dsh-rewind-plugin

English · 简体中文

Message recall for DeepSeek Harness: cut the conversation back to before a message you already sent.

A sent message cannot be edited or withdrawn. This plugin cuts the model-visible surface back to before a chosen user message, hides that message and everything after it in the transcript, and puts the original text back in the composer so you can correct it and send it again. Files the recalled turns changed are put back the way they were, and every displaced byte is kept in a quarantine you can look into and clear.

See it

The confirmation dialog before a recall: which files the recall will change, a real before/after diff for each one, and where the bytes that were in the way end up. Nothing is deleted.

What it adds

Surface	Where
Per-message recall icon	hover a user message in the transcript
/rewind	bare lists the recallable messages; /rewind <n> recalls one; /rewind plan <n> previews without doing it
Composer prefill	the recalled text returns to the input box, once per recall
Settings → Recall quarantine	its own page in Settings: every displaced file, grouped by session, discard per row or per session behind a confirm

The quarantine page registers into settings.section, the settings shell's own additive seat, so it sits beside the shipped General / Models / Plugins pages. A profile without the settings shell loses the page and nothing else.

Install

# from the registry
dsh plugin --profile web add @jochenyang/dsh-rewind-plugin

# or straight from the release tarball, no registry involved
dsh plugin --profile web add https://github.com/JochenYang/dsh-rewind-plugin/releases/latest/download/dsh-rewind-plugin.tgz

# or from the repository, built on install
dsh plugin --profile web add github:JochenYang/dsh-rewind-plugin

web is the shipped profile name — use whichever profile you run. Every form writes the package load it.

The official desktop client has no command for this. Its desktop profile is reserved for the Electron application, and the CLI refuses to touch it (error: profile "desktop" is managed exclusively by the Electron application). Install from inside the app instead: Settings → Plugins → Add plugin, enter @jochenyang/dsh-rewind-plugin under "Package name or address", install, and restart the app. That field also takes a Git address, a local directory or a .tgz, and the page says itself that a new plugin loads at the next start. load it.

peerDependencies deliberately declares no @deepseek-ai/dsh-* package. The installer compares every such peer against the running runtime version and refuses the install when it does not match, which would pin the plugin to one DSH release. This plugin needs nothing installed to run — the runtime packages below are already present in any DSH profile — so the check is skipped and any runtime version installs. The tradeoff is deliberate: a DSH release that breaks one of those interfaces will load the plugin and fail at that call, instead of being refused at install time.

Why nothing is lost

The session log is append-only and stays the source of truth. A recall appends one event carrying surfaceOp: { op: 'replace', startSeq, endSeq }, so the log keeps every event, and a reader that ignores surface ops still sees the full transcript.

Files are never unlinked. The bytes in the way move into $DSH_HOME/storages/dsh-rewind-plugin/quarantine/<session>/<slot>/ — with a manifest.json naming the original path — before the before-image is written back. A file the recalled range created is moved there rather than deleted.

What it needs at runtime

Resolved from the profile, never bundled:

@deepseek-ai/cordis, @deepseek-ai/dsh-commands, @deepseek-ai/dsh-session, @deepseek-ai/dsh-session-projection, @deepseek-ai/dsh-llm, @deepseek-ai/dsh-home-paths, @deepseek-ai/dsh-client-connection, @deepseek-ai/schemastery, zod.

The browser half requires only react, react/jsx-runtime, react-dom/client and @deepseek-ai/dsh-client-ui-primitives, all supplied by the shell's own module table. It does not list them in dsh.client.external because the shell already answers them.

Operational notes

• One writer per session. DSH takes a cross-process exclusive write lock per session, held for the life of a write handle. Two DSH processes that share $DSH_HOME therefore cannot both write the same session: the second one's command execution is refused with session/writer-held, and a recall reports that the request never reached the kernel. Reading a session from a second instance is fine and different sessions never conflict — close it in the other window, or work in another session.
• A recall needs an idle agent. A running turn is refused rather than raced, because cutting mid-turn would leave that turn's tool results without their call.

Known limits

• A file changed by a shell command, or by any tool that writes through its own filesystem handle, never passes the fs/write-intent / fs/edit-intent waterfalls. Those changes cannot be reverted, and both the confirmation dialog and the result say so instead of claiming a clean revert.
• The placeholder is an empty user/message. The DeepSeek provider's request path drops an empty user message, so it contributes no model-facing turn there; a provider that does not drop empty user content would see one extra empty message per recall.

Development

npm install
npm run build      # lib/index.js + lib/client.js
npm run typecheck
npm test           # bundles tests/*.test.ts with esbuild, then node --test

npm run build marks @deepseek-ai/*, @cordisjs/*, react, react-dom and zod external, and wraps the browser half in the window.__ModuleLoader__.load({ id, factory }) closure the web client loads. Never bundle an @deepseek-ai/* package: a second copy breaks class identity against the running host.

lib/ is committed, so dsh plugin add github:JochenYang/dsh-rewind-plugin installs without a build step — pnpm refuses to run a git dependency's build script unless the installing profile allowlists it. Run npm run build after changing src/; prepublishOnly does the same before a registry release.

Layout

Path	What lives there
src/index.ts	the host half: /rewind, the write recorder, the snapshot/revert path
src/cut.ts	the recall computation — anchors, the replacement range, the placeholder
src/projection.ts	the rewindAnchors projection, the client's whole read face
src/routes.ts, src/quarantine.ts, src/snapshots.ts	the quarantine routes, listing/purge, and the before-images
src/recorder.ts	which file change belongs to which turn
src/wire.ts	the payload shapes and error codes both halves share
src/client.ts	the client half: icon, picker, prefill, hidden turns, the Settings page
src/client/	the components, dictionaries and the injected stylesheet
cordis.patch.yml	the one insert row that mounts the plugin

Changelog

Every release is documented in CHANGELOG.md, following Keep a Changelog 1.1.0. Version numbers follow Semantic Versioning 2.0.0. A Chinese mirror lives in CHANGELOG.zh-CN.md.

License

MIT