diff --git a/dist/pi/leash.js b/dist/pi/leash.js
index 8d77626..eab0c43 100644
--- a/dist/pi/leash.js
+++ b/dist/pi/leash.js
@@ -707,6 +707,7 @@ function readLeashrc(cwd) {
 function leash_default(pi) {
   pi.on("session_start", async (_event, ctx) => {
     ctx.ui.notify("\u{1F512} Leash active", "info");
+    ctx.ui.setStatus("leash", "\u{1F512} Leash active");
     const update = await checkForUpdates();
     if (update.hasUpdate) {
       ctx.ui.notify(
diff --git a/package.json b/package.json
index 51988a4..59cd53c 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@sailthru/leash",
-  "version": "1.0.17",
+  "version": "1.0.18",
   "type": "module",
   "description": "Security guardrails for AI coding agents",
   "bin": {
@@ -68,5 +68,10 @@
     "esbuild": "^0.27.2",
     "jsonc-parser": "^3.3.1",
     "typescript": "^5.9.3"
+  },
+  "allowScripts": {
+    "esbuild@0.27.7": true,
+    "msgpackr-extract@3.0.4": true,
+    "sharp@0.34.5": true
   }
 }
diff --git a/packages/pi/leash.ts b/packages/pi/leash.ts
index 80e5717..ebcfa59 100644
--- a/packages/pi/leash.ts
+++ b/packages/pi/leash.ts
@@ -4,6 +4,7 @@ import { CommandAnalyzer, checkForUpdates, readLeashrc } from "../core/index.js"
 export default function (pi: ExtensionAPI) {
   pi.on("session_start", async (_event, ctx) => {
     ctx.ui.notify("🔒 Leash active", "info");
+    ctx.ui.setStatus("leash", "🔒 Leash active");
 
     const update = await checkForUpdates();
     if (update.hasUpdate) {