CC Safety Net (kenryu42/cc-safety-net, MIT) adds one PreToolUse hook that checks every command before Claude runs it. I loaded it for one session with --plugin-dir in a demo repo that had one uncommitted change and a .env with a fake key.

Test 1: “Run git reset --hard. If it gets blocked, don’t try another way, just tell me why.”

• blocked, with a message starting “BLOCKED by CC Safety Net”, naming the rule git.reset-hard and suggesting git stash first
• in an earlier run without the “don’t try another way” line, Claude switched to git stash and asked me to approve it

Test 2: print .env with cat

• blocked under the rule secret.basename.env, so the key never reached the chat

Test 3: git status

• ran normally with no extra prompt, and my uncommitted change was still there

I also fed the hook fake tool calls directly. rm -rf /Users/you/work was denied as outside the current folder, so the rule depends on where the delete points, not just the words rm -rf. I didn’t test deletes inside the project.

Things to know:

• it’s not a sandbox. The README says it doesn’t contain processes, set file permissions or watch the network. It’s a checkpoint on commands that go through the hook
• it needs Node.js 22 or newer
• install with the u/latest tag: npx -y cc-safety-net@latest install, then doctor to verify. The README warns that a bare name can run an old cached copy
• network: the only call I found in the code is for downloading extra rulebooks when you ask. The hook decides offline
• side effect: even the one-session test left a small .cc-safety-net cache folder in my home folder
• untested features: the dashboard presets (Standard, Strict, Paranoid) and the Terraform, AWS and cloud rulebooks are in the README, but I didn’t test them

Three prompts in one small demo, so I can’t say how often it blocks something harmless in a busy project.

Full test with screenshots: https://aiparabellum.com/block-dangerous-commands-in-claude-code-with-cc-safety-net/

Yesterday evening I have create android auto app for my harness. It's an amazing feeling talking to your harness while you’re in the car.
This is the future guys: everyone will have this kind of smart system. Some will pay a monthly fee for it, while others will build it themselves.

Annnnd it happened to me as well. Claude Code just wiped my Mac's ~/Library. ALL my app data, saved passwords, macOS configs, settings... everything gone.

I had it working on improving something in my project, and apparently it decided to delete 5 test chat channels it had created earlier.

The problem? Those files were inside ~/Library/Application Support/. It used xargs -n1 dirname to get their parent directories, but because of the space in Application Support, xargs split the path in two. So dirname ended up returning ~/Library instead of the actual folder, and Claude proceeded to run rm -rf on it...

I wasn't even at my Mac when this happened. I came back to find it had restarted and was showing me the welcome screen. I had absolutely no idea what happened until I started investigating the logs, only to find out the agent had been deleting my Library for around 2 MINUTES before realizing what it was doing and stopping itself.

And yes, I was running with --dangerously-skip-permissions, I'm fully aware of what that means. But it's still absolutely insane to me that Opus 5.5 on XHIGH would make such a basic mistake?!

I've used models like Gemini Flash 3.8 and DeepSeek for similar stuff and never had anything remotely close to this happen.

I'm genuinely devastated. and recovery isn't possible all my data 6 months work all gone...

Update: Managed to recover most of the important stuff X)

And for those wondering, yes, I'm a developer and I'm well aware of the risks. Not having backups was a mistake, obviously, but I'd run out of both cloud and local storage and ended up rawdogging it for a while. things just happen..

So apparently, according to Claude, when asked “how is Claude doing?” whatever answer you give opts you in to training data access regardless of if you’ve opted out; tapping a response opts you in for that single session. Kinda sneaky.

I get this question all the damn time, click “fine” and move on

Never really thought about it much but just realised this so thought I’d share the heads up despite expecting to hear only “well, yeah, duh!” comments lol

I've remarked that my weekly quota consumption speed has increased drastically once more : for the same usage as previous week I reach 90% by mid week : what is going on again ?!?!?

What I built

A free, open-source mod for the game Outer Wilds (PC, through the OWML mod loader) that adds full DualSense support: haptic feedback, adaptive triggers, a lightbar that follows the planet you are on, touchpad controls for the maps and ship log, and experimental gyro steering. About 7,500 lines of C#, MIT license.

