DSH Get Plugin v0.2.0

Installation evidence audit

/dshget install now produces a six-section post-install evidence report:

• exact installed package/version, Git commit, tarball, lock resolution, and registry dist.integrity when available;
• catalog repository versus installed package metadata comparison;
• selected-package lifecycle scripts, pnpm allowBuilds state, and the DSH Host permission boundary;
• dsh.bundle.patch rows added or overridden;
• redaction-safe before/after dsh --dump-config path diff and SHA-256 snapshots;
• exact removal command and a known-good local restoration record.

Audit JSON is written atomically with mode 0600 under $DSH_HOME/cache/dshget/install-audits/. Raw effective configuration values are not persisted.

This is evidence and visibility, not sandboxing or a security review. Catalog inclusion and audit output are not an endorsement. Packages may run lifecycle scripts during installation, and loaded Host plugins run with the permissions of the dsh process.

Verification

• 21 tests pass.
• Embedded catalog: 2,460 entries, 1,855 installable.
• CI passes on Node.js 22.19 and 24.
• Final tarball was installed into an isolated DSH Web profile and appeared in the effective configuration.

DSH Get Plugin v0.1.1

Fix profile workspace installs by passing -w when installing the plugin and catalog entries. This avoids ERR_PNPM_ADDING_TO_ROOT on pnpm configurations that enforce workspace-root confirmation.

DSH Get Plugin v0.1.0

Changelog

All notable changes to DSH Get Plugin are documented here.

0.1.0 - 2026-08-19

Added

• /dshget search, info, install, update, and status commands.
• Read-only dshget_search and dshget_plugin_info agent tools.
• Embedded catalog snapshot for offline search and inspection.
• Validated, size-limited remote catalog refresh with atomic cache replacement.
• Exact DSH Get detail links for plugin names containing special characters.
• Fixed-argument installation without shell evaluation.

Security

• Installation is available only through an explicit human slash command.
• Local paths, arbitrary download hosts, shell operators, and unsupported package specifications are rejected.