bonecode 1.0.0 → 1.1.0

package/bone/output/session/src/flows.ts

@@ -1,168 +1,168 @@
-// Generated by BoneScript compiler. DO NOT EDIT.
-// Saga runtime — implements flow declarations with backward compensation.
-//
-// On step failure, executes compensations for ALL completed steps in reverse order.
-
-import { logger } from "./logger";
-import { counter } from "./metrics";
-
-export interface FlowStep {
-  name: string;
-  action: (ctx: any) => Promise<void>;
-  compensation: ((ctx: any) => Promise<void>) | null;
-}
-
-export interface FlowResult {
-  ok: boolean;
-  failed_step?: string;
-  compensated: string[];
-  error?: string;
-}
-
-export async function executeFlow(name: string, steps: FlowStep[], ctx: any): Promise<FlowResult> {
-  const completed: { step: string; compensation: ((c: any) => Promise<void>) | null }[] = [];
-
-  for (const step of steps) {
-    try {
-      logger.info("flow_step_started", { event: name + "." + step.name });
-      await step.action(ctx);
-      completed.push({ step: step.name, compensation: step.compensation });
-      counter("flow.step_completed", { flow: name, step: step.name });
-    } catch (e: any) {
-      logger.error("flow_step_failed", { event: name + "." + step.name, metadata: { error: e.message } });
-      counter("flow.step_failed", { flow: name, step: step.name });
-
-      // Backward compensation in reverse order
-      const compensated: string[] = [];
-      for (const c of [...completed].reverse()) {
-        if (!c.compensation) continue;
-        try {
-          await c.compensation(ctx);
-          compensated.push(c.step);
-          logger.info("flow_compensated", { event: name + "." + c.step });
-        } catch (compErr: any) {
-          logger.error("flow_compensation_failed", { event: name + "." + c.step, metadata: { error: compErr.message } });
-          // Continue with other compensations even if one fails
-        }
-      }
-
-      return { ok: false, failed_step: step.name, compensated, error: e.message };
-    }
-  }
-
-  counter("flow.completed", { flow: name });
-  return { ok: true, compensated: [] };
-}
-
-// Flow: run_agent_turn
-// ctx must contain: { req, res, auth, client? } for transactional flows
-export async function execute_run_agent_turn(ctx: { req: any; res: any; auth: any; client?: any }): Promise<FlowResult> {
-  const steps: FlowStep[] = [
-    {
-      name: "start",
-      action: async (ctx) => {
-        // Calls capability: activate_session(session)
-        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/activate-session`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify(ctx.req.body),
-        });
-        if (!response.ok) throw new Error(`Step start failed: ${await response.text()}`);
-        ctx.start_result = await response.json();
-      },
-      compensation: async (ctx) => {
-        // Compensates: deactivate_session(session)
-        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/deactivate-session`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
-        });
-      },
-    },
-    {
-      name: "prompt",
-      action: async (ctx) => {
-        // Calls capability: send_prompt_to_llm(session, message)
-        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/send-prompt-to-llm`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify(ctx.req.body),
-        });
-        if (!response.ok) throw new Error(`Step prompt failed: ${await response.text()}`);
-        ctx.prompt_result = await response.json();
-      },
-      compensation: async (ctx) => {
-        // Compensates: cancel_llm_request(session)
-        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/cancel-llm-request`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
-        });
-      },
-    },
-    {
-      name: "tools",
-      action: async (ctx) => {
-        // Calls capability: execute_tool_calls(session)
-        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/execute-tool-calls`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify(ctx.req.body),
-        });
-        if (!response.ok) throw new Error(`Step tools failed: ${await response.text()}`);
-        ctx.tools_result = await response.json();
-      },
-      compensation: async (ctx) => {
-        // Compensates: revert_tool_effects(session)
-        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/revert-tool-effects`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
-        });
-      },
-    },
-    {
-      name: "persist",
-      action: async (ctx) => {
-        // Calls capability: save_assistant_message(session)
-        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/save-assistant-message`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify(ctx.req.body),
-        });
-        if (!response.ok) throw new Error(`Step persist failed: ${await response.text()}`);
-        ctx.persist_result = await response.json();
-      },
-      compensation: async (ctx) => {
-        // Compensates: delete_last_message(session)
-        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/delete-last-message`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
-        });
-      },
-    },
-    {
-      name: "notify",
-      action: async (ctx) => {
-        // Calls capability: broadcast_turn_complete(session)
-        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/broadcast-turn-complete`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify(ctx.req.body),
-        });
-        if (!response.ok) throw new Error(`Step notify failed: ${await response.text()}`);
-        ctx.notify_result = await response.json();
-      },
-      compensation: async (ctx) => {
-        // Compensates: broadcast_turn_failed(session)
-        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/broadcast-turn-failed`, {
-          method: "POST",
-          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
-          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
-        });
-      },
-    },
-  ];
-  return executeFlow("run_agent_turn", steps, ctx);
-}
+// Generated by BoneScript compiler. DO NOT EDIT.
