@temoa/dsh-sessions-rm

Readme

# @temoa/dsh-sessions-rm

Session management for [DeepSeek Harness (DSH)](https://github.com/deepseek-ai/deepseek-harness): a **settings page** that lists every historical session and **physically deletes a session's log directory** (irreversible, type-to-confirm, with an audit trail).

English | [中文](README.zh.md)

## Features

- **Settings → Session Management** — an additive `settings.section` page (no shipped UI is replaced).
- **Session list** — title, relative time, status badges (running / persisted), blank vs untitled distinction.
- **Type-to-confirm delete** — a modal dialog shows the session and an irreversible warning; you must type 确认删除 before the confirm button becomes clickable (guards against accidental deletes). Esc / backdrop / cancel close it.
- **Physical deletion** — the Host locates the log via `sessionPersistence.locate()` and deletes the whole session directory (log + session-owned artifacts) directly through Node `fs` — no shell or sandbox involved, consistent across platforms.
- **Audit trail** — every delete request (success or failure) appends one JSON line to `~/.dsh/sessions-rm.log` (time / sessionId / title / ok / path or error).
- **Theme-aware** — follows light / dark / system via official theme tokens.

## Install

### Option A — install as a package (`dsh plugin add`), no `--patch` needed

Install straight from GitHub — pnpm pins the package by commit with a full integrity hash:

```bash
dsh plugin --profile web add git+https://github.com/Temoa/dsh-sessions-rm.git
```

Because the package declares `dsh.bundle.patch` (`cordis.patch.yml`), the reconciler appends it to the profile's `dsh.profile.bundles` automatically — the plugin mounts at the PROFILE level and is active for **every session on that profile**. The client half is discovered through `dsh.client` (`exports["./client"]`) and the Host Remote manifest through `exports["./typert"]` (registered by `dsh-typert-loader`); no manual patch file is needed.

To uninstall: `dsh plugin --profile web remove @temoa/dsh-sessions-rm`.

> **After changing plugin code, fully restart the harness** — modules are cached per process URL.

### Option B — install from source (local development)

```bash
git clone git+https://github.com/Temoa/dsh-sessions-rm.git
cd dsh-sessions-rm
dsh web --patch ./cordis.patch.yml
```

### Dependencies

The package declares **no `dependencies`** — runtime imports (`@deepseek-ai/cordis`, `@deepseek-ai/dsh-typert-protocol`, `@deepseek-ai/dsh-home-paths`, `zod`) are provided by the DSH installation. Two ways to make them resolvable:

1. Symlink DSH's `node_modules` into the plugin directory (recommended, offline):
   ```bash
   ln -s /path/to/dsh/node_modules node_modules
   ```
2. Or run `npm install` in the plugin directory if the `@deepseek-ai/*` packages are available on your registry.

## Usage

Open **Settings → Session Management**: pick a session, click 删除 (Delete), type 确认删除 in the dialog, then confirm. The row disappears, the sidebar hides the session immediately (archived), the log directory is physically removed, and one line is appended to `~/.dsh/sessions-rm.log`.

## How it works

- **Host** — `lib/index.js` registers `ctx.sessionRm` (a `TypertRemoteService` subclass) exposing `list` / `delete`. `lib/typert.host.js` is the Typert manifest (`exports["./typert"]`) auto-registered by `dsh-typert-loader`; `api-gateway` routes `sessionRm/*` wire calls to the service methods.
- **Client** — `lib/client.js` (a factory-form CJS bundle built by `scripts/build-client.js` from `src/client.js`) registers matching descriptors via `ctx.remote.$mount()` and calls `ctx.remote.sessionRm.list()/delete()`.
- **Delete pipeline** — reject running agents → `workspaceRegistry.archiveSession()` (sidebar hides instantly via the archive set) → `sessionPersistence.locate()` → Node `fs` delete → append audit line.
- **Pure JS + hand-written decorator marking** — `@Remote` is a TS decorator; this project reuses the official `Remote()` decorator by constructing a decorator context manually (see `addRemote` in `lib/index.js`), so no TS toolchain is needed.

## Configuration

None — the plugin is intentionally configuration-free. All behavior is fixed by design.

## Development

```bash
npm run build:client   # node scripts/build-client.js → lib/client.js
npm test               # node test/index.mjs — manifest/bundle structure checks
```

Tests cover: Host service class shape, Typert manifest structure (package/face/codecs/invocations), and client bundle format.

## Boundaries

- **Running sessions cannot be deleted** — DSH has no public API to dispose a live agent; deleting a running session's log would corrupt the runtime.
- **Deleting is irreversible** — log and artifacts are permanently removed. The archive step hides the session from the sidebar immediately; the in-memory record disappears after a restart.
- **Path self-validation** — the delete target is derived from `sessionPersistence.locate()` and validated to be an absolute path; no external input is accepted. Deletion and audit writes run directly through Node `fs`, independent of the shell or the deployment sandbox boundary (the Windows profile mounts the pwsh executor, and the sandbox is unusable when `dsh web` starts from a drive root).
- **User-role semantics** — the settings page is an additive UI; it never replaces shipped surfaces and reads no model context.

## License

MIT