fix server boot

.agent/clone-body.json

@@ -0,0 +1 @@
+{"repoUrl":"https://github.com/octocat/Hello-World.git","projectName":"local-repro"}

.agent/cookies.txt

@@ -0,0 +1,4 @@
+# Netscape HTTP Cookie File
+# https://curl.se/docs/http-cookies.html
+# This file was generated by libcurl! Edit at your own risk.
+

.agent/local-server.log

@@ -0,0 +1,18 @@
+[BOOT] Starting Next.js preparation...
+----------------------------------------------------
+[READY] CodeVerse 1.0.0-stable
+[READY] Interface: 0.0.0.0:7860
+----------------------------------------------------
+[BOOT] Next.js payload ready.
+[BOOT] Environment validated. Synchronizing database...
+[SYSTEM] Dev Seeding: 'Developer Guest' user ready.
+[BOOT] Database synchronized.
+[BOOT] Probing filesystem segment: d:\Code\codeverse\workspaces for existing sessions...
+[Auto-Sleep] Cron initialized. Running every 30 minutes.
+[BOOT] Global state stabilized. Application is fully operational.
+⨯ SyntaxError: Expected property name or '}' in JSON at position 1 (line 1 column 2)
+    at JSON.parse (<anonymous>)
+⨯ SyntaxError: Expected property name or '}' in JSON at position 1 (line 1 column 2)
+    at JSON.parse (<anonymous>)
+(node:7268) [DEP0190] DeprecationWarning: Passing args to a child process with shell option true can lead to security vulnerabilities, as the arguments are not escaped, only concatenated.
+(Use `node --trace-deprecation ...` to show where the warning was created)

.agent/memory/session.json

@@ -1,7 +1,7 @@
 {
   "version": "1.0.0",
-  "session_id": "8a5947b6",
-  "started_at": "2026-04-09T18:00:22.621238+05:30",
+  "session_id": "9c33f220",
+  "started_at": "2026-04-09T19:43:54.970676+05:30",
   "workspace": "D:\\Code\\codeverse",
   "active_task_id": null,
   "active_agent": null,

.agent/start-body.json

@@ -0,0 +1 @@
+{"action":"start","id":"74b4d115-7324-4cb5-bda8-6ad9027d86a4","withAndroidEmulator":false}

.gitignore

@@ -23,7 +23,8 @@
 # misc
 .DS_Store
 *.pem
-
+*.npm-cache
+*.codeverse-runtime
 # debug
 npm-debug.log*
 yarn-debug.log*

