dsh-plugin-guard: An Install Safety Net for DeepSeek Harness

dsh-plugin-guard is an install safety net for DeepSeek Harness (DSH plugin), maintained by lxzy-7 under the MIT license, last updated in 2026-08. It addresses the problem where a bad plugin install can leave the app unable to boot, and manual fixing usually means digging through config files. This plugin automates the whole chain: pre-install snapshots, one-click/automatic rollback, guarded boot, and incident reports that auto-trigger agent analysis.

What detection mechanisms does the dsh-plugin-guard DSH plugin use?

Detection works at three levels and does not statically inspect plugin code. Snapshots are pure file copies, copying only 5 config files (package.json, pnpm-lock.yaml, etc.), without running any plugin. Boot-level detection does run the harness with your plugin loaded: the boot-guard script starts the whole dsh web process and health-checks HTTP / within a timeout. If boot fails, the guard automatically kills the tree, rolls back to the last good snapshot, and retries once. Runtime-only problems are not detected at install time, but when an incident occurs, dsh_rollback action=incident builds a problem-localization report (last boot logs, server stderr, and a diff of the profile config against the last good snapshot) and sets a pending marker so the next session automatically focuses on diagnosing it.

How to install dsh-plugin-guard?

From GitHub source (current):

dsh plugin --profile web add github:lxzy-7/dsh-plugin-guard

Or from the tarball stored in the repo:

dsh plugin --profile web add https://raw.githubusercontent.com/lxzy-7/dsh-plugin-guard/main/dist/dsh-plugin-guard-0.3.0.tgz

After installation, restart dsh web. This is a standard bundle plugin: it joins the profile layer stack and takes effect automatically.

How to enable guarded boot with dsh-plugin-guard?

It is strongly recommended to launch through scripts/boot-guard.ps1 (Windows) or scripts/boot-guard.sh (macOS/Linux) instead of running dsh web directly. Example on Windows, inside your launcher:

@echo off
set DSH_HOME=%~dp0.dsh-home
cd /d %~dp0
powershell -NoProfile -ExecutionPolicy Bypass -File node_modules\dsh-plugin-guard\scripts\boot-guard.ps1

What additional tools does dsh-plugin-guard provide?

The package ships a dsh-guard bin (scripts/guard-cli.js) that covers manual terminal installs. After fixing an incident, call incident_resolved to clear the pending marker.

What is the core philosophy of dsh-plugin-guard?

The guard never judges whether a plugin is "good". It guarantees that every mutation is reversible, boot failures roll back automatically, and incidents get analyzed instead of silently breaking your setup. Since a snapshot is always taken before any mutation, you can always roll back manually afterwards.

View more DSH plugins at dsh-plugin.org