chainlesschain 0.132.0 → 0.145.0

package/src/lib/sandbox-v2.js

@@ -1002,3 +1002,330 @@ export function getSandboxStatsV2() {
     },
   };
 }
+
+// =====================================================================
+// sandbox-v2 V2 governance overlay (iter16)
+// =====================================================================
+export const SBOX_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  PAUSED: "paused",
+  ARCHIVED: "archived",
+});
+export const SBOX_EXEC_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  RUNNING: "running",
+  COMPLETED: "completed",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _sboxPTrans = new Map([
+  [
+    SBOX_PROFILE_MATURITY_V2.PENDING,
+    new Set([
+      SBOX_PROFILE_MATURITY_V2.ACTIVE,
+      SBOX_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    SBOX_PROFILE_MATURITY_V2.ACTIVE,
+    new Set([
+      SBOX_PROFILE_MATURITY_V2.PAUSED,
+      SBOX_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    SBOX_PROFILE_MATURITY_V2.PAUSED,
+    new Set([
+      SBOX_PROFILE_MATURITY_V2.ACTIVE,
+      SBOX_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [SBOX_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _sboxPTerminal = new Set([SBOX_PROFILE_MATURITY_V2.ARCHIVED]);
+const _sboxJTrans = new Map([
+  [
+    SBOX_EXEC_LIFECYCLE_V2.QUEUED,
+    new Set([SBOX_EXEC_LIFECYCLE_V2.RUNNING, SBOX_EXEC_LIFECYCLE_V2.CANCELLED]),
+  ],
+  [
+    SBOX_EXEC_LIFECYCLE_V2.RUNNING,
+    new Set([
+      SBOX_EXEC_LIFECYCLE_V2.COMPLETED,
+      SBOX_EXEC_LIFECYCLE_V2.FAILED,
+      SBOX_EXEC_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [SBOX_EXEC_LIFECYCLE_V2.COMPLETED, new Set()],
+  [SBOX_EXEC_LIFECYCLE_V2.FAILED, new Set()],
+  [SBOX_EXEC_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _sboxPsV2 = new Map();
+const _sboxJsV2 = new Map();
+let _sboxMaxActive = 6,
+  _sboxMaxPending = 12,
+  _sboxIdleMs = 30 * 24 * 60 * 60 * 1000,
+  _sboxStuckMs = 60 * 1000;
+function _sboxPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _sboxCheckP(from, to) {
+  const a = _sboxPTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid sbox profile transition ${from} → ${to}`);
+}
+function _sboxCheckJ(from, to) {
+  const a = _sboxJTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid sbox exec transition ${from} → ${to}`);
+}
+function _sboxCountActive(owner) {
+  let c = 0;
+  for (const p of _sboxPsV2.values())
+    if (p.owner === owner && p.status === SBOX_PROFILE_MATURITY_V2.ACTIVE) c++;
+  return c;
+}
+function _sboxCountPending(profileId) {
+  let c = 0;
+  for (const j of _sboxJsV2.values())
+    if (
+      j.profileId === profileId &&
+      (j.status === SBOX_EXEC_LIFECYCLE_V2.QUEUED ||
+        j.status === SBOX_EXEC_LIFECYCLE_V2.RUNNING)
+    )
+      c++;
+  return c;
+}
+export function setMaxActiveSboxProfilesPerOwnerV2(n) {
+  _sboxMaxActive = _sboxPos(n, "maxActiveSboxProfilesPerOwner");
+}
+export function getMaxActiveSboxProfilesPerOwnerV2() {
+  return _sboxMaxActive;
+}
+export function setMaxPendingSboxExecsPerProfileV2(n) {
+  _sboxMaxPending = _sboxPos(n, "maxPendingSboxExecsPerProfile");
+}
+export function getMaxPendingSboxExecsPerProfileV2() {
+  return _sboxMaxPending;
+}
+export function setSboxProfileIdleMsV2(n) {
+  _sboxIdleMs = _sboxPos(n, "sboxProfileIdleMs");
+}
+export function getSboxProfileIdleMsV2() {
+  return _sboxIdleMs;
+}
+export function setSboxExecStuckMsV2(n) {
+  _sboxStuckMs = _sboxPos(n, "sboxExecStuckMs");
+}
+export function getSboxExecStuckMsV2() {
