dsh-plugin-guard

dsh-plugin-guard addresses one of the most stressful failure modes in a plugin-based environment: a bad plugin change can prevent DeepSeek Harness from booting, render the web client unusable, or leave you manually digging through configuration files to recover. Rather than statically judging whether plugin code is safe, it focuses on recoverability: it takes configuration snapshots before changes, guards the boot process with health checks, rolls back automatically when startup fails, and preserves incident information for later analysis.

Its core capabilities include pre-change snapshots, guarded boot, automatic and manual rollback, and incident reporting. The guarded boot process actually starts the harness with installed plugins and verifies both server health and client rendering, allowing it to catch load errors, startup crashes, unresponsive services, and black-screen failures. If rollback and retry still cannot restore a working environment, it can identify the offending plugin from boot logs, quarantine it, and boot without it. Together with the backup manager in settings, agent tools, and a local CLI, it gives users a practical recovery path even when the app cannot start normally.

This plugin is well suited to users who frequently install, test, or distribute DeepSeek Harness plugins, as well as teams that want their agent environment to be more resilient. It is especially useful for anyone who wants plugin changes to remain reversible, startup failures to be handled automatically, and post-incident diagnosis to be structured rather than improvised.