HongSJ

We launched today, and we'd rather you hear the limits from us before you install.

• A prompt you type into Claude Code or Codex is not masked, because neither client lets a hook rewrite it. shim reports it, or blocks it under enforce. Copilot CLI is the exception: there the model gets the masked prompt.

• In Claude Code, the output of a failed command can't be replaced. cat .env && cat missing-file exits non-zero and the model reads the .env as is. shim reports it.

• Files attached with @ and shell commands are reported, not masked.

• Codex and Copilot CLI tool traffic isn't inspected yet. VS Code reports but masks nothing.

• Detection is patterns plus checksums. It misses names, postal addresses and passwords with no key name. Treat it as a guard, not a DLP boundary.

• No Windows yet. macOS and Linux work.

Why a hook and not an MCP server? An MCP server only sees calls to its own tools. The agent's built-in Read and Bash never pass through it. A hook sits on the client's own tool calls, so it sees those too.

Which of these would stop you from using it? Your answers decide what we fix first.

On 6 October Sierra announced the Personal Agent Protocol, an open standard it is developing with Meta for how a consumer's AI agent deals with a business. On 9 October it published a first draft, called Poppy (Draft 0.1). Sierra sells customer-service agents, so read its framing as a vendor's view. The mechanics are worth learning from anyway.

A business publishes a file at /.well-known/poppy.json telling agents how to start a session and how customers sign in. The agent identifies itself and can begin as a guest, for example to check stock or a returns policy. When a task needs an account, the customer signs in on the company's own page using OAuth 2.0. Sierra's 6 October post says the customer chooses between read-only and write access. One session can span the website, the APIs (OpenAPI and MCP are named) and the company's own agent.

I kept hitting my Claude limit when Claude stopped answering, usually mid-task.

So Vitals 1.7 shows what's left of every AI plan on your Mac, in the menu bar and in its own Agents tab: