chainlesschain 0.81.0 → 0.143.0

package/src/lib/workflow-engine.js

@@ -954,3 +954,325 @@ export function importWorkflow(db, definition) {
     stages: definition.stages,
   });
 }
+
+// ===== V2 Surface (cli 0.130.0) — in-memory governance =====
+export const WORKFLOW_MATURITY_V2 = Object.freeze({
+  DRAFT: "draft",
+  ACTIVE: "active",
+  PAUSED: "paused",
+  RETIRED: "retired",
+});
+export const RUN_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued",
+  RUNNING: "running",
+  COMPLETED: "completed",
+  FAILED: "failed",
+  CANCELLED: "cancelled",
+});
+
+const _WM_V2 = WORKFLOW_MATURITY_V2;
+const _RL_V2 = RUN_LIFECYCLE_V2;
+const _WM_TRANS_V2 = new Map([
+  [_WM_V2.DRAFT, new Set([_WM_V2.ACTIVE, _WM_V2.RETIRED])],
+  [_WM_V2.ACTIVE, new Set([_WM_V2.PAUSED, _WM_V2.RETIRED])],
+  [_WM_V2.PAUSED, new Set([_WM_V2.ACTIVE, _WM_V2.RETIRED])],
+  [_WM_V2.RETIRED, new Set()],
+]);
+const _RL_TRANS_V2 = new Map([
+  [_RL_V2.QUEUED, new Set([_RL_V2.RUNNING, _RL_V2.CANCELLED])],
+  [
+    _RL_V2.RUNNING,
+    new Set([_RL_V2.COMPLETED, _RL_V2.FAILED, _RL_V2.CANCELLED]),
+  ],
+  [_RL_V2.COMPLETED, new Set()],
+  [_RL_V2.FAILED, new Set()],
+  [_RL_V2.CANCELLED, new Set()],
+]);
+const _RL_TERM_V2 = new Set([
+  _RL_V2.COMPLETED,
+  _RL_V2.FAILED,
+  _RL_V2.CANCELLED,
+]);
+
+const WF_DEFAULT_MAX_ACTIVE_WORKFLOWS_PER_OWNER = 12;
+const WF_DEFAULT_MAX_PENDING_RUNS_PER_WORKFLOW = 8;
+const WF_DEFAULT_WORKFLOW_IDLE_MS = 60 * 24 * 60 * 60 * 1000;
+const WF_DEFAULT_RUN_STUCK_MS = 10 * 60 * 1000;
+
+const _wfWorkflowsV2 = new Map();
+const _wfRunsV2 = new Map();
+let _wfConfigV2 = {
+  maxActiveWorkflowsPerOwner: WF_DEFAULT_MAX_ACTIVE_WORKFLOWS_PER_OWNER,
+  maxPendingRunsPerWorkflow: WF_DEFAULT_MAX_PENDING_RUNS_PER_WORKFLOW,
+  workflowIdleMs: WF_DEFAULT_WORKFLOW_IDLE_MS,
+  runStuckMs: WF_DEFAULT_RUN_STUCK_MS,
+};
+
+function _wfPosIntV2(n, label) {
+  if (typeof n !== "number" || !isFinite(n) || isNaN(n))
+    throw new Error(`${label} must be positive integer`);
+  const v = Math.floor(n);
+  if (v <= 0) throw new Error(`${label} must be positive integer`);
+  return v;
+}
+
+export function _resetStateWorkflowEngineV2() {
+  _wfWorkflowsV2.clear();
+  _wfRunsV2.clear();
+  _wfConfigV2 = {
+    maxActiveWorkflowsPerOwner: WF_DEFAULT_MAX_ACTIVE_WORKFLOWS_PER_OWNER,
+    maxPendingRunsPerWorkflow: WF_DEFAULT_MAX_PENDING_RUNS_PER_WORKFLOW,
+    workflowIdleMs: WF_DEFAULT_WORKFLOW_IDLE_MS,
+    runStuckMs: WF_DEFAULT_RUN_STUCK_MS,
+  };
+}
+
+export function setMaxActiveWorkflowsPerOwnerV2(n) {
+  _wfConfigV2.maxActiveWorkflowsPerOwner = _wfPosIntV2(
+    n,
+    "maxActiveWorkflowsPerOwner",
+  );
+}
+export function setMaxPendingRunsPerWorkflowV2(n) {
+  _wfConfigV2.maxPendingRunsPerWorkflow = _wfPosIntV2(
+    n,
+    "maxPendingRunsPerWorkflow",
+  );
+}
+export function setWorkflowIdleMsV2(n) {
+  _wfConfigV2.workflowIdleMs = _wfPosIntV2(n, "workflowIdleMs");
+}
+export function setRunStuckMsV2(n) {
+  _wfConfigV2.runStuckMs = _wfPosIntV2(n, "runStuckMs");
+}
+export function getMaxActiveWorkflowsPerOwnerV2() {
+  return _wfConfigV2.maxActiveWorkflowsPerOwner;
+}
+export function getMaxPendingRunsPerWorkflowV2() {
+  return _wfConfigV2.maxPendingRunsPerWorkflow;
+}
+export function getWorkflowIdleMsV2() {
+  return _wfConfigV2.workflowIdleMs;
+}
+export function getRunStuckMsV2() {
+  return _wfConfigV2.runStuckMs;
+}
+
+function _copyWorkflowV2(w) {
+  return { ...w, metadata: { ...(w.metadata || {}) } };
+}
+function _copyRunV2(r) {
+  return { ...r, metadata: { ...(r.metadata || {}) } };
+}
+
+export function registerWorkflowV2({ id, owner, name, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id required");
+  if (!owner || typeof owner !== "string") throw new Error("owner required");
+  if (_wfWorkflowsV2.has(id))
+    throw new Error(`workflow ${id} already registered`);
+  const now = Date.now();
+  const w = {
+    id,
+    owner,
+    name: name || id,
+    status: _WM_V2.DRAFT,
+    activatedAt: null,
+    retiredAt: null,
+    lastSeenAt: now,
+    createdAt: now,
+    metadata: metadata && typeof metadata === "object" ? { ...metadata } : {},
+  };
+  _wfWorkflowsV2.set(id, w);
+  return _copyWorkflowV2(w);
+}
+
+function _activeWorkflowCountForOwnerV2(owner) {
+  let c = 0;
+  for (const w of _wfWorkflowsV2.values())
+    if (w.owner === owner && w.status === _WM_V2.ACTIVE) c++;
+  return c;
+}
+
+function _transitionWorkflowV2(id, next) {
+  const w = _wfWorkflowsV2.get(id);
+  if (!w) throw new Error(`workflow ${id} not found`);
+  const allowed = _WM_TRANS_V2.get(w.status);
+  if (!allowed || !allowed.has(next))
+    throw new Error(`invalid transition ${w.status} -> ${next}`);
+  if (next === _WM_V2.ACTIVE && w.status === _WM_V2.DRAFT) {
+    if (
+      _activeWorkflowCountForOwnerV2(w.owner) >=
+      _wfConfigV2.maxActiveWorkflowsPerOwner
+    ) {
+      throw new Error(
+        `owner ${w.owner} active-workflow cap reached (${_wfConfigV2.maxActiveWorkflowsPerOwner})`,
+      );
+    }
+  }
+  const now = Date.now();
+  w.status = next;
+  if (next === _WM_V2.ACTIVE && !w.activatedAt) w.activatedAt = now;
+  if (next === _WM_V2.RETIRED && !w.retiredAt) w.retiredAt = now;
+  w.lastSeenAt = now;
+  return _copyWorkflowV2(w);
+}
+
+export function activateWorkflowV2(id) {
+  return _transitionWorkflowV2(id, _WM_V2.ACTIVE);
+}
+export function pauseWorkflowV2(id) {
+  return _transitionWorkflowV2(id, _WM_V2.PAUSED);
+}
+export function retireWorkflowV2(id) {
+  return _transitionWorkflowV2(id, _WM_V2.RETIRED);
+}
+export function touchWorkflowV2(id) {
+  const w = _wfWorkflowsV2.get(id);
+  if (!w) throw new Error(`workflow ${id} not found`);
+  w.lastSeenAt = Date.now();
+  return _copyWorkflowV2(w);
+}
+export function getWorkflowV2(id) {
+  const w = _wfWorkflowsV2.get(id);
+  return w ? _copyWorkflowV2(w) : null;
+}
+export function listWorkflowsV2({ owner, status } = {}) {
+  const out = [];
