dsh-archived-chats 1.1.0 → 1.1.1

package/README.md

@@ -58,7 +58,7 @@ dsh plugin --profile web update dsh-archived-chats
 | **Read-only preview** | Native conversation layout for Markdown, reasoning, tool activity, JSON, code, and available stored images, with responsive turn navigation. |
 | **Local History** | Validated versions captured after archive, read-only snapshot preview, confirmed deletion, clear-history, and **Restore as copy** without overwriting the source. |
 | **Backup and restore** | JSON + Markdown ZIP export with preview-first, conflict-safe import. Existing session IDs are never overwritten. |
-| **Recoverable deletion** | Snapshot-protected Recycle Bin with immediate Undo, two-level restore, and separately confirmed permanent deletion. |
+| **Recoverable deletion** | Snapshot-protected Recycle Bin with immediate Undo, two-level restore, separately confirmed permanent deletion, and an optional direct permanent-delete action for users who do not need recovery. |
 | **Storage and relationships** | Separate storage accounting, preview-first retention policies, and read-only Origins & Branches for forks and subagent trees. |
 
 ## Safety by design

package/docs/ARCHITECTURE.en.md

@@ -128,6 +128,8 @@ Protection manifests use `dsh-archived-chats/snapshot` v1 and session payloads u
 
 Move ordering is: validate archive ownership → dispose or park a live session → capture and verify snapshot → recheck ownership → atomically commit `trashed` → invalidate caches. Ordinary move never removes the persistence artifact.
 
+Archived sessions also expose an explicit direct permanent-delete action. It uses the same session-scoped physical-delete checks and crash-recovery bracket as Recycle Bin purge, but intentionally skips snapshot creation and recycle storage after a separate irreversible confirmation. Ordinary delete remains recoverable by default.
+
 Restore first rejects an existing-ID conflict. With an intact original it restores archive visibility and removes only the recycle record, without rewriting persistence; the snapshot remains history. With a missing original it completes validation and attachment-identity republishing before writing through public `create` / `append` / `saveImage` capabilities. A failure rolls back the new artifact and retains trash.
 
 Permanent purge persists `purge-pending` before physical writes, then removes every snapshot for that source, then the original session, and finally the recycle record. The session delete is deliberately last: a failure before it leaves the original intact and the record completable, rather than a `purge-pending` record whose session is already gone and which can therefore neither restore nor complete. The snapshot sweep attributes each published snapshot by manifest identity so a snapshot that fails validation is still removed when it belongs to this session, and an unrelated unverifiable snapshot is skipped instead of aborting the sweep — corruption elsewhere in the store must never make a purge impossible. The recycle record also names its own snapshot id, covering one damaged past attribution. Workspace, metadata, snapshot, or physical-delete failures retain `purge-pending`; snapshot deletion is rescanned before success can be returned. Physical deletion additionally requires the located artifact to sit in a directory named for the session itself, so a backend layout that shares one parent between sessions can never have that parent removed. Startup recovery retries only `purge-pending`, never plain `trashed`. Legacy `pending-deletions.json` is strict read-only migration input: each still-archived ID becomes recoverable trash and is never boot-deleted merely because of the old marker.

