bonescript-compiler 0.5.3 → 0.5.5

package/src/emit_maintenance.ts

@@ -1,459 +1,459 @@
-/**
- * BoneScript Maintenance Model Emitter
- * Generates the runtime agent that implements spec/10_MAINTENANCE_MODEL.md.
- *
- * Includes:
- * - Structured logger with fixed schema
- * - Telemetry hooks (Prometheus-style metrics)
- * - Failure rules derived from IR constraints/state machines
- * - Health check endpoints with dependency status
- */
-
-import * as IR from "./ir";
-
-// ─── Logger ──────────────────────────────────────────────────────────────────
-
-export function emitLogger(system: IR.IRSystem): string {
-  return `// Generated by BoneScript compiler. DO NOT EDIT.
-// Implements spec/10 §3 (Logging Schema)
-
-import { v4 as uuid } from "uuid";
-
-export type LogLevel = "debug" | "info" | "warn" | "error" | "fatal";
-export type LogStatus = "success" | "failure" | "timeout" | "rejected";
-
-export interface LogEntry {
-  timestamp: string;
-  level: LogLevel;
-  service: string;
-  trace_id: string;
-  span_id: string;
-  event: string;
-  duration_ms?: number;
-  status: LogStatus;
-  entity_id?: string;
-  actor_id?: string | null;
-  error_code?: string | null;
-  metadata?: Record<string, unknown>;
-}
-
-class Logger {
-  private service: string;
-
-  constructor(service: string) {
-    this.service = service;
-  }
-
-  emit(entry: Omit<LogEntry, "timestamp" | "service" | "span_id">): void {
-    const full: LogEntry = {
-      timestamp: new Date().toISOString(),
-      service: this.service,
-      span_id: uuid(),
-      ...entry,
-    };
-    // In production: send to log aggregator. In dev: console.
-    const fn = entry.level === "error" || entry.level === "fatal" ? console.error : console.log;
-    fn(JSON.stringify(full));
-  }
-
-  info(event: string, fields: Partial<LogEntry> = {}): void {
-    this.emit({ level: "info", event, status: "success", trace_id: fields.trace_id || "", ...fields });
-  }
-
-  warn(event: string, fields: Partial<LogEntry> = {}): void {
-    this.emit({ level: "warn", event, status: "rejected", trace_id: fields.trace_id || "", ...fields });
-  }
-
-  error(event: string, fields: Partial<LogEntry> = {}): void {
-    this.emit({ level: "error", event, status: "failure", trace_id: fields.trace_id || "", ...fields });
-  }
-
-  debug(event: string, fields: Partial<LogEntry> = {}): void {
-    if (process.env.LOG_LEVEL === "debug") {
-      this.emit({ level: "debug", event, status: "success", trace_id: fields.trace_id || "", ...fields });
-    }
-  }
-}
-
-export function createLogger(service: string): Logger {
-  return new Logger(service);
-}
-
-export const logger = createLogger("${system.name}");
-`;
-}
-
-// ─── Metrics ─────────────────────────────────────────────────────────────────
-
-export function emitMetrics(): string {
-  return `// Generated by BoneScript compiler. DO NOT EDIT.
-// Implements spec/10 §4 (Telemetry Hooks)
-
-interface Counter {
-  type: "counter";
-  value: number;
-  labels: Record<string, string>;
-}
-
-interface Histogram {
-  type: "histogram";
-  values: number[];
-  labels: Record<string, string>;
-}
-
-interface Gauge {
-  type: "gauge";
-  value: number;
-  labels: Record<string, string>;
-}
-
-type Metric = Counter | Histogram | Gauge;
-
-const metrics: Map<string, Metric> = new Map();
-
-function key(name: string, labels: Record<string, string>): string {
-  const parts = Object.keys(labels).sort().map(k => \`\${k}="\${labels[k]}"\`);
-  return parts.length > 0 ? \`\${name}{\${parts.join(",")}}\` : name;
-}
-
-export function counter(name: string, labels: Record<string, string> = {}): void {
-  const k = key(name, labels);
-  const existing = metrics.get(k);
-  if (existing && existing.type === "counter") {
-    existing.value++;
-  } else {
-    metrics.set(k, { type: "counter", value: 1, labels });
-  }
-}
-
-export function histogram(name: string, value: number, labels: Record<string, string> = {}): void {
-  const k = key(name, labels);
-  const existing = metrics.get(k);
-  if (existing && existing.type === "histogram") {
-    existing.values.push(value);
-  } else {
-    metrics.set(k, { type: "histogram", values: [value], labels });
-  }
-}
-
-export function gauge(name: string, value: number, labels: Record<string, string> = {}): void {
-  const k = key(name, labels);
-  metrics.set(k, { type: "gauge", value, labels });
