Minimal, verified template for DeepSeek Harness plugins: bundle manifest, one tool, runtime peer guard, tests, and CI that really invokes the tool.
- Runtime guard rejects silently-linked older @deepseek-ai/dsh-tools copies (discussion #1697)
- Packaged integration: pack → fresh host install → register hello → real handler call → assert
- CI: typecheck/build/test + Windows dsh web boot smoke