dsh-sidebar-row-menu 1.3.5 → 1.4.1

package/CHANGELOG.md

@@ -0,0 +1,84 @@
+# Changelog
+
+## 1.4.1 — 2026-11-03
+
+### Added
+
+- **Allow deleting unarchived sessions** (off by default): a new switch in
+  Settings → "Row menu" extends the existing "Delete session permanently" entry to
+  unarchived session rows. The confirmation dialog, host route and transcript
+  cleanup are unchanged; without the switch the entry stays archived-only.
+
+### 中文摘要
+
+- 设置 →「行菜单」新增「允许删除未归档会话」开关（默认关闭）。开启后，未归档会话的
+  右键菜单也会出现「永久删除会话」，确认后按原有宿主路由删除日志；关闭时维持仅已归档
+  会话可见。
+
+## 1.4.0 — 2026-11-03
+
+### Added
+
+- **Open with** submenu on both workspace and session row menus. The app list comes
+  from DSH's built-in `open-in-app` endpoints (`/open-in-app/apps`,
+  `/open-in-app/open`, `/open-in-app/icon/<id>`), so it matches the apps DSH itself
+  offers. Hovering the row expands the submenu.
+- **Pinned open-with apps**: a pinned app is shown directly at the top level (for
+  example "Open with Visual Studio Code"). Until configured, the first detected
+  editor is pinned automatically, otherwise the first catalog app. Pinning and
+  per-app visibility live in the plugin settings.
+- **Delete session**: permanently deletes one archived session and its transcript.
+  The entry only appears on archived sessions.
+- **Delete all archived sessions**: permanently deletes every archived session and
+  its transcript, again only from an archived row.
+- **Settings section** ("Row menu") with switches for open with, delete session and
+  delete archived sessions, plus per-app visibility and pinning. Settings are stored
+  in `localStorage` and apply immediately.
+- **Host route** `POST /dsh-sidebar-row-menu/session/delete` with the same loopback
+  fence as the open route; it stops a running session, detaches it, removes the
+  transcript directory after verifying its name, then clears archive/pin state and
+  emits `api-session/removed`.
+- **Coexistence detection** with `dsh-session-menu`: when it is installed and owns a
+  matching entry (`session-menu-open-with`, `session-menu-delete`,
+  `session-menu-delete-archived`), the duplicate entry from this plugin is hidden and
+  the settings row explains the conflict.
+
+### Changed
+
+- The workspace row menu is now drawn with `MenuSurface` + `MenuItemButton`, sharing
+  the same open-with submenu, app catalog and pinning as the session menu. The old
+  flat "Open in VS Code" / "Open in Explorer" items were replaced.
+- Session row entries are now "pinned app" + "Open with" + archived-session deletion
+  instead of the flat VS Code / Explorer items.
+- Group separators are back in both menus.
+- Custom submenu panels use `role="group"` so meow-memory's `[role="menu"]` injection
+  does not add a fake "memory participation" row inside them.
+
+### Notes
+
+- Permanent deletion is irreversible. It only applies to archived sessions, does not
+  cascade to forked child sessions, and there is no recycle bin.
+- The open-with feature needs DSH with the built-in `open-in-app` routes; on hosts
+  without them the submenu shows an "apps unavailable" hint.
+
+### 中文摘要
+
+- 工作区 / 会话右键菜单新增「打开方式」二级菜单（复用 DSH 内置 `open-in-app` 应用列表），
+  常用应用可置顶到一级菜单，默认自动置顶第一个编辑器。
+- 已归档会话新增「永久删除会话」和「删除所有已归档会话」，由本插件宿主路由完成，
+  不级联删除 fork 子会话，无回收站。
+- 设置 →「行菜单」新增各项开关、应用逐个显隐与置顶。
+- 与 `dsh-session-menu` 共存时自动隐藏重复条目，并在设置里说明冲突。
+- 工作区菜单改为 `MenuSurface` + `MenuItemButton` 自绘以支持子菜单，恢复分组分隔线。
+
+## 1.3.5
+
+- Release 1.3.5. See the GitHub release notes for details.
+
+## 1.3.4
+
+- Use the official toast for copy feedback and remove the redundant session-link item.
+
+## 1.3.3
+
+- Prime the row action pointer so menu extensions render in the first frame.

