@patwoodman/dsh-sdlc-flow-guard
v1.2.10
Published
Worker-side enforcement only: tools/pre-execute + fs/* deciders. Never installed into the lead profile.
Readme
@patwoodman/dsh-sdlc-flow-guard — worker-side enforcement
The policy half of the worker sandbox: a tools/pre-execute waterfall and the
fs/* write deciders. It denies writes outside the task contract's allowed
paths, protects the orchestrator's own files (.sdlc/sdlc.db, locks, the task
contract) and rejects forbidden command patterns (git push --force*,
rm -rf /, git clean -fdx*, git reset --hard*, …).
It has no host service and no database access. The guard is policy, not a
security boundary — the real controls are the sandbox root and the post-hoc
git diff check.
Installed into worker profiles beside
@patwoodman/dsh-sdlc-flow-tools,
and into the boot probe for symmetry.
Install
dsh plugin --profile sdlc-worker add @patwoodman/dsh-sdlc-flow-guard @patwoodman/dsh-sdlc-flow-toolsConfiguration
The patch declares the defaults (guardMode: deny, orchestratorPaths,
protectedOrchestratorPaths, guardForbiddenPatterns). A profile-level
id-targeted override replaces the row's whole config.
Requirements
@deepseek-ai/dsh>=0.2.0-rc.2 <0.3.0-0- Node.js ≥ 22.13
License
MIT