chainlesschain 0.145.0 → 0.156.0

package/src/lib/community-governance.js

@@ -1083,3 +1083,349 @@ export function _resetStateV2() {
   _proposerIdleMsV2 = GOV_DEFAULT_PROPOSER_IDLE_MS;
   _pendingDelegationMsV2 = GOV_DEFAULT_PENDING_DELEGATION_MS;
 }
+
+// =====================================================================
+// community-governance V2 governance overlay (iter19)
+// =====================================================================
+export const COMMGOV_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  PAUSED: "paused",
+  ARCHIVED: "archived",
+});
+export const COMMGOV_MOTION_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  VOTING: "voting",
+  VOTED: "voted",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _commgovPTrans = new Map([
+  [
+    COMMGOV_PROFILE_MATURITY_V2.PENDING,
+    new Set([
+      COMMGOV_PROFILE_MATURITY_V2.ACTIVE,
+      COMMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    COMMGOV_PROFILE_MATURITY_V2.ACTIVE,
+    new Set([
+      COMMGOV_PROFILE_MATURITY_V2.PAUSED,
+      COMMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    COMMGOV_PROFILE_MATURITY_V2.PAUSED,
+    new Set([
+      COMMGOV_PROFILE_MATURITY_V2.ACTIVE,
+      COMMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [COMMGOV_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _commgovPTerminal = new Set([COMMGOV_PROFILE_MATURITY_V2.ARCHIVED]);
+const _commgovJTrans = new Map([
+  [
+    COMMGOV_MOTION_LIFECYCLE_V2.QUEUED,
+    new Set([
+      COMMGOV_MOTION_LIFECYCLE_V2.VOTING,
+      COMMGOV_MOTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    COMMGOV_MOTION_LIFECYCLE_V2.VOTING,
+    new Set([
+      COMMGOV_MOTION_LIFECYCLE_V2.VOTED,
+      COMMGOV_MOTION_LIFECYCLE_V2.FAILED,
+      COMMGOV_MOTION_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [COMMGOV_MOTION_LIFECYCLE_V2.VOTED, new Set()],
+  [COMMGOV_MOTION_LIFECYCLE_V2.FAILED, new Set()],
+  [COMMGOV_MOTION_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _commgovPsV2 = new Map();
+const _commgovJsV2 = new Map();
+let _commgovMaxActive = 8,
+  _commgovMaxPending = 25,
+  _commgovIdleMs = 30 * 24 * 60 * 60 * 1000,
+  _commgovStuckMs = 60 * 1000;
+function _commgovPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _commgovCheckP(from, to) {
+  const a = _commgovPTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid commgov profile transition ${from} → ${to}`);
+}
+function _commgovCheckJ(from, to) {
+  const a = _commgovJTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid commgov motion transition ${from} → ${to}`);
+}
+function _commgovCountActive(owner) {
+  let c = 0;
+  for (const p of _commgovPsV2.values())
+    if (p.owner === owner && p.status === COMMGOV_PROFILE_MATURITY_V2.ACTIVE)
+      c++;
+  return c;
+}
+function _commgovCountPending(profileId) {
+  let c = 0;
+  for (const j of _commgovJsV2.values())
+    if (
+      j.profileId === profileId &&
+      (j.status === COMMGOV_MOTION_LIFECYCLE_V2.QUEUED ||
+        j.status === COMMGOV_MOTION_LIFECYCLE_V2.VOTING)
+    )
+      c++;
+  return c;
+}
+export function setMaxActiveCommgovProfilesPerOwnerV2(n) {
+  _commgovMaxActive = _commgovPos(n, "maxActiveCommgovProfilesPerOwner");
+}
+export function getMaxActiveCommgovProfilesPerOwnerV2() {
+  return _commgovMaxActive;
+}
+export function setMaxPendingCommgovMotionsPerProfileV2(n) {
+  _commgovMaxPending = _commgovPos(n, "maxPendingCommgovMotionsPerProfile");
+}
+export function getMaxPendingCommgovMotionsPerProfileV2() {
+  return _commgovMaxPending;
+}
+export function setCommgovProfileIdleMsV2(n) {
+  _commgovIdleMs = _commgovPos(n, "commgovProfileIdleMs");
+}
+export function getCommgovProfileIdleMsV2() {
+  return _commgovIdleMs;
+}
+export function setCommgovMotionStuckMsV2(n) {
+  _commgovStuckMs = _commgovPos(n, "commgovMotionStuckMs");
+}
+export function getCommgovMotionStuckMsV2() {
+  return _commgovStuckMs;
+}
+export function _resetStateCommunityGovernanceGovV2() {
+  _commgovPsV2.clear();
+  _commgovJsV2.clear();
+  _commgovMaxActive = 8;
+  _commgovMaxPending = 25;
+  _commgovIdleMs = 30 * 24 * 60 * 60 * 1000;
+  _commgovStuckMs = 60 * 1000;
+}
+export function registerCommgovProfileV2({
+  id,
+  owner,
+  chamber,
+  metadata,
+} = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_commgovPsV2.has(id))
+    throw new Error(`commgov profile ${id} already exists`);
+  const now = Date.now();
+  const p = {
+    id,
+    owner,
+    chamber: chamber || "general",
+    status: COMMGOV_PROFILE_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    lastTouchedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _commgovPsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function activateCommgovProfileV2(id) {
+  const p = _commgovPsV2.get(id);
+  if (!p) throw new Error(`commgov profile ${id} not found`);
+  const isInitial = p.status === COMMGOV_PROFILE_MATURITY_V2.PENDING;
+  _commgovCheckP(p.status, COMMGOV_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _commgovCountActive(p.owner) >= _commgovMaxActive)
+    throw new Error(`max active commgov profiles for owner ${p.owner} reached`);
+  const now = Date.now();
+  p.status = COMMGOV_PROFILE_MATURITY_V2.ACTIVE;
+  p.updatedAt = now;
+  p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function pauseCommgovProfileV2(id) {
+  const p = _commgovPsV2.get(id);
+  if (!p) throw new Error(`commgov profile ${id} not found`);
+  _commgovCheckP(p.status, COMMGOV_PROFILE_MATURITY_V2.PAUSED);
+  p.status = COMMGOV_PROFILE_MATURITY_V2.PAUSED;
+  p.updatedAt = Date.now();
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function archiveCommgovProfileV2(id) {
+  const p = _commgovPsV2.get(id);
+  if (!p) throw new Error(`commgov profile ${id} not found`);
+  _commgovCheckP(p.status, COMMGOV_PROFILE_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  p.status = COMMGOV_PROFILE_MATURITY_V2.ARCHIVED;
+  p.updatedAt = now;
+  if (!p.archivedAt) p.archivedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function touchCommgovProfileV2(id) {
+  const p = _commgovPsV2.get(id);
+  if (!p) throw new Error(`commgov profile ${id} not found`);
+  if (_commgovPTerminal.has(p.status))
+    throw new Error(`cannot touch terminal commgov profile ${id}`);
+  const now = Date.now();
+  p.lastTouchedAt = now;
+  p.updatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getCommgovProfileV2(id) {
+  const p = _commgovPsV2.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listCommgovProfilesV2() {
+  return [..._commgovPsV2.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+export function createCommgovMotionV2({
+  id,
+  profileId,
+  subject,
+  metadata,
+} = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_commgovJsV2.has(id))
+    throw new Error(`commgov motion ${id} already exists`);
+  if (!_commgovPsV2.has(profileId))
+    throw new Error(`commgov profile ${profileId} not found`);
+  if (_commgovCountPending(profileId) >= _commgovMaxPending)
+    throw new Error(
+      `max pending commgov motions for profile ${profileId} reached`,
+    );
+  const now = Date.now();
+  const j = {
+    id,
+    profileId,
+    subject: subject || "",
+    status: COMMGOV_MOTION_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _commgovJsV2.set(id, j);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function votingCommgovMotionV2(id) {
