shaokeyibb/dsh-plugin-product-subagents
基于角色的Codex / Claude Code / ACP子代理提供程序,适用于DeepSeek Harness——支持可延续的子任务、持久的会话恢复、按角色的产品权限,以及带权限上限的委派。
Project Overview项目介绍
This is a native DSH plugin that offers role-based subagent integration for external agent command-line interfaces including Claude Code, Codex, and any ACP-compatible agent CLI. It ships with a declarative role library that includes four default roles: general, code-review, explore, and debug. It enables users to turn these external CLIs into durable, continuable child subagents inside DSH, with per-role product permissions, delegated execution with a permission ceiling, and cross-platform process launching. To install, users can run the single command dsh plugin add dsh-plugin-product-subagents to automatically register the plugin to their DSH web profile, and only need to restart DSH after installation completes.
It is designed for developers who need to split complex development tasks across multiple coding agents within a single DSH session. A typical workflow starts with the main DSH agent selecting an appropriate role matching the task at hand, then calling the product_delegate tool to dispatch the task to the external subagent. After dispatching, the main agent calls product_wait to block until the child subagent completes the task and returns its result. The plugin preserves session continuity, so a child agent's remote session survives idle disposal and even full process restarts. It also exposes several other tools to check subagent progress, list available roles, and manage running child agents.
The plugin requires Node.js version 18 or newer, and is verified compatible with DSH versions from 0.0.1-rc.5 up to the current 0.1.5-rc.1. Users must have at least one configured and authenticated external agent CLI available on their system PATH to use the plugin. It uses a two-layer permission model that enforces a permission ceiling, meaning a child subagent can never spawn a descendant with higher permissions than it holds. It is released under the open source MIT license, and supports all major desktop platforms including Windows, macOS, and Linux.
这是一个专为DeepSeek Harness(DSH)开发的原生插件,可为Codex、Claude Code以及任何符合ACP规范的外部代理CLI提供基于角色的子代理服务。它能将外部代理CLI转换为可持久、可恢复的子代理,自带声明式角色库、按角色分配权限,还支持跨平台进程启动,同时兼容同步一次性任务和异步可恢复子任务。
该插件适合需要在DSH中调度多个不同编码代理完成分工协作任务的开发者。典型工作流程是,主代理根据当前任务的类型选择匹配的角色,调用product_delegate工具将任务委派给对应外部代理子进程,之后可通过product_wait工具阻塞等待子任务完成并获取结果。它支持会话持久化,子代理的远程会话即使在进程重启后也能正常恢复。
该插件要求Node.js版本不低于18,需要DSH版本在0.0.1-rc.5到当前0.1.5-rc.1之间,同时要求至少有一个已配置并认证的目标代理CLI在系统PATH中。你可以通过dsh plugin add命令一键安装,安装后需要重启DSH才能加载插件。它采用MIT开源许可协议,权限采用两层模型,子代理无法获得比父代理更高的权限。
请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】,检查通过再动手。
插件:dsh-plugin-product-subagents(shaokeyibb/dsh-plugin-product-subagents)
仓库:https://github.com/shaokeyibb/dsh-plugin-product-subagents
本站详情页:https://www.yhbd.top/plugins/shaokeyibb-dsh-plugin-product-subagents/
本站登记:类型 plugin · 归类 原生 DSH 插件 · 许可证 MIT · ⭐ 20 · 最近提交 2026-09-10 · 主语言 JavaScript
按下面顺序执行,每步先把结论告诉我,再进入下一步:
【1 兼容性检查】
① 我这边:DSH 版本、Node 版本、操作系统、当前 profile(web / desktop)。
② 读它的 README、package.json、插件 manifest,列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对,结论只写「满足 / 不满足 / 未知」三种;不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突:命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。
【2 安全性检查】
① 仓库可信度:和上面「本站登记」是否一致;star / fork 数、创建时间、最近提交,是否归档或长期停更。
② 安装脚本:逐行看 package.json 的 preinstall / install / postinstall,以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名,立刻停下来告诉我,不要继续装。
③ 依赖:列出新增依赖,标出无人维护、或与知名包拼写近似的可疑包(typosquatting)。
④ 权限与副作用:它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限(filesystem / network / shell / clipboard 等),以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限,或权限明显超出功能所需,先停下来问我。
