dsh-subagent-model

LIMITATIONS

已知限制

- **The frontend must be mounted in your selected preset.** The host settings panel alone never enforces model or depth policy. New preset compositions apply to new sessions, not existing conversations. - **Alternate delegation tools are separate policy paths.** Replace or disable them too. Child filters cover the inherited tools named in the filter, not arbitrary trusted child-local plugin registrations. - **`lib/client.js` is a hand-written lazy-CJS factory.** The repository's `tsdown` client preset is not published, so an out-of-tree package must reproduce that artifact format itself. The card therefore uses `React.createElement` directly and draws its own chrome — the client bundle-purity gate rejects value imports across plugins, so it cannot reuse the shipped card components. - **The card needs the catalog route to offer choices.** Without a web server the settings namespace still works from YAML; the picker and effort dropdowns are simply empty. - **One tool row per provider.** Two rows sharing a `toolName` collide at registration, by design.