dsh-install-guard

A subtle risk often lurks behind every marketplace plugin install for DeepSeek Harness: the plugin declares a Node version, peer dependency range, or dsh manifest field that does not match your running environment, and the service crashes or refuses to boot. dsh-install-guard moves that checkpoint before the download ever touches disk, running a full compatibility preflight so version conflicts are caught early.

It registers a model tool called plugin_install_guard that the Agent can invoke on demand. Four checks are covered: the current Node version against the plugin requirement; resolved versions of @deepseek-ai peer dependencies against declared ranges; the dsh.bundle.patch and dsh.client fields in the dsh manifest; and an optional isolated trial boot that installs the plugin into a throwaway profile and runs apply to surface runtime or load-time crashes.

Built for developers and administrators who manage DeepSeek Harness plugins in shared or production environments. It sits alongside dsh-doctor for environment health and dsh-poison-guard for security audit, and together the three form a complete pre-install gate so every plugin passes a compatibility check before it enters the running environment.