package/docs/ARCHITECTURE.md

@@ -160,7 +160,7 @@ client.js 注册 order 30 的 `settings.section` 与 `shell.overlay`，并使用
 - 历史响应不包含工作区/快照/附件路径、原始事件、备注或确认 token；日志只记 ID 和稳定代码。
 - 工作区归档响应只公开安全的工作区 ID/标题、符合条件数量、已确认预览中的会话 ID/标题/时间和稳定的逐项结果；工作区路径、事件正文、备注、附件路径与确认凭据不会进入日志或渲染结果。
 - 导入限制 ZIP 大小、条目数量、路径格式、版本和 JSON 结构，拒绝遍历、重复和原型污染字段。
-- 普通删除从不调用物理清除；仅已提交回收记录可进入 purge。
+- 普通删除从不调用物理清除；仅已提交回收记录可进入 purge。归档列表还提供单独确认的直接永久删除操作，跳过快照和回收站，但复用同一套会话目录边界、崩溃恢复和失败保护；普通删除仍默认可恢复。
 - 快照和回收文件使用 `0600`，目录使用 `0700`；快照文件在 sync 前以可写句柄重新打开，发布顺序为临时写入、sync、原子 rename，以保持 Windows、macOS 和 Linux 的持久化语义一致。
 - 物理 purge 删除快照副本，但不承诺立即清理 Harness 全局附件库中仍被其他会话引用的字节。
 - 未知宿主能力必须降级或返回明确错误，不得猜测内部对象结构。

package/lib/client.js

@@ -418,6 +418,7 @@ window.__ModuleLoader__.load({
 			"chat.unarchive": "取消归档",
 			"menu.unarchiveAll": "全部取消归档",
 			"menu.deleteAll": "全部移至回收站",
+			"menu.deletePermanently": "全部永久删除",
 			"group.collapse": "折叠",
 			"group.expand": "展开",
 			"confirm.deleteOne.title": "移至回收站？",
@@ -425,6 +426,9 @@ window.__ModuleLoader__.load({
 			"confirm.deleteAll.title": "全部移至回收站？",
 			"confirm.deleteGroup.title": "将该项目下的已归档聊天移至回收站？",
 			"confirm.deleteSelected.title": "将选中的已归档聊天移至回收站？",
+			"confirm.permanent.title": "直接永久删除已归档聊天？",
+			"confirm.permanent.body": "这些聊天不会进入回收站，删除后无法恢复。",
+			"confirm.permanent.confirm": "永久删除",
 			"confirm.cancel": "取消",
 			"confirm.delete": "移至回收站",
 			"trash.restore": "恢复",
@@ -718,6 +722,7 @@ window.__ModuleLoader__.load({
 			"chat.unarchive": "Unarchive",
 			"menu.unarchiveAll": "Unarchive all",
 			"menu.deleteAll": "Move all to Recycle Bin",
+			"menu.deletePermanently": "Delete all permanently",
 			"group.collapse": "Collapse",
 			"group.expand": "Expand",
 			"confirm.deleteOne.title": "Move to Recycle Bin?",
@@ -725,6 +730,9 @@ window.__ModuleLoader__.load({
 			"confirm.deleteAll.title": "Move all to Recycle Bin?",
 			"confirm.deleteGroup.title": "Move this project's archived chats to Recycle Bin?",
 			"confirm.deleteSelected.title": "Move selected archived chats to Recycle Bin?",
+			"confirm.permanent.title": "Permanently delete archived chats directly?",
+			"confirm.permanent.body": "These chats will skip the Recycle Bin and cannot be recovered after deletion.",
+			"confirm.permanent.confirm": "Delete permanently",
 			"confirm.cancel": "Cancel",
 			"confirm.delete": "Move to Recycle Bin",
 			"trash.restore": "Restore",
@@ -4037,6 +4045,38 @@ window.__ModuleLoader__.load({
 				}
 			};
 
+			const runPermanentDelete = async (ids, finishSelectionAfter = false) => {
+				if (ids.length === 0) return;
+				markBusy(ids, true);
+				setNotice(null);
+				try {
+					const result = await post("/delete-all", { sessionIds: ids, permanent: true });
+					const deleted = uniqueSessionIds(result.deleted);
+					const failed = result.failed ?? [];
+					if (deleted.length > 0) {
+						setSessions((prev) => (prev ?? []).filter((s) => !deleted.includes(s.id)));
+						setSelected((current) => setVisibleSelection(current, deleted, false));
+						setTrash((current) => ({ ...current, status: "idle" }));
+						refreshSidebar?.();
+					}
+					if (failed.length > 0) setNotice({ kind: "error", text: failureText(t, failed) });
+					else if (deleted.length > 0) setNotice({ kind: "ok", text: t("trash.purged") });
+					if (finishSelectionAfter && failed.length === 0 && deleted.length === ids.length) finishSelectionMode();
+				} catch (error) {
+					const deleted = uniqueSessionIds(error.body?.deleted);
+					const failed = error.body?.failed ?? [];
+					if (deleted.length > 0) {
+						setSessions((prev) => (prev ?? []).filter((s) => !deleted.includes(s.id)));
+						setSelected((current) => setVisibleSelection(current, deleted, false));
+						refreshSidebar?.();
+					}
+					setNotice({ kind: "error", text: failed.length > 0 ? failureText(t, failed) : String(error.message ?? error) });
+				} finally {
+					markBusy(ids, false);
+					setConfirm(null);
+				}
+			};
+
 			const undoTrashMove = async (ids) => {
 				const requested = uniqueSessionIds(ids);
 				if (requested.length === 0) return;
@@ -4073,6 +4113,18 @@ window.__ModuleLoader__.load({
 				}
 			};
 
+			const askPermanentDelete = (ids, finishSelectionAfter = false) => {
+			if (ids.length === 0) return;
+			deleteReturnFocusRef.current = document.activeElement;
+			setConfirm({
+				title: t("confirm.permanent.title"),
+				body: `${t("confirm.permanent.body")} ${isZh(t) ? `共 ${ids.length} 个聊天。` : `${ids.length} chats selected.`}`,
+				ids,
+				permanent: true,
+				finishSelectionAfter,
+			});
+		};
+
 			const openMetadataEditor = (session) => {
 				metaReturnFocusRef.current = document.activeElement;
 				setMetadataEdit(session);
@@ -4379,7 +4431,10 @@ window.__ModuleLoader__.load({
 												onClick: () => setActionMenu((current) => current === "more" ? null : "more"),
 												children: [(0, jsx.jsx)(IconDots, {}), (0, jsx.jsx)("span", { children: t("action.more") })]
 											}),
-											actionMenu === "more" && (0, jsx.jsx)("div", { id: "dac-more-actions", className: "dac-action-menu", children: (0, jsx.jsx)("button", { type: "button", className: "dac-action-menu-item dac-danger", onClick: () => { setActionMenu(null); askDelete(allIds, void 0); }, children: t("delete.all") }) })
+							actionMenu === "more" && (0, jsx.jsxs)("div", { id: "dac-more-actions", className: "dac-action-menu", children: [
+								(0, jsx.jsx)("button", { type: "button", className: "dac-action-menu-item dac-danger", onClick: () => { setActionMenu(null); askDelete(allIds, void 0); }, children: t("delete.all") }),
+								(0, jsx.jsx)("button", { type: "button", className: "dac-action-menu-item dac-danger", onClick: () => { setActionMenu(null); askPermanentDelete(allIds); }, children: t("menu.deletePermanently") })
+							] })
 										] })
 										]
 									}),
@@ -4529,7 +4584,14 @@ window.__ModuleLoader__.load({
 										className: "dac-bulk-btn dac-danger",
 										disabled: selectedBusy,
 										onClick: () => askDelete(selectedIds, null, true),
-										children: t("bulk.delete")
+											children: t("bulk.delete")
+										}),
+									(0, jsx.jsx)("button", {
+										type: "button",
+										className: "dac-bulk-btn dac-danger",
+										disabled: selectedBusy,
+										onClick: () => askPermanentDelete(selectedIds, true),
+										children: t("menu.deletePermanently")
 									}),
 									(0, jsx.jsx)("button", {
 										type: "button",
@@ -4683,12 +4745,12 @@ window.__ModuleLoader__.load({
 					confirm !== null && (0, jsx.jsx)(ConfirmDialog, {
 						title: confirm.title,
 						body: confirm.body,
-						confirmLabel: t("confirm.delete"),
+						confirmLabel: t(confirm.permanent ? "confirm.permanent.confirm" : "confirm.delete"),
 						cancelLabel: t("confirm.cancel"),
 						busy: confirm.ids.some((id) => busy[id] === true),
 						returnFocus: deleteReturnFocusRef.current,
 						fallbackFocusRef: pageHeadingRef,
-						onConfirm: () => runDelete(confirm.ids, confirm.finishSelectionAfter === true),
+						onConfirm: () => confirm.permanent ? runPermanentDelete(confirm.ids, confirm.finishSelectionAfter === true) : runDelete(confirm.ids, confirm.finishSelectionAfter === true),
 						onCancel: () => setConfirm(null)
 					}),
 					trashConfirm !== null && (0, jsx.jsx)(ConfirmDialog, {

