker. It's the only change here that prevents a user from deleting something they didn't intend
+    to. The palette swap is second — it's mechanical, it's a single CSS block, and it fixes an AA failure and a
+    colorblind-safety failure at the same time. The layout work is third; it's the largest change and the least
+    urgent, because the current layout is merely cramped rather than wrong.</p>
+  </div>
+</section>
+
+</div><!-- /.doc -->
+
+<script>
+/* ══════════════════ LIVE SPEC RENDERERS ══════════════════ */
+
+/* Hidden probes so every value shown is read from the real stylesheet. */
+const probe = {};
+['dark','light'].forEach(t => {
+  const d = document.createElement('div');
+  d.className = 'app'; d.dataset.theme = t;
+  d.style.cssText = 'position:absolute;left:-9999px;width:0;height:0;overflow:hidden';
+  document.body.appendChild(d); probe[t] = d;
+});
+const val = (t, name) => getComputedStyle(probe[t]).getPropertyValue(name).trim();
+
+const TOKENS = [
+  ['Surfaces', ['surface-base','surface-raised','surface-sunken','surface-overlay','surface-inset']],
+  ['Borders', ['border-subtle','border-default','border-strong']],
+  ['Text', ['text-primary','text-secondary','text-tertiary','text-disabled']],
+  ['Accent', ['accent-bg','accent-bg-hover','accent-subtle','accent-text','accent-border-strong']],
+  ['Safe', ['safe-text','safe-solid','safe-bg-subtle','safe-border-strong']],
+  ['Caution', ['caution-text','caution-solid','caution-bg-subtle','caution-border-strong']],
+  ['Danger', ['danger-text','danger-solid','danger-bg-subtle','danger-border-strong']],
+  ['State', ['state-hover','state-selected','focus-ring','chart-track']]
+];
+function renderTokens(theme, host){
+  host.innerHTML = TOKENS.map(([grp, names]) =>
+    `<div style="grid-column:1/-1;margin-top:6px" class="t-overline">${grp}</div>` +
+    names.map(n => {
+      const v = val(theme, '--' + n);
+      return `<div class="tok"><span class="sw2" style="background:${v}"></span>
+        <span class="tx"><span class="nm2">--${n}</span><span class="hx">${v}</span></span></div>`;
+    }).join('')
+  ).join('');
+}
+renderTokens('dark', document.getElementById('tokDark'));
+renderTokens('light', document.getElementById('tokLight'));
+
+/* ── Risk swatches ── */
+document.getElementById('riskSwatches').innerHTML = ['dark','light'].map(t => `
+  <div style="margin-top:14px">
+    <div class="t-overline" style="color:var(--doc-fg-3);margin-bottom:8px">${t}</div>
+    <div class="app" data-theme="${t}" style="width:100%;height:auto;display:flex;flex-direction:row;gap:10px;flex-wrap:wrap;
+      padding:16px;border-radius:8px;box-shadow:none;border:1px solid var(--border-subtle)">
+      ${[['safe','Safe','check'],['caution','Caution','warning'],['danger','Danger','alert-circle']].map(([k,l,ic])=>`
+        <div style="display:flex;align-items:center;gap:10px;padding:8px 12px;border-radius:6px;
+          background:var(--${k}-bg-subtle);border:1px solid var(--${k}-border)
+          ${k==='danger'?';border-left:2px solid var(--danger-border-strong)':''}">
+          <span style="color:var(--${k}-text);display:flex">${I(ic,'icon icon-sm')}</span>
+          <span class="t-label" style="color:var(--${k}-text)">${l}</span>
+          <span style="width:1px;height:16px;background:var(--border-default)"></span>
+          <span style="width:18px;height:18px;border-radius:4px;background:var(--${k}-solid)"></span>
+          <span class="t-mono-xs" style="color:var(--text-tertiary)">${val(t,'--'+k+'-text')}</span>
+        </div>`).join('')}
+    </div>
+  </div>`).join('');
+
+/* ── Ecosystem table ── */
+const ECOROWS = [
+  ['Rust','#FF8505',0.740,'#BB5F00',0.585,'brand orange, held'],
+  ['Java / JVM','#C37D6F',0.660,'#954D3F',0.505,'re-derived as roasted clay — low chroma clears both Rust and Danger'],
+  ['Homebrew','#A0A645',0.700,'#777B18',0.560,'amber rotated to olive-gold to clear Caution'],
+  ['Node.js','#3AA831',0.645,'#097200',0.480,'brand green, held — freed by moving Safe to jade'],
+  ['Go','#31C7D5',0.760,'#0095A1',0.610,'brand cyan, held'],
+  ['Docker','#009AC7',0.640,'#007397',0.520,'classic whale cyan-blue'],
+  ['Python','#2174B7',0.545,'#004E85',0.415,'brand blue, essentially held'],
+  ['Apple / Xcode','#AAB4FF',0.790,'#6D74D8',0.600,'Xcode blue lifted to a pale aluminium'],
+  ['.NET','#A676F9',0.672,'#712DC3',0.480,'brand violet, held'],
+  ['JetBrains','#A34AAA',0.560,'#811288',0.435,'magenta end of the JB gradient — moved off Danger'],
+  ['System','#FF89C0',0.775,'#C63E86',0.580,'rose']
+];
+document.getElementById('ecoRows').innerHTML = ECOROWS.map(([n,d,dl,l,ll,note]) =>
+  `<tr><td>${n}</td>
+   <td><span class="ed" style="background:${d}"></span><code>${d}</code></td><td class="num">${dl.toFixed(3)}</td>
+   <td><span class="ed" style="background:${l}"></span><code>${l}</code></td><td class="num">${ll.toFixed(3)}</td>
+   <td>${note}</td></tr>`).join('');
+
+/* ── Type specimen ── */
+const ROLES = [
+  ['display','Reclaim your disk space'],['title','142.6 GB reclaimable'],
+  ['metric-xl','340.2 GB'],['metric-lg','340.2 GB'],['metric-md','142.6 GB'],
+  ['metric-sm','142.6 GB'],['metric-xs','4.1 GB'],
+  ['page-title','Find what your builds left behind'],['section-title','Choose an action'],
+  ['overline','Needs your attention'],['colhead','Name'],
+  ['body-lg','Void walks your scan roots and reports what it finds.'],
+  ['body','Delete the entire node_modules directory'],
+  ['body-strong','Remove Maven repository'],['body-sm','Dependencies will re-download.'],
+  ['prose','Nothing is deleted until you pick it and confirm.'],
+  ['label-lg','Scan roots'],['label','Walker threads'],
+  ['caption','384 items · scanned 2m ago'],['micro','23%'],
+  ['mono-md','cargo clean'],['mono-sm','~/git/void-web/node_modules'],['mono-xs','rm -rf ~/Downloads/xcode_14.3.xip']
+];
+document.getElementById('typeSpec').innerHTML = ROLES.map(([r, sample]) => {
+  const g = p => val('dark', `--t-${r}-${p}`);
+  return `<div class="typerow">
+    <span class="role">.t-${r}</span>
+    <span class="t-${r}" style="color:var(--doc-fg);overflow:hidden;text-overflow:ellipsis;white-space:nowrap">${sample}</span>
+    <span class="metrics">${g('size')} / ${g('lh')} · ${g('w')} · ${g('ls')}</span>
+  </div>`;
+}).join('');
+
+/* ── Path + size specimen ── */
+document.getElementById('pathSpec').innerHTML = ['dark','light'].map(t => `
+  <div class="app" data-theme="${t}" style="width:100%;height:auto;display:block;padding:16px;margin-top:12px;
+    border-radius:8px;box-shadow:none;border:1px solid var(--border-subtle)">
+    <div style="display:flex;flex-direction:column;gap:9px">
+      ${Path('~/git/void-web/node_modules','void-web')}
+      ${Path('~/Library/Developer/Xcode/DerivedData','Xcode')}
+      ${Path('/var/run/docker.sock',null)}
+      ${Path('~/.m2/repository',null)}
+    </div>
+    <div style="display:flex;gap:26px;margin-top:18px;padding-top:14px;border-top:1px solid var(--border-subtle);align-items:flex-end">
+      ${[22.1e9, 4.1e9, 340e6, 12e6, null].map(b=>`<span style="text-align:right">${Size(b)}</span>`).join('')}
+      <span class="t-caption" style="color:var(--text-tertiary);margin-left:auto">four size tiers + the unknown state</span>
+    </div>
+  </div>`).join('');
+
+/* ── Wordmark specimen ── */
+document.getElementById('markSpec').innerHTML = ['dark','light'].map(t => `
+  <div class="app" data-theme="${t}" style="width:100%;height:auto;display:flex;flex-direction:row;align-items:center;gap:42px;flex-wrap:wrap;
+    padding:26px;margin-top:12px;border-radius:8px;box-shadow:none;border:1px solid var(--border-subtle)">
+    <div class="void-lockup" style="gap:16px">
+      <span class="void-mark"><svg viewBox="0 0 20 20" width="44" height="44" aria-hidden="true">
+        <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5" stroke-linecap="round"
+        pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg></span>
+      <span class="void-word" style="font-size:44px;font-weight:620;letter-spacing:-.03em"><span class="v">V</span>oid</span>
+    </div>
+    <div class="void-lockup"><span class="void-mark">${MARK}</span><span class="void-word"><span class="v">V</span>oid</span></div>
+    <div style="display:flex;align-items:center;gap:12px">
+      <span class="void-mark" style="animation:void-spin 900ms linear infinite">${MARK}</span>
+      <span class="t-caption" style="color:var(--text-tertiary)">scanning</span>
