bonecode 1.1.0 → 1.2.1

package/dist/bone/output/session/src/auth.js

@@ -0,0 +1,56 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireAuth = exports.authMiddleware = void 0;
+const jsonwebtoken_1 = __importDefault(require("jsonwebtoken"));
+// JWT_SECRET must be set in production. The server will refuse to start without it
+// when NODE_ENV is "production" to prevent accidental use of a weak fallback.
+const JWT_SECRET = (() => {
+    const secret = process.env.JWT_SECRET;
+    if (!secret) {
+        if (process.env.NODE_ENV === "production") {
+            console.error("[FATAL] JWT_SECRET environment variable is not set. Refusing to start in production.");
+            process.exit(1);
+        }
+        console.warn("[WARN] JWT_SECRET is not set. Using insecure default — do not use in production.");
+        return "bonescript-dev-secret-do-not-use-in-production";
+    }
+    if (secret.length < 32) {
+        console.warn("[WARN] JWT_SECRET is shorter than 32 characters. Use a longer secret in production.");
+    }
+    return secret;
+})();
+function authMiddleware(req, res, next) {
+    const header = req.headers.authorization;
+    if (!header || !header.startsWith("Bearer ")) {
+        req.auth = { authenticated: false, actor_id: null, trace_id: req.headers["x-trace-id"] || "" };
+        next();
+        return;
+    }
+    try {
+        const token = header.slice(7);
+        const decoded = jsonwebtoken_1.default.verify(token, JWT_SECRET);
+        req.auth = {
+            authenticated: true,
+            actor_id: decoded.sub,
+            trace_id: req.headers["x-trace-id"] || "",
+        };
+    }
+    catch {
+        req.auth = { authenticated: false, actor_id: null, trace_id: req.headers["x-trace-id"] || "" };
+    }
+    next();
+}
+exports.authMiddleware = authMiddleware;
+function requireAuth(req, res, next) {
+    const auth = req.auth;
+    if (!auth || !auth.authenticated) {
+        res.status(401).json({ error: { code: "UNAUTHORIZED", message: "Authentication required" } });
+        return;
+    }
+    next();
+}
+exports.requireAuth = requireAuth;
+//# sourceMappingURL=auth.js.map

package/dist/bone/output/session/src/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../../../bone/output/session/src/auth.ts"],"names":[],"mappings":";;;;;;AAEA,gEAA+B;AAE/B,mFAAmF;AACnF,8EAA8E;AAC9E,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;YAC1C,OAAO,CAAC,KAAK,CAAC,sFAAsF,CAAC,CAAC;YACtG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;QACjG,OAAO,gDAAgD,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC,EAAE,CAAC;AAQL,SAAgB,cAAc,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IAC5E,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,GAAW,CAAC,IAAI,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,IAAI,EAAE,EAAE,CAAC;QAClH,IAAI,EAAE,CAAC;QACP,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,sBAAG,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,CAAoB,CAAC;QAChE,GAAW,CAAC,IAAI,GAAG;YAClB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,OAAO,CAAC,GAAG;YACrB,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,IAAI,EAAE;SACpD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACN,GAAW,CAAC,IAAI,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAW,IAAI,EAAE,EAAE,CAAC;IACpH,CAAC;IACD,IAAI,EAAE,CAAC;AACT,CAAC;AAnBD,wCAmBC;AAED,SAAgB,WAAW,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB;IACzE,MAAM,IAAI,GAAiB,GAAW,CAAC,IAAI,CAAC;IAC5C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,EAAE,CAAC,CAAC;QAC9F,OAAO;IACT,CAAC;IACD,IAAI,EAAE,CAAC;AACT,CAAC;AAPD,kCAOC"}

package/dist/bone/output/session/src/db.d.ts

@@ -0,0 +1,6 @@
+import { PoolClient } from "pg";
+export declare const pool: any;
+export declare function query<T = any>(text: string, params?: any[]): Promise<T[]>;
+export declare function queryOne<T = any>(text: string, params?: any[]): Promise<T | null>;
+export declare function execute(text: string, params?: any[]): Promise<number>;
+export declare function transaction<T>(fn: (client: PoolClient) => Promise<T>): Promise<T>;

