@stravica-ai/digital-operator-pa 0.1.0

package/dist/engineering-pa-workspace/src/server.mjs

@@ -0,0 +1,516 @@
+#!/usr/bin/env node
+
+/**
+ * Dave Workspace -- persistent dev server.
+ *
+ * Serves the dave repo as static HTML pages plus a JSON API.
+ * Auto-shuts down after 2 hours of idle time.
+ *
+ * Live-reload / SSE was removed pending a workspace rebuild — see PR
+ * "Remove live-reload SSE mechanism (temporary — pending workspace rebuild)".
+ * Manual browser refresh (Cmd+R / Ctrl+R) is the current model.
+ *
+ * Usage:
+ *   node server.mjs                    Start on default port (4200)
+ *   node server.mjs --port 5555        Use specific port
+ *   node server.mjs --no-open          Don't auto-open browser
+ *   node server.mjs --timeout 60       Idle timeout in minutes (default: 120)
+ *   node server.mjs --no-timeout       Disable idle timeout
+ */
+
+import { createServer } from 'node:http';
+import { readFile, stat, readdir } from 'node:fs/promises';
+import { readFileSync, existsSync, realpathSync } from 'node:fs';
+import { execSync } from 'node:child_process';
+import { resolve, join, extname } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { handleApi } from './api.mjs';
+import { loadNav } from './nav.mjs';
+import { startPoller as startStatusMonPoller } from './status-mon/poller.mjs';
+
+const __dirname = fileURLToPath(new URL('.', import.meta.url));
+
+// In v2 the workspace package is installed inside the operator repo at
+// `node_modules/@stravica-ai/engineering-pa-workspace/`. The operator repo root
+// is wherever `.git` lives — discovered by walking up from process.cwd(), or
+// taken from DAVE_REPO_ROOT / PA_REPO_ROOT for tests and ephemeral harnesses.
+// The package's own assets live at `../app/` (one level up from src/).
+function findRepoRootSync(start) {
+  let d = start;
+  let prev;
+  while (d && d !== prev) {
+    try {
+      const s = existsSync(join(d, '.git'));
+      if (s) return d;
+    } catch { /* ignore */ }
+    prev = d;
+    d = resolve(d, '..');
+  }
+  return null;
+}
+
+const envRepoRoot = process.env.DAVE_REPO_ROOT || process.env.PA_REPO_ROOT;
+const REPO_ROOT = envRepoRoot
+  ? resolve(envRepoRoot)
+  : (findRepoRootSync(process.cwd()) || process.cwd());
+const APP_DIR = resolve(__dirname, '..', 'app');
+
+// Silent by default. Set WS_DEBUG=1 to re-enable startup banner, file-change
+// notifications, extension-load messages, and shutdown traces.
+const DEBUG = process.env.WS_DEBUG === '1';
+const log = DEBUG ? console.log.bind(console) : function () {};
+const warn = DEBUG ? console.warn.bind(console) : function () {};
+
+// --- Extension dir ---
+// Convention: operator/extensions/workspace/ overlays core app pages and
+// can register additional API routes. No config required — presence of the
+// directory activates the mechanism.
+const EXT_DIR_PATH = join(REPO_ROOT, 'operator', 'extensions', 'workspace');
+const EXT_DIR = existsSync(EXT_DIR_PATH) ? EXT_DIR_PATH : null;
+
+// --- Args ---
+const args = process.argv.slice(2);
+let port = 4200;
+let autoOpen = true;
+let timeoutMinutes = 120;
+let noTimeout = false;
+
+// Read configured port from preferences if available
+try {
+  const prefsPath = join(REPO_ROOT, 'operator', 'config', 'preferences.json');
+  const prefs = JSON.parse(readFileSync(prefsPath, 'utf-8'));
+  if (prefs.workspacePort) port = prefs.workspacePort;
+} catch { /* no prefs yet — use default */ }
+
+// CLI flags override preferences
+for (let i = 0; i < args.length; i++) {
+  switch (args[i]) {
+    case '--port': port = parseInt(args[++i], 10); break;
+    case '--no-open': autoOpen = false; break;
+    case '--timeout': timeoutMinutes = parseInt(args[++i], 10); break;
+    case '--no-timeout': noTimeout = true; break;
+  }
+}
+
+const IDLE_TIMEOUT_MS = timeoutMinutes * 60 * 1000;
+
+// Side-effect gate. This file is imported by tests to assert exports (Option
+// D). When it is imported (not run), we must NOT attach status-mon or bind a
+// port. Everything side-effectful below is guarded on this flag.
