Repository navigation
Execution-plane Agent closure
- Web/TUI VMs now preserve exact pnpm dependency-build gates instead of misclassifying them as plugin failures.
- DeepSeek reviews only observed package names, and every approval is bound to the exact plugin bytes, DSH, Node, plane, profile, and source evidence.
- The Agent policy is persisted before a separate secret-free runner retries and writes the result back to the public feed.
- Live proof: dsh-better-sidebar@0.16.1 exposed node-pty, DeepSeek v4-flash approved only that documented build, and the Web retry passed every stage.
- Current evidence: 22/22 Web/TUI cells compatible; 100-plugin feed = 87 compatible, 9 needs review, 0 reproduced incompatible, 4 not observed.
See CHANGELOG.md and the linked Actions evidence in the README.