+  for (const w of _wfWorkflowsV2.values()) {
+    if (owner && w.owner !== owner) continue;
+    if (status && w.status !== status) continue;
+    out.push(_copyWorkflowV2(w));
+  }
+  return out;
+}
+
+function _pendingRunCountForWorkflowV2(workflowId) {
+  let c = 0;
+  for (const r of _wfRunsV2.values()) {
+    if (r.workflowId !== workflowId) continue;
+    if (r.status === _RL_V2.QUEUED || r.status === _RL_V2.RUNNING) c++;
+  }
+  return c;
+}
+
+export function createRunV2({ id, workflowId, trigger, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id required");
+  if (!workflowId || typeof workflowId !== "string")
+    throw new Error("workflowId required");
+  if (_wfRunsV2.has(id)) throw new Error(`run ${id} already exists`);
+  const wf = _wfWorkflowsV2.get(workflowId);
+  if (!wf) throw new Error(`workflow ${workflowId} not found`);
+  if (wf.status === _WM_V2.RETIRED)
+    throw new Error(`workflow ${workflowId} retired`);
+  if (
+    _pendingRunCountForWorkflowV2(workflowId) >=
+    _wfConfigV2.maxPendingRunsPerWorkflow
+  ) {
+    throw new Error(
+      `workflow ${workflowId} pending-run cap reached (${_wfConfigV2.maxPendingRunsPerWorkflow})`,
+    );
+  }
+  const now = Date.now();
+  const r = {
+    id,
+    workflowId,
+    trigger: trigger || "manual",
+    status: _RL_V2.QUEUED,
+    startedAt: null,
+    settledAt: null,
+    createdAt: now,
+    metadata: metadata && typeof metadata === "object" ? { ...metadata } : {},
+  };
+  _wfRunsV2.set(id, r);
+  return _copyRunV2(r);
+}
+
+function _transitionRunV2(id, next, extra = {}) {
+  const r = _wfRunsV2.get(id);
+  if (!r) throw new Error(`run ${id} not found`);
+  const allowed = _RL_TRANS_V2.get(r.status);
+  if (!allowed || !allowed.has(next))
+    throw new Error(`invalid transition ${r.status} -> ${next}`);
+  const now = Date.now();
+  r.status = next;
+  if (next === _RL_V2.RUNNING && !r.startedAt) r.startedAt = now;
+  if (_RL_TERM_V2.has(next) && !r.settledAt) r.settledAt = now;
+  if (extra.error) r.metadata.error = extra.error;
+  return _copyRunV2(r);
+}
+
+export function startRunV2(id) {
+  return _transitionRunV2(id, _RL_V2.RUNNING);
+}
+export function completeRunV2(id) {
+  return _transitionRunV2(id, _RL_V2.COMPLETED);
+}
+export function failRunV2(id, error) {
+  return _transitionRunV2(id, _RL_V2.FAILED, { error });
+}
+export function cancelRunV2(id) {
+  return _transitionRunV2(id, _RL_V2.CANCELLED);
+}
+
+export function getRunV2(id) {
+  const r = _wfRunsV2.get(id);
+  return r ? _copyRunV2(r) : null;
+}
+export function listRunsV2({ workflowId, status, trigger } = {}) {
+  const out = [];
+  for (const r of _wfRunsV2.values()) {
+    if (workflowId && r.workflowId !== workflowId) continue;
+    if (status && r.status !== status) continue;
+    if (trigger && r.trigger !== trigger) continue;
+    out.push(_copyRunV2(r));
+  }
+  return out;
+}
+
+export function autoPauseIdleWorkflowsV2({ now } = {}) {