package/lib/index.js

@@ -1729,6 +1729,24 @@ function registerRoutes(ctx, webServer, registry, persistence, titleCache, metad
                 send(res, 400, { error: batch ? 'sessionIds-required' : 'sessionId-required' });
                 return;
             }
+            if (body.permanent === true) {
+                const deleted = [];
+                const pending = [];
+                const failed = [];
+                for (const id of [...new Set(ids)]) {
+                    try {
+                        const outcome = await deleteSession(ctx, registry, persistence, id, titleCache, statsService, metadataStore, pendingStore, lifecycle);
+                        if (outcome === 'deleted') deleted.push(id);
+                        else if (outcome === 'pending') pending.push(id);
+                        else failed.push({ id, reason: 'operation-cancelled' });
+                    } catch (error) {
+                        failed.push({ id, reason: error?.code ?? 'delete-failed' });
+                    }
+                }
+                const result = { deleted, pending, failed };
+                send(res, failed.length > 0 && deleted.length === 0 ? 409 : 200, { ok: failed.length === 0, ...result });
+                return;
+            }
             const result = await recycleService.move(ids);
             send(res, result.failed.length > 0 && result.trashed.length === 0 ? 409 : 200, { ok: result.failed.length === 0, ...result });
         } catch (error) {

package/lib/persistence-compat.js

@@ -10,7 +10,7 @@ function objectLike(value) {
 
 function validatedHeader(value, expectedId) {
   if (!objectLike(value)
-    || value.version !== 2
+    || (value.version !== 2 && value.version !== 3)
     || typeof value.id !== 'string'
     || value.id === ''
     || (expectedId !== undefined && value.id !== expectedId)
@@ -113,7 +113,8 @@ export function resolvePersistenceCompat(raw) {
           throw invalid('persistence read handle metadata is invalid');
         }
         if (handle.inheritedEventCount > 0) throw inspectionUnsupported();
-        const events = await handle.read.call(handle, 0, undefined);
+        const slice = await handle.read.call(handle, 0, undefined);
+        const events = Array.isArray(slice) ? slice : slice?.events;
         if (!Array.isArray(events)) throw invalid('persistence read response must be an event array');
         return { meta: header, events };
       } finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-archived-chats",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "description": "DeepSeek Harness 会话档案：从设置中安全批量归档工作区会话，按工作区浏览和全文搜索归档聊天，原生只读预览对话、工具活动和已存储图片，管理标签备注与 ZIP 备份恢复；保留历史版本并恢复为副本，提供可撤销回收站、空间分账、保留策略和来源与分支。所有数据留在本机。 Session Archive for DeepSeek Harness: safely bulk-archive workspace chats from Settings; browse and full-text search archived chats; natively preview conversations, tool activity, and stored images read-only; manage tags, notes, and ZIP backup restore; retain local History with restore-as-copy, an undoable Recycle Bin, storage accounting, retention policies, and Origins & Branches. All data stays local.",
   "license": "MIT",
   "author": "Ultronen",