chainlesschain 0.132.0 → 0.143.0

package/src/lib/nostr-bridge.js

@@ -369,3 +369,108 @@ export function _resetState() {
   _keypairs.clear();
   _didMappings.clear();
 }
+
+
+// ===== V2 Surface: Nostr Bridge governance overlay (CLI v0.134.0) =====
+export const NOSTR_RELAY_MATURITY_V2 = Object.freeze({
+  PENDING: "pending", ACTIVE: "active", OFFLINE: "offline", RETIRED: "retired",
+});
+export const NOSTR_EVENT_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued", PUBLISHING: "publishing", PUBLISHED: "published", FAILED: "failed", CANCELLED: "cancelled",
+});
+
+const _nsRelayTrans = new Map([
+  [NOSTR_RELAY_MATURITY_V2.PENDING, new Set([NOSTR_RELAY_MATURITY_V2.ACTIVE, NOSTR_RELAY_MATURITY_V2.RETIRED])],
+  [NOSTR_RELAY_MATURITY_V2.ACTIVE, new Set([NOSTR_RELAY_MATURITY_V2.OFFLINE, NOSTR_RELAY_MATURITY_V2.RETIRED])],
+  [NOSTR_RELAY_MATURITY_V2.OFFLINE, new Set([NOSTR_RELAY_MATURITY_V2.ACTIVE, NOSTR_RELAY_MATURITY_V2.RETIRED])],
+  [NOSTR_RELAY_MATURITY_V2.RETIRED, new Set()],
+]);
+const _nsRelayTerminal = new Set([NOSTR_RELAY_MATURITY_V2.RETIRED]);
+const _nsEventTrans = new Map([
+  [NOSTR_EVENT_LIFECYCLE_V2.QUEUED, new Set([NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING, NOSTR_EVENT_LIFECYCLE_V2.CANCELLED])],
+  [NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING, new Set([NOSTR_EVENT_LIFECYCLE_V2.PUBLISHED, NOSTR_EVENT_LIFECYCLE_V2.FAILED, NOSTR_EVENT_LIFECYCLE_V2.CANCELLED])],
+  [NOSTR_EVENT_LIFECYCLE_V2.PUBLISHED, new Set()],
+  [NOSTR_EVENT_LIFECYCLE_V2.FAILED, new Set()],
+  [NOSTR_EVENT_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _nsRelays = new Map();
+const _nsEvents = new Map();
+let _nsMaxActivePerOwner = 10;
+let _nsMaxPendingPerRelay = 30;
+let _nsRelayIdleMs = 60 * 60 * 1000;
+let _nsEventStuckMs = 2 * 60 * 1000;
+
+function _nsPos(n, lbl) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${lbl} must be positive integer`); return v; }
+
+export function setMaxActiveNostrRelaysPerOwnerV2(n) { _nsMaxActivePerOwner = _nsPos(n, "maxActiveNostrRelaysPerOwner"); }
+export function getMaxActiveNostrRelaysPerOwnerV2() { return _nsMaxActivePerOwner; }
+export function setMaxPendingNostrEventsPerRelayV2(n) { _nsMaxPendingPerRelay = _nsPos(n, "maxPendingNostrEventsPerRelay"); }
+export function getMaxPendingNostrEventsPerRelayV2() { return _nsMaxPendingPerRelay; }
+export function setNostrRelayIdleMsV2(n) { _nsRelayIdleMs = _nsPos(n, "nostrRelayIdleMs"); }
+export function getNostrRelayIdleMsV2() { return _nsRelayIdleMs; }
+export function setNostrEventStuckMsV2(n) { _nsEventStuckMs = _nsPos(n, "nostrEventStuckMs"); }
+export function getNostrEventStuckMsV2() { return _nsEventStuckMs; }
+
+export function _resetStateNostrBridgeV2() {
+  _nsRelays.clear(); _nsEvents.clear();
+  _nsMaxActivePerOwner = 10; _nsMaxPendingPerRelay = 30;
+  _nsRelayIdleMs = 60 * 60 * 1000; _nsEventStuckMs = 2 * 60 * 1000;
+}
+
+export function registerNostrRelayV2({ id, owner, url, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_nsRelays.has(id)) throw new Error(`nostr relay ${id} already registered`);
+  const now = Date.now();
+  const r = { id, owner, url: url || "", status: NOSTR_RELAY_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, activatedAt: null, retiredAt: null, lastTouchedAt: now, metadata: { ...(metadata || {}) } };
+  _nsRelays.set(id, r);
+  return { ...r, metadata: { ...r.metadata } };
+}
+function _nsCheckR(from, to) { const a = _nsRelayTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid nostr relay transition ${from} → ${to}`); }
+function _nsCountActive(owner) { let n = 0; for (const r of _nsRelays.values()) if (r.owner === owner && r.status === NOSTR_RELAY_MATURITY_V2.ACTIVE) n++; return n; }
+
+export function activateNostrRelayV2(id) {
+  const r = _nsRelays.get(id); if (!r) throw new Error(`nostr relay ${id} not found`);
+  _nsCheckR(r.status, NOSTR_RELAY_MATURITY_V2.ACTIVE);
+  const recovery = r.status === NOSTR_RELAY_MATURITY_V2.OFFLINE;
+  if (!recovery) { const a = _nsCountActive(r.owner); if (a >= _nsMaxActivePerOwner) throw new Error(`max active nostr relays per owner (${_nsMaxActivePerOwner}) reached for ${r.owner}`); }
+  const now = Date.now(); r.status = NOSTR_RELAY_MATURITY_V2.ACTIVE; r.updatedAt = now; r.lastTouchedAt = now; if (!r.activatedAt) r.activatedAt = now;
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function offlineNostrRelayV2(id) { const r = _nsRelays.get(id); if (!r) throw new Error(`nostr relay ${id} not found`); _nsCheckR(r.status, NOSTR_RELAY_MATURITY_V2.OFFLINE); r.status = NOSTR_RELAY_MATURITY_V2.OFFLINE; r.updatedAt = Date.now(); return { ...r, metadata: { ...r.metadata } }; }
+export function retireNostrRelayV2(id) { const r = _nsRelays.get(id); if (!r) throw new Error(`nostr relay ${id} not found`); _nsCheckR(r.status, NOSTR_RELAY_MATURITY_V2.RETIRED); const now = Date.now(); r.status = NOSTR_RELAY_MATURITY_V2.RETIRED; r.updatedAt = now; if (!r.retiredAt) r.retiredAt = now; return { ...r, metadata: { ...r.metadata } }; }
+export function touchNostrRelayV2(id) { const r = _nsRelays.get(id); if (!r) throw new Error(`nostr relay ${id} not found`); if (_nsRelayTerminal.has(r.status)) throw new Error(`cannot touch terminal nostr relay ${id}`); const now = Date.now(); r.lastTouchedAt = now; r.updatedAt = now; return { ...r, metadata: { ...r.metadata } }; }
+export function getNostrRelayV2(id) { const r = _nsRelays.get(id); if (!r) return null; return { ...r, metadata: { ...r.metadata } }; }
+export function listNostrRelaysV2() { return [..._nsRelays.values()].map((r) => ({ ...r, metadata: { ...r.metadata } })); }
+
+function _nsCountPending(rid) { let n = 0; for (const e of _nsEvents.values()) if (e.relayId === rid && (e.status === NOSTR_EVENT_LIFECYCLE_V2.QUEUED || e.status === NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING)) n++; return n; }
+
+export function createNostrEventV2({ id, relayId, kind, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!relayId || typeof relayId !== "string") throw new Error("relayId is required");
+  if (_nsEvents.has(id)) throw new Error(`nostr event ${id} already exists`);
+  if (!_nsRelays.has(relayId)) throw new Error(`nostr relay ${relayId} not found`);
+  const pending = _nsCountPending(relayId);