+  const t = typeof now === "number" ? now : Date.now();
+  const flipped = [];
+  for (const w of _wfWorkflowsV2.values()) {
+    if (w.status !== _WM_V2.ACTIVE) continue;
+    if (t - w.lastSeenAt > _wfConfigV2.workflowIdleMs) {
+      w.status = _WM_V2.PAUSED;
+      w.lastSeenAt = t;
+      flipped.push(_copyWorkflowV2(w));
+    }
+  }
+  return flipped;
+}
+
+export function autoFailStuckRunsV2({ now } = {}) {
+  const t = typeof now === "number" ? now : Date.now();
+  const flipped = [];
+  for (const r of _wfRunsV2.values()) {
+    if (r.status !== _RL_V2.RUNNING) continue;
+    if (r.startedAt && t - r.startedAt > _wfConfigV2.runStuckMs) {
+      r.status = _RL_V2.FAILED;
+      r.settledAt = t;
+      r.metadata.error = "stuck-timeout";
+      flipped.push(_copyRunV2(r));
+    }
+  }
+  return flipped;
+}
+
+export function getWorkflowEngineStatsV2() {
+  const workflowsByStatus = {};
+  for (const s of Object.values(_WM_V2)) workflowsByStatus[s] = 0;
+  for (const w of _wfWorkflowsV2.values()) workflowsByStatus[w.status]++;
+  const runsByStatus = {};
+  for (const s of Object.values(_RL_V2)) runsByStatus[s] = 0;
+  for (const r of _wfRunsV2.values()) runsByStatus[r.status]++;
+  return {
+    totalWorkflowsV2: _wfWorkflowsV2.size,
+    totalRunsV2: _wfRunsV2.size,
+    maxActiveWorkflowsPerOwner: _wfConfigV2.maxActiveWorkflowsPerOwner,
+    maxPendingRunsPerWorkflow: _wfConfigV2.maxPendingRunsPerWorkflow,
+    workflowIdleMs: _wfConfigV2.workflowIdleMs,
+    runStuckMs: _wfConfigV2.runStuckMs,
+    workflowsByStatus,
+    runsByStatus,
+  };
+}

package/src/lib/zkp-engine.js

@@ -742,3 +742,108 @@ export function getZKPStatsV2() {
     credentialsByDid,
   };
 }
+
+
+// ===== V2 Surface: ZKP Engine governance overlay (CLI v0.136.0) =====
+export const ZKP_CIRCUIT_MATURITY_V2 = Object.freeze({
+  PENDING: "pending", ACTIVE: "active", DEPRECATED: "deprecated", ARCHIVED: "archived",
+});
+export const ZKP_PROOF_LIFECYCLE_V2 = Object.freeze({
+  QUEUED: "queued", PROVING: "proving", VERIFIED: "verified", FAILED: "failed", CANCELLED: "cancelled",
+});
+
+const _zkpCircTrans = new Map([
+  [ZKP_CIRCUIT_MATURITY_V2.PENDING, new Set([ZKP_CIRCUIT_MATURITY_V2.ACTIVE, ZKP_CIRCUIT_MATURITY_V2.ARCHIVED])],
+  [ZKP_CIRCUIT_MATURITY_V2.ACTIVE, new Set([ZKP_CIRCUIT_MATURITY_V2.DEPRECATED, ZKP_CIRCUIT_MATURITY_V2.ARCHIVED])],
+  [ZKP_CIRCUIT_MATURITY_V2.DEPRECATED, new Set([ZKP_CIRCUIT_MATURITY_V2.ACTIVE, ZKP_CIRCUIT_MATURITY_V2.ARCHIVED])],
+  [ZKP_CIRCUIT_MATURITY_V2.ARCHIVED, new Set()],
+]);
+const _zkpCircTerminal = new Set([ZKP_CIRCUIT_MATURITY_V2.ARCHIVED]);
+const _zkpProofTrans = new Map([
+  [ZKP_PROOF_LIFECYCLE_V2.QUEUED, new Set([ZKP_PROOF_LIFECYCLE_V2.PROVING, ZKP_PROOF_LIFECYCLE_V2.CANCELLED])],
+  [ZKP_PROOF_LIFECYCLE_V2.PROVING, new Set([ZKP_PROOF_LIFECYCLE_V2.VERIFIED, ZKP_PROOF_LIFECYCLE_V2.FAILED, ZKP_PROOF_LIFECYCLE_V2.CANCELLED])],
+  [ZKP_PROOF_LIFECYCLE_V2.VERIFIED, new Set()],
+  [ZKP_PROOF_LIFECYCLE_V2.FAILED, new Set()],