+// Saga runtime — implements flow declarations with backward compensation.
+//
+// On step failure, executes compensations for ALL completed steps in reverse order.
+
+import { logger } from "./logger";
+import { counter } from "./metrics";
+
+export interface FlowStep {
+  name: string;
+  action: (ctx: any) => Promise<void>;
+  compensation: ((ctx: any) => Promise<void>) | null;
+}
+
+export interface FlowResult {
+  ok: boolean;
+  failed_step?: string;
+  compensated: string[];
+  error?: string;
+}
+
+export async function executeFlow(name: string, steps: FlowStep[], ctx: any): Promise<FlowResult> {
+  const completed: { step: string; compensation: ((c: any) => Promise<void>) | null }[] = [];
+
+  for (const step of steps) {
+    try {
+      logger.info("flow_step_started", { event: name + "." + step.name });
+      await step.action(ctx);
+      completed.push({ step: step.name, compensation: step.compensation });
+      counter("flow.step_completed", { flow: name, step: step.name });
+    } catch (e: any) {
+      logger.error("flow_step_failed", { event: name + "." + step.name, metadata: { error: e.message } });
+      counter("flow.step_failed", { flow: name, step: step.name });
+
+      // Backward compensation in reverse order
+      const compensated: string[] = [];
+      for (const c of [...completed].reverse()) {
+        if (!c.compensation) continue;
+        try {
+          await c.compensation(ctx);
+          compensated.push(c.step);
+          logger.info("flow_compensated", { event: name + "." + c.step });
+        } catch (compErr: any) {
+          logger.error("flow_compensation_failed", { event: name + "." + c.step, metadata: { error: compErr.message } });
+          // Continue with other compensations even if one fails
+        }
+      }
+
+      return { ok: false, failed_step: step.name, compensated, error: e.message };
+    }
+  }
+
+  counter("flow.completed", { flow: name });
+  return { ok: true, compensated: [] };
+}
+
+// Flow: run_agent_turn
+// ctx must contain: { req, res, auth, client? } for transactional flows
+export async function execute_run_agent_turn(ctx: { req: any; res: any; auth: any; client?: any }): Promise<FlowResult> {
+  const steps: FlowStep[] = [
+    {
+      name: "start",
+      action: async (ctx) => {
+        // Calls capability: activate_session(session)
+        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/activate-session`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify(ctx.req.body),
+        });
+        if (!response.ok) throw new Error(`Step start failed: ${await response.text()}`);
+        ctx.start_result = await response.json();
+      },
+      compensation: async (ctx) => {
+        // Compensates: deactivate_session(session)
+        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/deactivate-session`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
+        });
+      },
+    },
+    {
+      name: "prompt",
+      action: async (ctx) => {
+        // Calls capability: send_prompt_to_llm(session, message)
+        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/send-prompt-to-llm`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify(ctx.req.body),
+        });
+        if (!response.ok) throw new Error(`Step prompt failed: ${await response.text()}`);
+        ctx.prompt_result = await response.json();
+      },
+      compensation: async (ctx) => {
+        // Compensates: cancel_llm_request(session)
+        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/cancel-llm-request`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
+        });
+      },
+    },
+    {
+      name: "tools",
+      action: async (ctx) => {
+        // Calls capability: execute_tool_calls(session)
+        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/execute-tool-calls`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify(ctx.req.body),
+        });
+        if (!response.ok) throw new Error(`Step tools failed: ${await response.text()}`);
+        ctx.tools_result = await response.json();
+      },
+      compensation: async (ctx) => {
+        // Compensates: revert_tool_effects(session)
+        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/revert-tool-effects`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
