chainlesschain 0.81.0 → 0.143.0

package/src/commands/tms.js

@@ -0,0 +1,45 @@
+/**
+ * `cc tms` — Task Model Selector V2 governance overlay.
+ *
+ * In-memory governance for selector profiles + selection lifecycle, layered atop
+ * `lib/task-model-selector.js`. Independent of legacy heuristic selector helpers.
+ */
+
+import {
+  TMS_PROFILE_MATURITY_V2, TMS_SELECTION_LIFECYCLE_V2,
+  setMaxActiveTmsProfilesPerOwnerV2, getMaxActiveTmsProfilesPerOwnerV2,
+  setMaxPendingTmsSelectionsPerProfileV2, getMaxPendingTmsSelectionsPerProfileV2,
+  setTmsProfileIdleMsV2, getTmsProfileIdleMsV2,
+  setTmsSelectionStuckMsV2, getTmsSelectionStuckMsV2,
+  registerTmsProfileV2, activateTmsProfileV2, staleTmsProfileV2, decommissionTmsProfileV2, touchTmsProfileV2, getTmsProfileV2, listTmsProfilesV2,
+  createTmsSelectionV2, scoreTmsSelectionV2, completeTmsSelectionV2, failTmsSelectionV2, cancelTmsSelectionV2, getTmsSelectionV2, listTmsSelectionsV2,
+  autoStaleIdleTmsProfilesV2, autoFailStuckTmsSelectionsV2, getTaskModelSelectorGovStatsV2, _resetStateTaskModelSelectorV2,
+} from "../lib/task-model-selector.js";
+
+export function registerTmsCommand(program) {
+  const tms = program.command("tms").description("Task Model Selector V2 governance");
+  tms.command("enums-v2").action(() => console.log(JSON.stringify({ profileMaturity: TMS_PROFILE_MATURITY_V2, selectionLifecycle: TMS_SELECTION_LIFECYCLE_V2 }, null, 2)));
+  tms.command("config-v2").action(() => console.log(JSON.stringify({ maxActiveTmsProfilesPerOwner: getMaxActiveTmsProfilesPerOwnerV2(), maxPendingTmsSelectionsPerProfile: getMaxPendingTmsSelectionsPerProfileV2(), tmsProfileIdleMs: getTmsProfileIdleMsV2(), tmsSelectionStuckMs: getTmsSelectionStuckMsV2() }, null, 2)));
+  tms.command("set-max-active-v2 <n>").action((n) => { setMaxActiveTmsProfilesPerOwnerV2(Number(n)); console.log("ok"); });
+  tms.command("set-max-pending-v2 <n>").action((n) => { setMaxPendingTmsSelectionsPerProfileV2(Number(n)); console.log("ok"); });
+  tms.command("set-idle-ms-v2 <n>").action((n) => { setTmsProfileIdleMsV2(Number(n)); console.log("ok"); });
+  tms.command("set-stuck-ms-v2 <n>").action((n) => { setTmsSelectionStuckMsV2(Number(n)); console.log("ok"); });
+  tms.command("register-profile-v2 <id> <owner>").option("--strategy <s>", "strategy").action((id, owner, o) => console.log(JSON.stringify(registerTmsProfileV2({ id, owner, strategy: o.strategy }), null, 2)));
+  tms.command("activate-profile-v2 <id>").action((id) => console.log(JSON.stringify(activateTmsProfileV2(id), null, 2)));
+  tms.command("stale-profile-v2 <id>").action((id) => console.log(JSON.stringify(staleTmsProfileV2(id), null, 2)));
+  tms.command("decommission-profile-v2 <id>").action((id) => console.log(JSON.stringify(decommissionTmsProfileV2(id), null, 2)));
+  tms.command("touch-profile-v2 <id>").action((id) => console.log(JSON.stringify(touchTmsProfileV2(id), null, 2)));
+  tms.command("get-profile-v2 <id>").action((id) => console.log(JSON.stringify(getTmsProfileV2(id), null, 2)));
+  tms.command("list-profiles-v2").action(() => console.log(JSON.stringify(listTmsProfilesV2(), null, 2)));
+  tms.command("create-selection-v2 <id> <profileId>").option("--task <t>", "task").action((id, profileId, o) => console.log(JSON.stringify(createTmsSelectionV2({ id, profileId, task: o.task }), null, 2)));
+  tms.command("score-selection-v2 <id>").action((id) => console.log(JSON.stringify(scoreTmsSelectionV2(id), null, 2)));
+  tms.command("complete-selection-v2 <id>").action((id) => console.log(JSON.stringify(completeTmsSelectionV2(id), null, 2)));
+  tms.command("fail-selection-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(failTmsSelectionV2(id, reason), null, 2)));
