bonecode 1.0.0

package/bone/output/session/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "session_domain",
+  "version": "1.0.0",
+  "private": true,
+  "scripts": {
+    "build": "tsc",
+    "start": "node dist/index.js",
+    "dev": "ts-node src/index.ts",
+    "migrate": "ts-node src/migrate.ts"
+  },
+  "dependencies": {
+    "express": "4.18.2",
+    "pg": "8.11.3",
+    "ioredis": "5.3.2",
+    "ws": "8.16.0",
+    "uuid": "9.0.0",
+    "cors": "2.8.5",
+    "helmet": "7.1.0",
+    "express-rate-limit": "7.1.5",
+    "jsonwebtoken": "9.0.2",
+    "dotenv": "16.3.1",
+    "node-cron": "3.0.3"
+  },
+  "devDependencies": {
+    "@types/express": "4.17.21",
+    "@types/node": "18.19.0",
+    "@types/pg": "8.10.9",
+    "@types/ws": "8.5.10",
+    "@types/cors": "2.8.17",
+    "@types/jsonwebtoken": "9.0.5",
+    "@types/uuid": "9.0.7",
+    "@types/node-cron": "3.0.11",
+    "typescript": "5.3.3",
+    "ts-node": "10.9.2"
+  }
+}

package/bone/output/session/schema.graphql

@@ -0,0 +1,222 @@
+# Generated by BoneScript compiler. DO NOT EDIT.
+# System: SessionDomain v1.0.0
+
+type Project {
+  id: ID!
+  created_at: String!
+  updated_at: String!
+  root_commit_hash: String!
+  worktree: String!
+  vcs: String!
+  name: String!
+  sandboxes: String!
+}
+
+type ProjectPage {
+  items: [Project!]!
+  total: Int!
+  page: Int!
+  pageSize: Int!
+}
+
+input ProjectInput {
+  root_commit_hash: String!
+  worktree: String!
+  vcs: String!
+  name: String!
+  sandboxes: String!
+}
+
+type Session {
+  id: ID!
+  created_at: String!
+  updated_at: String!
+  slug: String!
+  project_id: ID!
+  workspace_id: ID
+  parent_id: ID
+  directory: String!
+  title: String!
+  version: String!
+  share_url: String
+  summary_additions: Int
+  summary_deletions: Int
+  summary_files: Int
+  summary_diffs: String
+  revert_data: String
+  permission_ruleset: String
+}
+
+type SessionPage {
+  items: [Session!]!
+  total: Int!
+  page: Int!
+  pageSize: Int!
+}
+
+input SessionInput {
+  slug: String!
+  project_id: ID!
+  workspace_id: ID
+  parent_id: ID
+  directory: String!
+  title: String!
+  version: String!
+  share_url: String
+  summary_additions: Int
+  summary_deletions: Int
+  summary_files: Int
+  summary_diffs: String
+  revert_data: String
+  permission_ruleset: String
+}
+
+type Message {
+  id: ID!
+  created_at: String!
+  updated_at: String!
+  session_id: ID!
+  role: String!
+  model_id: String
+  provider_id: String
+  tokens_input: Int
+  tokens_output: Int
+  cost_usd: Float
+  error: String
+}
+
+type MessagePage {
+  items: [Message!]!
+  total: Int!
+  page: Int!
+  pageSize: Int!
+}
+
+input MessageInput {
+  session_id: ID!
+  role: String!
+  model_id: String
+  provider_id: String
+  tokens_input: Int
+  tokens_output: Int
+  cost_usd: Float
+  error: String
+}
+
+type Part {
+  id: ID!
+  created_at: String!
+  updated_at: String!
+  message_id: ID!
+  session_id: ID!
+  part_type: String!
+  data: String!
+  order_index: Int!
+}
+
+type PartPage {
+  items: [Part!]!
+  total: Int!
+  page: Int!
+  pageSize: Int!
+}
+
+input PartInput {
+  message_id: ID!
+  session_id: ID!
+  part_type: String!
+  data: String!
+  order_index: Int!
+}
+
+type Permission {
+  id: ID!
+  created_at: String!
+  updated_at: String!
+  session_id: ID!
+  tool_name: String!
+  pattern: String
+  decision: String!
+  expires_at: String
+}
+
+type PermissionPage {
+  items: [Permission!]!
+  total: Int!
+  page: Int!
+  pageSize: Int!
+}
+
+input PermissionInput {
+  session_id: ID!
+  tool_name: String!
+  pattern: String
+  decision: String!
+  expires_at: String
+}
+
+type CapabilityResult {
+  ok: Boolean!
+  action: String!
+}
+
+input SessionArchiveSessionInput {
+  session: String!
+}
+
+input SessionDeleteSessionInput {
+  session: String!
+}
+
+input SessionAddMessageInput {
+  session: String!
+  role: String!
+  data: String!
+}
+
+input SessionUpdatePartInput {
+  session: String!
+  message_id: ID!
+  part_id: ID!
+  data: String!
+}
+
+input SessionCompactSessionInput {
+  session: String!
+}
+
+type Query {
+  project(id: ID!): Project
+  projects(page: Int, pageSize: Int): ProjectPage
+  session(id: ID!): Session
+  sessions(page: Int, pageSize: Int): SessionPage
+  message(id: ID!): Message
+  messages(page: Int, pageSize: Int): MessagePage
+  part(id: ID!): Part
+  parts(page: Int, pageSize: Int): PartPage
+  permission(id: ID!): Permission
+  permissions(page: Int, pageSize: Int): PermissionPage
+}
+
+type Mutation {
+  createProject(input: ProjectInput!): Project!
+  updateProject(id: ID!, input: ProjectInput!): Project!
+  deleteProject(id: ID!): Boolean!
+  createSession(input: SessionInput!): Session!
+  updateSession(id: ID!, input: SessionInput!): Session!
+  deleteSession(id: ID!): Boolean!
+  archiveSession(input: SessionArchiveSessionInput): CapabilityResult!
+  deleteSession(input: SessionDeleteSessionInput): CapabilityResult!
+  addMessage(input: SessionAddMessageInput): CapabilityResult!
+  updatePart(input: SessionUpdatePartInput): CapabilityResult!
+  compactSession(input: SessionCompactSessionInput): CapabilityResult!
+  createMessage(input: MessageInput!): Message!
+  updateMessage(id: ID!, input: MessageInput!): Message!
+  deleteMessage(id: ID!): Boolean!
+  createPart(input: PartInput!): Part!
+  updatePart(id: ID!, input: PartInput!): Part!
+  deletePart(id: ID!): Boolean!
+  createPermission(input: PermissionInput!): Permission!
+  updatePermission(id: ID!, input: PermissionInput!): Permission!
+  deletePermission(id: ID!): Boolean!
+}

