Session Resume

Preview · a replayed session in a sandbox

claude · ~/work/app · seat-resume

› fix the failing auth test and add an audit log call ⏺ Read(src/auth.ts) ⎿ Read 6 lines ⏺ Update(src/auth.ts) ⎿ Added 2 lines, removed 1 line ⏺ Bash(bun test) ⎿ 3 pass, 1 fail ● Done. refresh now rejects expired claims and logs an audit event. ✻ Worked for 42s · done 4:20 PM › /resume-sessions ⎿ seat-resume: The resume script printed nothing (exit 0). ────────────────────────────────────────────────────────────────────────────────────────────────────────────────────── › ? for shortcuts

README

Darling Data — Claude Code plugins

A Claude Code plugin marketplace from Darling Data.

/plugin marketplace add erikdarlingdata/claude-plugins

Plugins

`sqlserver-query-plans`

Teaches Claude to read a SQL Server execution plan and say what is actually slow, and why.

/plugin install sqlserver-query-plans@erikdarling

Point Claude at a .sqlplan file and ask. The skill is model-invoked — you do not need to call it explicitly.

The hard part of plan analysis is not spotting operators. It is knowing which numbers mean what they appear to mean. This plugin is built mostly out of the conclusions that sound authoritative and are wrong:

Cost percentages are estimates in every plan, including actual plans. Nothing recomputes them after execution. The 97%-cost operator is routinely not the slow one, and an operator shown at 0% can consume the entire runtime.
Row-mode operator times are cumulative. Ranking operators by raw ActualElapsedms ranks them by depth and always crowns the root node. Batch mode reports standalone times. Exchange operators report times that are close to meaningless.
EstimateRows is per-execution; ActualRows is a total. Without dividing by ActualExecutions, the inner side of every nested loop looks catastrophically underestimated when it may have estimated perfectly.
Missing-index requests are hints, not DDL. Equality columns come out in arbitrary order, existing indexes are ignored, and the Impact figure is a percentage of an estimated cost.
A scan is not a defect and a seek is not a virtue. Judge by rows touched and time spent.

It also ships scripts/extract.py, which flattens a .sqlplan into a compact digest. This is not a convenience:

.sqlplan files are UTF-16, so grep silently matches nothing and reports no error. A negative result from grep on a plan file is worthless.
Some plans are UTF-8 bytes that still declare encoding="utf-16", because they were opened and re-saved. Strict XML parsers reject them.
A trivial two-table join is 120 KB. Real plans run to megabytes. Reading one into context wastes the context and still misses things.

The extractor handles the encoding, computes correct self-time attribution (subtracting children in row mode, within a thread rather than across threads in parallel plans, and not at all in batch mode), normalizes cardinality per execution, and recognizes the optimizer's default-guess selectivity fingerprints. --node N drills into a single operator; --sql recovers full statement text.

Requires Python 3 (standard library only). Without it, the skill degrades to a documented grep-based fallback and says plainly what it cannot determine.

GitHub Copilot CLI

This plugin also works in GitHub Copilot CLI, which reads the same SKILL.md and plugin.json format.

copilot plugin marketplace add erikdarlingdata/claude-plugins
copilot plugin install sqlserver-query-plans@erikdarling

Or add just the skill, without the marketplace:

/skills add ./plugins/sqlserver-query-plans/skills/query-plan-analysis

As in Claude Code, the skill is model-invoked: point Copilot at a .sqlplan and ask.

Claude Code mods

Small hook modules for people who run several agents at once. Each one is a plugin of its own. Install only the ones you want, and set their options in /config (or under pluginConfigs in settings.json). They need a Claude Code version that loads plugin hook modules.

`subagent-fence`

Stops the mistakes an unattended agent makes that cannot be taken back.

/plugin install subagent-fence@erikdarling

For the main session and every subagent it refuses four things. A force-push. A push to a protected branch. A git command that skips the repository's hooks. Killing processes by name (pkill, killall, taskkill /IM, Stop-Process -Name), because a name match can kill another session's processes.

Three more guards are off until you set them. One bans folders: nothing reads, writes or enters them. One keeps a subagent from editing a plain git checkout, or running a changing git command there, so it works in its own worktree. One stops a subagent reading a big text file whole instead of by offset and limit.

`model-allowlist`

Checks the model a subagent is spawned with.