dist/lib/docker/manager.js

@@ -22,6 +22,7 @@ const events_1 = require("events");
 const idx_engine_1 = require("../idx/idx-engine");
 const storage_1 = require("../hf/storage");
 const isolation_1 = require("../fs/isolation");
+const env_config_1 = require("../env-config");
 /**
  * Registry for native workspace processes (IDE instances running outside Docker)
  * Map<workspaceId, { pid: number; port: number; process: WorkspaceProcess }>
@@ -40,7 +41,7 @@ exports.pendingProvisioning = new Map();
 const SHORT_WORKSPACE_ID_LENGTH = 8;
 const RUNTIME_ROOT_DIR_NAME = '.codeverse-runtime';
 function getWorkspaceRootPath() {
-    return process.env.WORKSPACE_ROOT || path_1.default.join(/*turbopackIgnore: true*/ '/home/node/w');
+    return env_config_1.ENV_CONFIG.WORKSPACE_ROOT;
 }
 function getRuntimeRootPath() {
     return path_1.default.join(/*turbopackIgnore: true*/ getWorkspaceRootPath(), RUNTIME_ROOT_DIR_NAME);
@@ -73,6 +74,7 @@ async function resolveWorkspaceRuntimePaths(config) {
         runtimeWorkspacePath: path_1.default.join(/*turbopackIgnore: true*/ runtimeRootPath, shortWorkspaceId),
         userDataPath: path_1.default.join(/*turbopackIgnore: true*/ runtimeRootPath, `${shortWorkspaceId}-userdata`),
         metadataPath: path_1.default.join(/*turbopackIgnore: true*/ runtimeRootPath, `${shortWorkspaceId}.id`),
+        npmCachePath: path_1.default.join(/*turbopackIgnore: true*/ runtimeRootPath, 'npm-cache'),
     };
 }
 function ensureRuntimeWorkspacePath(paths, log) {
@@ -81,6 +83,7 @@ function ensureRuntimeWorkspacePath(paths, log) {
     }
     fs_1.default.mkdirSync(paths.runtimeRootPath, { recursive: true });
     fs_1.default.mkdirSync(paths.userDataPath, { recursive: true });
+    fs_1.default.mkdirSync(paths.npmCachePath, { recursive: true });
     if (fs_1.default.existsSync(paths.runtimeWorkspacePath)) {
         try {
             const existingTargetPath = fs_1.default.realpathSync(paths.runtimeWorkspacePath);
@@ -144,6 +147,22 @@ function findAvailablePort() {
     }
     return port;
 }
+function resolveCodeServerLaunch() {
+    const overrideBinary = process.env.CODE_SERVER_BIN;
+    if (overrideBinary) {
+        return { command: overrideBinary, args: [], label: overrideBinary };
+    }
+    if (process.platform === 'win32') {
+        try {
+            (0, child_process_1.execSync)('where code-server.cmd', { stdio: 'ignore' });
+            return { command: 'code-server.cmd', args: [], label: 'code-server' };
+        }
+        catch (_a) {
+            return { command: 'npx.cmd', args: ['--yes', 'code-server'], label: 'npx code-server' };
+        }
+    }
+    return { command: 'code-server', args: [], label: 'code-server' };
+}
 /**
  * Checks if Docker is available in the current environment.
  */
@@ -255,8 +274,9 @@ async function performProvisioning(config) {
             fs_1.default.writeFileSync(flagPath, new Date().toISOString());
         }
         // 5. Spawn code-server
-        const shellCommand = process.platform === 'win32' ? 'npx' : 'code-server';
-        const args = process.platform === 'win32' ? ['code-server'] : [];
+        const codeServerLaunch = resolveCodeServerLaunch();
+        const shellCommand = codeServerLaunch.command;
+        const args = codeServerLaunch.args;
         const baseArgs = [
             '--auth', 'none',
             '--bind-addr', `127.0.0.1:${port}`,
@@ -265,16 +285,26 @@ async function performProvisioning(config) {
             '--disable-update-check',
             workspacePath
         ];
-        const spawnEnv = { ...process.env, HOME: workspacePath };
+        const spawnEnv = {
+            ...process.env,
+            HOME: workspacePath,
+            npm_config_cache: runtimePaths.npmCachePath,
+            npm_config_update_notifier: 'false',
+        };
         delete spawnEnv.PORT;
         delete spawnEnv.SERVER_PORT;
         const child = (0, child_process_1.spawn)(shellCommand, [...args, ...baseArgs], {
             env: spawnEnv,
             cwd: workspacePath,
-            shell: process.platform === 'win32'
+            shell: false
+        });
+        log(`Spawning VS Code Orchestrator via ${codeServerLaunch.label} (PID: ${child.pid})...`);
+        let childExited = false;
+        let childFailureReason = null;
+        child.on('error', (err) => {
+            childFailureReason = `IDE_BINARY_FAILURE: ${err.message}`;
+            log(`[FATAL] IDE binary failure: ${err.message}`);
         });
-        log(`Spawning VS Code Orchestrator (PID: ${child.pid})...`);
-        child.on('error', (err) => log(`[FATAL] IDE binary failure: ${err.message}`));
         child.stdout.on('data', (data) => {
             const out = data.toString().trim();
             if (out.includes('listening on'))
@@ -288,6 +318,10 @@ async function performProvisioning(config) {
                 log(`[IDE:ERR] ${err}`);
         });
         child.on('close', (code, signal) => {
+            childExited = true;
+            if (code !== 0 || signal) {
+                childFailureReason = childFailureReason !== null && childFailureReason !== void 0 ? childFailureReason : `IDE_PROCESS_EXIT_${code !== null && code !== void 0 ? code : 'unknown'}${signal ? `_${signal}` : ''}`;
+            }
             log(`[IDE:EXIT] IDE process died with code ${code} (Signal: ${signal})`);
             exports.nativeProcesses.delete(config.id);
         });
@@ -296,6 +330,16 @@ async function performProvisioning(config) {
         // 7. Handshake Loop
         let attempts = 0;
         while (attempts < 60) {
+            if (childExited) {
+                const rawFailureMessage = childFailureReason !== null && childFailureReason !== void 0 ? childFailureReason : 'IDE_PROCESS_EXITED_BEFORE_HANDSHAKE';
+                const failureMessage = shellCommand === 'npx'
+                    ? `${rawFailureMessage}. code-server could not be bootstrapped via npx. Install code-server globally or set CODE_SERVER_BIN.`
+                    : rawFailureMessage;
+                log(`[FATAL] IDE bootstrap aborted before handshake: ${failureMessage}`);
+                const errResult = { success: false, error: failureMessage };
+                exports.provisioningBus.emit(`error:${config.id}`, errResult);
+                return errResult;
+            }
             try {
                 const res = await fetch(`http://127.0.0.1:${port}`);
                 if (res.ok) {

dist/lib/env-config.js

@@ -1,7 +1,16 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ENV_CONFIG = void 0;
 exports.validateEnvironment = validateEnvironment;
+const path_1 = __importDefault(require("path"));
+function getDefaultWorkspaceRoot() {
+    return process.platform === "win32"
+        ? path_1.default.join(process.cwd(), "workspaces")
+        : "/home/node/w";
+}
 /**
  * CodeVerse Environment Configuration & Requirements Manifest.
  * Centralizing all system variables for production-grade reliability.
@@ -10,7 +19,7 @@ exports.ENV_CONFIG = {
     // 1. Storage & Persistence
     HF_TOKEN: process.env.HF_TOKEN || process.env.hfToken || process.env.HF_SPACE || process.env.HuggingFaceToken,
     HF_DATASET_ID: process.env.HF_DATASET_ID || process.env.hfDataset || process.env.HF_DATASET,
-    WORKSPACE_ROOT: process.env.WORKSPACE_ROOT || '/home/node/w',
+    WORKSPACE_ROOT: process.env.WORKSPACE_ROOT || getDefaultWorkspaceRoot(),
     // 2. Build Acceleration
     CACHIX_CACHE_NAME: process.env.CACHIX_CACHE_NAME || 'code-nix',
     CACHIX_AUTH_TOKEN: process.env.CACHIX_AUTH_TOKEN,
@@ -20,8 +29,8 @@ exports.ENV_CONFIG = {
     APP_BASE_URL: process.env.NEXTAUTH_URL || 'http://localhost:7860',
     IS_SBC: !!process.env.SPACE_ID,
     // 4. Database & Auth
-    AUTH_SECRET: process.env.AUTH_SECRET || process.env.authSecret,
-    TURSO_URL: process.env.TURSO_URL || process.env.turso_url || process.env.database_url || process.env.TURSO_DATABASE_URL || process.env.DB_URL || process.env.turso_database_url,
+    AUTH_SECRET: process.env.AUTH_SECRET || process.env.NEXTAUTH_SECRET || process.env.authSecret,
+    TURSO_URL: process.env.TURSO_URL || process.env.turso_url || process.env.DATABASE_URL || process.env.database_url || process.env.TURSO_DATABASE_URL || process.env.DB_URL || process.env.turso_database_url,
     TURSO_AUTH_TOKEN: process.env.TURSO_AUTH_TOKEN || process.env.turso_auth_token || process.env.DB_TOKEN,
     TMPDIR: '/tmp',
     HF_HOME: '/tmp/.cache/huggingface',
@@ -31,14 +40,17 @@ exports.ENV_CONFIG = {
  */
 function validateEnvironment() {
     const missing = [];
-    if (!exports.ENV_CONFIG.HF_TOKEN)
-        missing.push('HF_TOKEN (Missing Persistence Link)');
-    if (!exports.ENV_CONFIG.HF_DATASET_ID)
-        missing.push('HF_DATASET_ID (Missing Data Segment)');
     if (!exports.ENV_CONFIG.AUTH_SECRET)
         missing.push('AUTH_SECRET (Security Risk)');
     if (!exports.ENV_CONFIG.TURSO_URL)
         missing.push('TURSO_URL (Database Missing)');
+    // HF persistence is required in deployed Spaces, not for local production testing.
+    if (exports.ENV_CONFIG.SPACE_ID) {
+        if (!exports.ENV_CONFIG.HF_TOKEN)
+            missing.push('HF_TOKEN (Missing Persistence Link)');
+        if (!exports.ENV_CONFIG.HF_DATASET_ID)
+            missing.push('HF_DATASET_ID (Missing Data Segment)');
+    }
     // Strategic Dataset Validation
     if (exports.ENV_CONFIG.HF_DATASET_ID && !exports.ENV_CONFIG.HF_DATASET_ID.includes('/')) {
         return { valid: false, missing: ['HF_DATASET_ID_FORMAT_ERROR: Must be "username/dataset"'] };

