claude-code - 💡(How to fix) Fix [Feature Request] Add statusline customization setting for managed hook environments [1 comments, 2 participants]

TL;DR

Consider adding a separate statusline setting in settings.json to allow custom statuslines while keeping allowManagedHooksOnly enabled.

Guidance

• Review the current implementation of allowManagedHooksOnly to understand how it blocks script executions, including statusline scripts.
• Investigate the possibility of introducing a new setting that explicitly allows custom statuslines, such as allowCustomStatusline.
• Evaluate the security implications of allowing certain script paths for statuslines while keeping allowManagedHooksOnly enabled.
• Consider the trade-offs of turning off allowManagedHooksOnly solely for the purpose of enabling custom statuslines.

Example

No code snippet is provided as it is not clearly supported by the issue.

Notes

The solution may require changes to the underlying settings management system and should be carefully evaluated to ensure it does not introduce security vulnerabilities.

Recommendation

Apply workaround: Introduce a separate statusline setting to allow custom statuslines while maintaining the security benefits of allowManagedHooksOnly. This approach balances security posture with the need for customizable statuslines.