dsh-cli-store

The DSH ecosystem already has plugin marketplaces, but they install bundles - not the bare binaries like gh, rg, jq, or ffmpeg that live outside the Harness. dsh-cli-store closes that gap: it organizes 64 curated CLI entries plus 59 Homebrew-backed extensions into a queryable catalog so an agent can locate, diagnose, and install external tools during a conversation.

Seven tools form the core: search and list the current platform catalog, discover from npm, GitHub, Homebrew, and crates.io through bounded adapters, read locally saved discoveries offline, install only source-verified entries after confirmation, check whether a catalogued CLI responds to its version flag, and show an install plan that executes only after explicit confirmation. Every write action defaults to dry-run, child processes use shell: false, package-manager commands are allowlisted, and network discovery results are marked unreviewed by default - so an agent never treats unaudited data as executable instructions.

It is built for two audiences: developers already running DeepSeek Harness agent workflows who want the agent to manage external CLI dependencies autonomously, and engineering teams that need a controlled, auditable CLI catalog without building their own marketplace. Adding a new entry means appending one record to registry.json and writing platform-selection and installer-command tests, keeping the barrier to contribution low.