dsh-plus-plus

Once DeepSeek Harness is up and running, $DSH_HOME accumulates config files, credentials, session logs, and an ever-growing set of plugins, yet it is hard to see at a glance which plugin can touch the filesystem, shell, network, or credentials. A minor config tweak, a newly added plugin, or a harness upgrade can silently break a workflow, and by the time you notice the damage has been done for a while, with no snapshot or rollback available for credentials and sessions.

dsh-plus-plus adds the operational control layer the harness does not ship, running entirely on your machine. The plugin security audit inventories every installed plugin, classifies the capability seams it touches, and assigns a risk grade. The workflow regression test executes a fixed task set against your current DSH configuration, compares the result to a stored baseline, and exits non-zero on any regression so it can gate CI pipelines. Lifecycle management covers snapshotting and rolling back $DSH_HOME, running diagnostics, and managing providers and credentials. The web console binds to 127.0.0.1 only, credentials are masked by default, and the API never returns raw key values.

If you are already orchestrating multi-plugin, complex workflows with DeepSeek Harness and want security auditing, change-regression detection, and config rollback as part of your daily routine, dsh-plus-plus is a lightweight, purely local control layer with zero third-party runtime dependencies (Node.js 20+).