+//
+// Under pnpm's hoisted layout, this file's real path lives under
+// `node_modules/.pnpm/...`, while `process.argv[1]` keeps the symlinked path
+// at `node_modules/@stravica-ai/engineering-pa-workspace/src/server.mjs`. A naive
+// equality check would always be false. Realpath both sides so the comparison
+// reflects the underlying file identity.
+const isMainModule = (() => {
+  if (!process.argv[1]) return false;
+  try {
+    return fileURLToPath(import.meta.url) === realpathSync(resolve(process.argv[1]));
+  } catch {
+    return false;
+  }
+})();
+
+// --- Extension API routes ---
+// Populated by loadExtensions() before the server starts.
+// Extension routes shadow core routes when method + pathname match.
+const extRoutes = [];
+
+// --- MIME types ---
+const MIME = {
+  '.html': 'text/html',
+  '.css': 'text/css',
+  '.js': 'application/javascript',
+  '.mjs': 'application/javascript',
+  '.json': 'application/json',
+  '.png': 'image/png',
+  '.jpg': 'image/jpeg',
+  '.jpeg': 'image/jpeg',
+  '.svg': 'image/svg+xml',
+  '.ico': 'image/x-icon',
+  '.md': 'text/html',
+  '.txt': 'text/plain',
+  '.woff': 'font/woff',
+  '.woff2': 'font/woff2',
+};
+
+// --- Page URL resolution ---
+// Workspace pages are addressable by two URL shapes:
+//   - the bare top-level form:        /<page>.html
+//   - the shell-prefixed form:        /core/tools/workspace/app/<page>.html
+//
+// The hash-routed shell at / loads inner pages via the prefixed form; older
+// direct links use the bare form. Both must honour the operator overlay the
+// same way — pre-1.0 a regex pinned the overlay block to the bare form only
+// and the prefixed form silently went to the bundled APP_DIR, defeating the
+// overlay for anyone who navigated via the shell.
+//
+// Returns the basename (e.g. 'project-detail.html') when pathname targets an
+// .html app page in either form; returns null for assets, deep paths,
+// dotfile probes, or non-html URLs. Exported for unit testing.
+export const WORKSPACE_PREFIX = '/core/tools/workspace/app/';
+export function appPageBasename(pathname) {
+  if (!pathname || pathname.startsWith('/.')) return null;
+  const stripped = pathname.startsWith(WORKSPACE_PREFIX)
+    ? '/' + pathname.slice(WORKSPACE_PREFIX.length)
+    : pathname;
+  const m = stripped.match(/^\/([^/]+\.html)$/);
+  return m ? m[1] : null;
+}
+
+// --- Activity timer ---
+// The server auto-shuts after IDLE_TIMEOUT_MS from startup unless
+// --no-timeout is set (the daemon path always passes --no-timeout). The
+// previous implementation reset the timer from the SSE file-watcher; with
+// live-reload gone, the timer is armed once at listen() and fires on the
+// wall clock — sufficient for the daemon (never fires) and for interactive
+// sessions (a 2-hour cap on a lingering foreground process).
+let idleTimer;
+function resetIdle() {
+  if (noTimeout) return;
+  clearTimeout(idleTimer);
+  idleTimer = setTimeout(() => {
+    log('[workspace] Idle for ' + timeoutMinutes + ' minutes. Shutting down.');
+    process.exit(0);
+  }, IDLE_TIMEOUT_MS);
+}
+
+// --- Markdown HTML template ---
+//
+// Auto-wraps a raw .md request into a styled HTML page. The chrome here
+// duplicates viewer.html's surface — both used to embed their own :root
+// palette block, which broke the theme toggle on the content-calendar
+// preview iframe (operator-reported, 2026-06-27). The fix matches what
+// viewer.html does: link the shared theme.css, defer-load theme.js, pre-paint
+// init reads localStorage 'dave.theme', body in humanist sans for prose, and
+// .md-body strong uses the new --emphasis token (matching .content strong).
