harden: extend webpack fallbacks and add server-only guards

next.config.js

@@ -15,6 +15,9 @@ const nextConfig = {
         ...config.resolve.fallback,
         fs: false,
         path: false,
+        child_process: false,
+        net: false,
+        os: false,
       };
     }
     return config;

package.json

@@ -69,6 +69,7 @@
     "react-resizable-panels": "^4.3.2",
     "react-window": "^2.2.5",
     "remark-gfm": "^4.0.0",
+    "server-only": "^0.0.1",
     "tailwind-merge": "^3.5.0",
     "vaul": "^1.1.2",
     "zod": "^3.23.8",

src/lib/agent-memory.ts

@@ -7,9 +7,9 @@
  */
 
 // Lazy-load persistence to avoid bundling Node.js 'fs' module in client-side code.
-// persistence.ts uses 'fs' which is not available in the browser.
-// This is only used in server-side code paths (typeof window === 'undefined').
-function getServerPersistence(): { persistence: import('./persistence').PersistenceManager; COLLECTIONS: typeof import('./persistence').COLLECTIONS } | null {
+// Only used in server-side code paths (typeof window === 'undefined').
+// eslint-disable-next-line @typescript-eslint/no-explicit-any
+function getServerPersistence(): { persistence: any; COLLECTIONS: any } | null {
   if (typeof window !== 'undefined') return null
   try {
     // eslint-disable-next-line @typescript-eslint/no-require-imports

src/lib/agent-precision-system.ts

@@ -12,6 +12,7 @@
  * Last Updated: January 14, 2026
  */
 
+import 'server-only'
 import type { SpecializedAgent } from './specialized-agents'
 import { mlLearningSystem } from './ml-learning-system'
 import { ragSystem } from './rag-system'

src/lib/knowledge-graph.ts

@@ -12,6 +12,7 @@
  * Last Updated: January 14, 2026
  */
 
+import 'server-only'
 import { persistence, COLLECTIONS } from './persistence'
 
 // ============================================================================

src/lib/ml-learning-system.ts

@@ -12,6 +12,7 @@
  * Last Updated: January 14, 2026
  */
 
+import 'server-only'
 import type { SpecializedAgent } from './specialized-agents'
 import { ragSystem } from './rag-system'
 import { knowledgeGraph } from './knowledge-graph'

src/lib/rag-system.ts

@@ -12,6 +12,7 @@
  * Last Updated: January 14, 2026
  */
 
+import 'server-only'
 import type { SpecializedAgent } from './specialized-agents'
 import { persistence, COLLECTIONS } from './persistence'
 

src/lib/tool-executor.ts

@@ -11,6 +11,7 @@
  * - Automatic retry with exponential backoff for transient failures
  */
 
+import 'server-only'
 import { spawn } from 'child_process'
 import * as fs from 'fs'
 import * as path from 'path'