package/dist/bone/output/session/src/db.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transaction = exports.execute = exports.queryOne = exports.query = exports.pool = void 0;
+// Generated by BoneScript compiler. DO NOT EDIT.
+const pg_1 = require("pg");
+// Lazy pool — created on first use so DATABASE_URL is read after dotenv loads
+let _pool = null;
+function getPool() {
+    if (!_pool) {
+        _pool = new pg_1.Pool({ connectionString: process.env.DATABASE_URL || "postgresql://localhost:5432/session_domain", max: 20 });
+        _pool.on("error", (err) => console.error("[DB] Pool error (non-fatal):", err.message));
+    }
+    return _pool;
+}
+exports.pool = new Proxy({}, { get(_t, p) { return getPool()[p]; } });
+async function query(text, params) {
+    try {
+        const result = await exports.pool.query(text, params);
+        return result.rows;
+    }
+    catch (e) {
+        throw new Error(`DB query failed: ${e.message}`);
+    }
+}
+exports.query = query;
+async function queryOne(text, params) {
+    try {
+        const rows = await query(text, params);
+        return rows[0] || null;
+    }
+    catch (e) {
+        throw new Error(`DB query failed: ${e.message}`);
+    }
+}
+exports.queryOne = queryOne;
+async function execute(text, params) {
+    try {
+        const result = await exports.pool.query(text, params);
+        return result.rowCount || 0;
+    }
+    catch (e) {
+        throw new Error(`DB execute failed: ${e.message}`);
+    }
+}
+exports.execute = execute;
+async function transaction(fn) {
+    const client = await exports.pool.connect();
+    try {
+        await client.query("BEGIN");
+        const result = await fn(client);
+        await client.query("COMMIT");
+        return result;
+    }
+    catch (e) {
+        await client.query("ROLLBACK");
+        throw e;
+    }
+    finally {
+        client.release();
+    }
+}
+exports.transaction = transaction;
+//# sourceMappingURL=db.js.map

package/dist/bone/output/session/src/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../../../../../bone/output/session/src/db.ts"],"names":[],"mappings":";;;AAAA,iDAAiD;AACjD,2BAAsC;AAEtC,8EAA8E;AAC9E,IAAI,KAAK,GAAgB,IAAI,CAAC;AAC9B,SAAS,OAAO;IACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,KAAK,GAAG,IAAI,SAAI,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,4CAA4C,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC1H,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACY,QAAA,IAAI,GAAG,IAAI,KAAK,CAAC,EAAU,EAAE,EAAE,GAAG,CAAC,EAAO,EAAE,CAAM,IAAI,OAAQ,OAAO,EAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAE/F,KAAK,UAAU,KAAK,CAAU,IAAY,EAAE,MAAc;IAC/D,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,YAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC,IAAW,CAAC;IAAC,CAAC;IACjF,OAAO,CAAM,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC;AAHD,sBAGC;AACM,KAAK,UAAU,QAAQ,CAAU,IAAY,EAAE,MAAc;IAClE,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAI,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAAC,CAAC;IAC1E,OAAO,CAAM,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;AACtE,CAAC;AAHD,4BAGC;AACM,KAAK,UAAU,OAAO,CAAC,IAAY,EAAE,MAAc;IACxD,IAAI,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,YAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;IAAC,CAAC;IACnF,OAAO,CAAM,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAAC,CAAC;AACxE,CAAC;AAHD,0BAGC;AACM,KAAK,UAAU,WAAW,CAAI,EAAsC;IACzE,MAAM,MAAM,GAAG,MAAM,YAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAAC,CAAC;IAClH,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAAC,MAAM,CAAC,CAAC;IAAC,CAAC;YAC9C,CAAC;QAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC/B,CAAC;AALD,kCAKC"}

package/dist/bone/output/session/src/events.d.ts

@@ -0,0 +1,26 @@
+/// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
+/// <reference types="node" />
+import { PoolClient } from "pg";
+export type EventDeliveryMode = "in_process" | "durable";
+export interface EventMetadata {
+    source: string;
+    timestamp: Date;
+    correlation_id: string;
+    causation_id: string;
+}
+export interface SystemEvent {
+    type: string;
+    payload: Record<string, unknown>;
+    metadata: EventMetadata;
+}
+type Handler = (event: SystemEvent) => Promise<void>;
+export declare const eventBus: {
+    subscribe(type: string, handler: Handler): void;
+    unsubscribe(type: string, handler: Handler): void;
+    publish(type: string, payload: Record<string, unknown>, source: string, correlationId?: string, client?: PoolClient): Promise<void>;
+    startWorker(intervalMs?: number): NodeJS.Timeout | null;
+};
+export {};

