dsh-sidebar-row-menu 1.9.3 → 1.10.0

package/lib/client.js

@@ -94,6 +94,18 @@ window.__ModuleLoader__.load({
     const DELETE_ENDPOINT = '/dsh-sidebar-row-menu/session/delete';
     /** 删除「工作区 + 其下全部会话」的宿主端点。 */
     const WORKSPACE_DELETE_ENDPOINT = '/dsh-sidebar-row-menu/workspace/delete';
+    /** 按工作区读写「新会话默认权限」的宿主端点。 */
+    const PERMISSION_DEFAULTS_ENDPOINT = '/dsh-sidebar-row-menu/permission-defaults';
+    /** 宿主原生预设的本地化名称；catalog 里的 name 是英文，中文界面用这张表。 */
+    const PRESET_LABEL_KEYS = {
+      'read-only': 'permission.readOnly',
+      'workspace-write': 'permission.workspaceWrite',
+      'danger-full-access': 'permission.fullAccess',
+      auto: 'permission.autoReview',
+      custom: 'permission.custom',
+    };
+    /** 宿主还没连上时先按内置预设渲染，catalog 到了再替换。 */
+    const FALLBACK_PRESETS = ['read-only', 'workspace-write', 'danger-full-access'];
     /** 官方 open-in-app 的三条路由；用文档相对路径让浏览器自带认证。 */
     const APPS_ROUTE = 'open-in-app/apps';
     const OPEN_ROUTE = 'open-in-app/open';
@@ -121,10 +133,19 @@ window.__ModuleLoader__.load({
     };
     const ITEM_KEYS = Object.keys(ITEM_DEFAULTS);
     /**
-     * 「右键专属条目是否也放进行尾…菜单」的逐项开关。
-     * 全部默认关闭：不勾选时点「…」看到的仍是 DSH 原生菜单。
+     * 「右键专属条目是否也放进行尾…菜单」的逐项开关（旧版数据）。
+     * 0.2.2 起改用下面的 PLACEMENT_KEY 三态；这里只保留迁移读取。
      */
     const ELLIPSIS_KEY = 'dsh.sidebar-row-menu.ellipsis.v1';
+    /**
+     * 每个附加条目在两种入口里的显示位置：
+     *   context  只在右键菜单
+     *   ellipsis 只在「…」菜单
+     *   both     两边都显示
+     * 旧版只有一个「同时放进…菜单」布尔值；读取时 true → both、false → context。
+     */
+    const PLACEMENT_KEY = 'dsh.sidebar-row-menu.placement.v1';
+    const PLACEMENT_VALUES = ['context', 'ellipsis', 'both'];
     /**
      * 按工作区「已隐藏归档会话」的集合。宿主只有全局归档筛选（default/show/only），
      * 没有「这个工作区显示归档、那个工作区不显示」的概念，所以这里记住要单独
@@ -134,6 +155,7 @@ window.__ModuleLoader__.load({
     const ARCHIVED_HIDDEN_KEY = 'dsh.sidebar-row-menu.archived-hidden.v1';
     const ELLIPSIS_DEFAULTS = {
       newSession: false,
+      permissionDefault: false,
       showArchived: false,
       openWith: false,
       copyPath: false,
@@ -194,6 +216,14 @@ window.__ModuleLoader__.load({
       actionFailed: '操作失败，请稍后重试',
       openWith: '打开方式',
       openWithApp: '用 {name} 打开',
+      newSessionPermission: '新会话默认权限',
+      permissionFollowGlobal: '跟随全局默认',
+      'permission.readOnly': '仅可查看',
+      'permission.workspaceWrite': '工作区内修改',
+      'permission.fullAccess': '完全权限',
+      'permission.autoReview': '自动审查（实验）',
+      'permission.custom': '自定义',
+      'permission.unavailable': '宿主没有提供权限预设',
       deleteSession: '永久删除会话',
       deleteArchived: '删除所有已归档会话',
       'settings.title': '行菜单',
@@ -220,12 +250,17 @@ window.__ModuleLoader__.load({
       'settings.appsAllOff': '所有应用都被二级开关隐藏了',
       'settings.expand': '展开应用列表',
       'settings.collapse': '收起应用列表',
-      'settings.ellipsisTitle': '同时放进「…」菜单',
-      'settings.ellipsisHint': 'DSH 0.2.2 起「…」按钮与右键共用同一份菜单：勾选后对应条目也会出现在「…」菜单里，并沿用上面的单项开关；不勾选则只在右键菜单出现。',
+      'settings.ellipsisTitle': '菜单显示位置',
+      'settings.ellipsisHint': '每个条目都可以分别选择出现在右键菜单、「…」菜单，或两边都出现；至少保留一边。上面的单项开关仍然决定条目是否启用。',
+      'settings.placement.context': '右键菜单',
