Like some others, I also built this myself. Overly simply, with tmux, a memory tree, and handoff files and an orchestrator. And yet for how simple it was, it was so effective at minimizing the amount of duplicate context. It's like having shared specialist subagents who source and derive important shared knowledge from separate threads. It's useful because some skills just take too much of a token penalty to invoke a…
Message your other Claude Code sessions
71–76 of 76 posts
Re: Message your other Claude Code sessions
#72Re: Message your other Claude Code sessions
#73This is obviously cool and useful so kudos, but wow security researchers have to throw their hands up all the time. Now we open another attack surface where you can ask a remote agent to do things by default. There was a time when you call this a Remote Code Execution vuln. It's of course a feature here.
Making calls across a trust boundary, what could go wrong?
Ready for the downvotes.
Re: Message your other Claude Code sessions
#74I was reading about the HF hack and one of the first thing the GPT swarm did was build a messaging system for themselves. This reminded me of that. (Also of how weirded out I was by Moltbook when it came out. Time flies!) Unrelated: when my Claude/Codex finishes cooking (or needs my attention), it pings a local HTTP endpoint that plays a frog sound on my laptop. I found this massively boosts quality of life.
Does your terminal emulator not support bells/notifications? If it does, Claude Code (and albeit without checking surely Codex too) supports them natively.
Re: Message your other Claude Code sessions
#75Reading "Claude Code instructs the receiving Claude never to change permission settings" and so on in the docs makes it seem like they're using LLM classifiers to determine what commands are safe or not.
Re: Message your other Claude Code sessions
#76This is obviously cool and useful so kudos, but wow security researchers have to throw their hands up all the time. Now we open another attack surface where you can ask a remote agent to do things by default. There was a time when you call this a Remote Code Execution vuln. It's of course a feature here.