dsh-subagent-model
一种子代理工具，可将每个子代理强制指定到明确选择的提供商/模型和推理强度，而不是继承父代理的路由
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dat-lequoc/dsh-subagent-model#a793cbb740df11955fa3aae6412756571ea85d1cSubagent Model 以 dsh-subagent-model 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A DeepSeek Harness plugin whose subagent tool forces every child onto an explicitly chosen model route and reasoning effort, instead of letting it inherit the parent agent's model.
A child started with no agentOptions inherits its parent's route: resolveChildAgentOptions spreads the parent's provider/model first, and the shipped @deepseek-ai/dsh-tool-subagent takes only { description, prompt } — it exposes no way for a caller to choose. So a worker silently runs on whatever the main agent runs on.
This plugin replaces that frontend. The model argument is required, its enum is your configured allowlist, and the chosen route plus its configured effort are pinned onto the child.
The allowlist ships seeded with one entry, inherit/current, which explicitly follows the calling turn's own model and effort. So a fresh install behaves exactly like the shipped tool, and there is nothing to undo if you change your mind.
Forcing is opt-in: add the routes you want, and remove inherit/current to make inheritance impossible. While it is present the model may still name it, so it is a permission, not a fallback — the tool call visibly records which route the child ran on either way.
inherit/current resolves the route recorded for the current turn, not the session-creation model, so a mid-session model switch is respected.
The harness splits these two facts, so the plugin uses two mechanisms:
| Fact | Mechanism | Durable? |
|---|---|---|
| provider + model | SubagentStartRequest.agentOptions, which takes precedence over the inherited parent route | yes — no bridge needed |
| reasoning effort | installModelSelection on the child's own context at its agent/created edge | reservation is in-memory; the child's first request/header becomes the authority |
agentOptions has no effort field — an effort reaches a request only through the agent/request waterfall. lib/effort.js uses the harness's own installModelSelection primitive (the same one the Web model picker uses), which also keeps prompt {{model}} interpolation and the logged request/header agreeing with what is actually sent.
agent/created is a synchronous publication boundary, so the selection is installed before the child can assemble a prompt or issue a request.
dsh plugin --profile web add /path/to/dsh-subagent-model
That mounts the host half only: the settings namespace that owns your allowlist. It registers no tool.
The tool row belongs to an agent preset, because a delegation tool is per-agent composition and must replace the shipped row rather than sit beside it — two rows registering the same subagent name collide, and leaving the shipped one mounted would give the model a way to bypass this policy.
In your preset's agent.cordis.yml, replace the tool-subagent row:
- id: tool-subagent
name: dsh-subagent-model/spawn
config:
provider: spawn
toolName: subagent
backgroundMode: continuable # or one-shot
maxDepth: 3 # or provider-managed
Settings → Plugins → Subagent model. The card lists your allowed routes, each with an effort dropdown populated from what that exact model advertises, plus an "Add a route…" picker fed by the live model catalog. Edits stage locally and commit on Save through the revision-fenced settings scope, so a half-finished edit never reaches a running agent. The banner states plainly whether you are currently inheriting or forcing.
Both halves ship in this one package: installing it puts the card on the settings page. The Plugins tab renders only namespaces a registered card claims, so there is no generic schema-driven form to fall back on.
Equivalently, in ~/.dsh/settings.yaml:
dsh-subagent-model:
routes:
- kiro/claude-opus-5
- deepseek/deepseek-chat
# - inherit/current # remove to forbid inheriting the conversation's model
efforts:
kiro/claude-opus-5: high
deepseek/deepseek-chat: provider/default
routes — the complete allowlist, spelled provider/model-id, plus the optional inherit/current entry. Only the first / splits a provider route, so a model id may itself contain slashes. Defaults to [inherit/current].efforts — effort per route. A route absent from the map, or set to provider/default, sends no explicit effort — and for inherit/current that means following the calling turn's own effort. Any other value must be an effort that exact model advertises; an unadvertised id is refused before any provider call rather than clamped. An explicit effort on inherit/current overrides the inherited one, so you can follow the model but pin the effort.Both are read at every tool call, so an edit applies to the next delegation with no restart.
execute, so a schema captured a step ago cannot authorize a route you removed since.| Field | Default | Meaning |
|---|---|---|
provider | spawn | The ctx.subagents provider to start children on |
toolName | subagent | Model-facing tool name; must be unique among live tools |
backgroundMode | continuable | continuable returns a durable subagent id reachable by send_message; one-shot defaults to waiting |
persona | — | Optional per-child persona shadowing the deployment persona |
maxDepth | 3 | Child recursion cap, or provider-managed to send none |
| Route | Purpose |
|---|---|
GET /subagent-model/catalog | The model catalog the settings card reads: every route with its native input modalities and advertised reasoning efforts, plus the inherit/current entry. Registered through a nested plugin injecting webServer, so the package still mounts in profiles with no web server. |
npm test
49 tests. policy.test.mjs and reservations.test.mjs are dependency-free — the route, effort, and reservation-matching rules are pure and need no harness. integration.test.mjs mounts the tool on a real Cordis context with the real ToolRuntime/SubagentRuntime and asserts against a capture provider that the built SubagentStartRequest carries the chosen route, including that the seeded inherit route reproduces the shipped behavior. defaults.test.mjs pins the behavior-neutral seed. client-card.test.mjs exercises the browser card without a browser — it supplies a module loader and a React stub that records the element tree, then asserts the slot registration, that nothing is written before Save, that Save writes efforts before routes, and that a removed route takes its effort with it. The harness-dependent suites self-skip when those packages are not resolvable.
lib/client.js is a hand-written lazy-CJS factory. The repository's tsdown client preset is not published, so an out-of-tree package must reproduce that artifact format itself. The card therefore uses React.createElement directly and draws its own chrome — the client bundle-purity gate rejects value imports across plugins, so it cannot reuse the shipped card components.toolName collide at registration, by design.