+  tms.command("cancel-selection-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(cancelTmsSelectionV2(id, reason), null, 2)));
+  tms.command("get-selection-v2 <id>").action((id) => console.log(JSON.stringify(getTmsSelectionV2(id), null, 2)));
+  tms.command("list-selections-v2").action(() => console.log(JSON.stringify(listTmsSelectionsV2(), null, 2)));
+  tms.command("auto-stale-idle-v2").action(() => console.log(JSON.stringify(autoStaleIdleTmsProfilesV2(), null, 2)));
+  tms.command("auto-fail-stuck-v2").action(() => console.log(JSON.stringify(autoFailStuckTmsSelectionsV2(), null, 2)));
+  tms.command("gov-stats-v2").action(() => console.log(JSON.stringify(getTaskModelSelectorGovStatsV2(), null, 2)));
+  tms.command("reset-state-v2").action(() => { _resetStateTaskModelSelectorV2(); console.log(JSON.stringify({ ok: true }, null, 2)); });
+}

package/src/commands/tokens.js

@@ -11,6 +11,37 @@ import {
   getTodayStats,
   getCostBreakdown,
   getRecentUsage,
+  BUDGET_MATURITY_V2,
+  USAGE_RECORD_LIFECYCLE_V2,
+  getMaxActiveBudgetsPerOwnerV2,
+  setMaxActiveBudgetsPerOwnerV2,
+  getMaxPendingRecordsPerBudgetV2,
+  setMaxPendingRecordsPerBudgetV2,
+  getBudgetIdleMsV2,
+  setBudgetIdleMsV2,
+  getRecordStuckMsV2,
+  setRecordStuckMsV2,
+  registerBudgetV2,
+  getBudgetV2,
+  listBudgetsV2,
+  setBudgetStatusV2,
+  activateBudgetV2,
+  suspendBudgetV2,
+  archiveBudgetV2,
+  touchBudgetV2,
+  getActiveBudgetCountV2,
+  createUsageRecordV2,
+  getUsageRecordV2,
+  listUsageRecordsV2,
+  setUsageRecordStatusV2,
+  recordUsageV2,
+  billUsageV2,
+  rejectUsageV2,
+  refundUsageV2,
+  getPendingRecordCountV2,
+  autoSuspendIdleBudgetsV2,
+  autoRejectStaleRecordsV2,
+  getTokenTrackerStatsV2,
 } from "../lib/token-tracker.js";
 import {
   getCacheStats,
@@ -211,4 +242,242 @@ export function registerTokensCommand(program) {
         process.exit(1);
       }
     });
+
+  // ── V2 Surface ──
+
+  const out = (json, obj) => {
+    if (json) console.log(JSON.stringify(obj, null, 2));
+    else console.log(JSON.stringify(obj, null, 2));
+  };
+  const tryRun = (fn) => {
+    try {
+      fn();
+    } catch (err) {
+      logger.error(err.message);
+      process.exit(1);
+    }
+  };
+
+  tokens
+    .command("budget-maturities-v2")
+    .description("List V2 budget maturity states")
+    .action(() => out(true, Object.values(BUDGET_MATURITY_V2)));
+
+  tokens
+    .command("usage-record-lifecycles-v2")
+    .description("List V2 usage record lifecycle states")
+    .action(() => out(true, Object.values(USAGE_RECORD_LIFECYCLE_V2)));
+
+  tokens
+    .command("stats-v2")
+    .description("V2 token-tracker stats")
+    .action(() => out(true, getTokenTrackerStatsV2()));
+
+  tokens
+    .command("get-max-active-budgets-v2")
+    .description("Get max active budgets per owner (V2)")
+    .action(() =>
+      out(true, { maxActiveBudgetsPerOwner: getMaxActiveBudgetsPerOwnerV2() }),
+    );
+
+  tokens
+    .command("set-max-active-budgets-v2 <n>")
+    .description("Set max active budgets per owner (V2)")
+    .action((n) =>
+      tryRun(() => {
+        setMaxActiveBudgetsPerOwnerV2(Number(n));
+        out(true, {
+          maxActiveBudgetsPerOwner: getMaxActiveBudgetsPerOwnerV2(),
+        });
+      }),
+    );
+
+  tokens
+    .command("get-max-pending-records-v2")
+    .description("Get max pending records per budget (V2)")
+    .action(() =>
+      out(true, {
+        maxPendingRecordsPerBudget: getMaxPendingRecordsPerBudgetV2(),
+      }),
+    );
+
+  tokens
+    .command("set-max-pending-records-v2 <n>")
+    .description("Set max pending records per budget (V2)")
+    .action((n) =>
+      tryRun(() => {
+        setMaxPendingRecordsPerBudgetV2(Number(n));
+        out(true, {
+          maxPendingRecordsPerBudget: getMaxPendingRecordsPerBudgetV2(),
+        });
+      }),
+    );
+
+  tokens
+    .command("get-budget-idle-ms-v2")
+    .description("Get budget idle threshold (V2)")
+    .action(() => out(true, { budgetIdleMs: getBudgetIdleMsV2() }));
+
+  tokens
+    .command("set-budget-idle-ms-v2 <ms>")
+    .description("Set budget idle threshold (V2)")
+    .action((ms) =>
+      tryRun(() => {
+        setBudgetIdleMsV2(Number(ms));
+        out(true, { budgetIdleMs: getBudgetIdleMsV2() });
+      }),
+    );
+
+  tokens
+    .command("get-record-stuck-ms-v2")
+    .description("Get record stuck threshold (V2)")
+    .action(() => out(true, { recordStuckMs: getRecordStuckMsV2() }));
+
+  tokens
+    .command("set-record-stuck-ms-v2 <ms>")
+    .description("Set record stuck threshold (V2)")
+    .action((ms) =>
+      tryRun(() => {
+        setRecordStuckMsV2(Number(ms));
+        out(true, { recordStuckMs: getRecordStuckMsV2() });
+      }),
+    );
+
+  tokens
+    .command("active-budget-count-v2 <ownerId>")
+    .description("Active budget count for owner (V2)")
+    .action((ownerId) =>
+      out(true, { ownerId, count: getActiveBudgetCountV2(ownerId) }),
+    );
+
+  tokens
+    .command("pending-record-count-v2 <budgetId>")
+    .description("Pending record count for budget (V2)")
+    .action((budgetId) =>
+      out(true, { budgetId, count: getPendingRecordCountV2(budgetId) }),
+    );
+
+  tokens
+    .command("register-budget-v2 <id>")
+    .description("Register a V2 budget")
+    .requiredOption("-o, --owner <id>", "owner id")
+    .requiredOption("-l, --label <label>", "budget label")
+    .action((id, opts) =>
+      tryRun(() =>
+        out(
+          true,
+          registerBudgetV2(id, { ownerId: opts.owner, label: opts.label }),
+        ),
+      ),
+    );
+
+  tokens
+    .command("get-budget-v2 <id>")
+    .description("Get a V2 budget")
+    .action((id) => out(true, getBudgetV2(id)));
+
+  tokens
+    .command("list-budgets-v2")
+    .description("List V2 budgets")
+    .option("-o, --owner <id>", "filter by owner")
+    .option("-s, --status <status>", "filter by status")
+    .action((opts) =>
+      out(true, listBudgetsV2({ ownerId: opts.owner, status: opts.status })),
+    );
+
+  tokens
+    .command("set-budget-status-v2 <id> <next>")
+    .description("Set V2 budget status")
+    .action((id, next) => tryRun(() => out(true, setBudgetStatusV2(id, next))));
+
+  tokens
+    .command("activate-budget-v2 <id>")
+    .description("Activate a V2 budget")
+    .action((id) => tryRun(() => out(true, activateBudgetV2(id))));
+
+  tokens
+    .command("suspend-budget-v2 <id>")
+    .description("Suspend a V2 budget")
+    .action((id) => tryRun(() => out(true, suspendBudgetV2(id))));
+
+  tokens
+    .command("archive-budget-v2 <id>")
+    .description("Archive a V2 budget")
+    .action((id) => tryRun(() => out(true, archiveBudgetV2(id))));
+
+  tokens
+    .command("touch-budget-v2 <id>")
+    .description("Touch a V2 budget")
+    .action((id) => tryRun(() => out(true, touchBudgetV2(id))));
+
+  tokens
+    .command("create-usage-record-v2 <id>")
+    .description("Create a V2 usage record")
+    .requiredOption("-b, --budget <id>", "budget id")
+    .requiredOption("-u, --units <n>", "usage units")
+    .action((id, opts) =>
+      tryRun(() =>
+        out(
+          true,
+          createUsageRecordV2(id, {
+            budgetId: opts.budget,
+            units: Number(opts.units),
+          }),
+        ),
+      ),
+    );
+
+  tokens
+    .command("get-usage-record-v2 <id>")
+    .description("Get a V2 usage record")
+    .action((id) => out(true, getUsageRecordV2(id)));
+
+  tokens
+    .command("list-usage-records-v2")
+    .description("List V2 usage records")
+    .option("-b, --budget <id>", "filter by budget")
