dsh-review-squad

Configuration

Override the review-squad row from a later patch layer (~/.dsh/profiles/ /cordis.patch.yml or a --patch overlay). Patch rows replace whole configs — restate everything you keep.

field	default	meaning
provider	spawn	ctx.subagents provider used for reviewers
commandName	review	slash command name
toolName	code_review	tool name
toolFilterDeny	['str_replace_editor','write','edit','subagent','subagent_fork','workflow','ralph','send_message','web_search']	tools reviewers lose — includes every delegation tool (they must not spawn anything) and web search (cost); unknown names are healed automatically
timeoutMs	600000	per-reviewer wall-clock budget
maxConcurrent	2	reviewers run in batches of this many (gentler on API limits)
maxReportChars	24000	report hard cap
language	en	descriptive text language (severity/file/line markers stay English so parsing works)
reviewers	built-in four	the squad (see below)

Custom squad — the "strong brain, cheap hands" pattern

- id: review-squad
  name: dsh-review-squad
  config:
    language: zh
    reviewers:
      - key: security
        role: Security reviewer
        instructions: Hunt for injection, authz gaps, committed secrets, unsafe crypto.
        agentOptions:
          provider: deepseek-official
          model: deepseek-v4-pro
          reasoningEffort: max
      - key: style
        role: Style reviewer
        instructions: Naming, duplication, complexity, conventions.
        agentOptions:
          provider: my-cheap-gateway
          model: glm-4.6-flash

agentOptions needs a provider that supports the agentOptions subagent capability (the built-in spawn provider does).

Settings page (Web UI)

The plugin ships its own "Review Squad" section in the dsh web Settings page: edit each reviewer's model route (provider / model / reasoning effort / max tokens), report language, timeout, report budget, and the tool deny list. Saving goes through dsh's settings.update channel into the review-squad: section of settings.yaml and applies live (no restart).

Runtime overrides — settings.yaml (hot-reloaded)

Every field except the structural ones (commandName/toolName) can also be changed without restarting dsh via the review-squad: section of $DSH_HOME/settings.yaml (~/.dsh/settings.yaml). Values there override the bundle config at every invocation: