Muse Maestro guardrail plugins for Muse Code

Fast agents are wonderful right up until they aren't. Run a coding agent with
approvals off (--yolo) and you trade every confirmation prompt for speed — and
for risk. Maestro is the seatbelt: five small, native Muse plugins that add a
safety floor and a few good habits without slowing the agent down.

---

The problems Maestro solves

Problem	Plugin
A --yolo agent has no safety floor — one bad command can wipe a disk, a home dir, or force-push over main.	maestro-guardrail
Agents announce "done" / "fixed" / "all tests pass" without ever showing proof.	maestro-doneproof
A session transcript grows unbounded until it blows the context window and the session dies.	maestro-session-watch
Hard-won ops lessons are forgotten every new session.	maestro-instinct
Durable facts a session discovers vanish when it ends.	maestro-brain
A secret (token, key, private cert) gets echoed into the transcript or sent to the model.	maestro-secrets
You have no idea what a session cost in tokens or dollars.	maestro-cost

Every plugin is pure Node, fail-open (if the plugin errors it gets out of
the way — it never blocks your agent because of its own bug), and adds only a
few tens of milliseconds per event.

---

The plugins

1. maestro-guardrail — the safety floor (PreToolUse)

Denies **only c