
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
dsh-subagent-profile
Advanced tools
DeepSeek Harness 子 Agent 派发插件:按任务为子代理选模型、推理强度与工具范围,常用组合存成命名方案随时复用;内置安全检查、成本估算与节省分析、完整决策台账。
For DeepSeek Harness (DSH).
Dispatch subagents in DeepSeek Harness: pick model, reasoning effort, and tool scope per task; save common combos as named profiles for reuse. Built-in safety checks, cost estimation with savings analysis, and a full decision ledger.
Built-in subagent | dsh-subagent-profile | |
|---|---|---|
| Per-subtask model / preset | ✅ optional provider / model / reasoning_effort (after enabling model selection) | ✅ one profile bundles preset + model + effort + tool scope + budget; overridable per call |
| Reusable named setups | ❌ | ✅ profiles |
| Tool-scope narrowing | ❌ | ✅ whitelist ∩ parent, run_code always removed |
| Safety checks | ❌ | ✅ whitelist / cost / intersection / approval / budget, all recorded |
| Cost visibility | ❌ | ✅ per-dispatch estimate + savings comparison |
| Decision ledger | ❌ | ✅ full trace: request vs. effective, checks, execution, settlement |
| GUI management | ❌ | ✅ settings page + per-session ledger tab |
| Performance-based suggestions | ❌ | ✅ confirm to apply, undo anytime |
| Official model-selection interplay | ✅ enforced natively once enabled | ✅ dispatch follows the same whitelist (out-of-range routes are rejected) |
dsh plugin --profile web add dsh-subagent-profile # published package
dsh plugin --profile web add ./dsh-subagent-profile # from a local checkout
Restart dsh web. This is a standard bundle plugin: it provides the dispatch tool, the profile provider, the subagent-profiles service, the /subagent-profiles/* loopback management routes, the settings page (「子 Agent 方案」), the per-session ledger tab, and the dispatch tool-call card in the web GUI. On startup it also self-installs an agent preset — orchestrator-v2 (「编排者模式 V2」) — pick it in the new-session preset picker. The sync is idempotent and re-runs on every startup, so upgrading the plugin updates the preset.
Profiles are managed in the settings page — each one bundles preset + model + reasoning effort + tool scope (and optionally a persona), and can be enabled, disabled, edited, or reset individually. Two built-ins ship:
| Profile | Purpose |
|---|---|
swap-standard | switch the child to the full standard coding toolkit |
researcher | deep reasoning off, search-only tools |
Profiles live in ~/.dsh/subagent-profiles.json and take effect immediately (edits are made from the settings page).


dispatch tooldispatch(
profile: "researcher", // preset + model + reasoning effort + tool scope
prompt: "Survey the DSH plugin ecosystem and compare direct competitors",
run_in_background: true
)

Every session has a ledger tab that records each dispatch decision: what the parent saw and requested, what actually took effect (with ignored-request highlights), which tools were removed and why, how execution went (including stalls and parent interventions), and what it cost. Safety-check failures are surfaced with fix directions.
Delegation never lets a subagent gain more power than you already have — this is the default, with no configuration:
run_code is always removed.继承父会话 · 前台 — "inherits the parent session, foreground"); hover for the full detail (model / effort / preset / mode / origin).~/.dsh/subagent-profiles.json — the profile registry (edited from the settings page).~/.dsh/subagent-profiles.state.json — the plugin's enable/disable switch (default enabled).~/.dsh/subagent-profiles.failed-traces.json — the failure ledger (dispatch failure traces).~/.dsh/subagent-evolution/ — the decision ledger and statistics:
dispatch.jsonl — per-dispatch decision records (no prompt content).summaries.json — aggregated per-profile statistics (versioned, rebuilt on corruption).adopted-state.json — adoption verdict state for child results (cross-restart).reminders.json — reminder store (one reminder = one audit record).~/.dsh/.agent-presets/orchestrator-v2/ — the self-installed orchestrator-v2 agent preset (synced from the bundled presets/orchestrator-v2/ on every startup).DSH_HOME is respected and defaults to ~/.dsh. Uninstalling the plugin removes the data files above and the self-installed orchestrator-v2 preset directory (other plugins' presets are left untouched); re-installing or re-launching re-syncs the preset and regenerates the data files.
@deepseek-ai/dsh-jobs and @deepseek-ai/dsh-tool-jobs to be loaded; otherwise it fails with "dispatch: 后台派发不可用:缺少 jobs 服务".preset swap and reasoningEffort are ignored (the child inherits the parent preset at the default reasoning effort).send_message channel (the plugin drives the child via the official child handle).allow = (parent tool set − run_code − deny) ∩ allow. Assumption: continuable inherits the parent preset, so the child's tool set ≈ the parent's; if dsh's behavior changes so the two differ (e.g. a future preset swap composing a different tool set), tool narrowing fails with a hard error (conservatively safe — never silently granting more), to be replaced with a true parent ∩ child intersection once dsh provides an official seam.dsh-subagent-profile/
├── index.mjs # plugin entry: dispatch tool, profile provider, services, HTTP routes
├── lib/
│ ├── client.js # browser side: settings page, per-session ledger, dispatch tool-call card
│ └── core/ # host-side modules by domain: gates, ledger, evolution, profiles, query, sync
├── presets/ # bundled agent presets (e.g. orchestrator-v2)
├── test/ # node:test suite (pure and junction tiers)
└── docs/ # screenshots
Found a bug or have an idea? Open an issue or submit a pull request — all contributions are welcome.
If this plugin has been useful to you, please give it a ⭐ on GitHub — it helps others find it.
The bundled orchestrator-v2 agent preset was inspired by dsh-liangshen (梁神模式) from dsh-web-ui, licensed under Apache-2.0. Thanks to its author for the great work.
MIT — Copyright (c) 2026 muzyLink
FAQs
DeepSeek Harness 子 Agent 派发插件:按任务为子代理选模型、推理强度与工具范围,常用组合存成命名方案随时复用;内置安全检查、成本估算与节省分析、完整决策台账。
We found that dsh-subagent-profile demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.