devagent-ignition 0.1.0__py3-none-any.whl

devagent_spatial/v083_native.py

@@ -0,0 +1,349 @@
+"""Native operator candidate, versioned separately so R2 remains reproducible.
+
+Reuses the V07 model/manifest/reference validators and deterministic ZIP envelope.
+Only generated UI-local selection scripts are allowed. No tag/OPC writes or
+Gateway deployment. Mapped telemetry requires explicit freshness policy.
+"""
+from __future__ import annotations
+
+import hashlib
+import json
+import os
+import tempfile
+from pathlib import Path
+
+from .engineering_expertise import review
+from .generator import ROOT
+from .ignition_native import NativeHold, _flex, _label, sha
+from .ignition_project import _zip_blob
+from .strict_json import loads
+from .v07_native import canonical, expected_members as base_members, model_sha, validate_manifest, _walk
+
+SCHEMA = 'devagent.ignition.v083.operator_policy.v1'
+CONFIRM = 'ISOLATED_OFFLINE_OPERATOR_CANDIDATE_ONLY'
+
+
+def policy_skeleton(model):
+    return {'schema': SCHEMA, 'model_sha256': model_sha(model), 'engineer': '',
+            'approval': 'PENDING_ENGINEER_REVIEW',
+            'signals': {s['id']: {'max_age_ms': None} for s in model['signals']},
+            'equipment': {e['id']: {'pe_in': None, 'pe_out': None} for e in model['equipment']}}
+
+
+def validate_policy(model, policy):
+    expected = policy_skeleton(model)
+    if not isinstance(policy, dict) or set(policy) != set(expected):
+        raise NativeHold('OPERATOR_POLICY_SCHEMA_INVALID')
+    if policy['schema'] != SCHEMA or policy['model_sha256'] != model_sha(model):
+        raise NativeHold('OPERATOR_POLICY_MODEL_MISMATCH')
+    if policy['approval'] not in ('PENDING_ENGINEER_REVIEW', 'APPROVED_FOR_ISOLATED_FAT_ONLY'):
+        raise NativeHold('OPERATOR_POLICY_APPROVAL_INVALID')
+    if not isinstance(policy['engineer'], str) or len(policy['engineer']) > 120:
+        raise NativeHold('OPERATOR_POLICY_ENGINEER_INVALID')
+    approved = policy['approval'] == 'APPROVED_FOR_ISOLATED_FAT_ONLY'
+    if approved and len(policy['engineer'].strip()) < 3:
+        raise NativeHold('OPERATOR_POLICY_ENGINEER_REQUIRED')
+    signals = {s['id']: s for s in model['signals']}
+    equipment = {e['id']: e for e in model['equipment']}
+    for key in ('signals', 'equipment'):
+        if not isinstance(policy[key], dict) or set(policy[key]) != set(expected[key]):
+            raise NativeHold('OPERATOR_POLICY_COVERAGE_MISMATCH')
+    for item in policy['signals'].values():
+        if not isinstance(item, dict) or set(item) != {'max_age_ms'}:
+            raise NativeHold('OPERATOR_FRESHNESS_SCHEMA_INVALID')
+        age = item['max_age_ms']
+        if age is not None and (not approved or type(age) is not int or not 100 <= age <= 86400000):
+            raise NativeHold('OPERATOR_FRESHNESS_REVIEW_REQUIRED')
+    associations = set()
+    for eid, item in policy['equipment'].items():
+        if not isinstance(item, dict) or set(item) != {'pe_in', 'pe_out'}:
+            raise NativeHold('OPERATOR_PE_SCHEMA_INVALID')
+        for sid in item.values():
+            if sid is None:
+                continue
+            if not isinstance(sid, str) or not approved or sid not in signals or signals[sid]['role'] != 'photoeye_blocked':
+                raise NativeHold('OPERATOR_PE_REVIEW_REQUIRED')
+            sensor = equipment.get(signals[sid]['asset_id'])
+            if sensor is None or sensor.get('floor', 1) != equipment[eid].get('floor', 1):
+                raise NativeHold('OPERATOR_PE_CROSS_FLOOR_RELATIONSHIP_UNVERIFIED')
+            if sid in associations:
+                raise NativeHold('OPERATOR_PE_ASSOCIATION_DUPLICATE')
+            associations.add(sid)
+    return policy
+
+
+def _expr(node, target, expression):
+    node.setdefault('propConfig', {})[target] = {
+        'binding': {'type': 'expr', 'config': {'expression': expression}}}
+
+
+def _button(name, text, palette, script=None):
+    node = {'type': 'ia.input.button', 'version': 0, 'meta': {'name': name},
+            'props': {'text': text, 'enabled': script is not None,
+                      'style': {'backgroundColor': palette['deep'], 'color': '#ecf5ff',
+                                'border': '1px solid '+palette['border'], 'borderRadius': '6px',
+                                'fontSize': '14px', 'minHeight': '44px', 'padding': '10px'}},
+            'position': {'basis': 'auto', 'grow': 0, 'shrink': 0}}
+    if script is not None:
+        node['events'] = {'component': {'onActionPerformed': {
+            'type': 'script', 'scope': 'G', 'config': {'script': script}}}}
+    return node
+
+
+def _floor_script(floor):
+    return '\tself.view.custom.selectedFloor = '+str(floor)+'\n\tself.view.custom.selectedAsset = ""\n'
+
+
+def _asset_script(asset):
+    return '\tself.view.custom.selectedAsset = '+json.dumps(asset)+'\n'
+
+
+def signal_expressions(signal, mapped, max_age_ms):
+    """Generate fixed expressions; bad/old/missing data never becomes a state.
