@things-factory/ai-assistant 10.1.39 → 10.1.42

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@things-factory/ai-assistant",
-  "version": "10.1.39",
+  "version": "10.1.42",
   "main": "dist-server/index.js",
   "things-factory": true,
   "author": "heartyoh",
@@ -30,9 +30,9 @@
     "@operato/i18n": "^10.0.0",
     "@operato/styles": "^10.0.0",
     "@things-factory/ai-client-base": "^10.1.39",
-    "@things-factory/auth-base": "^10.1.39",
+    "@things-factory/auth-base": "^10.1.40",
     "@things-factory/env": "^10.1.20",
-    "@things-factory/shell": "^10.1.39",
+    "@things-factory/shell": "^10.1.40",
     "dompurify": "^3.0.0",
     "graphql-scalars": "^1.22.0",
     "graphql-tag": "^2.12.6",
@@ -44,5 +44,5 @@
     "copyfiles": "^2.4.1",
     "rimraf": "^5.0.0"
   },
-  "gitHead": "fe5257ad8995fe7e79275e287f36e95b5fd32d1c"
+  "gitHead": "982aa01403b979c4e348fd207a3fb4d1a7b5f521"
 }

package/server/service/assistant-capability-resolver.ts

@@ -52,7 +52,7 @@ export class AssistantCapabilityResolver {
   @Query(() => AiCapabilityView, {
     description: 'Whether this deployment has an AI configured, and which registrations are incomplete. Read this before offering to ask the assistant — do not find out by failing.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async aiCapability(@Ctx() _context: any): Promise<AiCapabilityView> {
     const capability = aiCapability()
     const warnings = [...getToolRegistryWarnings(), ...getAssistantModeWarnings()].map(warning => ({

package/server/service/assistant-chat-resolver.ts

@@ -200,7 +200,7 @@ export class AssistantChatResolver {
    * 2026-09-10. No `legacy` alias: this operation is new, so no one was ever passing under an old
    * name, and declaring an alias would open a second name that nothing needs.
    */
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async assistantChat(@Arg('input') input: AssistantChatInput, @Ctx() context: any): Promise<AssistantChatOutput> {
     const client = resolveAIClient()
     if (!client) {

package/server/service/assistant-mode/assistant-mode-resolver.ts

@@ -83,7 +83,7 @@ export class AssistantModeResolver {
     description:
       'Conversations that stand for this kind of subject, the default first. A screen showing one subject opens the head of this list and offers the rest; a single entry means there is nothing to choose.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async assistantModes(@Arg('subject') subject: string, @Ctx() context: any): Promise<AssistantModeChoice[]> {
     const t = requestTranslator(context)
 
@@ -101,7 +101,7 @@ export class AssistantModeResolver {
     description: 'What this conversation offers on screen — `/` sentences, the `@` catalog and the notices, translated.'
   })
   /* Reading what a conversation offers is reading, and the same door the session list uses. */
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async assistantMode(@Arg('kind') kind: string, @Ctx() context: any): Promise<AssistantModeView> {
     return assistantModeView(kind, requestTranslator(context)) as AssistantModeView
   }

package/server/service/chat-session/chat-session.ts

@@ -80,7 +80,7 @@ export class ChatSession {
   @Field({
     nullable: true,
     description:
-      "What this conversation is anchored to: 'board' | 'figure' (authoring a Figure) | 'space' | 'instance' | 'domain' | 'none'. Absent on legacy rows — treated as 'board' when boardId is present."
+      "What this conversation is anchored to: 'board' | 'figure' (authoring a Figure) | 'application' | 'space' | 'instance' | 'domain' | 'subject' (one subject in a 360, '<axis>:<itemId>') | 'none'. Absent on legacy rows — treated as 'board' when boardId is present."
   })
   anchorType?: string
 