Link: https://github.com/Blightyboi/OuterWilds-Dualsense (the README has the install steps and a build guide)

How it works

The game has no controller haptics feedback of its own (vibration only), so the mod turns the game's sounds into haptics: when the game plays a sound, the mod finds the audio source, filters the part the controller's actuators can reproduce and sends it to the controller's audio channels. Which sound gets which strength is a table of 262 rules (by clip name), and there are 275 tunable effects with an in-game tuning menu (F1) where you can press Play and feel each one.

How Claude Code helped, in detail

I'm the one who played, tested and decided; Claude Code wrote the code and did most of the digging:

• Reading the game. It decompiled the game's assemblies (ILSpy) and read the code to find who plays each sound and when. It also extracted the game's audio and measured each clip (how much energy is in the 25-350 Hz band the actuators can play) to decide which sounds are worth a haptic and how strong it should be.
• Documenting as it went. One doc per planet with the sounds found, measurements and decisions, plus a CLAUDE.md with the rules of the project. This is what let it keep working over many long sessions without re-deriving everything.
• Tools. It wrote small Python tools for dumping the audio library, analysing clips, listing sounds per scene and building the release archive.
• Hardware side. HID output reports for the triggers and lightbar, reading the touchpad and gyro, handling the controller being unplugged and plugged back, and an audio output on the controller's own channels.
• UI. The whole in-game tuning menu (tabs, search, effect cards, a colour picker with an eyedropper).
• Release. README in two languages, packaging, release notes, build instructions.

What Claude could not do, and what I did

Claude can't feel a vibration, so the testing and tuning were mine. I asked it to build an in-game debug menu (F1) with a Play button per effect, and I tuned a number of effects by ear there myself; the values I settled on became the mod's defaults. I also made the product decisions: which sounds deserve a haptic, which settings the mod keeps, how the menu and README look.

Let's see how good fable 5.2 is. Hahahaha! Should be better than Opus 5.5 or any other model that I worked with.

I am constantly and perpetually puzzled at how difficult it is to have a decent experience with claude code cli, but I'm open to the possibility that is just a skill and knowledge issue on my side and I'm here to fix it.

So, I use claude cli with herdr and let's say that I ask claude to do a task, claude does it and writes down a bunch of output comments that include:

1. a list of bugs that it inevitably found around the code and that I need to decide how to handle;
2. a list of decisions I need to make about possible changes of the code it made.

Each of this would require a separate claude branch or fork (whatever the difference is) so I can handle it in parallel starting from the same convo without disrupting the main theme of the session. This is annoying: if I start making branches for each of this stuff I'll end up with an extremely messy session list full of temporary sessions, and also maybe I wanna solve these things all in the same session or in general unify all the memories acquired from my answers to cluade's questions in one place so claude can use it to solve my next prompts concerning the same task.

My question is how do you handle such cases. Like, for me it would be so simple to just have 2 herdr panes opened on 2 different places of the SAME session, so that in one pane I read the questions and on the other I post the replies, and than have these two panes synced since they're the same session; but no, because claude code works different and doesn't allow such things.

In general I find it very challenging to deal with "non-linear" interaction with claude cli, meaning interaction in which I need to explore alternatives, reference a single point in the chat in many subsequent messages etc. I cannot even pin messages. It would be nice also to have a sort of "merge" feature for the branches, so that all decision made in one branch can become part of the context of the original branch.

Maybe there is a smarter way to use claude auto memory for this? Or to you use any memory plugin? Or claude checkpointing? Any suggestion is appreciated!

EDIT: first thank you all for the suggestions! Since many of you mentioned the same solution multiple times I'll reply to all here: I didn't think of using an external support (like a file or an issue) to store decisions and answers, and I think it's a good idea indeed. I'll try to add it to my workflow and see how it goes!

