@ddtcorex/dsh-maestro-guard

Host-only safety gate for the DeepSeek Harness: gates tool execution before dispatch via a
waterfall pre-execute hook — persistent approval grants, secret redaction before
logging/persistence, and a pure allow/deny permission policy.

Part of the Maestro Harness suite (dsh-maestro-*). Cordis patch row id: dsh-maestro-guard.

Opt-in and intentionally not part of the meta-bundle one-liner until published:
add it explicitly with dsh plugin add @ddtcorex/dsh-maestro-guard.

What it provides

• Waterfall pre-execute integration — one Cordis row (dsh-maestro-guard) wiring the
  guard handler into the tool-execution waterfall.
• ApprovalStore — persistent approval grants with legacy migration, revoke, and
  read-modify-write safety under a mutex.
• SecretRedactor — redacts known secret families (ghp_, xox, private keys, …) before
  calls are logged or persisted.
• PermissionPolicy — pure, unit-testable allow/deny checks for tool calls.

Host-only: no client bundle; DSH types come from local structural declarations
(src/augment.d.ts).

Development

pnpm install
pnpm verify   # tsc --noEmit
pnpm test     # vitest run
pnpm build    # tsc -> lib/

License

MIT