maintenance 1

Supply-chain-aware plugin updater for DeepSeek Harness: checks the plugins installed in your profiles, applies only the versions pnpm's minimum-release-age policy allows, snapshots before every change and can roll back.