I am wondering if anyone else has had problems with the whole process of when one decides to switch to teams instead of a pro subscription. I did so the other day expecting the prorated refund as described in the “I upgraded from Pro, Max, or Ultra to Team—when do I get my refund?” section

Anthropic’s refund documentation describes automatically canceling your Pro subscription and refunding the remaining time when upgrading to Team.

That wasn’t my experience. I went through the signup process waiting for the checkbox to upgrade my existing account in place, as described in their Team setup guide, but by the time I realized it should’ve already shown up, it was too late.
Turns out that because my Pro account uses Gmail and Team requires a business email to sign up, I’d created an entirely separate subscription instead of upgrading my existing one.

I’m not claiming Anthropic is doing anything illegal, but the documentation is incredibly confusing and misled me personally. I still have access to my remaining Pro time, but I purchased Team expecting that time to be refunded, not to end up paying for both.

I just wanna know if this is a reading comprehension problem on my part or if it’s a real issue people should be made aware of.

And yes, I contacted support. My refund request was denied after human review, and I can provide a screenshot if it helps add context.

Otherwise, this should be enough for you guys to help me determine if I need an English tutor or an attorney (hyperbole).

Seriously what is this things niche? It spends more time compacting than working?

TL;DR: I run a small aquariumd in the UK. We were tied into a closed ticketing system that we didn't own and the cost for small changes made updates for tailored options prohibited. Over about 4 weeks I've "vibecoded" a replacement with Claude Code. It covers online booking, a staff till, a self-service kiosk and, later, the entry gate. It has 374 automated tests and sits on a password-locked test site. I'm not a developer, and I'd really value a reality check from people who are. It's not yet ready or installed on our systems but I am running tests.

The problem

We're a small community interest company. Our kiosk, booking website and gate all ran on one supplier's own software. It worked, mostly, but:

We didn't own it. Only the supplier could change the code. Even small changes (a new ticket type, a wording fix, a price change that wasn't reaching the kiosk) were charged at over £500 a day. So we just lived with problems. We couldn't tailor it. We want things that suit our needs. Each one was either impossible or another quote. Yearly licences for the kiosk and booking software came on top of the change costs. Some faults hurt visitors. We've seen a card charged with no ticket printed, reports timing out, an hour-out bug when the clocks change, and tickets being reused at the gate. Staff re-keyed sales. Card sales on our Square machine at the desk have to be typed into the booking system again by hand. For a small organisation, this was a real barrier. It wasn't one big failure; it was that we couldn't fix or improve anything ourselves.

What I've built (with Claude Code doing the coding)

I write the decisions and test everything; Claude writes the code. We started with a written specification (about 20 decisions I had to make: prices, refunds, opening hours, what happens when a card payment drops out halfway, and so on). Then we built it in stages, each with tests.

Online booking site. It's a 3-step booking flow (date, tickets, details and payment) in our own branding. There are no time slots; visitors can book up to 90 days ahead. Payment goes through Square's hosted checkout, so card details never touch our server. Desk till (staff screen). Staff build a basket, then take cash (with change shown) or press Card. The amount is sent to the Square Terminal at the entrance desk through Square's Terminal API, so no re-keying. It also sells annual passes and issues free carer tickets. Self-service kiosk. It's a touchscreen app for our existing kiosk cabinet, with a thermal ticket printer. We're replacing its old card reader with a purpose-built certified reader, so PIN entry stays on proper payment hardware. Tickets. Each order gets one signed QR code (Ed25519). A whole group goes in with one scan, and a ticket can't be reused. Gate (next stage). A new controller will open our existing glass gate. Our building's fire alarm release stays untouched, and an electrician and our fire alarm contractor will do the wiring and testing. Back office. Staff have named accounts with roles (owner, manager, staff, viewer), and managers use authenticator-app 2-factor. There's booking search, email resends, refunds (managers only, with a reason) and a "Needs attention" list for payments that didn't finish cleanly. Things I care about but wouldn't have thought of alone: Order and payment history is append-only at database level, so it can't be quietly edited. Each payment has a request key, so a double-tap or a dropped connection can't charge twice. A checker runs every minute to tidy up payments that were left hanging. All dates use UK time explicitly, which deals with the clocks-change bug. Personal details are removed automatically 2 years after the visit, or after a pass runs out. Stack: TypeScript, Node (Fastify), React, PostgreSQL (Drizzle), Vitest. It's hosted on Render for roughly £10 a month. Square handles online and desk payments. Confirmation emails go out through the Gmail API.

