feat: add Node.js version management and improve error handling

- Introduced a .nvmrc file to specify the Node.js version (22) for the project, ensuring consistent development environments.
- Enhanced error handling in the startServer function to provide clearer messages when the Node.js executable cannot be found, improving debugging experience.
- Updated package.json files across various modules to enforce Node.js version compatibility and ensure consistent dependency versions.

These changes aim to streamline development processes and enhance the application's reliability by enforcing version control and improving error reporting.

apps/server/src/lib/auth.ts

@@ -76,7 +76,10 @@ async function saveSessions(): Promise<void> {
   try {
     await secureFs.mkdir(path.dirname(SESSIONS_FILE), { recursive: true });
     const sessions = Array.from(validSessions.entries());
-    await secureFs.writeFile(SESSIONS_FILE, JSON.stringify(sessions), 'utf-8');
+    await secureFs.writeFile(SESSIONS_FILE, JSON.stringify(sessions), {
+      encoding: 'utf-8',
+      mode: 0o600,
+    });
   } catch (error) {
     console.error('[Auth] Failed to save sessions:', error);
   }
@@ -113,7 +116,7 @@ function ensureApiKey(): string {
   const newKey = crypto.randomUUID();
   try {
     secureFs.mkdirSync(path.dirname(API_KEY_FILE), { recursive: true });
-    secureFs.writeFileSync(API_KEY_FILE, newKey, { encoding: 'utf-8' });
+    secureFs.writeFileSync(API_KEY_FILE, newKey, { encoding: 'utf-8', mode: 0o600 });
     console.log('[Auth] Generated new API key');
   } catch (error) {
     console.error('[Auth] Failed to save API key:', error);

apps/server/src/providers/claude-provider.ts

@@ -15,6 +15,24 @@ import type {
   ModelDefinition,
 } from './types.js';
 
+// Automaker-specific environment variables that should not pollute agent processes
+// These are internal to Automaker and would interfere with user projects
+// (e.g., PORT=3008 would cause Next.js/Vite to use the wrong port)
+const AUTOMAKER_ENV_VARS = ['PORT', 'DATA_DIR', 'AUTOMAKER_API_KEY', 'NODE_PATH'];
+
+/**
+ * Build a clean environment for the SDK, excluding Automaker-specific variables
+ */
+function buildCleanEnv(): Record<string, string | undefined> {
+  const cleanEnv: Record<string, string | undefined> = {};
+  for (const [key, value] of Object.entries(process.env)) {
+    if (!AUTOMAKER_ENV_VARS.includes(key)) {
+      cleanEnv[key] = value;
+    }
+  }
+  return cleanEnv;
+}
+
 export class ClaudeProvider extends BaseProvider {
   getName(): string {
     return 'claude';
@@ -57,6 +75,9 @@ export class ClaudeProvider extends BaseProvider {
       systemPrompt,
       maxTurns,
       cwd,
+      // Pass clean environment to SDK, excluding Automaker-specific variables
+      // This prevents PORT, DATA_DIR, etc. from polluting agent-spawned processes
+      env: buildCleanEnv(),
       // Only restrict tools if explicitly set OR (no MCP / unrestricted disabled)
       ...(allowedTools && shouldRestrictTools && { allowedTools }),
       ...(!allowedTools && shouldRestrictTools && { allowedTools: defaultTools }),

apps/server/src/services/terminal-service.ts

@@ -257,8 +257,18 @@ export class TerminalService extends EventEmitter {
 
     // Build environment with some useful defaults
     // These settings ensure consistent terminal behavior across platforms
+    // First, create a clean copy of process.env excluding Automaker-specific variables
+    // that could pollute user shells (e.g., PORT would affect Next.js/other dev servers)
+    const automakerEnvVars = ['PORT', 'DATA_DIR', 'AUTOMAKER_API_KEY', 'NODE_PATH'];
+    const cleanEnv: Record<string, string> = {};
+    for (const [key, value] of Object.entries(process.env)) {
+      if (value !== undefined && !automakerEnvVars.includes(key)) {
+        cleanEnv[key] = value;
+      }
+    }
+
     const env: Record<string, string> = {
-      ...process.env,
+      ...cleanEnv,
       TERM: 'xterm-256color',
       COLORTERM: 'truecolor',
       TERM_PROGRAM: 'automaker-terminal',