chainlesschain 0.132.0 → 0.145.0

package/src/lib/hardening-manager.js

@@ -1030,3 +1030,344 @@ export function getHardeningStatsV2() {
     baselinesByStatus,
   };
 }
+
+// =====================================================================
+// hardening-manager V2 governance overlay (iter17)
+// =====================================================================
+export const HARDGOV_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  DISABLED: "disabled",
+  ARCHIVED: "archived",
+});
+export const HARDGOV_SCAN_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  SCANNING: "scanning",
+  SCANNED: "scanned",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _hardgovPTrans = new Map([
+  [
+    HARDGOV_PROFILE_MATURITY_V2.PENDING,
+    new Set([
+      HARDGOV_PROFILE_MATURITY_V2.ACTIVE,
+      HARDGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    HARDGOV_PROFILE_MATURITY_V2.ACTIVE,
+    new Set([
+      HARDGOV_PROFILE_MATURITY_V2.DISABLED,
+      HARDGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    HARDGOV_PROFILE_MATURITY_V2.DISABLED,
+    new Set([
+      HARDGOV_PROFILE_MATURITY_V2.ACTIVE,
+      HARDGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [HARDGOV_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _hardgovPTerminal = new Set([HARDGOV_PROFILE_MATURITY_V2.ARCHIVED]);
+const _hardgovJTrans = new Map([
+  [
+    HARDGOV_SCAN_LIFECYCLE_V2.QUEUED,
+    new Set([
+      HARDGOV_SCAN_LIFECYCLE_V2.SCANNING,
+      HARDGOV_SCAN_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    HARDGOV_SCAN_LIFECYCLE_V2.SCANNING,
+    new Set([
+      HARDGOV_SCAN_LIFECYCLE_V2.SCANNED,
+      HARDGOV_SCAN_LIFECYCLE_V2.FAILED,
+      HARDGOV_SCAN_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [HARDGOV_SCAN_LIFECYCLE_V2.SCANNED, new Set()],
+  [HARDGOV_SCAN_LIFECYCLE_V2.FAILED, new Set()],
+  [HARDGOV_SCAN_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _hardgovPsV2 = new Map();
+const _hardgovJsV2 = new Map();
+let _hardgovMaxActive = 8,
+  _hardgovMaxPending = 20,
+  _hardgovIdleMs = 30 * 24 * 60 * 60 * 1000,
+  _hardgovStuckMs = 60 * 1000;
+function _hardgovPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _hardgovCheckP(from, to) {
+  const a = _hardgovPTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid hardgov profile transition ${from} → ${to}`);
+}
+function _hardgovCheckJ(from, to) {
+  const a = _hardgovJTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid hardgov scan transition ${from} → ${to}`);
+}
+function _hardgovCountActive(owner) {
+  let c = 0;
+  for (const p of _hardgovPsV2.values())
+    if (p.owner === owner && p.status === HARDGOV_PROFILE_MATURITY_V2.ACTIVE)
+      c++;
+  return c;
+}
+function _hardgovCountPending(profileId) {
+  let c = 0;
+  for (const j of _hardgovJsV2.values())
+    if (
+      j.profileId === profileId &&
+      (j.status === HARDGOV_SCAN_LIFECYCLE_V2.QUEUED ||
+        j.status === HARDGOV_SCAN_LIFECYCLE_V2.SCANNING)
+    )
+      c++;
+  return c;
+}
+export function setMaxActiveHardgovProfilesPerOwnerV2(n) {
+  _hardgovMaxActive = _hardgovPos(n, "maxActiveHardgovProfilesPerOwner");
+}
+export function getMaxActiveHardgovProfilesPerOwnerV2() {
+  return _hardgovMaxActive;
+}
+export function setMaxPendingHardgovScansPerProfileV2(n) {
+  _hardgovMaxPending = _hardgovPos(n, "maxPendingHardgovScansPerProfile");
+}
+export function getMaxPendingHardgovScansPerProfileV2() {
+  return _hardgovMaxPending;
+}
+export function setHardgovProfileIdleMsV2(n) {
+  _hardgovIdleMs = _hardgovPos(n, "hardgovProfileIdleMs");
+}