+        });
+      },
+    },
+    {
+      name: "persist",
+      action: async (ctx) => {
+        // Calls capability: save_assistant_message(session)
+        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/save-assistant-message`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify(ctx.req.body),
+        });
+        if (!response.ok) throw new Error(`Step persist failed: ${await response.text()}`);
+        ctx.persist_result = await response.json();
+      },
+      compensation: async (ctx) => {
+        // Compensates: delete_last_message(session)
+        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/delete-last-message`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
+        });
+      },
+    },
+    {
+      name: "notify",
+      action: async (ctx) => {
+        // Calls capability: broadcast_turn_complete(session)
+        const response = await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/broadcast-turn-complete`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify(ctx.req.body),
+        });
+        if (!response.ok) throw new Error(`Step notify failed: ${await response.text()}`);
+        ctx.notify_result = await response.json();
+      },
+      compensation: async (ctx) => {
+        // Compensates: broadcast_turn_failed(session)
+        await fetch(`${process.env.SERVICE_BASE_URL || "http://localhost:3000"}/broadcast-turn-failed`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json", "Authorization": ctx.req.headers.authorization || "" },
+          body: JSON.stringify({ ...ctx.req.body, _compensating: true }),
+        });
+      },
+    },
+  ];
+  return executeFlow("run_agent_turn", steps, ctx);
+}

package/bone/output/session/src/health.ts

@@ -1,43 +1,43 @@
-// Generated by BoneScript compiler. DO NOT EDIT.
-// Implements spec/10 §5 (Health Checks)
-
-import { Router, Request, Response } from "express";
-import { pool } from "./db";
-import { dump as dumpMetrics } from "./metrics";
-
-export const healthRouter = Router();
-
-// Liveness — is the process running?
-healthRouter.get("/live", (_req: Request, res: Response) => {
-  res.json({ status: "ok", timestamp: new Date().toISOString() });
-});
-
-// Readiness — can the service accept requests?
-healthRouter.get("/ready", async (_req: Request, res: Response) => {
-  const checks: Record<string, { ok: boolean; message?: string }> = {};
-
-  // Postgres
-  try {
-    await pool.query("SELECT 1");
-    checks.postgres = { ok: true };
-  } catch (e: any) {
-    checks.postgres = { ok: false, message: e.message };
-  }
-
-  const allOk = Object.values(checks).every(c => c.ok);
-  res.status(allOk ? 200 : 503).json({
-    status: allOk ? "ok" : "degraded",
-    checks,
-    timestamp: new Date().toISOString(),
-  });
-});
-
-// Startup — has initialization completed?
-healthRouter.get("/startup", (_req: Request, res: Response) => {
-  res.json({ status: "ok", uptime: process.uptime() });
-});
-
-// Prometheus-style metrics
-healthRouter.get("/metrics", (_req: Request, res: Response) => {
-  res.type("text/plain").send(dumpMetrics());
-});
+// Generated by BoneScript compiler. DO NOT EDIT.
+// Implements spec/10 §5 (Health Checks)
+
+import { Router, Request, Response } from "express";
+import { pool } from "./db";
+import { dump as dumpMetrics } from "./metrics";
+
+export const healthRouter = Router();
+
+// Liveness — is the process running?
+healthRouter.get("/live", (_req: Request, res: Response) => {
+  res.json({ status: "ok", timestamp: new Date().toISOString() });
+});
+
+// Readiness — can the service accept requests?
+healthRouter.get("/ready", async (_req: Request, res: Response) => {
+  const checks: Record<string, { ok: boolean; message?: string }> = {};
+
+  // Postgres
+  try {
+    await pool.query("SELECT 1");
+    checks.postgres = { ok: true };
+  } catch (e: any) {
+    checks.postgres = { ok: false, message: e.message };
+  }
+
+  const allOk = Object.values(checks).every(c => c.ok);
+  res.status(allOk ? 200 : 503).json({
+    status: allOk ? "ok" : "degraded",
+    checks,
+    timestamp: new Date().toISOString(),
+  });
+});
+
+// Startup — has initialization completed?
