claude-launchpad 1.5.0 → 1.7.0

package/dist/cli.js

@@ -20,7 +20,7 @@ import {
   printScoreCard,
   readFileOrNull,
   renderDoctorReport
-} from "./chunk-GLFJ2B43.js";
+} from "./chunk-AGDE4BJA.js";
 
 // src/cli.ts
 import { Command as Command5 } from "commander";
@@ -165,11 +165,7 @@ function generateSettings(detected) {
       ]
     },
     hooks,
-    disableBypassPermissionsMode: "disable",
-    sandbox: {
-      enabled: true,
-      failIfUnavailable: true
-    }
+    disableBypassPermissionsMode: "disable"
   };
 }
 var SAFE_FORMATTERS = {
@@ -947,12 +943,12 @@ async function analyzePermissions(config) {
     });
   }
   const sandbox = settings?.sandbox;
-  if (sandbox?.enabled !== true) {
+  if (sandbox?.enabled === true) {
     issues.push({
       analyzer: "Permissions",
-      severity: "medium",
-      message: "Sandbox not enabled \u2014 hooks block tool calls but not subprocess access (e.g. cat .env via Bash)",
-      fix: 'Add "sandbox": { "enabled": true, "failIfUnavailable": true } to settings.json'
+      severity: "high",
+      message: "Filesystem sandbox enabled \u2014 blocks memory MCP and other cross-project tooling. Deny rules already cover the threat model.",
+      fix: 'Remove the "sandbox" block from settings.json'
     });
   }
   const hasEnvHook = config.hooks.some((h) => h.command?.includes(".env"));
@@ -1068,19 +1064,6 @@ async function analyzeMcp(config) {
       });
     }
   }
-  if (servers.length > 0) {
-    const sandbox = config.settings?.sandbox ?? config.localSettings?.sandbox;
-    const hasNetwork = sandbox?.network !== void 0;
-    const httpServers = servers.filter((s) => s.transport === "sse" || s.transport === "http");
-    if (sandbox?.enabled === true && httpServers.length > 0 && !hasNetwork) {
-      issues.push({
-        analyzer: "MCP",
-        severity: "low",
-        message: "Sandbox enabled with HTTP MCP servers but no network restrictions configured",
-        fix: "Add sandbox.network.allowedHosts to restrict which hosts MCP servers can reach"
-      });
-    }
-  }
   const score = Math.max(0, 100 - issues.filter((i) => i.severity !== "info").length * 25);
   return { name: "MCP Servers", issues, score };
 }
@@ -2332,14 +2315,14 @@ function createMemoryCommand() {
         log.error("Knowledge base not set up yet. Run `claude-launchpad memory` first.");
         return;
       }
-      const { requireMemoryDeps } = await import("./require-deps-MCFEZOIF.js");
+      const { requireMemoryDeps } = await import("./require-deps-H2U4PXPY.js");
       await requireMemoryDeps();
-      const { startTui } = await import("./tui-JE5L7SXC.js");
+      const { startTui } = await import("./tui-NDDEYYND.js");
       await startTui();
       return;
     }
     if (!isMemoryInstalled()) {
-      const { detectExistingSetup } = await import("./install-P4TFYUJT.js");
+      const { detectExistingSetup } = await import("./install-ZQQGCIRC.js");
       const existing = detectExistingSetup(process.cwd());
       if (existing) {
         const location = existing === "local" ? ".claude/CLAUDE.md + settings.local.json" : "CLAUDE.md + settings.json";
@@ -2365,18 +2348,18 @@ function createMemoryCommand() {
         log.info("Skipped.");
         return;
       }
-      const { runInstall } = await import("./install-P4TFYUJT.js");
+      const { runInstall } = await import("./install-ZQQGCIRC.js");
       await runInstall({});
     } else {
-      const { requireMemoryDeps } = await import("./require-deps-MCFEZOIF.js");
+      const { requireMemoryDeps } = await import("./require-deps-H2U4PXPY.js");
       await requireMemoryDeps();
-      const { runStats } = await import("./stats-MLWRNOHU.js");
+      const { runStats } = await import("./stats-DGMDAUNG.js");
       await runStats({});
     }
   });
   memory.addCommand(
     new Command4("context").description("Load session context (hook handler)").option("--json", "JSON output").action(async (opts) => {
-      const { runContext } = await import("./context-4X4CLMU3.js");
+      const { runContext } = await import("./context-G2GSE7TY.js");
       await runContext(opts);
     }).helpCommand(false),
     { hidden: true }
@@ -2391,7 +2374,7 @@ function createMemoryCommand() {
   memory.addCommand(
     new Command4("push").description("Push current project's memories to GitHub Gist").option("--all", "Push all projects").option("-y, --yes", "Skip confirmation prompt").action(async (opts) => {
       await handleSyncErrors(async () => {
-        const { runPush } = await import("./push-SCTO5TZQ.js");
+        const { runPush } = await import("./push-STHV7MT7.js");
         await runPush(opts);
       });
     })
@@ -2399,7 +2382,7 @@ function createMemoryCommand() {
   memory.addCommand(
     new Command4("pull").description("Pull current project's memories from GitHub Gist").option("--all", "Pull all projects").option("-y, --yes", "Non-interactive (accepted for symmetry with push; pull never prompts)").action(async (opts) => {
       await handleSyncErrors(async () => {
-        const { runPull } = await import("./pull-7SR7P3US.js");
+        const { runPull } = await import("./pull-TP2Y7CQS.js");
         await runPull(opts);
       });
     })
@@ -2408,7 +2391,7 @@ function createMemoryCommand() {
   sync.addCommand(
     new Command4("status").description("Show local vs remote memory counts per project").action(async () => {
       await handleSyncErrors(async () => {
-        const { runSyncStatus } = await import("./sync-status-J7BVY6KF.js");
+        const { runSyncStatus } = await import("./sync-status-XH3Z5LC5.js");
         await runSyncStatus();
       });
     })
@@ -2416,7 +2399,7 @@ function createMemoryCommand() {
   sync.addCommand(
     new Command4("clean").description("Remove a project from the sync gist").argument("<project>", "Project slug to remove").option("-y, --yes", "Skip confirmation prompt").action(async (project, opts) => {
       await handleSyncErrors(async () => {
-        const { runSyncClean } = await import("./sync-clean-2BMOFDV7.js");
+        const { runSyncClean } = await import("./sync-clean-HLV2XJPT.js");
         await runSyncClean(project, opts);
       });
     })
@@ -2426,7 +2409,7 @@ function createMemoryCommand() {
 }
 
 // src/cli.ts
-var program = new Command5().name("claude-launchpad").description("CLI toolkit that makes Claude Code setups measurably good").version("1.5.0", "-v, --version").action(async () => {
+var program = new Command5().name("claude-launchpad").description("CLI toolkit that makes Claude Code setups measurably good").version("1.7.0", "-v, --version").action(async () => {
   const hasConfig = await fileExists(join9(process.cwd(), "CLAUDE.md")) || await fileExists(join9(process.cwd(), ".claude", "settings.json"));
   if (hasConfig) {
     await program.commands.find((c) => c.name() === "doctor")?.parseAsync([], { from: "user" });