claude-code-workflow 6.3.54 → 7.0.0

package/ccw/dist/utils/outline-queries.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Language configurations and tree-sitter query definitions for outline parsing.
+ */
+export interface LanguageConfig {
+    grammarName: string;
+    extensions: string[];
+    symbolQuery: string;
+}
+export declare const LANGUAGE_CONFIGS: Record<string, LanguageConfig>;
+/**
+ * Detect language config from file path extension or explicit hint.
+ * Returns null if language is not supported.
+ */
+export declare function detectLanguage(filePath: string, hint?: string): LanguageConfig | null;
+//# sourceMappingURL=outline-queries.d.ts.map

package/ccw/dist/utils/outline-queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outline-queries.d.ts","sourceRoot":"","sources":["../../src/utils/outline-queries.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CA+G3D,CAAC;AAUF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAYrF"}

package/ccw/dist/utils/outline-queries.js

@@ -0,0 +1,141 @@
+/**
+ * Language configurations and tree-sitter query definitions for outline parsing.
+ */
+import { extname } from 'path';
+export const LANGUAGE_CONFIGS = {
+    typescript: {
+        grammarName: 'typescript',
+        extensions: ['.ts'],
+        symbolQuery: [
+            '(function_declaration name: (identifier) @name) @definition.function',
+            '(class_declaration name: (type_identifier) @name) @definition.class',
+            '(method_definition name: (property_identifier) @name) @definition.method',
+            '(abstract_method_signature name: (property_identifier) @name) @definition.method',
+            '(interface_declaration name: (type_identifier) @name) @definition.interface',
+            '(type_alias_declaration name: (type_identifier) @name) @definition.type',
+            '(enum_declaration name: (identifier) @name) @definition.enum',
+            '(variable_declarator name: (identifier) @name value: (arrow_function)) @definition.function',
+            '(variable_declarator name: (identifier) @name value: (function_expression)) @definition.function',
+        ].join('\n'),
+    },
+    tsx: {
+        grammarName: 'tsx',
+        extensions: ['.tsx'],
+        symbolQuery: [
+            '(function_declaration name: (identifier) @name) @definition.function',
+            '(class_declaration name: (type_identifier) @name) @definition.class',
+            '(method_definition name: (property_identifier) @name) @definition.method',
+            '(interface_declaration name: (type_identifier) @name) @definition.interface',
+            '(type_alias_declaration name: (type_identifier) @name) @definition.type',
+            '(enum_declaration name: (identifier) @name) @definition.enum',
+            '(variable_declarator name: (identifier) @name value: (arrow_function)) @definition.function',
+            '(variable_declarator name: (identifier) @name value: (function_expression)) @definition.function',
+        ].join('\n'),
+    },
+    javascript: {
+        grammarName: 'javascript',
+        extensions: ['.js', '.jsx', '.mjs', '.cjs'],
+        symbolQuery: [
+            '(function_declaration name: (identifier) @name) @definition.function',
+            '(class_declaration name: (identifier) @name) @definition.class',
+            '(method_definition name: (property_identifier) @name) @definition.method',
+            '(variable_declarator name: (identifier) @name value: (arrow_function)) @definition.function',
+            '(variable_declarator name: (identifier) @name value: (function_expression)) @definition.function',
+        ].join('\n'),
+    },
+    python: {
+        grammarName: 'python',
+        extensions: ['.py'],
+        symbolQuery: [
+            '(function_definition name: (identifier) @name) @definition.function',
+            '(class_definition name: (identifier) @name) @definition.class',
+        ].join('\n'),
+    },
+    go: {
+        grammarName: 'go',
+        extensions: ['.go'],
+        symbolQuery: [
+            '(function_declaration name: (identifier) @name) @definition.function',
+            '(method_declaration name: (field_identifier) @name) @definition.method',
+            '(type_spec name: (type_identifier) @name) @definition.type',
+        ].join('\n'),
+    },
+    rust: {
+        grammarName: 'rust',
+        extensions: ['.rs'],
+        symbolQuery: [
+            '(function_item name: (identifier) @name) @definition.function',
+            '(struct_item name: (type_identifier) @name) @definition.class',
+            '(enum_item name: (type_identifier) @name) @definition.enum',
+            '(trait_item name: (type_identifier) @name) @definition.interface',
+            '(impl_item type: (type_identifier) @name) @definition.class',
+        ].join('\n'),
+    },
+    java: {
+        grammarName: 'java',
+        extensions: ['.java'],
+        symbolQuery: [
+            '(class_declaration name: (identifier) @name) @definition.class',
+            '(method_declaration name: (identifier) @name) @definition.method',
+            '(interface_declaration name: (identifier) @name) @definition.interface',
+            '(enum_declaration name: (identifier) @name) @definition.enum',
+            '(constructor_declaration name: (identifier) @name) @definition.method',
+        ].join('\n'),
+    },
+    csharp: {
+        grammarName: 'c_sharp',
+        extensions: ['.cs'],
+        symbolQuery: [
+            '(class_declaration name: (identifier) @name) @definition.class',
+            '(method_declaration name: (identifier) @name) @definition.method',
+            '(interface_declaration name: (identifier) @name) @definition.interface',
+            '(enum_declaration name: (identifier) @name) @definition.enum',
+            '(constructor_declaration name: (identifier) @name) @definition.method',
+        ].join('\n'),
+    },
+    c: {
+        grammarName: 'c',
+        extensions: ['.c', '.h'],
+        symbolQuery: [
+            '(function_definition declarator: (function_declarator declarator: (identifier) @name)) @definition.function',
+            '(struct_specifier name: (type_identifier) @name) @definition.class',
+            '(enum_specifier name: (type_identifier) @name) @definition.enum',
+        ].join('\n'),
+    },
+    cpp: {
+        grammarName: 'cpp',
+        extensions: ['.cpp', '.hpp', '.cc', '.cxx'],
+        symbolQuery: [
+            '(function_definition declarator: (function_declarator declarator: (identifier) @name)) @definition.function',
+            '(function_definition declarator: (function_declarator declarator: (qualified_identifier name: (identifier) @name))) @definition.function',
+            '(class_specifier name: (type_identifier) @name) @definition.class',
+            '(struct_specifier name: (type_identifier) @name) @definition.class',
+            '(enum_specifier name: (type_identifier) @name) @definition.enum',
+        ].join('\n'),
+    },
+};
+// Build extension → language name lookup map
+const EXTENSION_MAP = new Map();
+for (const [lang, config] of Object.entries(LANGUAGE_CONFIGS)) {
+    for (const ext of config.extensions) {
+        EXTENSION_MAP.set(ext, lang);
+    }
+}
+/**
+ * Detect language config from file path extension or explicit hint.
+ * Returns null if language is not supported.
+ */
+export function detectLanguage(filePath, hint) {
+    if (hint) {
+        const normalized = hint.toLowerCase();
+        const config = LANGUAGE_CONFIGS[normalized];
+        if (config)
+            return config;
+    }
+    const ext = extname(filePath).toLowerCase();
+    const lang = EXTENSION_MAP.get(ext);
+    if (lang)
+        return LANGUAGE_CONFIGS[lang];
+    return null;
+}
+//# sourceMappingURL=outline-queries.js.map