+  return _sboxStuckMs;
+}
+export function _resetStateSandboxV2() {
+  _sboxPsV2.clear();
+  _sboxJsV2.clear();
+  _sboxMaxActive = 6;
+  _sboxMaxPending = 12;
+  _sboxIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _sboxStuckMs = 60 * 1000;
+}
+export function registerSboxProfileV2({ id, owner, template, metadata } = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_sboxPsV2.has(id)) throw new Error(`sbox profile ${id} already exists`);
+  const now = Date.now();
+  const p = {
+    id,
+    owner,
+    template: template || "default",
+    status: SBOX_PROFILE_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    lastTouchedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _sboxPsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function activateSboxProfileV2(id) {
+  const p = _sboxPsV2.get(id);
+  if (!p) throw new Error(`sbox profile ${id} not found`);
+  const isInitial = p.status === SBOX_PROFILE_MATURITY_V2.PENDING;
+  _sboxCheckP(p.status, SBOX_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _sboxCountActive(p.owner) >= _sboxMaxActive)
+    throw new Error(`max active sbox profiles for owner ${p.owner} reached`);
+  const now = Date.now();
+  p.status = SBOX_PROFILE_MATURITY_V2.ACTIVE;
+  p.updatedAt = now;
+  p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function pauseSboxProfileV2(id) {
+  const p = _sboxPsV2.get(id);
+  if (!p) throw new Error(`sbox profile ${id} not found`);
+  _sboxCheckP(p.status, SBOX_PROFILE_MATURITY_V2.PAUSED);
+  p.status = SBOX_PROFILE_MATURITY_V2.PAUSED;
+  p.updatedAt = Date.now();
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function archiveSboxProfileV2(id) {
+  const p = _sboxPsV2.get(id);
+  if (!p) throw new Error(`sbox profile ${id} not found`);
+  _sboxCheckP(p.status, SBOX_PROFILE_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  p.status = SBOX_PROFILE_MATURITY_V2.ARCHIVED;
+  p.updatedAt = now;
+  if (!p.archivedAt) p.archivedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function touchSboxProfileV2(id) {
+  const p = _sboxPsV2.get(id);
+  if (!p) throw new Error(`sbox profile ${id} not found`);
+  if (_sboxPTerminal.has(p.status))
+    throw new Error(`cannot touch terminal sbox profile ${id}`);
+  const now = Date.now();
+  p.lastTouchedAt = now;
+  p.updatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getSboxProfileV2(id) {
+  const p = _sboxPsV2.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listSboxProfilesV2() {
+  return [..._sboxPsV2.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+export function createSboxExecV2({ id, profileId, command, metadata } = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_sboxJsV2.has(id)) throw new Error(`sbox exec ${id} already exists`);
+  if (!_sboxPsV2.has(profileId))
+    throw new Error(`sbox profile ${profileId} not found`);
+  if (_sboxCountPending(profileId) >= _sboxMaxPending)
+    throw new Error(`max pending sbox execs for profile ${profileId} reached`);
+  const now = Date.now();
+  const j = {
+    id,
+    profileId,
+    command: command || "",
+    status: SBOX_EXEC_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _sboxJsV2.set(id, j);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function runningSboxExecV2(id) {
+  const j = _sboxJsV2.get(id);
+  if (!j) throw new Error(`sbox exec ${id} not found`);
+  _sboxCheckJ(j.status, SBOX_EXEC_LIFECYCLE_V2.RUNNING);
+  const now = Date.now();
+  j.status = SBOX_EXEC_LIFECYCLE_V2.RUNNING;
+  j.updatedAt = now;
