NJj 4dZddlmZddlmZmZddlmZmZm Z ddl m Z m Z m Z mZmZmZddlmZmZdZdZd ZeeehZeGd d Zd d d d dddee ddd d=dZee d d>dZeGddZee d d?dZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'd Z(d!Z)d"Z*d#Z+d$Z,d%Z-d&Z.d'Z/ehd(Z0e-fd d) d@d*Z1dAd+Z2d,Z3dBd-Z4d d)dAd.Z5d e/d d/ dCd0Z6dDd1Z7dEd2Z8dd3dFd4Z9eGd5d6Z: dGd7Z;d d d d d d dee d8 dHd9Ze?dy )Kudispatch.normal_fallback_callback_helper — ANU-owned normal/fallback callback registration helper + post-registration owner cross-check. task-2553+49 (§8 / §10 / 9-R.1 — 코드/파일 자동화). The actual normal/fallback callback cron is registered via the external ``cokacdir --cron`` tool (a cron-direct path that ANU cannot file-patch, 9-R.1). So the owner=ANU-key pin is enforced at the **ANU control layer**, which IS code-patchable: 1. ``build_anu_owned_callback_request`` — the dispatch prompt generator / 4-tuple registration step builds the callback registration request HERE. It is **fail-closed**: an owner key equal to the executor self key, or not a configured independent ANU key, or a non-ANU collector role, makes the request INVALID and NO command argv is produced (회장 §2/§8/§10). 2. ``verify_post_registration_owner`` — after ``cokacdir --cron`` returns, the ANU control layer re-reads the schedule_history / registry owner binding and cross-checks key/chat/role. An owner that resolved to the executor key (or any non-ANU key) at registration time -> FAIL (회장 §8 "등록 후 schedule_history/registry 에서 chat_id·key·role binding 교차 검증"). Standalone, zero-mutation, Layer A / NO-CRON (9-R.1): this module performs ZERO cron register/remove, ZERO dispatch, ZERO ``subprocess`` / ``cokacdir`` exec. It only *builds a request descriptor* and *validates* an owner binding. The authorized session executes the (ANU-keyed) cron outside this module. ) annotations) dataclassfield)ListOptionalSequence)DEFAULT_ANU_KEYSENFORCER_SCHEMAFAILPASSenforce_callback_owner is_anu_key)ExecutorSelfKeyForbidden'assert_collector_key_is_independent_anuz+dispatch.normal_fallback_callback_helper.v1normalfallbackceZdZUdZded<ded<ded<ded<ded<ded<d ed <d ed <d ed<eeZded<eddZ ddZ y)CallbackRequestuAn owner-validated callback registration request descriptor. ``argv`` is the (data-only) ``cokacdir --cron`` argument vector an authorized session would execute. It is produced ONLY when the owner binding is fail-closed valid (owner == an independent ANU key, not the executor self key). On FAIL, ``argv`` is None — no registration is possible (회장 §2/§8/§10). strschemaverdictkindtask_id owner_keychat_id Optional[str]cron_idOptional[List[str]]argvdict enforcementdefault_factory List[str]reasonsc(|jtk(SNrr selfs +dispatch/normal_fallback_callback_helper.pyokzCallbackRequest.okW||t##c $|j|j|j|j|j|j |j |jt|jnd|jt|jd S)N rrrrrrrrr!r%) rrrrrrrrlistr!r%r)s