dist/lib/hf/storage.js

@@ -7,10 +7,14 @@ exports.HFStorage = void 0;
 const child_process_1 = require("child_process");
 const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
+const env_config_1 = require("../env-config");
 /**
  * Hugging Face Storage Utility for 2026 CodeVerse Persistence.
  */
 class HFStorage {
+    static get isPersistenceRuntimeEnabled() {
+        return Boolean(env_config_1.ENV_CONFIG.SPACE_ID && this.HF_TOKEN && this.HF_DATASET_ID && process.platform !== 'win32');
+    }
     /**
      * Internal helper for asynchronous execution with logging.
      */
@@ -40,13 +44,14 @@ class HFStorage {
                 else
                     reject(new Error(`Command failed with code ${code}: ${command}`));
             });
+            child.on('error', (error) => reject(error));
         });
     }
     /**
      * Synchronizes the environment FROM the Hugging Face Dataset (Pull).
      */
     static async syncFromDataset(onLog) {
-        if (!this.HF_TOKEN || !this.HF_DATASET_ID) {
+        if (!this.isPersistenceRuntimeEnabled) {
             onLog === null || onLog === void 0 ? void 0 : onLog(`[HF:STORAGE] Persistence layer inactive. Missing credentials.`);
             return;
         }
@@ -77,7 +82,7 @@ class HFStorage {
      * Synchronizes the environment TO the Hugging Face Dataset (Push).
      */
     static async syncToDataset(onLog) {
-        if (!this.HF_TOKEN || !this.HF_DATASET_ID)
+        if (!this.isPersistenceRuntimeEnabled)
             return;
         try {
             onLog === null || onLog === void 0 ? void 0 : onLog(`[HF:STORAGE] Saving persistent profile to '${this.HF_DATASET_ID}'...`);
@@ -99,7 +104,7 @@ class HFStorage {
         }
     }
     static startAutoSave(intervalMs = 300000) {
-        if (this.autoSaveStarted)
+        if (this.autoSaveStarted || !this.isPersistenceRuntimeEnabled)
             return;
         this.autoSaveStarted = true;
         console.log(`[HF:STORAGE] Persistence heartbeat initialized (Interval: ${intervalMs}ms)`);
@@ -112,7 +117,7 @@ exports.HFStorage = HFStorage;
 HFStorage.HF_TOKEN = process.env.HF_TOKEN;
 HFStorage.HF_DATASET_ID = process.env.HF_DATASET_ID;
 HFStorage.PROFILE_PATH = path_1.default.join(process.env.HOME || '/home/node', '.nix-profile');
-HFStorage.WORKSPACE_ROOT = process.env.WORKSPACE_ROOT || '/home/node/w';
+HFStorage.WORKSPACE_ROOT = env_config_1.ENV_CONFIG.WORKSPACE_ROOT;
 /**
  * Starts the periodic persistence interval (Singleton Heartbeat).
  */