+export function getHardgovProfileIdleMsV2() {
+  return _hardgovIdleMs;
+}
+export function setHardgovScanStuckMsV2(n) {
+  _hardgovStuckMs = _hardgovPos(n, "hardgovScanStuckMs");
+}
+export function getHardgovScanStuckMsV2() {
+  return _hardgovStuckMs;
+}
+export function _resetStateHardeningManagerV2() {
+  _hardgovPsV2.clear();
+  _hardgovJsV2.clear();
+  _hardgovMaxActive = 8;
+  _hardgovMaxPending = 20;
+  _hardgovIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _hardgovStuckMs = 60 * 1000;
+}
+export function registerHardgovProfileV2({
+  id,
+  owner,
+  category,
+  metadata,
+} = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_hardgovPsV2.has(id))
+    throw new Error(`hardgov profile ${id} already exists`);
+  const now = Date.now();
+  const p = {
+    id,
+    owner,
+    category: category || "system",
+    status: HARDGOV_PROFILE_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    lastTouchedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _hardgovPsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function activateHardgovProfileV2(id) {
+  const p = _hardgovPsV2.get(id);
+  if (!p) throw new Error(`hardgov profile ${id} not found`);
+  const isInitial = p.status === HARDGOV_PROFILE_MATURITY_V2.PENDING;
+  _hardgovCheckP(p.status, HARDGOV_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _hardgovCountActive(p.owner) >= _hardgovMaxActive)
+    throw new Error(`max active hardgov profiles for owner ${p.owner} reached`);
+  const now = Date.now();
+  p.status = HARDGOV_PROFILE_MATURITY_V2.ACTIVE;
+  p.updatedAt = now;
+  p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function disableHardgovProfileV2(id) {
+  const p = _hardgovPsV2.get(id);
+  if (!p) throw new Error(`hardgov profile ${id} not found`);
+  _hardgovCheckP(p.status, HARDGOV_PROFILE_MATURITY_V2.DISABLED);
+  p.status = HARDGOV_PROFILE_MATURITY_V2.DISABLED;
+  p.updatedAt = Date.now();
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function archiveHardgovProfileV2(id) {
+  const p = _hardgovPsV2.get(id);
+  if (!p) throw new Error(`hardgov profile ${id} not found`);
+  _hardgovCheckP(p.status, HARDGOV_PROFILE_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  p.status = HARDGOV_PROFILE_MATURITY_V2.ARCHIVED;
+  p.updatedAt = now;
+  if (!p.archivedAt) p.archivedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function touchHardgovProfileV2(id) {
+  const p = _hardgovPsV2.get(id);
+  if (!p) throw new Error(`hardgov profile ${id} not found`);
+  if (_hardgovPTerminal.has(p.status))
+    throw new Error(`cannot touch terminal hardgov profile ${id}`);
+  const now = Date.now();
+  p.lastTouchedAt = now;
+  p.updatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getHardgovProfileV2(id) {
+  const p = _hardgovPsV2.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listHardgovProfilesV2() {
+  return [..._hardgovPsV2.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+export function createHardgovScanV2({ id, profileId, target, metadata } = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_hardgovJsV2.has(id))
+    throw new Error(`hardgov scan ${id} already exists`);
+  if (!_hardgovPsV2.has(profileId))
+    throw new Error(`hardgov profile ${profileId} not found`);
+  if (_hardgovCountPending(profileId) >= _hardgovMaxPending)
+    throw new Error(
+      `max pending hardgov scans for profile ${profileId} reached`,
+    );
+  const now = Date.now();
+  const j = {
+    id,
+    profileId,
+    target: target || "",
+    status: HARDGOV_SCAN_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _hardgovJsV2.set(id, j);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function scanningHardgovScanV2(id) {