+    </div>
+    <div style="display:flex;align-items:center;gap:10px;padding:5px 10px;border-radius:6px;background:var(--surface-sunken)">
+      <span style="color:var(--text-primary)"><svg viewBox="0 0 22 22" width="18" height="18" aria-hidden="true">
+        <circle cx="11" cy="11" r="7.6" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"
+        pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/></svg></span>
+      <span class="t-caption" style="color:var(--text-tertiary)">tray, 22×22 template</span>
+    </div>
+  </div>`).join('');
+
+/* ── Depth specimen ── */
+document.getElementById('depthSpec').innerHTML = ['dark','light'].map(t => `
+  <div class="app" data-theme="${t}" style="width:100%;height:auto;display:flex;flex-direction:row;gap:22px;flex-wrap:wrap;
+    padding:30px;margin-top:12px;border-radius:8px;box-shadow:none;border:1px solid var(--border-subtle);
+    background:var(--surface-base)">
+    ${[['0','sits — rows, cards, controls','none','1px solid var(--border-subtle)'],
+       ['1','sticky header once scrolled','var(--shadow-1)','1px solid var(--border-subtle)'],
+       ['2','menus, popovers, tooltips','var(--shadow-2)','1px solid var(--border-default)'],
+       ['3','modals and dialogs','var(--shadow-3)','1px solid var(--border-default)']].map(([n,use,sh,bd])=>`
+      <div style="width:190px;height:88px;border-radius:8px;background:var(--surface-raised);border:${bd};
+        box-shadow:${sh};padding:12px;display:flex;flex-direction:column;justify-content:space-between">
+        <span class="t-overline" style="color:var(--text-quaternary)">Elevation ${n}</span>
+        <span class="t-caption" style="color:var(--text-secondary)">${use}</span>
+      </div>`).join('')}
+  </div>`).join('');
+</script>
+
+<script>
+/* ══════════════════ COMPONENT GALLERY ══════════════════ */
+const row = (name, desc, content, stack) =>
+  `<div class="gal-row"><div class="gal-k"><div class="n">${name}</div><div class="d">${desc}</div></div>
+   <div class="gal-v${stack?' stack':''}">${content}</div></div>`;
+const st = (lb, html) => `<div class="gal-state"><span class="lb">${lb}</span>${html}</div>`;
+
+function gallery(){
+  let h = '<div class="gallery">';
+
+  h += row('Button — primary','The single verb per screen',
+    st('default','<button class="btn btn-primary">Scan now</button>') +
+    st('hover','<button class="btn btn-primary" style="background:var(--accent-bg-hover)">Scan now</button>') +
+    st('active','<button class="btn btn-primary" style="background:var(--accent-bg-active)">Scan now</button>') +
+    st('focus','<button class="btn btn-primary is-focused">Scan now</button>') +
+    st('loading','<button class="btn btn-primary is-disabled"><span class="spinring" style="border-color:currentColor;border-right-color:transparent"></span>Scanning…</button>') +
+    st('disabled','<button class="btn btn-primary is-disabled">Scan now</button>'));
+
+  h += row('Button — secondary / ghost','Everything that isn\'t the verb',
+    st('secondary','<button class="btn btn-secondary">Cancel</button>') +
+    st('sec · hover','<button class="btn btn-secondary" style="background:var(--state-hover);border-color:var(--border-strong)">Cancel</button>') +
+    st('ghost','<button class="btn btn-ghost">Scan again</button>') +
+    st('ghost · hover','<button class="btn btn-ghost" style="background:var(--state-hover);color:var(--text-primary)">Scan again</button>') +
+    st('with icon','<button class="btn btn-secondary">'+I('copy','icon icon-sm')+'Copy</button>') +
+    st('sizes','<span style="display:flex;gap:8px;align-items:center"><button class="btn btn-secondary btn-sm">Small</button><button class="btn btn-secondary">Medium</button><button class="btn btn-secondary btn-lg">Large</button></span>'));
+
+  h += row('Button — destructive','Only ever the committed action',
+    st('default','<button class="btn btn-danger">Clean 18 items</button>') +
+    st('hover','<button class="btn btn-danger" style="background:var(--danger-solid-hover)">Clean 18 items</button>') +
+    st('disabled','<button class="btn btn-danger is-disabled">Clean 18 items</button>') +
+    st('secondary','<button class="btn" style="background:var(--danger-bg-subtle);color:var(--danger-text);border-color:var(--danger-border)">Delete permanently</button>'));
+
+  h += row('Icon button','28px, always with a tooltip and aria-label',
+    st('default','<button class="iconbtn">'+I('more-horizontal')+'</button>') +
+    st('hover','<button class="iconbtn" style="background:var(--state-hover);color:var(--text-primary)">'+I('more-horizontal')+'</button>') +
+    st('active','<button class="iconbtn is-active">'+I('filter')+'</button>') +
+    st('focus','<button class="iconbtn is-focused">'+I('settings')+'</button>'));
+
+  h += row('Checkbox','Row, group and select-all',
+    st('unchecked', CB('false')) + st('checked', CB('true')) + st('mixed', CB('mixed')) +
+    st('disabled','<span class="cb is-disabled" aria-checked="false">'+I('check')+'</span>'));
+
+  h += row('Risk badge','Never color alone — glyph, shape and word',
+    st('safe','<span class="badge badge-safe" style="border-radius:999px">'+I('check','icon icon-sm')+' safe</span>') +
+    st('caution','<span class="badge badge-caution">'+I('warning','icon icon-sm')+' caution</span>') +
+    st('danger','<span class="badge badge-danger" style="border-left:2px solid var(--danger-border-strong);border-radius:3px">'+I('alert-circle','icon icon-sm')+' danger</span>') +
+    st('neutral','<span class="badge badge-neutral">estimated</span>') +
+    st('count','<span class="countpill tnum">94</span>'));
+
+  h += row('Chip','Filter, group-by, sort',
+    st('default','<button class="chip">Group: Ecosystem '+I('chevron-down','icon icon-sm')+'</button>') +
+    st('hover','<button class="chip" style="border-color:var(--border-strong);color:var(--text-primary)">Size '+I('chevron-down','icon icon-sm')+'</button>') +
+    st('active','<button class="chip is-active">'+I('filter')+' Filters</button>') +
+    st('with count','<button class="chip">'+I('filter')+' Filters <span class="countpill" style="margin-left:2px">2</span></button>') +
+    st('token','<span class="token">&gt;1gb <span class="x">'+I('close','icon icon-sm')+'</span></span>'));
+
+  h += row('Size cell','Four typographic tiers plus unknown',
+    st('≥10 GB', Size(22.1e9)) + st('1–10 GB', Size(4.1e9)) + st('100 MB–1 GB', Size(340e6)) +
+    st('&lt;100 MB', Size(12e6)) + st('unknown', Size(null)));
+
+  h += row('Magnitude &amp; share','sqrt-scaled, per group',
+    st('magnitude bar','<span style="width:56px;display:block"><span class="magbar" style="--eco-accent:var(--eco-node)"><i style="width:64%;background:var(--eco-node)"></i></span></span>') +
+    st('group share','<span class="gshare" style="width:100px;display:block;height:6px;border-radius:3px;background:var(--chart-track);overflow:hidden"><i style="display:block;height:100%;width:78%;background:var(--eco-apple);border-radius:3px"></i></span>') +
+    st('disk meter','<span style="width:200px;display:block"><span class="diskmeter"><i class="seg-used" style="width:49%"></i><i class="seg-recl" style="width:14%"></i></span></span>'));
+
+  h += row('Progress','Indeterminate for scan, determinate for clean',
+    st('indeterminate','<span style="width:220px;display:block"><span class="progress progress-indeterminate" style="display:block"></span></span>') +
+    st('determinate','<span style="width:220px;display:block"><span class="bigbar" style="--pct:39;display:block"><i></i></span></span>') +
+    st('spinner','<span class="spinring"></span>'));
+
+  h += row('Ecosystem marks','Always paired with the name',
+    Object.entries(ECO).map(([k,v]) =>
+      `<span style="display:inline-flex;align-items:center;gap:6px;color:var(--eco-${v.k})">
+        ${I('eco-'+v.k,'icon icon-sm')}<span class="t-caption" style="color:var(--text-secondary)">${v.n}</span></span>`).join(''));
+
+  h += row('Toggle &amp; slider','Settings controls',
+    st('off','<span class="toggle"><i></i></span>') + st('on','<span class="toggle is-on"><i></i></span>') +
+    st('slider','<span style="width:200px;display:block"><span class="slider" style="--pct:50;display:block"><i></i><b></b></span></span>'));
+
+  h += row('Segmented control','Settings nav below 1024px',
+    '<div class="seg"><button class="is-on">Scanning</button><button>Ecosystems</button><button>Safety</button></div>');