package/server/service/chat-session/session-anchor.ts

@@ -50,11 +50,15 @@
  *   space     공간 운영 대화 — 사이트와 그 공간에서 도는 트윈들
  *   instance  트윈 하나에 대한 대화
  *   domain    테넌트 전체가 주제인 대화 — 공장 전체 문답처럼 더 좁게 가리킬 것이 없을 때
+ *   subject   one subject in a 360 — `<axis>:<itemId>`: the 360 frame's axis word (ADR-0067, the shared
+ *             frame; no new words are made here) and that row's uuid. Anchoring to `domain` instead
+ *             would put every subject's conversations in one bucket and lose the per-subject list and
+ *             history boundary (ruled 2026-09-24).
  *   none      앵커로 찾을 수 없는 대화. 「아직 아무것도 고르지 않았다」는 화면 상태다
  */
 // Figure-specific history requested explicitly: reuse the existing varchar
 // anchor columns, without writing Figure ids into the legacy boardId column.
-export const SESSION_ANCHOR_TYPES = ['board', 'figure', 'application', 'space', 'instance', 'domain', 'none'] as const
+export const SESSION_ANCHOR_TYPES = ['board', 'figure', 'application', 'space', 'instance', 'domain', 'subject', 'none'] as const
 
 export type SessionAnchorType = (typeof SESSION_ANCHOR_TYPES)[number]
 
@@ -76,6 +80,25 @@ function assertAnchorType(anchorType: string | undefined, where: string): Sessio
   return type
 }
 
+/**
+ * A `subject` anchor id is `<axis>:<itemId>`, the item being that row's uuid (ruled 2026-09-24).
+ *
+ * Checked because the shape is the whole contract: a screen that passes what it shows — an EPC like
+ * `urn:epc:id:sgtin:…`, or an order's name — would store a pointer to nothing stable. A name changes
+ * and the conversation is orphaned; an EPC splits on its own colons. Refused here, on write and on
+ * read, rather than stored and never found.
+ */
+const SUBJECT_ANCHOR_ID = /^[a-z][a-z0-9-]*:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i
+
+function assertSubjectAnchorId(type: SessionAnchorType, id: string | undefined, where: string): void {
+  if (type !== 'subject' || !id || SUBJECT_ANCHOR_ID.test(id)) return
+  throw new Error(
+    `[ai-assistant/session-anchor] ${where}: '${id}' is not a subject anchor. ` +
+      "A subject anchor is '<axis>:<itemId>' — the 360 frame's axis word and the row's uuid, " +
+      "for example 'items:6f1c…'. Resolve what the screen shows (an EPC, a name) to the row's uuid first."
+  )
+}
+
 /** 앵커 → 저장할 컬럼 값. 보드 앵커는 boardId 에도 같은 값을 넣어 기존 조회가 그대로 동작하게 한다. */
 export function anchorColumns(
   anchorType: string | undefined,
@@ -91,6 +114,7 @@ export function anchorColumns(
         "Use 'none' for a conversation that is deliberately not addressable by anchor."
     )
   }
+  assertSubjectAnchorId(type, id, 'anchorColumns')
   return { anchorType: type, anchorId: id, boardId: type === 'board' ? id : undefined }
 }
 
@@ -112,6 +136,7 @@ export function anchorColumns(
  */
 export function anchorWhere(domainId: string, anchorType: string, anchorId: string, kind?: string): any {
   const type = assertAnchorType(anchorType, 'anchorWhere')
+  assertSubjectAnchorId(type, anchorId, 'anchorWhere')
   const where = type === 'board' ? { boardId: anchorId, domain: { id: domainId } } : { anchorType: type, anchorId, domain: { id: domainId } }
   return kind ? { ...where, kind } : where
 }

