dshget-plugin

When you find yourself constantly switching to a browser to search a plugin catalog, read detail pages, and copy install commands back into your DSH session, the round-trip breaks your flow and depends on continuous network access. DSH Get Plugin folds that entire workflow into the same DSH session: search, inspect, update the snapshot, and install, all through slash commands and read-only agent tools.

The plugin ships a validated catalog snapshot inline, so offline search and plugin detail browsing keep working even when the DSH Get website or data repository is unreachable. Running the update command pulls the latest public snapshot and verifies it at the byte level. Installation accepts only well-formed npm or GitHub package identifiers from the catalog, rejecting shell operators, local paths, and arbitrary URLs. After a successful install, a six-section evidence report covers package version, Git commit, lockfile resolution, lifecycle-script state, a redacted before/after config diff, and the exact rollback command; the audit record is written atomically with 0600 permissions and never stores raw configuration values.

It is built for developers who install and browse community plugins in DSH regularly and want offline availability plus a visible, auditable installation trail. Agent tools are strictly read-only; third-party code is installed only when the user explicitly issues the install command, keeping ownership of what runs, from which source, and what local state changed fully under the operator's control.