package/ccw/dist/utils/outline-queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outline-queries.js","sourceRoot":"","sources":["../../src/utils/outline-queries.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQ/B,MAAM,CAAC,MAAM,gBAAgB,GAAmC;IAC9D,UAAU,EAAE;QACV,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE;YACX,sEAAsE;YACtE,qEAAqE;YACrE,0EAA0E;YAC1E,kFAAkF;YAClF,6EAA6E;YAC7E,yEAAyE;YACzE,8DAA8D;YAC9D,6FAA6F;YAC7F,kGAAkG;SACnG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,GAAG,EAAE;QACH,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,CAAC,MAAM,CAAC;QACpB,WAAW,EAAE;YACX,sEAAsE;YACtE,qEAAqE;YACrE,0EAA0E;YAC1E,6EAA6E;YAC7E,yEAAyE;YACzE,8DAA8D;YAC9D,6FAA6F;YAC7F,kGAAkG;SACnG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,UAAU,EAAE;QACV,WAAW,EAAE,YAAY;QACzB,UAAU,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC3C,WAAW,EAAE;YACX,sEAAsE;YACtE,gEAAgE;YAChE,0EAA0E;YAC1E,6FAA6F;YAC7F,kGAAkG;SACnG,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,MAAM,EAAE;QACN,WAAW,EAAE,QAAQ;QACrB,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE;YACX,qEAAqE;YACrE,+DAA+D;SAChE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,EAAE,EAAE;QACF,WAAW,EAAE,IAAI;QACjB,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE;YACX,sEAAsE;YACtE,wEAAwE;YACxE,4DAA4D;SAC7D,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE;YACX,+DAA+D;YAC/D,+DAA+D;YAC/D,4DAA4D;YAC5D,kEAAkE;YAClE,6DAA6D;SAC9D,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,CAAC,OAAO,CAAC;QACrB,WAAW,EAAE;YACX,gEAAgE;YAChE,kEAAkE;YAClE,wEAAwE;YACxE,8DAA8D;YAC9D,uEAAuE;SACxE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,MAAM,EAAE;QACN,WAAW,EAAE,SAAS;QACtB,UAAU,EAAE,CAAC,KAAK,CAAC;QACnB,WAAW,EAAE;YACX,gEAAgE;YAChE,kEAAkE;YAClE,wEAAwE;YACxE,8DAA8D;YAC9D,uEAAuE;SACxE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,CAAC,EAAE;QACD,WAAW,EAAE,GAAG;QAChB,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC;QACxB,WAAW,EAAE;YACX,6GAA6G;YAC7G,oEAAoE;YACpE,iEAAiE;SAClE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,GAAG,EAAE;QACH,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC;QAC3C,WAAW,EAAE;YACX,6GAA6G;YAC7G,0IAA0I;YAC1I,mEAAmE;YACnE,oEAAoE;YACpE,iEAAiE;SAClE,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,6CAA6C;AAC7C,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAChD,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACpC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,QAAgB,EAAE,IAAa;IAC5D,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI;QAAE,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAExC,OAAO,IAAI,CAAC;AACd,CAAC"}

