claude-code-workflow 6.3.53 → 7.0.0

package/ccw/dist/core/server.js

@@ -1,24 +1,27 @@
 import http from 'http';
 import { URL } from 'url';
-import { readFileSync, existsSync } from 'fs';
-import { join } from 'path';
-import { getRecentPaths, normalizePathForDisplay } from '../utils/path-resolver.js';
 // Import route handlers
 import { handleStatusRoutes } from './routes/status-routes.js';
 import { handleCliRoutes, cleanupStaleExecutions } from './routes/cli-routes.js';
 import { handleCliSettingsRoutes } from './routes/cli-settings-routes.js';
+import { handleCliSessionsRoutes } from './routes/cli-sessions-routes.js';
+import { handleAuditRoutes } from './routes/audit-routes.js';
 import { handleProviderRoutes } from './routes/provider-routes.js';
 import { handleMemoryRoutes } from './routes/memory-routes.js';
 import { handleCoreMemoryRoutes } from './routes/core-memory-routes.js';
+import { handleUnifiedMemoryRoutes } from './routes/unified-memory-routes.js';
 import { handleMcpRoutes } from './routes/mcp-routes.js';
 import { handleHooksRoutes } from './routes/hooks-routes.js';
+import { handleUnsplashRoutes, handleBackgroundRoutes } from './routes/unsplash-routes.js';
 import { handleCodexLensRoutes } from './routes/codexlens-routes.js';
 import { handleGraphRoutes } from './routes/graph-routes.js';
 import { handleSystemRoutes } from './routes/system-routes.js';
 import { handleFilesRoutes } from './routes/files-routes.js';
 import { handleSkillsRoutes } from './routes/skills-routes.js';
+import { handleSkillHubRoutes } from './routes/skill-hub-routes.js';
 import { handleCommandsRoutes } from './routes/commands-routes.js';
 import { handleIssueRoutes } from './routes/issue-routes.js';
+import { handleQueueSchedulerRoutes } from './routes/queue-routes.js';
 import { handleDiscoveryRoutes } from './routes/discovery-routes.js';
 import { handleRulesRoutes } from './routes/rules-routes.js';
 import { handleSessionRoutes } from './routes/session-routes.js';
@@ -33,126 +36,28 @@ import { handleLoopRoutes } from './routes/loop-routes.js';
 import { handleLoopV2Routes, initializeCliToolsCache } from './routes/loop-v2-routes.js';
 import { handleTestLoopRoutes } from './routes/test-loop-routes.js';
 import { handleTaskRoutes } from './routes/task-routes.js';
+import { handleDashboardRoutes } from './routes/dashboard-routes.js';
+import { handleOrchestratorRoutes } from './routes/orchestrator-routes.js';
+import { handleConfigRoutes } from './routes/config-routes.js';
+import { handleTeamRoutes } from './routes/team-routes.js';
+import { handleNotificationRoutes } from './routes/notification-routes.js';
+import { handleAnalysisRoutes } from './routes/analysis-routes.js';
+import { handleSpecRoutes } from './routes/spec-routes.js';
 // Import WebSocket handling
 import { handleWebSocketUpgrade, broadcastToClients, extractSessionIdFromPath } from './websocket.js';
 import { getTokenManager } from './auth/token-manager.js';
 import { authMiddleware, isLocalhostRequest, setAuthCookie } from './auth/middleware.js';
 import { getCorsOrigin } from './cors.js';
 import { csrfValidation } from './auth/csrf-middleware.js';
-import { getCsrfTokenManager } from './auth/csrf-manager.js';
 import { randomBytes } from 'crypto';
 // Import health check service
 import { getHealthCheckService } from './services/health-check-service.js';
+import { getCliSessionShareManager } from './services/cli-session-share.js';
+import { getCliSessionManager } from './services/cli-session-manager.js';
+import { QueueSchedulerService } from './services/queue-scheduler-service.js';
 // Import status check functions for warmup
 import { checkSemanticStatus, checkVenvStatus } from '../tools/codex-lens.js';
 import { getCliToolsStatus } from '../tools/cli-executor.js';
-// Template paths
-const TEMPLATE_PATH = join(import.meta.dirname, '../../src/templates/dashboard.html');
-const MODULE_CSS_DIR = join(import.meta.dirname, '../../src/templates/dashboard-css');
-const JS_FILE = join(import.meta.dirname, '../../src/templates/dashboard.js');
-const MODULE_JS_DIR = join(import.meta.dirname, '../../src/templates/dashboard-js');
-const ASSETS_DIR = join(import.meta.dirname, '../../src/templates/assets');
-// Modular CSS files in load order
-const MODULE_CSS_FILES = [
-    '01-base.css',
-    '02-session.css',
-    '03-tasks.css',
-    '04-lite-tasks.css',
-    '05-context.css',
-    '06-cards.css',
-    '07-managers.css',