+
+  h += row('Item row','Every state the list can be in',
+    Item(GROUPS[0].items[0],'node') +
+    Item({...GROUPS[0].items[0], sel:true},'node') +
+    Item({...GROUPS[1].items[0]},'apple') +
+    Item({...GROUPS[6].items[0]},'docker'), true);
+
+  h += row('Group header','Collapsed and expanded, with tri-state',
+    Group(GROUPS[1], true) + Group(GROUPS[4], false), true);
+
+  h += row('Command line','Machine text is always mono, always selectable',
+    '<div style="width:100%;display:flex;flex-direction:column;gap:8px">' +
+    '<span class="cmdline"><span class="glyph">▶</span>cargo clean<br>in ~/git/void</span>' +
+    '<span class="cmdline"><span class="glyph">⌫</span>Delete directory recursively</span>' +
+    '<span class="cmdline"><span class="glyph">▶</span>docker builder prune -f</span></div>', true);
+
+  h += row('Error plate','Verbatim system output, never paraphrased',
+    '<div class="error-plate" style="margin:0">IO error: No such file or directory (os error 2)\n  while walking ~/Library/Developer/CoreSimulator/Devices</div>', true);
+
+  h += row('Banner','Permission and info, dismissible',
+    '<div style="width:100%;display:flex;flex-direction:column;gap:8px">' +
+    '<div class="banner" style="border-radius:6px;border:1px solid var(--caution-border)">'+I('lock')+
+      '<span class="txt">Some folders couldn\'t be read.</span><button class="btn btn-secondary btn-sm">Grant access</button></div>' +
+    '<div class="banner info" style="border-radius:6px;border:1px solid var(--accent-border)">'+I('info')+
+      '<span class="txt">Changes apply to your next scan.</span><button class="btn btn-ghost btn-sm">Rescan now</button></div></div>', true);
+
+  h += row('Skeleton','6 rows, only after 300ms, minimum 300ms visible',
+    '<div style="width:100%;display:flex;flex-direction:column;gap:8px">' +
+    [62,88,45].map(w=>`<div style="display:flex;gap:10px;align-items:center">
+      <span class="skeleton" style="width:14px;height:14px"></span>
+      <span style="flex:1"><span class="skeleton" style="display:block;height:15px;width:${w}%;margin-bottom:3px"></span>
+      <span class="skeleton" style="display:block;height:13px;width:${w-18}%"></span></span>
+      <span class="skeleton" style="width:48px;height:16px"></span></div>`).join('') + '</div>', true);
+
+  h += row('Empty state','An empty screen is an invitation to act',
+    `<div class="state" data-size="sm" style="width:100%;padding:24px 16px">
+      ${I('filter','glyph icon icon-lg')}
+      <div class="title">No Rust artifacts</div>
+      <div class="body">The scan found 412 items, none in this ecosystem.</div>
+      <div class="actions"><button class="btn btn-ghost btn-sm">Clear filter</button></div>
+    </div>`, true);
+
+  return h + '</div>';
+}
+document.querySelectorAll('[data-gallery]').forEach(el => el.innerHTML = gallery());
+</script>
diff --git a/dev/harness.html b/dev/harness.html
new file mode 100644
index 0000000..94458a3
--- /dev/null
+++ b/dev/harness.html
@@ -0,0 +1,127 @@
+<!--
+  Void — frontend development harness.  NOT part of the shipped app.
+
+  Opens the real frontend in a plain browser with a stubbed Tauri bridge, so a
+  CSS or layout change can be checked with a refresh instead of a full
+  `cargo tauri dev` rebuild. The fixture below deliberately includes the
+  awkward cases: an unknown Docker size, a null mtime, and an item whose Safe
+  default guards a Danger `rm -rf`.
+
+  Serve the repository root and open /dev/harness.html, e.g.
+      python3 -m http.server 8000
+      open http://localhost:8000/dev/harness.html?theme=dark
+
+  Query parameters:  theme=dark|light   goto=settings|history   scan=0
+
+  CAVEAT: the fixture mirrors `deepclean-core::model` by hand and nothing in CI
+  checks that. If you add or rename a field there, update it here too — this
+  file will keep rendering happily against a stale shape.
+-->
+<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8">
+<title>Void harness</title>
+<link rel="stylesheet" href="../crates/deepclean-app/frontend/css/tokens.css"><link rel="stylesheet" href="../crates/deepclean-app/frontend/css/base.css">
+<link rel="stylesheet" href="../crates/deepclean-app/frontend/css/components.css"><link rel="stylesheet" href="../crates/deepclean-app/frontend/css/screens.css">
+</head><body>
+<div id="root" class="app"></div>
+<script>
+// Stub bridge: exercises the real frontend against realistic scanner output.
+const uid = (n) => `0000-${n}`;
+const act = (n, label, desc, method, risk, est) => ({ id:`a${n}`, label, description:desc, method, risk, estimated_savings_bytes:est });
+const ITEMS = [
+  { id:uid(1), path:'/Users/dev/git/void-web/node_modules', ecosystem:'node', kind:'node_modules', risk:'safe',
+    size_bytes:4.1e9, size_display:'4.1 GB', last_modified:'2026-08-10T00:00:00Z', days_stale:12,
+    project_name:'void-web', project_root:'/Users/dev/git/void-web',
+    available_actions:[ act(1,'Remove node_modules/','Delete the entire node_modules directory',{type:'remove_dir',path:'/Users/dev/git/void-web/node_modules'},'safe',4.1e9),
+      act(2,'npm cache clean','Run npm cache clean --force to clear the npm cache',{type:'command',program:'npm',args:['cache','clean','--force'],working_dir:'/Users/dev/git/void-web'},'safe',0)]},
+  { id:uid(2), path:'/Users/dev/git/dashboard/node_modules', ecosystem:'node', kind:'node_modules', risk:'safe',
+    size_bytes:3.2e9, size_display:'3.2 GB', last_modified:null, days_stale:48, project_name:'dashboard', project_root:'/Users/dev/git/dashboard',
+    available_actions:[act(3,'Remove node_modules/','Delete the entire node_modules directory',{type:'remove_dir',path:'/Users/dev/git/dashboard/node_modules'},'safe',3.2e9)]},
+  { id:uid(3), path:'/Users/dev/.npm', ecosystem:'node', kind:'npm_cache', risk:'safe',
+    size_bytes:2.4e9, size_display:'2.4 GB', last_modified:null, days_stale:48, project_name:null, project_root:null,
+    available_actions:[act(4,'npm cache clean','Clear the npm cache',{type:'command',program:'npm',args:['cache','clean','--force'],working_dir:null},'safe',0)]},
+  { id:uid(4), path:'/Users/dev/Library/Developer/CoreSimulator/Devices', ecosystem:'apple', kind:'simulator_devices', risk:'caution',
+    size_bytes:22.1e9, size_display:'22.1 GB', last_modified:null, days_stale:18, project_name:null, project_root:null,
+    available_actions:[ act(5,'Delete unavailable simulators','Remove simulators for SDKs you no longer have',{type:'command',program:'xcrun',args:['simctl','delete','unavailable'],working_dir:null},'caution',0),
+      act(6,'Remove all simulator devices','Delete every simulator device and its data',{type:'remove_dir',path:'/Users/dev/Library/Developer/CoreSimulator/Devices'},'danger',22.1e9)]},
+  { id:uid(5), path:'/Users/dev/Library/Developer/Xcode/DerivedData', ecosystem:'apple', kind:'derived_data', risk:'safe',
+    size_bytes:8.4e9, size_display:'8.4 GB', last_modified:null, days_stale:3, project_name:'MyApp', project_root:null,
+    available_actions:[act(7,'Remove DerivedData/','Delete all Xcode derived data',{type:'remove_dir',path:'/Users/dev/Library/Developer/Xcode/DerivedData'},'safe',8.4e9)]},
+  { id:uid(6), path:'/Users/dev/Library/Developer/Xcode/Archives', ecosystem:'apple', kind:'archives', risk:'caution',
+    size_bytes:6.2e9, size_display:'6.2 GB', last_modified:null, days_stale:210, project_name:null, project_root:null,
+    available_actions:[act(8,'Remove Archives/','Delete all Xcode archives (old builds for App Store submission)',{type:'remove_dir',path:'/Users/dev/Library/Developer/Xcode/Archives'},'caution',6.2e9)]},
+  { id:uid(7), path:'/Users/dev/git/void/target', ecosystem:'rust', kind:'target_dir', risk:'safe',
+    size_bytes:3.8e9, size_display:'3.8 GB', last_modified:null, days_stale:2, project_name:'void', project_root:'/Users/dev/git/void',
+    available_actions:[ act(9,'cargo clean','Run cargo clean in the project root',{type:'command',program:'cargo',args:['clean'],working_dir:'/Users/dev/git/void'},'safe',0),
+      act(10,'Remove target/','Delete the target directory',{type:'remove_dir',path:'/Users/dev/git/void/target'},'safe',3.8e9)]},
+  { id:uid(8), path:'/Users/dev/.Trash', ecosystem:'system', kind:'trash_bin', risk:'caution',
+    size_bytes:14.2e9, size_display:'14.2 GB', last_modified:null, days_stale:null, project_name:'Trash (412 items)', project_root:null,
