Toasts

Windows shell guard: fixes backslash drive paths in Bash, blocks quote-eating node -e / heredoc patterns, and catches PowerShell/Bash syntax sent to the wrong shell

Faixa de publicação: depois de um git push que deu certo, avisa para onde foi e que o deploy (Vercel/Pages) é automático; alerta se o remoto não está na lista permitida

Blocks risky shell commands (phone deletes, printing secrets, self-killing pkill) and strips secrets pasted into messages

Toasts once when the context crosses a threshold; /compact-advisor prints a ready-to-paste /compact line with branch, edited files, open tasks and the last goal

Stops Chrome actions when the Chrome profile is not the one paired with the active cswap account

Replaces /btw's blocking side panel with a plain, scrollable transcript answer.

Masks API keys and tokens in tool results before Claude reads them, and blocks a git push that would leak secrets or home paths to a public repo.

Claw mod: asks for your OK before any connector action that sends, deletes, pays, publishes or shares (fails closed, also when nobody is there to answer), and flags prompt-injection text inside emails, pages and files.

Vets npm and PyPI packages before they install: blocks hallucinated, typosquatted and brand-new install-script packages, flags risky ones

Masks credentials in tool output (URL passwords, *_TOKEN / *_SECRET / *_PASSWORD values, API keys, bearer tokens, private keys) before Claude or the transcript sees them. No network, files or processes.