package/bone/output/session/sdk/client.ts

@@ -0,0 +1,225 @@
+// Generated by BoneScript compiler. Import this file into your frontend.
+// System: SessionDomain v1.0.0
+
+export interface Project {
+  id: string;
+  created_at: string;
+  updated_at: string;
+  root_commit_hash: string;
+  worktree: string;
+  vcs: string;
+  name: string;
+  sandboxes: unknown;
+}
+
+export interface Session {
+  id: string;
+  created_at: string;
+  updated_at: string;
+  slug: string;
+  project_id: string;
+  workspace_id: string | null | null;
+  parent_id: string | null | null;
+  directory: string;
+  title: string;
+  version: string;
+  share_url: string | null | null;
+  summary_additions: number | null | null;
+  summary_deletions: number | null | null;
+  summary_files: number | null | null;
+  summary_diffs: unknown | null | null;
+  revert_data: unknown | null | null;
+  permission_ruleset: unknown | null | null;
+}
+
+export interface Message {
+  id: string;
+  created_at: string;
+  updated_at: string;
+  session_id: string;
+  role: string;
+  model_id: string | null | null;
+  provider_id: string | null | null;
+  tokens_input: number | null | null;
+  tokens_output: number | null | null;
+  cost_usd: number | null | null;
+  error: unknown | null | null;
+}
+
+export interface Part {
+  id: string;
+  created_at: string;
+  updated_at: string;
+  message_id: string;
+  session_id: string;
+  part_type: string;
+  data: unknown;
+  order_index: number;
+}
+
+export interface Permission {
+  id: string;
+  created_at: string;
+  updated_at: string;
+  session_id: string;
+  tool_name: string;
+  pattern: string | null | null;
+  decision: string;
+  expires_at: string | null | null;
+}
+
+export class SessionDomainClient {
+  constructor(private baseUrl: string, private getToken?: () => string | null) {}
+
+  private async request<T>(method: string, path: string, body?: unknown): Promise<T> {
+    const headers: Record<string, string> = {
+      "Content-Type": "application/json",
+    };
+    if (this.getToken) {
+      const token = this.getToken();
+      if (token) headers["Authorization"] = "Bearer " + token;
+    }
+    const res = await fetch(this.baseUrl + path, {
+      method,
+      headers,
+      body: body !== undefined ? JSON.stringify(body) : undefined,
+    });
+    if (!res.ok) {
+      const text = await res.text().catch(() => res.statusText);
+      throw new Error(`HTTP ${res.status}: ${text}`);
+    }
+    if (res.status === 204) return undefined as unknown as T;
+    return res.json() as Promise<T>;
+  }
+
+  // ─── Project ───
+
+  listProject(page = 1, pageSize = 50): Promise<{ items: Project[]; total: number; page: number; page_size: number }> {
+    return this.request("GET", `/projects?page=${page}&page_size=${pageSize}`);
+  }
+
+  getProject(id: string): Promise<Project> {
+    return this.request("GET", `/projects/${id}`);
+  }
+
+  createProject(data: Partial<Project>): Promise<Project> {
+    return this.request("POST", "/projects", data);
+  }
+
+  updateProject(id: string, data: Partial<Project>): Promise<Project> {
+    return this.request("PUT", `/projects/${id}`, data);
+  }
+
+  deleteProject(id: string): Promise<void> {
+    return this.request("DELETE", `/projects/${id}`);
+  }
+
+  // ─── Session ───
+
+  listSession(page = 1, pageSize = 50): Promise<{ items: Session[]; total: number; page: number; page_size: number }> {
