dsh-plugin-gating-hub

Web & Desktop — both supported. English: README.md | 中文: README.zh.md DSH Plugin Gating Hub (dsh-plugin-gating-hub)

*Renamed from dsh-plugin-hub — old URLs redirect.*

Framework-upgrade safety and plugin-version gating for DSH. A failed upgrade rolls back. A framework changed by any update channel is still guarded. A version the host cannot take is refused, not installed.

Install (npm, one line)

Then restart the dsh service → refresh the page → Settings → Plugins → Plugin Console.

Three hard guarantees 🛡️ Contract pre-check → rollback point → auto-rollback. A data-driven contract pre-check runs first (message contract / dependency API / config schema / removed API / loader contract); then config backup + a full-tree rollback point. A failed install or relaunch auto-rolls the tree back, a 「roll back to previous」 button restores the last version, and plugins the new framework cannot load are auto-disabled — version check catches fake success, 15-min timeout + stall detection. 👁️ Even when another update channel changes the framework. An environment fingerprint catches changes made by the official desktop updater or a manual pnpm: it auto-runs a read-only pre-flight, and disables a row only with hard evidence (package unresolvable / file:// target gone / named in a boot-failure log). @deepseek-ai/* and protected / core rows are never auto-disabled; each auto-disable writes a one-command recovery record. 🔒 Plugin install & upgrade gating. Version/declaration gate (dsh.engines.framework / engines.dsh / @deepseek-ai/* ranges, built-in zero-dependency semver), a repo-size gate on source channels, and explicit handling of non-registry so