/plugin install model-allowlist@erikdarling

A pinned model id goes stale: a dated or versioned name keeps pointing at an old model after the tier moves on. This refuses a spawn that names one and asks for a tier alias (opus, sonnet, haiku) instead. A spawn with no model is always allowed, because the agent file or the parent decides then.

You can add rules of your own. One example: the lane agent runs Sonnet, and Opus only when the brief says design, security or hard debugging. With no rules, every alias is allowed.

A rule applies when the spawn's agent type matches the first pattern and it names that model (* for any model). The brief must then match the brief pattern, or the spawn is refused. Leave the brief pattern empty to refuse the pairing outright. The message is optional and can use {type} and {model}. Patterns are case-insensitive regular expressions. A rule that does not parse is skipped. For example:

^(lane|worker-.*)$ => opus => \b(design|security|hard[- ]debug) => {type} runs sonnet; name the reason in the brief to use opus.

`seat-resume`

Brings interrupted sessions back after a crash, a reboot or a closed terminal.

/plugin install seat-resume@erikdarling

The plugin writes one small file per interactive session: its id, name, folder, permission mode and last activity. It marks the file when the session ends. /resume-sessions lists the sessions that died or were interrupted in the last 72 hours, with the command that reopens each. The script's -Launch switch reopens all of them in terminal tabs. Sessions you left with /exit, Ctrl+C or /clear stay closed. The plugin name still says "seat", but everything you see says "session".

This one is Windows only. The bundled script (scripts/resume-sessions.ps1) is PowerShell. It compares Windows process start times to tell a live session from a reused process id. It reopens tabs in WezTerm or Windows Terminal. Nobody has tried the plugin on macOS or Linux.

The Claude config folder is CLAUDE_CONFIG_DIR when that is set, otherwise .claude in your home folder.

`open-asks`

Keeps the questions Claude asks you from scrolling away. Every time a reply asks you something or leaves a decision to you, Claude records it. The question stays in a band above your prompt, with Claude's recommended answer, until you answer, decline or drop it. Claude gets ask_add, ask_resolve and ask_list tools. You get /asks (done <ids>, clear, hide, show). Open asks are saved per session, so a resumed session still has them.

/plugin install open-asks@erikdarling

Option	Default	What it does
`maxBandAsks`	6	Most asks the band draws. The rest stay in `/asks`.
`maxQuestionChars`	400	Longest question or recommendation shown before it is cut.
`keepDays`	30	Saved asks from other sessions are removed after this many days. 0 keeps them.

`subagent-band`

A live view of your subagents. The band above the prompt has one row per running subagent: type, model, effort, steps, context size, advisor calls and estimated cost. /fleet opens a pane with every subagent of the session, finished ones included. /subagent-cost totals the estimated cost by agent type and by issue number in the description, with the main session's own cost. /steer <id> <text> sends a running subagent a message. Claude gets a cheap subagent_vitals tool, so it does not have to read output files to check progress. Costs are list-price estimates, not your bill.

/plugin install subagent-band@erikdarling

Option	Default	What it does
`priceTable`	`opus:4:20, sonnet:2:10, haiku:1:5, fable:10:50`	Input and output USD per million tokens for each model family. A model id is matched by containing the family name.
`cacheWriteMultiplier`	1.25	Cache write price as a multiple of the input price.
`cacheReadMultiplier`	0.1	Cache read price as a multiple of the input price.

`usage-budget`

Watches the account's 5-hour and 7-day usage windows. A toast tells you each time a window crosses a percent. Past a higher percent, Claude also gets a one-time note so it can stop starting optional work and write its handoff. Past the last one, new subagents are refused until the window resets.

/plugin install usage-budget@erikdarling

Option	Default	What it does
`warnPercents`	`70, 85, 95`	Percents that raise a toast, once each per window.
`tellModelAtPercent`	85	From here the model is told as well. 0 never tells it.
`spawnGatePercent`	95	A new subagent is refused when either window is at or past this. 0 turns the refusal off.

`subagent-wall`

A wall-clock limit for subagents. After a warning time, a subagent is told to finish up. After the limit, it can only run git and gh commands and write .md or .txt files. It commits, reports and ends instead of running on. It also nudges a code-changing subagent that has a lot of context but no edited file to stop exploring and make the change. The main session is never limited.

