chainlesschain 0.81.0 → 0.143.0

package/src/commands/runtime.js

@@ -34,8 +34,51 @@ import {
   healthCheck,
   getMetrics,
   getRuntimeStats,
+  /* V2 (Phase 63) */
+  PLUGIN_MATURITY_V2,
+  RUNTIME_TASK_V2,
+  getDefaultMaxActivePluginsPerOwnerV2,
+  getMaxActivePluginsPerOwnerV2,
+  setMaxActivePluginsPerOwnerV2,
+  getDefaultMaxRunningTasksPerOwnerV2,
+  getMaxRunningTasksPerOwnerV2,
+  setMaxRunningTasksPerOwnerV2,
+  getDefaultPluginIdleMsV2,
+  getPluginIdleMsV2,
+  setPluginIdleMsV2,
+  getDefaultTaskStuckMsV2,
+  getTaskStuckMsV2,
+  setTaskStuckMsV2,
+  registerPluginV2,
+  getPluginV2,
+  setPluginMaturityV2,
+  activatePluginV2,
+  deprecatePluginV2,
+  retirePluginV2,
+  touchPluginInvocation,
+  enqueueRuntimeTaskV2,
+  getRuntimeTaskV2,
+  setRuntimeTaskStatusV2,
+  startRuntimeTask,
+  completeRuntimeTask,
+  failRuntimeTask,
+  cancelRuntimeTask,
+  getActivePluginCount,
+  getRunningTaskCount,
+  autoRetireIdlePlugins,
+  autoFailStuckRuntimeTasks,
+  getRuntimeStatsV2,
 } from "../lib/universal-runtime.js";
 
+function _parseMetaV2(s) {
+  if (!s) return undefined;
+  try {
+    return JSON.parse(s);
+  } catch {
+    throw new Error(`--metadata must be valid JSON`);
+  }
+}
+
 function _dbFromCtx(cmd) {
   const root = cmd?.parent?.parent ?? cmd?.parent;
   return root?._db;
@@ -496,5 +539,269 @@ export function registerRuntimeCommand(program) {
       console.log(`Uptime:   ${s.metrics.uptimeMs}ms`);
     });
 
+  /* ═════════════════════════════════════════════════════ *
+   *  Phase 63 V2 — Plugin Maturity + Runtime Task Lifecycle
+   * ═════════════════════════════════════════════════════ */
+
+  runtime
+    .command("plugin-maturities-v2")
+    .description("List Phase 63 V2 plugin maturity states")
+    .option("--json", "JSON output")
+    .action((opts) => {
+      const v = Object.values(PLUGIN_MATURITY_V2);
+      if (opts.json) return console.log(JSON.stringify(v, null, 2));
+      for (const s of v) console.log(s);
+    });
+
+  runtime
+    .command("runtime-task-lifecycles-v2")
+    .description("List Phase 63 V2 runtime-task lifecycle states")
+    .option("--json", "JSON output")
+    .action((opts) => {
+      const v = Object.values(RUNTIME_TASK_V2);
+      if (opts.json) return console.log(JSON.stringify(v, null, 2));
+      for (const s of v) console.log(s);
+    });
+
+  runtime
+    .command("default-max-active-plugins-per-owner")
+    .action(() => console.log(getDefaultMaxActivePluginsPerOwnerV2()));
+  runtime
+    .command("max-active-plugins-per-owner")
+    .action(() => console.log(getMaxActivePluginsPerOwnerV2()));
+  runtime
+    .command("set-max-active-plugins-per-owner <n>")
+    .action((n) => console.log(setMaxActivePluginsPerOwnerV2(n)));
+
+  runtime
+    .command("default-max-running-tasks-per-owner")
+    .action(() => console.log(getDefaultMaxRunningTasksPerOwnerV2()));
+  runtime
+    .command("max-running-tasks-per-owner")
+    .action(() => console.log(getMaxRunningTasksPerOwnerV2()));
+  runtime
+    .command("set-max-running-tasks-per-owner <n>")
+    .action((n) => console.log(setMaxRunningTasksPerOwnerV2(n)));
+
+  runtime
+    .command("default-plugin-idle-ms")
+    .action(() => console.log(getDefaultPluginIdleMsV2()));
+  runtime
+    .command("plugin-idle-ms")
+    .action(() => console.log(getPluginIdleMsV2()));
+  runtime