+    return this.request("GET", `/sessions?page=${page}&page_size=${pageSize}`);
+  }
+
+  getSession(id: string): Promise<Session> {
+    return this.request("GET", `/sessions/${id}`);
+  }
+
+  createSession(data: Partial<Session>): Promise<Session> {
+    return this.request("POST", "/sessions", data);
+  }
+
+  updateSession(id: string, data: Partial<Session>): Promise<Session> {
+    return this.request("PUT", `/sessions/${id}`, data);
+  }
+
+  deleteSession(id: string): Promise<void> {
+    return this.request("DELETE", `/sessions/${id}`);
+  }
+
+  archiveSession(data: Record<string, unknown>): Promise<{ ok: boolean; action: string }> {
+    return this.request("POST", "/sessions/archive-session", data);
+  }
+
+  deleteSession(data: Record<string, unknown>): Promise<{ ok: boolean; action: string }> {
+    return this.request("POST", "/sessions/delete-session", data);
+  }
+
+  addMessage(data: Record<string, unknown>): Promise<{ ok: boolean; action: string }> {
+    return this.request("POST", "/sessions/add-message", data);
+  }
+
+  updatePart(data: Record<string, unknown>): Promise<{ ok: boolean; action: string }> {
+    return this.request("POST", "/sessions/update-part", data);
+  }
+
+  compactSession(data: Record<string, unknown>): Promise<{ ok: boolean; action: string }> {
+    return this.request("POST", "/sessions/compact-session", data);
+  }
+
+  // ─── Message ───
+
+  listMessage(page = 1, pageSize = 50): Promise<{ items: Message[]; total: number; page: number; page_size: number }> {
+    return this.request("GET", `/messages?page=${page}&page_size=${pageSize}`);
+  }
+
+  getMessage(id: string): Promise<Message> {
+    return this.request("GET", `/messages/${id}`);
+  }
+
+  createMessage(data: Partial<Message>): Promise<Message> {
+    return this.request("POST", "/messages", data);
+  }
+
+  updateMessage(id: string, data: Partial<Message>): Promise<Message> {
+    return this.request("PUT", `/messages/${id}`, data);
+  }
+
+  deleteMessage(id: string): Promise<void> {
+    return this.request("DELETE", `/messages/${id}`);
+  }
+
+  // ─── Part ───
+
+  listPart(page = 1, pageSize = 50): Promise<{ items: Part[]; total: number; page: number; page_size: number }> {
+    return this.request("GET", `/parts?page=${page}&page_size=${pageSize}`);
+  }
+
+  getPart(id: string): Promise<Part> {
+    return this.request("GET", `/parts/${id}`);
+  }
+
+  createPart(data: Partial<Part>): Promise<Part> {
+    return this.request("POST", "/parts", data);
+  }
+
+  updatePart(id: string, data: Partial<Part>): Promise<Part> {
+    return this.request("PUT", `/parts/${id}`, data);
+  }
+
+  deletePart(id: string): Promise<void> {
+    return this.request("DELETE", `/parts/${id}`);
+  }
+
+  // ─── Permission ───
+
+  listPermission(page = 1, pageSize = 50): Promise<{ items: Permission[]; total: number; page: number; page_size: number }> {
+    return this.request("GET", `/permissions?page=${page}&page_size=${pageSize}`);
+  }
+
+  getPermission(id: string): Promise<Permission> {
+    return this.request("GET", `/permissions/${id}`);
+  }
+
+  createPermission(data: Partial<Permission>): Promise<Permission> {
+    return this.request("POST", "/permissions", data);
+  }
+
+  updatePermission(id: string, data: Partial<Permission>): Promise<Permission> {
+    return this.request("PUT", `/permissions/${id}`, data);
+  }
+
+  deletePermission(id: string): Promise<void> {
+    return this.request("DELETE", `/permissions/${id}`);
+  }
+
+}

