@things-factory/headless-twin 10.1.40 → 10.1.44

package/dist-server/engine/producer-guard.d.ts

@@ -0,0 +1,13 @@
+export declare const INSTANCE_TAKEN = "instance-taken-by-another-source";
+export interface ProducerRefusal {
+    code: typeof INSTANCE_TAKEN;
+    params: {
+        instance: string;
+        producer: string;
+    };
+    message: string;
+}
+/** Who produced a twin, as one comparable string — or undefined when the origin says nothing usable. */
+export declare function producerOf(origin: unknown): string | undefined;
+/** null when `incoming` may rebuild the twin `prior` was made by; otherwise the refusal. */
+export declare function refuseOverwriteByAnotherProducer(instance: string, priorOrigin: unknown, incomingOrigin: unknown): ProducerRefusal | null;

package/dist-server/engine/producer-guard.js

@@ -0,0 +1,62 @@
+"use strict";
+/*
+ * **A twin made by one producer is not rebuilt by another.** Pure.
+ *
+ * ── What went wrong (2026-09-24) ─────────────────────────────────────────────
+ * An import's instance id is the adapter's site id (`master.source`). Importing the warehouse connection
+ * `wms-miratek` with site id `miratek` — the same as the plant connection's — landed on the running plant
+ * mirror `miratek`, and `ingestMaster` gave it the warehouse structure as a new revision: 16 places,
+ * 23 equipment, 17 people and 14 assets gone. The row already said who made it (`origin.source` was
+ * `mes-miratek`); nothing asked.
+ *
+ * ── The rule (chief architect ruling, 2026-09-24) ────────────────────────────
+ * Compare producers by identity, not by the whole origin: a reference is kind + source, a template is
+ * kind + templateId. The same import carries more or fewer fields at different call sites (siteId,
+ * spaceId), and a template re-run has new params — those are the same producer re-reading its own twin.
+ *
+ *   both declared, same producer     allowed (resync, re-import, re-run)
+ *   both declared, different         refused, naming the producer that owns it
+ *   prior undeclared, incoming not   refused — nobody can say who made it; delete it first to replace it
+ *   prior declared, incoming not     refused — same reason, the other way
+ *   neither declared                 allowed — the demo seed re-ingesting its own twin at boot. Closes when
+ *                                    the seed declares a template origin.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.INSTANCE_TAKEN = void 0;
+exports.producerOf = producerOf;
+exports.refuseOverwriteByAnotherProducer = refuseOverwriteByAnotherProducer;
+exports.INSTANCE_TAKEN = 'instance-taken-by-another-source';
+/** Who produced a twin, as one comparable string — or undefined when the origin says nothing usable. */
+function producerOf(origin) {
+    if (!origin || typeof origin !== 'object')
+        return undefined;
+    const o = origin;
+    if (o.kind === 'reference' && typeof o.source === 'string' && o.source)
+        return `reference:${o.source}`;
+    if (o.kind === 'template' && typeof o.templateId === 'string' && o.templateId)
+        return `template:${o.templateId}`;
+    /* A kind this guard does not know is still somebody — keep it distinct rather than reading it as none. */
+    if (typeof o.kind === 'string' && o.kind)
+        return `${o.kind}:${String(o.source ?? o.templateId ?? '')}`;
+    return undefined;
+}
+function nameOf(origin) {
+    const o = (origin ?? {});
+    return String(o.source ?? o.templateId ?? '') || 'undeclared';
+}
+/** null when `incoming` may rebuild the twin `prior` was made by; otherwise the refusal. */
+function refuseOverwriteByAnotherProducer(instance, priorOrigin, incomingOrigin) {
+    const had = producerOf(priorOrigin);
+    const comes = producerOf(incomingOrigin);
+    if (!had && !comes)
+        return null;
+    if (had && comes && had === comes)
+        return null;
+    const producer = had ? nameOf(priorOrigin) : 'undeclared';
+    return {
+        code: exports.INSTANCE_TAKEN,
+        params: { instance, producer },
+        message: `twin "${instance}" was made by ${producer} — delete it first, or import this site under another id`
+    };
+}
+//# sourceMappingURL=producer-guard.js.map

