• Reads current working directory and git branch
• Displays Claude API context window usage (%)
• Displays 5-hour and weekly rate limit usage (if Pro/Max subscriber)
• Shows current task/form if in an active session

• Only connects to api.anthropic.com (OAuth users only, for usage stats)
• Uses HTTPS with Bearer token authentication
• No data exfiltration

• Reads: .git/HEAD (current branch), ~/.claude/todos/ (current task), ~/.claude/cache/ (usage cache)
• Writes: ~/.claude/cache/usage-cache.json (cached usage), audit/execution.log (execution audit)
• Does NOT use system keychain (API key primary)

API Key (Recommended):

• Loaded from ANTHROPIC_API_KEY environment variable or .env file
• NOT stored in system keychain
• Never logged or exposed in output

OAuth (Fallback):

• Only used if API key unavailable
• Reads from macOS keychain (macOS only)
• Fetches usage from api.anthropic.com/api/oauth/usage

1. Split monolithic code into modular lib/ files (easier to audit)
2. Added explicit credential flow (API key primary, no silent keychain access)
3. Added audit logging (all executions timestamped)
4. Added input validation & sanitization (todo task names)
5. Changed color palette to Claude brand (orange primary)
6. Changed execution model: manual only, no auto-hook
7. Documented all security-sensitive operations with comments

Every execution is logged to audit/execution.log:

[2026-06-12T14:32:15.123Z] cwd=/path/to/your/project exit=0 api_type=api_key usage=cached

• Initial secure fork
• API key authentication
• Manual invocation only
• Modular architecture
• Audit logging
• Claude brand colors