+    .command("set-plugin-idle-ms <ms>")
+    .action((ms) => console.log(setPluginIdleMsV2(ms)));
+
+  runtime
+    .command("default-task-stuck-ms")
+    .action(() => console.log(getDefaultTaskStuckMsV2()));
+  runtime
+    .command("task-stuck-ms")
+    .action(() => console.log(getTaskStuckMsV2()));
+  runtime
+    .command("set-task-stuck-ms <ms>")
+    .action((ms) => console.log(setTaskStuckMsV2(ms)));
+
+  runtime
+    .command("active-plugin-count")
+    .option("-o, --owner <id>")
+    .action((opts) => console.log(getActivePluginCount(opts.owner)));
+
+  runtime
+    .command("running-task-count")
+    .option("-o, --owner <id>")
+    .action((opts) => console.log(getRunningTaskCount(opts.owner)));
+
+  runtime
+    .command("register-plugin-v2 <plugin-id>")
+    .requiredOption("-o, --owner <id>")
+    .option("-n, --name <text>")
+    .option("-v, --version <text>")
+    .option("-i, --initial-status <status>")
+    .option("-m, --metadata <json>")
+    .option("--json")
+    .action((pluginId, opts) => {
+      const rec = registerPluginV2(_dbFromCtx(runtime), {
+        pluginId,
+        ownerId: opts.owner,
+        name: opts.name,
+        version: opts.version,
+        initialStatus: opts.initialStatus,
+        metadata: _parseMetaV2(opts.metadata),
+      });
+      if (opts.json) return console.log(JSON.stringify(rec, null, 2));
+      console.log(`Registered plugin ${pluginId} (${rec.status})`);
+    });
+
+  runtime
+    .command("plugin-v2 <plugin-id>")
+    .option("--json")
+    .action((id, opts) => {
+      const rec = getPluginV2(id);
+      if (!rec) {
+        console.error(`Unknown plugin: ${id}`);
+        process.exitCode = 1;
+        return;
+      }
+      if (opts.json) return console.log(JSON.stringify(rec, null, 2));
+      console.log(`${rec.pluginId} [${rec.status}] owner=${rec.ownerId}`);
+    });
+
+  runtime
+    .command("set-plugin-maturity-v2 <plugin-id> <status>")
+    .option("-r, --reason <text>")
+    .option("-m, --metadata <json>")
+    .action((id, status, opts) => {
+      const rec = setPluginMaturityV2(_dbFromCtx(runtime), id, status, {
+        reason: opts.reason,
+        metadata: _parseMetaV2(opts.metadata),
+      });
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("activate-plugin-v2 <plugin-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = activatePluginV2(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("deprecate-plugin-v2 <plugin-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = deprecatePluginV2(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("retire-plugin-v2 <plugin-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = retirePluginV2(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime.command("touch-plugin-invocation <plugin-id>").action((id) => {
+    const r = touchPluginInvocation(id);
+    console.log(`${id} lastInvokedAt=${r.lastInvokedAt}`);
+  });
+
+  runtime
+    .command("enqueue-runtime-task-v2 <task-id>")
+    .requiredOption("-o, --owner <id>")
+    .requiredOption("-p, --plugin <id>")
+    .requiredOption("-k, --kind <name>")
+    .option("-m, --metadata <json>")
+    .option("--json")
+    .action((taskId, opts) => {
+      const rec = enqueueRuntimeTaskV2(_dbFromCtx(runtime), {
+        taskId,
+        ownerId: opts.owner,
+        pluginId: opts.plugin,
+        kind: opts.kind,
