Introduction¶
The core design of DeepSeek Harness (DSH) is “everything is a plugin.” As projects scale, complex environment dependencies, version confusion, and the lack of pre-installation static checks often lead to environment failures. The official plugin manager handles basic bundle and configuration page hosting, but there are gaps in areas such as pre-installation quality gates, deep environment diagnostics, and the plugin marketplace.
dsh-plugin-manager-companion is a companion tool to the official plugin manager, designed to fill these gaps. It provides pre-installation quality gating, five-layer environment diagnostics, plugin marketplace and skill preset management, as well as safe and reliable upgrade workflows.
Plugin Overview¶
- Name:
dsh-plugin-manager-companion - Maintainer: LX2000WASD
- Core Value: Pre-installation quality gate, environment diagnostics, plugin marketplace and skill presets, upgrades
- Positioning: A companion tool to the official plugin manager. Write operations are performed through official channels; it does not directly invoke pnpm or modify
cordis.patch.yml.
Core Capabilities¶
Pre-Installation Quality Gate¶
Adds static check steps to the official installBundle flow:
1. Scan the candidate package spec and confirm references.
2. The official process installs it without activating it (enabled: false).
3. Detect issues such as undeclared imports, declared-but-not-installed packages, official packages declared as regular dependencies causing duplicate copies, and entry resolution failures.
4. Activate it if it passes; roll back if it does not.
Trial installation is disabled by default. When enabled, the candidate package is first installed and started in a <environment-name>-dpmc test environment, and only moved to the real environment after passing. Test environments are retained for 14 days by default.
Environment Console¶
Three subpages are provided through the settings page entry:
- Health Check: Five-layer diagnostics (L1 dependencies, L2 bundles, L3 runtime, L4 consistency, L5 ecosystem). The L5 ecosystem layer does not connect to the network and does not make judgments; it displays “Not checked.” Each finding includes evidence and remediation recommendations.
- Environment: Manage all local profiles (start, stop, rename, delete, cross-environment copy, backup export).
- Settings: The plugin’s own configuration.
Plugin Marketplace and Skill Presets¶
- Displays the community index, supports search by name, repository, topic, and description, and sorting by star count and update time.
- Cards highlight risk level and installability.
- Details display validation conclusions and risk breakdowns.
- Manages SKILL.md and agent presets, with support for viewing installation records and re-fetching.
Upgrades¶
- View the version status of the official runtime, experimental packages, and this plugin on the “About” page.
- Supports manual or on-demand update checks.
- Upgrades are verified in a test environment before being applied; versions that do not pass verification do not enter the real environment.
Installation and Enablement¶
This plugin requires DSH version 0.1.6-alpha.2 or higher.
The installation command is as follows:
dsh plugin --profile <name> add dsh-plugin-manager-companion@latest
After installation, you need to enable the plugin on the plugin management page and restart the corresponding profile.
Command-Line Operations¶
The plugin provides the CLI tool dshpmc for executing operations in scripts, CI pipelines, or when the UI is unavailable.
- Five-Layer Health Check:
dshpmc analyze --profile <name>
Performs a full health check on the environment; the exit code is 1 when issues are found.
- List Components:
dshpmc list --profile <name>
Displays bundles, dependencies, installed skills, and presets.
- Common Operations:
dshpmc install | remove | update | mount | uninstall-kind
Notes¶
- Permissions and Security: The plugin runs with the permissions of the current DSH process. Always check the source code and license before installation, and avoid performing installation in untrusted environments.
- Known Limitations:
- Quality gate rollback may fail (for example, if the official system refuses to remove a protected bundle); manual remediation of leftovers may be required.
- The installation guard only intercepts agent tool calls and cannot intercept commands manually typed in the terminal.
- Environment variable sensitive-key filtering is based on pattern matching and is not exhaustive; sensitive keys may still be passed to child processes.
- The L5 ecosystem layer does not connect to the network and does not make judgments.
- L3-layer registered name conflicts only cover profile-local packages and do not scan the official scope.
- Port information is only available when the instance command line includes
--port; the default port displays as “Unknown.”
Summary¶
dsh-plugin-manager-companion reduces failure rates in DSH environment maintenance through quality gates and five-layer diagnostics, and standardizes plugin acquisition and update workflows through the marketplace and upgrade mechanism. It is suitable for developers who require strict environment management or build automated CI pipelines.