package/bone/output/session/src/algorithms.ts

@@ -0,0 +1,2 @@
+// No algorithms used in this system.
+export {};

package/bone/output/session/src/audit.ts

@@ -0,0 +1,44 @@
+// Generated by BoneScript compiler.
+// Audit middleware for: SessionDomain v1.0.0
+//
+// Modules requiring audit logging:
+//   - ProjectService
+//   - SessionService
+//   - MessageService
+//   - PartService
+//   - PermissionService
+
+import { Request, Response, NextFunction } from "express";
+import { query } from "./db";
+
+export function auditLog(action: string, entityType?: string) {
+  return async (req: Request, _res: Response, next: NextFunction): Promise<void> => {
+    try {
+      const auth = (req as any).auth as { actor_id?: string | null } | undefined;
+      const actorId = auth?.actor_id ?? null;
+      const entityId = req.params.id ?? (req.body as Record<string, unknown>)?.id ?? null;
+      const payload = req.body ?? null;
+      const ipAddress = req.ip ?? null;
+      const userAgent = req.headers["user-agent"] ?? null;
+
+      await query(
+        `INSERT INTO audit_log
+          (actor_id, action, entity_type, entity_id, payload, ip_address, user_agent)
+          VALUES ($1, $2, $3, $4, $5, $6, $7)`,
+        [actorId, action, entityType ?? null, entityId, JSON.stringify(payload), ipAddress, userAgent]
+      );
+    } catch (err) {
+      // Audit failures must not block the request — log and continue
+      console.error("[audit] Failed to write audit log:", err);
+    }
+    next();
+  };
+}
+
+export async function getAuditLog(entityType: string, entityId: string): Promise<any[]> {
+  const result = await query(
+    "SELECT * FROM audit_log WHERE entity_type = $1 AND entity_id = $2 ORDER BY created_at DESC LIMIT 100",
+    [entityType, entityId]
+  );
+  return result;
+}