+  const j = _hardgovJsV2.get(id);
+  if (!j) throw new Error(`hardgov scan ${id} not found`);
+  _hardgovCheckJ(j.status, HARDGOV_SCAN_LIFECYCLE_V2.SCANNING);
+  const now = Date.now();
+  j.status = HARDGOV_SCAN_LIFECYCLE_V2.SCANNING;
+  j.updatedAt = now;
+  if (!j.startedAt) j.startedAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function completeScanHardgovV2(id) {
+  const j = _hardgovJsV2.get(id);
+  if (!j) throw new Error(`hardgov scan ${id} not found`);
+  _hardgovCheckJ(j.status, HARDGOV_SCAN_LIFECYCLE_V2.SCANNED);
+  const now = Date.now();
+  j.status = HARDGOV_SCAN_LIFECYCLE_V2.SCANNED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function failHardgovScanV2(id, reason) {
+  const j = _hardgovJsV2.get(id);
+  if (!j) throw new Error(`hardgov scan ${id} not found`);
+  _hardgovCheckJ(j.status, HARDGOV_SCAN_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  j.status = HARDGOV_SCAN_LIFECYCLE_V2.FAILED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.failReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function cancelHardgovScanV2(id, reason) {
+  const j = _hardgovJsV2.get(id);
+  if (!j) throw new Error(`hardgov scan ${id} not found`);
+  _hardgovCheckJ(j.status, HARDGOV_SCAN_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  j.status = HARDGOV_SCAN_LIFECYCLE_V2.CANCELLED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.cancelReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function getHardgovScanV2(id) {
+  const j = _hardgovJsV2.get(id);
+  if (!j) return null;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function listHardgovScansV2() {
+  return [..._hardgovJsV2.values()].map((j) => ({
+    ...j,
+    metadata: { ...j.metadata },
+  }));
+}
+export function autoDisableIdleHardgovProfilesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _hardgovPsV2.values())
+    if (
+      p.status === HARDGOV_PROFILE_MATURITY_V2.ACTIVE &&
+      t - p.lastTouchedAt >= _hardgovIdleMs
+    ) {
+      p.status = HARDGOV_PROFILE_MATURITY_V2.DISABLED;
+      p.updatedAt = t;
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckHardgovScansV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const j of _hardgovJsV2.values())
+    if (
+      j.status === HARDGOV_SCAN_LIFECYCLE_V2.SCANNING &&
+      j.startedAt != null &&
+      t - j.startedAt >= _hardgovStuckMs
+    ) {
+      j.status = HARDGOV_SCAN_LIFECYCLE_V2.FAILED;
+      j.updatedAt = t;
+      if (!j.settledAt) j.settledAt = t;
+      j.metadata.failReason = "auto-fail-stuck";
+      flipped.push(j.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getHardeningManagerGovStatsV2() {
+  const profilesByStatus = {};
+  for (const v of Object.values(HARDGOV_PROFILE_MATURITY_V2))
+    profilesByStatus[v] = 0;
+  for (const p of _hardgovPsV2.values()) profilesByStatus[p.status]++;
+  const scansByStatus = {};
+  for (const v of Object.values(HARDGOV_SCAN_LIFECYCLE_V2))
+    scansByStatus[v] = 0;
+  for (const j of _hardgovJsV2.values()) scansByStatus[j.status]++;
+  return {
+    totalHardgovProfilesV2: _hardgovPsV2.size,
+    totalHardgovScansV2: _hardgovJsV2.size,
+    maxActiveHardgovProfilesPerOwner: _hardgovMaxActive,
+    maxPendingHardgovScansPerProfile: _hardgovMaxPending,
+    hardgovProfileIdleMs: _hardgovIdleMs,
+    hardgovScanStuckMs: _hardgovStuckMs,
+    profilesByStatus,
+    scansByStatus,
+  };
+}

package/src/lib/hierarchical-memory.js

@@ -1068,3 +1068,344 @@ export function _resetV2State() {