package/dist/bone/output/session/src/events.js

@@ -0,0 +1,212 @@
+"use strict";
+// Generated by BoneScript compiler. DO NOT EDIT.
+// Durable event bus with transactional outbox pattern.
+// Set EVENT_MODE=durable in .env to enable.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.eventBus = void 0;
+const uuid_1 = require("uuid");
+const db_1 = require("./db");
+const logger_1 = require("./logger");
+const metrics_1 = require("./metrics");
+const MODE = process.env.EVENT_MODE || "in_process";
+// Events requiring exactly_once delivery (deduplicated)
+const EXACTLY_ONCE_EVENTS = new Set(["SessionCompacted"]);
+// Events requiring at_least_once delivery (retried until ack)
+const AT_LEAST_ONCE_EVENTS = new Set(["SessionCreated", "SessionStateChanged", "MessageAdded", "PartUpdated"]);
+// ─── In-Process Bus ──────────────────────────────────────────────────────────
+class InProcessBus {
+    constructor() {
+        this.handlers = new Map();
+    }
+    subscribe(type, handler) {
+        const existing = this.handlers.get(type) || [];
+        existing.push(handler);
+        this.handlers.set(type, existing);
+    }
+    unsubscribe(type, handler) {
+        const existing = this.handlers.get(type);
+        if (!existing)
+            return;
+        const filtered = existing.filter(h => h !== handler);
+        if (filtered.length === 0) {
+            this.handlers.delete(type);
+        }
+        else {
+            this.handlers.set(type, filtered);
+        }
+    }
+    async publish(type, payload, source, correlationId) {
+        const event = {
+            type,
+            payload,
+            metadata: {
+                source,
+                timestamp: new Date(),
+                correlation_id: correlationId || (0, uuid_1.v4)(),
+                causation_id: (0, uuid_1.v4)(),
+            },
+        };
+        (0, metrics_1.counter)("event.published", { type, mode: "in_process" });
+        const handlers = this.handlers.get(type) || [];
+        for (const handler of handlers) {
+            try {
+                await handler(event);
+                (0, metrics_1.counter)("event.delivered", { type, mode: "in_process" });
+            }
+            catch (e) {
+                (0, metrics_1.counter)("event.delivery_failed", { type, mode: "in_process" });
+                logger_1.logger.error("event_handler_failed", { event: type, metadata: { error: e.message } });
+            }
+        }
+    }
+}
+// ─── Durable Bus (Transactional Outbox) ──────────────────────────────────────
+class DurableBus {
+    constructor() {
+        this.handlers = new Map();
+    }
+    subscribe(type, handler) {
+        const existing = this.handlers.get(type) || [];
+        existing.push(handler);
+        this.handlers.set(type, existing);
+    }
+    unsubscribe(type, handler) {
+        const existing = this.handlers.get(type);
+        if (!existing)
+            return;
+        const filtered = existing.filter(h => h !== handler);
+        if (filtered.length === 0) {
+            this.handlers.delete(type);
+        }
+        else {
+            this.handlers.set(type, filtered);
+        }
+    }
+    // Write event to outbox within the current transaction (or a new one)
+    async publish(type, payload, source, correlationId, client) {
+        const eventId = (0, uuid_1.v4)();
+        const corrId = correlationId || (0, uuid_1.v4)();
+        const sql = `
+      INSERT INTO event_outbox (id, event_type, payload, source, correlation_id)
+      VALUES ($1, $2, $3, $4, $5)
+    `;
+        const params = [eventId, type, JSON.stringify({ ...payload, _event_id: eventId }), source, corrId];
+        if (client) {
+            // Write within caller's transaction — atomicity guaranteed
+            await client.query(sql, params);
+        }
+        else {
+            await db_1.pool.query(sql, params);
+        }
+        (0, metrics_1.counter)("event.outboxed", { type });
+    }
+    // Called by the background worker
+    async flush() {
+        const client = await db_1.pool.connect();
+        try {
+            await client.query("BEGIN");
+            // Fetch pending events (lock rows to prevent concurrent processing)
+            const { rows } = await client.query(`
+        SELECT id, event_type, payload, source, correlation_id, attempts
+        FROM event_outbox
+        WHERE status = 'pending' AND scheduled_at <= NOW()
+        ORDER BY scheduled_at ASC
+        LIMIT 50
+        FOR UPDATE SKIP LOCKED
+      `);