-}
-
-export function dump(): string {
-  const lines: string[] = [];
-  for (const [k, m] of metrics.entries()) {
-    if (m.type === "counter" || m.type === "gauge") {
-      lines.push(\`\${k} \${m.value}\`);
-    } else {
-      const sum = m.values.reduce((a, b) => a + b, 0);
-      const count = m.values.length;
-      const avg = count > 0 ? sum / count : 0;
-      lines.push(\`\${k}_count \${count}\`);
-      lines.push(\`\${k}_sum \${sum}\`);
-      lines.push(\`\${k}_avg \${avg.toFixed(2)}\`);
-    }
-  }
-  return lines.join("\\n");
-}
-
-export function reset(): void {
-  metrics.clear();
-}
-`;
-}
-
-// ─── Health Checks ───────────────────────────────────────────────────────────
-
-export function emitHealthChecks(system: IR.IRSystem): string {
-  const lines: string[] = [];
-  lines.push(`// Generated by BoneScript compiler. DO NOT EDIT.`);
-  lines.push(`// Implements spec/10 §5 (Health Checks)`);
-  lines.push(``);
-  lines.push(`import { Router, Request, Response } from "express";`);
-  lines.push(`import { pool } from "./db";`);
-  lines.push(`import { dump as dumpMetrics } from "./metrics";`);
-  lines.push(``);
-  lines.push(`export const healthRouter = Router();`);
-  lines.push(``);
-
-  // Liveness: process is running
-  lines.push(`// Liveness — is the process running?`);
-  lines.push(`healthRouter.get("/live", (_req: Request, res: Response) => {`);
-  lines.push(`  res.json({ status: "ok", timestamp: new Date().toISOString() });`);
-  lines.push(`});`);
-  lines.push(``);
-
-  // Readiness: dependencies are healthy
-  lines.push(`// Readiness — can the service accept requests?`);
-  lines.push(`healthRouter.get("/ready", async (_req: Request, res: Response) => {`);
-  lines.push(`  const checks: Record<string, { ok: boolean; message?: string }> = {};`);
-  lines.push(``);
-
-  // Check database
-  const hasDataStore = system.modules.some(m => m.kind === "data_store");
-  if (hasDataStore) {
-    lines.push(`  // Postgres`);
-    lines.push(`  try {`);
-    lines.push(`    await pool.query("SELECT 1");`);
-    lines.push(`    checks.postgres = { ok: true };`);
-    lines.push(`  } catch (e: any) {`);
-    lines.push(`    checks.postgres = { ok: false, message: e.message };`);
-    lines.push(`  }`);
-    lines.push(``);
-  }
-
-  lines.push(`  const allOk = Object.values(checks).every(c => c.ok);`);
-  lines.push(`  res.status(allOk ? 200 : 503).json({`);
-  lines.push(`    status: allOk ? "ok" : "degraded",`);
-  lines.push(`    checks,`);
-  lines.push(`    timestamp: new Date().toISOString(),`);
-  lines.push(`  });`);
-  lines.push(`});`);
-  lines.push(``);
-
-  // Startup probe
-  lines.push(`// Startup — has initialization completed?`);
-  lines.push(`healthRouter.get("/startup", (_req: Request, res: Response) => {`);
-  lines.push(`  res.json({ status: "ok", uptime: process.uptime() });`);
-  lines.push(`});`);
-  lines.push(``);
-
-  // Metrics endpoint
-  lines.push(`// Prometheus-style metrics`);
-  lines.push(`healthRouter.get("/metrics", (_req: Request, res: Response) => {`);
-  lines.push(`  res.type("text/plain").send(dumpMetrics());`);
-  lines.push(`});`);
-  lines.push(``);
-
-  return lines.join("\n");
-}
-
-// ─── Failure Rules ───────────────────────────────────────────────────────────
-
-export function emitFailureRules(system: IR.IRSystem): string {
-  const lines: string[] = [];
-  lines.push(`// Generated by BoneScript compiler. DO NOT EDIT.`);
-  lines.push(`// Implements spec/10 §6 (Failure Rules)`);
-  lines.push(`//`);
-  lines.push(`// Each rule has: condition, detection, remediation, escalation.`);
-  lines.push(`// Rules are derived from the program's constraints, state machines,`);
-  lines.push(`// dependencies, events, and flows. All rule-based — no ML.`);
-  lines.push(``);
-  lines.push(`import { logger } from "./logger";`);
-  lines.push(`import { counter, gauge } from "./metrics";`);
-  lines.push(``);
-
-  lines.push(`export interface FailureRule {`);
-  lines.push(`  id: string;`);
-  lines.push(`  condition: string;`);
-  lines.push(`  detection: string;`);
-  lines.push(`  remediation: () => Promise<void>;`);
-  lines.push(`  rollback: boolean;`);
-  lines.push(`}`);
-  lines.push(``);
-
-  lines.push(`export const RULES: FailureRule[] = [`);
-
-  // From state machines