     _consolidationTimer = null;
   }
 }
+
+// ===== V2 Surface: Hierarchical Memory governance overlay (CLI v0.137.0) =====
+export const HMEM_TIER_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  DORMANT: "dormant",
+  RETIRED: "retired",
+});
+export const HMEM_PROMOTION_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  PROMOTING: "promoting",
+  PROMOTED: "promoted",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+
+const _hmemTierTrans = new Map([
+  [
+    HMEM_TIER_MATURITY_V2.PENDING,
+    new Set([HMEM_TIER_MATURITY_V2.ACTIVE, HMEM_TIER_MATURITY_V2.RETIRED]),
+  ],
+  [
+    HMEM_TIER_MATURITY_V2.ACTIVE,
+    new Set([HMEM_TIER_MATURITY_V2.DORMANT, HMEM_TIER_MATURITY_V2.RETIRED]),
+  ],
+  [
+    HMEM_TIER_MATURITY_V2.DORMANT,
+    new Set([HMEM_TIER_MATURITY_V2.ACTIVE, HMEM_TIER_MATURITY_V2.RETIRED]),
+  ],
+  [HMEM_TIER_MATURITY_V2.RETIRED, new Set()],
+]);
+const _hmemTierTerminal = new Set([HMEM_TIER_MATURITY_V2.RETIRED]);
+const _hmemPromoTrans = new Map([
+  [
+    HMEM_PROMOTION_LIFECYCLE_V2.QUEUED,
+    new Set([
+      HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING,
+      HMEM_PROMOTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING,
+    new Set([
+      HMEM_PROMOTION_LIFECYCLE_V2.PROMOTED,
+      HMEM_PROMOTION_LIFECYCLE_V2.FAILED,
+      HMEM_PROMOTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [HMEM_PROMOTION_LIFECYCLE_V2.PROMOTED, new Set()],
+  [HMEM_PROMOTION_LIFECYCLE_V2.FAILED, new Set()],
+  [HMEM_PROMOTION_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _hmemTiers = new Map();
+const _hmemPromos = new Map();
+let _hmemMaxActivePerOwner = 12;
+let _hmemMaxPendingPerTier = 30;
+let _hmemTierIdleMs = 30 * 24 * 60 * 60 * 1000;
+let _hmemPromoStuckMs = 5 * 60 * 1000;
+
+function _hmemPos(n, lbl) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${lbl} must be positive integer`);
+  return v;
+}
+
+export function setMaxActiveHmemTiersPerOwnerV2(n) {
+  _hmemMaxActivePerOwner = _hmemPos(n, "maxActiveHmemTiersPerOwner");
+}
+export function getMaxActiveHmemTiersPerOwnerV2() {
+  return _hmemMaxActivePerOwner;
+}
+export function setMaxPendingHmemPromotionsPerTierV2(n) {
+  _hmemMaxPendingPerTier = _hmemPos(n, "maxPendingHmemPromotionsPerTier");
+}
+export function getMaxPendingHmemPromotionsPerTierV2() {
+  return _hmemMaxPendingPerTier;
+}
+export function setHmemTierIdleMsV2(n) {
+  _hmemTierIdleMs = _hmemPos(n, "hmemTierIdleMs");
+}
+export function getHmemTierIdleMsV2() {
+  return _hmemTierIdleMs;
+}
+export function setHmemPromotionStuckMsV2(n) {
+  _hmemPromoStuckMs = _hmemPos(n, "hmemPromotionStuckMs");
+}
+export function getHmemPromotionStuckMsV2() {
+  return _hmemPromoStuckMs;
+}
+
+export function _resetStateHierarchicalMemoryV2() {
+  _hmemTiers.clear();
+  _hmemPromos.clear();
+  _hmemMaxActivePerOwner = 12;
+  _hmemMaxPendingPerTier = 30;
+  _hmemTierIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _hmemPromoStuckMs = 5 * 60 * 1000;
+}
+
+export function registerHmemTierV2({ id, owner, level, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_hmemTiers.has(id)) throw new Error(`hmem tier ${id} already registered`);
+  const now = Date.now();
+  const t = {
+    id,
+    owner,
+    level: level || "short-term",
+    status: HMEM_TIER_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    activatedAt: null,
+    retiredAt: null,
+    lastTouchedAt: now,
+    metadata: { ...(metadata || {}) },
+  };
+  _hmemTiers.set(id, t);
+  return { ...t, metadata: { ...t.metadata } };
+}
+function _hmemCheckT(from, to) {
