UX: Volume-boundary navigation, SMB native warning

- `resolveValidPath` stops at `volumeRoot` instead of walking above the mount boundary. Prevents trying to list `/Volumes` through SmbVolume (which fails with STATUS_OBJECT_NAME_NOT_FOUND).
- When the volume root is unreachable, `navigateToFallback` switches to the root volume (`~`) instead of trying to list `~` on the SMB share.
- Transfer dialog and progress dialog show a warning for yellow-state (os_mount) SMB volumes: "This share uses the system connection. Cancel and rollback may be delayed."

Author: vdavid

apps/desktop/src/lib/file-explorer/navigation/path-navigation.ts

@@ -62,17 +62,24 @@ export interface ResolveValidPathOptions {
   pathExistsFn?: (path: string) => Promise<boolean>
   /** Timeout per step in ms. Set to 0 to skip timeout wrapping. Defaults to 1000. */
   timeoutMs?: number
+  /**
+   * Volume root path (like "/Volumes/naspi"). When set, the walk-up stops at this
+   * boundary instead of continuing to "/" — prevents crossing into a different volume
+   * (which would fail for non-local volumes like SmbVolume).
+   */
+  volumeRoot?: string
 }
 
 /**
  * Resolves a path to a valid existing path by walking up the parent tree.
  * Each step has a timeout to prevent hanging on dead mounts (default 1s).
- * Fallback chain: parent tree → user home (~) → filesystem root (/).
+ * Fallback chain: parent tree (up to volumeRoot) → user home (~) → filesystem root (/).
  * Returns null if even the root doesn't exist (volume unmounted).
  */
 export async function resolveValidPath(targetPath: string, options?: ResolveValidPathOptions): Promise<string | null> {
   const checkFn = options?.pathExistsFn ?? pathExists
   const timeoutMs = options?.timeoutMs ?? 1000
+  const volumeRoot = options?.volumeRoot
 
   const check = (p: string): Promise<boolean> =>
     timeoutMs > 0 ? withTimeout(checkFn(p), timeoutMs, false) : checkFn(p)
@@ -82,6 +89,10 @@ export async function resolveValidPath(targetPath: string, options?: ResolveVali
     if (await check(path)) {
       return path
     }
+    // Don't walk above the volume root — that crosses into a different volume
+    if (volumeRoot && path === volumeRoot) {
+      break
+    }
     // Go to parent
     const lastSlash = path.lastIndexOf('/')
     path = lastSlash > 0 ? path.substring(0, lastSlash) : '/'

apps/desktop/src/lib/file-explorer/pane/DualPaneExplorer.svelte

@@ -619,8 +619,15 @@
 
             // Edge case: tab opened directly at this path, no history. Walk up to nearest valid parent.
             const parentPath = entry.path.substring(0, Math.max(1, entry.path.lastIndexOf('/')))
-            void resolveValidPath(parentPath).then((validPath) => {
+            const volumeRoot = volumes.find((v) => v.id === entry.volumeId)?.path
+            void resolveValidPath(parentPath, { volumeRoot }).then((validPath) => {
                 const target = validPath ?? '~'
+                const isOutsideVolume = entry.volumeId !== 'root' && (target === '~' || target === '/')
+                if (isOutsideVolume) {
+                    // Volume root unreachable — switch to root volume
+                    setPaneVolumeId(pane, 'root')
+                    saveAppStatus({ [paneKey(pane, 'volumeId')]: 'root' })
+                }
                 setPanePath(pane, target)
                 saveAppStatus({ [paneKey(pane, 'path')]: target })
                 saveTabsForPaneSide(pane)

apps/desktop/src/lib/file-explorer/pane/FilePane.svelte

@@ -708,6 +708,24 @@
         pendingLoadReject = null
     }
 
+    /**
+     * Navigates to a fallback path after the current path became invalid.
+     * If the resolved path is outside the current volume (~ or /), switches
+     * to the root volume instead of trying to list it on a non-root volume.
+     */
+    function navigateToFallback(validPath: string | null) {
+        const target = validPath ?? '~'
+        const isOutsideVolume = volumeId !== 'root' && (target === '~' || target === '/')
+        if (isOutsideVolume && onVolumeChange) {
+            // The volume root was unreachable — switch to the root volume
+            log.info('Volume root unreachable, switching to root volume with path: {target}', { target })
+            onVolumeChange('root', '/', target)
+        } else {
+            currentPath = target
+            void loadDirectory(target)
+        }
+    }
+
     async function loadDirectory(path: string, selectName?: string) {
         // Cancel any active rename when navigating
         rename.cancel()
@@ -826,10 +844,8 @@
                                 log.info('Listing error for deleted path, navigating to valid parent: {path}', {
                                     path: loadPath,
                                 })
-                                void resolveValidPath(loadPath).then((validPath) => {
-                                    const target = validPath ?? volumePath
-                                    currentPath = target
-                                    void loadDirectory(target)
+                                void resolveValidPath(loadPath, { volumeRoot: volumePath }).then((validPath) => {
+                                    navigateToFallback(validPath)
                                 })
                             } else {
                                 // Path exists but has another error (permission denied, etc.)
@@ -1496,11 +1512,8 @@
                 path: event.payload.path,
             })
 
