dsh-safe-install

Installing a third-party plugin in DeepSeek Harness looks simple but hides real dangers: a duplicate insert id in cordis.patch.yml can crash the loader, a tool-name collision with a built-in or already-installed plugin can bring the whole session down, and a single rc-level version mismatch can break at runtime. On top of that, you still have to manually restart DSH for the new plugin to load. The whole process is both tedious and risky.\n\ndsh-safe-install compresses that fragile sequence into a single command. Before anything touches your profile, it runs four pre-install checks: version compatibility of the peerDependencies triplet against the running DSH build, patch insert id conflicts with core reserved ids or other plugins, tool-name collisions with built-ins and installed plugins, and supply-chain sanity (published release and active maintenance). A block verdict refuses the install outright with a clear reason; a warn flags risk but lets you proceed deliberately. When all checks pass, it takes a snapshot via dsh-undo-savepoint, runs the install, and spawns a fresh DSH process once the old one releases its port, so the new plugin is live within seconds. If something goes wrong, one rollback command restores everything.\n\nIf you regularly install community plugins for DSH or manage plugin versions across a team, this plugin automates the security verification, snapshot backup, and restart cycle so you never have to guess whether a plugin is safe before it enters your profile.