-  for (const mod of system.modules) {
-    for (const sm of mod.state_machines) {
-      lines.push(`  {`);
-      lines.push(`    id: "invalid_transition_${sm.entity}",`);
-      lines.push(`    condition: "Attempted state transition not in declared machine",`);
-      lines.push(`    detection: "Log with error_code=INVALID_TRANSITION",`);
-      lines.push(`    remediation: async () => {`);
-      lines.push(`      counter("constraint.violated", { entity: "${sm.entity}", kind: "invalid_transition" });`);
-      lines.push(`      logger.warn("invalid_transition_blocked", { entity_id: "${sm.entity}", error_code: "INVALID_TRANSITION" });`);
-      lines.push(`    },`);
-      lines.push(`    rollback: false,`);
-      lines.push(`  },`);
-    }
-  }
-
-  // From dependencies (one circuit breaker per dependency edge)
-  for (const mod of system.modules) {
-    for (const dep of mod.dependencies) {
-      const target = system.modules.find(m => m.id === dep);
-      if (!target) continue;
-      lines.push(`  {`);
-      lines.push(`    id: "dependency_failure_${mod.name}_to_${target.name}",`);
-      lines.push(`    condition: "Dependency unreachable or returning errors",`);
-      lines.push(`    detection: "Error rate > 50% in 30s window",`);
-      lines.push(`    remediation: async () => {`);
-      lines.push(`      counter("circuit_breaker.opened", { service: "${mod.name}", target: "${target.name}" });`);
-      lines.push(`      gauge("circuit_breaker.open", 1, { service: "${mod.name}", target: "${target.name}" });`);
-      lines.push(`      logger.error("circuit_breaker_open", { service: "${mod.name}" });`);
-      lines.push(`    },`);
-      lines.push(`    rollback: false,`);
-      lines.push(`  },`);
-    }
-  }
-
-  // From events
-  for (const ev of system.events) {
-    lines.push(`  {`);
-    lines.push(`    id: "event_delivery_failure_${ev.name}",`);
-    lines.push(`    condition: "Event not acknowledged within TTL",`);
-    lines.push(`    detection: "Event age > ${ev.ttl_ms || "TTL"} ms",`);
-    lines.push(`    remediation: async () => {`);
-    lines.push(`      counter("event.delivery_failed", { event: "${ev.name}" });`);
-    lines.push(`      logger.error("event_delivery_failed", { event: "${ev.name}", error_code: "DELIVERY_TIMEOUT" });`);
-    lines.push(`    },`);
-    lines.push(`    rollback: ${ev.delivery === "exactly_once" ? "true" : "false"},`);
-    lines.push(`  },`);
-  }
-
-  // From flows
-  for (const flow of system.flows) {
-    for (const step of flow.steps) {
-      lines.push(`  {`);
-      lines.push(`    id: "flow_step_failure_${flow.name}_${step.name}",`);
-      lines.push(`    condition: "Flow step failed after max retries",`);
-      lines.push(`    detection: "Step returns error after retry policy exhausted",`);
-      lines.push(`    remediation: async () => {`);
-      lines.push(`      counter("flow.step_failed", { flow: "${flow.name}", step: "${step.name}" });`);
-      lines.push(`      // Trigger compensation: ${step.compensation || "none"}`);
-      lines.push(`      logger.error("flow_step_failed", { event: "${flow.name}.${step.name}", error_code: "STEP_FAILED" });`);
-      lines.push(`    },`);
-      lines.push(`    rollback: true,`);
-      lines.push(`  },`);
-    }
-  }
-
-  lines.push(`];`);
-  lines.push(``);
-  lines.push(`export function findRule(id: string): FailureRule | undefined {`);
-  lines.push(`  return RULES.find(r => r.id === id);`);
-  lines.push(`}`);
-  lines.push(``);
-  lines.push(`export async function triggerRule(id: string): Promise<void> {`);
-  lines.push(`  const rule = findRule(id);`);
-  lines.push(`  if (!rule) {`);
-  lines.push(`    logger.warn("unknown_rule_triggered", { event: "rule_lookup", error_code: "UNKNOWN_RULE", metadata: { id } });`);
-  lines.push(`    return;`);
-  lines.push(`  }`);
-  lines.push(`  try {`);
-  lines.push(`    await rule.remediation();`);
-  lines.push(`  } catch (e: any) {`);
-  lines.push(`    logger.error("remediation_failed", { event: id, error_code: "REMEDIATION_FAILED", metadata: { error: e.message } });`);
-  lines.push(`  }`);
-  lines.push(`}`);
-
-  return lines.join("\n");
-}
-
-// ─── Migration Diff Generator ────────────────────────────────────────────────
-
-export function emitMigrationDiff(): string {
-  return `// Generated by BoneScript compiler. DO NOT EDIT.
