dsh-agent-delegate

Multi-agent workflows drift out of bounds quickly: delegation depth goes uncounted, roles spread without guardrails, and parallel writes collide on the same tree. dsh-agent-delegate layers a strict delegation boundary on top of DSH's native ctx.subagents—no control-panel UI, pure policy enforcement. It counts real parent-chain depth and hard-rejects any call beyond policy.delegation.maxDepth. Every child must match a role in the delegation.roles allowlist, and its effective policy is the intersection of parent and child (tighter wins). By default at most four unfinished children run concurrently, handoff payloads are capped at 64 KiB, and a parent's new task generation immediately invalidates stale child reports.

Write-type children and background write tasks are assigned an isolated Git worktree while the main session and foreground bash keep writing to the project root, so concurrent edits never collide. On creation the worktree inherits the parent's uncommitted changes and non-ignored untracked files. When a child finishes, its diff against the seed commit is saved as a patch file with status pending—it is never auto-merged. The parent agent calls delegate_handoff to accept (git apply, falling back to --3way), reject, or list outstanding handoffs; a merge failure is flagged as conflicted and the parent tree is left untouched. Read-only roles such as research and reviewer are denied file operations outright when the sandbox reports partial, with no graceful downgrade.

This plugin is best suited for developers and small teams already running multi-agent collaboration in DSH who need explicit, auditable governance over sub-agent behavior. It adds no UI, does not alter foreground interaction, and removing it instantly restores DSH's native sub-agent behavior with zero residue.