dsh-tui-secret-guard

Configuration

enabled: true
genericAssignments: true
minGenericLength: 24
showStatus: true

• genericAssignments detects values assigned to names such as API_KEY, CLIENT_SECRET, ACCESS_TOKEN, and PASSWORD.
• minGenericLength controls only generic assignments. Provider-specific formats retain their own strict lengths.
• showStatus displays secret guard: armed and a process-local blocked count. It does not persist counters or content.

Placeholders including ${ENV_NAME}, YOUR_API_KEY, redacted, and masked values are ignored. A blocked prompt must be edited and submitted again; automatic redaction is intentionally avoided because silently changing code or credentials can produce misleading model output.