r+to_jsonzCallbackRequest.to_json[shkk||II||||||'+yy' verdict FAIL and ``argv=None`` (the cron-direct path therefore CANNOT register an executor-owned callback, 회장 §2/§8/§10). HOLD propagates (§6 conditional escalation). Nzunknown callback kind z (expected )r0udispatch_callback_contract.assert_collector_key_is_independent_anu fail-closed — owner_key 가 독립 ANU key (c119085addb0f8b7) 가 아님: )r executor_key collector_keycollector_owner_keyrDrBrCrArrErFrGrHrIuiowner enforcement did not PASS — no cron-direct registration argv produced (fail-closed, §2/§8/§10).cokacdirz--cron--atz--chat--keyz--once)rrGr,u]argv post-build cron-layer --key check failed (task-2680 수정 목표 2 cron-layer 강제): r%u4owner=independent ANU key — fail-closed gate PASS.) VALID_KINDSr HELPER_SCHEMAr r_dcc_assert_independent_anu_DCC_ExecutorSelfKeyForbiddenr CALLBACK_KIND_NORMALCALLBACK_KIND_FALLBACKrr r2r1r%assert_argv_uses_anu_key)rrrLrrpromptatrrArBrCrDrErFrGrHrI_dcc_excenfr argv_checks r+ build_anu_owned_callback_requestr^jsB8 ; L-dX[ QOP  ( #I.& !!%%(3 %!%99't)4 &!%;;')G $?/- C2 {{d KKL KLs{{#$  (   G  D"*$)hWJ d  L 79G G )rGcg}t|}d|vr|jdd|dS|jd}|dzt|k\r|jdd|dS||dz}||k7r|jd|d|d d|dSt ||s&|jd |d t |d d|dSd dgdS)uInspect a generated cokacdir cron argv and assert it uses an ANU key. ★ task-2680 수정 목표 2 (helper --key cron layer 강제): caller 가 helper 의 argv 를 받기 직전에 호출되는 fail-closed strict gate. argv 가 ``--key`` flag 를 가져야 하고, 그 value 가 owner_key 와 동일해야 하며, owner_key 는 ``is_anu_key(anu_keys)`` PASS 여야 한다. Returns dict: {"ok": bool, "reasons": [...]}. NO exception (helper layer 원칙: pure data; caller 가 verdict 로 분기). rQuSargv missing '--key' flag — cokacdir would default to session key (self-key risk)F)r,r%z%argv has '--key' but no value followsz argv --key z != owner_key u — driftz owner_key z% is not a configured ANU key (known: rKTzmargv --key value matches owner_key and owner_key is a configured ANU key (cron-layer --key strict gate PASS).)r1appendindexlenrtuple)rrrGr% argv_listidxobserveds r+rXrX s GT Iilm00 //' "C Qw#i. >?00q!H9(^I= K 00 i * &X'q * 00F  r.ceZdZUded<ded<ded<ded<ded<ded<ded <ee Zd ed <edd ZddZ y)PostRegistrationOwnerCheckrrrrr5expected_owner_is_anuobserved_owner_keyobserved_chat_id observed_roler"r$r%c(|jtk(Sr'r(r)s r+r,zPostRegistrationOwnerCheck.okEr-r.c |j|j|j|j|j|j |j t|jdS)Nrrrrjrkrlrmr%) rrrrjrkrlrmr1r%r)s r+r2z"PostRegistrationOwnerCheck.to_jsonIsQkk||||%)%?%?"&"9"9 $ 5 5!