-// Migration diff utility — compares two IR snapshots and produces ALTER statements.
-
-import * as fs from "fs";
-
-interface Field {
-  name: string;
-  type: string;
-  nullable: boolean;
-}
-
-interface Model {
-  name: string;
-  fields: Field[];
-  primary_key: string;
-}
-
-export function diffModels(oldModels: Model[], newModels: Model[]): string[] {
-  const statements: string[] = [];
-  const oldByName = new Map(oldModels.map(m => [m.name, m]));
-  const newByName = new Map(newModels.map(m => [m.name, m]));
-
-  // New tables
-  for (const [name, model] of newByName) {
-    if (!oldByName.has(name)) {
-      const tableName = toSnake(name) + "s";
-      statements.push(\`-- New table: \${tableName}\`);
-      statements.push(\`-- (Generated by previous migration)\`);
-    }
-  }
-
-  // Removed tables (warn but don't auto-drop)
-  for (const [name] of oldByName) {
-    if (!newByName.has(name)) {
-      const tableName = toSnake(name) + "s";
-      statements.push(\`-- WARNING: Table \${tableName} no longer in schema. Manual DROP required.\`);
-    }
-  }
-
-  // Modified tables
-  for (const [name, newModel] of newByName) {
-    const oldModel = oldByName.get(name);
-    if (!oldModel) continue;
-
-    const tableName = toSnake(name) + "s";
-    const oldFields = new Map(oldModel.fields.map(f => [f.name, f]));
-    const newFields = new Map(newModel.fields.map(f => [f.name, f]));
-
-    // New columns (backward-compatible)
-    for (const [fname, field] of newFields) {
-      if (!oldFields.has(fname)) {
-        const sqlType = mapType(field.type);
-        const nullability = field.nullable ? "" : " NOT NULL DEFAULT (CASE WHEN false THEN NULL ELSE NULL END)";
-        statements.push(\`ALTER TABLE \${tableName} ADD COLUMN \${fname} \${sqlType}\${nullability};\`);
-      }
-    }
-
-    // Removed columns (NOT auto-dropped — backward compat)
-    for (const [fname] of oldFields) {
-      if (!newFields.has(fname)) {
-        statements.push(\`-- WARNING: Column \${tableName}.\${fname} removed from schema. Run manually: ALTER TABLE \${tableName} DROP COLUMN \${fname};\`);
-      }
-    }
-
-    // Type changes
-    for (const [fname, newField] of newFields) {
-      const oldField = oldFields.get(fname);
-      if (!oldField) continue;
-      if (oldField.type !== newField.type) {
-        const sqlType = mapType(newField.type);
-        statements.push(\`ALTER TABLE \${tableName} ALTER COLUMN \${fname} TYPE \${sqlType};\`);
-      }
-    }
-  }
-
-  return statements;
-}
-
-function toSnake(s: string): string {
-  return s.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
-}
-
-function mapType(t: string): string {
-  const map: Record<string, string> = {
-    string: "VARCHAR", uint: "BIGINT", int: "BIGINT", float: "DOUBLE PRECISION",
-    bool: "BOOLEAN", timestamp: "TIMESTAMPTZ", uuid: "UUID", bytes: "BYTEA", json: "JSONB",
-  };
-  return map[t] || "JSONB";
-}
-
-if (require.main === module) {
-  const oldFile = process.argv[2];
-  const newFile = process.argv[3];
-  if (!oldFile || !newFile) {
-    console.error("Usage: node migration-diff.js <old-ir.json> <new-ir.json>");
-    process.exit(1);
-  }
-  const oldIR = JSON.parse(fs.readFileSync(oldFile, "utf-8"));
-  const newIR = JSON.parse(fs.readFileSync(newFile, "utf-8"));
-
-  const oldModels: Model[] = [];
-  const newModels: Model[] = [];
-  for (const sys of oldIR) for (const mod of sys.modules) for (const m of mod.models) oldModels.push(m);
-  for (const sys of newIR) for (const mod of sys.modules) for (const m of mod.models) newModels.push(m);
-
-  const diff = diffModels(oldModels, newModels);
-  console.log(diff.join("\\n"));
-}
-`;
-}
+/**
+ * BoneScript Maintenance Model Emitter
+ * Generates the runtime agent that implements spec/10_MAINTENANCE_MODEL.md.