package/server/service/chat-session/session-visibility.test.ts

@@ -50,3 +50,50 @@ describe("'none' is not an anchor", () => {
     expect(initialVisibility({ anchorType: 'space' })).toBe('open')
   })
 })
+
+/*
+ * Calling a door is not reading a conversation (ruled 2026-09-24).
+ *
+ * Every ai-assistant door now admits the domain owner (`test/open-doors.test.ts`), so the owner may
+ * open the dock anywhere in the domain. That says who may *call* — not whose private conversation they
+ * may read. The room rule is asked with two things only, the visibility and whether the caller sits in
+ * the room, and neither place that reads a room asks anything about ownership. If one ever did, a domain
+ * owner would read every private conversation in the domain, and nothing on the screen would say so.
+ */
+describe('the domain owner still reads a private conversation only as a participant', () => {
+  const { readFileSync } = require('fs')
+  const { join } = require('path')
+  const source = (path: string) => readFileSync(join(__dirname, '..', path), 'utf8') as string
+
+  /** The body of `chatMessages` — the stored path. The stream's path is the room lookup and `mayHearRoom`. */
+  const storedPath = () => {
+    const resolver = source('chat-session-resolver.ts')
+    const start = resolver.indexOf('async chatMessages(')
+    expect(start).toBeGreaterThan(0)
+    const end = resolver.indexOf('\n  @', start)
+    return resolver.slice(start, end > start ? end : undefined)
+  }
+  const streamPath = () => {
+    const broadcast = source('chat-message/chat-message-broadcast.ts')
+    return source('chat-message/chat-message-room.ts') + broadcast.slice(broadcast.indexOf('export interface ChatRoomLookup'))
+  }
+
+  const OWNERSHIP = /owner|superUser|checkPermission|hasPrivilege|privilege/i
+
+  it('★ the rule has no input for ownership — visibility and participation, nothing else', () => {
+    expect(mayReadSession.length).toBe(2)
+    expect(mayReadSession('private', false)).toBe(false)
+  })
+
+  it('★ the stored path asks the rule, and asks nothing about ownership', () => {
+    const body = storedPath()
+    expect(body).toMatch(/mayReadSession\(/)
+    expect(body).not.toMatch(OWNERSHIP)
+  })
+
+  it('★ the stream asks the same rule, and asks nothing about ownership', () => {
+    const body = streamPath()
+    expect(body).toMatch(/mayReadSession\(/)
+    expect(body).not.toMatch(OWNERSHIP)
+  })
+})