package/bone/output/session/src/auth.ts

@@ -0,0 +1,57 @@
+// Generated by BoneScript compiler. DO NOT EDIT.
+import { Request, Response, NextFunction } from "express";
+import jwt from "jsonwebtoken";
+
+// JWT_SECRET must be set in production. The server will refuse to start without it
+// when NODE_ENV is "production" to prevent accidental use of a weak fallback.
+const JWT_SECRET = (() => {
+  const secret = process.env.JWT_SECRET;
+  if (!secret) {
+    if (process.env.NODE_ENV === "production") {
+      console.error("[FATAL] JWT_SECRET environment variable is not set. Refusing to start in production.");
+      process.exit(1);
+    }
+    console.warn("[WARN] JWT_SECRET is not set. Using insecure default — do not use in production.");
+    return "bonescript-dev-secret-do-not-use-in-production";
+  }
+  if (secret.length < 32) {
+    console.warn("[WARN] JWT_SECRET is shorter than 32 characters. Use a longer secret in production.");
+  }
+  return secret;
+})();
+
+export interface AuthContext {
+  authenticated: boolean;
+  actor_id: string | null;
+  trace_id: string;
+}
+
+export function authMiddleware(req: Request, res: Response, next: NextFunction): void {
+  const header = req.headers.authorization;
+  if (!header || !header.startsWith("Bearer ")) {
+    (req as any).auth = { authenticated: false, actor_id: null, trace_id: req.headers["x-trace-id"] as string || "" };
+    next();
+    return;
+  }
+  try {
+    const token = header.slice(7);
+    const decoded = jwt.verify(token, JWT_SECRET) as { sub: string };
+    (req as any).auth = {
+      authenticated: true,
+      actor_id: decoded.sub,
+      trace_id: req.headers["x-trace-id"] as string || "",
+    };
+  } catch {
+    (req as any).auth = { authenticated: false, actor_id: null, trace_id: req.headers["x-trace-id"] as string || "" };
+  }
+  next();
+}
+
+export function requireAuth(req: Request, res: Response, next: NextFunction): void {
+  const auth: AuthContext = (req as any).auth;
+  if (!auth || !auth.authenticated) {
+    res.status(401).json({ error: { code: "UNAUTHORIZED", message: "Authentication required" } });
+    return;
+  }
+  next();
+}

package/bone/output/session/src/cron.ts

@@ -0,0 +1,12 @@
+// Generated by BoneScript compiler.
+// Cron jobs — scheduled background tasks.
+// Uncomment and configure as needed.
+
+import cron from "node-cron";
+import { logger } from "./logger";
+
+export function startCronJobs(): void {
+  logger.info("cron_started", { event: "startup" });
+
+  // No batch capabilities declared — add cron jobs here.
+}