dist/lib/idx/idx-engine.js

@@ -12,6 +12,15 @@ const child_process_1 = require("child_process");
  * Refactored for 2026 Asynchronous Execution to prevent Event Loop blocking.
  */
 class IdxEngine {
+    static async hasCommand(command) {
+        const probeCommand = process.platform === 'win32' ? 'where' : 'command';
+        const probeArgs = process.platform === 'win32' ? [command] : ['-v', command];
+        return await new Promise((resolve) => {
+            const child = (0, child_process_1.spawn)(probeCommand, probeArgs, { shell: process.platform !== 'win32' });
+            child.on('close', (code) => resolve(code === 0));
+            child.on('error', () => resolve(false));
+        });
+    }
     /**
      * Returns a robust baseline configuration for workspaces without a dev.nix.
      */
@@ -19,7 +28,7 @@ class IdxEngine {
         return {
             packages: ['pkgs.nodejs', 'pkgs.go', 'pkgs.python3', 'pkgs.docker', 'pkgs.python3Packages.huggingface-hub'],
             onCreate: 'npm install',
-            onStart: 'sleep 5 && npm run dev'
+            onStart: process.platform === 'win32' ? 'Start-Sleep -Seconds 5; npm run dev' : 'sleep 5 && npm run dev'
         };
     }
     /**
@@ -60,25 +69,14 @@ class IdxEngine {
         const log = (msg) => { if (onLog)
             onLog(`[IDX:NIX] ${msg}`); };
         log(`Syncing system packages: ${config.packages.join(', ')}...`);
+        const hasNix = await this.hasCommand('nix');
+        if (!hasNix) {
+            log(`Nix is unavailable on this host. Skipping declarative package sync.`);
+            return;
+        }
         // CACHIX ACCELERATION: Robust check for binary existence to prevent ENOENT crash
         const cachixName = process.env.CACHIX_CACHE_NAME || 'code-nix';
-        let hasCachix = false;
-        try {
-            await new Promise((resolve) => {
-                const check = (0, child_process_1.spawn)('command', ['-v', 'cachix'], { shell: true });
-                check.on('close', (code) => {
-                    hasCachix = (code === 0);
-                    resolve();
-                });
-                check.on('error', () => {
-                    hasCachix = false;
-                    resolve();
-                });
-            });
-        }
-        catch (_a) {
-            hasCachix = false;
-        }
+        const hasCachix = await this.hasCommand('cachix');
         if (hasCachix) {
             const cachixToken = process.env.CACHIX_AUTH_TOKEN;
             if (cachixToken) {
@@ -99,7 +97,7 @@ class IdxEngine {
                     child.on('close', (code) => code === 0 ? resolve() : reject(new Error(`Cachix failed with code ${code}`)));
                 });
             }
-            catch (_b) {
+            catch (_a) {
                 log(`[WARN] Cachix setup bypassed. Falling back to default binary cache.`);
             }
         }
@@ -120,7 +118,7 @@ class IdxEngine {
                     return;
                 }
             }
-            catch (_c) {
+            catch (_b) {
                 log(`[WARN] Manifest corruption detected. Forcing re-sync.`);
             }
         }
@@ -155,6 +153,7 @@ class IdxEngine {
             });
             child.stdout.on('data', (data) => log(data.toString().trim()));
             child.stderr.on('data', (data) => log(`[INFO] ${data.toString().trim()}`));
+            child.on('error', (error) => reject(error));
             child.on('close', (code) => {
                 if (code === 0) {
                     fs_1.default.writeFileSync(manifestPath, JSON.stringify({ packages: config.packages, timestamp: new Date().toISOString() }));
@@ -183,12 +182,18 @@ class IdxEngine {
             const spawnEnv = { ...process.env, HOME: workspacePath };
             delete spawnEnv.PORT;
             delete spawnEnv.SERVER_PORT;
-            const child = (0, child_process_1.spawn)('/bin/bash', ['-c', script], {
+            const shellCommand = process.platform === 'win32' ? 'powershell.exe' : '/bin/bash';
+            const shellArgs = process.platform === 'win32' ? ['-NoProfile', '-Command', script] : ['-c', script];
+            const child = (0, child_process_1.spawn)(shellCommand, shellArgs, {
                 cwd: workspacePath,
                 env: spawnEnv
             });
             child.stdout.on('data', (data) => log(data.toString().trim()));
             child.stderr.on('data', (data) => log(`[WARN] ${data.toString().trim()}`));
+            child.on('error', (error) => {
+                log(`[ERROR] ${error.message}`);
+                reject(error);
+            });
             child.on('close', (code) => {
                 if (code === 0) {
                     log(`Hook ${hookName} completed successfully.`);

dist/server.js

@@ -36,6 +36,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+require("dotenv/config");
 /**
  * 🛰️ GLOBAL STABILIZATION (April 2026): Catch unhandled errors that cause HF Space restarts.
  */
@@ -294,7 +295,9 @@ server.listen(PORT, HOST, () => {
             console.log("[BOOT] Database synchronized.");
             // Reconnect and Warmup
             (0, manager_1.reconnectRunningWorkspaces)().catch(() => { });
-            (0, manager_1.prewarmWorkspace)({ id: 'baseline-warmup', userId: 'system', projectName: 'CodeVerse-Internal' }).catch(() => { });
+            if (process.env.ENABLE_BASELINE_PREWARM === 'true') {
+                (0, manager_1.prewarmWorkspace)({ id: 'baseline-warmup', userId: 'system', projectName: 'CodeVerse-Internal' }).catch(() => { });
+            }
             // Crons and Persistence
             storage_1.HFStorage.startAutoSave(constants_1.INFRA_CONFIG.PERSISTENCE_INTERVAL_MS * 5);
             (0, auto_sleep_1.startAutoSleepCron)();

lib/actions/emulator.ts

@@ -1,6 +1,7 @@
 "use server";
 
 import Docker from 'dockerode';
+import { ENV_CONFIG } from '@/lib/env-config';
 
 const docker = new Docker({ 
     socketPath: process.platform === 'win32' ? '//./pipe/docker_engine' : '/var/run/docker.sock' 
@@ -38,7 +39,7 @@ export async function checkDeviceAvailability(platform: string, workspaceId: str
             const path = await import('path');
             
             const userId = "default-user"; 
-            const workspaceRoot = process.env.WORKSPACE_ROOT || path.join(/*turbopackIgnore: true*/ '/home/node/w');
+            const workspaceRoot = ENV_CONFIG.WORKSPACE_ROOT || path.join(/*turbopackIgnore: true*/ '/home/node/w');
             const dataPath = path.join(/*turbopackIgnore: true*/ workspaceRoot, userId, workspaceId);
             
             try {

lib/docker/manager.ts

@@ -6,6 +6,7 @@ import { EventEmitter } from 'events';
 import { IdxEngine } from '../idx/idx-engine';
 import { HFStorage } from '../hf/storage';
 import { resolveSafeProjectPath } from '../fs/isolation';
+import { ENV_CONFIG } from '../env-config';
 