+        metadata: _parseMetaV2(opts.metadata),
+      });
+      if (opts.json) return console.log(JSON.stringify(rec, null, 2));
+      console.log(`Enqueued task ${taskId} (${rec.status})`);
+    });
+
+  runtime
+    .command("runtime-task-v2 <task-id>")
+    .option("--json")
+    .action((id, opts) => {
+      const rec = getRuntimeTaskV2(id);
+      if (!rec) {
+        console.error(`Unknown task: ${id}`);
+        process.exitCode = 1;
+        return;
+      }
+      if (opts.json) return console.log(JSON.stringify(rec, null, 2));
+      console.log(`${rec.taskId} [${rec.status}] owner=${rec.ownerId}`);
+    });
+
+  runtime
+    .command("set-runtime-task-status-v2 <task-id> <status>")
+    .option("-r, --reason <text>")
+    .option("-m, --metadata <json>")
+    .action((id, status, opts) => {
+      const rec = setRuntimeTaskStatusV2(_dbFromCtx(runtime), id, status, {
+        reason: opts.reason,
+        metadata: _parseMetaV2(opts.metadata),
+      });
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("start-runtime-task <task-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = startRuntimeTask(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("complete-runtime-task <task-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = completeRuntimeTask(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("fail-runtime-task <task-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = failRuntimeTask(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("cancel-runtime-task <task-id>")
+    .option("-r, --reason <text>")
+    .action((id, opts) => {
+      const rec = cancelRuntimeTask(_dbFromCtx(runtime), id, opts.reason);
+      console.log(`${id} → ${rec.status}`);
+    });
+
+  runtime
+    .command("auto-retire-idle-plugins")
+    .option("--json")
+    .action((opts) => {
+      const r = autoRetireIdlePlugins(_dbFromCtx(runtime));
+      if (opts.json) return console.log(JSON.stringify(r, null, 2));
+      console.log(`Retired ${r.count} idle plugin(s)`);
+    });
+
+  runtime
+    .command("auto-fail-stuck-runtime-tasks")
+    .option("--json")
+    .action((opts) => {
+      const r = autoFailStuckRuntimeTasks(_dbFromCtx(runtime));
+      if (opts.json) return console.log(JSON.stringify(r, null, 2));
+      console.log(`Failed ${r.count} stuck task(s)`);
+    });
+
+  runtime
+    .command("stats-v2")
+    .description("Phase 63 V2 statistics")
+    .option("--json", "JSON output")
+    .action((opts) => {
+      const s = getRuntimeStatsV2();
+      if (opts.json) return console.log(JSON.stringify(s, null, 2));
+      console.log(
+        `Plugins(V2)=${s.totalPluginsV2} Tasks(V2)=${s.totalTasksV2} ` +
+          `caps: active-plugins/owner=${s.maxActivePluginsPerOwner} running-tasks/owner=${s.maxRunningTasksPerOwner}`,
+      );
+      console.log("plugins-by-status:");
+      for (const [k, v] of Object.entries(s.pluginsByStatus))
+        console.log(`  ${k.padEnd(12)} ${v}`);
+      console.log("tasks-by-status:");
+      for (const [k, v] of Object.entries(s.tasksByStatus))
+        console.log(`  ${k.padEnd(12)} ${v}`);
+    });
+
   program.addCommand(runtime);
 }

package/src/commands/scim.js

@@ -16,6 +16,39 @@ import {
   addConnector,
   syncProvision,
   getStatus,
+  IDENTITY_LIFECYCLE_V2,
+  SYNC_JOB_V2,
+  SCIM_DEFAULT_MAX_PROVISIONED_PER_CONNECTOR,
+  SCIM_DEFAULT_MAX_RUNNING_SYNC_PER_CONNECTOR,