+
+    Timestamp-only changes and source-time propagation must be checked in FAT.
+    No freshness interval is guessed by this compiler.
+    """
+    if not mapped:
+        return {'value': '"NOT MAPPED"', 'quality': '"NOT MAPPED"', 'timestamp': '"UNKNOWN"'}
+    raw = '{view.custom.raw.'+signal['id']+'}'
+    quality = 'toStr(qualityOf('+raw+'))'
+    timestamp = 'toStr(timestampOf('+raw+'))'
+    if max_age_ms is None:
+        return {'value': '"UNKNOWN - STALE LIMIT NOT CONFIGURED"',
+                'quality': quality, 'timestamp': timestamp}
+    age = '(toMillis(now(1000)) - toMillis(timestampOf('+raw+')))'
+    fresh = '('+age+' >= 0 && '+age+' <= '+str(max_age_ms)+')'
+    value = 'toStr('+raw+')'
+    role = signal['role']
+    if role in ('run_feedback', 'fault', 'photoeye_blocked'):
+        active = raw if signal['polarity'] == 'active_high' else '!'+raw
+        active_text, inactive_text = {
+            'run_feedback': ('RUNNING', 'STOPPED'),
+            'fault': ('FAULT ACTIVE', 'FAULT INACTIVE'),
+            'photoeye_blocked': ('BLOCKED', 'CLEAR')}[role]
+        value = 'if('+active+', '+json.dumps(active_text)+', '+json.dumps(inactive_text)+')'
+    elif role == 'run_command':
+        value = 'if('+raw+', "COMMAND ON", "COMMAND OFF")'
+    return {
+        'value': 'if(isNull('+raw+'), "UNKNOWN", if(!isGood('+raw+'), "UNKNOWN", if(!'+fresh+', "UNKNOWN - STALE", '+value+')))',
+        'quality': 'if(!isGood('+raw+'), '+quality+', if(!'+fresh+', "STALE", '+quality+'))',
+        'timestamp': timestamp}
+
+
+def operator_view(model, manifest, policy, *, _skip_audit=False):
+    approved = validate_manifest(model, manifest)
+    validate_policy(model, policy)
+    if review(model)['role_asset_mismatches']:
+        raise NativeHold('ENGINEERING_ROLE_ASSET_KIND_MISMATCH')
+    design = loads((ROOT/'design-system.json').read_text())
+    palette = design['palettes'][model.get('palette', 'r9_cyan')]
+    by_id = {s['id']: s for s in model['signals']}
+    by_asset = {e['id']: {} for e in model['equipment']}
+    for signal in model['signals']:
+        by_asset[signal['asset_id']][signal['role']] = signal
+    floors = sorted({e.get('floor', 1) for e in model['equipment']})
+    view = {'custom': {'selectedFloor': 0, 'selectedAsset': '',
+                       'raw': {sid: None for sid in approved}},
+            'params': {}, 'propConfig': {},
+            'props': {'defaultSize': {'width': 1600, 'height': 1000}}}
+    for sid, path in approved.items():
+        view['propConfig']['custom.raw.'+sid] = {
+            'binding': {'type': 'tag', 'config': {'mode': 'direct', 'tagPath': path}}}
+
+    def label(text, name, size=14, color='#ecf5ff'):
+        return _label(text, size, False, color, name=name)
+
+    def diagnostic(title, signal, name):
+        value = label('NOT MAPPED', name+'Value', color='#e6bd70')
+        quality = label('NOT MAPPED', name+'Quality', 11, palette['muted'])
+        timestamp = label('UNKNOWN', name+'Timestamp', 10, palette['muted'])
+        if signal:
+            sid = signal['id']
+            exprs = signal_expressions(signal, sid in approved, policy['signals'][sid]['max_age_ms'])
+            for node, key in ((value, 'value'), (quality, 'quality'), (timestamp, 'timestamp')):
+                _expr(node, 'props.text', exprs[key])
+            title += ' | '+sid+(' ['+signal['unit']+']' if signal.get('unit') else '')
+        return _flex([label(title, name+'Title', 12), value, quality, timestamp], name=name,
+                     style={'borderBottom': '1px solid '+palette['border'], 'padding': '8px', 'gap': '3px'})
+
+    nav = [_button('FloorAll', 'WAREHOUSE OVERVIEW', palette, _floor_script(0))]
+    nav += [_button('Floor'+str(f), 'FLOOR '+str(f), palette, _floor_script(f)) for f in floors]