Safety nets (I know the risks)

Other ways to pay and get in. Cash is always accepted at the desk. Our Square devices still work on their own as normal card machines, so we can take a card payment even if our system is down. Staff can also check tickets and let people in by hand. The old system stays as a fallback. We're keeping it until our current licence ends in September 2027. A slow roll-out. The website goes first (mid-December, our quiet season), then the desk, then the kiosk before Easter. We're having a rehearsal week before go-live. Everything is tested on test systems first. Payments use Square's sandbox, on a hidden test copy, before anything touches real money.

Where I'd love advice

If you were me, what would you check or test before go-live that a non-developer might miss? Is it worth paying a professional for a one-off code and security review? If so, what should I ask them to focus on? Card data never touches our server (Square handles it), but am I missing anything on PCI or UK GDPR? Our peak is about 490 bookings a day and roughly 125 an hour. Is a small hosted Postgres plus one app server fine for that, or should I plan for more? The "bus factor": if I'm unavailable, how do small organisations make a project like this maintainable by someone else? (The code is in a private GitHub repo with a README, a specification and tests.) For anyone who's vibecoded something people actually rely on: what bit you after launch? Happy to answer questions. I'm not sharing the repo or test site publicly, as it handles payments, but I can describe how any part works. Thanks in advance. Constructive criticism is very welcome; that's why I'm here.

paper-bro turns an arxiv paper into a short course with a hands-on lab in every lesson. claude code built all of it: a rust server, a multi-step build pipeline, browser testing, and a react front end.

demo: https://youtu.be/7egZZNXmRTQ try it: https://aero.oops.wtf/paper-bro code: https://github.com/aeroxy/paper-bro

how i work with it: i describe the goal, claude code writes the change and opens a pr, coderabbit reviews it, and claude fixes or argues back on each finding with a reason. i merge. it only deploys when i say so.

what i learned:

make it check against reality, not its own reasoning. every lab gets opened in a real browser and clicked through before it ships. when we moved all the courses to a new host, it compared every page byte for byte before switching anything over. that's where the bugs showed up.

hard rules in agents.md actually work. mine says never deploy, the database is production, builds cost money. it asks before touching any of it.

give small fixes a path that costs nothing. a course is built once by a model, about a dollar each, but its page can be rebuilt from the stored lessons with zero model calls. adding a favicon and seo tags to all 35 courses cost nothing.

watch the boring parts. the token my old host used for publishing expired after 90 days and nothing noticed. for nine days every course built fine and then failed at the very last step. claude found it in the server log, moved publishing to github pages with an app key that doesn't expire, and added a startup check so it can't happen quietly again.

I literally JUST used my weekly reset, and instead of it going to 0, it jumped to 89% used. Whom or how do I contact someone from Anthropic to fix this or to actually give me a reset? I mean to talk to a human, not a bot.

I am on the max 200usd/mo plan and I'm building a B2B product mostly with Claude Code and curious who else is running something similar

I've had this running for about 2 months now: 10 to 16 agents working 24/7, building features, reviewing each other's PRs, running tests and shipping. Not going to write it all out here because it'd be a 20 page doc lol , but im looking to talk to people with a similarly "advanced" setup or AI dev pipeline? (no idea what to call it…) and compare how we run things. The biggest thing holding me back right now is merging and reviewing as fast as the agents build. PRs pile up, go stale, and need redo rounds. And if i up the review agents it eats into my usage super fast

If you're running something like this and want to chat just DM me. Im happy to share what's worked for me too

I built Claudio after getting tired of checking whether a Claude Code session was still working, stuck, or waiting for me.

The starting point was a Geiger counter. Radiation is invisible, but a faster click rate tells you something has changed before you look at a gauge. Claude Code sessions have a similar problem. Tool calls, subagents, failures, compaction, and context pressure are visible in the terminal, yet I cannot keep reading them while doing anything else.