package/ccw/dist/utils/package-discovery.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Unified Package Discovery for local Python packages (codex-lens, ccw-litellm)
+ *
+ * Provides a single, transparent path discovery mechanism with:
+ * - Environment variable overrides (highest priority)
+ * - ~/.codexlens/config.json configuration
+ * - Extended search paths (npm global, PACKAGE_ROOT, siblings, etc.)
+ * - Full search result transparency for diagnostics
+ */
+/** Source that found the package path */
+export type PackageSource = 'env' | 'config' | 'sibling' | 'npm-global' | 'cwd' | 'cwd-parent' | 'homedir' | 'package-root';
+/** A single search attempt result */
+export interface SearchAttempt {
+    path: string;
+    source: PackageSource;
+    exists: boolean;
+}
+/** Result of package discovery */
+export interface PackageDiscoveryResult {
+    /** Resolved package path, or null if not found */
+    path: string | null;
+    /** Source that found the package */
+    source: PackageSource | null;
+    /** All paths searched (for diagnostics) */
+    searchedPaths: SearchAttempt[];
+    /** Whether the found path is inside node_modules */
+    insideNodeModules: boolean;
+}
+/** Known local package names */
+export type LocalPackageName = 'codex-lens' | 'ccw-litellm';
+/**
+ * Check if a path is inside node_modules
+ */
+export declare function isInsideNodeModules(pathToCheck: string): boolean;
+/**
+ * Check if running in a development environment (not from node_modules)
+ */
+export declare function isDevEnvironment(): boolean;
+/**
+ * Find a local Python package path with unified search logic.
+ *
+ * Search priority:
+ * 1. Environment variable (CODEXLENS_PACKAGE_PATH / CCW_LITELLM_PATH)
+ * 2. ~/.codexlens/config.json packagePaths
+ * 3. Sibling directory to ccw project root (src/utils -> ../../..)
+ * 4. npm global prefix node_modules path
+ * 5. Current working directory
+ * 6. Parent of current working directory
+ * 7. Home directory
+ *
+ * Two-pass search: first pass skips node_modules paths, second pass allows them.
+ *
+ * @param packageName - Package to find ('codex-lens' or 'ccw-litellm')
+ * @returns Discovery result with path, source, and all searched paths
+ */
+export declare function findPackagePath(packageName: LocalPackageName): PackageDiscoveryResult;
+/**
+ * Find codex-lens package path (convenience wrapper)
+ */
+export declare function findCodexLensPath(): PackageDiscoveryResult;
+/**
+ * Find ccw-litellm package path (convenience wrapper)
+ */
+export declare function findCcwLitellmPath(): PackageDiscoveryResult;
+/**
+ * Format search results for error messages
+ */
+export declare function formatSearchResults(result: PackageDiscoveryResult, packageName: string): string;
+//# sourceMappingURL=package-discovery.d.ts.map

package/ccw/dist/utils/package-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-discovery.d.ts","sourceRoot":"","sources":["../../src/utils/package-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,yCAAyC;AACzC,MAAM,MAAM,aAAa,GACrB,KAAK,GACL,QAAQ,GACR,SAAS,GACT,YAAY,GACZ,KAAK,GACL,YAAY,GACZ,SAAS,GACT,cAAc,CAAC;AAEnB,qCAAqC;AACrC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,aAAa,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,kCAAkC;AAClC,MAAM,WAAW,sBAAsB;IACrC,kDAAkD;IAClD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,oCAAoC;IACpC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAC7B,2CAA2C;IAC3C,aAAa,EAAE,aAAa,EAAE,CAAC;IAC/B,oDAAoD;IACpD,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,gCAAgC;AAChC,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,aAAa,CAAC;AAkB5D;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAGhE;AAED;;GAEG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAM1C;AAkDD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,WAAW,EAAE,gBAAgB,GAAG,sBAAsB,CA2HrF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,sBAAsB,CAE1D;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,sBAAsB,CAE3D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAgB/F"}