+  [ZKP_PROOF_LIFECYCLE_V2.CANCELLED, new Set()],
+]);
+
+const _zkpCircs = new Map();
+const _zkpProofs = new Map();
+let _zkpMaxActivePerOwner = 10;
+let _zkpMaxPendingPerCircuit = 15;
+let _zkpCircuitIdleMs = 30 * 24 * 60 * 60 * 1000;
+let _zkpProofStuckMs = 10 * 60 * 1000;
+
+function _zkpPos(n, lbl) { const v = Math.floor(Number(n)); if (!Number.isFinite(v) || v <= 0) throw new Error(`${lbl} must be positive integer`); return v; }
+
+export function setMaxActiveZkpCircuitsPerOwnerV2(n) { _zkpMaxActivePerOwner = _zkpPos(n, "maxActiveZkpCircuitsPerOwner"); }
+export function getMaxActiveZkpCircuitsPerOwnerV2() { return _zkpMaxActivePerOwner; }
+export function setMaxPendingZkpProofsPerCircuitV2(n) { _zkpMaxPendingPerCircuit = _zkpPos(n, "maxPendingZkpProofsPerCircuit"); }
+export function getMaxPendingZkpProofsPerCircuitV2() { return _zkpMaxPendingPerCircuit; }
+export function setZkpCircuitIdleMsV2(n) { _zkpCircuitIdleMs = _zkpPos(n, "zkpCircuitIdleMs"); }
+export function getZkpCircuitIdleMsV2() { return _zkpCircuitIdleMs; }
+export function setZkpProofStuckMsV2(n) { _zkpProofStuckMs = _zkpPos(n, "zkpProofStuckMs"); }
+export function getZkpProofStuckMsV2() { return _zkpProofStuckMs; }
+
+export function _resetStateZkpEngineV2() {
+  _zkpCircs.clear(); _zkpProofs.clear();
+  _zkpMaxActivePerOwner = 10; _zkpMaxPendingPerCircuit = 15;
+  _zkpCircuitIdleMs = 30 * 24 * 60 * 60 * 1000; _zkpProofStuckMs = 10 * 60 * 1000;
+}
+
+export function registerZkpCircuitV2({ id, owner, scheme, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!owner || typeof owner !== "string") throw new Error("owner is required");
+  if (_zkpCircs.has(id)) throw new Error(`zkp circuit ${id} already registered`);
+  const now = Date.now();
+  const c = { id, owner, scheme: scheme || "groth16", status: ZKP_CIRCUIT_MATURITY_V2.PENDING, createdAt: now, updatedAt: now, activatedAt: null, archivedAt: null, lastTouchedAt: now, metadata: { ...(metadata || {}) } };
+  _zkpCircs.set(id, c);
+  return { ...c, metadata: { ...c.metadata } };
+}
+function _zkpCheckC(from, to) { const a = _zkpCircTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid zkp circuit transition ${from} → ${to}`); }
+function _zkpCountActive(owner) { let n = 0; for (const c of _zkpCircs.values()) if (c.owner === owner && c.status === ZKP_CIRCUIT_MATURITY_V2.ACTIVE) n++; return n; }
+
+export function activateZkpCircuitV2(id) {
+  const c = _zkpCircs.get(id); if (!c) throw new Error(`zkp circuit ${id} not found`);
+  _zkpCheckC(c.status, ZKP_CIRCUIT_MATURITY_V2.ACTIVE);
+  const recovery = c.status === ZKP_CIRCUIT_MATURITY_V2.DEPRECATED;
+  if (!recovery) { const a = _zkpCountActive(c.owner); if (a >= _zkpMaxActivePerOwner) throw new Error(`max active zkp circuits per owner (${_zkpMaxActivePerOwner}) reached for ${c.owner}`); }
+  const now = Date.now(); c.status = ZKP_CIRCUIT_MATURITY_V2.ACTIVE; c.updatedAt = now; c.lastTouchedAt = now; if (!c.activatedAt) c.activatedAt = now;