+  if (!j.startedAt) j.startedAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function completeExecSboxV2(id) {
+  const j = _sboxJsV2.get(id);
+  if (!j) throw new Error(`sbox exec ${id} not found`);
+  _sboxCheckJ(j.status, SBOX_EXEC_LIFECYCLE_V2.COMPLETED);
+  const now = Date.now();
+  j.status = SBOX_EXEC_LIFECYCLE_V2.COMPLETED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function failSboxExecV2(id, reason) {
+  const j = _sboxJsV2.get(id);
+  if (!j) throw new Error(`sbox exec ${id} not found`);
+  _sboxCheckJ(j.status, SBOX_EXEC_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  j.status = SBOX_EXEC_LIFECYCLE_V2.FAILED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.failReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function cancelSboxExecV2(id, reason) {
+  const j = _sboxJsV2.get(id);
+  if (!j) throw new Error(`sbox exec ${id} not found`);
+  _sboxCheckJ(j.status, SBOX_EXEC_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  j.status = SBOX_EXEC_LIFECYCLE_V2.CANCELLED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.cancelReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function getSboxExecV2(id) {
+  const j = _sboxJsV2.get(id);
+  if (!j) return null;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function listSboxExecsV2() {
+  return [..._sboxJsV2.values()].map((j) => ({
+    ...j,
+    metadata: { ...j.metadata },
+  }));
+}
+export function autoPauseIdleSboxProfilesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _sboxPsV2.values())
+    if (
+      p.status === SBOX_PROFILE_MATURITY_V2.ACTIVE &&
+      t - p.lastTouchedAt >= _sboxIdleMs
+    ) {
+      p.status = SBOX_PROFILE_MATURITY_V2.PAUSED;
+      p.updatedAt = t;
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckSboxExecsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const j of _sboxJsV2.values())
+    if (
+      j.status === SBOX_EXEC_LIFECYCLE_V2.RUNNING &&
+      j.startedAt != null &&
+      t - j.startedAt >= _sboxStuckMs
+    ) {
+      j.status = SBOX_EXEC_LIFECYCLE_V2.FAILED;
+      j.updatedAt = t;
+      if (!j.settledAt) j.settledAt = t;
+      j.metadata.failReason = "auto-fail-stuck";
+      flipped.push(j.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getSandboxGovStatsV2() {
+  const profilesByStatus = {};
+  for (const v of Object.values(SBOX_PROFILE_MATURITY_V2))
+    profilesByStatus[v] = 0;
+  for (const p of _sboxPsV2.values()) profilesByStatus[p.status]++;
+  const execsByStatus = {};
+  for (const v of Object.values(SBOX_EXEC_LIFECYCLE_V2)) execsByStatus[v] = 0;
+  for (const j of _sboxJsV2.values()) execsByStatus[j.status]++;
+  return {
+    totalSboxProfilesV2: _sboxPsV2.size,
+    totalSboxExecsV2: _sboxJsV2.size,
+    maxActiveSboxProfilesPerOwner: _sboxMaxActive,
+    maxPendingSboxExecsPerProfile: _sboxMaxPending,
+    sboxProfileIdleMs: _sboxIdleMs,
+    sboxExecStuckMs: _sboxStuckMs,
+    profilesByStatus,
+    execsByStatus,
+  };
+}

package/src/lib/service-container.js

@@ -181,3 +181,345 @@ export class ServiceContainer {
 export function createServiceContainer() {
   return new ServiceContainer();
 }
+
+// ===== V2 Surface: Service Container governance overlay (CLI v0.141.0) =====
+export const SVC_CONTAINER_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  DEGRADED: "degraded",
+  DECOMMISSIONED: "decommissioned",
+});
+export const SVC_RESOLUTION_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  RESOLVING: "resolving",
+  RESOLVED: "resolved",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _svcCTrans = new Map([
+  [