+            for (const row of rows) {
+                try {
+                    // exactly_once: check deduplication table
+                    if (EXACTLY_ONCE_EVENTS.has(row.event_type)) {
+                        const { rows: dup } = await client.query("SELECT 1 FROM event_processed WHERE event_id = $1", [row.payload._event_id || row.id]);
+                        if (dup.length > 0) {
+                            await client.query("UPDATE event_outbox SET status = 'delivered', delivered_at = NOW() WHERE id = $1", [row.id]);
+                            continue;
+                        }
+                    }
+                    const event = {
+                        type: row.event_type,
+                        payload: row.payload,
+                        metadata: {
+                            source: row.source,
+                            timestamp: new Date(),
+                            correlation_id: row.correlation_id,
+                            causation_id: (0, uuid_1.v4)(),
+                        },
+                    };
+                    const handlers = this.handlers.get(row.event_type) || [];
+                    for (const handler of handlers) {
+                        await handler(event);
+                    }
+                    // Mark delivered
+                    await client.query("UPDATE event_outbox SET status = 'delivered', delivered_at = NOW(), attempts = attempts + 1 WHERE id = $1", [row.id]);
+                    // Record for exactly_once deduplication
+                    if (EXACTLY_ONCE_EVENTS.has(row.event_type)) {
+                        await client.query("INSERT INTO event_processed (event_id, event_type) VALUES ($1, $2) ON CONFLICT DO NOTHING", [row.payload._event_id || row.id, row.event_type]);
+                    }
+                    (0, metrics_1.counter)("event.delivered", { type: row.event_type, mode: "durable" });
+                }
+                catch (e) {
+                    const maxAttempts = AT_LEAST_ONCE_EVENTS.has(row.event_type) ? 10 : 3;
+                    const newAttempts = row.attempts + 1;
+                    const status = newAttempts >= maxAttempts ? "dead_letter" : "pending";
+                    const backoffMs = Math.min(1000 * Math.pow(2, newAttempts), 300000);
+                    await client.query(`UPDATE event_outbox
+             SET attempts = $1, last_error = $2, status = $3,
+                 scheduled_at = NOW() + ($4 || ' milliseconds')::interval
+             WHERE id = $5`, [newAttempts, e.message, status, backoffMs, row.id]);
+                    (0, metrics_1.counter)("event.delivery_failed", { type: row.event_type, mode: "durable" });
+                    logger_1.logger.error("event_delivery_failed", { event: row.event_type, metadata: { error: e.message, attempts: newAttempts } });
+                }
+            }
+            await client.query("COMMIT");
+        }
+        catch (e) {
+            await client.query("ROLLBACK");
+            throw e;
+        }
+        finally {
+            client.release();
+        }
+    }
+    // Start background worker
+    startWorker(intervalMs = 1000) {
+        logger_1.logger.info("event_worker_started", { event: "startup", metadata: { interval_ms: intervalMs } });
+        return setInterval(async () => {
+            try {
+                await this.flush();
+            }
+            catch (e) {
+                logger_1.logger.error("event_worker_error", { event: "flush_failed", metadata: { error: e.message } });
+            }
+        }, intervalMs);
+    }
+}
+// ─── Unified Interface ────────────────────────────────────────────────────────
+const inProcess = new InProcessBus();
+const durable = new DurableBus();
+exports.eventBus = {
+    subscribe(type, handler) {
+        inProcess.subscribe(type, handler);
+        durable.subscribe(type, handler);
+    },
+    unsubscribe(type, handler) {
+        inProcess.unsubscribe(type, handler);
+        durable.unsubscribe(type, handler);
+    },
+    async publish(type, payload, source, correlationId, client) {
+        if (MODE === "durable") {
+            await durable.publish(type, payload, source, correlationId, client);
+        }
+        else {
+            await inProcess.publish(type, payload, source, correlationId);
+        }
+    },
+    startWorker(intervalMs) {
+        if (MODE === "durable") {
+            return durable.startWorker(intervalMs);
+        }
+        return null;
+    },
+};
+//# sourceMappingURL=events.js.map