/plugin install subagent-wall@erikdarling

Option	Default	What it does
`warnMinutes`	45	Minutes before a subagent is told to finish up. 0 turns the warning off.
`limitMinutes`	60	Minutes before it is held to `git`, `gh` and note writes. 0 turns the limit off.
`noEditNudgeK`	100	Thousands of context tokens before the no-edit nudge. 0 turns it off.
`codeAgentTypes`	`general-purpose`	Comma-separated subagent types that get the no-edit nudge.

pi

This repository is also a pi package: the root package.json declares every plugins/*/skills and plugins/*/extensions directory, and pi reads the same SKILL.md format the other two harnesses do. Install straight from git — no marketplace step:

pi install git:github.com/erikdarlingdata/claude-plugins

As everywhere else, the skill is model-invoked: point pi at a .sqlplan and ask.

`pi-session-resume` (pi only)

Your machine restarts for updates with a dozen pi sessions open; this brings them all back with one command, as terminal tabs, in their original directories, with full history:

pi-resume-sessions

An extension (auto-loaded by the install above) records every open interactive session; the pi-resume-sessions script reopens the interrupted ones — Ghostty tabs on macOS, tmux anywhere. Sessions you quit deliberately (Ctrl+D, /quit) stay closed; sessions killed by a reboot, a closed window, or a crash come back. Idle-time filters keep abandoned sessions from resurrecting.

The script needs a one-time symlink onto your PATH, and macOS needs a one-time Automation permission — see plugins/pi-session-resume/README.md for both, plus the design notes. This one is pi-only: Claude Code and Copilot CLI don't load pi extensions.

`pi-subagent-watchdog` (pi only)

Background subagents only report back when they finish — nothing wakes the orchestrator while one wedges on a giant grep or balloons from 200k to 2M tokens. This extension (auto-loaded by the install above) polls every running subagent's live vitals — tokens, cost, context %, tool uses, turns, wall clock, compactions — and batches nearby threshold crossings into one compact orchestrator check-in. Full structured records persist outside LLM context; per-agent and fleet-wide rate limits keep the watchdog from becoming its own token amplifier. Two orchestrator postures: guide (assess with judgment) and strict (thresholds are budgets — wrap up by default, one evidence-cited extension max). Optional automatic hard stop handles the truly wedged, with the outcome reported from the RPC reply rather than assumed. An optional exact model invariant hard-stops any top-level child that bypasses the manager's pre-spawn model policy. Optional per-agent cost signal and hard stop, plus session and daily USD budget warnings. The CLI surfaces also identify each child's effective model and thinking level.

Humans get a /watchdog panel (vitals, manual check-ins, steering, hard stop) plus /watchdog help | status | config | reload — config edits apply live, no session restart. See plugins/pi-subagent-watchdog/README.md for signals, modes, and design notes. Requires the pi-subagents extension; pi-only for the same reason as above.

`pi-subagent-guardrails` (pi only)

Token-budget guardrails for multi-agent setups, built after an overnight orchestration burned through its usage limit (95% of the spend came at more than 150k context). It has three pieces:

guardrails.md: the written rules for fan-out caps, model tiers, context discipline, session length and ranking.
A context-wall extension, loaded only into subagents through their agent files. It tells the child its own size at 150k and 200k. At 250k it refuses everything but git/gh and markdown writes, so the agent commits and reports instead of being aborted with its work lost.
A lane agent type for code-editing lanes: Sonnet, its own worktree, draft PRs, no fan-out tools.

The wall is deliberately not auto-loaded, because it would wall off your interactive session too. See plugins/pi-subagent-guardrails/README.md for install and the recommended watchdog and pi-subagents settings.

Not a plugin: the pi setup guide

pi-setup-guide.md — a distilled ~15-minute setup for pi written for Claude Code ex-pats: install, model/thinking defaults, the trust model, a Claude-to-pi habit translation table, a tested-together extension stack, full source for a few small quality-of-life extensions (refusal fallback, tab-title status, ! command wake-ups + autocomplete), how to point pi at years of accumulated Claude Code memory instead of migrating it, and a troubleshooting section of the gotchas that actually happened. The plugins in this repo (§11–§13 of the guide) slot into that stack.