package/NOTICE.en.md

@@ -17,8 +17,8 @@ adapted portions; all remaining code is copyright its contributors.
     detection, `vscode://file` encoding (now split across
     `lib/host/security.js`, `lib/host/launch.js`, `lib/host/paths.js`,
     `lib/host/route.js`);
-  - client: fiber lookup, official `Menu` mounting, toast, capture-phase
-    `contextmenu` installation.
+  - client: fiber lookup, official `Menu` mounting, `MenuSurface`/`MenuItemButton`
+    drawn rows, toast, capture-phase `contextmenu` installation.
 
 ## dsh-workspace-menu
 

package/NOTICE.md

@@ -15,7 +15,8 @@
   - 宿主：loopback 围栏、JSON 请求体读取、detached spawn、VS Code 启动器探测、
     `vscode://file` 编码（现拆分在 `lib/host/security.js`、`lib/host/launch.js`、
     `lib/host/paths.js`、`lib/host/route.js`）；
-  - 客户端：fiber 解析、官方 `Menu` 挂载、toast、`contextmenu` 捕获安装方式。
+  - 客户端：fiber 解析、官方 `Menu` 挂载、`MenuSurface`/`MenuItemButton` 自绘行、
+    toast、`contextmenu` 捕获安装方式。
 
 ## dsh-workspace-menu
 

package/README.en.md

@@ -14,15 +14,16 @@ Right-click menus for the sidebar of [DeepSeek Harness](https://github.com/deeps
 - **Session rows nested under a workspace** — right-click opens that row's native
   "…" menu at the pointer, with the plugin's own entries appended.
 
-Menus are rendered with DSH's official `Menu` component, so visuals, positioning,
-keyboard navigation and click-outside dismissal match the built-in "…" menus.
-The workspace menu is composed by this plugin. Session menu content comes from the
+The workspace menu is drawn with DSH's official `MenuSurface` + `MenuItemButton`
+(the official `Menu` cannot nest submenus), so rows, icons, danger color and group
+separators reuse the built-in look, and keyboard navigation plus click-outside
+dismissal match the native menus. Session menu content comes from the
 `sidebar.workspaces.session.menu.item` slot — built-in actions and other plugins'
 actions are all there. This plugin only appends its own entries; it does not copy
 or hardcode any built-in action.
 
-> The "…" button menu stays exactly as DSH ships it. The plugin's three entries
-> appear only when the menu is opened by right-click. A right-click menu does not
+> The "…" button menu stays exactly as DSH ships it. The plugin's entries appear
+> only when the menu is opened by right-click. A right-click menu does not
 > close when the pointer leaves it (same as the workspace menu); it closes only on
 > an outside click, an item selection, or Escape.
 
@@ -34,8 +35,8 @@ or hardcode any built-in action.
 | --- | --- |
 | New session | Expands the workspace and starts a session (same as the row's `+`) |
 | Rename | Opens the official "Rename workspace" dialog |
-| Open in VS Code | Host opens the workspace directory in a new window |
-| Open in Explorer | Host opens the system file manager |
+| Pinned open-with app | A pinned app shows directly at the top level (e.g. "Open with Visual Studio Code") and opens the workspace directory |
+| Open with | A submenu of external apps (editors, terminals, file managers) sharing the session menu's catalog, pinning and toggles; hover expands it |
 | Copy workspace path | Copies the directory path |
 | Open in new tab | Only when `dsh-project-tabs` (exposing `openWorkspaceInTab`) is installed |
 | Delete workspace | Opens the official delete confirmation |
@@ -48,22 +49,58 @@ Right-click does not build a second menu; it opens the row's own "…" menu:
 | --- | --- |
 | DSH built-ins | Rename, Fork session, Pin / Unpin, Archive / Unarchive, Copy Session ID |
 | Other plugins | Whatever they register into `sidebar.workspaces.session.menu.item` |
-| This plugin | Open in VS Code, Open in Explorer |
+| This plugin | Pinned open-with apps (top level), Open with (submenu), Delete session / Delete all archived sessions (archived rows by default; unarchived rows can be opted in) |
 
