dsh-model-gate

When DSH fronts multiple providers with dozens of models, it is hard to make specific routes or model pairs vanish from every selector and dispatch path without touching provider credentials or configuration. dsh-model-gate solves this with an independent, non-destructive denylist overlay: you can block an entire provider route, an exact provider/model pair, or use a star-prefixed wildcard to deny a model id across all providers. Removing an entry or uninstalling the plugin restores the native catalog with zero residue.

A disabled model disappears from the web selector, the session.models / llm.models catalogs, task_models, and API request validation as though it were never configured. As a dispatch backstop, any path that still reaches a denied model, whether through subagents, session titles, stale references, or explicit ids, is terminated at the llm/stream waterfall with a single MODEL_DISABLED error chunk before a network request is issued. The settings panel exposes a per-provider collapsible group with one toggle per model row; every change hot-applies through the same settings chain as manual YAML edits, so no restart is needed.

It is built for DSH operators who run multiple provider routes and need to temporarily or permanently retire a model or an entire vendor path without polluting provider configuration, as well as for team environments that want a unified, reversible visibility gate and a clean error contract that composes naturally with failover plugins.