package/server/service/chat-session-resolver.ts

@@ -100,7 +100,7 @@ class ChatSessionInboxEntry {
 @Resolver()
 export class ChatSessionResolver {
   @Query(() => ChatSession, { nullable: true, description: 'Get AI chat session by id.' })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatSession(
     @Arg('id') id: string,
     @Ctx() context: ResolverContext
@@ -113,7 +113,7 @@ export class ChatSessionResolver {
     description:
       'List AI chat sessions anchored to a target (oldest first). Anchor decides the nature and the history boundary of the conversation: board = authoring, space = the site and the twins running there. Board anchor also matches legacy rows that only have boardId.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatSessionsByAnchor(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -135,7 +135,7 @@ export class ChatSessionResolver {
     description:
       "List sessions anchored to a target with this viewer's unread state, most recent activity first. Supports free-text search over name and last preview, a mine-only filter, hidden inclusion, and paging. Uses the denormalized last-activity timestamp compared against the viewer's read point — no per-session aggregation."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatSessionInbox(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -164,7 +164,7 @@ export class ChatSessionResolver {
     description:
       'Total number of sessions matching the same filters as chatSessionInbox (before paging). Request it alongside the list so the UI can tell "end of page" from "end of data".'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatSessionInboxTotal(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -199,7 +199,7 @@ export class ChatSessionResolver {
     description:
       "Number of sessions on this anchor that the caller has hidden and that have had no activity since. Meant to be requested alongside chatSessionInbox in the same operation so the filter can say how many are folded away."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async hiddenSessionCount(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -270,7 +270,7 @@ export class ChatSessionResolver {
     description:
       'Delete a chat session — creator only, since a shared deliberation cannot be un-deleted from the UI. Participants who are not the creator can hide it from their own list instead (hideAISession). Soft delete; broadcast as meta activity so every list drops it.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async deleteAISession(@Arg('sessionId') sessionId: string, @Ctx() context: ResolverContext): Promise<boolean> {
     const { domain, user } = context.state
     const repo = getRepository(ChatSession)
@@ -302,7 +302,7 @@ export class ChatSessionResolver {
     description:
       'Hide (or unhide) a session from the calling user\'s own list. Per-user and reversible — the session and other participants are unaffected. Activity newer than the hide makes it reappear; the inbox filter (showHidden) reveals hidden ones.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async hideAISession(
     @Arg('sessionId') sessionId: string,
     @Ctx() context: ResolverContext,
@@ -357,7 +357,7 @@ export class ChatSessionResolver {
     description:
       "Open this conversation to everyone in the domain, or close it to its participants. Only the owner may change it. Opening exposes what is already written — the screen says so before asking. Door checks on assistant answers are unaffected (ADR-0073)."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async setSessionVisibility(
     @Arg('sessionId') sessionId: string,
     @Arg('visibility') visibility: string,
@@ -394,7 +394,7 @@ export class ChatSessionResolver {
     description:
       'Rename a chat session. Any participant may rename it — the name is the topic label of a shared deliberation and the change is reversible. Broadcast as meta activity so every participant sees it without raising unread badges.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async renameAISession(
     @Arg('sessionId') sessionId: string,
     @Arg('name') name: string,
@@ -429,7 +429,7 @@ export class ChatSessionResolver {
     description:
       "Mark a session as read up to now for the current user. Idempotent. Distinct from presence (lastSeenAt) — a window can be open without being read."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async markSessionRead(
     @Arg('sessionId') sessionId: string,
     @Ctx() context: ResolverContext
@@ -449,7 +449,7 @@ export class ChatSessionResolver {
     description:
       'List users in the current domain for the `@` mention popup. Anyone with the chat privilege may search here; this is separate from the admin-only users().'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async domainUsersForMention(
     @Arg('query', { nullable: true, description: 'Substring to match against name/email (case-insensitive). Empty → all.' }) query: string | undefined,
     @Arg('limit', () => Int, { nullable: true, defaultValue: 50 }) limit: number,
@@ -468,7 +468,7 @@ export class ChatSessionResolver {
   @Query(() => [ChatSessionParticipant], {
     description: 'List participants of a ChatSession (members / owner).'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatSessionParticipants(
     @Arg('sessionId') sessionId: string,
     @Ctx() context: ResolverContext
@@ -488,7 +488,7 @@ export class ChatSessionResolver {
   @Mutation(() => Boolean, {
     description: 'Presence heartbeat — bump current user\'s lastSeenAt in the session (online indicator).'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async touchPresence(@Arg('sessionId') sessionId: string, @Ctx() context: ResolverContext): Promise<boolean> {
     const { domain, user } = context.state
     const repo = getRepository(ChatSessionParticipant)
@@ -501,7 +501,7 @@ export class ChatSessionResolver {
   }
 
