dsh-devkit TODO

MVP

• Installer selection model and tests
• Keyboard-only TUI and non-interactive presets
• Core safety guard and classification tests
• Embedded development and setup Skills
• GitHub MCP Bundle
• Playwright MCP Bundle
• Runtime extension Bundle
• Doctor and uninstall paths
• Local Harness install, config dump, and startup smoke test
• Usage and troubleshooting documentation
• GitHub Actions CI on supported Node release lines
• Local tarball pack, clean install, and installed CLI smoke test
• Task-scoped GitHub, Browser, and Runtime tool visibility
• Layered approval plus monotonic credential-value denial
• Token Watch: windowed usage guard with subagent review and user verdict

After MVP

• Sentry observability Bundle
• PostgreSQL read-only Bundle with SQL-level enforcement
• Code intelligence/code graph provider evaluation
• Persist a reviewed temporary Cordis package as a normal project plugin
• Publish packages and validate installation from the public registry