feat: Add functionality to delete session in history list view

[Abhijay007]

Closes: #3747

Pull Request Description

This PR introduces session deletion functionality with a confirmation modal in the UI. It replaces the previous IPC approach in the existing PRs with a backend endpoint-based approach (as per Zane’s comment in this PR here: #2803 (comment))

Changes Made

• Added a DELETE /sessions/{session_id}/delete endpoint with secure validation
• Added a trash icon button in SessionListView with a confirmation modal for deletion
• Updated logic to use session list validation (same as CLI) instead of the IPC approach

Preview

[zanesq]

Tested and works nicely. Couple of nits below

Path Construction:
PathBuf::from(&session_info.path) assumes the path is always valid. If session_info.path is ever malformed or points outside the intended directory, this can be a security risk (path traversal). Can you add sanitizing/validating for the session path?

I noticed there is a line break in the delete confirmation and it flashes the delete confirmation again with delete button active after clicking, can you make it disappear after its done without showing again? (see video).

Kapture.2025-09-02.at.15.12.36.mp4

[Abhijay007]

Hi @zanesq, I’ve resolved the requested changes. I removed PathBuf (a4a0954) for the path source and used the existing session::get_path() framework like in the other endpoints. This way we get the built-in framework validation, eliminate the path traversal risk, and maintain consistency across endpoints and the codebase.

I also updated the delete confirmation. However, could you please check again and let me know if it’s still happening? Maybe try deleting another chat to see if it reproduces. I’m not sure if it’s a title-related issue.

[zanesq]

Still seeing the line break in the confirmation dialog. The dialog still shows for a bit enabled when clicking it also but I guess its not a deal breaker if not an easy fix.

[Abhijay007]

Still seeing the line break in the confirmation dialog. The dialog still shows for a bit enabled when clicking it also but I guess its not a deal breaker if not an easy fix.

Yeah, I am not sure why it's there or what the possible cause as I haven't used a line break here:

goose/ui/desktop/src/components/sessions/SessionListView.tsx

Line 678 in c6672b2

message={`Are you sure you want to delete the session "${sessionToDelete?.metadata.description || sessionToDelete?.id}"? This action cannot be undone.`}

Probably due to <DialogDescription/> in confirmationModal, let me look into that

[Abhijay007]

Hi @zanesq , can you please try removing :

goose/ui/desktop/src/components/ui/ConfirmationModal.tsx

Line 37 in c6672b2

<DialogDescription className="whitespace-pre-wrap">{message}</DialogDescription>

The className="whitespace-pre-wrap" from <DialogDescription/> and see if the working, the thing is I tried that, but it was the same for me as it was (like there is no line break 😅), but I think it might solve this, so can you please try it once, and if that works, let me know. I will remove that