+  if (pending >= _nsMaxPendingPerRelay) throw new Error(`max pending nostr events per relay (${_nsMaxPendingPerRelay}) reached for ${relayId}`);
+  const now = Date.now();
+  const e = { id, relayId, kind: typeof kind === "number" ? kind : 1, status: NOSTR_EVENT_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _nsEvents.set(id, e);
+  return { ...e, metadata: { ...e.metadata } };
+}
+function _nsCheckE(from, to) { const a = _nsEventTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid nostr event transition ${from} → ${to}`); }
+export function startNostrEventV2(id) { const e = _nsEvents.get(id); if (!e) throw new Error(`nostr event ${id} not found`); _nsCheckE(e.status, NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING); const now = Date.now(); e.status = NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING; e.updatedAt = now; if (!e.startedAt) e.startedAt = now; return { ...e, metadata: { ...e.metadata } }; }
+export function publishNostrEventV2(id) { const e = _nsEvents.get(id); if (!e) throw new Error(`nostr event ${id} not found`); _nsCheckE(e.status, NOSTR_EVENT_LIFECYCLE_V2.PUBLISHED); const now = Date.now(); e.status = NOSTR_EVENT_LIFECYCLE_V2.PUBLISHED; e.updatedAt = now; if (!e.settledAt) e.settledAt = now; return { ...e, metadata: { ...e.metadata } }; }
+export function failNostrEventV2(id, reason) { const e = _nsEvents.get(id); if (!e) throw new Error(`nostr event ${id} not found`); _nsCheckE(e.status, NOSTR_EVENT_LIFECYCLE_V2.FAILED); const now = Date.now(); e.status = NOSTR_EVENT_LIFECYCLE_V2.FAILED; e.updatedAt = now; if (!e.settledAt) e.settledAt = now; if (reason) e.metadata.failReason = String(reason); return { ...e, metadata: { ...e.metadata } }; }
+export function cancelNostrEventV2(id, reason) { const e = _nsEvents.get(id); if (!e) throw new Error(`nostr event ${id} not found`); _nsCheckE(e.status, NOSTR_EVENT_LIFECYCLE_V2.CANCELLED); const now = Date.now(); e.status = NOSTR_EVENT_LIFECYCLE_V2.CANCELLED; e.updatedAt = now; if (!e.settledAt) e.settledAt = now; if (reason) e.metadata.cancelReason = String(reason); return { ...e, metadata: { ...e.metadata } }; }
+export function getNostrEventV2(id) { const e = _nsEvents.get(id); if (!e) return null; return { ...e, metadata: { ...e.metadata } }; }
+export function listNostrEventsV2() { return [..._nsEvents.values()].map((e) => ({ ...e, metadata: { ...e.metadata } })); }
+
+export function autoOfflineIdleNostrRelaysV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const r of _nsRelays.values()) if (r.status === NOSTR_RELAY_MATURITY_V2.ACTIVE && (t - r.lastTouchedAt) >= _nsRelayIdleMs) { r.status = NOSTR_RELAY_MATURITY_V2.OFFLINE; r.updatedAt = t; flipped.push(r.id); } return { flipped, count: flipped.length }; }
+export function autoFailStuckNostrEventsV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const e of _nsEvents.values()) if (e.status === NOSTR_EVENT_LIFECYCLE_V2.PUBLISHING && e.startedAt != null && (t - e.startedAt) >= _nsEventStuckMs) { e.status = NOSTR_EVENT_LIFECYCLE_V2.FAILED; e.updatedAt = t; if (!e.settledAt) e.settledAt = t; e.metadata.failReason = "auto-fail-stuck"; flipped.push(e.id); } return { flipped, count: flipped.length }; }
+
+export function getNostrBridgeStatsV2() {
+  const relaysByStatus = {}; for (const s of Object.values(NOSTR_RELAY_MATURITY_V2)) relaysByStatus[s] = 0; for (const r of _nsRelays.values()) relaysByStatus[r.status]++;
+  const eventsByStatus = {}; for (const s of Object.values(NOSTR_EVENT_LIFECYCLE_V2)) eventsByStatus[s] = 0; for (const e of _nsEvents.values()) eventsByStatus[e.status]++;
+  return { totalRelaysV2: _nsRelays.size, totalEventsV2: _nsEvents.size, maxActiveNostrRelaysPerOwner: _nsMaxActivePerOwner, maxPendingNostrEventsPerRelay: _nsMaxPendingPerRelay, nostrRelayIdleMs: _nsRelayIdleMs, nostrEventStuckMs: _nsEventStuckMs, relaysByStatus, eventsByStatus };
+}

package/src/lib/orchestrator.js

@@ -436,3 +436,108 @@ function _extractChangedFiles(output) {
   const matches = output.match(/(?:modified|created|deleted):\s+(\S+)/g) || [];
   return matches.map((m) => m.split(/:\s+/)[1]).filter(Boolean);
 }
+
+
+// ===== V2 Surface: Orchestrator governance overlay (CLI v0.140.0) =====
+export const ORCH_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending", ACTIVE: "active", PAUSED: "paused", RETIRED: "retired",
+});
+export const ORCH_TASK_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued", DISPATCHING: "dispatching", COMPLETED: "completed", FAILED: "failed", CANCELLED: "cancelled",
+});
+
+const _opTrans = new Map([
+  [ORCH_PROFILE_MATURITY_V2.PENDING, new Set([ORCH_PROFILE_MATURITY_V2.ACTIVE, ORCH_PROFILE_MATURITY_V2.RETIRED])],
+  [ORCH_PROFILE_MATURITY_V2.ACTIVE, new Set([ORCH_PROFILE_MATURITY_V2.PAUSED, ORCH_PROFILE_MATURITY_V2.RETIRED])],
+  [ORCH_PROFILE_MATURITY_V2.PAUSED, new Set([ORCH_PROFILE_MATURITY_V2.ACTIVE, ORCH_PROFILE_MATURITY_V2.RETIRED])],
+  [ORCH_PROFILE_MATURITY_V2.RETIRED, new Set()],
+]);
+const _opTerminal = new Set([ORCH_PROFILE_MATURITY_V2.RETIRED]);
+const _otTrans = new Map([
+  [ORCH_TASK_LIFECYCLE_V2.QUEUED, new Set([ORCH_TASK_LIFECYCLE_V2.DISPATCHING, ORCH_TASK_LIFECYCLE_V2.CANCELLED])],
+  [ORCH_TASK_LIFECYCLE_V2.DISPATCHING, new Set([ORCH_TASK_LIFECYCLE_V2.COMPLETED, ORCH_TASK_LIFECYCLE_V2.FAILED, ORCH_TASK_LIFECYCLE_V2.CANCELLED])],
+  [ORCH_TASK_LIFECYCLE_V2.COMPLETED, new Set()],
+  [ORCH_TASK_LIFECYCLE_V2.FAILED, new Set()],
+  [ORCH_TASK_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _opsV2 = new Map();
+const _otsV2 = new Map();
+let _opMaxActivePerOwner = 6;
+let _opMaxPendingTasksPerProfile = 12;
+let _opIdleMs = 14 * 24 * 60 * 60 * 1000;
+let _otStuckMs = 15 * 60 * 1000;
+
+function _opPos(n, lbl) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${lbl} must be positive integer`); return v; }
+
+export function setMaxActiveOrchProfilesPerOwnerV2(n) { _opMaxActivePerOwner = _opPos(n, "maxActiveOrchProfilesPerOwner"); }
+export function getMaxActiveOrchProfilesPerOwnerV2() { return _opMaxActivePerOwner; }
+export function setMaxPendingOrchTasksPerProfileV2(n) { _opMaxPendingTasksPerProfile = _opPos(n, "maxPendingOrchTasksPerProfile"); }
+export function getMaxPendingOrchTasksPerProfileV2() { return _opMaxPendingTasksPerProfile; }