+    available_actions:[act(11,'Empty Trash','Permanently remove everything in the Trash',{type:'command',program:'osascript',args:['-e','tell application "Finder" to empty the trash'],working_dir:null},'caution',14.2e9)]},
+  { id:uid(9), path:'/Users/dev/Downloads/xcode_14.3.xip', ecosystem:'system', kind:'downloads_dir', risk:'safe',
+    size_bytes:8.1e9, size_display:'8.1 GB', last_modified:null, days_stale:340, project_name:null, project_root:'/Users/dev/Downloads',
+    available_actions:[ act(12,'Move to Trash','Move this file to the Trash',{type:'command',program:'osascript',args:['-e','tell application "Finder" to delete POSIX file "/Users/dev/Downloads/xcode_14.3.xip"'],working_dir:null},'safe',8.1e9),
+      act(13,'Delete permanently','Permanently delete "xcode_14.3.xip"',{type:'command',program:'rm',args:['-rf','/Users/dev/Downloads/xcode_14.3.xip'],working_dir:null},'danger',8.1e9)]},
+  { id:uid(10), path:'/Users/dev/go/pkg/mod', ecosystem:'go', kind:'go_mod_cache', risk:'caution',
+    size_bytes:11.3e9, size_display:'11.3 GB', last_modified:null, days_stale:31, project_name:null, project_root:null,
+    available_actions:[act(14,'go clean -modcache','Clear the Go module cache',{type:'command',program:'go',args:['clean','-modcache'],working_dir:null},'caution',11.3e9)]},
+  { id:uid(11), path:'/Users/dev/.m2/repository', ecosystem:'java', kind:'maven_repository', risk:'caution',
+    size_bytes:8.9e9, size_display:'8.9 GB', last_modified:null, days_stale:92, project_name:null, project_root:null,
+    available_actions:[act(15,'Remove Maven repository','Delete ~/.m2/repository (dependencies will re-download)',{type:'remove_dir',path:'/Users/dev/.m2/repository'},'caution',8.9e9)]},
+  { id:uid(12), path:'/var/run/docker.sock', ecosystem:'docker', kind:'build_cache', risk:'caution',
+    size_bytes:0, size_display:'unknown', last_modified:null, days_stale:null, project_name:'Docker', project_root:null,
+    available_actions:[ act(16,'Prune dangling images (12 found)','Remove images not referenced by any tag',{type:'docker_prune',prune_type:'image'},'safe',0),
+      act(17,'docker system prune','Remove all unused containers, networks and images',{type:'docker_prune',prune_type:'system'},'caution',0)]},
+  { id:uid(13), path:'/Users/dev/Library/Caches/Homebrew', ecosystem:'homebrew', kind:'homebrew_cache', risk:'safe',
+    size_bytes:3.1e9, size_display:'3.1 GB', last_modified:null, days_stale:21, project_name:'Homebrew', project_root:null,
+    available_actions:[act(18,'brew cleanup','Remove stale Homebrew downloads',{type:'command',program:'brew',args:['cleanup'],working_dir:null},'safe',3.1e9)]},
+];
+const HISTORY = { run_count:3, total_bytes:340.2e9, bytes_last_30_days:38.4e9, runs:[
+  { id:'r1', started_at:new Date(Date.now()-3600e3).toISOString(), duration_ms:24000, items:[
+    { path:'/Users/dev/git/a/node_modules', ecosystem:'node', action_label:'Remove node_modules/', method_summary:'Delete directory recursively', bytes_freed:38.4e9, estimated_bytes:0, outcome:'succeeded' },
+    { path:'/Users/dev/git/b/target', ecosystem:'rust', action_label:'cargo clean', method_summary:'cargo clean (in /Users/dev/git/b)', bytes_freed:0, estimated_bytes:0, outcome:'failed', error:'Command failed: `cargo` was not found in PATH' }]},
+  { id:'r2', started_at:new Date(Date.now()-8*86400e3).toISOString(), duration_ms:12000, items:[
+    { path:'/Users/dev/.m2/repository', ecosystem:'java', action_label:'Remove Maven repository', method_summary:'Delete directory recursively', bytes_freed:12.1e9, estimated_bytes:0, outcome:'succeeded' }]},
+  { id:'r3', started_at:new Date(Date.now()-25*86400e3).toISOString(), duration_ms:41000, items:[
+    { path:'/Users/dev/Library/Caches/Homebrew', ecosystem:'homebrew', action_label:'brew cleanup', method_summary:'brew cleanup', bytes_freed:0, estimated_bytes:64.8e9, outcome:'succeeded' }]},
+]};
+const handlers = {};
+window.__TAURI__ = {
+  core: { invoke: async (cmd) => {
+    if (cmd === 'get_config') return { scan_roots:['/Users/dev'], blocked_paths:['/Users/dev/keep-this'],
+      enabled_ecosystems:['rust','node','apple','docker','go','system','python','java','homebrew','jet_brains','dot_net'],
+      staleness_threshold_days:30, cpu_threshold_percent:70, walker_threads:8, max_concurrent_analyses:8,
+      ui:{ theme:new URLSearchParams(location.search).get('theme')||'system', density:'comfortable', grouping:'ecosystem',
+           confirm_before_cleaning:true, prefer_trash:true, launch_at_login:false, show_menu_bar_icon:true } };
+    if (cmd === 'get_disk_usage') return { total_bytes:1e12, available_bytes:512e9, used_bytes:488e9 };
+    if (cmd === 'get_history') return HISTORY;
+    if (cmd === 'get_config_path') return '/Users/dev/Library/Application Support/com.void.app/config.json';
+    if (cmd === 'take_startup_warnings') return [];
+    if (cmd === 'start_scan') { setTimeout(runScan, 20); return; }
+    return null;
+  }},
+  event: { listen: async (name, cb) => { (handlers[name] ||= []).push(cb); return () => {}; } },
+  shell: { open: async () => {} },
+  dialog: { open: async () => '/Users/dev/NewFolder' },
+};
+const emit = (name, payload) => (handlers[name]||[]).forEach(cb => cb({ payload }));
+function runScan() {
+  ['rust','node','apple','docker','go','system','java','homebrew'].forEach(e => emit('scan-event',{type:'scanner_started',ecosystem:e}));
+  emit('scan-event',{type:'progress',message:'',paths_scanned:128431});
+  ITEMS.forEach(item => emit('scan-event',{type:'item_found',item}));
+  emit('scan-event',{type:'permission_denied',path:'/Users/dev/Library/Containers'});
+  emit('scan-event',{type:'error',message:'docker: daemon not running'});
+  emit('scan-event',{type:'scan_complete',summary:{scan_duration_ms:42100}});
+}
+// Drive the real scan path once the app has booted and registered listeners.
+if (new URLSearchParams(location.search).get('scan') !== '0') {
+  const tick = setInterval(() => {
+    if (window.__void_scan) {
+      clearInterval(tick);
+      window.__void_scan();
+      const goto = new URLSearchParams(location.search).get('goto');
+      if (goto) setTimeout(() => document.querySelector(`[data-route="${goto}"]`)?.click(), 400);
+    }
+  }, 40);
+}
+</script>
+<script type="module" src="../crates/deepclean-app/frontend/js/main.js"></script>
+</body></html>
diff --git a/docs/apple-touch-icon.png b/docs/apple-touch-icon.png
new file mode 100644
index 0000000..990313f
Binary files /dev/null and b/docs/apple-touch-icon.png differ
diff --git a/docs/favicon-32.png b/docs/favicon-32.png
new file mode 100644
index 0000000..189a1d0
Binary files /dev/null and b/docs/favicon-32.png differ
diff --git a/docs/favicon.svg b/docs/favicon.svg
new file mode 100644
index 0000000..0ee6dbc
--- /dev/null
+++ b/docs/favicon.svg
@@ -0,0 +1,7 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" width="32" height="32">
+  <!-- The mark: a ring with a gap — an event horizon. Same shape the app uses
+       in its header, as its scan indicator, and in the menu bar. -->
+  <rect width="32" height="32" rx="7" fill="#010306"/>
+  <circle cx="16" cy="16" r="9.5" fill="none" stroke="#389BFF" stroke-width="3.4"
+          stroke-linecap="round" pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/>
+</svg>
diff --git a/docs/icon.png b/docs/icon.png
index 0f86450..c0705c2 100644
Binary files a/docs/icon.png and b/docs/icon.png differ
diff --git a/docs/index.html b/docs/index.html
index 410662b..e0583ce 100644
--- a/docs/index.html
+++ b/docs/index.html
@@ -1,355 +1,505 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Void — Reclaim Your Disk Space</title>
-  <style>
-    * { margin: 0; padding: 0; box-sizing: border-box; }
-
-    :root {
-      --bg: #0a0a0b;
-      --surface: #141416;
-      --border: #2a2a2e;
-      --text: #e4e4e7;
-      --text-muted: #71717a;
-      --accent: #6366f1;
-      --accent-hover: #818cf8;
-    }
-
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-      background: var(--bg);
-      color: var(--text);
-      line-height: 1.6;
-    }
-
-    a { color: var(--accent); text-decoration: none; }
-    a:hover { color: var(--accent-hover); }
-
-    .container {
-      max-width: 800px;
-      margin: 0 auto;
-      padding: 0 24px;
-    }
-
-    header {
-      padding: 24px 0;
-      border-bottom: 1px solid var(--border);
-    }
-
-    header .container {
-      display: flex;
