Unify shell opacity and add native authentication and system controls

docs/configuration.md

@@ -134,6 +134,7 @@ these six visually distinct.
 | `theme.background.path` | string | bundled Ferese wallpaper | Wallpaper image path; an existing selection overrides the default |
 | `theme.background.mode` | `"fill"`, `"fit"` | `"fill"` | Crop or letterbox |
 | `theme.material.style` | `"solid"`, `"translucent"` | `"solid"` | Shell background material |
+| `theme.material.opacity` | number 0–1 | `0.78` | Shared shell background opacity for bars, menus, popovers, notifications and the sharing dialog. Text/icons stay opaque; 0 and 1 skip blur. Solid mode is always opaque |
 | `theme.material.blur_radius` | number ≥ 0 | `12` | Translucent backdrop blur, capped at 32; 0 disables |
 
 | `theme.colors` key | Default | Meaning |
@@ -172,10 +173,8 @@ The target follows [normal-text contrast guidance](https://www.w3.org/WAI/WCAG22
 | Section / key | Type | Default | Meaning |
 | --- | --- | --- | --- |
 | `theme.surface.bar.background` | color | `"#1C202EF2"` | Shell fallback background; compositor materials use `surface_base` |
-| `theme.surface.bar.opacity` | number 0–1 | omitted | Translucent bar background opacity, including blur; defaults to `0.78`. Text/icons stay opaque; 0 and 1 skip blur. Fallback retains background alpha |
 | `theme.surface.bar.text_primary` | color | `"#F0F3FA"` | Bar text/icons |
 | `theme.surface.bar.text_muted` | color | `"#AAB4C7"` | Inactive bar foreground |
-| `theme.surface.popover.opacity` | number 0–1 | `0.96` | Shell popover fill alpha |
 | `theme.shadow.soft.offset_y` | number | `4` | Window shadow vertical offset |
 | `theme.shadow.soft.blur` | number ≥ 0 | `18` | Window shadow softness |
 | `theme.shadow.soft.opacity` | number 0–1 | `0.20` | Window shadow strength |

docs/installation.md

@@ -13,7 +13,7 @@ desktop instead of direct access to the graphics device.
 
 Build with **Rust 1.95 or newer**, a C/C++ toolchain, CMake, pkg-config, and the
 native development libraries below. The installer builds Ferese, its shell,
-Settings, command-line tools, locker, and ScreenCast portal together. It does not install system
+Settings, command-line tools, locker, polkit agent, and ScreenCast portal together. It does not install system
 packages or enable services for you.
 
 ### Fedora
@@ -23,7 +23,8 @@ sudo dnf install git curl gcc gcc-c++ make cmake pkgconf-pkg-config \
   wayland-devel libxkbcommon-devel libinput-devel systemd-devel libseat-devel \
   mesa-libgbm-devel mesa-libEGL-devel libdrm-devel fontconfig-devel \
   freetype-devel expat-devel dbus-daemon dbus-tools desktop-file-utils foot pam \
-  clang clang-devel pipewire-devel pipewire wireplumber xdg-desktop-portal xdg-desktop-portal-gtk \
+  clang clang-devel pipewire-devel pipewire wireplumber polkit polkit-libs \
+  xdg-desktop-portal xdg-desktop-portal-gtk \
   gstreamer1-devel gstreamer1-plugins-base gstreamer1-plugins-good pipewire-gstreamer
 ```
 
@@ -32,7 +33,7 @@ sudo dnf install git curl gcc gcc-c++ make cmake pkgconf-pkg-config \
 ```sh
 sudo pacman -S --needed base-devel git curl cmake pkgconf wayland libxkbcommon \
   libinput systemd seatd mesa libdrm fontconfig freetype2 expat dbus \
-  desktop-file-utils foot pam clang pipewire libpipewire wireplumber \
+  desktop-file-utils foot pam clang pipewire libpipewire wireplumber polkit \
   xdg-desktop-portal xdg-desktop-portal-gtk \
   gstreamer gst-plugins-base gst-plugins-good gst-plugin-pipewire
 ```
@@ -45,7 +46,7 @@ sudo apt install build-essential git curl cmake pkg-config libwayland-dev \
   libxkbcommon-dev libinput-dev libudev-dev libseat-dev libgbm-dev libegl-dev \
   libdrm-dev libfontconfig1-dev libfreetype-dev libexpat1-dev dbus-bin \
   dbus-user-session desktop-file-utils foot libpam0g clang libclang-dev \
-  libpipewire-0.3-dev libspa-0.2-dev pipewire wireplumber \
+  libpipewire-0.3-dev libspa-0.2-dev pipewire wireplumber polkitd libpolkit-agent-1-0 \
   xdg-desktop-portal xdg-desktop-portal-gtk \
   libgstreamer1.0-dev gstreamer1.0-pipewire gstreamer1.0-plugins-base \
   gstreamer1.0-plugins-good
@@ -94,7 +95,7 @@ The installer adds:
 - Versioned releases under `/usr/local/lib/ferese/releases/`, with `current` and
   `previous` links for upgrades and rollback.
 - Commands under `/usr/local/bin/`, including `ferese-session`, `ferese-settings`,
-  `feresectl`, `ferese-lock`, `ferese-screenshot`,
+  `feresectl`, `ferese-lock`, `ferese-polkit-agent`, `ferese-screenshot`, and
   `xdg-desktop-portal-ferese`, and `ferese-record`.
 - D-Bus activation and Ferese-specific ScreenCast portal registration.
 - A Wayland session entry at `/usr/share/wayland-sessions/ferese.desktop`.
@@ -105,6 +106,12 @@ The installer adds:
 Your existing configuration and other desktop sessions are preserved. The
 installer does not change your default session or login manager.
 
+Ferese starts its own polkit authentication agent with the shell. Password
+prompts follow the configured font, accent, surface color, and corner radius.
+Authentication still uses polkit's system helper and policy. The agent starts
+only inside a Ferese session; logging into another desktop leaves its agent
+unchanged. Restart your Ferese session after upgrading to use the new prompt.
+
 ### Initial configuration
 
 Ferese has built-in defaults. To start from the example without replacing an
@@ -255,7 +262,7 @@ Installer options:
 
 `--dry-run` prints the planned commands. `--offline` requires dependencies to be
 cached already. `--skip-build` installs the binaries already in `target/release/`;
-use it only after building all session components from the intended revision.
+use it only after building all six components from the intended revision.
 Run `./scripts/install.sh --help` for all options.
 
 ## Logout and recovery

docs/screen-sharing.md

@@ -29,7 +29,7 @@ opens a display picker. Select a display and press **Share**. Nothing is selecte
 by default. Applications that request multiple displays can share up to four.
 The picker uses your Ferese theme colors, font, and shell corner radius. Its
 background follows `theme.material.style`: opaque in solid mode, or translucent
-using `theme.surface.popover.opacity`. Text and icons remain opaque.
+using the shared **Appearance → Shell opacity** setting (`theme.material.opacity`). Text and icons remain opaque.
 
 Other applications keep a **screen sharing** window with a **Stop sharing** button.
 Ferese’s built-in recorder uses the top-bar stop control instead, leaving your