+    SVC_CONTAINER_MATURITY_V2.PENDING,
+    new Set([
+      SVC_CONTAINER_MATURITY_V2.ACTIVE,
+      SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED,
+    ]),
+  ],
+  [
+    SVC_CONTAINER_MATURITY_V2.ACTIVE,
+    new Set([
+      SVC_CONTAINER_MATURITY_V2.DEGRADED,
+      SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED,
+    ]),
+  ],
+  [
+    SVC_CONTAINER_MATURITY_V2.DEGRADED,
+    new Set([
+      SVC_CONTAINER_MATURITY_V2.ACTIVE,
+      SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED,
+    ]),
+  ],
+  [SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED, new Set()],
+]);
+const _svcCTerminal = new Set([SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED]);
+const _svcRTrans = new Map([
+  [
+    SVC_RESOLUTION_LIFECYCLE_V2.QUEUED,
+    new Set([
+      SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING,
+      SVC_RESOLUTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING,
+    new Set([
+      SVC_RESOLUTION_LIFECYCLE_V2.RESOLVED,
+      SVC_RESOLUTION_LIFECYCLE_V2.FAILED,
+      SVC_RESOLUTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [SVC_RESOLUTION_LIFECYCLE_V2.RESOLVED, new Set()],
+  [SVC_RESOLUTION_LIFECYCLE_V2.FAILED, new Set()],
+  [SVC_RESOLUTION_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _svcCsV2 = new Map();
+const _svcRsV2 = new Map();
+let _svcMaxActivePerOwner = 8,
+  _svcMaxPendingResPerContainer = 25,
+  _svcIdleMs = 60 * 60 * 1000,
+  _svcStuckMs = 30 * 1000;
+function _svcPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _svcCheckC(from, to) {
+  const a = _svcCTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid svc container transition ${from} → ${to}`);
+}
+function _svcCheckR(from, to) {
+  const a = _svcRTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid svc resolution transition ${from} → ${to}`);
+}
+export function setMaxActiveSvcContainersPerOwnerV2(n) {
+  _svcMaxActivePerOwner = _svcPos(n, "maxActiveSvcContainersPerOwner");
+}
+export function getMaxActiveSvcContainersPerOwnerV2() {
+  return _svcMaxActivePerOwner;
+}
+export function setMaxPendingSvcResolutionsPerContainerV2(n) {
+  _svcMaxPendingResPerContainer = _svcPos(
+    n,
+    "maxPendingSvcResolutionsPerContainer",
+  );
+}
+export function getMaxPendingSvcResolutionsPerContainerV2() {
+  return _svcMaxPendingResPerContainer;
+}
+export function setSvcContainerIdleMsV2(n) {
+  _svcIdleMs = _svcPos(n, "svcContainerIdleMs");
+}
+export function getSvcContainerIdleMsV2() {
+  return _svcIdleMs;
+}
+export function setSvcResolutionStuckMsV2(n) {
+  _svcStuckMs = _svcPos(n, "svcResolutionStuckMs");
+}
+export function getSvcResolutionStuckMsV2() {
+  return _svcStuckMs;
+}
+export function _resetStateServiceContainerV2() {
+  _svcCsV2.clear();
+  _svcRsV2.clear();
+  _svcMaxActivePerOwner = 8;
+  _svcMaxPendingResPerContainer = 25;
+  _svcIdleMs = 60 * 60 * 1000;
+  _svcStuckMs = 30 * 1000;
+}
+export function registerSvcContainerV2({ id, owner, scope, metadata } = {}) {
+  if (!id) throw new Error("svc container id required");
+  if (!owner) throw new Error("svc container owner required");
+  if (_svcCsV2.has(id))
+    throw new Error(`svc container ${id} already registered`);
+  const now = Date.now();
+  const c = {
+    id,
+    owner,
+    scope: scope || "default",
+    status: SVC_CONTAINER_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    activatedAt: null,
+    decommissionedAt: null,
+    lastTouchedAt: now,
+    metadata: { ...(metadata || {}) },
+  };
+  _svcCsV2.set(id, c);
+  return { ...c, metadata: { ...c.metadata } };
