Shares directory selection and validation across workspace services. It opens configured roots, excludes private Host paths and checks a selected workspace against those roots. Root, query and validate are the main entry points. A selected path is usable only within the authority supplied by the owning service.
Child queries enumerate the selected directory before sorting and returning pages of up to 32 children with a 48 KiB byte target, allowing a complete first child to advance. Ordinary files do not prevent browsing child directories. Continue with the returned after cursor; each query revalidates the published root and selected directory identity.
Selections have no separate directory-depth limit. Paths must still satisfy the Host's path representation and filesystem checks. ACP follows returned selections toward the requested canonical path, ignoring aliases that do not advance toward it.
The complete configured root set is returned without a separate page-size admission ceiling. Component and canonical-path validation preserve the original directory authority without imposing additional pathname byte limits.