Overview
dsh-plugin-guard
README / EN
Package documentation
Registry summary
dsh.pub verifies the pinned bundle contract, runtime facts, and distribution semantics. The complete README remains in the source repository.
Read the full README on GitHubLIMITATIONS
Known limitations
- **Upstream defect remains** — this plugin is user-side prevention. It does not fix `identityFromManifest()` in `@deepseek-ai/dsh-plugin-package-inventory-deepseek`, and any *other* trigger of the same failure path (for example a stale fallback symlink, see upstream discussion #5439) will still take requests down. Reported upstream: [discussion #4950](https://github.com/deepseek-ai/deepseek-harness/discussions/4950). - **YAML parsing is a tolerant subset** — only `- id:` / `name:` pairs are extracted. Unusual patch shapes (anchors, merge keys, deeply nested inserts) may not be seen. The guard fails open (reports nothing) rather than failing the boot. - **JSON-parsed manifest only** — a syntactically broken `package.json` is reported, not repaired. - **No watcher** — only `write`/`edit` tool activity and host startup trigger an audit. A patch file edited by an external editor is picked up at the next DSH start. ---