dsh-session-clean-delete
在侧边栏会话上下文菜单中添加永久删除会话操作，并在删除前通过确认对话框显示日志大小和会话的实时活动状态。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:wilsonchengassistant/dsh-session-clean-delete#b8f884dc24547a3fae15c38b3d3a713004a1911cSession Clean Delete 以 dsh-session-clean-delete 发布，当前版本为 1.0.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A permanent Delete session action for the DeepSeek Harness sidebar, behind a confirmation dialog that tells you what is about to go.
DSH ships a Archive action, which is reversible and keeps the session in the
Archived list. This plugin adds the irreversible counterpart, and — unlike a
naive rm of the session log — it actually makes the row disappear.
Adds one row to the per-session … menu in the left sidebar, ordered after
Pin / Rename / Fork / Archive. Choosing it opens a modal that reports:
Confirming stops the session's work, unlinks its session directory and projection checkpoint, and releases the id from every registry that would otherwise keep listing it. Then the sidebar refreshes and the row is gone.
There is no undo and no trash folder. The dialog says so.
rmA session's directory is not the only thing that makes it appear. The Host's
session corpus is persistence ∪ live, so a session the Host still holds live
keeps coming back after its log is deleted:
sessions.refresh() rebuilds the rows from the Host list and folds
the live summary back in,The visible symptom of this is that deleting several sessions in a row makes the earlier ones reappear, and that archived rows come back stuck in Archived forever (the old id was never removed from the archive set, so it accumulated dead ids).
release() therefore detaches through the same teardown the owning fiber uses,
in the order the agent loop's own disposal uses — agents first, then
sessions — plus unarchiveSession(id) and workspace.detachSession(id). The
browser keeps its own retired set and re-applies every retirement after each
refresh, so rows stay retired until the Host's api-session/removed agrees.
This package ships a dsh.bundle manifest, so dsh plugin installs it as a
profile layer by itself — you do not need to edit cordis.patch.yml. Bare
@deepseek-ai/* imports are resolved by the host itself, so the package declares
zero dependencies — do not add them.
dsh plugin --profile web add dsh-session-clean-delete
That is the npm name, and it is also the repository name.
From a source clone, dsh plugin is a pnpm passthrough, so a file: path works
too:
dsh plugin --profile web add file:/path/to/dsh-session-clean-delete
That command does two things: it adds the package as a dependency, and it
appends it to dsh.profile.bundles in the profile's package.json. The second
half is the one people miss — without it the package is just an unused
dependency, because the bundle patch in cordis.patch.yml
is only read for packages the bundle list names.
Verify it joined the tree — the entry must appear under a banner naming the
plugin's own cordis.patch.yml, which is the part that is easy to miss:
dsh --profile <profile> --dump-config | grep -B1 session-clean-delete
# == …/dsh-session-clean-delete/cordis.patch.yml
- id: session-clean-delete
name: dsh-session-clean-delete
A row under a banner for the profile's cordis.patch.yml means something
inserted this plugin by hand and it is not installed as a bundle — the
dependency is present but the layer never composes. --dump-config never
mounts, so it is safe against the live profile.
Finally restart the harness. The bundle is composed at boot, so there is no partial effect: until it restarts, the menu row is not there.
rm -rf ~/.dsh/profiles/<profile>/node_modules/dsh-session-clean-delete first, or
the profile keeps serving the old copy forever.lib/*.js into ~/.dsh/profiles/<profile>/node_modules/dsh-session-clean-delete/lib/.
client.js hot-reloads; index.js is host-side and needs a restart.dsh plugin needs pnpm on PATH (corepack enable pnpm), or it fails with
"pnpm was not found".latest when a release is
less than 24 h old — that is minimumReleaseAge, a supply-chain guardrail, not
a stale cache. Wait, or use a ^x.y.z range so the newer release arrives on
its own.A Typert Remote service, not an HTTP route. The host half registers one
TypertRemoteService named sessionDelete with describe and deleteSession.
The Gateway auto-claims every endpoint a live TypertRemoteService declares, and
the browser calls it over the ordinary channel:
ctx.connection.rpc.call('/api', `sessionDelete/${method}`, { args: { request } })
So there is no route to register and no permission to grant — the browser peer is the owner principal.
It deliberately does not check Origin. In the desktop app the renderer
origin is the custom scheme dsh-app://app, and the shell's protocol.handle
strips origin, host, cookie and sec-fetch-site before forwarding to the
Host. A plugin route that validates origin === 'http://' + host therefore 403s
every request from the desktop app while working fine under dsh web. The
Remote-service path avoids the question entirely.
The postcondition is checked against the disk. A successful rm is not
treated as proof; removeLog() stats the path afterwards and throws
delete/failed if it survived.
| Path | Role |
|---|---|
lib/index.js | Host half: TypertRemoteService, the delete sequence, registry release. |
lib/client.js | Browser half: the menu row and the shell.overlay confirmation dialog. |
cordis.patch.yml | Bundle patch named by dsh.bundle; inserts this plugin into a profile. |
locale/en.json, locale/zh.json | Plugin titles for the Plugins panel. |
The in-app dictionary lives in lib/client.js (zh is the key-set source of
truth, en is checked complete against it); locale/*.json is the metadata the
Plugins panel reads.
MIT — see LICENSE.