feat: add ClawAI VS Code extension foundation

[ihabkhaled]

Summary

• establish the backend primitives for ClawAI's VS Code device-authentication flow
• make frontend lifecycle helpers portable across Windows and POSIX environments
• restore the workspace service's real HTML-sanitiser security catalogue under Jest

Delivery approach

• test-driven, coherent commits pushed after each green slice
• strict issuer, audience, token-kind, signature, and payload validation
• HMAC token hashing with constant-time comparison
• generated knowledge and inventory artifacts kept fresh by repository hooks

Verification

• shared auth/constants/types/utilities typecheck, lint, test, and build
• workspace service typecheck, lint, 66 test suites / 661 tests, and build
• pre-commit affected typecheck
• pre-push knowledge integrity, inventory audit, architecture tests, affected tests, and affected builds

Status

Draft: additional device-flow, approval UI, extension integration, E2E, Playwright, and release slices will land as separate gated commits.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
claw-frontend	Ready	Preview, Comment	Jul 28, 2026 7:49am