DeepWork plugins — 2026-10-20

Seven plugin packages, installable straight from these assets. No npm account, no registry, no 2FA:
each file is the same tarball pnpm pack produces, and DSH installs it by URL exactly as it installs a
published one.

dsh plugin --profile web add https://github.com/zhangcun1995521/deepwork/releases/download/plugins-2026-10-20/zhangcun123-ontology-0.1.28.tgz

Then add the package name to dsh.profile.bundles in the profile's package.json.

package	what it is
@zhangcun123/ontology	the enterprise world as a declaration, and the tools and permissions derived from it
@zhangcun123/role	the role a mode acts as, and the prompt it works under
@zhangcun123/session-query	the lineage around one session, so an agent can pick up what another started
@zhangcun123/test-runner	run a project's tests and read what the run said
@zhangcun123/lsp	code navigation through a language server instead of a text match
@zhangcun123/external	reach a system the domain declares, by running the program the deployment configured
@zhangcun123/computer	look at this machine's desktop and act on it (Windows), with one approval per session

One thing to know when installing external. It declares @zhangcun123/ontology as a range, because
a tarball cannot carry a relative path — so a package manager looks for that name in a registry, where
it is not. Point it at the asset instead, in the profile's pnpm-workspace.yaml:

overrides:
  '@zhangcun123/ontology': https://github.com/zhangcun1995521/deepwork/releases/download/plugins-2026-10-20/zhangcun123-ontology-0.1.28.tgz

What the governance is, and is not. The rules are enforced against declarations, not against
behaviour: a capability says what its tool touches, and the guard judges every call against that plus
the domain's grants. Nothing verifies the declaration against what the tool actually does. So the
guarantee is advisory — an honest capability is governed, refused when it must be, and recorded every
time — not "nothing can exceed its authority". README says the same in its first section.