+ *
+ * Includes:
+ * - Structured logger with fixed schema
+ * - Telemetry hooks (Prometheus-style metrics)
+ * - Failure rules derived from IR constraints/state machines
+ * - Health check endpoints with dependency status
+ */
+
+import * as IR from "./ir";
+
+// ─── Logger ──────────────────────────────────────────────────────────────────
+
+export function emitLogger(system: IR.IRSystem): string {
+  return `// Generated by BoneScript compiler. DO NOT EDIT.
+// Implements spec/10 §3 (Logging Schema)
+
+import { v4 as uuid } from "uuid";
+
+export type LogLevel = "debug" | "info" | "warn" | "error" | "fatal";
+export type LogStatus = "success" | "failure" | "timeout" | "rejected";
+
+export interface LogEntry {
+  timestamp: string;
+  level: LogLevel;
+  service: string;
+  trace_id: string;
+  span_id: string;
+  event: string;
+  duration_ms?: number;
+  status: LogStatus;
+  entity_id?: string;
+  actor_id?: string | null;
+  error_code?: string | null;
+  metadata?: Record<string, unknown>;
+}
+
+class Logger {
+  private service: string;
+
+  constructor(service: string) {
+    this.service = service;
+  }
+
+  emit(entry: Omit<LogEntry, "timestamp" | "service" | "span_id">): void {
+    const full: LogEntry = {
+      timestamp: new Date().toISOString(),
+      service: this.service,
+      span_id: uuid(),
+      ...entry,
+    };
+    // In production: send to log aggregator. In dev: console.
+    const fn = entry.level === "error" || entry.level === "fatal" ? console.error : console.log;
+    fn(JSON.stringify(full));
+  }
+
+  info(event: string, fields: Partial<LogEntry> = {}): void {
+    this.emit({ level: "info", event, status: "success", trace_id: fields.trace_id || "", ...fields });
+  }
+
+  warn(event: string, fields: Partial<LogEntry> = {}): void {
+    this.emit({ level: "warn", event, status: "rejected", trace_id: fields.trace_id || "", ...fields });
+  }
+
+  error(event: string, fields: Partial<LogEntry> = {}): void {
+    this.emit({ level: "error", event, status: "failure", trace_id: fields.trace_id || "", ...fields });
+  }
+
+  debug(event: string, fields: Partial<LogEntry> = {}): void {
+    if (process.env.LOG_LEVEL === "debug") {
+      this.emit({ level: "debug", event, status: "success", trace_id: fields.trace_id || "", ...fields });
+    }
+  }
+}
+
+export function createLogger(service: string): Logger {
+  return new Logger(service);
+}
+
+export const logger = createLogger("${system.name}");
+`;
+}
+
+// ─── Metrics ─────────────────────────────────────────────────────────────────
+
+export function emitMetrics(): string {
+  return `// Generated by BoneScript compiler. DO NOT EDIT.
+// Implements spec/10 §4 (Telemetry Hooks)
+
+interface Counter {
+  type: "counter";
+  value: number;
+  labels: Record<string, string>;
+}
+
+interface Histogram {
+  type: "histogram";
+  values: number[];
+  labels: Record<string, string>;
+}
+
+interface Gauge {
+  type: "gauge";
+  value: number;
+  labels: Record<string, string>;
+}
+
+type Metric = Counter | Histogram | Gauge;
+
+const metrics: Map<string, Metric> = new Map();
+
+function key(name: string, labels: Record<string, string>): string {
+  const parts = Object.keys(labels).sort().map(k => \`\${k}="\${labels[k]}"\`);
+  return parts.length > 0 ? \`\${name}{\${parts.join(",")}}\` : name;
+}
+
+export function counter(name: string, labels: Record<string, string> = {}): void {
+  const k = key(name, labels);
+  const existing = metrics.get(k);
+  if (existing && existing.type === "counter") {
+    existing.value++;
+  } else {
+    metrics.set(k, { type: "counter", value: 1, labels });
+  }
+}
+
+export function histogram(name: string, value: number, labels: Record<string, string> = {}): void {
+  const k = key(name, labels);
+  const existing = metrics.get(k);
+  if (existing && existing.type === "histogram") {
+    existing.values.push(value);
+  } else {
+    metrics.set(k, { type: "histogram", values: [value], labels });
+  }
+}
+
+export function gauge(name: string, value: number, labels: Record<string, string> = {}): void {
+  const k = key(name, labels);
+  metrics.set(k, { type: "gauge", value, labels });
+}
+
+export function dump(): string {
+  const lines: string[] = [];
+  for (const [k, m] of metrics.entries()) {