+      'settings.placement.ellipsis': '「…」菜单',
+      'settings.placement.locked': '至少要在一边显示',
       'settings.ellipsisWorkspace': '工作区行',
       'settings.ellipsisSession': '会话行',
       'settings.ellipsis.newSession.label': '新建会话',
       'settings.ellipsis.newSession.hint': '在「…」菜单里直接新建该工作区的会话。',
+      'settings.ellipsis.permissionDefault.label': '新会话默认权限',
+      'settings.ellipsis.permissionDefault.hint': '在「…」菜单里为该工作区设置新建会话的默认权限；只在带原生权限预设的宿主上出现。',
       'settings.ellipsis.showArchived.label': '显示已归档会话',
       'settings.ellipsis.showArchived.hint': '在「…」菜单里单独显示或隐藏该工作区的已归档会话。',
       'settings.ellipsis.openWith.label': '打开方式',
@@ -292,6 +327,14 @@ window.__ModuleLoader__.load({
       actionFailed: 'Action failed, please retry',
       openWith: 'Open with',
       openWithApp: 'Open with {name}',
+      newSessionPermission: 'Default permission for new sessions',
+      permissionFollowGlobal: 'Follow the global default',
+      'permission.readOnly': 'Read Only',
+      'permission.workspaceWrite': 'Workspace Write',
+      'permission.fullAccess': 'Full access',
+      'permission.autoReview': 'Auto review (experimental)',
+      'permission.custom': 'Custom',
+      'permission.unavailable': 'The host exposes no permission presets',
       deleteSession: 'Delete session permanently',
       deleteArchived: 'Delete all archived sessions',
       'settings.title': 'Row menu',
@@ -318,12 +361,17 @@ window.__ModuleLoader__.load({
       'settings.appsAllOff': 'Every application is hidden by the switches above',
       'settings.expand': 'Show applications',
       'settings.collapse': 'Hide applications',
-      'settings.ellipsisTitle': 'Also show in the "…" menu',
-      'settings.ellipsisHint': 'Since DSH 0.2.2 the "…" button opens the same menu as right-click: checked entries also appear there, still subject to the switches above. Unchecked entries stay right-click only.',
+      'settings.ellipsisTitle': 'Menu placement',
+      'settings.ellipsisHint': 'Each entry can appear in the right-click menu, the "…" menu, or both. At least one side stays enabled. The switches above still decide whether the entry itself is on.',
+      'settings.placement.context': 'Right-click',
+      'settings.placement.ellipsis': '"…" menu',
+      'settings.placement.locked': 'Keep at least one side',
       'settings.ellipsisWorkspace': 'Workspace rows',
       'settings.ellipsisSession': 'Session rows',
       'settings.ellipsis.newSession.label': 'New session',
       'settings.ellipsis.newSession.hint': 'Create a session for this workspace from the "…" menu.',
+      'settings.ellipsis.permissionDefault.label': 'Default permission for new sessions',
+      'settings.ellipsis.permissionDefault.hint': 'Set the default permission for new sessions of this workspace from the "…" menu; only shown when the host exposes native permission presets.',
       'settings.ellipsis.showArchived.label': 'Show archived sessions',
       'settings.ellipsis.showArchived.hint': 'Show or hide this workspace\'s archived sessions from the "…" menu.',
       'settings.ellipsis.openWith.label': 'Open with',
@@ -701,6 +749,7 @@ window.__ModuleLoader__.load({
 