+    .option("-s, --status <status>", "filter by status")
+    .action((opts) =>
+      out(
+        true,
+        listUsageRecordsV2({ budgetId: opts.budget, status: opts.status }),
+      ),
+    );
+
+  tokens
+    .command("set-usage-record-status-v2 <id> <next>")
+    .description("Set V2 usage record status")
+    .action((id, next) =>
+      tryRun(() => out(true, setUsageRecordStatusV2(id, next))),
+    );
+
+  tokens
+    .command("record-usage-v2 <id>")
+    .description("Mark V2 usage record recorded")
+    .action((id) => tryRun(() => out(true, recordUsageV2(id))));
+
+  tokens
+    .command("bill-usage-v2 <id>")
+    .description("Bill V2 usage record")
+    .action((id) => tryRun(() => out(true, billUsageV2(id))));
+
+  tokens
+    .command("reject-usage-v2 <id>")
+    .description("Reject V2 usage record")
+    .action((id) => tryRun(() => out(true, rejectUsageV2(id))));
+
+  tokens
+    .command("refund-usage-v2 <id>")
+    .description("Refund V2 usage record")
+    .action((id) => tryRun(() => out(true, refundUsageV2(id))));
+
+  tokens
+    .command("auto-suspend-idle-budgets-v2")
+    .description("Auto-suspend idle V2 budgets")
+    .action(() => out(true, autoSuspendIdleBudgetsV2()));
+
+  tokens
+    .command("auto-reject-stale-records-v2")
+    .description("Auto-reject stale V2 records")
+    .action(() => out(true, autoRejectStaleRecordsV2()));
 }

package/src/commands/topiccls.js

@@ -0,0 +1,45 @@
+/**
+ * `cc topiccls` — Topic Classifier V2 governance overlay.
+ *
+ * In-memory governance for classifier profiles + job lifecycle, layered atop
+ * `lib/topic-classifier.js`.
+ */
+
+import {
+  TOPIC_CLS_PROFILE_MATURITY_V2, TOPIC_CLS_JOB_LIFECYCLE_V2,
+  setMaxActiveTopicClsProfilesPerOwnerV2, getMaxActiveTopicClsProfilesPerOwnerV2,
+  setMaxPendingTopicClsJobsPerProfileV2, getMaxPendingTopicClsJobsPerProfileV2,
+  setTopicClsProfileIdleMsV2, getTopicClsProfileIdleMsV2,
+  setTopicClsJobStuckMsV2, getTopicClsJobStuckMsV2,
+  registerTopicClsProfileV2, activateTopicClsProfileV2, staleTopicClsProfileV2, archiveTopicClsProfileV2, touchTopicClsProfileV2, getTopicClsProfileV2, listTopicClsProfilesV2,
+  createTopicClsJobV2, startTopicClsJobV2, completeTopicClsJobV2, failTopicClsJobV2, cancelTopicClsJobV2, getTopicClsJobV2, listTopicClsJobsV2,
+  autoStaleIdleTopicClsProfilesV2, autoFailStuckTopicClsJobsV2, getTopicClassifierGovStatsV2, _resetStateTopicClsV2,
+} from "../lib/topic-classifier.js";
+
+export function registerTopicClsCommand(program) {
+  const tc = program.command("topiccls").description("Topic Classifier V2 governance");
+  tc.command("enums-v2").action(() => console.log(JSON.stringify({ profileMaturity: TOPIC_CLS_PROFILE_MATURITY_V2, jobLifecycle: TOPIC_CLS_JOB_LIFECYCLE_V2 }, null, 2)));
+  tc.command("config-v2").action(() => console.log(JSON.stringify({ maxActiveTopicClsProfilesPerOwner: getMaxActiveTopicClsProfilesPerOwnerV2(), maxPendingTopicClsJobsPerProfile: getMaxPendingTopicClsJobsPerProfileV2(), topicClsProfileIdleMs: getTopicClsProfileIdleMsV2(), topicClsJobStuckMs: getTopicClsJobStuckMsV2() }, null, 2)));
+  tc.command("set-max-active-v2 <n>").action((n) => { setMaxActiveTopicClsProfilesPerOwnerV2(Number(n)); console.log("ok"); });
+  tc.command("set-max-pending-v2 <n>").action((n) => { setMaxPendingTopicClsJobsPerProfileV2(Number(n)); console.log("ok"); });
+  tc.command("set-idle-ms-v2 <n>").action((n) => { setTopicClsProfileIdleMsV2(Number(n)); console.log("ok"); });
+  tc.command("set-stuck-ms-v2 <n>").action((n) => { setTopicClsJobStuckMsV2(Number(n)); console.log("ok"); });
+  tc.command("register-profile-v2 <id> <owner>").option("--model <m>", "model").action((id, owner, o) => console.log(JSON.stringify(registerTopicClsProfileV2({ id, owner, model: o.model }), null, 2)));