+  const j = _commgovJsV2.get(id);
+  if (!j) throw new Error(`commgov motion ${id} not found`);
+  _commgovCheckJ(j.status, COMMGOV_MOTION_LIFECYCLE_V2.VOTING);
+  const now = Date.now();
+  j.status = COMMGOV_MOTION_LIFECYCLE_V2.VOTING;
+  j.updatedAt = now;
+  if (!j.startedAt) j.startedAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function completeMotionCommgovV2(id) {
+  const j = _commgovJsV2.get(id);
+  if (!j) throw new Error(`commgov motion ${id} not found`);
+  _commgovCheckJ(j.status, COMMGOV_MOTION_LIFECYCLE_V2.VOTED);
+  const now = Date.now();
+  j.status = COMMGOV_MOTION_LIFECYCLE_V2.VOTED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function failCommgovMotionV2(id, reason) {
+  const j = _commgovJsV2.get(id);
+  if (!j) throw new Error(`commgov motion ${id} not found`);
+  _commgovCheckJ(j.status, COMMGOV_MOTION_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  j.status = COMMGOV_MOTION_LIFECYCLE_V2.FAILED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.failReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function cancelCommgovMotionV2(id, reason) {
+  const j = _commgovJsV2.get(id);
+  if (!j) throw new Error(`commgov motion ${id} not found`);
+  _commgovCheckJ(j.status, COMMGOV_MOTION_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  j.status = COMMGOV_MOTION_LIFECYCLE_V2.CANCELLED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.cancelReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function getCommgovMotionV2(id) {
+  const j = _commgovJsV2.get(id);
+  if (!j) return null;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function listCommgovMotionsV2() {
+  return [..._commgovJsV2.values()].map((j) => ({
+    ...j,
+    metadata: { ...j.metadata },
+  }));
+}
+export function autoPauseIdleCommgovProfilesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _commgovPsV2.values())
+    if (
+      p.status === COMMGOV_PROFILE_MATURITY_V2.ACTIVE &&
+      t - p.lastTouchedAt >= _commgovIdleMs
+    ) {
+      p.status = COMMGOV_PROFILE_MATURITY_V2.PAUSED;
+      p.updatedAt = t;
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckCommgovMotionsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const j of _commgovJsV2.values())
+    if (
+      j.status === COMMGOV_MOTION_LIFECYCLE_V2.VOTING &&
+      j.startedAt != null &&
+      t - j.startedAt >= _commgovStuckMs
+    ) {
+      j.status = COMMGOV_MOTION_LIFECYCLE_V2.FAILED;
+      j.updatedAt = t;
+      if (!j.settledAt) j.settledAt = t;
+      j.metadata.failReason = "auto-fail-stuck";
+      flipped.push(j.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getCommunityGovernanceGovStatsV2() {
+  const profilesByStatus = {};
+  for (const v of Object.values(COMMGOV_PROFILE_MATURITY_V2))
+    profilesByStatus[v] = 0;
+  for (const p of _commgovPsV2.values()) profilesByStatus[p.status]++;
+  const motionsByStatus = {};
+  for (const v of Object.values(COMMGOV_MOTION_LIFECYCLE_V2))
+    motionsByStatus[v] = 0;
+  for (const j of _commgovJsV2.values()) motionsByStatus[j.status]++;
+  return {
+    totalCommgovProfilesV2: _commgovPsV2.size,
+    totalCommgovMotionsV2: _commgovJsV2.size,
+    maxActiveCommgovProfilesPerOwner: _commgovMaxActive,
+    maxPendingCommgovMotionsPerProfile: _commgovMaxPending,
+    commgovProfileIdleMs: _commgovIdleMs,
+    commgovMotionStuckMs: _commgovStuckMs,
+    profilesByStatus,
+    motionsByStatus,
+  };
+}

package/src/lib/compliance-manager.js

@@ -1052,3 +1052,337 @@ export function getComplianceManagerGovStatsV2() {
     auditsByStatus,
   };
 }
+
+// === Iter28 V2 governance overlay: Cmpmgov ===
+export const CMPMGOV_PROFILE_MATURITY_V2 = Object.freeze({