   @Query(() => [ChatMessage], { description: 'List chat messages of a session, oldest first.' })
-  @Directive('@privilege(category: "ai-assistant", privilege: "query")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "query", domainOwnerGranted: true)')
   async chatMessages(
     @Arg('sessionId') sessionId: string,
     @Arg('limit', () => Int, { nullable: true, defaultValue: 100 }) limit: number,
@@ -547,7 +547,7 @@ export class ChatSessionResolver {
     description:
       'Start (or get existing) AI chat session anchored to a target. Idempotent — returns first existing or creates one. Use anchorType board for board authoring, space for a site (its co-located twins).'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async startAISession(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -584,7 +584,7 @@ export class ChatSessionResolver {
     description:
       'Always create a new AI chat session anchored to a target (no idempotent reuse). For multi-session UX — opening another tab.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async createAISession(
     @Arg('anchorType') anchorType: string,
     @Arg('anchorId') anchorId: string,
@@ -626,7 +626,7 @@ export class ChatSessionResolver {
   @Mutation(() => Boolean, {
     description: 'Rename a ChatSession (tab label).'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async renameChatSession(
     @Arg('sessionId') sessionId: string,
     @Arg('name') name: string,
@@ -645,7 +645,7 @@ export class ChatSessionResolver {
     description:
       "What the host did with a proposal the assistant made. The host calls this once per card it was asked to run; the server records it as a system row, so the panel shows it, a refreshed panel still shows it, and the model reads on its next turn that its proposal was refused instead of assuming it landed (ADR-0070)."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async reportProposalOutcome(
     @Arg('sessionId') sessionId: string,
     @Arg('proposalKey') proposalKey: string,
@@ -695,7 +695,7 @@ export class ChatSessionResolver {
     description:
       "Say something to the people in this session. The turn is stored as the speaker's, addressed to the room, and the assistant is not called — it reads the line as context the next time someone asks it something. Returns the stored message id, or null when there was nothing to say (ADR-0070)."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async sayToRoom(
     @Arg('sessionId') sessionId: string,
     @Arg('content') content: string,
@@ -763,7 +763,7 @@ export class ChatSessionResolver {
     description:
       'Append a system note to a session — context that did not come from a participant typing (e.g. a conversation carried over from another surface, an external state change). The AI sees it as part of the shared history.'
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async appendSessionNote(
     @Arg('sessionId') sessionId: string,
     @Arg('content') content: string,
@@ -813,7 +813,7 @@ export class ChatSessionResolver {
     description:
       "Carry a conversation from another surface into this session as its own turns, preserving order. A person's turns are stored as theirs, addressed to the room. An assistant turn is stored as the assistant's only when it names its original (sourceSessionId, sourceMessageId) and the server can read it; otherwise it is kept as a quotation on a system row — roles are the server's to write (ADR-0070)."
   })
-  @Directive('@privilege(category: "ai-assistant", privilege: "mutation")')
+  @Directive('@privilege(category: "ai-assistant", privilege: "mutation", domainOwnerGranted: true)')
   async appendSessionTurns(
     @Arg('sessionId') sessionId: string,
     @Arg('turns', () => GraphQLJSON) turns: { role?: string; content?: string }[],

package/server/service/session-anchor.test.ts

@@ -12,6 +12,9 @@
  *  ③ 공간·인스턴스 앵커는 boardId 를 오염시키지 않는다(보드 조회에 섞이면 이력 경계가 무너진다).
  */
 import { anchorColumns, anchorWhere, isSessionAnchorType, SESSION_ANCHOR_TYPES } from './chat-session/session-anchor'
+import { initialVisibility } from './chat-session/session-visibility'
+
+const SUBJECT_ID = 'items:6f1c2a90-3b4d-4e5f-8a6b-7c8d9e0f1a2b'
 
 describe('앵커 저장 값 (anchorColumns)', () => {
   it('board 앵커는 anchorId 와 boardId 에 같은 값을 쓴다 — 기존 조회 하위호환', () => {
@@ -134,7 +137,9 @@ describe('앵커 조회 조건 (anchorWhere)', () => {
 
   it('모든 조회에 domain 조건이 포함된다 — 빠지면 남의 테넌트 대화가 보인다', () => {
     for (const type of SESSION_ANCHOR_TYPES) {
-      expect(anchorWhere('dom-9', type, 'X').domain).toEqual({ id: 'dom-9' })
+      /* A subject anchor has a shape of its own (below); every other type takes any id. */
+      const id = type === 'subject' ? SUBJECT_ID : 'X'
+      expect(anchorWhere('dom-9', type, id).domain).toEqual({ id: 'dom-9' })
     }
   })
 