-The two entries added by this plugin:
+The entries added by this plugin:
 
 | Item | Behavior |
 | --- | --- |
-| Open in VS Code | Uses the session's `cwd`, falling back to its workspace directory |
-| Open in Explorer | Same as above |
-
-These two are **right-click only**: they do not mount when the "…" button opens
+| Open with | A submenu of external apps provided by the host (editors, terminals, file managers) opening the session's `cwd`; falls back to its workspace directory. Hovering the row expands the submenu |
+| Pinned open-with app | A pinned app shows directly at the top level (e.g. "Open with Visual Studio Code"). Until configured, the first detected editor is pinned automatically, otherwise the first catalog app |
+| Delete session | On archived sessions by default; permanently deletes that one session and its transcript after confirmation. Enable "Allow deleting unarchived sessions" in Settings to show it on unarchived rows too |
+| Delete all archived sessions | Only on archived sessions; permanently deletes every archived session and its transcript after confirmation |
+
+The "Open with" catalog comes from DSH's built-in `open-in-app` routes, so it is the
+same source DSH itself uses; labels and icons are rendered by this plugin, each app
+can be hidden in Settings, and frequently used apps can be pinned to the top level.
+Both delete entries are served by this plugin's own host route. They leave
+unarchived sessions alone by default; the opt-in switch extends the single-session
+entry to them. Deletion never cascades into forked child sessions.
+
+These entries are **right-click only**: they do not mount when the "…" button opens
 the menu. A short-lived window flag is set before opening; outside that window the
 entries render `null`.
 
 Blank draft sessions have no native "…" menu and are left alone. Rows that are
 neither a workspace nor a session (e.g. "Show more") are not intercepted.
 
+### Settings
+
+Settings → "Row menu" toggles every new entry:
+
+| Switch | Effect |
+| --- | --- |
+| Open with | Hides "Open with" and every pinned app from workspace and session menus |
+| Open with → applications | Hides individual applications; the adjacent "Pin" button promotes an app to the top level |
+| Delete session | Hides the single-session delete entry in session menus |
+| Allow deleting unarchived sessions | Off by default; also shows "Delete session permanently" on unarchived rows. Requires the previous switch |
+| Delete all archived sessions | Hides the bulk-delete entry |
+
+Switches live in browser `localStorage` (`dsh.sidebar-row-menu.items.v1`,
+`dsh.sidebar-row-menu.open-with.v1` and `dsh.sidebar-row-menu.open-with.pinned.v1`)
+and apply immediately. Before the first explicit pin, the plugin derives one: the
+first detected editor (usually VS Code), or the first catalog app when no editor
+exists.
+
+### Coexistence with dsh-session-menu
+
+When [`dsh-session-menu`](https://github.com/big-head-pigeon/dsh-session-menu) is
+installed, this plugin looks for its `session-menu-open-with` /
+`session-menu-delete` / `session-menu-delete-archived` entries in the session menu slot. If present, the
+matching entries here are hidden and the settings switches are disabled with a
+"provided by dsh-session-menu" hint. No configuration of the other plugin is read
+or changed.
+
 ## Install
 
 Requirements:
@@ -89,13 +126,13 @@ resolve it directly by name:
 Pin a version by appending it to the name:
 
 ```
-dsh-sidebar-row-menu@1.3.5
+dsh-sidebar-row-menu@1.4.1
 ```
 
 Equivalent command line:
 
 ```powershell
-dsh plugin --profile desktop add dsh-sidebar-row-menu@1.3.5
+dsh plugin --profile desktop add dsh-sidebar-row-menu@1.4.1
 ```
 
 ### Install from GitHub
@@ -115,13 +152,13 @@ repository is already runnable, so **no local build is required**.
 That URL tracks the latest commit on `main`. Pin a tag for a stable version:
 
 ```
-https://github.com/TLEWA/dsh-sidebar-row-menu#v1.3.5
+https://github.com/TLEWA/dsh-sidebar-row-menu#v1.4.1
 ```
 
 Or install the tarball built by Actions directly, without Git:
 
 ```
-https://github.com/TLEWA/dsh-sidebar-row-menu/releases/download/v1.3.5/dsh-sidebar-row-menu-1.3.5.tgz
+https://github.com/TLEWA/dsh-sidebar-row-menu/releases/download/v1.4.1/dsh-sidebar-row-menu-1.4.1.tgz
 ```
 
 Equivalent command line:
@@ -253,7 +290,8 @@ lib/index.js          host entry: name / inject / apply plus re-exported helpers
 lib/host/security.js  loopback request fence
 lib/host/paths.js     path validation, vscode://file encoding
 lib/host/launch.js    VS Code / Explorer launching
-lib/host/route.js     /open route and HTTP status codes
+lib/host/route.js     /open and /session/delete routes, HTTP status codes
+lib/host/session-delete.js transcript verification and deletion (detach / rm / re-check)
 lib/client.js         browser half: fiber lookup, slot registration, menu mount
 cordis.patch.yml      bundle patch inserting the plugin into the profile tree
 scripts/install.ps1   pnpm-free install / uninstall
@@ -287,7 +325,7 @@ party cannot re-layout someone else's slot.
 
 Therefore a session right-click does exactly one thing: find the `Menu` in the
 row's fiber subtree and trigger its anchor (the ellipsis button). The same slot
-content opens. The plugin's own three actions are registered through
+content opens. The plugin's own actions are registered through
 `ctx.slots.inject` + `ctx.slots.register`, so:
 
 - they do not depend on built-in fork/pin entries existing;
@@ -295,6 +333,9 @@ content opens. The plugin's own three actions are registered through
 - no built-in action is copied or hardcoded.
 
 Workspace rows have no such slot, so their menu is still composed by this plugin.
+The official `Menu` accepts only a flat `items` list and cannot express submenus, so
+the workspace menu is drawn with `MenuSurface` + `MenuItemButton`: rows, icons,
+danger styling and separators reuse the official controls.
 
 ### Why the session menu appears at the pointer
 
@@ -307,15 +348,15 @@ position.
 
 The "…" menu and the right-click menu share one `Menu` instance and one slot
 content; the only difference is the `rightClickMenuUntil` window — the plugin's
-three entries mount only inside it, and the window is cleared when the menu closes.
+entries mount only inside it, and the window is cleared when the menu closes.
 
 ### Why the workspace menu is mounted imperatively
 
 A contextmenu event is not part of React's render flow. The workspace menu creates
-a `0×0`, `z-index:2147483647` host on demand, `createRoot`s the official `Menu`
-(`portal` plus an explicit `getAnchorRect` pinned to the pointer), and unmounts and
-removes the host on close. The session menu mounts nothing new; it only opens the
-row's existing menu.
+a `0×0`, `z-index:2147483647` host on demand and `createRoot`s a self-drawn panel;
+after mount it measures once and clamps its corner into the viewport, then unmounts
+and removes the host on close. The session menu mounts nothing new; it only opens
+the row's existing menu.
 
 ### Host route
 
@@ -332,6 +373,23 @@ row's existing menu.
 - spawn uses `detached + stdio:'ignore'` and deliberately does **not** set
   `windowsHide` (otherwise Explorer windows would be hidden).
 
+`POST /dsh-sidebar-row-menu/session/delete`, body `{ sessionIds: string[] }`.
+
+- same loopback / POST / exact path / 64 KB body checks; `sessionIds` must be a
+  non-empty array of non-empty strings, at most 500;
+- sequential deletion: cancel a running session, detach a live one, then locate the
+  transcript directory through `sessionPersistence.locate()`; the directory's
+  basename must equal the session id or deletion is refused (no parent-directory
+  misfires);
+- after deleting, the directory is re-checked three times to ensure it did not come
+  back, then the `workspaceRegistry` archive/pin records are cleared and
+  `api-session/removed` is emitted;
+- partial failures return `200` + `{ ok:false, deleted, failed, error }`; the dialog
+  stays open and reports the counts.
+
+"Open with" does not touch this plugin's host: it calls DSH's built-in
+`open-in-app/apps`, `open-in-app/open` and `open-in-app/icon/<id>` directly.
+
 ## Compatibility
 
