,j8 UdZddlmZddlmZmZddlmZmZm Z m Z m Z dZ e e hZded<ddZd Zd Zd Zd Zd ZdZdZdZdZeGddZ ddZddZdeed ddZgdZy)uutils.callback_source_cross_checker — 4 source cross-check for callback authority verification (task-2646 CALLBACK_REGISTRATION_AUTHORITY_GATE). ANCHOR-3: 4 source cross-check: 1. schedule_history_records — /home/jay/.cokacdir/schedule_history/.log 2. cron_history_records — ANU key + suspect self-key cron-history 3. envelope — callback prompt original text (collector_key) 4. result_artifact — result.json / report / ledger entry ANCHOR-4: one-shot cron fire after cron-list 0 → CRON_LIST_AUTODELETED_FIRED (never conclude CALLBACK_MISSING from cron-list alone) Layer A / NO-CRON / NO-WRITE / NO-SUBPROCESS: pure function, zero IO. All inputs are pre-parsed dicts/lists supplied by the caller. ) annotations) dataclassfield)AnyDictListOptionalSequencec119085addb0f8b7 frozensetDEFAULT_ANU_KEYSc6t|xr |t|vS)z;True iff key is a non-empty configured independent ANU key.)boolset)keyanu_keyss T/home/jay/workspace/.worktrees/task-2646-dev3/utils/callback_source_cross_checker.py is_anu_keyrs 9 -H --z&utils.callback_source_cross_checker.v1PASSFAILCALLBACK_MISSINGCRON_LIST_AUTODELETED_FIREDSCHEDULE_HISTORY_PENDINGSOURCE_CROSS_CHECK_PARTIALOWNER_KEY_VERIFIEDRESULT_ARTIFACT_SELF_ATTESTEDceZdZUdZded<ded<ded<ded<ded<d ed <d ed <d ed<d ed<ded<d ed<eeZd ed<eddZ ddZ y)CrossCheckResultz!Result of a 4-source cross-check.strschemaverdictstateintsource_count_presentsource_count_absentrschedule_history_presentz List[str]cron_history_owner_keys Optional[str]envelope_collector_keyresult_artifact_presentOptional[bool]cron_list_presentactual_owner_key)default_factoryreasonsc(|jtk(S)N)r" VERDICT_PASSselfs rokzCrossCheckResult.okCs|||++rc4|j|j|j|j|j|j t |j|j|j|j|jt |jd S)N r!r"r#r%r&r'r(r*r+r-r.r0) r!r"r#r%r&r'listr(r*r+r-r.r0r3s rto_jsonzCrossCheckResult.to_jsonGszkk||ZZ$($=$=#'#;#;(,(E(E'+D,H,H'I&*&A&A'+'C'C!%!7!7 $ 5 5DLL)  rNreturnr)r;dict) __name__ __module__ __qualname____doc____annotations__rr8r0propertyr5r9rrrr2sj+ K L J""&&))!!%%##t4GY4 ,, rrc|jD]\}}|s t||s|cS|jD] \}}|s |cSy)uExtract actual owner key from cron-history records. Priority: 1. ANU key found → return that key 2. suspect self-key found → return that key 3. Neither found → return None cron_history_records format: {key: [record, ...]} A non-empty list means access was granted (key is owner). An empty list or missing key means access denied (not that key). N)itemsr)cron_history_recordsrrrecordss r$_extract_owner_key_from_cron_historyrHXs\-224 W z#x0J -224 W J rcP|sy|jdxs|jdS)z)Extract collector_key from envelope dict.N collector_key owner_key)get)envelopes r_extract_envelope_collector_keyrNss%  << ( EHLL,EErN)r-rc$g}t|}|jD cgc] \} } | s |  } } } t| } t|} | du}t|}t|| ||g}d|z }t ||}t d|D}|r:|r8|j d|dtttt|||| | |||| S|dur:|r8|j d|d tttt|||| | |||| S|d k(r<|dur8|j d |d ttttd ddg| d|d| S|r<|s:| s8|j d |dtttt||dg| d|d| S|dk(r=|;|j d|d|dttttdd d| | d||| S|j d|d|d|d| d|d|d tttt |||| | |||| Scc} } w)u)Cross-check 4 sources to determine callback authority. Inputs (all