     /* -------------------------------- 「…」菜单附加开关（localStorage） */
 
+    /** 读旧版「同时放进…菜单」布尔表，仅用于一次性迁移。 */
     function readStoredEllipsis() {
       const defaults = { ...ELLIPSIS_DEFAULTS };
       try {
@@ -717,11 +766,32 @@ window.__ModuleLoader__.load({
       return defaults;
     }
 
-    let ellipsisSettings = readStoredEllipsis();
-    const ellipsisListeners = new Set();
+    function readStoredPlacements() {
+      const defaults = {};
+      for (const key of ELLIPSIS_KEYS) defaults[key] = 'context';
+      const legacy = readStoredEllipsis();
+      for (const key of ELLIPSIS_KEYS) {
+        if (legacy[key] === true) defaults[key] = 'both';
+      }
+      try {
+        const raw = globalThis.localStorage?.getItem(PLACEMENT_KEY);
+        if (typeof raw !== 'string' || raw === '') return defaults;
+        const parsed = JSON.parse(raw);
+        if (parsed === null || typeof parsed !== 'object') return defaults;
+        for (const key of ELLIPSIS_KEYS) {
+          if (PLACEMENT_VALUES.includes(parsed[key])) defaults[key] = parsed[key];
+        }
+      } catch {
+        /* 坏数据回退默认 */
+      }
+      return defaults;
+    }
 
-    function publishEllipsis() {
-      for (const listener of ellipsisListeners) {
+    let placementSettings = readStoredPlacements();
+    const placementListeners = new Set();
+
+    function publishPlacements() {
+      for (const listener of placementListeners) {
         try {
           listener();
         } catch {
@@ -730,43 +800,55 @@ window.__ModuleLoader__.load({
       }
     }
 
-    function subscribeEllipsis(listener) {
-      ellipsisListeners.add(listener);
+    function subscribePlacements(listener) {
+      placementListeners.add(listener);
       return () => {
-        ellipsisListeners.delete(listener);
+        placementListeners.delete(listener);
       };
     }
 
-    function ellipsisSnapshot() {
-      return ellipsisSettings;
+    function placementsSnapshot() {
+      return placementSettings;
+    }
+
+    function usePlacements() {
+      return useSyncExternalStore(subscribePlacements, placementsSnapshot, placementsSnapshot);
+    }
+
+    function placementOf(key) {
+      const value = placementSettings[key];
+      return PLACEMENT_VALUES.includes(value) ? value : 'context';
+    }
+
+    function showsInContext(key) {
+      return placementOf(key) !== 'ellipsis';
     }
 
-    function useEllipsis() {
-      return useSyncExternalStore(subscribeEllipsis, ellipsisSnapshot, ellipsisSnapshot);
+    function showsInEllipsis(key) {
+      return placementOf(key) !== 'context';
     }
 
-    function setEllipsis(key, enabled) {
-      if (!ELLIPSIS_KEYS.includes(key)) return;
-      ellipsisSettings = { ...ellipsisSettings, [key]: enabled === true };
+    /** 三态位置；不允许把条目同时从两边关掉，所以最小值是其中一边。 */
+    function setPlacement(key, value) {
+      if (!ELLIPSIS_KEYS.includes(key) || !PLACEMENT_VALUES.includes(value)) return;
+      placementSettings = { ...placementSettings, [key]: value };
       try {
-        globalThis.localStorage?.setItem(ELLIPSIS_KEY, JSON.stringify(ellipsisSettings));
+        globalThis.localStorage?.setItem(PLACEMENT_KEY, JSON.stringify(placementSettings));
       } catch {
         /* 隐私模式写不进去也照样生效到本次会话 */
       }
-      publishEllipsis();
+      publishPlacements();
     }
 
-    function ellipsisOn(key) {
-      return ellipsisSettings[key] === true;
+    function placementOn(key, mode) {
+      const placement = placementOf(key);
+      return mode === 'context' ? placement !== 'ellipsis' : placement !== 'context';
     }
 
     /** 工作区行是否至少有一项要在「…」菜单里显示（否则完全不接管原生菜单）。 */
     function workspaceEllipsisOn() {
-      return ellipsisSettings.newSession === true
-        || ellipsisSettings.openWith === true
-        || ellipsisSettings.copyPath === true
-        || ellipsisSettings.openInTab === true
-        || ellipsisSettings.deleteSessions === true;
+      return ['newSession', 'permissionDefault', 'openWith', 'copyPath', 'openInTab', 'deleteSessions']
+        .some((key) => showsInEllipsis(key));
     }
 
     /* -------------------------------------- 会话空白处右键菜单（localStorage） */
@@ -1046,7 +1128,175 @@ window.__ModuleLoader__.load({
       );
     }
 
-    /* ------------------------------------------------ 与 dsh-session-menu 共存 */
+    /* ---------------------------------------- 工作区新会话默认权限（host 存储） */
+
+    /**
+     * 宿主 permissionPresets 的目录 + 插件自己的「工作区 → preset」映射。
+     * 映射存在宿主侧（$DSH_HOME/storages/...），浏览器这边只是缓存；
+     * 选择后先乐观更新，写入失败再回滚并提示。
+     */
+    function emptyPermissionState() {
+      return {
+        status: 'idle',
+        options: FALLBACK_PRESETS.map((value) => ({ value })),
+        defaultPreset: '',
+        defaults: {},
+        at: 0,
+      };
+    }
+
+    let permissionState = emptyPermissionState();
+    const permissionListeners = new Set();
+
+    function publishPermission(next) {
+      permissionState = next;
+      for (const listener of permissionListeners) {
+        try {
+          listener();
+        } catch {
+          /* ignore */
+        }
+      }
+    }
+
+    function subscribePermission(listener) {
+      permissionListeners.add(listener);
+      return () => {
+        permissionListeners.delete(listener);
+      };
+    }
+
+    function permissionSnapshot() {
+      return permissionState;
+    }
+
+    function usePermission() {
+      return useSyncExternalStore(subscribePermission, permissionSnapshot, permissionSnapshot);
+    }
+
+    const permissionSource = {
+      getSnapshot: permissionSnapshot,
+      subscribe: subscribePermission,
+    };
+
+    function presetLabel(value, t) {
+      const option = permissionState.options.find((candidate) => candidate?.value === value);
+      const key = PRESET_LABEL_KEYS[value];
+      if (typeof key === 'string') {
+        const localized = t(key);
+        if (localized !== key) return localized;
+      }
+      if (typeof option?.name === 'string' && option.name !== '') return option.name;
+      return value;
+    }
+
+    function presetOptions() {
+      return permissionState.options.filter((option) => (
+        option !== null
+        && typeof option === 'object'
+        && typeof option.value === 'string'
+        && option.value !== ''
+        && option.value !== 'custom'
+      ));
+    }
+
+    function workspacePreset(workspaceId) {
+      const value = permissionState.defaults[workspaceId];
+      return typeof value === 'string' ? value : '';
+    }
+
+    function effectivePreset(workspaceId) {
+      return workspacePreset(workspaceId) || permissionState.defaultPreset;
+    }
+
+    function normalizeDefaults(value) {
+      const result = {};
+      if (value === null || typeof value !== 'object' || Array.isArray(value)) return result;
+      for (const [workspaceId, preset] of Object.entries(value)) {
+        if (typeof workspaceId !== 'string' || workspaceId === '') continue;
+        if (typeof preset !== 'string' || preset === '') continue;
+        result[workspaceId] = preset;
+      }
+      return result;
+    }
+
+    function ensurePermissionData(ctx) {
+      if (typeof fetch !== 'function') return;
+      const now = Date.now();
+      if (permissionState.status === 'loading') return;
+      if (permissionState.status === 'ready' && now - permissionState.at < 30000) return;
+      if (permissionState.status === 'error' && now - permissionState.at < 15000) return;
+      publishPermission({ ...permissionState, status: 'loading', at: now });
+
+      fetch(PERMISSION_DEFAULTS_ENDPOINT, {
+        headers: { accept: 'application/json' },
+      }).then(
+        (response) => (response.ok ? response.json() : null),
+        () => null,
+      ).then((payload) => {
+        const readDefaults = payload?.ok === true
+          ? normalizeDefaults(payload.defaults)
+          : null;
+        const catalog = payload?.catalog;
+        const rawOptions = Array.isArray(catalog?.options) ? catalog.options : [];
+        const options = rawOptions.filter((option) => (
+          option !== null
+          && typeof option === 'object'
+          && typeof option.value === 'string'
+          && option.value !== ''
+          && option.value !== 'custom'
+        ));
+        const usable = options.length > 0 ? options : permissionState.options;
+        const defaultPreset = typeof catalog?.defaultPreset === 'string'
+          ? catalog.defaultPreset
+          : permissionState.defaultPreset;
+        publishPermission({
+          status: readDefaults === null ? 'error' : 'ready',
+          options: usable,
+          defaultPreset,
+          defaults: readDefaults ?? permissionState.defaults,
+          at: Date.now(),
+        });
+      }, () => {
+        publishPermission({ ...permissionState, status: 'error', at: Date.now() });
+      });
+    }
+
+    function setWorkspacePreset(ctx, workspaceId, preset, t) {
+      if (typeof workspaceId !== 'string' || workspaceId === '') return Promise.resolve(false);
+      const previous = permissionState.defaults;
+      const next = { ...previous };
+      if (preset === null) delete next[workspaceId];
+      else next[workspaceId] = preset;
+      publishPermission({ ...permissionState, status: 'ready', defaults: next, at: Date.now() });
+      if (typeof fetch !== 'function') {
+        publishPermission({ ...permissionState, defaults: previous, at: Date.now() });
+        return Promise.resolve(false);
+      }
+      return fetch(PERMISSION_DEFAULTS_ENDPOINT, {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ workspaceId, preset }),
+      }).then(
+        (response) => response.json().catch(() => null).then((data) => {
+          if (!response.ok || data?.ok !== true) throw new Error(`HTTP ${response.status}`);
+          publishPermission({
+            ...permissionState,
+            status: 'ready',
+            defaults: normalizeDefaults(data.defaults),
+            at: Date.now(),
+          });
+          return true;
+        }),
+        () => false,
+      ).catch(() => {
+        publishPermission({ ...permissionState, defaults: previous, at: Date.now() });
+        toast(t('actionFailed'));
+        return false;
+      });
+    }
+
+
 
