Statusline Secure

Hardened, self-hosted Claude Code statusline with manual invocation and audit logging.

Quick Start

node src/statusline.js

Features

• Manual invocation only (no auto-hook)
• API key authentication (recommended, no keychain access)
• OAuth fallback (Claude.ai Pro/Max, macOS only)
• Audit logging (all executions timestamped to audit/execution.log)
• Modular code (easy to audit — one file per concern)
• Claude brand colors (orange primary)
• Graceful fallbacks on missing data

Documentation

• SECURITY.md — Security manifest and threat model
• docs/USAGE.md — How to use and troubleshoot
• docs/CREDENTIAL_SETUP.md — API key vs OAuth setup
• docs/ARCHITECTURE.md — Design overview and data flow

Integrity Verification

npm run checksum        # regenerate checksums after edits
npm run verify-integrity  # verify files match recorded checksums

Node Version

Requires Node.js 18+. Check: node --version

Credits

This project is a fork of MithunWijayasiri/ctxline-claude, which itself credits @TahaSabir0 for the base config (originally Best-ClaudeCode-statusline).

Changes in this fork

This fork rewrites the original single-file script as a modular, security-hardened implementation:

• Split into focused modules (src/lib/credentials.js, src/lib/cache.js, src/lib/validation.js, src/lib/git-branch.js, src/lib/rendering.js)
• Manual invocation only — no auto-installed hook
• Audit logging of all executions (audit/execution.log)
• Checksum-based integrity verification (checksums/versions.json)
• API key authentication path that avoids keychain access