+}
+function _svcCountActive(owner) {
+  let n = 0;
+  for (const c of _svcCsV2.values())
+    if (c.owner === owner && c.status === SVC_CONTAINER_MATURITY_V2.ACTIVE) n++;
+  return n;
+}
+export function activateSvcContainerV2(id) {
+  const c = _svcCsV2.get(id);
+  if (!c) throw new Error(`svc container ${id} not found`);
+  _svcCheckC(c.status, SVC_CONTAINER_MATURITY_V2.ACTIVE);
+  const recovery = c.status === SVC_CONTAINER_MATURITY_V2.DEGRADED;
+  if (!recovery && _svcCountActive(c.owner) >= _svcMaxActivePerOwner)
+    throw new Error(`max active svc containers for owner ${c.owner} reached`);
+  const now = Date.now();
+  c.status = SVC_CONTAINER_MATURITY_V2.ACTIVE;
+  c.updatedAt = now;
+  c.lastTouchedAt = now;
+  if (!c.activatedAt) c.activatedAt = now;
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function degradeSvcContainerV2(id) {
+  const c = _svcCsV2.get(id);
+  if (!c) throw new Error(`svc container ${id} not found`);
+  _svcCheckC(c.status, SVC_CONTAINER_MATURITY_V2.DEGRADED);
+  c.status = SVC_CONTAINER_MATURITY_V2.DEGRADED;
+  c.updatedAt = Date.now();
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function decommissionSvcContainerV2(id) {
+  const c = _svcCsV2.get(id);
+  if (!c) throw new Error(`svc container ${id} not found`);
+  _svcCheckC(c.status, SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED);
+  const now = Date.now();
+  c.status = SVC_CONTAINER_MATURITY_V2.DECOMMISSIONED;
+  c.updatedAt = now;
+  if (!c.decommissionedAt) c.decommissionedAt = now;
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function touchSvcContainerV2(id) {
+  const c = _svcCsV2.get(id);
+  if (!c) throw new Error(`svc container ${id} not found`);
+  if (_svcCTerminal.has(c.status))
+    throw new Error(`cannot touch terminal svc container ${id}`);
+  const now = Date.now();
+  c.lastTouchedAt = now;
+  c.updatedAt = now;
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function getSvcContainerV2(id) {
+  const c = _svcCsV2.get(id);
+  if (!c) return null;
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function listSvcContainersV2() {
+  return [..._svcCsV2.values()].map((c) => ({
+    ...c,
+    metadata: { ...c.metadata },
+  }));
+}
+function _svcCountPending(containerId) {
+  let n = 0;
+  for (const r of _svcRsV2.values())
+    if (
+      r.containerId === containerId &&
+      (r.status === SVC_RESOLUTION_LIFECYCLE_V2.QUEUED ||
+        r.status === SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING)
+    )
+      n++;
+  return n;
+}
+export function createSvcResolutionV2({
+  id,
+  containerId,
+  token,
+  metadata,
+} = {}) {
+  if (!id) throw new Error("svc resolution id required");
+  if (!containerId) throw new Error("svc resolution containerId required");
+  if (_svcRsV2.has(id)) throw new Error(`svc resolution ${id} already exists`);
+  if (!_svcCsV2.has(containerId))
+    throw new Error(`svc container ${containerId} not found`);
+  if (_svcCountPending(containerId) >= _svcMaxPendingResPerContainer)
+    throw new Error(
+      `max pending svc resolutions for container ${containerId} reached`,
+    );
+  const now = Date.now();
+  const r = {
+    id,
+    containerId,
+    token: token || "",
+    status: SVC_RESOLUTION_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _svcRsV2.set(id, r);
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function resolvingSvcResolutionV2(id) {
+  const r = _svcRsV2.get(id);
+  if (!r) throw new Error(`svc resolution ${id} not found`);