+  const a = _hmemTierTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid hmem tier transition ${from} → ${to}`);
+}
+function _hmemCountActive(owner) {
+  let n = 0;
+  for (const t of _hmemTiers.values())
+    if (t.owner === owner && t.status === HMEM_TIER_MATURITY_V2.ACTIVE) n++;
+  return n;
+}
+
+export function activateHmemTierV2(id) {
+  const t = _hmemTiers.get(id);
+  if (!t) throw new Error(`hmem tier ${id} not found`);
+  _hmemCheckT(t.status, HMEM_TIER_MATURITY_V2.ACTIVE);
+  const recovery = t.status === HMEM_TIER_MATURITY_V2.DORMANT;
+  if (!recovery) {
+    const c = _hmemCountActive(t.owner);
+    if (c >= _hmemMaxActivePerOwner)
+      throw new Error(
+        `max active hmem tiers per owner (${_hmemMaxActivePerOwner}) reached for ${t.owner}`,
+      );
+  }
+  const now = Date.now();
+  t.status = HMEM_TIER_MATURITY_V2.ACTIVE;
+  t.updatedAt = now;
+  t.lastTouchedAt = now;
+  if (!t.activatedAt) t.activatedAt = now;
+  return { ...t, metadata: { ...t.metadata } };
+}
+export function dormantHmemTierV2(id) {
+  const t = _hmemTiers.get(id);
+  if (!t) throw new Error(`hmem tier ${id} not found`);
+  _hmemCheckT(t.status, HMEM_TIER_MATURITY_V2.DORMANT);
+  t.status = HMEM_TIER_MATURITY_V2.DORMANT;
+  t.updatedAt = Date.now();
+  return { ...t, metadata: { ...t.metadata } };
+}
+export function retireHmemTierV2(id) {
+  const t = _hmemTiers.get(id);
+  if (!t) throw new Error(`hmem tier ${id} not found`);
+  _hmemCheckT(t.status, HMEM_TIER_MATURITY_V2.RETIRED);
+  const now = Date.now();
+  t.status = HMEM_TIER_MATURITY_V2.RETIRED;
+  t.updatedAt = now;
+  if (!t.retiredAt) t.retiredAt = now;
+  return { ...t, metadata: { ...t.metadata } };
+}
+export function touchHmemTierV2(id) {
+  const t = _hmemTiers.get(id);
+  if (!t) throw new Error(`hmem tier ${id} not found`);
+  if (_hmemTierTerminal.has(t.status))
+    throw new Error(`cannot touch terminal hmem tier ${id}`);
+  const now = Date.now();
+  t.lastTouchedAt = now;
+  t.updatedAt = now;
+  return { ...t, metadata: { ...t.metadata } };
+}
+export function getHmemTierV2(id) {
+  const t = _hmemTiers.get(id);
+  if (!t) return null;
+  return { ...t, metadata: { ...t.metadata } };
+}
+export function listHmemTiersV2() {
+  return [..._hmemTiers.values()].map((t) => ({
+    ...t,
+    metadata: { ...t.metadata },
+  }));
+}
+
+function _hmemCountPending(tid) {
+  let n = 0;
+  for (const p of _hmemPromos.values())
+    if (
+      p.tierId === tid &&
+      (p.status === HMEM_PROMOTION_LIFECYCLE_V2.QUEUED ||
+        p.status === HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING)
+    )
+      n++;
+  return n;
+}
+
+export function createHmemPromotionV2({ id, tierId, itemKey, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!tierId || typeof tierId !== "string")
+    throw new Error("tierId is required");
+  if (_hmemPromos.has(id))
+    throw new Error(`hmem promotion ${id} already exists`);
+  if (!_hmemTiers.has(tierId)) throw new Error(`hmem tier ${tierId} not found`);
+  const pending = _hmemCountPending(tierId);
+  if (pending >= _hmemMaxPendingPerTier)
+    throw new Error(
+      `max pending hmem promotions per tier (${_hmemMaxPendingPerTier}) reached for ${tierId}`,
+    );
+  const now = Date.now();
+  const p = {
+    id,
+    tierId,
+    itemKey: itemKey || "",
+    status: HMEM_PROMOTION_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _hmemPromos.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+function _hmemCheckP(from, to) {
+  const a = _hmemPromoTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid hmem promotion transition ${from} → ${to}`);