【3 安装】
上面两步没有「不满足」和「高危项」时才执行;用官方推荐方式安装,不要自行提权。
【4 汇报】
用表格输出:检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜,也不要替我决定。
Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH:它会先核对兼容性与安全性(逐条给「满足 / 不满足 / 未知」),确认没问题再安装,有高危项会停下来问你。框内可滚动,复制到的是完整提示词;安装命令不一定准确,发给 DSH 更稳。
- 20 stars - an early-stage project星标 20,属于早期项目
DSH walks through these 9 checksDSH 会逐条核对这 9 项
Compatibility兼容性
- DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
- External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时(Electron / Python / Docker 等)是否齐备
- Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突:命令名、skill / tool 重名、端口占用、重复 MCP 注册
Security安全性
- Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致,是否归档或长期停更
- Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
- curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
- Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
- Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需(filesystem / network / shell / clipboard)
- Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限,以及卸载与回滚方式
Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照,不能替代安全审计。
Or use CLI install (for developers)或使用命令行安装(适合开发者)
CLI Install命令行安装
dsh plugin --profile web add dsh-plugin-product-subagents
把 shaokeyibb/dsh-plugin-product-subagents 加入你的 DSH 配置(web profile)即可启用。
READMEREADME
dsh-plugin-product-subagents
English | 简体中文
Role-based Codex / Claude Code / ACP subagent providers for the DeepSeek Harness. Turns external agent CLIs into durable, continuable subagents with a declarative role library, per-role product permissions, delegation with a permission ceiling, and cross-platform process launching.
Features
- Continuable children — one-shot sync or async continuable (control with
send_message,list_agents,interrupt_agent; attach synchronously withproduct_wait). - Session continuity — a child's remote product session survives idle disposal and process restarts (durable registry + log markers; claude/codex resume by id, ACP reconnects).
- Declarative roles (
roles/*.json) —general(default),code-review,explore(never delegates),debug. Delegation defaults ON; a role can ban it. Unknown roles fall back togeneral. - Two-layer permission model — the relay model is always a read-only
pipe;
permissionMode(readonly/default/full) applies to the remote product and is mapped to each product's own CLI flags. - Permission ceiling — a child can never spawn a descendant with more permission than it has.
- Any ACP agent — add Cursor (
agent acp), CodeBuddy (cbc --acp), Gemini (gemini --acp) and more viaconfig.providers; no code needed. - Resource management — idle disposal, configurable timeouts, concurrency cap.
- Cross-platform — Windows
.cmdshims, Windows-safe path escaping; CI runs macOS / Ubuntu / Windows.
Requirements
- A DeepSeek Harness deployment (web profile). Every installable
@deepseek-ai/dshrelease from0.0.1-rc.5through the current0.1.5-rc.1is verified — see Compatibility. - At least one product CLI on
PATHand authenticated:claude,codex, or an ACP CLI (opencode,agent,cbc, …). - Node ≥ 18.
Install
Recommended — dsh plugin add
dsh plugin --profile web add dsh-plugin-product-subagents
That single command installs the package and wires the host-plane row
automatically: the plugin ships a cordis.patch.yml declared via
dsh.bundle in its package.json, so dsh plugin add registers it as a
profile layer (no manual cordis.patch.yml editing needed). Restart the
harness afterwards so the plugin loads.
Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要,完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →
PerryLink/dsh-auto-review
kenryu42/cc-safety-net
PerryLink/dsh-mcp-panel
fb0sh/dsh-pentester