package/dist/bone/output/session/src/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../../../../bone/output/session/src/events.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,uDAAuD;AACvD,4CAA4C;;;AAG5C,+BAAkC;AAClC,6BAA4B;AAC5B,qCAAkC;AAClC,uCAAoC;AAIpC,MAAM,IAAI,GACP,OAAO,CAAC,GAAG,CAAC,UAAgC,IAAI,YAAY,CAAC;AAEhE,wDAAwD;AACxD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAElE,8DAA8D;AAC9D,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAS,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAiBvH,gFAAgF;AAEhF,MAAM,YAAY;IAAlB;QACU,aAAQ,GAA2B,IAAI,GAAG,EAAE,CAAC;IA0CvD,CAAC;IAxCC,SAAS,CAAC,IAAY,EAAE,OAAgB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,OAAgB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,OAAgC,EAAE,MAAc,EAAE,aAAsB;QAClG,MAAM,KAAK,GAAgB;YACzB,IAAI;YACJ,OAAO;YACP,QAAQ,EAAE;gBACR,MAAM;gBACN,SAAS,EAAE,IAAI,IAAI,EAAE;gBACrB,cAAc,EAAE,aAAa,IAAI,IAAA,SAAI,GAAE;gBACvC,YAAY,EAAE,IAAA,SAAI,GAAE;aACrB;SACF,CAAC;QACF,IAAA,iBAAO,EAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;gBACrB,IAAA,iBAAO,EAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,IAAA,iBAAO,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;gBAC/D,eAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;IACH,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,UAAU;IAAhB;QACU,aAAQ,GAA2B,IAAI,GAAG,EAAE,CAAC;IAiJvD,CAAC;IA/IC,SAAS,CAAC,IAAY,EAAE,OAAgB;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACpC,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,OAAgB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,OAAgC,EAChC,MAAc,EACd,aAAsB,EACtB,MAAmB;QAEnB,MAAM,OAAO,GAAG,IAAA,SAAI,GAAE,CAAC;QACvB,MAAM,MAAM,GAAG,aAAa,IAAI,IAAA,SAAI,GAAE,CAAC;QACvC,MAAM,GAAG,GAAG;;;KAGX,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAEnG,IAAI,MAAM,EAAE,CAAC;YACX,2DAA2D;YAC3D,MAAM,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,MAAM,SAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAA,iBAAO,EAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,kCAAkC;IAClC,KAAK,CAAC,KAAK;QACT,MAAM,MAAM,GAAG,MAAM,SAAI,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAE5B,oEAAoE;YACpE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;OAOnC,CAAC,CAAC;YAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,0CAA0C;oBAC1C,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5C,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,KAAK,CACtC,mDAAmD,EACnD,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC,CAClC,CAAC;wBACF,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;4BACnB,MAAM,MAAM,CAAC,KAAK,CAChB,kFAAkF,EAClF,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;4BACF,SAAS;wBACX,CAAC;oBACH,CAAC;oBAED,MAAM,KAAK,GAAgB;wBACzB,IAAI,EAAE,GAAG,CAAC,UAAU;wBACpB,OAAO,EAAE,GAAG,CAAC,OAAO;wBACpB,QAAQ,EAAE;4BACR,MAAM,EAAE,GAAG,CAAC,MAAM;4BAClB,SAAS,EAAE,IAAI,IAAI,EAAE;4BACrB,cAAc,EAAE,GAAG,CAAC,cAAc;4BAClC,YAAY,EAAE,IAAA,SAAI,GAAE;yBACrB;qBACF,CAAC;oBAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;oBACzD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;wBAC/B,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;oBACvB,CAAC;oBAED,iBAAiB;oBACjB,MAAM,MAAM,CAAC,KAAK,CAChB,2GAA2G,EAC3G,CAAC,GAAG,CAAC,EAAE,CAAC,CACT,CAAC;oBAEF,wCAAwC;oBACxC,IAAI,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;wBAC5C,MAAM,MAAM,CAAC,KAAK,CAChB,2FAA2F,EAC3F,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAClD,CAAC;oBACJ,CAAC;oBAED,IAAA,iBAAO,EAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBACxE,CAAC;gBAAC,OAAO,CAAM,EAAE,CAAC;oBAChB,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtE,MAAM,WAAW,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;oBACrC,MAAM,MAAM,GAAG,WAAW,IAAI,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;oBACtE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAC;oBACpE,MAAM,MAAM,CAAC,KAAK,CAChB;;;2BAGe,EACf,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CACpD,CAAC;oBACF,IAAA,iBAAO,EAAC,uBAAuB,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC5E,eAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;gBAC1H,CAAC;YACH,CAAC;YAED,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,CAAC,CAAC;QACV,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;IAED,0BAA0B;IAC1B,WAAW,CAAC,aAAqB,IAAI;QACnC,eAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACjG,OAAO,WAAW,CAAC,KAAK,IAAI,EAAE;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,eAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAChG,CAAC;QACH,CAAC,EAAE,UAAU,CAAC,CAAC;IACjB,CAAC;CACF;AAED,iFAAiF;AAEjF,MAAM,SAAS,GAAG,IAAI,YAAY,EAAE,CAAC;AACrC,MAAM,OAAO,GAAG,IAAI,UAAU,EAAE,CAAC;AAEpB,QAAA,QAAQ,GAAG;IACtB,SAAS,CAAC,IAAY,EAAE,OAAgB;QACtC,SAAS,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACnC,CAAC;IAED,WAAW,CAAC,IAAY,EAAE,OAAgB;QACxC,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,OAAO,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,OAAO,CACX,IAAY,EACZ,OAAgC,EAChC,MAAc,EACd,aAAsB,EACtB,MAAmB;QAEnB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,WAAW,CAAC,UAAmB;QAC7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF,CAAC"}