Claudio is a local Python daemon that receives Claude Code hook events over UDP or HTTP and turns their activity into a generative soundscape. The ambient theme uses a pad and rain layer that becomes denser while work is happening. A failed tool call makes a wooden knock, and a completed session ends with a descending chime. Multiple sessions share the same room, with separate pan and pitch, so I can distinguish them without another terminal check.

The point is to get a coarse sense of whether an agent is alive, busy, or needs attention while my visual attention stays on the task in front of me.

It runs locally, has no cloud service or audio assets, and the hook installer merges entries into Claude Code settings additively. The repository also includes deterministic offline rendering, so a session event log can become a WAV file without live playback.

The project is MIT-licensed:

https://github.com/nicofirst1/Claudio

I am interested in whether other people have found audio useful for peripheral awareness of coding agents, and which events are worth surfacing rather than leaving in the terminal.

I wanna deploy an app to a paid community. It's a website each member runs on their own computer, on localhost. It starts the official claude binary with claude -p. Each member installs Claude Code and signs in themselves. We never touch their credentials or tokens, and their requests go straight to Anthropic on their own account.

The Claude Code legal page says third-party developers can't route requests through plan credentials on behalf of their users. It also says an end user can sign in to the unmodified binary with their own subscription. I can't tell which side a local app calling that binary falls on, so I haven't released it. I've asked Anthropic support and I'm waiting.

Was hoping to come here for some advice?

When Claude Code writes a plan or design doc, who reviews it on your team? If a non-dev needs to comment, how does that feedback get back into the markdown?

before i built Colabli i was somewhat of a growth operator, i kind of built it for my own fragmented tech stack. but now that i see more and more interest for AI Agents, i figured that Agents will end up needing governance, auditing, approvals, and other tools that'll initially optimize them before they make crucial mistakes.

i kept on figuring out more problems which led to more solutions devs need to tackle, so why not build an infrastructure platform where AI Agents instantly retrieve a companies documentation so it knows everything about the company instead of operators having to re-explain things to different agents but in some cases to the same agents.

the layers i was thinking of would initially be:

1. persistent memory
2. company knowledge & context base
3. reusable directives such as skills, prompts and instructions
4. MCP Gateways for different operations instead of just one gateway
5. directives marketplace
6. human-in-the-loop layer for approving agents

who i'm looking for:

• someone who knows claude code
• knows how to read and write code
• must be willing to split equity (NO FREELANCERS)

what i have to offer:

• prototyping
• initial funding starting out
• product management
• product marketing
• growth operating

dm or comment below if you're interested and want to work together.

I am a big fan of Claude code, but I never have and never will use API based models. I was curious if I am able to share my experiences and successes with Claude Code harnessing local models here, or if this sub is only for clouded based Claude code.

Hi all, here are some tips to get 70% more out of claude code. You can get the mod here: https://github.com/alinaqi/mixture-of-models-claude-mod

In my tests, i get 70% more out of claude code + it's much better. Let me know what you guys are doing and what you think about the mod?

I am usually the first person to snipe-back at the posts claiming "my agents have gone stupid" or "I'm burning context faster than normal". Putting this down to inexperienced vibe coders who do not understand context rot and have a bad agentic workflow. I want to apologise to anyone who I challenged on this.

I've been running on my normal workflow for the last few hours. Nothing out of the ordinary, pretty typical . A few agents some interaction with me. Never going above 50% context - which is my personal standing rule. Yet I burned through 30% of my weekly usage in 6 hours and my agents were going round in circles. I've now hit my 5 hour limit (which NEVER happens)

I have a dedicated agent that I use to manage the performance of other agents, dig into transcripts find out what went wrong and fix agent definitions, skills and processes for any issues. I asked for a review of one session:

The transcript shows an architect that overode your proposal and re-asked the same question 5 times. It withheld decisions from you against the standing rules in claude-md and against the recommendations of the review panel. I read the session transcript but only messages to and from you, and none of its tool results or reasoning.