//DLL)  r.Nr3r6) r7r8r9r;rr1r%r<r,r2r=r.r+riri:sO K L Lt4GY4 $$  r.ric g}t||}|r||k(r|jd|s|jd|dt|t|k7r|jd|d|d|dk7r|jd|d |stnt} | tk(r|jd t t | |||t||| S) u)회장 §8 — 등록 후 schedule_history/registry owner 교차검증. After ``cokacdir --cron`` registers the callback, the ANU control layer re-reads the owning schedule's key/chat/role and asserts it is an independent ANU binding. An owner that resolved to the executor key (or any non-ANU key), a chat mismatch, or a non-ANU role -> FAIL (a registered executor-self callback is detected post-hoc and rejected). Read-only; the observed values are supplied by the caller from schedule_history / the durable registry. upost-registration owner key == executor self key — a cron-direct executor-self callback slipped through and is rejected (§8 post-reg owner cross-check / §2).zpost-registration owner key uA is not a configured independent ANU key (§8 owner cross-check).zchat_id mismatch: registered=z expected=u (§8 binding cross-check).r?zregistered collector role=u5 != 'ANU' (§8 owner cross-check / §2 regression 5).uxpost-registration owner binding is an independent ANU key with matching chat_id and ANU role — cross-check PASS (§8).rp)rrarr r rirS) rrLrkrlrmexpected_chat_idrGr% owner_is_anurs r+verify_post_registration_ownerrtVs(G0(;L0L@ 6 *+=*@AF F  $4 55+,<+?@(++F H ((9:: : "dtG$ M  &*--.#  r.z/home/jay/workspacei<z4dispatch.normal_fallback_callback_helper.launcher.v1ANU_OWNED_READYSELF_KEY_FAIL_CLOSEDCALLBACK_PROMPT_TOO_LARGECANONICAL_ROOT_INVALIDOWNER_ENFORCEMENT_FAILEDr FAIL_CLOSED COLLECTOR_ANU%RECOVERY_ONLY_NO_FINAL_REPORT_TRIGGER10m<> rZsha256rsummaryrr report_path result_path callback_kindcanonical_rootrDsource_attributionnowc ddl}||n|jj}||jtdt |z}|j dS)u"(now + delay_seconds) → cokacdir-compatible absolute timestamp. Returns ``"YYYY-MM-DD HH:MM:SS"`` (local time, naive — matches cokacdir server local timezone). ``now`` accepts a ``datetime`` for testability; defaults to ``datetime.now()`` (no tz conversion — cokacdir parses server local time). task-2661 Phase 2b: cokacdir live runtime rejects second-suffix `--at` values (e.g. ``"10s"``) — absolute timestamp is the only sub-minute form accepted. Fallback (``DEFAULT_AT_FALLBACK="10m"``) is untouched. rN)seconds%Y-%m-%d %H:%M:%S)datetimer timedeltamaxintstrftime) delay_secondsr_dtbasetargets r+"build_absolute_at_for_normal_delayrsP  #S\\5E5E5GD CMM#a]1C*DME EF ??. //r.c|rt|tsy|j}|syd|vr d|vrd|vry|jry|dj }|dd}|r!|j dddjsy t |}|d k(r t|S|d k(rt|d zS|d k(rt|d zS|dk(rt|dzSy#t$rYywxYw)uKcokacdir relative-time string → seconds. Absolute / unparseable → None.N -:.r>r`smrhidiQ) isinstancerstripisdigitlowerreplacefloat ValueErrorr)rZrunitbodyns r+parse_at_secondsrs ZC(  A  axC1H yy{ R5;;=D Sb6D t||CQ/779 $K s{1v  s{1r6{ s{1t8} s{1u9~  s C C#"C#rc|rt|tsyddl} |jj|j t y#t $rYywxYw)z6True iff ``at`` parses as cokacdir absolute timestamp.FrNT)rrrstrptimer_ABSOLUTE_AT_PATTERNr)rZrs r+is_absolute_atrsI ZC( bhhj*>? s.A AAct|syddl}||n|jj}|jj|j t }t ||z jS)zHSeconds from ``now`` to absolute ``at``. None if ``at`` is not absolute.Nr)rrrrrrr total_seconds)rZrrrrs r+absolute_at_delay_secondsrs] "  #S\\5E5E5GD \\ " "288:/C DF  ,,. //r.)reasonthreshold_secondsrcbt|rt||}n t|}dd||dd}|tk7rd|d<|S|d|d<|St|s|d krd |d <d |d<d |d|d<|S||krd|d<|S|r t |j rd|d<|Sd |d <d|d<d |d|d|d<|S)unormal kind + delay>threshold + reason 없음 → warning 발급. 