+// Exported so unit tests can assert on the output without spinning up the
+// HTTP server.
+export function markdownPage(rawContent, filePath) {
+  const escaped = rawContent
+    .replace(/\\/g, '\\\\')
+    .replace(/`/g, '\\`')
+    .replace(/\$/g, '\\$');
+  const title = filePath.split('/').pop().replace(/\.md$/, '');
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1.0">
+<title>${title}</title>
+<script>(function(){try{var t=localStorage.getItem('dave.theme');document.documentElement.dataset.theme=(t==='light'||t==='dark')?t:'dark';}catch(_){document.documentElement.dataset.theme='dark';}})();</script>
+<link rel="stylesheet" href="/core/tools/workspace/app/assets/theme.css">
+<script src="/core/tools/workspace/app/assets/theme.js" defer></script>
+<style>
+  * { margin: 0; padding: 0; box-sizing: border-box; }
+  body {
+    font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Inter', 'Helvetica Neue', Helvetica, Arial, sans-serif;
+    background: var(--bg); color: var(--text); padding: 2rem; line-height: 1.7;
+    font-size: 16px;
+  }
+  .md-body { max-width: 760px; margin: 0 auto; }
+  .md-body h1 { color: var(--purple); font-size: 1.8rem; margin: 1.5rem 0 0.75rem; border-bottom: 1px solid var(--border); padding-bottom: 0.4rem; line-height: 1.25; }
+  .md-body h2 { color: var(--accent); font-size: 1.4rem; margin: 1.3rem 0 0.6rem; line-height: 1.3; }
+  .md-body h3 { color: var(--cyan); font-size: 1.15rem; margin: 1.1rem 0 0.5rem; line-height: 1.35; }
+  .md-body h4 { color: var(--text-bright); font-size: 1rem; margin: 1rem 0 0.4rem; line-height: 1.4; }
+  .md-body p { margin: 0.6rem 0; }
+  .md-body a { color: var(--accent); text-decoration: none; }
+  .md-body a:hover { text-decoration: underline; }
+  .md-body strong { color: var(--emphasis); font-weight: 700; }
+  .md-body em { color: var(--text); font-style: italic; }
+  .md-body code { background: var(--bg-surface); color: var(--orange); padding: 0.15rem 0.35rem; border-radius: 3px; font-size: 0.9em; font-family: 'SF Mono', 'JetBrains Mono', 'Fira Code', 'Cascadia Code', monospace; }
+  .md-body pre { background: var(--bg-surface); border: 1px solid var(--border); border-radius: 6px; padding: 1rem; overflow-x: auto; margin: 0.8rem 0; }
+  .md-body pre code { background: none; color: var(--text); padding: 0; font-size: 0.85rem; font-family: 'SF Mono', 'JetBrains Mono', 'Fira Code', 'Cascadia Code', monospace; }
+  .md-body ul, .md-body ol { margin: 0.5rem 0 0.5rem 1.5rem; }
+  .md-body li { margin: 0.25rem 0; }
+  .md-body li::marker { color: var(--text-dim); }
+  .md-body blockquote { border-left: 3px solid var(--accent); margin: 0.8rem 0; padding: 0.4rem 0 0.4rem 1rem; color: var(--text-dim); background: var(--bg-surface); border-radius: 0 4px 4px 0; }
+  .md-body hr { border: none; border-top: 1px solid var(--border); margin: 1.5rem 0; }
+  .md-body table { border-collapse: collapse; margin: 0.8rem 0; width: 100%; }
+  .md-body th, .md-body td { border: 1px solid var(--border); padding: 0.4rem 0.7rem; text-align: left; font-size: 0.85rem; }
+  .md-body th { background: var(--bg-highlight); color: var(--text-bright); }
+  .md-body td { background: var(--bg-surface); }
+</style>
+</head>
+<body>
+<div class="md-body" id="content"></div>
+<script>
+(function() {
+  var raw = \`${escaped}\`;
+  function parseMd(src) {
+    var codeBlocks = [];
+    src = src.replace(/\\\`\\\`\\\`(\\w*)\\n([\\s\\S]*?)\\\`\\\`\\\`/g, function(_, lang, code) {
+      codeBlocks.push('<pre><code>' + esc(code.replace(/\\n$/, '')) + '</code></pre>');
+      return '%%CB_' + (codeBlocks.length - 1) + '%%';