-            void resolveValidPath(currentPath).then((validPath) => {
-                const target = validPath ?? volumePath
-                currentPath = target
-                // loadDirectory handles onPathChange via handleListingComplete
-                void loadDirectory(target)
+            void resolveValidPath(currentPath, { volumeRoot: volumePath }).then((validPath) => {
+                navigateToFallback(validPath)
             })
         })
 
@@ -1635,20 +1648,16 @@
                             'Directory {dir} no longer exists, navigating to nearest valid parent under {volume}',
                             { dir: currentPath, volume: volumePath },
                         )
-                        void resolveValidPath(currentPath).then((validPath) => {
-                            const target = validPath ?? volumePath
-                            currentPath = target
-                            void loadDirectory(target)
+                        void resolveValidPath(currentPath, { volumeRoot: volumePath }).then((validPath) => {
+                            navigateToFallback(validPath)
                         })
                     })
                 } else {
                     log.info('Directory {dir} no longer exists, navigating to nearest valid parent', {
                         dir: currentPath,
                     })
-                    void resolveValidPath(currentPath).then((validPath) => {
-                        const target = validPath ?? volumePath
-                        currentPath = target
-                        void loadDirectory(target)
+                    void resolveValidPath(currentPath, { volumeRoot: volumePath }).then((validPath) => {
+                        navigateToFallback(validPath)
                     })
                 }
             })

apps/desktop/src/lib/file-operations/transfer/TransferDialog.svelte

@@ -419,6 +419,13 @@
         {/if}
     </div>
 
+    {#if selectedVolume?.smbConnectionState === 'os_mount'}
+        <p class="smb-native-note">
+            This share uses the system connection. Cancellation may be delayed.
+            Use "Connect directly" in the volume picker for faster transfers and reliable cancel.
+        </p>
+    {/if}
+
     <!-- Path input -->
     <div class="path-input-group">
         <input
@@ -567,6 +574,15 @@
         color: var(--color-error);
     }
 
+    .smb-native-note {
+        margin: 0;
+        padding: var(--spacing-xs) var(--spacing-sm);
+        font-size: var(--font-size-xs);
+        color: var(--color-warning);
+        background: var(--color-warning-bg);
+        border-radius: var(--radius-sm);
+    }
+
     .button-row {
         display: flex;
         gap: var(--spacing-md);

apps/desktop/src/lib/file-operations/transfer/TransferProgressDialog.svelte

@@ -37,6 +37,7 @@
         SortOrder,
         ConflictResolution,
     } from '$lib/file-explorer/types'
+    import { getVolumes } from '$lib/stores/volume-store.svelte'
     import { formatDate } from '$lib/file-explorer/selection/selection-info-utils'
     import { formatFileSize } from '$lib/settings/reactive-settings.svelte'
     import { getSetting } from '$lib/settings'
@@ -123,6 +124,10 @@
     const isDeleteOrTrash = $derived(operationType === 'delete' || operationType === 'trash')
     const isCopy = $derived(operationType === 'copy')
     const isMove = $derived(operationType === 'move')
+    const volumes = $derived(getVolumes())
+    const destUsesNativeSmb = $derived(
+        volumes.find((v) => v.id === destVolumeId)?.smbConnectionState === 'os_mount',
+    )
 
     /** Whether this move involves a non-local volume (MTP, etc.) — backend handles all strategy. */
     const isVolumeMove = $derived(
@@ -947,6 +952,12 @@
             </div>
         {/if}
 
+        {#if destUsesNativeSmb}
+            <p class="smb-native-note">
+                This share uses the system connection. Cancel and rollback may be delayed.
+            </p>
+        {/if}
+
         <!-- Action buttons -->
         <div class="button-row">
             <Button variant="secondary" onclick={() => handleCancel(false)} disabled={isCancelling}>Cancel</Button>
@@ -1123,6 +1134,16 @@
     }
 
     /* Buttons */
+    .smb-native-note {
+        margin: 0 var(--spacing-xl);
+        padding: var(--spacing-xs) var(--spacing-sm);
+        font-size: var(--font-size-xs);
+        color: var(--color-warning);
+        background: var(--color-warning-bg);
+        border-radius: var(--radius-sm);
+        text-align: center;
+    }
+
     .button-row {
         display: flex;
         gap: var(--spacing-md);