-    '08-review.css',
-    '09-explorer.css',
-    // CLI modules (split from 10-cli.css)
-    '10-cli-status.css',
-    '11-cli-history.css',
-    '12-cli-legacy.css',
-    '13-cli-ccw.css',
-    '14-cli-modals.css',
-    '15-cli-endpoints.css',
-    '16-cli-session.css',
-    '17-cli-conversation.css',
-    '18-cli-settings.css',
-    '19-cli-native-session.css',
-    '20-cli-taskqueue.css',
-    '21-cli-toolmgmt.css',
-    '22-cli-semantic.css',
-    // Other modules
-    '23-memory.css',
-    '24-prompt-history.css',
-    '25-skills-rules.css',
-    '26-claude-manager.css',
-    '27-graph-explorer.css',
-    '28-mcp-manager.css',
-    '29-help.css',
-    '30-core-memory.css',
-    '31-api-settings.css',
-    '32-issue-manager.css',
-    '33-cli-stream-viewer.css',
-    '34-discovery.css',
-    '36-loop-monitor.css'
-];
-// Modular JS files in dependency order
-const MODULE_FILES = [
-    'i18n.js', // Must be loaded first for translations
-    'help-i18n.js', // Help page translations
-    'utils.js',
-    'state.js',
-    'services.js', // CacheManager, EventManager, PreloadService - must be before main.js
-    'api.js',
-    'components/theme.js',
-    'components/modals.js',
-    'components/navigation.js',
-    'components/sidebar.js',
-    'components/tabs-context.js',
-    'components/tabs-other.js',
-    'components/task-drawer-core.js',
-    'components/task-drawer-renderers.js',
-    'components/flowchart.js',
-    'components/carousel.js',
-    'components/notifications.js',
-    'components/cli-stream-viewer.js',
-    'components/global-notifications.js',
-    'components/task-queue-sidebar.js',
-    'components/cli-status.js',
-    'components/cli-history.js',
-    'components/mcp-manager.js',
-    'components/hook-manager.js',
-    'components/version-check.js',
-    'components/storage-manager.js',
-    'components/index-manager.js',
-    'components/_exp_helpers.js',
-    'components/_conflict_tab.js',
-    'components/_review_tab.js',
-    'views/home.js',
-    'views/project-overview.js',
-    'views/session-detail.js',
-    'views/review-session.js',
-    'views/lite-tasks.js',
-    'views/fix-session.js',
-    'views/cli-manager.js',
-    'views/codexlens-manager.js',
-    'views/explorer.js',
-    'views/mcp-manager.js',
-    'views/hook-manager.js',
-    'views/history.js',
-    'views/graph-explorer.js',
-    'views/memory.js',
-    'views/core-memory.js',
-    'views/core-memory-graph.js',
-    'views/core-memory-clusters.js',
-    'views/prompt-history.js',
-    'views/skills-manager.js',
-    'views/rules-manager.js',
-    'views/commands-manager.js',
-    'views/claude-manager.js',
-    'views/api-settings.js',
-    'views/help.js',
-    'views/issue-manager.js',
-    'views/issue-discovery.js',
-    'views/loop-monitor.js',
-    'main.js'
-];
 /**
  * Handle POST request with JSON body
  */
@@ -171,7 +76,11 @@ function handlePostRequest(req, res, handler) {
                 res.end(JSON.stringify({ error: errorValue }));
                 return;
             }
-            res.writeHead(200, { 'Content-Type': 'application/json' });
+            // Support custom success status codes (e.g., 201 Created)
+            const successStatus = typeof statusValue === 'number' && statusValue >= 200 && statusValue < 300
+                ? statusValue
+                : 200;
+            res.writeHead(successStatus, { 'Content-Type': 'application/json' });
             res.end(JSON.stringify(result));
         }
         catch (error) {
@@ -186,7 +95,8 @@ function handlePostRequest(req, res, handler) {
     }
     if (typeof cachedRawBody === 'string') {
         try {
-            void handleBody(JSON.parse(cachedRawBody));
+            const trimmed = cachedRawBody.trim();
+            void handleBody(trimmed.length === 0 ? {} : JSON.parse(cachedRawBody));
         }
         catch (error) {
             const message = error instanceof Error ? error.message : String(error);
@@ -200,7 +110,8 @@ function handlePostRequest(req, res, handler) {
     req.on('end', async () => {
         try {
             req.__ccwRawBody = body;
-            const parsed = JSON.parse(body);
+            const trimmed = body.trim();
+            const parsed = trimmed.length === 0 ? {} : JSON.parse(body);
             req.body = parsed;
             await handleBody(parsed);
         }
@@ -323,56 +234,17 @@ async function warmupCaches(initialPath) {