package/ccw/dist/utils/package-discovery.js

@@ -0,0 +1,258 @@
+/**
+ * Unified Package Discovery for local Python packages (codex-lens, ccw-litellm)
+ *
+ * Provides a single, transparent path discovery mechanism with:
+ * - Environment variable overrides (highest priority)
+ * - ~/.codexlens/config.json configuration
+ * - Extended search paths (npm global, PACKAGE_ROOT, siblings, etc.)
+ * - Full search result transparency for diagnostics
+ */
+import { existsSync, readFileSync } from 'fs';
+import { join, dirname, resolve } from 'path';
+import { homedir } from 'os';
+import { execSync } from 'child_process';
+import { fileURLToPath } from 'url';
+import { getCodexLensDataDir } from './codexlens-path.js';
+import { EXEC_TIMEOUTS } from './exec-constants.js';
+// Get directory of this module (src/utils/)
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+/** Environment variable mapping for each package */
+const PACKAGE_ENV_VARS = {
+    'codex-lens': 'CODEXLENS_PACKAGE_PATH',
+    'ccw-litellm': 'CCW_LITELLM_PATH',
+};
+/** Config key mapping for each package */
+const PACKAGE_CONFIG_KEYS = {
+    'codex-lens': 'codexLensPath',
+    'ccw-litellm': 'ccwLitellmPath',
+};
+// ========================================
+// Helpers
+// ========================================
+/**
+ * Check if a path is inside node_modules
+ */
+export function isInsideNodeModules(pathToCheck) {
+    const normalized = pathToCheck.replace(/\\/g, '/').toLowerCase();
+    return normalized.includes('/node_modules/');
+}
+/**
+ * Check if running in a development environment (not from node_modules)
+ */
+export function isDevEnvironment() {
+    // Yarn PnP detection
+    if (process.versions.pnp) {
+        return false;
+    }
+    return !isInsideNodeModules(__dirname);
+}
+/**
+ * Read package paths from ~/.codexlens/config.json
+ */
+function readConfigPath(packageName) {
+    try {
+        const configPath = join(getCodexLensDataDir(), 'config.json');
+        if (!existsSync(configPath))
+            return null;
+        const config = JSON.parse(readFileSync(configPath, 'utf-8'));
+        const key = PACKAGE_CONFIG_KEYS[packageName];
+        const value = config?.packagePaths?.[key];
+        return typeof value === 'string' && value.trim() ? value.trim() : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Get npm global prefix directory
+ */
+let _npmGlobalPrefix;
+function getNpmGlobalPrefix() {
+    if (_npmGlobalPrefix !== undefined)
+        return _npmGlobalPrefix;
+    try {
+        const result = execSync('npm prefix -g', {
+            encoding: 'utf-8',
+            timeout: EXEC_TIMEOUTS.SYSTEM_INFO,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        });
+        _npmGlobalPrefix = result.trim() || null;
+    }
+    catch {
+        _npmGlobalPrefix = null;
+    }
+    return _npmGlobalPrefix;
+}
+/**
+ * Check if a directory contains a valid Python package (has pyproject.toml)
+ */
+function isValidPackageDir(dir) {
+    return existsSync(join(dir, 'pyproject.toml'));
+}
+// ========================================
+// Main Discovery Function
+// ========================================
+/**
+ * Find a local Python package path with unified search logic.
+ *
+ * Search priority:
+ * 1. Environment variable (CODEXLENS_PACKAGE_PATH / CCW_LITELLM_PATH)
+ * 2. ~/.codexlens/config.json packagePaths
+ * 3. Sibling directory to ccw project root (src/utils -> ../../..)
+ * 4. npm global prefix node_modules path
+ * 5. Current working directory
+ * 6. Parent of current working directory
+ * 7. Home directory
+ *
+ * Two-pass search: first pass skips node_modules paths, second pass allows them.
+ *
+ * @param packageName - Package to find ('codex-lens' or 'ccw-litellm')
+ * @returns Discovery result with path, source, and all searched paths
+ */
+export function findPackagePath(packageName) {
+    const searched = [];
+    // Helper to check and record a path
+    const check = (path, source) => {
+        const resolvedPath = resolve(path);
+        const exists = isValidPackageDir(resolvedPath);
+        searched.push({ path: resolvedPath, source, exists });
+        return exists;
+    };
+    // 1. Environment variable (highest priority, skip two-pass)
+    const envKey = PACKAGE_ENV_VARS[packageName];
+    const envPath = process.env[envKey];
+    if (envPath) {
+        if (check(envPath, 'env')) {
+            return {
+                path: resolve(envPath),
+                source: 'env',
+                searchedPaths: searched,
+                insideNodeModules: isInsideNodeModules(envPath),
+            };
+        }
+        // Env var set but path invalid — continue searching but warn
+        console.warn(`[PackageDiscovery] ${envKey}="${envPath}" set but pyproject.toml not found, continuing search...`);
+    }
+    // 2. Config file
+    const configPath = readConfigPath(packageName);
+    if (configPath) {