+  SCIM_DEFAULT_IDENTITY_IDLE_MS,
+  SCIM_DEFAULT_SYNC_STUCK_MS,
+  getMaxProvisionedPerConnectorV2,
+  setMaxProvisionedPerConnectorV2,
+  getMaxRunningSyncPerConnectorV2,
+  setMaxRunningSyncPerConnectorV2,
+  getIdentityIdleMsV2,
+  setIdentityIdleMsV2,
+  getSyncStuckMsV2,
+  setSyncStuckMsV2,
+  getProvisionedCountV2,
+  getRunningSyncCountV2,
+  registerIdentityV2,
+  getIdentityV2,
+  listIdentitiesV2,
+  provisionIdentityV2,
+  suspendIdentityV2,
+  deprovisionIdentityV2,
+  touchIdentityV2,
+  createSyncJobV2,
+  getSyncJobV2,
+  listSyncJobsV2,
+  startSyncJobV2,
+  succeedSyncJobV2,
+  failSyncJobV2,
+  cancelSyncJobV2,
+  autoDeprovisionIdleIdentitiesV2,
+  autoFailStuckSyncJobsV2,
+  getScimManagerStatsV2,
 } from "../lib/scim-manager.js";
 
 export function registerScimCommand(program) {
@@ -215,4 +248,233 @@ export function registerScimCommand(program) {
         process.exit(1);
       }
     });
+
+  // ─────────────────────────────────────────────────────────────
+  // V2 Surface — identity + sync-job lifecycle (in-memory, throwing API)
+  // ─────────────────────────────────────────────────────────────
+
+  scim
+    .command("identity-lifecycles-v2")
+    .description("List V2 identity lifecycle states")
+    .option("--json", "Output as JSON")
+    .action((options) => {
+      const v = Object.values(IDENTITY_LIFECYCLE_V2);
+      if (options.json) console.log(JSON.stringify(v));
+      else logger.log(v.join(", "));
+    });
+
+  scim
+    .command("sync-lifecycles-v2")
+    .description("List V2 sync-job lifecycle states")
+    .option("--json", "Output as JSON")
+    .action((options) => {
+      const v = Object.values(SYNC_JOB_V2);
+      if (options.json) console.log(JSON.stringify(v));
+      else logger.log(v.join(", "));
+    });
+
+  scim
+    .command("stats-v2")
+    .description("Show V2 SCIM stats")
+    .option("--json", "Output as JSON")
+    .action((options) => {
+      const stats = getScimManagerStatsV2();
+      if (options.json) console.log(JSON.stringify(stats, null, 2));
+      else logger.log(JSON.stringify(stats, null, 2));
+    });
+
+  scim
+    .command("get-max-provisioned-v2")
+    .description("Get max provisioned identities per connector")
+    .action(() => logger.log(String(getMaxProvisionedPerConnectorV2())));
+  scim
+    .command("set-max-provisioned-v2 <n>")
+    .description("Set max provisioned identities per connector")
+    .action((n) => {
+      setMaxProvisionedPerConnectorV2(Number(n));
+      logger.log(String(getMaxProvisionedPerConnectorV2()));
+    });
+  scim
+    .command("get-max-running-sync-v2")
+    .description("Get max running sync jobs per connector")
+    .action(() => logger.log(String(getMaxRunningSyncPerConnectorV2())));
+  scim
+    .command("set-max-running-sync-v2 <n>")
+    .description("Set max running sync jobs per connector")
+    .action((n) => {
+      setMaxRunningSyncPerConnectorV2(Number(n));
+      logger.log(String(getMaxRunningSyncPerConnectorV2()));
+    });
+  scim
+    .command("get-identity-idle-ms-v2")
+    .description("Get identity idle ms")
+    .action(() => logger.log(String(getIdentityIdleMsV2())));
+  scim
+    .command("set-identity-idle-ms-v2 <ms>")
+    .description("Set identity idle ms")
+    .action((ms) => {
+      setIdentityIdleMsV2(Number(ms));
+      logger.log(String(getIdentityIdleMsV2()));
+    });
+  scim
+    .command("get-sync-stuck-ms-v2")
+    .description("Get sync-job stuck ms")
+    .action(() => logger.log(String(getSyncStuckMsV2())));
+  scim
+    .command("set-sync-stuck-ms-v2 <ms>")
+    .description("Set sync-job stuck ms")
+    .action((ms) => {
+      setSyncStuckMsV2(Number(ms));
+      logger.log(String(getSyncStuckMsV2()));
+    });
+
+  scim
+    .command("provisioned-count-v2 <connectorId>")
+    .description("Count provisioned identities for connector")
+    .action((connectorId) =>
+      logger.log(String(getProvisionedCountV2(connectorId))),
+    );
+  scim
+    .command("running-sync-count-v2 <connectorId>")
+    .description("Count running sync jobs for connector")
+    .action((connectorId) =>
+      logger.log(String(getRunningSyncCountV2(connectorId))),
+    );
+
+  scim
+    .command("register-identity-v2 <id>")
+    .description("Register V2 identity (initial=pending)")
+    .requiredOption("-c, --connector <id>", "connector id")
+    .requiredOption("-e, --external <id>", "external id")
+    .option("-m, --metadata <json>", "metadata JSON", "{}")
+    .action((id, opts) => {
+      const meta = JSON.parse(opts.metadata);
+      const i = registerIdentityV2(id, {
+        connectorId: opts.connector,
+        externalId: opts.external,
+        metadata: meta,
+      });
+      console.log(JSON.stringify(i, null, 2));
+    });
+
+  scim
+    .command("get-identity-v2 <id>")
+    .description("Get V2 identity by id")
+    .action((id) => {
+      const i = getIdentityV2(id);
+      if (!i) {
+        logger.error(`identity ${id} not found`);
+        process.exit(1);
+      }
+      console.log(JSON.stringify(i, null, 2));
+    });
+
+  scim
+    .command("list-identities-v2")
+    .description("List V2 identities")
+    .option("-c, --connector <id>", "filter by connector")
+    .option("-s, --status <state>", "filter by status")
+    .action((opts) => {
+      const out = listIdentitiesV2({
+        connectorId: opts.connector,
+        status: opts.status,
+      });
+      console.log(JSON.stringify(out, null, 2));
+    });
+
+  scim
+    .command("provision-identity-v2 <id>")
+    .description("Transition identity → provisioned")
+    .action((id) =>
+      console.log(JSON.stringify(provisionIdentityV2(id), null, 2)),
+    );
+  scim
+    .command("suspend-identity-v2 <id>")
+    .description("Transition identity → suspended")
+    .action((id) =>
+      console.log(JSON.stringify(suspendIdentityV2(id), null, 2)),
+    );
+  scim
+    .command("deprovision-identity-v2 <id>")
+    .description("Transition identity → deprovisioned (terminal)")
+    .action((id) =>
+      console.log(JSON.stringify(deprovisionIdentityV2(id), null, 2)),
+    );
+  scim
+    .command("touch-identity-v2 <id>")
+    .description("Update identity lastSeenAt")
+    .action((id) => console.log(JSON.stringify(touchIdentityV2(id), null, 2)));
+
+  scim
+    .command("create-sync-job-v2 <id>")
+    .description("Create V2 sync job (initial=queued)")
+    .requiredOption("-c, --connector <id>", "connector id")
+    .option("-k, --kind <kind>", "job kind", "full")
+    .option("-m, --metadata <json>", "metadata JSON", "{}")
+    .action((id, opts) => {
+      const meta = JSON.parse(opts.metadata);
+      const j = createSyncJobV2(id, {
+        connectorId: opts.connector,