     console.log(`[WARMUP] Cache warmup complete (${Date.now() - startTime}ms total)`);
 }
 /**
- * Generate dashboard HTML with embedded CSS and JS
+ * Read request body as text for proxy requests
+ * @param req - HTTP request object
+ * @returns Promise that resolves to body text
  */
-function generateServerDashboard(initialPath) {
-    let html = readFileSync(TEMPLATE_PATH, 'utf8');
-    // Read and concatenate modular CSS files in load order
-    const cssContent = MODULE_CSS_FILES.map(file => {
-        const filePath = join(MODULE_CSS_DIR, file);
-        return existsSync(filePath) ? readFileSync(filePath, 'utf8') : '';
-    }).join('\n\n');
-    // Read and concatenate modular JS files in dependency order
-    let jsContent = MODULE_FILES.map(file => {
-        const filePath = join(MODULE_JS_DIR, file);
-        if (!existsSync(filePath)) {
-            console.error(`[Dashboard] Critical module file not found: ${filePath}`);
-            console.error(`[Dashboard] Expected path relative to: ${MODULE_JS_DIR}`);
-            console.error(`[Dashboard] Check that the file exists and is included in the build.`);
-            // Return empty string with error comment to make the issue visible in browser
-            return `console.error('[Dashboard] Module not loaded: ${file} (see server console for details)');\n`;
-        }
-        return readFileSync(filePath, 'utf8');
-    }).join('\n\n');
-    // Inject CSS content
-    html = html.replace('{{CSS_CONTENT}}', cssContent);
-    // Prepare JS content with empty initial data (will be loaded dynamically)
-    const emptyData = {
-        generatedAt: new Date().toISOString(),
-        activeSessions: [],
-        archivedSessions: [],
-        liteTasks: { litePlan: [], liteFix: [], multiCliPlan: [] },
-        reviewData: { dimensions: {} },
-        projectOverview: null,
-        statistics: { totalSessions: 0, activeSessions: 0, totalTasks: 0, completedTasks: 0, reviewFindings: 0, litePlanCount: 0, liteFixCount: 0, multiCliPlanCount: 0 }
-    };
-    // Replace JS placeholders
-    jsContent = jsContent.replace('{{WORKFLOW_DATA}}', JSON.stringify(emptyData, null, 2));
-    jsContent = jsContent.replace(/\{\{PROJECT_PATH\}\}/g, normalizePathForDisplay(initialPath).replace(/\\/g, '/'));
-    jsContent = jsContent.replace('{{RECENT_PATHS}}', JSON.stringify(getRecentPaths()));
-    // Add server mode flag at the start of JS
-    const serverModeScript = `
-// Server mode - load data dynamically
-window.SERVER_MODE = true;
-window.INITIAL_PATH = '${normalizePathForDisplay(initialPath).replace(/\\/g, '/')}';
-`;
-    // Prepend server mode script to JS content
-    jsContent = serverModeScript + jsContent;
-    // Inject JS content
-    html = html.replace('{{JS_CONTENT}}', jsContent);
-    // Replace any remaining placeholders in HTML
-    html = html.replace(/\{\{PROJECT_PATH\}\}/g, normalizePathForDisplay(initialPath).replace(/\\/g, '/'));
-    return html;
+async function readRequestBody(req) {
+    return new Promise((resolve, reject) => {
+        let body = '';
+        req.on('data', (chunk) => { body += chunk; });
+        req.on('end', () => { resolve(body); });
+        req.on('error', reject);
+    });
 }
 /**
  * Create and start the dashboard server
@@ -385,10 +257,16 @@ export async function startServer(options = {}) {
     let serverPort = options.port ?? 3456;
     const initialPath = options.initialPath || process.cwd();
     const host = options.host ?? '127.0.0.1';
+    const reactPort = options.reactPort || serverPort + 1;
+    console.log(`[Server] React proxy configured: /* -> http://localhost:${reactPort}`);
     const tokenManager = getTokenManager();
     const secretKey = tokenManager.getSecretKey();
     tokenManager.getOrCreateAuthToken();
-    const unauthenticatedPaths = new Set(['/api/auth/token', '/api/csrf-token', '/api/hook']);
+    const unauthenticatedPaths = new Set(['/api/auth/token', '/api/csrf-token', '/api/hook', '/api/test/ask-question', '/api/a2ui/answer']);
+    const cliSessionShareManager = getCliSessionShareManager();
+    // Initialize Queue Scheduler Service (needs broadcastToClients and cliSessionManager)
+    const cliSessionManager = getCliSessionManager(initialPath);
+    const queueSchedulerService = new QueueSchedulerService(broadcastToClients, cliSessionManager);
     const server = http.createServer(async (req, res) => {
         const url = new URL(req.url ?? '/', `http://localhost:${serverPort}`);
