dsh-maintainer-doc-guard

Configuration

Row config (all optional):

key	default	meaning
enabled	true	turn the section off without removing the row
docs	["plan.md","conventions.md","stack.md","state.md","maintainer/README.md"]	document names to probe
onlyWhenPresent	false	when true, stay silent unless at least one document exists
inSubagents	false	also inject the document reminder into delegated children (true opts in)
order	100	section sort order (after the persona prefix at 0)
walkUp	6	ancestor levels to walk looking for the project root
projectMarkers	[".git"]	root markers for the walk-up
title / intro	built-in	override the reminder's heading / body text

Gate config lives under gate: and is also all optional:

key	default	meaning
gate.enabled	true	mount the tools/pre-execute guard at all
gate.dryRun	false	observe only: count what it would deny, never block
gate.tools	["write","edit"]	tool names the gate examines
gate.guardedGlobs	[".dsh/profiles/", ".dsh/skills/", ".dsh/.agent-presets/", "node_modules/@deepseek-ai/"]	POSIX substrings of the resolved target path that make it guarded
gate.exemptGlobs	[]	POSIX substrings that exempt a target even if guarded
gate.maxDeniesPerTarget	2	denials for one target before the gate gives up and lets it through
gate.maxCandidates	3	precedents listed in one denial
gate.scanLevels	4	ancestor levels scanned for sibling precedents
gate.entriesPerLevel	400	directory entries examined per level (caps node_modules scans)

Example — observe before enforcing:

- id: maintainer-doc-guard
  config:
    gate:
      dryRun: true

The gate is off for anything outside guardedGlobs, so ordinary project files (plan.md, source, notes, scratch scripts) are never touched by it.

Each document is probed in the session working directory first, then in the project root, so a document kept at the repo root is found even from a nested cwd.

Everything this plugin copies from outside itself — the quoted user instruction, document names, title / intro overrides — is defused for the harness's {{variable}} interpolation before it reaches the prompt (the two-character opener and closer are split apart), because rendering throws on an unregistered reference. A user who types {{x}} therefore cannot break prompt assembly for the rest of the session.

Anchor config lives under anchor: and is also all optional:

key	default	meaning
anchor.enabled	true	render the standing objective section at all
anchor.inSubagents	false	also render inside delegated children, quoting the child's own delegation under child-specific wording (true opts in)
anchor.order	10150	section sort order — late on purpose, so the section that changes on every user message invalidates as little prefix as possible
anchor.maxChars	800	clip the quoted instruction, marking the cut with … (truncated)
anchor.title / anchor.intro	built-in	override the heading / the framing sentence
anchor.priorities	the three-step rule	the precedence list, rendered as a numbered list after the quote
anchor.childTitle / anchor.childIntro / anchor.childPriorities	built-in	override all three for the child reading — each defaults to wording that says "your delegated task" rather than "the user's latest instruction"

Nudge config lives under nudge: and is also all optional:

key	default	meaning
nudge.enabled	true	stage the intent judgement at all; false denies the first offence, as 0.4 did
nudge.dryRun	false	observe only: count what it would inject, inject nothing
nudge.grace	1	unexplained actions allowed through with a reminder before any denial
nudge.maxPerTurn	3	reminders per turn before it stops injecting (the deny budget is separate)
nudge.afterSteps	12	step count that triggers the once-per-turn drift check; 0 disables it