package/dist/bone/output/session/src/extensions.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Extension point: activate_session
+ * STABLE: implementation required.
+ */
+export declare function activate_session(session_id: string): Promise<boolean>;
+/**
+ * Extension point: deactivate_session
+ * Optional.
+ */
+export declare function deactivate_session(session_id: string): Promise<void>;
+/**
+ * Extension point: send_prompt_to_llm
+ * STABLE: implementation required.
+ */
+export declare function send_prompt_to_llm(session_id: string, message_id: string): Promise<Record<string, unknown>>;
+/**
+ * Extension point: cancel_llm_request
+ * Optional.
+ */
+export declare function cancel_llm_request(session_id: string): Promise<void>;
+/**
+ * Extension point: execute_tool_calls
+ * STABLE: implementation required.
+ */
+export declare function execute_tool_calls(session_id: string, tool_calls: Array<{
+    id: string;
+    tool_name: string;
+    tool_input: Record<string, unknown>;
+}>): Promise<Array<{
+    id: string;
+    result: {
+        success: boolean;
+        output?: string;
+        error?: string;
+    };
+}>>;
+/**
+ * Extension point: revert_tool_effects
+ * Optional.
+ */
+export declare function revert_tool_effects(session_id: string): Promise<void>;

package/dist/bone/output/session/src/extensions.js

@@ -0,0 +1,217 @@
+"use strict";
+// Generated by BoneScript compiler.
+// Extension points: implement the functions below.
+// Code between sentinel comments is preserved on recompile.
+// DO NOT remove the sentinel comments.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revert_tool_effects = exports.execute_tool_calls = exports.cancel_llm_request = exports.send_prompt_to_llm = exports.deactivate_session = exports.activate_session = void 0;
+const db_1 = require("./db");
+const logger_1 = require("./logger");
+const metrics_1 = require("./metrics");
+const websocket_1 = require("./websocket");
+// ─── LLM helpers ─────────────────────────────────────────────────────────────
+function llmFetch(body) {
+    const baseUrl = process.env.OPENAI_BASE_URL || "https://api.openai.com/v1";
+    const apiKey = process.env.OPENAI_API_KEY || "not-needed";
+    return fetch(`${baseUrl}/chat/completions`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json", Authorization: `Bearer ${apiKey}` },
+        body: JSON.stringify(body),
+    });
+}
+/**
+ * Extension point: activate_session
+ * STABLE: implementation required.
+ */
+async function activate_session(session_id) {
+    // <bonescript:ext:activate_session:begin>
+    const row = await (0, db_1.queryOne)("SELECT state FROM sessions WHERE id = $1", [session_id]);
+    if (!row)
+        return false;
+    if (row.state === "active" || row.state === "busy")
+        return true;
+    if (!["created", "compacting", "archived"].includes(row.state))
+        return false;
+    await (0, db_1.query)("UPDATE sessions SET state = 'active', updated_at = NOW() WHERE id = $1", [session_id]);
+    return true;
+    // <bonescript:ext:activate_session:end>
+}
+exports.activate_session = activate_session;
+/**
+ * Extension point: deactivate_session
+ * Optional.
+ */
+async function deactivate_session(session_id) {
+    // <bonescript:ext:deactivate_session:begin>
+    await (0, db_1.query)("UPDATE sessions SET state = 'active', updated_at = NOW() WHERE id = $1 AND state = 'busy'", [session_id]);
+    // <bonescript:ext:deactivate_session:end>
+}
+exports.deactivate_session = deactivate_session;
+/**
+ * Extension point: send_prompt_to_llm
+ * STABLE: implementation required.
+ */
+async function send_prompt_to_llm(session_id, message_id) {