@@ -142,3 +147,52 @@ describe('앵커 조회 조건 (anchorWhere)', () => {
     expect(anchorWhere('dom-1', 'space', 'busan').boardId).toBeUndefined()
   })
 })
+
+/*
+ * The subject anchor — one subject in a 360 (ruled 2026-09-24).
+ *
+ * `<axis>:<itemId>`: the 360 frame's axis word and that row's uuid. Tested on both sides the ruling
+ * split: without an id it throws, and with one it is stored as given and finds its own list again.
+ */
+describe('the subject anchor', () => {
+  it('★ without an id it throws — a pointer to nothing would never be found again', () => {
+    expect(() => anchorColumns('subject', '')).toThrow(/was given no id/)
+    expect(() => anchorColumns('subject', undefined)).toThrow(/was given no id/)
+  })
+
+  it('★ `<axis>:<itemId>` is stored as given, and the lookup for that subject finds it', () => {
+    const stored = anchorColumns('subject', SUBJECT_ID)
+    expect(stored).toEqual({ anchorType: 'subject', anchorId: SUBJECT_ID, boardId: undefined })
+
+    const where = anchorWhere('dom-1', 'subject', SUBJECT_ID)
+    expect(where).toEqual({ anchorType: stored.anchorType, anchorId: stored.anchorId, domain: { id: 'dom-1' } })
+  })
+
+  it("another subject, another axis or another domain is another list", () => {
+    const other = 'items:0a1b2c3d-4e5f-4a6b-8c7d-9e0f1a2b3c4d'
+    const sameRowOtherAxis = SUBJECT_ID.replace('items:', 'locations:')
+
+    expect(anchorWhere('dom-1', 'subject', other)).not.toEqual(anchorWhere('dom-1', 'subject', SUBJECT_ID))
+    expect(anchorWhere('dom-1', 'subject', sameRowOtherAxis)).not.toEqual(anchorWhere('dom-1', 'subject', SUBJECT_ID))
+    expect(anchorWhere('dom-2', 'subject', SUBJECT_ID)).not.toEqual(anchorWhere('dom-1', 'subject', SUBJECT_ID))
+  })
+
+  it.each([
+    ['an EPC, as the screen shows a pallet', 'items:urn:epc:id:sgtin:0614141.107346.2017'],
+    ['a name, as the screen shows an order', 'orders:SO-A887417'],
+    ['a uuid with no axis', '6f1c2a90-3b4d-4e5f-8a6b-7c8d9e0f1a2b'],
+    ['an axis with no item', 'items:']
+  ])('★ refuses %s — on write and on read', (_what, id) => {
+    expect(() => anchorColumns('subject', id)).toThrow(/is not a subject anchor/)
+    expect(() => anchorWhere('dom-1', 'subject', id)).toThrow(/is not a subject anchor/)
+  })
+
+  it('the shape rule is the subject anchor\'s alone — other anchors keep taking the ids they take', () => {
+    expect(anchorColumns('space', 'busan').anchorId).toBe('busan')
+    expect(anchorColumns('application', 'operato-figure').anchorId).toBe('operato-figure')
+  })
+
+  it('★ a subject conversation is born open — an anchored conversation is about a shared thing (ADR-0073 decision 2)', () => {
+    expect(initialVisibility({ anchorType: 'subject' })).toBe('open')
+  })
+})

package/test/assistant-request-context.test.ts

@@ -1,7 +1,7 @@
 import assert from 'node:assert/strict'
 import { readFileSync } from 'node:fs'
 import { join } from 'node:path'
-import { assistantAutoAskKey, assistantModelFingerprint, assistantRecentSessions } from '../client/utils/assistant-request-context.ts'
+import { assistantAutoAskKey, assistantDraftDecision, assistantModelFingerprint, assistantRecentSessions } from '../client/utils/assistant-request-context.ts'
 
