Guards

Asks before a command prints your environment, echoes a secret variable or sends local data to a remote host.

Adds /envinfo: versions of git, node, npm, python3, go, rustc and docker if installed, by running each (2 s limit), and the OS. Read-only.

A band above the prompt with the progress of the epic you work on, or of the open epic nearest to done (bm-ooq ███████░ 7/8), read with bd. Hidden without epics or bd.

A live side pane of each open beads epic: a bar of closed and total children, and a mark when it is ready to close. Read with bd, read-only. Open it with /epics.

A band above the prompt with how many tool calls failed this session (an error or a deny) and which tool failed last. Red from the first failure.

Five read-only repo exploration commands in one mod: /tree, /deps, /authors, /scripts and /env-check. They read git and project files.

Adds /owners : the top 5 authors of a file or folder by lines, from git blame. Names only, never addresses. Read-only.

A live side pane of the files Claude read, edited or wrote this session, grouped by action with a count per file, newest first. Open it with /files.

Three quiet nudges in one mod: commit after 8 edits, TODO/FIXME/HACK lines added, and debug prints added.

Asks before git commands that throw away work or rewrite history: reset --hard, clean, rebase, filter-branch, filter-repo, push --delete, branch -D and stash clear.

A live side pane, read with git: the branch, ahead and behind its upstream, changed files (staged and unstaged) and the last 5 commits. Refreshes after git commands and edits. Open it with /git.

Asks before git add or commit when secret-looking files are not ignored or are already tracked. Checks with git ls-files.

Asks before harsh DevOps commands: destructive Docker, Kubernetes and Helm calls, CI config edits, broad chmod and chown, and git commands that lose work. Add infra-guard for plain kubectl delete.

Asks only before harsh or disaster commands: destructive infra, git and SQL, piping downloads into a shell, sudo, leaking or committing secrets. Reads git. The quiet choice for daily work.

The 15 core Baselane guards in one mod (secrets, git, infra, packages, path jail). Some read git, measure files with find, read HOME with printenv, or check where a path really lands.

Adds /handoff: writes a session summary with the git status to .claude/handoff.md (never overwriting) and answers with the path.

Adds /heatmap: a 12-week calendar grid of the days you used Claude Code, like a contribution graph, shaded by turns, naming your busiest day.

Adds /hotspots: the 10 files changed most often in the last 90 days, from git log, with change counts. Read-only.

Asks before terraform destroy, kubectl delete, force-push, DROP TABLE or rm -rf.

Asks before kubectl apply or replace with --force, kubectl drain, helm uninstall, and kubectl delete behind global flags (plain kubectl delete is infra-guard's).

Counts the file types Claude edits across sessions and adds /langs: a bar list of the types edited most, each file counted once per session.

Adds /licenses: the licence of each direct dependency, from node_modules and Python dist-info at the git repo root. Shows unknown when it cannot tell. Read-only.

The four original lifecycle mods in one: runs your formatter, sends ntfy.sh pushes for long commands and input waits, and appends to ~/.claude/journal.log.

Adds /loc: lines of tracked text files by language, read with git, sorted, with a total. Skips lockfiles and binaries. Read-only.