+export function setOrchProfileIdleMsV2(n) { _opIdleMs = _opPos(n, "orchProfileIdleMs"); }
+export function getOrchProfileIdleMsV2() { return _opIdleMs; }
+export function setOrchTaskStuckMsV2(n) { _otStuckMs = _opPos(n, "orchTaskStuckMs"); }
+export function getOrchTaskStuckMsV2() { return _otStuckMs; }
+
+export function _resetStateOrchestratorV2() {
+  _opsV2.clear(); _otsV2.clear();
+  _opMaxActivePerOwner = 6; _opMaxPendingTasksPerProfile = 12;
+  _opIdleMs = 14 * 24 * 60 * 60 * 1000; _otStuckMs = 15 * 60 * 1000;
+}
+
+export function registerOrchProfileV2({ id, owner, source, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_opsV2.has(id)) throw new Error(`orch profile ${id} already registered`);
+  const now = Date.now();
+  const p = { id, owner, source: source || "cli", status: ORCH_PROFILE_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, activatedAt: null, retiredAt: null, lastTouchedAt: now, metadata: { ...(metadata || {}) } };
+  _opsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+function _opCheckP(from, to) { const a = _opTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid orch profile transition ${from} → ${to}`); }
+function _opCountActive(owner) { let n = 0; for (const p of _opsV2.values()) if (p.owner === owner && p.status === ORCH_PROFILE_MATURITY_V2.ACTIVE) n++; return n; }
+
+export function activateOrchProfileV2(id) {
+  const p = _opsV2.get(id); if (!p) throw new Error(`orch profile ${id} not found`);
+  _opCheckP(p.status, ORCH_PROFILE_MATURITY_V2.ACTIVE);
+  const recovery = p.status === ORCH_PROFILE_MATURITY_V2.PAUSED;
+  if (!recovery) { const c = _opCountActive(p.owner); if (c >= _opMaxActivePerOwner) throw new Error(`max active orch profiles per owner (${_opMaxActivePerOwner}) reached for ${p.owner}`); }
+  const now = Date.now(); p.status = ORCH_PROFILE_MATURITY_V2.ACTIVE; p.updatedAt = now; p.lastTouchedAt = now; if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function pauseOrchProfileV2(id) { const p = _opsV2.get(id); if (!p) throw new Error(`orch profile ${id} not found`); _opCheckP(p.status, ORCH_PROFILE_MATURITY_V2.PAUSED); p.status = ORCH_PROFILE_MATURITY_V2.PAUSED; p.updatedAt = Date.now(); return { ...p, metadata: { ...p.metadata } }; }
+export function retireOrchProfileV2(id) { const p = _opsV2.get(id); if (!p) throw new Error(`orch profile ${id} not found`); _opCheckP(p.status, ORCH_PROFILE_MATURITY_V2.RETIRED); const now = Date.now(); p.status = ORCH_PROFILE_MATURITY_V2.RETIRED; p.updatedAt = now; if (!p.retiredAt) p.retiredAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function touchOrchProfileV2(id) { const p = _opsV2.get(id); if (!p) throw new Error(`orch profile ${id} not found`); if (_opTerminal.has(p.status)) throw new Error(`cannot touch terminal orch profile ${id}`); const now = Date.now(); p.lastTouchedAt = now; p.updatedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function getOrchProfileV2(id) { const p = _opsV2.get(id); if (!p) return null; return { ...p, metadata: { ...p.metadata } }; }
+export function listOrchProfilesV2() { return [..._opsV2.values()].map((p) => ({ ...p, metadata: { ...p.metadata } })); }
+
+function _otCountPending(profileId) { let n = 0; for (const t of _otsV2.values()) if (t.profileId === profileId && (t.status === ORCH_TASK_LIFECYCLE_V2.QUEUED || t.status === ORCH_TASK_LIFECYCLE_V2.DISPATCHING)) n++; return n; }
+
+export function createOrchTaskV2({ id, profileId, prompt, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!profileId || typeof profileId !== "string") throw new Error("profileId is required");
+  if (_otsV2.has(id)) throw new Error(`orch task ${id} already exists`);
+  if (!_opsV2.has(profileId)) throw new Error(`orch profile ${profileId} not found`);
+  const pending = _otCountPending(profileId);
+  if (pending >= _opMaxPendingTasksPerProfile) throw new Error(`max pending orch tasks per profile (${_opMaxPendingTasksPerProfile}) reached for ${profileId}`);
+  const now = Date.now();
+  const t = { id, profileId, prompt: prompt || "", status: ORCH_TASK_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _otsV2.set(id, t);
+  return { ...t, metadata: { ...t.metadata } };
+}
+function _otCheckT(from, to) { const a = _otTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid orch task transition ${from} → ${to}`); }
+export function dispatchOrchTaskV2(id) { const t = _otsV2.get(id); if (!t) throw new Error(`orch task ${id} not found`); _otCheckT(t.status, ORCH_TASK_LIFECYCLE_V2.DISPATCHING); const now = Date.now(); t.status = ORCH_TASK_LIFECYCLE_V2.DISPATCHING; t.updatedAt = now; if (!t.startedAt) t.startedAt = now; return { ...t, metadata: { ...t.metadata } }; }
+export function completeOrchTaskV2(id) { const t = _otsV2.get(id); if (!t) throw new Error(`orch task ${id} not found`); _otCheckT(t.status, ORCH_TASK_LIFECYCLE_V2.COMPLETED); const now = Date.now(); t.status = ORCH_TASK_LIFECYCLE_V2.COMPLETED; t.updatedAt = now; if (!t.settledAt) t.settledAt = now; return { ...t, metadata: { ...t.metadata } }; }
+export function failOrchTaskV2(id, reason) { const t = _otsV2.get(id); if (!t) throw new Error(`orch task ${id} not found`); _otCheckT(t.status, ORCH_TASK_LIFECYCLE_V2.FAILED); const now = Date.now(); t.status = ORCH_TASK_LIFECYCLE_V2.FAILED; t.updatedAt = now; if (!t.settledAt) t.settledAt = now; if (reason) t.metadata.failReason = String(reason); return { ...t, metadata: { ...t.metadata } }; }
+export function cancelOrchTaskV2(id, reason) { const t = _otsV2.get(id); if (!t) throw new Error(`orch task ${id} not found`); _otCheckT(t.status, ORCH_TASK_LIFECYCLE_V2.CANCELLED); const now = Date.now(); t.status = ORCH_TASK_LIFECYCLE_V2.CANCELLED; t.updatedAt = now; if (!t.settledAt) t.settledAt = now; if (reason) t.metadata.cancelReason = String(reason); return { ...t, metadata: { ...t.metadata } }; }
+export function getOrchTaskV2(id) { const t = _otsV2.get(id); if (!t) return null; return { ...t, metadata: { ...t.metadata } }; }
+export function listOrchTasksV2() { return [..._otsV2.values()].map((t) => ({ ...t, metadata: { ...t.metadata } })); }
+
+export function autoPauseIdleOrchProfilesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const p of _opsV2.values()) if (p.status === ORCH_PROFILE_MATURITY_V2.ACTIVE && (t - p.lastTouchedAt) >= _opIdleMs) { p.status = ORCH_PROFILE_MATURITY_V2.PAUSED; p.updatedAt = t; flipped.push(p.id); } return { flipped, count: flipped.length }; }
+export function autoFailStuckOrchTasksV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const x of _otsV2.values()) if (x.status === ORCH_TASK_LIFECYCLE_V2.DISPATCHING && x.startedAt != null && (t - x.startedAt) >= _otStuckMs) { x.status = ORCH_TASK_LIFECYCLE_V2.FAILED; x.updatedAt = t; if (!x.settledAt) x.settledAt = t; x.metadata.failReason = "auto-fail-stuck"; flipped.push(x.id); } return { flipped, count: flipped.length }; }
+
+export function getOrchestratorGovStatsV2() {
+  const profilesByStatus = {}; for (const s of Object.values(ORCH_PROFILE_MATURITY_V2)) profilesByStatus[s] = 0; for (const p of _opsV2.values()) profilesByStatus[p.status]++;
+  const tasksByStatus = {}; for (const s of Object.values(ORCH_TASK_LIFECYCLE_V2)) tasksByStatus[s] = 0; for (const t of _otsV2.values()) tasksByStatus[t.status]++;
+  return { totalOrchProfilesV2: _opsV2.size, totalOrchTasksV2: _otsV2.size, maxActiveOrchProfilesPerOwner: _opMaxActivePerOwner, maxPendingOrchTasksPerProfile: _opMaxPendingTasksPerProfile, orchProfileIdleMs: _opIdleMs, orchTaskStuckMs: _otStuckMs, profilesByStatus, tasksByStatus };
+}

package/src/lib/pdf-parser.js

@@ -94,3 +94,84 @@ function decodePdfString(str) {
     .replace(/\\\)/g, ")")
     .replace(/\\\\/g, "\\");
 }
+
+
+// =====================================================================
+// PDF Parser V2 governance overlay
+// =====================================================================
+export const PDFP_PROFILE_MATURITY_V2 = Object.freeze({ PENDING: "pending", ACTIVE: "active", STALE: "stale", ARCHIVED: "archived" });
+export const PDFP_PARSE_LIFECYCLE_V2 = Object.freeze({ QUEUED: "queued", PARSING: "parsing", PARSED: "parsed", FAILED: "failed", CANCELLED: "cancelled" });
+const _pdfpPTrans = new Map([
+  [PDFP_PROFILE_MATURITY_V2.PENDING, new Set([PDFP_PROFILE_MATURITY_V2.ACTIVE, PDFP_PROFILE_MATURITY_V2.ARCHIVED])],
+  [PDFP_PROFILE_MATURITY_V2.ACTIVE, new Set([PDFP_PROFILE_MATURITY_V2.STALE, PDFP_PROFILE_MATURITY_V2.ARCHIVED])],
+  [PDFP_PROFILE_MATURITY_V2.STALE, new Set([PDFP_PROFILE_MATURITY_V2.ACTIVE, PDFP_PROFILE_MATURITY_V2.ARCHIVED])],
+  [PDFP_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _pdfpPTerminal = new Set([PDFP_PROFILE_MATURITY_V2.ARCHIVED]);
+const _pdfpJTrans = new Map([
+  [PDFP_PARSE_LIFECYCLE_V2.QUEUED, new Set([PDFP_PARSE_LIFECYCLE_V2.PARSING, PDFP_PARSE_LIFECYCLE_V2.CANCELLED])],
+  [PDFP_PARSE_LIFECYCLE_V2.PARSING, new Set([PDFP_PARSE_LIFECYCLE_V2.PARSED, PDFP_PARSE_LIFECYCLE_V2.FAILED, PDFP_PARSE_LIFECYCLE_V2.CANCELLED])],
+  [PDFP_PARSE_LIFECYCLE_V2.PARSED, new Set()],
+  [PDFP_PARSE_LIFECYCLE_V2.FAILED, new Set()],
+  [PDFP_PARSE_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _pdfpPsV2 = new Map();
+const _pdfpJsV2 = new Map();
+let _pdfpMaxActive = 6, _pdfpMaxPending = 12, _pdfpIdleMs = 30 * 24 * 60 * 60 * 1000, _pdfpStuckMs = 60 * 1000;
+function _pdfpPos(n, label) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${label} must be positive integer`); return v; }
+function _pdfpCheckP(from, to) { const a = _pdfpPTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid pdfp profile transition ${from} → ${to}`); }
+function _pdfpCheckJ(from, to) { const a = _pdfpJTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid pdfp parse transition ${from} → ${to}`); }
+function _pdfpCountActive(owner) { let c = 0; for (const p of _pdfpPsV2.values()) if (p.owner === owner && p.status === PDFP_PROFILE_MATURITY_V2.ACTIVE) c++; return c; }
+function _pdfpCountPending(profileId) { let c = 0; for (const j of _pdfpJsV2.values()) if (j.profileId === profileId && (j.status === PDFP_PARSE_LIFECYCLE_V2.QUEUED || j.status === PDFP_PARSE_LIFECYCLE_V2.PARSING)) c++; return c; }
+export function setMaxActivePdfpProfilesPerOwnerV2(n) { _pdfpMaxActive = _pdfpPos(n, "maxActivePdfpProfilesPerOwner"); }
+export function getMaxActivePdfpProfilesPerOwnerV2() { return _pdfpMaxActive; }
+export function setMaxPendingPdfpParsesPerProfileV2(n) { _pdfpMaxPending = _pdfpPos(n, "maxPendingPdfpParsesPerProfile"); }
+export function getMaxPendingPdfpParsesPerProfileV2() { return _pdfpMaxPending; }
+export function setPdfpProfileIdleMsV2(n) { _pdfpIdleMs = _pdfpPos(n, "pdfpProfileIdleMs"); }
+export function getPdfpProfileIdleMsV2() { return _pdfpIdleMs; }
+export function setPdfpParseStuckMsV2(n) { _pdfpStuckMs = _pdfpPos(n, "pdfpParseStuckMs"); }
+export function getPdfpParseStuckMsV2() { return _pdfpStuckMs; }
+export function _resetStatePdfParserV2() { _pdfpPsV2.clear(); _pdfpJsV2.clear(); _pdfpMaxActive = 6; _pdfpMaxPending = 12; _pdfpIdleMs = 30 * 24 * 60 * 60 * 1000; _pdfpStuckMs = 60 * 1000; }
+export function registerPdfpProfileV2({ id, owner, encoding, metadata } = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_pdfpPsV2.has(id)) throw new Error(`pdfp profile ${id} already exists`);
+  const now = Date.now();
+  const p = { id, owner, encoding: encoding || "utf-8", status: PDFP_PROFILE_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, lastTouchedAt: now, activatedAt: null, archivedAt: null, metadata: { ...(metadata || {}) } };
+  _pdfpPsV2.set(id, p); return { ...p, metadata: { ...p.metadata } };
+}
+export function activatePdfpProfileV2(id) {
+  const p = _pdfpPsV2.get(id); if (!p) throw new Error(`pdfp profile ${id} not found`);
+  const isInitial = p.status === PDFP_PROFILE_MATURITY_V2.PENDING;
+  _pdfpCheckP(p.status, PDFP_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _pdfpCountActive(p.owner) >= _pdfpMaxActive) throw new Error(`max active pdfp profiles for owner ${p.owner} reached`);
+  const now = Date.now(); p.status = PDFP_PROFILE_MATURITY_V2.ACTIVE; p.updatedAt = now; p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function stalePdfpProfileV2(id) { const p = _pdfpPsV2.get(id); if (!p) throw new Error(`pdfp profile ${id} not found`); _pdfpCheckP(p.status, PDFP_PROFILE_MATURITY_V2.STALE); p.status = PDFP_PROFILE_MATURITY_V2.STALE; p.updatedAt = Date.now(); return { ...p, metadata: { ...p.metadata } }; }