         const pathname = url.pathname;
@@ -437,9 +315,24 @@ export async function startServer(options = {}) {
             }
             // Authentication middleware for all API routes
             if (pathname.startsWith('/api/')) {
-                const ok = authMiddleware({ pathname, req, res, tokenManager, secretKey, unauthenticatedPaths });
-                if (!ok)
-                    return;
+                let shareBypass = false;
+                const shareToken = url.searchParams.get('shareToken');
+                if (shareToken) {
+                    const match = pathname.match(/^\/api\/cli-sessions\/([^/]+)\/(buffer|stream)$/);
+                    if (match?.[1]) {
+                        const sessionKey = decodeURIComponent(match[1]);
+                        const validated = cliSessionShareManager.validateToken(shareToken, sessionKey);
+                        if (validated && (validated.mode === 'read' || validated.mode === 'write')) {
+                            req.__cliSessionShareProjectRoot = validated.projectRoot;
+                            shareBypass = true;
+                        }
+                    }
+                }
+                if (!shareBypass) {
+                    const ok = authMiddleware({ pathname, req, res, tokenManager, secretKey, unauthenticatedPaths });
+                    if (!ok)
+                        return;
+                }
             }
             // CSRF validation middleware for state-changing API routes
             if (pathname.startsWith('/api/')) {
@@ -449,6 +342,43 @@ export async function startServer(options = {}) {
             }
             // Try each route handler in order
             // Order matters: more specific routes should come before general ones
+            // Test endpoint for ask_question tool (temporary for E2E testing)
+            if (pathname === '/api/test/ask-question' && req.method === 'POST') {
+                const { executeTool } = await import('../tools/index.js');
+                // Get question params from request body if provided, or use default
+                let questionParams = {
+                    question: {
+                        id: 'test-question-' + Date.now(),
+                        type: 'confirm',
+                        title: 'Test Question',
+                        message: 'This is a test of the ask_question tool integration',
+                        description: 'Click Confirm or Cancel to complete the test'
+                    },
+                    timeout: 30000
+                };
+                if (req.headers['content-type']?.includes('application/json')) {
+                    try {
+                        const chunks = [];
+                        for await (const chunk of req) {
+                            chunks.push(chunk);
+                        }
+                        const body = JSON.parse(Buffer.concat(chunks).toString());
+                        if (body.question) {
+                            questionParams.question = { ...questionParams.question, ...body.question };
+                        }
+                        if (body.timeout) {
+                            questionParams.timeout = body.timeout;
+                        }
+                    }
+                    catch (e) {
+                        // Use defaults if parsing fails
+                    }
+                }
+                const result = await executeTool('ask_question', questionParams);
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify(result));
+                return;
+            }
             // Auth routes (/api/csrf-token)
             if (await handleAuthRoutes(routeContext))
                 return;
@@ -462,6 +392,26 @@ export async function startServer(options = {}) {
                 if (await handleNavStatusRoutes(routeContext))
                     return;
             }
+            // Dashboard routes (/api/dashboard/*, /api/workflow-status-counts)
+            if (pathname.startsWith('/api/dashboard/') || pathname === '/api/workflow-status-counts') {
+                if (await handleDashboardRoutes(routeContext))
+                    return;
+            }
+            // Analysis routes (/api/analysis/*)
+            if (pathname.startsWith('/api/analysis')) {
+                if (await handleAnalysisRoutes(routeContext))
+                    return;
+            }