package/bone/output/session/src/db.ts

@@ -0,0 +1,32 @@
+// Generated by BoneScript compiler. DO NOT EDIT.
+import { Pool, PoolClient } from "pg";
+
+// Lazy pool — created on first use so DATABASE_URL is read after dotenv loads
+let _pool: Pool | null = null;
+function getPool(): Pool {
+  if (!_pool) {
+  _pool = new Pool({ connectionString: process.env.DATABASE_URL || "postgresql://localhost:5432/session_domain", max: 20 });
+  _pool.on("error", (err: Error) => console.error("[DB] Pool error (non-fatal):", err.message));
+  }
+  return _pool;
+}
+export const pool = new Proxy({} as Pool, { get(_t: any, p: any) { return (getPool() as any)[p]; } });
+
+export async function query<T = any>(text: string, params?: any[]): Promise<T[]> {
+  try { const result = await pool.query(text, params); return result.rows as T[]; }
+  catch (e: any) { throw new Error(`DB query failed: ${e.message}`); }
+}
+export async function queryOne<T = any>(text: string, params?: any[]): Promise<T | null> {
+  try { const rows = await query<T>(text, params); return rows[0] || null; }
+  catch (e: any) { throw new Error(`DB query failed: ${e.message}`); }
+}
+export async function execute(text: string, params?: any[]): Promise<number> {
+  try { const result = await pool.query(text, params); return result.rowCount || 0; }
+  catch (e: any) { throw new Error(`DB execute failed: ${e.message}`); }
+}
+export async function transaction<T>(fn: (client: PoolClient) => Promise<T>): Promise<T> {
+  const client = await pool.connect();
+  try { await client.query("BEGIN"); const result = await fn(client); await client.query("COMMIT"); return result; }
+  catch (e) { await client.query("ROLLBACK"); throw e; }
+  finally { client.release(); }
+}

package/bone/output/session/src/debug.ts

@@ -0,0 +1,66 @@
+// Generated by BoneScript compiler. DO NOT EDIT.
+// Runtime error handler with .bone source annotation.
+
+import * as fs from "fs";
+import * as path from "path";
+
+interface BoneMapping {
+  generated_file: string;
+  generated_line: number;
+  bone_line: number;
+  bone_column: number;
+  description: string;
+}
+
+interface BoneSourceMap {
+  version: number;
+  source_hash: string;
+  source_file: string;
+  mappings: BoneMapping[];
+}
+
+let sourceMap: BoneSourceMap | null = null;
+
+function loadSourceMap(): BoneSourceMap | null {
+  if (sourceMap) return sourceMap;
+  const mapPath = path.join(__dirname, "..", "SessionDomain.bone.map");
+  if (!fs.existsSync(mapPath)) return null;
+  try {
+    sourceMap = JSON.parse(fs.readFileSync(mapPath, "utf-8"));
+    return sourceMap;
+  } catch {
+    return null;
+  }
+}
+
+export function annotateBoneError(err: Error, generatedFile: string): string {
+  const map = loadSourceMap();
+  if (!map) return err.stack || err.message;
+
+  // Extract line number from stack trace
+  const lineMatch = err.stack?.match(new RegExp(generatedFile.replace(/[/\\]/g, "[/\\\\]") + ":(\\d+)"));
+  if (!lineMatch) return err.stack || err.message;
+
+  const generatedLine = parseInt(lineMatch[1], 10);
+  const mapping = map.mappings
+    .filter(m => m.generated_file.includes(generatedFile) && m.generated_line <= generatedLine)
+    .sort((a, b) => b.generated_line - a.generated_line)[0];
+
+  if (!mapping) return err.stack || err.message;
+
+  return [
+    `BoneScript source: ${map.source_file}:${mapping.bone_line}:${mapping.bone_column}`,
+    `  Context: ${mapping.description}`,
+    `Generated TS: ${generatedFile}:${generatedLine}`,
+    ``,
+    err.stack || err.message,
+  ].join("\n");
+}
+
+// Global error handler — annotates unhandled errors with .bone context
+process.on("uncaughtException", (err: Error) => {
+  const annotated = annotateBoneError(err, err.stack?.split("\n")[1]?.match(/\((.+):\d+:\d+\)/)?.[1] || "");
+  console.error("[BoneScript] Unhandled error:");
+  console.error(annotated);
+  // process.exit(1); // disabled - errors should not crash the server
+});