dsh-hotplug-engine

DSH loads and unloads plugins through cordis.patch.yml and its built-in loader, but the real workflow scatters across manual file edits, pnpm invocations, and post-install health checks with no single programmatic entry point. dsh-hotplug-engine wraps all of these steps into one service: patch modification, pnpm execution, post-install health verification, automatic rollback on failure, and end-to-end audit logging - a pipeline that only touches files and shell commands without altering the DSH kernel.

At its core the engine can toggle any patch line in both flow and block YAML, automatically rolls back when an install fails, and enforces a DSH default-disabled gate (a lock badge in the UI plus a HOTPLUG.PATCH.DEFAULT_DISABLED API error). Three integration paths are provided: host plugins inject the hotplugEngine service and call install, rollback, enable, and other methods directly; REST endpoints under the /api/dsh-hotplug prefix handle reads, writes, and SSE event streams; and agent-facing hotplug_* tools cover status, install, uninstall, toggle, rollback, and audit, with all write operations gated behind an approval step.

The plugin is aimed at teams and developers who need programmatic, auditable control over DSH plugins: marketplace and admin-panel builders, orchestration layers that install or remove plugins dynamically inside agent sessions, and host-plugin authors who require rollback-safe, fully logged plugin lifecycle operations.