 /**
  * Lighter process interface for reconnected sessions that don't have a full Node.js ChildProcess object.
@@ -42,13 +43,14 @@ interface WorkspaceRuntimePaths {
     runtimeWorkspacePath: string;
     userDataPath: string;
     metadataPath: string;
+    npmCachePath: string;
 }
 
 const SHORT_WORKSPACE_ID_LENGTH = 8;
 const RUNTIME_ROOT_DIR_NAME = '.codeverse-runtime';
 
 function getWorkspaceRootPath(): string {
-    return process.env.WORKSPACE_ROOT || path.join(/*turbopackIgnore: true*/ '/home/node/w');
+    return ENV_CONFIG.WORKSPACE_ROOT;
 }
 
 function getRuntimeRootPath(): string {
@@ -89,6 +91,7 @@ async function resolveWorkspaceRuntimePaths(config: Pick<WorkspaceConfig, 'id' |
         runtimeWorkspacePath: path.join(/*turbopackIgnore: true*/ runtimeRootPath, shortWorkspaceId),
         userDataPath: path.join(/*turbopackIgnore: true*/ runtimeRootPath, `${shortWorkspaceId}-userdata`),
         metadataPath: path.join(/*turbopackIgnore: true*/ runtimeRootPath, `${shortWorkspaceId}.id`),
+        npmCachePath: path.join(/*turbopackIgnore: true*/ runtimeRootPath, 'npm-cache'),
     };
 }
 
@@ -99,6 +102,7 @@ function ensureRuntimeWorkspacePath(paths: WorkspaceRuntimePaths, log?: (msg: st
 
     fs.mkdirSync(paths.runtimeRootPath, { recursive: true });
     fs.mkdirSync(paths.userDataPath, { recursive: true });
+    fs.mkdirSync(paths.npmCachePath, { recursive: true });
 
     if (fs.existsSync(paths.runtimeWorkspacePath)) {
         try {
@@ -166,6 +170,24 @@ function findAvailablePort(): number {
     return port;
 }
 
+function resolveCodeServerLaunch(): { command: string; args: string[]; label: string } {
+    const overrideBinary = process.env.CODE_SERVER_BIN;
+    if (overrideBinary) {
+        return { command: overrideBinary, args: [], label: overrideBinary };
+    }
+
+    if (process.platform === 'win32') {
+        try {
+            execSync('where code-server.cmd', { stdio: 'ignore' });
+            return { command: 'code-server.cmd', args: [], label: 'code-server' };
+        } catch {
+            return { command: 'npx.cmd', args: ['--yes', 'code-server'], label: 'npx code-server' };
+        }
+    }
+
+    return { command: 'code-server', args: [], label: 'code-server' };
+}
+
 /**
  * Checks if Docker is available in the current environment.
  */
@@ -312,8 +334,9 @@ async function performProvisioning(config: WorkspaceConfig): Promise<WorkspaceOp
     }
 
         // 5. Spawn code-server
-        const shellCommand = process.platform === 'win32' ? 'npx' : 'code-server';
-        const args = process.platform === 'win32' ? ['code-server'] : [];
+        const codeServerLaunch = resolveCodeServerLaunch();
+        const shellCommand = codeServerLaunch.command;
+        const args = codeServerLaunch.args;
         
         const baseArgs = [
             '--auth', 'none',
@@ -324,19 +347,29 @@ async function performProvisioning(config: WorkspaceConfig): Promise<WorkspaceOp
             workspacePath
         ];
 
-        const spawnEnv: NodeJS.ProcessEnv = { ...process.env, HOME: workspacePath };
+        const spawnEnv: NodeJS.ProcessEnv = {
+            ...process.env,
+            HOME: workspacePath,
+            npm_config_cache: runtimePaths.npmCachePath,
+            npm_config_update_notifier: 'false',
+        };
         delete spawnEnv.PORT;
         delete spawnEnv.SERVER_PORT;
 
         const child = spawn(shellCommand, [...args, ...baseArgs], {
             env: spawnEnv,
             cwd: workspacePath,
-            shell: process.platform === 'win32'
+            shell: false
         });
 
-        log(`Spawning VS Code Orchestrator (PID: ${child.pid})...`);
+        log(`Spawning VS Code Orchestrator via ${codeServerLaunch.label} (PID: ${child.pid})...`);
+        let childExited = false;
+        let childFailureReason: string | null = null;
 
