Steffen Gransow graste

Claude Code burns ~15–20% of your tokens on a 3-word status line. Here's how to turn it off

by Flamerix AI · MIT License

Platforms: Linux and Windows 11 tested by us; macOS reported by others. Tested on Claude Code 2.1.257–2.1.317. The binary is not modified (BUN_OPTIONS=--preload). An update can silently undo it, so see Verify.

TL;DR

Every ~30 seconds, Claude Code re-sends each background agent's full transcript to the model to

With the release of PHP 8.1, developers using ZTS (Zend Thread Safety) and the parallel extension gained another convenient tool for inter-thread communication: a shared in-memory SQLite database that can be configured with a single DSN string. This approach turns out to be simpler and more intuitive than the standard parallel\Channel or custom sockets.

A Quick Note on ZTS and parallel

PHP with ZTS enabled allows code to run concurrently in multiple threads. The parallel extension provides a high-level API for this: parallel\Runtime, parallel\Future, parallel\Channel. Threads are isolated, so to exchange data you must either use channels (parallel\Channel) or implement your own data exchange mechanism via sockets, files, or shared memory. While this works, it requires extra code/extensions/experience and is not always convenient.

SQLite as a Data Bus Between Threads

Starting with PHP 8.1, PDO SQLite supports a special DSN format using URIs, which allows the same in-memory database to b

background

the (known) origins of the term "comprehension debt"

Jeremy Twei coined the perfect term for this: comprehension debt. It’s certainly tempting to just move on when the LLM one-shotted something that seems to work. This is the insidious part. The agent doesn’t get tired. It will sprint through implementation after implementation with unwavering confidence. The code looks plausible. The tests pass (or seem to). You’re under pressure to ship. You move on.

symptoms

volume & verbosity inflation; PRs grow in size, making diffs harder to review & reason about.

Caddy Server - First Contact

Offene Fragen nach der Session

Wie sieht es bei den Zertifikatserneuerungen aus?

Die werden ebenfalls automatisch durchgeführt, wenn Letsencrypt oder ZeroSSL - bzw eine ACME CA - im Einsatz ist. Kann man aber natürlich auch "klassisch" manuell machen, wenn man das aus irgendwelchen Gründen braucht.

	#!/usr/bin/env php
	<?php
	/**
	* https://www.wiz.io/blog/keyv-and-cacheable-npm-supply-chain-attack
	*
	* Durchsucht das Dateisystem nach Verzeichnissen von npm-Paketen, die in der
	* Wiz-Research IOC-Liste (Shai-Hulud / "keyv" Supply-Chain-Angriff) als
	* kompromittiert gelistet sind, und vergleicht die installierte Version aus
	* package.json mit den bekannten bösartigen Versionen.
	*

	#!/usr/bin/env bash
	set -euo pipefail

	# patch-claude-code.sh — Rebalance Claude Code prompts to fix corner-cutting behavior
	#
	# What this does:
	# Patches the npm-installed @anthropic-ai/claude-code cli.js to rebalance
	# system prompt instructions that cause the model to cut corners, simplify
	# excessively, and defer complicated work.
	#

	#!/usr/bin/env python3
	import os
	import sys
	import json
	import subprocess
	import urllib.parse
	import urllib.request
	from pathlib import Path
	from concurrent.futures import ThreadPoolExecutor

	// For context check out https://portswigger.net/web-security/host-header/exploiting#connection-state-attacks
	var connectionId = utilities().randomUtils().randomString(8);
	var options = RequestOptions.requestOptions().withConnectionId(connectionId).withHttpMode(HttpMode.HTTP_1);

	// Send a simple GET / HTTP/1.1 to the target as the precusor request
	var url = requestResponse.request().url();
	var precursorRequest = HttpRequest.httpRequestFromUrl(url);
	precursorRequest = precursorRequest.withPath("/").withHeader("Connection", "keep-alive");

	// Send the attack in the repeater, and update the response pane

	<?php
	// This code is what the Symfony Dependency Injection container performs
	// under the hood when registering a listener.
	$eventDispatcher->addListener(
	KernelEvents::REQUEST,
	function ($event) {
	// only when here, MyListener and ExpensiveDependency trigger autoloading
	// and the time of calling their constructor is spent.
	(new MyListener(new ExpensiveDependency))->onKernelRequest($event);
	},

	// This will use the single-packet attack for HTTP/2, and last-byte synchronisation for HTTP/1
	int NUMBER_OF_REQUESTS = 10;
	var reqs = new ArrayList<HttpRequest>();
	for (int i = 0; i < NUMBER_OF_REQUESTS; i++) {
	reqs.add(requestResponse.request());
	}

	var responses = api().http().sendRequests(reqs);
	var codes = responses.stream().map(HttpRequestResponse::response).filter(Objects::nonNull).map(HttpResponse::statusCode).toList();
	logging().logToOutput(codes);