-      justify-content: space-between;
-      align-items: center;
-    }
-
-    header .logo {
-      display: flex;
-      align-items: center;
-      gap: 10px;
-      font-size: 1.25rem;
-      font-weight: 700;
-      color: var(--text);
-      letter-spacing: -0.02em;
-    }
-
-    header .logo img {
-      width: 28px;
-      height: 28px;
-      border-radius: 6px;
-    }
-
-    .hero-logo {
-      width: 96px;
-      height: 96px;
-      border-radius: 20px;
-      margin-bottom: 28px;
-    }
-
-    header nav a {
-      color: var(--text-muted);
-      margin-left: 24px;
-      font-size: 0.9rem;
-    }
-
-    header nav a:hover { color: var(--text); }
-
-    .hero {
-      padding: 100px 0 80px;
-      text-align: center;
-    }
-
-    .hero h1 {
-      font-size: 3.5rem;
-      font-weight: 800;
-      letter-spacing: -0.04em;
-      line-height: 1.1;
-      margin-bottom: 20px;
-    }
-
-    .hero h1 span {
-      background: linear-gradient(135deg, var(--accent), #a78bfa);
-      -webkit-background-clip: text;
-      -webkit-text-fill-color: transparent;
-    }
-
-    .hero p {
-      font-size: 1.2rem;
-      color: var(--text-muted);
-      max-width: 520px;
-      margin: 0 auto 40px;
-    }
-
-    .hero-actions {
-      display: flex;
-      gap: 12px;
-      justify-content: center;
-      flex-wrap: wrap;
-    }
-
-    .btn {
-      display: inline-block;
-      padding: 12px 28px;
-      border-radius: 8px;
-      font-size: 0.95rem;
-      font-weight: 600;
-      transition: all 0.15s;
-    }
-
-    .btn-primary {
-      background: var(--accent);
-      color: white;
-    }
-
-    .btn-primary:hover {
-      background: var(--accent-hover);
-      color: white;
-    }
-
-    .btn-secondary {
-      background: var(--surface);
-      color: var(--text);
-      border: 1px solid var(--border);
-    }
-
-    .btn-secondary:hover {
-      border-color: var(--text-muted);
-      color: white;
-    }
-
-    .install-snippet {
-      margin: 40px auto 0;
-      max-width: 600px;
-      background: var(--surface);
-      border: 1px solid var(--border);
-      border-radius: 8px;
-      padding: 16px 60px 16px 20px;
-      font-family: 'SF Mono', 'Fira Code', monospace;
-      font-size: 0.8rem;
-      color: var(--text-muted);
-      text-align: left;
-      position: relative;
-      overflow: hidden;
-      white-space: nowrap;
-      text-overflow: ellipsis;
-    }
-
-    .install-snippet code {
-      color: var(--text);
-      word-break: break-all;
-      white-space: nowrap;
-    }
-
-    .install-snippet .copy-btn {
-      position: absolute;
-      right: 8px;
-      top: 50%;
-      transform: translateY(-50%);
-      background: var(--border);
-      border: none;
-      color: var(--text-muted);
-      padding: 6px 12px;
-      border-radius: 4px;
-      cursor: pointer;
-      font-size: 0.8rem;
-      flex-shrink: 0;
-    }
-
-    .install-snippet .copy-btn:hover {
-      background: var(--text-muted);
-      color: var(--bg);
-    }
-
-    .features {
-      padding: 80px 0;
-    }
-
-    .features h2 {
-      text-align: center;
-      font-size: 1.8rem;
-      font-weight: 700;
-      margin-bottom: 48px;
-      letter-spacing: -0.02em;
-    }
-
-    .feature-grid {
-      display: grid;
-      grid-template-columns: repeat(auto-fit, minmax(220px, 1fr));
-      gap: 20px;
-    }
-
-    .feature-card {
-      background: var(--surface);
-      border: 1px solid var(--border);
-      border-radius: 10px;
-      padding: 24px;
-    }
-
-    .feature-card h3 {
-      font-size: 1rem;
-      font-weight: 600;
-      margin-bottom: 8px;
-    }
-
-    .feature-card p {
-      font-size: 0.875rem;
-      color: var(--text-muted);
-      line-height: 1.5;
-    }
-
-    .ecosystems {
-      padding: 0 0 80px;
-    }
-
-    .ecosystems h2 {
-      text-align: center;
-      font-size: 1.8rem;
-      font-weight: 700;
-      margin-bottom: 32px;
-      letter-spacing: -0.02em;
-    }
-
-    .eco-tags {
-      display: flex;
-      flex-wrap: wrap;
-      gap: 10px;
-      justify-content: center;
-    }
-
-    .eco-tag {
-      background: var(--surface);
-      border: 1px solid var(--border);
-      border-radius: 20px;
-      padding: 8px 18px;
-      font-size: 0.85rem;
-      color: var(--text-muted);
-    }
-
-    footer {
-      border-top: 1px solid var(--border);
-      padding: 32px 0;
-      text-align: center;
-      color: var(--text-muted);
-      font-size: 0.85rem;
-    }
-
-    footer a { color: var(--text-muted); }
-    footer a:hover { color: var(--accent); }
-
-    @media (max-width: 600px) {
-      .hero h1 { font-size: 2.2rem; }
-      .hero p { font-size: 1rem; }
-    }
-  </style>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>Void — Reclaim your disk space</title>
+<meta name="description" content="Void finds and cleans developer build artifacts across 11 ecosystems. One scan, gigabytes back. Free and open source for macOS, Windows and Linux.">
+<meta name="color-scheme" content="light dark">
+<link rel="icon" href="favicon.svg" type="image/svg+xml">
+<link rel="icon" href="favicon-32.png" sizes="32x32">
+<link rel="apple-touch-icon" href="apple-touch-icon.png">
+
+<meta property="og:title" content="Void — Reclaim your disk space">
+<meta property="og:description" content="Finds and cleans developer build artifacts across 11 ecosystems. One scan, gigabytes back.">
+<meta property="og:image" content="https://eladbash.github.io/void/shot-dark.png">
+<meta property="og:url" content="https://eladbash.github.io/void/">
+<meta name="twitter:card" content="summary_large_image">
+
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:opsz,wght@14..32,400..700&display=swap">
+
+<style>
+/* ============================================================================
+   Void — website
+   Same design system as the app: neutral hue 254, accent hue 252, both drawn
+   from the icon's glow. Light on :root; dark under prefers-color-scheme and
+   [data-theme="dark"] so the toggle wins in both directions.
+   ============================================================================ */
+
+:root {
+  --surface-base:#FAFBFD; --surface-raised:#FFFFFF; --surface-sunken:#F3F6F9; --surface-inset:#E5E8ED;
+  --border-subtle:#E5E8ED; --border-default:#D7DCE1; --border-strong:#868D95;
+  --text-primary:#1C232C; --text-secondary:#515963; --text-tertiary:#69717A;
+  --accent-bg:#0064B5; --accent-bg-hover:#004986; --accent-text:#0064B5;
+  --accent-subtle:#EDF5FF; --accent-border:#BEDCFF; --accent-on-solid:#FFFFFF;
+  --safe-text:#007D61; --focus-ring:#007FE2;
+  --shadow-1:0 1px 2px rgba(16,24,40,.06), 0 1px 3px rgba(16,24,40,.10);
+  --shadow-3:0 16px 32px -8px rgba(16,24,40,.14), 0 4px 10px -4px rgba(16,24,40,.07);
+  --shadow-hero:0 32px 64px -20px rgba(16,24,40,.28), 0 0 0 1px rgba(16,24,40,.10);
+  --edge-highlight:none;
+
+  --eco-rust:#BB5F00; --eco-java:#954D3F; --eco-homebrew:#777B18; --eco-node:#097200;
+  --eco-go:#0095A1; --eco-docker:#007397; --eco-python:#004E85; --eco-apple:#6D74D8;
+  --eco-dotnet:#712DC3; --eco-jetbrains:#811288; --eco-system:#C63E86;
+
+  --font-sans:"Inter",-apple-system,BlinkMacSystemFont,"Segoe UI Variable Text","Segoe UI","Noto Sans",Cantarell,Ubuntu,system-ui,sans-serif;
+  --font-mono:ui-monospace,"SF Mono",SFMono-Regular,"Cascadia Mono","Segoe UI Mono","Roboto Mono","DejaVu Sans Mono",Menlo,Consolas,monospace;
+}
+
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) {
+    --surface-base:#060B11; --surface-raised:#0F151D; --surface-sunken:#010306; --surface-inset:#010306;
+    --border-subtle:#1C232C; --border-default:#283039; --border-strong:#69717A;
+    --text-primary:#F3F6F9; --text-secondary:#A5ABB3; --text-tertiary:#868D95;
+    --accent-bg:#389BFF; --accent-bg-hover:#6BB2FF; --accent-text:#6BB2FF;
+    --accent-subtle:#15283D; --accent-border:#1D436A; --accent-on-solid:#010306;
+    --safe-text:#6AECC4; --focus-ring:#6BB2FF;
+    --shadow-1:0 1px 2px rgba(0,0,0,.72), inset 0 1px 0 rgba(255,255,255,.030);
+    --shadow-3:0 20px 44px -12px rgba(0,0,0,.92), inset 0 1px 0 rgba(255,255,255,.055);
+    --shadow-hero:0 40px 80px -24px rgba(0,0,0,.9), 0 0 0 1px rgba(255,255,255,.07);
+    --edge-highlight:inset 0 1px 0 rgba(255,255,255,.055);
+    --eco-rust:#FF8505; --eco-java:#C37D6F; --eco-homebrew:#A0A645; --eco-node:#3AA831;
+    --eco-go:#31C7D5; --eco-docker:#009AC7; --eco-python:#2174B7; --eco-apple:#AAB4FF;