pure data, no IO): - schedule_history_records: list of JSONL-parsed records from /home/jay/.cokacdir/schedule_history/.log - cron_history_records: dict mapping key → list of records (ANU key + suspect self-key, each queried separately) - envelope: dict with collector_key/owner_key from cron prompt - result_artifact: dict from result.json/report/ledger (or None) - cron_list_present: None=unknown, True=in cron-list, False=absent Classification logic (ANCHOR-3, ANCHOR-4): - All 4 absent + cron_list False → CALLBACK_MISSING (FAIL) - cron_list False + schedule_history present → CRON_LIST_AUTODELETED_FIRED (PASS) - schedule_history pending records → SCHEDULE_HISTORY_PENDING (PASS/hold) - partial sources → SOURCE_CROSS_CHECK_PARTIAL (PASS/informational) - All 4 present + actual owner extracted → OWNER_KEY_VERIFIED (PASS) - result_artifact only (no schedule_history) → RESULT_ARTIFACT_SELF_ATTESTED (FAIL) Nc3`K|]&}|jddjdv(yw)status>queuedpending scheduledN)rLlower).0rs r z&cross_check_sources..s2  h!!#'IIs,.zschedule_history for cron_id=uR has pending records → SCHEDULE_HISTORY_PENDING (hold, do not conclude missing).r7FzAcron_list_present=False but schedule_history present for cron_id=u → CRON_LIST_AUTODELETED_FIRED (one-shot cron fired and auto-deleted; not CALLBACK_MISSING). ANCHOR-4: cron-list alone cannot determine missing.rz!All 4 sources absent for cron_id=u AND cron_list_present=False → CALLBACK_MISSING (FAIL). Note: cron-list alone is not sufficient; confirmed only after 4 source cross-check (ANCHOR-3/ANCHOR-4).zVresult_artifact present but schedule_history and cron_history both absent for cron_id=u → RESULT_ARTIFACT_SELF_ATTESTED (FAIL). Bot self-attestation alone cannot confirm authority (cross-verification required, ANCHOR-3).Tz"All 4 sources present for cron_id=z, actual_owner_key=uZ extracted from cron_history → OWNER_KEY_VERIFIED (PASS, ANCHOR-3 cross-check complete).zPartial sources for cron_id=z: z/4 present (schedule_history=z, cron_history=z , envelope=z, result_artifact=u) → SOURCE_CROSS_CHECK_PARTIAL (insufficient for definitive verdict; gather more sources before concluding missing, ANCHOR-3/ANCHOR-4).)rrErNsumrHanyappendrSCHEMAr2STATE_SCHEDULE_HISTORY_PENDING!STATE_CRON_LIST_AUTODELETED_FIRED VERDICT_FAILSTATE_CALLBACK_MISSING#STATE_RESULT_ARTIFACT_SELF_ATTESTEDSTATE_OWNER_KEY_VERIFIED STATE_SOURCE_CROSS_CHECK_PARTIAL)cron_idschedule_history_recordsrFrMresult_artifactr-rr0r'kvr(cron_history_presentr*envelope_presentr+r%r&r.history_has_pendings rcross_check_sourcesrnzs=:G $$<=*002*aa** 78k"B B   3!5 3%=$;#9$;/-  q %6%%?/{;8 8   (!" !%*$ $)/!  "'?H\ "+&7 7   5!5 3%*$ $(/!  q %5%A0 < 034L L   *!" !%)$;#9$(/-   NN &wk  !567,-.$%&234M  M  .1/!9 75 7+)  u*s H H )r^r2rarrnr:)rFDict[str, List[Dict[str, Any]]]r Sequence[str]r;r))rMOptional[Dict[str, Any]]r;r))rfr rgzList[Dict[str, Any]]rFrorMrqrhrqr-r,rrpr;r) r@ __future__r dataclassesrrtypingrrrr r _ANU_KEY_2553r r rArr^r2rarbr`r_rerdrcrrHrNtuplern__all__rCrrrxs #(66 # '8)8. 2  ,$A!!;#? /&E# " "  " J96F)-#$45H H3H: H ' H . H&HHHV r