 test('model signature ignores object key order but detects nested edits and array order', () => {
   assert.equal(assistantModelFingerprint({ b: 2, a: { y: 3, x: 1 } }), assistantModelFingerprint({ a: { x: 1, y: 3 }, b: 2 }))
@@ -28,3 +28,43 @@ test('send captures current context before optimistic input and attaches request
   assert.match(send, /detail: \{ actions: out.actions, sessionId: out.sessionId, requestBase \}/)
   assert.match(send, /requestContext\.hostContext/)
 })
+
+/*
+ * The draft — a sentence placed in the input for the person to edit and send (twin's "new twin → AI").
+ */
+test('★ a draft fills an empty input once per request, and a re-render does not fill it again', () => {
+  const first = assistantDraftDecision({ draft: 'make a twin of line 3', draftRequestId: 'r1', typed: '' })
+  assert.deepEqual(first, { fill: true, consumed: assistantAutoAskKey('make a twin of line 3', 'r1') })
+
+  const again = assistantDraftDecision({ draft: 'make a twin of line 3', draftRequestId: 'r1', drafted: first.consumed, typed: '' })
+  assert.equal(again.fill, false)
+
+  const next = assistantDraftDecision({ draft: 'make a twin of line 3', draftRequestId: 'r2', drafted: first.consumed, typed: '' })
+  assert.equal(next.fill, true, 'the same sentence under a new request is a new draft')
+})
+
+test('★ a draft never overwrites what the person is typing — and does not surface later', () => {
+  const out = assistantDraftDecision({ draft: 'make a twin', draftRequestId: 'r1', typed: 'how many forklifts' })
+  assert.equal(out.fill, false)
+  assert.ok(out.consumed, 'skipped, and remembered as consumed')
+})
+
+test('★ when autoAsk comes for the same request, autoAsk wins', () => {
+  const out = assistantDraftDecision({ draft: 'edit me', draftRequestId: 'r1', typed: '', autoAsk: 'send me', autoAskRequestId: 'r1' })
+  assert.equal(out.fill, false)
+
+  const otherRequest = assistantDraftDecision({ draft: 'edit me', draftRequestId: 'r2', typed: '', autoAsk: 'send me', autoAskRequestId: 'r1' })
+  assert.equal(otherRequest.fill, true)
+})
+
+test('no draft, nothing to do', () => {
+  assert.deepEqual(assistantDraftDecision({ typed: '' }), { fill: false })
+})
+
+test('the component places the draft and never sends it', () => {
+  const chat = readFileSync(join(__dirname, '../client/components/assistant-chat.ts'), 'utf8')
+  const updated = chat.slice(chat.indexOf('  updated(changed'), chat.indexOf('if (changed.has(\'subject\'))'))
+  const draftPart = updated.slice(updated.indexOf('assistantDraftDecision('))
+  assert.match(draftPart, /this\.input = this\.draft!/)
+  assert.doesNotMatch(draftPart, /this\.send\(\)/)
+})

package/test/open-doors.test.ts

@@ -108,6 +108,22 @@ describe('every open door has a written reason', () => {
   })
 })
 
+describe('the domain owner may call every door (ruled 2026-09-24)', () => {
+  /*
+   * The conversation doors did not admit domain owners, and warehouse has no role that grants
+   * ai-assistant — so on :3500 nobody could open the AI dock, the owner included. Every business door
+   * of the apps admits the owner; these now do too. Calling a door is not reading a conversation:
+   * private ones stay with their participants (`session-visibility.test.ts`).
+   */
+  it.each(['Query', 'Mutation'] as const)('%s — every declared door admits the owner', typeName => {
+    const notForOwners = fieldsOf(typeName).filter(field => {
+      const gate: any = privilegeOfField(typeName, field)
+      return gate.known && gate.gate && gate.gate.owner !== true
+    })
+    expect(notForOwners).toEqual([])
+  })
+})
+
 describe('what the walk itself has to be true for', () => {
   it('reaches the whole schema, not a handful of fields', () => {
     /* If the resolver list shrank to nothing, the lists above would pass by having nothing to look at. */