+    --eco-dotnet:#A676F9; --eco-jetbrains:#A34AAA; --eco-system:#FF89C0;
+  }
+}
+:root[data-theme="dark"] {
+  --surface-base:#060B11; --surface-raised:#0F151D; --surface-sunken:#010306; --surface-inset:#010306;
+  --border-subtle:#1C232C; --border-default:#283039; --border-strong:#69717A;
+  --text-primary:#F3F6F9; --text-secondary:#A5ABB3; --text-tertiary:#868D95;
+  --accent-bg:#389BFF; --accent-bg-hover:#6BB2FF; --accent-text:#6BB2FF;
+  --accent-subtle:#15283D; --accent-border:#1D436A; --accent-on-solid:#010306;
+  --safe-text:#6AECC4; --focus-ring:#6BB2FF;
+  --shadow-1:0 1px 2px rgba(0,0,0,.72), inset 0 1px 0 rgba(255,255,255,.030);
+  --shadow-3:0 20px 44px -12px rgba(0,0,0,.92), inset 0 1px 0 rgba(255,255,255,.055);
+  --shadow-hero:0 40px 80px -24px rgba(0,0,0,.9), 0 0 0 1px rgba(255,255,255,.07);
+  --edge-highlight:inset 0 1px 0 rgba(255,255,255,.055);
+  --eco-rust:#FF8505; --eco-java:#C37D6F; --eco-homebrew:#A0A645; --eco-node:#3AA831;
+  --eco-go:#31C7D5; --eco-docker:#009AC7; --eco-python:#2174B7; --eco-apple:#AAB4FF;
+  --eco-dotnet:#A676F9; --eco-jetbrains:#A34AAA; --eco-system:#FF89C0;
+}
+
+*,*::before,*::after { box-sizing:border-box; margin:0; padding:0; }
+
+html { -webkit-text-size-adjust:100%; scroll-behavior:smooth; }
+@media (prefers-reduced-motion: reduce) {
+  html { scroll-behavior:auto; }
+  *,*::before,*::after { transition-duration:1ms !important; animation-duration:1ms !important; }
+}
+
+body {
+  font-family:var(--font-sans);
+  font-optical-sizing:auto;
+  background:var(--surface-base);
+  color:var(--text-primary);
+  line-height:1.6;
+  -webkit-font-smoothing:antialiased;
+  -moz-osx-font-smoothing:grayscale;
+}
+
+a { color:var(--accent-text); text-decoration:none; }
+a:hover { text-decoration:underline; }
+:focus-visible { outline:2px solid var(--focus-ring); outline-offset:2px; border-radius:4px; }
+
+.container { max-width:1080px; margin:0 auto; padding:0 24px; }
+.narrow { max-width:760px; }
+
+/* ── Header ── */
+header {
+  position:sticky; top:0; z-index:10;
+  background:color-mix(in srgb, var(--surface-base) 82%, transparent);
+  backdrop-filter:blur(14px) saturate(150%);
+  -webkit-backdrop-filter:blur(14px) saturate(150%);
+  border-bottom:1px solid var(--border-subtle);
+}
+@supports not ((backdrop-filter:blur(1px)) or (-webkit-backdrop-filter:blur(1px))) {
+  header { background:var(--surface-base); }
+}
+header .container { display:flex; align-items:center; gap:16px; height:60px; }
+
+/* The mark is a ring with a gap — an event horizon. Same shape the app uses
+   for its header, its scan indicator and its menu-bar icon. */
+.lockup { display:inline-flex; align-items:center; gap:9px; }
+.lockup svg { color:var(--accent-bg); flex:none; }
+.wordmark {
+  font-size:17px; font-weight:600; letter-spacing:-.032em;
+  color:var(--text-primary); margin-top:1px;
+}
+.wordmark .v { letter-spacing:-.044em; }
+
+nav { margin-left:auto; display:flex; align-items:center; gap:22px; }
+nav a { color:var(--text-tertiary); font-size:14px; font-weight:500; }
+nav a:hover { color:var(--text-primary); text-decoration:none; }
+
+.theme-toggle {
+  width:32px; height:32px; display:inline-flex; align-items:center; justify-content:center;
+  border:1px solid var(--border-default); border-radius:7px;
+  background:var(--surface-raised); color:var(--text-tertiary); cursor:pointer;
+  transition:color .12s, border-color .12s;
+}
+.theme-toggle:hover { color:var(--text-primary); border-color:var(--border-strong); }
+.theme-toggle .moon { display:none; }
+:root[data-theme="dark"] .theme-toggle .sun { display:none; }
+:root[data-theme="dark"] .theme-toggle .moon { display:block; }
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) .theme-toggle .sun { display:none; }
+  :root:not([data-theme="light"]) .theme-toggle .moon { display:block; }
+}
+
+/* ── Hero ── */
+.hero { padding:88px 0 0; text-align:center; }
+.hero h1 {
+  font-size:clamp(2.4rem, 6vw, 3.75rem);
+  font-weight:620; letter-spacing:-.035em; line-height:1.05;
+  margin-bottom:20px;
+}
+.hero h1 em { font-style:normal; color:var(--accent-text); }
+.hero .lede {
+  font-size:clamp(1rem, 2vw, 1.2rem); color:var(--text-secondary);
+  max-width:560px; margin:0 auto 32px; text-wrap:pretty;
+}
+
+.actions { display:flex; gap:10px; justify-content:center; flex-wrap:wrap; }
+.btn {
+  display:inline-flex; align-items:center; gap:8px;
+  height:44px; padding:0 22px; border-radius:8px;
+  font-size:15px; font-weight:560; letter-spacing:-.004em;
+  border:1px solid transparent; transition:background-color .12s, border-color .12s;
+}
+.btn:hover { text-decoration:none; }
+.btn-primary { background:var(--accent-bg); color:var(--accent-on-solid); box-shadow:var(--edge-highlight); }
+.btn-primary:hover { background:var(--accent-bg-hover); color:var(--accent-on-solid); }
+.btn-secondary { background:var(--surface-raised); color:var(--text-primary); border-color:var(--border-strong); }
+.btn-secondary:hover { background:var(--surface-sunken); color:var(--text-primary); }
+
+.install {
+  display:flex; align-items:center; gap:10px;
+  max-width:700px; margin:28px auto 0; padding:0 8px 0 16px; height:48px;
+  background:var(--surface-inset); border:1px solid var(--border-subtle);
+  border-radius:9px; text-align:left;
+}
+/* If it still has to scroll on a narrow window, fade the edge so it reads as
+   scrollable rather than broken. */
+.install .scroller {
+  flex:1; min-width:0; position:relative;
+  -webkit-mask-image:linear-gradient(90deg,#000 calc(100% - 24px),transparent);
+  mask-image:linear-gradient(90deg,#000 calc(100% - 24px),transparent);
+}
+.install .prompt { color:var(--text-tertiary); font-family:var(--font-mono); font-size:13px; flex:none; }
+.install code {
+  display:block; overflow-x:auto; white-space:nowrap;
+  font-family:var(--font-mono); font-size:12px; color:var(--text-secondary);
+  scrollbar-width:none;
+}
+.install code::-webkit-scrollbar { display:none; }
+.install button {
+  flex:none; height:32px; padding:0 12px; border-radius:6px;
+  border:1px solid var(--border-default); background:var(--surface-raised);
+  color:var(--text-secondary); font:inherit; font-size:12.5px; font-weight:540; cursor:pointer;
+}
+.install button:hover { color:var(--text-primary); border-color:var(--border-strong); }
+.platforms { margin-top:14px; font-size:13px; color:var(--text-tertiary); }
+
+/* ── Product shot ── */
+.shot { padding:56px 0 0; }
+.shot picture, .shot img { display:block; width:100%; height:auto; }
+.shot .frame {
+  max-width:920px; margin:0 auto; border-radius:12px; overflow:hidden;
+  box-shadow:var(--shadow-hero);
+}
+.shot figcaption {
+  margin-top:16px; text-align:center; font-size:13px; color:var(--text-tertiary);
+}
+
+/* ── Sections ── */
+section { padding:88px 0; }
+.section-head { text-align:center; margin-bottom:44px; }
+.section-head h2 {
+  font-size:clamp(1.5rem, 3vw, 1.9rem); font-weight:620; letter-spacing:-.022em;
+}
+.section-head p { margin-top:10px; color:var(--text-secondary); max-width:56ch; margin-inline:auto; text-wrap:pretty; }
+
+.grid { display:grid; grid-template-columns:repeat(auto-fit, minmax(260px, 1fr)); gap:16px; }
+.card {
+  background:var(--surface-raised); border:1px solid var(--border-subtle);
+  border-radius:11px; padding:22px; box-shadow:var(--shadow-1);
+}
+.card .icon { width:20px; height:20px; color:var(--accent-text); margin-bottom:12px; }
+.card h3 { font-size:15px; font-weight:600; letter-spacing:-.008em; margin-bottom:6px; }
+.card p { font-size:14px; color:var(--text-secondary); line-height:1.55; }
+.card code {
+  font-family:var(--font-mono); font-size:12.5px;
+  background:var(--surface-inset); border:1px solid var(--border-subtle);
+  border-radius:4px; padding:1px 5px; color:var(--text-primary);
+}
+
+/* ── Safety strip ── */
+.safety { background:var(--surface-sunken); border-block:1px solid var(--border-subtle); }
+.risk-row { display:flex; flex-wrap:wrap; gap:10px; justify-content:center; margin-top:8px; }
+.pill {
+  display:inline-flex; align-items:center; gap:6px;
+  height:28px; padding:0 12px; border-radius:999px;
+  font-size:12px; font-weight:600; letter-spacing:.03em; text-transform:uppercase;
+}
+.pill svg { width:12px; height:12px; }
+.pill-safe { background:#E8FFF6; color:#007D61; box-shadow:inset 0 0 0 1px #77F8CF; }
+.pill-caution { border-radius:5px; background:#FFF8E7; color:#695000; box-shadow:inset 0 0 0 1px #FFD875; }