+    if (m.type === "counter" || m.type === "gauge") {
+      lines.push(\`\${k} \${m.value}\`);
+    } else {
+      const sum = m.values.reduce((a, b) => a + b, 0);
+      const count = m.values.length;
+      const avg = count > 0 ? sum / count : 0;
+      lines.push(\`\${k}_count \${count}\`);
+      lines.push(\`\${k}_sum \${sum}\`);
+      lines.push(\`\${k}_avg \${avg.toFixed(2)}\`);
+    }
+  }
+  return lines.join("\\n");
+}
+
+export function reset(): void {
+  metrics.clear();
+}
+`;
+}
+
+// ─── Health Checks ───────────────────────────────────────────────────────────
+
+export function emitHealthChecks(system: IR.IRSystem): string {
+  const lines: string[] = [];
+  lines.push(`// Generated by BoneScript compiler. DO NOT EDIT.`);
+  lines.push(`// Implements spec/10 §5 (Health Checks)`);
+  lines.push(``);
+  lines.push(`import { Router, Request, Response } from "express";`);
+  lines.push(`import { pool } from "./db";`);
+  lines.push(`import { dump as dumpMetrics } from "./metrics";`);
+  lines.push(``);
+  lines.push(`export const healthRouter = Router();`);
+  lines.push(``);
+
+  // Liveness: process is running
+  lines.push(`// Liveness — is the process running?`);
+  lines.push(`healthRouter.get("/live", (_req: Request, res: Response) => {`);
+  lines.push(`  res.json({ status: "ok", timestamp: new Date().toISOString() });`);
+  lines.push(`});`);
+  lines.push(``);
+
+  // Readiness: dependencies are healthy
+  lines.push(`// Readiness — can the service accept requests?`);
+  lines.push(`healthRouter.get("/ready", async (_req: Request, res: Response) => {`);
+  lines.push(`  const checks: Record<string, { ok: boolean; message?: string }> = {};`);
+  lines.push(``);
+
+  // Check database
+  const hasDataStore = system.modules.some(m => m.kind === "data_store");
+  if (hasDataStore) {
+    lines.push(`  // Postgres`);
+    lines.push(`  try {`);
+    lines.push(`    await pool.query("SELECT 1");`);
+    lines.push(`    checks.postgres = { ok: true };`);
+    lines.push(`  } catch (e: any) {`);
+    lines.push(`    checks.postgres = { ok: false, message: e.message };`);
+    lines.push(`  }`);
+    lines.push(``);
+  }
+
+  lines.push(`  const allOk = Object.values(checks).every(c => c.ok);`);
+  lines.push(`  res.status(allOk ? 200 : 503).json({`);
+  lines.push(`    status: allOk ? "ok" : "degraded",`);
+  lines.push(`    checks,`);
+  lines.push(`    timestamp: new Date().toISOString(),`);
+  lines.push(`  });`);
+  lines.push(`});`);
+  lines.push(``);
+
+  // Startup probe
+  lines.push(`// Startup — has initialization completed?`);
+  lines.push(`healthRouter.get("/startup", (_req: Request, res: Response) => {`);
+  lines.push(`  res.json({ status: "ok", uptime: process.uptime() });`);
+  lines.push(`});`);
+  lines.push(``);
+
+  // Metrics endpoint
+  lines.push(`// Prometheus-style metrics`);
+  lines.push(`healthRouter.get("/metrics", (_req: Request, res: Response) => {`);
+  lines.push(`  res.type("text/plain").send(dumpMetrics());`);
+  lines.push(`});`);
+  lines.push(``);
+
+  return lines.join("\n");
+}
+
+// ─── Failure Rules ───────────────────────────────────────────────────────────
+
+export function emitFailureRules(system: IR.IRSystem): string {
+  const lines: string[] = [];
+  lines.push(`// Generated by BoneScript compiler. DO NOT EDIT.`);
+  lines.push(`// Implements spec/10 §6 (Failure Rules)`);
+  lines.push(`//`);
+  lines.push(`// Each rule has: condition, detection, remediation, escalation.`);
+  lines.push(`// Rules are derived from the program's constraints, state machines,`);
+  lines.push(`// dependencies, events, and flows. All rule-based — no ML.`);
+  lines.push(``);
+  lines.push(`import { logger } from "./logger";`);
+  lines.push(`import { counter, gauge } from "./metrics";`);
+  lines.push(``);
+
+  lines.push(`export interface FailureRule {`);
+  lines.push(`  id: string;`);
+  lines.push(`  condition: string;`);
+  lines.push(`  detection: string;`);
+  lines.push(`  remediation: () => Promise<void>;`);
+  lines.push(`  rollback: boolean;`);
+  lines.push(`}`);
+  lines.push(``);
+
+  lines.push(`export const RULES: FailureRule[] = [`);
+
+  // From state machines
+  for (const mod of system.modules) {
+    for (const sm of mod.state_machines) {
