Conversation monitoring & reacting
Observe conversations and react to their state.Conversation tags
Attach key-value metadata to a conversation with tags and read it back from AppConversation.tags.
Guardrails
Constrain what the agent can do with hooks.Command blacklist
Block known-dangerous shell commands with a PreToolUse hook bundled in a plugin. Everything not on the blocklist runs normally.