+        if (check(configPath, 'config')) {
+            return {
+                path: resolve(configPath),
+                source: 'config',
+                searchedPaths: searched,
+                insideNodeModules: isInsideNodeModules(configPath),
+            };
+        }
+    }
+    // Build candidate paths for two-pass search
+    const candidates = [];
+    // 3. Sibling directory to ccw project root
+    //    __dirname = src/utils/ → project root = ../../..
+    //    Also try one more level up for nested structures
+    const projectRoot = join(__dirname, '..', '..', '..');
+    candidates.push({ path: join(projectRoot, packageName), source: 'sibling' });
+    candidates.push({ path: join(projectRoot, '..', packageName), source: 'sibling' });
+    // 4. npm global prefix
+    const npmPrefix = getNpmGlobalPrefix();
+    if (npmPrefix) {
+        // npm global: prefix/node_modules/claude-code-workflow/<packageName>
+        candidates.push({
+            path: join(npmPrefix, 'node_modules', 'claude-code-workflow', packageName),
+            source: 'npm-global',
+        });
+        // npm global: prefix/lib/node_modules/claude-code-workflow/<packageName> (Linux/Mac)
+        candidates.push({
+            path: join(npmPrefix, 'lib', 'node_modules', 'claude-code-workflow', packageName),
+            source: 'npm-global',
+        });
+        // npm global sibling: prefix/node_modules/<packageName>
+        candidates.push({
+            path: join(npmPrefix, 'node_modules', packageName),
+            source: 'npm-global',
+        });
+    }
+    // 5. Current working directory
+    const cwd = process.cwd();
+    candidates.push({ path: join(cwd, packageName), source: 'cwd' });
+    // 6. Parent of cwd (common workspace layout)
+    const cwdParent = dirname(cwd);
+    if (cwdParent !== cwd) {
+        candidates.push({ path: join(cwdParent, packageName), source: 'cwd-parent' });
+    }
+    // 7. Home directory
+    candidates.push({ path: join(homedir(), packageName), source: 'homedir' });
+    // Two-pass search: prefer non-node_modules paths first
+    // First pass: skip node_modules
+    for (const candidate of candidates) {
+        const resolvedPath = resolve(candidate.path);
+        if (isInsideNodeModules(resolvedPath))
+            continue;
+        if (check(resolvedPath, candidate.source)) {
+            console.log(`[PackageDiscovery] Found ${packageName} at: ${resolvedPath} (source: ${candidate.source})`);
+            return {
+                path: resolvedPath,
+                source: candidate.source,
+                searchedPaths: searched,
+                insideNodeModules: false,
+            };
+        }
+    }
+    // Second pass: allow node_modules paths
+    for (const candidate of candidates) {
+        const resolvedPath = resolve(candidate.path);
+        if (!isInsideNodeModules(resolvedPath))
+            continue;
+        // Skip if already checked in first pass
+        if (searched.some(s => s.path === resolvedPath))
+            continue;
+        if (check(resolvedPath, candidate.source)) {
+            console.log(`[PackageDiscovery] Found ${packageName} in node_modules at: ${resolvedPath} (source: ${candidate.source})`);
+            return {
+                path: resolvedPath,
+                source: candidate.source,
+                searchedPaths: searched,
+                insideNodeModules: true,
+            };
+        }
+    }
+    // Not found
+    return {
+        path: null,
+        source: null,
+        searchedPaths: searched,
+        insideNodeModules: false,
+    };
+}
+/**
+ * Find codex-lens package path (convenience wrapper)
+ */
+export function findCodexLensPath() {
+    return findPackagePath('codex-lens');
+}
+/**
+ * Find ccw-litellm package path (convenience wrapper)
+ */
+export function findCcwLitellmPath() {
+    return findPackagePath('ccw-litellm');
+}
+/**
+ * Format search results for error messages
+ */
+export function formatSearchResults(result, packageName) {
+    const lines = [`Cannot find '${packageName}' package directory.\n`];
+    lines.push('Searched locations:');
+    for (const attempt of result.searchedPaths) {
+        const status = attempt.exists ? '✓' : '✗';
+        lines.push(`  ${status} [${attempt.source}] ${attempt.path}`);
+    }
+    lines.push('');
+    lines.push('To fix this:');
+    const envKey = PACKAGE_ENV_VARS[packageName] || `${packageName.toUpperCase().replace(/-/g, '_')}_PATH`;
+    lines.push(`  1. Set environment variable: ${envKey}=/path/to/${packageName}`);
+    lines.push(`  2. Or add to ~/.codexlens/config.json: { "packagePaths": { "${PACKAGE_CONFIG_KEYS[packageName] || packageName}": "/path/to/${packageName}" } }`);
+    lines.push(`  3. Or ensure '${packageName}' directory exists as a sibling to the ccw project`);
+    return lines.join('\n');
+}
+//# sourceMappingURL=package-discovery.js.map