+        kind: opts.kind,
+        metadata: meta,
+      });
+      console.log(JSON.stringify(j, null, 2));
+    });
+
+  scim
+    .command("get-sync-job-v2 <id>")
+    .description("Get V2 sync job by id")
+    .action((id) => {
+      const j = getSyncJobV2(id);
+      if (!j) {
+        logger.error(`syncJob ${id} not found`);
+        process.exit(1);
+      }
+      console.log(JSON.stringify(j, null, 2));
+    });
+
+  scim
+    .command("list-sync-jobs-v2")
+    .description("List V2 sync jobs")
+    .option("-c, --connector <id>", "filter by connector")
+    .option("-s, --status <state>", "filter by status")
+    .action((opts) => {
+      const out = listSyncJobsV2({
+        connectorId: opts.connector,
+        status: opts.status,
+      });
+      console.log(JSON.stringify(out, null, 2));
+    });
+
+  scim
+    .command("start-sync-job-v2 <id>")
+    .description("Transition sync job → running")
+    .action((id) => console.log(JSON.stringify(startSyncJobV2(id), null, 2)));
+  scim
+    .command("succeed-sync-job-v2 <id>")
+    .description("Transition sync job → succeeded (terminal)")
+    .action((id) => console.log(JSON.stringify(succeedSyncJobV2(id), null, 2)));
+  scim
+    .command("fail-sync-job-v2 <id>")
+    .description("Transition sync job → failed (terminal)")
+    .action((id) => console.log(JSON.stringify(failSyncJobV2(id), null, 2)));
+  scim
+    .command("cancel-sync-job-v2 <id>")
+    .description("Transition sync job → cancelled (terminal)")
+    .action((id) => console.log(JSON.stringify(cancelSyncJobV2(id), null, 2)));
+
+  scim
+    .command("auto-deprovision-idle-v2")
+    .description("Auto-deprovision idle identities; output flipped")
+    .action(() => {
+      const flipped = autoDeprovisionIdleIdentitiesV2();
+      console.log(JSON.stringify(flipped, null, 2));
+    });
+  scim
+    .command("auto-fail-stuck-sync-v2")
+    .description("Auto-fail stuck running syncs; output flipped")
+    .action(() => {
+      const flipped = autoFailStuckSyncJobsV2();
+      console.log(JSON.stringify(flipped, null, 2));
+    });
 }

package/src/commands/seshhook.js

@@ -0,0 +1,41 @@
+/**
+ * `cc seshhook` — Session Hooks V2 governance overlay (in-memory, atop lib/session-hooks.js).
+ */
+import {
+  SHOK_PROFILE_MATURITY_V2, SHOK_INVOCATION_LIFECYCLE_V2,
+  setMaxActiveShokProfilesPerOwnerV2, getMaxActiveShokProfilesPerOwnerV2,
+  setMaxPendingShokInvocationsPerProfileV2, getMaxPendingShokInvocationsPerProfileV2,
+  setShokProfileIdleMsV2, getShokProfileIdleMsV2,
+  setShokInvocationStuckMsV2, getShokInvocationStuckMsV2,
+  registerShokProfileV2, activateShokProfileV2, disableShokProfileV2, retireShokProfileV2, touchShokProfileV2, getShokProfileV2, listShokProfilesV2,
+  createShokInvocationV2, runningShokInvocationV2, completeShokInvocationV2, failShokInvocationV2, cancelShokInvocationV2, getShokInvocationV2, listShokInvocationsV2,
+  autoDisableIdleShokProfilesV2, autoFailStuckShokInvocationsV2, getSessionHooksGovStatsV2, _resetStateSessionHooksV2,
+} from "../lib/session-hooks.js";
+
+export function registerSeshhookCommand(program) {
+  const sh = program.command("seshhook").description("Session Hooks V2 governance");
+  sh.command("enums-v2").action(() => console.log(JSON.stringify({ profileMaturity: SHOK_PROFILE_MATURITY_V2, invocationLifecycle: SHOK_INVOCATION_LIFECYCLE_V2 }, null, 2)));