+  tc.command("activate-profile-v2 <id>").action((id) => console.log(JSON.stringify(activateTopicClsProfileV2(id), null, 2)));
+  tc.command("stale-profile-v2 <id>").action((id) => console.log(JSON.stringify(staleTopicClsProfileV2(id), null, 2)));
+  tc.command("archive-profile-v2 <id>").action((id) => console.log(JSON.stringify(archiveTopicClsProfileV2(id), null, 2)));
+  tc.command("touch-profile-v2 <id>").action((id) => console.log(JSON.stringify(touchTopicClsProfileV2(id), null, 2)));
+  tc.command("get-profile-v2 <id>").action((id) => console.log(JSON.stringify(getTopicClsProfileV2(id), null, 2)));
+  tc.command("list-profiles-v2").action(() => console.log(JSON.stringify(listTopicClsProfilesV2(), null, 2)));
+  tc.command("create-job-v2 <id> <profileId>").option("--text <t>", "text").action((id, profileId, o) => console.log(JSON.stringify(createTopicClsJobV2({ id, profileId, text: o.text }), null, 2)));
+  tc.command("start-job-v2 <id>").action((id) => console.log(JSON.stringify(startTopicClsJobV2(id), null, 2)));
+  tc.command("complete-job-v2 <id>").action((id) => console.log(JSON.stringify(completeTopicClsJobV2(id), null, 2)));
+  tc.command("fail-job-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(failTopicClsJobV2(id, reason), null, 2)));
+  tc.command("cancel-job-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(cancelTopicClsJobV2(id, reason), null, 2)));
+  tc.command("get-job-v2 <id>").action((id) => console.log(JSON.stringify(getTopicClsJobV2(id), null, 2)));
+  tc.command("list-jobs-v2").action(() => console.log(JSON.stringify(listTopicClsJobsV2(), null, 2)));
+  tc.command("auto-stale-idle-v2").action(() => console.log(JSON.stringify(autoStaleIdleTopicClsProfilesV2(), null, 2)));
+  tc.command("auto-fail-stuck-v2").action(() => console.log(JSON.stringify(autoFailStuckTopicClsJobsV2(), null, 2)));
+  tc.command("gov-stats-v2").action(() => console.log(JSON.stringify(getTopicClassifierGovStatsV2(), null, 2)));
+  tc.command("reset-state-v2").action(() => { _resetStateTopicClsV2(); console.log(JSON.stringify({ ok: true }, null, 2)); });
+}

package/src/commands/trust.js

@@ -27,8 +27,48 @@ import {
   listHsmDevices,
   signWithHsm,
   getTrustSecurityStats,
+  HSM_MATURITY_V2,
+  TRANSMISSION_V2,
+  getMaxActiveDevicesPerOperator,
+  setMaxActiveDevicesPerOperator,
+  getMaxPendingTransmissionsPerDevice,
+  setMaxPendingTransmissionsPerDevice,
+  getDeviceIdleMs,
+  setDeviceIdleMs,
+  getTransmissionStuckMs,
+  setTransmissionStuckMs,
+  getActiveDeviceCount,
+  getPendingTransmissionCount,
+  registerDeviceV2,
+  getDeviceV2,
+  listDevicesV2,
+  setDeviceMaturityV2,
+  activateDevice,
+  degradeDevice,
+  retireDevice,
+  touchDeviceUsage,
+  enqueueTransmissionV2,
+  getTransmissionV2,
+  listTransmissionsV2,
+  setTransmissionStatusV2,
+  startTransmission,
+  confirmTransmission,
+  failTransmission,
+  cancelTransmission,
+  autoRetireIdleDevices,
+  autoFailStuckTransmissions,
+  getTrustSecurityStatsV2,
 } from "../lib/trust-security.js";
 
+function _parseJsonV2(s) {
+  if (!s) return undefined;
+  try {
+    return JSON.parse(s);
+  } catch {
+    throw new Error(`invalid JSON: ${s}`);
+  }
+}
+
 function _dbFromCtx(cmd) {
   const root = cmd?.parent?.parent ?? cmd?.parent;
   return root?._db;
@@ -362,5 +402,214 @@ export function registerTrustCommand(program) {
       console.log(`HSM Devices:  ${s.hsm.total}`);
     });
 
+  /* ── V2 Surface (Phase 68-71) ─────────────────────────── */
+
+  tr.command("hsm-maturities-v2")
+    .description("List HSM_MATURITY_V2 enum")
+    .action(() => {
+      for (const v of Object.values(HSM_MATURITY_V2)) console.log(`  ${v}`);
+    });
+
+  tr.command("transmissions-v2")
+    .description("List TRANSMISSION_V2 enum")