+healthRouter.get("/startup", (_req: Request, res: Response) => {
+  res.json({ status: "ok", uptime: process.uptime() });
+});
+
+// Prometheus-style metrics
+healthRouter.get("/metrics", (_req: Request, res: Response) => {
+  res.type("text/plain").send(dumpMetrics());
+});

package/bone/output/session/src/index.ts

@@ -1,100 +1,100 @@
-// Generated by BoneScript compiler. DO NOT EDIT.
-// System: SessionDomain
-require("dotenv").config();
-import express from "express";
-import { createServer } from "http";
-import cors from "cors";
-import helmet from "helmet";
-import rateLimit from "express-rate-limit";
-import { authMiddleware } from "./auth";
-import { healthRouter } from "./health";
-import { logger } from "./logger";
-import { eventBus } from "./events";
-import { pool } from "./db";
-import { setupWebSocketServer } from "./websocket";
-
-import { projectsRouter } from "./routes/project";
-import { sessionsRouter } from "./routes/session";
-import { messagesRouter } from "./routes/message";
-import { partsRouter } from "./routes/part";
-import { permissionsRouter } from "./routes/permission";
-
-const app = express();
-const httpServer = createServer(app);
-const PORT = parseInt(process.env.PORT || "3000");
-
-// Middleware
-app.use(helmet());
-// CORS: restrict to ALLOWED_ORIGINS env var (comma-separated). Defaults to same-origin only.
-const __allowedOrigins = (process.env.ALLOWED_ORIGINS || "").split(",").map(s => s.trim()).filter(Boolean);
-app.use(cors({
-  origin: __allowedOrigins.length > 0
-    ? (origin, cb) => { if (!origin || __allowedOrigins.includes(origin)) cb(null, true); else cb(new Error("Not allowed by CORS")); }
-    : false,
-  credentials: true,
-}));
-app.use(express.json({ limit: "1mb" }));
-app.use(express.urlencoded({ extended: false, limit: "1mb" }));
-app.use(authMiddleware);
-app.use(rateLimit({ windowMs: 60000, max: 500 }));
-
-// Request timeout (default 30s, override per-route)
-app.use((req: any, res: any, next: any) => {
-  const timeout = parseInt(process.env.REQUEST_TIMEOUT_MS || "30000");
-  const timer = setTimeout(() => {
-    if (!res.headersSent) {
-      res.status(503).json({ error: { code: "REQUEST_TIMEOUT", message: "Request timed out" } });
-    }
-  }, timeout);
-  res.on("finish", () => clearTimeout(timer));
-  next();
-});
-
-// Health & metrics
-app.use("/health", healthRouter);
-
-// Routes
-app.use("/projects", projectsRouter);
-app.use("/sessions", sessionsRouter);
-app.use("/messages", messagesRouter);
-app.use("/parts", partsRouter);
-app.use("/permissions", permissionsRouter);
-
-// WebSocket
-setupWebSocketServer(httpServer);
-
-// Start
-httpServer.listen(PORT, () => {
-  logger.info("server_started", { event: "startup", metadata: { port: PORT } });
-  // Start durable event worker (no-op in in_process mode)
-  eventBus.startWorker(parseInt(process.env.EVENT_WORKER_INTERVAL_MS || "1000"));
-  console.log(`[SessionDomain] Running on port ${PORT}`);
-  console.log(`  HTTP routes:`);
-  console.log(`    /projects`);
-  console.log(`    /sessions`);
-  console.log(`    /messages`);
-  console.log(`    /parts`);
-  console.log(`    /permissions`);
-  console.log(`  WebSocket: /ws?channel=<name>&token=<jwt>`);
-  console.log(`  Health: /health/live, /health/ready, /health/metrics`);
-});
-
-// Graceful shutdown
-const shutdown = async (signal: string) => {
-  logger.info("server_stopping", { event: "shutdown", metadata: { signal } });
-  httpServer.close(async () => {
-    try {
-      await pool.end();
-      logger.info("server_stopped", { event: "shutdown", status: "success" });
-    } catch (e: any) {
-      logger.error("shutdown_error", { event: "shutdown", metadata: { error: e.message } });
-    }
-    process.exit(0);
-  });
-  // Force exit after 10s if connections don't drain
-  setTimeout(() => { logger.error("shutdown_timeout", { event: "shutdown" }); process.exit(1); }, 10000);
-};
-process.on("SIGTERM", () => shutdown("SIGTERM"));
-process.on("SIGINT", () => shutdown("SIGINT"));
-
+// Generated by BoneScript compiler. DO NOT EDIT.