package/ccw/dist/utils/package-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-discovery.js","sourceRoot":"","sources":["../../src/utils/package-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,4CAA4C;AAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClD,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;AAuCtC,oDAAoD;AACpD,MAAM,gBAAgB,GAAqC;IACzD,YAAY,EAAE,wBAAwB;IACtC,aAAa,EAAE,kBAAkB;CAClC,CAAC;AAEF,0CAA0C;AAC1C,MAAM,mBAAmB,GAAqC;IAC5D,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,gBAAgB;CAChC,CAAC;AAEF,2CAA2C;AAC3C,UAAU;AACV,2CAA2C;AAE3C;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAmB;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,OAAO,UAAU,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB;IAC9B,qBAAqB;IACrB,IAAK,OAAO,CAAC,QAAoC,CAAC,GAAG,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CAAC,WAA6B;IACnD,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAEzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,MAAM,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC;QAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,IAAI,gBAA2C,CAAC;AAChD,SAAS,kBAAkB;IACzB,IAAI,gBAAgB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,EAAE;YACvC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,aAAa,CAAC,WAAW;YAClC,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC;QACH,gBAAgB,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IACD,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,2CAA2C;AAC3C,0BAA0B;AAC1B,2CAA2C;AAE3C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,WAA6B;IAC3D,MAAM,QAAQ,GAAoB,EAAE,CAAC;IAErC,oCAAoC;IACpC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,MAAqB,EAAW,EAAE;QAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,4DAA4D;IAC5D,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC;gBACtB,MAAM,EAAE,KAAK;gBACb,aAAa,EAAE,QAAQ;gBACvB,iBAAiB,EAAE,mBAAmB,CAAC,OAAO,CAAC;aAChD,CAAC;QACJ,CAAC;QACD,6DAA6D;QAC7D,OAAO,CAAC,IAAI,CAAC,sBAAsB,MAAM,KAAK,OAAO,0DAA0D,CAAC,CAAC;IACnH,CAAC;IAED,iBAAiB;IACjB,MAAM,UAAU,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,UAAU,EAAE,CAAC;QACf,IAAI,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC;gBACzB,MAAM,EAAE,QAAQ;gBAChB,aAAa,EAAE,QAAQ;gBACvB,iBAAiB,EAAE,mBAAmB,CAAC,UAAU,CAAC;aACnD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,UAAU,GAA8C,EAAE,CAAC;IAEjE,2CAA2C;IAC3C,sDAAsD;IACtD,sDAAsD;IACtD,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtD,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7E,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAEnF,uBAAuB;IACvB,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,qEAAqE;QACrE,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,sBAAsB,EAAE,WAAW,CAAC;YAC1E,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,qFAAqF;QACrF,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,sBAAsB,EAAE,WAAW,CAAC;YACjF,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QACH,wDAAwD;QACxD,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC;YAClD,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;IACL,CAAC;IAED,+BAA+B;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAEjE,6CAA6C;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;QACtB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,oBAAoB;IACpB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IAE3E,uDAAuD;IACvD,gCAAgC;IAChC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,mBAAmB,CAAC,YAAY,CAAC;YAAE,SAAS;QAChD,IAAI,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,QAAQ,YAAY,aAAa,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACzG,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,aAAa,EAAE,QAAQ;gBACvB,iBAAiB,EAAE,KAAK;aACzB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,wCAAwC;IACxC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC;YAAE,SAAS;QACjD,wCAAwC;QACxC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;YAAE,SAAS;QAC1D,IAAI,KAAK,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,WAAW,wBAAwB,YAAY,aAAa,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;YACzH,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,aAAa,EAAE,QAAQ;gBACvB,iBAAiB,EAAE,IAAI;aACxB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,YAAY;IACZ,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAE,KAAK;KACzB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,eAAe,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,eAAe,CAAC,aAAa,CAAC,CAAC;AACxC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA8B,EAAE,WAAmB;IACrF,MAAM,KAAK,GAAG,CAAC,gBAAgB,WAAW,wBAAwB,CAAC,CAAC;IACpE,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAA+B,CAAC,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC;IAC3H,KAAK,CAAC,IAAI,CAAC,kCAAkC,MAAM,aAAa,WAAW,EAAE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,iEAAiE,mBAAmB,CAAC,WAA+B,CAAC,IAAI,WAAW,gBAAgB,WAAW,OAAO,CAAC,CAAC;IACnL,KAAK,CAAC,IAAI,CAAC,mBAAmB,WAAW,oDAAoD,CAAC,CAAC;IAE/F,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/ccw/dist/utils/path-validator.d.ts