+  PENDING: "pending",
+  ACTIVE: "active",
+  STALE: "stale",
+  ARCHIVED: "archived",
+});
+export const CMPMGOV_REPORT_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  REPORTING: "reporting",
+  REPORTED: "reported",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+const _cmpmgovPTrans = new Map([
+  [
+    CMPMGOV_PROFILE_MATURITY_V2.PENDING,
+    new Set([
+      CMPMGOV_PROFILE_MATURITY_V2.ACTIVE,
+      CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    CMPMGOV_PROFILE_MATURITY_V2.ACTIVE,
+    new Set([
+      CMPMGOV_PROFILE_MATURITY_V2.STALE,
+      CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [
+    CMPMGOV_PROFILE_MATURITY_V2.STALE,
+    new Set([
+      CMPMGOV_PROFILE_MATURITY_V2.ACTIVE,
+      CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED,
+    ]),
+  ],
+  [CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _cmpmgovPTerminal = new Set([CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED]);
+const _cmpmgovJTrans = new Map([
+  [
+    CMPMGOV_REPORT_LIFECYCLE_V2.QUEUED,
+    new Set([
+      CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING,
+      CMPMGOV_REPORT_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [
+    CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING,
+    new Set([
+      CMPMGOV_REPORT_LIFECYCLE_V2.REPORTED,
+      CMPMGOV_REPORT_LIFECYCLE_V2.FAILED,
+      CMPMGOV_REPORT_LIFECYCLE_V2.CANCELLED,
+    ]),
+  ],
+  [CMPMGOV_REPORT_LIFECYCLE_V2.REPORTED, new Set()],
+  [CMPMGOV_REPORT_LIFECYCLE_V2.FAILED, new Set()],
+  [CMPMGOV_REPORT_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+const _cmpmgovPsV2 = new Map();
+const _cmpmgovJsV2 = new Map();
+let _cmpmgovMaxActive = 6,
+  _cmpmgovMaxPending = 15,
+  _cmpmgovIdleMs = 2592000000,
+  _cmpmgovStuckMs = 60 * 1000;
+function _cmpmgovPos(n, label) {
+  const v = Math.floor(Number(n));
+  if (!Number.isFinite(v) || v <= 0)
+    throw new Error(`${label} must be positive integer`);
+  return v;
+}
+function _cmpmgovCheckP(from, to) {
+  const a = _cmpmgovPTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid cmpmgov profile transition ${from} → ${to}`);
+}
+function _cmpmgovCheckJ(from, to) {
+  const a = _cmpmgovJTrans.get(from);
+  if (!a || !a.has(to))
+    throw new Error(`invalid cmpmgov report transition ${from} → ${to}`);
+}
+function _cmpmgovCountActive(owner) {
+  let c = 0;
+  for (const p of _cmpmgovPsV2.values())
+    if (p.owner === owner && p.status === CMPMGOV_PROFILE_MATURITY_V2.ACTIVE)
+      c++;
+  return c;
+}
+function _cmpmgovCountPending(profileId) {
+  let c = 0;
+  for (const j of _cmpmgovJsV2.values())
+    if (
+      j.profileId === profileId &&
+      (j.status === CMPMGOV_REPORT_LIFECYCLE_V2.QUEUED ||
+        j.status === CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING)
+    )
+      c++;
+  return c;
+}
+export function setMaxActiveCmpmProfilesPerOwnerV2(n) {
+  _cmpmgovMaxActive = _cmpmgovPos(n, "maxActiveCmpmProfilesPerOwner");
+}
+export function getMaxActiveCmpmProfilesPerOwnerV2() {
+  return _cmpmgovMaxActive;
+}
+export function setMaxPendingCmpmReportsPerProfileV2(n) {
+  _cmpmgovMaxPending = _cmpmgovPos(n, "maxPendingCmpmReportsPerProfile");
+}
+export function getMaxPendingCmpmReportsPerProfileV2() {
+  return _cmpmgovMaxPending;
+}
+export function setCmpmProfileIdleMsV2(n) {
+  _cmpmgovIdleMs = _cmpmgovPos(n, "cmpmgovProfileIdleMs");
+}
+export function getCmpmProfileIdleMsV2() {
+  return _cmpmgovIdleMs;
+}
+export function setCmpmReportStuckMsV2(n) {
+  _cmpmgovStuckMs = _cmpmgovPos(n, "cmpmgovReportStuckMs");
+}
+export function getCmpmReportStuckMsV2() {
+  return _cmpmgovStuckMs;
+}