package/dist-server/engine/producer-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer-guard.js","sourceRoot":"","sources":["../../server/engine/producer-guard.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;;;AAWH,gCAQC;AAQD,4EAeC;AAxCY,QAAA,cAAc,GAAG,kCAAkC,CAAA;AAQhE,wGAAwG;AACxG,SAAgB,UAAU,CAAC,MAAe;IACxC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IAC3D,MAAM,CAAC,GAAG,MAAoE,CAAA;IAC9E,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM;QAAE,OAAO,aAAa,CAAC,CAAC,MAAM,EAAE,CAAA;IACtG,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU;QAAE,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAA;IAChH,0GAA0G;IAC1G,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,CAAA;IACtG,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,MAAe;IAC7B,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAA+C,CAAA;IACtE,OAAO,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,UAAU,IAAI,EAAE,CAAC,IAAI,YAAY,CAAA;AAC/D,CAAC;AAED,4FAA4F;AAC5F,SAAgB,gCAAgC,CAC9C,QAAgB,EAChB,WAAoB,EACpB,cAAuB;IAEvB,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;IACxC,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAC/B,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,IAAI,CAAA;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAA;IACzD,OAAO;QACL,IAAI,EAAE,sBAAc;QACpB,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC9B,OAAO,EAAE,SAAS,QAAQ,iBAAiB,QAAQ,0DAA0D;KAC9G,CAAA;AACH,CAAC","sourcesContent":["/*\n * **A twin made by one producer is not rebuilt by another.** Pure.\n *\n * ── What went wrong (2026-09-24) ─────────────────────────────────────────────\n * An import's instance id is the adapter's site id (`master.source`). Importing the warehouse connection\n * `wms-miratek` with site id `miratek` — the same as the plant connection's — landed on the running plant\n * mirror `miratek`, and `ingestMaster` gave it the warehouse structure as a new revision: 16 places,\n * 23 equipment, 17 people and 14 assets gone. The row already said who made it (`origin.source` was\n * `mes-miratek`); nothing asked.\n *\n * ── The rule (chief architect ruling, 2026-09-24) ────────────────────────────\n * Compare producers by identity, not by the whole origin: a reference is kind + source, a template is\n * kind + templateId. The same import carries more or fewer fields at different call sites (siteId,\n * spaceId), and a template re-run has new params — those are the same producer re-reading its own twin.\n *\n *   both declared, same producer     allowed (resync, re-import, re-run)\n *   both declared, different         refused, naming the producer that owns it\n *   prior undeclared, incoming not   refused — nobody can say who made it; delete it first to replace it\n *   prior declared, incoming not     refused — same reason, the other way\n *   neither declared                 allowed — the demo seed re-ingesting its own twin at boot. Closes when\n *                                    the seed declares a template origin.\n */\n\nexport const INSTANCE_TAKEN = 'instance-taken-by-another-source'\n\nexport interface ProducerRefusal {\n  code: typeof INSTANCE_TAKEN\n  params: { instance: string; producer: string }\n  message: string\n}\n\n/** Who produced a twin, as one comparable string — or undefined when the origin says nothing usable. */\nexport function producerOf(origin: unknown): string | undefined {\n  if (!origin || typeof origin !== 'object') return undefined\n  const o = origin as { kind?: unknown; source?: unknown; templateId?: unknown }\n  if (o.kind === 'reference' && typeof o.source === 'string' && o.source) return `reference:${o.source}`\n  if (o.kind === 'template' && typeof o.templateId === 'string' && o.templateId) return `template:${o.templateId}`\n  /* A kind this guard does not know is still somebody — keep it distinct rather than reading it as none. */\n  if (typeof o.kind === 'string' && o.kind) return `${o.kind}:${String(o.source ?? o.templateId ?? '')}`\n  return undefined\n}\n\nfunction nameOf(origin: unknown): string {\n  const o = (origin ?? {}) as { source?: unknown; templateId?: unknown }\n  return String(o.source ?? o.templateId ?? '') || 'undeclared'\n}\n\n/** null when `incoming` may rebuild the twin `prior` was made by; otherwise the refusal. */\nexport function refuseOverwriteByAnotherProducer(\n  instance: string,\n  priorOrigin: unknown,\n  incomingOrigin: unknown\n): ProducerRefusal | null {\n  const had = producerOf(priorOrigin)\n  const comes = producerOf(incomingOrigin)\n  if (!had && !comes) return null\n  if (had && comes && had === comes) return null\n  const producer = had ? nameOf(priorOrigin) : 'undeclared'\n  return {\n    code: INSTANCE_TAKEN,\n    params: { instance, producer },\n    message: `twin \"${instance}\" was made by ${producer} — delete it first, or import this site under another id`\n  }\n}\n"]}

package/dist-server/engine/twin-engine.js

@@ -23,6 +23,7 @@ const warm_start_js_1 = require("./warm-start.js");
 const local_declarations_js_1 = require("./local-declarations.js");
 const runtime_key_js_1 = require("./runtime-key.js");
 const twin_state_channel_js_1 = require("./twin-state-channel.js");
+const producer_guard_js_1 = require("./producer-guard.js");
 const command_routing_js_1 = require("./command-routing.js");
 const twin_instance_js_1 = require("../service/twin-instance/twin-instance.js");
 /* 자극의 집은 원본이다(ADR-0029) — 그 행을 읽고 쓴다. */
@@ -1001,6 +1002,7 @@ class TwinEngine {
             `${plan.itemCount} item(s)`,
             `${plan.equipmentCount} equipment`,
             `${plan.orderCount} open order(s)`,
+            ...(plan.foldedOrderCount ? [`${plan.foldedOrderCount} folded finished order(s)`] : []),
             `${plan.taskCount} task(s)`,
             ...(plan.personCount ? [`${plan.personCount} person(s)`] : []),
             ...(plan.assetCount ? [`${plan.assetCount} asset(s)`] : []),
@@ -3078,6 +3080,19 @@ class TwinEngine {
          * 대상이 사라졌으면(구조가 바뀌었다) 그 사실을 경고로 낸다 — 갈 곳 없는 선언을 알리지 않고 버리지 않는다.
          */
         const prior = await (0, shell_1.getRepository)(twin_instance_js_1.TwinInstance).findOne({ where: { domain: { id: domainId }, instanceId: master.source } });
+        /*
+         * A twin another producer made is not rebuilt here (engine/producer-guard.ts). Refused before anything
+         * below writes — `prior` is saved a few lines on, and refusing after that would leave it half-changed.
+         */
+        if (prior) {
+            const taken = (0, producer_guard_js_1.refuseOverwriteByAnotherProducer)(master.source, prior.origin, master.origin);
+            if (taken) {
+                const err = new Error(taken.message);
+                err.code = taken.code;
+                err.params = taken.params;
+                throw err;
+            }
+        }
         /*
          * 겹이 **둘**이다 — 현장(공간)의 것과 이 트윈의 것. 순서가 규율이다: 현장 먼저, 트윈이 나중.
          * 요금처럼 현장이 정한 수는 그 현장의 트윈 전부가 같이 읽어야 하고, 한 트윈만 다르게 두는 실험은