+    // <bonescript:ext:send_prompt_to_llm:begin>
+    // Load agent config
+    const agentRow = await (0, db_1.queryOne)("SELECT * FROM agent_instances WHERE session_id = $1 AND state IN ('running','waiting_for_tool') ORDER BY created_at DESC LIMIT 1", [session_id]);
+    if (!agentRow)
+        throw new Error(`No active agent for session ${session_id}`);
+    // Load message history with parts
+    const messages = await (0, db_1.query)(`SELECT m.id, m.role, m.model_id, m.provider_id,
+            json_agg(p.* ORDER BY p.order_index) FILTER (WHERE p.id IS NOT NULL) AS parts
+     FROM messages m
+     LEFT JOIN parts p ON p.message_id = m.id
+     WHERE m.session_id = $1
+     GROUP BY m.id ORDER BY m.created_at ASC`, [session_id]);
+    // Build AI SDK message array
+    const aiMessages = messages.map((m) => {
+        const parts = m.parts || [];
+        if (m.role === "user") {
+            return { role: "user", content: parts.filter((p) => p.part_type === "text").map((p) => ({ type: "text", text: p.data?.text || "" })) };
+        }
+        if (m.role === "assistant") {
+            const content = [];
+            for (const p of parts) {
+                if (p.part_type === "text")
+                    content.push({ type: "text", text: p.data?.text || "" });
+                else if (p.part_type === "tool_invocation")
+                    content.push({ type: "tool-call", toolCallId: p.data?.tool_call_id, toolName: p.data?.tool_name, args: p.data?.args });
+            }
+            return { role: "assistant", content };
+        }
+        if (m.role === "tool") {
+            return { role: "tool", content: parts.filter((p) => p.part_type === "tool_result").map((p) => ({ type: "tool-result", toolCallId: p.data?.tool_call_id, toolName: p.data?.tool_name, result: p.data?.result })) };
+        }
+        return { role: m.role, content: "" };
+    });
+    // Inject codebase context using no-embedding strategies
+    // (FTS, git recency, session history, import graph, instruction files)
+    let systemPrompt = agentRow.config?.system_prompt || agentRow.system_prompt || "";
+    try {
+        const lastUserMsg = messages.filter((m) => m.role === "user").slice(-1)[0];
+        const userText = (lastUserMsg?.parts || []).filter((p) => p.part_type === "text").map((p) => p.data?.text || "").join(" ");
+        if (userText) {
+            // Get project + worktree for this session
+            const sessionRow = await (0, db_1.queryOne)(`SELECT s.project_id, p.worktree FROM sessions s JOIN projects p ON p.id = s.project_id WHERE s.id = $1`, [session_id]);
+            if (sessionRow?.worktree) {
+                const { buildContext, formatContextForPrompt } = await Promise.resolve().then(() => __importStar(require("../../../../src/context_builder")));
+                const ctxResult = await buildContext({
+                    session_id,
+                    project_id: sessionRow.project_id,
+                    worktree: sessionRow.worktree,
+                    query: userText,
+                    max_chunks: 10,
+                    max_chars: 10000,
+                });
+                const ctxText = formatContextForPrompt(ctxResult, sessionRow.worktree);
+                if (ctxText) {
+                    systemPrompt += `\n\n${ctxText}`;
+                    logger_1.logger.info("context_injected", { event: "context", metadata: { summary: ctxResult.summary } });
+                }
+            }
+        }
+    }
+    catch (e) {
+        logger_1.logger.error("context_build_failed", { event: "context", metadata: { error: e.message } });
+    }