+  return { ...c, metadata: { ...c.metadata } };
+}
+export function deprecateZkpCircuitV2(id) { const c = _zkpCircs.get(id); if (!c) throw new Error(`zkp circuit ${id} not found`); _zkpCheckC(c.status, ZKP_CIRCUIT_MATURITY_V2.DEPRECATED); c.status = ZKP_CIRCUIT_MATURITY_V2.DEPRECATED; c.updatedAt = Date.now(); return { ...c, metadata: { ...c.metadata } }; }
+export function archiveZkpCircuitV2(id) { const c = _zkpCircs.get(id); if (!c) throw new Error(`zkp circuit ${id} not found`); _zkpCheckC(c.status, ZKP_CIRCUIT_MATURITY_V2.ARCHIVED); const now = Date.now(); c.status = ZKP_CIRCUIT_MATURITY_V2.ARCHIVED; c.updatedAt = now; if (!c.archivedAt) c.archivedAt = now; return { ...c, metadata: { ...c.metadata } }; }
+export function touchZkpCircuitV2(id) { const c = _zkpCircs.get(id); if (!c) throw new Error(`zkp circuit ${id} not found`); if (_zkpCircTerminal.has(c.status)) throw new Error(`cannot touch terminal zkp circuit ${id}`); const now = Date.now(); c.lastTouchedAt = now; c.updatedAt = now; return { ...c, metadata: { ...c.metadata } }; }
+export function getZkpCircuitV2(id) { const c = _zkpCircs.get(id); if (!c) return null; return { ...c, metadata: { ...c.metadata } }; }
+export function listZkpCircuitsV2() { return [..._zkpCircs.values()].map((c) => ({ ...c, metadata: { ...c.metadata } })); }
+
+function _zkpCountPending(cid) { let n = 0; for (const p of _zkpProofs.values()) if (p.circuitId === cid && (p.status === ZKP_PROOF_LIFECYCLE_V2.QUEUED || p.status === ZKP_PROOF_LIFECYCLE_V2.PROVING)) n++; return n; }
+
+export function createZkpProofV2({ id, circuitId, inputs, metadata } = {}) {
+  if (!id || typeof id !== "string") throw new Error("id is required");
+  if (!circuitId || typeof circuitId !== "string") throw new Error("circuitId is required");
+  if (_zkpProofs.has(id)) throw new Error(`zkp proof ${id} already exists`);
+  if (!_zkpCircs.has(circuitId)) throw new Error(`zkp circuit ${circuitId} not found`);
+  const pending = _zkpCountPending(circuitId);
+  if (pending >= _zkpMaxPendingPerCircuit) throw new Error(`max pending zkp proofs per circuit (${_zkpMaxPendingPerCircuit}) reached for ${circuitId}`);
+  const now = Date.now();
+  const p = { id, circuitId, inputs: inputs || "", status: ZKP_PROOF_LIFECYCLE_V2.QUEUED, createdAt: now, updatedAt: now, startedAt: null, settledAt: null, metadata: { ...(metadata || {}) } };
+  _zkpProofs.set(id, p);
+  return { ...p, metadata: { ...p.metadata } };
+}
+function _zkpCheckP(from, to) { const a = _zkpProofTrans.get(from); if (!a || !a.has(to)) throw new Error(`invalid zkp proof transition ${from} → ${to}`); }