+  _svcCheckR(r.status, SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING);
+  const now = Date.now();
+  r.status = SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING;
+  r.updatedAt = now;
+  if (!r.startedAt) r.startedAt = now;
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function resolveSvcResolutionV2(id) {
+  const r = _svcRsV2.get(id);
+  if (!r) throw new Error(`svc resolution ${id} not found`);
+  _svcCheckR(r.status, SVC_RESOLUTION_LIFECYCLE_V2.RESOLVED);
+  const now = Date.now();
+  r.status = SVC_RESOLUTION_LIFECYCLE_V2.RESOLVED;
+  r.updatedAt = now;
+  if (!r.settledAt) r.settledAt = now;
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function failSvcResolutionV2(id, reason) {
+  const r = _svcRsV2.get(id);
+  if (!r) throw new Error(`svc resolution ${id} not found`);
+  _svcCheckR(r.status, SVC_RESOLUTION_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  r.status = SVC_RESOLUTION_LIFECYCLE_V2.FAILED;
+  r.updatedAt = now;
+  if (!r.settledAt) r.settledAt = now;
+  if (reason) r.metadata.failReason = String(reason);
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function cancelSvcResolutionV2(id, reason) {
+  const r = _svcRsV2.get(id);
+  if (!r) throw new Error(`svc resolution ${id} not found`);
+  _svcCheckR(r.status, SVC_RESOLUTION_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  r.status = SVC_RESOLUTION_LIFECYCLE_V2.CANCELLED;
+  r.updatedAt = now;
+  if (!r.settledAt) r.settledAt = now;
+  if (reason) r.metadata.cancelReason = String(reason);
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function getSvcResolutionV2(id) {
+  const r = _svcRsV2.get(id);
+  if (!r) return null;
+  return { ...r, metadata: { ...r.metadata } };
+}
+export function listSvcResolutionsV2() {
+  return [..._svcRsV2.values()].map((r) => ({
+    ...r,
+    metadata: { ...r.metadata },
+  }));
+}
+export function autoDegradeIdleSvcContainersV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const c of _svcCsV2.values())
+    if (
+      c.status === SVC_CONTAINER_MATURITY_V2.ACTIVE &&
+      t - c.lastTouchedAt >= _svcIdleMs
+    ) {
+      c.status = SVC_CONTAINER_MATURITY_V2.DEGRADED;
+      c.updatedAt = t;
+      flipped.push(c.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckSvcResolutionsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const r of _svcRsV2.values())
+    if (
+      r.status === SVC_RESOLUTION_LIFECYCLE_V2.RESOLVING &&
+      r.startedAt != null &&
+      t - r.startedAt >= _svcStuckMs
+    ) {
+      r.status = SVC_RESOLUTION_LIFECYCLE_V2.FAILED;
+      r.updatedAt = t;
+      if (!r.settledAt) r.settledAt = t;
+      r.metadata.failReason = "auto-fail-stuck";
+      flipped.push(r.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getServiceContainerGovStatsV2() {
+  const containersByStatus = {};
+  for (const v of Object.values(SVC_CONTAINER_MATURITY_V2))
+    containersByStatus[v] = 0;
+  for (const c of _svcCsV2.values()) containersByStatus[c.status]++;
+  const resolutionsByStatus = {};
+  for (const v of Object.values(SVC_RESOLUTION_LIFECYCLE_V2))
+    resolutionsByStatus[v] = 0;
+  for (const r of _svcRsV2.values()) resolutionsByStatus[r.status]++;
+  return {
+    totalSvcContainersV2: _svcCsV2.size,
+    totalSvcResolutionsV2: _svcRsV2.size,
+    maxActiveSvcContainersPerOwner: _svcMaxActivePerOwner,
+    maxPendingSvcResolutionsPerContainer: _svcMaxPendingResPerContainer,
+    svcContainerIdleMs: _svcIdleMs,
+    svcResolutionStuckMs: _svcStuckMs,
+    containersByStatus,
+    resolutionsByStatus,
+  };
+}