 Built against DSH client `0.2.1-rc.5` (`ProjectRowItem`, `SessionNodeItem`,
@@ -347,16 +405,20 @@ Built against DSH client `0.2.1-rc.5` (`ProjectRowItem`, `SessionNodeItem`,
 - Session right-click depends on the row's `Menu` staying in the fiber subtree. If
   it is not found, the plugin clicks the row-actions ellipsis button; failing that
   it gives up — it never builds a competing menu and never triggers row open.
-- Session "delete" is not offered: DSH officially supports archive (recoverable).
-  Deleting records by force tends to leave orphan data. Archive/unarchive is
-  handled by the built-in menu entry.
-- The VS Code / Explorer directory for a session comes from `sessions.list`'s
-  `cwd`, falling back to the workspace directory. Ungrouped sessions may have no
+- Permanent deletion is offered for **archived** sessions by default; enable
+  "Allow deleting unarchived sessions" to delete unarchived sessions from their
+  right-click menu as well. Deletion does not cascade into forked child sessions —
+  delete those separately when needed.
+- Deletion works directly on the transcript directory; the host has no trash bin.
+  The confirmation dialog states that it cannot be undone.
+- The open-with directory for a session comes from `sessions.list`'s `cwd`,
+  falling back to the workspace directory. Ungrouped sessions may have no
   directory; in that case a "no directory available" toast is shown.
 
 ## License and notices
 
 - Code: [MIT](LICENSE).
+- Changelog: [CHANGELOG.md](CHANGELOG.md).
 - Third-party code and full license texts: [NOTICE.md](NOTICE.md) · [English](NOTICE.en.md).
 - AI usage and code provenance: [AI_USAGE.md](AI_USAGE.md) · [English](AI_USAGE.en.md).
 

package/README.md

@@ -12,12 +12,13 @@
 - **工作区行**：右键弹出菜单（复刻 `dsh-sidebar-context-menu` 的能力）；
 - **工作区下层的会话行**：右键在指针处展开该行内置的「…」菜单，并追加本插件的条目。
 
-菜单使用 DSH 官方的 `Menu` 组件渲染，视觉、定位、键盘导航和“点外部关闭”都与内置
-「…」菜单一致。工作区菜单由本插件组项；会话菜单的内容来自
+工作区菜单用 DSH 官方的 `MenuSurface` + `MenuItemButton` 自绘（官方 `Menu` 的条目不支持
+子菜单），视觉、行高、图标、危险色与分组分隔线都复用官方控件，键盘导航和“点外部关闭”
+与内置菜单一致。会话菜单的内容来自
 `sidebar.workspaces.session.menu.item` slot —— 内置动作和其他插件的动作都在里面，
 本插件只追加自己的条目，不复制、不硬编码任何内置动作。
 
-> 点行尾「…」按钮看到的菜单保持 DSH 原样；本插件自己的三个条目只在右键展开时出现。
+> 点行尾「…」按钮看到的菜单保持 DSH 原样；本插件自己的条目只在右键展开时出现。
 > 右键展开的菜单不会因为鼠标移出而关闭（与工作区右键一致），只有点击外部、选中条目或按 Esc 才关闭。
 
 ## 功能
@@ -28,8 +29,8 @@
 | --- | --- |
 | 新会话 | 展开该工作区并新建会话（等价于行尾 `+`） |
 | 重命名 | 打开官方“重命名工作区”对话框 |
-| 使用 VS Code 打开 | 宿主在新窗口打开该工作区目录 |
-| 在资源管理器中打开 | 宿主打开系统文件管理器 |
+| 置顶的打开方式 | 被置顶的应用直接显示在一级菜单（例如「用 Visual Studio Code 打开」），点击后用该应用打开工作区目录 |
+| 打开方式 | 二级菜单列出宿主提供的外部应用（编辑器、终端、文件管理器）；与会话菜单共用同一套应用列表、置顶与开关设置，鼠标悬浮自动展开 |
 | 复制工作区路径 | 复制目录路径到剪贴板 |
 | 在新标签中打开 | 仅在装有 `dsh-project-tabs`（暴露 `openWorkspaceInTab`）时出现 |
 | 删除工作区 | 打开官方删除确认对话框 |
@@ -42,21 +43,52 @@
 | --- | --- |
 | DSH 内置 | 重命名、分叉会话、置顶 / 取消置顶、归档 / 取消归档、复制 Session ID |
 | 其他插件 | 它们注册进 `sidebar.workspaces.session.menu.item` 的条目 |
-| 本插件 | 使用 VS Code 打开、在资源管理器中打开 |
+| 本插件 | 置顶的打开方式（一级）、打开方式（二级菜单）、永久删除会话 / 删除所有已归档会话（默认仅已归档会话显示；可在设置里允许删除未归档会话） |
 
