Delete dialog: Add Trash/Delete toggle

Mirrors the Copy/Move toggle on the transfer dialog. The user can now
flip between trash and permanent delete in-dialog rather than having to
cancel and re-press a different shortcut. F8 still pre-selects Trash;
Shift+F8 still pre-selects Delete — they just set the initial state of
the toggle.

- `DeleteDialog.svelte`: `isPermanent` is now a `$state` initialized
  from `initialIsPermanent`; toggle hidden on no-trash volumes (the
  existing warning banner still forces permanent there). Active Delete
  side uses `--color-error-bg` + `--color-error-text` to satisfy AA
  contrast (the strong `--color-error` fill against `--color-accent-fg`
  was too low).
- `onConfirm` callback now passes `isPermanent` back so the parent uses
  the toggle's final value, not the dialog's initial prop.
- `dialog-state.svelte.ts`: `handleDeleteConfirm(previewId, isPermanent)`
  reads the flag from the callback. MCP auto-confirm path keeps the
  initial-prop fallback.
- Updated `delete/CLAUDE.md` to reflect the new flow.

Author: vdavid

apps/desktop/src/lib/file-explorer/pane/DialogManager.svelte

@@ -78,7 +78,7 @@
         onNewFileCreated: (fileName: string) => void
         onNewFileCancel: () => void
         onAlertClose: () => void
-        onDeleteConfirm: (previewId: string | null) => void
+        onDeleteConfirm: (previewId: string | null, isPermanent: boolean) => void
         onDeleteCancel: () => void
     } = $props()
 </script>

apps/desktop/src/lib/file-explorer/pane/DualPaneExplorer.svelte

@@ -2282,8 +2282,8 @@
     }}
     showDeleteDialog={dialogs.showDeleteDialog}
     deleteDialogProps={dialogs.deleteDialogProps}
-    onDeleteConfirm={(previewId: string | null) => {
-        dialogs.handleDeleteConfirm(previewId)
+    onDeleteConfirm={(previewId: string | null, isPermanent: boolean) => {
+        dialogs.handleDeleteConfirm(previewId, isPermanent)
     }}
     onDeleteCancel={() => {
         dialogs.handleDeleteCancel()

apps/desktop/src/lib/file-explorer/pane/dialog-state.svelte.ts

@@ -294,10 +294,9 @@ export function createDialogState(deps: DialogStateDeps) {
       deps.onRefocus()
     },
 
-    handleDeleteConfirm(previewId: string | null) {
+    handleDeleteConfirm(previewId: string | null, isPermanent: boolean) {
       if (!deleteDialogProps) return
 
-      const isPermanent = deleteDialogProps.isPermanent || !deleteDialogProps.supportsTrash
       const opType: TransferOperationType = isPermanent ? 'delete' : 'trash'
 
       // Collect per-item sizes for trash progress if available
@@ -508,8 +507,11 @@ export function createDialogState(deps: DialogStateDeps) {
           transferDialogProps.operationType,
           false, // scanInProgress not tracked when confirming programmatically
         )
-      } else if (dialogType === 'delete-confirmation' && showDeleteDialog) {
-        this.handleDeleteConfirm(null) // previewId not available
+      } else if (dialogType === 'delete-confirmation' && showDeleteDialog && deleteDialogProps) {
+        // previewId not available when confirming programmatically.
+        // For MCP auto-confirm, honor whatever the props initialized with.
+        const isPermanent = deleteDialogProps.isPermanent || !deleteDialogProps.supportsTrash
+        this.handleDeleteConfirm(null, isPermanent)
       }
     },
   }

apps/desktop/src/lib/file-operations/delete/CLAUDE.md

@@ -10,8 +10,9 @@ dialog before acting. Reuses `TransferProgressDialog` for progress display.
 ## Files
 
 - **DeleteDialog.svelte**: Confirmation dialog with file list (max 10 items + overflow), live scan stats, symlink
-  notice, and no-trash volume warning. Uses `ModalDialog` with `role="dialog"` for trash and `role="alertdialog"` for
-  permanent delete.
+  notice, no-trash volume warning, and a Trash/Delete segmented control that lets the user flip the operation in-dialog
+  (hidden on no-trash volumes, where permanent is forced). Uses `ModalDialog` with `role="dialog"` for trash and
+  `role="alertdialog"` for permanent delete — the role flips reactively when the toggle changes.
 - **delete-dialog-utils.ts**: Pure utility functions: `generateDeleteTitle()` (handles "N selected files" vs "1 file
   under cursor"), `abbreviatePath()`, `getSymlinkNotice()`, `countSymlinks()`.
 - **delete-dialog-utils.test.ts**: Vitest tests for the pure utilities.
@@ -23,15 +24,18 @@ dialog before acting. Reuses `TransferProgressDialog` for progress display.
 3. **Selection**: `DualPaneExplorer.openDeleteDialog(permanent)` builds props from selection or cursor item (same
    pattern as copy/move). Looks up `supportsTrash` from the source volume's `VolumeInfo`.
 4. **Dialog**: `DeleteDialog` opens with file list, scan preview starts in background via `startScanPreview()`
-5. **Confirm**: `dialog-state.svelte.ts::handleDeleteConfirm()` transitions to `TransferProgressDialog` with
+5. **Confirm**: `DeleteDialog` passes back the active `isPermanent` (from the toggle), and
+   `dialog-state.svelte.ts::handleDeleteConfirm(previewId, isPermanent)` transitions to `TransferProgressDialog` with
    `operationType: 'trash'` or `'delete'`
 6. **Backend**: `trash_files_start()` or `delete_files_start()` in `write_operations/mod.rs` runs the operation
 7. **Progress**: `TransferProgressDialog` shows items/bytes progress with cancel support
 8. **Completion**: Toast notification, both panes refreshed, 400ms minimum display time
 
 ## Key design decisions
 
-- **Trash by default**: F8 moves to trash. Permanent delete requires explicit Shift+F8. No setting to change this.
+- **Trash by default**: F8 moves to trash. Shift+F8 opens the same dialog with permanent preselected. Either way, the
+  user can flip the mode via the Trash/Delete segmented control before confirming, so the shortcut just sets the initial
+  state.
 - **Always show dialog**: No `confirmBeforeDelete` setting. Delete is destructive, so the user always sees what they're
   about to delete. Both delete settings were removed from the settings registry.
 - **No undo**: Cmdr doesn't implement undo, but items trashed via `NSFileManager.trashItemAtURL` support Finder's "Put

apps/desktop/src/lib/file-operations/delete/DeleteDialog.svelte

@@ -40,7 +40,7 @@
         sortOrder: SortOrder
         /** When true, dialog auto-confirms without user interaction (MCP). */
         autoConfirm?: boolean
-        onConfirm: (previewId: string | null) => void
+        onConfirm: (previewId: string | null, isPermanent: boolean) => void
         onCancel: () => void
     }
 
@@ -58,8 +58,8 @@
         onCancel,
     }: Props = $props()
 
-    // Force permanent when trash not supported
-    const isPermanent = $derived(initialIsPermanent || !supportsTrash)
+    // User-facing toggle. Forced to permanent on volumes that don't support trash.
+    let isPermanent = $state(initialIsPermanent || !supportsTrash)
 
     const dialogTitle = $derived(generateDeleteTitle(sourceItems, isFromCursor))
     const abbreviatedPath = $derived(abbreviatePath(sourceFolderPath))
@@ -158,7 +158,7 @@
             isPermanent,
             count: sourceItems.length,
         })
-        onConfirm(previewId)
+        onConfirm(previewId, isPermanent)
     }
 
     function handleCancel() {
@@ -233,6 +233,22 @@
         </div>
     {/if}
 
+    <!-- Trash/Delete toggle -->
+    {#if supportsTrash}
+        <div class="operation-toggle">
+            <button
+                class="toggle-option"
+                class:active={!isPermanent}
+                onclick={() => (isPermanent = false)}>Trash</button
+            >
+            <button
+                class="toggle-option toggle-option-danger"
+                class:active={isPermanent}
+                onclick={() => (isPermanent = true)}>Delete</button
+            >
+        </div>
+    {/if}
+
     <!-- Scrollable file list -->
     <div class="file-list-container">
         <div class="file-list" role="list">
@@ -465,4 +481,49 @@
         justify-content: center;
         padding: 0 var(--spacing-xl) var(--spacing-xl);
     }
+
+    /* Trash/Delete segmented control */
+    .operation-toggle {
+        display: flex;
+        justify-content: center;
+        gap: 0;
+        padding: 0 var(--spacing-xl) var(--spacing-md);
+    }
+
+    .toggle-option {
+        padding: var(--spacing-xs) var(--spacing-lg);
+        font-size: var(--font-size-sm);
+        font-weight: 500;
+        border: 1px solid var(--color-border-strong);
+        background: transparent;
+        color: var(--color-text-secondary);
+        transition: all var(--transition-base);
+        min-width: 60px;
+    }
+
+    .toggle-option:first-child {
+        border-radius: var(--radius-md) 0 0 var(--radius-md);
+        border-right: none;
+    }
+
+    .toggle-option:last-child {
+        border-radius: 0 var(--radius-md) var(--radius-md) 0;
+    }
+
+    .toggle-option.active {
+        background: var(--color-accent);
+        border-color: var(--color-accent);
+        color: var(--color-accent-fg);
+    }
+
+    .toggle-option-danger.active {
+        background: var(--color-error-bg);
+        border-color: var(--color-error);
+        color: var(--color-error-text);
+    }
+
+    .toggle-option:not(.active):hover {
+        background: var(--color-bg-tertiary);
+        color: var(--color-text-primary);
+    }
 </style>