fix: improve functionality and fix critical bugs

[diegofornalha]

Summary

• Fix PostHog analytics configuration and improve consent flow
• Enhance security with file system permission restrictions
• Implement comprehensive input validation and error handling

Changes

🔒 Security Improvements

• Restricted file system permissions to safe directories only
• Removed dangerous --dangerously-skip-permissions flag from all Claude executions
• Improved Content Security Policy by removing unsafe-eval

🐛 Bug Fixes

• Fixed PostHog configuration (removed invalid defaults field)
• Fixed analytics initialization to respect user consent
• Fixed TypeScript errors and improved type safety

⚡ Performance Optimizations

• Added React.memo to optimize component re-renders
• Implemented lazy loading for heavy components (Settings, modals)
• Reduced unnecessary re-renders in ProjectList and SessionList

🛡️ Error Handling & Validation

• Enhanced ErrorBoundary with detailed error capture and localStorage persistence
• Added comprehensive input validation using Zod schemas
• Protected against path traversal and command injection attacks

Test Plan

• Build successfully completes
• TypeScript compilation passes without errors
• Rust backend compiles successfully
• Analytics only initializes after user consent
• File operations are restricted to safe directories
• Error boundary captures and displays errors properly
• Components load lazily with proper loading states

Documentation

Created three documentation files to track improvements:

• IMPROVEMENT_PLAN.md - Comprehensive improvement roadmap
• CRITICAL_FIXES.md - Detailed implementation guide for critical fixes
• QUICK_FIXES_CHECKLIST.md - Actionable checklist with time estimates

🤖 Generated with Claude Code