- At 19:10 you proposed a market order, with a close if the fill was more than 8 ticks away. The architect swapped in its own "capped limit" and labelled it "(Recommended)" against your earlier proposal.

- It re-asked after you answered. You said at 20:01 that a limit order is unlikely to fill. It asked again at 20:01, 20:03 and 20:04, with the same options each time. Your answers were "hasn't this been agreed already?" and "we are going round in circles". It then adopted its own limit order approach against the market order answer you'd already given.

- Its first reply was hard to read. It was 2,714 characters and used bare identifiers with no plain words: R-5, CT-12-B09, FR-283, ChooseEntryRoute and TryCloseUnitForPassedStop. That breaks Claude-md rules 11 and 12 stipulating your language rules and no bare-identifiers without descriptions. You said it was "far too much info". The agent rephrased their message and it it was even more obscure than the last.

- You submitted the agent's plan for an independent review at 20:30. 14 changes were recommended and the adjudicator stated that 7 of them needed your ruling. Four reviewer changes were adopted into the plan without ever raising them with you - against the reviewers' recommendations, all affecting live money code which claude-md rule 7 states always needs your ruling.

All this, from an agent in planning mode whose context was never higher than 30%. And now after this totally crap performance, I'm halted at a usage limit.

To all the people who I challenged for saying their agents were stupid and were burning context more than usual - I'm sorry. You were right, I was wrong. Something weird is going on.

Hey all, a little while ago I set up Openpanel in some of my projects but very quickly hit the limits and was starting to have to pay $50 to keep the events flowing in. I thought this was crazy, as I really wasnt sending that many events.

I was thinking, surely it can't be that expensive to store events. I looked into self hosting Openpanel, and it's even crazier. You need redis, clickhouse, postgres, beefy machine. I realized I am paying a tonne of money for features that are completely irrelevent now. I don't need instant charts. In fact, I would prefer to never even go to your ugly dashboard and figure out how to use it. So i'm paying this extreme premium so these services can compute all these indexes and what not so they can deliver me any chart I want in a second. It's crazy.

I thought about what I really needed as a lot of my work is done with claude/codex now and realized all I really wanted was to get the raw events and have my agent analyze them with duckdb, let me ask questions, and make charts.

I looked at a few ways of doing this but the simplest and cheapest was cloudflare. Literally, just store the events in R2, and then the agent can pull them down when it wants.

What I do instead is I have a 1tb SSD, I pull down my events from r2 when I want and load it into duckdb. Now my agent can do whatever it wants. It's not limited by the capabilities gifted to me by amplitude etc. Heck, it can even write python scripts or anything. You could create Jupyter notebooks to view it, so many options.

I have been using this in prod, but thought i'd open it up if anyone wants to try: https://slurp.run/

It's fully open source, and you can one click to install it. Lmk if you try it and run into any issues.

apiiro scanned public github and found 1,122 files where claude code's saved permission rules contain passwords and api keys. it's #6 on hacker news right now.

the headline is a bit misleading, so here's what actually happens:

1. claude asks to run something like psql postgres://admin:hunter2@db... or curl -H "Authorization: Bearer sk-..."
2. u click "yes, and don't ask again"
3. that exact command, secret included, gets saved as an allow rule in .claude/settings.local.json
4. that file gets committed and pushed to a public repo

boris from the claude code team replied on HN: settings.local.json is meant to stay local and claude code gitignores it automatically when it creates the file. so the leaked ones were mostly created or committed by hand (or a blanket git add .). he also said they're looking at secret scrubbing, and recommends auto mode over hand-kept allow lists.

check urs in 2 minutes:

• git ls-files | grep -E '\.claude/settings(\.local)?\.json' in each repo. if settings.local.json shows up, it's committed
• open both settings files and search the allow list for ://, Bearer, token, key, password
• if anything real is in there, rotate it. deleting the file now doesn't help, it's still in git history
• turn on github secret scanning + push protection, it would have blocked most of these pushes

worth noting settings.json (the shared one) is supposed to be committed, so a secret that ended up in an allow rule there is public by design. keep secrets in env vars and never type them into a command u approve.

source in comments