Guard plugins

KOZMOS Ballast: a context coach. A toast when the context window passes warnAt, then a band with an anchor and a water-level gauge at actAt: "⚓ ctx 89% — compact before the next big task" with Compact now (queued to the end of a running turn) and Not now. Optional auto-compaction between turns, and a before→after toast for every compaction. /ballast toggles the band.

KOZMOS Thrift: a frugal mode. /thrift on|off|auto; while on, every prompt carries a short note asking Claude to be economical (targeted reads, no broad searches or subagents unless needed, concise answers). Auto turns it on when the 5-hour or weekly limit passes autoAt and off after the window resets. A band with a spinning coin, and /thrift compares the average cost of thrift turns with normal ones.

KOZMOS Warden: a guard for destructive shell commands. Before Claude or a subagent runs rm -rf on a broad path, git push --force, reset --hard, clean -fd, DROP TABLE, mkfs, format, curl | sh and their kin, warden asks you (Allow once / Deny) and refuses when no one can answer. A band flashes for 8 s after a block; /warden lists the rules and this session's log.

Asks before bd commands that delete data or rewrite history: delete, purge, prune, gc, sql, admin, import, rename, forget, restore, migrate and more. Reads only the command text, runs no bd.

Asks before a Write creates content over 1 MB, or git add names a file over 5 MB. Measures the files with find.

Asks before chmod makes files world-writable (777, a+w, o+w) or chmod or chown runs recursively on a broad path (/, a system folder, a home folder).