+}
+export function startHmemPromotionV2(id) {
+  const p = _hmemPromos.get(id);
+  if (!p) throw new Error(`hmem promotion ${id} not found`);
+  _hmemCheckP(p.status, HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING);
+  const now = Date.now();
+  p.status = HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING;
+  p.updatedAt = now;
+  if (!p.startedAt) p.startedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function completeHmemPromotionV2(id) {
+  const p = _hmemPromos.get(id);
+  if (!p) throw new Error(`hmem promotion ${id} not found`);
+  _hmemCheckP(p.status, HMEM_PROMOTION_LIFECYCLE_V2.PROMOTED);
+  const now = Date.now();
+  p.status = HMEM_PROMOTION_LIFECYCLE_V2.PROMOTED;
+  p.updatedAt = now;
+  if (!p.settledAt) p.settledAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function failHmemPromotionV2(id, reason) {
+  const p = _hmemPromos.get(id);
+  if (!p) throw new Error(`hmem promotion ${id} not found`);
+  _hmemCheckP(p.status, HMEM_PROMOTION_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  p.status = HMEM_PROMOTION_LIFECYCLE_V2.FAILED;
+  p.updatedAt = now;
+  if (!p.settledAt) p.settledAt = now;
+  if (reason) p.metadata.failReason = String(reason);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function cancelHmemPromotionV2(id, reason) {
+  const p = _hmemPromos.get(id);
+  if (!p) throw new Error(`hmem promotion ${id} not found`);
+  _hmemCheckP(p.status, HMEM_PROMOTION_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  p.status = HMEM_PROMOTION_LIFECYCLE_V2.CANCELLED;
+  p.updatedAt = now;
+  if (!p.settledAt) p.settledAt = now;
+  if (reason) p.metadata.cancelReason = String(reason);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getHmemPromotionV2(id) {
+  const p = _hmemPromos.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listHmemPromotionsV2() {
+  return [..._hmemPromos.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+
+export function autoDormantIdleHmemTiersV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const tier of _hmemTiers.values())
+    if (
+      tier.status === HMEM_TIER_MATURITY_V2.ACTIVE &&
+      t - tier.lastTouchedAt >= _hmemTierIdleMs
+    ) {
+      tier.status = HMEM_TIER_MATURITY_V2.DORMANT;
+      tier.updatedAt = t;
+      flipped.push(tier.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckHmemPromotionsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _hmemPromos.values())
+    if (
+      p.status === HMEM_PROMOTION_LIFECYCLE_V2.PROMOTING &&
+      p.startedAt != null &&
+      t - p.startedAt >= _hmemPromoStuckMs
+    ) {
+      p.status = HMEM_PROMOTION_LIFECYCLE_V2.FAILED;
+      p.updatedAt = t;
+      if (!p.settledAt) p.settledAt = t;
+      p.metadata.failReason = "auto-fail-stuck";
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+
+export function getHierarchicalMemoryGovStatsV2() {
+  const tiersByStatus = {};
+  for (const s of Object.values(HMEM_TIER_MATURITY_V2)) tiersByStatus[s] = 0;
+  for (const t of _hmemTiers.values()) tiersByStatus[t.status]++;
+  const promotionsByStatus = {};
+  for (const s of Object.values(HMEM_PROMOTION_LIFECYCLE_V2))
+    promotionsByStatus[s] = 0;
+  for (const p of _hmemPromos.values()) promotionsByStatus[p.status]++;
+  return {
+    totalTiersV2: _hmemTiers.size,
+    totalPromotionsV2: _hmemPromos.size,
+    maxActiveHmemTiersPerOwner: _hmemMaxActivePerOwner,
+    maxPendingHmemPromotionsPerTier: _hmemMaxPendingPerTier,
+    hmemTierIdleMs: _hmemTierIdleMs,
+    hmemPromotionStuckMs: _hmemPromoStuckMs,
+    tiersByStatus,
+    promotionsByStatus,
+  };
+}