     /** 读 slot 注册项 id（不同 DSH 版本的 register 返回形状略有差异）。 */
     function slotItemId(entry) {
@@ -1586,8 +1836,7 @@ window.__ModuleLoader__.load({
      */
     function SessionOpenWithMenuItem({ sessionId, useMenuOpenState, t }) {
       const rightClick = useRightClickEntry();
-      const ellipsis = useEllipsis();
-      const visible = rightClick || ellipsis.sessionOpenWith === true;
+      const visible = placementOn('sessionOpenWith', rightClick ? 'context' : 'ellipsis');
       const items = useItems();
       const apps = useApps();
       const setMenuOpen = menuCloser(useMenuOpenState);
@@ -1609,8 +1858,7 @@ window.__ModuleLoader__.load({
      */
     function SessionOpenWithPinnedMenuItem({ sessionId, useMenuOpenState, t }) {
       const rightClick = useRightClickEntry();
-      const ellipsis = useEllipsis();
-      const visible = rightClick || ellipsis.sessionOpenWith === true;
+      const visible = placementOn('sessionOpenWith', rightClick ? 'context' : 'ellipsis');
       const items = useItems();
       useChildren();
       const apps = useApps();
@@ -1648,8 +1896,7 @@ window.__ModuleLoader__.load({
      */
     function SessionDeleteMenuItem({ sessionId, displayTitle, useMenuOpenState, t }) {
       const rightClick = useRightClickEntry();
-      const ellipsis = useEllipsis();
-      const visible = rightClick || ellipsis.sessionDelete === true;
+      const visible = placementOn('sessionDelete', rightClick ? 'context' : 'ellipsis');
       const items = useItems();
       const archived = useArchivedIds();
       const setMenuOpen = menuCloser(useMenuOpenState);
@@ -1673,8 +1920,7 @@ window.__ModuleLoader__.load({
      */
     function SessionDeleteArchivedMenuItem({ sessionId, displayTitle, useMenuOpenState, t }) {
       const rightClick = useRightClickEntry();
-      const ellipsis = useEllipsis();
-      const visible = rightClick || ellipsis.sessionDeleteArchived === true;
+      const visible = placementOn('sessionDeleteArchived', rightClick ? 'context' : 'ellipsis');
       const items = useItems();
       const archived = useArchivedIds();
       const setMenuOpen = menuCloser(useMenuOpenState);
@@ -1704,10 +1950,11 @@ window.__ModuleLoader__.load({
       ['archivedSessions', 'settings.archivedSessions.label', 'settings.archivedSessions.hint'],
     ];
 