-本插件追加的两个条目：
+本插件追加的条目：
 
 | 菜单项 | 行为 |
 | --- | --- |
-| 使用 VS Code 打开 | 优先用会话自己的 `cwd`，取不到则用所属工作区目录 |
-| 在资源管理器中打开 | 同上 |
+| 打开方式 | 二级菜单列出宿主提供的外部应用（编辑器、终端、文件管理器），用会话自己的 `cwd` 打开；取不到时退回所属工作区目录 |
+| 置顶的打开方式 | 被置顶的应用直接显示在一级菜单（例如「用 Visual Studio Code 打开」）；未配置时自动置顶检测到的第一个编辑器，没有编辑器则置顶第一个应用。鼠标悬浮到「打开方式」会自动展开二级菜单 |
+| 永久删除会话 | 默认只在已归档会话的右键菜单里出现；确认后永久删除这一个会话及其日志，不可恢复。在设置里开启「允许删除未归档会话」后，未归档会话也会出现这一项 |
+| 删除所有已归档会话 | 只在已归档会话的右键菜单里出现；确认后永久删除全部已归档会话及其日志，不可恢复 |
 
-这两条是**右键专属**：点行尾「…」按钮时它们不挂载。实现上使用一个只在右键展开瞬间
+「打开方式」的应用列表来自 DSH 内置的 `open-in-app` 路由，与 DSH 自己的「打开方式」
+能力同源；应用名和图标都由本插件展示，可在设置里逐个隐藏，也可以把常用应用置顶到
+一级菜单。两个删除入口由本插件自己的宿主路由完成，默认不会删除未归档会话；
+开启「允许删除未归档会话」后才会对普通会话开放。删除不会级联删除 fork 子会话。
+
+这些条目都是**右键专属**：点行尾「…」按钮时它们不挂载。实现上使用一个只在右键展开瞬间
 有效的窗口标记，窗口外的渲染直接返回 `null`。
 
 草稿会话（还没有任何消息的空白会话）没有内置「…」菜单，本插件同样不接管。
 非工作区 / 非会话的侧边栏行（如“显示更多”）也不会被拦截。
 
+### 设置
+
+设置 →「行菜单」里可以开关本插件的每个新增项：
+
+| 开关 | 作用 |
+| --- | --- |
+| 打开方式 | 关闭后工作区 / 会话菜单里不再出现「打开方式」和置顶应用 |
+| 打开方式 → 应用 | 逐个隐藏应用；旁边的「置顶」按钮把应用移到一级菜单 |
+| 永久删除会话 | 关闭后会话菜单里不再出现单条删除入口 |
+| 允许删除未归档会话 | 默认关闭；开启后未归档会话的右键菜单也会出现「永久删除会话」，需先开启上一项 |
+| 删除所有已归档会话 | 关闭后不再出现批量删除入口 |
+
+开关存在浏览器 `localStorage`（`dsh.sidebar-row-menu.items.v1`、
+`dsh.sidebar-row-menu.open-with.v1` 与 `dsh.sidebar-row-menu.open-with.pinned.v1`），
+改完立即生效，不需要重启。置顶项在第一次配置前是自动推导的：优先置顶检测到的第一个
+编辑器（通常是 VS Code），没有编辑器时置顶应用列表里的第一个。
+
+### 与 dsh-session-menu 共存
+
+同时安装 [`dsh-session-menu`](https://github.com/big-head-pigeon/dsh-session-menu) 时，
+本插件会在会话菜单 slot 里检测对方注册的 `session-menu-open-with` /
+`session-menu-delete` / `session-menu-delete-archived`，命中后自动隐藏自己的同名条目，设置页对应开关置灰并
+提示“已由 dsh-session-menu 提供”。不会改动对方的配置，也不要求对方做任何适配。
+
 ## 安装
 
