feat(server): autonomOS-aware statusline for spawned CC sessions

[aterrylu]

Summary

Inject an autonomOS-aware statusline into every spawned Claude Code session via inline --settings JSON. The renderer reads CC's stdin payload (model, ctx %, cost, branch) and queries the local autonomOS server for hierarchy, then renders an adaptive identity line that auto-detects role from manager + directReports.

What it looks like

auto + manager (TeamLead with 3 children):
[TeamLead@autonomos · ↑Dispatcher · ↓3 reports]
⚡Opus  ▓▓░░░░░░░░ 18%  $0.42  ⏱8m05s

auto + worker (no children):
[Worker@autonomos · ↑TeamLead]
⚡Opus  ▓▓▓▓░░░░░░ 45%  $0.18  ⏱2m05s  🌿 terry/feat-x

auto + standalone (no manager, no children):
[Agent@autonomos · standalone]
⚡Opus  ▓▓▓▓░░░░░░ 45%  $0.18  ⏱2m05s

Architecture

• No CLI flag exists for statusline — CC's --settings accepts inline JSON, autonomos already uses this for hook relay. New statusLine key piggybacks on the existing inline payload (one extra JSON property).
• Renderer ships as plain .mjs at packages/server/src/providers/statusline.mjs. No build step — uses only built-in node modules + global fetch. Same source-tree-shipping pattern as channel-server/dist.mjs but doesn't need bundling because it has no external deps.
• Single API call (GET /api/sessions) covers identity lookup AND report counting. The LIST endpoint enriches each entry with manager/template/project from PersistedSession; the SINGLE endpoint (/api/sessions/:id) does NOT, so we don't use it.
• Refresh interval: 5s so hierarchy stays current during idle (catches new spawns, kills, set_manager reorgs without requiring an assistant message).
• Replaces personal CC statusline for spawned sessions only (CC's --settings overrides ~/.claude/settings.json for object-typed fields). Toggle off → falls back to personal config.

Failure-mode contract

The script must NEVER crash CC's terminal (per CC docs: non-zero exit or no output → blank statusline). All boundaries degrade gracefully:

• Server unreachable → [autonomos · offline] + activity-line-only
• Outside autonomos (no env) → [autonomos] + activity
• stdin parse failure → activity uses defaults
• Top-level catch → static [autonomos] fallback

Files

File	Change
packages/server/src/settings.ts	Add statusLine?: { enabled: boolean } to AppSettings
packages/server/src/routes/settings.ts	Mask + accept statusLine in REST handler
packages/server/src/providers/claude-code.ts	Inject statusLine into existing inline --settings JSON when enabled (default on)
packages/server/src/providers/statusline.mjs (NEW)	Renderer (~140 LOC plain ES module)
packages/server/src/providers/statusline.d.mts (NEW)	TypeScript declarations for the .mjs (test-only)
packages/dashboard/src/plugins/settings/SettingsStatusBarItem.tsx	Toggle UI (mirrors autoTrust pattern)
packages/server/src/__tests__/statusline.test.ts (NEW)	30 unit tests

Test plan

• formatHierarchy across all 4 hierarchy states (standalone / worker / top / middle)
• buildBar boundary clamping (0%, 100%, >100, <0, null/undefined)
• formatDuration minute/second padding + null handling
• formatActivity with all fields, empty stdin, missing branch, null nested fields
• getAutonomosMeta against mocked fetch: errors, non-array response, session-not-found, manager + reports counting, exited-session exclusion, missing-name fallback, null-vs-undefined manager
• All 303 tests pass + type-check clean + lint clean
• Visual confirmation: spawn a real CC session, verify statusline renders in dashboard terminal pane (deferred to first interactive session post-merge)
• Toggle off → verify fallback to personal CC statusline (manual)

Notes

• One bug found and fixed during QA: formatHierarchy({manager: null, directReports: -1}) was emitting [X] instead of [X · standalone] because the standalone check was === 0 instead of <= 0. Test caught it on first run.
• Code review caught a shell-injection concern: command: \node ${PATH}`was unquoted. Fixed byJSON.stringify(STATUSLINE_SCRIPT) for proper shell quoting against install paths with spaces/quotes/$`/backticks.
• Two correctness bugs caught by silent-failure-hunter: I had assumed /api/org returns a flat array with manager fields and /api/sessions/:id returns enriched session — both wrong. Fixed by switching to the LIST endpoint which has the correct enriched shape.
• Gemini CLI deferred: only has showStatusInTitle (terminal-title icons), no command-script statusline.
• Codex CLI deferred: has /statusline slash command but no custom-command support — see openai/codex#17827.

🤖 Generated with Claude Code

[nox-0x]

LGTM. Well-structured feature with a solid failure-mode contract — the statusline renderer is defensive by design and the 30-unit test suite covers all edge cases. No blocking issues.