dsh-maestro-runtime

Running Maestro-Flow inside DSH (DeepSeek Harness) sessions leaves models vulnerable to dangerous shell operations, unprotected writes to critical workflow state files, and a lack of cross-agent coordination context. dsh-maestro-runtime is a DSH host plugin that maps the Maestro-Flow runtime surface onto DSH sessions, so a single /maestro* invocation automatically handles context injection, background knowledge-graph sync, delegate notification delivery, and coordinator bridging without manual orchestration.

Three pillars define what the plugin does. Safety guard: intercepts hazardous bash and pwsh commands (recursive delete, hard git reset, forced push, disk format), locks down every file under .workflow/ (state, config, sessions, runs, hidden maestro data), and enforces PathGuard boundaries plus spec-format validation for defense in depth. Workflow context: on user prompts and /maestro* skill invocations it injects a deduplicated snapshot covering workflow state, active session, project title, specs index, knowhow index, and pending delegate notifications; for projects without a workspace it silently guides one-time initialization. Background coordination: spawns maestro.js directly (no console window) for KG init or incremental sync with cooldown, scans temporary directories for unread completion notifications and marks them read, appends a 60-second deduplicated team heartbeat to activity.jsonl when the local git identity matches a joined member, and writes coordinator bridge files at step/end and turn/end so multiple agents stay asynchronously aligned.

This plugin is aimed at developers and teams orchestrating multi-agent workflows with Maestro-Flow under DSH 0.1.0-rc.6. If you want models to progress autonomously within enforced safety boundaries, stay context-aware of the live workflow, and coordinate across agents with low latency, dsh-maestro-runtime is the missing adapter between your DSH session and the Maestro-Flow runtime.