DSH Gate

Static compatibility and permission verification for DeepSeek Harness plugins.

DSH Gate is a community developer tool, not an official DeepSeek product. A passing receipt is not a security audit.

What it does

DSH Gate checks a plugin before it is installed into a real profile:

• verifies the dsh.bundle install contract;
• checks official DSH peer ranges against a selected DSH baseline;
• applies the prerelease rule needed by DSH rc versions;
• reads declared and high-signal inferred permissions;
• records source provenance and platform compatibility;
• resolves immutable commit and package blob provenance for GitHub targets;
• discovers a unique plugin package in packages/, plugins/, or apps/;
• optionally runs npm pack --dry-run --ignore-scripts for a local package;
• emits a normalized JSON Receipt without absolute machine paths or user data.

The alpha never executes plugin lifecycle scripts and does not mutate ~/.dsh.

Where it fits in the ecosystem

DSH Gate is not a second plugin market and it is not a Desktop installer. It is the verification and provenance layer between a public plugin source and a real DSH profile:

plugin repository -> immutable source snapshot -> DSH Gate Receipt -> market decision -> explicit user install

Adjacent projects already cover the other layers:

Layer	Typical responsibility	DSH Gate boundary
Harness runtime	Load and run plugins	Never replaces the runtime
Plugin directories and markets	Discover, rank, and distribute entries	Consumes evidence; does not own listings
Desktop shells	Provide a local UI and profile controls	Publishes a compatible Provider payload; does not install
Forge/developer environments	Create, test, and isolate plugin work	Verifies the resulting package without copying a profile
DSH Gate	Compatibility, permission, platform, and source evidence	This repository

The adoption path is deliberately concrete: plugin authors can add the GitHub Action to pull requests, and a market or Desktop host can consume the same Receipt-derived pass/warn/fail result before showing an install action. The current catalog remains a reviewable preview until the Pages deployment is enabled and its HTTPS JSON responses are independently verified. A catalog entry is never an endorsement or a silent installation decision.

See docs/adoption.md for the concrete plugin-author, market-operator, and release rollout paths.

Quick start

npm install
npm run build
node dist/cli/main.js verify fixtures/public/healthy-plugin --smoke
node dist/cli/main.js verify https://github.com/owner/plugin --dsh-version 0.1.0-rc.7 --json receipt.json
node dist/cli/main.js verify https://github.com/owner/monorepo --path packages/plugin --json receipt.json
node dist/cli/main.js matrix matrix-targets.json --concurrency 4

The default baseline is 0.1.0-rc.7, pinned to the public DSH tag dsh-v0.1.0-rc.7.

For GitHub API rate limits, set a read-only GITHUB_TOKEN in the environment. The token is used only for fetching public package.json content and is never written to a Receipt:

GITHUB_TOKEN=... node dist/cli/main.js verify https://github.com/owner/plugin

Monorepos

When the repository root is not a DSH plugin, DSH Gate scans package manifests under packages/, plugins/, and apps/. One DSH candidate is selected automatically. Multiple candidates fail with their paths so the workflow cannot silently verify the wrong plugin.

Select a package explicitly with either form:

node dist/cli/main.js verify https://github.com/owner/repository --ref main --path packages/plugin
node dist/cli/main.js verify https://github.com/owner/repository/tree/main/packages/plugin

The tree URL form treats the first segment after /tree/ as the ref. For branch names containing /, use the repository URL with separate --ref and --path options.

GitHub Receipts record the requested ref, resolved commit SHA, selected package.json path and blob SHA, numeric repository ID, SPDX license, and archived state. Remote source is read as data only; discovery never runs repository code.

Compatibility matrix and Desktop Catalog

The checked-in matrix-targets.json is a small, public target list for community plugins. The matrix command resolves each target, verifies it against one pinned DSH baseline, and writes a JSON matrix, Markdown report, and Desktop Community Market Provider files:

GITHUB_TOKEN=... SOURCE_DATE_EPOCH=1787011200 \\
  node dist/cli/main.js matrix matrix-targets.json --concurrency 4

The generated catalog/ directory is public evidence and a provider payload preview. The current GitHub Pages diagnostic deployment serves manifest.json correctly but serves the extensionless /v1/plugins payload as application/octet-stream; Desktop rejects that response. Do not add the Pages manifest to Desktop until a host returns both documents as application/json and npm run verify:provider -- <manifest-url> passes. A pass or warn entry is not an endorsement or a security audit; fail entries remain visible so the market cannot silently turn an unresolved plugin into a recommendation.

GitHub Action

Plugin repositories can verify every pull request without installing or building DSH Gate:

name: DSH plugin compatibility

on:
  pull_request:
  push:
    branches: [main]

permissions:
  contents: read

jobs:
  verify:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - uses: ChaoYuZhang001/dsh-gate@v0.4.0-alpha.3
        with:
          target: .
          github-token: ${{ github.token }}

The Action writes a check table to the workflow Summary, uploads a sanitized dsh-gate-receipt.json artifact for 14 days, and fails on a fail Receipt. Pin the full release tag or commit SHA in production workflows. Set upload-receipt: 'false' only when the workflow has its own artifact policy.

Repository boundary

This public repository contains source, schemas, tests, sanitized fixtures, CI rules, and public release receipts. It must not contain API keys, signing certificates, .env files, real ~/.dsh profiles, user transcripts, private plugin sources, or raw logs containing machine paths.

See SECURITY.md, CONTRIBUTING.md, and docs/release-policy.md.

Status

v0.4.0-alpha.3 adds the fail-closed live Provider smoke and its cross-platform tests on top of the alpha2 compatibility matrix, pinned Desktop wire schemas, strict conformance fixtures, and adoption documentation. The Pages deployment remains diagnostic because GitHub Pages does not serve the standard extensionless endpoint with a JSON media type. DSH Gate does not install plugins, mutate a DSH profile, or claim a live catalog endpoint until the HTTPS Provider smoke passes.

License

MIT. See LICENSE.