About

Built by Erik Darling at Darling Data. SQL Server consulting, training, and free tools: <https://erikdarling.com>

License

MIT

Source 2 files

hooks/register.ts 160 lines

1import type { EngineInterface, PluginOptions, Register } from 'claude-code'
2
3import type { Entry } from '../types'
4
5// One JSON file per interactive session id, in the registry folder. scripts/resume-sessions.ps1 decides which ones
6// died, from these files and the pids in Claude Code's own <config>/sessions/<pid>.json, and reopens them.
7
8type Where = { registry: string; sessions: string; script: string; powershell: string; terminal: string }
9
10const slashes = (p: string) => p.trim().replace(/\\/g, '/').replace(/\/+$/, '')
11const text = (v: unknown, fallback: string) => (typeof v === 'string' && v.trim() ? v.trim() : fallback)
12
13// The folders and the script, from the options; an empty option means the default under the Claude config folder.
14async function whereOf($: EngineInterface, options: PluginOptions): Promise<Where> {
15  const configDir = await $.env.get('CLAUDE_CONFIG_DIR')
16  const home = (await $.env.get('HOME')) || (await $.env.get('USERPROFILE')) || ''
17  const config = slashes(configDir || `${home}/.claude`)
18
19  return {
20    registry: slashes(text(options.registry_dir, `${config}/session-registry`)),
21    sessions: slashes(text(options.sessions_dir, `${config}/sessions`)),
22    script: slashes(text(options.resume_script, `${$.plugin.root}/scripts/resume-sessions.ps1`)),
23    powershell: text(options.powershell, 'pwsh'),
24    terminal: text(options.terminal, 'wezterm'),
25  }
26}
27
28const iso = (ms: number) => new Date(ms).toISOString()
29
30// This process's entry; null for a -p run. A reload starts it over from the file.
31let entry: Entry | null = null
32// This process's <sessions folder>/<pid>.json, once found: where its name comes from.
33let pidFile = ''
34
35async function save($: EngineInterface, where: Where, next: Entry) {
36  entry = next
37  await $.fs.write(`${where.registry}/${next.sessionId}.json`, `${JSON.stringify(next, null, 2)}\n`)
38}
39
40async function readJson<T>($: EngineInterface, path: string): Promise<T | null> {
41  return $.fs.read(path).then(body => JSON.parse(String(body)) as T).catch(() => null)
42}
43
44// The name ListAgents shows for this session. The pid file can appear after session.start, so this retries until found.
45async function nameOf($: EngineInterface, where: Where, sessionId: string): Promise<string> {
46  if (!pidFile) {
47    const files = await $.fs.list(where.sessions).catch(() => [])
48    for (const f of files) {
49      if (f.kind === 'file' && f.name.endsWith('.json')) {
50        const one = await readJson<{ sessionId?: string }>($, `${where.sessions}/${f.name}`)
51        if (one?.sessionId === sessionId) {
52          pidFile = `${where.sessions}/${f.name}`
53          break
54        }
55      }
56    }
57  }
58  const own = pidFile ? await readJson<{ sessionId?: string; name?: string }>($, pidFile) : null
59
60  return own?.sessionId === sessionId ? own.name ?? '' : ''
61}
62
63// The entry for the session running now: the saved one when it has this id (a reload, a resume), else a new one (/clear).
64async function current($: EngineInterface, where: Where, cwd: string): Promise<Entry> {
65  const sessionId = await $.session.id()
66  if (entry?.sessionId === sessionId) {
67    return entry
68  }
69  pidFile = ''
70  const saved = await readJson<Entry>($, `${where.registry}/${sessionId}.json`)
71  const now = iso(await $.clock.now())
72
73  return {
74    sessionId,
75    name: saved?.name ?? '',
76    cwd,
77    permissionMode: saved?.permissionMode ?? entry?.permissionMode ?? '',
78    startedAt: saved?.startedAt ?? now,
79    lastActive: now,
80    ended: '',
81  }
82}
83
84async function touch($: EngineInterface, where: Where, permissionMode?: string) {
85  if (!entry) {
86    return
87  }
88  const base = await current($, where, entry.cwd)
89  await save($, where, {
90    ...base,
91    name: (await nameOf($, where, base.sessionId)) || base.name,
92    permissionMode: permissionMode ?? base.permissionMode,
93    lastActive: iso(await $.clock.now()),
94    ended: '',
95  })
96}
97
98export const register: Register = (on, options) => {
99  on('session.start', async ($, e, next) => {
100    const started = await next(e)
101    await $.command.register({
102      name: 'resume-sessions',
103      description: 'List the interactive sessions that died or were interrupted in the last 72 hours, with the command that reopens each',
104    })
105    if (e.isInteractive) {
106      const where = await whereOf($, options)
107      entry = null
108      await save($, where, await current($, where, e.cwd))
109    }
110
111    return started
112  }).catch(($, e, next) => next(e))
113
114  // Each prompt's hook input carries the permission mode the session runs in.
115  on('classic.UserPromptSubmit', async ($, e, next) => {
116    await touch($, await whereOf($, options), e.permission_mode)
117
118    return next(e)
119  }).catch(($, e, next) => next(e))
120
121  // A session driven by peer messages may never get a typed prompt: its own tool calls carry the mode too.
122  // Written only when the mode changes (or the name is still missing), so the common call costs nothing.
123  on('classic.PreToolUse', async ($, e, next) => {
124    if (entry && !e.agent_id && e.permission_mode && (e.permission_mode !== entry.permissionMode || !entry.name)) {
125      await touch($, await whereOf($, options), e.permission_mode)
126    }
127
128    return next(e)
129  }).catch(($, e, next) => next(e))
130
131  on('turn.complete', async ($, e, next) => {
132    if (!e.agentId) {
133      await touch($, await whereOf($, options))
134    }
135
136    return next(e)
137  }).catch(($, e, next) => next(e))
138
139  on('session.end', async ($, e, next) => {
140    if (entry?.sessionId === e.sessionId) {
141      const ended = e.reason === 'prompt_input_exit' || e.reason === 'clear' ? 'exited' : 'interrupted'
142      await save($, await whereOf($, options), { ...entry, ended, lastActive: iso(await $.clock.now()) })
143    }
144
145    return next(e)
146  }).catch(($, e, next) => next(e))
147
148  on('command.run', { command: 'resume-sessions' }, async $ => {
149    const where = await whereOf($, options)
150    const argv = [where.powershell, '-NoProfile', '-File', where.script, '-Registry', where.registry, '-Sessions', where.sessions]
151    if (where.terminal !== 'wezterm') {
152      argv.push('-Terminal', where.terminal) // the bundled script takes it; a script of your own may not
153    }
154    const ran = await $.process.run(argv, { timeoutMs: 30000 })
155    const out = `${ran.stdout}${ran.stderr ? `\n${ran.stderr}` : ''}`.trim()
156
157    return { text: out || `The resume script printed nothing (exit ${ran.exitCode}).` }
158  })
159}
160