+    groups = []
+    for floor in floors:
+        cards = []
+        for equipment in model['equipment']:
+            if equipment.get('floor', 1) != floor:
+                continue
+            eid = equipment['id']
+            select = _button('Select_'+eid, eid+' | '+equipment['name'], palette, _asset_script(eid))
+            _expr(select, 'props.style.borderColor', 'if({view.custom.selectedAsset} = '+json.dumps(eid)+', '+json.dumps(palette['accent'])+', '+json.dumps(palette['border'])+')')
+            rows = [select, label(equipment['kind'].upper(), 'Kind_'+eid, 11, palette['muted'])]
+            for role in ('run_feedback', 'fault'):
+                signal = by_asset[eid].get(role)
+                if signal:
+                    status = label('NOT MAPPED', role+'_'+eid)
+                    _expr(status, 'props.text', signal_expressions(signal, signal['id'] in approved,
+                          policy['signals'][signal['id']]['max_age_ms'])['value'])
+                    rows.append(status)
+            destinations = [c['to'] for c in model.get('connections', []) if c['from'] == eid]
+            if destinations:
+                rows.append(label('TO: '+', '.join(destinations), 'Flow_'+eid, 11, palette['muted']))
+            card = _flex(rows, name='Equipment_'+eid, style={'backgroundColor': palette['panel'],
+                         'padding': '10px', 'gap': '6px', 'borderRadius': '8px'})
+            card['position'] = {'basis': '260px', 'grow': 1, 'shrink': 0}
+            cards.append(card)
+        group = _flex([label('FLOOR '+str(floor), 'FloorTitle'+str(floor), 20),
+                       _flex(cards, name='EquipmentGrid'+str(floor), direction='row', style={'gap': '12px'})],
+                      name='FloorGroup'+str(floor), style={'padding': '12px', 'gap': '12px'})
+        _expr(group, 'meta.visible', '{view.custom.selectedFloor} = 0 || {view.custom.selectedFloor} = '+str(floor))
+        groups.append(group)
+    overview = _flex(groups, name='WarehouseOverview', style={'overflow': 'auto', 'minWidth': '400px'}, grow=1)
+    overview['position']['basis'] = '0px'
+
+    empty = label('SELECT EQUIPMENT', 'InspectorEmpty', 20)
+    _expr(empty, 'meta.visible', '{view.custom.selectedAsset} = ""')
+    inspectors = [empty]
+    for equipment in model['equipment']:
+        eid = equipment['id']
+        roles = by_asset[eid]
+        rows = [label(eid+' | '+equipment['name'], 'InspectorTitle_'+eid, 20),
+                label('FLOOR '+str(equipment.get('floor', 1))+' | '+equipment.get('zone', ''), 'Location_'+eid, 12)]
+        for role, title in (('run_command', 'MOTOR COMMAND (READBACK)'), ('run_feedback', 'RUN FEEDBACK'),
+                            ('motor_speed', 'MOTOR SPEED'), ('vfd_frequency', 'VFD FREQUENCY'),
+                            ('fault', 'FAULT'), ('fault_code', 'FAULT CODE')):
+            rows.append(diagnostic(title, roles.get(role), 'Diag_'+eid+'_'+role))
+        consumed = {'run_command', 'run_feedback', 'motor_speed', 'vfd_frequency', 'fault', 'fault_code'}
+        for direction in ('pe_in', 'pe_out'):
+            sid = policy['equipment'][eid][direction]
+            rows.append(diagnostic(direction.upper().replace('_', ' '), by_id.get(sid), 'Diag_'+eid+'_'+direction))
+        for role, signal in sorted(roles.items()):
+            if role not in consumed:
+                rows.append(diagnostic('DECLARED '+role.upper().replace('_', ' '), signal, 'Diag_'+eid+'_'+role))
+        rows += [label('ALARM: NOT MAPPED | lifecycle not commissioned', 'Alarm_'+eid, 12, '#e6bd70'),
+                 label('QUALITY / SOURCE TIME shown per signal', 'QualityNotice_'+eid, 11, palette['muted']),