+  sh.command("config-v2").action(() => console.log(JSON.stringify({ maxActiveShokProfilesPerOwner: getMaxActiveShokProfilesPerOwnerV2(), maxPendingShokInvocationsPerProfile: getMaxPendingShokInvocationsPerProfileV2(), shokProfileIdleMs: getShokProfileIdleMsV2(), shokInvocationStuckMs: getShokInvocationStuckMsV2() }, null, 2)));
+  sh.command("set-max-active-v2 <n>").action((n) => { setMaxActiveShokProfilesPerOwnerV2(Number(n)); console.log("ok"); });
+  sh.command("set-max-pending-v2 <n>").action((n) => { setMaxPendingShokInvocationsPerProfileV2(Number(n)); console.log("ok"); });
+  sh.command("set-idle-ms-v2 <n>").action((n) => { setShokProfileIdleMsV2(Number(n)); console.log("ok"); });
+  sh.command("set-stuck-ms-v2 <n>").action((n) => { setShokInvocationStuckMsV2(Number(n)); console.log("ok"); });
+  sh.command("register-profile-v2 <id> <owner>").option("--event <e>", "event").action((id, owner, o) => console.log(JSON.stringify(registerShokProfileV2({ id, owner, event: o.event }), null, 2)));
+  sh.command("activate-profile-v2 <id>").action((id) => console.log(JSON.stringify(activateShokProfileV2(id), null, 2)));
+  sh.command("disable-profile-v2 <id>").action((id) => console.log(JSON.stringify(disableShokProfileV2(id), null, 2)));
+  sh.command("retire-profile-v2 <id>").action((id) => console.log(JSON.stringify(retireShokProfileV2(id), null, 2)));
+  sh.command("touch-profile-v2 <id>").action((id) => console.log(JSON.stringify(touchShokProfileV2(id), null, 2)));
+  sh.command("get-profile-v2 <id>").action((id) => console.log(JSON.stringify(getShokProfileV2(id), null, 2)));
+  sh.command("list-profiles-v2").action(() => console.log(JSON.stringify(listShokProfilesV2(), null, 2)));
+  sh.command("create-invocation-v2 <id> <profileId>").option("--payload <p>", "payload").action((id, profileId, o) => console.log(JSON.stringify(createShokInvocationV2({ id, profileId, payload: o.payload }), null, 2)));
+  sh.command("running-invocation-v2 <id>").action((id) => console.log(JSON.stringify(runningShokInvocationV2(id), null, 2)));
+  sh.command("complete-invocation-v2 <id>").action((id) => console.log(JSON.stringify(completeShokInvocationV2(id), null, 2)));
+  sh.command("fail-invocation-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(failShokInvocationV2(id, reason), null, 2)));
+  sh.command("cancel-invocation-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(cancelShokInvocationV2(id, reason), null, 2)));
+  sh.command("get-invocation-v2 <id>").action((id) => console.log(JSON.stringify(getShokInvocationV2(id), null, 2)));
+  sh.command("list-invocations-v2").action(() => console.log(JSON.stringify(listShokInvocationsV2(), null, 2)));
+  sh.command("auto-disable-idle-v2").action(() => console.log(JSON.stringify(autoDisableIdleShokProfilesV2(), null, 2)));
+  sh.command("auto-fail-stuck-v2").action(() => console.log(JSON.stringify(autoFailStuckShokInvocationsV2(), null, 2)));
+  sh.command("gov-stats-v2").action(() => console.log(JSON.stringify(getSessionHooksGovStatsV2(), null, 2)));
+  sh.command("reset-state-v2").action(() => { _resetStateSessionHooksV2(); console.log(JSON.stringify({ ok: true }, null, 2)); });
+}

package/src/commands/seshsearch.js

@@ -0,0 +1,41 @@
+/**
+ * `cc seshsearch` — Session Search V2 governance overlay (in-memory, atop lib/session-search.js).
