Skip to content

dreeft 1.3.5

Choose a tag to compare

View all tags
@achiurizo achiurizo released this 05 Oct 02:05
· 24 commits to main since this release
v1.3.5
5cc75de
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

A Claude Code mod: a band above the prompt showing what the session's thinking is doing. Three rows: the names the turn keeps coming back to, a timeline of where the turn's time goes, and what the turn costs in context.

Install

Inside Claude Code:

/plugin marketplace add achiurizo/dreeft
/plugin install dreeft@dreeft

Needs Claude Code 2.1.287 or later, terminal surface. The mod API is early access, so a Claude Code update can break the mod until it catches up.

In this version

Focus row

  • A name the turn keeps coming back to now survives a long turn. Past 50 tracked names, the name with the lowest count goes first, the oldest on a tie. Before, the least recently seen name went, whatever its count.
  • Justfile, Makefile, Dockerfile, Gemfile and Rakefile count as file names, as do .txt files and a .tmpl after a known extension (chezmoi.toml.tmpl).
  • A Windows path in a tool's file argument counts by its last part.
  • One malformed tool call in a step no longer costs the focus names of the step's other tool calls.

Memory shadow log (experimental, off by default)

  • More credential shapes are replaced with [redacted] before the judge call and the log: vendor tokens (Google, GitLab, npm, Hugging Face, SendGrid, Stripe webhook, Slack webhook, age, AWS temporary key ids), the AWS secret key beside a key id, a password flag after a command known to take one (mysql -p, curl -u, docker login -p, --password), and more secret-named keys and headers (DB_PASS=, pwd:, Cookie:, Authorization: Token). A value holding , or ;, an escaped quote, or a / in a URL password is now redacted whole.
  • A tool result is redacted before it is cut to 2,000 characters, so a token split by the cut no longer survives as a fragment.
  • The repo's remote is quoted inside the judge's message, not placed on a line above it, and loses its credentials, query string and fragment in every scheme.
  • The judge's reply is bounded: fact 400 characters, reason 160, name and topic 60.
  • The code stamp on each line now also covers the redaction shapes, the name patterns and the shape of the judge's message.

Redaction is by pattern and can miss a secret in a shape it does not know. The README lists what is covered.

By default the mod makes no model calls, no network requests and no file writes.

Assets 2
Loading