DSH Plugin Gating Hub: Framework Upgrade Security and Plugin Version Gating

Introduction

The DSH framework adopts the philosophy of “everything is a plugin.” When iterating framework versions or managing plugins, upgrade failures or version incompatibilities often lead to service interruptions, and existing management approaches lack strict validation for supply chains and compatibility. DSH Plugin Gating Hub (formerly dsh-plugin-hub) aims to solve these problems by providing safety guarantees for framework upgrades and a plugin version gating mechanism.

Plugin Introduction

This is an upgrade safety and plugin version management plugin designed for the DSH framework. It is maintained by Noob-stupid and uses the MIT License. The core value of the plugin is: automatic rollback on upgrade failure, a built-in multi-source plugin marketplace, and strict detection of supply chain changes.

Core Features

Framework Upgrade Safety

The plugin provides one-click upgrade capability, including configuration backup and full-tree rollback points. If an upgrade fails during the process, the system automatically rolls back the entire tree; it also has a built-in 15-minute hard timeout detection to prevent hung processes.

Environment Fingerprint Detection

For framework changes caused by the official desktop updater or manual pnpm, the plugin identifies differences through environment fingerprint detection. It only force-disables plugin entries when there is hard evidence (such as package resolution failure, missing file:// targets, or mentions in startup failure logs); core plugin entries will not be disabled by mistake.

Plugin Upgrade Gating

It supports version and declaration gating (such as dsh.engines.framework and @deepseek-ai/* ranges), with a built-in zero-dependency semver engine. Installation scripts do not auto-authorize, and pnpm’s supply chain gating cannot be bypassed, ensuring that upgrades do not silently introduce incompatible components.

Contract Pre-check and Rollback Points

Before installation, it performs data-driven contract pre-checks (message contracts, dependency APIs, configuration Schema, etc.) and generates full-tree rollback points, providing a foundation for abnormal recovery.

Multi-source Plugin Marketplace

It includes a built-in discovery layer, supporting 500+ plugins and 300+ skills. It supports custom sources, including private intranet registries, custom search sources, self-hosted index sources, and local Git repositories, enabling plugin browsing and installation in purely intranet or offline environments.

Installation and Enablement

Use the official installation command to add the plugin:

dsh plugin --profile web add @noob-stupid/dsh-plugin-console

After installation is complete, restart the dsh service, refresh the page, and navigate to Settings -> Plugins -> Plugin Console.

Typical Usage

In the plugin console, you can perform plugin installation, upgrade, and adaptation operations. If an upgrade fails, click the “Rollback to Previous Version” button. The system will stop the service and restore the full tree, ensuring the environment quickly returns to a stable state.

Applicable Scenarios and Notes

This plugin is suitable for administrators who need strict control over framework upgrade risks and internal plugin ecosystem management. The plugin runs with the permissions of the current dsh process. It is recommended to review the source code and license before installation. Note that this is an unofficial community project. Both Web and Desktop are supported, and the installation script does not have auto-authorization capability.

Conclusion

DSH Plugin Gating Hub reduces the trial-and-error cost of DSH framework upgrades through automatic rollback and environment fingerprint detection. For more details and source code, refer to the project homepage.

羽毛球分组比赛记分
小程序二维码

欢迎使用《羽毛球分组比赛记分》微信小程序

Xiaoye