+            // CLI sessions (PTY) routes (/api/cli-sessions/*) - independent from /api/cli/*
+            if (pathname.startsWith('/api/cli-sessions')) {
+                if (await handleCliSessionsRoutes(routeContext))
+                    return;
+            }
+            // Audit routes (/api/audit/*)
+            if (pathname.startsWith('/api/audit')) {
+                if (await handleAuditRoutes(routeContext))
+                    return;
+            }
             // CLI routes (/api/cli/*)
             if (pathname.startsWith('/api/cli/')) {
                 // CLI Settings routes first (more specific path /api/cli/settings/*)
@@ -480,8 +430,8 @@ export async function startServer(options = {}) {
                 if (await handleClaudeRoutes(routeContext))
                     return;
             }
-            // Memory routes (/api/memory/*)
-            if (pathname.startsWith('/api/memory/')) {
+            // Memory routes (/api/memory and /api/memory/*)
+            if (pathname === '/api/memory' || pathname.startsWith('/api/memory/')) {
                 if (await handleMemoryRoutes(routeContext))
                     return;
             }
@@ -490,6 +440,11 @@ export async function startServer(options = {}) {
                 if (await handleCoreMemoryRoutes(routeContext))
                     return;
             }
+            // Unified Memory routes (/api/unified-memory/*)
+            if (pathname.startsWith('/api/unified-memory/')) {
+                if (await handleUnifiedMemoryRoutes(routeContext))
+                    return;
+            }
             // MCP routes (/api/mcp*, /api/codex-mcp*)
             if (pathname.startsWith('/api/mcp') || pathname.startsWith('/api/codex-mcp')) {
                 if (await handleMcpRoutes(routeContext))
@@ -500,6 +455,16 @@ export async function startServer(options = {}) {
                 if (await handleHooksRoutes(routeContext))
                     return;
             }
+            // Background image upload/serve routes (/api/background/*)
+            if (pathname.startsWith('/api/background/')) {
+                if (await handleBackgroundRoutes(routeContext))
+                    return;
+            }
+            // Unsplash proxy routes (/api/unsplash/*)
+            if (pathname.startsWith('/api/unsplash/')) {
+                if (await handleUnsplashRoutes(routeContext))
+                    return;
+            }
             // CodexLens routes (/api/codexlens/*)
             if (pathname.startsWith('/api/codexlens/')) {
                 if (await handleCodexLensRoutes(routeContext))
@@ -520,11 +485,26 @@ export async function startServer(options = {}) {
                 if (await handleGraphRoutes(routeContext))
                     return;
             }
-            // CCW routes (/api/ccw/*)
-            if (pathname.startsWith('/api/ccw/')) {
+            // Spec routes (/api/specs/*)
+            if (pathname.startsWith('/api/specs/')) {
+                if (await handleSpecRoutes(routeContext))
+                    return;
+            }
+            // CCW routes (/api/ccw and /api/ccw/*)
+            if (pathname.startsWith('/api/ccw')) {
                 if (await handleCcwRoutes(routeContext))
                     return;
             }
+            // Orchestrator routes (/api/orchestrator/*)
+            if (pathname.startsWith('/api/orchestrator/')) {
+                if (await handleOrchestratorRoutes(routeContext))
+                    return;
+            }
+            // Config routes (/api/config/*)
+            if (pathname.startsWith('/api/config/')) {
+                if (await handleConfigRoutes(routeContext))
+                    return;
+            }
             // Loop V2 routes (/api/loops/v2/*) - must be checked before v1
             if (pathname.startsWith('/api/loops/v2')) {
                 if (await handleLoopV2Routes(routeContext))
@@ -535,6 +515,16 @@ export async function startServer(options = {}) {
                 if (await handleLoopRoutes(routeContext))
                     return;
             }
+            // Team routes (/api/teams*)
+            if (pathname.startsWith('/api/teams')) {
+                if (await handleTeamRoutes(routeContext))
+                    return;
+            }
+            // Remote notification routes (/api/notifications/remote/*)
+            if (pathname.startsWith('/api/notifications/remote')) {