절대시각 ``at`` 도 (target - now) 로 환산하여 lint 한다. fallback kind / threshold 이내 / reason 제공 시 warning=False. rFOKr>)warningcoderrmessageSKIP_NON_NORMALr SKIP_UNPARSEDrTr%UNSUPPORTED_SUB_MINUTE_RELATIVE_DELAYznormal callback delay z^ (< 60s) must use absolute timestamp (cokacdir live runtime rejects relative sub-minute forms)rWITHIN_THRESHOLDREASON_PROVIDEDNORMAL_DELAY_REASON_REQUIREDzs > uLs threshold · reason 누락 (★ task-2661 Phase 2b lint · enforce 아님))rrrrVrr)rrZrrrsecsouts r+lint_normal_callback_delayrsb(5#  C ##'F   |%F   " $)I=F $RF+H I I    (F   #f+##%'F  C N0CK d+<*=>: ; N Jr.c>t|xsdjdS)u&callback prompt 의 UTF-8 byte 길이.r>zutf-8)rcencode)rYs r+callback_prompt_utf8_bytesrJs  "$$W- ..r.c|xsdjDcgc]#}|js|j%}}|sy|D]5}d|vry|jdddj}|tvs5yycc}w)uprompt 가 envelope-only 인가 — 모든 비공백 line 이 `key=value` 형태이고 key 가 ENVELOPE_ALLOWED_KEYS 에 속하면 True (자유 지시문 금지, 회장 §5.6 envelope-only).r>F=r`rT) splitlinesrsplitENVELOPE_ALLOWED_KEYS)rYlnlineskeys r+is_envelope_onlyrOs$*rTFzcallback prompt z bytes > u5 (CALLBACK_PROMPT_TOO_LARGE fail-closed, §5.5/§10).ENVELOPE_VIOLATIONu5callback prompt 가 envelope-only 가 아님 (§5.6).)r, utf8_byteschars too_large envelope_onlystatusr%)rrcCALLBACK_PROMPT_MAX_BYTESr STATUS_CALLBACK_PROMPT_TOO_LARGEra) rYrutf8rrenv_onlyr%rr,s r+validate_callback_promptr_s &f -D  " E00I'HG F B 1tfI.G-HIC C   T>)FNOuW r.ceZdZUded<ded<ded<ded<ded<ded<ded<ded <d ed <d ed <ded<dZded<eeZded<eddZ ddZ y)LaunchDecisionrrrrrrrrrr5canonical_root_correctedrrr contract_fieldsNzOptional[dict]requestr"r$r%c(|jtk(Sr')r LAUNCH_PASSr)s r+r,zLaunchDecision.oks||{**r.cx|j|j|j|j|j|j t |j|j|j|jt|jnd|j|jt|jd S)N rrrrrrrrrrrrr%)rrrrrrrrrrrr1rrr%r)s r+r2zLaunchDecision.to_jsonskk||kkII||4<<("11(,(E(E'+yy') rcallback_prompt_charscallback_cron_idcallback_registration_status callback_roleenvelope_only_compliancefallback_prompt_utf8_bytesfallback_safety_net_registered'fallback_safety_net_role_single_purpose)rrcCALLBACK_ROLE_COLLECTOR_ANUr5FALLBACK_ROLE_SINGLE_PURPOSEcallback_promptrrrrfallback_promptfallback_registereds r+_contract_fieldsrsO 'A&Q!$_%:!;#(.4$($7&@AVTV&W*./B*C3O  r.)rrrArBrCrrrGc2g}d}|st}d}|jdnd|tk7r[t|||tt || xsdd}t t tt|||t||dd|d|dtd g St|| }|d rLt|||t|d | xsdd}t t tt|||t|||d||d S| xs|d} | xs|d} | xs|d} | |tk(r| n| }t||||t||||| | | | }|tk(xr |j}|jrt}t }|jdnUt}||k(rt"}|jdnt$}|jd|j'|j(t|||||d | xsd|}t t |||||t||||j*||j-| S)uo단일 callback/fallback 런타임 launcher (회장 §3 launcher 단일화). fail-closed 순서: canonical root → prompt byte/envelope → owner enforce (build_anu_owned_callback_request 경유). owner==executor self-key 면 SELF_KEY_FAIL_CLOSED (argv=None). ANU key 만 PASS. 