-        child.on('error', (err) => log(`[FATAL] IDE binary failure: ${err.message}`));
+        child.on('error', (err) => {
+            childFailureReason = `IDE_BINARY_FAILURE: ${err.message}`;
+            log(`[FATAL] IDE binary failure: ${err.message}`);
+        });
         child.stdout.on('data', (data) => {
             const out = data.toString().trim();
             if (out.includes('listening on')) log(`[IDX:UP] ${out}`);
@@ -349,6 +382,10 @@ async function performProvisioning(config: WorkspaceConfig): Promise<WorkspaceOp
         });
 
         child.on('close', (code, signal) => {
+            childExited = true;
+            if (code !== 0 || signal) {
+                childFailureReason = childFailureReason ?? `IDE_PROCESS_EXIT_${code ?? 'unknown'}${signal ? `_${signal}` : ''}`;
+            }
             log(`[IDE:EXIT] IDE process died with code ${code} (Signal: ${signal})`);
             nativeProcesses.delete(config.id);
         });
@@ -359,6 +396,17 @@ async function performProvisioning(config: WorkspaceConfig): Promise<WorkspaceOp
         // 7. Handshake Loop
         let attempts = 0;
         while (attempts < 60) {
+            if (childExited) {
+                const rawFailureMessage = childFailureReason ?? 'IDE_PROCESS_EXITED_BEFORE_HANDSHAKE';
+                const failureMessage = shellCommand === 'npx'
+                    ? `${rawFailureMessage}. code-server could not be bootstrapped via npx. Install code-server globally or set CODE_SERVER_BIN.`
+                    : rawFailureMessage;
+                log(`[FATAL] IDE bootstrap aborted before handshake: ${failureMessage}`);
+                const errResult = { success: false, error: failureMessage };
+                provisioningBus.emit(`error:${config.id}`, errResult);
+                return errResult;
+            }
+
             try {
                 const res = await fetch(`http://127.0.0.1:${port}`);
                 if (res.ok) {

lib/env-config.ts

@@ -1,3 +1,11 @@
+import path from "path";
+
+function getDefaultWorkspaceRoot(): string {
+    return process.platform === "win32"
+        ? path.join(process.cwd(), "workspaces")
+        : "/home/node/w";
+}
+
 /**
  * CodeVerse Environment Configuration & Requirements Manifest.
  * Centralizing all system variables for production-grade reliability.
@@ -6,7 +14,7 @@ export const ENV_CONFIG = {
     // 1. Storage & Persistence
     HF_TOKEN: process.env.HF_TOKEN || process.env.hfToken || process.env.HF_SPACE || process.env.HuggingFaceToken,
     HF_DATASET_ID: process.env.HF_DATASET_ID || process.env.hfDataset || process.env.HF_DATASET,
-    WORKSPACE_ROOT: process.env.WORKSPACE_ROOT || '/home/node/w',
+    WORKSPACE_ROOT: process.env.WORKSPACE_ROOT || getDefaultWorkspaceRoot(),
 
     // 2. Build Acceleration
     CACHIX_CACHE_NAME: process.env.CACHIX_CACHE_NAME || 'code-nix',
@@ -19,8 +27,8 @@ export const ENV_CONFIG = {
     IS_SBC: !!process.env.SPACE_ID,
 
     // 4. Database & Auth
-    AUTH_SECRET: process.env.AUTH_SECRET || process.env.authSecret,
-    TURSO_URL: process.env.TURSO_URL || process.env.turso_url || process.env.database_url || process.env.TURSO_DATABASE_URL || process.env.DB_URL || process.env.turso_database_url,
+    AUTH_SECRET: process.env.AUTH_SECRET || process.env.NEXTAUTH_SECRET || process.env.authSecret,
+    TURSO_URL: process.env.TURSO_URL || process.env.turso_url || process.env.DATABASE_URL || process.env.database_url || process.env.TURSO_DATABASE_URL || process.env.DB_URL || process.env.turso_database_url,
     TURSO_AUTH_TOKEN: process.env.TURSO_AUTH_TOKEN || process.env.turso_auth_token || process.env.DB_TOKEN,
     TMPDIR: '/tmp',
     HF_HOME: '/tmp/.cache/huggingface',
@@ -31,11 +39,15 @@ export const ENV_CONFIG = {
  */
 export function validateEnvironment() {
     const missing: string[] = [];
-    if (!ENV_CONFIG.HF_TOKEN) missing.push('HF_TOKEN (Missing Persistence Link)');
-    if (!ENV_CONFIG.HF_DATASET_ID) missing.push('HF_DATASET_ID (Missing Data Segment)');
     if (!ENV_CONFIG.AUTH_SECRET) missing.push('AUTH_SECRET (Security Risk)');
     if (!ENV_CONFIG.TURSO_URL) missing.push('TURSO_URL (Database Missing)');
 
+    // HF persistence is required in deployed Spaces, not for local production testing.
+    if (ENV_CONFIG.SPACE_ID) {
+        if (!ENV_CONFIG.HF_TOKEN) missing.push('HF_TOKEN (Missing Persistence Link)');
+        if (!ENV_CONFIG.HF_DATASET_ID) missing.push('HF_DATASET_ID (Missing Data Segment)');
+    }
+
     // Strategic Dataset Validation
     if (ENV_CONFIG.HF_DATASET_ID && !ENV_CONFIG.HF_DATASET_ID.includes('/')) {
         return { valid: false, missing: ['HF_DATASET_ID_FORMAT_ERROR: Must be "username/dataset"'] };

lib/hf/storage.ts

@@ -1,6 +1,7 @@
 import { spawn } from 'child_process';
 import path from 'path';
 import fs from 'fs';
+import { ENV_CONFIG } from '../env-config';
 
 /**
  * Hugging Face Storage Utility for 2026 CodeVerse Persistence.
@@ -9,7 +10,11 @@ export class HFStorage {
     private static readonly HF_TOKEN = process.env.HF_TOKEN;
     private static readonly HF_DATASET_ID = process.env.HF_DATASET_ID;
     private static readonly PROFILE_PATH = path.join(process.env.HOME || '/home/node', '.nix-profile');
-    private static readonly WORKSPACE_ROOT = process.env.WORKSPACE_ROOT || '/home/node/w';
+    private static readonly WORKSPACE_ROOT = ENV_CONFIG.WORKSPACE_ROOT;
+
+    private static get isPersistenceRuntimeEnabled(): boolean {
+        return Boolean(ENV_CONFIG.SPACE_ID && this.HF_TOKEN && this.HF_DATASET_ID && process.platform !== 'win32');
+    }
 