+                if (await handleNotificationRoutes(req, res, pathname))
+                    return;
+            }
             // Task routes (/api/tasks)
             if (pathname.startsWith('/api/tasks')) {
                 if (await handleTaskRoutes(routeContext))
@@ -550,12 +540,22 @@ export async function startServer(options = {}) {
                 if (await handleSkillsRoutes(routeContext))
                     return;
             }
+            // Skill Hub routes (/api/skill-hub*)
+            if (pathname.startsWith('/api/skill-hub')) {
+                if (await handleSkillHubRoutes(routeContext))
+                    return;
+            }
             // Commands routes (/api/commands*)
             if (pathname.startsWith('/api/commands')) {
                 if (await handleCommandsRoutes(routeContext))
                     return;
             }
-            // Queue routes (/api/queue*) - top-level queue API
+            // Queue Scheduler routes (/api/queue/execute, /api/queue/scheduler/*)
+            if (pathname === '/api/queue/execute' || pathname.startsWith('/api/queue/scheduler')) {
+                if (await handleQueueSchedulerRoutes(routeContext, queueSchedulerService))
+                    return;
+            }
+            // Queue routes (/api/queue*) - top-level queue API (issue-based)
             if (pathname.startsWith('/api/queue')) {
                 if (await handleIssueRoutes(routeContext))
                     return;
@@ -585,71 +585,73 @@ export async function startServer(options = {}) {
                 if (await handleSessionRoutes(routeContext))
                     return;
             }
-            // Files routes (/api/files, /api/file, /api/file-content, /api/update-claude-md)
+            // Files routes (/api/files, /api/file, /api/file-content, /api/update-claude-md, /api/explorer/*)
             if (pathname === '/api/files' || pathname === '/api/file' ||
-                pathname === '/api/file-content' || pathname === '/api/update-claude-md') {
+                pathname === '/api/file-content' || pathname === '/api/update-claude-md' ||
+                pathname.startsWith('/api/explorer/')) {
                 if (await handleFilesRoutes(routeContext))
                     return;
             }
-            // System routes (data, health, version, paths, shutdown, notify, storage, dialog)
+            // System routes (data, health, version, paths, shutdown, notify, storage, dialog, a2ui answer broker, system settings, project-tech)
             if (pathname === '/api/data' || pathname === '/api/health' ||
                 pathname === '/api/version-check' || pathname === '/api/shutdown' ||
                 pathname === '/api/recent-paths' || pathname === '/api/switch-path' ||
                 pathname === '/api/remove-recent-path' || pathname === '/api/system/notify' ||
+                pathname === '/api/system/settings' || pathname === '/api/system/hooks/install-recommended' ||
+                pathname === '/api/a2ui/answer' || pathname === '/api/project-tech/stats' ||
                 pathname.startsWith('/api/storage/') || pathname.startsWith('/api/dialog/')) {
                 if (await handleSystemRoutes(routeContext))
                     return;
             }
-            // Serve dashboard HTML
-            if (pathname === '/' || pathname === '/index.html') {
-                // Set session cookie and CSRF token for all requests
-                const tokenResult = tokenManager.getOrCreateAuthToken();
-                setAuthCookie(res, tokenResult.token, tokenResult.expiresAt);
-                const sessionId = getOrCreateSessionId(req, res);
-                const csrfToken = getCsrfTokenManager().generateToken(sessionId);
-                res.setHeader('X-CSRF-Token', csrfToken);
-                setCsrfCookie(res, csrfToken, 15 * 60);
-                const html = generateServerDashboard(initialPath);
-                res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-                res.end(html);
-                return;
-            }
             // Handle favicon.ico (return empty response to prevent 404)
             if (pathname === '/favicon.ico') {
                 res.writeHead(204);
                 res.end();
                 return;
             }
-            // Serve static assets (js, css, images, fonts)
-            if (pathname.startsWith('/assets/')) {
-                const assetPath = join(ASSETS_DIR, pathname.replace('/assets/', ''));