실 cron 발사/ subprocess 0 — argv(데이터)만 생성한다. FTu<canonical_root 미지정 → /home/jay/workspace 로 교정.r>rNzcanonical_root=z != u → fail-closed (§5.9).) rrrrrrrrrrrr%rrrr%z ::dispatchz::normalz ::fallback) rrrLrrrYrZrrArBrCrGu7owner=ANU key — launcher PASS, ANU-owned argv 생성.uKowner_key == executor self key → SELF_KEY_FAIL_CLOSED (argv=None, §5.3).u3owner enforcement FAIL → fail-closed (argv=None).r)CANONICAL_ROOTrarSTATUS_CANONICAL_ROOT_INVALIDrrLAUNCHER_SCHEMALAUNCH_FAIL_CLOSEDrrrrVr^rWr,STATUS_ANU_OWNED_READYrSTATUS_SELF_KEY_FAIL_CLOSEDSTATUS_OWNER_ENFORCEMENT_FAILEDextendr%rr2)rrrLrrrYrZrrrArBrCrrrGr%root_correctedcfpvreqrrrs r+launch_callbackrss2GN 'UV > ) "w0*62+1ru N ",>0tWW)Er&~&8^3$W)Nr2i= B B(AgYj+A7OgYh;O 9 Sy =S/37K/K+1  + 7S\&R*:!9";  C #99Dcff vv'PQ$  $0F NNh i4F NNP Qs{{# T76)?;Pb/ 1B T9c'l% XXr3;;='  SSr.)"rSr rVrWrRrr^rirtrrrrrrrrrrrrrrrrDEFAULT_AT_NORMAL_DELAY_SECONDSDEFAULT_AT_FALLBACK%NORMAL_DELAY_REASON_THRESHOLD_SECONDSrrrrrmainc ddl}ddl}ddl}|jd}|j dd}|j d}|j ddtt |j d d |j d d |j d d |j dd |j dd |j dd|j ddd}|j |dd|j dd|j ddd|j|}|j} | )|jtk(rtt} nt} t!|j| |j"} | j%dr/|j&j)d| j%dd d!t+|j|j,|j.|j0|j2|j4| |j6|j8|j: " } t=|j?| jAd#$| jBrdSd%S)&Nrz(dispatch.normal_fallback_callback_helper)progcmdT)destrequiredlaunchz--kind)r choicesz --task-id)r z--executor-keyz --owner-keyz --chat-idz--promptrP)defaultz--canonical-rootz --cron-idr)r rz--no-require-envelope store_true)actionz--delay-reasonuPnormal callback delay>60s 시 lint warning 억제용 reason (★ enforce 아님))rhelp)rrz[task-2661 lint warning] rr> ) rrrLrrrYrZrrrF) ensure_ascii)"argparsejsonsysArgumentParseradd_subparsers add_parser add_argumentsortedrR parse_argsrZrrVrrrr delay_reasongetstderrwriterrrLrrrYrrno_require_envelopeprintdumpsr2r,) rr_json_sysapsublp _cron_flagaat_valuelintdecs r+rrDs//  &P QB    6C  !BOOHtVK5HOIOOK$O/OO$tO4OOMDO1OOK$O/OOJO. OOFDO)OO&O5&JOOJYO=OO+LOAOO$dkm dAttH 66) )9:YZH*H %affhq~~ ND xx  '2(>'?r B   VVQYYQ^^++qyyh''222  4C  %++ckkm%+ 891Ar.__main__)$rrrrrLrrrrrrYrrZrrrrArrBrrCrrDrrEr5rFrrG Sequence[str]rHr5rIr5r4r)rr0rrrGr0r4r )rrrLrrkrrlrrmrrrrrGr0r4ri)rrr4r)rZrr4z Optional[int])rZrr4r5) rrrZrrrrrr4r )rYrr4r)rYrr4r5)rYrrr5r4r )rrrrrrrr5rrrr5r4r ) rrrrrLrrrrrrYrrZrrrrrrArrBrrCrrrrr5rGr0r4rr')rrr4r)Ar: __future__r dataclassesrrtypingrrr dispatch.callback_owner_enforcerr r r r r r!anu_v3.dispatch_callback_contractrrUrrTrSrVrW frozensetrRrrdr^rXrirtrrrrrrrrrrrrrrrrrrrrrrrrrrrr__all__rr7 SystemExitr=r.r+r9s\6#(++& > #-/EFG  % %  % b".2/3(,,#$45 $%_ __ _  _  _ _ ___,_ -__"&__ !_"#_$%_&'_L$$45 + ++ +  +\     F$$45: :: :  :  ::: :D' H+4#> 8"< "-F #%(*%"#90 00 06D+ /30"!B 4 4 4  4  4 4n/  GK: " "  " J$(;>*.374%)!&*.2/3%)!#$45!gS gSgS gS  gS  gS gS gS"gSgS$gS,gS -gS#gSgS !gS"#gST$ N*Z z TV r.