@@ -7,10 +7,10 @@
  * Inspired by MCP filesystem server's security model.
  */
 /**
- * Check if sandbox mode is disabled
- * When disabled, path validation allows access to any directory
+ * Check if sandbox mode is enabled
+ * When enabled, path validation restricts access to allowed directories only
  */
-export declare function isSandboxDisabled(): boolean;
+export declare function isSandboxEnabled(): boolean;
 /**
  * Get project root directory
  * Priority: CCW_PROJECT_ROOT > process.cwd()

package/ccw/dist/utils/path-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"path-validator.d.ts","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAG3C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAMhD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuBD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,MAAM,EAAE,GAC3B,OAAO,CAST;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;CAChB,GACL,OAAO,CAAC,MAAM,CAAC,CAmEjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpE"}
+{"version":3,"file":"path-validator.d.ts","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAWH;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAG1C;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,EAAE,CAMhD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE/C;AAuBD;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,UAAU,EAAE,MAAM,EAClB,kBAAkB,EAAE,MAAM,EAAE,GAC3B,OAAO,CAST;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE,OAAO,CAAC;CAChB,GACL,OAAO,CAAC,MAAM,CAAC,CAmEjB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,YAAY,EAAE,MAAM,EAAE,GAAG,MAAM,CAEpE"}

package/ccw/dist/utils/path-validator.js

@@ -11,13 +11,13 @@ import { realpath } from 'fs/promises';
 // Environment variable configuration
 const ENV_PROJECT_ROOT = 'CCW_PROJECT_ROOT';
 const ENV_ALLOWED_DIRS = 'CCW_ALLOWED_DIRS';
-const ENV_DISABLE_SANDBOX = 'CCW_DISABLE_SANDBOX';
+const ENV_ENABLE_SANDBOX = 'CCW_ENABLE_SANDBOX';
 /**
- * Check if sandbox mode is disabled
- * When disabled, path validation allows access to any directory
+ * Check if sandbox mode is enabled
+ * When enabled, path validation restricts access to allowed directories only
  */
-export function isSandboxDisabled() {
-    const value = process.env[ENV_DISABLE_SANDBOX];
+export function isSandboxEnabled() {
+    const value = process.env[ENV_ENABLE_SANDBOX];
     return value === '1' || value?.toLowerCase() === 'true';
 }
 /**
@@ -89,15 +89,15 @@ export function isPathWithinAllowedDirectories(targetPath, allowedDirectories) {
  * @throws Error if path is outside allowed directories or validation fails
  */
 export async function validatePath(filePath, options = {}) {
-    const sandboxDisabled = isSandboxDisabled();
+    const sandboxEnabled = isSandboxEnabled();
     const allowedDirs = options.allowedDirectories || getAllowedDirectories();
     // 1. Resolve to absolute path
     const absolutePath = isAbsolute(filePath)
         ? filePath
         : resolve(getProjectRoot(), filePath);
     const normalizedPath = normalizePath(absolutePath);
-    // 2. Initial sandbox check (skip if sandbox is disabled)
-    if (!sandboxDisabled && !isPathWithinAllowedDirectories(normalizedPath, allowedDirs)) {
+    // 2. Initial sandbox check (only if sandbox is enabled)
+    if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedPath, allowedDirs)) {
         throw new Error(`Access denied: path "${normalizedPath}" is outside allowed directories. ` +
             `Allowed: [${allowedDirs.join(', ')}]`);
     }
@@ -105,8 +105,8 @@ export async function validatePath(filePath, options = {}) {
     try {
         const realPath = await realpath(absolutePath);
         const normalizedReal = normalizePath(realPath);
-        // Skip sandbox check for symlink target if sandbox is disabled
-        if (!sandboxDisabled && !isPathWithinAllowedDirectories(normalizedReal, allowedDirs)) {
+        // Only check symlink target if sandbox is enabled
+        if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedReal, allowedDirs)) {
             throw new Error(`Access denied: symlink target "${normalizedReal}" is outside allowed directories`);
         }
         return normalizedReal;
@@ -117,12 +117,12 @@ export async function validatePath(filePath, options = {}) {
             if (options.mustExist) {
                 throw new Error(`File not found: ${absolutePath}`);
             }
-            // Validate parent directory's real path (skip if sandbox is disabled)
+            // Validate parent directory's real path (only if sandbox is enabled)
             const parentDir = resolve(absolutePath, '..');
             try {
                 const realParent = await realpath(parentDir);
                 const normalizedParent = normalizePath(realParent);
-                if (!sandboxDisabled && !isPathWithinAllowedDirectories(normalizedParent, allowedDirs)) {
+                if (sandboxEnabled && !isPathWithinAllowedDirectories(normalizedParent, allowedDirs)) {
                     throw new Error(`Access denied: parent directory "${normalizedParent}" is outside allowed directories`);
                 }
             }