+// System: SessionDomain
+require("dotenv").config();
+import express from "express";
+import { createServer } from "http";
+import cors from "cors";
+import helmet from "helmet";
+import rateLimit from "express-rate-limit";
+import { authMiddleware } from "./auth";
+import { healthRouter } from "./health";
+import { logger } from "./logger";
+import { eventBus } from "./events";
+import { pool } from "./db";
+import { setupWebSocketServer } from "./websocket";
+
+import { projectsRouter } from "./routes/project";
+import { sessionsRouter } from "./routes/session";
+import { messagesRouter } from "./routes/message";
+import { partsRouter } from "./routes/part";
+import { permissionsRouter } from "./routes/permission";
+
+const app = express();
+const httpServer = createServer(app);
+const PORT = parseInt(process.env.PORT || "3000");
+
+// Middleware
+app.use(helmet());
+// CORS: restrict to ALLOWED_ORIGINS env var (comma-separated). Defaults to same-origin only.
+const __allowedOrigins = (process.env.ALLOWED_ORIGINS || "").split(",").map(s => s.trim()).filter(Boolean);
+app.use(cors({
+  origin: __allowedOrigins.length > 0
+    ? (origin, cb) => { if (!origin || __allowedOrigins.includes(origin)) cb(null, true); else cb(new Error("Not allowed by CORS")); }
+    : false,
+  credentials: true,
+}));
+app.use(express.json({ limit: "1mb" }));
+app.use(express.urlencoded({ extended: false, limit: "1mb" }));
+app.use(authMiddleware);
+app.use(rateLimit({ windowMs: 60000, max: 500 }));
+
+// Request timeout (default 30s, override per-route)
+app.use((req: any, res: any, next: any) => {
+  const timeout = parseInt(process.env.REQUEST_TIMEOUT_MS || "30000");
+  const timer = setTimeout(() => {
+    if (!res.headersSent) {
+      res.status(503).json({ error: { code: "REQUEST_TIMEOUT", message: "Request timed out" } });
+    }
+  }, timeout);
+  res.on("finish", () => clearTimeout(timer));
+  next();
+});
+
+// Health & metrics
+app.use("/health", healthRouter);
+
+// Routes
+app.use("/projects", projectsRouter);
+app.use("/sessions", sessionsRouter);
+app.use("/messages", messagesRouter);
+app.use("/parts", partsRouter);
+app.use("/permissions", permissionsRouter);
+
+// WebSocket
+setupWebSocketServer(httpServer);
+
+// Start
+httpServer.listen(PORT, () => {
+  logger.info("server_started", { event: "startup", metadata: { port: PORT } });
+  // Start durable event worker (no-op in in_process mode)
+  eventBus.startWorker(parseInt(process.env.EVENT_WORKER_INTERVAL_MS || "1000"));
+  console.log(`[SessionDomain] Running on port ${PORT}`);
+  console.log(`  HTTP routes:`);
+  console.log(`    /projects`);
+  console.log(`    /sessions`);
+  console.log(`    /messages`);
+  console.log(`    /parts`);
+  console.log(`    /permissions`);
+  console.log(`  WebSocket: /ws?channel=<name>&token=<jwt>`);
+  console.log(`  Health: /health/live, /health/ready, /health/metrics`);
+});
+
+// Graceful shutdown
+const shutdown = async (signal: string) => {
+  logger.info("server_stopping", { event: "shutdown", metadata: { signal } });
+  httpServer.close(async () => {
+    try {
+      await pool.end();
+      logger.info("server_stopped", { event: "shutdown", status: "success" });
+    } catch (e: any) {
+      logger.error("shutdown_error", { event: "shutdown", metadata: { error: e.message } });
+    }
+    process.exit(0);
+  });
+  // Force exit after 10s if connections don't drain
+  setTimeout(() => { logger.error("shutdown_timeout", { event: "shutdown" }); process.exit(1); }, 10000);
+};
+process.on("SIGTERM", () => shutdown("SIGTERM"));
+process.on("SIGINT", () => shutdown("SIGINT"));
+
 export { app, httpServer };