dsh-install-guard

Readme

# dsh-install-guard · Plugin Install Guard

Pre-install compatibility guard for DeepSeek Harness plugins. Before you download/install a marketplace plugin, it checks whether the plugin is compatible with your running DeepSeek Harness — and prevents the "version mismatch → service crash / won't boot" failure.

Once installed, it registers a model tool `plugin_install_guard` so the Agent can run the check before installing.

## Checks

| Check | Description |
|---|---|
| `engines.node` | plugin's Node requirement vs current Node |
| `@deepseek-ai/*` peers | peer/dependency ranges vs resolved versions |
| `dsh` manifest | whether `dsh.bundle.patch` / `dsh.client` is declared |
| isolated trial boot (opt-in `trial=true`) | install into a throwaway profile + `--dump-config`, actually runs `apply` to catch runtime/load-time crashes |

## Install

```sh
dsh plugin --profile web add dsh-install-guard
```

Restart `dsh web`.

## Usage (two-phase, via chat)

```
1) check:
   plugin_install_guard { spec: "plugin-name", action: "check" }   # add trial: true to run apply
2) install after confirming:
   plugin_install_guard { spec: "plugin-name", action: "install", resolution: { spec: "plugin-name@compatible" } }
```

## Relation to other plugins

- `dsh-doctor` = environment health; this plugin = version compatibility.
- `dsh-poison-guard` / `DSH-Plugin-Market` = security/audit; this plugin = compatibility.

Use them together: security audit + compatibility preflight = the full pre-install gate.

## Limitations

- Actively-triggered tool, not an automatic hook on the marketplace install button.
- Static checks + trial boot reduce but cannot eliminate all third-party-code risk.

## License

MIT