+ */
+import {
+  SSCH_PROFILE_MATURITY_V2, SSCH_QUERY_LIFECYCLE_V2,
+  setMaxActiveSschProfilesPerOwnerV2, getMaxActiveSschProfilesPerOwnerV2,
+  setMaxPendingSschQueriesPerProfileV2, getMaxPendingSschQueriesPerProfileV2,
+  setSschProfileIdleMsV2, getSschProfileIdleMsV2,
+  setSschQueryStuckMsV2, getSschQueryStuckMsV2,
+  registerSschProfileV2, activateSschProfileV2, staleSschProfileV2, archiveSschProfileV2, touchSschProfileV2, getSschProfileV2, listSschProfilesV2,
+  createSschQueryV2, searchingSschQueryV2, completeSschQueryV2, failSschQueryV2, cancelSschQueryV2, getSschQueryV2, listSschQueriesV2,
+  autoStaleIdleSschProfilesV2, autoFailStuckSschQueriesV2, getSessionSearchGovStatsV2, _resetStateSessionSearchV2,
+} from "../lib/session-search.js";
+
+export function registerSeshsearchCommand(program) {
+  const ss = program.command("seshsearch").description("Session Search V2 governance");
+  ss.command("enums-v2").action(() => console.log(JSON.stringify({ profileMaturity: SSCH_PROFILE_MATURITY_V2, queryLifecycle: SSCH_QUERY_LIFECYCLE_V2 }, null, 2)));
+  ss.command("config-v2").action(() => console.log(JSON.stringify({ maxActiveSschProfilesPerOwner: getMaxActiveSschProfilesPerOwnerV2(), maxPendingSschQueriesPerProfile: getMaxPendingSschQueriesPerProfileV2(), sschProfileIdleMs: getSschProfileIdleMsV2(), sschQueryStuckMs: getSschQueryStuckMsV2() }, null, 2)));
+  ss.command("set-max-active-v2 <n>").action((n) => { setMaxActiveSschProfilesPerOwnerV2(Number(n)); console.log("ok"); });
+  ss.command("set-max-pending-v2 <n>").action((n) => { setMaxPendingSschQueriesPerProfileV2(Number(n)); console.log("ok"); });
+  ss.command("set-idle-ms-v2 <n>").action((n) => { setSschProfileIdleMsV2(Number(n)); console.log("ok"); });
+  ss.command("set-stuck-ms-v2 <n>").action((n) => { setSschQueryStuckMsV2(Number(n)); console.log("ok"); });
+  ss.command("register-profile-v2 <id> <owner>").option("--scope <s>", "scope").action((id, owner, o) => console.log(JSON.stringify(registerSschProfileV2({ id, owner, scope: o.scope }), null, 2)));
+  ss.command("activate-profile-v2 <id>").action((id) => console.log(JSON.stringify(activateSschProfileV2(id), null, 2)));
+  ss.command("stale-profile-v2 <id>").action((id) => console.log(JSON.stringify(staleSschProfileV2(id), null, 2)));
+  ss.command("archive-profile-v2 <id>").action((id) => console.log(JSON.stringify(archiveSschProfileV2(id), null, 2)));
+  ss.command("touch-profile-v2 <id>").action((id) => console.log(JSON.stringify(touchSschProfileV2(id), null, 2)));
+  ss.command("get-profile-v2 <id>").action((id) => console.log(JSON.stringify(getSschProfileV2(id), null, 2)));
+  ss.command("list-profiles-v2").action(() => console.log(JSON.stringify(listSschProfilesV2(), null, 2)));
+  ss.command("create-query-v2 <id> <profileId>").option("--q <q>", "query string").action((id, profileId, o) => console.log(JSON.stringify(createSschQueryV2({ id, profileId, q: o.q }), null, 2)));
+  ss.command("searching-query-v2 <id>").action((id) => console.log(JSON.stringify(searchingSschQueryV2(id), null, 2)));
+  ss.command("complete-query-v2 <id>").action((id) => console.log(JSON.stringify(completeSschQueryV2(id), null, 2)));
+  ss.command("fail-query-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(failSschQueryV2(id, reason), null, 2)));
+  ss.command("cancel-query-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(cancelSschQueryV2(id, reason), null, 2)));
+  ss.command("get-query-v2 <id>").action((id) => console.log(JSON.stringify(getSschQueryV2(id), null, 2)));
+  ss.command("list-queries-v2").action(() => console.log(JSON.stringify(listSschQueriesV2(), null, 2)));
+  ss.command("auto-stale-idle-v2").action(() => console.log(JSON.stringify(autoStaleIdleSschProfilesV2(), null, 2)));
+  ss.command("auto-fail-stuck-v2").action(() => console.log(JSON.stringify(autoFailStuckSschQueriesV2(), null, 2)));
+  ss.command("gov-stats-v2").action(() => console.log(JSON.stringify(getSessionSearchGovStatsV2(), null, 2)));
+  ss.command("reset-state-v2").action(() => { _resetStateSessionSearchV2(); console.log(JSON.stringify({ ok: true }, null, 2)); });
+}