+export function archivePdfpProfileV2(id) { const p = _pdfpPsV2.get(id); if (!p) throw new Error(`pdfp profile ${id} not found`); _pdfpCheckP(p.status, PDFP_PROFILE_MATURITY_V2.ARCHIVED); const now = Date.now(); p.status = PDFP_PROFILE_MATURITY_V2.ARCHIVED; p.updatedAt = now; if (!p.archivedAt) p.archivedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function touchPdfpProfileV2(id) { const p = _pdfpPsV2.get(id); if (!p) throw new Error(`pdfp profile ${id} not found`); if (_pdfpPTerminal.has(p.status)) throw new Error(`cannot touch terminal pdfp profile ${id}`); const now = Date.now(); p.lastTouchedAt = now; p.updatedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function getPdfpProfileV2(id) { const p = _pdfpPsV2.get(id); if (!p) return null; return { ...p, metadata: { ...p.metadata } }; }
+export function listPdfpProfilesV2() { return [..._pdfpPsV2.values()].map((p) => ({ ...p, metadata: { ...p.metadata } })); }
+export function createPdfpParseV2({ id, profileId, path, metadata } = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_pdfpJsV2.has(id)) throw new Error(`pdfp parse ${id} already exists`);
+  if (!_pdfpPsV2.has(profileId)) throw new Error(`pdfp profile ${profileId} not found`);
+  if (_pdfpCountPending(profileId) >= _pdfpMaxPending) throw new Error(`max pending pdfp parses for profile ${profileId} reached`);
+  const now = Date.now();
+  const j = { id, profileId, path: path || "", status: PDFP_PARSE_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _pdfpJsV2.set(id, j); return { ...j, metadata: { ...j.metadata } };
+}
+export function parsingPdfpParseV2(id) { const j = _pdfpJsV2.get(id); if (!j) throw new Error(`pdfp parse ${id} not found`); _pdfpCheckJ(j.status, PDFP_PARSE_LIFECYCLE_V2.PARSING); const now = Date.now(); j.status = PDFP_PARSE_LIFECYCLE_V2.PARSING; j.updatedAt = now; if (!j.startedAt) j.startedAt = now; return { ...j, metadata: { ...j.metadata } }; }
+export function parsePdfpParseV2(id) { const j = _pdfpJsV2.get(id); if (!j) throw new Error(`pdfp parse ${id} not found`); _pdfpCheckJ(j.status, PDFP_PARSE_LIFECYCLE_V2.PARSED); const now = Date.now(); j.status = PDFP_PARSE_LIFECYCLE_V2.PARSED; j.updatedAt = now; if (!j.settledAt) j.settledAt = now; return { ...j, metadata: { ...j.metadata } }; }
+export function failPdfpParseV2(id, reason) { const j = _pdfpJsV2.get(id); if (!j) throw new Error(`pdfp parse ${id} not found`); _pdfpCheckJ(j.status, PDFP_PARSE_LIFECYCLE_V2.FAILED); const now = Date.now(); j.status = PDFP_PARSE_LIFECYCLE_V2.FAILED; j.updatedAt = now; if (!j.settledAt) j.settledAt = now; if (reason) j.metadata.failReason = String(reason); return { ...j, metadata: { ...j.metadata } }; }
+export function cancelPdfpParseV2(id, reason) { const j = _pdfpJsV2.get(id); if (!j) throw new Error(`pdfp parse ${id} not found`); _pdfpCheckJ(j.status, PDFP_PARSE_LIFECYCLE_V2.CANCELLED); const now = Date.now(); j.status = PDFP_PARSE_LIFECYCLE_V2.CANCELLED; j.updatedAt = now; if (!j.settledAt) j.settledAt = now; if (reason) j.metadata.cancelReason = String(reason); return { ...j, metadata: { ...j.metadata } }; }
+export function getPdfpParseV2(id) { const j = _pdfpJsV2.get(id); if (!j) return null; return { ...j, metadata: { ...j.metadata } }; }
+export function listPdfpParsesV2() { return [..._pdfpJsV2.values()].map((j) => ({ ...j, metadata: { ...j.metadata } })); }
+export function autoStaleIdlePdfpProfilesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const p of _pdfpPsV2.values()) if (p.status === PDFP_PROFILE_MATURITY_V2.ACTIVE && (t - p.lastTouchedAt) >= _pdfpIdleMs) { p.status = PDFP_PROFILE_MATURITY_V2.STALE; p.updatedAt = t; flipped.push(p.id); } return { flipped, count: flipped.length }; }
+export function autoFailStuckPdfpParsesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const j of _pdfpJsV2.values()) if (j.status === PDFP_PARSE_LIFECYCLE_V2.PARSING && j.startedAt != null && (t - j.startedAt) >= _pdfpStuckMs) { j.status = PDFP_PARSE_LIFECYCLE_V2.FAILED; j.updatedAt = t; if (!j.settledAt) j.settledAt = t; j.metadata.failReason = "auto-fail-stuck"; flipped.push(j.id); } return { flipped, count: flipped.length }; }
+export function getPdfParserGovStatsV2() {
+  const profilesByStatus = {}; for (const v of Object.values(PDFP_PROFILE_MATURITY_V2)) profilesByStatus[v] = 0; for (const p of _pdfpPsV2.values()) profilesByStatus[p.status]++;
+  const parsesByStatus = {}; for (const v of Object.values(PDFP_PARSE_LIFECYCLE_V2)) parsesByStatus[v] = 0; for (const j of _pdfpJsV2.values()) parsesByStatus[j.status]++;
+  return { totalPdfpProfilesV2: _pdfpPsV2.size, totalPdfpParsesV2: _pdfpJsV2.size, maxActivePdfpProfilesPerOwner: _pdfpMaxActive, maxPendingPdfpParsesPerProfile: _pdfpMaxPending, pdfpProfileIdleMs: _pdfpIdleMs, pdfpParseStuckMs: _pdfpStuckMs, profilesByStatus, parsesByStatus };
+}

package/src/lib/perf-tuning.js

@@ -735,3 +735,108 @@ export function getPerformanceReport(db) {
 export function _resetState() {
   /* CLI is stateless; helper exists for parity with other libs */
 }
+
+
+// ===== V2 Surface: Perf Tuning governance overlay (CLI v0.140.0) =====
+export const PERF_TUNING_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending", ACTIVE: "active", STALE: "stale", DECOMMISSIONED: "decommissioned",
+});
+export const PERF_BENCH_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued", RUNNING: "running", COMPLETED: "completed", FAILED: "failed", CANCELLED: "cancelled",
+});
+
+const _ptpTrans = new Map([
+  [PERF_TUNING_PROFILE_MATURITY_V2.PENDING, new Set([PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE, PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED])],
+  [PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE, new Set([PERF_TUNING_PROFILE_MATURITY_V2.STALE, PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED])],
+  [PERF_TUNING_PROFILE_MATURITY_V2.STALE, new Set([PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE, PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED])],
+  [PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED, new Set()],
+]);
+const _ptpTerminal = new Set([PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED]);
+const _pbTrans = new Map([
+  [PERF_BENCH_LIFECYCLE_V2.QUEUED, new Set([PERF_BENCH_LIFECYCLE_V2.RUNNING, PERF_BENCH_LIFECYCLE_V2.CANCELLED])],
+  [PERF_BENCH_LIFECYCLE_V2.RUNNING, new Set([PERF_BENCH_LIFECYCLE_V2.COMPLETED, PERF_BENCH_LIFECYCLE_V2.FAILED, PERF_BENCH_LIFECYCLE_V2.CANCELLED])],
+  [PERF_BENCH_LIFECYCLE_V2.COMPLETED, new Set()],
+  [PERF_BENCH_LIFECYCLE_V2.FAILED, new Set()],
+  [PERF_BENCH_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _ptpsV2 = new Map();
+const _pbsV2 = new Map();
+let _ptpMaxActivePerOwner = 6;
+let _ptpMaxPendingBenchesPerProfile = 10;
+let _ptpIdleMs = 7 * 24 * 60 * 60 * 1000;
+let _pbStuckMs = 30 * 60 * 1000;
+
+function _ptpPos(n, lbl) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${lbl} must be positive integer`); return v; }
+
+export function setMaxActivePerfTuningProfilesPerOwnerV2(n) { _ptpMaxActivePerOwner = _ptpPos(n, "maxActivePerfTuningProfilesPerOwner"); }
+export function getMaxActivePerfTuningProfilesPerOwnerV2() { return _ptpMaxActivePerOwner; }
+export function setMaxPendingPerfBenchesPerProfileV2(n) { _ptpMaxPendingBenchesPerProfile = _ptpPos(n, "maxPendingPerfBenchesPerProfile"); }
+export function getMaxPendingPerfBenchesPerProfileV2() { return _ptpMaxPendingBenchesPerProfile; }
+export function setPerfTuningProfileIdleMsV2(n) { _ptpIdleMs = _ptpPos(n, "perfTuningProfileIdleMs"); }
+export function getPerfTuningProfileIdleMsV2() { return _ptpIdleMs; }
+export function setPerfBenchStuckMsV2(n) { _pbStuckMs = _ptpPos(n, "perfBenchStuckMs"); }
+export function getPerfBenchStuckMsV2() { return _pbStuckMs; }
+
+export function _resetStatePerfTuningV2() {
+  _ptpsV2.clear(); _pbsV2.clear();
+  _ptpMaxActivePerOwner = 6; _ptpMaxPendingBenchesPerProfile = 10;
+  _ptpIdleMs = 7 * 24 * 60 * 60 * 1000; _pbStuckMs = 30 * 60 * 1000;
+}
+
+export function registerPerfTuningProfileV2({ id, owner, target, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_ptpsV2.has(id)) throw new Error(`perf tuning profile ${id} already registered`);
+  const now = Date.now();
+  const p = { id, owner, target: target || "default", status: PERF_TUNING_PROFILE_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, activatedAt: null, decommissionedAt: null, lastTouchedAt: now, metadata: { ...(metadata || {}) } };
+  _ptpsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+function _ptpCheckP(from, to) { const a = _ptpTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid perf tuning profile transition ${from} → ${to}`); }
+function _ptpCountActive(owner) { let n = 0; for (const p of _ptpsV2.values()) if (p.owner === owner && p.status === PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE) n++; return n; }
+
+export function activatePerfTuningProfileV2(id) {
+  const p = _ptpsV2.get(id); if (!p) throw new Error(`perf tuning profile ${id} not found`);
+  _ptpCheckP(p.status, PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE);
+  const recovery = p.status === PERF_TUNING_PROFILE_MATURITY_V2.STALE;
+  if (!recovery) { const c = _ptpCountActive(p.owner); if (c >= _ptpMaxActivePerOwner) throw new Error(`max active perf tuning profiles per owner (${_ptpMaxActivePerOwner}) reached for ${p.owner}`); }
+  const now = Date.now(); p.status = PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE; p.updatedAt = now; p.lastTouchedAt = now; if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function stalePerfTuningProfileV2(id) { const p = _ptpsV2.get(id); if (!p) throw new Error(`perf tuning profile ${id} not found`); _ptpCheckP(p.status, PERF_TUNING_PROFILE_MATURITY_V2.STALE); p.status = PERF_TUNING_PROFILE_MATURITY_V2.STALE; p.updatedAt = Date.now(); return { ...p, metadata: { ...p.metadata } }; }
+export function decommissionPerfTuningProfileV2(id) { const p = _ptpsV2.get(id); if (!p) throw new Error(`perf tuning profile ${id} not found`); _ptpCheckP(p.status, PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED); const now = Date.now(); p.status = PERF_TUNING_PROFILE_MATURITY_V2.DECOMMISSIONED; p.updatedAt = now; if (!p.decommissionedAt) p.decommissionedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function touchPerfTuningProfileV2(id) { const p = _ptpsV2.get(id); if (!p) throw new Error(`perf tuning profile ${id} not found`); if (_ptpTerminal.has(p.status)) throw new Error(`cannot touch terminal perf tuning profile ${id}`); const now = Date.now(); p.lastTouchedAt = now; p.updatedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function getPerfTuningProfileV2(id) { const p = _ptpsV2.get(id); if (!p) return null; return { ...p, metadata: { ...p.metadata } }; }
+export function listPerfTuningProfilesV2() { return [..._ptpsV2.values()].map((p) => ({ ...p, metadata: { ...p.metadata } })); }
+
+function _pbCountPending(profileId) { let n = 0; for (const b of _pbsV2.values()) if (b.profileId === profileId && (b.status === PERF_BENCH_LIFECYCLE_V2.QUEUED || b.status === PERF_BENCH_LIFECYCLE_V2.RUNNING)) n++; return n; }
+
+export function createPerfBenchV2({ id, profileId, scenario, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!profileId || typeof profileId !== "string") throw new Error("profileId is required");
+  if (_pbsV2.has(id)) throw new Error(`perf bench ${id} already exists`);
+  if (!_ptpsV2.has(profileId)) throw new Error(`perf tuning profile ${profileId} not found`);
+  const pending = _pbCountPending(profileId);
+  if (pending >= _ptpMaxPendingBenchesPerProfile) throw new Error(`max pending perf benches per profile (${_ptpMaxPendingBenchesPerProfile}) reached for ${profileId}`);
+  const now = Date.now();
+  const b = { id, profileId, scenario: scenario || "", status: PERF_BENCH_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _pbsV2.set(id, b);
+  return { ...b, metadata: { ...b.metadata } };
+}
+function _pbCheckB(from, to) { const a = _pbTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid perf bench transition ${from} → ${to}`); }
+export function startPerfBenchV2(id) { const b = _pbsV2.get(id); if (!b) throw new Error(`perf bench ${id} not found`); _pbCheckB(b.status, PERF_BENCH_LIFECYCLE_V2.RUNNING); const now = Date.now(); b.status = PERF_BENCH_LIFECYCLE_V2.RUNNING; b.updatedAt = now; if (!b.startedAt) b.startedAt = now; return { ...b, metadata: { ...b.metadata } }; }
+export function completePerfBenchV2(id) { const b = _pbsV2.get(id); if (!b) throw new Error(`perf bench ${id} not found`); _pbCheckB(b.status, PERF_BENCH_LIFECYCLE_V2.COMPLETED); const now = Date.now(); b.status = PERF_BENCH_LIFECYCLE_V2.COMPLETED; b.updatedAt = now; if (!b.settledAt) b.settledAt = now; return { ...b, metadata: { ...b.metadata } }; }
