feat: Add arbitrary directory project storage with registry system

This major update replaces the fixed `generations/` directory with support
for storing projects in any directory on the filesystem. Projects are now
tracked via a cross-platform registry system.

## New Features

### Project Registry (`registry.py`)
- Cross-platform registry storing project name-to-path mappings
- Platform-specific config locations:
  - Windows: %APPDATA%\autonomous-coder\projects.json
  - macOS: ~/Library/Application Support/autonomous-coder/projects.json
  - Linux: ~/.config/autonomous-coder/projects.json
- POSIX path format for cross-platform compatibility
- File locking for concurrent access safety (fcntl/msvcrt)
- Atomic writes via temp file + rename to prevent corruption
- Fixed Windows file locking issue with tempfile.mkstemp()

### Filesystem Browser API (`server/routers/filesystem.py`)
- REST endpoints for browsing directories server-side
- Cross-platform support with blocked system paths:
  - Windows: C:\Windows, Program Files, ProgramData, etc.
  - macOS: /System, /Library, /private, etc.
  - Linux: /etc, /var, /usr, /bin, etc.
- Universal blocked paths: .ssh, .aws, .gnupg, .docker, etc.
- Hidden file detection (Unix dot-prefix + Windows attributes)
- UNC path blocking for security
- Windows drive enumeration via ctypes
- Directory creation with validation
- Added `has_children` field to DirectoryEntry schema

### UI Folder Browser (`ui/src/components/FolderBrowser.tsx`)
- React component for selecting project directories
- Breadcrumb navigation with clickable segments
- Windows drive selector
- New folder creation inline
- Fixed text visibility with explicit color values

## Updated Components

### Server Routers
- `projects.py`: Uses registry instead of fixed generations/ directory
- `agent.py`: Uses registry for project path lookups
- `features.py`: Uses registry for database path resolution
- `spec_creation.py`: Uses registry for WebSocket project resolution

### Process Manager (`server/services/process_manager.py`)
- Fixed sandbox issue: subprocess now uses project_dir as cwd
- This allows the Claude SDK sandbox to access external project directories

### Schemas (`server/schemas.py`)
- Added `has_children` to DirectoryEntry
- Added `in_progress` to ProjectStats
- Added path field to ProjectSummary and ProjectDetail

### UI Components
- `NewProjectModal.tsx`: Multi-step wizard with folder selection
- Added clarifying text about subfolder creation
- Fixed text color visibility issues

### API Client (`ui/src/lib/api.ts`)
- Added filesystem API functions (listDirectory, createDirectory)
- Fixed Windows path splitting for directory creation

### Documentation
- Updated CLAUDE.md with registry system details
- Updated command examples for absolute paths

## Security Improvements
- Blocked `.` and `..` in directory names to prevent traversal
- Added path blocking check in project creation
- UNC path blocking throughout filesystem API

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

server/routers/features.py

@@ -19,25 +19,21 @@ from ..schemas import (
 )
 
 # Lazy imports to avoid circular dependencies
-_GENERATIONS_DIR = None
 _create_database = None
 _Feature = None
 
 logger = logging.getLogger(__name__)
 
 
-def _get_generations_dir():
-    """Lazy import of GENERATIONS_DIR."""
-    global _GENERATIONS_DIR
-    if _GENERATIONS_DIR is None:
-        import sys
-        from pathlib import Path
-        root = Path(__file__).parent.parent.parent
-        if str(root) not in sys.path:
-            sys.path.insert(0, str(root))
-        from start import GENERATIONS_DIR
-        _GENERATIONS_DIR = GENERATIONS_DIR
-    return _GENERATIONS_DIR
+def _get_project_path(project_name: str) -> Path:
+    """Get project path from registry."""
+    import sys
+    root = Path(__file__).parent.parent.parent
+    if str(root) not in sys.path:
+        sys.path.insert(0, str(root))
+
+    from registry import get_project_path
+    return get_project_path(project_name)
 
 
 def _get_db_classes():
@@ -108,10 +104,13 @@ async def list_features(project_name: str):
     - done: passes=True
     """
     project_name = validate_project_name(project_name)
-    project_dir = _get_generations_dir() / project_name
+    project_dir = _get_project_path(project_name)
+
+    if not project_dir:
+        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found in registry")
 
     if not project_dir.exists():
-        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found")
+        raise HTTPException(status_code=404, detail=f"Project directory not found")
 
     db_file = project_dir / "features.db"
     if not db_file.exists():
@@ -152,10 +151,13 @@ async def list_features(project_name: str):
 async def create_feature(project_name: str, feature: FeatureCreate):
     """Create a new feature/test case manually."""
     project_name = validate_project_name(project_name)
-    project_dir = _get_generations_dir() / project_name
+    project_dir = _get_project_path(project_name)
+
+    if not project_dir:
+        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found in registry")
 
     if not project_dir.exists():
-        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found")
+        raise HTTPException(status_code=404, detail=f"Project directory not found")
 
     _, Feature = _get_db_classes()
 
@@ -194,10 +196,13 @@ async def create_feature(project_name: str, feature: FeatureCreate):
 async def get_feature(project_name: str, feature_id: int):
     """Get details of a specific feature."""
     project_name = validate_project_name(project_name)
-    project_dir = _get_generations_dir() / project_name
+    project_dir = _get_project_path(project_name)
+
+    if not project_dir:
+        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found in registry")
 
     if not project_dir.exists():
-        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found")
+        raise HTTPException(status_code=404, detail=f"Project directory not found")
 
     db_file = project_dir / "features.db"
     if not db_file.exists():
@@ -224,10 +229,13 @@ async def get_feature(project_name: str, feature_id: int):
 async def delete_feature(project_name: str, feature_id: int):
     """Delete a feature."""
     project_name = validate_project_name(project_name)
-    project_dir = _get_generations_dir() / project_name
+    project_dir = _get_project_path(project_name)
+
+    if not project_dir:
+        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found in registry")
 
     if not project_dir.exists():
-        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found")
+        raise HTTPException(status_code=404, detail=f"Project directory not found")
 
     _, Feature = _get_db_classes()
 
@@ -258,10 +266,13 @@ async def skip_feature(project_name: str, feature_id: int):
     so it will be processed last.
     """
     project_name = validate_project_name(project_name)
-    project_dir = _get_generations_dir() / project_name
+    project_dir = _get_project_path(project_name)
+
+    if not project_dir:
+        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found in registry")
 
     if not project_dir.exists():
-        raise HTTPException(status_code=404, detail=f"Project '{project_name}' not found")
+        raise HTTPException(status_code=404, detail=f"Project directory not found")
 
     _, Feature = _get_db_classes()