+.pill-danger { border-radius:5px; background:#FFF6F6; color:#6D0020; box-shadow:inset 0 0 0 1px #FFCED1; border-left:2px solid #E14660; }
+@media (prefers-color-scheme: dark) {
+  :root:not([data-theme="light"]) .pill-safe { background:#182A2E; color:#6AECC4; box-shadow:inset 0 0 0 1px #2C5A52; }
+  :root:not([data-theme="light"]) .pill-caution { background:#25251A; color:#E9B600; box-shadow:inset 0 0 0 1px #554914; }
+  :root:not([data-theme="light"]) .pill-danger { background:#251B25; color:#EF546C; box-shadow:inset 0 0 0 1px #572936; border-left-color:#EF546C; }
+}
+:root[data-theme="dark"] .pill-safe { background:#182A2E; color:#6AECC4; box-shadow:inset 0 0 0 1px #2C5A52; }
+:root[data-theme="dark"] .pill-caution { background:#25251A; color:#E9B600; box-shadow:inset 0 0 0 1px #554914; }
+:root[data-theme="dark"] .pill-danger { background:#251B25; color:#EF546C; box-shadow:inset 0 0 0 1px #572936; border-left-color:#EF546C; }
+
+/* ── Ecosystems ── */
+.eco-tags { display:flex; flex-wrap:wrap; gap:9px; justify-content:center; }
+.eco-tag {
+  display:inline-flex; align-items:center; gap:7px;
+  height:34px; padding:0 15px; border-radius:999px;
+  background:var(--surface-raised); border:1px solid var(--border-subtle);
+  font-size:13.5px; font-weight:500; color:var(--text-secondary);
+}
+.eco-tag .dot { width:8px; height:8px; border-radius:2px; background:var(--c); flex:none; }
+
+/* ── Footer ── */
+footer {
+  border-top:1px solid var(--border-subtle); padding:36px 0;
+  color:var(--text-tertiary); font-size:13.5px;
+}
+footer .container { display:flex; align-items:center; gap:16px; flex-wrap:wrap; }
+footer nav { margin-left:auto; gap:18px; }
+footer a { color:var(--text-tertiary); }
+footer a:hover { color:var(--text-primary); }
+
+@media (max-width: 640px) {
+  .hero { padding-top:56px; }
+  section { padding:60px 0; }
+  .install { flex-wrap:nowrap; }
+  nav { gap:14px; }
+  nav a.hide-sm { display:none; }
+}
+</style>
 </head>
 <body>
-  <header>
-    <div class="container">
-      <div class="logo"><img src="icon.png" alt="Void">Void</div>
-      <nav>
-        <a href="https://github.com/eladbash/void">GitHub</a>
-        <a href="https://github.com/eladbash/void/releases">Releases</a>
-        <a href="https://github.com/sponsors/eladbash">Sponsor</a>
-      </nav>
+
+<header>
+  <div class="container">
+    <a class="lockup" href="/void/" aria-label="Void home">
+      <svg viewBox="0 0 20 20" width="22" height="22" aria-hidden="true">
+        <circle cx="10" cy="10" r="6.75" fill="none" stroke="currentColor" stroke-width="2.5"
+          stroke-linecap="round" pathLength="100" stroke-dasharray="88 12" stroke-dashoffset="-81"/>
+      </svg>
+      <span class="wordmark"><span class="v">V</span>oid</span>
+    </a>
+    <nav>
+      <a href="#features" class="hide-sm">Features</a>
+      <a href="#safety" class="hide-sm">Safety</a>
+      <a href="https://github.com/eladbash/void">GitHub</a>
+      <a href="https://github.com/eladbash/void/releases">Releases</a>
+      <button class="theme-toggle" id="themeToggle" aria-label="Switch between light and dark">
+        <svg class="sun" width="16" height="16" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round">
+          <circle cx="8" cy="8" r="3.2"/><path d="M8 1v1.8M8 13.2V15M15 8h-1.8M2.8 8H1M12.95 3.05l-1.27 1.27M4.32 11.68l-1.27 1.27M12.95 12.95l-1.27-1.27M4.32 4.32 3.05 3.05"/>
+        </svg>
+        <svg class="moon" width="16" height="16" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round">
+          <path d="M13.5 9.2A5.8 5.8 0 0 1 6.8 2.5a5.8 5.8 0 1 0 6.7 6.7z"/>
+        </svg>
+      </button>
+    </nav>
+  </div>
+</header>
+
+<section class="hero">
+  <div class="container">
+    <h1>Reclaim your <em>disk space</em></h1>
+    <p class="lede">
+      Void finds the build artifacts your projects left behind — across 11 ecosystems —
+      and tells you exactly what each cleanup will do before it runs.
+    </p>
+    <div class="actions">
+      <a href="https://github.com/eladbash/void/releases" class="btn btn-primary">Download for macOS</a>
+      <a href="https://github.com/eladbash/void" class="btn btn-secondary">View source</a>
+    </div>
+    <div class="install">
+      <span class="prompt">$</span>
+      <span class="scroller"><code id="installCmd">curl -fsSL https://raw.githubusercontent.com/eladbash/void/main/install.sh | sh</code></span>
+      <button id="copyBtn" type="button">Copy</button>
+    </div>
+    <p class="platforms">macOS, Windows and Linux · MIT licensed · no account, no telemetry</p>
+  </div>
+</section>
+
+<div class="shot">
+  <div class="container">
+    <figure class="frame">
+      <picture>
+        <source id="shotDark" srcset="shot-dark.png" media="(prefers-color-scheme: dark)">
+        <img id="shot" src="shot-light.png" width="1800" height="1400"
+             alt="Void's results screen: build artifacts grouped by ecosystem, each row showing its full path, age, size and risk level.">
+      </picture>
+    </figure>
+    <figcaption>Results grouped by ecosystem. Every row shows the path, how stale it is, and what cleaning it would actually do.</figcaption>
+  </div>
+</div>
+
+<section id="features">
+  <div class="container">
+    <div class="section-head">
+      <h2>Built for people who are careful with their machine</h2>
+      <p>Every project you touch leaves something behind. Void answers where it is, how much it costs you, and whether it is safe to remove.</p>
     </div>
-  </header>
-
-  <section class="hero">
-    <div class="container">
-      <h1>Reclaim your <span>disk space</span></h1>
-      <p>Void finds and cleans developer build artifacts across 11 ecosystems. One scan, gigabytes back.</p>
-      <div class="hero-actions">
-        <a href="https://github.com/eladbash/void/releases" class="btn btn-primary">Download</a>
-        <a href="https://github.com/eladbash/void" class="btn btn-secondary">View Source</a>
+    <div class="grid">
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M8 1.5a6.5 6.5 0 1 0 6.5 6.5"/><path d="M8 4.5a3.5 3.5 0 1 0 3.5 3.5"/><path d="M8 8 12.6 3.4"/></svg>
+        <h3>One scan, everything at once</h3>
+        <p>A multi-threaded walker sweeps your scan roots in parallel and streams results as it finds them. No waiting for a total before you can start reading.</p>
       </div>
-      <div class="install-snippet">
-        <span>$</span> <code>curl -fsSL https://raw.githubusercontent.com/eladbash/void/main/install.sh | sh</code>
-        <button class="copy-btn" onclick="navigator.clipboard.writeText('curl -fsSL https://raw.githubusercontent.com/eladbash/void/main/install.sh | sh')">Copy</button>
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="1.75" y="2.75" width="12.5" height="10.5" rx="1.9"/><path d="m4.85 6.3 1.85 1.9-1.85 1.9"/><path d="M8.7 10.35h2.65"/></svg>
+        <h3>The exact command, up front</h3>
+        <p>Void never hides what it is about to run. Whether it is <code>cargo clean</code>, <code>docker builder prune</code> or a plain delete, you see the literal command before you approve it.</p>
       </div>
-    </div>
-  </section>
-
-  <section class="features">
-    <div class="container">
-      <h2>Why Void?</h2>
-      <div class="feature-grid">
-        <div class="feature-card">
-          <h3>Safety First</h3>
-          <p>Blocked-path lists, sentinel file detection, and risk-level classification prevent accidental deletion of important files.</p>
-        </div>
-        <div class="feature-card">
-          <h3>Fast Scanning</h3>
-          <p>Multi-threaded filesystem walker with concurrent analysis. Scans your entire home directory in seconds.</p>
-        </div>
-        <div class="feature-card">
-          <h3>11 Ecosystems</h3>
-          <p>Rust, Node.js, Python, Go, Java, Docker, Apple/Xcode, Homebrew, JetBrains, .NET, and system caches.</p>
-        </div>
-        <div class="feature-card">
-          <h3>Staleness Detection</h3>
-          <p>Identifies artifacts that haven't been touched in days or weeks, so you clean what you're not using.</p>
-        </div>
-        <div class="feature-card">
-          <h3>Menu Bar App</h3>
-          <p>Lives in your system tray. Quick-scan and open the dashboard without leaving your workflow.</p>
-        </div>
-        <div class="feature-card">
-          <h3>Fully Configurable</h3>