package/ccw/dist/utils/path-validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"path-validator.js","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAY,GAAG,EAAE,MAAM,MAAM,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAU,MAAM,aAAa,CAAC;AAG/C,qCAAqC;AACrC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AAElD;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC/C,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAS;IAC1C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,SAAS,IAAI,GAAG,CAAC;IACnB,CAAC;SAAM,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAC5B,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB,EAClB,kBAA4B;IAE5B,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACnC,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,eAAe,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC;QAChF,OAAO,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,UAGI,EAAE;IAEN,MAAM,eAAe,GAAG,iBAAiB,EAAE,CAAC;IAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,IAAI,qBAAqB,EAAE,CAAC;IAE1E,8BAA8B;IAC9B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAEnD,yDAAyD;IACzD,IAAI,CAAC,eAAe,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CACb,wBAAwB,cAAc,oCAAoC;YAC1E,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvC,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/C,+DAA+D;QAC/D,IAAI,CAAC,eAAe,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CACb,kCAAkC,cAAc,kCAAkC,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,iDAAiD;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,sEAAsE;YACtE,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,gBAAgB,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;gBAEnD,IAAI,CAAC,eAAe,IAAI,CAAC,8BAA8B,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;oBACvF,MAAM,IAAI,KAAK,CACb,oCAAoC,gBAAgB,kCAAkC,CACvF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBAC1B,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClC,wEAAwE;oBACxE,qCAAqC;oBACrC,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,MAAM,WAAW,CAAC;YACpB,CAAC;YAED,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAG,YAAsB;IAC1D,OAAO,OAAO,CAAC,cAAc,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC;AACpD,CAAC"}
+{"version":3,"file":"path-validator.js","sourceRoot":"","sources":["../../src/utils/path-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAY,GAAG,EAAE,MAAM,MAAM,CAAC;AACrE,OAAO,EAAE,QAAQ,EAAU,MAAM,aAAa,CAAC;AAG/C,qCAAqC;AACrC,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC9C,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,EAAE,WAAW,EAAE,KAAK,MAAM,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,OAAO,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,OAAO,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,yBAAyB,CAAC,CAAS;IAC1C,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAEpC,4EAA4E;IAC5E,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,SAAS,IAAI,GAAG,CAAC;IACnB,CAAC;SAAM,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;QAC5B,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,sCAAsC;IACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,SAAS,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,8BAA8B,CAC5C,UAAkB,EAClB,kBAA4B;IAE5B,MAAM,eAAe,GAAG,yBAAyB,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACnC,MAAM,YAAY,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,eAAe,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC;QAElD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,GAAG,GAAG,CAAC;QAChF,OAAO,eAAe,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,UAGI,EAAE;IAEN,MAAM,cAAc,GAAG,gBAAgB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,OAAO,CAAC,kBAAkB,IAAI,qBAAqB,EAAE,CAAC;IAE1E,8BAA8B;IAC9B,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC;QACvC,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IAEnD,wDAAwD;IACxD,IAAI,cAAc,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CACb,wBAAwB,cAAc,oCAAoC;YAC1E,aAAa,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACvC,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAE/C,kDAAkD;QAClD,IAAI,cAAc,IAAI,CAAC,8BAA8B,CAAC,cAAc,EAAE,WAAW,CAAC,EAAE,CAAC;YACnF,MAAM,IAAI,KAAK,CACb,kCAAkC,cAAc,kCAAkC,CACnF,CAAC;QACJ,CAAC;QAED,OAAO,cAAc,CAAC;IACxB,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,iDAAiD;QACjD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACtB,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;YACrD,CAAC;YAED,qEAAqE;YACrE,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;gBAC7C,MAAM,gBAAgB,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;gBAEnD,IAAI,cAAc,IAAI,CAAC,8BAA8B,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAAE,CAAC;oBACrF,MAAM,IAAI,KAAK,CACb,oCAAoC,gBAAgB,kCAAkC,CACvF,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,WAAgB,EAAE,CAAC;gBAC1B,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClC,wEAAwE;oBACxE,qCAAqC;oBACrC,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,MAAM,WAAW,CAAC;YACpB,CAAC;YAED,OAAO,YAAY,CAAC;QACtB,CAAC;QAED,gCAAgC;QAChC,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAG,YAAsB;IAC1D,OAAO,OAAO,CAAC,cAAc,EAAE,EAAE,GAAG,YAAY,CAAC,CAAC;AACpD,CAAC"}

package/ccw/dist/utils/react-frontend.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Start React frontend development server
+ * @param port - Port to run React frontend on
+ * @returns Promise that resolves when server is ready
+ */
+export declare function startReactFrontend(port: number): Promise<void>;
+/**
+ * Stop React frontend development server
+ */
+export declare function stopReactFrontend(): Promise<void>;
+/**
+ * Get React frontend status
+ * @returns Object with running status and port
+ */
+export declare function getReactFrontendStatus(): {
+    running: boolean;
+    port: number | null;
+};
+//# sourceMappingURL=react-frontend.d.ts.map

package/ccw/dist/utils/react-frontend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"react-frontend.d.ts","sourceRoot":"","sources":["../../src/utils/react-frontend.ts"],"names":[],"mappings":"AAYA;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgIpE;AAED;;GAEG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAmEvD;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAKlF"}