+    // Call the LLM
+    const model = agentRow.model_id || process.env.DEFAULT_MODEL || "local-model";
+    const r = await llmFetch({
+        model,
+        messages: aiMessages,
+        system: systemPrompt || undefined,
+        temperature: agentRow.temperature ?? 0.7,
+        max_tokens: agentRow.max_tokens ?? 2048,
+    });
+    if (!r.ok)
+        throw new Error(`LLM API error ${r.status}: ${await r.text()}`);
+    const data = await r.json();
+    const msg = data.choices?.[0]?.message;
+    const text = msg?.content || msg?.reasoning_content || "";
+    const toolCalls = msg?.tool_calls || [];
+    const usage = data.usage || {};
+    // Update agent token/cost counters
+    await (0, db_1.query)("UPDATE agent_instances SET total_tokens_in = total_tokens_in + $2, total_tokens_out = total_tokens_out + $3, context_window_used = context_window_used + $4, updated_at = NOW() WHERE id = $1", [agentRow.id, usage.prompt_tokens || 0, usage.completion_tokens || 0, (usage.prompt_tokens || 0) + (usage.completion_tokens || 0)]);
+    // Broadcast text delta to WebSocket part_stream channel
+    if (text) {
+        (0, websocket_1.broadcastToChannel)("part_stream", { type: "part.delta", session_id, message_id, delta: { type: "text", text } });
+    }
+    (0, metrics_1.counter)("llm.request.completed", { model, finish_reason: data.choices?.[0]?.finish_reason || "unknown" });
+    return {
+        text,
+        tool_calls: toolCalls,
+        usage: { input_tokens: usage.prompt_tokens || 0, output_tokens: usage.completion_tokens || 0 },
+        finish_reason: data.choices?.[0]?.finish_reason,
+    };
+    // <bonescript:ext:send_prompt_to_llm:end>
+}
+exports.send_prompt_to_llm = send_prompt_to_llm;
+/**
+ * Extension point: cancel_llm_request
+ * Optional.
+ */
+async function cancel_llm_request(session_id) {
+    // <bonescript:ext:cancel_llm_request:begin>
+    // In-flight requests tracked by AbortController — signal abort
+    const controller = activeRequests.get(session_id);
+    if (controller) {
+        controller.abort();
+        activeRequests.delete(session_id);
+    }
+    // <bonescript:ext:cancel_llm_request:end>
+}
+exports.cancel_llm_request = cancel_llm_request;
+const activeRequests = new Map();
+/**
+ * Extension point: execute_tool_calls
+ * STABLE: implementation required.
+ */
+async function execute_tool_calls(session_id, tool_calls) {
+    // <bonescript:ext:execute_tool_calls:begin>
+    const { execute_tool_calls: execTools } = await Promise.resolve().then(() => __importStar(require("../../../../extensions/tool_executor")));
+    return execTools(session_id, tool_calls);
+    // <bonescript:ext:execute_tool_calls:end>
+}
+exports.execute_tool_calls = execute_tool_calls;
+/**
+ * Extension point: revert_tool_effects
+ * Optional.
+ */
+async function revert_tool_effects(session_id) {
+    // <bonescript:ext:revert_tool_effects:begin>
+    const snapshotRow = await (0, db_1.queryOne)("SELECT git_hash FROM snapshots WHERE session_id = $1 AND state = 'committed' ORDER BY created_at DESC LIMIT 1", [session_id]);
+    if (!snapshotRow)
+        return;
+    const wsRow = await (0, db_1.queryOne)("SELECT w.id FROM workspaces w JOIN sessions s ON s.project_id = w.project_id WHERE s.id = $1 LIMIT 1", [session_id]);
+    if (!wsRow)
+        return;
+    const { git_revert } = await Promise.resolve().then(() => __importStar(require("../../../../extensions/snapshot")));
+    await git_revert(wsRow.id, snapshotRow.git_hash);
+    // <bonescript:ext:revert_tool_effects:end>
+}
+exports.revert_tool_effects = revert_tool_effects;
+//# sourceMappingURL=extensions.js.map