v0.1.0-preview.5 — verified one-click install

Preview 5 makes the Store install button both functional on public DeepSeek Harness rc.8 and stricter about what it will install.

The install flow now:

• requires the catalog entry to have passed Leaderboard installation verification
• resolves the exact install command from the Leaderboard detail API
• accepts only a single npm package spec (no URLs, git specs, or shell syntax)
• invokes dsh plugin --profile web add -w <package>
• caps captured installer output and terminates installs after two minutes
• labels and disables unverified entries in the UI

End-to-end verification used an isolated public @deepseek-ai/dsh@0.1.0-rc.8 profile. The Store installed dsh-plugin-reactive-resume@0.1.0, wrote it to the profile dependencies, and activated its bundle. A catalog entry with action_required status was rejected with HTTP 400.

Install Preview 5:

curl -fL https://github.com/sandbaseai/dsh-plugin-store/releases/download/v0.1.0-preview.5/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz -o /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz
dsh plugin --profile web add -w /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz