chainlesschain 0.132.0 → 0.145.0

package/src/lib/app-builder.js

@@ -742,3 +742,341 @@ export function _resetV2State() {
   _v2DataSources.clear();
   _v2StatusHistory.clear();
 }
+
+// ===== V2 Surface: App Builder governance overlay (CLI v0.138.0) =====
+export const APP_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  PAUSED: "paused",
+  ARCHIVED: "archived",
+});
+export const APP_BUILD_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  BUILDING: "building",
+  SUCCEEDED: "succeeded",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+
+const _appTrans = new Map([
+  [
+    APP_MATURITY_V2.PENDING,
+    new Set([APP_MATURITY_V2.ACTIVE, APP_MATURITY_V2.ARCHIVED]),
+  ],
+  [
+    APP_MATURITY_V2.ACTIVE,
+    new Set([APP_MATURITY_V2.PAUSED, APP_MATURITY_V2.ARCHIVED]),
+  ],
+  [
+    APP_MATURITY_V2.PAUSED,
+    new Set([APP_MATURITY_V2.ACTIVE, APP_MATURITY_V2.ARCHIVED]),
+  ],
+  [APP_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _appTerminal = new Set([APP_MATURITY_V2.ARCHIVED]);
+const _appBuildTrans = new Map([
+  [
+    APP_BUILD_LIFECYCLE_V2.QUEUED,
+    new Set([
+      APP_BUILD_LIFECYCLE_V2.BUILDING,
+      APP_BUILD_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    APP_BUILD_LIFECYCLE_V2.BUILDING,
+    new Set([
+      APP_BUILD_LIFECYCLE_V2.SUCCEEDED,
+      APP_BUILD_LIFECYCLE_V2.FAILED,
+      APP_BUILD_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [APP_BUILD_LIFECYCLE_V2.SUCCEEDED, new Set()],
+  [APP_BUILD_LIFECYCLE_V2.FAILED, new Set()],
+  [APP_BUILD_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _appsV2 = new Map();
+const _appBuilds = new Map();
+let _appMaxActivePerOwner = 10;
+let _appMaxPendingBuildsPerApp = 20;
+let _appIdleMs = 30 * 24 * 60 * 60 * 1000;
+let _appBuildStuckMs = 10 * 60 * 1000;
+
+function _appPos(n, lbl) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${lbl} must be positive integer`);
+  return v;
+}
+
+export function setMaxActiveAppsPerOwnerV2(n) {
+  _appMaxActivePerOwner = _appPos(n, "maxActiveAppsPerOwner");
+}
+export function getMaxActiveAppsPerOwnerV2() {
+  return _appMaxActivePerOwner;
+}
+export function setMaxPendingAppBuildsPerAppV2(n) {
+  _appMaxPendingBuildsPerApp = _appPos(n, "maxPendingAppBuildsPerApp");
+}
+export function getMaxPendingAppBuildsPerAppV2() {
+  return _appMaxPendingBuildsPerApp;
+}
+export function setAppIdleMsV2(n) {
+  _appIdleMs = _appPos(n, "appIdleMs");
+}
+export function getAppIdleMsV2() {
+  return _appIdleMs;
+}
+export function setAppBuildStuckMsV2(n) {
+  _appBuildStuckMs = _appPos(n, "appBuildStuckMs");
+}
+export function getAppBuildStuckMsV2() {
+  return _appBuildStuckMs;
+}
+
+export function _resetStateAppBuilderV2() {
+  _appsV2.clear();
+  _appBuilds.clear();
+  _appMaxActivePerOwner = 10;
+  _appMaxPendingBuildsPerApp = 20;
+  _appIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _appBuildStuckMs = 10 * 60 * 1000;
+}
+
+export function registerAppV2({ id, owner, name, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_appsV2.has(id)) throw new Error(`app ${id} already registered`);
+  const now = Date.now();
+  const a = {
+    id,
+    owner,
+    name: name || id,
+    status: APP_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    lastTouchedAt: now,
+    metadata: { ...(metadata || {}) },
+  };
+  _appsV2.set(id, a);
+  return { ...a, metadata: { ...a.metadata } };
+}
+function _appCheckA(from, to) {
+  const a = _appTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid app transition ${from} → ${to}`);
+}
+function _appCountActive(owner) {
+  let n = 0;
+  for (const a of _appsV2.values())
+    if (a.owner === owner && a.status === APP_MATURITY_V2.ACTIVE) n++;
+  return n;
+}
+
+export function activateAppV2(id) {
+  const a = _appsV2.get(id);
+  if (!a) throw new Error(`app ${id} not found`);
+  _appCheckA(a.status, APP_MATURITY_V2.ACTIVE);
+  const recovery = a.status === APP_MATURITY_V2.PAUSED;
+  if (!recovery) {
+    const c = _appCountActive(a.owner);
+    if (c >= _appMaxActivePerOwner)
+      throw new Error(
+        `max active apps per owner (${_appMaxActivePerOwner}) reached for ${a.owner}`,
+      );
+  }
+  const now = Date.now();
+  a.status = APP_MATURITY_V2.ACTIVE;
+  a.updatedAt = now;
+  a.lastTouchedAt = now;
+  if (!a.activatedAt) a.activatedAt = now;
+  return { ...a, metadata: { ...a.metadata } };
+}
+export function pauseAppV2(id) {
+  const a = _appsV2.get(id);
+  if (!a) throw new Error(`app ${id} not found`);
+  _appCheckA(a.status, APP_MATURITY_V2.PAUSED);
+  a.status = APP_MATURITY_V2.PAUSED;
+  a.updatedAt = Date.now();
+  return { ...a, metadata: { ...a.metadata } };
+}
+export function archiveAppV2(id) {
+  const a = _appsV2.get(id);
+  if (!a) throw new Error(`app ${id} not found`);
+  _appCheckA(a.status, APP_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  a.status = APP_MATURITY_V2.ARCHIVED;
+  a.updatedAt = now;
+  if (!a.archivedAt) a.archivedAt = now;
+  return { ...a, metadata: { ...a.metadata } };
+}
+export function touchAppV2(id) {
+  const a = _appsV2.get(id);
+  if (!a) throw new Error(`app ${id} not found`);
+  if (_appTerminal.has(a.status))
+    throw new Error(`cannot touch terminal app ${id}`);
+  const now = Date.now();
+  a.lastTouchedAt = now;
+  a.updatedAt = now;
+  return { ...a, metadata: { ...a.metadata } };
+}
+export function getAppV2(id) {
+  const a = _appsV2.get(id);
+  if (!a) return null;
+  return { ...a, metadata: { ...a.metadata } };
+}
+export function listAppsV2() {
+  return [..._appsV2.values()].map((a) => ({
+    ...a,
+    metadata: { ...a.metadata },
+  }));
+}
+
+function _appCountPendingBuilds(appId) {
+  let n = 0;
+  for (const b of _appBuilds.values())
+    if (
+      b.appId === appId &&
+      (b.status === APP_BUILD_LIFECYCLE_V2.QUEUED ||
+        b.status === APP_BUILD_LIFECYCLE_V2.BUILDING)
+    )
+      n++;
+  return n;
+}
+
+export function createAppBuildV2({ id, appId, target, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!appId || typeof appId !== "string") throw new Error("appId is required");
+  if (_appBuilds.has(id)) throw new Error(`app build ${id} already exists`);
+  if (!_appsV2.has(appId)) throw new Error(`app ${appId} not found`);
+  const pending = _appCountPendingBuilds(appId);
+  if (pending >= _appMaxPendingBuildsPerApp)
+    throw new Error(
+      `max pending app builds per app (${_appMaxPendingBuildsPerApp}) reached for ${appId}`,
+    );
+  const now = Date.now();
+  const b = {
+    id,
+    appId,
+    target: target || "web",
+    status: APP_BUILD_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _appBuilds.set(id, b);
+  return { ...b, metadata: { ...b.metadata } };
+}
+function _appCheckB(from, to) {
+  const a = _appBuildTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid app build transition ${from} → ${to}`);
+}
+export function startAppBuildV2(id) {
+  const b = _appBuilds.get(id);
+  if (!b) throw new Error(`app build ${id} not found`);
+  _appCheckB(b.status, APP_BUILD_LIFECYCLE_V2.BUILDING);
+  const now = Date.now();
+  b.status = APP_BUILD_LIFECYCLE_V2.BUILDING;
+  b.updatedAt = now;
+  if (!b.startedAt) b.startedAt = now;
+  return { ...b, metadata: { ...b.metadata } };
+}
+export function succeedAppBuildV2(id) {
+  const b = _appBuilds.get(id);
+  if (!b) throw new Error(`app build ${id} not found`);
+  _appCheckB(b.status, APP_BUILD_LIFECYCLE_V2.SUCCEEDED);
+  const now = Date.now();
+  b.status = APP_BUILD_LIFECYCLE_V2.SUCCEEDED;
+  b.updatedAt = now;
+  if (!b.settledAt) b.settledAt = now;
+  return { ...b, metadata: { ...b.metadata } };
+}
+export function failAppBuildV2(id, reason) {
+  const b = _appBuilds.get(id);
+  if (!b) throw new Error(`app build ${id} not found`);
+  _appCheckB(b.status, APP_BUILD_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  b.status = APP_BUILD_LIFECYCLE_V2.FAILED;
+  b.updatedAt = now;
+  if (!b.settledAt) b.settledAt = now;
+  if (reason) b.metadata.failReason = String(reason);
+  return { ...b, metadata: { ...b.metadata } };
+}
+export function cancelAppBuildV2(id, reason) {
+  const b = _appBuilds.get(id);
+  if (!b) throw new Error(`app build ${id} not found`);
+  _appCheckB(b.status, APP_BUILD_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  b.status = APP_BUILD_LIFECYCLE_V2.CANCELLED;
+  b.updatedAt = now;
+  if (!b.settledAt) b.settledAt = now;
+  if (reason) b.metadata.cancelReason = String(reason);
+  return { ...b, metadata: { ...b.metadata } };
+}
+export function getAppBuildV2(id) {
+  const b = _appBuilds.get(id);
+  if (!b) return null;
+  return { ...b, metadata: { ...b.metadata } };
+}
+export function listAppBuildsV2() {
+  return [..._appBuilds.values()].map((b) => ({
+    ...b,
+    metadata: { ...b.metadata },
+  }));
+}
+
+export function autoPauseIdleAppsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const a of _appsV2.values())
+    if (
+      a.status === APP_MATURITY_V2.ACTIVE &&
+      t - a.lastTouchedAt >= _appIdleMs
+    ) {
+      a.status = APP_MATURITY_V2.PAUSED;
+      a.updatedAt = t;
+      flipped.push(a.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckAppBuildsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const b of _appBuilds.values())
+    if (
+      b.status === APP_BUILD_LIFECYCLE_V2.BUILDING &&
+      b.startedAt != null &&
+      t - b.startedAt >= _appBuildStuckMs
+    ) {
+      b.status = APP_BUILD_LIFECYCLE_V2.FAILED;
+      b.updatedAt = t;
+      if (!b.settledAt) b.settledAt = t;
+      b.metadata.failReason = "auto-fail-stuck";
+      flipped.push(b.id);
+    }
+  return { flipped, count: flipped.length };
+}
+
+export function getAppBuilderGovStatsV2() {
+  const appsByStatus = {};
+  for (const s of Object.values(APP_MATURITY_V2)) appsByStatus[s] = 0;
+  for (const a of _appsV2.values()) appsByStatus[a.status]++;
+  const buildsByStatus = {};
+  for (const s of Object.values(APP_BUILD_LIFECYCLE_V2)) buildsByStatus[s] = 0;
+  for (const b of _appBuilds.values()) buildsByStatus[b.status]++;
+  return {
+    totalAppsV2: _appsV2.size,
+    totalAppBuildsV2: _appBuilds.size,
+    maxActiveAppsPerOwner: _appMaxActivePerOwner,
+    maxPendingAppBuildsPerApp: _appMaxPendingBuildsPerApp,
+    appIdleMs: _appIdleMs,
+    appBuildStuckMs: _appBuildStuckMs,
+    appsByStatus,
+    buildsByStatus,
+  };
+}

package/src/lib/audit-logger.js

@@ -741,3 +741,324 @@ export function _resetStateV2() {
   _archiveRetentionMs = AUDIT_DEFAULT_ARCHIVE_RETENTION_MS;
   _purgeRetentionMs = AUDIT_DEFAULT_PURGE_RETENTION_MS;
 }
+
+// =====================================================================
+// audit-logger V2 governance overlay (iter16)
+// =====================================================================
+export const AUD_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  SUSPENDED: "suspended",
+  ARCHIVED: "archived",
+});
+export const AUD_WRITE_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  WRITING: "writing",
+  WRITTEN: "written",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _audPTrans = new Map([
+  [
+    AUD_PROFILE_MATURITY_V2.PENDING,
+    new Set([AUD_PROFILE_MATURITY_V2.ACTIVE, AUD_PROFILE_MATURITY_V2.ARCHIVED]),
+  ],
+  [
+    AUD_PROFILE_MATURITY_V2.ACTIVE,
+    new Set([
+      AUD_PROFILE_MATURITY_V2.SUSPENDED,
+      AUD_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    AUD_PROFILE_MATURITY_V2.SUSPENDED,
+    new Set([AUD_PROFILE_MATURITY_V2.ACTIVE, AUD_PROFILE_MATURITY_V2.ARCHIVED]),
+  ],
+  [AUD_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _audPTerminal = new Set([AUD_PROFILE_MATURITY_V2.ARCHIVED]);
+const _audJTrans = new Map([
+  [
+    AUD_WRITE_LIFECYCLE_V2.QUEUED,
+    new Set([AUD_WRITE_LIFECYCLE_V2.WRITING, AUD_WRITE_LIFECYCLE_V2.CANCELLED]),
+  ],
+  [
+    AUD_WRITE_LIFECYCLE_V2.WRITING,
+    new Set([
+      AUD_WRITE_LIFECYCLE_V2.WRITTEN,
+      AUD_WRITE_LIFECYCLE_V2.FAILED,
+      AUD_WRITE_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [AUD_WRITE_LIFECYCLE_V2.WRITTEN, new Set()],
+  [AUD_WRITE_LIFECYCLE_V2.FAILED, new Set()],
+  [AUD_WRITE_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _audPsV2 = new Map();
+const _audJsV2 = new Map();
+let _audMaxActive = 8,
+  _audMaxPending = 30,
+  _audIdleMs = 30 * 24 * 60 * 60 * 1000,
+  _audStuckMs = 60 * 1000;
+function _audPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _audCheckP(from, to) {
+  const a = _audPTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid aud profile transition ${from} → ${to}`);
+}
+function _audCheckJ(from, to) {
+  const a = _audJTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid aud write transition ${from} → ${to}`);
+}
+function _audCountActive(owner) {
+  let c = 0;
+  for (const p of _audPsV2.values())
+    if (p.owner === owner && p.status === AUD_PROFILE_MATURITY_V2.ACTIVE) c++;
+  return c;
+}
+function _audCountPending(profileId) {
+  let c = 0;
+  for (const j of _audJsV2.values())
+    if (
+      j.profileId === profileId &&
+      (j.status === AUD_WRITE_LIFECYCLE_V2.QUEUED ||
+        j.status === AUD_WRITE_LIFECYCLE_V2.WRITING)
+    )
+      c++;
+  return c;
+}
+export function setMaxActiveAudProfilesPerOwnerV2(n) {
+  _audMaxActive = _audPos(n, "maxActiveAudProfilesPerOwner");
+}
+export function getMaxActiveAudProfilesPerOwnerV2() {
+  return _audMaxActive;
+}
+export function setMaxPendingAudWritesPerProfileV2(n) {
+  _audMaxPending = _audPos(n, "maxPendingAudWritesPerProfile");
+}
+export function getMaxPendingAudWritesPerProfileV2() {
+  return _audMaxPending;
+}
+export function setAudProfileIdleMsV2(n) {
+  _audIdleMs = _audPos(n, "audProfileIdleMs");
+}
+export function getAudProfileIdleMsV2() {
+  return _audIdleMs;
+}
+export function setAudWriteStuckMsV2(n) {
+  _audStuckMs = _audPos(n, "audWriteStuckMs");
+}
+export function getAudWriteStuckMsV2() {
+  return _audStuckMs;
+}
+export function _resetStateAuditLoggerV2() {
+  _audPsV2.clear();
+  _audJsV2.clear();
+  _audMaxActive = 8;
+  _audMaxPending = 30;
+  _audIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _audStuckMs = 60 * 1000;
+}
+export function registerAudProfileV2({ id, owner, level, metadata } = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_audPsV2.has(id)) throw new Error(`aud profile ${id} already exists`);
+  const now = Date.now();
+  const p = {
+    id,
+    owner,
+    level: level || "info",
+    status: AUD_PROFILE_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    lastTouchedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _audPsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function activateAudProfileV2(id) {
+  const p = _audPsV2.get(id);
+  if (!p) throw new Error(`aud profile ${id} not found`);
+  const isInitial = p.status === AUD_PROFILE_MATURITY_V2.PENDING;
+  _audCheckP(p.status, AUD_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _audCountActive(p.owner) >= _audMaxActive)
+    throw new Error(`max active aud profiles for owner ${p.owner} reached`);
+  const now = Date.now();
+  p.status = AUD_PROFILE_MATURITY_V2.ACTIVE;
+  p.updatedAt = now;
+  p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function suspendAudProfileV2(id) {
+  const p = _audPsV2.get(id);
+  if (!p) throw new Error(`aud profile ${id} not found`);
+  _audCheckP(p.status, AUD_PROFILE_MATURITY_V2.SUSPENDED);
+  p.status = AUD_PROFILE_MATURITY_V2.SUSPENDED;
+  p.updatedAt = Date.now();
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function archiveAudProfileV2(id) {
+  const p = _audPsV2.get(id);
+  if (!p) throw new Error(`aud profile ${id} not found`);
+  _audCheckP(p.status, AUD_PROFILE_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  p.status = AUD_PROFILE_MATURITY_V2.ARCHIVED;
+  p.updatedAt = now;
+  if (!p.archivedAt) p.archivedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function touchAudProfileV2(id) {
+  const p = _audPsV2.get(id);
+  if (!p) throw new Error(`aud profile ${id} not found`);
+  if (_audPTerminal.has(p.status))
+    throw new Error(`cannot touch terminal aud profile ${id}`);
+  const now = Date.now();
+  p.lastTouchedAt = now;
+  p.updatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getAudProfileV2(id) {
+  const p = _audPsV2.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listAudProfilesV2() {
+  return [..._audPsV2.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+export function createAudWriteV2({ id, profileId, key, metadata } = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_audJsV2.has(id)) throw new Error(`aud write ${id} already exists`);
+  if (!_audPsV2.has(profileId))
+    throw new Error(`aud profile ${profileId} not found`);
+  if (_audCountPending(profileId) >= _audMaxPending)
+    throw new Error(`max pending aud writes for profile ${profileId} reached`);
+  const now = Date.now();
+  const j = {
+    id,
+    profileId,
+    key: key || "",
+    status: AUD_WRITE_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _audJsV2.set(id, j);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function writingAudWriteV2(id) {
+  const j = _audJsV2.get(id);
+  if (!j) throw new Error(`aud write ${id} not found`);
+  _audCheckJ(j.status, AUD_WRITE_LIFECYCLE_V2.WRITING);
+  const now = Date.now();
+  j.status = AUD_WRITE_LIFECYCLE_V2.WRITING;
+  j.updatedAt = now;
+  if (!j.startedAt) j.startedAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function writeOkAudV2(id) {
+  const j = _audJsV2.get(id);
+  if (!j) throw new Error(`aud write ${id} not found`);
+  _audCheckJ(j.status, AUD_WRITE_LIFECYCLE_V2.WRITTEN);
+  const now = Date.now();
+  j.status = AUD_WRITE_LIFECYCLE_V2.WRITTEN;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function failAudWriteV2(id, reason) {
+  const j = _audJsV2.get(id);
+  if (!j) throw new Error(`aud write ${id} not found`);
+  _audCheckJ(j.status, AUD_WRITE_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  j.status = AUD_WRITE_LIFECYCLE_V2.FAILED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.failReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function cancelAudWriteV2(id, reason) {
+  const j = _audJsV2.get(id);
+  if (!j) throw new Error(`aud write ${id} not found`);
+  _audCheckJ(j.status, AUD_WRITE_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  j.status = AUD_WRITE_LIFECYCLE_V2.CANCELLED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.cancelReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function getAudWriteV2(id) {
+  const j = _audJsV2.get(id);
+  if (!j) return null;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function listAudWritesV2() {
+  return [..._audJsV2.values()].map((j) => ({
+    ...j,
+    metadata: { ...j.metadata },
+  }));
+}
+export function autoSuspendIdleAudProfilesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _audPsV2.values())
+    if (
+      p.status === AUD_PROFILE_MATURITY_V2.ACTIVE &&
+      t - p.lastTouchedAt >= _audIdleMs
+    ) {
+      p.status = AUD_PROFILE_MATURITY_V2.SUSPENDED;
+      p.updatedAt = t;
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckAudWritesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const j of _audJsV2.values())
+    if (
+      j.status === AUD_WRITE_LIFECYCLE_V2.WRITING &&
+      j.startedAt != null &&
+      t - j.startedAt >= _audStuckMs
+    ) {
+      j.status = AUD_WRITE_LIFECYCLE_V2.FAILED;
+      j.updatedAt = t;
+      if (!j.settledAt) j.settledAt = t;
+      j.metadata.failReason = "auto-fail-stuck";
+      flipped.push(j.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getAuditLoggerGovStatsV2() {
+  const profilesByStatus = {};
+  for (const v of Object.values(AUD_PROFILE_MATURITY_V2))
+    profilesByStatus[v] = 0;
+  for (const p of _audPsV2.values()) profilesByStatus[p.status]++;
+  const writesByStatus = {};
+  for (const v of Object.values(AUD_WRITE_LIFECYCLE_V2)) writesByStatus[v] = 0;
+  for (const j of _audJsV2.values()) writesByStatus[j.status]++;
+  return {
+    totalAudProfilesV2: _audPsV2.size,
+    totalAudWritesV2: _audJsV2.size,
+    maxActiveAudProfilesPerOwner: _audMaxActive,
+    maxPendingAudWritesPerProfile: _audMaxPending,
+    audProfileIdleMs: _audIdleMs,
+    audWriteStuckMs: _audStuckMs,
+    profilesByStatus,
+    writesByStatus,
+  };
+}