 要求：
@@ -81,13 +113,13 @@
 要固定版本，在包名后加版本号：
 
 ```
-dsh-sidebar-row-menu@1.3.5
+dsh-sidebar-row-menu@1.4.1
 ```
 
 命令行等价写法：
 
 ```powershell
-dsh plugin --profile desktop add dsh-sidebar-row-menu@1.3.5
+dsh plugin --profile desktop add dsh-sidebar-row-menu@1.4.1
 ```
 
 ### 从 GitHub 安装
@@ -107,13 +139,13 @@ DSH 桌面端通过 pnpm 安装 Git 依赖；本仓库的 `lib/` 已是可直接
 该地址跟随 `main` 的最新提交。要固定版本，在地址后加标签：
 
 ```
-https://github.com/TLEWA/dsh-sidebar-row-menu#v1.3.5
+https://github.com/TLEWA/dsh-sidebar-row-menu#v1.4.1
 ```
 
 也可以直接安装 Actions 打出的压缩包（不经过 Git）：
 
 ```
-https://github.com/TLEWA/dsh-sidebar-row-menu/releases/download/v1.3.5/dsh-sidebar-row-menu-1.3.5.tgz
+https://github.com/TLEWA/dsh-sidebar-row-menu/releases/download/v1.4.1/dsh-sidebar-row-menu-1.4.1.tgz
 ```
 
 命令行等价写法：
@@ -228,7 +260,8 @@ lib/index.js          宿主入口：name / inject / apply，再导出可测试
 lib/host/security.js  loopback 请求围栏
 lib/host/paths.js     路径校验、vscode://file 编码
 lib/host/launch.js    VS Code / 资源管理器启动
-lib/host/route.js     /open 路由与 HTTP 状态码
+lib/host/route.js     /open 与 /session/delete 路由、HTTP 状态码
+lib/host/session-delete.js 会话日志目录的校验与删除（detach / rm / 复查）
 lib/client.js         客户端半边：fiber 解析、slot 注册、菜单挂载
 cordis.patch.yml      bundle patch：把插件插进 profile 插件树
 scripts/install.ps1   无 pnpm 的安装 / 卸载脚本
@@ -257,14 +290,16 @@ test/*.test.mjs       node:test
 每个条目只能渲染自己声明过的子 slot，第三方无法直接把手伸进别人的 slot 重新排版。
 
 因此会话行右键只做一件事：在行组件的 fiber 子树里找到那个 `Menu`，触发它 anchor
-（省略号按钮）的点击，展开的自然是同一份 slot 内容。本插件自己的三个动作也通过
+（省略号按钮）的点击，展开的自然是同一份 slot 内容。本插件自己的动作也通过
 `ctx.slots.inject` + `ctx.slots.register` 注册进去，所以：
 
 - 不依赖「分叉」「置顶」这些内置条目是否存在；
 - 内置或别的插件以后新增条目，右键菜单自动出现；
 - 不复制、不硬编码任何内置动作。
 
-工作区行没有这样的 slot，所以工作区菜单仍由本插件自己组项。
+工作区行没有这样的 slot，所以工作区菜单仍由本插件自己组项。官方 `Menu` 的
+`items` 只支持单层条目，无法表达子菜单，因此工作区菜单用 `MenuSurface` +
+`MenuItemButton` 自绘：行、图标、危险色和分隔线都复用官方控件，交互与官方菜单一致。
 
 ### 为什么会话菜单能贴着鼠标
 
@@ -274,13 +309,13 @@ test/*.test.mjs       node:test
 方法，不影响按钮菜单的默认位置。
 
 「…」按钮菜单与右键菜单共用同一个 `Menu` 实例和同一份 slot 内容，区别只在
-`rightClickMenuUntil` 窗口：本插件三条只在窗口内挂载，窗口随菜单关闭一并清零。
+`rightClickMenuUntil` 窗口：本插件条目只在窗口内挂载，窗口随菜单关闭一并清零。
 