-                if (existsSync(assetPath)) {
-                    const ext = assetPath.split('.').pop()?.toLowerCase();
-                    const mimeTypes = {
-                        'js': 'application/javascript',
-                        'css': 'text/css',
-                        'json': 'application/json',
-                        'png': 'image/png',
-                        'jpg': 'image/jpeg',
-                        'jpeg': 'image/jpeg',
-                        'svg': 'image/svg+xml',
-                        'woff': 'font/woff',
-                        'woff2': 'font/woff2',
-                        'ttf': 'font/ttf'
-                    };
-                    const contentType = ext ? mimeTypes[ext] ?? 'application/octet-stream' : 'application/octet-stream';
-                    const content = readFileSync(assetPath);
-                    res.writeHead(200, {
+            // Backward compatibility: redirect /react/* to /* (strip /react prefix)
+            if (pathname === '/react' || pathname.startsWith('/react/')) {
+                const newPath = pathname === '/react' ? '/' : pathname.slice('/react'.length);
+                res.writeHead(301, { 'Location': `${newPath}${url.search}` });
+                res.end();
+                return;
+            }
+            // React frontend proxy - forward all non-API requests to Vite dev server
+            {
+                const reactUrl = `http://localhost:${reactPort}${pathname}${url.search}`;
+                try {
+                    // Convert headers to plain object for fetch
+                    const proxyHeaders = {};
+                    for (const [key, value] of Object.entries(req.headers)) {
+                        if (typeof value === 'string') {
+                            proxyHeaders[key] = value;
+                        }
+                        else if (Array.isArray(value)) {
+                            proxyHeaders[key] = value.join(', ');
+                        }
+                    }
+                    proxyHeaders['host'] = `localhost:${reactPort}`;
+                    const reactResponse = await fetch(reactUrl, {
+                        method: req.method,
+                        headers: proxyHeaders,
+                        body: req.method !== 'GET' && req.method !== 'HEAD' ? await readRequestBody(req) : undefined,
+                    });
+                    const contentType = reactResponse.headers.get('content-type') || 'text/html';
+                    const body = await reactResponse.text();
+                    res.writeHead(reactResponse.status, {
                         'Content-Type': contentType,
-                        'Cache-Control': 'no-cache, must-revalidate'
+                        'Cache-Control': 'no-cache',
                     });
-                    res.end(content);
+                    res.end(body);
+                    return;
+                }
+                catch (err) {
+                    console.error(`[React Proxy] Failed to proxy to ${reactUrl}:`, err.message);
+                    res.writeHead(502, { 'Content-Type': 'text/plain' });
+                    res.end(`Bad Gateway: React frontend not available at ${reactUrl}\nError: ${err.message}`);
                     return;
                 }
             }
-            // 404
-            res.writeHead(404, { 'Content-Type': 'text/plain' });
-            res.end('Not Found');
         }
         catch (error) {
             console.error('Server error:', error);
@@ -700,11 +702,14 @@ export async function startServer(options = {}) {
             }
             // Start cache warmup asynchronously (non-blocking)
             // Uses setImmediate to not delay server startup response
-            setImmediate(() => {
-                warmupCaches(initialPath).catch((err) => {
-                    console.warn('[WARMUP] Cache warmup failed:', err);
+            const warmupDisabled = ['1', 'true', 'yes'].includes((process.env.CCW_DISABLE_WARMUP ?? '').trim().toLowerCase());
+            if (!warmupDisabled) {
+                setImmediate(() => {
+                    warmupCaches(initialPath).catch((err) => {
+                        console.warn('[WARMUP] Cache warmup failed:', err);
+                    });
                 });
-            });
+            }
             resolve(server);
         });
         server.on('error', reject);