types/index.d.ts 17 lines

1/** One interactive session in the session registry (one JSON file per session id). */
2export type Entry = {
3  sessionId: string
4  /** The session's name as ListAgents shows it (from Claude Code's own ~/.claude/sessions/<pid>.json); '' until known. */
5  name: string
6  cwd: string
7  /** As the last prompt's hook input reported it (default, acceptEdits, bypassPermissions, plan, ...); '' until the first prompt. */
8  permissionMode: string
9  startedAt: string
10  lastActive: string
11  /**
12   * '' while it runs or after it died without an end; 'exited' when the person left (/exit, ctrl+c, /clear);
13   * 'interrupted' when the process was told to stop (terminal closed, SIGTERM, SIGHUP).
14   */
15  ended: '' | 'exited' | 'interrupted'
16}
17

Install

$claude plugin marketplace add erikdarlingdata/claude-plugins

$claude plugin install seat-resume@erikdarling

Entry name may differ; see the README.

$claude plugin marketplace add https://www.slopshopper.com/community/marketplace.json

$claude plugin install seat-resume@slopshopper-community

Points at the author's repo. Nothing re-hosted.

$git clone https://github.com/erikdarlingdata/claude-plugins

$claude --plugin-dir ./claude-plugins/plugins/seat-resume

One session, nothing installed.

In the preview

adds /resume-sessions

Hooks

session.startclassic.UserPromptSubmitclassic.PreToolUseturn.completesession.endcommand.run{command=resume-sessions}

Reaches

$.clock.now$.command.register$.env.get$.fs.list$.fs.read$.fs.write$.process.run$.session.id

env: CLAUDE_CONFIG_DIR, HOME, USERPROFILE

Options

registry_dir: Registry folder = ""
sessions_dir: Claude Code sessions folder = ""
resume_script: Resume script = ""
powershell: PowerShell program = "pwsh"
terminal: Terminal for reopening = "wezterm"

Checks

validate: passed

Tests ✓ · State contract ✓ · first seen 2026-10-07

Darling Data — Claude Code plugins

Plugins

sqlserver-query-plans

GitHub Copilot CLI

Claude Code mods

subagent-fence

model-allowlist

seat-resume

open-asks

subagent-band

usage-budget

subagent-wall

pi

pi-session-resume (pi only)

pi-subagent-watchdog (pi only)

pi-subagent-guardrails (pi only)