+export function startZkpProofV2(id) { const p = _zkpProofs.get(id); if (!p) throw new Error(`zkp proof ${id} not found`); _zkpCheckP(p.status, ZKP_PROOF_LIFECYCLE_V2.PROVING); const now = Date.now(); p.status = ZKP_PROOF_LIFECYCLE_V2.PROVING; p.updatedAt = now; if (!p.startedAt) p.startedAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function verifyZkpProofV2(id) { const p = _zkpProofs.get(id); if (!p) throw new Error(`zkp proof ${id} not found`); _zkpCheckP(p.status, ZKP_PROOF_LIFECYCLE_V2.VERIFIED); const now = Date.now(); p.status = ZKP_PROOF_LIFECYCLE_V2.VERIFIED; p.updatedAt = now; if (!p.settledAt) p.settledAt = now; return { ...p, metadata: { ...p.metadata } }; }
+export function failZkpProofV2(id, reason) { const p = _zkpProofs.get(id); if (!p) throw new Error(`zkp proof ${id} not found`); _zkpCheckP(p.status, ZKP_PROOF_LIFECYCLE_V2.FAILED); const now = Date.now(); p.status = ZKP_PROOF_LIFECYCLE_V2.FAILED; p.updatedAt = now; if (!p.settledAt) p.settledAt = now; if (reason) p.metadata.failReason = String(reason); return { ...p, metadata: { ...p.metadata } }; }
+export function cancelZkpProofV2(id, reason) { const p = _zkpProofs.get(id); if (!p) throw new Error(`zkp proof ${id} not found`); _zkpCheckP(p.status, ZKP_PROOF_LIFECYCLE_V2.CANCELLED); const now = Date.now(); p.status = ZKP_PROOF_LIFECYCLE_V2.CANCELLED; p.updatedAt = now; if (!p.settledAt) p.settledAt = now; if (reason) p.metadata.cancelReason = String(reason); return { ...p, metadata: { ...p.metadata } }; }
+export function getZkpProofV2(id) { const p = _zkpProofs.get(id); if (!p) return null; return { ...p, metadata: { ...p.metadata } }; }
+export function listZkpProofsV2() { return [..._zkpProofs.values()].map((p) => ({ ...p, metadata: { ...p.metadata } })); }
+
+export function autoDeprecateIdleZkpCircuitsV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const c of _zkpCircs.values()) if (c.status === ZKP_CIRCUIT_MATURITY_V2.ACTIVE && (t - c.lastTouchedAt) >= _zkpCircuitIdleMs) { c.status = ZKP_CIRCUIT_MATURITY_V2.DEPRECATED; c.updatedAt = t; flipped.push(c.id); } return { flipped, count: flipped.length }; }
+export function autoFailStuckZkpProofsV2({ now } = {}) { const t = now ?? Date.now(); const flipped = []; for (const p of _zkpProofs.values()) if (p.status === ZKP_PROOF_LIFECYCLE_V2.PROVING && p.startedAt != null && (t - p.startedAt) >= _zkpProofStuckMs) { p.status = ZKP_PROOF_LIFECYCLE_V2.FAILED; p.updatedAt = t; if (!p.settledAt) p.settledAt = t; p.metadata.failReason = "auto-fail-stuck"; flipped.push(p.id); } return { flipped, count: flipped.length }; }
+
+export function getZkpEngineGovStatsV2() {
+  const circuitsByStatus = {}; for (const s of Object.values(ZKP_CIRCUIT_MATURITY_V2)) circuitsByStatus[s] = 0; for (const c of _zkpCircs.values()) circuitsByStatus[c.status]++;
+  const proofsByStatus = {}; for (const s of Object.values(ZKP_PROOF_LIFECYCLE_V2)) proofsByStatus[s] = 0; for (const p of _zkpProofs.values()) proofsByStatus[p.status]++;
+  return { totalCircuitsV2: _zkpCircs.size, totalProofsV2: _zkpProofs.size, maxActiveZkpCircuitsPerOwner: _zkpMaxActivePerOwner, maxPendingZkpProofsPerCircuit: _zkpMaxPendingPerCircuit, zkpCircuitIdleMs: _zkpCircuitIdleMs, zkpProofStuckMs: _zkpProofStuckMs, circuitsByStatus, proofsByStatus };
+}