Muse Maestro guardrail plugins for Muse Code

<p align="center">
  <img src="assets/banner.svg" alt="Maestro — a safety-and-sanity plugin suite for Muse Code">
</p>

<p align="center">
  <strong>A safety-and-sanity plugin suite for <a href="https://github.com/facebookresearch">Meta Muse Code</a> (Muse Spark 1.3) — the terminal coding agent.</strong>
</p>

<p align="center">
  <img src="https://img.shields.io/badge/license-MIT-22D3EE?style=flat-square&labelColor=0A0A0F" alt="MIT license">
  <img src="https://img.shields.io/badge/Muse%20Code-1.3-22D3EE?style=flat-square&labelColor=0A0A0F" alt="Muse Code 1.3">
  <img src="https://img.shields.io/badge/plugins-5-22D3EE?style=flat-square&labelColor=0A0A0F" alt="5 plugins">
  <img src="https://img.shields.io/badge/built%20with-native%20.muse--plugin-8B5CF6?style=flat-square&labelColor=0A0A0F" alt="native .muse-plugin hooks">
</p>

<p align="center">
  <img src="assets/demo.svg" alt="maestro-guardrail denying a catastrophic rm -rf ~/ (real hook output)">
</p>

Fast agents are wonderful right up until they aren't. Run a coding agent with
approvals off (`--yolo`) and you trade every confirmation prompt for speed — and
for risk. Maestro is the seatbelt: five small, native Muse plugins that add a
safety floor and a few good habits **without slowing the agent down**.

---

## The problems Maestro solves

| Problem | Plugin |
| --- | --- |
| A `--yolo` agent has **no safety floor** — one bad command can wipe a disk, a home dir, or force-push over `main`. | **maestro-guardrail** |
| Agents announce **"done" / "fixed" / "all tests pass"** without ever showing proof. | **maestro-doneproof** |
| A session transcript grows **unbounded** until it blows the context window and the session dies. | **maestro-session-watch** |
| Hard-won **ops lessons are forgotten** every new session. | **maestro-instinct** |
| Durable facts a session discovers **vanish** when it ends. | **maestro-brain** |
| A **secret** (token, key, private cert) gets echoed into the transcript or sent to the model. | **maestro-secrets** |
| You have **no idea what a session cost** in tokens or dollars. | **maestro-cost** |

Every plugin is **pure Node, fail-open** (if the plugin errors it gets out of
the way — it never blocks your agent because of its own bug), and adds only a
few tens of milliseconds per event.

---

## The plugins

### 1. maestro-guardrail — the safety floor (`PreToolUse`)
Denies **only c