-    /** 「…」菜单附加开关；按行分组，避免用户分不清工作区项和会话项。 */
-    const ELLIPSIS_ROWS = [
+    /** 菜单显示位置；按行分组，避免用户分不清工作区项和会话项。 */
+    const PLACEMENT_ROWS = [
       ['workspace', 'settings.ellipsisWorkspace', [
         ['newSession', 'settings.ellipsis.newSession.label', 'settings.ellipsis.newSession.hint'],
+        ['permissionDefault', 'settings.ellipsis.permissionDefault.label', 'settings.ellipsis.permissionDefault.hint'],
         ['openWith', 'settings.ellipsis.openWith.label', 'settings.ellipsis.openWith.hint'],
         ['copyPath', 'settings.ellipsis.copyPath.label', 'settings.ellipsis.copyPath.hint'],
         ['openInTab', 'settings.ellipsis.openInTab.label', 'settings.ellipsis.openInTab.hint'],
@@ -1757,7 +2004,7 @@ window.__ModuleLoader__.load({
 
     function SettingsSection({ t }) {
       const items = useItems();
-      const ellipsis = useEllipsis();
+      const placements = usePlacements();
       const blank = useBlankMenu();
       const children = useChildren();
       const apps = useApps();
@@ -1841,7 +2088,32 @@ window.__ModuleLoader__.load({
         return key === 'openWith' && childRows ? [row, childRows] : [row];
       });
 
-      const ellipsisGroups = ELLIPSIS_ROWS.map(([groupKey, titleKey, rows]) => h('div', {
+      const placementSwitch = (key, mode, labelKey) => {
+        const inContext = showsInContext(key);
+        const inEllipsis = showsInEllipsis(key);
+        const checked = mode === 'context' ? inContext : inEllipsis;
+        // 三态里只剩一边时，那个开关锁住：不允许把条目从两边都关掉。
+        const locked = mode === 'context' ? !inEllipsis : !inContext;
+        const onChange = (next) => {
+          if (mode === 'context') {
+            setPlacement(key, next ? (inEllipsis ? 'both' : 'context') : 'ellipsis');
+          } else {
+            setPlacement(key, next ? (inContext ? 'both' : 'ellipsis') : 'context');
+          }
+        };
+        return h('span', { className: 'dsrm-placement-choice' },
+          h('span', { className: 'dsrm-placement-choice-label' }, t(labelKey)),
+          jsx(Switch, {
+            checked,
+            disabled: locked,
+            label: t(labelKey),
+            title: locked ? t('settings.placement.locked') : undefined,
+            onChange,
+          }),
+        );
+      };
+
+      const placementGroups = PLACEMENT_ROWS.map(([groupKey, titleKey, rows]) => h('div', {
         className: 'dsrm-settings-group',
         key: groupKey,
       },
@@ -1854,12 +2126,9 @@ window.__ModuleLoader__.load({
             h('div', { className: 'dsrm-settings-label' }, t(labelKey)),
             h('div', { className: 'dsrm-settings-hint' }, t(hintKey)),
           ),
-          h('div', { className: 'dsrm-settings-controls' },
-            jsx(Switch, {
-              checked: ellipsis[key] === true,
-              label: t(labelKey),
-              onChange: (next) => setEllipsis(key, next),
-            }),
+          h('div', { className: 'dsrm-settings-controls dsrm-placement-controls' },
+            placementSwitch(key, 'context', 'settings.placement.context'),
+            placementSwitch(key, 'ellipsis', 'settings.placement.ellipsis'),
           ),
         ))),
       ));
@@ -1888,7 +2157,7 @@ window.__ModuleLoader__.load({
         h('div', { className: 'dsrm-settings-list' }, rows),
         h('h2', { className: 'dsrm-settings-title dsrm-settings-subtitle' }, t('settings.ellipsisTitle')),
         h('div', { className: 'dsrm-settings-note' }, t('settings.ellipsisHint')),
-        h('div', { className: 'dsrm-settings-groups' }, ellipsisGroups),
+        h('div', { className: 'dsrm-settings-groups' }, placementGroups),
         h('h2', { className: 'dsrm-settings-title dsrm-settings-subtitle' }, t('settings.blankMenuTitle')),
         h('div', { className: 'dsrm-settings-note' }, t('settings.blankMenuNote')),
         h('div', { className: 'dsrm-settings-list' }, blankRows),
@@ -1904,7 +2173,7 @@ window.__ModuleLoader__.load({
     function WorkspaceRowMenu({ x, y, props, onClose, mode = 'context' }) {
       const t = localeOf(rootCtx);
       const items = useItems();
-      const ellipsis = useEllipsis();
+      usePlacements();
       const apps = useApps();
       usePinned();
       useChildren();
@@ -1912,8 +2181,8 @@ window.__ModuleLoader__.load({
       const pos = useMenuPos(hostRef, x, y, [apps.status]);
 