 ### 为什么菜单是命令式挂载
 
 右键事件不是 React 渲染流的一部分。工作区菜单按需创建一个 `0×0`、
-`z-index:2147483647` 的容器，`createRoot` 渲染官方 `Menu`（`portal` + 显式
-`getAnchorRect` 钉在鼠标位置），关闭时 `unmount()` 并移除容器。会话菜单不挂载任何
+`z-index:2147483647` 的容器，`createRoot` 渲染自绘面板；面板挂载后量一次尺寸，
+再把左上角夹进视口，避免贴边时被裁掉。关闭时 `unmount()` 并移除容器。会话菜单不挂载任何
 新容器，只是打开行内已有的官方菜单。
 
 ### 宿主路由
@@ -296,6 +331,19 @@ test/*.test.mjs       node:test
   都找不到时退回 `rundll32` 打开 `vscode://file/...`；
 - spawn 用 `detached + stdio:'ignore'`，不设 `windowsHide`（否则资源管理器窗口会被隐藏）。
 
+`POST /dsh-sidebar-row-menu/session/delete`，body `{ sessionIds: string[] }`。
+
+- 同样的 loopback / POST / 路径 / 64 KB body 校验；`sessionIds` 必须是非空字符串数组，
+  最多 500 个；
+- 串行删除：先取消运行中的会话、detach 活会话，再按 `sessionPersistence.locate()` 找到
+  会话目录；目录 basename 必须与会话 id 完全一致，否则拒绝删除（防误删父目录）；
+- 删除后 3 次复查目录没有复活，再清理 `workspaceRegistry` 的归档 / 置顶记录并发出
+  `api-session/removed`；
+- 部分失败返回 `200` + `{ ok:false, deleted, failed, error }`，前端保留对话框并显示计数。
+
+「打开方式」不经过本插件宿主：直接调用 DSH 内置的 `open-in-app/apps`、
+`open-in-app/open`、`open-in-app/icon/<id>`。
+
 ## 兼容性
 
 按 DSH 客户端 `0.2.1-rc.5` 的 `ProjectRowItem` / `SessionNodeItem` / `Menu` 实现。
@@ -309,14 +357,16 @@ DSH 升级若改动行组件或菜单定位实现：
 - 依赖 DSH 内置行组件的 props 形状。DSH 升级若改了这两个组件，右键会静默不弹。
 - 会话右键依赖行内 `Menu` 组件仍在 fiber 子树里。找不到时退回点击行内操作区的
   省略号按钮，再找不到就放弃 —— 不会自建菜单，也不会误触行的打开动作。
-- 本插件不提供会话“删除”：DSH 官方只支持归档，归档后可恢复；强行删记录容易留下
-  孤儿数据。会话的归档 / 取消归档由内置菜单条目负责。
-- 会话行右键的 VS Code / 资源管理器目录来自 `sessions.list` 的 `cwd`，取不到时退回
+- 永久删除默认只对**已归档**会话开放；在设置里开启「允许删除未归档会话」后，未归档
+  会话也能从右键菜单直接删除。删除不会级联删除 fork 出来的子会话，需要时请分别删除。
+- 删除操作直接作用于会话日志目录，宿主没有回收站；确认框里已明确提示不可恢复。
+- 会话行「打开方式」的目录来自 `sessions.list` 的 `cwd`，取不到时退回
   所属工作区目录；未分组会话可能没有目录，此时会提示“没有可用的目录路径”。
 
 ## 许可与声明
 
 - 代码：[MIT](LICENSE)。
+- 更新日志：[CHANGELOG.md](CHANGELOG.md)。
 - 第三方代码引用与许可证全文：[NOTICE.md](NOTICE.md) · [English](NOTICE.en.md)。
 - AI 使用与代码来源声明：[AI_USAGE.md](AI_USAGE.md) · [English](AI_USAGE.en.md)。