+                 _flex([_button('Command_'+eid+'_'+action, action, palette) for action in ('START', 'STOP', 'RESET')],
+                       name='MotorCommands_'+eid, direction='row', style={'gap': '8px'}),
+                 label('CONTROL LOCKED | no command authority', 'ControlLock_'+eid, 12, '#e6bd70')]
+        panel = _flex(rows, name='Inspector_'+eid, style={'gap': '5px'})
+        _expr(panel, 'meta.visible', '{view.custom.selectedAsset} = '+json.dumps(eid))
+        inspectors.append(panel)
+    inspector = _flex(inspectors, name='EquipmentInspector', style={
+        'backgroundColor': palette['panel'], 'padding': '16px', 'overflow': 'auto', 'minWidth': '340px'})
+    inspector['position'] = {'basis': '400px', 'grow': 0, 'shrink': 0}
+    body = _flex([overview, inspector], name='OperationsBody', direction='row', grow=1,
+                 style={'gap': '14px', 'minHeight': '600px', 'alignItems': 'stretch'})
+    body['props']['wrap'] = 'nowrap'
+    root = _flex([label(model['name'], 'FacilityTitle', 26),
+                  label('ISOLATED LAB | BINDINGS NOT PHYSICALLY VERIFIED | PRODUCTION HOLD', 'Qualification', 12, '#e6bd70'),
+                  _flex(nav, name='FloorNavigation', direction='row', style={'gap': '10px'}), body],
+                 name='DevAgentOperatorRoot', style={'backgroundColor': palette['background'],
+                 'color': '#ecf5ff', 'padding': '16px', 'gap': '14px', 'overflow': 'auto'})
+    root.pop('position', None)
+    view['root'] = root
+    if not _skip_audit:
+        audit_view(model, manifest, view, policy=policy)
+    return view
+
+
+def audit_view(model, manifest, view, *, policy=None):
+    approved = validate_manifest(model, manifest)
+    floor_scripts = {'FloorAll': _floor_script(0)}
+    floor_scripts.update({'Floor'+str(f): _floor_script(f)
+                          for f in {e.get('floor', 1) for e in model['equipment']}})
+    asset_scripts = {'Select_'+e['id']: _asset_script(e['id']) for e in model['equipment']}
+    allowed_script_by_name = {**floor_scripts, **asset_scripts}
+    nodes = list(_walk(view['root']))
+    if len(nodes) > 12000:
+        raise NativeHold('OPERATOR_COMPONENT_LIMIT')
+    actual_tags = []
+    for node in [view, *nodes]:
+        if node is not view and node.get('type') not in ('ia.container.flex', 'ia.display.label', 'ia.input.button'):
+            raise NativeHold('OPERATOR_COMPONENT_NOT_ALLOWED')
+        if any(k in node for k in ('scripts', 'customMethods', 'onChange')):
+            raise NativeHold('OPERATOR_ACTIVE_FEATURE_REJECTED')
+        if 'events' in node:
+            event = node['events']
+            action = event.get('component', {}).get('onActionPerformed', {})
+            script = action.get('config', {}).get('script', '')
+            expected = {'component': {'onActionPerformed': {'type': 'script', 'scope': 'G', 'config': {'script': script}}}}
+            if (event != expected or node.get('type') != 'ia.input.button' or
+                    script != allowed_script_by_name.get(node.get('meta', {}).get('name'))):
+                raise NativeHold('OPERATOR_EVENT_NOT_UI_LOCAL')
+        if node.get('meta', {}).get('name', '').startswith('Command_'):
+            if node['props']['enabled'] is not False or 'events' in node or 'propConfig' in node:
+                raise NativeHold('OPERATOR_COMMAND_AUTHORITY_REJECTED')
+        for target, cfg in node.get('propConfig', {}).items():
+            if set(cfg) != {'binding'}:
+                raise NativeHold('OPERATOR_BINDING_FEATURE_REJECTED')
+            binding = cfg['binding']
+            if set(binding) != {'type', 'config'}:
+                raise NativeHold('OPERATOR_BINDING_FEATURE_REJECTED')
+            if binding['type'] == 'tag':
+                sid = target.removeprefix('custom.raw.')