+    });
+    var lines = src.split('\\n');
+    var html = '';
+    var inList = false, listType = '', inBq = false, bqLines = [];
+    function flushBq() { if (inBq) { html += '<blockquote>' + bqLines.map(function(l) { return '<p>' + inline(l) + '</p>'; }).join('') + '</blockquote>'; bqLines = []; inBq = false; } }
+    function closeList() { if (inList) { html += '</' + listType + '>'; inList = false; listType = ''; } }
+    for (var i = 0; i < lines.length; i++) {
+      var line = lines[i];
+      var cbm = line.match(/^%%CB_(\\d+)%%$/);
+      if (cbm) { flushBq(); closeList(); html += codeBlocks[parseInt(cbm[1])]; continue; }
+      if (line.match(/^>\\s?/)) { closeList(); inBq = true; bqLines.push(line.replace(/^>\\s?/, '')); continue; } else { flushBq(); }
+      var hm = line.match(/^(#{1,6})\\s+(.+)$/);
+      if (hm) { closeList(); html += '<h' + hm[1].length + '>' + inline(hm[2]) + '</h' + hm[1].length + '>'; continue; }
+      if (line.match(/^(---+|\\*\\*\\*+|___+)\\s*$/)) { closeList(); html += '<hr>'; continue; }
+      var ulm = line.match(/^\\s*[-*+]\\s+(.+)$/);
+      if (ulm) { if (!inList || listType !== 'ul') { closeList(); html += '<ul>'; inList = true; listType = 'ul'; } html += '<li>' + inline(ulm[1]) + '</li>'; continue; }
+      var olm = line.match(/^\\s*\\d+\\.\\s+(.+)$/);
+      if (olm) { if (!inList || listType !== 'ol') { closeList(); html += '<ol>'; inList = true; listType = 'ol'; } html += '<li>' + inline(olm[1]) + '</li>'; continue; }
+      closeList();
+      if (line.trim() === '') continue;
+      if (line.includes('|') && line.trim().startsWith('|')) {
+        var tl = []; var j = i;
+        while (j < lines.length && lines[j].trim().startsWith('|')) { tl.push(lines[j]); j++; }
+        if (tl.length >= 2) { html += renderTable(tl); i = j - 1; continue; }
+      }
+      html += '<p>' + inline(line) + '</p>';
+    }
+    closeList(); flushBq();
+    return html;
+  }
+  function renderTable(rows) {
+    var p = function(r) { return r.replace(/^\\|/, '').replace(/\\|$/, '').split('|').map(function(c) { return c.trim(); }); };
+    var hdr = p(rows[0]); var h = '<table><thead><tr>';
+    hdr.forEach(function(c) { h += '<th>' + inline(c) + '</th>'; });
+    h += '</tr></thead><tbody>';
+    for (var r = 2; r < rows.length; r++) { var cells = p(rows[r]); h += '<tr>'; cells.forEach(function(c) { h += '<td>' + inline(c) + '</td>'; }); h += '</tr>'; }
+    h += '</tbody></table>'; return h;
+  }
+  function esc(s) { return s.replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;'); }
+  function inline(s) {
+    s = esc(s);
+    s = s.replace(/\\\`([^\\\`]+)\\\`/g, '<code>$1</code>');
+    s = s.replace(/\\*\\*\\*(.+?)\\*\\*\\*/g, '<strong><em>$1</em></strong>');
+    s = s.replace(/\\*\\*(.+?)\\*\\*/g, '<strong>$1</strong>');
+    s = s.replace(/__(.+?)__/g, '<strong>$1</strong>');
+    s = s.replace(/\\*(.+?)\\*/g, '<em>$1</em>');
+    s = s.replace(/_(.+?)_/g, '<em>$1</em>');
+    s = s.replace(/\\[([^\\]]+)\\]\\(([^)]+)\\)/g, '<a href="$2">$1</a>');
+    return s;
+  }
+  document.getElementById('content').innerHTML = parseMd(raw);
+})();
+</script>
+</body>
+</html>`;
+}
+
+// --- HTTP server ---
+const server = createServer(async (req, res) => {
+  const url = new URL(req.url, 'http://localhost:' + port);
+  const pathname = decodeURIComponent(url.pathname);
+
+  // API routes -- extension routes shadow core; handleApi handles the rest
+  if (pathname.startsWith('/__api/') || pathname.startsWith('/api/')) {
+    const extRoute = extRoutes.find(r => r.method === req.method && r.pathname === pathname);