+    .action(() => {
+      for (const v of Object.values(TRANSMISSION_V2)) console.log(`  ${v}`);
+    });
+
+  tr.command("max-active-devices-per-operator")
+    .description("Get current max-active-devices-per-operator cap")
+    .action(() => console.log(getMaxActiveDevicesPerOperator()));
+  tr.command("set-max-active-devices-per-operator <n>").action((n) =>
+    console.log(setMaxActiveDevicesPerOperator(Number(n))),
+  );
+
+  tr.command("max-pending-transmissions-per-device")
+    .description("Get current max-pending-transmissions-per-device cap")
+    .action(() => console.log(getMaxPendingTransmissionsPerDevice()));
+  tr.command("set-max-pending-transmissions-per-device <n>").action((n) =>
+    console.log(setMaxPendingTransmissionsPerDevice(Number(n))),
+  );
+
+  tr.command("device-idle-ms")
+    .description("Get current device-idle-ms threshold")
+    .action(() => console.log(getDeviceIdleMs()));
+  tr.command("set-device-idle-ms <n>").action((n) =>
+    console.log(setDeviceIdleMs(Number(n))),
+  );
+
+  tr.command("transmission-stuck-ms")
+    .description("Get current transmission-stuck-ms threshold")
+    .action(() => console.log(getTransmissionStuckMs()));
+  tr.command("set-transmission-stuck-ms <n>").action((n) =>
+    console.log(setTransmissionStuckMs(Number(n))),
+  );
+
+  tr.command("active-device-count")
+    .description("Count active+degraded devices (optionally by operator)")
+    .option("-o, --operator <operator>", "scope to operator")
+    .action((opts) => console.log(getActiveDeviceCount(opts.operator)));
+
+  tr.command("pending-transmission-count")
+    .description("Count non-terminal transmissions (optionally by device)")
+    .option("-d, --device <device>", "scope to device")
+    .action((opts) => console.log(getPendingTransmissionCount(opts.device)));
+
+  tr.command("register-device-v2 <device-id>")
+    .description("Register V2 HSM device")
+    .requiredOption("-o, --operator <operator>", "operator id")
+    .requiredOption("-v, --vendor <vendor>", "HSM vendor")
+    .option(
+      "-i, --initial <status>",
+      "initial status",
+      HSM_MATURITY_V2.PROVISIONAL,
+    )
+    .option("--metadata <json>", "metadata JSON")
+    .action((id, opts) => {
+      const d = registerDeviceV2({
+        id,
+        operator: opts.operator,
+        vendor: opts.vendor,
+        initialStatus: opts.initial,
+        metadata: _parseJsonV2(opts.metadata),
+      });
+      console.log(JSON.stringify(d, null, 2));
+    });
+
+  tr.command("device-v2 <device-id>")
+    .description("Show V2 device")
+    .action((id) => {
+      const d = getDeviceV2(id);
+      if (!d) return console.error(`device ${id} not found`);
+      console.log(JSON.stringify(d, null, 2));
+    });
+
+  tr.command("list-devices-v2")
+    .description("List V2 devices")
+    .option("-o, --operator <operator>", "filter by operator")
+    .option("-s, --status <status>", "filter by status")
+    .action((opts) =>
+      console.log(JSON.stringify(listDevicesV2(opts), null, 2)),
+    );
+
+  tr.command("set-device-maturity-v2 <device-id> <status>")
+    .description("Transition V2 device maturity")
+    .option("-r, --reason <reason>", "transition reason")
+    .option("--metadata <json>", "metadata patch JSON")
+    .action((id, status, opts) => {
+      const d = setDeviceMaturityV2(id, status, {
+        reason: opts.reason,
+        metadata: _parseJsonV2(opts.metadata),
+      });
+      console.log(JSON.stringify(d, null, 2));
+    });
+
+  for (const [name, fn] of [
+    ["activate-device", activateDevice],
+    ["degrade-device", degradeDevice],
+    ["retire-device", retireDevice],
+  ]) {
+    tr.command(`${name} <device-id>`)
+      .description(`Shortcut for ${name.replace("-device", "")} transition`)
