DSH-Store

The DeepSeek Harness ecosystem is growing fast, yet third-party plugins are scattered across repositories with no unified install entry point, no pinned-source guarantee, and no safety net when something breaks. DSH-Store fills that gap: it is a third-party plugin marketplace and guarded lifecycle manager that lives inside the DSH settings page, giving you a single surface to discover, vet, install, update, migrate, enable, disable, and uninstall plugins without ever leaving DSH.

Two pillars define its capability. First, a verifiable supply chain: every plugin is pinned to a 40-character Git Commit—floating branches and raw npm URLs are rejected outright. Each catalog entry carries a four-level evidence trail (Discovered → Installable → Runtime Verified → Security Reviewed), and a permission profile spells out file, network, command, and credential scopes. Promotion badges never elevate an evidence level; the directory enforces promotionIndependentOfVerification as a hard policy. Second, a transactional safety loop: every mutating operation produces a one-shot plan that displays the target Profile, fixed Commit, lifecycle scripts, affected files, and an exact confirmation sentence. Before execution the manager checks the Profile file hash and acquires a file lock; it backs up beforehand, validates config synthesis and cold-start entry-point uniqueness afterward, and rolls back automatically on failure. Bundled with the marketplace is a standalone DSH Guardian driven by macOS launchd outside the DSH process. It treats a healthy instance as one where the homepage HTTP, the /api2 runtime identity, and the Boot ID all agree, enforces bounded restarts with a circuit breaker, and claims exclusive startup ownership of the web Profile—so a crash does not become a manual recovery exercise.

If you run DeepSeek Harness 0.1.x pre-release builds, want to manage third-party plugins with pinned sources and full rollback, or need a process-level watchdog for a local DSH web instance, DSH-Store is the natural fit. It never modifies DSH source code, never replaces official @deepseek-ai packages, and drives every package operation through the official DSH CLI with a fixed parameter array. It is built for individual developers and small teams who treat supply-chain integrity and recoverability as non-negotiable.