+export function failPerfBenchV2(id, reason) { const b = _pbsV2.get(id); if (!b) throw new Error(`perf bench ${id} not found`); _pbCheckB(b.status, PERF_BENCH_LIFECYCLE_V2.FAILED); const now = Date.now(); b.status = PERF_BENCH_LIFECYCLE_V2.FAILED; b.updatedAt = now; if (!b.settledAt) b.settledAt = now; if (reason) b.metadata.failReason = String(reason); return { ...b, metadata: { ...b.metadata } }; }
+export function cancelPerfBenchV2(id, reason) { const b = _pbsV2.get(id); if (!b) throw new Error(`perf bench ${id} not found`); _pbCheckB(b.status, PERF_BENCH_LIFECYCLE_V2.CANCELLED); const now = Date.now(); b.status = PERF_BENCH_LIFECYCLE_V2.CANCELLED; b.updatedAt = now; if (!b.settledAt) b.settledAt = now; if (reason) b.metadata.cancelReason = String(reason); return { ...b, metadata: { ...b.metadata } }; }
+export function getPerfBenchV2(id) { const b = _pbsV2.get(id); if (!b) return null; return { ...b, metadata: { ...b.metadata } }; }
+export function listPerfBenchesV2() { return [..._pbsV2.values()].map((b) => ({ ...b, metadata: { ...b.metadata } })); }
+
+export function autoStaleIdlePerfTuningProfilesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const p of _ptpsV2.values()) if (p.status === PERF_TUNING_PROFILE_MATURITY_V2.ACTIVE && (t - p.lastTouchedAt) >= _ptpIdleMs) { p.status = PERF_TUNING_PROFILE_MATURITY_V2.STALE; p.updatedAt = t; flipped.push(p.id); } return { flipped, count: flipped.length }; }
+export function autoFailStuckPerfBenchesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const b of _pbsV2.values()) if (b.status === PERF_BENCH_LIFECYCLE_V2.RUNNING && b.startedAt != null && (t - b.startedAt) >= _pbStuckMs) { b.status = PERF_BENCH_LIFECYCLE_V2.FAILED; b.updatedAt = t; if (!b.settledAt) b.settledAt = t; b.metadata.failReason = "auto-fail-stuck"; flipped.push(b.id); } return { flipped, count: flipped.length }; }
+
+export function getPerfTuningGovStatsV2() {
+  const profilesByStatus = {}; for (const s of Object.values(PERF_TUNING_PROFILE_MATURITY_V2)) profilesByStatus[s] = 0; for (const p of _ptpsV2.values()) profilesByStatus[p.status]++;
+  const benchesByStatus = {}; for (const s of Object.values(PERF_BENCH_LIFECYCLE_V2)) benchesByStatus[s] = 0; for (const b of _pbsV2.values()) benchesByStatus[b.status]++;
+  return { totalPerfTuningProfilesV2: _ptpsV2.size, totalPerfBenchesV2: _pbsV2.size, maxActivePerfTuningProfilesPerOwner: _ptpMaxActivePerOwner, maxPendingPerfBenchesPerProfile: _ptpMaxPendingBenchesPerProfile, perfTuningProfileIdleMs: _ptpIdleMs, perfBenchStuckMs: _pbStuckMs, profilesByStatus, benchesByStatus };
+}

package/src/lib/permission-engine.js

@@ -372,3 +372,84 @@ export function listUserRoles(db) {
 
   return [...userMap.entries()].map(([userDid, roles]) => ({ userDid, roles }));
 }
+
+// ===== V2 Surface: Permission Engine governance overlay (CLI v0.141.0) =====
+export const PERM_RULE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending", ACTIVE: "active", DISABLED: "disabled", RETIRED: "retired",
+});
+export const PERM_CHECK_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued", EVALUATING: "evaluating", ALLOWED: "allowed", DENIED: "denied", CANCELLED: "cancelled",
+});
+const _permRTrans = new Map([
+  [PERM_RULE_MATURITY_V2.PENDING, new Set([PERM_RULE_MATURITY_V2.ACTIVE, PERM_RULE_MATURITY_V2.RETIRED])],
+  [PERM_RULE_MATURITY_V2.ACTIVE, new Set([PERM_RULE_MATURITY_V2.DISABLED, PERM_RULE_MATURITY_V2.RETIRED])],
+  [PERM_RULE_MATURITY_V2.DISABLED, new Set([PERM_RULE_MATURITY_V2.ACTIVE, PERM_RULE_MATURITY_V2.RETIRED])],
+  [PERM_RULE_MATURITY_V2.RETIRED, new Set()],
+]);
+const _permRTerminal = new Set([PERM_RULE_MATURITY_V2.RETIRED]);
+const _permCTrans = new Map([
+  [PERM_CHECK_LIFECYCLE_V2.QUEUED, new Set([PERM_CHECK_LIFECYCLE_V2.EVALUATING, PERM_CHECK_LIFECYCLE_V2.CANCELLED])],
+  [PERM_CHECK_LIFECYCLE_V2.EVALUATING, new Set([PERM_CHECK_LIFECYCLE_V2.ALLOWED, PERM_CHECK_LIFECYCLE_V2.DENIED, PERM_CHECK_LIFECYCLE_V2.CANCELLED])],
+  [PERM_CHECK_LIFECYCLE_V2.ALLOWED, new Set()],
+  [PERM_CHECK_LIFECYCLE_V2.DENIED, new Set()],
+  [PERM_CHECK_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _permRsV2 = new Map();
+const _permCsV2 = new Map();
+let _permMaxActivePerOwner = 10, _permMaxPendingChecksPerRule = 30, _permIdleMs = 30 * 24 * 60 * 60 * 1000, _permStuckMs = 60 * 1000;
+function _permPos(n, label) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${label} must be positive integer`); return v; }
+function _permCheckR(from, to) { const a = _permRTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid perm rule transition ${from} → ${to}`); }
+function _permCheckC(from, to) { const a = _permCTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid perm check transition ${from} → ${to}`); }
+export function setMaxActivePermRulesPerOwnerV2(n) { _permMaxActivePerOwner = _permPos(n, "maxActivePermRulesPerOwner"); }
+export function getMaxActivePermRulesPerOwnerV2() { return _permMaxActivePerOwner; }
+export function setMaxPendingPermChecksPerRuleV2(n) { _permMaxPendingChecksPerRule = _permPos(n, "maxPendingPermChecksPerRule"); }
+export function getMaxPendingPermChecksPerRuleV2() { return _permMaxPendingChecksPerRule; }
+export function setPermRuleIdleMsV2(n) { _permIdleMs = _permPos(n, "permRuleIdleMs"); }
+export function getPermRuleIdleMsV2() { return _permIdleMs; }
+export function setPermCheckStuckMsV2(n) { _permStuckMs = _permPos(n, "permCheckStuckMs"); }
+export function getPermCheckStuckMsV2() { return _permStuckMs; }
+export function _resetStatePermissionEngineV2() { _permRsV2.clear(); _permCsV2.clear(); _permMaxActivePerOwner = 10; _permMaxPendingChecksPerRule = 30; _permIdleMs = 30 * 24 * 60 * 60 * 1000; _permStuckMs = 60 * 1000; }
+export function registerPermRuleV2({ id, owner, scope, metadata } = {}) {
+  if (!id) throw new Error("perm rule id required"); if (!owner) throw new Error("perm rule owner required");
+  if (_permRsV2.has(id)) throw new Error(`perm rule ${id} already registered`);
+  const now = Date.now();
+  const r = { id, owner, scope: scope || "*", status: PERM_RULE_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, activatedAt: null, retiredAt: null, lastTouchedAt: now, metadata: { ...(metadata || {}) } };