+      lines.push(`  {`);
+      lines.push(`    id: "invalid_transition_${sm.entity}",`);
+      lines.push(`    condition: "Attempted state transition not in declared machine",`);
+      lines.push(`    detection: "Log with error_code=INVALID_TRANSITION",`);
+      lines.push(`    remediation: async () => {`);
+      lines.push(`      counter("constraint.violated", { entity: "${sm.entity}", kind: "invalid_transition" });`);
+      lines.push(`      logger.warn("invalid_transition_blocked", { entity_id: "${sm.entity}", error_code: "INVALID_TRANSITION" });`);
+      lines.push(`    },`);
+      lines.push(`    rollback: false,`);
+      lines.push(`  },`);
+    }
+  }
+
+  // From dependencies (one circuit breaker per dependency edge)
+  for (const mod of system.modules) {
+    for (const dep of mod.dependencies) {
+      const target = system.modules.find(m => m.id === dep);
+      if (!target) continue;
+      lines.push(`  {`);
+      lines.push(`    id: "dependency_failure_${mod.name}_to_${target.name}",`);
+      lines.push(`    condition: "Dependency unreachable or returning errors",`);
+      lines.push(`    detection: "Error rate > 50% in 30s window",`);
+      lines.push(`    remediation: async () => {`);
+      lines.push(`      counter("circuit_breaker.opened", { service: "${mod.name}", target: "${target.name}" });`);
+      lines.push(`      gauge("circuit_breaker.open", 1, { service: "${mod.name}", target: "${target.name}" });`);
+      lines.push(`      logger.error("circuit_breaker_open", { service: "${mod.name}" });`);
+      lines.push(`    },`);
+      lines.push(`    rollback: false,`);
+      lines.push(`  },`);
+    }
+  }
+
+  // From events
+  for (const ev of system.events) {
+    lines.push(`  {`);
+    lines.push(`    id: "event_delivery_failure_${ev.name}",`);
+    lines.push(`    condition: "Event not acknowledged within TTL",`);
+    lines.push(`    detection: "Event age > ${ev.ttl_ms || "TTL"} ms",`);
+    lines.push(`    remediation: async () => {`);
+    lines.push(`      counter("event.delivery_failed", { event: "${ev.name}" });`);
+    lines.push(`      logger.error("event_delivery_failed", { event: "${ev.name}", error_code: "DELIVERY_TIMEOUT" });`);
+    lines.push(`    },`);
+    lines.push(`    rollback: ${ev.delivery === "exactly_once" ? "true" : "false"},`);
+    lines.push(`  },`);
+  }
+
+  // From flows
+  for (const flow of system.flows) {
+    for (const step of flow.steps) {
+      lines.push(`  {`);
+      lines.push(`    id: "flow_step_failure_${flow.name}_${step.name}",`);
+      lines.push(`    condition: "Flow step failed after max retries",`);
+      lines.push(`    detection: "Step returns error after retry policy exhausted",`);
+      lines.push(`    remediation: async () => {`);
+      lines.push(`      counter("flow.step_failed", { flow: "${flow.name}", step: "${step.name}" });`);
+      lines.push(`      // Trigger compensation: ${step.compensation || "none"}`);
+      lines.push(`      logger.error("flow_step_failed", { event: "${flow.name}.${step.name}", error_code: "STEP_FAILED" });`);
+      lines.push(`    },`);
+      lines.push(`    rollback: true,`);
+      lines.push(`  },`);
+    }
+  }
+
+  lines.push(`];`);
+  lines.push(``);
+  lines.push(`export function findRule(id: string): FailureRule | undefined {`);
+  lines.push(`  return RULES.find(r => r.id === id);`);
+  lines.push(`}`);
+  lines.push(``);
+  lines.push(`export async function triggerRule(id: string): Promise<void> {`);
+  lines.push(`  const rule = findRule(id);`);
+  lines.push(`  if (!rule) {`);
+  lines.push(`    logger.warn("unknown_rule_triggered", { event: "rule_lookup", error_code: "UNKNOWN_RULE", metadata: { id } });`);
+  lines.push(`    return;`);
+  lines.push(`  }`);
+  lines.push(`  try {`);
+  lines.push(`    await rule.remediation();`);
+  lines.push(`  } catch (e: any) {`);
+  lines.push(`    logger.error("remediation_failed", { event: id, error_code: "REMEDIATION_FAILED", metadata: { error: e.message } });`);
+  lines.push(`  }`);
+  lines.push(`}`);
+
+  return lines.join("\n");
+}
+
+// ─── Migration Diff Generator ────────────────────────────────────────────────
+
+export function emitMigrationDiff(): string {
+  return `// Generated by BoneScript compiler. DO NOT EDIT.