+                if node is not view or sid not in approved or binding['config'] != {'mode': 'direct', 'tagPath': approved[sid]}:
+                    raise NativeHold('OPERATOR_TAG_NOT_APPROVED')
+                actual_tags.append(sid)
+            elif binding['type'] == 'expr':
+                if set(binding['config']) != {'expression'}:
+                    raise NativeHold('OPERATOR_EXPRESSION_CONFIG_INVALID')
+                expression = binding['config']['expression']
+                # All telemetry reads must flow through the approved raw bindings.
+                if any(token in expression.lower() for token in ('runscript', 'tag(', '{[', 'system.', 'http', 'forcequality', 'qualifiedvalue')):
+                    raise NativeHold('OPERATOR_EXPRESSION_ACCESS_REJECTED')
+            else:
+                raise NativeHold('OPERATOR_BINDING_TYPE_REJECTED')
+    if sorted(actual_tags) != sorted(approved):
+        raise NativeHold('OPERATOR_BINDING_COVERAGE_INVALID')
+    if policy is None:
+        policy = policy_skeleton(model)
+    expected_view = operator_view(model, manifest, policy, _skip_audit=True)
+    if canonical(view) != canonical(expected_view):
+        raise NativeHold('OPERATOR_VIEW_SEMANTIC_DRIFT')
+
+
+def expected_members(model, manifest, policy, reference, template_view, reference_sha, name):
+    members, meta = base_members(model, manifest, reference, template_view, reference_sha, name)
+    view_path = next(path for path in members if path.endswith('/view.json'))
+    members[view_path] = canonical(operator_view(model, manifest, policy))
+    return members, meta
+
+
+def candidate(model, manifest, policy, reference, template_view, reference_sha, name, target, *, verify=False, confirm=''):
+    if not verify and confirm != CONFIRM:
+        raise NativeHold('OPERATOR_COMPILER_CONFIRMATION_REQUIRED')
+    target = Path(target).absolute()
+    if target.is_symlink() or target.suffix != '.zip' or not target.parent.is_dir():
+        raise NativeHold('OPERATOR_TARGET_INVALID')
+    members, meta = expected_members(model, manifest, policy, reference, template_view, reference_sha, name)
+    payload = _zip_blob(members)
+    if len(payload) > 4_000_000:
+        raise NativeHold('OPERATOR_CANDIDATE_TOO_LARGE')
+    if verify:
+        if not target.is_file() or target.read_bytes() != payload:
+            raise NativeHold('OPERATOR_REPRODUCIBILITY_MISMATCH')
+    else:
+        if target.exists():
+            raise NativeHold('OPERATOR_CREATE_ONLY_TARGET_EXISTS')
+        fd, temp = tempfile.mkstemp(prefix='.v083-native-', dir=target.parent)
+        try:
+            with os.fdopen(fd, 'wb') as stream:
+                stream.write(payload)
+                stream.flush()
+                os.fsync(stream.fileno())
+            os.chmod(temp, 0o600)
+            try:
+                os.link(temp, target)
+            except FileExistsError:
+                raise NativeHold('OPERATOR_CREATE_ONLY_TARGET_EXISTS') from None
+        finally:
+            Path(temp).unlink(missing_ok=True)
+    return {'schema': 'devagent.ignition.v083.operator_candidate.v1',
+            'status': 'PASS_OFFLINE_OPERATOR_REPRODUCIBILITY_ONLY' if verify else 'PASS_OFFLINE_OPERATOR_CANDIDATE_ONLY',
+            'project_zip': str(target), 'project_sha256': sha(target), 'reference_sha256': reference_sha,
+            'model_sha256': model_sha(model), 'manifest_sha256': hashlib.sha256(canonical(manifest)).hexdigest(),
+            'policy_sha256': hashlib.sha256(canonical(policy)).hexdigest(), **meta,
+            'OFFLINE_COMPILER': 'PASS', 'AUTHENTICATED_GATEWAY_IMPORT': 'HOLD_NOT_EXECUTED',
+            'NATIVE_PERSPECTIVE_RENDER': 'HOLD_NOT_EXECUTED', 'NATIVE_EQUIPMENT_INTERACTION': 'HOLD_NOT_EXECUTED',
+            'GATEWAY_OPC_FAT': 'HOLD_NOT_EXECUTED', 'REAL_OPC_SOURCE_VALIDATION': 'HOLD_NOT_VERIFIED',
+            'PRODUCTION_APPROVAL': 'HOLD', 'command_authority': 'NONE', 'r9_native_parity': 'NOT_VERIFIED'}