+  _permRsV2.set(id, r); return { ...r, metadata: { ...r.metadata } };
+}
+function _permCountActive(owner) { let n = 0; for (const r of _permRsV2.values()) if (r.owner === owner && r.status === PERM_RULE_MATURITY_V2.ACTIVE) n++; return n; }
+export function activatePermRuleV2(id) {
+  const r = _permRsV2.get(id); if (!r) throw new Error(`perm rule ${id} not found`);
+  _permCheckR(r.status, PERM_RULE_MATURITY_V2.ACTIVE);
+  const recovery = r.status === PERM_RULE_MATURITY_V2.DISABLED;
+  if (!recovery && _permCountActive(r.owner) >= _permMaxActivePerOwner) throw new Error(`max active perm rules for owner ${r.owner} reached`);
+  const now = Date.now(); r.status = PERM_RULE_MATURITY_V2.ACTIVE; r.updatedAt = now; r.lastTouchedAt = now; if (!r.activatedAt) r.activatedAt = now;
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function disablePermRuleV2(id) { const r = _permRsV2.get(id); if (!r) throw new Error(`perm rule ${id} not found`); _permCheckR(r.status, PERM_RULE_MATURITY_V2.DISABLED); r.status = PERM_RULE_MATURITY_V2.DISABLED; r.updatedAt = Date.now(); return { ...r, metadata: { ...r.metadata } }; }
+export function retirePermRuleV2(id) { const r = _permRsV2.get(id); if (!r) throw new Error(`perm rule ${id} not found`); _permCheckR(r.status, PERM_RULE_MATURITY_V2.RETIRED); const now = Date.now(); r.status = PERM_RULE_MATURITY_V2.RETIRED; r.updatedAt = now; if (!r.retiredAt) r.retiredAt = now; return { ...r, metadata: { ...r.metadata } }; }
+export function touchPermRuleV2(id) { const r = _permRsV2.get(id); if (!r) throw new Error(`perm rule ${id} not found`); if (_permRTerminal.has(r.status)) throw new Error(`cannot touch terminal perm rule ${id}`); const now = Date.now(); r.lastTouchedAt = now; r.updatedAt = now; return { ...r, metadata: { ...r.metadata } }; }
+export function getPermRuleV2(id) { const r = _permRsV2.get(id); if (!r) return null; return { ...r, metadata: { ...r.metadata } }; }
+export function listPermRulesV2() { return [..._permRsV2.values()].map((r) => ({ ...r, metadata: { ...r.metadata } })); }
+function _permCountPending(ruleId) { let n = 0; for (const c of _permCsV2.values()) if (c.ruleId === ruleId && (c.status === PERM_CHECK_LIFECYCLE_V2.QUEUED || c.status === PERM_CHECK_LIFECYCLE_V2.EVALUATING)) n++; return n; }
+export function createPermCheckV2({ id, ruleId, subject, metadata } = {}) {
+  if (!id) throw new Error("perm check id required"); if (!ruleId) throw new Error("perm check ruleId required");
+  if (_permCsV2.has(id)) throw new Error(`perm check ${id} already exists`);
+  if (!_permRsV2.has(ruleId)) throw new Error(`perm rule ${ruleId} not found`);
+  if (_permCountPending(ruleId) >= _permMaxPendingChecksPerRule) throw new Error(`max pending perm checks for rule ${ruleId} reached`);
+  const now = Date.now();
+  const c = { id, ruleId, subject: subject || "", status: PERM_CHECK_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _permCsV2.set(id, c); return { ...c, metadata: { ...c.metadata } };
+}
+export function evaluatePermCheckV2(id) { const c = _permCsV2.get(id); if (!c) throw new Error(`perm check ${id} not found`); _permCheckC(c.status, PERM_CHECK_LIFECYCLE_V2.EVALUATING); const now = Date.now(); c.status = PERM_CHECK_LIFECYCLE_V2.EVALUATING; c.updatedAt = now; if (!c.startedAt) c.startedAt = now; return { ...c, metadata: { ...c.metadata } }; }
+export function allowPermCheckV2(id) { const c = _permCsV2.get(id); if (!c) throw new Error(`perm check ${id} not found`); _permCheckC(c.status, PERM_CHECK_LIFECYCLE_V2.ALLOWED); const now = Date.now(); c.status = PERM_CHECK_LIFECYCLE_V2.ALLOWED; c.updatedAt = now; if (!c.settledAt) c.settledAt = now; return { ...c, metadata: { ...c.metadata } }; }
+export function denyPermCheckV2(id, reason) { const c = _permCsV2.get(id); if (!c) throw new Error(`perm check ${id} not found`); _permCheckC(c.status, PERM_CHECK_LIFECYCLE_V2.DENIED); const now = Date.now(); c.status = PERM_CHECK_LIFECYCLE_V2.DENIED; c.updatedAt = now; if (!c.settledAt) c.settledAt = now; if (reason) c.metadata.denyReason = String(reason); return { ...c, metadata: { ...c.metadata } }; }
+export function cancelPermCheckV2(id, reason) { const c = _permCsV2.get(id); if (!c) throw new Error(`perm check ${id} not found`); _permCheckC(c.status, PERM_CHECK_LIFECYCLE_V2.CANCELLED); const now = Date.now(); c.status = PERM_CHECK_LIFECYCLE_V2.CANCELLED; c.updatedAt = now; if (!c.settledAt) c.settledAt = now; if (reason) c.metadata.cancelReason = String(reason); return { ...c, metadata: { ...c.metadata } }; }
+export function getPermCheckV2(id) { const c = _permCsV2.get(id); if (!c) return null; return { ...c, metadata: { ...c.metadata } }; }
+export function listPermChecksV2() { return [..._permCsV2.values()].map((c) => ({ ...c, metadata: { ...c.metadata } })); }
+export function autoDisableIdlePermRulesV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const r of _permRsV2.values()) if (r.status === PERM_RULE_MATURITY_V2.ACTIVE && (t - r.lastTouchedAt) >= _permIdleMs) { r.status = PERM_RULE_MATURITY_V2.DISABLED; r.updatedAt = t; flipped.push(r.id); } return { flipped, count: flipped.length }; }
+export function autoDenyStuckPermChecksV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const c of _permCsV2.values()) if (c.status === PERM_CHECK_LIFECYCLE_V2.EVALUATING && c.startedAt != null && (t - c.startedAt) >= _permStuckMs) { c.status = PERM_CHECK_LIFECYCLE_V2.DENIED; c.updatedAt = t; if (!c.settledAt) c.settledAt = t; c.metadata.denyReason = "auto-deny-stuck"; flipped.push(c.id); } return { flipped, count: flipped.length }; }
+export function getPermissionEngineGovStatsV2() {
+  const rulesByStatus = {}; for (const v of Object.values(PERM_RULE_MATURITY_V2)) rulesByStatus[v] = 0; for (const r of _permRsV2.values()) rulesByStatus[r.status]++;
+  const checksByStatus = {}; for (const v of Object.values(PERM_CHECK_LIFECYCLE_V2)) checksByStatus[v] = 0; for (const c of _permCsV2.values()) checksByStatus[c.status]++;
+  return { totalPermRulesV2: _permRsV2.size, totalPermChecksV2: _permCsV2.size, maxActivePermRulesPerOwner: _permMaxActivePerOwner, maxPendingPermChecksPerRule: _permMaxPendingChecksPerRule, permRuleIdleMs: _permIdleMs, permCheckStuckMs: _permStuckMs, rulesByStatus, checksByStatus };
+}