+export function _resetStateCmpmgovV2() {
+  _cmpmgovPsV2.clear();
+  _cmpmgovJsV2.clear();
+  _cmpmgovMaxActive = 6;
+  _cmpmgovMaxPending = 15;
+  _cmpmgovIdleMs = 2592000000;
+  _cmpmgovStuckMs = 60 * 1000;
+}
+export function registerCmpmProfileV2({ id, owner, framework, metadata } = {}) {
+  if (!id || !owner) throw new Error("id and owner required");
+  if (_cmpmgovPsV2.has(id))
+    throw new Error(`cmpmgov profile ${id} already exists`);
+  const now = Date.now();
+  const p = {
+    id,
+    owner,
+    framework: framework || "soc2",
+    status: CMPMGOV_PROFILE_MATURITY_V2.PENDING,
+    createdAt: now,
+    updatedAt: now,
+    lastTouchedAt: now,
+    activatedAt: null,
+    archivedAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _cmpmgovPsV2.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function activateCmpmProfileV2(id) {
+  const p = _cmpmgovPsV2.get(id);
+  if (!p) throw new Error(`cmpmgov profile ${id} not found`);
+  const isInitial = p.status === CMPMGOV_PROFILE_MATURITY_V2.PENDING;
+  _cmpmgovCheckP(p.status, CMPMGOV_PROFILE_MATURITY_V2.ACTIVE);
+  if (isInitial && _cmpmgovCountActive(p.owner) >= _cmpmgovMaxActive)
+    throw new Error(`max active cmpmgov profiles for owner ${p.owner} reached`);
+  const now = Date.now();
+  p.status = CMPMGOV_PROFILE_MATURITY_V2.ACTIVE;
+  p.updatedAt = now;
+  p.lastTouchedAt = now;
+  if (!p.activatedAt) p.activatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function staleCmpmProfileV2(id) {
+  const p = _cmpmgovPsV2.get(id);
+  if (!p) throw new Error(`cmpmgov profile ${id} not found`);
+  _cmpmgovCheckP(p.status, CMPMGOV_PROFILE_MATURITY_V2.STALE);
+  p.status = CMPMGOV_PROFILE_MATURITY_V2.STALE;
+  p.updatedAt = Date.now();
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function archiveCmpmProfileV2(id) {
+  const p = _cmpmgovPsV2.get(id);
+  if (!p) throw new Error(`cmpmgov profile ${id} not found`);
+  _cmpmgovCheckP(p.status, CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED);
+  const now = Date.now();
+  p.status = CMPMGOV_PROFILE_MATURITY_V2.ARCHIVED;
+  p.updatedAt = now;
+  if (!p.archivedAt) p.archivedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function touchCmpmProfileV2(id) {
+  const p = _cmpmgovPsV2.get(id);
+  if (!p) throw new Error(`cmpmgov profile ${id} not found`);
+  if (_cmpmgovPTerminal.has(p.status))
+    throw new Error(`cannot touch terminal cmpmgov profile ${id}`);
+  const now = Date.now();
+  p.lastTouchedAt = now;
+  p.updatedAt = now;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function getCmpmProfileV2(id) {
+  const p = _cmpmgovPsV2.get(id);
+  if (!p) return null;
+  return { ...p, metadata: { ...p.metadata } };
+}
+export function listCmpmProfilesV2() {
+  return [..._cmpmgovPsV2.values()].map((p) => ({
+    ...p,
+    metadata: { ...p.metadata },
+  }));
+}
+export function createCmpmReportV2({ id, profileId, reportId, metadata } = {}) {
+  if (!id || !profileId) throw new Error("id and profileId required");
+  if (_cmpmgovJsV2.has(id))
+    throw new Error(`cmpmgov report ${id} already exists`);
+  if (!_cmpmgovPsV2.has(profileId))
+    throw new Error(`cmpmgov profile ${profileId} not found`);
+  if (_cmpmgovCountPending(profileId) >= _cmpmgovMaxPending)
+    throw new Error(
+      `max pending cmpmgov reports for profile ${profileId} reached`,
+    );
+  const now = Date.now();
+  const j = {
+    id,
+    profileId,
+    reportId: reportId || "",
+    status: CMPMGOV_REPORT_LIFECYCLE_V2.QUEUED,
+    createdAt: now,
+    updatedAt: now,
+    startedAt: null,
+    settledAt: null,
+    metadata: { ...(metadata || {}) },
+  };
