All Claude Code modsanthropics/claude-code
diff
The diff pane as a plugin: /diff opens the session's uncommitted changes beside the transcript, file by file with their hunks, refreshed as Claude edits and runs commands; the first edit opens it where the terminal is wide enough, and a file's ask button rides its hunks on the next prompt.
review UI rewrite
diff reaches L2 (writes or runs) and passed claude plugin validate on Claude Code 2.1.302.
- Events hooked: 8
- API methods referenced: 23
- Access from classified calls: L2, writes or runs: runs processes, reads files, reads env vars, reads settings, reads the transcript, telemetry, persists state, draws
- Static scan, not a runtime test
It ships inside Claude Code, so there is nothing to install.
Access
L2 Writes or runsruns processes, reads files, reads env vars, reads settings, reads the transcript, telemetry, persists state, drawsValidation
Passed on Claude Code 2.1.302View the source on GitHub Back to the list
What the scan recorded
- Observed events
- ?|? calls, every prompt
- Hooks
session.start, ui.render {component=PromptHint}, ui.render {component=Pane}, command.run {command=diff}, ui.close {id=?}, ui.focus {plugin=?}, ui.scroll {requestId=?}, command.run {command=clear|resume}, tool.call {tool=?|?}, prompt.submit- API calls
$.clock.after, $.clock.every, $.clock.now, $.command.register, $.env.get, $.fs.list, $.fs.read, $.fs.stat, $.process.run, $.session.id, $.session.messages, $.session.usage, $.settings.read, $.store.get, $.store.set, $.telemetry.log, $.telemetry.mark, $.ui.close, $.ui.invalidate, $.ui.log, $.ui.open, $.ui.resolve, $.ui.status- Validation on 2.1.302
- Passed
- Scanned revision
c017428c8c27- UI rewrite review
- UI hook source contains control-character strings. Review any values passed to next() as rewritten props.text; the scanner does not trace whether these strings reach that call. mods/diff/hooks/git/parse/is-whole-listing/is-whole-listing.ts:16, mods/diff/hooks/git/parse/parse-file-diffs/parse-file-diffs.ts:26, mods/diff/hooks/git/parse/parse-file-diffs/parse-file-diffs.ts:42, mods/diff/hooks/git/parse/parse-numstat.ts:22, mods/diff/hooks/git/probes/dirty-paths-of/dirty-paths-of.ts:30, mods/diff/hooks/git/probes/untracked-files/untracked-files.ts:36
These are the hooks and API calls reported by claude plugin validate. Access levels describe the widest reach of those calls and are not safety ratings. Validation is a static check, not a runtime test, and a passing result does not prove that a mod works or is safe. How the scan works.
More from anthropics/claude-code
- agents-mdAGENTS.md as project instructions, by one option. Under claude-md-or-agents-md a project with no instruction…
- sec-defaultSecurity default for organizations: seated outermost, it keeps the organization's classic hooks, prompt conte…
- telemetryPlugin analytics: hooks $.telemetry's two events, so a plugin logs an event or marks a feature's use as a fir…