       const ellipsisMode = mode === 'ellipsis';
-      /** 右键菜单永远显示；「…」菜单只在对应开关打开时显示（内置项除外）。 */
-      const show = (key) => !ellipsisMode || ellipsis[key] === true;
+      /** 右键菜单永远显示；「…」菜单按设置页里选定的位置显示（内置项除外）。 */
+      const show = (key) => placementOn(key, ellipsisMode ? 'ellipsis' : 'context');
       const openWithOn = items.openWith !== false && show('openWith');
 
       useEffect(() => {
@@ -3299,6 +3568,37 @@ window.__ModuleLoader__.load({
      * 数据贡献的一批工作区动作；group 字段决定它挂到哪个 order 的 provider，
      * 从而夹在原生 rename(100)/reveal(200)/delete(300) 之间。
      */
+    /** 菜单项里的「当前默认」勾：宿主菜单没有 checked 字段，只能自绘。 */
+    function permissionCheck() {
+      return h('svg', {
+        className: 'dsrm-check',
+        width: 14,
+        height: 14,
+        viewBox: '0 0 16 16',
+        'aria-hidden': 'true',
+      }, h('path', {
+        d: 'M3.2 8.4 6.3 11.5 12.8 5',
+        fill: 'none',
+        stroke: 'currentColor',
+        'stroke-width': 1.7,
+        'stroke-linecap': 'round',
+        'stroke-linejoin': 'round',
+      }));
+    }
+
+    /** 权限子菜单的图标：一把小锁，避免与「打开方式」的箭头混淆。 */
+    const ContextMenuPermissionIcon = () => h('svg', {
+      width: 16,
+      height: 16,
+      viewBox: '0 0 16 16',
+      'aria-hidden': 'true',
+      fill: 'none',
+      stroke: 'currentColor',
+      'stroke-width': 1.4,
+    },
+    h('rect', { x: 3.2, y: 7, width: 9.6, height: 6.6, rx: 1.6 }),
+    h('path', { d: 'M5.4 7V5.4a2.6 2.6 0 0 1 5.2 0V7' }));
+
     function workspaceMenuActions(ctx, value, t) {
       const workspaceId = typeof value?.workspaceId === 'string' ? value.workspaceId : '';
       if (workspaceId === '') return [];
@@ -3409,6 +3709,44 @@ window.__ModuleLoader__.load({
         });
       }
 
+      // 该工作区新建会话的默认权限：走宿主 permissionPresets，插件只记住
+      // 「工作区 → preset」并在 agent/created 时用原生 set() 落盘。
+      ensurePermissionData(ctx);
+      const permissionOptions = presetOptions();
+      if (permissionOptions.length > 0) {
+        const override = workspacePreset(workspaceId);
+        const effective = effectivePreset(workspaceId);
+        const children = permissionOptions.map((option) => ({
+          id: `preset-${option.value}`,
+          label: h('span', { className: 'dsrm-host-label' },
+            h('span', { className: 'dsrm-host-label-text' }, presetLabel(option.value, t)),
+            option.value === effective ? permissionCheck() : null,
+          ),
+          icon: { key: 'sidebar-row-menu.permission' },
+          run: () => { setWorkspacePreset(rootCtx, workspaceId, option.value, t); },
+        }));
+        if (override !== '') {
+          children.push({
+            id: 'permission-follow-global',
+            separatorBefore: true,
+            label: t('permissionFollowGlobal'),
+            icon: { key: 'sidebar-row-menu.permission' },
+            run: () => { setWorkspacePreset(rootCtx, workspaceId, null, t); },
+          });
+        }
+        items.push({
+          id: 'new-session-permission',
+          group: 'permission',
+          separatorBefore: true,
+          label: h('span', { className: 'dsrm-host-label' },
+            h('span', { className: 'dsrm-host-label-text' }, t('newSessionPermission')),
+            jsx(IconChevronRightOutlineRegular, { size: 12, className: 'dsrm-submenu-chevron' }),
+          ),
+          icon: { key: 'sidebar-row-menu.permission' },
+          children,
+        });
+      }
+
       items.push({
         id: 'delete-sessions',
         group: 'delete',
@@ -3438,12 +3776,13 @@ window.__ModuleLoader__.load({
       { key: 'copy', order: 150 },
       { key: 'pinned', order: 210 },
       { key: 'open-with', order: 220 },
+      { key: 'permission', order: 225 },
       { key: 'delete', order: 310 },
     ];
 
     /**
      * 0.2.2 的「…」按钮与右键共用同一份宿主菜单，条目本身无法感知手势，
-     * 所以按右键标记决定是否进入这份菜单；打开对应附加开关后，点「…」也显示。
+     * 所以按右键标记决定是否进入这份菜单；设置页可按条目选择只出现在一边。
      */
     const WORKSPACE_GROUP_ELLIPSIS = {
       new: 'newSession',
@@ -3452,13 +3791,14 @@ window.__ModuleLoader__.load({
       copy: 'copyPath',
       tab: 'openInTab',
       archived: 'showArchived',
+      permission: 'permissionDefault',
       delete: 'deleteSessions',
     };
 
     function workspaceGroupVisible(groupKey) {
-      if (rightClickMark) return true;
       const key = WORKSPACE_GROUP_ELLIPSIS[groupKey];
-      return key !== undefined && ellipsisSettings[key] === true;
+      if (key === undefined) return rightClickMark;
+      return placementOn(key, rightClickMark ? 'context' : 'ellipsis');
     }
 
     /** 注册工作区动作；服务可能晚于插件 apply 出现，带有限重试。 */
@@ -3477,6 +3817,7 @@ window.__ModuleLoader__.load({
           yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.archive' }, IconArchiveOutlineRegular);
           yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.archive-off' }, IconArchiveOffOutlineRegular);
           yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.open-with' }, IconRightUpOutlineRegular);
+          yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.permission' }, ContextMenuPermissionIcon);
           yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.delete' }, IconTrashOutlineRegular);
           yield ctx.slots.register({ name: 'contextMenu.icon', key: 'sidebar-row-menu.app' }, ContextMenuAppIcon);
         });
@@ -3493,6 +3834,7 @@ window.__ModuleLoader__.load({
           return;
         }
         registerIcons();
+        ensurePermissionData(ctx);
         const registered = [];
         for (const group of WORKSPACE_MENU_GROUPS) {
           try {
@@ -3500,7 +3842,7 @@ window.__ModuleLoader__.load({
               id: `sidebar-row-menu.workspace.${group.key}`,
               target: 'workspace',
               order: group.order,
-              observe: () => [appsSource],
+              observe: () => [appsSource, permissionSource],
               resolve: (target) => {
                 if (!workspaceGroupVisible(group.key)) return [];
                 return workspaceMenuActions(ctx, target, localeOf(ctx))
@@ -3757,6 +4099,7 @@ window.__ModuleLoader__.load({
 .dsrm-submenu-chevron-flipped{transform:scaleX(-1)}
 .dsrm-host-label{display:flex;align-items:center;gap:6px;width:100%}
 .dsrm-host-label-text{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis}
+.dsrm-check{margin-left:auto;flex:none;color:var(--dsw-alias-label-primary)}
 .dsrm-submenu{position:fixed;z-index:1101;min-width:180px;max-width:300px;max-height:min(380px,64vh);overflow:auto;padding:4px}
 .dsrm-submenu-empty{padding:6px 8px;color:var(--dsw-alias-label-tertiary);font-size:12px;line-height:18px}
 .dsrm-menu{position:fixed;z-index:2147483647}
@@ -3783,6 +4126,9 @@ window.__ModuleLoader__.load({
 .dsrm-settings-label{font-size:14px;line-height:20px}
 .dsrm-settings-hint{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:18px}
 .dsrm-settings-controls{display:flex;align-items:center;gap:10px}
+.dsrm-placement-controls{gap:16px}
+.dsrm-placement-choice{display:flex;align-items:center;gap:6px;white-space:nowrap}
+.dsrm-placement-choice-label{color:var(--dsw-alias-label-secondary);font-size:12px;line-height:18px}
 .dsrm-settings-children{margin-left:12px;padding:0 0 12px 18px;border-left:1px solid var(--dsw-alias-border-l2)}
 .dsrm-settings-child{display:flex;align-items:center;justify-content:space-between;gap:24px;padding:6px 14px 6px 0}
 .dsrm-settings-child-label{color:var(--dsw-alias-label-secondary);font-size:13px;line-height:18px;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}