Plugins

Merges other sessions' context into the current turn: evidence-weighted conflict resolution, retraction of claims whose premises were retracted, trust labelling that resists cross-session prompt injection, and budget-bounded packing. Ships a benchmark.

Browser automation for DSH: the agent fills in forms, scrapes lists and works across tabs in real pages, using the logins you already have. It drives its own visible window on your desktop — minimise it and it keeps working without stealing focus — and a sign-in, CAPTCHA or native dialog stops the run and hands the page back to you: it never confirms on your behalf. Login state persists (own profile plus session-cookie re-injection). 23 Playwright tools (20 always on, 3 gated and off by default), with a URL allowlist, dialog suspension and a CDP method allowlist that are mechanism-level and pinned by tests.

Replaces the built-in bash executor so every command gets an environment resolved from its own working directory: configurable PATH prepends, Python venv activation and mise shims, with a dedicated section in the Web UI settings.

Post-compaction premise-drift guard: injects a one-shot notice when a compaction summary drops a critical literal anchor.

File-backed working memory: memorize/recall key premises verbatim in a session notes file so they survive context compaction losslessly.