+    if (extRoute) { extRoute.handler(req, res, url, REPO_ROOT); return; }
+
+    // GET /__api/nav -- merged core + extension nav manifest
+    if (req.method === 'GET' && pathname === '/__api/nav') {
+      try {
+        const items = loadNav({ appDir: APP_DIR, extDir: EXT_DIR, warn: warn });
+        const body = JSON.stringify({ items: items });
+        res.writeHead(200, {
+          'Content-Type': 'application/json',
+          'Content-Length': Buffer.byteLength(body),
+        });
+        res.end(body);
+      } catch (e) {
+        const body = JSON.stringify({ error: e.message, items: [] });
+        res.writeHead(500, {
+          'Content-Type': 'application/json',
+          'Content-Length': Buffer.byteLength(body),
+        });
+        res.end(body);
+      }
+      return;
+    }
+
+    const handled = handleApi(req, res, url, REPO_ROOT);
+    if (handled) return;
+  }
+
+  // Root serves the shell
+  if (pathname === '/' || pathname === '/index.html') {
+    try {
+      const indexPath = join(APP_DIR, 'index.html');
+      const html = await readFile(indexPath, 'utf-8');
+      res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+      res.end(html);
+    } catch {
+      res.writeHead(404);
+      res.end('Workspace index not found');
+    }
+    return;
+  }
+
+  // Top-level workspace assets served out of APP_DIR. Kept here rather than
+  // under a workspace-relative prefix so the page-level includes
+  // (e.g. <script src="/banner.js">) stay terse and version-independent.
+  if (pathname === '/banner.js') {
+    try {
+      const content = await readFile(join(APP_DIR, 'banner.js'));
+      res.writeHead(200, { 'Content-Type': 'application/javascript; charset=utf-8' });
+      res.end(content);
+    } catch {
+      res.writeHead(404);
+      res.end('Not found');
+    }
+    return;
+  }
+
+  // Workspace app pages: both /<page>.html and /core/tools/workspace/app/<page>.html
+  // check EXT_DIR first (operator overlay), then APP_DIR (core). The shell at /
+  // hash-routes inner pages via the prefixed form, so honouring overlays for that
+  // form too is what lets operator extensions actually shadow shell-loaded pages.
+  // Fall through to asset/repo-root serving when absent in both.
+  const pageBase = appPageBasename(pathname);
+  if (pageBase) {
+    const candidates = EXT_DIR
+      ? [join(EXT_DIR, pageBase), join(APP_DIR, pageBase)]
+      : [join(APP_DIR, pageBase)];
+    for (const candidate of candidates) {
+      try {
+        const html = await readFile(candidate, 'utf-8');
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(html);
+        return;
+      } catch { /* try next candidate */ }
+    }
+    // Not found in EXT_DIR or APP_DIR — fall through to asset/repo-root serving
+  }
+
+  // Workspace app assets live with the server code, not under REPO_ROOT.
+  // When DAVE_REPO_ROOT is overridden (E2E fixtures), absolute paths that
+  // point at the workspace script tree must still resolve against APP_DIR's
+  // parent so pages can load their CSS/JS regardless of the fixture root.
+  // Historical absolute-URL prefix preserved so existing operator pages that
+  // hard-code these paths keep working through the transition. The server
+  // strips the prefix and serves out of the package's bundled APP_DIR.
+  const filePath = pathname.startsWith(WORKSPACE_PREFIX)
+    ? join(APP_DIR, pathname.slice(WORKSPACE_PREFIX.length))
+    : join(REPO_ROOT, pathname);
+
+  // Security: no traversal outside repo, no .git or .env. Workspace app
+  // assets under APP_DIR are always allowed regardless of REPO_ROOT.
