Checks a DSH profile manifest for JSON errors and dependency/bundle/patch mismatches, reads recent startup crash logs (Windows DSH Desktop only), and can back up or roll back the manifest files.
Install
# from a prebuilt release tarball
dsh plugin --profile web add "https://github.com/474885697-alt/dsh-kit/releases/download/v0.1.0/dsh-kit-guardian-0.1.0.tgz"
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:474885697-alt/dsh-kit#path:/plugins/dsh-kit-guardian
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
This plugin publishes its README in Chinese only.
DSH 清单体检 + 备份 + 回滚：装插件炸掉之前先看一眼。
版本 0.1.0 ｜ 包名 dsh-kit-guardian ｜ 仅宿主侧（无客户端代码）｜ MIT
它解决什么问题
插件清单坏一次，应用就连启动界面都进不去（裸 JSON.parse 直接抛错）。这三件事能在 30 秒内把状态说清楚。
体检覆盖：BOM / 尾逗号、dependencies 与 bundles 不一致、bundle 是否可解析、cordis.patch.yml 孤立行、最近启动崩溃。
备份与回滚都先校验清单 JSON，坏文件不会覆盖好文件。
安装
plugin_manager install_bundle target="C:/Users/03/Documents/deepseek-harness/default-workspace/plugins/dsh-kit-guardian"
装完即可用，工具会出现在工具列表里；用 plugin_health 可以体检清单。要卸载就用插件页的开关。
工具
| 工具 | 用途 | 参数（* 表示必填，? 表示可选） |
|---|---|---|
plugin_health |
体检 profile：清单 JSON、依赖与 bundles 一致性、孤立补丁行、最近崩溃 | profile? string |
plugin_backup |
备份 profile 的 package.json 与 cordis.patch.yml，返回备份 id | profile? string |
plugin_rollback |
用备份恢复 profile（先校验备份清单，当前状态自动再备份） | backup stringprofile? string |
用法示例
示例：体检
plugin_health(profile="desktop")
# → { score: 85, issues: [{ code: "recent-crash", … }], counts: { dependencies: 35, bundles: 43 } }
示例：备份 → 出问题 → 回滚
plugin_backup(profile="desktop") # → 备份 id
plugin_rollback(backup="2026-11-07T14-30-00Z-desktop") # 当前状态会先自动备份
HTTP 路由（仅本机 loopback）
| 方法 | 路径 | 说明 |
|---|---|---|
| GET | /api/dsh-kit-guardian/scan |
?profile=<名字>，体检清单与最近崩溃 |
| GET | /api/dsh-kit-guardian/backups |
列出备份 id |
| POST | /api/dsh-kit-guardian/backup |
body:{"profile":"desktop"}，立即备份一份 |
配置
- 无需配置。备份位置：
~/.dsh/dsh-kit-guardian/backups/<时间戳>-<profile>/。
数据存在哪
- 备份目录同上；每份含
package.json与cordis.patch.yml。
安全边界
- 备份/回滚只接受已知 profile 名，路径不拼接用户输入。
- 回滚前先
JSON.parse备份清单，解析失败直接拒绝。 - 路由只允许 loopback。
已知行为
- 「最近崩溃」只看最近 6 份日志，历史崩溃会一直提示，直到日志被清理。
验收
- 对实机 desktop profile 体检得分 85，仅历史 crash 警告；回滚流程在副本 profile 上验证通过。
宿主兼容性
- Web / 桌面宿主：HTTP 路由与工具都可用。
- headless / CLI（没有 webServer 服务）：路由自动跳过，工具照常注册。
Links
More in this category
yjh051108/dsh-routing-suite★ 6994
One repository, three parts: a runtime injector for DSH plugin packages (inject, hot-reload, unload, promote a dev staging tool to the front, route self-heal, plus a settings-page plugin manager that lists, unloads and drags folders in to internalize), a task-aware reasoning-mode router agent preset (router-standard / router-spec / router-react), and a graded two-level task protocol whose six tools (commit_star, lock_stage, revise_do, edit_plan, mark_task, redteam_verdict) pin task state to disk. The injector implementation ships in-tree, so the install carries its own behaviour rather than a dependency list.
strukto-ai/mirage#dsh★ 3762
Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted resources (RAM, S3, Redis, Slack, Gmail, Notion, Postgres) instead of the host disk, with per-mount read/write/exec modes, per-command sandbox routing (monty, pyodide, quickjs in process; docker, e2b, daytona remote), and installed CLIs (git, gh, slack, linear, ntn, gws, or one you register) as head words in the virtual terminal.
first-fluke/oh-my-agent#dsh★ 1357
Runs project OMA checks before and after tool execution and when a turn tries to finish. Installs its OMA CLI dependency and initializes unconfigured projects on first use. Requires Node.js 22+; initial setup needs network access and project write access.
MichengAI/dsh-skills-manager★ 444
Manages local DeepSeek Harness skills in Settings and shows shared Agent skills as read-only.
hust-open-atom-club/oh-dsh★ 324
Community distribution: TUI, desktop, and Web UI as one bundle with layered installation.
Fishquito7/dsh-skill-mcp-panel★ 248
Manages DSH skills and MCP servers from the web settings: skill cards with hot enable/disable, workspace scopes, groups, batch migration and drag-and-drop import, plus stdio/HTTP MCP CRUD with connection tests, secret redaction and the unified dsh-panel CLI.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.