fix: statusline breaks on .alive → .walnut migration and iCloud paths

Two bugs fixed in session-new hook:

1. User-level ~/.claude/settings.json was never updated during migration,
   leaving statusLine pointing to .alive/statusline.sh (file no longer exists
   after rename to .walnut/). Now detects and fixes stale .alive/ references
   in both project-level and user-level settings.

2. Statusline path was injected without quoting, breaking on paths with
   spaces (iCloud: "Mobile Documents/com~apple~CloudDocs"). Now wraps
   command in bash "..." for safe execution.

Self-healing: existing users who already updated to v1.0.0 will get their
statusline auto-fixed on next session start — no manual action needed.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: supernormxl

plugins/walnut/hooks/scripts/walnut-session-new.sh

@@ -136,41 +136,76 @@ if [ -f "$STATUSLINE_SRC" ]; then
   fi
 fi
 
-# Inject statusline into settings.json — absolute path with self-heal
-SETTINGS_DIR="$WORLD_ROOT/.claude"
-SETTINGS_FILE="$SETTINGS_DIR/settings.json"
-mkdir -p "$SETTINGS_DIR"
-if [ ! -f "$SETTINGS_FILE" ]; then
-  cat > "$SETTINGS_FILE" << SETTINGSEOF
+# Inject statusline into settings.json — quoted path for spaces (iCloud etc.)
+# Fix BOTH project-level and user-level settings to handle .alive → .walnut migration.
+STATUSLINE_CMD="bash \"$WORLD_ROOT/.walnut/statusline.sh\""
+
+# Helper: fix statusline in a settings.json file (create or self-heal)
+fix_statusline_in_settings() {
+  local settings_file="$1"
+  local settings_dir
+  settings_dir="$(dirname "$settings_file")"
+  mkdir -p "$settings_dir"
+
+  if [ ! -f "$settings_file" ]; then
+    # Only create project-level settings, not user-level
+    if [ "$settings_file" = "$WORLD_ROOT/.claude/settings.json" ]; then
+      cat > "$settings_file" << SETTINGSEOF
 {
   "statusLine": {
     "type": "command",
-    "command": "$WORLD_ROOT/.walnut/statusline.sh"
+    "command": $( printf '%s' "$STATUSLINE_CMD" | python3 -c "import sys,json; print(json.dumps(sys.stdin.read()))" 2>/dev/null || echo "\"$STATUSLINE_CMD\"" )
   }
 }
 SETTINGSEOF
-else
-  # settings.json exists — ensure statusLine is present and uses absolute path
+    fi
+    return
+  fi
+
+  # settings.json exists — ensure statusLine uses correct .walnut/ path with quoting
   if command -v python3 &>/dev/null; then
-    WALNUT_SETTINGS_FILE="$SETTINGS_FILE" WALNUT_WORLD_ROOT="$WORLD_ROOT" python3 -c "
+    WALNUT_SETTINGS_FILE="$settings_file" WALNUT_WORLD_ROOT="$WORLD_ROOT" python3 -c "
 import json, os, sys
 sf = os.environ['WALNUT_SETTINGS_FILE']
 wr = os.environ['WALNUT_WORLD_ROOT']
-expected = wr + '/.walnut/statusline.sh'
+# Quoted command handles paths with spaces (iCloud, etc.)
+expected_cmd = 'bash \"' + wr + '/.walnut/statusline.sh\"'
 try:
     with open(sf) as f:
         data = json.load(f)
 except (json.JSONDecodeError, ValueError):
     print('WALNUT: settings.json is malformed, cannot inject statusLine', file=sys.stderr)
     sys.exit(0)
 current = data.get('statusLine', {}).get('command', '')
-if current != expected:
-    data['statusLine'] = {'type': 'command', 'command': expected}
+# Fix if: missing, wrong path, stale .alive/ reference, or unquoted path with spaces
+needs_fix = (
+    current != expected_cmd
+    and (
+        not current
+        or '.alive/' in current
+        or ('.walnut/statusline.sh' in current and 'bash ' not in current and ' ' in wr)
+    )
+)
+if needs_fix:
+    data['statusLine'] = {'type': 'command', 'command': expected_cmd}
     with open(sf, 'w') as f:
         json.dump(data, f, indent=2)
         f.write('\n')
+    print('WALNUT: fixed statusLine in ' + sf, file=sys.stderr)
 " 2>/dev/null || true
   fi
+}
+
+# Fix project-level settings
+fix_statusline_in_settings "$WORLD_ROOT/.claude/settings.json"
+
+# Fix user-level settings — catches stale .alive/ paths from pre-migration installs
+USER_SETTINGS="$HOME/.claude/settings.json"
+if [ -f "$USER_SETTINGS" ]; then
+  # Only touch user settings if it has a stale .alive/ statusline reference
+  if grep -q '\.alive/statusline' "$USER_SETTINGS" 2>/dev/null; then
+    fix_statusline_in_settings "$USER_SETTINGS"
+  fi
 fi
 
 # Read world key (.walnut/key.md) for injection