     /**
      * Internal helper for asynchronous execution with logging.
@@ -40,6 +45,7 @@ export class HFStorage {
                 if (code === 0) resolve();
                 else reject(new Error(`Command failed with code ${code}: ${command}`));
             });
+            child.on('error', (error) => reject(error));
         });
     }
 
@@ -47,7 +53,7 @@ export class HFStorage {
      * Synchronizes the environment FROM the Hugging Face Dataset (Pull).
      */
     static async syncFromDataset(onLog?: (msg: string) => void): Promise<void> {
-        if (!this.HF_TOKEN || !this.HF_DATASET_ID) {
+        if (!this.isPersistenceRuntimeEnabled) {
             onLog?.(`[HF:STORAGE] Persistence layer inactive. Missing credentials.`);
             return;
         }
@@ -80,7 +86,7 @@ export class HFStorage {
      * Synchronizes the environment TO the Hugging Face Dataset (Push).
      */
     static async syncToDataset(onLog?: (msg: string) => void): Promise<void> {
-        if (!this.HF_TOKEN || !this.HF_DATASET_ID) return;
+        if (!this.isPersistenceRuntimeEnabled) return;
 
         try {
             onLog?.(`[HF:STORAGE] Saving persistent profile to '${this.HF_DATASET_ID}'...`);
@@ -107,7 +113,7 @@ export class HFStorage {
      */
     private static autoSaveStarted = false;
     static startAutoSave(intervalMs: number = 300000) {
-        if (this.autoSaveStarted) return;
+        if (this.autoSaveStarted || !this.isPersistenceRuntimeEnabled) return;
         this.autoSaveStarted = true;
         
         console.log(`[HF:STORAGE] Persistence heartbeat initialized (Interval: ${intervalMs}ms)`);

lib/idx/idx-engine.ts

@@ -16,6 +16,17 @@ export interface IdxConfig {
  * Refactored for 2026 Asynchronous Execution to prevent Event Loop blocking.
  */
 export class IdxEngine {
+  private static async hasCommand(command: string): Promise<boolean> {
+    const probeCommand = process.platform === 'win32' ? 'where' : 'command';
+    const probeArgs = process.platform === 'win32' ? [command] : ['-v', command];
+
+    return await new Promise<boolean>((resolve) => {
+      const child = spawn(probeCommand, probeArgs, { shell: process.platform !== 'win32' });
+      child.on('close', (code) => resolve(code === 0));
+      child.on('error', () => resolve(false));
+    });
+  }
+
   /**
    * Returns a robust baseline configuration for workspaces without a dev.nix.
    */
@@ -23,7 +34,7 @@ export class IdxEngine {
     return {
       packages: ['pkgs.nodejs', 'pkgs.go', 'pkgs.python3', 'pkgs.docker', 'pkgs.python3Packages.huggingface-hub'],
       onCreate: 'npm install',
-      onStart: 'sleep 5 && npm run dev'
+      onStart: process.platform === 'win32' ? 'Start-Sleep -Seconds 5; npm run dev' : 'sleep 5 && npm run dev'
     };
   }
 
@@ -68,25 +79,15 @@ export class IdxEngine {
     const log = (msg: string) => { if (onLog) onLog(`[IDX:NIX] ${msg}`); };
     log(`Syncing system packages: ${config.packages.join(', ')}...`);
 
+    const hasNix = await this.hasCommand('nix');
+    if (!hasNix) {
+      log(`Nix is unavailable on this host. Skipping declarative package sync.`);
+      return;
+    }
+
     // CACHIX ACCELERATION: Robust check for binary existence to prevent ENOENT crash
     const cachixName = process.env.CACHIX_CACHE_NAME || 'code-nix';
-    let hasCachix = false;
-    
-    try {
-        await new Promise<void>((resolve) => {
-            const check = spawn('command', ['-v', 'cachix'], { shell: true });
-            check.on('close', (code) => {
-                hasCachix = (code === 0);
-                resolve();
-            });
-            check.on('error', () => {
-                hasCachix = false;
-                resolve();
-            });
-        });
-    } catch {
-        hasCachix = false;
-    }
+    const hasCachix = await this.hasCommand('cachix');
 
     if (hasCachix) {
       const cachixToken = process.env.CACHIX_AUTH_TOKEN;
@@ -170,6 +171,7 @@ export class IdxEngine {
 
         child.stdout.on('data', (data) => log(data.toString().trim()));
         child.stderr.on('data', (data) => log(`[INFO] ${data.toString().trim()}`));
+        child.on('error', (error) => reject(error));
         
         child.on('close', (code) => {
             if (code === 0) {
@@ -200,13 +202,20 @@ export class IdxEngine {
       delete spawnEnv.PORT;
       delete spawnEnv.SERVER_PORT;
 