-          <p>Choose scan roots, enable/disable ecosystems, set staleness thresholds, and protect specific paths.</p>
-        </div>
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.55V8l2.35 1.4"/></svg>
+        <h3>Staleness you can sort by</h3>
+        <p>Every artifact carries its age, so you can clean what you genuinely stopped using instead of the project you opened this morning.</p>
+      </div>
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M2.35 8a5.65 5.65 0 1 0 1.7-4.03"/><path d="M2.05 2.4v3h3"/><path d="M8 5.1V8l2.05 1.2"/></svg>
+        <h3>A record of what you freed</h3>
+        <p>Each clean is kept locally with the paths, the commands and the bytes recovered — including the honest note when a command could only be estimated.</p>
+      </div>
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><rect x="1.75" y="4.25" width="12.5" height="7.5" rx="1.9"/><path d="M1.75 8.5h12.5"/><path d="M4.15 10.1h3.1"/></svg>
+        <h3>In your menu bar</h3>
+        <p>Reclaimable space at a glance and a one-click scan, without leaving whatever you were doing.</p>
       </div>
+      <div class="card">
+        <svg class="icon" viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"><path d="M13.3 4.7H7.4"/><path d="M9.3 11.3H3.3"/><circle cx="4.7" cy="4.7" r="2"/><circle cx="11.3" cy="11.3" r="2"/></svg>
+        <h3>Yours to configure</h3>
+        <p>Scan roots, enabled ecosystems, staleness thresholds and a blocklist of folders Void must never touch. Settings are plain JSON on disk.</p>
+      </div>
+    </div>
+  </div>
+</section>
+
+<section id="safety" class="safety">
+  <div class="container narrow">
+    <div class="section-head" style="margin-bottom:28px">
+      <h2>Nothing is deleted without your say-so</h2>
+      <p>Void is a tool that removes files, so it is built to be argued with rather than trusted blindly.</p>
     </div>
-  </section>
-
-  <section class="ecosystems">
-    <div class="container">
-      <h2>Supported Ecosystems</h2>
-      <div class="eco-tags">
-        <span class="eco-tag">Rust</span>
-        <span class="eco-tag">Node.js</span>
-        <span class="eco-tag">Python</span>
-        <span class="eco-tag">Go</span>
-        <span class="eco-tag">Java / JVM</span>
-        <span class="eco-tag">Docker</span>
-        <span class="eco-tag">Apple / Xcode</span>
-        <span class="eco-tag">Homebrew</span>
-        <span class="eco-tag">JetBrains</span>
-        <span class="eco-tag">.NET</span>
-        <span class="eco-tag">System</span>
+    <div class="risk-row">
+      <span class="pill pill-safe">
+        <svg viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="m3.4 8.4 3.05 3.05L12.6 5.3"/></svg>Safe</span>
+      <span class="pill pill-caution">
+        <svg viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M7.02 2.62a1.13 1.13 0 0 1 1.96 0l5.16 8.88c.44.76-.11 1.71-.98 1.71H2.84c-.87 0-1.42-.95-.98-1.71z"/><path d="M8 6.3v3.05"/></svg>Caution</span>
+      <span class="pill pill-danger">
+        <svg viewBox="0 0 16 16" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><circle cx="8" cy="8" r="6.1"/><path d="M8 4.9v3.6"/></svg>Danger</span>
+    </div>
+    <div class="grid" style="margin-top:32px">
+      <div class="card">
+        <h3>Risk belongs to the action</h3>
+        <p>An item can offer several cleanups at different risk levels. Void shows the risk of the one that will actually run, and lets you pick a different one.</p>
+      </div>
+      <div class="card">
+        <h3>Friction that scales</h3>
+        <p>An all-safe batch is one click. Anything riskier is itemised with its command. Permanent deletion asks you to type <code>delete</code>.</p>
+      </div>
+      <div class="card">
+        <h3>Places it refuses to go</h3>
+        <p>Keychains, SSH and GPG keys, cloud credentials, shell config and your Documents folder are protected regardless of how Void is configured.</p>
       </div>
+      <div class="card">
+        <h3>The Trash, where possible</h3>
+        <p>When an artifact can be moved rather than destroyed, Void prefers that by default — and says plainly which actions cannot be undone.</p>
+      </div>
+    </div>
+  </div>
+</section>
+
+<section>
+  <div class="container">
+    <div class="section-head">
+      <h2>Eleven ecosystems</h2>
+      <p>Void knows what each toolchain leaves behind and how that toolchain prefers to clean it up.</p>
     </div>
-  </section>
-
-  <footer>
-    <div class="container">
-      <p>
-        Built by <a href="https://github.com/eladbash">@eladbash</a>
-        &middot; <a href="https://github.com/eladbash/void">GitHub</a>
-        &middot; <a href="https://github.com/sponsors/eladbash">Sponsor</a>
-        &middot; MIT License
-      </p>
+    <div class="eco-tags">
+      <span class="eco-tag" style="--c:var(--eco-rust)"><i class="dot"></i>Rust</span>
+      <span class="eco-tag" style="--c:var(--eco-node)"><i class="dot"></i>Node.js</span>
+      <span class="eco-tag" style="--c:var(--eco-python)"><i class="dot"></i>Python</span>
+      <span class="eco-tag" style="--c:var(--eco-go)"><i class="dot"></i>Go</span>
+      <span class="eco-tag" style="--c:var(--eco-java)"><i class="dot"></i>Java / JVM</span>
+      <span class="eco-tag" style="--c:var(--eco-docker)"><i class="dot"></i>Docker</span>
+      <span class="eco-tag" style="--c:var(--eco-apple)"><i class="dot"></i>Apple / Xcode</span>
+      <span class="eco-tag" style="--c:var(--eco-homebrew)"><i class="dot"></i>Homebrew</span>
+      <span class="eco-tag" style="--c:var(--eco-jetbrains)"><i class="dot"></i>JetBrains</span>
+      <span class="eco-tag" style="--c:var(--eco-dotnet)"><i class="dot"></i>.NET</span>
+      <span class="eco-tag" style="--c:var(--eco-system)"><i class="dot"></i>System</span>
     </div>
-  </footer>
+  </div>
+</section>
+
+<footer>
+  <div class="container">
+    <span>Built by <a href="https://github.com/eladbash">@eladbash</a> · MIT licensed</span>
+    <nav>
+      <a href="https://github.com/eladbash/void">GitHub</a>
+      <a href="https://github.com/eladbash/void/releases">Releases</a>
+      <a href="https://github.com/eladbash/void/blob/main/CONTRIBUTING.md">Contributing</a>
+      <a href="https://github.com/sponsors/eladbash">Sponsor</a>
+    </nav>
+  </div>
+</footer>
+
+<script>
+(() => {
+  const root = document.documentElement;
+  const shot = document.getElementById('shot');
+  const media = matchMedia('(prefers-color-scheme: dark)');
+
+  // Until a theme is chosen by hand, <picture> handles the screenshot and
+  // downloads exactly one file. Once it is chosen, the matching <source> has
+  // to be disabled first — a matching source wins over the img's own src, so
+  // setting src alone would leave the wrong screenshot on screen.
+  const applyShot = (dark) => {
+    if (!shot) return;
+    const source = document.getElementById('shotDark');
+    if (source) source.media = 'not all';
+    shot.src = dark ? 'shot-dark.png' : 'shot-light.png';
+  };
+
+  const stored = (() => { try { return localStorage.getItem('void-theme'); } catch { return null; } })();
+  if (stored === 'dark' || stored === 'light') {
+    root.setAttribute('data-theme', stored);
+    applyShot(stored === 'dark');
+  }
+
+  document.getElementById('themeToggle').addEventListener('click', () => {
+    const isDark = root.getAttribute('data-theme') === 'dark'
+      || (!root.hasAttribute('data-theme') && media.matches);
+    const next = isDark ? 'light' : 'dark';
+    root.setAttribute('data-theme', next);
+    applyShot(next === 'dark');
+    try { localStorage.setItem('void-theme', next); } catch { /* private mode */ }
+  });
+
+  const btn = document.getElementById('copyBtn');
+  btn.addEventListener('click', async () => {
+    try {
+      await navigator.clipboard.writeText(document.getElementById('installCmd').textContent.trim());
+      btn.textContent = 'Copied';
+      setTimeout(() => { btn.textContent = 'Copy'; }, 1600);
+    } catch {
+      btn.textContent = 'Press ⌘C';
+      setTimeout(() => { btn.textContent = 'Copy'; }, 1600);
+    }
+  });
+})();
+</script>
 </body>
 </html>
diff --git a/docs/shot-dark.png b/docs/shot-dark.png
new file mode 100644
index 0000000..a7e1a21
Binary files /dev/null and b/docs/shot-dark.png differ
diff --git a/docs/shot-light.png b/docs/shot-light.png
new file mode 100644
index 0000000..2a4375d
Binary files /dev/null and b/docs/shot-light.png differ