+// Migration diff utility — compares two IR snapshots and produces ALTER statements.
+
+import * as fs from "fs";
+
+interface Field {
+  name: string;
+  type: string;
+  nullable: boolean;
+}
+
+interface Model {
+  name: string;
+  fields: Field[];
+  primary_key: string;
+}
+
+export function diffModels(oldModels: Model[], newModels: Model[]): string[] {
+  const statements: string[] = [];
+  const oldByName = new Map(oldModels.map(m => [m.name, m]));
+  const newByName = new Map(newModels.map(m => [m.name, m]));
+
+  // New tables
+  for (const [name, model] of newByName) {
+    if (!oldByName.has(name)) {
+      const tableName = toSnake(name) + "s";
+      statements.push(\`-- New table: \${tableName}\`);
+      statements.push(\`-- (Generated by previous migration)\`);
+    }
+  }
+
+  // Removed tables (warn but don't auto-drop)
+  for (const [name] of oldByName) {
+    if (!newByName.has(name)) {
+      const tableName = toSnake(name) + "s";
+      statements.push(\`-- WARNING: Table \${tableName} no longer in schema. Manual DROP required.\`);
+    }
+  }
+
+  // Modified tables
+  for (const [name, newModel] of newByName) {
+    const oldModel = oldByName.get(name);
+    if (!oldModel) continue;
+
+    const tableName = toSnake(name) + "s";
+    const oldFields = new Map(oldModel.fields.map(f => [f.name, f]));
+    const newFields = new Map(newModel.fields.map(f => [f.name, f]));
+
+    // New columns (backward-compatible)
+    for (const [fname, field] of newFields) {
+      if (!oldFields.has(fname)) {
+        const sqlType = mapType(field.type);
+        const nullability = field.nullable ? "" : " NOT NULL DEFAULT (CASE WHEN false THEN NULL ELSE NULL END)";
+        statements.push(\`ALTER TABLE \${tableName} ADD COLUMN \${fname} \${sqlType}\${nullability};\`);
+      }
+    }
+
+    // Removed columns (NOT auto-dropped — backward compat)
+    for (const [fname] of oldFields) {
+      if (!newFields.has(fname)) {
+        statements.push(\`-- WARNING: Column \${tableName}.\${fname} removed from schema. Run manually: ALTER TABLE \${tableName} DROP COLUMN \${fname};\`);
+      }
+    }
+
+    // Type changes
+    for (const [fname, newField] of newFields) {
+      const oldField = oldFields.get(fname);
+      if (!oldField) continue;
+      if (oldField.type !== newField.type) {
+        const sqlType = mapType(newField.type);
+        statements.push(\`ALTER TABLE \${tableName} ALTER COLUMN \${fname} TYPE \${sqlType};\`);
+      }
+    }
+  }
+
+  return statements;
+}
+
+function toSnake(s: string): string {
+  return s.replace(/([a-z])([A-Z])/g, "$1_$2").toLowerCase();
+}
+
+function mapType(t: string): string {
+  const map: Record<string, string> = {
+    string: "VARCHAR", uint: "BIGINT", int: "BIGINT", float: "DOUBLE PRECISION",
+    bool: "BOOLEAN", timestamp: "TIMESTAMPTZ", uuid: "UUID", bytes: "BYTEA", json: "JSONB",
+  };
+  return map[t] || "JSONB";
+}
+
+if (require.main === module) {
+  const oldFile = process.argv[2];
+  const newFile = process.argv[3];
+  if (!oldFile || !newFile) {
+    console.error("Usage: node migration-diff.js <old-ir.json> <new-ir.json>");
+    process.exit(1);
+  }
+  const oldIR = JSON.parse(fs.readFileSync(oldFile, "utf-8"));
+  const newIR = JSON.parse(fs.readFileSync(newFile, "utf-8"));
+
+  const oldModels: Model[] = [];
+  const newModels: Model[] = [];
+  for (const sys of oldIR) for (const mod of sys.modules) for (const m of mod.models) oldModels.push(m);
+  for (const sys of newIR) for (const mod of sys.modules) for (const m of mod.models) newModels.push(m);
+
+  const diff = diffModels(oldModels, newModels);
+  console.log(diff.join("\\n"));
+}
+`;
+}