+  _cmpmgovJsV2.set(id, j);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function reportingCmpmReportV2(id) {
+  const j = _cmpmgovJsV2.get(id);
+  if (!j) throw new Error(`cmpmgov report ${id} not found`);
+  _cmpmgovCheckJ(j.status, CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING);
+  const now = Date.now();
+  j.status = CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING;
+  j.updatedAt = now;
+  if (!j.startedAt) j.startedAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function completeReportCmpmV2(id) {
+  const j = _cmpmgovJsV2.get(id);
+  if (!j) throw new Error(`cmpmgov report ${id} not found`);
+  _cmpmgovCheckJ(j.status, CMPMGOV_REPORT_LIFECYCLE_V2.REPORTED);
+  const now = Date.now();
+  j.status = CMPMGOV_REPORT_LIFECYCLE_V2.REPORTED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function failCmpmReportV2(id, reason) {
+  const j = _cmpmgovJsV2.get(id);
+  if (!j) throw new Error(`cmpmgov report ${id} not found`);
+  _cmpmgovCheckJ(j.status, CMPMGOV_REPORT_LIFECYCLE_V2.FAILED);
+  const now = Date.now();
+  j.status = CMPMGOV_REPORT_LIFECYCLE_V2.FAILED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.failReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function cancelCmpmReportV2(id, reason) {
+  const j = _cmpmgovJsV2.get(id);
+  if (!j) throw new Error(`cmpmgov report ${id} not found`);
+  _cmpmgovCheckJ(j.status, CMPMGOV_REPORT_LIFECYCLE_V2.CANCELLED);
+  const now = Date.now();
+  j.status = CMPMGOV_REPORT_LIFECYCLE_V2.CANCELLED;
+  j.updatedAt = now;
+  if (!j.settledAt) j.settledAt = now;
+  if (reason) j.metadata.cancelReason = String(reason);
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function getCmpmReportV2(id) {
+  const j = _cmpmgovJsV2.get(id);
+  if (!j) return null;
+  return { ...j, metadata: { ...j.metadata } };
+}
+export function listCmpmReportsV2() {
+  return [..._cmpmgovJsV2.values()].map((j) => ({
+    ...j,
+    metadata: { ...j.metadata },
+  }));
+}
+export function autoStaleIdleCmpmProfilesV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const p of _cmpmgovPsV2.values())
+    if (
+      p.status === CMPMGOV_PROFILE_MATURITY_V2.ACTIVE &&
+      t - p.lastTouchedAt >= _cmpmgovIdleMs
+    ) {
+      p.status = CMPMGOV_PROFILE_MATURITY_V2.STALE;
+      p.updatedAt = t;
+      flipped.push(p.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function autoFailStuckCmpmReportsV2({ now } = {}) {
+  const t = now ?? Date.now();
+  const flipped = [];
+  for (const j of _cmpmgovJsV2.values())
+    if (
+      j.status === CMPMGOV_REPORT_LIFECYCLE_V2.REPORTING &&
+      j.startedAt != null &&
+      t - j.startedAt >= _cmpmgovStuckMs
+    ) {
+      j.status = CMPMGOV_REPORT_LIFECYCLE_V2.FAILED;
+      j.updatedAt = t;
+      if (!j.settledAt) j.settledAt = t;
+      j.metadata.failReason = "auto-fail-stuck";
+      flipped.push(j.id);
+    }
+  return { flipped, count: flipped.length };
+}
+export function getCmpmgovStatsV2() {
+  const profilesByStatus = {};
+  for (const v of Object.values(CMPMGOV_PROFILE_MATURITY_V2))
+    profilesByStatus[v] = 0;
+  for (const p of _cmpmgovPsV2.values()) profilesByStatus[p.status]++;
+  const reportsByStatus = {};
+  for (const v of Object.values(CMPMGOV_REPORT_LIFECYCLE_V2))
+    reportsByStatus[v] = 0;
+  for (const j of _cmpmgovJsV2.values()) reportsByStatus[j.status]++;
+  return {
+    totalCmpmProfilesV2: _cmpmgovPsV2.size,
+    totalCmpmReportsV2: _cmpmgovJsV2.size,
+    maxActiveCmpmProfilesPerOwner: _cmpmgovMaxActive,
+    maxPendingCmpmReportsPerProfile: _cmpmgovMaxPending,
+    cmpmgovProfileIdleMs: _cmpmgovIdleMs,
+    cmpmgovReportStuckMs: _cmpmgovStuckMs,
+    profilesByStatus,
+    reportsByStatus,
+  };
+}