+      .option("-r, --reason <reason>", "transition reason")
+      .action((id, opts) => {
+        const d = fn(id, { reason: opts.reason });
+        console.log(JSON.stringify(d, null, 2));
+      });
+  }
+
+  tr.command("touch-device-usage <device-id>")
+    .description("Mark V2 device as used now")
+    .action((id) => {
+      const d = touchDeviceUsage(id);
+      console.log(JSON.stringify(d, null, 2));
+    });
+
+  tr.command("enqueue-transmission-v2 <transmission-id>")
+    .description("Enqueue V2 satellite transmission")
+    .requiredOption("-d, --device <device>", "device id")
+    .requiredOption("-p, --provider <provider>", "satellite provider")
+    .requiredOption("-x, --payload <payload>", "message payload")
+    .option("--metadata <json>", "metadata JSON")
+    .action((id, opts) => {
+      const t = enqueueTransmissionV2({
+        id,
+        deviceId: opts.device,
+        provider: opts.provider,
+        payload: opts.payload,
+        metadata: _parseJsonV2(opts.metadata),
+      });
+      console.log(JSON.stringify(t, null, 2));
+    });
+
+  tr.command("transmission-v2 <transmission-id>")
+    .description("Show V2 transmission")
+    .action((id) => {
+      const t = getTransmissionV2(id);
+      if (!t) return console.error(`transmission ${id} not found`);
+      console.log(JSON.stringify(t, null, 2));
+    });
+
+  tr.command("list-transmissions-v2")
+    .description("List V2 transmissions")
+    .option("-d, --device <device>", "filter by device")
+    .option("-s, --status <status>", "filter by status")
+    .action((opts) =>
+      console.log(JSON.stringify(listTransmissionsV2(opts), null, 2)),
+    );
+
+  tr.command("set-transmission-status-v2 <transmission-id> <status>")
+    .option("-r, --reason <reason>", "transition reason")
+    .option("--metadata <json>", "metadata patch JSON")
+    .action((id, status, opts) => {
+      const t = setTransmissionStatusV2(id, status, {
+        reason: opts.reason,
+        metadata: _parseJsonV2(opts.metadata),
+      });
+      console.log(JSON.stringify(t, null, 2));
+    });
+
+  for (const [name, fn] of [
+    ["start-transmission", startTransmission],
+    ["confirm-transmission", confirmTransmission],
+    ["fail-transmission", failTransmission],
+    ["cancel-transmission", cancelTransmission],
+  ]) {
+    tr.command(`${name} <transmission-id>`)
+      .description(
+        `Shortcut for ${name.replace("-transmission", "")} transition`,
+      )
+      .option("-r, --reason <reason>", "transition reason")
+      .action((id, opts) => {
+        const t = fn(id, { reason: opts.reason });
+        console.log(JSON.stringify(t, null, 2));
+      });
+  }
+
+  tr.command("auto-retire-idle-devices")
+    .description(
+      "Bulk-retire ACTIVE/DEGRADED devices whose lastUsedAt is older than deviceIdleMs",
+    )
+    .action(() =>
+      console.log(
+        JSON.stringify({ flipped: autoRetireIdleDevices() }, null, 2),
+      ),
+    );
+
+  tr.command("auto-fail-stuck-transmissions")
+    .description(
+      "Bulk-fail SENDING transmissions whose startedAt is older than transmissionStuckMs",
+    )
+    .action(() =>
+      console.log(
+        JSON.stringify({ flipped: autoFailStuckTransmissions() }, null, 2),
+      ),
+    );
+
+  tr.command("stats-v2")
+    .description("Show V2 trust/security stats")
+    .action(() =>
+      console.log(JSON.stringify(getTrustSecurityStatsV2(), null, 2)),
+    );
+
   program.addCommand(tr);
 }

package/src/commands/uprof.js

@@ -0,0 +1,45 @@
+/**
+ * `cc uprof` — User Profile V2 governance overlay.
+ *
+ * In-memory governance for user profile maturity + preference lifecycle, layered
+ * atop `lib/user-profile.js`. Independent of legacy SQLite/file profile storage.