-      const child = spawn('/bin/bash', ['-c', script], {
+      const shellCommand = process.platform === 'win32' ? 'powershell.exe' : '/bin/bash';
+      const shellArgs = process.platform === 'win32' ? ['-NoProfile', '-Command', script] : ['-c', script];
+
+      const child = spawn(shellCommand, shellArgs, {
         cwd: workspacePath,
         env: spawnEnv
       });
 
       child.stdout.on('data', (data) => log(data.toString().trim()));
       child.stderr.on('data', (data) => log(`[WARN] ${data.toString().trim()}`));
+      child.on('error', (error) => {
+        log(`[ERROR] ${error.message}`);
+        reject(error);
+      });
       
       child.on('close', (code) => {
         if (code === 0) {

package-lock.json

@@ -16,7 +16,7 @@
         "@libsql/client": "^0.17.2",
         "@modelcontextprotocol/sdk": "^1.29.0",
         "@monaco-editor/react": "^4.7.0",
-        "@radix-ui/react-dialog": "^1.1.15",
+        "@radix-ui/react-dialog": "1.1.15",
         "@radix-ui/react-dropdown-menu": "^2.1.16",
         "@radix-ui/react-progress": "^1.1.8",
         "@radix-ui/react-scroll-area": "^1.2.10",
@@ -27,11 +27,13 @@
         "@types/dockerode": "^4.0.1",
         "@xterm/addon-fit": "^0.11.0",
         "@xterm/xterm": "^6.0.0",
-        "ai": "^6.0.146",
+        "ai": "6.0.146",
         "clsx": "^2.1.1",
         "cmdk": "^1.1.1",
+        "cross-env": "^10.1.0",
         "date-fns": "^4.1.0",
         "dockerode": "^4.0.10",
+        "dotenv": "^17.2.3",
         "framer-motion": "^12.38.0",
         "http-proxy": "^1.18.1",
         "lib0": "^0.2.117",
@@ -59,7 +61,7 @@
         "ws": "^8.19.0",
         "y-protocols": "^1.0.7",
         "yjs": "^13.6.29",
-        "zod": "^4.3.6",
+        "zod": "4.3.6",
         "zustand": "^5.0.12"
       },
       "devDependencies": {
@@ -950,6 +952,12 @@
         "tslib": "^2.4.0"
       }
     },
+    "node_modules/@epic-web/invariant": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@epic-web/invariant/-/invariant-1.0.0.tgz",
+      "integrity": "sha512-lrTPqgvfFQtR/eY/qkIzp98OGdNJu0m5ji3q/nJI8v3SXkRKEnWiOxMmbvcSoAIzv/cGiuvRy57k4suKQSAdwA==",
+      "license": "MIT"
+    },
     "node_modules/@eslint-community/eslint-utils": {
       "version": "4.9.1",
       "resolved": "https://registry.npmjs.org/@eslint-community/eslint-utils/-/eslint-utils-4.9.1.tgz",
@@ -5560,6 +5568,23 @@
         "node": ">=10.0.0"
       }
     },
+    "node_modules/cross-env": {
+      "version": "10.1.0",
+      "resolved": "https://registry.npmjs.org/cross-env/-/cross-env-10.1.0.tgz",
+      "integrity": "sha512-GsYosgnACZTADcmEyJctkJIoqAhHjttw7RsFrVoJNXbsWWqaq6Ym+7kZjq6mS45O0jij6vtiReppKQEtqWy6Dw==",
+      "license": "MIT",
+      "dependencies": {
+        "@epic-web/invariant": "^1.0.0",
+        "cross-spawn": "^7.0.6"
+      },
+      "bin": {
+        "cross-env": "dist/bin/cross-env.js",
+        "cross-env-shell": "dist/bin/cross-env-shell.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/cross-fetch": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-4.1.0.tgz",
@@ -6032,6 +6057,18 @@
         "@types/trusted-types": "^2.0.7"
       }
     },
+    "node_modules/dotenv": {
+      "version": "17.4.1",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-17.4.1.tgz",
+      "integrity": "sha512-k8DaKGP6r1G30Lx8V4+pCsLzKr8vLmV2paqEj1Y55GdAgJuIqpRp5FfajGF8KtwMxCz9qJc6wUIJnm053d/WCw==",
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
     "node_modules/dunder-proto": {
       "version": "1.0.1",
       "resolved": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",

package.json

@@ -6,7 +6,7 @@
     "dev": "next dev",
     "prebuild": "npx rimraf dist",
     "build": "next build && tsc server.ts --esModuleInterop --skipLibCheck --target es2018 --module commonjs --moduleResolution node --downlevelIteration --outDir ./dist",
-    "start": "node dist/server.js",
+    "start": "cross-env NODE_ENV=production node dist/server.js",
     "lint": "eslint . --ignore-pattern dist/ --ignore-pattern .next/"
   },
   "dependencies": {
@@ -31,9 +31,11 @@
     "@xterm/xterm": "^6.0.0",
     "ai": "6.0.146",
     "clsx": "^2.1.1",
+    "cross-env": "^10.1.0",
     "cmdk": "^1.1.1",
     "date-fns": "^4.1.0",
     "dockerode": "^4.0.10",
+    "dotenv": "^17.2.3",
     "framer-motion": "^12.38.0",
     "http-proxy": "^1.18.1",
     "lib0": "^0.2.117",

server.ts

@@ -1,3 +1,5 @@
+import "dotenv/config";
+
 /**
  * 🛰️ GLOBAL STABILIZATION (April 2026): Catch unhandled errors that cause HF Space restarts.
  */
@@ -289,7 +291,9 @@ server.listen(PORT, HOST, () => {
             
             // Reconnect and Warmup
             reconnectRunningWorkspaces().catch(() => {});
-            prewarmWorkspace({ id: 'baseline-warmup', userId: 'system', projectName: 'CodeVerse-Internal' }).catch(() => {});
+            if (process.env.ENABLE_BASELINE_PREWARM === 'true') {
+                prewarmWorkspace({ id: 'baseline-warmup', userId: 'system', projectName: 'CodeVerse-Internal' }).catch(() => {});
+            }
             
             // Crons and Persistence
             HFStorage.startAutoSave(INFRA_CONFIG.PERSISTENCE_INTERVAL_MS * 5); 

workspaces/dev-user-id/local-repro

@@ -0,0 +1 @@
+Subproject commit 7fd1a60b01f91b314f59955a4e4d4e80d8edf11d