+  const allowedBase = pathname.startsWith(WORKSPACE_PREFIX) ? APP_DIR : REPO_ROOT;
+  if (!filePath.startsWith(allowedBase) || pathname.includes('/.git/') || pathname.includes('/.env')) {
+    res.writeHead(403);
+    res.end('Forbidden');
+    return;
+  }
+
+  try {
+    const fileStat = await stat(filePath);
+
+    if (fileStat.isDirectory()) {
+      const indexPath = join(filePath, 'index.html');
+      try {
+        const html = await readFile(indexPath, 'utf-8');
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(html);
+      } catch {
+        res.writeHead(404);
+        res.end('Not found');
+      }
+      return;
+    }
+
+    const content = await readFile(filePath);
+    const ext = extname(filePath);
+    const mime = MIME[ext] || 'application/octet-stream';
+
+    if (ext === '.md') {
+      const mdContent = content.toString('utf-8');
+      const html = markdownPage(mdContent, pathname);
+      res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+      res.end(html);
+    } else {
+      res.writeHead(200, { 'Content-Type': mime });
+      res.end(content);
+    }
+  } catch {
+    res.writeHead(404);
+    res.end('Not found');
+  }
+});
+
+// --- Extension loader ---
+// Imports operator/extensions/workspace/api.mjs (if present) and calls its
+// register(addRoute) export. Extensions can add routes or shadow core routes.
+// A shadowed route is logged at startup so operators know the override is live.
+async function loadExtensions() {
+  if (!EXT_DIR) return;
+  const extApiPath = join(EXT_DIR, 'api.mjs');
+  if (!existsSync(extApiPath)) return;
+  try {
+    const extApi = await import(extApiPath);
+    if (typeof extApi.register === 'function') {
+      extApi.register(function addRoute(method, pathname, handler) {
+        const shadows = extRoutes.some(r => r.method === method && r.pathname === pathname);
+        if (!shadows) {
+          // Check if it shadows a core route (informational only).
+          log('[workspace] Extension route registered: ' + method + ' ' + pathname);
+        }
+        extRoutes.push({ method: method, pathname: pathname, handler: handler });
+      });
+    }
+  } catch (e) {
+    warn('[workspace] Extension api.mjs failed to load: ' + e.message);
+  }
+}
+
+// --- Status-mon poller ---
+// Runs inside the workspace process because the server is the always-on
+// component on this host (launchd-supervised). A separate scheduled task would
+// duplicate supervision. Disabled when DAVE_REPO_ROOT is overridden (E2E
+// fixture runs), because tests drive the state file directly via fixtures.
+let statusMonHandle = null;
+if (isMainModule && !process.env.DAVE_REPO_ROOT && process.env.WS_STATUS_MON !== '0') {
+  try {
+    statusMonHandle = startStatusMonPoller({
+      repoRoot: REPO_ROOT,
+      onError: (err) => warn('[workspace] status-mon poll error: ' + err.message),
+    });
+    log('[workspace] status-mon poller started (60s cadence)');
+  } catch (err) {
+    warn('[workspace] status-mon poller failed to start: ' + err.message);
+  }
+}
+
+// --- Start ---
+// Only auto-start when this file is the process entry point. Tests import
+// server.mjs to assert exports; they must not spawn a listening server as a
+// side effect.
+if (isMainModule) (async function () {
+  await loadExtensions();
+
+  server.listen(port, () => {
+    const url = 'http://localhost:' + port;
+    log('[workspace] Dave Workspace running at ' + url);
+    log('[workspace] Serving from: ' + REPO_ROOT);
+    if (EXT_DIR) log('[workspace] Extensions: ' + EXT_DIR.replace(REPO_ROOT + '/', ''));
+    log('[workspace] Idle timeout: ' + (noTimeout ? 'disabled (persistent)' : timeoutMinutes + ' minutes'));
+
+    if (autoOpen) {
+      try { execSync('open "' + url + '"'); } catch { /* non-fatal */ }
+    }
+
+    resetIdle();
+  });
+}());
+
+function shutdown(signal) {
+  if (signal === 'SIGINT') console.log('\n[workspace] Shutting down.');
+  if (statusMonHandle) { try { statusMonHandle.stop(); } catch { /* ignore */ } }
+  server.close();
+  process.exit(0);
+}
+
+process.on('SIGINT', () => shutdown('SIGINT'));
+process.on('SIGTERM', () => shutdown('SIGTERM'));