+ */
+
+import {
+  USER_PROFILE_MATURITY_V2, USER_PREF_LIFECYCLE_V2,
+  setMaxActiveUserProfilesPerOwnerV2, getMaxActiveUserProfilesPerOwnerV2,
+  setMaxPendingUserPrefsPerProfileV2, getMaxPendingUserPrefsPerProfileV2,
+  setUserProfileIdleMsV2, getUserProfileIdleMsV2,
+  setUserPrefStuckMsV2, getUserPrefStuckMsV2,
+  registerUserProfileV2, activateUserProfileV2, dormantUserProfileV2, archiveUserProfileV2, touchUserProfileV2, getUserProfileV2, listUserProfilesV2,
+  createUserPrefV2, applyUserPrefV2, rejectUserPrefV2, supersedeUserPrefV2, cancelUserPrefV2, getUserPrefV2, listUserPrefsV2,
+  autoDormantIdleUserProfilesV2, autoCancelStaleUserPrefsV2, getUserProfileGovStatsV2, _resetStateUserProfileV2,
+} from "../lib/user-profile.js";
+
+export function registerUprofCommand(program) {
+  const up = program.command("uprof").description("User Profile V2 governance");
+  up.command("enums-v2").action(() => console.log(JSON.stringify({ profileMaturity: USER_PROFILE_MATURITY_V2, prefLifecycle: USER_PREF_LIFECYCLE_V2 }, null, 2)));
+  up.command("config-v2").action(() => console.log(JSON.stringify({ maxActiveUserProfilesPerOwner: getMaxActiveUserProfilesPerOwnerV2(), maxPendingUserPrefsPerProfile: getMaxPendingUserPrefsPerProfileV2(), userProfileIdleMs: getUserProfileIdleMsV2(), userPrefStuckMs: getUserPrefStuckMsV2() }, null, 2)));
+  up.command("set-max-active-v2 <n>").action((n) => { setMaxActiveUserProfilesPerOwnerV2(Number(n)); console.log("ok"); });
+  up.command("set-max-pending-v2 <n>").action((n) => { setMaxPendingUserPrefsPerProfileV2(Number(n)); console.log("ok"); });
+  up.command("set-idle-ms-v2 <n>").action((n) => { setUserProfileIdleMsV2(Number(n)); console.log("ok"); });
+  up.command("set-stuck-ms-v2 <n>").action((n) => { setUserPrefStuckMsV2(Number(n)); console.log("ok"); });
+  up.command("register-profile-v2 <id> <owner>").option("--handle <h>", "handle").action((id, owner, o) => console.log(JSON.stringify(registerUserProfileV2({ id, owner, handle: o.handle }), null, 2)));
+  up.command("activate-profile-v2 <id>").action((id) => console.log(JSON.stringify(activateUserProfileV2(id), null, 2)));
+  up.command("dormant-profile-v2 <id>").action((id) => console.log(JSON.stringify(dormantUserProfileV2(id), null, 2)));
+  up.command("archive-profile-v2 <id>").action((id) => console.log(JSON.stringify(archiveUserProfileV2(id), null, 2)));
+  up.command("touch-profile-v2 <id>").action((id) => console.log(JSON.stringify(touchUserProfileV2(id), null, 2)));
+  up.command("get-profile-v2 <id>").action((id) => console.log(JSON.stringify(getUserProfileV2(id), null, 2)));
+  up.command("list-profiles-v2").action(() => console.log(JSON.stringify(listUserProfilesV2(), null, 2)));
+  up.command("create-pref-v2 <id> <profileId>").option("--key <k>", "key").action((id, profileId, o) => console.log(JSON.stringify(createUserPrefV2({ id, profileId, key: o.key }), null, 2)));
+  up.command("apply-pref-v2 <id>").action((id) => console.log(JSON.stringify(applyUserPrefV2(id), null, 2)));
+  up.command("reject-pref-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(rejectUserPrefV2(id, reason), null, 2)));
+  up.command("supersede-pref-v2 <id>").action((id) => console.log(JSON.stringify(supersedeUserPrefV2(id), null, 2)));
+  up.command("cancel-pref-v2 <id> [reason]").action((id, reason) => console.log(JSON.stringify(cancelUserPrefV2(id, reason), null, 2)));
+  up.command("get-pref-v2 <id>").action((id) => console.log(JSON.stringify(getUserPrefV2(id), null, 2)));
+  up.command("list-prefs-v2").action(() => console.log(JSON.stringify(listUserPrefsV2(), null, 2)));
+  up.command("auto-dormant-idle-v2").action(() => console.log(JSON.stringify(autoDormantIdleUserProfilesV2(), null, 2)));
+  up.command("auto-cancel-stale-v2").action(() => console.log(JSON.stringify(autoCancelStaleUserPrefsV2(), null, 2)));
+  up.command("gov-stats-v2").action(() => console.log(JSON.stringify(getUserProfileGovStatsV2(), null, 2)));
+  up.command("reset-state-v2").action(() => { _resetStateUserProfileV2(); console.log(JSON.stringify({ ok: true }, null, 2)); });
+}